@wrongstack/tools 0.310.1 → 0.313.1

package/dist/chunk-MKRQMLZA.js

@@ -0,0 +1,474 @@
+import {
+  checkSyntax
+} from "./chunk-3QMQBO5Z.js";
+import {
+  enqueueReindex
+} from "./chunk-2ME7ZWDD.js";
+import {
+  safeResolveReal,
+  sha256hex,
+  truncateDiffPayload
+} from "./chunk-D33S4RQG.js";
+
+// src/edit.ts
+import * as fs from "node:fs/promises";
+import {
+  atomicWrite,
+  detectNewlineStyle,
+  normalizeToLf,
+  toStyle,
+  unifiedDiff
+} from "@wrongstack/core/utils";
+import { ToolValidationError } from "@wrongstack/core/types";
+
+// src/_edit-match.ts
+var TIER_LABEL = {
+  exact: "exact match",
+  "trailing-whitespace": "whitespace-normalized match (trailing whitespace ignored)",
+  "whitespace-normalized": "whitespace-normalized match (indentation ignored, replacement re-indented)",
+  fuzzy: "fuzzy match (block anchors exact, interior \u226590% similar)"
+};
+var TIER_CONFIDENCE = {
+  exact: "exact",
+  "trailing-whitespace": "high",
+  "whitespace-normalized": "medium",
+  fuzzy: "low"
+};
+var MIN_NORMALIZED_NEEDLE_CHARS = 16;
+var FUZZY_MIN_SIMILARITY = 0.9;
+var FUZZY_AMBIGUITY_MARGIN = 0.05;
+var FUZZY_MAX_INTERIOR_CHARS = 2e3;
+function findLadderMatches(fileLf, oldLf) {
+  const exact = [];
+  let idx = fileLf.indexOf(oldLf);
+  while (idx !== -1) {
+    exact.push({ start: idx, end: idx + oldLf.length, startLine: lineAt(fileLf, idx) });
+    idx = fileLf.indexOf(oldLf, idx + 1);
+  }
+  if (exact.length > 0) return { tier: "exact", matches: exact };
+  const fileLines = fileLf.split("\n");
+  const needleLines = oldLf.split("\n");
+  if (needleLines.length > fileLines.length) return void 0;
+  const offsets = lineOffsets(fileLines);
+  const fileTrimEnd = fileLines.map((l) => l.trimEnd());
+  const needleTrimEnd = needleLines.map((l) => l.trimEnd());
+  const trailing = windowScan(fileTrimEnd, needleTrimEnd, offsets, fileLines, (a, b) => a === b);
+  if (trailing.length > 0) return { tier: "trailing-whitespace", matches: trailing };
+  const normalizedLen = needleTrimEnd.reduce((n, l) => n + l.trimStart().length, 0);
+  if (normalizedLen < MIN_NORMALIZED_NEEDLE_CHARS) return void 0;
+  const fileTrimmed = fileTrimEnd.map((l) => l.trimStart());
+  const needleTrimmed = needleTrimEnd.map((l) => l.trimStart());
+  const normalized = windowScan(fileTrimmed, needleTrimmed, offsets, fileLines, (a, b) => a === b);
+  if (normalized.length > 0) return { tier: "whitespace-normalized", matches: normalized };
+  return fuzzyScan(fileLines, needleLines, offsets);
+}
+function lineAt(text, pos) {
+  if (pos < 512) {
+    let line2 = 1;
+    for (let i = 0; i < pos; i++) {
+      if (text.charCodeAt(i) === 10) line2++;
+    }
+    return line2;
+  }
+  let line = 1;
+  let search = 0;
+  while (true) {
+    const idx = text.indexOf("\n", search);
+    if (idx === -1 || idx >= pos) return line;
+    search = idx + 1;
+    line++;
+  }
+}
+function lineOffsets(lines) {
+  const out = new Array(lines.length);
+  let pos = 0;
+  for (let i = 0; i < lines.length; i++) {
+    out[i] = pos;
+    pos += lines[i].length + 1;
+  }
+  return out;
+}
+function windowToMatch(fileLines, offsets, start, windowLen) {
+  const lastLine = start + windowLen - 1;
+  return {
+    start: offsets[start],
+    end: offsets[lastLine] + fileLines[lastLine].length,
+    startLine: start + 1
+  };
+}
+function windowScan(comparisonLines, needleLines, offsets, originalLines, eq) {
+  const n = needleLines.length;
+  const out = [];
+  for (let i = 0; i + n <= comparisonLines.length; i++) {
+    let all = true;
+    for (let j = 0; j < n; j++) {
+      if (!eq(comparisonLines[i + j], needleLines[j])) {
+        all = false;
+        break;
+      }
+    }
+    if (all) {
+      out.push(windowToMatch(originalLines, offsets, i, n));
+      i += n - 1;
+    }
+  }
+  return out;
+}
+function fuzzyScan(fileLines, needleLines, offsets) {
+  const n = needleLines.length;
+  if (n < 3) return void 0;
+  const firstNeedle = needleLines[0].trim();
+  const lastNeedle = needleLines[n - 1].trim();
+  const needleInterior = needleLines.slice(1, -1).map((l) => l.trim()).join("\n");
+  if (needleInterior.length > FUZZY_MAX_INTERIOR_CHARS) return void 0;
+  const candidates = [];
+  for (let i = 0; i + n <= fileLines.length; i++) {
+    if (fileLines[i].trim() !== firstNeedle) continue;
+    if (fileLines[i + n - 1].trim() !== lastNeedle) continue;
+    const windowInterior = fileLines.slice(i + 1, i + n - 1).map((l) => l.trim()).join("\n");
+    if (windowInterior.length > FUZZY_MAX_INTERIOR_CHARS) continue;
+    const score = similarity(needleInterior, windowInterior);
+    if (score >= FUZZY_MIN_SIMILARITY) {
+      candidates.push({ match: windowToMatch(fileLines, offsets, i, n), score });
+    }
+  }
+  if (candidates.length === 0) return void 0;
+  candidates.sort((a, b) => b.score - a.score);
+  const best = candidates[0];
+  const runnerUp = candidates[1];
+  if (runnerUp && best.score - runnerUp.score < FUZZY_AMBIGUITY_MARGIN) {
+    return {
+      tier: "fuzzy",
+      matches: candidates.map((c) => c.match),
+      score: best.score,
+      ambiguous: true
+    };
+  }
+  return { tier: "fuzzy", matches: [best.match], score: best.score };
+}
+function similarity(a, b) {
+  if (a === b) return 1;
+  const max = Math.max(a.length, b.length);
+  if (max === 0) return 1;
+  if (Math.abs(a.length - b.length) / max > 1 - FUZZY_MIN_SIMILARITY + 0.05) {
+    return 1 - Math.abs(a.length - b.length) / max;
+  }
+  return 1 - levenshtein(a, b) / max;
+}
+function levenshtein(a, b) {
+  if (a.length === 0) return b.length;
+  if (b.length === 0) return a.length;
+  let prev = new Array(b.length + 1);
+  let cur = new Array(b.length + 1);
+  for (let j = 0; j <= b.length; j++) prev[j] = j;
+  for (let i = 1; i <= a.length; i++) {
+    cur[0] = i;
+    const ca = a.charCodeAt(i - 1);
+    for (let j = 1; j <= b.length; j++) {
+      const cost = ca === b.charCodeAt(j - 1) ? 0 : 1;
+      cur[j] = Math.min(
+        prev[j] + 1,
+        cur[j - 1] + 1,
+        prev[j - 1] + cost
+      );
+    }
+    [prev, cur] = [cur, prev];
+  }
+  return prev[b.length];
+}
+function firstLineIndent(text) {
+  for (const line of text.split("\n")) {
+    if (line.trim() === "") continue;
+    return /^[ \t]*/.exec(line)[0];
+  }
+  return "";
+}
+function adjustIndent(newLf, fromIndent, toIndent) {
+  if (fromIndent === toIndent) return { text: newLf, adjusted: false };
+  const lines = newLf.split("\n");
+  if (toIndent.startsWith(fromIndent)) {
+    const extra = toIndent.slice(fromIndent.length);
+    return {
+      text: lines.map((l) => l.trim() === "" ? l : extra + l).join("\n"),
+      adjusted: true
+    };
+  }
+  if (fromIndent.startsWith(toIndent)) {
+    const remove = fromIndent.slice(toIndent.length);
+    return {
+      text: lines.map((l) => l.startsWith(remove) ? l.slice(remove.length) : l).join("\n"),
+      adjusted: true
+    };
+  }
+  return { text: newLf, adjusted: false };
+}
+function nearestMatchHint(fileLf, oldLf) {
+  const fileLines = fileLf.split("\n");
+  const needleLines = oldLf.split("\n");
+  if (needleLines.length > fileLines.length) return void 0;
+  const needleTrimmed = needleLines.map((l) => l.trim());
+  let bestScore = 0;
+  let bestStart = -1;
+  for (let i = 0; i + needleLines.length <= fileLines.length; i++) {
+    let sum = 0;
+    for (let j = 0; j < needleLines.length; j++) {
+      sum += prefixSimilarity(needleTrimmed[j], fileLines[i + j].trim());
+    }
+    const score = sum / needleLines.length;
+    if (score > bestScore) {
+      bestScore = score;
+      bestStart = i;
+    }
+  }
+  if (bestStart === -1 || bestScore < 0.5) return void 0;
+  const snippet = fileLines.slice(bestStart, bestStart + Math.min(3, needleLines.length)).map((l) => l.length > 120 ? `${l.slice(0, 120)}\u2026` : l).join("\n");
+  return { line: bestStart + 1, snippet };
+}
+function prefixSimilarity(a, b) {
+  if (a === b) return 1;
+  const max = Math.max(a.length, b.length);
+  if (max === 0) return 1;
+  let p = 0;
+  const lim = Math.min(a.length, b.length);
+  while (p < lim && a.charCodeAt(p) === b.charCodeAt(p)) p++;
+  return p / max;
+}
+
+// src/edit.ts
+var MAX_DIFF_BYTES = 262144;
+var editTool = {
+  name: "edit",
+  category: "Filesystem",
+  description: "Perform a precise, surgical text replacement in a file. This is the preferred tool for modifying existing code. It works best after a prior `read`, but can auto-read the current file when the replacement is still unambiguous. Fails safely if the `old_string` appears more than once unless `replace_all` is set.",
+  usageHint: "RECOMMENDED WORKFLOW:\n1. Prefer calling `read` on the target file first when planning an edit.\n2. Use a sufficiently unique `old_string` (include surrounding lines/context if needed).\n3. If the string appears multiple times and you want to change all of them, set `replace_all: true`.\n4. `new_string` must be the exact replacement text.\n\nIf no prior read is recorded, the tool auto-reads the current file and only applies the edit after the same ambiguity checks pass.\nIf `old_string` differs from the file only in whitespace (trailing spaces, indentation), a lower-confidence fallback match is applied and reported in `matched_by`/`note` \u2014 always verify the diff when this happens.\nAfter the edit, TS/JS/JSON files are syntax-checked; if `syntax_errors` is present in the output, fix those errors immediately with a follow-up edit.",
+  selection: {
+    doNotUseWhen: "creating a new file, replacing the whole file, or applying an existing unified diff.",
+    useInstead: ["write", "patch"]
+  },
+  permission: "confirm",
+  // WS-046: gives permission decisions something to key on — the file being
+  // edited, so trust rules can scope by path.
+  subjectKey: "path",
+  mutating: true,
+  capabilities: ["fs.write"],
+  icon: "edit",
+  timeoutMs: 5e3,
+  maxOutputBytes: 262144,
+  inputSchema: {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description: "Path to the file to edit \u2014 relative to the project root, or absolute inside it."
+      },
+      old_string: {
+        type: "string",
+        description: "The exact text to replace, including whitespace and indentation. Must be unique in the file unless `replace_all` is set \u2014 add surrounding lines to disambiguate."
+      },
+      new_string: {
+        type: "string",
+        description: "The exact replacement text (may be empty to delete `old_string`)."
+      },
+      replace_all: {
+        type: "boolean",
+        description: "Replace every occurrence instead of requiring a unique match. Only allowed when `old_string` matches exactly (or up to trailing whitespace) \u2014 fuzzy matches stay single-target."
+      }
+    },
+    required: ["path", "old_string", "new_string"]
+  },
+  async execute(input, ctx, opts) {
+    if (!input?.path) {
+      throw new ToolValidationError({ message: "edit: path is required", field: "path" });
+    }
+    if (input.old_string === void 0) {
+      throw new ToolValidationError({
+        message: "edit: old_string is required",
+        field: "old_string"
+      });
+    }
+    if (input.new_string === void 0) {
+      throw new ToolValidationError({
+        message: "edit: new_string is required",
+        field: "new_string"
+      });
+    }
+    if (input.old_string === "") {
+      throw new ToolValidationError({
+        message: "edit: old_string cannot be empty",
+        field: "old_string"
+      });
+    }
+    const absPath = await safeResolveReal(input.path, ctx);
+    const stat2 = await fs.stat(absPath).catch((err) => {
+      if (err.code === "ENOENT") {
+        throw new ToolValidationError({
+          message: `edit: file "${input.path}" does not exist. Use \`write\` instead.`,
+          field: "path",
+          context: { exists: false }
+        });
+      }
+      throw err;
+    });
+    if (!stat2.isFile()) {
+      throw new ToolValidationError({
+        message: `edit: "${input.path}" is not a regular file`,
+        field: "path"
+      });
+    }
+    const autoRead = !ctx.hasRead(absPath);
+    const original = await fs.readFile(absPath, "utf8");
+    const updated = await fs.stat(absPath);
+    const mtimeTolerance = process.platform === "win32" ? 2e3 : 1;
+    const originalHash = sha256hex(original);
+    const lastReadHash = ctx.lastReadHash?.(absPath);
+    if (lastReadHash !== void 0) {
+      if (lastReadHash !== originalHash) {
+        throw new ToolValidationError({
+          message: `edit: file "${input.path}" was modified externally. Re-read it first.`,
+          field: "path",
+          context: { reason: "external_modification" }
+        });
+      }
+    } else {
+      const lastReadMtime = ctx.lastReadMtime(absPath);
+      if (lastReadMtime !== void 0 && updated.mtimeMs > lastReadMtime + mtimeTolerance) {
+        throw new ToolValidationError({
+          message: `edit: file "${input.path}" was modified externally. Re-read it first.`,
+          field: "path",
+          context: { reason: "external_modification" }
+        });
+      }
+    }
+    if (autoRead && updated.mtimeMs > stat2.mtimeMs + mtimeTolerance) {
+      throw new ToolValidationError({
+        message: `edit: file "${input.path}" changed while being auto-read. Retry the edit.`,
+        field: "path",
+        context: { reason: "auto_read_race" }
+      });
+    }
+    const autoReadNote = autoRead ? `No prior read was recorded for "${input.path}"; edit auto-read the current file and applied the replacement only after the ambiguity checks passed.` : void 0;
+    const style = detectNewlineStyle(original);
+    const fileLf = normalizeToLf(original);
+    const oldLf = normalizeToLf(input.old_string);
+    const newLf = normalizeToLf(input.new_string);
+    if (oldLf === newLf) {
+      if (!fileLf.includes(oldLf)) {
+        throw noMatchError(input.path, fileLf, oldLf);
+      }
+      if (autoRead) ctx.recordRead(absPath, updated.mtimeMs, "user", originalHash);
+      return {
+        path: absPath,
+        replacements: 0,
+        diff: "(no-op: old and new are identical)",
+        matched_by: "exact",
+        note: autoReadNote
+      };
+    }
+    opts?.signal?.throwIfAborted();
+    const ladder = findLadderMatches(fileLf, oldLf);
+    if (!ladder) {
+      opts?.signal?.throwIfAborted();
+      throw noMatchError(input.path, fileLf, oldLf);
+    }
+    const { tier, matches } = ladder;
+    const count = matches.length;
+    if (ladder.ambiguous) {
+      const lines = matches.map((m) => m.startLine);
+      throw new ToolValidationError({
+        message: `edit: old_string only matched fuzzily and ${count} candidate blocks scored too close to distinguish (lines: ${lines.join(", ")}) in "${input.path}". Re-read the file and use the exact text of the intended block.`,
+        field: "old_string",
+        context: { occurrences: count, matchTier: tier }
+      });
+    }
+    if (input.replace_all && tier !== "exact" && tier !== "trailing-whitespace") {
+      throw new ToolValidationError({
+        message: `edit: old_string only matched via ${TIER_LABEL[tier]} in "${input.path}", but replace_all requires an exact (or trailing-whitespace) match. Re-read the file and use its exact text.`,
+        field: "old_string",
+        context: { matchTier: tier }
+      });
+    }
+    if (count > 1 && !input.replace_all) {
+      const lines = matches.map((m) => m.startLine);
+      throw new ToolValidationError({
+        message: `edit: old_string matched ${count} times in "${input.path}" (lines: ${lines.join(", ")})${tier === "exact" ? "" : ` via ${TIER_LABEL[tier]}`}. Add more context to make it unique, or set replace_all: true.`,
+        field: "old_string",
+        context: { occurrences: count, matchTier: tier }
+      });
+    }
+    let newFileLf;
+    let tierNote;
+    if (tier === "exact") {
+      newFileLf = input.replace_all ? fileLf.split(oldLf).join(newLf) : fileLf.replace(oldLf, newLf);
+    } else {
+      let replacement = newLf;
+      let indentSuffix = "";
+      if (tier === "whitespace-normalized" || tier === "fuzzy") {
+        const first = matches[0];
+        const matchedText = fileLf.slice(first.start, first.end);
+        const adjusted = adjustIndent(newLf, firstLineIndent(oldLf), firstLineIndent(matchedText));
+        replacement = adjusted.text;
+        if (adjusted.adjusted) indentSuffix = "; replacement re-indented to match the file";
+      }
+      newFileLf = fileLf;
+      const applied = input.replace_all ? matches : matches.slice(0, 1);
+      for (let i = applied.length - 1; i >= 0; i--) {
+        const m = applied[i];
+        newFileLf = newFileLf.slice(0, m.start) + replacement + newFileLf.slice(m.end);
+      }
+      const scoreSuffix = ladder.score !== void 0 ? `, similarity ${(ladder.score * 100).toFixed(1)}%` : "";
+      tierNote = `old_string did not match exactly; applied via ${TIER_LABEL[tier]} at line ${matches[0].startLine} (confidence: ${TIER_CONFIDENCE[tier]}${scoreSuffix}${indentSuffix}). Review the diff to confirm the intended target was edited.`;
+    }
+    const newFile = toStyle(newFileLf, style);
+    opts?.signal?.throwIfAborted();
+    await atomicWrite(absPath, newFile, { mode: updated.mode & 511 });
+    try {
+      enqueueReindex({ projectRoot: ctx.projectRoot, files: [absPath] });
+    } catch {
+    }
+    const written = await fs.stat(absPath);
+    ctx.recordRead(absPath, written.mtimeMs, "write", sha256hex(newFile));
+    ctx.session?.recordFileChange?.({
+      path: absPath,
+      action: "modified",
+      before: original,
+      after: newFile
+    });
+    opts?.signal?.throwIfAborted();
+    const { text: diff, truncated: diffTruncated } = truncateDiffPayload(
+      unifiedDiff(original, newFile, {
+        fromFile: input.path,
+        toFile: input.path
+      }),
+      MAX_DIFF_BYTES
+    );
+    const diffNote = diffTruncated ? "Diff truncated to the 256 KiB output budget \u2014 the full edit is on disk." : void 0;
+    const syntax = await checkSyntax(absPath, newFile, original).catch(() => void 0);
+    let syntaxNote;
+    if (syntax && syntax.errors.length > 0) {
+      syntaxNote = syntax.preExisting ? `Syntax check: the file still has parse errors (they pre-date this edit) \u2014 see syntax_errors.` : `Syntax check: this edit introduced ${syntax.errors.length} parse error(s) \u2014 fix them now, see syntax_errors.`;
+    }
+    const notes = [autoReadNote, tierNote, diffNote, syntaxNote].filter(Boolean);
+    return {
+      path: absPath,
+      replacements: input.replace_all ? count : 1,
+      diff,
+      matched_by: tier,
+      syntax_errors: syntax && syntax.errors.length > 0 ? syntax.errors : void 0,
+      note: notes.length > 0 ? notes.join("\n") : void 0
+    };
+  }
+};
+function noMatchError(inputPath, fileLf, oldLf) {
+  const hint = nearestMatchHint(fileLf, oldLf);
+  return new ToolValidationError({
+    message: `edit: no match for old_string in "${inputPath}".${hint ? ` Nearest match near line ${hint.line}:
+${hint.snippet}
+Compare this against your old_string and retry with the file's actual text.` : ""}`,
+    field: "old_string"
+  });
+}
+
+export {
+  editTool
+};
+//# sourceMappingURL=chunk-MKRQMLZA.js.map

package/dist/chunk-NBDZMMG2.js

@@ -0,0 +1,169 @@
+// src/_fetch-guard.ts
+import * as dns from "node:dns/promises";
+import * as net from "node:net";
+import { isPrivateIPv4, isPrivateIPv6 } from "@wrongstack/core/utils";
+import { FetchError, ToolValidationError } from "@wrongstack/core/types";
+import { Agent, fetch as undiciFetch } from "undici";
+var nativeGlobalFetch = globalThis.fetch;
+var ALLOW_PRIVATE = process.env["WRONGSTACK_FETCH_ALLOW_PRIVATE"] === "1";
+if (ALLOW_PRIVATE && !process.env["CI"]) {
+  console.warn(
+    "[WrongStack] WARNING: WRONGSTACK_FETCH_ALLOW_PRIVATE=1 is active \u2014\n  fetch tool can now access private IPs (10.x, 192.168.x, 169.254.x),\n  cloud metadata endpoints, and plaintext HTTP. Use only on isolated networks."
+  );
+}
+function guardedLookup(hostname, options, callback) {
+  dns.lookup(hostname, { all: true }).then((records) => {
+    const family = options?.family;
+    const byFamily = family === 4 || family === 6 ? records.filter((r) => r.family === family) : records;
+    const list = byFamily.length > 0 ? byFamily : records;
+    if (!ALLOW_PRIVATE) {
+      for (const r of list) {
+        const bad = r.family === 4 ? isPrivateIPv4(r.address) : isPrivateIPv6(r.address);
+        if (bad) {
+          callback(
+            Object.assign(new Error(`fetch: resolved to private address ${r.address}`), {
+              code: "EAI_FAIL"
+            })
+          );
+          return;
+        }
+      }
+    }
+    if (options?.all) {
+      callback(
+        null,
+        list.map((r) => ({ address: r.address, family: r.family }))
+      );
+      return;
+    }
+    const first = list.at(0);
+    if (!first) {
+      callback(
+        Object.assign(new Error(`fetch: no address for ${hostname}`), { code: "ENOTFOUND" })
+      );
+      return;
+    }
+    callback(null, first.address, first.family);
+  }).catch((err) => callback(err));
+}
+var pinnedAgent;
+function getPinnedDispatcher() {
+  if (!pinnedAgent) {
+    pinnedAgent = new Agent({ allowH2: false, connect: { lookup: guardedLookup } });
+  }
+  return pinnedAgent;
+}
+function dispatcherFetch() {
+  return globalThis.fetch === nativeGlobalFetch ? undiciFetch : globalThis.fetch;
+}
+var _beforeExitRegistered = false;
+if (!_beforeExitRegistered) {
+  _beforeExitRegistered = true;
+  process.on("beforeExit", () => {
+    pinnedAgent?.destroy();
+    pinnedAgent = void 0;
+  });
+}
+async function guardedFetch(url, maxRedirects, signal, headers = {
+  "user-agent": "WrongStack/1.0 (+https://wrongstack.com)",
+  accept: "text/html,application/json;q=0.9,text/plain;q=0.8,*/*;q=0.1"
+}) {
+  let redirectCount = 0;
+  let currentUrl = url;
+  for (; ; ) {
+    const parsed = new URL(currentUrl);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+      throw new ToolValidationError({
+        message: `fetch: redirect to unsupported protocol "${parsed.protocol}"`,
+        field: "url"
+      });
+    }
+    if (parsed.protocol === "http:" && !ALLOW_PRIVATE) {
+      throw new ToolValidationError({
+        message: "fetch: redirect to http:// blocked (HTTPS required by default)",
+        field: "url"
+      });
+    }
+    await assertNotPrivate(parsed.hostname);
+    const init = {
+      redirect: "manual",
+      signal,
+      headers,
+      dispatcher: getPinnedDispatcher()
+    };
+    const res = await dispatcherFetch()(currentUrl, init);
+    if (res.status < 300 || res.status > 399) {
+      return res;
+    }
+    try {
+      await res.body?.cancel();
+    } catch {
+    }
+    redirectCount++;
+    if (redirectCount > maxRedirects) {
+      throw new FetchError({
+        message: `fetch: exceeded ${maxRedirects} redirects`,
+        status: res.status,
+        context: { url: currentUrl, maxRedirects, redirectCount }
+      });
+    }
+    const location = res.headers.get("location");
+    if (!location) {
+      throw new FetchError({
+        message: "fetch: redirect status with no location header",
+        status: res.status,
+        context: { url: currentUrl, redirectCount }
+      });
+    }
+    currentUrl = new URL(location, currentUrl).toString();
+  }
+}
+async function assertNotPrivate(hostname) {
+  if (ALLOW_PRIVATE) return;
+  const host = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
+  if (host === "localhost" || host.endsWith(".localhost")) {
+    throw new ToolValidationError({
+      message: "fetch: blocked localhost target",
+      field: "url"
+    });
+  }
+  const ipVersion = net.isIP(host);
+  if (ipVersion === 4) {
+    if (isPrivateIPv4(host)) {
+      throw new ToolValidationError({
+        message: `fetch: blocked private/loopback address "${host}"`,
+        field: "url"
+      });
+    }
+  } else if (ipVersion === 6) {
+    if (isPrivateIPv6(host)) {
+      throw new ToolValidationError({
+        message: `fetch: blocked private/loopback address "${host}"`,
+        field: "url"
+      });
+    }
+  } else {
+    try {
+      const records = await dns.lookup(host, { all: true });
+      for (const r of records) {
+        const bad = r.family === 4 ? isPrivateIPv4(r.address) : isPrivateIPv6(r.address);
+        if (bad) {
+          throw new ToolValidationError({
+            message: `fetch: resolved to private address ${r.address}`,
+            field: "url"
+          });
+        }
+      }
+    } catch (err) {
+      if (err instanceof ToolValidationError) throw err;
+    }
+  }
+}
+
+export {
+  ALLOW_PRIVATE,
+  guardedLookup,
+  guardedFetch,
+  assertNotPrivate
+};
+//# sourceMappingURL=chunk-NBDZMMG2.js.map