@wrongstack/tools 0.257.0 → 0.257.2

package/dist/index.js

@@ -2,7 +2,7 @@ import * as fs4 from 'node:fs/promises';
 import * as path from 'node:path';
 import { resolve, sep, dirname, join } from 'node:path';
 import * as Core from '@wrongstack/core';
-import { atomicWrite, unifiedDiff, detectNewlineStyle, normalizeToLf, toStyle, compileGlob, expectDefined, buildChildEnv, loadPlan, setPlanItemStatus, savePlan, loadTasks, saveTasks, mutatePlan, clearPlan, getPlanTemplate, addPlanItem, deriveTodosFromPlanItem, removePlanItem, emptyTaskFile, formatTaskList, formatPlan, recordPackageAction, detectPackageEcosystem, mutateTasks, emptyPlan, computeTaskItemProgress, wstackGlobalRoot, resolveWstackPaths, truncate } from '@wrongstack/core';
+import { atomicWrite, unifiedDiff, detectNewlineStyle, normalizeToLf, toStyle, compileGlob, expectDefined, buildChildEnv, isPrivateIPv4, isPrivateIPv6, loadPlan, setPlanItemStatus, savePlan, loadTasks, saveTasks, mutatePlan, clearPlan, getPlanTemplate, addPlanItem, deriveTodosFromPlanItem, removePlanItem, emptyTaskFile, formatTaskList, formatPlan, recordPackageAction, detectPackageEcosystem, mutateTasks, emptyPlan, computeTaskItemProgress, wstackGlobalRoot, resolveWstackPaths, truncate } from '@wrongstack/core';
 import { spawn, execFileSync, spawnSync } from 'node:child_process';
 import * as os from 'node:os';
 import * as fs7 from 'node:fs';
@@ -10,6 +10,7 @@ import { statSync, mkdirSync, createWriteStream, writeFileSync } from 'node:fs';
 import * as dns from 'node:dns/promises';
 import * as net from 'node:net';
 import { Agent } from 'undici';
+import TurndownService from 'turndown';
 import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import { Worker } from 'node:worker_threads';
@@ -1297,7 +1298,7 @@ var SENSITIVE_FLAG_PATTERNS = [
   // --flag=value  or  --flag "value"  (value captured up to next space or comma)
   /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\s,][^\s]*)?/gi,
   // -f "value" style short flags
-  /(?<!\w)-t(?:\s+|\s*=\s*)[^\s,]+/g,
+  /(?<!\w)-t(?:\s+|\s*=\s*)[^\s,]+/,
   /(?<!\w)-p(?:ssword)?(?:\s+|\s*=\s*)[^\s,]+/gi,
   // env var–style secrets: TOKEN=x, API_KEY=y, etc.
   /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD)\s*[=:]\s*[^\s,]+/gi,
@@ -1433,8 +1434,8 @@ var ProcessRegistryImpl = class {
     if (p.killed) return true;
     if (p.protected) return false;
     const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;
-    const isWin = os.platform() === "win32";
-    if (isWin) {
+    const isWin3 = os.platform() === "win32";
+    if (isWin3) {
       const liveRealChild = p.child.exitCode === null && typeof p.child.pid === "number";
       if (liveRealChild && killWin32Tree(pid)) {
         const fallback = setTimeout(() => {
@@ -1603,11 +1604,11 @@ var bashTool = {
       }));
     }
     const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT_MS, 6e5));
-    const isWin = os.platform() === "win32";
+    const isWin3 = os.platform() === "win32";
     const shell = (() => {
-      const explicit = process.env[isWin ? "WRONGSTACK_COMSPEC" : "WRONGSTACK_SHELL"];
+      const explicit = process.env[isWin3 ? "WRONGSTACK_COMSPEC" : "WRONGSTACK_SHELL"];
       if (explicit) return explicit;
-      if (isWin) return process.env["COMSPEC"] ?? "cmd.exe";
+      if (isWin3) return process.env["COMSPEC"] ?? "cmd.exe";
       const fromEnv = process.env["SHELL"];
       if (fromEnv) {
         const name = fromEnv.split("/").pop() ?? "";
@@ -1615,9 +1616,9 @@ var bashTool = {
       }
       return "/bin/bash";
     })();
-    const args = isWin ? ["/c", input.command] : ["-c", input.command];
+    const args = isWin3 ? ["/c", input.command] : ["-c", input.command];
     const env = buildChildEnv(ctx.session?.id);
-    const detached = !isWin;
+    const detached = !isWin3;
     const startedAt = Date.now();
     if (input.background) {
       let buf2 = "";
@@ -1633,7 +1634,7 @@ var bashTool = {
         // apply: the child gets a hidden console that grandchildren inherit.
         // Windows children survive parent exit either way. POSIX keeps
         // detached for the process-group kill semantics.
-        detached: !isWin,
+        detached: !isWin3,
         windowsHide: true,
         signal: opts.signal
       });
@@ -1663,8 +1664,6 @@ var bashTool = {
       };
       child2.stdout?.on("data", onBgData);
       child2.stderr?.on("data", onBgData);
-      child2.stdout?.unref?.();
-      child2.stderr?.unref?.();
       child2.on("close", () => {
         registry.afterCall(Date.now() - startedAt, false, bypassBreaker);
       });
@@ -1686,7 +1685,7 @@ var bashTool = {
       stdio: ["ignore", "pipe", "pipe"],
       detached,
       windowsHide: true,
-      ...isWin ? {} : { signal: opts.signal }
+      ...isWin3 ? {} : { signal: opts.signal }
     });
     const pid = child.pid;
     if (typeof pid === "number") {
@@ -1705,7 +1704,7 @@ var bashTool = {
     const timers = [];
     const spool = createOutputSpool({ tool: "bash", thresholdBytes: MAX_OUTPUT });
     function killWithTimeout(child2, timeoutMs2) {
-      if (isWin) {
+      if (isWin3) {
         if (typeof child2.pid === "number" && child2.exitCode === null && killWin32Tree(child2.pid)) {
           const fallback = setTimeout(() => {
             if (child2.exitCode === null) {
@@ -1761,7 +1760,7 @@ var bashTool = {
     timers.push(timer);
     timer.unref?.();
     const onAbort = () => killWithTimeout(child, 2e3);
-    if (isWin) {
+    if (isWin3) {
       if (opts.signal.aborted) onAbort();
       else opts.signal.addEventListener("abort", onAbort, { once: true });
     }
@@ -1857,7 +1856,7 @@ var bashTool = {
     } finally {
       for (const t of timers) clearTimeout(t);
       spool.finalize();
-      if (isWin) opts.signal.removeEventListener("abort", onAbort);
+      if (isWin3) opts.signal.removeEventListener("abort", onAbort);
       child.stdout?.off("data", onData);
       child.stderr?.off("data", onData);
       child.stdout?.destroy();
@@ -1871,7 +1870,7 @@ var bashTool = {
 };
 function resolveWin32Command(cmd) {
   if (process.platform !== "win32") return cmd;
-  if (cmd.includes("/") || cmd.includes("\\") || path.extname(cmd)) {
+  if (cmd.includes("/") || cmd.includes("\\") || path.extname(cmd.replace(/\//g, "\\"))) {
     return cmd;
   }
   const pathext = (process.env["PATHEXT"] ?? ".COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC").toLowerCase().split(";");
@@ -1891,6 +1890,7 @@ function resolveWin32Command(cmd) {
 }
 
 // src/exec.ts
+var isWin = process.platform === "win32";
 var ALLOWED_COMMANDS = {
   node: ["--version", "-r", "--input-type=module"],
   npm: ["--version", "list", "pkg", "doctor", "view", "outdated", "audit"],
@@ -2099,7 +2099,6 @@ function runCommand(cmd, args, cwd, timeout, signal, sessionId) {
     const startedAt = Date.now();
     const spool = createOutputSpool({ tool: `exec-${cmd}`, thresholdBytes: MAX_OUTPUT2 });
     const resolved = resolveWin32Command(cmd);
-    const isWin = process.platform === "win32";
     const needsShell = isWin && (resolved.endsWith(".cmd") || resolved.endsWith(".bat"));
     const child = spawn(resolved, args, {
       cwd,
@@ -2175,6 +2174,16 @@ function runCommand(cmd, args, cwd, timeout, signal, sessionId) {
     });
   });
 }
+var TD = new TurndownService({
+  // Use `# Title` for headings, not setext underline style (`Title\n=====`).
+  headingStyle: "atx",
+  // Don't wrap code blocks in <pre> — render them as triple-backtick blocks.
+  codeBlockStyle: "fenced"
+});
+TD.addRule("stripDangerousElements", {
+  filter: ["script", "style", "noscript"],
+  replacement: () => ""
+});
 var MAX_BYTES2 = 131072;
 var TIMEOUT_MS = 2e4;
 var ALLOW_PRIVATE = process.env["WRONGSTACK_FETCH_ALLOW_PRIVATE"] === "1";
@@ -2209,7 +2218,7 @@ function guardedLookup(hostname, options, callback) {
       );
       return;
     }
-    const first = list[0];
+    const first = list.at(0);
     if (!first) {
       callback(
         Object.assign(new Error(`fetch: no address for ${hostname}`), { code: "ENOTFOUND" })
@@ -2349,7 +2358,7 @@ var fetchTool = {
           pendingBytes += value.byteLength;
           chunks.push(value);
           if (pendingBytes >= FLUSH_AT) {
-            const recent = Buffer.from(value).toString("utf8");
+            const recent = Buffer.from(value).toString("utf-8");
             yield {
               type: "partial_output",
               text: recent,
@@ -2364,7 +2373,7 @@ var fetchTool = {
       const format = input.format ?? (ct.includes("text/html") ? "markdown" : "text");
       let content;
       if (format === "raw") content = text;
-      else if (format === "markdown" && ct.includes("text/html")) content = htmlToMarkdown(text);
+      else if (format === "markdown" && ct.includes("text/html")) content = TD.turndown(text);
       else if (ct.includes("application/json")) content = prettyJson(text);
       else content = text;
       yield {
@@ -2410,67 +2419,6 @@ async function assertNotPrivate(hostname) {
     }
   }
 }
-function isPrivateIPv4(addr) {
-  const parts = addr.split(".").map((p) => Number.parseInt(p, 10));
-  if (parts.length !== 4 || parts.some((n) => Number.isNaN(n) || n < 0 || n > 255)) {
-    return true;
-  }
-  const [a, b, c] = parts;
-  if (a === 0) return true;
-  if (a === 10) return true;
-  if (a === 127) return true;
-  if (a === 169 && b === 254) return true;
-  if (a === 172 && b >= 16 && b <= 31) return true;
-  if (a === 192 && b === 168) return true;
-  if (a === 192 && b === 0 && c === 0) return true;
-  if (a === 100 && b >= 64 && b <= 127) return true;
-  if (a >= 224) return true;
-  return false;
-}
-function isPrivateIPv6(addr) {
-  const lower = addr.toLowerCase();
-  if (lower === "::" || lower === "::1") return true;
-  const groups = expandIPv6(lower);
-  if (!groups) return true;
-  if (groups[0] === 0 && groups[1] === 0 && groups[2] === 0 && groups[3] === 0 && groups[4] === 0 && groups[5] === 65535) {
-    const a = (groups[6] ?? 0) >> 8;
-    const b = (groups[6] ?? 0) & 255;
-    const c = (groups[7] ?? 0) >> 8;
-    const d = (groups[7] ?? 0) & 255;
-    return isPrivateIPv4(`${a}.${b}.${c}.${d}`);
-  }
-  const high = groups[0] ?? 0;
-  if ((high & 65024) === 64512) return true;
-  if ((high & 65472) === 65152) return true;
-  if ((high & 65280) === 65280) return true;
-  return false;
-}
-function expandIPv6(addr) {
-  const parts = addr.split("::");
-  if (parts.length > 2) return null;
-  const parseGroups = (s) => {
-    if (s === "") return [];
-    const out = [];
-    for (const g of s.split(":")) {
-      if (g.length === 0 || g.length > 4) return null;
-      const n = Number.parseInt(g, 16);
-      if (Number.isNaN(n) || n < 0 || n > 65535) return null;
-      out.push(n);
-    }
-    return out;
-  };
-  if (parts.length === 1) {
-    const groups = parseGroups(parts[0] ?? "");
-    if (!groups || groups.length !== 8) return null;
-    return groups;
-  }
-  const head = parseGroups(parts[0] ?? "");
-  const tail = parseGroups(parts[1] ?? "");
-  if (!head || !tail) return null;
-  const fill = 8 - head.length - tail.length;
-  if (fill < 0) return null;
-  return [...head, ...new Array(fill).fill(0), ...tail];
-}
 function prettyJson(s) {
   try {
     return JSON.stringify(JSON.parse(s), null, 2);
@@ -2478,32 +2426,6 @@ function prettyJson(s) {
     return s;
   }
 }
-function htmlToMarkdown(html) {
-  let s = html;
-  s = s.replace(/<script[\s\S]*?<\/script>/gi, "");
-  s = s.replace(/<style[\s\S]*?<\/style>/gi, "");
-  s = s.replace(/<noscript[\s\S]*?<\/noscript>/gi, "");
-  s = s.replace(/<h([1-6])[^>]*>([\s\S]*?)<\/h\1>/gi, (_m, n, c) => {
-    return "\n" + "#".repeat(Number(n)) + " " + stripTags(c).trim() + "\n";
-  });
-  s = s.replace(/<(strong|b)[^>]*>([\s\S]*?)<\/\1>/gi, "**$2**");
-  s = s.replace(/<(em|i)[^>]*>([\s\S]*?)<\/\1>/gi, "*$2*");
-  s = s.replace(/<a [^>]*href="([^"]+)"[^>]*>([\s\S]*?)<\/a>/gi, (_m, href, text) => {
-    const safe = /^(https?|ftps?):\/\//i.test(href) && !/^(javascript|data|vbscript):/i.test(href);
-    return safe ? `[${text}](${href})` : text;
-  });
-  s = s.replace(/<pre[^>]*>([\s\S]*?)<\/pre>/gi, (_m, c) => "\n```\n" + stripTags(c) + "\n```\n");
-  s = s.replace(/<code[^>]*>([\s\S]*?)<\/code>/gi, "`$1`");
-  s = s.replace(/<li[^>]*>([\s\S]*?)<\/li>/gi, "- $1\n");
-  s = s.replace(/<br\s*\/?>/gi, "\n");
-  s = s.replace(/<\/p>/gi, "\n\n");
-  s = stripTags(s);
-  s = s.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&nbsp;/g, " ");
-  return s.replace(/\n{3,}/g, "\n\n").trim();
-}
-function stripTags(s) {
-  return s.replace(/<[^>]+>/g, "");
-}
 var DEFAULT_NUM = 10;
 var MAX_RESULTS = 50;
 var TIMEOUT_MS2 = 15e3;
@@ -2588,7 +2510,8 @@ async function duckduckgoSearch(query2, num, signal) {
       source: "duckduckgo",
       truncated: results.length >= num
     };
-  } catch {
+  } catch (err) {
+    console.log(JSON.stringify({ level: "debug", event: "search_failed", query: query2, error: err instanceof Error ? err.message : String(err) }));
     return {
       query: query2,
       results: [{ title: "Search unavailable", url: "", snippet: "Could not reach DuckDuckGo" }],
@@ -2610,11 +2533,11 @@ function parseDuckDuckGo(html, num) {
   const snippetRegex = /<a class="result-link"[^>]+href="([^"]+)"[^>]*>([^<]+)<\/a>/gi;
   const snippet2Regex = /<a class="result-snippet"[^>]*>([^<]+)<\/a>/gi;
   const linkMatches = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined(m[1]), title: stripTags2(expectDefined(m[2])) })),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined(m[1]), title: stripTags(expectDefined(m[2])) })),
     num
   );
   const snippetMatches = takeFrom(
-    [...html.matchAll(snippet2Regex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined(m[1]))),
+    [...html.matchAll(snippet2Regex)].filter((m) => m[1]).map((m) => stripTags(expectDefined(m[1]))),
     num
   );
   for (let i = 0; i < linkMatches.length && i < num; i++) {
@@ -2645,15 +2568,15 @@ function parseGoogleResults(html, num) {
   const urlRegex = /<cite[^>]*>([^<]+)<\/cite>/gi;
   const snippetRegex = /<span[^>]*class="[^"]*aXCZ0b[^>]*>([^<]+)<\/span>/gi;
   const titles = takeFrom(
-    [...html.matchAll(titleRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined(m[1]))),
+    [...html.matchAll(titleRegex)].filter((m) => m[1]).map((m) => stripTags(expectDefined(m[1]))),
     num
   );
   const urls = takeFrom(
-    [...html.matchAll(urlRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined(m[1])).replace(/^\*(https?:\/\/[^\s]+).*$/, "$1")).filter((u) => u.startsWith("http")),
+    [...html.matchAll(urlRegex)].filter((m) => m[1]).map((m) => stripTags(expectDefined(m[1])).replace(/^\*(https?:\/\/[^\s]+).*$/, "$1")).filter((u) => u.startsWith("http")),
     num
   );
   const snippets = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined(m[1]))),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags(expectDefined(m[1]))),
     num
   );
   for (let i = 0; i < Math.min(titles.length, num); i++) {
@@ -2682,11 +2605,11 @@ function parseBingResults(html, num) {
   const titleRegex = /<h2[^>]*>\s*<a[^>]+href="([^"]+)"[^>]*>([^<]+)<\/a>\s*<\/h2>/gi;
   const snippetRegex = /<p[^>]*class="[^"]*b_paractl[^"]*"[^>]*>([^<]+)<\/p>/gi;
   const entries = takeFrom(
-    [...html.matchAll(titleRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined(m[1]), title: stripTags2(expectDefined(m[2])) })),
+    [...html.matchAll(titleRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined(m[1]), title: stripTags(expectDefined(m[2])) })),
     num
   );
   const snippets = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined(m[1]))),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags(expectDefined(m[1]))),
     num
   );
   for (let i = 0; i < entries.length; i++) {
@@ -2716,7 +2639,7 @@ async function fetchWithTimeout(url, signal, timeoutMs) {
 function anySignal(...signals) {
   return AbortSignal.any(signals);
 }
-function stripTags2(html) {
+function stripTags(html) {
   return html.replace(/<[^>]+>/g, "").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").trim();
 }
 var todoTool = {
@@ -3222,7 +3145,7 @@ function buildArgs(input) {
         ...files.length ? ["--", ...files] : []
       ];
     case "branch":
-      return input.branch ? ["branch", ...input.branch.startsWith("-") ? [] : [input.branch]] : ["branch"];
+      return input.branch ? ["branch", ...input.branch.startsWith("-") || input.branch.includes(" --") ? [] : [input.branch]] : ["branch"];
     case "checkout":
       return [
         "checkout",
@@ -3238,7 +3161,7 @@ function buildArgs(input) {
     case "fetch":
       return ["fetch", ...input.branch ? [input.branch] : ["--all"]];
     case "reset":
-      return ["reset"];
+      return ["reset", ...files.length ? ["--", ...files] : []];
     case "worktree":
       switch (input.worktreeAction) {
         case "list":
@@ -3383,14 +3306,16 @@ function extractDiffTargets(patch) {
   const out = [];
   const re = /^\+\+\+\s+([^\t\r\n]+)/gm;
   for (const m of patch.matchAll(re)) {
-    const target = m[1]?.trim();
+    const raw = m[1];
+    if (!raw) continue;
+    const target = raw.length > 4096 ? raw.slice(0, 4096).trim() : raw.trim();
     if (!target || target === "/dev/null") continue;
     out.push(target);
   }
   return out;
 }
 function stripPathComponents(p, strip) {
-  const parts = p.replace(/\\/g, "/").split("/");
+  const parts = p.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".");
   if (parts.length <= strip) return void 0;
   return parts.slice(strip).join("/");
 }
@@ -3862,6 +3787,7 @@ async function walkDir(dir, depth, opts) {
     }
   }
 }
+var isWin2 = process.platform === "win32";
 async function* spawnStream(opts) {
   const max = opts.maxBytes ?? 2e5;
   const flushAt = opts.flushBytes ?? 4 * 1024;
@@ -3872,14 +3798,13 @@ async function* spawnStream(opts) {
   let error;
   const spool = createOutputSpool({ tool: opts.cmd, thresholdBytes: max });
   const cmd = resolveWin32Command(opts.cmd);
-  const isWin = process.platform === "win32";
-  const needsShell = isWin && (cmd.endsWith(".cmd") || cmd.endsWith(".bat"));
+  const needsShell = isWin2 && (cmd.endsWith(".cmd") || cmd.endsWith(".bat"));
   const child = spawn(cmd, opts.args, {
     cwd: opts.cwd,
     env: buildChildEnv(),
     stdio: ["ignore", "pipe", "pipe"],
     windowsHide: true,
-    ...isWin ? {} : { signal: opts.signal },
+    ...isWin2 ? {} : { signal: opts.signal },
     ...needsShell ? { shell: true, windowsVerbatimArguments: true } : {}
   });
   const registry = getProcessRegistry();
@@ -4085,8 +4010,8 @@ var lintTool = {
     }
     const cmd = detected === "biome" ? "biome" : detected;
     const result = yield* spawnStream({ cmd, args, cwd, signal: opts.signal, maxBytes: 1e5 });
-    const errors = (result.stdout.match(/error/g) || []).length;
-    const warnings = (result.stdout.match(/warning/g) || []).length;
+    const errors = [...result.stdout.matchAll(/\berror\b/gi)].length;
+    const warnings = [...result.stdout.matchAll(/\bwarning\b/gi)].length;
     yield {
       type: "final",
       output: {
@@ -4190,7 +4115,7 @@ var formatTool = {
       signal: opts.signal,
       maxBytes: 1e5
     });
-    const changed = (result.stdout.match(/changed/g) || []).length;
+    const changed = [...result.stdout.matchAll(/\bchanged\b/gi)].length;
     yield {
       type: "final",
       output: {
@@ -4238,6 +4163,10 @@ var typecheckTool = {
       all: {
         type: "boolean",
         description: "Type-check all projects (pnpm -r) (default: false)"
+      },
+      json: {
+        type: "boolean",
+        description: "Emit JSON output from tsc (default: false)"
       }
     }
   },
@@ -4265,6 +4194,7 @@ var typecheckTool = {
       if (tsconfig) args.push("--project", tsconfig);
       project = tsconfig ?? "default";
     }
+    if (input.json) args.push("--json");
     yield { type: "log", text: `tsc ${args.join(" ")}`, data: { project } };
     const result = yield* spawnStream({
       cmd: "npx",
@@ -4273,8 +4203,8 @@ var typecheckTool = {
       signal: opts.signal,
       maxBytes: 2e5
     });
-    const errors = (result.stdout.match(/error TS/g) || []).length;
-    const warnings = (result.stdout.match(/warning/g) || []).length;
+    const errors = [...result.stdout.matchAll(/\berror\b/gi)].length;
+    const warnings = [...result.stdout.matchAll(/\bwarning\b/gi)].length;
     yield {
       type: "final",
       output: {
@@ -4678,7 +4608,7 @@ function parseAuditOutput(json, exitCode) {
       total,
       summary,
       output: json,
-      truncated: json.length >= 1e5
+      truncated: json.length > 1e5
     };
   } catch {
     return {
@@ -4914,9 +4844,11 @@ async function dockerLogs(service, lines, filterRe, cwd, signal, since) {
     child.stderr?.on("data", (c) => {
       if (stderr.length < MAX) stderr += c.toString();
     });
-    child.stdout?.on("error", () => {
+    child.stdout?.on("error", (e) => {
+      console.log(JSON.stringify({ level: "debug", event: "pipe_error", stream: "stdout", error: e.message }));
     });
-    child.stderr?.on("error", () => {
+    child.stderr?.on("error", (e) => {
+      console.log(JSON.stringify({ level: "debug", event: "pipe_error", stream: "stderr", error: e.message }));
     });
     child.on("close", () => {
       const output = stdout + stderr;
@@ -5036,10 +4968,6 @@ var documentTool = {
         enum: ["jsdoc", "tsdoc", "block"],
         description: "Documentation style (default: jsdoc)"
       },
-      overwrite: {
-        type: "boolean",
-        description: "Overwrite existing docstrings (default: false)"
-      },
       cwd: { type: "string", description: "Working directory (default: cwd)" }
     }
   },
@@ -5097,10 +5025,10 @@ async function resolveFiles2(filesInput, cwd) {
 }
 function processFile(content, absPath, _style, _overwrite, target) {
   const results = [];
-  const functionRegex = /(?:async\s+)?function\s+(\w+)\s*\(([^)]*)\)/g;
-  const arrowRegex = /(?:const|let|var)\s+(\w+)\s*=\s*(?:async\s+)?\(([^)]*)\)\s*=>/g;
-  const classRegex = /class\s+(\w+)/g;
-  const typeRegex = /(?:type|interface)\s+(\w+)\s*[=<]/g;
+  const functionRegex = /(?:async\s+)?function\s+(\w+)\s*\(([^)]*)\)/;
+  const arrowRegex = /(?:const|let|var)\s+(\w+)\s*=\s*(?:async\s+)?\(([^)]*)\)\s*=>/;
+  const classRegex = /class\s+(\w+)/;
+  const typeRegex = /(?:type|interface)\s+(\w+)\s*[=<]/;
   const allMatches = [];
   if (target === "all" || target === "function") {
     for (const m of content.matchAll(functionRegex)) {
@@ -5545,7 +5473,7 @@ var batchToolUseTool = {
       failed = allResults.filter((r) => !r.success).length;
     } else {
       for (const call of input.calls) {
-        const result = await executeSingle(call, ctx, opts);
+        const result = await executeSingle(call, ctx, opts ?? { signal: void 0 });
         results.push(result);
         if (result.success) {
           succeeded++;
@@ -8911,6 +8839,7 @@ var taskTool = {
     const promoteMeta = { count: 0, title: "" };
     const planifyMeta = { title: "", details: "" };
     let didPlanify = false;
+    let todosToReplace = null;
     const file = await mutateTasks(taskPath, sessionId, async (f) => {
       switch (input.action) {
         case "show":
@@ -8966,7 +8895,7 @@ var taskTool = {
           }
           const now = (/* @__PURE__ */ new Date()).toISOString();
           const newTask = {
-            id: `task_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+            id: `task_${Date.now()}_${randomUUID().slice(0, 8)}`,
             title: t.title,
             description: t.description,
             type: t.type || "feature",
@@ -9043,7 +8972,7 @@ var taskTool = {
               });
             }
           }
-          ctx.state.replaceTodos(todos);
+          todosToReplace = todos;
           promoteMeta.count = todos.length;
           promoteMeta.title = match.title;
           break;
@@ -9075,6 +9004,7 @@ var taskTool = {
       }
       return f;
     });
+    if (todosToReplace) ctx.state.replaceTodos(todosToReplace);
     if (early) return early;
     if (didPlanify) {
       const { title, details } = planifyMeta;