codebase-snapshot 0.9.7 → 0.9.9

package/CHANGELOG.md

@@ -21,6 +21,65 @@ Two versions exist on the registry that are not releases, and both are deprecate
 Deleting them requires account-level rights that the release pipeline does not have, so they are
 deprecated with an explanatory message instead. `latest` has pointed at 0.9.0 since it existed.
 
+## 0.9.9
+
+### `snapshot -version` now answers the question it was asked
+
+Reported from a real terminal, by someone trying to find out which version they had:
+
+```
+> snapshot -version
+❌ Unknown option '-e'. To specify a positional argument starting with a '-', place it at the
+   end of the command after '--', as in '-- "-e"'
+```
+
+That message came from `node:util.parseArgs`, which reads `-version` as the short-flag cluster
+`-v -e -r -s -i -o -n` and objects to the third character. It names something the caller never
+typed, and it buries the actual mistake — one dash where two belong — which is exactly the
+information a usage error exists to give.
+
+Every token of that shape is now caught before the parser sees it and answered as a spelling
+problem:
+
+```
+❌ Unknown option '-version'. Options start with two dashes — did you mean '--version'?
+```
+
+`-cwd`, `-help`, `-format` and `-dry-run` get the same treatment with their own long form
+suggested. A token that is not an option at all (`-frobnicate`) is told to go after `--` instead of
+being pointed at a `--frobnicate` that does not exist, and a cluster of short flags that *are* real
+(`-vh`) still works.
+
+### The update notice suggests the command that fits this copy
+
+It said `npm install -g codebase-snapshot` to everybody, which is wrong for two of the three ways
+people run this. `setup` deliberately adds the package as a **devDependency**, where `-g` installs a
+second global copy that shadows the pinned one; an `npx` invocation is a cache entry that the next
+`@latest` run replaces by itself.
+
+The suggested command is now derived from the path Node is running: `-g` for a global install,
+`npm install codebase-snapshot@latest` for a dependency of the project being worked in (npm rewrites
+the entry where it already is, so a devDependency stays one), and `npx -y codebase-snapshot@latest`
+for npx. The classification is `_npx` in the path for the cache, and `node_modules` under the
+working directory for a local dependency — evidence rather than a guess.
+
+## 0.9.8
+
+### A wrapped menu no longer changes height under the cursor
+
+Found while checking 0.9.7, by rendering it at 48 columns. The wrapping added there made a frame
+the height it claimed to be, but the wrap point was measured from a line's leading whitespace — and
+a selected row starts `  ❯ ` while an unselected one starts `    `. So the same hint wrapped one
+word differently depending on whether the cursor was on it, and at some widths the whole menu grew
+a row as you moved through it.
+
+Continuation rows now line up with the *content*: the marker gutter is measured rather than guessed,
+which keeps the wrap stable — and puts a wrapped hint under the label instead of two columns past
+it, which reads better at any width.
+
+`tests/wizard-frame.test.js` now also asserts that five repaints of the same menu are all the same
+height, at 48 columns: the width where it used to flicker.
+
 ## 0.9.7
 
 ### The setup menu stops eating its own screen

package/README.md

@@ -200,7 +200,7 @@ Everything an agent needs is available as data, and the tool can install its own
 ```bash
 npx codebase-snapshot describe --format json   # contract: workflow, options, exit codes
 npx codebase-snapshot skill --install          # into .claude/skills + .cursor/rules
-npx -y codebase-snapshot@0.9.7 mcp             # or serve it over MCP
+npx -y codebase-snapshot@0.9.9 mcp             # or serve it over MCP
 ```
 
 An agent told only "use `npx codebase-snapshot`" can read the contract, follow its ordered

package/dist/bin.js

@@ -4346,7 +4346,7 @@ function gitignorePath(cwd, filePath) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.7";
+var GENERATOR_VERSION = "0.9.9";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;
@@ -4531,13 +4531,15 @@ function displayWidth(line) {
   }
   return width;
 }
+var GUTTER_PATTERN = /^[ \t]*(?:[❯◆◻◼▏✖][ \t]+)*/;
 function wrapOneLine(line, limit) {
   if (displayWidth(line) <= limit) return [line];
-  const indent = /^[ \t]*/.exec(line)?.[0] ?? "";
-  const continuation = `${indent}  `;
+  const gutter = GUTTER_PATTERN.exec(line)?.[0] ?? "";
+  const gutterWidth = displayWidth(gutter);
+  const continuation = " ".repeat(gutterWidth);
   const rows = [];
-  let prefix = indent;
-  let rest = line.slice(indent.length).trimEnd();
+  let prefix = gutter;
+  let rest = line.slice(gutter.length).trimEnd();
   while (rest.length > 0) {
     const room = limit - displayWidth(prefix);
     if (room <= 0 || displayWidth(rest) <= room) {
@@ -6955,6 +6957,23 @@ var PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var FAILURE_INTERVAL_MS = 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1200;
+function installKind(scriptPath = process.argv[1] ?? "", cwd = process.cwd()) {
+  const normalise = (value) => value.replace(/\\/g, "/").replace(/\/+$/, "");
+  const script = normalise(scriptPath);
+  if (script === "") return "global";
+  const scriptKey = script.toLowerCase();
+  if (scriptKey.includes("/_npx/")) return "npx";
+  const root = normalise(cwd).toLowerCase();
+  if (scriptKey.includes("/node_modules/") && root !== "" && scriptKey.startsWith(`${root}/`)) {
+    return "local";
+  }
+  return "global";
+}
+function updateCommand(kind) {
+  if (kind === "npx") return "npx -y codebase-snapshot@latest";
+  if (kind === "local") return "npm install codebase-snapshot@latest";
+  return "npm install -g codebase-snapshot";
+}
 function versionParts(value) {
   const core = value.trim().replace(/^v/i, "").split("-")[0];
   return core.split(".").map((part) => {
@@ -7103,9 +7122,9 @@ async function checkForUpdate(options) {
   if (!latest) return null;
   return isNewer(latest, options.current) ? { current: options.current, latest } : null;
 }
-function formatUpdateNotice(notice) {
+function formatUpdateNotice(notice, kind) {
   return `\u2191 codebase-snapshot ${notice.latest} is available \u2014 you have ${notice.current}.
-  npm install -g codebase-snapshot`;
+  ${updateCommand(kind)}`;
 }
 
 // src/index.ts
@@ -11229,7 +11248,27 @@ function parseArtifactList(raw, flag) {
   }
   return names;
 }
+var SHORT_FLAGS = new Set(
+  Object.values(CLI_OPTIONS).map((spec) => spec.short).filter((short) => typeof short === "string").map((short) => `-${short}`)
+);
+function misdashedLongOption(argv) {
+  for (const token of argv) {
+    if (token === "--") break;
+    if (!/^-[A-Za-z][A-Za-z0-9-]+$/.test(token)) continue;
+    if ([...token.slice(1)].every((character) => SHORT_FLAGS.has(`-${character}`))) continue;
+    return token;
+  }
+  return null;
+}
 function parseCliArgs(argv) {
+  const misdashed = misdashedLongOption(argv);
+  if (misdashed !== null) {
+    const long = `--${misdashed.slice(1)}`;
+    const known = Object.prototype.hasOwnProperty.call(CLI_OPTIONS, misdashed.slice(1));
+    throw new UsageError(
+      known ? `Unknown option '${misdashed}'. Options start with two dashes \u2014 did you mean '${long}'?` : `Unknown option '${misdashed}'. Options start with two dashes; if '${misdashed}' is a path or an argument, put it after '--'.`
+    );
+  }
   let parsed;
   try {
     parsed = parseArgs({
@@ -11811,7 +11850,7 @@ async function main(argv = process.argv.slice(2)) {
   if (pending) {
     const notice = await pending;
     if (notice) process.stderr.write(`
-${formatUpdateNotice(notice)}
+${formatUpdateNotice(notice, installKind())}
 `);
   }
   return code;

package/dist/{chunk-DPK6ZTOG.js → chunk-HQBEQ67K.js}

@@ -1,4 +1,4 @@
-import { GENERATOR_VERSION, MIN_MAX_PART_BYTES, SCHEMA_VERSION, GENERATOR_NAME, ARTIFACT_NAMES, PRESETS, generateSnapshot, validateSnapshot, explainPath, renderExplainText, describeManifestShapeProblem, loadConfigFileDetailed, parseByteSize, resolveConfig } from './chunk-QABL7NRC.js';
+import { GENERATOR_VERSION, MIN_MAX_PART_BYTES, SCHEMA_VERSION, GENERATOR_NAME, ARTIFACT_NAMES, PRESETS, generateSnapshot, validateSnapshot, explainPath, renderExplainText, describeManifestShapeProblem, loadConfigFileDetailed, parseByteSize, resolveConfig } from './chunk-KUVFTJHK.js';
 import * as fs from 'fs';
 import * as path2 from 'path';
 
@@ -2599,5 +2599,5 @@ async function runStdioServer(options) {
 }
 
 export { COMMAND_OPTION_SCOPE, ERROR_CODES, LEGACY_PROTOCOL_VERSIONS, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, SERVER_INSTRUCTIONS, SKILL_NAME, SUPPORTED_PROTOCOL_VERSIONS, buildAgentContract, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, commandsForOption, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, renderContractText, renderSkill, runStdioServer, validateArguments };
-//# sourceMappingURL=chunk-DPK6ZTOG.js.map
-//# sourceMappingURL=chunk-DPK6ZTOG.js.map
+//# sourceMappingURL=chunk-HQBEQ67K.js.map
+//# sourceMappingURL=chunk-HQBEQ67K.js.map

package/dist/{chunk-QABL7NRC.js → chunk-KUVFTJHK.js}

@@ -5474,7 +5474,7 @@ function validateSnapshot(configInput) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.7";
+var GENERATOR_VERSION = "0.9.9";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;
@@ -5484,6 +5484,23 @@ var PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var FAILURE_INTERVAL_MS = 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1200;
+function installKind(scriptPath = process.argv[1] ?? "", cwd = process.cwd()) {
+  const normalise = (value) => value.replace(/\\/g, "/").replace(/\/+$/, "");
+  const script = normalise(scriptPath);
+  if (script === "") return "global";
+  const scriptKey = script.toLowerCase();
+  if (scriptKey.includes("/_npx/")) return "npx";
+  const root = normalise(cwd).toLowerCase();
+  if (scriptKey.includes("/node_modules/") && root !== "" && scriptKey.startsWith(`${root}/`)) {
+    return "local";
+  }
+  return "global";
+}
+function updateCommand(kind) {
+  if (kind === "npx") return "npx -y codebase-snapshot@latest";
+  if (kind === "local") return "npm install codebase-snapshot@latest";
+  return "npm install -g codebase-snapshot";
+}
 function versionParts(value) {
   const core = value.trim().replace(/^v/i, "").split("-")[0];
   return core.split(".").map((part) => {
@@ -5632,9 +5649,9 @@ async function checkForUpdate(options) {
   if (!latest) return null;
   return isNewer(latest, options.current) ? { current: options.current, latest } : null;
 }
-function formatUpdateNotice(notice) {
+function formatUpdateNotice(notice, kind) {
   return `\u2191 codebase-snapshot ${notice.latest} is available \u2014 you have ${notice.current}.
-  npm install -g codebase-snapshot`;
+  ${updateCommand(kind)}`;
 }
 function describeMatcher(matcher) {
   if (typeof matcher === "string") return matcher;
@@ -6250,13 +6267,15 @@ function displayWidth(line) {
   }
   return width;
 }
+var GUTTER_PATTERN = /^[ \t]*(?:[❯◆◻◼▏✖][ \t]+)*/;
 function wrapOneLine(line, limit) {
   if (displayWidth(line) <= limit) return [line];
-  const indent = /^[ \t]*/.exec(line)?.[0] ?? "";
-  const continuation = `${indent}  `;
+  const gutter = GUTTER_PATTERN.exec(line)?.[0] ?? "";
+  const gutterWidth = displayWidth(gutter);
+  const continuation = " ".repeat(gutterWidth);
   const rows = [];
-  let prefix = indent;
-  let rest = line.slice(indent.length).trimEnd();
+  let prefix = gutter;
+  let rest = line.slice(gutter.length).trimEnd();
   while (rest.length > 0) {
     const room = limit - displayWidth(prefix);
     if (room <= 0 || displayWidth(rest) <= room) {
@@ -8321,6 +8340,6 @@ async function generateSnapshotAsync(configInput, options) {
   return generateSnapshot(configInput, options);
 }
 
-export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, appendGitignoreEntries, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defaultIO, defineConfig, describeManifestShapeProblem, detectLanguage, detectPreset, displayWidth, escapeControls, explainPath, fenceForContent, fenceForText, fetchLatestVersion, findConfigFile, firstRunMessage, formatNumber, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, gitignorePath, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isDiscoveryMode, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, unknownPresetMessage, validateSnapshot, wrapLines };
-//# sourceMappingURL=chunk-QABL7NRC.js.map
-//# sourceMappingURL=chunk-QABL7NRC.js.map
+export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, appendGitignoreEntries, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defaultIO, defineConfig, describeManifestShapeProblem, detectLanguage, detectPreset, displayWidth, escapeControls, explainPath, fenceForContent, fenceForText, fetchLatestVersion, findConfigFile, firstRunMessage, formatNumber, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, gitignorePath, globToRegExp, hasPriorSnapshot, installKind, isBinaryBuffer, isBinaryExtension, isBinaryFile, isDiscoveryMode, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, unknownPresetMessage, updateCommand, validateSnapshot, wrapLines };
+//# sourceMappingURL=chunk-KUVFTJHK.js.map
+//# sourceMappingURL=chunk-KUVFTJHK.js.map

package/dist/cli.cjs

@@ -4340,7 +4340,7 @@ function gitignorePath(cwd, filePath) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.7";
+var GENERATOR_VERSION = "0.9.9";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;
@@ -4518,13 +4518,15 @@ function displayWidth(line) {
   }
   return width;
 }
+var GUTTER_PATTERN = /^[ \t]*(?:[❯◆◻◼▏✖][ \t]+)*/;
 function wrapOneLine(line, limit) {
   if (displayWidth(line) <= limit) return [line];
-  const indent = /^[ \t]*/.exec(line)?.[0] ?? "";
-  const continuation = `${indent}  `;
+  const gutter = GUTTER_PATTERN.exec(line)?.[0] ?? "";
+  const gutterWidth = displayWidth(gutter);
+  const continuation = " ".repeat(gutterWidth);
   const rows = [];
-  let prefix = indent;
-  let rest = line.slice(indent.length).trimEnd();
+  let prefix = gutter;
+  let rest = line.slice(gutter.length).trimEnd();
   while (rest.length > 0) {
     const room = limit - displayWidth(prefix);
     if (room <= 0 || displayWidth(rest) <= room) {
@@ -6919,6 +6921,23 @@ var PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var FAILURE_INTERVAL_MS = 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1200;
+function installKind(scriptPath = process.argv[1] ?? "", cwd = process.cwd()) {
+  const normalise = (value) => value.replace(/\\/g, "/").replace(/\/+$/, "");
+  const script = normalise(scriptPath);
+  if (script === "") return "global";
+  const scriptKey = script.toLowerCase();
+  if (scriptKey.includes("/_npx/")) return "npx";
+  const root = normalise(cwd).toLowerCase();
+  if (scriptKey.includes("/node_modules/") && root !== "" && scriptKey.startsWith(`${root}/`)) {
+    return "local";
+  }
+  return "global";
+}
+function updateCommand(kind) {
+  if (kind === "npx") return "npx -y codebase-snapshot@latest";
+  if (kind === "local") return "npm install codebase-snapshot@latest";
+  return "npm install -g codebase-snapshot";
+}
 function versionParts(value) {
   const core = value.trim().replace(/^v/i, "").split("-")[0];
   return core.split(".").map((part) => {
@@ -7067,9 +7086,9 @@ async function checkForUpdate(options) {
   if (!latest) return null;
   return isNewer(latest, options.current) ? { current: options.current, latest } : null;
 }
-function formatUpdateNotice(notice) {
+function formatUpdateNotice(notice, kind) {
   return `\u2191 codebase-snapshot ${notice.latest} is available \u2014 you have ${notice.current}.
-  npm install -g codebase-snapshot`;
+  ${updateCommand(kind)}`;
 }
 
 // src/index.ts
@@ -11182,7 +11201,27 @@ function parseArtifactList(raw, flag) {
   }
   return names;
 }
+var SHORT_FLAGS = new Set(
+  Object.values(CLI_OPTIONS).map((spec) => spec.short).filter((short) => typeof short === "string").map((short) => `-${short}`)
+);
+function misdashedLongOption(argv) {
+  for (const token of argv) {
+    if (token === "--") break;
+    if (!/^-[A-Za-z][A-Za-z0-9-]+$/.test(token)) continue;
+    if ([...token.slice(1)].every((character) => SHORT_FLAGS.has(`-${character}`))) continue;
+    return token;
+  }
+  return null;
+}
 function parseCliArgs(argv) {
+  const misdashed = misdashedLongOption(argv);
+  if (misdashed !== null) {
+    const long = `--${misdashed.slice(1)}`;
+    const known = Object.prototype.hasOwnProperty.call(CLI_OPTIONS, misdashed.slice(1));
+    throw new UsageError(
+      known ? `Unknown option '${misdashed}'. Options start with two dashes \u2014 did you mean '${long}'?` : `Unknown option '${misdashed}'. Options start with two dashes; if '${misdashed}' is a path or an argument, put it after '--'.`
+    );
+  }
   let parsed;
   try {
     parsed = util.parseArgs({
@@ -11764,7 +11803,7 @@ async function main(argv = process.argv.slice(2)) {
   if (pending) {
     const notice = await pending;
     if (notice) process.stderr.write(`
-${formatUpdateNotice(notice)}
+${formatUpdateNotice(notice, installKind())}
 `);
   }
   return code;

package/dist/cli.js

@@ -1,5 +1,5 @@
-import { buildAgentContract, runStdioServer, COMMAND_OPTION_SCOPE, commandsForOption, SKILL_NAME, renderSkill, renderContractText } from './chunk-DPK6ZTOG.js';
-import { shouldCheck, checkForUpdate, GENERATOR_VERSION, cacheFilePath, formatUpdateNotice, loadConfigFileDetailed, resolveConfig, validateSnapshot, describeManifestShapeProblem, explainPath, compareManifests, loadManifest, renderDiffText, generateSnapshot, formatNumber, isDiscoveryMode, ARTIFACT_NAMES, getPreset, unknownPresetMessage, GENERATOR_NAME, runInit, PromptCancelled, planFirstRun, isEffectivelyEmpty, isInteractive, defaultIO, hasPriorSnapshot, DEFAULT_ANSWERS, findConfigFile, firstRunMessage, parseByteSize, gitignorePath, appendGitignoreEntries, escapeControls, MIN_MAX_PART_BYTES, renderExplainText } from './chunk-QABL7NRC.js';
+import { buildAgentContract, runStdioServer, COMMAND_OPTION_SCOPE, commandsForOption, SKILL_NAME, renderSkill, renderContractText } from './chunk-HQBEQ67K.js';
+import { shouldCheck, checkForUpdate, GENERATOR_VERSION, cacheFilePath, formatUpdateNotice, installKind, loadConfigFileDetailed, resolveConfig, validateSnapshot, describeManifestShapeProblem, explainPath, compareManifests, loadManifest, renderDiffText, generateSnapshot, formatNumber, isDiscoveryMode, ARTIFACT_NAMES, getPreset, unknownPresetMessage, GENERATOR_NAME, runInit, PromptCancelled, planFirstRun, isEffectivelyEmpty, isInteractive, defaultIO, hasPriorSnapshot, DEFAULT_ANSWERS, findConfigFile, firstRunMessage, parseByteSize, gitignorePath, appendGitignoreEntries, escapeControls, MIN_MAX_PART_BYTES, renderExplainText } from './chunk-KUVFTJHK.js';
 import { spawnSync } from 'child_process';
 import * as fs from 'fs';
 import * as path2 from 'path';
@@ -269,7 +269,27 @@ function parseArtifactList(raw, flag) {
   }
   return names;
 }
+var SHORT_FLAGS = new Set(
+  Object.values(CLI_OPTIONS).map((spec) => spec.short).filter((short) => typeof short === "string").map((short) => `-${short}`)
+);
+function misdashedLongOption(argv) {
+  for (const token of argv) {
+    if (token === "--") break;
+    if (!/^-[A-Za-z][A-Za-z0-9-]+$/.test(token)) continue;
+    if ([...token.slice(1)].every((character) => SHORT_FLAGS.has(`-${character}`))) continue;
+    return token;
+  }
+  return null;
+}
 function parseCliArgs(argv) {
+  const misdashed = misdashedLongOption(argv);
+  if (misdashed !== null) {
+    const long = `--${misdashed.slice(1)}`;
+    const known = Object.prototype.hasOwnProperty.call(CLI_OPTIONS, misdashed.slice(1));
+    throw new UsageError(
+      known ? `Unknown option '${misdashed}'. Options start with two dashes \u2014 did you mean '${long}'?` : `Unknown option '${misdashed}'. Options start with two dashes; if '${misdashed}' is a path or an argument, put it after '--'.`
+    );
+  }
   let parsed;
   try {
     parsed = parseArgs({
@@ -851,7 +871,7 @@ async function main(argv = process.argv.slice(2)) {
   if (pending) {
     const notice = await pending;
     if (notice) process.stderr.write(`
-${formatUpdateNotice(notice)}
+${formatUpdateNotice(notice, installKind())}
 `);
   }
   return code;

package/dist/index.cjs

@@ -5490,7 +5490,7 @@ function validateSnapshot(configInput) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.7";
+var GENERATOR_VERSION = "0.9.9";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;
@@ -5500,6 +5500,23 @@ var PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var FAILURE_INTERVAL_MS = 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1200;
+function installKind(scriptPath = process.argv[1] ?? "", cwd = process.cwd()) {
+  const normalise = (value) => value.replace(/\\/g, "/").replace(/\/+$/, "");
+  const script = normalise(scriptPath);
+  if (script === "") return "global";
+  const scriptKey = script.toLowerCase();
+  if (scriptKey.includes("/_npx/")) return "npx";
+  const root = normalise(cwd).toLowerCase();
+  if (scriptKey.includes("/node_modules/") && root !== "" && scriptKey.startsWith(`${root}/`)) {
+    return "local";
+  }
+  return "global";
+}
+function updateCommand(kind) {
+  if (kind === "npx") return "npx -y codebase-snapshot@latest";
+  if (kind === "local") return "npm install codebase-snapshot@latest";
+  return "npm install -g codebase-snapshot";
+}
 function versionParts(value) {
   const core = value.trim().replace(/^v/i, "").split("-")[0];
   return core.split(".").map((part) => {
@@ -5648,9 +5665,9 @@ async function checkForUpdate(options) {
   if (!latest) return null;
   return isNewer(latest, options.current) ? { current: options.current, latest } : null;
 }
-function formatUpdateNotice(notice) {
+function formatUpdateNotice(notice, kind) {
   return `\u2191 codebase-snapshot ${notice.latest} is available \u2014 you have ${notice.current}.
-  npm install -g codebase-snapshot`;
+  ${updateCommand(kind)}`;
 }
 function describeMatcher(matcher) {
   if (typeof matcher === "string") return matcher;
@@ -6263,13 +6280,15 @@ function displayWidth(line) {
   }
   return width;
 }
+var GUTTER_PATTERN = /^[ \t]*(?:[❯◆◻◼▏✖][ \t]+)*/;
 function wrapOneLine(line, limit) {
   if (displayWidth(line) <= limit) return [line];
-  const indent = /^[ \t]*/.exec(line)?.[0] ?? "";
-  const continuation = `${indent}  `;
+  const gutter = GUTTER_PATTERN.exec(line)?.[0] ?? "";
+  const gutterWidth = displayWidth(gutter);
+  const continuation = " ".repeat(gutterWidth);
   const rows = [];
-  let prefix = indent;
-  let rest = line.slice(indent.length).trimEnd();
+  let prefix = gutter;
+  let rest = line.slice(gutter.length).trimEnd();
   while (rest.length > 0) {
     const room = limit - displayWidth(prefix);
     if (room <= 0 || displayWidth(rest) <= room) {
@@ -8376,6 +8395,7 @@ exports.generateSnapshotAsync = generateSnapshotAsync;
 exports.getPreset = getPreset;
 exports.globToRegExp = globToRegExp;
 exports.hasPriorSnapshot = hasPriorSnapshot;
+exports.installKind = installKind;
 exports.isBinaryBuffer = isBinaryBuffer;
 exports.isBinaryExtension = isBinaryExtension;
 exports.isBinaryFile = isBinaryFile;
@@ -8413,6 +8433,7 @@ exports.summarizeWithProfile = summarizeWithProfile;
 exports.supportsTypeScriptImports = supportsTypeScriptImports;
 exports.truncatePreview = truncatePreview;
 exports.truncateToBytes = truncateToBytes;
+exports.updateCommand = updateCommand;
 exports.validateSnapshot = validateSnapshot;
 exports.wrapLines = wrapLines;
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -422,7 +422,7 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.7";
+declare const GENERATOR_VERSION = "0.9.9";
 
 /** The one endpoint this package will ever request. */
 declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
@@ -441,6 +441,22 @@ interface UpdateNotice {
     current: string;
     latest: string;
 }
+/** How the running copy of the tool was reached, which decides how to replace it. */
+type InstallKind = "global" | "local" | "npx";
+/**
+ * Classifies the script path Node is running.
+ *
+ * The notice used to tell everybody to run `npm install -g codebase-snapshot`, and that is wrong
+ * for two of the three ways people run this. A repository that added it as a devDependency —
+ * which is exactly what `setup` does — does not want a second global copy shadowing its pinned
+ * one, and an `npx` invocation is a cache entry that the next `@latest` run replaces by itself.
+ *
+ * The path is the evidence, because it is available without asking npm anything: `_npx` is npm's
+ * own cache directory name, and a local dependency lives under the project's `node_modules`.
+ */
+declare function installKind(scriptPath?: string, cwd?: string): InstallKind;
+/** The command that replaces this copy with the published latest. */
+declare function updateCommand(kind: InstallKind): string;
 interface UpdateCheckOptions {
     current: string;
     /** Absolute path to the cache file. */
@@ -473,7 +489,7 @@ declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<s
  */
 declare function checkForUpdate(options: UpdateCheckOptions): Promise<UpdateNotice | null>;
 /** The two lines a user sees, or an empty string when there is nothing to say. */
-declare function formatUpdateNotice(notice: UpdateNotice): string;
+declare function formatUpdateNotice(notice: UpdateNotice, kind: InstallKind): string;
 
 declare const DEFAULT_SECRET_PATTERNS: SecretRule[];
 
@@ -879,4 +895,4 @@ declare function generateSnapshot(configInput?: SnapshotConfig | ResolvedSnapsho
 /** Promise-returning wrapper for consumers that prefer an async call site. */
 declare function generateSnapshotAsync(configInput?: SnapshotConfig | ResolvedSnapshotConfig | null, options?: GenerateOptions): Promise<Manifest>;
 
-export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot, wrapLines };
+export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, type InstallKind, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, installKind, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, updateCommand, validateSnapshot, wrapLines };

package/dist/index.d.ts

@@ -422,7 +422,7 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.7";
+declare const GENERATOR_VERSION = "0.9.9";
 
 /** The one endpoint this package will ever request. */
 declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
@@ -441,6 +441,22 @@ interface UpdateNotice {
     current: string;
     latest: string;
 }
+/** How the running copy of the tool was reached, which decides how to replace it. */
+type InstallKind = "global" | "local" | "npx";
+/**
+ * Classifies the script path Node is running.
+ *
+ * The notice used to tell everybody to run `npm install -g codebase-snapshot`, and that is wrong
+ * for two of the three ways people run this. A repository that added it as a devDependency —
+ * which is exactly what `setup` does — does not want a second global copy shadowing its pinned
+ * one, and an `npx` invocation is a cache entry that the next `@latest` run replaces by itself.
+ *
+ * The path is the evidence, because it is available without asking npm anything: `_npx` is npm's
+ * own cache directory name, and a local dependency lives under the project's `node_modules`.
+ */
+declare function installKind(scriptPath?: string, cwd?: string): InstallKind;
+/** The command that replaces this copy with the published latest. */
+declare function updateCommand(kind: InstallKind): string;
 interface UpdateCheckOptions {
     current: string;
     /** Absolute path to the cache file. */
@@ -473,7 +489,7 @@ declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<s
  */
 declare function checkForUpdate(options: UpdateCheckOptions): Promise<UpdateNotice | null>;
 /** The two lines a user sees, or an empty string when there is nothing to say. */
-declare function formatUpdateNotice(notice: UpdateNotice): string;
+declare function formatUpdateNotice(notice: UpdateNotice, kind: InstallKind): string;
 
 declare const DEFAULT_SECRET_PATTERNS: SecretRule[];
 
@@ -879,4 +895,4 @@ declare function generateSnapshot(configInput?: SnapshotConfig | ResolvedSnapsho
 /** Promise-returning wrapper for consumers that prefer an async call site. */
 declare function generateSnapshotAsync(configInput?: SnapshotConfig | ResolvedSnapshotConfig | null, options?: GenerateOptions): Promise<Manifest>;
 
-export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot, wrapLines };
+export { ARTIFACT_NAMES, ArtifactSelection, ByteSize, CHECK_INTERVAL_MS, CliOptions, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, DiscoveryMode, type ExplainResult, FAILURE_INTERVAL_MS, FileEntry, type FirstRunFacts, type FirstRunPlan, type FirstRunRefusal, GENERATOR_NAME, GENERATOR_VERSION, type GenerateOptions, type HeuristicResult, type InitDependency, type InitOptions, type InitResult, type InstallKind, JsonSummary, KindRule, LANGUAGE_PROFILES, type LanguageProfile, LayerRule, MIN_MAX_PART_BYTES, Manifest, type ManifestDiff, MarkdownSummary, PACKAGE_LATEST_URL, PRESETS, PartMetadata, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, ResolvedSnapshotConfig, SCHEMA_VERSION, SecretFinding, SecretRule, SkipRecord, SnapshotConfig, SourceSummary, TextEncoding, type UpdateCheckOptions, type UpdateNotice, ValidationResult, type WizardAnswers, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, installKind, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, updateCommand, validateSnapshot, wrapLines };

package/dist/index.js

@@ -1,3 +1,3 @@
-export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot, wrapLines } from './chunk-QABL7NRC.js';
+export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, cacheDirectory, cacheFilePath, checkForUpdate, collectFiles, compareManifests, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayWidth, explainPath, fenceForContent, fenceForText, fetchLatestVersion, firstRunMessage, formatUpdateNotice, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, hasPriorSnapshot, installKind, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, shouldCheck, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, updateCommand, validateSnapshot, wrapLines } from './chunk-KUVFTJHK.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/mcp.cjs

@@ -6128,7 +6128,7 @@ function validateSnapshot(configInput) {
 
 // src/version.ts
 var GENERATOR_NAME = "codebase-snapshot";
-var GENERATOR_VERSION = "0.9.7";
+var GENERATOR_VERSION = "0.9.9";
 var LEGACY_GENERATOR_NAMES = ["@ankurhalder/codebase-snapshot"];
 function isOurGeneratorName(name) {
   if (typeof name !== "string") return false;

package/dist/mcp.js

@@ -1,4 +1,4 @@
-export { ERROR_CODES, LEGACY_PROTOCOL_VERSIONS, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments } from './chunk-DPK6ZTOG.js';
-import './chunk-QABL7NRC.js';
+export { ERROR_CODES, LEGACY_PROTOCOL_VERSIONS, MAX_LINE_BYTES, METHOD, MODERN_PROTOCOL_VERSIONS, SERVER_INSTRUCTIONS, SUPPORTED_PROTOCOL_VERSIONS, buildPrompts, buildResourceProvider, buildTools, classifyRequest, coerceNumericStrings, createLineReader, createMcpServer, createServer, createSession, createWriter, inspectModernMeta, negotiateLegacyVersion, runStdioServer, validateArguments } from './chunk-HQBEQ67K.js';
+import './chunk-KUVFTJHK.js';
 //# sourceMappingURL=mcp.js.map
 //# sourceMappingURL=mcp.js.map

package/docs/cli.md

@@ -174,7 +174,7 @@ The whole first run in one command, with defaults and no prompts. This is the sa
 🚀 Setup for: /path/to/repo
 ✅ Created snapshot.config.ts (preset: nextjs)
    Added npm scripts: snapshot, snapshot:validate
-   Added devDependency: codebase-snapshot ^0.9.7
+   Added devDependency: codebase-snapshot ^0.9.9
    Added to .gitignore: snapshot/, snapshot.tmp/
 ⏳ Installing dependencies…
 ✅ Installed dependencies (npm install, 2.1s)
@@ -211,7 +211,7 @@ It also has three side effects on files you own, and it says so when it does the
 ```
 ✅ Created snapshot.config.ts (preset: node-lib)
    Added npm scripts: snapshot, snapshot:validate
-   Added devDependency: codebase-snapshot ^0.9.7
+   Added devDependency: codebase-snapshot ^0.9.9
    Added to .gitignore: snapshot/, snapshot.tmp/
 ```
 
@@ -491,10 +491,15 @@ Once a day, after a command finishes, `snapshot` asks the npm registry whether a
 published and prints two lines on stderr if there is one:
 
 ```
-↑ codebase-snapshot 0.9.6 is available — you have 0.9.5.
+↑ codebase-snapshot 0.9.8 is available — you have 0.9.7.
   npm install -g codebase-snapshot
 ```
 
+The second line names the command that would actually replace *this* copy: `-g` for a global
+install, a plain `npm install codebase-snapshot@latest` when the package is a dependency of the
+project being worked in, and `npx -y codebase-snapshot@latest` when it was reached through `npx` —
+a global install would leave a second copy shadowing the pinned one.
+
 The request goes to `registry.npmjs.org/codebase-snapshot/latest`, carries no identifier of any
 kind, and its answer is remembered for 24 hours — one request per machine per day at most. It is
 skipped when stdout is not a terminal, in CI, in any `--format json` run, and in `mcp`, whose server

package/docs/mcp.md

@@ -10,7 +10,7 @@ walk — that the client sees.
 ## Start it
 
 ```bash
-npx -y codebase-snapshot@0.9.7 mcp
+npx -y codebase-snapshot@0.9.9 mcp
 ```
 
 The server serves the directory it was started in. `--cwd <path>` points it elsewhere, and that
@@ -25,7 +25,7 @@ Claude Desktop and Cursor:
   "mcpServers": {
     "codebase-snapshot": {
       "command": "npx",
-      "args": ["-y", "codebase-snapshot@0.9.7", "mcp", "--cwd", "/absolute/path/to/repo"]
+      "args": ["-y", "codebase-snapshot@0.9.9", "mcp", "--cwd", "/absolute/path/to/repo"]
     }
   }
 }
@@ -34,7 +34,7 @@ Claude Desktop and Cursor:
 Claude Code registers the same thing from a shell:
 
 ```bash
-claude mcp add codebase-snapshot -- npx -y codebase-snapshot@0.9.7 mcp --cwd /absolute/path/to/repo
+claude mcp add codebase-snapshot -- npx -y codebase-snapshot@0.9.9 mcp --cwd /absolute/path/to/repo
 ```
 
 On Windows, wrap the command as `cmd /c npx` with the same arguments — `npx` is a `.cmd` shim

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-snapshot",
-  "version": "0.9.7",
+  "version": "0.9.9",
   "description": "Pack a codebase for an LLM into budgeted Markdown parts, with a manifest of every file and skip, and validate to prove the snapshot is current.",
   "keywords": [
     "codebase",