@gotza02/sequential-thinking 2026.2.45 → 2026.2.46

package/dist/tools/thinking.js

@@ -74,11 +74,11 @@ If you have tried to fix the same problem 3 times and failed:
 2. Do not attempt a 4th fix in the same chain.
 3. Branch back to the analysis phase before the first fix attempt.`, {
         thought: z.string().describe("Your current thinking step"),
-        thoughtType: z.enum([
+        thoughtType: z.preprocess((val) => (typeof val === 'string' && val.toLowerCase() === 'reflection' ? 'reflexion' : val), z.enum([
             'analysis', 'planning', 'execution', 'observation',
             'hypothesis', 'reflexion', 'solution',
             'generation', 'evaluation', 'selection'
-        ]).describe("The structural role of this thought (see THOUGHT TYPES above)"),
+        ])).describe("The structural role of this thought (see THOUGHT TYPES above)"),
         thoughtNumber: z.number().int().min(1).describe("Current thought number (e.g., 1, 2, 3)"),
         totalThoughts: z.number().int().min(1).describe("Estimated total thoughts needed (can be adjusted)"),
         nextThoughtNeeded: z.boolean().optional().default(true).describe("True if more thinking/action is needed"),

package/dist/utils.js

@@ -136,9 +136,14 @@ function validateCommand(command) {
  * @throws Error if command contains shell metacharacters or is not whitelisted
  */
 export function execAsync(command, options = {}) {
-    // Validate command for security
-    validateCommand(command);
     return new Promise((resolve, reject) => {
+        try {
+            // Validate command for security
+            validateCommand(command);
+        }
+        catch (error) {
+            return reject(error);
+        }
         const timeout = options.timeout || 60000; // Default 60s timeout
         const maxBuffer = options.maxBuffer || 1024 * 1024 * 5; // Default 5MB buffer
         // Parse command into parts
@@ -213,7 +218,7 @@ export function validatePath(requestedPath) {
         absolutePath = resolvedPath;
         rootDir = path.resolve(process.cwd());
     }
-    if (!absolutePath.startsWith(rootDir)) {
+    if (!absolutePath.startsWith(rootDir) || (absolutePath.length > rootDir.length && absolutePath[rootDir.length] !== path.sep)) {
         throw new Error(`Access denied: Path '${requestedPath}' (resolved to '${absolutePath}') is outside the project root '${rootDir}'.`);
     }
     return absolutePath;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotza02/sequential-thinking",
-  "version": "2026.2.45",
+  "version": "2026.2.46",
   "publishConfig": {
     "access": "public"
   },