@wrongstack/tools 1.0.8 → 1.0.9

package/dist/{chunk-GNLHBDFO.js → chunk-OXO773CW.js}

@@ -15,85 +15,85 @@ import {
   codebaseStatsTool,
   codebaseTargetedTestTool,
   deadCodeScanTool
-} from "./chunk-JB5JLY7V.js";
+} from "./chunk-ENE22I5W.js";
 import {
   designTool
-} from "./chunk-IXIS7RSG.js";
+} from "./chunk-MRXWOOOR.js";
 import {
   planTool
-} from "./chunk-O6AGFJBO.js";
+} from "./chunk-7V33PHT6.js";
 import {
   taskTool
-} from "./chunk-B62LKMWQ.js";
+} from "./chunk-OKZJJDOG.js";
 import {
   testTool
-} from "./chunk-KF7GMVNU.js";
+} from "./chunk-OUERRFEM.js";
 import {
   installTool
-} from "./chunk-H2VB7GCR.js";
+} from "./chunk-ULI2J6TX.js";
 import {
   auditTool
-} from "./chunk-HCPSVK7J.js";
+} from "./chunk-YKSOSI2N.js";
 import {
   outdatedTool
-} from "./chunk-NL45OWEO.js";
+} from "./chunk-DOAHONOS.js";
 import {
   logsTool
-} from "./chunk-CAF4L6KN.js";
+} from "./chunk-C3WP6ZOT.js";
 import {
   toolSearchTool
-} from "./chunk-YA2ZYCJY.js";
+} from "./chunk-JPK2HHBK.js";
 import {
   toolUseTool
-} from "./chunk-B3MGJBFI.js";
+} from "./chunk-KS2OEZWV.js";
 import {
   gitTool
-} from "./chunk-ZMCV3XOV.js";
+} from "./chunk-SPNXDTCJ.js";
 import {
   patchTool
-} from "./chunk-5MP76C72.js";
+} from "./chunk-2UVAIS5O.js";
 import {
   jsonTool
-} from "./chunk-EGT5QLCB.js";
+} from "./chunk-D6RQZMZS.js";
 import {
   diffTool
-} from "./chunk-N3OTTQNC.js";
+} from "./chunk-2OCAAFAT.js";
 import {
   treeTool
-} from "./chunk-YZQSUL5G.js";
+} from "./chunk-M4ZHHCCW.js";
 import {
   lintTool
-} from "./chunk-R3HIZVFS.js";
+} from "./chunk-KPDCKSN5.js";
 import {
   formatTool
-} from "./chunk-QJARSK2G.js";
+} from "./chunk-4SUGLJLO.js";
 import {
   typecheckTool
-} from "./chunk-AH7J5HWL.js";
+} from "./chunk-5RBUYFRV.js";
 import {
   languageInfoTool,
   languagePackageTool,
   languageTool
-} from "./chunk-SEONDNLN.js";
+} from "./chunk-G7CYW5EP.js";
 import {
   replaceTool
-} from "./chunk-KMXPP32M.js";
+} from "./chunk-C6ZOXNXV.js";
 import {
   globTool
-} from "./chunk-HOFVYIPI.js";
+} from "./chunk-ON6ET5ER.js";
 import {
   grepTool
-} from "./chunk-FI6SOIVE.js";
+} from "./chunk-DLZCOEVG.js";
 import {
   bashTool,
   checkAndBlockKillCommand,
   diagnoseBashism,
   shellArgs
-} from "./chunk-5KRKL3WD.js";
+} from "./chunk-QA37PFYL.js";
 import {
   detectDanger,
   execTool
-} from "./chunk-OGQMPX3J.js";
+} from "./chunk-QAWI3RSK.js";
 import {
   buildChildEnv
 } from "./chunk-BTSFTGIL.js";
@@ -110,31 +110,31 @@ import {
 } from "./chunk-4SW6BXUR.js";
 import {
   searchTool
-} from "./chunk-62OAECEQ.js";
+} from "./chunk-LLSFOUZF.js";
 import {
   guardedFetch
 } from "./chunk-NBDZMMG2.js";
 import {
   todoTool
-} from "./chunk-S6CGSFLX.js";
+} from "./chunk-DBG7UQGK.js";
 import {
   kanbanTool
-} from "./chunk-2NTHMZV3.js";
+} from "./chunk-VMJY6FYJ.js";
 import {
   browserTools
-} from "./chunk-6XYFYLN7.js";
+} from "./chunk-O2MHULBO.js";
 import {
   readTool
-} from "./chunk-HIRVCXLP.js";
+} from "./chunk-IE4KDAOB.js";
 import {
   writeTool
-} from "./chunk-GF4JHLCO.js";
+} from "./chunk-PWZUHZP7.js";
 import {
   editTool
-} from "./chunk-WKLUOXR4.js";
+} from "./chunk-7GOE2ZTZ.js";
 import {
   resolvePowerShell
-} from "./chunk-5U5ULQX2.js";
+} from "./chunk-XZLVJD56.js";
 import {
   normalizeCommandOutput,
   safeResolveProjectPath,
@@ -143,6 +143,7 @@ import {
 
 // src/clarify.ts
 import { randomUUID } from "node:crypto";
+import { ToolValidationError } from "@wrongstack/core/types";
 import { toErrorMessage } from "@wrongstack/core/utils";
 var clarifyTool = {
   name: "clarify",
@@ -192,40 +193,41 @@ var clarifyTool = {
     additionalProperties: false
   },
   async execute(input, ctx, opts) {
+    const signal = opts?.signal ?? ctx.signal;
+    signal?.throwIfAborted();
+    let request;
     try {
-      const signal = opts?.signal ?? ctx.signal;
-      signal.throwIfAborted();
-      const request = normalizeRequest(input);
-      let response;
-      if (typeof ctx.requestUserInput === "function")
-        response = await ctx.requestUserInput(request, signal);
-      else response = await legacyHostResponse(ctx, request);
-      const autoDecided = response === void 0;
-      const resolved = response ?? recommendedResponse(request);
-      if (resolved.status === "cancelled")
-        return skipped(request, "User cancelled the clarification form.");
-      const answers = materializeAnswers(request, resolved.answers);
-      const primary = answers[0];
-      const decisionSummary = `${autoDecided ? "Auto-selected recommended answers in non-interactive mode" : "User clarified"}: ${answers.map((answer) => {
-        if (answer.delegatedToModel)
-          return `"${answer.question}": model should decide (user delegated)`;
-        const values = [
-          ...answer.selectedOptions,
-          ...answer.customResponse ? [answer.customResponse] : []
-        ];
-        return `"${answer.question}": ${values.join(", ") || "(blank)"}`;
-      }).join("; ")}`;
-      return {
-        status: autoDecided ? "auto_decided" : "answered",
-        question: primary.question,
-        selectedOptions: primary.selectedOptions,
-        customResponse: primary.customResponse,
-        answers,
-        decisionSummary
-      };
+      request = normalizeRequest(input);
     } catch (error) {
-      return skippedFromInput(input, toErrorMessage(error));
+      throw new ToolValidationError({ message: `clarify: ${toErrorMessage(error)}`, cause: error });
     }
+    let response;
+    if (typeof ctx.requestUserInput === "function")
+      response = await ctx.requestUserInput(request, signal);
+    else response = await legacyHostResponse(ctx, request);
+    const autoDecided = response === void 0;
+    const resolved = response ?? recommendedResponse(request);
+    if (resolved.status === "cancelled")
+      return skipped(request, "User cancelled the clarification form.");
+    const answers = materializeAnswers(request, resolved.answers);
+    const primary = answers[0];
+    const decisionSummary = `${autoDecided ? "Auto-selected recommended answers in non-interactive mode" : "User clarified"}: ${answers.map((answer) => {
+      if (answer.delegatedToModel)
+        return `"${answer.question}": model should decide (user delegated)`;
+      const values = [
+        ...answer.selectedOptions,
+        ...answer.customResponse ? [answer.customResponse] : []
+      ];
+      return `"${answer.question}": ${values.join(", ") || "(blank)"}`;
+    }).join("; ")}`;
+    return {
+      status: autoDecided ? "auto_decided" : "answered",
+      question: primary.question,
+      selectedOptions: primary.selectedOptions,
+      customResponse: primary.customResponse,
+      answers,
+      decisionSummary
+    };
   }
 };
 function optionArraySchema() {
@@ -476,15 +478,6 @@ function skipped(request, error) {
     error
   };
 }
-function skippedFromInput(input, error) {
-  return {
-    status: "skipped",
-    question: input.question ?? input.questions?.[0]?.question ?? input.tabs?.[0]?.questions[0]?.question ?? "",
-    selectedOptions: [],
-    decisionSummary: "",
-    error
-  };
-}
 
 // src/pwsh.ts
 import { spawn } from "node:child_process";
@@ -495,7 +488,7 @@ import {
   emitProcessOutput,
   emitProcessStarted
 } from "@wrongstack/core/observability";
-import { ToolValidationError } from "@wrongstack/core/types";
+import { ToolValidationError as ToolValidationError2 } from "@wrongstack/core/types";
 var MAX_OUTPUT = 32768;
 var DEFAULT_TIMEOUT_MS = 3e5;
 var STREAM_FLUSH_INTERVAL_MS = 200;
@@ -654,7 +647,7 @@ var pwshTool = {
   },
   async *executeStream(input, ctx, opts) {
     if (!input?.command || typeof input.command !== "string" || !input.command.trim()) {
-      throw new ToolValidationError({
+      throw new ToolValidationError2({
         message: "pwsh: command is required and cannot be empty",
         field: "command"
       });
@@ -676,31 +669,13 @@ var pwshTool = {
     const isBackground = !!(input.run_in_background || input.background);
     const registry = getProcessRegistry();
     if (!registry.beforeCall(isBackground)) {
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: "pwsh: circuit breaker open \u2014 too many consecutive failures or slow calls. Use /kill to inspect or /kill reset to recover."
-        }
-      };
-      return;
+      throw new Error(
+        "pwsh: circuit breaker open \u2014 too many consecutive failures or slow calls. Use /kill to inspect or /kill reset to recover."
+      );
     }
     const killCheck = await checkAndBlockKillCommand(input.command);
     if (killCheck.blocked) {
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: `pwsh: ${killCheck.reason}`
-        }
-      };
-      return;
+      throw new Error(`pwsh: ${killCheck.reason}`);
     }
     const isWin = os.platform() === "win32";
     const bin = isWin ? resolvePowerShell("pwsh.exe") : "pwsh";
@@ -713,17 +688,7 @@ var pwshTool = {
     try {
       targetCwd = await safeResolveReal(input.workdir ?? ctx.workingDir ?? ctx.projectRoot, ctx);
     } catch (err) {
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: `pwsh: ${err.message}`
-        }
-      };
-      return;
+      throw new Error(`pwsh: ${err.message}`, { cause: err });
     }
     const startedAt = Date.now();
     const detached = !isWin;
@@ -755,17 +720,9 @@ var pwshTool = {
           timedOut: false,
           endedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
-        yield {
-          type: "final",
-          output: {
-            output: "",
-            exit_code: 1,
-            timed_out: false,
-            pid: null,
-            error: `pwsh: spawn failed: ${err instanceof Error ? err.message : String(err)}`
-          }
-        };
-        return;
+        throw new Error(`pwsh: spawn failed: ${err instanceof Error ? err.message : String(err)}`, {
+          cause: err
+        });
       }
       const pid2 = child2.pid;
       let bgTelemetryCompleted = false;
@@ -843,17 +800,7 @@ Working directory: ${targetCwd}`,
         return;
       }
       completeBackground(1);
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: "pwsh: failed to obtain PID for background process"
-        }
-      };
-      return;
+      throw new Error("pwsh: failed to obtain PID for background process");
     }
     const spool = createOutputSpool({ tool: "pwsh", thresholdBytes: MAX_OUTPUT });
     let child;
@@ -884,17 +831,9 @@ Working directory: ${targetCwd}`,
         timedOut: false,
         endedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: `pwsh: spawn failed: ${err instanceof Error ? err.message : String(err)}`
-        }
-      };
-      return;
+      throw new Error(`pwsh: spawn failed: ${err instanceof Error ? err.message : String(err)}`, {
+        cause: err
+      });
     }
     const pid = child.pid;
     let stdoutBytes = 0;
@@ -1083,16 +1022,6 @@ Working directory: ${targetCwd}`,
             yield { type: "partial_output", text: remainder };
           }
           const spooled = spool.finalize();
-          yield {
-            type: "final",
-            output: {
-              output: normalizeCommandOutput(buf) + (spooled ? spoolNote(spooled) : ""),
-              exit_code: isAbort ? 124 : 1,
-              timed_out: isAbort,
-              pid: pid ?? null,
-              error: isAbort ? "Command aborted by user or signal" : c.err.message
-            }
-          };
           ctx.recordSideEffect?.({
             toolUseId: `pwsh-${Date.now()}`,
             toolName: "pwsh",
@@ -1101,6 +1030,19 @@ Working directory: ${targetCwd}`,
             outcome: isAbort ? "aborted" : `error (${c.err.message})`,
             risk: "shell"
           });
+          if (!isAbort) {
+            throw new Error(`pwsh: process error: ${c.err.message}`, { cause: c.err });
+          }
+          yield {
+            type: "final",
+            output: {
+              output: normalizeCommandOutput(buf) + (spooled ? spoolNote(spooled) : ""),
+              exit_code: 124,
+              timed_out: true,
+              pid: pid ?? null,
+              error: "Command aborted by user or signal"
+            }
+          };
           return;
         }
         if (c.kind === "end") {
@@ -1261,7 +1203,6 @@ var readUrlContentTool = {
 // src/security-ast-scan-tool.ts
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { toErrorMessage as toErrorMessage2 } from "@wrongstack/core/utils";
 var SECRET_PATTERNS = [
   { name: "AWS Access Key", regex: /\b(AKIA[0-9A-Z]{16})\b/ },
   { name: "GitHub Token", regex: /\b(gh[pousr]_[A-Za-z0-9_]{36,255})\b/ },
@@ -1421,58 +1362,48 @@ var securityAstScanTool = {
     },
     additionalProperties: false
   },
+  // Failures THROW so the executor marks the call is_error. The old catch
+  // returned `status: 'error'`, which the executor recorded as a successful
+  // call — for a scanner that reads as "ran fine", the worst possible lie.
   async execute(input, ctx) {
-    try {
-      const projectRoot = ctx.projectRoot ?? ctx.cwd ?? process.cwd();
-      let targetFile = input.file ?? "inline-code.ts";
-      let content = input.content;
-      if (!content && input.file) {
-        const absPath = await safeResolveProjectPath(input.file, ctx);
-        targetFile = path.relative(projectRoot, absPath).replace(/\\/g, "/");
-        content = await fs.readFile(absPath, "utf8");
-      }
-      if (!content) {
-        return {
-          status: "clean",
-          filesScanned: 0,
-          totalFindings: 0,
-          criticalCount: 0,
-          warningCount: 0,
-          findings: [],
-          summary: "No content or file provided to scan."
-        };
-      }
-      let findings = analyzeSecurityAndPerformance(targetFile, content);
-      if (input.rules && input.rules.length > 0) {
-        const ruleSet = new Set(input.rules);
-        findings = findings.filter((f) => ruleSet.has(f.ruleId));
-      }
-      const criticalCount = findings.filter((f) => f.severity === "critical").length;
-      const warningCount = findings.filter((f) => f.severity === "warning").length;
-      const totalFindings = findings.length;
-      const status = totalFindings === 0 ? "clean" : "findings_detected";
-      const summary = totalFindings === 0 ? `Security & Performance AST Scan: CLEAN (${targetFile})` : `Security & Performance AST Scan: ${totalFindings} issue(s) detected (${criticalCount} critical, ${warningCount} warning).`;
-      return {
-        status,
-        filesScanned: 1,
-        totalFindings,
-        criticalCount,
-        warningCount,
-        findings,
-        summary
-      };
-    } catch (err) {
+    const projectRoot = ctx.projectRoot ?? ctx.cwd ?? process.cwd();
+    let targetFile = input.file ?? "inline-code.ts";
+    let content = input.content;
+    if (!content && input.file) {
+      const absPath = await safeResolveProjectPath(input.file, ctx);
+      targetFile = path.relative(projectRoot, absPath).replace(/\\/g, "/");
+      content = await fs.readFile(absPath, "utf8");
+    }
+    if (!content) {
       return {
-        status: "error",
+        status: "clean",
         filesScanned: 0,
         totalFindings: 0,
         criticalCount: 0,
         warningCount: 0,
         findings: [],
-        summary: "",
-        error: toErrorMessage2(err)
+        summary: "No content or file provided to scan."
       };
     }
+    let findings = analyzeSecurityAndPerformance(targetFile, content);
+    if (input.rules && input.rules.length > 0) {
+      const ruleSet = new Set(input.rules);
+      findings = findings.filter((f) => ruleSet.has(f.ruleId));
+    }
+    const criticalCount = findings.filter((f) => f.severity === "critical").length;
+    const warningCount = findings.filter((f) => f.severity === "warning").length;
+    const totalFindings = findings.length;
+    const status = totalFindings === 0 ? "clean" : "findings_detected";
+    const summary = totalFindings === 0 ? `Security & Performance AST Scan: CLEAN (${targetFile})` : `Security & Performance AST Scan: ${totalFindings} issue(s) detected (${criticalCount} critical, ${warningCount} warning).`;
+    return {
+      status,
+      filesScanned: 1,
+      totalFindings,
+      criticalCount,
+      warningCount,
+      findings,
+      summary
+    };
   }
 };
 
@@ -1692,4 +1623,4 @@ export {
   TIER3_TOOLS,
   builtinTools
 };
-//# sourceMappingURL=chunk-GNLHBDFO.js.map
+//# sourceMappingURL=chunk-OXO773CW.js.map

package/dist/{chunk-GF4JHLCO.js → chunk-PWZUHZP7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MSOAX3GC.js";
 import {
   enqueueReindex
-} from "./chunk-TU6UVATU.js";
+} from "./chunk-HYHE4VNA.js";
 import {
   safeResolveReal,
   sha256hex,
@@ -179,4 +179,4 @@ async function finishWrite(input, ctx, prepared, signal) {
 export {
   writeTool
 };
-//# sourceMappingURL=chunk-GF4JHLCO.js.map
+//# sourceMappingURL=chunk-PWZUHZP7.js.map

package/dist/{chunk-5KRKL3WD.js → chunk-QA37PFYL.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-HDYUBRMF.js";
 import {
   resolvePowerShell
-} from "./chunk-5U5ULQX2.js";
+} from "./chunk-XZLVJD56.js";
 import {
   normalizeCommandOutput
 } from "./chunk-2IAEJRLT.js";
@@ -549,31 +549,15 @@ var bashTool = {
     const registry = getProcessRegistry();
     const bypassBreaker = !!input.background;
     if (!registry.beforeCall(bypassBreaker)) {
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: "bash: circuit breaker open \u2014 too many consecutive failures or slow calls. Use /kill to inspect or /kill reset to recover."
-        }
-      };
-      return;
+      throw new Error(
+        "bash: circuit breaker open \u2014 too many consecutive failures or slow calls. Use /kill to inspect or /kill reset to recover."
+      );
     }
     const killCheck = await checkAndBlockKillCommand(input.command);
     if (killCheck.blocked) {
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: killCheck.reason || "Kill command blocked: targets a protected WrongStack process."
-        }
-      };
-      return;
+      throw new Error(
+        `bash: ${killCheck.reason || "Kill command blocked: targets a protected WrongStack process."}`
+      );
     }
     const PIPE_TO_SHELL_PATTERN = /\|\s*(?:sudo\s+)?(sh|bash|ksh|zsh|fish|cmd|powershell|pwsh)(?:\.exe)?\b/i;
     const pipeToShellNote = PIPE_TO_SHELL_PATTERN.test(input.command) ? "\n\n[wrongstack] Caution: this command pipes output into a shell interpreter (pipe-to-shell). Piped content executes as arbitrary code \u2014 review the source before trusting the result, and prefer downloading to a file and inspecting it first." : "";
@@ -654,17 +638,9 @@ var bashTool = {
           timedOut: false,
           endedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
-        yield {
-          type: "final",
-          output: {
-            output: "",
-            exit_code: 1,
-            timed_out: false,
-            pid: null,
-            error: `spawn failed: ${err instanceof Error ? err.message : String(err)}`
-          }
-        };
-        return;
+        throw new Error(`bash: spawn failed: ${err instanceof Error ? err.message : String(err)}`, {
+          cause: err
+        });
       }
       const pid2 = child2.pid;
       const stdoutBytes2 = 0;
@@ -723,17 +699,7 @@ var bashTool = {
       });
       if (typeof pid2 !== "number") {
         completeBackground(1);
-        yield {
-          type: "final",
-          output: {
-            output: "",
-            exit_code: 1,
-            timed_out: false,
-            pid: null,
-            error: "Failed to launch background process: invalid PID"
-          }
-        };
-        return;
+        throw new Error("bash: failed to launch background process: invalid PID");
       }
       child2.unref();
       yield {
@@ -785,17 +751,9 @@ var bashTool = {
         timedOut: false,
         endedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
-      yield {
-        type: "final",
-        output: {
-          output: "",
-          exit_code: 1,
-          timed_out: false,
-          pid: null,
-          error: `spawn failed: ${err instanceof Error ? err.message : String(err)}`
-        }
-      };
-      return;
+      throw new Error(`bash: spawn failed: ${err instanceof Error ? err.message : String(err)}`, {
+        cause: err
+      });
     }
     const pid = child.pid;
     let stdoutBytes = 0;
@@ -982,16 +940,6 @@ var bashTool = {
             yield { type: "partial_output", text: remainder };
           }
           const spooled = spool.finalize();
-          yield {
-            type: "final",
-            output: {
-              output: normalizeCommandOutput(buf) + (spooled ? spoolNote(spooled) : "") + pipeToShellNote,
-              exit_code: isAbort ? 124 : 1,
-              timed_out: isAbort,
-              pid: pid ?? null,
-              error: isAbort ? "Command aborted by user or signal" : c.err.message
-            }
-          };
           ctx.recordSideEffect?.({
             toolUseId: `bash-${Date.now()}`,
             toolName: "bash",
@@ -1000,6 +948,19 @@ var bashTool = {
             outcome: isAbort ? "aborted" : `error (${c.err.message})`,
             risk: "shell"
           });
+          if (!isAbort) {
+            throw new Error(`bash: process error: ${c.err.message}`, { cause: c.err });
+          }
+          yield {
+            type: "final",
+            output: {
+              output: normalizeCommandOutput(buf) + (spooled ? spoolNote(spooled) : "") + pipeToShellNote,
+              exit_code: 124,
+              timed_out: true,
+              pid: pid ?? null,
+              error: "Command aborted by user or signal"
+            }
+          };
           return;
         }
         if (c.kind === "end") {
@@ -1093,4 +1054,4 @@ export {
   checkAndBlockKillCommand,
   bashTool
 };
-//# sourceMappingURL=chunk-5KRKL3WD.js.map
+//# sourceMappingURL=chunk-QA37PFYL.js.map