blun-king-cli 9.1.229 → 9.1.230

package/bin/bash-search-scope-policy.cjs

@@ -0,0 +1,49 @@
+'use strict';
+
+function normalizePath(value) {
+  return String(value || '').trim().replaceAll('\\', '/').replace(/\/+$/u, '').toLowerCase();
+}
+
+function windowsBashPath(value) {
+  const normalized = normalizePath(value);
+  const match = normalized.match(/^([a-z]):(\/.*)$/u);
+  return match ? `/${match[1]}${match[2]}` : normalized;
+}
+
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+}
+
+function findTargetsWholeHome(command, homeDir, isWindowsBash) {
+  const normalizedHome = normalizePath(homeDir);
+  if (!normalizedHome) return false;
+  const homes = new Set([normalizedHome, '~', '$home']);
+  if (isWindowsBash) homes.add(windowsBashPath(normalizedHome));
+  return [...homes].some((home) => {
+    const target = escapeRegExp(home);
+    return new RegExp(`(?:^|[;&|]\\s*)find\\s+(?:["']?)${target}(?=["'\\s;|&]|$)`, 'iu').test(command);
+  });
+}
+
+function recursiveGrepTargetsDot(command) {
+  const segments = String(command || '').split(/(?:&&|\|\||[;\n])/u);
+  return segments.some((segment) => {
+    const match = segment.match(/^\s*grep\s+(.+)$/iu);
+    if (!match) return false;
+    const args = match[1];
+    if (!/(?:^|\s)-[^\s]*[rR][^\s]*(?=\s|$)/u.test(args)) return false;
+    return /(?:^|\s)["']?\.["']?(?=\s|$)/u.test(args);
+  });
+}
+
+function broadRecursiveSearchRefusal({ command, homeDir, isWindowsBash = false }) {
+  if (findTargetsWholeHome(String(command || ''), homeDir, isWindowsBash)) {
+    return 'Refused broad recursive search over the whole user home before execution. Use Glob with an anchored filename pattern, or narrow Bash find to a known project directory.';
+  }
+  if (recursiveGrepTargetsDot(command)) {
+    return 'Refused broad recursive grep against dot before execution. Use Grep with a path/glob filter, or narrow Bash grep to explicit project subdirectories.';
+  }
+  return undefined;
+}
+
+module.exports = { broadRecursiveSearchRefusal };

package/blun.mjs

@@ -262719,7 +262719,7 @@ function windowsPathToPosixPath(path) {
 function rewriteWindowsNullRedirect(command) {
 	return command.replace(WINDOWS_NUL_REDIRECT, "$1/dev/null");
 }
-var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT;
+var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT, broadRecursiveSearchRefusal;
 var init_bash = __esmMin((() => {
 	init_zod$1();
 	init_background();
@@ -262728,6 +262728,7 @@ var init_bash = __esmMin((() => {
 	init_rule_match();
 	init_result_builder();
 	init_bash$1();
+	({ broadRecursiveSearchRefusal } = createRequire(import.meta.url)("./bin/bash-search-scope-policy.cjs"));
 	MS_PER_SECOND = 1e3;
 	DEFAULT_TIMEOUT_S = 60;
 	MAX_TIMEOUT_S = 300;
@@ -262764,7 +262765,7 @@ var init_bash = __esmMin((() => {
 		MAX_TIMEOUT_S,
 		MAX_BACKGROUND_TIMEOUT_S
 	};
-	bash_default = "Execute a `{{ SHELL_NAME }}` command for pipes, environment variables, processes, git, package managers, build or test runners, and other genuine shell semantics.\n\nPrefer the dedicated tools when they fit: `Read` for a known file, `Write` to create or replace a file, `Edit` for exact changes, `Glob` to locate files, and `Grep` to search contents. Their output is bounded and their permissions are clearer.\n\nStdout and stderr are combined. Long foreground output is streamed to a private file; capture stops at a safe size while the command continues to its real exit code. A non-zero command ends with its exit code; timeouts and user interrupts are reported separately.\n\nEach call runs in a fresh shell environment. Variables, `cd`, and shell history do not carry into later calls; pass `cwd` or use absolute paths. Foreground commands default to {{ DEFAULT_TIMEOUT_S }}s and allow up to {{ MAX_TIMEOUT_S }}s through `timeout`. Do not run interactive commands or commands that may run forever in the foreground.\n\nWith `run_in_background=true`, provide a short `description`; the tool returns a task ID and notifies you on completion. Background tasks default to {{ DEFAULT_BACKGROUND_TIMEOUT_S }}s and allow up to {{ MAX_BACKGROUND_TIMEOUT_S }}s. Use `disable_timeout=true` only when no deadline is appropriate. Use `TaskOutput` for a status or output snapshot and `TaskStop` only to cancel. After launch, normally return control instead of immediately waiting.\n\nQuote paths containing spaces. Chain dependent commands with `&&`; issue independent read-only checks as parallel tool calls. Use `;`, `||`, pipes, redirects, and shell control flow when their semantics are required.\n\nStay inside the working directory unless the user explicitly requests otherwise. Avoid `..`, and never require superuser privileges without explicit instruction. Command availability depends on the host; verify unfamiliar commands before relying on them.";
+	bash_default = "Execute a `{{ SHELL_NAME }}` command for pipes, environment variables, processes, git, package managers, builds, tests, and other shell semantics.\n\nPrefer dedicated tools: `Read` for a known file, `Write` to create or replace it, `Edit` for exact changes, `Glob` to locate files, and `Grep` to search contents. Whole-home `find` and recursive `grep` against `.` are refused; narrow the path or use those search tools.\n\nStdout and stderr are combined. Long foreground output is streamed to a private file; capture stops at a safe size while the command continues to its real exit code. A non-zero command ends with its exit code; timeouts and user interrupts are reported separately.\n\nEach call runs in a fresh shell environment. Variables, `cd`, and shell history do not carry into later calls; pass `cwd` or use absolute paths. Foreground commands default to {{ DEFAULT_TIMEOUT_S }}s and allow up to {{ MAX_TIMEOUT_S }}s through `timeout`. Do not run interactive commands or commands that may run forever in the foreground.\n\nWith `run_in_background=true`, provide a short `description`; the tool returns a task ID and notifies you on completion. Background tasks default to {{ DEFAULT_BACKGROUND_TIMEOUT_S }}s and allow up to {{ MAX_BACKGROUND_TIMEOUT_S }}s. Use `disable_timeout=true` only when no deadline is appropriate. Use `TaskOutput` for a status or output snapshot and `TaskStop` only to cancel. After launch, normally return control instead of immediately waiting.\n\nQuote paths containing spaces. Chain dependent commands with `&&`; issue independent read-only checks as parallel tool calls. Use `;`, `||`, pipes, redirects, and shell control flow when their semantics are required.\n\nStay inside the working directory unless the user explicitly requests otherwise. Avoid `..`, and never require superuser privileges without explicit instruction. Command availability depends on the host; verify unfamiliar commands before relying on them.";
 	BashTool = class {
 		kaos;
 		cwd;
@@ -262897,6 +262898,16 @@ var init_bash = __esmMin((() => {
 				isError: true,
 				output: "Command cannot be empty."
 			};
+			const searchRefusal = broadRecursiveSearchRefusal({
+				command: args.command,
+				cwd: args.cwd ?? this.cwd,
+				homeDir: process.env["USERPROFILE"] ?? process.env["HOME"],
+				isWindowsBash: this.isWindowsBash
+			});
+			if (searchRefusal !== void 0) return {
+				isError: true,
+				output: searchRefusal
+			};
 			if (args.run_in_background !== true) return void 0;
 			if (!this.allowBackground) return {
 				isError: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.229",
+  "version": "9.1.230",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {