@travisennis/acai 0.0.11 → 0.0.12

package/dist/tools/web-fetch.js

@@ -1,3 +1,6 @@
+import { writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { load } from "cheerio";
 import { z } from "zod";
 import style from "../terminal/style.js";
@@ -9,6 +12,7 @@ const DEFAULT_TIMEOUT = 30000; // 30 seconds
 const MAX_REDIRECTS = 5;
 const MAX_URL_LENGTH = 2048;
 const JINA_API_BASE = "https://r.jina.ai";
+const MAX_INLINE_SIZE = 50_000; // bytes; content exceeding this is written to a temp file
 /**
  * Input schema for the web fetch tool
  */
@@ -400,6 +404,7 @@ export async function executeWebFetch(options, executionOptions) {
         const errorMessage = error instanceof Error ? error.message : String(error);
         throw new Error(`Web fetch failed: ${errorMessage}`);
     }
+    let content;
     switch (output) {
         case "json": {
             const jsonOutput = {
@@ -413,18 +418,32 @@ export async function executeWebFetch(options, executionOptions) {
             if (headers && result.headers) {
                 jsonOutput["headers"] = result["headers"];
             }
-            return JSON.stringify(jsonOutput, null, 2);
+            content = JSON.stringify(jsonOutput, null, 2);
+            break;
         }
         case "html":
-            return result.content;
+            content = result.content;
+            break;
         case "markdown":
-            if (result.contentType.includes("text/html")) {
-                return htmlToMarkdown(result.content);
-            }
-            return result.content;
+            content = result.contentType.includes("text/html")
+                ? htmlToMarkdown(result.content)
+                : result.content;
+            break;
         default:
-            return result.content;
+            content = result.content;
+            break;
+    }
+    const contentSize = Buffer.byteLength(content, "utf-8");
+    if (contentSize > MAX_INLINE_SIZE) {
+        const tmpFile = join(tmpdir(), `acai-webfetch-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.txt`);
+        writeFileSync(tmpFile, content, "utf-8");
+        return [
+            `The fetched content from ${url} is ${contentSize} bytes which exceeds the ${MAX_INLINE_SIZE} byte inline limit.`,
+            `The full content has been saved to: ${tmpFile}`,
+            "To use this content, read the file in parts using the Read tool or search it with the Grep tool.",
+        ].join("\n");
     }
+    return content;
 }
 /**
  * Create the web fetch tool
@@ -437,7 +456,7 @@ export const createWebFetchTool = async () => {
             inputSchema,
         },
         display({ url }) {
-            return `🌐 ${style.cyan(url)}`;
+            return `${style.cyan(url)}`;
         },
         async execute(options, executionOptions) {
             return executeWebFetch(options, executionOptions);

package/dist/tools/web-search.d.ts

@@ -8,8 +8,8 @@ export declare const WebSearchTool: {
  */
 declare const inputSchema: z.ZodObject<{
     query: z.ZodString;
-    numResults: z.ZodOptional<z.ZodPipe<z.ZodTransform<string | null, unknown>, z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
-    timeout: z.ZodOptional<z.ZodPipe<z.ZodTransform<string | null, unknown>, z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
+    numResults: z.ZodOptional<z.ZodPreprocess<z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
+    timeout: z.ZodOptional<z.ZodPreprocess<z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
     provider: z.ZodOptional<z.ZodEnum<{
         exa: "exa";
         duckduckgo: "duckduckgo";
@@ -28,8 +28,8 @@ export declare const createWebSearchTool: () => Promise<{
         description: string;
         inputSchema: z.ZodObject<{
             query: z.ZodString;
-            numResults: z.ZodOptional<z.ZodPipe<z.ZodTransform<string | null, unknown>, z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
-            timeout: z.ZodOptional<z.ZodPipe<z.ZodTransform<string | null, unknown>, z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
+            numResults: z.ZodOptional<z.ZodPreprocess<z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
+            timeout: z.ZodOptional<z.ZodPreprocess<z.ZodNullable<z.ZodCoercedNumber<unknown>>>>;
             provider: z.ZodOptional<z.ZodEnum<{
                 exa: "exa";
                 duckduckgo: "duckduckgo";

package/dist/tools/web-search.js

@@ -217,7 +217,7 @@ export const createWebSearchTool = async () => {
             inputSchema,
         },
         display({ query }) {
-            return `🔍 ${style.cyan(query)}`;
+            return `${style.cyan(query)}`;
         },
         async execute(options, executionOptions) {
             return executeWebSearch(options, executionOptions);

package/dist/tui/components/footer.d.ts

@@ -8,7 +8,6 @@ type State = {
     currentContextWindow: number;
     contextWindow: number;
     agentState?: AgentState;
-    currentMode?: string;
 };
 export declare class FooterComponent implements Component {
     private modelManager;
@@ -16,7 +15,6 @@ export declare class FooterComponent implements Component {
     private state;
     private progressBar;
     private agentState?;
-    private currentMode;
     constructor(modelManager: ModelManager, tokenTracker: TokenTracker | undefined, state: State);
     setState(state: State): void;
     resetState(): void;

package/dist/tui/components/footer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"footer.d.ts","sourceRoot":"","sources":["../../../source/tui/components/footer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,KAAK,SAAS,EAAgB,MAAM,WAAW,CAAC;AAGzD,KAAK,KAAK,GAAG;IACX,aAAa,EAAE,iBAAiB,CAAC;IACjC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AA2CF,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,WAAW,CAAY;gBAE7B,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,KAAK,EAAE,KAAK;IAad,QAAQ,CAAC,KAAK,EAAE,KAAK;IAYrB,UAAU;IAIV,gBAAgB,IAAI,iBAAiB;IAIrC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;CAiFhC"}
+{"version":3,"file":"footer.d.ts","sourceRoot":"","sources":["../../../source/tui/components/footer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,KAAK,SAAS,EAAgB,MAAM,WAAW,CAAC;AAGzD,KAAK,KAAK,GAAG;IACX,aAAa,EAAE,iBAAiB,CAAC;IACjC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AA2CF,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,UAAU,CAAC,CAAa;gBAE9B,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,KAAK,EAAE,KAAK;IAad,QAAQ,CAAC,KAAK,EAAE,KAAK;IASrB,UAAU;IAIV,gBAAgB,IAAI,iBAAiB;IAIrC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;CAkEhC"}

package/dist/tui/components/footer.js

@@ -41,7 +41,6 @@ export class FooterComponent {
     state;
     progressBar;
     agentState;
-    currentMode = "Normal";
     constructor(modelManager, tokenTracker, state) {
         this.modelManager = modelManager;
         this.tokenTracker = tokenTracker;
@@ -53,9 +52,6 @@ export class FooterComponent {
         if (state.agentState) {
             this.agentState = state.agentState;
         }
-        if (state.currentMode !== undefined) {
-            this.currentMode = state.currentMode;
-        }
         this.state = state;
         this.progressBar.setCurrent(state.currentContextWindow);
         this.progressBar.setTotal(state.contextWindow);
@@ -72,20 +68,8 @@ export class FooterComponent {
         const [pathLine, gitLine] = formatProjectStatus(this.state.projectStatus);
         const padding = Math.max(0, width - visibleWidth(pathLine) - modelInfo.length);
         results.push(pathLine + " ".repeat(padding) + style.dim(modelInfo));
-        const modeDisplay = this.currentMode !== "Normal"
-            ? style.magenta(`[${this.currentMode}]`)
-            : "";
         if (gitLine) {
-            if (modeDisplay) {
-                const gitPadding = Math.max(0, width - visibleWidth(gitLine) - visibleWidth(modeDisplay));
-                results.push(`${gitLine}${" ".repeat(gitPadding)}${modeDisplay}`);
-            }
-            else {
-                results.push(gitLine);
-            }
-        }
-        else if (modeDisplay) {
-            results.push(modeDisplay);
+            results.push(gitLine);
         }
         // Line 3: Total session usage from token tracker (accumulated across all turns)
         if (this.tokenTracker) {

package/dist/utils/binary-output.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Binary output handling for Bash tool
+ *
+ * Detects binary output from commands and saves it to temp files
+ * with helpful metadata for the user.
+ */
+/**
+ * Check if output appears to be binary data
+ * Binary is detected by:
+ * - Null bytes (most reliable indicator)
+ * - High ratio of non-printable characters
+ */
+export declare function isBinaryOutput(output: string): boolean;
+/**
+ * Result of saving binary output
+ */
+export interface BinarySaveResult {
+    success: boolean;
+    path?: string;
+    size?: number;
+    mimeType?: string;
+    error?: string;
+}
+/**
+ * Save binary output to a temp file and detect its MIME type
+ */
+export declare function saveBinaryOutput(output: string): BinarySaveResult;
+/**
+ * Format a user-friendly message for binary output
+ */
+export declare function formatBinaryMessage(result: BinarySaveResult): string;
+//# sourceMappingURL=binary-output.d.ts.map

package/dist/utils/binary-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-output.d.ts","sourceRoot":"","sources":["../../source/utils/binary-output.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CA4BtD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA4CjE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBpE"}

package/dist/utils/binary-output.js

@@ -0,0 +1,127 @@
+/**
+ * Binary output handling for Bash tool
+ *
+ * Detects binary output from commands and saves it to temp files
+ * with helpful metadata for the user.
+ */
+import { execSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+/**
+ * Threshold for checking binary content (check first N bytes)
+ */
+const BINARY_CHECK_BYTES = 8192;
+/**
+ * Check if output appears to be binary data
+ * Binary is detected by:
+ * - Null bytes (most reliable indicator)
+ * - High ratio of non-printable characters
+ */
+export function isBinaryOutput(output) {
+    if (output.length === 0) {
+        return false;
+    }
+    // Check first N bytes for null bytes (strongest binary indicator)
+    const checkLength = Math.min(output.length, BINARY_CHECK_BYTES);
+    const sample = output.slice(0, checkLength);
+    // Null byte is definitive binary indicator
+    if (sample.includes("\0")) {
+        return true;
+    }
+    // Count non-printable characters (excluding common whitespace)
+    let nonPrintable = 0;
+    for (let i = 0; i < sample.length; i++) {
+        const code = sample.charCodeAt(i);
+        // Allow printable ASCII (32-126), newlines (10), tabs (9), and carriage returns (13)
+        // Also allow extended ASCII/UTF-8 (127+)
+        if (code < 32 && code !== 9 && code !== 10 && code !== 13) {
+            nonPrintable++;
+        }
+    }
+    // If more than 30% non-printable in the sample, treat as binary
+    const ratio = nonPrintable / sample.length;
+    return ratio > 0.3;
+}
+/**
+ * Save binary output to a temp file and detect its MIME type
+ */
+export function saveBinaryOutput(output) {
+    try {
+        // Generate unique filename
+        const id = randomBytes(8).toString("hex");
+        const filePath = `/tmp/acai/bash_binary_${id}`;
+        // Ensure directory exists
+        mkdirSync(dirname(filePath), { recursive: true });
+        // Convert string back to buffer for accurate binary writing
+        // Note: Some data loss may have occurred during UTF-8 decoding
+        const buffer = Buffer.from(output, "utf8");
+        writeFileSync(filePath, buffer);
+        const size = buffer.length;
+        // Detect MIME type using `file` command
+        let mimeType = "application/octet-stream";
+        try {
+            const fileOutput = execSync(`file --mime-type -b "${filePath}"`, {
+                encoding: "utf8",
+                timeout: 5000,
+            }).trim();
+            if (fileOutput && fileOutput !== "cannot open") {
+                mimeType = fileOutput;
+            }
+        }
+        catch {
+            // `file` command not available or failed, use default
+        }
+        return {
+            success: true,
+            path: filePath,
+            size,
+            mimeType,
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : "Unknown error";
+        return {
+            success: false,
+            error: errorMessage,
+        };
+    }
+}
+/**
+ * Format a user-friendly message for binary output
+ */
+export function formatBinaryMessage(result) {
+    if (!result.success) {
+        return `⚠️ Binary output detected but could not be saved: ${result.error ?? "Unknown error"}`;
+    }
+    const sizeStr = formatBytes(result.size ?? 0);
+    const lines = [
+        "📦 Binary output detected",
+        "",
+        `**Size:** ${sizeStr}`,
+        `**Type:** ${result.mimeType}`,
+        `**Saved to:** \`${result.path}\``,
+        "",
+        "**To inspect this file, you can use:**",
+        "  • `file <path>` - Detect file type",
+        "  • `xxd <path>` - Hex dump",
+        "  • `hexdump -C <path>` - Hex dump with ASCII",
+        "  • `head -c 100 <path> | xxd` - Preview first 100 bytes",
+    ];
+    return lines.join("\n");
+}
+/**
+ * Format bytes as human-readable string
+ */
+function formatBytes(bytes) {
+    if (bytes === 0)
+        return "0 bytes";
+    const units = ["bytes", "KB", "MB", "GB"];
+    const unitIndex = Math.floor(Math.log(bytes) / Math.log(1024));
+    const size = bytes / 1024 ** unitIndex;
+    // Show decimal for KB and up, whole number for bytes
+    if (unitIndex === 0) {
+        return `${bytes} bytes`;
+    }
+    return `${size.toFixed(1)} ${units[unitIndex]}`;
+}

package/dist/utils/command-protection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-protection.d.ts","sourceRoot":"","sources":["../../source/utils/command-protection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CA4B7E;AA8UD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,oBAAoB,GAC3B,MAAM,CAQR"}
+{"version":3,"file":"command-protection.d.ts","sourceRoot":"","sources":["../../source/utils/command-protection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AA0E3E;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CA4B7E;AA8WD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,oBAAoB,GAC3B,MAAM,CAQR"}

package/dist/utils/command-protection.js

@@ -2,6 +2,66 @@
  * Command Protection Module
  * Detects and blocks destructive commands that could cause data loss
  */
+/**
+ * Check if a git subcommand appears as an actual command (not inside quoted strings).
+ * This helps avoid false positives when destructive command text appears in
+ * commit messages or other quoted strings.
+ */
+function isActualGitCommand(command, subcommand) {
+    const pattern = new RegExp(`\\bgit\\s+${subcommand}\\b`, "gi");
+    // Find all matches of git <subcommand>
+    const matches = [];
+    let match = pattern.exec(command);
+    while (match !== null) {
+        matches.push({ index: match.index, text: match[0] });
+        match = pattern.exec(command);
+    }
+    if (matches.length === 0)
+        return false;
+    // For each match, check if it's inside quotes
+    for (const { index } of matches) {
+        if (!isInsideQuotes(command, index)) {
+            // Also check if it's at the start or after command separators
+            const beforeMatch = command.slice(0, index).trim();
+            if (beforeMatch === "" ||
+                beforeMatch.endsWith("&&") ||
+                beforeMatch.endsWith("||") ||
+                beforeMatch.endsWith(";") ||
+                beforeMatch.endsWith("|") ||
+                beforeMatch.endsWith("\n")) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Check if a position in a string is inside quotes (single or double).
+ * Handles escaped quotes.
+ */
+function isInsideQuotes(command, position) {
+    let inSingleQuote = false;
+    let inDoubleQuote = false;
+    let escaped = false;
+    for (let i = 0; i < position; i++) {
+        const char = command[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (char === "\\") {
+            escaped = true;
+            continue;
+        }
+        if (char === '"' && !inSingleQuote) {
+            inDoubleQuote = !inDoubleQuote;
+        }
+        else if (char === "'" && !inDoubleQuote) {
+            inSingleQuote = !inSingleQuote;
+        }
+    }
+    return inSingleQuote || inDoubleQuote;
+}
 /**
  * Detects if a command is destructive and should be blocked
  * @param command - The full command string to check
@@ -91,15 +151,19 @@ function detectDestructiveGitCommands(command) {
         };
     }
     // Block git branch -D (force delete without merge check)
-    if (lowerCommand.match(/git\s+branch\s+-[a-z]/)) {
-        // Check if it's an uppercase letter (force delete)
-        const match = lowerCommand.match(/git\s+branch\s+-[a-z]/);
-        if (match && match[0].slice(-1) !== match[0].slice(-1).toLowerCase()) {
-            // It's uppercase, block it
-        }
-        else if (match) {
-            const upperMatch = command.match(/git\s+branch\s+-[A-Z]/);
-            if (upperMatch) {
+    // Check for uppercase flag on original command (lowercase -d is safe)
+    // Match 'git' case-insensitively, but preserve case for the flag
+    // Only match if git branch appears as an actual command (not inside quoted strings)
+    const branchMatch = lowerCommand.match(/git\s+branch\s+-([a-z])/);
+    if (branchMatch) {
+        // Check if the flag in the original command is uppercase
+        const flagInOriginal = command.match(/git\s+branch\s+-([A-Za-z])/i);
+        if (flagInOriginal &&
+            flagInOriginal[1] === flagInOriginal[1].toUpperCase()) {
+            // Verify this is an actual git branch command, not text inside quotes
+            // Check if git branch appears at start or after command separators
+            const isActualCommand = isActualGitCommand(command, "branch");
+            if (isActualCommand) {
                 return {
                     blocked: true,
                     reason: "git branch -D force-deletes branches without checking if they're merged",
@@ -216,8 +280,27 @@ function detectDangerousInlineScripts(command) {
 }
 /**
  * Detect dangerous patterns in heredocs and here-strings
+ * Only blocks heredocs that are explicitly executed by a scripting language,
+ * not heredocs used as data (e.g., commit messages, config files).
  */
 function detectDangerousHeredocs(command) {
+    // Check if heredoc is being executed by a scripting language
+    // Patterns that indicate execution:
+    // 1. bash <<EOF, sh <<EOF, python <<EOF, etc. (language reads from heredoc)
+    // 2. cat <<EOF | bash, <<EOF | python, etc. (heredoc piped to language)
+    const executionPatterns = [
+        // Shell languages reading heredoc directly
+        /\b(bash|sh|zsh|dash|ksh)\s*<<-?\s*['"]?\w+/i,
+        // Scripting languages reading heredoc directly
+        /\b(python\d?|ruby|perl|node)\s*<<-?\s*['"]?\w+/i,
+        // Heredoc piped to shell
+        /<<-?\s*['"]?\w+['"]?\s*\|\s*(bash|sh|zsh|dash|ksh)\b/i,
+    ];
+    const isExecutableHeredoc = executionPatterns.some((pattern) => pattern.test(command));
+    // Only scan heredoc content if it's being executed by a scripting language
+    if (!isExecutableHeredoc) {
+        return { blocked: false };
+    }
     // Match heredoc patterns: <<EOF ... EOF
     const heredocPattern = /<<-?\s*['"]?(\w+)['"]?\s*([\s\S]*?)\n\1\b/gi;
     let match = null;

package/dist/utils/parsing.d.ts

@@ -1,3 +1,3 @@
 import { z } from "zod";
-export declare function jsonParser<T extends z.ZodTypeAny>(input: T): z.ZodPipe<z.ZodTransform<any, unknown>, T>;
+export declare function jsonParser<T extends z.ZodTypeAny>(input: T): z.ZodPreprocess<T>;
 //# sourceMappingURL=parsing.d.ts.map

package/dist/utils/parsing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsing.d.ts","sourceRoot":"","sources":["../../source/utils/parsing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBtC,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,8CAE1D"}
+{"version":3,"file":"parsing.d.ts","sourceRoot":"","sources":["../../source/utils/parsing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBtC,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,sBAE1D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@travisennis/acai",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "An AI assistant for developing software.",
   "type": "module",
   "main": "dist/index.js",
@@ -33,7 +33,7 @@
     "lint:ast-grep:fix": "sg scan --update-all",
     "lint:biome": "biome lint",
     "lint:biome:fix": "biome lint --unsafe --write",
-    "lint:fix": "(npm run lint:ast-grep || true) && npm run lint:biome:fix",
+    "lint:fix": "npm run lint:ast-grep && npm run lint:biome:fix",
     "lint:staged": "biome lint --error-on-warnings --no-errors-on-unmatched --staged",
     "format:staged": "biome check --staged --formatter-enabled=true --linter-enabled=false --no-errors-on-unmatched",
     "prepack": "npm run clean && npm run build",
@@ -49,6 +49,7 @@
     "oxlint:single": "oxlint --type-aware --ignore-path .gitignore -A all -c .oxlintrc.json",
     "knip": "npx knip",
     "knip:prod": "npx knip --production",
+    "setup": "node scripts/setup.ts",
     "update": "npx npm-check-updates --interactive --format group",
     "cpd": "npx jscpd ./source",
     "typecheck": "tsc --noEmit --pretty -p tsconfig.json",
@@ -57,45 +58,46 @@
     "lint:length": "find source -name '*.ts' | xargs -I{} awk 'END{if(NR>500)print FILENAME\": \"NR\" lines\"}' {}"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "^3.0.63",
-    "@ai-sdk/deepseek": "^2.0.26",
-    "@ai-sdk/devtools": "^0.0.15",
-    "@ai-sdk/google": "^3.0.52",
-    "@ai-sdk/groq": "^3.0.31",
-    "@ai-sdk/open-responses": "^1.0.8",
-    "@ai-sdk/openai": "^3.0.47",
-    "@ai-sdk/openai-compatible": "^2.0.37",
+    "@ai-sdk/alibaba": "^1.0.21",
+    "@ai-sdk/anthropic": "^3.0.74",
+    "@ai-sdk/deepseek": "^2.0.32",
+    "@ai-sdk/devtools": "^0.0.17",
+    "@ai-sdk/google": "^3.0.67",
+    "@ai-sdk/groq": "^3.0.38",
+    "@ai-sdk/open-responses": "^1.0.14",
+    "@ai-sdk/openai": "^3.0.58",
+    "@ai-sdk/openai-compatible": "^2.0.45",
     "@crosscopy/clipboard": "^0.3.6",
     "@travisennis/stdlib": "^0.0.14",
-    "ai": "^6.0.134",
+    "ai": "^6.0.174",
     "cheerio": "^1.2.0",
-    "diff": "^8.0.3",
+    "diff": "^9.0.0",
     "fast-glob": "^3.3.3",
     "fdir": "^6.5.0",
     "highlight.js": "^11.11.1",
-    "marked": "17.0.5",
+    "marked": "18.0.3",
     "p-throttle": "^8.1.0",
-    "parse5": "^8.0.0",
-    "parse5-htmlparser2-tree-adapter": "^8.0.0",
+    "parse5": "^8.0.1",
+    "parse5-htmlparser2-tree-adapter": "^8.0.1",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "pino-roll": "^4.0.0",
     "tiktoken": "^1.0.22",
-    "zod": "^4.3.6"
+    "zod": "^4.4.2"
   },
   "devDependencies": {
-    "@ai-sdk/provider": "^3.0.8",
-    "@ast-grep/napi": "^0.42.0",
-    "@biomejs/biome": "2.4.8",
-    "@commitlint/config-conventional": "^20.5.0",
-    "@types/node": "^25.5.0",
+    "@ai-sdk/provider": "^3.0.10",
+    "@ast-grep/napi": "^0.42.1",
+    "@biomejs/biome": "2.4.14",
+    "@commitlint/config-conventional": "^20.5.3",
+    "@types/node": "^25.6.0",
     "c8": "^11.0.0",
-    "commitlint": "^20.5.0",
+    "commitlint": "^20.5.3",
     "domhandler": "^6.0.1",
     "husky": "^9.1.7",
-    "oxlint": "^1.56.0",
-    "oxlint-tsgolint": "^0.17.1",
-    "typescript": "^5.9.3"
+    "oxlint": "^1.62.0",
+    "oxlint-tsgolint": "^0.22.1",
+    "typescript": "^6.0.3"
   },
   "engines": {
     "node": ">=20"

package/dist/modes/manager.d.ts

@@ -1,24 +0,0 @@
-import type { UserModelMessage } from "ai";
-type Mode = "normal" | "planning" | "research";
-export declare class ModeManager {
-    private currentMode;
-    private firstMessageInMode;
-    getCurrentMode(): Mode;
-    getDisplayName(): string;
-    cycleMode(): void;
-    getInitialPrompt(): string;
-    getReminderPrompt(): string;
-    isNormal(): boolean;
-    isFirstMessage(): boolean;
-    markFirstMessageSent(): void;
-    getReminderMessage(): UserModelMessage | undefined;
-    reset(): void;
-    toJson(): {
-        mode: Mode;
-    };
-    fromJson(data: {
-        mode?: string;
-    }): void;
-}
-export {};
-//# sourceMappingURL=manager.d.ts.map

package/dist/modes/manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../source/modes/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AAI3C,KAAK,IAAI,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;AAmC/C,qBAAa,WAAW;IACtB,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,kBAAkB,CAAQ;IAElC,cAAc,IAAI,IAAI;IAItB,cAAc,IAAI,MAAM;IAIxB,SAAS,IAAI,IAAI;IAOjB,gBAAgB,IAAI,MAAM;IAI1B,iBAAiB,IAAI,MAAM;IAI3B,QAAQ,IAAI,OAAO;IAInB,cAAc,IAAI,OAAO;IAIzB,oBAAoB,IAAI,IAAI;IAI5B,kBAAkB,IAAI,gBAAgB,GAAG,SAAS;IAWlD,KAAK,IAAI,IAAI;IAKb,MAAM,IAAI;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE;IAIxB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;CAMxC"}