@wrongstack/cli 0.308.7 → 0.309.1

package/dist/{acp-5ZLGFHWP.js → acp-7NWCC2GO.js}

@@ -3,8 +3,8 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-JQURRYU4.js";
-import "./chunk-SSSJQVUY.js";
+} from "./chunk-UINEP3E7.js";
+import "./chunk-XQ6FI2K6.js";
 import "./chunk-SZ42FYPT.js";
 import "./chunk-7OCVIDC7.js";
 
@@ -911,4 +911,4 @@ ${renderAcpBenchText(result)}
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-5ZLGFHWP.js.map
+//# sourceMappingURL=acp-7NWCC2GO.js.map

package/dist/{auth-WOKC2RVG.js → auth-GZ2FK5KR.js}

@@ -13,7 +13,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-7JOMY3HO.js";
+} from "./chunk-ZRZ54GVL.js";
 import {
   restoreFlags
 } from "./chunk-CSAPOCBP.js";
@@ -29,7 +29,7 @@ import "./chunk-VUVOMXWP.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
-import "./chunk-SSSJQVUY.js";
+import "./chunk-XQ6FI2K6.js";
 import {
   loadConfigProviders,
   maskedKey,
@@ -596,4 +596,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-WOKC2RVG.js.map
+//# sourceMappingURL=auth-GZ2FK5KR.js.map

package/dist/auth-menu/loopback-server.d.ts

@@ -31,18 +31,6 @@ export interface LoopbackCallback {
     /** The OAuth state parameter from the callback (validated against expected). */
     state: string;
 }
-/**
- * Open a URL in the user's default browser. Best-effort — never throws.
- *
- * - Windows: `cmd /c start "" <url>`
- * - macOS: `open <url>`
- * - Linux: `xdg-open <url>`
- *
- * Not `detached`: the CLI flows wait on the loopback callback in the
- * foreground, so the opener is a short-lived handoff. (The WebUI server's
- * `openBrowser` is deliberately different — it detaches and registers the pid
- * as protected because it launches a browser the session must outlive.)
- */
 export declare function openBrowser(url: string): void;
 /**
  * Start a loopback HTTP server for the OAuth authorization-code callback.

package/dist/{chunk-JQURRYU4.js → chunk-UINEP3E7.js}

@@ -2,7 +2,7 @@ import {
   fallbackCodexProviderModels,
   filterCurrentCodexModelIds,
   isCodexCatalogModel
-} from "./chunk-SSSJQVUY.js";
+} from "./chunk-XQ6FI2K6.js";
 
 // src/acp-registry-cache.ts
 import * as fs from "node:fs/promises";
@@ -214,4 +214,4 @@ export {
   setupProvider,
   createGracefulShutdown
 };
-//# sourceMappingURL=chunk-JQURRYU4.js.map
+//# sourceMappingURL=chunk-UINEP3E7.js.map

package/dist/{chunk-DOJLAULS.js → chunk-WOTGMHAH.js}

@@ -4,20 +4,27 @@ import {
 
 // src/permission-prompt.ts
 import { alwaysAllowUnavailableReason } from "@wrongstack/core/security";
-import { color as color2, truncate, unifiedDiff, writeOut } from "@wrongstack/core/utils";
+import {
+  color as color2,
+  sanitizeTerminalPreview,
+  sanitizeTerminalText as sanitizeTerminalText2,
+  truncate,
+  unifiedDiff,
+  writeOut
+} from "@wrongstack/core/utils";
 
 // src/diff-renderer.ts
-import { color } from "@wrongstack/core/utils";
+import { color, sanitizeTerminalText } from "@wrongstack/core/utils";
+function diffLineStyle(line) {
+  if (line.startsWith("+++") || line.startsWith("---")) return color.bold(line);
+  if (line.startsWith("@@")) return color.cyan(line);
+  if (line.startsWith("+")) return color.green(line);
+  if (line.startsWith("-")) return color.red(line);
+  return color.dim(line);
+}
 function renderDiff(diff) {
   if (!diff) return "";
-  const lines = diff.split("\n");
-  return lines.map((line) => {
-    if (line.startsWith("+++") || line.startsWith("---")) return color.bold(line);
-    if (line.startsWith("@@")) return color.cyan(line);
-    if (line.startsWith("+")) return color.green(line);
-    if (line.startsWith("-")) return color.red(line);
-    return color.dim(line);
-  }).join("\n");
+  return sanitizeTerminalText(diff).split("\n").map(diffLineStyle).join("\n");
 }
 
 // src/permission-prompt.ts
@@ -46,7 +53,7 @@ ${theme.warn("\u26A0 APPROVAL REQUIRED")} ${theme.primary("\u2502")} ${theme.bol
       ...noAlwaysReason ? [] : [{ key: "a", label: "always", value: "always" }],
       { key: "d", label: "deny", value: "deny" }
     ];
-    const alwaysHint = noAlwaysReason ? "" : `  ${theme.bold("[a]")}lways allow (${suggestedPattern})`;
+    const alwaysHint = noAlwaysReason ? "" : `  ${theme.bold("[a]")}lways allow (${sanitizeTerminalText2(suggestedPattern)})`;
     const answer = await reader.readKey(
       `${theme.bold("[y]")}es  ${theme.bold("[n]")}o${alwaysHint}  ${theme.bold("[d]")}eny: `,
       options
@@ -64,17 +71,22 @@ function makeConfirmAwaiter(reader) {
 function stringifyInput(input) {
   if (!input || typeof input !== "object") return "";
   const obj = input;
-  return Object.entries(obj).filter(([k]) => k !== "content" && k !== "new_string").map(([k, v]) => `${k}: ${truncate(JSON.stringify(v), 80)}`).join("  ");
+  return Object.entries(obj).filter(([k]) => k !== "content" && k !== "new_string").map(([k, v]) => `${k}: ${truncate(sanitizeTerminalText2(JSON.stringify(v)), 80)}`).join("  ");
 }
 var PREVIEW_MAX_LINES = 40;
-function clipPreview(body) {
-  const lines = body.split("\n");
-  if (lines.length <= PREVIEW_MAX_LINES) return body;
-  const hidden = lines.length - PREVIEW_MAX_LINES;
-  return `${lines.slice(0, PREVIEW_MAX_LINES).join("\n")}
-${color2.dim(
-    `\u2026 ${hidden} more line${hidden === 1 ? "" : "s"} not shown \u2014 review the file before approving`
-  )}`;
+var PREVIEW_MAX_CHARS = 8e3;
+function clipPreview(body, decorate = (l) => l) {
+  const safe = sanitizeTerminalText2(body);
+  const { text, truncated } = sanitizeTerminalPreview(body, {
+    maxLines: PREVIEW_MAX_LINES,
+    maxChars: PREVIEW_MAX_CHARS
+  });
+  const rendered = text.split("\n").map(decorate).join("\n");
+  if (!truncated) return rendered;
+  const hiddenLines = safe.split("\n").length - text.split("\n").length;
+  const detail = hiddenLines > 0 ? `${hiddenLines} more line${hiddenLines === 1 ? "" : "s"} not shown` : `${safe.length - text.length} more characters not shown`;
+  return `${rendered}
+${color2.dim(`\u2026 ${detail} \u2014 review the file before approving`)}`;
 }
 function renderPayloadPreview(input) {
   if (!input || typeof input !== "object") return "";
@@ -87,17 +99,15 @@ function renderPayloadPreview(input) {
       toFile: "after",
       context: 2
     });
-    return diff2 ? clipPreview(renderDiff(diff2)) : color2.dim("(replacement is identical)");
+    return diff2 ? clipPreview(diff2, diffLineStyle) : color2.dim("(replacement is identical)");
   }
   const content = obj["content"];
   if (typeof content === "string") {
     if (content === "") return color2.dim("(writes an empty file)");
-    return clipPreview(
-      content.split("\n").map((line) => color2.dim("\u2502 ") + line).join("\n")
-    );
+    return clipPreview(content, (line) => color2.dim("\u2502 ") + line);
   }
   const diff = obj["diff"];
-  return typeof diff === "string" && diff ? clipPreview(renderDiff(diff)) : "";
+  return typeof diff === "string" && diff ? clipPreview(diff, diffLineStyle) : "";
 }
 
 // src/boot/simpleui-full-auto.ts
@@ -473,4 +483,4 @@ export {
   detectProjectFacts,
   renderAgentsTemplate
 };
-//# sourceMappingURL=chunk-DOJLAULS.js.map
+//# sourceMappingURL=chunk-WOTGMHAH.js.map

package/dist/{chunk-SSSJQVUY.js → chunk-XQ6FI2K6.js}

@@ -32,7 +32,20 @@ import {
   startLoopbackServer as startSharedLoopbackServer
 } from "@wrongstack/providers/oauth";
 import { callbackHtml } from "@wrongstack/providers/oauth";
+var URL_METACHAR_REGEX = /[&|;<>(){}^"'`%\n\r\0]/;
+function isSafeBrowserUrl(url) {
+  if (URL_METACHAR_REGEX.test(url)) return false;
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "http:" || parsed.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
 function openBrowser(url) {
+  if (!isSafeBrowserUrl(url)) {
+    return;
+  }
   try {
     const platform = process.platform;
     const { command, args } = platform === "win32" ? { command: "cmd", args: ["/c", "start", "", url] } : platform === "darwin" ? { command: "open", args: [url] } : { command: "xdg-open", args: [url] };
@@ -246,4 +259,4 @@ export {
   filterCurrentCodexModelIds,
   isCodexCatalogModel
 };
-//# sourceMappingURL=chunk-SSSJQVUY.js.map
+//# sourceMappingURL=chunk-XQ6FI2K6.js.map

package/dist/{chunk-7JOMY3HO.js → chunk-ZRZ54GVL.js}

@@ -6,7 +6,7 @@ import {
   openBrowser,
   runCodexOAuthLogin,
   startLoopbackServer
-} from "./chunk-SSSJQVUY.js";
+} from "./chunk-XQ6FI2K6.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -1374,4 +1374,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-7JOMY3HO.js.map
+//# sourceMappingURL=chunk-ZRZ54GVL.js.map