@yawlabs/ctxlint 0.9.15 → 0.9.17

package/dist/index.js

@@ -41,6 +41,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // node_modules/.pnpm/zod@4.3.6/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
@@ -447,8 +448,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path12, errorMaps, issueData } = params;
-      const fullPath = [...path12, ...issueData.path || []];
+      const { data, path: path14, errorMaps, issueData } = params;
+      const fullPath = [...path14, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -728,11 +729,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path12, key) {
+      constructor(parent, value, path14, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path12;
+        this._path = path14;
         this._key = key;
       }
       get path() {
@@ -4237,10 +4238,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path12) {
-  if (!path12)
+function getElementAtPath(obj, path14) {
+  if (!path14)
     return obj;
-  return path12.reduce((acc, key) => acc?.[key], obj);
+  return path14.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -4552,11 +4553,11 @@ function aborted(x3, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path12, issues) {
+function prefixIssues(path14, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path12);
+    iss.path.unshift(path14);
     return iss;
   });
 }
@@ -4798,7 +4799,7 @@ function formatError(error49, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error49, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error50, path12 = []) => {
+  const processError = (error50, path14 = []) => {
     var _a3, _b;
     for (const issue2 of error50.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -4808,7 +4809,7 @@ function treeifyError(error49, mapper = (issue2) => issue2.message) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path12, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -4840,8 +4841,8 @@ function treeifyError(error49, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path12 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path12) {
+  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path14) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -14735,13 +14736,13 @@ function _stringbool(Classes, _params) {
   return codec2;
 }
 // @__NO_SIDE_EFFECTS__
-function _stringFormat(Class2, format2, fnOrRegex, _params = {}) {
+function _stringFormat(Class2, format3, fnOrRegex, _params = {}) {
   const params = normalizeParams(_params);
   const def = {
     ...normalizeParams(_params),
     check: "string_format",
     type: "string",
-    format: format2,
+    format: format3,
     fn: typeof fnOrRegex === "function" ? fnOrRegex : (val) => fnOrRegex.test(val),
     ...params
   };
@@ -15177,16 +15178,16 @@ var init_json_schema_processors = __esm({
     stringProcessor = (schema, ctx, _json, _params) => {
       const json2 = _json;
       json2.type = "string";
-      const { minimum, maximum, format: format2, patterns, contentEncoding } = schema._zod.bag;
+      const { minimum, maximum, format: format3, patterns, contentEncoding } = schema._zod.bag;
       if (typeof minimum === "number")
         json2.minLength = minimum;
       if (typeof maximum === "number")
         json2.maxLength = maximum;
-      if (format2) {
-        json2.format = formatMap[format2] ?? format2;
+      if (format3) {
+        json2.format = formatMap[format3] ?? format3;
         if (json2.format === "")
           delete json2.format;
-        if (format2 === "time") {
+        if (format3 === "time") {
           delete json2.format;
         }
       }
@@ -15208,8 +15209,8 @@ var init_json_schema_processors = __esm({
     };
     numberProcessor = (schema, ctx, _json, _params) => {
       const json2 = _json;
-      const { minimum, maximum, format: format2, multipleOf, exclusiveMaximum, exclusiveMinimum } = schema._zod.bag;
-      if (typeof format2 === "string" && format2.includes("int"))
+      const { minimum, maximum, format: format3, multipleOf, exclusiveMaximum, exclusiveMinimum } = schema._zod.bag;
+      if (typeof format3 === "string" && format3.includes("int"))
         json2.type = "integer";
       else
         json2.type = "number";
@@ -16730,8 +16731,8 @@ function e1642(params) {
 function jwt(params) {
   return _jwt(ZodJWT, params);
 }
-function stringFormat(format2, fnOrRegex, _params = {}) {
-  return _stringFormat(ZodCustomStringFormat, format2, fnOrRegex, _params);
+function stringFormat(format3, fnOrRegex, _params = {}) {
+  return _stringFormat(ZodCustomStringFormat, format3, fnOrRegex, _params);
 }
 function hostname2(_params) {
   return _stringFormat(ZodCustomStringFormat, "hostname", regexes_exports.hostname, _params);
@@ -16741,11 +16742,11 @@ function hex2(_params) {
 }
 function hash(alg, params) {
   const enc = params?.enc ?? "hex";
-  const format2 = `${alg}_${enc}`;
-  const regex2 = regexes_exports[format2];
+  const format3 = `${alg}_${enc}`;
+  const regex2 = regexes_exports[format3];
   if (!regex2)
-    throw new Error(`Unrecognized hash format: ${format2}`);
-  return _stringFormat(ZodCustomStringFormat, format2, regex2, params);
+    throw new Error(`Unrecognized hash format: ${format3}`);
+  return _stringFormat(ZodCustomStringFormat, format3, regex2, params);
 }
 function number2(params) {
   return _number(ZodNumber2, params);
@@ -17791,13 +17792,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path12 = ref.slice(1).split("/").filter(Boolean);
-  if (path12.length === 0) {
+  const path14 = ref.slice(1).split("/").filter(Boolean);
+  if (path14.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path12[0] === defsKey) {
-    const key = path12[1];
+  if (path14[0] === defsKey) {
+    const key = path14[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -17889,52 +17890,52 @@ function convertBaseSchema(schema, ctx) {
     case "string": {
       let stringSchema = z.string();
       if (schema.format) {
-        const format2 = schema.format;
-        if (format2 === "email") {
+        const format3 = schema.format;
+        if (format3 === "email") {
           stringSchema = stringSchema.check(z.email());
-        } else if (format2 === "uri" || format2 === "uri-reference") {
+        } else if (format3 === "uri" || format3 === "uri-reference") {
           stringSchema = stringSchema.check(z.url());
-        } else if (format2 === "uuid" || format2 === "guid") {
+        } else if (format3 === "uuid" || format3 === "guid") {
           stringSchema = stringSchema.check(z.uuid());
-        } else if (format2 === "date-time") {
+        } else if (format3 === "date-time") {
           stringSchema = stringSchema.check(z.iso.datetime());
-        } else if (format2 === "date") {
+        } else if (format3 === "date") {
           stringSchema = stringSchema.check(z.iso.date());
-        } else if (format2 === "time") {
+        } else if (format3 === "time") {
           stringSchema = stringSchema.check(z.iso.time());
-        } else if (format2 === "duration") {
+        } else if (format3 === "duration") {
           stringSchema = stringSchema.check(z.iso.duration());
-        } else if (format2 === "ipv4") {
+        } else if (format3 === "ipv4") {
           stringSchema = stringSchema.check(z.ipv4());
-        } else if (format2 === "ipv6") {
+        } else if (format3 === "ipv6") {
           stringSchema = stringSchema.check(z.ipv6());
-        } else if (format2 === "mac") {
+        } else if (format3 === "mac") {
           stringSchema = stringSchema.check(z.mac());
-        } else if (format2 === "cidr") {
+        } else if (format3 === "cidr") {
           stringSchema = stringSchema.check(z.cidrv4());
-        } else if (format2 === "cidr-v6") {
+        } else if (format3 === "cidr-v6") {
           stringSchema = stringSchema.check(z.cidrv6());
-        } else if (format2 === "base64") {
+        } else if (format3 === "base64") {
           stringSchema = stringSchema.check(z.base64());
-        } else if (format2 === "base64url") {
+        } else if (format3 === "base64url") {
           stringSchema = stringSchema.check(z.base64url());
-        } else if (format2 === "e164") {
+        } else if (format3 === "e164") {
           stringSchema = stringSchema.check(z.e164());
-        } else if (format2 === "jwt") {
+        } else if (format3 === "jwt") {
           stringSchema = stringSchema.check(z.jwt());
-        } else if (format2 === "emoji") {
+        } else if (format3 === "emoji") {
           stringSchema = stringSchema.check(z.emoji());
-        } else if (format2 === "nanoid") {
+        } else if (format3 === "nanoid") {
           stringSchema = stringSchema.check(z.nanoid());
-        } else if (format2 === "cuid") {
+        } else if (format3 === "cuid") {
           stringSchema = stringSchema.check(z.cuid());
-        } else if (format2 === "cuid2") {
+        } else if (format3 === "cuid2") {
           stringSchema = stringSchema.check(z.cuid2());
-        } else if (format2 === "ulid") {
+        } else if (format3 === "ulid") {
           stringSchema = stringSchema.check(z.ulid());
-        } else if (format2 === "xid") {
+        } else if (format3 === "xid") {
           stringSchema = stringSchema.check(z.xid());
-        } else if (format2 === "ksuid") {
+        } else if (format3 === "ksuid") {
           stringSchema = stringSchema.check(z.ksuid());
         }
       }
@@ -25887,8 +25888,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path12) {
-      let input = path12;
+    function removeDotSegments(path14) {
+      let input = path14;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -26087,8 +26088,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path12, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path12 && path12 !== "/" ? path12 : void 0;
+        const [path14, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path14 && path14 !== "/" ? path14 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -26240,24 +26241,24 @@ var require_fast_uri = __commonJS({
     function normalize3(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
-        serialize(parse3(uri, options), options);
+        serialize(parse4(uri, options), options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse3(serialize(uri, options), options);
+        parse4(serialize(uri, options), options);
       }
       return uri;
     }
     function resolve11(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
+      const resolved = resolveComponent(parse4(baseURI, schemelessOptions), parse4(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
     function resolveComponent(base, relative4, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base = parse3(serialize(base, options), options);
-        relative4 = parse3(serialize(relative4, options), options);
+        base = parse4(serialize(base, options), options);
+        relative4 = parse4(serialize(relative4, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative4.scheme) {
@@ -26309,13 +26310,13 @@ var require_fast_uri = __commonJS({
     function equal(uriA, uriB, options) {
       if (typeof uriA === "string") {
         uriA = unescape(uriA);
-        uriA = serialize(normalizeComponentEncoding(parse3(uriA, options), true), { ...options, skipEscape: true });
+        uriA = serialize(normalizeComponentEncoding(parse4(uriA, options), true), { ...options, skipEscape: true });
       } else if (typeof uriA === "object") {
         uriA = serialize(normalizeComponentEncoding(uriA, true), { ...options, skipEscape: true });
       }
       if (typeof uriB === "string") {
         uriB = unescape(uriB);
-        uriB = serialize(normalizeComponentEncoding(parse3(uriB, options), true), { ...options, skipEscape: true });
+        uriB = serialize(normalizeComponentEncoding(parse4(uriB, options), true), { ...options, skipEscape: true });
       } else if (typeof uriB === "object") {
         uriB = serialize(normalizeComponentEncoding(uriB, true), { ...options, skipEscape: true });
       }
@@ -26384,7 +26385,7 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-    function parse3(uri, opts) {
+    function parse4(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
         scheme: void 0,
@@ -26478,7 +26479,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize,
-      parse: parse3
+      parse: parse4
     };
     module.exports = fastUri;
     module.exports.default = fastUri;
@@ -26880,10 +26881,10 @@ var require_core = __commonJS({
         return this;
       }
       // Add format
-      addFormat(name, format2) {
-        if (typeof format2 == "string")
-          format2 = new RegExp(format2);
-        this.formats[name] = format2;
+      addFormat(name, format3) {
+        if (typeof format3 == "string")
+          format3 = new RegExp(format3);
+        this.formats[name] = format3;
         return this;
       }
       errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
@@ -27001,9 +27002,9 @@ var require_core = __commonJS({
     }
     function addInitialFormats() {
       for (const name in this.opts.formats) {
-        const format2 = this.opts.formats[name];
-        if (format2)
-          this.addFormat(name, format2);
+        const format3 = this.opts.formats[name];
+        if (format3)
+          this.addFormat(name, format3);
       }
     }
     function addInitialKeywords(defs) {
@@ -28686,18 +28687,18 @@ var require_format = __commonJS({
           });
           const fDef = gen.const("fDef", (0, codegen_1._)`${fmts}[${schemaCode}]`);
           const fType = gen.let("fType");
-          const format2 = gen.let("format");
-          gen.if((0, codegen_1._)`typeof ${fDef} == "object" && !(${fDef} instanceof RegExp)`, () => gen.assign(fType, (0, codegen_1._)`${fDef}.type || "string"`).assign(format2, (0, codegen_1._)`${fDef}.validate`), () => gen.assign(fType, (0, codegen_1._)`"string"`).assign(format2, fDef));
+          const format3 = gen.let("format");
+          gen.if((0, codegen_1._)`typeof ${fDef} == "object" && !(${fDef} instanceof RegExp)`, () => gen.assign(fType, (0, codegen_1._)`${fDef}.type || "string"`).assign(format3, (0, codegen_1._)`${fDef}.validate`), () => gen.assign(fType, (0, codegen_1._)`"string"`).assign(format3, fDef));
           cxt.fail$data((0, codegen_1.or)(unknownFmt(), invalidFmt()));
           function unknownFmt() {
             if (opts.strictSchema === false)
               return codegen_1.nil;
-            return (0, codegen_1._)`${schemaCode} && !${format2}`;
+            return (0, codegen_1._)`${schemaCode} && !${format3}`;
           }
           function invalidFmt() {
-            const callFormat = schemaEnv.$async ? (0, codegen_1._)`(${fDef}.async ? await ${format2}(${data}) : ${format2}(${data}))` : (0, codegen_1._)`${format2}(${data})`;
-            const validData = (0, codegen_1._)`(typeof ${format2} == "function" ? ${callFormat} : ${format2}.test(${data}))`;
-            return (0, codegen_1._)`${format2} && ${format2} !== true && ${fType} === ${ruleType} && !${validData}`;
+            const callFormat = schemaEnv.$async ? (0, codegen_1._)`(${fDef}.async ? await ${format3}(${data}) : ${format3}(${data}))` : (0, codegen_1._)`${format3}(${data})`;
+            const validData = (0, codegen_1._)`(typeof ${format3} == "function" ? ${callFormat} : ${format3}.test(${data}))`;
+            return (0, codegen_1._)`${format3} && ${format3} !== true && ${fType} === ${ruleType} && !${validData}`;
           }
         }
         function validateFormat() {
@@ -28708,7 +28709,7 @@ var require_format = __commonJS({
           }
           if (formatDef === true)
             return;
-          const [fmtType, format2, fmtRef] = getFormat(formatDef);
+          const [fmtType, format3, fmtRef] = getFormat(formatDef);
           if (fmtType === ruleType)
             cxt.pass(validCondition());
           function unknownFormat() {
@@ -28735,7 +28736,7 @@ var require_format = __commonJS({
                 throw new Error("async format in sync schema");
               return (0, codegen_1._)`await ${fmtRef}(${data})`;
             }
-            return typeof format2 == "function" ? (0, codegen_1._)`${fmtRef}(${data})` : (0, codegen_1._)`${fmtRef}.test(${data})`;
+            return typeof format3 == "function" ? (0, codegen_1._)`${fmtRef}(${data})` : (0, codegen_1._)`${fmtRef}.test(${data})`;
           }
         }
       }
@@ -28750,8 +28751,8 @@ var require_format2 = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var format_1 = require_format();
-    var format2 = [format_1.default];
-    exports.default = format2;
+    var format3 = [format_1.default];
+    exports.default = format3;
   }
 });
 
@@ -29393,17 +29394,17 @@ var require_limit = __commonJS({
           cxt.fail$data((0, codegen_1.or)((0, codegen_1._)`typeof ${fmt} != "object"`, (0, codegen_1._)`${fmt} instanceof RegExp`, (0, codegen_1._)`typeof ${fmt}.compare != "function"`, compareCode(fmt)));
         }
         function validateFormat() {
-          const format2 = fCxt.schema;
-          const fmtDef = self2.formats[format2];
+          const format3 = fCxt.schema;
+          const fmtDef = self2.formats[format3];
           if (!fmtDef || fmtDef === true)
             return;
           if (typeof fmtDef != "object" || fmtDef instanceof RegExp || typeof fmtDef.compare != "function") {
-            throw new Error(`"${keyword}": format "${format2}" does not define "compare" function`);
+            throw new Error(`"${keyword}": format "${format3}" does not define "compare" function`);
           }
           const fmt = gen.scopeValue("formats", {
-            key: format2,
+            key: format3,
             ref: fmtDef,
-            code: opts.code.formats ? (0, codegen_1._)`${opts.code.formats}${(0, codegen_1.getProperty)(format2)}` : void 0
+            code: opts.code.formats ? (0, codegen_1._)`${opts.code.formats}${(0, codegen_1.getProperty)(format3)}` : void 0
           });
           cxt.fail$data(compareCode(fmt));
         }
@@ -29450,12 +29451,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs10, exportName) {
+    function addFormats(ajv, list, fs11, exportName) {
       var _a3;
       var _b;
       (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs10[f]);
+        ajv.addFormat(f, fs11[f]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -34372,6 +34373,54 @@ async function scanForMcpConfigs(projectRoot) {
   }
   return found.sort((a, b2) => a.relativePath.localeCompare(b2.relativePath));
 }
+async function scanForMcphConfigs(projectRoot) {
+  const found = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const pattern of MCPH_CONFIG_PATTERNS) {
+    const matches = await Ze(pattern, {
+      cwd: projectRoot,
+      absolute: true,
+      nodir: true,
+      dot: true
+    });
+    for (const match of matches) {
+      const normalized = path2.normalize(match);
+      if (seen.has(normalized)) continue;
+      seen.add(normalized);
+      const relativePath = path2.relative(projectRoot, normalized);
+      const symlink = isSymlink(normalized);
+      const target = symlink ? readSymlinkTarget(normalized) : void 0;
+      found.push({
+        absolutePath: normalized,
+        relativePath: relativePath.replace(/\\/g, "/"),
+        isSymlink: symlink,
+        symlinkTarget: target,
+        type: "mcph-config"
+      });
+    }
+  }
+  return found.sort((a, b2) => a.relativePath.localeCompare(b2.relativePath));
+}
+async function scanGlobalMcphConfigs() {
+  const found = [];
+  const home2 = process.env.HOME || process.env.USERPROFILE || "";
+  const filePath = path2.normalize(path2.join(home2, ".mcph.json"));
+  try {
+    fs3.accessSync(filePath);
+  } catch {
+    return found;
+  }
+  const symlink = isSymlink(filePath);
+  const target = symlink ? readSymlinkTarget(filePath) : void 0;
+  found.push({
+    absolutePath: filePath,
+    relativePath: "~/.mcph.json",
+    isSymlink: symlink,
+    symlinkTarget: target,
+    type: "mcph-config"
+  });
+  return found;
+}
 async function scanGlobalMcpConfigs() {
   const found = [];
   const seen = /* @__PURE__ */ new Set();
@@ -34412,7 +34461,7 @@ async function scanGlobalMcpConfigs() {
   }
   return found.sort((a, b2) => a.relativePath.localeCompare(b2.relativePath));
 }
-var CONTEXT_FILE_PATTERNS, IGNORED_DIRS2, MCP_CONFIG_PATTERNS;
+var CONTEXT_FILE_PATTERNS, IGNORED_DIRS2, MCP_CONFIG_PATTERNS, MCPH_CONFIG_PATTERNS;
 var init_scanner = __esm({
   "src/core/scanner.ts"() {
     "use strict";
@@ -34474,6 +34523,7 @@ var init_scanner = __esm({
       ".amazonq/mcp.json",
       ".continue/mcpServers/*.json"
     ];
+    MCPH_CONFIG_PATTERNS = [".mcph.json", ".mcph.local.json"];
   }
 });
 
@@ -34750,7 +34800,7 @@ var require_ms = __commonJS({
       options = options || {};
       var type = typeof val;
       if (type === "string" && val.length > 0) {
-        return parse3(val);
+        return parse4(val);
       } else if (type === "number" && isFinite(val)) {
         return options.long ? fmtLong(val) : fmtShort(val);
       }
@@ -34758,7 +34808,7 @@ var require_ms = __commonJS({
         "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
       );
     };
-    function parse3(str) {
+    function parse4(str) {
       str = String(str);
       if (str.length > 100) {
         return;
@@ -34901,12 +34951,12 @@ var require_common = __commonJS({
             args2.unshift("%O");
           }
           let index = 0;
-          args2[0] = args2[0].replace(/%([a-zA-Z%])/g, (match, format2) => {
+          args2[0] = args2[0].replace(/%([a-zA-Z%])/g, (match, format3) => {
             if (match === "%%") {
               return "%";
             }
             index++;
-            const formatter = createDebug.formatters[format2];
+            const formatter = createDebug.formatters[format3];
             if (typeof formatter === "function") {
               const val = args2[index];
               match = formatter.call(self2, val);
@@ -35511,10 +35561,10 @@ var require_src2 = __commonJS({
     var fs_1 = __require("fs");
     var debug_1 = __importDefault(require_src());
     var log = debug_1.default("@kwsites/file-exists");
-    function check2(path12, isFile, isDirectory2) {
-      log(`checking %s`, path12);
+    function check2(path14, isFile, isDirectory2) {
+      log(`checking %s`, path14);
       try {
-        const stat3 = fs_1.statSync(path12);
+        const stat3 = fs_1.statSync(path14);
         if (stat3.isFile() && isFile) {
           log(`[OK] path represents a file`);
           return true;
@@ -35534,8 +35584,8 @@ var require_src2 = __commonJS({
         throw e;
       }
     }
-    function exists2(path12, type = exports.READABLE) {
-      return check2(path12, (type & exports.FILE) > 0, (type & exports.FOLDER) > 0);
+    function exists2(path14, type = exports.READABLE) {
+      return check2(path14, (type & exports.FILE) > 0, (type & exports.FOLDER) > 0);
     }
     exports.exists = exists2;
     exports.FILE = 1;
@@ -36124,8 +36174,8 @@ function toLinesWithContent(input = "", trimmed2 = true, separator = "\n") {
 function forEachLineWithContent(input, callback) {
   return toLinesWithContent(input, true).map((line) => callback(line));
 }
-function folderExists(path12) {
-  return (0, import_file_exists.exists)(path12, import_file_exists.FOLDER);
+function folderExists(path14) {
+  return (0, import_file_exists.exists)(path14, import_file_exists.FOLDER);
 }
 function append(target, item) {
   if (Array.isArray(target)) {
@@ -36290,7 +36340,7 @@ function parseStringResponse(result, parsers12, texts, trim = true) {
         }
         return lines[i2 + offset];
       };
-      parsers12.some(({ parse: parse3 }) => parse3(line, result));
+      parsers12.some(({ parse: parse4 }) => parse4(line, result));
     }
   });
   return result;
@@ -36316,8 +36366,8 @@ function checkIsRepoRootTask() {
     commands,
     format: "utf-8",
     onError,
-    parser(path12) {
-      return /^\.(git)?$/.test(path12.trim());
+    parser(path14) {
+      return /^\.(git)?$/.test(path14.trim());
     }
   };
 }
@@ -36573,11 +36623,11 @@ function parseGrep(grep) {
   const paths = /* @__PURE__ */ new Set();
   const results = {};
   forEachLineWithContent(grep, (input) => {
-    const [path12, line, preview] = input.split(NULL);
-    paths.add(path12);
-    (results[path12] = results[path12] || []).push({
+    const [path14, line, preview] = input.split(NULL);
+    paths.add(path14);
+    (results[path14] = results[path14] || []).push({
       line: asNumber(line),
-      path: path12,
+      path: path14,
       preview
     });
   });
@@ -36874,14 +36924,14 @@ function hashObjectTask(filePath, write) {
   }
   return straightThroughStringTask(commands, true);
 }
-function parseInit(bare, path12, text) {
+function parseInit(bare, path14, text) {
   const response = String(text).trim();
   let result;
   if (result = initResponseRegex.exec(response)) {
-    return new InitSummary(bare, path12, false, result[1]);
+    return new InitSummary(bare, path14, false, result[1]);
   }
   if (result = reInitResponseRegex.exec(response)) {
-    return new InitSummary(bare, path12, true, result[1]);
+    return new InitSummary(bare, path14, true, result[1]);
   }
   let gitDir = "";
   const tokens = response.split(" ");
@@ -36892,12 +36942,12 @@ function parseInit(bare, path12, text) {
       break;
     }
   }
-  return new InitSummary(bare, path12, /^re/i.test(response), gitDir);
+  return new InitSummary(bare, path14, /^re/i.test(response), gitDir);
 }
 function hasBareCommand(command) {
   return command.includes(bareCommand);
 }
-function initTask(bare = false, path12, customArgs) {
+function initTask(bare = false, path14, customArgs) {
   const commands = ["init", ...customArgs];
   if (bare && !hasBareCommand(commands)) {
     commands.splice(1, 0, bareCommand);
@@ -36906,15 +36956,15 @@ function initTask(bare = false, path12, customArgs) {
     commands,
     format: "utf-8",
     parser(text) {
-      return parseInit(commands.includes("--bare"), path12, text);
+      return parseInit(commands.includes("--bare"), path14, text);
     }
   };
 }
 function logFormatFromCommand(customArgs) {
   for (let i2 = 0; i2 < customArgs.length; i2++) {
-    const format2 = logFormatRegex.exec(customArgs[i2]);
-    if (format2) {
-      return `--${format2[1]}`;
+    const format3 = logFormatRegex.exec(customArgs[i2]);
+    if (format3) {
+      return `--${format3[1]}`;
     }
   }
   return "";
@@ -36922,8 +36972,8 @@ function logFormatFromCommand(customArgs) {
 function isLogFormat(customArg) {
   return logFormatRegex.test(customArg);
 }
-function getDiffParser(format2 = "") {
-  const parser4 = diffSummaryParsers[format2];
+function getDiffParser(format3 = "") {
+  const parser4 = diffSummaryParsers[format3];
   return (stdOut) => parseStringResponse(new DiffSummary(), parser4, stdOut, false);
 }
 function lineBuilder(tokens, fields) {
@@ -36984,12 +37034,12 @@ function validateLogFormatConfig(customArgs) {
     );
   }
 }
-function prettyFormat(format2, splitter) {
+function prettyFormat(format3, splitter) {
   const fields = [];
   const formatStr = [];
-  Object.keys(format2).forEach((field) => {
+  Object.keys(format3).forEach((field) => {
     fields.push(field);
-    formatStr.push(String(format2[field]));
+    formatStr.push(String(format3[field]));
   });
   return [fields, formatStr.join(splitter)];
 }
@@ -37003,7 +37053,7 @@ function userOptions(input) {
 }
 function parseLogOptions(opt = {}, customArgs = []) {
   const splitter = filterType(opt.splitter, filterString, SPLITTER);
-  const format2 = filterPlainObject(opt.format) ? opt.format : {
+  const format3 = filterPlainObject(opt.format) ? opt.format : {
     hash: "%H",
     date: opt.strictDate === false ? "%ai" : "%aI",
     message: "%s",
@@ -37012,7 +37062,7 @@ function parseLogOptions(opt = {}, customArgs = []) {
     author_name: opt.mailMap !== false ? "%aN" : "%an",
     author_email: opt.mailMap !== false ? "%aE" : "%ae"
   };
-  const [fields, formatStr] = prettyFormat(format2, splitter);
+  const [fields, formatStr] = prettyFormat(format3, splitter);
   const suffix = [];
   const command = [
     `--pretty=format:${START_BOUNDARY}${formatStr}${COMMIT_BOUNDARY}`,
@@ -37185,14 +37235,14 @@ function splitLine(result, lineStr) {
     default:
       return;
   }
-  function data(index, workingDir, path12) {
+  function data(index, workingDir, path14) {
     const raw = `${index}${workingDir}`;
     const handler = parsers6.get(raw);
     if (handler) {
-      handler(result, path12);
+      handler(result, path14);
     }
     if (raw !== "##" && raw !== "!!") {
-      result.files.push(new FileStatusSummary(path12, index, workingDir));
+      result.files.push(new FileStatusSummary(path14, index, workingDir));
     }
   }
 }
@@ -37379,8 +37429,8 @@ function deleteBranchTask(branch, forceDelete = false) {
   return task;
 }
 function toPath(input) {
-  const path12 = input.trim().replace(/^["']|["']$/g, "");
-  return path12 && normalize2(path12);
+  const path14 = input.trim().replace(/^["']|["']$/g, "");
+  return path14 && normalize2(path14);
 }
 function checkIgnoreTask(paths) {
   return {
@@ -37519,8 +37569,8 @@ function stashListTask(opt = {}, customArgs) {
     parser: parser4
   };
 }
-function addSubModuleTask(repo, path12) {
-  return subModuleTask(["add", repo, path12]);
+function addSubModuleTask(repo, path14) {
+  return subModuleTask(["add", repo, path14]);
 }
 function initSubModuleTask(customArgs) {
   return subModuleTask(["init", ...customArgs]);
@@ -37891,7 +37941,7 @@ function gitInstanceFactory(baseDir, options) {
   customBinaryPlugin(plugins, config2.binary, config2.unsafe?.allowUnsafeCustomBinary);
   return new Git(config2, plugins);
 }
-var import_file_exists, import_debug, import_promise_deferred, import_promise_deferred2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL, NOOP, objectToString, init_util3, filterArray, filterNumber, filterString, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions2, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils, check_is_repo_exports, CheckRepoActions, onError, parser, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a2, GrepQuery, init_grep, reset_exports, ResetMode, validResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser2, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status, NOT_INSTALLED, parsers7, init_version, cloneTask, cloneMirrorTask, init_clone, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, currentBranchParser, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, parsers10, init_parse_fetch, fetch_exports, init_fetch, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, never2, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit, esm_default;
+var import_file_exists, import_debug, import_promise_deferred, import_promise_deferred2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS2, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL, NOOP, objectToString, init_util3, filterArray, filterNumber, filterString, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions2, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils, check_is_repo_exports, CheckRepoActions, onError, parser, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a2, GrepQuery, init_grep, reset_exports, ResetMode, validResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser2, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status, NOT_INSTALLED, parsers7, init_version, cloneTask, cloneMirrorTask, init_clone, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, currentBranchParser, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, parsers10, init_parse_fetch, fetch_exports, init_fetch, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, never2, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit, esm_default;
 var init_esm2 = __esm({
   "node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/dist/esm/index.js"() {
     import_file_exists = __toESM(require_dist2(), 1);
@@ -37927,7 +37977,7 @@ var init_esm2 = __esm({
       }
       return to;
     };
-    __toCommonJS = (mod) => __copyProps2(__defProp2({}, "__esModule", { value: true }), mod);
+    __toCommonJS2 = (mod) => __copyProps2(__defProp2({}, "__esModule", { value: true }), mod);
     init_git_error = __esm2({
       "src/lib/errors/git-error.ts"() {
         "use strict";
@@ -38782,9 +38832,9 @@ var init_esm2 = __esm({
       "src/lib/responses/InitSummary.ts"() {
         "use strict";
         InitSummary = class {
-          constructor(bare, path12, existing, gitDir) {
+          constructor(bare, path14, existing, gitDir) {
             this.bare = bare;
-            this.path = path12;
+            this.path = path14;
             this.existing = existing;
             this.gitDir = gitDir;
           }
@@ -39317,12 +39367,12 @@ var init_esm2 = __esm({
         "use strict";
         fromPathRegex = /^(.+)\0(.+)$/;
         FileStatusSummary = class {
-          constructor(path12, index, working_dir) {
-            this.path = path12;
+          constructor(path14, index, working_dir) {
+            this.path = path14;
             this.index = index;
             this.working_dir = working_dir;
             if (index === "R" || working_dir === "R") {
-              const detail = fromPathRegex.exec(path12) || [null, path12, path12];
+              const detail = fromPathRegex.exec(path14) || [null, path14, path14];
               this.from = detail[2] || "";
               this.path = detail[1] || "";
             }
@@ -39584,9 +39634,9 @@ var init_esm2 = __esm({
               next
             );
           }
-          hashObject(path12, write) {
+          hashObject(path14, write) {
             return this._runTask(
-              hashObjectTask(path12, write === true),
+              hashObjectTask(path14, write === true),
               trailingFunctionArgument(arguments)
             );
           }
@@ -40027,10 +40077,10 @@ var init_esm2 = __esm({
     require_git = __commonJS2({
       "src/git.js"(exports, module) {
         "use strict";
-        var { GitExecutor: GitExecutor2 } = (init_git_executor(), __toCommonJS(git_executor_exports));
-        var { SimpleGitApi: SimpleGitApi2 } = (init_simple_git_api(), __toCommonJS(simple_git_api_exports));
-        var { Scheduler: Scheduler2 } = (init_scheduler(), __toCommonJS(scheduler_exports));
-        var { adhocExecTask: adhocExecTask2, configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS(task_exports));
+        var { GitExecutor: GitExecutor2 } = (init_git_executor(), __toCommonJS2(git_executor_exports));
+        var { SimpleGitApi: SimpleGitApi2 } = (init_simple_git_api(), __toCommonJS2(simple_git_api_exports));
+        var { Scheduler: Scheduler2 } = (init_scheduler(), __toCommonJS2(scheduler_exports));
+        var { adhocExecTask: adhocExecTask2, configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS2(task_exports));
         var {
           asArray: asArray2,
           filterArray: filterArray2,
@@ -40041,39 +40091,39 @@ var init_esm2 = __esm({
           getTrailingOptions: getTrailingOptions2,
           trailingFunctionArgument: trailingFunctionArgument2,
           trailingOptionsArgument: trailingOptionsArgument2
-        } = (init_utils(), __toCommonJS(utils_exports));
-        var { applyPatchTask: applyPatchTask2 } = (init_apply_patch(), __toCommonJS(apply_patch_exports));
+        } = (init_utils(), __toCommonJS2(utils_exports));
+        var { applyPatchTask: applyPatchTask2 } = (init_apply_patch(), __toCommonJS2(apply_patch_exports));
         var {
           branchTask: branchTask2,
           branchLocalTask: branchLocalTask2,
           deleteBranchesTask: deleteBranchesTask2,
           deleteBranchTask: deleteBranchTask2
-        } = (init_branch(), __toCommonJS(branch_exports));
-        var { checkIgnoreTask: checkIgnoreTask2 } = (init_check_ignore(), __toCommonJS(check_ignore_exports));
-        var { checkIsRepoTask: checkIsRepoTask2 } = (init_check_is_repo(), __toCommonJS(check_is_repo_exports));
-        var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS(clean_exports));
-        var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS(diff_exports));
-        var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS(fetch_exports));
-        var { moveTask: moveTask2 } = (init_move(), __toCommonJS(move_exports));
-        var { pullTask: pullTask2 } = (init_pull(), __toCommonJS(pull_exports));
-        var { pushTagsTask: pushTagsTask2 } = (init_push(), __toCommonJS(push_exports));
+        } = (init_branch(), __toCommonJS2(branch_exports));
+        var { checkIgnoreTask: checkIgnoreTask2 } = (init_check_ignore(), __toCommonJS2(check_ignore_exports));
+        var { checkIsRepoTask: checkIsRepoTask2 } = (init_check_is_repo(), __toCommonJS2(check_is_repo_exports));
+        var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS2(clean_exports));
+        var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS2(diff_exports));
+        var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS2(fetch_exports));
+        var { moveTask: moveTask2 } = (init_move(), __toCommonJS2(move_exports));
+        var { pullTask: pullTask2 } = (init_pull(), __toCommonJS2(pull_exports));
+        var { pushTagsTask: pushTagsTask2 } = (init_push(), __toCommonJS2(push_exports));
         var {
           addRemoteTask: addRemoteTask2,
           getRemotesTask: getRemotesTask2,
           listRemotesTask: listRemotesTask2,
           remoteTask: remoteTask2,
           removeRemoteTask: removeRemoteTask2
-        } = (init_remote(), __toCommonJS(remote_exports));
-        var { getResetMode: getResetMode2, resetTask: resetTask2 } = (init_reset(), __toCommonJS(reset_exports));
-        var { stashListTask: stashListTask2 } = (init_stash_list(), __toCommonJS(stash_list_exports));
+        } = (init_remote(), __toCommonJS2(remote_exports));
+        var { getResetMode: getResetMode2, resetTask: resetTask2 } = (init_reset(), __toCommonJS2(reset_exports));
+        var { stashListTask: stashListTask2 } = (init_stash_list(), __toCommonJS2(stash_list_exports));
         var {
           addSubModuleTask: addSubModuleTask2,
           initSubModuleTask: initSubModuleTask2,
           subModuleTask: subModuleTask2,
           updateSubModuleTask: updateSubModuleTask2
-        } = (init_sub_module(), __toCommonJS(sub_module_exports));
-        var { addAnnotatedTagTask: addAnnotatedTagTask2, addTagTask: addTagTask2, tagListTask: tagListTask2 } = (init_tag(), __toCommonJS(tag_exports));
-        var { straightThroughBufferTask: straightThroughBufferTask2, straightThroughStringTask: straightThroughStringTask2 } = (init_task(), __toCommonJS(task_exports));
+        } = (init_sub_module(), __toCommonJS2(sub_module_exports));
+        var { addAnnotatedTagTask: addAnnotatedTagTask2, addTagTask: addTagTask2, tagListTask: tagListTask2 } = (init_tag(), __toCommonJS2(tag_exports));
+        var { straightThroughBufferTask: straightThroughBufferTask2, straightThroughStringTask: straightThroughStringTask2 } = (init_task(), __toCommonJS2(task_exports));
         function Git2(options, plugins) {
           this._plugins = plugins;
           this._executor = new GitExecutor2(
@@ -40223,8 +40273,8 @@ var init_esm2 = __esm({
           }
           return this._runTask(straightThroughStringTask2(command, this._trimmed), next);
         };
-        Git2.prototype.submoduleAdd = function(repo, path12, then) {
-          return this._runTask(addSubModuleTask2(repo, path12), trailingFunctionArgument2(arguments));
+        Git2.prototype.submoduleAdd = function(repo, path14, then) {
+          return this._runTask(addSubModuleTask2(repo, path14), trailingFunctionArgument2(arguments));
         };
         Git2.prototype.submoduleUpdate = function(args2, then) {
           return this._runTask(
@@ -40306,7 +40356,7 @@ var init_esm2 = __esm({
         Git2.prototype.binaryCatFile = function() {
           return this._catFile("buffer", arguments);
         };
-        Git2.prototype._catFile = function(format2, args2) {
+        Git2.prototype._catFile = function(format3, args2) {
           var handler = trailingFunctionArgument2(args2);
           var command = ["cat-file"];
           var options = args2[0];
@@ -40319,7 +40369,7 @@ var init_esm2 = __esm({
           if (Array.isArray(options)) {
             command.push.apply(command, options);
           }
-          const task = format2 === "buffer" ? straightThroughBufferTask2(command) : straightThroughStringTask2(command);
+          const task = format3 === "buffer" ? straightThroughBufferTask2(command) : straightThroughStringTask2(command);
           return this._runTask(task, handler);
         };
         Git2.prototype.diff = function(options, then) {
@@ -40734,27 +40784,1133 @@ var init_mcp_parser = __esm({
   }
 });
 
-// node_modules/.pnpm/fastest-levenshtein@1.0.16/node_modules/fastest-levenshtein/mod.js
-var require_mod = __commonJS({
-  "node_modules/.pnpm/fastest-levenshtein@1.0.16/node_modules/fastest-levenshtein/mod.js"(exports) {
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js
+function createScanner(text, ignoreTrivia = false) {
+  const len = text.length;
+  let pos = 0, value = "", tokenOffset = 0, token = 16, lineNumber = 0, lineStartOffset = 0, tokenLineStartOffset = 0, prevTokenLineStartOffset = 0, scanError = 0;
+  function scanHexDigits(count, exact) {
+    let digits = 0;
+    let value2 = 0;
+    while (digits < count || !exact) {
+      let ch = text.charCodeAt(pos);
+      if (ch >= 48 && ch <= 57) {
+        value2 = value2 * 16 + ch - 48;
+      } else if (ch >= 65 && ch <= 70) {
+        value2 = value2 * 16 + ch - 65 + 10;
+      } else if (ch >= 97 && ch <= 102) {
+        value2 = value2 * 16 + ch - 97 + 10;
+      } else {
+        break;
+      }
+      pos++;
+      digits++;
+    }
+    if (digits < count) {
+      value2 = -1;
+    }
+    return value2;
+  }
+  function setPosition(newPosition) {
+    pos = newPosition;
+    value = "";
+    tokenOffset = 0;
+    token = 16;
+    scanError = 0;
+  }
+  function scanNumber() {
+    let start = pos;
+    if (text.charCodeAt(pos) === 48) {
+      pos++;
+    } else {
+      pos++;
+      while (pos < text.length && isDigit(text.charCodeAt(pos))) {
+        pos++;
+      }
+    }
+    if (pos < text.length && text.charCodeAt(pos) === 46) {
+      pos++;
+      if (pos < text.length && isDigit(text.charCodeAt(pos))) {
+        pos++;
+        while (pos < text.length && isDigit(text.charCodeAt(pos))) {
+          pos++;
+        }
+      } else {
+        scanError = 3;
+        return text.substring(start, pos);
+      }
+    }
+    let end = pos;
+    if (pos < text.length && (text.charCodeAt(pos) === 69 || text.charCodeAt(pos) === 101)) {
+      pos++;
+      if (pos < text.length && text.charCodeAt(pos) === 43 || text.charCodeAt(pos) === 45) {
+        pos++;
+      }
+      if (pos < text.length && isDigit(text.charCodeAt(pos))) {
+        pos++;
+        while (pos < text.length && isDigit(text.charCodeAt(pos))) {
+          pos++;
+        }
+        end = pos;
+      } else {
+        scanError = 3;
+      }
+    }
+    return text.substring(start, end);
+  }
+  function scanString() {
+    let result = "", start = pos;
+    while (true) {
+      if (pos >= len) {
+        result += text.substring(start, pos);
+        scanError = 2;
+        break;
+      }
+      const ch = text.charCodeAt(pos);
+      if (ch === 34) {
+        result += text.substring(start, pos);
+        pos++;
+        break;
+      }
+      if (ch === 92) {
+        result += text.substring(start, pos);
+        pos++;
+        if (pos >= len) {
+          scanError = 2;
+          break;
+        }
+        const ch2 = text.charCodeAt(pos++);
+        switch (ch2) {
+          case 34:
+            result += '"';
+            break;
+          case 92:
+            result += "\\";
+            break;
+          case 47:
+            result += "/";
+            break;
+          case 98:
+            result += "\b";
+            break;
+          case 102:
+            result += "\f";
+            break;
+          case 110:
+            result += "\n";
+            break;
+          case 114:
+            result += "\r";
+            break;
+          case 116:
+            result += "	";
+            break;
+          case 117:
+            const ch3 = scanHexDigits(4, true);
+            if (ch3 >= 0) {
+              result += String.fromCharCode(ch3);
+            } else {
+              scanError = 4;
+            }
+            break;
+          default:
+            scanError = 5;
+        }
+        start = pos;
+        continue;
+      }
+      if (ch >= 0 && ch <= 31) {
+        if (isLineBreak(ch)) {
+          result += text.substring(start, pos);
+          scanError = 2;
+          break;
+        } else {
+          scanError = 6;
+        }
+      }
+      pos++;
+    }
+    return result;
+  }
+  function scanNext() {
+    value = "";
+    scanError = 0;
+    tokenOffset = pos;
+    lineStartOffset = lineNumber;
+    prevTokenLineStartOffset = tokenLineStartOffset;
+    if (pos >= len) {
+      tokenOffset = len;
+      return token = 17;
+    }
+    let code = text.charCodeAt(pos);
+    if (isWhiteSpace(code)) {
+      do {
+        pos++;
+        value += String.fromCharCode(code);
+        code = text.charCodeAt(pos);
+      } while (isWhiteSpace(code));
+      return token = 15;
+    }
+    if (isLineBreak(code)) {
+      pos++;
+      value += String.fromCharCode(code);
+      if (code === 13 && text.charCodeAt(pos) === 10) {
+        pos++;
+        value += "\n";
+      }
+      lineNumber++;
+      tokenLineStartOffset = pos;
+      return token = 14;
+    }
+    switch (code) {
+      // tokens: []{}:,
+      case 123:
+        pos++;
+        return token = 1;
+      case 125:
+        pos++;
+        return token = 2;
+      case 91:
+        pos++;
+        return token = 3;
+      case 93:
+        pos++;
+        return token = 4;
+      case 58:
+        pos++;
+        return token = 6;
+      case 44:
+        pos++;
+        return token = 5;
+      // strings
+      case 34:
+        pos++;
+        value = scanString();
+        return token = 10;
+      // comments
+      case 47:
+        const start = pos - 1;
+        if (text.charCodeAt(pos + 1) === 47) {
+          pos += 2;
+          while (pos < len) {
+            if (isLineBreak(text.charCodeAt(pos))) {
+              break;
+            }
+            pos++;
+          }
+          value = text.substring(start, pos);
+          return token = 12;
+        }
+        if (text.charCodeAt(pos + 1) === 42) {
+          pos += 2;
+          const safeLength = len - 1;
+          let commentClosed = false;
+          while (pos < safeLength) {
+            const ch = text.charCodeAt(pos);
+            if (ch === 42 && text.charCodeAt(pos + 1) === 47) {
+              pos += 2;
+              commentClosed = true;
+              break;
+            }
+            pos++;
+            if (isLineBreak(ch)) {
+              if (ch === 13 && text.charCodeAt(pos) === 10) {
+                pos++;
+              }
+              lineNumber++;
+              tokenLineStartOffset = pos;
+            }
+          }
+          if (!commentClosed) {
+            pos++;
+            scanError = 1;
+          }
+          value = text.substring(start, pos);
+          return token = 13;
+        }
+        value += String.fromCharCode(code);
+        pos++;
+        return token = 16;
+      // numbers
+      case 45:
+        value += String.fromCharCode(code);
+        pos++;
+        if (pos === len || !isDigit(text.charCodeAt(pos))) {
+          return token = 16;
+        }
+      // found a minus, followed by a number so
+      // we fall through to proceed with scanning
+      // numbers
+      case 48:
+      case 49:
+      case 50:
+      case 51:
+      case 52:
+      case 53:
+      case 54:
+      case 55:
+      case 56:
+      case 57:
+        value += scanNumber();
+        return token = 11;
+      // literals and unknown symbols
+      default:
+        while (pos < len && isUnknownContentCharacter(code)) {
+          pos++;
+          code = text.charCodeAt(pos);
+        }
+        if (tokenOffset !== pos) {
+          value = text.substring(tokenOffset, pos);
+          switch (value) {
+            case "true":
+              return token = 8;
+            case "false":
+              return token = 9;
+            case "null":
+              return token = 7;
+          }
+          return token = 16;
+        }
+        value += String.fromCharCode(code);
+        pos++;
+        return token = 16;
+    }
+  }
+  function isUnknownContentCharacter(code) {
+    if (isWhiteSpace(code) || isLineBreak(code)) {
+      return false;
+    }
+    switch (code) {
+      case 125:
+      case 93:
+      case 123:
+      case 91:
+      case 34:
+      case 58:
+      case 44:
+      case 47:
+        return false;
+    }
+    return true;
+  }
+  function scanNextNonTrivia() {
+    let result;
+    do {
+      result = scanNext();
+    } while (result >= 12 && result <= 15);
+    return result;
+  }
+  return {
+    setPosition,
+    getPosition: () => pos,
+    scan: ignoreTrivia ? scanNextNonTrivia : scanNext,
+    getToken: () => token,
+    getTokenValue: () => value,
+    getTokenOffset: () => tokenOffset,
+    getTokenLength: () => pos - tokenOffset,
+    getTokenStartLine: () => lineStartOffset,
+    getTokenStartCharacter: () => tokenOffset - prevTokenLineStartOffset,
+    getTokenError: () => scanError
+  };
+}
+function isWhiteSpace(ch) {
+  return ch === 32 || ch === 9;
+}
+function isLineBreak(ch) {
+  return ch === 10 || ch === 13;
+}
+function isDigit(ch) {
+  return ch >= 48 && ch <= 57;
+}
+var CharacterCodes;
+var init_scanner2 = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js"() {
+    "use strict";
+    (function(CharacterCodes2) {
+      CharacterCodes2[CharacterCodes2["lineFeed"] = 10] = "lineFeed";
+      CharacterCodes2[CharacterCodes2["carriageReturn"] = 13] = "carriageReturn";
+      CharacterCodes2[CharacterCodes2["space"] = 32] = "space";
+      CharacterCodes2[CharacterCodes2["_0"] = 48] = "_0";
+      CharacterCodes2[CharacterCodes2["_1"] = 49] = "_1";
+      CharacterCodes2[CharacterCodes2["_2"] = 50] = "_2";
+      CharacterCodes2[CharacterCodes2["_3"] = 51] = "_3";
+      CharacterCodes2[CharacterCodes2["_4"] = 52] = "_4";
+      CharacterCodes2[CharacterCodes2["_5"] = 53] = "_5";
+      CharacterCodes2[CharacterCodes2["_6"] = 54] = "_6";
+      CharacterCodes2[CharacterCodes2["_7"] = 55] = "_7";
+      CharacterCodes2[CharacterCodes2["_8"] = 56] = "_8";
+      CharacterCodes2[CharacterCodes2["_9"] = 57] = "_9";
+      CharacterCodes2[CharacterCodes2["a"] = 97] = "a";
+      CharacterCodes2[CharacterCodes2["b"] = 98] = "b";
+      CharacterCodes2[CharacterCodes2["c"] = 99] = "c";
+      CharacterCodes2[CharacterCodes2["d"] = 100] = "d";
+      CharacterCodes2[CharacterCodes2["e"] = 101] = "e";
+      CharacterCodes2[CharacterCodes2["f"] = 102] = "f";
+      CharacterCodes2[CharacterCodes2["g"] = 103] = "g";
+      CharacterCodes2[CharacterCodes2["h"] = 104] = "h";
+      CharacterCodes2[CharacterCodes2["i"] = 105] = "i";
+      CharacterCodes2[CharacterCodes2["j"] = 106] = "j";
+      CharacterCodes2[CharacterCodes2["k"] = 107] = "k";
+      CharacterCodes2[CharacterCodes2["l"] = 108] = "l";
+      CharacterCodes2[CharacterCodes2["m"] = 109] = "m";
+      CharacterCodes2[CharacterCodes2["n"] = 110] = "n";
+      CharacterCodes2[CharacterCodes2["o"] = 111] = "o";
+      CharacterCodes2[CharacterCodes2["p"] = 112] = "p";
+      CharacterCodes2[CharacterCodes2["q"] = 113] = "q";
+      CharacterCodes2[CharacterCodes2["r"] = 114] = "r";
+      CharacterCodes2[CharacterCodes2["s"] = 115] = "s";
+      CharacterCodes2[CharacterCodes2["t"] = 116] = "t";
+      CharacterCodes2[CharacterCodes2["u"] = 117] = "u";
+      CharacterCodes2[CharacterCodes2["v"] = 118] = "v";
+      CharacterCodes2[CharacterCodes2["w"] = 119] = "w";
+      CharacterCodes2[CharacterCodes2["x"] = 120] = "x";
+      CharacterCodes2[CharacterCodes2["y"] = 121] = "y";
+      CharacterCodes2[CharacterCodes2["z"] = 122] = "z";
+      CharacterCodes2[CharacterCodes2["A"] = 65] = "A";
+      CharacterCodes2[CharacterCodes2["B"] = 66] = "B";
+      CharacterCodes2[CharacterCodes2["C"] = 67] = "C";
+      CharacterCodes2[CharacterCodes2["D"] = 68] = "D";
+      CharacterCodes2[CharacterCodes2["E"] = 69] = "E";
+      CharacterCodes2[CharacterCodes2["F"] = 70] = "F";
+      CharacterCodes2[CharacterCodes2["G"] = 71] = "G";
+      CharacterCodes2[CharacterCodes2["H"] = 72] = "H";
+      CharacterCodes2[CharacterCodes2["I"] = 73] = "I";
+      CharacterCodes2[CharacterCodes2["J"] = 74] = "J";
+      CharacterCodes2[CharacterCodes2["K"] = 75] = "K";
+      CharacterCodes2[CharacterCodes2["L"] = 76] = "L";
+      CharacterCodes2[CharacterCodes2["M"] = 77] = "M";
+      CharacterCodes2[CharacterCodes2["N"] = 78] = "N";
+      CharacterCodes2[CharacterCodes2["O"] = 79] = "O";
+      CharacterCodes2[CharacterCodes2["P"] = 80] = "P";
+      CharacterCodes2[CharacterCodes2["Q"] = 81] = "Q";
+      CharacterCodes2[CharacterCodes2["R"] = 82] = "R";
+      CharacterCodes2[CharacterCodes2["S"] = 83] = "S";
+      CharacterCodes2[CharacterCodes2["T"] = 84] = "T";
+      CharacterCodes2[CharacterCodes2["U"] = 85] = "U";
+      CharacterCodes2[CharacterCodes2["V"] = 86] = "V";
+      CharacterCodes2[CharacterCodes2["W"] = 87] = "W";
+      CharacterCodes2[CharacterCodes2["X"] = 88] = "X";
+      CharacterCodes2[CharacterCodes2["Y"] = 89] = "Y";
+      CharacterCodes2[CharacterCodes2["Z"] = 90] = "Z";
+      CharacterCodes2[CharacterCodes2["asterisk"] = 42] = "asterisk";
+      CharacterCodes2[CharacterCodes2["backslash"] = 92] = "backslash";
+      CharacterCodes2[CharacterCodes2["closeBrace"] = 125] = "closeBrace";
+      CharacterCodes2[CharacterCodes2["closeBracket"] = 93] = "closeBracket";
+      CharacterCodes2[CharacterCodes2["colon"] = 58] = "colon";
+      CharacterCodes2[CharacterCodes2["comma"] = 44] = "comma";
+      CharacterCodes2[CharacterCodes2["dot"] = 46] = "dot";
+      CharacterCodes2[CharacterCodes2["doubleQuote"] = 34] = "doubleQuote";
+      CharacterCodes2[CharacterCodes2["minus"] = 45] = "minus";
+      CharacterCodes2[CharacterCodes2["openBrace"] = 123] = "openBrace";
+      CharacterCodes2[CharacterCodes2["openBracket"] = 91] = "openBracket";
+      CharacterCodes2[CharacterCodes2["plus"] = 43] = "plus";
+      CharacterCodes2[CharacterCodes2["slash"] = 47] = "slash";
+      CharacterCodes2[CharacterCodes2["formFeed"] = 12] = "formFeed";
+      CharacterCodes2[CharacterCodes2["tab"] = 9] = "tab";
+    })(CharacterCodes || (CharacterCodes = {}));
+  }
+});
+
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/string-intern.js
+var cachedSpaces, maxCachedValues, cachedBreakLinesWithSpaces;
+var init_string_intern = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/string-intern.js"() {
+    cachedSpaces = new Array(20).fill(0).map((_3, index) => {
+      return " ".repeat(index);
+    });
+    maxCachedValues = 200;
+    cachedBreakLinesWithSpaces = {
+      " ": {
+        "\n": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\n" + " ".repeat(index);
+        }),
+        "\r": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\r" + " ".repeat(index);
+        }),
+        "\r\n": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\r\n" + " ".repeat(index);
+        })
+      },
+      "	": {
+        "\n": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\n" + "	".repeat(index);
+        }),
+        "\r": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\r" + "	".repeat(index);
+        }),
+        "\r\n": new Array(maxCachedValues).fill(0).map((_3, index) => {
+          return "\r\n" + "	".repeat(index);
+        })
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/format.js
+var init_format = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/format.js"() {
+    "use strict";
+    init_scanner2();
+    init_string_intern();
+  }
+});
+
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/parser.js
+function parseTree(text, errors = [], options = ParseOptions.DEFAULT) {
+  let currentParent = { type: "array", offset: -1, length: -1, children: [], parent: void 0 };
+  function ensurePropertyComplete(endOffset) {
+    if (currentParent.type === "property") {
+      currentParent.length = endOffset - currentParent.offset;
+      currentParent = currentParent.parent;
+    }
+  }
+  function onValue(valueNode) {
+    currentParent.children.push(valueNode);
+    return valueNode;
+  }
+  const visitor = {
+    onObjectBegin: (offset) => {
+      currentParent = onValue({ type: "object", offset, length: -1, parent: currentParent, children: [] });
+    },
+    onObjectProperty: (name, offset, length) => {
+      currentParent = onValue({ type: "property", offset, length: -1, parent: currentParent, children: [] });
+      currentParent.children.push({ type: "string", value: name, offset, length, parent: currentParent });
+    },
+    onObjectEnd: (offset, length) => {
+      ensurePropertyComplete(offset + length);
+      currentParent.length = offset + length - currentParent.offset;
+      currentParent = currentParent.parent;
+      ensurePropertyComplete(offset + length);
+    },
+    onArrayBegin: (offset, length) => {
+      currentParent = onValue({ type: "array", offset, length: -1, parent: currentParent, children: [] });
+    },
+    onArrayEnd: (offset, length) => {
+      currentParent.length = offset + length - currentParent.offset;
+      currentParent = currentParent.parent;
+      ensurePropertyComplete(offset + length);
+    },
+    onLiteralValue: (value, offset, length) => {
+      onValue({ type: getNodeType(value), offset, length, parent: currentParent, value });
+      ensurePropertyComplete(offset + length);
+    },
+    onSeparator: (sep, offset, length) => {
+      if (currentParent.type === "property") {
+        if (sep === ":") {
+          currentParent.colonOffset = offset;
+        } else if (sep === ",") {
+          ensurePropertyComplete(offset);
+        }
+      }
+    },
+    onError: (error49, offset, length) => {
+      errors.push({ error: error49, offset, length });
+    }
+  };
+  visit(text, visitor, options);
+  const result = currentParent.children[0];
+  if (result) {
+    delete result.parent;
+  }
+  return result;
+}
+function visit(text, visitor, options = ParseOptions.DEFAULT) {
+  const _scanner = createScanner(text, false);
+  const _jsonPath = [];
+  let suppressedCallbacks = 0;
+  function toNoArgVisit(visitFunction) {
+    return visitFunction ? () => suppressedCallbacks === 0 && visitFunction(_scanner.getTokenOffset(), _scanner.getTokenLength(), _scanner.getTokenStartLine(), _scanner.getTokenStartCharacter()) : () => true;
+  }
+  function toOneArgVisit(visitFunction) {
+    return visitFunction ? (arg) => suppressedCallbacks === 0 && visitFunction(arg, _scanner.getTokenOffset(), _scanner.getTokenLength(), _scanner.getTokenStartLine(), _scanner.getTokenStartCharacter()) : () => true;
+  }
+  function toOneArgVisitWithPath(visitFunction) {
+    return visitFunction ? (arg) => suppressedCallbacks === 0 && visitFunction(arg, _scanner.getTokenOffset(), _scanner.getTokenLength(), _scanner.getTokenStartLine(), _scanner.getTokenStartCharacter(), () => _jsonPath.slice()) : () => true;
+  }
+  function toBeginVisit(visitFunction) {
+    return visitFunction ? () => {
+      if (suppressedCallbacks > 0) {
+        suppressedCallbacks++;
+      } else {
+        let cbReturn = visitFunction(_scanner.getTokenOffset(), _scanner.getTokenLength(), _scanner.getTokenStartLine(), _scanner.getTokenStartCharacter(), () => _jsonPath.slice());
+        if (cbReturn === false) {
+          suppressedCallbacks = 1;
+        }
+      }
+    } : () => true;
+  }
+  function toEndVisit(visitFunction) {
+    return visitFunction ? () => {
+      if (suppressedCallbacks > 0) {
+        suppressedCallbacks--;
+      }
+      if (suppressedCallbacks === 0) {
+        visitFunction(_scanner.getTokenOffset(), _scanner.getTokenLength(), _scanner.getTokenStartLine(), _scanner.getTokenStartCharacter());
+      }
+    } : () => true;
+  }
+  const onObjectBegin = toBeginVisit(visitor.onObjectBegin), onObjectProperty = toOneArgVisitWithPath(visitor.onObjectProperty), onObjectEnd = toEndVisit(visitor.onObjectEnd), onArrayBegin = toBeginVisit(visitor.onArrayBegin), onArrayEnd = toEndVisit(visitor.onArrayEnd), onLiteralValue = toOneArgVisitWithPath(visitor.onLiteralValue), onSeparator = toOneArgVisit(visitor.onSeparator), onComment = toNoArgVisit(visitor.onComment), onError2 = toOneArgVisit(visitor.onError);
+  const disallowComments = options && options.disallowComments;
+  const allowTrailingComma = options && options.allowTrailingComma;
+  function scanNext() {
+    while (true) {
+      const token = _scanner.scan();
+      switch (_scanner.getTokenError()) {
+        case 4:
+          handleError(
+            14
+            /* ParseErrorCode.InvalidUnicode */
+          );
+          break;
+        case 5:
+          handleError(
+            15
+            /* ParseErrorCode.InvalidEscapeCharacter */
+          );
+          break;
+        case 3:
+          handleError(
+            13
+            /* ParseErrorCode.UnexpectedEndOfNumber */
+          );
+          break;
+        case 1:
+          if (!disallowComments) {
+            handleError(
+              11
+              /* ParseErrorCode.UnexpectedEndOfComment */
+            );
+          }
+          break;
+        case 2:
+          handleError(
+            12
+            /* ParseErrorCode.UnexpectedEndOfString */
+          );
+          break;
+        case 6:
+          handleError(
+            16
+            /* ParseErrorCode.InvalidCharacter */
+          );
+          break;
+      }
+      switch (token) {
+        case 12:
+        case 13:
+          if (disallowComments) {
+            handleError(
+              10
+              /* ParseErrorCode.InvalidCommentToken */
+            );
+          } else {
+            onComment();
+          }
+          break;
+        case 16:
+          handleError(
+            1
+            /* ParseErrorCode.InvalidSymbol */
+          );
+          break;
+        case 15:
+        case 14:
+          break;
+        default:
+          return token;
+      }
+    }
+  }
+  function handleError(error49, skipUntilAfter = [], skipUntil = []) {
+    onError2(error49);
+    if (skipUntilAfter.length + skipUntil.length > 0) {
+      let token = _scanner.getToken();
+      while (token !== 17) {
+        if (skipUntilAfter.indexOf(token) !== -1) {
+          scanNext();
+          break;
+        } else if (skipUntil.indexOf(token) !== -1) {
+          break;
+        }
+        token = scanNext();
+      }
+    }
+  }
+  function parseString(isValue) {
+    const value = _scanner.getTokenValue();
+    if (isValue) {
+      onLiteralValue(value);
+    } else {
+      onObjectProperty(value);
+      _jsonPath.push(value);
+    }
+    scanNext();
+    return true;
+  }
+  function parseLiteral() {
+    switch (_scanner.getToken()) {
+      case 11:
+        const tokenValue = _scanner.getTokenValue();
+        let value = Number(tokenValue);
+        if (isNaN(value)) {
+          handleError(
+            2
+            /* ParseErrorCode.InvalidNumberFormat */
+          );
+          value = 0;
+        }
+        onLiteralValue(value);
+        break;
+      case 7:
+        onLiteralValue(null);
+        break;
+      case 8:
+        onLiteralValue(true);
+        break;
+      case 9:
+        onLiteralValue(false);
+        break;
+      default:
+        return false;
+    }
+    scanNext();
+    return true;
+  }
+  function parseProperty() {
+    if (_scanner.getToken() !== 10) {
+      handleError(3, [], [
+        2,
+        5
+        /* SyntaxKind.CommaToken */
+      ]);
+      return false;
+    }
+    parseString(false);
+    if (_scanner.getToken() === 6) {
+      onSeparator(":");
+      scanNext();
+      if (!parseValue()) {
+        handleError(4, [], [
+          2,
+          5
+          /* SyntaxKind.CommaToken */
+        ]);
+      }
+    } else {
+      handleError(5, [], [
+        2,
+        5
+        /* SyntaxKind.CommaToken */
+      ]);
+    }
+    _jsonPath.pop();
+    return true;
+  }
+  function parseObject() {
+    onObjectBegin();
+    scanNext();
+    let needsComma = false;
+    while (_scanner.getToken() !== 2 && _scanner.getToken() !== 17) {
+      if (_scanner.getToken() === 5) {
+        if (!needsComma) {
+          handleError(4, [], []);
+        }
+        onSeparator(",");
+        scanNext();
+        if (_scanner.getToken() === 2 && allowTrailingComma) {
+          break;
+        }
+      } else if (needsComma) {
+        handleError(6, [], []);
+      }
+      if (!parseProperty()) {
+        handleError(4, [], [
+          2,
+          5
+          /* SyntaxKind.CommaToken */
+        ]);
+      }
+      needsComma = true;
+    }
+    onObjectEnd();
+    if (_scanner.getToken() !== 2) {
+      handleError(7, [
+        2
+        /* SyntaxKind.CloseBraceToken */
+      ], []);
+    } else {
+      scanNext();
+    }
+    return true;
+  }
+  function parseArray() {
+    onArrayBegin();
+    scanNext();
+    let isFirstElement = true;
+    let needsComma = false;
+    while (_scanner.getToken() !== 4 && _scanner.getToken() !== 17) {
+      if (_scanner.getToken() === 5) {
+        if (!needsComma) {
+          handleError(4, [], []);
+        }
+        onSeparator(",");
+        scanNext();
+        if (_scanner.getToken() === 4 && allowTrailingComma) {
+          break;
+        }
+      } else if (needsComma) {
+        handleError(6, [], []);
+      }
+      if (isFirstElement) {
+        _jsonPath.push(0);
+        isFirstElement = false;
+      } else {
+        _jsonPath[_jsonPath.length - 1]++;
+      }
+      if (!parseValue()) {
+        handleError(4, [], [
+          4,
+          5
+          /* SyntaxKind.CommaToken */
+        ]);
+      }
+      needsComma = true;
+    }
+    onArrayEnd();
+    if (!isFirstElement) {
+      _jsonPath.pop();
+    }
+    if (_scanner.getToken() !== 4) {
+      handleError(8, [
+        4
+        /* SyntaxKind.CloseBracketToken */
+      ], []);
+    } else {
+      scanNext();
+    }
+    return true;
+  }
+  function parseValue() {
+    switch (_scanner.getToken()) {
+      case 3:
+        return parseArray();
+      case 1:
+        return parseObject();
+      case 10:
+        return parseString(true);
+      default:
+        return parseLiteral();
+    }
+  }
+  scanNext();
+  if (_scanner.getToken() === 17) {
+    if (options.allowEmptyContent) {
+      return true;
+    }
+    handleError(4, [], []);
+    return false;
+  }
+  if (!parseValue()) {
+    handleError(4, [], []);
+    return false;
+  }
+  if (_scanner.getToken() !== 17) {
+    handleError(9, [], []);
+  }
+  return true;
+}
+function getNodeType(value) {
+  switch (typeof value) {
+    case "boolean":
+      return "boolean";
+    case "number":
+      return "number";
+    case "string":
+      return "string";
+    case "object": {
+      if (!value) {
+        return "null";
+      } else if (Array.isArray(value)) {
+        return "array";
+      }
+      return "object";
+    }
+    default:
+      return "null";
+  }
+}
+var ParseOptions;
+var init_parser2 = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/parser.js"() {
+    "use strict";
+    init_scanner2();
+    (function(ParseOptions2) {
+      ParseOptions2.DEFAULT = {
+        allowTrailingComma: false
+      };
+    })(ParseOptions || (ParseOptions = {}));
+  }
+});
+
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/edit.js
+var init_edit = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/edit.js"() {
+    "use strict";
+    init_format();
+    init_parser2();
+  }
+});
+
+// node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/main.js
+var ScanError, SyntaxKind, parseTree2, ParseErrorCode;
+var init_main = __esm({
+  "node_modules/.pnpm/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/main.js"() {
     "use strict";
-    exports.__esModule = true;
-    exports.distance = exports.closest = void 0;
-    var peq = new Uint32Array(65536);
-    var myers_32 = function(a, b2) {
-      var n7 = a.length;
-      var m = b2.length;
-      var lst = 1 << n7 - 1;
-      var pv = -1;
-      var mv = 0;
-      var sc = n7;
-      var i2 = n7;
+    init_format();
+    init_edit();
+    init_scanner2();
+    init_parser2();
+    (function(ScanError2) {
+      ScanError2[ScanError2["None"] = 0] = "None";
+      ScanError2[ScanError2["UnexpectedEndOfComment"] = 1] = "UnexpectedEndOfComment";
+      ScanError2[ScanError2["UnexpectedEndOfString"] = 2] = "UnexpectedEndOfString";
+      ScanError2[ScanError2["UnexpectedEndOfNumber"] = 3] = "UnexpectedEndOfNumber";
+      ScanError2[ScanError2["InvalidUnicode"] = 4] = "InvalidUnicode";
+      ScanError2[ScanError2["InvalidEscapeCharacter"] = 5] = "InvalidEscapeCharacter";
+      ScanError2[ScanError2["InvalidCharacter"] = 6] = "InvalidCharacter";
+    })(ScanError || (ScanError = {}));
+    (function(SyntaxKind2) {
+      SyntaxKind2[SyntaxKind2["OpenBraceToken"] = 1] = "OpenBraceToken";
+      SyntaxKind2[SyntaxKind2["CloseBraceToken"] = 2] = "CloseBraceToken";
+      SyntaxKind2[SyntaxKind2["OpenBracketToken"] = 3] = "OpenBracketToken";
+      SyntaxKind2[SyntaxKind2["CloseBracketToken"] = 4] = "CloseBracketToken";
+      SyntaxKind2[SyntaxKind2["CommaToken"] = 5] = "CommaToken";
+      SyntaxKind2[SyntaxKind2["ColonToken"] = 6] = "ColonToken";
+      SyntaxKind2[SyntaxKind2["NullKeyword"] = 7] = "NullKeyword";
+      SyntaxKind2[SyntaxKind2["TrueKeyword"] = 8] = "TrueKeyword";
+      SyntaxKind2[SyntaxKind2["FalseKeyword"] = 9] = "FalseKeyword";
+      SyntaxKind2[SyntaxKind2["StringLiteral"] = 10] = "StringLiteral";
+      SyntaxKind2[SyntaxKind2["NumericLiteral"] = 11] = "NumericLiteral";
+      SyntaxKind2[SyntaxKind2["LineCommentTrivia"] = 12] = "LineCommentTrivia";
+      SyntaxKind2[SyntaxKind2["BlockCommentTrivia"] = 13] = "BlockCommentTrivia";
+      SyntaxKind2[SyntaxKind2["LineBreakTrivia"] = 14] = "LineBreakTrivia";
+      SyntaxKind2[SyntaxKind2["Trivia"] = 15] = "Trivia";
+      SyntaxKind2[SyntaxKind2["Unknown"] = 16] = "Unknown";
+      SyntaxKind2[SyntaxKind2["EOF"] = 17] = "EOF";
+    })(SyntaxKind || (SyntaxKind = {}));
+    parseTree2 = parseTree;
+    (function(ParseErrorCode2) {
+      ParseErrorCode2[ParseErrorCode2["InvalidSymbol"] = 1] = "InvalidSymbol";
+      ParseErrorCode2[ParseErrorCode2["InvalidNumberFormat"] = 2] = "InvalidNumberFormat";
+      ParseErrorCode2[ParseErrorCode2["PropertyNameExpected"] = 3] = "PropertyNameExpected";
+      ParseErrorCode2[ParseErrorCode2["ValueExpected"] = 4] = "ValueExpected";
+      ParseErrorCode2[ParseErrorCode2["ColonExpected"] = 5] = "ColonExpected";
+      ParseErrorCode2[ParseErrorCode2["CommaExpected"] = 6] = "CommaExpected";
+      ParseErrorCode2[ParseErrorCode2["CloseBraceExpected"] = 7] = "CloseBraceExpected";
+      ParseErrorCode2[ParseErrorCode2["CloseBracketExpected"] = 8] = "CloseBracketExpected";
+      ParseErrorCode2[ParseErrorCode2["EndOfFileExpected"] = 9] = "EndOfFileExpected";
+      ParseErrorCode2[ParseErrorCode2["InvalidCommentToken"] = 10] = "InvalidCommentToken";
+      ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfComment"] = 11] = "UnexpectedEndOfComment";
+      ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfString"] = 12] = "UnexpectedEndOfString";
+      ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfNumber"] = 13] = "UnexpectedEndOfNumber";
+      ParseErrorCode2[ParseErrorCode2["InvalidUnicode"] = 14] = "InvalidUnicode";
+      ParseErrorCode2[ParseErrorCode2["InvalidEscapeCharacter"] = 15] = "InvalidEscapeCharacter";
+      ParseErrorCode2[ParseErrorCode2["InvalidCharacter"] = 16] = "InvalidCharacter";
+    })(ParseErrorCode || (ParseErrorCode = {}));
+  }
+});
+
+// src/core/mcph-parser.ts
+import * as fs4 from "node:fs";
+import * as path3 from "node:path";
+async function parseMchpConfig(file2, projectRoot, scopeOverride) {
+  const content = readFileContent(file2.absolutePath);
+  const scope = scopeOverride ?? detectScope2(file2.relativePath);
+  const isGitTracked = await checkGitTracked2(file2.absolutePath, projectRoot);
+  const isGitignored = checkGitignored(file2.absolutePath, projectRoot);
+  const result = {
+    filePath: file2.absolutePath,
+    relativePath: file2.relativePath,
+    scope,
+    content,
+    parseErrors: [],
+    isGitTracked,
+    isGitignored,
+    raw: null,
+    positions: {},
+    listEntries: { servers: [], blocked: [] },
+    unknownFields: []
+  };
+  const errors = [];
+  const tree = parseTree2(content, errors, { allowTrailingComma: true });
+  if (errors.length > 0 || !tree) {
+    for (const e of errors) {
+      const { line, column } = offsetToPosition(content, e.offset);
+      result.parseErrors.push(`Parse error at ${line}:${column} (code ${e.error})`);
+    }
+    return result;
+  }
+  if (tree.type !== "object") {
+    result.parseErrors.push(".mcph.json must be a JSON object at the root");
+    return result;
+  }
+  try {
+    result.raw = JSON.parse(stripComments2(content));
+  } catch {
+    return result;
+  }
+  const rootProps = tree.children ?? [];
+  for (const prop of rootProps) {
+    if (prop.type !== "property" || !prop.children || prop.children.length < 2) continue;
+    const keyNode = prop.children[0];
+    const valueNode = prop.children[1];
+    if (keyNode.type !== "string" || typeof keyNode.value !== "string") continue;
+    const name = keyNode.value;
+    const position = nodePosition(content, keyNode);
+    if (KNOWN_FIELDS.has(name)) {
+      result.positions[name] = position;
+      if (name === "servers" || name === "blocked") {
+        if (valueNode.type === "array" && valueNode.children) {
+          for (const item of valueNode.children) {
+            if (item.type === "string" && typeof item.value === "string") {
+              result.listEntries[name].push({
+                value: item.value,
+                position: nodePosition(content, item)
+              });
+            }
+          }
+        }
+      }
+    } else {
+      result.unknownFields.push({ name, position });
+    }
+  }
+  return result;
+}
+function detectScope2(relativePath) {
+  const normalized = relativePath.replace(/\\/g, "/");
+  if (normalized.startsWith("~/")) return "global";
+  if (normalized.endsWith(".mcph.local.json")) return "project-local";
+  return "project";
+}
+function nodePosition(content, node) {
+  const start = offsetToPosition(content, node.offset);
+  const end = offsetToPosition(content, node.offset + node.length);
+  return {
+    line: start.line,
+    column: start.column,
+    endLine: end.line,
+    endColumn: end.column
+  };
+}
+function offsetToPosition(content, offset) {
+  let line = 1;
+  let column = 1;
+  for (let i2 = 0; i2 < offset && i2 < content.length; i2++) {
+    if (content[i2] === "\n") {
+      line++;
+      column = 1;
+    } else {
+      column++;
+    }
+  }
+  return { line, column };
+}
+function stripComments2(src) {
+  let out = "";
+  let i2 = 0;
+  let inString = false;
+  let escape2 = false;
+  while (i2 < src.length) {
+    const ch = src[i2];
+    if (inString) {
+      out += ch;
+      if (escape2) {
+        escape2 = false;
+      } else if (ch === "\\") {
+        escape2 = true;
+      } else if (ch === '"') {
+        inString = false;
+      }
+      i2++;
+      continue;
+    }
+    if (ch === '"') {
+      inString = true;
+      out += ch;
+      i2++;
+      continue;
+    }
+    if (ch === "/" && src[i2 + 1] === "/") {
+      while (i2 < src.length && src[i2] !== "\n") i2++;
+      continue;
+    }
+    if (ch === "/" && src[i2 + 1] === "*") {
+      i2 += 2;
+      while (i2 < src.length && !(src[i2] === "*" && src[i2 + 1] === "/")) i2++;
+      i2 += 2;
+      continue;
+    }
+    out += ch;
+    i2++;
+  }
+  return out;
+}
+async function checkGitTracked2(filePath, projectRoot) {
+  try {
+    const git = getGit(projectRoot);
+    const result = await git.raw(["ls-files", "--error-unmatch", filePath]);
+    return result.trim().length > 0;
+  } catch {
+    return false;
+  }
+}
+function checkGitignored(filePath, projectRoot) {
+  const gitignorePath = path3.join(projectRoot, ".gitignore");
+  let content;
+  try {
+    content = fs4.readFileSync(gitignorePath, "utf-8");
+  } catch {
+    return false;
+  }
+  const basename5 = path3.basename(filePath);
+  const patterns = content.split(/\r?\n/).map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
+  return patterns.some((p2) => p2 === basename5 || p2 === `/${basename5}` || p2 === `./${basename5}`);
+}
+var KNOWN_FIELDS;
+var init_mcph_parser = __esm({
+  "src/core/mcph-parser.ts"() {
+    "use strict";
+    init_main();
+    init_fs();
+    init_git();
+    KNOWN_FIELDS = /* @__PURE__ */ new Set(["$schema", "version", "token", "apiBase", "servers", "blocked"]);
+  }
+});
+
+// node_modules/.pnpm/fastest-levenshtein@1.0.16/node_modules/fastest-levenshtein/esm/mod.js
+var mod_exports = {};
+__export(mod_exports, {
+  closest: () => closest,
+  distance: () => distance
+});
+var peq, myers_32, myers_x, distance, closest;
+var init_mod = __esm({
+  "node_modules/.pnpm/fastest-levenshtein@1.0.16/node_modules/fastest-levenshtein/esm/mod.js"() {
+    peq = new Uint32Array(65536);
+    myers_32 = (a, b2) => {
+      const n7 = a.length;
+      const m = b2.length;
+      const lst = 1 << n7 - 1;
+      let pv = -1;
+      let mv = 0;
+      let sc = n7;
+      let i2 = n7;
       while (i2--) {
         peq[a.charCodeAt(i2)] |= 1 << i2;
       }
       for (i2 = 0; i2 < m; i2++) {
-        var eq = peq[b2.charCodeAt(i2)];
-        var xv = eq | mv;
+        let eq = peq[b2.charCodeAt(i2)];
+        const xv = eq | mv;
         eq |= (eq & pv) + pv ^ pv;
         mv |= ~(eq | pv);
         pv &= eq;
@@ -40774,34 +41930,34 @@ var require_mod = __commonJS({
       }
       return sc;
     };
-    var myers_x = function(b2, a) {
-      var n7 = a.length;
-      var m = b2.length;
-      var mhc = [];
-      var phc = [];
-      var hsize = Math.ceil(n7 / 32);
-      var vsize = Math.ceil(m / 32);
-      for (var i2 = 0; i2 < hsize; i2++) {
+    myers_x = (b2, a) => {
+      const n7 = a.length;
+      const m = b2.length;
+      const mhc = [];
+      const phc = [];
+      const hsize = Math.ceil(n7 / 32);
+      const vsize = Math.ceil(m / 32);
+      for (let i2 = 0; i2 < hsize; i2++) {
         phc[i2] = -1;
         mhc[i2] = 0;
       }
-      var j3 = 0;
+      let j3 = 0;
       for (; j3 < vsize - 1; j3++) {
-        var mv_1 = 0;
-        var pv_1 = -1;
-        var start_1 = j3 * 32;
-        var vlen_1 = Math.min(32, m) + start_1;
-        for (var k3 = start_1; k3 < vlen_1; k3++) {
+        let mv2 = 0;
+        let pv2 = -1;
+        const start2 = j3 * 32;
+        const vlen2 = Math.min(32, m) + start2;
+        for (let k3 = start2; k3 < vlen2; k3++) {
           peq[b2.charCodeAt(k3)] |= 1 << k3;
         }
-        for (var i2 = 0; i2 < n7; i2++) {
-          var eq = peq[a.charCodeAt(i2)];
-          var pb = phc[i2 / 32 | 0] >>> i2 & 1;
-          var mb = mhc[i2 / 32 | 0] >>> i2 & 1;
-          var xv = eq | mv_1;
-          var xh = ((eq | mb) & pv_1) + pv_1 ^ pv_1 | eq | mb;
-          var ph = mv_1 | ~(xh | pv_1);
-          var mh = pv_1 & xh;
+        for (let i2 = 0; i2 < n7; i2++) {
+          const eq = peq[a.charCodeAt(i2)];
+          const pb = phc[i2 / 32 | 0] >>> i2 & 1;
+          const mb = mhc[i2 / 32 | 0] >>> i2 & 1;
+          const xv = eq | mv2;
+          const xh = ((eq | mb) & pv2) + pv2 ^ pv2 | eq | mb;
+          let ph = mv2 | ~(xh | pv2);
+          let mh = pv2 & xh;
           if (ph >>> 31 ^ pb) {
             phc[i2 / 32 | 0] ^= 1 << i2;
           }
@@ -40810,29 +41966,29 @@ var require_mod = __commonJS({
           }
           ph = ph << 1 | pb;
           mh = mh << 1 | mb;
-          pv_1 = mh | ~(xv | ph);
-          mv_1 = ph & xv;
+          pv2 = mh | ~(xv | ph);
+          mv2 = ph & xv;
         }
-        for (var k3 = start_1; k3 < vlen_1; k3++) {
+        for (let k3 = start2; k3 < vlen2; k3++) {
           peq[b2.charCodeAt(k3)] = 0;
         }
       }
-      var mv = 0;
-      var pv = -1;
-      var start = j3 * 32;
-      var vlen = Math.min(32, m - start) + start;
-      for (var k3 = start; k3 < vlen; k3++) {
+      let mv = 0;
+      let pv = -1;
+      const start = j3 * 32;
+      const vlen = Math.min(32, m - start) + start;
+      for (let k3 = start; k3 < vlen; k3++) {
         peq[b2.charCodeAt(k3)] |= 1 << k3;
       }
-      var score = m;
-      for (var i2 = 0; i2 < n7; i2++) {
-        var eq = peq[a.charCodeAt(i2)];
-        var pb = phc[i2 / 32 | 0] >>> i2 & 1;
-        var mb = mhc[i2 / 32 | 0] >>> i2 & 1;
-        var xv = eq | mv;
-        var xh = ((eq | mb) & pv) + pv ^ pv | eq | mb;
-        var ph = mv | ~(xh | pv);
-        var mh = pv & xh;
+      let score = m;
+      for (let i2 = 0; i2 < n7; i2++) {
+        const eq = peq[a.charCodeAt(i2)];
+        const pb = phc[i2 / 32 | 0] >>> i2 & 1;
+        const mb = mhc[i2 / 32 | 0] >>> i2 & 1;
+        const xv = eq | mv;
+        const xh = ((eq | mb) & pv) + pv ^ pv | eq | mb;
+        let ph = mv | ~(xh | pv);
+        let mh = pv & xh;
         score += ph >>> m - 1 & 1;
         score -= mh >>> m - 1 & 1;
         if (ph >>> 31 ^ pb) {
@@ -40846,14 +42002,14 @@ var require_mod = __commonJS({
         pv = mh | ~(xv | ph);
         mv = ph & xv;
       }
-      for (var k3 = start; k3 < vlen; k3++) {
+      for (let k3 = start; k3 < vlen; k3++) {
         peq[b2.charCodeAt(k3)] = 0;
       }
       return score;
     };
-    var distance = function(a, b2) {
+    distance = (a, b2) => {
       if (a.length < b2.length) {
-        var tmp = b2;
+        const tmp = b2;
         b2 = a;
         a = tmp;
       }
@@ -40865,12 +42021,11 @@ var require_mod = __commonJS({
       }
       return myers_x(a, b2);
     };
-    exports.distance = distance;
-    var closest = function(str, arr) {
-      var min_distance = Infinity;
-      var min_index = 0;
-      for (var i2 = 0; i2 < arr.length; i2++) {
-        var dist = distance(str, arr[i2]);
+    closest = (str, arr) => {
+      let min_distance = Infinity;
+      let min_index = 0;
+      for (let i2 = 0; i2 < arr.length; i2++) {
+        const dist = distance(str, arr[i2]);
         if (dist < min_distance) {
           min_distance = dist;
           min_index = i2;
@@ -40878,7 +42033,6 @@ var require_mod = __commonJS({
       }
       return arr[min_index];
     };
-    exports.closest = closest;
   }
 });
 
@@ -40893,7 +42047,7 @@ var require_levenshtein = __commonJS({
       } catch (err) {
         console.log("Collator could not be initialized and wouldn't be used");
       }
-      var levenshtein3 = require_mod();
+      var levenshtein3 = (init_mod(), __toCommonJS(mod_exports));
       var prevRow = [], str2Char = [];
       var Levenshtein = {
         /**
@@ -40957,7 +42111,7 @@ var require_levenshtein = __commonJS({
 });
 
 // src/core/checks/paths.ts
-import * as path3 from "node:path";
+import * as path4 from "node:path";
 function getProjectFiles(projectRoot) {
   if (cachedProjectFiles?.root === projectRoot) return cachedProjectFiles.files;
   const files = getAllProjectFiles(projectRoot);
@@ -40970,10 +42124,10 @@ function resetPathsCache() {
 async function checkPaths(file2, projectRoot) {
   const issues = [];
   const projectFiles = getProjectFiles(projectRoot);
-  const contextDir = path3.dirname(file2.filePath);
+  const contextDir = path4.dirname(file2.filePath);
   for (const ref of file2.references.paths) {
     const baseDir = ref.value.startsWith("./") || ref.value.startsWith("../") ? contextDir : projectRoot;
-    const resolvedPath = path3.resolve(baseDir, ref.value);
+    const resolvedPath = path4.resolve(baseDir, ref.value);
     const normalizedRef = ref.value.replace(/\\/g, "/");
     if (normalizedRef.includes("*")) {
       const matches = await Ze(normalizedRef, { cwd: baseDir, nodir: false });
@@ -40991,7 +42145,7 @@ async function checkPaths(file2, projectRoot) {
     }
     const isDir = normalizedRef.endsWith("/");
     if (isDir) {
-      const dirPath = path3.resolve(baseDir, normalizedRef);
+      const dirPath = path4.resolve(baseDir, normalizedRef);
       if (!isDirectory(dirPath)) {
         issues.push({
           severity: "error",
@@ -41036,12 +42190,12 @@ async function checkPaths(file2, projectRoot) {
 }
 function findClosestMatch(target, files) {
   const targetNorm = target.replace(/\\/g, "/");
-  const targetBase = path3.basename(targetNorm);
+  const targetBase = path4.basename(targetNorm);
   let bestMatch = null;
   let bestDistance = Infinity;
   for (const file2 of files) {
     const fileNorm = file2.replace(/\\/g, "/");
-    if (path3.basename(fileNorm) === targetBase && fileNorm !== targetNorm) {
+    if (path4.basename(fileNorm) === targetBase && fileNorm !== targetNorm) {
       const dist = levenshtein(targetNorm, fileNorm);
       if (dist < bestDistance) {
         bestDistance = dist;
@@ -41075,8 +42229,8 @@ var init_paths = __esm({
 });
 
 // src/core/checks/commands.ts
-import * as fs4 from "node:fs";
-import * as path4 from "node:path";
+import * as fs5 from "node:fs";
+import * as path5 from "node:path";
 async function checkCommands(file2, projectRoot) {
   const issues = [];
   const pkgJson = loadPackageJson(projectRoot);
@@ -41126,9 +42280,9 @@ async function checkCommands(file2, projectRoot) {
         ...pkgJson.optionalDependencies
       };
       if (!(pkgName in allDeps)) {
-        const binPath = path4.join(projectRoot, "node_modules", ".bin", pkgName);
+        const binPath = path5.join(projectRoot, "node_modules", ".bin", pkgName);
         try {
-          fs4.accessSync(binPath);
+          fs5.accessSync(binPath);
         } catch {
           issues.push({
             severity: "warning",
@@ -41174,9 +42328,9 @@ async function checkCommands(file2, projectRoot) {
         ...pkgJson.optionalDependencies
       };
       if (!(tool in allDeps)) {
-        const binPath = path4.join(projectRoot, "node_modules", ".bin", tool);
+        const binPath = path5.join(projectRoot, "node_modules", ".bin", tool);
         try {
-          fs4.accessSync(binPath);
+          fs5.accessSync(binPath);
         } catch {
           issues.push({
             severity: "warning",
@@ -41193,7 +42347,7 @@ async function checkCommands(file2, projectRoot) {
 }
 function loadMakefile(projectRoot) {
   try {
-    return fs4.readFileSync(path4.join(projectRoot, "Makefile"), "utf-8");
+    return fs5.readFileSync(path5.join(projectRoot, "Makefile"), "utf-8");
   } catch {
     return null;
   }
@@ -41214,13 +42368,13 @@ var init_commands = __esm({
 });
 
 // src/core/checks/staleness.ts
-import * as path5 from "node:path";
+import * as path6 from "node:path";
 async function checkStaleness(file2, projectRoot) {
   const issues = [];
   if (!await isGitRepo(projectRoot)) {
     return issues;
   }
-  const relativePath = path5.relative(projectRoot, file2.filePath).replace(/\\/g, "/");
+  const relativePath = path6.relative(projectRoot, file2.filePath).replace(/\\/g, "/");
   const lastModified = await getFileLastModified(projectRoot, relativePath);
   if (!lastModified || isNaN(lastModified.getTime())) {
     return issues;
@@ -41353,8 +42507,8 @@ var init_tokens2 = __esm({
 });
 
 // src/core/checks/tier-tokens.ts
-import * as fs5 from "node:fs";
-import * as path6 from "node:path";
+import * as fs6 from "node:fs";
+import * as path7 from "node:path";
 function hasPathsFrontmatter(content) {
   const lines = content.split("\n");
   if (lines[0]?.trim() !== "---") return false;
@@ -41383,8 +42537,8 @@ function isAlwaysLoaded(file2) {
   if (rel.includes("/rules/")) {
     return !hasPathsFrontmatter(file2.content);
   }
-  const basename3 = rel.split("/").pop() ?? "";
-  return ALWAYS_LOADED_BASENAMES.has(basename3);
+  const basename5 = rel.split("/").pop() ?? "";
+  return ALWAYS_LOADED_BASENAMES.has(basename5);
 }
 function computeSectionCosts(file2) {
   if (file2.sections.length === 0) return [];
@@ -41399,14 +42553,14 @@ function computeSectionCosts(file2) {
 function loadSettingsSources(projectRoot) {
   const sources = [];
   const candidates = [
-    path6.join(projectRoot, ".claude", "settings.json"),
-    path6.join(projectRoot, ".claude", "settings.local.json"),
-    path6.join(process.env.HOME || process.env.USERPROFILE || "", ".claude", "settings.json")
+    path7.join(projectRoot, ".claude", "settings.json"),
+    path7.join(projectRoot, ".claude", "settings.local.json"),
+    path7.join(process.env.HOME || process.env.USERPROFILE || "", ".claude", "settings.json")
   ];
   for (const p2 of candidates) {
     let content;
     try {
-      content = fs5.readFileSync(p2, "utf-8");
+      content = fs6.readFileSync(p2, "utf-8");
     } catch {
       continue;
     }
@@ -41533,7 +42687,7 @@ var init_tier_tokens = __esm({
 });
 
 // src/core/checks/redundancy.ts
-import * as path7 from "node:path";
+import * as path8 from "node:path";
 function compilePatterns(allDeps) {
   const compiled = [];
   for (const [pkg, mentions] of Object.entries(PACKAGE_TECH_MAP)) {
@@ -41598,7 +42752,7 @@ async function checkRedundancy(file2, projectRoot) {
     );
     if (dirMatch) {
       const dir = dirMatch[1].replace(/[`"]/g, "");
-      const fullPath = path7.resolve(projectRoot, dir);
+      const fullPath = path8.resolve(projectRoot, dir);
       if (isDirectory(fullPath)) {
         issues.push({
           severity: "info",
@@ -42467,8 +43621,8 @@ var init_security = __esm({
 });
 
 // src/core/checks/mcp/commands.ts
-import * as fs6 from "node:fs";
-import * as path8 from "node:path";
+import * as fs7 from "node:fs";
+import * as path9 from "node:path";
 async function checkMcpCommands(config2, projectRoot) {
   const issues = [];
   if (config2.parseErrors.length > 0) return issues;
@@ -42485,7 +43639,7 @@ async function checkMcpCommands(config2, projectRoot) {
       });
     }
     if (LOCAL_PATH_PATTERN.test(server2.command)) {
-      const resolved = path8.resolve(projectRoot, server2.command);
+      const resolved = path9.resolve(projectRoot, server2.command);
       if (!fileExistsSafe(resolved)) {
         issues.push({
           severity: "warning",
@@ -42500,7 +43654,7 @@ async function checkMcpCommands(config2, projectRoot) {
       for (const arg of server2.args) {
         if (URL_PREFIX.test(arg)) continue;
         if (LOCAL_PATH_PATTERN.test(arg) || FILE_PATH_PATTERN.test(arg)) {
-          const resolved = path8.resolve(projectRoot, arg);
+          const resolved = path9.resolve(projectRoot, arg);
           if (!fileExistsSafe(resolved)) {
             issues.push({
               severity: "warning",
@@ -42518,7 +43672,7 @@ async function checkMcpCommands(config2, projectRoot) {
 }
 function fileExistsSafe(filePath) {
   try {
-    fs6.accessSync(filePath);
+    fs7.accessSync(filePath);
     return true;
   } catch {
     return false;
@@ -42986,6 +44140,239 @@ var init_redundancy2 = __esm({
   }
 });
 
+// src/core/checks/mcph/token-security.ts
+async function checkMcphTokenSecurity(config2, _projectRoot, options = {}) {
+  const issues = [];
+  if (config2.parseErrors.length > 0) return issues;
+  const tokenPos = config2.positions.token;
+  const tokenValue = typeof config2.raw?.token === "string" ? config2.raw.token : null;
+  if (tokenPos && tokenValue !== null && !TOKEN_PATTERN.test(tokenValue)) {
+    issues.push({
+      severity: "error",
+      check: "mcph-token-security",
+      ruleId: "mcph-config/invalid-token-format",
+      line: tokenPos.line,
+      message: `"token" does not match expected format ^mcp_pat_[A-Za-z0-9_-]+$`,
+      suggestion: `Check that the token was copied in full. A valid mcp.hosting PAT looks like: mcp_pat_aBcDeFg123...
+If the token was truncated or wrapped in quotes elsewhere, re-issue it from https://mcp.hosting/settings/tokens.`
+    });
+  }
+  if (tokenPos && tokenValue !== null && config2.scope === "project" && config2.isGitTracked) {
+    issues.push({
+      severity: "error",
+      check: "mcph-token-security",
+      ruleId: "mcph-config/token-in-project-scope",
+      line: tokenPos.line,
+      message: `"token" in a git-tracked project-scope .mcph.json \u2014 PAT will leak via git history`,
+      suggestion: `Delete line ${tokenPos.line} (the "token" field) from ${config2.relativePath}.
+Then pick one:
+  \u2022 user-global:   move it to ~/.mcph.json instead
+  \u2022 machine-local: move it to .mcph.local.json (and add that file to .gitignore)
+  \u2022 env var:       export MCPH_TOKEN in your shell \u2014 the mcph CLI reads it automatically
+If this token was already committed, ROTATE it now: https://mcp.hosting/settings/tokens
+(Deleting the line does not purge the value from git history.)`
+    });
+  }
+  const alreadyFlaggedAsProjectLeak = tokenPos && tokenValue !== null && config2.scope === "project" && config2.isGitTracked;
+  if (tokenPos && tokenValue !== null && !alreadyFlaggedAsProjectLeak) {
+    const severity = options.strictEnvToken ? "error" : "warning";
+    issues.push({
+      severity,
+      check: "mcph-token-security",
+      ruleId: "mcph-config/prefer-env-token",
+      line: tokenPos.line,
+      message: `prefer MCPH_TOKEN env var over a file-stored token in ${config2.relativePath}`,
+      suggestion: `Delete line ${tokenPos.line} (the "token" field) and export instead:
+` + EXPORT_EXAMPLES + `
+Tokens in files survive backups, screen shares, cloud sync (Time Machine, Dropbox, OneDrive), and editor indexing.`
+    });
+  }
+  return issues;
+}
+var TOKEN_PATTERN, EXPORT_EXAMPLES;
+var init_token_security = __esm({
+  "src/core/checks/mcph/token-security.ts"() {
+    "use strict";
+    TOKEN_PATTERN = /^mcp_pat_[A-Za-z0-9_-]+$/;
+    EXPORT_EXAMPLES = [
+      '  bash/zsh:    export MCPH_TOKEN="mcp_pat_***"',
+      '  fish:        set -x MCPH_TOKEN "mcp_pat_***"',
+      '  PowerShell:  $env:MCPH_TOKEN = "mcp_pat_***"',
+      "  direnv:      echo 'export MCPH_TOKEN=mcp_pat_***' >> .envrc"
+    ].join("\n");
+  }
+});
+
+// src/core/checks/mcph/apibase.ts
+function isPrivateHost(hostname3) {
+  return PRIVATE_HOST_PATTERNS.some((p2) => p2.test(hostname3));
+}
+async function checkMcphApibase(config2, _projectRoot) {
+  const issues = [];
+  if (config2.parseErrors.length > 0) return issues;
+  const pos = config2.positions.apiBase;
+  const value = typeof config2.raw?.apiBase === "string" ? config2.raw.apiBase : null;
+  if (!pos || value === null) return issues;
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    issues.push({
+      severity: "error",
+      check: "mcph-apibase",
+      ruleId: "mcph-config/invalid-apibase",
+      line: pos.line,
+      message: `"apiBase" is not a valid URL: ${value}`,
+      suggestion: `Use an absolute http(s) URL, e.g. "https://mcp.hosting".`
+    });
+    return issues;
+  }
+  if (parsed.protocol === "http:" && !isPrivateHost(parsed.hostname)) {
+    issues.push({
+      severity: "warning",
+      check: "mcph-apibase",
+      ruleId: "mcph-config/insecure-apibase",
+      line: pos.line,
+      message: `"apiBase" uses plaintext HTTP to a public host (${parsed.hostname})`,
+      suggestion: `Use https:// instead. Plaintext HTTP exposes your MCPH_TOKEN on the wire.
+Private hosts (localhost, 10.*, 192.168.*, 172.16-31.*, *.local, *.internal) are allowed without TLS for dev workflows.`
+    });
+  }
+  return issues;
+}
+var PRIVATE_HOST_PATTERNS;
+var init_apibase = __esm({
+  "src/core/checks/mcph/apibase.ts"() {
+    "use strict";
+    PRIVATE_HOST_PATTERNS = [
+      /^localhost$/i,
+      /^127\./,
+      /^::1$/,
+      /^10\./,
+      /^192\.168\./,
+      /^172\.(1[6-9]|2\d|3[01])\./,
+      /\.local$/i,
+      /\.internal$/i,
+      /\.test$/i,
+      /\.example$/i
+    ];
+  }
+});
+
+// src/core/checks/mcph/schema-conformance.ts
+async function checkMcphSchemaConformance(config2, _projectRoot) {
+  const issues = [];
+  if (config2.parseErrors.length > 0) return issues;
+  for (const field of config2.unknownFields) {
+    issues.push({
+      severity: "warning",
+      check: "mcph-schema-conformance",
+      ruleId: "mcph-config/unknown-field",
+      line: field.position.line,
+      message: `unknown field "${field.name}" \u2014 not in the mcph config schema`,
+      suggestion: `Known fields: $schema, version, token, apiBase, servers, blocked. Check for typos (e.g. "tokens" vs "token", "blockList" vs "blocked").`
+    });
+  }
+  const versionPos = config2.positions.version;
+  const version2 = typeof config2.raw?.version === "number" ? config2.raw.version : void 0;
+  if (versionPos && typeof version2 === "number" && version2 < CURRENT_SCHEMA_VERSION) {
+    issues.push({
+      severity: "info",
+      check: "mcph-schema-conformance",
+      ruleId: "mcph-config/stale-version",
+      line: versionPos.line,
+      message: `"version": ${version2} is older than the current schema version (${CURRENT_SCHEMA_VERSION})`,
+      suggestion: `Update to "version": ${CURRENT_SCHEMA_VERSION}. Older versions continue to load but may miss newer fields.`
+    });
+  }
+  return issues;
+}
+var CURRENT_SCHEMA_VERSION;
+var init_schema_conformance = __esm({
+  "src/core/checks/mcph/schema-conformance.ts"() {
+    "use strict";
+    CURRENT_SCHEMA_VERSION = 1;
+  }
+});
+
+// src/core/checks/mcph/lists.ts
+async function checkMcphLists(config2, _projectRoot) {
+  const issues = [];
+  if (config2.parseErrors.length > 0) return issues;
+  const servers = config2.listEntries.servers;
+  const blocked = config2.listEntries.blocked;
+  const blockedSet = new Set(blocked.map((e) => e.value));
+  for (const entry of servers) {
+    if (blockedSet.has(entry.value)) {
+      issues.push({
+        severity: "warning",
+        check: "mcph-lists",
+        ruleId: "mcph-config/allowlist-denylist-conflict",
+        line: entry.position.line,
+        message: `server "${entry.value}" is in both "servers" (allow-list) and "blocked" (deny-list)`,
+        suggestion: `Remove "${entry.value}" from one of the two lists. "blocked" wins in practice (deny > allow), so the allow-list entry is dead weight.`
+      });
+    }
+  }
+  for (const listName of ["servers", "blocked"]) {
+    const entries = config2.listEntries[listName];
+    const seen = /* @__PURE__ */ new Map();
+    for (const entry of entries) {
+      const prevLine = seen.get(entry.value);
+      if (prevLine !== void 0) {
+        issues.push({
+          severity: "info",
+          check: "mcph-lists",
+          ruleId: "mcph-config/duplicate-entries",
+          line: entry.position.line,
+          message: `"${entry.value}" appears multiple times in "${listName}" (first at line ${prevLine})`,
+          suggestion: `Remove the duplicate entry at line ${entry.position.line}.`
+        });
+      } else {
+        seen.set(entry.value, entry.position.line);
+      }
+    }
+  }
+  return issues;
+}
+var init_lists = __esm({
+  "src/core/checks/mcph/lists.ts"() {
+    "use strict";
+  }
+});
+
+// src/core/checks/mcph/gitignore.ts
+import * as path10 from "node:path";
+async function checkMcphGitignore(config2, _projectRoot) {
+  const issues = [];
+  if (config2.scope === "project-local" && !config2.isGitignored) {
+    const basename5 = path10.basename(config2.filePath);
+    issues.push({
+      severity: "error",
+      check: "mcph-gitignore",
+      ruleId: "mcph-config/local-file-not-gitignored",
+      line: 1,
+      message: `${basename5} is not covered by .gitignore \u2014 machine-local overrides can leak via git`,
+      suggestion: `Add "${basename5}" to .gitignore in your project root.`,
+      fix: {
+        file: path10.join(path10.dirname(config2.filePath), ".gitignore"),
+        line: 0,
+        oldText: "",
+        newText: `
+# mcph CLI local overrides (machine-specific, never commit)
+${basename5}
+`
+      }
+    });
+  }
+  return issues;
+}
+var init_gitignore = __esm({
+  "src/core/checks/mcph/gitignore.ts"() {
+    "use strict";
+  }
+});
+
 // src/core/session-parser.ts
 import { readFile } from "node:fs/promises";
 function encodeProjectDir(fsPath) {
@@ -43057,7 +44444,7 @@ var init_session_parser = __esm({
 import { readdir, stat } from "node:fs/promises";
 import { createReadStream } from "node:fs";
 import { createInterface } from "node:readline";
-import { dirname as dirname2, join as join5, resolve as resolve4 } from "node:path";
+import { dirname as dirname3, join as join7, resolve as resolve4 } from "node:path";
 import { existsSync } from "node:fs";
 function detectProviders() {
   if (!home) return [];
@@ -43082,7 +44469,7 @@ async function parseJsonlFiltered(filePath, filter) {
   return results;
 }
 async function readClaudeHistory() {
-  const historyPath = join5(home, ".claude", "history.jsonl");
+  const historyPath = join7(home, ".claude", "history.jsonl");
   return parseJsonlFiltered(historyPath, (entry) => {
     if (!entry.display || !entry.project) return null;
     return {
@@ -43095,7 +44482,7 @@ async function readClaudeHistory() {
   });
 }
 async function readCodexHistory() {
-  const historyPath = join5(home, ".codex", "history.jsonl");
+  const historyPath = join7(home, ".codex", "history.jsonl");
   return parseJsonlFiltered(historyPath, (entry) => {
     if (!entry.display && !entry.command) return null;
     return {
@@ -43108,18 +44495,18 @@ async function readCodexHistory() {
   });
 }
 async function readClaudeMemories() {
-  const projectsDir = join5(home, ".claude", "projects");
+  const projectsDir = join7(home, ".claude", "projects");
   if (!existsSync(projectsDir)) return [];
   const memories = [];
   const projectDirs = await readdir(projectsDir).catch(() => []);
   for (const projDir of projectDirs) {
-    const memoryDir = join5(projectsDir, projDir, "memory");
+    const memoryDir = join7(projectsDir, projDir, "memory");
     if (!existsSync(memoryDir)) continue;
     const files = await readdir(memoryDir).catch(() => []);
     for (const file2 of files) {
       if (!file2.endsWith(".md") || file2 === "MEMORY.md") continue;
       try {
-        const entry = await parseMemoryFile(join5(memoryDir, file2), projDir);
+        const entry = await parseMemoryFile(join7(memoryDir, file2), projDir);
         memories.push(entry);
       } catch {
       }
@@ -43129,14 +44516,14 @@ async function readClaudeMemories() {
 }
 function detectAiderInSiblings(siblings) {
   for (const sib of siblings) {
-    if (existsSync(join5(sib.path, ".aider.chat.history.md"))) {
+    if (existsSync(join7(sib.path, ".aider.chat.history.md"))) {
       return "aider";
     }
   }
   return null;
 }
 async function detectSiblings(projectRoot) {
-  const parentDir = dirname2(resolve4(projectRoot));
+  const parentDir = dirname3(resolve4(projectRoot));
   let entries;
   try {
     entries = await readdir(parentDir);
@@ -43146,7 +44533,7 @@ async function detectSiblings(projectRoot) {
   const candidates = [];
   for (const entry of entries) {
     if (entry.startsWith(".") || entry === "node_modules") continue;
-    const fullPath = join5(parentDir, entry);
+    const fullPath = join7(parentDir, entry);
     const entryPath = resolve4(fullPath);
     if (entryPath === resolve4(projectRoot)) continue;
     try {
@@ -43155,7 +44542,7 @@ async function detectSiblings(projectRoot) {
     } catch {
       continue;
     }
-    const isProject = existsSync(join5(fullPath, ".git")) || existsSync(join5(fullPath, "package.json")) || existsSync(join5(fullPath, "Cargo.toml")) || existsSync(join5(fullPath, "go.mod")) || existsSync(join5(fullPath, "pyproject.toml"));
+    const isProject = existsSync(join7(fullPath, ".git")) || existsSync(join7(fullPath, "package.json")) || existsSync(join7(fullPath, "Cargo.toml")) || existsSync(join7(fullPath, "go.mod")) || existsSync(join7(fullPath, "pyproject.toml"));
     if (!isProject) continue;
     candidates.push({ fullPath, entryPath, name: entry });
   }
@@ -43169,7 +44556,7 @@ async function detectSiblings(projectRoot) {
       if (orgMatch) currentOrg = orgMatch[1];
     } catch {
     }
-    const gitCandidates = candidates.filter((c3) => existsSync(join5(c3.fullPath, ".git")));
+    const gitCandidates = candidates.filter((c3) => existsSync(join7(c3.fullPath, ".git")));
     const results = await Promise.all(
       gitCandidates.map(async (c3) => {
         const sibling = { path: c3.entryPath.replace(/\\/g, "/"), name: c3.name };
@@ -43241,28 +44628,28 @@ var init_session_scanner = __esm({
     init_session_parser();
     home = process.env.HOME || process.env.USERPROFILE || "";
     AGENT_DIRS = [
-      { provider: "claude-code", dir: join5(home, ".claude"), historyFile: "history.jsonl" },
-      { provider: "codex-cli", dir: join5(home, ".codex"), historyFile: "history.jsonl" },
-      { provider: "vibe-cli", dir: join5(home, ".vibe") },
+      { provider: "claude-code", dir: join7(home, ".claude"), historyFile: "history.jsonl" },
+      { provider: "codex-cli", dir: join7(home, ".codex"), historyFile: "history.jsonl" },
+      { provider: "vibe-cli", dir: join7(home, ".vibe") },
       {
         provider: "amazon-q",
-        dir: join5(home, ".aws", "amazonq")
+        dir: join7(home, ".aws", "amazonq")
       },
       {
         provider: "goose",
-        dir: process.platform === "win32" ? join5(process.env.APPDATA || "", "Block", "goose") : join5(home, ".config", "goose")
+        dir: process.platform === "win32" ? join7(process.env.APPDATA || "", "Block", "goose") : join7(home, ".config", "goose")
       },
-      { provider: "continue", dir: join5(home, ".continue") },
+      { provider: "continue", dir: join7(home, ".continue") },
       {
         provider: "windsurf",
-        dir: join5(home, ".windsurf")
+        dir: join7(home, ".windsurf")
       }
     ];
   }
 });
 
 // src/core/checks/session/missing-secret.ts
-import { resolve as resolve5, basename as basename2 } from "node:path";
+import { resolve as resolve5, basename as basename4 } from "node:path";
 function normalizePath(p2) {
   return resolve5(p2).replace(/\\/g, "/").toLowerCase();
 }
@@ -43286,7 +44673,7 @@ async function checkMissingSecret(ctx) {
     if (s.repo) byName.get(s.name).add(s.repo);
   }
   const currentNorm = normalizePath(ctx.currentProject);
-  const currentBase = basename2(currentNorm);
+  const currentBase = basename4(currentNorm);
   for (const [secretName, projects] of byName) {
     const normalizedProjects = [...projects].map(normalizePath);
     const currentHas = normalizedProjects.some((p2) => {
@@ -43297,7 +44684,7 @@ async function checkMissingSecret(ctx) {
     if (currentHas) continue;
     const siblingMatches = ctx.siblings.filter((sib) => {
       const sibNorm = normalizePath(sib.path);
-      const sibBase = basename2(sibNorm);
+      const sibBase = basename4(sibNorm);
       return normalizedProjects.some((p2) => {
         if (p2 === sibNorm) return true;
         const lastSegment = p2.split("/").pop() || "";
@@ -43330,7 +44717,7 @@ var init_missing_secret = __esm({
 
 // src/core/checks/session/diverged-file.ts
 import { readFile as readFile2 } from "node:fs/promises";
-import { join as join6 } from "node:path";
+import { join as join8 } from "node:path";
 import { existsSync as existsSync2 } from "node:fs";
 function calculateOverlap(a, b2) {
   const linesA = a.split("\n").map((l) => l.trim()).filter((l) => l.length > 3);
@@ -43348,7 +44735,7 @@ function calculateOverlap(a, b2) {
 async function checkDivergedFile(ctx) {
   const issues = [];
   for (const fileName of CANONICAL_FILES) {
-    const currentPath = join6(ctx.currentProject, fileName);
+    const currentPath = join8(ctx.currentProject, fileName);
     if (!existsSync2(currentPath)) continue;
     let currentContent;
     try {
@@ -43358,7 +44745,7 @@ async function checkDivergedFile(ctx) {
     }
     const diverged = [];
     for (const sib of ctx.siblings) {
-      const sibPath = join6(sib.path, fileName);
+      const sibPath = join8(sib.path, fileName);
       if (!existsSync2(sibPath)) continue;
       try {
         const sibContent = await readFile2(sibPath, "utf-8");
@@ -43404,12 +44791,12 @@ var init_diverged_file = __esm({
 
 // src/core/checks/session/missing-workflow.ts
 import { readdir as readdir2 } from "node:fs/promises";
-import { join as join7 } from "node:path";
+import { join as join9 } from "node:path";
 import { existsSync as existsSync3 } from "node:fs";
 async function checkMissingWorkflow(ctx) {
   const issues = [];
-  const currentWorkflowDir = join7(ctx.currentProject, ".github", "workflows");
-  if (!existsSync3(join7(ctx.currentProject, ".github"))) return issues;
+  const currentWorkflowDir = join9(ctx.currentProject, ".github", "workflows");
+  if (!existsSync3(join9(ctx.currentProject, ".github"))) return issues;
   const currentWorkflows = /* @__PURE__ */ new Set();
   if (existsSync3(currentWorkflowDir)) {
     try {
@@ -43422,7 +44809,7 @@ async function checkMissingWorkflow(ctx) {
   }
   const workflowMap = /* @__PURE__ */ new Map();
   for (const sib of ctx.siblings) {
-    const sibWorkflowDir = join7(sib.path, ".github", "workflows");
+    const sibWorkflowDir = join9(sib.path, ".github", "workflows");
     if (!existsSync3(sibWorkflowDir)) continue;
     try {
       const files = await readdir2(sibWorkflowDir);
@@ -43647,12 +45034,12 @@ var init_loop_detection = __esm({
 
 // src/core/checks/session/memory-index-overflow.ts
 import { readFile as readFile3, stat as stat2 } from "node:fs/promises";
-import { join as join8 } from "node:path";
+import { join as join10 } from "node:path";
 async function checkMemoryIndexOverflow(ctx) {
   const home2 = process.env.HOME || process.env.USERPROFILE || "";
   if (!home2) return [];
   const encoded = encodeProjectDir(ctx.currentProject);
-  const memoryFile = join8(home2, ".claude", "projects", encoded, "memory", "MEMORY.md");
+  const memoryFile = join10(home2, ".claude", "projects", encoded, "memory", "MEMORY.md");
   let stats;
   try {
     stats = await stat2(memoryFile);
@@ -43703,10 +45090,10 @@ var init_memory_index_overflow = __esm({
 
 // src/core/checks/ci-coverage.ts
 import { readdir as readdir3, readFile as readFile4 } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { join as join11 } from "node:path";
 import { existsSync as existsSync5 } from "node:fs";
 async function findReleaseWorkflows(projectRoot) {
-  const workflowDir = join9(projectRoot, ".github", "workflows");
+  const workflowDir = join11(projectRoot, ".github", "workflows");
   if (!existsSync5(workflowDir)) return [];
   let files;
   try {
@@ -43722,7 +45109,7 @@ async function findReleaseWorkflows(projectRoot) {
       continue;
     }
     try {
-      const content = await readFile4(join9(workflowDir, f), "utf-8");
+      const content = await readFile4(join11(workflowDir, f), "utf-8");
       const nameMatch = content.match(/^name:\s*(.+)$/m);
       if (nameMatch && RELEASE_FILENAME_PATTERNS.some((p2) => p2.test(nameMatch[1]))) {
         releaseWorkflows.push(f);
@@ -43777,10 +45164,10 @@ var init_ci_coverage = __esm({
 
 // src/core/checks/ci-secrets.ts
 import { readdir as readdir4, readFile as readFile5 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join12 } from "node:path";
 import { existsSync as existsSync6 } from "node:fs";
 async function findSecretUsages(projectRoot) {
-  const workflowDir = join10(projectRoot, ".github", "workflows");
+  const workflowDir = join12(projectRoot, ".github", "workflows");
   if (!existsSync6(workflowDir)) return [];
   let files;
   try {
@@ -43793,7 +45180,7 @@ async function findSecretUsages(projectRoot) {
     if (!(f.endsWith(".yml") || f.endsWith(".yaml"))) continue;
     let content;
     try {
-      content = await readFile5(join10(workflowDir, f), "utf-8");
+      content = await readFile5(join12(workflowDir, f), "utf-8");
     } catch {
       continue;
     }
@@ -43850,14 +45237,14 @@ var init_ci_secrets = __esm({
 });
 
 // src/version.ts
-import { readFileSync as readFileSync4 } from "node:fs";
-import { resolve as resolve8, dirname as dirname3 } from "node:path";
+import { readFileSync as readFileSync5 } from "node:fs";
+import { resolve as resolve8, dirname as dirname4 } from "node:path";
 import { fileURLToPath } from "node:url";
 function loadVersion() {
-  if (true) return "0.9.15";
-  const __dir = dirname3(fileURLToPath(import.meta.url));
+  if (true) return "0.9.17";
+  const __dir = dirname4(fileURLToPath(import.meta.url));
   const pkgPath = resolve8(__dir, "../package.json");
-  const pkg = JSON.parse(readFileSync4(pkgPath, "utf-8"));
+  const pkg = JSON.parse(readFileSync5(pkgPath, "utf-8"));
   return pkg.version;
 }
 var VERSION;
@@ -43872,13 +45259,17 @@ var init_version2 = __esm({
 function hasMcpChecks(checks) {
   return checks.some((c3) => c3.startsWith("mcp-"));
 }
+function hasMcphChecks(checks) {
+  return checks.some((c3) => c3.startsWith("mcph-"));
+}
 function hasSessionChecks(checks) {
   return checks.some((c3) => c3.startsWith("session-"));
 }
 async function runAudit(projectRoot, activeChecks, options = {}) {
   const fileResults = [];
-  const shouldRunContextChecks = !options.mcpOnly && !options.sessionOnly;
+  const shouldRunContextChecks = !options.mcpOnly && !options.mcphOnly && !options.sessionOnly;
   const shouldRunMcpChecks = options.mcp || options.mcpGlobal || options.mcpOnly || hasMcpChecks(activeChecks);
+  const shouldRunMcphChecks = options.mcph || options.mcphGlobal || options.mcphOnly || hasMcphChecks(activeChecks);
   const shouldRunSessionChecks = options.session || options.sessionOnly || hasSessionChecks(activeChecks);
   if (shouldRunContextChecks) {
     const discovered = await scanForContextFiles(projectRoot, {
@@ -43997,6 +45388,68 @@ async function runAudit(projectRoot, activeChecks, options = {}) {
       });
     }
   }
+  if (shouldRunMcphChecks) {
+    const projectMcphFiles = await scanForMcphConfigs(projectRoot);
+    const mcphConfigs = await Promise.all(
+      projectMcphFiles.map(
+        (f) => parseMchpConfig(
+          f,
+          projectRoot,
+          f.relativePath.endsWith(".mcph.local.json") ? "project-local" : "project"
+        )
+      )
+    );
+    if (options.mcphGlobal) {
+      const globalMcphFiles = await scanGlobalMcphConfigs();
+      const globalMcphConfigs = await Promise.all(
+        globalMcphFiles.map((f) => parseMchpConfig(f, projectRoot, "global"))
+      );
+      mcphConfigs.push(...globalMcphConfigs);
+    }
+    const activeMcphChecks = activeChecks.filter((c3) => c3.startsWith("mcph-"));
+    const mcphChecksToRun = activeMcphChecks.length > 0 ? activeMcphChecks : options.mcph || options.mcphGlobal || options.mcphOnly ? ALL_MCPH_CHECKS : [];
+    for (const config2 of mcphConfigs) {
+      const checkPromises = [];
+      if (mcphChecksToRun.includes("mcph-token-security")) {
+        checkPromises.push(
+          checkMcphTokenSecurity(config2, projectRoot, {
+            strictEnvToken: options.mcphStrictEnvToken
+          })
+        );
+      }
+      if (mcphChecksToRun.includes("mcph-apibase")) {
+        checkPromises.push(checkMcphApibase(config2, projectRoot));
+      }
+      if (mcphChecksToRun.includes("mcph-schema-conformance")) {
+        checkPromises.push(checkMcphSchemaConformance(config2, projectRoot));
+      }
+      if (mcphChecksToRun.includes("mcph-lists")) {
+        checkPromises.push(checkMcphLists(config2, projectRoot));
+      }
+      if (mcphChecksToRun.includes("mcph-gitignore")) {
+        checkPromises.push(checkMcphGitignore(config2, projectRoot));
+      }
+      const results = await Promise.all(checkPromises);
+      const issues = results.flat();
+      for (const err of config2.parseErrors) {
+        issues.push({
+          severity: "error",
+          check: "mcph-schema-conformance",
+          ruleId: "mcph-config/parse-error",
+          line: 1,
+          message: err
+        });
+      }
+      const lines = config2.content.split("\n").length;
+      fileResults.push({
+        path: config2.relativePath,
+        isSymlink: false,
+        tokens: countTokens(config2.content),
+        lines,
+        issues
+      });
+    }
+  }
   if (shouldRunSessionChecks) {
     const activeSessionChecks = activeChecks.filter(
       (c3) => c3.startsWith("session-")
@@ -44064,13 +45517,14 @@ async function runAudit(projectRoot, activeChecks, options = {}) {
     }
   };
 }
-var ALL_CHECKS, ALL_MCP_CHECKS, ALL_SESSION_CHECKS;
+var ALL_CHECKS, ALL_MCP_CHECKS, ALL_MCPH_CHECKS, ALL_SESSION_CHECKS;
 var init_audit = __esm({
   "src/core/audit.ts"() {
     "use strict";
     init_scanner();
     init_parser();
     init_mcp_parser();
+    init_mcph_parser();
     init_tokens();
     init_paths();
     init_commands();
@@ -44088,6 +45542,11 @@ var init_audit = __esm({
     init_urls();
     init_consistency();
     init_redundancy2();
+    init_token_security();
+    init_apibase();
+    init_schema_conformance();
+    init_lists();
+    init_gitignore();
     init_session_scanner();
     init_missing_secret();
     init_diverged_file();
@@ -44121,6 +45580,13 @@ var init_audit = __esm({
       "mcp-consistency",
       "mcp-redundancy"
     ];
+    ALL_MCPH_CHECKS = [
+      "mcph-token-security",
+      "mcph-apibase",
+      "mcph-schema-conformance",
+      "mcph-lists",
+      "mcph-gitignore"
+    ];
     ALL_SESSION_CHECKS = [
       "session-missing-secret",
       "session-diverged-file",
@@ -44672,7 +46138,7 @@ var init_source = __esm({
 });
 
 // src/core/fixer.ts
-import * as fs7 from "node:fs";
+import * as fs8 from "node:fs";
 function applyFixes(result, options = {}) {
   const log = options.quiet ? () => {
   } : console.log.bind(console);
@@ -44714,7 +46180,7 @@ function applyFixes(result, options = {}) {
   let totalFixes = 0;
   const filesModified = [];
   for (const [filePath, fixes] of fixesByFile) {
-    const content = fs7.readFileSync(filePath, "utf-8");
+    const content = fs8.readFileSync(filePath, "utf-8");
     const lines = content.split("\n");
     let modified = false;
     const sortedFixes = [...fixes].sort((a, b2) => b2.line - a.line);
@@ -44754,7 +46220,7 @@ function applyFixes(result, options = {}) {
         }
       }
       if (!dryRun) {
-        fs7.writeFileSync(filePath, newContent, "utf-8");
+        fs8.writeFileSync(filePath, newContent, "utf-8");
       }
       filesModified.push(filePath);
     }
@@ -44770,8 +46236,24 @@ var init_fixer = __esm({
 
 // src/mcp/server.ts
 var server_exports = {};
-import * as path9 from "node:path";
-var contextCheckEnum, mcpCheckEnum, sessionCheckEnum, server, transport;
+import * as path11 from "node:path";
+function validateProjectPath(rawPath) {
+  if (!rawPath) return process.cwd();
+  if (PATH_DISALLOWED.test(rawPath)) {
+    throw new Error("projectPath contains disallowed characters");
+  }
+  const resolved = path11.resolve(rawPath);
+  if (!isDirectory(resolved)) {
+    throw new Error("projectPath is not an existing directory");
+  }
+  return resolved;
+}
+function validateFilePathInput(rawPath) {
+  if (PATH_DISALLOWED.test(rawPath)) {
+    throw new Error("path contains disallowed characters");
+  }
+}
+var contextCheckEnum, mcpCheckEnum, sessionCheckEnum, PATH_DISALLOWED, server, transport;
 var init_server3 = __esm({
   async "src/mcp/server.ts"() {
     "use strict";
@@ -44791,13 +46273,14 @@ var init_server3 = __esm({
     contextCheckEnum = external_exports3.enum(ALL_CHECKS);
     mcpCheckEnum = external_exports3.enum(ALL_MCP_CHECKS);
     sessionCheckEnum = external_exports3.enum(ALL_SESSION_CHECKS);
+    PATH_DISALLOWED = /[\n\r\t;`|]|\$\(|\$\{/;
     server = new McpServer({
       name: "ctxlint",
       version: VERSION
     });
     server.tool(
       "ctxlint_audit",
-      "Audit AI agent context files (CLAUDE.md, AGENTS.md, etc.) in the project. Checks for stale references, invalid commands, redundant content, contradictions, frontmatter issues, and token waste. Use ctxlint_mcp_audit for MCP configs or ctxlint_session_audit for session checks.",
+      "Audit AI agent context files (CLAUDE.md, AGENTS.md, etc.) in the project. Checks for stale references, invalid commands, redundant content, contradictions, frontmatter issues, and token waste. Scoped to context-file checks only; MCP-config and session-level checks are exposed as separate tools.",
       {
         projectPath: external_exports3.string().optional().describe("Path to the project root. Defaults to current working directory."),
         checks: external_exports3.array(contextCheckEnum).optional().describe("Which context-file checks to run. Defaults to all.")
@@ -44809,9 +46292,9 @@ var init_server3 = __esm({
         openWorldHint: false
       },
       async ({ projectPath, checks }) => {
-        const root = path9.resolve(projectPath || process.cwd());
-        const activeChecks = checks?.length ? checks : ALL_CHECKS;
         try {
+          const root = validateProjectPath(projectPath);
+          const activeChecks = checks?.length ? checks : ALL_CHECKS;
           const result = await runAudit(root, activeChecks);
           return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
         } catch (err) {
@@ -44843,8 +46326,9 @@ var init_server3 = __esm({
       },
       async ({ path: filePath, projectPath }) => {
         try {
-          const root = path9.resolve(projectPath || process.cwd());
-          const resolved = path9.resolve(root, filePath);
+          validateFilePathInput(filePath);
+          const root = validateProjectPath(projectPath);
+          const resolved = path11.resolve(root, filePath);
           const result = {
             path: filePath,
             exists: fileExists(resolved) || isDirectory(resolved)
@@ -44885,8 +46369,8 @@ var init_server3 = __esm({
         openWorldHint: false
       },
       async ({ projectPath }) => {
-        const root = path9.resolve(projectPath || process.cwd());
         try {
+          const root = validateProjectPath(projectPath);
           const discovered = await scanForContextFiles(root);
           const parsed = discovered.map((f) => parseContextFile(f));
           const files = parsed.map((f) => ({
@@ -44936,9 +46420,9 @@ var init_server3 = __esm({
         openWorldHint: false
       },
       async ({ projectPath, checks }) => {
-        const root = path9.resolve(projectPath || process.cwd());
-        const activeChecks = checks?.length ? checks : ALL_CHECKS;
         try {
+          const root = validateProjectPath(projectPath);
+          const activeChecks = checks?.length ? checks : ALL_CHECKS;
           const result = await runAudit(root, activeChecks);
           const fixSummary = applyFixes(result, { quiet: true });
           return {
@@ -44986,9 +46470,9 @@ var init_server3 = __esm({
         openWorldHint: false
       },
       async ({ projectPath, checks, includeGlobal }) => {
-        const root = path9.resolve(projectPath || process.cwd());
-        const activeChecks = checks?.length ? checks : ALL_MCP_CHECKS;
         try {
+          const root = validateProjectPath(projectPath);
+          const activeChecks = checks?.length ? checks : ALL_MCP_CHECKS;
           const result = await runAudit(root, activeChecks, {
             mcp: true,
             mcpOnly: true,
@@ -45023,9 +46507,9 @@ var init_server3 = __esm({
         openWorldHint: true
       },
       async ({ projectPath, checks }) => {
-        const root = path9.resolve(projectPath || process.cwd());
-        const activeChecks = checks?.length ? checks : ALL_SESSION_CHECKS;
         try {
+          const root = validateProjectPath(projectPath);
+          const activeChecks = checks?.length ? checks : ALL_SESSION_CHECKS;
           const result = await runAudit(root, activeChecks, {
             session: true,
             sessionOnly: true
@@ -46179,14 +47663,14 @@ var require_suggestSimilar = __commonJS({
       const minSimilarity = 0.4;
       candidates.forEach((candidate) => {
         if (candidate.length <= 1) return;
-        const distance = editDistance(word, candidate);
+        const distance2 = editDistance(word, candidate);
         const length = Math.max(word.length, candidate.length);
-        const similarity = (length - distance) / length;
+        const similarity = (length - distance2) / length;
         if (similarity > minSimilarity) {
-          if (distance < bestDistance) {
-            bestDistance = distance;
+          if (distance2 < bestDistance) {
+            bestDistance = distance2;
             similar = [candidate];
-          } else if (distance === bestDistance) {
+          } else if (distance2 === bestDistance) {
             similar.push(candidate);
           }
         }
@@ -46214,8 +47698,8 @@ var require_command = __commonJS({
   "node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/command.js"(exports) {
     var EventEmitter2 = __require("node:events").EventEmitter;
     var childProcess = __require("node:child_process");
-    var path12 = __require("node:path");
-    var fs10 = __require("node:fs");
+    var path14 = __require("node:path");
+    var fs11 = __require("node:fs");
     var process11 = __require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -47209,7 +48693,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} subcommandName
        */
       _checkForMissingExecutable(executableFile, executableDir, subcommandName) {
-        if (fs10.existsSync(executableFile)) return;
+        if (fs11.existsSync(executableFile)) return;
         const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
         const executableMissing = `'${executableFile}' does not exist
  - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
@@ -47227,11 +48711,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path12.resolve(baseDir, baseName);
-          if (fs10.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path12.extname(baseName))) return void 0;
+          const localBin = path14.resolve(baseDir, baseName);
+          if (fs11.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path14.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs10.existsSync(`${localBin}${ext}`)
+            (ext) => fs11.existsSync(`${localBin}${ext}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -47243,21 +48727,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs10.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs11.realpathSync(this._scriptPath);
           } catch {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path12.resolve(
-            path12.dirname(resolvedScriptPath),
+          executableDir = path14.resolve(
+            path14.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path12.basename(
+            const legacyName = path14.basename(
               this._scriptPath,
-              path12.extname(this._scriptPath)
+              path14.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -47268,7 +48752,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path12.extname(executableFile));
+        launchWithNode = sourceExt.includes(path14.extname(executableFile));
         let proc;
         if (process11.platform !== "win32") {
           if (launchWithNode) {
@@ -48183,7 +49667,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path12.basename(filename, path12.extname(filename));
+        this._name = path14.basename(filename, path14.extname(filename));
         return this;
       }
       /**
@@ -48197,9 +49681,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path13) {
-        if (path13 === void 0) return this._executableDir;
-        this._executableDir = path13;
+      executableDir(path15) {
+        if (path15 === void 0) return this._executableDir;
+        this._executableDir = path15;
         return this;
       }
       /**
@@ -50628,11 +52112,11 @@ var init_cli_spinners = __esm({
 
 // node_modules/.pnpm/yoctocolors@2.1.2/node_modules/yoctocolors/base.js
 import tty2 from "node:tty";
-var hasColors, format, reset, bold, dim, italic, underline, overline, inverse, hidden, strikethrough, black, red, green, yellow, blue, magenta, cyan, white, gray, bgBlack, bgRed, bgGreen, bgYellow, bgBlue, bgMagenta, bgCyan, bgWhite, bgGray, redBright, greenBright, yellowBright, blueBright, magentaBright, cyanBright, whiteBright, bgRedBright, bgGreenBright, bgYellowBright, bgBlueBright, bgMagentaBright, bgCyanBright, bgWhiteBright;
+var hasColors, format2, reset, bold, dim, italic, underline, overline, inverse, hidden, strikethrough, black, red, green, yellow, blue, magenta, cyan, white, gray, bgBlack, bgRed, bgGreen, bgYellow, bgBlue, bgMagenta, bgCyan, bgWhite, bgGray, redBright, greenBright, yellowBright, blueBright, magentaBright, cyanBright, whiteBright, bgRedBright, bgGreenBright, bgYellowBright, bgBlueBright, bgMagentaBright, bgCyanBright, bgWhiteBright;
 var init_base = __esm({
   "node_modules/.pnpm/yoctocolors@2.1.2/node_modules/yoctocolors/base.js"() {
     hasColors = tty2?.WriteStream?.prototype?.hasColors?.() ?? false;
-    format = (open, close) => {
+    format2 = (open, close) => {
       if (!hasColors) {
         return (input) => input;
       }
@@ -50657,47 +52141,47 @@ var init_base = __esm({
         return result;
       };
     };
-    reset = format(0, 0);
-    bold = format(1, 22);
-    dim = format(2, 22);
-    italic = format(3, 23);
-    underline = format(4, 24);
-    overline = format(53, 55);
-    inverse = format(7, 27);
-    hidden = format(8, 28);
-    strikethrough = format(9, 29);
-    black = format(30, 39);
-    red = format(31, 39);
-    green = format(32, 39);
-    yellow = format(33, 39);
-    blue = format(34, 39);
-    magenta = format(35, 39);
-    cyan = format(36, 39);
-    white = format(37, 39);
-    gray = format(90, 39);
-    bgBlack = format(40, 49);
-    bgRed = format(41, 49);
-    bgGreen = format(42, 49);
-    bgYellow = format(43, 49);
-    bgBlue = format(44, 49);
-    bgMagenta = format(45, 49);
-    bgCyan = format(46, 49);
-    bgWhite = format(47, 49);
-    bgGray = format(100, 49);
-    redBright = format(91, 39);
-    greenBright = format(92, 39);
-    yellowBright = format(93, 39);
-    blueBright = format(94, 39);
-    magentaBright = format(95, 39);
-    cyanBright = format(96, 39);
-    whiteBright = format(97, 39);
-    bgRedBright = format(101, 49);
-    bgGreenBright = format(102, 49);
-    bgYellowBright = format(103, 49);
-    bgBlueBright = format(104, 49);
-    bgMagentaBright = format(105, 49);
-    bgCyanBright = format(106, 49);
-    bgWhiteBright = format(107, 49);
+    reset = format2(0, 0);
+    bold = format2(1, 22);
+    dim = format2(2, 22);
+    italic = format2(3, 23);
+    underline = format2(4, 24);
+    overline = format2(53, 55);
+    inverse = format2(7, 27);
+    hidden = format2(8, 28);
+    strikethrough = format2(9, 29);
+    black = format2(30, 39);
+    red = format2(31, 39);
+    green = format2(32, 39);
+    yellow = format2(33, 39);
+    blue = format2(34, 39);
+    magenta = format2(35, 39);
+    cyan = format2(36, 39);
+    white = format2(37, 39);
+    gray = format2(90, 39);
+    bgBlack = format2(40, 49);
+    bgRed = format2(41, 49);
+    bgGreen = format2(42, 49);
+    bgYellow = format2(43, 49);
+    bgBlue = format2(44, 49);
+    bgMagenta = format2(45, 49);
+    bgCyan = format2(46, 49);
+    bgWhite = format2(47, 49);
+    bgGray = format2(100, 49);
+    redBright = format2(91, 39);
+    greenBright = format2(92, 39);
+    yellowBright = format2(93, 39);
+    blueBright = format2(94, 39);
+    magentaBright = format2(95, 39);
+    cyanBright = format2(96, 39);
+    whiteBright = format2(97, 39);
+    bgRedBright = format2(101, 49);
+    bgGreenBright = format2(102, 49);
+    bgYellowBright = format2(103, 49);
+    bgBlueBright = format2(104, 49);
+    bgMagentaBright = format2(105, 49);
+    bgCyanBright = format2(106, 49);
+    bgWhiteBright = format2(107, 49);
   }
 });
 
@@ -51859,8 +53343,8 @@ var init_reporter = __esm({
 });
 
 // src/core/config.ts
-import * as fs8 from "node:fs";
-import * as path10 from "node:path";
+import * as fs9 from "node:fs";
+import * as path12 from "node:path";
 function formatJsonError(content, err) {
   const msg = err instanceof Error ? err.message : String(err);
   const posMatch = msg.match(/position (\d+)/);
@@ -51933,10 +53417,10 @@ function warnUnknownKeys(config2, source) {
 }
 function loadConfig(projectRoot) {
   for (const filename of CONFIG_FILENAMES) {
-    const filePath = path10.join(projectRoot, filename);
+    const filePath = path12.join(projectRoot, filename);
     let content;
     try {
-      content = fs8.readFileSync(filePath, "utf-8");
+      content = fs9.readFileSync(filePath, "utf-8");
     } catch {
       continue;
     }
@@ -51982,8 +53466,8 @@ var cli_exports = {};
 __export(cli_exports, {
   runCli: () => runCli
 });
-import * as fs9 from "node:fs";
-import * as path11 from "node:path";
+import * as fs10 from "node:fs";
+import * as path13 from "node:path";
 function validateCheckNames(names, source) {
   const invalid = names.filter((n7) => n7 && !VALID_CHECKS.has(n7));
   if (invalid.length > 0) {
@@ -52001,13 +53485,21 @@ async function runCli() {
     "Lint your AI agent context files and MCP server configs against your actual codebase"
   ).version(VERSION).argument("[path]", "Project directory to scan", ".").option("--strict", "Exit code 1 on any warning or error (for CI)", false).option("--checks <checks>", "Comma-separated list of checks to run", "").addOption(
     new Option("--format <format>", "Output format: text, json, or sarif").choices(["text", "json", "sarif"]).default("text")
-  ).option("--tokens", "Show token breakdown per file", false).option("--verbose", "Show passing checks too", false).option("--fix", "Auto-fix broken paths using git history and fuzzy matching", false).option("--fix-dry-run", "Preview --fix changes without writing", false).option("--yes", "Skip interactive confirmation prompts (required for --fix in TTY)", false).option("--follow-symlinks", "Allow --fix to write through symlinks (default: skip)", false).option("--ignore <checks>", "Comma-separated list of checks to ignore", "").option("--quiet", "Suppress all output except errors (exit code only)", false).option("--config <path>", "Path to config file (default: .ctxlintrc in project root)").option("--depth <n>", "Max subdirectory depth to scan (default: 2)", "2").option("--mcp", "Enable MCP config linting alongside context file checks", false).option("--mcp-only", "Run only MCP config checks, skip context file checks", false).option("--mcp-global", "Also scan user/global MCP config files (implies --mcp)", false).option("--mcp-server", "Start the MCP server (alias: `ctxlint serve`)").option("--session", "Run session audit checks (cross-project consistency)", false).option("--session-only", "Run only session checks, skip context and MCP checks", false).option("--watch", "Re-lint on context file changes", false).action(async (projectPath, opts) => {
-    const resolvedPath = path11.resolve(projectPath);
-    const configPath = opts.config ? path11.resolve(opts.config) : void 0;
+  ).option("--tokens", "Show token breakdown per file", false).option("--verbose", "Show passing checks too", false).option("--fix", "Auto-fix broken paths using git history and fuzzy matching", false).option("--fix-dry-run", "Preview --fix changes without writing", false).option("--yes", "Skip interactive confirmation prompts (required for --fix in TTY)", false).option("--follow-symlinks", "Allow --fix to write through symlinks (default: skip)", false).option("--ignore <checks>", "Comma-separated list of checks to ignore", "").option("--quiet", "Suppress all output except errors (exit code only)", false).option("--config <path>", "Path to config file (default: .ctxlintrc in project root)").option("--depth <n>", "Max subdirectory depth to scan (default: 2)", "2").option("--mcp", "Enable MCP config linting alongside context file checks", false).option("--mcp-only", "Run only MCP config checks, skip context file checks", false).option("--mcp-global", "Also scan user/global MCP config files (implies --mcp)", false).option("--mcp-server", "Start the MCP server (alias: `ctxlint serve`)").option("--mcph", "Enable .mcph.json (mcp.hosting CLI config) linting", false).option("--mcph-only", "Run only mcph config checks", false).option("--mcph-global", "Also scan ~/.mcph.json (implies --mcph)", false).option(
+    "--mcph-strict-env-token",
+    "Upgrade mcph-config/prefer-env-token from warning to error (strict env-var-only posture)",
+    false
+  ).option("--session", "Run session audit checks (cross-project consistency)", false).option("--session-only", "Run only session checks, skip context and MCP checks", false).option("--watch", "Re-lint on context file changes", false).action(async (projectPath, opts) => {
+    const resolvedPath = path13.resolve(projectPath);
+    const configPath = opts.config ? path13.resolve(opts.config) : void 0;
     const config2 = configPath ? loadConfigFromPath(configPath) : loadConfig(resolvedPath);
     const mcpGlobal = opts.mcpGlobal || false;
     const mcpOnly = opts.mcpOnly || false;
     const mcpFlag = opts.mcp || mcpGlobal || mcpOnly || config2?.mcp || false;
+    const mcphGlobal = opts.mcphGlobal || false;
+    const mcphOnly = opts.mcphOnly || false;
+    const mcphFlag = opts.mcph || mcphGlobal || mcphOnly || false;
+    const mcphStrictEnvToken = opts.mcphStrictEnvToken || false;
     const sessionFlag = opts.session || false;
     const sessionOnly = opts.sessionOnly || false;
     let explicitChecks = opts.checks ? validateCheckNames(
@@ -52016,8 +53508,10 @@ async function runCli() {
     ) : null;
     if (explicitChecks?.length === 0) explicitChecks = null;
     const hasMcpInChecks = explicitChecks?.some((c3) => c3.startsWith("mcp-")) || false;
+    const hasMcphInChecks = explicitChecks?.some((c3) => c3.startsWith("mcph-")) || false;
     const hasSessionInChecks = explicitChecks?.some((c3) => c3.startsWith("session-")) || false;
     const effectiveMcp = mcpFlag || hasMcpInChecks;
+    const effectiveMcph = mcphFlag || hasMcphInChecks;
     const effectiveSession = sessionFlag || sessionOnly || hasSessionInChecks;
     let checks;
     if (explicitChecks) {
@@ -52026,11 +53520,14 @@ async function runCli() {
       checks = ALL_SESSION_CHECKS;
     } else if (mcpOnly) {
       checks = ALL_MCP_CHECKS;
+    } else if (mcphOnly) {
+      checks = ALL_MCPH_CHECKS;
     } else {
       const base = config2?.checks || ALL_CHECKS;
       checks = [
         ...base,
         ...effectiveMcp ? ALL_MCP_CHECKS : [],
+        ...effectiveMcph ? ALL_MCPH_CHECKS : [],
         ...effectiveSession ? ALL_SESSION_CHECKS : []
       ];
     }
@@ -52051,6 +53548,10 @@ async function runCli() {
       mcp: effectiveMcp,
       mcpOnly,
       mcpGlobal: mcpGlobal || config2?.mcpGlobal || false,
+      mcph: effectiveMcph,
+      mcphOnly,
+      mcphGlobal,
+      mcphStrictEnvToken,
       session: effectiveSession,
       sessionOnly
     };
@@ -52067,6 +53568,10 @@ async function runCli() {
         mcp: options.mcp,
         mcpGlobal: options.mcpGlobal,
         mcpOnly: options.mcpOnly,
+        mcph: options.mcph,
+        mcphGlobal: options.mcphGlobal,
+        mcphOnly: options.mcphOnly,
+        mcphStrictEnvToken: options.mcphStrictEnvToken,
         session: options.session,
         sessionOnly: options.sessionOnly
       });
@@ -52167,34 +53672,34 @@ Fixed ${applied.totalFixes} issue${applied.totalFixes !== 1 ? "s" : ""} in ${app
       const chalk2 = (await Promise.resolve().then(() => (init_source(), source_exports))).default;
       console.log(chalk2.dim("\nWatching for changes... (Ctrl+C to stop)\n"));
       const watchPaths = [
-        path11.join(resolvedPath, "CLAUDE.md"),
-        path11.join(resolvedPath, "CLAUDE.local.md"),
-        path11.join(resolvedPath, "AGENTS.md"),
-        path11.join(resolvedPath, "AGENT.md"),
-        path11.join(resolvedPath, ".cursorrules"),
-        path11.join(resolvedPath, ".windsurfrules"),
-        path11.join(resolvedPath, ".clinerules"),
-        path11.join(resolvedPath, ".aiderules"),
-        path11.join(resolvedPath, ".continuerules"),
-        path11.join(resolvedPath, ".rules"),
-        path11.join(resolvedPath, ".goosehints"),
-        path11.join(resolvedPath, "GEMINI.md"),
-        path11.join(resolvedPath, "replit.md"),
-        path11.join(resolvedPath, "package.json"),
-        path11.join(resolvedPath, ".mcp.json")
+        path13.join(resolvedPath, "CLAUDE.md"),
+        path13.join(resolvedPath, "CLAUDE.local.md"),
+        path13.join(resolvedPath, "AGENTS.md"),
+        path13.join(resolvedPath, "AGENT.md"),
+        path13.join(resolvedPath, ".cursorrules"),
+        path13.join(resolvedPath, ".windsurfrules"),
+        path13.join(resolvedPath, ".clinerules"),
+        path13.join(resolvedPath, ".aiderules"),
+        path13.join(resolvedPath, ".continuerules"),
+        path13.join(resolvedPath, ".rules"),
+        path13.join(resolvedPath, ".goosehints"),
+        path13.join(resolvedPath, "GEMINI.md"),
+        path13.join(resolvedPath, "replit.md"),
+        path13.join(resolvedPath, "package.json"),
+        path13.join(resolvedPath, ".mcp.json")
       ];
       const watchDirs = [
-        path11.join(resolvedPath, ".claude"),
-        path11.join(resolvedPath, ".cursor"),
-        path11.join(resolvedPath, ".github"),
-        path11.join(resolvedPath, ".windsurf"),
-        path11.join(resolvedPath, ".aide"),
-        path11.join(resolvedPath, ".amazonq"),
-        path11.join(resolvedPath, ".goose"),
-        path11.join(resolvedPath, ".junie"),
-        path11.join(resolvedPath, ".aiassistant"),
-        path11.join(resolvedPath, ".continue"),
-        path11.join(resolvedPath, ".vscode")
+        path13.join(resolvedPath, ".claude"),
+        path13.join(resolvedPath, ".cursor"),
+        path13.join(resolvedPath, ".github"),
+        path13.join(resolvedPath, ".windsurf"),
+        path13.join(resolvedPath, ".aide"),
+        path13.join(resolvedPath, ".amazonq"),
+        path13.join(resolvedPath, ".goose"),
+        path13.join(resolvedPath, ".junie"),
+        path13.join(resolvedPath, ".aiassistant"),
+        path13.join(resolvedPath, ".continue"),
+        path13.join(resolvedPath, ".vscode")
       ];
       const watchers = [];
       let debounceTimer = null;
@@ -52209,6 +53714,10 @@ Fixed ${applied.totalFixes} issue${applied.totalFixes !== 1 ? "s" : ""} in ${app
               mcp: options.mcp,
               mcpGlobal: options.mcpGlobal,
               mcpOnly: options.mcpOnly,
+              mcph: options.mcph,
+              mcphGlobal: options.mcphGlobal,
+              mcphOnly: options.mcphOnly,
+              mcphStrictEnvToken: options.mcphStrictEnvToken,
               session: options.session,
               sessionOnly: options.sessionOnly
             });
@@ -52238,13 +53747,13 @@ Fixed ${applied.totalFixes} issue${applied.totalFixes !== 1 ? "s" : ""} in ${app
       };
       for (const filePath of watchPaths) {
         try {
-          watchers.push(fs9.watch(filePath, rerun));
+          watchers.push(fs10.watch(filePath, rerun));
         } catch {
         }
       }
       for (const dir of watchDirs) {
         try {
-          watchers.push(fs9.watch(dir, { recursive: true }, rerun));
+          watchers.push(fs10.watch(dir, { recursive: true }, rerun));
         } catch {
         }
       }
@@ -52265,17 +53774,17 @@ Fixed ${applied.totalFixes} issue${applied.totalFixes !== 1 ? "s" : ""} in ${app
     }
   });
   program2.command("init").description("Set up a git pre-commit hook that runs ctxlint --strict").argument("[path]", "Project directory", ".").action(async (projectPath) => {
-    const resolvedRoot = path11.resolve(projectPath);
-    const gitDir = path11.join(resolvedRoot, ".git");
-    const hooksDir = path11.join(gitDir, "hooks");
-    if (!fs9.existsSync(gitDir)) {
+    const resolvedRoot = path13.resolve(projectPath);
+    const gitDir = path13.join(resolvedRoot, ".git");
+    const hooksDir = path13.join(gitDir, "hooks");
+    if (!fs10.existsSync(gitDir)) {
       console.error('Error: not a git repository. Run "git init" first.');
       process.exit(1);
     }
-    if (!fs9.existsSync(hooksDir)) {
-      fs9.mkdirSync(hooksDir, { recursive: true });
+    if (!fs10.existsSync(hooksDir)) {
+      fs10.mkdirSync(hooksDir, { recursive: true });
     }
-    const hookPath = path11.join(hooksDir, "pre-commit");
+    const hookPath = path13.join(hooksDir, "pre-commit");
     const fullHookContent = `#!/bin/sh
 # ctxlint pre-commit hook
 npx @yawlabs/ctxlint@${VERSION} --strict
@@ -52284,16 +53793,16 @@ npx @yawlabs/ctxlint@${VERSION} --strict
 # ctxlint pre-commit hook
 npx @yawlabs/ctxlint@${VERSION} --strict
 `;
-    if (fs9.existsSync(hookPath)) {
-      const existing = fs9.readFileSync(hookPath, "utf-8");
+    if (fs10.existsSync(hookPath)) {
+      const existing = fs10.readFileSync(hookPath, "utf-8");
       if (existing.includes("ctxlint")) {
         console.log("Pre-commit hook already includes ctxlint.");
         return;
       }
-      fs9.appendFileSync(hookPath, appendHookContent);
+      fs10.appendFileSync(hookPath, appendHookContent);
       console.log("Added ctxlint to existing pre-commit hook.");
     } else {
-      fs9.writeFileSync(hookPath, fullHookContent, { mode: 493 });
+      fs10.writeFileSync(hookPath, fullHookContent, { mode: 493 });
       console.log("Created pre-commit hook at .git/hooks/pre-commit");
     }
     console.log("ctxlint will now run automatically before each commit.");
@@ -52312,7 +53821,7 @@ async function promptYesNo(question) {
 }
 function loadConfigFromPath(configPath) {
   try {
-    const content = fs9.readFileSync(configPath, "utf-8");
+    const content = fs10.readFileSync(configPath, "utf-8");
     return JSON.parse(content);
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
@@ -52336,7 +53845,12 @@ var init_cli = __esm({
     init_config2();
     init_audit();
     init_version2();
-    VALID_CHECKS = /* @__PURE__ */ new Set([...ALL_CHECKS, ...ALL_MCP_CHECKS, ...ALL_SESSION_CHECKS]);
+    VALID_CHECKS = /* @__PURE__ */ new Set([
+      ...ALL_CHECKS,
+      ...ALL_MCP_CHECKS,
+      ...ALL_MCPH_CHECKS,
+      ...ALL_SESSION_CHECKS
+    ]);
   }
 });