@oscharko-dev/keiko 0.2.0-beta.2 → 0.2.0-beta.4

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchMatchers.js

@@ -3,6 +3,7 @@
 // independently testable.
 import { createHash } from "node:crypto";
 import { RepoSearchInvalidQueryError } from "./errors.js";
+import { regexSafetyIssue } from "./repoSearchRegexSafety.js";
 export function fingerprintFor(query) {
     const canonical = JSON.stringify({
         kind: query.kind,
@@ -251,18 +252,10 @@ function buildExactSymbolMatcher(query) {
         },
     };
 }
-// Cap regex source length and refuse the classical catastrophic-backtracking shapes - any
-// group `(...)` or character class `[...]` followed by a `+` / `*` / `{n,}` quantifier. The
-// per-call elapsedMsMax cannot interrupt a synchronous `RegExp.exec` once it has entered a
-// pathological backtrack, so the only safe defense is to refuse the pattern at compile time.
-const MAX_REGEX_LENGTH = 200;
-const DANGEROUS_REGEX_STRUCTURE = /\([^)]*\)[+*{]|\[[^\]]*\][+*{]/;
 function buildRegexMatcher(query) {
-    if (query.text.length > MAX_REGEX_LENGTH) {
-        throw new RepoSearchInvalidQueryError(`regex too long: ${String(query.text.length)} > ${String(MAX_REGEX_LENGTH)}`);
-    }
-    if (DANGEROUS_REGEX_STRUCTURE.test(query.text)) {
-        throw new RepoSearchInvalidQueryError("regex contains repetition over a group or character class (potential catastrophic backtracking)");
+    const issue = regexSafetyIssue(query.text);
+    if (issue !== undefined) {
+        throw new RepoSearchInvalidQueryError(issue);
     }
     let regex;
     try {

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchRegexSafety.d.ts

@@ -0,0 +1,2 @@
+export declare function regexSafetyIssue(source: string): string | undefined;
+//# sourceMappingURL=repoSearchRegexSafety.d.ts.map

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchRegexSafety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoSearchRegexSafety.d.ts","sourceRoot":"","sources":["../src/repoSearchRegexSafety.ts"],"names":[],"mappings":"AAIA,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWnE"}

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchRegexSafety.js

@@ -0,0 +1,15 @@
+const MAX_REGEX_LENGTH = 200;
+const DANGEROUS_GROUP_OR_CLASS_REPETITION = /\([^)]*\)[+*{]|\[[^\]]*\][+*{]/;
+const ADJACENT_QUANTIFIED_ATOMS = /(?:\\.|[^\\()[\]{}+*?|])(?:[+*]|\{\d+(?:,\d*)?\})(?:\\.|[^\\()[\]{}+*?|])(?:[+*]|\{\d+(?:,\d*)?\})/;
+export function regexSafetyIssue(source) {
+    if (source.length > MAX_REGEX_LENGTH) {
+        return `regex too long: ${String(source.length)} > ${String(MAX_REGEX_LENGTH)}`;
+    }
+    if (DANGEROUS_GROUP_OR_CLASS_REPETITION.test(source)) {
+        return "regex contains repetition over a group or character class (potential catastrophic backtracking)";
+    }
+    if (ADJACENT_QUANTIFIED_ATOMS.test(source)) {
+        return "regex contains adjacent quantified atoms (potential catastrophic backtracking)";
+    }
+    return undefined;
+}

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchScan.d.ts

@@ -1,8 +1,8 @@
 import type { CandidateFile, CandidateOmissionReason, EvidenceAtom, EvidenceAtomProvenanceKind } from "@oscharko-dev/keiko-contracts/connected-context";
 import type { WorkspaceFs } from "./fs.js";
-import { type IgnoreMatcher } from "./ignore.js";
 import type { LineMatcher } from "./repoSearchMatchers.js";
 import type { DiscoveredFile, WorkspaceInfo } from "./types.js";
+export declare function isImageScopePath(scopePath: string): boolean;
 export interface ScopeShape {
     readonly workspace: WorkspaceInfo;
     readonly scopeId: string;
@@ -42,7 +42,6 @@ export interface SearchTextRunner {
     readonly nowMs: () => number;
     readonly startMs: number;
     readonly matcher: LineMatcher;
-    readonly ignoreMatcher: IgnoreMatcher;
     readonly fingerprint: string;
 }
 export interface RunState {
@@ -52,5 +51,6 @@ export interface RunState {
 }
 export declare function elapsed(runner: SearchTextRunner): number;
 export declare function hitLimit(runner: SearchTextRunner, state: RunState): boolean;
+export declare function isIoError(err: unknown): boolean;
 export declare function scanFile(runner: SearchTextRunner, file: DiscoveredFile, state: RunState, atoms: EvidenceAtom[], candidates: CandidateFile[]): Promise<void>;
 //# sourceMappingURL=repoSearchScan.d.ts.map

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchScan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repoSearchScan.d.ts","sourceRoot":"","sources":["../src/repoSearchScan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,YAAY,EACZ,0BAA0B,EAC3B,MAAM,iDAAiD,CAAC;AAOzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAKtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAgBhE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACzF,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,CAwBxD;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAAG,SAAS,GAC3C,aAAa,CAEf;AAgED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,WAAW,GACd,YAAY,CAuBd;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAExD;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAc3E;AA+DD,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,aAAa,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"repoSearchScan.d.ts","sourceRoot":"","sources":["../src/repoSearchScan.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,YAAY,EACZ,0BAA0B,EAC3B,MAAM,iDAAiD,CAAC;AAOzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQ3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsBhE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACzF,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,CAwBxD;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAAG,SAAS,GAC3C,aAAa,CAEf;AAkBD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,WAAW,GACd,YAAY,CAuBd;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAExD;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAc3E;AAgBD,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAM/C;AAkED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,YAAY,EAAE,EACrB,UAAU,EAAE,aAAa,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/node_modules/@oscharko-dev/keiko-workspace/dist/repoSearchScan.js

@@ -2,25 +2,39 @@
 // Kept separate from the public API surface so repoSearch.ts stays inside the 400-LOC cap.
 // Every file system touch goes through the injected WorkspaceFs port; nothing here calls
 // node:fs directly.
-import { relative } from "node:path";
 import { CONNECTED_CONTEXT_SCHEMA_VERSION, isValidScopePath, } from "@oscharko-dev/keiko-contracts/connected-context";
 import { discoverFiles, readWorkspaceFile } from "./discovery.js";
 import { FileTooLargeError, RepoSearchInvalidQueryError } from "./errors.js";
-import { isDenied, isIgnored } from "./ignore.js";
+import { isDenied } from "./ignore.js";
 import { resolveWithinWorkspace } from "./paths.js";
-import { assertContainedRealPath } from "./realpath.js";
+import { containedRealPathInfo } from "./realpath.js";
 import { looksBinary } from "./binaryDetect.js";
+import { collectFromEntries } from "./repoSearchEntries.js";
+import { collectBestLines } from "./repoSearchLineSelection.js";
 import { evidenceAtomStableId } from "./stableId.js";
 const BINARY_PROBE_BYTES = 512;
-// Per-file cap on emitted lexical matches (Epic #177 retrieval fix). A connected-scope question
-// carries several content tokens, so a prose-heavy file can match many low-signal lines. Emitting
-// all of them let one alphabetically-early file exhaust the global match budget before the scan
-// ever reached the file the question was actually about. Keeping only each file's best lines makes
-// the evidence diverse across the scope while still surfacing every file's strongest signal for the
-// downstream ranker.
-const MAX_MATCHES_PER_FILE = 3;
-function toRelative(root, absolutePath) {
-    return relative(root, absolutePath).split("\\").join("/");
+const IMAGE_EXTENSIONS = new Set([
+    ".avif",
+    ".bmp",
+    ".gif",
+    ".heic",
+    ".heif",
+    ".ico",
+    ".jpeg",
+    ".jpg",
+    ".png",
+    ".tif",
+    ".tiff",
+    ".webp",
+]);
+function normalizeScopePath(scopePath) {
+    return scopePath.split("\\").join("/");
+}
+export function isImageScopePath(scopePath) {
+    const lastSlash = Math.max(scopePath.lastIndexOf("/"), scopePath.lastIndexOf("\\"));
+    const basename = scopePath.slice(lastSlash + 1).toLowerCase();
+    const dot = basename.lastIndexOf(".");
+    return dot >= 0 && IMAGE_EXTENSIONS.has(basename.slice(dot));
 }
 export function buildAtom(shape) {
     const stableId = evidenceAtomStableId({
@@ -51,48 +65,11 @@ export function buildCandidate(scopePath, omitted) {
     return { scopePath, score: 0, signals: [], omitted };
 }
 function collectFromDirectory(scope, limits, fs) {
-    return discoverFiles(scope.workspace, { maxDepth: 12, maxFiles: limits.maxFilesScanned, applyGitignore: true }, fs);
-}
-function collectFromEntries(scope, limits, fs) {
-    const out = [];
-    const root = scope.workspace.root;
-    let scannedSoFar = 0;
-    let truncated = false;
-    for (const entry of scope.relativePaths) {
-        if (scannedSoFar >= limits.maxFilesScanned) {
-            truncated = true;
-            break;
-        }
-        const abs = resolveWithinWorkspace(root, entry);
-        assertContainedRealPath(fs, root, abs, "scope");
-        const entryRel = toRelative(root, abs);
-        // Deny the directory entry itself before recursing so that a denied dir (e.g.
-        // node_modules) listed explicitly in scope.relativePaths is never expanded (Finding 5).
-        if (isDenied(entryRel)) {
-            continue;
-        }
-        const stat = fs.stat(abs);
-        if (stat.isDirectory) {
-            const remaining = limits.maxFilesScanned - scannedSoFar;
-            const nested = discoverFiles({ ...scope.workspace, root: abs }, { maxDepth: 12, maxFiles: remaining, applyGitignore: true }, fs);
-            for (const file of nested) {
-                out.push({
-                    relativePath: toRelative(root, resolveWithinWorkspace(abs, file.relativePath)),
-                    sizeBytes: file.sizeBytes,
-                });
-                scannedSoFar += 1;
-            }
-            if (nested.length >= remaining) {
-                truncated = true;
-            }
-            continue;
-        }
-        if (stat.isFile) {
-            out.push({ relativePath: entryRel, sizeBytes: stat.size });
-            scannedSoFar += 1;
-        }
-    }
-    return { files: out, truncated };
+    const files = discoverFiles(scope.workspace, { maxDepth: 12, maxFiles: limits.maxFilesScanned + 1, applyGitignore: false }, fs);
+    return {
+        files: files.slice(0, limits.maxFilesScanned),
+        truncated: files.length > limits.maxFilesScanned,
+    };
 }
 export function gatherCandidates(scope, limits, fs) {
     // Defense in depth alongside the realpath gate: validate scope.relativePaths against the
@@ -106,10 +83,10 @@ export function gatherCandidates(scope, limits, fs) {
         }
     }
     if (scope.relativePaths.length === 0) {
-        const files = collectFromDirectory(scope, limits, fs);
+        const result = collectFromDirectory(scope, limits, fs);
         return {
-            files: [...files].sort((a, b) => (a.relativePath < b.relativePath ? -1 : 1)),
-            truncated: false,
+            files: [...result.files].sort((a, b) => (a.relativePath < b.relativePath ? -1 : 1)),
+            truncated: result.truncated,
         };
     }
     const result = collectFromEntries(scope, limits, fs);
@@ -147,6 +124,26 @@ export function hitLimit(runner, state) {
     }
     return false;
 }
+function hitEmissionLimit(runner, state) {
+    if (state.matchesReturned >= runner.limits.maxMatchesReturned) {
+        state.truncated = true;
+        return true;
+    }
+    if (elapsed(runner) > runner.limits.elapsedMsMax) {
+        state.truncated = true;
+        return true;
+    }
+    return false;
+}
+// Returns true for NodeJS.ErrnoException (EACCES, ENOENT, EIO, …). Checked by the presence of a
+// string `code` property so TypeError and other programmer errors are NOT swallowed.
+export function isIoError(err) {
+    if (err === null || typeof err !== "object" || !("code" in err)) {
+        return false;
+    }
+    const { code } = err;
+    return typeof code === "string";
+}
 function readForScan(runner, relativePath, candidates) {
     try {
         return readWorkspaceFile(runner.scope.workspace, relativePath, { maxBytes: runner.limits.maxBytesPerFileScanned }, runner.fs).text;
@@ -156,25 +153,18 @@ function readForScan(runner, relativePath, candidates) {
             candidates.push(buildCandidate(relativePath, "size-exceeded"));
             return undefined;
         }
+        // TOCTOU: permissions or availability may change between discovery and read.
+        // A single unreadable file must degrade to a skip, not crash the whole scan.
+        if (isIoError(err)) {
+            candidates.push(buildCandidate(relativePath, "tool-unavailable"));
+            return undefined;
+        }
         throw err;
     }
 }
-function scanLines(runner, relativePath, text, state, atoms) {
-    const lines = text.split("\n");
-    // Score every line, then keep only this file's best-scoring lines (ties broken by earliest
-    // line). This bounds each file's contribution to MAX_MATCHES_PER_FILE and surfaces the file's
-    // strongest evidence rather than whichever lines happen to appear first.
-    const scored = [];
-    for (let i = 0; i < lines.length; i += 1) {
-        const score = runner.matcher.match(lines[i] ?? "");
-        if (score > 0) {
-            scored.push({ line: i + 1, score });
-        }
-    }
-    scored.sort((a, b) => (b.score !== a.score ? b.score - a.score : a.line - b.line));
-    const best = scored.slice(0, MAX_MATCHES_PER_FILE).sort((a, b) => a.line - b.line);
+function emitBestLines(runner, relativePath, state, atoms, best) {
     for (const match of best) {
-        if (hitLimit(runner, state)) {
+        if (hitEmissionLimit(runner, state)) {
             return;
         }
         atoms.push(buildAtom({
@@ -190,14 +180,38 @@ function scanLines(runner, relativePath, text, state, atoms) {
         state.matchesReturned += 1;
     }
 }
+function scanLines(runner, relativePath, text, state, atoms) {
+    emitBestLines(runner, relativePath, state, atoms, collectBestLines(runner, text, state));
+}
 export async function scanFile(runner, file, state, atoms, candidates) {
-    if (isDenied(file.relativePath) || isIgnored(runner.ignoreMatcher, file.relativePath, false)) {
+    if (isImageScopePath(file.relativePath)) {
+        candidates.push(buildCandidate(file.relativePath, "binary"));
+        return;
+    }
+    if (isDenied(file.relativePath)) {
         candidates.push(buildCandidate(file.relativePath, "ignored"));
         return;
     }
     const abs = resolveWithinWorkspace(runner.scope.workspace.root, file.relativePath);
-    assertContainedRealPath(runner.fs, runner.scope.workspace.root, abs, "scope");
-    if (await probeBinary(runner.fs, abs, file.sizeBytes)) {
+    const contained = containedRealPathInfo(runner.fs, runner.scope.workspace.root, abs);
+    const realRel = normalizeScopePath(contained.realRelative);
+    if (isDenied(realRel)) {
+        candidates.push(buildCandidate(file.relativePath, "ignored"));
+        return;
+    }
+    let isBinary;
+    try {
+        isBinary = await probeBinary(runner.fs, contained.path, file.sizeBytes);
+    }
+    catch (err) {
+        // TOCTOU: file may have become unreadable (EACCES, ENOENT, …) between discovery and probe.
+        if (isIoError(err)) {
+            candidates.push(buildCandidate(file.relativePath, "tool-unavailable"));
+            return;
+        }
+        throw err;
+    }
+    if (isBinary) {
         candidates.push(buildCandidate(file.relativePath, "binary"));
         return;
     }

package/node_modules/@oscharko-dev/keiko-workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oscharko-dev/keiko-workspace",
-  "version": "0.2.0-beta.2",
+  "version": "0.2.0-beta.4",
   "private": true,
   "type": "module",
   "license": "Apache-2.0",
@@ -19,7 +19,7 @@
   },
   "scripts": {
     "build": "tsc -b tsconfig.json",
-    "typecheck": "tsc -b tsconfig.json --noEmit",
+    "typecheck": "tsc -b tsconfig.json",
     "test": "vitest run"
   },
   "files": [

package/node_modules/@types/node/README.md

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 
 ### Additional Details
- * Last updated: Fri, 05 Jun 2026 22:33:07 GMT
+ * Last updated: Wed, 10 Jun 2026 22:15:09 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 
 # Credits

package/node_modules/@types/node/http2.d.ts

@@ -20,6 +20,7 @@ declare module "node:http2" {
         ":method"?: string | undefined;
         ":authority"?: string | undefined;
         ":scheme"?: string | undefined;
+        ":protocol"?: string | undefined;
     }
     // Http2Stream
     interface StreamState {

package/node_modules/@types/node/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@types/node",
-    "version": "25.9.2",
+    "version": "25.9.3",
     "description": "TypeScript definitions for node",
     "homepage": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
     "license": "MIT",
@@ -150,6 +150,6 @@
         "undici-types": ">=7.24.0 <7.24.7"
     },
     "peerDependencies": {},
-    "typesPublisherContentHash": "a4b1508fd78227ea41216c90a2f88a2fa4eeaefffb6c5d6334a18215ad38d681",
+    "typesPublisherContentHash": "b651099f0be23911446e6a283ee816760ef628511df23064b85b949a9ca68cf5",
     "typeScriptVersion": "5.3"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oscharko-dev/keiko",
-  "version": "0.2.0-beta.2",
+  "version": "0.2.0-beta.4",
   "description": "Enterprise model-agnostic developer-assist coding agent for regulated engineering workflows.",
   "type": "module",
   "license": "Apache-2.0",
@@ -38,6 +38,8 @@
     "format:check": "prettier --check .",
     "test": "npm run build:packages && vitest run",
     "test:coverage": "npm run build:packages && vitest run --coverage",
+    "dev:start": "node scripts/dev-start.mjs",
+    "dev:stop": "node scripts/dev-stop.mjs",
     "prepare:bin": "node scripts/ensure-bin-mode.mjs",
     "build:ui": "node scripts/build-ui.mjs",
     "prune:package-native-optionals": "node scripts/prune-package-native-optionals.mjs",

package/dist/ui/static/_next/static/BNiyfCos3TiM2QdurajIZ/_buildManifest.js

@@ -1 +0,0 @@
-self.__BUILD_MANIFEST=function(e,r,t){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},__routerFilterStatic:{numItems:9,errorRate:1e-4,numBits:173,numHashes:14,bitArray:[0,0,r,1,1,r,e,r,e,e,e,e,r,e,r,e,e,r,e,r,e,r,e,r,r,r,r,e,e,r,e,r,r,r,e,r,e,e,r,e,e,e,e,e,e,e,r,e,r,e,r,r,r,r,r,r,e,e,r,e,e,r,e,r,r,r,r,e,r,e,e,e,r,r,r,e,e,e,e,e,e,r,r,r,r,r,r,r,r,e,e,r,e,e,r,r,e,e,r,r,r,r,e,e,r,r,r,e,r,e,r,r,e,e,e,e,e,r,e,r,e,e,e,r,e,e,r,e,r,e,e,e,e,e,r,e,e,e,e,r,r,r,e,r,r,e,r,e,r,r,e,r,e,r,e,e,r,e,r,e,e,r,e,e,e,e,r,e,e,r,r,e,r]},__routerFilterDynamic:{numItems:r,errorRate:1e-4,numBits:r,numHashes:null,bitArray:[]},"/_error":["static/chunks/pages/_error-bda15e7831eec981.js"],sortedPages:["/_app","/_error"]}}(1,0,1e-4),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();