@nxuss/lemma 1.31.0 → 1.32.0

package/dist/cjs/utils/ClipboardWatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"ClipboardWatcher.js","sourceRoot":"","sources":["../../../src/utils/ClipboardWatcher.ts"],"names":[],"mappings":";;AASA,sCAoBC;AAMD,wCA8BC;AAMD,kCA2BC;AAMD,sDA2CC;AAnJD,iDAAoD;AACpD,uDAAgD;AAChD,mDAAgD;AAEhD;;;;GAIG;AACH,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAA,4BAAY,EAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO,IAAA,4BAAY,EACjB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,oBAAoB,CAAC,EACnE,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAA,4BAAY,EAAC,MAAM,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAChB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,wBAAwB,CAAC,EACvE,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,MAAM,QAAQ,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC/B,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC,CAAA,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAEtC,6EAA6E;IAC7E,IAAI,OAAO,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/E,mEAAmE;IACnE,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtE,gCAAgC;IAChC,MAAM,WAAW,GAAG;QAClB,sBAAsB;QACtB,0DAA0D;QAC1D,8BAA8B;QAC9B,oCAAoC;QACpC,8BAA8B;QAC9B,gCAAgC;QAChC,wBAAwB,EAAE,SAAS;QACnC,wBAAwB,EAAE,OAAO;QACjC,qCAAqC;QACrC,0BAA0B;QAC1B,sBAAsB;QACtB,uBAAuB;KACxB,CAAC;IAEF,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAAU,GAAG,IAAI;IACrD,IAAI,oBAAoB,GAAG,aAAa,EAAE,CAAC;IAE3C,OAAO,CAAC,GAAG,CAAC,4EAA4E,UAAU,KAAK,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAEzF,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,aAAa,EAAE,CAAC;YACvC,IAAI,cAAc,KAAK,oBAAoB;gBAAE,OAAO;YAEpD,0DAA0D;YAC1D,oBAAoB,GAAG,cAAc,CAAC;YAEtC,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;gBAE7C,qBAAqB;gBACrB,MAAM,QAAQ,GAAG,IAAA,6BAAW,EAAC,cAAc,CAAC,CAAC;gBAE7C,mEAAmE;gBACnE,MAAM,MAAM,GAAG,4CAA4C,CAAC;gBAC5D,MAAM,YAAY,GAAG,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAE5C,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBAEzF,8BAA8B;gBAC9B,cAAc,CAAC,YAAY,CAAC,CAAC;gBAE7B,mEAAmE;gBACnE,oBAAoB,GAAG,YAAY,CAAC;gBAEpC,sCAAsC;gBACtC,6BAAa,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;gBAElE,OAAO,CAAC,GAAG,CAAC,kEAAkE,OAAO,sBAAsB,cAAc,MAAM,cAAc,UAAU,CAAC,CAAC;YAC3J,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC"}
+{"version":3,"file":"ClipboardWatcher.js","sourceRoot":"","sources":["../../../src/utils/ClipboardWatcher.ts"],"names":[],"mappings":";;AASA,sCAoBC;AAMD,wCA8BC;AAMD,kCA2BC;AAMD,sDA2CC;AAnJD,iDAAoD;AACpD,uDAAgD;AAChD,mDAAgD;AAEhD;;;;GAIG;AACH,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAA,4BAAY,EAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO,IAAA,4BAAY,EACjB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,oBAAoB,CAAC,EACnE,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAA,4BAAY,EAAC,MAAM,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAChB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,wBAAwB,CAAC,EACvE,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,MAAM,QAAQ,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC/B,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC,CAAA,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAEtC,6EAA6E;IAC7E,IAAI,OAAO,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/E,mEAAmE;IACnE,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtE,gCAAgC;IAChC,MAAM,WAAW,GAAG;QAClB,sBAAsB;QACtB,0DAA0D;QAC1D,8BAA8B;QAC9B,mCAAmC;QACnC,8BAA8B;QAC9B,gCAAgC;QAChC,wBAAwB,EAAE,SAAS;QACnC,wBAAwB,EAAE,OAAO;QACjC,qCAAqC;QACrC,0BAA0B;QAC1B,sBAAsB;QACtB,uBAAuB;KACxB,CAAC;IAEF,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAAU,GAAG,IAAI;IACrD,IAAI,oBAAoB,GAAG,aAAa,EAAE,CAAC;IAE3C,OAAO,CAAC,GAAG,CAAC,4EAA4E,UAAU,KAAK,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAEzF,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,aAAa,EAAE,CAAC;YACvC,IAAI,cAAc,KAAK,oBAAoB;gBAAE,OAAO;YAEpD,0DAA0D;YAC1D,oBAAoB,GAAG,cAAc,CAAC;YAEtC,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;gBAE7C,qBAAqB;gBACrB,MAAM,QAAQ,GAAG,IAAA,6BAAW,EAAC,cAAc,CAAC,CAAC;gBAE7C,mEAAmE;gBACnE,MAAM,MAAM,GAAG,4CAA4C,CAAC;gBAC5D,MAAM,YAAY,GAAG,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAE5C,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBAEzF,8BAA8B;gBAC9B,cAAc,CAAC,YAAY,CAAC,CAAC;gBAE7B,mEAAmE;gBACnE,oBAAoB,GAAG,YAAY,CAAC;gBAEpC,sCAAsC;gBACtC,6BAAa,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;gBAElE,OAAO,CAAC,GAAG,CAAC,kEAAkE,OAAO,sBAAsB,cAAc,MAAM,cAAc,UAAU,CAAC,CAAC;YAC3J,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC"}

package/dist/cjs/utils/CommandEnv.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Environment handed to commands run by run_workspace_command.
+ *
+ * The child used to inherit the whole of process.env, so `env`, `printenv` or any script the
+ * command ran could read every token and API key the MCP host had in its environment (cloud
+ * credentials, GITHUB_TOKEN, the Lemma license key…). Output scrubbing masks the common shapes
+ * after the fact; this keeps the secrets from reaching the child at all.
+ *
+ * Deny-by-default: only variables a build/test toolchain needs to find itself, plus whatever the
+ * project lists in lemma.config.json under `mcp.commandEnv.allow`. `mcp.commandEnv.mode: "inherit"`
+ * restores the old behavior for projects that need it.
+ */
+export interface CommandEnvPolicy {
+    mode: "filtered" | "inherit";
+    /** Extra variable names the project allows through. */
+    allow: string[];
+}
+export interface CommandEnvResult {
+    env: NodeJS.ProcessEnv;
+    /** How many inherited variables were withheld (names are deliberately not reported). */
+    withheld: number;
+}
+/** Reads `mcp.commandEnv` from lemma.config.json in `dir`; any problem falls back to the safe default. */
+export declare function loadCommandEnvPolicy(dir?: string): CommandEnvPolicy;
+export declare function buildCommandEnv(base?: NodeJS.ProcessEnv, policy?: CommandEnvPolicy): CommandEnvResult;
+//# sourceMappingURL=CommandEnv.d.ts.map

package/dist/cjs/utils/CommandEnv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandEnv.d.ts","sourceRoot":"","sources":["../../../src/utils/CommandEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8BH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAsB,GAAG,gBAAgB,CAclF;AAED,wBAAgB,eAAe,CAC7B,IAAI,GAAE,MAAM,CAAC,UAAwB,EACrC,MAAM,GAAE,gBAAyC,GAChD,gBAAgB,CAwBlB"}

package/dist/cjs/utils/CommandEnv.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * Environment handed to commands run by run_workspace_command.
+ *
+ * The child used to inherit the whole of process.env, so `env`, `printenv` or any script the
+ * command ran could read every token and API key the MCP host had in its environment (cloud
+ * credentials, GITHUB_TOKEN, the Lemma license key…). Output scrubbing masks the common shapes
+ * after the fact; this keeps the secrets from reaching the child at all.
+ *
+ * Deny-by-default: only variables a build/test toolchain needs to find itself, plus whatever the
+ * project lists in lemma.config.json under `mcp.commandEnv.allow`. `mcp.commandEnv.mode: "inherit"`
+ * restores the old behavior for projects that need it.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadCommandEnvPolicy = loadCommandEnvPolicy;
+exports.buildCommandEnv = buildCommandEnv;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+/** Names (compared case-insensitively on Windows, where env names are case-insensitive). */
+const SAFE_EXACT = new Set([
+    // Locating tools and the shell
+    "PATH", "PATHEXT", "SHELL", "COMSPEC", "SYSTEMROOT", "SYSTEMDRIVE", "WINDIR", "OS",
+    "PROCESSOR_ARCHITECTURE", "NUMBER_OF_PROCESSORS",
+    // Where things live
+    "HOME", "USERPROFILE", "HOMEDRIVE", "HOMEPATH", "APPDATA", "LOCALAPPDATA",
+    "PROGRAMFILES", "PROGRAMFILES(X86)", "PROGRAMDATA", "COMMONPROGRAMFILES",
+    "TEMP", "TMP", "TMPDIR", "PWD",
+    // Identity and locale (no credentials)
+    "USER", "USERNAME", "LOGNAME", "HOSTNAME", "COMPUTERNAME", "LANG", "LANGUAGE", "TZ",
+    // Terminal behaviour
+    "TERM", "COLORTERM", "FORCE_COLOR", "NO_COLOR", "CI", "NODE_ENV",
+    // Toolchain locations: without them rustup, pyenv, nvm, volta, go, java… cannot find themselves
+    "JAVA_HOME", "GOPATH", "GOROOT", "CARGO_HOME", "RUSTUP_HOME", "PYENV_ROOT", "VOLTA_HOME",
+    "NVM_DIR", "NVM_BIN", "PNPM_HOME", "BUN_INSTALL", "DENO_DIR", "ASDF_DIR", "ASDF_DATA_DIR",
+    "GEM_HOME", "GEM_PATH", "VIRTUAL_ENV", "CONDA_PREFIX",
+    "XDG_CONFIG_HOME", "XDG_CACHE_HOME", "XDG_DATA_HOME",
+    // Certificate bundles (not secrets; without them installs fail behind corporate TLS). Proxy URLs
+    // can embed credentials, so HTTP_PROXY/HTTPS_PROXY are left for the project to allow explicitly.
+    "NODE_EXTRA_CA_CERTS", "SSL_CERT_FILE", "SSL_CERT_DIR", "NO_PROXY",
+]);
+const SAFE_PREFIXES = ["LC_"];
+const isWindows = () => process.platform === "win32";
+const norm = (name) => (isWindows() ? name.toUpperCase() : name);
+/** Reads `mcp.commandEnv` from lemma.config.json in `dir`; any problem falls back to the safe default. */
+function loadCommandEnvPolicy(dir = process.cwd()) {
+    const policy = { mode: "filtered", allow: [] };
+    try {
+        const configPath = path_1.default.join(dir, "lemma.config.json");
+        if (!fs_1.default.existsSync(configPath))
+            return policy;
+        const raw = JSON.parse(fs_1.default.readFileSync(configPath, "utf8"))?.mcp?.commandEnv;
+        if (raw?.mode === "inherit")
+            policy.mode = "inherit";
+        if (Array.isArray(raw?.allow)) {
+            policy.allow = raw.allow.filter((n) => typeof n === "string" && n.trim().length > 0);
+        }
+    }
+    catch {
+        // Unreadable config: stay on the restrictive default rather than widening access.
+    }
+    return policy;
+}
+function buildCommandEnv(base = process.env, policy = loadCommandEnvPolicy()) {
+    const extra = new Set(policy.allow.map(norm));
+    let env;
+    let withheld = 0;
+    if (policy.mode === "inherit") {
+        env = { ...base };
+    }
+    else {
+        env = {};
+        for (const [name, value] of Object.entries(base)) {
+            const key = norm(name);
+            if (SAFE_EXACT.has(key) || extra.has(key) || SAFE_PREFIXES.some((p) => key.startsWith(p))) {
+                env[name] = value;
+            }
+            else {
+                withheld++;
+            }
+        }
+    }
+    // cmd.exe looks for a bare command name in the current directory before PATH, so a workspace
+    // `git.bat` would run in place of git with the allowlist's blessing. This switches that off.
+    if (isWindows())
+        env.NoDefaultCurrentDirectoryInExePath = "1";
+    return { env, withheld };
+}
+//# sourceMappingURL=CommandEnv.js.map

package/dist/cjs/utils/CommandEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandEnv.js","sourceRoot":"","sources":["../../../src/utils/CommandEnv.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;AA8CH,oDAcC;AAED,0CA2BC;AAvFD,4CAAoB;AACpB,gDAAwB;AAExB,4FAA4F;AAC5F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,+BAA+B;IAC/B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI;IAClF,wBAAwB,EAAE,sBAAsB;IAChD,oBAAoB;IACpB,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc;IACzE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,oBAAoB;IACxE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK;IAC9B,uCAAuC;IACvC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;IACnF,qBAAqB;IACrB,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;IAChE,gGAAgG;IAChG,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY;IACxF,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe;IACzF,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc;IACrD,iBAAiB,EAAE,gBAAgB,EAAE,eAAe;IACpD,iGAAiG;IACjG,iGAAiG;IACjG,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU;CACnE,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC;AAc9B,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAC9D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEjF,0GAA0G;AAC1G,SAAgB,oBAAoB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACvD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC;QAC7E,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,eAAe,CAC7B,OAA0B,OAAO,CAAC,GAAG,EACrC,SAA2B,oBAAoB,EAAE;IAEjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAsB,CAAC;IAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,EAAE,CAAC;QACT,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,6FAA6F;IAC7F,IAAI,SAAS,EAAE;QAAE,GAAG,CAAC,kCAAkC,GAAG,GAAG,CAAC;IAE9D,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC"}

package/dist/cjs/utils/CommandSandbox.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Opt-in container sandbox for run_workspace_command.
+ *
+ * The allowlist and path checks are guards, not isolation: `node -e`, `python -c` and `npm run`
+ * run arbitrary code with the user's permissions. With `mcp.sandbox.mode: "docker"` the validated
+ * command instead runs inside a throwaway container that sees only the workspace, has no network
+ * by default, none of the host's environment, no capabilities, and bounded memory, CPU and
+ * processes. Docker is the one isolation layer that behaves the same on macOS, Linux and Windows.
+ *
+ * Fail closed: if the sandbox is enabled but cannot start, the command does not run on the host.
+ */
+export interface SandboxPolicy {
+    mode: "off" | "docker";
+    /** Needs the toolchain the project's commands use; node:22 ships node, npm, git, python3, make, gcc. */
+    image: string;
+    /** "none" blocks all network; "bridge" allows it (npm install, git fetch). `host` is never accepted. */
+    network: "none" | "bridge";
+    memory: string;
+    cpus: string;
+    pidsLimit: number;
+}
+export interface DockerInvocation {
+    file: string;
+    args: string[];
+    /** Container name, so a timed-out run can be killed by name. */
+    name: string;
+    image: string;
+}
+export declare const DEFAULT_SANDBOX_IMAGE = "node:22-bookworm";
+/**
+ * Reads `mcp.sandbox` from lemma.config.json. A bad value throws instead of falling back: a typo in
+ * `network` or `image` must not silently widen what the sandbox allows or run on the host.
+ */
+export declare function loadSandboxPolicy(dir?: string): SandboxPolicy;
+/**
+ * Names (never values) of the host variables to forward: the harmless ones from the filtered env,
+ * plus whatever the project allowed explicitly. Values travel through the docker CLI's own
+ * environment (`-e NAME`), so they do not show up in `ps` output.
+ */
+export declare function containerEnvNames(filteredEnv: NodeJS.ProcessEnv, extraAllow?: string[]): string[];
+export declare function buildDockerInvocation(command: string, workspaceRoot: string, policy: SandboxPolicy, filteredEnv: NodeJS.ProcessEnv, extraEnvAllow?: string[]): DockerInvocation;
+//# sourceMappingURL=CommandSandbox.d.ts.map

package/dist/cjs/utils/CommandSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandSandbox.d.ts","sourceRoot":"","sources":["../../../src/utils/CommandSandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IACvB,wGAAwG;IACxG,KAAK,EAAE,MAAM,CAAC;IACd,wGAAwG;IACxG,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAkBxD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,aAAa,CAsC5E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAQrG;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,aAAa,GAAE,MAAM,EAAO,GAC3B,gBAAgB,CAsClB"}

package/dist/cjs/utils/CommandSandbox.js

@@ -0,0 +1,135 @@
+"use strict";
+/**
+ * Opt-in container sandbox for run_workspace_command.
+ *
+ * The allowlist and path checks are guards, not isolation: `node -e`, `python -c` and `npm run`
+ * run arbitrary code with the user's permissions. With `mcp.sandbox.mode: "docker"` the validated
+ * command instead runs inside a throwaway container that sees only the workspace, has no network
+ * by default, none of the host's environment, no capabilities, and bounded memory, CPU and
+ * processes. Docker is the one isolation layer that behaves the same on macOS, Linux and Windows.
+ *
+ * Fail closed: if the sandbox is enabled but cannot start, the command does not run on the host.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SANDBOX_IMAGE = void 0;
+exports.loadSandboxPolicy = loadSandboxPolicy;
+exports.containerEnvNames = containerEnvNames;
+exports.buildDockerInvocation = buildDockerInvocation;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const crypto_1 = require("crypto");
+exports.DEFAULT_SANDBOX_IMAGE = "node:22-bookworm";
+const DEFAULTS = {
+    mode: "off",
+    image: exports.DEFAULT_SANDBOX_IMAGE,
+    network: "none",
+    memory: "2g",
+    cpus: "2",
+    pidsLimit: 512,
+};
+const IMAGE_RE = /^[A-Za-z0-9][A-Za-z0-9._/:@-]*$/;
+const MEMORY_RE = /^[1-9]\d*[kmg]?$/i;
+const CPUS_RE = /^(?:[1-9]\d*|0?\.\d+|\d+\.\d+)$/;
+/** Env variables that still mean something inside the container (the rest are host paths). */
+const CONTAINER_ENV_EXACT = new Set(["NODE_ENV", "CI", "LANG", "LANGUAGE", "TZ", "TERM", "COLORTERM", "FORCE_COLOR", "NO_COLOR"]);
+/**
+ * Reads `mcp.sandbox` from lemma.config.json. A bad value throws instead of falling back: a typo in
+ * `network` or `image` must not silently widen what the sandbox allows or run on the host.
+ */
+function loadSandboxPolicy(dir = process.cwd()) {
+    const policy = { ...DEFAULTS };
+    let raw;
+    try {
+        const configPath = path_1.default.join(dir, "lemma.config.json");
+        if (!fs_1.default.existsSync(configPath))
+            return policy;
+        raw = JSON.parse(fs_1.default.readFileSync(configPath, "utf8"))?.mcp?.sandbox;
+    }
+    catch {
+        return policy; // unreadable config: sandbox stays off, as if unconfigured
+    }
+    if (!raw || typeof raw !== "object")
+        return policy;
+    if (raw.mode !== undefined) {
+        if (raw.mode !== "off" && raw.mode !== "docker")
+            throw new Error(`mcp.sandbox.mode must be "off" or "docker", got ${JSON.stringify(raw.mode)}`);
+        policy.mode = raw.mode;
+    }
+    if (raw.image !== undefined) {
+        if (typeof raw.image !== "string" || !IMAGE_RE.test(raw.image))
+            throw new Error(`mcp.sandbox.image is not a valid image reference: ${JSON.stringify(raw.image)}`);
+        policy.image = raw.image;
+    }
+    if (raw.network !== undefined) {
+        if (raw.network !== "none" && raw.network !== "bridge")
+            throw new Error(`mcp.sandbox.network must be "none" or "bridge", got ${JSON.stringify(raw.network)}`);
+        policy.network = raw.network;
+    }
+    if (raw.memory !== undefined) {
+        if (typeof raw.memory !== "string" || !MEMORY_RE.test(raw.memory))
+            throw new Error(`mcp.sandbox.memory must look like "512m" or "2g", got ${JSON.stringify(raw.memory)}`);
+        policy.memory = raw.memory;
+    }
+    if (raw.cpus !== undefined) {
+        const cpus = String(raw.cpus);
+        if (!CPUS_RE.test(cpus))
+            throw new Error(`mcp.sandbox.cpus must be a positive number, got ${JSON.stringify(raw.cpus)}`);
+        policy.cpus = cpus;
+    }
+    if (raw.pidsLimit !== undefined) {
+        if (typeof raw.pidsLimit !== "number" || !Number.isInteger(raw.pidsLimit) || raw.pidsLimit < 16)
+            throw new Error(`mcp.sandbox.pidsLimit must be an integer >= 16, got ${JSON.stringify(raw.pidsLimit)}`);
+        policy.pidsLimit = raw.pidsLimit;
+    }
+    return policy;
+}
+/**
+ * Names (never values) of the host variables to forward: the harmless ones from the filtered env,
+ * plus whatever the project allowed explicitly. Values travel through the docker CLI's own
+ * environment (`-e NAME`), so they do not show up in `ps` output.
+ */
+function containerEnvNames(filteredEnv, extraAllow = []) {
+    const extra = new Set(extraAllow);
+    return Object.keys(filteredEnv).filter((name) => filteredEnv[name] !== undefined &&
+        /^[A-Za-z_][A-Za-z0-9_]*$/.test(name) &&
+        (CONTAINER_ENV_EXACT.has(name) || name.startsWith("LC_") || extra.has(name)));
+}
+function buildDockerInvocation(command, workspaceRoot, policy, filteredEnv, extraEnvAllow = []) {
+    // --mount takes comma-separated key=value pairs, so these two characters would let a path inject options.
+    if (/[",\n\r]/.test(workspaceRoot)) {
+        throw new Error(`The workspace path contains a comma, quote or newline, which the Docker sandbox cannot mount safely: ${workspaceRoot}`);
+    }
+    const name = `lemma-sbx-${(0, crypto_1.randomBytes)(6).toString("hex")}`;
+    const args = [
+        "run", "--rm",
+        "--name", name,
+        "--network", policy.network,
+        "--cap-drop", "ALL",
+        "--security-opt", "no-new-privileges",
+        "--pids-limit", String(policy.pidsLimit),
+        "--memory", policy.memory,
+        "--cpus", policy.cpus,
+        // Only the workspace is writable; everything else in the image is read-only.
+        "--read-only",
+        "--tmpfs", "/tmp:rw,exec,size=512m",
+        "--mount", `type=bind,source=${workspaceRoot},target=/workspace`,
+        "--workdir", "/workspace",
+        "-e", "HOME=/tmp",
+        // An image's own ENTRYPOINT (redis, postgres…) would swallow `sh -c …` as its arguments.
+        "--entrypoint", "sh",
+    ];
+    // Files created in the bind mount should belong to the user, not to root. Docker Desktop on
+    // Windows has no uid to map, so the flag is skipped there.
+    if (typeof process.getuid === "function" && typeof process.getgid === "function") {
+        args.push("--user", `${process.getuid()}:${process.getgid()}`);
+    }
+    for (const envName of containerEnvNames(filteredEnv, extraEnvAllow))
+        args.push("-e", envName);
+    // The command is one argv entry for `sh -c`; it is never concatenated into a host shell line.
+    args.push(policy.image, "-c", command);
+    return { file: "docker", args, name, image: policy.image };
+}
+//# sourceMappingURL=CommandSandbox.js.map

package/dist/cjs/utils/CommandSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandSandbox.js","sourceRoot":"","sources":["../../../src/utils/CommandSandbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;AA+CH,8CAsCC;AAOD,8CAQC;AAED,sDA4CC;AAhJD,4CAAoB;AACpB,gDAAwB;AACxB,mCAAqC;AAqBxB,QAAA,qBAAqB,GAAG,kBAAkB,CAAC;AAExD,MAAM,QAAQ,GAAkB;IAC9B,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,6BAAqB;IAC5B,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,GAAG;IACT,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,OAAO,GAAG,iCAAiC,CAAC;AAElD,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAElI;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC3D,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC/B,IAAI,GAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACvD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9C,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,2DAA2D;IAC5E,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAEnD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChJ,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACzB,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClK,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9J,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1K,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxH,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzM,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,WAA8B,EAAE,aAAuB,EAAE;IACzF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CACpC,CAAC,IAAI,EAAE,EAAE,CACP,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS;QAC/B,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,OAAe,EACf,aAAqB,EACrB,MAAqB,EACrB,WAA8B,EAC9B,gBAA0B,EAAE;IAE5B,0GAA0G;IAC1G,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wGAAwG,aAAa,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAE3D,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,MAAM,CAAC,OAAO;QAC3B,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,mBAAmB;QACrC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACxC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,6EAA6E;QAC7E,aAAa;QACb,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,oBAAoB,aAAa,oBAAoB;QAChE,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,WAAW;QACjB,yFAAyF;QACzF,cAAc,EAAE,IAAI;KACrB,CAAC;IAEF,4FAA4F;IAC5F,2DAA2D;IAC3D,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE9F,8FAA8F;IAC9F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC7D,CAAC"}

package/dist/cjs/utils/ContextSqueezer.d.ts

@@ -12,7 +12,13 @@ export interface SqueezeResult {
     compressionRatio: number;
 }
 /**
- * Remove single-line and multi-line comments from JavaScript/TypeScript/JSON/CSS code
+ * Remove single-line and multi-line comments from JavaScript/TypeScript/JSON/CSS code.
+ *
+ * A scanner, not a pair of regexes: `//` and `/*` inside a string, a template literal or a regex
+ * literal are not comments. The previous implementation cut every line at its first `//`, so
+ * `` `file://${path}` `` lost the rest of its line, and its `/* … *\/` regex deleted the `/**\/` in
+ * a glob such as `src/**\/*.ts` (leaving `src*.ts`). Anything the scanner is unsure about is kept:
+ * a stray comment costs a few tokens, a wrongly deleted line misleads the reader.
  */
 export declare function stripComments(code: string): string;
 /**

package/dist/cjs/utils/ContextSqueezer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ContextSqueezer.d.ts","sourceRoot":"","sources":["../../../src/utils/ContextSqueezer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgClD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOtD;AAGD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BxE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAoEjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa1D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAW,EAClB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,aAAa,CAiEf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CA0BvD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAkDtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,GAAG,EAAE,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC,gGAAgG;IAChG,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,kBAAkB,CA+E3G;AAwCD;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsBjD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAoExE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAiD1E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiC3D"}
+{"version":3,"file":"ContextSqueezer.d.ts","sourceRoot":"","sources":["../../../src/utils/ContextSqueezer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA4GlD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOtD;AAGD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BxE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAoEjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa1D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAW,EAClB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,aAAa,CAiEf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,CA0BvD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAkDtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,GAAG,EAAE,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC,gGAAgG;IAChG,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,kBAAkB,CA+E3G;AAsDD;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA2CjD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAoExE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAiD1E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiC3D"}

package/dist/cjs/utils/ContextSqueezer.js

@@ -22,37 +22,150 @@ exports.generateAstDiff = generateAstDiff;
 exports.filterHighDensityRAG = filterHighDensityRAG;
 exports.collapseRepetitiveLogs = collapseRepetitiveLogs;
 /**
- * Remove single-line and multi-line comments from JavaScript/TypeScript/JSON/CSS code
+ * Remove single-line and multi-line comments from JavaScript/TypeScript/JSON/CSS code.
+ *
+ * A scanner, not a pair of regexes: `//` and `/*` inside a string, a template literal or a regex
+ * literal are not comments. The previous implementation cut every line at its first `//`, so
+ * `` `file://${path}` `` lost the rest of its line, and its `/* … *\/` regex deleted the `/**\/` in
+ * a glob such as `src/**\/*.ts` (leaving `src*.ts`). Anything the scanner is unsure about is kept:
+ * a stray comment costs a few tokens, a wrongly deleted line misleads the reader.
  */
 function stripComments(code) {
-    // 1. Remove multi-line comments /* ... */
-    let clean = code.replace(/\/\*[\s\S]*?\*\//g, '');
-    // 2. Remove single-line comments // ...
-    // Be careful not to strip URL protocols like http:// or https://
-    const lines = clean.split('\n');
-    const processedLines = lines.map(line => {
-        // If the line contains a URL, do not strip comments or do it carefully
-        if (line.includes('http://') || line.includes('https://')) {
-            // Find comment symbol not preceded by : or within a string (simple heuristic)
-            const urlIndex = line.indexOf('://');
-            const commentIndex = line.indexOf('//');
-            if (commentIndex !== -1 && commentIndex < urlIndex) {
-                return line.substring(0, commentIndex);
+    const n = code.length;
+    let out = '';
+    let i = 0;
+    // Copies a '…' or "…" string starting at i; an unterminated one ends at the newline.
+    const copyQuoted = (quote) => {
+        out += code[i++];
+        while (i < n) {
+            const ch = code[i];
+            if (ch === '\\' && i + 1 < n) {
+                out += ch + code[i + 1];
+                i += 2;
+                continue;
+            }
+            if (ch === '\n')
+                return;
+            out += ch;
+            i++;
+            if (ch === quote)
+                return;
+        }
+    };
+    // Copies a `…` template literal, including nested ${ … } expressions that hold strings,
+    // templates or braces of their own.
+    const copyTemplate = () => {
+        out += code[i++];
+        while (i < n) {
+            const ch = code[i];
+            if (ch === '\\' && i + 1 < n) {
+                out += ch + code[i + 1];
+                i += 2;
+                continue;
+            }
+            if (ch === '`') {
+                out += ch;
+                i++;
+                return;
+            }
+            if (ch === '$' && code[i + 1] === '{') {
+                out += '${';
+                i += 2;
+                let depth = 1;
+                while (i < n && depth > 0) {
+                    const e = code[i];
+                    if (e === '`') {
+                        copyTemplate();
+                        continue;
+                    }
+                    if (e === '"' || e === "'") {
+                        copyQuoted(e);
+                        continue;
+                    }
+                    if (e === '{')
+                        depth++;
+                    else if (e === '}')
+                        depth--;
+                    out += e;
+                    i++;
+                }
+                continue;
             }
-            // If comment is after the URL
-            const postUrlComment = line.indexOf('//', urlIndex + 3);
-            if (postUrlComment !== -1) {
-                return line.substring(0, postUrlComment);
+            out += ch;
+            i++;
+        }
+    };
+    // True when a '/' at this point opens a regex literal rather than meaning division.
+    const startsRegex = () => {
+        const before = out.replace(/\s+$/, '');
+        if (before.length === 0)
+            return true;
+        if ('(,=:[!&|?{};+-*%<>~^'.includes(before[before.length - 1]))
+            return true;
+        return /(?:^|[^\w$.])(?:return|typeof|case|in|of|yield|await|void|delete|throw|else|do)$/.test(before);
+    };
+    // Copies a regex literal starting at i; returns false (copying nothing) if it does not close
+    // on its own line, in which case the '/' was not a regex after all.
+    const copyRegex = () => {
+        let j = i + 1;
+        let inClass = false;
+        while (j < n) {
+            const ch = code[j];
+            if (ch === '\n')
+                return false;
+            if (ch === '\\') {
+                j += 2;
+                continue;
             }
-            return line;
+            if (ch === '[')
+                inClass = true;
+            else if (ch === ']')
+                inClass = false;
+            else if (ch === '/' && !inClass) {
+                j++;
+                while (j < n && /[a-z]/i.test(code[j]))
+                    j++;
+                out += code.slice(i, j);
+                i = j;
+                return true;
+            }
+            j++;
         }
-        const commentIndex = line.indexOf('//');
-        if (commentIndex !== -1) {
-            return line.substring(0, commentIndex);
+        return false;
+    };
+    while (i < n) {
+        const c = code[i];
+        const d = code[i + 1];
+        if (c === '"' || c === "'") {
+            copyQuoted(c);
+            continue;
         }
-        return line;
-    });
-    return processedLines.join('\n');
+        if (c === '`') {
+            copyTemplate();
+            continue;
+        }
+        if (c === '/' && d === '*') {
+            const end = code.indexOf('*/', i + 2);
+            i = end === -1 ? n : end + 2; // block comment: removed entirely, newlines included
+            continue;
+        }
+        if (c === '/' && d === '/') {
+            // `scheme://` is a URL, not a comment (http, https, file, ws, s3, …).
+            if (code[i - 1] === ':' && /[a-z][a-z0-9+.-]*:$/i.test(out.slice(-24))) {
+                out += '//';
+                i += 2;
+                continue;
+            }
+            while (i < n && code[i] !== '\n')
+                i++; // line comment: removed up to, not including, the newline
+            continue;
+        }
+        if (c === '/' && startsRegex() && copyRegex())
+            continue;
+        out += c;
+        i++;
+    }
+    return out;
 }
 /**
  * Compress code structure by removing redundant whitespace and blank lines
@@ -169,7 +282,7 @@ function detectFilePath(code) {
     // // src/proxy/KeyManager.ts
     // # src/proxy/KeyManager.py
     // /* src/proxy/KeyManager.ts */
-    const match = firstLine.match(/^(?:\/\/#?|#|\/\*)\s*([a-zA-Z0-9_\-\.\/\\:]{3,120})(?:\s*\*\/)?$/);
+    const match = firstLine.match(/^(?:\/\/#?|#|\/\*)\s*([a-zA-Z0-9_\-./\\:]{3,120})(?:\s*\*\/)?$/);
     if (match && match[1]) {
         return match[1];
     }
@@ -418,13 +531,31 @@ function extractModuleSpecifier(trimmed) {
         return pyImport[1].split(',')[0].trim();
     return null;
 }
+/** True once `s` (an import/require statement collected so far, on one line) is a whole statement. */
+function importStatementComplete(s) {
+    if (s.startsWith('from ')) {
+        // Python: `from a import (` … `)` is complete when the parentheses balance.
+        return (s.match(/\(/g) || []).length <= (s.match(/\)/g) || []).length;
+    }
+    if (s.startsWith('@import'))
+        return s.includes(';') || /['")]\s*$/.test(s);
+    if (/^(?:const|let|var)\s/.test(s))
+        return /require\s*\([^)]*\)/.test(s);
+    // Python: `import os`, `import a.b as c, d`.
+    if (!/\bfrom\b/.test(s) && /^import\s+[\w.]+(?:\s+as\s+\w+)?(?:\s*,\s*[\w.]+(?:\s+as\s+\w+)?)*\s*;?$/.test(s))
+        return true;
+    // JS/TS: ends with a quoted module specifier.
+    return /['"]\s*;?\s*$/.test(s) && (/\bfrom\s*['"]/.test(s) || /^import\s*['"]/.test(s) || /=\s*require\(/.test(s));
+}
 function isImportLine(trimmed) {
     // JS/TS standard imports: import ... from ... or import '...'
     if (trimmed.startsWith('import ') || trimmed.startsWith('import{') || trimmed.startsWith('import*'))
         return true;
     // CommonJS require statement: const ... = require(...)
-    if (trimmed.includes('require(') &&
-        (trimmed.startsWith('const ') || trimmed.startsWith('let ') || trimmed.startsWith('var '))) {
+    // Only a statement that is exactly `const x = require('mod')` (optionally `.prop`). Matching any
+    // line that merely contains require( removed `const c = require("x") as {` (leaving its type
+    // body behind) and `const s = require("fs").readFileSync(` (leaving its arguments behind).
+    if (/^(?:const|let|var)\s+(?:[\w$]+|\{[^}]*\})\s*=\s*require\(\s*['"][^'"]+['"]\s*\)(?:\.[\w$]+)?\s*;?$/.test(trimmed)) {
         return true;
     }
     // Python: from ... import ...
@@ -442,23 +573,43 @@ function stripImports(code) {
     const lines = code.split('\n');
     let removedCount = 0;
     const specifiers = [];
-    const processedLines = lines.filter(line => {
-        const trimmed = line.trim();
-        if (!isImportLine(trimmed))
-            return true;
+    // A statement can span lines (`import {\n a,\n b\n} from 'x'`). Removing only its first line left
+    // the rest (`a,` / `b` / `} from 'x';`) behind as orphan lines and hid the module from the list.
+    // Consume to the end of the statement; if it does not close within a few lines it is not one we
+    // understand, so keep the line rather than risk deleting real code.
+    const MAX_IMPORT_LINES = 40;
+    const processedLines = [];
+    for (let i = 0; i < lines.length; i++) {
+        const trimmed = lines[i].trim();
+        if (!isImportLine(trimmed)) {
+            processedLines.push(lines[i]);
+            continue;
+        }
+        let statement = trimmed;
+        let end = i;
+        while (!importStatementComplete(statement) && end + 1 < lines.length && end - i < MAX_IMPORT_LINES) {
+            end++;
+            statement += ' ' + lines[end].trim();
+        }
+        if (!importStatementComplete(statement)) {
+            processedLines.push(lines[i]);
+            continue;
+        }
         removedCount++;
-        const spec = extractModuleSpecifier(trimmed);
+        const spec = extractModuleSpecifier(statement);
         if (spec && !specifiers.includes(spec))
             specifiers.push(spec);
-        return false;
-    });
+        i = end;
+    }
     if (removedCount > 0) {
         // Cap the list: a barrel file with 60 imports would otherwise cost more than it saves.
         const MAX_LISTED = 25;
         const listed = specifiers.slice(0, MAX_LISTED).join(', ');
         const extra = specifiers.length > MAX_LISTED ? `, +${specifiers.length - MAX_LISTED} more` : '';
         const detail = specifiers.length > 0 ? `: ${listed}${extra}` : '';
-        processedLines.unshift(`// [Lemma Squeezer: Squeezed ${removedCount} import/dependency lines${detail}]`);
+        // Keep a shebang first: a header above it turns `#!/usr/bin/env node` into a syntax error.
+        const at = processedLines.length > 0 && processedLines[0].startsWith('#!') ? 1 : 0;
+        processedLines.splice(at, 0, `// [Lemma Squeezer: Squeezed ${removedCount} import/dependency lines${detail}]`);
     }
     return processedLines.join('\n');
 }