prism-mcp-server 20.0.7 → 20.1.0

package/dist/utils/layer1.js

@@ -5,9 +5,14 @@
  * a prompt is OBVIOUS_RESERVED, OBVIOUS_NOT_RESERVED, or UNCERTAIN.
  *
  * Fail-closed contract:
- *   OBVIOUS_NOT_RESERVED → the ONLY verdict that permits local routing
+ *   OBVIOUS_NOT_RESERVED → permits local routing
  *   OBVIOUS_RESERVED     → escalate to cloud
  *   UNCERTAIN            → escalate to cloud (conservative)
+ *   UNCERTAIN_LENGTH     → §5.3: prompt too long to classify in full, but the
+ *                          full-text keyword floor is clean AND a head+tail
+ *                          excerpt classified clean — permits local routing
+ *                          with a distinct audit marker ("too long to classify"
+ *                          ≠ "semantically uncertain")
  *   ERROR                → escalate to cloud (never fail-open)
  *
  * The prompt below is VERBATIM from §E of prism-infer-boundaries/SKILL.md.
@@ -66,7 +71,7 @@ const LAYER1_RETRY_TIMEOUT_MS = 5_000;
 // Not sufficient alone (adversaries can paraphrase), but as an ERROR-path
 // floor they block the obvious cases that padding/injection attacks
 // would otherwise smuggle through.
-const RESERVED_KEYWORDS = /\b(restrain\w*|seclu(?:sion|d\w*)|physical\s*holds?|containment|self[- ]?harm\w*|suicid\w*|overdos\w*|dos(?:age|ing)\s*(?:mg|schedule)|crisis\s*de[- ]?escalation|meltdown\s*management|elopement\s*incident)\b/i;
+const RESERVED_KEYWORDS = /\b(restrain\w*|seclu(?:sion|d\w*)|physical\s*holds?|(?:prone|supine|basket|therapeutic|manual|two[- ]?person)\s+holds?|hold(?:ing)?\s+(?:the\s+)?(?:client|child|student|patient)\s+down|containment|self[- ]?harm\w*|suicid\w*|overdos\w*|dos(?:age|ing)\s*(?:mg|schedule)|crisis\s*de[- ]?escalation|meltdown\s*management|rage\s+episode|elopement\s*incident)\b/i;
 /**
  * Deterministic keyword check — the ERROR-path floor.
  * Returns OBVIOUS_RESERVED if reserved vocabulary is present,
@@ -77,21 +82,54 @@ export function keywordBackstop(prompt) {
     return RESERVED_KEYWORDS.test(prompt) ? "OBVIOUS_RESERVED" : "OBVIOUS_NOT_RESERVED";
 }
 // Over-length prompts are attacker-controlled — don't let length
-// select the ERROR branch. Classify as UNCERTAIN (conservative)
-// rather than feeding a huge prompt to a 4B classifier that will timeout.
+// select the ERROR branch. §5.3: instead of a blanket UNCERTAIN (which
+// routed every big benign prompt to cloud-or-refuse — v1 FATAL #3), run
+// the deterministic keyword floor over the FULL text, then classify a
+// bounded head+tail excerpt. A clean floor + clean excerpt yields the
+// distinct UNCERTAIN_LENGTH verdict so callers can tell "too long to
+// classify" from "semantically uncertain".
 const MAX_CLASSIFIER_PROMPT_LENGTH = 4_000;
+// Excerpt budget: head + middle + tail must stay under the classifier cap
+// with room for the LAYER1_PROMPT template. The sampled middle window
+// narrows the region an attacker can hide paraphrased reserved content in
+// (adversarial-review finding: keyword-free paraphrases in the unseen
+// middle are the residual gap — the window makes padding placement
+// harder; the full-text keyword floor remains the deterministic net).
+const EXCERPT_HEAD_CHARS = 2_000;
+const EXCERPT_MID_CHARS = 400;
+const EXCERPT_TAIL_CHARS = 1_400;
+/** Bounded head+middle+tail excerpt of an oversize prompt (§5.3). Exported for tests. */
+export function buildOversizeExcerpt(prompt) {
+    const midStart = Math.max(EXCERPT_HEAD_CHARS, Math.floor(prompt.length / 2) - EXCERPT_MID_CHARS / 2);
+    const middle = prompt.slice(midStart, midStart + EXCERPT_MID_CHARS);
+    return (prompt.slice(0, EXCERPT_HEAD_CHARS) +
+        "\n[…]\n" +
+        middle +
+        "\n[…]\n" +
+        prompt.slice(-EXCERPT_TAIL_CHARS));
+}
 /**
  * Run the Layer 1 classifier with retry on cold-model timeout.
  * Returns a verdict; never throws.
  *
  * Flow: classify → if ERROR, retry once with longer timeout →
  * if still ERROR, return ERROR (caller uses keywordBackstop).
+ *
+ * Oversize flow (§5.3): full-text keyword floor → excerpt classification →
+ * reserved/uncertain excerpt verdicts keep full reserved handling;
+ * a clean excerpt returns UNCERTAIN_LENGTH.
  */
 export async function callLayer1(userPrompt, ollamaUrl, model, fetchImpl = fetch) {
     if (!userPrompt || !userPrompt.trim())
         return "ERROR";
-    if (userPrompt.length > MAX_CLASSIFIER_PROMPT_LENGTH)
-        return "UNCERTAIN";
+    const oversize = userPrompt.length > MAX_CLASSIFIER_PROMPT_LENGTH;
+    if (oversize && keywordBackstop(userPrompt) === "OBVIOUS_RESERVED") {
+        // The regex floor has no length limit — reserved vocabulary anywhere
+        // in the full text (including the middle the excerpt can't see)
+        // short-circuits to reserved handling.
+        return "OBVIOUS_RESERVED";
+    }
+    const classifierInput = oversize ? buildOversizeExcerpt(userPrompt) : userPrompt;
     const classify = async (timeoutMs) => {
         let res;
         try {
@@ -101,7 +139,7 @@ export async function callLayer1(userPrompt, ollamaUrl, model, fetchImpl = fetch
                 body: JSON.stringify({
                     model,
                     messages: [
-                        { role: "user", content: LAYER1_PROMPT.replace("{prompt}", userPrompt) },
+                        { role: "user", content: LAYER1_PROMPT.replace("{prompt}", classifierInput) },
                     ],
                     stream: false,
                     think: false,
@@ -128,7 +166,16 @@ export async function callLayer1(userPrompt, ollamaUrl, model, fetchImpl = fetch
         return parseLayer1(text);
     };
     const first = await classify(LAYER1_TIMEOUT_MS);
-    if (first !== "ERROR")
-        return first;
-    return classify(LAYER1_RETRY_TIMEOUT_MS);
+    const verdict = first !== "ERROR" ? first : await classify(LAYER1_RETRY_TIMEOUT_MS);
+    if (!oversize)
+        return verdict;
+    // §5.3 oversize mapping:
+    //   excerpt OBVIOUS_RESERVED / UNCERTAIN → keep full reserved handling
+    //   excerpt OBVIOUS_NOT_RESERVED        → UNCERTAIN_LENGTH (distinct verdict)
+    //   excerpt ERROR                       → UNCERTAIN_LENGTH — the deterministic
+    //     keyword floor already cleared the FULL text above, which is the same
+    //     floor the normal-size ERROR path falls back to via the caller.
+    if (verdict === "OBVIOUS_RESERVED" || verdict === "UNCERTAIN")
+        return verdict;
+    return "UNCERTAIN_LENGTH";
 }

package/dist/utils/modelPicker.js

@@ -24,12 +24,21 @@ const GB = 1024 ** 3;
 /**
  * Tier table, ordered LARGEST → SMALLEST. Picker walks this and returns
  * the first row whose minFreeGb fits within freeBytes.
+ *
+ * ctxTokens (§5.4): aligned with the LIVE Modelfile `num_ctx` values
+ * (verified via `ollama show <tag> --modelfile` on 2026-07-20). The values
+ * are inverted from intuition — the 27b/9b Modelfiles bake num_ctx 4096
+ * while 4b/2b bake 32768. The tier walk skips tiers whose ctx cannot hold
+ * prompt + output (reason: ctx_insufficient) — Ollama otherwise silently
+ * truncates the prompt and answers from the fragment. If a Modelfile's
+ * num_ctx is ever raised, update the row here (a raise is a measured
+ * decision with KV-cache RAM costed — plan v2 §5.4).
  */
 export const MODEL_TIERS = [
-    { tag: 'prism-coder:27b', weightsGb: 16, minFreeGb: 20, ctxTokens: 32_768 },
-    { tag: 'prism-coder:9b', weightsGb: 5.8, minFreeGb: 8, ctxTokens: 32_768 },
+    { tag: 'prism-coder:27b', weightsGb: 16, minFreeGb: 20, ctxTokens: 4_096 },
+    { tag: 'prism-coder:9b', weightsGb: 5.8, minFreeGb: 8, ctxTokens: 4_096 },
     { tag: 'prism-coder:4b', weightsGb: 3.4, minFreeGb: 5, ctxTokens: 32_768 },
-    { tag: 'prism-coder:2b', weightsGb: 2.3, minFreeGb: 3, ctxTokens: 8_192 },
+    { tag: 'prism-coder:2b', weightsGb: 2.3, minFreeGb: 3, ctxTokens: 32_768 },
 ];
 /**
  * True when `installed` matches `tierTag` either as a bare tag

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "20.0.7",
+  "version": "20.1.0",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Prism Coder — Cognitive memory + tool-calling intelligence for AI agents. Mind Palace persistent memory (BFCL Gold Certified, 100% Tool-Call Accuracy, 114 Agent Skills, PHI Guard, Tier Enforcement, Prompt-Based Skill Routing, Zero-Search HDC/HRR retrieval, HRR Semantic Drift Detection across BCBA/Coding/AAC domains, HIPAA-hardened local-first storage, SLERP-optimized GRPO alignment) plus the prism-coder 1.7B–32B open-weights LLM fleet.",
   "module": "index.ts",

package/dist/agent/agentTools.js

@@ -1,453 +0,0 @@
-/**
- * Agent Tools — Local workspace tools for the Prism Agent Terminal
- * =================================================================
- *
- * Provides file system, shell, and memory access tools that the AI agent
- * can invoke during an interactive `prism prompt` session. These are
- * declared as Gemini Function Declarations and executed locally.
- *
- * Mirrors the Synalux VS Code extension's local-tools.ts capabilities
- * but runs in a terminal context (no VS Code API dependency).
- */
-import * as fs from "fs";
-import * as path from "path";
-import { exec } from "child_process";
-import { promisify } from "util";
-import { SchemaType } from "@google/generative-ai";
-import { openUrlCommand, fetchUrlCommand, listFilesCommand, searchFilesCommand, resolveCli, IS_WINDOWS, } from "./platformUtils.js";
-const execAsync = promisify(exec);
-// ---------------------------------------------------------------------------
-// Tool Declarations (Gemini Function Calling Schema)
-// ---------------------------------------------------------------------------
-export const AGENT_TOOL_DECLARATIONS = [
-    {
-        name: "read_file",
-        description: "Read the contents of a file. Use when the user asks about code, configs, or any file. Supports optional line range.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                path: {
-                    type: SchemaType.STRING,
-                    description: "Absolute or relative file path to read",
-                },
-                start_line: {
-                    type: SchemaType.INTEGER,
-                    description: "Optional start line (1-indexed)",
-                },
-                end_line: {
-                    type: SchemaType.INTEGER,
-                    description: "Optional end line (1-indexed, inclusive)",
-                },
-            },
-            required: ["path"],
-        },
-    },
-    {
-        name: "list_files",
-        description: "List files and directories. Use when the user asks about project structure or wants to find files.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                directory: {
-                    type: SchemaType.STRING,
-                    description: "Directory path to list (default: current working directory)",
-                },
-                pattern: {
-                    type: SchemaType.STRING,
-                    description: "Optional glob pattern filter (e.g., '**/*.ts')",
-                },
-                max_depth: {
-                    type: SchemaType.INTEGER,
-                    description: "Maximum directory depth to traverse (default: 3)",
-                },
-            },
-        },
-    },
-    {
-        name: "search_files",
-        description: "Search for text or patterns across files using ripgrep. Use when the user wants to find where something is defined or used.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                query: {
-                    type: SchemaType.STRING,
-                    description: "Text or regex pattern to search for",
-                },
-                directory: {
-                    type: SchemaType.STRING,
-                    description: "Directory to search in (default: cwd)",
-                },
-                file_pattern: {
-                    type: SchemaType.STRING,
-                    description: "Glob to filter files (e.g., '*.ts')",
-                },
-                max_results: {
-                    type: SchemaType.INTEGER,
-                    description: "Maximum results (default: 20)",
-                },
-            },
-            required: ["query"],
-        },
-    },
-    {
-        name: "run_command",
-        description: "Execute a shell command and return stdout/stderr. Use for running tests, builds, git commands, etc. Commands have a 30-second timeout.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                command: {
-                    type: SchemaType.STRING,
-                    description: "Shell command to execute",
-                },
-                cwd: {
-                    type: SchemaType.STRING,
-                    description: "Working directory (default: cwd)",
-                },
-            },
-            required: ["command"],
-        },
-    },
-    {
-        name: "write_file",
-        description: "Create or overwrite a file with the given content. Creates parent directories if needed.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                path: {
-                    type: SchemaType.STRING,
-                    description: "File path to write to",
-                },
-                content: {
-                    type: SchemaType.STRING,
-                    description: "Content to write",
-                },
-            },
-            required: ["path", "content"],
-        },
-    },
-    {
-        name: "edit_file",
-        description: "Apply a targeted search-and-replace edit to a file. Use instead of write_file when making small changes.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                path: {
-                    type: SchemaType.STRING,
-                    description: "File path to edit",
-                },
-                search: {
-                    type: SchemaType.STRING,
-                    description: "Exact text to find and replace",
-                },
-                replace: {
-                    type: SchemaType.STRING,
-                    description: "Replacement text",
-                },
-            },
-            required: ["path", "search", "replace"],
-        },
-    },
-    {
-        name: "memory_search",
-        description: "Search the user's Prism memory (past sessions, decisions, TODOs). Use when the user asks about previous work or project history.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                query: {
-                    type: SchemaType.STRING,
-                    description: "Search query",
-                },
-                project: {
-                    type: SchemaType.STRING,
-                    description: "Project to search within",
-                },
-                limit: {
-                    type: SchemaType.INTEGER,
-                    description: "Max results (default: 5)",
-                },
-            },
-            required: ["query"],
-        },
-    },
-    {
-        name: "open_url",
-        description: "Open a URL in the user's default browser.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                url: {
-                    type: SchemaType.STRING,
-                    description: "URL to open",
-                },
-            },
-            required: ["url"],
-        },
-    },
-    {
-        name: "fetch_url",
-        description: "Fetch the text content of a web page and return it. Use when the user wants you to read, summarize, or analyze a web page.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                url: {
-                    type: SchemaType.STRING,
-                    description: "The URL to fetch content from",
-                },
-            },
-            required: ["url"],
-        },
-    },
-    {
-        name: "supabase_cli",
-        description: "Execute Supabase CLI commands (e.g., status, diff, push, db pull). Always use this for Supabase database management.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                args: {
-                    type: SchemaType.STRING,
-                    description: 'The arguments to pass to the supabase CLI (e.g., "db pull", "status")',
-                },
-            },
-            required: ["args"],
-        },
-    },
-    {
-        name: "stripe_cli",
-        description: "Execute Stripe CLI commands (e.g., listen, trigger, login). Always use this for Stripe operations.",
-        parameters: {
-            type: SchemaType.OBJECT,
-            properties: {
-                args: {
-                    type: SchemaType.STRING,
-                    description: 'The arguments to pass to the stripe CLI (e.g., "listen --forward-to localhost:3000/api/webhook")',
-                },
-            },
-            required: ["args"],
-        },
-    },
-];
-// ---------------------------------------------------------------------------
-// Tool Executor
-// ---------------------------------------------------------------------------
-/**
- * Resolve a path — if relative, resolve against cwd.
- */
-function resolvePath(filePath) {
-    if (path.isAbsolute(filePath))
-        return filePath;
-    return path.resolve(process.cwd(), filePath);
-}
-/**
- * Execute an agent tool and return the result as a string.
- */
-export async function executeAgentTool(toolName, args, project) {
-    switch (toolName) {
-        // ─── read_file ─────────────────────────────────────────────
-        case "read_file": {
-            const filePath = resolvePath(args.path);
-            if (!fs.existsSync(filePath))
-                return `Error: File not found: ${filePath}`;
-            const content = fs.readFileSync(filePath, "utf-8");
-            const lines = content.split("\n");
-            const start = Math.max(1, args.start_line || 1);
-            const end = Math.min(lines.length, args.end_line || lines.length);
-            const slice = lines.slice(start - 1, end);
-            // Add line numbers
-            const numbered = slice.map((l, i) => `${start + i}: ${l}`).join("\n");
-            return `File: ${filePath} (${lines.length} lines total, showing ${start}-${end})\n\n${numbered}`;
-        }
-        // ─── list_files ────────────────────────────────────────────
-        case "list_files": {
-            const dir = resolvePath(args.directory || ".");
-            if (!fs.existsSync(dir))
-                return `Error: Directory not found: ${dir}`;
-            const maxDepth = args.max_depth || 3;
-            const pattern = args.pattern;
-            const cmd = listFilesCommand(dir, maxDepth, pattern);
-            try {
-                const { stdout } = await execAsync(cmd, { timeout: 10000, shell: IS_WINDOWS ? "powershell.exe" : undefined });
-                const entries = stdout.trim().split("\n").filter(Boolean);
-                return `Directory: ${dir}\n${entries.length} items found:\n\n${entries.join("\n")}`;
-            }
-            catch {
-                // Fallback to Node.js readdir
-                const entries = fs.readdirSync(dir, { withFileTypes: true });
-                const lines = entries
-                    .slice(0, 50)
-                    .map((e) => `${e.isDirectory() ? "📁" : "📄"} ${e.name}`);
-                return `Directory: ${dir}\n${lines.join("\n")}`;
-            }
-        }
-        // ─── search_files ──────────────────────────────────────────
-        case "search_files": {
-            const query = args.query;
-            const dir = resolvePath(args.directory || ".");
-            const maxResults = args.max_results || 20;
-            const filePattern = args.file_pattern;
-            const cmd = searchFilesCommand(query, dir, maxResults, filePattern);
-            try {
-                const { stdout } = await execAsync(cmd, { timeout: 15000 });
-                if (!stdout.trim())
-                    return `No matches found for "${query}" in ${dir}`;
-                return `Search: "${query}" in ${dir}\n\n${stdout.trim()}`;
-            }
-            catch {
-                return `No matches found for "${query}" in ${dir}`;
-            }
-        }
-        // ─── run_command ───────────────────────────────────────────
-        case "run_command": {
-            const command = args.command;
-            const cwd = resolvePath(args.cwd || ".");
-            // Safety: block obviously dangerous commands
-            const blocked = ["rm -rf /", "mkfs", "dd if=", ":(){"];
-            if (blocked.some((b) => command.includes(b))) {
-                return "Error: Command blocked for safety reasons.";
-            }
-            try {
-                const { stdout, stderr } = await execAsync(command, {
-                    cwd,
-                    timeout: 30000,
-                    maxBuffer: 1024 * 1024,
-                    env: { ...process.env, PAGER: "cat" },
-                });
-                let result = "";
-                if (stdout.trim())
-                    result += `stdout:\n${stdout.trim()}\n`;
-                if (stderr.trim())
-                    result += `stderr:\n${stderr.trim()}\n`;
-                if (!result)
-                    result = "(command completed with no output)";
-                return result;
-            }
-            catch (err) {
-                const e = err;
-                let msg = `Command failed: ${command}\n`;
-                if (e.stdout)
-                    msg += `stdout:\n${e.stdout}\n`;
-                if (e.stderr)
-                    msg += `stderr:\n${e.stderr}\n`;
-                if (e.message && !e.stderr)
-                    msg += `error: ${e.message}`;
-                return msg;
-            }
-        }
-        // ─── write_file ────────────────────────────────────────────
-        case "write_file": {
-            const filePath = resolvePath(args.path);
-            const content = args.content;
-            // Create parent dirs
-            fs.mkdirSync(path.dirname(filePath), { recursive: true });
-            fs.writeFileSync(filePath, content, "utf-8");
-            return `✅ Written ${content.length} chars to ${filePath}`;
-        }
-        // ─── edit_file ─────────────────────────────────────────────
-        case "edit_file": {
-            const filePath = resolvePath(args.path);
-            if (!fs.existsSync(filePath))
-                return `Error: File not found: ${filePath}`;
-            const original = fs.readFileSync(filePath, "utf-8");
-            const search = args.search;
-            const replace = args.replace;
-            if (!original.includes(search)) {
-                return `Error: Search text not found in ${filePath}`;
-            }
-            const updated = original.replace(search, replace);
-            fs.writeFileSync(filePath, updated, "utf-8");
-            return `✅ Edited ${filePath} — replaced ${search.length} chars`;
-        }
-        // ─── memory_search ─────────────────────────────────────────
-        case "memory_search": {
-            const { knowledgeSearchHandler } = await import("../tools/graphHandlers.js");
-            const result = await knowledgeSearchHandler({
-                query: args.query,
-                project: args.project || project || "prism-mcp",
-                limit: args.limit || 5,
-            });
-            const text = result.content?.[0] && "text" in result.content[0]
-                ? result.content[0].text
-                : "No results found.";
-            return text;
-        }
-        // ─── open_url ──────────────────────────────────────────────
-        case "open_url": {
-            const url = args.url;
-            try {
-                await execAsync(openUrlCommand(url));
-                return `✅ Opened ${url} in default browser`;
-            }
-            catch {
-                return `Error: Failed to open ${url}`;
-            }
-        }
-        // ─── fetch_url ─────────────────────────────────────────────
-        case "fetch_url": {
-            const fetchUrl = args.url;
-            if (!fetchUrl?.match(/^https?:\/\//i)) {
-                return "Error: Invalid URL. Must start with http:// or https://";
-            }
-            try {
-                const cmd = fetchUrlCommand(fetchUrl);
-                const { stdout } = await execAsync(cmd, {
-                    timeout: 20000,
-                    maxBuffer: 1024 * 1024,
-                    shell: IS_WINDOWS ? "powershell.exe" : undefined,
-                });
-                const text = stdout.trim().slice(0, 8000);
-                return `Content from ${fetchUrl}:\n\n${text}${text.length >= 8000 ? "\n\n... (truncated)" : ""}`;
-            }
-            catch (err) {
-                const e = err;
-                return `Error: Failed to fetch ${fetchUrl} — ${e.message?.slice(0, 200) || "unknown error"}`;
-            }
-        }
-        // ─── supabase_cli ──────────────────────────────────────────
-        case "supabase_cli": {
-            const sbArgs = args.args;
-            const sbBin = resolveCli("supabase");
-            try {
-                const { stdout } = await execAsync(`${sbBin} ${sbArgs}`, {
-                    cwd: process.cwd(),
-                    timeout: 60000,
-                    maxBuffer: 1024 * 512,
-                    env: { ...process.env, PAGER: "cat" },
-                });
-                return `supabase ${sbArgs}:\n${stdout.trim().slice(0, 5000)}`;
-            }
-            catch (err) {
-                const e = err;
-                let msg = `supabase ${sbArgs} failed:\n`;
-                if (e.stdout)
-                    msg += e.stdout.slice(0, 3000);
-                if (e.stderr)
-                    msg += `\nstderr: ${e.stderr.slice(0, 1000)}`;
-                return msg;
-            }
-        }
-        // ─── stripe_cli ───────────────────────────────────────────
-        case "stripe_cli": {
-            const stripeArgs = args.args;
-            const stripeBin = resolveCli("stripe");
-            try {
-                const { stdout } = await execAsync(`${stripeBin} ${stripeArgs}`, {
-                    cwd: process.cwd(),
-                    timeout: 60000,
-                    maxBuffer: 1024 * 512,
-                    env: { ...process.env, PAGER: "cat" },
-                });
-                return `stripe ${stripeArgs}:\n${stdout.trim().slice(0, 5000)}`;
-            }
-            catch (err) {
-                const e = err;
-                let msg = `stripe ${stripeArgs} failed:\n`;
-                if (e.stdout)
-                    msg += e.stdout.slice(0, 3000);
-                if (e.stderr)
-                    msg += `\nstderr: ${e.stderr.slice(0, 1000)}`;
-                return msg;
-            }
-        }
-        default:
-            return `Error: Unknown tool \"${toolName}\"`;
-    }
-}