diffing 0.18.1 → 0.18.3

package/dist/{server-lock-CdaUNZyX.mjs → server-lock-ACw2cKDI.mjs}

@@ -1,6 +1,6 @@
 import { f as getProjectStorageDir, h as getRepoRoot } from "./git-BGj31GX-.mjs";
 import { spawnSync } from "node:child_process";
-import { randomBytes, randomUUID } from "node:crypto";
+import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { join } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { getCookie } from "hono/cookie";
@@ -12,7 +12,7 @@ import { getCookie } from "hono/cookie";
 * is safe to bundle into the browser UI. Server-only helpers live in
 * `server-auth.ts` and re-export these values for existing Node importers.
 */
-/** Header, HttpOnly cookie, or legacy query param carrying the per-session review API token. */
+/** Header, HttpOnly cookie, or SSE query param carrying the per-session review API token. */
 const SESSION_TOKEN_HEADER = "x-diffing-token";
 const SESSION_TOKEN_QUERY = "token";
 const SESSION_TOKEN_COOKIE = "diffing-token";
@@ -52,12 +52,29 @@ function isAllowedRequestHost(hostHeader, bindHost) {
 	if (!host) return true;
 	return isLoopbackHost(host);
 }
-function readSessionToken(c) {
+/**
+* Read the session token from the header or HttpOnly cookie.
+*
+* The query param is only honored when `allowQuery` is set, which is reserved
+* for the SSE `/api/live` endpoint (`EventSource` cannot send headers). Tokens
+* in URLs leak into history, referrers, and logs, so every other API route
+* requires the header or cookie.
+*/
+function readSessionToken(c, opts) {
 	const header = c.req.header(SESSION_TOKEN_HEADER);
 	if (header) return header;
 	const cookie = getCookie(c, SESSION_TOKEN_COOKIE);
 	if (cookie) return cookie;
-	return c.req.query("token") || null;
+	if (opts?.allowQuery) return c.req.query("token") || null;
+	return null;
+}
+/** Constant-time comparison of a provided token against the expected session token. */
+function tokenMatches(provided, expected) {
+	if (!provided) return false;
+	const providedBuf = Buffer.from(provided);
+	const expectedBuf = Buffer.from(expected);
+	if (providedBuf.length !== expectedBuf.length) return false;
+	return timingSafeEqual(providedBuf, expectedBuf);
 }
 /** `Set-Cookie` value for the review session token (loopback http — no Secure). */
 function buildSessionTokenSetCookieValue(token) {
@@ -82,7 +99,7 @@ function createServerAuthMiddleware(config) {
 		}
 		if (!isAllowedRequestHost(c.req.header("host"), config.bindHost)) return c.json({ error: "request Host header is not allowed for this bind address" }, 403);
 		if (!config.insecureNoAuth && config.authToken) {
-			if (readSessionToken(c) !== config.authToken) return c.json({ error: "invalid or missing review session token" }, 401);
+			if (!tokenMatches(readSessionToken(c, { allowQuery: c.req.path === "/api/live" }), config.authToken)) return c.json({ error: "invalid or missing review session token" }, 401);
 		}
 		await next();
 	};

package/dist/{session-conflict-BVgyyerQ.mjs → session-conflict-oUPEv3YT.mjs}

@@ -1,6 +1,6 @@
-import { i as loadSettings } from "./settings-DkPDB_hS.mjs";
-import { l as removeServerSession, m as probeLockServerSync } from "./server-lock-CdaUNZyX.mjs";
-import { i as reviewSessionUrl } from "./session-url-B9FOnF3F.mjs";
+import { i as loadSettings } from "./settings-DIa-3C8o.mjs";
+import { l as removeServerSession, m as probeLockServerSync } from "./server-lock-ACw2cKDI.mjs";
+import { i as reviewSessionUrl } from "./session-url-CyBpcLAH.mjs";
 //#region src/lib/session-conflict.ts
 function sleepMs(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));

package/dist/{session-manager-CUqF8hkP.mjs → session-manager-C9KjVkzq.mjs}

@@ -1,5 +1,5 @@
-import { a as listServerLocks, d as sameServerSession, f as serverSessionId, n as activateServerLock, u as resolveActiveServerLock } from "./server-lock-CdaUNZyX.mjs";
-import { n as openExistingSession, r as stopLockOwner, t as existingSessionUrl } from "./session-conflict-BVgyyerQ.mjs";
+import { a as listServerLocks, d as sameServerSession, f as serverSessionId, n as activateServerLock, u as resolveActiveServerLock } from "./server-lock-ACw2cKDI.mjs";
+import { n as openExistingSession, r as stopLockOwner, t as existingSessionUrl } from "./session-conflict-oUPEv3YT.mjs";
 //#region src/lib/session-manager.ts
 const EXIT_OK = 0;
 const EXIT_NOT_FOUND = 4;

package/dist/{session-url-B9FOnF3F.mjs → session-url-CyBpcLAH.mjs}

@@ -1,4 +1,4 @@
-import { S as SESSION_TOKEN_QUERY, y as isLoopbackHost } from "./server-lock-CdaUNZyX.mjs";
+import { S as SESSION_TOKEN_QUERY, y as isLoopbackHost } from "./server-lock-ACw2cKDI.mjs";
 //#region src/lib/session-url.ts
 /** Loopback-safe review URL for web / gh-pr locks; null for TUI or invalid ports. */
 function reviewSessionBaseUrl(lock) {

package/dist/{settings-DkPDB_hS.mjs → settings-DIa-3C8o.mjs}

@@ -85,4 +85,4 @@ function resetSetupCompleted() {
 	return saveSettings({ setupCompletedAt: null });
 }
 //#endregion
-export { markSetupCompleted as a, loadSettings as i, formatModeLabel as n, resetSetupCompleted as o, isSetupCompleted as r, saveSettings as s, ensureConfigDir as t };
+export { markSetupCompleted as a, writeJsonAtomically as c, loadSettings as i, formatModeLabel as n, resetSetupCompleted as o, isSetupCompleted as r, saveSettings as s, ensureConfigDir as t };

package/dist/{setup-BwWZ9Fzq.mjs → setup-B6bOeWQl.mjs}

@@ -1,9 +1,9 @@
 import { S as isGitRepo, h as getRepoRoot } from "./git-BGj31GX-.mjs";
-import { a as markSetupCompleted, i as loadSettings, n as formatModeLabel, o as resetSetupCompleted, r as isSetupCompleted, s as saveSettings, t as ensureConfigDir } from "./settings-DkPDB_hS.mjs";
-import { n as completionFor } from "./completions-2aHVTmiJ.mjs";
-import { a as hintLine, c as stepHeader, i as dim, l as tone, n as box, o as isColorEnabled, r as copyBlock, s as rule, t as bold } from "./terminal-BroplOnw.mjs";
-import { n as runDoctor, t as formatDoctorReport } from "./doctor-BxTaLqAF.mjs";
-import { t as DOCS_GETTING_STARTED_URL } from "./setup-first-run-i1o7DBki.mjs";
+import { a as markSetupCompleted, i as loadSettings, n as formatModeLabel, o as resetSetupCompleted, r as isSetupCompleted, s as saveSettings, t as ensureConfigDir } from "./settings-DIa-3C8o.mjs";
+import { n as completionFor } from "./completions-ClqvbDYF.mjs";
+import { a as hintLine, c as stepHeader, i as dim, l as tone, n as box, o as isColorEnabled, r as copyBlock, s as rule, t as bold } from "./terminal-Ce7OL1A-.mjs";
+import { n as runDoctor, t as formatDoctorReport } from "./doctor-Dg61wsBc.mjs";
+import { t as DOCS_GETTING_STARTED_URL } from "./setup-first-run-CAjtqBal.mjs";
 import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { dirname, join, resolve } from "node:path";
@@ -425,7 +425,7 @@ function printDoneChecklist(inGitRepo, cwd, color) {
 	], { color }));
 }
 async function handleFirstRunGate(options) {
-	const { shouldOfferFirstRunSetup, promptFirstRunSetup, DOCS_GETTING_STARTED_URL } = await import("./setup-first-run-DyT0PlOZ.mjs");
+	const { shouldOfferFirstRunSetup, promptFirstRunSetup, DOCS_GETTING_STARTED_URL } = await import("./setup-first-run-DPXLAMqa.mjs");
 	if (!shouldOfferFirstRunSetup({ skipSetup: options.skipSetup })) return;
 	while (true) {
 		const choice = await promptFirstRunSetup();

package/dist/{setup-first-run-i1o7DBki.mjs → setup-first-run-CAjtqBal.mjs}

@@ -1,5 +1,5 @@
-import { r as isSetupCompleted } from "./settings-DkPDB_hS.mjs";
-import { a as hintLine, i as dim, n as box, o as isColorEnabled } from "./terminal-BroplOnw.mjs";
+import { r as isSetupCompleted } from "./settings-DIa-3C8o.mjs";
+import { a as hintLine, i as dim, n as box, o as isColorEnabled } from "./terminal-Ce7OL1A-.mjs";
 import { stdin, stdout } from "node:process";
 import { createInterface } from "node:readline/promises";
 //#region src/lib/setup-first-run.ts

package/dist/{setup-first-run-DyT0PlOZ.mjs → setup-first-run-DPXLAMqa.mjs}

@@ -1,2 +1,2 @@
-import { a as shouldOfferFirstRunSetup, i as promptFirstRunSetup, t as DOCS_GETTING_STARTED_URL } from "./setup-first-run-i1o7DBki.mjs";
+import { a as shouldOfferFirstRunSetup, i as promptFirstRunSetup, t as DOCS_GETTING_STARTED_URL } from "./setup-first-run-CAjtqBal.mjs";
 export { DOCS_GETTING_STARTED_URL, promptFirstRunSetup, shouldOfferFirstRunSetup };

package/extensions/pi/index.ts

@@ -3,8 +3,8 @@
  *
  * Bridges the local-first diffing review loop into pi:
  *  - Structured LLM tools mirroring the diffing MCP surface (status, review
- *    start, comments, reply/resolve, plan loop, mockup loop, progress,
- *    sessions, GH PR).
+ *    start, comments, reply/resolve, plan loop, mockup loop, design system,
+ *    progress, sessions, GH PR).
  *  - `/diffing` command to open/reuse the review UI for the current repo.
  *  - Footer status showing the active review session.
  *  - Skill self-heal: keeps `~/.agents/skills/diffing*` as symlinks to the
@@ -20,12 +20,9 @@
 import { spawn } from "node:child_process";
 import {
 	existsSync,
-	lstatSync,
 	mkdtempSync,
 	readFileSync,
-	realpathSync,
 	rmSync,
-	symlinkSync,
 	writeFileSync,
 } from "node:fs";
 import { homedir, tmpdir } from "node:os";
@@ -37,29 +34,19 @@ import type {
 	ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
+import {
+	selfHealSkillLinks,
+	SKILLS_REL,
+} from "./skill-heal.ts";
 
 // ────────────────────────────────────────────────────────────────────────────
 // Constants
 // ────────────────────────────────────────────────────────────────────────────
 
-const SKILL_NAMES = [
-	"diffing",
-	"diffing-finish-review",
-	"diffing-mockup-review",
-	"diffing-plan-review",
-	"diffing-pr-address",
-	"diffing-pr-read",
-	"diffing-release",
-	"diffing-review",
-	"diffing-start-review",
-] as const;
-
 const MAX_OUTPUT_BYTES = 48 * 1024;
 const REVIEW_START_TIMEOUT_MS = 15_000;
 const REVIEW_START_POLL_MS = 400;
 
-const SKILLS_REL = join(".agents", "skills");
-
 // ────────────────────────────────────────────────────────────────────────────
 // CLI runner
 // ────────────────────────────────────────────────────────────────────────────
@@ -247,35 +234,6 @@ function findCanonicalRoot(cwd: string): string | null {
 	return null;
 }
 
-/**
- * Keep the `~/.agents/skills/diffing*` entries as symlinks to the canonical
- * checkout's `.agents/skills`. pi dedupes skills by canonical realpath, so
- * symlinked home entries merge silently with the repo's project skills and no
- * `[Skill conflicts]` banner appears. Repairs stale real copies left behind by
- * `diffing setup skills` / `npx skills add --copy`. Only touches the known
- * names in SKILL_NAMES; never deletes anything else.
- */
-function selfHealSkillLinks(canonical: string): void {
-	const homeSkills = join(homedir(), ".agents", "skills");
-	if (!existsSync(homeSkills)) return;
-	for (const name of SKILL_NAMES) {
-		const target = join(canonical, SKILLS_REL, name);
-		if (!existsSync(target)) continue;
-		const link = join(homeSkills, name);
-		try {
-			if (existsSync(link) || lstatSync(link)) {
-				if (lstatSync(link).isSymbolicLink()) {
-					const real = realpathSync(link);
-					if (real === realpathSync(target)) continue; // already correct
-				}
-				rmSync(link, { recursive: true, force: true });
-			}
-			symlinkSync(target, link, "dir");
-		} catch {
-			// best-effort; a failed heal must not break the session
-		}
-	}
-}
 
 // ────────────────────────────────────────────────────────────────────────────
 // Detached review server start
@@ -339,7 +297,9 @@ export default function (pi: ExtensionAPI) {
 	// Keep the home skill links canonical for every session (idempotent).
 	pi.on("session_start", async (_event, ctx) => {
 		const canonical = findCanonicalRoot(ctx.cwd);
-		if (canonical) selfHealSkillLinks(canonical);
+		if (canonical) {
+			selfHealSkillLinks(canonical, join(homedir(), ".agents", "skills"));
+		}
 		await refreshStatus(ctx);
 	});
 
@@ -824,7 +784,7 @@ export default function (pi: ExtensionAPI) {
 		name: "diffing_mockup_submit",
 		label: "Diffing Mockup Submit",
 		description:
-			"Submit HTML mockup screen(s) for visual review. Pass a single html body, a file/dir path, or an inline screens array [{id, html}]. Share the URL and park unless asked to wait. Resubmit with mockupId to bump the version and reset the verdict.",
+			"Submit HTML mockup screen(s) for visual review. HARD RULE — one state per screen: never tabs/accordions/toggles/modals/JS swaps. Pass html, a file/dir already under ~/.diffing/…/mockup-sources/, or screens [{id, html}]. Call diffing_design show first. Share the URL and park unless asked to wait. Resubmit with mockupId to bump the version. Fix any in-page-state or generic-style hints before parking.",
 		parameters: Type.Object({
 			html: Type.Optional(
 				Type.String({ description: "Single-screen HTML body." }),
@@ -853,6 +813,23 @@ export default function (pi: ExtensionAPI) {
 			),
 			model: Type.Optional(Type.String()),
 			source: Type.Optional(Type.String()),
+			mode: Type.Optional(
+				StringEnum(["fragment", "document"] as const, {
+					description:
+						"fragment = body contents wrapped by the published design-system shell. document = full HTML, no wrap. Default: server default.",
+				}),
+			),
+			designSystem: Type.Optional(
+				Type.String({
+					description:
+						"Design-system id to bind (default system if omitted).",
+				}),
+			),
+			planId: Type.Optional(
+				Type.String({
+					description: "Optional plan id this mockup illustrates.",
+				}),
+			),
 		}),
 		async execute(_id, params, _signal, _onUpdate, ctx) {
 			const args = ["mockup", "submit"];
@@ -895,6 +872,9 @@ export default function (pi: ExtensionAPI) {
 			if (params.mockupId) args.push("--id", params.mockupId);
 			if (params.model) args.push("--model", params.model);
 			if (params.source) args.push("--source", params.source);
+			if (params.mode) args.push("--mode", params.mode);
+			if (params.designSystem) args.push("--system", params.designSystem);
+			if (params.planId) args.push("--plan-id", params.planId);
 			try {
 				const result = await runDiffing(args, ctx.cwd, { stdin });
 				const stdout = result.stdout.trim();
@@ -1078,12 +1058,15 @@ export default function (pi: ExtensionAPI) {
 		name: "diffing_mockup_inspect",
 		label: "Diffing Mockup Inspect",
 		description:
-			"Read compact, bounded mockup data without transferring screen HTML. view=summary (headline stats), comments (paged comment list), comment (one thread), screen (screen source). Filter by comment scope: status, screenId, viewport (desktop|tablet|mobile), version. context=none|anchor|source controls anchor detail. Prefer this over diffing_mockup_show.",
+			"Read compact, bounded mockup data without transferring screen HTML. view=summary (headline stats), comments (paged comment list), comment (one thread), screen (screen source), preview (rendered preview metadata). Filter by comment scope: status, screenId, viewport (desktop|tablet|mobile), version. context=none|anchor|source controls anchor detail. Prefer this over diffing_mockup_show.",
 		parameters: Type.Object({
-			view: StringEnum(["summary", "comments", "comment", "screen"] as const, {
-				description: "What to read. Default: summary.",
-				default: "summary",
-			}),
+			view: StringEnum(
+				["summary", "comments", "comment", "screen", "preview"] as const,
+				{
+					description: "What to read. Default: summary.",
+					default: "summary",
+				},
+			),
 			mockupId: Type.Optional(
 				Type.String({ description: "Mockup id. Default: latest." }),
 			),
@@ -1151,11 +1134,12 @@ export default function (pi: ExtensionAPI) {
 		name: "diffing_mockup_screen",
 		label: "Diffing Mockup Screen",
 		description:
-			"One-screen revision of an HTML mockup. action=upsert adds/replaces a screen (html or file), remove deletes a screen, patch replaces the first exact occurrence of text with replacement. Every success bumps the mockup version; pass expectedVersion to guard racing edits (409 version-mismatch, nothing applied). For multi-screen revisions, resubmit via diffing_mockup_submit with the same mockupId.",
+			"One-screen revision of an HTML mockup. action=upsert adds/replaces a screen (html or file), remove deletes a screen, patch replaces the first exact occurrence of text with replacement, replace-region replaces the inner HTML of the first [data-diffing=region] element (prefer this when the comment has a data-diffing target). Every success bumps the mockup version; pass expectedVersion to guard racing edits (409 version-mismatch, nothing applied). For multi-screen revisions, resubmit via diffing_mockup_submit with the same mockupId.",
 		parameters: Type.Object({
-			action: StringEnum(["upsert", "remove", "patch"] as const, {
-				description: "Revision op.",
-			}),
+			action: StringEnum(
+				["upsert", "remove", "patch", "replace-region"] as const,
+				{ description: "Revision op." },
+			),
 			mockupId: Type.String({ description: "Mockup id." }),
 			screenId: Type.String({ description: "Screen id." }),
 			html: Type.Optional(
@@ -1176,8 +1160,17 @@ export default function (pi: ExtensionAPI) {
 					description: "For patch: exact text to replace (first occurrence).",
 				}),
 			),
+			region: Type.Optional(
+				Type.String({
+					description:
+						"For replace-region: data-diffing attribute value of the block to replace.",
+				}),
+			),
 			replacement: Type.Optional(
-				Type.String({ description: "For patch: replacement text." }),
+				Type.String({
+					description:
+						"For patch: replacement text. For replace-region: new inner HTML.",
+				}),
 			),
 			expectedVersion: Type.Optional(
 				Type.Number({
@@ -1201,6 +1194,10 @@ export default function (pi: ExtensionAPI) {
 					stdin = params.html;
 				}
 				if (params.label) args.push("--label", params.label);
+			} else if (params.action === "replace-region") {
+				if (params.region) args.push("--region", params.region);
+				if (params.replacement !== undefined)
+					args.push("--replacement", params.replacement);
 			} else if (params.action === "patch") {
 				if (params.text !== undefined) args.push("--text", params.text);
 				if (params.replacement !== undefined)
@@ -1263,6 +1260,77 @@ export default function (pi: ExtensionAPI) {
 		},
 	});
 
+	pi.registerTool({
+		name: "diffing_mockup_handoff",
+		label: "Diffing Mockup Handoff",
+		description:
+			"Compact implementation handoff after a mockup is approved: tokens, screens with intent, components used, leftover nits. Prefer this over dumping every screen's HTML. Call after decision=approved, before writing product UI.",
+		parameters: Type.Object({
+			mockupId: Type.Optional(
+				Type.String({ description: "Mockup id. Default: latest." }),
+			),
+			json: Type.Optional(
+				Type.Boolean({ description: "Emit raw JSON. Default: XML handoff." }),
+			),
+		}),
+		async execute(_id, params, _signal, _onUpdate, ctx) {
+			const args = ["mockup", "handoff"];
+			if (params.mockupId) args.push(params.mockupId);
+			if (params.json) args.push("--json");
+			const result = await runDiffing(args, ctx.cwd);
+			return textResult(describe(result, "diffing mockup handoff"), {
+				exitCode: result.exitCode,
+				stderr: result.stderr.trim() || undefined,
+			});
+		},
+	});
+
+	pi.registerTool({
+		name: "diffing_design",
+		label: "Diffing Design System",
+		description:
+			"Per-repo design system used before authoring mockup HTML. show/list: read tokens, guidelines, components. extract: scan the consumer repo and write a draft (does not publish). propose: update the draft. publish: human action only — do not publish unless the human asked. Omit id for the default system.",
+		parameters: Type.Object({
+			action: StringEnum(
+				["show", "list", "extract", "propose", "publish"] as const,
+				{ description: "Design-system op. Default: show." },
+			),
+			id: Type.Optional(
+				Type.String({ description: "System id. Default: default." }),
+			),
+			json: Type.Optional(
+				Type.Boolean({ description: "Emit raw JSON. Default: false." }),
+			),
+			from: Type.Optional(
+				StringEnum(["css", "text"] as const, {
+					description: "For extract: scan source. Default: css.",
+				}),
+			),
+			title: Type.Optional(
+				Type.String({ description: "For extract/propose: system title." }),
+			),
+			guidelines: Type.Optional(
+				Type.String({
+					description: "For propose: markdown guidelines to write on the draft.",
+				}),
+			),
+		}),
+		async execute(_id, params, _signal, _onUpdate, ctx) {
+			const action = params.action ?? "show";
+			const args = ["design", action];
+			if (params.id) args.push(params.id);
+			if (params.json) args.push("--json");
+			if (params.from) args.push("--from", params.from);
+			if (params.title) args.push("--title", params.title);
+			if (params.guidelines) args.push("--guidelines", params.guidelines);
+			const result = await runDiffing(args, ctx.cwd);
+			return textResult(describe(result, `diffing design ${action}`), {
+				exitCode: result.exitCode,
+				stderr: result.stderr.trim() || undefined,
+			});
+		},
+	});
+
 	pi.registerTool({
 		name: "diffing_url",
 		label: "Diffing URL",

package/extensions/pi/skill-heal.ts

@@ -0,0 +1,73 @@
+import {
+	existsSync,
+	lstatSync,
+	realpathSync,
+	rmSync,
+	symlinkSync,
+} from "node:fs";
+import { join } from "node:path";
+
+export const DIFFING_SKILL_NAMES = [
+	"diffing",
+	"diffing-finish-review",
+	"diffing-mockup-author",
+	"diffing-mockup-review",
+	"diffing-plan-review",
+	"diffing-pr-address",
+	"diffing-pr-read",
+	"diffing-release",
+	"diffing-review",
+	"diffing-start-review",
+] as const;
+
+export const SKILLS_REL = join(".agents", "skills");
+
+/**
+ * Point `link` at `target`. Creates a missing link, repairs a stale/dangling
+ * one, and leaves a correct symlink alone. `existsSync` is false for both
+ * missing paths and dangling symlinks, so this uses `lstat` and treats ENOENT
+ * as "create".
+ */
+export function healSkillLink(
+	link: string,
+	target: string,
+): "ok" | "created" | "repaired" {
+	if (!existsSync(target)) return "ok";
+	let st: ReturnType<typeof lstatSync> | null = null;
+	try {
+		st = lstatSync(link);
+	} catch {
+		st = null;
+	}
+	if (st) {
+		if (st.isSymbolicLink()) {
+			try {
+				if (realpathSync(link) === realpathSync(target)) return "ok";
+			} catch {
+				// dangling or unreadable — fall through and replace
+			}
+		}
+		rmSync(link, { recursive: true, force: true });
+		symlinkSync(target, link, "dir");
+		return "repaired";
+	}
+	symlinkSync(target, link, "dir");
+	return "created";
+}
+
+/** Keep `~/.agents/skills/diffing*` as symlinks to the canonical checkout. */
+export function selfHealSkillLinks(
+	canonical: string,
+	homeSkills: string,
+): void {
+	if (!existsSync(homeSkills)) return;
+	for (const name of DIFFING_SKILL_NAMES) {
+		const target = join(canonical, SKILLS_REL, name);
+		if (!existsSync(target)) continue;
+		try {
+			healSkillLink(join(homeSkills, name), target);
+		} catch {
+			// best-effort; a failed heal must not break the session
+		}
+	}
+}

package/extensions/pi/tsconfig.json

@@ -5,10 +5,11 @@
     "moduleResolution": "bundler",
     "strict": true,
     "noEmit": true,
+    "allowImportingTsExtensions": true,
     "skipLibCheck": true,
     "esModuleInterop": true,
     "forceConsistentCasingInFileNames": true,
     "types": ["node"]
   },
-  "include": ["index.ts", "pi-modules.d.ts"]
+  "include": ["index.ts", "skill-heal.ts", "pi-modules.d.ts"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "diffing",
-  "version": "0.18.1",
+  "version": "0.18.3",
   "description": "local-first CLI for reviewing, navigating, and discussing git diffs with AI",
   "type": "module",
   "license": "MIT",

package/dist/client/assets/channel-C9URWRe4.js

@@ -1 +0,0 @@
-import{at as e,ot as t}from"./chunk-CSCIHK7Q-D6ZDvMsi.js";var n=(n,r)=>t.lang.round(e.parse(n)[r]);export{n as t};

package/dist/client/assets/chunk-QZHKN3VN-BBNO2-yv.js

@@ -1 +0,0 @@
-import{h as e}from"./src-D7QQkGEc.js";var t=class{constructor(e){this.init=e,this.records=this.init()}static{e(this,`ImperativeState`)}reset(){this.records=this.init()}};export{t};

package/dist/client/assets/chunk-WU5MYG2G-HP2Om5f9.js

@@ -1 +0,0 @@
-import{h as e,p as t}from"./src-D7QQkGEc.js";import{x as n}from"./chunk-CSCIHK7Q-D6ZDvMsi.js";var r=e(e=>{let{securityLevel:r}=n(),i=t(`body`);return r===`sandbox`&&(i=t((t(`#i${e}`).node()?.contentDocument??document).body)),i.select(`#${e}`)},`selectSvgElement`);export{r as t};

package/dist/client/assets/classDiagram-4FO5ZUOK-BW_ZPHe7.js

@@ -1 +0,0 @@
-import{h as e}from"./src-D7QQkGEc.js";import"./chunk-CSCIHK7Q-D6ZDvMsi.js";import"./chunk-5ZQYHXKU-BGFzCgvs.js";import"./chunk-O5CBEL6O-DcKB07iP.js";import"./chunk-FMBD7UC4-BFDCYCqF.js";import"./chunk-BSJP7CBP-DAvnzgjY.js";import"./chunk-L5ZTLDWV-Dl9iUIBf.js";import"./chunk-ND2GUHAM-DBDu-JeD.js";import"./chunk-55IACEB6-pCwXbxR0.js";import"./chunk-2J33WTMH-Bpr3MqKf.js";import"./chunk-NZK2D7GU-CRyk4F3R.js";import"./chunk-3OPIFGDE-DdMV_3DM.js";import"./chunk-KSCS5N6A-BmD6XY52.js";import"./chunk-LZXEDZCA-rOOJDxdB.js";import{i as t,n,r,t as i}from"./chunk-727SXJPM-DU7oVWfJ.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/dist/client/assets/classDiagram-v2-Q7XG4LA2-DOd628kk.js

@@ -1 +0,0 @@
-import{h as e}from"./src-D7QQkGEc.js";import"./chunk-CSCIHK7Q-D6ZDvMsi.js";import"./chunk-5ZQYHXKU-BGFzCgvs.js";import"./chunk-O5CBEL6O-DcKB07iP.js";import"./chunk-FMBD7UC4-BFDCYCqF.js";import"./chunk-BSJP7CBP-DAvnzgjY.js";import"./chunk-L5ZTLDWV-Dl9iUIBf.js";import"./chunk-ND2GUHAM-DBDu-JeD.js";import"./chunk-55IACEB6-pCwXbxR0.js";import"./chunk-2J33WTMH-Bpr3MqKf.js";import"./chunk-NZK2D7GU-CRyk4F3R.js";import"./chunk-3OPIFGDE-DdMV_3DM.js";import"./chunk-KSCS5N6A-BmD6XY52.js";import"./chunk-LZXEDZCA-rOOJDxdB.js";import{i as t,n,r,t as i}from"./chunk-727SXJPM-DU7oVWfJ.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/dist/client/assets/stateDiagram-v2-BHNVJYJU-P0vTqsyH.js

@@ -1 +0,0 @@
-import{h as e}from"./src-D7QQkGEc.js";import"./chunk-CSCIHK7Q-D6ZDvMsi.js";import"./chunk-5ZQYHXKU-BGFzCgvs.js";import"./chunk-O5CBEL6O-DcKB07iP.js";import"./chunk-BSJP7CBP-DAvnzgjY.js";import"./chunk-L5ZTLDWV-Dl9iUIBf.js";import"./chunk-55IACEB6-pCwXbxR0.js";import"./chunk-2J33WTMH-Bpr3MqKf.js";import"./chunk-NZK2D7GU-CRyk4F3R.js";import"./chunk-3OPIFGDE-DdMV_3DM.js";import"./chunk-KSCS5N6A-BmD6XY52.js";import"./chunk-LZXEDZCA-rOOJDxdB.js";import{i as t,n,r,t as i}from"./chunk-AQP2D5EJ-DaVYG1qm.js";var a={parser:n,get db(){return new i(2)},renderer:r,styles:t,init:e(e=>{e.state||={},e.state.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/dist/completions-CYa5usLb.mjs

@@ -1,2 +0,0 @@
-import { n as completionFor } from "./completions-2aHVTmiJ.mjs";
-export { completionFor };