blun-king-cli 9.1.427 → 9.1.429

package/bin/generated-source-health.cjs

@@ -0,0 +1,142 @@
+'use strict';
+
+const path = require('node:path');
+
+const JAVASCRIPT_LIKE_EXTENSIONS = new Set([
+  '.cjs',
+  '.cts',
+  '.js',
+  '.jsx',
+  '.mjs',
+  '.mts',
+  '.ts',
+  '.tsx',
+]);
+const DEFAULT_MIN_REPEATS = 8;
+
+function findDegenerateGeneratedStatementRun(filePath, content, options = {}) {
+  if (!JAVASCRIPT_LIKE_EXTENSIONS.has(path.extname(filePath).toLowerCase())) return null;
+  if (typeof content !== 'string' || content.length === 0) return null;
+
+  const minRepeats = Number.isSafeInteger(options.minRepeats) && options.minRepeats >= 2
+    ? options.minRepeats
+    : DEFAULT_MIN_REPEATS;
+  let state = 'code';
+  let quote = '';
+  let escaped = false;
+  let line = 1;
+  let statementStart = 0;
+  let statementStartLine = 1;
+  let parenDepth = 0;
+  let bracketDepth = 0;
+  let previous = null;
+  let runCount = 0;
+  let runLine = 1;
+
+  const resetBoundary = (nextStart) => {
+    statementStart = nextStart;
+    statementStartLine = line;
+  };
+  const recordStatement = (end) => {
+    const raw = content.slice(statementStart, end);
+    const rawStartLine = statementStartLine;
+    resetBoundary(end);
+    const leading = raw.match(/^\s*/u)?.[0] ?? '';
+    const statementLine = rawStartLine + (leading.match(/\n/gu)?.length ?? 0);
+    const normalized = raw.replace(/\s+/gu, ' ').trim();
+    if (normalized.length === 0 || !/[A-Za-z_$]/u.test(normalized)) {
+      previous = null;
+      runCount = 0;
+      return null;
+    }
+    if (normalized === previous) runCount += 1;
+    else {
+      previous = normalized;
+      runCount = 1;
+      runLine = statementLine;
+    }
+    if (runCount < minRepeats) return null;
+    return {
+      count: runCount,
+      line: runLine,
+      preview: normalized.slice(0, 160),
+    };
+  };
+
+  for (let index = 0; index < content.length; index += 1) {
+    const current = content[index] ?? '';
+    const next = content[index + 1] ?? '';
+
+    if (state === 'line-comment') {
+      if (current === '\n') {
+        line += 1;
+        state = 'code';
+      }
+      continue;
+    }
+    if (state === 'block-comment') {
+      if (current === '\n') line += 1;
+      if (current === '*' && next === '/') {
+        state = 'code';
+        index += 1;
+      }
+      continue;
+    }
+    if (state === 'quote') {
+      if (current === '\n') line += 1;
+      if (escaped) {
+        escaped = false;
+        continue;
+      }
+      if (current === '\\') {
+        escaped = true;
+        continue;
+      }
+      if (current === quote) {
+        state = 'code';
+        quote = '';
+      }
+      continue;
+    }
+
+    if (current === '\n') {
+      line += 1;
+      continue;
+    }
+    if (current === '/' && next === '/') {
+      state = 'line-comment';
+      index += 1;
+      continue;
+    }
+    if (current === '/' && next === '*') {
+      state = 'block-comment';
+      index += 1;
+      continue;
+    }
+    if (current === "'" || current === '"' || current === '`') {
+      state = 'quote';
+      quote = current;
+      escaped = false;
+      continue;
+    }
+    if (current === '(') parenDepth += 1;
+    else if (current === ')') parenDepth = Math.max(0, parenDepth - 1);
+    else if (current === '[') bracketDepth += 1;
+    else if (current === ']') bracketDepth = Math.max(0, bracketDepth - 1);
+    else if ((current === '{' || current === '}') && parenDepth === 0 && bracketDepth === 0) {
+      previous = null;
+      runCount = 0;
+      resetBoundary(index + 1);
+    } else if (current === ';' && parenDepth === 0 && bracketDepth === 0) {
+      const finding = recordStatement(index + 1);
+      if (finding !== null) return finding;
+    }
+  }
+
+  return null;
+}
+
+module.exports = {
+  DEFAULT_MIN_REPEATS,
+  findDegenerateGeneratedStatementRun,
+};

package/bin/windows-bash-dialect-policy.cjs

@@ -0,0 +1,25 @@
+'use strict';
+
+const EXPLICIT_CMD_HANDOFF = /(?:^|[;&|]\s*)cmd(?:\.exe)?\s+(?:(?:\/[dqs])\s+)*\/c(?=\s|$)/iu;
+const CMD_MARKERS = [
+  ['cd /d', /(?:^|[;&|]\s*)cd\s+\/d(?=\s|$)/iu],
+  ['dir /s /b', /(?:^|[;&|]\s*)dir\s+\/s\s+\/b(?=\s|$)/iu],
+  ['find /c /v', /(?:^|[;&|]\s*)find\s+\/c\s+\/v(?=\s|$)/iu],
+  ['2>nul', /(?:^|[\s;|&])(?:[012]?>|&>)\s*nul(?=$|[\s;|&])/iu],
+];
+
+function windowsBashDialectRefusal({ command, isWindowsBash = false } = {}) {
+  if (!isWindowsBash) return undefined;
+  const source = String(command || '');
+  if (EXPLICIT_CMD_HANDOFF.test(source)) return undefined;
+
+  const found = CMD_MARKERS.filter(([, pattern]) => pattern.test(source)).map(([label]) => label);
+  if (found.length === 0) return undefined;
+
+  return `Refused Windows cmd.exe syntax in the Bash tool before execution (found: ${found.join(', ')}). `
+    + 'This tool runs POSIX Bash on Windows, including inside VS Code. Pass the directory with cwd, '
+    + 'use Bash paths and commands such as find or rg, and redirect to /dev/null. '
+    + 'If cmd semantics are intentional, invoke cmd.exe /d /s /c explicitly.';
+}
+
+module.exports = { windowsBashDialectRefusal };

package/blun.mjs

@@ -253564,7 +253564,7 @@ function replaceOnceLiteral(content, oldString, newString) {
 	if (index === -1) return content;
 	return content.slice(0, index) + newString + content.slice(index + oldString.length);
 }
-var EditInputSchema, EditTool;
+var EditInputSchema, EditTool, findDegenerateGeneratedStatementRun;
 var init_edit = __esmMin((() => {
 	init_zod$1();
 	init_tool_access();
@@ -253575,6 +253575,7 @@ var init_edit = __esmMin((() => {
 	init_source_file_line_limit();
 	init_edit$1();
 	init_lsp_diagnostics();
+	({ findDegenerateGeneratedStatementRun } = createRequire(import.meta.url)("./bin/generated-source-health.cjs"));
 	EditInputSchema = object({
 		path: string().describe("Path to the text file to edit. Relative paths resolve against the working directory; a path outside the working directory must be absolute."),
 		old_string: string().min(1).describe("Exact content to replace from the Read output view, without the line-number prefix. Use LF for pure CRLF files; use actual \\r escapes where Read shows \\r."),
@@ -253582,7 +253583,7 @@ var init_edit = __esmMin((() => {
 		replace_all: boolean$1().optional().describe("Set true only when every occurrence of old_string should be replaced."),
 		single_file_override: boolean$1().optional().describe("Set true only when the latest direct user message explicitly requires one single source file. The tool verifies that request and reports the override visibly.")
 	});
-	edit_default = "Perform exact replacements in existing files. Use Edit for every incremental change instead of Write or Bash `sed`. Read the target immediately before every Edit; take `old_string` and `new_string` from that current Read output, remove the line-number prefix and tab, and never guess from memory.\n\n`old_string` must be exact and unique unless `replace_all` is true. Add surrounding context when it is ambiguous. Use `replace_all` only when every occurrence should change, and keep `new_string` different from `old_string`. Parallel Edit calls may target different files only. Before another Edit on the same file, read it again because the first replacement can invalidate the next `old_string`.\n\nFor pure CRLF files, Read shows LF; use LF in both strings and Edit restores CRLF. For mixed endings or lone carriage returns, include the displayed `\\r` escapes exactly.\n\nSource files may contain at most 500 lines. An already oversized file may only be edited when the result has fewer lines. Set `single_file_override=true` only when the latest direct user message explicitly requires one single file; the accepted override is shown to the user.";
+	edit_default = "Perform exact replacements in existing files. Use Edit for every incremental change instead of Write or Bash `sed`. Read the target immediately before every Edit; take `old_string` and `new_string` from that current Read output, remove the line-number prefix and tab, and never guess from memory.\n\n`old_string` must be exact and unique unless `replace_all` is true. Add surrounding context when it is ambiguous. Use `replace_all` only when every occurrence should change, and keep `new_string` different from `old_string`. Parallel Edit calls may target different files only. Before another Edit on the same file, read it again because the first replacement can invalidate the next `old_string`.\n\nFor pure CRLF files, Read shows LF; use LF in both strings and Edit restores CRLF. For mixed endings or lone carriage returns, include the displayed `\\r` escapes exactly.\n\nSource files may contain at most 500 lines. An already oversized file may only be edited when the result has fewer lines. Set `single_file_override=true` only when the latest direct user message explicitly requires one single file; the accepted override is shown to the user. Runaway repeated JavaScript or TypeScript statements are rejected before file I/O.";
 	EditTool = class {
 		kaos;
 		workspace;
@@ -253627,6 +253628,11 @@ var init_edit = __esmMin((() => {
 				isError: true,
 				output: "No changes to make: old_string and new_string are exactly the same."
 			};
+			const degenerateStatementRun = findDegenerateGeneratedStatementRun(safePath, args.new_string);
+			if (degenerateStatementRun !== null) return {
+				isError: true,
+				output: `Refused to edit ${args.path}: generated source contains a runaway repeated statement ${String(degenerateStatementRun.count)} times from line ${String(degenerateStatementRun.line)} (starts with ${JSON.stringify(degenerateStatementRun.preview)}). Regenerate that section in a smaller focused chunk. No file was written.`
+			};
 			try {
 				const raw = await this.kaos.readText(safePath);
 				const modelView = toModelTextView(raw);
@@ -259815,7 +259821,7 @@ var init_write$1 = __esmMin((() => {
 }));
 //#endregion
 write_default = "Create, append to, or completely replace a file. Missing parent directories are created automatically. Overwrite is the default; append adds content at EOF without adding a newline.\n\nUse Write for a new file or a complete replacement. For every incremental change to an existing file, Use Edit instead, even when it is small. Read before overwriting an existing file. Do not create unsolicited documentation, README, summary, or report files unless the user or project instructions require them.\n\nContent is written literally. Never include Read/Edit line prefixes. Supplied LF and CRLF endings are preserved. Source files may contain at most 500 lines; split larger implementations into focused files. Set `single_file_override=true` only when the latest direct user message explicitly requires one source file.\n\nWrite complete files up to 4,096 UTF-8 bytes atomically. For a larger new or completely replaced file, use `continuation`. Keep each chunk within the configured UTF-8 bytes limit and end it on a complete line with `\\n`. Set exact `expected_lines` and, when available, `expected_sha256`. Part 1 uses overwrite, `part=1`, and `start_line=1`; every later part uses append, the next consecutive part, and the exact `next_start_line` returned by Write. Set `final=true` only on the complete final part. The Target file remains unchanged until final line-count and optional SHA-256 checks pass. After an oversized plain Write is refused, that path accepts only continuation calls until the sequence completes. Restart an unfinished sequence only with part 1, overwrite, `start_line=1`, and `reset=true`. Never use continuation for incremental edits.\n\nRunaway generated JavaScript or TypeScript identifiers are rejected before disk I/O; regenerate only the affected section as a smaller chunk.";
-write_default = "Create, append to, or replace a whole file. Missing parent directories are created automatically. Overwrite is default; append adds content at EOF without a newline.\n\nUse Write only for new files or complete replacements. Use Edit for every incremental change, even a small one. Read before overwriting an existing file. Do not create unsolicited documentation unless the user or project instructions require it.\n\nContent is literal. Never include line prefixes. Supplied LF and CRLF endings are preserved. Large files and source files over 500 lines are accepted natively: the runtime fragments them on disk, assembles them through atomic replacement, and verifies the persisted SHA-256. No manual continuation calls or `single_file_override` are required.\n\nThe explicit `continuation` protocol remains available for streamed generation across several tool calls. Keep each chunk within the configured UTF-8 bytes limit and end it on a complete line with `\\n`. Optionally set exact `expected_lines` and, when available, `expected_sha256`. Part number, start line, and mode are derived from actually staged content when omitted. Set `final=true` only on the complete final part. The target file remains unchanged until final line-count and optional SHA-256 checks pass. Restart an unfinished sequence with `reset=true`. Never use continuation for incremental edits.\n\nRunaway generated JavaScript or TypeScript identifiers are rejected before disk I/O; regenerate only the affected section as a smaller chunk.";
+	write_default = "Create, append to, or replace a whole file. Missing parent directories are created automatically. Overwrite is default; append adds content at EOF without a newline.\n\nUse Write only for new files or complete replacements. Use Edit for every incremental change, even a small one. Read before overwriting an existing file. Do not create unsolicited documentation unless the user or project instructions require it.\n\nContent is literal. Never include line prefixes. Supplied LF and CRLF endings are preserved. Large files and source files over 500 lines are accepted natively: the runtime fragments them on disk, assembles them through atomic replacement, and verifies the persisted SHA-256. No manual continuation calls or `single_file_override` are required.\n\nThe explicit `continuation` protocol remains available for streamed generation across several tool calls. Keep each chunk within the configured UTF-8 bytes limit and end it on a complete line with `\\n`. Optionally set exact `expected_lines` and, when available, `expected_sha256`. Part number, start line, and mode are derived from actually staged content when omitted. Set `final=true` only on the complete final part. The target file remains unchanged until final line-count and optional SHA-256 checks pass. Restart an unfinished sequence with `reset=true`. Never use continuation for incremental edits.\n\nRunaway generated JavaScript or TypeScript identifiers and repeated executable statements are rejected before disk I/O; regenerate only the affected section as a smaller chunk.";
 //#region ../../packages/agent-core/src/tools/builtin/file/generated-source-health.ts
 /**
 * Find runaway generated identifiers while ignoring comments and strings.
@@ -259913,6 +259919,7 @@ function isIdentifierPart(value) {
 var JAVASCRIPT_LIKE_EXTENSIONS;
 var init_generated_source_health = __esmMin((() => {
 	init_dist$6();
+	({ findDegenerateGeneratedStatementRun } = createRequire(import.meta.url)("./bin/generated-source-health.cjs"));
 	JAVASCRIPT_LIKE_EXTENSIONS = new Set([
 		".cjs",
 		".cts",
@@ -260155,6 +260162,11 @@ bytesWritten: number$1().int().nonnegative() });
 				isError: true,
 				output: `Refused to write ${args.path}: generated source contains a runaway ${String(degenerateIdentifier.length)}-character identifier on line ${String(degenerateIdentifier.line)} (starts with ${JSON.stringify(degenerateIdentifier.preview)}). Regenerate that section in a smaller focused chunk. No file was written.`
 			};
+			const degenerateStatementRun = findDegenerateGeneratedStatementRun(safePath, args.content);
+			if (degenerateStatementRun !== null) return {
+				isError: true,
+				output: `Refused to write ${args.path}: generated source contains a runaway repeated statement ${String(degenerateStatementRun.count)} times from line ${String(degenerateStatementRun.line)} (starts with ${JSON.stringify(degenerateStatementRun.preview)}). Regenerate that section in a smaller focused chunk. No file was written.`
+			};
 			let currentContent;
 			if (isSourceFilePath(safePath)) try {
 				currentContent = await this.kaos.readText(safePath);
@@ -263210,7 +263222,7 @@ function windowsPathToPosixPath(path) {
 function rewriteWindowsNullRedirect(command) {
 	return command.replace(WINDOWS_NUL_REDIRECT, "$1/dev/null");
 }
-var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT, broadRecursiveSearchRefusal;
+var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT, broadRecursiveSearchRefusal, windowsBashDialectRefusal;
 var init_bash = __esmMin((() => {
 	init_zod$1();
 	init_background();
@@ -263220,6 +263232,7 @@ var init_bash = __esmMin((() => {
 	init_result_builder();
 	init_bash$1();
 	({ broadRecursiveSearchRefusal } = createRequire(import.meta.url)("./bin/bash-search-scope-policy.cjs"));
+	({ windowsBashDialectRefusal } = createRequire(import.meta.url)("./bin/windows-bash-dialect-policy.cjs"));
 	MS_PER_SECOND = 1e3;
 	DEFAULT_TIMEOUT_S = 60;
 	MAX_TIMEOUT_S = 300;
@@ -263272,7 +263285,8 @@ var init_bash = __esmMin((() => {
 			this.backgroundManager = backgroundManager;
 			this.isWindowsBash = this.kaos.osEnv.osKind === "Windows";
 			this.allowBackground = options?.allowBackground ?? true;
-			const rendered = renderBashDescription(this.kaos.osEnv.shellName);
+			const windowsDialectNote = this.isWindowsBash ? "\n\nOn Windows this tool still runs POSIX Bash, including inside VS Code. Do not use cmd.exe syntax such as `cd /d`, `dir /s /b`, `find /c /v`, or `2>nul`; pass the directory with `cwd`, use Bash paths and commands, and redirect to `/dev/null`." : "";
+			const rendered = `${renderBashDescription(this.kaos.osEnv.shellName)}${windowsDialectNote}`;
 			this.description = this.allowBackground ? rendered : withoutBackgroundDescription(rendered);
 		}
 		resolveExecution(args) {
@@ -263389,6 +263403,14 @@ var init_bash = __esmMin((() => {
 				isError: true,
 				output: "Command cannot be empty."
 			};
+			const dialectRefusal = windowsBashDialectRefusal({
+				command: args.command,
+				isWindowsBash: this.isWindowsBash
+			});
+			if (dialectRefusal !== void 0) return {
+				isError: true,
+				output: dialectRefusal
+			};
 			const searchRefusal = broadRecursiveSearchRefusal({
 				command: args.command,
 				cwd: args.cwd ?? this.cwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.427",
+  "version": "9.1.429",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {