@namzu/cli 39.2.0 → 39.2.1

package/dist/chunks/{chunk-JC37Z4C2.js → chunk-LS7PT6RY.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-KONYGNG6.js";
 import {
   restrictToOwner
-} from "./chunk-AWDFNOGP.js";
+} from "./chunk-ONKQPPSY.js";
 import {
   resolveNamzuHome
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name,
   __toESM
@@ -131,4 +131,4 @@ export {
   setUserConfigValue,
   deleteUserConfigValue
 };
-//# sourceMappingURL=chunk-JC37Z4C2.js.map
+//# sourceMappingURL=chunk-LS7PT6RY.js.map

package/dist/chunks/{chunk-D57LFZYV.js → chunk-M2PQMMDW.js}

@@ -2,11 +2,11 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   namzuHomePath
-} from "./chunk-DJCBJ4D2.js";
+} from "./chunk-AP4B5Z3D.js";
 import {
   SKILL_FRONTMATTER_KEYS,
   parseFrontmatter
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -268,4 +268,4 @@ export {
   NO_SKILLS_FOUND,
   renderSkillRoster
 };
-//# sourceMappingURL=chunk-D57LFZYV.js.map
+//# sourceMappingURL=chunk-M2PQMMDW.js.map

package/dist/chunks/{chunk-BD7DGINR.js → chunk-MCXVRO4B.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-KONYGNG6.js";
 import {
   configMetadataLiteral
-} from "./chunk-QGU3QOXI.js";
+} from "./chunk-AURV7PCK.js";
 import {
   homePath
 } from "./chunk-AXCOWIIH.js";
@@ -15,7 +15,7 @@ import {
   mergePermissionTables,
   permissionSettingsProblem,
   splitPermissionsTable
-} from "./chunk-TQ2PH66J.js";
+} from "./chunk-OVG3QY7U.js";
 import {
   BROWSER_ACT_TOOL_NAME,
   BROWSER_TOOL_NAME,
@@ -27,7 +27,7 @@ import {
   resolveNamzuHome,
   toolResultCorrespondenceGuardrail,
   toolResultInjectionGuardrail
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name,
   __toESM
@@ -1951,4 +1951,4 @@ export {
   ConfigValueError,
   LOCAL_CONFIG_FILE
 };
-//# sourceMappingURL=chunk-BD7DGINR.js.map
+//# sourceMappingURL=chunk-MCXVRO4B.js.map

package/dist/chunks/{chunk-OIRKBC2L.js → chunk-MEHYOYTW.js}

@@ -4,12 +4,12 @@ import {
   SKILL_TIERS,
   discoverSkills,
   parseRequiredTools
-} from "./chunk-D57LFZYV.js";
+} from "./chunk-M2PQMMDW.js";
 import {
   SKILL_TOOL_NAME,
   SkillRegistry,
   isInvocableBy
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -168,4 +168,4 @@ export {
   manifestEntryChars,
   createSessionSkillCatalog
 };
-//# sourceMappingURL=chunk-OIRKBC2L.js.map
+//# sourceMappingURL=chunk-MEHYOYTW.js.map

package/dist/chunks/{chunk-KVYTZCCO.js → chunk-MIM4YRP2.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-JORONMD3.js";
 import {
   namzuHomePath
-} from "./chunk-DJCBJ4D2.js";
+} from "./chunk-AP4B5Z3D.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -112,4 +112,4 @@ export {
   trustDir,
   untrustDir
 };
-//# sourceMappingURL=chunk-KVYTZCCO.js.map
+//# sourceMappingURL=chunk-MIM4YRP2.js.map

package/dist/chunks/{chunk-FEANPQH4.js → chunk-N3JNFZOW.js}

@@ -5,7 +5,7 @@ import {
   has,
   interactive,
   parseArgs
-} from "./chunk-TAWI7GF2.js";
+} from "./chunk-A25FQQTW.js";
 import {
   isBrowserProfileName
 } from "./chunk-WHODOMXA.js";
@@ -23,7 +23,7 @@ import {
 import {
   canonicalizeBrowserUrl,
   resolveNamzuHome
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -396,4 +396,4 @@ export {
   defaultBrowserCommandDeps,
   browserCommand
 };
-//# sourceMappingURL=chunk-FEANPQH4.js.map
+//# sourceMappingURL=chunk-N3JNFZOW.js.map

package/dist/chunks/{chunk-DK6MIKJ5.js → chunk-NUJCTZOM.js}

@@ -12,7 +12,7 @@ import {
   runFire,
   sessionFacts,
   sessionLeaseLive
-} from "./chunk-UJ7NTALX.js";
+} from "./chunk-2L3JDLC5.js";
 import {
   callsLine
 } from "./chunk-E5VLANCO.js";
@@ -30,17 +30,17 @@ import {
   parseArgs,
   parseMs,
   pathsFor
-} from "./chunk-TAWI7GF2.js";
+} from "./chunk-A25FQQTW.js";
 import {
   resumeCommand
-} from "./chunk-YN5PDLFB.js";
+} from "./chunk-5NVONQBW.js";
 import {
   appendHistory,
   foldHistory,
   readHistory,
   readState,
   writeState
-} from "./chunk-5WZ63LBF.js";
+} from "./chunk-A34Y6ZPM.js";
 import {
   confirmationHolds,
   deleteJob,
@@ -59,7 +59,7 @@ import {
 import {
   closeSessions,
   refreshIndex
-} from "./chunk-ARILZQYC.js";
+} from "./chunk-QENCNE7Q.js";
 import {
   NOOP_LOGGER,
   SessionPaths,
@@ -67,7 +67,7 @@ import {
   generateScheduleRunId,
   openSessionIndex,
   releaseHeldSessionLeases
-} from "./chunk-RKMGVFLZ.js";
+} from "./chunk-OPIC6ZIL.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -645,4 +645,4 @@ export {
   pruneCommand,
   scheduleDiskUsage
 };
-//# sourceMappingURL=chunk-DK6MIKJ5.js.map
+//# sourceMappingURL=chunk-NUJCTZOM.js.map

package/dist/chunks/{chunk-AWDFNOGP.js → chunk-ONKQPPSY.js}

@@ -2,7 +2,7 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   namzuHomePath
-} from "./chunk-DJCBJ4D2.js";
+} from "./chunk-AP4B5Z3D.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -658,4 +658,4 @@ export {
   restrictToOwner,
   restrictToOwnerOnce
 };
-//# sourceMappingURL=chunk-AWDFNOGP.js.map
+//# sourceMappingURL=chunk-ONKQPPSY.js.map

package/dist/chunks/{chunk-RKMGVFLZ.js → chunk-OPIC6ZIL.js}

@@ -18314,7 +18314,7 @@ function buildAskUserQuestionTool(config) {
   const { questionParks, pendingAnswers } = config;
   return defineTool({
     name: ASK_USER_QUESTION_TOOL_NAME,
-    description: `Ask the user when you are blocked on a decision that is genuinely theirs to make \u2014 one you cannot resolve from their request, your tools, the files you can read, or sensible defaults. The question must be the genuinely undecidable thing in THIS task. Never ask for information a tool can discover (do not ask what you can read, list, or search), never re-ask what the conversation already answers, and never ask meta-questions like "Shall I proceed?" \u2014 plan ratification goes through approve_plan. Provide 2-4 genuinely distinct options derived from the actual context \u2014 concrete paths, never generic placeholders (for example, asked to prepare a presentation, ask "Who is the audience?" with options like Board / Engineering team / Customer); keep labels short (1-5 words) and give each option a one-line description of what practically changes if it is chosen. If you recommend an option, put it FIRST and set recommended: true on it; the host marks it for the user, so never write "(Recommended)" or any translation of it into a label, and never end a label with a parenthesised note (put qualifiers in the description). Set multiSelect: true only when several options can apply at once. An option may carry a preview (plain text or markdown) that the host shows beside the list while it is focused; use it only when seeing the thing helps the choice. A free-text "Something else" escape hatch is always shown automatically \u2014 do not add your own "Other" option. Put the questions in the questions array. Use ONE entry for a single decision. Put several entries in the same call only when they are related decisions that ALL block your next step and the user can answer them together (for example which account, for what purpose, which environment before a credentialed step), at most 4, each with a short unique header; the user answers them all in one card and you get one answer per question. Never batch questions that depend on one another's answers \u2014 ask the first, then decide. Most work needs at most 2-3 questions in all, so prefer proceeding on stated defaults over interrogating the user. Never invent answers or synthetic content on the user's behalf unless they explicitly asked for a random/test scenario. The answers arrive as this tool's result; a question the result says was not answered must not be assumed, and if the result says the user did not answer at all, do not ask again \u2014 proceed on your best judgment without assuming consent.`,
+    description: `Ask the user when you are blocked on a decision that is genuinely theirs to make \u2014 one you cannot resolve from their request, your tools, the files you can read, or sensible defaults. The question must be the genuinely undecidable thing in THIS task. Never ask for information a tool can discover (do not ask what you can read, list, or search), never re-ask what the conversation already answers, and never ask meta-questions like "Shall I proceed?" \u2014 plan ratification goes through approve_plan. Provide 2-4 genuinely distinct options derived from the actual context \u2014 concrete paths, never generic placeholders (for example, asked to prepare a presentation, ask who the audience is, with an option for each plausible audience); keep labels short (1-5 words) and give each option a one-line description of what practically changes if it is chosen. If you recommend an option, put it FIRST and set recommended: true on it; the host marks it for the user, so never write "(Recommended)" or any translation of it into a label, and never end a label with a parenthesised note (put qualifiers in the description). Set multiSelect: true only when several options can apply at once. An option may carry a preview (plain text or markdown) that the host shows beside the list while it is focused; use it only when seeing the thing helps the choice. A free-text "Something else" escape hatch is always shown automatically \u2014 do not add your own "Other" option. Put the questions in the questions array. Use ONE entry for a single decision. Put several entries in the same call only when they are related decisions that ALL block your next step and the user can answer them together (for example which account, for what purpose, which environment before a credentialed step), at most 4, each with a short unique header; the user answers them all in one card and you get one answer per question. Never batch questions that depend on one another's answers \u2014 ask the first, then decide. Most work needs at most 2-3 questions in all, so prefer proceeding on stated defaults over interrogating the user. Never invent answers or synthetic content on the user's behalf unless they explicitly asked for a random/test scenario. The answers arrive as this tool's result; a question the result says was not answered must not be assumed, and if the result says the user did not answer at all, do not ask again \u2014 proceed on your best judgment without assuming consent.`,
     inputSchema: inputSchema2,
     modelInputSchema: structuredClone(askUserQuestionModelInputSchema),
     enforceModelInput: true,
@@ -35808,15 +35808,26 @@ var STOP_WORDS = /* @__PURE__ */ new Set([
   "you"
 ]);
 var WORD = /[\p{L}\p{N}_$][\p{L}\p{N}_$.\-/\\:]*/gu;
+var SEPARATORS = /* @__PURE__ */ new Set([".", "-", "/", "\\", ":"]);
+function trimSeparators(token) {
+  let start = 0;
+  let end = token.length;
+  while (start < end && SEPARATORS.has(token[start]))
+    start++;
+  while (end > start && SEPARATORS.has(token[end - 1]))
+    end--;
+  return start === 0 && end === token.length ? token : token.slice(start, end);
+}
+__name(trimSeparators, "trimSeparators");
 function splitIdentifier(raw) {
-  const parts = raw.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[_\s]+/).filter((p) => p.length > 0);
+  const parts = raw.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/(?<=[A-Z])(?=[A-Z][a-z])/g, " ").split(/[_\s]+/).filter((p) => p.length > 0);
   return parts.length > 1 ? parts : [];
 }
 __name(splitIdentifier, "splitIdentifier");
 function tokenize2(text9) {
   const out = [];
   for (const match2 of text9.matchAll(WORD)) {
-    const raw = match2[0].replace(/^[.\-/\\:]+|[.\-/\\:]+$/g, "");
+    const raw = trimSeparators(match2[0]);
     if (raw.length === 0)
       continue;
     const whole = raw.toLowerCase();
@@ -35853,8 +35864,7 @@ __name(termFrequencies, "termFrequencies");
 // ../sdk/dist/compaction/salience/bm25.js
 var K1 = 1.2;
 var B = 0.75;
-function indexDocument(text9) {
-  const tokens = tokenize2(text9);
+function indexDocument(text9, tokens = tokenize2(text9)) {
   return { tf: termFrequencies(tokens), length: tokens.length };
 }
 __name(indexDocument, "indexDocument");
@@ -35993,7 +36003,7 @@ function scoreMessages(messages, options) {
   const texts = messages.map(messageText);
   const richContent = messages.map(hasRichContent);
   const tokenLists = texts.map(tokenize2);
-  const documents = texts.map(indexDocument);
+  const documents = texts.map((text9, i) => indexDocument(text9, tokenLists[i]));
   const index = buildIndex(documents);
   const goalTokens = tokenize2(options.goal);
   const rawRelevance = documents.map((doc) => bm25Score(index, doc, goalTokens));
@@ -62245,7 +62255,7 @@ async function resolveMcpEra(input) {
 __name(resolveMcpEra, "resolveMcpEra");
 
 // ../sdk/dist/version.js
-var VERSION2 = "53.2.0";
+var VERSION2 = "53.2.2";
 
 // ../sdk/dist/connector/mcp/client.js
 var MAX_LIST_PAGES = 100;
@@ -89279,7 +89289,7 @@ var MAX_LISTED_WINDOWS = 50;
 var MAX_UI_SNAPSHOT_CHARS = 14e3;
 function computerUseUnavailableReason(provider, model) {
   if (!resolveProviderCapabilities(provider).supportsToolResultImages) {
-    return `The ${provider.id} provider cannot return images in tool results, so the model would never see a screenshot. Use a provider that can (for example Anthropic, Codex or Google) for computer use.`;
+    return `The ${provider.id} provider cannot return images in tool results, so the model would never see a screenshot. Use a provider that can return images in tool results for computer use.`;
   }
   if (model !== void 0 && !modelReadsImages(provider, model)) {
     return `The model ${model} cannot read images, so it would never see a screenshot. Use a model that reads images for computer use.`;
@@ -89580,7 +89590,7 @@ function buildDescription(host, caps, settings) {
   if (available.includes("batch"))
     lines.push(`batch: {"type":"batch","actions":[...]} runs up to ${settings.maxBatchActions} actions in order, stops at the first one that fails, and returns one screenshot at the end. Every call costs a model round trip of several seconds, so put the steps you can already predict into one batch (click a field, type, press ENTER) rather than one call each \u2014 but end the batch at any step that should bring up a new window, and look before typing into it. A batch cannot contain screenshot${available.includes("ui_snapshot") ? ", zoom or ui_snapshot" : " or zoom"}.`);
   if (caps.displayServer === "win32" && available.includes("key") && available.includes("type_text"))
-    lines.push("To start a Windows program, a shell command (Start-Process notepad, or cmd.exe /c start calc) is surest when you have a shell tool. The Start menu searches by display names in the system language, and ENTER on a name it does not find opens a web search in the browser.");
+    lines.push("To start a Windows program, a shell command (Start-Process <program>, or cmd.exe /c start <program>) is surest when you have a shell tool. The Start menu searches by display names in the system language, and ENTER on a name it does not find opens a web search in the browser.");
   if (available.includes("list_windows"))
     lines.push("list_windows names the open windows with their ids; focus_window brings one to the front.");
   if (windowCaptureAvailable(host, caps))
@@ -92106,7 +92116,7 @@ function actModelSchema(actions) {
       },
       origin: {
         type: "string",
-        description: 'REQUIRED. The origin from the latest snapshot header ("Page: <origin> \u2014 \u2026"), e.g. https://github.com. The call is refused if the page is no longer there.'
+        description: 'REQUIRED. The origin from the latest snapshot header ("Page: <origin> \u2014 \u2026"), e.g. https://example.com. The call is refused if the page is no longer there.'
       },
       ref: { type: "string", description: "Element ref from the latest snapshot, like e12." },
       text: { type: "string" },
@@ -92694,7 +92704,7 @@ __name(buildReadMemoryTool, "buildReadMemoryTool");
 
 // ../sdk/dist/tools/memory/fields.js
 var memoryFieldsSchema = {
-  name: external_exports.string().max(MEMORY_NAME_MAX_LENGTH).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional().describe('Unique kebab-case slug, e.g. "deploys-need-a-changeset"; other memories link to it as [[name]]'),
+  name: external_exports.string().max(MEMORY_NAME_MAX_LENGTH).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional().describe('Unique kebab-case slug, e.g. "prefers-short-answers"; other memories link to it as [[name]]'),
   description: external_exports.string().max(300).regex(/^[^\r\n]*$/).optional().describe("One line saying what this memory is for, used to decide whether to read it"),
   type: external_exports.enum(["user", "feedback", "project", "reference"]).optional().describe("user, feedback, project or reference; stores that require a type use project when omitted")
 };
@@ -93057,10 +93067,10 @@ var inputSchema16 = external_exports.object({
     preset: external_exports.enum(["read-only", "edit-in-folder"]).optional().describe("read-only: read/glob/grep/ls only; its bash deny blocks every script. edit-in-folder: also edit and write, bash asks. For a pure script, omit the preset and set rules to {} with unmatched: deny"),
     unmatched: external_exports.enum(["park", "deny"]).describe("A call no rule covers: park (wait for the operator) or deny"),
     execution: external_exports.enum(["host", "sandbox"]).optional().describe("Where commands run; leave unset (this machine) unless the user asked for a sandbox"),
-    rules: external_exports.record(external_exports.string(), external_exports.union([EFFECT, external_exports.record(external_exports.string(), EFFECT)])).optional().describe('Extra rules, e.g. {"bash": {"npm test*": "allow"}}'),
+    rules: external_exports.record(external_exports.string(), external_exports.union([EFFECT, external_exports.record(external_exports.string(), EFFECT)])).optional().describe('Extra rules, e.g. {"bash": {"<command> *": "allow"}}'),
     browser: external_exports.object({
       profile: external_exports.string().regex(BROWSER_PROFILE).describe('Browser profile the operator signed in with, e.g. "work"'),
-      sites: external_exports.record(external_exports.string(), external_exports.enum(["read", "ask", "act"])).describe('Site to level, e.g. {"https://github.com": "read"}. read: open and read only; ask: changes wait for the operator; act: changes run unasked. Unlisted sites are denied; there is no "*".'),
+      sites: external_exports.record(external_exports.string(), external_exports.enum(["read", "ask", "act"])).describe('Site to level, e.g. {"https://example.com": "read"}. read: open and read only; ask: changes wait for the operator; act: changes run unasked. Unlisted sites are denied; there is no "*".'),
       headed: external_exports.boolean().optional().describe("Show the browser window; default no window")
     }).optional().describe("Browser access; omit for none")
   }).optional().describe('create: REQUIRED explicit permission set; there is no default. For a pure script, use {rules:{}, unmatched:"deny"} without a preset unless you intend deny rules: read-only denies bash and blocks every script. A pure script cannot use a browser grant. update: the whole new set, only when the permissions change'),
@@ -93108,7 +93118,7 @@ function browserGrant(host, proposed) {
   if (entries2.length === 0) {
     return {
       ok: false,
-      error: 'permissions.browser.sites is empty; list each site the run may open, e.g. {"https://github.com": "read"}.'
+      error: 'permissions.browser.sites is empty; list each site the run may open, e.g. {"https://example.com": "read"}.'
     };
   }
   const sites = {};
@@ -94131,4 +94141,4 @@ export {
   buildResidentToolEvidenceTools,
   createPalMessagingTools
 };
-//# sourceMappingURL=chunk-RKMGVFLZ.js.map
+//# sourceMappingURL=chunk-OPIC6ZIL.js.map