@remnux/mcp-server 0.1.65 → 0.1.67

package/dist/handlers/get-server-info.js

@@ -0,0 +1,52 @@
+import { formatResponse } from "../response.js";
+/**
+ * get_server_info — report the MCP server version, how it reaches REMnux
+ * (connector mode + transport), and the REMnux distro version on the target.
+ *
+ * The REMnux version is best-effort. /etc/remnux-version is the authoritative
+ * source (the distro's own CLI reads it); `remnux version` is only a fallback,
+ * and its output can carry banner or help text ahead of the version, so each
+ * source is scanned for a bare version line or a "remnux-version X" line rather
+ * than trusting the first line. Any failure or non-version output yields remnux_version: null
+ * rather than an error, because the server-side facts are still useful.
+ */
+// A line that IS a version ("7.0.9"), or the CLI's "remnux-version 7.0.9" line.
+// Anything else (banners, help text, the CLI's own version) is not the distro version.
+const BARE_VERSION_LINE = /^v?(\d+(?:\.\d+)+)$/;
+const LABELED_VERSION_LINE = /\bremnux-version\s*[:=]?\s*v?(\d+(?:\.\d+)+)\b/i;
+function extractVersion(stdout) {
+    for (const raw of (stdout || "").split("\n")) {
+        const line = raw.trim();
+        const m = line.match(BARE_VERSION_LINE) ?? line.match(LABELED_VERSION_LINE);
+        if (m)
+            return m[1];
+    }
+    return null;
+}
+async function readRemnuxVersion(deps) {
+    const probes = ["cat /etc/remnux-version 2>/dev/null", "remnux version 2>/dev/null"];
+    for (const cmd of probes) {
+        try {
+            const result = await deps.connector.executeShell(cmd, { timeout: 10000 });
+            const version = extractVersion(result.stdout);
+            if (version)
+                return version;
+        }
+        catch {
+            // try the next source
+        }
+    }
+    return null;
+}
+export async function handleGetServerInfo(deps, serverVersion) {
+    const startTime = Date.now();
+    const { config } = deps;
+    const remnuxVersion = await readRemnuxVersion(deps);
+    return formatResponse("get_server_info", {
+        server_version: serverVersion,
+        connector_mode: config.mode,
+        transport: config.transport ?? "stdio",
+        remnux_version: remnuxVersion,
+    }, startTime);
+}
+//# sourceMappingURL=get-server-info.js.map

package/dist/handlers/get-server-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-server-info.js","sourceRoot":"","sources":["../../src/handlers/get-server-info.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,gFAAgF;AAChF,uFAAuF;AACvF,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,oBAAoB,GAAG,iDAAiD,CAAC;AAE/E,SAAS,cAAc,CAAC,MAAc;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAiB;IAChD,MAAM,MAAM,GAAG,CAAC,qCAAqC,EAAE,4BAA4B,CAAC,CAAC;IACrF,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAiB,EAAE,aAAqB;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEpD,OAAO,cAAc,CAAC,iBAAiB,EAAE;QACvC,cAAc,EAAE,aAAa;QAC7B,cAAc,EAAE,MAAM,CAAC,IAAI;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,OAAO;QACtC,cAAc,EAAE,aAAa;KAC9B,EAAE,SAAS,CAAC,CAAC;AAChB,CAAC"}

package/dist/handlers/output-spill.d.ts

@@ -0,0 +1,29 @@
+import type { Connector } from "../connectors/index.js";
+/**
+ * Cap on what the server will write to the output directory when a tool's
+ * output exceeds a response budget (UTF-8 bytes). Bounds disk use per
+ * oversized run; larger output is left to the agent's own redirect recipe.
+ */
+export declare const MAX_SAVED_OUTPUT_SIZE: number;
+/** A write that has not settled by then is treated as failed (stalled SFTP/docker cp). */
+export declare const DEFAULT_SPILL_TIMEOUT_MS = 30000;
+export type SpillResult = {
+    saved: true;
+    path: string;
+} | {
+    saved: false;
+    reason: "no_output_dir" | "bad_name" | "too_large" | "write_failed";
+};
+/**
+ * Save oversized tool output to `<outputDir>/<name>` so the agent can query
+ * the part that did not fit in the response (grep, sed -n, download_file)
+ * without re-running the tool. Never throws and never hangs: a failed or
+ * stalled write degrades to `saved: false` and the caller falls back to a
+ * re-run recipe. `name` must be a plain, caller-sanitized filename (tool name
+ * plus sanitized sample name, or tool name plus command hash); anything else
+ * is refused here as defense in depth.
+ */
+export declare function saveOversizedOutput(connector: Pick<Connector, "writeFile">, outputDir: string | undefined, name: string, text: string, opts?: {
+    timeoutMs?: number;
+}): Promise<SpillResult>;
+//# sourceMappingURL=output-spill.d.ts.map

package/dist/handlers/output-spill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-spill.d.ts","sourceRoot":"","sources":["../../src/handlers/output-spill.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAEhD,0FAA0F;AAC1F,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAK/C,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,cAAc,CAAA;CAAE,CAAC;AAE1F;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EACvC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,WAAW,CAAC,CAqBtB"}

package/dist/handlers/output-spill.js

@@ -0,0 +1,48 @@
+/**
+ * Cap on what the server will write to the output directory when a tool's
+ * output exceeds a response budget (UTF-8 bytes). Bounds disk use per
+ * oversized run; larger output is left to the agent's own redirect recipe.
+ */
+export const MAX_SAVED_OUTPUT_SIZE = 500 * 1024; // 500 KiB
+/** A write that has not settled by then is treated as failed (stalled SFTP/docker cp). */
+export const DEFAULT_SPILL_TIMEOUT_MS = 30_000;
+/** Plain filenames only: no separators, no traversal, no leading dot, no spaces. */
+const SAFE_NAME = /^[A-Za-z0-9_][A-Za-z0-9._-]{0,254}$/;
+/**
+ * Save oversized tool output to `<outputDir>/<name>` so the agent can query
+ * the part that did not fit in the response (grep, sed -n, download_file)
+ * without re-running the tool. Never throws and never hangs: a failed or
+ * stalled write degrades to `saved: false` and the caller falls back to a
+ * re-run recipe. `name` must be a plain, caller-sanitized filename (tool name
+ * plus sanitized sample name, or tool name plus command hash); anything else
+ * is refused here as defense in depth.
+ */
+export async function saveOversizedOutput(connector, outputDir, name, text, opts = {}) {
+    if (!outputDir)
+        return { saved: false, reason: "no_output_dir" };
+    if (!SAFE_NAME.test(name) || name === "." || name === "..")
+        return { saved: false, reason: "bad_name" };
+    const bytes = Buffer.from(text, "utf-8");
+    if (bytes.length > MAX_SAVED_OUTPUT_SIZE)
+        return { saved: false, reason: "too_large" };
+    const path = `${outputDir}/${name}`;
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_SPILL_TIMEOUT_MS;
+    let timer;
+    try {
+        await Promise.race([
+            connector.writeFile(path, bytes),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error("spill timed out")), timeoutMs);
+            }),
+        ]);
+        return { saved: true, path };
+    }
+    catch {
+        return { saved: false, reason: "write_failed" };
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=output-spill.js.map

package/dist/handlers/output-spill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-spill.js","sourceRoot":"","sources":["../../src/handlers/output-spill.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU;AAE3D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C,oFAAoF;AACpF,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAMxD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAuC,EACvC,SAA6B,EAC7B,IAAY,EACZ,IAAY,EACZ,OAA+B,EAAE;IAEjC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACjE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvF,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC7D,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC;YAChC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5E,CAAC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/handlers/run-tool.d.ts

@@ -1,5 +1,20 @@
 import type { HandlerDeps } from "./types.js";
 import type { RunToolArgs } from "../schemas/tools.js";
+/**
+ * Detect a `head` or `tail` stage that reads from a pipe (any stage after the
+ * first; `tail -n 50 file` with no pipe before it is deliberate paging).
+ * Excluded: `tail -f/-F/--follow` (streams rather than limits) and
+ * `tail -n +1` (returns every line). Such a stage discards producer output the
+ * server would otherwise have returned whole, with exit 0 and no other
+ * signal — the model-side mirror of server truncation, and an upstream
+ * `head -500 | grep` caps the producer just as a terminal one does. Returns
+ * the first such stage's text (whitespace-normalized, trailing redirects and
+ * operators dropped, length-capped) and which limiter it is, or undefined.
+ */
+export declare function detectPipedLimiter(command: string): {
+    limiter: "head" | "tail";
+    stage: string;
+} | undefined;
 export declare function handleRunTool(deps: HandlerDeps, args: RunToolArgs): Promise<{
     content: Array<{
         type: "text";

package/dist/handlers/run-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-tool.d.ts","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA4IvD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW;;;;;;GAuJlB"}
+{"version":3,"file":"run-tool.d.ts","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA6GvD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAuBzD;AA4ND,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW;;;;;;GAgNlB"}

package/dist/handlers/run-tool.js

@@ -6,6 +6,8 @@ import { parseToolOutput, hasParser } from "../parsers/index.js";
 import { toolRegistry } from "../tools/registry.js";
 import { filterStderrNoise } from "../utils/stderr-filter.js";
 import { OUTPUT_SENTINEL } from "../tools/invoker.js";
+import { createHash } from "crypto";
+import { saveOversizedOutput } from "./output-spill.js";
 const DISCOURAGED_PATTERNS = [
     {
         pattern: /^yara\s/,
@@ -32,9 +34,218 @@ const ADVISORY_PATTERNS = [
             "Other files → also run 'strings -el <file>' for Unicode (little-endian 16-bit).",
     },
 ];
+/**
+ * Split a shell command on unquoted, unescaped single `|` characters (pipe
+ * stages). `||` is a control operator, not a pipe, and `|` inside quotes or
+ * after a backslash is literal text, so none of those split. This is not a
+ * full shell parser; it only needs to find the pipeline's last stage.
+ */
+function splitPipeline(command) {
+    const stages = [];
+    let current = "";
+    let quote = null;
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (quote) {
+            current += ch;
+            if (ch === "\\" && quote === '"' && i + 1 < command.length) {
+                current += command[++i];
+            }
+            else if (ch === quote) {
+                quote = null;
+            }
+            continue;
+        }
+        if (ch === "\\" && i + 1 < command.length) {
+            current += ch + command[++i];
+            continue;
+        }
+        if (ch === "'" || ch === '"') {
+            quote = ch;
+            current += ch;
+            continue;
+        }
+        if (ch === "#" && (i === 0 || /\s/.test(command[i - 1]))) {
+            break; // the rest of the line is a shell comment
+        }
+        if (ch === "|") {
+            if (command[i + 1] === "|") {
+                current += "||";
+                i++;
+                continue;
+            }
+            if (command[i + 1] === "&")
+                i++; // `|&` pipes stderr too; still a pipe
+            stages.push(current);
+            current = "";
+            continue;
+        }
+        current += ch;
+    }
+    stages.push(current);
+    return stages;
+}
+/**
+ * Detect a `head` or `tail` stage that reads from a pipe (any stage after the
+ * first; `tail -n 50 file` with no pipe before it is deliberate paging).
+ * Excluded: `tail -f/-F/--follow` (streams rather than limits) and
+ * `tail -n +1` (returns every line). Such a stage discards producer output the
+ * server would otherwise have returned whole, with exit 0 and no other
+ * signal — the model-side mirror of server truncation, and an upstream
+ * `head -500 | grep` caps the producer just as a terminal one does. Returns
+ * the first such stage's text (whitespace-normalized, trailing redirects and
+ * operators dropped, length-capped) and which limiter it is, or undefined.
+ */
+export function detectPipedLimiter(command) {
+    const stages = splitPipeline(command);
+    for (let n = 1; n < stages.length; n++) {
+        // Keep only the command word and its arguments: drop anything after a
+        // redirect or control operator that follows the limiter.
+        const text = stages[n].trim().split(/\s*(?:\d*[<>]|&&|;)/)[0].trim();
+        const words = text.split(/\s+/).filter(Boolean);
+        if (words.length === 0)
+            continue;
+        const cmd = words[0].replace(/^.*\//, "");
+        if (cmd !== "head" && cmd !== "tail")
+            continue;
+        if (cmd === "tail") {
+            const args = words.slice(1);
+            const follows = args.some((w) => w === "--follow" || w.startsWith("--follow=") || /^-[A-Za-z]*[fF][A-Za-z]*$/.test(w));
+            if (follows)
+                continue;
+            // `tail -n +1` / `tail +1` / `--lines=+1` print from line 1: nothing is dropped
+            const fromStart = args.some((w, k) => w === "+1" || w === "--lines=+1" || (w === "-n" && args[k + 1] === "+1"));
+            if (fromStart)
+                continue;
+        }
+        return { limiter: cmd, stage: text.replace(/\s+/g, " ").slice(0, 60) };
+    }
+    return undefined;
+}
+// Response budgets (JS string length): 100 KiB of stdout, 50 KiB of stderr.
+const STDOUT_CAP_CHARS = 100 * 1024;
+const MAX_STDERR_RESPONSE = 50 * 1024;
+// Parsers run on captured stdout (not just the returned slice) up to this
+// bound, mirroring analyze_file's IOC_SCAN_CAP, so a finding past the response
+// cap is still reported rather than silently lost.
+const PARSE_CAP_CHARS = 512 * 1024;
+// Parsers can emit one finding per line, so the response carries at most this
+// many; findings_total reports the parsed count when capped.
+const MAX_FINDINGS = 500;
+function limiterAdvisory(l) {
+    const part = l.limiter === "head" ? "leading" : "trailing";
+    return (`PARTIAL: the pipeline stage '${l.stage}' keeps only the ${part} part of its input; anything past that ` +
+        `point is discarded with no signal, and a pipeline's exit status is its last stage's, not the producer's. ` +
+        `run_tool returns stdout whole up to ${STDOUT_CAP_CHARS.toLocaleString("en-US")} characters and says so when ` +
+        `it has to cut, so drop the ${l.limiter} stage, or select by content with grep.`);
+}
+/**
+ * Collect every matching command advisory (newline-joined) so a command like
+ * `strings x | head` carries both the INCOMPLETE and the PARTIAL guidance.
+ */
 function getCommandAdvisory(command) {
-    const matched = ADVISORY_PATTERNS.find((p) => p.match(command));
-    return matched?.advisory;
+    const advisories = ADVISORY_PATTERNS.filter((p) => p.match(command)).map((p) => p.advisory);
+    const limiter = detectPipedLimiter(command);
+    if (limiter)
+        advisories.push(limiterAdvisory(limiter));
+    return advisories.length > 0 ? advisories.join("\n") : undefined;
+}
+/** Count lines the way `wc -l` would, plus one for a final unterminated line. */
+function countLines(text) {
+    if (text.length === 0)
+        return 0;
+    let n = 0;
+    for (let i = 0; i < text.length; i++)
+        if (text.charCodeAt(i) === 10)
+            n++;
+    return text.endsWith("\n") ? n : n + 1;
+}
+/**
+ * Deterministic, sanitized filename for the redirect-to-file recovery recipe:
+ * derived only from the registry tool name (or the sanitized command word) and
+ * a hash of the full command, so re-running the same command maps to the same
+ * file and no untrusted text reaches the filename.
+ */
+function suggestedOutputFilename(fullCommand, toolName) {
+    const firstWord = fullCommand.trim().split(/\s/)[0]?.replace(/^.*\//, "") ?? "";
+    const base = (toolName ?? firstWord).replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 32) || "cmd";
+    const hash = createHash("sha256").update(fullCommand).digest("hex").slice(0, 12);
+    return `run_tool-${base}-${hash}.stdout.txt`;
+}
+/**
+ * Per-stream truncation notice. Names the omitted line range with
+ * server-computed integers and gives a recovery recipe that can actually reach
+ * the tail; `head` is never offered as a remedy (it returns another prefix).
+ */
+function buildTruncationNotice(args) {
+    const parts = [];
+    const fmt = (n) => String(n); // raw integers: copy-safe into sed ranges
+    const cap = STDOUT_CAP_CHARS.toLocaleString("en-US");
+    // Quoted so an output directory with spaces still resolves (substitution is textual).
+    const outPath = `'${OUTPUT_SENTINEL}${args.outFile}'`;
+    const errPath = `'${OUTPUT_SENTINEL}${args.outFile.replace(/\.stdout\.txt$/, ".stderr.txt")}'`;
+    if (args.stdoutTruncated && args.stdoutReturnedLines === 0) {
+        // Not even one complete line fits: line ranges cannot help, so offer
+        // content and chunking recipes instead. (`cut -c` slices per line, not
+        // the stream, so it is not offered.)
+        parts.push(`stdout: ${fmt(args.stdoutCapturedLines)} line(s) captured (${fmt(args.stdoutCapturedLength)} characters); ` +
+            `the first line alone fills the ${cap}-character limit, so line ranges cannot help. Narrow by content ` +
+            `(e.g. \`<command> | grep -oE '<pattern>'\`) or chunk it: ` +
+            (args.savedFile
+                ? `the captured stdout is saved as ${outPath}; run_tool \`fold -w 1000 ${outPath} | sed -n '103,$p'\` ` +
+                    `(chunks of 1000 characters from character 102001 to the end; repeat with a later start if still cut). `
+                : args.outputDirSet
+                    ? `re-run with \` > ${outPath}\` appended, then \`fold -w 1000 ${outPath} | sed -n '103,$p'\` ` +
+                        `(chunks of 1000 characters from character 102001 to the end; repeat with a later start if still cut). `
+                    : `\`<command> | fold -w 1000 | sed -n '103,$p'\` (chunks of 1000 characters from character 102001; ` +
+                        `repeat with a later start if still cut). `) +
+            "'head' returns another prefix and cannot recover the omitted part.");
+    }
+    else if (args.stdoutTruncated) {
+        const from = args.stdoutReturnedLines + 1;
+        // Open-ended range: the line count describes captured stdout, which the
+        // connector trims and caps (10 MiB), so a fixed end could miss the tail.
+        const range = `${from},$p`;
+        let msg = `stdout: ${fmt(args.stdoutCapturedLines)} lines captured (${fmt(args.stdoutCapturedLength)} characters); ` +
+            `lines 1-${fmt(args.stdoutReturnedLines)} returned in full, the rest omitted (the cut can fall mid-line, ` +
+            `so the range below re-reads the cut line whole). `;
+        if (args.savedFile) {
+            msg +=
+                `The captured stdout is saved as ${outPath} (the server resolves %OUTPUT% to the output directory): ` +
+                    `read the omitted part with run_tool \`sed -n '${range}' ${outPath}\`, grep that file for specifics, ` +
+                    `or fetch it with download_file '${args.outFile}'. `;
+        }
+        else if (args.outputDirSet) {
+            msg +=
+                `To read the omitted part: re-run the same command with \` > ${outPath}\` appended ` +
+                    `(the server resolves %OUTPUT% to the output directory), then run_tool \`sed -n '${range}' ${outPath}\` ` +
+                    `(grep that file for specifics; download_file fetches '${args.outFile}'). If re-running is cheap, ` +
+                    `\`<command> | sed -n '${range}'\` does it in one call. `;
+        }
+        else {
+            msg +=
+                `To read the omitted part, re-run as \`<command> | sed -n '${range}'\` (repeat with a later start if that ` +
+                    `is still over the limit), or narrow by content with grep. `;
+        }
+        msg += "'head' returns another prefix and cannot recover the omitted tail.";
+        parts.push(msg);
+    }
+    if (args.stderrTruncated) {
+        let msg = `stderr: ${fmt(args.stderrCapturedLength)} characters captured (after noise filtering), the first ` +
+            `${fmt(MAX_STDERR_RESPONSE)} returned` +
+            (args.stdoutTruncated ? ". " : "; stdout is complete. ");
+        if (args.outputDirSet) {
+            msg +=
+                `To keep all of stderr, re-run as \`( <command> ) 2> ${errPath}\` (the parentheses matter for a pipeline: ` +
+                    `a bare 2> covers only its last stage; use \`( <command> ) > ${outPath} 2>&1\` for both streams) and ` +
+                    `query that file with grep or sed -n.`;
+        }
+        else {
+            msg += "To see more of it, re-run as `( <command> ) 2>&1 | grep -i error` or with a similar filter.";
+        }
+        parts.push(msg);
+    }
+    return parts.join("\n");
 }
 // An actual js_unshroud capture invocation: the executable (wrapper, full or
 // quoted path, or raw js_unshroud-linux-x64 binary) followed by the `run`
@@ -142,8 +353,7 @@ export async function handleRunTool(deps, args) {
             }, startTime);
         }
     }
-    const MAX_STDOUT_RESPONSE = 100 * 1024; // 100KB — fits in LLM context
-    const MAX_STDERR_RESPONSE = 50 * 1024;
+    const MAX_STDOUT_RESPONSE = STDOUT_CAP_CHARS; // 100KB — fits in LLM context
     try {
         const execOptions = {
             timeout: (args.timeout || config.timeout) * 1000,
@@ -156,27 +366,67 @@ export async function handleRunTool(deps, args) {
         let stdout = result.stdout || "";
         let stderr = result.stderr || "";
         stderr = filterStderrNoise(stderr);
-        let truncated = false;
         const fullStdoutLength = stdout.length;
-        if (stdout.length > MAX_STDOUT_RESPONSE) {
+        const stderrCapturedLength = stderr.length; // after noise filtering
+        const stdoutTruncated = stdout.length > MAX_STDOUT_RESPONSE;
+        const stderrTruncated = stderr.length > MAX_STDERR_RESPONSE;
+        const truncated = stdoutTruncated || stderrTruncated;
+        // Line accounting only on the (rare) truncated path; the returned stdout
+        // stays an exact slice with nothing appended, so a forged marker inside
+        // the sample's output cannot masquerade as server metadata.
+        let stdoutCapturedLines = 0;
+        let stdoutReturnedLines = 0;
+        if (stdoutTruncated) {
+            stdoutCapturedLines = countLines(stdout);
             stdout = stdout.slice(0, MAX_STDOUT_RESPONSE);
-            truncated = true;
+            // complete lines inside the slice; a trailing partial line is re-read by the recipe
+            for (let i = 0; i < stdout.length; i++)
+                if (stdout.charCodeAt(i) === 10)
+                    stdoutReturnedLines++;
         }
-        if (stderr.length > MAX_STDERR_RESPONSE) {
+        if (stderrTruncated) {
             stderr = stderr.slice(0, MAX_STDERR_RESPONSE);
-            truncated = true;
         }
-        // Auto-parse output if command matches a known tool with a parser
+        // Auto-parse output if command matches a known tool with a parser. Parse
+        // the CAPTURED stdout (bounded), not just the returned slice, so a finding
+        // past the response cap is still reported; findings_scope says which.
         let findings;
+        let findingsTotal;
         let parsedMetadata;
+        let findingsScope;
         const toolName = detectToolName(fullCommand);
-        if (toolName && hasParser(toolName) && stdout) {
-            const parsed = parseToolOutput(toolName, stdout);
+        const capturedStdout = result.stdout || "";
+        if (toolName && hasParser(toolName) && capturedStdout) {
+            const parseInput = stdoutTruncated ? capturedStdout.slice(0, PARSE_CAP_CHARS) : stdout;
+            const parsed = parseToolOutput(toolName, parseInput);
             if (parsed.parsed) {
                 findings = parsed.findings;
                 parsedMetadata = parsed.metadata;
+                if (findings.length > MAX_FINDINGS) {
+                    findingsTotal = findings.length;
+                    findings = findings.slice(0, MAX_FINDINGS);
+                }
+                // The agent's own head/tail limited the producer: that loss is
+                // upstream of anything the server captured, so it takes precedence.
+                if (detectPipedLimiter(fullCommand)) {
+                    findingsScope = "pipeline_limited";
+                }
+                else if (stdoutTruncated) {
+                    findingsScope = capturedStdout.length > PARSE_CAP_CHARS ? "captured_prefix" : "captured_stdout";
+                }
             }
         }
+        // Spill the captured stdout to the output directory (bounded, hash-named,
+        // idempotent per command) so the omitted tail can be read without
+        // re-running the tool. Non-fatal: on failure the notice carries the
+        // re-run recipe instead.
+        const outFile = suggestedOutputFilename(fullCommand, toolName);
+        let stdoutSavedFile;
+        if (stdoutTruncated) {
+            const spill = await saveOversizedOutput(connector, config.outputDir, outFile, capturedStdout);
+            if (spill.saved)
+                stdoutSavedFile = outFile;
+        }
         // Check for advisory (non-blocking guidance)
         const advisory = getCommandAdvisory(fullCommand);
         // Output-conditioned advisory (tools that exit 0 on failure); scans the
@@ -194,10 +444,31 @@ export async function handleRunTool(deps, args) {
             exit_code: result.exitCode,
             truncated,
             ...(truncated && {
-                truncation_notice: "Output exceeded response size limit. Use 'run_tool' with '| head -N' or redirect to a file for full output.",
-                full_stdout_length: fullStdoutLength,
+                truncation_notice: buildTruncationNotice({
+                    stdoutTruncated,
+                    stderrTruncated,
+                    stdoutCapturedLength: fullStdoutLength,
+                    stdoutCapturedLines,
+                    stdoutReturnedLines,
+                    stderrCapturedLength,
+                    outputDirSet: Boolean(config.outputDir),
+                    outFile,
+                    savedFile: Boolean(stdoutSavedFile),
+                }),
+                full_stdout_length: fullStdoutLength, // legacy alias of stdout_captured_length
+                stdout_truncated: stdoutTruncated,
+                stderr_truncated: stderrTruncated,
+                stdout_captured_length: fullStdoutLength,
+                stderr_captured_length: stderrCapturedLength,
+                ...(stdoutTruncated && {
+                    stdout_captured_lines: stdoutCapturedLines,
+                    stdout_returned_lines: stdoutReturnedLines,
+                }),
+                ...(stdoutSavedFile && { stdout_saved_file: stdoutSavedFile }),
             }),
             ...(findings && { findings, parsed_metadata: parsedMetadata }),
+            ...(findingsTotal !== undefined && { findings_total: findingsTotal }),
+            ...(findings && findingsScope && { findings_scope: findingsScope }),
             ...(advisory && { advisory }),
             ...(outputAdvisory && { output_advisory: outputAdvisory }),
         }, startTime);

package/dist/handlers/run-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-tool.js","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAYtD,MAAM,oBAAoB,GAAyB;IACjD;QACE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,4BAA4B;QACrC,UAAU,EACR,0FAA0F;YAC1F,+DAA+D;YAC/D,6EAA6E;KAChF;CACF,CAAC;AAWF,MAAM,iBAAiB,GAAsB;IAC3C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1C,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EACN,yEAAyE;YACzE,qFAAqF;YACrF,iFAAiF;KACpF;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,OAAO,OAAO,EAAE,QAAQ,CAAC;AAC3B,CAAC;AAoBD,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,sDAAsD,CAAC;AAEnF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,sCAAsC;AACtC,MAAM,0BAA0B,GAC9B,yKAAyK,CAAC;AAE5K,MAAM,wBAAwB,GAA4B;IACxD;QACE,0EAA0E;QAC1E,qEAAqE;QACrE,qBAAqB;QACrB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CACvC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,EACN,iFAAiF;YACjF,iFAAiF;YACjF,8EAA8E;YAC9E,8EAA8E;YAC9E,iFAAiF;YACjF,gFAAgF;YAChF,4EAA4E;KAC/E;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAA0B;IACnD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,OAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,oFAAoF;IACpF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,mFAAmF;IACnF,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,qBAAqB;IACrB,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACzB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,cAAc,CAAC,KAAK,IAAI,yBAAyB,EACjD,cAAc,EACd,YAAY,EACZ,kDAAkD,CACnD,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,0FAA0F;QAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QAC7I,WAAW,GAAG,GAAG,OAAO,KAAK,iBAAiB,GAAG,CAAC;IACpD,CAAC;IAED,+CAA+C;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,UAAU,CAAC,KAAK,IAAI,iBAAiB,EACrC,iBAAiB,EACjB,UAAU,EACV,4EAA4E,CAC7E,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,cAAc,CACnB,UAAU,EACV;gBACE,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,IAAI;gBACrB,IAAI,EAAE,2FAA2F;aAClG,EACD,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,8BAA8B;IACtE,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,WAAW,GAAsC;YACrD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI;SACjD,CAAC;QAEF,iEAAiE;QACjE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAEjC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;QAEvC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,IAAI,QAAQ,CAAC;QACb,IAAI,cAAc,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAEjD,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,cAAc,GAAG,iBAAiB,CAAC;YACvC,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC,UAAU,EAAE;YAChC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,MAAM;YACN,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,IAAI;gBACf,iBAAiB,EAAE,6GAA6G;gBAChI,kBAAkB,EAAE,gBAAgB;aACrC,CAAC;YACF,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;SAC3D,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,8DAA8D;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpE,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"run-tool.js","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAYxD,MAAM,oBAAoB,GAAyB;IACjD;QACE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,4BAA4B;QACrC,UAAU,EACR,0FAA0F;YAC1F,+DAA+D;YAC/D,6EAA6E;KAChF;CACF,CAAC;AAWF,MAAM,iBAAiB,GAAsB;IAC3C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1C,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EACN,yEAAyE;YACzE,qFAAqF;YACrF,iFAAiF;KACpF;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3D,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACxB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,0CAA0C;QACnD,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,OAAO,IAAI,IAAI,CAAC;gBAChB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC,CAAC,sCAAsC;YACvE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe;IAEf,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;YAAE,SAAS;QAC/C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5F,CAAC;YACF,IAAI,OAAO;gBAAE,SAAS;YACtB,gFAAgF;YAChF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAChH,IAAI,SAAS;gBAAE,SAAS;QAC1B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,0EAA0E;AAC1E,+EAA+E;AAC/E,mDAAmD;AACnD,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,8EAA8E;AAC9E,6DAA6D;AAC7D,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,SAAS,eAAe,CAAC,CAA8C;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3D,OAAO,CACL,gCAAgC,CAAC,CAAC,KAAK,oBAAoB,IAAI,yCAAyC;QACxG,2GAA2G;QAC3G,uCAAuC,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,+BAA+B;QAC9G,8BAA8B,CAAC,CAAC,OAAO,yCAAyC,CACjF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,WAAmB,EAAE,QAA4B;IAChF,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,YAAY,IAAI,IAAI,IAAI,aAAa,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAW9B;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;IAChF,MAAM,GAAG,GAAG,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACrD,sFAAsF;IACtF,MAAM,OAAO,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,GAAG,CAAC;IAC/F,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,mBAAmB,KAAK,CAAC,EAAE,CAAC;QAC3D,qEAAqE;QACrE,uEAAuE;QACvE,qCAAqC;QACrC,KAAK,CAAC,IAAI,CACR,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB;YAC5G,kCAAkC,GAAG,kEAAkE;YACvG,2DAA2D;YAC3D,CAAC,IAAI,CAAC,SAAS;gBACb,CAAC,CAAC,mCAAmC,OAAO,6BAA6B,OAAO,uBAAuB;oBACrG,wGAAwG;gBAC1G,CAAC,CAAC,IAAI,CAAC,YAAY;oBACnB,CAAC,CAAC,oBAAoB,OAAO,oCAAoC,OAAO,uBAAuB;wBAC7F,wGAAwG;oBAC1G,CAAC,CAAC,mGAAmG;wBACnG,2CAA2C,CAAC;YAChD,oEAAoE,CACrE,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC1C,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,KAAK,GAAG,GAAG,IAAI,KAAK,CAAC;QAC3B,IAAI,GAAG,GACL,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB;YAC1G,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,kEAAkE;YAC1G,mDAAmD,CAAC;QACtD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG;gBACD,mCAAmC,OAAO,2DAA2D;oBACrG,iDAAiD,KAAK,KAAK,OAAO,oCAAoC;oBACtG,mCAAmC,IAAI,CAAC,OAAO,KAAK,CAAC;QACzD,CAAC;aAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,GAAG;gBACD,+DAA+D,OAAO,cAAc;oBACpF,mFAAmF,KAAK,KAAK,OAAO,KAAK;oBACzG,yDAAyD,IAAI,CAAC,OAAO,8BAA8B;oBACnG,yBAAyB,KAAK,2BAA2B,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,GAAG;gBACD,6DAA6D,KAAK,yCAAyC;oBAC3G,4DAA4D,CAAC;QACjE,CAAC;QACD,GAAG,IAAI,oEAAoE,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,GAAG,GACL,WAAW,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,0DAA0D;YACnG,GAAG,GAAG,CAAC,mBAAmB,CAAC,WAAW;YACtC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,GAAG;gBACD,uDAAuD,OAAO,6CAA6C;oBAC3G,+DAA+D,OAAO,gCAAgC;oBACtG,sCAAsC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,6FAA6F,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAoBD,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,sDAAsD,CAAC;AAEnF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,sCAAsC;AACtC,MAAM,0BAA0B,GAC9B,yKAAyK,CAAC;AAE5K,MAAM,wBAAwB,GAA4B;IACxD;QACE,0EAA0E;QAC1E,qEAAqE;QACrE,qBAAqB;QACrB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CACvC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,EACN,iFAAiF;YACjF,iFAAiF;YACjF,8EAA8E;YAC9E,8EAA8E;YAC9E,iFAAiF;YACjF,gFAAgF;YAChF,4EAA4E;KAC/E;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAA0B;IACnD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,OAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,oFAAoF;IACpF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,mFAAmF;IACnF,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,qBAAqB;IACrB,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACzB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,cAAc,CAAC,KAAK,IAAI,yBAAyB,EACjD,cAAc,EACd,YAAY,EACZ,kDAAkD,CACnD,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,0FAA0F;QAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QAC7I,WAAW,GAAG,GAAG,OAAO,KAAK,iBAAiB,GAAG,CAAC;IACpD,CAAC;IAED,+CAA+C;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,UAAU,CAAC,KAAK,IAAI,iBAAiB,EACrC,iBAAiB,EACjB,UAAU,EACV,4EAA4E,CAC7E,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,cAAc,CACnB,UAAU,EACV;gBACE,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,IAAI;gBACrB,IAAI,EAAE,2FAA2F;aAClG,EACD,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,8BAA8B;IAE5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAsC;YACrD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI;SACjD,CAAC;QAEF,iEAAiE;QACjE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAEjC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,wBAAwB;QACpE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC5D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC5D,MAAM,SAAS,GAAG,eAAe,IAAI,eAAe,CAAC;QAErD,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,eAAe,EAAE,CAAC;YACpB,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,oFAAoF;YACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;oBAAE,mBAAmB,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,QAAQ,CAAC;QACb,IAAI,aAAiC,CAAC;QACtC,IAAI,cAAc,CAAC;QACnB,IAAI,aAAqF,CAAC;QAC1F,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3C,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACvF,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBACnC,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAChC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,+DAA+D;gBAC/D,oEAAoE;gBACpE,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACpC,aAAa,GAAG,kBAAkB,CAAC;gBACrC,CAAC;qBAAM,IAAI,eAAe,EAAE,CAAC;oBAC3B,aAAa,GAAG,cAAc,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBAClG,CAAC;YACH,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,kEAAkE;QAClE,oEAAoE;QACpE,yBAAyB;QACzB,MAAM,OAAO,GAAG,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,eAAmC,CAAC;QACxC,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,KAAK;gBAAE,eAAe,GAAG,OAAO,CAAC;QAC7C,CAAC;QAED,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAEjD,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,cAAc,GAAG,iBAAiB,CAAC;YACvC,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC,UAAU,EAAE;YAChC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,MAAM;YACN,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,IAAI;gBACf,iBAAiB,EAAE,qBAAqB,CAAC;oBACvC,eAAe;oBACf,eAAe;oBACf,oBAAoB,EAAE,gBAAgB;oBACtC,mBAAmB;oBACnB,mBAAmB;oBACnB,oBAAoB;oBACpB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACvC,OAAO;oBACP,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC;iBACpC,CAAC;gBACF,kBAAkB,EAAE,gBAAgB,EAAE,yCAAyC;gBAC/E,gBAAgB,EAAE,eAAe;gBACjC,gBAAgB,EAAE,eAAe;gBACjC,sBAAsB,EAAE,gBAAgB;gBACxC,sBAAsB,EAAE,oBAAoB;gBAC5C,GAAG,CAAC,eAAe,IAAI;oBACrB,qBAAqB,EAAE,mBAAmB;oBAC1C,qBAAqB,EAAE,mBAAmB;iBAC3C,CAAC;gBACF,GAAG,CAAC,eAAe,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;aAC/D,CAAC;YACF,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;YAC9D,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACrE,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;SAC3D,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,8DAA8D;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpE,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/handlers/suggest-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggest-tools.d.ts","sourceRoot":"","sources":["../../src/handlers/suggest-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAyQ5D,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,gBAAgB;;;;;;GAiJvB"}
+{"version":3,"file":"suggest-tools.d.ts","sourceRoot":"","sources":["../../src/handlers/suggest-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAoR5D,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,gBAAgB;;;;;;GAiJvB"}

package/dist/handlers/suggest-tools.js

@@ -144,6 +144,16 @@ const BASE_HINTS = {
         "Look for resolved API names, network connections, file system access, and registry modifications in emulation output. " +
         "For deep analysis, qltool (Qiling) provides multi-platform emulation and tracesc traces execution via Wine. " +
         "Use strings and xorsearch for static indicators before emulation.",
+    ETL: "Windows Event Trace Log (ETL) detected. Start with etl2xml to convert the trace to XML, " +
+        "then inspect the events. This build decodes AMSI traces: search the XML for AmsiScript " +
+        "(TraceLogging captures) or Microsoft_Antimalware_Scan_Interface (manifest/logman captures) " +
+        "to recover the script content the antimalware engine scanned — an empty result means the " +
+        "trace holds no AMSI events, not that it is clean. etl2pcap extracts network packets when " +
+        "the trace contains Microsoft-Windows-NDIS-PacketCapture events (a 24-byte header-only pcap " +
+        "means none were present); to continue with the network toolchain, run tshark or capinfos " +
+        "on it directly via run_tool (e.g. run_tool command='capinfos %OUTPUT%/etl2pcap.pcap'), or " +
+        "copy it into the samples directory to use analyze_file. Note that `file` misidentifies some ETL variants " +
+        "(e.g. as an Apple HFS resource fork) — the .etl extension is the reliable signal.",
     Memory: "Memory image detected. Start with vol3-info to identify OS and kernel version. " +
         "vol3-pslist and vol3-pstree reveal running processes. " +
         "vol3-netscan shows network connections. vol3-psscan finds hidden/unlinked processes. " +