@proxysoul/soulforge 1.9.0 → 2.1.0

package/dist/workers/intelligence.worker.js

@@ -22689,6 +22689,7 @@ var init_tree_sitter2 = __esm(() => {
     tier = 3;
     parser = null;
     languages = new Map;
+    failedLanguages = new Set;
     initPromise = null;
     cache = null;
     treeCache = new Map;
@@ -23400,9 +23401,12 @@ var init_tree_sitter2 = __esm(() => {
       return join4(BUNDLED_WASM_DIR, basename3);
     }
     async doInit() {
-      const wasmPath = this.resolveWasm("tree-sitter.wasm");
+      let wasmPath = this.resolveWasm("tree-sitter.wasm");
       if (!existsSync2(wasmPath)) {
-        throw new Error(`tree-sitter.wasm not found at ${wasmPath}`);
+        wasmPath = this.resolveWasm("web-tree-sitter.wasm");
+      }
+      if (!existsSync2(wasmPath)) {
+        throw new Error(`tree-sitter.wasm not found in ${BUNDLED_WASM_DIR} or node_modules`);
       }
       const mod = await Promise.resolve().then(() => (init_tree_sitter(), exports_tree_sitter));
       TSQueryClass = mod.Query;
@@ -23415,6 +23419,8 @@ var init_tree_sitter2 = __esm(() => {
       const cached = this.languages.get(language);
       if (cached)
         return cached;
+      if (this.failedLanguages.has(language))
+        return null;
       const wasmFile = GRAMMAR_FILES[language];
       if (!wasmFile)
         return null;
@@ -23422,9 +23428,15 @@ var init_tree_sitter2 = __esm(() => {
         const mod = await Promise.resolve().then(() => (init_tree_sitter(), exports_tree_sitter));
         const wasmPath = this.resolveWasm(`tree-sitter-wasms/out/${wasmFile}`);
         const lang254 = await mod.Language.load(wasmPath);
+        if (this.parser) {
+          this.parser.setLanguage(lang254);
+          const tree = this.parser.parse("# validate");
+          tree?.delete();
+        }
         this.languages.set(language, lang254);
         return lang254;
       } catch {
+        this.failedLanguages.add(language);
         return null;
       }
     }
@@ -23444,7 +23456,14 @@ var init_tree_sitter2 = __esm(() => {
       if (!lang254)
         return null;
       this.parser.setLanguage(lang254);
-      const tree = this.parser.parse(content);
+      let tree;
+      try {
+        tree = this.parser.parse(content);
+      } catch {
+        this.failedLanguages.add(grammarKey);
+        this.languages.delete(grammarKey);
+        return null;
+      }
       if (!tree)
         return null;
       if (cached)
@@ -28146,7 +28165,8 @@ var init_config = __esm(() => {
       args: []
     },
     theme: {
-      name: "dark"
+      name: "dark",
+      transparent: true
     },
     nvimConfig: "default",
     editorIntegration: {

package/dist/workers/io.worker.js

@@ -575,6 +575,26 @@ var init_file_tree = __esm(() => {
   IGNORED_DIRS = new Set(["node_modules", ".git", "dist", "build", ".next", ".nuxt", "target", "__pycache__", ".cache", ".soulforge", "coverage"]);
 });
 
+// src/core/spawn.ts
+function buildSafeEnv() {
+  const env = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (ENV_ALLOWLIST.has(key) || key.startsWith("LC_") || key.startsWith("XDG_")) {
+      env[key] = value;
+    } else if (!SECRET_ENV_PATTERN.test(key)) {
+      env[key] = value;
+    }
+  }
+  env.GIT_TERMINAL_PROMPT = "0";
+  return env;
+}
+var SECRET_ENV_PATTERN, ENV_ALLOWLIST, SAFE_STDIO;
+var init_spawn = __esm(() => {
+  SECRET_ENV_PATTERN = /_API_KEY$|_SECRET$|_TOKEN$|_PASSWORD$|_CREDENTIAL$|_PRIVATE_KEY$/;
+  ENV_ALLOWLIST = new Set(["PATH", "HOME", "USER", "SHELL", "LANG", "TERM", "TERM_PROGRAM", "EDITOR", "VISUAL", "TMPDIR", "GOPATH", "GOROOT", "CARGO_HOME", "RUSTUP_HOME", "NVM_DIR", "BUN_INSTALL", "NODE_PATH", "PYTHONPATH", "VIRTUAL_ENV", "CONDA_PREFIX", "SSH_AUTH_SOCK", "GPG_TTY", "GIT_AUTHOR_NAME", "GIT_AUTHOR_EMAIL", "GIT_COMMITTER_NAME", "GIT_COMMITTER_EMAIL", "SOULFORGE_NO_REPOMAP", "NVIM_APPNAME", "KITTY_WINDOW_ID", "WEZTERM_PANE", "OTUI_TREE_SITTER_WORKER_PATH"]);
+  SAFE_STDIO = ["ignore", "pipe", "pipe"];
+});
+
 // node_modules/zustand/esm/vanilla.mjs
 var createStoreImpl = (createState) => {
   let state;
@@ -1660,11 +1680,10 @@ function run(args, cwd, timeout = 5000) {
     const proc = spawn("git", args, {
       cwd,
       timeout,
-      env: {
-        ...process.env
-      }
+      env: buildSafeEnv(),
+      stdio: SAFE_STDIO
     });
-    proc.stdout.on("data", (d) => chunks.push(d.toString()));
+    proc.stdout?.on("data", (d) => chunks.push(d.toString()));
     proc.on("close", (code) => resolve({
       ok: code === 0,
       stdout: chunks.join("")
@@ -1866,9 +1885,11 @@ function setCoAuthorEnabled(enabled) {
   _coAuthorEnabled = enabled;
 }
 async function gitCommit(cwd, message, amend) {
-  const fullMessage = _coAuthorEnabled ? `${message}
+  const cleaned = message.replace(/\\n/g, `
+`);
+  const fullMessage = _coAuthorEnabled ? `${cleaned}
 
-${CO_AUTHOR_LINE}` : message;
+${CO_AUTHOR_LINE}` : cleaned;
   const args = amend ? ["commit", "--amend", "-m", fullMessage] : ["commit", "-m", fullMessage];
   const {
     ok,
@@ -2266,6 +2287,7 @@ async function buildGitContext(cwd) {
 }
 var encoder, NAMED_ESCAPES, CO_AUTHOR_LINE = "Co-Authored-By: SoulForge <soulforge@proxysoul.com>", _coAuthorEnabled = true;
 var init_status = __esm(() => {
+  init_spawn();
   encoder = new TextEncoder;
   NAMED_ESCAPES = {
     n: `
@@ -20681,10 +20703,13 @@ function validateDownloadUrl(url2) {
       message: `Invalid URL: ${url2}`
     });
   }
+  if (parsed.protocol === "data:") {
+    return;
+  }
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
     throw new DownloadError({
       url: url2,
-      message: `URL scheme must be http or https, got ${parsed.protocol}`
+      message: `URL scheme must be http, https, or data, got ${parsed.protocol}`
     });
   }
   const hostname3 = parsed.hostname;
@@ -21944,7 +21969,7 @@ var btoa2, atob2, name14 = "AI_DownloadError", marker15, symbol17, _a17, _b15, D
     });
   }
   return () => `${prefix}${separator}${generator()}`;
-}, generateId, FETCH_FAILED_ERROR_MESSAGES, BUN_ERROR_CODES, VERSION = "4.0.21", getOriginalFetch = () => globalThis.fetch, getFromApi = async ({
+}, generateId, FETCH_FAILED_ERROR_MESSAGES, BUN_ERROR_CODES, VERSION = "4.0.22", getOriginalFetch = () => globalThis.fetch, getFromApi = async ({
   url: url2,
   headers = {},
   successfulResponseHandler,
@@ -23959,7 +23984,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
       "ai-model-id": this.modelId
     };
   }
-}, providerMetadataEntrySchema2, gatewayVideoDataSchema, gatewayVideoWarningSchema, gatewayVideoEventSchema, parallelSearchInputSchema, parallelSearchOutputSchema, parallelSearchToolFactory, parallelSearch = (config2 = {}) => parallelSearchToolFactory(config2), perplexitySearchInputSchema, perplexitySearchOutputSchema, perplexitySearchToolFactory, perplexitySearch = (config2 = {}) => perplexitySearchToolFactory(config2), gatewayTools, VERSION2 = "3.0.85", AI_GATEWAY_PROTOCOL_VERSION = "0.0.1", gateway;
+}, providerMetadataEntrySchema2, gatewayVideoDataSchema, gatewayVideoWarningSchema, gatewayVideoEventSchema, parallelSearchInputSchema, parallelSearchOutputSchema, parallelSearchToolFactory, parallelSearch = (config2 = {}) => parallelSearchToolFactory(config2), perplexitySearchInputSchema, perplexitySearchOutputSchema, perplexitySearchToolFactory, perplexitySearch = (config2 = {}) => perplexitySearchToolFactory(config2), gatewayTools, VERSION2 = "3.0.88", AI_GATEWAY_PROTOCOL_VERSION = "0.0.1", gateway;
 var init_dist4 = __esm(() => {
   init_dist3();
   init_dist();
@@ -28655,7 +28680,7 @@ var import_api, import_api2, __defProp2, __export2 = (target, all) => {
   const bytes = typeof data === "string" ? convertBase64ToUint8Array(data) : data;
   const id3Size = (bytes[6] & 127) << 21 | (bytes[7] & 127) << 14 | (bytes[8] & 127) << 7 | bytes[9] & 127;
   return bytes.slice(id3Size + 10);
-}, VERSION3 = "6.0.143", download = async ({
+}, VERSION3 = "6.0.146", download = async ({
   url: url2,
   maxBytes,
   abortSignal

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proxysoul/soulforge",
-  "version": "1.9.0",
+  "version": "2.1.0",
   "description": "Graph-powered code intelligence — multi-agent coding with codebase-aware AI",
   "repository": {
     "type": "git",
@@ -54,23 +54,23 @@
     "@types/babel__core": "7.20.5",
     "@types/bun": "1.3.11",
     "@types/linkify-it": "5.0.0",
-    "@types/node": "25.5.0",
+    "@types/node": "25.5.2",
     "@types/react": "19.2.14",
     "babel-plugin-react-compiler": "1.0.0",
     "bun-types": "1.3.11",
     "typescript": "6.0.2"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "3.0.64",
-    "@ai-sdk/google": "3.0.55",
-    "@ai-sdk/openai": "3.0.49",
-    "@ai-sdk/xai": "3.0.75",
+    "@ai-sdk/anthropic": "3.0.66",
+    "@ai-sdk/google": "3.0.58",
+    "@ai-sdk/openai": "3.0.50",
+    "@ai-sdk/xai": "3.0.77",
     "@anthropic-ai/sdk": "0.82.0",
     "@llmgateway/ai-sdk-provider": "3.5.0",
     "@mozilla/readability": "0.6.0",
     "@openrouter/ai-sdk-provider": "2.3.3",
-    "@opentui/react": "0.1.95",
-    "ai": "6.0.143",
+    "@opentui/react": "0.1.96",
+    "ai": "6.0.146",
     "ghostty-opentui": "1.4.10",
     "isbinaryfile": "6.0.0",
     "linkedom": "0.18.12",
@@ -82,6 +82,7 @@
     "strip-ansi": "7.2.0",
     "tree-sitter-wasms": "0.1.13",
     "ts-morph": "27.0.2",
+    "vercel-minimax-ai-provider": "^0.0.2",
     "web-tree-sitter": "0.25.10",
     "zod": "4.3.6",
     "zustand": "5.0.12"