@wrongstack/tools 1.0.8 → 1.0.10

package/dist/{chunk-62OAECEQ.js → chunk-LLSFOUZF.js}

@@ -150,14 +150,15 @@ var searchTool = {
       engineError = fallback.error;
       effectiveSource = "duckduckgo";
     }
-    const finalResults = ranked.slice(0, num);
-    if (!engineError) {
-      cache.set(cacheKey, { results: ranked, source: effectiveSource, timestamp: Date.now() });
-      pruneCacheEntries();
+    if (engineError) {
+      throw new Error(`search: ${engineError}`);
     }
+    const finalResults = ranked.slice(0, num);
+    cache.set(cacheKey, { results: ranked, source: effectiveSource, timestamp: Date.now() });
+    pruneCacheEntries();
     yield {
       type: "partial_output",
-      text: engineError ? `search failed: ${engineError}` : `${finalResults.length} results from ${effectiveSource}`,
+      text: `${finalResults.length} results from ${effectiveSource}`,
       data: { count: finalResults.length, cached: false, source: effectiveSource }
     };
     yield {
@@ -171,8 +172,7 @@ var searchTool = {
         })),
         source: effectiveSource,
         truncated: ranked.length > num,
-        cached: false,
-        ...engineError ? { error: engineError } : {}
+        cached: false
       }
     };
   }
@@ -469,4 +469,4 @@ export {
   __setSearchCacheForTest,
   __getSearchCacheSizeForTest
 };
-//# sourceMappingURL=chunk-62OAECEQ.js.map
+//# sourceMappingURL=chunk-LLSFOUZF.js.map

package/dist/{chunk-YZQSUL5G.js → chunk-M4ZHHCCW.js}

@@ -5,7 +5,12 @@ import {
 // src/tree.ts
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { compileGlob, DEFAULT_WALK_IGNORE_DIRS, expectDefined } from "@wrongstack/core/utils";
+import {
+  compileGlob,
+  DEFAULT_WALK_IGNORE_DIRS,
+  expectDefined,
+  toErrorMessage
+} from "@wrongstack/core/utils";
 var DEFAULT_IGNORE = /* @__PURE__ */ new Set([
   ...DEFAULT_WALK_IGNORE_DIRS,
   ".wrongstack",
@@ -88,9 +93,7 @@ var treeTool = {
     const rawExclude = Array.isArray(input.exclude) ? input.exclude : typeof input.exclude === "string" ? [input.exclude] : [];
     const exclude = /* @__PURE__ */ new Set([
       ...DEFAULT_IGNORE,
-      ...rawExclude.filter((s) => typeof s === "string").map(
-        (s) => s.trim().replace(/\\/g, "/").replace(/\/+$/, "").replace(/^\.\//, "")
-      ).filter(Boolean)
+      ...rawExclude.filter((s) => typeof s === "string").map((s) => s.trim().replace(/\\/g, "/").replace(/\/+$/, "").replace(/^\.\//, "")).filter(Boolean)
     ]);
     const globRe = input.glob ? compileGlob(input.glob) : void 0;
     const maxEntries = typeof input.max_entries === "number" && Number.isFinite(input.max_entries) && input.max_entries > 0 ? Math.floor(input.max_entries) : DEFAULT_MAX_ENTRIES;
@@ -184,7 +187,12 @@ function matchesTreeGlob(globRe, fileName, absPath, basePath) {
 async function walkDir(dir, depth, opts) {
   opts.signal.throwIfAborted();
   if (opts.retention.truncated) return;
-  const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+  const entries = await fs.readdir(dir, { withFileTypes: true }).catch((err) => {
+    if (depth === 0) {
+      throw new Error(`tree: cannot list "${dir}": ${toErrorMessage(err)}`, { cause: err });
+    }
+    return [];
+  });
   const filtered = entries.filter((e) => {
     if (!opts.showHidden && e.name.startsWith(".")) return false;
     if (opts.exclude.has(e.name)) return false;
@@ -248,4 +256,4 @@ export {
   MAX_TREE_OUTPUT_BYTES,
   treeTool
 };
-//# sourceMappingURL=chunk-YZQSUL5G.js.map
+//# sourceMappingURL=chunk-M4ZHHCCW.js.map

package/dist/{chunk-IXIS7RSG.js → chunk-MRXWOOOR.js}

@@ -16,6 +16,7 @@ import {
 } from "@wrongstack/core/design";
 import { ToolValidationError } from "@wrongstack/core/types";
 import { atomicWrite } from "@wrongstack/core/utils";
+var NO_ACTIVE_KIT = 'design: no active kit. Pick one first: `design {action:"use", kit:"<id>"}`.';
 async function resolveReal(p) {
   const resolved = path.resolve(p);
   let probe = resolved;
@@ -139,16 +140,22 @@ var designTool = {
       const kitId = input.kit?.trim();
       if (!kitId) {
         const menu2 = await loader.menuText();
-        return { action, output: `No kit id provided.
+        throw new ToolValidationError({
+          message: `design: "use" requires a kit id.
 
-${menu2}` };
+${menu2}`,
+          field: "kit"
+        });
       }
       const manifest = await loader.find(kitId);
       if (!manifest) {
         const menu2 = await loader.menuText();
-        return { action, kit: kitId, output: `Kit "${kitId}" not found.
+        throw new ToolValidationError({
+          message: `design: kit "${kitId}" not found.
 
-${menu2}` };
+${menu2}`,
+          field: "kit"
+        });
       }
       const resolvedStack = stack ?? manifest.stacks[0] ?? "web";
       const body = await loader.readBody(manifest.id, resolvedStack);
@@ -192,15 +199,13 @@ ${body}`
     if (action === "set") {
       const patch = normalizeOverrides(input.set);
       if (Object.keys(patch).length === 0) {
-        return { action, output: 'No overrides given. Pass set:{ "primary": "oklch(\u2026)" }.' };
+        throw new ToolValidationError({
+          message: 'design: no overrides given. Pass set:{ "primary": "oklch(\u2026)" }.',
+          field: "set"
+        });
       }
       const merged = await recordOverrides(ctx.projectRoot, patch, (/* @__PURE__ */ new Date()).toISOString());
-      if (!merged) {
-        return {
-          action,
-          output: 'No active kit. Pick one first: `design {action:"use", kit:"<id>"}`.'
-        };
-      }
+      if (!merged) throw new Error(NO_ACTIVE_KIT);
       setDesignOverrides(ctx, merged);
       return {
         action,
@@ -211,18 +216,13 @@ These win over kit tokens. Run \`design {action:"materialize"}\` to write them t
     if (action === "tune") {
       const patch = resolveSemanticTune(input.tune ?? {});
       if (Object.keys(patch).length === 0) {
-        return {
-          action,
-          output: 'No recognized knobs. Pass tune:{ radius:"lg", density:"compact", font:"\u2026", motion:"snappy" }.'
-        };
+        throw new ToolValidationError({
+          message: 'design: no recognized knobs. Pass tune:{ radius:"lg", density:"compact", font:"\u2026", motion:"snappy" }.',
+          field: "tune"
+        });
       }
       const merged = await recordOverrides(ctx.projectRoot, patch, (/* @__PURE__ */ new Date()).toISOString());
-      if (!merged) {
-        return {
-          action,
-          output: 'No active kit. Pick one first: `design {action:"use", kit:"<id>"}`.'
-        };
-      }
+      if (!merged) throw new Error(NO_ACTIVE_KIT);
       setDesignOverrides(ctx, merged);
       return {
         action,
@@ -232,17 +232,10 @@ Run \`design {action:"materialize"}\` to write the tuned tokens to your theme fi
     }
     if (action === "materialize") {
       const active = await loadActiveKit(ctx.projectRoot);
-      if (!active) {
-        return {
-          action,
-          output: 'No active kit. Pick one first: `design {action:"use", kit:"<id>"}`.'
-        };
-      }
+      if (!active) throw new Error(NO_ACTIVE_KIT);
       const resolvedStack = stack ?? (active.stack && isDesignStack(active.stack) ? active.stack : "web");
       const rawTokens = await loader.readTokens(active.kit);
-      if (!rawTokens) {
-        return { action, kit: active.kit, output: `Kit "${active.kit}" has no tokens.json.` };
-      }
+      if (!rawTokens) throw new Error(`design: kit "${active.kit}" has no tokens.json.`);
       const tokens = applyTokenOverrides(rawTokens, active.overrides);
       const result = materializeTokens({
         tokens,
@@ -268,17 +261,13 @@ Run \`design {action:"materialize"}\` to write the tuned tokens to your theme fi
       } catch {
       }
       if (exists && !input.force) {
-        return {
-          action,
-          kit: active.kit,
-          stack: resolvedStack,
-          path: result.path,
-          output: `${result.path} already exists. Re-run with force:true to overwrite, or write this ${result.format} yourself:
+        throw new Error(
+          `design: ${result.path} already exists \u2014 nothing was written. Re-run with force:true to overwrite, or write this ${result.format} yourself:
 
 \`\`\`
 ${result.content}
 \`\`\``
-        };
+        );
       }
       await fs.mkdir(path.dirname(abs), { recursive: true });
       await atomicWrite(abs, result.content);
@@ -293,17 +282,10 @@ ${result.content}
     if (action === "verify") {
       signal?.throwIfAborted();
       const active = await loadActiveKit(ctx.projectRoot);
-      if (!active) {
-        return {
-          action,
-          output: 'No active kit to verify against. Pick one: `design {action:"use", kit:"<id>"}`.'
-        };
-      }
+      if (!active) throw new Error(NO_ACTIVE_KIT);
       signal?.throwIfAborted();
       const rawTokens = await loader.readTokens(active.kit);
-      if (!rawTokens) {
-        return { action, kit: active.kit, output: `Kit "${active.kit}" has no tokens.json.` };
-      }
+      if (!rawTokens) throw new Error(`design: kit "${active.kit}" has no tokens.json.`);
       signal?.throwIfAborted();
       const tokens = applyTokenOverrides(rawTokens, active.overrides);
       const normalizedFiles = input.files ? (Array.isArray(input.files) ? input.files : String(input.files).split(",")).filter((f) => typeof f === "string").map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean) : void 0;
@@ -334,4 +316,4 @@ Replace off-palette colors with kit tokens (or the materialized CSS vars / token
 export {
   designTool
 };
-//# sourceMappingURL=chunk-IXIS7RSG.js.map
+//# sourceMappingURL=chunk-MRXWOOOR.js.map

package/dist/{chunk-C4DSQBTT.js → chunk-NEYUPZL6.js}

@@ -1,6 +1,6 @@
 import {
   parseFilesContent
-} from "./chunk-7E55DAFW.js";
+} from "./chunk-KHUCKLOR.js";
 import {
   recordFilesystemRead
 } from "./chunk-ZKC5UNGD.js";
@@ -4993,7 +4993,7 @@ var ParserWorkerPool = class {
    */
   async reparseInline(batch, orphaned, workerId) {
     try {
-      const { parseFileContent } = await import("./parser-dispatch-4E2SDQUO.js");
+      const { parseFileContent } = await import("./parser-dispatch-WG4DNBHH.js");
       for (const item of orphaned) {
         if (batch.settled) return;
         try {
@@ -5856,4 +5856,4 @@ export {
   incomingCallsService,
   outgoingCallsService
 };
-//# sourceMappingURL=chunk-C4DSQBTT.js.map
+//# sourceMappingURL=chunk-NEYUPZL6.js.map

package/dist/{chunk-6XYFYLN7.js → chunk-O2MHULBO.js}

@@ -133,6 +133,10 @@ async function assertBrowserUrlAllowed(rawUrl, opts) {
   const url = parseBrowserUrl(rawUrl, opts.navigation ?? true);
   if (!opts.navigation && SAFE_SUBRESOURCE_PROTOCOLS.has(url.protocol)) return url;
   if (!opts.allowPrivateHosts && !isAllowedPrivateOrigin(url, opts.allowedPrivateOrigins)) {
+    const normalizedHost = unbracket(url.hostname).replace(/\.+$/, "").toLowerCase();
+    if (normalizedHost === "localhost" || normalizedHost.endsWith(".localhost")) {
+      throw new Error("browser: blocked localhost target");
+    }
     await assertNotPrivateHost(url.hostname);
   }
   return url;
@@ -148,7 +152,8 @@ async function resolvePinnedBrowserTarget(rawUrl, opts = {}) {
     }
     return { url, address: hostname, family: literalFamily };
   }
-  if ((hostname === "localhost" || hostname.endsWith(".localhost")) && !allowPrivate) {
+  const normalizedHost = hostname.replace(/\.+$/, "").toLowerCase();
+  if ((normalizedHost === "localhost" || normalizedHost.endsWith(".localhost")) && !allowPrivate) {
     throw new Error("browser: blocked localhost target");
   }
   const lookup2 = opts.lookup ?? ((host) => dns.lookup(host, { all: true }));
@@ -225,12 +230,12 @@ function safeBrowserUrl(rawUrl) {
   }
 }
 function redactBrowserText(text) {
-  return text.replace(/\bauthorization\b\s*[:=]\s*[^\r\n]+/gi, "Authorization=[REDACTED]").replace(
-    /\bauthorization\b\s*[:=]\s*(?:Basic|Bearer)\s+[^\s,;]+/gi,
-    "Authorization=[REDACTED]"
-  ).replace(/\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi, "Bearer [REDACTED]").replace(
-    /\b(authorization|set[-_ ]?cookie|cookie|api[-_ ]?key|private[-_ ]?key|client[-_ ]?secret|access[-_ ]?token|refresh[-_ ]?token|session[-_ ]?token|auth[-_ ]?token|token|password|secret)\b\s*[:=]\s*[^\s,;]+/gi,
-    "$1=[REDACTED]"
+  return text.replace(/\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi, "Bearer [REDACTED]").replace(
+    /(["']?)\b(authorization|set[-_ ]?cookie|cookie|api[-_ ]?key|private[-_ ]?key|client[-_ ]?secret|access[-_ ]?token|refresh[-_ ]?token|session[-_ ]?token|auth[-_ ]?token|token|password|secret)\b\1(\s*[:=]\s*)((?:"[^"\r\n]*"|'[^'\r\n]*'|(?:Basic|Bearer)\s+[^\s,;]+|[^\s,;]+))/gi,
+    (_match, q1, key, sep, val) => {
+      const quote = val.startsWith('"') ? '"' : val.startsWith("'") ? "'" : "";
+      return `${q1}${key}${q1}${sep}${quote}[REDACTED]${quote}`;
+    }
   );
 }
 
@@ -1420,4 +1425,4 @@ export {
   isBrowserSuiteEnabled,
   shutdownBrowserTools
 };
-//# sourceMappingURL=chunk-6XYFYLN7.js.map
+//# sourceMappingURL=chunk-O2MHULBO.js.map