@joeytheman/gemini-mcp-tool 1.3.0 → 2.3.0

package/dist/utils/commandExecutor.js

@@ -1,20 +1,140 @@
 import { spawn } from "child_process";
 import { Logger } from "./logger.js";
-export async function executeCommand(command, args, onProgress, cwd) {
+import { AGY_LIMITS, ERROR_MESSAGES } from "../constants.js";
+// Node clamps longer delays to 1 ms, so long limits need more than one timer.
+const MAX_TIMER_DELAY_MS = 2 ** 31 - 1;
+export async function executeCommand(command, args, onProgress, cwd, limits = {}) {
     return new Promise((resolve, reject) => {
+        if (limits.signal?.aborted) {
+            reject(new Error(ERROR_MESSAGES.AGY_CANCELLED));
+            return;
+        }
         const startTime = Date.now();
         Logger.commandExecution(command, args, startTime);
+        // Give limited POSIX commands their own process group. agy's MCP children
+        // inherit it, so a stop can reach them even if agy ignores SIGTERM.
+        const grouped = process.platform !== "win32" &&
+            (limits.killAfterMs !== undefined || limits.signal !== undefined);
         const childProcess = spawn(command, args, {
             env: process.env,
-            shell: process.platform === "win32",
+            shell: false,
             stdio: ["ignore", "pipe", "pipe"],
             ...(cwd && { cwd }),
+            ...(grouped && { detached: true }),
         });
         // Use array buffers for O(n) performance instead of O(n²) string concatenation
         const stdoutChunks = [];
         const stderrChunks = [];
         let isResolved = false;
+        let stopError;
+        let resourceExhausted = false;
+        let ceilingTimer;
+        let graceTimer;
+        let closeTimer;
+        const settle = () => {
+            isResolved = true;
+            clearTimeout(ceilingTimer);
+            clearTimeout(graceTimer);
+            clearTimeout(closeTimer);
+            limits.signal?.removeEventListener("abort", onAbort);
+        };
+        const signalProcessGroup = (signal) => {
+            try {
+                if (grouped && childProcess.pid !== undefined) {
+                    process.kill(-childProcess.pid, signal);
+                }
+                else {
+                    childProcess.kill(signal);
+                }
+            }
+            catch {
+                // A process can exit between the timer and the signal. If the group
+                // signal failed for another reason, still try to stop agy itself.
+                if (grouped)
+                    childProcess.kill(signal);
+            }
+        };
+        const signalWindowsTree = () => {
+            if (childProcess.pid === undefined) {
+                childProcess.kill("SIGKILL");
+                return;
+            }
+            // Windows has no negative-PID group signal. Kill the tree while the
+            // parent PID still exists, before its children can become orphaned.
+            const killer = spawn("taskkill", ["/PID", String(childProcess.pid), "/T", "/F"], {
+                shell: false,
+                stdio: "ignore",
+                windowsHide: true,
+            });
+            killer.on("error", (error) => {
+                Logger.error("Could not stop the Windows process tree:", error);
+                childProcess.kill("SIGKILL");
+            });
+            killer.on("close", (code) => {
+                if (code !== 0 && !isResolved) {
+                    Logger.error(`taskkill could not stop the Windows process tree (exit ${code})`);
+                    childProcess.kill("SIGKILL");
+                }
+            });
+        };
+        const finishStopped = (code) => {
+            if (isResolved)
+                return;
+            settle();
+            Logger.commandComplete(startTime, code);
+            reject(stopError);
+        };
+        const forceStop = () => {
+            if (isResolved)
+                return;
+            if (process.platform === "win32")
+                signalWindowsTree();
+            else
+                signalProcessGroup("SIGKILL");
+            // A detached descendant can keep inherited pipes open after agy dies,
+            // so bound the wait for close.
+            closeTimer = setTimeout(() => {
+                childProcess.stdout.destroy?.();
+                childProcess.stderr.destroy?.();
+                finishStopped(childProcess.exitCode ?? null);
+            }, AGY_LIMITS.KILL_CLOSE_WAIT_MS);
+        };
+        const stop = (error) => {
+            if (isResolved || stopError)
+                return;
+            stopError = error;
+            clearTimeout(ceilingTimer);
+            limits.signal?.removeEventListener("abort", onAbort);
+            Logger.error(error.message);
+            if (process.platform === "win32")
+                signalWindowsTree();
+            else
+                signalProcessGroup("SIGTERM");
+            graceTimer = setTimeout(forceStop, AGY_LIMITS.KILL_GRACE_MS);
+        };
+        function onAbort() {
+            stop(new Error(ERROR_MESSAGES.AGY_CANCELLED));
+        }
+        if (limits.killAfterMs !== undefined) {
+            const limitMs = limits.killAfterMs;
+            const deadline = Date.now() + limitMs;
+            const scheduleCeiling = () => {
+                const remaining = deadline - Date.now();
+                if (remaining <= 0) {
+                    stop(new Error(`${ERROR_MESSAGES.AGY_HUNG}: limit ${Math.round(limitMs / 1000)}s`));
+                }
+                else {
+                    ceilingTimer = setTimeout(scheduleCeiling, Math.min(remaining, MAX_TIMER_DELAY_MS));
+                }
+            };
+            scheduleCeiling();
+        }
+        limits.signal?.addEventListener("abort", onAbort, { once: true });
+        if (limits.signal?.aborted)
+            onAbort();
         childProcess.stdout.on("data", (data) => {
+            if (stopError)
+                return;
             const chunk = data.toString();
             stdoutChunks.push(chunk);
             // Report immediately if callback provided (no substring calculation needed)
@@ -24,10 +144,14 @@ export async function executeCommand(command, args, onProgress, cwd) {
         });
         // CLI level errors
         childProcess.stderr.on("data", (data) => {
+            if (stopError)
+                return;
             const chunk = data.toString();
             stderrChunks.push(chunk);
-            // find RESOURCE_EXHAUSTED when Gemini Pro quota is exceeded
-            if (chunk.includes("RESOURCE_EXHAUSTED")) {
+            // Surface resource/quota failures from the backend without attempting
+            // fallback. Build the structured error once, on the first marker.
+            if (!resourceExhausted && chunk.includes("RESOURCE_EXHAUSTED")) {
+                resourceExhausted = true;
                 const stderrSoFar = stderrChunks.join('');
                 const modelMatch = stderrSoFar.match(/Quota exceeded for quota metric '([^']+)'/);
                 const statusMatch = stderrSoFar.match(/status["\s]*[:=]\s*(\d+)/);
@@ -42,36 +166,52 @@ export async function executeCommand(command, args, onProgress, cwd) {
                         details: {
                             model: model,
                             reason: reason,
-                            statusText: "Too Many Requests -- > try using gemini-3-flash-preview by asking",
+                            statusText: `Too Many Requests from Antigravity CLI backend`,
                         }
                     }
                 };
-                Logger.error(`Gemini Quota Error: ${JSON.stringify(errorJson, null, 2)}`);
+                Logger.error(`Antigravity resource error: ${JSON.stringify(errorJson, null, 2)}`);
             }
         });
         childProcess.on("error", (error) => {
             if (!isResolved) {
-                isResolved = true;
+                if (stopError)
+                    return;
+                settle();
                 Logger.error(`Process error:`, error);
+                Logger.commandComplete(startTime, null);
                 reject(new Error(`Failed to spawn command: ${error.message}`));
             }
         });
         childProcess.on("close", (code) => {
-            if (!isResolved) {
-                isResolved = true;
-                // Join array buffers efficiently
-                const stdout = stdoutChunks.join('');
-                const stderr = stderrChunks.join('');
-                if (code === 0) {
-                    Logger.commandComplete(startTime, code, stdout.length);
-                    resolve(stdout.trim());
-                }
-                else {
-                    Logger.commandComplete(startTime, code);
-                    Logger.error(`Failed with exit code ${code}`);
-                    const errorMessage = stderr.trim() || "Unknown error";
-                    reject(new Error(`Command failed with exit code ${code}: ${errorMessage}`));
-                }
+            if (isResolved)
+                return;
+            if (stopError) {
+                // A parent can exit before its children. Clear any survivors from its
+                // process group before reporting that the request has stopped.
+                if (grouped && childProcess.pid !== undefined)
+                    signalProcessGroup("SIGKILL");
+                finishStopped(code);
+                return;
+            }
+            settle();
+            // Join array buffers efficiently
+            const stdout = stdoutChunks.join('');
+            const stderr = stderrChunks.join('');
+            // Treat an exit-0 run as failed only when it reported quota exhaustion
+            // AND produced no usable stdout — so a quota error with empty output is
+            // surfaced (not silently "recovered"), while a run that still returned a
+            // real answer is kept.
+            const quotaFailure = resourceExhausted && stdout.trim() === "";
+            if (code === 0 && !quotaFailure) {
+                Logger.commandComplete(startTime, code, stdout.length);
+                resolve(stdout.trim());
+            }
+            else {
+                Logger.commandComplete(startTime, code);
+                Logger.error(`Failed with exit code ${code}`);
+                const errorMessage = stderr.trim() || (resourceExhausted ? "RESOURCE_EXHAUSTED" : "Unknown error");
+                reject(new Error(`Command failed with exit code ${code}: ${errorMessage}`));
             }
         });
     });

package/dist/utils/commandExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"commandExecutor.js","sourceRoot":"","sources":["../../src/utils/commandExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,IAAc,EACd,UAAwC,EACxC,GAAY;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAElD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACxC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;SACpB,CAAC,CAAC;QAEH,+EAA+E;QAC/E,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEzB,4EAA4E;YAC5E,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAGH,mBAAmB;QACnB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,4DAA4D;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAClF,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACpD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAClE,MAAM,SAAS,GAAG;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;wBACtB,OAAO,EAAE,iCAAiC,KAAK,EAAE;wBACjD,OAAO,EAAE;4BACP,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;4BACd,UAAU,EAAE,mEAAmE;yBAChF;qBACF;iBACF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,IAAI,CAAC;gBAClB,iCAAiC;gBACjC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAErC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBACvD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBACxC,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;oBAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC;oBACtD,MAAM,CACJ,IAAI,KAAK,CAAC,iCAAiC,IAAI,KAAK,YAAY,EAAE,CAAC,CACpE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"commandExecutor.js","sourceRoot":"","sources":["../../src/utils/commandExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE7D,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AASvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,IAAc,EACd,UAAwC,EACxC,GAAY,EACZ,SAAwB,EAAE;IAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAElD,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1C,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACxC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACnC,CAAC,CAAC;QAEH,+EAA+E;QAC/E,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,SAA4B,CAAC;QACjC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,YAAwC,CAAC;QAC7C,IAAI,UAAsC,CAAC;QAC3C,IAAI,UAAsC,CAAC;QAE3C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,UAAU,GAAG,IAAI,CAAC;YAClB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC,CAAC;QAEF,MAAM,kBAAkB,GAAG,CAAC,MAAsB,EAAE,EAAE;YACpD,IAAI,CAAC;gBACH,IAAI,OAAO,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,kEAAkE;gBAClE,IAAI,OAAO;oBAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,iBAAiB,GAAG,GAAG,EAAE;YAC7B,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;gBAC/E,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC1B,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,0DAA0D,IAAI,GAAG,CAAC,CAAC;oBAChF,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,IAAmB,EAAE,EAAE;YAC5C,IAAI,UAAU;gBAAE,OAAO;YACvB,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpB,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,iBAAiB,EAAE,CAAC;;gBACjD,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnC,sEAAsE;YACtE,+BAA+B;YAC/B,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC3B,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChC,aAAa,CAAC,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;YAC/C,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACpC,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,UAAU,IAAI,SAAS;gBAAE,OAAO;YACpC,SAAS,GAAG,KAAK,CAAC;YAClB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,iBAAiB,EAAE,CAAC;;gBACjD,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnC,UAAU,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/D,CAAC,CAAC;QACF,SAAS,OAAO;YACd,IAAI,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACtC,MAAM,eAAe,GAAG,GAAG,EAAE;gBAC3B,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,cAAc,CAAC,QAAQ,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtF,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC,CAAC;YACF,eAAe,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAEtC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACtC,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEzB,4EAA4E;YAC5E,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAGH,mBAAmB;QACnB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACtC,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,sEAAsE;YACtE,kEAAkE;YAClE,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC/D,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAClF,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACpD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAClE,MAAM,SAAS,GAAG;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;wBACtB,OAAO,EAAE,iCAAiC,KAAK,EAAE;wBACjD,OAAO,EAAE;4BACP,KAAK,EAAE,KAAK;4BACZ,MAAM,EAAE,MAAM;4BACd,UAAU,EAAE,gDAAgD;yBAC7D;qBACF;iBACF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,SAAS;oBAAE,OAAO;gBACtB,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,SAAS,EAAE,CAAC;gBACd,sEAAsE;gBACtE,+DAA+D;gBAC/D,IAAI,OAAO,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS;oBAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAC7E,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,MAAM,EAAE,CAAC;YACT,iCAAiC;YACjC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAErC,uEAAuE;YACvE,wEAAwE;YACxE,yEAAyE;YACzE,uBAAuB;YACvB,MAAM,YAAY,GAAG,iBAAiB,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/D,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gBACnG,MAAM,CACJ,IAAI,KAAK,CAAC,iCAAiC,IAAI,KAAK,YAAY,EAAE,CAAC,CACpE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/fileReferences.d.ts

@@ -0,0 +1,45 @@
+/**
+ * File-reference handling for agy prompts.
+ *
+ * Why this exists: `agy --print` resolves an `@file` reference ONLY when the
+ * file's directory is part of the workspace (`--add-dir`). cwd is never
+ * auto-registered. An `@file` outside any added dir makes agy hang until
+ * `--print-timeout`. So for every reference in a prompt that actually resolves
+ * to a real file under a trusted root (the working directory or an explicitly
+ * supplied includeDirectories entry), we register that root with `--add-dir`.
+ *
+ * We never inline file contents: agy reads the file itself, keeping the
+ * `--print` argv small and preserving the large-file use case (inlining would
+ * risk E2BIG). References that don't resolve under a trusted root are left
+ * untouched — the prompt still runs.
+ */
+/** Normalize a comma-separated string or array into a trimmed, non-empty list. */
+export declare function normalizeList(value?: string | string[]): string[];
+/** True when `p` resolves to a filesystem root (e.g. `/` or `C:\`). */
+export declare function isFilesystemRoot(p: string): boolean;
+/**
+ * Resolve a tool's `workingDirectory` argument: it must be an absolute path to
+ * an existing directory that is not a filesystem root, because it becomes both
+ * agy's cwd and its workspace root.
+ */
+export declare function resolveWorkingDirectory(requested: string): string;
+/**
+ * `target` with its deepest EXISTING ancestor realpath'd, so a path that does
+ * not exist yet can still be compared against a realpath'd root.
+ */
+export declare function realpathOfExistingPrefix(target: string): string;
+/** True when `candidate` is `root` itself or lives under it. */
+export declare function isWithin(root: string, candidate: string): boolean;
+/**
+ * Normalize file references in a prompt and collect the `--add-dir` roots agy
+ * needs to read them. Returns the (possibly rewritten) prompt and the deduped
+ * list of trust roots that contain a resolved reference. Never throws.
+ */
+export declare function resolveFileReferences(prompt: string, opts: {
+    cwd?: string;
+    includeDirectories?: string | string[];
+}): {
+    prompt: string;
+    addDirs: string[];
+};
+//# sourceMappingURL=fileReferences.d.ts.map

package/dist/utils/fileReferences.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileReferences.d.ts","sourceRoot":"","sources":["../../src/utils/fileReferences.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAIjE;AAgBD,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAejE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAa/D;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGjE;AAyCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA0BvC"}

package/dist/utils/fileReferences.js

@@ -0,0 +1,169 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { ERROR_MESSAGES } from '../constants.js';
+/**
+ * File-reference handling for agy prompts.
+ *
+ * Why this exists: `agy --print` resolves an `@file` reference ONLY when the
+ * file's directory is part of the workspace (`--add-dir`). cwd is never
+ * auto-registered. An `@file` outside any added dir makes agy hang until
+ * `--print-timeout`. So for every reference in a prompt that actually resolves
+ * to a real file under a trusted root (the working directory or an explicitly
+ * supplied includeDirectories entry), we register that root with `--add-dir`.
+ *
+ * We never inline file contents: agy reads the file itself, keeping the
+ * `--print` argv small and preserving the large-file use case (inlining would
+ * risk E2BIG). References that don't resolve under a trusted root are left
+ * untouched — the prompt still runs.
+ */
+/** Normalize a comma-separated string or array into a trimmed, non-empty list. */
+export function normalizeList(value) {
+    if (!value)
+        return [];
+    const items = Array.isArray(value) ? value : value.split(',');
+    return items.map(item => item.trim()).filter(Boolean);
+}
+// `@` reference: an `@` that is NOT part of an email/scoped continuation
+// (preceded by a word char, another `@`, `/`, or `.`), then a run of non-space,
+// non-`@` characters. Existence under a trust root — not shape — gates whether
+// it is treated as a file, so extensionless names (Makefile, LICENSE) work.
+const AT_REF = /(?<![\w@/.])@([^\s@]+)/g;
+// `file:` reference: `file:` at a word boundary, not a `file://` URL.
+const FILE_REF = /(?<![\w])file:(?!\/\/)(\S+)/g;
+const TRAILING_PUNCT = /[),.;:!?\]}'"`]+$/;
+function stripTrailingPunct(token) {
+    return token.replace(TRAILING_PUNCT, '');
+}
+/** True when `p` resolves to a filesystem root (e.g. `/` or `C:\`). */
+export function isFilesystemRoot(p) {
+    try {
+        const resolved = path.resolve(p);
+        return resolved === path.parse(resolved).root;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolve a tool's `workingDirectory` argument: it must be an absolute path to
+ * an existing directory that is not a filesystem root, because it becomes both
+ * agy's cwd and its workspace root.
+ */
+export function resolveWorkingDirectory(requested) {
+    // Realpath'd, so that later containment checks compare like with like: on
+    // macOS /tmp/x and /private/tmp/x are the same directory but not the same
+    // string, and a frame reported under one would look OUTSIDE the other.
+    let real = null;
+    try {
+        const candidate = fs.realpathSync(path.resolve(requested));
+        if (fs.statSync(candidate).isDirectory())
+            real = candidate;
+    }
+    catch {
+        real = null;
+    }
+    if (!path.isAbsolute(requested) || !real || isFilesystemRoot(real)) {
+        throw new Error(`${ERROR_MESSAGES.INVALID_WORKING_DIRECTORY}. Received '${requested}'.`);
+    }
+    return real;
+}
+/**
+ * `target` with its deepest EXISTING ancestor realpath'd, so a path that does
+ * not exist yet can still be compared against a realpath'd root.
+ */
+export function realpathOfExistingPrefix(target) {
+    let current = path.resolve(target);
+    const missing = [];
+    for (;;) {
+        try {
+            return path.join(fs.realpathSync(current), ...missing);
+        }
+        catch {
+            const parent = path.dirname(current);
+            if (parent === current)
+                return path.resolve(target);
+            missing.unshift(path.basename(current));
+            current = parent;
+        }
+    }
+}
+/** True when `candidate` is `root` itself or lives under it. */
+export function isWithin(root, candidate) {
+    const rel = path.relative(root, candidate);
+    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+}
+/**
+ * Realpath'd, existing directories that references may resolve under: the
+ * working directory plus each includeDirectories entry.
+ */
+function resolveTrustRoots(cwd, includeDirectories) {
+    const baseCwd = cwd || process.cwd();
+    const candidates = [baseCwd, ...normalizeList(includeDirectories).map(d => path.resolve(baseCwd, d))];
+    const roots = [];
+    for (const candidate of candidates) {
+        try {
+            const real = fs.realpathSync(candidate);
+            if (fs.statSync(real).isDirectory())
+                roots.push(real);
+        }
+        catch {
+            // Non-existent / unreadable root — skip.
+        }
+    }
+    return [...new Set(roots)];
+}
+/**
+ * Resolve a token to the trust root it lives under. agy joins the reference
+ * path to an added dir, so the root that resolves the token is exactly what
+ * must be added. Returns null for tokens that don't resolve to a real file, or
+ * that escape every root via absolute/`..`/symlink.
+ */
+function rootForToken(rawToken, roots) {
+    const token = stripTrailingPunct(rawToken);
+    if (!token)
+        return null;
+    for (const root of roots) {
+        try {
+            const real = fs.realpathSync(path.resolve(root, token));
+            if (isWithin(root, real) && fs.statSync(real).isFile())
+                return root;
+        }
+        catch {
+            // Does not resolve under this root — try the next one.
+        }
+    }
+    return null;
+}
+/**
+ * Normalize file references in a prompt and collect the `--add-dir` roots agy
+ * needs to read them. Returns the (possibly rewritten) prompt and the deduped
+ * list of trust roots that contain a resolved reference. Never throws.
+ */
+export function resolveFileReferences(prompt, opts) {
+    const roots = resolveTrustRoots(opts.cwd, opts.includeDirectories);
+    if (roots.length === 0)
+        return { prompt, addDirs: [] };
+    const addDirs = new Set();
+    // Rewrite a `file:` reference to `@` ONLY when it resolves to a real file
+    // under a trusted root — otherwise we'd hand agy a dangling @ref that hangs.
+    // The converted token drops trailing punctuation so agy sees the exact path.
+    const rewritten = prompt.replace(FILE_REF, (match, rawToken) => {
+        const root = rootForToken(rawToken, roots);
+        if (!root)
+            return match;
+        addDirs.add(root);
+        return `@${stripTrailingPunct(rawToken)}`;
+    });
+    // Collect the trust root for every `@` reference that resolves.
+    AT_REF.lastIndex = 0;
+    let m;
+    while ((m = AT_REF.exec(rewritten)) !== null) {
+        if (addDirs.size >= roots.length)
+            break; // every root already registered
+        const root = rootForToken(m[1], roots);
+        if (root)
+            addDirs.add(root);
+    }
+    return { prompt: rewritten, addDirs: [...addDirs] };
+}
+//# sourceMappingURL=fileReferences.js.map

package/dist/utils/fileReferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileReferences.js","sourceRoot":"","sources":["../../src/utils/fileReferences.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AAEH,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,yEAAyE;AACzE,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,sEAAsE;AACtE,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAEhD,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,GAAG,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,CAAC,yBAAyB,eAAe,SAAS,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAiB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAuB,EAAE,kBAAsC;IACxF,MAAM,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,KAAe;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAA8D;IAE9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAEvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAgB,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,gCAAgC;QACzE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/utils/gitCheckout.d.ts

@@ -0,0 +1,14 @@
+export interface Checkout {
+    /** Null on a detached HEAD. */
+    branch: string | null;
+    head: string;
+}
+/** The branch and commit checked out in `directory`, or null when it is not a git checkout with a commit. */
+export declare function readCheckout(directory: string): Promise<Checkout | null>;
+/**
+ * The merge base of `ref` and HEAD in `directory`. Throws with git's own reason
+ * when the ref does not resolve; `--end-of-options` keeps a ref spelled like an
+ * option from being read as one.
+ */
+export declare function resolveMergeBase(directory: string, ref: string): Promise<string>;
+//# sourceMappingURL=gitCheckout.d.ts.map

package/dist/utils/gitCheckout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitCheckout.d.ts","sourceRoot":"","sources":["../../src/utils/gitCheckout.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,QAAQ;IACvB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,6GAA6G;AAC7G,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAS9E;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQtF"}

package/dist/utils/gitCheckout.js

@@ -0,0 +1,36 @@
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+const GIT_TIMEOUT_MS = 10_000;
+function git(directory, args) {
+    return execFileAsync('git', args, { cwd: directory, timeout: GIT_TIMEOUT_MS });
+}
+/** The branch and commit checked out in `directory`, or null when it is not a git checkout with a commit. */
+export async function readCheckout(directory) {
+    try {
+        const { stdout } = await git(directory, ['rev-parse', 'HEAD', '--abbrev-ref', 'HEAD']);
+        const [head, branch] = stdout.trim().split('\n');
+        if (!head || !branch)
+            return null;
+        return { head, branch: branch === 'HEAD' ? null : branch };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The merge base of `ref` and HEAD in `directory`. Throws with git's own reason
+ * when the ref does not resolve; `--end-of-options` keeps a ref spelled like an
+ * option from being read as one.
+ */
+export async function resolveMergeBase(directory, ref) {
+    try {
+        const { stdout } = await git(directory, ['merge-base', '--end-of-options', ref, 'HEAD']);
+        return stdout.trim();
+    }
+    catch (error) {
+        const stderr = error.stderr?.trim();
+        throw new Error(stderr || error.message);
+    }
+}
+//# sourceMappingURL=gitCheckout.js.map

package/dist/utils/gitCheckout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitCheckout.js","sourceRoot":"","sources":["../../src/utils/gitCheckout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAG,MAAM,CAAC;AAQ9B,SAAS,GAAG,CAAC,SAAiB,EAAE,IAAc;IAC5C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,GAAW;IACnE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAA6B,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,MAAM,IAAK,KAAe,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/utils/gitStatusGuard.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Before/after snapshots of a working tree, so a tool that hands Gemini a shell
+ * can report uninvited edits. Never throws: a snapshot that cannot be taken is
+ * `null` and simply disables the comparison.
+ *
+ * Status lines alone are not enough. These tools run against a dirty PR
+ * worktree, where a file Gemini rewrites was already ` M` before the run and
+ * stays ` M` after — the very files under review. So each dirty path's content
+ * is hashed too, and the diff reports content changes as well as status changes.
+ *
+ * Async because `git status` on a cold repository takes seconds, and this runs
+ * inside an MCP call whose keepalive notifications need the event loop.
+ */
+export interface WorkingTreeSnapshot {
+    /** Repository root: porcelain paths are relative to it, never to cwd. */
+    root: string;
+    lines: string[];
+    /** Absolute path -> sha256 of its content, for every dirty file we could hash. */
+    hashes: Map<string, string>;
+    /** True when MAX_HASHED_FILES cut the hashing short. */
+    truncated: boolean;
+}
+export interface WorkingTreeDiff {
+    added: string[];
+    removed: string[];
+    /** Paths whose content changed while keeping the same status. */
+    modified: string[];
+    /** True when either snapshot hashed only part of the dirty set. */
+    truncated: boolean;
+}
+export declare function snapshotWorkingTree(cwd: string): Promise<WorkingTreeSnapshot | null>;
+export declare function diffWorkingTree(before: WorkingTreeSnapshot | null, after: WorkingTreeSnapshot | null, opts?: {
+    ignoreDirectory?: string;
+}): WorkingTreeDiff;
+//# sourceMappingURL=gitStatusGuard.d.ts.map

package/dist/utils/gitStatusGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitStatusGuard.d.ts","sourceRoot":"","sources":["../../src/utils/gitStatusGuard.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kFAAkF;IAClF,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AAoBD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CA8B1F;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,mBAAmB,GAAG,IAAI,EAClC,KAAK,EAAE,mBAAmB,GAAG,IAAI,EACjC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,eAAe,CAsBjB"}