@prestyj/boss 4.3.160 → 4.3.162

package/dist/{chunk-PGC5XQTC.js → chunk-A7L3ZRW2.js}

@@ -7348,21 +7348,21 @@ var require_cross_spawn = __commonJS({
     var cp = __require("child_process");
     var parse3 = require_parse();
     var enoent = require_enoent();
-    function spawn9(command, args, options2) {
+    function spawn10(command, args, options2) {
       const parsed = parse3(command, args, options2);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
-    function spawnSync2(command, args, options2) {
+    function spawnSync3(command, args, options2) {
       const parsed = parse3(command, args, options2);
       const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
-    module.exports = spawn9;
-    module.exports.spawn = spawn9;
-    module.exports.sync = spawnSync2;
+    module.exports = spawn10;
+    module.exports.spawn = spawn10;
+    module.exports.sync = spawnSync3;
     module.exports._parse = parse3;
     module.exports._enoent = enoent;
   }
@@ -65162,7 +65162,7 @@ init_esm_shims();
 
 // ../cli/dist/core/process-manager.js
 init_esm_shims();
-import { spawn } from "child_process";
+import { spawn, spawnSync } from "child_process";
 import fs from "fs";
 import fsp from "fs/promises";
 import path3 from "path";
@@ -65182,11 +65182,77 @@ function killProcessTree(pid) {
   }
 }
 
+// ../cli/dist/tools/safe-env.js
+init_esm_shims();
+var ENV_ALLOWLIST = /* @__PURE__ */ new Set([
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "LANG",
+  "LC_ALL",
+  "LC_CTYPE",
+  "TMPDIR",
+  "XDG_CONFIG_HOME",
+  "XDG_DATA_HOME",
+  "XDG_CACHE_HOME",
+  "XDG_RUNTIME_DIR",
+  "EDITOR",
+  "VISUAL",
+  "PAGER",
+  "CLICOLOR",
+  "CLICOLOR_FORCE",
+  "NO_COLOR",
+  "FORCE_COLOR",
+  // Development toolchains
+  "NODE_PATH",
+  "NVM_DIR",
+  "NPM_CONFIG_PREFIX",
+  "PNPM_HOME",
+  "GOPATH",
+  "GOROOT",
+  "CARGO_HOME",
+  "RUSTUP_HOME",
+  "PYENV_ROOT",
+  "VIRTUAL_ENV",
+  "CONDA_DEFAULT_ENV",
+  "CONDA_PREFIX",
+  "JAVA_HOME",
+  "ANDROID_HOME",
+  "ANDROID_SDK_ROOT",
+  "RUBY_VERSION",
+  "GEM_HOME",
+  "RBENV_ROOT"
+]);
+function getSafeToolEnv(sourceEnv = process.env) {
+  const env2 = { TERM: "dumb", EZ_CODER: "true" };
+  for (const key of ENV_ALLOWLIST) {
+    const value = sourceEnv[key];
+    if (value)
+      env2[key] = value;
+  }
+  return env2;
+}
+
 // ../cli/dist/core/process-manager.js
 var BG_DIR = path3.join(os2.homedir(), ".ezcoder", "bg");
+function stopProcessTree(pid, ops = {}) {
+  if ((ops.platform ?? process.platform) === "win32") {
+    (ops.spawnSync ?? spawnSync)("taskkill", ["/pid", String(pid), "/T", "/F"], {
+      stdio: "ignore"
+    });
+    return;
+  }
+  (ops.killProcessTree ?? killProcessTree)(pid);
+}
 var ProcessManager = class {
+  ops;
   processes = /* @__PURE__ */ new Map();
   children = /* @__PURE__ */ new Map();
+  constructor(ops = {}) {
+    this.ops = ops;
+  }
   async start(command, cwd2) {
     await fsp.mkdir(BG_DIR, { recursive: true });
     const id2 = crypto2.randomUUID().slice(0, 8);
@@ -65196,7 +65262,7 @@ var ProcessManager = class {
       cwd: cwd2,
       detached: true,
       stdio: ["ignore", fd3, fd3],
-      env: { ...process.env, TERM: "dumb" }
+      env: getSafeToolEnv()
     });
     fs.closeSync(fd3);
     const pid = child.pid;
@@ -65255,10 +65321,10 @@ var ProcessManager = class {
       return `Process ${id2} already exited (code ${proc.exitCode})`;
     }
     try {
-      process.kill(-proc.pid, "SIGTERM");
+      (this.ops.kill ?? process.kill)(-proc.pid, "SIGTERM");
     } catch {
       try {
-        process.kill(proc.pid, "SIGTERM");
+        (this.ops.kill ?? process.kill)(proc.pid, "SIGTERM");
       } catch {
         return `Process ${id2} already exited`;
       }
@@ -65271,7 +65337,7 @@ var ProcessManager = class {
       });
     });
     if (!exited) {
-      killProcessTree(proc.pid);
+      stopProcessTree(proc.pid, this.ops);
     }
     return `Process ${id2} stopped`;
   }
@@ -65287,7 +65353,7 @@ var ProcessManager = class {
   shutdownAll() {
     for (const [id2, proc] of this.processes) {
       if (this.children.has(id2)) {
-        killProcessTree(proc.pid);
+        stopProcessTree(proc.pid, this.ops);
         proc.exitCode = proc.exitCode ?? 1;
         this.children.delete(id2);
       }
@@ -66826,55 +66892,6 @@ ${failures.length} ${noun} skipped \u2014 re-issue ONLY these (the rest are alre
 init_esm_shims();
 var DEFAULT_TIMEOUT = 12e4;
 var MAX_OUTPUT_BYTES = 10 * 1024 * 1024;
-var ENV_ALLOWLIST = /* @__PURE__ */ new Set([
-  "PATH",
-  "HOME",
-  "USER",
-  "LOGNAME",
-  "SHELL",
-  "LANG",
-  "LC_ALL",
-  "LC_CTYPE",
-  "TMPDIR",
-  "XDG_CONFIG_HOME",
-  "XDG_DATA_HOME",
-  "XDG_CACHE_HOME",
-  "XDG_RUNTIME_DIR",
-  "EDITOR",
-  "VISUAL",
-  "PAGER",
-  "CLICOLOR",
-  "CLICOLOR_FORCE",
-  "NO_COLOR",
-  "FORCE_COLOR",
-  // Development toolchains
-  "NODE_PATH",
-  "NVM_DIR",
-  "NPM_CONFIG_PREFIX",
-  "PNPM_HOME",
-  "GOPATH",
-  "GOROOT",
-  "CARGO_HOME",
-  "RUSTUP_HOME",
-  "PYENV_ROOT",
-  "VIRTUAL_ENV",
-  "CONDA_DEFAULT_ENV",
-  "CONDA_PREFIX",
-  "JAVA_HOME",
-  "ANDROID_HOME",
-  "ANDROID_SDK_ROOT",
-  "RUBY_VERSION",
-  "GEM_HOME",
-  "RBENV_ROOT"
-]);
-function getSafeEnv() {
-  const env2 = { TERM: "dumb", EZ_CODER: "true" };
-  for (const key of ENV_ALLOWLIST) {
-    if (process.env[key])
-      env2[key] = process.env[key];
-  }
-  return env2;
-}
 var BashParams = external_exports.object({
   command: external_exports.string().describe("The bash command to execute"),
   timeout: external_exports.number().int().min(1e3).optional().describe("Timeout in milliseconds (default: 120000)"),
@@ -66904,7 +66921,7 @@ Use task_output with id="${result.id}" to read output.`;
           cwd: cwd2,
           detached: true,
           stdio: ["ignore", "pipe", "pipe"],
-          env: getSafeEnv()
+          env: getSafeToolEnv()
         });
         const chunks = [];
         let totalBytes = 0;
@@ -67043,6 +67060,7 @@ var GrepParams = external_exports.object({
 var DEFAULT_MAX_RESULTS = 50;
 var MAX_LINE_LENGTH = 500;
 var MAX_FILE_SIZE = 10 * 1024 * 1024;
+var MAX_CANDIDATE_FILES = 1e4;
 function createGrepTool(cwd2, ops = localOperations) {
   return {
     name: "grep",
@@ -67071,12 +67089,22 @@ function createGrepTool(cwd2, ops = localOperations) {
         onlyFiles: true,
         ignore: ["**/node_modules/**", "**/.git/**"],
         suppressErrors: true,
-        followSymbolicLinks: false
+        followSymbolicLinks: false,
+        objectMode: true,
+        stats: false
       });
       const results = [];
-      for (const entry of entries) {
+      let scannedCandidates = 0;
+      let candidateLimitHit = false;
+      for (const item of entries) {
         if (results.length >= maxResults)
           break;
+        if (scannedCandidates >= MAX_CANDIDATE_FILES) {
+          candidateLimitHit = true;
+          break;
+        }
+        scannedCandidates += 1;
+        const entry = typeof item === "string" ? item : item.path;
         const ext = path11.extname(entry).toLowerCase();
         if (BINARY_EXTENSIONS.has(ext))
           continue;
@@ -67084,7 +67112,7 @@ function createGrepTool(cwd2, ops = localOperations) {
         const fileResults = await searchFile(filePath, regex2, cwd2, maxResults - results.length, ops);
         results.push(...fileResults);
       }
-      return formatResults(results, maxResults);
+      return formatResults(results, maxResults, candidateLimitHit);
     }
   };
 }
@@ -67129,9 +67157,10 @@ async function searchFile(filePath, regex2, cwd2, maxResults, ops) {
   }
   return results;
 }
-function formatResults(results, maxResults) {
-  if (results.length === 0)
-    return "No matches found.";
+function formatResults(results, maxResults, candidateLimitHit = false) {
+  if (results.length === 0) {
+    return candidateLimitHit ? `No matches found. [Stopped after scanning ${MAX_CANDIDATE_FILES} candidate files]` : "No matches found.";
+  }
   let output = results.join("\n");
   if (results.length >= maxResults) {
     output += `
@@ -67141,6 +67170,10 @@ function formatResults(results, maxResults) {
     output += `
 
 ${results.length} match(es) found`;
+  }
+  if (candidateLimitHit) {
+    output += `
+[Stopped after scanning ${MAX_CANDIDATE_FILES} candidate files]`;
   }
   return output;
 }
@@ -67606,8 +67639,19 @@ function createWebFetchTool() {
             "User-Agent": "Mozilla/5.0 (compatible; EZCoder/1.0)",
             Accept: "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
           },
+          redirect: "manual",
           signal: AbortSignal.timeout(3e4)
         });
+        if (response.status >= 300 && response.status < 400) {
+          const location = response.headers.get("location");
+          if (!location)
+            return `Error: HTTP ${response.status} redirect without Location header`;
+          const redirectUrl = new URL(location, args.url).toString();
+          if (isBlockedUrl(redirectUrl)) {
+            return "Error: Redirect blocked \u2014 target URL is private/internal or unsupported.";
+          }
+          return `Error: Redirects are not followed automatically. Safe redirect target: ${redirectUrl}`;
+        }
         if (!response.ok) {
           return `Error: HTTP ${response.status} ${response.statusText}`;
         }
@@ -80475,6 +80519,8 @@ function unquoteGitPath(filePath) {
   }
 }
 async function listCandidateFiles(cwd2) {
+  if (isUnboundedRepoMapRoot(cwd2))
+    return [];
   const ignorePatterns = await loadGitignore2(cwd2);
   const ig = (0, import_ignore.default)().add(ignorePatterns);
   const entries = await (0, import_fast_glob.default)("**/*", {
@@ -80487,6 +80533,11 @@ async function listCandidateFiles(cwd2) {
   });
   return entries.filter((entry) => !BINARY_EXTENSIONS2.has(path27.extname(entry).toLowerCase())).filter((entry) => !ig.ignores(entry)).sort((a, b) => a.localeCompare(b));
 }
+function isUnboundedRepoMapRoot(cwd2) {
+  const resolvedCwd = path27.resolve(cwd2);
+  const home = process.env.HOME;
+  return resolvedCwd === path27.parse(resolvedCwd).root || !!home && resolvedCwd === path27.resolve(home);
+}
 async function loadGitignore2(cwd2) {
   const content = await fs26.readFile(path27.join(cwd2, ".gitignore"), "utf-8").catch(() => "");
   return content.split("\n").map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"));
@@ -80540,7 +80591,7 @@ function extractSignatures(content, maxSignatures) {
   return unique(signatures).slice(0, maxSignatures);
 }
 function stripTemplateLiterals(content) {
-  return content.replace(/`(?:\\.|[^`])*`/gs, "``");
+  return content.replace(/`(?:\\.|[^`\\])*`/gs, "``");
 }
 function unique(values) {
   return [...new Set(values.filter((value) => value.length > 0))];
@@ -90527,7 +90578,7 @@ var taskBarStore = createStore({
 import { createHash as createHash4 } from "crypto";
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 
 // ../cli/dist/utils/sound.js
 init_esm_shims();
@@ -96547,7 +96598,7 @@ var SIDE_BY_SIDE_MIN5 = LOGO_WIDTH4 + GAP5.length + 20;
 init_esm_shims();
 var import_jsx_runtime31 = __toESM(require_jsx_runtime(), 1);
 var import_react70 = __toESM(require_react(), 1);
-import { spawnSync } from "child_process";
+import { spawnSync as spawnSync2 } from "child_process";
 import { createRequire } from "module";
 var GAP6 = "   ";
 var LOGO_WIDTH5 = 11;
@@ -96606,13 +96657,20 @@ var HISTORY_PATH = path31.join(os10.homedir(), ".ezcoder", "setup-history.json")
 // ../cli/dist/ui/live-item-flush.js
 init_esm_shims();
 
-// ../cli/dist/core/goal-worker.js
+// ../cli/dist/core/goal-verifier.js
 init_esm_shims();
 import { spawn as spawn7 } from "child_process";
+import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
+import { join as join7 } from "path";
+var DEFAULT_GOAL_VERIFIER_TIMEOUT_MS = 10 * 60 * 1e3;
+
+// ../cli/dist/core/goal-worker.js
+init_esm_shims();
+import { spawn as spawn8 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
 import { createWriteStream, existsSync as existsSync6 } from "fs";
-import { mkdir as mkdir4 } from "fs/promises";
-import { join as join7 } from "path";
+import { mkdir as mkdir5 } from "fs/promises";
+import { join as join8 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
 
 // ../cli/dist/ui/goal-events.js
@@ -98510,7 +98568,7 @@ function createTaskTools(deps) {
 
 // src/audio.ts
 init_esm_shims();
-import { spawn as spawn8, execFileSync as execFileSync3 } from "child_process";
+import { spawn as spawn9, execFileSync as execFileSync3 } from "child_process";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import path35 from "path";
 import fs35 from "fs";
@@ -98585,7 +98643,7 @@ function trySpawn(cmd, args) {
   return new Promise((resolve4) => {
     let resolved = false;
     try {
-      const child = spawn8(cmd, args, {
+      const child = spawn9(cmd, args, {
         detached: true,
         stdio: "ignore"
       });
@@ -98644,7 +98702,7 @@ async function tryPlayOnWindowsHost(file2) {
     return new Promise((resolve4) => {
       let resolved2 = false;
       try {
-        const child = spawn8(
+        const child = spawn9(
           "powershell.exe",
           ["-NoProfile", "-WindowStyle", "Hidden", "-Command", script],
           {
@@ -99789,4 +99847,4 @@ react/cjs/react-jsx-runtime.development.js:
    * LICENSE file in the root directory of this source tree.
    *)
 */
-//# sourceMappingURL=chunk-PGC5XQTC.js.map
+//# sourceMappingURL=chunk-A7L3ZRW2.js.map