@wrongstack/tools 1.0.3 → 1.0.5

package/dist/chunk-SIIOHBNY.js

@@ -0,0 +1,38 @@
+import {
+  resolveWin32Command
+} from "./chunk-5U5ULQX2.js";
+
+// src/_session-shell.ts
+function normalizeShell(value) {
+  const v = value?.trim().toLowerCase();
+  if (v === "cmd" || v === "cmd.exe") return "cmd";
+  if (v === "powershell" || v === "powershell.exe") return "powershell";
+  if (v === "pwsh" || v === "pwsh.exe") return "pwsh";
+  return void 0;
+}
+function resolveSessionShell(platform, env, deps = {}) {
+  if (platform !== "win32") return void 0;
+  const override = normalizeShell(env.get("WRONGSTACK_SHELL"));
+  if (override) return override;
+  const hasBinary = deps.hasBinary ?? ((bin) => resolveWin32Command(bin) !== bin);
+  if (hasBinary("pwsh.exe")) return "pwsh";
+  if (hasBinary("powershell.exe")) return "powershell";
+  return "cmd";
+}
+function ensureSessionShell(opts = {}) {
+  const env = opts.env ?? process.env;
+  const platform = opts.platform ?? process.platform;
+  if (platform !== "win32") return void 0;
+  const existing = normalizeShell(env["WRONGSTACK_SHELL"]);
+  if (existing) return existing;
+  const chosen = resolveSessionShell(platform, { get: (k) => env[k] }, { hasBinary: opts.hasBinary }) ?? "cmd";
+  env["WRONGSTACK_SHELL"] = chosen;
+  return chosen;
+}
+
+export {
+  normalizeShell,
+  resolveSessionShell,
+  ensureSessionShell
+};
+//# sourceMappingURL=chunk-SIIOHBNY.js.map

package/dist/{chunk-4YKVHCQC.js → chunk-TGVQMKVH.js}

@@ -1,12 +1,12 @@
 import {
   kanbanTool
-} from "./chunk-SMARDKAC.js";
+} from "./chunk-5UA4TNJJ.js";
 import {
   applyManagedKanbanBoardToTodos,
   blockingTitles,
   mirrorSessionTodosToKanban,
   takeSessionMirrorFailure
-} from "./chunk-X6KXNHUO.js";
+} from "./chunk-5BKQVP56.js";
 
 // src/todo.ts
 import {
@@ -487,4 +487,4 @@ var todoTool = {
 export {
   todoTool
 };
-//# sourceMappingURL=chunk-4YKVHCQC.js.map
+//# sourceMappingURL=chunk-TGVQMKVH.js.map

package/dist/{chunk-QU2VRCMM.js → chunk-TL5T4A4E.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-CVNCSMVU.js";
+} from "./chunk-DOHU3XHS.js";
 import {
   safeResolveReal,
   sha256hex,
   truncateDiffPayload
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/write.ts
 import * as fs from "node:fs/promises";
@@ -179,4 +179,4 @@ async function finishWrite(input, ctx, prepared, signal) {
 export {
   writeTool
 };
-//# sourceMappingURL=chunk-QU2VRCMM.js.map
+//# sourceMappingURL=chunk-TL5T4A4E.js.map

package/dist/{chunk-6ZLRRC74.js → chunk-WBAPU3AB.js}

@@ -1,6 +1,6 @@
 import {
   resolveIndexDir
-} from "./chunk-3JVSOBHU.js";
+} from "./chunk-54SIRJ6D.js";
 
 // src/codebase-index/project-server-endpoint.ts
 import { createHash } from "node:crypto";
@@ -10,6 +10,8 @@ import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 var PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
 var PROJECT_INDEX_SERVER_METADATA_FILE = "server.json";
+var PROJECT_INDEX_SERVER_STDERR_FILE = "server.err.log";
+var PROJECT_INDEX_SERVER_STDERR_MAX_BYTES = 64 * 1024;
 var PROJECT_INDEX_SERVER_SOCKET_DIR = `wsci-v${PROJECT_INDEX_SERVER_PROTOCOL_VERSION}`;
 var buildIdCache;
 function projectIndexServerBuildId(entrypoint) {
@@ -49,6 +51,38 @@ function projectIndexServerMetadataPath(projectRoot, indexDir) {
     PROJECT_INDEX_SERVER_METADATA_FILE
   );
 }
+function projectIndexServerStderrPath(projectRoot, indexDir) {
+  return path.join(
+    path.resolve(resolveIndexDir(projectRoot, indexDir)),
+    PROJECT_INDEX_SERVER_STDERR_FILE
+  );
+}
+function readProjectIndexServerStderrTail(path_, maxLines = 4) {
+  let raw;
+  try {
+    const { size } = fs.statSync(path_);
+    const start = Math.max(0, size - PROJECT_INDEX_SERVER_STDERR_MAX_BYTES);
+    const fd = fs.openSync(path_, "r");
+    try {
+      const length = size - start;
+      if (length <= 0) return null;
+      const buffer = Buffer.alloc(length);
+      fs.readSync(fd, buffer, 0, length, start);
+      raw = buffer.toString("utf8");
+    } finally {
+      fs.closeSync(fd);
+    }
+  } catch {
+    return null;
+  }
+  const lines = raw.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0);
+  if (lines.length === 0) return null;
+  return lines.slice(-maxLines).join(" | ");
+}
+var PROJECT_INDEX_SERVER_CLOSED_MESSAGE = "codebase-index server connection closed";
+function formatProjectIndexServerCloseError(tail) {
+  return tail ? `${PROJECT_INDEX_SERVER_CLOSED_MESSAGE} (server stderr: ${tail})` : PROJECT_INDEX_SERVER_CLOSED_MESSAGE;
+}
 
 // src/codebase-index/binary-frame.ts
 import { decode, encode } from "@msgpack/msgpack";
@@ -114,10 +148,14 @@ export {
   encodeBinaryFrame,
   decodeBinaryFrame,
   PROJECT_INDEX_SERVER_PROTOCOL_VERSION,
+  PROJECT_INDEX_SERVER_STDERR_MAX_BYTES,
   projectIndexServerBuildId,
   projectIndexServerEndpoint,
   projectIndexServerMetadataPath,
+  projectIndexServerStderrPath,
+  readProjectIndexServerStderrTail,
+  formatProjectIndexServerCloseError,
   PROJECT_INDEX_SERVER_MAX_FRAME_CHARS,
   encodeProjectServerMessage
 };
-//# sourceMappingURL=chunk-6ZLRRC74.js.map
+//# sourceMappingURL=chunk-WBAPU3AB.js.map

package/dist/{chunk-RV7BVTDG.js → chunk-WKXL5XHU.js}

@@ -1,6 +1,6 @@
 import {
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/e2e.ts
 import { open, readdir } from "node:fs/promises";
@@ -422,4 +422,4 @@ export {
   discoverE2EProjects,
   e2ePlanTool
 };
-//# sourceMappingURL=chunk-RV7BVTDG.js.map
+//# sourceMappingURL=chunk-WKXL5XHU.js.map

package/dist/{chunk-2CTZW6JQ.js → chunk-XHSHNOAF.js}

@@ -1,10 +1,13 @@
 // src/codebase-index/gitignore.ts
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { compileGlob } from "@wrongstack/core/utils";
-function globBody(glob) {
-  return compileGlob(glob).source.replace(/^\^/, "").replace(/\$$/, "");
-}
+import {
+  compileGlobMatcher
+} from "@wrongstack/core/utils";
+var START_ANCHORED = (index) => index === 0;
+var START_ANY_SEGMENT = (index, input) => index === 0 || input[index - 1] === "/";
+var END_EQ_OR_UNDER = (index, input) => index === input.length || input[index] === "/";
+var END_UNDER = (index, input) => index < input.length && input[index] === "/";
 function compileGitignore(lines) {
   const rules = [];
   for (const raw of lines) {
@@ -24,11 +27,9 @@ function compileGitignore(lines) {
     if (!line) continue;
     const anchored = line.startsWith("/") || line.includes("/");
     if (line.startsWith("/")) line = line.slice(1);
-    const body = globBody(line);
-    const prefix = anchored ? "^" : "(?:^|.*/)";
     rules.push({
-      eqOrUnder: new RegExp(`${prefix}${body}(?:/.*)?$`),
-      under: new RegExp(`${prefix}${body}/.*$`),
+      matcher: compileGlobMatcher(line),
+      isStart: anchored ? START_ANCHORED : START_ANY_SEGMENT,
       negated,
       dirOnly
     });
@@ -38,8 +39,8 @@ function compileGitignore(lines) {
     const p = relPath.replace(/\\/g, "/").replace(/^\.\//, "").replace(/^\/+/, "");
     let ignored = false;
     for (const r of rules) {
-      const re = r.dirOnly && !isDir ? r.under : r.eqOrUnder;
-      if (re.test(p)) {
+      const isEnd = r.dirOnly && !isDir ? END_UNDER : END_EQ_OR_UNDER;
+      if (r.matcher.testSpan(p, r.isStart, isEnd)) {
         ignored = !r.negated;
         if (!hasNegation && ignored) return true;
       }
@@ -61,4 +62,4 @@ export {
   compileGitignore,
   loadGitignoreMatcher
 };
-//# sourceMappingURL=chunk-2CTZW6JQ.js.map
+//# sourceMappingURL=chunk-XHSHNOAF.js.map

package/dist/{chunk-24T5XIJU.js → chunk-YA2ZYCJY.js}

@@ -2,8 +2,8 @@
 var toolSearchTool = {
   name: "tool_search",
   category: "Meta",
-  description: "Search the catalog of available tools by name or description. Use this to discover which tool to use for a task. For the full schema and usage details of a specific tool, use `tool_help` instead.",
-  usageHint: "SELF-DISCOVERY TOOL:\n\n- Use when you need to find the right tool for a job.\n- `query` searches names and descriptions.\n- You can filter by `tags` (category), `permission`, or `mutating`.\n- Once you find the right tool name, use `tool_help` with that name for full schema details.\nCall this before guessing tool names. It helps you discover the best tool for the current situation.",
+  description: "Search the catalog of available tools by name or description. Use this to discover which tool to use for a task, including tools whose schemas were withheld from this request to save tokens.",
+  usageHint: "SELF-DISCOVERY TOOL:\n\n- Use when you need to find the right tool for a job.\n- `query` searches names and descriptions.\n- You can filter by `tags` (category), `permission`, or `mutating`.\n- The catalog searched here is the full registry, not just the tools listed in this request.\n- Once you find the right tool name, invoke it with `tool_use`.\nCall this before concluding a capability is unavailable.",
   permission: "auto",
   mutating: false,
   timeoutMs: 1e3,
@@ -68,7 +68,7 @@ var toolSearchTool = {
       mutating: t.mutating
     }));
     const totalAvailable = tools.length;
-    const hint = results.length === 0 && query ? `No tools matched "${input.query}". Use tool-help (without arguments) to see all ${totalAvailable} available tools.` : void 0;
+    const hint = results.length === 0 && query ? `No tools matched "${input.query}". ${totalAvailable} tools are available; call tool_search with no query to list them all.` : void 0;
     return {
       tools: results,
       total: filtered.length,
@@ -82,4 +82,4 @@ var toolSearchTool = {
 export {
   toolSearchTool
 };
-//# sourceMappingURL=chunk-24T5XIJU.js.map
+//# sourceMappingURL=chunk-YA2ZYCJY.js.map

package/dist/{chunk-T7YVY2BV.js → chunk-YILT3CSO.js}

@@ -20,7 +20,7 @@ import {
   COMMAND_OUTPUT_MAX_BYTES,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/exec.ts
 import { spawn } from "node:child_process";
@@ -1835,4 +1835,4 @@ export {
   getExecAllowlist,
   execTool
 };
-//# sourceMappingURL=chunk-T7YVY2BV.js.map
+//# sourceMappingURL=chunk-YILT3CSO.js.map

package/dist/{chunk-OUEH4I4X.js → chunk-YJQQ5F5J.js}

@@ -11,7 +11,7 @@ import {
   detectPackageManager,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/outdated.ts
 import { spawn } from "node:child_process";
@@ -66,7 +66,7 @@ var outdatedTool = {
     const manager = await detectPackageManager(cwd, ctx.projectRoot);
     if (manager === "npm") {
       try {
-        const { detectNonJsEcosystem } = await import("./legacy-bridge-WVQ4BHDI.js");
+        const { detectNonJsEcosystem } = await import("./legacy-bridge-XM2GV665.js");
         const nonJs = await detectNonJsEcosystem(cwd, ctx.projectRoot);
         if (nonJs) {
           const { planLanguageOperation, executePackagePlan } = await import("./languages/index.js");
@@ -282,4 +282,4 @@ Note: exit code 1 from \`outdated\` means outdated packages were found (expected
 export {
   outdatedTool
 };
-//# sourceMappingURL=chunk-OUEH4I4X.js.map
+//# sourceMappingURL=chunk-YJQQ5F5J.js.map

package/dist/{chunk-MIV2RU5B.js → chunk-ZETZHHV5.js}

@@ -1,6 +1,6 @@
 import {
   tryLegacyPackageOperation
-} from "./chunk-GU7QJ37F.js";
+} from "./chunk-JQ43NVFU.js";
 import {
   spawnStream
 } from "./chunk-EMA2XENR.js";
@@ -8,7 +8,7 @@ import {
   detectPackageManager,
   normalizeCommandOutput,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/install.ts
 import { join } from "node:path";
@@ -253,4 +253,4 @@ function resolveManifestPath(cwd, pkgManager) {
 export {
   installTool
 };
-//# sourceMappingURL=chunk-MIV2RU5B.js.map
+//# sourceMappingURL=chunk-ZETZHHV5.js.map

package/dist/{chunk-4ERMPDHV.js → chunk-ZSW5KO5S.js}

@@ -7,11 +7,12 @@ import {
 } from "./chunk-ZBMANLYH.js";
 import {
   loadGitignoreMatcher
-} from "./chunk-2CTZW6JQ.js";
+} from "./chunk-XHSHNOAF.js";
 import {
   isBinaryBuffer,
+  makeRootRelativizer,
   safeResolveReal
-} from "./chunk-ZUFHAHTE.js";
+} from "./chunk-HKR56VNF.js";
 
 // src/grep.ts
 import { spawn } from "node:child_process";
@@ -34,7 +35,7 @@ var grepTool = {
   name: "grep",
   category: "Search",
   description: "Search exact file contents using a regular expression. Use index-backed `codebase-search` first for symbol or concept discovery when it is live. Prefers ripgrep for speed and features when available.",
-  usageHint: 'EXACT-TEXT AND REGEX SEARCH:\n\n- When `codebase-search` is live, use it first for symbols and concepts; use `grep` for exact text, regexes, unsupported content, and concrete usage sites.\n- `pattern` is a regular expression.\n- Use `output_mode: "content"` (default) to get matching lines with context.\n- Use `"files_with_matches"` when you only need the list of files.\n- Use `"count"` for quick statistics.\n- `glob` and `path` let you narrow the search scope significantly.\n- Always prefer this over `bash grep` when searching code.',
+  usageHint: 'EXACT-TEXT AND REGEX SEARCH:\n\n- When `codebase-search` is live, use it first for symbols and concepts; use `grep` for exact text, regexes, unsupported content, and concrete usage sites.\n- `pattern` is a regular expression.\n- Use `output_mode: "content"` (default) to get matching lines with context.\n- Use `"files_with_matches"` when you only need the list of files.\n- Use `"count"` for quick statistics.\n- `glob` and `path` let you narrow the search scope significantly.\n- Always prefer this over `bash grep` when searching code.\n- Result paths are relative to the project root.',
   selection: {
     doNotUseWhen: "you only need to locate files by name or path pattern.",
     useInstead: ["glob"]
@@ -109,16 +110,17 @@ var grepTool = {
       });
     }
     const signal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
+    const relativize = makeRootRelativizer(ctx.cwd);
     const rgAvailable = await detectRg();
     if (rgAvailable) {
       try {
-        yield* runRgStream(input, base, mode, limit, signal);
+        yield* runRgStream(input, base, mode, limit, signal, relativize);
         return;
       } catch {
       }
     }
     yield { type: "log", text: "Falling back to native grep\u2026" };
-    const out = await runNative(input, base, mode, limit, signal);
+    const out = await runNative(input, base, mode, limit, signal, relativize);
     yield { type: "final", output: out };
   }
 };
@@ -146,7 +148,7 @@ function detectRg() {
   });
   return rgAvailabilityCache;
 }
-async function* runRgStream(input, base, mode, limit, signal) {
+async function* runRgStream(input, base, mode, limit, signal, relativize) {
   if (signal.aborted) {
     yield {
       type: "final",
@@ -281,8 +283,9 @@ async function* runRgStream(input, base, mode, limit, signal) {
         totalLines++;
         if (mode === "count") totalCount += parseRgCountLine(line);
         if (matches.length < limit) {
-          matches.push(line);
-          pendingBatch.push(line);
+          const shortened = relativize(line);
+          matches.push(shortened);
+          pendingBatch.push(shortened);
           batchSinceFlush++;
         }
       }
@@ -302,8 +305,9 @@ async function* runRgStream(input, base, mode, limit, signal) {
         totalLines++;
         if (mode === "count") totalCount += parseRgCountLine(line);
         if (matches.length < limit) {
-          matches.push(line);
-          pendingBatch.push(line);
+          const shortened = relativize(line);
+          matches.push(shortened);
+          pendingBatch.push(shortened);
         }
       }
     }
@@ -349,7 +353,7 @@ function parseRgCountLine(line) {
   const n = Number.parseInt(line.slice(idx + 1), 10);
   return Number.isFinite(n) ? n : 0;
 }
-async function runNative(input, base, mode, limit, signal) {
+async function runNative(input, base, mode, limit, signal, relativize) {
   if (signal.aborted) {
     return {
       matches: [],
@@ -423,9 +427,9 @@ async function runNative(input, base, mode, limit, signal) {
             fileHits++;
             total++;
             if (mode === "content") {
-              if (matches.length < limit) matches.push(`${full}:${lineNumber}:${ln}`);
+              if (matches.length < limit) matches.push(`${relativize(full)}:${lineNumber}:${ln}`);
             } else if (mode === "files_with_matches") {
-              if (fileHits === 1 && matches.length < limit) matches.push(full);
+              if (fileHits === 1 && matches.length < limit) matches.push(relativize(full));
               break;
             }
             if (countOnlyFirstHit || mode === "content" && matches.length >= limit) {
@@ -443,16 +447,16 @@ async function runNative(input, base, mode, limit, signal) {
             fileHits++;
             total++;
             if (mode === "content") {
-              if (matches.length < limit) matches.push(`${full}:${lineNumber}:${ln}`);
+              if (matches.length < limit) matches.push(`${relativize(full)}:${lineNumber}:${ln}`);
             } else if (mode === "files_with_matches") {
-              if (matches.length < limit) matches.push(full);
+              if (matches.length < limit) matches.push(relativize(full));
             }
           }
         }
         if (fileHits > 0) {
           if (mode === "count") {
             if (matches.length < limit) {
-              matches.push(`${full}:${fileHits}`);
+              matches.push(`${relativize(full)}:${fileHits}`);
             } else {
               countTruncated = true;
             }
@@ -522,4 +526,4 @@ export {
   __resetRgDetectionForTests,
   __setRgAvailableForTests
 };
-//# sourceMappingURL=chunk-4ERMPDHV.js.map
+//# sourceMappingURL=chunk-ZSW5KO5S.js.map

package/dist/clarify.d.ts

@@ -3,29 +3,44 @@
  *
  * Prompts the user with structured, multiple-choice questions when architectural,
  * database schema, API contract, or domain logic assumptions are underspecified.
- * Prevents silent misaligned migrations, breaking changes, and refactoring re-work.
+ * Bridges clarify + ask_question into a single unified interactive tool
+ * functioning consistently across CLI, TUI, and WebUI.
  */
 import type { Tool } from '@wrongstack/core/types';
-export interface ClarifyQuestionInput {
+export interface ClarifyQuestionItem {
     /** The core decision or question to clarify with the user. */
     question: string;
     /** Context or explanation of why this decision matters (e.g. index performance, validation). */
     context?: string | undefined;
-    /** 2 to 4 structured, distinct choices for the user to select. */
+    /** 2 to 6 structured, distinct choices for the user to select. */
     options: string[];
     /** The option recommended by the assistant based on best practices. */
     recommendedOption?: string | undefined;
     /** Whether the user can select multiple options simultaneously. */
     isMultiSelect?: boolean | undefined;
+    /** Snake-case alias for isMultiSelect (Antigravity compatibility). */
+    is_multi_select?: boolean | undefined;
     /** Allow write-in custom responses in addition to options (default: true). */
     allowCustomResponse?: boolean | undefined;
 }
+export interface ClarifyQuestionInput extends Partial<ClarifyQuestionItem> {
+    /** Batch questions list (Antigravity ask_question parity). */
+    questions?: ClarifyQuestionItem[] | undefined;
+}
 export type ClarifyInput = ClarifyQuestionInput;
+export interface ClarifyAnswerItem {
+    question: string;
+    selectedOptions: string[];
+    customResponse?: string | undefined;
+}
 export interface ClarifyOutput {
     status: 'answered' | 'auto_decided' | 'skipped';
+    /** Primary / single question (for backward compatibility). */
     question: string;
     selectedOptions: string[];
     customResponse?: string | undefined;
+    /** Complete list of answers when clarifying one or more questions. */
+    answers?: ClarifyAnswerItem[] | undefined;
     decisionSummary: string;
     error?: string | undefined;
 }

package/dist/codebase-index/codebase-search-tool.d.ts

@@ -35,9 +35,8 @@ export interface CodebaseSearchInput {
     limit?: number | undefined;
     lspKind?: number | undefined;
     /**
-     * When true, hints that LSP-based search should be preferred over the index.
-     * The built-in tool ignores this (index-only), but when the LSP plugin is
-     * active it intercepts the tool and provides live LSP workspaceSymbol results.
+     * Deprecated compatibility hint. The built-in tool is index-only; the LSP
+     * plugin exposes live workspace-symbol search as `codebase-lsp-search`.
      */
     preferLsp?: boolean | undefined;
 }

package/dist/codebase-index/gitignore.d.ts

@@ -4,7 +4,7 @@
  * Supports the parts of the gitignore spec that matter for skipping source
  * files: comments / blanks, `!` negation (last match wins), trailing-slash
  * directory-only rules, leading-slash / embedded-slash anchoring, and the
- * `*` / `**` / `?` / `[...]` globs (via core's {@link compileGlob}).
+ * `*` / `**` / `?` / `[...]` globs (via core's {@link compileGlobMatcher}).
  *
  * Only the project-root `.gitignore` is read. Nested `.gitignore` files are not
  * walked — the common build/dependency dirs that would live deeper are already

package/dist/codebase-index/index.js

@@ -51,7 +51,7 @@ import {
   setContextQueryEmbedder,
   writeAtlas,
   writeProjectAtlas
-} from "../chunk-PNLDTRC5.js";
+} from "../chunk-CYPYJIAF.js";
 import "../chunk-XRNN44QY.js";
 import "../chunk-EMA2XENR.js";
 import "../chunk-SCMRM6NL.js";
@@ -78,11 +78,11 @@ import {
   shutdownCodebaseIndexHost,
   shutdownCodebaseIndexServer,
   symbolGraphService
-} from "../chunk-CVNCSMVU.js";
+} from "../chunk-DOHU3XHS.js";
 import {
   projectIndexServerEndpoint,
   projectIndexServerMetadataPath
-} from "../chunk-6ZLRRC74.js";
+} from "../chunk-WBAPU3AB.js";
 import {
   CONCEPT_RELATIONS,
   CONTRADICTED_VISIBILITY_WEIGHT,
@@ -122,8 +122,8 @@ import {
   shouldRefreshRanks,
   toSymbolRankRows,
   tokenise
-} from "../chunk-3JVSOBHU.js";
-import "../chunk-6LCKF5KH.js";
+} from "../chunk-54SIRJ6D.js";
+import "../chunk-7PEZU5Y4.js";
 import "../chunk-REWOZIA4.js";
 import "../chunk-6IEBD27U.js";
 import {
@@ -138,9 +138,9 @@ import {
 import {
   compileGitignore,
   loadGitignoreMatcher
-} from "../chunk-2CTZW6JQ.js";
+} from "../chunk-XHSHNOAF.js";
 import "../chunk-5U5ULQX2.js";
-import "../chunk-ZUFHAHTE.js";
+import "../chunk-HKR56VNF.js";
 export {
   ATLAS_DIR,
   ATLAS_FILE_LIMIT,

package/dist/codebase-index/parser-worker-script.js

@@ -1,6 +1,6 @@
 import {
   parseFilesContent
-} from "../chunk-6LCKF5KH.js";
+} from "../chunk-7PEZU5Y4.js";
 import "../chunk-REWOZIA4.js";
 import "../chunk-6IEBD27U.js";
 import "../chunk-ZKC5UNGD.js";

package/dist/codebase-index/project-server-endpoint.d.ts

@@ -1,4 +1,6 @@
 export declare const PROJECT_INDEX_SERVER_PROTOCOL_VERSION = 1;
+/** Keep only the tail; a daemon that crash-loops must not fill the disk. */
+export declare const PROJECT_INDEX_SERVER_STDERR_MAX_BYTES: number;
 /**
  * Content identity for the actual server artifact.
  *
@@ -33,4 +35,35 @@ export declare function projectIndexServerKey(projectRoot: string, indexDir?: st
  */
 export declare function projectIndexServerEndpoint(projectRoot: string, indexDir?: string): string;
 export declare function projectIndexServerMetadataPath(projectRoot: string, indexDir?: string): string;
+/**
+ * Where a detached daemon's stderr is kept.
+ *
+ * The daemon used to be spawned with `stdio: 'ignore'`, so when it died the
+ * only trace was the client's `codebase-index server connection closed` —
+ * a message that names the symptom and no cause. Node writes an uncaught
+ * exception's stack to stderr before exiting, and V8 writes its fatal
+ * out-of-memory message there too (which no JS handler can intercept), so
+ * keeping the stream is what makes a dead daemon explain itself.
+ */
+export declare function projectIndexServerStderrPath(projectRoot: string, indexDir?: string): string;
+/**
+ * The tail of a daemon's stderr, condensed to one line for an error message.
+ *
+ * Returns null when there is nothing useful: no file, an empty one, or only
+ * whitespace. Reads at most the last `PROJECT_INDEX_SERVER_STDERR_MAX_BYTES`
+ * so a large file cannot be pulled into memory here.
+ */
+export declare function readProjectIndexServerStderrTail(path_: string, maxLines?: number): string | null;
+/** The base close message. Kept as a PREFIX so existing substring matchers
+ * (and anyone grepping logs for it) keep working when a reason is appended. */
+export declare const PROJECT_INDEX_SERVER_CLOSED_MESSAGE = "codebase-index server connection closed";
+/**
+ * Compose the error a closed connection rejects with.
+ *
+ * A closed socket has two very different causes — an orderly shutdown and the
+ * daemon dying — and they used to be reported identically. When the daemon
+ * left something on stderr, that text is the whole difference between a
+ * failure someone can act on and one that reads as a flake.
+ */
+export declare function formatProjectIndexServerCloseError(tail: string | null): string;
 //# sourceMappingURL=project-server-endpoint.d.ts.map

package/dist/codebase-index/project-server.js

@@ -10,7 +10,7 @@ import {
   projectIndexServerBuildId,
   projectIndexServerEndpoint,
   projectIndexServerMetadataPath
-} from "../chunk-6ZLRRC74.js";
+} from "../chunk-WBAPU3AB.js";
 import {
   contextService,
   fileGraphService,
@@ -24,8 +24,8 @@ import {
   statsService,
   symbolGraphService,
   vectorSearchService
-} from "../chunk-3JVSOBHU.js";
-import "../chunk-6LCKF5KH.js";
+} from "../chunk-54SIRJ6D.js";
+import "../chunk-7PEZU5Y4.js";
 import "../chunk-REWOZIA4.js";
 import "../chunk-6IEBD27U.js";
 import {
@@ -34,7 +34,7 @@ import {
 import {
   isIndexablePath
 } from "../chunk-YOHO4DVT.js";
-import "../chunk-2CTZW6JQ.js";
+import "../chunk-XHSHNOAF.js";
 import "../chunk-5U5ULQX2.js";
 
 // src/codebase-index/project-server.ts
@@ -44,6 +44,7 @@ import * as net from "node:net";
 import * as path3 from "node:path";
 import { startSharedHeapWatchdog, useDaemonPerfDefaults } from "@wrongstack/core/utils";
 import { bindProjectEndpoint } from "@wrongstack/persistence";
+import { timingSafeTokenEqual } from "@wrongstack/primitives";
 
 // src/codebase-index/project-server-framing.ts
 var MAX_CLIENT_WRITE_BUFFER_BYTES = 8 * 1024 * 1024;
@@ -890,7 +891,7 @@ async function handleMessage(state, message) {
     state.cancel.get(message.id)?.();
     return;
   }
-  if (message.authToken !== authToken) {
+  if (!timingSafeTokenEqual(message.authToken, authToken)) {
     send(state, {
       type: "response",
       id: message.id,