@wrongstack/tools 0.309.0 → 0.310.0

package/dist/search.js

@@ -421,10 +421,14 @@ function parseDuckDuckGo(html, num) {
   }
   return results;
 }
+function escapeRegex(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
 function getHtmlAttr(attrs, name) {
-  const quoted = new RegExp(`\\b${name}\\s*=\\s*(["'])(.*?)\\1`, "i").exec(attrs);
+  const escaped = escapeRegex(name);
+  const quoted = new RegExp(`\\b${escaped}\\s*=\\s*(["'])(.*?)\\1`, "i").exec(attrs);
   if (quoted?.[2]) return decodeHtmlEntities(quoted[2]);
-  const unquoted = new RegExp(`\\b${name}\\s*=\\s*([^\\s>]+)`, "i").exec(attrs);
+  const unquoted = new RegExp(`\\b${escaped}\\s*=\\s*([^\\s>]+)`, "i").exec(attrs);
   return unquoted?.[1] ? decodeHtmlEntities(unquoted[1]) : void 0;
 }
 function normalizeDuckDuckGoUrl(raw) {

package/dist/session-kanban.js

@@ -293,24 +293,32 @@ function applyManagedKanbanBoardToTodos(context, board, suppressedTodoMirrors2,
 async function applySessionKanbanTaskToSource(context, task, suppressedTodoMirrors2, options = {}) {
   const originId = task.origin?.taskId;
   const graphId = task.origin?.graphId ?? "";
-  if (!originId) return { source: null };
-  if (task.origin?.system === "session-todo" || graphId.startsWith("todo:")) {
-    const mappedStatus = todoStatus(task);
-    const next = options.remove ? context.todos.filter((todo) => todo.id !== originId) : context.todos.map(
-      (todo) => todo.id === originId ? {
-        ...todo,
-        content: task.title,
-        status: mappedStatus
-      } : todo
-    );
-    suppressedTodoMirrors2.add(context);
-    try {
-      context.state.replaceTodos(next);
-    } finally {
-      suppressedTodoMirrors2.delete(context);
+  const isTodoOrigin = task.origin?.system === "session-todo" || graphId.startsWith("todo:");
+  const targetTodo = context.todos?.find(
+    (todo) => originId !== void 0 && todo.id === originId || todo.kanbanTaskId === task.id || todo.id === task.id && !todo.promotedFromPlan && !todo.promotedFromTask
+  );
+  if (isTodoOrigin || targetTodo) {
+    const matchedId = targetTodo?.id ?? originId;
+    if (matchedId) {
+      const mappedStatus = todoStatus(task);
+      const next = options.remove ? context.todos.filter((todo) => todo.id !== matchedId) : context.todos.map(
+        (todo) => todo.id === matchedId ? {
+          ...todo,
+          content: task.title,
+          status: mappedStatus,
+          kanbanTaskId: task.id
+        } : todo
+      );
+      suppressedTodoMirrors2.add(context);
+      try {
+        context.state.replaceTodos(next);
+      } finally {
+        suppressedTodoMirrors2.delete(context);
+      }
+      return { source: "todo", todos: [...context.todos] };
     }
-    return { source: "todo", todos: [...context.todos] };
   }
+  if (!originId) return { source: null };
   const id = context.session?.id ?? "";
   if (task.origin?.system === "session-plan" || graphId.startsWith("plan:")) {
     const planPath = context.meta["plan.path"];

package/dist/task.js

@@ -234,6 +234,81 @@ function applyManagedKanbanBoardToTodos(context, board, suppressedTodoMirrors2,
   broadcastTodoUpdate(context, context.todos);
   return [...context.todos];
 }
+async function applySessionKanbanTaskToSource(context, task, suppressedTodoMirrors2, options = {}) {
+  const originId = task.origin?.taskId;
+  const graphId = task.origin?.graphId ?? "";
+  const isTodoOrigin = task.origin?.system === "session-todo" || graphId.startsWith("todo:");
+  const targetTodo = context.todos?.find(
+    (todo) => originId !== void 0 && todo.id === originId || todo.kanbanTaskId === task.id || todo.id === task.id && !todo.promotedFromPlan && !todo.promotedFromTask
+  );
+  if (isTodoOrigin || targetTodo) {
+    const matchedId = targetTodo?.id ?? originId;
+    if (matchedId) {
+      const mappedStatus = todoStatus(task);
+      const next = options.remove ? context.todos.filter((todo) => todo.id !== matchedId) : context.todos.map(
+        (todo) => todo.id === matchedId ? {
+          ...todo,
+          content: task.title,
+          status: mappedStatus,
+          kanbanTaskId: task.id
+        } : todo
+      );
+      suppressedTodoMirrors2.add(context);
+      try {
+        context.state.replaceTodos(next);
+      } finally {
+        suppressedTodoMirrors2.delete(context);
+      }
+      return { source: "todo", todos: [...context.todos] };
+    }
+  }
+  if (!originId) return { source: null };
+  const id = context.session?.id ?? "";
+  if (task.origin?.system === "session-plan" || graphId.startsWith("plan:")) {
+    const planPath = context.meta["plan.path"];
+    if (typeof planPath !== "string" || !planPath) {
+      throw new Error(
+        "Cannot reflect this Kanban edit back to its plan source: the session has no plan.path configured. The board mutation already succeeded; the plan file is now out of sync."
+      );
+    }
+    const plan = await mutatePlan(planPath, id, (file) => ({
+      ...file,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      items: options.remove ? file.items.filter((item) => item.id !== originId) : file.items.map(
+        (item) => item.id === originId ? {
+          ...item,
+          title: task.title,
+          details: task.description,
+          status: task.status === "completed" ? "done" : task.status === "in_progress" || task.status === "review" ? "in_progress" : "open",
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        } : item
+      )
+    }));
+    return { source: "plan", plan };
+  }
+  if (task.origin?.system === "session-task" || task.origin?.system === "session" || graphId.startsWith("session:")) {
+    const taskPath = context.meta["task.path"];
+    if (typeof taskPath !== "string" || !taskPath) {
+      throw new Error(
+        "Cannot reflect this Kanban edit back to its task source: the session has no task.path configured. The board mutation already succeeded; the task file is now out of sync."
+      );
+    }
+    const tasks = await mutateTasks(taskPath, id, (file) => ({
+      ...file,
+      tasks: options.remove ? file.tasks.filter((item) => item.id !== originId) : file.tasks.map(
+        (item) => item.id === originId ? {
+          ...item,
+          title: task.title,
+          description: task.description,
+          status: sourceStatus(task),
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        } : item
+      )
+    }));
+    return { source: "task", tasks };
+  }
+  return { source: null };
+}
 
 // src/session-kanban.ts
 var SESSION_BOARD_TAG = "session-work";
@@ -477,6 +552,9 @@ function applyManagedKanbanBoardToTodos2(context, board) {
     sessionOwnerFromTags: sessionIdFromTags
   });
 }
+function applySessionKanbanTaskToSource2(context, task, options = {}) {
+  return applySessionKanbanTaskToSource(context, task, suppressedTodoMirrors, options);
+}
 
 // src/todo.ts
 import {
@@ -1453,12 +1531,20 @@ function assignmentForTaskCreate(input) {
 }
 
 // src/kanban-lifecycle-actions.ts
+async function syncContextTask(ctx, task, options = {}) {
+  if (!ctx?.state || !task) return;
+  try {
+    await applySessionKanbanTaskToSource2(ctx, task, options);
+  } catch {
+  }
+}
 async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
   switch (input.action) {
     case "add_task": {
       if (!input.boardId || !input.title) return fail("add_task requires boardId and title.");
       const result = await addTask2(projectRoot, input.boardId, taskInput(input));
       if (!result) return fail("Board not found.");
+      await syncContextTask(ctx, result.task);
       return okTask(result.board, result.task, `Task added.${atomicityNudge(result.task)}`);
     }
     case "split_task": {
@@ -1603,6 +1689,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         );
       }
       ctx.setCurrentKanbanTask(task.id, board.id);
+      await syncContextTask(ctx, task);
       return okTask(
         board,
         task,
@@ -1612,6 +1699,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
     case "update_task": {
       if (!input.boardId || !input.taskId) return fail("update_task requires boardId and taskId.");
       const board = await updateTask2(projectRoot, input.boardId, input.taskId, taskPatch(input));
+      if (board) {
+        await syncContextTask(ctx, board.tasks.find((t) => t.id === input.taskId));
+      }
       return board ? okBoard(board, "Task updated.") : fail("Task not found.");
     }
     case "transition_task": {
@@ -1651,6 +1741,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
       if (result && input.lifecycleStage === "done" && result.task.verificationReport) {
         recordKanbanVerificationEvidence(ctx, result.task.verificationReport);
       }
+      if (result?.task) {
+        await syncContextTask(ctx, result.task);
+      }
       return result ? okTask(result.board, result.task, `Task advanced to ${result.transition.to}.`) : fail("Board or task not found.");
     }
     case "repair_managed_projection": {
@@ -1663,6 +1756,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         actor: input.author,
         comment: input.transitionComment
       });
+      if (result?.task) {
+        await syncContextTask(ctx, result.task);
+      }
       return result ? okTask(
         result.board,
         result.task,
@@ -1680,14 +1776,22 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         input.targetColumnId,
         input.order
       );
+      if (board) {
+        await syncContextTask(ctx, board.tasks.find((t) => t.id === input.taskId));
+      }
       return board ? okBoard(board, "Task moved.") : fail("Move failed.");
     }
     case "delete_task": {
       if (!input.boardId || !input.taskId) return fail("delete_task requires boardId and taskId.");
+      const boardBefore = await getBoard4(projectRoot, input.boardId);
+      const taskToDelete = boardBefore?.tasks.find((t) => t.id === input.taskId);
       const board = await removeTask(projectRoot, input.boardId, input.taskId);
       if (board && ctx.currentKanbanTaskId === input.taskId) {
         ctx.setCurrentKanbanTask?.(void 0, ctx.currentKanbanBoardId);
       }
+      if (board && taskToDelete) {
+        await syncContextTask(ctx, taskToDelete, { remove: true });
+      }
       return board ? okBoard(board, "Task deleted.") : fail("Task not found.");
     }
     case "set_chain": {
@@ -1794,6 +1898,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
             issues: finalized.gate.issues.map((issue) => issue.message)
           };
           const gateMessage = finalized.gate.allowed ? `Completion gate ${finalized.gate.verdict === "skipped" ? "passed" : "passed"}; task completed.` : finalized.gate.enforcement === "strict" ? `Completion gate BLOCKED (verdict: ${finalized.gate.verdict}); task parked in review. Issues: ${gateSummary.issues.join(" | ")}` : `Completion gate failed softly (verdict: ${finalized.gate.verdict}); task completed with warnings. Issues: ${gateSummary.issues.join(" | ")}`;
+          await syncContextTask(ctx, finalized.task);
           return {
             ...okTask(finalized.board, finalized.task, `Assignment updated. ${gateMessage}`),
             gate: gateSummary
@@ -1899,6 +2004,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
           msgParts.push(`Card advanced to ${transitionResult.transition.to}.`);
         }
         for (const w of lifecycleWarnings) msgParts.push(`Warning: ${w}`);
+        await syncContextTask(ctx, responseTask);
         return okTask(responseBoard, responseTask, msgParts.join(" "));
       }
       return okBoard(board, "Assignment updated.");

package/dist/test.js

@@ -141,12 +141,12 @@ function resolveWin32Command(cmd) {
   }
   return cmd;
 }
-var WIN32_SHELL_META = /[&|<>"\r\n\0]/;
+var WIN32_SHELL_META = /[&|<>"%\r\n\0]/;
 function assertSafeWin32ShellArgs(args) {
   for (const arg of args) {
     if (typeof arg === "string" && WIN32_SHELL_META.test(arg)) {
       throw new Error(
-        'win32 cmd shim spawn: argument contains a shell metacharacter (one of & | < > ", or a newline) that could enable command injection through the .cmd/.bat wrapper - refusing to run. Offending argument: ' + JSON.stringify(arg)
+        'win32 cmd shim spawn: argument contains a shell metacharacter (one of & | < > " %, or a newline) that could enable command injection through the .cmd/.bat wrapper - refusing to run. Offending argument: ' + JSON.stringify(arg)
       );
     }
   }
@@ -377,7 +377,7 @@ var SENSITIVE_FLAG_PATTERNS = [
   // redaction function. Synced with core copy.
   /(?<![-\w])-(?:password|p|a)(?:[=\s]+)?[^\s,-]+/gi,
   // env var–style secrets: TOKEN=x, API_KEY=y, etc.
-  /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD)\s*[=:]\s*[^\s,]+/gi,
+  /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD|PASSPHRASE)\s*[=:]\s*[^\s,]+/gi,
   // Generic high-entropy look: base64 strings >32 chars or hex strings >32 digits — but only
   // when preceded by a flag name (e.g. --github-token=EyJ...). Global flag so
   // every such flag in the command line is redacted, not just the first.

package/dist/todo.js

@@ -383,6 +383,81 @@ function applyManagedKanbanBoardToTodos(context, board, suppressedTodoMirrors2,
   broadcastTodoUpdate(context, context.todos);
   return [...context.todos];
 }
+async function applySessionKanbanTaskToSource(context, task, suppressedTodoMirrors2, options = {}) {
+  const originId = task.origin?.taskId;
+  const graphId = task.origin?.graphId ?? "";
+  const isTodoOrigin = task.origin?.system === "session-todo" || graphId.startsWith("todo:");
+  const targetTodo = context.todos?.find(
+    (todo) => originId !== void 0 && todo.id === originId || todo.kanbanTaskId === task.id || todo.id === task.id && !todo.promotedFromPlan && !todo.promotedFromTask
+  );
+  if (isTodoOrigin || targetTodo) {
+    const matchedId = targetTodo?.id ?? originId;
+    if (matchedId) {
+      const mappedStatus = todoStatus(task);
+      const next = options.remove ? context.todos.filter((todo) => todo.id !== matchedId) : context.todos.map(
+        (todo) => todo.id === matchedId ? {
+          ...todo,
+          content: task.title,
+          status: mappedStatus,
+          kanbanTaskId: task.id
+        } : todo
+      );
+      suppressedTodoMirrors2.add(context);
+      try {
+        context.state.replaceTodos(next);
+      } finally {
+        suppressedTodoMirrors2.delete(context);
+      }
+      return { source: "todo", todos: [...context.todos] };
+    }
+  }
+  if (!originId) return { source: null };
+  const id = context.session?.id ?? "";
+  if (task.origin?.system === "session-plan" || graphId.startsWith("plan:")) {
+    const planPath = context.meta["plan.path"];
+    if (typeof planPath !== "string" || !planPath) {
+      throw new Error(
+        "Cannot reflect this Kanban edit back to its plan source: the session has no plan.path configured. The board mutation already succeeded; the plan file is now out of sync."
+      );
+    }
+    const plan = await mutatePlan(planPath, id, (file) => ({
+      ...file,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      items: options.remove ? file.items.filter((item) => item.id !== originId) : file.items.map(
+        (item) => item.id === originId ? {
+          ...item,
+          title: task.title,
+          details: task.description,
+          status: task.status === "completed" ? "done" : task.status === "in_progress" || task.status === "review" ? "in_progress" : "open",
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        } : item
+      )
+    }));
+    return { source: "plan", plan };
+  }
+  if (task.origin?.system === "session-task" || task.origin?.system === "session" || graphId.startsWith("session:")) {
+    const taskPath = context.meta["task.path"];
+    if (typeof taskPath !== "string" || !taskPath) {
+      throw new Error(
+        "Cannot reflect this Kanban edit back to its task source: the session has no task.path configured. The board mutation already succeeded; the task file is now out of sync."
+      );
+    }
+    const tasks = await mutateTasks(taskPath, id, (file) => ({
+      ...file,
+      tasks: options.remove ? file.tasks.filter((item) => item.id !== originId) : file.tasks.map(
+        (item) => item.id === originId ? {
+          ...item,
+          title: task.title,
+          description: task.description,
+          status: sourceStatus(task),
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        } : item
+      )
+    }));
+    return { source: "task", tasks };
+  }
+  return { source: null };
+}
 
 // src/session-kanban.ts
 var SESSION_BOARD_TAG = "session-work";
@@ -618,6 +693,9 @@ function applyManagedKanbanBoardToTodos2(context, board) {
     sessionOwnerFromTags: sessionIdFromTags
   });
 }
+function applySessionKanbanTaskToSource2(context, task, options = {}) {
+  return applySessionKanbanTaskToSource(context, task, suppressedTodoMirrors, options);
+}
 
 // src/kanban-board-actions.ts
 async function handleKanbanBoardAction(projectRoot, input, ctx) {
@@ -1440,12 +1518,20 @@ function assignmentForTaskCreate(input) {
 }
 
 // src/kanban-lifecycle-actions.ts
+async function syncContextTask(ctx, task, options = {}) {
+  if (!ctx?.state || !task) return;
+  try {
+    await applySessionKanbanTaskToSource2(ctx, task, options);
+  } catch {
+  }
+}
 async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
   switch (input.action) {
     case "add_task": {
       if (!input.boardId || !input.title) return fail("add_task requires boardId and title.");
       const result = await addTask2(projectRoot, input.boardId, taskInput(input));
       if (!result) return fail("Board not found.");
+      await syncContextTask(ctx, result.task);
       return okTask(result.board, result.task, `Task added.${atomicityNudge(result.task)}`);
     }
     case "split_task": {
@@ -1590,6 +1676,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         );
       }
       ctx.setCurrentKanbanTask(task.id, board.id);
+      await syncContextTask(ctx, task);
       return okTask(
         board,
         task,
@@ -1599,6 +1686,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
     case "update_task": {
       if (!input.boardId || !input.taskId) return fail("update_task requires boardId and taskId.");
       const board = await updateTask2(projectRoot, input.boardId, input.taskId, taskPatch(input));
+      if (board) {
+        await syncContextTask(ctx, board.tasks.find((t) => t.id === input.taskId));
+      }
       return board ? okBoard(board, "Task updated.") : fail("Task not found.");
     }
     case "transition_task": {
@@ -1638,6 +1728,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
       if (result && input.lifecycleStage === "done" && result.task.verificationReport) {
         recordKanbanVerificationEvidence(ctx, result.task.verificationReport);
       }
+      if (result?.task) {
+        await syncContextTask(ctx, result.task);
+      }
       return result ? okTask(result.board, result.task, `Task advanced to ${result.transition.to}.`) : fail("Board or task not found.");
     }
     case "repair_managed_projection": {
@@ -1650,6 +1743,9 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         actor: input.author,
         comment: input.transitionComment
       });
+      if (result?.task) {
+        await syncContextTask(ctx, result.task);
+      }
       return result ? okTask(
         result.board,
         result.task,
@@ -1667,14 +1763,22 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
         input.targetColumnId,
         input.order
       );
+      if (board) {
+        await syncContextTask(ctx, board.tasks.find((t) => t.id === input.taskId));
+      }
       return board ? okBoard(board, "Task moved.") : fail("Move failed.");
     }
     case "delete_task": {
       if (!input.boardId || !input.taskId) return fail("delete_task requires boardId and taskId.");
+      const boardBefore = await getBoard4(projectRoot, input.boardId);
+      const taskToDelete = boardBefore?.tasks.find((t) => t.id === input.taskId);
       const board = await removeTask(projectRoot, input.boardId, input.taskId);
       if (board && ctx.currentKanbanTaskId === input.taskId) {
         ctx.setCurrentKanbanTask?.(void 0, ctx.currentKanbanBoardId);
       }
+      if (board && taskToDelete) {
+        await syncContextTask(ctx, taskToDelete, { remove: true });
+      }
       return board ? okBoard(board, "Task deleted.") : fail("Task not found.");
     }
     case "set_chain": {
@@ -1781,6 +1885,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
             issues: finalized.gate.issues.map((issue) => issue.message)
           };
           const gateMessage = finalized.gate.allowed ? `Completion gate ${finalized.gate.verdict === "skipped" ? "passed" : "passed"}; task completed.` : finalized.gate.enforcement === "strict" ? `Completion gate BLOCKED (verdict: ${finalized.gate.verdict}); task parked in review. Issues: ${gateSummary.issues.join(" | ")}` : `Completion gate failed softly (verdict: ${finalized.gate.verdict}); task completed with warnings. Issues: ${gateSummary.issues.join(" | ")}`;
+          await syncContextTask(ctx, finalized.task);
           return {
             ...okTask(finalized.board, finalized.task, `Assignment updated. ${gateMessage}`),
             gate: gateSummary
@@ -1886,6 +1991,7 @@ async function handleKanbanLifecycleAction(projectRoot, input, ctx) {
           msgParts.push(`Card advanced to ${transitionResult.transition.to}.`);
         }
         for (const w of lifecycleWarnings) msgParts.push(`Warning: ${w}`);
+        await syncContextTask(ctx, responseTask);
         return okTask(responseBoard, responseTask, msgParts.join(" "));
       }
       return okBoard(board, "Assignment updated.");

package/dist/tool-tier.d.ts

@@ -1,5 +1,16 @@
 import type { ToolRegistry } from '@wrongstack/core/registry';
 import type { ConcreteTokenSavingTier, Tool } from '@wrongstack/core/types';
+/**
+ * Live count of tools each concrete token-saving tier exposes to the provider.
+ * This is the runtime source of truth — `off` counts every registered tool,
+ * the other tiers count the result of `selectBuiltinToolsForTier(tier, …)`.
+ *
+ * Website (`website/src/pages/ToolsPage.tsx`) and any other consumer that
+ * wants to render tier counts without actually loading the catalog should
+ * mirror this map. When `TIER1_TOOLS` / `TIER2_TOOLS` / `TIER3_TOOLS` change,
+ * regenerate these numbers from a smoke test (or update both together).
+ */
+export declare const BUILTIN_TIER_COUNTS: Readonly<Record<ConcreteTokenSavingTier, number>>;
 /**
  * Select built-in tools for a concrete token-saving tier while preserving the
  * order and instances supplied by the caller.