aemeathcli 1.0.10 → 1.0.12

package/dist/chunk-BIMQL4AG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/storage/migrations/001-initial.ts","../src/storage/sqlite-store.ts"],"names":[],"mappings":";;;;;;AAWA,IAAM,oBAAA,GAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAU7B,IAAM,eAAA,GAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAaxB,IAAM,mBAAA,GAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAU5B,IAAM,oBAAA,GAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAa7B,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AASrB,IAAM,cAAA,GAAiB;AAAA,EACrB,mFAAA;AAAA,EACA,oFAAA;AAAA,EACA,yEAAA;AAAA,EACA;AACF,CAAA;AAiBO,SAAS,GAAG,EAAA,EAA6B;AAC9C,EAAA,EAAA,CAAG,YAAY,MAAM;AACnB,IAAA,EAAA,CAAG,KAAK,oBAAoB,CAAA;AAC5B,IAAA,EAAA,CAAG,KAAK,eAAe,CAAA;AACvB,IAAA,EAAA,CAAG,KAAK,mBAAmB,CAAA;AAC3B,IAAA,EAAA,CAAG,KAAK,oBAAoB,CAAA;AAC5B,IAAA,EAAA,CAAG,KAAK,YAAY,CAAA;AAEpB,IAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,MAAA,EAAA,CAAG,KAAK,GAAG,CAAA;AAAA,IACb;AAAA,EACF,CAAC,CAAA,EAAE;AACL;;;ACpFA,IAAM,oBAAA,GAAuB;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAW7B,IAAM,UAAA,GAAoC;AAAA,EACxC,EAAE,EAAA,EAAI,aAAA,EAAe,EAAA;AACvB,CAAA;AAEO,IAAM,cAAN,MAAkB;AAAA,EACf,EAAA;AAAA,EACA,MAAA,GAAS,KAAA;AAAA,EAEjB,IAAI,QAAA,GAA8B;AAChC,IAAA,IAAI,IAAA,CAAK,MAAA,IAAU,CAAC,IAAA,CAAK,EAAA,EAAI;AAC3B,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC5D;AACA,IAAA,OAAO,IAAA,CAAK,EAAA;AAAA,EACd;AAAA,EAEA,KAAK,MAAA,EAAuB;AAC1B,IAAA,IAAI,KAAK,EAAA,EAAI;AACX,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,YAAA,GAAe,UAAU,eAAA,EAAgB;AAC/C,IAAA,eAAA,CAAgB,gBAAgB,CAAA;AAEhC,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,YAAA,IAAgB,yBAAyB,CAAA;AAE7D,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,QAAA,CAAS,YAAY,CAAA;AAGnC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,oBAAoB,CAAA;AACnC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,qBAAqB,CAAA;AACpC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,mBAAmB,CAAA;AAClC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,sBAAsB,CAAA;AAGrC,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,cAAc,GAAK,CAAA;AAAA,IAC/B,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,MAAM,YAAA,EAAa;AAAA,QACrB;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,aAAA,EAAc;AACnB,IAAA,IAAA,CAAK,uBAAA,EAAwB;AAAA,EAC/B;AAAA,EAEQ,aAAA,GAAsB;AAC5B,IAAA,MAAM,KAAK,IAAA,CAAK,QAAA;AAChB,IAAA,EAAA,CAAG,KAAK,oBAAoB,CAAA;AAE5B,IAAA,MAAM,cAAc,EAAA,CAAG,OAAA;AAAA,MACrB;AAAA,KACF;AAEA,IAAA,MAAM,aAAa,EAAA,CAAG,OAAA;AAAA,MACpB;AAAA,KACF;AAEA,IAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,MAAA,MAAM,QAAA,GAAW,WAAA,CAAY,GAAA,CAAI,SAAA,CAAU,EAAE,CAAA;AAI7C,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,MAAA,CAAO,KAAK,EAAE,WAAA,EAAa,SAAA,CAAU,EAAA,IAAM,mBAAmB,CAAA;AAC9D,QAAA,EAAA,CAAG,YAAY,MAAM;AACnB,UAAA,SAAA,CAAU,GAAG,EAAE,CAAA;AACf,UAAA,UAAA,CAAW,GAAA,CAAI,UAAU,EAAE,CAAA;AAAA,QAC7B,CAAC,CAAA,EAAE;AACH,QAAA,MAAA,CAAO,KAAK,EAAE,WAAA,EAAa,SAAA,CAAU,EAAA,IAAM,mBAAmB,CAAA;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAQ,GAAA,EAAiC;AACvC,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,OAAA,CAAQ,GAAG,CAAA;AAAA,EAClC;AAAA,EAEA,GAAA,CAAI,QAAgB,MAAA,EAAgD;AAClE,IAAA,OAAO,KAAK,QAAA,CAAS,OAAA,CAAQ,GAAG,CAAA,CAAE,GAAA,CAAI,GAAG,MAAM,CAAA;AAAA,EACjD;AAAA,EAEA,GAAA,CAAI,QAAgB,MAAA,EAA4B;AAC9C,IAAA,OAAO,KAAK,QAAA,CAAS,OAAA,CAAQ,GAAG,CAAA,CAAE,GAAA,CAAI,GAAG,MAAM,CAAA;AAAA,EACjD;AAAA,EAEA,GAAA,CAAI,QAAgB,MAAA,EAA8B;AAChD,IAAA,OAAO,KAAK,QAAA,CAAS,OAAA,CAAQ,GAAG,CAAA,CAAE,GAAA,CAAI,GAAG,MAAM,CAAA;AAAA,EACjD;AAAA,EAEA,YAAe,EAAA,EAAgB;AAC7B,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,WAAA,CAAY,EAAE,CAAA,EAAE;AAAA,EACvC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAI,IAAA,CAAK,MAAA,IAAU,CAAC,IAAA,CAAK,EAAA,EAAI;AAC3B,MAAA;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,KAAK,yBAAyB,CAAA;AACrC,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAEd,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,EAAA,CAAG,OAAO,0BAA0B,CAAA;AACzC,MAAA,IAAA,CAAK,GAAG,KAAA,EAAM;AAAA,IAChB,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,UACJ,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACvD,MAAA,MAAA,CAAO,KAAA,CAAM,EAAE,KAAA,EAAO,OAAA,IAAW,wBAAwB,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAA,CAAK,EAAA,GAAK,MAAA;AAAA,EACZ;AAAA,EAEQ,uBAAA,GAAgC;AACtC,IAAA,MAAM,UAAU,MAAY;AAC1B,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,CAAA;AAEA,IAAA,OAAA,CAAQ,EAAA,CAAG,QAAQ,OAAO,CAAA;AAC1B,IAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,MAAM;AACzB,MAAA,OAAA,EAAQ;AACR,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IAClB,CAAC,CAAA;AACD,IAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,MAAM;AAC1B,MAAA,OAAA,EAAQ;AACR,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IAClB,CAAC,CAAA;AAAA,EACH;AACF","file":"chunk-BIMQL4AG.js","sourcesContent":["/**\n * Initial database migration — PRD section 17.1\n * Creates all core tables and indexes for AemeathCLI persistence.\n *\n * SAFETY: All DDL is static SQL. No user input is interpolated.\n */\n\nimport type Database from \"better-sqlite3\";\n\nconst MIGRATION_ID = \"001-initial\";\n\nconst CREATE_CONVERSATIONS = `\nCREATE TABLE IF NOT EXISTS conversations (\n  id TEXT PRIMARY KEY,\n  project_root TEXT NOT NULL,\n  default_model TEXT,\n  created_at TEXT DEFAULT (datetime('now')),\n  updated_at TEXT DEFAULT (datetime('now')),\n  metadata TEXT DEFAULT '{}'\n)`;\n\nconst CREATE_MESSAGES = `\nCREATE TABLE IF NOT EXISTS messages (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  conversation_id TEXT NOT NULL REFERENCES conversations(id) ON DELETE CASCADE,\n  role TEXT NOT NULL,\n  model TEXT,\n  provider TEXT,\n  content TEXT NOT NULL,\n  tool_calls TEXT,\n  token_usage TEXT,\n  created_at TEXT DEFAULT (datetime('now'))\n)`;\n\nconst CREATE_FILE_CONTEXT = `\nCREATE TABLE IF NOT EXISTS file_context (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  conversation_id TEXT NOT NULL REFERENCES conversations(id) ON DELETE CASCADE,\n  file_path TEXT NOT NULL,\n  content_hash TEXT,\n  token_count INTEGER,\n  added_at TEXT DEFAULT (datetime('now'))\n)`;\n\nconst CREATE_COST_TRACKING = `\nCREATE TABLE IF NOT EXISTS cost_tracking (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  conversation_id TEXT NOT NULL REFERENCES conversations(id) ON DELETE CASCADE,\n  provider TEXT NOT NULL,\n  model TEXT NOT NULL,\n  role TEXT,\n  input_tokens INTEGER,\n  output_tokens INTEGER,\n  cost_usd REAL,\n  created_at TEXT DEFAULT (datetime('now'))\n)`;\n\nconst CREATE_TEAMS = `\nCREATE TABLE IF NOT EXISTS teams (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  status TEXT DEFAULT 'active',\n  config TEXT,\n  created_at TEXT DEFAULT (datetime('now'))\n)`;\n\nconst CREATE_INDEXES = [\n  \"CREATE INDEX IF NOT EXISTS idx_messages_conversation ON messages(conversation_id)\",\n  \"CREATE INDEX IF NOT EXISTS idx_cost_conversation ON cost_tracking(conversation_id)\",\n  \"CREATE INDEX IF NOT EXISTS idx_cost_provider ON cost_tracking(provider)\",\n  \"CREATE INDEX IF NOT EXISTS idx_file_context_conversation ON file_context(conversation_id)\",\n] as const;\n\nconst DROP_INDEXES = [\n  \"DROP INDEX IF EXISTS idx_file_context_conversation\",\n  \"DROP INDEX IF EXISTS idx_cost_provider\",\n  \"DROP INDEX IF EXISTS idx_cost_conversation\",\n  \"DROP INDEX IF EXISTS idx_messages_conversation\",\n] as const;\n\nconst DROP_TABLES = [\n  \"DROP TABLE IF EXISTS cost_tracking\",\n  \"DROP TABLE IF EXISTS file_context\",\n  \"DROP TABLE IF EXISTS messages\",\n  \"DROP TABLE IF EXISTS teams\",\n  \"DROP TABLE IF EXISTS conversations\",\n] as const;\n\nexport function up(db: Database.Database): void {\n  db.transaction(() => {\n    db.exec(CREATE_CONVERSATIONS);\n    db.exec(CREATE_MESSAGES);\n    db.exec(CREATE_FILE_CONTEXT);\n    db.exec(CREATE_COST_TRACKING);\n    db.exec(CREATE_TEAMS);\n\n    for (const sql of CREATE_INDEXES) {\n      db.exec(sql);\n    }\n  })();\n}\n\nexport function down(db: Database.Database): void {\n  db.transaction(() => {\n    for (const sql of DROP_INDEXES) {\n      db.exec(sql);\n    }\n    for (const sql of DROP_TABLES) {\n      db.exec(sql);\n    }\n  })();\n}\n\nexport { MIGRATION_ID };\n","/**\n * SQLite database store — PRD section 17.1\n * Uses better-sqlite3 with WAL mode for concurrent reads.\n * Runs migrations on startup. Provides raw query interface.\n */\n\nimport Database from \"better-sqlite3\";\nimport { chmodSync } from \"node:fs\";\nimport { logger } from \"../utils/logger.js\";\nimport {\n  getDatabasePath,\n  getDatabaseDir,\n  ensureDirectory,\n} from \"../utils/pathResolver.js\";\nimport { up as initialMigrationUp } from \"./migrations/001-initial.js\";\n\nconst MIGRATIONS_TABLE_DDL = `\nCREATE TABLE IF NOT EXISTS _migrations (\n  id TEXT PRIMARY KEY,\n  applied_at TEXT DEFAULT (datetime('now'))\n)`;\n\ninterface IMigration {\n  readonly id: string;\n  readonly up: (db: Database.Database) => void;\n}\n\nconst MIGRATIONS: readonly IMigration[] = [\n  { id: \"001-initial\", up: initialMigrationUp },\n] as const;\n\nexport class SqliteStore {\n  private db: Database.Database | undefined;\n  private closed = false;\n\n  get database(): Database.Database {\n    if (this.closed || !this.db) {\n      throw new Error(\"SqliteStore is closed or not initialized\");\n    }\n    return this.db;\n  }\n\n  open(dbPath?: string): void {\n    if (this.db) {\n      return;\n    }\n\n    const resolvedPath = dbPath ?? getDatabasePath();\n    ensureDirectory(getDatabaseDir());\n\n    logger.info({ path: resolvedPath }, \"Opening SQLite database\");\n\n    this.db = new Database(resolvedPath);\n\n    // WAL mode for concurrent reads (PRD section 17.1)\n    this.db.pragma(\"journal_mode = WAL\");\n    this.db.pragma(\"busy_timeout = 5000\");\n    this.db.pragma(\"foreign_keys = ON\");\n    this.db.pragma(\"synchronous = NORMAL\");\n\n    // Secure file permissions (PRD section 14.1)\n    try {\n      chmodSync(resolvedPath, 0o600);\n    } catch {\n      logger.warn(\n        { path: resolvedPath },\n        \"Could not set database file permissions to 600\",\n      );\n    }\n\n    this.runMigrations();\n    this.registerCleanupHandlers();\n  }\n\n  private runMigrations(): void {\n    const db = this.database;\n    db.exec(MIGRATIONS_TABLE_DDL);\n\n    const appliedStmt = db.prepare(\n      \"SELECT id FROM _migrations WHERE id = ?\",\n    );\n\n    const insertStmt = db.prepare(\n      \"INSERT INTO _migrations (id) VALUES (?)\",\n    );\n\n    for (const migration of MIGRATIONS) {\n      const existing = appliedStmt.get(migration.id) as\n        | { id: string }\n        | undefined;\n\n      if (!existing) {\n        logger.info({ migrationId: migration.id }, \"Running migration\");\n        db.transaction(() => {\n          migration.up(db);\n          insertStmt.run(migration.id);\n        })();\n        logger.info({ migrationId: migration.id }, \"Migration applied\");\n      }\n    }\n  }\n\n  prepare(sql: string): Database.Statement {\n    return this.database.prepare(sql);\n  }\n\n  run(sql: string, ...params: readonly unknown[]): Database.RunResult {\n    return this.database.prepare(sql).run(...params);\n  }\n\n  get(sql: string, ...params: unknown[]): unknown {\n    return this.database.prepare(sql).get(...params);\n  }\n\n  all(sql: string, ...params: unknown[]): unknown[] {\n    return this.database.prepare(sql).all(...params);\n  }\n\n  transaction<T>(fn: () => T): T {\n    return this.database.transaction(fn)();\n  }\n\n  close(): void {\n    if (this.closed || !this.db) {\n      return;\n    }\n\n    logger.info(\"Closing SQLite database\");\n    this.closed = true;\n\n    try {\n      this.db.pragma(\"wal_checkpoint(TRUNCATE)\");\n      this.db.close();\n    } catch (error: unknown) {\n      const message =\n        error instanceof Error ? error.message : String(error);\n      logger.error({ error: message }, \"Error closing database\");\n    }\n\n    this.db = undefined;\n  }\n\n  private registerCleanupHandlers(): void {\n    const cleanup = (): void => {\n      this.close();\n    };\n\n    process.on(\"exit\", cleanup);\n    process.on(\"SIGINT\", () => {\n      cleanup();\n      process.exit(130);\n    });\n    process.on(\"SIGTERM\", () => {\n      cleanup();\n      process.exit(143);\n    });\n  }\n}\n"]}

package/dist/{chunk-NBR3GHMT.js → chunk-D275MCIH.js}

@@ -1,5 +1,5 @@
-import { homedir } from 'os';
-import { join } from 'path';
+import { homedir, tmpdir } from 'os';
+import { join, dirname } from 'path';
 import { existsSync, mkdirSync } from 'fs';
 
 // src/utils/pathResolver.ts
@@ -25,9 +25,15 @@ function getLogDir() {
 function getCredentialsPath() {
   return join(getAemeathHome(), "credentials.enc");
 }
+function getMCPConfigPath() {
+  return join(getAemeathHome(), "mcp.json");
+}
 function getUserSkillsDir() {
   return join(getAemeathHome(), "skills");
 }
+function getUniversalUserSkillsDir() {
+  return join(homedir(), ".agents", "skills");
+}
 function getTeamsDir() {
   return join(getAemeathHome(), "teams");
 }
@@ -43,9 +49,19 @@ function getProjectConfigPath(projectRoot) {
 function getProjectSkillsDir(projectRoot) {
   return join(getProjectConfigDir(projectRoot), "skills");
 }
+function getUniversalProjectSkillsDir(projectRoot) {
+  return join(projectRoot, ".agents", "skills");
+}
+function getProjectMCPConfigPath(projectRoot) {
+  return join(getProjectConfigDir(projectRoot), "mcp.json");
+}
+function getProjectAgentsPath(projectRoot) {
+  return join(getProjectConfigDir(projectRoot), "AGENTS.md");
+}
 function getIPCSocketDir() {
-  const tmpDir = process.env["TMPDIR"] ?? "/tmp";
-  return join(tmpDir, `aemeathcli-${process.getuid?.() ?? "user"}`);
+  const tmp = process.env["TMPDIR"] ?? tmpdir();
+  const uid = process.platform === "win32" ? process.env["USERNAME"] ?? "user" : String(process.getuid?.() ?? "user");
+  return join(tmp, `aemeathcli-${uid}`);
 }
 function getIPCSocketPath(sessionId) {
   return join(getIPCSocketDir(), `${sessionId}.sock`);
@@ -66,7 +82,23 @@ function initializeDirectories() {
   ensureDirectory(getTeamsDir());
   ensureDirectory(getTasksDir());
 }
+function findProjectRoot(startDir) {
+  let currentDir = startDir ?? process.cwd();
+  while (currentDir !== dirname(currentDir)) {
+    if (existsSync(join(currentDir, ".git"))) {
+      return currentDir;
+    }
+    if (existsSync(join(currentDir, ".aemeathcli"))) {
+      return currentDir;
+    }
+    if (existsSync(join(currentDir, "package.json"))) {
+      return currentDir;
+    }
+    currentDir = dirname(currentDir);
+  }
+  return process.cwd();
+}
 
-export { ensureDirectory, ensureSecureDirectory, getAemeathHome, getConfigPath, getCredentialsPath, getDatabaseDir, getDatabasePath, getIPCSocketDir, getIPCSocketPath, getProjectConfigPath, getProjectSkillsDir, getTasksDir, getTeamsDir, getUserSkillsDir, initializeDirectories };
-//# sourceMappingURL=chunk-NBR3GHMT.js.map
-//# sourceMappingURL=chunk-NBR3GHMT.js.map
+export { ensureDirectory, ensureSecureDirectory, findProjectRoot, getAemeathHome, getConfigDir, getConfigPath, getCredentialsPath, getDatabaseDir, getDatabasePath, getIPCSocketDir, getIPCSocketPath, getLogDir, getMCPConfigPath, getProjectAgentsPath, getProjectConfigDir, getProjectConfigPath, getProjectMCPConfigPath, getProjectSkillsDir, getTasksDir, getTeamsDir, getUniversalProjectSkillsDir, getUniversalUserSkillsDir, getUserSkillsDir, initializeDirectories };
+//# sourceMappingURL=chunk-D275MCIH.js.map
+//# sourceMappingURL=chunk-D275MCIH.js.map

package/dist/chunk-D275MCIH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/pathResolver.ts"],"names":[],"mappings":";;;;;AAWA,IAAM,eAAA,GAAkB,IAAA,CAAK,OAAA,EAAQ,EAAG,aAAa,CAAA;AAE9C,SAAS,cAAA,GAAyB;AACvC,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,IAAK,eAAA;AAC3C;AAEO,SAAS,YAAA,GAAuB;AACrC,EAAA,OAAO,cAAA,EAAe;AACxB;AAEO,SAAS,aAAA,GAAwB;AACtC,EAAA,OAAO,IAAA,CAAK,YAAA,EAAa,EAAG,aAAa,CAAA;AAC3C;AAEO,SAAS,cAAA,GAAyB;AACvC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,IAAI,CAAA;AACpC;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,eAAe,CAAA;AAC/C;AAEO,SAAS,SAAA,GAAoB;AAClC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,MAAM,CAAA;AACtC;AAEO,SAAS,kBAAA,GAA6B;AAC3C,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,iBAAiB,CAAA;AACjD;AAEO,SAAS,gBAAA,GAA2B;AACzC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,UAAU,CAAA;AAC1C;AAEO,SAAS,gBAAA,GAA2B;AACzC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,QAAQ,CAAA;AACxC;AAGO,SAAS,yBAAA,GAAoC;AAClD,EAAA,OAAO,IAAA,CAAK,OAAA,EAAQ,EAAG,SAAA,EAAW,QAAQ,CAAA;AAC5C;AAEO,SAAS,WAAA,GAAsB;AACpC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,OAAO,CAAA;AACvC;AAEO,SAAS,WAAA,GAAsB;AACpC,EAAA,OAAO,IAAA,CAAK,cAAA,EAAe,EAAG,OAAO,CAAA;AACvC;AAIO,SAAS,oBAAoB,WAAA,EAA6B;AAC/D,EAAA,OAAO,IAAA,CAAK,aAAa,aAAa,CAAA;AACxC;AAEO,SAAS,qBAAqB,WAAA,EAA6B;AAChE,EAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,WAAW,CAAA,EAAG,aAAa,CAAA;AAC7D;AAEO,SAAS,oBAAoB,WAAA,EAA6B;AAC/D,EAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,WAAW,CAAA,EAAG,QAAQ,CAAA;AACxD;AAGO,SAAS,6BAA6B,WAAA,EAA6B;AACxE,EAAA,OAAO,IAAA,CAAK,WAAA,EAAa,SAAA,EAAW,QAAQ,CAAA;AAC9C;AAEO,SAAS,wBAAwB,WAAA,EAA6B;AACnE,EAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,WAAW,CAAA,EAAG,UAAU,CAAA;AAC1D;AAEO,SAAS,qBAAqB,WAAA,EAA6B;AAChE,EAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,WAAW,CAAA,EAAG,WAAW,CAAA;AAC3D;AAIO,SAAS,eAAA,GAA0B;AACxC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,KAAK,MAAA,EAAO;AAC5C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,KAAa,OAAA,GAC5B,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,IAAK,MAAA,GAC5B,MAAA,CAAO,OAAA,CAAQ,MAAA,QAAc,MAAM,CAAA;AACvC,EAAA,OAAO,IAAA,CAAK,GAAA,EAAK,CAAA,WAAA,EAAc,GAAG,CAAA,CAAE,CAAA;AACtC;AAEO,SAAS,iBAAiB,SAAA,EAA2B;AAC1D,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,CAAA,EAAG,SAAS,CAAA,KAAA,CAAO,CAAA;AACpD;AAIO,SAAS,eAAA,CAAgB,SAAiB,IAAA,EAAqB;AACpE,EAAA,IAAI,CAAC,UAAA,CAAW,OAAO,CAAA,EAAG;AACxB,IAAA,SAAA,CAAU,SAAS,EAAE,SAAA,EAAW,MAAM,IAAA,EAAM,IAAA,IAAQ,KAAO,CAAA;AAAA,EAC7D;AACF;AAEO,SAAS,sBAAsB,OAAA,EAAuB;AAC3D,EAAA,eAAA,CAAgB,SAAS,GAAK,CAAA;AAChC;AAEO,SAAS,qBAAA,GAA8B;AAC5C,EAAA,qBAAA,CAAsB,gBAAgB,CAAA;AACtC,EAAA,eAAA,CAAgB,gBAAgB,CAAA;AAChC,EAAA,qBAAA,CAAsB,WAAW,CAAA;AACjC,EAAA,eAAA,CAAgB,kBAAkB,CAAA;AAClC,EAAA,eAAA,CAAgB,aAAa,CAAA;AAC7B,EAAA,eAAA,CAAgB,aAAa,CAAA;AAC/B;AAIO,SAAS,gBAAgB,QAAA,EAA2B;AACzD,EAAA,IAAI,UAAA,GAAa,QAAA,IAAY,OAAA,CAAQ,GAAA,EAAI;AAEzC,EAAA,OAAO,UAAA,KAAe,OAAA,CAAQ,UAAU,CAAA,EAAG;AACzC,IAAA,IAAI,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,MAAM,CAAC,CAAA,EAAG;AACxC,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,IAAI,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,aAAa,CAAC,CAAA,EAAG;AAC/C,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,IAAI,UAAA,CAAW,IAAA,CAAK,UAAA,EAAY,cAAc,CAAC,CAAA,EAAG;AAChD,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,UAAA,GAAa,QAAQ,UAAU,CAAA;AAAA,EACjC;AAGA,EAAA,OAAO,QAAQ,GAAA,EAAI;AACrB","file":"chunk-D275MCIH.js","sourcesContent":["/**\n * Safe path handling per PRD section 15.7 item 5\n * NO hardcoded paths — use path.join(), os.homedir(), XDG Base Directory\n */\n\nimport { homedir, tmpdir } from \"node:os\";\nimport { join, dirname } from \"node:path\";\nimport { existsSync, mkdirSync } from \"node:fs\";\n\n// ── XDG-inspired directory layout ────────────────────────────────────────\n\nconst AEMEATHCLI_HOME = join(homedir(), \".aemeathcli\");\n\nexport function getAemeathHome(): string {\n  return process.env[\"AEMEATHCLI_HOME\"] ?? AEMEATHCLI_HOME;\n}\n\nexport function getConfigDir(): string {\n  return getAemeathHome();\n}\n\nexport function getConfigPath(): string {\n  return join(getConfigDir(), \"config.json\");\n}\n\nexport function getDatabaseDir(): string {\n  return join(getAemeathHome(), \"db\");\n}\n\nexport function getDatabasePath(): string {\n  return join(getDatabaseDir(), \"aemeathcli.db\");\n}\n\nexport function getLogDir(): string {\n  return join(getAemeathHome(), \"logs\");\n}\n\nexport function getCredentialsPath(): string {\n  return join(getAemeathHome(), \"credentials.enc\");\n}\n\nexport function getMCPConfigPath(): string {\n  return join(getAemeathHome(), \"mcp.json\");\n}\n\nexport function getUserSkillsDir(): string {\n  return join(getAemeathHome(), \"skills\");\n}\n\n/** Universal user-level skills directory: ~/.agents/skills/ */\nexport function getUniversalUserSkillsDir(): string {\n  return join(homedir(), \".agents\", \"skills\");\n}\n\nexport function getTeamsDir(): string {\n  return join(getAemeathHome(), \"teams\");\n}\n\nexport function getTasksDir(): string {\n  return join(getAemeathHome(), \"tasks\");\n}\n\n// ── Project-level paths ──────────────────────────────────────────────────\n\nexport function getProjectConfigDir(projectRoot: string): string {\n  return join(projectRoot, \".aemeathcli\");\n}\n\nexport function getProjectConfigPath(projectRoot: string): string {\n  return join(getProjectConfigDir(projectRoot), \"config.json\");\n}\n\nexport function getProjectSkillsDir(projectRoot: string): string {\n  return join(getProjectConfigDir(projectRoot), \"skills\");\n}\n\n/** Universal project-level skills directory: <projectRoot>/.agents/skills/ */\nexport function getUniversalProjectSkillsDir(projectRoot: string): string {\n  return join(projectRoot, \".agents\", \"skills\");\n}\n\nexport function getProjectMCPConfigPath(projectRoot: string): string {\n  return join(getProjectConfigDir(projectRoot), \"mcp.json\");\n}\n\nexport function getProjectAgentsPath(projectRoot: string): string {\n  return join(getProjectConfigDir(projectRoot), \"AGENTS.md\");\n}\n\n// ── Socket paths (PRD section 14.5) ──────────────────────────────────────\n\nexport function getIPCSocketDir(): string {\n  const tmp = process.env[\"TMPDIR\"] ?? tmpdir();\n  const uid = process.platform === \"win32\"\n    ? (process.env[\"USERNAME\"] ?? \"user\")\n    : String(process.getuid?.() ?? \"user\");\n  return join(tmp, `aemeathcli-${uid}`);\n}\n\nexport function getIPCSocketPath(sessionId: string): string {\n  return join(getIPCSocketDir(), `${sessionId}.sock`);\n}\n\n// ── Directory Initialization ─────────────────────────────────────────────\n\nexport function ensureDirectory(dirPath: string, mode?: number): void {\n  if (!existsSync(dirPath)) {\n    mkdirSync(dirPath, { recursive: true, mode: mode ?? 0o755 });\n  }\n}\n\nexport function ensureSecureDirectory(dirPath: string): void {\n  ensureDirectory(dirPath, 0o700);\n}\n\nexport function initializeDirectories(): void {\n  ensureSecureDirectory(getAemeathHome());\n  ensureDirectory(getDatabaseDir());\n  ensureSecureDirectory(getLogDir());\n  ensureDirectory(getUserSkillsDir());\n  ensureDirectory(getTeamsDir());\n  ensureDirectory(getTasksDir());\n}\n\n// ── Project Root Detection ───────────────────────────────────────────────\n\nexport function findProjectRoot(startDir?: string): string {\n  let currentDir = startDir ?? process.cwd();\n\n  while (currentDir !== dirname(currentDir)) {\n    if (existsSync(join(currentDir, \".git\"))) {\n      return currentDir;\n    }\n    if (existsSync(join(currentDir, \".aemeathcli\"))) {\n      return currentDir;\n    }\n    if (existsSync(join(currentDir, \"package.json\"))) {\n      return currentDir;\n    }\n    currentDir = dirname(currentDir);\n  }\n\n  // Fallback to cwd\n  return process.cwd();\n}\n"]}

package/dist/{chunk-Y5XVD2CD.js → chunk-FFS4T7BZ.js}

@@ -1,6 +1,6 @@
-import { validatePath, isCommandBlocked, redactSecrets } from './chunk-CS5X3BWX.js';
+import { validatePath, isPathAllowed, isCommandBlocked, redactSecrets } from './chunk-OPWAFS6Y.js';
 import { FileNotFoundError, ExecutionTimeoutError } from './chunk-ZGOHARPV.js';
-import { logger } from './chunk-JAXXTYID.js';
+import { logger } from './chunk-IR5HLBMH.js';
 import { stat, readFile, mkdir, writeFile } from 'fs/promises';
 import { dirname, resolve, extname } from 'path';
 import fg from 'fast-glob';
@@ -72,7 +72,7 @@ var ToolRegistry = class {
         isError: true
       };
     }
-    if (tool.requiresApproval(context.permissionMode, call.arguments)) {
+    if (tool.requiresApproval(context, call.arguments)) {
       return {
         toolCallId: call.id,
         name: call.name,
@@ -82,7 +82,7 @@ var ToolRegistry = class {
     }
     try {
       logger.debug({ toolName: call.name, args: redactToolArgs(call.arguments) }, "Executing tool");
-      const result = await tool.execute(call.arguments);
+      const result = await tool.execute(call.arguments, context);
       return {
         ...result,
         toolCallId: call.id,
@@ -168,10 +168,6 @@ function formatWithLineNumbers(content, offset, limit) {
     return `${lineNum}	${truncated}`;
   }).join("\n");
 }
-var projectRoot = process.cwd();
-function setReadProjectRoot(root) {
-  projectRoot = root;
-}
 function createReadTool() {
   return {
     definition: {
@@ -201,10 +197,10 @@ function createReadTool() {
       ]
     },
     category: "file",
-    requiresApproval: (_mode, _args) => {
+    requiresApproval: (_context, _args) => {
       return false;
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const filePath = args["file_path"];
       if (typeof filePath !== "string" || filePath.length === 0) {
         return {
@@ -214,6 +210,8 @@ function createReadTool() {
           isError: true
         };
       }
+      const projectRoot = context.projectRoot;
+      const allowedPaths = context.allowedPaths;
       let resolvedPath;
       try {
         resolvedPath = validatePath(filePath, projectRoot);
@@ -221,6 +219,14 @@ function createReadTool() {
         const msg = err instanceof Error ? err.message : "Path validation failed";
         return { toolCallId: "", name: "read", content: msg, isError: true };
       }
+      if (!isPathAllowed(resolvedPath, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "read",
+          content: `Access denied: ${resolvedPath} is outside the configured allowed paths.`,
+          isError: true
+        };
+      }
       let fileStat;
       try {
         fileStat = await stat(resolvedPath);
@@ -300,10 +306,6 @@ function isConfigFile(filePath) {
   const base = filePath.split("/").pop() ?? "";
   return CONFIG_EXTENSIONS.has(ext) || SENSITIVE_FILENAMES.has(base);
 }
-var projectRoot2 = process.cwd();
-function setWriteProjectRoot(root) {
-  projectRoot2 = root;
-}
 function createWriteTool() {
   return {
     definition: {
@@ -325,10 +327,10 @@ function createWriteTool() {
       ]
     },
     category: "file",
-    requiresApproval: (mode, _args) => {
-      return mode === "strict" || mode === "standard";
+    requiresApproval: (context, _args) => {
+      return context.permissionMode === "strict" || context.permissionMode === "standard";
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const filePath = args["file_path"];
       const content = args["content"];
       if (typeof filePath !== "string" || filePath.length === 0) {
@@ -347,13 +349,23 @@ function createWriteTool() {
           isError: true
         };
       }
+      const projectRoot = context.projectRoot;
+      const allowedPaths = context.allowedPaths;
       let resolvedPath;
       try {
-        resolvedPath = validatePath(filePath, projectRoot2);
+        resolvedPath = validatePath(filePath, projectRoot);
       } catch (err) {
         const msg = err instanceof Error ? err.message : "Path validation failed";
         return { toolCallId: "", name: "write", content: msg, isError: true };
       }
+      if (!isPathAllowed(resolvedPath, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "write",
+          content: `Access denied: ${resolvedPath} is outside the configured allowed paths.`,
+          isError: true
+        };
+      }
       const parentDir = dirname(resolvedPath);
       try {
         await mkdir(parentDir, { recursive: true });
@@ -399,10 +411,6 @@ function createWriteTool() {
     }
   };
 }
-var projectRoot3 = process.cwd();
-function setEditProjectRoot(root) {
-  projectRoot3 = root;
-}
 function createEditTool() {
   return {
     definition: {
@@ -437,10 +445,10 @@ function createEditTool() {
       ]
     },
     category: "file",
-    requiresApproval: (mode, _args) => {
-      return mode === "strict" || mode === "standard";
+    requiresApproval: (context, _args) => {
+      return context.permissionMode === "strict" || context.permissionMode === "standard";
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const filePath = args["file_path"];
       const oldString = args["old_string"];
       const newString = args["new_string"];
@@ -477,13 +485,23 @@ function createEditTool() {
           isError: true
         };
       }
+      const projectRoot = context.projectRoot;
+      const allowedPaths = context.allowedPaths;
       let resolvedPath;
       try {
-        resolvedPath = validatePath(filePath, projectRoot3);
+        resolvedPath = validatePath(filePath, projectRoot);
       } catch (err) {
         const msg = err instanceof Error ? err.message : "Path validation failed";
         return { toolCallId: "", name: "edit", content: msg, isError: true };
       }
+      if (!isPathAllowed(resolvedPath, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "edit",
+          content: `Access denied: ${resolvedPath} is outside the configured allowed paths.`,
+          isError: true
+        };
+      }
       try {
         const fileStat = await stat(resolvedPath);
         if (!fileStat.isFile()) {
@@ -545,10 +563,6 @@ function createEditTool() {
   };
 }
 var MAX_RESULTS = 1e3;
-var projectRoot4 = process.cwd();
-function setGlobProjectRoot(root) {
-  projectRoot4 = root;
-}
 function createGlobTool() {
   return {
     definition: {
@@ -570,10 +584,10 @@ function createGlobTool() {
       ]
     },
     category: "search",
-    requiresApproval: (_mode, _args) => {
+    requiresApproval: (_context, _args) => {
       return false;
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const pattern = args["pattern"];
       if (typeof pattern !== "string" || pattern.length === 0) {
         return {
@@ -583,12 +597,22 @@ function createGlobTool() {
           isError: true
         };
       }
+      const projectRoot = context.projectRoot;
+      const allowedPaths = context.allowedPaths;
       let searchPath;
       if (typeof args["path"] === "string" && args["path"].length > 0) {
-        const resolved = resolve(projectRoot4, args["path"]);
-        searchPath = validatePath(resolved, projectRoot4);
+        const resolved = resolve(projectRoot, args["path"]);
+        searchPath = validatePath(resolved, projectRoot);
       } else {
-        searchPath = projectRoot4;
+        searchPath = projectRoot;
+      }
+      if (!isPathAllowed(searchPath, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "glob",
+          content: `Access denied: ${searchPath} is outside the configured allowed paths.`,
+          isError: true
+        };
       }
       let matchedPaths;
       try {
@@ -742,10 +766,6 @@ function applyLimits(output, headLimit, offset) {
   }
   return result;
 }
-var projectRoot5 = process.cwd();
-function setGrepProjectRoot(root) {
-  projectRoot5 = root;
-}
 function createGrepTool() {
   return {
     definition: {
@@ -833,10 +853,10 @@ function createGrepTool() {
       ]
     },
     category: "search",
-    requiresApproval: (_mode, _args) => {
+    requiresApproval: (_context, _args) => {
       return false;
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const pattern = args["pattern"];
       if (typeof pattern !== "string" || pattern.length === 0) {
         return {
@@ -846,12 +866,22 @@ function createGrepTool() {
           isError: true
         };
       }
+      const projectRoot = context.projectRoot;
+      const allowedPaths = context.allowedPaths;
       let searchPath;
       if (typeof args["path"] === "string" && args["path"].length > 0) {
-        const resolved = resolve(projectRoot5, args["path"]);
-        searchPath = validatePath(resolved, projectRoot5);
+        const resolved = resolve(projectRoot, args["path"]);
+        searchPath = validatePath(resolved, projectRoot);
       } else {
-        searchPath = projectRoot5;
+        searchPath = projectRoot;
+      }
+      if (!isPathAllowed(searchPath, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "grep",
+          content: `Access denied: ${searchPath} is outside the configured allowed paths.`,
+          isError: true
+        };
       }
       const outputMode = args["output_mode"] === "content" || args["output_mode"] === "count" ? args["output_mode"] : "files_with_matches";
       const headLimit = typeof args["head_limit"] === "number" ? args["head_limit"] : DEFAULT_HEAD_LIMIT;
@@ -984,14 +1014,6 @@ function truncateOutput(output) {
   }
   return output.substring(0, MAX_OUTPUT_LENGTH2) + "\n...(truncated)";
 }
-var workingDirectory = process.cwd();
-var blockedCommands = [];
-function setBashWorkingDirectory(dir) {
-  workingDirectory = dir;
-}
-function setBashBlockedCommands(commands) {
-  blockedCommands = commands;
-}
 function createBashTool() {
   return {
     definition: {
@@ -1020,17 +1042,18 @@ function createBashTool() {
       ]
     },
     category: "shell",
-    requiresApproval: (mode, args) => {
+    requiresApproval: (context, args) => {
       const command = typeof args["command"] === "string" ? args["command"] : "";
+      const blockedCommands = context.blockedCommands;
       if (isDangerousCommand(command) || isCommandBlocked(command, blockedCommands)) {
         return true;
       }
-      if (mode === "strict") {
+      if (context.permissionMode === "strict") {
         return true;
       }
       return false;
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const command = args["command"];
       if (typeof command !== "string" || command.length === 0) {
         return {
@@ -1040,6 +1063,10 @@ function createBashTool() {
           isError: true
         };
       }
+      const workingDirectory = context.workingDirectory;
+      const blockedCommands = context.blockedCommands;
+      const allowedPaths = context.allowedPaths;
+      const projectRoot = context.projectRoot;
       const lowerCommand = command.toLowerCase().trim();
       for (const pattern of DANGEROUS_PATTERNS) {
         if (lowerCommand.includes(pattern)) {
@@ -1059,6 +1086,14 @@ function createBashTool() {
           isError: true
         };
       }
+      if (!isPathAllowed(workingDirectory, allowedPaths, projectRoot)) {
+        return {
+          toolCallId: "",
+          name: "bash",
+          content: `Access denied: working directory ${workingDirectory} is outside the configured allowed paths.`,
+          isError: true
+        };
+      }
       let timeoutMs = DEFAULT_TIMEOUT_MS;
       if (typeof args["timeout"] === "number") {
         timeoutMs = Math.max(1e3, Math.min(args["timeout"], MAX_TIMEOUT_MS));
@@ -1149,7 +1184,7 @@ function createWebSearchTool() {
       ]
     },
     category: "web",
-    requiresApproval: (_mode, _args) => {
+    requiresApproval: (_context, _args) => {
       return false;
     },
     execute: async (args) => {
@@ -1237,6 +1272,9 @@ function isPrivateHostname(hostname) {
   const ipMatch = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(hostname);
   if (ipMatch) {
     const [, a, b] = ipMatch;
+    if (a === void 0 || b === void 0) {
+      return false;
+    }
     const first = parseInt(a, 10);
     const second = parseInt(b, 10);
     if (first === 127) return true;
@@ -1304,9 +1342,7 @@ function createWebFetchTool() {
       ]
     },
     category: "web",
-    requiresApproval: (_mode, _args) => {
-      return false;
-    },
+    requiresApproval: (_context, _args) => false,
     execute: async (args) => {
       const rawUrl = args["url"];
       if (typeof rawUrl !== "string" || rawUrl.length === 0) {
@@ -1332,7 +1368,9 @@ function createWebFetchTool() {
       }
       logger.debug({ url, timeout: timeoutMs }, "Fetching URL");
       const controller = new AbortController();
-      const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+      const timeoutId = setTimeout(() => {
+        controller.abort();
+      }, timeoutMs);
       try {
         const response = await fetch(url, {
           signal: controller.signal,
@@ -1463,10 +1501,6 @@ function truncateOutput2(output) {
   }
   return output.substring(0, MAX_OUTPUT_LENGTH3) + "\n...(truncated)";
 }
-var workingDirectory2 = process.cwd();
-function setGitWorkingDirectory(dir) {
-  workingDirectory2 = dir;
-}
 function createGitTool() {
   return {
     definition: {
@@ -1482,7 +1516,7 @@ function createGitTool() {
       ]
     },
     category: "git",
-    requiresApproval: (mode, args) => {
+    requiresApproval: (context, args) => {
       const command = typeof args["command"] === "string" ? args["command"] : "";
       const subcommand = parseGitSubcommand(command);
       if (hasDangerousFlags(command)) {
@@ -1491,15 +1525,15 @@ function createGitTool() {
       if (subcommand && READ_ONLY_SUBCOMMANDS.has(subcommand)) {
         return false;
       }
-      if (mode === "strict") {
+      if (context.permissionMode === "strict") {
         return true;
       }
-      if (subcommand === "push" && mode === "standard") {
+      if (subcommand === "push" && context.permissionMode === "standard") {
         return true;
       }
       return false;
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       const command = args["command"];
       if (typeof command !== "string" || command.length === 0) {
         return {
@@ -1509,6 +1543,7 @@ function createGitTool() {
           isError: true
         };
       }
+      const workingDirectory = context.workingDirectory;
       const trimmedCommand = command.trim();
       if (!trimmedCommand.startsWith("git ")) {
         return {
@@ -1536,10 +1571,10 @@ function createGitTool() {
           isError: true
         };
       }
-      logger.debug({ command: trimmedCommand, subcommand, cwd: workingDirectory2 }, "Executing git command");
+      logger.debug({ command: trimmedCommand, subcommand, cwd: workingDirectory }, "Executing git command");
       try {
         const result = await execaCommand(trimmedCommand, {
-          cwd: workingDirectory2,
+          cwd: workingDirectory,
           timeout: GIT_TIMEOUT_MS,
           reject: false,
           env: {
@@ -1583,15 +1618,7 @@ function createGitTool() {
 }
 
 // src/tools/index.ts
-function createDefaultRegistry(context) {
-  setReadProjectRoot(context.projectRoot);
-  setWriteProjectRoot(context.projectRoot);
-  setEditProjectRoot(context.projectRoot);
-  setGlobProjectRoot(context.projectRoot);
-  setGrepProjectRoot(context.projectRoot);
-  setBashWorkingDirectory(context.workingDirectory);
-  setBashBlockedCommands(context.blockedCommands);
-  setGitWorkingDirectory(context.workingDirectory);
+function createDefaultRegistry(_context) {
   const registry = new ToolRegistry();
   registry.register(createReadTool());
   registry.register(createWriteTool());
@@ -1605,6 +1632,6 @@ function createDefaultRegistry(context) {
   return registry;
 }
 
-export { ToolRegistry, createBashTool, createDefaultRegistry, createEditTool, createGitTool, createGlobTool, createGrepTool, createReadTool, createWebFetchTool, createWebSearchTool, createWriteTool, setBashBlockedCommands, setBashWorkingDirectory, setEditProjectRoot, setGitWorkingDirectory, setGlobProjectRoot, setGrepProjectRoot, setReadProjectRoot, setWebSearchProvider, setWriteProjectRoot };
-//# sourceMappingURL=chunk-Y5XVD2CD.js.map
-//# sourceMappingURL=chunk-Y5XVD2CD.js.map
+export { ToolRegistry, createBashTool, createDefaultRegistry, createEditTool, createGitTool, createGlobTool, createGrepTool, createReadTool, createWebFetchTool, createWebSearchTool, createWriteTool, setWebSearchProvider };
+//# sourceMappingURL=chunk-FFS4T7BZ.js.map
+//# sourceMappingURL=chunk-FFS4T7BZ.js.map