@probelabs/probe 0.6.0-rc123 → 0.6.0-rc125

package/build/agent/index.js

@@ -16001,15 +16001,16 @@ var init_probeTool = __esm({
         const { directory = ".", workingDirectory } = params;
         const baseCwd = workingDirectory || process.cwd();
         const secureBaseDir = path6.resolve(baseCwd);
+        const isDependencyPath = directory.startsWith("/dep/") || directory.startsWith("go:") || directory.startsWith("js:") || directory.startsWith("rust:");
         let targetDir;
         if (path6.isAbsolute(directory)) {
           targetDir = path6.resolve(directory);
-          if (!targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
+          if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
             throw new Error(`Path traversal attempt detected. Cannot access directory outside workspace: ${directory}`);
           }
         } else {
           targetDir = path6.resolve(secureBaseDir, directory);
-          if (!targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
+          if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
             throw new Error(`Path traversal attempt detected. Access denied: ${directory}`);
           }
         }
@@ -16073,15 +16074,16 @@ var init_probeTool = __esm({
         }
         const baseCwd = workingDirectory || process.cwd();
         const secureBaseDir = path6.resolve(baseCwd);
+        const isDependencyPath = directory.startsWith("/dep/") || directory.startsWith("go:") || directory.startsWith("js:") || directory.startsWith("rust:");
         let targetDir;
         if (path6.isAbsolute(directory)) {
           targetDir = path6.resolve(directory);
-          if (!targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
+          if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
             throw new Error(`Path traversal attempt detected. Cannot access directory outside workspace: ${directory}`);
           }
         } else {
           targetDir = path6.resolve(secureBaseDir, directory);
-          if (!targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
+          if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path6.sep) && targetDir !== secureBaseDir) {
             throw new Error(`Path traversal attempt detected. Access denied: ${directory}`);
           }
         }
@@ -28902,6 +28904,37 @@ var init_semantics = __esm({
           }
         }
       }
+      // Curly braces inside quoted label segments can be confusing because
+      // braces also delimit decision/hexagon shapes. We allow them in quoted
+      // text but suggest replacing with HTML entities so renderers remain stable.
+      checkCurlyInQuoted(contentNodes) {
+        if (!contentNodes)
+          return;
+        for (const cn of contentNodes) {
+          const ch = cn.children || {};
+          const qs = ch.QuotedString || [];
+          for (const q of qs) {
+            const raw = String(q.image || "");
+            const inner = raw.length >= 2 && (raw.startsWith('"') || raw.startsWith("'")) ? raw.slice(1, -1) : raw;
+            const i = inner.indexOf("{");
+            const j = inner.indexOf("}");
+            if (i >= 0 || j >= 0) {
+              const rel = i >= 0 ? i : j;
+              const col = (q.startColumn ?? 1) + 1 + Math.max(0, rel);
+              this.ctx.errors.push({
+                line: q.startLine ?? 1,
+                column: col,
+                severity: "warning",
+                code: "FL-LABEL-CURLY-IN-QUOTED",
+                message: "Curly braces inside quoted label text may be parsed as a shape by Mermaid. Replace { and } with HTML entities.",
+                hint: 'Use { and } for { and } inside quoted text, e.g., "tyk-trace-{id}".',
+                length: 1
+              });
+              break;
+            }
+          }
+        }
+      }
       warnParensInUnquoted(contentNodes) {
         if (!contentNodes)
           return;
@@ -28953,6 +28986,7 @@ var init_semantics = __esm({
         if (openTok) {
           this.checkEmptyContent(openTok, contentNodes.length ? contentNodes : void 0);
           this.checkDoubleInSingleQuoted(contentNodes);
+          this.checkCurlyInQuoted(contentNodes);
           this.checkBackticksInContent(contentNodes);
           this.warnParensInUnquoted(contentNodes);
           if (this.ctx.strict) {
@@ -32385,6 +32419,51 @@ function computeFixes(text, errors, level = "safe") {
       edits.push(replaceRange(text, at(e), e.length ?? 1, ""));
       continue;
     }
+    if (is("FL-LABEL-CURLY-IN-QUOTED", e)) {
+      const lineText = lineTextAt(text, e.line);
+      const caret0 = Math.max(0, e.column - 1);
+      let qOpenIdx = -1;
+      let qChar = null;
+      for (let i = caret0; i >= 0; i--) {
+        const ch2 = lineText[i];
+        const code = ch2 ? ch2.charCodeAt(0) : -1;
+        if (code === 34 || code === 39) {
+          const bs = i > 0 && lineText[i - 1] === "\\";
+          if (!bs) {
+            qOpenIdx = i;
+            qChar = ch2;
+            break;
+          }
+        }
+      }
+      if (qOpenIdx !== -1 && qChar) {
+        let qCloseIdx = -1;
+        for (let j = qOpenIdx + 1; j < lineText.length; j++) {
+          const ch2 = lineText[j];
+          const code = ch2 ? ch2.charCodeAt(0) : -1;
+          if (code === (qChar ? qChar.charCodeAt(0) : -1)) {
+            const bs = lineText[j - 1] === "\\";
+            if (!bs) {
+              qCloseIdx = j;
+              break;
+            }
+          }
+        }
+        if (qCloseIdx > qOpenIdx) {
+          const inner = lineText.slice(qOpenIdx + 1, qCloseIdx);
+          const replaced = inner.replace(/\{/g, "&#123;").replace(/\}/g, "&#125;");
+          if (replaced !== inner) {
+            edits.push({ start: { line: e.line, column: qOpenIdx + 2 }, end: { line: e.line, column: qCloseIdx + 1 }, newText: replaced });
+            continue;
+          }
+        }
+      }
+      const ch = lineText[caret0] || "";
+      const rep = ch === "{" ? "&#123;" : ch === "}" ? "&#125;" : ch;
+      if (rep !== ch)
+        edits.push(replaceRange(text, at(e), e.length ?? 1, rep));
+      continue;
+    }
     if (is("FL-LABEL-DOUBLE-IN-DOUBLE", e)) {
       const lineText = lineTextAt(text, e.line);
       const caret0 = Math.max(0, e.column - 1);
@@ -32862,6 +32941,8 @@ function computeFixes(text, errors, level = "safe") {
       const lineText = lineTextAt(text, e.line);
       const mLR = /^(\s*)Note\s+(left|right)\s+of\s+(.+?)\s+(.+)$/.exec(lineText);
       const mOver = /^(\s*)Note\s+over\s+(.+?)\s+(.+)$/.exec(lineText);
+      const mLRml = /^(\s*)Note\s+(left|right)\s+of\s+([^:]+?)\s*$/.exec(lineText);
+      const mOverml = /^(\s*)Note\s+over\s+([^:]+?)\s*$/.exec(lineText);
       let insertCol = e.column;
       if (mLR) {
         const indent = mLR[1] || "";
@@ -32871,6 +32952,26 @@ function computeFixes(text, errors, level = "safe") {
         const indent = mOver[1] || "";
         const beforeHeader = `${indent}Note over ${mOver[2]}`;
         insertCol = beforeHeader.length + 1;
+      } else if (mLRml || mOverml) {
+        const lines = text.split(/\r?\n/);
+        const headerIdx = Math.max(0, e.line - 1);
+        let endIdx = -1;
+        for (let i = headerIdx + 1; i < lines.length; i++) {
+          if (/^\s*end\s+note\s*$/i.test(lines[i] || "")) {
+            endIdx = i;
+            break;
+          }
+        }
+        const indent = (mLRml ? mLRml[1] : mOverml[1]) || "";
+        const beforeHeader = mLRml ? `${indent}Note ${mLRml[2]} of ${mLRml[3].trimEnd()}` : `${indent}Note over ${mOverml[2].trimEnd()}`;
+        const body = endIdx !== -1 ? lines.slice(headerIdx + 1, endIdx).map((s) => s.trim()).join(" ") : "";
+        const newHeader = `${beforeHeader} : ${body}`.replace(/\s+$/, "");
+        const hdrLine = lineTextAt(text, e.line);
+        edits.push({ start: { line: e.line, column: 1 }, end: { line: e.line, column: hdrLine.length + 1 }, newText: newHeader });
+        if (endIdx !== -1) {
+          edits.push({ start: { line: headerIdx + 2, column: 1 }, end: { line: endIdx + 2, column: 1 }, newText: "" });
+        }
+        continue;
       }
       const idx0 = Math.max(0, insertCol - 1);
       const nextCh = lineText[idx0] || "";

package/build/agent/probeTool.js

@@ -224,19 +224,27 @@ export const listFilesTool = {
     // Security: Validate path to prevent traversal attacks
     const secureBaseDir = path.resolve(baseCwd);
 
+    // Check if this is a dependency path that should bypass workspace restrictions
+    const isDependencyPath = directory.startsWith('/dep/') ||
+                            directory.startsWith('go:') ||
+                            directory.startsWith('js:') ||
+                            directory.startsWith('rust:');
+
     // If directory is absolute, check if it's within the secure base directory
     // If it's relative, resolve it against the secure base directory
     let targetDir;
     if (path.isAbsolute(directory)) {
       targetDir = path.resolve(directory);
       // Check if the absolute path is within the secure base directory
-      if (!targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
+      // Allow dependency paths to bypass this restriction
+      if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
         throw new Error(`Path traversal attempt detected. Cannot access directory outside workspace: ${directory}`);
       }
     } else {
       targetDir = path.resolve(secureBaseDir, directory);
       // Double-check the resolved path is still within the secure base directory
-      if (!targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
+      // Allow dependency paths to bypass this restriction
+      if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
         throw new Error(`Path traversal attempt detected. Access denied: ${directory}`);
       }
     }
@@ -323,19 +331,27 @@ export const searchFilesTool = {
     const baseCwd = workingDirectory || process.cwd();
     const secureBaseDir = path.resolve(baseCwd);
 
+    // Check if this is a dependency path that should bypass workspace restrictions
+    const isDependencyPath = directory.startsWith('/dep/') ||
+                            directory.startsWith('go:') ||
+                            directory.startsWith('js:') ||
+                            directory.startsWith('rust:');
+
     // If directory is absolute, check if it's within the secure base directory
     // If it's relative, resolve it against the secure base directory
     let targetDir;
     if (path.isAbsolute(directory)) {
       targetDir = path.resolve(directory);
       // Check if the absolute path is within the secure base directory
-      if (!targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
+      // Allow dependency paths to bypass this restriction
+      if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
         throw new Error(`Path traversal attempt detected. Cannot access directory outside workspace: ${directory}`);
       }
     } else {
       targetDir = path.resolve(secureBaseDir, directory);
       // Double-check the resolved path is still within the secure base directory
-      if (!targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
+      // Allow dependency paths to bypass this restriction
+      if (!isDependencyPath && !targetDir.startsWith(secureBaseDir + path.sep) && targetDir !== secureBaseDir) {
         throw new Error(`Path traversal attempt detected. Access denied: ${directory}`);
       }
     }