@wrongstack/tools 0.306.3 → 0.307.0

package/dist/install.js

@@ -429,13 +429,16 @@ function killWin32Tree(pid, opts = {}) {
     };
     child.on("error", settle);
     child.on("close", settle);
-    timeout = setTimeout(() => {
-      try {
-        child.kill();
-      } catch {
-      }
-      settle();
-    }, Math.max(1, opts.timeoutMs ?? WIN32_TASKKILL_TIMEOUT_MS));
+    timeout = setTimeout(
+      () => {
+        try {
+          child.kill();
+        } catch {
+        }
+        settle();
+      },
+      Math.max(1, opts.timeoutMs ?? WIN32_TASKKILL_TIMEOUT_MS)
+    );
     timeout.unref?.();
     child.unref();
     return true;
@@ -609,7 +612,10 @@ var ProcessRegistryImpl = class {
   getBreakerCountdown() {
     if (this.autoKillArmedAt === null || this.autoKillResetMs <= 0) return null;
     const elapsed = Date.now() - this.autoKillArmedAt;
-    return { remainingMs: Math.max(0, this.autoKillResetMs - elapsed), totalMs: this.autoKillResetMs };
+    return {
+      remainingMs: Math.max(0, this.autoKillResetMs - elapsed),
+      totalMs: this.autoKillResetMs
+    };
   }
   /**
    * Subscribe to countdown arm/cancel events. Returns an unsubscribe function.
@@ -1048,6 +1054,7 @@ function utf8Prefix(text, maxBytes) {
 }
 
 // src/_util.ts
+import * as fsp2 from "node:fs/promises";
 import * as path3 from "node:path";
 import * as Core from "@wrongstack/core/utils";
 async function detectPackageManager(cwd, stopAt) {
@@ -1114,6 +1121,40 @@ function ensureInsideRoot(absPath, ctx) {
 function safeResolve(input, ctx) {
   return ensureInsideRoot(resolvePath(input, ctx), ctx);
 }
+async function resolveRealInsideRoot(absPath, ctx) {
+  if (ctx.allowOutsideProjectRoot) return absPath;
+  const realRoots = await Promise.all(
+    allowedRoots(ctx).map((r) => fsp2.realpath(r).catch(() => path3.resolve(r)))
+  );
+  let probe = absPath;
+  const pendingTail = [];
+  for (; ; ) {
+    let real;
+    try {
+      real = await fsp2.realpath(probe);
+    } catch (err) {
+      if (err.code === "ENOENT") {
+        const parent = path3.dirname(probe);
+        if (parent === probe) return absPath;
+        pendingTail.unshift(path3.basename(probe));
+        probe = parent;
+        continue;
+      }
+      throw err;
+    }
+    const candidate = pendingTail.length > 0 ? path3.join(real, ...pendingTail) : real;
+    if (isInsideAny(candidate, realRoots)) {
+      return candidate;
+    }
+    throw new Error(
+      `Path "${absPath}" resolves through a symlink outside project root "${realRoots[0]}"`
+    );
+  }
+}
+async function safeResolveReal(input, ctx) {
+  const abs = safeResolve(input, ctx);
+  return await resolveRealInsideRoot(abs, ctx);
+}
 var COMMAND_OUTPUT_MAX_BYTES = 32768;
 var REPEAT_RUN_THRESHOLD = 3;
 function collapseCarriageReturns(text) {
@@ -3905,7 +3946,7 @@ var installTool = {
     return final;
   },
   async *executeStream(input, ctx, opts) {
-    const cwd = input.cwd ? safeResolve(input.cwd, ctx) : ctx.cwd;
+    const cwd = input.cwd ? await safeResolveReal(input.cwd, ctx) : ctx.cwd;
     if (!input.global) {
       const pkgList2 = input.packages ? Array.isArray(input.packages) ? input.packages : input.packages.split(",").map((p) => p.trim()) : [];
       const bridge = await tryLegacyPackageOperation(

package/dist/json.js

@@ -174,8 +174,9 @@ async function resolveRealInsideRoot(absPath, ctx) {
       }
       throw err;
     }
-    if (isInsideAny(real, realRoots)) {
-      return pendingTail.length > 0 ? path.join(real, ...pendingTail) : real;
+    const candidate = pendingTail.length > 0 ? path.join(real, ...pendingTail) : real;
+    if (isInsideAny(candidate, realRoots)) {
+      return candidate;
     }
     throw new Error(
       `Path "${absPath}" resolves through a symlink outside project root "${realRoots[0]}"`
@@ -226,7 +227,10 @@ var jsonTool = {
         description: "Operation (default: parse). parse=read/pretty-print, query=JMESPath, validate=schema, transform=chained queries, merge=deep merge."
       },
       file: { type: "string", description: "Path to JSON/JSON5/YAML file (parse/query/validate)" },
-      data: { type: "string", description: "JSON/JSON5/YAML string (parse/query/validate, alternative to file)" },
+      data: {
+        type: "string",
+        description: "JSON/JSON5/YAML string (parse/query/validate, alternative to file)"
+      },
       format: {
         type: "string",
         enum: ["json", "json5", "yaml"],
@@ -293,7 +297,13 @@ async function executeParse(input, ctx) {
   } else if (input.data) {
     raw = input.data;
   } else {
-    return { data: null, formatted: "", type: "unknown", action: "parse", error: "Provide file or data" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "parse",
+      error: "Provide file or data"
+    };
   }
   try {
     parsed = JSON.parse(raw);
@@ -339,7 +349,13 @@ async function executeParse(input, ctx) {
 }
 async function executeQuery(input, ctx) {
   if (!input.query) {
-    return { data: null, formatted: "", type: "unknown", action: "query", error: "query is required for action: query" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "query",
+      error: "query is required for action: query"
+    };
   }
   let parsed;
   if (input.file) {
@@ -359,10 +375,22 @@ async function executeQuery(input, ctx) {
     try {
       parsed = JSON.parse(input.data);
     } catch {
-      return { data: null, formatted: "", type: "unknown", action: "query", error: "Could not parse data string" };
+      return {
+        data: null,
+        formatted: "",
+        type: "unknown",
+        action: "query",
+        error: "Could not parse data string"
+      };
     }
   } else {
-    return { data: null, formatted: "", type: "unknown", action: "query", error: "Provide file or data" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "query",
+      error: "Provide file or data"
+    };
   }
   try {
     const result = jmespathSearch(parsed, input.query);
@@ -387,7 +415,13 @@ async function executeQuery(input, ctx) {
 }
 async function executeValidate(input, ctx) {
   if (!input.schema) {
-    return { data: null, formatted: "", type: "unknown", action: "validate", error: "schema is required for action: validate" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "validate",
+      error: "schema is required for action: validate"
+    };
   }
   let parsed;
   if (input.file) {
@@ -407,10 +441,22 @@ async function executeValidate(input, ctx) {
     try {
       parsed = JSON.parse(input.data);
     } catch {
-      return { data: null, formatted: "", type: "unknown", action: "validate", error: "Could not parse data string" };
+      return {
+        data: null,
+        formatted: "",
+        type: "unknown",
+        action: "validate",
+        error: "Could not parse data string"
+      };
     }
   } else {
-    return { data: null, formatted: "", type: "unknown", action: "validate", error: "Provide file or data" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "validate",
+      error: "Provide file or data"
+    };
   }
   try {
     const { valid, errors } = validateJsonSchema(parsed, input.schema);
@@ -435,7 +481,13 @@ async function executeValidate(input, ctx) {
 }
 async function executeTransform(input, ctx) {
   if (!input.transforms || input.transforms.length === 0) {
-    return { data: null, formatted: "", type: "unknown", action: "transform", error: "transforms array is required for action: transform" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "transform",
+      error: "transforms array is required for action: transform"
+    };
   }
   let parsed;
   if (input.file) {
@@ -455,10 +507,22 @@ async function executeTransform(input, ctx) {
     try {
       parsed = JSON.parse(input.data);
     } catch {
-      return { data: null, formatted: "", type: "unknown", action: "transform", error: "Could not parse data string" };
+      return {
+        data: null,
+        formatted: "",
+        type: "unknown",
+        action: "transform",
+        error: "Could not parse data string"
+      };
     }
   } else {
-    return { data: null, formatted: "", type: "unknown", action: "transform", error: "Provide file or data" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "transform",
+      error: "Provide file or data"
+    };
   }
   try {
     let current = parsed;
@@ -489,7 +553,13 @@ async function executeTransform(input, ctx) {
 }
 async function executeMerge(input) {
   if (input.base === void 0 || input.patch === void 0) {
-    return { data: null, formatted: "", type: "unknown", action: "merge", error: "base and patch are required for action: merge" };
+    return {
+      data: null,
+      formatted: "",
+      type: "unknown",
+      action: "merge",
+      error: "base and patch are required for action: merge"
+    };
   }
   const conflictResolution = input.conflictResolution ?? "prefer-patch";
   try {
@@ -548,7 +618,9 @@ function jmespathSearch(data, query) {
     if (rest === void 0) return arr;
     return arr.map((item) => jmespathSearch(item, rest));
   }
-  const filterMatch = query.match(/^\[\\?([a-zA-Z_][a-zA-Z0-9_]*)(==|!=|<|>|<=|>=)(`[^`]+`|'[^']*')\](?:\.(.+))?$/);
+  const filterMatch = query.match(
+    /^\[\\?([a-zA-Z_][a-zA-Z0-9_]*)(==|!=|<|>|<=|>=)(`[^`]+`|'[^']*')\](?:\.(.+))?$/
+  );
   if (filterMatch) {
     const field = filterMatch[1];
     const op = filterMatch[2];
@@ -590,10 +662,12 @@ function jmespathSearch(data, query) {
         if (typeof data === "object" && data !== null) return Object.keys(data).length;
         return 0;
       case "keys":
-        if (typeof data === "object" && data !== null && !Array.isArray(data)) return Object.keys(data);
+        if (typeof data === "object" && data !== null && !Array.isArray(data))
+          return Object.keys(data);
         return [];
       case "values":
-        if (typeof data === "object" && data !== null && !Array.isArray(data)) return Object.values(data);
+        if (typeof data === "object" && data !== null && !Array.isArray(data))
+          return Object.values(data);
         return [];
       case "type":
         if (data === null) return "null";

package/dist/kanban-board-actions.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from '@wrongstack/core/agent';
+import type { KanbanToolInput, KanbanToolOutput } from './kanban-tool-types.js';
+export declare function handleKanbanBoardAction(projectRoot: string, input: KanbanToolInput, ctx: Context): Promise<KanbanToolOutput | undefined>;
+//# sourceMappingURL=kanban-board-actions.d.ts.map

package/dist/kanban-lifecycle-actions.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from '@wrongstack/core/agent';
+import type { KanbanToolInput, KanbanToolOutput } from './kanban-tool-types.js';
+export declare function handleKanbanLifecycleAction(projectRoot: string, input: KanbanToolInput, ctx: Context): Promise<KanbanToolOutput | undefined>;
+//# sourceMappingURL=kanban-lifecycle-actions.d.ts.map

package/dist/kanban-serializer.d.ts

@@ -0,0 +1,21 @@
+import type { KanbanToolOutput } from './kanban-tool-types.js';
+/**
+ * How many serialized bytes a `board` may occupy in the transcript before a
+ * mutation result swaps it for a compact summary. Read actions whose purpose
+ * IS the board (`get_board`, exports) always keep the full payload.
+ */
+export declare const KANBAN_BOARD_TRANSCRIPT_BYTE_CAP = 16384;
+/** Actions whose whole point is returning the full board — never trimmed. */
+export declare const KANBAN_FULL_BOARD_ACTIONS: Set<string>;
+/**
+ * Transcript serializer for kanban results. Every mutation returns the full
+ * board so programmatic consumers (todo mirror, gates, tests) can chain off it,
+ * but replaying that board into the LLM transcript on EVERY add_note /
+ * transition_task turns a busy board into thousands of repeated tokens.
+ * When the serialized board exceeds the cap and the action is not a
+ * board-reading one, the transcript payload carries a compact summary
+ * ({column → task count}, totalTasks) plus the affected `task` and `message`.
+ * `execute()`'s return shape is unchanged — this only affects the transcript.
+ */
+export declare function serializeKanbanOutput(output: KanbanToolOutput, input: unknown): string;
+//# sourceMappingURL=kanban-serializer.d.ts.map