vipcode 0.2.0 → 0.2.1

package/dist/session.js

@@ -1,6 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
-import { EXPORTS_DIR, HISTORY_PATH, HOME_DIR, SESSIONS_DIR } from "./paths.js";
+import { EXPORTS_DIR, HISTORY_PATH, SESSIONS_DIR, ensureHomeDir } from "./paths.js";
 export function newSession(cwd) {
     const now = new Date();
     // id legible y ordenable: 20261029-174512-k3x
@@ -204,7 +204,7 @@ export function appendHistory(text) {
         return;
     }
     try {
-        fs.mkdirSync(HOME_DIR, { recursive: true });
+        ensureHomeDir();
         fs.appendFileSync(HISTORY_PATH, `${JSON.stringify(text)}\n`);
         // De vez en cuando lo recortamos para que no crezca sin fin
         const stat = fs.statSync(HISTORY_PATH);

package/dist/skills.js

@@ -278,7 +278,8 @@ export function installSkills(source, root, options = {}) {
                 throw new Error(`No encuentro ${source}: pon la ruta de una carpeta con SKILL.md o la dirección de un repositorio git.`);
             }
             temp = fs.mkdtempSync(path.join(os.tmpdir(), "vipcode-skill-"));
-            const args = ["clone", "--depth", "1", ...(git.ref ? ["--branch", git.ref] : []), git.url, temp];
+            // Con «--» un origen que empiece por - no se toma como una opción de git (por ejemplo --upload-pack)
+            const args = ["clone", "--depth", "1", ...(git.ref ? [`--branch=${git.ref}`] : []), "--", git.url, temp];
             const clone = spawnSync("git", args, { encoding: "utf8", timeout: 120000, env: { ...process.env, GIT_TERMINAL_PROMPT: "0" } });
             if (clone.error || clone.status !== 0) {
                 throw new Error(`No he podido descargar ${git.url}: ${(clone.stderr || clone.error?.message || "").trim().split("\n").pop()}`);

package/dist/tools.js

@@ -3,6 +3,8 @@ import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
 import fg from "fast-glob";
 import { isImagePath, toDataUrl } from "./images.js";
+import { stripControl } from "./sanitize.js";
+import { protectedDirs } from "./paths.js";
 const IGNORE = ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**", "**/.next/**", "**/vendor/**"];
 const MAX_OUTPUT = 20000;
 export function truncate(text, max = MAX_OUTPUT) {
@@ -13,7 +15,31 @@ export function truncate(text, max = MAX_OUTPUT) {
     return `${text.slice(0, half)}\n\n[… ${text.length - max} caracteres omitidos …]\n\n${text.slice(-half)}`;
 }
 // Convierte una ruta relativa en absoluta y comprueba que no sale del proyecto
-export function resolvePath(root, p) {
+// Ruta real siguiendo los enlaces simbólicos, aunque el destino (o parte de él) todavía no exista
+function realPathOf(file, depth = 0) {
+    try {
+        return fs.realpathSync(file);
+    }
+    catch {
+        // no existe (todavía) o es un enlace roto
+    }
+    if (depth < 40) {
+        try {
+            if (fs.lstatSync(file).isSymbolicLink()) {
+                return realPathOf(path.resolve(path.dirname(file), fs.readlinkSync(file)), depth + 1);
+            }
+        }
+        catch {
+            // no existe
+        }
+    }
+    const parent = path.dirname(file);
+    if (parent === file || depth >= 40) {
+        return file;
+    }
+    return path.join(realPathOf(parent, depth + 1), path.basename(file));
+}
+export function resolvePath(root, p, options = {}) {
     let input = p;
     if (!input) {
         input = ".";
@@ -22,8 +48,36 @@ export function resolvePath(root, p) {
     if (abs !== root && !abs.startsWith(root + path.sep)) {
         throw new Error(`La ruta ${p} está fuera del proyecto (${root})`);
     }
+    // Un enlace simbólico dentro del proyecto tampoco puede llevar fuera (por ejemplo a ~/.ssh o a tus claves)
+    const real = realPathOf(abs);
+    const realRoot = realPathOf(root);
+    if (real !== realRoot && !real.startsWith(realRoot + path.sep)) {
+        throw new Error(`La ruta ${p} es un enlace que lleva fuera del proyecto (${real})`);
+    }
+    // vipcode no puede tocarse a sí mismo: ni sus datos (claves, configuración) ni, para escribir, su instalación
+    for (const { dir, read } of protectedDirs()) {
+        const realDir = realPathOf(dir);
+        if ((read || options.write) && (real === realDir || real.startsWith(realDir + path.sep))) {
+            if (read) {
+                throw new Error(`La ruta ${p} está en la carpeta de datos de vipcode (${dir}), que guarda tus claves y tu configuración: no se puede leer ni cambiar desde aquí.`);
+            }
+            throw new Error(`La ruta ${p} es parte de la instalación de vipcode (${dir}): vipcode no puede modificarse a sí mismo.`);
+        }
+    }
     return abs;
 }
+// Patrones para que glob y grep no recorran la carpeta de datos de vipcode si está dentro del proyecto
+function protectedIgnore(root) {
+    const realRoot = realPathOf(root);
+    const patterns = [];
+    for (const { dir, read } of protectedDirs()) {
+        const relative = path.relative(realRoot, realPathOf(dir));
+        if (read && relative && !relative.startsWith("..") && !path.isAbsolute(relative)) {
+            patterns.push(`${relative.split(path.sep).join("/")}/**`);
+        }
+    }
+    return patterns;
+}
 export function rel(root, abs) {
     const r = path.relative(root, abs);
     if (r === "") {
@@ -284,7 +338,7 @@ const writeFile = {
     permission: "write",
     readOnly: false,
     async run(args, ctx) {
-        const file = resolvePath(ctx.root, args.path);
+        const file = resolvePath(ctx.root, args.path, { write: true });
         const content = String(args.content ?? "");
         const exists = fs.existsSync(file);
         let previous = null;
@@ -415,7 +469,7 @@ const editFile = {
     permission: "write",
     readOnly: false,
     async run(args, ctx) {
-        const file = resolvePath(ctx.root, args.path);
+        const file = resolvePath(ctx.root, args.path, { write: true });
         if (!fs.existsSync(file)) {
             return { output: `Error: ${args.path} no existe. Para crear un fichero usa write_file.`, isError: true };
         }
@@ -491,7 +545,7 @@ const globTool = {
     readOnly: true,
     async run(args, ctx) {
         const cwd = resolvePath(ctx.root, args.path);
-        const files = await fg(String(args.pattern), { cwd, ignore: IGNORE, dot: true, onlyFiles: true });
+        const files = await fg(String(args.pattern), { cwd, ignore: [...IGNORE, ...protectedIgnore(cwd)], dot: true, onlyFiles: true, followSymbolicLinks: false });
         if (files.length === 0) {
             return "Sin resultados.";
         }
@@ -563,6 +617,9 @@ const grepTool = {
             if (args.include) {
                 rgArgs.push("-g", String(args.include));
             }
+            for (const pattern of protectedIgnore(ctx.root)) {
+                rgArgs.push("-g", `!${pattern}`);
+            }
             rgArgs.push(".");
             const found = await ripgrep(rgArgs, ctx.root, ctx.signal);
             if (found) {
@@ -594,7 +651,7 @@ const grepTool = {
         if (args.include) {
             include = String(args.include);
         }
-        const files = await fg(include, { cwd: ctx.root, ignore: IGNORE, dot: false, onlyFiles: true });
+        const files = await fg(include, { cwd: ctx.root, ignore: [...IGNORE, ...protectedIgnore(ctx.root)], dot: false, onlyFiles: true, followSymbolicLinks: false });
         const results = [];
         for (const file of files) {
             const abs = path.join(ctx.root, file);
@@ -628,6 +685,11 @@ const grepTool = {
         return results.join("\n");
     },
 };
+// Un .git/config con core.fsmonitor ejecutaría un programa en cada «git status» (que se aprueba solo)
+function gitSafetyEnv() {
+    const count = Number(process.env.GIT_CONFIG_COUNT) || 0;
+    return { GIT_CONFIG_COUNT: String(count + 1), [`GIT_CONFIG_KEY_${count}`]: "core.fsmonitor", [`GIT_CONFIG_VALUE_${count}`]: "false" };
+}
 const bashTool = {
     name: "bash",
     description: "Ejecuta un comando de shell en la raíz del proyecto (tests, git, instalar dependencias…). No lo uses para leer o editar ficheros: para eso están las otras herramientas. No es interactivo: evita comandos que esperen que escribas algo.",
@@ -665,7 +727,7 @@ const bashTool = {
             }
             const child = spawn(shell, shellArgs, {
                 cwd: ctx.root,
-                env: { ...process.env, VIPCODE: "1", GIT_TERMINAL_PROMPT: "0", GIT_PAGER: "cat", PAGER: "cat" },
+                env: { ...process.env, ...gitSafetyEnv(), VIPCODE: "1", GIT_TERMINAL_PROMPT: "0", GIT_PAGER: "cat", PAGER: "cat" },
                 stdio: ["ignore", "pipe", "pipe"],
                 // Grupo de procesos propio para poder matar también a los hijos (npm test, servidores…)
                 detached: process.platform !== "win32",
@@ -916,7 +978,7 @@ export function formatTodos(todos) {
     if (todos.length === 0) {
         return "(lista de tareas vacía)";
     }
-    return todos.map((todo) => `${STATUS_ICON[todo.status] || "[ ]"} ${todo.content}`).join("\n");
+    return todos.map((todo) => `${STATUS_ICON[todo.status] || "[ ]"} ${stripControl(String(todo.content))}`).join("\n");
 }
 const todoWrite = {
     name: "todowrite",
@@ -1184,7 +1246,9 @@ export function projectFiles(root) {
     }
     let files = [];
     try {
-        files = fg.sync("**/*", { cwd: root, ignore: IGNORE, dot: true, onlyFiles: false, markDirectories: true, deep: 8, suppressErrors: true }).slice(0, 20000);
+        files = fg
+            .sync("**/*", { cwd: root, ignore: [...IGNORE, ...protectedIgnore(root)], dot: true, onlyFiles: false, markDirectories: true, deep: 8, suppressErrors: true, followSymbolicLinks: false })
+            .slice(0, 20000);
     }
     catch {
         files = [];

package/dist/trust.js

@@ -0,0 +1,171 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { parseFrontmatter } from "./frontmatter.js";
+import { TRUST_PATH, ensureHomeDir } from "./paths.js";
+// Lo que un proyecto puede traer y que cambia qué ejecuta vipcode o a dónde manda tus claves: servidores MCP y
+// de lenguaje, proveedores, permisos, agentes con permisos propios y comandos que lanzan órdenes. No se usa hasta
+// que confías en la carpeta, y si cambia (por ejemplo tras un git pull) se vuelve a preguntar.
+const CONFIG_FILES = ["vipcode.json", path.join(".vipcode", "config.json")];
+const AGENT_DIRS = [path.join(".vipcode", "agents"), path.join(".opencode", "agent"), path.join(".opencode", "agents")];
+const COMMAND_DIRS = [path.join(".vipcode", "commands"), path.join(".opencode", "command"), path.join(".opencode", "commands")];
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function short(value) {
+    const text = typeof value === "string" ? value : JSON.stringify(value);
+    return text.length > 100 ? `${text.slice(0, 99)}…` : text;
+}
+function readText(file) {
+    try {
+        return fs.statSync(file).isFile() ? fs.readFileSync(file, "utf8") : null;
+    }
+    catch {
+        return null;
+    }
+}
+function markdownFiles(root, dirs) {
+    const files = [];
+    for (const dir of dirs) {
+        try {
+            for (const name of fs.readdirSync(path.join(root, dir)).sort()) {
+                if (name.endsWith(".md")) {
+                    files.push(path.join(dir, name));
+                }
+            }
+        }
+        catch {
+            // la carpeta no existe
+        }
+    }
+    return files;
+}
+function describeConfig(data) {
+    const changes = [];
+    const keys = Object.keys(data).filter((key) => !key.startsWith("$"));
+    const rest = [];
+    for (const key of keys) {
+        const value = data[key];
+        if (key === "providers" && Array.isArray(value)) {
+            const names = value.map((item) => (isObject(item) ? String(item.name || "?") : "?"));
+            changes.push(`proveedores: ${names.join(", ")} (pueden cambiar a dónde se mandan tus claves)`);
+        }
+        else if (key === "mcp" && isObject(value)) {
+            const servers = Object.entries(value).map(([name, server]) => {
+                const detail = isObject(server) ? server.command || server.url : server;
+                return `${name} (${short(detail)})`;
+            });
+            changes.push(`servidores MCP que se arrancan solos: ${servers.join(", ")}`);
+        }
+        else if (key === "lsp" && isObject(value)) {
+            changes.push(`servidores de lenguaje: ${short(value)}`);
+        }
+        else if (key === "permission") {
+            changes.push(`permisos: ${short(value)}`);
+        }
+        else if (key === "agents" && isObject(value)) {
+            changes.push(`agentes: ${Object.keys(value).join(", ")}`);
+        }
+        else if (key === "commands" && isObject(value)) {
+            changes.push(`comandos: ${Object.keys(value).join(", ")}`);
+        }
+        else {
+            rest.push(key);
+        }
+    }
+    if (rest.length > 0) {
+        changes.push(`otros ajustes: ${rest.join(", ")}`);
+    }
+    return changes;
+}
+function readStore() {
+    try {
+        const data = JSON.parse(fs.readFileSync(TRUST_PATH, "utf8"));
+        return isObject(data) ? data : {};
+    }
+    catch {
+        return {};
+    }
+}
+function key(root) {
+    try {
+        return fs.realpathSync(root);
+    }
+    catch {
+        return path.resolve(root);
+    }
+}
+export function projectTrust(root) {
+    const files = [];
+    const changes = [];
+    const parts = [];
+    const add = (relative, text, change) => {
+        files.push(relative);
+        parts.push(`${relative}\u0000${text}`);
+        changes.push(...change.map((item) => `${relative}: ${item}`));
+    };
+    for (const relative of CONFIG_FILES) {
+        const text = readText(path.join(root, relative));
+        if (text === null) {
+            continue;
+        }
+        let data = {};
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            data = {};
+        }
+        const described = isObject(data) ? describeConfig(data) : [];
+        add(relative, text, described.length > 0 ? described : ["configuración de vipcode"]);
+    }
+    for (const relative of markdownFiles(root, AGENT_DIRS)) {
+        const text = readText(path.join(root, relative)) || "";
+        const { data } = parseFrontmatter(text);
+        // Un agente que solo trae instrucciones es como un AGENTS.md: no hace falta confiar
+        if (data.permission !== undefined || data.readOnly !== undefined) {
+            add(relative, text, [`agente con permisos propios: ${short({ permission: data.permission, readOnly: data.readOnly })}`]);
+        }
+    }
+    for (const relative of markdownFiles(root, COMMAND_DIRS)) {
+        const text = readText(path.join(root, relative)) || "";
+        if (/!`[^`]+`/.test(text)) {
+            add(relative, text, ["comando que ejecuta órdenes en la terminal al usarlo"]);
+        }
+    }
+    if (files.length === 0) {
+        return { files, changes, fingerprint: null, trusted: true };
+    }
+    const fingerprint = crypto.createHash("sha256").update(parts.join("\u0000\u0000")).digest("hex");
+    return { files, changes, fingerprint, trusted: readStore()[key(root)]?.fingerprint === fingerprint };
+}
+// Confías en la configuración que trae la carpeta tal como está ahora
+export function trustProject(root) {
+    const trust = projectTrust(root);
+    if (!trust.fingerprint) {
+        return trust;
+    }
+    const store = readStore();
+    store[key(root)] = { fingerprint: trust.fingerprint, date: new Date().toISOString() };
+    ensureHomeDir();
+    fs.writeFileSync(TRUST_PATH, JSON.stringify(store, null, 2), { mode: 0o600 });
+    return { ...trust, trusted: true };
+}
+export function untrustProject(root) {
+    const store = readStore();
+    if (!store[key(root)]) {
+        return false;
+    }
+    delete store[key(root)];
+    ensureHomeDir();
+    fs.writeFileSync(TRUST_PATH, JSON.stringify(store, null, 2), { mode: 0o600 });
+    return true;
+}
+// Ficheros de un agente o comando que están dentro del proyecto (los tuyos de ~/.vipcode no cuentan)
+export function isProjectFile(root, file) {
+    if (!file) {
+        return false;
+    }
+    const relative = path.relative(root, file);
+    return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative);
+}

package/dist/tui/app.js

@@ -11,6 +11,7 @@ import { isImagePath, readClipboardImage, toDataUrl } from "../images.js";
 import { renderMarkdown } from "../markdown.js";
 import { VERSION } from "../meta.js";
 import { NoSlotError } from "../router.js";
+import { showControl, stripControl, stripUnsafe } from "../sanitize.js";
 import { appendHistory, loadHistory } from "../session.js";
 import { suggestFiles } from "../tools.js";
 import { colorPreview } from "../ui.js";
@@ -107,7 +108,8 @@ function diffStats(display) {
 }
 // Debajo de cada herramienta, un resumen corto de lo que pasó
 function toolDetail(event) {
-    const output = event.output || "";
+    // La salida viene de ficheros y comandos: sin secuencias de la terminal
+    const output = stripControl(event.output || "");
     if (event.isError) {
         return [pc.red(firstLine(output))];
     }
@@ -162,8 +164,9 @@ function toolDetail(event) {
             return [pc.dim(firstLine(output))];
     }
 }
+// El resumen sale de lo que pidió el modelo (comandos, rutas): los caracteres de control se ven, no actúan
 function ToolHeader(props) {
-    return (_jsxs(_Fragment, { children: [_jsx(Text, { bold: true, children: TOOL_LABEL[props.name] || props.name }), props.summary ? _jsxs(Text, { children: [" ", props.summary] }) : null] }));
+    return (_jsxs(_Fragment, { children: [_jsx(Text, { bold: true, children: TOOL_LABEL[props.name] || showControl(props.name) }), props.summary ? _jsxs(Text, { children: [" ", showControl(props.summary)] }) : null] }));
 }
 function ToolView(props) {
     const { event } = props;
@@ -193,8 +196,8 @@ function ItemView(props) {
         case "banner":
             return _jsx(Banner, { app: props.app });
         case "user": {
-            const lines = item.text.split("\n");
-            let text = item.text;
+            const lines = stripControl(item.text).split("\n");
+            let text = lines.join("\n");
             if (lines.length > 20) {
                 text = `${lines.slice(0, 20).join("\n")}\n… (${lines.length - 20} líneas más)`;
             }
@@ -207,18 +210,19 @@ function ItemView(props) {
         case "answer":
             return (_jsx(Box, { marginLeft: 2, children: _jsxs(Text, { dimColor: true, wrap: "truncate-end", children: ["\u25C6 ", item.slot, item.score !== null ? ` · nota ${item.score}` : "", " \u00B7 ", formatDuration(item.ms), item.tokens > 0 ? ` · ${shortTokens(item.tokens)} tokens` : ""] }) }));
         case "shell": {
-            const lines = item.output ? item.output.split("\n") : [];
+            const lines = item.output ? stripControl(item.output).split("\n") : [];
             const shown = lines.slice(-30);
-            return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Text, { children: [_jsxs(Text, { color: "yellow", bold: true, children: ["$", " "] }), _jsx(Text, { bold: true, children: item.command })] }), lines.length > shown.length ? _jsxs(Text, { dimColor: true, children: ["  \u2026 ", lines.length - shown.length, " l\u00EDneas antes"] }) : null, shown.length > 0 ? _jsx(Text, { children: shown.map((line) => `  ${line}`).join("\n") }) : null, _jsxs(Text, { dimColor: true, children: ["  ", item.code === 0 ? "✓" : "✗", " c\u00F3digo ", item.code ?? "?", " \u00B7 el agente ver\u00E1 la salida con tu siguiente mensaje"] })] }));
+            return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Text, { children: [_jsxs(Text, { color: "yellow", bold: true, children: ["$", " "] }), _jsx(Text, { bold: true, children: showControl(item.command) })] }), lines.length > shown.length ? _jsxs(Text, { dimColor: true, children: ["  \u2026 ", lines.length - shown.length, " l\u00EDneas antes"] }) : null, shown.length > 0 ? _jsx(Text, { children: shown.map((line) => `  ${line}`).join("\n") }) : null, _jsxs(Text, { dimColor: true, children: ["  ", item.code === 0 ? "✓" : "✗", " c\u00F3digo ", item.code ?? "?", " \u00B7 el agente ver\u00E1 la salida con tu siguiente mensaje"] })] }));
         }
+        // Avisos y bloques pueden llevar mensajes de los proveedores o datos de fuera: solo se dejan los colores
         case "info":
-            return _jsx(Text, { dimColor: true, children: item.text });
+            return _jsx(Text, { dimColor: true, children: stripUnsafe(item.text) });
         case "notice":
-            return _jsxs(Text, { color: "yellow", children: ["\u26A0 ", item.text] });
+            return _jsxs(Text, { color: "yellow", children: ["\u26A0 ", stripUnsafe(item.text)] });
         case "error":
-            return _jsxs(Text, { color: "red", children: ["\u2716 ", item.text] });
+            return _jsxs(Text, { color: "red", children: ["\u2716 ", stripUnsafe(item.text)] });
         case "block":
-            return (_jsx(Box, { marginY: 1, children: _jsx(Text, { children: item.text }) }));
+            return (_jsx(Box, { marginY: 1, children: _jsx(Text, { children: stripUnsafe(item.text) }) }));
     }
 }
 function TodoPanel(props) {
@@ -229,15 +233,15 @@ function TodoPanel(props) {
     const done = props.todos.filter((todo) => todo.status === "completed").length;
     return (_jsxs(Box, { flexDirection: "column", marginTop: 1, paddingX: 1, children: [_jsxs(Text, { dimColor: true, children: ["Tareas (", done, "/", props.todos.length, ")"] }), props.todos.slice(0, 10).map((todo, index) => {
                 if (todo.status === "completed") {
-                    return (_jsxs(Text, { color: "green", strikethrough: true, children: ["\u2611 ", todo.content] }, index));
+                    return (_jsxs(Text, { color: "green", strikethrough: true, children: ["\u2611 ", stripControl(todo.content)] }, index));
                 }
                 if (todo.status === "in_progress") {
-                    return (_jsxs(Text, { color: "yellow", children: ["\u25D0 ", todo.content] }, index));
+                    return (_jsxs(Text, { color: "yellow", children: ["\u25D0 ", stripControl(todo.content)] }, index));
                 }
                 if (todo.status === "cancelled") {
-                    return (_jsxs(Text, { dimColor: true, strikethrough: true, children: ["\u2612 ", todo.content] }, index));
+                    return (_jsxs(Text, { dimColor: true, strikethrough: true, children: ["\u2612 ", stripControl(todo.content)] }, index));
                 }
-                return _jsxs(Text, { children: ["\u2610 ", todo.content] }, index);
+                return _jsxs(Text, { children: ["\u2610 ", stripControl(todo.content)] }, index);
             }), props.todos.length > 10 ? _jsxs(Text, { dimColor: true, children: ["\u2026 y ", props.todos.length - 10, " m\u00E1s"] }) : null] }));
 }
 function InputBox(props) {
@@ -1004,7 +1008,7 @@ function Main(props) {
     if (busy) {
         placeholder = "Escribe para añadir instrucciones mientras trabaja…";
     }
-    return (_jsxs(_Fragment, { children: [_jsx(Static, { items: items, children: (item) => _jsx(ItemView, { item: item, app: app, width: columns }, item.id) }), _jsxs(Box, { flexDirection: "column", children: [live.current.reasoning ? (_jsxs(Text, { dimColor: true, italic: true, wrap: "truncate-end", children: ["\uD83D\uDCAD ", lastLines(live.current.reasoning.replace(/\s+/g, " "), 1).slice(-Math.max(20, columns - 6))] })) : null, liveText ? (_jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: color, children: "\u25CF " }), _jsx(Box, { flexDirection: "column", flexGrow: 1, children: _jsxs(Text, { children: [liveText, _jsx(Text, { color: color, children: "\u258D" })] }) })] })) : null, running.map(({ event, progress, since }) => (_jsxs(Box, { flexDirection: "column", marginLeft: event.depth > 0 ? 4 : 0, children: [_jsxs(Text, { wrap: "truncate-end", children: [_jsx(Spinner, {}), " ", _jsx(ToolHeader, { name: event.name, summary: event.summary }), " ", _jsx(Elapsed, { since: since, hideUnderMs: 2000 })] }), progress ? (_jsxs(Text, { dimColor: true, wrap: "truncate-end", children: ["    ", lastLines(progress, 1).slice(0, Math.max(20, columns - 8))] })) : null] }, `${event.depth}:${event.id}`))), shell ? (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Text, { children: [_jsx(Spinner, { color: "yellow" }), " ", _jsx(Text, { bold: true, children: shell.command }), " ", _jsx(Elapsed, { since: startedAt.current, hideUnderMs: 1000 })] }), shell.output ? _jsx(Text, { dimColor: true, children: lastLines(shell.output, Math.min(8, liveRoom)).replace(/^/gm, "  ") }) : null] })) : null, _jsx(TodoPanel, { todos: todos }), busy && !shell && running.length === 0 && !liveText && !answered.current ? (_jsx(Box, { marginTop: 1, children: _jsxs(Text, { wrap: "truncate-end", children: [_jsx(Spinner, {}), " ", _jsxs(Text, { dimColor: true, children: ["Pensando", live.current.model ? ` con ${live.current.model}` : "", "\u2026 "] }), _jsx(Elapsed, { since: startedAt.current, hideUnderMs: 1000 })] }) })) : null, dialogView || (_jsx(InputBox, { editor: editor, color: color, placeholder: placeholder, attachments: attachments.length, maxLines: Math.max(3, Math.floor(rows / 2) - 4), width: columns })), suggestionsVisible && !dialog ? (_jsx(Box, { flexDirection: "column", paddingX: 2, children: suggestions.map((suggestion, index) => (_jsxs(Text, { color: index === selected ? "cyan" : undefined, wrap: "truncate-end", children: [index === selected ? "❯ " : "  ", suggestion.label, suggestion.description ? _jsxs(Text, { dimColor: true, children: [" ", suggestion.description] }) : null] }, `${index}-${suggestion.label}`))) })) : null, _jsx(StatusBar, { app: app, agentName: agentName, busy: busy, model: busy ? live.current.model : "" })] })] }));
+    return (_jsxs(_Fragment, { children: [_jsx(Static, { items: items, children: (item) => _jsx(ItemView, { item: item, app: app, width: columns }, item.id) }), _jsxs(Box, { flexDirection: "column", children: [live.current.reasoning ? (_jsxs(Text, { dimColor: true, italic: true, wrap: "truncate-end", children: ["\uD83D\uDCAD ", lastLines(stripControl(live.current.reasoning).replace(/\s+/g, " "), 1).slice(-Math.max(20, columns - 6))] })) : null, liveText ? (_jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: color, children: "\u25CF " }), _jsx(Box, { flexDirection: "column", flexGrow: 1, children: _jsxs(Text, { children: [liveText, _jsx(Text, { color: color, children: "\u258D" })] }) })] })) : null, running.map(({ event, progress, since }) => (_jsxs(Box, { flexDirection: "column", marginLeft: event.depth > 0 ? 4 : 0, children: [_jsxs(Text, { wrap: "truncate-end", children: [_jsx(Spinner, {}), " ", _jsx(ToolHeader, { name: event.name, summary: event.summary }), " ", _jsx(Elapsed, { since: since, hideUnderMs: 2000 })] }), progress ? (_jsxs(Text, { dimColor: true, wrap: "truncate-end", children: ["    ", lastLines(stripControl(progress), 1).slice(0, Math.max(20, columns - 8))] })) : null] }, `${event.depth}:${event.id}`))), shell ? (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsxs(Text, { children: [_jsx(Spinner, { color: "yellow" }), " ", _jsx(Text, { bold: true, children: showControl(shell.command) }), " ", _jsx(Elapsed, { since: startedAt.current, hideUnderMs: 1000 })] }), shell.output ? _jsx(Text, { dimColor: true, children: lastLines(stripControl(shell.output), Math.min(8, liveRoom)).replace(/^/gm, "  ") }) : null] })) : null, _jsx(TodoPanel, { todos: todos }), busy && !shell && running.length === 0 && !liveText && !answered.current ? (_jsx(Box, { marginTop: 1, children: _jsxs(Text, { wrap: "truncate-end", children: [_jsx(Spinner, {}), " ", _jsxs(Text, { dimColor: true, children: ["Pensando", live.current.model ? ` con ${live.current.model}` : "", "\u2026 "] }), _jsx(Elapsed, { since: startedAt.current, hideUnderMs: 1000 })] }) })) : null, dialogView || (_jsx(InputBox, { editor: editor, color: color, placeholder: placeholder, attachments: attachments.length, maxLines: Math.max(3, Math.floor(rows / 2) - 4), width: columns })), suggestionsVisible && !dialog ? (_jsx(Box, { flexDirection: "column", paddingX: 2, children: suggestions.map((suggestion, index) => (_jsxs(Text, { color: index === selected ? "cyan" : undefined, wrap: "truncate-end", children: [index === selected ? "❯ " : "  ", suggestion.label, suggestion.description ? _jsxs(Text, { dimColor: true, children: [" ", suggestion.description] }) : null] }, `${index}-${suggestion.label}`))) })) : null, _jsx(StatusBar, { app: app, agentName: agentName, busy: busy, model: busy ? live.current.model : "" })] })] }));
 }
 export async function startTui(app, options = {}) {
     const instance = render(_jsx(Main, { app: app, initial: options.initial || "" }), {

package/dist/tui/dialogs.js

@@ -2,6 +2,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 import { Box, Text, useInput, usePaste } from "ink";
 import { useMemo, useState } from "react";
 import { suggestPattern } from "../permissions.js";
+import { showControl, stripControl } from "../sanitize.js";
 import { colorPreview } from "../ui.js";
 import { EMPTY, backspace, deleteWordBack, insert, moveLeft, moveRight, splitEnter } from "./editor.js";
 const KIND_LABEL = {
@@ -96,7 +97,7 @@ export function PermissionDialog(props) {
     const lines = request.preview.split("\n");
     const shown = lines.slice(0, 30).join("\n");
     const hidden = lines.length - 30;
-    return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: "yellow", paddingX: 1, children: [_jsxs(Text, { bold: true, color: "yellow", children: ["? ", request.title, props.agent !== "build" ? _jsxs(Text, { dimColor: true, children: [" (", props.agent, ")"] }) : null] }), _jsxs(Box, { marginY: 1, flexDirection: "column", children: [_jsx(Text, { children: colorPreview(shown) }), hidden > 0 ? _jsxs(Text, { dimColor: true, children: ["\u2026 ", hidden, " l\u00EDneas m\u00E1s"] }) : null] }), explaining ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: "\u00BFQu\u00E9 deber\u00EDa hacer en su lugar? (Enter env\u00EDa, Esc vuelve)" }), _jsxs(Text, { children: [_jsx(Text, { color: "yellow", children: "\u276F " }), feedback.value.slice(0, feedback.cursor), _jsx(Text, { inverse: true, children: feedback.value[feedback.cursor] || " " }), feedback.value.slice(feedback.cursor + 1)] })] })) : (_jsxs(_Fragment, { children: [options.map((option, index) => (_jsxs(Text, { color: index === selected ? "cyan" : undefined, children: [index === selected ? "❯ " : "  ", _jsxs(Text, { dimColor: true, children: ["[", option.key, "]"] }), " ", option.label] }, option.key))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 elige \u00B7 Enter acepta \u00B7 la letra es un atajo \u00B7 Esc = no" })] }))] }));
+    return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: "yellow", paddingX: 1, children: [_jsxs(Text, { bold: true, color: "yellow", children: ["? ", showControl(request.title), props.agent !== "build" ? _jsxs(Text, { dimColor: true, children: [" (", props.agent, ")"] }) : null] }), _jsxs(Box, { marginY: 1, flexDirection: "column", children: [_jsx(Text, { children: colorPreview(shown) }), hidden > 0 ? _jsxs(Text, { dimColor: true, children: ["\u2026 ", hidden, " l\u00EDneas m\u00E1s"] }) : null] }), explaining ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: "\u00BFQu\u00E9 deber\u00EDa hacer en su lugar? (Enter env\u00EDa, Esc vuelve)" }), _jsxs(Text, { children: [_jsx(Text, { color: "yellow", children: "\u276F " }), feedback.value.slice(0, feedback.cursor), _jsx(Text, { inverse: true, children: feedback.value[feedback.cursor] || " " }), feedback.value.slice(feedback.cursor + 1)] })] })) : (_jsxs(_Fragment, { children: [options.map((option, index) => (_jsxs(Text, { color: index === selected ? "cyan" : undefined, children: [index === selected ? "❯ " : "  ", _jsxs(Text, { dimColor: true, children: ["[", option.key, "]"] }), " ", option.label] }, option.key))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 elige \u00B7 Enter acepta \u00B7 la letra es un atajo \u00B7 Esc = no" })] }))] }));
 }
 function matches(item, query) {
     return `${item.label} ${item.description || ""}`.toLowerCase().includes(query);
@@ -155,7 +156,7 @@ export function SelectDialog(props) {
     const visible = filtered.slice(start, start + windowSize);
     return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: "cyan", paddingX: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: props.title }), _jsx(Text, { dimColor: true, children: filter ? `Filtro: ${filter}` : "Escribe para filtrar · ↑↓ elegir · Enter aceptar · Esc salir" }), visible.length === 0 ? _jsx(Text, { dimColor: true, children: "(nada coincide)" }) : null, visible.map((item, index) => {
                 const active = start + index === selected;
-                return (_jsxs(Text, { color: active ? "cyan" : undefined, wrap: "truncate-end", children: [active ? "❯ " : "  ", item.label, item.description ? _jsxs(Text, { dimColor: true, children: [" ", item.description] }) : null] }, `${start + index}-${item.label}`));
+                return (_jsxs(Text, { color: active ? "cyan" : undefined, wrap: "truncate-end", children: [active ? "❯ " : "  ", stripControl(item.label), item.description ? _jsxs(Text, { dimColor: true, children: [" ", stripControl(item.description)] }) : null] }, `${start + index}-${item.label}`));
             }), filtered.length > windowSize ? (_jsxs(Text, { dimColor: true, children: [selected + 1, "/", filtered.length] })) : null] }));
 }
 // Pide un texto (las claves se ven como •••)

package/dist/ui.js

@@ -1,22 +1,24 @@
 import pc from "picocolors";
 import { suggestPattern } from "./permissions.js";
+import { showControl, stripControl, stripUnsafe } from "./sanitize.js";
 import { formatTodos } from "./tools.js";
 export const ui = {
     text(chunk) {
         process.stdout.write(chunk);
     },
+    // Los mensajes pueden llevar texto de los proveedores o del modelo: sin secuencias de la terminal
     info(message) {
-        console.log(pc.dim(message));
+        console.log(pc.dim(stripUnsafe(message)));
     },
     notice(message) {
-        console.log(pc.yellow(`⚠ ${message}`));
+        console.log(pc.yellow(`⚠ ${stripUnsafe(message)}`));
     },
     error(message) {
-        console.log(pc.red(`✖ ${message}`));
+        console.log(pc.red(`✖ ${stripUnsafe(message)}`));
     },
     tool(name, summary, depth = 0) {
         const indent = depth > 0 ? "      " : "  ";
-        console.log(pc.cyan(`${indent}● ${name}`) + pc.dim(` ${summary}`));
+        console.log(pc.cyan(`${indent}● ${showControl(name)}`) + pc.dim(` ${showControl(summary)}`));
     },
     banner(agent, slots) {
         console.log(pc.bold(pc.magenta("vipcode")) + pc.dim(` · agente ${agent} · ${slots} modelos · /help para ayuda`));
@@ -31,9 +33,10 @@ export const ui = {
         return pc.magenta("❯ ");
     },
 };
-// Líneas quitadas en rojo, añadidas en verde, cabeceras @@ en cian y el contexto atenuado
+// Líneas quitadas en rojo, añadidas en verde, cabeceras @@ en cian y el contexto atenuado.
+// Es lo que apruebas: los caracteres de control se ven (␛) en vez de actuar
 export function colorPreview(preview) {
-    return preview
+    return showControl(preview)
         .split("\n")
         .map((line) => {
         if (line.startsWith("+ ")) {
@@ -75,7 +78,7 @@ export function plainEvents(options) {
                 return;
             }
             flushReasoning();
-            process.stdout.write(chunk);
+            process.stdout.write(stripControl(chunk));
         },
         onTextEnd: (depth) => {
             if (depth === 0) {
@@ -92,7 +95,7 @@ export function plainEvents(options) {
                     process.stdout.write(pc.dim("  💭 "));
                     reasoningShown = true;
                 }
-                const piece = chunk.replace(/\s+/g, " ").slice(0, 240 - reasoning.length);
+                const piece = stripControl(chunk).replace(/\s+/g, " ").slice(0, 240 - reasoning.length);
                 reasoning += piece;
                 process.stdout.write(pc.dim(piece));
                 if (reasoning.length >= 240) {
@@ -107,7 +110,7 @@ export function plainEvents(options) {
         onToolEnd: (event) => {
             const pad = event.depth > 0 ? "        " : "    ";
             if (event.isError) {
-                console.log(pc.red(`${pad}${event.output.split("\n")[0].slice(0, 200)}`));
+                console.log(pc.red(`${pad}${stripControl(event.output.split("\n")[0]).slice(0, 200)}`));
             }
             else if (event.display && event.depth === 0) {
                 console.log(indent(colorPreview(event.display), pad));
@@ -129,7 +132,7 @@ export function plainPermissionPrompt(getReadline, grants) {
             return { allow: false, feedback: "no hay nadie para aprobarlo (usa --yolo o ajusta los permisos)" };
         }
         console.log("");
-        console.log(pc.bold(pc.yellow(`? ${request.title}`)));
+        console.log(pc.bold(pc.yellow(`? ${showControl(request.title)}`)));
         console.log(colorPreview(request.preview));
         let options = "[s]í / [n]o / [t]odo en esta sesión / [e] no y explicar";
         let pattern = "";
@@ -177,5 +180,5 @@ export const plainAdapter = {
     info: (text) => ui.info(text),
     notice: (text) => ui.notice(text),
     error: (text) => ui.error(text),
-    block: (text) => console.log(text),
+    block: (text) => console.log(stripUnsafe(text)),
 };

package/dist/update.js

@@ -2,13 +2,12 @@ import { spawn } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
 import { PACKAGE_NAME, REPO_URL, VERSION } from "./meta.js";
-import { HOME_DIR, UPDATE_PATH } from "./paths.js";
+import { INSTALL_DIR, UPDATE_PATH, ensureHomeDir } from "./paths.js";
 const DAY_MS = 24 * 60 * 60 * 1000;
 // Carpeta donde está instalado vipcode (la que contiene dist/). VIPCODE_INSTALL_ROOT permite fingir otra en las pruebas
 export function packageRoot() {
-    return process.env.VIPCODE_INSTALL_ROOT || path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+    return process.env.VIPCODE_INSTALL_ROOT || INSTALL_DIR;
 }
 // "v0.10.1" frente a "0.9.3": positivo si a es más nueva
 export function compareVersions(a, b) {
@@ -102,7 +101,7 @@ export async function checkForUpdate() {
         try {
             const release = await latestRelease();
             cache = { checked: Date.now(), latest: release?.version || VERSION };
-            fs.mkdirSync(HOME_DIR, { recursive: true });
+            ensureHomeDir();
             fs.writeFileSync(UPDATE_PATH, JSON.stringify(cache, null, 2));
         }
         catch {
@@ -218,6 +217,9 @@ async function updateFromRelease(root, log) {
             message: `Hay una versión nueva (${release.version}, tienes la ${VERSION}), pero este vipcode no está instalado con «npm install -g». Instálala con:\n  npm install -g ${release.spec}`,
         };
     }
+    if (!/^[\w@.:/+~%-]+$/.test(release.spec) || release.spec.startsWith("-")) {
+        return { status: "error", message: `La última versión publicada tiene un nombre de paquete raro (${release.spec}): no la instalo.` };
+    }
     log(`Instalando vipcode ${release.version} desde ${release.source}…`);
     // Desde la carpeta temporal, para que no se mezcle con la configuración de npm del proyecto en el que estás
     const install = await run(NPM, ["install", "-g", release.spec], os.tmpdir());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vipcode",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Agente de programación para la terminal que usa IAs gratuitas y salta a otro proveedor cuando uno se agota",
   "keywords": [
     "ai",
@@ -23,7 +23,7 @@
     "url": "git+https://github.com/PabloVip/vipcode.git"
   },
   "license": "MIT",
-  "author": "Pablo Vicente (https://github.com/PabloVip)",
+  "author": "Pablo Vicente Juan (https://github.com/PabloVip)",
   "type": "module",
   "bin": {
     "vipcode": "dist/index.js"