@qduc/term2 0.1.0

package/dist/tools/web-search.test.js

@@ -0,0 +1,176 @@
+import test from 'ava';
+import { createWebSearchToolDefinition, formatResultsAsMarkdown, formatWebSearchCommandMessage, } from './web-search.js';
+// Helper to create a mock settings service
+const createMockSettingsService = (settings = {}) => ({
+    get: (key) => settings[key],
+    set: () => { },
+});
+// Helper to create a mock logging service
+const createMockLoggingService = () => {
+    const logs = [];
+    return {
+        info: (message, meta) => logs.push({ level: 'info', message, meta }),
+        warn: (message, meta) => logs.push({ level: 'warn', message, meta }),
+        error: (message, meta) => logs.push({ level: 'error', message, meta }),
+        debug: (message, meta) => logs.push({ level: 'debug', message, meta }),
+        security: (message, meta) => logs.push({ level: 'security', message, meta }),
+        setCorrelationId: () => { },
+        getCorrelationId: () => undefined,
+        clearCorrelationId: () => { },
+        getLogs: () => logs,
+    };
+};
+test('createWebSearchToolDefinition defines tool correctly', t => {
+    const settings = createMockSettingsService();
+    const logging = createMockLoggingService();
+    const tool = createWebSearchToolDefinition({
+        settingsService: settings,
+        loggingService: logging,
+    });
+    t.is(tool.name, 'web_search');
+    t.true(tool.description.includes('Search the web'));
+    t.is(typeof tool.execute, 'function');
+    t.is(typeof tool.formatCommandMessage, 'function');
+});
+test('needsApproval returns false (read-only operation)', t => {
+    const settings = createMockSettingsService();
+    const logging = createMockLoggingService();
+    const tool = createWebSearchToolDefinition({
+        settingsService: settings,
+        loggingService: logging,
+    });
+    const result = tool.needsApproval({ query: 'test' }, undefined);
+    t.is(result, false);
+});
+test('execute returns error when provider not configured', async (t) => {
+    const settings = createMockSettingsService({
+        'webSearch.provider': 'tavily',
+        // No API key set
+    });
+    const logging = createMockLoggingService();
+    const tool = createWebSearchToolDefinition({
+        settingsService: settings,
+        loggingService: logging,
+    });
+    const result = await tool.execute({ query: 'test' }, undefined);
+    t.true(typeof result === 'string');
+    t.true(result.includes('Error:'));
+    t.true(result.includes('not properly configured'));
+});
+test('formatResultsAsMarkdown formats results correctly', t => {
+    const response = {
+        query: 'test query',
+        results: [
+            {
+                title: 'Test Result 1',
+                url: 'https://example.com/1',
+                content: 'This is the first result content.',
+                score: 0.95,
+            },
+            {
+                title: 'Test Result 2',
+                url: 'https://example.com/2',
+                content: 'This is the second result content.',
+                publishedDate: '2024-01-15',
+            },
+        ],
+    };
+    const markdown = formatResultsAsMarkdown(response);
+    t.true(markdown.includes('## Search Results'));
+    t.true(markdown.includes('### 1. Test Result 1'));
+    t.true(markdown.includes('**URL:** https://example.com/1'));
+    t.true(markdown.includes('This is the first result content.'));
+    t.true(markdown.includes('### 2. Test Result 2'));
+    t.true(markdown.includes('**Published:** 2024-01-15'));
+});
+test('formatResultsAsMarkdown handles empty results', t => {
+    const response = {
+        query: 'no results query',
+        results: [],
+    };
+    const markdown = formatResultsAsMarkdown(response);
+    t.true(markdown.includes('No results found'));
+});
+test('formatResultsAsMarkdown includes answer box when available', t => {
+    const response = {
+        query: 'what is the capital of France',
+        results: [],
+        answerBox: 'The capital of France is Paris.',
+    };
+    const markdown = formatResultsAsMarkdown(response);
+    t.true(markdown.includes('## Answer'));
+    t.true(markdown.includes('The capital of France is Paris.'));
+});
+test('formatResultsAsMarkdown includes both answer box and results', t => {
+    const response = {
+        query: 'test',
+        results: [
+            {
+                title: 'Result',
+                url: 'https://example.com',
+                content: 'Content here.',
+            },
+        ],
+        answerBox: 'Direct answer.',
+    };
+    const markdown = formatResultsAsMarkdown(response);
+    t.true(markdown.includes('## Answer'));
+    t.true(markdown.includes('Direct answer.'));
+    t.true(markdown.includes('## Search Results'));
+    t.true(markdown.includes('Result'));
+});
+test('formatWebSearchCommandMessage extracts query correctly', t => {
+    const item = {
+        rawItem: {
+            arguments: JSON.stringify({ query: 'test search' }),
+        },
+        output: 'Search results here',
+    };
+    const messages = formatWebSearchCommandMessage(item, 0, new Map());
+    t.is(messages.length, 1);
+    t.is(messages[0].command, 'web_search: "test search"');
+    t.is(messages[0].toolName, 'web_search');
+    t.is(messages[0].sender, 'command');
+});
+test('formatWebSearchCommandMessage handles missing query', t => {
+    const item = {
+        rawItem: {},
+        output: 'Some output',
+    };
+    const messages = formatWebSearchCommandMessage(item, 0, new Map());
+    t.is(messages.length, 1);
+    t.is(messages[0].command, 'web_search: "unknown query"');
+});
+test('formatWebSearchCommandMessage detects success from output', t => {
+    const successItem = {
+        rawItem: {
+            arguments: JSON.stringify({ query: 'test' }),
+        },
+        output: '## Search Results\n...',
+    };
+    const errorItem = {
+        rawItem: {
+            arguments: JSON.stringify({ query: 'test' }),
+        },
+        output: 'Error: Something went wrong',
+    };
+    const successMessages = formatWebSearchCommandMessage(successItem, 0, new Map());
+    const errorMessages = formatWebSearchCommandMessage(errorItem, 0, new Map());
+    t.true(successMessages[0].success);
+    t.false(errorMessages[0].success);
+});
+test('formatWebSearchCommandMessage uses fallback args from map', t => {
+    const callId = 'call-123';
+    const item = {
+        rawItem: {
+            callId,
+        },
+        output: 'Results',
+    };
+    const argsMap = new Map([
+        [callId, { query: 'fallback query' }],
+    ]);
+    const messages = formatWebSearchCommandMessage(item, 0, argsMap);
+    t.is(messages[0].command, 'web_search: "fallback query"');
+});
+//# sourceMappingURL=web-search.test.js.map

package/dist/tools/web-search.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search.test.js","sourceRoot":"","sources":["../../source/tools/web-search.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EACH,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAChC,MAAM,iBAAiB,CAAC;AAGzB,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,CAAC,WAAgC,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,GAAG,EAAE,CAAI,GAAW,EAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC9C,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,wBAAwB,GAAG,GAAG,EAAE;IAClC,MAAM,IAAI,GAA0D,EAAE,CAAC;IACvE,OAAO;QACH,IAAI,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClF,IAAI,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClF,KAAK,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACpF,KAAK,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACpF,QAAQ,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1F,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;QAC1B,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS;QACjC,kBAAkB,EAAE,GAAG,EAAE,GAAE,CAAC;QAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;KACtB,CAAC;AACN,CAAC,CAAC;AAEF,IAAI,CAAC,sDAAsD,EAAE,CAAC,CAAC,EAAE;IAC7D,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAG,6BAA6B,CAAC;QACvC,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,OAAO;KAC1B,CAAC,CAAC;IAEH,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,CAAC,CAAC,EAAE;IAC1D,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAG,6BAA6B,CAAC;QACvC,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,OAAO;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjE,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACvC,oBAAoB,EAAE,QAAQ;QAC9B,iBAAiB;KACpB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAG,6BAA6B,CAAC;QACvC,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,OAAO;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhE,CAAC,CAAC,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,IAAI,CAAE,MAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,IAAI,CAAE,MAAiB,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,CAAC,CAAC,EAAE;IAC1D,MAAM,QAAQ,GAAsB;QAChC,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE;YACL;gBACI,KAAK,EAAE,eAAe;gBACtB,GAAG,EAAE,uBAAuB;gBAC5B,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,IAAI;aACd;YACD;gBACI,KAAK,EAAE,eAAe;gBACtB,GAAG,EAAE,uBAAuB;gBAC5B,OAAO,EAAE,oCAAoC;gBAC7C,aAAa,EAAE,YAAY;aAC9B;SACJ;KACJ,CAAC;IAEF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,CAAC,CAAC,EAAE;IACtD,MAAM,QAAQ,GAAsB;QAChC,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,EAAE;KACd,CAAC;IAEF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,CAAC,CAAC,EAAE;IACnE,MAAM,QAAQ,GAAsB;QAChC,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,iCAAiC;KAC/C,CAAC;IAEF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,CAAC,CAAC,EAAE;IACrE,MAAM,QAAQ,GAAsB;QAChC,KAAK,EAAE,MAAM;QACb,OAAO,EAAE;YACL;gBACI,KAAK,EAAE,QAAQ;gBACf,GAAG,EAAE,qBAAqB;gBAC1B,OAAO,EAAE,eAAe;aAC3B;SACJ;QACD,SAAS,EAAE,gBAAgB;KAC9B,CAAC;IAEF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,CAAC,CAAC,EAAE;IAC/D,MAAM,IAAI,GAAG;QACT,OAAO,EAAE;YACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SACtD;QACD,MAAM,EAAE,qBAAqB;KAChC,CAAC;IAEF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEnE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACvD,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,CAAC,CAAC,EAAE;IAC5D,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,aAAa;KACxB,CAAC;IAEF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEnE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,CAAC,CAAC,EAAE;IAClE,MAAM,WAAW,GAAG;QAChB,OAAO,EAAE;YACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC/C;QACD,MAAM,EAAE,wBAAwB;KACnC,CAAC;IAEF,MAAM,SAAS,GAAG;QACd,OAAO,EAAE;YACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC/C;QACD,MAAM,EAAE,6BAA6B;KACxC,CAAC;IAEF,MAAM,eAAe,GAAG,6BAA6B,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,6BAA6B,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAE7E,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,CAAC,CAAC,EAAE;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,IAAI,GAAG;QACT,OAAO,EAAE;YACL,MAAM;SACT;QACD,MAAM,EAAE,SAAS;KACpB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAkB;QACrC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC"}

package/dist/utils/command-logger.d.ts

@@ -0,0 +1,11 @@
+import type { ISettingsService } from '../services/service-interfaces.js';
+/**
+ * Log command execution for security forensics
+ * Only writes to stderr if DEBUG_BASH_TOOL is enabled to avoid polluting Ink UI
+ */
+export declare function logCommandExecution(settingsService: ISettingsService, command: string, isDangerous: boolean, approved: boolean): void;
+/**
+ * Log validation errors for debugging
+ */
+export declare function logValidationError(settingsService: ISettingsService, message: string): void;
+//# sourceMappingURL=command-logger.d.ts.map

package/dist/utils/command-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.d.ts","sourceRoot":"","sources":["../../source/utils/command-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,mCAAmC,CAAC;AAExE;;;GAGG;AACH,wBAAgB,mBAAmB,CAC/B,eAAe,EAAE,gBAAgB,EACjC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,OAAO,GAClB,IAAI,CAiBN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAC9B,eAAe,EAAE,gBAAgB,EACjC,OAAO,EAAE,MAAM,GAChB,IAAI,CASN"}

package/dist/utils/command-logger.js

@@ -0,0 +1,34 @@
+/**
+ * Log command execution for security forensics
+ * Only writes to stderr if DEBUG_BASH_TOOL is enabled to avoid polluting Ink UI
+ */
+export function logCommandExecution(settingsService, command, isDangerous, approved) {
+    if (!settingsService.get('debug.debugBashTool')) {
+        return;
+    }
+    if (settingsService.get('logging.suppressConsoleOutput')) {
+        return;
+    }
+    const timestamp = new Date().toISOString();
+    const context = {
+        timestamp,
+        command: command.substring(0, 100), // Truncate for safety
+        isDangerous,
+        approved,
+        env: settingsService.get('environment.nodeEnv') || 'production',
+    };
+    console.error(`[BASH_TOOL_LOG] ${JSON.stringify(context)}`);
+}
+/**
+ * Log validation errors for debugging
+ */
+export function logValidationError(settingsService, message) {
+    if (!settingsService.get('debug.debugBashTool')) {
+        return;
+    }
+    if (settingsService.get('logging.suppressConsoleOutput')) {
+        return;
+    }
+    console.error(`[BASH_TOOL_ERROR] ${message}`);
+}
+//# sourceMappingURL=command-logger.js.map

package/dist/utils/command-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.js","sourceRoot":"","sources":["../../source/utils/command-logger.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAC/B,eAAiC,EACjC,OAAe,EACf,WAAoB,EACpB,QAAiB;IAEjB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAU,qBAAqB,CAAC,EAAE,CAAC;QACvD,OAAO;IACX,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAU,+BAA+B,CAAC,EAAE,CAAC;QAChE,OAAO;IACX,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG;QACZ,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,sBAAsB;QAC1D,WAAW;QACX,QAAQ;QACR,GAAG,EAAE,eAAe,CAAC,GAAG,CAAS,qBAAqB,CAAC,IAAI,YAAY;KAC1E,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAC9B,eAAiC,EACjC,OAAe;IAEf,IAAI,CAAC,eAAe,CAAC,GAAG,CAAU,qBAAqB,CAAC,EAAE,CAAC;QACvD,OAAO;IACX,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAU,+BAA+B,CAAC,EAAE,CAAC;QAChE,OAAO;IACX,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/utils/command-safety/constants.d.ts

@@ -0,0 +1,21 @@
+export declare const ALLOWED_COMMANDS: Set<string>;
+export declare const BLOCKED_COMMANDS: Set<string>;
+/**
+ * Validate command safety using an AST parser.
+ * Returns true when a command requires user approval.
+ * Throws for invalid/empty inputs.
+ */
+export declare enum SafetyStatus {
+    GREEN = "GREEN",
+    YELLOW = "YELLOW",
+    RED = "RED"
+}
+export declare const SYSTEM_PATHS: string[];
+export declare const SENSITIVE_EXTENSIONS: string[];
+export declare const SAFE_JSON_FILES: Set<string>;
+export declare const SUSPICIOUS_JSON_PATTERNS: RegExp[];
+export declare const HOME_PATTERNS: RegExp[];
+export declare const SENSITIVE_PATHS: string[];
+export declare const SAFE_GIT_COMMANDS: Set<string>;
+export declare const DANGEROUS_GIT_COMMANDS: Set<string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/utils/command-safety/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../source/utils/command-safety/constants.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,gBAAgB,aAc3B,CAAC;AACH,eAAO,MAAM,gBAAgB,aAkC3B,CAAC;AAEH;;;;GAIG;AACH,oBAAY,YAAY;IACpB,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,GAAG,QAAQ;CACd;AAGD,eAAO,MAAM,YAAY,UAQxB,CAAC;AAEF,eAAO,MAAM,oBAAoB,UAA2B,CAAC;AAG7D,eAAO,MAAM,eAAe,aAqB1B,CAAC;AAGH,eAAO,MAAM,wBAAwB,UAkDpC,CAAC;AAEF,eAAO,MAAM,aAAa,UAUzB,CAAC;AAEF,eAAO,MAAM,eAAe,UAU3B,CAAC;AAGF,eAAO,MAAM,iBAAiB,aAmC5B,CAAC;AAEH,eAAO,MAAM,sBAAsB,aAwCjC,CAAC"}

package/dist/utils/command-safety/constants.js

@@ -0,0 +1,245 @@
+// 1. CONSTANTS
+// Note: 'sed' is useful for read-only transformations. We allow it by default
+// but add guards below to prevent in-place edits (-i) and unapproved redirections.
+export const ALLOWED_COMMANDS = new Set([
+    'ls',
+    'pwd',
+    'grep',
+    'rg',
+    'cat',
+    'echo',
+    'head',
+    'tail',
+    'sed',
+    'find',
+    'wc',
+    // Git read-only commands
+    'git',
+]);
+export const BLOCKED_COMMANDS = new Set([
+    // Filesystem
+    'rm',
+    'rmdir',
+    'mkfs',
+    'dd',
+    'mv',
+    'cp',
+    // System
+    'sudo',
+    'su',
+    'chmod',
+    'chown',
+    'shutdown',
+    'reboot',
+    // Network/Web
+    'curl',
+    'wget',
+    'ssh',
+    'scp',
+    'netstat',
+    // Package Managers / installers
+    'apt',
+    'yum',
+    'npm',
+    'yarn',
+    'pnpm',
+    'pip',
+    'gem',
+    // Dangerous wrappers / misc
+    'eval',
+    'exec',
+    'kill',
+    'killall',
+]);
+/**
+ * Validate command safety using an AST parser.
+ * Returns true when a command requires user approval.
+ * Throws for invalid/empty inputs.
+ */
+export var SafetyStatus;
+(function (SafetyStatus) {
+    SafetyStatus["GREEN"] = "GREEN";
+    SafetyStatus["YELLOW"] = "YELLOW";
+    SafetyStatus["RED"] = "RED";
+})(SafetyStatus || (SafetyStatus = {}));
+// Constants for path analysis
+export const SYSTEM_PATHS = [
+    '/etc',
+    '/dev',
+    '/proc',
+    '/var',
+    '/usr',
+    '/boot',
+    '/bin',
+];
+export const SENSITIVE_EXTENSIONS = ['.env', '.pem', '.key'];
+// Safe JSON files that are common project configuration files
+export const SAFE_JSON_FILES = new Set([
+    'package.json',
+    'package-lock.json',
+    'tsconfig.json',
+    'jsconfig.json',
+    'eslint.config.json',
+    '.eslintrc.json',
+    'prettier.config.json',
+    '.prettierrc.json',
+    'jest.config.json',
+    'babel.config.json',
+    '.babelrc.json',
+    'ava.config.json',
+    'xo.config.json',
+    'tslint.json',
+    'renovate.json',
+    'nx.json',
+    'project.json',
+    'vercel.json',
+    'now.json',
+    'composer.json',
+]);
+// Patterns that indicate potentially sensitive JSON files (credentials, tokens, etc.)
+export const SUSPICIOUS_JSON_PATTERNS = [
+    // Credentials and secrets (exact and with suffixes)
+    /^secrets?\.json$/i,
+    /^secrets?[-_.].*\.json$/i,
+    /^credentials?\.json$/i,
+    /^credentials?[-_.].*\.json$/i,
+    /^tokens?\.json$/i,
+    /^tokens?[-_.].*\.json$/i,
+    /^auth\.json$/i,
+    /^auth[-_.].*\.json$/i,
+    /^api[-_]?keys?\.json$/i,
+    /^api[-_]?keys?[-_.].*\.json$/i,
+    /^service[-_]?accounts?\.json$/i,
+    /^service[-_]?accounts?[-_.].*\.json$/i,
+    // Private keys
+    /^private\.json$/i,
+    /^private[-_.].*\.json$/i,
+    /^key\.json$/i,
+    /^key[-_.].*\.json$/i,
+    /^id_rsa.*\.json$/i,
+    // Cloud provider credentials
+    /^firebase[-_]?adminsdk.*\.json$/i,
+    /^google[-_]?credentials.*\.json$/i,
+    /^gcloud.*\.json$/i,
+    /^azure.*\.json$/i,
+    /^aws.*\.json$/i,
+    /^service[-_]account\.json$/i,
+    /^client[-_]secret.*\.json$/i,
+    /^oauth.*client.*\.json$/i,
+    // SSO and authentication providers
+    /^okta.*\.json$/i,
+    /^sso.*\.json$/i,
+    /^saml.*\.json$/i,
+    // Monitoring and logging credentials
+    /^sentry.*\.json$/i,
+    /^newrelic.*\.json$/i,
+    /^datadog.*\.json$/i,
+    // Key storage formats
+    /.*\.keystore\.json$/i,
+    /.*\.keypair\.json$/i,
+    /.*\.p8\.json$/i,
+    /.*\.p12\.json$/i,
+    // Vault and secret management
+    /^vault.*\.json$/i,
+];
+export const HOME_PATTERNS = [
+    /^~/, // Tilde
+    /^\$HOME/, // $HOME variable
+    /^\$\{HOME\}/, // ${HOME} variable
+    /^\$USER/, // $USER variable
+    /^\$LOGNAME/, // $LOGNAME variable
+    /^\$XDG_/, // XDG variables
+    /^\/home\//, // Linux home directories
+    /^\/Users\//, // macOS home directories
+    /^\/root($|\/)/, // Root's home
+];
+export const SENSITIVE_PATHS = [
+    '/.ssh',
+    '/.gnupg',
+    '/.aws',
+    '/.kube',
+    '/.env',
+    '/.git',
+    '/.config',
+    '/.bash_history',
+    '/.zsh_history',
+];
+// Git command classification
+export const SAFE_GIT_COMMANDS = new Set([
+    // Status and information
+    'status',
+    'log',
+    'show',
+    'diff',
+    'reflog',
+    // Inspection
+    'ls-files',
+    'ls-tree',
+    'ls-remote',
+    'describe',
+    'rev-parse',
+    'rev-list',
+    'show-ref',
+    'show-branch',
+    'name-rev',
+    // History viewing
+    'blame',
+    'shortlog',
+    'whatchanged',
+    // Object inspection
+    'cat-file',
+    'count-objects',
+    'verify-pack',
+    'verify-commit',
+    'verify-tag',
+    // Other read-only commands
+    'grep',
+    'help',
+    'version',
+    'fsck',
+    'check-ignore',
+    'check-attr',
+    'check-ref-format',
+]);
+export const DANGEROUS_GIT_COMMANDS = new Set([
+    // Write operations
+    'push',
+    'commit',
+    'add',
+    'rm',
+    'mv',
+    // Destructive operations
+    'reset',
+    'clean',
+    'rebase',
+    'merge',
+    'cherry-pick',
+    'revert',
+    // History rewriting
+    'filter-branch',
+    'filter-repo',
+    'replace',
+    // Branch/tag management
+    'checkout',
+    'switch',
+    'restore',
+    'branch',
+    'tag',
+    // Configuration changes
+    'config',
+    'remote',
+    // Submodule operations
+    'submodule',
+    'subtree',
+    // Other write operations
+    'stash',
+    'apply',
+    'fetch',
+    'pull',
+    'clone',
+    'init',
+    'gc',
+    'prune',
+    'worktree',
+]);
+//# sourceMappingURL=constants.js.map

package/dist/utils/command-safety/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../source/utils/command-safety/constants.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,8EAA8E;AAC9E,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACpC,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,IAAI;IACJ,yBAAyB;IACzB,KAAK;CACR,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACpC,aAAa;IACb,IAAI;IACJ,OAAO;IACP,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,MAAM;IACN,IAAI;IACJ,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,cAAc;IACd,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,SAAS;IACT,gCAAgC;IAChC,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,4BAA4B;IAC5B,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;CACZ,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACpB,+BAAe,CAAA;IACf,iCAAiB,CAAA;IACjB,2BAAW,CAAA;AACf,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAED,8BAA8B;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACnC,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,SAAS;IACT,cAAc;IACd,aAAa;IACb,UAAU;IACV,eAAe;CAClB,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACpC,oDAAoD;IACpD,mBAAmB;IACnB,0BAA0B;IAC1B,uBAAuB;IACvB,8BAA8B;IAC9B,kBAAkB;IAClB,yBAAyB;IACzB,eAAe;IACf,sBAAsB;IACtB,wBAAwB;IACxB,+BAA+B;IAC/B,gCAAgC;IAChC,uCAAuC;IAEvC,eAAe;IACf,kBAAkB;IAClB,yBAAyB;IACzB,cAAc;IACd,qBAAqB;IACrB,mBAAmB;IAEnB,6BAA6B;IAC7B,kCAAkC;IAClC,mCAAmC;IACnC,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,6BAA6B;IAC7B,6BAA6B;IAC7B,0BAA0B;IAE1B,mCAAmC;IACnC,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IAEjB,qCAAqC;IACrC,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IAEpB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IAEjB,8BAA8B;IAC9B,kBAAkB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,iBAAiB;IAC5B,aAAa,EAAE,mBAAmB;IAClC,SAAS,EAAE,iBAAiB;IAC5B,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,yBAAyB;IACtC,YAAY,EAAE,yBAAyB;IACvC,eAAe,EAAE,cAAc;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,eAAe;CAClB,CAAC;AAEF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACrC,yBAAyB;IACzB,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,UAAU;IACV,SAAS;IACT,WAAW;IACX,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,aAAa;IACb,UAAU;IACV,kBAAkB;IAClB,OAAO;IACP,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,UAAU;IACV,eAAe;IACf,aAAa;IACb,eAAe;IACf,YAAY;IACZ,2BAA2B;IAC3B,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,cAAc;IACd,YAAY;IACZ,kBAAkB;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC1C,mBAAmB;IACnB,MAAM;IACN,QAAQ;IACR,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,yBAAyB;IACzB,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,aAAa;IACb,QAAQ;IACR,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,SAAS;IACT,wBAAwB;IACxB,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,KAAK;IACL,wBAAwB;IACxB,QAAQ;IACR,QAAQ;IACR,uBAAuB;IACvB,WAAW;IACX,SAAS;IACT,yBAAyB;IACzB,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,IAAI;IACJ,OAAO;IACP,UAAU;CACb,CAAC,CAAC"}

package/dist/utils/command-safety/find-helpers.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Check if a find command has dangerous execution flags (-exec, -execdir, -ok, -okdir, -delete)
+ */
+export declare function hasFindDangerousExecution(args: any[]): {
+    dangerous: boolean;
+    reason?: string;
+};
+/**
+ * Check for suspicious find flags that warrant YELLOW classification
+ */
+export declare function hasFindSuspiciousFlags(args: any[]): {
+    suspicious: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=find-helpers.d.ts.map

package/dist/utils/command-safety/find-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-helpers.d.ts","sourceRoot":"","sources":["../../../source/utils/command-safety/find-helpers.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAyKA;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG;IACjD,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAmEA"}