@wrongstack/tools 0.292.1 → 0.295.0

package/dist/git.d.ts

@@ -1,4 +1,4 @@
-import type { Tool } from '@wrongstack/core';
+import type { Tool } from '@wrongstack/core/types';
 type GitSubcommand = 'status' | 'log' | 'diff' | 'commit' | 'branch' | 'checkout' | 'stash' | 'push' | 'pull' | 'fetch' | 'reset' | 'worktree';
 interface GitInput {
     command: GitSubcommand;

package/dist/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG7C,KAAK,aAAa,GACd,QAAQ,GACR,KAAK,GACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,OAAO,GACP,MAAM,GACN,MAAM,GACN,OAAO,GACP,OAAO,GACP,UAAU,CAAC;AAEf,UAAU,QAAQ;IAChB,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC5D,sBAAsB;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACjE,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,qDAAqD;IACrD,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B;AAED,UAAU,SAAS;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAKD,eAAO,MAAM,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAqK7C,CAAC"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAGnD,KAAK,aAAa,GACd,QAAQ,GACR,KAAK,GACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,OAAO,GACP,MAAM,GACN,MAAM,GACN,OAAO,GACP,OAAO,GACP,UAAU,CAAC;AAEf,UAAU,QAAQ;IAChB,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC5D,sBAAsB;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACjE,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,qDAAqD;IACrD,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B;AAED,UAAU,SAAS;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAKD,eAAO,MAAM,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAqK7C,CAAC"}

package/dist/git.js

@@ -2,10 +2,11 @@
 import { spawn } from "node:child_process";
 import { statSync } from "node:fs";
 import { dirname, resolve, sep } from "node:path";
-import { assessCommitSafety, buildChildEnv } from "@wrongstack/core";
+import { assessCommitSafety } from "@wrongstack/core/coordination";
+import { buildChildEnv } from "@wrongstack/core/utils";
 
 // src/_util.ts
-import * as Core from "@wrongstack/core";
+import * as Core from "@wrongstack/core/utils";
 var COMMAND_OUTPUT_MAX_BYTES = 32768;
 var REPEAT_RUN_THRESHOLD = 3;
 function collapseCarriageReturns(text) {

package/dist/git.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/git.ts", "../src/_util.ts"],
-  "sourcesContent": ["import { spawn } from 'node:child_process';\nimport { statSync } from 'node:fs';\nimport { dirname, resolve, sep } from 'node:path';\nimport { assessCommitSafety, buildChildEnv } from '@wrongstack/core';\nimport type { Tool } from '@wrongstack/core';\nimport { COMMAND_OUTPUT_MAX_BYTES, normalizeCommandOutput } from './_util.js';\n\ntype GitSubcommand =\n  | 'status'\n  | 'log'\n  | 'diff'\n  | 'commit'\n  | 'branch'\n  | 'checkout'\n  | 'stash'\n  | 'push'\n  | 'pull'\n  | 'fetch'\n  | 'reset'\n  | 'worktree';\n\ninterface GitInput {\n  command: GitSubcommand;\n  files?: string | string[] | undefined;\n  dry_run?: boolean | undefined;\n  /** commit message for `commit` subcommand */\n  message?: string | undefined;\n  /** branch name for `checkout` / `branch` */\n  branch?: string | undefined;\n  /** pass --graph, --oneline, --stat for `log` */\n  format?: 'short' | 'oneline' | 'stat' | 'graph' | undefined;\n  /** limit for `log` */\n  limit?: number | undefined;\n  /** worktree action: list, add, remove, prune */\n  worktreeAction?: 'list' | 'add' | 'remove' | 'prune' | undefined;\n  /** path for worktree add/remove (e.g. \"../wt-feature-xyz\") */\n  worktreePath?: string | undefined;\n  /** create new branch when adding worktree */\n  newBranch?: boolean | undefined;\n  /** force operation (e.g. worktree remove --force) */\n  force?: boolean | undefined;\n}\n\ninterface GitOutput {\n  command: GitSubcommand;\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  truncated: boolean;\n  /** Staged diff shown for commit commands so the caller can verify. */\n  diff?: string | undefined;\n  /**\n   * Shared-worktree warning for `commit`: present when uncommitted changes\n   * were authored by another agent/session (or a concurrent non-wrongstack\n   * process). The commit still proceeds \u2014 this is advisory so the caller can\n   * reconsider committing work it did not write.\n   */\n  warning?: string | undefined;\n}\n\nconst TIMEOUT_MS = 30_000;\nconst MAX_OUTPUT = 100_000;\n\nexport const gitTool: Tool<GitInput, GitOutput> = {\n  name: 'git',\n  category: 'Git',\n  description:\n    'Safe wrapper around common git operations. Supports status, log, diff, commit, branch, checkout, stash, push, pull, fetch, reset, worktree, etc. ' +\n    'This is the preferred way to interact with git instead of using the raw `bash` or `exec` tools.',\n  usageHint:\n    'ALWAYS prefer this tool over raw shell git commands.\\n\\n' +\n    'Key fields:\\n' +\n    '- `command`: one of the supported subcommands (status, log, diff, commit, etc.)\\n' +\n    '- Use `message` only for commit operations.\\n' +\n    '- Use `files` array for operations that take paths (status, diff, add, etc.).\\n' +\n    '- Non-mutating commands (status, log, diff, branch, fetch) are still permission:confirm for safety.\\n' +\n    '- For `commit` in a possibly-shared working tree, pass an explicit `files` list scoped to ' +\n    'what YOU changed. A bare commit (no `files`) includes ALL staged changes and may capture ' +\n    \"another agent's half-done work. Heed the `warning` field on the result.\\n\" +\n    'Never pass raw git flags through `args` for dangerous operations \u2014 use the structured fields.',\n  permission: 'confirm',\n  icon: 'git',\n  // Conservative: any of these may mutate. The non-mutating commands\n  // (status/log/diff/branch/fetch) are still gated on `permission: 'confirm'`\n  // and `MUTATING_SUBCOMMANDS` is consulted at runtime for per-call checks.\n  mutating: true,\n  capabilities: ['fs.write', 'shell.restricted'],\n  timeoutMs: TIMEOUT_MS,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      command: {\n        type: 'string',\n        enum: [\n          'status',\n          'log',\n          'diff',\n          'commit',\n          'branch',\n          'checkout',\n          'stash',\n          'push',\n          'pull',\n          'fetch',\n          'reset',\n          'worktree',\n        ],\n        description: 'Git subcommand',\n      },\n      files: {\n        type: 'string',\n        description:\n          'File(s) for status/diff: single path, comma-separated list, or \"**/*.ts\" glob',\n      },\n      message: { type: 'string', description: 'Commit message (required for commit)' },\n      branch: { type: 'string', description: 'Branch name for checkout/branch' },\n      format: {\n        type: 'string',\n        enum: ['short', 'oneline', 'stat', 'graph'],\n        description: 'Log format (default: short)',\n      },\n      limit: { type: 'integer', description: 'Limit for log (default: 20)' },\n      dry_run: { type: 'boolean', description: 'For commit: show what would be committed' },\n      worktreeAction: {\n        type: 'string',\n        enum: ['list', 'add', 'remove', 'prune'],\n        description: 'Worktree action: list, add, remove, prune',\n      },\n      worktreePath: {\n        type: 'string',\n        description: 'Path for worktree add/remove (e.g. \"../wt-feature-xyz\")',\n      },\n      newBranch: {\n        type: 'boolean',\n        description: 'Create new branch when adding worktree',\n      },\n      force: {\n        type: 'boolean',\n        description: 'Force operation (e.g. worktree remove --force)',\n      },\n    },\n    required: ['command'],\n  },\n  async execute(input, ctx, opts) {\n    if (!input?.command) throw new Error('git: command is required');\n\n    if (input.command === 'commit' && !input.message) {\n      return {\n        command: 'commit',\n        stdout: '',\n        stderr: 'git commit requires a message (-m flag)',\n        exitCode: 1,\n        truncated: false,\n      };\n    }\n\n    // Validate worktree paths/branches before touching the filesystem: reject\n    // flag injection and any path that escapes the project root.\n    if (input.command === 'worktree') {\n      const guard = validateWorktreeInput(input, ctx.projectRoot);\n      if (guard) return guard;\n    }\n\n    // Bound the search at projectRoot so a non-git project doesn't drift\n    // into a parent repo (e.g. ~/repos/.git) and operate on the wrong tree.\n    const gitDir = findGitDir(ctx.cwd, ctx.projectRoot);\n    if (!gitDir) {\n      return {\n        command: input.command,\n        stdout: '',\n        stderr: 'Not in a git repository (within project root)',\n        exitCode: 128,\n        truncated: false,\n      };\n    }\n\n    const args = buildArgs(input);\n\n    // For commits, check whether the working tree holds changes this session\n    // did not author (a concurrent agent / separate wrongstack process / human).\n    // Warn-only: the commit still runs, but the caller sees the risk of sweeping\n    // up another agent's half-done work. Best-effort \u2014 never blocks the commit.\n    let safetyWarning: string | undefined;\n    if (input.command === 'commit') {\n      try {\n        const report = await assessCommitSafety({\n          cwd: ctx.cwd,\n          projectRoot: ctx.projectRoot,\n          sessionId: ctx.session?.id,\n          signal: opts.signal,\n        });\n        if (report.warning) {\n          // Committing without an explicit file list stages/commits everything\n          // already staged \u2014 the highest-risk path for capturing foreign work.\n          const scopeNote = input.files\n            ? ''\n            : '\\nNote: this commit has no explicit `files` list, so it will include ALL ' +\n              'staged changes. Pass `files` to scope the commit to only what you changed.';\n          safetyWarning = report.warning + scopeNote;\n        }\n      } catch {\n        // commit-safety is advisory; ignore failures\n      }\n    }\n\n    // For commits, capture the staged diff BEFORE committing so the caller\n    // can verify what is about to land without another tool call.\n    let stagedDiff: string | undefined;\n    if (input.command === 'commit' && !input.dry_run) {\n      try {\n        const diffResult = await runGit(['diff', '--cached'], gitDir, opts.signal);\n        if (diffResult.exitCode === 0) {\n          const MAX_DIFF = 20_000;\n          stagedDiff =\n            diffResult.stdout.length > MAX_DIFF\n              ? diffResult.stdout.slice(0, MAX_DIFF) + '\\n\\n... (diff truncated)'\n              : diffResult.stdout;\n        }\n      } catch {\n        // Diff capture is best-effort; don't fail the whole operation\n      }\n    }\n\n    const result = await runGit(args, gitDir, opts.signal);\n    if (stagedDiff !== undefined) result.diff = stagedDiff;\n    if (safetyWarning !== undefined) result.warning = safetyWarning;\n    return result;\n  },\n};\n\n/**\n * Reject worktree inputs that could inject git flags or escape the project\n * root. Returns a `GitOutput` describing the rejection, or `null` if safe.\n */\nfunction validateWorktreeInput(input: GitInput, projectRoot: string): GitOutput | null {\n  const reject = (stderr: string): GitOutput => ({\n    command: 'worktree',\n    stdout: '',\n    stderr,\n    exitCode: 1,\n    truncated: false,\n  });\n\n  // Flag injection: a leading '-' would be parsed as a git option.\n  if (input.branch?.startsWith('-')) return reject(`unsafe branch name: ${input.branch}`);\n  if (input.worktreePath?.startsWith('-')) {\n    return reject(`unsafe worktree path: ${input.worktreePath}`);\n  }\n\n  // Path escape: add/remove targets must resolve inside the project root.\n  if (\n    (input.worktreeAction === 'add' || input.worktreeAction === 'remove') &&\n    input.worktreePath\n  ) {\n    const root = resolve(projectRoot);\n    const abs = resolve(root, input.worktreePath);\n    if (abs !== root && !abs.startsWith(root + sep)) {\n      return reject(`unsafe worktree path (escapes project root): ${input.worktreePath}`);\n    }\n  }\n\n  return null;\n}\n\nfunction findGitDir(cwd: string, projectRoot: string): string | null {\n  const root = projectRoot;\n  let dir = cwd;\n  for (let i = 0; i < 20; i++) {\n    try {\n      const stat = statSync(`${dir}/.git`);\n      // A normal repo has a `.git` directory; a linked worktree has a `.git`\n      // *file* (gitlink pointing at the main repo). Accept both so the tool\n      // operates inside a worktree when a subagent's cwd is a worktree dir.\n      if (stat.isDirectory() || stat.isFile()) return dir;\n    } catch {\n      // continue\n    }\n    if (dir === root) break;\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction buildArgs(input: GitInput): string[] {\n  const limit = input.limit ?? 20;\n  const files = input.files\n    ? (Array.isArray(input.files) ? input.files : input.files.split(','))\n        .map((s: string) => s.trim())\n        .filter(Boolean)\n    : [];\n\n  switch (input.command) {\n    case 'status':\n      return ['status', ...(files.length ? ['--', ...files] : [])];\n    case 'log':\n      return [\n        'log',\n        `--max-count=${limit}`,\n        ...(input.format === 'oneline' ? ['--oneline'] : []),\n        ...(input.format === 'stat' ? ['--stat'] : []),\n        ...(input.format === 'graph' ? ['--oneline', '--graph', '--decorate'] : []),\n        ...(input.format === 'short' || !input.format ? [] : []),\n      ];\n    case 'diff':\n      return ['diff', '--no-color', ...(files.length ? ['--', ...files] : [])];\n    case 'commit':\n      return [\n        'commit',\n        ...(input.dry_run ? ['--dry-run', '--porcelain'] : []),\n        ...(input.message ? ['-m', input.message] : []),\n        ...(files.length ? ['--', ...files] : []),\n      ];\n    case 'branch':\n      // Validate branch name: reject names starting with '-' or containing ' --'\n      // to prevent flag injection (e.g. \"foo --force\").\n      return input.branch\n        ? ['branch', ...(input.branch.startsWith('-') || input.branch.includes(' --') ? [] : [input.branch])]\n        : ['branch'];\n    case 'checkout':\n      return [\n        'checkout',\n        ...(input.branch ? ['--', input.branch] : []),\n        ...(files.length ? ['--', ...files] : []),\n      ];\n    case 'stash':\n      return input.message ? ['stash', 'push', '-m', input.message] : ['stash', 'push'];\n    case 'push':\n      return ['push'];\n    case 'pull':\n      return ['pull'];\n    case 'fetch':\n      return ['fetch', ...(input.branch ? [input.branch] : ['--all'])];\n    case 'reset':\n      return ['reset', ...(files.length ? ['--', ...files] : [])];\n    case 'worktree':\n      switch (input.worktreeAction) {\n        case 'list':\n          return ['worktree', 'list'];\n        case 'add': {\n          // git worktree add [-b <new-branch>] <path> [<commit-ish>]\n          // The path comes BEFORE the branch/commit-ish. With --newBranch the\n          // branch is the name to create (`-b <branch> <path>`); without it the\n          // branch is an existing branch/commit to check out (`<path> <branch>`).\n          if (!input.worktreePath) return ['worktree', 'list'];\n          const add = ['worktree', 'add'];\n          if (input.newBranch && input.branch) add.push('-b', input.branch);\n          add.push(input.worktreePath);\n          if (!input.newBranch && input.branch) add.push(input.branch);\n          return add;\n        }\n        case 'remove':\n          return [\n            'worktree',\n            'remove',\n            ...(input.force ? ['--force'] : []),\n            input.worktreePath ?? '',\n          ].filter(Boolean);\n        case 'prune':\n          return ['worktree', 'prune'];\n        default:\n          return ['worktree', 'list'];\n      }\n    default:\n      return [input.command];\n  }\n}\n\nfunction runGit(args: string[], cwd: string, signal: AbortSignal): Promise<GitOutput> {\n  return new Promise((resolve) => {\n    let stdout = '';\n    let stderr = '';\n\n    const child = spawn('git', args, {\n      cwd,\n      signal,\n      env: buildChildEnv(),\n      stdio: ['ignore', 'pipe', 'pipe'],\n      windowsHide: true,\n    });\n\n    child.stdout?.on('data', (chunk: Buffer) => {\n      if (stdout.length < MAX_OUTPUT) {\n        stdout += chunk.toString();\n      }\n    });\n\n    child.stderr?.on('data', (chunk: Buffer) => {\n      if (stderr.length < MAX_OUTPUT) {\n        stderr += chunk.toString();\n      }\n    });\n\n    child.on('error', (err) => {\n      resolve({\n        command: args[0] as GitSubcommand,\n        stdout: normalizeCommandOutput(stdout),\n        stderr: err.message,\n        exitCode: 1,\n        truncated: Buffer.byteLength(stdout, 'utf8') > COMMAND_OUTPUT_MAX_BYTES,\n      });\n    });\n\n    child.on('close', (code) => {\n      // `MAX_OUTPUT` already bounded the raw buffers in memory; normalize strips\n      // ANSI / progress / duplicate noise and head+tail-truncates to the shared\n      // command cap so only useful output reaches the model.\n      resolve({\n        command: args[0] as GitSubcommand,\n        stdout: normalizeCommandOutput(stdout),\n        stderr: normalizeCommandOutput(stderr),\n        exitCode: code ?? 1,\n        truncated:\n          Buffer.byteLength(stdout, 'utf8') > COMMAND_OUTPUT_MAX_BYTES ||\n          Buffer.byteLength(stderr, 'utf8') > COMMAND_OUTPUT_MAX_BYTES,\n      });\n    });\n  });\n}\n", "import { createHash } from 'node:crypto';\nimport * as fsp from 'node:fs/promises';\nimport * as path from 'node:path';\nimport * as Core from '@wrongstack/core';\nimport type { Context } from '@wrongstack/core';\n\n/**\n * sha-256 hex of a UTF-8 string. Used by the file tools to record a content\n * hash alongside the mtime in `ctx.recordRead` \u2014 the hash is the authoritative\n * staleness arbiter for `edit` (mtime has a 2 s tolerance window on Windows).\n */\nexport function sha256hex(content: string): string {\n  return createHash('sha256').update(content, 'utf8').digest('hex');\n}\n/** Detected package manager for a project directory. */\nexport type PackageManager = 'pnpm' | 'yarn' | 'npm';\n\n/**\n * Detect the project's package manager by inspecting lockfiles in `cwd`.\n * Order: pnpm \u2192 yarn \u2192 npm (default). Missing or unreadable directories fall\n * back to `npm` rather than throwing, so a `safeResolve`-checked cwd that\n * happens to be empty never aborts the tool.\n */\nexport async function detectPackageManager(cwd: string): Promise<PackageManager> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(`${cwd}/pnpm-lock.yaml`);\n    return 'pnpm';\n  } catch {\n    /* not pnpm */\n  }\n  try {\n    await stat(`${cwd}/yarn.lock`);\n    return 'yarn';\n  } catch {\n    /* not yarn */\n  }\n  return 'npm';\n}\n\nexport function resolvePath(input: string, ctx: Context): string {\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);\n}\n\n/**\n * Roots every file tool may always reach, even in restricted mode: the\n * project root and the user-global `~/.wrongstack` directory (config, memory,\n * sessions, skills). `~/.wrongstack` honors the `WRONGSTACK_HOME` override.\n */\nfunction allowedRoots(ctx: Context): string[] {\n  return [path.resolve(ctx.projectRoot), path.resolve(Core.wstackGlobalRoot())];\n}\n\n/** True if `target` is `root` itself or nested inside any of `roots`. */\nfunction isInsideAny(target: string, roots: string[]): boolean {\n  return roots.some((root) => {\n    const rel = path.relative(root, target);\n    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));\n  });\n}\n\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\n  const target = path.resolve(absPath);\n  // Unrestricted filesystem access: skip the project-root containment check.\n  if (ctx.allowOutsideProjectRoot) return target;\n  if (isInsideAny(target, allowedRoots(ctx))) return target;\n  throw new Error(`Path \"${absPath}\" is outside project root \"${path.resolve(ctx.projectRoot)}\"`);\n}\n\nexport function safeResolve(input: string, ctx: Context): string {\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\n}\n\n/**\n * Defense against in-root\u2192out-of-root symlink escape (CWE-59). `safeResolve`\n * only does a syntactic `../` check, so a symlink that lives *inside* the\n * project root but points outside still passes it. This resolves the path\n * through `fs.realpath` and re-verifies containment against the realpath of\n * the project root (comparing like-for-like, since the root itself may be a\n * symlink \u2014 macOS `/var`\u2192`/private/var`, Windows 8.3 short names). For a path\n * that does not exist yet (e.g. a `write` to a new file) the nearest existing\n * ancestor directory is checked instead. Throws if the real target escapes.\n *\n * Mirrors the per-file guard already used in `replace.ts`/`grep.ts`; applied\n * to single-file `read`/`edit`/`write` it throws (rather than skips) because\n * the caller named exactly one file.\n */\nexport async function assertRealInsideRoot(absPath: string, ctx: Context): Promise<void> {\n  // Unrestricted filesystem access: no symlink-escape check to perform.\n  if (ctx.allowOutsideProjectRoot) return;\n  // Compare like-for-like against the realpath of each always-allowed root\n  // (project root + ~/.wrongstack), since a root may itself be a symlink.\n  const realRoots = await Promise.all(\n    allowedRoots(ctx).map((r) => fsp.realpath(r).catch(() => path.resolve(r))),\n  );\n  let probe = absPath;\n  for (;;) {\n    let real: string;\n    try {\n      real = await fsp.realpath(probe);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        const parent = path.dirname(probe);\n        if (parent === probe) return; // reached fs root without escaping\n        probe = parent;\n        continue;\n      }\n      throw err;\n    }\n    if (isInsideAny(real, realRoots)) return;\n    throw new Error(\n      `Path \"${absPath}\" resolves through a symlink outside project root \"${realRoots[0]}\"`,\n    );\n  }\n}\n\n/** `safeResolve` + symlink realpath containment check. Async. */\nexport async function safeResolveReal(input: string, ctx: Context): Promise<string> {\n  const abs = safeResolve(input, ctx);\n  await assertRealInsideRoot(abs, ctx);\n  return abs;\n}\n\nexport function truncateMiddle(s: string, max: number): string {\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\n  const half = Math.floor(max / 2);\n  return (\n    s.slice(0, half) +\n    `\\n\u2026[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]\u2026\\n` +\n    s.slice(-half)\n  );\n}\n\nexport function isBinaryBuffer(buf: Buffer): boolean {\n  const len = Math.min(buf.length, 8192);\n  for (let i = 0; i < len; i++) {\n    if (buf[i] === 0) return true;\n  }\n  return false;\n}\n\n// \u2500\u2500\u2500 Command-output normalization (token-saving) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// Raw process output is full of tokens the model gains nothing from: ANSI\n// escapes, carriage-return progress spam, runs of identical warning lines, and\n// huge tails of build noise. These helpers strip that noise before the output\n// reaches the LLM. They are scoped to COMMAND tools (bash/git/exec and the\n// _spawn-stream consumers) \u2014 never applied to structured/code outputs.\n\n/** Unified byte cap for all command tool output fed to the model. */\nexport const COMMAND_OUTPUT_MAX_BYTES = 32_768;\n\n/** Runs of >= this many identical consecutive lines are collapsed. */\nconst REPEAT_RUN_THRESHOLD = 3;\n\n/**\n * Collapse carriage-return overwrites the way a terminal would: `\\r\\n` becomes\n * `\\n`, and a bare `\\r` (progress redraw) keeps only the text after the LAST\n * `\\r` on its physical line. Without this, a single progress bar that redraws\n * 200 times explodes into 200 lines.\n */\nexport function collapseCarriageReturns(text: string): string {\n  const lf = text.replace(/\\r\\n/g, '\\n');\n  if (!lf.includes('\\r')) return lf;\n  return lf\n    .split('\\n')\n    .map((line) => (line.includes('\\r') ? line.slice(line.lastIndexOf('\\r') + 1) : line))\n    .join('\\n');\n}\n\n/**\n * Collapse a run of `minRun`+ identical consecutive lines into the line once\n * plus a marker. Consecutive-only \u2014 it never reorders or dedups non-adjacent\n * lines, so diffs/source stay intact.\n */\nexport function collapseConsecutiveDuplicates(text: string, minRun = REPEAT_RUN_THRESHOLD): string {\n  const lines = text.split('\\n');\n  const out: string[] = [];\n  let i = 0;\n  while (i < lines.length) {\n    let j = i + 1;\n    while (j < lines.length && lines[j] === lines[i]) j++;\n    const run = j - i;\n    if (run >= minRun) {\n      out.push(lines[i]!, `\u2026 \u27E8repeated ${run}\u00D7\u27E9`);\n    } else {\n      for (let k = i; k < j; k++) out.push(lines[k]!);\n    }\n    i = j;\n  }\n  return out.join('\\n');\n}\n\n/** Largest prefix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeHeadBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(0, mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(0, lo);\n}\n\n/** Largest suffix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeTailBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(s.length - mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(s.length - lo);\n}\n\n/**\n * Truncate to `maxBytes` keeping BOTH ends \u2014 the head (what ran / early context)\n * and the tail (errors and summaries usually land last), biased ~45/55 toward\n * the tail. The result never exceeds `maxBytes`.\n */\nexport function truncateHeadTail(s: string, maxBytes: number): string {\n  const total = Buffer.byteLength(s, 'utf8');\n  if (total <= maxBytes) return s;\n  // Reserve a fixed allowance for the marker so the final string can't exceed\n  // the cap even though the dropped-byte count's digit width varies.\n  const MARKER_RESERVE = 64;\n  const avail = Math.max(0, maxBytes - MARKER_RESERVE);\n  const headBudget = Math.floor(avail * 0.45);\n  const head = takeHeadBytes(s, headBudget);\n  const tail = takeTailBytes(s, avail - Buffer.byteLength(head, 'utf8'));\n  const kept = Buffer.byteLength(head, 'utf8') + Buffer.byteLength(tail, 'utf8');\n  return `${head}\\n\u2026[truncated ${total - kept} bytes]\u2026\\n${tail}`;\n}\n\n/**\n * Full token-saving pipeline for command tool output: strip ANSI \u2192 collapse\n * carriage-return progress \u2192 trim trailing whitespace \u2192 collapse identical\n * consecutive lines \u2192 squeeze blank-line runs \u2192 head+tail truncate to the cap.\n */\nexport function normalizeCommandOutput(\n  raw: string,\n  opts: { maxBytes?: number | undefined } = {},\n): string {\n  if (!raw) return raw;\n  let text = Core.stripAnsi(raw);\n  text = collapseCarriageReturns(text);\n  text = text.replace(/[ \\t]+$/gm, ''); // trailing whitespace per line\n  text = collapseConsecutiveDuplicates(text);\n  text = text.replace(/\\n{3,}/g, '\\n\\n'); // >=2 blank lines \u2192 1\n  return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);\n}\n"],
-  "mappings": ";AAAA,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,SAAS,SAAS,WAAW;AACtC,SAAS,oBAAoB,qBAAqB;;;ACAlD,YAAY,UAAU;AAmJf,IAAM,2BAA2B;AAGxC,IAAM,uBAAuB;AAQtB,SAAS,wBAAwB,MAAsB;AAC5D,QAAM,KAAK,KAAK,QAAQ,SAAS,IAAI;AACrC,MAAI,CAAC,GAAG,SAAS,IAAI,EAAG,QAAO;AAC/B,SAAO,GACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAU,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,IAAK,EACnF,KAAK,IAAI;AACd;AAOO,SAAS,8BAA8B,MAAc,SAAS,sBAA8B;AACjG,QAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,QAAM,MAAgB,CAAC;AACvB,MAAI,IAAI;AACR,SAAO,IAAI,MAAM,QAAQ;AACvB,QAAI,IAAI,IAAI;AACZ,WAAO,IAAI,MAAM,UAAU,MAAM,CAAC,MAAM,MAAM,CAAC,EAAG;AAClD,UAAM,MAAM,IAAI;AAChB,QAAI,OAAO,QAAQ;AACjB,UAAI,KAAK,MAAM,CAAC,GAAI,yBAAe,GAAG,YAAI;AAAA,IAC5C,OAAO;AACL,eAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAI,KAAK,MAAM,CAAC,CAAE;AAAA,IAChD;AACA,QAAI;AAAA,EACN;AACA,SAAO,IAAI,KAAK,IAAI;AACtB;AAGA,SAAS,cAAc,GAAW,UAA0B;AAC1D,MAAI,YAAY,EAAG,QAAO;AAE1B,MAAI,OAAO,WAAW,GAAG,MAAM,KAAK,SAAU,QAAO;AACrD,MAAI,KAAK;AACT,MAAI,KAAK,EAAE;AACX,SAAO,KAAK,IAAI;AACd,UAAM,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC;AACnC,QAAI,OAAO,WAAW,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,KAAK,SAAU,MAAK;AAAA,QAC5D,MAAK,MAAM;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,GAAG,EAAE;AACtB;AAGA,SAAS,cAAc,GAAW,UAA0B;AAC1D,MAAI,YAAY,EAAG,QAAO;AAE1B,MAAI,OAAO,WAAW,GAAG,MAAM,KAAK,SAAU,QAAO;AACrD,MAAI,KAAK;AACT,MAAI,KAAK,EAAE;AACX,SAAO,KAAK,IAAI;AACd,UAAM,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC;AACnC,QAAI,OAAO,WAAW,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,MAAM,KAAK,SAAU,MAAK;AAAA,QACpE,MAAK,MAAM;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,EAAE,SAAS,EAAE;AAC9B;AAOO,SAAS,iBAAiB,GAAW,UAA0B;AACpE,QAAM,QAAQ,OAAO,WAAW,GAAG,MAAM;AACzC,MAAI,SAAS,SAAU,QAAO;AAG9B,QAAM,iBAAiB;AACvB,QAAM,QAAQ,KAAK,IAAI,GAAG,WAAW,cAAc;AACnD,QAAM,aAAa,KAAK,MAAM,QAAQ,IAAI;AAC1C,QAAM,OAAO,cAAc,GAAG,UAAU;AACxC,QAAM,OAAO,cAAc,GAAG,QAAQ,OAAO,WAAW,MAAM,MAAM,CAAC;AACrE,QAAM,OAAO,OAAO,WAAW,MAAM,MAAM,IAAI,OAAO,WAAW,MAAM,MAAM;AAC7E,SAAO,GAAG,IAAI;AAAA,mBAAiB,QAAQ,IAAI;AAAA,EAAa,IAAI;AAC9D;AAOO,SAAS,uBACd,KACA,OAA0C,CAAC,GACnC;AACR,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,OAAY,eAAU,GAAG;AAC7B,SAAO,wBAAwB,IAAI;AACnC,SAAO,KAAK,QAAQ,aAAa,EAAE;AACnC,SAAO,8BAA8B,IAAI;AACzC,SAAO,KAAK,QAAQ,WAAW,MAAM;AACrC,SAAO,iBAAiB,MAAM,KAAK,YAAY,wBAAwB;AACzE;;;ADtMA,IAAM,aAAa;AACnB,IAAM,aAAa;AAEZ,IAAM,UAAqC;AAAA,EAChD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EAEF,WACE;AAAA,EAUF,YAAY;AAAA,EACZ,MAAM;AAAA;AAAA;AAAA;AAAA,EAIN,UAAU;AAAA,EACV,cAAc,CAAC,YAAY,kBAAkB;AAAA,EAC7C,WAAW;AAAA,EACX,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,SAAS,EAAE,MAAM,UAAU,aAAa,uCAAuC;AAAA,MAC/E,QAAQ,EAAE,MAAM,UAAU,aAAa,kCAAkC;AAAA,MACzE,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM,CAAC,SAAS,WAAW,QAAQ,OAAO;AAAA,QAC1C,aAAa;AAAA,MACf;AAAA,MACA,OAAO,EAAE,MAAM,WAAW,aAAa,8BAA8B;AAAA,MACrE,SAAS,EAAE,MAAM,WAAW,aAAa,2CAA2C;AAAA,MACpF,gBAAgB;AAAA,QACd,MAAM;AAAA,QACN,MAAM,CAAC,QAAQ,OAAO,UAAU,OAAO;AAAA,QACvC,aAAa;AAAA,MACf;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,SAAS;AAAA,EACtB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,MAAM;AAC9B,QAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,0BAA0B;AAE/D,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,SAAS;AAChD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAIA,QAAI,MAAM,YAAY,YAAY;AAChC,YAAM,QAAQ,sBAAsB,OAAO,IAAI,WAAW;AAC1D,UAAI,MAAO,QAAO;AAAA,IACpB;AAIA,UAAM,SAAS,WAAW,IAAI,KAAK,IAAI,WAAW;AAClD,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,QACL,SAAS,MAAM;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,OAAO,UAAU,KAAK;AAM5B,QAAI;AACJ,QAAI,MAAM,YAAY,UAAU;AAC9B,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB;AAAA,UACtC,KAAK,IAAI;AAAA,UACT,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI,SAAS;AAAA,UACxB,QAAQ,KAAK;AAAA,QACf,CAAC;AACD,YAAI,OAAO,SAAS;AAGlB,gBAAM,YAAY,MAAM,QACpB,KACA;AAEJ,0BAAgB,OAAO,UAAU;AAAA,QACnC;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,QAAI;AACJ,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,SAAS;AAChD,UAAI;AACF,cAAM,aAAa,MAAM,OAAO,CAAC,QAAQ,UAAU,GAAG,QAAQ,KAAK,MAAM;AACzE,YAAI,WAAW,aAAa,GAAG;AAC7B,gBAAM,WAAW;AACjB,uBACE,WAAW,OAAO,SAAS,WACvB,WAAW,OAAO,MAAM,GAAG,QAAQ,IAAI,6BACvC,WAAW;AAAA,QACnB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,KAAK,MAAM;AACrD,QAAI,eAAe,OAAW,QAAO,OAAO;AAC5C,QAAI,kBAAkB,OAAW,QAAO,UAAU;AAClD,WAAO;AAAA,EACT;AACF;AAMA,SAAS,sBAAsB,OAAiB,aAAuC;AACrF,QAAM,SAAS,CAAC,YAA+B;AAAA,IAC7C,SAAS;AAAA,IACT,QAAQ;AAAA,IACR;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAGA,MAAI,MAAM,QAAQ,WAAW,GAAG,EAAG,QAAO,OAAO,uBAAuB,MAAM,MAAM,EAAE;AACtF,MAAI,MAAM,cAAc,WAAW,GAAG,GAAG;AACvC,WAAO,OAAO,yBAAyB,MAAM,YAAY,EAAE;AAAA,EAC7D;AAGA,OACG,MAAM,mBAAmB,SAAS,MAAM,mBAAmB,aAC5D,MAAM,cACN;AACA,UAAM,OAAO,QAAQ,WAAW;AAChC,UAAM,MAAM,QAAQ,MAAM,MAAM,YAAY;AAC5C,QAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,OAAO,GAAG,GAAG;AAC/C,aAAO,OAAO,gDAAgD,MAAM,YAAY,EAAE;AAAA,IACpF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,WAAW,KAAa,aAAoC;AACnE,QAAM,OAAO;AACb,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,QAAI;AACF,YAAM,OAAO,SAAS,GAAG,GAAG,OAAO;AAInC,UAAI,KAAK,YAAY,KAAK,KAAK,OAAO,EAAG,QAAO;AAAA,IAClD,QAAQ;AAAA,IAER;AACA,QAAI,QAAQ,KAAM;AAClB,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAA2B;AAC5C,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,QAAQ,MAAM,SACf,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM,MAAM,GAAG,GAC9D,IAAI,CAAC,MAAc,EAAE,KAAK,CAAC,EAC3B,OAAO,OAAO,IACjB,CAAC;AAEL,UAAQ,MAAM,SAAS;AAAA,IACrB,KAAK;AACH,aAAO,CAAC,UAAU,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IAC7D,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,eAAe,KAAK;AAAA,QACpB,GAAI,MAAM,WAAW,YAAY,CAAC,WAAW,IAAI,CAAC;AAAA,QAClD,GAAI,MAAM,WAAW,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,QAC5C,GAAI,MAAM,WAAW,UAAU,CAAC,aAAa,WAAW,YAAY,IAAI,CAAC;AAAA,QACzE,GAAI,MAAM,WAAW,WAAW,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC;AAAA,MACxD;AAAA,IACF,KAAK;AACH,aAAO,CAAC,QAAQ,cAAc,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IACzE,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,GAAI,MAAM,UAAU,CAAC,aAAa,aAAa,IAAI,CAAC;AAAA,QACpD,GAAI,MAAM,UAAU,CAAC,MAAM,MAAM,OAAO,IAAI,CAAC;AAAA,QAC7C,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC;AAAA,MACzC;AAAA,IACF,KAAK;AAGH,aAAO,MAAM,SACT,CAAC,UAAU,GAAI,MAAM,OAAO,WAAW,GAAG,KAAK,MAAM,OAAO,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,MAAM,CAAE,IAClG,CAAC,QAAQ;AAAA,IACf,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,GAAI,MAAM,SAAS,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC;AAAA,QAC3C,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC;AAAA,MACzC;AAAA,IACF,KAAK;AACH,aAAO,MAAM,UAAU,CAAC,SAAS,QAAQ,MAAM,MAAM,OAAO,IAAI,CAAC,SAAS,MAAM;AAAA,IAClF,KAAK;AACH,aAAO,CAAC,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,CAAC,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,CAAC,SAAS,GAAI,MAAM,SAAS,CAAC,MAAM,MAAM,IAAI,CAAC,OAAO,CAAE;AAAA,IACjE,KAAK;AACH,aAAO,CAAC,SAAS,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IAC5D,KAAK;AACH,cAAQ,MAAM,gBAAgB;AAAA,QAC5B,KAAK;AACH,iBAAO,CAAC,YAAY,MAAM;AAAA,QAC5B,KAAK,OAAO;AAKV,cAAI,CAAC,MAAM,aAAc,QAAO,CAAC,YAAY,MAAM;AACnD,gBAAM,MAAM,CAAC,YAAY,KAAK;AAC9B,cAAI,MAAM,aAAa,MAAM,OAAQ,KAAI,KAAK,MAAM,MAAM,MAAM;AAChE,cAAI,KAAK,MAAM,YAAY;AAC3B,cAAI,CAAC,MAAM,aAAa,MAAM,OAAQ,KAAI,KAAK,MAAM,MAAM;AAC3D,iBAAO;AAAA,QACT;AAAA,QACA,KAAK;AACH,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA,GAAI,MAAM,QAAQ,CAAC,SAAS,IAAI,CAAC;AAAA,YACjC,MAAM,gBAAgB;AAAA,UACxB,EAAE,OAAO,OAAO;AAAA,QAClB,KAAK;AACH,iBAAO,CAAC,YAAY,OAAO;AAAA,QAC7B;AACE,iBAAO,CAAC,YAAY,MAAM;AAAA,MAC9B;AAAA,IACF;AACE,aAAO,CAAC,MAAM,OAAO;AAAA,EACzB;AACF;AAEA,SAAS,OAAO,MAAgB,KAAa,QAAyC;AACpF,SAAO,IAAI,QAAQ,CAACA,aAAY;AAC9B,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,UAAM,QAAQ,MAAM,OAAO,MAAM;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,aAAa;AAAA,IACf,CAAC;AAED,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,UAAI,OAAO,SAAS,YAAY;AAC9B,kBAAU,MAAM,SAAS;AAAA,MAC3B;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,UAAI,OAAO,SAAS,YAAY;AAC9B,kBAAU,MAAM,SAAS;AAAA,MAC3B;AAAA,IACF,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,MAAAA,SAAQ;AAAA,QACN,SAAS,KAAK,CAAC;AAAA,QACf,QAAQ,uBAAuB,MAAM;AAAA,QACrC,QAAQ,IAAI;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,OAAO,WAAW,QAAQ,MAAM,IAAI;AAAA,MACjD,CAAC;AAAA,IACH,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAI1B,MAAAA,SAAQ;AAAA,QACN,SAAS,KAAK,CAAC;AAAA,QACf,QAAQ,uBAAuB,MAAM;AAAA,QACrC,QAAQ,uBAAuB,MAAM;AAAA,QACrC,UAAU,QAAQ;AAAA,QAClB,WACE,OAAO,WAAW,QAAQ,MAAM,IAAI,4BACpC,OAAO,WAAW,QAAQ,MAAM,IAAI;AAAA,MACxC,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;",
+  "sourcesContent": ["import { spawn } from 'node:child_process';\nimport { statSync } from 'node:fs';\nimport { dirname, resolve, sep } from 'node:path';\nimport { assessCommitSafety } from '@wrongstack/core/coordination';\nimport { buildChildEnv } from '@wrongstack/core/utils';\nimport type { Tool } from '@wrongstack/core/types';\nimport { COMMAND_OUTPUT_MAX_BYTES, normalizeCommandOutput } from './_util.js';\n\ntype GitSubcommand =\n  | 'status'\n  | 'log'\n  | 'diff'\n  | 'commit'\n  | 'branch'\n  | 'checkout'\n  | 'stash'\n  | 'push'\n  | 'pull'\n  | 'fetch'\n  | 'reset'\n  | 'worktree';\n\ninterface GitInput {\n  command: GitSubcommand;\n  files?: string | string[] | undefined;\n  dry_run?: boolean | undefined;\n  /** commit message for `commit` subcommand */\n  message?: string | undefined;\n  /** branch name for `checkout` / `branch` */\n  branch?: string | undefined;\n  /** pass --graph, --oneline, --stat for `log` */\n  format?: 'short' | 'oneline' | 'stat' | 'graph' | undefined;\n  /** limit for `log` */\n  limit?: number | undefined;\n  /** worktree action: list, add, remove, prune */\n  worktreeAction?: 'list' | 'add' | 'remove' | 'prune' | undefined;\n  /** path for worktree add/remove (e.g. \"../wt-feature-xyz\") */\n  worktreePath?: string | undefined;\n  /** create new branch when adding worktree */\n  newBranch?: boolean | undefined;\n  /** force operation (e.g. worktree remove --force) */\n  force?: boolean | undefined;\n}\n\ninterface GitOutput {\n  command: GitSubcommand;\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  truncated: boolean;\n  /** Staged diff shown for commit commands so the caller can verify. */\n  diff?: string | undefined;\n  /**\n   * Shared-worktree warning for `commit`: present when uncommitted changes\n   * were authored by another agent/session (or a concurrent non-wrongstack\n   * process). The commit still proceeds \u2014 this is advisory so the caller can\n   * reconsider committing work it did not write.\n   */\n  warning?: string | undefined;\n}\n\nconst TIMEOUT_MS = 30_000;\nconst MAX_OUTPUT = 100_000;\n\nexport const gitTool: Tool<GitInput, GitOutput> = {\n  name: 'git',\n  category: 'Git',\n  description:\n    'Safe wrapper around common git operations. Supports status, log, diff, commit, branch, checkout, stash, push, pull, fetch, reset, worktree, etc. ' +\n    'This is the preferred way to interact with git instead of using the raw `bash` or `exec` tools.',\n  usageHint:\n    'ALWAYS prefer this tool over raw shell git commands.\\n\\n' +\n    'Key fields:\\n' +\n    '- `command`: one of the supported subcommands (status, log, diff, commit, etc.)\\n' +\n    '- Use `message` only for commit operations.\\n' +\n    '- Use `files` array for operations that take paths (status, diff, add, etc.).\\n' +\n    '- Non-mutating commands (status, log, diff, branch, fetch) are still permission:confirm for safety.\\n' +\n    '- For `commit` in a possibly-shared working tree, pass an explicit `files` list scoped to ' +\n    'what YOU changed. A bare commit (no `files`) includes ALL staged changes and may capture ' +\n    \"another agent's half-done work. Heed the `warning` field on the result.\\n\" +\n    'Never pass raw git flags through `args` for dangerous operations \u2014 use the structured fields.',\n  permission: 'confirm',\n  icon: 'git',\n  // Conservative: any of these may mutate. The non-mutating commands\n  // (status/log/diff/branch/fetch) are still gated on `permission: 'confirm'`\n  // and `MUTATING_SUBCOMMANDS` is consulted at runtime for per-call checks.\n  mutating: true,\n  capabilities: ['fs.write', 'shell.restricted'],\n  timeoutMs: TIMEOUT_MS,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      command: {\n        type: 'string',\n        enum: [\n          'status',\n          'log',\n          'diff',\n          'commit',\n          'branch',\n          'checkout',\n          'stash',\n          'push',\n          'pull',\n          'fetch',\n          'reset',\n          'worktree',\n        ],\n        description: 'Git subcommand',\n      },\n      files: {\n        type: 'string',\n        description:\n          'File(s) for status/diff: single path, comma-separated list, or \"**/*.ts\" glob',\n      },\n      message: { type: 'string', description: 'Commit message (required for commit)' },\n      branch: { type: 'string', description: 'Branch name for checkout/branch' },\n      format: {\n        type: 'string',\n        enum: ['short', 'oneline', 'stat', 'graph'],\n        description: 'Log format (default: short)',\n      },\n      limit: { type: 'integer', description: 'Limit for log (default: 20)' },\n      dry_run: { type: 'boolean', description: 'For commit: show what would be committed' },\n      worktreeAction: {\n        type: 'string',\n        enum: ['list', 'add', 'remove', 'prune'],\n        description: 'Worktree action: list, add, remove, prune',\n      },\n      worktreePath: {\n        type: 'string',\n        description: 'Path for worktree add/remove (e.g. \"../wt-feature-xyz\")',\n      },\n      newBranch: {\n        type: 'boolean',\n        description: 'Create new branch when adding worktree',\n      },\n      force: {\n        type: 'boolean',\n        description: 'Force operation (e.g. worktree remove --force)',\n      },\n    },\n    required: ['command'],\n  },\n  async execute(input, ctx, opts) {\n    if (!input?.command) throw new Error('git: command is required');\n\n    if (input.command === 'commit' && !input.message) {\n      return {\n        command: 'commit',\n        stdout: '',\n        stderr: 'git commit requires a message (-m flag)',\n        exitCode: 1,\n        truncated: false,\n      };\n    }\n\n    // Validate worktree paths/branches before touching the filesystem: reject\n    // flag injection and any path that escapes the project root.\n    if (input.command === 'worktree') {\n      const guard = validateWorktreeInput(input, ctx.projectRoot);\n      if (guard) return guard;\n    }\n\n    // Bound the search at projectRoot so a non-git project doesn't drift\n    // into a parent repo (e.g. ~/repos/.git) and operate on the wrong tree.\n    const gitDir = findGitDir(ctx.cwd, ctx.projectRoot);\n    if (!gitDir) {\n      return {\n        command: input.command,\n        stdout: '',\n        stderr: 'Not in a git repository (within project root)',\n        exitCode: 128,\n        truncated: false,\n      };\n    }\n\n    const args = buildArgs(input);\n\n    // For commits, check whether the working tree holds changes this session\n    // did not author (a concurrent agent / separate wrongstack process / human).\n    // Warn-only: the commit still runs, but the caller sees the risk of sweeping\n    // up another agent's half-done work. Best-effort \u2014 never blocks the commit.\n    let safetyWarning: string | undefined;\n    if (input.command === 'commit') {\n      try {\n        const report = await assessCommitSafety({\n          cwd: ctx.cwd,\n          projectRoot: ctx.projectRoot,\n          sessionId: ctx.session?.id,\n          signal: opts.signal,\n        });\n        if (report.warning) {\n          // Committing without an explicit file list stages/commits everything\n          // already staged \u2014 the highest-risk path for capturing foreign work.\n          const scopeNote = input.files\n            ? ''\n            : '\\nNote: this commit has no explicit `files` list, so it will include ALL ' +\n              'staged changes. Pass `files` to scope the commit to only what you changed.';\n          safetyWarning = report.warning + scopeNote;\n        }\n      } catch {\n        // commit-safety is advisory; ignore failures\n      }\n    }\n\n    // For commits, capture the staged diff BEFORE committing so the caller\n    // can verify what is about to land without another tool call.\n    let stagedDiff: string | undefined;\n    if (input.command === 'commit' && !input.dry_run) {\n      try {\n        const diffResult = await runGit(['diff', '--cached'], gitDir, opts.signal);\n        if (diffResult.exitCode === 0) {\n          const MAX_DIFF = 20_000;\n          stagedDiff =\n            diffResult.stdout.length > MAX_DIFF\n              ? diffResult.stdout.slice(0, MAX_DIFF) + '\\n\\n... (diff truncated)'\n              : diffResult.stdout;\n        }\n      } catch {\n        // Diff capture is best-effort; don't fail the whole operation\n      }\n    }\n\n    const result = await runGit(args, gitDir, opts.signal);\n    if (stagedDiff !== undefined) result.diff = stagedDiff;\n    if (safetyWarning !== undefined) result.warning = safetyWarning;\n    return result;\n  },\n};\n\n/**\n * Reject worktree inputs that could inject git flags or escape the project\n * root. Returns a `GitOutput` describing the rejection, or `null` if safe.\n */\nfunction validateWorktreeInput(input: GitInput, projectRoot: string): GitOutput | null {\n  const reject = (stderr: string): GitOutput => ({\n    command: 'worktree',\n    stdout: '',\n    stderr,\n    exitCode: 1,\n    truncated: false,\n  });\n\n  // Flag injection: a leading '-' would be parsed as a git option.\n  if (input.branch?.startsWith('-')) return reject(`unsafe branch name: ${input.branch}`);\n  if (input.worktreePath?.startsWith('-')) {\n    return reject(`unsafe worktree path: ${input.worktreePath}`);\n  }\n\n  // Path escape: add/remove targets must resolve inside the project root.\n  if (\n    (input.worktreeAction === 'add' || input.worktreeAction === 'remove') &&\n    input.worktreePath\n  ) {\n    const root = resolve(projectRoot);\n    const abs = resolve(root, input.worktreePath);\n    if (abs !== root && !abs.startsWith(root + sep)) {\n      return reject(`unsafe worktree path (escapes project root): ${input.worktreePath}`);\n    }\n  }\n\n  return null;\n}\n\nfunction findGitDir(cwd: string, projectRoot: string): string | null {\n  const root = projectRoot;\n  let dir = cwd;\n  for (let i = 0; i < 20; i++) {\n    try {\n      const stat = statSync(`${dir}/.git`);\n      // A normal repo has a `.git` directory; a linked worktree has a `.git`\n      // *file* (gitlink pointing at the main repo). Accept both so the tool\n      // operates inside a worktree when a subagent's cwd is a worktree dir.\n      if (stat.isDirectory() || stat.isFile()) return dir;\n    } catch {\n      // continue\n    }\n    if (dir === root) break;\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction buildArgs(input: GitInput): string[] {\n  const limit = input.limit ?? 20;\n  const files = input.files\n    ? (Array.isArray(input.files) ? input.files : input.files.split(','))\n        .map((s: string) => s.trim())\n        .filter(Boolean)\n    : [];\n\n  switch (input.command) {\n    case 'status':\n      return ['status', ...(files.length ? ['--', ...files] : [])];\n    case 'log':\n      return [\n        'log',\n        `--max-count=${limit}`,\n        ...(input.format === 'oneline' ? ['--oneline'] : []),\n        ...(input.format === 'stat' ? ['--stat'] : []),\n        ...(input.format === 'graph' ? ['--oneline', '--graph', '--decorate'] : []),\n        ...(input.format === 'short' || !input.format ? [] : []),\n      ];\n    case 'diff':\n      return ['diff', '--no-color', ...(files.length ? ['--', ...files] : [])];\n    case 'commit':\n      return [\n        'commit',\n        ...(input.dry_run ? ['--dry-run', '--porcelain'] : []),\n        ...(input.message ? ['-m', input.message] : []),\n        ...(files.length ? ['--', ...files] : []),\n      ];\n    case 'branch':\n      // Validate branch name: reject names starting with '-' or containing ' --'\n      // to prevent flag injection (e.g. \"foo --force\").\n      return input.branch\n        ? ['branch', ...(input.branch.startsWith('-') || input.branch.includes(' --') ? [] : [input.branch])]\n        : ['branch'];\n    case 'checkout':\n      return [\n        'checkout',\n        ...(input.branch ? ['--', input.branch] : []),\n        ...(files.length ? ['--', ...files] : []),\n      ];\n    case 'stash':\n      return input.message ? ['stash', 'push', '-m', input.message] : ['stash', 'push'];\n    case 'push':\n      return ['push'];\n    case 'pull':\n      return ['pull'];\n    case 'fetch':\n      return ['fetch', ...(input.branch ? [input.branch] : ['--all'])];\n    case 'reset':\n      return ['reset', ...(files.length ? ['--', ...files] : [])];\n    case 'worktree':\n      switch (input.worktreeAction) {\n        case 'list':\n          return ['worktree', 'list'];\n        case 'add': {\n          // git worktree add [-b <new-branch>] <path> [<commit-ish>]\n          // The path comes BEFORE the branch/commit-ish. With --newBranch the\n          // branch is the name to create (`-b <branch> <path>`); without it the\n          // branch is an existing branch/commit to check out (`<path> <branch>`).\n          if (!input.worktreePath) return ['worktree', 'list'];\n          const add = ['worktree', 'add'];\n          if (input.newBranch && input.branch) add.push('-b', input.branch);\n          add.push(input.worktreePath);\n          if (!input.newBranch && input.branch) add.push(input.branch);\n          return add;\n        }\n        case 'remove':\n          return [\n            'worktree',\n            'remove',\n            ...(input.force ? ['--force'] : []),\n            input.worktreePath ?? '',\n          ].filter(Boolean);\n        case 'prune':\n          return ['worktree', 'prune'];\n        default:\n          return ['worktree', 'list'];\n      }\n    default:\n      return [input.command];\n  }\n}\n\nfunction runGit(args: string[], cwd: string, signal: AbortSignal): Promise<GitOutput> {\n  return new Promise((resolve) => {\n    let stdout = '';\n    let stderr = '';\n\n    const child = spawn('git', args, {\n      cwd,\n      signal,\n      env: buildChildEnv(),\n      stdio: ['ignore', 'pipe', 'pipe'],\n      windowsHide: true,\n    });\n\n    child.stdout?.on('data', (chunk: Buffer) => {\n      if (stdout.length < MAX_OUTPUT) {\n        stdout += chunk.toString();\n      }\n    });\n\n    child.stderr?.on('data', (chunk: Buffer) => {\n      if (stderr.length < MAX_OUTPUT) {\n        stderr += chunk.toString();\n      }\n    });\n\n    child.on('error', (err) => {\n      resolve({\n        command: args[0] as GitSubcommand,\n        stdout: normalizeCommandOutput(stdout),\n        stderr: err.message,\n        exitCode: 1,\n        truncated: Buffer.byteLength(stdout, 'utf8') > COMMAND_OUTPUT_MAX_BYTES,\n      });\n    });\n\n    child.on('close', (code) => {\n      // `MAX_OUTPUT` already bounded the raw buffers in memory; normalize strips\n      // ANSI / progress / duplicate noise and head+tail-truncates to the shared\n      // command cap so only useful output reaches the model.\n      resolve({\n        command: args[0] as GitSubcommand,\n        stdout: normalizeCommandOutput(stdout),\n        stderr: normalizeCommandOutput(stderr),\n        exitCode: code ?? 1,\n        truncated:\n          Buffer.byteLength(stdout, 'utf8') > COMMAND_OUTPUT_MAX_BYTES ||\n          Buffer.byteLength(stderr, 'utf8') > COMMAND_OUTPUT_MAX_BYTES,\n      });\n    });\n  });\n}\n", "import { createHash } from 'node:crypto';\nimport * as fsp from 'node:fs/promises';\nimport * as path from 'node:path';\nimport * as Core from '@wrongstack/core/utils';\nimport type { Context } from '@wrongstack/core/agent';\n\n/**\n * sha-256 hex of a UTF-8 string. Used by the file tools to record a content\n * hash alongside the mtime in `ctx.recordRead` \u2014 the hash is the authoritative\n * staleness arbiter for `edit` (mtime has a 2 s tolerance window on Windows).\n */\nexport function sha256hex(content: string): string {\n  return createHash('sha256').update(content, 'utf8').digest('hex');\n}\n/** Detected package manager for a project directory. */\nexport type PackageManager = 'pnpm' | 'yarn' | 'npm';\n\n/**\n * Detect the project's package manager by inspecting lockfiles in `cwd`.\n * Order: pnpm \u2192 yarn \u2192 npm (default). Missing or unreadable directories fall\n * back to `npm` rather than throwing, so a `safeResolve`-checked cwd that\n * happens to be empty never aborts the tool.\n */\nexport async function detectPackageManager(cwd: string): Promise<PackageManager> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(`${cwd}/pnpm-lock.yaml`);\n    return 'pnpm';\n  } catch {\n    /* not pnpm */\n  }\n  try {\n    await stat(`${cwd}/yarn.lock`);\n    return 'yarn';\n  } catch {\n    /* not yarn */\n  }\n  return 'npm';\n}\n\nexport function resolvePath(input: string, ctx: Context): string {\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);\n}\n\n/**\n * Roots every file tool may always reach, even in restricted mode: the\n * project root and the user-global `~/.wrongstack` directory (config, memory,\n * sessions, skills). `~/.wrongstack` honors the `WRONGSTACK_HOME` override.\n */\nfunction allowedRoots(ctx: Context): string[] {\n  return [path.resolve(ctx.projectRoot), path.resolve(Core.wstackGlobalRoot())];\n}\n\n/** True if `target` is `root` itself or nested inside any of `roots`. */\nfunction isInsideAny(target: string, roots: string[]): boolean {\n  return roots.some((root) => {\n    const rel = path.relative(root, target);\n    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));\n  });\n}\n\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\n  const target = path.resolve(absPath);\n  // Unrestricted filesystem access: skip the project-root containment check.\n  if (ctx.allowOutsideProjectRoot) return target;\n  if (isInsideAny(target, allowedRoots(ctx))) return target;\n  throw new Error(`Path \"${absPath}\" is outside project root \"${path.resolve(ctx.projectRoot)}\"`);\n}\n\nexport function safeResolve(input: string, ctx: Context): string {\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\n}\n\n/**\n * Defense against in-root\u2192out-of-root symlink escape (CWE-59). `safeResolve`\n * only does a syntactic `../` check, so a symlink that lives *inside* the\n * project root but points outside still passes it. This resolves the path\n * through `fs.realpath` and re-verifies containment against the realpath of\n * the project root (comparing like-for-like, since the root itself may be a\n * symlink \u2014 macOS `/var`\u2192`/private/var`, Windows 8.3 short names). For a path\n * that does not exist yet (e.g. a `write` to a new file) the nearest existing\n * ancestor directory is checked instead. Throws if the real target escapes.\n *\n * Mirrors the per-file guard already used in `replace.ts`/`grep.ts`; applied\n * to single-file `read`/`edit`/`write` it throws (rather than skips) because\n * the caller named exactly one file.\n */\nexport async function assertRealInsideRoot(absPath: string, ctx: Context): Promise<void> {\n  // Unrestricted filesystem access: no symlink-escape check to perform.\n  if (ctx.allowOutsideProjectRoot) return;\n  // Compare like-for-like against the realpath of each always-allowed root\n  // (project root + ~/.wrongstack), since a root may itself be a symlink.\n  const realRoots = await Promise.all(\n    allowedRoots(ctx).map((r) => fsp.realpath(r).catch(() => path.resolve(r))),\n  );\n  let probe = absPath;\n  for (;;) {\n    let real: string;\n    try {\n      real = await fsp.realpath(probe);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        const parent = path.dirname(probe);\n        if (parent === probe) return; // reached fs root without escaping\n        probe = parent;\n        continue;\n      }\n      throw err;\n    }\n    if (isInsideAny(real, realRoots)) return;\n    throw new Error(\n      `Path \"${absPath}\" resolves through a symlink outside project root \"${realRoots[0]}\"`,\n    );\n  }\n}\n\n/** `safeResolve` + symlink realpath containment check. Async. */\nexport async function safeResolveReal(input: string, ctx: Context): Promise<string> {\n  const abs = safeResolve(input, ctx);\n  await assertRealInsideRoot(abs, ctx);\n  return abs;\n}\n\nexport function truncateMiddle(s: string, max: number): string {\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\n  const half = Math.floor(max / 2);\n  return (\n    s.slice(0, half) +\n    `\\n\u2026[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]\u2026\\n` +\n    s.slice(-half)\n  );\n}\n\nexport function isBinaryBuffer(buf: Buffer): boolean {\n  const len = Math.min(buf.length, 8192);\n  for (let i = 0; i < len; i++) {\n    if (buf[i] === 0) return true;\n  }\n  return false;\n}\n\n// \u2500\u2500\u2500 Command-output normalization (token-saving) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// Raw process output is full of tokens the model gains nothing from: ANSI\n// escapes, carriage-return progress spam, runs of identical warning lines, and\n// huge tails of build noise. These helpers strip that noise before the output\n// reaches the LLM. They are scoped to COMMAND tools (bash/git/exec and the\n// _spawn-stream consumers) \u2014 never applied to structured/code outputs.\n\n/** Unified byte cap for all command tool output fed to the model. */\nexport const COMMAND_OUTPUT_MAX_BYTES = 32_768;\n\n/** Runs of >= this many identical consecutive lines are collapsed. */\nconst REPEAT_RUN_THRESHOLD = 3;\n\n/**\n * Collapse carriage-return overwrites the way a terminal would: `\\r\\n` becomes\n * `\\n`, and a bare `\\r` (progress redraw) keeps only the text after the LAST\n * `\\r` on its physical line. Without this, a single progress bar that redraws\n * 200 times explodes into 200 lines.\n */\nexport function collapseCarriageReturns(text: string): string {\n  const lf = text.replace(/\\r\\n/g, '\\n');\n  if (!lf.includes('\\r')) return lf;\n  return lf\n    .split('\\n')\n    .map((line) => (line.includes('\\r') ? line.slice(line.lastIndexOf('\\r') + 1) : line))\n    .join('\\n');\n}\n\n/**\n * Collapse a run of `minRun`+ identical consecutive lines into the line once\n * plus a marker. Consecutive-only \u2014 it never reorders or dedups non-adjacent\n * lines, so diffs/source stay intact.\n */\nexport function collapseConsecutiveDuplicates(text: string, minRun = REPEAT_RUN_THRESHOLD): string {\n  const lines = text.split('\\n');\n  const out: string[] = [];\n  let i = 0;\n  while (i < lines.length) {\n    let j = i + 1;\n    while (j < lines.length && lines[j] === lines[i]) j++;\n    const run = j - i;\n    if (run >= minRun) {\n      out.push(lines[i]!, `\u2026 \u27E8repeated ${run}\u00D7\u27E9`);\n    } else {\n      for (let k = i; k < j; k++) out.push(lines[k]!);\n    }\n    i = j;\n  }\n  return out.join('\\n');\n}\n\n/** Largest prefix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeHeadBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(0, mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(0, lo);\n}\n\n/** Largest suffix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeTailBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(s.length - mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(s.length - lo);\n}\n\n/**\n * Truncate to `maxBytes` keeping BOTH ends \u2014 the head (what ran / early context)\n * and the tail (errors and summaries usually land last), biased ~45/55 toward\n * the tail. The result never exceeds `maxBytes`.\n */\nexport function truncateHeadTail(s: string, maxBytes: number): string {\n  const total = Buffer.byteLength(s, 'utf8');\n  if (total <= maxBytes) return s;\n  // Reserve a fixed allowance for the marker so the final string can't exceed\n  // the cap even though the dropped-byte count's digit width varies.\n  const MARKER_RESERVE = 64;\n  const avail = Math.max(0, maxBytes - MARKER_RESERVE);\n  const headBudget = Math.floor(avail * 0.45);\n  const head = takeHeadBytes(s, headBudget);\n  const tail = takeTailBytes(s, avail - Buffer.byteLength(head, 'utf8'));\n  const kept = Buffer.byteLength(head, 'utf8') + Buffer.byteLength(tail, 'utf8');\n  return `${head}\\n\u2026[truncated ${total - kept} bytes]\u2026\\n${tail}`;\n}\n\n/**\n * Full token-saving pipeline for command tool output: strip ANSI \u2192 collapse\n * carriage-return progress \u2192 trim trailing whitespace \u2192 collapse identical\n * consecutive lines \u2192 squeeze blank-line runs \u2192 head+tail truncate to the cap.\n */\nexport function normalizeCommandOutput(\n  raw: string,\n  opts: { maxBytes?: number | undefined } = {},\n): string {\n  if (!raw) return raw;\n  let text = Core.stripAnsi(raw);\n  text = collapseCarriageReturns(text);\n  text = text.replace(/[ \\t]+$/gm, ''); // trailing whitespace per line\n  text = collapseConsecutiveDuplicates(text);\n  text = text.replace(/\\n{3,}/g, '\\n\\n'); // >=2 blank lines \u2192 1\n  return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);\n}\n"],
+  "mappings": ";AAAA,SAAS,aAAa;AACtB,SAAS,gBAAgB;AACzB,SAAS,SAAS,SAAS,WAAW;AACtC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;;;ACD9B,YAAY,UAAU;AAmJf,IAAM,2BAA2B;AAGxC,IAAM,uBAAuB;AAQtB,SAAS,wBAAwB,MAAsB;AAC5D,QAAM,KAAK,KAAK,QAAQ,SAAS,IAAI;AACrC,MAAI,CAAC,GAAG,SAAS,IAAI,EAAG,QAAO;AAC/B,SAAO,GACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAU,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,IAAK,EACnF,KAAK,IAAI;AACd;AAOO,SAAS,8BAA8B,MAAc,SAAS,sBAA8B;AACjG,QAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,QAAM,MAAgB,CAAC;AACvB,MAAI,IAAI;AACR,SAAO,IAAI,MAAM,QAAQ;AACvB,QAAI,IAAI,IAAI;AACZ,WAAO,IAAI,MAAM,UAAU,MAAM,CAAC,MAAM,MAAM,CAAC,EAAG;AAClD,UAAM,MAAM,IAAI;AAChB,QAAI,OAAO,QAAQ;AACjB,UAAI,KAAK,MAAM,CAAC,GAAI,yBAAe,GAAG,YAAI;AAAA,IAC5C,OAAO;AACL,eAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAI,KAAK,MAAM,CAAC,CAAE;AAAA,IAChD;AACA,QAAI;AAAA,EACN;AACA,SAAO,IAAI,KAAK,IAAI;AACtB;AAGA,SAAS,cAAc,GAAW,UAA0B;AAC1D,MAAI,YAAY,EAAG,QAAO;AAE1B,MAAI,OAAO,WAAW,GAAG,MAAM,KAAK,SAAU,QAAO;AACrD,MAAI,KAAK;AACT,MAAI,KAAK,EAAE;AACX,SAAO,KAAK,IAAI;AACd,UAAM,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC;AACnC,QAAI,OAAO,WAAW,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,KAAK,SAAU,MAAK;AAAA,QAC5D,MAAK,MAAM;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,GAAG,EAAE;AACtB;AAGA,SAAS,cAAc,GAAW,UAA0B;AAC1D,MAAI,YAAY,EAAG,QAAO;AAE1B,MAAI,OAAO,WAAW,GAAG,MAAM,KAAK,SAAU,QAAO;AACrD,MAAI,KAAK;AACT,MAAI,KAAK,EAAE;AACX,SAAO,KAAK,IAAI;AACd,UAAM,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC;AACnC,QAAI,OAAO,WAAW,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,MAAM,KAAK,SAAU,MAAK;AAAA,QACpE,MAAK,MAAM;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,EAAE,SAAS,EAAE;AAC9B;AAOO,SAAS,iBAAiB,GAAW,UAA0B;AACpE,QAAM,QAAQ,OAAO,WAAW,GAAG,MAAM;AACzC,MAAI,SAAS,SAAU,QAAO;AAG9B,QAAM,iBAAiB;AACvB,QAAM,QAAQ,KAAK,IAAI,GAAG,WAAW,cAAc;AACnD,QAAM,aAAa,KAAK,MAAM,QAAQ,IAAI;AAC1C,QAAM,OAAO,cAAc,GAAG,UAAU;AACxC,QAAM,OAAO,cAAc,GAAG,QAAQ,OAAO,WAAW,MAAM,MAAM,CAAC;AACrE,QAAM,OAAO,OAAO,WAAW,MAAM,MAAM,IAAI,OAAO,WAAW,MAAM,MAAM;AAC7E,SAAO,GAAG,IAAI;AAAA,mBAAiB,QAAQ,IAAI;AAAA,EAAa,IAAI;AAC9D;AAOO,SAAS,uBACd,KACA,OAA0C,CAAC,GACnC;AACR,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,OAAY,eAAU,GAAG;AAC7B,SAAO,wBAAwB,IAAI;AACnC,SAAO,KAAK,QAAQ,aAAa,EAAE;AACnC,SAAO,8BAA8B,IAAI;AACzC,SAAO,KAAK,QAAQ,WAAW,MAAM;AACrC,SAAO,iBAAiB,MAAM,KAAK,YAAY,wBAAwB;AACzE;;;ADrMA,IAAM,aAAa;AACnB,IAAM,aAAa;AAEZ,IAAM,UAAqC;AAAA,EAChD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EAEF,WACE;AAAA,EAUF,YAAY;AAAA,EACZ,MAAM;AAAA;AAAA;AAAA;AAAA,EAIN,UAAU;AAAA,EACV,cAAc,CAAC,YAAY,kBAAkB;AAAA,EAC7C,WAAW;AAAA,EACX,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,SAAS,EAAE,MAAM,UAAU,aAAa,uCAAuC;AAAA,MAC/E,QAAQ,EAAE,MAAM,UAAU,aAAa,kCAAkC;AAAA,MACzE,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM,CAAC,SAAS,WAAW,QAAQ,OAAO;AAAA,QAC1C,aAAa;AAAA,MACf;AAAA,MACA,OAAO,EAAE,MAAM,WAAW,aAAa,8BAA8B;AAAA,MACrE,SAAS,EAAE,MAAM,WAAW,aAAa,2CAA2C;AAAA,MACpF,gBAAgB;AAAA,QACd,MAAM;AAAA,QACN,MAAM,CAAC,QAAQ,OAAO,UAAU,OAAO;AAAA,QACvC,aAAa;AAAA,MACf;AAAA,MACA,cAAc;AAAA,QACZ,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,SAAS;AAAA,EACtB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,MAAM;AAC9B,QAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,0BAA0B;AAE/D,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,SAAS;AAChD,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAIA,QAAI,MAAM,YAAY,YAAY;AAChC,YAAM,QAAQ,sBAAsB,OAAO,IAAI,WAAW;AAC1D,UAAI,MAAO,QAAO;AAAA,IACpB;AAIA,UAAM,SAAS,WAAW,IAAI,KAAK,IAAI,WAAW;AAClD,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,QACL,SAAS,MAAM;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,OAAO,UAAU,KAAK;AAM5B,QAAI;AACJ,QAAI,MAAM,YAAY,UAAU;AAC9B,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB;AAAA,UACtC,KAAK,IAAI;AAAA,UACT,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI,SAAS;AAAA,UACxB,QAAQ,KAAK;AAAA,QACf,CAAC;AACD,YAAI,OAAO,SAAS;AAGlB,gBAAM,YAAY,MAAM,QACpB,KACA;AAEJ,0BAAgB,OAAO,UAAU;AAAA,QACnC;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,QAAI;AACJ,QAAI,MAAM,YAAY,YAAY,CAAC,MAAM,SAAS;AAChD,UAAI;AACF,cAAM,aAAa,MAAM,OAAO,CAAC,QAAQ,UAAU,GAAG,QAAQ,KAAK,MAAM;AACzE,YAAI,WAAW,aAAa,GAAG;AAC7B,gBAAM,WAAW;AACjB,uBACE,WAAW,OAAO,SAAS,WACvB,WAAW,OAAO,MAAM,GAAG,QAAQ,IAAI,6BACvC,WAAW;AAAA,QACnB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,OAAO,MAAM,QAAQ,KAAK,MAAM;AACrD,QAAI,eAAe,OAAW,QAAO,OAAO;AAC5C,QAAI,kBAAkB,OAAW,QAAO,UAAU;AAClD,WAAO;AAAA,EACT;AACF;AAMA,SAAS,sBAAsB,OAAiB,aAAuC;AACrF,QAAM,SAAS,CAAC,YAA+B;AAAA,IAC7C,SAAS;AAAA,IACT,QAAQ;AAAA,IACR;AAAA,IACA,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAGA,MAAI,MAAM,QAAQ,WAAW,GAAG,EAAG,QAAO,OAAO,uBAAuB,MAAM,MAAM,EAAE;AACtF,MAAI,MAAM,cAAc,WAAW,GAAG,GAAG;AACvC,WAAO,OAAO,yBAAyB,MAAM,YAAY,EAAE;AAAA,EAC7D;AAGA,OACG,MAAM,mBAAmB,SAAS,MAAM,mBAAmB,aAC5D,MAAM,cACN;AACA,UAAM,OAAO,QAAQ,WAAW;AAChC,UAAM,MAAM,QAAQ,MAAM,MAAM,YAAY;AAC5C,QAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,OAAO,GAAG,GAAG;AAC/C,aAAO,OAAO,gDAAgD,MAAM,YAAY,EAAE;AAAA,IACpF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,WAAW,KAAa,aAAoC;AACnE,QAAM,OAAO;AACb,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,QAAI;AACF,YAAM,OAAO,SAAS,GAAG,GAAG,OAAO;AAInC,UAAI,KAAK,YAAY,KAAK,KAAK,OAAO,EAAG,QAAO;AAAA,IAClD,QAAQ;AAAA,IAER;AACA,QAAI,QAAQ,KAAM;AAClB,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAA2B;AAC5C,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,QAAQ,MAAM,SACf,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM,MAAM,GAAG,GAC9D,IAAI,CAAC,MAAc,EAAE,KAAK,CAAC,EAC3B,OAAO,OAAO,IACjB,CAAC;AAEL,UAAQ,MAAM,SAAS;AAAA,IACrB,KAAK;AACH,aAAO,CAAC,UAAU,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IAC7D,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,eAAe,KAAK;AAAA,QACpB,GAAI,MAAM,WAAW,YAAY,CAAC,WAAW,IAAI,CAAC;AAAA,QAClD,GAAI,MAAM,WAAW,SAAS,CAAC,QAAQ,IAAI,CAAC;AAAA,QAC5C,GAAI,MAAM,WAAW,UAAU,CAAC,aAAa,WAAW,YAAY,IAAI,CAAC;AAAA,QACzE,GAAI,MAAM,WAAW,WAAW,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC;AAAA,MACxD;AAAA,IACF,KAAK;AACH,aAAO,CAAC,QAAQ,cAAc,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IACzE,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,GAAI,MAAM,UAAU,CAAC,aAAa,aAAa,IAAI,CAAC;AAAA,QACpD,GAAI,MAAM,UAAU,CAAC,MAAM,MAAM,OAAO,IAAI,CAAC;AAAA,QAC7C,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC;AAAA,MACzC;AAAA,IACF,KAAK;AAGH,aAAO,MAAM,SACT,CAAC,UAAU,GAAI,MAAM,OAAO,WAAW,GAAG,KAAK,MAAM,OAAO,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,MAAM,CAAE,IAClG,CAAC,QAAQ;AAAA,IACf,KAAK;AACH,aAAO;AAAA,QACL;AAAA,QACA,GAAI,MAAM,SAAS,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC;AAAA,QAC3C,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC;AAAA,MACzC;AAAA,IACF,KAAK;AACH,aAAO,MAAM,UAAU,CAAC,SAAS,QAAQ,MAAM,MAAM,OAAO,IAAI,CAAC,SAAS,MAAM;AAAA,IAClF,KAAK;AACH,aAAO,CAAC,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,CAAC,MAAM;AAAA,IAChB,KAAK;AACH,aAAO,CAAC,SAAS,GAAI,MAAM,SAAS,CAAC,MAAM,MAAM,IAAI,CAAC,OAAO,CAAE;AAAA,IACjE,KAAK;AACH,aAAO,CAAC,SAAS,GAAI,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAE;AAAA,IAC5D,KAAK;AACH,cAAQ,MAAM,gBAAgB;AAAA,QAC5B,KAAK;AACH,iBAAO,CAAC,YAAY,MAAM;AAAA,QAC5B,KAAK,OAAO;AAKV,cAAI,CAAC,MAAM,aAAc,QAAO,CAAC,YAAY,MAAM;AACnD,gBAAM,MAAM,CAAC,YAAY,KAAK;AAC9B,cAAI,MAAM,aAAa,MAAM,OAAQ,KAAI,KAAK,MAAM,MAAM,MAAM;AAChE,cAAI,KAAK,MAAM,YAAY;AAC3B,cAAI,CAAC,MAAM,aAAa,MAAM,OAAQ,KAAI,KAAK,MAAM,MAAM;AAC3D,iBAAO;AAAA,QACT;AAAA,QACA,KAAK;AACH,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA,GAAI,MAAM,QAAQ,CAAC,SAAS,IAAI,CAAC;AAAA,YACjC,MAAM,gBAAgB;AAAA,UACxB,EAAE,OAAO,OAAO;AAAA,QAClB,KAAK;AACH,iBAAO,CAAC,YAAY,OAAO;AAAA,QAC7B;AACE,iBAAO,CAAC,YAAY,MAAM;AAAA,MAC9B;AAAA,IACF;AACE,aAAO,CAAC,MAAM,OAAO;AAAA,EACzB;AACF;AAEA,SAAS,OAAO,MAAgB,KAAa,QAAyC;AACpF,SAAO,IAAI,QAAQ,CAACA,aAAY;AAC9B,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,UAAM,QAAQ,MAAM,OAAO,MAAM;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,aAAa;AAAA,IACf,CAAC;AAED,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,UAAI,OAAO,SAAS,YAAY;AAC9B,kBAAU,MAAM,SAAS;AAAA,MAC3B;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,UAAI,OAAO,SAAS,YAAY;AAC9B,kBAAU,MAAM,SAAS;AAAA,MAC3B;AAAA,IACF,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,MAAAA,SAAQ;AAAA,QACN,SAAS,KAAK,CAAC;AAAA,QACf,QAAQ,uBAAuB,MAAM;AAAA,QACrC,QAAQ,IAAI;AAAA,QACZ,UAAU;AAAA,QACV,WAAW,OAAO,WAAW,QAAQ,MAAM,IAAI;AAAA,MACjD,CAAC;AAAA,IACH,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAI1B,MAAAA,SAAQ;AAAA,QACN,SAAS,KAAK,CAAC;AAAA,QACf,QAAQ,uBAAuB,MAAM;AAAA,QACrC,QAAQ,uBAAuB,MAAM;AAAA,QACrC,UAAU,QAAQ;AAAA,QAClB,WACE,OAAO,WAAW,QAAQ,MAAM,IAAI,4BACpC,OAAO,WAAW,QAAQ,MAAM,IAAI;AAAA,MACxC,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;",
   "names": ["resolve"]
 }

package/dist/glob.d.ts

@@ -1,4 +1,4 @@
-import type { Tool } from '@wrongstack/core';
+import type { Tool } from '@wrongstack/core/types';
 interface GlobInput {
     pattern: string;
     path?: string | undefined;

package/dist/glob.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../src/glob.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAI7C,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,eAAO,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAyJhD,CAAC"}
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../src/glob.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAInD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,eAAO,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAyJhD,CAAC"}

package/dist/glob.js

@@ -1,7 +1,7 @@
 // src/glob.ts
 import * as fs from "node:fs/promises";
 import * as path2 from "node:path";
-import { compileGlob } from "@wrongstack/core";
+import { compileGlob } from "@wrongstack/core/utils";
 
 // src/_concurrency.ts
 async function mapWithConcurrency(items, limit, fn) {
@@ -23,7 +23,7 @@ async function mapWithConcurrency(items, limit, fn) {
 // src/_util.ts
 import * as fsp from "node:fs/promises";
 import * as path from "node:path";
-import * as Core from "@wrongstack/core";
+import * as Core from "@wrongstack/core/utils";
 function resolvePath(input, ctx) {
   return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);
 }

package/dist/glob.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/glob.ts", "../src/_concurrency.ts", "../src/_util.ts"],
-  "sourcesContent": ["import * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { compileGlob } from '@wrongstack/core';\nimport type { Tool } from '@wrongstack/core';\nimport { mapWithConcurrency } from './_concurrency.js';\nimport { assertRealInsideRoot, safeResolveReal } from './_util.js';\n\ninterface GlobInput {\n  pattern: string;\n  path?: string | undefined;\n  limit?: number | undefined;\n}\n\ninterface GlobOutput {\n  files: string[];\n  truncated: boolean;\n}\n\nconst DEFAULT_IGNORE = ['node_modules', '.git', 'dist', 'build', '.next', 'coverage', '.turbo'];\nconst WALK_CONCURRENCY = 16;\n\nexport const globTool: Tool<GlobInput, GlobOutput> = {\n  name: 'glob',\n  category: 'Filesystem',\n  description:\n    'Find files by path pattern. Use index-backed `codebase-search` first for code symbols or concepts when it is live.',\n  usageHint:\n    'PATH DISCOVERY AND SEARCH SCOPING:\\n\\n' +\n    '- When `codebase-search` is live, use it first for code concepts; use `glob` for filenames, path patterns, and non-indexed files.\\n' +\n    '- Combine with `path` and `limit`.\\n' +\n    '- Default ignores common build/dependency directories.\\n' +\n    'Much more efficient than shell `find` for most use cases inside the agent.',\n  selection: {\n    doNotUseWhen: 'you need to search inside file contents.',\n    useInstead: ['grep'],\n  },\n  permission: 'auto',\n  mutating: false,\n  capabilities: ['fs.read'],\n  icon: 'folder',\n  maxOutputBytes: 65_536,\n  timeoutMs: 5_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      pattern: {\n        type: 'string',\n        description: 'Glob pattern to match (e.g. \"**/*.ts\", \"src/**\").',\n      },\n      path: {\n        type: 'string',\n        description: 'Base directory to search from (defaults to project root).',\n      },\n      limit: {\n        type: 'integer',\n        description: 'Maximum number of results to return (default 1000, max 5000).',\n      },\n    },\n    required: ['pattern'],\n  },\n  async execute(input, ctx, opts) {\n    if (!input?.pattern) throw new Error('glob: pattern is required');\n    const signal = opts?.signal;\n    // `safeResolveReal` validates that the input base \u2014 even if symlinked \u2014\n    // resolves to a real path inside the project root (or `~/.wrongstack`).\n    // Throws on escape, matching how single-file tools (`read`, `edit`,\n    // `write`) reject out-of-root paths: the caller named the base explicitly.\n    const base = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;\n    const limit = Math.max(1, Math.min(input.limit ?? 1000, 5000));\n\n    const ignored = await readGitignore(base);\n    const re = compileGlob(input.pattern);\n\n    const results: { rel: string; mtime: number }[] = [];\n    let truncated = false;\n    const pushResult = async (full: string): Promise<void> => {\n      // Bail before stat if a concurrent worker has already filled the budget \u2014\n      // the limit is a global cap across all parallel walkers, not per-worker.\n      if (truncated || results.length >= limit) {\n        truncated = true;\n        return;\n      }\n      try {\n        const st = await fs.stat(full);\n        // Re-check after the await: another worker may have filled the budget\n        // while we were waiting on fs.stat.\n        if (truncated || results.length >= limit) {\n          truncated = true;\n          return;\n        }\n        results.push({ rel: full, mtime: st.mtimeMs });\n        if (results.length >= limit) truncated = true;\n      } catch {\n        // skip stat error\n      }\n    };\n    const walk = async (dir: string, relPrefix: string): Promise<void> => {\n      // Abort check per directory: a huge tree walk must stop promptly on\n      // Ctrl+C instead of running to completion with a discarded result.\n      if (signal?.aborted) {\n        truncated = true;\n        return;\n      }\n      /* v8 ignore start -- the inner limit guards (file push + post-recursion return) always stop first; this re-entry guard is defensive. */\n      if (results.length >= limit) {\n        truncated = true;\n        return;\n      }\n      /* v8 ignore stop */\n      let entries: import('node:fs').Dirent[];\n      try {\n        entries = await fs.readdir(dir, { withFileTypes: true });\n      } catch {\n        return;\n      }\n      const subdirs: Array<{ full: string; rel: string }> = [];\n      const matchedFiles: string[] = [];\n      for (const e of entries) {\n        const name = e.name;\n        if (DEFAULT_IGNORE.includes(name)) continue;\n        if (ignored.includes(name)) continue;\n        const rel = relPrefix ? `${relPrefix}/${name}` : name;\n        const full = path.join(dir, name);\n        if (e.isDirectory()) {\n          subdirs.push({ full, rel });\n        } else if (e.isFile()) {\n          re.lastIndex = 0;\n          const relMatch = re.test(rel);\n          re.lastIndex = 0;\n          const nameMatch = re.test(name);\n          if (relMatch || nameMatch) {\n            matchedFiles.push(full);\n          }\n        } else if (e.isSymbolicLink()) {\n          try {\n            const st = await fs.stat(full);\n            if (st.isDirectory()) {\n              // CWE-59 containment: a symlink inside the workspace can point\n              // outside it. Before recursing into it (or including the\n              // resolved file in results), realpath the symlink and verify\n              // its target is still inside the project root. Skip silently\n              // on escape so a single bad symlink doesn't poison the whole\n              // walk.\n              const real = await fs.realpath(full);\n              await assertRealInsideRoot(real, ctx);\n              subdirs.push({ full, rel });\n            } else if (st.isFile()) {\n              const real = await fs.realpath(full);\n              await assertRealInsideRoot(real, ctx);\n              re.lastIndex = 0;\n              const relMatch = re.test(rel);\n              re.lastIndex = 0;\n              const nameMatch = re.test(name);\n              if (relMatch || nameMatch) matchedFiles.push(full);\n            }\n          } catch {\n            // Skip broken symlink, stat error, OR out-of-root target. All\n            // three should fail the walk without aborting the whole search.\n          }\n        }\n        if (truncated) return;\n      }\n      await mapWithConcurrency(matchedFiles, WALK_CONCURRENCY, pushResult);\n      if (truncated) return;\n      // Subdir walks: each one re-checks the limit at entry (re-entry guard),\n      // but we also stop dispatching new walks once truncated, so siblings of\n      // a hit-limit subdir don't keep adding results.\n      const remainingSubdirs = truncated ? [] : subdirs;\n      await mapWithConcurrency(remainingSubdirs, WALK_CONCURRENCY, ({ full, rel }) => walk(full, rel));\n    };\n    await walk(base, '');\n    results.sort((a, b) => b.mtime - a.mtime);\n    return { files: results.map((r) => r.rel), truncated };\n  },\n};\n\nasync function readGitignore(dir: string): Promise<string[]> {\n  try {\n    const raw = await fs.readFile(path.join(dir, '.gitignore'), 'utf8');\n    return raw\n      .split('\\n')\n      .map((l) => l.trim())\n      .filter((l) => l && !l.startsWith('#'));\n  } catch {\n    return [];\n  }\n}\n", "/**\n * Bounded-concurrency async map.\n *\n * Runs `fn` over `items` with at most `limit` in-flight promises. Order of\n * results matches input order. Errors reject the returned promise on the first\n * failure \u2014 the remaining in-flight work is not awaited; this matches\n * `Promise.all` semantics for callers that want fail-fast behavior.\n *\n * Lives here (rather than imported from `@wrongstack/bench`) because:\n *   1. tools sits below bench in the dependency graph \u2014 bench is a consumer of\n *      tools, never the other way around.\n *   2. The semantics used by grep/glob are deliberately simple (fail-fast,\n *      no cancellation, no progress) and don't need bench's richer options.\n */\nexport async function mapWithConcurrency<T, R>(\n  items: readonly T[],\n  limit: number,\n  fn: (item: T) => Promise<R>,\n): Promise<R[]> {\n  if (items.length === 0) return [];\n  const effectiveLimit = Math.max(1, Math.min(limit | 0, items.length));\n  const results: R[] = new Array(items.length);\n  let nextIndex = 0;\n\n  const worker = async (): Promise<void> => {\n    while (true) {\n      const i = nextIndex++;\n      if (i >= items.length) return;\n      results[i] = await fn(items[i] as T);\n    }\n  };\n\n  await Promise.all(Array.from({ length: effectiveLimit }, worker));\n  return results;\n}\n", "import { createHash } from 'node:crypto';\nimport * as fsp from 'node:fs/promises';\nimport * as path from 'node:path';\nimport * as Core from '@wrongstack/core';\nimport type { Context } from '@wrongstack/core';\n\n/**\n * sha-256 hex of a UTF-8 string. Used by the file tools to record a content\n * hash alongside the mtime in `ctx.recordRead` \u2014 the hash is the authoritative\n * staleness arbiter for `edit` (mtime has a 2 s tolerance window on Windows).\n */\nexport function sha256hex(content: string): string {\n  return createHash('sha256').update(content, 'utf8').digest('hex');\n}\n/** Detected package manager for a project directory. */\nexport type PackageManager = 'pnpm' | 'yarn' | 'npm';\n\n/**\n * Detect the project's package manager by inspecting lockfiles in `cwd`.\n * Order: pnpm \u2192 yarn \u2192 npm (default). Missing or unreadable directories fall\n * back to `npm` rather than throwing, so a `safeResolve`-checked cwd that\n * happens to be empty never aborts the tool.\n */\nexport async function detectPackageManager(cwd: string): Promise<PackageManager> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(`${cwd}/pnpm-lock.yaml`);\n    return 'pnpm';\n  } catch {\n    /* not pnpm */\n  }\n  try {\n    await stat(`${cwd}/yarn.lock`);\n    return 'yarn';\n  } catch {\n    /* not yarn */\n  }\n  return 'npm';\n}\n\nexport function resolvePath(input: string, ctx: Context): string {\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);\n}\n\n/**\n * Roots every file tool may always reach, even in restricted mode: the\n * project root and the user-global `~/.wrongstack` directory (config, memory,\n * sessions, skills). `~/.wrongstack` honors the `WRONGSTACK_HOME` override.\n */\nfunction allowedRoots(ctx: Context): string[] {\n  return [path.resolve(ctx.projectRoot), path.resolve(Core.wstackGlobalRoot())];\n}\n\n/** True if `target` is `root` itself or nested inside any of `roots`. */\nfunction isInsideAny(target: string, roots: string[]): boolean {\n  return roots.some((root) => {\n    const rel = path.relative(root, target);\n    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));\n  });\n}\n\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\n  const target = path.resolve(absPath);\n  // Unrestricted filesystem access: skip the project-root containment check.\n  if (ctx.allowOutsideProjectRoot) return target;\n  if (isInsideAny(target, allowedRoots(ctx))) return target;\n  throw new Error(`Path \"${absPath}\" is outside project root \"${path.resolve(ctx.projectRoot)}\"`);\n}\n\nexport function safeResolve(input: string, ctx: Context): string {\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\n}\n\n/**\n * Defense against in-root\u2192out-of-root symlink escape (CWE-59). `safeResolve`\n * only does a syntactic `../` check, so a symlink that lives *inside* the\n * project root but points outside still passes it. This resolves the path\n * through `fs.realpath` and re-verifies containment against the realpath of\n * the project root (comparing like-for-like, since the root itself may be a\n * symlink \u2014 macOS `/var`\u2192`/private/var`, Windows 8.3 short names). For a path\n * that does not exist yet (e.g. a `write` to a new file) the nearest existing\n * ancestor directory is checked instead. Throws if the real target escapes.\n *\n * Mirrors the per-file guard already used in `replace.ts`/`grep.ts`; applied\n * to single-file `read`/`edit`/`write` it throws (rather than skips) because\n * the caller named exactly one file.\n */\nexport async function assertRealInsideRoot(absPath: string, ctx: Context): Promise<void> {\n  // Unrestricted filesystem access: no symlink-escape check to perform.\n  if (ctx.allowOutsideProjectRoot) return;\n  // Compare like-for-like against the realpath of each always-allowed root\n  // (project root + ~/.wrongstack), since a root may itself be a symlink.\n  const realRoots = await Promise.all(\n    allowedRoots(ctx).map((r) => fsp.realpath(r).catch(() => path.resolve(r))),\n  );\n  let probe = absPath;\n  for (;;) {\n    let real: string;\n    try {\n      real = await fsp.realpath(probe);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        const parent = path.dirname(probe);\n        if (parent === probe) return; // reached fs root without escaping\n        probe = parent;\n        continue;\n      }\n      throw err;\n    }\n    if (isInsideAny(real, realRoots)) return;\n    throw new Error(\n      `Path \"${absPath}\" resolves through a symlink outside project root \"${realRoots[0]}\"`,\n    );\n  }\n}\n\n/** `safeResolve` + symlink realpath containment check. Async. */\nexport async function safeResolveReal(input: string, ctx: Context): Promise<string> {\n  const abs = safeResolve(input, ctx);\n  await assertRealInsideRoot(abs, ctx);\n  return abs;\n}\n\nexport function truncateMiddle(s: string, max: number): string {\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\n  const half = Math.floor(max / 2);\n  return (\n    s.slice(0, half) +\n    `\\n\u2026[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]\u2026\\n` +\n    s.slice(-half)\n  );\n}\n\nexport function isBinaryBuffer(buf: Buffer): boolean {\n  const len = Math.min(buf.length, 8192);\n  for (let i = 0; i < len; i++) {\n    if (buf[i] === 0) return true;\n  }\n  return false;\n}\n\n// \u2500\u2500\u2500 Command-output normalization (token-saving) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// Raw process output is full of tokens the model gains nothing from: ANSI\n// escapes, carriage-return progress spam, runs of identical warning lines, and\n// huge tails of build noise. These helpers strip that noise before the output\n// reaches the LLM. They are scoped to COMMAND tools (bash/git/exec and the\n// _spawn-stream consumers) \u2014 never applied to structured/code outputs.\n\n/** Unified byte cap for all command tool output fed to the model. */\nexport const COMMAND_OUTPUT_MAX_BYTES = 32_768;\n\n/** Runs of >= this many identical consecutive lines are collapsed. */\nconst REPEAT_RUN_THRESHOLD = 3;\n\n/**\n * Collapse carriage-return overwrites the way a terminal would: `\\r\\n` becomes\n * `\\n`, and a bare `\\r` (progress redraw) keeps only the text after the LAST\n * `\\r` on its physical line. Without this, a single progress bar that redraws\n * 200 times explodes into 200 lines.\n */\nexport function collapseCarriageReturns(text: string): string {\n  const lf = text.replace(/\\r\\n/g, '\\n');\n  if (!lf.includes('\\r')) return lf;\n  return lf\n    .split('\\n')\n    .map((line) => (line.includes('\\r') ? line.slice(line.lastIndexOf('\\r') + 1) : line))\n    .join('\\n');\n}\n\n/**\n * Collapse a run of `minRun`+ identical consecutive lines into the line once\n * plus a marker. Consecutive-only \u2014 it never reorders or dedups non-adjacent\n * lines, so diffs/source stay intact.\n */\nexport function collapseConsecutiveDuplicates(text: string, minRun = REPEAT_RUN_THRESHOLD): string {\n  const lines = text.split('\\n');\n  const out: string[] = [];\n  let i = 0;\n  while (i < lines.length) {\n    let j = i + 1;\n    while (j < lines.length && lines[j] === lines[i]) j++;\n    const run = j - i;\n    if (run >= minRun) {\n      out.push(lines[i]!, `\u2026 \u27E8repeated ${run}\u00D7\u27E9`);\n    } else {\n      for (let k = i; k < j; k++) out.push(lines[k]!);\n    }\n    i = j;\n  }\n  return out.join('\\n');\n}\n\n/** Largest prefix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeHeadBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(0, mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(0, lo);\n}\n\n/** Largest suffix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeTailBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(s.length - mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(s.length - lo);\n}\n\n/**\n * Truncate to `maxBytes` keeping BOTH ends \u2014 the head (what ran / early context)\n * and the tail (errors and summaries usually land last), biased ~45/55 toward\n * the tail. The result never exceeds `maxBytes`.\n */\nexport function truncateHeadTail(s: string, maxBytes: number): string {\n  const total = Buffer.byteLength(s, 'utf8');\n  if (total <= maxBytes) return s;\n  // Reserve a fixed allowance for the marker so the final string can't exceed\n  // the cap even though the dropped-byte count's digit width varies.\n  const MARKER_RESERVE = 64;\n  const avail = Math.max(0, maxBytes - MARKER_RESERVE);\n  const headBudget = Math.floor(avail * 0.45);\n  const head = takeHeadBytes(s, headBudget);\n  const tail = takeTailBytes(s, avail - Buffer.byteLength(head, 'utf8'));\n  const kept = Buffer.byteLength(head, 'utf8') + Buffer.byteLength(tail, 'utf8');\n  return `${head}\\n\u2026[truncated ${total - kept} bytes]\u2026\\n${tail}`;\n}\n\n/**\n * Full token-saving pipeline for command tool output: strip ANSI \u2192 collapse\n * carriage-return progress \u2192 trim trailing whitespace \u2192 collapse identical\n * consecutive lines \u2192 squeeze blank-line runs \u2192 head+tail truncate to the cap.\n */\nexport function normalizeCommandOutput(\n  raw: string,\n  opts: { maxBytes?: number | undefined } = {},\n): string {\n  if (!raw) return raw;\n  let text = Core.stripAnsi(raw);\n  text = collapseCarriageReturns(text);\n  text = text.replace(/[ \\t]+$/gm, ''); // trailing whitespace per line\n  text = collapseConsecutiveDuplicates(text);\n  text = text.replace(/\\n{3,}/g, '\\n\\n'); // >=2 blank lines \u2192 1\n  return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);\n}\n"],
+  "sourcesContent": ["import * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { compileGlob } from '@wrongstack/core/utils';\nimport type { Tool } from '@wrongstack/core/types';\nimport { mapWithConcurrency } from './_concurrency.js';\nimport { assertRealInsideRoot, safeResolveReal } from './_util.js';\n\ninterface GlobInput {\n  pattern: string;\n  path?: string | undefined;\n  limit?: number | undefined;\n}\n\ninterface GlobOutput {\n  files: string[];\n  truncated: boolean;\n}\n\nconst DEFAULT_IGNORE = ['node_modules', '.git', 'dist', 'build', '.next', 'coverage', '.turbo'];\nconst WALK_CONCURRENCY = 16;\n\nexport const globTool: Tool<GlobInput, GlobOutput> = {\n  name: 'glob',\n  category: 'Filesystem',\n  description:\n    'Find files by path pattern. Use index-backed `codebase-search` first for code symbols or concepts when it is live.',\n  usageHint:\n    'PATH DISCOVERY AND SEARCH SCOPING:\\n\\n' +\n    '- When `codebase-search` is live, use it first for code concepts; use `glob` for filenames, path patterns, and non-indexed files.\\n' +\n    '- Combine with `path` and `limit`.\\n' +\n    '- Default ignores common build/dependency directories.\\n' +\n    'Much more efficient than shell `find` for most use cases inside the agent.',\n  selection: {\n    doNotUseWhen: 'you need to search inside file contents.',\n    useInstead: ['grep'],\n  },\n  permission: 'auto',\n  mutating: false,\n  capabilities: ['fs.read'],\n  icon: 'folder',\n  maxOutputBytes: 65_536,\n  timeoutMs: 5_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      pattern: {\n        type: 'string',\n        description: 'Glob pattern to match (e.g. \"**/*.ts\", \"src/**\").',\n      },\n      path: {\n        type: 'string',\n        description: 'Base directory to search from (defaults to project root).',\n      },\n      limit: {\n        type: 'integer',\n        description: 'Maximum number of results to return (default 1000, max 5000).',\n      },\n    },\n    required: ['pattern'],\n  },\n  async execute(input, ctx, opts) {\n    if (!input?.pattern) throw new Error('glob: pattern is required');\n    const signal = opts?.signal;\n    // `safeResolveReal` validates that the input base \u2014 even if symlinked \u2014\n    // resolves to a real path inside the project root (or `~/.wrongstack`).\n    // Throws on escape, matching how single-file tools (`read`, `edit`,\n    // `write`) reject out-of-root paths: the caller named the base explicitly.\n    const base = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;\n    const limit = Math.max(1, Math.min(input.limit ?? 1000, 5000));\n\n    const ignored = await readGitignore(base);\n    const re = compileGlob(input.pattern);\n\n    const results: { rel: string; mtime: number }[] = [];\n    let truncated = false;\n    const pushResult = async (full: string): Promise<void> => {\n      // Bail before stat if a concurrent worker has already filled the budget \u2014\n      // the limit is a global cap across all parallel walkers, not per-worker.\n      if (truncated || results.length >= limit) {\n        truncated = true;\n        return;\n      }\n      try {\n        const st = await fs.stat(full);\n        // Re-check after the await: another worker may have filled the budget\n        // while we were waiting on fs.stat.\n        if (truncated || results.length >= limit) {\n          truncated = true;\n          return;\n        }\n        results.push({ rel: full, mtime: st.mtimeMs });\n        if (results.length >= limit) truncated = true;\n      } catch {\n        // skip stat error\n      }\n    };\n    const walk = async (dir: string, relPrefix: string): Promise<void> => {\n      // Abort check per directory: a huge tree walk must stop promptly on\n      // Ctrl+C instead of running to completion with a discarded result.\n      if (signal?.aborted) {\n        truncated = true;\n        return;\n      }\n      /* v8 ignore start -- the inner limit guards (file push + post-recursion return) always stop first; this re-entry guard is defensive. */\n      if (results.length >= limit) {\n        truncated = true;\n        return;\n      }\n      /* v8 ignore stop */\n      let entries: import('node:fs').Dirent[];\n      try {\n        entries = await fs.readdir(dir, { withFileTypes: true });\n      } catch {\n        return;\n      }\n      const subdirs: Array<{ full: string; rel: string }> = [];\n      const matchedFiles: string[] = [];\n      for (const e of entries) {\n        const name = e.name;\n        if (DEFAULT_IGNORE.includes(name)) continue;\n        if (ignored.includes(name)) continue;\n        const rel = relPrefix ? `${relPrefix}/${name}` : name;\n        const full = path.join(dir, name);\n        if (e.isDirectory()) {\n          subdirs.push({ full, rel });\n        } else if (e.isFile()) {\n          re.lastIndex = 0;\n          const relMatch = re.test(rel);\n          re.lastIndex = 0;\n          const nameMatch = re.test(name);\n          if (relMatch || nameMatch) {\n            matchedFiles.push(full);\n          }\n        } else if (e.isSymbolicLink()) {\n          try {\n            const st = await fs.stat(full);\n            if (st.isDirectory()) {\n              // CWE-59 containment: a symlink inside the workspace can point\n              // outside it. Before recursing into it (or including the\n              // resolved file in results), realpath the symlink and verify\n              // its target is still inside the project root. Skip silently\n              // on escape so a single bad symlink doesn't poison the whole\n              // walk.\n              const real = await fs.realpath(full);\n              await assertRealInsideRoot(real, ctx);\n              subdirs.push({ full, rel });\n            } else if (st.isFile()) {\n              const real = await fs.realpath(full);\n              await assertRealInsideRoot(real, ctx);\n              re.lastIndex = 0;\n              const relMatch = re.test(rel);\n              re.lastIndex = 0;\n              const nameMatch = re.test(name);\n              if (relMatch || nameMatch) matchedFiles.push(full);\n            }\n          } catch {\n            // Skip broken symlink, stat error, OR out-of-root target. All\n            // three should fail the walk without aborting the whole search.\n          }\n        }\n        if (truncated) return;\n      }\n      await mapWithConcurrency(matchedFiles, WALK_CONCURRENCY, pushResult);\n      if (truncated) return;\n      // Subdir walks: each one re-checks the limit at entry (re-entry guard),\n      // but we also stop dispatching new walks once truncated, so siblings of\n      // a hit-limit subdir don't keep adding results.\n      const remainingSubdirs = truncated ? [] : subdirs;\n      await mapWithConcurrency(remainingSubdirs, WALK_CONCURRENCY, ({ full, rel }) => walk(full, rel));\n    };\n    await walk(base, '');\n    results.sort((a, b) => b.mtime - a.mtime);\n    return { files: results.map((r) => r.rel), truncated };\n  },\n};\n\nasync function readGitignore(dir: string): Promise<string[]> {\n  try {\n    const raw = await fs.readFile(path.join(dir, '.gitignore'), 'utf8');\n    return raw\n      .split('\\n')\n      .map((l) => l.trim())\n      .filter((l) => l && !l.startsWith('#'));\n  } catch {\n    return [];\n  }\n}\n", "/**\n * Bounded-concurrency async map.\n *\n * Runs `fn` over `items` with at most `limit` in-flight promises. Order of\n * results matches input order. Errors reject the returned promise on the first\n * failure \u2014 the remaining in-flight work is not awaited; this matches\n * `Promise.all` semantics for callers that want fail-fast behavior.\n *\n * Lives here (rather than imported from `@wrongstack/bench`) because:\n *   1. tools sits below bench in the dependency graph \u2014 bench is a consumer of\n *      tools, never the other way around.\n *   2. The semantics used by grep/glob are deliberately simple (fail-fast,\n *      no cancellation, no progress) and don't need bench's richer options.\n */\nexport async function mapWithConcurrency<T, R>(\n  items: readonly T[],\n  limit: number,\n  fn: (item: T) => Promise<R>,\n): Promise<R[]> {\n  if (items.length === 0) return [];\n  const effectiveLimit = Math.max(1, Math.min(limit | 0, items.length));\n  const results: R[] = new Array(items.length);\n  let nextIndex = 0;\n\n  const worker = async (): Promise<void> => {\n    while (true) {\n      const i = nextIndex++;\n      if (i >= items.length) return;\n      results[i] = await fn(items[i] as T);\n    }\n  };\n\n  await Promise.all(Array.from({ length: effectiveLimit }, worker));\n  return results;\n}\n", "import { createHash } from 'node:crypto';\nimport * as fsp from 'node:fs/promises';\nimport * as path from 'node:path';\nimport * as Core from '@wrongstack/core/utils';\nimport type { Context } from '@wrongstack/core/agent';\n\n/**\n * sha-256 hex of a UTF-8 string. Used by the file tools to record a content\n * hash alongside the mtime in `ctx.recordRead` \u2014 the hash is the authoritative\n * staleness arbiter for `edit` (mtime has a 2 s tolerance window on Windows).\n */\nexport function sha256hex(content: string): string {\n  return createHash('sha256').update(content, 'utf8').digest('hex');\n}\n/** Detected package manager for a project directory. */\nexport type PackageManager = 'pnpm' | 'yarn' | 'npm';\n\n/**\n * Detect the project's package manager by inspecting lockfiles in `cwd`.\n * Order: pnpm \u2192 yarn \u2192 npm (default). Missing or unreadable directories fall\n * back to `npm` rather than throwing, so a `safeResolve`-checked cwd that\n * happens to be empty never aborts the tool.\n */\nexport async function detectPackageManager(cwd: string): Promise<PackageManager> {\n  const { stat } = await import('node:fs/promises');\n  try {\n    await stat(`${cwd}/pnpm-lock.yaml`);\n    return 'pnpm';\n  } catch {\n    /* not pnpm */\n  }\n  try {\n    await stat(`${cwd}/yarn.lock`);\n    return 'yarn';\n  } catch {\n    /* not yarn */\n  }\n  return 'npm';\n}\n\nexport function resolvePath(input: string, ctx: Context): string {\n  return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);\n}\n\n/**\n * Roots every file tool may always reach, even in restricted mode: the\n * project root and the user-global `~/.wrongstack` directory (config, memory,\n * sessions, skills). `~/.wrongstack` honors the `WRONGSTACK_HOME` override.\n */\nfunction allowedRoots(ctx: Context): string[] {\n  return [path.resolve(ctx.projectRoot), path.resolve(Core.wstackGlobalRoot())];\n}\n\n/** True if `target` is `root` itself or nested inside any of `roots`. */\nfunction isInsideAny(target: string, roots: string[]): boolean {\n  return roots.some((root) => {\n    const rel = path.relative(root, target);\n    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));\n  });\n}\n\nexport function ensureInsideRoot(absPath: string, ctx: Context): string {\n  const target = path.resolve(absPath);\n  // Unrestricted filesystem access: skip the project-root containment check.\n  if (ctx.allowOutsideProjectRoot) return target;\n  if (isInsideAny(target, allowedRoots(ctx))) return target;\n  throw new Error(`Path \"${absPath}\" is outside project root \"${path.resolve(ctx.projectRoot)}\"`);\n}\n\nexport function safeResolve(input: string, ctx: Context): string {\n  return ensureInsideRoot(resolvePath(input, ctx), ctx);\n}\n\n/**\n * Defense against in-root\u2192out-of-root symlink escape (CWE-59). `safeResolve`\n * only does a syntactic `../` check, so a symlink that lives *inside* the\n * project root but points outside still passes it. This resolves the path\n * through `fs.realpath` and re-verifies containment against the realpath of\n * the project root (comparing like-for-like, since the root itself may be a\n * symlink \u2014 macOS `/var`\u2192`/private/var`, Windows 8.3 short names). For a path\n * that does not exist yet (e.g. a `write` to a new file) the nearest existing\n * ancestor directory is checked instead. Throws if the real target escapes.\n *\n * Mirrors the per-file guard already used in `replace.ts`/`grep.ts`; applied\n * to single-file `read`/`edit`/`write` it throws (rather than skips) because\n * the caller named exactly one file.\n */\nexport async function assertRealInsideRoot(absPath: string, ctx: Context): Promise<void> {\n  // Unrestricted filesystem access: no symlink-escape check to perform.\n  if (ctx.allowOutsideProjectRoot) return;\n  // Compare like-for-like against the realpath of each always-allowed root\n  // (project root + ~/.wrongstack), since a root may itself be a symlink.\n  const realRoots = await Promise.all(\n    allowedRoots(ctx).map((r) => fsp.realpath(r).catch(() => path.resolve(r))),\n  );\n  let probe = absPath;\n  for (;;) {\n    let real: string;\n    try {\n      real = await fsp.realpath(probe);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n        const parent = path.dirname(probe);\n        if (parent === probe) return; // reached fs root without escaping\n        probe = parent;\n        continue;\n      }\n      throw err;\n    }\n    if (isInsideAny(real, realRoots)) return;\n    throw new Error(\n      `Path \"${absPath}\" resolves through a symlink outside project root \"${realRoots[0]}\"`,\n    );\n  }\n}\n\n/** `safeResolve` + symlink realpath containment check. Async. */\nexport async function safeResolveReal(input: string, ctx: Context): Promise<string> {\n  const abs = safeResolve(input, ctx);\n  await assertRealInsideRoot(abs, ctx);\n  return abs;\n}\n\nexport function truncateMiddle(s: string, max: number): string {\n  if (Buffer.byteLength(s, 'utf8') <= max) return s;\n  const half = Math.floor(max / 2);\n  return (\n    s.slice(0, half) +\n    `\\n\u2026[truncated ${Buffer.byteLength(s, 'utf8') - max} bytes from middle]\u2026\\n` +\n    s.slice(-half)\n  );\n}\n\nexport function isBinaryBuffer(buf: Buffer): boolean {\n  const len = Math.min(buf.length, 8192);\n  for (let i = 0; i < len; i++) {\n    if (buf[i] === 0) return true;\n  }\n  return false;\n}\n\n// \u2500\u2500\u2500 Command-output normalization (token-saving) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// Raw process output is full of tokens the model gains nothing from: ANSI\n// escapes, carriage-return progress spam, runs of identical warning lines, and\n// huge tails of build noise. These helpers strip that noise before the output\n// reaches the LLM. They are scoped to COMMAND tools (bash/git/exec and the\n// _spawn-stream consumers) \u2014 never applied to structured/code outputs.\n\n/** Unified byte cap for all command tool output fed to the model. */\nexport const COMMAND_OUTPUT_MAX_BYTES = 32_768;\n\n/** Runs of >= this many identical consecutive lines are collapsed. */\nconst REPEAT_RUN_THRESHOLD = 3;\n\n/**\n * Collapse carriage-return overwrites the way a terminal would: `\\r\\n` becomes\n * `\\n`, and a bare `\\r` (progress redraw) keeps only the text after the LAST\n * `\\r` on its physical line. Without this, a single progress bar that redraws\n * 200 times explodes into 200 lines.\n */\nexport function collapseCarriageReturns(text: string): string {\n  const lf = text.replace(/\\r\\n/g, '\\n');\n  if (!lf.includes('\\r')) return lf;\n  return lf\n    .split('\\n')\n    .map((line) => (line.includes('\\r') ? line.slice(line.lastIndexOf('\\r') + 1) : line))\n    .join('\\n');\n}\n\n/**\n * Collapse a run of `minRun`+ identical consecutive lines into the line once\n * plus a marker. Consecutive-only \u2014 it never reorders or dedups non-adjacent\n * lines, so diffs/source stay intact.\n */\nexport function collapseConsecutiveDuplicates(text: string, minRun = REPEAT_RUN_THRESHOLD): string {\n  const lines = text.split('\\n');\n  const out: string[] = [];\n  let i = 0;\n  while (i < lines.length) {\n    let j = i + 1;\n    while (j < lines.length && lines[j] === lines[i]) j++;\n    const run = j - i;\n    if (run >= minRun) {\n      out.push(lines[i]!, `\u2026 \u27E8repeated ${run}\u00D7\u27E9`);\n    } else {\n      for (let k = i; k < j; k++) out.push(lines[k]!);\n    }\n    i = j;\n  }\n  return out.join('\\n');\n}\n\n/** Largest prefix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeHeadBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(0, mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(0, lo);\n}\n\n/** Largest suffix of `s` whose UTF-8 byte length is <= `maxBytes`. */\nfunction takeTailBytes(s: string, maxBytes: number): string {\n  if (maxBytes <= 0) return '';\n  /* v8 ignore next -- only caller (truncateHeadTail) passes a budget smaller than s; defensive. */\n  if (Buffer.byteLength(s, 'utf8') <= maxBytes) return s;\n  let lo = 0;\n  let hi = s.length;\n  while (lo < hi) {\n    const mid = Math.ceil((lo + hi) / 2);\n    if (Buffer.byteLength(s.slice(s.length - mid), 'utf8') <= maxBytes) lo = mid;\n    else hi = mid - 1;\n  }\n  return s.slice(s.length - lo);\n}\n\n/**\n * Truncate to `maxBytes` keeping BOTH ends \u2014 the head (what ran / early context)\n * and the tail (errors and summaries usually land last), biased ~45/55 toward\n * the tail. The result never exceeds `maxBytes`.\n */\nexport function truncateHeadTail(s: string, maxBytes: number): string {\n  const total = Buffer.byteLength(s, 'utf8');\n  if (total <= maxBytes) return s;\n  // Reserve a fixed allowance for the marker so the final string can't exceed\n  // the cap even though the dropped-byte count's digit width varies.\n  const MARKER_RESERVE = 64;\n  const avail = Math.max(0, maxBytes - MARKER_RESERVE);\n  const headBudget = Math.floor(avail * 0.45);\n  const head = takeHeadBytes(s, headBudget);\n  const tail = takeTailBytes(s, avail - Buffer.byteLength(head, 'utf8'));\n  const kept = Buffer.byteLength(head, 'utf8') + Buffer.byteLength(tail, 'utf8');\n  return `${head}\\n\u2026[truncated ${total - kept} bytes]\u2026\\n${tail}`;\n}\n\n/**\n * Full token-saving pipeline for command tool output: strip ANSI \u2192 collapse\n * carriage-return progress \u2192 trim trailing whitespace \u2192 collapse identical\n * consecutive lines \u2192 squeeze blank-line runs \u2192 head+tail truncate to the cap.\n */\nexport function normalizeCommandOutput(\n  raw: string,\n  opts: { maxBytes?: number | undefined } = {},\n): string {\n  if (!raw) return raw;\n  let text = Core.stripAnsi(raw);\n  text = collapseCarriageReturns(text);\n  text = text.replace(/[ \\t]+$/gm, ''); // trailing whitespace per line\n  text = collapseConsecutiveDuplicates(text);\n  text = text.replace(/\\n{3,}/g, '\\n\\n'); // >=2 blank lines \u2192 1\n  return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);\n}\n"],
   "mappings": ";AAAA,YAAY,QAAQ;AACpB,YAAYA,WAAU;AACtB,SAAS,mBAAmB;;;ACY5B,eAAsB,mBACpB,OACA,OACA,IACc;AACd,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAChC,QAAM,iBAAiB,KAAK,IAAI,GAAG,KAAK,IAAI,QAAQ,GAAG,MAAM,MAAM,CAAC;AACpE,QAAM,UAAe,IAAI,MAAM,MAAM,MAAM;AAC3C,MAAI,YAAY;AAEhB,QAAM,SAAS,YAA2B;AACxC,WAAO,MAAM;AACX,YAAM,IAAI;AACV,UAAI,KAAK,MAAM,OAAQ;AACvB,cAAQ,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,CAAM;AAAA,IACrC;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,MAAM,CAAC;AAChE,SAAO;AACT;;;ACjCA,YAAY,SAAS;AACrB,YAAY,UAAU;AACtB,YAAY,UAAU;AAqCf,SAAS,YAAY,OAAe,KAAsB;AAC/D,SAAY,gBAAW,KAAK,IAAS,eAAU,KAAK,IAAS,aAAQ,IAAI,cAAc,IAAI,KAAK,KAAK;AACvG;AAOA,SAAS,aAAa,KAAwB;AAC5C,SAAO,CAAM,aAAQ,IAAI,WAAW,GAAQ,aAAa,sBAAiB,CAAC,CAAC;AAC9E;AAGA,SAAS,YAAY,QAAgB,OAA0B;AAC7D,SAAO,MAAM,KAAK,CAAC,SAAS;AAC1B,UAAM,MAAW,cAAS,MAAM,MAAM;AACtC,WAAO,QAAQ,MAAO,CAAC,IAAI,WAAW,IAAI,KAAK,CAAM,gBAAW,GAAG;AAAA,EACrE,CAAC;AACH;AAEO,SAAS,iBAAiB,SAAiB,KAAsB;AACtE,QAAM,SAAc,aAAQ,OAAO;AAEnC,MAAI,IAAI,wBAAyB,QAAO;AACxC,MAAI,YAAY,QAAQ,aAAa,GAAG,CAAC,EAAG,QAAO;AACnD,QAAM,IAAI,MAAM,SAAS,OAAO,8BAAmC,aAAQ,IAAI,WAAW,CAAC,GAAG;AAChG;AAEO,SAAS,YAAY,OAAe,KAAsB;AAC/D,SAAO,iBAAiB,YAAY,OAAO,GAAG,GAAG,GAAG;AACtD;AAgBA,eAAsB,qBAAqB,SAAiB,KAA6B;AAEvF,MAAI,IAAI,wBAAyB;AAGjC,QAAM,YAAY,MAAM,QAAQ;AAAA,IAC9B,aAAa,GAAG,EAAE,IAAI,CAAC,MAAU,aAAS,CAAC,EAAE,MAAM,MAAW,aAAQ,CAAC,CAAC,CAAC;AAAA,EAC3E;AACA,MAAI,QAAQ;AACZ,aAAS;AACP,QAAI;AACJ,QAAI;AACF,aAAO,MAAU,aAAS,KAAK;AAAA,IACjC,SAAS,KAAK;AACZ,UAAK,IAA8B,SAAS,UAAU;AACpD,cAAM,SAAc,aAAQ,KAAK;AACjC,YAAI,WAAW,MAAO;AACtB,gBAAQ;AACR;AAAA,MACF;AACA,YAAM;AAAA,IACR;AACA,QAAI,YAAY,MAAM,SAAS,EAAG;AAClC,UAAM,IAAI;AAAA,MACR,SAAS,OAAO,sDAAsD,UAAU,CAAC,CAAC;AAAA,IACpF;AAAA,EACF;AACF;AAGA,eAAsB,gBAAgB,OAAe,KAA+B;AAClF,QAAM,MAAM,YAAY,OAAO,GAAG;AAClC,QAAM,qBAAqB,KAAK,GAAG;AACnC,SAAO;AACT;;;AFvGA,IAAM,iBAAiB,CAAC,gBAAgB,QAAQ,QAAQ,SAAS,SAAS,YAAY,QAAQ;AAC9F,IAAM,mBAAmB;AAElB,IAAM,WAAwC;AAAA,EACnD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EACF,WACE;AAAA,EAKF,WAAW;AAAA,IACT,cAAc;AAAA,IACd,YAAY,CAAC,MAAM;AAAA,EACrB;AAAA,EACA,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,cAAc,CAAC,SAAS;AAAA,EACxB,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,MAAM;AAAA,QACJ,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,SAAS;AAAA,EACtB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,MAAM;AAC9B,QAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,2BAA2B;AAChE,UAAM,SAAS,MAAM;AAKrB,UAAM,OAAO,MAAM,OAAO,MAAM,gBAAgB,MAAM,MAAM,GAAG,IAAI,IAAI;AACvE,UAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,MAAM,SAAS,KAAM,GAAI,CAAC;AAE7D,UAAM,UAAU,MAAM,cAAc,IAAI;AACxC,UAAM,KAAK,YAAY,MAAM,OAAO;AAEpC,UAAM,UAA4C,CAAC;AACnD,QAAI,YAAY;AAChB,UAAM,aAAa,OAAO,SAAgC;AAGxD,UAAI,aAAa,QAAQ,UAAU,OAAO;AACxC,oBAAY;AACZ;AAAA,MACF;AACA,UAAI;AACF,cAAM,KAAK,MAAS,QAAK,IAAI;AAG7B,YAAI,aAAa,QAAQ,UAAU,OAAO;AACxC,sBAAY;AACZ;AAAA,QACF;AACA,gBAAQ,KAAK,EAAE,KAAK,MAAM,OAAO,GAAG,QAAQ,CAAC;AAC7C,YAAI,QAAQ,UAAU,MAAO,aAAY;AAAA,MAC3C,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,OAAO,OAAO,KAAa,cAAqC;AAGpE,UAAI,QAAQ,SAAS;AACnB,oBAAY;AACZ;AAAA,MACF;AAEA,UAAI,QAAQ,UAAU,OAAO;AAC3B,oBAAY;AACZ;AAAA,MACF;AAEA,UAAI;AACJ,UAAI;AACF,kBAAU,MAAS,WAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,MACzD,QAAQ;AACN;AAAA,MACF;AACA,YAAM,UAAgD,CAAC;AACvD,YAAM,eAAyB,CAAC;AAChC,iBAAW,KAAK,SAAS;AACvB,cAAM,OAAO,EAAE;AACf,YAAI,eAAe,SAAS,IAAI,EAAG;AACnC,YAAI,QAAQ,SAAS,IAAI,EAAG;AAC5B,cAAM,MAAM,YAAY,GAAG,SAAS,IAAI,IAAI,KAAK;AACjD,cAAM,OAAY,WAAK,KAAK,IAAI;AAChC,YAAI,EAAE,YAAY,GAAG;AACnB,kBAAQ,KAAK,EAAE,MAAM,IAAI,CAAC;AAAA,QAC5B,WAAW,EAAE,OAAO,GAAG;AACrB,aAAG,YAAY;AACf,gBAAM,WAAW,GAAG,KAAK,GAAG;AAC5B,aAAG,YAAY;AACf,gBAAM,YAAY,GAAG,KAAK,IAAI;AAC9B,cAAI,YAAY,WAAW;AACzB,yBAAa,KAAK,IAAI;AAAA,UACxB;AAAA,QACF,WAAW,EAAE,eAAe,GAAG;AAC7B,cAAI;AACF,kBAAM,KAAK,MAAS,QAAK,IAAI;AAC7B,gBAAI,GAAG,YAAY,GAAG;AAOpB,oBAAM,OAAO,MAAS,YAAS,IAAI;AACnC,oBAAM,qBAAqB,MAAM,GAAG;AACpC,sBAAQ,KAAK,EAAE,MAAM,IAAI,CAAC;AAAA,YAC5B,WAAW,GAAG,OAAO,GAAG;AACtB,oBAAM,OAAO,MAAS,YAAS,IAAI;AACnC,oBAAM,qBAAqB,MAAM,GAAG;AACpC,iBAAG,YAAY;AACf,oBAAM,WAAW,GAAG,KAAK,GAAG;AAC5B,iBAAG,YAAY;AACf,oBAAM,YAAY,GAAG,KAAK,IAAI;AAC9B,kBAAI,YAAY,UAAW,cAAa,KAAK,IAAI;AAAA,YACnD;AAAA,UACF,QAAQ;AAAA,UAGR;AAAA,QACF;AACA,YAAI,UAAW;AAAA,MACjB;AACA,YAAM,mBAAmB,cAAc,kBAAkB,UAAU;AACnE,UAAI,UAAW;AAIf,YAAM,mBAAmB,YAAY,CAAC,IAAI;AAC1C,YAAM,mBAAmB,kBAAkB,kBAAkB,CAAC,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,IACjG;AACA,UAAM,KAAK,MAAM,EAAE;AACnB,YAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;AACxC,WAAO,EAAE,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,UAAU;AAAA,EACvD;AACF;AAEA,eAAe,cAAc,KAAgC;AAC3D,MAAI;AACF,UAAM,MAAM,MAAS,YAAc,WAAK,KAAK,YAAY,GAAG,MAAM;AAClE,WAAO,IACJ,MAAM,IAAI,EACV,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,WAAW,GAAG,CAAC;AAAA,EAC1C,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;",
   "names": ["path"]
 }

package/dist/grep.d.ts

@@ -1,4 +1,4 @@
-import type { Tool } from '@wrongstack/core';
+import type { Tool } from '@wrongstack/core/types';
 interface GrepInput {
     pattern: string;
     path?: string | undefined;

package/dist/grep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../src/grep.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAK9D,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,SAAS,GAAG,oBAAoB,GAAG,OAAO,GAAG,SAAS,CAAC;IACrE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,QAAQ,CAAC;CACvB;AAOD,eAAO,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAqGhD,CAAC"}
+{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../src/grep.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAmB,MAAM,wBAAwB,CAAC;AAMpE,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,SAAS,GAAG,oBAAoB,GAAG,OAAO,GAAG,SAAS,CAAC;IACrE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,QAAQ,CAAC;CACvB;AAOD,eAAO,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAqGhD,CAAC"}

package/dist/grep.js

@@ -1,9 +1,10 @@
 // src/grep.ts
-import { expectDefined } from "@wrongstack/core";
+import { expectDefined } from "@wrongstack/core/utils";
 import { spawn } from "node:child_process";
 import * as fs from "node:fs/promises";
 import * as path2 from "node:path";
-import { buildChildEnv, compileGlob, ToolValidationError } from "@wrongstack/core";
+import { ToolValidationError } from "@wrongstack/core/types";
+import { buildChildEnv, compileGlob } from "@wrongstack/core/utils";
 
 // src/_concurrency.ts
 async function mapWithConcurrency(items, limit, fn) {
@@ -69,7 +70,7 @@ function capSubject(line) {
 
 // src/_util.ts
 import * as path from "node:path";
-import * as Core from "@wrongstack/core";
+import * as Core from "@wrongstack/core/utils";
 function resolvePath(input, ctx) {
   return path.isAbsolute(input) ? path.normalize(input) : path.resolve(ctx.workingDir ?? ctx.cwd, input);
 }