@wrongstack/tools 0.119.1 → 0.148.0

package/dist/pack.js

@@ -1,18 +1,40 @@
+import { spawn, execFileSync, spawnSync } from 'node:child_process';
 import * as Core from '@wrongstack/core';
 import { buildChildEnv, expectDefined, detectNewlineStyle, normalizeToLf, toStyle, atomicWrite, unifiedDiff, compileGlob, loadPlan, emptyPlan, clearPlan, savePlan, getPlanTemplate, addPlanItem, deriveTodosFromPlanItem, removePlanItem, setPlanItemStatus, formatPlan, loadTasks, emptyTaskFile, saveTasks, computeTaskItemProgress, formatTaskList, resolveWstackPaths } from '@wrongstack/core';
-import { spawn, execFileSync, spawnSync } from 'node:child_process';
-import * as fs12 from 'node:fs/promises';
-import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { statSync, writeFileSync, mkdirSync } from 'node:fs';
+import * as path2 from 'node:path';
 import { resolve, sep, dirname } from 'node:path';
+import * as fs13 from 'node:fs/promises';
 import * as os from 'node:os';
 import { createRequire } from 'node:module';
-import * as fs from 'node:fs';
-import { statSync, writeFileSync, mkdirSync } from 'node:fs';
 import * as ts from 'typescript';
 import * as dns from 'node:dns/promises';
 import * as net from 'node:net';
 import { Agent } from 'undici';
 
+// src/_spawn-stream.ts
+function resolveWin32Command(cmd) {
+  if (process.platform !== "win32") return cmd;
+  if (cmd.includes("/") || cmd.includes("\\") || path2.extname(cmd)) {
+    return cmd;
+  }
+  const pathext = (process.env["PATHEXT"] ?? ".COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC").toLowerCase().split(";");
+  const pathDirs = (process.env["PATH"] ?? "").split(path2.delimiter);
+  for (const dir of pathDirs) {
+    const base = path2.join(dir, cmd);
+    for (const ext of pathext) {
+      const full = `${base}${ext}`;
+      try {
+        fs.accessSync(full, fs.constants.X_OK);
+        return full;
+      } catch {
+      }
+    }
+  }
+  return cmd;
+}
+
 // src/_spawn-stream.ts
 async function* spawnStream(opts) {
   const max = opts.maxBytes ?? 2e5;
@@ -21,11 +43,14 @@ async function* spawnStream(opts) {
   let stderr = "";
   let pending = "";
   let error;
-  const child = spawn(opts.cmd, opts.args, {
+  const cmd = resolveWin32Command(opts.cmd);
+  const needsShell = process.platform === "win32" && (cmd.endsWith(".cmd") || cmd.endsWith(".bat"));
+  const child = spawn(cmd, opts.args, {
     cwd: opts.cwd,
     signal: opts.signal,
     env: buildChildEnv(),
-    stdio: ["ignore", "pipe", "pipe"]
+    stdio: ["ignore", "pipe", "pipe"],
+    ...needsShell ? { shell: true, windowsVerbatimArguments: true } : {}
   });
   const queue = [];
   let waiter;
@@ -65,7 +90,7 @@ async function* spawnStream(opts) {
         waiter = resolve7;
       });
     }
-    const chunk = expectDefined(queue.shift());
+    const chunk = queue.shift();
     if (chunk.kind === "close") {
       if (!spawnFailed) exitCode = chunk.code ?? 0;
       break;
@@ -107,13 +132,13 @@ async function detectPackageManager(cwd) {
   return "npm";
 }
 function resolvePath(input, ctx) {
-  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.cwd, input);
+  return path2.isAbsolute(input) ? path2.normalize(input) : path2.resolve(ctx.cwd, input);
 }
 function ensureInsideRoot(absPath, ctx) {
-  const root = path.resolve(ctx.projectRoot);
-  const target = path.resolve(absPath);
-  const rel = path.relative(root, target);
-  if (rel.startsWith("..") || path.isAbsolute(rel)) {
+  const root = path2.resolve(ctx.projectRoot);
+  const target = path2.resolve(absPath);
+  const rel = path2.relative(root, target);
+  if (rel.startsWith("..") || path2.isAbsolute(rel)) {
     throw new Error(`Path "${absPath}" is outside project root "${root}"`);
   }
   return target;
@@ -122,23 +147,23 @@ function safeResolve(input, ctx) {
   return ensureInsideRoot(resolvePath(input, ctx), ctx);
 }
 async function assertRealInsideRoot(absPath, ctx) {
-  const realRoot = await fs12.realpath(ctx.projectRoot).catch(() => path.resolve(ctx.projectRoot));
+  const realRoot = await fs13.realpath(ctx.projectRoot).catch(() => path2.resolve(ctx.projectRoot));
   let probe = absPath;
   for (; ; ) {
     let real;
     try {
-      real = await fs12.realpath(probe);
+      real = await fs13.realpath(probe);
     } catch (err) {
       if (err.code === "ENOENT") {
-        const parent = path.dirname(probe);
+        const parent = path2.dirname(probe);
         if (parent === probe) return;
         probe = parent;
         continue;
       }
       throw err;
     }
-    const rel = path.relative(realRoot, real);
-    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+    const rel = path2.relative(realRoot, real);
+    if (rel.startsWith("..") || path2.isAbsolute(rel)) {
       throw new Error(
         `Path "${absPath}" resolves through a symlink outside project root "${realRoot}"`
       );
@@ -181,9 +206,9 @@ function collapseConsecutiveDuplicates(text, minRun = REPEAT_RUN_THRESHOLD) {
     while (j < lines.length && lines[j] === lines[i]) j++;
     const run = j - i;
     if (run >= minRun) {
-      out.push(expectDefined(lines[i]), `\u2026 \u27E8repeated ${run}\xD7\u27E9`);
+      out.push(lines[i], `\u2026 \u27E8repeated ${run}\xD7\u27E9`);
     } else {
-      for (let k = i; k < j; k++) out.push(expectDefined(lines[k]));
+      for (let k = i; k < j; k++) out.push(lines[k]);
     }
     i = j;
   }
@@ -838,44 +863,46 @@ var bashTool = {
     let pending = "";
     let timedOut = false;
     const timers = [];
-    const timer = setTimeout(() => {
-      timedOut = true;
+    function killWithTimeout(child2, timeoutMs2) {
       if (isWin) {
         try {
-          child.kill();
+          child2.kill();
         } catch {
         }
-      } else {
+        return;
+      }
+      try {
+        if (typeof child2.pid === "number") {
+          try {
+            process.kill(-child2.pid, "SIGTERM");
+          } catch {
+            child2.kill("SIGTERM");
+          }
+        } else {
+          child2.kill("SIGTERM");
+        }
+      } catch {
+      }
+      const killTimer = setTimeout(() => {
         try {
-          if (typeof child.pid === "number") {
+          if (typeof child2.pid === "number") {
             try {
-              process.kill(-child.pid, "SIGTERM");
+              process.kill(-child2.pid, "SIGKILL");
             } catch {
-              child.kill("SIGTERM");
+              child2.kill("SIGKILL");
             }
           } else {
-            child.kill("SIGTERM");
+            child2.kill("SIGKILL");
           }
-          const killTimer = setTimeout(() => {
-            try {
-              if (typeof child.pid === "number") {
-                try {
-                  process.kill(-child.pid, "SIGKILL");
-                } catch {
-                  child.kill("SIGKILL");
-                }
-              } else {
-                child.kill("SIGKILL");
-              }
-            } catch {
-            } finally {
-              killTimer.unref?.();
-            }
-          }, 2e3);
-          timers.push(killTimer);
         } catch {
         }
-      }
+      }, timeoutMs2);
+      timers.push(killTimer);
+      killTimer.unref?.();
+    }
+    const timer = setTimeout(() => {
+      timedOut = true;
+      killWithTimeout(child, 2e3);
     }, timeoutMs);
     timers.push(timer);
     timer.unref?.();
@@ -1140,7 +1167,7 @@ var IndexStore = class {
     this.indexDir = resolveIndexDir(projectRoot, opts.indexDir);
     fs.mkdirSync(this.indexDir, { recursive: true });
     const Database = loadDatabaseSync();
-    this.db = new Database(path.join(this.indexDir, DB_FILE));
+    this.db = new Database(path2.join(this.indexDir, DB_FILE));
     this.initSchema();
   }
   initSchema() {
@@ -1438,7 +1465,7 @@ var IndexStore = class {
     }));
   }
   sizeBytes() {
-    const dbPath = path.join(this.indexDir, DB_FILE);
+    const dbPath = path2.join(this.indexDir, DB_FILE);
     try {
       return fs.statSync(dbPath).size;
     } catch {
@@ -1877,10 +1904,10 @@ func formatType(t ast.Expr) string {
 }
 `;
 function syncGoParse(filePath, content, lang) {
-  const tmpDir = path.join(os.tmpdir(), "ws-go-parse");
+  const tmpDir = path2.join(os.tmpdir(), "ws-go-parse");
   try {
     mkdirSync(tmpDir, { recursive: true });
-    const scriptPath = path.join(tmpDir, "parse.go");
+    const scriptPath = path2.join(tmpDir, "parse.go");
     writeFileSync(scriptPath, GO_PARSE_SCRIPT, "utf8");
     const stdout = execFileSync("go", ["run", scriptPath], {
       input: content,
@@ -2124,9 +2151,9 @@ print(json.dumps([s.to_dict() for s in syms]))
 `;
 function syncPyParse(filePath, lang) {
   try {
-    const tmpDir = path.join(os.tmpdir(), "ws-py-parse");
+    const tmpDir = path2.join(os.tmpdir(), "ws-py-parse");
     mkdirSync(tmpDir, { recursive: true });
-    const scriptPath = path.join(tmpDir, "parse.py");
+    const scriptPath = path2.join(tmpDir, "parse.py");
     writeFileSync(scriptPath, PY_PARSE_SCRIPT, "utf8");
     const stdout = execFileSync("python", [scriptPath, filePath], {
       timeout: 15e3,
@@ -2167,7 +2194,7 @@ function parseSymbols4(opts) {
 function checkNativeParser() {
   try {
     execFileSync("rustc", ["--version"], { stdio: "pipe" });
-    const toolsDir = path.join(process.cwd(), "tools");
+    const toolsDir = path2.join(process.cwd(), "tools");
     try {
       execFileSync(
         "cargo",
@@ -2177,7 +2204,7 @@ function checkNativeParser() {
           "--format-version",
           "1",
           "--manifest-path",
-          path.join(toolsDir, "Cargo.toml")
+          path2.join(toolsDir, "Cargo.toml")
         ],
         { stdio: "pipe" }
       );
@@ -2191,13 +2218,13 @@ function checkNativeParser() {
 }
 function tryNativeParse(file, content) {
   try {
-    const toolsDir = path.join(process.cwd(), "tools");
-    const crateDir = path.join(toolsDir, "syn-parser");
-    const tmpFile = path.join(crateDir, "src", "input.rs");
+    const toolsDir = path2.join(process.cwd(), "tools");
+    const crateDir = path2.join(toolsDir, "syn-parser");
+    const tmpFile = path2.join(crateDir, "src", "input.rs");
     writeFileSync(tmpFile, content, "utf8");
     const result = spawnSync(
       "cargo",
-      ["run", "--manifest-path", path.join(toolsDir, "Cargo.toml")],
+      ["run", "--manifest-path", path2.join(toolsDir, "Cargo.toml")],
       {
         cwd: process.cwd(),
         encoding: "utf8",
@@ -2295,7 +2322,7 @@ function parseSymbols5(opts) {
 function regexParse2(opts) {
   const { file, content, lang } = opts;
   const symbols = [];
-  const basename2 = path.basename(file).toLowerCase();
+  const basename2 = path2.basename(file).toLowerCase();
   const isPackageJson = basename2 === "package.json";
   const isTsconfig = basename2 === "tsconfig.json" || basename2 === "tsconfig.build.json";
   const isJsonSchema = content.includes("$schema") || content.includes("$id") || content.includes("$ref");
@@ -2321,11 +2348,11 @@ function regexParse2(opts) {
     const line = lineFromOffset(offset);
     symbols.push(
       makeSymbol({
-        name: path.basename(file),
+        name: path2.basename(file),
         kind: "object",
         line,
         col: 0,
-        signature: `"${path.basename(file)}" = { ... }`,
+        signature: `"${path2.basename(file)}" = { ... }`,
         file,
         lang
       })
@@ -2679,7 +2706,7 @@ function compileGitignore(lines) {
 async function loadGitignoreMatcher(projectRoot) {
   let lines = [];
   try {
-    const raw = await fs12.readFile(path.join(projectRoot, ".gitignore"), "utf8");
+    const raw = await fs13.readFile(path2.join(projectRoot, ".gitignore"), "utf8");
     lines = raw.split("\n");
   } catch {
   }
@@ -2750,20 +2777,20 @@ async function findSourceFiles(projectRoot, ignore, isGitIgnored) {
   const walk = async (dir) => {
     let entries;
     try {
-      entries = await fs12.readdir(dir, { withFileTypes: true });
+      entries = await fs13.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
       if (ignoreSet.has(e.name)) continue;
-      const full = path.join(dir, e.name);
-      const rel = path.relative(projectRoot, full).replace(/\\/g, "/");
+      const full = path2.join(dir, e.name);
+      const rel = path2.relative(projectRoot, full).replace(/\\/g, "/");
       if (e.isDirectory()) {
         if (isGitIgnored(rel, true)) continue;
         await walk(full);
       } else if (e.isFile()) {
         if (isGitIgnored(rel, false)) continue;
-        const ext = path.extname(e.name);
+        const ext = path2.extname(e.name);
         for (const { ext: extName, pat } of globs) {
           if (ext === extName && (pat.test(rel) || pat.test(e.name))) {
             results.push(full);
@@ -2808,7 +2835,7 @@ async function runIndexer(_ctx, opts) {
   const isGitIgnored = await loadGitignoreMatcher(projectRoot);
   let files;
   if (opts.files && opts.files.length > 0) {
-    files = opts.files.map((f) => path.resolve(projectRoot, f)).filter((f) => !isGitIgnored(path.relative(projectRoot, f).replace(/\\/g, "/"), false));
+    files = opts.files.map((f) => path2.resolve(projectRoot, f)).filter((f) => !isGitIgnored(path2.relative(projectRoot, f).replace(/\\/g, "/"), false));
   } else {
     files = await findSourceFiles(projectRoot, ignore, isGitIgnored);
   }
@@ -2832,7 +2859,7 @@ async function runIndexer(_ctx, opts) {
     }
     let stat10;
     try {
-      stat10 = await fs12.stat(file);
+      stat10 = await fs13.stat(file);
     } catch {
       store.deleteFile(file);
       continue;
@@ -2851,7 +2878,7 @@ async function runIndexer(_ctx, opts) {
     store.deleteSymbolsForFile(file);
     let content;
     try {
-      content = await fs12.readFile(file, "utf8");
+      content = await fs13.readFile(file, "utf8");
     } catch (e) {
       errors.push(`read error: ${file}: ${e instanceof Error ? e.message : String(e)}`);
       continue;
@@ -2901,7 +2928,7 @@ async function runIndexer(_ctx, opts) {
   }
   for (const [file_] of existingMeta) {
     try {
-      await fs12.stat(file_);
+      await fs13.stat(file_);
     } catch {
       store.deleteFile(file_);
     }
@@ -2962,7 +2989,7 @@ function tokenise(text) {
   return sanitised.toLowerCase().split(" ").filter(Boolean);
 }
 function splitName(name) {
-  return name.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[_\-]+/g, " ").trim();
+  return name.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
 }
 function buildIndexableText(name, signature, docComment) {
   return [splitName(name), name, signature, docComment].filter(Boolean).join(" ");
@@ -3292,11 +3319,11 @@ function findGitDir(cwd) {
   let dir = cwd;
   for (let i = 0; i < 20; i++) {
     try {
-      const stat10 = statSync(path.join(dir, ".git"));
+      const stat10 = statSync(path2.join(dir, ".git"));
       if (stat10.isDirectory()) return dir;
     } catch {
     }
-    const parent = path.dirname(dir);
+    const parent = path2.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -3336,9 +3363,9 @@ async function fileDiff(input, ctx, _signal) {
   const results = [];
   for (const file of files) {
     const absPath = safeResolve(file, ctx);
-    const stat10 = await fs12.stat(absPath).catch(() => null);
+    const stat10 = await fs13.stat(absPath).catch(() => null);
     if (!stat10?.isFile()) continue;
-    const content = await fs12.readFile(absPath, "utf8");
+    const content = await fs13.readFile(absPath, "utf8");
     const lines = content.split(/\r?\n/);
     results.push(formatWithLineNumbers(file, lines));
   }
@@ -3400,7 +3427,7 @@ var documentTool = {
     const fileList = input.files ? await resolveFiles(Array.isArray(input.files) ? input.files.join(",") : input.files, cwd) : input.path ? [safeResolve(input.path, ctx)] : [];
     for (const absPath of fileList) {
       try {
-        const content = await fs12.readFile(absPath, "utf8");
+        const content = await fs13.readFile(absPath, "utf8");
         filesProcessed++;
         const processed = processFile(
           content,
@@ -3436,7 +3463,7 @@ async function resolveFiles(filesInput, cwd) {
   for (const f of files) {
     const absPath = f.trim().startsWith("/") ? f.trim() : `${cwd}/${f.trim()}`;
     try {
-      const stat10 = await fs12.stat(absPath);
+      const stat10 = await fs13.stat(absPath);
       if (stat10.isFile()) resolved.push(absPath);
     } catch {
     }
@@ -3528,7 +3555,7 @@ var editTool = {
     if (input.new_string === void 0) throw new Error("edit: new_string is required");
     if (input.old_string === "") throw new Error("edit: old_string cannot be empty");
     const absPath = await safeResolveReal(input.path, ctx);
-    const stat10 = await fs12.stat(absPath).catch((err) => {
+    const stat10 = await fs13.stat(absPath).catch((err) => {
       if (err.code === "ENOENT") {
         throw new Error(`edit: file "${input.path}" does not exist. Use \`write\` instead.`);
       }
@@ -3538,8 +3565,8 @@ var editTool = {
     if (!ctx.hasRead(absPath)) {
       throw new Error(`edit: file "${input.path}" was not read in this session. Read it first.`);
     }
-    const original = await fs12.readFile(absPath, "utf8");
-    const updated = await fs12.stat(absPath);
+    const original = await fs13.readFile(absPath, "utf8");
+    const updated = await fs13.stat(absPath);
     const mtimeTolerance = process.platform === "win32" ? 2e3 : 1;
     const lastReadMtime = ctx.lastReadMtime(absPath);
     if (lastReadMtime !== void 0 && updated.mtimeMs > lastReadMtime + mtimeTolerance) {
@@ -3579,7 +3606,7 @@ var editTool = {
     const newFileLf = input.replace_all ? fileLf.split(oldLf).join(newLf) : fileLf.replace(oldLf, newLf);
     const newFile = toStyle(newFileLf, style);
     await atomicWrite(absPath, newFile, { mode: updated.mode & 511 });
-    const written = await fs12.stat(absPath);
+    const written = await fs13.stat(absPath);
     ctx.recordRead(absPath, written.mtimeMs);
     ctx.session.recordFileChange({
       path: absPath,
@@ -3804,9 +3831,9 @@ var execTool = {
         allowed: false
       };
     }
-    const requestedCwd = input.cwd ? path.resolve(ctx.projectRoot, input.cwd) : ctx.cwd;
-    const rel = path.relative(ctx.projectRoot, requestedCwd);
-    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+    const requestedCwd = input.cwd ? path2.resolve(ctx.projectRoot, input.cwd) : ctx.cwd;
+    const rel = path2.relative(ctx.projectRoot, requestedCwd);
+    if (rel.startsWith("..") || path2.isAbsolute(rel)) {
       return {
         command: cmd,
         args,
@@ -3828,11 +3855,14 @@ function runCommand(cmd, args, cwd, timeout, signal, sessionId) {
     let stderr = "";
     let killed = false;
     const startedAt = Date.now();
-    const child = spawn(cmd, args, {
+    const resolved = resolveWin32Command(cmd);
+    const needsShell = process.platform === "win32" && (resolved.endsWith(".cmd") || resolved.endsWith(".bat"));
+    const child = spawn(resolved, args, {
       cwd,
       signal,
       env: buildChildEnv(sessionId),
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      ...needsShell ? { shell: true, windowsVerbatimArguments: true } : {}
     });
     const registry = getProcessRegistry();
     const pid = child.pid;
@@ -3891,19 +3921,7 @@ if (ALLOW_PRIVATE && !process.env["CI"]) {
     "[WrongStack] WARNING: WRONGSTACK_FETCH_ALLOW_PRIVATE=1 is active \u2014\n  fetch tool can now access private IPs (10.x, 192.168.x, 169.254.x),\n  cloud metadata endpoints, and plaintext HTTP. Use only on isolated networks."
   );
 }
-function combineSignals(signals) {
-  const anyFn = AbortSignal.any;
-  if (typeof anyFn === "function") return anyFn(signals);
-  const ctrl = new AbortController();
-  for (const sig of signals) {
-    if (sig.aborted) {
-      ctrl.abort(sig.reason);
-      return ctrl.signal;
-    }
-    sig.addEventListener("abort", () => ctrl.abort(sig.reason), { once: true });
-  }
-  return ctrl.signal;
-}
+var combineSignals = (signals) => AbortSignal.any(signals);
 function guardedLookup(hostname, options, callback) {
   dns.lookup(hostname, { all: true }).then((records) => {
     const family = options?.family;
@@ -4627,7 +4645,7 @@ var globTool = {
       }
       let entries;
       try {
-        entries = await fs12.readdir(dir, { withFileTypes: true });
+        entries = await fs13.readdir(dir, { withFileTypes: true });
       } catch {
         return;
       }
@@ -4636,14 +4654,14 @@ var globTool = {
         if (DEFAULT_IGNORE2.includes(name)) continue;
         if (ignored.includes(name)) continue;
         const rel = relPrefix ? `${relPrefix}/${name}` : name;
-        const full = path.join(dir, name);
+        const full = path2.join(dir, name);
         if (e.isDirectory()) {
           await walk(full, rel);
           if (truncated) return;
         } else if (e.isFile()) {
           if (re.test(rel) || re.test(name)) {
             try {
-              const st = await fs12.stat(full);
+              const st = await fs13.stat(full);
               results.push({ rel: full, mtime: st.mtimeMs });
               if (results.length >= limit) {
                 truncated = true;
@@ -4662,7 +4680,7 @@ var globTool = {
 };
 async function readGitignore(dir) {
   try {
-    const raw = await fs12.readFile(path.join(dir, ".gitignore"), "utf8");
+    const raw = await fs13.readFile(path2.join(dir, ".gitignore"), "utf8");
     return raw.split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
   } catch {
     return [];
@@ -4680,7 +4698,7 @@ var DANGEROUS_PATTERNS = [
   // Quantifier on alternation with length 2+
   /\([^|)]+\|[^)]+\)[+*][+*]/,
   // Greedy quantifier inside lookahead/lookbehind — (?!.*a+)
-  /[\(\[][^)\]]*[+*][^)\]]*[\)\]][^)]*\?\??/
+  /[([][^)\]]*[+*][^)\]]*[)\]][^)]*\?\??/
 ];
 function compileUserRegex(pattern, flags) {
   if (typeof pattern !== "string") {
@@ -4946,7 +4964,7 @@ async function runNative(input, base, mode, limit, signal) {
     if (stopped || signal.aborted) return;
     let entries;
     try {
-      entries = await fs12.readdir(dir, { withFileTypes: true });
+      entries = await fs13.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -4954,16 +4972,16 @@ async function runNative(input, base, mode, limit, signal) {
       if (stopped) return;
       if (DEFAULT_IGNORE3.includes(e.name)) continue;
       if (e.isSymbolicLink()) continue;
-      const full = path.join(dir, e.name);
+      const full = path2.join(dir, e.name);
       if (e.isDirectory()) {
         await walk(full);
       } else if (e.isFile()) {
         if (globRe && !globRe.test(e.name) && !globRe.test(full)) continue;
         if (globRe) globRe.lastIndex = 0;
         try {
-          const stat10 = await fs12.stat(full);
+          const stat10 = await fs13.stat(full);
           if (stat10.size > 1e6) continue;
-          const head = await fs12.readFile(full);
+          const head = await fs13.readFile(full);
           if (isBinaryBuffer(head)) continue;
           const text = head.toString("utf8");
           const lines = text.split(/\r?\n/);
@@ -5144,7 +5162,7 @@ var jsonTool = {
     let raw;
     if (input.file) {
       try {
-        raw = await fs12.readFile(input.file, "utf8");
+        raw = await fs13.readFile(input.file, "utf8");
       } catch {
         return { data: null, formatted: "", type: "unknown", error: `Could not read file` };
       }
@@ -5182,8 +5200,8 @@ var jsonTool = {
     };
   }
 };
-function query(data, path19) {
-  const parts = path19.replace(/\[(\d+)\]/g, ".$1").split(".").filter(Boolean);
+function query(data, path20) {
+  const parts = path20.replace(/\[(\d+)\]/g, ".$1").split(".").filter(Boolean);
   let current = data;
   for (const part of parts) {
     if (current === null || current === void 0) return void 0;
@@ -5454,7 +5472,7 @@ async function dockerLogs(service, lines, filterRe, cwd, signal, since) {
 }
 var DOCKER_LOGS_TIMEOUT_MS = 3e3;
 var MAX_TAIL_LINES = 1e5;
-async function fileLogs(path19, lines, filterRe, stream) {
+async function fileLogs(path20, lines, filterRe, stream) {
   const { createInterface } = await import('node:readline');
   const { createReadStream } = await import('node:fs');
   const entries = [];
@@ -5463,7 +5481,7 @@ async function fileLogs(path19, lines, filterRe, stream) {
   let writeIdx = 0;
   let totalLines = 0;
   const rl = createInterface({
-    input: createReadStream(path19),
+    input: createReadStream(path20),
     crlfDelay: Number.POSITIVE_INFINITY
   });
   for await (const line of rl) {
@@ -5484,7 +5502,7 @@ async function fileLogs(path19, lines, filterRe, stream) {
     if (parsed) entries.push(parsed);
   }
   return {
-    source: path19,
+    source: path20,
     entries,
     total: entries.length,
     truncated: totalLines > effLines,
@@ -5567,7 +5585,9 @@ function runOutdated(manager, args, cwd, signal) {
     let stdout = "";
     let stderr = "";
     const MAX = 1e5;
-    const child = spawn(manager, args, { cwd, signal, env: buildChildEnv(), stdio: ["ignore", "pipe", "pipe"] });
+    const resolved = resolveWin32Command(manager);
+    const needsShell = process.platform === "win32" && (resolved.endsWith(".cmd") || resolved.endsWith(".bat"));
+    const child = spawn(resolved, args, { cwd, signal, env: buildChildEnv(), stdio: ["ignore", "pipe", "pipe"], ...needsShell ? { shell: true, windowsVerbatimArguments: true } : {} });
     child.stdout?.on("data", (c) => {
       if (stdout.length < MAX) stdout += c.toString();
     });
@@ -5651,9 +5671,9 @@ var patchTool = {
     for (const t of targets) {
       const stripped = stripPathComponents(t, strip);
       if (!stripped) continue;
-      const candidate = path.resolve(dir, stripped);
-      const rel = path.relative(ctx.projectRoot, candidate);
-      if (rel.startsWith("..") || path.isAbsolute(rel)) {
+      const candidate = path2.resolve(dir, stripped);
+      const rel = path2.relative(ctx.projectRoot, candidate);
+      if (rel.startsWith("..") || path2.isAbsolute(rel)) {
         return {
           applied: 0,
           rejected: 1,
@@ -5663,12 +5683,12 @@ var patchTool = {
         };
       }
     }
-    const tmpDir = await fs12.mkdtemp(path.join(os.tmpdir(), ".wstack_patch_"));
+    const tmpDir = await fs13.mkdtemp(path2.join(os.tmpdir(), ".wstack_patch_"));
     try {
-      await fs12.chmod(tmpDir, 448).catch(() => {
+      await fs13.chmod(tmpDir, 448).catch(() => {
       });
-      const patchFile = path.join(tmpDir, "in.diff");
-      await fs12.writeFile(patchFile, input.patch, { mode: 384 });
+      const patchFile = path2.join(tmpDir, "in.diff");
+      await fs13.writeFile(patchFile, input.patch, { mode: 384 });
       const args = [`-p${strip}`, "--merge", ...dryRun ? ["--dry-run"] : [], "-i", patchFile];
       const result = await runPatch(args, dir, opts.signal);
       if (result.exitCode !== 0 && !dryRun) {
@@ -5689,7 +5709,7 @@ var patchTool = {
         message: result.stdout || "patch applied"
       };
     } finally {
-      await fs12.rm(tmpDir, { recursive: true, force: true }).catch(() => {
+      await fs13.rm(tmpDir, { recursive: true, force: true }).catch(() => {
       });
     }
   }
@@ -5932,7 +5952,7 @@ var readTool = {
     const absPath = await safeResolveReal(input.path, ctx);
     let stat10;
     try {
-      stat10 = await fs12.stat(absPath);
+      stat10 = await fs13.stat(absPath);
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") throw new Error(`read: file not found "${input.path}"`);
@@ -5944,7 +5964,7 @@ var readTool = {
     if (stat10.size > MAX_BYTES2) {
       throw new Error(`read: file too large (${stat10.size} bytes, limit ${MAX_BYTES2})`);
     }
-    const buf = await fs12.readFile(absPath);
+    const buf = await fs13.readFile(absPath);
     if (isBinaryBuffer(buf)) {
       throw new Error(`read: "${input.path}" appears to be binary`);
     }
@@ -6012,11 +6032,11 @@ var replaceTool = {
     const dryRun = input.dry_run ?? false;
     const filesInput = Array.isArray(input.files) ? input.files.join(",") : input.files;
     const fileList = await resolveFiles2(filesInput, ctx, globRe);
-    const realRoot = await fs12.realpath(ctx.projectRoot).catch(() => ctx.projectRoot);
+    const realRoot = await fs13.realpath(ctx.projectRoot).catch(() => ctx.projectRoot);
     const results = [];
     let totalReplacements = 0;
     for (const absPath of fileList) {
-      const lstat2 = await fs12.lstat(absPath).catch((err) => {
+      const lstat2 = await fs13.lstat(absPath).catch((err) => {
         if (err.code === "ENOENT") return null;
         throw err;
       });
@@ -6024,17 +6044,17 @@ var replaceTool = {
       if (lstat2.isSymbolicLink()) continue;
       let realPath;
       try {
-        realPath = await fs12.realpath(absPath);
+        realPath = await fs13.realpath(absPath);
       } catch {
         continue;
       }
-      const rel = path.relative(realRoot, realPath);
-      if (rel.startsWith("..") || path.isAbsolute(rel)) continue;
-      const stat10 = await fs12.stat(realPath).catch(() => null);
+      const rel = path2.relative(realRoot, realPath);
+      if (rel.startsWith("..") || path2.isAbsolute(rel)) continue;
+      const stat10 = await fs13.stat(realPath).catch(() => null);
       if (!stat10 || !stat10.isFile()) continue;
       let content;
       try {
-        const buf = await fs12.readFile(realPath);
+        const buf = await fs13.readFile(realPath);
         if (isBinaryBuffer(buf)) continue;
         content = buf.toString("utf8");
       } catch {
@@ -6086,7 +6106,7 @@ async function resolveFiles2(filesInput, ctx, extraGlob) {
   const resolved = [];
   for (const p of parts) {
     const absPath = safeResolve(p, ctx);
-    const stat10 = await fs12.stat(absPath).catch(() => null);
+    const stat10 = await fs13.stat(absPath).catch(() => null);
     if (stat10?.isFile()) {
       resolved.push(absPath);
     }
@@ -6117,7 +6137,11 @@ function checkRg() {
 }
 function spawnRgFind(pattern, base) {
   const args = ["--files", "--glob", pattern, base];
-  const child = spawn("rg", args, { env: buildChildEnv(), stdio: ["ignore", "pipe", "pipe"] });
+  const child = spawn("rg", args, {
+    signal: AbortSignal.timeout(3e4),
+    env: buildChildEnv(),
+    stdio: ["ignore", "pipe", "pipe"]
+  });
   let buf = "";
   child.stdout?.on("data", (chunk) => {
     buf += chunk.toString();
@@ -6137,15 +6161,15 @@ async function globNative(pattern, base, extraGlob) {
   const walk = async (dir) => {
     let entries;
     try {
-      entries = await fs12.readdir(dir, { withFileTypes: true });
+      entries = await fs13.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
       if (DEFAULT_IGNORE4.includes(e.name)) continue;
-      const full = path.join(dir, e.name);
+      const full = path2.join(dir, e.name);
       try {
-        const stat10 = await fs12.lstat(full);
+        const stat10 = await fs13.lstat(full);
         if (stat10.isSymbolicLink()) continue;
       } catch {
         continue;
@@ -6313,16 +6337,16 @@ async function handleBuiltIn(name, templateFiles, cwd, ctx, dryRun, vars) {
   let filesCreated = 0;
   for (const [filePath, content] of Object.entries(templateFiles)) {
     const resolvedPath = substituteVars(filePath, name, vars);
-    const joinedPath = path.join(cwd, resolvedPath);
-    const root = path.resolve(ctx.projectRoot);
-    const target = path.resolve(joinedPath);
-    const rel = path.relative(root, target);
-    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+    const joinedPath = path2.join(cwd, resolvedPath);
+    const root = path2.resolve(ctx.projectRoot);
+    const target = path2.resolve(joinedPath);
+    const rel = path2.relative(root, target);
+    if (rel.startsWith("..") || path2.isAbsolute(rel)) {
       throw new Error(`scaffold: generated path "${resolvedPath}" would escape project root`);
     }
     const fullPath = target;
     if (!dryRun) {
-      await fs12.mkdir(path.dirname(fullPath), { recursive: true });
+      await fs13.mkdir(path2.dirname(fullPath), { recursive: true });
       await atomicWrite(fullPath, substituteVars(content, name, vars));
     }
     files.push(resolvedPath);
@@ -6748,7 +6772,7 @@ var testTool = {
         type: "final",
         output: {
           runner: "none",
-          exit_code: 1,
+          exit_code: 0,
           tests_run: 0,
           passed: 0,
           failed: 0,
@@ -6778,14 +6802,14 @@ async function detectRunner(cwd) {
   const candidates = ["vitest.config.ts", "jest.config.js", ".mocharc.json"];
   for (const f of candidates) {
     try {
-      await stat10(path.join(cwd, f));
+      await stat10(path2.join(cwd, f));
       if (f.includes("vitest")) return "vitest";
       if (f.includes("jest")) return "jest";
       if (f.includes("mocha")) return "mocha";
     } catch {
     }
   }
-  return "vitest";
+  return null;
 }
 function buildArgs2(runner, input) {
   const args = [];
@@ -7324,7 +7348,7 @@ var treeTool = {
   }
 };
 async function walkDir(dir, depth, opts) {
-  const entries = await fs12.readdir(dir, { withFileTypes: true }).catch(() => []);
+  const entries = await fs13.readdir(dir, { withFileTypes: true }).catch(() => []);
   const filtered = entries.filter((e) => {
     if (!opts.showHidden && e.name.startsWith(".")) return false;
     if (opts.exclude.has(e.name)) return false;
@@ -7354,7 +7378,7 @@ async function walkDir(dir, depth, opts) {
     opts.lines.push(opts.prefix + branch + displayName);
     if (entry.isDirectory() && (opts.maxDepth === 0 || depth < opts.maxDepth)) {
       const childPrefix = opts.prefix + connector;
-      await walkDir(path.join(dir, entry.name), depth + 1, {
+      await walkDir(path2.join(dir, entry.name), depth + 1, {
         ...opts,
         prefix: childPrefix,
         isLast
@@ -7437,8 +7461,8 @@ async function findTsConfig(cwd) {
   const candidates = ["tsconfig.json", "tsconfig.base.json"];
   for (const f of candidates) {
     try {
-      const s = await stat10(path.join(cwd, f));
-      if (s.isFile()) return path.join(cwd, f);
+      const s = await stat10(path2.join(cwd, f));
+      if (s.isFile()) return path2.join(cwd, f);
     } catch {
     }
   }
@@ -7474,14 +7498,14 @@ var writeTool = {
     let existed = false;
     let prev = "";
     try {
-      const stat11 = await fs12.stat(absPath);
+      const stat11 = await fs13.stat(absPath);
       existed = stat11.isFile();
       if (existed) {
         if (!ctx.hasRead(absPath)) {
-          prev = await fs12.readFile(absPath, "utf8");
+          prev = await fs13.readFile(absPath, "utf8");
           ctx.recordRead(absPath, stat11.mtimeMs);
         } else {
-          prev = await fs12.readFile(absPath, "utf8");
+          prev = await fs13.readFile(absPath, "utf8");
         }
       }
     } catch (err) {
@@ -7492,7 +7516,7 @@ var writeTool = {
     await atomicWrite(absPath, input.content);
     const diff = existed ? unifiedDiff(prev, input.content, { fromFile: input.path, toFile: input.path }) : `+++ ${input.path}
 + (new file, ${input.content.split("\n").length} lines)`;
-    const stat10 = await fs12.stat(absPath);
+    const stat10 = await fs13.stat(absPath);
     ctx.recordRead(absPath, stat10.mtimeMs);
     ctx.session.recordFileChange({
       path: absPath,