@wrongstack/tools 0.305.0 → 0.305.1

package/dist/builtin.js

@@ -10800,7 +10800,6 @@ import * as fs12 from "node:fs";
 import * as os5 from "node:os";
 import * as path17 from "node:path";
 import { fileURLToPath } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 
 // src/codebase-index/writer.ts
 import { expectDefined as expectDefined2 } from "@wrongstack/core/utils";
@@ -20878,7 +20877,7 @@ async function detectFixer(cwd) {
 init_util();
 import { spawn as spawn9 } from "node:child_process";
 import { statSync as statSync4 } from "node:fs";
-import { dirname as dirname14, resolve as resolve13, sep as sep6 } from "node:path";
+import { dirname as dirname13, resolve as resolve13, sep as sep6 } from "node:path";
 import { assessCommitSafety } from "@wrongstack/core/coordination";
 import { buildChildEnv as buildChildEnv4 } from "@wrongstack/core/utils";
 var TIMEOUT_MS2 = 3e4;
@@ -21057,7 +21056,7 @@ function findGitDir2(cwd, projectRoot) {
     } catch {
     }
     if (dir === root) break;
-    const parent = dirname14(dir);
+    const parent = dirname13(dir);
     if (parent === dir) break;
     dir = parent;
   }

package/dist/codebase-index/index.d.ts

@@ -31,6 +31,7 @@ export { internalKindToLspKind, lspKindToInternalKind, } from './lsp-kind.js';
 export type { ProjectIndexServerClientHealth, ProjectIndexServerConnectionState, ProjectIndexServerConnectionStatus, } from './project-server-client.js';
 export type { ProjectIndexServerActivity, ProjectIndexServerHealth, } from './project-server-protocol.js';
 export type { CallSite, CodeMapGraph, FileMeta, FileSymbols, GraphEdge, GraphNode, IndexResult, IndexStats, SearchResult, Symbol, SymbolKind, SymbolLang, } from './schema.js';
+export { projectIndexServerEndpoint, projectIndexServerMetadataPath, } from './project-server-endpoint.js';
 export { SCHEMA_VERSION } from './schema.js';
 export { codebaseIndexDirOverride, IndexStore, resolveIndexDir } from './writer.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/codebase-index/index.js

@@ -2815,7 +2815,6 @@ import * as fs4 from "node:fs";
 import * as os from "node:os";
 import * as path5 from "node:path";
 import { fileURLToPath } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 
 // src/codebase-index/writer.ts
 import { expectDefined } from "@wrongstack/core/utils";
@@ -9489,6 +9488,8 @@ export {
   onIndexStateChange,
   outgoingCallsService2 as outgoingCallsService,
   packageGraphService2 as packageGraphService,
+  projectIndexServerEndpoint,
+  projectIndexServerMetadataPath,
   resetIndexCircuitBreaker,
   resolveIndexDir,
   resolveProjectIndexDaemonAvailability,

package/dist/codebase-index/project-server-endpoint.d.ts

@@ -3,7 +3,7 @@ export declare const PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
 /**
  * Short directory name that owns the per-project Unix socket on Linux.
  *
- * The directory is created `0o700` by `ensureProjectIndexSocketDirectory`: on
+ * The directory is created `0o700` by `bindProjectEndpoint`: on
  * multi-user Linux `/tmp` the kernel's sticky bit otherwise lets a local
  * attacker pre-bind a predictable socket name (project paths are guessable
  * via the public `buildId` handshake), hijacking clients whose `bind()` hits
@@ -48,5 +48,4 @@ export declare function projectIndexServerKey(projectRoot: string, indexDir?: st
  */
 export declare function projectIndexServerEndpoint(projectRoot: string, indexDir?: string): string;
 export declare function projectIndexServerMetadataPath(projectRoot: string, indexDir?: string): string;
-export declare function ensureProjectIndexSocketDirectory(endpoint: string): void;
 //# sourceMappingURL=project-server-endpoint.d.ts.map

package/dist/codebase-index/project-server.js

@@ -2713,6 +2713,7 @@ import {
   useDaemonPerfDefaults,
   watchProjectTree
 } from "@wrongstack/core/utils";
+import { bindProjectEndpoint } from "@wrongstack/persistence";
 
 // src/codebase-index/indexer.ts
 import { expectDefined as expectDefined5 } from "@wrongstack/core/utils";
@@ -7218,7 +7219,6 @@ import * as fs10 from "node:fs";
 import * as os3 from "node:os";
 import * as path13 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 var PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
 var PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
 var PROJECT_INDEX_SERVER_SOCKET_DIR = `wsci-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}`;
@@ -7260,12 +7260,6 @@ function projectIndexServerMetadataPath(projectRoot2, indexDir2) {
     PROJECT_INDEX_SERVER_METADATA_FILE
   );
 }
-function ensureProjectIndexSocketDirectory(endpoint2) {
-  if (process.platform !== "win32") {
-    assertUnixSocketPathWithinLimit(endpoint2, "codebase-index");
-    fs10.mkdirSync(path13.dirname(endpoint2), { recursive: true, mode: 448 });
-  }
-}
 
 // src/codebase-index/project-server-protocol.ts
 var PROJECT_INDEX_SERVER_MAX_FRAME_CHARS = 64 * 1024 * 1024;
@@ -7877,27 +7871,32 @@ async function stop(_reason) {
   }
   await stopMemoryWatchdog();
 }
-ensureProjectIndexSocketDirectory(endpoint);
-server.once("error", (error) => {
-  if (error.code === "EADDRINUSE") {
+void (async () => {
+  const bind = await bindProjectEndpoint({ server, endpoint, service: "codebase-index" });
+  if (bind.outcome === "already-owned") {
     process.exitCode = 0;
     return;
   }
-  process.stderr.write(`codebase-index server failed: ${error.message}
+  if (bind.outcome === "failed") {
+    process.stderr.write(`codebase-index server failed: ${bind.error.message}
+`);
+    process.exitCode = 1;
+    return;
+  }
+  if (bind.reclaimedStaleEndpoint) {
+    process.stderr.write(`codebase-index server reclaimed stale endpoint ${endpoint}
 `);
-  process.exitCode = 1;
-});
-server.listen(endpoint, () => {
-  if (process.platform !== "win32") {
-    try {
-      fs11.chmodSync(endpoint, 384);
-    } catch {
-    }
   }
+  server.on("error", (error) => {
+    if (stopping) return;
+    process.stderr.write(`codebase-index server error: ${error.message}
+`);
+    process.exitCode = 1;
+  });
   writeMetadata();
   markMetadataWritten?.();
   scheduleIdleStop();
-});
+})();
 process.once("SIGINT", () => void stop("SIGINT"));
 process.once("SIGTERM", () => void stop("SIGTERM"));
 //# sourceMappingURL=project-server.js.map

package/dist/index.js

@@ -11170,7 +11170,6 @@ import * as fs12 from "node:fs";
 import * as os5 from "node:os";
 import * as path17 from "node:path";
 import { fileURLToPath } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 
 // src/codebase-index/writer.ts
 import { expectDefined as expectDefined2 } from "@wrongstack/core/utils";
@@ -21129,7 +21128,7 @@ async function detectFixer(cwd) {
 init_util();
 import { spawn as spawn9 } from "node:child_process";
 import { statSync as statSync4 } from "node:fs";
-import { dirname as dirname14, resolve as resolve13, sep as sep6 } from "node:path";
+import { dirname as dirname13, resolve as resolve13, sep as sep6 } from "node:path";
 import { assessCommitSafety } from "@wrongstack/core/coordination";
 import { buildChildEnv as buildChildEnv4 } from "@wrongstack/core/utils";
 var TIMEOUT_MS2 = 3e4;
@@ -21308,7 +21307,7 @@ function findGitDir2(cwd, projectRoot) {
     } catch {
     }
     if (dir === root) break;
-    const parent = dirname14(dir);
+    const parent = dirname13(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -23909,7 +23908,7 @@ var KANBAN_INPUT_SCHEMA = {
 
 // src/session-kanban.ts
 import { watch } from "node:fs";
-import { basename as basename13, dirname as dirname15 } from "node:path";
+import { basename as basename13, dirname as dirname14 } from "node:path";
 import { getSharedProjectMailbox } from "@wrongstack/core/coordination";
 import {
   loadPlan,
@@ -24527,7 +24526,7 @@ function attachSessionKanbanMirror(context) {
   const configureWatcher = () => {
     const planPath = context.meta["plan.path"];
     const taskPath = context.meta["task.path"];
-    const candidate = typeof planPath === "string" && planPath ? dirname15(planPath) : typeof taskPath === "string" && taskPath ? dirname15(taskPath) : "";
+    const candidate = typeof planPath === "string" && planPath ? dirname14(planPath) : typeof taskPath === "string" && taskPath ? dirname14(taskPath) : "";
     if (!candidate || candidate === watchedDir) return;
     watcher?.close();
     watcher = null;
@@ -24618,9 +24617,21 @@ async function rebindSessionKanbanTask(context) {
   context.setCurrentKanbanTask(best.taskId, best.boardId);
   return { boardId: best.boardId, taskId: best.taskId };
 }
+var degradationReason;
 async function hydrateSessionKanban(context) {
   const id = context.session?.id ?? "";
   if (!id) return null;
+  try {
+    const board = await hydrateSessionKanbanBoard(context, id);
+    degradationReason = void 0;
+    return board;
+  } catch (error) {
+    degradationReason = error instanceof Error ? error.message : String(error);
+    fireAndForget("hydrate", Promise.reject(error));
+    return null;
+  }
+}
+async function hydrateSessionKanbanBoard(context, id) {
   await rebindSessionKanbanTask(context);
   await cleanupEmptySessionKanbanBoards(context.projectRoot, id);
   if (context.projectRoot) {

package/dist/pack.js

@@ -10800,7 +10800,6 @@ import * as fs12 from "node:fs";
 import * as os5 from "node:os";
 import * as path17 from "node:path";
 import { fileURLToPath } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 
 // src/codebase-index/writer.ts
 import { expectDefined as expectDefined2 } from "@wrongstack/core/utils";
@@ -20878,7 +20877,7 @@ async function detectFixer(cwd) {
 init_util();
 import { spawn as spawn9 } from "node:child_process";
 import { statSync as statSync4 } from "node:fs";
-import { dirname as dirname14, resolve as resolve13, sep as sep6 } from "node:path";
+import { dirname as dirname13, resolve as resolve13, sep as sep6 } from "node:path";
 import { assessCommitSafety } from "@wrongstack/core/coordination";
 import { buildChildEnv as buildChildEnv4 } from "@wrongstack/core/utils";
 var TIMEOUT_MS2 = 3e4;
@@ -21057,7 +21056,7 @@ function findGitDir2(cwd, projectRoot) {
     } catch {
     }
     if (dir === root) break;
-    const parent = dirname14(dir);
+    const parent = dirname13(dir);
     if (parent === dir) break;
     dir = parent;
   }

package/dist/read.js

@@ -7277,7 +7277,6 @@ import * as fs10 from "node:fs";
 import * as os3 from "node:os";
 import * as path14 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 var PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
 var PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
 var PROJECT_INDEX_SERVER_SOCKET_DIR = `wsci-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}`;

package/dist/session-kanban.d.ts

@@ -97,6 +97,31 @@ export declare function rebindSessionKanbanTask(context: Context): Promise<{
     boardId: string;
     taskId: string;
 } | null>;
+/**
+ * Why session Kanban is unavailable, or undefined while it is healthy.
+ *
+ * Surfaces exist so a startup path can tell the user their board will not sync
+ * without having to catch and classify the failure itself. Cleared on the
+ * first hydrate that succeeds, so a daemon that comes back stops being
+ * reported as down.
+ */
+export declare function sessionKanbanDegradation(): string | undefined;
+/**
+ * Project the session's todos, plan, and tasks onto its Kanban board.
+ *
+ * Kanban is a projection: every card here is derived from state that lives
+ * somewhere else and is authoritative there. Losing the board costs the user a
+ * view, not any work — so an unreachable Kanban daemon degrades this to `null`
+ * rather than propagating.
+ *
+ * That distinction used to be missing, and it cost an entire session. When a
+ * killed daemon left a stale IPC endpoint behind, the connect error thrown
+ * here unwound through `setupSession` and killed `wstack` at startup: no
+ * prompt, no session, just a socket path in a stack trace — for a board the
+ * user had not asked to see. `bindProjectEndpoint` now stops the daemon from
+ * wedging in the first place, but the call site must still hold: an optional
+ * view may never take down the session it decorates.
+ */
 export declare function hydrateSessionKanban(context: Context): Promise<KanbanBoard | null>;
 export interface SessionKanbanSourceUpdate {
     source: 'todo' | 'task' | 'plan' | null;

package/dist/session-kanban.js

@@ -720,9 +720,24 @@ async function rebindSessionKanbanTask(context) {
   context.setCurrentKanbanTask(best.taskId, best.boardId);
   return { boardId: best.boardId, taskId: best.taskId };
 }
+var degradationReason;
+function sessionKanbanDegradation() {
+  return degradationReason;
+}
 async function hydrateSessionKanban(context) {
   const id = context.session?.id ?? "";
   if (!id) return null;
+  try {
+    const board = await hydrateSessionKanbanBoard(context, id);
+    degradationReason = void 0;
+    return board;
+  } catch (error) {
+    degradationReason = error instanceof Error ? error.message : String(error);
+    fireAndForget("hydrate", Promise.reject(error));
+    return null;
+  }
+}
+async function hydrateSessionKanbanBoard(context, id) {
   await rebindSessionKanbanTask(context);
   await cleanupEmptySessionKanbanBoards(context.projectRoot, id);
   if (context.projectRoot) {
@@ -958,6 +973,7 @@ export {
   projectSessionTasksToKanban,
   projectSessionTodosToKanban,
   rebindSessionKanbanTask,
+  sessionKanbanDegradation,
   takeSessionMirrorFailure,
   taskFileToSerializedGraph,
   todoListToSerializedGraph,

package/dist/tool-tier.js

@@ -10800,7 +10800,6 @@ import * as fs12 from "node:fs";
 import * as os5 from "node:os";
 import * as path17 from "node:path";
 import { fileURLToPath } from "node:url";
-import { assertUnixSocketPathWithinLimit } from "@wrongstack/core/utils";
 
 // src/codebase-index/writer.ts
 import { expectDefined as expectDefined2 } from "@wrongstack/core/utils";
@@ -20878,7 +20877,7 @@ async function detectFixer(cwd) {
 init_util();
 import { spawn as spawn9 } from "node:child_process";
 import { statSync as statSync4 } from "node:fs";
-import { dirname as dirname14, resolve as resolve13, sep as sep6 } from "node:path";
+import { dirname as dirname13, resolve as resolve13, sep as sep6 } from "node:path";
 import { assessCommitSafety } from "@wrongstack/core/coordination";
 import { buildChildEnv as buildChildEnv4 } from "@wrongstack/core/utils";
 var TIMEOUT_MS2 = 3e4;
@@ -21057,7 +21056,7 @@ function findGitDir2(cwd, projectRoot) {
     } catch {
     }
     if (dir === root) break;
-    const parent = dirname14(dir);
+    const parent = dirname13(dir);
     if (parent === dir) break;
     dir = parent;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/tools",
-  "version": "0.305.0",
+  "version": "0.305.1",
   "license": "MIT",
   "description": "WrongStack built-in tools: read/write/edit, bash/exec, grep/glob, git, fetch, test, lint, and more.",
   "repository": {
@@ -253,8 +253,9 @@
     "turndown": "^7.2.4",
     "undici": "^8.9.0",
     "web-tree-sitter": "0.26.12",
-    "@wrongstack/kanban": "0.305.0",
-    "@wrongstack/core": "0.305.0"
+    "@wrongstack/kanban": "0.305.1",
+    "@wrongstack/core": "0.305.1",
+    "@wrongstack/persistence": "0.305.1"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",