@wrongstack/tools 0.77.0 → 0.84.1

package/dist/index.js

@@ -19,6 +19,12 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
+function expectDefined(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 async function detectPackageManager(cwd) {
   const { stat: stat10 } = await import('node:fs/promises');
   try {
@@ -108,9 +114,9 @@ function collapseConsecutiveDuplicates(text, minRun = REPEAT_RUN_THRESHOLD) {
     while (j < lines.length && lines[j] === lines[i]) j++;
     const run = j - i;
     if (run >= minRun) {
-      out.push(lines[i], `\u2026 \u27E8repeated ${run}\xD7\u27E9`);
+      out.push(expectDefined(lines[i]), `\u2026 \u27E8repeated ${run}\xD7\u27E9`);
     } else {
-      for (let k = i; k < j; k++) out.push(lines[k]);
+      for (let k = i; k < j; k++) out.push(expectDefined(lines[k]));
     }
     i = j;
   }
@@ -466,6 +472,12 @@ function capSubject(line) {
 }
 
 // src/replace.ts
+function expectDefined2(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var DEFAULT_IGNORE = ["node_modules", ".git", "dist", "build", ".next", "coverage"];
 var replaceTool = {
   name: "replace",
@@ -545,8 +557,8 @@ var replaceTool = {
       const count = matches.length;
       let newContentLf = contentLf;
       for (let i = matches.length - 1; i >= 0; i--) {
-        const m = matches[i];
-        newContentLf = newContentLf.slice(0, m.index) + input.replacement + newContentLf.slice(m.index + m[0].length);
+        const m = expectDefined2(matches[i]);
+        newContentLf = newContentLf.slice(0, m.index) + input.replacement + newContentLf.slice(expectDefined2(m.index) + m[0].length);
       }
       re.lastIndex = 0;
       totalReplacements += count;
@@ -747,6 +759,12 @@ async function readGitignore(dir) {
     return [];
   }
 }
+function expectDefined3(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var DEFAULT_IGNORE3 = ["node_modules", ".git", "dist", "build", ".next", "coverage"];
 var grepTool = {
   name: "grep",
@@ -795,7 +813,9 @@ var grepTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of grepTool.executeStream(input, ctx, opts)) {
+    const executeStream = grepTool.executeStream;
+    if (!executeStream) throw new Error("grepTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("grep: stream ended without final event");
@@ -886,7 +906,7 @@ async function* runRgStream(input, base, mode, limit, signal) {
         waiter = r;
       });
     }
-    const c = queue.shift();
+    const c = expectDefined3(queue.shift());
     if (c.kind === "error") {
       errored = true;
       continue;
@@ -1178,6 +1198,12 @@ var CircuitBreaker = class {
 };
 
 // src/process-registry.ts
+function expectDefined4(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var SENSITIVE_FLAG_PATTERNS = [
   // --flag=value  or  --flag "value"  (value captured up to next space or comma)
   /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\s,][^\s]*)?/gi,
@@ -1198,7 +1224,7 @@ function redactCommand(cmd) {
       const sp = match.search(/\s/);
       const delim = eq !== -1 ? "=" : sp !== -1 ? match[sp] : null;
       if (delim !== null) {
-        const flag = match.slice(0, match.indexOf(delim) + 1);
+        const flag = match.slice(0, match.indexOf(expectDefined4(delim)) + 1);
         return `${flag}[REDACTED]`;
       }
       const flagEnd = match.match(/^--?[a-zA-Z][a-zA-Z0-9_-]*/)?.[0] ?? match;
@@ -1381,7 +1407,7 @@ function _resetProcessRegistry() {
 
 // src/bash.ts
 var MAX_OUTPUT = 32768;
-var DEFAULT_TIMEOUT = 3e4;
+var DEFAULT_TIMEOUT_MS = 3e4;
 var STREAM_FLUSH_INTERVAL_MS = 200;
 var STREAM_FLUSH_BYTES = 4 * 1024;
 var bashTool = {
@@ -1420,7 +1446,9 @@ var bashTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of bashTool.executeStream(input, ctx, opts)) {
+    const executeStream = bashTool.executeStream;
+    if (!executeStream) throw new Error("bashTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("bash: stream ended without final event");
@@ -1442,9 +1470,19 @@ var bashTool = {
       };
       return;
     }
-    const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT, 6e5));
+    const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT_MS, 6e5));
     const isWin = os.platform() === "win32";
-    const shell = isWin ? process.env["COMSPEC"] ?? "cmd.exe" : process.env["SHELL"] ?? "/bin/bash";
+    const shell = (() => {
+      const explicit = process.env[isWin ? "WRONGSTACK_COMSPEC" : "WRONGSTACK_SHELL"];
+      if (explicit) return explicit;
+      if (isWin) return process.env["COMSPEC"] ?? "cmd.exe";
+      const fromEnv = process.env["SHELL"];
+      if (fromEnv) {
+        const name = fromEnv.split("/").pop() ?? "";
+        if (["bash", "zsh", "sh", "dash", "fish"].includes(name)) return fromEnv;
+      }
+      return "/bin/bash";
+    })();
     const args = isWin ? ["/c", input.command] : ["-c", input.command];
     const env = buildChildEnv(ctx.session?.id);
     const detached = isWin ? !!input.background : true;
@@ -1689,7 +1727,7 @@ var ALLOWED_COMMANDS = {
 };
 var MAX_ARGS = 20;
 var MAX_OUTPUT2 = 2e5;
-var TIMEOUT_MS = 3e4;
+var DEFAULT_TIMEOUT_MS2 = 3e4;
 var BLOCKED_ARG_PATTERNS = {
   // python -c/--command executes arbitrary code; python -m runs modules
   python: [/-c$/, /^--command$/, /^-m$/, /^--module$/],
@@ -1752,7 +1790,7 @@ var execTool = {
   permission: "confirm",
   mutating: true,
   riskTier: "standard",
-  timeoutMs: TIMEOUT_MS,
+  timeoutMs: DEFAULT_TIMEOUT_MS2,
   capabilities: ["shell.restricted"],
   inputSchema: {
     type: "object",
@@ -1813,7 +1851,7 @@ var execTool = {
       };
     }
     const args = (input.args ?? []).slice(0, MAX_ARGS);
-    const timeout = Math.max(1, Math.min(input.timeout ?? TIMEOUT_MS, TIMEOUT_MS));
+    const timeout = Math.max(1, Math.min(input.timeout ?? DEFAULT_TIMEOUT_MS2, DEFAULT_TIMEOUT_MS2));
     const argError = validateArgs(cmd, args);
     if (argError) {
       return {
@@ -1906,8 +1944,21 @@ function runCommand(cmd, args, cwd, timeout, signal, sessionId) {
   });
 }
 var MAX_BYTES2 = 131072;
-var TIMEOUT_MS2 = 2e4;
+var TIMEOUT_MS = 2e4;
 var ALLOW_PRIVATE = process.env["WRONGSTACK_FETCH_ALLOW_PRIVATE"] === "1";
+function combineSignals(signals) {
+  const anyFn = AbortSignal.any;
+  if (typeof anyFn === "function") return anyFn(signals);
+  const ctrl = new AbortController();
+  for (const sig of signals) {
+    if (sig.aborted) {
+      ctrl.abort(sig.reason);
+      return ctrl.signal;
+    }
+    sig.addEventListener("abort", () => ctrl.abort(sig.reason), { once: true });
+  }
+  return ctrl.signal;
+}
 function guardedLookup(hostname, options, callback) {
   dns.lookup(hostname, { all: true }).then((records) => {
     const family = options?.family;
@@ -1950,6 +2001,10 @@ function getPinnedDispatcher() {
   }
   return pinnedAgent;
 }
+process.on("beforeExit", () => {
+  pinnedAgent?.destroy();
+  pinnedAgent = void 0;
+});
 async function guardedFetch(url, maxRedirects, signal, headers = {
   "user-agent": "WrongStack/1.0 (+https://wrongstack.com)",
   accept: "text/html,application/json;q=0.9,text/plain;q=0.8,*/*;q=0.1"
@@ -1999,7 +2054,7 @@ var fetchTool = {
   // matching that pattern on any other tool that happens to have a `url`
   // input field.
   subjectKey: "url",
-  timeoutMs: TIMEOUT_MS2,
+  timeoutMs: TIMEOUT_MS,
   maxOutputBytes: MAX_BYTES2,
   inputSchema: {
     type: "object",
@@ -2018,7 +2073,9 @@ var fetchTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of fetchTool.executeStream(input, ctx, opts)) {
+    const executeStream = fetchTool.executeStream;
+    if (!executeStream) throw new Error("fetchTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("fetch: stream ended without final event");
@@ -2036,8 +2093,8 @@ var fetchTool = {
     await assertNotPrivate(u.hostname);
     yield { type: "log", text: `GET ${input.url}` };
     const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(new Error("fetch timeout")), TIMEOUT_MS2);
-    const combined = combineSignals(opts.signal, ctrl.signal);
+    const timer = setTimeout(() => ctrl.abort(new Error("fetch timeout")), TIMEOUT_MS);
+    const combined = combineSignals([opts.signal, ctrl.signal]);
     try {
       const res = await guardedFetch(input.url, 5, combined);
       const ct = res.headers.get("content-type") ?? "application/octet-stream";
@@ -2185,33 +2242,6 @@ function expandIPv6(addr) {
   if (fill < 0) return null;
   return [...head, ...new Array(fill).fill(0), ...tail];
 }
-function combineSignals(...sigs) {
-  const anyFn = AbortSignal.any;
-  if (typeof anyFn === "function") {
-    return anyFn(sigs);
-  }
-  const ctrl = new AbortController();
-  const cleanups = [];
-  const detach = () => {
-    for (const fn of cleanups) fn();
-    cleanups.length = 0;
-  };
-  for (const s of sigs) {
-    if (s.aborted) {
-      detach();
-      ctrl.abort(s.reason);
-      return ctrl.signal;
-    }
-    const onAbort = () => {
-      detach();
-      ctrl.abort(s.reason);
-    };
-    s.addEventListener("abort", onAbort, { once: true });
-    cleanups.push(() => s.removeEventListener("abort", onAbort));
-  }
-  ctrl.signal.addEventListener("abort", detach, { once: true });
-  return ctrl.signal;
-}
 function prettyJson(s) {
   try {
     return JSON.stringify(JSON.parse(s), null, 2);
@@ -2247,9 +2277,15 @@ function stripTags(s) {
 }
 
 // src/search.ts
+function expectDefined5(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var DEFAULT_NUM = 10;
 var MAX_RESULTS = 50;
-var TIMEOUT_MS3 = 15e3;
+var TIMEOUT_MS2 = 15e3;
 var searchTool = {
   name: "search",
   category: "Search",
@@ -2258,7 +2294,7 @@ var searchTool = {
   permission: "confirm",
   mutating: false,
   capabilities: ["net.outbound"],
-  timeoutMs: TIMEOUT_MS3,
+  timeoutMs: TIMEOUT_MS2,
   inputSchema: {
     type: "object",
     properties: {
@@ -2279,7 +2315,9 @@ var searchTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of searchTool.executeStream(input, ctx, opts)) {
+    const executeStream = searchTool.executeStream;
+    if (!executeStream) throw new Error("searchTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("search: stream ended without final event");
@@ -2319,7 +2357,7 @@ var searchTool = {
 async function duckduckgoSearch(query2, num, signal) {
   const encoded = encodeURIComponent(query2);
   const url = `https://lite.duckduckgo.com/lite/?q=${encoded}&kd=-1&kl=wt-wt`;
-  const results = await fetchWithTimeout(url, signal, TIMEOUT_MS3).then((r) => r.text()).then((html) => parseDuckDuckGo(html, num)).catch(() => [{ title: "Search unavailable", url: "", snippet: "Could not reach DuckDuckGo" }]);
+  const results = await fetchWithTimeout(url, signal, TIMEOUT_MS2).then((r) => r.text()).then((html) => parseDuckDuckGo(html, num)).catch(() => [{ title: "Search unavailable", url: "", snippet: "Could not reach DuckDuckGo" }]);
   return {
     query: query2,
     results,
@@ -2340,11 +2378,11 @@ function parseDuckDuckGo(html, num) {
   const snippetRegex = /<a class="result-link"[^>]+href="([^"]+)"[^>]*>([^<]+)<\/a>/gi;
   const snippet2Regex = /<a class="result-snippet"[^>]*>([^<]+)<\/a>/gi;
   const linkMatches = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: m[1], title: stripTags2(m[2]) })),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined5(m[1]), title: stripTags2(expectDefined5(m[2])) })),
     num
   );
   const snippetMatches = takeFrom(
-    [...html.matchAll(snippet2Regex)].filter((m) => m[1]).map((m) => stripTags2(m[1])),
+    [...html.matchAll(snippet2Regex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined5(m[1]))),
     num
   );
   for (let i = 0; i < linkMatches.length && i < num; i++) {
@@ -2360,7 +2398,7 @@ function parseDuckDuckGo(html, num) {
 async function googleSearch(query2, num, signal) {
   const encoded = encodeURIComponent(query2);
   const url = `https://www.google.com/search?q=${encoded}&hl=en`;
-  const html = await fetchWithTimeout(url, signal, TIMEOUT_MS3).then((r) => r.text()).catch(() => "");
+  const html = await fetchWithTimeout(url, signal, TIMEOUT_MS2).then((r) => r.text()).catch(() => "");
   const results = parseGoogleResults(html, num);
   return {
     query: query2,
@@ -2375,15 +2413,15 @@ function parseGoogleResults(html, num) {
   const urlRegex = /<cite[^>]*>([^<]+)<\/cite>/gi;
   const snippetRegex = /<span[^>]*class="[^"]*aXCZ0b[^>]*>([^<]+)<\/span>/gi;
   const titles = takeFrom(
-    [...html.matchAll(titleRegex)].filter((m) => m[1]).map((m) => stripTags2(m[1])),
+    [...html.matchAll(titleRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined5(m[1]))),
     num
   );
   const urls = takeFrom(
-    [...html.matchAll(urlRegex)].filter((m) => m[1]).map((m) => stripTags2(m[1]).replace(/^\*(https?:\/\/[^\s]+).*$/, "$1")).filter((u) => u.startsWith("http")),
+    [...html.matchAll(urlRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined5(m[1])).replace(/^\*(https?:\/\/[^\s]+).*$/, "$1")).filter((u) => u.startsWith("http")),
     num
   );
   const snippets = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(m[1])),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined5(m[1]))),
     num
   );
   for (let i = 0; i < Math.min(titles.length, num); i++) {
@@ -2398,7 +2436,7 @@ function parseGoogleResults(html, num) {
 async function bingSearch(query2, num, signal) {
   const encoded = encodeURIComponent(query2);
   const url = `https://www.bing.com/search?q=${encoded}`;
-  const html = await fetchWithTimeout(url, signal, TIMEOUT_MS3).then((r) => r.text()).catch(() => "");
+  const html = await fetchWithTimeout(url, signal, TIMEOUT_MS2).then((r) => r.text()).catch(() => "");
   const results = parseBingResults(html, num);
   return {
     query: query2,
@@ -2412,11 +2450,11 @@ function parseBingResults(html, num) {
   const titleRegex = /<h2[^>]*>\s*<a[^>]+href="([^"]+)"[^>]*>([^<]+)<\/a>\s*<\/h2>/gi;
   const snippetRegex = /<p[^>]*class="[^"]*b_paractl[^"]*"[^>]*>([^<]+)<\/p>/gi;
   const entries = takeFrom(
-    [...html.matchAll(titleRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: m[1], title: stripTags2(m[2]) })),
+    [...html.matchAll(titleRegex)].filter((m) => m[1] && m[2]).map((m) => ({ url: expectDefined5(m[1]), title: stripTags2(expectDefined5(m[2])) })),
     num
   );
   const snippets = takeFrom(
-    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(m[1])),
+    [...html.matchAll(snippetRegex)].filter((m) => m[1]).map((m) => stripTags2(expectDefined5(m[1]))),
     num
   );
   for (let i = 0; i < entries.length; i++) {
@@ -2678,16 +2716,17 @@ var planTool = {
 };
 function mkResult(plan, ok, message, todos) {
   const open = plan.items.filter((i) => i.status !== "done").length;
-  return {
+  const result = {
     ok,
     message,
     plan: formatPlan(plan),
     count: plan.items.length,
-    open,
-    todos
+    open
   };
+  if (todos !== void 0) result.todos = todos;
+  return result;
 }
-var TIMEOUT_MS4 = 3e4;
+var TIMEOUT_MS3 = 3e4;
 var MAX_OUTPUT3 = 1e5;
 var gitTool = {
   name: "git",
@@ -2700,7 +2739,7 @@ var gitTool = {
   // and `MUTATING_SUBCOMMANDS` is consulted at runtime for per-call checks.
   mutating: true,
   capabilities: ["fs.write", "shell.restricted"],
-  timeoutMs: TIMEOUT_MS4,
+  timeoutMs: TIMEOUT_MS3,
   inputSchema: {
     type: "object",
     properties: {
@@ -3306,6 +3345,12 @@ function formatWithLineNumbers(file, lines) {
   return `--- ${file} (line-numbered dump, not a unified diff) ---
 ${numbered}`;
 }
+function expectDefined6(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var DEFAULT_IGNORE4 = [
   "node_modules",
   ".git",
@@ -3366,7 +3411,9 @@ var treeTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of treeTool.executeStream(input, ctx, opts)) {
+    const executeStream = treeTool.executeStream;
+    if (!executeStream) throw new Error("treeTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("tree: stream ended without final event");
@@ -3416,7 +3463,7 @@ var treeTool = {
     });
     while (!walkDone || queue.length > 0) {
       if (queue.length > 0) {
-        yield queue.shift();
+        yield expectDefined6(queue.shift());
       } else {
         let pollTimer;
         const poll = new Promise((r) => {
@@ -3481,6 +3528,12 @@ async function walkDir(dir, depth, opts) {
     }
   }
 }
+function expectDefined7(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 async function* spawnStream(opts) {
   const max = opts.maxBytes ?? 2e5;
   const flushAt = opts.flushBytes ?? 4 * 1024;
@@ -3532,7 +3585,7 @@ async function* spawnStream(opts) {
         waiter = resolve7;
       });
     }
-    const chunk = queue.shift();
+    const chunk = expectDefined7(queue.shift());
     if (chunk.kind === "close") {
       if (!spawnFailed) exitCode = chunk.code ?? 0;
       break;
@@ -3587,7 +3640,9 @@ var lintTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of lintTool.executeStream(input, ctx, opts)) {
+    const executeStream = lintTool.executeStream;
+    if (!executeStream) throw new Error("lintTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("lint: stream ended without final event");
@@ -3683,7 +3738,9 @@ var formatTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of formatTool.executeStream(input, ctx, opts)) {
+    const executeStream = formatTool.executeStream;
+    if (!executeStream) throw new Error("formatTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("format: stream ended without final event");
@@ -3776,7 +3833,9 @@ var typecheckTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of typecheckTool.executeStream(input, ctx, opts)) {
+    const executeStream = typecheckTool.executeStream;
+    if (!executeStream) throw new Error("typecheckTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("typecheck: stream ended without final event");
@@ -3860,7 +3919,9 @@ var testTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of testTool.executeStream(input, ctx, opts)) {
+    const executeStream = testTool.executeStream;
+    if (!executeStream) throw new Error("testTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("test: stream ended without final event");
@@ -4017,7 +4078,9 @@ var installTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of installTool.executeStream(input, ctx, opts)) {
+    const executeStream = installTool.executeStream;
+    if (!executeStream) throw new Error("installTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("install: stream ended without final event");
@@ -4108,7 +4171,9 @@ var auditTool = {
   },
   async execute(input, ctx, opts) {
     let final;
-    for await (const ev of auditTool.executeStream(input, ctx, opts)) {
+    const executeStream = auditTool.executeStream;
+    if (!executeStream) throw new Error("auditTool: stream execution unavailable");
+    for await (const ev of executeStream(input, ctx, opts)) {
       if (ev.type === "final") final = ev.output;
     }
     if (!final) throw new Error("audit: stream ended without final event");
@@ -5361,6 +5426,12 @@ function lspKindToInternalKind(k) {
 }
 
 // src/codebase-index/writer.ts
+function expectDefined8(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var DB_FILE = "index.db";
 function resolveIndexDir(projectRoot, override) {
   return override ?? resolveWstackPaths({ projectRoot }).projectCodebaseIndex;
@@ -5505,7 +5576,7 @@ var IndexStore = class {
       "SELECT file, lang, mtime_ms, symbol_count, last_indexed FROM files WHERE file = ?"
     ).all(file);
     if (!rows.length) return null;
-    const r = rows[0];
+    const r = expectDefined8(rows[0]);
     return { file: r.file, lang: r.lang, mtimeMs: r.mtime_ms, symbolCount: r.symbol_count, lastIndexed: r.last_indexed };
   }
   getAllFileMetas() {
@@ -5587,7 +5658,7 @@ var IndexStore = class {
     const lastRows = this.db.prepare(
       "SELECT value FROM metadata WHERE key = 'last_indexed'"
     ).all();
-    const lastIndexed = lastRows.length ? Number(lastRows[0].value) : null;
+    const lastIndexed = lastRows.length ? Number(lastRows[0]?.value) : null;
     const totalRows = this.db.prepare("SELECT COUNT(*) FROM symbols").all();
     const totalSymbols = totalRows[0] ? Number(totalRows[0]["COUNT(*)"]) : 0;
     const fileRows = this.db.prepare("SELECT COUNT(*) FROM files").all();
@@ -5662,8 +5733,9 @@ var IndexStore = class {
     let resolved = 0;
     for (const row of unresolved) {
       const target = this.db.prepare("SELECT id FROM symbols WHERE name = ? LIMIT 1").all(row.to_name);
-      if (target.length) {
-        this.db.prepare("UPDATE refs SET to_id = ? WHERE id = ?").run(target[0].id, row.id);
+      const first = target[0];
+      if (first) {
+        this.db.prepare("UPDATE refs SET to_id = ? WHERE id = ?").run(first.id, row.id);
         resolved++;
       }
     }
@@ -6417,6 +6489,12 @@ function syncPyParse(filePath, lang) {
     return { file: filePath, lang, symbols: [], mtimeMs: Date.now() };
   }
 }
+function expectDefined9(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 function parseSymbols4(opts) {
   const { file, content, lang } = opts;
   const nativeAvailable = checkNativeParser();
@@ -6498,14 +6576,14 @@ function regexParse(opts) {
   const lines = content.split("\n");
   const lineOffsets = [0];
   for (let i = 0; i < lines.length; i++) {
-    lineOffsets.push(lineOffsets[i] + lines[i].length + 1);
+    lineOffsets.push((lineOffsets[i] ?? 0) + (lines[i]?.length ?? 0) + 1);
   }
   function lineFromOffset(offset) {
     let lo = 0;
     let hi = lineOffsets.length - 1;
     while (lo < hi) {
       const mid = lo + hi + 1 >>> 1;
-      if (lineOffsets[mid] <= offset) lo = mid;
+      if (expectDefined9(lineOffsets[mid]) <= offset) lo = mid;
       else hi = mid - 1;
     }
     return lo + 1;
@@ -6517,8 +6595,8 @@ function regexParse(opts) {
   for (const pattern of RS_PATTERNS) {
     pattern.regex.lastIndex = 0;
     for (let match = pattern.regex.exec(content); match !== null; match = pattern.regex.exec(content)) {
-      const name = match[1];
-      const offset = match.index;
+      const name = expectDefined9(match[1]);
+      const offset = match.index ?? 0;
       const line = lineFromOffset(offset);
       const col = offset - (lineOffsets[line - 1] ?? 0);
       const lineIdx = line - 1;
@@ -6547,6 +6625,12 @@ function regexParse(opts) {
   });
   return { file, lang, symbols: deduped, mtimeMs: Date.now() };
 }
+function expectDefined10(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 function parseSymbols5(opts) {
   const { file, content, lang } = opts;
   try {
@@ -6566,21 +6650,21 @@ function regexParse2(opts) {
   const lines = content.split("\n");
   const lineOffsets = [0];
   for (let i = 0; i < lines.length; i++) {
-    lineOffsets.push(lineOffsets[i] + lines[i].length + 1);
+    lineOffsets.push((lineOffsets[i] ?? 0) + (lines[i]?.length ?? 0) + 1);
   }
   function lineFromOffset(offset) {
     let lo = 0;
     let hi = lineOffsets.length - 1;
     while (lo < hi) {
       const mid = lo + hi + 1 >>> 1;
-      if (lineOffsets[mid] <= offset) lo = mid;
+      if (expectDefined10(lineOffsets[mid]) <= offset) lo = mid;
       else hi = mid - 1;
     }
     return lo + 1;
   }
   const rootMatch = content.match(/^\s*\{/m);
   if (rootMatch) {
-    const offset = rootMatch.index;
+    const offset = expectDefined10(rootMatch.index);
     const line = lineFromOffset(offset);
     symbols.push(
       makeSymbol({
@@ -6596,8 +6680,8 @@ function regexParse2(opts) {
   }
   const topLevelKeyRegex = /^\s*"([^"]+)"\s*:/gm;
   for (let match = topLevelKeyRegex.exec(content); match !== null; match = topLevelKeyRegex.exec(content)) {
-    const key = match[1];
-    const offset = match.index;
+    const key = expectDefined10(match[1]);
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
     let kind = "property";
@@ -6643,7 +6727,7 @@ function regexParse2(opts) {
   const defsRegex = /"\$defs"\s*:|"\$defs"\s*:/g;
   const defsMatch = defsRegex.exec(content);
   if (defsMatch !== null) {
-    const offset = defsMatch.index;
+    const offset = expectDefined10(defsMatch.index);
     const line = lineFromOffset(offset);
     symbols.push(
       makeSymbol({
@@ -6666,9 +6750,9 @@ function regexParse2(opts) {
   for (const pat of defsPatterns) {
     pat.lastIndex = 0;
     for (let match = pat.exec(content); match !== null; match = pat.exec(content)) {
-      const offset = match.index;
+      const offset = match.index ?? 0;
       const line = lineFromOffset(offset);
-      const key = match[0].match(/"([^"]+)"/)?.[1] ?? match[0];
+      const key = match[0]?.match(/"([^"]+)"/)?.[1] ?? expectDefined10(match[0]);
       symbols.push(
         makeSymbol({
           name: key,
@@ -6687,12 +6771,12 @@ function regexParse2(opts) {
 function extractPackageScripts(content, symbols, file, lang, lineOffsets, lineFromOffset) {
   const scriptsBlockRegex = /"scripts"\s*:\s*\{([^}]+)\}/g;
   for (let match = scriptsBlockRegex.exec(content); match !== null; match = scriptsBlockRegex.exec(content)) {
-    const blockContent = match[0];
-    const blockOffset = match.index;
+    const blockContent = expectDefined10(match[0]);
+    const blockOffset = match.index ?? 0;
     const scriptKeyRegex = /"(\w[\w-]*)"\s*:/g;
     for (let scriptMatch = scriptKeyRegex.exec(blockContent); scriptMatch !== null; scriptMatch = scriptKeyRegex.exec(blockContent)) {
-      const key = scriptMatch[1];
-      const keyOffset = blockOffset + scriptMatch.index;
+      const key = expectDefined10(scriptMatch[1]);
+      const keyOffset = blockOffset + expectDefined10(scriptMatch.index);
       const line = lineFromOffset(keyOffset);
       symbols.push(
         makeSymbol({
@@ -6711,12 +6795,12 @@ function extractPackageScripts(content, symbols, file, lang, lineOffsets, lineFr
 function extractCompilerOptions(content, symbols, file, lang, lineOffsets, parentLine, lineFromOffset) {
   const optsBlockRegex = /"compilerOptions"\s*:\s*\{([^}]+)\}/g;
   for (let match = optsBlockRegex.exec(content); match !== null; match = optsBlockRegex.exec(content)) {
-    const blockContent = match[0];
-    const blockOffset = match.index;
+    const blockContent = expectDefined10(match[0]);
+    const blockOffset = match.index ?? 0;
     const optKeyRegex = /"(\w[\w]*)"\s*:/g;
     for (let optMatch = optKeyRegex.exec(blockContent); optMatch !== null; optMatch = optKeyRegex.exec(blockContent)) {
-      const key = optMatch[1];
-      const keyOffset = blockOffset + optMatch.index;
+      const key = expectDefined10(optMatch[1]);
+      const keyOffset = blockOffset + expectDefined10(optMatch.index);
       const line = lineFromOffset(keyOffset);
       if (line <= parentLine) continue;
       symbols.push(
@@ -6750,6 +6834,12 @@ function makeSymbol(opts) {
 }
 
 // src/codebase-index/yaml-parser.ts
+function expectDefined11(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 function parseSymbols6(opts) {
   const { file, content, lang } = opts;
   try {
@@ -6764,22 +6854,22 @@ function regexParse3(opts) {
   const lines = content.split("\n");
   const lineOffsets = [0];
   for (let i = 0; i < lines.length; i++) {
-    lineOffsets.push(lineOffsets[i] + lines[i].length + 1);
+    lineOffsets.push((lineOffsets[i] ?? 0) + (lines[i]?.length ?? 0) + 1);
   }
   function lineFromOffset(offset) {
     let lo = 0;
     let hi = lineOffsets.length - 1;
     while (lo < hi) {
       const mid = lo + hi + 1 >>> 1;
-      if (lineOffsets[mid] <= offset) lo = mid;
+      if (expectDefined11(lineOffsets[mid]) <= offset) lo = mid;
       else hi = mid - 1;
     }
     return lo + 1;
   }
   const anchorRegex = /&(\w[\w-]*)/g;
   for (let match = anchorRegex.exec(content); match !== null; match = anchorRegex.exec(content)) {
-    const name = match[1];
-    const offset = match.index;
+    const name = expectDefined11(match[1]);
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
     symbols.push(
@@ -6796,8 +6886,8 @@ function regexParse3(opts) {
   }
   const aliasRegex = /\*(\w[\w-]*)/g;
   for (let match = aliasRegex.exec(content); match !== null; match = aliasRegex.exec(content)) {
-    const name = match[1];
-    const offset = match.index;
+    const name = expectDefined11(match[1]);
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
     symbols.push(
@@ -6814,27 +6904,28 @@ function regexParse3(opts) {
   }
   const kvRegex = /^(\s*)([^:#\s][^:#\s]*)\s*:/gm;
   for (let match = kvRegex.exec(content); match !== null; match = kvRegex.exec(content)) {
-    const indent = match[1].length;
+    const indent = match[1]?.length ?? 0;
     const key = match[2];
-    const offset = match.index;
+    if (!key) continue;
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
     const lineContent = lines[line - 1] ?? "";
     if (/^[|&>]/.test(lineContent.trim())) continue;
     if (key === "---" || key === "...") continue;
     if (indent > 12) continue;
-    const value = extractValue(content, match.index);
+    const value = extractValue(content, match.index ?? 0);
     const kind = isScalar(value) ? "literal" : "property";
     const signature = `${key}: ${truncate(value, 60)}`;
     symbols.push(makeSymbol2({ name: key, kind, line, col, signature, file, lang }));
   }
   const listItemRegex = /^-(\s+)([^:#\s][^:#\s]*)\s*:/gm;
   for (let match = listItemRegex.exec(content); match !== null; match = listItemRegex.exec(content)) {
-    const key = match[2];
-    const offset = match.index;
+    const key = expectDefined11(match[2]);
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
-    const value = extractValue(content, offset + match[0].length);
+    const value = extractValue(content, offset + match[0]?.length);
     const kind = isScalar(value) ? "literal" : "property";
     symbols.push(
       makeSymbol2({
@@ -6850,8 +6941,8 @@ function regexParse3(opts) {
   }
   const blockScalarRegex = /^(\s*)([^:#\s][^:#\s]*)\s*:\s*[|>](\s|$)/gm;
   for (let match = blockScalarRegex.exec(content); match !== null; match = blockScalarRegex.exec(content)) {
-    const key = match[2];
-    const offset = match.index;
+    const key = expectDefined11(match[2]);
+    const offset = match.index ?? 0;
     const line = lineFromOffset(offset);
     const col = offset - (lineOffsets[line - 1] ?? 0);
     symbols.push(
@@ -7070,6 +7161,12 @@ function cancelPendingReindexes() {
 }
 
 // src/codebase-index/indexer.ts
+function expectDefined12(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var YIELD_EVERY_N = 50;
 function yieldEventLoop() {
   return new Promise((resolve7) => setImmediate(resolve7));
@@ -7178,7 +7275,7 @@ async function runIndexer(_ctx, opts) {
     for (const meta of store.getAllFileMetas()) existingMeta.set(meta.file, meta);
   }
   for (let fi = 0; fi < files.length; fi++) {
-    const file = files[fi];
+    const file = expectDefined12(files[fi]);
     _setIndexProgress(fi + 1, files.length);
     if (fi > 0 && fi % YIELD_EVERY_N === 0) {
       await yieldEventLoop();
@@ -7235,7 +7332,7 @@ async function runIndexer(_ctx, opts) {
     langStats[lang] = (langStats[lang] ?? 0) + count;
     if (parsed.refs && parsed.refs.length > 0) {
       for (let i = 0; i < symbolsWithIds.length; i++) {
-        const sym = symbolsWithIds[i];
+        const sym = expectDefined12(symbolsWithIds[i]);
         const symRefs = parsed.refs.filter((r) => r.line === sym.line);
         if (symRefs.length > 0) {
           const refsWithFromId = symRefs.map((r) => ({ ...r, fromId: sym.id }));
@@ -7406,6 +7503,12 @@ var Bm25Index = class {
 };
 
 // src/codebase-index/codebase-search-tool.ts
+function expectDefined13(value) {
+  if (value === null || value === void 0) {
+    throw new Error("Expected value to be defined");
+  }
+  return value;
+}
 var codebaseSearchTool = {
   name: "codebase-search",
   category: "Project",
@@ -7495,7 +7598,7 @@ var codebaseSearchTool = {
       const top = scored.slice(0, limit);
       const qTokens = tokenise(input.query);
       const results = top.map(({ id, score }) => {
-        const c = candidates.find((c2) => c2.id === id);
+        const c = expectDefined13(candidates.find((c2) => c2.id === id));
         const snippet = bm25.extractSnippet(id, qTokens);
         return {
           ...c,