@vybestack/llxprt-code-core 0.1.15 → 0.1.16

package/dist/src/utils/secure-browser-launcher.test.js

@@ -0,0 +1,149 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { openBrowserSecurely } from './secure-browser-launcher.js';
+// Create mock function using vi.hoisted
+const mockExecFile = vi.hoisted(() => vi.fn());
+// Mock modules
+vi.mock('node:child_process');
+vi.mock('node:util', () => ({
+    promisify: () => mockExecFile,
+}));
+describe('secure-browser-launcher', () => {
+    let originalPlatform;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockExecFile.mockResolvedValue({ stdout: '', stderr: '' });
+        originalPlatform = Object.getOwnPropertyDescriptor(process, 'platform');
+    });
+    afterEach(() => {
+        if (originalPlatform) {
+            Object.defineProperty(process, 'platform', originalPlatform);
+        }
+    });
+    function setPlatform(platform) {
+        Object.defineProperty(process, 'platform', {
+            value: platform,
+            configurable: true,
+        });
+    }
+    describe('URL validation', () => {
+        it('should allow valid HTTP URLs', async () => {
+            setPlatform('darwin');
+            await openBrowserSecurely('http://example.com');
+            expect(mockExecFile).toHaveBeenCalledWith('open', ['http://example.com'], expect.any(Object));
+        });
+        it('should allow valid HTTPS URLs', async () => {
+            setPlatform('darwin');
+            await openBrowserSecurely('https://example.com');
+            expect(mockExecFile).toHaveBeenCalledWith('open', ['https://example.com'], expect.any(Object));
+        });
+        it('should reject non-HTTP(S) protocols', async () => {
+            await expect(openBrowserSecurely('file:///etc/passwd')).rejects.toThrow('Unsafe protocol');
+            await expect(openBrowserSecurely('javascript:alert(1)')).rejects.toThrow('Unsafe protocol');
+            await expect(openBrowserSecurely('ftp://example.com')).rejects.toThrow('Unsafe protocol');
+        });
+        it('should reject invalid URLs', async () => {
+            await expect(openBrowserSecurely('not-a-url')).rejects.toThrow('Invalid URL');
+            await expect(openBrowserSecurely('')).rejects.toThrow('Invalid URL');
+        });
+        it('should reject URLs with control characters', async () => {
+            await expect(openBrowserSecurely('http://example.com\nmalicious-command')).rejects.toThrow('invalid characters');
+            await expect(openBrowserSecurely('http://example.com\rmalicious-command')).rejects.toThrow('invalid characters');
+            await expect(openBrowserSecurely('http://example.com\x00')).rejects.toThrow('invalid characters');
+        });
+    });
+    describe('Command injection prevention', () => {
+        it('should prevent PowerShell command injection on Windows', async () => {
+            setPlatform('win32');
+            // The POC from the vulnerability report
+            const maliciousUrl = "http://127.0.0.1:8080/?param=example#$(Invoke-Expression([System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('Y2FsYy5leGU='))))";
+            await openBrowserSecurely(maliciousUrl);
+            // Verify that execFile was called (not exec) and the URL is passed safely
+            expect(mockExecFile).toHaveBeenCalledWith('powershell.exe', [
+                '-NoProfile',
+                '-NonInteractive',
+                '-WindowStyle',
+                'Hidden',
+                '-Command',
+                `Start-Process '${maliciousUrl.replace(/'/g, "''")}'`,
+            ], expect.any(Object));
+        });
+        it('should handle URLs with special shell characters safely', async () => {
+            setPlatform('darwin');
+            const urlsWithSpecialChars = [
+                'http://example.com/path?param=value&other=$value',
+                'http://example.com/path#fragment;command',
+                'http://example.com/$(whoami)',
+                'http://example.com/`command`',
+                'http://example.com/|pipe',
+                'http://example.com/>redirect',
+            ];
+            for (const url of urlsWithSpecialChars) {
+                await openBrowserSecurely(url);
+                // Verify the URL is passed as an argument, not interpreted by shell
+                expect(mockExecFile).toHaveBeenCalledWith('open', [url], expect.any(Object));
+            }
+        });
+        it('should properly escape single quotes in URLs on Windows', async () => {
+            setPlatform('win32');
+            const urlWithSingleQuotes = "http://example.com/path?name=O'Brien&test='value'";
+            await openBrowserSecurely(urlWithSingleQuotes);
+            // Verify that single quotes are escaped by doubling them
+            expect(mockExecFile).toHaveBeenCalledWith('powershell.exe', [
+                '-NoProfile',
+                '-NonInteractive',
+                '-WindowStyle',
+                'Hidden',
+                '-Command',
+                `Start-Process 'http://example.com/path?name=O''Brien&test=''value'''`,
+            ], expect.any(Object));
+        });
+    });
+    describe('Platform-specific behavior', () => {
+        it('should use correct command on macOS', async () => {
+            setPlatform('darwin');
+            await openBrowserSecurely('https://example.com');
+            expect(mockExecFile).toHaveBeenCalledWith('open', ['https://example.com'], expect.any(Object));
+        });
+        it('should use PowerShell on Windows', async () => {
+            setPlatform('win32');
+            await openBrowserSecurely('https://example.com');
+            expect(mockExecFile).toHaveBeenCalledWith('powershell.exe', expect.arrayContaining([
+                '-Command',
+                `Start-Process 'https://example.com'`,
+            ]), expect.any(Object));
+        });
+        it('should use xdg-open on Linux', async () => {
+            setPlatform('linux');
+            await openBrowserSecurely('https://example.com');
+            expect(mockExecFile).toHaveBeenCalledWith('xdg-open', ['https://example.com'], expect.any(Object));
+        });
+        it('should throw on unsupported platforms', async () => {
+            setPlatform('aix');
+            await expect(openBrowserSecurely('https://example.com')).rejects.toThrow('Unsupported platform');
+        });
+    });
+    describe('Error handling', () => {
+        it('should handle browser launch failures gracefully', async () => {
+            setPlatform('darwin');
+            mockExecFile.mockRejectedValueOnce(new Error('Command not found'));
+            await expect(openBrowserSecurely('https://example.com')).rejects.toThrow('Failed to open browser');
+        });
+        it('should try fallback browsers on Linux', async () => {
+            setPlatform('linux');
+            // First call to xdg-open fails
+            mockExecFile.mockRejectedValueOnce(new Error('Command not found'));
+            // Second call to gnome-open succeeds
+            mockExecFile.mockResolvedValueOnce({ stdout: '', stderr: '' });
+            await openBrowserSecurely('https://example.com');
+            expect(mockExecFile).toHaveBeenCalledTimes(2);
+            expect(mockExecFile).toHaveBeenNthCalledWith(1, 'xdg-open', ['https://example.com'], expect.any(Object));
+            expect(mockExecFile).toHaveBeenNthCalledWith(2, 'gnome-open', ['https://example.com'], expect.any(Object));
+        });
+    });
+});
+//# sourceMappingURL=secure-browser-launcher.test.js.map

package/dist/src/utils/secure-browser-launcher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-browser-launcher.test.js","sourceRoot":"","sources":["../../../src/utils/secure-browser-launcher.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,wCAAwC;AACxC,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAE/C,eAAe;AACf,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAC9B,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY;CAC9B,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,gBAAgD,CAAC;IAErD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,YAAY,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,gBAAgB,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,WAAW,CAAC,QAAgB;QACnC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;YACzC,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN,CAAC,oBAAoB,CAAC,EACtB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YACjD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN,CAAC,qBAAqB,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,iBAAiB,CAClB,CAAC;YACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,iBAAiB,CAClB,CAAC;YACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,iBAAiB,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5D,aAAa,CACd,CAAC;YACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,MAAM,CACV,mBAAmB,CAAC,uCAAuC,CAAC,CAC7D,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACxC,MAAM,MAAM,CACV,mBAAmB,CAAC,uCAAuC,CAAC,CAC7D,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACxC,MAAM,MAAM,CACV,mBAAmB,CAAC,wBAAwB,CAAC,CAC9C,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,WAAW,CAAC,OAAO,CAAC,CAAC;YAErB,wCAAwC;YACxC,MAAM,YAAY,GAChB,uJAAuJ,CAAC;YAE1J,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAExC,0EAA0E;YAC1E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,gBAAgB,EAChB;gBACE,YAAY;gBACZ,iBAAiB;gBACjB,cAAc;gBACd,QAAQ;gBACR,UAAU;gBACV,kBAAkB,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG;aACtD,EACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,WAAW,CAAC,QAAQ,CAAC,CAAC;YAEtB,MAAM,oBAAoB,GAAG;gBAC3B,kDAAkD;gBAClD,0CAA0C;gBAC1C,8BAA8B;gBAC9B,8BAA8B;gBAC9B,0BAA0B;gBAC1B,8BAA8B;aAC/B,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;gBACvC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAC/B,oEAAoE;gBACpE,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN,CAAC,GAAG,CAAC,EACL,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,WAAW,CAAC,OAAO,CAAC,CAAC;YAErB,MAAM,mBAAmB,GACvB,mDAAmD,CAAC;YACtD,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;YAE/C,yDAAyD;YACzD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,gBAAgB,EAChB;gBACE,YAAY;gBACZ,iBAAiB;gBACjB,cAAc;gBACd,QAAQ;gBACR,UAAU;gBACV,sEAAsE;aACvE,EACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YACjD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN,CAAC,qBAAqB,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YACjD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,gBAAgB,EAChB,MAAM,CAAC,eAAe,CAAC;gBACrB,UAAU;gBACV,qCAAqC;aACtC,CAAC,EACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YACjD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,UAAU,EACV,CAAC,qBAAqB,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,sBAAsB,CACvB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtB,YAAY,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAEnE,MAAM,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,wBAAwB,CACzB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,WAAW,CAAC,OAAO,CAAC,CAAC;YAErB,+BAA+B;YAC/B,YAAY,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACnE,qCAAqC;YACrC,YAAY,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAE/D,MAAM,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YAEjD,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,uBAAuB,CAC1C,CAAC,EACD,UAAU,EACV,CAAC,qBAAqB,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,CAAC,uBAAuB,CAC1C,CAAC,EACD,YAAY,EACZ,CAAC,qBAAqB,CAAC,EACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/utils/summarizer.js

@@ -3,7 +3,7 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { DEFAULT_GEMINI_FLASH_MODEL } from '../config/models.js';
+import { DEFAULT_GEMINI_FLASH_LITE_MODEL } from '../config/models.js';
 import { getResponseText, partToString } from './partUtils.js';
 /**
  * The default summarizer for tool results.
@@ -40,7 +40,7 @@ export async function summarizeToolOutput(textToSummarize, geminiClient, abortSi
         maxOutputTokens,
     };
     try {
-        const parsedResponse = (await geminiClient.generateContent(contents, toolOutputSummarizerConfig, abortSignal, DEFAULT_GEMINI_FLASH_MODEL));
+        const parsedResponse = (await geminiClient.generateContent(contents, toolOutputSummarizerConfig, abortSignal, DEFAULT_GEMINI_FLASH_LITE_MODEL));
         return getResponseText(parsedResponse) || textToSummarize;
     }
     catch (error) {

package/dist/src/utils/summarizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"summarizer.js","sourceRoot":"","sources":["../../../src/utils/summarizer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAc/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,CAC3C,MAAkB,EAClB,aAA2B,EAC3B,YAAyB,EACzB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAExD,MAAM,4BAA4B,GAAG;;;;;;;;;;;;CAYpC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAe,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAC7E,mBAAmB,CACjB,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAC/B,YAAY,EACZ,WAAW,CACZ,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,YAA0B,EAC1B,WAAwB,EACxB,kBAA0B,IAAI;IAE9B,8GAA8G;IAC9G,wFAAwF;IACxF,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjE,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CACjD,mBAAmB,EACnB,MAAM,CAAC,eAAe,CAAC,CACxB,CAAC,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,0BAA0B,GAA0B;QACxD,eAAe;KAChB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,CAAC,MAAM,YAAY,CAAC,eAAe,CACxD,QAAQ,EACR,0BAA0B,EAC1B,WAAW,EACX,0BAA0B,CAC3B,CAAuC,CAAC;QACzC,OAAO,eAAe,CAAC,cAAc,CAAC,IAAI,eAAe,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}
+{"version":3,"file":"summarizer.js","sourceRoot":"","sources":["../../../src/utils/summarizer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAc/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,CAC3C,MAAkB,EAClB,aAA2B,EAC3B,YAAyB,EACzB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAExD,MAAM,4BAA4B,GAAG;;;;;;;;;;;;CAYpC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAe,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAC7E,mBAAmB,CACjB,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAC/B,YAAY,EACZ,WAAW,CACZ,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,YAA0B,EAC1B,WAAwB,EACxB,kBAA0B,IAAI;IAE9B,8GAA8G;IAC9G,wFAAwF;IACxF,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjE,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CACjD,mBAAmB,EACnB,MAAM,CAAC,eAAe,CAAC,CACxB,CAAC,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,0BAA0B,GAA0B;QACxD,eAAe;KAChB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,CAAC,MAAM,YAAY,CAAC,eAAe,CACxD,QAAQ,EACR,0BAA0B,EAC1B,WAAW,EACX,+BAA+B,CAChC,CAAuC,CAAC;QACzC,OAAO,eAAe,CAAC,cAAc,CAAC,IAAI,eAAe,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/src/utils/unicodeUtils.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Sanitizes Unicode strings by handling replacement characters and ensuring
+ * proper UTF-8 encoding for API transmission.
+ */
+/**
+ * Removes or replaces Unicode replacement characters (U+FFFD) from a string.
+ * These characters often appear when there are encoding/decoding errors.
+ *
+ * @param text The text to sanitize
+ * @param replacement What to replace U+FFFD with (default: '?')
+ * @returns The sanitized text
+ */
+export declare function sanitizeUnicodeReplacements(text: string, replacement?: string): string;
+/**
+ * Checks if a string contains Unicode replacement characters (U+FFFD).
+ *
+ * @param text The text to check
+ * @returns True if the text contains replacement characters
+ */
+export declare function hasUnicodeReplacements(text: string): boolean;
+/**
+ * Ensures a string is safe for JSON serialization and API transmission.
+ * This handles various edge cases including:
+ * - Unicode replacement characters
+ * - Control characters
+ * - Invalid surrogate pairs
+ *
+ * @param text The text to make safe
+ * @returns The sanitized text
+ */
+export declare function ensureJsonSafe(text: string): string;
+/**
+ * Attempts to detect and fix common cp932 (Shift-JIS) decoding issues.
+ * This is specifically for Windows Japanese locale users.
+ *
+ * @param text The text that may have cp932 encoding issues
+ * @returns The cleaned text
+ */
+export declare function cleanCp932Artifacts(text: string): string;

package/dist/src/utils/unicodeUtils.js

@@ -0,0 +1,93 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Sanitizes Unicode strings by handling replacement characters and ensuring
+ * proper UTF-8 encoding for API transmission.
+ */
+/**
+ * Removes or replaces Unicode replacement characters (U+FFFD) from a string.
+ * These characters often appear when there are encoding/decoding errors.
+ *
+ * @param text The text to sanitize
+ * @param replacement What to replace U+FFFD with (default: '?')
+ * @returns The sanitized text
+ */
+export function sanitizeUnicodeReplacements(text, replacement = '?') {
+    // U+FFFD is the Unicode replacement character
+    return text.replace(/\uFFFD/g, replacement);
+}
+/**
+ * Checks if a string contains Unicode replacement characters (U+FFFD).
+ *
+ * @param text The text to check
+ * @returns True if the text contains replacement characters
+ */
+export function hasUnicodeReplacements(text) {
+    return /\uFFFD/.test(text);
+}
+/**
+ * Ensures a string is safe for JSON serialization and API transmission.
+ * This handles various edge cases including:
+ * - Unicode replacement characters
+ * - Control characters
+ * - Invalid surrogate pairs
+ *
+ * @param text The text to make safe
+ * @returns The sanitized text
+ */
+export function ensureJsonSafe(text) {
+    // First, handle replacement characters
+    let safe = sanitizeUnicodeReplacements(text);
+    // Remove control characters except common ones (tab, newline, carriage return)
+    let result = '';
+    for (let i = 0; i < safe.length; i++) {
+        const char = safe[i];
+        const code = safe.charCodeAt(i);
+        // Keep tab (0x09), newline (0x0A), and carriage return (0x0D)
+        if (code === 0x09 || code === 0x0a || code === 0x0d) {
+            result += char;
+        }
+        // Skip other control characters
+        else if ((code >= 0x00 && code <= 0x1f) || code === 0x7f) {
+            continue;
+        }
+        // Keep all other characters
+        else {
+            result += char;
+        }
+    }
+    safe = result;
+    // Ensure valid UTF-16 surrogate pairs
+    // This regex matches unpaired surrogates
+    safe = safe.replace(/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g, '?');
+    return safe;
+}
+/**
+ * Attempts to detect and fix common cp932 (Shift-JIS) decoding issues.
+ * This is specifically for Windows Japanese locale users.
+ *
+ * @param text The text that may have cp932 encoding issues
+ * @returns The cleaned text
+ */
+export function cleanCp932Artifacts(text) {
+    // Common cp932 decoding artifacts when incorrectly decoded as UTF-8
+    const commonArtifacts = {
+        '髮｢': '陰',
+        邨ｱ: '結',
+        繧ｳ: 'コ',
+        繝ｼ: 'ー',
+        '繝｡': 'メ',
+        繝ｳ: 'ン',
+        繝医: 'ト',
+        // Add more common patterns as discovered
+    };
+    let cleaned = text;
+    for (const [artifact, replacement] of Object.entries(commonArtifacts)) {
+        cleaned = cleaned.replace(new RegExp(artifact, 'g'), replacement);
+    }
+    return cleaned;
+}
+//# sourceMappingURL=unicodeUtils.js.map

package/dist/src/utils/unicodeUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unicodeUtils.js","sourceRoot":"","sources":["../../../src/utils/unicodeUtils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,cAAsB,GAAG;IAEzB,8CAA8C;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,uCAAuC;IACvC,IAAI,IAAI,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAE7C,+EAA+E;IAC/E,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAEhC,8DAA8D;QAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QACD,gCAAgC;aAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QACD,4BAA4B;aACvB,CAAC;YACJ,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,GAAG,MAAM,CAAC;IAEd,sCAAsC;IACtC,yCAAyC;IACzC,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,yEAAyE,EACzE,GAAG,CACJ,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,oEAAoE;IACpE,MAAM,eAAe,GAA8B;QACjD,IAAI,EAAE,GAAG;QACT,EAAE,EAAE,GAAG;QACP,EAAE,EAAE,GAAG;QACP,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,GAAG;QACT,EAAE,EAAE,GAAG;QACP,EAAE,EAAE,GAAG;QACP,yCAAyC;KAC1C,CAAC;IAEF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/utils/unicodeUtils.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/utils/unicodeUtils.test.js

@@ -0,0 +1,120 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { sanitizeUnicodeReplacements, hasUnicodeReplacements, ensureJsonSafe, cleanCp932Artifacts, } from './unicodeUtils.js';
+describe('Unicode utilities regression tests', () => {
+    describe('sanitizeUnicodeReplacements', () => {
+        it('should remove Unicode replacement characters', () => {
+            const input = 'Hello\uFFFDWorld\uFFFD!';
+            const result = sanitizeUnicodeReplacements(input);
+            expect(result).toBe('Hello?World?!');
+            expect(result).not.toContain('\uFFFD');
+        });
+        it('should use custom replacement when specified', () => {
+            const input = 'Data\uFFFDCorrupted';
+            const result = sanitizeUnicodeReplacements(input, '[INVALID]');
+            expect(result).toBe('Data[INVALID]Corrupted');
+        });
+        it('should handle multiple consecutive replacement characters', () => {
+            const input = 'Test\uFFFD\uFFFD\uFFFDEnd';
+            const result = sanitizeUnicodeReplacements(input);
+            expect(result).toBe('Test???End');
+        });
+    });
+    describe('hasUnicodeReplacements', () => {
+        it('should detect Unicode replacement characters', () => {
+            expect(hasUnicodeReplacements('Normal text')).toBe(false);
+            expect(hasUnicodeReplacements('Text with \uFFFD')).toBe(true);
+            expect(hasUnicodeReplacements('\uFFFD')).toBe(true);
+        });
+    });
+    describe('ensureJsonSafe', () => {
+        it('should remove control characters except tab, newline, and carriage return', () => {
+            const input = 'Text\x00with\x01control\x02chars\nkeep\ttabs\r';
+            const result = ensureJsonSafe(input);
+            expect(result).toBe('Textwithcontrolchars\nkeep\ttabs\r');
+            expect(result).toContain('\n');
+            expect(result).toContain('\t');
+            expect(result).toContain('\r');
+            expect(result).not.toContain('\x00');
+            expect(result).not.toContain('\x01');
+            expect(result).not.toContain('\x02');
+        });
+        it('should handle Unicode replacement characters', () => {
+            const input = 'JSON\uFFFDSafe';
+            const result = ensureJsonSafe(input);
+            expect(result).toBe('JSON?Safe');
+        });
+        it('should fix invalid surrogate pairs', () => {
+            // Unpaired high surrogate
+            const input1 = 'Test\uD800End';
+            const result1 = ensureJsonSafe(input1);
+            expect(result1).toBe('Test?End');
+            // Unpaired low surrogate
+            const input2 = 'Test\uDC00End';
+            const result2 = ensureJsonSafe(input2);
+            expect(result2).toBe('Test?End');
+            // Valid surrogate pair (should be preserved)
+            const input3 = 'Test\uD83D\uDE00End'; // 😀
+            const result3 = ensureJsonSafe(input3);
+            expect(result3).toBe('Test😀End');
+        });
+        it('should handle mixed issues in one string', () => {
+            const input = 'Mixed\x00\uFFFD\uD800issues\x7F';
+            const result = ensureJsonSafe(input);
+            expect(result).toBe('Mixed??issues');
+        });
+    });
+    describe('cleanCp932Artifacts', () => {
+        it('should clean common cp932 decoding artifacts', () => {
+            const input = '髮｢繧ｳ繝ｼ繝｡繝ｳ繝医';
+            const result = cleanCp932Artifacts(input);
+            expect(result).toBe('陰コーメント');
+        });
+        it('should handle multiple artifacts in one string', () => {
+            const input = '邨ｱ髮｢';
+            const result = cleanCp932Artifacts(input);
+            expect(result).toBe('結陰');
+        });
+        it('should leave non-artifact text unchanged', () => {
+            const input = 'Normal Japanese text: こんにちは';
+            const result = cleanCp932Artifacts(input);
+            expect(result).toBe(input);
+        });
+        it('should handle mixed artifact and normal text', () => {
+            const input = 'Before 髮｢ after 繧ｳ end';
+            const result = cleanCp932Artifacts(input);
+            expect(result).toBe('Before 陰 after コ end');
+        });
+    });
+    describe('Real-world scenarios', () => {
+        it('should handle API key with encoding issues', () => {
+            // Simulate an API key read from a file with encoding issues
+            const apiKey = 'sk-1234567890abcdef\uFFFDghijklmnop\x00';
+            const cleaned = ensureJsonSafe(apiKey);
+            expect(cleaned).toBe('sk-1234567890abcdef?ghijklmnop');
+            expect(cleaned).not.toContain('\uFFFD');
+            expect(cleaned).not.toContain('\x00');
+        });
+        it('should handle shell output with cp932 artifacts', () => {
+            // Simulate garbled Japanese error message from Windows shell
+            // Using artifacts we have mappings for
+            const shellOutput = 'Error: 繧ｳ繝ｼ繝｡繝ｳ繝医′髮｢';
+            const cleaned = cleanCp932Artifacts(shellOutput);
+            // Should clean to: "Error: コーメントが陰"
+            expect(cleaned).not.toBe(shellOutput);
+            expect(cleaned).toContain('コーメント');
+        });
+        it('should make API request content safe', () => {
+            const userInput = 'User message with\uFFFDencoding issues\x00and control chars';
+            const safe = ensureJsonSafe(userInput);
+            // Should be safe to JSON stringify
+            expect(() => JSON.stringify({ content: safe })).not.toThrow();
+            expect(safe).toBe('User message with?encoding issuesand control chars');
+        });
+    });
+});
+//# sourceMappingURL=unicodeUtils.test.js.map

package/dist/src/utils/unicodeUtils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unicodeUtils.test.js","sourceRoot":"","sources":["../../../src/utils/unicodeUtils.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,cAAc,EACd,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,yBAAyB,CAAC;YACxC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC;YACpC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,KAAK,GAAG,2BAA2B,CAAC;YAC1C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;YACnF,MAAM,KAAK,GAAG,gDAAgD,CAAC;YAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,0BAA0B;YAC1B,MAAM,MAAM,GAAG,eAAe,CAAC;YAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEjC,yBAAyB;YACzB,MAAM,MAAM,GAAG,eAAe,CAAC;YAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEjC,6CAA6C;YAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,KAAK;YAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,KAAK,GAAG,iCAAiC,CAAC;YAChD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,cAAc,CAAC;YAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,KAAK,GAAG,MAAM,CAAC;YACrB,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,KAAK,GAAG,6BAA6B,CAAC;YAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,4DAA4D;YAC5D,MAAM,MAAM,GAAG,yCAAyC,CAAC;YACzD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,6DAA6D;YAC7D,uCAAuC;YACvC,MAAM,WAAW,GAAG,sBAAsB,CAAC;YAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACjD,oCAAoC;YACpC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,SAAS,GACb,6DAA6D,CAAC;YAChE,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YAEvC,mCAAmC;YACnC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/utils/workspaceContext.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * WorkspaceContext manages multiple workspace directories and validates paths
+ * against them. This allows the CLI to operate on files from multiple directories
+ * in a single session.
+ */
+export declare class WorkspaceContext {
+    private directories;
+    /**
+     * Creates a new WorkspaceContext with the given initial directory and optional additional directories.
+     * @param initialDirectory The initial working directory (usually cwd)
+     * @param additionalDirectories Optional array of additional directories to include
+     */
+    constructor(initialDirectory: string, additionalDirectories?: string[]);
+    /**
+     * Adds a directory to the workspace.
+     * @param directory The directory path to add (can be relative or absolute)
+     * @param basePath Optional base path for resolving relative paths (defaults to cwd)
+     */
+    addDirectory(directory: string, basePath?: string): void;
+    /**
+     * Internal method to add a directory with validation.
+     */
+    private addDirectoryInternal;
+    /**
+     * Gets a copy of all workspace directories.
+     * @returns Array of absolute directory paths
+     */
+    getDirectories(): readonly string[];
+    /**
+     * Checks if a given path is within any of the workspace directories.
+     * @param pathToCheck The path to validate
+     * @returns True if the path is within the workspace, false otherwise
+     */
+    isPathWithinWorkspace(pathToCheck: string): boolean;
+    /**
+     * Checks if a path is within a given root directory.
+     * @param pathToCheck The absolute path to check
+     * @param rootDirectory The absolute root directory
+     * @returns True if the path is within the root directory, false otherwise
+     */
+    private isPathWithinRoot;
+}

package/dist/src/utils/workspaceContext.js

@@ -0,0 +1,106 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * WorkspaceContext manages multiple workspace directories and validates paths
+ * against them. This allows the CLI to operate on files from multiple directories
+ * in a single session.
+ */
+export class WorkspaceContext {
+    directories;
+    /**
+     * Creates a new WorkspaceContext with the given initial directory and optional additional directories.
+     * @param initialDirectory The initial working directory (usually cwd)
+     * @param additionalDirectories Optional array of additional directories to include
+     */
+    constructor(initialDirectory, additionalDirectories = []) {
+        this.directories = new Set();
+        this.addDirectoryInternal(initialDirectory);
+        for (const dir of additionalDirectories) {
+            this.addDirectoryInternal(dir);
+        }
+    }
+    /**
+     * Adds a directory to the workspace.
+     * @param directory The directory path to add (can be relative or absolute)
+     * @param basePath Optional base path for resolving relative paths (defaults to cwd)
+     */
+    addDirectory(directory, basePath = process.cwd()) {
+        this.addDirectoryInternal(directory, basePath);
+    }
+    /**
+     * Internal method to add a directory with validation.
+     */
+    addDirectoryInternal(directory, basePath = process.cwd()) {
+        const absolutePath = path.isAbsolute(directory)
+            ? directory
+            : path.resolve(basePath, directory);
+        if (!fs.existsSync(absolutePath)) {
+            throw new Error(`Directory does not exist: ${absolutePath}`);
+        }
+        const stats = fs.statSync(absolutePath);
+        if (!stats.isDirectory()) {
+            throw new Error(`Path is not a directory: ${absolutePath}`);
+        }
+        let realPath;
+        try {
+            realPath = fs.realpathSync(absolutePath);
+        }
+        catch (_error) {
+            throw new Error(`Failed to resolve path: ${absolutePath}`);
+        }
+        this.directories.add(realPath);
+    }
+    /**
+     * Gets a copy of all workspace directories.
+     * @returns Array of absolute directory paths
+     */
+    getDirectories() {
+        return Array.from(this.directories);
+    }
+    /**
+     * Checks if a given path is within any of the workspace directories.
+     * @param pathToCheck The path to validate
+     * @returns True if the path is within the workspace, false otherwise
+     */
+    isPathWithinWorkspace(pathToCheck) {
+        try {
+            const absolutePath = path.resolve(pathToCheck);
+            let resolvedPath = absolutePath;
+            if (fs.existsSync(absolutePath)) {
+                try {
+                    resolvedPath = fs.realpathSync(absolutePath);
+                }
+                catch (_error) {
+                    return false;
+                }
+            }
+            for (const dir of this.directories) {
+                if (this.isPathWithinRoot(resolvedPath, dir)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        catch (_error) {
+            return false;
+        }
+    }
+    /**
+     * Checks if a path is within a given root directory.
+     * @param pathToCheck The absolute path to check
+     * @param rootDirectory The absolute root directory
+     * @returns True if the path is within the root directory, false otherwise
+     */
+    isPathWithinRoot(pathToCheck, rootDirectory) {
+        const relative = path.relative(rootDirectory, pathToCheck);
+        return (!relative.startsWith(`..${path.sep}`) &&
+            relative !== '..' &&
+            !path.isAbsolute(relative));
+    }
+}
+//# sourceMappingURL=workspaceContext.js.map

package/dist/src/utils/workspaceContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceContext.js","sourceRoot":"","sources":["../../../src/utils/workspaceContext.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IACnB,WAAW,CAAc;IAEjC;;;;OAIG;IACH,YAAY,gBAAwB,EAAE,wBAAkC,EAAE;QACxE,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;YACxC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAiB,EAAE,WAAmB,OAAO,CAAC,GAAG,EAAE;QAC9D,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,SAAiB,EACjB,WAAmB,OAAO,CAAC,GAAG,EAAE;QAEhC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,WAAmB;QACvC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAE/C,IAAI,YAAY,GAAG,YAAY,CAAC;YAChC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,gBAAgB,CACtB,WAAmB,EACnB,aAAqB;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAC3D,OAAO,CACL,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,QAAQ,KAAK,IAAI;YACjB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/src/utils/workspaceContext.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};