openfox 2.0.135 → 2.0.137

package/dist/{chunk-F2MOHHXB.js → chunk-X4PVR6AW.js}

@@ -1,6 +1,6 @@
 import {
   resolveDefaultAgentId
-} from "./chunk-ORCQ3EXQ.js";
+} from "./chunk-BHVR2YS5.js";
 import {
   getDatabase
 } from "./chunk-JU757HVI.js";
@@ -484,4 +484,4 @@ export {
   getLatestWorkflowExecution,
   clearWorkflowExecution
 };
-//# sourceMappingURL=chunk-F2MOHHXB.js.map
+//# sourceMappingURL=chunk-X4PVR6AW.js.map

package/dist/chunk-XG3AUMPI.js

@@ -0,0 +1,72 @@
+// src/server/llm/schema-sanitizer.ts
+function sanitizeToolSchema(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) {
+    return { type: "object", properties: {} };
+  }
+  return cleanSchemaNode(schema);
+}
+function cleanSchemaNode(node) {
+  const result = {};
+  for (const [key, val] of Object.entries(node)) {
+    if (val === null || val === void 0) {
+      continue;
+    }
+    if (key === "$schema" || key === "$id" || key === "$vocabulary" || key === "$anchor" || key === "dependentRequired" || key === "dependentSchemas" || key === "unevaluatedProperties" || key === "unevaluatedItems" || key === "patternProperties" || key === "additionalProperties") {
+      continue;
+    }
+    if (key === "required" && Array.isArray(val)) {
+      result["required"] = val.map((item) => item === "properties" ? "props" : item);
+      continue;
+    }
+    if (key === "const") {
+      result["enum"] = [val];
+      continue;
+    }
+    if (key === "properties" && val && typeof val === "object" && !Array.isArray(val)) {
+      const sanitizedProps = {};
+      for (const [propKey, propVal] of Object.entries(val)) {
+        const targetKey = propKey === "properties" ? "props" : propKey;
+        if (typeof propVal === "string") {
+          sanitizedProps[targetKey] = propVal === "object" ? { type: "object", properties: {} } : { type: propVal };
+        } else if (propVal && typeof propVal === "object" && !Array.isArray(propVal)) {
+          sanitizedProps[targetKey] = cleanSchemaNode(propVal);
+        } else {
+          sanitizedProps[targetKey] = propVal;
+        }
+      }
+      result["properties"] = sanitizedProps;
+      continue;
+    }
+    if (key === "items") {
+      if (!val || typeof val !== "object" || Object.keys(val).length === 0) {
+        result["items"] = { type: "string" };
+      } else if (Array.isArray(val)) {
+        result["items"] = val.map(
+          (item) => item && typeof item === "object" ? cleanSchemaNode(item) : item
+        );
+      } else {
+        result["items"] = cleanSchemaNode(val);
+      }
+      continue;
+    }
+    if ((key === "anyOf" || key === "oneOf" || key === "allOf") && Array.isArray(val)) {
+      result[key] = val.map(
+        (item) => item && typeof item === "object" ? cleanSchemaNode(item) : item
+      );
+      continue;
+    }
+    result[key] = val;
+  }
+  if (result["type"] === "object" && !result["properties"]) {
+    result["properties"] = {};
+  }
+  if (result["type"] === "array" && (!result["items"] || typeof result["items"] === "object" && Object.keys(result["items"]).length === 0)) {
+    result["items"] = { type: "string" };
+  }
+  return result;
+}
+
+export {
+  sanitizeToolSchema
+};
+//# sourceMappingURL=chunk-XG3AUMPI.js.map

package/dist/{chunk-I5ODJKYM.js → chunk-XWWRZSK7.js}

@@ -1,12 +1,12 @@
 import {
   getEventStore
-} from "./chunk-QZOV4OVN.js";
+} from "./chunk-2OO46UAW.js";
 import {
   createChatPathConfirmationMessage
 } from "./chunk-AATMPL7S.js";
 import {
   getPlatformShell
-} from "./chunk-O3RCSKUH.js";
+} from "./chunk-MOYWDP73.js";
 
 // src/server/tools/path-security.ts
 import { realpath } from "fs/promises";
@@ -138,7 +138,7 @@ function normalizeExtracted(path) {
   return posix.normalize(path);
 }
 function isPlaceholderToken(str) {
-  return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__") || str.includes("__COMMIT_MSG__");
+  return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__") || str.includes("__COMMIT_MSG__") || str.includes("__PATTERN__");
 }
 var REGEX_TOOL_RE = /\b(?:sed|awk|gawk|mawk|perl|ruby|raku)\b/;
 var SHELL_TOKEN_END_RE = /[\s'"`|&;,<>()]/;
@@ -157,6 +157,159 @@ function isRegexAddress(command, start, end, hasRegexTool, quote) {
   }
   return hasRegexTool && quote !== null && !/\s/.test(content);
 }
+var SEARCH_TOOL_RE = /^(?:grep|egrep|fgrep|rg|ag|ack)$/;
+var SEARCH_OPTS_WITH_VALUE = /* @__PURE__ */ new Set([
+  "-e",
+  "--regexp",
+  "-f",
+  "--file",
+  "-m",
+  "--max-count",
+  "-A",
+  "--after-context",
+  "-B",
+  "--before-context",
+  "-C",
+  "--context",
+  "-d",
+  "--directories",
+  "-D",
+  "--devices",
+  "--include",
+  "--exclude",
+  "--exclude-dir",
+  "--binary-files",
+  "--color",
+  "--colour",
+  "--label",
+  "-g",
+  "--glob",
+  "-t",
+  "--type"
+]);
+var PATTERN_VALUE_OPTS = /* @__PURE__ */ new Set(["-e", "--regexp"]);
+var PATTERN_FILE_OPTS = /* @__PURE__ */ new Set(["-f", "--file"]);
+function tokenizeShell(command) {
+  const out = [];
+  const n = command.length;
+  let i = 0;
+  while (i < n) {
+    const ch = command[i];
+    if (/\s/.test(ch)) {
+      i += 1;
+      continue;
+    }
+    if (/[|&;()<>]/.test(ch)) {
+      let j = i + 1;
+      if (ch === "|" && command[j] === "|" || ch === "&" && command[j] === "&") j += 1;
+      out.push({ text: command.slice(i, j), start: i, end: j, isOperator: true });
+      i = j;
+      continue;
+    }
+    const start = i;
+    let quote = null;
+    while (i < n) {
+      const c = command[i];
+      if (quote !== null) {
+        if (c === "\\" && quote !== "'") {
+          i += 2;
+          continue;
+        }
+        if (c === quote) {
+          quote = null;
+          i += 1;
+          continue;
+        }
+        i += 1;
+        continue;
+      }
+      if (c === "'" || c === '"' || c === "`") {
+        quote = c;
+        i += 1;
+        continue;
+      }
+      if (/[\s|&;()<>]/.test(c)) break;
+      if (c === "\\") {
+        i += 2;
+        continue;
+      }
+      i += 1;
+    }
+    out.push({ text: command.slice(start, i), start, end: i, isOperator: false });
+  }
+  return out;
+}
+function commandBasename(token) {
+  const bare = token.replace(/^["'`]|["'`]$/g, "");
+  const slash = bare.lastIndexOf("/");
+  return slash >= 0 ? bare.slice(slash + 1) : bare;
+}
+function maskSearchToolPatterns(command) {
+  if (!command.includes("/")) return command;
+  const tokens = tokenizeShell(command);
+  const spans = [];
+  let atCommandStart = true;
+  let i = 0;
+  while (i < tokens.length) {
+    const tok = tokens[i];
+    if (tok.isOperator) {
+      atCommandStart = true;
+      i += 1;
+      continue;
+    }
+    if (!atCommandStart || !SEARCH_TOOL_RE.test(commandBasename(tok.text))) {
+      atCommandStart = atCommandStart && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tok.text);
+      i += 1;
+      continue;
+    }
+    let patternSupplied = false;
+    let patternSpan = null;
+    let j = i + 1;
+    while (j < tokens.length && !tokens[j].isOperator) {
+      const arg = tokens[j];
+      if (arg.text.startsWith("-") && arg.text !== "-" && arg.text !== "--") {
+        const eq = arg.text.indexOf("=");
+        if (eq > 0) {
+          const name = arg.text.slice(0, eq);
+          if (PATTERN_VALUE_OPTS.has(name)) {
+            patternSupplied = true;
+            spans.push([arg.start + eq + 1, arg.end]);
+          } else if (PATTERN_FILE_OPTS.has(name)) {
+            patternSupplied = true;
+          }
+          j += 1;
+          continue;
+        }
+        if (SEARCH_OPTS_WITH_VALUE.has(arg.text)) {
+          const value = tokens[j + 1];
+          if (value && !value.isOperator) {
+            if (PATTERN_VALUE_OPTS.has(arg.text)) {
+              patternSupplied = true;
+              spans.push([value.start, value.end]);
+            } else if (PATTERN_FILE_OPTS.has(arg.text)) {
+              patternSupplied = true;
+            }
+            j += 2;
+            continue;
+          }
+        }
+        j += 1;
+        continue;
+      }
+      if (!patternSupplied) patternSpan = [arg.start, arg.end];
+      break;
+    }
+    if (patternSpan) spans.push(patternSpan);
+    atCommandStart = false;
+    i = j;
+  }
+  if (spans.length === 0) return command;
+  let out = command;
+  for (const [start, end] of spans.sort((a, b) => b[0] - a[0])) {
+    out = `${out.slice(0, start)} __PATTERN__ ${out.slice(end)}`;
+  }
+  return out;
+}
 function maskRegexAddresses(command) {
   const work = command.replace(/(?:=|!)~\s+/g, " __SED__ ");
   if (!work.includes("/")) return work;
@@ -387,6 +540,7 @@ function maskCommandForPathScan(command) {
   sanitized = sanitized.replace(/(?<!\w)s\/[^/]*\/[^/]*\/[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s\|[^|]*\|[^|]*\|[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s:[^:]*:[^:]*:[gip]*/g, " __SED__ ");
+  sanitized = maskSearchToolPatterns(sanitized);
   sanitized = maskRegexAddresses(sanitized);
   sanitized = sanitized.replace(
     /git\s+commit\b.*?(?:-(?:[a-zA-Z]*m)(?=\s)|--message)\s+(["'])(?:(?!\1).)*\1/g,
@@ -445,7 +599,7 @@ function extractAbsolutePathsFromCommand(command) {
     }
   }
   if (posixShell) {
-    const absolutePattern = /(?:^|[\s=(])(\/[^\s"'|&;<>`()]+)/g;
+    const absolutePattern = /(?:^|([\s=('"]))(\/[^\s"'|&;<>`()]+)/g;
     const rootPattern = /(?:^|[\s=(])\/(?=$|[\s'"`|&;,<()])/g;
     let isRoot = false;
     for (const match2 of scanCommand.matchAll(rootPattern)) {
@@ -460,7 +614,9 @@ function extractAbsolutePathsFromCommand(command) {
       paths.push("/");
     }
     while ((match = absolutePattern.exec(scanCommand)) !== null) {
-      const candidate = match[1];
+      const opener = match[1] ?? "";
+      const candidate = match[2];
+      if ((opener === "'" || opener === '"') && candidate.endsWith("/")) continue;
       if (isPlaceholderToken(candidate)) continue;
       if (looksLikeRegex(candidate)) continue;
       const resolved = normalizeExtracted(candidate);
@@ -782,4 +938,4 @@ export {
   getConfirmationSessionId,
   getPendingConfirmationsBySession
 };
-//# sourceMappingURL=chunk-I5ODJKYM.js.map
+//# sourceMappingURL=chunk-XWWRZSK7.js.map

package/dist/{chunk-GP3CLMPQ.js → chunk-ZJ2IHOVN.js}

@@ -2,55 +2,55 @@ import {
   generateSessionNameForSession,
   getSessionMessageCount,
   needsNameGeneration
-} from "./chunk-NFEZATSN.js";
+} from "./chunk-FIQPKLDY.js";
 import {
   launchWorkflowRun
-} from "./chunk-5H5NRWHA.js";
+} from "./chunk-LQPAM55V.js";
 import {
   runChatTurn
-} from "./chunk-4R5GV7RW.js";
+} from "./chunk-JIS6C6PA.js";
+import {
+  applyDynamicContext,
+  computeSessionHash,
+  computeUnifiedDiff
+} from "./chunk-6TQNTFJW.js";
 import {
   devServerManager
-} from "./chunk-ESZQTFQP.js";
+} from "./chunk-ZQENKB7X.js";
 import {
   gitSpawnEnv
 } from "./chunk-J7GAZGZT.js";
 import {
   serverT
-} from "./chunk-OZWHRBDY.js";
+} from "./chunk-4SBVW4UH.js";
 import {
   appendCompactionPrompt
-} from "./chunk-UKIUQAQZ.js";
+} from "./chunk-U7XCK7WL.js";
 import {
   hasRecentLLMFailure,
   interruptLLMRetryWait
-} from "./chunk-7ET46SNE.js";
+} from "./chunk-HEYU7FAY.js";
 import {
   onProcessEvent
-} from "./chunk-5UMXFLET.js";
+} from "./chunk-SAGDTQXD.js";
 import {
   killProcessTree
 } from "./chunk-I72ACQ6R.js";
-import {
-  applyDynamicContext,
-  computeSessionHash,
-  computeUnifiedDiff
-} from "./chunk-VHLD6PCZ.js";
 import {
   getPendingQuestionsForSession,
   provideAnswer
-} from "./chunk-JURM3RPZ.js";
+} from "./chunk-V5AC2TV7.js";
 import {
   combineEventsWithSnapshot,
   getEventStore
-} from "./chunk-QZOV4OVN.js";
+} from "./chunk-2OO46UAW.js";
 import {
   buildMessagesFromStoredEvents,
   foldPendingConfirmations
-} from "./chunk-MEEUXRFL.js";
+} from "./chunk-MMGHIPBU.js";
 import {
   getRuntimeConfig
-} from "./chunk-ORCQ3EXQ.js";
+} from "./chunk-BHVR2YS5.js";
 import {
   createChatErrorMessage,
   createChatMessageMessage,
@@ -68,10 +68,10 @@ import {
 } from "./chunk-AATMPL7S.js";
 import {
   getPlatformShell
-} from "./chunk-O3RCSKUH.js";
+} from "./chunk-MOYWDP73.js";
 import {
   getMaxVisibleItems
-} from "./chunk-CTWZPN7G.js";
+} from "./chunk-QUAEH3MP.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -1344,8 +1344,8 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
       }
       const session = sessionManager.requireSession(sessionId);
       try {
-        const { buildCachedPrompt, computePreviewToolDiff } = await import("./dynamic-context-LKC6JYLQ.js");
-        const allAgents = await import("./registry-BEIR7Y5G.js");
+        const { buildCachedPrompt, computePreviewToolDiff } = await import("./dynamic-context-HL4RGNHK.js");
+        const allAgents = await import("./registry-FMDMGIUB.js");
         const agentDef = allAgents.findAgentById(session.mode, await allAgents.loadAllAgentsDefault()) ?? allAgents.findAgentById("planner", await allAgents.loadAllAgentsDefault());
         const modelName = session.providerModel ?? _providerManager?.getCurrentModel();
         const {
@@ -1356,7 +1356,7 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
         const oldCached = sessionManager.getCachedPrompt(sessionId);
         const oldPrompt = oldCached?.systemPrompt;
         const diff = oldPrompt ? computeUnifiedDiff(oldPrompt, newPrompt) : [];
-        const { getToolRegistryForAgent } = await import("./tools-E63MOJBO.js");
+        const { getToolRegistryForAgent } = await import("./tools-WLJJ3ILO.js");
         const unfilteredTools = getToolRegistryForAgent(agentDef).definitions;
         const toolDiff = computePreviewToolDiff(oldCached?.tools, unfilteredTools, newTools);
         send({
@@ -1729,4 +1729,4 @@ export {
   signalMcpReady,
   createWebSocketServer
 };
-//# sourceMappingURL=chunk-GP3CLMPQ.js.map
+//# sourceMappingURL=chunk-ZJ2IHOVN.js.map