@wrongstack/tools 0.319.1 → 1.0.0

package/dist/{chunk-OTINMOKK.js → chunk-AB2CAUOP.js}

@@ -1,6 +1,6 @@
 import {
   e2ePlanTool
-} from "./chunk-VPALDFYM.js";
+} from "./chunk-RV7BVTDG.js";
 import {
   codebaseAstReplaceTool,
   codebaseImpactAnalysisTool,
@@ -14,135 +14,135 @@ import {
   codebaseStatsTool,
   codebaseTargetedTestTool,
   deadCodeScanTool
-} from "./chunk-RTZWBNTY.js";
+} from "./chunk-YEISRT4S.js";
 import {
   planTool
-} from "./chunk-B4HTSV6Z.js";
+} from "./chunk-5KS24LTS.js";
 import {
   taskTool
-} from "./chunk-3M7LLN7W.js";
+} from "./chunk-LQSOU63Z.js";
 import {
   toolSearchTool
-} from "./chunk-RJZQWEMS.js";
+} from "./chunk-24T5XIJU.js";
 import {
   toolUseTool
-} from "./chunk-FRN7TIAA.js";
+} from "./chunk-B3MGJBFI.js";
 import {
   batchToolUseTool
-} from "./chunk-WXJY3BKV.js";
+} from "./chunk-VBF2YXUW.js";
 import {
   toolHelpTool
-} from "./chunk-QBV725YG.js";
+} from "./chunk-7ODZTPCU.js";
 import {
   designTool
-} from "./chunk-ELRRTWNP.js";
+} from "./chunk-IXIS7RSG.js";
 import {
   testTool
-} from "./chunk-UQQS3VNT.js";
+} from "./chunk-QA6IASYX.js";
 import {
   installTool
-} from "./chunk-RLMX75EM.js";
+} from "./chunk-O6BY43ZB.js";
 import {
   auditTool
-} from "./chunk-64VIJPFV.js";
+} from "./chunk-WEEVSWQB.js";
 import {
   outdatedTool
-} from "./chunk-IYKXK356.js";
+} from "./chunk-6GOZTS6F.js";
 import {
   logsTool
-} from "./chunk-FQNXYA6W.js";
+} from "./chunk-VU3QBYL4.js";
 import {
   documentTool
-} from "./chunk-IU4DV2PA.js";
+} from "./chunk-CHEK3ASV.js";
 import {
   scaffoldTool
-} from "./chunk-2OXHS3KZ.js";
+} from "./chunk-KLJZ4WV4.js";
 import {
   gitTool
-} from "./chunk-6AAOT4PW.js";
+} from "./chunk-AQ5YBURX.js";
 import {
   patchTool
-} from "./chunk-IWS56OY7.js";
+} from "./chunk-CGXTR34H.js";
 import {
   jsonTool
-} from "./chunk-VD2LV5WO.js";
+} from "./chunk-VZGPASGD.js";
 import {
   diffTool
-} from "./chunk-OG2BEUBY.js";
+} from "./chunk-7HL23T3T.js";
 import {
   treeTool
-} from "./chunk-MNP3GE7H.js";
+} from "./chunk-JDOO4P6Z.js";
 import {
   lintTool
-} from "./chunk-LOBRWKCR.js";
+} from "./chunk-3D5DJWOE.js";
 import {
   formatTool
-} from "./chunk-EADULOZV.js";
+} from "./chunk-NJX2RXKJ.js";
 import {
   typecheckTool
-} from "./chunk-5EUJF3WC.js";
+} from "./chunk-4WPBS45A.js";
 import {
   languageInfoTool,
   languagePackageTool,
   languageTool
-} from "./chunk-TTZOK6IY.js";
+} from "./chunk-7N5U2RAU.js";
 import {
   replaceTool
-} from "./chunk-X5FOFGXX.js";
+} from "./chunk-IYH4OHBP.js";
 import {
   globTool
-} from "./chunk-JDPQOR7C.js";
+} from "./chunk-ASEXQRA7.js";
 import {
   grepTool
-} from "./chunk-YOKD4GWJ.js";
+} from "./chunk-4ERMPDHV.js";
 import {
   bashTool,
   checkAndBlockKillCommand,
   diagnoseBashism,
   shellArgs
-} from "./chunk-AKHYMB4V.js";
+} from "./chunk-NN2SNP2R.js";
 import {
   detectDanger,
   execTool
-} from "./chunk-BSJSNVGA.js";
+} from "./chunk-KDEXUQY7.js";
 import {
   buildChildEnv
 } from "./chunk-BTSFTGIL.js";
 import {
   createOutputSpool,
   spoolNote
-} from "./chunk-2VSZC6QM.js";
+} from "./chunk-SCMRM6NL.js";
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-HDYUBRMF.js";
 import {
   fetchTool
-} from "./chunk-C2DQKVLO.js";
+} from "./chunk-MJSJWXBF.js";
 import {
   searchTool
-} from "./chunk-QPNYDH5B.js";
+} from "./chunk-62OAECEQ.js";
 import {
   todoTool
-} from "./chunk-BK732J7I.js";
+} from "./chunk-FBUP524S.js";
 import {
   kanbanTool
-} from "./chunk-W2CECGTG.js";
+} from "./chunk-SMARDKAC.js";
 import {
   browserTools
-} from "./chunk-45JPRMC2.js";
+} from "./chunk-SOR7OCYP.js";
 import {
   readTool
-} from "./chunk-RNWUCZ2U.js";
+} from "./chunk-MK2JK35J.js";
 import {
   writeTool
-} from "./chunk-O44IMQCN.js";
+} from "./chunk-GKSG5CPH.js";
 import {
   editTool
-} from "./chunk-CFLJFDYV.js";
+} from "./chunk-DK4J2WMH.js";
 import {
   resolvePowerShell
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   normalizeCommandOutput,
   safeResolveProjectPath,
@@ -204,12 +204,13 @@ var clarifyTool = {
       const hostAsk = ctx.askUserChoices;
       if (typeof hostAsk === "function") {
         const res = await hostAsk(input.question, options, input.isMultiSelect);
+        const selected = Array.isArray(res?.selected) ? res.selected : [];
         return {
           status: "answered",
           question: input.question,
-          selectedOptions: res.selected,
-          customResponse: res.custom,
-          decisionSummary: `User selected: ${res.selected.join(", ")}${res.custom ? ` (Custom: ${res.custom})` : ""}`
+          selectedOptions: selected,
+          customResponse: res?.custom,
+          decisionSummary: `User selected: ${selected.join(", ")}${res?.custom ? ` (Custom: ${res.custom})` : ""}`
         };
       }
       const defaultChoice = input.recommendedOption ?? options[0] ?? "Default";
@@ -746,13 +747,15 @@ ${hint}` : "") + cautionText;
             outcome: timedOut ? `timed out (exit ${c.code})` : `exit ${c.code}`,
             risk: "shell"
           });
+          const isAborted = callerSignal.aborted;
           yield {
             type: "final",
             output: {
               output: finalResultText,
-              exit_code: timedOut ? 1 : c.code,
-              timed_out: timedOut,
-              pid
+              exit_code: timedOut || isAborted ? 124 : c.code,
+              timed_out: timedOut || isAborted,
+              pid: pid ?? null,
+              ...timedOut ? { error: "Command timed out" } : isAborted ? { error: "Command aborted by user or signal" } : {}
             }
           };
           return;
@@ -765,6 +768,7 @@ ${hint}` : "") + cautionText;
       }
     } finally {
       for (const t of timers) clearTimeout(t);
+      callerSignal.removeEventListener("abort", onAbort);
     }
   }
 };
@@ -1034,8 +1038,13 @@ var setWorkingDirTool = {
     }
     if (!isDirectory) {
       try {
-        ctx.setWorkingDir(previous);
+        if (typeof previous === "string") {
+          ctx.setWorkingDir(previous);
+        } else {
+          ctx.workingDir = previous;
+        }
       } catch {
+        ctx.workingDir = previous;
       }
       return {
         current: ctx.workingDir,
@@ -1078,7 +1087,7 @@ var BUILTIN_TOOL_DESCRIPTIONS = {
   "codebase-stats": "Report codebase-index health, indexed file and symbol counts, languages, and freshness. Use it before relying on indexed discovery results.",
   "codebase-search": "Search indexed symbols, signatures, and documentation with optional language, kind, path, or LSP-kind filters. Use it for semantic discovery before broad text search.",
   "codebase-skeleton": "Extract a compact structural skeleton from a source file or directory, preserving declarations while omitting implementation detail. Use it to understand unfamiliar code quickly.",
-  "codebase-repo-map": "Generate a concise map of important files, symbols, and relationships in a project area. Use it for orientation before a cross-file change.",
+  "codebase-repo-map": "Generate a reference-weighted, token-budgeted Repository Map of the codebase within ~1200 tokens by default. Use at the beginning of complex tasks or when navigating unfamiliar repositories to get a bird-eye view of the architecture.",
   "codebase-impact-analysis": "Find likely callers, dependents, related tests, and change risk for a named symbol. Use it before changing a public or widely used declaration.",
   "codebase-targeted-test": "Discover and run tests that cover a specified symbol, source file, or explicit test files. Use it for focused regression validation after a change.",
   "security-ast-scan": "Statically scan source code for supported security patterns and return findings with locations. Use it as a focused code check, not as a substitute for a full security assessment.",
@@ -1100,8 +1109,8 @@ var BUILTIN_TOOL_DESCRIPTIONS = {
   task: "Manage structured task records, dependencies, ownership, and promotion into actionable session work. Use it to organize bounded work before delegation or execution.",
   git: "Inspect or run scoped Git operations in the project, including status, diff, history, branches, and commits. Review the target and working tree before mutating operations.",
   patch: "Apply a unified diff to project files with patch-style context checking. Use it for a reviewed multi-file change when exact patch content is available.",
-  json: "Read, query, validate, or update JSON files while preserving valid structure. Use it instead of raw text edits when changing structured JSON data.",
-  diff: "Compare two files, revisions, or text inputs and return a readable unified diff. Use it to review intended changes before applying or committing them.",
+  json: "Read, query, validate, or merge JSON/JSON5/YAML files while preserving valid structure (read-only \u2014 does not write). Use it instead of raw text edits when reading or querying structured data.",
+  diff: "Show file content with line numbers, staged/working-tree diffs via git, or commit/branch diffs. A safer and more structured alternative to raw `git diff` via shell.",
   tree: "Render a bounded directory tree with depth, file, hidden-file, and ignore controls. Use it for repository orientation without reading every file.",
   lint: "Run the project\u2019s configured linter for a target path or working directory and return diagnostics. Use it after code edits to catch style and static-analysis issues.",
   format: "Run the project\u2019s configured formatter on selected files or directories. Use it after editing code, while reviewing the resulting diff for unintended formatting scope.",
@@ -1114,9 +1123,9 @@ var BUILTIN_TOOL_DESCRIPTIONS = {
   audit: "Run the package manager\u2019s dependency vulnerability audit and summarize actionable findings. Use it to assess known dependency advisories, not source-code vulnerabilities.",
   outdated: "List outdated project dependencies and available versions without changing manifests or lockfiles. Use it to plan dependency maintenance.",
   logs: "Read or tail configured local, container, or process logs with bounded output. Use it to investigate a known runtime failure or service behavior.",
-  document: "Generate or update project documentation from supplied scope and source context. Use it to record verified behavior; review generated text before treating it as authoritative.",
-  scaffold: "Preview or generate files from a built-in or custom scaffold template. Use dry_run first to inspect paths and content before creating project files.",
-  design: "Create a structured implementation design with goals, constraints, approach, and risks. Use it before a substantial change that needs an explicit technical decision.",
+  document: "List undocumented symbols as read-only candidates; this deprecated preview stub does not generate docstrings or write files. Use the auto-doc plugin when it is enabled.",
+  scaffold: "Preview or generate files from a built-in or custom scaffold template. Writes files to disk unless dry_run is set. Use dry_run first to inspect paths and content before creating project files.",
+  design: "Choose, preview, or materialize a UI design kit (e.g. minimal-clarity, neo-brutalist) for the active stack. Lists available kits, previews tokens, or writes a design-token source file to the project.",
   tool_search: "Discover registered tools by name, description, tag, permission, or mutating status. Use it to find a lazy capability before calling it through tool-use.",
   tool_use: "Invoke a registered tool by name with its input object, including a tool discovered lazily. Use it only after confirming the target tool\u2019s schema and side effects.",
   batch_tool_use: "Invoke several independent registered tools as a batch and return each result. Use it for parallel read-only discovery; avoid batching dependent or destructive operations.",
@@ -1266,9 +1275,11 @@ var builtinTools = rawBuiltinTools.map((tool) => {
 export {
   clarifyTool,
   PWSH_TOOL_DESCRIPTION,
+  PWSH_TOOL_USAGE_HINT,
   pwshTool,
   analyzeSecurityAndPerformance,
   securityAstScanTool,
+  setWorkingDirTool,
   BUILTIN_TOOL_DESCRIPTIONS,
   OPTIONAL_TOOLS,
   OFF_ONLY_TOOLS,
@@ -1277,4 +1288,4 @@ export {
   TIER3_TOOLS,
   builtinTools
 };
-//# sourceMappingURL=chunk-OTINMOKK.js.map
+//# sourceMappingURL=chunk-AB2CAUOP.js.map

package/dist/{chunk-6AAOT4PW.js → chunk-AQ5YBURX.js}

@@ -103,6 +103,12 @@ var gitTool = {
         field: "command"
       });
     }
+    if (input.limit !== void 0 && (typeof input.limit !== "number" || !Number.isFinite(input.limit) || input.limit <= 0)) {
+      throw new ToolValidationError({
+        message: "git: limit must be a positive integer",
+        field: "limit"
+      });
+    }
     if (input.command === "commit" && !input.message) {
       return {
         command: "commit",
@@ -214,7 +220,8 @@ function findGitDir(cwd, projectRoot) {
 function buildArgs(input) {
   const rawLimit = typeof input.limit === "number" && Number.isFinite(input.limit) && input.limit > 0 ? Math.floor(input.limit) : 20;
   const limit = Math.max(1, rawLimit);
-  const files = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).map((s) => s.trim().replace(/\\/g, "/")).filter(Boolean) : [];
+  const rawFiles = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).filter((s) => typeof s === "string").map((s) => s.trim().replace(/\\/g, "/")).filter(Boolean) : [];
+  const files = [...new Set(rawFiles)];
   switch (input.command) {
     case "status":
       return ["status", ...files.length ? ["--", ...files] : []];
@@ -247,9 +254,14 @@ function buildArgs(input) {
     case "stash":
       return input.message ? ["stash", "push", "-m", input.message] : ["stash", "push"];
     case "push":
-      return ["push"];
+      return [
+        "push",
+        ...input.dry_run ? ["--dry-run"] : [],
+        ...input.force ? ["--force"] : [],
+        ...input.branch ? ["origin", input.branch] : []
+      ];
     case "pull":
-      return ["pull"];
+      return ["pull", ...input.branch ? ["origin", input.branch] : []];
     case "fetch":
       return ["fetch", ...input.branch ? [input.branch] : ["--all"]];
     case "reset":
@@ -361,4 +373,4 @@ function runGit(args, cwd, signal) {
 export {
   gitTool
 };
-//# sourceMappingURL=chunk-6AAOT4PW.js.map
+//# sourceMappingURL=chunk-AQ5YBURX.js.map

package/dist/{chunk-JDPQOR7C.js → chunk-ASEXQRA7.js}

@@ -1,9 +1,9 @@
 import {
   mapWithConcurrency
-} from "./chunk-NWZ6XGBJ.js";
+} from "./chunk-ZBMANLYH.js";
 import {
   loadGitignoreMatcher
-} from "./chunk-DTQ75VBC.js";
+} from "./chunk-2CTZW6JQ.js";
 import {
   assertRealInsideRoot,
   safeResolveReal
@@ -71,18 +71,28 @@ var globTool = {
     const visitedRealDirs = /* @__PURE__ */ new Set();
     let truncated = false;
     const pushResult = async (full) => {
-      if (signal?.aborted || truncated || results.length >= limit) {
+      if (signal?.aborted) {
         truncated = true;
         return;
       }
       try {
         const st = await fs.stat(full);
-        if (truncated || results.length >= limit) {
+        if (signal?.aborted) {
           truncated = true;
           return;
         }
-        results.push({ rel: full, mtime: st.mtimeMs });
-        if (results.length >= limit) truncated = true;
+        if (results.length < limit) {
+          results.push({ rel: full, mtime: st.mtimeMs });
+          return;
+        }
+        truncated = true;
+        let oldestIndex = 0;
+        for (let i = 1; i < results.length; i++) {
+          if (results[i].mtime < results[oldestIndex].mtime) oldestIndex = i;
+        }
+        if (st.mtimeMs > results[oldestIndex].mtime) {
+          results[oldestIndex] = { rel: full, mtime: st.mtimeMs };
+        }
       } catch {
       }
     };
@@ -94,10 +104,6 @@ var globTool = {
       const realDir = await fs.realpath(dir).catch(() => dir);
       if (visitedRealDirs.has(realDir)) return;
       visitedRealDirs.add(realDir);
-      if (results.length >= limit) {
-        truncated = true;
-        return;
-      }
       let entries;
       try {
         entries = await fs.readdir(dir, { withFileTypes: true });
@@ -138,16 +144,10 @@ var globTool = {
           } catch {
           }
         }
-        if (truncated) return;
+        if (signal?.aborted) return;
       }
       await mapWithConcurrency(matchedFiles, WALK_CONCURRENCY, pushResult);
-      if (truncated) return;
-      const remainingSubdirs = truncated ? [] : subdirs;
-      await mapWithConcurrency(
-        remainingSubdirs,
-        WALK_CONCURRENCY,
-        ({ full, rel }) => walk(full, rel)
-      );
+      await mapWithConcurrency(subdirs, WALK_CONCURRENCY, ({ full, rel }) => walk(full, rel));
     };
     await walk(base, "");
     results.sort((a, b) => b.mtime - a.mtime);
@@ -158,4 +158,4 @@ var globTool = {
 export {
   globTool
 };
-//# sourceMappingURL=chunk-JDPQOR7C.js.map
+//# sourceMappingURL=chunk-ASEXQRA7.js.map

package/dist/{chunk-FRN7TIAA.js → chunk-B3MGJBFI.js}

@@ -96,4 +96,4 @@ var toolUseTool = {
 export {
   toolUseTool
 };
-//# sourceMappingURL=chunk-FRN7TIAA.js.map
+//# sourceMappingURL=chunk-B3MGJBFI.js.map

package/dist/{chunk-IWS56OY7.js → chunk-CGXTR34H.js}

@@ -1,6 +1,6 @@
 import {
   enqueueReindex
-} from "./chunk-DP6CXMJZ.js";
+} from "./chunk-ZTCJCYLN.js";
 import {
   resolveRealInsideRoot,
   safeResolveReal,
@@ -42,6 +42,21 @@ var patchTool = {
     },
     required: ["patch"]
   },
+  // VULN-001 Phase 2: the permission layer's input-key heuristic cannot see
+  // destinations encoded in the diff body, so the confirm prompt keyed on
+  // `directory` (".") while the patch wrote elsewhere. Declares the stripped
+  // relative destinations; execute()'s realpath containment above remains
+  // the authority on whether they are allowed.
+  writeTargets(input) {
+    if (!input?.patch || typeof input.patch !== "string" || !input.patch.trim()) return [];
+    const strip = typeof input.strip === "number" && Number.isFinite(input.strip) && input.strip >= 0 ? Math.floor(input.strip) : 1;
+    const out = /* @__PURE__ */ new Set();
+    for (const target of extractDiffTargets(input.patch)) {
+      const stripped = stripPathComponents(target.raw, strip);
+      if (stripped) out.add(stripped);
+    }
+    return [...out];
+  },
   async execute(input, ctx, opts) {
     if (!input?.patch || typeof input.patch !== "string" || !input.patch.trim()) {
       throw new ToolValidationError({
@@ -51,6 +66,12 @@ var patchTool = {
     }
     const signal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
     signal.throwIfAborted();
+    if (input.strip !== void 0 && (typeof input.strip !== "number" || !Number.isFinite(input.strip) || input.strip < 0)) {
+      throw new ToolValidationError({
+        message: "patch: strip must be a non-negative integer",
+        field: "strip"
+      });
+    }
     const strip = typeof input.strip === "number" && Number.isFinite(input.strip) && input.strip >= 0 ? Math.floor(input.strip) : 1;
     const dryRun = input.dry_run ?? false;
     const refuse = (message) => ({
@@ -68,6 +89,11 @@ var patchTool = {
     }
     const realRoot = await fs.realpath(ctx.projectRoot).catch(() => path.resolve(ctx.projectRoot));
     const targets = extractDiffTargets(input.patch);
+    if (targets.length === 0) {
+      return refuse(
+        "patch refused: no file target could be parsed from the patch (fail-closed containment \u2014 refusing an unparseable diff)"
+      );
+    }
     const resolvedTargets = [];
     for (const t of targets) {
       const stripped = stripPathComponents(t.raw, strip);
@@ -88,6 +114,11 @@ var patchTool = {
       }
       resolvedTargets.push({ raw: t.raw, deleted: t.deleted, abs: real });
     }
+    if (resolvedTargets.length === 0) {
+      return refuse(
+        "patch refused: no file target could be resolved from the patch (fail-closed containment \u2014 target paths stripped to empty)"
+      );
+    }
     const beforeContents = /* @__PURE__ */ new Map();
     const beforeExisted = /* @__PURE__ */ new Set();
     if (!dryRun) {
@@ -160,7 +191,11 @@ var patchTool = {
             message: `patch failed: ${result.stderr || result.stdout}${partial}`
           };
         }
-        const wouldPatch = extractPatchedFiles(result.stdout);
+        const wouldPatch = result.engine === "git" ? [
+          ...new Set(
+            resolvedTargets.map((target) => path.relative(dir, target.abs) || target.abs)
+          )
+        ] : extractPatchedFiles(result.stdout);
         return {
           applied: wouldPatch.length,
           rejected: 1,
@@ -233,6 +268,31 @@ function extractDiffTargets(patch) {
       if (oldLinesLeft <= 0 && newLinesLeft <= 0) inHunk = false;
       continue;
     }
+    if (line.startsWith("diff --git ")) {
+      const rest = line.slice("diff --git ".length);
+      if (rest.startsWith('"')) {
+        const quoted = /^"((?:[^"\\]|\\.)*)"\s+"((?:[^"\\]|\\.)*)"$/.exec(rest);
+        if (quoted) {
+          for (const half of [quoted[1], quoted[2]]) {
+            const p = clean(half);
+            if (p) out.push({ raw: p, deleted: false });
+          }
+        }
+      } else {
+        const bIdx = rest.lastIndexOf(" b/");
+        if (rest.startsWith("a/") && bIdx !== -1) {
+          out.push({ raw: rest.slice(0, bIdx), deleted: false });
+          out.push({ raw: rest.slice(bIdx + 1), deleted: false });
+        }
+      }
+      continue;
+    }
+    const extended = /^(?:rename|copy) (?:from|to) (.+)$/.exec(line);
+    if (extended) {
+      const p = clean(extended[1]);
+      if (p && p !== "/dev/null") out.push({ raw: p, deleted: false });
+      continue;
+    }
     const oldMatch = /^---\s+([^\t\r\n]+)/.exec(line);
     if (oldMatch) {
       lastOld = clean(oldMatch[1]);
@@ -269,7 +329,6 @@ function runPatch(args, cwd, signal, fallback) {
     if (!result.unavailable) return { ...result, engine: "patch" };
     const gitArgs = [
       "apply",
-      "--unsafe-paths",
       `-p${fallback.strip}`,
       "--verbose",
       ...fallback.dryRun ? ["--check"] : [],
@@ -336,4 +395,4 @@ function extractPatchedFiles(output) {
 export {
   patchTool
 };
-//# sourceMappingURL=chunk-IWS56OY7.js.map
+//# sourceMappingURL=chunk-CGXTR34H.js.map

package/dist/{chunk-IU4DV2PA.js → chunk-CHEK3ASV.js}

@@ -29,7 +29,10 @@ var documentTool = {
         description: "Specific file path to document"
       },
       files: {
-        type: "string",
+        oneOf: [
+          { type: "string" },
+          { type: "array", items: { type: "string" } }
+        ],
         description: "File(s) to process: single path, comma-separated list, or glob"
       },
       style: {
@@ -111,7 +114,7 @@ async function resolveFiles(filesInput, cwd, ctx) {
     } catch {
     }
   }
-  return resolved;
+  return [...new Set(resolved)];
 }
 function processFile(content, absPath, _style, _overwrite, target) {
   const results = [];
@@ -177,4 +180,4 @@ function processFile(content, absPath, _style, _overwrite, target) {
 export {
   documentTool
 };
-//# sourceMappingURL=chunk-IU4DV2PA.js.map
+//# sourceMappingURL=chunk-CHEK3ASV.js.map

package/dist/{chunk-GOIZNNOA.js → chunk-DJYLI7EW.js}

@@ -218,4 +218,4 @@ async function walk(root, dir, out) {
 export {
   makeSkillTool
 };
-//# sourceMappingURL=chunk-GOIZNNOA.js.map
+//# sourceMappingURL=chunk-DJYLI7EW.js.map

package/dist/{chunk-CFLJFDYV.js → chunk-DK4J2WMH.js}

@@ -1,9 +1,9 @@
 import {
   checkSyntax
-} from "./chunk-FQZOHLG3.js";
+} from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-DP6CXMJZ.js";
+} from "./chunk-ZTCJCYLN.js";
 import {
   safeResolveReal,
   sha256hex,
@@ -39,6 +39,9 @@ var FUZZY_MIN_SIMILARITY = 0.9;
 var FUZZY_AMBIGUITY_MARGIN = 0.05;
 var FUZZY_MAX_INTERIOR_CHARS = 2e3;
 function findLadderMatches(fileLf, oldLf) {
+  if (typeof fileLf !== "string" || typeof oldLf !== "string" || oldLf.length === 0) {
+    return void 0;
+  }
   const exact = [];
   let idx = fileLf.indexOf(oldLf);
   let currentLine = 1;
@@ -137,6 +140,10 @@ function fuzzyScan(fileLines, needleLines, offsets, includeTrailingNewline = fal
     if (fileTrimmed[i + n - 1] !== lastNeedle) continue;
     const windowInterior = fileTrimmed.slice(i + 1, i + n - 1).join("\n");
     if (windowInterior.length > FUZZY_MAX_INTERIOR_CHARS) continue;
+    const maxLen = Math.max(needleInterior.length, windowInterior.length);
+    if (maxLen > 0 && Math.abs(needleInterior.length - windowInterior.length) / maxLen > 1 - FUZZY_MIN_SIMILARITY) {
+      continue;
+    }
     const score = similarity(needleInterior, windowInterior);
     if (score >= FUZZY_MIN_SIMILARITY) {
       candidates.push({
@@ -163,10 +170,6 @@ function similarity(a, b) {
   if (a === b) return 1;
   const max = Math.max(a.length, b.length);
   if (max === 0) return 1;
-  const lenDiff = Math.abs(a.length - b.length);
-  if (lenDiff / max > 1 - FUZZY_MIN_SIMILARITY) {
-    return 1 - lenDiff / max;
-  }
   return 1 - levenshtein(a, b) / max;
 }
 function levenshtein(a, b) {
@@ -359,7 +362,7 @@ var editTool = {
         field: "path"
       });
     }
-    const autoRead = !ctx.hasRead(absPath);
+    const autoRead = ctx.hasRead ? !ctx.hasRead(absPath) : false;
     const original = await fs.readFile(absPath, "utf8");
     const updated = await fs.stat(absPath);
     const mtimeTolerance = process.platform === "win32" ? 2e3 : 1;
@@ -374,7 +377,7 @@ var editTool = {
         });
       }
     } else {
-      const lastReadMtime = ctx.lastReadMtime(absPath);
+      const lastReadMtime = ctx.lastReadMtime?.(absPath);
       if (lastReadMtime !== void 0 && updated.mtimeMs > lastReadMtime + mtimeTolerance) {
         throw new ToolValidationError({
           message: `edit: file "${input.path}" was modified externally. Re-read it first.`,
@@ -399,7 +402,7 @@ var editTool = {
       if (!fileLf.includes(oldLf)) {
         throw noMatchError(input.path, fileLf, oldLf);
       }
-      if (autoRead) ctx.recordRead(absPath, updated.mtimeMs, "user", originalHash);
+      if (autoRead) ctx.recordRead?.(absPath, updated.mtimeMs, "user", originalHash);
       return {
         path: absPath,
         replacements: 0,
@@ -470,7 +473,7 @@ var editTool = {
     } catch {
     }
     const written = await fs.stat(absPath);
-    ctx.recordRead(absPath, written.mtimeMs, "write", sha256hex(newFile));
+    ctx.recordRead?.(absPath, written.mtimeMs, "write", sha256hex(newFile));
     ctx.session?.recordFileChange?.({
       path: absPath,
       action: "modified",
@@ -515,4 +518,4 @@ Compare this against your old_string and retry with the file's actual text.` : "
 export {
   editTool
 };
-//# sourceMappingURL=chunk-CFLJFDYV.js.map
+//# sourceMappingURL=chunk-DK4J2WMH.js.map