Lines 114-158javascript
114`};delete t.items,Object.assign(t,{type:r,source:e,end:[s]});break}default:{let n="indent"in t?t.indent:-1,s="end"in t&&Array.isArray(t.end)?t.end.filter(a=>a.type==="space"||a.type==="comment"||a.type==="newline"):[];for(let a of Object.keys(t))a!=="type"&&a!=="offset"&&delete t[a];Object.assign(t,{type:r,indent:n,source:e,end:s})}}}zr.createScalarToken=yg;zr.resolveAsScalar=gg;zr.setScalarValue=vg});var $l=S(Dl=>{"use strict";var wg=t=>"type"in t?Qr(t):Hr(t);function Qr(t){switch(t.type){case"block-scalar":{let e="";for(let r of t.props)e+=Qr(r);return e+t.source}case"block-map":case"block-s ...
116`:return"newline";case"-":return"seq-item-ind";case"?":return"explicit-key-ind";case":":return"map-value-ind";case"{":return"flow-map-start";case"}":return"flow-map-end";case"[":return"flow-seq-start";case"]":return"flow-seq-end";case",":return"comma"}switch(t[0]){case" ":case" ":return"space";case"#":return"comment";case"%":return"directive-line";case"*":return"alias";case"&":return"anchor";case"!":return"tag";case"'":return"single-quoted-scalar";case'"':return"double-quoted-scalar";case"|":case">":return"block-scalar-header"}return null}z.createScalarToken=Qs.createScalarToken;z.resolveAsSca ...
117`:case"\r":case" ":return!0;default:return!1}}var Kl=new Set("0123456789ABCDEFabcdef"),Cg=new Set("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-#;/?:@&=+$_.!~*'()"),Xr=new Set(",[]{}"),Mg=new Set(` ,[]{}
118\r `),ra=t=>!t||Mg.has(t),na=class{constructor(){this.atEnd=!1,this.blockScalarIndent=-1,this.blockScalarKeep=!1,this.buffer="",this.flowKey=!1,this.flowLevel=0,this.indentNext=0,this.indentValue=0,this.lineEndPos=null,this.next=null,this.pos=0}*lex(e,r=!1){if(e){if(typeof e!="string")throw TypeError("source is not a string");this.buffer=this.buffer?this.buffer+e:e,this.lineEndPos=null}this.atEnd=!r;let n=this.next??"stream";for(;n&&(r||this.hasChars(1));)n=yield*this.parseNext(n)}atLineEnd(){let e=this.pos,r=this.buffer[e];for(;r===" "||r===" ";)r=this.buffer[++e];return!r||r==="#"||r===`
119`?!0:r==="\r"?this.buffer[e+1]===`
120`:!1}charAt(e){return this.buffer[this.pos+e]}continueScalar(e){let r=this.buffer[e];if(this.indentNext>0){let n=0;for(;r===" ";)r=this.buffer[++n+e];if(r==="\r"){let s=this.buffer[n+e+1];if(s===`
121`||!s&&!this.atEnd)return e+n+1}return r===`
122`||n>=this.indentNext||!r&&!this.atEnd?e+n:-1}if(r==="-"||r==="."){let n=this.buffer.substr(e,3);if((n==="---"||n==="...")&&ne(this.buffer[e+3]))return-1}return e}getLine(){let e=this.lineEndPos;return(typeof e!="number"||e!==-1&&e<this.pos)&&(e=this.buffer.indexOf(`
123`,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]==="\r"&&(e-=1),this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buffer.substring(this.pos),this.pos=0,this.lineEndPos=null,this.next=e,null}peek(e){return this.buffer.substr(this.pos,e)}*parseNext(e){switch(e){case"stream":return yield*this.parseStream();case"line-start":return yield*this.parseLineStart();case"block-start":return yield*this.parseBlockStart();case"doc":return yield*this.parseDocument();case"flow":return yi ...
124`,this.pos);if(s!==-1){for(;s!==-1;){let a=this.continueScalar(s+1);if(a===-1)break;s=n.indexOf(`
125`,a)}s!==-1&&(r=s-(n[s-1]==="\r"?2:1))}if(r===-1){if(!this.atEnd)return this.setNext("quoted-scalar");r=this.buffer.length}return yield*this.
126`:e=a,r=0;break;case"\r":{let i=this.buffer[a+1];if(!i&&!this.atEnd)return this.setNext("block-scalar");if(i===`
127`)break}default:break e}if(!n&&!this.atEnd)return this.setNext("block-scalar");if(r>=this.indentNext){this.blockScalarIndent===-1?this.indentNext=r:this.indentNext=this.blockScalarIndent+(this.indentNext
128`,a)}while(e!==-1);if(e===-1){if(!this.atEnd)return this.setNext("block-scalar");e=this.buffer.length}}let s=e+1;for(n=this.buffer[s];n===" ";)n=this.buffer[++s];
129`;)n=this.buffer[++s];e=s-1}else if(!this.blockScalarKeep)do{let a=e-1,i=this.buffer[a];i==="\r"&&(i=this.buffer[--a]);let o=a;for(;i===" "
130`&&a>=this.pos&&a+1+r>o)e=a;else break}while(!0);return yield qt.SCALAR,yield*this.pushToIndex(e+1,!0),yield*this.parseLineStart()}*parsePlainScalar(){
132`,a=this.buffer[n+1]):r=n),a==="#"||e&&Xr.has(a))break;if(s===`
133`){let i=this.continueScalar(n+1);if(i===-1)break;n=Math.max(n,i-2)}}else{if(e&&Xr.has(s))break;r=n}return!s&&!this.atEnd?this.setNext("plain-scalar")
134`?yield*this.pushCount(1):e==="\r"&&this.charAt(1)===`
135`?yield*this.pushCount(2):0}*pushSpaces(e){let r=this.pos-1,n;do n=this.buffer[++r];while(n===" "||e&&n===" ");let s=r-this.pos;return s>0&&(yield this.buffer.substr(this.pos,s),this.pos=r),s}*pushUntil(e){let r=this.pos,n=this.buffer[r];for(;!e(n);)n=this.buffer[++r];return yield*this.pushToIndex(r,!1)}};Vl.Lexer=na});var ia=S(Jl=>{"use strict";var aa=class{constructor(){this.lineStarts=[],this.addNewLine=e=>this.lineStarts.push(e),this.linePos=e=>{let r=0,n=this.lineStarts.length;for(;r<n;){let a=r+n>>1;this.lineStarts[a]<e?r=a+1:n=a}if(this.lineStarts[r]===e)return{line:r+1,col:1};if(r===0) ...
136`)+1;for(;r!==0;)this.onNewLine(this.offset+r),r=this.source.indexOf(`
137`,r)+1}yield*this.pop();break;default:yield*this.pop(),yield*this.step()}}*blockMap(e){let r=e.items[e.items.length-1];switch(this.type){case"newline":if(this.onKeyLine=!1,r.value){let
138`)+1;for(;r!==0;)this.onNewLine(this.offset+r),r=this.source.indexOf(`
139`,r)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(e){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"double-quoted-scalar":return this.flowScalar(this.type);case"block-scalar-header":return{type:"block-scalar",offset:this.offset,indent:this.indent,props:[this.sourceToken],source:""};case"flow-map-start":case"flow-seq-start":return{type:"flow-collection",offset:this.offset,indent:this.indent,start:this.sourceToken,items:[],end:[]};case"seq-item-ind":return{type:"block-seq",offset:this.offset,indent:this.indent,items:[{start ...
140${r.newText}`);return e.length>0?e.join(`
141`):void 0}function Jd(t){if(typeof t=="string")return t;if(t&&typeof t=="object"){let e=t;if(typeof e.error=="string")return e.error;if(typeof e.message=="string")return e.message}
142Error message: ${Wu(e)}`,cause:e}),this[Eu]=!0,this.text=t}static isInstance(t){return O.hasMarker(t,rc)}},nc="AI_LoadAPIKeyError",sc=`vercel.ai.error.${nc}`,yy=Symbol.for(sc),_u,Cu,VT=class extends(Cu=O,_u=yy,Cu){constructor({message:t}){super({name:nc,message:t}),this[_u]=!0}static isInstance(t){return O.hasMarker(t,sc)}},ac="AI_LoadSettingError",ic=`vercel.ai.error.${ac}`,vy=Symbol.for(ic),Mu,Ru,JT=class extends(Ru=O,Mu=vy,Ru){constructor({message:t}){super({name:ac,message:t}),this[Mu]=!0}static isInstance(t){return O.hasMarker(t,ic)}},oc="AI_NoContentGeneratedError",lc=`vercel.ai.error.${ ...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/lib.jsView on unpkg · L134 HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/lib.jsView on unpkg · L138 143Error message: ${Wu(r)}`,cause:r}),this[Du]=!0,this.value=e,this.context=n}static isInstance(e){return O.hasMarker(e,hc)}static wrap({value:e,cause:r,context:n}){var s,a,i;return ma.isInstance(r)&&r.value===e&&((s=r.context)==null?void 0:s.field)===n?.field&&((a=r.context)==null?void 0:a.entityName)===n?.entityName&&((i=r.context)==null?void 0:i.entityId)===n?.entityId?r:new ma({value:e,cause:r,context:n})}},mc="AI_UnsupportedFunctionalityError",gc=`vercel.ai.error.${mc}`,Ty=Symbol.for(gc),Bu,Uu,zT=class extends(Uu=O,Bu=Ty,Uu){constructor({functionality:t,message:e=`'${t}' functionality not su ...
144]))`;continue}else if(s[u]==="$"){a+=`($|(?=[\r
145]))`;continue}}if(n.s&&s[u]==="."){a+=o?`${s[u]}\r
147]`;continue}a+=s[u],s[u]==="\\"?i=!0:o&&s[u]==="]"?o=!1:!o&&s[u]==="["&&(o=!0)}try{new RegExp(a)}catch{return console.warn(`Could not convert regex pattern at ${e.currentPath.join("/")} to a flag-independent form! Falling back to the flag-ignorant source`),t.source}return a}function Rc(t,e){var r,n,s,a,i,o;let l={type:
149`)},flush(t){t.enqueue(`data: [DONE]
151`)}})}};var Kt=y.record(y.string(),qe.optional()),JA=ln(()=>jt(y.union([y.strictObject({type:y.literal("text-start"),id:y.string(),providerMetadata:C.optional()}),y.strictObject({type:y.literal("text-delta"),id:y.string(),delta:y.string(),providerMetadata:C.optional()}),y.strictObject({type:y.literal("text-end"),id:y.string(),providerMetadata:C.optional()}),y.strictObject({type:y.literal("error"),errorText:y.string()}),y.strictObject({type:y.literal("tool-input-start"),toolCallId:y.string(),toolName:y.string(),providerExecuted:y.boolean().optional(),providerMetadata:C.optional(),toolMetadata:K ...
152`;(o==="error"||o==="fatal"?process.stderr:process.stdout).write(A)};return{trace:(o,l)=>i("trace",o,l),debug:(o,l)=>i("debug",o,l),info:(o,l)=>i("info",o,l),warn
153`;return a=a.then(()=>t.appendFile(l)).catch(()=>{}),a};return{filePath:e,log(o,l){return i({kind:o,...l??{}})},event(o,l){return i({
154`),s=!0)}):void 0,i=new _e({...Bt(t),fetch:e.fetch,logger:a}),o=await i.getAgentCard();a?.info({agent:o.name,version:o.version},"ping connected to A2A agent"),a?.info({prompt:e.prompt},"ping sending prompt");for await(let l of i.sendStreaming({message:oS(e)})){let u=cd(l);u!==""&&(n||(a?a.info({},"ping response started"):r(`reef ping response:
155`)),n=!0,r(u),s=u.endsWith(`
157`):a?a.info({},"ping completed without a text response"):r(`reef ping: completed without a text response
158`)}async function aS(t,e){let r=e.output??(i=>process.stdout.write(i)),n=e.logger,s=Ut(t),a=await tr(s,(i,o)=>at(i.options,o),{logger:n});try{n?.info({agent:a.agentInfo?.name},"ping connected to ACP agent"),n?.info({prompt:e.prompt},"ping sending prompt");let i=await a.ctx.buildSession(s.cwd).start();i.prompt([{type:"text",text:e.prompt}]);let o=!1,l=!0;for(;;){let u=await i.nextUpdate();if(u.kind==="stop")break;let d=ud(u.update);d!==""&&(o||(n?n.info({},"ping response started"):r(`reef ping response:
Long lines were clipped for display.