javi-forge 1.6.1 → 1.7.0

package/dist/lib/exec.d.ts

@@ -0,0 +1,10 @@
+import { execFile } from "node:child_process";
+/**
+ * Promisified `execFile` for shelling out to subprocesses with arguments
+ * (safer than `exec` because arguments are NOT shell-interpreted).
+ *
+ * Centralized helper used across the codebase by command modules and
+ * init steps that invoke external CLIs (git, javi-ai, etc.).
+ */
+export declare const execFileAsync: typeof execFile.__promisify__;
+//# sourceMappingURL=exec.d.ts.map

package/dist/lib/exec.js

@@ -0,0 +1,11 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+/**
+ * Promisified `execFile` for shelling out to subprocesses with arguments
+ * (safer than `exec` because arguments are NOT shell-interpreted).
+ *
+ * Centralized helper used across the codebase by command modules and
+ * init steps that invoke external CLIs (git, javi-ai, etc.).
+ */
+export const execFileAsync = promisify(execFile);
+//# sourceMappingURL=exec.js.map

package/dist/lib/frontmatter.js

@@ -29,7 +29,7 @@ const KEBAB_CASE_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 export function validateFrontmatter(frontmatter, type) {
     const errors = [];
     // name: required, kebab-case, 2-60 chars
-    const name = frontmatter["name"];
+    const name = frontmatter.name;
     if (typeof name !== "string" || !name) {
         errors.push({
             field: "name",
@@ -48,7 +48,7 @@ export function validateFrontmatter(frontmatter, type) {
         }
     }
     // description: required, non-empty, min 10 chars
-    const desc = frontmatter["description"];
+    const desc = frontmatter.description;
     if (typeof desc !== "string" || !desc) {
         errors.push({
             field: "description",

package/dist/{commands → lib}/harness-audit.js

@@ -3,8 +3,8 @@
  * environment is (hooks, skills, memory, configs). Detects which AI
  * agent harness is installed and generates appropriate config.
  */
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 // ── Harness Detection ──
 const HARNESS_SIGNATURES = [
     {

package/dist/{commands → lib}/parallel-batch.js

@@ -2,6 +2,7 @@
  * Parallel batch sub-agents — spawn test/lint/build runners per module
  * in parallel during quality scoring. Collects results and aggregates.
  */
+import { execFileAsync } from "./exec.js";
 export const DEFAULT_BATCH_CONFIG = {
     maxParallel: 4,
     timeoutMs: 60_000,
@@ -29,9 +30,6 @@ export function createJob(name, command, module) {
  */
 export function createShellExecutor(timeoutMs = 60_000) {
     return async (job) => {
-        const { execFile } = await import("child_process");
-        const { promisify } = await import("util");
-        const execFileAsync = promisify(execFile);
         job.status = "running";
         job.startedAt = Date.now();
         try {

package/dist/lib/plugin.js

@@ -1,11 +1,9 @@
-import { execFile } from "child_process";
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
-import { promisify } from "util";
 import { PLUGIN_ASSET_DIRS, PLUGIN_MANIFEST_FILE, PLUGIN_REGISTRY_URL, PLUGINS_DIR, } from "../constants.js";
 import { generateAgentSkillsManifest } from "./agent-skills.js";
 import { autoWirePlugins } from "./auto-wire.js";
-const execFileAsync = promisify(execFile);
+import { execFileAsync } from "./exec.js";
 const KEBAB_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 const SEMVER_RE = /^\d+\.\d+\.\d+$/;
 // ── Validation ──────────────────────────────────────────────────────────────

package/dist/{commands → lib}/secret-scanner.js

@@ -2,8 +2,8 @@
  * Secret scanner — detects leaked credentials in source files using
  * a curated regex bundle. Designed for pre-commit hooks and CI gates.
  */
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 // ── Regex Bundle ──
 export const SECRET_PATTERNS = [
     // AWS
@@ -219,6 +219,8 @@ export function scanContent(content, filePath, patterns = SECRET_PATTERNS) {
     const lines = content.split("\n");
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
+        if (line === undefined)
+            continue;
         for (const pat of patterns) {
             const match = pat.pattern.exec(line);
             if (match) {

package/dist/{commands → lib}/security-analysis.js

@@ -5,8 +5,8 @@
  * vulnerability detection, variant analysis, and structured reporting
  * with severity levels (critical, high, medium, low).
  */
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 // =============================================================================
 // Constants
 // =============================================================================
@@ -473,7 +473,9 @@ export function formatReportText(report) {
     if (findings.length > 0) {
         lines.push("--- Findings ---");
         for (const f of findings) {
-            const loc = f.column ? `${f.file}:${f.line}:${f.column}` : `${f.file}:${f.line}`;
+            const loc = f.column
+                ? `${f.file}:${f.line}:${f.column}`
+                : `${f.file}:${f.line}`;
             const cwe = f.cwe ? ` [${f.cwe}]` : "";
             lines.push(`[${f.severity.toUpperCase()}] ${f.ruleId}${cwe} at ${loc}`);
             lines.push(`  ${f.message}`);

package/dist/lib/skill-publish.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 import { PLUGIN_MANIFEST_FILE } from "../constants.js";
 import { parseFrontmatter } from "./frontmatter.js";
 // ── Core ───────────────────────────────────────────────────────────────────
@@ -27,6 +27,24 @@ export async function publishSkill(options) {
     if (!(await fs.pathExists(skillMdPath))) {
         return { success: false, error: `SKILL.md not found in ${skillDir}` };
     }
+    // Refuse to follow a symlink. If SKILL.md is a symlink to a file outside
+    // the skill directory (e.g., /etc/passwd), readFile + the later fs.copy
+    // would expose the target's contents in the published manifest bundle.
+    // Mirrors the symlink-reject pattern in security.ts writeBaseline /
+    // ci.ts installCIHooks.
+    try {
+        const stat = await fs.lstat(skillMdPath);
+        if (stat.isSymbolicLink()) {
+            return {
+                success: false,
+                error: `SKILL.md is a symlink; refusing to publish. Use a regular file.`,
+            };
+        }
+    }
+    catch {
+        // pathExists already returned true above; lstat failures here are
+        // unexpected. Fall through to readFile which will surface the error.
+    }
     // Read and parse SKILL.md
     let raw;
     try {
@@ -38,9 +56,9 @@ export async function publishSkill(options) {
     const parsed = parseFrontmatter(raw);
     const frontmatter = parsed?.data ?? {};
     // Extract metadata
-    const name = frontmatter["name"] ?? path.basename(skillDir);
-    const version = frontmatter["version"] ?? "1.0.0";
-    const description = frontmatter["description"] ?? `${name} AI skill`;
+    const name = frontmatter.name ?? path.basename(skillDir);
+    const version = frontmatter.version ?? "1.0.0";
+    const description = frontmatter.description ?? `${name} AI skill`;
     // Validate name format (kebab-case)
     if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name)) {
         return {
@@ -60,7 +78,7 @@ export async function publishSkill(options) {
         name,
         version,
         description: description.length > 200
-            ? description.slice(0, 197) + "..."
+            ? `${description.slice(0, 197)}...`
             : description,
         skills: [name],
         tags: tags.length > 0 ? tags : extractTagsFromDescription(description),

package/dist/{commands → lib}/skill-scanner.d.ts

@@ -47,7 +47,7 @@ interface ProvenanceInfo {
     hasDescription: boolean;
 }
 export declare function checkProvenance(content: string): ProvenanceInfo;
-export declare function scanSkillContent(content: string, filePath: string): SkillThreat[];
+export declare function scanSkillContent(content: string, _filePath: string): SkillThreat[];
 export declare function computeVerdict(threats: SkillThreat[]): SkillScanVerdict;
 export declare function computeScanSummary(threats: SkillThreat[]): SkillScanSummary;
 export declare function extractSkillName(content: string, filePath: string): string;

package/dist/{commands → lib}/skill-scanner.js

@@ -5,8 +5,8 @@
  * patterns before skills are installed. Inspired by the SkillGuard skill
  * (javi-ai) but implemented as a programmatic module with structured output.
  */
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 /**
  * Ordered by severity (critical first). Each pattern is tested against
  * every non-comment line in the skill file.
@@ -47,7 +47,7 @@ export const THREAT_PATTERNS = [
     {
         category: "code-injection",
         severity: "critical",
-        pattern: /\b(?:subprocess\.(?:call|run|Popen)|os\.system|os\.popen)\s*\(\s*(?:f['\"]|user|input|req)/i,
+        pattern: /\b(?:subprocess\.(?:call|run|Popen)|os\.system|os\.popen)\s*\(\s*(?:f['"]|user|input|req)/i,
         message: "Python subprocess with user input — enables command injection",
     },
     // ── Critical: Data Exfiltration ──
@@ -183,7 +183,7 @@ export function checkProvenance(content) {
 // =============================================================================
 // Core scanner
 // =============================================================================
-export function scanSkillContent(content, filePath) {
+export function scanSkillContent(content, _filePath) {
     const threats = [];
     const lines = content.split("\n");
     for (let i = 0; i < lines.length; i++) {

package/dist/lib/stack-detector.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 // ── Stack-to-Skills Mapping ────────────────────────────────────────────────
 /**
  * Maps detected project signals to recommended AI skills.
@@ -95,8 +95,8 @@ export async function detectProjectStack(projectDir) {
         try {
             const pkg = (await fs.readJson(pkgPath));
             const allDeps = {
-                ...(pkg["dependencies"] ?? {}),
-                ...(pkg["devDependencies"] ?? {}),
+                ...(pkg.dependencies ?? {}),
+                ...(pkg.devDependencies ?? {}),
             };
             for (const depName of Object.keys(allDeps)) {
                 const normalizedDep = depName.replace(/^@/, "").split("/")[0];

package/dist/{commands → lib}/supply-chain.js

@@ -3,8 +3,8 @@
  * minimum package release age to protect against typosquatting,
  * dependency confusion, and malicious package takeovers.
  */
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 // ── Detection ──
 export function detectPackageManager(projectDir) {
     if (fs.existsSync(path.join(projectDir, "pnpm-lock.yaml")))

package/dist/lib/template.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 import { DEPENDABOT_FRAGMENTS_DIR, DEPLOY_DESTINATION_MAP, DEPLOY_TEMPLATE_MAP, STACK_CI_MAP, STACK_DEPENDABOT_MAP, TEMPLATES_DIR, } from "../constants.js";
 /**
  * Read a template file and replace __VAR_NAME__ placeholders.
@@ -33,7 +33,7 @@ export async function generateDependabotYml(stacks, includeGitHubActions = true)
         const fragmentPath = path.join(DEPENDABOT_FRAGMENTS_DIR, `${fragmentName}.yml`);
         if (await fs.pathExists(fragmentPath)) {
             const fragment = await fs.readFile(fragmentPath, "utf-8");
-            content += "\n" + fragment;
+            content += `\n${fragment}`;
         }
     }
     return content;

package/dist/lib/workflow/discovery.d.ts

@@ -11,6 +11,14 @@ export declare function discoverWorkflows(projectDir: string): Promise<WorkflowD
 export declare function listBuiltinTemplates(): Promise<WorkflowDiscoveryEntry[]>;
 /**
  * Load a built-in template by name. Returns the file content or null if not found.
+ *
+ * The name argument is restricted to a strict kebab-case alphabet — anything
+ * with path separators, dots, or characters outside [a-z0-9-] is rejected
+ * outright. Without this check, an attacker (or a user with a typo) could
+ * pass --template "../../../etc/passwd" and walk out of WORKFLOW_TEMPLATES_DIR.
+ * The file would still need to end in .dot or .mermaid, but file-existence
+ * probes and arbitrary DOT-parse on attacker-controlled paths is enough to
+ * reject up front.
  */
 export declare function loadBuiltinTemplate(name: string): Promise<{
     content: string;

package/dist/lib/workflow/discovery.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 import { TEMPLATES_DIR } from "../../constants.js";
 const WORKFLOW_EXTENSIONS = {
     ".dot": "dot",
@@ -54,10 +54,27 @@ export async function listBuiltinTemplates() {
 }
 /**
  * Load a built-in template by name. Returns the file content or null if not found.
+ *
+ * The name argument is restricted to a strict kebab-case alphabet — anything
+ * with path separators, dots, or characters outside [a-z0-9-] is rejected
+ * outright. Without this check, an attacker (or a user with a typo) could
+ * pass --template "../../../etc/passwd" and walk out of WORKFLOW_TEMPLATES_DIR.
+ * The file would still need to end in .dot or .mermaid, but file-existence
+ * probes and arbitrary DOT-parse on attacker-controlled paths is enough to
+ * reject up front.
  */
 export async function loadBuiltinTemplate(name) {
+    if (!/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(name)) {
+        return null;
+    }
     for (const [ext, format] of Object.entries(WORKFLOW_EXTENSIONS)) {
         const templatePath = path.join(WORKFLOW_TEMPLATES_DIR, `${name}${ext}`);
+        // Defense in depth: even with the name regex above, ensure the
+        // resolved real path stays inside WORKFLOW_TEMPLATES_DIR.
+        const resolved = path.resolve(templatePath);
+        if (!resolved.startsWith(`${WORKFLOW_TEMPLATES_DIR}${path.sep}`)) {
+            continue;
+        }
         if (await fs.pathExists(templatePath)) {
             const content = await fs.readFile(templatePath, "utf-8");
             return { content, format };

package/dist/lib/workflow/parser.js

@@ -40,24 +40,24 @@ export function parseDot(content, sourceName = "untitled") {
         // Edge: A -> B [label="..."]
         const edgeMatch = stmt.match(/^"?(\w[\w\s-]*?)"?\s*->\s*"?(\w[\w\s-]*?)"?\s*(?:\[([^\]]*)\])?\s*$/);
         if (edgeMatch) {
-            const fromId = edgeMatch[1].trim();
-            const toId = edgeMatch[2].trim();
+            const fromId = edgeMatch[1]?.trim();
+            const toId = edgeMatch[2]?.trim();
             const attrs = edgeMatch[3] ? parseAttributes(edgeMatch[3]) : {};
             ensureNode(nodesMap, fromId);
             ensureNode(nodesMap, toId);
-            edges.push({ from: fromId, to: toId, label: attrs["label"] });
+            edges.push({ from: fromId, to: toId, label: attrs.label });
             continue;
         }
         // Node: A [label="..." check="..."]
         const nodeMatch = stmt.match(/^"?(\w[\w\s-]*?)"?\s*\[([^\]]+)\]\s*$/);
         if (nodeMatch) {
-            const nodeId = nodeMatch[1].trim();
+            const nodeId = nodeMatch[1]?.trim();
             const attrs = parseAttributes(nodeMatch[2]);
             const node = ensureNode(nodesMap, nodeId);
-            if (attrs["label"])
-                node.label = attrs["label"];
-            if (attrs["check"])
-                node.check = attrs["check"];
+            if (attrs.label)
+                node.label = attrs.label;
+            if (attrs.check)
+                node.check = attrs.check;
             // Store remaining attrs as metadata
             const { label: _l, check: _c, ...rest } = attrs;
             if (Object.keys(rest).length > 0)
@@ -69,8 +69,8 @@ export function parseDot(content, sourceName = "untitled") {
         if (chainMatch) {
             const parts = stmt.split("->").map((p) => p.trim().replace(/^"|"$/g, ""));
             for (let i = 0; i < parts.length - 1; i++) {
-                const fromId = parts[i].trim();
-                const toId = parts[i + 1].trim();
+                const fromId = parts[i]?.trim();
+                const toId = parts[i + 1]?.trim();
                 ensureNode(nodesMap, fromId);
                 ensureNode(nodesMap, toId);
                 edges.push({ from: fromId, to: toId });
@@ -101,7 +101,7 @@ export function parseMermaid(content, sourceName = "untitled") {
         throw new WorkflowParseError("Empty mermaid file");
     }
     // First line must be flowchart directive
-    const headerMatch = lines[0].match(/^(?:flowchart|graph)\s+(LR|TD|TB|RL|BT)/i);
+    const headerMatch = lines[0]?.match(/^(?:flowchart|graph)\s+(LR|TD|TB|RL|BT)/i);
     if (!headerMatch) {
         throw new WorkflowParseError('Expected "flowchart LR|TD" or "graph LR|TD" at first line', 1);
     }
@@ -120,7 +120,7 @@ export function parseMermaid(content, sourceName = "untitled") {
         if (edgeLabelMatch) {
             const fromId = edgeLabelMatch[1];
             const fromLabel = edgeLabelMatch[2];
-            const edgeLabel = edgeLabelMatch[3].trim();
+            const edgeLabel = edgeLabelMatch[3]?.trim();
             const toId = edgeLabelMatch[4];
             const toLabel = edgeLabelMatch[5];
             const fromNode = ensureNode(nodesMap, fromId);
@@ -138,7 +138,7 @@ export function parseMermaid(content, sourceName = "untitled") {
         if (edgeMatch && line.includes("-->")) {
             const segments = line.split(/\s*-->\s*/);
             for (let s = 0; s < segments.length; s++) {
-                const seg = segments[s].trim();
+                const seg = segments[s]?.trim();
                 const segMatch = seg.match(/^(\w[\w-]*)(?:\[([^\]]+)\])?$/);
                 if (segMatch) {
                     const nodeId = segMatch[1];
@@ -150,8 +150,8 @@ export function parseMermaid(content, sourceName = "untitled") {
             }
             // Create edges between consecutive segments
             for (let s = 0; s < segments.length - 1; s++) {
-                const fromSeg = segments[s].trim().match(/^(\w[\w-]*)/);
-                const toSeg = segments[s + 1].trim().match(/^(\w[\w-]*)/);
+                const fromSeg = segments[s]?.trim().match(/^(\w[\w-]*)/);
+                const toSeg = segments[s + 1]?.trim().match(/^(\w[\w-]*)/);
                 if (fromSeg && toSeg) {
                     edges.push({ from: fromSeg[1], to: toSeg[1] });
                 }

package/dist/lib/workflow/validator.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import fs from "fs-extra";
-import path from "path";
 /**
  * Built-in check functions that map node `check` attributes to project validations.
  * Each check receives the project directory and returns { pass, detail }.
@@ -29,10 +29,10 @@ const BUILTIN_CHECKS = {
             try {
                 const pkg = (await fs.readJson(pkgPath));
                 const deps = {
-                    ...pkg["devDependencies"],
-                    ...pkg["dependencies"],
+                    ...pkg.devDependencies,
+                    ...pkg.dependencies,
                 };
-                if (deps["eslint"] || deps["biome"] || deps["oxlint"]) {
+                if (deps.eslint || deps.biome || deps.oxlint) {
                     return { pass: true, detail: "Linter found in package.json" };
                 }
             }

package/dist/tasks/index.d.ts

@@ -1,4 +1,4 @@
-export { generateTaskId, createTask, addSubtask, buildTaskTree, findTask, type TaskNode, type TaskStatus, } from './task-id.js';
-export { TaskTracker } from './task-tracker.js';
-export { getDefaultScaffoldTasks } from './scaffold-tasks.js';
+export { getDefaultScaffoldTasks } from "./scaffold-tasks.js";
+export { addSubtask, buildTaskTree, createTask, findTask, generateTaskId, type TaskNode, type TaskStatus, } from "./task-id.js";
+export { TaskTracker } from "./task-tracker.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/tasks/index.js

@@ -1,4 +1,4 @@
-export { generateTaskId, createTask, addSubtask, buildTaskTree, findTask, } from './task-id.js';
-export { TaskTracker } from './task-tracker.js';
-export { getDefaultScaffoldTasks } from './scaffold-tasks.js';
+export { getDefaultScaffoldTasks } from "./scaffold-tasks.js";
+export { addSubtask, buildTaskTree, createTask, findTask, generateTaskId, } from "./task-id.js";
+export { TaskTracker } from "./task-tracker.js";
 //# sourceMappingURL=index.js.map

package/dist/tasks/scaffold-tasks.d.ts

@@ -1,3 +1,3 @@
-import { type TaskNode } from './task-id.js';
+import { type TaskNode } from "./task-id.js";
 export declare function getDefaultScaffoldTasks(): TaskNode[];
 //# sourceMappingURL=scaffold-tasks.d.ts.map

package/dist/tasks/scaffold-tasks.js

@@ -1,14 +1,14 @@
-import { createTask, addSubtask } from './task-id.js';
+import { addSubtask, createTask } from "./task-id.js";
 export function getDefaultScaffoldTasks() {
-    const setup = createTask({ title: 'Setup project structure' });
-    addSubtask(setup, { title: 'Initialize git repository' });
-    addSubtask(setup, { title: 'Configure TypeScript' });
-    addSubtask(setup, { title: 'Setup linter and formatter' });
-    const testing = createTask({ title: 'Setup testing' });
-    addSubtask(testing, { title: 'Configure test runner' });
-    addSubtask(testing, { title: 'Write initial tests' });
-    const ci = createTask({ title: 'Create CI pipeline' });
-    const deploy = createTask({ title: 'Deploy to production' });
+    const setup = createTask({ title: "Setup project structure" });
+    addSubtask(setup, { title: "Initialize git repository" });
+    addSubtask(setup, { title: "Configure TypeScript" });
+    addSubtask(setup, { title: "Setup linter and formatter" });
+    const testing = createTask({ title: "Setup testing" });
+    addSubtask(testing, { title: "Configure test runner" });
+    addSubtask(testing, { title: "Write initial tests" });
+    const ci = createTask({ title: "Create CI pipeline" });
+    const deploy = createTask({ title: "Deploy to production" });
     return [setup, testing, ci, deploy];
 }
 //# sourceMappingURL=scaffold-tasks.js.map

package/dist/tasks/task-id.d.ts

@@ -1,4 +1,4 @@
-export type TaskStatus = 'todo' | 'in-progress' | 'done';
+export type TaskStatus = "todo" | "in-progress" | "done";
 export type TaskNode = {
     id: string;
     title: string;

package/dist/tasks/task-id.js

@@ -1,7 +1,11 @@
-import { createHash } from 'node:crypto';
+import { createHash } from "node:crypto";
 export function generateTaskId(content) {
-    const input = [content.title, content.description ?? '', content.parentId ?? ''].join('|');
-    return createHash('sha256').update(input).digest('hex').slice(0, 7);
+    const input = [
+        content.title,
+        content.description ?? "",
+        content.parentId ?? "",
+    ].join("|");
+    return createHash("sha256").update(input).digest("hex").slice(0, 7);
 }
 export function createTask(params) {
     const now = new Date().toISOString();
@@ -9,7 +13,7 @@ export function createTask(params) {
         id: generateTaskId(params),
         title: params.title,
         description: params.description,
-        status: 'todo',
+        status: "todo",
         parentId: params.parentId,
         children: [],
         dependencies: [],
@@ -34,7 +38,7 @@ export function buildTaskTree(flat) {
     const roots = [];
     for (const node of map.values()) {
         if (node.parentId && map.has(node.parentId)) {
-            map.get(node.parentId).children.push(node);
+            map.get(node.parentId)?.children.push(node);
         }
         else {
             roots.push(node);

package/dist/tasks/task-tracker.d.ts

@@ -1,4 +1,4 @@
-import { type TaskNode, type TaskStatus } from './task-id.js';
+import { type TaskNode, type TaskStatus } from "./task-id.js";
 export declare class TaskTracker {
     private tasks;
     addTask(title: string, description?: string, parentId?: string): TaskNode;

package/dist/tasks/task-tracker.js

@@ -1,4 +1,4 @@
-import { createTask } from './task-id.js';
+import { createTask } from "./task-id.js";
 export class TaskTracker {
     tasks = [];
     addTask(title, description, parentId) {
@@ -41,30 +41,30 @@ export class TaskTracker {
                 return false;
             return t.dependencies.some((depId) => {
                 const dep = this.findFlat(depId);
-                return !dep || dep.status !== 'done';
+                return !dep || dep.status !== "done";
             });
         });
     }
     getReadyTasks() {
         return this.tasks.filter((t) => {
-            if (t.status !== 'todo')
+            if (t.status !== "todo")
                 return false;
             if (t.dependencies.length === 0)
                 return true;
             return t.dependencies.every((depId) => {
                 const dep = this.findFlat(depId);
-                return dep?.status === 'done';
+                return dep?.status === "done";
             });
         });
     }
     toMarkdown() {
         return this.tasks
             .map((t) => {
-            const check = t.status === 'done' ? 'x' : ' ';
-            const assignee = t.assignee ? ` @${t.assignee}` : '';
+            const check = t.status === "done" ? "x" : " ";
+            const assignee = t.assignee ? ` @${t.assignee}` : "";
             return `- [${check}] ${t.title}${assignee}`;
         })
-            .join('\n');
+            .join("\n");
     }
     toJSON() {
         return JSON.stringify(this.tasks);

package/dist/ui/App.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import { Box } from "ink";
-import path from "path";
 import React, { useState } from "react";
 import { initProject } from "../commands/init.js";
 import CISelector from "./CISelector.js";

package/dist/ui/CIContext.js

@@ -1,5 +1,4 @@
-import React from "react";
-import { createContext, useContext } from "react";
+import React, { createContext, useContext } from "react";
 const CIContext = createContext({ isCI: false });
 export function useCIMode() {
     return useContext(CIContext).isCI;

package/dist/ui/Header.js

@@ -10,10 +10,10 @@ function pad(content) {
     return content + " ".repeat(Math.max(0, spaces));
 }
 export default function Header({ subtitle, dryRun }) {
-    const top = "\u256d" + "\u2500".repeat(BOX_WIDTH) + "\u256e";
-    const bottom = "\u2570" + "\u2500".repeat(BOX_WIDTH) + "\u256f";
-    const titleLine = pad("  " + TITLE + "  ");
-    const subLine = subtitle ? pad("  " + subtitle + "  ") : null;
+    const top = `\u256d${"\u2500".repeat(BOX_WIDTH)}\u256e`;
+    const bottom = `\u2570${"\u2500".repeat(BOX_WIDTH)}\u256f`;
+    const titleLine = pad(`  ${TITLE}  `);
+    const subLine = subtitle ? pad(`  ${subtitle}  `) : null;
     return (React.createElement(Box, { flexDirection: "column", marginBottom: 1 },
         React.createElement(Text, { color: theme.muted }, top),
         React.createElement(Box, null,

package/dist/ui/NameInput.js

@@ -1,5 +1,5 @@
+import path from "node:path";
 import { Box, Text, useInput } from "ink";
-import path from "path";
 import React, { useEffect, useState } from "react";
 import { useCIMode } from "./CIContext.js";
 import { theme } from "./theme.js";

package/dist/ui/Progress.d.ts

@@ -6,6 +6,6 @@ interface Props {
     contextLine?: string;
     onDone?: () => void;
 }
-export default function Progress({ steps, projectName, contextLine, onDone, }: Props): React.JSX.Element;
+export default function Progress({ steps, projectName: _projectName, contextLine, onDone, }: Props): React.JSX.Element;
 export {};
 //# sourceMappingURL=Progress.d.ts.map

package/dist/ui/Progress.js

@@ -15,7 +15,7 @@ const STATUS_COLOR = {
     error: theme.error,
     skipped: theme.muted,
 };
-export default function Progress({ steps, projectName, contextLine, onDone, }) {
+export default function Progress({ steps, projectName: _projectName, contextLine, onDone, }) {
     const doneRef = useRef(false);
     const total = steps.length;
     const completed = steps.filter((s) => s.status === "done" || s.status === "skipped").length;

package/dist/ui/StackSelector.js

@@ -36,7 +36,7 @@ export default function StackSelector({ projectDir, onConfirm }) {
             onConfirm(ALL_STACKS[cursor]);
         }
     }, [isCI, detecting]); // eslint-disable-line react-hooks/exhaustive-deps
-    useInput((input, key) => {
+    useInput((_input, key) => {
         if (detecting)
             return;
         if (key.upArrow)