@wrongstack/tools 1.0.7 → 1.0.8

package/dist/bash.js

@@ -1,6 +1,6 @@
 import {
   bashTool
-} from "./chunk-CLJXKFVS.js";
+} from "./chunk-5KRKL3WD.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";

package/dist/builtin.js

@@ -6,7 +6,7 @@ import {
   TIER2_TOOLS,
   TIER3_TOOLS,
   builtinTools
-} from "./chunk-4DK5WZGR.js";
+} from "./chunk-GNLHBDFO.js";
 import "./chunk-BVHKBBGA.js";
 import "./chunk-JB5JLY7V.js";
 import "./chunk-XRNN44QY.js";
@@ -32,12 +32,12 @@ import "./chunk-3LQJXJDM.js";
 import "./chunk-SEONDNLN.js";
 import "./chunk-EMA2XENR.js";
 import "./chunk-KMXPP32M.js";
-import "./chunk-JKFIDWQG.js";
-import "./chunk-2W4XTULI.js";
+import "./chunk-HOFVYIPI.js";
+import "./chunk-FI6SOIVE.js";
 import "./chunk-YJTXRH5Y.js";
 import "./chunk-ZBMANLYH.js";
-import "./chunk-CLJXKFVS.js";
-import "./chunk-A3LNNBYO.js";
+import "./chunk-5KRKL3WD.js";
+import "./chunk-OGQMPX3J.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";

package/dist/{chunk-CLJXKFVS.js → chunk-5KRKL3WD.js}

@@ -575,7 +575,7 @@ var bashTool = {
       };
       return;
     }
-    const PIPE_TO_SHELL_PATTERN = /\|\s*(sh|bash|ksh|zsh|fish|cmd|powershell|pwsh)/i;
+    const PIPE_TO_SHELL_PATTERN = /\|\s*(?:sudo\s+)?(sh|bash|ksh|zsh|fish|cmd|powershell|pwsh)(?:\.exe)?\b/i;
     const pipeToShellNote = PIPE_TO_SHELL_PATTERN.test(input.command) ? "\n\n[wrongstack] Caution: this command pipes output into a shell interpreter (pipe-to-shell). Piped content executes as arbitrary code \u2014 review the source before trusting the result, and prefer downloading to a file and inspecting it first." : "";
     const rawTimeout = typeof input.timeout_ms === "number" && !Number.isNaN(input.timeout_ms) ? input.timeout_ms : DEFAULT_TIMEOUT_MS;
     const timeoutMs = Math.max(1, Math.min(rawTimeout, 6e5));
@@ -1093,4 +1093,4 @@ export {
   checkAndBlockKillCommand,
   bashTool
 };
-//# sourceMappingURL=chunk-CLJXKFVS.js.map
+//# sourceMappingURL=chunk-5KRKL3WD.js.map

package/dist/{chunk-2W4XTULI.js → chunk-FI6SOIVE.js}

@@ -18,6 +18,7 @@ import {
 import { spawn } from "node:child_process";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
+import { StringDecoder } from "node:string_decoder";
 import { ToolValidationError } from "@wrongstack/core/types";
 import {
   buildChildEnv,
@@ -31,6 +32,13 @@ var NATIVE_READ_CHUNK_BYTES = 64 * 1024;
 var NATIVE_MAX_FILE_BYTES = 1e6;
 var RG_MAX_QUEUE_CHUNKS = 128;
 var RG_MAX_QUEUE_CHARS = 8 * 1024 * 1024;
+function isInsideDefaultIgnoredDirectory(target, root) {
+  const relative2 = path.relative(root, target);
+  if (!relative2 || relative2 === ".." || relative2.startsWith(`..${path.sep}`) || path.isAbsolute(relative2)) {
+    return false;
+  }
+  return relative2.split(path.sep).some((segment) => DEFAULT_IGNORE.has(segment));
+}
 var grepTool = {
   name: "grep",
   category: "Search",
@@ -99,6 +107,8 @@ var grepTool = {
       });
     }
     const base = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
+    const ignoreRoot = await fs.realpath(ctx.projectRoot ?? ctx.cwd).catch(() => path.resolve(ctx.projectRoot ?? ctx.cwd));
+    const ignoreTarget = await fs.realpath(base).catch(() => path.resolve(base));
     const mode = input.output_mode ?? "content";
     const rawLimit = typeof input.limit === "number" && Number.isFinite(input.limit) ? input.limit : 200;
     const limit = Math.max(1, Math.min(Math.floor(rawLimit), 2e3));
@@ -112,6 +122,18 @@ var grepTool = {
     const signal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
     const relativize = makeRootRelativizer(ctx.cwd);
     const rgAvailable = await detectRg();
+    if (isInsideDefaultIgnoredDirectory(ignoreTarget, ignoreRoot)) {
+      yield {
+        type: "final",
+        output: {
+          matches: [],
+          count: 0,
+          truncated: false,
+          used: rgAvailable ? "rg" : "native"
+        }
+      };
+      return;
+    }
     if (rgAvailable) {
       try {
         yield* runRgStream(input, base, mode, limit, signal, relativize);
@@ -132,7 +154,7 @@ function __setRgAvailableForTests(available) {
   rgAvailabilityCache = available !== void 0 ? Promise.resolve(available) : void 0;
 }
 function detectRg() {
-  rgAvailabilityCache ??= new Promise((resolve) => {
+  rgAvailabilityCache ??= new Promise((resolve2) => {
     try {
       const p = spawn("rg", ["--version"], {
         env: buildChildEnv(),
@@ -140,10 +162,10 @@ function detectRg() {
         signal: AbortSignal.timeout(1e4),
         windowsHide: true
       });
-      p.on("error", () => resolve(false));
-      p.on("close", (code) => resolve(code === 0));
+      p.on("error", () => resolve2(false));
+      p.on("close", (code) => resolve2(code === 0));
     } catch {
-      resolve(false);
+      resolve2(false);
     }
   });
   return rgAvailabilityCache;
@@ -398,6 +420,7 @@ async function runNative(input, base, mode, limit, signal, relativize) {
         let lineNumber = 0;
         let fileHits = 0;
         let leftover = "";
+        const decoder = new StringDecoder("utf8");
         let binaryChecked = false;
         const buffer = Buffer.allocUnsafe(Math.min(NATIVE_READ_CHUNK_BYTES, maxBytes));
         while (!stopped && !signal.aborted && bytesReadTotal < maxBytes) {
@@ -415,7 +438,7 @@ async function runNative(input, base, mode, limit, signal, relativize) {
             if (isBinaryBuffer(chunk)) return;
           }
           bytesReadTotal += bytesRead;
-          const text = leftover + chunk.toString("utf8");
+          const text = leftover + decoder.write(chunk);
           const lines = text.split(/\r?\n/);
           leftover = lines.pop() ?? "";
           for (const rawLine of lines) {
@@ -439,6 +462,7 @@ async function runNative(input, base, mode, limit, signal, relativize) {
           }
           if (mode === "files_with_matches" && fileHits > 0) break;
         }
+        leftover += decoder.end();
         if (!stopped && !signal.aborted && leftover.length > 0) {
           lineNumber++;
           const ln = leftover.length > 4096 ? capSubject(leftover) : leftover;
@@ -526,4 +550,4 @@ export {
   __resetRgDetectionForTests,
   __setRgAvailableForTests
 };
-//# sourceMappingURL=chunk-2W4XTULI.js.map
+//# sourceMappingURL=chunk-FI6SOIVE.js.map

package/dist/{chunk-4DK5WZGR.js → chunk-GNLHBDFO.js}

@@ -80,20 +80,20 @@ import {
 } from "./chunk-KMXPP32M.js";
 import {
   globTool
-} from "./chunk-JKFIDWQG.js";
+} from "./chunk-HOFVYIPI.js";
 import {
   grepTool
-} from "./chunk-2W4XTULI.js";
+} from "./chunk-FI6SOIVE.js";
 import {
   bashTool,
   checkAndBlockKillCommand,
   diagnoseBashism,
   shellArgs
-} from "./chunk-CLJXKFVS.js";
+} from "./chunk-5KRKL3WD.js";
 import {
   detectDanger,
   execTool
-} from "./chunk-A3LNNBYO.js";
+} from "./chunk-OGQMPX3J.js";
 import {
   buildChildEnv
 } from "./chunk-BTSFTGIL.js";
@@ -1692,4 +1692,4 @@ export {
   TIER3_TOOLS,
   builtinTools
 };
-//# sourceMappingURL=chunk-4DK5WZGR.js.map
+//# sourceMappingURL=chunk-GNLHBDFO.js.map

package/dist/{chunk-JKFIDWQG.js → chunk-HOFVYIPI.js}

@@ -71,6 +71,36 @@ var globTool = {
     const results = [];
     const visitedRealDirs = /* @__PURE__ */ new Set();
     let truncated = false;
+    const siftUp = (start) => {
+      let i = start;
+      while (i > 0) {
+        const parent = i - 1 >> 1;
+        if (results[parent].mtime <= results[i].mtime) return;
+        const tmp = results[i];
+        results[i] = results[parent];
+        results[parent] = tmp;
+        i = parent;
+      }
+    };
+    const siftDown = (start) => {
+      let i = start;
+      for (; ; ) {
+        const left = i * 2 + 1;
+        const right = left + 1;
+        let smallest = i;
+        if (left < results.length && results[left].mtime < results[smallest].mtime) {
+          smallest = left;
+        }
+        if (right < results.length && results[right].mtime < results[smallest].mtime) {
+          smallest = right;
+        }
+        if (smallest === i) return;
+        const tmp = results[i];
+        results[i] = results[smallest];
+        results[smallest] = tmp;
+        i = smallest;
+      }
+    };
     const pushResult = async (full) => {
       if (signal?.aborted) {
         truncated = true;
@@ -82,18 +112,16 @@ var globTool = {
           truncated = true;
           return;
         }
+        const entry = { rel: full, mtime: st.mtimeMs };
         if (results.length < limit) {
-          results.push({ rel: full, mtime: st.mtimeMs });
+          results.push(entry);
+          siftUp(results.length - 1);
           return;
         }
         truncated = true;
-        let oldestIndex = 0;
-        for (let i = 1; i < results.length; i++) {
-          if (results[i].mtime < results[oldestIndex].mtime) oldestIndex = i;
-        }
-        if (st.mtimeMs > results[oldestIndex].mtime) {
-          results[oldestIndex] = { rel: full, mtime: st.mtimeMs };
-        }
+        if (st.mtimeMs <= results[0].mtime) return;
+        results[0] = entry;
+        siftDown(0);
       } catch {
       }
     };
@@ -160,4 +188,4 @@ var globTool = {
 export {
   globTool
 };
-//# sourceMappingURL=chunk-JKFIDWQG.js.map
+//# sourceMappingURL=chunk-HOFVYIPI.js.map

package/dist/{chunk-YPSIG23D.js → chunk-MF6ZUBI7.js}

@@ -1,10 +1,10 @@
 import {
   builtinToolsPack
-} from "./chunk-KPR53VKZ.js";
+} from "./chunk-YUK3WLHJ.js";
 import {
   TIER1_TOOLS,
   TIER2_TOOLS
-} from "./chunk-4DK5WZGR.js";
+} from "./chunk-GNLHBDFO.js";
 
 // src/tool-tier.ts
 function toolNameSet(tools) {
@@ -54,4 +54,4 @@ export {
   selectBuiltinToolsForTier,
   registerBuiltinToolTier
 };
-//# sourceMappingURL=chunk-YPSIG23D.js.map
+//# sourceMappingURL=chunk-MF6ZUBI7.js.map

package/dist/{chunk-A3LNNBYO.js → chunk-OGQMPX3J.js}

@@ -272,8 +272,10 @@ var RULES = [
       if (cmd !== "git") return false;
       const cleanIdx = args.indexOf("clean");
       if (cleanIdx < 0) return false;
-      return args.slice(cleanIdx + 1).some(
-        (a) => a === "-f" || a === "--force" || a.startsWith("-f") || a.startsWith("--force=")
+      const after = args.slice(cleanIdx + 1);
+      if (after.some((a) => a === "--dry-run" || /^-[a-z]*n[a-z]*$/i.test(a))) return false;
+      return after.some(
+        (a) => a === "--force" || a.startsWith("--force=") || /^-[a-z]+$/i.test(a) && a.toLowerCase().includes("f")
       );
     },
     reason: "git clean -f (deletes untracked files)"
@@ -1844,4 +1846,4 @@ export {
   getExecAllowlist,
   execTool
 };
-//# sourceMappingURL=chunk-A3LNNBYO.js.map
+//# sourceMappingURL=chunk-OGQMPX3J.js.map

package/dist/{chunk-KPR53VKZ.js → chunk-YUK3WLHJ.js}

@@ -1,6 +1,6 @@
 import {
   builtinTools
-} from "./chunk-4DK5WZGR.js";
+} from "./chunk-GNLHBDFO.js";
 
 // src/pack.ts
 var builtinToolsPack = {
@@ -12,4 +12,4 @@ var builtinToolsPack = {
 export {
   builtinToolsPack
 };
-//# sourceMappingURL=chunk-KPR53VKZ.js.map
+//# sourceMappingURL=chunk-YUK3WLHJ.js.map

package/dist/exec.js

@@ -7,7 +7,7 @@ import {
   isExecCommandAllowed,
   resetDangerBypass,
   resetExecPolicy
-} from "./chunk-A3LNNBYO.js";
+} from "./chunk-OGQMPX3J.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";

package/dist/glob.js

@@ -1,6 +1,6 @@
 import {
   globTool
-} from "./chunk-JKFIDWQG.js";
+} from "./chunk-HOFVYIPI.js";
 import "./chunk-ZBMANLYH.js";
 import "./chunk-XHSHNOAF.js";
 import "./chunk-2IAEJRLT.js";

package/dist/grep.js

@@ -2,7 +2,7 @@ import {
   __resetRgDetectionForTests,
   __setRgAvailableForTests,
   grepTool
-} from "./chunk-2W4XTULI.js";
+} from "./chunk-FI6SOIVE.js";
 import "./chunk-YJTXRH5Y.js";
 import "./chunk-ZBMANLYH.js";
 import "./chunk-XHSHNOAF.js";

package/dist/index.js

@@ -46,10 +46,10 @@ import "./chunk-Z6DAKQ3U.js";
 import {
   registerBuiltinToolTier,
   selectBuiltinToolsForTier
-} from "./chunk-YPSIG23D.js";
+} from "./chunk-MF6ZUBI7.js";
 import {
   builtinToolsPack
-} from "./chunk-KPR53VKZ.js";
+} from "./chunk-YUK3WLHJ.js";
 import {
   OFF_ONLY_TOOLS,
   OPTIONAL_TOOLS,
@@ -64,7 +64,7 @@ import {
   pwshTool,
   readUrlContentTool,
   securityAstScanTool
-} from "./chunk-4DK5WZGR.js";
+} from "./chunk-GNLHBDFO.js";
 import {
   discoverE2EProjects,
   e2ePlanTool
@@ -177,10 +177,10 @@ import {
 } from "./chunk-KMXPP32M.js";
 import {
   globTool
-} from "./chunk-JKFIDWQG.js";
+} from "./chunk-HOFVYIPI.js";
 import {
   grepTool
-} from "./chunk-2W4XTULI.js";
+} from "./chunk-FI6SOIVE.js";
 import {
   MAX_SUBJECT_LEN,
   capSubject,
@@ -192,7 +192,7 @@ import {
 import {
   bashTool,
   checkAndBlockKillCommand
-} from "./chunk-CLJXKFVS.js";
+} from "./chunk-5KRKL3WD.js";
 import {
   checkExecKillCommand,
   configureDangerBypass,
@@ -204,7 +204,7 @@ import {
   isExecCommandAllowed,
   resetDangerBypass,
   resetExecPolicy
-} from "./chunk-A3LNNBYO.js";
+} from "./chunk-OGQMPX3J.js";
 import "./chunk-BTSFTGIL.js";
 import {
   getPersistentProcessRegistry,

package/dist/pack.js

@@ -1,7 +1,7 @@
 import {
   builtinToolsPack
-} from "./chunk-KPR53VKZ.js";
-import "./chunk-4DK5WZGR.js";
+} from "./chunk-YUK3WLHJ.js";
+import "./chunk-GNLHBDFO.js";
 import "./chunk-BVHKBBGA.js";
 import "./chunk-JB5JLY7V.js";
 import "./chunk-XRNN44QY.js";
@@ -27,12 +27,12 @@ import "./chunk-3LQJXJDM.js";
 import "./chunk-SEONDNLN.js";
 import "./chunk-EMA2XENR.js";
 import "./chunk-KMXPP32M.js";
-import "./chunk-JKFIDWQG.js";
-import "./chunk-2W4XTULI.js";
+import "./chunk-HOFVYIPI.js";
+import "./chunk-FI6SOIVE.js";
 import "./chunk-YJTXRH5Y.js";
 import "./chunk-ZBMANLYH.js";
-import "./chunk-CLJXKFVS.js";
-import "./chunk-A3LNNBYO.js";
+import "./chunk-5KRKL3WD.js";
+import "./chunk-OGQMPX3J.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";

package/dist/tool-tier.js

@@ -2,9 +2,9 @@ import {
   BUILTIN_TIER_COUNTS,
   registerBuiltinToolTier,
   selectBuiltinToolsForTier
-} from "./chunk-YPSIG23D.js";
-import "./chunk-KPR53VKZ.js";
-import "./chunk-4DK5WZGR.js";
+} from "./chunk-MF6ZUBI7.js";
+import "./chunk-YUK3WLHJ.js";
+import "./chunk-GNLHBDFO.js";
 import "./chunk-BVHKBBGA.js";
 import "./chunk-JB5JLY7V.js";
 import "./chunk-XRNN44QY.js";
@@ -30,12 +30,12 @@ import "./chunk-3LQJXJDM.js";
 import "./chunk-SEONDNLN.js";
 import "./chunk-EMA2XENR.js";
 import "./chunk-KMXPP32M.js";
-import "./chunk-JKFIDWQG.js";
-import "./chunk-2W4XTULI.js";
+import "./chunk-HOFVYIPI.js";
+import "./chunk-FI6SOIVE.js";
 import "./chunk-YJTXRH5Y.js";
 import "./chunk-ZBMANLYH.js";
-import "./chunk-CLJXKFVS.js";
-import "./chunk-A3LNNBYO.js";
+import "./chunk-5KRKL3WD.js";
+import "./chunk-OGQMPX3J.js";
 import "./chunk-BTSFTGIL.js";
 import "./chunk-PVCB7RUZ.js";
 import "./chunk-SCMRM6NL.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/tools",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "license": "MIT",
   "description": "WrongStack built-in tools: read/write/edit, bash/exec, grep/glob, git, fetch, test, lint, and more.",
   "repository": {
@@ -237,10 +237,10 @@
     "@msgpack/msgpack": "^3.1.3",
     "@playwright/test": "^1.62.1",
     "@typescript/typescript6": "^6.0.2",
-    "@wrongstack/core": "1.0.7",
-    "@wrongstack/kanban": "1.0.7",
-    "@wrongstack/persistence": "1.0.7",
-    "@wrongstack/primitives": "1.0.7",
+    "@wrongstack/core": "1.0.8",
+    "@wrongstack/kanban": "1.0.8",
+    "@wrongstack/persistence": "1.0.8",
+    "@wrongstack/primitives": "1.0.8",
     "tree-sitter-wasm": "1.1.4",
     "turndown": "^7.2.4",
     "undici": "^8.10.0",