@pentoshi/clai 0.6.0 → 0.7.1

package/dist/store/scope.d.ts

@@ -0,0 +1,29 @@
+export interface EngagementScope {
+    name?: string | undefined;
+    authorizedTargets: string[];
+    excludedTargets?: string[] | undefined;
+    allowedPhases?: Array<"recon" | "enumeration" | "exploitation" | "post-exploitation"> | undefined;
+    maxRate?: number | undefined;
+    maxConcurrency?: number | undefined;
+    authorizationNote?: string | undefined;
+    createdAt?: string | undefined;
+    expiresAt?: string | undefined;
+}
+export declare function loadScope(): Promise<EngagementScope | undefined>;
+export declare function saveScope(scope: EngagementScope): Promise<void>;
+export declare function clearScope(): Promise<void>;
+export declare function getScopePath(): string;
+/**
+ * Reset the cache. Used by tests so a fresh load picks up the new file.
+ */
+export declare function resetScopeCache(): void;
+/**
+ * Returns true if `target` (hostname / IP / CIDR string) is covered by any
+ * authorized entry in scope. A target is in-scope if:
+ *   - it appears literally in authorizedTargets
+ *   - it is a subdomain of an authorized hostname
+ *   - it is an IPv4 inside an authorized CIDR
+ *   - the CIDR target is exactly an authorized CIDR
+ */
+export declare function targetInScope(target: string, scope: EngagementScope): boolean;
+export declare function isScopeActive(scope: EngagementScope | undefined): scope is EngagementScope;

package/dist/store/scope.js

@@ -0,0 +1,113 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import net from "node:net";
+const scopeFile = join(homedir(), ".clai", "scope.json");
+let cached;
+let cacheLoaded = false;
+export async function loadScope() {
+    if (cacheLoaded)
+        return cached;
+    cacheLoaded = true;
+    if (!existsSync(scopeFile))
+        return undefined;
+    try {
+        const raw = await readFile(scopeFile, "utf8");
+        cached = JSON.parse(raw);
+        return cached;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function saveScope(scope) {
+    await mkdir(join(homedir(), ".clai"), { recursive: true });
+    await writeFile(scopeFile, `${JSON.stringify(scope, null, 2)}\n`, { mode: 0o600 });
+    cached = scope;
+    cacheLoaded = true;
+}
+export async function clearScope() {
+    cached = undefined;
+    cacheLoaded = true;
+    if (existsSync(scopeFile)) {
+        await writeFile(scopeFile, "", "utf8");
+    }
+}
+export function getScopePath() {
+    return scopeFile;
+}
+/**
+ * Reset the cache. Used by tests so a fresh load picks up the new file.
+ */
+export function resetScopeCache() {
+    cached = undefined;
+    cacheLoaded = false;
+}
+function ipToNumber(ip) {
+    const parts = ip.split(".").map((p) => Number(p));
+    if (parts.length !== 4 || parts.some((p) => !Number.isInteger(p) || p < 0 || p > 255)) {
+        return NaN;
+    }
+    return parts.reduce((acc, octet) => acc * 256 + octet, 0);
+}
+function ipInCidr(ip, cidr) {
+    const [base, maskRaw] = cidr.split("/");
+    if (!base || !maskRaw)
+        return false;
+    const mask = Number(maskRaw);
+    if (!Number.isInteger(mask) || mask < 0 || mask > 32)
+        return false;
+    const ipNum = ipToNumber(ip);
+    const baseNum = ipToNumber(base);
+    if (Number.isNaN(ipNum) || Number.isNaN(baseNum))
+        return false;
+    if (mask === 0)
+        return true;
+    const shift = 32 - mask;
+    // eslint-disable-next-line no-bitwise
+    return (ipNum >>> shift) === (baseNum >>> shift);
+}
+/**
+ * Returns true if `target` (hostname / IP / CIDR string) is covered by any
+ * authorized entry in scope. A target is in-scope if:
+ *   - it appears literally in authorizedTargets
+ *   - it is a subdomain of an authorized hostname
+ *   - it is an IPv4 inside an authorized CIDR
+ *   - the CIDR target is exactly an authorized CIDR
+ */
+export function targetInScope(target, scope) {
+    const trimmed = target.trim().toLowerCase();
+    if (!trimmed)
+        return false;
+    const excluded = (scope.excludedTargets ?? []).map((t) => t.toLowerCase());
+    if (excluded.some((entry) => matchEntry(trimmed, entry)))
+        return false;
+    return scope.authorizedTargets.some((entry) => matchEntry(trimmed, entry.toLowerCase()));
+}
+function matchEntry(target, entry) {
+    if (entry === target)
+        return true;
+    // CIDR membership for IPv4 targets
+    if (entry.includes("/") && net.isIPv4(target)) {
+        return ipInCidr(target, entry);
+    }
+    // Hostname suffix match (entry "example.com" covers "api.example.com")
+    if (!net.isIP(target) && !entry.includes("/")) {
+        return target === entry || target.endsWith(`.${entry}`);
+    }
+    return false;
+}
+export function isScopeActive(scope) {
+    if (!scope)
+        return false;
+    if (!scope.authorizedTargets || scope.authorizedTargets.length === 0)
+        return false;
+    if (scope.expiresAt) {
+        const expires = Date.parse(scope.expiresAt);
+        if (!Number.isNaN(expires) && Date.now() > expires)
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=scope.js.map

package/dist/store/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/store/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AAczD,IAAI,MAAmC,CAAC;AACxC,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,WAAW;QAAE,OAAO,MAAM,CAAC;IAC/B,WAAW,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAsB;IACpD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,GAAG,SAAS,CAAC;IACnB,WAAW,GAAG,IAAI,CAAC;IACnB,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,SAAS,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;IACxC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC;IACxB,sCAAsC;IACtC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAsB;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,KAAa;IAC/C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,mCAAmC;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,uEAAuE;IACvE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/fs.d.ts

@@ -1,5 +1,9 @@
 import type { ToolResult } from "../types.js";
-export declare function fsRead(path: string): Promise<ToolResult>;
+export declare function fsRead(path: string, options?: {
+    maxBytes?: number | undefined;
+}): Promise<ToolResult>;
 export declare function fsWrite(path: string, content: string): Promise<ToolResult>;
-export declare function fsList(path: string): Promise<ToolResult>;
+export declare function fsList(path: string, options?: {
+    maxEntries?: number | undefined;
+}): Promise<ToolResult>;
 export declare function fsSearch(pattern: string, path?: string): Promise<ToolResult>;

package/dist/tools/fs.js

@@ -1,9 +1,11 @@
-import { open, readFile, readdir, stat, writeFile } from "node:fs/promises";
-import { isAbsolute, relative, resolve } from "node:path";
-import { homedir } from "node:os";
+import { open, readdir, writeFile } from "node:fs/promises";
+import { relative, resolve } from "node:path";
+import { homedir, tmpdir } from "node:os";
 import { execa } from "execa";
 import { getConfig } from "../store/config.js";
-import { redactSecrets } from "../llm/provider.js";
+import { isSecretPath } from "../safety/patterns.js";
+const DEFAULT_READ_MAX_BYTES = 256 * 1024;
+const DEFAULT_LIST_MAX_ENTRIES = 500;
 function expandHome(path) {
     if (path === "~")
         return homedir();
@@ -12,81 +14,96 @@ function expandHome(path) {
     }
     return path;
 }
+/** Resolve path with tilde expansion. */
 function resolvePath(path) {
     return resolve(expandHome(path));
 }
-function configuredRoots() {
-    return [
+function ensureNotSecret(resolved) {
+    if (isSecretPath(resolved)) {
+        throw new Error(`Refusing to access secret path: ${resolved}. Block list covers ~/.ssh, ~/.gnupg, ~/.aws, ~/.kube, ~/.docker, ~/.npmrc, ~/.pypirc, .env, ~/.clai/keys.json, id_rsa, *.pem, *.key, /etc/shadow.`);
+    }
+}
+/**
+ * Decide whether a given absolute path falls inside any approved sandbox
+ * root. Roots are the configured `sandboxRoots`, the current working
+ * directory, and (for read operations only) optionally the user's home
+ * directory.
+ *
+ * `mode` flips two things:
+ *   - "read"  → home directory is included as an implicit root (so the
+ *               agent can still inspect dotfiles by name without each one
+ *               needing to be added to sandboxRoots), but the secret-path
+ *               blocklist still applies on top.
+ *   - "write" → home directory is NOT included unless explicitly added to
+ *               sandboxRoots, so a runaway agent can't drop files all over
+ *               $HOME.
+ */
+function pathInsideSandbox(resolvedPath, mode) {
+    const roots = [
         ...getConfig().sandboxRoots.map((root) => resolve(expandHome(root))),
-        resolve(process.cwd()),
+        process.cwd(),
     ];
-}
-function isWithinRoots(resolved, roots) {
+    if (mode === "read") {
+        // For reads we also accept the user's home (so dotfiles are inspectable
+        // by name, modulo the secret-path blocklist) and the OS temp dir
+        // (where shellExec stores its artifacts at ~/.clai/outputs and where
+        // tests mkdtemp into).
+        roots.push(homedir(), tmpdir());
+    }
     return roots.some((root) => {
-        const rel = relative(root, resolved);
-        return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+        const rel = relative(root, resolvedPath);
+        return (rel === "" || (!rel.startsWith("..") && !resolve(rel).startsWith("..")));
     });
 }
-function isForbiddenSecretPath(resolved) {
-    const lower = resolved.toLowerCase().replace(/\\/g, "/");
-    const home = resolve(homedir()).toLowerCase().replace(/\\/g, "/");
-    const relativeHome = lower.startsWith(home) ? lower.slice(home.length) : lower;
-    const secretSegments = [
-        "/.ssh/",
-        "/.gnupg/",
-        "/.aws/",
-        "/.kube/",
-        "/.docker/",
-        "/.config/gcloud/",
-        "/.clai/keys.json",
-    ];
-    if (secretSegments.some((segment) => relativeHome.includes(segment)))
-        return true;
-    return /(^|\/)(\.env(?:\..*)?|\.npmrc|\.pypirc|id_rsa|id_dsa|id_ecdsa|id_ed25519|.*\.pem|.*\.key)$/i.test(lower);
-}
-function ensureReadAllowed(path) {
-    const resolved = resolvePath(path);
-    if (isForbiddenSecretPath(resolved)) {
-        throw new Error(`Read blocked — path looks like a secret: ${path}`);
-    }
-    if (!isWithinRoots(resolved, configuredRoots())) {
-        throw new Error(`Read blocked — path is outside approved roots: ${path}`);
+/** Throw with a useful message when a read/list/search escapes the sandbox. */
+function ensureReadAllowed(resolved, original) {
+    ensureNotSecret(resolved);
+    // Allow opt-out for users who deliberately want unrestricted reads.
+    if (getConfig().sandboxReads === false)
+        return;
+    if (!pathInsideSandbox(resolved, "read")) {
+        throw new Error(`Read blocked — "${original}" resolves outside the approved sandbox roots. Add the path with /cwd or sandboxRoots, or set sandboxReads=false.`);
     }
-    return resolved;
 }
+/** Resolve + sandbox check for write operations. */
 function ensureWriteAllowed(path) {
     const resolved = resolvePath(path);
-    const roots = [
-        ...getConfig().sandboxRoots.map((root) => resolve(expandHome(root))),
-        resolve(homedir()),
-    ];
-    if (!isWithinRoots(resolved, roots)) {
+    ensureNotSecret(resolved);
+    if (!pathInsideSandbox(resolved, "write")) {
         throw new Error(`Write blocked — path is outside approved roots: ${path}`);
     }
     return resolved;
 }
-export async function fsRead(path) {
-    const resolved = ensureReadAllowed(path);
-    const info = await stat(resolved);
-    const maxBytes = 128 * 1024;
-    if (info.size <= maxBytes) {
-        const content = redactSecrets(await readFile(resolved, "utf8"));
-        return { ok: true, output: content, stats: { bytesRead: info.size, bytesShown: Buffer.byteLength(content) } };
-    }
+export async function fsRead(path, options = {}) {
+    const resolved = resolvePath(path);
+    ensureReadAllowed(resolved, path);
+    const maxBytes = options.maxBytes ?? DEFAULT_READ_MAX_BYTES;
     const handle = await open(resolved, "r");
     try {
-        const buffer = Buffer.alloc(maxBytes);
-        const { bytesRead } = await handle.read(buffer, 0, maxBytes, 0);
-        const preview = redactSecrets(buffer.subarray(0, bytesRead).toString("utf8"));
+        const stat = await handle.stat();
+        if (!stat.isFile()) {
+            return {
+                ok: false,
+                output: `Not a regular file: ${resolved}`,
+                exitCode: 1,
+            };
+        }
+        const cap = Math.min(stat.size, maxBytes);
+        const buffer = Buffer.alloc(cap);
+        const { bytesRead } = await handle.read(buffer, 0, cap, 0);
+        const truncated = stat.size > maxBytes;
+        const text = buffer.slice(0, bytesRead).toString("utf8");
+        const suffix = truncated
+            ? `\n... (truncated at ${maxBytes.toLocaleString()} bytes of ${stat.size.toLocaleString()})`
+            : "";
         return {
             ok: true,
-            output: `${preview}\n... file truncated at ${maxBytes} bytes (size=${info.size} bytes) ...`,
-            truncated: true,
-            stats: { bytesRead: info.size, bytesShown: bytesRead, bytesDropped: Math.max(0, info.size - bytesRead) },
+            output: `${text}${suffix}`,
+            truncated,
         };
     }
     finally {
-        await handle.close();
+        await handle.close().catch(() => undefined);
     }
 }
 export async function fsWrite(path, content) {
@@ -94,47 +111,38 @@ export async function fsWrite(path, content) {
     await writeFile(resolved, content, "utf8");
     return { ok: true, output: `Wrote ${resolved}` };
 }
-export async function fsList(path) {
-    const resolved = ensureReadAllowed(path);
+export async function fsList(path, options = {}) {
+    const resolved = resolvePath(path);
+    ensureReadAllowed(resolved, path);
+    const maxEntries = options.maxEntries ?? DEFAULT_LIST_MAX_ENTRIES;
     const entries = await readdir(resolved, { withFileTypes: true });
-    const maxEntries = 500;
-    const shown = entries.slice(0, maxEntries);
+    const truncated = entries.length > maxEntries;
+    const visible = truncated ? entries.slice(0, maxEntries) : entries;
+    const lines = visible.map((entry) => `${entry.isDirectory() ? "dir " : "file"} ${entry.name}`);
+    if (truncated) {
+        lines.push(`... (${(entries.length - maxEntries).toLocaleString()} entries omitted of ${entries.length.toLocaleString()})`);
+    }
     return {
         ok: true,
-        output: shown
-            .map((entry) => `${entry.isDirectory() ? "dir " : "file"} ${entry.name}`)
-            .join("\n") +
-            (entries.length > maxEntries
-                ? `\n... ${entries.length - maxEntries} entries omitted ...`
-                : ""),
-        truncated: entries.length > maxEntries,
-        stats: { linesRead: entries.length },
+        output: lines.join("\n"),
+        truncated,
     };
 }
 export async function fsSearch(pattern, path = process.cwd()) {
-    const resolved = ensureReadAllowed(path);
-    const maxLines = 200;
-    const formatResult = (all, exitCode) => {
-        const lines = redactSecrets(all ?? "")
-            .split(/\r?\n/)
-            .filter(Boolean);
-        const shown = lines.slice(0, maxLines);
-        return {
-            ok: exitCode === 0,
-            output: shown.join("\n") +
-                (lines.length > maxLines ? `\n... ${lines.length - maxLines} matches omitted ...` : ""),
-            exitCode,
-            truncated: lines.length > maxLines,
-            stats: { linesRead: lines.length },
-        };
-    };
+    const resolved = resolvePath(path);
+    ensureReadAllowed(resolved, path);
+    const maxLines = 50;
     try {
-        const result = await execa("rg", ["--max-count", "5", "--max-filesize", "1M", "--glob", "!.git", "-l", pattern, resolved], {
+        const result = await execa("rg", ["--max-count", "5", "--max-filesize", "1M", "-l", pattern, resolved], {
             reject: false,
             all: true,
             timeout: 15_000,
         });
-        return formatResult(result.all, result.exitCode ?? 1);
+        return {
+            ok: result.exitCode === 0,
+            output: result.all ?? "",
+            exitCode: result.exitCode,
+        };
     }
     catch {
         const result = await execa("grep", ["-R", "-l", "-m", String(maxLines), pattern, resolved], {
@@ -142,7 +150,11 @@ export async function fsSearch(pattern, path = process.cwd()) {
             all: true,
             timeout: 15_000,
         });
-        return formatResult(result.all, result.exitCode ?? 1);
+        return {
+            ok: result.exitCode === 0,
+            output: result.all ?? "",
+            exitCode: result.exitCode,
+        };
     }
 }
 //# sourceMappingURL=fs.js.map

package/dist/tools/fs.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/tools/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,GAAG,SAAS,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAe;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,MAAM,cAAc,GAAG;QACrB,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,SAAS;QACT,WAAW;QACX,kBAAkB;QAClB,kBAAkB;KACnB,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO,6FAA6F,CAAC,IAAI,CACvG,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,GAAG,SAAS,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,OAAO,EAAE,CAAC;KACnB,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,OAAO,2BAA2B,QAAQ,gBAAgB,IAAI,CAAC,IAAI,aAAa;YAC3F,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,EAAE;SACzG,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,OAAe;IAEf,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,KAAK;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;aACxE,IAAI,CAAC,IAAI,CAAC;YACX,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU;gBAC1B,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,GAAG,UAAU,sBAAsB;gBAC5D,CAAC,CAAC,EAAE,CAAC;QACT,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU;QACtC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAe,EACf,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IAEpB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,YAAY,GAAG,CAAC,GAAuB,EAAE,QAAgB,EAAc,EAAE;QAC7E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC;aACnC,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,QAAQ,KAAK,CAAC;YAClB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,GAAG,QAAQ,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ;YAClC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;SACnC,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YACzH,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC1F,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/tools/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yCAAyC;AACzC,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,oJAAoJ,CAChM,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,iBAAiB,CACxB,YAAoB,EACpB,IAAsB;IAEtB,MAAM,KAAK,GAAG;QACZ,GAAG,SAAS,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE;KACd,CAAC;IACF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,wEAAwE;QACxE,iEAAiE;QACjE,qEAAqE;QACrE,uBAAuB;QACvB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzC,OAAO,CACL,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;IAC3D,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,oEAAoE;IACpE,IAAI,SAAS,EAAE,CAAC,YAAY,KAAK,KAAK;QAAE,OAAO;IAC/C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,mHAAmH,CAC/I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,UAA6C,EAAE;IAE/C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,uBAAuB,QAAQ,EAAE;gBACzC,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC,uBAAuB,QAAQ,CAAC,cAAc,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG;YAC5F,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,IAAI,GAAG,MAAM,EAAE;YAC1B,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,OAAe;IAEf,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,UAA+C,EAAE;IAEjD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CACpE,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,cAAc,EAAE,uBAAuB,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAChH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAe,EACf,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IAEpB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YACtG,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC1F,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/http.d.ts

@@ -1,8 +1,10 @@
 import type { ToolResult } from "../types.js";
-export declare function httpFetch(url: string, options?: {
+interface FetchOptions {
     method?: string | undefined;
     body?: string | undefined;
     headers?: Record<string, string> | undefined;
     maxBytes?: number | undefined;
-    signal?: AbortSignal | undefined;
-}): Promise<ToolResult>;
+    iOwnThis?: boolean | undefined;
+}
+export declare function httpFetch(url: string, options?: FetchOptions): Promise<ToolResult>;
+export {};