@wrongstack/cli 0.309.0 → 0.309.1

package/dist/{cli-main-RG2PTQ6S.js → cli-main-XGDOIPN5.js}

@@ -50,7 +50,7 @@ import {
   detectProjectFacts,
   makeConfirmAwaiter,
   renderAgentsTemplate
-} from "./chunk-DOJLAULS.js";
+} from "./chunk-WOTGMHAH.js";
 import "./chunk-QD544J2B.js";
 import {
   fmtTaskResultLine,
@@ -71,7 +71,7 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-JQURRYU4.js";
+} from "./chunk-UINEP3E7.js";
 import {
   addCustomProvider,
   addKeyForCatalogProvider,
@@ -81,7 +81,7 @@ import {
   runClaudeOAuthLogin,
   runCopilotOAuthLogin,
   validateFamily
-} from "./chunk-7JOMY3HO.js";
+} from "./chunk-ZRZ54GVL.js";
 import {
   LOCAL_LLM_PRESETS,
   parseSpawnFlags
@@ -98,7 +98,7 @@ import {
 } from "./chunk-YMXXOOFN.js";
 import {
   runCodexOAuthLogin
-} from "./chunk-SSSJQVUY.js";
+} from "./chunk-XQ6FI2K6.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -1877,7 +1877,10 @@ function resolveSubagentCapabilities(subCfg, toolsForAllow) {
     ]).granted;
   }
   const allow = subCfg.tools;
-  if (!allow || allow.length === 0) return WIDE_SUBAGENT_CAPABILITIES;
+  if (allow && allow.length === 0) {
+    return clampSubagentCapabilities([ToolCapabilities.COORDINATION_RESULT_SUBMIT]).granted;
+  }
+  if (!allow) return WIDE_SUBAGENT_CAPABILITIES;
   const caps = new Set(WIDE_SUBAGENT_CAPABILITIES);
   for (const tool of toolsForAllow([...allow])) {
     for (const capability of tool.capabilities ?? []) caps.add(capability);
@@ -5780,7 +5783,11 @@ async function runCliExecution(params) {
         setConfig,
         profileConfigPath,
         mcpRegistry,
-        toolRegistry: params.context.toolRegistry ?? params.agent.ctx.tools,
+        // cli-main attaches toolRegistry onto the Context object dynamically
+        // (core Context does not declare it). The previous `?? agent.ctx.tools`
+        // fallback was a latent crash: ctx.tools is a Tool[], which cannot
+        // satisfy the ToolRegistry the picker calls into.
+        toolRegistry: params.context.toolRegistry,
         configStore,
         getPluginItems: getPluginPickerItems,
         togglePlugin: togglePluginFromPicker,
@@ -11316,49 +11323,179 @@ ${menu}` };
 }
 
 // src/slash-commands/dev.ts
-import { execFile } from "node:child_process";
-import { ToolValidationError as ToolValidationError3 } from "@wrongstack/core/types";
+import { spawn as spawn4 } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
 import { color as color23 } from "@wrongstack/core/utils";
 var DEFAULT_TIMEOUT_MS = 6e4;
 var MAX_OUTPUT_LINES = 500;
-var WINDOWS_CMD_METACHARACTERS = /[;&|<>^$,(){}[\]!#%'"\\/`]/;
-function validateCommand(cmd) {
-  if (process.platform !== "win32") return;
-  if (WINDOWS_CMD_METACHARACTERS.test(cmd)) {
-    throw new ToolValidationError3({
-      message: `Command contains disallowed metacharacters for Windows: ${cmd.match(WINDOWS_CMD_METACHARACTERS)?.[0] ?? "?"}
-The following characters are not allowed: ; & | < > ^ $ , ( ) { } [ ] ! # % ' " \\ / \` * ?`,
-      field: "command",
-      context: { platform: "win32", pattern: WINDOWS_CMD_METACHARACTERS.source }
-    });
+var MAX_STREAM_BYTES = 2 * 1024 * 1024;
+var EXIT_SPAWN_FAILED = 127;
+var EXIT_TIMEOUT = 124;
+var SIGNAL_NUMBERS = {
+  SIGHUP: 1,
+  SIGINT: 2,
+  SIGQUIT: 3,
+  SIGABRT: 6,
+  SIGKILL: 9,
+  SIGALRM: 14,
+  SIGTERM: 15
+};
+function foreignSignalExitCode(signal) {
+  const n = SIGNAL_NUMBERS[signal];
+  return n === void 0 ? 125 : 128 + n;
+}
+function tokenizeCommand(command, platform = process.platform) {
+  const isWin32 = platform === "win32";
+  const args = [];
+  let current = "";
+  let tokenStarted = false;
+  let quote = null;
+  for (let i = 0; i < command.length; i++) {
+    const char = command[i];
+    if (quote) {
+      if (!isWin32 && char === "\\" && quote === '"' && i + 1 < command.length) {
+        const next = command[i + 1];
+        if (next === "\n") {
+          i++;
+          continue;
+        }
+        if (next === '"' || next === "\\" || next === "$" || next === "`") {
+          current += next;
+          i++;
+          continue;
+        }
+      }
+      if (char === quote) quote = null;
+      else current += char;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      quote = char;
+      tokenStarted = true;
+      continue;
+    }
+    if (!isWin32 && char === "\\" && i + 1 < command.length) {
+      current += command[++i];
+      tokenStarted = true;
+      continue;
+    }
+    if (/\s/.test(char)) {
+      if (tokenStarted) {
+        args.push(current);
+        current = "";
+        tokenStarted = false;
+      }
+      continue;
+    }
+    current += char;
+    tokenStarted = true;
   }
+  if (quote) throw new Error(`Unterminated quoted argument in command: ${command}`);
+  if (tokenStarted) args.push(current);
+  return args;
 }
-function runCommand(cmd, cwd, timeout) {
+function spawnFailure(stderr) {
+  return { stdout: "", stderr, exitCode: EXIT_SPAWN_FAILED, killed: false, spawnFailed: true };
+}
+function runCommand(cmd, cwd, timeout = DEFAULT_TIMEOUT_MS) {
+  let program;
+  let args;
+  try {
+    const tokens = tokenizeCommand(cmd);
+    program = tokens[0] ?? "";
+    args = tokens.slice(1);
+  } catch (err) {
+    return Promise.resolve(spawnFailure(err instanceof Error ? err.message : String(err)));
+  }
+  if (!program) return Promise.resolve(spawnFailure("Empty command."));
+  let command;
+  let spawnArgs;
+  let windowsVerbatimArguments;
+  if (process.platform === "win32") {
+    try {
+      const shim = buildWin32CmdShimInvocation(program, args);
+      command = shim.command;
+      spawnArgs = shim.args;
+      windowsVerbatimArguments = shim.windowsVerbatimArguments;
+    } catch (err) {
+      return Promise.resolve(spawnFailure(err instanceof Error ? err.message : String(err)));
+    }
+  } else {
+    command = program;
+    spawnArgs = args;
+  }
   return new Promise((resolve8) => {
-    validateCommand(cmd);
-    const opts = {
-      cwd,
-      timeout,
-      maxBuffer: 2 * 1024 * 1024,
-      // 2 MB
-      windowsHide: true,
-      // On POSIX: no shell → command string is a literal argument.
-      // On Windows: shell:true → cmd.exe /c "..." handles quoting.
-      shell: process.platform === "win32"
+    let child;
+    try {
+      child = spawn4(command, spawnArgs, {
+        cwd,
+        timeout,
+        windowsHide: true,
+        ...windowsVerbatimArguments ? { windowsVerbatimArguments } : {}
+      });
+    } catch (err) {
+      resolve8(spawnFailure(err instanceof Error ? err.message : String(err)));
+      return;
+    }
+    let stdout = "";
+    let stderr = "";
+    const stdoutDecoder = new StringDecoder("utf8");
+    const stderrDecoder = new StringDecoder("utf8");
+    const appendCapped = (acc, decoder, chunk) => acc.length >= MAX_STREAM_BYTES ? acc : acc + decoder.write(chunk).slice(0, MAX_STREAM_BYTES - acc.length);
+    child.stdout?.on("data", (chunk) => {
+      stdout = appendCapped(stdout, stdoutDecoder, chunk);
+    });
+    child.stderr?.on("data", (chunk) => {
+      stderr = appendCapped(stderr, stderrDecoder, chunk);
+    });
+    child.stdout?.on("error", (err) => {
+      stderr = appendCapped(
+        stderr,
+        stderrDecoder,
+        Buffer.from(`
+[stdout stream error: ${err.message}]`)
+      );
+    });
+    child.stderr?.on("error", () => {
+    });
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve8(result);
     };
-    execFile(cmd, [], opts, (error, stdout, stderr) => {
-      resolve8({
+    child.on("error", (err) => {
+      finish({
+        stdout,
+        stderr: err.message,
+        exitCode: EXIT_SPAWN_FAILED,
+        killed: false,
+        spawnFailed: true
+      });
+    });
+    child.on("close", (code, signal) => {
+      const timedOut = child.killed && code !== 0;
+      const diedBySignal = signal !== null && !timedOut;
+      const exitCode = timedOut ? EXIT_TIMEOUT : code ?? (diedBySignal ? foreignSignalExitCode(signal ?? "") : EXIT_SPAWN_FAILED);
+      finish({
         stdout,
         stderr,
-        exitCode: typeof error?.code === "number" ? error.code : 0,
-        killed: error?.killed ?? false
+        exitCode,
+        // Contract (DevCommandResult.killed): true when the process died
+        // from a signal — timeout kill OR foreign. `diedBySignal` alone
+        // excludes our own timeout kill and reported killed:false on every
+        // TIMEOUT (chimera finding).
+        killed: timedOut || diedBySignal,
+        spawnFailed: code === null && signal === null,
+        ...signal !== null ? { signalName: signal } : {},
+        ...timedOut ? { timedOut: true } : {}
       });
     });
   });
 }
 function formatOutput(cmd, result, elapsed) {
   const lines = [];
-  const exitLabel = result.killed ? color23.red("TIMEOUT") : result.exitCode === 0 ? color23.green("OK") : color23.red(`EXIT ${result.exitCode}`);
+  const exitLabel = result.timedOut ? color23.red("TIMEOUT") : result.killed ? color23.red(`KILLED${result.signalName ? ` (${result.signalName})` : ""}`) : result.spawnFailed ? color23.red("SPAWN ERROR") : result.exitCode === 0 ? color23.green("OK") : color23.red(`EXIT ${result.exitCode}`);
   lines.push(`${color23.cyan("$")} ${color23.bold(cmd)}  ${exitLabel}  ${color23.dim(`${elapsed}ms`)}`);
   const combined = (result.stdout + result.stderr).trimEnd();
   if (combined) {
@@ -11416,7 +11553,6 @@ Examples:
   /dev git diff --stat`
         };
       }
-      validateCommand(cmd);
       const cwd = opts.cwd;
       const startedAt = Date.now();
       opts.renderer.write(color23.dim(`$ ${cmd}`));
@@ -17241,7 +17377,7 @@ function buildMailboxDemoCommand(opts) {
 }
 
 // src/slash-commands/mailbox-serve.ts
-import { spawn as spawn4 } from "node:child_process";
+import { spawn as spawn5 } from "node:child_process";
 import * as fs10 from "node:fs/promises";
 import * as os2 from "node:os";
 import * as path14 from "node:path";
@@ -17304,7 +17440,7 @@ function buildMailboxServeCommand(opts) {
         spawnArgs = ["mailbox", "serve", ...flags];
         if (isWin) shim = buildWin32CmdShimInvocation(wstackCmd, spawnArgs);
       }
-      const child = spawn4(shim?.command ?? wstackCmd, shim?.args ?? spawnArgs, {
+      const child = spawn5(shim?.command ?? wstackCmd, shim?.args ?? spawnArgs, {
         cwd,
         // POSIX-only: own process group so the bridge outlives the REPL.
         // On win32 `detached` opens a visible console window (project
@@ -20021,7 +20157,7 @@ import * as fs12 from "node:fs/promises";
 import { decryptConfigSecrets as decryptConfigSecrets3, encryptConfigSecrets as encryptConfigSecrets3, noOpVault as noOpVault4 } from "@wrongstack/core/security";
 import {
   ConfigError as ConfigError4,
-  ToolValidationError as ToolValidationError4
+  ToolValidationError as ToolValidationError3
 } from "@wrongstack/core/types";
 import { atomicWrite as atomicWrite6, color as color41, toErrorMessage as toErrorMessage18 } from "@wrongstack/core/utils";
 async function patchProfileConfig(mutate, profileConfigPath) {
@@ -20077,7 +20213,7 @@ function fmtModel(id, def) {
 function safeAt(arr, idx) {
   const v = arr[idx];
   if (v === void 0)
-    throw new ToolValidationError4({
+    throw new ToolValidationError3({
       message: `Missing value at position ${idx}`,
       field: `argv[${idx}]`
     });
@@ -23742,7 +23878,7 @@ async function patchSessionEffort(effort, paths, activeProfile) {
 }
 
 // src/slash-commands/suggest.ts
-import { execFile as execFile2 } from "node:child_process";
+import { execFile } from "node:child_process";
 import { access as access3 } from "node:fs/promises";
 import * as path16 from "node:path";
 import { color as color50, toErrorMessage as toErrorMessage22 } from "@wrongstack/core/utils";
@@ -23751,7 +23887,7 @@ function readGitStatus(projectRoot, includeBranch) {
   const args = ["status", "--short"];
   if (includeBranch) args.push("--branch");
   return new Promise((resolve8) => {
-    execFile2(
+    execFile(
       "git",
       args,
       {
@@ -24715,7 +24851,7 @@ function buildMouseCommand(_opts) {
 }
 
 // src/slash-commands/project.ts
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 import * as fs15 from "node:fs/promises";
 import { createRequire } from "node:module";
 import * as path17 from "node:path";
@@ -25040,7 +25176,7 @@ async function switchProjectCommand(opts, ctx, target, displayName) {
   const canSwitch = await confirmProjectSwitch(opts, targetName);
   if (!canSwitch) return { message: "" };
   const nodeExe = process.execPath;
-  const child = spawn5(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: resolved,
     stdio: "inherit",
     detached: false
@@ -25182,7 +25318,7 @@ async function spawnInProject(opts, _ctx, root, projectName) {
   }
   await saveManifest(manifest, opts.paths?.globalConfig);
   const nodeExe = process.execPath;
-  const child = spawn5(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: root,
     stdio: "inherit",
     detached: false
@@ -25224,7 +25360,7 @@ async function handleNewSession(_opts, _ctx) {
     }
   }
   const nodeExe = process.execPath;
-  const child = spawn5(nodeExe, [cliPath, "--no-interactive"], {
+  const child = spawn6(nodeExe, [cliPath, "--no-interactive"], {
     cwd: process.cwd(),
     stdio: "inherit",
     detached: false
@@ -25277,13 +25413,13 @@ async function handlePrevSessions(opts, _ctx) {
 }
 
 // src/slash-commands/review.ts
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 import * as fsp3 from "node:fs/promises";
 import * as path18 from "node:path";
 import { emitReviewIfChanged } from "@wrongstack/core/plugin";
 async function runGit2(args, cwd) {
   return new Promise((resolve8) => {
-    const child = spawn6("git", args, {
+    const child = spawn7("git", args, {
       cwd,
       stdio: ["ignore", "pipe", "pipe"],
       signal: AbortSignal.timeout(1e4),
@@ -26486,7 +26622,7 @@ function buildSettingsCommand(opts) {
 }
 
 // src/slash-commands/shadow.ts
-import { ToolValidationError as ToolValidationError5 } from "@wrongstack/core/types";
+import { ToolValidationError as ToolValidationError4 } from "@wrongstack/core/types";
 import { color as color57 } from "@wrongstack/core/utils";
 var DEFAULT_SHADOW_INTERVAL_MS = 3e4;
 var MIN_SHADOW_INTERVAL_MS = 5e3;
@@ -26739,7 +26875,7 @@ function parseProviderModelRef(model, defaultRef) {
   }
   const slash = model.indexOf("/");
   if (slash <= 0 || slash === model.length - 1) {
-    throw new ToolValidationError5({
+    throw new ToolValidationError4({
       message: `Model must be in provider/model format (e.g. provider/configured-model), got: "${model}"`,
       field: "model",
       context: { received: model }
@@ -26753,14 +26889,14 @@ function parseProviderModelRef(model, defaultRef) {
 }
 function parseInterval(value) {
   if (value === true || !/^\d+$/.test(value)) {
-    throw new ToolValidationError5({
+    throw new ToolValidationError4({
       message: `interval must be an integer >= ${MIN_SHADOW_INTERVAL_MS}ms`,
       field: "interval"
     });
   }
   const ms = Number.parseInt(value, 10);
   if (!Number.isFinite(ms) || ms < MIN_SHADOW_INTERVAL_MS) {
-    throw new ToolValidationError5({
+    throw new ToolValidationError4({
       message: `interval must be an integer >= ${MIN_SHADOW_INTERVAL_MS}ms`,
       field: "interval",
       context: { received: ms, minimum: MIN_SHADOW_INTERVAL_MS }
@@ -30006,7 +30142,7 @@ function setupCliSlashCommands(params) {
     brain,
     brainSettings,
     brainRuntime,
-    brainLog,
+    initialBrainLog,
     coordinatorController,
     statusTracker,
     shadowController,
@@ -30067,7 +30203,7 @@ function setupCliSlashCommands(params) {
     modeStore,
     fleetStreamController,
     interruptController,
-    enhanceController,
+    ...enhanceController ? { enhanceController } : {},
     llmProvider: provider,
     llmModel: config.model,
     createProvider: (pid) => {
@@ -30077,23 +30213,23 @@ function setupCliSlashCommands(params) {
         return void 0;
       }
     },
-    statuslineConfig: statuslineConfigDeps,
+    ...statuslineConfigDeps ? { statuslineConfig: statuslineConfigDeps } : {},
     statuslineHiddenItems: [...getCurrentHiddenItems()],
     setStatuslineHiddenItems,
     saveStatuslineHiddenItems,
-    agentsMonitorController,
-    agentMonitor,
+    ...agentsMonitorController ? { agentsMonitorController } : {},
+    ...agentMonitor ? { agentMonitor } : {},
     onPanelOpen,
     configStore,
     reader,
-    readSecret: (prompt) => secretInputController.readSecret(prompt),
-    readText: (prompt) => secretInputController.readText(prompt),
+    readSecret: secretInputController.readSecret,
+    readText: secretInputController.readText,
     vault,
     brain,
     brainSettings,
     brainRuntime,
-    getBrainLog: () => brainLog,
-    coordinatorController,
+    getBrainLog: () => initialBrainLog,
+    ...coordinatorController ? { coordinatorController } : {},
     statusTracker,
     shadowController,
     ...createFleetCommandHandlers({
@@ -30165,16 +30301,18 @@ function setupCliSlashCommands(params) {
       sddRunRegistry,
       getSddRuntimeState: getSddRuntimeStateForCli
     }),
-    onGoalStart: goalHost.onGoalStart,
-    onGoalPause: goalHost.onGoalPause,
-    onGoalResume: goalHost.onGoalResume,
-    onGoalStop: goalHost.onGoalStop,
-    getGoalRunner: goalHost.getGoalRunner,
-    onGoalMoveTask: goalHost.onGoalMoveTask,
-    onGoalAssignTask: goalHost.onGoalAssignTask,
-    onGoalAddTask: goalHost.onGoalAddTask,
-    onGoalRetryTask: goalHost.onGoalRetryTask,
-    onWorktree: goalHost.onWorktree
+    ...goalHost ? {
+      onGoalStart: goalHost.onGoalStart,
+      onGoalPause: goalHost.onGoalPause,
+      onGoalResume: goalHost.onGoalResume,
+      onGoalStop: goalHost.onGoalStop,
+      getGoalRunner: goalHost.getGoalRunner,
+      onGoalMoveTask: goalHost.onGoalMoveTask,
+      onGoalAssignTask: goalHost.onGoalAssignTask,
+      onGoalAddTask: goalHost.onGoalAddTask,
+      onGoalRetryTask: goalHost.onGoalRetryTask,
+      onWorktree: goalHost.onWorktree
+    } : {}
   });
   for (const cmd of slashCmds) {
     slashRegistry.register(cmd);
@@ -31284,7 +31422,7 @@ import { resolveProjectDir as resolveProjectDir5 } from "@wrongstack/core/coordi
 import { wstackGlobalRoot as wstackGlobalRoot5 } from "@wrongstack/core/utils";
 
 // src/mailbox-bridge-bootstrap.ts
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 import * as path27 from "node:path";
 import { readLiveLock } from "@wrongstack/core/coordination";
 var MAILBOX_BRIDGE_BOOTSTRAP_TIMEOUT_MS = 5e3;
@@ -31365,7 +31503,7 @@ function defaultSpawn(args, cwd) {
     spawnArgs = args;
     if (isWin) shim = buildWin32CmdShimInvocation(cmd, spawnArgs);
   }
-  const child = spawn7(shim?.command ?? cmd, shim?.args ?? spawnArgs, {
+  const child = spawn8(shim?.command ?? cmd, shim?.args ?? spawnArgs, {
     cwd,
     // `detached` gives the bridge its own process group on POSIX so it
     // outlives the REPL. On win32 it forces a visible console window
@@ -33117,7 +33255,7 @@ async function setupSession(params) {
 }
 
 // src/wiring/session-registry.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 import * as path31 from "node:path";
 async function setupSessionRegistry(deps) {
   const { wpaths, projectRoot, session, context, tuiOwnsScreen, events } = deps;
@@ -33131,7 +33269,7 @@ async function setupSessionRegistry(deps) {
     const projectSlug = path31.basename(wpaths.projectDir);
     const projectName = path31.basename(projectRoot);
     let gitBranch = await new Promise((resolve8) => {
-      execFile3(
+      execFile2(
         "git",
         ["rev-parse", "--abbrev-ref", "HEAD"],
         {
@@ -33806,7 +33944,7 @@ async function runInteractive(cliCtx) {
     brain,
     brainSettings,
     brainRuntime,
-    brainLog,
+    initialBrainLog: brainLog,
     coordinatorController,
     statusTracker,
     shadowController,
@@ -34016,4 +34154,4 @@ export {
   CLI_VERSION,
   runInteractive
 };
-//# sourceMappingURL=cli-main-RG2PTQ6S.js.map
+//# sourceMappingURL=cli-main-XGDOIPN5.js.map

package/dist/diff-renderer.d.ts

@@ -1,2 +1,19 @@
+/**
+ * Colorize a single already-sanitized diff line.
+ *
+ * Exported so callers that must sanitize untrusted text themselves can apply
+ * the styling AFTER sanitizing — sanitizing colorized text would strip the
+ * colors, and colorizing before sanitizing would leave the untrusted escape
+ * sequences in place. See `permission-prompt.ts`.
+ */
+export declare function diffLineStyle(line: string): string;
+/**
+ * Render a diff for terminal display.
+ *
+ * The diff body can carry model-supplied or file-supplied text, so it is
+ * sanitized before styling: a raw `\x1b[2J\x1b[H` in a diff line clears the
+ * screen and lets a payload repaint the surrounding UI — including an approval
+ * prompt's header.
+ */
 export declare function renderDiff(diff: string): string;
 //# sourceMappingURL=diff-renderer.d.ts.map

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   makePromptDelegate,
   renderAgentsTemplate,
   renderDiff
-} from "./chunk-DOJLAULS.js";
+} from "./chunk-WOTGMHAH.js";
 import {
   theme
 } from "./chunk-QD544J2B.js";
@@ -1849,9 +1849,9 @@ var subcommandsWithFocusedHelp = Object.keys(helpTable);
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-5ZLGFHWP.js")).acpCmd,
+  acp: async () => (await import("./acp-7NWCC2GO.js")).acpCmd,
   init: async () => (await import("./init-E2NDDOHI.js")).initCmd,
-  auth: async () => (await import("./auth-WOKC2RVG.js")).authCmd,
+  auth: async () => (await import("./auth-GZ2FK5KR.js")).authCmd,
   update: async () => (await import("./update-VZSOZGYC.js")).updateCmd,
   sessions: async () => (await import("./sessions-config-YX2ZPAFM.js")).sessionsCmd,
   config: async () => (await import("./sessions-config-YX2ZPAFM.js")).configCmd,
@@ -4466,7 +4466,7 @@ async function initializeCli(argv) {
 async function main(argv) {
   const cliCtx = await initializeCli(argv);
   if (typeof cliCtx === "number") return cliCtx;
-  const { runInteractive } = await import("./cli-main-RG2PTQ6S.js");
+  const { runInteractive } = await import("./cli-main-XGDOIPN5.js");
   return runInteractive(cliCtx);
 }
 

package/dist/slash-commands/dev.d.ts

@@ -1,5 +1,55 @@
 import type { SlashCommand } from '@wrongstack/core/types';
 import type { SlashCommandContext } from './command-context.js';
+export interface DevCommandResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    /** True when the process died from a signal (timeout kill or foreign). */
+    killed: boolean;
+    /** True when the program never started (not found / not executable /
+     *  refused by the Windows shim builder). Rendered as SPAWN ERROR. */
+    spawnFailed: boolean;
+    /** Signal name when the process died from a signal (e.g. SIGTERM). */
+    signalName?: string | undefined;
+    /** True only when killed by the /dev timeout itself — not by a foreign
+     *  signal. The distinction matters: both arrive at `close(null, signal)`,
+     *  but only the former is a TIMEOUT. */
+    timedOut?: boolean | undefined;
+}
+/**
+ * Split a command line into program + argv, honoring single quotes, double
+ * quotes, and backslash escapes. Deliberately NOT a shell: no variable
+ * expansion, no globbing, no operators. Tokens are passed verbatim to a
+ * shell-less spawn — which is what makes `&`, `|`, `;` inert on POSIX
+ * (BIZ-001: the old code passed the whole string as one argv element, so
+ * every command with arguments ENOENT'd) and lets the win32 shim builder
+ * validate each token individually.
+ *
+ * Backslash handling is platform-aware (chimera follow-up to BIZ-002). On
+ * POSIX, OUTSIDE quotes `\` escapes the next character (shell convention);
+ * INSIDE double quotes it escapes only the four chars bash treats specially
+ * there (" \ $ `) plus newline-continuation, and is literal otherwise. On
+ * Windows it is the path separator and MUST stay literal everywhere —
+ * treating it as an escape silently corrupted `C:\Users\foo` into
+ * `C:Usersfoo`, defeating the very path-separator fix BIZ-002 made. Inside
+ * single quotes everything is literal on both platforms.
+ *
+ * Throws on an unterminated quoted argument.
+ */
+export declare function tokenizeCommand(command: string, platform?: NodeJS.Platform): string[];
+/**
+ * Run `/dev <command>` without a shell on POSIX and through the canonical
+ * hardened cmd.exe shim on Windows.
+ *
+ * - POSIX: `spawn(program, args, { shell: false })` — metacharacters are
+ *   literal argv, so `/dev git diff --stat` actually runs (BIZ-001).
+ * - Windows: Node cannot spawn `.cmd`/`.bat` shims without a shell
+ *   (CVE-2024-27980), so the invocation goes through
+ *   {@link buildWin32CmdShimInvocation}, which quotes every token and refuses
+ *   the real cmd.exe operators (`& | < > " %`, newlines) outright. Path
+ *   separators are no longer blocked — they are not operators (BIZ-002).
+ */
+export declare function runCommand(cmd: string, cwd: string, timeout?: number): Promise<DevCommandResult>;
 /**
  * `/dev <shell command>` — execute a shell command from the chat input and
  * display its output. The LLM does NOT see the result — this is a developer