@wrongstack/tools 1.0.2 → 1.0.4

package/dist/{chunk-X6KXNHUO.js → chunk-5BKQVP56.js}

@@ -251,7 +251,9 @@ function applySessionKanbanBoardToTodos(context, board, options) {
   ).map((task) => sessionTodoFromTask(task, board));
   const allCompleted = projectedTodos.length > 0 && projectedTodos.every((todo) => todo.status === "completed");
   const effectiveTodos = allCompleted ? [] : projectedTodos;
-  if (sameTodos(context.todos, effectiveTodos)) return [...context.todos];
+  if (sameTodos(context.todos, projectedTodos) || sameTodos(context.todos, effectiveTodos)) {
+    return [...context.todos];
+  }
   options.suppressedTodoMirrors.add(context);
   try {
     context.state.replaceTodos(projectedTodos);
@@ -279,7 +281,11 @@ function applyManagedKanbanBoardToTodos(context, board, suppressedTodoMirrors2,
       (task) => task.status !== "archived" && task.mergedIntoTaskId === void 0 && (!task.childTaskIds || task.childTaskIds.length === 0)
     )
   ).map((task) => managedTodoFromTask(task, board));
-  if (sameTodos(context.todos, projectedTodos)) return [...context.todos];
+  const allCompleted = projectedTodos.length > 0 && projectedTodos.every((todo) => todo.status === "completed");
+  const effectiveTodos = allCompleted ? [] : projectedTodos;
+  if (sameTodos(context.todos, projectedTodos) || sameTodos(context.todos, effectiveTodos)) {
+    return [...context.todos];
+  }
   suppressedTodoMirrors2.add(context);
   try {
     context.state.replaceTodos(projectedTodos);
@@ -369,6 +375,16 @@ async function applySessionKanbanTaskToSource(context, task, suppressedTodoMirro
 // src/session-kanban.ts
 var SESSION_BOARD_TAG = "session-work";
 var MIRROR_DISABLED_ENV = "WRONGSTACK_KANBAN_TASK_MIRROR";
+var PURGE_AFTER_ARCHIVE_DAYS_ENV = "WRONGSTACK_KANBAN_ARCHIVE_PURGE_DAYS";
+function sessionBoardRetention() {
+  const raw = Number.parseFloat(process.env[PURGE_AFTER_ARCHIVE_DAYS_ENV] ?? "");
+  const purgeDays = Number.isFinite(raw) && raw > 0 ? raw : void 0;
+  return {
+    mode: "archive_after_ttl",
+    ttlMs: 7 * 24 * 60 * 60 * 1e3,
+    ...purgeDays !== void 0 ? { purgeAfterArchiveMs: Math.round(purgeDays * 24 * 60 * 60 * 1e3) } : {}
+  };
+}
 var SESSION_KANBAN_COLUMNS = DEFAULT_COLUMNS.map((column) => ({
   ...column
 }));
@@ -464,7 +480,7 @@ async function ensureSessionKanbanBoard(projectRoot, sessionId) {
         columns: SESSION_KANBAN_COLUMNS,
         generatedBy: `session-kanban:${sessionId}`,
         kind: "session_mirror",
-        retention: { mode: "archive_after_ttl", ttlMs: 7 * 24 * 60 * 60 * 1e3 }
+        retention: sessionBoardRetention()
       });
     }
     if (!sameColumns(board.columns) || !board.tags?.includes(SESSION_BOARD_TAG)) {
@@ -640,10 +656,11 @@ function queueLatestMirror(projectRoot, sessionId, graph, sourceSystem) {
       const pending = pendingMirrors.get(key);
       if (pending) {
         pendingMirrors.delete(key);
+        const carried = pending.reconciliationGraph ? completedReconciliationGraph(pending.graph, [pending.reconciliationGraph]) : void 0;
         queueLatestMirror(
           pending.projectRoot,
           pending.sessionId,
-          pending.graph,
+          carried ?? pending.graph,
           pending.sourceSystem
         );
       }
@@ -997,4 +1014,4 @@ export {
   applyManagedKanbanBoardToTodos2 as applyManagedKanbanBoardToTodos,
   applySessionKanbanTaskToSource2 as applySessionKanbanTaskToSource
 };
-//# sourceMappingURL=chunk-X6KXNHUO.js.map
+//# sourceMappingURL=chunk-5BKQVP56.js.map

package/dist/{chunk-KE7A76VC.js → chunk-5U5ULQX2.js}

@@ -1,6 +1,9 @@
 // src/_win32-resolve.ts
 import * as fs from "node:fs";
 import * as path from "node:path";
+import {
+  buildWin32CmdShimInvocation
+} from "@wrongstack/core/utils";
 function resolveWin32Command(cmd) {
   if (process.platform !== "win32") return cmd;
   if (cmd.includes("/") || cmd.includes("\\") || path.extname(cmd.replace(/\//g, "\\"))) {
@@ -46,19 +49,6 @@ function assertSafeWin32ShellArgs(args) {
     }
   }
 }
-function buildWin32CmdShimInvocation(command, args = []) {
-  assertSafeWin32ShellArgs([command, ...args]);
-  const line = ["call", quoteWin32CmdArg(command), ...args.map(quoteWin32CmdArg)].join(" ");
-  return {
-    command: process.env["COMSPEC"] ?? "cmd.exe",
-    args: ["/d", "/c", line],
-    windowsVerbatimArguments: true
-  };
-}
-function quoteWin32CmdArg(arg) {
-  const escaped = arg.replace(/(\\+)$/, "$1$1");
-  return `"${escaped}"`;
-}
 
 export {
   resolveWin32Command,
@@ -66,4 +56,4 @@ export {
   assertSafeWin32ShellArgs,
   buildWin32CmdShimInvocation
 };
-//# sourceMappingURL=chunk-KE7A76VC.js.map
+//# sourceMappingURL=chunk-5U5ULQX2.js.map

package/dist/{chunk-SMARDKAC.js → chunk-5UA4TNJJ.js}

@@ -1,7 +1,7 @@
 import {
   applySessionKanbanTaskToSource,
   taskFileToSerializedGraph
-} from "./chunk-X6KXNHUO.js";
+} from "./chunk-5BKQVP56.js";
 
 // src/kanban.ts
 import { stripLifecycleIssues as stripLifecycleIssues2 } from "@wrongstack/kanban";
@@ -2118,4 +2118,4 @@ export {
   recordKanbanVerificationEvidence,
   kanbanTool
 };
-//# sourceMappingURL=chunk-SMARDKAC.js.map
+//# sourceMappingURL=chunk-5UA4TNJJ.js.map

package/dist/{chunk-SOR7OCYP.js → chunk-6XYFYLN7.js}

@@ -1363,6 +1363,24 @@ var browserTools = [
 ];
 for (const tool of browserTools) tool.icon = "web";
 for (const tool of browserTools) tool.timeoutMs ??= 6e4;
+var BROWSER_TOOL_NAMES = Object.freeze(browserTools.map((t) => t.name));
+function enableBrowserSuite(registry) {
+  let count = 0;
+  for (const name of BROWSER_TOOL_NAMES) {
+    if (registry.enable(name)) count++;
+  }
+  return count;
+}
+function disableBrowserSuite(registry) {
+  let count = 0;
+  for (const name of BROWSER_TOOL_NAMES) {
+    if (registry.disable(name, "user")) count++;
+  }
+  return count;
+}
+function isBrowserSuiteEnabled(registry) {
+  return BROWSER_TOOL_NAMES.every((name) => !registry.isDisabled(name) && registry.get(name) !== void 0);
+}
 async function shutdownBrowserTools() {
   const active = [...managers.values()];
   managers.clear();
@@ -1396,6 +1414,10 @@ export {
   browserUploadTool,
   browserCloseTool,
   browserTools,
+  BROWSER_TOOL_NAMES,
+  enableBrowserSuite,
+  disableBrowserSuite,
+  isBrowserSuiteEnabled,
   shutdownBrowserTools
 };
-//# sourceMappingURL=chunk-SOR7OCYP.js.map
+//# sourceMappingURL=chunk-6XYFYLN7.js.map

package/dist/{chunk-KVTEIUND.js → chunk-A636Z2TG.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-PVQBD3TA.js";
 import {
   safeResolveReal,
   sha256hex,
   truncateDiffPayload
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/write.ts
 import * as fs from "node:fs/promises";
@@ -179,4 +179,4 @@ async function finishWrite(input, ctx, prepared, signal) {
 export {
   writeTool
 };
-//# sourceMappingURL=chunk-KVTEIUND.js.map
+//# sourceMappingURL=chunk-A636Z2TG.js.map

package/dist/{chunk-52UXXQMP.js → chunk-AX5ZG5O5.js}

@@ -1,6 +1,6 @@
 import {
   parseFilesContent
-} from "./chunk-DL2ARI4S.js";
+} from "./chunk-24Q4O34E.js";
 import {
   recordFilesystemRead
 } from "./chunk-ZKC5UNGD.js";
@@ -4993,7 +4993,7 @@ var ParserWorkerPool = class {
    */
   async reparseInline(batch, orphaned, workerId) {
     try {
-      const { parseFileContent } = await import("./parser-dispatch-37FT3EXQ.js");
+      const { parseFileContent } = await import("./parser-dispatch-IF75EZFB.js");
       for (const item of orphaned) {
         if (batch.settled) return;
         try {
@@ -5856,4 +5856,4 @@ export {
   incomingCallsService,
   outgoingCallsService
 };
-//# sourceMappingURL=chunk-52UXXQMP.js.map
+//# sourceMappingURL=chunk-AX5ZG5O5.js.map

package/dist/{chunk-7HL23T3T.js → chunk-BU6VUXWG.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-ZBMANLYH.js";
 import {
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/diff.ts
 import { spawn } from "node:child_process";
@@ -302,4 +302,4 @@ ${parts.join("\n")}`;
 export {
   diffTool
 };
-//# sourceMappingURL=chunk-7HL23T3T.js.map
+//# sourceMappingURL=chunk-BU6VUXWG.js.map

package/dist/{chunk-WEEVSWQB.js → chunk-C64UUXTA.js}

@@ -1,15 +1,15 @@
 import {
   tryLegacyPackageOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-JQ43NVFU.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/audit.ts
 import { ToolValidationError } from "@wrongstack/core/types";
@@ -220,4 +220,4 @@ function extractAdvisories(data) {
 export {
   auditTool
 };
-//# sourceMappingURL=chunk-WEEVSWQB.js.map
+//# sourceMappingURL=chunk-C64UUXTA.js.map

package/dist/{chunk-4WPBS45A.js → chunk-D4HWMWGE.js}

@@ -1,14 +1,14 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-JQ43NVFU.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   detectPackageManager,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/typecheck.ts
 import * as path from "node:path";
@@ -162,4 +162,4 @@ async function findTsConfig(cwd) {
 export {
   typecheckTool
 };
-//# sourceMappingURL=chunk-4WPBS45A.js.map
+//# sourceMappingURL=chunk-D4HWMWGE.js.map

package/dist/{chunk-DRRY6SCM.js → chunk-EMA2XENR.js}

@@ -9,7 +9,7 @@ import {
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
-} from "./chunk-KE7A76VC.js";
+} from "./chunk-5U5ULQX2.js";
 
 // src/_spawn-stream.ts
 import { spawn } from "node:child_process";
@@ -285,4 +285,4 @@ function utf8Prefix(text, maxBytes) {
 export {
   spawnStream
 };
-//# sourceMappingURL=chunk-DRRY6SCM.js.map
+//# sourceMappingURL=chunk-EMA2XENR.js.map

package/dist/{chunk-TU5MTW2S.js → chunk-EMCIC2JA.js}

@@ -1,11 +1,11 @@
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-PVQBD3TA.js";
 import {
   resolveRealInsideRoot,
   safeResolveReal,
   sha256hex
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/patch.ts
 import { spawn } from "node:child_process";
@@ -395,4 +395,4 @@ function extractPatchedFiles(output) {
 export {
   patchTool
 };
-//# sourceMappingURL=chunk-TU5MTW2S.js.map
+//# sourceMappingURL=chunk-EMCIC2JA.js.map

package/dist/{chunk-ASEXQRA7.js → chunk-FEXPWYU7.js}

@@ -6,21 +6,22 @@ import {
 } from "./chunk-2CTZW6JQ.js";
 import {
   assertRealInsideRoot,
+  makeRootRelativizer,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/glob.ts
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { compileGlob, DEFAULT_WALK_IGNORE_DIRS } from "@wrongstack/core/utils";
 import { ToolValidationError } from "@wrongstack/core/types";
+import { compileGlob, DEFAULT_WALK_IGNORE_DIRS } from "@wrongstack/core/utils";
 var DEFAULT_IGNORE = new Set(DEFAULT_WALK_IGNORE_DIRS);
 var WALK_CONCURRENCY = 16;
 var globTool = {
   name: "glob",
   category: "Filesystem",
   description: "Find files by path pattern. Results are sorted by modification time, newest first, so when the list is truncated at `limit` it is the oldest files that are dropped (recency-biased). Use index-backed `codebase-search` first for code symbols or concepts when it is live.",
-  usageHint: "PATH DISCOVERY AND SEARCH SCOPING:\n\n- When `codebase-search` is live, use it first for code concepts; use `glob` for filenames, path patterns, and non-indexed files.\n- Combine with `path` and `limit`.\n- Default ignores common build/dependency directories.\nMuch more efficient than shell `find` for most use cases inside the agent.",
+  usageHint: "PATH DISCOVERY AND SEARCH SCOPING:\n\n- When `codebase-search` is live, use it first for code concepts; use `glob` for filenames, path patterns, and non-indexed files.\n- Combine with `path` and `limit`.\n- Default ignores common build/dependency directories.\n- Returned paths are relative to the project root.\nMuch more efficient than shell `find` for most use cases inside the agent.",
   selection: {
     doNotUseWhen: "you need to search inside file contents.",
     useInstead: ["grep"]
@@ -151,11 +152,12 @@ var globTool = {
     };
     await walk(base, "");
     results.sort((a, b) => b.mtime - a.mtime);
-    return { files: results.map((r) => r.rel), truncated };
+    const relativize = makeRootRelativizer(ctx.cwd);
+    return { files: results.map((r) => relativize(r.rel)), truncated };
   }
 };
 
 export {
   globTool
 };
-//# sourceMappingURL=chunk-ASEXQRA7.js.map
+//# sourceMappingURL=chunk-FEXPWYU7.js.map

package/dist/{chunk-ZUFHAHTE.js → chunk-HKR56VNF.js}

@@ -216,6 +216,18 @@ function normalizeCommandOutput(raw, opts = {}) {
   text = text.replace(/\n{3,}/g, "\n\n");
   return truncateHeadTail(text, opts.maxBytes ?? COMMAND_OUTPUT_MAX_BYTES);
 }
+function makeRootRelativizer(root) {
+  const resolved = path.resolve(root);
+  const prefix = resolved.endsWith(path.sep) ? resolved : resolved + path.sep;
+  const compare = process.platform === "win32" ? prefix.toLowerCase() : prefix;
+  return (absPath) => {
+    if (absPath.length <= prefix.length) return absPath;
+    const head = process.platform === "win32" ? absPath.slice(0, prefix.length).toLowerCase() : absPath.slice(0, prefix.length);
+    if (head !== compare) return absPath;
+    const rest = absPath.slice(prefix.length);
+    return rest.length > 0 ? rest : absPath;
+  };
+}
 
 export {
   sha256hex,
@@ -229,6 +241,7 @@ export {
   truncateMiddle,
   isBinaryBuffer,
   COMMAND_OUTPUT_MAX_BYTES,
-  normalizeCommandOutput
+  normalizeCommandOutput,
+  makeRootRelativizer
 };
-//# sourceMappingURL=chunk-ZUFHAHTE.js.map
+//# sourceMappingURL=chunk-HKR56VNF.js.map

package/dist/{chunk-7N5U2RAU.js → chunk-JK5WXW4S.js}

@@ -1,10 +1,10 @@
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/languages/detect.ts
 import { createHash } from "node:crypto";
@@ -3515,4 +3515,4 @@ export {
   languagePackageTool,
   languageInfoTool
 };
-//# sourceMappingURL=chunk-7N5U2RAU.js.map
+//# sourceMappingURL=chunk-JK5WXW4S.js.map

package/dist/{chunk-T3SMFF5Q.js → chunk-JQ43NVFU.js}

@@ -2,7 +2,7 @@ import {
   executeLanguagePlan,
   executePackagePlan,
   planLanguageOperation
-} from "./chunk-7N5U2RAU.js";
+} from "./chunk-JK5WXW4S.js";
 
 // src/languages/legacy-bridge.ts
 import * as fs from "node:fs/promises";
@@ -104,4 +104,4 @@ export {
   tryLegacyCodeOperation,
   tryLegacyPackageOperation
 };
-//# sourceMappingURL=chunk-T3SMFF5Q.js.map
+//# sourceMappingURL=chunk-JQ43NVFU.js.map

package/dist/{chunk-7XUEPBNT.js → chunk-KVEL4EFI.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-TI5COGLY.js";
+} from "./chunk-PVQBD3TA.js";
 import {
   safeResolveReal,
   sha256hex,
   truncateDiffPayload
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/edit.ts
 import * as fs from "node:fs/promises";
@@ -518,4 +518,4 @@ Compare this against your old_string and retry with the file's actual text.` : "
 export {
   editTool
 };
-//# sourceMappingURL=chunk-7XUEPBNT.js.map
+//# sourceMappingURL=chunk-KVEL4EFI.js.map

package/dist/{chunk-VZGPASGD.js → chunk-MG7CUN6R.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-YJTXRH5Y.js";
 import {
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/json.ts
 import * as fs from "node:fs/promises";
@@ -701,4 +701,4 @@ ${toYaml(v, indent + 1)}`;
 export {
   jsonTool
 };
-//# sourceMappingURL=chunk-VZGPASGD.js.map
+//# sourceMappingURL=chunk-MG7CUN6R.js.map

package/dist/{chunk-NFX2IUQA.js → chunk-NERS6GBT.js}

@@ -1,10 +1,10 @@
 import {
   builtinToolsPack
-} from "./chunk-EL2NJXSK.js";
+} from "./chunk-YZLOYJGN.js";
 import {
   TIER1_TOOLS,
   TIER2_TOOLS
-} from "./chunk-UCXFTCAI.js";
+} from "./chunk-T34DVSAE.js";
 
 // src/tool-tier.ts
 function toolNameSet(tools) {
@@ -54,4 +54,4 @@ export {
   selectBuiltinToolsForTier,
   registerBuiltinToolTier
 };
-//# sourceMappingURL=chunk-NFX2IUQA.js.map
+//# sourceMappingURL=chunk-NERS6GBT.js.map

package/dist/{chunk-5KS24LTS.js → chunk-NKOTOW6X.js}

@@ -1,9 +1,9 @@
 import {
   todoTool
-} from "./chunk-FBUP524S.js";
+} from "./chunk-TGVQMKVH.js";
 import {
   projectSessionPlanToKanban
-} from "./chunk-X6KXNHUO.js";
+} from "./chunk-5BKQVP56.js";
 
 // src/plan.ts
 import { randomUUID } from "node:crypto";
@@ -414,4 +414,4 @@ function mkResult(plan, ok, message, todos) {
 export {
   planTool
 };
-//# sourceMappingURL=chunk-5KS24LTS.js.map
+//# sourceMappingURL=chunk-NKOTOW6X.js.map

package/dist/{chunk-NJX2RXKJ.js → chunk-OBVXDVLE.js}

@@ -1,14 +1,14 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-T3SMFF5Q.js";
+} from "./chunk-JQ43NVFU.js";
 import {
   spawnStream
-} from "./chunk-DRRY6SCM.js";
+} from "./chunk-EMA2XENR.js";
 import {
   ensureInsideRoot,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/format.ts
 import * as path from "node:path";
@@ -149,6 +149,14 @@ var formatTool = {
         });
       }
     }
+    for (const f of fileList) {
+      if (f.startsWith("-")) {
+        throw new ToolValidationError({
+          message: `format: file path "${f}" may not begin with '-' (flag injection)`,
+          field: "files"
+        });
+      }
+    }
     let args;
     if (detected === "prettier") {
       args = [input.check ? "--check" : "--write"];
@@ -243,4 +251,4 @@ export {
   parseFormatterCounts,
   detectFixer
 };
-//# sourceMappingURL=chunk-NJX2RXKJ.js.map
+//# sourceMappingURL=chunk-OBVXDVLE.js.map