@wrongstack/tools 0.320.1 → 1.0.0

package/dist/{chunk-BK732J7I.js → chunk-FBUP524S.js}

@@ -1,6 +1,6 @@
 import {
   kanbanTool
-} from "./chunk-W2CECGTG.js";
+} from "./chunk-SMARDKAC.js";
 import {
   applyManagedKanbanBoardToTodos,
   blockingTitles,
@@ -323,7 +323,7 @@ var todoTool = {
           field: "todos"
         });
       }
-      if (item.status !== void 0 && !VALID_STATUSES.has(item.status)) {
+      if (!item.status || !VALID_STATUSES.has(item.status)) {
         throw new ToolValidationError({
           message: `todo: item "${item.id}" has invalid status "${item.status}". Allowed: pending, in_progress, completed`,
           field: "todos"
@@ -331,7 +331,7 @@ var todoTool = {
       }
     }
     const items = input.todos.filter((t) => Boolean(t?.id && t.content));
-    const todoIdentity = (item) => item.kanbanBoardId && item.kanbanTaskId ? `kanban:${item.kanbanBoardId}:${item.kanbanTaskId}` : item.promotedFromTask ? `task:${item.promotedFromTask}` : item.promotedFromPlan ? `plan:${item.promotedFromPlan}` : `todo:${item.id}`;
+    const todoIdentity = (item) => item.kanbanBoardId && item.kanbanTaskId ? `kanban:${item.kanbanBoardId}:${item.kanbanTaskId}` : item.promotedFromTask ? `task:${item.promotedFromTask}:${item.id}` : item.promotedFromPlan ? `plan:${item.promotedFromPlan}:${item.id}` : `todo:${item.id}`;
     const requestedIdentities = new Set(items.map(todoIdentity));
     for (const previous of ctx.todos ?? []) {
       const identity = todoIdentity(previous);
@@ -476,4 +476,4 @@ var todoTool = {
 export {
   todoTool
 };
-//# sourceMappingURL=chunk-BK732J7I.js.map
+//# sourceMappingURL=chunk-FBUP524S.js.map

package/dist/{chunk-NYRLWDT5.js → chunk-FVM3O4JQ.js}

@@ -224,4 +224,4 @@ export {
   searchMemoryTool,
   relatedMemoryTool
 };
-//# sourceMappingURL=chunk-NYRLWDT5.js.map
+//# sourceMappingURL=chunk-FVM3O4JQ.js.map

package/dist/chunk-FYDBUVQD.js

@@ -0,0 +1,244 @@
+// src/tool-diff.ts
+var DIFF_MAX_LINES = 5e3;
+function asObject(input) {
+  if (typeof input === "string") {
+    const s = input.trim();
+    if (s.startsWith("{") || s.startsWith("[")) {
+      try {
+        const parsed = JSON.parse(s);
+        if (parsed && typeof parsed === "object") return parsed;
+      } catch {
+        return null;
+      }
+    }
+    return null;
+  }
+  if (input && typeof input === "object") return input;
+  return null;
+}
+function diffFromToolInput(toolName, input) {
+  if (!toolName) return null;
+  const obj = asObject(input);
+  if (!obj) return null;
+  const name = toolName.toLowerCase();
+  const filePath = String(obj.file_path ?? obj.path ?? "");
+  switch (name) {
+    case "edit":
+    case "str_replace":
+    case "edit_file":
+    case "multi_edit": {
+      const oldText = typeof obj.old_string === "string" ? obj.old_string : "";
+      const newText = typeof obj.new_string === "string" ? obj.new_string : "";
+      if (!oldText && !newText) return null;
+      return { mode: "lcs", oldText, newText, caption: `edit ${filePath}`.trim() };
+    }
+    case "write":
+    case "write_file":
+    case "create_file": {
+      const content = typeof obj.content === "string" ? obj.content : "";
+      if (!content) return null;
+      return {
+        mode: "lcs",
+        oldText: "",
+        newText: content,
+        caption: `write ${filePath} (new)`.trim()
+      };
+    }
+    case "patch": {
+      const patchText = typeof obj.patch === "string" ? obj.patch : "";
+      if (!patchText.trim()) return null;
+      return { mode: "unified", patchText, caption: filePath ? `patch ${filePath}` : "patch" };
+    }
+    default:
+      return null;
+  }
+}
+function computeLineDiff(oldText, newText) {
+  const a = oldText.split("\n").map((l) => l.replace(/\r$/, ""));
+  const b = newText.split("\n").map((l) => l.replace(/\r$/, ""));
+  if (a.length > DIFF_MAX_LINES || b.length > DIFF_MAX_LINES) return null;
+  const n = a.length;
+  const m = b.length;
+  const dp = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));
+  for (let i2 = n - 1; i2 >= 0; i2--) {
+    for (let j2 = m - 1; j2 >= 0; j2--) {
+      dp[i2][j2] = a[i2] === b[j2] ? dp[i2 + 1][j2 + 1] + 1 : Math.max(dp[i2 + 1][j2], dp[i2][j2 + 1]);
+    }
+  }
+  const rows = [];
+  let i = 0;
+  let j = 0;
+  while (i < n && j < m) {
+    if (a[i] === b[j]) {
+      rows.push({ kind: "ctx", text: a[i] });
+      i++;
+      j++;
+    } else if (dp[i + 1][j] >= dp[i][j + 1]) {
+      rows.push({ kind: "del", text: a[i] });
+      i++;
+    } else {
+      rows.push({ kind: "add", text: b[j] });
+      j++;
+    }
+  }
+  while (i < n) rows.push({ kind: "del", text: a[i++] });
+  while (j < m) rows.push({ kind: "add", text: b[j++] });
+  return rows;
+}
+function parseUnifiedDiff(patchText) {
+  const rows = [];
+  const lines = patchText.split("\n");
+  for (const r of lines) {
+    const raw = r.replace(/\r$/, "");
+    if (raw.startsWith("@@") || raw.startsWith("--- ") || raw.startsWith("+++ ") || raw.startsWith("diff ") || raw.startsWith("index ") || raw.startsWith("\\ ")) {
+      rows.push({ kind: "meta", text: raw });
+    } else if (raw.startsWith("+")) {
+      rows.push({ kind: "add", text: raw.slice(1) });
+    } else if (raw.startsWith("-")) {
+      rows.push({ kind: "del", text: raw.slice(1) });
+    } else {
+      rows.push({ kind: "ctx", text: raw.startsWith(" ") ? raw.slice(1) : raw });
+    }
+  }
+  if (rows.length > 0 && rows[rows.length - 1].kind === "ctx" && rows[rows.length - 1].text === "") {
+    rows.pop();
+  }
+  return rows;
+}
+function diffRowsFromToolInput(toolName, input) {
+  const d = diffFromToolInput(toolName, input);
+  if (!d) return null;
+  if (d.mode === "unified") return { caption: d.caption, rows: parseUnifiedDiff(d.patchText) };
+  return { caption: d.caption, rows: computeLineDiff(d.oldText, d.newText) };
+}
+var DIFF_LINE_SAFETY_CAP = 4e3;
+function truncMid(s, max) {
+  if (s.length <= max) return s;
+  return `${s.slice(0, max - 1)}\u2026`;
+}
+function parseUnifiedDiffPreview(diff, maxLines, lineCap = DIFF_LINE_SAFETY_CAP) {
+  const all = [];
+  let oldLn = 0;
+  let newLn = 0;
+  for (const raw of diff.split("\n")) {
+    const line = raw.replace(/\r$/, "");
+    if (line.startsWith("+++") || line.startsWith("---")) continue;
+    if (line.startsWith("diff --git") || line.startsWith("index ")) continue;
+    if (line.startsWith("@@")) {
+      const m = line.match(/^@@\s+-(\d+)(?:,\d+)?\s+\+(\d+)(?:,\d+)?\s+@@/);
+      if (m) {
+        oldLn = Number.parseInt(m[1] ?? "0", 10) || 0;
+        newLn = Number.parseInt(m[2] ?? "0", 10) || 0;
+      }
+      all.push({ kind: "hunk", text: truncMid(line, 60) });
+      continue;
+    }
+    if (line.startsWith("+")) {
+      all.push({ kind: "add", text: truncMid(line, lineCap), newLine: newLn });
+      newLn++;
+      continue;
+    }
+    if (line.startsWith("-")) {
+      all.push({ kind: "del", text: truncMid(line, lineCap), oldLine: oldLn });
+      oldLn++;
+      continue;
+    }
+    if (line.startsWith("\\ No newline")) {
+      all.push({ kind: "meta", text: line });
+      continue;
+    }
+    if (line.length === 0) continue;
+    all.push({ kind: "ctx", text: truncMid(line, lineCap), oldLine: oldLn, newLine: newLn });
+    oldLn++;
+    newLn++;
+  }
+  const added = all.filter((row) => row.kind === "add").length;
+  const removed = all.filter((row) => row.kind === "del").length;
+  if (all.length === 0) {
+    return { rows: [], hidden: 0, added: 0, removed: 0, hiddenAdded: 0, hiddenRemoved: 0 };
+  }
+  if (all.length <= maxLines) {
+    return { rows: all, hidden: 0, added, removed, hiddenAdded: 0, hiddenRemoved: 0 };
+  }
+  const rows = all.slice(0, maxLines);
+  const hiddenRows = all.slice(maxLines);
+  return {
+    rows,
+    hidden: hiddenRows.length,
+    added,
+    removed,
+    hiddenAdded: hiddenRows.filter((row) => row.kind === "add").length,
+    hiddenRemoved: hiddenRows.filter((row) => row.kind === "del").length
+  };
+}
+var TOOL_DIFF_BROWSER_SRC = [
+  "var DIFF_MAX_LINES = 5000;",
+  "function __diffObj(input){",
+  '  if(typeof input==="string"){ var s=input.trim(); if(s.charAt(0)==="{"||s.charAt(0)==="["){ try{ var p=JSON.parse(s); if(p&&typeof p==="object") return p; }catch(_e){} } return null; }',
+  '  if(input&&typeof input==="object") return input; return null;',
+  "}",
+  "function diffFromToolInput(name, input){",
+  "  if(!name) return null;",
+  "  var obj=__diffObj(input); if(!obj) return null;",
+  "  var n=String(name).toLowerCase();",
+  '  var fp=String(obj.file_path!=null?obj.file_path:(obj.path!=null?obj.path:""));',
+  '  if(n==="edit"||n==="str_replace"||n==="edit_file"||n==="multi_edit"){',
+  '    var oldT=typeof obj.old_string==="string"?obj.old_string:"";',
+  '    var newT=typeof obj.new_string==="string"?obj.new_string:"";',
+  "    if(!oldT&&!newT) return null;",
+  '    return { mode:"lcs", oldText:oldT, newText:newT, caption:("edit "+fp).replace(/\\s+$/,"") };',
+  "  }",
+  '  if(n==="write"||n==="write_file"||n==="create_file"){',
+  '    var c=typeof obj.content==="string"?obj.content:"";',
+  "    if(!c) return null;",
+  '    return { mode:"lcs", oldText:"", newText:c, caption:("write "+fp+" (new)").replace(/^\\s+/,"").replace(/\\s+$/,"") };',
+  "  }",
+  '  if(n==="patch"){',
+  '    var pt=typeof obj.patch==="string"?obj.patch:"";',
+  '    if(!pt.replace(/\\s/g,"")) return null;',
+  '    return { mode:"unified", patchText:pt, caption: fp ? ("patch "+fp) : "patch" };',
+  "  }",
+  "  return null;",
+  "}",
+  "function computeLineDiff(oldText, newText){",
+  '  var a=oldText.split("\\n").map(function(l){return l.replace(/\\r$/,"");}), b=newText.split("\\n").map(function(l){return l.replace(/\\r$/,"");});',
+  "  if(a.length>DIFF_MAX_LINES||b.length>DIFF_MAX_LINES) return null;",
+  "  var nn=a.length, mm=b.length, i, j;",
+  "  var dp=new Array(nn+1); for(i=0;i<=nn;i++){ dp[i]=new Array(mm+1); for(j=0;j<=mm;j++) dp[i][j]=0; }",
+  "  for(i=nn-1;i>=0;i--){ for(j=mm-1;j>=0;j--){ dp[i][j]= a[i]===b[j] ? dp[i+1][j+1]+1 : Math.max(dp[i+1][j], dp[i][j+1]); } }",
+  "  var rows=[]; i=0; j=0;",
+  '  while(i<nn&&j<mm){ if(a[i]===b[j]){ rows.push({kind:"ctx",text:a[i]}); i++; j++; } else if(dp[i+1][j]>=dp[i][j+1]){ rows.push({kind:"del",text:a[i]}); i++; } else { rows.push({kind:"add",text:b[j]}); j++; } }',
+  '  while(i<nn){ rows.push({kind:"del",text:a[i]}); i++; }',
+  '  while(j<mm){ rows.push({kind:"add",text:b[j]}); j++; }',
+  "  return rows;",
+  "}",
+  "function parseUnifiedDiff(patchText){",
+  '  var rows=[], lines=patchText.split("\\n"), k, raw;',
+  '  for(k=0;k<lines.length;k++){ raw=lines[k].replace(/\\r$/,"");',
+  '    if(raw.indexOf("@@")===0||raw.indexOf("--- ")===0||raw.indexOf("+++ ")===0||raw.indexOf("diff ")===0||raw.indexOf("index ")===0||raw.indexOf("\\\\ ")===0){ rows.push({kind:"meta",text:raw}); }',
+  '    else if(raw.charAt(0)==="+"){ rows.push({kind:"add",text:raw.slice(1)}); }',
+  '    else if(raw.charAt(0)==="-"){ rows.push({kind:"del",text:raw.slice(1)}); }',
+  '    else { rows.push({kind:"ctx",text: raw.charAt(0)===" " ? raw.slice(1) : raw}); }',
+  "  }",
+  '  if(rows.length>0 && rows[rows.length-1].kind==="ctx" && rows[rows.length-1].text===""){ rows.pop(); }',
+  "  return rows;",
+  "}",
+  "function diffRowsFromToolInput(name, input){",
+  "  var d=diffFromToolInput(name, input); if(!d) return null;",
+  '  if(d.mode==="unified") return { caption:d.caption, rows:parseUnifiedDiff(d.patchText) };',
+  "  return { caption:d.caption, rows:computeLineDiff(d.oldText, d.newText) };",
+  "}"
+].join("\n");
+
+export {
+  DIFF_MAX_LINES,
+  diffFromToolInput,
+  computeLineDiff,
+  parseUnifiedDiff,
+  diffRowsFromToolInput,
+  DIFF_LINE_SAFETY_CAP,
+  truncMid,
+  parseUnifiedDiffPreview,
+  TOOL_DIFF_BROWSER_SRC
+};
+//# sourceMappingURL=chunk-FYDBUVQD.js.map

package/dist/{chunk-PV6HIZQD.js → chunk-GDDXX27P.js}

@@ -1,6 +1,54 @@
 import {
   resolveIndexDir
-} from "./chunk-J43O3BOX.js";
+} from "./chunk-N3K2SFEI.js";
+
+// src/codebase-index/project-server-endpoint.ts
+import { createHash } from "node:crypto";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+var PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
+var PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
+var PROJECT_INDEX_SERVER_SOCKET_DIR = `wsci-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}`;
+var buildIdCache;
+function projectIndexServerBuildId(entrypoint) {
+  const href = entrypoint instanceof URL ? entrypoint.href : entrypoint;
+  const cleanHref = href.split(/[?#]/, 1)[0] ?? href;
+  const file = cleanHref.startsWith("file:") ? fileURLToPath(cleanHref) : path.resolve(cleanHref);
+  try {
+    const stat = fs.statSync(file);
+    if (buildIdCache?.file === file && buildIdCache.mtimeMs === stat.mtimeMs && buildIdCache.size === stat.size) {
+      return buildIdCache.buildId;
+    }
+    const buildId = createHash("sha256").update(fs.readFileSync(file)).digest("hex").slice(0, 24);
+    buildIdCache = { file, mtimeMs: stat.mtimeMs, size: stat.size, buildId };
+    return buildId;
+  } catch {
+    return `unreadable:${path.basename(file)}`;
+  }
+}
+function normalizeLocalPath(value) {
+  const resolved = path.resolve(value);
+  return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+function projectIndexServerKey(projectRoot, indexDir) {
+  const resolvedIndexDir = normalizeLocalPath(resolveIndexDir(projectRoot, indexDir));
+  return createHash("sha256").update(resolvedIndexDir).digest("hex").slice(0, 24);
+}
+function projectIndexServerEndpoint(projectRoot, indexDir) {
+  const key = projectIndexServerKey(projectRoot, indexDir);
+  if (process.platform === "win32") {
+    return `\\\\.\\pipe\\wrongstack-codebase-index-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}-${key}`;
+  }
+  return path.join(os.tmpdir(), PROJECT_INDEX_SERVER_SOCKET_DIR, `${key}.sock`);
+}
+function projectIndexServerMetadataPath(projectRoot, indexDir) {
+  return path.join(
+    path.resolve(resolveIndexDir(projectRoot, indexDir)),
+    PROJECT_INDEX_SERVER_METADATA_FILE
+  );
+}
 
 // src/codebase-index/binary-frame.ts
 import { decode, encode } from "@msgpack/msgpack";
@@ -53,54 +101,6 @@ function encodeJsonFrame(message) {
 `;
 }
 
-// src/codebase-index/project-server-endpoint.ts
-import { createHash } from "node:crypto";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { fileURLToPath } from "node:url";
-var PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
-var PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
-var PROJECT_INDEX_SERVER_SOCKET_DIR = `wsci-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}`;
-var buildIdCache;
-function projectIndexServerBuildId(entrypoint) {
-  const href = entrypoint instanceof URL ? entrypoint.href : entrypoint;
-  const cleanHref = href.split(/[?#]/, 1)[0] ?? href;
-  const file = cleanHref.startsWith("file:") ? fileURLToPath(cleanHref) : path.resolve(cleanHref);
-  try {
-    const stat = fs.statSync(file);
-    if (buildIdCache?.file === file && buildIdCache.mtimeMs === stat.mtimeMs && buildIdCache.size === stat.size) {
-      return buildIdCache.buildId;
-    }
-    const buildId = createHash("sha256").update(fs.readFileSync(file)).digest("hex").slice(0, 24);
-    buildIdCache = { file, mtimeMs: stat.mtimeMs, size: stat.size, buildId };
-    return buildId;
-  } catch {
-    return `unreadable:${path.basename(file)}`;
-  }
-}
-function normalizeLocalPath(value) {
-  const resolved = path.resolve(value);
-  return process.platform === "win32" ? resolved.toLowerCase() : resolved;
-}
-function projectIndexServerKey(projectRoot, indexDir) {
-  const resolvedIndexDir = normalizeLocalPath(resolveIndexDir(projectRoot, indexDir));
-  return createHash("sha256").update(resolvedIndexDir).digest("hex").slice(0, 24);
-}
-function projectIndexServerEndpoint(projectRoot, indexDir) {
-  const key = projectIndexServerKey(projectRoot, indexDir);
-  if (process.platform === "win32") {
-    return `\\\\.\\pipe\\wrongstack-codebase-index-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}-${key}`;
-  }
-  return path.join(os.tmpdir(), PROJECT_INDEX_SERVER_SOCKET_DIR, `${key}.sock`);
-}
-function projectIndexServerMetadataPath(projectRoot, indexDir) {
-  return path.join(
-    path.resolve(resolveIndexDir(projectRoot, indexDir)),
-    PROJECT_INDEX_SERVER_METADATA_FILE
-  );
-}
-
 // src/codebase-index/project-server-protocol.ts
 var PROJECT_INDEX_SERVER_MAX_FRAME_CHARS = 64 * 1024 * 1024;
 function encodeProjectServerMessage(message) {
@@ -120,4 +120,4 @@ export {
   PROJECT_INDEX_SERVER_MAX_FRAME_CHARS,
   encodeProjectServerMessage
 };
-//# sourceMappingURL=chunk-PV6HIZQD.js.map
+//# sourceMappingURL=chunk-GDDXX27P.js.map

package/dist/{chunk-3GIKYHLA.js → chunk-GKSG5CPH.js}

@@ -1,9 +1,9 @@
 import {
   checkSyntax
-} from "./chunk-JSNSMG5R.js";
+} from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-Z5Q3TXRY.js";
+} from "./chunk-ZTCJCYLN.js";
 import {
   safeResolveReal,
   sha256hex,
@@ -114,8 +114,8 @@ async function prepareWrite(input, ctx) {
     existed = stat2.isFile();
     if (existed) {
       prev = await fs.readFile(absPath, "utf8");
-      if (!ctx.hasRead(absPath)) {
-        ctx.recordRead(absPath, stat2.mtimeMs, "write", sha256hex(prev));
+      if (ctx.hasRead ? !ctx.hasRead(absPath) : true) {
+        ctx.recordRead?.(absPath, stat2.mtimeMs, "write", sha256hex(prev));
       }
     }
   } catch (err) {
@@ -139,7 +139,7 @@ async function finishWrite(input, ctx, prepared, signal) {
   const { text: diff, truncated: diffTruncated } = truncateDiffPayload(rawDiff, MAX_DIFF_BYTES);
   const contentHash = sha256hex(content);
   const stat2 = await fs.stat(prepared.absPath);
-  ctx.recordRead(prepared.absPath, stat2.mtimeMs, "write", contentHash);
+  ctx.recordRead?.(prepared.absPath, stat2.mtimeMs, "write", contentHash);
   ctx.session?.recordFileChange?.({
     path: prepared.absPath,
     action: prepared.existed ? "modified" : "created",
@@ -179,4 +179,4 @@ async function finishWrite(input, ctx, prepared, signal) {
 export {
   writeTool
 };
-//# sourceMappingURL=chunk-3GIKYHLA.js.map
+//# sourceMappingURL=chunk-GKSG5CPH.js.map

package/dist/{chunk-ESLPBT5A.js → chunk-HDYUBRMF.js}

@@ -1,6 +1,6 @@
 import {
   CircuitBreaker
-} from "./chunk-HFXSNKCV.js";
+} from "./chunk-7JJFC6CT.js";
 
 // src/process-registry.ts
 import { spawn } from "node:child_process";
@@ -35,8 +35,9 @@ function redactCommand(cmd) {
   for (const pattern of SENSITIVE_FLAG_PATTERNS) {
     result = result.replace(pattern, (match) => {
       const eq = match.indexOf("=");
+      const colon = match.indexOf(":");
       const sp = match.search(/\s/);
-      const delim = eq !== -1 ? "=" : sp !== -1 ? match[sp] : null;
+      const delim = eq !== -1 && (colon === -1 || eq < colon) ? "=" : colon !== -1 ? ":" : sp !== -1 ? match[sp] : null;
       if (delim !== null) {
         const flag = match.slice(0, match.indexOf(expectDefined(delim)) + 1);
         return `${flag}[REDACTED]`;
@@ -470,4 +471,4 @@ export {
   getProcessRegistry,
   _resetProcessRegistry
 };
-//# sourceMappingURL=chunk-ESLPBT5A.js.map
+//# sourceMappingURL=chunk-HDYUBRMF.js.map

package/dist/{chunk-ELRRTWNP.js → chunk-IXIS7RSG.js}

@@ -306,7 +306,7 @@ ${result.content}
       }
       signal?.throwIfAborted();
       const tokens = applyTokenOverrides(rawTokens, active.overrides);
-      const normalizedFiles = input.files ? (Array.isArray(input.files) ? input.files : String(input.files).split(",")).map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean) : void 0;
+      const normalizedFiles = input.files ? (Array.isArray(input.files) ? input.files : String(input.files).split(",")).filter((f) => typeof f === "string").map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean) : void 0;
       const report = await runDesignVerify(ctx.projectRoot, tokens, normalizedFiles);
       const pct = Math.round(report.score * 100);
       const top = report.violations.slice(0, 25).map((v) => `  ${v.file}:${v.line} \u2014 ${v.reason}: ${v.snippet}`).join("\n");
@@ -334,4 +334,4 @@ Replace off-palette colors with kit tokens (or the materialized CSS vars / token
 export {
   designTool
 };
-//# sourceMappingURL=chunk-ELRRTWNP.js.map
+//# sourceMappingURL=chunk-IXIS7RSG.js.map

package/dist/{chunk-HR67OWEP.js → chunk-IYH4OHBP.js}

@@ -1,12 +1,12 @@
 import {
   compileUserRegex
-} from "./chunk-Q5JPPCZC.js";
+} from "./chunk-YJTXRH5Y.js";
 import {
   mapWithConcurrency
 } from "./chunk-ZBMANLYH.js";
 import {
   enqueueReindex
-} from "./chunk-Z5Q3TXRY.js";
+} from "./chunk-ZTCJCYLN.js";
 import {
   isBinaryBuffer,
   safeResolveReal,
@@ -275,7 +275,7 @@ function passesExtraGlob(extraGlob, name, full, base) {
 }
 async function resolveFiles(filesInput, ctx, extraGlob) {
   const base = ctx.cwd;
-  const parts = Array.isArray(filesInput) ? filesInput.map((s) => s.trim()).filter(Boolean) : filesInput.trim().split(",").map((s) => s.trim()).filter(Boolean);
+  const parts = Array.isArray(filesInput) ? filesInput.filter((s) => typeof s === "string").map((s) => s.trim()).filter(Boolean) : filesInput.trim().split(",").map((s) => s.trim()).filter(Boolean);
   const resolved = [];
   for (const p of parts) {
     if (p.includes("*") || p.includes("?")) {
@@ -289,7 +289,7 @@ async function resolveFiles(filesInput, ctx, extraGlob) {
       resolved.push(absPath);
     }
   }
-  return resolved;
+  return [...new Set(resolved)];
 }
 async function globFiles(pattern, base, extraGlob) {
   const rgAvailable = await checkRg();
@@ -413,4 +413,4 @@ export {
   replaceTool,
   __resetRgDetectionForTests
 };
-//# sourceMappingURL=chunk-HR67OWEP.js.map
+//# sourceMappingURL=chunk-IYH4OHBP.js.map

package/dist/{chunk-W232EFEM.js → chunk-JDOO4P6Z.js}

@@ -13,7 +13,8 @@ var DEFAULT_IGNORE = /* @__PURE__ */ new Set([
   ".gnupg",
   ".aws"
 ]);
-var DEFAULT_MAX_ENTRIES = 5e3;
+var DEFAULT_MAX_TREE_ENTRIES = 5e3;
+var DEFAULT_MAX_ENTRIES = DEFAULT_MAX_TREE_ENTRIES;
 var MAX_TREE_OUTPUT_BYTES = 256 * 1024;
 var treeTool = {
   name: "tree",
@@ -88,7 +89,7 @@ var treeTool = {
     const exclude = /* @__PURE__ */ new Set([
       ...DEFAULT_IGNORE,
       ...rawExclude.filter((s) => typeof s === "string").map(
-        (s) => s.trim().replace(/[\\/]+$/, "").replace(/^\.\//, "")
+        (s) => s.trim().replace(/\\/g, "/").replace(/\/+$/, "").replace(/^\.\//, "")
       ).filter(Boolean)
     ]);
     const globRe = input.glob ? compileGlob(input.glob) : void 0;
@@ -204,7 +205,7 @@ async function walkDir(dir, depth, opts) {
   opts.totalDirs.value += dirCount;
   opts.totalFiles.value += fileCount;
   opts.onProgress?.();
-  const items = filtered.sort((a, b) => {
+  const items = filtered.filter((e) => e.isDirectory() || opts.showFiles).sort((a, b) => {
     if (a.isDirectory() && !b.isDirectory()) return -1;
     if (!a.isDirectory() && b.isDirectory()) return 1;
     return a.name.localeCompare(b.name);
@@ -243,6 +244,8 @@ async function walkDir(dir, depth, opts) {
 }
 
 export {
+  DEFAULT_MAX_TREE_ENTRIES,
+  MAX_TREE_OUTPUT_BYTES,
   treeTool
 };
-//# sourceMappingURL=chunk-W232EFEM.js.map
+//# sourceMappingURL=chunk-JDOO4P6Z.js.map

package/dist/{chunk-OTPTQBYE.js → chunk-KDEXUQY7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BTSFTGIL.js";
 import {
   getPersistentProcessRegistry
-} from "./chunk-QGF2C7TF.js";
+} from "./chunk-PVCB7RUZ.js";
 import {
   createOutputSpool,
   spoolNote
@@ -11,7 +11,7 @@ import {
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-ESLPBT5A.js";
+} from "./chunk-HDYUBRMF.js";
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
@@ -47,6 +47,7 @@ var flagLetters = (args) => {
   }
   return seen;
 };
+var isPowerShellCmd = (cmd) => /^(?:powershell|pwsh)(?:\.exe)?$/i.test(cmd);
 var RULES = [
   // ----- rm / rmdir: recursive force delete (any path) -----
   // Note: BLOCKED_ARG_PATTERNS already hard-denies root/home/glob paths,
@@ -85,7 +86,12 @@ var RULES = [
     id: "powershell-remove-item-recursive-force",
     level: "destructive",
     test: (cmd, args) => {
-      if (cmd !== "powershell" && cmd !== "pwsh") return false;
+      const isPwsh = isPowerShellCmd(cmd);
+      const isRemoveItemCmd = /^(?:remove-item|ri)(?:\.exe)?$/i.test(cmd);
+      if (!isPwsh && !isRemoveItemCmd) return false;
+      if (isPwsh && !args.some((a) => /^(?:Remove-Item|ri|rm|del|erase|rd|rmdir)(?:\.exe)?$/i.test(a))) {
+        return false;
+      }
       const hasRecurse = argMatches(args, /^-(?:r|recurse)(?::\$true)?$/i);
       const hasForce = argMatches(args, /^-(?:f|force)(?::\$true)?$/i);
       if (argMatches(args, /^-whatif(?::\$true)?$/i)) return false;
@@ -98,7 +104,7 @@ var RULES = [
     id: "powershell-disk-volume-destroy",
     level: "destructive",
     test: (cmd, args) => {
-      if (cmd !== "powershell" && cmd !== "pwsh") return false;
+      if (!isPowerShellCmd(cmd)) return false;
       return args.some(
         (a) => /^(?:Format-Volume|Clear-Disk|Initialize-Disk|Remove-Partition|Clear-Volume)(?:\s|$)/i.test(
           a
@@ -112,7 +118,7 @@ var RULES = [
     id: "powershell-stop-restart-computer",
     level: "destructive",
     test: (cmd, args) => {
-      if (cmd !== "powershell" && cmd !== "pwsh") return false;
+      if (!isPowerShellCmd(cmd)) return false;
       return args.some((a) => /^(?:Stop-Computer|Restart-Computer)(?:\s|$)/i.test(a));
     },
     reason: "PowerShell system shutdown or restart"
@@ -122,7 +128,7 @@ var RULES = [
     id: "powershell-execution-policy-bypass",
     level: "caution",
     test: (cmd, args) => {
-      if (cmd !== "powershell" && cmd !== "pwsh") return false;
+      if (!isPowerShellCmd(cmd)) return false;
       return args.some(
         (a) => /Set-ExecutionPolicy\s+(?:Bypass|Unrestricted)|-(?:EncodedCommand|enc)\b/i.test(a)
       );
@@ -269,7 +275,12 @@ var RULES = [
     level: "destructive",
     test: (cmd, args) => {
       if (!["npm", "pnpm", "yarn", "bun", "cargo"].includes(cmd)) return false;
-      return args.includes("publish") || cmd === "cargo" && args.includes("yank");
+      const firstPositional = args.find((a) => !a.startsWith("-"));
+      if (!firstPositional) return false;
+      if (cmd === "cargo") {
+        return firstPositional === "publish" || firstPositional === "yank";
+      }
+      return firstPositional === "publish";
     },
     reason: "publishing to a public package registry (hard to reverse)"
   },
@@ -1821,4 +1832,4 @@ export {
   getExecAllowlist,
   execTool
 };
-//# sourceMappingURL=chunk-OTPTQBYE.js.map
+//# sourceMappingURL=chunk-KDEXUQY7.js.map

package/dist/{chunk-2OXHS3KZ.js → chunk-KLJZ4WV4.js}

@@ -100,7 +100,7 @@ describe('{{Name}}', () => {
 var scaffoldTool = {
   name: "scaffold",
   category: "Project",
-  description: "Generate new files and folder structures from built-in templates or custom definitions. This is the recommended way to bootstrap new packages, components, or modules instead of creating files one by one with `write`.",
+  description: "Generate or preview files and folder structures from built-in templates or custom definitions. Writes files to disk unless dry_run is set. This is the recommended way to bootstrap new packages, components, or modules instead of creating files one by one with `write`.",
   usageHint: "PREFERRED FOR SCAFFOLDING:\n\n- Use built-in templates when they match your needs (e.g. react-component, npm-package).\n- Supports `dry_run` so you can preview exactly what will be created.\n- Has the powerful `fs.write.outside-project` capability \u2014 review paths carefully.\nMuch cleaner and safer than manually writing multiple files.",
   permission: "confirm",
   mutating: true,
@@ -195,7 +195,7 @@ function escapeRegexLiteral(value) {
 }
 function substituteVars(content, name, vars) {
   const kebab = name.toLowerCase().replace(/\s+/g, "-");
-  const pascal = name.replace(/(?:^|[-_\s]+)([a-z])/g, (_, c) => c.toUpperCase());
+  const pascal = name.replace(/(?:^|[-_\s]+)([a-zA-Z])/g, (_, c) => c.toUpperCase());
   let result = content;
   result = result.replace(/\{\{name\}\}/g, () => kebab);
   result = result.replace(/\{\{Name\}\}/g, () => pascal);
@@ -207,6 +207,7 @@ function substituteVars(content, name, vars) {
 }
 
 export {
+  BUILT_IN_TEMPLATES,
   scaffoldTool
 };
-//# sourceMappingURL=chunk-2OXHS3KZ.js.map
+//# sourceMappingURL=chunk-KLJZ4WV4.js.map