thatgfsj-code 3.0.4 → 3.0.6

package/dist/session/index.js

@@ -1,6 +1,20 @@
 /**
  * Session Manager - Manages conversation history with auto-compaction
+ *
+ * v3.0.5 additions:
+ *   - Disk persistence: every completed round can be persisted to
+ *     ~/.thatgfsj/sessions/<id>.json, and /resume restores a previous
+ *     session. Files are validated on load (dangling tool_calls are
+ *     stripped) so a restored history can never produce a provider 400.
+ *   - reset(): starts a fresh conversation while KEEPING the system prompt
+ *     (the old clear() dropped it, leaving every later request unprompted).
+ *   - autoCompact: when history exceeds maxMessages it is compacted once
+ *     (atomic tool groups, see compactor.ts) instead of being silently
+ *     truncated every round. The TUI is notified via onAutoCompact.
  */
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, unlinkSync, statSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
 import { ContextCompactor } from './compactor.js';
 /**
  * v2.2.4 (port from v2.1.0): patterns that, if found in an assistant
@@ -9,19 +23,10 @@ import { ContextCompactor } from './compactor.js';
  * turn's LLM sees the marker and starts echoing it back, creating a
  * self-reinforcing "[已中断]" hallucination loop.
  *
- * v2.2.6.1 tightening (smoke-test driven): the design here is a
- * two-tier check:
- *   1. STRONG markers — unambiguous pollution, always drop:
- *      - `[已中断]` bracketed (the model emits this exact form)
- *      - `[interrupted]` bracketed English equivalent
- *   2. WEAK markers — only drop if the message is also short (<200
- *      chars). Long messages mentioning "response truncated" are
- *      legitimate conversation (e.g. user complaints about past
- *      behavior), not pollution.
- *
- * Earlier drafts matched bare `已中断` substrings and "response
- * truncated" anywhere in the message — both were too greedy and
- * dropped legitimate Chinese/English conversation.
+ * Two-tier check:
+ *   1. STRONG markers — unambiguous pollution, always drop.
+ *   2. WEAK markers — only drop if the message is also short (<200 chars),
+ *      doesn't end with '?' and has no temporal references.
  */
 const POLLUTION_STRONG = [
     /\[已中断\]/,
@@ -38,13 +43,6 @@ function looksPolluted(content) {
         return false;
     if (POLLUTION_STRONG.some(p => p.test(content)))
         return true;
-    // WEAK pattern gate:
-    //   - Message must be short (model got cut off mid-stream, so it
-    //     can't be long)
-    //   - Message must NOT end with '?' (questions are user complaints
-    //     about past behavior, not pollution)
-    //   - Message must NOT contain "last time" / "earlier" / "before"
-    //     (temporal references indicate user discussing past behavior)
     if (content.length >= 200)
         return false;
     if (/\?\s*$/.test(content.trim()))
@@ -55,49 +53,100 @@ function looksPolluted(content) {
         return true;
     return false;
 }
+export function sessionsDir() {
+    return join(homedir(), '.thatgfsj', 'sessions');
+}
+/**
+ * v3.0.5: shared load-time sanitizer. A restored history must never carry a
+ * tool_calls block without its results, or the next provider request 400s:
+ * - drop orphaned 'tool' messages (no preceding assistant tool_calls)
+ * - strip tool_calls from an assistant message whose results were lost
+ */
+export function sanitizeLoadedMessages(messages) {
+    const out = [];
+    let pendingCalls = 0;
+    for (const m of messages) {
+        if (m.role === 'tool') {
+            if (pendingCalls > 0) {
+                out.push(m);
+                pendingCalls--;
+            }
+            // else: orphaned tool result — drop
+            continue;
+        }
+        if (pendingCalls > 0) {
+            // A new non-tool message arrived before results completed: the
+            // previous assistant's tool_calls have no results — strip them.
+            for (let i = out.length - 1; i >= 0; i--) {
+                if (out[i].role === 'assistant' && out[i].tool_calls) {
+                    const fixed = { ...out[i] };
+                    delete fixed.tool_calls;
+                    fixed.content = fixed.content || '(tool calls dropped: results missing)';
+                    out[i] = fixed;
+                    break;
+                }
+            }
+            pendingCalls = 0;
+        }
+        if (m.role === 'assistant' && m.tool_calls && m.tool_calls.length > 0) {
+            pendingCalls = m.tool_calls.length;
+        }
+        out.push(m);
+    }
+    // Trailing dangling calls (crash mid-loop) — strip them too.
+    if (pendingCalls > 0) {
+        for (let i = out.length - 1; i >= 0; i--) {
+            if (out[i].role === 'assistant' && out[i].tool_calls) {
+                const fixed = { ...out[i] };
+                delete fixed.tool_calls;
+                fixed.content = fixed.content || '(tool calls dropped: results missing)';
+                out[i] = fixed;
+                break;
+            }
+        }
+    }
+    return out;
+}
 export class SessionManager {
     messages = [];
     sessionId;
     createdAt;
     compactor;
     maxMessages;
-    /** v2.2.4: counter for messages dropped by the pollution filter. */
     droppedCount = 0;
+    /** Whether history was compacted and the new-context toast not yet surfaced. */
+    lastCompaction = null;
+    /** Extra metadata recorded in the session file. */
+    meta;
     /**
-     * v3.0.0: callback invoked when the message count exceeds maxMessages.
-     * Reasonix principle: do not mutate messages to compact; instead, signal
-     * the TUI to suggest the user call /new (start a fresh session) so that
-     * the upstream prompt cache keeps a stable prefix. NWT auto-logs every
-     * meaningful event, so no history is lost — it just moves out of the
-     * live cache window.
+     * Called after history exceeded maxMessages and was compacted once.
+     * The TUI surfaces a toast; nobody is required to act.
      */
-    onSuggestNewSession;
+    onAutoCompact;
     constructor(maxMessages = 50, options) {
         this.maxMessages = maxMessages;
         this.sessionId = `session_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
         this.createdAt = new Date();
         this.compactor = new ContextCompactor({ maxMessages });
-        this.onSuggestNewSession = options?.onSuggestNewSession;
+        this.onAutoCompact = options?.onAutoCompact;
     }
     addMessage(role, content, extras) {
         this.messages.push({ role, content, ...extras });
         this.autoCompact();
     }
     /**
-     * v2.2.4 (port from v2.1.0): same as addMessage but returns false
-     * (and skips the push) if the message content matches a known
-     * truncation/abort pollution pattern. Use this for assistant
-     * messages whose stream might have been aborted.
+     * Same as addMessage but returns false (and skips the push) if the message
+     * content matches a known truncation/abort pollution pattern.
      */
     addMessageSafe(role, content, extras) {
-        if (role === 'assistant' && looksPolluted(content)) {
+        if (role === 'assistant' && looksPolluted(typeof content === 'string' ? content : JSON.stringify(content))) {
             this.droppedCount++;
             return false;
         }
         this.addMessage(role, content, extras);
         return true;
     }
-    /** v2.2.4: total messages dropped by addMessageSafe since session start. */
+    /** Total messages dropped by addMessageSafe since session start. */
     getDroppedCount() {
         return this.droppedCount;
     }
@@ -107,44 +156,86 @@ export class SessionManager {
     getMessageCount() {
         return this.messages.length;
     }
+    /**
+     * v3.0.5: fresh conversation that KEEPS the system prompt. The previous
+     * clear() removed it, so every later request ran without the identity /
+     * tool / skills instructions until the process restarted.
+     */
+    reset() {
+        const system = this.messages.find(m => m.role === 'system');
+        this.messages = system ? [system] : [];
+        this.lastCompaction = null;
+        // v3.0.5 fix: fresh id so the next persist() writes a NEW session file
+        // instead of overwriting the old conversation (which would make it
+        // unrestorable via /resume).
+        this.sessionId = `session_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
+        this.createdAt = new Date();
+    }
+    /**
+     * v3.0.5: replace in-memory history (used by /resume). Input is sanitized
+     * so a malformed file can not poison the next request.
+     */
+    restore(messages, meta) {
+        this.messages = sanitizeLoadedMessages(messages);
+        if (meta?.id)
+            this.sessionId = meta.id;
+        if (meta?.createdAt) {
+            const d = new Date(meta.createdAt);
+            if (!isNaN(d.getTime()))
+                this.createdAt = d;
+        }
+        if (meta?.provider || meta?.model) {
+            this.meta = { provider: meta.provider, model: meta.model };
+        }
+        this.lastCompaction = null;
+    }
     clear() {
         this.messages = [];
     }
     /**
-     * v3.0.0: "auto-compact" is now a no-op on `messages`. We instead invoke
-     * the registered `onSuggestNewSession` callback (if any) so the TUI can
-     * surface a "context is getting long, consider /new" hint. This keeps
-     * the messages array byte-stable across rounds, which is critical for
-     * prompt-cache hit-rate: any reordering or summary insertion would
-     * invalidate every cache breakpoint the upstream provider has set.
-     *
-     * Rationale (Reasonix-style): when context exceeds the model window or
-     * the configured maxMessages threshold, the right action is to start a
-     * NEW session, not to silently truncate or summarize. NWT auto-logs
-     * every meaningful event, so the user does not lose context — it just
-     * moves out of the live cache window. If the user wants a longer
-     * session, they can bump maxMessages in `~/.thatgfsj/config.json`.
-     *
-     * The original "fake compact" logic (insert `[Earlier conversation...]`
-     * summary) is preserved as `truncate()` for callers that explicitly
-     * want to compact (e.g. /new command hard-reset).
+     * v3.0.5: replace the (first) system prompt in place — used when tools or
+     * the permission mode change and the prompt must be rebuilt without
+     * resetting the conversation.
+     */
+    replaceSystemMessage(content) {
+        const idx = this.messages.findIndex(m => m.role === 'system');
+        if (idx >= 0) {
+            this.messages[idx] = { ...this.messages[idx], content };
+        }
+        else {
+            this.messages.unshift({ role: 'system', content });
+        }
+    }
+    /**
+     * Compact when over the limit — once per crossing, atomic groups (v3.0.5).
+     * The previous design only suggested /new and never touched history, which
+     * let sessions grow unbounded (and the /compact path silently rewrote
+     * history every round). Now: compact at the threshold, notify once.
      */
     autoCompact() {
         if (this.messages.length <= this.maxMessages)
             return;
-        // Notify the TUI. The default TUI behavior is to render a toast:
-        //   ⚠️ 上下文超长（{currentLength}/{max}），建议调 /new 开新会话
-        //            (NWT 已自动归档历史)
+        const { compacted } = this.compactor.compact(this.messages);
+        if (compacted.length >= this.messages.length)
+            return; // nothing removable
+        const before = this.messages.length;
+        this.messages = compacted;
+        this.lastCompaction = { before, after: compacted.length };
         try {
-            this.onSuggestNewSession?.({
-                currentLength: this.messages.length,
-                max: this.maxMessages,
-            });
+            this.onAutoCompact?.(this.lastCompaction);
         }
         catch {
             // Callback failure must not break the chat loop.
         }
-        // Intentionally do NOT mutate this.messages. Prefix stability matters more.
+    }
+    /** v3.0.5: explicit compaction (the /compact command). */
+    compactNow() {
+        const { compacted, result } = this.compactor.compact(this.messages);
+        if (result.removedCount <= 0)
+            return null;
+        const before = this.messages.length;
+        this.messages = compacted;
+        return { before, after: compacted.length };
     }
     truncate(maxMessages) {
         if (maxMessages) {
@@ -164,6 +255,133 @@ export class SessionManager {
             createdAt: this.createdAt,
         };
     }
+    // ==================== Persistence (v3.0.5) ====================
+    /**
+     * Write the current history to ~/.thatgfsj/sessions/<id>.json and prune
+     * old sessions. Fire-and-forget friendly: errors are swallowed by the
+     * caller — a full disk must never kill a chat round.
+     */
+    persist() {
+        try {
+            const dir = sessionsDir();
+            if (!existsSync(dir))
+                mkdirSync(dir, { recursive: true });
+            const file = {
+                version: 1,
+                id: this.sessionId,
+                createdAt: this.createdAt.toISOString(),
+                updatedAt: new Date().toISOString(),
+                provider: this.meta?.provider,
+                model: this.meta?.model,
+                messages: this.messages,
+            };
+            writeFileSync(join(dir, `${this.sessionId}.json`), JSON.stringify(file, null, 2), 'utf-8');
+            pruneSessions(20);
+        }
+        catch {
+            // best-effort
+        }
+    }
+    /**
+     * Restore a previously persisted session into THIS manager (in place).
+     */
+    loadFrom(file) {
+        this.restore(file.messages || [], {
+            id: file.id,
+            createdAt: file.createdAt,
+            provider: file.provider,
+            model: file.model,
+        });
+    }
+    /** List the most recent persisted sessions, newest first. */
+    static list(limit = 10) {
+        const dir = sessionsDir();
+        if (!existsSync(dir))
+            return [];
+        try {
+            const files = readdirSync(dir)
+                .filter(f => f.endsWith('.json'))
+                .map(f => {
+                const full = join(dir, f);
+                try {
+                    return { full, mtime: statSync(full).mtimeMs };
+                }
+                catch {
+                    return null;
+                }
+            })
+                .filter((x) => x !== null)
+                .sort((a, b) => b.mtime - a.mtime)
+                .slice(0, limit);
+            const out = [];
+            for (const f of files) {
+                try {
+                    const data = JSON.parse(readFileSync(f.full, 'utf-8'));
+                    const firstUser = (data.messages || []).find(m => m.role === 'user' && typeof m.content === 'string');
+                    out.push({
+                        id: data.id,
+                        updatedAt: new Date(data.updatedAt || data.createdAt || Date.now()),
+                        messageCount: (data.messages || []).length,
+                        preview: firstUser ? firstUser.content.slice(0, 60).replace(/\s+/g, ' ') : '(no user messages)',
+                    });
+                }
+                catch {
+                    // skip corrupted file
+                }
+            }
+            return out;
+        }
+        catch {
+            return [];
+        }
+    }
+    /** Load a persisted session file by id (or filename). */
+    static load(id) {
+        const dir = sessionsDir();
+        const filename = id.endsWith('.json') ? id : `${id}.json`;
+        const full = join(dir, filename);
+        if (!existsSync(full))
+            return null;
+        try {
+            const data = JSON.parse(readFileSync(full, 'utf-8'));
+            if (!data || !Array.isArray(data.messages))
+                return null;
+            return data;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+/** Keep only the newest `keep` session files. */
+function pruneSessions(keep) {
+    const dir = sessionsDir();
+    if (!existsSync(dir))
+        return;
+    try {
+        const files = readdirSync(dir)
+            .filter(f => f.endsWith('.json'))
+            .map(f => {
+            const full = join(dir, f);
+            try {
+                return { full, mtime: statSync(full).mtimeMs };
+            }
+            catch {
+                return null;
+            }
+        })
+            .filter((x) => x !== null)
+            .sort((a, b) => b.mtime - a.mtime);
+        for (const f of files.slice(keep)) {
+            try {
+                unlinkSync(f.full);
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    catch {
+        // best-effort
+    }
 }
 export { ContextCompactor } from './compactor.js';
 export * from './message.js';

package/dist/session/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,gBAAgB,GAAa;IACjC,SAAS;IACT,kBAAkB;CACnB,CAAC;AAEF,MAAM,cAAc,GAAa;IAC/B,2BAA2B;IAC3B,oCAAoC;IACpC,sDAAsD;IACtD,oDAAoD;CACrD,CAAC;AAEF,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,qBAAqB;IACrB,iEAAiE;IACjE,qBAAqB;IACrB,mEAAmE;IACnE,0CAA0C;IAC1C,kEAAkE;IAClE,mEAAmE;IACnE,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAkB,EAAE,CAAC;IAC7B,SAAS,CAAS;IAClB,SAAS,CAAO;IAChB,SAAS,CAAmB;IAC5B,WAAW,CAAS;IAC5B,oEAAoE;IAC5D,YAAY,GAAW,CAAC,CAAC;IACjC;;;;;;;OAOG;IACI,mBAAmB,CAA0D;IAEpF,YAAY,WAAW,GAAG,EAAE,EAAE,OAAyE;QACrG,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,GAAG,OAAO,EAAE,mBAAmB,CAAC;IAC1D,CAAC;IAED,UAAU,CAAC,IAAyB,EAAE,OAAe,EAAE,MAA6B;QAClF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,IAAyB,EAAE,OAAe,EAAE,MAA6B;QACtF,IAAI,IAAI,KAAK,WAAW,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,WAAW;QACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAErD,iEAAiE;QACjE,kDAAkD;QAClD,2BAA2B;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;gBACnC,GAAG,EAAE,IAAI,CAAC,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;QACD,4EAA4E;IAC9E,CAAC;IAED,QAAQ,CAAC,WAAoB;QAC3B,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF;AAED,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC3G,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAa;IACjC,SAAS;IACT,kBAAkB;CACnB,CAAC;AAEF,MAAM,cAAc,GAAa;IAC/B,2BAA2B;IAC3B,oCAAoC;IACpC,sDAAsD;IACtD,oDAAoD;CACrD,CAAC;AAEF,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAsBD,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACZ,YAAY,EAAE,CAAC;YACjB,CAAC;YACD,oCAAoC;YACpC,SAAS;QACX,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,+DAA+D;YAC/D,gEAAgE;YAChE,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;oBACrD,MAAM,KAAK,GAAgB,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,OAAO,KAAK,CAAC,UAAU,CAAC;oBACxB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,uCAAuC,CAAC;oBACzE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,YAAY,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,YAAY,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACrC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,6DAA6D;IAC7D,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAgB,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,UAAU,CAAC;gBACxB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,uCAAuC,CAAC;gBACzE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAkB,EAAE,CAAC;IAC7B,SAAS,CAAS;IAClB,SAAS,CAAO;IAChB,SAAS,CAAmB;IAC5B,WAAW,CAAS;IACpB,YAAY,GAAW,CAAC,CAAC;IACjC,gFAAgF;IACxE,cAAc,GAA6C,IAAI,CAAC;IACxE,mDAAmD;IAC5C,IAAI,CAAyC;IACpD;;;OAGG;IACI,aAAa,CAAqD;IAEzE,YAAY,WAAW,GAAG,EAAE,EAAE,OAA6D;QACzF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;IAC9C,CAAC;IAED,UAAU,CAAC,IAAyB,EAAE,OAAe,EAAE,MAA6B;QAClF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,IAAyB,EAAE,OAAe,EAAE,MAA6B;QACtF,IAAI,IAAI,KAAK,WAAW,IAAI,aAAa,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,uEAAuE;QACvE,mEAAmE;QACnE,6BAA6B;QAC7B,IAAI,CAAC,SAAS,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,QAAuB,EAAE,IAA6E;QAC5G,IAAI,CAAC,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,EAAE;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,OAAe;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC9D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,WAAW;QACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAErD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,CAAC,oBAAoB;QAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,UAAU;QACR,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,QAAQ,CAAC,WAAoB;QAC3B,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,iEAAiE;IAEjE;;;;OAIG;IACH,OAAO;QACL,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAgB;gBACxB,OAAO,EAAE,CAAC;gBACV,EAAE,EAAE,IAAI,CAAC,SAAS;gBAClB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;gBACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ;gBAC7B,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3F,aAAa,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAiB;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;YAChC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;iBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE;gBACP,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC;oBACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;iBAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;iBACjC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAEnB,MAAM,GAAG,GAAqB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAgB,CAAC;oBACtE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;oBACtG,GAAG,CAAC,IAAI,CAAC;wBACP,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBACnE,YAAY,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM;wBAC1C,OAAO,EAAE,SAAS,CAAC,CAAC,CAAE,SAAS,CAAC,OAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB;qBAC5G,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,EAAU;QACpB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAgB,CAAC;YACpE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,iDAAiD;AACjD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE;YACP,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;aAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAErC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,cAAc,cAAc,CAAC"}

package/dist/tools/file.d.ts

@@ -1,7 +1,15 @@
 /**
  * File Tool - File operations
+ *
+ * v3.0.5: write and delete now route through the permission pipeline.
+ * - write shows a line diff (utils/diff.ts, previously dead code) via
+ *   ctx.confirmEdit before touching the file
+ * - delete asks via ctx.confirmAction
+ * - read/list/exists/mkdir stay silent (read-class operations)
+ * With no context wired (should not happen — App always installs one) we
+ * fail closed for destructive actions instead of silently executing.
  */
-import type { Tool, ToolResult } from './types.js';
+import type { Tool, ToolResult, ToolContext } from './types.js';
 export declare class FileTool implements Tool {
     name: string;
     description: string;
@@ -35,7 +43,7 @@ export declare class FileTool implements Tool {
         description: string;
         required: boolean;
     }[];
-    execute(params: Record<string, any>): Promise<ToolResult>;
+    execute(params: Record<string, any>, ctx?: ToolContext): Promise<ToolResult>;
     private readFile;
     private writeFile;
     private listDir;

package/dist/tools/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAInD,qBAAa,QAAS,YAAW,IAAI;IACnC,IAAI,SAAU;IACd,WAAW,SAA8D;IAEzE,WAAW;;;;;;;;;;;;;;;;;MAQT;IAEF,QAAQ;qBAC4B,CAAC,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE;;;;MAI9E;IAEF,UAAU;;;;;QAIR;IAEI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAyB/D,OAAO,CAAC,QAAQ;IAmChB,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,KAAK;CAId"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAKhE,qBAAa,QAAS,YAAW,IAAI;IACnC,IAAI,SAAU;IACd,WAAW,SAA8D;IAEzE,WAAW;;;;;;;;;;;;;;;;;MAQT;IAEF,QAAQ;qBAC4B,CAAC,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE;;;;MAI9E;IAEF,UAAU;;;;;QAIR;IAEI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBlF,OAAO,CAAC,QAAQ;YAmCF,SAAS;IAmCvB,OAAO,CAAC,OAAO;YAoBD,UAAU;IAmBxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,KAAK;CAId"}

package/dist/tools/file.js

@@ -1,8 +1,17 @@
 /**
  * File Tool - File operations
+ *
+ * v3.0.5: write and delete now route through the permission pipeline.
+ * - write shows a line diff (utils/diff.ts, previously dead code) via
+ *   ctx.confirmEdit before touching the file
+ * - delete asks via ctx.confirmAction
+ * - read/list/exists/mkdir stay silent (read-class operations)
+ * With no context wired (should not happen — App always installs one) we
+ * fail closed for destructive actions instead of silently executing.
  */
 import { readFileSync, writeFileSync, existsSync, readdirSync, statSync, mkdirSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';
+import { DiffPreview } from '../utils/diff.js';
 export class FileTool {
     name = 'file';
     description = 'Perform file operations: read, write, list, delete, etc.';
@@ -26,18 +35,18 @@ export class FileTool {
         { name: 'path', type: 'string', description: 'File or directory path', required: true },
         { name: 'content', type: 'string', description: 'Content to write (for write action)', required: false }
     ];
-    async execute(params) {
+    async execute(params, ctx) {
         const { action, path, content } = params;
         try {
             switch (action) {
                 case 'read':
                     return this.readFile(path);
                 case 'write':
-                    return this.writeFile(path, content || '');
+                    return await this.writeFile(path, content || '', ctx);
                 case 'list':
                     return this.listDir(path);
                 case 'delete':
-                    return this.deleteFile(path);
+                    return await this.deleteFile(path, ctx);
                 case 'exists':
                     return this.checkExists(path);
                 case 'mkdir':
@@ -81,7 +90,37 @@ export class FileTool {
         }
         return { success: true, output: content };
     }
-    writeFile(path, content) {
+    async writeFile(path, content, ctx) {
+        // v3.0.5: permission gate with diff preview. Fail closed when no
+        // confirmation channel is available at all.
+        if (ctx?.confirmEdit) {
+            const original = existsSync(path) ? (() => {
+                try {
+                    return readFileSync(path, 'utf-8');
+                }
+                catch {
+                    return '';
+                }
+            })() : '';
+            const diff = DiffPreview.diff(original, content);
+            const status = existsSync(path)
+                ? `修改文件 (−${diff.removed} / +${diff.added} 行)`
+                : `新建文件 (+${diff.added} 行)`;
+            const preview = diff.added + diff.removed > 400
+                ? DiffPreview.truncate(diff)
+                : DiffPreview.format(diff);
+            const ok = await ctx.confirmEdit({
+                message: `${status}: ${path}\n\n${preview}`,
+            });
+            if (!ok) {
+                return { success: false, error: 'File write cancelled by user' };
+            }
+        }
+        else {
+            // v3.0.5 fix: symmetric fail-closed — no confirmation channel at all
+            // (not even a context) means no writes, same as deleteFile.
+            return { success: false, error: 'File write requires confirmation, but no confirmation channel is available' };
+        }
         const dir = dirname(path);
         if (!existsSync(dir)) {
             mkdirSync(dir, { recursive: true });
@@ -106,10 +145,20 @@ export class FileTool {
         });
         return { success: true, output: JSON.stringify(items, null, 2) };
     }
-    deleteFile(path) {
+    async deleteFile(path, ctx) {
         if (!existsSync(path)) {
             return { success: false, error: `Path not found: ${path}` };
         }
+        // v3.0.5: delete is destructive — always ask, fail closed without a channel.
+        if (ctx?.confirmAction) {
+            const ok = await ctx.confirmAction(`删除文件: ${path}`);
+            if (!ok) {
+                return { success: false, error: 'File deletion cancelled by user' };
+            }
+        }
+        else {
+            return { success: false, error: 'File deletion requires confirmation, but no confirmation channel is available' };
+        }
         unlinkSync(path);
         return { success: true, output: `Deleted: ${path}` };
     }

package/dist/tools/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3G,OAAO,EAAE,IAAI,EAAE,OAAO,EAAqB,MAAM,MAAM,CAAC;AAExD,MAAM,OAAO,QAAQ;IACnB,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,0DAA0D,CAAC;IAEzE,WAAW,GAAG;QACZ,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;YAC3F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAChF;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,CAAC;IAEF,QAAQ,GAAG;QACT,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,CAAiD;QAC9E,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;QAC5B,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,OAAO;KACjB,CAAC;IAEF,UAAU,GAAG;QACX,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvH,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvF,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE,QAAQ,EAAE,KAAK,EAAE;KACzG,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,MAA2B;QACvC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAEzC,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7B,KAAK,OAAO;oBACV,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC7C,KAAK,MAAM;oBACT,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC/B,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAChC,KAAK,OAAO;oBACV,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B;oBACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAElC,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;YACpE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,8DAA8D;YAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,qCAAqC,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,OAAe;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,IAAI,EAAE,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBACzC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IACvD,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3G,OAAO,EAAE,IAAI,EAAE,OAAO,EAAqB,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,OAAO,QAAQ;IACnB,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,0DAA0D,CAAC;IAEzE,WAAW,GAAG;QACZ,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;YAC3F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAChF;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC7B,CAAC;IAEF,QAAQ,GAAG;QACT,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,CAAiD;QAC9E,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;QAC5B,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,OAAO;KACjB,CAAC;IAEF,UAAU,GAAG;QACX,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvH,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvF,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE,QAAQ,EAAE,KAAK,EAAE;KACzG,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,MAA2B,EAAE,GAAiB;QAC1D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAEzC,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7B,KAAK,OAAO;oBACV,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxD,KAAK,MAAM;oBACT,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,KAAK,QAAQ;oBACX,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC1C,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAChC,KAAK,OAAO;oBACV,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B;oBACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAElC,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;YACpE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,8DAA8D;YAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,qCAAqC,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,GAAiB;QACtE,iEAAiE;QACjE,4CAA4C;QAC5C,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;gBACxC,IAAI,CAAC;oBAAC,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YAClE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;gBAC7B,CAAC,CAAC,UAAU,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK;gBAC9C,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,KAAK,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,GAAG,GAAG;gBAC7C,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;gBAC/B,OAAO,EAAE,GAAG,MAAM,KAAK,IAAI,OAAO,OAAO,EAAE;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,4DAA4D;YAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4EAA4E,EAAE,CAAC;QACjH,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,IAAI,EAAE,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBACzC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,GAAiB;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAC9D,CAAC;QAED,6EAA6E;QAC7E,IAAI,GAAG,EAAE,aAAa,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+EAA+E,EAAE,CAAC;QACpH,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IACvD,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IACvD,CAAC;CACF"}

package/dist/tools/git.d.ts

@@ -1,7 +1,17 @@
 /**
  * Git Tool - Git operations
+ *
+ * v3.0.5:
+ *   - Command injection fixed: user/model-controlled values (commit
+ *     messages, branch names, extra args) were interpolated into a shell
+ *     string executed via cmd.exe. All calls now go through execFile with
+ *     an argument array, so values are passed verbatim and never parsed
+ *     by a shell.
+ *   - Write actions (commit/push/pull/checkout/add) require confirmation
+ *     via ctx.confirmAction; read-only actions (status/log/diff/branch)
+ *     run silently. App.requestConfirmation owns the mode decision.
  */
-import type { Tool, ToolResult } from './types.js';
+import type { Tool, ToolResult, ToolContext } from './types.js';
 export declare class GitTool implements Tool {
     name: string;
     description: string;
@@ -38,7 +48,11 @@ export declare class GitTool implements Tool {
         description: string;
         required: boolean;
     }[];
-    execute(params: Record<string, any>): Promise<ToolResult>;
+    /**
+     * Run git with an argument array (no shell interpolation).
+     */
+    private git;
+    execute(params: Record<string, any>, ctx?: ToolContext): Promise<ToolResult>;
     private status;
     private log;
     private diff;

package/dist/tools/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/tools/git.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAOnD,qBAAa,OAAQ,YAAW,IAAI;IAClC,IAAI,SAAS;IACb,WAAW,SAA6D;IAExE,WAAW;;;;;;;;;;;;;;;;;;;;;MAST;IAEF,QAAQ;qBACsB,CAAC,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE;;;MAGxE;IAEF,UAAU;;;;;QAKR;IAEI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;YAqCjD,MAAM;YAKN,GAAG;YAKH,IAAI;YAKJ,MAAM;YAYN,MAAM;YAKN,QAAQ;YASR,IAAI;YAKJ,IAAI;YAKJ,GAAG;CAIlB"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/tools/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWhE,qBAAa,OAAQ,YAAW,IAAI;IAClC,IAAI,SAAS;IACb,WAAW,SAA6D;IAExE,WAAW;;;;;;;;;;;;;;;;;;;;;MAST;IAEF,QAAQ;qBACsB,CAAC,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE;;;MAGxE;IAEF,UAAU;;;;;QAKR;IAEF;;OAEG;YACW,GAAG;IASX,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YAoDpE,MAAM;YAKN,GAAG;YAQH,IAAI;YAMJ,MAAM;YAYN,MAAM;YAKN,QAAQ;YASR,IAAI;YAKJ,IAAI;YAKJ,GAAG;CAIlB"}