pybao-cli 1.4.69 → 1.4.70

package/dist/{chunk-VGI3MJCN.js → chunk-IXT4AZD4.js}

@@ -2,15 +2,15 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   loadSettingsWithLegacyFallback
-} from "./chunk-CH7AQMFI.js";
+} from "./chunk-DPQAF6WJ.js";
 import {
   debug
-} from "./chunk-ATTYOEZT.js";
+} from "./chunk-QVCL2JNZ.js";
 import {
   env,
   getSessionRoot,
   resolveXdgDataPath
-} from "./chunk-BBN46KXV.js";
+} from "./chunk-GDMZZQXA.js";
 import {
   __require
 } from "./chunk-I3J4JYES.js";

package/dist/{chunk-DVWYKOS2.js → chunk-KFDO6W7P.js}

@@ -2,13 +2,13 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   ripGrepWithStatus
-} from "./chunk-IYTU4OJV.js";
+} from "./chunk-F2SIWWFK.js";
 import {
   getCurrentProjectConfig,
   getGlobalConfig,
   getOrCreateUserID,
   saveCurrentProjectConfig
-} from "./chunk-XWTPHVQ2.js";
+} from "./chunk-4BMX3A66.js";
 import {
   SESSION_ID,
   env,
@@ -16,10 +16,10 @@ import {
   getCwd,
   isContextScanDisabled,
   logError
-} from "./chunk-BBN46KXV.js";
+} from "./chunk-GDMZZQXA.js";
 import {
   MACRO
-} from "./chunk-ULUZRDEZ.js";
+} from "./chunk-2IKQLU7Z.js";
 import {
   __require
 } from "./chunk-I3J4JYES.js";

package/dist/{chunk-Q4VBSC45.js → chunk-KMK42JY2.js}

@@ -5,7 +5,7 @@ import {
   getCwd,
   resolveXdgCachePath,
   resolveXdgDataPath
-} from "./chunk-BBN46KXV.js";
+} from "./chunk-GDMZZQXA.js";
 
 // src/services/plugins/skillMarketplace.ts
 import {

package/dist/{chunk-JQEGLFMO.js → chunk-L2HD6XQ6.js}

@@ -3,18 +3,18 @@ const require = __pybCreateRequire(import.meta.url);
 import {
   formatValidationResult,
   validatePluginOrMarketplacePath
-} from "./chunk-GAOK4KW3.js";
+} from "./chunk-A4FOTJXO.js";
 import {
   loadPybAgentSessionMessages
-} from "./chunk-64FPFNEO.js";
+} from "./chunk-6JEMB3QO.js";
 import {
   listPybAgentSessions
-} from "./chunk-FQLUVB5C.js";
+} from "./chunk-F47IOKHV.js";
 import {
   appendSessionCustomTitleRecord,
   appendSessionJsonlFromMessage,
   appendSessionTagRecord
-} from "./chunk-JCUPO5SD.js";
+} from "./chunk-QEU6CHZ7.js";
 import {
   drainHookSystemPromptAdditions,
   getHookTranscriptPath,
@@ -26,7 +26,7 @@ import {
   runStopHooks,
   runUserPromptSubmitHooks,
   updateHookTranscriptForMessages
-} from "./chunk-H5KMZAUF.js";
+} from "./chunk-GCCDWJ5I.js";
 import {
   DEFAULT_OUTPUT_STYLE,
   getAvailableOutputStyles,
@@ -35,17 +35,17 @@ import {
   getOutputStyleSystemPromptAdditions,
   resolveOutputStyleName,
   setCurrentOutputStyle
-} from "./chunk-TCCVAS7Q.js";
+} from "./chunk-CS53ICZD.js";
 import {
   fetchCustomModels,
   getModelFeatures,
   getSessionState
-} from "./chunk-5SEYGIMS.js";
+} from "./chunk-UP22SYNJ.js";
 import {
   queryLLM,
   queryQuick,
   verifyApiKey
-} from "./chunk-Q7QN2OT2.js";
+} from "./chunk-HDKWC43V.js";
 import {
   DEFAULT_TIMEOUT_MS,
   FallbackToolUseRejectedMessage,
@@ -59,7 +59,7 @@ import {
   listMCPServers,
   loadMergedSettings,
   normalizeSandboxRuntimeConfigFromSettings
-} from "./chunk-T7U272IW.js";
+} from "./chunk-VCIMKWMR.js";
 import {
   addMarketplace,
   disableSkillPlugin,
@@ -72,11 +72,11 @@ import {
   refreshMarketplaceAsync,
   removeMarketplace,
   uninstallSkillPlugin
-} from "./chunk-Q4VBSC45.js";
+} from "./chunk-KMK42JY2.js";
 import {
   loadToolPermissionContextFromDisk,
   persistToolPermissionUpdateToDisk
-} from "./chunk-7EX3H2LR.js";
+} from "./chunk-WDEUNZOU.js";
 import {
   applyToolPermissionContextUpdate,
   applyToolPermissionContextUpdates,
@@ -87,13 +87,13 @@ import {
   generateSystemReminders,
   resetReminderSession,
   systemReminderService
-} from "./chunk-T36V23CZ.js";
+} from "./chunk-VR3QP6DF.js";
 import {
   clearAgentCache,
   getActiveAgents,
   getAgentByType,
   getAllAgents
-} from "./chunk-HHQKHMVN.js";
+} from "./chunk-2KLTF2RL.js";
 import {
   API_ERROR_MESSAGE_PREFIX,
   CANCEL_MESSAGE,
@@ -124,7 +124,7 @@ import {
   processUserInput,
   reorderMessages,
   stripSystemMessages
-} from "./chunk-UP22WCEV.js";
+} from "./chunk-TCH73D5U.js";
 import {
   getRequestStatus,
   setRequestStatus,
@@ -154,7 +154,7 @@ import {
   normalizeFilePath,
   readTextContent,
   writeTextContent
-} from "./chunk-ZOGQ47JZ.js";
+} from "./chunk-IGINSXE5.js";
 import {
   parseBlockEdits
 } from "./chunk-QWIBSCDN.js";
@@ -164,18 +164,18 @@ import {
   ParserRegistry,
   initParser,
   loadLanguage
-} from "./chunk-I5KCNNUI.js";
+} from "./chunk-GID4HETQ.js";
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback,
   readSettingsFile
-} from "./chunk-CH7AQMFI.js";
+} from "./chunk-DPQAF6WJ.js";
 import {
   getCustomCommandDirectories,
   hasCustomCommands,
   loadCustomCommands,
   reloadCustomCommands
-} from "./chunk-L5BXFKV7.js";
+} from "./chunk-REZSGPLV.js";
 import {
   getSessionPlugins
 } from "./chunk-BJSWTHRM.js";
@@ -183,7 +183,7 @@ import {
   ModelManager,
   getModelManager,
   isDefaultSlowAndCapableModel
-} from "./chunk-4EUFV7IZ.js";
+} from "./chunk-GL6HVQ7Y.js";
 import {
   getCodeStyle,
   getContext,
@@ -191,13 +191,13 @@ import {
   getIsGit,
   getProjectDocs,
   getProjectStructureStatisticsBlock
-} from "./chunk-DVWYKOS2.js";
+} from "./chunk-KFDO6W7P.js";
 import {
   ripGrep
-} from "./chunk-IYTU4OJV.js";
+} from "./chunk-F2SIWWFK.js";
 import {
   getTheme
-} from "./chunk-MQOUWZJB.js";
+} from "./chunk-FZKER2A6.js";
 import {
   DEFAULT_GLOBAL_CONFIG,
   enableConfigs,
@@ -210,7 +210,7 @@ import {
   saveGlobalConfig,
   setAllPointersToModel,
   setModelPointer
-} from "./chunk-XWTPHVQ2.js";
+} from "./chunk-4BMX3A66.js";
 import {
   AbortError
 } from "./chunk-RQVLBMP7.js";
@@ -219,7 +219,7 @@ import {
   getCurrentRequest,
   logUserFriendly,
   markPhase
-} from "./chunk-ATTYOEZT.js";
+} from "./chunk-QVCL2JNZ.js";
 import {
   ASCII_LOGO,
   BunShell,
@@ -260,10 +260,10 @@ import {
   setCwd,
   shouldApplyToolOutputTruncation,
   truncateToolOutput
-} from "./chunk-BBN46KXV.js";
+} from "./chunk-GDMZZQXA.js";
 import {
   MACRO
-} from "./chunk-ULUZRDEZ.js";
+} from "./chunk-2IKQLU7Z.js";
 import {
   __export
 } from "./chunk-I3J4JYES.js";
@@ -444,7 +444,7 @@ var getCommandSubcommandPrefix = memoize(
 var getCommandPrefix = memoize(
   async (command4, abortSignal) => {
     const { systemPrompt, userPrompt } = buildBashCommandPrefixDetectionPrompt(command4);
-    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-IBAT6C77.js");
+    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-5MR7DEOU.js");
     const response = await queryQuick2({
       systemPrompt,
       userPrompt,
@@ -4246,7 +4246,7 @@ function formatParseError(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function defaultGateQuery(args) {
-  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-IBAT6C77.js");
+  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-5MR7DEOU.js");
   const queryLLMFn = args.queryLLMOverride ?? queryLLM2;
   const messages = [
     {
@@ -6643,7 +6643,7 @@ var FileEditTool = {
     const originalFileContent = currentFileContent;
     let totalPatch = [];
     const { SmartEdit } = await import("./smart-edit-AWHJDSU6.js");
-    const { findLspAnchor } = await import("./lspAnchor-Y5ODO3C4.js");
+    const { findLspAnchor } = await import("./lspAnchor-YFDQNUX2.js");
     for (const op of editOperations) {
       const normalizedSearch = normalizeLineEndings(op.search);
       const normalizedReplace = normalizeLineEndings(op.replace);
@@ -7405,17 +7405,32 @@ var FileReadTool = {
     return /* @__PURE__ */ React13.createElement(FallbackToolUseRejectedMessage, null);
   },
   async validateInput({ file_path, offset, limit, symbol_name }) {
+    if (!file_path || file_path.trim() === "") {
+      return {
+        result: false,
+        message: "File path cannot be empty."
+      };
+    }
     const fullFilePath = normalizeFilePath(file_path);
     const fileCheck = secureFileService.safeGetFileInfo(fullFilePath);
     if (!fileCheck.success) {
-      const similarFilename = findSimilarFile(fullFilePath);
-      let message = "File does not exist.";
-      if (similarFilename) {
-        message += ` Did you mean ${similarFilename}?`;
-      }
-      message += "\nSuggestion: use LS/Glob on parent directories to confirm the real structure and filename before Read.";
-      message += "\nSuggestion: if the path came from search results, rerun Glob/Grep to confirm the latest path.";
-      message += "\nSuggestion: in multi-repo or multi-branch environments, confirm the current working directory and branch before locating.";
+      const error = fileCheck.error || "";
+      let message;
+      if (isSecurityError(error)) {
+        message = formatSecurityError(error);
+      } else if (error.includes("does not exist")) {
+        const similarFilename = findSimilarFile(fullFilePath);
+        message = "File does not exist.";
+        if (similarFilename) {
+          message += ` Did you mean ${similarFilename}?`;
+        }
+        message += "\nSuggestion: If the path came from search results, rerun Glob/Grep to confirm the latest path.Use LS/Glob on parent directories to confirm the real structure and filename before Read.";
+        message += "\nSuggestion: in multi-repo or multi-branch environments, confirm the current working directory and branch before locating.";
+      } else if (error.includes("too long")) {
+        message = "Path too long (max 4096 characters). Please provide a shorter path.";
+      } else {
+        message = error ? `Failed to access file: ${error}` : "Failed to access file. Please verify the path and try again.";
+      }
       return {
         result: false,
         message
@@ -7630,6 +7645,26 @@ var FileReadTool = {
   }
 };
 var formatFileSizeError = (sizeInBytes) => `File content (${Math.round(sizeInBytes / 1024)}KB) exceeds maximum allowed size (${Math.round(MAX_OUTPUT_SIZE / 1024)}KB). Please use offset and limit parameters to read specific portions of the file, or use the Grep tool to search for specific content.`;
+var isSecurityError = (error) => {
+  const patterns = [
+    "outside allowed directories",
+    "traversal characters",
+    "suspicious pattern"
+  ];
+  return patterns.some((pattern) => error.includes(pattern));
+};
+var formatSecurityError = (error) => {
+  if (error.includes("outside allowed directories")) {
+    return "Access denied: path is not allowed. Please use a path within the working directory.";
+  }
+  if (error.includes("traversal characters")) {
+    return "Access denied: path contains invalid traversal characters. Please provide an absolute path.";
+  }
+  if (error.includes("suspicious pattern")) {
+    return "Access denied: path contains suspicious characters. Please provide a valid file path.";
+  }
+  return "Access denied: path is not allowed.";
+};
 function createImageResponse(buffer, ext, originalSize) {
   const normalized = ext === ".jpg" || ext === ".jpeg" ? "image/jpeg" : ext === ".png" ? "image/png" : ext === ".gif" ? "image/gif" : "image/webp";
   return {
@@ -11278,7 +11313,7 @@ async function createAndStoreApiKey(accessToken) {
       }
       saveGlobalConfig(config2);
       try {
-        const { resetAnthropicClient } = await import("./llm-IBAT6C77.js");
+        const { resetAnthropicClient } = await import("./llm-5MR7DEOU.js");
         resetAnthropicClient();
       } catch {
       }
@@ -15645,7 +15680,7 @@ async function refreshPluginRuntimeFromInstalls() {
   const existingRoots = getSessionPlugins().map((p) => p.rootDir);
   const dirs = Array.from(/* @__PURE__ */ new Set([...existingRoots, ...installedRoots]));
   if (dirs.length === 0) return [];
-  const { configureSessionPlugins } = await import("./pluginRuntime-YHLTGW2O.js");
+  const { configureSessionPlugins } = await import("./pluginRuntime-J57C7K7K.js");
   const { errors } = await configureSessionPlugins({ pluginDirs: dirs });
   return errors;
 }
@@ -16314,7 +16349,7 @@ async function call(onDone, context) {
     ModelConfig,
     {
       onClose: () => {
-        import("./model-XO4IA6K3.js").then(({ reloadModelManager: reloadModelManager2 }) => {
+        import("./model-GYOM5HF3.js").then(({ reloadModelManager: reloadModelManager2 }) => {
           reloadModelManager2();
           triggerModelConfigChange();
           onDone();
@@ -25180,7 +25215,7 @@ function useStatusLine() {
 // src/ui/components/PromptInput.tsx
 async function interpretHashCommand(input) {
   try {
-    const { queryQuick: queryQuick2 } = await import("./llm-IBAT6C77.js");
+    const { queryQuick: queryQuick2 } = await import("./llm-5MR7DEOU.js");
     const systemPrompt = [
       "You're helping the user structure notes that will be added to their PYB.md file.",
       "Format the user's input into a well-structured note that will be useful for later reference.",
@@ -25493,7 +25528,7 @@ function PromptInput({
     if (messages2.length) {
       if (mode === "bash") {
         onQuery(messages2, newAbortController).then(async () => {
-          const { getCwd: getCwd2 } = await import("./state-YUFV22R5.js");
+          const { getCwd: getCwd2 } = await import("./state-NA4BTHFE.js");
           setCurrentPwd(getCwd2());
         });
       } else {
@@ -28672,7 +28707,7 @@ import { homedir as homedir8 } from "os";
 // src/commands/agents/generation.ts
 import { randomUUID as randomUUID6 } from "crypto";
 async function generateAgentWithClaude(prompt) {
-  const { queryModel } = await import("./llm-IBAT6C77.js");
+  const { queryModel } = await import("./llm-5MR7DEOU.js");
   const systemPrompt = `You are an expert at creating AI agent configurations. Based on the user's description, generate a specialized agent configuration.
 
 Return your response as a JSON object with exactly these fields: