@travisennis/acai 0.0.3 → 0.0.5

package/dist/utils/process.js

@@ -3,6 +3,81 @@ import { isUndefined } from "@travisennis/stdlib/typeguards";
 const MS_IN_SECOND = 1000;
 const SECONDS_IN_MINUTE = 60;
 const DEFAULT_TIMEOUT = 2 * SECONDS_IN_MINUTE * MS_IN_SECOND;
+// Quote/escape-aware argv tokenizer that forbids command substitution
+export function parseArgv(input) {
+    const argv = [];
+    let buf = "";
+    let i = 0;
+    const n = input.length;
+    let inSingle = false;
+    let inDouble = false;
+    while (i < n) {
+        const ch = input[i] ?? "";
+        // Reject shell-only constructs early
+        if (ch === "`")
+            return { ok: false, error: "Backticks are not allowed" };
+        if (ch === "$" && i + 1 < n && input[i + 1] === "(") {
+            return { ok: false, error: "Command substitution $() is not allowed" };
+        }
+        if (!inSingle && !inDouble && /\s/.test(ch)) {
+            if (buf.length > 0) {
+                argv.push(buf);
+                buf = "";
+            }
+            i += 1;
+            continue;
+        }
+        if (!inDouble && ch === "'" && !inSingle) {
+            inSingle = true;
+            i += 1;
+            continue;
+        }
+        if (inSingle && ch === "'") {
+            inSingle = false;
+            i += 1;
+            continue;
+        }
+        if (!inSingle && ch === '"' && !inDouble) {
+            inDouble = true;
+            i += 1;
+            continue;
+        }
+        if (inDouble && ch === '"') {
+            inDouble = false;
+            i += 1;
+            continue;
+        }
+        if (!inSingle && ch === "\\") {
+            i += 1;
+            if (i >= n)
+                return { ok: false, error: "Dangling escape" };
+            const next = input[i] ?? "";
+            // Inside double quotes, only escape " and \\ reliably
+            if (inDouble && next !== '"' && next !== "\\") {
+                // Keep backslash literally for safety
+                buf += `\\${next}`;
+            }
+            else {
+                buf += next;
+            }
+            i += 1;
+            continue;
+        }
+        buf += ch;
+        i += 1;
+    }
+    if (inSingle || inDouble)
+        return { ok: false, error: "Unterminated quote" };
+    if (buf.length > 0)
+        argv.push(buf);
+    if (argv.length === 0)
+        return { ok: false, error: "Empty command" };
+    const first = argv[0];
+    if (typeof first !== "string" || first.trim() === "") {
+        return { ok: false, error: "Missing command" };
+    }
+    return { ok: true, argv: argv };
+}
 /**
  * Executes a command and returns the result, providing unified error handling
  *
@@ -19,9 +94,18 @@ export function executeCommand(command, options) {
         [cmd, ...args] = command;
     }
     else {
-        const parts = command.split(" ");
-        cmd = parts[0] ?? "";
-        args = parts.slice(1);
+        const parsed = parseArgv(command);
+        if (!parsed.ok) {
+            const result = {
+                stdout: "",
+                stderr: parsed.error,
+                code: 1,
+            };
+            return throwOnError
+                ? Promise.reject(new Error(parsed.error))
+                : Promise.resolve(result);
+        }
+        [cmd, ...args] = parsed.argv;
     }
     if (isUndefined(cmd) || cmd.trim() === "") {
         const result = {
@@ -33,6 +117,16 @@ export function executeCommand(command, options) {
             ? Promise.reject(new Error("Missing command"))
             : Promise.resolve(result);
     }
+    if (abortSignal?.aborted) {
+        const result = {
+            stdout: "",
+            stderr: "Command execution aborted",
+            code: 130,
+        };
+        return throwOnError
+            ? Promise.reject(new Error("Command execution aborted"))
+            : Promise.resolve(result);
+    }
     return new Promise((resolve, reject) => {
         try {
             execFile(cmd, args, {
@@ -43,12 +137,17 @@ export function executeCommand(command, options) {
                 maxBuffer,
             }, (error, stdout, stderr) => {
                 if (error) {
-                    const errorCode = typeof error.code === "number" ? error.code : 1;
+                    let errorCode = typeof error.code === "number" ? error.code : 1;
+                    let errorSignal = error.signal ?? undefined;
+                    if (error.name === "AbortError") {
+                        errorCode = 130;
+                        errorSignal = "SIGINT";
+                    }
                     const result = {
                         stdout: preserveOutputOnError ? stdout : "",
                         stderr: preserveOutputOnError ? stderr : "",
                         code: errorCode,
-                        signal: error.signal ?? undefined,
+                        signal: errorSignal,
                     };
                     if (throwOnError) {
                         reject(Object.assign(error, { result }));

package/dist/utils/zod-utils.d.ts

@@ -0,0 +1,4 @@
+import { ZodType } from "zod";
+export declare function isZodSchema(obj: unknown): obj is ZodType<unknown>;
+export declare function zodToJsonSchema(schema: ZodType<unknown>): Record<string, unknown>;
+//# sourceMappingURL=zod-utils.d.ts.map

package/dist/utils/zod-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-utils.d.ts","sourceRoot":"","sources":["../../source/utils/zod-utils.ts"],"names":[],"mappings":"AAAA,OAAU,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEjC,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAEjE;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB"}

package/dist/utils/zod-utils.js

@@ -0,0 +1,7 @@
+import z, { ZodType } from "zod";
+export function isZodSchema(obj) {
+    return obj instanceof ZodType;
+}
+export function zodToJsonSchema(schema) {
+    return z.toJSONSchema(schema);
+}

package/dist/version.d.ts

@@ -1 +1,2 @@
 export declare function getPackageVersion(fallback?: string): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../source/version.ts"],"names":[],"mappings":"AAGA,wBAAgB,iBAAiB,CAAC,QAAQ,SAAgB,GAAG,MAAM,CAiBlE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@travisennis/acai",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "description": "An AI assistant for developing software.",
   "type": "module",
   "main": "dist/index.js",
@@ -25,7 +25,7 @@
   "license": "MIT",
   "scripts": {
     "build": "tsc --pretty -p tsconfig.build.json",
-    "clean": "rm -rf ./dist/ ./tsconfig.build.tsbuildinfo",
+    "clean": "rm -rf ./dist/ ./coverage/ ./tsconfig.build.tsbuildinfo",
     "compile": "tsc --pretty -p tsconfig.json",
     "lint": "biome lint",
     "lint:fix": "biome lint --unsafe --write",
@@ -33,56 +33,58 @@
     "format:staged": "biome check --staged --formatter-enabled=true --linter-enabled=false --no-errors-on-unmatched",
     "prepack": "npm run clean && npm run build",
     "prepare": "husky",
-    "test": "c8 node --no-warnings --test test/**/*.test.ts",
-    "pretest": "npm run compile",
+    "test": "node --no-warnings --test test/**/*.test.ts",
+    "test:minimal": "node --no-warnings --test --test-reporter=dot test/**/*.test.ts",
+    "test:coverage": "c8 node --no-warnings --test test/**/*.test.ts",
+    "test:full-coverage": "c8 --all node --no-warnings --test test/**/*.test.ts",
+    "pretest": "npm run typecheck",
     "format": "biome check --formatter-enabled=true --linter-enabled=false --write ./ && biome format --write",
     "dev": "node --no-warnings --env-file=.env ./source/index.ts",
     "oxlint": "npx oxlint@latest --ignore-path .gitignore --deny correctness --deny suspicous --deny pedantic --deny style --node-plugin",
     "knip": "npx knip",
     "check": "npx npm-check-updates --interactive --format group",
     "cpd": "npx jscpd ./source",
-    "typecheck:staged": "tsc --noEmit --pretty -p tsconfig.json"
+    "typecheck": "tsc --noEmit --pretty -p tsconfig.json",
+    "typecheck:staged": "npm run typecheck"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "^2.0.6",
-    "@ai-sdk/deepseek": "^1.0.11",
-    "@ai-sdk/google": "^2.0.8",
-    "@ai-sdk/openai": "^2.0.20",
-    "@ai-sdk/openai-compatible": "^1.0.11",
+    "@ai-sdk/anthropic": "^2.0.25",
+    "@ai-sdk/deepseek": "^1.0.21",
+    "@ai-sdk/google": "^2.0.18",
+    "@ai-sdk/groq": "^2.0.23",
+    "@ai-sdk/openai": "^2.0.46",
+    "@ai-sdk/openai-compatible": "^1.0.20",
     "@crosscopy/clipboard": "^0.2.8",
-    "@inquirer/prompts": "^7.8.4",
+    "@openrouter/ai-sdk-provider": "^1.2.0",
     "@travisennis/stdlib": "^0.0.14",
-    "ai": "^5.0.23",
-    "chalk": "^5.6.0",
+    "ai": "^5.0.64",
     "cheerio": "^1.1.2",
-    "cli-highlight": "^2.1.11",
     "cli-table3": "^0.6.5",
     "diff": "^8.0.2",
     "duck-duck-scrape": "^2.2.7",
-    "exa-js": "^1.9.2",
-    "globby": "^14.1.0",
-    "ignore": "^7.0.5",
-    "log-update": "^6.1.0",
-    "marked": "16.2.0",
-    "ora": "^8.2.0",
+    "fast-glob": "^3.3.3",
+    "highlight.js": "^11.11.1",
+    "jsonrepair": "^3.13.1",
+    "marked": "16.4.0",
     "p-throttle": "^8.0.0",
-    "pino": "^9.9.0",
+    "parse5": "^8.0.0",
+    "parse5-htmlparser2-tree-adapter": "^8.0.0",
+    "pino": "^10.0.0",
     "pino-pretty": "^13.1.1",
-    "pino-roll": "^3.1.0",
+    "pino-roll": "^4.0.0",
     "tiktoken": "^1.0.22",
-    "wrap-ansi": "^9.0.0",
-    "zod": "^3.25.75"
+    "zod": "^4.1.12"
   },
   "devDependencies": {
     "@ai-sdk/provider": "^2.0.0",
-    "@biomejs/biome": "2.2.2",
-    "@commitlint/config-conventional": "^19.8.1",
-    "@types/node": "^24.3.0",
-    "@types/node-notifier": "^8.0.5",
+    "@biomejs/biome": "2.2.5",
+    "@commitlint/config-conventional": "^20.0.0",
+    "@types/node": "^24.7.1",
     "c8": "^10.1.3",
-    "commitlint": "^19.8.1",
+    "commitlint": "^20.1.0",
+    "domhandler": "^5.0.3",
     "husky": "^9.1.7",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.3"
   },
   "engines": {
     "node": ">=20"

package/dist/tools/command-validation.d.ts

@@ -1,12 +0,0 @@
-export declare class CommandValidation {
-    private readonly allowedCommands;
-    private readonly dangerousPatterns;
-    constructor(allowedCommands: string[]);
-    private isCommandAllowed;
-    private hasDangerousPatterns;
-    isValid(command: string): {
-        isValid: boolean;
-        error?: string;
-    };
-    private splitOnPipes;
-}

package/dist/tools/command-validation.js

@@ -1,113 +0,0 @@
-export class CommandValidation {
-    allowedCommands;
-    dangerousPatterns;
-    constructor(allowedCommands) {
-        this.allowedCommands = allowedCommands;
-        // Only block truly dangerous patterns, not useful shell operations
-        this.dangerousPatterns = [
-            /`/, // backticks (command substitution)
-            /\$\(/, // $() command substitution
-            /&&\s*rm\s+-rf/, // dangerous rm chains
-            /;\s*rm\s+-rf/, // dangerous rm chains
-        ];
-    }
-    isCommandAllowed(command) {
-        const baseCommand = command.split(" ")[0] || "";
-        return this.allowedCommands.includes(baseCommand);
-    }
-    hasDangerousPatterns(command) {
-        // Remove all quoted segments first
-        const stripped = command
-            .replace(/'([^'\\]|\\.)*'/g, "")
-            .replace(/"([^"\\]|\\.)*"/g, "");
-        // Check for dangerous patterns only in unquoted portions
-        return this.dangerousPatterns.some((re) => re.test(stripped));
-    }
-    isValid(command) {
-        if (!command.trim()) {
-            return { isValid: false, error: "Command cannot be empty" };
-        }
-        // First check for dangerous patterns
-        if (this.hasDangerousPatterns(command)) {
-            return {
-                isValid: false,
-                error: "Command contains dangerous patterns (command substitution or unsafe rm chains)",
-            };
-        }
-        // Process command while preserving quoted strings to extract sub-commands
-        const subCommands = [];
-        let currentSegment = "";
-        let inSingleQuote = false;
-        let inDoubleQuote = false;
-        for (let i = 0; i < command.length; i++) {
-            const char = command[i];
-            // Handle quote states
-            if (char === "'" && !inDoubleQuote)
-                inSingleQuote = !inSingleQuote;
-            if (char === '"' && !inSingleQuote)
-                inDoubleQuote = !inDoubleQuote;
-            // Split on command separators only when not in quotes
-            // Note: We allow pipes (|) and redirects (>, <) but split on command separators
-            if (!inSingleQuote && !inDoubleQuote && (char === "&" || char === ";")) {
-                if (currentSegment.trim()) {
-                    subCommands.push(currentSegment.trim());
-                    currentSegment = "";
-                }
-                // Skip the operator and any subsequent same operators (like &&)
-                while (i + 1 < command.length &&
-                    ["&", ";"].includes(command[i + 1] ?? "")) {
-                    i++;
-                }
-            }
-            else {
-                currentSegment += char;
-            }
-        }
-        // Add the last segment
-        if (currentSegment.trim()) {
-            subCommands.push(currentSegment.trim());
-        }
-        // Validate all sub-commands (but be smart about pipes)
-        for (const subCmd of subCommands) {
-            // For piped commands, validate each part of the pipe
-            const pipeParts = this.splitOnPipes(subCmd);
-            for (const part of pipeParts) {
-                const trimmedPart = part.trim();
-                if (trimmedPart && !this.isCommandAllowed(trimmedPart)) {
-                    const baseCmd = trimmedPart.split(" ")[0] || "";
-                    return {
-                        isValid: false,
-                        error: `Command '${baseCmd}' is not allowed. Allowed commands: ${this.allowedCommands.join(", ")}`,
-                    };
-                }
-            }
-        }
-        return { isValid: true };
-    }
-    splitOnPipes(command) {
-        const parts = [];
-        let current = "";
-        let inSingleQuote = false;
-        let inDoubleQuote = false;
-        for (let i = 0; i < command.length; i++) {
-            const char = command[i];
-            if (char === "'" && !inDoubleQuote)
-                inSingleQuote = !inSingleQuote;
-            if (char === '"' && !inSingleQuote)
-                inDoubleQuote = !inDoubleQuote;
-            if (char === "|" && !inSingleQuote && !inDoubleQuote) {
-                if (current.trim()) {
-                    parts.push(current.trim());
-                    current = "";
-                }
-            }
-            else {
-                current += char;
-            }
-        }
-        if (current.trim()) {
-            parts.push(current.trim());
-        }
-        return parts;
-    }
-}