pybao-cli 1.3.42 → 1.3.43

package/dist/{chunk-V6OEXS6Q.js → chunk-H5KHW3H5.js}

@@ -2,7 +2,7 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   listPybAgentSessions
-} from "./chunk-FJ5SYR7F.js";
+} from "./chunk-S75I3PUO.js";
 import {
   DEFAULT_TIMEOUT_MS,
   FallbackToolUseRejectedMessage,
@@ -16,11 +16,11 @@ import {
   listMCPServers,
   loadMergedSettings,
   normalizeSandboxRuntimeConfigFromSettings
-} from "./chunk-UFWHOIFA.js";
+} from "./chunk-PUFNVFP5.js";
 import {
   formatValidationResult,
   validatePluginOrMarketplacePath
-} from "./chunk-LIPAFDDK.js";
+} from "./chunk-QEFBT5UA.js";
 import {
   addMarketplace,
   disableSkillPlugin,
@@ -33,15 +33,15 @@ import {
   refreshMarketplaceAsync,
   removeMarketplace,
   uninstallSkillPlugin
-} from "./chunk-QAQGPGLD.js";
+} from "./chunk-Z3V7WH6D.js";
 import {
   loadPybAgentSessionMessages
-} from "./chunk-ABDKXH43.js";
+} from "./chunk-ZGSLNR2O.js";
 import {
   appendSessionCustomTitleRecord,
   appendSessionJsonlFromMessage,
   appendSessionTagRecord
-} from "./chunk-G4BXBJ4S.js";
+} from "./chunk-R7ZFYQXK.js";
 import {
   getRequestStatus,
   setRequestStatus,
@@ -58,7 +58,7 @@ import {
   runStopHooks,
   runUserPromptSubmitHooks,
   updateHookTranscriptForMessages
-} from "./chunk-ZJRV37OB.js";
+} from "./chunk-L4SLWLL4.js";
 import {
   getPybAgentSessionId,
   setPybAgentSessionId
@@ -71,35 +71,35 @@ import {
   getOutputStyleSystemPromptAdditions,
   resolveOutputStyleName,
   setCurrentOutputStyle
-} from "./chunk-L3CRUW5N.js";
+} from "./chunk-6TCMZRGU.js";
 import {
   fetchCustomModels,
   getModelFeatures
-} from "./chunk-MFGMZQ5K.js";
+} from "./chunk-LV4ZPXWT.js";
 import {
   queryLLM,
   queryQuick,
   verifyApiKey
-} from "./chunk-XCYNR4QA.js";
+} from "./chunk-ZNVJWNLM.js";
 import {
   listAllContentFiles,
   ripGrep,
   tree
-} from "./chunk-VJJWEHXV.js";
+} from "./chunk-JFAMPGKZ.js";
 import {
   getCustomCommandDirectories,
   hasCustomCommands,
   loadCustomCommands,
   reloadCustomCommands
-} from "./chunk-CCTW7Q7I.js";
+} from "./chunk-SUKOZLBC.js";
 import {
   loadToolPermissionContextFromDisk,
   persistToolPermissionUpdateToDisk
-} from "./chunk-DLL2KASH.js";
+} from "./chunk-JGWTGEOZ.js";
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback
-} from "./chunk-7LAOOICJ.js";
+} from "./chunk-PNWXLCCW.js";
 import {
   applyToolPermissionContextUpdate,
   createDefaultToolPermissionContext
@@ -112,7 +112,7 @@ import {
   resetReminderSession,
   setTodos,
   systemReminderService
-} from "./chunk-CRYTR7MS.js";
+} from "./chunk-WHIPLCBW.js";
 import {
   getSessionState
 } from "./chunk-ERMQRV55.js";
@@ -121,7 +121,7 @@ import {
   getActiveAgents,
   getAgentByType,
   getAllAgents
-} from "./chunk-BWW4W5S3.js";
+} from "./chunk-PIBCLO26.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
@@ -154,22 +154,22 @@ import {
   processUserInput,
   reorderMessages,
   stripSystemMessages
-} from "./chunk-U54F36AF.js";
+} from "./chunk-XCPLWODM.js";
 import {
   ModelManager,
   getModelManager,
   isDefaultSlowAndCapableModel
-} from "./chunk-7SOGBPYD.js";
+} from "./chunk-UMS7XQYU.js";
 import {
   getCodeStyle,
   getContext,
   getGitState,
   getIsGit,
   getProjectDocs
-} from "./chunk-E5AKMKAN.js";
+} from "./chunk-6WEKTLK3.js";
 import {
   getTheme
-} from "./chunk-H7QRLSF4.js";
+} from "./chunk-SWOOXSKP.js";
 import {
   DEFAULT_GLOBAL_CONFIG,
   enableConfigs,
@@ -182,7 +182,7 @@ import {
   saveGlobalConfig,
   setAllPointersToModel,
   setModelPointer
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-JIR4R742.js";
 import {
   AbortError
 } from "./chunk-RQVLBMP7.js";
@@ -191,7 +191,7 @@ import {
   getCurrentRequest,
   logUserFriendly,
   markPhase
-} from "./chunk-LWQDVWXJ.js";
+} from "./chunk-IGUM6BLV.js";
 import {
   ASCII_LOGO,
   BunShell,
@@ -227,10 +227,10 @@ import {
   renderBashNotification,
   setActivePlanConversationKey,
   setCwd
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-RK6MQL4B.js";
 import {
   MACRO
-} from "./chunk-RI3CMWN4.js";
+} from "./chunk-IL74HDNG.js";
 import {
   formatTotalCost,
   getTotalAPIDuration,
@@ -418,7 +418,7 @@ var getCommandSubcommandPrefix = memoize(
 var getCommandPrefix = memoize(
   async (command4, abortSignal) => {
     const { systemPrompt, userPrompt } = buildBashCommandPrefixDetectionPrompt(command4);
-    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-6NG2NWFG.js");
+    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-EOQAKUSP.js");
     const response = await queryQuick2({
       systemPrompt,
       userPrompt,
@@ -4458,7 +4458,7 @@ function formatParseError(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function defaultGateQuery(args) {
-  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-6NG2NWFG.js");
+  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-EOQAKUSP.js");
   const messages = [
     {
       type: "user",
@@ -11013,7 +11013,7 @@ async function createAndStoreApiKey(accessToken) {
       }
       saveGlobalConfig(config2);
       try {
-        const { resetAnthropicClient } = await import("./llm-6NG2NWFG.js");
+        const { resetAnthropicClient } = await import("./llm-EOQAKUSP.js");
         resetAnthropicClient();
       } catch {
       }
@@ -15295,7 +15295,7 @@ async function refreshPluginRuntimeFromInstalls() {
   const existingRoots = getSessionPlugins().map((p) => p.rootDir);
   const dirs = Array.from(/* @__PURE__ */ new Set([...existingRoots, ...installedRoots]));
   if (dirs.length === 0) return [];
-  const { configureSessionPlugins } = await import("./pluginRuntime-JCULYGGU.js");
+  const { configureSessionPlugins } = await import("./pluginRuntime-6UJECISI.js");
   const { errors } = await configureSessionPlugins({ pluginDirs: dirs });
   return errors;
 }
@@ -15964,7 +15964,7 @@ async function call(onDone, context) {
     ModelConfig,
     {
       onClose: () => {
-        import("./model-IP76FW55.js").then(({ reloadModelManager: reloadModelManager2 }) => {
+        import("./model-BEHNOHSJ.js").then(({ reloadModelManager: reloadModelManager2 }) => {
           reloadModelManager2();
           triggerModelConfigChange();
           onDone();
@@ -23223,7 +23223,7 @@ function useStatusLine() {
 // src/ui/components/PromptInput.tsx
 async function interpretHashCommand(input) {
   try {
-    const { queryQuick: queryQuick2 } = await import("./llm-6NG2NWFG.js");
+    const { queryQuick: queryQuick2 } = await import("./llm-EOQAKUSP.js");
     const systemPrompt = [
       "You're helping the user structure notes that will be added to their PYB.md file.",
       "Format the user's input into a well-structured note that will be useful for later reference.",
@@ -23536,7 +23536,7 @@ function PromptInput({
     if (messages2.length) {
       if (mode === "bash") {
         onQuery(messages2, newAbortController).then(async () => {
-          const { getCwd: getCwd2 } = await import("./state-LTYC7FWM.js");
+          const { getCwd: getCwd2 } = await import("./state-HSCSCTYO.js");
           setCurrentPwd(getCwd2());
         });
       } else {
@@ -26322,7 +26322,7 @@ import { homedir as homedir7 } from "os";
 // src/commands/agents/generation.ts
 import { randomUUID as randomUUID5 } from "crypto";
 async function generateAgentWithClaude(prompt) {
-  const { queryModel } = await import("./llm-6NG2NWFG.js");
+  const { queryModel } = await import("./llm-EOQAKUSP.js");
   const systemPrompt = `You are an expert at creating AI agent configurations. Based on the user's description, generate a specialized agent configuration.
 
 Return your response as a JSON object with exactly these fields:
@@ -29490,6 +29490,87 @@ function WebFetchPermissionRequest({
   );
 }
 
+// src/utils/bash-parser/parser.ts
+import { parse as parse7 } from "shell-quote";
+function parseBashScript(script) {
+  let entries;
+  try {
+    entries = parse7(script);
+  } catch (e) {
+    return [];
+  }
+  const commands = [];
+  let currentArgs = [];
+  const flush = () => {
+    if (currentArgs.length > 0) {
+      commands.push({
+        program: currentArgs[0],
+        args: currentArgs.slice(1),
+        original: currentArgs.join(" ")
+        // Approximate reconstruction
+      });
+      currentArgs = [];
+    }
+  };
+  for (const entry of entries) {
+    if (typeof entry === "string") {
+      currentArgs.push(entry);
+    } else if (entry && typeof entry === "object" && "op" in entry) {
+      if (entry.op === "glob") {
+        currentArgs.push(entry.pattern);
+      } else {
+        flush();
+      }
+    } else if (entry && typeof entry === "object" && "comment" in entry) {
+    }
+  }
+  flush();
+  return commands;
+}
+
+// src/utils/bash-parser/validator.ts
+async function validateSafety(script) {
+  const commands = parseBashScript(script);
+  for (const cmd of commands) {
+    if (cmd.program === "rm") {
+      const isRecursive = cmd.args.some((arg) => /^-.*r/.test(arg));
+      const criticalPaths = [
+        "/",
+        "/*",
+        "/etc",
+        "/var",
+        "/usr",
+        "/bin",
+        "/sbin",
+        "/boot",
+        "/dev",
+        "/sys",
+        "/proc",
+        "/lib",
+        "/lib64",
+        "/opt",
+        "C:\\",
+        "C:/",
+        "C:\\Windows",
+        "C:/Windows",
+        "C:\\Program Files",
+        "C:/Program Files"
+      ];
+      const targetsCritical = cmd.args.some((arg) => {
+        return criticalPaths.some(
+          (critical) => arg === critical || arg.startsWith(critical + "/") || arg.startsWith(critical + "\\")
+        ) || arg.startsWith("..");
+      });
+      if (isRecursive && targetsCritical) {
+        throw new Error(`Security Alert: Potentially dangerous recursive deletion detected: "${cmd.original}". Execution blocked.`);
+      }
+      if (cmd.args.includes("/") || cmd.args.includes("C:\\") || cmd.args.includes("C:/")) {
+        throw new Error(`Security Alert: Root deletion detected: "${cmd.original}". Execution blocked.`);
+      }
+    }
+  }
+}
+
 // src/tools/system/BashTool/BashTool.tsx
 function formatDuration(ms) {
   if (ms < 6e4) {
@@ -29585,6 +29666,14 @@ var BashTool = {
   },
   async validateInput({ command: command4, timeout, dangerouslyDisableSandbox, cwd: cwd2 }, context) {
     const trimmed = command4.trim();
+    try {
+      await validateSafety(trimmed);
+    } catch (e) {
+      return {
+        result: false,
+        message: e.message
+      };
+    }
     if (/^ls(\s+|$)/.test(trimmed) && !trimmed.includes("-")) {
       return {
         result: false,