token-goat 2.8.2 → 2.8.3

package/dist/{token-goat-chunk-LILS6TIU.mjs → token-goat-chunk-TX4JFJTD.mjs}

@@ -4,8 +4,13 @@ import {
   IMPORT_RE,
   ImageDecodeError,
   MAX_OVER_FETCH,
+  MAX_ZIP_INPUT_BYTES,
+  MAX_ZIP_OUTPUT_BYTES,
   OVER_FETCH_FACTOR,
   SKIP_DIRS,
+  UNTRUSTED_GITHUB_TAG,
+  ZipInputTooLargeError,
+  ZipOutputTooLargeError,
   capJsonRows,
   countRefs,
   countSymbols,
@@ -18,6 +23,7 @@ import {
   extractPdfMeta,
   extractPdfOutline,
   extractPdfText,
+  fenceUntrustedContent,
   formatCsvProfile,
   formatCsvTable,
   getFileEntry,
@@ -42,6 +48,7 @@ import {
   queryRefs,
   queryRefsByContext,
   querySymbols,
+  scanForInjectionPatterns,
   searchEvidenceSemantically,
   searchSemantic,
   searchSymbolsFts,
@@ -50,11 +57,12 @@ import {
   stripLeadingAttributes,
   tomlBracketDelta,
   trimToBudget,
+  unzipBounded,
   urlPolicyDenialReason,
   walkProject,
   yamlLineClosesQuote,
   yamlOpenQuoteAfter
-} from "./token-goat-chunk-AM23GDIS.mjs";
+} from "./token-goat-chunk-PWVXXPCC.mjs";
 import {
   Database,
   PER_FILE_COUNTERFACTUAL_CEILING,
@@ -106,7 +114,7 @@ import {
   unsupportedLanguageName,
   windowsCmdQuoteArg,
   withExtension
-} from "./token-goat-chunk-IVCTQPZD.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";
@@ -3612,7 +3620,7 @@ function formatZipList(entries) {
 }
 async function extractZipEntry(data, entryPath) {
   const fflate = await requireFflate();
-  const result = fflate.unzipSync(data, { filter: (file) => file.name === entryPath });
+  const result = unzipBounded(fflate, data, { limitBytes: MAX_ZIP_OUTPUT_BYTES, shouldExtract: (name) => name === entryPath });
   return result[entryPath];
 }
 
@@ -5262,10 +5270,16 @@ function readFileBytes(p) {
       verifyStillAbsent(p);
       return null;
     }
-    if (pinned !== void 0) return readPinnedBytes(p, pinned);
+    if (pinned !== void 0) {
+      const bytes = readPinnedBytes(p, pinned);
+      if (bytes.length > MAX_ZIP_INPUT_BYTES) throw new ZipInputTooLargeError(p, bytes.length, MAX_ZIP_INPUT_BYTES);
+      return bytes;
+    }
+    const stat = fs5.statSync(p);
+    if (stat.size > MAX_ZIP_INPUT_BYTES) throw new ZipInputTooLargeError(p, stat.size, MAX_ZIP_INPUT_BYTES);
     return fs5.readFileSync(p);
   } catch (err) {
-    if (err instanceof ConfinementIdentityError) throw err;
+    if (err instanceof ConfinementIdentityError || err instanceof ZipInputTooLargeError) throw err;
     return null;
   }
 }
@@ -5333,6 +5347,17 @@ function guardText(text, command) {
   const cfg = loadConfig();
   return cfg.overflow_guard.enabled ? trimToBudget(text, cfg.overflow_guard.max_tokens, command) : text;
 }
+function fenceGithubTextIfMatched(text) {
+  let matches = [];
+  try {
+    if (loadConfig().injection.enabled) matches = scanForInjectionPatterns(text);
+  } catch {
+    matches = [];
+  }
+  if (matches.length === 0) return text;
+  recordStat("injection_detected", 0, 0, void 0, matches.join(","));
+  return fenceUntrustedContent(text, matches, UNTRUSTED_GITHUB_TAG);
+}
 function guardJsonRows(items) {
   const cfg = loadConfig();
   if (!cfg.overflow_guard.enabled) return { items: [...items], truncated: false, totalCount: items.length };
@@ -7021,11 +7046,20 @@ function runOpenApiOp(opts) {
   return 0;
 }
 function archiveReadFailure(err, file) {
-  if (err instanceof ArchiveDependencyMissingError) return err.message;
+  if (err instanceof ArchiveDependencyMissingError || err instanceof ZipOutputTooLargeError) return err.message;
   return `Failed to read archive (not a valid zip-format file): ${file}`;
 }
 async function runZipList(opts) {
-  const data = readFileBytes(opts.file);
+  let data;
+  try {
+    data = readFileBytes(opts.file);
+  } catch (err) {
+    if (err instanceof ZipInputTooLargeError) {
+      emitErr(err.message);
+      return 1;
+    }
+    throw err;
+  }
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
     return 1;
@@ -7050,7 +7084,16 @@ async function runZipList(opts) {
   return 0;
 }
 async function runZipRead(opts) {
-  const data = readFileBytes(opts.file);
+  let data;
+  try {
+    data = readFileBytes(opts.file);
+  } catch (err) {
+    if (err instanceof ZipInputTooLargeError) {
+      emitErr(err.message);
+      return 1;
+    }
+    throw err;
+  }
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
     return 1;
@@ -7146,11 +7189,11 @@ function runPrSlice(opts) {
         }
         const fullSourceBytes = Buffer.byteLength(diffText, "utf8");
         if (opts.json === true) {
-          const jsonText = JSON.stringify({ path: parsed.path, diff: fileDiff });
+          const jsonText = JSON.stringify({ path: parsed.path, diff: fenceGithubTextIfMatched(fileDiff) });
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} diff:${parsed.path}`);
         } else {
-          emitGuarded(fileDiff, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(fileDiff), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, fileDiff, `${repo}#${opts.pr} diff:${parsed.path}`);
         }
         return 0;
@@ -7159,13 +7202,14 @@ function runPrSlice(opts) {
         const comments = fetchPrComments(opts.pr, repo);
         const fullSourceBytes = Buffer.byteLength(JSON.stringify(comments), "utf8");
         if (opts.json === true) {
-          const capped = guardJsonRows(comments);
+          const fencedComments = comments.map((c) => ({ ...c, body: fenceGithubTextIfMatched(c.body) }));
+          const capped = guardJsonRows(fencedComments);
           const jsonText = JSON.stringify({ items: capped.items, truncated: capped.truncated, totalCount: capped.totalCount });
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} comments`);
         } else {
           const text = formatCommentsSlice(comments);
-          emitGuarded(text, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(text), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, text, `${repo}#${opts.pr} comments`);
         }
         return 0;
@@ -7174,12 +7218,17 @@ function runPrSlice(opts) {
         const desc = fetchPrDescription(opts.pr, repo);
         const fullSourceBytes = Buffer.byteLength(JSON.stringify(desc), "utf8");
         if (opts.json === true) {
-          const jsonText = JSON.stringify(desc);
+          const fencedDesc = {
+            ...desc,
+            title: fenceGithubTextIfMatched(desc.title),
+            body: desc.body !== null ? fenceGithubTextIfMatched(desc.body) : null
+          };
+          const jsonText = JSON.stringify(fencedDesc);
           emit(jsonText);
           recordReadStat("pr_slice", fullSourceBytes, jsonText, `${repo}#${opts.pr} description`);
         } else {
           const text = formatDescriptionSlice(desc);
-          emitGuarded(text, "pr-slice");
+          emitGuarded(fenceGithubTextIfMatched(text), "pr-slice");
           recordReadStat("pr_slice", fullSourceBytes, text, `${repo}#${opts.pr} description`);
         }
         return 0;
@@ -7222,7 +7271,6 @@ function runSqliteQuery(opts) {
     const totalCount = result.rows.length;
     const headTruncated = head !== void 0 && result.rows.length > head;
     const rows = head !== void 0 ? result.rows.slice(0, head) : result.rows;
-    const fullSourceBytes = sumFileSizes([opts.file]);
     if (opts.json === true) {
       const capped = guardJsonRows(rows);
       const jsonText = JSON.stringify({
@@ -7233,11 +7281,20 @@ function runSqliteQuery(opts) {
         rowCapped: result.rowCapped
       });
       emit(jsonText);
-      recordReadStat("sqlite_query", fullSourceBytes, jsonText, opts.file);
+      const uncappedFull = guardJsonRows(result.rows);
+      const baselineJsonText = JSON.stringify({
+        columns: result.columns,
+        items: uncappedFull.items,
+        truncated: uncappedFull.truncated || result.rowCapped,
+        totalCount,
+        rowCapped: result.rowCapped
+      });
+      recordReadStat("sqlite_query", Buffer.byteLength(baselineJsonText, "utf8"), jsonText, opts.file);
     } else {
       const text = formatSqliteQueryTable({ ...result, rows }, { headTruncated });
       emit(text);
-      recordReadStat("sqlite_query", fullSourceBytes, text, opts.file);
+      const baselineText = formatSqliteQueryTable({ ...result, rows: result.rows }, { headTruncated: false });
+      recordReadStat("sqlite_query", Buffer.byteLength(baselineText, "utf8"), text, opts.file);
     }
     return 0;
   } catch (e) {

package/dist/{token-goat-chunk-BTZSUIYA.mjs → token-goat-chunk-VAGPOZHO.mjs}

@@ -10,11 +10,11 @@ import {
   selectFilter,
   shlexSplit,
   wrappedShell
-} from "./token-goat-chunk-TF5NT3H5.mjs";
+} from "./token-goat-chunk-EFF2XCLB.mjs";
 import {
   loadConfig,
   recordStat
-} from "./token-goat-chunk-IVCTQPZD.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 

package/dist/token-goat-hook.mjs

@@ -2,11 +2,11 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-chunk-KBVN4ELV.mjs";
-import "./token-goat-chunk-5MLXFSRI.mjs";
-import "./token-goat-chunk-AM23GDIS.mjs";
-import "./token-goat-chunk-TF5NT3H5.mjs";
-import "./token-goat-chunk-IVCTQPZD.mjs";
+} from "./token-goat-chunk-NKNCHJ4H.mjs";
+import "./token-goat-chunk-4HIMCBYK.mjs";
+import "./token-goat-chunk-PWVXXPCC.mjs";
+import "./token-goat-chunk-EFF2XCLB.mjs";
+import "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/token-goat.core.mjs

@@ -2,13 +2,13 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-2MWF3OGR.mjs";
-import "./token-goat-chunk-LILS6TIU.mjs";
-import "./token-goat-chunk-5MLXFSRI.mjs";
-import "./token-goat-chunk-AM23GDIS.mjs";
+} from "./token-goat-chunk-222VPFP2.mjs";
+import "./token-goat-chunk-TX4JFJTD.mjs";
+import "./token-goat-chunk-4HIMCBYK.mjs";
+import "./token-goat-chunk-PWVXXPCC.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-IVCTQPZD.mjs";
+} from "./token-goat-chunk-6ODZ6PZK.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-goat",
-  "version": "2.8.2",
+  "version": "2.8.3",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",