@staff0rd/assist 0.615.3 → 0.616.1

package/dist/index.js

@@ -6,7 +6,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@staff0rd/assist",
-  version: "0.615.3",
+  version: "0.616.1",
   type: "module",
   main: "dist/index.js",
   bin: {
@@ -16541,6 +16541,84 @@ function stripEnvPrefix(parts) {
   return i > 0 ? parts.slice(i) : parts;
 }
 
+// src/shared/extractGhApiMethod.ts
+function extractGhApiMethod(args) {
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg.startsWith("--method=")) return arg.slice("--method=".length);
+    if (arg.startsWith("-X=")) return arg.slice("-X=".length);
+    if (arg.startsWith("-X") && arg.length > 2) return arg.slice(2);
+    if ((arg === "--method" || arg === "-X") && i + 1 < args.length) {
+      return args[i + 1];
+    }
+  }
+  return void 0;
+}
+
+// src/shared/tokenize.ts
+function tokenize(command) {
+  const tokens = [];
+  let current = "";
+  let inSingle = false;
+  let inDouble = false;
+  for (let i = 0; i < command.length; i++) {
+    const ch = command[i];
+    if (ch === "'" && !inDouble) {
+      inSingle = !inSingle;
+      current += ch;
+    } else if (ch === '"' && !inSingle) {
+      inDouble = !inDouble;
+      current += ch;
+    } else if (ch === "\\" && inDouble && i + 1 < command.length) {
+      current += ch + command[++i];
+    } else if (/\s/.test(ch) && !inSingle && !inDouble) {
+      if (current) {
+        tokens.push(current);
+        current = "";
+      }
+    } else {
+      current += ch;
+    }
+  }
+  if (current) tokens.push(current);
+  return tokens;
+}
+
+// src/commands/cliHook/isGhIssueApiWrite.ts
+var WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PATCH", "PUT", "DELETE"]);
+var BODY_FLAGS = ["-f", "-F", "--field", "--raw-field", "--input"];
+var COMMAND_OPERATORS = /* @__PURE__ */ new Set(["&&", "||", ";", "|", "&"]);
+var ISSUE_ENDPOINT = /(?:^|[/"'`])repos\/[^/\s"'`]+\/[^/\s"'`]+\/issues(?:$|[/?"'`])/;
+function isGhIssueApiWrite(command) {
+  const tokens = tokenize(command);
+  for (let i = 0; i + 1 < tokens.length; i++) {
+    if (tokens[i] !== "gh" || tokens[i + 1] !== "api") continue;
+    const args = argsUntilNextCommand(tokens.slice(i + 2));
+    if (targetsIssueEndpoint(args) && isWrite(args)) return true;
+  }
+  return false;
+}
+function argsUntilNextCommand(tokens) {
+  const end = tokens.findIndex((token) => COMMAND_OPERATORS.has(token));
+  return end === -1 ? tokens : tokens.slice(0, end);
+}
+function targetsIssueEndpoint(args) {
+  return args.some((arg) => ISSUE_ENDPOINT.test(arg));
+}
+function isWrite(args) {
+  const method = extractGhApiMethod(args);
+  if (method) return WRITE_METHODS.has(unquote(method).toUpperCase());
+  return args.some(isBodyFlag);
+}
+function isBodyFlag(arg) {
+  return BODY_FLAGS.some(
+    (flag) => arg === flag || arg.startsWith(`${flag}=`) || flag.length === 2 && arg.length > 2 && arg.startsWith(flag)
+  );
+}
+function unquote(value) {
+  return value.replace(/^['"]|['"]$/g, "");
+}
+
 // src/commands/cliHook/findBuiltinDeny.ts
 var BUILTIN_DENIES = [
   {
@@ -16555,6 +16633,10 @@ var BUILTIN_DENIES = [
     pattern: "gh issue create",
     message: "Do not run 'gh issue create' directly. Use 'assist github issue create --title <title> --body <body> [-R <owner>/<repo>]' instead \u2014 it validates the title and body before delegating to gh, and gates the issue on the user's approval itself. Run 'assist github issue create --help' and follow its guidance to compose the body; it is authoritative on how approval is handled in this environment."
   },
+  {
+    pattern: "gh issue edit",
+    message: "Do not run 'gh issue edit' directly. Use 'assist github issue edit <number> [-R <owner>/<repo>]' instead \u2014 it fetches the issue's current body, opens it in the assist web preview pane, and pushes nothing back until the user approves it. Run 'assist github issue edit --help' for how the working file and the preview pane fit together; it is authoritative on how approval is handled in this environment."
+  },
   {
     pattern: "gh issue comment",
     message: "Do not run 'gh issue comment' directly. Use 'assist github issue comment <number> --body <body> [-R <owner>/<repo>]' instead \u2014 it validates the body before delegating to gh, and gates the comment on the user's approval itself. Run 'assist github issue comment --help' and follow its guidance to compose the body; it is authoritative on how approval is handled in this environment."
@@ -16564,6 +16646,7 @@ var BUILTIN_DENIES = [
     message: `Do not run 'git commit' directly. Use 'assist commit "<message>"' instead.`
   }
 ];
+var GH_ISSUE_API_MESSAGE = "Do not write to GitHub issue endpoints with 'gh api' \u2014 it bypasses the content validation and the approval pane that every outward-facing issue write goes through. Use 'assist github issue create --title <title> --body <body>' to open an issue, 'assist github issue edit <number>' to rework one's body, 'assist github issue comment <number> --body <body>' to post a comment, or 'assist github issue edit-comment <comment-id> --body <body>' to amend a comment that is already posted. Each validates the content and gates it on the user's approval before anything reaches GitHub; run the command's --help for how to compose it.";
 var BRANCH_CREATION_MESSAGE = "Do not create branches with raw git. Use the /branch command, or 'assist branch <slug> [--jira <KEY>]' \u2014 it branches off the fresh remote default and enforces the team naming convention.";
 var COMMAND_BOUNDARY = String.raw`(?<=(?:^|[;&|(\n])\s*)`;
 var BRANCH_CREATION_REGEXES = [
@@ -16580,17 +16663,24 @@ function rawDenyRegex(pattern2) {
   return new RegExp(`(?<=^|\\s)${tokens}(?=\\s|$)`);
 }
 var RAW_BUILTIN_DENIES = [
-  ...BUILTIN_DENIES.map((rule) => ({
-    message: rule.message,
-    regex: rawDenyRegex(rule.pattern)
-  })),
+  ...BUILTIN_DENIES.map((rule) => {
+    const regex = rawDenyRegex(rule.pattern);
+    return {
+      message: rule.message,
+      matches: (text18) => regex.test(text18)
+    };
+  }),
   ...BRANCH_CREATION_REGEXES.map((regex) => ({
     message: BRANCH_CREATION_MESSAGE,
-    regex
-  }))
+    matches: (text18) => regex.test(text18)
+  })),
+  {
+    message: GH_ISSUE_API_MESSAGE,
+    matches: isGhIssueApiWrite
+  }
 ];
 function matchBuiltinDeny(text18) {
-  return RAW_BUILTIN_DENIES.find((rule) => rule.regex.test(text18));
+  return RAW_BUILTIN_DENIES.find((rule) => rule.matches(text18));
 }
 function toDecision(rule) {
   if (!rule) return void 0;
@@ -16610,6 +16700,64 @@ function findBuiltinDenyRaw(rawCommand) {
   return toDecision(matchBuiltinDeny(rawCommand));
 }
 
+// src/commands/cliHook/findTruncatedReadDeny.ts
+var UNTRUNCATABLE_READS = ["assist backlog show", "assist backlog view"];
+var APPROVAL_GATED_COMMANDS = [
+  "assist backlog propose",
+  "assist backlog comment",
+  "assist backlog update-plan",
+  "assist backlog add-phase",
+  "assist github issue create",
+  "assist github issue edit",
+  "assist github issue comment",
+  "assist slack post",
+  "assist prs raise",
+  "assist prs edit",
+  "assist prs comment",
+  "assist prs reply",
+  "assist prs wontfix",
+  "assist miro extract"
+];
+var TRUNCATOR_BINARIES = ["head", "tail"];
+var PIPED_TRUNCATOR_RE = /\|\s*(?:\S*\/)?(?:head|tail)\b/;
+function matchPrefix(prefixes, part) {
+  return prefixes.find(
+    (prefix2) => part === prefix2 || part.startsWith(`${prefix2} `)
+  );
+}
+function startsWithTruncator(part) {
+  const binary = part.split(/\s+/)[0]?.split("/").pop() ?? "";
+  return TRUNCATOR_BINARIES.includes(binary);
+}
+function toDecision2(read3, gated) {
+  if (read3)
+    return {
+      permissionDecision: "deny",
+      permissionDecisionReason: `Do not pipe '${read3}' through head or tail. Plan, Activity and Comments print at the end of the output, so a truncated read drops them and leaves you assuming the item has none. Run '${read3} <id>' bare and read all of it, or use a focused view: 'assist backlog comments <id>' for comments only.`
+    };
+  if (gated)
+    return {
+      permissionDecision: "deny",
+      permissionDecisionReason: `Do not pipe '${gated}' through head or tail. It gates on a preview the reviewer can reject with inline comments, and those comments print at the end of the output. Nothing persists them, so a truncated read discards the reviewer's feedback for good and they have to retype it. Run '${gated}' bare and read all of it.`
+    };
+  return void 0;
+}
+function findTruncatedReadDeny(parts) {
+  if (!parts.some(startsWithTruncator)) return void 0;
+  return toDecision2(
+    parts.map((part) => matchPrefix(UNTRUNCATABLE_READS, part)).find(Boolean),
+    parts.map((part) => matchPrefix(APPROVAL_GATED_COMMANDS, part)).find(Boolean)
+  );
+}
+function findTruncatedReadDenyRaw(rawCommand) {
+  if (!startsWithTruncator(rawCommand) && !PIPED_TRUNCATOR_RE.test(rawCommand))
+    return void 0;
+  return toDecision2(
+    matchPrefix(UNTRUNCATABLE_READS, rawCommand),
+    matchPrefix(APPROVAL_GATED_COMMANDS, rawCommand)
+  );
+}
+
 // src/shared/isApprovedRead.ts
 import { resolve as resolve13, sep } from "path";
 
@@ -16619,38 +16767,9 @@ function appliesFixStructure(command) {
   return APPLY_RE.test(command);
 }
 
-// src/shared/tokenize.ts
-function tokenize(command) {
-  const tokens = [];
-  let current = "";
-  let inSingle = false;
-  let inDouble = false;
-  for (let i = 0; i < command.length; i++) {
-    const ch = command[i];
-    if (ch === "'" && !inDouble) {
-      inSingle = !inSingle;
-      current += ch;
-    } else if (ch === '"' && !inSingle) {
-      inDouble = !inDouble;
-      current += ch;
-    } else if (ch === "\\" && inDouble && i + 1 < command.length) {
-      current += ch + command[++i];
-    } else if (/\s/.test(ch) && !inSingle && !inDouble) {
-      if (current) {
-        tokens.push(current);
-        current = "";
-      }
-    } else {
-      current += ch;
-    }
-  }
-  if (current) tokens.push(current);
-  return tokens;
-}
-
 // src/shared/isGhApiRead.ts
 var READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
-var BODY_FLAGS = /* @__PURE__ */ new Set(["-f", "-F", "--field", "--raw-field", "--input"]);
+var BODY_FLAGS2 = /* @__PURE__ */ new Set(["-f", "-F", "--field", "--raw-field", "--input"]);
 var FIELD_FLAGS = /* @__PURE__ */ new Set(["-f", "--field", "-F"]);
 function isGhApiRead(command) {
   const tokens = tokenize(command);
@@ -16661,24 +16780,13 @@ function isGhApiRead(command) {
   if (args.includes("graphql")) {
     return isGraphqlRead(args);
   }
-  const method = extractMethod(args);
+  const method = extractGhApiMethod(args);
   if (method) return READ_METHODS.has(method.toUpperCase());
-  if (args.some((t) => BODY_FLAGS.has(t))) return false;
+  if (args.some((t) => BODY_FLAGS2.has(t))) return false;
   return true;
 }
-function extractMethod(args) {
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (arg.startsWith("--method=")) return arg.slice("--method=".length);
-    if (arg.startsWith("-X=")) return arg.slice("-X=".length);
-    if ((arg === "--method" || arg === "-X") && i + 1 < args.length) {
-      return args[i + 1];
-    }
-  }
-  return void 0;
-}
 function isGraphqlRead(args) {
-  const method = extractMethod(args);
+  const method = extractGhApiMethod(args);
   if (method) return READ_METHODS.has(method.toUpperCase());
   const queryBody = extractGraphqlQuery(args);
   if (!queryBody) return false;
@@ -16896,51 +17004,6 @@ function matchesConfigDeny(command) {
   );
 }
 
-// src/commands/cliHook/findTruncatedReadDeny.ts
-var UNTRUNCATABLE_READS = ["assist backlog show", "assist backlog view"];
-var APPROVAL_GATED_COMMANDS = [
-  "assist backlog propose",
-  "assist backlog comment",
-  "assist backlog update-plan",
-  "assist backlog add-phase",
-  "assist github issue create",
-  "assist github issue edit",
-  "assist github issue comment",
-  "assist slack post",
-  "assist prs raise",
-  "assist prs edit",
-  "assist prs comment",
-  "assist prs reply",
-  "assist prs wontfix",
-  "assist miro extract"
-];
-var TRUNCATOR_BINARIES = ["head", "tail"];
-var PIPED_TRUNCATOR_RE = /\|\s*(?:\S*\/)?(?:head|tail)\b/;
-function matchPrefix(prefixes, part) {
-  return prefixes.find(
-    (prefix2) => part === prefix2 || part.startsWith(`${prefix2} `)
-  );
-}
-function isTruncator(part) {
-  const binary = part.split(/\s+/)[0]?.split("/").pop() ?? "";
-  return TRUNCATOR_BINARIES.includes(binary) || PIPED_TRUNCATOR_RE.test(part);
-}
-function findTruncatedReadDeny(parts) {
-  const read3 = parts.map((part) => matchPrefix(UNTRUNCATABLE_READS, part)).find(Boolean);
-  const gated = parts.map((part) => matchPrefix(APPROVAL_GATED_COMMANDS, part)).find(Boolean);
-  if (!read3 && !gated) return void 0;
-  if (!parts.some(isTruncator)) return void 0;
-  if (read3)
-    return {
-      permissionDecision: "deny",
-      permissionDecisionReason: `Do not pipe '${read3}' through head or tail. Plan, Activity and Comments print at the end of the output, so a truncated read drops them and leaves you assuming the item has none. Run '${read3} <id>' bare and read all of it, or use a focused view: 'assist backlog comments <id>' for comments only.`
-    };
-  return {
-    permissionDecision: "deny",
-    permissionDecisionReason: `Do not pipe '${gated}' through head or tail. It gates on a preview the reviewer can reject with inline comments, and those comments print at the end of the output. Nothing persists them, so a truncated read discards the reviewer's feedback for good and they have to retype it. Run '${gated}' bare and read all of it.`
-  };
-}
-
 // src/commands/cliHook/findSubcommandAdvice.ts
 var SUBCOMMAND_READS = [
   {
@@ -17014,7 +17077,7 @@ function resolvePermission(toolName, parts) {
 function decideCommand(toolName, rawCommand) {
   const result = splitCompound(rawCommand);
   if (result.ok) return resolvePermission(toolName, result.parts);
-  return findBuiltinDenyRaw(rawCommand) ?? findDeny(toolName, [rawCommand]);
+  return findBuiltinDenyRaw(rawCommand) ?? findTruncatedReadDenyRaw(rawCommand) ?? findDeny(toolName, [rawCommand]);
 }
 
 // src/commands/cliHook/logDeniedToolCall.ts
@@ -17117,6 +17180,7 @@ function cliHookCheck(command, toolName = "Bash") {
   const result = splitCompound(trimmed);
   if (!result.ok) {
     if (reportDecision(findBuiltinDenyRaw(trimmed))) return;
+    if (reportDecision(findTruncatedReadDenyRaw(trimmed))) return;
     if (reportDeny(toolName, [trimmed])) return;
     console.log(`not approved (${result.error})`);
     process.exitCode = 1;
@@ -22514,12 +22578,79 @@ function registerEditIssue(issueCommand) {
   ).action(editIssue);
 }
 
+// src/commands/github/issue/editIssueComment.ts
+import { execFileSync as execFileSync11 } from "child_process";
+var USAGE4 = "Usage: assist github issue edit-comment <comment-id> --body <body> [-R <owner>/<repo>]";
+async function editIssueComment(commentIdArg, options2) {
+  const commentId = Number.parseInt(commentIdArg, 10);
+  if (!Number.isInteger(commentId) || commentId <= 0 || !options2.body) {
+    console.error(USAGE4);
+    process.exit(1);
+  }
+  const { body } = options2;
+  const { owner, repo } = resolveIssueRepoTarget(options2.repo);
+  const target = `${owner}/${repo} comment ${commentId}`;
+  validateProposedContent(
+    { subject: "Comment", context: "GitHub issues" },
+    "",
+    body
+  );
+  await reviewProposedIssueComment(`Amend ${target}`, body);
+  const args = [
+    "api",
+    "-X",
+    "PATCH",
+    `repos/${owner}/${repo}/issues/comments/${commentId}`,
+    "--input",
+    "-"
+  ];
+  let raw;
+  try {
+    raw = execFileSync11("gh", args, {
+      input: JSON.stringify({ body }),
+      encoding: "utf8"
+    });
+  } catch {
+    process.exit(1);
+  }
+  console.log(`Comment updated: ${commentUrl(raw) ?? target}`);
+}
+function commentUrl(raw) {
+  try {
+    const parsed = JSON.parse(raw);
+    return parsed.html_url;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/commands/github/issue/registerEditIssueComment.ts
+function registerEditIssueComment(issueCommand) {
+  issueCommand.command("edit-comment <comment-id>").description(
+    "Replace the body of a posted GitHub issue comment (body of - reads it from stdin)"
+  ).option("--body <body>", "Replacement comment body (- reads it from stdin)").option(
+    "-R, --repo <owner/repo>",
+    "Target repository (defaults to the current repo)"
+  ).addHelpText(
+    "after",
+    "\nThe comment id is the numeric id from the comment's API url or the #issuecomment-<id> anchor on github.com, not the issue number.\nThe replacement is outward-facing: write it for the repo's readers, not the team. It is rejected if it references Claude or an assist backlog item.\nIn an assist web session the replacement is previewed for approve/reject first (with inline comments); the published comment is left alone until it is approved. The replacement is the whole body \u2014 what is there now is overwritten, so fetch it first if it should be built on."
+  ).action(
+    async (commentId, options2) => {
+      await editIssueComment(commentId, {
+        ...options2,
+        body: options2.body ? await readBodyArgument(options2.body) : void 0
+      });
+    }
+  );
+}
+
 // src/commands/registerGithubIssue.ts
 function registerGithubIssue(githubCommand) {
   const issueCommand = githubCommand.command("issue").description("GitHub issue utilities");
   registerCreateIssue(issueCommand);
   registerEditIssue(issueCommand);
   registerCommentIssue(issueCommand);
+  registerEditIssueComment(issueCommand);
   registerFixStructure(issueCommand);
 }
 
@@ -22948,7 +23079,7 @@ function registerRefineLaunch(program2, resumeFlag) {
 import { randomUUID as randomUUID10 } from "crypto";
 
 // src/commands/review/checkoutPr.ts
-import { execFileSync as execFileSync12 } from "child_process";
+import { execFileSync as execFileSync13 } from "child_process";
 import chalk170 from "chalk";
 
 // src/commands/sessions/daemon/daemonLog.ts
@@ -23508,10 +23639,10 @@ async function moveToPrCheckoutTree() {
 }
 
 // src/commands/review/prHeadBranch.ts
-import { execFileSync as execFileSync11 } from "child_process";
+import { execFileSync as execFileSync12 } from "child_process";
 function prHeadBranch(number) {
   try {
-    const out = execFileSync11(
+    const out = execFileSync12(
       "gh",
       ["pr", "view", number, "--json", "headRefName", "-q", ".headRefName"],
       { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }
@@ -23559,7 +23690,7 @@ async function checkoutPr(number) {
   if (headRef && moveToExistingCheckout(number, headRef)) return;
   await moveToPrCheckoutTree();
   try {
-    execFileSync12("gh", ["pr", "checkout", number], { stdio: "inherit" });
+    execFileSync13("gh", ["pr", "checkout", number], { stdio: "inherit" });
   } catch {
     console.error(chalk170.red(`gh pr checkout ${number} failed; aborting.`));
     process.exit(1);
@@ -25221,13 +25352,13 @@ async function comment2(path90, line, body, startLine) {
 import { randomUUID as randomUUID14 } from "crypto";
 
 // src/commands/prs/applyEdit.ts
-import { execFileSync as execFileSync13 } from "child_process";
+import { execFileSync as execFileSync14 } from "child_process";
 function applyEdit(number, title, body) {
   const args = ["pr", "edit", String(number)];
   if (title) args.push("--title", title);
   args.push("--body", body);
   try {
-    execFileSync13("gh", args, { stdio: "inherit" });
+    execFileSync14("gh", args, { stdio: "inherit" });
   } catch {
     process.exit(1);
   }
@@ -26023,7 +26154,7 @@ function buildValidatedBody(options2, usage) {
 }
 
 // src/commands/prs/placePr.ts
-import { execFileSync as execFileSync14 } from "child_process";
+import { execFileSync as execFileSync15 } from "child_process";
 
 // src/commands/prs/buildCreateArgs.ts
 function buildEditArgs(number, title, body) {
@@ -26090,7 +26221,7 @@ async function recordPrActivity() {
 // src/commands/prs/placePr.ts
 function hasUpstream2() {
   try {
-    execFileSync14(
+    execFileSync15(
       "git",
       ["rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{u}"],
       { stdio: "pipe" }
@@ -26102,13 +26233,13 @@ function hasUpstream2() {
 }
 function ensureBranchPushed() {
   const args = hasUpstream2() ? ["push"] : ["push", "--set-upstream", "origin", "HEAD"];
-  execFileSync14("git", args, { stdio: "inherit" });
+  execFileSync15("git", args, { stdio: "inherit" });
 }
 async function placePr(prNumber, title, body, options2) {
   const args = prNumber !== null ? buildEditArgs(prNumber, title, body) : buildCreateArgs(title, body, options2);
   try {
     if (prNumber === null && !options2.head) ensureBranchPushed();
-    execFileSync14("gh", args, { stdio: "inherit" });
+    execFileSync15("gh", args, { stdio: "inherit" });
   } catch {
     process.exit(1);
   }
@@ -26271,9 +26402,9 @@ function resolveDraftState(options2, command) {
 }
 
 // src/commands/prs/raise.ts
-var USAGE4 = "Usage: assist prs raise --title <title> --what <what> --why <why> [--how <how>] [--resolves <key>] [--force]";
+var USAGE5 = "Usage: assist prs raise --title <title> --what <what> --why <why> [--how <how>] [--resolves <key>] [--force]";
 async function raise(options2, command) {
-  const { title, body } = buildValidatedBody(options2, USAGE4);
+  const { title, body } = buildValidatedBody(options2, USAGE5);
   const resolved = { ...options2, draft: resolveDraftState(options2, command) };
   const existing = findCurrentPrNumber();
   const sessionId = process.env.ASSIST_SESSION_ID;
@@ -31265,7 +31396,7 @@ function slackWorkingFile(channel) {
 }
 
 // src/commands/slack/postSlackMessage.ts
-var USAGE5 = "Usage: assist slack post [channel] --body <body|->";
+var USAGE6 = "Usage: assist slack post [channel] --body <body|->";
 async function postSlackMessage(channelArg, options2) {
   const channel = (channelArg ?? loadConfig().slack?.channel ?? "").trim();
   const body = options2.body?.trim();
@@ -31273,11 +31404,11 @@ async function postSlackMessage(channelArg, options2) {
     console.error(
       'No channel given and slack.channel is not set. Pass one, or set a default with: assist config set slack.channel "#general"'
     );
-    console.error(USAGE5);
+    console.error(USAGE6);
     process.exit(1);
   }
   if (!body) {
-    console.error(USAGE5);
+    console.error(USAGE6);
     process.exit(1);
   }
   const threadTs = options2.thread;
@@ -31874,7 +32005,7 @@ function syncPiHooks(sourceDir) {
 }
 
 // src/commands/sync/syncPi.ts
-function unquote(value) {
+function unquote2(value) {
   return value.trim().replace(/^["']|["']$/g, "");
 }
 function commandToPrompt(name, content) {
@@ -31882,9 +32013,9 @@ function commandToPrompt(name, content) {
   const frontmatter = match ? match[1] : "";
   const body = match ? content.slice(match[0].length) : content;
   const descriptionMatch = frontmatter.match(/^description:\s*(.*)$/m);
-  const description = descriptionMatch ? unquote(descriptionMatch[1]) : name;
+  const description = descriptionMatch ? unquote2(descriptionMatch[1]) : name;
   const argsMatch = frontmatter.match(/^allowed_args:\s*(.*)$/m);
-  const argumentHint = argsMatch ? unquote(argsMatch[1]) : void 0;
+  const argumentHint = argsMatch ? unquote2(argsMatch[1]) : void 0;
   const header = [
     "---",
     `description: ${description}`,
@@ -32738,9 +32869,9 @@ function registerVoice(program2) {
 }
 
 // src/commands/watch/resolveUpstream.ts
-import { execFileSync as execFileSync15 } from "child_process";
+import { execFileSync as execFileSync16 } from "child_process";
 function runGit3(args, cwd) {
-  return execFileSync15("git", args, {
+  return execFileSync16("git", args, {
     encoding: "utf8",
     stdio: ["pipe", "pipe", "pipe"],
     cwd
@@ -33146,13 +33277,13 @@ import { spawn as spawn9 } from "child_process";
 import { existsSync as existsSync80 } from "fs";
 
 // src/commands/run/resolveCommand.ts
-import { execFileSync as execFileSync16 } from "child_process";
+import { execFileSync as execFileSync17 } from "child_process";
 import { existsSync as existsSync79 } from "fs";
 import { dirname as dirname37, join as join92, resolve as resolve20 } from "path";
 function resolveCommand2(command) {
   if (process.platform !== "win32" || command !== "bash") return command;
   try {
-    const gitPath = execFileSync16("where", ["git"], { encoding: "utf8" }).trim().split("\r\n")[0];
+    const gitPath = execFileSync17("where", ["git"], { encoding: "utf8" }).trim().split("\r\n")[0];
     const gitRoot = resolve20(dirname37(gitPath), "..");
     const gitBash = join92(gitRoot, "bin", "bash.exe");
     if (existsSync79(gitBash)) return gitBash;
@@ -33274,11 +33405,11 @@ async function reportSyncOrExit() {
 }
 
 // src/commands/watch/fetchQuietly.ts
-import { execFileSync as execFileSync17 } from "child_process";
+import { execFileSync as execFileSync18 } from "child_process";
 var MIN_FETCH_TIMEOUT_MS = 6e4;
 function fetchQuietly(cwd, intervalMs) {
   try {
-    execFileSync17("git", ["fetch", "--quiet"], {
+    execFileSync18("git", ["fetch", "--quiet"], {
       stdio: ["pipe", "pipe", "pipe"],
       cwd,
       timeout: Math.max(intervalMs, MIN_FETCH_TIMEOUT_MS)
@@ -33580,7 +33711,7 @@ async function auth() {
 }
 
 // src/commands/roam/postRoamActivity.ts
-import { execFileSync as execFileSync18 } from "child_process";
+import { execFileSync as execFileSync19 } from "child_process";
 import { readdirSync as readdirSync21, readFileSync as readFileSync60, statSync as statSync12 } from "fs";
 import { join as join93 } from "path";
 function findPortFile(roamDir) {
@@ -33619,7 +33750,7 @@ function postRoamActivity(app, event) {
   const pid = PID_BY_APP[app] ?? 99999;
   const url = `http://127.0.0.1:${port}/api/v1/activity/${app}/${event}?pid=${pid}`;
   try {
-    execFileSync18("curl", ["-sf", "--max-time", "0.2", "-X", "POST", url], {
+    execFileSync19("curl", ["-sf", "--max-time", "0.2", "-X", "POST", url], {
       stdio: "ignore"
     });
   } catch {
@@ -34097,11 +34228,11 @@ function screenshot(processName) {
 }
 
 // src/commands/sessions/daemon/listDaemonPids.ts
-import { execFileSync as execFileSync19 } from "child_process";
+import { execFileSync as execFileSync20 } from "child_process";
 function listDaemonPids() {
   if (process.platform === "win32") return [];
   try {
-    const out = execFileSync19("ps", ["-eo", "pid=,args="], {
+    const out = execFileSync20("ps", ["-eo", "pid=,args="], {
       encoding: "utf8"
     });
     return out.split("\n").filter((line) => line.includes("assist") && / daemon run\b/.test(line)).map((line) => Number.parseInt(line.trim(), 10)).filter((pid) => Number.isInteger(pid));
@@ -39728,7 +39859,7 @@ function cleanupOwnedFiles() {
 import * as net3 from "net";
 
 // src/commands/sessions/daemon/findPortHolderPid.ts
-import { execFileSync as execFileSync20 } from "child_process";
+import { execFileSync as execFileSync21 } from "child_process";
 var PROBE_TIMEOUT_MS = 3e3;
 function findPortHolderPid(port) {
   try {
@@ -39738,7 +39869,7 @@ function findPortHolderPid(port) {
   }
 }
 function probe(command, args) {
-  return execFileSync20(command, args, {
+  return execFileSync21(command, args, {
     encoding: "utf8",
     timeout: PROBE_TIMEOUT_MS,
     stdio: ["ignore", "pipe", "ignore"]
@@ -39977,7 +40108,7 @@ function summaryPathFor(jsonlPath2) {
 }
 
 // src/commands/sessions/summarise/summariseSession.ts
-import { execFileSync as execFileSync21 } from "child_process";
+import { execFileSync as execFileSync22 } from "child_process";
 function summariseSession(jsonlPath2) {
   const firstMessage = extractFirstUserMessage(jsonlPath2);
   const backlogIds = scanSessionBacklogRefs(jsonlPath2);
@@ -39986,7 +40117,7 @@ function summariseSession(jsonlPath2) {
   }
   const prompt = buildPrompt6(firstMessage, backlogIds);
   try {
-    const output = execFileSync21("claude", ["-p", "--model", "haiku", prompt], {
+    const output = execFileSync22("claude", ["-p", "--model", "haiku", prompt], {
       encoding: "utf8",
       timeout: 3e4,
       stdio: ["ignore", "pipe", "ignore"]

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@staff0rd/assist",
-	"version": "0.615.3",
+	"version": "0.616.1",
 	"type": "module",
 	"main": "dist/index.js",
 	"bin": {