@wrongstack/tools 0.320.1 → 1.0.1

package/dist/chunk-S57CDR2H.js

@@ -0,0 +1,288 @@
+// src/tool-summary.ts
+var FALLBACK_HEAD_FIELDS = [
+  "path",
+  "file_path",
+  "pattern",
+  "symbol",
+  "command",
+  "cmd",
+  "url",
+  "query",
+  "description",
+  "content"
+];
+function clip(s, n) {
+  return s.length > n ? `${s.slice(0, n - 1)}\u2026` : s;
+}
+function pickPath(obj) {
+  const p = obj.file_path ?? obj.path ?? obj.filepath;
+  return typeof p === "string" ? p : "";
+}
+function safeJson(v) {
+  try {
+    return JSON.stringify(v);
+  } catch {
+    return String(v);
+  }
+}
+function coerceInput(input) {
+  if (typeof input === "string") {
+    const s = input.trim();
+    if (s.startsWith("{") || s.startsWith("[")) {
+      try {
+        const parsed = JSON.parse(s);
+        if (parsed && typeof parsed === "object")
+          return { obj: parsed, raw: parsed };
+      } catch {
+      }
+    }
+    return { obj: null, raw: input };
+  }
+  if (input && typeof input === "object")
+    return { obj: input, raw: input };
+  return { obj: null, raw: input };
+}
+function summarizeToolInput(toolName, input) {
+  if (input === null || input === void 0 || input === "") return "";
+  const { obj, raw } = coerceInput(input);
+  if (!obj) return clip(String(raw), 120);
+  const name = (toolName ?? "").toLowerCase();
+  if (/^todo(_?write)?$|^todos$/.test(name) || Array.isArray(obj.todos)) {
+    const todos = obj.todos ?? [];
+    if (Array.isArray(todos)) {
+      const done = todos.filter((t) => t?.status === "completed").length;
+      const wip = todos.filter((t) => t?.status === "in_progress").length;
+      const parts = [`${todos.length} todo${todos.length === 1 ? "" : "s"}`];
+      if (done > 0) parts.push(`${done} done`);
+      if (wip > 0) parts.push(`${wip} in-progress`);
+      return parts.join(" \xB7 ");
+    }
+  }
+  if (/batch|parallel/.test(name) || Array.isArray(obj.tool_uses) || Array.isArray(obj.calls)) {
+    const list = obj.tool_uses ?? obj.calls ?? obj.batch;
+    if (Array.isArray(list)) {
+      const subNames = /* @__PURE__ */ new Set();
+      for (const item of list) {
+        if (item && typeof item === "object" && "name" in item) {
+          subNames.add(String(item.name));
+        } else if (item && typeof item === "object" && "tool" in item) {
+          subNames.add(String(item.tool));
+        }
+      }
+      const preview = [...subNames].slice(0, 3).join(", ");
+      const more = subNames.size > 3 ? ` +${subNames.size - 3}` : "";
+      return `${list.length} sub-tool${list.length === 1 ? "" : "s"}${preview ? ` \xB7 ${preview}${more}` : ""}`;
+    }
+  }
+  if (name === "patch" && typeof obj.patch === "string" && obj.patch) {
+    const fileCount = (obj.patch.match(/^\+\+\+ /gm) ?? []).length;
+    if (fileCount > 0) return `patch \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`;
+    return `patch \xB7 ${obj.patch.split("\n").length} lines`;
+  }
+  if (/^(edit|str_replace|edit_file|patch)$/.test(name)) {
+    const fp = pickPath(obj);
+    const oldS = typeof obj.old_string === "string" ? obj.old_string : "";
+    const newS = typeof obj.new_string === "string" ? obj.new_string : "";
+    const oldLines = oldS ? oldS.split("\n").length : 0;
+    const newLines = newS ? newS.split("\n").length : 0;
+    return `edit ${fp || "(file)"}${oldLines || newLines ? ` (${oldLines} \u2192 ${newLines} lines)` : ""}`;
+  }
+  if (/^(write|write_file|create_file|new_file)$/.test(name)) {
+    const fp = pickPath(obj);
+    const c = typeof obj.content === "string" ? obj.content : "";
+    const lines = c ? c.split("\n").length : 0;
+    return `write ${fp || "(file)"}${lines ? ` \xB7 ${lines} lines` : ""}`;
+  }
+  if (/^(bash|shell|sh|exec|run|run_command|run_shell|command)$/.test(name)) {
+    const cmd = obj.command ?? obj.cmd ?? obj.script;
+    if (typeof cmd === "string") return `$ ${clip(cmd, 110)}`;
+  }
+  if (/^(fetch|http|web|web_fetch|web_search|webfetch|curl|request)$/.test(name)) {
+    const url = obj.url;
+    if (typeof url === "string") {
+      const method = obj.method ?? "GET";
+      return `${method.toUpperCase()} ${clip(url, 100)}`;
+    }
+  }
+  if (/^(grep|search|ripgrep|rg)$/.test(name)) {
+    const pattern = obj.pattern;
+    const scope = obj.path ?? obj.glob ?? obj.type;
+    if (typeof pattern === "string") {
+      return scope ? `grep ${clip(pattern, 60)} in ${scope}` : `grep ${clip(pattern, 100)}`;
+    }
+  }
+  if (/^(glob|find)$/.test(name)) {
+    const p = obj.pattern ?? obj.glob;
+    if (typeof p === "string") return `glob ${clip(p, 80)}`;
+  }
+  if (/^tree$/.test(name)) {
+    const p = typeof obj.path === "string" ? obj.path : "";
+    const d = typeof obj.depth === "number" ? obj.depth : null;
+    return `tree ${p || "."}${d !== null ? ` (depth ${d})` : ""}`;
+  }
+  if (/^diff$/.test(name)) {
+    const a = typeof obj.a === "string" ? obj.a : "";
+    const b = typeof obj.b === "string" ? obj.b : "";
+    if (a || b) return `diff ${a && b ? `${a}..${b}` : a || b}`;
+    const fl = [];
+    if (Array.isArray(obj.files)) {
+      for (const f of obj.files) if (typeof f === "string") fl.push(f);
+    } else if (typeof obj.files === "string") {
+      for (const part of obj.files.split(",")) {
+        const t = part.trim();
+        if (t) fl.push(t);
+      }
+    }
+    if (fl.length === 1) return `diff ${clip(String(fl[0]), 80)}`;
+    if (fl.length > 1) return `diff ${fl.length} files`;
+  }
+  if (/^replace$/.test(name)) {
+    const pattern = typeof obj.pattern === "string" ? obj.pattern : "";
+    if (pattern) {
+      let scope = "";
+      if (typeof obj.files === "string") {
+        const parts = obj.files.split(",").map((s) => s.trim()).filter(Boolean);
+        scope = parts.length > 1 ? `${parts.length} files` : parts[0] ?? "";
+      } else if (Array.isArray(obj.files) && obj.files.length > 0) {
+        scope = obj.files.length === 1 ? String(obj.files[0]) : `${obj.files.length} files`;
+      }
+      return `replace ${clip(pattern, 60)}${scope ? ` in ${clip(scope, 50)}` : ""}`;
+    }
+  }
+  if (/^(read|read_file|cat|view)$/.test(name)) {
+    const fp = pickPath(obj);
+    const offset = obj.offset;
+    const limit = obj.limit;
+    if (fp && (typeof offset === "number" || typeof limit === "number")) {
+      const start = offset ?? 0;
+      const end = typeof limit === "number" ? start + limit : "";
+      return `read ${fp} (${start}\u2026${end})`;
+    }
+    if (fp) return `read ${fp}`;
+  }
+  for (const k of FALLBACK_HEAD_FIELDS) {
+    const v = obj[k];
+    if (typeof v === "string" && v.length > 0) {
+      return `${k}: ${clip(v, 100)}`;
+    }
+  }
+  return clip(safeJson(raw), 120);
+}
+var SUMMARIZE_TOOL_INPUT_BROWSER_SRC = [
+  'function __clip(s,n){ s=String(s==null?"":s); return s.length>n ? s.slice(0,n-1)+"\\u2026" : s; }',
+  "function toolInputSummary(name, rawInput){",
+  '  if(rawInput==null || rawInput==="") return "";',
+  "  var obj=null, raw=rawInput;",
+  '  if(typeof rawInput==="string"){',
+  "    var s=rawInput.trim();",
+  '    if(s.charAt(0)==="{" || s.charAt(0)==="["){ try{ var pj=JSON.parse(s); if(pj && typeof pj==="object"){ obj=pj; raw=pj; } }catch(_e){} }',
+  '  } else if(rawInput && typeof rawInput==="object"){ obj=rawInput; raw=rawInput; }',
+  "  if(!obj) return __clip(String(raw),120);",
+  '  var n=String(name==null?"":name).toLowerCase();',
+  "  if(/^todo(_?write)?$|^todos$/.test(n) || Array.isArray(obj.todos)){",
+  "    var todos=obj.todos||[];",
+  "    if(Array.isArray(todos)){",
+  "      var done=0, wip=0, ti;",
+  '      for(ti=0; ti<todos.length; ti++){ var st=todos[ti]&&todos[ti].status; if(st==="completed") done++; else if(st==="in_progress") wip++; }',
+  '      var tp=[todos.length+" todo"+(todos.length===1?"":"s")];',
+  '      if(done>0) tp.push(done+" done"); if(wip>0) tp.push(wip+" in-progress");',
+  '      return tp.join(" \\u00b7 ");',
+  "    }",
+  "  }",
+  "  if(/batch|parallel/.test(n) || Array.isArray(obj.tool_uses) || Array.isArray(obj.calls)){",
+  "    var list=obj.tool_uses||obj.calls||obj.batch;",
+  "    if(Array.isArray(list)){",
+  "      var names={}, ord=[], li, it, nm;",
+  '      for(li=0; li<list.length; li++){ it=list[li]; if(it && typeof it==="object"){ nm=("name" in it)?it.name:(("tool" in it)?it.tool:null); if(nm!=null){ nm=String(nm); if(!names[nm]){ names[nm]=1; ord.push(nm); } } } }',
+  '      var preview=ord.slice(0,3).join(", ");',
+  '      var more=ord.length>3 ? " +"+(ord.length-3) : "";',
+  '      return list.length+" sub-tool"+(list.length===1?"":"s")+(preview?(" \\u00b7 "+preview+more):"");',
+  "    }",
+  "  }",
+  "  var fp;",
+  '  if(n==="patch" && typeof obj.patch==="string" && obj.patch){',
+  "    var pfm=obj.patch.match(/^\\+\\+\\+ /gm);",
+  "    var pfc=pfm?pfm.length:0;",
+  '    if(pfc>0) return "patch \\u00b7 "+pfc+" file"+(pfc===1?"":"s");',
+  '    return "patch \\u00b7 "+obj.patch.split("\\n").length+" lines";',
+  "  }",
+  "  if(/^(edit|str_replace|edit_file|patch)$/.test(n)){",
+  "    fp=(obj.file_path!=null?obj.file_path:(obj.path!=null?obj.path:obj.filepath));",
+  '    var oldS=typeof obj.old_string==="string"?obj.old_string:"";',
+  '    var newS=typeof obj.new_string==="string"?obj.new_string:"";',
+  '    var ol=oldS?oldS.split("\\n").length:0, nl=newS?newS.split("\\n").length:0;',
+  '    var efp=typeof fp==="string"?fp:"";',
+  '    return "edit "+(efp||"(file)")+((ol||nl)?(" ("+ol+" \\u2192 "+nl+" lines)"):"");',
+  "  }",
+  "  if(/^(write|write_file|create_file|new_file)$/.test(n)){",
+  "    fp=(obj.file_path!=null?obj.file_path:(obj.path!=null?obj.path:obj.filepath));",
+  '    var wc=typeof obj.content==="string"?obj.content:"";',
+  '    var wl=wc?wc.split("\\n").length:0;',
+  '    var wfp=typeof fp==="string"?fp:"";',
+  '    return "write "+(wfp||"(file)")+(wl?(" \\u00b7 "+wl+" lines"):"");',
+  "  }",
+  "  if(/^(bash|shell|sh|exec|run|run_command|run_shell|command)$/.test(n)){",
+  "    var cmd=(obj.command!=null?obj.command:(obj.cmd!=null?obj.cmd:obj.script));",
+  '    if(typeof cmd==="string") return "$ "+__clip(cmd,110);',
+  "  }",
+  "  if(/^(fetch|http|web|web_fetch|web_search|webfetch|curl|request)$/.test(n)){",
+  '    if(typeof obj.url==="string"){ var mth=(typeof obj.method==="string"?obj.method:"GET"); return mth.toUpperCase()+" "+__clip(obj.url,100); }',
+  "  }",
+  "  if(/^(grep|search|ripgrep|rg)$/.test(n)){",
+  "    var pat=obj.pattern, scope=(obj.path!=null?obj.path:(obj.glob!=null?obj.glob:obj.type));",
+  '    if(typeof pat==="string"){ return scope ? ("grep "+__clip(pat,60)+" in "+scope) : ("grep "+__clip(pat,100)); }',
+  "  }",
+  "  if(/^(glob|find)$/.test(n)){",
+  "    var gp=(obj.pattern!=null?obj.pattern:obj.glob);",
+  '    if(typeof gp==="string") return "glob "+__clip(gp,80);',
+  "  }",
+  "  if(/^tree$/.test(n)){",
+  '    var trp=typeof obj.path==="string"?obj.path:"";',
+  '    var trd=typeof obj.depth==="number"?obj.depth:null;',
+  '    return "tree "+(trp||".")+(trd!==null?(" (depth "+trd+")"):"");',
+  "  }",
+  "  if(/^diff$/.test(n)){",
+  '    var da=typeof obj.a==="string"?obj.a:"", db=typeof obj.b==="string"?obj.b:"";',
+  '    if(da||db) return "diff "+((da&&db)?(da+".."+db):(da||db));',
+  "    var dfl=[], dfi, dpi;",
+  '    if(Array.isArray(obj.files)){ for(dfi=0; dfi<obj.files.length; dfi++){ if(typeof obj.files[dfi]==="string") dfl.push(obj.files[dfi]); } }',
+  '    else if(typeof obj.files==="string"){ var dparts=obj.files.split(","); for(dpi=0; dpi<dparts.length; dpi++){ var dt=dparts[dpi].trim(); if(dt) dfl.push(dt); } }',
+  '    if(dfl.length===1) return "diff "+__clip(String(dfl[0]),80);',
+  '    if(dfl.length>1) return "diff "+dfl.length+" files";',
+  "  }",
+  "  if(/^replace$/.test(n)){",
+  '    var rpat=typeof obj.pattern==="string"?obj.pattern:"";',
+  "    if(rpat){",
+  '      var rscope="";',
+  '      if(typeof obj.files==="string"){',
+  "        var rparts=[], rsi;",
+  '        var rraw=obj.files.split(",");',
+  "        for(rsi=0; rsi<rraw.length; rsi++){ var rt=rraw[rsi].trim(); if(rt) rparts.push(rt); }",
+  '        rscope=rparts.length>1?(rparts.length+" files"):(rparts.length===1?rparts[0]:"");',
+  "      } else if(Array.isArray(obj.files) && obj.files.length>0){",
+  '        rscope=obj.files.length===1?String(obj.files[0]):(obj.files.length+" files");',
+  "      }",
+  '      return "replace "+__clip(rpat,60)+(rscope?(" in "+__clip(rscope,50)):"");',
+  "    }",
+  "  }",
+  "  if(/^(read|read_file|cat|view)$/.test(n)){",
+  "    fp=(obj.file_path!=null?obj.file_path:(obj.path!=null?obj.path:obj.filepath));",
+  '    if(typeof fp==="string" && fp){',
+  "      var off=obj.offset, lim=obj.limit;",
+  '      if(typeof off==="number" || typeof lim==="number"){ var start=(typeof off==="number"?off:0); var end=(typeof lim==="number"?(start+lim):""); return "read "+fp+" ("+start+"\\u2026"+end+")"; }',
+  '      return "read "+fp;',
+  "    }",
+  "  }",
+  '  var HEAD=["path","file_path","pattern","symbol","command","cmd","url","query","description","content"], hi;',
+  '  for(hi=0; hi<HEAD.length; hi++){ var hv=obj[HEAD[hi]]; if(typeof hv==="string" && hv.length>0){ return HEAD[hi]+": "+__clip(hv,100); } }',
+  "  var jsonStr; try{ jsonStr=JSON.stringify(raw); }catch(_e2){ jsonStr=String(raw); }",
+  "  return __clip(jsonStr,120);",
+  "}"
+].join("\n");
+
+export {
+  FALLBACK_HEAD_FIELDS,
+  summarizeToolInput,
+  SUMMARIZE_TOOL_INPUT_BROWSER_SRC
+};
+//# sourceMappingURL=chunk-S57CDR2H.js.map

package/dist/{chunk-W2CECGTG.js → chunk-SMARDKAC.js}

@@ -2118,4 +2118,4 @@ export {
   recordKanbanVerificationEvidence,
   kanbanTool
 };
-//# sourceMappingURL=chunk-W2CECGTG.js.map
+//# sourceMappingURL=chunk-SMARDKAC.js.map

package/dist/{chunk-QWKSKFKZ.js → chunk-SOR7OCYP.js}

@@ -1398,4 +1398,4 @@ export {
   browserTools,
   shutdownBrowserTools
 };
-//# sourceMappingURL=chunk-QWKSKFKZ.js.map
+//# sourceMappingURL=chunk-SOR7OCYP.js.map

package/dist/{chunk-I7FBZOEP.js → chunk-T3SMFF5Q.js}

@@ -2,7 +2,7 @@ import {
   executeLanguagePlan,
   executePackagePlan,
   planLanguageOperation
-} from "./chunk-NDIT3SBZ.js";
+} from "./chunk-7N5U2RAU.js";
 
 // src/languages/legacy-bridge.ts
 import * as fs from "node:fs/promises";
@@ -21,7 +21,11 @@ async function detectNonJsEcosystem(cwd, projectRoot) {
   try {
     let dir = path.resolve(cwd);
     const root = path.resolve(projectRoot);
-    for (let depth = 0; depth <= 4 && dir.startsWith(root); depth++) {
+    const isInsideOrSame = (d, r) => {
+      const rel = path.relative(r, d);
+      return rel === "" || !rel.startsWith("..") && !path.isAbsolute(rel);
+    };
+    for (let depth = 0; depth <= 4 && isInsideOrSame(dir, root); depth++) {
       for (const marker of NON_JS_MARKERS) {
         try {
           const s = await fs.stat(path.join(dir, marker.filename));
@@ -38,8 +42,10 @@ async function detectNonJsEcosystem(cwd, projectRoot) {
         }
       } catch {
       }
-      if (dir === root) break;
-      dir = path.dirname(dir);
+      if (path.relative(root, dir) === "") break;
+      const parent = path.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
     }
   } catch {
   }
@@ -98,4 +104,4 @@ export {
   tryLegacyCodeOperation,
   tryLegacyPackageOperation
 };
-//# sourceMappingURL=chunk-I7FBZOEP.js.map
+//# sourceMappingURL=chunk-T3SMFF5Q.js.map

package/dist/{chunk-4BHUSMNL.js → chunk-UI3ZJIG3.js}

@@ -101,4 +101,4 @@ ${mode.description}`
 export {
   createModeTool
 };
-//# sourceMappingURL=chunk-4BHUSMNL.js.map
+//# sourceMappingURL=chunk-UI3ZJIG3.js.map

package/dist/{chunk-WXJY3BKV.js → chunk-VBF2YXUW.js}

@@ -80,7 +80,7 @@ var batchToolUseTool = {
     if (input.calls.length > MAX_BATCH_CALLS) {
       throw new Error(`batch_tool_use: calls must contain at most ${MAX_BATCH_CALLS} items`);
     }
-    const governedExecute = ctx.meta[GOVERNED_TOOL_EXECUTOR_META_KEY];
+    const governedExecute = ctx.meta?.[GOVERNED_TOOL_EXECUTOR_META_KEY];
     if (typeof governedExecute !== "function") {
       return {
         results: input.calls.map((call) => ({
@@ -200,4 +200,4 @@ async function executeSingle(call, ctx, governedExecute) {
 export {
   batchToolUseTool
 };
-//# sourceMappingURL=chunk-WXJY3BKV.js.map
+//# sourceMappingURL=chunk-VBF2YXUW.js.map

package/dist/{chunk-FQNXYA6W.js → chunk-VU3QBYL4.js}

@@ -1,6 +1,6 @@
 import {
   compileUserRegex
-} from "./chunk-Q5JPPCZC.js";
+} from "./chunk-YJTXRH5Y.js";
 import {
   safeResolveReal
 } from "./chunk-ZUFHAHTE.js";
@@ -8,8 +8,9 @@ import {
 // src/logs.ts
 import { spawn } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
-import { buildChildEnv } from "@wrongstack/core/utils";
-import { ToolValidationError } from "@wrongstack/core/types";
+import * as fs from "node:fs/promises";
+import { buildChildEnv, toErrorMessage } from "@wrongstack/core/utils";
+import { FsError, ToolValidationError } from "@wrongstack/core/types";
 var logsTool = {
   name: "logs",
   category: "Logs",
@@ -86,7 +87,37 @@ var logsTool = {
       return await dockerLogs(input.service, lines, filterRe, cwd, signal, input.since);
     }
     if (input.path) {
-      return await fileLogs(await safeResolveReal(input.path, ctx), lines, filterRe);
+      const resolved = await safeResolveReal(input.path, ctx);
+      let stat2;
+      try {
+        stat2 = await fs.stat(resolved);
+      } catch (err) {
+        const code = err.code;
+        if (code === "ENOENT") {
+          throw new FsError({
+            message: `logs: file not found "${input.path}"`,
+            code: "FS_READ_FAILED",
+            path: resolved,
+            context: { errno: "ENOENT" }
+          });
+        }
+        throw new FsError({
+          message: `logs: failed to stat "${input.path}": ${toErrorMessage(err)}`,
+          code: "FS_READ_FAILED",
+          path: resolved,
+          context: { errno: code },
+          cause: err
+        });
+      }
+      if (!stat2.isFile()) {
+        throw new FsError({
+          message: `logs: "${input.path}" is not a regular file`,
+          code: "FS_READ_FAILED",
+          path: resolved,
+          context: { reason: "not-a-regular-file" }
+        });
+      }
+      return await fileLogs(resolved, lines, filterRe);
     }
     return {
       source: "none",
@@ -268,4 +299,4 @@ function parseLine(line) {
 export {
   logsTool
 };
-//# sourceMappingURL=chunk-FQNXYA6W.js.map
+//# sourceMappingURL=chunk-VU3QBYL4.js.map

package/dist/{chunk-VD2LV5WO.js → chunk-VZGPASGD.js}

@@ -1,7 +1,7 @@
 import {
   capSubject,
   compileUserRegex
-} from "./chunk-Q5JPPCZC.js";
+} from "./chunk-YJTXRH5Y.js";
 import {
   safeResolveReal
 } from "./chunk-ZUFHAHTE.js";
@@ -39,7 +39,7 @@ async function readJsonFileBounded(filePath, ctx) {
 var jsonTool = {
   name: "json",
   category: "Data",
-  description: "Parse, pretty-print, query, validate, transform, and merge JSON/JSON5/YAML. Use `action` to select the operation: parse (default), query, validate, transform, or merge.",
+  description: "Parse, pretty-print, query, validate, transform, and merge JSON/JSON5/YAML (read-only \u2014 does not write files). Use `action` to select the operation: parse (default), query, validate, transform, or merge.",
   usageHint: 'VERY USEFUL FOR DATA INSPECTION:\n\n- `action: "parse"` (default): read/pretty-print/convert JSON, JSON5, or YAML from `file` or `data`.\n- `action: "query"`: JMESPath-like query (`a.b[0].c`, `items[*].name`, filters, functions).\n- `action: "validate"`: validate data against a JSON Schema (`schema` param).\n- `action: "transform"`: chain multiple JMESPath transforms (`transforms` param).\n- `action: "merge"`: deep merge `base` and `patch` objects (`conflictResolution` param).\nPrefer this over raw `read` + manual parsing when dealing with configuration or data files.',
   permission: "auto",
   mutating: false,
@@ -444,20 +444,35 @@ function jmespathSearch(data, query) {
     if (rest === void 0) return val;
     return jmespathSearch(val, rest);
   }
-  const arrMatch = query.match(/^\[(\d+)\](?:\.(.+))?$/);
+  const propIdxMatch = query.match(/^([a-zA-Z_][a-zA-Z0-9_]*)\[(\d+)\](?:\.?(.*))?$/);
+  if (propIdxMatch) {
+    const key = propIdxMatch[1];
+    if (key === "__proto__" || key === "prototype" || key === "constructor") {
+      return void 0;
+    }
+    const idx = Number.parseInt(propIdxMatch[2], 10);
+    const rest = propIdxMatch[3] ? propIdxMatch[3] : void 0;
+    const arr = data?.[key];
+    if (!Array.isArray(arr)) return void 0;
+    const val = arr[idx];
+    if (rest === void 0) return val;
+    return jmespathSearch(val, rest);
+  }
+  const arrMatch = query.match(/^\[(\d+)\](?:\.?(.*))?$/);
   if (arrMatch) {
     const idx = Number.parseInt(arrMatch[1], 10);
-    const rest = arrMatch[2];
+    const rest = arrMatch[2] ? arrMatch[2] : void 0;
     const arr = data;
     const val = arr?.[idx];
     if (rest === void 0) return val;
     return jmespathSearch(val, rest);
   }
-  if (query === "[*]") {
-    if (Array.isArray(data)) {
-      return data;
-    }
-    return data;
+  const wildcardMatch = query.match(/^\[\*\](?:\.(.+))?$/);
+  if (wildcardMatch) {
+    if (!Array.isArray(data)) return [];
+    const rest = wildcardMatch[1];
+    if (rest === void 0) return data;
+    return data.map((item) => jmespathSearch(item, rest));
   }
   const multiMatch = query.match(/^([a-zA-Z_][a-zA-Z0-9_]*)\[\*\](?:\.(.+))?$/);
   if (multiMatch) {
@@ -469,14 +484,24 @@ function jmespathSearch(data, query) {
     return arr.map((item) => jmespathSearch(item, rest));
   }
   const filterMatch = query.match(
-    /^\[\\?([a-zA-Z_][a-zA-Z0-9_]*)(==|!=|<|>|<=|>=)(`[^`]+`|'[^']*')\](?:\.(.+))?$/
+    /^\[\??([a-zA-Z_][a-zA-Z0-9_]*)(==|!=|<|>|<=|>=)(`[^`]+`|'[^']*')\](?:\.(.+))?$/
   );
   if (filterMatch) {
     const field = filterMatch[1];
     const op = filterMatch[2];
     const rawVal = filterMatch[3];
     const rest = filterMatch[4];
-    const cmpVal = JSON.parse(rawVal.slice(1, -1));
+    let cmpVal;
+    if (rawVal.startsWith("'") && rawVal.endsWith("'")) {
+      cmpVal = rawVal.slice(1, -1);
+    } else {
+      const inner = rawVal.slice(1, -1);
+      try {
+        cmpVal = JSON.parse(inner);
+      } catch {
+        cmpVal = inner;
+      }
+    }
     const arr = data;
     if (!Array.isArray(arr)) return [];
     const filtered = arr.filter((item) => {
@@ -676,4 +701,4 @@ ${toYaml(v, indent + 1)}`;
 export {
   jsonTool
 };
-//# sourceMappingURL=chunk-VD2LV5WO.js.map
+//# sourceMappingURL=chunk-VZGPASGD.js.map

package/dist/{chunk-UZFY3CKD.js → chunk-WEEVSWQB.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyPackageOperation
-} from "./chunk-I7FBZOEP.js";
+} from "./chunk-T3SMFF5Q.js";
 import {
   spawnStream
-} from "./chunk-OYP27E3I.js";
+} from "./chunk-DRRY6SCM.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
@@ -117,7 +117,8 @@ var auditTool = {
       type: "final",
       output: parseAuditOutput(result.stdout, result.exitCode, {
         level: input.level,
-        spawnTruncated: result.truncated
+        spawnTruncated: result.truncated,
+        rawError: result.stderr || result.error || ""
       })
     };
   }
@@ -129,7 +130,7 @@ function parseAuditOutput(json, exitCode, opts = {}) {
       vulnerabilities: [],
       total: 0,
       summary: exitCode === 0 ? "No vulnerabilities found" : "Audit failed",
-      output: "",
+      output: normalizeCommandOutput(opts.rawError || ""),
       truncated: false
     };
   }
@@ -143,7 +144,17 @@ function parseAuditOutput(json, exitCode, opts = {}) {
       advisories = advisories.filter((a) => (SEVERITY_RANK[a.severity] ?? 0) >= minRank);
     }
     const total = advisories.length;
-    const summary = total === 0 ? "No vulnerabilities found" : `Found ${total} vulnerabilities: ${advisories.filter((a) => a.severity === "critical").length} critical, ${advisories.filter((a) => a.severity === "high").length} high`;
+    let summary;
+    if (total === 0) {
+      if (exitCode !== 0) {
+        const errObj = data.error;
+        summary = typeof errObj?.summary === "string" ? errObj.summary : typeof errObj?.code === "string" ? `Audit failed (${errObj.code})` : "Audit failed";
+      } else {
+        summary = "No vulnerabilities found";
+      }
+    } else {
+      summary = `Found ${total} vulnerabilities: ${advisories.filter((a) => a.severity === "critical").length} critical, ${advisories.filter((a) => a.severity === "high").length} high`;
+    }
     return {
       exit_code: exitCode,
       vulnerabilities: advisories,
@@ -209,4 +220,4 @@ function extractAdvisories(data) {
 export {
   auditTool
 };
-//# sourceMappingURL=chunk-UZFY3CKD.js.map
+//# sourceMappingURL=chunk-WEEVSWQB.js.map