openfox 2.0.115 → 2.0.116

package/dist/{chunk-3QQAIUZI.js → chunk-HYPXL7K5.js}

@@ -1,14 +1,14 @@
 import {
   runAgentTurn
-} from "./chunk-3NPLERPQ.js";
+} from "./chunk-U4HMAYAD.js";
 import {
   executeSubAgent,
   getToolRegistryForAgent
-} from "./chunk-JFK4GKQD.js";
+} from "./chunk-4HV3PDEK.js";
 import {
   TurnMetrics,
   createMessageStartEvent
-} from "./chunk-YX3OQBNX.js";
+} from "./chunk-EQ7DK2TG.js";
 import {
   checkAborted,
   decodeUtf8,
@@ -27,21 +27,24 @@ import {
   loadProjectWorkflows,
   loadUserWorkflows,
   normalizeWorkflowScope
-} from "./chunk-6RGACY4E.js";
+} from "./chunk-HZSKKJHQ.js";
 import {
   getCurrentContextWindowId,
   getEventStore
-} from "./chunk-ERNWAKUB.js";
+} from "./chunk-TGVDUK4N.js";
 import {
   createChatMessageMessage,
   createSessionRunningMessage
-} from "./chunk-I7FY2LTR.js";
+} from "./chunk-4GHLULHB.js";
 import {
   findAgentById,
   getRuntimeConfig,
   loadAllAgentsDefault,
   resolveDefaultAgentId
 } from "./chunk-LNNBLB6G.js";
+import {
+  LLMError
+} from "./chunk-LTYL6ZGH.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -50,11 +53,19 @@ import {
 } from "./chunk-VUQCQXXJ.js";
 import {
   createServerMessage
-} from "./chunk-X25Q6RAV.js";
+} from "./chunk-ZKLE2Q3I.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
 
+// src/server/runner/types.ts
+var DEFAULT_LLM_RETRY_POLICY = {
+  backoffMs: [1e3, 5e3, 3e4],
+  minIntervalMs: 6e4,
+  maxDurationMs: 30 * 6e4,
+  maxAttempts: 40
+};
+
 // src/server/workflows/types.ts
 var TERMINAL_DONE = "$done";
 var TERMINAL_BLOCKED = "$blocked";
@@ -336,6 +347,64 @@ function getCurrentWindowMessageOptions(sessionId) {
   const contextWindowId = getCurrentContextWindowId(sessionId);
   return contextWindowId ? { contextWindowId } : void 0;
 }
+function sleepWithSignal(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(new Error("Aborted"));
+      return;
+    }
+    const onAbort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      reject(new Error("Aborted"));
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function evaluateLLMRetry(failures, firstFailureAt, now, policy) {
+  if (now - firstFailureAt >= policy.maxDurationMs) return { retry: false };
+  if (failures >= policy.maxAttempts) return { retry: false };
+  const delayMs = failures <= policy.backoffMs.length ? policy.backoffMs[failures - 1] : policy.minIntervalMs;
+  return { retry: true, delayMs, attempt: failures + 1 };
+}
+function rollbackFailedAttempt(sessionId, turnStartSeq) {
+  const eventStore = getEventStore();
+  const fromSeq = Math.max(1, turnStartSeq);
+  const events = eventStore.getEvents(sessionId, fromSeq + 1);
+  const assistantIds = new Set(
+    events.filter((e) => e.type === "message.start" && e.data.role === "assistant").map((e) => e.data.messageId)
+  );
+  const tombstoneSeqs = events.filter((e) => {
+    switch (e.type) {
+      case "message.start":
+        return e.data.role === "assistant";
+      case "message.delta":
+      case "message.thinking":
+      case "message.done":
+      case "chat.done":
+        return assistantIds.has(e.data.messageId);
+      case "chat.error":
+      case "pattern.retry":
+      case "tool.preparing":
+      case "tool.call":
+      case "tool.output":
+      case "tool.result":
+        return true;
+      default:
+        return false;
+    }
+  }).map((e) => e.seq);
+  if (tombstoneSeqs.length > 0) {
+    eventStore.tombstoneEvents(sessionId, tombstoneSeqs);
+  }
+  if (assistantIds.size > 0) {
+    eventStore.append(sessionId, { type: "message.removed", data: { messageIds: [...assistantIds] } });
+  }
+}
 function buildReason(metadataEntries) {
   const entries = metadataEntries?.["criteria"] ?? [];
   const remaining = entries.filter((e) => e.status !== "passed");
@@ -353,6 +422,8 @@ async function executeWorkflow(workflow, options, subGroup) {
   let currentStepId = isResume ? resumeFromStep : subGroup ? activeSteps[0]?.id ?? workflow.entryStep : workflow.entryStep;
   let lastStepOutput = options.initialStepOutput ?? {};
   const firstEntryForStep = /* @__PURE__ */ new Set();
+  const stepLLMFailures = /* @__PURE__ */ new Map();
+  const stepLLMDeadlines = /* @__PURE__ */ new Map();
   const messagesBeforeWorkflow = sessionManager.requireSession(sessionId).messages.length;
   const activeStepIds = new Set(activeSteps.map((s) => s.id));
   const activeSubGroups = /* @__PURE__ */ new Set();
@@ -497,9 +568,10 @@ async function executeWorkflow(workflow, options, subGroup) {
         const agentStep = step;
         const STEP_DONE_PROMPT = "\n\nOnce you're done, call step_done()";
         const STEP_DONE_NUDGE = "You haven't called step_done(). If you haven't finished the task, continue and when you're finished call step_done()";
+        const isResumingCurrentStep = isResume && step.id === resumeFromStep && !resumeConsumed;
+        const isLLMFailedRetry = firstEntryForStep.has(step.id) && (stepLLMFailures.get(step.id) ?? 0) > 0;
         let promptContent;
         let nudgeContent;
-        const isResumingCurrentStep = isResume && step.id === resumeFromStep && !resumeConsumed;
         if (!firstEntryForStep.has(step.id) && agentStep.prompt && !isResumingCurrentStep) {
           const resolvedPrompt = resolveTemplate(agentStep.prompt, templateCtx);
           promptContent = resolvedPrompt + STEP_DONE_PROMPT;
@@ -528,7 +600,7 @@ async function executeWorkflow(workflow, options, subGroup) {
               })
             );
           }
-        } else if (firstEntryForStep.has(step.id) && !isResumingCurrentStep) {
+        } else if (firstEntryForStep.has(step.id) && !isResumingCurrentStep && !isLLMFailedRetry) {
           const parts = [];
           if (agentStep.nudgePrompt) {
             const resolvedNudge = resolveTemplate(agentStep.nudgePrompt, templateCtx);
@@ -538,32 +610,105 @@ async function executeWorkflow(workflow, options, subGroup) {
           nudgeContent = parts.join("\n\n");
           emitWorkflowMessage(eventStore, sessionId, nudgeContent, currentWindowMessageOptions, onMessage);
         }
+        const turnStartSeq = eventStore.getLatestSeq(sessionId) ?? 0;
+        let retryBlocked = null;
+        let blockedReason = "";
+        const retryPolicy = { ...DEFAULT_LLM_RETRY_POLICY, ...options.llmRetryPolicy };
+        const handleLLMFailure = async (errorMessage) => {
+          const failures = (stepLLMFailures.get(step.id) ?? 0) + 1;
+          stepLLMFailures.set(step.id, failures);
+          const firstFailureAt = stepLLMDeadlines.get(step.id) ?? Date.now();
+          stepLLMDeadlines.set(step.id, firstFailureAt);
+          const decision = evaluateLLMRetry(failures, firstFailureAt, Date.now(), retryPolicy);
+          if (decision.retry) {
+            rollbackFailedAttempt(sessionId, turnStartSeq);
+            firstEntryForStep.add(step.id);
+            resumeConsumed = true;
+            eventStore.append(sessionId, {
+              type: "workflow.step_retry",
+              data: { stepName: step.name, attempt: decision.attempt, retryInMs: decision.delayMs }
+            });
+            retryBlocked = "retry";
+            await sleepWithSignal(decision.delayMs, signal);
+            return;
+          }
+          rollbackFailedAttempt(sessionId, turnStartSeq);
+          sessionManager.setPhase(sessionId, "blocked");
+          if (executionId) {
+            sessionManager.blockWorkflow(
+              sessionId,
+              executionId,
+              workflow.metadata.id,
+              workflow.metadata.name,
+              workflow.metadata.color
+            );
+          }
+          blockedReason = `Step "${step.name}" failed after ${failures} attempts: ${errorMessage}`;
+          eventStore.append(sessionId, { type: "chat.error", data: { error: blockedReason, recoverable: false } });
+          retryBlocked = "blocked";
+        };
         const turnMetrics = new TurnMetrics();
         const es = getEventStore();
         const append = (event) => es.append(sessionId, event);
         let stepDoneCalled = false;
-        const agentResult = await runAgentTurn(
-          {
-            sessionManager,
-            sessionId,
-            llmClient,
-            ...options.statsIdentity ? { statsIdentity: options.statsIdentity } : {},
-            ...signal ? { signal } : {},
-            ...onMessage ? { onMessage } : {}
-          },
-          turnMetrics,
-          agentStep.agentId ?? resolveDefaultAgentId(),
-          append,
-          {
-            ...!firstEntryForStep.has(step.id) && !agentStep.prompt && !isResumingCurrentStep ? { injectKickoff: () => injectGenericKickoff(sessionId) } : {},
-            onToolExecuted: (toolCall, toolResult) => {
-              if (toolCall.name === "step_done" && toolResult.success) {
-                stepDoneCalled = true;
+        let agentResult;
+        try {
+          agentResult = await runAgentTurn(
+            {
+              sessionManager,
+              sessionId,
+              llmClient,
+              ...options.statsIdentity ? { statsIdentity: options.statsIdentity } : {},
+              ...signal ? { signal } : {},
+              ...onMessage ? { onMessage } : {},
+              suppressRecoverableErrors: true,
+              ...isLLMFailedRetry || isResumingCurrentStep ? { skipAgentReminder: true } : {}
+            },
+            turnMetrics,
+            agentStep.agentId ?? resolveDefaultAgentId(),
+            append,
+            {
+              ...!firstEntryForStep.has(step.id) && !agentStep.prompt && !isResumingCurrentStep ? { injectKickoff: () => injectGenericKickoff(sessionId) } : {},
+              onToolExecuted: (toolCall, toolResult) => {
+                if (toolCall.name === "step_done" && toolResult.success) {
+                  stepDoneCalled = true;
+                }
               }
             }
+          );
+        } catch (error) {
+          if (error instanceof Error && error.message === "Aborted") {
+            throw error;
           }
-        );
+          if (!(error instanceof LLMError)) {
+            throw error;
+          }
+          await handleLLMFailure(error.message);
+          if (retryBlocked === "retry") {
+            iterations -= 1;
+            continue;
+          }
+          return {
+            finalAction: { type: "BLOCKED", reason: blockedReason, blockedCriteria: [] },
+            iterations,
+            totalTime: (performance.now() - startTime) / 1e3
+          };
+        }
+        if (agentResult.failed) {
+          await handleLLMFailure(agentResult.failed.error);
+          if (retryBlocked === "retry") {
+            iterations -= 1;
+            continue;
+          }
+          return {
+            finalAction: { type: "BLOCKED", reason: blockedReason, blockedCriteria: [] },
+            iterations,
+            totalTime: (performance.now() - startTime) / 1e3
+          };
+        }
         firstEntryForStep.add(step.id);
+        stepLLMFailures.delete(step.id);
+        stepLLMDeadlines.delete(step.id);
         resumeConsumed = true;
         const agentReturnValue = agentResult.returnValueResult ?? "completed";
         lastStepOutput = {
@@ -894,9 +1039,9 @@ function launchWorkflowRun(deps, payload) {
     ...payload.stepOutput ? { initialStepOutput: payload.stepOutput } : {},
     ...payload.userChoice ? { userChoice: payload.userChoice } : {},
     ...payload.resumeFrom ? (() => {
-      const exec = sessionManager.getActiveWorkflowExecution(sessionId);
+      const exec = sessionManager.getLatestWorkflowExecution(sessionId);
       if (!exec) return {};
-      if (exec.status === "waiting") {
+      if (exec.status === "waiting" || exec.status === "blocked") {
         const resumed = sessionManager.resumeWorkflow(
           sessionId,
           exec.id,
@@ -954,4 +1099,4 @@ export {
   abortRunnerRun,
   launchWorkflowRun
 };
-//# sourceMappingURL=chunk-3QQAIUZI.js.map
+//# sourceMappingURL=chunk-HYPXL7K5.js.map

package/dist/{chunk-6RGACY4E.js → chunk-HZSKKJHQ.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-3PG65AXG.js";
 import {
   parseDefaultModelSelection
-} from "./chunk-BVVCRIVM.js";
+} from "./chunk-GZTMCTUS.js";
 import {
   getDatabase
 } from "./chunk-5PT4UMRR.js";
@@ -342,10 +342,11 @@ async function resolveSlashLaunch(configDir, projectDir, prompt) {
 }
 
 // src/server/db/tasks.ts
+import { randomBytes } from "crypto";
 function createTask(projectId, input) {
   const db = getDatabase();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto.randomUUID();
+  const id = randomBytes(8).toString("hex");
   const position = db.prepare(`SELECT COALESCE(MAX(position), -1) + 1 AS pos FROM tasks WHERE project_id = ? AND status = 'todo'`).get(projectId);
   db.prepare(
     `INSERT INTO tasks (id, project_id, prompt, attachments, status, run_state, position, version, agent_id, provider_id, model, created_at, updated_at)
@@ -1078,4 +1079,4 @@ export {
   isTaskGateError,
   createTasksService
 };
-//# sourceMappingURL=chunk-6RGACY4E.js.map
+//# sourceMappingURL=chunk-HZSKKJHQ.js.map

package/dist/{chunk-VWEATA7R.js → chunk-KLQEL2DZ.js}

@@ -396,6 +396,11 @@ function getActiveWorkflowExecution(sessionId) {
   ).get(sessionId);
   return row;
 }
+function getLatestWorkflowExecution(sessionId) {
+  const db = getDatabase();
+  const row = db.prepare(`SELECT * FROM workflow_executions WHERE session_id = ? ORDER BY updated_at DESC LIMIT 1`).get(sessionId);
+  return row;
+}
 function clearWorkflowExecution(executionId) {
   const db = getDatabase();
   const now = Date.now();
@@ -427,6 +432,7 @@ export {
   createWorkflowExecution,
   updateWorkflowExecutionStatus,
   getActiveWorkflowExecution,
+  getLatestWorkflowExecution,
   clearWorkflowExecution
 };
-//# sourceMappingURL=chunk-VWEATA7R.js.map
+//# sourceMappingURL=chunk-KLQEL2DZ.js.map

package/dist/{chunk-JGWHRYWG.js → chunk-MKWS7TQH.js}

@@ -1,6 +1,6 @@
 import {
   getModelProfile
-} from "./chunk-V4IE7HJY.js";
+} from "./chunk-W7VIYHPQ.js";
 import {
   getBackendCapabilities
 } from "./chunk-AZHWLLPP.js";
@@ -310,4 +310,4 @@ function createLLMClient(config, initialBackend = "unknown") {
 export {
   createLLMClient
 };
-//# sourceMappingURL=chunk-JGWHRYWG.js.map
+//# sourceMappingURL=chunk-MKWS7TQH.js.map

package/dist/{chunk-37QLXLML.js → chunk-QJWTBVJO.js}

@@ -3,7 +3,7 @@ import {
   isCancel,
   password,
   select
-} from "./chunk-4H427UBV.js";
+} from "./chunk-AGXJ5O63.js";
 
 // src/cli/main.ts
 import { parseArgs } from "util";
@@ -36,9 +36,9 @@ Options:
 `);
 }
 async function runNetworkSetup(mode) {
-  const { loadAuthConfig, saveAuthConfig, encryptPassword } = await import("./auth-YY5PJYSC.js");
-  const { saveGlobalConfig } = await import("./config-EAB3V4QK.js");
-  const { getAuthKeyPath } = await import("./paths-F27V3S4I.js");
+  const { loadAuthConfig, saveAuthConfig, encryptPassword } = await import("./auth-GTGIGX5X.js");
+  const { saveGlobalConfig } = await import("./config-TUCHLIWD.js");
+  const { getAuthKeyPath } = await import("./paths-BHR7CZ7I.js");
   const existingAuth = await loadAuthConfig(mode);
   if (existingAuth) {
     return;
@@ -104,8 +104,8 @@ async function runNetworkSetup(mode) {
   console.log("\u2713 Configuration saved!\n");
 }
 async function runConfig(mode) {
-  const { loadGlobalConfig, getActiveProvider, getDefaultModel } = await import("./config-EAB3V4QK.js");
-  const { getGlobalConfigPath } = await import("./paths-F27V3S4I.js");
+  const { loadGlobalConfig, getActiveProvider, getDefaultModel } = await import("./config-TUCHLIWD.js");
+  const { getGlobalConfigPath } = await import("./paths-BHR7CZ7I.js");
   const config = await loadGlobalConfig(mode);
   const configPath = getGlobalConfigPath(mode);
   const activeProvider = getActiveProvider(config);
@@ -163,13 +163,13 @@ async function runCli(options) {
       break;
     }
     case "provider": {
-      const { runProviderCommand } = await import("./provider-DL4ZWQY7.js");
+      const { runProviderCommand } = await import("./provider-Q7J4UFTS.js");
       const [, subcommand] = positionals;
       await runProviderCommand(mode, subcommand);
       break;
     }
     case "service": {
-      const { runServiceCommand } = await import("./service-CXWJQFOZ.js");
+      const { runServiceCommand } = await import("./service-WKABQHKL.js");
       const [, subcommand, ...serviceArgs] = positionals;
       if (values.follow) {
         serviceArgs.push("-f");
@@ -182,7 +182,7 @@ async function runCli(options) {
       break;
     }
     case "pwa": {
-      const { runPwaCommand, printPwaHelp } = await import("./pwa-XPHP3PY2.js");
+      const { runPwaCommand, printPwaHelp } = await import("./pwa-2GRFSXD7.js");
       const [, subcommand] = positionals;
       if (subcommand === "--help" || subcommand === "-h" || values.help) {
         printPwaHelp();
@@ -192,7 +192,7 @@ async function runCli(options) {
       break;
     }
     case "install": {
-      const { runInstall } = await import("./install-CPOPMCSE.js");
+      const { runInstall } = await import("./install-VA2F6X6Z.js");
       const code = await runInstall({ check: values.check === true });
       if (code !== 0) {
         process.exit(code);
@@ -200,7 +200,7 @@ async function runCli(options) {
       break;
     }
     case "update": {
-      const { runUpdate } = await import("./update-2REP2WB6.js");
+      const { runUpdate } = await import("./update-TDS6LP5N.js");
       const code = await runUpdate();
       if (code !== 0) {
         process.exit(code);
@@ -208,12 +208,12 @@ async function runCli(options) {
       break;
     }
     default: {
-      const { configFileExists } = await import("./config-EAB3V4QK.js");
+      const { configFileExists } = await import("./config-TUCHLIWD.js");
       const configExists = await configFileExists(mode);
       if (!configExists) {
         await runNetworkSetup(mode);
       }
-      const { runServe } = await import("./serve-DARV4NJG.js");
+      const { runServe } = await import("./serve-KR22J37W.js");
       const serveOptions = { mode };
       if (values.port) serveOptions.port = parseInt(values.port);
       if (values["no-browser"] === true) serveOptions.openBrowser = false;
@@ -225,4 +225,4 @@ async function runCli(options) {
 export {
   runCli
 };
-//# sourceMappingURL=chunk-37QLXLML.js.map
+//# sourceMappingURL=chunk-QJWTBVJO.js.map

package/dist/{chunk-6KPJLELC.js → chunk-QQVPUZQB.js}

@@ -1,9 +1,9 @@
 import {
   getEventStore
-} from "./chunk-ERNWAKUB.js";
+} from "./chunk-TGVDUK4N.js";
 import {
   createChatPathConfirmationMessage
-} from "./chunk-I7FY2LTR.js";
+} from "./chunk-4GHLULHB.js";
 import {
   getPlatformShell
 } from "./chunk-AESOGRFK.js";
@@ -140,6 +140,151 @@ function normalizeExtracted(path) {
 function isPlaceholderToken(str) {
   return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__") || str.includes("__COMMIT_MSG__");
 }
+var REGEX_TOOL_RE = /\b(?:sed|awk|gawk|mawk|perl|ruby|raku)\b/;
+var SHELL_TOKEN_END_RE = /[\s'"`|&;,<>()]/;
+function isRegexAddress(command, start, end, hasRegexTool, quote) {
+  const content = command.slice(start + 1, end);
+  if (looksLikeRegex(content)) return true;
+  if (command[end + 1] === ",") return true;
+  if (quote === null && command[start - 1] === "~" && (command[start - 2] === "=" || command[start - 2] === "!")) {
+    return true;
+  }
+  const action = command[end + 1];
+  if (action !== void 0 && /[a-zA-Z]/.test(action)) {
+    const after = command[end + 2];
+    const terminated = quote === null ? SHELL_TOKEN_END_RE.test(after ?? "") : after === quote;
+    if (terminated) return true;
+  }
+  return hasRegexTool && quote !== null && !/\s/.test(content);
+}
+function maskRegexAddresses(command) {
+  const work = command.replace(/(?:=|!)~\s+/g, " __SED__ ");
+  if (!work.includes("/")) return work;
+  const hasRegexTool = REGEX_TOOL_RE.test(work);
+  const out = [];
+  let quote = null;
+  let i = 0;
+  const n = work.length;
+  const maskSpan = (end) => {
+    if (out[out.length - 1] === "~" && (out[out.length - 2] === "=" || out[out.length - 2] === "!")) {
+      out.pop();
+      out.pop();
+    }
+    out.push(" __SED__ ");
+    i = end + 1;
+  };
+  while (i < n) {
+    const ch = work[i];
+    if (quote !== null) {
+      if (ch === "\\" && quote !== "'") {
+        out.push(ch, work[i + 1] ?? "");
+        i += 2;
+        continue;
+      }
+      if (ch === quote) {
+        out.push(ch);
+        quote = null;
+        i += 1;
+        continue;
+      }
+      if (ch === "/") {
+        let j = i + 1;
+        while (j < n) {
+          if (work[j] === "\\" && quote !== "'") {
+            j += 2;
+            continue;
+          }
+          if (work[j] === quote || work[j] === "/") break;
+          j += 1;
+        }
+        if (j < n && work[j] === "/" && isRegexAddress(work, i, j, hasRegexTool, quote)) {
+          maskSpan(j);
+          continue;
+        }
+      }
+      out.push(ch);
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      out.push(ch);
+      i += 1;
+      continue;
+    }
+    if (ch === "/") {
+      let j = i + 1;
+      while (j < n && work[j] !== "/" && !/[\s|&;<>()'"`]/.test(work[j])) j += 1;
+      if (j < n && work[j] === "/" && isRegexAddress(work, i, j, hasRegexTool, null)) {
+        maskSpan(j);
+        continue;
+      }
+    }
+    out.push(ch);
+    i += 1;
+  }
+  return out.join("");
+}
+function extractUnquotedTildePaths(command, home) {
+  const paths = [];
+  let quote = null;
+  let i = 0;
+  const n = command.length;
+  while (i < n) {
+    const ch = command[i];
+    if (quote !== null) {
+      if (ch === "\\" && quote !== "'") {
+        i += 2;
+        continue;
+      }
+      if (ch === quote) {
+        quote = null;
+        i += 1;
+        continue;
+      }
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      i += 1;
+      continue;
+    }
+    if (ch === "~" && (i === 0 || /[\s=(]/.test(command[i - 1]))) {
+      let j = i + 1;
+      while (j < n && !/[\s'"()]/.test(command[j])) j += 1;
+      const tail = command.slice(i + 1, j);
+      if (tail === "" || tail.startsWith("/")) {
+        const resolved = normalize(resolve(home + tail));
+        if (!isSafePath(resolved)) {
+          paths.push(resolved);
+        }
+      }
+      i = j;
+      continue;
+    }
+    i += 1;
+  }
+  return paths;
+}
+var TRAVERSAL_SEGMENT_RE = /(?:^|\/)\.\.(?:\/|$)/;
+function extractRelativeTraversals(command) {
+  const out = [];
+  const isTraversal = (token) => TRAVERSAL_SEGMENT_RE.test(token);
+  const quotedPattern = /["']([^"']+)["']/g;
+  let m;
+  while ((m = quotedPattern.exec(command)) !== null) {
+    const content = m[1];
+    if (!content || content.startsWith("/") || content.startsWith("~") || isWindowsAbsolutePath(content)) continue;
+    if (isTraversal(content)) out.push(content);
+  }
+  const bare = command.replace(/["'][^"']*["']/g, " ").split(/[\s|&;<>()]+/);
+  for (const token of bare) {
+    if (!token || token.startsWith("/") || token.startsWith("~")) continue;
+    if (isTraversal(token)) out.push(token);
+  }
+  return [...new Set(out)];
+}
 function extractAbsolutePathsFromCommand(command) {
   if (!command.trim()) {
     return [];
@@ -151,6 +296,7 @@ function extractAbsolutePathsFromCommand(command) {
   sanitized = sanitized.replace(/(?<!\w)s\/[^/]*\/[^/]*\/[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s\|[^|]*\|[^|]*\|[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s:[^:]*:[^:]*:[gip]*/g, " __SED__ ");
+  sanitized = maskRegexAddresses(sanitized);
   sanitized = sanitized.replace(
     /git\s+commit\b.*?(?:-(?:[a-zA-Z]*m)(?=\s)|--message)\s+(["'])(?:(?!\1).)*\1/g,
     (match2) => match2.replace(/\/[^\s"'|&;<>`()]+/g, " __COMMIT_MSG__ ")
@@ -163,17 +309,9 @@ function extractAbsolutePathsFromCommand(command) {
     }
   }
   sanitized = sanitized.replace(/file:\/\/[^\s'"]+/g, " __FILEURL__ ");
-  const tildePattern = /(?:^|[\s='"(])~(\/[^\s'"()]*)?(?=[\s'"()]|$)/g;
-  let match;
-  while ((match = tildePattern.exec(sanitized)) !== null) {
-    const pathPart = match[1] ?? "";
-    const fullPath = home + pathPart;
-    const resolved = normalize(resolve(fullPath));
-    if (!isSafePath(resolved)) {
-      paths.push(resolved);
-    }
-  }
+  paths.push(...extractUnquotedTildePaths(sanitized, home));
   const quotedPattern = /["']([^"']+)["']/g;
+  let match;
   while ((match = quotedPattern.exec(sanitized)) !== null) {
     const content = match[1];
     if (content.startsWith("/") && content.endsWith("/")) {
@@ -192,13 +330,6 @@ function extractAbsolutePathsFromCommand(command) {
       if (!isSafePath(resolved)) {
         paths.push(resolved);
       }
-    } else if (content.startsWith("~")) {
-      const pathPart = content.slice(1);
-      const fullPath = join(home, pathPart);
-      const resolved = normalize(resolve(fullPath));
-      if (!isSafePath(resolved)) {
-        paths.push(resolved);
-      }
     }
   }
   if (isWindows()) {
@@ -214,6 +345,10 @@ function extractAbsolutePathsFromCommand(command) {
   }
   if (posixShell) {
     const absolutePattern = /(?:^|[\s=(])(\/[^\s"'|&;<>`()]+)/g;
+    const rootPattern = /(?:^|[\s=(])\/(?=$|[\s'"`|&;,<()])/g;
+    if (rootPattern.test(sanitized)) {
+      paths.push("/");
+    }
     while ((match = absolutePattern.exec(sanitized)) !== null) {
       const candidate = match[1];
       if (isPlaceholderToken(candidate)) continue;
@@ -225,6 +360,7 @@ function extractAbsolutePathsFromCommand(command) {
       }
     }
   }
+  paths.push(...extractRelativeTraversals(sanitized));
   return [...new Set(paths)];
 }
 function extractSensitivePathsFromCommand(command) {
@@ -535,4 +671,4 @@ export {
   getConfirmationSessionId,
   getPendingConfirmationsBySession
 };
-//# sourceMappingURL=chunk-6KPJLELC.js.map
+//# sourceMappingURL=chunk-QQVPUZQB.js.map