@wrongstack/tools 0.1.4 → 0.1.8

package/dist/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/_util.ts","../src/install.ts"],"names":["resolve"],"mappings":";;;;AAIO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;AA6CA,gBAAuB,YACrB,IAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,QAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,CAAA,GAAI,IAAA;AACvC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,IAAI,KAAA;AAEJ,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,GAAA,EAAK,KAAK,IAAA,EAAM;AAAA,IACvC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,GACjC,CAAA;AAGD,EAAA,MAAM,QAAiB,EAAC;AACxB,EAAA,IAAI,MAAA;AACJ,EAAA,MAAM,OAAO,MAAM;AACjB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,CAAA,GAAI,MAAA;AACV,MAAA,MAAA,GAAS,MAAA;AACT,MAAA,CAAA,EAAE;AAAA,IACJ;AAAA,EACF,CAAA;AAEA,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AACvB,IAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AACV,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,SAAS,IAAA,EAAM,CAAA,CAAE,SAAS,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,MAAM,EAAA,EAAI,IAAA,EAAM,IAAA,IAAQ,CAAA,EAAG,CAAA;AACvD,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AAED,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,WAAS;AACP,IAAA,OAAO,KAAA,CAAM,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,KAAY;AACnC,QAAA,MAAA,GAASA,QAAAA;AAAA,MACX,CAAC,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,EAAM;AAC1B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAG1B,MAAA,IAAI,CAAC,WAAA,EAAa,QAAA,GAAW,KAAA,CAAM,IAAA,IAAQ,CAAA;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,QAAA,GAAW,CAAA;AAEX,MAAA;AAAA,IACF;AACA,IAAA,OAAA,IAAW,KAAA,CAAM,IAAA;AACjB,IAAA,IAAI,OAAA,CAAQ,UAAU,OAAA,EAAS;AAC7B,MAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAC9C,MAAA,OAAA,GAAU,EAAA;AAAA,IACZ;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAAA,EAChD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,MAAA,IAAU,GAAA,IAAO,OAAO,MAAA,IAAU,GAAA;AAAA,IACpD;AAAA,GACF;AACF;;;ACrIO,IAAM,WAAA,GAAiD;AAAA,EAC5D,IAAA,EAAM,SAAA;AAAA,EACN,WAAA,EACE,iFAAA;AAAA,EACF,SAAA,EACE,0GAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,IAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,QAAA,EAAU;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,YAAA,EAAc,KAAA,EAAO,UAAU,CAAA;AAAA,QACtC,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA,EAAmC;AAAA,MACvE,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,oDAAA,EAAqD;AAAA,MAC9F,MAAA,EAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,mCAAA;AAAoC;AAC9E,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,KAAA;AACJ,IAAA,WAAA,MAAiB,MAAM,WAAA,CAAY,aAAA,CAAe,KAAA,EAAO,GAAA,EAAK,IAAI,CAAA,EAAG;AACnE,MAAA,IAAI,EAAA,CAAG,IAAA,KAAS,OAAA,EAAS,KAAA,GAAQ,EAAA,CAAG,MAAA;AAAA,IACtC;AACA,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,2CAA2C,CAAA;AACvE,IAAA,OAAO,KAAA;AAAA,EACT,CAAA;AAAA,EACA,OAAO,aAAA,CAAc,KAAA,EAAO,GAAA,EAAK,IAAA,EAAsD;AACrF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,UAAA,GAAa,MAAM,oBAAA,CAAqB,GAAG,CAAA;AACjD,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,eAAA,EAAkB,UAAU,CAAA,MAAA,CAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAU,EAAE;AAEvF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,KAAS,KAAA,GAAQ,OAAO,KAAA,CAAM,IAAA,KAAS,aAAa,IAAA,GAAO,EAAA;AAC9E,IAAA,MAAM,aAAa,KAAA,CAAM,MAAA,GAAS,CAAC,IAAI,IAAI,EAAC;AAE5C,IAAA,MAAM,OAAiB,EAAC;AACxB,IAAA,IAAI,KAAA,CAAM,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAW,CAAA;AACxC,IAAA,IAAI,eAAe,MAAA,EAAQ;AACzB,MAAA,IAAI,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AACxB,MAAA,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,GAAG,UAAU,CAAA;AAAA,IAChC,CAAA,MAAA,IAAW,eAAe,MAAA,EAAQ;AAChC,MAAA,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,GAAG,UAAU,CAAA;AAAA,IAChC,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,IAAA,CAAK,SAAA,EAAW,GAAG,UAAU,CAAA;AAAA,IACpC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,QAAA,GAAA,CACjB,KAAA,CAAM,QAAQ,KAAA,CAAM,QAAQ,CAAA,GAAI,KAAA,CAAM,QAAA,GAAW,KAAA,CAAM,SAAS,KAAA,CAAM,GAAG,GAAG,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,IAAA,EAAM,CAAA,GAChG,EAAC;AACL,IAAA,IAAI,QAAQ,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,GAAG,OAAO,CAAA;AAE5C,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,SAAA,EAAY,OAAA,CAAQ,MAAA,IAAU,KAAK,CAAA,eAAA,CAAA,EAAc,IAAA,EAAM,EAAE,KAAA,EAAO,SAAQ,EAAE;AAErG,IAAA,MAAM,MAAA,GAAS,OAAO,WAAA,CAAY;AAAA,MAChC,GAAA,EAAK,UAAA;AAAA,MACL,IAAA;AAAA,MACA,GAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAA,EAAU;AAAA,KACX,CAAA;AAED,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,QAAA,EAAU,OAAA;AAAA,QACV,WAAW,MAAA,CAAO,QAAA;AAAA,QAClB,QAAQ,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,IAAU,OAAO,KAAA,IAAS,EAAA;AAAA,QAC1D,OAAA,EAAS,IAAA,CAAK,QAAA,CAAS,WAAW,CAAA;AAAA,QAClC,WAAW,MAAA,CAAO;AAAA;AACpB,KACF;AAAA,EACF;AACF;AAEA,eAAe,qBAAqB,GAAA,EAA8B;AAChE,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,OAAO,aAAkB,CAAA;AAChD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,eAAA,CAAiB,CAAA;AAClC,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA;AAC7B,MAAA,OAAO,MAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACF","file":"install.js","sourcesContent":["import * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Context, ToolProgressEvent } from '@wrongstack/core';\r\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface SpawnStreamResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n  truncated: boolean;\r\n  error?: string;\r\n}\r\n\r\nexport interface SpawnStreamOptions {\r\n  cmd: string;\r\n  args: string[];\r\n  cwd: string;\r\n  signal: AbortSignal;\r\n  maxBytes?: number;\r\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\r\n  flushBytes?: number;\r\n}\r\n\r\n/**\r\n * Spawn a child process and yield `partial_output` progress events as\r\n * stdout/stderr arrive (batched by byte threshold), then return the full\r\n * buffered result. Shared between install/lint/format/typecheck/test/audit\r\n * so the TUI live tail sees consistent progress regardless of which tool\r\n * is running.\r\n */\r\nexport async function* spawnStream(\r\n  opts: SpawnStreamOptions,\r\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\r\n  const max = opts.maxBytes ?? 200_000;\r\n  const flushAt = opts.flushBytes ?? 4 * 1024;\r\n  let stdout = '';\r\n  let stderr = '';\r\n  let pending = '';\r\n  let error: string | undefined;\r\n\r\n  const child = spawn(opts.cmd, opts.args, {\r\n    cwd: opts.cwd,\r\n    signal: opts.signal,\r\n    stdio: ['ignore', 'pipe', 'pipe'],\r\n  });\r\n\r\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\r\n  const queue: Chunk[] = [];\r\n  let waiter: (() => void) | undefined;\r\n  const wake = () => {\r\n    if (waiter) {\r\n      const w = waiter;\r\n      waiter = undefined;\r\n      w();\r\n    }\r\n  };\r\n\r\n  child.stdout?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stdout.length < max) stdout += s;\r\n    queue.push({ kind: 'out', data: s });\r\n    wake();\r\n  });\r\n  child.stderr?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stderr.length < max) stderr += s;\r\n    queue.push({ kind: 'err', data: s });\r\n    wake();\r\n  });\r\n  child.on('error', (e) => {\r\n    error = e.message;\r\n    queue.push({ kind: 'error', data: e.message });\r\n    wake();\r\n  });\r\n  child.on('close', (code) => {\r\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\r\n    wake();\r\n  });\r\n\r\n  let exitCode = 0;\r\n  let spawnFailed = false;\r\n  for (;;) {\r\n    while (queue.length === 0) {\r\n      await new Promise<void>((resolve) => {\r\n        waiter = resolve;\r\n      });\r\n    }\r\n    const chunk = queue.shift()!;\r\n    if (chunk.kind === 'close') {\r\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\r\n      // rather than the negative platform code Node fabricates.\r\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\r\n      break;\r\n    }\r\n    if (chunk.kind === 'error') {\r\n      spawnFailed = true;\r\n      exitCode = 1;\r\n      // close usually follows\r\n      continue;\r\n    }\r\n    pending += chunk.data;\r\n    if (pending.length >= flushAt) {\r\n      yield { type: 'partial_output', text: pending };\r\n      pending = '';\r\n    }\r\n  }\r\n  if (pending.length > 0) {\r\n    yield { type: 'partial_output', text: pending };\r\n  }\r\n\r\n  return {\r\n    stdout,\r\n    stderr,\r\n    exitCode,\r\n    truncated: stdout.length >= max || stderr.length >= max,\r\n    error,\r\n  };\r\n}\r\n","import type { Tool, ToolStreamEvent } from '@wrongstack/core';\r\nimport { safeResolve, spawnStream } from './_util.js';\r\n\r\ninterface InstallInput {\r\n  packages?: string | string[];\r\n  save?: 'dependency' | 'dev' | 'optional';\r\n  cwd?: string;\r\n  dry_run?: boolean;\r\n  global?: boolean;\r\n}\r\n\r\ninterface InstallOutput {\r\n  packages: string[];\r\n  exit_code: number;\r\n  output: string;\r\n  dry_run: boolean;\r\n  truncated: boolean;\r\n}\r\n\r\nexport const installTool: Tool<InstallInput, InstallOutput> = {\r\n  name: 'install',\r\n  description:\r\n    'Install npm packages. Detects pnpm/npm/yarn and uses the right package manager.',\r\n  usageHint:\r\n    'Set `packages` to install. `save` as dependency type. `global` for global install. `dry_run` to preview.',\r\n  permission: 'confirm',\r\n  mutating: true,\r\n  timeoutMs: 120_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      packages: {\r\n        type: 'string',\r\n        description: 'Package(s) to install: single name, comma-separated list, or empty for all deps',\r\n      },\r\n      save: {\r\n        type: 'string',\r\n        enum: ['dependency', 'dev', 'optional'],\r\n        description: 'Save as regular, dev, or optional dependency',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n      dry_run: { type: 'boolean', description: 'Preview install without modifying (default: false)' },\r\n      global: { type: 'boolean', description: 'Install globally (default: false)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    let final: InstallOutput | undefined;\r\n    for await (const ev of installTool.executeStream!(input, ctx, opts)) {\r\n      if (ev.type === 'final') final = ev.output;\r\n    }\r\n    if (!final) throw new Error('install: stream ended without final event');\r\n    return final;\r\n  },\r\n  async *executeStream(input, ctx, opts): AsyncGenerator<ToolStreamEvent<InstallOutput>> {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const pkgManager = await detectPackageManager(cwd);\r\n    yield { type: 'log', text: `Resolving with ${pkgManager}…`, data: { phase: 'resolve' } };\r\n\r\n    const save = input.save === 'dev' ? '-D' : input.save === 'optional' ? '-O' : '';\r\n    const globalFlag = input.global ? ['-g'] : [];\r\n\r\n    const args: string[] = [];\r\n    if (input.dry_run) args.push('--dry-run');\r\n    if (pkgManager === 'pnpm') {\r\n      if (save) args.push(save);\r\n      args.push('add', ...globalFlag);\r\n    } else if (pkgManager === 'yarn') {\r\n      args.push('add', ...globalFlag);\r\n    } else {\r\n      args.push('install', ...globalFlag);\r\n    }\r\n\r\n    const pkgList = input.packages\r\n      ? (Array.isArray(input.packages) ? input.packages : input.packages.split(',')).map((p) => p.trim())\r\n      : [];\r\n    if (pkgList.length > 0) args.push(...pkgList);\r\n\r\n    yield { type: 'log', text: `Fetching ${pkgList.length || 'all'} packages…`, data: { phase: 'fetch' } };\r\n\r\n    const result = yield* spawnStream({\r\n      cmd: pkgManager,\r\n      args,\r\n      cwd,\r\n      signal: opts.signal,\r\n      maxBytes: 100_000,\r\n    });\r\n\r\n    yield {\r\n      type: 'final',\r\n      output: {\r\n        packages: pkgList,\r\n        exit_code: result.exitCode,\r\n        output: result.stdout || result.stderr || result.error || '',\r\n        dry_run: args.includes('--dry-run'),\r\n        truncated: result.truncated,\r\n      },\r\n    };\r\n  },\r\n};\r\n\r\nasync function detectPackageManager(cwd: string): Promise<string> {\r\n  const { stat } = await import('node:fs/promises');\r\n  try {\r\n    await stat(`${cwd}/pnpm-lock.yaml`);\r\n    return 'pnpm';\r\n  } catch {\r\n    try {\r\n      await stat(`${cwd}/yarn.lock`);\r\n      return 'yarn';\r\n    } catch {\r\n      return 'npm';\r\n    }\r\n  }\r\n}\r\n"]}
+{"version":3,"sources":["../src/_util.ts","../src/_spawn-stream.ts","../src/install.ts"],"names":["resolve"],"mappings":";;;;AAGO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;ACSA,gBAAuB,YACrB,IAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,QAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,CAAA,GAAI,IAAA;AACvC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,IAAI,KAAA;AAEJ,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,GAAA,EAAK,KAAK,IAAA,EAAM;AAAA,IACvC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,GACjC,CAAA;AAGD,EAAA,MAAM,QAAiB,EAAC;AACxB,EAAA,IAAI,MAAA;AACJ,EAAA,MAAM,OAAO,MAAM;AACjB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,CAAA,GAAI,MAAA;AACV,MAAA,MAAA,GAAS,MAAA;AACT,MAAA,CAAA,EAAE;AAAA,IACJ;AAAA,EACF,CAAA;AAEA,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AACvB,IAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AACV,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,SAAS,IAAA,EAAM,CAAA,CAAE,SAAS,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,MAAM,EAAA,EAAI,IAAA,EAAM,IAAA,IAAQ,CAAA,EAAG,CAAA;AACvD,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AAED,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,WAAS;AACP,IAAA,OAAO,KAAA,CAAM,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,KAAY;AACnC,QAAA,MAAA,GAASA,QAAAA;AAAA,MACX,CAAC,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,EAAM;AAC1B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAG1B,MAAA,IAAI,CAAC,WAAA,EAAa,QAAA,GAAW,KAAA,CAAM,IAAA,IAAQ,CAAA;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,QAAA,GAAW,CAAA;AAEX,MAAA;AAAA,IACF;AACA,IAAA,OAAA,IAAW,KAAA,CAAM,IAAA;AACjB,IAAA,IAAI,OAAA,CAAQ,UAAU,OAAA,EAAS;AAC7B,MAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAC9C,MAAA,OAAA,GAAU,EAAA;AAAA,IACZ;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAAA,EAChD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,MAAA,IAAU,GAAA,IAAO,OAAO,MAAA,IAAU,GAAA;AAAA,IACpD;AAAA,GACF;AACF;;;AC/FO,IAAM,WAAA,GAAiD;AAAA,EAC5D,IAAA,EAAM,SAAA;AAAA,EACN,WAAA,EACE,iFAAA;AAAA,EACF,SAAA,EACE,0GAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,IAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,QAAA,EAAU;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,YAAA,EAAc,KAAA,EAAO,UAAU,CAAA;AAAA,QACtC,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA,EAAmC;AAAA,MACvE,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,oDAAA,EAAqD;AAAA,MAC9F,MAAA,EAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,mCAAA;AAAoC;AAC9E,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,KAAA;AACJ,IAAA,WAAA,MAAiB,MAAM,WAAA,CAAY,aAAA,CAAe,KAAA,EAAO,GAAA,EAAK,IAAI,CAAA,EAAG;AACnE,MAAA,IAAI,EAAA,CAAG,IAAA,KAAS,OAAA,EAAS,KAAA,GAAQ,EAAA,CAAG,MAAA;AAAA,IACtC;AACA,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,2CAA2C,CAAA;AACvE,IAAA,OAAO,KAAA;AAAA,EACT,CAAA;AAAA,EACA,OAAO,aAAA,CAAc,KAAA,EAAO,GAAA,EAAK,IAAA,EAAsD;AACrF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,UAAA,GAAa,MAAM,oBAAA,CAAqB,GAAG,CAAA;AACjD,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,eAAA,EAAkB,UAAU,CAAA,MAAA,CAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAU,EAAE;AAEvF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,KAAS,KAAA,GAAQ,OAAO,KAAA,CAAM,IAAA,KAAS,aAAa,IAAA,GAAO,EAAA;AAC9E,IAAA,MAAM,aAAa,KAAA,CAAM,MAAA,GAAS,CAAC,IAAI,IAAI,EAAC;AAE5C,IAAA,MAAM,OAAiB,EAAC;AACxB,IAAA,IAAI,KAAA,CAAM,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,WAAW,CAAA;AACxC,IAAA,IAAI,eAAe,MAAA,EAAQ;AACzB,MAAA,IAAI,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AACxB,MAAA,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,GAAG,UAAU,CAAA;AAAA,IAChC,CAAA,MAAA,IAAW,eAAe,MAAA,EAAQ;AAChC,MAAA,IAAA,CAAK,IAAA,CAAK,KAAA,EAAO,GAAG,UAAU,CAAA;AAAA,IAChC,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,IAAA,CAAK,SAAA,EAAW,GAAG,UAAU,CAAA;AAAA,IACpC;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,QAAA,GAAA,CACjB,KAAA,CAAM,QAAQ,KAAA,CAAM,QAAQ,CAAA,GAAI,KAAA,CAAM,QAAA,GAAW,KAAA,CAAM,SAAS,KAAA,CAAM,GAAG,GAAG,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,IAAA,EAAM,CAAA,GAChG,EAAC;AACL,IAAA,IAAI,QAAQ,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,GAAG,OAAO,CAAA;AAE5C,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,SAAA,EAAY,OAAA,CAAQ,MAAA,IAAU,KAAK,CAAA,eAAA,CAAA,EAAc,IAAA,EAAM,EAAE,KAAA,EAAO,SAAQ,EAAE;AAErG,IAAA,MAAM,MAAA,GAAS,OAAO,WAAA,CAAY;AAAA,MAChC,GAAA,EAAK,UAAA;AAAA,MACL,IAAA;AAAA,MACA,GAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAA,EAAU;AAAA,KACX,CAAA;AAED,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,QAAA,EAAU,OAAA;AAAA,QACV,WAAW,MAAA,CAAO,QAAA;AAAA,QAClB,QAAQ,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,IAAU,OAAO,KAAA,IAAS,EAAA;AAAA,QAC1D,OAAA,EAAS,IAAA,CAAK,QAAA,CAAS,WAAW,CAAA;AAAA,QAClC,WAAW,MAAA,CAAO;AAAA;AACpB,KACF;AAAA,EACF;AACF;AAEA,eAAe,qBAAqB,GAAA,EAA8B;AAChE,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,OAAO,aAAkB,CAAA;AAChD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,eAAA,CAAiB,CAAA;AAClC,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA;AAC7B,MAAA,OAAO,MAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACF","file":"install.js","sourcesContent":["import * as path from 'node:path';\nimport type { Context } from '@wrongstack/core';\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n","import { spawn } from 'node:child_process';\nimport type { ToolProgressEvent } from '@wrongstack/core';\n\nexport interface SpawnStreamResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  truncated: boolean;\n  error?: string;\n}\n\nexport interface SpawnStreamOptions {\n  cmd: string;\n  args: string[];\n  cwd: string;\n  signal: AbortSignal;\n  maxBytes?: number;\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\n  flushBytes?: number;\n}\n\n/**\n * Spawn a child process and yield `partial_output` progress events as\n * stdout/stderr arrive (batched by byte threshold), then return the full\n * buffered result. Shared between install/lint/format/typecheck/test/audit\n * so the TUI live tail sees consistent progress regardless of which tool\n * is running.\n */\nexport async function* spawnStream(\n  opts: SpawnStreamOptions,\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\n  const max = opts.maxBytes ?? 200_000;\n  const flushAt = opts.flushBytes ?? 4 * 1024;\n  let stdout = '';\n  let stderr = '';\n  let pending = '';\n  let error: string | undefined;\n\n  const child = spawn(opts.cmd, opts.args, {\n    cwd: opts.cwd,\n    signal: opts.signal,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  });\n\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\n  const queue: Chunk[] = [];\n  let waiter: (() => void) | undefined;\n  const wake = () => {\n    if (waiter) {\n      const w = waiter;\n      waiter = undefined;\n      w();\n    }\n  };\n\n  child.stdout?.on('data', (c) => {\n    const s = c.toString();\n    if (stdout.length < max) stdout += s;\n    queue.push({ kind: 'out', data: s });\n    wake();\n  });\n  child.stderr?.on('data', (c) => {\n    const s = c.toString();\n    if (stderr.length < max) stderr += s;\n    queue.push({ kind: 'err', data: s });\n    wake();\n  });\n  child.on('error', (e) => {\n    error = e.message;\n    queue.push({ kind: 'error', data: e.message });\n    wake();\n  });\n  child.on('close', (code) => {\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\n    wake();\n  });\n\n  let exitCode = 0;\n  let spawnFailed = false;\n  for (;;) {\n    while (queue.length === 0) {\n      await new Promise<void>((resolve) => {\n        waiter = resolve;\n      });\n    }\n    const chunk = queue.shift()!;\n    if (chunk.kind === 'close') {\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\n      // rather than the negative platform code Node fabricates.\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\n      break;\n    }\n    if (chunk.kind === 'error') {\n      spawnFailed = true;\n      exitCode = 1;\n      // close usually follows\n      continue;\n    }\n    pending += chunk.data;\n    if (pending.length >= flushAt) {\n      yield { type: 'partial_output', text: pending };\n      pending = '';\n    }\n  }\n  if (pending.length > 0) {\n    yield { type: 'partial_output', text: pending };\n  }\n\n  return {\n    stdout,\n    stderr,\n    exitCode,\n    truncated: stdout.length >= max || stderr.length >= max,\n    error,\n  };\n}\n","import type { Tool, ToolStreamEvent } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\nimport { spawnStream } from './_spawn-stream.js';\n\r\ninterface InstallInput {\r\n  packages?: string | string[];\r\n  save?: 'dependency' | 'dev' | 'optional';\r\n  cwd?: string;\r\n  dry_run?: boolean;\r\n  global?: boolean;\r\n}\r\n\r\ninterface InstallOutput {\r\n  packages: string[];\r\n  exit_code: number;\r\n  output: string;\r\n  dry_run: boolean;\r\n  truncated: boolean;\r\n}\r\n\r\nexport const installTool: Tool<InstallInput, InstallOutput> = {\r\n  name: 'install',\r\n  description:\r\n    'Install npm packages. Detects pnpm/npm/yarn and uses the right package manager.',\r\n  usageHint:\r\n    'Set `packages` to install. `save` as dependency type. `global` for global install. `dry_run` to preview.',\r\n  permission: 'confirm',\r\n  mutating: true,\r\n  timeoutMs: 120_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      packages: {\r\n        type: 'string',\r\n        description: 'Package(s) to install: single name, comma-separated list, or empty for all deps',\r\n      },\r\n      save: {\r\n        type: 'string',\r\n        enum: ['dependency', 'dev', 'optional'],\r\n        description: 'Save as regular, dev, or optional dependency',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n      dry_run: { type: 'boolean', description: 'Preview install without modifying (default: false)' },\r\n      global: { type: 'boolean', description: 'Install globally (default: false)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    let final: InstallOutput | undefined;\r\n    for await (const ev of installTool.executeStream!(input, ctx, opts)) {\r\n      if (ev.type === 'final') final = ev.output;\r\n    }\r\n    if (!final) throw new Error('install: stream ended without final event');\r\n    return final;\r\n  },\r\n  async *executeStream(input, ctx, opts): AsyncGenerator<ToolStreamEvent<InstallOutput>> {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const pkgManager = await detectPackageManager(cwd);\r\n    yield { type: 'log', text: `Resolving with ${pkgManager}…`, data: { phase: 'resolve' } };\r\n\r\n    const save = input.save === 'dev' ? '-D' : input.save === 'optional' ? '-O' : '';\r\n    const globalFlag = input.global ? ['-g'] : [];\r\n\r\n    const args: string[] = [];\r\n    if (input.dry_run) args.push('--dry-run');\r\n    if (pkgManager === 'pnpm') {\r\n      if (save) args.push(save);\r\n      args.push('add', ...globalFlag);\r\n    } else if (pkgManager === 'yarn') {\r\n      args.push('add', ...globalFlag);\r\n    } else {\r\n      args.push('install', ...globalFlag);\r\n    }\r\n\r\n    const pkgList = input.packages\r\n      ? (Array.isArray(input.packages) ? input.packages : input.packages.split(',')).map((p) => p.trim())\r\n      : [];\r\n    if (pkgList.length > 0) args.push(...pkgList);\r\n\r\n    yield { type: 'log', text: `Fetching ${pkgList.length || 'all'} packages…`, data: { phase: 'fetch' } };\r\n\r\n    const result = yield* spawnStream({\r\n      cmd: pkgManager,\r\n      args,\r\n      cwd,\r\n      signal: opts.signal,\r\n      maxBytes: 100_000,\r\n    });\r\n\r\n    yield {\r\n      type: 'final',\r\n      output: {\r\n        packages: pkgList,\r\n        exit_code: result.exitCode,\r\n        output: result.stdout || result.stderr || result.error || '',\r\n        dry_run: args.includes('--dry-run'),\r\n        truncated: result.truncated,\r\n      },\r\n    };\r\n  },\r\n};\r\n\r\nasync function detectPackageManager(cwd: string): Promise<string> {\r\n  const { stat } = await import('node:fs/promises');\r\n  try {\r\n    await stat(`${cwd}/pnpm-lock.yaml`);\r\n    return 'pnpm';\r\n  } catch {\r\n    try {\r\n      await stat(`${cwd}/yarn.lock`);\r\n      return 'yarn';\r\n    } catch {\r\n      return 'npm';\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/lint.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/_util.ts","../src/lint.ts"],"names":["resolve"],"mappings":";;;;AAIO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;AA6CA,gBAAuB,YACrB,IAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,QAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,CAAA,GAAI,IAAA;AACvC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,IAAI,KAAA;AAEJ,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,GAAA,EAAK,KAAK,IAAA,EAAM;AAAA,IACvC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,GACjC,CAAA;AAGD,EAAA,MAAM,QAAiB,EAAC;AACxB,EAAA,IAAI,MAAA;AACJ,EAAA,MAAM,OAAO,MAAM;AACjB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,CAAA,GAAI,MAAA;AACV,MAAA,MAAA,GAAS,MAAA;AACT,MAAA,CAAA,EAAE;AAAA,IACJ;AAAA,EACF,CAAA;AAEA,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AACvB,IAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AACV,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,SAAS,IAAA,EAAM,CAAA,CAAE,SAAS,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,MAAM,EAAA,EAAI,IAAA,EAAM,IAAA,IAAQ,CAAA,EAAG,CAAA;AACvD,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AAED,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,WAAS;AACP,IAAA,OAAO,KAAA,CAAM,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,KAAY;AACnC,QAAA,MAAA,GAASA,QAAAA;AAAA,MACX,CAAC,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,EAAM;AAC1B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAG1B,MAAA,IAAI,CAAC,WAAA,EAAa,QAAA,GAAW,KAAA,CAAM,IAAA,IAAQ,CAAA;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,QAAA,GAAW,CAAA;AAEX,MAAA;AAAA,IACF;AACA,IAAA,OAAA,IAAW,KAAA,CAAM,IAAA;AACjB,IAAA,IAAI,OAAA,CAAQ,UAAU,OAAA,EAAS;AAC7B,MAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAC9C,MAAA,OAAA,GAAU,EAAA;AAAA,IACZ;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAAA,EAChD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,MAAA,IAAU,GAAA,IAAO,OAAO,MAAA,IAAU,GAAA;AAAA,IACpD;AAAA,GACF;AACF;;;ACpIO,IAAM,QAAA,GAAwC;AAAA,EACnD,IAAA,EAAM,MAAA;AAAA,EACN,WAAA,EACE,6FAAA;AAAA,EACF,SAAA,EACE,kGAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,0CAAA,EAA2C;AAAA,MAChF,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,OAAA,EAAS,QAAA,EAAU,UAAU,MAAM,CAAA;AAAA,QAC1C,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC;AACzE,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,KAAA;AACJ,IAAA,WAAA,MAAiB,MAAM,QAAA,CAAS,aAAA,CAAe,KAAA,EAAO,GAAA,EAAK,IAAI,CAAA,EAAG;AAChE,MAAA,IAAI,EAAA,CAAG,IAAA,KAAS,OAAA,EAAS,KAAA,GAAQ,EAAA,CAAG,MAAA;AAAA,IACtC;AACA,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,IAAA,OAAO,KAAA;AAAA,EACT,CAAA;AAAA,EACA,OAAO,aAAA,CAAc,KAAA,EAAO,GAAA,EAAK,IAAA,EAAmD;AAClF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,MAAA;AAE/B,IAAA,MAAM,WAAW,MAAA,KAAW,MAAA,GAAS,MAAM,YAAA,CAAa,GAAG,CAAA,GAAI,MAAA;AAC/D,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,OAAA;AAAA,QACN,MAAA,EAAQ;AAAA,UACN,MAAA,EAAQ,MAAA;AAAA,UACR,aAAA,EAAe,CAAA;AAAA,UACf,MAAA,EAAQ,CAAA;AAAA,UACR,QAAA,EAAU,CAAA;AAAA,UACV,MAAA,EAAQ,sDAAA;AAAA,UACR,WAAA,EAAa,KAAA;AAAA,UACb,SAAA,EAAW;AAAA;AACb,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,QAAA,EAAW,QAAQ,CAAA,MAAA,CAAA,EAAK,IAAA,EAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,EAAE;AAE9E,IAAA,MAAM,IAAA,GAAiB,CAAC,MAAM,CAAA;AAC9B,IAAA,IAAI,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAClC,IAAA,IAAI,MAAM,KAAA,EAAO;AACf,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAA,GAAI,KAAA,CAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC9E,MAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,GAAG,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,GAAA,GAAM,QAAA,KAAa,OAAA,GAAU,OAAA,GAAU,QAAA;AAC7C,IAAA,MAAM,MAAA,GAAS,OAAO,WAAA,CAAY,EAAE,GAAA,EAAK,IAAA,EAAM,GAAA,EAAK,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,QAAA,EAAU,GAAA,EAAS,CAAA;AAE5F,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,MAAM,QAAQ,CAAA,IAAK,EAAC,EAAG,MAAA;AACrD,IAAA,MAAM,YAAY,MAAA,CAAO,MAAA,CAAO,MAAM,UAAU,CAAA,IAAK,EAAC,EAAG,MAAA;AAEzD,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,eAAe,KAAA,CAAM,KAAA,GAChB,KAAA,CAAM,OAAA,CAAQ,MAAM,KAAK,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,SAAS,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,GAC1E,CAAA;AAAA,QACJ,MAAA;AAAA,QACA,QAAA;AAAA,QACA,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,WAAA,EAAa,MAAM,GAAA,IAAO,KAAA;AAAA,QAC1B,WAAW,MAAA,CAAO;AAAA;AACpB,KACF;AAAA,EACF;AACF;AAEA,eAAe,aAAa,GAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,OAAO,aAAkB,CAAA;AAChD,EAAA,MAAM,SAAS,CAAC,YAAA,EAAc,gBAAA,EAAkB,aAAA,EAAe,gBAAgB,eAAe,CAAA;AAC9F,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAA;AACxB,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,OAAA;AAChC,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AACjC,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT","file":"lint.js","sourcesContent":["import * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Context, ToolProgressEvent } from '@wrongstack/core';\r\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface SpawnStreamResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n  truncated: boolean;\r\n  error?: string;\r\n}\r\n\r\nexport interface SpawnStreamOptions {\r\n  cmd: string;\r\n  args: string[];\r\n  cwd: string;\r\n  signal: AbortSignal;\r\n  maxBytes?: number;\r\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\r\n  flushBytes?: number;\r\n}\r\n\r\n/**\r\n * Spawn a child process and yield `partial_output` progress events as\r\n * stdout/stderr arrive (batched by byte threshold), then return the full\r\n * buffered result. Shared between install/lint/format/typecheck/test/audit\r\n * so the TUI live tail sees consistent progress regardless of which tool\r\n * is running.\r\n */\r\nexport async function* spawnStream(\r\n  opts: SpawnStreamOptions,\r\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\r\n  const max = opts.maxBytes ?? 200_000;\r\n  const flushAt = opts.flushBytes ?? 4 * 1024;\r\n  let stdout = '';\r\n  let stderr = '';\r\n  let pending = '';\r\n  let error: string | undefined;\r\n\r\n  const child = spawn(opts.cmd, opts.args, {\r\n    cwd: opts.cwd,\r\n    signal: opts.signal,\r\n    stdio: ['ignore', 'pipe', 'pipe'],\r\n  });\r\n\r\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\r\n  const queue: Chunk[] = [];\r\n  let waiter: (() => void) | undefined;\r\n  const wake = () => {\r\n    if (waiter) {\r\n      const w = waiter;\r\n      waiter = undefined;\r\n      w();\r\n    }\r\n  };\r\n\r\n  child.stdout?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stdout.length < max) stdout += s;\r\n    queue.push({ kind: 'out', data: s });\r\n    wake();\r\n  });\r\n  child.stderr?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stderr.length < max) stderr += s;\r\n    queue.push({ kind: 'err', data: s });\r\n    wake();\r\n  });\r\n  child.on('error', (e) => {\r\n    error = e.message;\r\n    queue.push({ kind: 'error', data: e.message });\r\n    wake();\r\n  });\r\n  child.on('close', (code) => {\r\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\r\n    wake();\r\n  });\r\n\r\n  let exitCode = 0;\r\n  let spawnFailed = false;\r\n  for (;;) {\r\n    while (queue.length === 0) {\r\n      await new Promise<void>((resolve) => {\r\n        waiter = resolve;\r\n      });\r\n    }\r\n    const chunk = queue.shift()!;\r\n    if (chunk.kind === 'close') {\r\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\r\n      // rather than the negative platform code Node fabricates.\r\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\r\n      break;\r\n    }\r\n    if (chunk.kind === 'error') {\r\n      spawnFailed = true;\r\n      exitCode = 1;\r\n      // close usually follows\r\n      continue;\r\n    }\r\n    pending += chunk.data;\r\n    if (pending.length >= flushAt) {\r\n      yield { type: 'partial_output', text: pending };\r\n      pending = '';\r\n    }\r\n  }\r\n  if (pending.length > 0) {\r\n    yield { type: 'partial_output', text: pending };\r\n  }\r\n\r\n  return {\r\n    stdout,\r\n    stderr,\r\n    exitCode,\r\n    truncated: stdout.length >= max || stderr.length >= max,\r\n    error,\r\n  };\r\n}\r\n","import type { Tool, ToolStreamEvent } from '@wrongstack/core';\r\nimport { safeResolve, spawnStream } from './_util.js';\r\n\r\ninterface LintInput {\r\n  files?: string | string[];\r\n  fix?: boolean;\r\n  linter?: 'biome' | 'eslint' | 'tslint' | 'auto';\r\n  cwd?: string;\r\n}\r\n\r\ninterface LintOutput {\r\n  linter: string;\r\n  files_checked: number;\r\n  errors: number;\r\n  warnings: number;\r\n  output: string;\r\n  fix_applied: boolean;\r\n  truncated: boolean;\r\n}\r\n\r\nexport const lintTool: Tool<LintInput, LintOutput> = {\r\n  name: 'lint',\r\n  description:\r\n    'Run a linter on files. Auto-detects biome, eslint, or tslint. Use `fix` to auto-fix issues.',\r\n  usageHint:\r\n    'Set `files` (glob or comma-separated). `fix` applies corrections. `linter` forces specific tool.',\r\n  permission: 'confirm',\r\n  mutating: false,\r\n  timeoutMs: 60_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      files: {\r\n        type: 'string',\r\n        description: 'Files/patterns: single path, comma-separated list, or glob (e.g. \"src/**/*.ts\")',\r\n      },\r\n      fix: { type: 'boolean', description: 'Auto-fix fixable issues (default: false)' },\r\n      linter: {\r\n        type: 'string',\r\n        enum: ['biome', 'eslint', 'tslint', 'auto'],\r\n        description: 'Linter to use (default: auto-detect)',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    let final: LintOutput | undefined;\r\n    for await (const ev of lintTool.executeStream!(input, ctx, opts)) {\r\n      if (ev.type === 'final') final = ev.output;\r\n    }\r\n    if (!final) throw new Error('lint: stream ended without final event');\r\n    return final;\r\n  },\r\n  async *executeStream(input, ctx, opts): AsyncGenerator<ToolStreamEvent<LintOutput>> {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const linter = input.linter ?? 'auto';\r\n\r\n    const detected = linter === 'auto' ? await detectLinter(cwd) : linter;\r\n    if (!detected) {\r\n      yield {\r\n        type: 'final',\r\n        output: {\r\n          linter: 'none',\r\n          files_checked: 0,\r\n          errors: 0,\r\n          warnings: 0,\r\n          output: 'No linter found (biome.json, .eslintrc, tslint.json)',\r\n          fix_applied: false,\r\n          truncated: false,\r\n        },\r\n      };\r\n      return;\r\n    }\r\n\r\n    yield { type: 'log', text: `Running ${detected}…`, data: { linter: detected } };\r\n\r\n    const args: string[] = ['lint'];\r\n    if (input.fix) args.push('--write');\r\n    if (input.files) {\r\n      const files = Array.isArray(input.files) ? input.files : input.files.split(',');\r\n      args.push('--', ...files.map((f) => f.trim()));\r\n    }\r\n\r\n    const cmd = detected === 'biome' ? 'biome' : detected;\r\n    const result = yield* spawnStream({ cmd, args, cwd, signal: opts.signal, maxBytes: 100_000 });\r\n\r\n    const errors = (result.stdout.match(/error/g) || []).length;\r\n    const warnings = (result.stdout.match(/warning/g) || []).length;\r\n\r\n    yield {\r\n      type: 'final',\r\n      output: {\r\n        linter: detected,\r\n        files_checked: input.files\r\n          ? (Array.isArray(input.files) ? input.files.length : input.files.split(',').length)\r\n          : 0,\r\n        errors,\r\n        warnings,\r\n        output: result.stdout,\r\n        fix_applied: input.fix ?? false,\r\n        truncated: result.truncated,\r\n      },\r\n    };\r\n  },\r\n};\r\n\r\nasync function detectLinter(cwd: string): Promise<string | null> {\r\n  const { stat } = await import('node:fs/promises');\r\n  const checks = ['biome.json', '.eslintrc.json', 'tslint.json', '.eslintrc.js', 'tsconfig.json'];\r\n  for (const f of checks) {\r\n    try {\r\n      await stat(`${cwd}/${f}`);\r\n      if (f.includes('biome')) return 'biome';\r\n      if (f.includes('eslint')) return 'eslint';\r\n      if (f.includes('tslint')) return 'tslint';\r\n    } catch {\r\n      // continue\r\n    }\r\n  }\r\n  return 'biome';\r\n}\r\n"]}
+{"version":3,"sources":["../src/_util.ts","../src/_spawn-stream.ts","../src/lint.ts"],"names":["resolve"],"mappings":";;;;AAGO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;ACSA,gBAAuB,YACrB,IAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,QAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,CAAA,GAAI,IAAA;AACvC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,IAAI,KAAA;AAEJ,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,GAAA,EAAK,KAAK,IAAA,EAAM;AAAA,IACvC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,GACjC,CAAA;AAGD,EAAA,MAAM,QAAiB,EAAC;AACxB,EAAA,IAAI,MAAA;AACJ,EAAA,MAAM,OAAO,MAAM;AACjB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,CAAA,GAAI,MAAA;AACV,MAAA,MAAA,GAAS,MAAA;AACT,MAAA,CAAA,EAAE;AAAA,IACJ;AAAA,EACF,CAAA;AAEA,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAC9B,IAAA,MAAM,CAAA,GAAI,EAAE,QAAA,EAAS;AACrB,IAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,CAAA;AACnC,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,GAAG,CAAA;AACnC,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AACvB,IAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AACV,IAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,SAAS,IAAA,EAAM,CAAA,CAAE,SAAS,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AACD,EAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,MAAM,EAAA,EAAI,IAAA,EAAM,IAAA,IAAQ,CAAA,EAAG,CAAA;AACvD,IAAA,IAAA,EAAK;AAAA,EACP,CAAC,CAAA;AAED,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,WAAS;AACP,IAAA,OAAO,KAAA,CAAM,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,KAAY;AACnC,QAAA,MAAA,GAASA,QAAAA;AAAA,MACX,CAAC,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,EAAM;AAC1B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAG1B,MAAA,IAAI,CAAC,WAAA,EAAa,QAAA,GAAW,KAAA,CAAM,IAAA,IAAQ,CAAA;AAC3C,MAAA;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,QAAA,GAAW,CAAA;AAEX,MAAA;AAAA,IACF;AACA,IAAA,OAAA,IAAW,KAAA,CAAM,IAAA;AACjB,IAAA,IAAI,OAAA,CAAQ,UAAU,OAAA,EAAS;AAC7B,MAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAC9C,MAAA,OAAA,GAAU,EAAA;AAAA,IACZ;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAQ;AAAA,EAChD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,MAAA,IAAU,GAAA,IAAO,OAAO,MAAA,IAAU,GAAA;AAAA,IACpD;AAAA,GACF;AACF;;;AC9FO,IAAM,QAAA,GAAwC;AAAA,EACnD,IAAA,EAAM,MAAA;AAAA,EACN,WAAA,EACE,6FAAA;AAAA,EACF,SAAA,EACE,kGAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,0CAAA,EAA2C;AAAA,MAChF,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,OAAA,EAAS,QAAA,EAAU,UAAU,MAAM,CAAA;AAAA,QAC1C,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC;AACzE,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,KAAA;AACJ,IAAA,WAAA,MAAiB,MAAM,QAAA,CAAS,aAAA,CAAe,KAAA,EAAO,GAAA,EAAK,IAAI,CAAA,EAAG;AAChE,MAAA,IAAI,EAAA,CAAG,IAAA,KAAS,OAAA,EAAS,KAAA,GAAQ,EAAA,CAAG,MAAA;AAAA,IACtC;AACA,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,IAAA,OAAO,KAAA;AAAA,EACT,CAAA;AAAA,EACA,OAAO,aAAA,CAAc,KAAA,EAAO,GAAA,EAAK,IAAA,EAAmD;AAClF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,MAAA;AAE/B,IAAA,MAAM,WAAW,MAAA,KAAW,MAAA,GAAS,MAAM,YAAA,CAAa,GAAG,CAAA,GAAI,MAAA;AAC/D,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,OAAA;AAAA,QACN,MAAA,EAAQ;AAAA,UACN,MAAA,EAAQ,MAAA;AAAA,UACR,aAAA,EAAe,CAAA;AAAA,UACf,MAAA,EAAQ,CAAA;AAAA,UACR,QAAA,EAAU,CAAA;AAAA,UACV,MAAA,EAAQ,sDAAA;AAAA,UACR,WAAA,EAAa,KAAA;AAAA,UACb,SAAA,EAAW;AAAA;AACb,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA,QAAA,EAAW,QAAQ,CAAA,MAAA,CAAA,EAAK,IAAA,EAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,EAAE;AAE9E,IAAA,MAAM,IAAA,GAAiB,CAAC,MAAM,CAAA;AAC9B,IAAA,IAAI,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAClC,IAAA,IAAI,MAAM,KAAA,EAAO;AACf,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAA,GAAI,KAAA,CAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC9E,MAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,GAAG,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,GAAA,GAAM,QAAA,KAAa,OAAA,GAAU,OAAA,GAAU,QAAA;AAC7C,IAAA,MAAM,MAAA,GAAS,OAAO,WAAA,CAAY,EAAE,GAAA,EAAK,IAAA,EAAM,GAAA,EAAK,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,QAAA,EAAU,GAAA,EAAS,CAAA;AAE5F,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,MAAM,QAAQ,CAAA,IAAK,EAAC,EAAG,MAAA;AACrD,IAAA,MAAM,YAAY,MAAA,CAAO,MAAA,CAAO,MAAM,UAAU,CAAA,IAAK,EAAC,EAAG,MAAA;AAEzD,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,eAAe,KAAA,CAAM,KAAA,GAChB,KAAA,CAAM,OAAA,CAAQ,MAAM,KAAK,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,SAAS,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,MAAA,GAC1E,CAAA;AAAA,QACJ,MAAA;AAAA,QACA,QAAA;AAAA,QACA,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,WAAA,EAAa,MAAM,GAAA,IAAO,KAAA;AAAA,QAC1B,WAAW,MAAA,CAAO;AAAA;AACpB,KACF;AAAA,EACF;AACF;AAEA,eAAe,aAAa,GAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,OAAO,aAAkB,CAAA;AAChD,EAAA,MAAM,SAAS,CAAC,YAAA,EAAc,gBAAA,EAAkB,aAAA,EAAe,gBAAgB,eAAe,CAAA;AAC9F,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAA;AACxB,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,OAAA;AAChC,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AACjC,MAAA,IAAI,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT","file":"lint.js","sourcesContent":["import * as path from 'node:path';\nimport type { Context } from '@wrongstack/core';\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n","import { spawn } from 'node:child_process';\nimport type { ToolProgressEvent } from '@wrongstack/core';\n\nexport interface SpawnStreamResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  truncated: boolean;\n  error?: string;\n}\n\nexport interface SpawnStreamOptions {\n  cmd: string;\n  args: string[];\n  cwd: string;\n  signal: AbortSignal;\n  maxBytes?: number;\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\n  flushBytes?: number;\n}\n\n/**\n * Spawn a child process and yield `partial_output` progress events as\n * stdout/stderr arrive (batched by byte threshold), then return the full\n * buffered result. Shared between install/lint/format/typecheck/test/audit\n * so the TUI live tail sees consistent progress regardless of which tool\n * is running.\n */\nexport async function* spawnStream(\n  opts: SpawnStreamOptions,\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\n  const max = opts.maxBytes ?? 200_000;\n  const flushAt = opts.flushBytes ?? 4 * 1024;\n  let stdout = '';\n  let stderr = '';\n  let pending = '';\n  let error: string | undefined;\n\n  const child = spawn(opts.cmd, opts.args, {\n    cwd: opts.cwd,\n    signal: opts.signal,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  });\n\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\n  const queue: Chunk[] = [];\n  let waiter: (() => void) | undefined;\n  const wake = () => {\n    if (waiter) {\n      const w = waiter;\n      waiter = undefined;\n      w();\n    }\n  };\n\n  child.stdout?.on('data', (c) => {\n    const s = c.toString();\n    if (stdout.length < max) stdout += s;\n    queue.push({ kind: 'out', data: s });\n    wake();\n  });\n  child.stderr?.on('data', (c) => {\n    const s = c.toString();\n    if (stderr.length < max) stderr += s;\n    queue.push({ kind: 'err', data: s });\n    wake();\n  });\n  child.on('error', (e) => {\n    error = e.message;\n    queue.push({ kind: 'error', data: e.message });\n    wake();\n  });\n  child.on('close', (code) => {\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\n    wake();\n  });\n\n  let exitCode = 0;\n  let spawnFailed = false;\n  for (;;) {\n    while (queue.length === 0) {\n      await new Promise<void>((resolve) => {\n        waiter = resolve;\n      });\n    }\n    const chunk = queue.shift()!;\n    if (chunk.kind === 'close') {\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\n      // rather than the negative platform code Node fabricates.\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\n      break;\n    }\n    if (chunk.kind === 'error') {\n      spawnFailed = true;\n      exitCode = 1;\n      // close usually follows\n      continue;\n    }\n    pending += chunk.data;\n    if (pending.length >= flushAt) {\n      yield { type: 'partial_output', text: pending };\n      pending = '';\n    }\n  }\n  if (pending.length > 0) {\n    yield { type: 'partial_output', text: pending };\n  }\n\n  return {\n    stdout,\n    stderr,\n    exitCode,\n    truncated: stdout.length >= max || stderr.length >= max,\n    error,\n  };\n}\n","import type { Tool, ToolStreamEvent } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\nimport { spawnStream } from './_spawn-stream.js';\n\r\ninterface LintInput {\r\n  files?: string | string[];\r\n  fix?: boolean;\r\n  linter?: 'biome' | 'eslint' | 'tslint' | 'auto';\r\n  cwd?: string;\r\n}\r\n\r\ninterface LintOutput {\r\n  linter: string;\r\n  files_checked: number;\r\n  errors: number;\r\n  warnings: number;\r\n  output: string;\r\n  fix_applied: boolean;\r\n  truncated: boolean;\r\n}\r\n\r\nexport const lintTool: Tool<LintInput, LintOutput> = {\r\n  name: 'lint',\r\n  description:\r\n    'Run a linter on files. Auto-detects biome, eslint, or tslint. Use `fix` to auto-fix issues.',\r\n  usageHint:\r\n    'Set `files` (glob or comma-separated). `fix` applies corrections. `linter` forces specific tool.',\r\n  permission: 'confirm',\r\n  mutating: false,\r\n  timeoutMs: 60_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      files: {\r\n        type: 'string',\r\n        description: 'Files/patterns: single path, comma-separated list, or glob (e.g. \"src/**/*.ts\")',\r\n      },\r\n      fix: { type: 'boolean', description: 'Auto-fix fixable issues (default: false)' },\r\n      linter: {\r\n        type: 'string',\r\n        enum: ['biome', 'eslint', 'tslint', 'auto'],\r\n        description: 'Linter to use (default: auto-detect)',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    let final: LintOutput | undefined;\r\n    for await (const ev of lintTool.executeStream!(input, ctx, opts)) {\r\n      if (ev.type === 'final') final = ev.output;\r\n    }\r\n    if (!final) throw new Error('lint: stream ended without final event');\r\n    return final;\r\n  },\r\n  async *executeStream(input, ctx, opts): AsyncGenerator<ToolStreamEvent<LintOutput>> {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const linter = input.linter ?? 'auto';\r\n\r\n    const detected = linter === 'auto' ? await detectLinter(cwd) : linter;\r\n    if (!detected) {\r\n      yield {\r\n        type: 'final',\r\n        output: {\r\n          linter: 'none',\r\n          files_checked: 0,\r\n          errors: 0,\r\n          warnings: 0,\r\n          output: 'No linter found (biome.json, .eslintrc, tslint.json)',\r\n          fix_applied: false,\r\n          truncated: false,\r\n        },\r\n      };\r\n      return;\r\n    }\r\n\r\n    yield { type: 'log', text: `Running ${detected}…`, data: { linter: detected } };\r\n\r\n    const args: string[] = ['lint'];\r\n    if (input.fix) args.push('--write');\r\n    if (input.files) {\r\n      const files = Array.isArray(input.files) ? input.files : input.files.split(',');\r\n      args.push('--', ...files.map((f) => f.trim()));\r\n    }\r\n\r\n    const cmd = detected === 'biome' ? 'biome' : detected;\r\n    const result = yield* spawnStream({ cmd, args, cwd, signal: opts.signal, maxBytes: 100_000 });\r\n\r\n    const errors = (result.stdout.match(/error/g) || []).length;\r\n    const warnings = (result.stdout.match(/warning/g) || []).length;\r\n\r\n    yield {\r\n      type: 'final',\r\n      output: {\r\n        linter: detected,\r\n        files_checked: input.files\r\n          ? (Array.isArray(input.files) ? input.files.length : input.files.split(',').length)\r\n          : 0,\r\n        errors,\r\n        warnings,\r\n        output: result.stdout,\r\n        fix_applied: input.fix ?? false,\r\n        truncated: result.truncated,\r\n      },\r\n    };\r\n  },\r\n};\r\n\r\nasync function detectLinter(cwd: string): Promise<string | null> {\r\n  const { stat } = await import('node:fs/promises');\r\n  const checks = ['biome.json', '.eslintrc.json', 'tslint.json', '.eslintrc.js', 'tsconfig.json'];\r\n  for (const f of checks) {\r\n    try {\r\n      await stat(`${cwd}/${f}`);\r\n      if (f.includes('biome')) return 'biome';\r\n      if (f.includes('eslint')) return 'eslint';\r\n      if (f.includes('tslint')) return 'tslint';\r\n    } catch {\r\n      // continue\r\n    }\r\n  }\r\n  return 'biome';\r\n}\r\n"]}

package/dist/logs.js

@@ -18,6 +18,42 @@ function safeResolve(input, ctx) {
   return ensureInsideRoot(resolvePath(input, ctx), ctx);
 }
 
+// src/_regex.ts
+var MAX_PATTERN_LEN = 512;
+var DANGEROUS_PATTERNS = [
+  /(\([^)]*[+*][^)]*\))[+*]/,
+  // (a+)+, (.*)+, etc — nested quantifier on a group with internal quantifier
+  /(\(\?:[^)]*[+*][^)]*\))[+*]/
+  // same, with non-capturing group
+];
+function compileUserRegex(pattern, flags) {
+  if (typeof pattern !== "string") {
+    return { ok: false, reason: "pattern must be a string" };
+  }
+  if (pattern.length === 0) {
+    return { ok: false, reason: "pattern is empty" };
+  }
+  if (pattern.length > MAX_PATTERN_LEN) {
+    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };
+  }
+  for (const rx of DANGEROUS_PATTERNS) {
+    if (rx.test(pattern)) {
+      return {
+        ok: false,
+        reason: "pattern looks vulnerable to catastrophic backtracking \u2014 rewrite without nested quantifiers"
+      };
+    }
+  }
+  try {
+    return { ok: true, regex: new RegExp(pattern, flags) };
+  } catch (err) {
+    return {
+      ok: false,
+      reason: err instanceof Error ? err.message : "invalid regex"
+    };
+  }
+}
+
 // src/logs.ts
 var logsTool = {
   name: "logs",
@@ -62,7 +98,14 @@ var logsTool = {
   async execute(input, ctx, opts) {
     const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;
     const lines = input.lines ?? 100;
-    const filterRe = input.filter ? new RegExp(input.filter, "i") : null;
+    let filterRe = null;
+    if (input.filter) {
+      const compiled = compileUserRegex(input.filter, "i");
+      if (!compiled.ok) {
+        throw new Error(`logs: ${compiled.reason}`);
+      }
+      filterRe = compiled.regex;
+    }
     if (input.service) {
       return await dockerLogs(input.service, lines, filterRe, cwd, opts.signal);
     }
@@ -113,21 +156,33 @@ async function dockerLogs(service, lines, filterRe, cwd, signal, since) {
     }));
   });
 }
+var MAX_TAIL_LINES = 1e5;
 async function fileLogs(path2, lines, filterRe, stream) {
   const { createInterface } = await import('readline');
   const { createReadStream } = await import('fs');
   const entries = [];
-  const allLines = [];
+  const effLines = lines > 0 ? Math.min(lines, MAX_TAIL_LINES) : MAX_TAIL_LINES;
+  const window = new Array(effLines);
+  let writeIdx = 0;
+  let totalLines = 0;
   const rl = createInterface({
     input: createReadStream(path2),
     crlfDelay: Number.POSITIVE_INFINITY
   });
   for await (const line of rl) {
     if (filterRe && !filterRe.test(line)) continue;
-    allLines.push(line);
+    window[writeIdx] = line;
+    writeIdx = (writeIdx + 1) % effLines;
+    totalLines++;
+  }
+  const ordered = [];
+  const start = totalLines >= effLines ? writeIdx : 0;
+  const count = Math.min(totalLines, effLines);
+  for (let i = 0; i < count; i++) {
+    const v = window[(start + i) % effLines];
+    if (v !== void 0) ordered.push(v);
   }
-  const sliced = lines > 0 ? allLines.slice(-lines) : allLines;
-  for (const line of sliced) {
+  for (const line of ordered) {
     const parsed = parseLine(line);
     if (parsed) entries.push(parsed);
   }
@@ -135,7 +190,7 @@ async function fileLogs(path2, lines, filterRe, stream) {
     source: path2,
     entries,
     total: entries.length,
-    truncated: allLines.length > lines && lines > 0,
+    truncated: totalLines > effLines,
     stream_mode: stream
   };
 }

package/dist/logs.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/_util.ts","../src/logs.ts"],"names":["resolve","spawn","path"],"mappings":";;;;AAIO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACSO,IAAM,QAAA,GAAwC;AAAA,EACnD,IAAA,EAAM,MAAA;AAAA,EACN,WAAA,EACE,4FAAA;AAAA,EACF,SAAA,EACE,wIAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa,wDAAA;AAAA,QACb,OAAA,EAAS,CAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACX;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,IAAA,EAAM,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA,QAC/B,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC;AACzE,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,GAAA;AAC7B,IAAA,MAAM,QAAA,GAAW,MAAM,MAAA,GAAS,IAAI,OAAO,KAAA,CAAM,MAAA,EAAQ,GAAG,CAAA,GAAI,IAAA;AAEhE,IAAA,IAAI,MAAM,OAAA,EAAS;AACjB,MAAA,OAAO,MAAM,WAAW,KAAA,CAAM,OAAA,EAAS,OAAO,QAAA,EAAU,GAAA,EAAK,KAAK,MAAM,CAAA;AAAA,IAC1E;AAEA,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,OAAO,MAAM,QAAA,CAAS,WAAA,CAAY,KAAA,CAAM,IAAA,EAAM,GAAG,CAAA,EAAG,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,MAAA,IAAU,KAAK,CAAA;AAAA,IAC5F;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA;AAAA,MACR,SAAS,EAAC;AAAA,MACV,KAAA,EAAO,CAAA;AAAA,MACP,SAAA,EAAW,KAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AACF;AAEA,eAAe,WACb,OAAA,EACA,KAAA,EACA,QAAA,EACA,GAAA,EACA,QACA,KAAA,EACqB;AACrB,EAAA,MAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,EAAA,IAAI,QAAQ,CAAA,EAAG,IAAA,CAAK,KAAK,QAAA,EAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAKhD,EAAA,IAAA,CAAK,IAAA,CAAK,gBAAgB,OAAO,CAAA;AAEjC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,MAAM,KAAA,GAAQC,KAAAA,CAAM,QAAA,EAAU,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AACtF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,MAAA,MAAM,SAAS,MAAA,GAAS,MAAA;AACxB,MAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,EAAQ,QAAQ,CAAA;AAC9C,MAAAD,QAAAA,CAAQ;AAAA,QACN,MAAA,EAAQ,UAAU,OAAO,CAAA,CAAA;AAAA,QACzB,OAAA;AAAA,QACA,OAAO,OAAA,CAAQ,MAAA;AAAA,QACf,SAAA,EAAW,OAAO,MAAA,IAAU,GAAA;AAAA,QAC5B,WAAA,EAAa;AAAA,OACd,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,QAAAA,CAAQ;AAAA,MAC/B,MAAA,EAAQ,UAAU,OAAO,CAAA,CAAA;AAAA,MACzB,SAAS,EAAC;AAAA,MACV,KAAA,EAAO,CAAA;AAAA,MACP,SAAA,EAAW,KAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACd,CAAC,CAAA;AAAA,EACJ,CAAC,CAAA;AACH;AAEA,eAAe,QAAA,CACbE,KAAAA,EACA,KAAA,EACA,QAAA,EACA,MAAA,EACqB;AACrB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,UAAe,CAAA;AACxD,EAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,IAAS,CAAA;AACnD,EAAA,MAAM,UAAsB,EAAC;AAC7B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,MAAM,KAAK,eAAA,CAAgB;AAAA,IACzB,KAAA,EAAO,iBAAiBA,KAAI,CAAA;AAAA,IAC5B,WAAW,MAAA,CAAO;AAAA,GACnB,CAAA;AAED,EAAA,WAAA,MAAiB,QAAQ,EAAA,EAAI;AAC3B,IAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACtC,IAAA,QAAA,CAAS,KAAK,IAAI,CAAA;AAAA,EACpB;AAEA,EAAA,MAAM,SAAS,KAAA,GAAQ,CAAA,GAAI,SAAS,KAAA,CAAM,CAAC,KAAK,CAAA,GAAI,QAAA;AACpD,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACzB,IAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQA,KAAAA;AAAA,IACR,OAAA;AAAA,IACA,OAAO,OAAA,CAAQ,MAAA;AAAA,IACf,SAAA,EAAW,QAAA,CAAS,MAAA,GAAS,KAAA,IAAS,KAAA,GAAQ,CAAA;AAAA,IAC9C,WAAA,EAAa;AAAA,GACf;AACF;AAEA,SAAS,aAAA,CAAc,QAAgB,QAAA,EAAqC;AAC1E,EAAA,MAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/C,EAAA,MAAM,UAAsB,EAAC;AAE7B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACtC,IAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,UAAU,IAAA,EAA+B;AAChD,EAAA,MAAM,IAAA,GAAO,6EAAA;AACb,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AAE5B,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,KAAA,CAAM,CAAC,CAAA,IAAK,EAAA;AAAA,MACvB,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,EAAG,aAAY,IAAK,MAAA;AAAA,MAClC,OAAA,EAAS,KAAA,CAAM,CAAC,CAAA,IAAK;AAAA,KACvB;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,yCAAA;AAChB,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAEpC,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,EAAA;AAAA,MACX,KAAA,EAAO,UAAA,CAAW,CAAC,CAAA,EAAG,aAAY,IAAK,MAAA;AAAA,MACvC,OAAA,EAAS,UAAA,CAAW,CAAC,CAAA,IAAK;AAAA,KAC5B;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,EAAA;AAAA,IACX,KAAA,EAAO,MAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACX;AACF","file":"logs.js","sourcesContent":["import * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Context, ToolProgressEvent } from '@wrongstack/core';\r\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface SpawnStreamResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n  truncated: boolean;\r\n  error?: string;\r\n}\r\n\r\nexport interface SpawnStreamOptions {\r\n  cmd: string;\r\n  args: string[];\r\n  cwd: string;\r\n  signal: AbortSignal;\r\n  maxBytes?: number;\r\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\r\n  flushBytes?: number;\r\n}\r\n\r\n/**\r\n * Spawn a child process and yield `partial_output` progress events as\r\n * stdout/stderr arrive (batched by byte threshold), then return the full\r\n * buffered result. Shared between install/lint/format/typecheck/test/audit\r\n * so the TUI live tail sees consistent progress regardless of which tool\r\n * is running.\r\n */\r\nexport async function* spawnStream(\r\n  opts: SpawnStreamOptions,\r\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\r\n  const max = opts.maxBytes ?? 200_000;\r\n  const flushAt = opts.flushBytes ?? 4 * 1024;\r\n  let stdout = '';\r\n  let stderr = '';\r\n  let pending = '';\r\n  let error: string | undefined;\r\n\r\n  const child = spawn(opts.cmd, opts.args, {\r\n    cwd: opts.cwd,\r\n    signal: opts.signal,\r\n    stdio: ['ignore', 'pipe', 'pipe'],\r\n  });\r\n\r\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\r\n  const queue: Chunk[] = [];\r\n  let waiter: (() => void) | undefined;\r\n  const wake = () => {\r\n    if (waiter) {\r\n      const w = waiter;\r\n      waiter = undefined;\r\n      w();\r\n    }\r\n  };\r\n\r\n  child.stdout?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stdout.length < max) stdout += s;\r\n    queue.push({ kind: 'out', data: s });\r\n    wake();\r\n  });\r\n  child.stderr?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stderr.length < max) stderr += s;\r\n    queue.push({ kind: 'err', data: s });\r\n    wake();\r\n  });\r\n  child.on('error', (e) => {\r\n    error = e.message;\r\n    queue.push({ kind: 'error', data: e.message });\r\n    wake();\r\n  });\r\n  child.on('close', (code) => {\r\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\r\n    wake();\r\n  });\r\n\r\n  let exitCode = 0;\r\n  let spawnFailed = false;\r\n  for (;;) {\r\n    while (queue.length === 0) {\r\n      await new Promise<void>((resolve) => {\r\n        waiter = resolve;\r\n      });\r\n    }\r\n    const chunk = queue.shift()!;\r\n    if (chunk.kind === 'close') {\r\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\r\n      // rather than the negative platform code Node fabricates.\r\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\r\n      break;\r\n    }\r\n    if (chunk.kind === 'error') {\r\n      spawnFailed = true;\r\n      exitCode = 1;\r\n      // close usually follows\r\n      continue;\r\n    }\r\n    pending += chunk.data;\r\n    if (pending.length >= flushAt) {\r\n      yield { type: 'partial_output', text: pending };\r\n      pending = '';\r\n    }\r\n  }\r\n  if (pending.length > 0) {\r\n    yield { type: 'partial_output', text: pending };\r\n  }\r\n\r\n  return {\r\n    stdout,\r\n    stderr,\r\n    exitCode,\r\n    truncated: stdout.length >= max || stderr.length >= max,\r\n    error,\r\n  };\r\n}\r\n","import { spawn } from 'node:child_process';\r\nimport type { Tool } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\r\n\r\ninterface LogsInput {\r\n  service?: string;\r\n  path?: string;\r\n  lines?: number;\r\n  stream?: boolean;\r\n  filter?: string;\r\n  since?: '1h' | '6h' | '24h' | 'all';\r\n  cwd?: string;\r\n}\r\n\r\ninterface LogEntry {\r\n  timestamp: string;\r\n  level: string;\r\n  message: string;\r\n  source?: string;\r\n}\r\n\r\ninterface LogsOutput {\r\n  source: string;\r\n  entries: LogEntry[];\r\n  total: number;\r\n  truncated: boolean;\r\n  stream_mode: boolean;\r\n}\r\n\r\nexport const logsTool: Tool<LogsInput, LogsOutput> = {\r\n  name: 'logs',\r\n  description:\r\n    'Stream or fetch logs from a service or file. Supports Docker, systemd, or plain log files.',\r\n  usageHint:\r\n    'Set `service` for Docker/systemd, `path` for file. `lines` limits output. `stream` for tail -f behavior. `filter` regex filters lines.',\r\n  permission: 'confirm',\r\n  mutating: false,\r\n  timeoutMs: 30_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      service: {\r\n        type: 'string',\r\n        description: 'Service name for Docker or systemd journal',\r\n      },\r\n      path: {\r\n        type: 'string',\r\n        description: 'Path to log file (alternative to service)',\r\n      },\r\n      lines: {\r\n        type: 'integer',\r\n        description: 'Number of log lines to fetch (default: 100, 0 for all)',\r\n        minimum: 0,\r\n        maximum: 10000,\r\n      },\r\n      stream: {\r\n        type: 'boolean',\r\n        description: 'Stream logs continuously (like tail -f) (default: false)',\r\n      },\r\n      filter: {\r\n        type: 'string',\r\n        description: 'Regex pattern to filter log lines',\r\n      },\r\n      since: {\r\n        type: 'string',\r\n        enum: ['1h', '6h', '24h', 'all'],\r\n        description: 'Only show logs since duration',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const lines = input.lines ?? 100;\r\n    const filterRe = input.filter ? new RegExp(input.filter, 'i') : null;\r\n\r\n    if (input.service) {\r\n      return await dockerLogs(input.service, lines, filterRe, cwd, opts.signal);\r\n    }\r\n\r\n    if (input.path) {\r\n      return await fileLogs(safeResolve(input.path, ctx), lines, filterRe, input.stream ?? false);\r\n    }\r\n\r\n    return {\r\n      source: 'none',\r\n      entries: [],\r\n      total: 0,\r\n      truncated: false,\r\n      stream_mode: false,\r\n    };\r\n  },\r\n};\r\n\r\nasync function dockerLogs(\r\n  service: string,\r\n  lines: number,\r\n  filterRe: RegExp | null,\r\n  cwd: string,\r\n  signal: AbortSignal,\r\n  since?: string,\r\n): Promise<LogsOutput> {\r\n  const args = ['logs'];\r\n  if (lines > 0) args.push('--tail', String(lines));\r\n  if (since) {\r\n    const sinceMap: Record<string, string> = { '1h': '1h', '6h': '6h', '24h': '24h' };\r\n    args.push('--since', sinceMap[since] ?? '1h');\r\n  }\r\n  args.push('--timestamps', service);\r\n\r\n  return new Promise((resolve) => {\r\n    let stdout = '';\r\n    let stderr = '';\r\n    const MAX = 200_000;\r\n\r\n    const child = spawn('docker', args, { cwd, signal, stdio: ['ignore', 'pipe', 'pipe'] });\r\n    child.stdout?.on('data', (c) => { if (stdout.length < MAX) stdout += c.toString(); });\r\n    child.stderr?.on('data', (c) => { if (stderr.length < MAX) stderr += c.toString(); });\r\n    child.on('close', (code) => {\r\n      const output = stdout + stderr;\r\n      const entries = parseLogLines(output, filterRe);\r\n      resolve({\r\n        source: `docker:${service}`,\r\n        entries,\r\n        total: entries.length,\r\n        truncated: output.length >= MAX,\r\n        stream_mode: false,\r\n      });\r\n    });\r\n    child.on('error', (e) => resolve({\r\n      source: `docker:${service}`,\r\n      entries: [],\r\n      total: 0,\r\n      truncated: false,\r\n      stream_mode: false,\r\n    }));\r\n  });\r\n}\r\n\r\nasync function fileLogs(\r\n  path: string,\r\n  lines: number,\r\n  filterRe: RegExp | null,\r\n  stream: boolean,\r\n): Promise<LogsOutput> {\r\n  const { createInterface } = await import('node:readline');\r\n  const { createReadStream } = await import('node:fs');\r\n  const entries: LogEntry[] = [];\r\n  const allLines: string[] = [];\r\n\r\n  const rl = createInterface({\r\n    input: createReadStream(path),\r\n    crlfDelay: Number.POSITIVE_INFINITY,\r\n  });\r\n\r\n  for await (const line of rl) {\r\n    if (filterRe && !filterRe.test(line)) continue;\r\n    allLines.push(line);\r\n  }\r\n\r\n  const sliced = lines > 0 ? allLines.slice(-lines) : allLines;\r\n  for (const line of sliced) {\r\n    const parsed = parseLine(line);\r\n    if (parsed) entries.push(parsed);\r\n  }\r\n\r\n  return {\r\n    source: path,\r\n    entries,\r\n    total: entries.length,\r\n    truncated: allLines.length > lines && lines > 0,\r\n    stream_mode: stream,\r\n  };\r\n}\r\n\r\nfunction parseLogLines(output: string, filterRe: RegExp | null): LogEntry[] {\r\n  const lines = output.split('\\n').filter(Boolean);\r\n  const entries: LogEntry[] = [];\r\n\r\n  for (const line of lines) {\r\n    if (filterRe && !filterRe.test(line)) continue;\r\n    const parsed = parseLine(line);\r\n    if (parsed) entries.push(parsed);\r\n  }\r\n\r\n  return entries;\r\n}\r\n\r\nfunction parseLine(line: string): LogEntry | null {\r\n  const tsRe = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z?)\\s+(?:\\[?(\\w+)\\]?)\\s*(.*)/;\r\n  const match = tsRe.exec(line);\r\n\r\n  if (match) {\r\n    return {\r\n      timestamp: match[1] ?? '',\r\n      level: match[2]?.toLowerCase() ?? 'info',\r\n      message: match[3] ?? '',\r\n    };\r\n  }\r\n\r\n  const levelRe = /(?:ERROR|WARN|INFO|DEBUG|TRACE)\\s+(.*)/i;\r\n  const levelMatch = levelRe.exec(line);\r\n\r\n  if (levelMatch) {\r\n    return {\r\n      timestamp: '',\r\n      level: levelMatch[1]?.toLowerCase() ?? 'info',\r\n      message: levelMatch[2] ?? line,\r\n    };\r\n  }\r\n\r\n  return {\r\n    timestamp: '',\r\n    level: 'info',\r\n    message: line,\r\n  };\r\n}"]}
+{"version":3,"sources":["../src/_util.ts","../src/_regex.ts","../src/logs.ts"],"names":["resolve","path"],"mappings":";;;;AAGO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACIA,IAAM,eAAA,GAAkB,GAAA;AAIxB,IAAM,kBAAA,GAA4C;AAAA,EAChD,0BAAA;AAAA;AAAA,EACA;AAAA;AACF,CAAA;AAYO,SAAS,gBAAA,CACd,SACA,KAAA,EAC6B;AAC7B,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,0BAAA,EAA2B;AAAA,EACzD;AACA,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,kBAAA,EAAmB;AAAA,EACjD;AACA,EAAA,IAAI,OAAA,CAAQ,SAAS,eAAA,EAAiB;AACpC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,gBAAA,EAAmB,eAAe,CAAA,WAAA,CAAA,EAAc;AAAA,EAC9E;AACA,EAAA,KAAA,MAAW,MAAM,kBAAA,EAAoB;AACnC,IAAA,IAAI,EAAA,CAAG,IAAA,CAAK,OAAO,CAAA,EAAG;AACpB,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,OAAO,EAAE,IAAI,IAAA,EAAM,KAAA,EAAO,IAAI,MAAA,CAAO,OAAA,EAAS,KAAK,CAAA,EAAE;AAAA,EACvD,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,KAC/C;AAAA,EACF;AACF;;;ACzCO,IAAM,QAAA,GAAwC;AAAA,EACnD,IAAA,EAAM,MAAA;AAAA,EACN,WAAA,EACE,4FAAA;AAAA,EACF,SAAA,EACE,wIAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa,wDAAA;AAAA,QACb,OAAA,EAAS,CAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACX;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,IAAA,EAAM,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA,QAC/B,WAAA,EAAa;AAAA,OACf;AAAA,MACA,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC;AACzE,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,GAAA;AAC7B,IAAA,IAAI,QAAA,GAA0B,IAAA;AAC9B,IAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,MAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,KAAA,CAAM,MAAA,EAAQ,GAAG,CAAA;AACnD,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,MAC5C;AACA,MAAA,QAAA,GAAW,QAAA,CAAS,KAAA;AAAA,IACtB;AAEA,IAAA,IAAI,MAAM,OAAA,EAAS;AACjB,MAAA,OAAO,MAAM,WAAW,KAAA,CAAM,OAAA,EAAS,OAAO,QAAA,EAAU,GAAA,EAAK,KAAK,MAAM,CAAA;AAAA,IAC1E;AAEA,IAAA,IAAI,MAAM,IAAA,EAAM;AACd,MAAA,OAAO,MAAM,QAAA,CAAS,WAAA,CAAY,KAAA,CAAM,IAAA,EAAM,GAAG,CAAA,EAAG,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,MAAA,IAAU,KAAK,CAAA;AAAA,IAC5F;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA;AAAA,MACR,SAAS,EAAC;AAAA,MACV,KAAA,EAAO,CAAA;AAAA,MACP,SAAA,EAAW,KAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AACF;AAEA,eAAe,WACb,OAAA,EACA,KAAA,EACA,QAAA,EACA,GAAA,EACA,QACA,KAAA,EACqB;AACrB,EAAA,MAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,EAAA,IAAI,QAAQ,CAAA,EAAG,IAAA,CAAK,KAAK,QAAA,EAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAKhD,EAAA,IAAA,CAAK,IAAA,CAAK,gBAAgB,OAAO,CAAA;AAEjC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AACtF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,MAAA,MAAM,SAAS,MAAA,GAAS,MAAA;AACxB,MAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,EAAQ,QAAQ,CAAA;AAC9C,MAAAA,QAAAA,CAAQ;AAAA,QACN,MAAA,EAAQ,UAAU,OAAO,CAAA,CAAA;AAAA,QACzB,OAAA;AAAA,QACA,OAAO,OAAA,CAAQ,MAAA;AAAA,QACf,SAAA,EAAW,OAAO,MAAA,IAAU,GAAA;AAAA,QAC5B,WAAA,EAAa;AAAA,OACd,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,QAAAA,CAAQ;AAAA,MAC/B,MAAA,EAAQ,UAAU,OAAO,CAAA,CAAA;AAAA,MACzB,SAAS,EAAC;AAAA,MACV,KAAA,EAAO,CAAA;AAAA,MACP,SAAA,EAAW,KAAA;AAAA,MACX,WAAA,EAAa;AAAA,KACd,CAAC,CAAA;AAAA,EACJ,CAAC,CAAA;AACH;AAKA,IAAM,cAAA,GAAiB,GAAA;AAEvB,eAAe,QAAA,CACbC,KAAAA,EACA,KAAA,EACA,QAAA,EACA,MAAA,EACqB;AACrB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,UAAe,CAAA;AACxD,EAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,IAAS,CAAA;AACnD,EAAA,MAAM,UAAsB,EAAC;AAK7B,EAAA,MAAM,WAAW,KAAA,GAAQ,CAAA,GAAI,KAAK,GAAA,CAAI,KAAA,EAAO,cAAc,CAAA,GAAI,cAAA;AAG/D,EAAA,MAAM,MAAA,GAAmB,IAAI,KAAA,CAAM,QAAQ,CAAA;AAC3C,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,IAAI,UAAA,GAAa,CAAA;AAEjB,EAAA,MAAM,KAAK,eAAA,CAAgB;AAAA,IACzB,KAAA,EAAO,iBAAiBA,KAAI,CAAA;AAAA,IAC5B,WAAW,MAAA,CAAO;AAAA,GACnB,CAAA;AAED,EAAA,WAAA,MAAiB,QAAQ,EAAA,EAAI;AAC3B,IAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACtC,IAAA,MAAA,CAAO,QAAQ,CAAA,GAAI,IAAA;AACnB,IAAA,QAAA,GAAA,CAAY,WAAW,CAAA,IAAK,QAAA;AAC5B,IAAA,UAAA,EAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,QAAA,GAAW,QAAA,GAAW,CAAA;AAClD,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,QAAQ,CAAA;AAC3C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,EAAO,CAAA,EAAA,EAAK;AAC9B,IAAA,MAAM,CAAA,GAAI,MAAA,CAAA,CAAQ,KAAA,GAAQ,CAAA,IAAK,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAA,KAAM,MAAA,EAAW,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAAA,EACrC;AAEA,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQA,KAAAA;AAAA,IACR,OAAA;AAAA,IACA,OAAO,OAAA,CAAQ,MAAA;AAAA,IACf,WAAW,UAAA,GAAa,QAAA;AAAA,IACxB,WAAA,EAAa;AAAA,GACf;AACF;AAEA,SAAS,aAAA,CAAc,QAAgB,QAAA,EAAqC;AAC1E,EAAA,MAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/C,EAAA,MAAM,UAAsB,EAAC;AAE7B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACtC,IAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AAAA,EACjC;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,UAAU,IAAA,EAA+B;AAChD,EAAA,MAAM,IAAA,GAAO,6EAAA;AACb,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AAE5B,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,KAAA,CAAM,CAAC,CAAA,IAAK,EAAA;AAAA,MACvB,KAAA,EAAO,KAAA,CAAM,CAAC,CAAA,EAAG,aAAY,IAAK,MAAA;AAAA,MAClC,OAAA,EAAS,KAAA,CAAM,CAAC,CAAA,IAAK;AAAA,KACvB;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,yCAAA;AAChB,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAEpC,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,EAAA;AAAA,MACX,KAAA,EAAO,UAAA,CAAW,CAAC,CAAA,EAAG,aAAY,IAAK,MAAA;AAAA,MACvC,OAAA,EAAS,UAAA,CAAW,CAAC,CAAA,IAAK;AAAA,KAC5B;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,EAAA;AAAA,IACX,KAAA,EAAO,MAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACX;AACF","file":"logs.js","sourcesContent":["import * as path from 'node:path';\nimport type { Context } from '@wrongstack/core';\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n","/**\n * Compile a user-supplied regex with conservative bounds against ReDoS.\n *\n * Node's regex engine (V8) is backtracking-based and cannot interrupt a\n * synchronous match — a pattern like `(a+)+$` against a sufficiently long\n * line will pin a worker for seconds. The executor's outer `timeoutMs` only\n * fires between async boundaries, so a long regex eval inside a sync loop\n * is uninterruptible.\n *\n * We can't fully prevent ReDoS without an alternative engine (re2-wasm), but\n * we can sharply limit the blast radius:\n *\n *  1. Cap pattern length — practically all legitimate user patterns are\n *     under 256 characters. A 4 KB pattern is almost certainly malicious\n *     or a copy-paste accident.\n *  2. Reject patterns containing the most obvious super-linear structures.\n *     This is a coarse filter (false-positives are likely; we accept that\n *     for hostile-input contexts).\n *\n * Callers should additionally bound the *subject* length (e.g. by capping\n * line size before matching).\n */\n\nconst MAX_PATTERN_LEN = 512;\n\n// Heuristics for catastrophic-backtracking constructs. Not exhaustive; bias\n// toward false-positives in tools that accept LLM-generated input.\nconst DANGEROUS_PATTERNS: ReadonlyArray<RegExp> = [\n  /(\\([^)]*[+*][^)]*\\))[+*]/, // (a+)+, (.*)+, etc — nested quantifier on a group with internal quantifier\n  /(\\(\\?:[^)]*[+*][^)]*\\))[+*]/, // same, with non-capturing group\n];\n\nexport interface CompileResult {\n  ok: true;\n  regex: RegExp;\n}\n\nexport interface CompileFail {\n  ok: false;\n  reason: string;\n}\n\nexport function compileUserRegex(\n  pattern: string,\n  flags: string,\n): CompileResult | CompileFail {\n  if (typeof pattern !== 'string') {\n    return { ok: false, reason: 'pattern must be a string' };\n  }\n  if (pattern.length === 0) {\n    return { ok: false, reason: 'pattern is empty' };\n  }\n  if (pattern.length > MAX_PATTERN_LEN) {\n    return { ok: false, reason: `pattern exceeds ${MAX_PATTERN_LEN} characters` };\n  }\n  for (const rx of DANGEROUS_PATTERNS) {\n    if (rx.test(pattern)) {\n      return {\n        ok: false,\n        reason: 'pattern looks vulnerable to catastrophic backtracking — rewrite without nested quantifiers',\n      };\n    }\n  }\n  try {\n    return { ok: true, regex: new RegExp(pattern, flags) };\n  } catch (err) {\n    return {\n      ok: false,\n      reason: err instanceof Error ? err.message : 'invalid regex',\n    };\n  }\n}\n\n/**\n * Truncate a subject line to a safe length for synchronous regex eval.\n * The cap is conservative; tools that need exact-line matching against very\n * long lines should use ripgrep externally rather than the native walker.\n */\nexport const MAX_SUBJECT_LEN = 64 * 1024;\n\nexport function capSubject(line: string): string {\n  return line.length > MAX_SUBJECT_LEN ? line.slice(0, MAX_SUBJECT_LEN) : line;\n}\n","import { spawn } from 'node:child_process';\r\nimport type { Tool } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\r\nimport { compileUserRegex } from './_regex.js';\r\n\r\ninterface LogsInput {\r\n  service?: string;\r\n  path?: string;\r\n  lines?: number;\r\n  stream?: boolean;\r\n  filter?: string;\r\n  since?: '1h' | '6h' | '24h' | 'all';\r\n  cwd?: string;\r\n}\r\n\r\ninterface LogEntry {\r\n  timestamp: string;\r\n  level: string;\r\n  message: string;\r\n  source?: string;\r\n}\r\n\r\ninterface LogsOutput {\r\n  source: string;\r\n  entries: LogEntry[];\r\n  total: number;\r\n  truncated: boolean;\r\n  stream_mode: boolean;\r\n}\r\n\r\nexport const logsTool: Tool<LogsInput, LogsOutput> = {\r\n  name: 'logs',\r\n  description:\r\n    'Stream or fetch logs from a service or file. Supports Docker, systemd, or plain log files.',\r\n  usageHint:\r\n    'Set `service` for Docker/systemd, `path` for file. `lines` limits output. `stream` for tail -f behavior. `filter` regex filters lines.',\r\n  permission: 'confirm',\r\n  mutating: false,\r\n  timeoutMs: 30_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      service: {\r\n        type: 'string',\r\n        description: 'Service name for Docker or systemd journal',\r\n      },\r\n      path: {\r\n        type: 'string',\r\n        description: 'Path to log file (alternative to service)',\r\n      },\r\n      lines: {\r\n        type: 'integer',\r\n        description: 'Number of log lines to fetch (default: 100, 0 for all)',\r\n        minimum: 0,\r\n        maximum: 10000,\r\n      },\r\n      stream: {\r\n        type: 'boolean',\r\n        description: 'Stream logs continuously (like tail -f) (default: false)',\r\n      },\r\n      filter: {\r\n        type: 'string',\r\n        description: 'Regex pattern to filter log lines',\r\n      },\r\n      since: {\r\n        type: 'string',\r\n        enum: ['1h', '6h', '24h', 'all'],\r\n        description: 'Only show logs since duration',\r\n      },\r\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\r\n    },\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\r\n    const lines = input.lines ?? 100;\r\n    let filterRe: RegExp | null = null;\r\n    if (input.filter) {\r\n      const compiled = compileUserRegex(input.filter, 'i');\r\n      if (!compiled.ok) {\r\n        throw new Error(`logs: ${compiled.reason}`);\r\n      }\r\n      filterRe = compiled.regex;\r\n    }\r\n\r\n    if (input.service) {\r\n      return await dockerLogs(input.service, lines, filterRe, cwd, opts.signal);\r\n    }\r\n\r\n    if (input.path) {\r\n      return await fileLogs(safeResolve(input.path, ctx), lines, filterRe, input.stream ?? false);\r\n    }\r\n\r\n    return {\r\n      source: 'none',\r\n      entries: [],\r\n      total: 0,\r\n      truncated: false,\r\n      stream_mode: false,\r\n    };\r\n  },\r\n};\r\n\r\nasync function dockerLogs(\r\n  service: string,\r\n  lines: number,\r\n  filterRe: RegExp | null,\r\n  cwd: string,\r\n  signal: AbortSignal,\r\n  since?: string,\r\n): Promise<LogsOutput> {\r\n  const args = ['logs'];\r\n  if (lines > 0) args.push('--tail', String(lines));\r\n  if (since) {\r\n    const sinceMap: Record<string, string> = { '1h': '1h', '6h': '6h', '24h': '24h' };\r\n    args.push('--since', sinceMap[since] ?? '1h');\r\n  }\r\n  args.push('--timestamps', service);\r\n\r\n  return new Promise((resolve) => {\r\n    let stdout = '';\r\n    let stderr = '';\r\n    const MAX = 200_000;\r\n\r\n    const child = spawn('docker', args, { cwd, signal, stdio: ['ignore', 'pipe', 'pipe'] });\r\n    child.stdout?.on('data', (c) => { if (stdout.length < MAX) stdout += c.toString(); });\r\n    child.stderr?.on('data', (c) => { if (stderr.length < MAX) stderr += c.toString(); });\r\n    child.on('close', (code) => {\r\n      const output = stdout + stderr;\r\n      const entries = parseLogLines(output, filterRe);\r\n      resolve({\r\n        source: `docker:${service}`,\r\n        entries,\r\n        total: entries.length,\r\n        truncated: output.length >= MAX,\r\n        stream_mode: false,\r\n      });\r\n    });\r\n    child.on('error', (e) => resolve({\r\n      source: `docker:${service}`,\r\n      entries: [],\r\n      total: 0,\r\n      truncated: false,\r\n      stream_mode: false,\r\n    }));\r\n  });\r\n}\r\n\r\n// Hard cap on tail-window size — `lines: 0` historically meant \"all\" and\r\n// happily buffered an entire multi-GB log into memory. Cap at 100k lines;\r\n// callers that need more should narrow with `filter`.\r\nconst MAX_TAIL_LINES = 100_000;\r\n\r\nasync function fileLogs(\r\n  path: string,\r\n  lines: number,\r\n  filterRe: RegExp | null,\r\n  stream: boolean,\r\n): Promise<LogsOutput> {\r\n  const { createInterface } = await import('node:readline');\r\n  const { createReadStream } = await import('node:fs');\r\n  const entries: LogEntry[] = [];\r\n\r\n  // Effective tail window: clamp to MAX_TAIL_LINES; treat 0 / negative as\r\n  // \"max window\" rather than \"unlimited\" so a malicious /proc/kcore path\r\n  // cannot OOM the worker.\r\n  const effLines = lines > 0 ? Math.min(lines, MAX_TAIL_LINES) : MAX_TAIL_LINES;\r\n  // Rolling window backed by a fixed-size circular buffer — at most\r\n  // `effLines` strings live in memory regardless of file size.\r\n  const window: string[] = new Array(effLines);\r\n  let writeIdx = 0;\r\n  let totalLines = 0;\r\n\r\n  const rl = createInterface({\r\n    input: createReadStream(path),\r\n    crlfDelay: Number.POSITIVE_INFINITY,\r\n  });\r\n\r\n  for await (const line of rl) {\r\n    if (filterRe && !filterRe.test(line)) continue;\r\n    window[writeIdx] = line;\r\n    writeIdx = (writeIdx + 1) % effLines;\r\n    totalLines++;\r\n  }\r\n\r\n  // Read the window back in arrival order.\r\n  const ordered: string[] = [];\r\n  const start = totalLines >= effLines ? writeIdx : 0;\r\n  const count = Math.min(totalLines, effLines);\r\n  for (let i = 0; i < count; i++) {\r\n    const v = window[(start + i) % effLines];\r\n    if (v !== undefined) ordered.push(v);\r\n  }\r\n\r\n  for (const line of ordered) {\r\n    const parsed = parseLine(line);\r\n    if (parsed) entries.push(parsed);\r\n  }\r\n\r\n  return {\r\n    source: path,\r\n    entries,\r\n    total: entries.length,\r\n    truncated: totalLines > effLines,\r\n    stream_mode: stream,\r\n  };\r\n}\r\n\r\nfunction parseLogLines(output: string, filterRe: RegExp | null): LogEntry[] {\r\n  const lines = output.split('\\n').filter(Boolean);\r\n  const entries: LogEntry[] = [];\r\n\r\n  for (const line of lines) {\r\n    if (filterRe && !filterRe.test(line)) continue;\r\n    const parsed = parseLine(line);\r\n    if (parsed) entries.push(parsed);\r\n  }\r\n\r\n  return entries;\r\n}\r\n\r\nfunction parseLine(line: string): LogEntry | null {\r\n  const tsRe = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z?)\\s+(?:\\[?(\\w+)\\]?)\\s*(.*)/;\r\n  const match = tsRe.exec(line);\r\n\r\n  if (match) {\r\n    return {\r\n      timestamp: match[1] ?? '',\r\n      level: match[2]?.toLowerCase() ?? 'info',\r\n      message: match[3] ?? '',\r\n    };\r\n  }\r\n\r\n  const levelRe = /(?:ERROR|WARN|INFO|DEBUG|TRACE)\\s+(.*)/i;\r\n  const levelMatch = levelRe.exec(line);\r\n\r\n  if (levelMatch) {\r\n    return {\r\n      timestamp: '',\r\n      level: levelMatch[1]?.toLowerCase() ?? 'info',\r\n      message: levelMatch[2] ?? line,\r\n    };\r\n  }\r\n\r\n  return {\r\n    timestamp: '',\r\n    level: 'info',\r\n    message: line,\r\n  };\r\n}"]}

package/dist/outdated.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/_util.ts","../src/outdated.ts"],"names":["resolve","spawn"],"mappings":";;;;;;;;;AAIO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACQO,IAAM,YAAA,GAAoD;AAAA,EAC/D,IAAA,EAAM,UAAA;AAAA,EACN,WAAA,EACE,8EAAA;AAAA,EACF,SAAA,EACE,qHAAA;AAAA,EACF,UAAA,EAAY,MAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA,EAAmC;AAAA,MACvE,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,MAAA,EAAQ,OAAO,CAAA;AAAA,QACtB,WAAA,EAAa;AAAA,OACf;AAAA,MACA,kBAAA,EAAoB;AAAA,QAClB,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA;AACf;AACF,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,GAAG,CAAA;AAEvC,IAAA,MAAM,IAAA,GAAiB,CAAC,UAAA,EAAY,QAAQ,CAAA;AAC5C,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,EAAS,IAAA,CAAK,KAAK,SAAS,CAAA;AACjD,IAAA,IAAI,KAAA,CAAM,kBAAA,EAAoB,IAAA,CAAK,IAAA,CAAK,aAAa,YAAY,CAAA;AAEjE,IAAA,OAAO,WAAA,CAAY,OAAA,EAAS,IAAA,EAAM,GAAA,EAAK,KAAK,MAAM,CAAA;AAAA,EACpD;AACF;AAEA,eAAe,cAAc,GAAA,EAA8B;AACzD,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,SAAA,CAAQ,aAAkB,CAAA;AAC3C,EAAA,IAAI;AAAE,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,eAAA,CAAiB,CAAA;AAAG,IAAA,OAAO,MAAA;AAAA,EAAQ,CAAA,CAAA,MAAQ;AAAA,EAAQ;AAC1E,EAAA,IAAI;AAAE,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA;AAAG,IAAA,OAAO,MAAA;AAAA,EAAQ,CAAA,CAAA,MAAQ;AAAA,EAAQ;AACrE,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CACP,OAAA,EACA,IAAA,EACA,GAAA,EACA,MAAA,EACyB;AACzB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,MAAM,KAAA,GAAQC,KAAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AACrF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,MAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,MAAA,EAAQ,IAAA,IAAQ,CAAC,CAAA;AACpD,MAAAD,SAAQ,MAAM,CAAA;AAAA,IAChB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,QAAAA,CAAQ;AAAA,MAC/B,SAAA,EAAW,CAAA;AAAA,MACX,UAAU,EAAC;AAAA,MACX,KAAA,EAAO,CAAA;AAAA,MACP,QAAQ,CAAA,CAAE,OAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAC,CAAA;AAAA,EACJ,CAAC,CAAA;AACH;AAEA,SAAS,mBAAA,CAAoB,MAAc,QAAA,EAAkC;AAC3E,EAAA,MAAM,WAA8B,EAAC;AAErC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,QAAA;AAAA,MACX,UAAU,EAAC;AAAA,MACX,KAAA,EAAO,CAAA;AAAA,MACP,MAAA,EAAQ,QAAA,KAAa,CAAA,GAAI,yBAAA,GAA4B,mCAAA;AAAA,MACrD,SAAA,EAAW;AAAA,KACb;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC5B,IAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAG;AACpC,MAAA,MAAM,IAAA,GAAO,KAAK,IAAI,CAAA;AACtB,MAAA,QAAA,CAAS,IAAA,CAAK;AAAA,QACZ,IAAA;AAAA,QACA,OAAA,EAAS,KAAK,OAAA,IAAW,SAAA;AAAA,QACzB,MAAA,EAAQ,KAAK,MAAA,IAAU,SAAA;AAAA,QACvB,MAAA,EAAQ,KAAK,MAAA,IAAU,SAAA;AAAA,QACvB,IAAA,EAAM,KAAK,IAAA,IAAQ,SAAA;AAAA,QACnB,QAAA,EAAU,KAAK,QAAA,IAAY;AAAA,OAC5B,CAAA;AAAA,IACH;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,QAAA;AAAA,IACX,QAAA;AAAA,IACA,OAAO,QAAA,CAAS,MAAA;AAAA,IAChB,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW,KAAK,MAAA,IAAU;AAAA,GAC5B;AACF","file":"outdated.js","sourcesContent":["import * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Context, ToolProgressEvent } from '@wrongstack/core';\r\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface SpawnStreamResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n  truncated: boolean;\r\n  error?: string;\r\n}\r\n\r\nexport interface SpawnStreamOptions {\r\n  cmd: string;\r\n  args: string[];\r\n  cwd: string;\r\n  signal: AbortSignal;\r\n  maxBytes?: number;\r\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\r\n  flushBytes?: number;\r\n}\r\n\r\n/**\r\n * Spawn a child process and yield `partial_output` progress events as\r\n * stdout/stderr arrive (batched by byte threshold), then return the full\r\n * buffered result. Shared between install/lint/format/typecheck/test/audit\r\n * so the TUI live tail sees consistent progress regardless of which tool\r\n * is running.\r\n */\r\nexport async function* spawnStream(\r\n  opts: SpawnStreamOptions,\r\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\r\n  const max = opts.maxBytes ?? 200_000;\r\n  const flushAt = opts.flushBytes ?? 4 * 1024;\r\n  let stdout = '';\r\n  let stderr = '';\r\n  let pending = '';\r\n  let error: string | undefined;\r\n\r\n  const child = spawn(opts.cmd, opts.args, {\r\n    cwd: opts.cwd,\r\n    signal: opts.signal,\r\n    stdio: ['ignore', 'pipe', 'pipe'],\r\n  });\r\n\r\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\r\n  const queue: Chunk[] = [];\r\n  let waiter: (() => void) | undefined;\r\n  const wake = () => {\r\n    if (waiter) {\r\n      const w = waiter;\r\n      waiter = undefined;\r\n      w();\r\n    }\r\n  };\r\n\r\n  child.stdout?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stdout.length < max) stdout += s;\r\n    queue.push({ kind: 'out', data: s });\r\n    wake();\r\n  });\r\n  child.stderr?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stderr.length < max) stderr += s;\r\n    queue.push({ kind: 'err', data: s });\r\n    wake();\r\n  });\r\n  child.on('error', (e) => {\r\n    error = e.message;\r\n    queue.push({ kind: 'error', data: e.message });\r\n    wake();\r\n  });\r\n  child.on('close', (code) => {\r\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\r\n    wake();\r\n  });\r\n\r\n  let exitCode = 0;\r\n  let spawnFailed = false;\r\n  for (;;) {\r\n    while (queue.length === 0) {\r\n      await new Promise<void>((resolve) => {\r\n        waiter = resolve;\r\n      });\r\n    }\r\n    const chunk = queue.shift()!;\r\n    if (chunk.kind === 'close') {\r\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\r\n      // rather than the negative platform code Node fabricates.\r\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\r\n      break;\r\n    }\r\n    if (chunk.kind === 'error') {\r\n      spawnFailed = true;\r\n      exitCode = 1;\r\n      // close usually follows\r\n      continue;\r\n    }\r\n    pending += chunk.data;\r\n    if (pending.length >= flushAt) {\r\n      yield { type: 'partial_output', text: pending };\r\n      pending = '';\r\n    }\r\n  }\r\n  if (pending.length > 0) {\r\n    yield { type: 'partial_output', text: pending };\r\n  }\r\n\r\n  return {\r\n    stdout,\r\n    stderr,\r\n    exitCode,\r\n    truncated: stdout.length >= max || stderr.length >= max,\r\n    error,\r\n  };\r\n}\r\n","import { spawn } from 'node:child_process';\nimport type { Tool } from '@wrongstack/core';\nimport { safeResolve } from './_util.js';\n\ninterface OutdatedInput {\n  cwd?: string;\n  format?: 'list' | 'table';\n  include_deprecated?: boolean;\n  check?: string | string[];\n}\n\ninterface OutdatedPackage {\n  name: string;\n  current: string;\n  latest: string;\n  wanted: string;\n  type: string;\n  location: string;\n}\n\ninterface OutdatedOutput {\n  exit_code: number;\n  packages: OutdatedPackage[];\n  total: number;\n  output: string;\n  truncated: boolean;\n}\n\nexport const outdatedTool: Tool<OutdatedInput, OutdatedOutput> = {\n  name: 'outdated',\n  description:\n    'Check for outdated npm packages. Shows current, wanted, and latest versions.',\n  usageHint:\n    'Set `check` to filter specific packages. `format` as list or table. `include_deprecated` shows deprecated packages.',\n  permission: 'auto',\n  mutating: false,\n  timeoutMs: 60_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\n      format: {\n        type: 'string',\n        enum: ['list', 'table'],\n        description: 'Output format (default: list)',\n      },\n      include_deprecated: {\n        type: 'boolean',\n        description: 'Include deprecated packages (default: false)',\n      },\n      check: {\n        type: 'string',\n        description: 'Specific package(s) to check (comma-separated)',\n      },\n    },\n  },\n  async execute(input, ctx, opts) {\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\n    const manager = await detectManager(cwd);\n\n    const args: string[] = ['outdated', '--json'];\n    if (input.format === 'table') args.push('--table');\n    if (input.include_deprecated) args.push('--include', 'deprecated');\n\n    return runOutdated(manager, args, cwd, opts.signal);\n  },\n};\n\nasync function detectManager(cwd: string): Promise<string> {\n  const { stat } = require('node:fs/promises');\n  try { await stat(`${cwd}/pnpm-lock.yaml`); return 'pnpm'; } catch { /* */ }\n  try { await stat(`${cwd}/yarn.lock`); return 'yarn'; } catch { /* */ }\n  return 'npm';\n}\n\nfunction runOutdated(\n  manager: string,\n  args: string[],\n  cwd: string,\n  signal: AbortSignal,\n): Promise<OutdatedOutput> {\n  return new Promise((resolve) => {\n    let stdout = '';\n    let stderr = '';\n    const MAX = 100_000;\n\n    const child = spawn(manager, args, { cwd, signal, stdio: ['ignore', 'pipe', 'pipe'] });\n    child.stdout?.on('data', (c) => { if (stdout.length < MAX) stdout += c.toString(); });\n    child.stderr?.on('data', (c) => { if (stderr.length < MAX) stderr += c.toString(); });\n    child.on('close', (code) => {\n      const result = parseOutdatedOutput(stdout, code ?? 0);\n      resolve(result);\n    });\n    child.on('error', (e) => resolve({\n      exit_code: 1,\n      packages: [],\n      total: 0,\n      output: e.message,\n      truncated: false,\n    }));\n  });\n}\n\nfunction parseOutdatedOutput(json: string, exitCode: number): OutdatedOutput {\n  const packages: OutdatedPackage[] = [];\n\n  if (!json) {\n    return {\n      exit_code: exitCode,\n      packages: [],\n      total: 0,\n      output: exitCode === 0 ? 'All packages up to date' : 'Could not check outdated packages',\n      truncated: false,\n    };\n  }\n\n  try {\n    const data = JSON.parse(json);\n    for (const name of Object.keys(data)) {\n      const info = data[name];\n      packages.push({\n        name,\n        current: info.current ?? 'unknown',\n        latest: info.latest ?? 'unknown',\n        wanted: info.wanted ?? 'unknown',\n        type: info.type ?? 'unknown',\n        location: info.location ?? name,\n      });\n    }\n  } catch {\n    // JSON parse failed, return raw output\n  }\n\n  return {\n    exit_code: exitCode,\n    packages,\n    total: packages.length,\n    output: json,\n    truncated: json.length >= 100_000,\n  };\n}"]}
+{"version":3,"sources":["../src/_util.ts","../src/outdated.ts"],"names":["resolve"],"mappings":";;;;;;;;;AAGO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACSO,IAAM,YAAA,GAAoD;AAAA,EAC/D,IAAA,EAAM,UAAA;AAAA,EACN,WAAA,EACE,8EAAA;AAAA,EACF,SAAA,EACE,qHAAA;AAAA,EACF,UAAA,EAAY,MAAA;AAAA,EACZ,QAAA,EAAU,KAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA,EAAmC;AAAA,MACvE,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,MAAA,EAAQ,OAAO,CAAA;AAAA,QACtB,WAAA,EAAa;AAAA,OACf;AAAA,MACA,kBAAA,EAAoB;AAAA,QAClB,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA;AACf;AACF,GACF;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,GAAM,WAAA,CAAY,MAAM,GAAA,EAAK,GAAG,IAAI,GAAA,CAAI,GAAA;AAC1D,IAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,GAAG,CAAA;AAEvC,IAAA,MAAM,IAAA,GAAiB,CAAC,UAAA,EAAY,QAAQ,CAAA;AAC5C,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,EAAS,IAAA,CAAK,KAAK,SAAS,CAAA;AACjD,IAAA,IAAI,KAAA,CAAM,kBAAA,EAAoB,IAAA,CAAK,IAAA,CAAK,aAAa,YAAY,CAAA;AAEjE,IAAA,OAAO,WAAA,CAAY,OAAA,EAAS,IAAA,EAAM,GAAA,EAAK,KAAK,MAAM,CAAA;AAAA,EACpD;AACF;AAEA,eAAe,cAAc,GAAA,EAA8B;AACzD,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,SAAA,CAAQ,aAAkB,CAAA;AAC3C,EAAA,IAAI;AAAE,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,eAAA,CAAiB,CAAA;AAAG,IAAA,OAAO,MAAA;AAAA,EAAQ,CAAA,CAAA,MAAQ;AAAA,EAAQ;AAC1E,EAAA,IAAI;AAAE,IAAA,MAAM,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA;AAAG,IAAA,OAAO,MAAA;AAAA,EAAQ,CAAA,CAAA,MAAQ;AAAA,EAAQ;AACrE,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAA,CACP,OAAA,EACA,IAAA,EACA,GAAA,EACA,MAAA,EACyB;AACzB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,GAAG,CAAA;AACrF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,MAAA,CAAO,MAAA,GAAS,GAAA,EAAK,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AACpF,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AAC1B,MAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,MAAA,EAAQ,IAAA,IAAQ,CAAC,CAAA;AACpD,MAAAA,SAAQ,MAAM,CAAA;AAAA,IAChB,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,QAAAA,CAAQ;AAAA,MAC/B,SAAA,EAAW,CAAA;AAAA,MACX,UAAU,EAAC;AAAA,MACX,KAAA,EAAO,CAAA;AAAA,MACP,QAAQ,CAAA,CAAE,OAAA;AAAA,MACV,SAAA,EAAW;AAAA,KACZ,CAAC,CAAA;AAAA,EACJ,CAAC,CAAA;AACH;AAEA,SAAS,mBAAA,CAAoB,MAAc,QAAA,EAAkC;AAC3E,EAAA,MAAM,WAA8B,EAAC;AAErC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,QAAA;AAAA,MACX,UAAU,EAAC;AAAA,MACX,KAAA,EAAO,CAAA;AAAA,MACP,MAAA,EAAQ,QAAA,KAAa,CAAA,GAAI,yBAAA,GAA4B,mCAAA;AAAA,MACrD,SAAA,EAAW;AAAA,KACb;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC5B,IAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAG;AACpC,MAAA,MAAM,IAAA,GAAO,KAAK,IAAI,CAAA;AACtB,MAAA,QAAA,CAAS,IAAA,CAAK;AAAA,QACZ,IAAA;AAAA,QACA,OAAA,EAAS,KAAK,OAAA,IAAW,SAAA;AAAA,QACzB,MAAA,EAAQ,KAAK,MAAA,IAAU,SAAA;AAAA,QACvB,MAAA,EAAQ,KAAK,MAAA,IAAU,SAAA;AAAA,QACvB,IAAA,EAAM,KAAK,IAAA,IAAQ,SAAA;AAAA,QACnB,QAAA,EAAU,KAAK,QAAA,IAAY;AAAA,OAC5B,CAAA;AAAA,IACH;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,QAAA;AAAA,IACX,QAAA;AAAA,IACA,OAAO,QAAA,CAAS,MAAA;AAAA,IAChB,MAAA,EAAQ,IAAA;AAAA,IACR,SAAA,EAAW,KAAK,MAAA,IAAU;AAAA,GAC5B;AACF","file":"outdated.js","sourcesContent":["import * as path from 'node:path';\nimport type { Context } from '@wrongstack/core';\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n","import { spawn } from 'node:child_process';\nimport type { Tool } from '@wrongstack/core';\nimport { safeResolve } from './_util.js';\n\ninterface OutdatedInput {\n  cwd?: string;\n  format?: 'list' | 'table';\n  include_deprecated?: boolean;\n  check?: string | string[];\n}\n\ninterface OutdatedPackage {\n  name: string;\n  current: string;\n  latest: string;\n  wanted: string;\n  type: string;\n  location: string;\n}\n\ninterface OutdatedOutput {\n  exit_code: number;\n  packages: OutdatedPackage[];\n  total: number;\n  output: string;\n  truncated: boolean;\n}\n\nexport const outdatedTool: Tool<OutdatedInput, OutdatedOutput> = {\n  name: 'outdated',\n  description:\n    'Check for outdated npm packages. Shows current, wanted, and latest versions.',\n  usageHint:\n    'Set `check` to filter specific packages. `format` as list or table. `include_deprecated` shows deprecated packages.',\n  permission: 'auto',\n  mutating: false,\n  timeoutMs: 60_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      cwd: { type: 'string', description: 'Working directory (default: cwd)' },\n      format: {\n        type: 'string',\n        enum: ['list', 'table'],\n        description: 'Output format (default: list)',\n      },\n      include_deprecated: {\n        type: 'boolean',\n        description: 'Include deprecated packages (default: false)',\n      },\n      check: {\n        type: 'string',\n        description: 'Specific package(s) to check (comma-separated)',\n      },\n    },\n  },\n  async execute(input, ctx, opts) {\n    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;\n    const manager = await detectManager(cwd);\n\n    const args: string[] = ['outdated', '--json'];\n    if (input.format === 'table') args.push('--table');\n    if (input.include_deprecated) args.push('--include', 'deprecated');\n\n    return runOutdated(manager, args, cwd, opts.signal);\n  },\n};\n\nasync function detectManager(cwd: string): Promise<string> {\n  const { stat } = require('node:fs/promises');\n  try { await stat(`${cwd}/pnpm-lock.yaml`); return 'pnpm'; } catch { /* */ }\n  try { await stat(`${cwd}/yarn.lock`); return 'yarn'; } catch { /* */ }\n  return 'npm';\n}\n\nfunction runOutdated(\n  manager: string,\n  args: string[],\n  cwd: string,\n  signal: AbortSignal,\n): Promise<OutdatedOutput> {\n  return new Promise((resolve) => {\n    let stdout = '';\n    let stderr = '';\n    const MAX = 100_000;\n\n    const child = spawn(manager, args, { cwd, signal, stdio: ['ignore', 'pipe', 'pipe'] });\n    child.stdout?.on('data', (c) => { if (stdout.length < MAX) stdout += c.toString(); });\n    child.stderr?.on('data', (c) => { if (stderr.length < MAX) stderr += c.toString(); });\n    child.on('close', (code) => {\n      const result = parseOutdatedOutput(stdout, code ?? 0);\n      resolve(result);\n    });\n    child.on('error', (e) => resolve({\n      exit_code: 1,\n      packages: [],\n      total: 0,\n      output: e.message,\n      truncated: false,\n    }));\n  });\n}\n\nfunction parseOutdatedOutput(json: string, exitCode: number): OutdatedOutput {\n  const packages: OutdatedPackage[] = [];\n\n  if (!json) {\n    return {\n      exit_code: exitCode,\n      packages: [],\n      total: 0,\n      output: exitCode === 0 ? 'All packages up to date' : 'Could not check outdated packages',\n      truncated: false,\n    };\n  }\n\n  try {\n    const data = JSON.parse(json);\n    for (const name of Object.keys(data)) {\n      const info = data[name];\n      packages.push({\n        name,\n        current: info.current ?? 'unknown',\n        latest: info.latest ?? 'unknown',\n        wanted: info.wanted ?? 'unknown',\n        type: info.type ?? 'unknown',\n        location: info.location ?? name,\n      });\n    }\n  } catch {\n    // JSON parse failed, return raw output\n  }\n\n  return {\n    exit_code: exitCode,\n    packages,\n    total: packages.length,\n    output: json,\n    truncated: json.length >= 100_000,\n  };\n}"]}

package/dist/patch.js

@@ -40,51 +40,90 @@ var patchTool = {
   async execute(input, ctx, opts) {
     if (!input?.patch) throw new Error("patch: patch content is required");
     const dir = input.directory ? safeResolve(input.directory, ctx) : ctx.cwd;
-    const strip = input.strip ?? 1;
+    const strip = Math.max(1, input.strip ?? 1);
     const dryRun = input.dry_run ?? false;
-    const patchFile = path.join(dir, `.wstack_patch_${Date.now()}.diff`);
-    await fs.writeFile(patchFile, input.patch, "utf8");
-    const args = [
-      "-p" + strip,
-      "--merge",
-      ...dryRun ? ["--dry-run"] : [],
-      "-i",
-      patchFile
-    ];
-    const result = await runPatch(args, dir, opts.signal);
-    await fs.unlink(patchFile).catch(() => {
-    });
-    if (result.exitCode !== 0 && !dryRun) {
+    const targets = extractDiffTargets(input.patch);
+    for (const t of targets) {
+      const stripped = stripPathComponents(t, strip);
+      if (!stripped) continue;
+      const candidate = path.resolve(dir, stripped);
+      const rel = path.relative(ctx.projectRoot, candidate);
+      if (rel.startsWith("..") || path.isAbsolute(rel)) {
+        return {
+          applied: 0,
+          rejected: 1,
+          files: [],
+          dry_run: dryRun,
+          message: `patch refused: target "${t}" resolves outside project root`
+        };
+      }
+    }
+    const tmpDir = await fs.mkdtemp(path.join(dir, ".wstack_patch_"));
+    try {
+      await fs.chmod(tmpDir, 448).catch(() => {
+      });
+      const patchFile = path.join(tmpDir, "in.diff");
+      await fs.writeFile(patchFile, input.patch, { mode: 384 });
+      const args = [
+        `-p${strip}`,
+        "--merge",
+        ...dryRun ? ["--dry-run"] : [],
+        "-i",
+        patchFile
+      ];
+      const result = await runPatch(args, dir, opts.signal);
+      if (result.exitCode !== 0 && !dryRun) {
+        return {
+          applied: 0,
+          rejected: 1,
+          files: [],
+          dry_run: dryRun,
+          message: `patch failed: ${result.stderr || result.stdout}`
+        };
+      }
+      const patched = extractPatchedFiles(result.stdout);
       return {
-        applied: 0,
-        rejected: 1,
-        files: [],
+        applied: patched.length,
+        rejected: 0,
+        files: patched,
         dry_run: dryRun,
-        message: `patch failed: ${result.stderr || result.stdout}`
+        message: result.stdout || "patch applied"
       };
+    } finally {
+      await fs.rm(tmpDir, { recursive: true, force: true }).catch(() => {
+      });
     }
-    return {
-      applied: result.stdout.includes("patching file") ? 1 : 0,
-      rejected: 0,
-      files: extractPatchedFiles(result.stdout),
-      dry_run: dryRun,
-      message: result.stdout || "patch applied"
-    };
   }
 };
+function extractDiffTargets(patch) {
+  const out = [];
+  const re = /^\+\+\+\s+([^\t\r\n]+)/gm;
+  for (const m of patch.matchAll(re)) {
+    const target = m[1]?.trim();
+    if (!target || target === "/dev/null") continue;
+    out.push(target);
+  }
+  return out;
+}
+function stripPathComponents(p, strip) {
+  const parts = p.replace(/\\/g, "/").split("/");
+  if (parts.length <= strip) return void 0;
+  return parts.slice(strip).join("/");
+}
 function runPatch(args, cwd, signal) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     let stdout = "";
     let stderr = "";
-    const child = spawn("patch", args, { cwd, signal, stdio: ["pipe", "pipe", "pipe"] });
+    const env = { ...process.env, LANG: "C", LC_ALL: "C" };
+    const child = spawn("patch", args, { cwd, signal, env, stdio: ["pipe", "pipe", "pipe"] });
     child.stdout?.on("data", (c) => {
       stdout += c.toString();
     });
     child.stderr?.on("data", (c) => {
       stderr += c.toString();
     });
-    child.on("close", (code) => resolve2({ exitCode: code ?? 1, stdout, stderr }));
-    child.on("error", (e) => resolve2({ exitCode: 1, stdout: "", stderr: e.message }));
+    child.on("close", (code) => resolve3({ exitCode: code ?? 1, stdout, stderr }));
+    child.on("error", (e) => resolve3({ exitCode: 1, stdout: "", stderr: e.message }));
   });
 }
 function extractPatchedFiles(output) {

package/dist/patch.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/_util.ts","../src/patch.ts"],"names":["path2","resolve","spawn"],"mappings":";;;;;AAIO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACCO,IAAM,SAAA,GAA2C;AAAA,EACtD,IAAA,EAAM,OAAA;AAAA,EACN,WAAA,EACE,8EAAA;AAAA,EACF,SAAA,EACE,wHAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,4BAAA,EAA6B;AAAA,MACnE,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,yCAAA,EAA0C;AAAA,MACpF,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,4CAAA,EAA6C;AAAA,MACpF,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,0BAAA;AAA2B,KACtE;AAAA,IACA,QAAA,EAAU,CAAC,OAAO;AAAA,GACpB;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,CAAC,KAAA,EAAO,KAAA,EAAO,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAErE,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,GAAY,WAAA,CAAY,MAAM,SAAA,EAAW,GAAG,IAAI,GAAA,CAAI,GAAA;AACtE,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,CAAA;AAC7B,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,IAAW,KAAA;AAEhC,IAAA,MAAM,YAAiBA,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,iBAAiB,IAAA,CAAK,GAAA,EAAK,CAAA,KAAA,CAAO,CAAA;AACnE,IAAA,MAAS,EAAA,CAAA,SAAA,CAAU,SAAA,EAAW,KAAA,CAAM,KAAA,EAAO,MAAM,CAAA;AAEjD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,IAAA,GAAO,KAAA;AAAA,MACP,SAAA;AAAA,MACA,GAAI,MAAA,GAAS,CAAC,WAAW,IAAI,EAAC;AAAA,MAC9B,IAAA;AAAA,MAAM;AAAA,KACR;AAEA,IAAA,MAAM,SAAS,MAAM,QAAA,CAAS,IAAA,EAAM,GAAA,EAAK,KAAK,MAAM,CAAA;AACpD,IAAA,MAAS,EAAA,CAAA,MAAA,CAAO,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAEzC,IAAA,IAAI,MAAA,CAAO,QAAA,KAAa,CAAA,IAAK,CAAC,MAAA,EAAQ;AACpC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA;AAAA,QACT,QAAA,EAAU,CAAA;AAAA,QACV,OAAO,EAAC;AAAA,QACR,OAAA,EAAS,MAAA;AAAA,QACT,OAAA,EAAS,CAAA,cAAA,EAAiB,MAAA,CAAO,MAAA,IAAU,OAAO,MAAM,CAAA;AAAA,OAC1D;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,SAAS,MAAA,CAAO,MAAA,CAAO,QAAA,CAAS,eAAe,IAAI,CAAA,GAAI,CAAA;AAAA,MACvD,QAAA,EAAU,CAAA;AAAA,MACV,KAAA,EAAO,mBAAA,CAAoB,MAAA,CAAO,MAAM,CAAA;AAAA,MACxC,OAAA,EAAS,MAAA;AAAA,MACT,OAAA,EAAS,OAAO,MAAA,IAAU;AAAA,KAC5B;AAAA,EACF;AACF;AAEA,SAAS,QAAA,CAAS,IAAA,EAAgB,GAAA,EAAa,MAAA,EAAoF;AACjI,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACC,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AAEb,IAAA,MAAM,KAAA,GAAQC,KAAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,GAAG,CAAA;AACnF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AAC3D,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AAC3D,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAASD,QAAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAC5E,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,SAAQ,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,EAAA,EAAI,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAS,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA;AACH;AAEA,SAAS,oBAAoB,MAAA,EAA0B;AACrD,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,EAAA,GAAK,sBAAA;AACX,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,EAAG;AACnC,IAAA,IAAI,EAAE,CAAC,CAAA,QAAS,IAAA,CAAK,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,KAAA;AACT","file":"patch.js","sourcesContent":["import * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Context, ToolProgressEvent } from '@wrongstack/core';\r\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\nexport interface SpawnStreamResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n  truncated: boolean;\r\n  error?: string;\r\n}\r\n\r\nexport interface SpawnStreamOptions {\r\n  cmd: string;\r\n  args: string[];\r\n  cwd: string;\r\n  signal: AbortSignal;\r\n  maxBytes?: number;\r\n  /** Bytes of new stdout/stderr to accumulate before yielding a `partial_output` event. */\r\n  flushBytes?: number;\r\n}\r\n\r\n/**\r\n * Spawn a child process and yield `partial_output` progress events as\r\n * stdout/stderr arrive (batched by byte threshold), then return the full\r\n * buffered result. Shared between install/lint/format/typecheck/test/audit\r\n * so the TUI live tail sees consistent progress regardless of which tool\r\n * is running.\r\n */\r\nexport async function* spawnStream(\r\n  opts: SpawnStreamOptions,\r\n): AsyncGenerator<ToolProgressEvent, SpawnStreamResult> {\r\n  const max = opts.maxBytes ?? 200_000;\r\n  const flushAt = opts.flushBytes ?? 4 * 1024;\r\n  let stdout = '';\r\n  let stderr = '';\r\n  let pending = '';\r\n  let error: string | undefined;\r\n\r\n  const child = spawn(opts.cmd, opts.args, {\r\n    cwd: opts.cwd,\r\n    signal: opts.signal,\r\n    stdio: ['ignore', 'pipe', 'pipe'],\r\n  });\r\n\r\n  type Chunk = { kind: 'out' | 'err' | 'close' | 'error'; data: string; code?: number };\r\n  const queue: Chunk[] = [];\r\n  let waiter: (() => void) | undefined;\r\n  const wake = () => {\r\n    if (waiter) {\r\n      const w = waiter;\r\n      waiter = undefined;\r\n      w();\r\n    }\r\n  };\r\n\r\n  child.stdout?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stdout.length < max) stdout += s;\r\n    queue.push({ kind: 'out', data: s });\r\n    wake();\r\n  });\r\n  child.stderr?.on('data', (c) => {\r\n    const s = c.toString();\r\n    if (stderr.length < max) stderr += s;\r\n    queue.push({ kind: 'err', data: s });\r\n    wake();\r\n  });\r\n  child.on('error', (e) => {\r\n    error = e.message;\r\n    queue.push({ kind: 'error', data: e.message });\r\n    wake();\r\n  });\r\n  child.on('close', (code) => {\r\n    queue.push({ kind: 'close', data: '', code: code ?? 0 });\r\n    wake();\r\n  });\r\n\r\n  let exitCode = 0;\r\n  let spawnFailed = false;\r\n  for (;;) {\r\n    while (queue.length === 0) {\r\n      await new Promise<void>((resolve) => {\r\n        waiter = resolve;\r\n      });\r\n    }\r\n    const chunk = queue.shift()!;\r\n    if (chunk.kind === 'close') {\r\n      // If we already saw a spawn error (ENOENT etc.), keep exitCode=1\r\n      // rather than the negative platform code Node fabricates.\r\n      if (!spawnFailed) exitCode = chunk.code ?? 0;\r\n      break;\r\n    }\r\n    if (chunk.kind === 'error') {\r\n      spawnFailed = true;\r\n      exitCode = 1;\r\n      // close usually follows\r\n      continue;\r\n    }\r\n    pending += chunk.data;\r\n    if (pending.length >= flushAt) {\r\n      yield { type: 'partial_output', text: pending };\r\n      pending = '';\r\n    }\r\n  }\r\n  if (pending.length > 0) {\r\n    yield { type: 'partial_output', text: pending };\r\n  }\r\n\r\n  return {\r\n    stdout,\r\n    stderr,\r\n    exitCode,\r\n    truncated: stdout.length >= max || stderr.length >= max,\r\n    error,\r\n  };\r\n}\r\n","import * as fs from 'node:fs/promises';\r\nimport * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Tool } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\r\n\r\ninterface PatchInput {\r\n  patch: string;\r\n  directory?: string;\r\n  strip?: number;\r\n  dry_run?: boolean;\r\n}\r\n\r\ninterface PatchOutput {\r\n  applied: number;\r\n  rejected: number;\r\n  files: string[];\r\n  dry_run: boolean;\r\n  message: string;\r\n}\r\n\r\nexport const patchTool: Tool<PatchInput, PatchOutput> = {\r\n  name: 'patch',\r\n  description:\r\n    'Apply a unified diff patch to files. Writes .orig and .rej files on failure.',\r\n  usageHint:\r\n    'Set `patch` (the diff text). `directory` defaults to cwd. `strip` removes leading path components. `dry_run` previews.',\r\n  permission: 'confirm',\r\n  mutating: true,\r\n  timeoutMs: 30_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      patch: { type: 'string', description: 'Unified diff patch content' },\r\n      directory: { type: 'string', description: 'Root directory for patch (default: cwd)' },\r\n      strip: { type: 'integer', description: 'Strip leading path components (default: 1)' },\r\n      dry_run: { type: 'boolean', description: 'Preview without applying' },\r\n    },\r\n    required: ['patch'],\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    if (!input?.patch) throw new Error('patch: patch content is required');\r\n\r\n    const dir = input.directory ? safeResolve(input.directory, ctx) : ctx.cwd;\r\n    const strip = input.strip ?? 1;\r\n    const dryRun = input.dry_run ?? false;\r\n\r\n    const patchFile = path.join(dir, `.wstack_patch_${Date.now()}.diff`);\r\n    await fs.writeFile(patchFile, input.patch, 'utf8');\r\n\r\n    const args = [\r\n      '-p' + strip,\r\n      '--merge',\r\n      ...(dryRun ? ['--dry-run'] : []),\r\n      '-i', patchFile,\r\n    ];\r\n\r\n    const result = await runPatch(args, dir, opts.signal);\r\n    await fs.unlink(patchFile).catch(() => {});\r\n\r\n    if (result.exitCode !== 0 && !dryRun) {\r\n      return {\r\n        applied: 0,\r\n        rejected: 1,\r\n        files: [],\r\n        dry_run: dryRun,\r\n        message: `patch failed: ${result.stderr || result.stdout}`,\r\n      };\r\n    }\r\n\r\n    return {\r\n      applied: result.stdout.includes('patching file') ? 1 : 0,\r\n      rejected: 0,\r\n      files: extractPatchedFiles(result.stdout),\r\n      dry_run: dryRun,\r\n      message: result.stdout || 'patch applied',\r\n    };\r\n  },\r\n};\r\n\r\nfunction runPatch(args: string[], cwd: string, signal: AbortSignal): Promise<{ exitCode: number; stdout: string; stderr: string }> {\r\n  return new Promise((resolve) => {\r\n    let stdout = '';\r\n    let stderr = '';\r\n\r\n    const child = spawn('patch', args, { cwd, signal, stdio: ['pipe', 'pipe', 'pipe'] });\r\n    child.stdout?.on('data', (c) => { stdout += c.toString(); });\r\n    child.stderr?.on('data', (c) => { stderr += c.toString(); });\r\n    child.on('close', (code) => resolve({ exitCode: code ?? 1, stdout, stderr }));\r\n    child.on('error', (e) => resolve({ exitCode: 1, stdout: '', stderr: e.message }));\r\n  });\r\n}\r\n\r\nfunction extractPatchedFiles(output: string): string[] {\r\n  const files: string[] = [];\r\n  const re = /patching file (.+)/gi;\r\n  for (const m of output.matchAll(re)) {\r\n    if (m[1]) files.push(m[1]);\r\n  }\r\n  return files;\r\n}"]}
+{"version":3,"sources":["../src/_util.ts","../src/patch.ts"],"names":["path2","resolve"],"mappings":";;;;;AAGO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAY,IAAA,CAAA,UAAA,CAAW,KAAK,CAAA,GAAS,IAAA,CAAA,SAAA,CAAU,KAAK,CAAA,GAAS,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrF;AAEO,SAAS,gBAAA,CAAiB,SAAiB,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAY,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,MAAM,MAAA,GAAc,aAAQ,OAAO,CAAA;AACnC,EAAA,MAAM,GAAA,GAAW,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACtC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAU,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,OAAO,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,WAAA,CAAY,OAAe,GAAA,EAAsB;AAC/D,EAAA,OAAO,gBAAA,CAAiB,WAAA,CAAY,KAAA,EAAO,GAAG,GAAG,GAAG,CAAA;AACtD;;;ACEO,IAAM,SAAA,GAA2C;AAAA,EACtD,IAAA,EAAM,OAAA;AAAA,EACN,WAAA,EACE,8EAAA;AAAA,EACF,SAAA,EACE,wHAAA;AAAA,EACF,UAAA,EAAY,SAAA;AAAA,EACZ,QAAA,EAAU,IAAA;AAAA,EACV,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY;AAAA,MACV,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,4BAAA,EAA6B;AAAA,MACnE,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,yCAAA,EAA0C;AAAA,MACpF,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,4CAAA,EAA6C;AAAA,MACpF,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,aAAa,0BAAA;AAA2B,KACtE;AAAA,IACA,QAAA,EAAU,CAAC,OAAO;AAAA,GACpB;AAAA,EACA,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,IAAA,EAAM;AAC9B,IAAA,IAAI,CAAC,KAAA,EAAO,KAAA,EAAO,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAErE,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,GAAY,WAAA,CAAY,MAAM,SAAA,EAAW,GAAG,IAAI,GAAA,CAAI,GAAA;AAGtE,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAA,CAAM,SAAS,CAAC,CAAA;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,IAAW,KAAA;AAKhC,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,KAAA,CAAM,KAAK,CAAA;AAC9C,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,CAAA,EAAG,KAAK,CAAA;AAC7C,MAAA,IAAI,CAAC,QAAA,EAAU;AACf,MAAA,MAAM,SAAA,GAAiBA,IAAA,CAAA,OAAA,CAAQ,GAAA,EAAK,QAAQ,CAAA;AAC5C,MAAA,MAAM,GAAA,GAAWA,IAAA,CAAA,QAAA,CAAS,GAAA,CAAI,WAAA,EAAa,SAAS,CAAA;AACpD,MAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAUA,IAAA,CAAA,UAAA,CAAW,GAAG,CAAA,EAAG;AAChD,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,CAAA;AAAA,UACT,QAAA,EAAU,CAAA;AAAA,UACV,OAAO,EAAC;AAAA,UACR,OAAA,EAAS,MAAA;AAAA,UACT,OAAA,EAAS,0BAA0B,CAAC,CAAA,+BAAA;AAAA,SACtC;AAAA,MACF;AAAA,IACF;AAKA,IAAA,MAAM,SAAS,MAAS,EAAA,CAAA,OAAA,CAAaA,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,gBAAgB,CAAC,CAAA;AAChE,IAAA,IAAI;AACF,MAAA,MAAS,EAAA,CAAA,KAAA,CAAM,MAAA,EAAQ,GAAK,CAAA,CAAE,MAAM,MAAM;AAAA,MAA+B,CAAC,CAAA;AAC1E,MAAA,MAAM,SAAA,GAAiBA,IAAA,CAAA,IAAA,CAAK,MAAA,EAAQ,SAAS,CAAA;AAC7C,MAAA,MAAS,aAAU,SAAA,EAAW,KAAA,CAAM,OAAO,EAAE,IAAA,EAAM,KAAO,CAAA;AAE1D,MAAA,MAAM,IAAA,GAAO;AAAA,QACX,KAAK,KAAK,CAAA,CAAA;AAAA,QACV,SAAA;AAAA,QACA,GAAI,MAAA,GAAS,CAAC,WAAW,IAAI,EAAC;AAAA,QAC9B,IAAA;AAAA,QAAM;AAAA,OACR;AAEA,MAAA,MAAM,SAAS,MAAM,QAAA,CAAS,IAAA,EAAM,GAAA,EAAK,KAAK,MAAM,CAAA;AAEpD,MAAA,IAAI,MAAA,CAAO,QAAA,KAAa,CAAA,IAAK,CAAC,MAAA,EAAQ;AACpC,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,CAAA;AAAA,UACT,QAAA,EAAU,CAAA;AAAA,UACV,OAAO,EAAC;AAAA,UACR,OAAA,EAAS,MAAA;AAAA,UACT,OAAA,EAAS,CAAA,cAAA,EAAiB,MAAA,CAAO,MAAA,IAAU,OAAO,MAAM,CAAA;AAAA,SAC1D;AAAA,MACF;AAEA,MAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,MAAA,CAAO,MAAM,CAAA;AACjD,MAAA,OAAO;AAAA,QACL,SAAS,OAAA,CAAQ,MAAA;AAAA,QACjB,QAAA,EAAU,CAAA;AAAA,QACV,KAAA,EAAO,OAAA;AAAA,QACP,OAAA,EAAS,MAAA;AAAA,QACT,OAAA,EAAS,OAAO,MAAA,IAAU;AAAA,OAC5B;AAAA,IACF,CAAA,SAAE;AACA,MAAA,MAAS,EAAA,CAAA,EAAA,CAAG,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAA,EAAM,OAAO,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IACtE;AAAA,EACF;AACF;AAGA,SAAS,mBAAmB,KAAA,EAAyB;AACnD,EAAA,MAAM,MAAgB,EAAC;AAGvB,EAAA,MAAM,EAAA,GAAK,0BAAA;AACX,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,EAAE,CAAA,EAAG;AAClC,IAAA,MAAM,MAAA,GAAS,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,EAAK;AAC1B,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,KAAW,WAAA,EAAa;AACvC,IAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAIA,SAAS,mBAAA,CAAoB,GAAW,KAAA,EAAmC;AAGzE,EAAA,MAAM,QAAQ,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA,CAAE,MAAM,GAAG,CAAA;AAC7C,EAAA,IAAI,KAAA,CAAM,MAAA,IAAU,KAAA,EAAO,OAAO,MAAA;AAClC,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,KAAK,CAAA,CAAE,KAAK,GAAG,CAAA;AACpC;AAEA,SAAS,QAAA,CAAS,IAAA,EAAgB,GAAA,EAAa,MAAA,EAAoF;AACjI,EAAA,OAAO,IAAI,OAAA,CAAQ,CAACC,QAAAA,KAAY;AAC9B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AAKb,IAAA,MAAM,GAAA,GAAM,EAAE,GAAG,OAAA,CAAQ,KAAK,IAAA,EAAM,GAAA,EAAK,QAAQ,GAAA,EAAI;AACrD,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,GAAG,CAAA;AACxF,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AAC3D,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAM;AAAE,MAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,IAAG,CAAC,CAAA;AAC3D,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAASA,QAAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAC5E,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAMA,SAAQ,EAAE,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,EAAA,EAAI,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAS,CAAC,CAAA;AAAA,EAClF,CAAC,CAAA;AACH;AAEA,SAAS,oBAAoB,MAAA,EAA0B;AACrD,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,EAAA,GAAK,sBAAA;AACX,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,EAAG;AACnC,IAAA,IAAI,EAAE,CAAC,CAAA,QAAS,IAAA,CAAK,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,KAAA;AACT","file":"patch.js","sourcesContent":["import * as path from 'node:path';\nimport type { Context } from '@wrongstack/core';\n\r\nexport function resolvePath(input: string, ctx: Context): string {\r\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);\r\n}\r\n\r\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\r\n  const root = path.resolve(ctx.projectRoot);\r\n  const target = path.resolve(absPath);\r\n  const rel = path.relative(root, target);\r\n  if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n    throw new Error(`Path \"${absPath}\" is outside project root \"${root}\"`);\r\n  }\r\n  return target;\r\n}\r\n\r\nexport function safeResolve(input: string, ctx: Context): string {\r\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\r\n}\r\n\r\nexport function truncateMiddle(s: string, max: number): string {\r\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\r\n  const half = Math.floor(max / 2);\r\n  return (\r\n    s.slice(0, half) +\r\n    `\\n…[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]…\\n` +\r\n    s.slice(-half)\r\n  );\r\n}\r\n\r\nexport function isBinaryBuffer(buf: Buffer): boolean {\r\n  const len = Math.min(buf.length, 8192);\r\n  for (let i = 0; i < len; i++) {\r\n    if (buf[i] === 0) return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n","import * as fs from 'node:fs/promises';\r\nimport * as path from 'node:path';\r\nimport { spawn } from 'node:child_process';\r\nimport type { Tool } from '@wrongstack/core';\r\nimport { safeResolve } from './_util.js';\r\n\r\ninterface PatchInput {\r\n  patch: string;\r\n  directory?: string;\r\n  strip?: number;\r\n  dry_run?: boolean;\r\n}\r\n\r\ninterface PatchOutput {\r\n  applied: number;\r\n  rejected: number;\r\n  files: string[];\r\n  dry_run: boolean;\r\n  message: string;\r\n}\r\n\r\nexport const patchTool: Tool<PatchInput, PatchOutput> = {\r\n  name: 'patch',\r\n  description:\r\n    'Apply a unified diff patch to files. Writes .orig and .rej files on failure.',\r\n  usageHint:\r\n    'Set `patch` (the diff text). `directory` defaults to cwd. `strip` removes leading path components. `dry_run` previews.',\r\n  permission: 'confirm',\r\n  mutating: true,\r\n  timeoutMs: 30_000,\r\n  inputSchema: {\r\n    type: 'object',\r\n    properties: {\r\n      patch: { type: 'string', description: 'Unified diff patch content' },\r\n      directory: { type: 'string', description: 'Root directory for patch (default: cwd)' },\r\n      strip: { type: 'integer', description: 'Strip leading path components (default: 1)' },\r\n      dry_run: { type: 'boolean', description: 'Preview without applying' },\r\n    },\r\n    required: ['patch'],\r\n  },\r\n  async execute(input, ctx, opts) {\r\n    if (!input?.patch) throw new Error('patch: patch content is required');\r\n\r\n    const dir = input.directory ? safeResolve(input.directory, ctx) : ctx.cwd;\r\n    // strip=0 lets a diff address absolute paths like /etc/passwd and\r\n    // escape the project root entirely. Force >= 1.\r\n    const strip = Math.max(1, input.strip ?? 1);\r\n    const dryRun = input.dry_run ?? false;\r\n\r\n    // Pre-flight: scan diff target paths and reject any that resolve outside\r\n    // the project root. This catches `../../../etc/passwd`-style escapes\r\n    // before we hand the diff to GNU patch.\r\n    const targets = extractDiffTargets(input.patch);\r\n    for (const t of targets) {\r\n      const stripped = stripPathComponents(t, strip);\r\n      if (!stripped) continue;\r\n      const candidate = path.resolve(dir, stripped);\r\n      const rel = path.relative(ctx.projectRoot, candidate);\r\n      if (rel.startsWith('..') || path.isAbsolute(rel)) {\r\n        return {\r\n          applied: 0,\r\n          rejected: 1,\r\n          files: [],\r\n          dry_run: dryRun,\r\n          message: `patch refused: target \"${t}\" resolves outside project root`,\r\n        };\r\n      }\r\n    }\r\n\r\n    // Write the diff into a private 0700 temp directory rather than into\r\n    // the user-controlled `dir` with a predictable timestamp name. Avoids\r\n    // symlink-bait races on shared work trees.\r\n    const tmpDir = await fs.mkdtemp(path.join(dir, '.wstack_patch_'));\r\n    try {\r\n      await fs.chmod(tmpDir, 0o700).catch(() => { /* best-effort on Windows */ });\r\n      const patchFile = path.join(tmpDir, 'in.diff');\r\n      await fs.writeFile(patchFile, input.patch, { mode: 0o600 });\r\n\r\n      const args = [\r\n        `-p${strip}`,\r\n        '--merge',\r\n        ...(dryRun ? ['--dry-run'] : []),\r\n        '-i', patchFile,\r\n      ];\r\n\r\n      const result = await runPatch(args, dir, opts.signal);\r\n\r\n      if (result.exitCode !== 0 && !dryRun) {\r\n        return {\r\n          applied: 0,\r\n          rejected: 1,\r\n          files: [],\r\n          dry_run: dryRun,\r\n          message: `patch failed: ${result.stderr || result.stdout}`,\r\n        };\r\n      }\r\n\r\n      const patched = extractPatchedFiles(result.stdout);\r\n      return {\r\n        applied: patched.length,\r\n        rejected: 0,\r\n        files: patched,\r\n        dry_run: dryRun,\r\n        message: result.stdout || 'patch applied',\r\n      };\r\n    } finally {\r\n      await fs.rm(tmpDir, { recursive: true, force: true }).catch(() => {});\r\n    }\r\n  },\r\n};\r\n\r\n/** Extract every `+++ <path>` target from a unified diff. */\r\nfunction extractDiffTargets(patch: string): string[] {\r\n  const out: string[] = [];\r\n  // Matches `+++ path/to/file` and `+++ b/path/to/file` (also `a/`). Strips\r\n  // optional tab-prefixed timestamp suffixes that some diff tools emit.\r\n  const re = /^\\+\\+\\+\\s+([^\\t\\r\\n]+)/gm;\r\n  for (const m of patch.matchAll(re)) {\r\n    const target = m[1]?.trim();\r\n    if (!target || target === '/dev/null') continue;\r\n    out.push(target);\r\n  }\r\n  return out;\r\n}\r\n\r\n/** Mimic `patch -pN` path stripping on a single target. Returns undefined\r\n *  if the path has fewer segments than `strip`. */\r\nfunction stripPathComponents(p: string, strip: number): string | undefined {\r\n  // Normalize separators so the count works on both POSIX and Windows-style\r\n  // paths embedded in LLM-generated diffs.\r\n  const parts = p.replace(/\\\\/g, '/').split('/');\r\n  if (parts.length <= strip) return undefined;\r\n  return parts.slice(strip).join('/');\r\n}\r\n\r\nfunction runPatch(args: string[], cwd: string, signal: AbortSignal): Promise<{ exitCode: number; stdout: string; stderr: string }> {\r\n  return new Promise((resolve) => {\r\n    let stdout = '';\r\n    let stderr = '';\r\n\r\n    // Force C locale so `extractPatchedFiles` (which greps for the English\r\n    // \"patching file\" prefix) doesn't silently miss-count on systems with\r\n    // localized GNU patch output (fr/de/es etc.).\r\n    const env = { ...process.env, LANG: 'C', LC_ALL: 'C' };\r\n    const child = spawn('patch', args, { cwd, signal, env, stdio: ['pipe', 'pipe', 'pipe'] });\r\n    child.stdout?.on('data', (c) => { stdout += c.toString(); });\r\n    child.stderr?.on('data', (c) => { stderr += c.toString(); });\r\n    child.on('close', (code) => resolve({ exitCode: code ?? 1, stdout, stderr }));\r\n    child.on('error', (e) => resolve({ exitCode: 1, stdout: '', stderr: e.message }));\r\n  });\r\n}\r\n\r\nfunction extractPatchedFiles(output: string): string[] {\r\n  const files: string[] = [];\r\n  const re = /patching file (.+)/gi;\r\n  for (const m of output.matchAll(re)) {\r\n    if (m[1]) files.push(m[1]);\r\n  }\r\n  return files;\r\n}"]}

package/dist/read.js

@@ -1,6 +1,5 @@
 import * as fs from 'fs/promises';
 import * as path from 'path';
-import 'child_process';
 
 // src/read.ts
 function resolvePath(input, ctx) {