diffing 0.11.0 → 0.13.0

package/dist/git-CfDSkUcE.mjs

@@ -0,0 +1,2 @@
+import { f as getProjectStorageDir } from "./git-BGj31GX-.mjs";
+export { getProjectStorageDir };

package/dist/{github-CErBub2y.mjs → github-BLrnsozP.mjs}

@@ -1,2 +1,2 @@
-import { C as replyToPrComment, d as fetchPrChecks, n as buildReviewPayload, w as resolvedFromSession } from "./github-DBsZ0h_l.mjs";
+import { C as replyToPrComment, d as fetchPrChecks, n as buildReviewPayload, w as resolvedFromSession } from "./github-DbAFoB92.mjs";
 export { buildReviewPayload, fetchPrChecks, replyToPrComment, resolvedFromSession };

package/dist/{github-DBsZ0h_l.mjs → github-DbAFoB92.mjs}

@@ -533,7 +533,7 @@ async function submitReview(input) {
 async function prepareSubmitInputWithAttachments(input) {
 	const comments = input.comments ?? [];
 	const bodies = [input.body ?? "", ...comments.map((c) => c.body ?? "")];
-	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-plDeB0iE.mjs");
+	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-fNCKYL-Z.mjs");
 	const result = await rewriteLocalAttachmentsInBodies(input.resolved, bodies);
 	if (result.error) return { error: result.error };
 	if (result.uploaded === 0 && Object.keys(result.urlMap).length === 0) return { input };
@@ -740,7 +740,7 @@ async function fetchPrChecks(resolved, headSha) {
 * POST /repos/{owner}/{repo}/pulls/{pull_number}/comments with in_reply_to.
 */
 async function replyToPrComment(input) {
-	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-plDeB0iE.mjs");
+	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-fNCKYL-Z.mjs");
 	const rewritten = await rewriteLocalAttachmentsInBodies(input.resolved, [input.body]);
 	if (rewritten.error) return {
 		ok: false,
@@ -793,7 +793,7 @@ async function replyToPrComment(input) {
 	}
 }
 async function updatePrReviewComment(input) {
-	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-plDeB0iE.mjs");
+	const { rewriteLocalAttachmentsInBodies } = await import("./github-attachments-fNCKYL-Z.mjs");
 	const rewritten = await rewriteLocalAttachmentsInBodies(input.resolved, [input.body]);
 	if (rewritten.error) return {
 		ok: false,

package/dist/{github-attachments-plDeB0iE.mjs → github-attachments-fNCKYL-Z.mjs}

@@ -1,5 +1,5 @@
-import { d as getProjectStorageDir, w as toSafeRelativePath } from "./git-Czo96ymM.mjs";
-import { _ as isGithubDotCom, g as githubApiBase, m as ghHostnameArgs, o as detectGhCli, s as execWithInput, x as readGithubToken } from "./github-DBsZ0h_l.mjs";
+import { D as toSafeRelativePath, f as getProjectStorageDir } from "./git-BGj31GX-.mjs";
+import { _ as isGithubDotCom, g as githubApiBase, m as ghHostnameArgs, o as detectGhCli, s as execWithInput, x as readGithubToken } from "./github-DbAFoB92.mjs";
 import { createHash } from "node:crypto";
 import { extname, join } from "node:path";
 import { readFile, stat } from "node:fs/promises";

package/dist/{mcp-DtVrMR2S.mjs → mcp-Bi551clR.mjs}

@@ -1,8 +1,9 @@
-import { i as buildGitDiffArgs, s as parseDiffOptions, t as startServer } from "./server-j0PnTVX1.mjs";
+import { i as buildGitDiffArgs, s as parseDiffOptions, t as startServer } from "./server-B9NVZu7l.mjs";
 import { t as formatComments } from "./comment-format-B85NHZnG.mjs";
 import { n as formatPlanReview } from "./plan-format-BwJh5JSE.mjs";
-import { c as removeServerLockIfOwned, i as isLockAlive, p as writeServerLock, r as diffScopeKey, s as removeServerLock, t as acquireServerStartupLease, u as resolveActiveServerLock } from "./server-lock-CY0_1mcS.mjs";
-import { n as AWAIT_REVIEW_TIMEOUT_NEXT_ACTION, r as AWAIT_TOOL_DESCRIPTION_SUFFIX, s as PLAN_SUBMIT_NEXT_ACTION, t as AWAIT_PLAN_TIMEOUT_NEXT_ACTION } from "./handoff-LAFtmnHf.mjs";
+import { c as removeServerLockIfOwned, h as SESSION_TOKEN_HEADER, i as isLockAlive, p as writeServerLock, r as diffScopeKey, s as removeServerLock, t as acquireServerStartupLease, u as resolveActiveServerLock, x as isLoopbackHost, y as generateSessionToken } from "./server-lock-BNI8FKV1.mjs";
+import { i as reviewSessionUrl, n as joinSessionApiUrl, r as reviewSessionBaseUrl, t as appendSessionToken } from "./session-url-B8TrGGeE.mjs";
+import { n as AWAIT_REVIEW_TIMEOUT_NEXT_ACTION, r as AWAIT_TOOL_DESCRIPTION_SUFFIX, s as PLAN_SUBMIT_NEXT_ACTION, t as AWAIT_PLAN_TIMEOUT_NEXT_ACTION } from "./handoff-DcShCxWJ.mjs";
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { fileURLToPath } from "node:url";
@@ -105,25 +106,18 @@ function resolveMcpRepository(repoPath = process.cwd(), explicit = false) {
 		throw new Error(`diffing mcp: path is not inside a Git repository: ${candidate}`);
 	}
 }
-function isLoopbackHost(host) {
-	const normalized = host.toLowerCase();
-	if (normalized === "localhost" || normalized === "::1" || normalized === "[::1]") return true;
-	const octets = normalized.split(".");
-	return octets.length === 4 && octets[0] === "127" && octets.every((part) => {
-		if (!/^\d{1,3}$/.test(part)) return false;
-		const value = Number(part);
-		return value >= 0 && value <= 255;
-	});
-}
 function lockUrl(lock) {
-	if (lock.port <= 0) return null;
-	if (!isLoopbackHost(lock.host)) return null;
-	return `http://${lock.host === "::1" ? "[::1]" : lock.host}:${lock.port}`;
+	return reviewSessionUrl(lock);
 }
-async function requestJson(base, path, init) {
+async function requestJson(base, path, init, authToken) {
 	let response;
 	try {
-		response = await fetch(`${base}${path}`, init);
+		const headers = new Headers(init?.headers);
+		if (authToken) headers.set(SESSION_TOKEN_HEADER, authToken);
+		response = await fetch(joinSessionApiUrl(base, path), {
+			...init,
+			headers
+		});
 	} catch (error) {
 		if (error instanceof Error && error.name === "AbortError") throw new Error(`Request to ${path} was cancelled. Retry the MCP tool when ready.`);
 		const detail = error instanceof Error ? error.message : String(error);
@@ -368,11 +362,11 @@ function createMcpServer(options) {
 		const lock = liveLock();
 		if (!lock) throw new Error(`No diffing review session is running for ${repoRoot}. Start one with start_review_session, \`diffing --web\`, or \`diffing "gh pr <ref>"\`, then retry.`);
 		ensureReusableLock(lock);
-		const url = lockUrl(lock);
-		if (!url) throw new Error("The active diffing session does not expose a reachable loopback API.");
+		const apiOrigin = reviewSessionBaseUrl(lock);
+		if (!apiOrigin) throw new Error("The active diffing session does not expose a reachable loopback API.");
 		return {
 			lock,
-			url,
+			apiOrigin,
 			identity: `${lock.pid}:${lock.startedAt}:${lock.port}:${lock.ownerId ?? ""}`
 		};
 	}
@@ -391,11 +385,11 @@ function createMcpServer(options) {
 		if (session.lock.mode === "tui") {
 			if (!session.lock.capability) throw new Error("The TUI lock is missing its API capability.");
 			headers.set("X-Diffing-Capability", session.lock.capability);
-		}
-		return requestJson(session.url, path, {
+		} else if (session.lock.authToken) headers.set(SESSION_TOKEN_HEADER, session.lock.authToken);
+		return requestJson(session.apiOrigin, path, {
 			...init,
 			headers
-		});
+		}, session.lock.authToken);
 	}
 	function requestBaseJson(path, init) {
 		return requestSessionJson(requireWebSession(), path, init);
@@ -530,12 +524,17 @@ function createMcpServer(options) {
 			try {
 				const afterLease = liveLock();
 				if (afterLease) return reuse(afterLease);
+				const authToken = generateSessionToken();
 				const lock = {
 					port: (await startServerFn({
 						port: 0,
 						host: "127.0.0.1",
 						clientDir,
-						diffOpts: parsed
+						diffOpts: parsed,
+						security: {
+							bindHost: "127.0.0.1",
+							authToken
+						}
 					})).port,
 					host: "127.0.0.1",
 					pid: process.pid,
@@ -547,7 +546,8 @@ function createMcpServer(options) {
 					diffArgs: [...diffArgs],
 					owner: "mcp",
 					ownerId,
-					sessionId: ownerId
+					sessionId: ownerId,
+					authToken
 				};
 				try {
 					writeLock(lock);
@@ -749,7 +749,9 @@ function createMcpServer(options) {
 		if (author) params.set("author", author);
 		if (fullBody) params.set("fullBody", "true");
 		if (format === "xml") {
-			const res = await fetch(`${session.url}/api/gh/threads?${params}`);
+			const headers = new Headers();
+			if (session.lock.authToken) headers.set(SESSION_TOKEN_HEADER, session.lock.authToken);
+			const res = await fetch(joinSessionApiUrl(session.apiOrigin, `/api/gh/threads?${params}`), { headers });
 			const text = await res.text();
 			if (!res.ok) throw new Error(text || res.statusText);
 			return textResult(text, { result: {
@@ -784,7 +786,9 @@ function createMcpServer(options) {
 		if (fullBody) params.set("fullBody", "true");
 		if (state) params.set("state", state);
 		if (format === "xml") {
-			const res = await fetch(`${session.url}/api/gh/reviews?${params}`);
+			const headers = new Headers();
+			if (session.lock.authToken) headers.set(SESSION_TOKEN_HEADER, session.lock.authToken);
+			const res = await fetch(joinSessionApiUrl(session.apiOrigin, `/api/gh/reviews?${params}`), { headers });
 			const text = await res.text();
 			if (!res.ok) throw new Error(text || res.statusText);
 			return textResult(text, { result: {
@@ -1253,7 +1257,6 @@ function createMcpServer(options) {
 		annotations: MUTATING
 	}, async ({ title, body, source, model, planId }) => {
 		const session = requireWebSession();
-		const base = session.url;
 		await seedPlanCursor(session, void 0, true);
 		const plan = await requestSessionJson(session, "/api/plans", {
 			method: "POST",
@@ -1266,7 +1269,7 @@ function createMcpServer(options) {
 				model
 			})
 		});
-		const url = `${base}/plan/${plan.id}`;
+		const url = appendSessionToken(`${session.apiOrigin}/plan/${plan.id}`, session.lock.authToken);
 		return textResult(`Submitted plan ${plan.id} (v${plan.version}) at ${url}. ${PLAN_SUBMIT_NEXT_ACTION}`, {
 			status: "submitted",
 			planId: plan.id,

package/dist/{search-BMPY_ZW8.mjs → search-3R2E5xxr.mjs}

@@ -1,4 +1,4 @@
-import { d as getProjectStorageDir, p as getRepoRoot } from "./git-Czo96ymM.mjs";
+import { f as getProjectStorageDir, h as getRepoRoot } from "./git-BGj31GX-.mjs";
 import { join } from "node:path";
 import { mkdirSync } from "node:fs";
 //#region src/lib/symbols.ts
@@ -38,6 +38,11 @@ const SYMBOL_PATTERNS = [
 		kind: "enum",
 		nameGroup: 1
 	},
+	{
+		pattern: /^\s*namespace\s+((?:\w[\w$]*(?:\\\w[\w$]*)*)+)\s*;/i,
+		kind: "namespace",
+		nameGroup: 1
+	},
 	{
 		pattern: /^\s*(?:(?:export|declare)\s+)*namespace\s+(\w[\w$]*)/i,
 		kind: "namespace",
@@ -48,6 +53,16 @@ const SYMBOL_PATTERNS = [
 		kind: "variable",
 		nameGroup: 1
 	},
+	{
+		pattern: /^\s*(?:(?:public|private|protected|static|abstract|final)\s+)+function\s+(\w[\w$]*)\s*\(/i,
+		kind: "function",
+		nameGroup: 1
+	},
+	{
+		pattern: /^\s*(?:(?:abstract|final|readonly)\s+)+class\s+(\w[\w$]*)/i,
+		kind: "class",
+		nameGroup: 1
+	},
 	{
 		pattern: /^\s*(?!(?:if|for|while|switch|catch)\b)(?:(?:public|private|protected|static|async|abstract|readonly|override|get|set)\s+)*(\w[\w$]*)\s*(?:<[^>]+>)?\s*\([^)]*\)\s*(?:\{|:[^={]+[;{])/i,
 		kind: "method",

package/dist/{search-BO9Im7eu.mjs → search-CQ4nsjBX.mjs}

@@ -1,2 +1,2 @@
-import { a as searchFiles, i as searchContent, o as searchSymbols, r as searchAll, s as trackSelection } from "./search-BMPY_ZW8.mjs";
+import { a as searchFiles, i as searchContent, o as searchSymbols, r as searchAll, s as trackSelection } from "./search-3R2E5xxr.mjs";
 export { searchAll, searchContent, searchFiles, searchSymbols, trackSelection };