cc-viewer 1.7.0 → 1.7.2

package/src/utils/markdownProfiler.js

@@ -0,0 +1,113 @@
+/**
+ * Dev-only instrumentation for the Markdown render pipeline.
+ *
+ * Gated on `import.meta.env.DEV` — production builds compile every export to a
+ * no-op and tree-shake the module state away, so runtime cost in prod is zero.
+ *
+ * API:
+ *   measureParse(fn)        — wrap a sync parse call; records duration as a
+ *                             parse sample and emits an `md-parse` measure.
+ *   recordMountSample(ms)   — append a mount-cycle duration (typically the
+ *                             delta between render-return and the next effect)
+ *                             and emit an `md-mount` measure.
+ *
+ * Inspection:
+ *   window.__mdStats.summary()  → { parseP50, parseP95, mountP50, mountP95, ... }
+ *   window.__mdStats.reset()
+ *   window.__mdStats.samples    → raw { parse: [], mount: [] }
+ *
+ * DevTools Performance timeline shows `md-parse` / `md-mount` measures under
+ * the User Timing track. A recorded slice of a streaming session can then be
+ * inspected to attribute time between parse, reconcile, layout, and paint.
+ *
+ * The module auto-prunes performance.measure entries once per 500 samples so
+ * long-running dev sessions do not accumulate unbounded DevTools entries.
+ */
+
+const DEV = typeof import.meta !== 'undefined'
+  && import.meta.env
+  && import.meta.env.DEV === true;
+
+const MAX_SAMPLES = 2000;
+const CLEAR_MARKS_EVERY = 500;
+
+export function percentile(sorted, p) {
+  if (sorted.length === 0) return 0;
+  const idx = Math.min(sorted.length - 1, Math.floor(sorted.length * p));
+  return sorted[idx];
+}
+
+export function createStats() {
+  const parse = [];
+  const mount = [];
+  let writeCount = 0;
+
+  function pushBounded(arr, v) {
+    arr.push(v);
+    if (arr.length > MAX_SAMPLES) arr.splice(0, arr.length - MAX_SAMPLES);
+  }
+
+  function maybeClearMarks() {
+    writeCount += 1;
+    if (writeCount % CLEAR_MARKS_EVERY === 0
+        && typeof performance !== 'undefined'
+        && typeof performance.clearMeasures === 'function') {
+      try {
+        performance.clearMeasures('md-parse');
+        performance.clearMeasures('md-mount');
+      } catch { /* ignore */ }
+    }
+  }
+
+  return {
+    samples: { parse, mount },
+    recordParse(ms) { pushBounded(parse, ms); maybeClearMarks(); },
+    recordMount(ms) { pushBounded(mount, ms); maybeClearMarks(); },
+    summary() {
+      const p = [...parse].sort((a, b) => a - b);
+      const m = [...mount].sort((a, b) => a - b);
+      return {
+        parseN: parse.length,
+        parseP50: +percentile(p, 0.5).toFixed(2),
+        parseP95: +percentile(p, 0.95).toFixed(2),
+        parseMax: +(p[p.length - 1] || 0).toFixed(2),
+        mountN: mount.length,
+        mountP50: +percentile(m, 0.5).toFixed(2),
+        mountP95: +percentile(m, 0.95).toFixed(2),
+        mountMax: +(m[m.length - 1] || 0).toFixed(2),
+      };
+    },
+    reset() {
+      parse.length = 0;
+      mount.length = 0;
+      writeCount = 0;
+    },
+  };
+}
+
+const stats = DEV ? createStats() : null;
+
+if (DEV && typeof window !== 'undefined') {
+  window.__mdStats = stats;
+}
+
+export function measureParse(fn) {
+  if (!DEV) return fn();
+  const start = performance.now();
+  const result = fn();
+  const ms = performance.now() - start;
+  stats.recordParse(ms);
+  try { performance.measure('md-parse', { start, end: start + ms }); } catch { /* ignore */ }
+  return result;
+}
+
+export function recordMountSample(ms) {
+  if (!DEV || !Number.isFinite(ms) || ms < 0) return;
+  stats.recordMount(ms);
+  try {
+    const start = performance.now() - ms;
+    performance.measure('md-mount', { start, end: start + ms });
+  } catch { /* ignore */ }
+}
+
+export const DEV_PROFILER_ENABLED = DEV;

package/src/utils/mdExtensionDetect.js

@@ -0,0 +1,64 @@
+// 检测 markdown 内容是否含 MDXEditor 默认不支持的扩展语法
+// 命中任意一项时，打开 .md 文件应自动 fallback 到旧 marked 渲染（保留语义完整性），
+// 避免 MDXEditor 解析时丢失或损坏这些扩展块。
+
+const RE_MERMAID_FENCE = /^[ \t]*```\s*mermaid\b/m;
+const RE_MATH_FENCE = /^[ \t]*```\s*(?:math|latex|tex|katex)\b/im;
+const RE_BLOCK_MATH = /\$\$[\s\S]+?\$\$/;
+const RE_DIRECTIVE = /^[ \t]*:::[A-Za-z][\w-]*\b/m;
+
+// 行内数学 $...$ 容易和货币符号 / 转义符 / 代码块里的 $ 撞，规则:
+//   - 必须在同一行内成对
+//   - $ 前后不能是数字（排除 $5、3$）
+//   - 至少包含一个数学常见字符（字母、运算符、括号）
+//   - 整体不少于 3 字符
+//   - 排除位于代码块（```）内的情况由调用方先剥除三连引号块（这里做粗略过滤）
+// 注：lookbehind `(?<!...)` 在老 Safari (<16.4) 抛 SyntaxError；construct 用 try/catch 包裹，
+// 失败时 RE_INLINE_MATH = null，相当于跳过行内数学检测（保守 fallback）。
+let RE_INLINE_MATH = null;
+try {
+  RE_INLINE_MATH = new RegExp("(?<![\\d$\\\\])\\$([^\\s$][^$\\n]{0,200}?[^\\s$\\\\])\\$(?![\\d])");
+} catch {
+  RE_INLINE_MATH = null;
+}
+
+function stripFences(md) {
+  // 粗略剥掉 ``` 围栏代码块，避免行内数学误判命中代码示例里的 $...$
+  return md.replace(/```[\s\S]*?```/g, '');
+}
+
+export function detectMdExtensions(markdown) {
+  const result = {
+    hasMermaid: false,
+    hasKatex: false,
+    hasDirective: false,
+    anyExtension: false,
+  };
+  if (typeof markdown !== 'string' || markdown.length === 0) {
+    return result;
+  }
+  // 整体 try/catch 兜底：极端情况（畸形 markdown / 某些环境的 regex 异常）下不应让组件崩白屏。
+  try {
+    if (RE_MERMAID_FENCE.test(markdown)) result.hasMermaid = true;
+    if (RE_MATH_FENCE.test(markdown) || RE_BLOCK_MATH.test(markdown)) {
+      result.hasKatex = true;
+    }
+    if (RE_DIRECTIVE.test(markdown)) result.hasDirective = true;
+
+    if (!result.hasKatex && RE_INLINE_MATH) {
+      const stripped = stripFences(markdown);
+      if (RE_INLINE_MATH.test(stripped)) {
+        const inlineMatch = stripped.match(RE_INLINE_MATH);
+        if (inlineMatch && /[a-zA-Z\\^_=<>+\-*/(){}[\]]/.test(inlineMatch[1])) {
+          result.hasKatex = true;
+        }
+      }
+    }
+  } catch {
+    // 检测失败时返回保守 false（即把内容当成纯标准 markdown 让 MDXEditor 处理），
+    // 避免阻塞用户。如果真有扩展语法，MDXEditor 自身的 onError 会兜底。
+  }
+
+  result.anyExtension = result.hasMermaid || result.hasKatex || result.hasDirective;
+  return result;
+}

package/src/utils/memoryLinkParser.js

@@ -0,0 +1,44 @@
+// 持久记忆 markdown 内 <a> 链接拦截：白名单设计——只放行 #anchor 和单段 .md basename。
+// CachePopoverContent.jsx + MemoryDetailModal.jsx 共用，避免双份 paste 漂移。
+//
+// 返回 discriminated union（而非简单 string | null）的理由：
+//   调用方需要区分三种动作——打开 detail / 透传给浏览器（锚点滚动）/ 阻止默认行为。
+//   { open: name } / { allow: true } / { reject: true } 让调用方一目了然，
+//   编译期就能 catch 漏分支（不像 string | null 容易把 reject 误当 allow）。
+//
+// 拒绝规则（白名单优先）：
+//   - 任意 scheme（http://, javascript:, chrome-extension:, custom-app:, x-anything: 等）一律拒绝。
+//     持久记忆面板内不导航外站；上游受信任 markdown 也禁止 deep-link 至浏览器协议处理器。
+//   - 绝对路径 / 路径分隔符 / `..` 段 / 隐藏文件（以 . 开头）
+//   - 非 .md 后缀
+const ANCHOR_PREFIX = '#';
+
+export function parseMemoryLink(hrefRaw) {
+  if (!hrefRaw) return { reject: true };
+
+  const trimmed = hrefRaw.trim();
+  if (!trimmed) return { reject: true };
+
+  // 锚点链接（#section）放过，让浏览器原地滚动
+  if (trimmed.startsWith(ANCHOR_PREFIX)) return { allow: true };
+
+  // 任何 scheme 标记（首段 [a-z][a-z0-9+.-]*: 模式）一律拒绝。
+  // 大小写不敏感（toLowerCase 规范化防 `JaVaScRiPt:` 之类绕过）。
+  if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) return { reject: true };
+
+  // 去掉 query/hash + URL 解码 → 候选 basename
+  let candidate;
+  try {
+    candidate = decodeURIComponent(trimmed.split('#')[0].split('?')[0]);
+  } catch {
+    return { reject: true };
+  }
+
+  if (!candidate) return { reject: true };
+  if (candidate.startsWith('/') || candidate.startsWith('\\')) return { reject: true };
+  if (candidate.includes('/') || candidate.includes('\\')) return { reject: true };
+  if (candidate === '..' || candidate.startsWith('.')) return { reject: true };
+  if (!/\.md$/i.test(candidate)) return { reject: true };
+
+  return { open: candidate };
+}

package/src/utils/modalMask.js

@@ -0,0 +1,15 @@
+// Blurred-overlay mask for the seven hamburger-menu feature modals (Log
+// Management, Export user prompts, Plugin Management, CCV Process Manager,
+// Messaging Integration, Hot-Switch Proxy, Edit System Prompt).
+//
+// Values mirror the AskUserQuestion / plan approval overlay (`.backdrop` in
+// src/components/approval/ApprovalModal.module.css) — KEEP IN SYNC, guarded by
+// test/modal-mask.test.js. Applied per Modal instance via the antd semantic
+// `styles={{ mask }}` API: inline style, so it cannot leak to other modals —
+// a global `.ant-modal-mask` rule would hit every Modal and Modal.confirm in
+// the app, which is explicitly out of scope.
+export const BLUR_MASK_STYLE = Object.freeze({
+  background: 'rgba(0, 0, 0, 0.45)',
+  backdropFilter: 'blur(2px)',
+  WebkitBackdropFilter: 'blur(2px)',
+});

package/src/utils/monotime.js

@@ -0,0 +1,6 @@
+/**
+ * 单调毫秒时钟：performance.now 优先（单调、亚毫秒），无则回退 Date.now
+ * （node:test / 老环境）。promptDetect 与 terminalWriteQueue 共用，
+ * 单一实现避免拷贝漂移。
+ */
+export const now = () => (globalThis.performance?.now ? globalThis.performance.now() : Date.now());

package/src/utils/pinnedMenu.js

@@ -0,0 +1,55 @@
+// 汉堡菜单「钉住 → 快捷方式」的全局持久化（localStorage，跨项目共享）。
+// 纯函数：parse / serialize / toggle；localStorage I/O 留在组件侧（AppHeader）。
+// 存储值是一个菜单 key 字符串数组，顺序即用户钉住（pin）的先后顺序。
+
+export const PINNED_KEY = 'ccv_pinnedMenuKeys';
+
+// 解析 localStorage 原始字符串 → string[]。
+// 任何异常（null / 非 JSON / 非数组）一律降级为 []，并过滤掉非字符串元素 + 去重。
+export function parsePinned(raw) {
+  if (typeof raw !== 'string' || raw === '') return [];
+  let arr;
+  try {
+    arr = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(arr)) return [];
+  const seen = new Set();
+  const out = [];
+  for (const item of arr) {
+    if (typeof item !== 'string' || item === '') continue;
+    if (seen.has(item)) continue;
+    seen.add(item);
+    out.push(item);
+  }
+  return out;
+}
+
+// 序列化 string[] → 可写入 localStorage 的字符串。
+export function serializePinned(arr) {
+  return JSON.stringify(Array.isArray(arr) ? arr : []);
+}
+
+// 切换某个 key 的钉住状态：已存在则移除，不存在则追加到末尾（保持插入顺序）。
+// 返回新数组（不修改入参）；顺带去重。
+export function togglePinned(arr, key) {
+  const list = parsePinnedArray(arr);
+  if (typeof key !== 'string' || key === '') return list;
+  if (list.includes(key)) return list.filter(k => k !== key);
+  return [...list, key];
+}
+
+// 内部：把任意入参规整成「去重的字符串数组」，避免脏数据传播。
+function parsePinnedArray(arr) {
+  if (!Array.isArray(arr)) return [];
+  const seen = new Set();
+  const out = [];
+  for (const item of arr) {
+    if (typeof item !== 'string' || item === '') continue;
+    if (seen.has(item)) continue;
+    seen.add(item);
+    out.push(item);
+  }
+  return out;
+}

package/src/utils/presetShortcuts.js

@@ -0,0 +1,14 @@
+// 把 preset shortcut items 序列化为 onUpdatePreferences 的 API payload。
+// dismissed 是 Set；为 undefined 时不写入 payload，避免覆盖服务端已有值。
+export function buildPresetShortcutsPayload(items, dismissed) {
+  const payload = {
+    presetShortcuts: items.map(i => {
+      const o = { teamName: i.teamName, description: i.description };
+      if (i.builtinId) o.builtinId = i.builtinId;
+      if (i.modified) o.modified = true;
+      return o;
+    }),
+  };
+  if (dismissed) payload.dismissedBuiltinPresets = [...dismissed];
+  return payload;
+}

package/src/utils/projectAlias.js

@@ -0,0 +1,135 @@
+// Per-project alias persistence.
+//
+// User-facing UI:
+//   header「当前项目 cc-viewer」 hover → pencil icon → modal → input → save
+//
+// Effects when set:
+//   - document.title overrides projectName (handled by AppBase._applyDocTitle)
+//   - header / mobile ctx label append " (alias)" after projectName
+//
+// Storage: localStorage, keyed by projectName. Stale aliases for projects no
+// longer present are harmless (inert until matched projectName reappears).
+//
+// Cross-tab sync: native `storage` event fires in OTHER tabs only. Same-tab
+// updates need explicit pubsub — we expose an EventTarget so AppHeader / Mobile
+// / AppBase pick up local mutations without a full reload.
+
+// Key prefix mirrors existing `ccv_` convention (cf. ccv_themeColor / ccv_viewMode).
+// Known limitation: keyed by projectName basename (not full path; cf. interceptor.js _projectName),
+// so two projects sharing a basename (~/work/cc-viewer + ~/tmp/cc-viewer) collide on one alias.
+// Accepted for v1; real fix would key on a full-path hash (server must also send projectPath).
+const KEY_PREFIX = 'ccv_projectAlias_';
+const MAX_LEN = 32; // taskbar typically truncates 30-50; 32 is the realistic cap.
+
+// Same-tab pubsub channel. EventTarget is native everywhere we ship (Electron,
+// modern web) — no library, no leaked listeners on module reload.
+// Event payload: { detail: { projectName, alias } }
+let _bus = typeof EventTarget !== 'undefined' ? new EventTarget() : null;
+const EVT_CHANGE = 'change';
+
+function _keyFor(projectName) {
+  if (!projectName || typeof projectName !== 'string') return null;
+  return `${KEY_PREFIX}${projectName}`;
+}
+
+// Normalise user input. Strips:
+//   - C0/C1 control characters U+0000-U+001F, U+007F-U+009F (render as garbage / NUL)
+//   - Standard whitespace controls (\r \n \t are within C0)
+//   - Unicode line/paragraph separators
+//   - BiDi overrides ‪-‮ and ⁦-⁩ — a paste containing
+//     RIGHT-TO-LEFT-OVERRIDE flips surrounding chrome text direction tab-wide.
+//     No current exploit but trivial to block (review P1-A).
+// Stripped sequences collapse to a single space, then trim + truncate to MAX_LEN.
+// Empty result → caller treats as "clear".
+export function normalizeAlias(raw) {
+  if (typeof raw !== 'string') return '';
+  return raw
+    .replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029\u202a-\u202e\u2066-\u2069]+/g, ' ')
+    .trim()
+    .slice(0, MAX_LEN);
+}
+
+export function getProjectAlias(projectName) {
+  const key = _keyFor(projectName);
+  if (!key) return '';
+  try {
+    const v = localStorage.getItem(key);
+    return typeof v === 'string' ? v : '';
+  } catch { return ''; }
+}
+
+// Returns true on success, false on failure (quota / private mode / disabled).
+// Normalisation happens here so callers (Modal save handler / migrations) can't
+// store malformed values. Empty after normalisation → clearProjectAlias path.
+export function setProjectAlias(projectName, raw) {
+  const key = _keyFor(projectName);
+  if (!key) return false;
+  const value = normalizeAlias(raw);
+  try {
+    if (value === '') {
+      localStorage.removeItem(key);
+    } else {
+      localStorage.setItem(key, value);
+    }
+    _emitChange(projectName, value);
+    return true;
+  } catch { return false; }
+}
+
+export function clearProjectAlias(projectName) {
+  const key = _keyFor(projectName);
+  if (!key) return false;
+  try {
+    localStorage.removeItem(key);
+    _emitChange(projectName, '');
+    return true;
+  } catch { return false; }
+}
+
+function _emitChange(projectName, alias) {
+  if (!_bus) return;
+  try {
+    _bus.dispatchEvent(new CustomEvent(EVT_CHANGE, { detail: { projectName, alias } }));
+  } catch {
+    // Subscriber threw — swallowed so the localStorage write isn't undone.
+    // dispatchEvent itself can also fail in some environments where CustomEvent
+    // isn't a real constructor; both cases are non-fatal for persistence.
+  }
+}
+
+// Subscribe to alias changes for a specific project — fires for both
+// same-tab updates (via internal EventTarget) and cross-tab updates
+// (via window 'storage' event).
+//   onChange(alias) — called with the new alias string ('' = cleared).
+// Returns an unsubscribe function.
+export function subscribeToAlias(projectName, onChange) {
+  if (!projectName || typeof onChange !== 'function') return () => {};
+  const targetKey = _keyFor(projectName);
+
+  const sameTabHandler = (e) => {
+    if (e?.detail?.projectName === projectName) onChange(e.detail.alias || '');
+  };
+  const crossTabHandler = (e) => {
+    if (e?.key === targetKey) onChange(e.newValue || '');
+  };
+
+  if (_bus) _bus.addEventListener(EVT_CHANGE, sameTabHandler);
+  if (typeof window !== 'undefined') window.addEventListener('storage', crossTabHandler);
+
+  return () => {
+    if (_bus) _bus.removeEventListener(EVT_CHANGE, sameTabHandler);
+    if (typeof window !== 'undefined') window.removeEventListener('storage', crossTabHandler);
+  };
+}
+
+// Test-only: replaces the internal EventTarget bus so a test run starts with
+// no leftover listeners from prior test files. Also useful in dev for HMR
+// recovery (review P1-C). Never call from production code — listeners on the
+// old bus stop receiving updates.
+export function __resetBusForTest() {
+  _bus = typeof EventTarget !== 'undefined' ? new EventTarget() : null;
+}
+
+// Exported for tests — lets unit tests assert key shape without poking at
+// localStorage internals.
+export const _internals = { KEY_PREFIX, MAX_LEN, _keyFor };

package/src/utils/promptClassifier.js

@@ -0,0 +1,112 @@
+/**
+ * Prompt classification utilities for PTY prompt detection.
+ * Shared by ChatView.jsx and ChatMessage.jsx.
+ *
+ * NOTE: test/permission-detect.test.js 直接 import 本模块的真实现（不再内嵌副本），
+ * 修改本文件后跑该测试即可验证行为。
+ */
+
+export function isPlanApprovalPrompt(prompt) {
+  if (!prompt || !prompt.question) return false;
+  const q = prompt.question.toLowerCase();
+  // 文本判定：question 含 "plan" + (approv/proceed/accept)
+  if (/plan/i.test(q) && (/approv/i.test(q) || /proceed/i.test(q) || /accept/i.test(q))) {
+    return true;
+  }
+  // Options 模式兜底：Claude CLI plan inquirer prompt 不一定带 "plan" 关键字
+  // （如 "Would you like to proceed?"），但典型有 3 选项 = Approve / Approve with edits / Reject。
+  // 通过这个模式识别，保证 cliMode 下 plan modal 能弹出。
+  // 与 isDangerousOperationPrompt 的 2 选项 allow/deny 兜底正交（dangerous L15 早退避免冲突）。
+  if (Array.isArray(prompt.options) && prompt.options.length === 3) {
+    const texts = prompt.options.map(o => (o.text || '').toLowerCase());
+    const hasApprove = texts.some(t => /\bapprov/i.test(t));
+    const hasEdit = texts.some(t => /\bedits?\b|\bmodify/i.test(t));
+    const hasReject = texts.some(t => /\breject\b|\bdeny\b|keep planning|\bno,/i.test(t));
+    if (hasApprove && hasEdit && hasReject) return true;
+  }
+  return false;
+}
+
+/**
+ * Pick the option number that APPROVES a plan, for auto-approval.
+ * Mirrors the approve-button heuristic in ChatMessage._renderTool_ExitPlanMode:
+ * the first option whose text matches /yes|approve|accept|proceed/i AND is NOT a
+ * feedback/edit option (those open a textarea on manual click, so auto-submitting them
+ * would be wrong); otherwise the first option; otherwise 1 (the CLI default "approve").
+ * Never returns a reject or feedback option when a plain approve option exists.
+ *
+ * @param {Array<{number:number,text?:string}>} options - plan prompt options
+ * @returns {number} the option number to send for approval
+ */
+export function pickPlanApproveOptionNumber(options) {
+  if (!Array.isArray(options) || options.length === 0) return 1;
+  const approve = options.find(o => {
+    const text = (o && o.text) || '';
+    return /yes|approve|accept|proceed/i.test(text) && !/type|tell|change|feedback|edit/i.test(text);
+  });
+  if (approve && typeof approve.number === 'number') return approve.number;
+  const first = options[0];
+  return (first && typeof first.number === 'number') ? first.number : 1;
+}
+
+export function isDangerousOperationPrompt(prompt) {
+  if (!prompt || !prompt.question) return false;
+  const q = prompt.question;
+  if (isPlanApprovalPrompt(prompt)) return false;
+  // Match Claude Code permission prompt patterns:
+  // - "Do you want to make this edit" / "Do you want to write" / "Do you want to proceed"
+  // - "Allow X to Y" / "Want to allow" / "wants to (execute|run|...)"
+  // - "May Claude read/write/execute..." / "grant access/permission" / "permit"
+  if (/do you want to (make this edit|write|proceed|create|delete)|allow\b.*\bto\b|want to allow|wants to (execute|run|read|write|access|create|delete|modify|use)|may .*(read|write|execute|run|access|create|delete|modify)|grant .*(access|permission)|permit/i.test(q)) {
+    return true;
+  }
+  // Also detect by options: if options contain both Allow/Yes and Deny/No keywords
+  if (prompt.options && prompt.options.length >= 2) {
+    const texts = prompt.options.map(o => (o.text || '').toLowerCase());
+    const hasAllow = texts.some(t => /^allow|^yes/i.test(t));
+    const hasDeny = texts.some(t => /^no$|^no[^a-z]|^deny|^reject/i.test(t));
+    if (hasAllow && hasDeny) return true;
+  }
+  return false;
+}
+
+/**
+ * Parse tool name and input from the PTY buffer surrounding a detected prompt.
+ * Used to populate ToolApprovalPanel for subAgent permission prompts that bypass hooks.
+ *
+ * @param {string} buf - ANSI-stripped PTY buffer (up to 4KB)
+ * @param {string} question - Detected prompt question text
+ * @param {Array} options - Detected prompt options [{text, number, selected}]
+ * @returns {{ toolName: string, input: object }}
+ */
+export function parseToolInfoFromBuffer(buf, question, options) {
+  const q = (question || '').toLowerCase();
+  const optTexts = (options || []).map(o => o.text || '').join(' ').toLowerCase();
+
+  // 1. Bash: buffer contains "Bash command" or "Run shell command"
+  if (/bash command|run shell command/i.test(buf)) {
+    const cmdMatch = buf.match(/(?:Bash command|Run shell command)\s*\n\s*\n((?:\s{4,}.+\n?)+)/i);
+    const cmd = cmdMatch ? cmdMatch[1].replace(/^\s{4}/gm, '').trim() : null;
+    return { toolName: 'Bash', input: cmd ? { command: cmd } : { description: question } };
+  }
+
+  // 2. Edit: "make this edit to <path>"
+  const editMatch = q.match(/make this edit to\s+(.+?)\s*\??$/);
+  if (editMatch) return { toolName: 'Edit', input: { file_path: editMatch[1] } };
+
+  // 3. Write: "write" + path
+  const writeMatch = q.match(/write (?:this new file|to)\s+(.+?)\s*\??$/);
+  if (writeMatch) return { toolName: 'Write', input: { file_path: writeMatch[1] } };
+  if (/write/i.test(q)) return { toolName: 'Write', input: { description: question } };
+
+  // 4. Read: "read <path>" or options contain "allow reading from <path>"
+  const readMatch = q.match(/read\s+(.+?)\s*\??$/) || optTexts.match(/allow reading from\s+(.+?)(?:\s+from this project)?/);
+  if (readMatch) return { toolName: 'Read', input: { file_path: readMatch[1] } };
+
+  // 5. WebFetch/WebSearch
+  if (/fetch|url/i.test(q)) return { toolName: 'WebFetch', input: { description: question } };
+  if (/search/i.test(q)) return { toolName: 'WebSearch', input: { description: question } };
+
+  // 6. Fallback
+  return { toolName: 'Tool', input: { description: question } };
+}