omnius 1.0.6 → 1.0.8

package/dist/index.js

@@ -86423,8 +86423,8 @@ var require_follow_redirects = __commonJS({
       }
       return parsed;
     }
-    function resolveUrl(relative14, base3) {
-      return useNativeURL ? new URL3(relative14, base3) : parseUrl(url.resolve(base3, relative14));
+    function resolveUrl(relative15, base3) {
+      return useNativeURL ? new URL3(relative15, base3) : parseUrl(url.resolve(base3, relative15));
     }
     function validateUrl(input) {
       if (/^\[/.test(input.hostname) && !/^\[[:0-9a-f]+\]$/i.test(input.hostname)) {
@@ -245198,21 +245198,21 @@ var require_pattern = __commonJS({
     exports.removeDuplicateSlashes = removeDuplicateSlashes;
     function partitionAbsoluteAndRelative(patterns) {
       const absolute = [];
-      const relative14 = [];
+      const relative15 = [];
       for (const pattern of patterns) {
-        if (isAbsolute6(pattern)) {
+        if (isAbsolute7(pattern)) {
           absolute.push(pattern);
         } else {
-          relative14.push(pattern);
+          relative15.push(pattern);
         }
       }
-      return [absolute, relative14];
+      return [absolute, relative15];
     }
     exports.partitionAbsoluteAndRelative = partitionAbsoluteAndRelative;
-    function isAbsolute6(pattern) {
+    function isAbsolute7(pattern) {
       return path11.isAbsolute(pattern);
     }
-    exports.isAbsolute = isAbsolute6;
+    exports.isAbsolute = isAbsolute7;
   }
 });
 
@@ -259304,7 +259304,7 @@ var require_util9 = __commonJS({
         }
         path11 = url.path;
       }
-      var isAbsolute6 = exports.isAbsolute(path11);
+      var isAbsolute7 = exports.isAbsolute(path11);
       var parts = path11.split(/\/+/);
       for (var part, up = 0, i2 = parts.length - 1; i2 >= 0; i2--) {
         part = parts[i2];
@@ -259324,7 +259324,7 @@ var require_util9 = __commonJS({
       }
       path11 = parts.join("/");
       if (path11 === "") {
-        path11 = isAbsolute6 ? "/" : ".";
+        path11 = isAbsolute7 ? "/" : ".";
       }
       if (url) {
         url.path = path11;
@@ -259369,7 +259369,7 @@ var require_util9 = __commonJS({
     exports.isAbsolute = function(aPath) {
       return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
     };
-    function relative14(aRoot, aPath) {
+    function relative15(aRoot, aPath) {
       if (aRoot === "") {
         aRoot = ".";
       }
@@ -259388,7 +259388,7 @@ var require_util9 = __commonJS({
       }
       return Array(level + 1).join("../") + aPath.substr(aRoot.length + 1);
     }
-    exports.relative = relative14;
+    exports.relative = relative15;
     var supportsNullProto = (function() {
       var obj = /* @__PURE__ */ Object.create(null);
       return !("__proto__" in obj);
@@ -270819,11 +270819,11 @@ ${lanes.join("\n")}
           return toComponents2;
         }
         const components = toComponents2.slice(start2);
-        const relative14 = [];
+        const relative15 = [];
         for (; start2 < fromComponents.length; start2++) {
-          relative14.push("..");
+          relative15.push("..");
         }
-        return ["", ...relative14, ...components];
+        return ["", ...relative15, ...components];
       }
       function getRelativePathFromDirectory(fromDirectory, to, getCanonicalFileNameOrIgnoreCase) {
         Debug.assert(getRootLength(fromDirectory) > 0 === getRootLength(to) > 0, "Paths must either both be absolute or both be relative");
@@ -315366,9 +315366,9 @@ ${lanes.join("\n")}
               if (!startsWithDirectory(target, realPathDirectory, getCanonicalFileName)) {
                 return;
               }
-              const relative14 = getRelativePathFromDirectory(realPathDirectory, target, getCanonicalFileName);
+              const relative15 = getRelativePathFromDirectory(realPathDirectory, target, getCanonicalFileName);
               for (const symlinkDirectory of symlinkDirectories) {
-                const option = resolvePath(symlinkDirectory, relative14);
+                const option = resolvePath(symlinkDirectory, relative15);
                 const result2 = cb(option, target === referenceRedirect);
                 shouldFilterIgnoredPaths = true;
                 if (result2) return result2;
@@ -474939,15 +474939,15 @@ var require_path_browserify = __commonJS({
       normalize: function normalize2(path11) {
         assertPath(path11);
         if (path11.length === 0) return ".";
-        var isAbsolute6 = path11.charCodeAt(0) === 47;
+        var isAbsolute7 = path11.charCodeAt(0) === 47;
         var trailingSeparator = path11.charCodeAt(path11.length - 1) === 47;
-        path11 = normalizeStringPosix(path11, !isAbsolute6);
-        if (path11.length === 0 && !isAbsolute6) path11 = ".";
+        path11 = normalizeStringPosix(path11, !isAbsolute7);
+        if (path11.length === 0 && !isAbsolute7) path11 = ".";
         if (path11.length > 0 && trailingSeparator) path11 += "/";
-        if (isAbsolute6) return "/" + path11;
+        if (isAbsolute7) return "/" + path11;
         return path11;
       },
-      isAbsolute: function isAbsolute6(path11) {
+      isAbsolute: function isAbsolute7(path11) {
         assertPath(path11);
         return path11.length > 0 && path11.charCodeAt(0) === 47;
       },
@@ -474969,7 +474969,7 @@ var require_path_browserify = __commonJS({
           return ".";
         return posix.normalize(joined);
       },
-      relative: function relative14(from3, to) {
+      relative: function relative15(from3, to) {
         assertPath(from3);
         assertPath(to);
         if (from3 === to) return "";
@@ -475161,9 +475161,9 @@ var require_path_browserify = __commonJS({
         var ret = { root: "", dir: "", base: "", ext: "", name: "" };
         if (path11.length === 0) return ret;
         var code8 = path11.charCodeAt(0);
-        var isAbsolute6 = code8 === 47;
+        var isAbsolute7 = code8 === 47;
         var start2;
-        if (isAbsolute6) {
+        if (isAbsolute7) {
           ret.root = "/";
           start2 = 1;
         } else {
@@ -475199,11 +475199,11 @@ var require_path_browserify = __commonJS({
         preDotState === 0 || // The (right-most) trimmed path component is exactly '..'
         preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {
           if (end !== -1) {
-            if (startPart === 0 && isAbsolute6) ret.base = ret.name = path11.slice(1, end);
+            if (startPart === 0 && isAbsolute7) ret.base = ret.name = path11.slice(1, end);
             else ret.base = ret.name = path11.slice(startPart, end);
           }
         } else {
-          if (startPart === 0 && isAbsolute6) {
+          if (startPart === 0 && isAbsolute7) {
             ret.name = path11.slice(1, startDot);
             ret.base = path11.slice(1, end);
           } else {
@@ -475213,7 +475213,7 @@ var require_path_browserify = __commonJS({
           ret.ext = path11.slice(startDot, end);
         }
         if (startPart > 0) ret.dir = path11.slice(0, startPart - 1);
-        else if (isAbsolute6) ret.dir = "/";
+        else if (isAbsolute7) ret.dir = "/";
         return ret;
       },
       sep: "/",
@@ -477799,12 +477799,12 @@ var require_dist3 = __commonJS({
       return patterns.length > 0 ? buildCrawler(options2, patterns) : [];
     }
     async function glob3(globInput, options2) {
-      const [crawler, relative14] = getCrawler(globInput, options2);
-      return crawler ? formatPaths(await crawler.withPromise(), relative14) : [];
+      const [crawler, relative15] = getCrawler(globInput, options2);
+      return crawler ? formatPaths(await crawler.withPromise(), relative15) : [];
     }
     function globSync(globInput, options2) {
-      const [crawler, relative14] = getCrawler(globInput, options2);
-      return crawler ? formatPaths(crawler.sync(), relative14) : [];
+      const [crawler, relative15] = getCrawler(globInput, options2);
+      return crawler ? formatPaths(crawler.sync(), relative15) : [];
     }
     exports.convertPathToPattern = convertPathToPattern;
     exports.escapePath = escapePath;
@@ -593612,11 +593612,11 @@ function runProcess3(command, args, cwd4, timeoutMs) {
     child.stderr?.on("data", (chunk) => {
       stderr += chunk.toString();
     });
-    child.on("error", (err) => {
+    onChildError(child, (err) => {
       clearTimeout(timer);
       resolveProcess({ code: 127, stdout, stderr: stderr + String(err.message || err) });
     });
-    child.on("close", (code8) => {
+    onChildClose(child, (code8) => {
       clearTimeout(timer);
       resolveProcess({ code: code8, stdout, stderr });
     });
@@ -593626,6 +593626,7 @@ var MANIFEST_FILE, PATH_KEYS, MEDIA_PATH_RE, CreativeAudioFileTool;
 var init_telegram_creative_tools = __esm({
   "packages/cli/src/tui/telegram-creative-tools.ts"() {
     "use strict";
+    init_typed_node_events();
     init_dist5();
     MANIFEST_FILE = ".omnius-creative-manifest.json";
     PATH_KEYS = ["path", "file", "file_path", "filename", "filepath", "filePath"];
@@ -593842,8 +593843,8 @@ var init_vision_ingress = __esm({
 });
 
 // packages/cli/src/tui/telegram-bridge.ts
-import { mkdirSync as mkdirSync60, existsSync as existsSync105, unlinkSync as unlinkSync21, readFileSync as readFileSync86, writeFileSync as writeFileSync57 } from "node:fs";
-import { join as join120, resolve as resolve39, basename as basename22 } from "node:path";
+import { mkdirSync as mkdirSync60, existsSync as existsSync105, unlinkSync as unlinkSync21, statSync as statSync35, readFileSync as readFileSync86, writeFileSync as writeFileSync57 } from "node:fs";
+import { join as join120, resolve as resolve39, basename as basename22, relative as relative13, isAbsolute as isAbsolute6 } from "node:path";
 import { writeFile as writeFileAsync } from "node:fs/promises";
 import { createHash as createHash19, randomInt } from "node:crypto";
 function parseTelegramInteractionDecision(text, forcedRoute, options2 = {}) {
@@ -594407,6 +594408,10 @@ function telegramImageMime(media) {
   if (ext === ".tif" || ext === ".tiff") return "image/tiff";
   return "image/jpeg";
 }
+function isPathInside(root, path11) {
+  const rel = relative13(resolve39(root), resolve39(path11));
+  return rel === "" || Boolean(rel) && !rel.startsWith("..") && !isAbsolute6(rel);
+}
 function extractTelegramMentionedUsernames(message2, text) {
   const usernames = /* @__PURE__ */ new Set();
   const entities = [
@@ -596888,6 +596893,7 @@ Content-Type: ${contentType}\r
       async sendGeneratedArtifactsFromSubAgent(msg, subAgent, finalText, includeMentioned) {
         const root = subAgent.creativeWorkspaceRoot;
         if (!root) return;
+        const rootAbs = resolve39(root);
         const paths = new Set(subAgent.generatedArtifacts);
         for (const path11 of collectGeneratedArtifactPathsFromText(finalText, root)) {
           paths.add(path11);
@@ -596898,8 +596904,9 @@ Content-Type: ${contentType}\r
         );
         for (const path11 of paths) {
           const abs = resolve39(path11);
+          if (!isPathInside(rootAbs, abs)) continue;
           if (!includeMentioned && alreadySentByText.has(abs)) continue;
-          if (!existsSync105(abs)) continue;
+          if (!existsSync105(abs) || !statSync35(abs).isFile()) continue;
           const kind = classifyMedia(abs) ?? "document";
           await this.sendMediaReference(msg.chatId, {
             original: abs,
@@ -621377,7 +621384,7 @@ var init_clipboard_media = __esm({
 
 // packages/cli/src/tui/interactive.ts
 import { cwd } from "node:process";
-import { resolve as resolve44, join as join136, dirname as dirname38, extname as extname13, relative as relative13 } from "node:path";
+import { resolve as resolve44, join as join136, dirname as dirname38, extname as extname13, relative as relative14 } from "node:path";
 import { createRequire as createRequire7 } from "node:module";
 import { fileURLToPath as fileURLToPath18 } from "node:url";
 import {
@@ -622413,7 +622420,7 @@ async function renderAsciiPreviewForToolResult(toolName, output, repoRoot, write
     const { extractSavedImagePath: extractSavedImagePath2 } = await Promise.resolve().then(() => (init_image_ascii_preview(), image_ascii_preview_exports));
     const imagePath = extractSavedImagePath2(output, repoRoot);
     if (!imagePath) return;
-    const displayPath = relative13(repoRoot, imagePath).startsWith("..") ? imagePath : relative13(repoRoot, imagePath);
+    const displayPath = relative14(repoRoot, imagePath).startsWith("..") ? imagePath : relative14(repoRoot, imagePath);
     const title = toolName === "generate_image" ? "Generated image" : toolName === "screenshot" ? "Screenshot" : toolName === "camera_capture" ? "Camera frame" : "Image";
     await renderAsciiPreviewForImage(imagePath, displayPath, title, writer);
   } catch {
@@ -626414,7 +626421,7 @@ Log: ${nexusLogPath}`)
         const { pasteClipboardImageToFile: pasteClipboardImageToFile2 } = await Promise.resolve().then(() => (init_clipboard_media(), clipboard_media_exports));
         const pasted = pasteClipboardImageToFile2(repoRoot);
         if (!pasted) return { ok: false, message: "Clipboard does not contain a supported image or no clipboard reader is available." };
-        const relPath = relative13(repoRoot, pasted.path).startsWith("..") ? pasted.path : relative13(repoRoot, pasted.path);
+        const relPath = relative14(repoRoot, pasted.path).startsWith("..") ? pasted.path : relative14(repoRoot, pasted.path);
         const asciiContextPromise = renderAsciiPreviewForImage(
           pasted.path,
           relPath,

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.6",
+      "version": "1.0.8",
       "hasInstallScript": true,
       "license": "CC-BY-NC-4.0",
       "dependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",