just-bash 2.13.1 → 2.15.0-executor.0

package/dist/bin/chunks/js-exec-worker.js

@@ -1530,7 +1530,9 @@ var OpCode = {
   // HTTP operations
   HTTP_REQUEST: 200,
   // Sub-shell execution
-  EXEC_COMMAND: 300
+  EXEC_COMMAND: 300,
+  // Tool invocation (executor mode)
+  INVOKE_TOOL: 400
 };
 var Status = {
   PENDING: 0,
@@ -2003,6 +2005,18 @@ var SyncBackend = class {
     const responseJson = new TextDecoder().decode(result.result);
     return JSON.parse(responseJson);
   }
+  /**
+   * Invoke a tool through the main thread's tool invoker (executor mode).
+   * Returns the JSON-serialized result.
+   */
+  invokeTool(path, argsJson) {
+    const requestData = argsJson ? new TextEncoder().encode(argsJson) : void 0;
+    const result = this.execSync(OpCode.INVOKE_TOOL, path, requestData);
+    if (!result.success) {
+      throw new Error(result.error || "Tool invocation failed");
+    }
+    return new TextDecoder().decode(result.result);
+  }
 };
 
 // src/commands/js-exec/fetch-polyfill.ts
@@ -3813,6 +3827,26 @@ function setupContext(context, backend, input) {
   );
   context.setProp(context.global, "__execArgs", execArgsFn);
   execArgsFn.dispose();
+  if (input.hasExecutorTools || input.executorMode) {
+    const invokeToolFn = context.newFunction(
+      "__invokeTool",
+      (pathHandle, argsHandle) => {
+        const path = context.getString(pathHandle);
+        const argsJson = context.getString(argsHandle);
+        try {
+          const resultJson = backend.invokeTool(path, argsJson);
+          return context.newString(resultJson);
+        } catch (e) {
+          return throwError(
+            context,
+            e.message || "tool invocation failed"
+          );
+        }
+      }
+    );
+    context.setProp(context.global, "__invokeTool", invokeToolFn);
+    invokeToolFn.dispose();
+  }
   const envObj = jsToHandle(context, input.env);
   context.setProp(context.global, "env", envObj);
   envObj.dispose();
@@ -4070,6 +4104,78 @@ async function initializeWithDefense() {
     ]
   });
 }
+var TOOLS_ONLY_SETUP_SOURCE = `(function() {
+  globalThis.tools = (function makeProxy(path) {
+    return new Proxy(function(){}, {
+      get: function(_t, prop) {
+        if (prop === 'then' || typeof prop === 'symbol') return undefined;
+        return makeProxy(path.concat([String(prop)]));
+      },
+      apply: function(_t, _this, args) {
+        var toolPath = path.join('.');
+        if (!toolPath) throw new Error('Tool path missing in invocation');
+        var argsJson = args[0] !== undefined ? JSON.stringify(args[0]) : '{}';
+        var resultJson = globalThis.__invokeTool(toolPath, argsJson);
+        return resultJson !== undefined && resultJson !== '' ? JSON.parse(resultJson) : undefined;
+      }
+    });
+  })([]);
+})();`;
+var EXECUTOR_SETUP_SOURCE = `(function() {
+  var __logs = [];
+  globalThis[Symbol.for('jb:executorLogs')] = __logs;
+
+  var _fmt = function(v) {
+    if (typeof v === 'string') return v;
+    try { return JSON.stringify(v); }
+    catch(e) { return String(v); }
+  };
+
+  globalThis.console = {
+    log: function() { var a = []; for(var i=0;i<arguments.length;i++) a.push(_fmt(arguments[i])); __logs.push('[log] ' + a.join(' ')); },
+    error: function() { var a = []; for(var i=0;i<arguments.length;i++) a.push(_fmt(arguments[i])); __logs.push('[error] ' + a.join(' ')); },
+    warn: function() { var a = []; for(var i=0;i<arguments.length;i++) a.push(_fmt(arguments[i])); __logs.push('[warn] ' + a.join(' ')); },
+    info: function() { var a = []; for(var i=0;i<arguments.length;i++) a.push(_fmt(arguments[i])); __logs.push('[info] ' + a.join(' ')); },
+    debug: function() { var a = []; for(var i=0;i<arguments.length;i++) a.push(_fmt(arguments[i])); __logs.push('[debug] ' + a.join(' ')); },
+  };
+
+  globalThis.tools = (function makeProxy(path) {
+    return new Proxy(function(){}, {
+      get: function(_t, prop) {
+        if (prop === 'then' || typeof prop === 'symbol') return undefined;
+        return makeProxy(path.concat([String(prop)]));
+      },
+      apply: function(_t, _this, args) {
+        var toolPath = path.join('.');
+        if (!toolPath) throw new Error('Tool path missing in invocation');
+        var argsJson = args[0] !== undefined ? JSON.stringify(args[0]) : '{}';
+        var resultJson = globalThis.__invokeTool(toolPath, argsJson);
+        return resultJson !== undefined && resultJson !== '' ? JSON.parse(resultJson) : undefined;
+      }
+    });
+  })([]);
+})();`;
+function readExecutorLogs(context) {
+  const logsResult = context.evalCode(
+    `globalThis[Symbol.for('jb:executorLogs')]`,
+    "<read-logs>"
+  );
+  if (logsResult.error) {
+    logsResult.error.dispose();
+    return [];
+  }
+  const logs = context.dump(logsResult.value);
+  logsResult.value.dispose();
+  return Array.isArray(logs) ? logs : [];
+}
+function readPropDump(context, handle, key) {
+  const prop = context.getProp(handle, key);
+  try {
+    return context.dump(prop);
+  } finally {
+    prop.dispose();
+  }
+}
 async function executeCode(input) {
   const qjs = await getQuickJSModule();
   const backend = new SyncBackend(input.sharedBuffer, input.timeoutMs);
@@ -4277,6 +4383,132 @@ async function executeCode(input) {
       }
       bootstrapResult.value.dispose();
     }
+    if (input.hasExecutorTools && !input.executorMode) {
+      const toolsSetupResult = context.evalCode(
+        TOOLS_ONLY_SETUP_SOURCE,
+        "<tools-setup>"
+      );
+      if (toolsSetupResult.error) {
+        toolsSetupResult.error.dispose();
+      } else {
+        toolsSetupResult.value.dispose();
+      }
+    }
+    if (input.executorMode) {
+      const executorSetupResult = context.evalCode(
+        EXECUTOR_SETUP_SOURCE,
+        "<executor-setup>"
+      );
+      if (executorSetupResult.error) {
+        const errVal = context.dump(executorSetupResult.error);
+        executorSetupResult.error.dispose();
+        backend.exit(1);
+        return {
+          success: true,
+          error: formatError(errVal),
+          executorLogs: []
+        };
+      }
+      executorSetupResult.value.dispose();
+      const wrappedCode = `(async () => {
+${input.jsCode}
+})()`;
+      const evalResult = context.evalCode(wrappedCode, "<executor>");
+      if (evalResult.error) {
+        const errorVal = context.dump(evalResult.error);
+        evalResult.error.dispose();
+        const errorMsg = formatError(errorVal);
+        backend.exit(1);
+        return {
+          success: true,
+          executorLogs: readExecutorLogs(context),
+          error: errorMsg
+        };
+      }
+      context.setProp(context.global, "__executorPromise", evalResult.value);
+      evalResult.value.dispose();
+      const stateResult = context.evalCode(
+        [
+          "(function(p){",
+          "  var s = { v: void 0, e: void 0, settled: false };",
+          "  var fmtErr = function(e) {",
+          "    if (e && typeof e === 'object') {",
+          "      var m = typeof e.message === 'string' ? e.message : '';",
+          "      var st = typeof e.stack === 'string' ? e.stack : '';",
+          "      if (m && st) return st.indexOf(m) === -1 ? m + '\\n' + st : st;",
+          "      if (m) return m; if (st) return st;",
+          "    }",
+          "    return String(e);",
+          "  };",
+          "  p.then(",
+          "    function(v){ s.v = v; s.settled = true; },",
+          "    function(e){ s.e = fmtErr(e); s.settled = true; }",
+          "  );",
+          "  return s;",
+          "})(__executorPromise)"
+        ].join("\n"),
+        "<state-tracker>"
+      );
+      if (stateResult.error) {
+        const errorVal = context.dump(stateResult.error);
+        stateResult.error.dispose();
+        backend.exit(1);
+        return {
+          success: true,
+          executorLogs: readExecutorLogs(context),
+          error: formatError(errorVal)
+        };
+      }
+      const stateHandle = stateResult.value;
+      const pendingResult = runtime.executePendingJobs();
+      if ("error" in pendingResult && pendingResult.error) {
+        const errorVal = context.dump(pendingResult.error);
+        pendingResult.error.dispose();
+        const rawMsg = typeof errorVal === "object" && errorVal !== null && "message" in errorVal ? errorVal.message : String(errorVal);
+        if (rawMsg !== "__EXIT__") {
+          stateHandle.dispose();
+          backend.exit(1);
+          return {
+            success: true,
+            executorLogs: readExecutorLogs(context),
+            error: formatError(errorVal)
+          };
+        }
+      }
+      const settled = readPropDump(context, stateHandle, "settled");
+      const value = readPropDump(context, stateHandle, "v");
+      const stateError = readPropDump(context, stateHandle, "e");
+      stateHandle.dispose();
+      const logs = readExecutorLogs(context);
+      if (!settled) {
+        backend.exit(0);
+        return {
+          success: true,
+          executorLogs: logs,
+          error: "Execution did not settle"
+        };
+      }
+      if (typeof stateError !== "undefined") {
+        backend.exit(0);
+        return {
+          success: true,
+          executorLogs: logs,
+          error: String(stateError)
+        };
+      }
+      let resultJson;
+      try {
+        resultJson = value !== void 0 ? JSON.stringify(value) : void 0;
+      } catch {
+        resultJson = void 0;
+      }
+      backend.exit(0);
+      return {
+        success: true,
+        executorResult: resultJson,
+        executorLogs: logs
+      };
+    }
     const filename = input.scriptPath || "<eval>";
     let jsCode = input.jsCode;
     if (input.stripTypes) {

package/dist/bin/chunks/{ln-VAOSD4HK.js → ln-EGC4HRXZ.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-YX7OOTPO.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as lnCommand};
+import{a,b}from"./chunk-AZ3RUDR2.js";import"./chunk-RLNOQILG.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as lnCommand};

package/dist/bin/{shell/chunks/mkdir-CH7JGW4N.js → chunks/mkdir-Z47OISSR.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-OQV5J23L.js";import"./chunk-SYG3IW7P.js";import"./chunk-JBABAK44.js";import"./chunk-4VDEBYW7.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as mkdirCommand};
+import{a,b}from"./chunk-7G3MC56B.js";import"./chunk-RLNOQILG.js";import"./chunk-JBABAK44.js";import"./chunk-4VDEBYW7.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as mkdirCommand};

package/dist/bin/chunks/python3-QOJU2POC.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import{a as _,b as O}from"./chunk-MNMRGJJM.js";import"./chunk-4OALHZXB.js";import"./chunk-MY5PY2PL.js";import"./chunk-LIYVQA3X.js";import{a as v,b as T}from"./chunk-OOJCYVYF.js";import{a as D}from"./chunk-4PRVMER6.js";import{c as y}from"./chunk-MO4RPBN2.js";import{b as C}from"./chunk-YU6OGPZR.js";import{a as M,b as c}from"./chunk-RLNOQILG.js";import{a as E}from"./chunk-4VDEBYW7.js";import{a as b,b as P}from"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";import{randomBytes as $}from"node:crypto";import{fileURLToPath as Q}from"node:url";import{Worker as R}from"node:worker_threads";var U=1e4,H=6e4,I={name:"python3",summary:"Execute Python code via CPython Emscripten",usage:"python3 [OPTIONS] [-c CODE | -m MODULE | FILE] [ARGS...]",description:["Execute Python code using CPython compiled to WebAssembly via Emscripten.","","This command runs Python in an isolated environment with access to","the virtual filesystem. Standard library modules are available."],options:["-c CODE     Execute CODE as Python script","-m MODULE   Run library module as a script","--version   Show Python version","--help      Show this help"],examples:['python3 -c "print(1 + 2)"','python3 -c "import sys; print(sys.version)"',"python3 script.py","python3 script.py arg1 arg2",`echo 'print("hello")' | python3`],notes:["CPython runs in WebAssembly, so execution may be slower than native Python.","Standard library modules are available (no pip install).","Maximum execution time is 30 seconds by default."]};function L(r){let e={code:null,module:null,scriptFile:null,showVersion:!1,scriptArgs:[]};if(r.length===0)return e;let t=r.findIndex(o=>!o.startsWith("-")||o==="-"||o==="--");for(let o=0;o<(t===-1?r.length:t);o++){let s=r[o];if(s==="-c")return o+1>=r.length?{stdout:"",stderr:`python3: option requires an argument -- 'c'
+`,exitCode:2}:(e.code=r[o+1],e.scriptArgs=r.slice(o+2),e);if(s==="-m")return o+1>=r.length?{stdout:"",stderr:`python3: option requires an argument -- 'm'
+`,exitCode:2}:(e.module=r[o+1],e.scriptArgs=r.slice(o+2),e);if(s==="--version"||s==="-V")return e.showVersion=!0,e;if(s.startsWith("-")&&s!=="-")return{stdout:"",stderr:`python3: unrecognized option '${s}'
+`,exitCode:2}}if(t!==-1){let o=r[t];o==="--"?t+1<r.length&&(e.scriptFile=r[t+1],e.scriptArgs=r.slice(t+2)):(e.scriptFile=o,e.scriptArgs=r.slice(t+1))}return e}var k=new WeakMap;function z(r){let e=k.get(r);return e||(e={executionQueue:[],isExecuting:!1},k.set(r,e)),e}function ie(){k=new WeakMap}var N=Q(new URL("./worker.js",import.meta.url));function B(){return $(16).toString("hex")}function V(r,e){if(!r||typeof r!="object")return{success:!1,error:"Malformed worker response"};let t=r;return typeof t.protocolToken!="string"||t.protocolToken!==e?{success:!1,error:"Malformed worker response: invalid protocol token"}:t.type==="security-violation"?{success:!1,error:`Security violation: ${typeof t.violation?.type=="string"?t.violation.type:"unknown"}`}:typeof t.success!="boolean"?{success:!1,error:"Malformed worker response: missing success flag"}:t.success?{success:!0}:{success:!1,error:typeof t.error=="string"&&t.error.length>0?t.error:"Worker execution failed"}}function a(r){if(r.isExecuting||r.executionQueue.length===0)return;for(;r.executionQueue.length>0&&r.executionQueue[0].canceled;)r.executionQueue.shift();if(r.executionQueue.length===0)return;let e=r.executionQueue.shift();if(!e)return;r.isExecuting=!0;let t;try{t=C.runTrusted(()=>new R(N,{workerData:e.input}))}catch(n){let i=n instanceof Error?n.message:String(n);e.resolve({success:!1,error:c(i)}),r.isExecuting=!1,a(r);return}e.workerRef&&(e.workerRef.current=t);let o=y(e.requireDefenseContext,"python3","worker message callback",n=>{e.resolve(V(n,e.input.protocolToken)),r.isExecuting=!1,t.terminate(),a(r)}),s=y(e.requireDefenseContext,"python3","worker error callback",n=>{let i=c(E(n));e.resolve({success:!1,error:i}),r.isExecuting=!1,a(r)}),p=y(e.requireDefenseContext,"python3","worker exit callback",()=>{r.isExecuting&&(e.resolve({success:!1,error:"Worker exited unexpectedly"}),r.isExecuting=!1,a(r))}),f=n=>{try{o(n)}catch(i){let m=i instanceof Error?i.message:String(i);e.resolve({success:!1,error:c(m)}),r.isExecuting=!1,t.terminate(),a(r)}},l=n=>{try{s(n)}catch(i){let m=i instanceof Error?i.message:String(i);e.resolve({success:!1,error:c(m)}),r.isExecuting=!1,a(r)}},g=()=>{try{p()}catch(n){let i=n instanceof Error?n.message:String(n);e.resolve({success:!1,error:c(i)}),r.isExecuting=!1,a(r)}};t.on("message",f),t.on("error",l),t.on("exit",g)}async function j(r,e,t,o=[]){let s=_(),p=new O(s,e.fs,e.cwd,"python3",e.fetch,e.limits?.maxOutputSize??0),f=e.limits?.maxPythonTimeoutMs??U,l=e.fetch?Math.max(f,H):f,g=z(e.fs),n={protocolToken:B(),sharedBuffer:s,pythonCode:r,cwd:e.cwd,env:D(e.env),args:o,scriptPath:t,timeoutMs:l},i={current:null},m=new Promise(u=>{let d={input:n,resolve:()=>{},workerRef:i,requireDefenseContext:e.requireDefenseContext},A=y(e.requireDefenseContext,"python3","worker timeout callback",()=>{i.current?i.current.terminate():d.canceled=!0,u({success:!1,error:`Execution timeout: exceeded ${l}ms limit`})}),F=v(()=>{try{A()}catch(h){let W=h instanceof Error?h.message:String(h);u({success:!1,error:c(W)})}},l);d.resolve=h=>{T(F),u(h)},g.executionQueue.push(d),a(g)}),[x,w]=await Promise.all([p.run(l).catch(u=>({stdout:"",stderr:`python3: bridge error: ${c(E(u))}
+`,exitCode:1})),m.catch(u=>({success:!1,error:c(E(u))}))]);if(!w.success&&w.error){let u=c(w.error);return{stdout:x.stdout,stderr:`${x.stderr}python3: ${u}
+`,exitCode:x.exitCode||1}}return x}var Y={name:"python3",async execute(r,e){if(P(r))return b(I);let t=L(r);if("exitCode"in t)return t;if(t.showVersion)return{stdout:`Python 3.13.2 (Emscripten)
+`,stderr:"",exitCode:0};let o,s;if(t.code!==null)o=t.code,s="-c";else if(t.module!==null){if(!/^[a-zA-Z_][a-zA-Z0-9_.]*$/.test(t.module))return{stdout:"",stderr:`python3: No module named '${t.module.slice(0,200)}'
+`,exitCode:1};o=`import runpy; runpy.run_module('${t.module}', run_name='__main__')`,s=t.module}else if(t.scriptFile!==null){let p=e.fs.resolvePath(e.cwd,t.scriptFile);if(!await e.fs.exists(p))return{stdout:"",stderr:`python3: can't open file '${t.scriptFile}': [Errno 2] No such file or directory
+`,exitCode:2};try{o=await e.fs.readFile(p),s=t.scriptFile}catch(f){let l=M(f.message);return{stdout:"",stderr:`python3: can't open file '${t.scriptFile}': ${l}
+`,exitCode:2}}}else if(e.stdin.trim())o=e.stdin,s="<stdin>";else return{stdout:"",stderr:`python3: no input provided (use -c CODE, -m MODULE, or provide a script file)
+`,exitCode:2};return j(o,e,s,t.scriptArgs)}},ce={name:"python",async execute(r,e){return Y.execute(r,e)}};export{ie as _resetExecutionQueue,Y as python3Command,ce as pythonCommand};

package/dist/bin/chunks/{rm-GWYJO4W7.js → rm-L3NZOLLG.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-R2LDP472.js";import"./chunk-SYG3IW7P.js";import"./chunk-JBABAK44.js";import"./chunk-4VDEBYW7.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as rmCommand};
+import{a,b}from"./chunk-EPPBDXOG.js";import"./chunk-RLNOQILG.js";import"./chunk-JBABAK44.js";import"./chunk-4VDEBYW7.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as rmCommand};

package/dist/bin/chunks/{sed-3C6IBX5L.js → sed-HALRQZKY.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-VVFGRIJZ.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as sedCommand};
+import{a,b}from"./chunk-RMQC3GS7.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-RLNOQILG.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as sedCommand};

package/dist/bin/chunks/{sqlite3-TZEE4O7U.js → sqlite3-CVNFMP3Z.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b,c}from"./chunk-UPUMZYZE.js";import"./chunk-OOJCYVYF.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{a as _internals,c as flagsForFuzzing,b as sqlite3Command};
+import{a,b,c}from"./chunk-CM4532DS.js";import"./chunk-OOJCYVYF.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-RLNOQILG.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{a as _internals,c as flagsForFuzzing,b as sqlite3Command};

package/dist/bin/chunks/time-5R4QWCYF.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import{a,b}from"./chunk-WXMBDX4P.js";import"./chunk-4OALHZXB.js";import"./chunk-LIYVQA3X.js";import"./chunk-4PRVMER6.js";import"./chunk-RLNOQILG.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as timeCommand};

package/dist/bin/{shell/chunks/tr-LZF57GYP.js → chunks/tr-4FPGAEVB.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-SYL34GE7.js";import"./chunk-SYG3IW7P.js";import"./chunk-JBABAK44.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as trCommand};
+import{a,b}from"./chunk-NAX7MTAR.js";import"./chunk-RLNOQILG.js";import"./chunk-JBABAK44.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as trCommand};

package/dist/bin/chunks/worker.js

@@ -11,17 +11,29 @@ import { dirname } from "node:path";
 import { parentPort, workerData } from "node:worker_threads";
 
 // src/fs/sanitize-error.ts
-function sanitizeErrorMessage(message) {
+function sanitizeWithUnixPrefixes(message, includeHostRuntimePrefixes, includeFileUrls) {
   if (!message) return message;
   let sanitized = message.replace(/\n\s+at\s.*/g, "");
+  if (includeFileUrls) {
+    sanitized = sanitized.replace(/\bfile:\/\/\/?[^\s'",)}\]:]+/g, "<path>");
+  }
   sanitized = sanitized.replace(
-    /(?:\/(?:Users|home|private|var|opt|Library|System|usr|etc|tmp|nix|snap))\b[^\s'",)}\]:]*/g,
+    includeHostRuntimePrefixes ? /(?:\/(?:Users|home|private|var|opt|Library|System|usr|etc|tmp|nix|snap|workspace|root|srv|mnt|app))\b[^\s'",)}\]:]*/g : /(?:\/(?:Users|home|private|var|opt|Library|System|usr|etc|tmp|nix|snap))\b[^\s'",)}\]:]*/g,
     "<path>"
   );
   sanitized = sanitized.replace(/node:internal\/[^\s'",)}\]:]+/g, "<internal>");
   sanitized = sanitized.replace(/[A-Z]:\\[^\s'",)}\]:]+/g, "<path>");
+  if (includeFileUrls) {
+    sanitized = sanitized.replace(/\\\\[^\s\\]+\\[^\s'",)}\]:]+/g, "<path>");
+  }
   return sanitized;
 }
+function sanitizeErrorMessage(message) {
+  return sanitizeWithUnixPrefixes(message, false, false);
+}
+function sanitizeHostErrorMessage(message) {
+  return sanitizeWithUnixPrefixes(message, true, true);
+}
 
 // src/security/blocked-globals.ts
 function getBlockedGlobals() {
@@ -1557,7 +1569,9 @@ var OpCode = {
   // HTTP operations
   HTTP_REQUEST: 200,
   // Sub-shell execution
-  EXEC_COMMAND: 300
+  EXEC_COMMAND: 300,
+  // Tool invocation (executor mode)
+  INVOKE_TOOL: 400
 };
 var Status = {
   PENDING: 0,
@@ -2030,6 +2044,18 @@ var SyncBackend = class {
     const responseJson = new TextDecoder().decode(result.result);
     return JSON.parse(responseJson);
   }
+  /**
+   * Invoke a tool through the main thread's tool invoker (executor mode).
+   * Returns the JSON-serialized result.
+   */
+  invokeTool(path, argsJson) {
+    const requestData = argsJson ? new TextEncoder().encode(argsJson) : void 0;
+    const result = this.execSync(OpCode.INVOKE_TOOL, path, requestData);
+    if (!result.success) {
+      throw new Error(result.error || "Tool invocation failed");
+    }
+    return new TextDecoder().decode(result.result);
+  }
 };
 
 // src/commands/python3/worker.ts
@@ -2760,7 +2786,7 @@ function createHTTPFS(backend, FS) {
             });
             lastResponse = encoder.encode(JSON.stringify(result));
           } catch (e) {
-            const message = sanitizeErrorMessage(e.message);
+            const message = sanitizeHostErrorMessage(e.message);
             lastResponse = encoder.encode(JSON.stringify({ error: message }));
           }
         }
@@ -2973,7 +2999,7 @@ async function runPython(input) {
       printErr: onPrintErr
     });
   } catch (e) {
-    const message = sanitizeErrorMessage(e.message);
+    const message = sanitizeHostErrorMessage(e.message);
     return {
       success: false,
       error: `Failed to load CPython: ${message}`
@@ -2988,7 +3014,7 @@ async function runPython(input) {
     Module.FS.mkdir("/host");
     Module.FS.mount(HOSTFS, { root: "/" }, "/host");
   } catch (e) {
-    const message = sanitizeErrorMessage(e.message);
+    const message = sanitizeHostErrorMessage(e.message);
     return {
       success: false,
       error: `Failed to mount HOSTFS: ${message}`
@@ -2999,7 +3025,7 @@ async function runPython(input) {
     Module.FS.mkdir("/_jb_http");
     Module.FS.mount(HTTPFS, { root: "/" }, "/_jb_http");
   } catch (e) {
-    const message = sanitizeErrorMessage(e.message);
+    const message = sanitizeHostErrorMessage(e.message);
     return {
       success: false,
       error: `Failed to mount HTTPFS: ${message}`
@@ -3079,7 +3105,7 @@ process.on("uncaughtException", (e) => {
   if (!activeProtocolToken) {
     return;
   }
-  const message = sanitizeErrorMessage(e.message);
+  const message = sanitizeHostErrorMessage(e.message);
   postWorkerMessage(activeProtocolToken, {
     success: false,
     error: `Worker uncaught exception: ${message}`

package/dist/bin/chunks/{yq-JJLSDDST.js → yq-Q47JUWL6.js}

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{a,b}from"./chunk-LGF54XJQ.js";import"./chunk-QSDVMMYI.js";import"./chunk-ZO5PSLKR.js";import"./chunk-V7ZOPVQS.js";import"./chunk-4PRVMER6.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-SYG3IW7P.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as yqCommand};
+import{a,b}from"./chunk-L2JBII6Z.js";import"./chunk-QSDVMMYI.js";import"./chunk-ZO5PSLKR.js";import"./chunk-V7ZOPVQS.js";import"./chunk-4PRVMER6.js";import"./chunk-MO4RPBN2.js";import"./chunk-YU6OGPZR.js";import"./chunk-SE4C7FJY.js";import"./chunk-6KZRLMG3.js";import"./chunk-RLNOQILG.js";import"./chunk-GTNBSMZR.js";import"./chunk-KGOUQS5A.js";export{b as flagsForFuzzing,a as yqCommand};