@probelabs/probe 0.6.0-rc169 → 0.6.0-rc170

package/cjs/index.cjs

@@ -12522,6 +12522,50 @@ var init_ConfigurableSerdeContext = __esm({
   }
 });
 
+// node_modules/@aws-sdk/core/dist-es/submodules/protocols/structIterator.js
+function* serializingStructIterator(ns, sourceObject) {
+  if (ns.isUnitSchema()) {
+    return;
+  }
+  const struct2 = ns.getSchema();
+  for (let i4 = 0; i4 < struct2[4].length; ++i4) {
+    const key = struct2[4][i4];
+    const memberNs = new NormalizedSchema([struct2[5][i4], 0], key);
+    if (!(key in sourceObject) && !memberNs.isIdempotencyToken()) {
+      continue;
+    }
+    yield [key, memberNs];
+  }
+}
+function* deserializingStructIterator(ns, sourceObject, nameTrait) {
+  if (ns.isUnitSchema()) {
+    return;
+  }
+  const struct2 = ns.getSchema();
+  let keysRemaining = Object.keys(sourceObject).length;
+  for (let i4 = 0; i4 < struct2[4].length; ++i4) {
+    if (keysRemaining === 0) {
+      break;
+    }
+    const key = struct2[4][i4];
+    const memberNs = new NormalizedSchema([struct2[5][i4], 0], key);
+    let serializationKey = key;
+    if (nameTrait) {
+      serializationKey = memberNs.getMergedTraits()[nameTrait] ?? key;
+    }
+    if (!(serializationKey in sourceObject)) {
+      continue;
+    }
+    yield [key, memberNs];
+    keysRemaining -= 1;
+  }
+}
+var init_structIterator = __esm({
+  "node_modules/@aws-sdk/core/dist-es/submodules/protocols/structIterator.js"() {
+    init_schema();
+  }
+});
+
 // node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/jsonReviver.js
 function jsonReviver(key, value, context) {
   if (context?.source) {
@@ -12624,6 +12668,7 @@ var init_JsonShapeDeserializer = __esm({
     init_serde();
     import_util_base644 = __toESM(require_dist_cjs12());
     init_ConfigurableSerdeContext();
+    init_structIterator();
     init_jsonReviver();
     init_parseJsonBody();
     JsonShapeDeserializer = class extends SerdeContextConfig {
@@ -12663,7 +12708,7 @@ var init_JsonShapeDeserializer = __esm({
           return out;
         } else if (ns.isStructSchema() && isObject2) {
           const out = {};
-          for (const [memberName, memberSchema] of ns.structIterator()) {
+          for (const [memberName, memberSchema] of deserializingStructIterator(ns, value, this.settings.jsonName ? "jsonName" : false)) {
             const fromKey = this.settings.jsonName ? memberSchema.getMergedTraits().jsonName ?? memberName : memberName;
             const deserializedValue = this._read(memberSchema, value[fromKey]);
             if (deserializedValue != null) {
@@ -12802,6 +12847,7 @@ var init_JsonShapeSerializer = __esm({
     init_serde();
     import_util_base645 = __toESM(require_dist_cjs12());
     init_ConfigurableSerdeContext();
+    init_structIterator();
     init_jsonReplacer();
     JsonShapeSerializer = class extends SerdeContextConfig {
       settings;
@@ -12855,10 +12901,10 @@ var init_JsonShapeSerializer = __esm({
           return out;
         } else if (ns.isStructSchema() && isObject2) {
           const out = {};
-          for (const [memberName, memberSchema] of ns.structIterator()) {
-            const targetKey = this.settings.jsonName ? memberSchema.getMergedTraits().jsonName ?? memberName : memberName;
+          for (const [memberName, memberSchema] of serializingStructIterator(ns, value)) {
             const serializableValue = this._write(memberSchema, value[memberName], ns);
             if (serializableValue !== void 0) {
+              const targetKey = this.settings.jsonName ? memberSchema.getMergedTraits().jsonName ?? memberName : memberName;
               out[targetKey] = serializableValue;
             }
           }
@@ -14275,6 +14321,7 @@ var init_QueryShapeSerializer = __esm({
     import_smithy_client5 = __toESM(require_dist_cjs27());
     import_util_base646 = __toESM(require_dist_cjs12());
     init_ConfigurableSerdeContext();
+    init_structIterator();
     QueryShapeSerializer = class extends SerdeContextConfig {
       settings;
       buffer;
@@ -14374,7 +14421,7 @@ var init_QueryShapeSerializer = __esm({
           }
         } else if (ns.isStructSchema()) {
           if (value && typeof value === "object") {
-            for (const [memberName, member2] of ns.structIterator()) {
+            for (const [memberName, member2] of serializingStructIterator(ns, value)) {
               if (value[memberName] == null && !member2.isIdempotencyToken()) {
                 continue;
               }
@@ -14650,6 +14697,7 @@ var init_XmlShapeSerializer = __esm({
     import_smithy_client7 = __toESM(require_dist_cjs27());
     import_util_base647 = __toESM(require_dist_cjs12());
     init_ConfigurableSerdeContext();
+    init_structIterator();
     XmlShapeSerializer = class extends SerdeContextConfig {
       settings;
       stringBuffer;
@@ -14701,7 +14749,7 @@ var init_XmlShapeSerializer = __esm({
         }
         const structXmlNode = import_xml_builder3.XmlNode.of(name14);
         const [xmlnsAttr, xmlns] = this.getXmlnsAttribute(ns, parentXmlns);
-        for (const [memberName, memberSchema] of ns.structIterator()) {
+        for (const [memberName, memberSchema] of serializingStructIterator(ns, value)) {
           const val = value[memberName];
           if (val != null || memberSchema.isIdempotencyToken()) {
             if (memberSchema.getMergedTraits().xmlAttribute) {
@@ -18445,7 +18493,7 @@ var require_package2 = __commonJS({
     module2.exports = {
       name: "@aws-sdk/client-bedrock-runtime",
       description: "AWS SDK for JavaScript Bedrock Runtime Client for Node.js, Browser and React Native",
-      version: "3.938.0",
+      version: "3.940.0",
       scripts: {
         build: "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
         "build:cjs": "node ../../scripts/compilation/inline client-bedrock-runtime",
@@ -18464,21 +18512,21 @@ var require_package2 = __commonJS({
       dependencies: {
         "@aws-crypto/sha256-browser": "5.2.0",
         "@aws-crypto/sha256-js": "5.2.0",
-        "@aws-sdk/core": "3.936.0",
-        "@aws-sdk/credential-provider-node": "3.936.0",
+        "@aws-sdk/core": "3.940.0",
+        "@aws-sdk/credential-provider-node": "3.940.0",
         "@aws-sdk/eventstream-handler-node": "3.936.0",
         "@aws-sdk/middleware-eventstream": "3.936.0",
         "@aws-sdk/middleware-host-header": "3.936.0",
         "@aws-sdk/middleware-logger": "3.936.0",
         "@aws-sdk/middleware-recursion-detection": "3.936.0",
-        "@aws-sdk/middleware-user-agent": "3.936.0",
+        "@aws-sdk/middleware-user-agent": "3.940.0",
         "@aws-sdk/middleware-websocket": "3.936.0",
         "@aws-sdk/region-config-resolver": "3.936.0",
-        "@aws-sdk/token-providers": "3.936.0",
+        "@aws-sdk/token-providers": "3.940.0",
         "@aws-sdk/types": "3.936.0",
         "@aws-sdk/util-endpoints": "3.936.0",
         "@aws-sdk/util-user-agent-browser": "3.936.0",
-        "@aws-sdk/util-user-agent-node": "3.936.0",
+        "@aws-sdk/util-user-agent-node": "3.940.0",
         "@smithy/config-resolver": "^4.4.3",
         "@smithy/core": "^3.18.5",
         "@smithy/eventstream-serde-browser": "^4.2.5",
@@ -19225,7 +19273,7 @@ var init_package = __esm({
   "node_modules/@aws-sdk/nested-clients/package.json"() {
     package_default = {
       name: "@aws-sdk/nested-clients",
-      version: "3.936.0",
+      version: "3.940.0",
       description: "Nested clients for AWS SDK packages.",
       main: "./dist-cjs/index.js",
       module: "./dist-es/index.js",
@@ -19254,16 +19302,16 @@ var init_package = __esm({
       dependencies: {
         "@aws-crypto/sha256-browser": "5.2.0",
         "@aws-crypto/sha256-js": "5.2.0",
-        "@aws-sdk/core": "3.936.0",
+        "@aws-sdk/core": "3.940.0",
         "@aws-sdk/middleware-host-header": "3.936.0",
         "@aws-sdk/middleware-logger": "3.936.0",
         "@aws-sdk/middleware-recursion-detection": "3.936.0",
-        "@aws-sdk/middleware-user-agent": "3.936.0",
+        "@aws-sdk/middleware-user-agent": "3.940.0",
         "@aws-sdk/region-config-resolver": "3.936.0",
         "@aws-sdk/types": "3.936.0",
         "@aws-sdk/util-endpoints": "3.936.0",
         "@aws-sdk/util-user-agent-browser": "3.936.0",
-        "@aws-sdk/util-user-agent-node": "3.936.0",
+        "@aws-sdk/util-user-agent-node": "3.940.0",
         "@smithy/config-resolver": "^4.4.3",
         "@smithy/core": "^3.18.5",
         "@smithy/fetch-http-handler": "^5.3.6",
@@ -20655,7 +20703,7 @@ var require_package3 = __commonJS({
     module2.exports = {
       name: "@aws-sdk/client-sso",
       description: "AWS SDK for JavaScript Sso Client for Node.js, Browser and React Native",
-      version: "3.936.0",
+      version: "3.940.0",
       scripts: {
         build: "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
         "build:cjs": "node ../../scripts/compilation/inline client-sso",
@@ -20674,16 +20722,16 @@ var require_package3 = __commonJS({
       dependencies: {
         "@aws-crypto/sha256-browser": "5.2.0",
         "@aws-crypto/sha256-js": "5.2.0",
-        "@aws-sdk/core": "3.936.0",
+        "@aws-sdk/core": "3.940.0",
         "@aws-sdk/middleware-host-header": "3.936.0",
         "@aws-sdk/middleware-logger": "3.936.0",
         "@aws-sdk/middleware-recursion-detection": "3.936.0",
-        "@aws-sdk/middleware-user-agent": "3.936.0",
+        "@aws-sdk/middleware-user-agent": "3.940.0",
         "@aws-sdk/region-config-resolver": "3.936.0",
         "@aws-sdk/types": "3.936.0",
         "@aws-sdk/util-endpoints": "3.936.0",
         "@aws-sdk/util-user-agent-browser": "3.936.0",
-        "@aws-sdk/util-user-agent-node": "3.936.0",
+        "@aws-sdk/util-user-agent-node": "3.940.0",
         "@smithy/config-resolver": "^4.4.3",
         "@smithy/core": "^3.18.5",
         "@smithy/fetch-http-handler": "^5.3.6",
@@ -29493,7 +29541,27 @@ var init_HookManager = __esm({
 });
 
 // src/agent/imageConfig.js
-var SUPPORTED_IMAGE_EXTENSIONS, IMAGE_MIME_TYPES;
+function isFormatSupportedByProvider(extension, provider) {
+  if (!extension || typeof extension !== "string") {
+    return false;
+  }
+  if (extension.includes("/") || extension.includes("\\") || extension.includes("..")) {
+    return false;
+  }
+  const ext2 = extension.toLowerCase();
+  if (!SUPPORTED_IMAGE_EXTENSIONS.includes(ext2)) {
+    return false;
+  }
+  if (!provider || typeof provider !== "string") {
+    return true;
+  }
+  const unsupportedFormats = PROVIDER_UNSUPPORTED_FORMATS[provider];
+  if (unsupportedFormats && unsupportedFormats.includes(ext2)) {
+    return false;
+  }
+  return true;
+}
+var SUPPORTED_IMAGE_EXTENSIONS, IMAGE_MIME_TYPES, PROVIDER_UNSUPPORTED_FORMATS;
 var init_imageConfig = __esm({
   "src/agent/imageConfig.js"() {
     "use strict";
@@ -29506,6 +29574,10 @@ var init_imageConfig = __esm({
       "bmp": "image/bmp",
       "svg": "image/svg+xml"
     };
+    PROVIDER_UNSUPPORTED_FORMATS = {
+      "google": ["svg"]
+      // Google Gemini doesn't support image/svg+xml
+    };
   }
 });
 
@@ -39255,7 +39327,7 @@ var init_esm4 = __esm({
        *
        * @internal
        */
-      constructor(cwd = process.cwd(), pathImpl, sep3, { nocase, childrenCacheSize = 16 * 1024, fs: fs8 = defaultFS } = {}) {
+      constructor(cwd = process.cwd(), pathImpl, sep4, { nocase, childrenCacheSize = 16 * 1024, fs: fs8 = defaultFS } = {}) {
         this.#fs = fsFromOption(fs8);
         if (cwd instanceof URL || cwd.startsWith("file://")) {
           cwd = (0, import_node_url.fileURLToPath)(cwd);
@@ -39266,7 +39338,7 @@ var init_esm4 = __esm({
         this.#resolveCache = new ResolveCache();
         this.#resolvePosixCache = new ResolveCache();
         this.#children = new ChildrenCache(childrenCacheSize);
-        const split = cwdPath.substring(this.rootPath.length).split(sep3);
+        const split = cwdPath.substring(this.rootPath.length).split(sep4);
         if (split.length === 1 && !split[0]) {
           split.pop();
         }
@@ -59882,7 +59954,7 @@ var init_graph_builder = __esm({
       applyLinkStyles() {
         if (!this.pendingLinkStyles.length || !this.edges.length)
           return;
-        const normalize2 = (s4) => {
+        const normalize3 = (s4) => {
           const out = {};
           for (const [kRaw, vRaw] of Object.entries(s4)) {
             const k4 = kRaw.trim().toLowerCase();
@@ -59903,7 +59975,7 @@ var init_graph_builder = __esm({
           return out;
         };
         for (const cmd of this.pendingLinkStyles) {
-          const style = normalize2(cmd.props);
+          const style = normalize3(cmd.props);
           for (const idx of cmd.indices) {
             if (idx >= 0 && idx < this.edges.length) {
               const e4 = this.edges[idx];
@@ -66995,7 +67067,7 @@ var require_bk = __commonJS({
       return xs;
     }
     function buildBlockGraph(g4, layering, root2, reverseSep) {
-      var blockGraph = new Graph(), graphLabel = g4.graph(), sepFn = sep3(graphLabel.nodesep, graphLabel.edgesep, reverseSep);
+      var blockGraph = new Graph(), graphLabel = g4.graph(), sepFn = sep4(graphLabel.nodesep, graphLabel.edgesep, reverseSep);
       _.forEach(layering, function(layer) {
         var u4;
         _.forEach(layer, function(v4) {
@@ -67085,7 +67157,7 @@ var require_bk = __commonJS({
       alignCoordinates(xss, smallestWidth);
       return balance(xss, g4.graph().align);
     }
-    function sep3(nodeSep, edgeSep, reverseSep) {
+    function sep4(nodeSep, edgeSep, reverseSep) {
       return function(g4, v4, w4) {
         var vLabel = g4.node(v4);
         var wLabel = g4.node(w4);
@@ -67170,7 +67242,7 @@ var require_layout = __commonJS({
     "use strict";
     var _ = require_lodash2();
     var acyclic = require_acyclic();
-    var normalize2 = require_normalize();
+    var normalize3 = require_normalize();
     var rank = require_rank();
     var normalizeRanks = require_util().normalizeRanks;
     var parentDummyChains = require_parent_dummy_chains();
@@ -67232,7 +67304,7 @@ var require_layout = __commonJS({
         removeEdgeLabelProxies(g4);
       });
       time2("    normalize.run", function() {
-        normalize2.run(g4);
+        normalize3.run(g4);
       });
       time2("    parentDummyChains", function() {
         parentDummyChains(g4);
@@ -67259,7 +67331,7 @@ var require_layout = __commonJS({
         removeBorderNodes(g4);
       });
       time2("    normalize.undo", function() {
-        normalize2.undo(g4);
+        normalize3.undo(g4);
       });
       time2("    fixupEdgeLabelCoords", function() {
         fixupEdgeLabelCoords(g4);
@@ -73630,8 +73702,8 @@ var require_resolve = __commonJS({
       }
       return count;
     }
-    function getFullPath(resolver, id = "", normalize2) {
-      if (normalize2 !== false)
+    function getFullPath(resolver, id = "", normalize3) {
+      if (normalize3 !== false)
         id = normalizeId(id);
       const p4 = resolver.parse(id);
       return _getFullPath(resolver, p4);
@@ -74971,7 +75043,7 @@ var require_fast_uri = __commonJS({
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizeComponentEncoding, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
-    function normalize2(uri, options) {
+    function normalize3(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
         serialize(parse6(uri, options), options);
@@ -75207,7 +75279,7 @@ var require_fast_uri = __commonJS({
     }
     var fastUri = {
       SCHEMES,
-      normalize: normalize2,
+      normalize: normalize3,
       resolve: resolve5,
       resolveComponent,
       equal,
@@ -82900,6 +82972,14 @@ var init_ProbeAgent = __esm({
               if (!imagePath) {
                 throw new Error("Image path is required");
               }
+              const filename = (0, import_path7.basename)(imagePath);
+              const extension = filename.toLowerCase().split(".").pop();
+              if (!extension || !SUPPORTED_IMAGE_EXTENSIONS.includes(extension)) {
+                throw new Error(`Invalid or unsupported image extension: ${extension}. Supported formats: ${SUPPORTED_IMAGE_EXTENSIONS.join(", ")}`);
+              }
+              if (this.apiType && !isFormatSupportedByProvider(extension, this.apiType)) {
+                throw new Error(`Image format '${extension}' is not supported by the current AI provider (${this.apiType}). Try using a different image format like PNG or JPEG.`);
+              }
               const loaded = await this.loadImageIfValid(imagePath);
               if (!loaded) {
                 throw new Error(`Failed to load image: ${imagePath}. The file may not exist, be too large, have an unsupported format, or be outside allowed directories.`);
@@ -83518,12 +83598,16 @@ var init_ProbeAgent = __esm({
           let absolutePath;
           let isPathAllowed2 = false;
           if ((0, import_path7.isAbsolute)(imagePath)) {
-            absolutePath = imagePath;
-            isPathAllowed2 = allowedDirs.some((dir) => absolutePath.startsWith((0, import_path7.resolve)(dir)));
+            absolutePath = (0, import_path7.normalize)((0, import_path7.resolve)(imagePath));
+            isPathAllowed2 = allowedDirs.some((dir) => {
+              const normalizedDir = (0, import_path7.normalize)((0, import_path7.resolve)(dir));
+              return absolutePath === normalizedDir || absolutePath.startsWith(normalizedDir + import_path7.sep);
+            });
           } else {
             for (const dir of allowedDirs) {
-              const resolvedPath2 = (0, import_path7.resolve)(dir, imagePath);
-              if (resolvedPath2.startsWith((0, import_path7.resolve)(dir))) {
+              const normalizedDir = (0, import_path7.normalize)((0, import_path7.resolve)(dir));
+              const resolvedPath2 = (0, import_path7.normalize)((0, import_path7.resolve)(dir, imagePath));
+              if (resolvedPath2 === normalizedDir || resolvedPath2.startsWith(normalizedDir + import_path7.sep)) {
                 absolutePath = resolvedPath2;
                 isPathAllowed2 = true;
                 break;
@@ -84531,8 +84615,8 @@ ${toolResultContent}
                           // Pass parent session ID for tracking
                           path: this.searchPath,
                           // Inherit search path
-                          provider: this.provider,
-                          // Inherit AI provider
+                          provider: this.apiType,
+                          // Inherit AI provider (string identifier)
                           model: this.model,
                           // Inherit model
                           debug: this.debug,
@@ -84541,7 +84625,7 @@ ${toolResultContent}
                         if (this.debug) {
                           console.log(`[DEBUG] Executing delegate tool at iteration ${currentIteration}/${maxIterations}`);
                           console.log(`[DEBUG] Parent session: ${this.sessionId}`);
-                          console.log(`[DEBUG] Inherited config: path=${this.searchPath}, provider=${this.provider}, model=${this.model}`);
+                          console.log(`[DEBUG] Inherited config: path=${this.searchPath}, provider=${this.apiType}, model=${this.model}`);
                           console.log(`[DEBUG] Delegate task: ${toolParams.task?.substring(0, 100)}...`);
                         }
                         if (this.tracer) {
@@ -84608,9 +84692,6 @@ ${toolResultContent}
                       role: "user",
                       content: toolResultMessage
                     });
-                    if (toolResultContent) {
-                      await this.processImageReferences(toolResultContent);
-                    }
                     if (this.debug) {
                       console.log(`[DEBUG] Tool ${toolName} executed successfully. Result length: ${typeof toolResult === "string" ? toolResult.length : JSON.stringify(toolResult).length}`);
                     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@probelabs/probe",
-  "version": "0.6.0-rc169",
+  "version": "0.6.0-rc170",
   "description": "Node.js wrapper for the probe code search tool",
   "main": "src/index.js",
   "module": "src/index.js",

package/src/agent/ProbeAgent.js

@@ -13,11 +13,11 @@ import { randomUUID } from 'crypto';
 import { EventEmitter } from 'events';
 import { existsSync } from 'fs';
 import { readFile, stat } from 'fs/promises';
-import { resolve, isAbsolute, dirname } from 'path';
+import { resolve, isAbsolute, dirname, basename, normalize, sep } from 'path';
 import { TokenCounter } from './tokenCounter.js';
 import { InMemoryStorageAdapter } from './storage/InMemoryStorageAdapter.js';
 import { HookManager, HOOK_TYPES } from './hooks/HookManager.js';
-import { SUPPORTED_IMAGE_EXTENSIONS, IMAGE_MIME_TYPES } from './imageConfig.js';
+import { SUPPORTED_IMAGE_EXTENSIONS, IMAGE_MIME_TYPES, isFormatSupportedByProvider } from './imageConfig.js';
 import {
   createTools,
   searchToolDefinition,
@@ -475,6 +475,21 @@ export class ProbeAgent {
             throw new Error('Image path is required');
           }
 
+          // Validate extension before attempting to load
+          // Use basename to prevent path traversal attacks (e.g., 'malicious.jpg/../../../etc/passwd')
+          const filename = basename(imagePath);
+          const extension = filename.toLowerCase().split('.').pop();
+
+          // Always validate extension is in allowed list (defense-in-depth)
+          if (!extension || !SUPPORTED_IMAGE_EXTENSIONS.includes(extension)) {
+            throw new Error(`Invalid or unsupported image extension: ${extension}. Supported formats: ${SUPPORTED_IMAGE_EXTENSIONS.join(', ')}`);
+          }
+
+          // Check provider-specific format restrictions (e.g., SVG not supported by Google Gemini)
+          if (this.apiType && !isFormatSupportedByProvider(extension, this.apiType)) {
+            throw new Error(`Image format '${extension}' is not supported by the current AI provider (${this.apiType}). Try using a different image format like PNG or JPEG.`);
+          }
+
           // Load the image using the existing loadImageIfValid method
           const loaded = await this.loadImageIfValid(imagePath);
 
@@ -1262,20 +1277,28 @@ export class ProbeAgent {
       }
 
       // Security validation: check if path is within any allowed directory
+      // Use normalize() after resolve() to handle path traversal attempts (e.g., '/allowed/../etc/passwd')
       const allowedDirs = this.allowedFolders && this.allowedFolders.length > 0 ? this.allowedFolders : [process.cwd()];
-      
+
       let absolutePath;
       let isPathAllowed = false;
-      
+
       // If absolute path, check if it's within any allowed directory
       if (isAbsolute(imagePath)) {
-        absolutePath = imagePath;
-        isPathAllowed = allowedDirs.some(dir => absolutePath.startsWith(resolve(dir)));
+        // Normalize to resolve any '..' sequences
+        absolutePath = normalize(resolve(imagePath));
+        isPathAllowed = allowedDirs.some(dir => {
+          const normalizedDir = normalize(resolve(dir));
+          // Ensure the path is within the allowed directory (add separator to prevent prefix attacks)
+          return absolutePath === normalizedDir || absolutePath.startsWith(normalizedDir + sep);
+        });
       } else {
         // For relative paths, try resolving against each allowed directory
         for (const dir of allowedDirs) {
-          const resolvedPath = resolve(dir, imagePath);
-          if (resolvedPath.startsWith(resolve(dir))) {
+          const normalizedDir = normalize(resolve(dir));
+          const resolvedPath = normalize(resolve(dir, imagePath));
+          // Ensure the resolved path is within the allowed directory
+          if (resolvedPath === normalizedDir || resolvedPath.startsWith(normalizedDir + sep)) {
             absolutePath = resolvedPath;
             isPathAllowed = true;
             break;
@@ -1319,6 +1342,10 @@ export class ProbeAgent {
         return false;
       }
 
+      // Note: Provider-specific format validation (e.g., SVG not supported by Google Gemini)
+      // is handled by the readImage tool which provides explicit error messages.
+      // loadImageIfValid is a lower-level method that only checks general format support.
+
       // Determine MIME type (from shared config)
       const mimeType = IMAGE_MIME_TYPES[extension];
 
@@ -2504,7 +2531,7 @@ When troubleshooting:
                       maxIterations,
                       parentSessionId: this.sessionId,  // Pass parent session ID for tracking
                       path: this.searchPath,            // Inherit search path
-                      provider: this.provider,          // Inherit AI provider
+                      provider: this.apiType,           // Inherit AI provider (string identifier)
                       model: this.model,                // Inherit model
                       debug: this.debug,
                       tracer: this.tracer
@@ -2513,7 +2540,7 @@ When troubleshooting:
                     if (this.debug) {
                       console.log(`[DEBUG] Executing delegate tool at iteration ${currentIteration}/${maxIterations}`);
                       console.log(`[DEBUG] Parent session: ${this.sessionId}`);
-                      console.log(`[DEBUG] Inherited config: path=${this.searchPath}, provider=${this.provider}, model=${this.model}`);
+                      console.log(`[DEBUG] Inherited config: path=${this.searchPath}, provider=${this.apiType}, model=${this.model}`);
                       console.log(`[DEBUG] Delegate task: ${toolParams.task?.substring(0, 100)}...`);
                     }
                     
@@ -2597,10 +2624,10 @@ When troubleshooting:
                   content: toolResultMessage
                 });
 
-                // Process tool result for image references
-                if (toolResultContent) {
-                  await this.processImageReferences(toolResultContent);
-                }
+                // NOTE: Automatic image processing removed (GitHub issue #305)
+                // Images are now only loaded when the AI explicitly calls the readImage tool
+                // This prevents: 1) implicit behavior that users don't expect
+                //                2) crashes with unsupported MIME types (e.g., SVG on Gemini)
 
                 if (this.debug) {
                   console.log(`[DEBUG] Tool ${toolName} executed successfully. Result length: ${typeof toolResult === 'string' ? toolResult.length : JSON.stringify(toolResult).length}`);

package/src/agent/imageConfig.js

@@ -21,6 +21,12 @@ export const IMAGE_MIME_TYPES = {
   'svg': 'image/svg+xml'
 };
 
+// Provider-specific unsupported image formats
+// These providers do not support certain MIME types and will crash if they receive them
+export const PROVIDER_UNSUPPORTED_FORMATS = {
+  'google': ['svg'],  // Google Gemini doesn't support image/svg+xml
+};
+
 /**
  * Generate a regex pattern string for matching image file extensions
  * @param {string[]} extensions - Array of extensions (without dots)
@@ -38,3 +44,54 @@ export function getExtensionPattern(extensions = SUPPORTED_IMAGE_EXTENSIONS) {
 export function getMimeType(extension) {
   return IMAGE_MIME_TYPES[extension.toLowerCase()];
 }
+
+/**
+ * Check if an image extension is supported by a specific provider
+ * @param {string} extension - File extension (without dot)
+ * @param {string} provider - Provider name (e.g., 'google', 'anthropic', 'openai')
+ * @returns {boolean} True if the format is supported by the provider
+ */
+export function isFormatSupportedByProvider(extension, provider) {
+  // Validate extension parameter - must be a non-empty string without path separators
+  if (!extension || typeof extension !== 'string') {
+    return false;
+  }
+  // Sanitize: reject extensions containing path traversal characters
+  if (extension.includes('/') || extension.includes('\\') || extension.includes('..')) {
+    return false;
+  }
+
+  const ext = extension.toLowerCase();
+
+  // First check if it's a generally supported format
+  if (!SUPPORTED_IMAGE_EXTENSIONS.includes(ext)) {
+    return false;
+  }
+
+  // Handle null/undefined provider gracefully (treat as no restrictions)
+  if (!provider || typeof provider !== 'string') {
+    return true;
+  }
+
+  // Check provider-specific restrictions
+  const unsupportedFormats = PROVIDER_UNSUPPORTED_FORMATS[provider];
+  if (unsupportedFormats && unsupportedFormats.includes(ext)) {
+    return false;
+  }
+
+  return true;
+}
+
+/**
+ * Get supported image extensions for a specific provider
+ * @param {string} provider - Provider name (e.g., 'google', 'anthropic', 'openai')
+ * @returns {string[]} Array of supported extensions for this provider
+ */
+export function getSupportedExtensionsForProvider(provider) {
+  // Handle null/undefined/non-string provider gracefully (return all extensions)
+  if (!provider || typeof provider !== 'string') {
+    return [...SUPPORTED_IMAGE_EXTENSIONS];
+  }
+  const unsupportedFormats = PROVIDER_UNSUPPORTED_FORMATS[provider] || [];
+  return SUPPORTED_IMAGE_EXTENSIONS.filter(ext => !unsupportedFormats.includes(ext));
+}