pybao-cli 1.3.42 → 1.3.44

package/dist/{chunk-7SOGBPYD.js → chunk-FE3MRJ7F.js}

@@ -3,13 +3,13 @@ const require = __pybCreateRequire(import.meta.url);
 import {
   getGlobalConfig,
   saveGlobalConfig
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   debug
-} from "./chunk-LWQDVWXJ.js";
+} from "./chunk-NBLIMAPB.js";
 import {
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/utils/model/index.ts
 import { memoize } from "lodash-es";

package/dist/{chunk-E5AKMKAN.js → chunk-FPSETIH6.js}

@@ -5,17 +5,17 @@ import {
   getGlobalConfig,
   getOrCreateUserID,
   saveCurrentProjectConfig
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   SESSION_ID,
   env,
   execFileNoThrow,
   getCwd,
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 import {
   MACRO
-} from "./chunk-RI3CMWN4.js";
+} from "./chunk-QVUJ6WJZ.js";
 import {
   __require
 } from "./chunk-I3J4JYES.js";

package/dist/{chunk-MFGMZQ5K.js → chunk-G22THW43.js}

@@ -6,12 +6,12 @@ import {
 } from "./chunk-ERMQRV55.js";
 import {
   getGlobalConfig
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   debug,
   getCurrentRequest,
   logAPIError
-} from "./chunk-LWQDVWXJ.js";
+} from "./chunk-NBLIMAPB.js";
 
 // src/services/ai/openai.ts
 import { ProxyAgent, fetch } from "undici";

package/dist/{chunk-7LAOOICJ.js → chunk-I4OD44YI.js}

@@ -3,7 +3,7 @@ const require = __pybCreateRequire(import.meta.url);
 import {
   getCwd,
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/utils/config/settingsFiles.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";

package/dist/{chunk-ZJRV37OB.js → chunk-KAWPVVO4.js}

@@ -5,14 +5,14 @@ import {
 } from "./chunk-B6IMQJZM.js";
 import {
   loadSettingsWithLegacyFallback
-} from "./chunk-7LAOOICJ.js";
+} from "./chunk-I4OD44YI.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
 import {
   getCwd,
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/utils/session/pybHooks.ts
 import { spawn } from "child_process";
@@ -496,7 +496,7 @@ async function runPromptHook(args) {
     fallbackTimeoutMs: args.fallbackTimeoutMs
   });
   try {
-    const { queryQuick } = await import("./llmLazy-7SHYMBDJ.js");
+    const { queryQuick } = await import("./llmLazy-NXKJNC2G.js");
     const systemPrompt = [
       "You are executing a Pyb prompt hook.",
       "Return a single JSON object only (no markdown, no prose).",

package/dist/{chunk-UFWHOIFA.js → chunk-LBHF6BS2.js}

@@ -3,13 +3,13 @@ const require = __pybCreateRequire(import.meta.url);
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback
-} from "./chunk-7LAOOICJ.js";
+} from "./chunk-I4OD44YI.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
 import {
   getTheme
-} from "./chunk-H7QRLSF4.js";
+} from "./chunk-A7BD4CXP.js";
 import {
   addMcprcServerForTesting,
   getCurrentProjectConfig,
@@ -19,13 +19,13 @@ import {
   safeParseJSON,
   saveCurrentProjectConfig,
   saveGlobalConfig
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   PRODUCT_COMMAND,
   PRODUCT_NAME,
   getCwd,
   logMCPError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/services/mcp/client.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";

package/dist/{chunk-P2UA7K7C.js → chunk-LZUURGDV.js}

@@ -5,12 +5,12 @@ import {
 } from "./chunk-RQVLBMP7.js";
 import {
   debug
-} from "./chunk-LWQDVWXJ.js";
+} from "./chunk-NBLIMAPB.js";
 import {
   getCwd,
   getGlobalConfigFilePath,
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/core/config/schema.ts
 function isAutoUpdaterStatus(value) {
@@ -660,7 +660,7 @@ function setModelPointer(pointer, modelName) {
     }
   };
   saveGlobalConfig(updatedConfig);
-  import("./model-IP76FW55.js").then(({ reloadModelManager }) => {
+  import("./model-W6KAPOMM.js").then(({ reloadModelManager }) => {
     reloadModelManager();
   });
 }

package/dist/{chunk-DLL2KASH.js → chunk-NAEAT6CC.js}

@@ -4,18 +4,18 @@ import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback,
   saveSettingsToPrimaryAndSyncLegacy
-} from "./chunk-7LAOOICJ.js";
+} from "./chunk-I4OD44YI.js";
 import {
   createDefaultToolPermissionContext,
   isPersistableToolPermissionDestination
 } from "./chunk-UNNVICVU.js";
 import {
   getCurrentProjectConfig
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   getCwd,
   logError
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/utils/permissions/toolPermissionSettings.ts
 function uniqueStrings(value) {

package/dist/{chunk-LWQDVWXJ.js → chunk-NBLIMAPB.js}

@@ -2,7 +2,7 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   SESSION_ID
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 
 // src/utils/log/debugLogger.ts
 import { existsSync, mkdirSync, appendFileSync } from "fs";

package/dist/{chunk-V6OEXS6Q.js → chunk-NDUV7XH4.js}

@@ -2,7 +2,7 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   listPybAgentSessions
-} from "./chunk-FJ5SYR7F.js";
+} from "./chunk-DTDUB7LG.js";
 import {
   DEFAULT_TIMEOUT_MS,
   FallbackToolUseRejectedMessage,
@@ -16,11 +16,11 @@ import {
   listMCPServers,
   loadMergedSettings,
   normalizeSandboxRuntimeConfigFromSettings
-} from "./chunk-UFWHOIFA.js";
+} from "./chunk-LBHF6BS2.js";
 import {
   formatValidationResult,
   validatePluginOrMarketplacePath
-} from "./chunk-LIPAFDDK.js";
+} from "./chunk-DTLOHNDH.js";
 import {
   addMarketplace,
   disableSkillPlugin,
@@ -33,15 +33,15 @@ import {
   refreshMarketplaceAsync,
   removeMarketplace,
   uninstallSkillPlugin
-} from "./chunk-QAQGPGLD.js";
+} from "./chunk-AIE6TFWI.js";
 import {
   loadPybAgentSessionMessages
-} from "./chunk-ABDKXH43.js";
+} from "./chunk-5XDINARX.js";
 import {
   appendSessionCustomTitleRecord,
   appendSessionJsonlFromMessage,
   appendSessionTagRecord
-} from "./chunk-G4BXBJ4S.js";
+} from "./chunk-FBVDMTHQ.js";
 import {
   getRequestStatus,
   setRequestStatus,
@@ -58,7 +58,7 @@ import {
   runStopHooks,
   runUserPromptSubmitHooks,
   updateHookTranscriptForMessages
-} from "./chunk-ZJRV37OB.js";
+} from "./chunk-KAWPVVO4.js";
 import {
   getPybAgentSessionId,
   setPybAgentSessionId
@@ -71,35 +71,35 @@ import {
   getOutputStyleSystemPromptAdditions,
   resolveOutputStyleName,
   setCurrentOutputStyle
-} from "./chunk-L3CRUW5N.js";
+} from "./chunk-WZQQI3WY.js";
 import {
   fetchCustomModels,
   getModelFeatures
-} from "./chunk-MFGMZQ5K.js";
+} from "./chunk-G22THW43.js";
 import {
   queryLLM,
   queryQuick,
   verifyApiKey
-} from "./chunk-XCYNR4QA.js";
+} from "./chunk-6GSWJDP7.js";
 import {
   listAllContentFiles,
   ripGrep,
   tree
-} from "./chunk-VJJWEHXV.js";
+} from "./chunk-RHOMDJ4W.js";
 import {
   getCustomCommandDirectories,
   hasCustomCommands,
   loadCustomCommands,
   reloadCustomCommands
-} from "./chunk-CCTW7Q7I.js";
+} from "./chunk-AVJMRJOF.js";
 import {
   loadToolPermissionContextFromDisk,
   persistToolPermissionUpdateToDisk
-} from "./chunk-DLL2KASH.js";
+} from "./chunk-NAEAT6CC.js";
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback
-} from "./chunk-7LAOOICJ.js";
+} from "./chunk-I4OD44YI.js";
 import {
   applyToolPermissionContextUpdate,
   createDefaultToolPermissionContext
@@ -112,7 +112,7 @@ import {
   resetReminderSession,
   setTodos,
   systemReminderService
-} from "./chunk-CRYTR7MS.js";
+} from "./chunk-R5B3QREX.js";
 import {
   getSessionState
 } from "./chunk-ERMQRV55.js";
@@ -121,7 +121,7 @@ import {
   getActiveAgents,
   getAgentByType,
   getAllAgents
-} from "./chunk-BWW4W5S3.js";
+} from "./chunk-S5PEPGE4.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
@@ -154,22 +154,22 @@ import {
   processUserInput,
   reorderMessages,
   stripSystemMessages
-} from "./chunk-U54F36AF.js";
+} from "./chunk-5CTMULCY.js";
 import {
   ModelManager,
   getModelManager,
   isDefaultSlowAndCapableModel
-} from "./chunk-7SOGBPYD.js";
+} from "./chunk-FE3MRJ7F.js";
 import {
   getCodeStyle,
   getContext,
   getGitState,
   getIsGit,
   getProjectDocs
-} from "./chunk-E5AKMKAN.js";
+} from "./chunk-FPSETIH6.js";
 import {
   getTheme
-} from "./chunk-H7QRLSF4.js";
+} from "./chunk-A7BD4CXP.js";
 import {
   DEFAULT_GLOBAL_CONFIG,
   enableConfigs,
@@ -182,7 +182,7 @@ import {
   saveGlobalConfig,
   setAllPointersToModel,
   setModelPointer
-} from "./chunk-P2UA7K7C.js";
+} from "./chunk-LZUURGDV.js";
 import {
   AbortError
 } from "./chunk-RQVLBMP7.js";
@@ -191,7 +191,7 @@ import {
   getCurrentRequest,
   logUserFriendly,
   markPhase
-} from "./chunk-LWQDVWXJ.js";
+} from "./chunk-NBLIMAPB.js";
 import {
   ASCII_LOGO,
   BunShell,
@@ -227,10 +227,10 @@ import {
   renderBashNotification,
   setActivePlanConversationKey,
   setCwd
-} from "./chunk-DSN5QDEO.js";
+} from "./chunk-3VMVNZBA.js";
 import {
   MACRO
-} from "./chunk-RI3CMWN4.js";
+} from "./chunk-QVUJ6WJZ.js";
 import {
   formatTotalCost,
   getTotalAPIDuration,
@@ -418,7 +418,7 @@ var getCommandSubcommandPrefix = memoize(
 var getCommandPrefix = memoize(
   async (command4, abortSignal) => {
     const { systemPrompt, userPrompt } = buildBashCommandPrefixDetectionPrompt(command4);
-    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-6NG2NWFG.js");
+    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-22YH2ZPY.js");
     const response = await queryQuick2({
       systemPrompt,
       userPrompt,
@@ -4458,7 +4458,7 @@ function formatParseError(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function defaultGateQuery(args) {
-  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-6NG2NWFG.js");
+  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-22YH2ZPY.js");
   const messages = [
     {
       type: "user",
@@ -11013,7 +11013,7 @@ async function createAndStoreApiKey(accessToken) {
       }
       saveGlobalConfig(config2);
       try {
-        const { resetAnthropicClient } = await import("./llm-6NG2NWFG.js");
+        const { resetAnthropicClient } = await import("./llm-22YH2ZPY.js");
         resetAnthropicClient();
       } catch {
       }
@@ -15295,7 +15295,7 @@ async function refreshPluginRuntimeFromInstalls() {
   const existingRoots = getSessionPlugins().map((p) => p.rootDir);
   const dirs = Array.from(/* @__PURE__ */ new Set([...existingRoots, ...installedRoots]));
   if (dirs.length === 0) return [];
-  const { configureSessionPlugins } = await import("./pluginRuntime-JCULYGGU.js");
+  const { configureSessionPlugins } = await import("./pluginRuntime-ULGPYEC2.js");
   const { errors } = await configureSessionPlugins({ pluginDirs: dirs });
   return errors;
 }
@@ -15964,7 +15964,7 @@ async function call(onDone, context) {
     ModelConfig,
     {
       onClose: () => {
-        import("./model-IP76FW55.js").then(({ reloadModelManager: reloadModelManager2 }) => {
+        import("./model-W6KAPOMM.js").then(({ reloadModelManager: reloadModelManager2 }) => {
           reloadModelManager2();
           triggerModelConfigChange();
           onDone();
@@ -23223,7 +23223,7 @@ function useStatusLine() {
 // src/ui/components/PromptInput.tsx
 async function interpretHashCommand(input) {
   try {
-    const { queryQuick: queryQuick2 } = await import("./llm-6NG2NWFG.js");
+    const { queryQuick: queryQuick2 } = await import("./llm-22YH2ZPY.js");
     const systemPrompt = [
       "You're helping the user structure notes that will be added to their PYB.md file.",
       "Format the user's input into a well-structured note that will be useful for later reference.",
@@ -23536,7 +23536,7 @@ function PromptInput({
     if (messages2.length) {
       if (mode === "bash") {
         onQuery(messages2, newAbortController).then(async () => {
-          const { getCwd: getCwd2 } = await import("./state-LTYC7FWM.js");
+          const { getCwd: getCwd2 } = await import("./state-LIRDPMWY.js");
           setCurrentPwd(getCwd2());
         });
       } else {
@@ -26322,7 +26322,7 @@ import { homedir as homedir7 } from "os";
 // src/commands/agents/generation.ts
 import { randomUUID as randomUUID5 } from "crypto";
 async function generateAgentWithClaude(prompt) {
-  const { queryModel } = await import("./llm-6NG2NWFG.js");
+  const { queryModel } = await import("./llm-22YH2ZPY.js");
   const systemPrompt = `You are an expert at creating AI agent configurations. Based on the user's description, generate a specialized agent configuration.
 
 Return your response as a JSON object with exactly these fields:
@@ -29490,6 +29490,137 @@ function WebFetchPermissionRequest({
   );
 }
 
+// src/utils/tree-sitter/loader.ts
+import treeSitterWasm from "web-tree-sitter/web-tree-sitter.wasm";
+import treeSitterBashWasm from "tree-sitter-bash/tree-sitter-bash.wasm";
+import { Parser, Language } from "web-tree-sitter";
+
+// src/utils/tree-sitter/resolve-wasm.ts
+import { fileURLToPath } from "url";
+var resolveWasm = (asset) => {
+  if (asset.startsWith("file://")) return fileURLToPath(asset);
+  if (asset.startsWith("/") || /^[a-z]:/i.test(asset)) return asset;
+  const url2 = new URL(asset, import.meta.url);
+  return fileURLToPath(url2);
+};
+
+// src/utils/tree-sitter/loader.ts
+var parserInstance = null;
+var initParser = async () => {
+  if (parserInstance) return parserInstance;
+  const treeWasmPath = resolveWasm(treeSitterWasm);
+  const bashWasmPath = resolveWasm(treeSitterBashWasm);
+  await Parser.init({
+    locateFile: () => treeWasmPath
+  });
+  const bashLang = await Language.load(bashWasmPath);
+  const parser = new Parser();
+  parser.setLanguage(bashLang);
+  parserInstance = parser;
+  return parser;
+};
+
+// src/utils/tree-sitter/parser.ts
+var BashParser = class {
+  /**
+   * Parse a Bash script using Tree-Sitter.
+   * Ensures the parser is initialized before use.
+   */
+  static async parse(script) {
+    const parser = await initParser();
+    return parser.parse(script);
+  }
+  /**
+   * Validate a Bash script for safety.
+   * Returns true if safe, throws error if unsafe.
+   */
+  static async validate(script) {
+    const tree2 = await this.parse(script);
+    const root = tree2.rootNode;
+    const commands = root.descendantsOfType("command");
+    for (const cmd of commands) {
+      const nameNode = cmd.childForFieldName("name");
+      if (!nameNode) continue;
+      const program = nameNode.text.trim();
+      if (program === "vim" || program === "nano") {
+        throw new Error(`Interactive command '${program}' is not supported.`);
+      }
+    }
+    return true;
+  }
+};
+
+// src/utils/bash-parser/validator.ts
+async function validateSafety(script) {
+  const tree2 = await BashParser.parse(script);
+  const root = tree2.rootNode;
+  validateNode(root, script);
+}
+function validateNode(node, script) {
+  if (node.type === "command") {
+    checkCommand(node, script);
+  }
+  for (let i = 0; i < node.childCount; i++) {
+    const child = node.child(i);
+    if (child) validateNode(child, script);
+  }
+}
+function checkCommand(node, script) {
+  const nameNode = node.childForFieldName("name");
+  if (!nameNode) return;
+  const commandName = nameNode.text.trim();
+  if (commandName === "rm") {
+    const args = [];
+    for (let i = 0; i < node.childCount; i++) {
+      const child = node.child(i);
+      if (!child) continue;
+      if (child.id === nameNode.id) continue;
+      if (["word", "string", "raw_string"].includes(child.type)) {
+        args.push(child.text);
+      }
+    }
+    const isRecursive = args.some((arg) => /^-.*r/.test(arg));
+    const criticalPaths = [
+      "/",
+      "/*",
+      "/etc",
+      "/var",
+      "/usr",
+      "/bin",
+      "/sbin",
+      "/boot",
+      "/dev",
+      "/sys",
+      "/proc",
+      "/lib",
+      "/lib64",
+      "/opt",
+      "C:\\",
+      "C:/",
+      "C:\\Windows",
+      "C:/Windows",
+      "C:\\Program Files",
+      "C:/Program Files"
+    ];
+    const targetsCritical = args.some((arg) => {
+      return criticalPaths.some(
+        (critical) => arg === critical || arg.startsWith(critical + "/") || arg.startsWith(critical + "\\")
+      ) || arg.startsWith("..");
+    });
+    const originalCommand = node.text;
+    if (isRecursive && targetsCritical) {
+      throw new Error(`Security Alert: Potentially dangerous recursive deletion detected: "${originalCommand}". Execution blocked.`);
+    }
+    const normalizedArgs = args.map((arg) => arg.replace(/\\\\/g, "/").replace(/\\/g, "/"));
+    const isWindowsRoot = normalizedArgs.some(
+      (arg) => /^c:(\/|\\)?$/i.test(arg)
+    );
+    if (normalizedArgs.includes("/") || isWindowsRoot) {
+      throw new Error(`Security Alert: Root deletion detected: "${originalCommand}". Execution blocked.`);
+    }
+  }
+}
+
 // src/tools/system/BashTool/BashTool.tsx
 function formatDuration(ms) {
   if (ms < 6e4) {
@@ -29585,6 +29716,14 @@ var BashTool = {
   },
   async validateInput({ command: command4, timeout, dangerouslyDisableSandbox, cwd: cwd2 }, context) {
     const trimmed = command4.trim();
+    try {
+      await validateSafety(trimmed);
+    } catch (e) {
+      return {
+        result: false,
+        message: e.message
+      };
+    }
     if (/^ls(\s+|$)/.test(trimmed) && !trimmed.includes("-")) {
       return {
         result: false,
@@ -29724,6 +29863,24 @@ var BashTool = {
     const userPrompt = typeof context?.options?.lastUserPrompt === "string" ? context.options.lastUserPrompt.trim() : "";
     const commandDescription = typeof description2 === "string" ? description2.trim() : "";
     const effectiveCwd = cwd2 ? isAbsolute10(cwd2) ? cwd2 : resolve10(getCwd(), cwd2) : getCwd();
+    try {
+      await validateSafety(command4);
+    } catch (error) {
+      const msg = error instanceof Error ? error.message : String(error);
+      const data = {
+        stdout: "",
+        stdoutLines: 0,
+        stderr: msg,
+        stderrLines: msg.split(/\r?\n/).length,
+        interrupted: false
+      };
+      yield {
+        type: "result",
+        resultForAssistant: this.renderResultForAssistant(data),
+        data
+      };
+      return;
+    }
     const destructiveBlock = getBashDestructiveCommandBlock({
       command: command4,
       cwd: effectiveCwd,