@wrongstack/tools 1.0.2 → 1.0.3

package/dist/_win32-resolve.d.ts

@@ -1,3 +1,4 @@
+export { buildWin32CmdShimInvocation, type Win32CmdShimInvocation, } from '@wrongstack/core/utils';
 /**
  * On Windows, Node.js `spawn()` without a shell does NOT resolve .cmd/.bat
  * extensions through PATHEXT — it only auto-resolves .exe. Most Node.js CLI
@@ -28,15 +29,9 @@ export declare function resolveWin32Command(cmd: string): string;
  * diagnostic. We never throw from here.
  */
 export declare function resolvePowerShell(cmd: string): string;
-export interface Win32CmdShimInvocation {
-    command: string;
-    args: string[];
-    windowsVerbatimArguments: true;
-}
 /**
  * Throw if any argument contains a cmd.exe command-injection metacharacter.
  * Call this ONLY on the Windows `.cmd`/`.bat` shim path. A no-op for safe args.
  */
 export declare function assertSafeWin32ShellArgs(args: readonly unknown[]): void;
-export declare function buildWin32CmdShimInvocation(command: string, args?: readonly string[]): Win32CmdShimInvocation;
 //# sourceMappingURL=_win32-resolve.d.ts.map

package/dist/audit.js

@@ -1,13 +1,13 @@
 import {
   auditTool
-} from "./chunk-WEEVSWQB.js";
-import "./chunk-T3SMFF5Q.js";
-import "./chunk-7N5U2RAU.js";
-import "./chunk-DRRY6SCM.js";
+} from "./chunk-KIQTABBJ.js";
+import "./chunk-GU7QJ37F.js";
+import "./chunk-3LS3FYEF.js";
+import "./chunk-EMA2XENR.js";
 import "./chunk-SCMRM6NL.js";
 import "./chunk-HDYUBRMF.js";
 import "./chunk-7JJFC6CT.js";
-import "./chunk-KE7A76VC.js";
+import "./chunk-5U5ULQX2.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   auditTool

package/dist/bash.js

@@ -1,12 +1,12 @@
 import {
   bashTool
-} from "./chunk-6H4ERJP7.js";
+} from "./chunk-KYVOTHG7.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";
 import "./chunk-HDYUBRMF.js";
 import "./chunk-7JJFC6CT.js";
-import "./chunk-KE7A76VC.js";
+import "./chunk-5U5ULQX2.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   bashTool

package/dist/builtin.js

@@ -6,68 +6,68 @@ import {
   TIER2_TOOLS,
   TIER3_TOOLS,
   builtinTools
-} from "./chunk-UCXFTCAI.js";
+} from "./chunk-TYRVYBHW.js";
 import "./chunk-RV7BVTDG.js";
-import "./chunk-HWXIRVKH.js";
+import "./chunk-PNLDTRC5.js";
 import "./chunk-XRNN44QY.js";
-import "./chunk-5KS24LTS.js";
-import "./chunk-LQSOU63Z.js";
+import "./chunk-NOCU555K.js";
+import "./chunk-VKAJMHVG.js";
 import "./chunk-24T5XIJU.js";
 import "./chunk-B3MGJBFI.js";
 import "./chunk-VBF2YXUW.js";
 import "./chunk-7ODZTPCU.js";
 import "./chunk-IXIS7RSG.js";
-import "./chunk-QA6IASYX.js";
-import "./chunk-O6BY43ZB.js";
-import "./chunk-WEEVSWQB.js";
-import "./chunk-6GOZTS6F.js";
+import "./chunk-Z34CUZCZ.js";
+import "./chunk-MIV2RU5B.js";
+import "./chunk-KIQTABBJ.js";
+import "./chunk-OUEH4I4X.js";
 import "./chunk-VU3QBYL4.js";
 import "./chunk-CHEK3ASV.js";
 import "./chunk-KLJZ4WV4.js";
 import "./chunk-AQ5YBURX.js";
-import "./chunk-TU5MTW2S.js";
+import "./chunk-E2ZD4ERD.js";
 import "./chunk-VZGPASGD.js";
 import "./chunk-7HL23T3T.js";
 import "./chunk-JDOO4P6Z.js";
-import "./chunk-3D5DJWOE.js";
-import "./chunk-NJX2RXKJ.js";
-import "./chunk-4WPBS45A.js";
-import "./chunk-T3SMFF5Q.js";
-import "./chunk-7N5U2RAU.js";
-import "./chunk-DRRY6SCM.js";
-import "./chunk-DKHMPKDG.js";
+import "./chunk-FC3X7GGJ.js";
+import "./chunk-YDTRKEYY.js";
+import "./chunk-IRUEHGCR.js";
+import "./chunk-GU7QJ37F.js";
+import "./chunk-3LS3FYEF.js";
+import "./chunk-EMA2XENR.js";
+import "./chunk-77MBK46T.js";
 import "./chunk-ASEXQRA7.js";
 import "./chunk-4ERMPDHV.js";
 import "./chunk-YJTXRH5Y.js";
 import "./chunk-ZBMANLYH.js";
-import "./chunk-6H4ERJP7.js";
-import "./chunk-MGPR7VG3.js";
+import "./chunk-KYVOTHG7.js";
+import "./chunk-T7YVY2BV.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";
 import "./chunk-HDYUBRMF.js";
 import "./chunk-7JJFC6CT.js";
-import "./chunk-MJSJWXBF.js";
+import "./chunk-DX5KZEMK.js";
 import "./chunk-62OAECEQ.js";
 import "./chunk-NBDZMMG2.js";
-import "./chunk-FBUP524S.js";
+import "./chunk-4YKVHCQC.js";
 import "./chunk-SMARDKAC.js";
 import "./chunk-X6KXNHUO.js";
 import "./chunk-SOR7OCYP.js";
-import "./chunk-UOYRAS4J.js";
-import "./chunk-KVTEIUND.js";
-import "./chunk-7XUEPBNT.js";
+import "./chunk-YECHJJJF.js";
+import "./chunk-QU2VRCMM.js";
+import "./chunk-AMURQAJX.js";
 import "./chunk-MSOAX3GC.js";
-import "./chunk-TI5COGLY.js";
-import "./chunk-MBR5VAB5.js";
-import "./chunk-52UXXQMP.js";
-import "./chunk-DL2ARI4S.js";
-import "./chunk-3AU6CZWL.js";
+import "./chunk-CVNCSMVU.js";
+import "./chunk-6ZLRRC74.js";
+import "./chunk-3JVSOBHU.js";
+import "./chunk-6LCKF5KH.js";
+import "./chunk-REWOZIA4.js";
 import "./chunk-6IEBD27U.js";
 import "./chunk-ZKC5UNGD.js";
 import "./chunk-YOHO4DVT.js";
 import "./chunk-2CTZW6JQ.js";
-import "./chunk-KE7A76VC.js";
+import "./chunk-5U5ULQX2.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   BUILTIN_TOOL_DESCRIPTIONS,

package/dist/{chunk-NFX2IUQA.js → chunk-32XPUSY3.js}

@@ -1,10 +1,10 @@
 import {
   builtinToolsPack
-} from "./chunk-EL2NJXSK.js";
+} from "./chunk-VO6M2FVG.js";
 import {
   TIER1_TOOLS,
   TIER2_TOOLS
-} from "./chunk-UCXFTCAI.js";
+} from "./chunk-TYRVYBHW.js";
 
 // src/tool-tier.ts
 function toolNameSet(tools) {
@@ -54,4 +54,4 @@ export {
   selectBuiltinToolsForTier,
   registerBuiltinToolTier
 };
-//# sourceMappingURL=chunk-NFX2IUQA.js.map
+//# sourceMappingURL=chunk-32XPUSY3.js.map

package/dist/{chunk-52UXXQMP.js → chunk-3JVSOBHU.js}

@@ -1,6 +1,6 @@
 import {
   parseFilesContent
-} from "./chunk-DL2ARI4S.js";
+} from "./chunk-6LCKF5KH.js";
 import {
   recordFilesystemRead
 } from "./chunk-ZKC5UNGD.js";
@@ -4993,7 +4993,7 @@ var ParserWorkerPool = class {
    */
   async reparseInline(batch, orphaned, workerId) {
     try {
-      const { parseFileContent } = await import("./parser-dispatch-37FT3EXQ.js");
+      const { parseFileContent } = await import("./parser-dispatch-UQAB4E6V.js");
       for (const item of orphaned) {
         if (batch.settled) return;
         try {
@@ -5856,4 +5856,4 @@ export {
   incomingCallsService,
   outgoingCallsService
 };
-//# sourceMappingURL=chunk-52UXXQMP.js.map
+//# sourceMappingURL=chunk-3JVSOBHU.js.map

package/dist/{chunk-7N5U2RAU.js → chunk-3LS3FYEF.js}

@@ -1,6 +1,6 @@
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
@@ -3515,4 +3515,4 @@ export {
   languagePackageTool,
   languageInfoTool
 };
-//# sourceMappingURL=chunk-7N5U2RAU.js.map
+//# sourceMappingURL=chunk-3LS3FYEF.js.map

package/dist/{chunk-FBUP524S.js → chunk-4YKVHCQC.js}

@@ -26,6 +26,16 @@ function activeBoardId(items, ctx) {
   const metaBoardId = metaKanban && typeof metaKanban === "object" ? metaKanban["boardId"] : void 0;
   return ctx.currentKanbanBoardId ?? (typeof metaBoardId === "string" ? metaBoardId : void 0) ?? items.find((item) => item.kanbanBoardId)?.kanbanBoardId ?? "";
 }
+function deduplicateManagedTodoRows(items, boardId) {
+  const rowsById = /* @__PURE__ */ new Map();
+  for (const item of items) {
+    const existing = rowsById.get(item.id);
+    const itemIsBound = item.kanbanBoardId === boardId && Boolean(item.kanbanTaskId);
+    const existingIsBound = existing?.kanbanBoardId === boardId && Boolean(existing.kanbanTaskId);
+    if (!existing || itemIsBound && !existingIsBound) rowsById.set(item.id, item);
+  }
+  return [...rowsById.values()];
+}
 function bindTodosToBoard(items, previous, board) {
   const previousById = new Map(previous.map((item) => [item.id, item]));
   const taskById = new Map(board.tasks.map((task) => [task.id, task]));
@@ -354,7 +364,8 @@ var todoTool = {
     const boardId = activeBoardId(items, ctx);
     let board = boardId ? await getBoard(ctx.projectRoot, boardId) : null;
     const managed = board?.lifecycle?.mode === "managed";
-    let boundItems = managed && board ? bindTodosToBoard(items, ctx.todos ?? [], board) : items;
+    const managedItems = managed && board ? deduplicateManagedTodoRows(items, board.id) : items;
+    let boundItems = managed && board ? bindTodosToBoard(managedItems, ctx.todos ?? [], board) : managedItems;
     const creationWarnings = [];
     if (managed && board) {
       const managedBoardId = board.id;
@@ -476,4 +487,4 @@ var todoTool = {
 export {
   todoTool
 };
-//# sourceMappingURL=chunk-FBUP524S.js.map
+//# sourceMappingURL=chunk-4YKVHCQC.js.map

package/dist/{chunk-KE7A76VC.js → chunk-5U5ULQX2.js}

@@ -1,6 +1,9 @@
 // src/_win32-resolve.ts
 import * as fs from "node:fs";
 import * as path from "node:path";
+import {
+  buildWin32CmdShimInvocation
+} from "@wrongstack/core/utils";
 function resolveWin32Command(cmd) {
   if (process.platform !== "win32") return cmd;
   if (cmd.includes("/") || cmd.includes("\\") || path.extname(cmd.replace(/\//g, "\\"))) {
@@ -46,19 +49,6 @@ function assertSafeWin32ShellArgs(args) {
     }
   }
 }
-function buildWin32CmdShimInvocation(command, args = []) {
-  assertSafeWin32ShellArgs([command, ...args]);
-  const line = ["call", quoteWin32CmdArg(command), ...args.map(quoteWin32CmdArg)].join(" ");
-  return {
-    command: process.env["COMSPEC"] ?? "cmd.exe",
-    args: ["/d", "/c", line],
-    windowsVerbatimArguments: true
-  };
-}
-function quoteWin32CmdArg(arg) {
-  const escaped = arg.replace(/(\\+)$/, "$1$1");
-  return `"${escaped}"`;
-}
 
 export {
   resolveWin32Command,
@@ -66,4 +56,4 @@ export {
   assertSafeWin32ShellArgs,
   buildWin32CmdShimInvocation
 };
-//# sourceMappingURL=chunk-KE7A76VC.js.map
+//# sourceMappingURL=chunk-5U5ULQX2.js.map

package/dist/{chunk-DL2ARI4S.js → chunk-6LCKF5KH.js}

@@ -1,6 +1,6 @@
 import {
   resolvePythonBinary
-} from "./chunk-3AU6CZWL.js";
+} from "./chunk-REWOZIA4.js";
 import {
   parseParserBatchOutput,
   recordParserSubprocess,
@@ -8,7 +8,7 @@ import {
 } from "./chunk-ZKC5UNGD.js";
 import {
   resolveWin32Command
-} from "./chunk-KE7A76VC.js";
+} from "./chunk-5U5ULQX2.js";
 
 // src/codebase-index/import-extractor.ts
 var IMPORT_MAX_FILE_CHARS = 512 * 1024;
@@ -830,11 +830,11 @@ async function dispatch(file, content, lang) {
       return parseSymbols({ file, content, lang });
     }
     case "go": {
-      const { parseSymbols } = await import("./go-parser-QIEXU3P2.js");
+      const { parseSymbols } = await import("./go-parser-EMKTAAD3.js");
       return parseSymbols({ file, content, lang: "go" });
     }
     case "py": {
-      const { parseSymbols } = await import("./py-parser-6GJTGUXK.js");
+      const { parseSymbols } = await import("./py-parser-DDG53RXI.js");
       return parseSymbols({ file, content, lang: "py" });
     }
     case "rs": {
@@ -891,4 +891,4 @@ export {
   parseFileContent,
   parseFilesContent
 };
-//# sourceMappingURL=chunk-DL2ARI4S.js.map
+//# sourceMappingURL=chunk-6LCKF5KH.js.map

package/dist/{chunk-MBR5VAB5.js → chunk-6ZLRRC74.js}

@@ -1,6 +1,6 @@
 import {
   resolveIndexDir
-} from "./chunk-52UXXQMP.js";
+} from "./chunk-3JVSOBHU.js";
 
 // src/codebase-index/project-server-endpoint.ts
 import { createHash } from "node:crypto";
@@ -120,4 +120,4 @@ export {
   PROJECT_INDEX_SERVER_MAX_FRAME_CHARS,
   encodeProjectServerMessage
 };
-//# sourceMappingURL=chunk-MBR5VAB5.js.map
+//# sourceMappingURL=chunk-6ZLRRC74.js.map

package/dist/{chunk-DKHMPKDG.js → chunk-77MBK46T.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-ZBMANLYH.js";
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-CVNCSMVU.js";
 import {
   isBinaryBuffer,
   safeResolveReal,
@@ -274,7 +274,7 @@ function passesExtraGlob(extraGlob, name, full, base) {
   return extraGlob.test(full);
 }
 async function resolveFiles(filesInput, ctx, extraGlob) {
-  const base = ctx.cwd;
+  const base = ctx.workingDir ?? ctx.cwd;
   const parts = Array.isArray(filesInput) ? filesInput.filter((s) => typeof s === "string").map((s) => s.trim()).filter(Boolean) : filesInput.trim().split(",").map((s) => s.trim()).filter(Boolean);
   const resolved = [];
   for (const p of parts) {
@@ -413,4 +413,4 @@ export {
   replaceTool,
   __resetRgDetectionForTests
 };
-//# sourceMappingURL=chunk-DKHMPKDG.js.map
+//# sourceMappingURL=chunk-77MBK46T.js.map

package/dist/{chunk-7XUEPBNT.js → chunk-AMURQAJX.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-CVNCSMVU.js";
 import {
   safeResolveReal,
   sha256hex,
@@ -518,4 +518,4 @@ Compare this against your old_string and retry with the file's actual text.` : "
 export {
   editTool
 };
-//# sourceMappingURL=chunk-7XUEPBNT.js.map
+//# sourceMappingURL=chunk-AMURQAJX.js.map

package/dist/{chunk-TI5COGLY.js → chunk-CVNCSMVU.js}

@@ -9,7 +9,7 @@ import {
   projectIndexServerBuildId,
   projectIndexServerEndpoint,
   projectIndexServerMetadataPath
-} from "./chunk-MBR5VAB5.js";
+} from "./chunk-6ZLRRC74.js";
 import {
   CircuitOpenError,
   IndexTimeoutError,
@@ -24,7 +24,7 @@ import {
   searchService,
   statsService,
   symbolGraphService
-} from "./chunk-52UXXQMP.js";
+} from "./chunk-3JVSOBHU.js";
 import {
   recordIpcPending
 } from "./chunk-ZKC5UNGD.js";
@@ -1312,4 +1312,4 @@ export {
   checkCodebaseIndexServerHealth,
   ensureCodebaseIndexServer
 };
-//# sourceMappingURL=chunk-TI5COGLY.js.map
+//# sourceMappingURL=chunk-CVNCSMVU.js.map

package/dist/{chunk-MJSJWXBF.js → chunk-DX5KZEMK.js}

@@ -30,7 +30,19 @@ var fetchTool = {
   category: "Network",
   description: "Fetch a URL and return its content. HTML pages are automatically converted to clean markdown. This tool has strong SSRF protections (private IPs, localhost, and cloud metadata endpoints are blocked by default).",
   usageHint: "Use this when you need external information (documentation, API responses, web pages, etc.).\n\nSecurity notes:\n- Only HTTPS is allowed by default.\n- Internal/private networks are blocked unless explicitly enabled via environment variable.\n- Redirects are followed but re-validated at each hop.\n- Output is capped (128KB by default) to avoid flooding context.\nPrefer this over raw `bash curl` or `bash wget`.",
-  permission: "auto",
+  // H-9 (AT-02): `fetch` was `permission:'auto'` with `mutating:false`, so
+  // the `tool.permission === 'auto' && !isMutating` branch at
+  // `permission-policy.ts:408-424` returned `{permission:'auto'}` for
+  // every call, in every mode (YOLO or not) — a complete, prompt-free
+  // exfiltration primitive when chained with the equally-unprompted
+  // `read` of `.env`/`~/.ssh/*` (sensitive-read gate is `!effectiveYolo`
+  // and therefore also skipped under the shipped default). Promoting to
+  // `permission:'confirm'` is the narrowest change that closes the
+  // exfiltration path: it prompts the user, and an "always" answer is
+  // persisted to `trust.json` against the URL subject declared below.
+  // The SSRF guard (`guardedFetch`) still constrains where the request
+  // can land; this change just ensures the *whether* is no longer silent.
+  permission: "confirm",
   mutating: false,
   capabilities: ["net.outbound"],
   icon: "web",
@@ -269,4 +281,4 @@ function prettyJson(s) {
 export {
   fetchTool
 };
-//# sourceMappingURL=chunk-MJSJWXBF.js.map
+//# sourceMappingURL=chunk-DX5KZEMK.js.map

package/dist/{chunk-TU5MTW2S.js → chunk-E2ZD4ERD.js}

@@ -1,6 +1,6 @@
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-CVNCSMVU.js";
 import {
   resolveRealInsideRoot,
   safeResolveReal,
@@ -395,4 +395,4 @@ function extractPatchedFiles(output) {
 export {
   patchTool
 };
-//# sourceMappingURL=chunk-TU5MTW2S.js.map
+//# sourceMappingURL=chunk-E2ZD4ERD.js.map

package/dist/{chunk-DRRY6SCM.js → chunk-EMA2XENR.js}

@@ -9,7 +9,7 @@ import {
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
-} from "./chunk-KE7A76VC.js";
+} from "./chunk-5U5ULQX2.js";
 
 // src/_spawn-stream.ts
 import { spawn } from "node:child_process";
@@ -285,4 +285,4 @@ function utf8Prefix(text, maxBytes) {
 export {
   spawnStream
 };
-//# sourceMappingURL=chunk-DRRY6SCM.js.map
+//# sourceMappingURL=chunk-EMA2XENR.js.map

package/dist/{chunk-3D5DJWOE.js → chunk-FC3X7GGJ.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-GU7QJ37F.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
@@ -100,6 +100,14 @@ var lintTool = {
     }
     yield { type: "log", text: `Running ${detected}\u2026`, data: { linter: detected } };
     const files = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean) : [];
+    for (const f of files) {
+      if (f.startsWith("-")) {
+        throw new ToolValidationError({
+          message: `lint: file path "${f}" may not begin with '-' (flag injection)`,
+          field: "files"
+        });
+      }
+    }
     const args = [];
     if (detected === "eslint") {
       if (input.fix) args.push("--fix");
@@ -181,4 +189,4 @@ async function detectLinter(cwd) {
 export {
   lintTool
 };
-//# sourceMappingURL=chunk-3D5DJWOE.js.map
+//# sourceMappingURL=chunk-FC3X7GGJ.js.map

package/dist/{chunk-T3SMFF5Q.js → chunk-GU7QJ37F.js}

@@ -2,7 +2,7 @@ import {
   executeLanguagePlan,
   executePackagePlan,
   planLanguageOperation
-} from "./chunk-7N5U2RAU.js";
+} from "./chunk-3LS3FYEF.js";
 
 // src/languages/legacy-bridge.ts
 import * as fs from "node:fs/promises";
@@ -104,4 +104,4 @@ export {
   tryLegacyCodeOperation,
   tryLegacyPackageOperation
 };
-//# sourceMappingURL=chunk-T3SMFF5Q.js.map
+//# sourceMappingURL=chunk-GU7QJ37F.js.map

package/dist/{chunk-4WPBS45A.js → chunk-IRUEHGCR.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-GU7QJ37F.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   detectPackageManager,
   normalizeCommandOutput,
@@ -162,4 +162,4 @@ async function findTsConfig(cwd) {
 export {
   typecheckTool
 };
-//# sourceMappingURL=chunk-4WPBS45A.js.map
+//# sourceMappingURL=chunk-IRUEHGCR.js.map

package/dist/{chunk-WEEVSWQB.js → chunk-KIQTABBJ.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyPackageOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-GU7QJ37F.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
@@ -220,4 +220,4 @@ function extractAdvisories(data) {
 export {
   auditTool
 };
-//# sourceMappingURL=chunk-WEEVSWQB.js.map
+//# sourceMappingURL=chunk-KIQTABBJ.js.map

package/dist/{chunk-6H4ERJP7.js → chunk-KYVOTHG7.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-HDYUBRMF.js";
 import {
   resolvePowerShell
-} from "./chunk-KE7A76VC.js";
+} from "./chunk-5U5ULQX2.js";
 import {
   normalizeCommandOutput
 } from "./chunk-ZUFHAHTE.js";
@@ -1093,4 +1093,4 @@ export {
   checkAndBlockKillCommand,
   bashTool
 };
-//# sourceMappingURL=chunk-6H4ERJP7.js.map
+//# sourceMappingURL=chunk-KYVOTHG7.js.map

package/dist/{chunk-O6BY43ZB.js → chunk-MIV2RU5B.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyPackageOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-GU7QJ37F.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   detectPackageManager,
   normalizeCommandOutput,
@@ -253,4 +253,4 @@ function resolveManifestPath(cwd, pkgManager) {
 export {
   installTool
 };
-//# sourceMappingURL=chunk-O6BY43ZB.js.map
+//# sourceMappingURL=chunk-MIV2RU5B.js.map

package/dist/{chunk-5KS24LTS.js → chunk-NOCU555K.js}

@@ -1,6 +1,6 @@
 import {
   todoTool
-} from "./chunk-FBUP524S.js";
+} from "./chunk-4YKVHCQC.js";
 import {
   projectSessionPlanToKanban
 } from "./chunk-X6KXNHUO.js";
@@ -414,4 +414,4 @@ function mkResult(plan, ok, message, todos) {
 export {
   planTool
 };
-//# sourceMappingURL=chunk-5KS24LTS.js.map
+//# sourceMappingURL=chunk-NOCU555K.js.map

package/dist/{chunk-6GOZTS6F.js → chunk-OUEH4I4X.js}

@@ -5,7 +5,7 @@ import {
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
-} from "./chunk-KE7A76VC.js";
+} from "./chunk-5U5ULQX2.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
@@ -66,7 +66,7 @@ var outdatedTool = {
     const manager = await detectPackageManager(cwd, ctx.projectRoot);
     if (manager === "npm") {
       try {
-        const { detectNonJsEcosystem } = await import("./legacy-bridge-YXANP5QB.js");
+        const { detectNonJsEcosystem } = await import("./legacy-bridge-WVQ4BHDI.js");
         const nonJs = await detectNonJsEcosystem(cwd, ctx.projectRoot);
         if (nonJs) {
           const { planLanguageOperation, executePackagePlan } = await import("./languages/index.js");
@@ -282,4 +282,4 @@ Note: exit code 1 from \`outdated\` means outdated packages were found (expected
 export {
   outdatedTool
 };
-//# sourceMappingURL=chunk-6GOZTS6F.js.map
+//# sourceMappingURL=chunk-OUEH4I4X.js.map