openhorse 0.2.21 → 0.2.23

package/dist/tools/bash_security.js

@@ -195,15 +195,24 @@ function isReadOnlyCommand(cmd) {
     // Check if command starts with a read-only command
     const baseCmd = trimmedCmd.split(' ')[0];
     if (exports.READ_ONLY_COMMANDS.includes(baseCmd)) {
-        // Additional checks for commands that might modify files
+        // Additional checks for commands that might modify files or execute code.
         if (baseCmd === 'sed' && trimmedCmd.includes('-i')) {
             return false; // sed -i modifies files
         }
-        if (baseCmd === 'curl' && trimmedCmd.includes('>')) {
-            return false; // curl with output redirect writes file
+        if (baseCmd === 'curl' && (trimmedCmd.includes('>') || /(^|\s)-o\b/.test(trimmedCmd) || /(^|\s)--output\b/.test(trimmedCmd))) {
+            return false; // curl with file output (-o/--output/>) writes a file
         }
-        if (baseCmd === 'wget' && /-O|--output-document/.test(trimmedCmd)) {
-            return false; // wget -O writes file
+        if (baseCmd === 'wget' && (trimmedCmd.includes('>') || /(^|\s)-O\b/.test(trimmedCmd) || /(^|\s)--output-document\b/.test(trimmedCmd))) {
+            return false; // wget with file output writes a file
+        }
+        if (baseCmd === 'find' && /(^|\s)-(exec|execdir|ok|okdir|delete)\b/.test(trimmedCmd)) {
+            return false; // find -exec/-ok runs arbitrary commands; -delete removes files
+        }
+        if (baseCmd === 'awk' && (/\bsystem\s*\(/.test(trimmedCmd) || /\bgetline\b/.test(trimmedCmd) || trimmedCmd.includes('>'))) {
+            return false; // awk can exec (system/getline) or write files (>)
+        }
+        if (baseCmd === 'sort' && (/(^|\s)-o\b/.test(trimmedCmd) || trimmedCmd.includes('>'))) {
+            return false; // sort -o / redirect writes a file
         }
         return true;
     }

package/dist/tools/bash_security.js.map

@@ -1 +1 @@
-{"version":3,"file":"bash_security.js","sourceRoot":"","sources":["../../src/tools/bash_security.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAmMH,8CAmCC;AAKD,kDAGC;AAMD,sDAOC;AAKD,4DAOC;AAKD,sDA+CC;AAuBD,wCAkBC;AAlWD;;;GAGG;AACU,QAAA,kBAAkB,GAAG;IAChC,uBAAuB;IACvB,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IAET,iBAAiB;IACjB,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK,EAAG,uBAAuB;IAC/B,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,KAAK;IAEL,sBAAsB;IACtB,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY,EAAG,mBAAmB;IAClC,SAAS,EAAM,eAAe;IAC9B,YAAY;IACZ,eAAe;IACf,cAAc;IACd,aAAa;IAEb,0BAA0B;IAC1B,UAAU;IACV,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IAEX,sBAAsB;IACtB,gBAAgB;IAChB,SAAS;IACT,eAAe;IACf,QAAQ;IACR,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAEhB,cAAc;IACd,MAAM;IACN,UAAU;IACV,KAAK;IACL,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,IAAI;IACJ,QAAQ;IACR,QAAQ;IAER,2BAA2B;IAC3B,MAAM;IACN,MAAM,EAAI,2BAA2B;IACrC,MAAM,EAAI,2BAA2B;IACrC,UAAU;IACV,KAAK;IACL,MAAM;IACN,IAAI;IACJ,UAAU;IACV,SAAS;IAET,eAAe;IACf,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IAEN,sDAAsD;IACtD,IAAI;IACJ,IAAI;IAEJ,wBAAwB;IACxB,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,IAAI;CACL,CAAC;AAEF;;;;GAIG;AACU,QAAA,2BAA2B,GAAG;IACzC,6BAA6B;IAC7B,+BAA+B;IAC/B,+BAA+B;IAC/B,4DAA4D;IAC5D,2CAA2C;IAC3C,2CAA2C;CAC5C,CAAC;AAEF;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC5E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qDAAqD,EAAE;IAC3F,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAEzF,kBAAkB;IAClB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,6CAA6C,EAAE;IACnF,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAEpE,aAAa;IACb,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAE3D,sBAAsB;IACtB,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE;IAClF,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,4CAA4C,EAAE;IAE/E,kBAAkB;IAClB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,+BAA+B,EAAE;IAExE,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACzE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAEvE,oBAAoB;IACpB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC1E,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,0CAA0C,EAAE;CAChG,CAAC;AAEF;;GAEG;AACU,QAAA,gCAAgC,GAAG;IAC9C,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,uBAAuB;IACvB,gBAAgB;IAChB,cAAc;IACd,eAAe;CAChB,CAAC;AAEF;;GAEG;AACH,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,4BAA4B;IAC5B,IAAI,0BAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,0BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,yDAAyD;QACzD,IAAI,OAAO,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,wBAAwB;QACxC,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,wCAAwC;QACxD,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC,CAAC,sBAAsB;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,0BAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,mCAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,0BAAkB,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,GAAW;IAClD,KAAK,MAAM,OAAO,IAAI,wCAAgC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAK/C,6BAA6B;IAC7B,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,+BAA+B;QACvC,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAYD;;GAEG;AACU,QAAA,uBAAuB,GAAmB;IACrD,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAuB;IACjE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;QAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5D,OAAO,eAAe,WAAW,IAAI,SAAS,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACzF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,0CAA0C;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3D,OAAO,SAAS,WAAW,0HAA0H,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACrL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"bash_security.js","sourceRoot":"","sources":["../../src/tools/bash_security.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAmMH,8CA4CC;AAKD,kDAGC;AAMD,sDAOC;AAKD,4DAOC;AAKD,sDA+CC;AAuBD,wCAkBC;AA3WD;;;GAGG;AACU,QAAA,kBAAkB,GAAG;IAChC,uBAAuB;IACvB,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IAET,iBAAiB;IACjB,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK,EAAG,uBAAuB;IAC/B,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,KAAK;IAEL,sBAAsB;IACtB,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY,EAAG,mBAAmB;IAClC,SAAS,EAAM,eAAe;IAC9B,YAAY;IACZ,eAAe;IACf,cAAc;IACd,aAAa;IAEb,0BAA0B;IAC1B,UAAU;IACV,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IAEX,sBAAsB;IACtB,gBAAgB;IAChB,SAAS;IACT,eAAe;IACf,QAAQ;IACR,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAEhB,cAAc;IACd,MAAM;IACN,UAAU;IACV,KAAK;IACL,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,IAAI;IACJ,QAAQ;IACR,QAAQ;IAER,2BAA2B;IAC3B,MAAM;IACN,MAAM,EAAI,2BAA2B;IACrC,MAAM,EAAI,2BAA2B;IACrC,UAAU;IACV,KAAK;IACL,MAAM;IACN,IAAI;IACJ,UAAU;IACV,SAAS;IAET,eAAe;IACf,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IAEN,sDAAsD;IACtD,IAAI;IACJ,IAAI;IAEJ,wBAAwB;IACxB,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,IAAI;CACL,CAAC;AAEF;;;;GAIG;AACU,QAAA,2BAA2B,GAAG;IACzC,6BAA6B;IAC7B,+BAA+B;IAC/B,+BAA+B;IAC/B,4DAA4D;IAC5D,2CAA2C;IAC3C,2CAA2C;CAC5C,CAAC;AAEF;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC5E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qDAAqD,EAAE;IAC3F,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAEzF,kBAAkB;IAClB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,6CAA6C,EAAE;IACnF,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAEpE,aAAa;IACb,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAE3D,sBAAsB;IACtB,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE;IAClF,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,4CAA4C,EAAE;IAE/E,kBAAkB;IAClB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,+BAA+B,EAAE;IAExE,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACzE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAEvE,oBAAoB;IACpB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC1E,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,0CAA0C,EAAE;CAChG,CAAC;AAEF;;GAEG;AACU,QAAA,gCAAgC,GAAG;IAC9C,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,uBAAuB;IACvB,gBAAgB;IAChB,cAAc;IACd,eAAe;CAChB,CAAC;AAEF;;GAEG;AACH,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,4BAA4B;IAC5B,IAAI,0BAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,0BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,0EAA0E;QAC1E,IAAI,OAAO,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,wBAAwB;QACxC,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC7H,OAAO,KAAK,CAAC,CAAC,sDAAsD;QACtE,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACtI,OAAO,KAAK,CAAC,CAAC,sCAAsC;QACtD,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,yCAAyC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACrF,OAAO,KAAK,CAAC,CAAC,gEAAgE;QAChF,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1H,OAAO,KAAK,CAAC,CAAC,mDAAmD;QACnE,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC,CAAC,mCAAmC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,0BAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,mCAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,0BAAkB,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,GAAW;IAClD,KAAK,MAAM,OAAO,IAAI,wCAAgC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAK/C,6BAA6B;IAC7B,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,+BAA+B;QACvC,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAYD;;GAEG;AACU,QAAA,uBAAuB,GAAmB;IACrD,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAuB;IACjE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;QAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5D,OAAO,eAAe,WAAW,IAAI,SAAS,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACzF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,0CAA0C;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3D,OAAO,SAAS,WAAW,0HAA0H,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACrL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAAa,KAAK,aAAa,EAAmB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6DrG,eAAO,MAAM,KAAK,EAAE,aAAa,EA2uBhC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAgWD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAynBD;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,MAAM,CAAC,CAmDjB;AAUD;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAGD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gCAAgC,EAChC,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,KAAK,cAAc,EACnB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH,OAAO,EAEL,KAAK,aAAa,EAElB,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAsD3B,eAAO,MAAM,KAAK,EAAE,aAAa,EAmxBhC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAEjD;AAqZD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAmrBD;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,MAAM,CAAC,CAmDjB;AAcD;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAGD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gCAAgC,EAChC,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,KAAK,cAAc,EACnB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}

package/dist/tools/index.js

@@ -75,7 +75,7 @@ exports.TOOLS = [
     // File tools
     (0, tool_1.buildTool)({
         name: 'read_file',
-        description: '读取文件的全部内容。返回文件内容字符串。',
+        description: '读取文件内容，支持从指定行开始分页。返回文件内容字符串。',
         parameters: {
             type: 'object',
             properties: {
@@ -87,6 +87,10 @@ exports.TOOLS = [
                     type: 'number',
                     description: '最大读取行数（可选，默认 500 行）',
                 },
+                offset: {
+                    type: 'number',
+                    description: '开始读取的行号（可选，1-based，默认第 1 行）',
+                },
             },
             required: ['path'],
         },
@@ -96,11 +100,19 @@ exports.TOOLS = [
             if (!path || typeof path !== 'string') {
                 return { success: false, output: '', error: 'read_file requires a path parameter' };
             }
-            return readFileSync_(path, args.maxLines, context.cwd);
+            const maxLines = readPositiveInteger(args.maxLines, 'maxLines', 500);
+            if (typeof maxLines === 'string') {
+                return { success: false, output: '', error: maxLines };
+            }
+            const offset = readPositiveInteger(args.offset, 'offset', 1);
+            if (typeof offset === 'string') {
+                return { success: false, output: '', error: offset };
+            }
+            return readFileSync_(path, maxLines, offset, context.cwd);
         },
         isReadOnly: () => true,
         isConcurrencySafe: () => true,
-        userFacingName: (args) => `Read ${args.path}`,
+        userFacingName: args => `Read ${args.path}`,
         getSummary: (args, result) => {
             const path = args.path;
             if (!result.success)
@@ -144,7 +156,7 @@ exports.TOOLS = [
             // Destructive operation - ask for confirmation in default mode
             return { behavior: 'ask', reason: 'Write operation may modify existing files' };
         },
-        userFacingName: (args) => `Write ${args.path}`,
+        userFacingName: args => `Write ${args.path}`,
         getSummary: (args, result) => {
             const path = args.path;
             if (!result.success)
@@ -180,7 +192,7 @@ exports.TOOLS = [
         },
         isReadOnly: () => true,
         isConcurrencySafe: () => true,
-        userFacingName: (args) => `List ${args.path}`,
+        userFacingName: args => `List ${args.path}`,
         getSummary: (args, result) => {
             const path = args.path;
             if (!result.success)
@@ -223,7 +235,7 @@ exports.TOOLS = [
             // Issue #32 #3.2: 传递 abortSignal
             return execCommand_(command, args.cwd, args.timeout, args.maxOutput, context.abortSignal, context.cwd);
         },
-        isDestructive: (args) => {
+        isDestructive: args => {
             const cmd = args.command || '';
             return /(rm\s+-rf|mkfs|dd\s)/.test(cmd);
         },
@@ -232,7 +244,10 @@ exports.TOOLS = [
             // Use the bash_security module for comprehensive checks
             const security = (0, bash_security_1.assessCommandSecurity)(cmd);
             if (security.level === 'blocked') {
-                return { behavior: 'deny', reason: security.reason || `Command blocked by safety policy: ${cmd.slice(0, 50)}` };
+                return {
+                    behavior: 'deny',
+                    reason: security.reason || `Command blocked by safety policy: ${cmd.slice(0, 50)}`,
+                };
             }
             if (security.level === 'safe' && security.isReadOnly) {
                 return { behavior: 'allow' };
@@ -243,15 +258,15 @@ exports.TOOLS = [
             // Default: ask for confirmation
             return { behavior: 'ask', reason: 'Command requires confirmation' };
         },
-        isReadOnly: (args) => {
+        isReadOnly: args => {
             const cmd = args.command || '';
             return (0, bash_security_1.isReadOnlyCommand)(cmd);
         },
-        isConcurrencySafe: (args) => {
+        isConcurrencySafe: args => {
             const cmd = args.command || '';
             return (0, bash_security_1.isReadOnlyCommand)(cmd);
         },
-        userFacingName: (args) => `Exec ${compactOneLine(args.command || '', 80)}`,
+        userFacingName: args => `Exec ${compactOneLine(args.command || '', 80)}`,
         getSummary: (args, result) => {
             const command = args.command || '';
             const commandSummary = command ? `\n  $ ${compactOneLine(command, 160)}` : '';
@@ -327,7 +342,7 @@ exports.TOOLS = [
         checkPermissions: (_args, _context) => {
             return { behavior: 'ask', reason: 'Edit operation modifies file contents' };
         },
-        userFacingName: (args) => `Edit ${args.path}`,
+        userFacingName: args => `Edit ${args.path}`,
         getSummary: (args, result) => {
             const path = args.path;
             if (!result.success)
@@ -363,7 +378,7 @@ exports.TOOLS = [
         },
         isReadOnly: () => true,
         isConcurrencySafe: () => true,
-        userFacingName: (args) => `Glob ${args.pattern}`,
+        userFacingName: args => `Glob ${args.pattern}`,
         getSummary: (args, result) => {
             const pattern = args.pattern;
             if (!result.success)
@@ -407,7 +422,7 @@ exports.TOOLS = [
         },
         isReadOnly: () => true,
         isConcurrencySafe: () => true,
-        userFacingName: (args) => `Grep ${args.pattern}`,
+        userFacingName: args => `Grep ${args.pattern}`,
         getSummary: (args, result) => {
             const pattern = args.pattern;
             if (!result.success)
@@ -445,7 +460,7 @@ exports.TOOLS = [
         execute: async (args, context) => executeBatchRead(args, context),
         isReadOnly: () => true,
         isConcurrencySafe: () => true,
-        userFacingName: (args) => {
+        userFacingName: args => {
             const count = Array.isArray(args.steps) ? args.steps.length : 0;
             return `Batch read ${count} steps`;
         },
@@ -492,7 +507,11 @@ exports.TOOLS = [
                 return { success: false, output: '', error: 'memory_save requires a name parameter' };
             }
             if (!type || !['user', 'feedback', 'project', 'reference'].includes(type)) {
-                return { success: false, output: '', error: 'memory_save requires a valid type: user, feedback, project, or reference' };
+                return {
+                    success: false,
+                    output: '',
+                    error: 'memory_save requires a valid type: user, feedback, project, or reference',
+                };
             }
             if (!content || typeof content !== 'string') {
                 return { success: false, output: '', error: 'memory_save requires a content parameter' };
@@ -521,7 +540,7 @@ exports.TOOLS = [
             }
         },
         isReadOnly: () => false,
-        userFacingName: (args) => `Memory save ${args.name}`,
+        userFacingName: args => `Memory save ${args.name}`,
         getSummary: (args, result) => {
             const name = args.name;
             const type = args.type;
@@ -609,7 +628,7 @@ exports.TOOLS = [
             }
         },
         isReadOnly: () => true,
-        userFacingName: (args) => `Memory recall ${args.query || 'all'}`,
+        userFacingName: args => `Memory recall ${args.query || 'all'}`,
         getSummary: (args, result) => {
             const query = args.query || 'all';
             if (!result.success)
@@ -661,7 +680,7 @@ exports.TOOLS = [
             }
         },
         isReadOnly: () => false,
-        userFacingName: (args) => `Memory forget ${args.name}`,
+        userFacingName: args => `Memory forget ${args.name}`,
         getSummary: (args, result) => {
             const name = args.name;
             if (!result.success)
@@ -756,7 +775,7 @@ exports.TOOLS = [
             }
         },
         isReadOnly: () => true,
-        userFacingName: (args) => `History search ${args.query}`,
+        userFacingName: args => `History search ${args.query}`,
         getSummary: (args, result) => {
             const query = args.query;
             if (!result.success)
@@ -808,21 +827,43 @@ function normalizeToolPath(input) {
             return decodeURIComponent(new URL(value).pathname);
         }
         catch {
-            value = value.replace(/^file:\/\//u, '');
+            return value.replace(/^file:\/\//u, '');
         }
     }
-    try {
-        return decodeURIComponent(value);
-    }
-    catch {
-        return value;
-    }
+    // Plain filesystem paths are not URLs: do NOT percent-decode them, or a
+    // literal filename like "lit%41.txt" is silently rewritten to "litA.txt".
+    return value;
 }
 /** Resolve tool path parameters relative to the current tool cwd. */
 function safePath(input, cwd = process.cwd()) {
     return (0, path_1.resolve)(cwd, normalizeToolPath(input));
 }
-async function readFileSync_(path, maxLines, cwd) {
+/**
+ * Truncate text to at most maxBytes UTF-8 bytes, cutting on a character
+ * boundary (never inside a multi-byte sequence or surrogate pair). Returns the
+ * truncated text and the byte length it was cut at. String.slice counts UTF-16
+ * code units, not bytes, so it is wrong for enforcing a byte budget on CJK or
+ * emoji content and can split a surrogate pair.
+ */
+function truncateToBytes(text, maxBytes) {
+    const buf = Buffer.from(text, 'utf-8');
+    if (buf.length <= maxBytes)
+        return { text, bytes: buf.length };
+    let cut = maxBytes;
+    // Walk back past UTF-8 continuation bytes (0x80-0xBF) to a lead-byte boundary.
+    while (cut > 0 && (buf[cut] & 0xc0) === 0x80)
+        cut--;
+    return { text: buf.subarray(0, cut).toString('utf-8'), bytes: cut };
+}
+function readPositiveInteger(value, name, defaultValue) {
+    if (value === undefined)
+        return defaultValue;
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1) {
+        return `read_file ${name} must be a positive integer`;
+    }
+    return value;
+}
+async function readFileSync_(path, maxLines, offset, cwd) {
     try {
         const normalizedPath = normalizeToolPath(path);
         const resolved = safePath(path, cwd);
@@ -830,30 +871,48 @@ async function readFileSync_(path, maxLines, cwd) {
             return { success: false, output: '', error: `File not found: ${normalizedPath}` };
         }
         if ((0, fs_1.statSync)(resolved).isDirectory()) {
-            return { success: false, output: '', error: `Path is a directory, not a file: ${normalizedPath}` };
+            return {
+                success: false,
+                output: '',
+                error: `Path is a directory, not a file: ${normalizedPath}`,
+            };
         }
         const content = (0, fs_1.readFileSync)(resolved, 'utf-8');
         const lines = content.split('\n');
-        const limit = maxLines ?? 500;
         const maxBytes = 51200; // 50KB byte limit
-        if (lines.length > limit) {
-            const truncated = lines.slice(0, limit).join('\n');
-            const byteLen = Buffer.byteLength(truncated, 'utf8');
-            const notice = `\n\n[... truncated, ${lines.length - limit} more lines]`;
+        if (offset > lines.length) {
             return {
-                success: true,
-                output: byteLen > maxBytes ? truncated.slice(0, maxBytes) + `\n\n[... truncated at ${maxBytes}B]` : truncated + notice,
+                success: false,
+                output: '',
+                error: `read_file offset ${offset} is beyond the file (${lines.length} lines)`,
             };
         }
-        // Also apply byte limit to full content
-        const byteLen = Buffer.byteLength(content, 'utf8');
+        const startIndex = offset - 1;
+        const selectedLines = lines.slice(startIndex, startIndex + maxLines);
+        const selected = selectedLines.join('\n');
+        const remainingLines = Math.max(0, lines.length - startIndex - selectedLines.length);
+        if (remainingLines > 0) {
+            const byteLen = Buffer.byteLength(selected, 'utf8');
+            const notice = `\n\n[... truncated, ${remainingLines} more lines; showing lines ${offset}-${offset + selectedLines.length - 1} of ${lines.length}]`;
+            if (byteLen > maxBytes) {
+                const cut = truncateToBytes(selected, maxBytes);
+                return {
+                    success: true,
+                    output: cut.text + `\n\n[... truncated at ${cut.bytes}B]`,
+                };
+            }
+            return { success: true, output: selected + notice };
+        }
+        // Also apply byte limit to the selected page.
+        const byteLen = Buffer.byteLength(selected, 'utf8');
         if (byteLen > maxBytes) {
+            const cut = truncateToBytes(selected, maxBytes);
             return {
                 success: true,
-                output: content.slice(0, maxBytes) + `\n\n[... truncated at ${maxBytes}B of ${byteLen}B]`,
+                output: cut.text + `\n\n[... truncated at ${cut.bytes}B of ${byteLen}B]`,
             };
         }
-        return { success: true, output: content };
+        return { success: true, output: selected };
     }
     catch (err) {
         return { success: false, output: '', error: String(err.message) };
@@ -864,7 +923,10 @@ async function writeFileSync_(path, content, cwd) {
         const normalizedPath = normalizeToolPath(path);
         const resolved = safePath(path, cwd);
         (0, fs_1.writeFileSync)(resolved, content, 'utf-8');
-        return { success: true, output: `Wrote ${content.split('\n').length} lines to ${normalizedPath}` };
+        return {
+            success: true,
+            output: `Wrote ${content.split('\n').length} lines to ${normalizedPath}`,
+        };
     }
     catch (err) {
         return { success: false, output: '', error: String(err.message) };
@@ -908,14 +970,15 @@ async function listFiles_(path, maxDepth, cwd) {
     // Limit output to 500 entries
     const maxEntries = 500;
     const output = results.length > maxEntries
-        ? results.slice(0, maxEntries).join('\n') + `\n\n[... truncated, ${results.length - maxEntries} more entries]`
+        ? results.slice(0, maxEntries).join('\n') +
+            `\n\n[... truncated, ${results.length - maxEntries} more entries]`
         : results.join('\n');
     return { success: true, output };
 }
 // Issue #32 #3.2: execCommand_ 支持 abortSignal
 async function execCommand_(command, cwd, timeout, maxOutput, abortSignal, baseCwd) {
-    return new Promise((resolve) => {
-        const workdir = cwd ? safePath(cwd, baseCwd) : baseCwd ?? process.cwd();
+    return new Promise(resolve => {
+        const workdir = cwd ? safePath(cwd, baseCwd) : (baseCwd ?? process.cwd());
         const timeoutMs = timeout ?? 30000;
         const maxBytes = maxOutput ?? 51200; // Default 50KB, Issue #28 fix
         // Use spawn for streaming output with truncation support
@@ -1025,7 +1088,7 @@ async function execCommand_(command, cwd, timeout, maxOutput, abortSignal, baseC
                 }
             }
         });
-        child.on('close', (code) => {
+        child.on('close', code => {
             if (interrupted === 'aborted') {
                 finish({
                     success: false,
@@ -1060,11 +1123,13 @@ async function execCommand_(command, cwd, timeout, maxOutput, abortSignal, baseC
                 finish({
                     success: true,
                     output: finalOutput || '(no output)',
-                    error: stderrTruncated ? errOutput + '\n\n[... stderr truncated]' : errOutput || undefined,
+                    error: stderrTruncated
+                        ? errOutput + '\n\n[... stderr truncated]'
+                        : errOutput || undefined,
                 });
             }
         });
-        child.on('error', (err) => {
+        child.on('error', err => {
             finish({
                 success: false,
                 output: '',
@@ -1136,7 +1201,10 @@ function formatEditPreview(params) {
  */
 function fuzzyMatch(content, oldString) {
     // Strategy 1: Line-by-line matching (allow different indentation)
-    const oldLines = oldString.split('\n').map(l => l.trim()).filter(Boolean);
+    const oldLines = oldString
+        .split('\n')
+        .map(l => l.trim())
+        .filter(Boolean);
     const contentLines = content.split('\n');
     const lineMatches = [];
     for (let i = 0; i <= contentLines.length - oldLines.length; i++) {
@@ -1186,7 +1254,11 @@ async function editFile_(path, old_string, new_string, replace_all, fuzzy_match,
             return { success: false, output: '', error: `File not found: ${normalizedPath}` };
         }
         if ((0, fs_1.statSync)(resolved).isDirectory()) {
-            return { success: false, output: '', error: `Path is a directory, not a file: ${normalizedPath}` };
+            return {
+                success: false,
+                output: '',
+                error: `Path is a directory, not a file: ${normalizedPath}`,
+            };
         }
         const content = (0, fs_1.readFileSync)(resolved, 'utf-8');
         // Check if old_string exists exactly
@@ -1224,7 +1296,11 @@ async function editFile_(path, old_string, new_string, replace_all, fuzzy_match,
             // Try fuzzy match strategies
             const fuzzyResult = fuzzyMatch(content, old_string);
             if (fuzzyResult === null) {
-                return { success: false, output: '', error: `old_string not found in file: ${old_string.slice(0, 100)}...` };
+                return {
+                    success: false,
+                    output: '',
+                    error: `old_string not found in file: ${old_string.slice(0, 100)}...`,
+                };
             }
             if (preview) {
                 return {
@@ -1251,7 +1327,10 @@ async function editFile_(path, old_string, new_string, replace_all, fuzzy_match,
                 return {
                     success: false,
                     output: '',
-                    error: `Fuzzy match found ${fuzzyResult.matches.length} candidates. Provide a more specific string. First 3 candidates:\n${fuzzyResult.matches.slice(0, 3).map((m, i) => `  ${i + 1}: "${m.slice(0, 80)}..."`).join('\n')}`,
+                    error: `Fuzzy match found ${fuzzyResult.matches.length} candidates. Provide a more specific string. First 3 candidates:\n${fuzzyResult.matches
+                        .slice(0, 3)
+                        .map((m, i) => `  ${i + 1}: "${m.slice(0, 80)}..."`)
+                        .join('\n')}`,
                 };
             }
             // Use the single fuzzy match only.
@@ -1305,18 +1384,26 @@ function escapeRegExp(str) {
  */
 async function glob_(pattern, basePath, cwd) {
     try {
-        const normalizedBasePath = basePath ? normalizeToolPath(basePath) : cwd ?? process.cwd();
-        const base = basePath ? safePath(basePath, cwd) : cwd ?? process.cwd();
+        const normalizedBasePath = basePath ? normalizeToolPath(basePath) : (cwd ?? process.cwd());
+        const base = basePath ? safePath(basePath, cwd) : (cwd ?? process.cwd());
         if (!(0, fs_1.existsSync)(base)) {
             return { success: false, output: '', error: `Path not found: ${normalizedBasePath}` };
         }
         if (!(0, fs_1.statSync)(base).isDirectory()) {
-            return { success: false, output: '', error: `Path is not a directory: ${normalizedBasePath}` };
+            return {
+                success: false,
+                output: '',
+                error: `Path is not a directory: ${normalizedBasePath}`,
+            };
         }
         const results = [];
-        // Convert glob pattern to regex
+        // Convert glob pattern to regex.
+        // Escape ALL regex metacharacters first, then translate glob wildcards.
+        // Escaping only `.` (the old behavior) left parens/brackets/+/^/$/| as
+        // regex syntax: a literal "(group)" became a capture group (so the real
+        // file stopped matching) and an unbalanced "[" made new RegExp throw.
         function globToRegex(pat) {
-            // Use placeholders to avoid interference between replacements
+            // Use placeholders for glob wildcards so escaping does not touch them.
             let regex = pat;
             // **/ at start - matches optional path (including empty)
             regex = regex.replace(/^\*\*\//, '<<STARSTAR_SLASH_START>>');
@@ -1324,8 +1411,9 @@ async function glob_(pattern, basePath, cwd) {
             regex = regex.replace(/\*\*\//g, '<<STARSTAR_SLASH>>');
             // standalone ** - matches anything
             regex = regex.replace(/\*\*/g, '<<STARSTAR>>');
-            // escape dots
-            regex = regex.replace(/\./g, '\\.');
+            // Escape every regex metacharacter in the remaining literal text.
+            // NOTE: * and ? are glob wildcards, handled below - do not escape them.
+            regex = regex.replace(/[.+^${}()|[\]\\]/g, '\\$&');
             // * matches anything except /
             regex = regex.replace(/\*/g, '[^/]*');
             // ? matches single char except /
@@ -1337,8 +1425,12 @@ async function glob_(pattern, basePath, cwd) {
             return new RegExp(`^${regex}$`);
         }
         const regex = globToRegex(pattern);
-        // Recursive walk
-        function walk(dir, prefix) {
+        // Recursive walk with a depth cap so a pathological tree (or symlink loop)
+        // cannot hang or OOM the tool.
+        const MAX_DEPTH = 16;
+        function walk(dir, prefix, depth) {
+            if (depth > MAX_DEPTH)
+                return;
             try {
                 const entries = (0, fs_1.readdirSync)(dir, { withFileTypes: true });
                 for (const entry of entries) {
@@ -1346,7 +1438,7 @@ async function glob_(pattern, basePath, cwd) {
                         continue;
                     const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
                     if (entry.isDirectory()) {
-                        walk((0, path_1.join)(dir, entry.name), relPath);
+                        walk((0, path_1.join)(dir, entry.name), relPath, depth + 1);
                     }
                     else {
                         if (regex.test(relPath)) {
@@ -1359,7 +1451,7 @@ async function glob_(pattern, basePath, cwd) {
                 // skip unreadable directories
             }
         }
-        walk(base, '');
+        walk(base, '', 0);
         if (results.length === 0) {
             return { success: true, output: 'No files found matching pattern' };
         }
@@ -1367,7 +1459,8 @@ async function glob_(pattern, basePath, cwd) {
         const maxMatches = 200;
         const sorted = results.sort();
         const output = sorted.length > maxMatches
-            ? sorted.slice(0, maxMatches).join('\n') + `\n\n[... truncated, ${sorted.length - maxMatches} more matches]`
+            ? sorted.slice(0, maxMatches).join('\n') +
+                `\n\n[... truncated, ${sorted.length - maxMatches} more matches]`
             : sorted.join('\n');
         return { success: true, output };
     }
@@ -1380,8 +1473,8 @@ async function glob_(pattern, basePath, cwd) {
  */
 async function grep_(pattern, basePath, globPattern, contextLines, cwd) {
     try {
-        const normalizedBasePath = basePath ? normalizeToolPath(basePath) : cwd ?? process.cwd();
-        const base = basePath ? safePath(basePath, cwd) : cwd ?? process.cwd();
+        const normalizedBasePath = basePath ? normalizeToolPath(basePath) : (cwd ?? process.cwd());
+        const base = basePath ? safePath(basePath, cwd) : (cwd ?? process.cwd());
         if (!(0, fs_1.existsSync)(base)) {
             return { success: false, output: '', error: `Path not found: ${normalizedBasePath}` };
         }
@@ -1437,10 +1530,10 @@ async function grep_(pattern, basePath, globPattern, contextLines, cwd) {
                 });
                 const lines = [];
                 const relPath = (0, path_1.relative)(base, file);
-                rl.on('line', (line) => {
+                rl.on('line', line => {
                     lines.push(line);
                 });
-                await new Promise((resolve) => {
+                await new Promise(resolve => {
                     rl.on('close', resolve);
                 });
                 // Search for matches
@@ -1513,7 +1606,9 @@ function parseBatchReadSteps(rawSteps) {
                 stepArgs = JSON.parse(stepArgs);
             }
             catch {
-                return { error: `batch_read step ${i + 1} args must be an object or valid JSON object string` };
+                return {
+                    error: `batch_read step ${i + 1} args must be an object or valid JSON object string`,
+                };
             }
         }
         if (!isRecord(stepArgs)) {
@@ -1526,7 +1621,9 @@ function parseBatchReadSteps(rawSteps) {
 function buildBatchReadPayload(success, summary, steps, error) {
     const payload = {
         success,
-        output: steps.map(step => `${step.index}. ${step.tool}: ${step.summary || (step.success ? 'ok' : step.error || 'error')}`).join('\n'),
+        output: steps
+            .map(step => `${step.index}. ${step.tool}: ${step.summary || (step.success ? 'ok' : step.error || 'error')}`)
+            .join('\n'),
         summary,
         steps,
     };
@@ -1551,25 +1648,29 @@ async function executeBatchRead(args, context) {
         const tool = runtimeTools.find(t => t.name === step.tool);
         if (!BATCH_READ_ALLOWED_TOOLS.has(step.tool)) {
             const error = `Tool ${step.tool} is not allowed in batch_read`;
-            return buildBatchReadPayload(false, error, [{
+            return buildBatchReadPayload(false, error, [
+                {
                     index: i + 1,
                     tool: step.tool,
                     args: step.args,
                     success: false,
                     error,
                     output: '',
-                }], error);
+                },
+            ], error);
         }
         if (!tool || tool.isReadOnly?.(step.args) !== true) {
             const error = `Tool ${step.tool} is unavailable or not read-only`;
-            return buildBatchReadPayload(false, error, [{
+            return buildBatchReadPayload(false, error, [
+                {
                     index: i + 1,
                     tool: step.tool,
                     args: step.args,
                     success: false,
                     error,
                     output: '',
-                }], error);
+                },
+            ], error);
         }
     }
     const stepResults = [];
@@ -1671,7 +1772,9 @@ function summarizeToolResult(tool, args, result) {
  * 获取可用工具名称列表
  */
 function getToolNames() {
-    return getRuntimeTools().map(t => t.name).join(', ');
+    return getRuntimeTools()
+        .map(t => t.name)
+        .join(', ');
 }
 // Re-export bash_security module
 var bash_security_2 = require("./bash_security");