micro-models-agent 0.43.3 → 0.45.0

package/dist/tools/bash.js

@@ -1,337 +0,0 @@
-import { isCommandAllowed, sanitizeCommandForLog, } from "../modules/security/command-validator";
-import { logBashCommand, logSecurityBlock, } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { DEFAULT_SECURITY_CONFIG } from "../config/security";
-import { processRegistry, registerKillable, unregisterKillable, } from "../modules/processes";
-import { t } from "../i18n/index";
-import { platform } from "os";
-import { MAX_PREVIEW_LINES } from "./preview";
-/**
- * A command still running after this window is promoted to the background.
- * The decision is based on process *behavior* (still alive), not on matching
- * words in the command text — a command that happens to mention "vite",
- * "server", etc. runs normally, and any genuinely long-running command is
- * caught regardless of how it is written.
- */
-export const BASH_GRACE_MS = 5000;
-/** Short window for explicit `background: true` — surfaces immediate spawn failures (bad cwd, missing shell). */
-const SPAWN_SETTLE_MS = 100;
-let bashGraceMs = BASH_GRACE_MS;
-/** Test hook: override the auto-background grace window. */
-export function setBashGraceMs(ms) {
-    bashGraceMs = ms;
-}
-/**
- * Detect a file write via `echo/printf ... > file` — common model habit that
- * breaks in cmd.exe: single quotes are not grouping quotes, `>` only applies
- * to the LAST line of a multi-line command, and double quotes inside the text
- * split the command. Returns the target filename or null.
- */
-export function extractEchoFileWrite(command) {
-    if (!/^\s*(?:echo|printf)\b/i.test(command))
-        return null;
-    const m = command.match(/[>»]{1,2}\s*"?([^"'\s&|]+)"?/i);
-    if (!m)
-        return null;
-    return m[1].replace(/["'']$/g, "");
-}
-/**
- * cmd.exe uses `&` as the command separator, not `;` (bash). The model
- * regularly chains commands with `;` — without translation cmd passes the
- * `;` to the first command as an argument (e.g. `node x.ts;` → ENOENT for
- * "x.ts;"). Replace `;` with `&` only OUTSIDE double-quoted strings so
- * `echo "a;b"` stays intact. (Single quotes are not special in cmd.)
- */
-export function translateSemicolonsForCmd(command) {
-    let out = "";
-    let inQuotes = false;
-    for (let i = 0; i < command.length; i++) {
-        const ch = command[i];
-        if (ch === '"') {
-            inQuotes = !inQuotes;
-            out += ch;
-            continue;
-        }
-        out += ch === ";" && !inQuotes ? "&" : ch;
-    }
-    return out;
-}
-function adaptCommandForWindows(command) {
-    if (platform() !== "win32")
-        return command;
-    // The model sometimes appends `|| true` (bash error-suppression idiom)
-    // which PowerShell doesn't understand. Replace with `; exit 0` which
-    // forces a successful exit code regardless of the previous command's result.
-    if (/\|\|\s*true\b/.test(command)) {
-        command = command.replace(/\s*\|\|\s*true\b/g, "; exit 0");
-    }
-    // Windows mkdir does not support -p flag, but creates intermediate dirs by default
-    const trimmed = command.trim();
-    if (trimmed.startsWith("mkdir -p ")) {
-        return trimmed.replace(/^mkdir -p /, "mkdir ");
-    }
-    if (trimmed === "mkdir -p" || trimmed.startsWith("mkdir -p ")) {
-        return trimmed.replace(/mkdir -p/g, "mkdir");
-    }
-    // Translate simple Unix commands to their cmd.exe equivalents. Only the
-    // leading word is rewritten; flags are passed through (ls -la → dir -la,
-    // which cmd tolerates). Pipe-using forms are left alone — they would break.
-    const firstWord = trimmed.split(/\s+/)[0]?.split(/[\\/]/).pop();
-    const translated = firstWord ? UNIX_TO_WIN_TRANSLATE[firstWord] : undefined;
-    if (translated &&
-        !trimmed.includes("|") &&
-        !trimmed.includes(">") &&
-        !trimmed.includes("&&") &&
-        !trimmed.includes(";")) {
-        return trimmed.replace(firstWord, translated);
-    }
-    // No encoding adaptation needed — registry.ts handles UTF-8/OEM decoding
-    return translateSemicolonsForCmd(command);
-}
-/** Common Unix → Windows command mapping for error hints. */
-const UNIX_TO_WIN_HINTS = {
-    ls: "Use the list_dir tool instead.",
-    pwd: "Use the file_info tool instead.",
-    cat: "Use the read_file tool instead.",
-    cp: "Use the move_file tool instead.",
-    mv: "Use the move_file tool instead.",
-    rm: "Use the delete_file tool instead.",
-    grep: "Use the grep tool instead.",
-    chmod: "Use the chmod tool instead.",
-    touch: "Use the write_file tool instead.",
-    find: "Use the glob tool instead.",
-    head: "Use the read_file tool with offset/limit instead.",
-    tail: "Use the read_file tool instead.",
-    wc: "Use the read_file tool instead.",
-    diff: "Use the diff tool instead.",
-    which: 'Use "where" instead.',
-    echo: "echo works on Windows, but avoid pipes (|).",
-    "Get-Content": "Use the read_file tool instead.",
-    "Select-Object": "Use the read_file tool with offset/limit instead.",
-};
-/** Unix commands that can be transparently translated to cmd.exe equivalents. */
-const UNIX_TO_WIN_TRANSLATE = {
-    ls: "dir",
-    pwd: "cd",
-    cat: "type",
-};
-/**
- * Detect when the model mistakes a tool call for a shell command — e.g.
- * `bash` with command "create_dir path=C:\...\src" or "read_file file=x".
- * These are tool invocations, not commands; running them through the shell
- * fails. The matched tool name and raw args are returned so the caller can
- * redirect into the real tool.
- */
-/**
- * Shell commands that must NEVER be treated as mistaken tool calls. The
- * model often writes files via `echo '<code with = signs>'` or reads them
- * via `cat` — those are shell commands, not tool invocations. Without this
- * guard the redirect heuristic fires on any `<word> <text containing =>`
- * and fails with "Unknown tool: echo".
- */
-const NEVER_TOOL_CALLS = new Set([
-    "echo",
-    "cat",
-    "type",
-    "printf",
-    "touch",
-    "mkdir",
-    "cp",
-    "mv",
-    "rm",
-    "ls",
-    "dir",
-    "cd",
-    "pwd",
-    "grep",
-    "find",
-    "head",
-    "tail",
-    "wc",
-    "chmod",
-    "sed",
-    "awk",
-]);
-export function detectToolCallInBash(command) {
-    const match = command.trim().match(/^([\w-]+)\s+(.+)$/s);
-    if (!match)
-        return null;
-    const tool = match[1];
-    // Real shell commands (echo, cat, ...) are never mistaken tool calls.
-    if (NEVER_TOOL_CALLS.has(tool))
-        return null;
-    const rest = match[2].trim();
-    // Only treat as a tool call when the first word looks like a snake_case
-    // tool name and the rest has at least one '=' or a JSON object shape.
-    if (!/^[a-z][a-z0-9_]+$/.test(tool))
-        return null;
-    if (!rest.includes("=") && !rest.startsWith("{"))
-        return null;
-    return { tool, args: rest };
-}
-/**
- * Parse the raw argument string of a mistaken tool call captured in a bash
- * command into a Record. Supports JSON objects ("{"path": "..."}") and
- * key=value pairs ("path=C:\...\src"). Values keep their literal text.
- */
-export function parseToolArgs(raw) {
-    const trimmed = raw.trim();
-    if (trimmed.startsWith("{")) {
-        try {
-            return JSON.parse(trimmed);
-        }
-        catch {
-            /* fall through to key=value parsing */
-        }
-    }
-    const args = {};
-    // Tokenize respecting double/single-quoted values.
-    const tokens = trimmed.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) ?? [];
-    for (const token of tokens) {
-        const eq = token.indexOf("=");
-        if (eq > 0) {
-            const key = token.slice(0, eq);
-            const value = token.slice(eq + 1);
-            // Strip surrounding quotes from values.
-            args[key] = value.replace(/^["']|["']$/g, "");
-        }
-    }
-    return args;
-}
-export const bashTool = {
-    name: "bash",
-    description: "Execute a shell command and return its output. Use for running tests, build, git, and shell operations. Commands that are still running after a few seconds are automatically moved to the background and return a process id — manage them with process_list, process_log, process_kill. Set background=true to return a process id immediately for commands you know are long-running (dev servers, watchers).",
-    tags: ["shell", "code"],
-    parameters: {
-        type: "object",
-        properties: {
-            command: { type: "string", description: "Shell command to execute" },
-            workdir: {
-                type: "string",
-                description: "Working directory (default: baseDir)",
-            },
-            background: {
-                type: "boolean",
-                description: "Return a process id immediately without waiting (default: commands still running after a few seconds are auto-promoted to the background)",
-            },
-        },
-        required: ["command"],
-    },
-    handler: async (ctx, args) => {
-        const originalCommand = String(args.command);
-        // The model sometimes sends a tool invocation (e.g. "create_dir path=...")
-        // as a bash command instead of calling the tool directly. Redirect into
-        // the real tool so the intent succeeds instead of failing in the shell.
-        const toolCall = detectToolCallInBash(originalCommand);
-        if (toolCall &&
-            toolCall.tool !== "bash" &&
-            ctx.toolExecutor &&
-            ctx.toolExecutor.hasTool(toolCall.tool)) {
-            const redirected = await ctx.toolExecutor.executeByName(toolCall.tool, parseToolArgs(toolCall.args), ctx);
-            return {
-                success: redirected.success,
-                output: `[redirected to tool "${toolCall.tool}"]\n${redirected.output}`,
-            };
-        }
-        const command = adaptCommandForWindows(originalCommand);
-        // echo/printf redirection to a file is unreliable in cmd.exe (single
-        // quotes don't group, multi-line commands split, embedded double quotes
-        // break the command). Steer the model to write_file instead — it
-        // produces correct files every time.
-        if (platform() === "win32") {
-            const echoWrite = extractEchoFileWrite(originalCommand);
-            if (echoWrite) {
-                return {
-                    success: false,
-                    output: t("bash.echo_write_blocked", { path: echoWrite }),
-                };
-            }
-        }
-        const workdir = args.workdir ? String(args.workdir) : ctx.baseDir;
-        // Get session-specific security config with defaults
-        const appConfig = ctx.config || {};
-        const fullSecurityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(appConfig, ctx.sessionContext)
-            : appConfig.security || DEFAULT_SECURITY_CONFIG;
-        const securityConfig = fullSecurityConfig.bash || DEFAULT_SECURITY_CONFIG.bash;
-        const validation = isCommandAllowed(command, securityConfig);
-        if (!validation.allowed) {
-            // Log security block
-            logSecurityBlock(ctx.sessionId, "bash_command", validation.reason || "Command blocked by security policy", sanitizeCommandForLog(originalCommand));
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Command is not allowed: ${validation.reason}\nHint: Use the "workdir" parameter to run commands in a specific directory instead of "cd dir && cmd". Run one command per tool call.`,
-            };
-        }
-        // Log command execution if enabled
-        if (securityConfig?.logCommands) {
-            logBashCommand(ctx.sessionId, sanitizeCommandForLog(command), false, // Will be updated after execution
-            `Working directory: ${workdir}`);
-        }
-        const entry = processRegistry.start(command, workdir, ctx.sessionId);
-        if (ctx.activeCallId) {
-            // Let the executor abort/kill the child during the grace window.
-            registerKillable(ctx.activeCallId, () => processRegistry.kill(entry.id));
-        }
-        try {
-            const settleMs = args.background === true ? SPAWN_SETTLE_MS : bashGraceMs;
-            const exited = await processRegistry.waitForExit(entry.id, settleMs);
-            if (exited) {
-                // Command finished (or failed to spawn) within the window.
-                if (entry.spawnError) {
-                    return {
-                        success: false,
-                        output: `[process error] ${entry.spawnError}\nHint: check the "workdir" path exists and the command is valid for this OS.`,
-                    };
-                }
-                const code = entry.exitCode;
-                let output = entry.log.join("\n");
-                processRegistry.remove(entry.id);
-                if (!output && code !== 0) {
-                    output = `(exit code ${code})`;
-                }
-                // On Windows, hint about Unix commands that don't work
-                if (platform() === "win32" && code !== 0) {
-                    const firstWord = command
-                        .trim()
-                        .split(/\s+/)[0]
-                        ?.split(/[\\/]/)
-                        .pop();
-                    const hint = firstWord ? UNIX_TO_WIN_HINTS[firstWord] : undefined;
-                    if (hint) {
-                        output = `${output}\n\nHint: "${firstWord}" may not work on Windows. ${hint}`;
-                    }
-                }
-                // Update audit log with result
-                if (securityConfig?.logCommands) {
-                    logBashCommand(ctx.sessionId, sanitizeCommandForLog(command), code === 0, `Working directory: ${workdir}, Output length: ${output.length}`);
-                }
-                const lines = output.split("\n");
-                if (lines.length > MAX_PREVIEW_LINES) {
-                    output =
-                        lines.slice(0, MAX_PREVIEW_LINES).join("\n") +
-                            `\n... (${lines.length - MAX_PREVIEW_LINES} more lines)`;
-                }
-                return { success: code === 0, output };
-            }
-            // Still running — promote to a background process.
-            const explicit = args.background === true;
-            const output = `${t("proc.started", {
-                id: entry.id,
-                pid: entry.pid,
-                command,
-            })}${explicit ? "" : `\n${t("proc.promoted_hint", { ms: settleMs })}`}\n${t("proc.manage_hint", {
-                id: entry.id,
-            })}`;
-            if (securityConfig?.logCommands) {
-                logBashCommand(ctx.sessionId, sanitizeCommandForLog(command), true, `Started in background: ${entry.id} (PID ${entry.pid})`);
-            }
-            return { success: true, output };
-        }
-        finally {
-            if (ctx.activeCallId) {
-                unregisterKillable(ctx.activeCallId);
-            }
-        }
-    },
-};

package/dist/tools/browser.js

@@ -1,97 +0,0 @@
-import { BrowserSession } from '../modules/browser/session';
-import { DEFAULT_BROWSER_CONFIG } from '../modules/browser/types';
-import { t } from '../i18n/index';
-import { join } from 'path';
-let session = null;
-function getSession(ctx) {
-    if (!session) {
-        const cookieDir = join(ctx.baseDir, '.mma', 'browser');
-        session = new BrowserSession({
-            ...DEFAULT_BROWSER_CONFIG,
-            headless: ctx.config.browser?.headless ?? true,
-            maxElements: ctx.config.browser?.maxElements ?? 30,
-            navigationTimeout: ctx.config.browser?.navigationTimeout ?? 15000,
-            viewportWidth: ctx.config.browser?.viewportWidth ?? 1280,
-            viewportHeight: ctx.config.browser?.viewportHeight ?? 720,
-            cookieDir,
-        });
-    }
-    return session;
-}
-export function formatScreenshotForTextModel(snapshot) {
-    return `${t('tool.screenshot_unavailable')}\n\n${snapshot}`;
-}
-export function formatScreenshotResult(snapshot, screenshot, supportsVision) {
-    if (!supportsVision) {
-        return formatScreenshotForTextModel(snapshot);
-    }
-    const base64 = screenshot.toString('base64');
-    return `${snapshot}\n\n[Screenshot: data:image/png;base64,${base64}]`;
-}
-export function createBrowserTool() {
-    return {
-        name: 'browser',
-        tags: ['browser', 'vision'],
-        description: [
-            'Control a headless browser. Navigate pages, click elements, type text, scroll, take screenshots.',
-            'Returns a numbered list of interactive elements — use element numbers as targets for click/type.',
-            'Actions: open (url), click (target), type (target, text), scroll (direction), back, forward, screenshot, snapshot, close, wait (ms).',
-        ].join(' '),
-        parameters: {
-            type: 'object',
-            properties: {
-                action: {
-                    type: 'string',
-                    enum: ['open', 'click', 'type', 'scroll', 'back', 'forward', 'screenshot', 'snapshot', 'close', 'wait'],
-                    description: 'Browser action to perform',
-                },
-                url: {
-                    type: 'string',
-                    description: 'URL to open (for action "open")',
-                },
-                target: {
-                    type: 'number',
-                    description: 'Element number from snapshot (for action "click" or "type")',
-                },
-                text: {
-                    type: 'string',
-                    description: 'Text to type (for action "type")',
-                },
-                direction: {
-                    type: 'string',
-                    enum: ['up', 'down', 'top', 'bottom'],
-                    description: 'Scroll direction (for action "scroll", default "down")',
-                },
-                ms: {
-                    type: 'number',
-                    description: 'Milliseconds to wait (for action "wait", default 1000)',
-                },
-            },
-            required: ['action'],
-        },
-        handler: async (ctx, args) => {
-            const action = String(args.action || '');
-            if (!action) {
-                return { success: false, output: t('tool.action_required') };
-            }
-            const s = getSession(ctx);
-            const result = await s.execute(action, args);
-            const supportsVision = ctx.config.model.includes('vision') ||
-                ctx.config.model.includes('gpt-4o') ||
-                ctx.config.model.includes('claude');
-            if (result.screenshot) {
-                return {
-                    success: result.success,
-                    output: formatScreenshotResult(result.output, result.screenshot, supportsVision),
-                };
-            }
-            return { success: result.success, output: result.output };
-        },
-    };
-}
-export function closeBrowserSession() {
-    if (session) {
-        session.close().catch(() => { });
-        session = null;
-    }
-}

package/dist/tools/create-dir.js

@@ -1,55 +0,0 @@
-import { mkdirSync, existsSync } from "fs";
-import { t } from "../i18n/index";
-import { isPathWritable } from "../modules/security/path-validator";
-import { logFileWrite, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { safeResolvePath } from "./path-utils";
-export const createDirTool = {
-    name: "create_dir",
-    description: "Create a directory (and any intermediate directories).",
-    tags: ["file"],
-    parameters: {
-        type: "object",
-        properties: {
-            path: { type: "string", description: "Directory path" },
-        },
-        required: ["path"],
-    },
-    handler: async (ctx, args) => {
-        const path = String(args.path);
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        // Get session-specific security config
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext)
-            : ctx.config.security;
-        // Check file operations limit
-        const maxFileOps = securityConfig?.maxFileOperations ?? 100;
-        const currentCount = ctx.fileOperationsCount ?? 0;
-        if (currentCount >= maxFileOps) {
-            logSecurityBlock(ctx.sessionId, "file_write", `Maximum file operations (${maxFileOps}) exceeded`, path);
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Maximum file operations (${maxFileOps}) exceeded`,
-            };
-        }
-        // Check path permissions
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_write", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        if (!existsSync(resolved)) {
-            mkdirSync(resolved, { recursive: true });
-        }
-        // Increment file operations counter
-        ctx.fileOperationsCount = currentCount + 1;
-        // Log directory creation
-        logFileWrite(ctx.sessionId, path, true, "Directory created");
-        return { success: true, output: t("file.created", { path }) };
-    },
-};

package/dist/tools/delete-file.js

@@ -1,62 +0,0 @@
-import { unlinkSync, existsSync, statSync, readFileSync } from "fs";
-import { t } from "../i18n/index";
-import { isPathWritable } from "../modules/security/path-validator";
-import { logFileDelete, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { generateDeleteDiff } from "../ui/diff";
-import { safeResolvePath } from "./path-utils";
-export const deleteFileTool = {
-    name: "delete_file",
-    description: "Delete a file from the filesystem.",
-    tags: ["file"],
-    parameters: {
-        type: "object",
-        properties: {
-            path: { type: "string", description: "File path" },
-        },
-        required: ["path"],
-    },
-    handler: async (ctx, args) => {
-        const path = String(args.path);
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        // Get session-specific security config
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext)
-            : ctx.config.security;
-        // Check file operations limit
-        const maxFileOps = securityConfig?.maxFileOperations ?? 100;
-        const currentCount = ctx.fileOperationsCount ?? 0;
-        if (currentCount >= maxFileOps) {
-            logSecurityBlock(ctx.sessionId, "file_delete", `Maximum file operations (${maxFileOps}) exceeded`, path);
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Maximum file operations (${maxFileOps}) exceeded`,
-            };
-        }
-        // Check path permissions
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_delete", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        if (!existsSync(resolved)) {
-            return { success: false, output: t("file.notfound", { path }) };
-        }
-        if (statSync(resolved).isDirectory()) {
-            return { success: false, output: t("file.is_directory", { path }) };
-        }
-        const content = readFileSync(resolved, "utf-8");
-        unlinkSync(resolved);
-        const diff = generateDeleteDiff(content);
-        // Increment file operations counter
-        ctx.fileOperationsCount = currentCount + 1;
-        // Log successful file deletion
-        logFileDelete(ctx.sessionId, path, true);
-        return { success: true, output: t("file.deleted", { path }), diff };
-    },
-};

package/dist/tools/edit-file.js

@@ -1,79 +0,0 @@
-import { readFileSync, writeFileSync } from "fs";
-import { t } from "../i18n/index";
-import { isPathWritable } from "../modules/security/path-validator";
-import { scanContent } from "../modules/security/content-scanner";
-import { logFileWrite, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { generateDiff } from "../ui/diff";
-import { safeResolvePath } from "./path-utils";
-export const editFileTool = {
-    name: "edit_file",
-    description: "Find and replace text in an existing file. Uses exact string match (not regex).",
-    tags: ["file", "code"],
-    parameters: {
-        type: "object",
-        properties: {
-            path: { type: "string", description: "File path" },
-            old: { type: "string", description: "Text to replace" },
-            new: { type: "string", description: "Replacement text" },
-        },
-        required: ["path", "old", "new"],
-    },
-    handler: async (ctx, args) => {
-        const path = String(args.path);
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        // Get session-specific security config
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext)
-            : ctx.config.security;
-        // Check file operations limit
-        const maxFileOps = securityConfig?.maxFileOperations ?? 100;
-        const currentCount = ctx.fileOperationsCount ?? 0;
-        if (currentCount >= maxFileOps) {
-            logSecurityBlock(ctx.sessionId, "file_write", `Maximum file operations (${maxFileOps}) exceeded`, path);
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Maximum file operations (${maxFileOps}) exceeded`,
-            };
-        }
-        // Check path permissions
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_write", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        const content = readFileSync(resolved, "utf-8");
-        const oldStr = String(args.old);
-        const newStr = String(args.new);
-        if (!content.includes(oldStr)) {
-            return {
-                success: false,
-                output: t("file.string_not_found", { str: oldStr }),
-            };
-        }
-        const updated = content.replace(oldStr, newStr);
-        // Check new content for dangerous patterns — only when security is enabled
-        if (securityConfig?.enabled && securityConfig?.contentScan?.enabled) {
-            const scanResult = scanContent(updated, path, securityConfig.contentScan);
-            if (!scanResult.allowed) {
-                logSecurityBlock(ctx.sessionId, "file_write", scanResult.reason || "Content contains dangerous patterns", path);
-                return {
-                    success: false,
-                    output: `[SECURITY BLOCKED] ${scanResult.reason}`,
-                };
-            }
-        }
-        writeFileSync(resolved, updated, "utf-8");
-        const diff = generateDiff(content, updated);
-        // Increment file operations counter
-        ctx.fileOperationsCount = currentCount + 1;
-        // Log successful file edit
-        logFileWrite(ctx.sessionId, path, true, "File edited");
-        return { success: true, output: t("file.replaced_in", { path }), diff };
-    },
-};