pybao-cli 1.3.32 → 1.3.34

package/dist/{chunk-VMFZ5HAJ.js → chunk-HMOS6HMW.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-ERMQRV55.js";
 import {
   debug
-} from "./chunk-XMB7CJI7.js";
+} from "./chunk-5JDVI7GW.js";
 import {
   logError
-} from "./chunk-TNFPDMGQ.js";
+} from "./chunk-3VTHEXMT.js";
 
 // src/utils/agent/storage.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";

package/dist/{chunk-C5CR2IE3.js → chunk-IBBJEBE5.js}

@@ -5,12 +5,12 @@ import {
 } from "./chunk-RQVLBMP7.js";
 import {
   debug
-} from "./chunk-XMB7CJI7.js";
+} from "./chunk-5JDVI7GW.js";
 import {
   getCwd,
   getGlobalConfigFilePath,
   logError
-} from "./chunk-TNFPDMGQ.js";
+} from "./chunk-3VTHEXMT.js";
 
 // src/core/config/schema.ts
 function isAutoUpdaterStatus(value) {
@@ -660,7 +660,7 @@ function setModelPointer(pointer, modelName) {
     }
   };
   saveGlobalConfig(updatedConfig);
-  import("./model-NSMV7O5V.js").then(({ reloadModelManager }) => {
+  import("./model-NUSZPX3C.js").then(({ reloadModelManager }) => {
     reloadModelManager();
   });
 }

package/dist/{chunk-4577DPJH.js → chunk-JH6N5TL7.js}

@@ -4,7 +4,7 @@ import {
   BunShell,
   execFileNoThrow,
   logError
-} from "./chunk-TNFPDMGQ.js";
+} from "./chunk-3VTHEXMT.js";
 
 // src/utils/system/ripgrep.ts
 import { rgPath } from "@vscode/ripgrep";

package/dist/{chunk-N6YGX3WX.js → chunk-KOURPHWR.js}

@@ -5,17 +5,17 @@ import {
   getGlobalConfig,
   getOrCreateUserID,
   saveCurrentProjectConfig
-} from "./chunk-C5CR2IE3.js";
+} from "./chunk-IBBJEBE5.js";
 import {
   SESSION_ID,
   env,
   execFileNoThrow,
   getCwd,
   logError
-} from "./chunk-TNFPDMGQ.js";
+} from "./chunk-3VTHEXMT.js";
 import {
   MACRO
-} from "./chunk-3X7Z57YB.js";
+} from "./chunk-UVVZTARX.js";
 import {
   __require
 } from "./chunk-I3J4JYES.js";

package/dist/{chunk-QJSZOXJD.js → chunk-KRKZ7SUM.js}

@@ -448,7 +448,7 @@ function getLastAssistantMessageId(messages) {
 
 // src/utils/messages/index.ts
 async function processUserInput(input, mode, setToolJSX, context, pastedImages) {
-  const impl = await import("./userInput-TIPIRVR7.js");
+  const impl = await import("./userInput-4ERN47ML.js");
   return impl.processUserInput(input, mode, setToolJSX, context, pastedImages);
 }
 

package/dist/{chunk-HQABGWIQ.js → chunk-LKNM2P6W.js}

@@ -2,7 +2,7 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   listPybAgentSessions
-} from "./chunk-7JI2ZPUM.js";
+} from "./chunk-SV3DN3VE.js";
 import {
   DEFAULT_TIMEOUT_MS,
   FallbackToolUseRejectedMessage,
@@ -16,11 +16,11 @@ import {
   listMCPServers,
   loadMergedSettings,
   normalizeSandboxRuntimeConfigFromSettings
-} from "./chunk-6434YR2Y.js";
+} from "./chunk-QE2PGZGS.js";
 import {
   formatValidationResult,
   validatePluginOrMarketplacePath
-} from "./chunk-D4NCADRR.js";
+} from "./chunk-FLHXVFIV.js";
 import {
   addMarketplace,
   disableSkillPlugin,
@@ -33,15 +33,15 @@ import {
   refreshMarketplaceAsync,
   removeMarketplace,
   uninstallSkillPlugin
-} from "./chunk-U6UWL5I5.js";
+} from "./chunk-WBTDU532.js";
 import {
   loadPybAgentSessionMessages
-} from "./chunk-FABMZ3WX.js";
+} from "./chunk-4NU6PK6T.js";
 import {
   appendSessionCustomTitleRecord,
   appendSessionJsonlFromMessage,
   appendSessionTagRecord
-} from "./chunk-5YXQUZXN.js";
+} from "./chunk-OQW6JYPZ.js";
 import {
   getRequestStatus,
   setRequestStatus,
@@ -58,7 +58,7 @@ import {
   runStopHooks,
   runUserPromptSubmitHooks,
   updateHookTranscriptForMessages
-} from "./chunk-Z7K3JP6F.js";
+} from "./chunk-YOWMHJH6.js";
 import {
   getPybAgentSessionId,
   setPybAgentSessionId
@@ -71,34 +71,34 @@ import {
   getOutputStyleSystemPromptAdditions,
   resolveOutputStyleName,
   setCurrentOutputStyle
-} from "./chunk-4HMCVYMA.js";
+} from "./chunk-BQHFZRKF.js";
 import {
   fetchCustomModels,
   getModelFeatures
-} from "./chunk-JOLXQZEA.js";
+} from "./chunk-QUJBVQSP.js";
 import {
   queryLLM,
   queryQuick,
   verifyApiKey
-} from "./chunk-CA4YEDR6.js";
+} from "./chunk-P6FNKBQJ.js";
 import {
   listAllContentFiles,
   ripGrep
-} from "./chunk-4577DPJH.js";
+} from "./chunk-JH6N5TL7.js";
 import {
   getCustomCommandDirectories,
   hasCustomCommands,
   loadCustomCommands,
   reloadCustomCommands
-} from "./chunk-VJCNG6ED.js";
+} from "./chunk-NIB4ZIK5.js";
 import {
   loadToolPermissionContextFromDisk,
   persistToolPermissionUpdateToDisk
-} from "./chunk-LAZ6TPQW.js";
+} from "./chunk-UVKIAW3Z.js";
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback
-} from "./chunk-TLE5RHB2.js";
+} from "./chunk-OVQ5QUJ3.js";
 import {
   applyToolPermissionContextUpdate,
   createDefaultToolPermissionContext
@@ -111,7 +111,7 @@ import {
   resetReminderSession,
   setTodos,
   systemReminderService
-} from "./chunk-VMFZ5HAJ.js";
+} from "./chunk-HMOS6HMW.js";
 import {
   getSessionState
 } from "./chunk-ERMQRV55.js";
@@ -120,7 +120,7 @@ import {
   getActiveAgents,
   getAgentByType,
   getAllAgents
-} from "./chunk-CCK4IGN3.js";
+} from "./chunk-726PHS6L.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
@@ -153,22 +153,22 @@ import {
   processUserInput,
   reorderMessages,
   stripSystemMessages
-} from "./chunk-QJSZOXJD.js";
+} from "./chunk-KRKZ7SUM.js";
 import {
   ModelManager,
   getModelManager,
   isDefaultSlowAndCapableModel
-} from "./chunk-DUHC6VET.js";
+} from "./chunk-RIHMXFFG.js";
 import {
   getCodeStyle,
   getContext,
   getGitState,
   getIsGit,
   getProjectDocs
-} from "./chunk-N6YGX3WX.js";
+} from "./chunk-KOURPHWR.js";
 import {
   getTheme
-} from "./chunk-RARRSUNF.js";
+} from "./chunk-5Q2U3IZE.js";
 import {
   DEFAULT_GLOBAL_CONFIG,
   enableConfigs,
@@ -181,7 +181,7 @@ import {
   saveGlobalConfig,
   setAllPointersToModel,
   setModelPointer
-} from "./chunk-C5CR2IE3.js";
+} from "./chunk-IBBJEBE5.js";
 import {
   AbortError
 } from "./chunk-RQVLBMP7.js";
@@ -190,7 +190,7 @@ import {
   getCurrentRequest,
   logUserFriendly,
   markPhase
-} from "./chunk-XMB7CJI7.js";
+} from "./chunk-5JDVI7GW.js";
 import {
   ASCII_LOGO,
   BunShell,
@@ -226,10 +226,10 @@ import {
   renderBashNotification,
   setActivePlanConversationKey,
   setCwd
-} from "./chunk-TNFPDMGQ.js";
+} from "./chunk-3VTHEXMT.js";
 import {
   MACRO
-} from "./chunk-3X7Z57YB.js";
+} from "./chunk-UVVZTARX.js";
 import {
   formatTotalCost,
   getTotalAPIDuration,
@@ -417,7 +417,7 @@ var getCommandSubcommandPrefix = memoize(
 var getCommandPrefix = memoize(
   async (command4, abortSignal) => {
     const { systemPrompt, userPrompt } = buildBashCommandPrefixDetectionPrompt(command4);
-    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-CKQ2OLUM.js");
+    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-MPPYD5AB.js");
     const response = await queryQuick2({
       systemPrompt,
       userPrompt,
@@ -4457,7 +4457,7 @@ function formatParseError(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function defaultGateQuery(args) {
-  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-CKQ2OLUM.js");
+  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-MPPYD5AB.js");
   const messages = [
     {
       type: "user",
@@ -6863,7 +6863,12 @@ var DESCRIPTION3 = "Read a file from the local filesystem.";
 var PROMPT3 = `Reads a file from the local filesystem. You can access any file directly by using this tool.
 Assume this tool is able to read all files on the machine. If the User provides a path to a file assume that path is valid. It is okay to read a file that does not exist; an error will be returned.
 
-Usage:
+## Best Practice
+- **Read vs Analyze**: Use this tool when you need to inspect full implementation details. For understanding function relationships or definitions, prefer 'LSP' tools first.
+- **Workflow**: Locate file (Glob/LSP) -> Read file (FileRead) -> Edit file.
+- **Avoid**: Do not use this to 'search' for code strings; use 'Grep' or 'LSP' for that.
+
+## Usage Details
 - The file_path parameter must be an absolute path, not a relative path
 - By default, it reads up to ${MAX_LINES_TO_READ} lines starting from the beginning of the file
 - You can optionally specify a line offset and limit (especially handy for long files), but it's recommended to read the whole file by not providing these parameters
@@ -6871,7 +6876,7 @@ Usage:
 - Results are returned using cat -n format, with line numbers starting at 1
 - This tool allows reading images (eg PNG, JPG, etc). When reading an image file the contents are presented visually.
 - This tool can read Jupyter notebooks (.ipynb files) and returns all cells with their outputs, combining code, text, and visualizations.
-- This tool can only read files, not directories. To read a directory, use an ls command via the Bash tool.
+- This tool can only read files, not directories. To list files in a directory, use the 'Glob' or 'LS' tool.
 - You can call multiple tools in a single response. It is always better to speculatively read multiple potentially useful files in parallel.
 - You will regularly be asked to read screenshots. If the user provides a path to a screenshot, ALWAYS use this tool to view the file at the path. This tool will work with all temporary file paths.
 - If you read a file that exists but has empty contents you will receive a system reminder warning in place of file contents.`;
@@ -7901,6 +7906,7 @@ var DESCRIPTION4 = `- Fast file pattern matching tool that works with any codeba
 - Use this tool when you need to find files by name patterns
 - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead
 - You can call multiple tools in a single response. It is always better to speculatively perform multiple searches in parallel if they are potentially useful.
+- This tool is for FINDING files. To SEE the directory structure tree, use the LS tool.
 `;
 
 // src/tools/filesystem/GlobTool/GlobTool.tsx
@@ -11006,7 +11012,7 @@ async function createAndStoreApiKey(accessToken) {
       }
       saveGlobalConfig(config2);
       try {
-        const { resetAnthropicClient } = await import("./llm-CKQ2OLUM.js");
+        const { resetAnthropicClient } = await import("./llm-MPPYD5AB.js");
         resetAnthropicClient();
       } catch {
       }
@@ -15288,7 +15294,7 @@ async function refreshPluginRuntimeFromInstalls() {
   const existingRoots = getSessionPlugins().map((p) => p.rootDir);
   const dirs = Array.from(/* @__PURE__ */ new Set([...existingRoots, ...installedRoots]));
   if (dirs.length === 0) return [];
-  const { configureSessionPlugins } = await import("./pluginRuntime-55LJGUQI.js");
+  const { configureSessionPlugins } = await import("./pluginRuntime-ER5JNKMN.js");
   const { errors } = await configureSessionPlugins({ pluginDirs: dirs });
   return errors;
 }
@@ -15957,7 +15963,7 @@ async function call(onDone, context) {
     ModelConfig,
     {
       onClose: () => {
-        import("./model-NSMV7O5V.js").then(({ reloadModelManager: reloadModelManager2 }) => {
+        import("./model-NUSZPX3C.js").then(({ reloadModelManager: reloadModelManager2 }) => {
           reloadModelManager2();
           triggerModelConfigChange();
           onDone();
@@ -23199,7 +23205,7 @@ function useStatusLine() {
 // src/ui/components/PromptInput.tsx
 async function interpretHashCommand(input) {
   try {
-    const { queryQuick: queryQuick2 } = await import("./llm-CKQ2OLUM.js");
+    const { queryQuick: queryQuick2 } = await import("./llm-MPPYD5AB.js");
     const systemPrompt = [
       "You're helping the user structure notes that will be added to their PYB.md file.",
       "Format the user's input into a well-structured note that will be useful for later reference.",
@@ -23512,7 +23518,7 @@ function PromptInput({
     if (messages2.length) {
       if (mode === "bash") {
         onQuery(messages2, newAbortController).then(async () => {
-          const { getCwd: getCwd2 } = await import("./state-46DOLHGZ.js");
+          const { getCwd: getCwd2 } = await import("./state-OLIUOKSV.js");
           setCurrentPwd(getCwd2());
         });
       } else {
@@ -26271,7 +26277,7 @@ import { homedir as homedir7 } from "os";
 // src/commands/agents/generation.ts
 import { randomUUID as randomUUID5 } from "crypto";
 async function generateAgentWithClaude(prompt) {
-  const { queryModel } = await import("./llm-CKQ2OLUM.js");
+  const { queryModel } = await import("./llm-MPPYD5AB.js");
   const systemPrompt = `You are an expert at creating AI agent configurations. Based on the user's description, generate a specialized agent configuration.
 
 Return your response as a JSON object with exactly these fields:
@@ -29460,7 +29466,7 @@ var BashTool = {
   name: "Bash",
   cachedDescription: "Run shell command",
   async description(input) {
-    return input?.description || "Run shell command";
+    return input?.description || await getBashToolPrompt();
   },
   async prompt() {
     return getBashToolPrompt();
@@ -29491,6 +29497,16 @@ var BashTool = {
     return true;
   },
   async validateInput({ command: command4, timeout, dangerouslyDisableSandbox }, context) {
+    const trimmed = command4.trim();
+    if (/^ls(\s+|$)/.test(trimmed) && !trimmed.includes("-")) {
+      return {
+        result: false,
+        message: `Security Policy: Do not use 'ls' for simple file listing. 
+- To find files: Use the 'Glob' tool.
+- To view directory structure: Use the 'LS' tool.
+- To check permissions/metadata: Use 'ls -l' (allowed).`
+      };
+    }
     if (timeout !== void 0) {
       if (!Number.isFinite(timeout) || timeout < 0) {
         return {
@@ -30059,12 +30075,12 @@ assistant: Yes
 
 <example>
 user: what command should I run to list files in the current directory?
-assistant: ls
+assistant: [uses the Glob tool to list the files in the current directory]
 </example>
 
 <example>
 user: what command should I run to watch files in the current directory?
-assistant: [use the ls tool to list the files in the current directory, then read docs/commands in the relevant file to find out how to watch files]
+assistant: [use the Glob tool to list the files in the current directory, then read docs/commands in the relevant file to find out how to watch files]
 npm run dev
 </example>
 
@@ -30075,7 +30091,7 @@ assistant: 150000
 
 <example>
 user: what files are in the directory src/?
-assistant: [runs ls and sees foo.c, bar.c, baz.c]
+assistant: [uses Glob tool and sees foo.c, bar.c, baz.c]
 user: which file contains the implementation of foo?
 assistant: src/foo.c
 </example>
@@ -30120,6 +30136,7 @@ NEVER commit changes unless the user explicitly asks you to. It is VERY IMPORTAN
 
 # Tool usage policy
 - When doing file search, prefer to use the Task tool in order to reduce context usage.
+- For file system exploration (listing files, checking directories), ALWAYS use the Glob tool first. Only use Bash for executing scripts or binaries.
 - You can call multiple tools in a single response. If you intend to call multiple tools and there are no dependencies between them, make all independent tool calls in parallel. Maximize use of parallel tool calls where possible to increase efficiency. However, if some tool calls depend on previous calls to inform dependent values, do NOT call these tools in parallel and instead call them sequentially. For instance, if one operation must complete before another starts, run these operations sequentially instead. Never use placeholders or guess missing parameters in tool calls.
 - If the user specifies that they want you to run tools "in parallel", you MUST send a single message with multiple tool use content blocks.
 - It is always better to speculatively read multiple files as a batch that are potentially useful.