codebase-snapshot 0.9.4 → 0.9.6

package/dist/index.d.cts

@@ -422,7 +422,58 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.4";
+declare const GENERATOR_VERSION = "0.9.6";
+
+/** The one endpoint this package will ever request. */
+declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
+/** A result younger than this is trusted without asking again. */
+declare const CHECK_INTERVAL_MS: number;
+/**
+ * How long a *failed* check is remembered.
+ *
+ * Shorter than the success interval on purpose: one offline moment must not hide a release for a
+ * day, and one hostile network must not cause a retry on every single run.
+ */
+declare const FAILURE_INTERVAL_MS: number;
+/** Bounds the whole request. A slow registry is not the user's problem. */
+declare const REQUEST_TIMEOUT_MS = 1200;
+interface UpdateNotice {
+    current: string;
+    latest: string;
+}
+interface UpdateCheckOptions {
+    current: string;
+    /** Absolute path to the cache file. */
+    cacheFile: string;
+    /** Milliseconds since the epoch. Injectable so tests do not sleep. */
+    now?: () => number;
+    /** Returns the published version, or null when it could not be determined. */
+    fetchLatest?: (url: string, timeoutMs: number) => Promise<string | null>;
+    enabled?: boolean;
+}
+/** True when `candidate` is a strictly higher release than `current`. */
+declare function isNewer(candidate: string, current: string): boolean;
+/** The per-user cache directory, following each platform's convention. */
+declare function cacheDirectory(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
+declare function cacheFilePath(env?: NodeJS.ProcessEnv): string;
+/**
+ * Whether this invocation should ask at all.
+ *
+ * Conservative by design: anything it does not recognise as an interactive, human-facing run is
+ * skipped. Being wrong in that direction costs a feature nobody sees; being wrong the other way
+ * spends a CI job's network and pollutes a machine-readable stream.
+ */
+declare function shouldCheck(argv: readonly string[], env: NodeJS.ProcessEnv): boolean;
+/** One HTTPS GET with a hard timeout. Resolves null for every failure. */
+declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<string | null>;
+/**
+ * Returns a notice when a newer version is published, or null.
+ *
+ * Never throws: the caller runs this alongside a real command and must not be affected by it.
+ */
+declare function checkForUpdate(options: UpdateCheckOptions): Promise<UpdateNotice | null>;
+/** The two lines a user sees, or an empty string when there is nothing to say. */
+declare function formatUpdateNotice(notice: UpdateNotice): string;
 
 declare const DEFAULT_SECRET_PATTERNS: SecretRule[];
 
@@ -773,6 +824,7 @@ declare function profileForPath(path: string): LanguageProfile | null;
 declare function summarizeWithProfile(path: string, content: string): HeuristicResult | null;
 
 declare const SCHEMA_VERSION = "3.0.0";
+
 interface GenerateOptions {
     /** Compute the full manifest but write nothing to disk. */
     dryRun?: boolean;
@@ -813,4 +865,4 @@ declare function generateSnapshot(configInput?: SnapshotConfig | ResolvedSnapsho
 /** Promise-returning wrapper for consumers that prefer an async call site. */
 declare function generateSnapshotAsync(configInput?: SnapshotConfig | ResolvedSnapshotConfig | null, options?: GenerateOptions): Promise<Manifest>;
 
-export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PRESETS, PartMetadata, PromptCancelled, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, firstRunMessage, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot };
+export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot };

package/dist/index.d.ts

@@ -422,7 +422,58 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.4";
+declare const GENERATOR_VERSION = "0.9.6";
+
+/** The one endpoint this package will ever request. */
+declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
+/** A result younger than this is trusted without asking again. */
+declare const CHECK_INTERVAL_MS: number;
+/**
+ * How long a *failed* check is remembered.
+ *
+ * Shorter than the success interval on purpose: one offline moment must not hide a release for a
+ * day, and one hostile network must not cause a retry on every single run.
+ */
+declare const FAILURE_INTERVAL_MS: number;
+/** Bounds the whole request. A slow registry is not the user's problem. */
+declare const REQUEST_TIMEOUT_MS = 1200;
+interface UpdateNotice {
+    current: string;
+    latest: string;
+}
+interface UpdateCheckOptions {
+    current: string;
+    /** Absolute path to the cache file. */
+    cacheFile: string;
+    /** Milliseconds since the epoch. Injectable so tests do not sleep. */
+    now?: () => number;
+    /** Returns the published version, or null when it could not be determined. */
+    fetchLatest?: (url: string, timeoutMs: number) => Promise<string | null>;
+    enabled?: boolean;
+}
+/** True when `candidate` is a strictly higher release than `current`. */
+declare function isNewer(candidate: string, current: string): boolean;
+/** The per-user cache directory, following each platform's convention. */
+declare function cacheDirectory(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
+declare function cacheFilePath(env?: NodeJS.ProcessEnv): string;
+/**
+ * Whether this invocation should ask at all.
+ *
+ * Conservative by design: anything it does not recognise as an interactive, human-facing run is
+ * skipped. Being wrong in that direction costs a feature nobody sees; being wrong the other way
+ * spends a CI job's network and pollutes a machine-readable stream.
+ */
+declare function shouldCheck(argv: readonly string[], env: NodeJS.ProcessEnv): boolean;
+/** One HTTPS GET with a hard timeout. Resolves null for every failure. */
+declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<string | null>;
+/**
+ * Returns a notice when a newer version is published, or null.
+ *
+ * Never throws: the caller runs this alongside a real command and must not be affected by it.
+ */
+declare function checkForUpdate(options: UpdateCheckOptions): Promise<UpdateNotice | null>;
+/** The two lines a user sees, or an empty string when there is nothing to say. */
+declare function formatUpdateNotice(notice: UpdateNotice): string;
 
 declare const DEFAULT_SECRET_PATTERNS: SecretRule[];
 
@@ -773,6 +824,7 @@ declare function profileForPath(path: string): LanguageProfile | null;
 declare function summarizeWithProfile(path: string, content: string): HeuristicResult | null;
 
 declare const SCHEMA_VERSION = "3.0.0";
+
 interface GenerateOptions {
     /** Compute the full manifest but write nothing to disk. */
     dryRun?: boolean;
@@ -813,4 +865,4 @@ declare function generateSnapshot(configInput?: SnapshotConfig | ResolvedSnapsho
 /** Promise-returning wrapper for consumers that prefer an async call site. */
 declare function generateSnapshotAsync(configInput?: SnapshotConfig | ResolvedSnapshotConfig | null, options?: GenerateOptions): Promise<Manifest>;
 
-export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PRESETS, PartMetadata, PromptCancelled, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, firstRunMessage, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot };
+export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot };

package/dist/index.js

@@ -1,3 +1,3 @@
-export { ARTIFACT_NAMES, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PRESETS, PromptCancelled, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, firstRunMessage, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot } from './chunk-FCWD4LY7.js';
+export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PACKAGE_LATEST_URL, PRESETS, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot } from './chunk-3KUL3QRH.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/mcp.cjs

@@ -273,6 +273,18 @@ function applyDefaults(schema, value) {
   }
   return out;
 }
+function coerceNumericStrings(schema, value) {
+  const out = { ...value };
+  for (const [key, propertySchema] of Object.entries(schema.properties)) {
+    const raw = out[key];
+    if (typeof raw !== "string") continue;
+    if (propertySchema.type !== "number" && propertySchema.type !== "integer") continue;
+    if (raw.trim().length === 0) continue;
+    const parsed = Number(raw);
+    if (Number.isFinite(parsed)) out[key] = parsed;
+  }
+  return out;
+}
 
 // src/mcp/server.ts
 function capabilities() {
@@ -361,7 +373,8 @@ function createMcpServer(options) {
     if (!isJsonObject(rawArguments)) {
       return errorResponse(id, ERROR_CODES.invalidParams, '"arguments" must be a JSON object.');
     }
-    const problems = validateArguments(tool.inputSchema, rawArguments);
+    const supplied = coerceNumericStrings(tool.inputSchema, rawArguments);
+    const problems = validateArguments(tool.inputSchema, supplied);
     if (problems.length > 0) {
       return ok(
         id,
@@ -373,7 +386,7 @@ function createMcpServer(options) {
         modern
       );
     }
-    const args = applyDefaults(tool.inputSchema, rawArguments);
+    const args = applyDefaults(tool.inputSchema, supplied);
     let outcome;
     try {
       outcome = await tool.handler(args, options.context);
@@ -6115,7 +6128,7 @@ function validateSnapshot(configInput) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.4";
+var GENERATOR_VERSION = "0.9.6";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;
@@ -8316,6 +8329,7 @@ var VALIDATE_OPTIONS = [
   "no-config",
   "discovery",
   "format",
+  "no-update-check",
   "mode",
   "help",
   "version"
@@ -8339,6 +8353,7 @@ var COMMAND_OPTION_SCOPE = {
     "watch",
     "autopilot",
     "no-install",
+    "no-update-check",
     "help",
     "version"
   ],
@@ -8354,6 +8369,7 @@ var COMMAND_OPTION_SCOPE = {
     "skip-artifacts",
     "only-artifacts",
     "no-config",
+    "no-update-check",
     "format",
     "mode",
     "help",
@@ -8371,12 +8387,13 @@ var COMMAND_OPTION_SCOPE = {
     "only-artifacts",
     "no-config",
     "discovery",
+    "no-update-check",
     "format",
     "mode",
     "help",
     "version"
   ],
-  diff: ["format", "mode", "no-config", "help", "version"],
+  diff: ["format", "mode", "no-config", "no-update-check", "help", "version"],
   describe: ["format", "mode", "help", "version"],
   init: [
     "cwd",
@@ -8391,6 +8408,7 @@ var COMMAND_OPTION_SCOPE = {
     "yes",
     "force",
     "dry-run",
+    "no-update-check",
     "format",
     "mode",
     "help",
@@ -8414,6 +8432,7 @@ var COMMAND_OPTION_SCOPE = {
     "force",
     "no-install",
     "dry-run",
+    "no-update-check",
     "format",
     "mode",
     "help",
@@ -8777,6 +8796,13 @@ function buildAgentContract() {
         default: false,
         appliesTo: optionAppliesTo("no-install"),
         summary: "Skip installing the dependency before generating: `setup`, or `generate --autopilot` (CI, offline, or a lockfile you do not want a package manager to touch)."
+      },
+      {
+        flag: "--no-update-check",
+        type: "boolean",
+        default: false,
+        appliesTo: optionAppliesTo("no-update-check"),
+        summary: "Skip the once-a-day check for a newer published version. The check is already skipped when stdout is not a terminal, in CI, in a JSON invocation, and in `mcp`, which makes no network requests."
       }
     ],
     presets: PRESETS.map((preset) => ({
@@ -9385,6 +9411,7 @@ exports.buildPrompts = buildPrompts;
 exports.buildResourceProvider = buildResourceProvider;
 exports.buildTools = buildTools;
 exports.classifyRequest = classifyRequest;
+exports.coerceNumericStrings = coerceNumericStrings;
 exports.createLineReader = createLineReader;
 exports.createMcpServer = createMcpServer;
 exports.createServer = createServer;

package/dist/mcp.d.cts

@@ -395,5 +395,18 @@ declare const SERVER_INSTRUCTIONS: string;
 
 /** Human-readable problems, each prefixed with the argument path that caused it. */
 declare function validateArguments(schema: InputSchema, value: unknown): string[];
+/**
+ * Accepts a numeric argument that arrived as a digit string.
+ *
+ * Reported from a real client: the same `snapshot_read` call succeeded through one code path and
+ * was rejected through another, because one of them serialised `fromLine` as `"1"`. A digit string
+ * is the same value in a different spelling, and the caller cannot fix what their client did — so
+ * refusing it makes the tool unusable there while teaching nobody anything.
+ *
+ * This is not a relaxation of type checking: only fields the schema declares as numbers are
+ * touched, only strings that parse to a finite number are converted, and anything else still fails
+ * validation with the type message. `"ten"`, `""` and `"1.5"` for an integer all still fail.
+ */
+declare function coerceNumericStrings(schema: InputSchema, value: JsonObject): JsonObject;
 
-export { ERROR_CODES, type JsonRpcResponse, type JsonSchema, LEGACY_PROTOCOL_VERSIONS, type LineReaderOptions, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, type McpPrompt, type McpResourceContents, type McpResourceDescriptor, type McpResourceTemplate, type McpServer, type McpServerInfo, type McpServerOptions, type McpTool, type MessageWriter, type ProtocolEra, type ResourceProvider, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, type ServerOptions, type SessionState, type ToolAnnotations, type ToolContext, type ToolOutcome, buildPrompts, buildResourceProvider, buildTools, classifyRequest, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments };
+export { ERROR_CODES, type JsonRpcResponse, type JsonSchema, LEGACY_PROTOCOL_VERSIONS, type LineReaderOptions, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, type McpPrompt, type McpResourceContents, type McpResourceDescriptor, type McpResourceTemplate, type McpServer, type McpServerInfo, type McpServerOptions, type McpTool, type MessageWriter, type ProtocolEra, type ResourceProvider, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, type ServerOptions, type SessionState, type ToolAnnotations, type ToolContext, type ToolOutcome, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments };

package/dist/mcp.d.ts

@@ -395,5 +395,18 @@ declare const SERVER_INSTRUCTIONS: string;
 
 /** Human-readable problems, each prefixed with the argument path that caused it. */
 declare function validateArguments(schema: InputSchema, value: unknown): string[];
+/**
+ * Accepts a numeric argument that arrived as a digit string.
+ *
+ * Reported from a real client: the same `snapshot_read` call succeeded through one code path and
+ * was rejected through another, because one of them serialised `fromLine` as `"1"`. A digit string
+ * is the same value in a different spelling, and the caller cannot fix what their client did — so
+ * refusing it makes the tool unusable there while teaching nobody anything.
+ *
+ * This is not a relaxation of type checking: only fields the schema declares as numbers are
+ * touched, only strings that parse to a finite number are converted, and anything else still fails
+ * validation with the type message. `"ten"`, `""` and `"1.5"` for an integer all still fail.
+ */
+declare function coerceNumericStrings(schema: InputSchema, value: JsonObject): JsonObject;
 
-export { ERROR_CODES, type JsonRpcResponse, type JsonSchema, LEGACY_PROTOCOL_VERSIONS, type LineReaderOptions, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, type McpPrompt, type McpResourceContents, type McpResourceDescriptor, type McpResourceTemplate, type McpServer, type McpServerInfo, type McpServerOptions, type McpTool, type MessageWriter, type ProtocolEra, type ResourceProvider, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, type ServerOptions, type SessionState, type ToolAnnotations, type ToolContext, type ToolOutcome, buildPrompts, buildResourceProvider, buildTools, classifyRequest, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments };
+export { ERROR_CODES, type JsonRpcResponse, type JsonSchema, LEGACY_PROTOCOL_VERSIONS, type LineReaderOptions, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, type McpPrompt, type McpResourceContents, type McpResourceDescriptor, type McpResourceTemplate, type McpServer, type McpServerInfo, type McpServerOptions, type McpTool, type MessageWriter, type ProtocolEra, type ResourceProvider, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, type ServerOptions, type SessionState, type ToolAnnotations, type ToolContext, type ToolOutcome, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments };

package/dist/mcp.js

@@ -1,4 +1,4 @@
-export { ERROR_CODES, LEGACY_PROTOCOL_VERSIONS, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, buildPrompts, buildResourceProvider, buildTools, classifyRequest, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments } from './chunk-EWZYK3VX.js';
-import './chunk-FCWD4LY7.js';
+export { ERROR_CODES, LEGACY_PROTOCOL_VERSIONS, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments } from './chunk-ZKZOGGM3.js';
+import './chunk-3KUL3QRH.js';
 //# sourceMappingURL=mcp.js.map
 //# sourceMappingURL=mcp.js.map

package/docs/cli.md

@@ -174,7 +174,7 @@ The whole first run in one command, with defaults and no prompts. This is the sa
 🚀 Setup for: /path/to/repo
 ✅ Created snapshot.config.ts (preset: nextjs)
    Added npm scripts: snapshot, snapshot:validate
-   Added devDependency: codebase-snapshot ^0.9.4
+   Added devDependency: codebase-snapshot ^0.9.6
    Added to .gitignore: snapshot/, snapshot.tmp/
 ⏳ Installing dependencies…
 ✅ Installed dependencies (npm install, 2.1s)
@@ -211,7 +211,7 @@ It also has three side effects on files you own, and it says so when it does the
 ```
 ✅ Created snapshot.config.ts (preset: node-lib)
    Added npm scripts: snapshot, snapshot:validate
-   Added devDependency: codebase-snapshot ^0.9.4
+   Added devDependency: codebase-snapshot ^0.9.6
    Added to .gitignore: snapshot/, snapshot.tmp/
 ```
 
@@ -225,6 +225,16 @@ It also has three side effects on files you own, and it says so when it does the
 - `snapshot/` and `snapshot.tmp/` are appended to `.gitignore` if they are not already listed;
   the file is created if missing, and entries already present are not duplicated.
 
+### Going back
+
+At a terminal, `init` asks five questions and every one of them can be revisited: **`←`** goes back
+on a list or a text field, **`b`** on a list or a confirmation. `text` takes `←` alone because `b` is
+a character you may be typing, and `confirm` takes `b` alone because `←`/`→` already mean yes/no.
+
+Back steps to the previous question with your earlier answer still selected; back from the first one
+returns to *"How should I set this up?"*. Answering **No** at the review steps back rather than
+abandoning the run — Ctrl+C is how you abandon.
+
 Nothing else in the repository is touched: no `AGENTS.md`, no `.claude/`, no `.cursor/`. In a
 repository with a `package.json` and no config, `git status` shows the config as the only new
 file.
@@ -475,6 +485,23 @@ So `codebase-snapshot describe --format json > contract.json`,
 `codebase-snapshot validate --format json | jq .drift` and
 `codebase-snapshot report --format json || jq -r .error.message` all work.
 
+## Update notice
+
+Once a day, after a command finishes, `snapshot` asks the npm registry whether a newer version is
+published and prints two lines on stderr if there is one:
+
+```
+↑ codebase-snapshot 0.9.6 is available — you have 0.9.5.
+  npm install -g codebase-snapshot
+```
+
+The request goes to `registry.npmjs.org/codebase-snapshot/latest`, carries no identifier of any
+kind, and its answer is remembered for 24 hours — one request per machine per day at most. It is
+skipped when stdout is not a terminal, in CI, in any `--format json` run, and in `mcp`, whose server
+makes no outbound connections at all.
+
+`--no-update-check` or `CODEBASE_SNAPSHOT_NO_UPDATE_CHECK=1` turns it off entirely.
+
 ## Examples
 
 ```bash

package/docs/mcp.md

@@ -10,7 +10,7 @@ walk — that the client sees.
 ## Start it
 
 ```bash
-npx -y codebase-snapshot@0.9.4 mcp
+npx -y codebase-snapshot@0.9.6 mcp
 ```
 
 The server serves the directory it was started in. `--cwd <path>` points it elsewhere, and that
@@ -25,7 +25,7 @@ Claude Desktop and Cursor:
   "mcpServers": {
     "codebase-snapshot": {
       "command": "npx",
-      "args": ["-y", "codebase-snapshot@0.9.4", "mcp", "--cwd", "/absolute/path/to/repo"]
+      "args": ["-y", "codebase-snapshot@0.9.6", "mcp", "--cwd", "/absolute/path/to/repo"]
     }
   }
 }
@@ -34,7 +34,7 @@ Claude Desktop and Cursor:
 Claude Code registers the same thing from a shell:
 
 ```bash
-claude mcp add codebase-snapshot -- npx -y codebase-snapshot@0.9.4 mcp --cwd /absolute/path/to/repo
+claude mcp add codebase-snapshot -- npx -y codebase-snapshot@0.9.6 mcp --cwd /absolute/path/to/repo
 ```
 
 On Windows, wrap the command as `cmd /c npx` with the same arguments — `npx` is a `.cmd` shim

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-snapshot",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "Pack a codebase for an LLM into budgeted Markdown parts, with a manifest of every file and skip, and validate to prove the snapshot is current.",
   "keywords": [
     "codebase",