@wrongstack/tools 0.319.0 → 0.320.1

package/dist/{chunk-X5K3U6GI.js → chunk-3M7LLN7W.js}

@@ -1,13 +1,20 @@
 import {
   todoTool
-} from "./chunk-5ZYEGP2P.js";
+} from "./chunk-BK732J7I.js";
 import {
   mirrorSessionTasksToKanban
-} from "./chunk-CWALNI6K.js";
+} from "./chunk-X6KXNHUO.js";
 
 // src/task.ts
 import { randomUUID } from "node:crypto";
-import { addPlanItem, formatPlan, mutatePlan, mutateTasks } from "@wrongstack/core/storage";
+import {
+  addPlanItem,
+  formatPlan,
+  loadTasks,
+  mutatePlan,
+  mutateTasks
+} from "@wrongstack/core/storage";
+import { ToolValidationError } from "@wrongstack/core/types";
 import { computeTaskItemProgress, formatTaskList } from "@wrongstack/core/utils";
 function findTaskIndex(tasks, query) {
   const asNum = Number.parseInt(query, 10);
@@ -119,8 +126,34 @@ var taskTool = {
     },
     required: ["action"]
   },
-  async execute(input, ctx) {
-    const sessionTaskPath = ctx.meta["task.path"];
+  async execute(input, ctx, _opts) {
+    const signal = _opts?.signal ?? ctx?.signal;
+    signal?.throwIfAborted();
+    const VALID_ACTIONS = /* @__PURE__ */ new Set([
+      "replace",
+      "add",
+      "status",
+      "show",
+      "promote",
+      "planify"
+    ]);
+    if (!input?.action || !VALID_ACTIONS.has(input.action)) {
+      return {
+        ok: false,
+        message: `Unknown action "${input?.action}". Use replace | add | status | show | promote | planify.`,
+        count: 0,
+        completed: 0,
+        inProgress: 0
+      };
+    }
+    if (input.scope !== void 0 && input.scope !== "session" && input.scope !== "project") {
+      throw new ToolValidationError({
+        message: `task: invalid scope "${input.scope}". Allowed: session, project`,
+        field: "scope"
+      });
+    }
+    const meta = ctx.meta ??= {};
+    const sessionTaskPath = meta["task.path"];
     let taskPath;
     if (input.scope === "project") {
       if (typeof sessionTaskPath === "string") {
@@ -143,6 +176,19 @@ var taskTool = {
       };
     }
     const sessionId = ctx.session?.id ?? "unknown";
+    if (input.action === "show") {
+      meta["task.path.resolved"] = taskPath;
+      const file2 = await loadTasks(taskPath) ?? { version: 1, tasks: [] };
+      const p2 = computeTaskItemProgress(file2.tasks);
+      const summary2 = file2.tasks.length > 0 ? formatTaskList(file2.tasks) : "No tasks.";
+      return {
+        ok: true,
+        message: summary2,
+        count: file2.tasks.length,
+        completed: p2.completed,
+        inProgress: p2.inProgress
+      };
+    }
     let early = null;
     const promoteMeta = { count: 0, title: "" };
     const planifyMeta = { title: "", details: "" };
@@ -198,6 +244,7 @@ var taskTool = {
               };
               return f;
             }
+            const taskStatusById = new Map(input.tasks.map((t) => [t.id, t.status]));
             for (const t of input.tasks) {
               if (t.dependsOn && t.dependsOn.length > 0) {
                 const missing = t.dependsOn.filter((d) => !newIds.has(d));
@@ -214,7 +261,7 @@ var taskTool = {
               }
               if (t.status === "in_progress" || t.status === "completed") {
                 const unmet = (t.dependsOn ?? []).filter(
-                  (dependencyId) => input.tasks?.find((candidate) => candidate.id === dependencyId)?.status !== "completed"
+                  (dependencyId) => taskStatusById.get(dependencyId) !== "completed"
                 );
                 if (unmet.length > 0) {
                   early = {
@@ -280,6 +327,14 @@ var taskTool = {
             break;
           }
           case "status": {
+            const VALID_TASK_STATUSES = /* @__PURE__ */ new Set([
+              "pending",
+              "in_progress",
+              "blocked",
+              "failed",
+              "review",
+              "completed"
+            ]);
             if (!input.id || !input.status) {
               early = {
                 ok: false,
@@ -290,6 +345,15 @@ var taskTool = {
               };
               return f;
             }
+            if (!VALID_TASK_STATUSES.has(input.status)) {
+              early = {
+                ok: false,
+                message: `action=status requires valid status ('pending' | 'in_progress' | 'blocked' | 'failed' | 'review' | 'completed'), got "${input.status}".`,
+                count: f.tasks.length,
+                ...computeTaskItemProgress(f.tasks)
+              };
+              return f;
+            }
             const task = f.tasks.find((t) => t.id === input.id);
             if (!task) {
               early = {
@@ -517,4 +581,4 @@ ${formatTaskList(file.tasks)}` : file.tasks.length > 0 ? formatTaskList(file.tas
 export {
   taskTool
 };
-//# sourceMappingURL=chunk-X5K3U6GI.js.map
+//# sourceMappingURL=chunk-3M7LLN7W.js.map

package/dist/{chunk-VALQFAY2.js → chunk-4BABEJC2.js}

@@ -1,6 +1,6 @@
 import {
   e2ePlanTool
-} from "./chunk-DPKTXJQS.js";
+} from "./chunk-VPALDFYM.js";
 import {
   codebaseAstReplaceTool,
   codebaseImpactAnalysisTool,
@@ -14,16 +14,16 @@ import {
   codebaseStatsTool,
   codebaseTargetedTestTool,
   deadCodeScanTool
-} from "./chunk-RK47IWO3.js";
+} from "./chunk-LRDIRJJL.js";
 import {
   planTool
-} from "./chunk-H6AWAZ2Y.js";
+} from "./chunk-B4HTSV6Z.js";
 import {
   taskTool
-} from "./chunk-X5K3U6GI.js";
+} from "./chunk-3M7LLN7W.js";
 import {
   toolSearchTool
-} from "./chunk-RJZQWEMS.js";
+} from "./chunk-T77XOX7E.js";
 import {
   toolUseTool
 } from "./chunk-FRN7TIAA.js";
@@ -35,119 +35,119 @@ import {
 } from "./chunk-QBV725YG.js";
 import {
   designTool
-} from "./chunk-6RNIFLG4.js";
+} from "./chunk-ELRRTWNP.js";
 import {
   testTool
-} from "./chunk-Y7QXSE7N.js";
+} from "./chunk-YTKSNTT4.js";
 import {
   installTool
-} from "./chunk-4Q7LFU4T.js";
+} from "./chunk-WAQASTXB.js";
 import {
   auditTool
-} from "./chunk-QZDOQRF7.js";
+} from "./chunk-UZFY3CKD.js";
 import {
   outdatedTool
-} from "./chunk-Z4VBTVUM.js";
+} from "./chunk-DFQDJT22.js";
 import {
   logsTool
-} from "./chunk-YZHK4TLF.js";
+} from "./chunk-FQNXYA6W.js";
 import {
   documentTool
-} from "./chunk-HBM4QNXU.js";
+} from "./chunk-IU4DV2PA.js";
 import {
   scaffoldTool
-} from "./chunk-2472NT76.js";
+} from "./chunk-2OXHS3KZ.js";
 import {
   gitTool
-} from "./chunk-UMXVT7ST.js";
+} from "./chunk-6AAOT4PW.js";
 import {
   patchTool
-} from "./chunk-COUNXG4X.js";
+} from "./chunk-JLYA4X7K.js";
 import {
   jsonTool
-} from "./chunk-D4CXUZIF.js";
+} from "./chunk-VD2LV5WO.js";
 import {
   diffTool
-} from "./chunk-7WV3D4S3.js";
+} from "./chunk-34VLZ35Z.js";
 import {
   treeTool
-} from "./chunk-HWDB2G7J.js";
+} from "./chunk-W232EFEM.js";
 import {
   lintTool
-} from "./chunk-ZKSBHXVB.js";
+} from "./chunk-KWXIKGE3.js";
 import {
   formatTool
-} from "./chunk-ODFVG54U.js";
+} from "./chunk-J74TMK4M.js";
 import {
   typecheckTool
-} from "./chunk-VFF3Q5Z3.js";
+} from "./chunk-QSNVDHOZ.js";
 import {
   languageInfoTool,
   languagePackageTool,
   languageTool
-} from "./chunk-UC3RKRIV.js";
+} from "./chunk-NDIT3SBZ.js";
 import {
   replaceTool
-} from "./chunk-OYVPBPCL.js";
+} from "./chunk-HR67OWEP.js";
 import {
   globTool
-} from "./chunk-OJ4FIBAN.js";
+} from "./chunk-ZMW6WJFT.js";
 import {
   grepTool
-} from "./chunk-N5O3FK5Q.js";
+} from "./chunk-XSSFBS5I.js";
 import {
   bashTool,
   checkAndBlockKillCommand,
   diagnoseBashism,
   shellArgs
-} from "./chunk-WNUJR3H4.js";
+} from "./chunk-5UFVCIUB.js";
 import {
   detectDanger,
   execTool
-} from "./chunk-PMHVSHMU.js";
+} from "./chunk-OTPTQBYE.js";
 import {
   buildChildEnv
 } from "./chunk-BTSFTGIL.js";
 import {
   createOutputSpool,
   spoolNote
-} from "./chunk-2VSZC6QM.js";
+} from "./chunk-SCMRM6NL.js";
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-ESLPBT5A.js";
 import {
   fetchTool
-} from "./chunk-KD5EHYA2.js";
+} from "./chunk-C2DQKVLO.js";
 import {
   searchTool
-} from "./chunk-PQTONQ4P.js";
+} from "./chunk-QPNYDH5B.js";
 import {
   todoTool
-} from "./chunk-5ZYEGP2P.js";
+} from "./chunk-BK732J7I.js";
 import {
   kanbanTool
-} from "./chunk-FJEQZHZN.js";
+} from "./chunk-W2CECGTG.js";
 import {
   browserTools
-} from "./chunk-45JPRMC2.js";
+} from "./chunk-QWKSKFKZ.js";
 import {
   readTool
-} from "./chunk-C3W3V54D.js";
+} from "./chunk-NSPNFOJ7.js";
 import {
   writeTool
-} from "./chunk-MYRMD6PZ.js";
+} from "./chunk-3GIKYHLA.js";
 import {
   editTool
-} from "./chunk-PRXZOIEW.js";
+} from "./chunk-Z6IHMJMC.js";
 import {
   resolvePowerShell
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   normalizeCommandOutput,
   safeResolveProjectPath,
   safeResolveReal
-} from "./chunk-QLF74MSV.js";
+} from "./chunk-ZUFHAHTE.js";
 
 // src/clarify.ts
 import { toErrorMessage } from "@wrongstack/core/utils";
@@ -193,8 +193,10 @@ var clarifyTool = {
     required: ["question", "options"],
     additionalProperties: false
   },
-  async execute(input, ctx) {
+  async execute(input, ctx, opts) {
     try {
+      const signal = opts?.signal ?? ctx?.signal;
+      signal?.throwIfAborted();
       const options = input.options;
       if (!options || options.length < 2) {
         throw new Error("clarify requires at least 2 distinct options.");
@@ -238,6 +240,7 @@ import {
   emitProcessOutput,
   emitProcessStarted
 } from "@wrongstack/core/observability";
+import { ToolValidationError } from "@wrongstack/core/types";
 var MAX_OUTPUT = 32768;
 var DEFAULT_TIMEOUT_MS = 3e5;
 var STREAM_FLUSH_INTERVAL_MS = 200;
@@ -383,8 +386,38 @@ var pwshTool = {
     if (!final) throw new Error("pwsh: stream ended without final event");
     return final;
   },
+  async cleanup(_input, ctx) {
+    const registry = getProcessRegistry();
+    const sessionId = ctx.session?.id;
+    if (!sessionId) return;
+    for (const entry of registry.bySession(sessionId)) {
+      if (entry.name !== "pwsh") continue;
+      if (entry.child && entry.child.exitCode !== null) continue;
+      if (entry.protected) continue;
+      registry.kill(entry.pid, { force: true });
+    }
+  },
   async *executeStream(input, ctx, opts) {
-    if (!input?.command) throw new Error("pwsh: command is required");
+    if (!input?.command || typeof input.command !== "string" || !input.command.trim()) {
+      throw new ToolValidationError({
+        message: "pwsh: command is required and cannot be empty",
+        field: "command"
+      });
+    }
+    const callerSignal = opts?.signal ?? ctx?.signal ?? new AbortController().signal;
+    if (callerSignal.aborted) {
+      yield {
+        type: "final",
+        output: {
+          output: "",
+          exit_code: 124,
+          timed_out: false,
+          pid: null,
+          error: "Aborted"
+        }
+      };
+      return;
+    }
     const isBackground = !!(input.run_in_background || input.background);
     const registry = getProcessRegistry();
     if (!registry.beforeCall(isBackground)) {
@@ -438,7 +471,6 @@ var pwshTool = {
       return;
     }
     const startedAt = Date.now();
-    const callerSignal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
     const detached = !isWin;
     if (isBackground) {
       const child2 = spawn(bin, args, {
@@ -546,7 +578,8 @@ Working directory: ${targetCwd}`,
         processGroupLeader: detached && child.pid === pid
       });
     }
-    const timeoutMs = Math.min(Math.max(1e3, input.timeout_ms ?? DEFAULT_TIMEOUT_MS), 6e5);
+    const rawTimeout = typeof input.timeout_ms === "number" && !Number.isNaN(input.timeout_ms) ? input.timeout_ms : DEFAULT_TIMEOUT_MS;
+    const timeoutMs = Math.min(Math.max(1e3, rawTimeout), 6e5);
     let timedOut = false;
     const timers = [];
     const killWithTimeout = (timeout) => {
@@ -1018,6 +1051,78 @@ var setWorkingDirTool = {
 };
 
 // src/builtin.ts
+var BUILTIN_TOOL_DESCRIPTIONS = {
+  browser_open: "Create an isolated, agent-owned Playwright browser session, optionally opening an approved HTTP(S) URL. Use it to begin browser QA; private and localhost origins require an explicit allowlist.",
+  browser_list: "List browser sessions owned by this agent, including their state and current page, without exposing sessions owned by other agents.",
+  browser_status: "Check whether the managed Playwright Chromium installation is available before attempting browser automation.",
+  browser_navigate: "Navigate one of this agent\u2019s browser sessions to an approved HTTP(S) URL. Use browser_open first; private and localhost origins require an explicit allowlist.",
+  browser_snapshot: "Inspect the current page through a bounded accessibility snapshot, with redacted console and network summaries. Prefer this before interacting with page elements.",
+  browser_screenshot: "Capture a PNG of the current page or a selected element for visual QA. The result is a sensitive artifact with integrity metadata.",
+  browser_type: "Fill a form control in an owned browser session. Use secretEnv for credentials so secret values never enter tool arguments or the audit trail.",
+  browser_click: "Click a verified page element in an owned browser session. Snapshot first and use the most specific stable selector available.",
+  browser_hover: "Hover over a verified page element in an owned browser session to reveal menus, tooltips, or other hover-driven UI state.",
+  browser_select: "Choose an option in a select control in an owned browser session after confirming the target selector and intended value.",
+  browser_press: "Send a keyboard key or shortcut to an owned browser session, such as Enter after verifying a form is ready to submit.",
+  browser_drag: "Drag one page element onto another in an owned browser session. Use only when the page\u2019s drag-and-drop interaction is the intended action.",
+  browser_wait: "Wait for a selector, navigation condition, or bounded duration in an owned browser session before taking the next browser action.",
+  browser_evaluate: "Run a bounded JavaScript expression in an owned page when browser APIs cannot inspect the needed state. Treat page code as arbitrary and use sparingly.",
+  browser_upload: "Upload project-local files through a page file input in an owned browser session. Verify both the file path and target control before uploading.",
+  browser_close: "Close an owned browser session and reclaim its resources, returning trace-artifact metadata when tracing was enabled.",
+  e2e_plan: "Create an end-to-end test plan from a feature or user flow. Use it to identify scenarios and acceptance coverage; it plans tests rather than executing them.",
+  read: "Read a project file safely, with optional line ranges and binary-aware output. Use it to inspect source before editing; paths must stay within the project.",
+  write: "Create or replace one project file with the complete supplied content. Use for new files or intentional full rewrites, after reading existing content when applicable.",
+  edit: "Make a precise, guarded text edit by replacing an expected block in a project file. Prefer it for small source changes so mismatches prevent accidental overwrites.",
+  clarify: "Record or ask a focused clarification when a missing decision would materially change the implementation. Do not use it for questions that can be answered from the repository.",
+  "codebase-ast-replace": "Replace a named declaration using source-aware structure instead of fragile text matching. Use it for a function, method, class, interface, or variable when the target is unambiguous.",
+  "codebase-invariant-check": "Compare candidate code with its original source and report structural invariants that may have changed. Use before writing a risky refactor; it validates but does not modify files.",
+  "codebase-stats": "Report codebase-index health, indexed file and symbol counts, languages, and freshness. Use it before relying on indexed discovery results.",
+  "codebase-search": "Search indexed symbols, signatures, and documentation with optional language, kind, path, or LSP-kind filters. Use it for semantic discovery before broad text search.",
+  "codebase-skeleton": "Extract a compact structural skeleton from a source file or directory, preserving declarations while omitting implementation detail. Use it to understand unfamiliar code quickly.",
+  "codebase-repo-map": "Generate a concise map of important files, symbols, and relationships in a project area. Use it for orientation before a cross-file change.",
+  "codebase-impact-analysis": "Find likely callers, dependents, related tests, and change risk for a named symbol. Use it before changing a public or widely used declaration.",
+  "codebase-targeted-test": "Discover and run tests that cover a specified symbol, source file, or explicit test files. Use it for focused regression validation after a change.",
+  "security-ast-scan": "Statically scan source code for supported security patterns and return findings with locations. Use it as a focused code check, not as a substitute for a full security assessment.",
+  "codebase-incoming-calls": "Find indexed call sites that invoke a named function, method, or type, optionally scoped to a file. Use it to estimate breakage before changing an API.",
+  "codebase-outgoing-calls": "Find indexed symbols called by a named function, method, or type, optionally scoped to a file. Use it to understand dependencies before refactoring behavior.",
+  "codebase-index": "Build or refresh the local semantic codebase index, optionally for selected languages. Use it when index results are absent or stale; force performs a full reindex.",
+  "dead-code-scan": "Analyze the indexed project for declarations that appear unreachable from configured entry points. Treat results as candidates for review, not automatic deletion instructions.",
+  replace: "Preview or apply a regular-expression replacement across selected project files. Start with dry_run, constrain files and globs carefully, then apply only reviewed changes.",
+  glob: "Find project files by glob pattern, respecting repository boundaries and ignore rules. Use it to locate candidate paths before reading or editing them.",
+  grep: "Search project text with a bounded regular expression and contextual matches. Use it for exact literals or patterns when semantic codebase search is not appropriate.",
+  bash: "Run a shell command in the project with bounded output and timeout controls. Use it for development commands after checking side effects; background mode returns a process handle.",
+  exec: "Execute a command directly without shell interpretation, using explicit program arguments. Prefer it when argument safety and predictable process invocation matter.",
+  pwsh: "Execute a PowerShell command in the project with timeout, output, and background controls. Use it for Windows-native project operations and verify commands that can modify state.",
+  fetch: "Fetch and extract content from an approved HTTP(S) URL for research or integration work. Use it for a known page or endpoint, not for general web discovery.",
+  search: "Search the public web for current external information, then inspect selected results with fetch. Use it when repository evidence is insufficient or the fact may have changed.",
+  todo: "Create, update, or list the session\u2019s concrete work items and their progress. Use it to keep multi-step work visible; it does not implement the tasks itself.",
+  plan: "Create and manage higher-level plan-board items, priorities, and status. Use it for strategic work tracking rather than small immediate edits.",
+  kanban: "Manage project Kanban boards, cards, assignments, and acceptance evidence. Use it for persistent team workflow; changing board state is intentional and reviewable.",
+  task: "Manage structured task records, dependencies, ownership, and promotion into actionable session work. Use it to organize bounded work before delegation or execution.",
+  git: "Inspect or run scoped Git operations in the project, including status, diff, history, branches, and commits. Review the target and working tree before mutating operations.",
+  patch: "Apply a unified diff to project files with patch-style context checking. Use it for a reviewed multi-file change when exact patch content is available.",
+  json: "Read, query, validate, or update JSON files while preserving valid structure. Use it instead of raw text edits when changing structured JSON data.",
+  diff: "Compare two files, revisions, or text inputs and return a readable unified diff. Use it to review intended changes before applying or committing them.",
+  tree: "Render a bounded directory tree with depth, file, hidden-file, and ignore controls. Use it for repository orientation without reading every file.",
+  lint: "Run the project\u2019s configured linter for a target path or working directory and return diagnostics. Use it after code edits to catch style and static-analysis issues.",
+  format: "Run the project\u2019s configured formatter on selected files or directories. Use it after editing code, while reviewing the resulting diff for unintended formatting scope.",
+  typecheck: "Run TypeScript type checking for an auto-detected or specified tsconfig. Use it after type-affecting changes; it reports diagnostics without writing source files.",
+  test: "Run the detected test runner for selected tests, with optional name filtering, coverage, watch, and timeout controls. Prefer focused tests first, then broader validation as needed.",
+  language_info: "Inspect detected language tooling, workspaces, and supported operations for the project or target path. Use it before invoking language-specific tooling.",
+  language: "Run a supported language-tooling operation in a detected workspace. Use it when the language profile provides a safer, structured alternative to an arbitrary shell command.",
+  language_package: "Plan or perform a dependency operation through the detected package ecosystem. Use dry-run first when possible and specify the workspace or dependency scope deliberately.",
+  install: "Install project dependencies with the detected package manager. Use only when dependency changes are required, and inspect lockfile and manifest changes afterward.",
+  audit: "Run the package manager\u2019s dependency vulnerability audit and summarize actionable findings. Use it to assess known dependency advisories, not source-code vulnerabilities.",
+  outdated: "List outdated project dependencies and available versions without changing manifests or lockfiles. Use it to plan dependency maintenance.",
+  logs: "Read or tail configured local, container, or process logs with bounded output. Use it to investigate a known runtime failure or service behavior.",
+  document: "Generate or update project documentation from supplied scope and source context. Use it to record verified behavior; review generated text before treating it as authoritative.",
+  scaffold: "Preview or generate files from a built-in or custom scaffold template. Use dry_run first to inspect paths and content before creating project files.",
+  design: "Create a structured implementation design with goals, constraints, approach, and risks. Use it before a substantial change that needs an explicit technical decision.",
+  tool_search: "Discover registered tools by name, description, tag, permission, or mutating status. Use it to find a lazy capability before calling it through tool-use.",
+  tool_use: "Invoke a registered tool by name with its input object, including a tool discovered lazily. Use it only after confirming the target tool\u2019s schema and side effects.",
+  batch_tool_use: "Invoke several independent registered tools as a batch and return each result. Use it for parallel read-only discovery; avoid batching dependent or destructive operations.",
+  tool_help: "Show a tool\u2019s purpose, input schema, permission, and examples, or summarize the catalog. Use it before invoking an unfamiliar or lazily discovered tool.",
+  set_working_dir: "Show or change the session working directory within the permitted project scope. Use it when subsequent commands must target another project subdirectory."
+};
 var OPTIONAL_TOOLS = [
   ...browserTools,
   e2ePlanTool,
@@ -1093,7 +1198,7 @@ var TIER3_TOOLS = [
   toolHelpTool,
   setWorkingDirTool
 ];
-var builtinTools = [
+var rawBuiltinTools = [
   ...browserTools,
   e2ePlanTool,
   readTool,
@@ -1150,6 +1255,13 @@ var builtinTools = [
   toolHelpTool,
   setWorkingDirTool
 ];
+var builtinTools = rawBuiltinTools.map((tool) => {
+  const description = BUILTIN_TOOL_DESCRIPTIONS[tool.name];
+  if (!description) {
+    throw new Error(`Missing provider-facing description for built-in tool: ${tool.name}`);
+  }
+  return { ...tool, description };
+});
 
 export {
   clarifyTool,
@@ -1157,6 +1269,7 @@ export {
   pwshTool,
   analyzeSecurityAndPerformance,
   securityAstScanTool,
+  BUILTIN_TOOL_DESCRIPTIONS,
   OPTIONAL_TOOLS,
   OFF_ONLY_TOOLS,
   TIER1_TOOLS,
@@ -1164,4 +1277,4 @@ export {
   TIER3_TOOLS,
   builtinTools
 };
-//# sourceMappingURL=chunk-VALQFAY2.js.map
+//# sourceMappingURL=chunk-4BABEJC2.js.map

package/dist/{chunk-42BHI7TN.js → chunk-4CQWNZ62.js}

@@ -1,6 +1,6 @@
 import {
   getPersistentProcessRegistry
-} from "./chunk-NKNOBUBU.js";
+} from "./chunk-QGF2C7TF.js";
 
 // src/ps-slash.ts
 import * as os from "node:os";
@@ -334,4 +334,4 @@ export {
   formatInstanceSummary,
   createGlobalPsSlashCommand
 };
-//# sourceMappingURL=chunk-42BHI7TN.js.map
+//# sourceMappingURL=chunk-4CQWNZ62.js.map

package/dist/{chunk-WNUJR3H4.js → chunk-5UFVCIUB.js}

@@ -3,21 +3,21 @@ import {
 } from "./chunk-BTSFTGIL.js";
 import {
   getPersistentProcessRegistry
-} from "./chunk-NKNOBUBU.js";
+} from "./chunk-QGF2C7TF.js";
 import {
   createOutputSpool,
   spoolNote
-} from "./chunk-2VSZC6QM.js";
+} from "./chunk-SCMRM6NL.js";
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-ESLPBT5A.js";
 import {
   resolvePowerShell
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   normalizeCommandOutput
-} from "./chunk-QLF74MSV.js";
+} from "./chunk-ZUFHAHTE.js";
 
 // src/bash.ts
 import { spawn } from "node:child_process";
@@ -28,6 +28,7 @@ import {
   emitProcessOutput,
   emitProcessStarted
 } from "@wrongstack/core/observability";
+import { ToolValidationError } from "@wrongstack/core/types";
 
 // src/_shell-pick.ts
 var POSIX_DEFAULT = "cmd";
@@ -539,7 +540,12 @@ var bashTool = {
     return final;
   },
   async *executeStream(input, ctx, opts) {
-    if (!input?.command) throw new Error("bash: command is required");
+    if (!input?.command || typeof input.command !== "string" || !input.command.trim()) {
+      throw new ToolValidationError({
+        message: "bash: command is required and cannot be empty",
+        field: "command"
+      });
+    }
     const registry = getProcessRegistry();
     const bypassBreaker = !!input.background;
     if (!registry.beforeCall(bypassBreaker)) {
@@ -571,7 +577,8 @@ var bashTool = {
     }
     const PIPE_TO_SHELL_PATTERN = /\|\s*(sh|bash|ksh|zsh|fish|cmd|powershell|pwsh)/i;
     const pipeToShellNote = PIPE_TO_SHELL_PATTERN.test(input.command) ? "\n\n[wrongstack] Caution: this command pipes output into a shell interpreter (pipe-to-shell). Piped content executes as arbitrary code \u2014 review the source before trusting the result, and prefer downloading to a file and inspecting it first." : "";
-    const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT_MS, 6e5));
+    const rawTimeout = typeof input.timeout_ms === "number" && !Number.isNaN(input.timeout_ms) ? input.timeout_ms : DEFAULT_TIMEOUT_MS;
+    const timeoutMs = Math.max(1, Math.min(rawTimeout, 6e5));
     const isWin2 = os2.platform() === "win32";
     let plan;
     let winShellKind;
@@ -605,6 +612,18 @@ var bashTool = {
     const env = buildChildEnv(ctx.session?.id);
     const spawnCwd = ctx.workingDir ?? ctx.projectRoot;
     const callerSignal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
+    if (callerSignal.aborted) {
+      yield {
+        type: "final",
+        output: {
+          output: "Aborted",
+          exit_code: 124,
+          timed_out: true,
+          pid: null
+        }
+      };
+      return;
+    }
     const detached = !isWin2;
     const startedAt = Date.now();
     if (input.background) {
@@ -829,13 +848,15 @@ var bashTool = {
       if (stream === "stdout") stdoutBytes += chunk.byteLength;
       else stderrBytes += chunk.byteLength;
       emitProcessOutput({ pid, stream, chunk });
-      if (buf.length < MAX_OUTPUT) {
-        buf += text.slice(0, MAX_OUTPUT - buf.length);
+      if (text.length > 0) {
+        if (buf.length < MAX_OUTPUT) {
+          buf += text.slice(0, MAX_OUTPUT - buf.length);
+        }
+        spool.write(text);
+        pending += text;
+        push({ kind: "data", text });
+        pauseIfFlooded();
       }
-      spool.write(text);
-      pending += text;
-      push({ kind: "data", text });
-      pauseIfFlooded();
     };
     const onStdoutData = (chunk) => onData(chunk, "stdout");
     const onStderrData = (chunk) => onData(chunk, "stderr");
@@ -872,14 +893,17 @@ var bashTool = {
           }
           const spooled = spool.finalize();
           const hint = !timedOut && typeof c.code === "number" && c.code !== 0 && winShellKind ? diagnoseBashism(input.command, winShellKind) : void 0;
+          const isAborted = callerSignal.aborted;
           yield {
             type: "final",
             output: {
               output: normalizeCommandOutput(buf) + (spooled ? spoolNote(spooled) : "") + (hint ? `
 
 ${hint}` : "") + pipeToShellNote,
-              exit_code: c.code,
-              timed_out: timedOut
+              exit_code: timedOut || isAborted ? 124 : c.code,
+              timed_out: timedOut || isAborted,
+              pid: pid ?? null,
+              error: isAborted ? "Command aborted by user or signal" : void 0
             }
           };
           ctx.recordSideEffect?.({
@@ -953,4 +977,4 @@ export {
   checkAndBlockKillCommand,
   bashTool
 };
-//# sourceMappingURL=chunk-WNUJR3H4.js.map
+//# sourceMappingURL=chunk-5UFVCIUB.js.map