pruff-skills 1.0.1 → 1.1.0

package/ThirdPartyNoticeText.txt

@@ -66,7 +66,7 @@ OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 
 ================================================================================
-Package: simple-git@3.36.0
+Package: simple-git@3.30.0
 License: MIT
 Repository: https://github.com/steveukx/git-js
 --------------------------------------------------------------------------------
@@ -139,7 +139,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 
 ================================================================================
-Package: yaml@2.9.0
+Package: yaml@2.8.3
 License: ISC
 Repository: https://github.com/eemeli/yaml
 --------------------------------------------------------------------------------

package/dist/_chunks/libs/@clack/core.mjs

@@ -1,4 +1,4 @@
-import { __commonJSMin, __toESM } from "../../rolldown-runtime.mjs";
+import { r as __toESM, t as __commonJSMin } from "../../rolldown-runtime.mjs";
 import { stdin, stdout } from "node:process";
 import * as g from "node:readline";
 import O from "node:readline";
@@ -637,10 +637,7 @@ let _D = class extends x {
 		if (u.group === !0) {
 			const t = u.value, F = this.getGroupItems(t);
 			this.isGroupSelected(t) ? this.value = this.value.filter((s) => F.findIndex((i) => i.value === s) === -1) : this.value = [...this.value, ...F.map((s) => s.value)], this.value = Array.from(new Set(this.value));
-		} else {
-			const t = this.value.includes(u.value);
-			this.value = t ? this.value.filter((F) => F !== u.value) : [...this.value, u.value];
-		}
+		} else this.value = this.value.includes(u.value) ? this.value.filter((F) => F !== u.value) : [...this.value, u.value];
 	}
 };
 A = /* @__PURE__ */ new WeakMap();
@@ -674,12 +671,10 @@ let SD = class extends x {
 		return this.options[this.cursor].value;
 	}
 	toggleAll() {
-		const u = this.value.length === this.options.length;
-		this.value = u ? [] : this.options.map((t) => t.value);
+		this.value = this.value.length === this.options.length ? [] : this.options.map((t) => t.value);
 	}
 	toggleValue() {
-		const u = this.value.includes(this._value);
-		this.value = u ? this.value.filter((t) => t !== this._value) : [...this.value, this._value];
+		this.value = this.value.includes(this._value) ? this.value.filter((t) => t !== this._value) : [...this.value, this._value];
 	}
 };
 var TD = Object.defineProperty, jD = (e, u, t) => u in e ? TD(e, u, {
@@ -769,4 +764,4 @@ var RD = class extends x {
 		});
 	}
 };
-export { ID, LD, MD, RD, SD, _D, dD, fD, pD, require_picocolors, require_src };
+export { SD as a, fD as c, require_src as d, RD as i, pD as l, LD as n, _D as o, MD as r, dD as s, ID as t, require_picocolors as u };

package/dist/_chunks/libs/@clack/prompts.mjs

@@ -1,5 +1,5 @@
-import { __toESM } from "../../rolldown-runtime.mjs";
-import { LD, MD, RD, SD, _D, dD, fD, require_picocolors, require_src } from "./core.mjs";
+import { r as __toESM } from "../../rolldown-runtime.mjs";
+import { a as SD, c as fD, d as require_src, i as RD, l as pD, n as LD, o as _D, r as MD, s as dD, t as ID, u as require_picocolors } from "./core.mjs";
 import { stripVTControlCharacters } from "node:util";
 import y from "node:process";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
@@ -371,4 +371,4 @@ ${J}${i.trimStart()}`), r = 3 + stripVTControlCharacters(i.trimStart()).length);
 		}
 	};
 };
-export { Ie, M, Me, Se, Y, be, fe, ge, he, ve, xe, ye };
+export { Y as a, ge as c, xe as d, ye as f, Se as i, he as l, M as n, be as o, Me as r, fe as s, Ie as t, ve as u };

package/dist/_chunks/libs/@kwsites/file-exists.mjs

@@ -1,4 +1,4 @@
-import { __commonJSMin, __require } from "../../rolldown-runtime.mjs";
+import { n as __require, t as __commonJSMin } from "../../rolldown-runtime.mjs";
 var require_ms = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var s = 1e3;
 	var m = s * 60;
@@ -559,4 +559,4 @@ var require_dist = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	__export(require_src());
 }));
-export { require_dist, require_src$1 as require_src };
+export { require_src$1 as n, require_dist as t };

package/dist/_chunks/libs/@kwsites/promise-deferred.mjs

@@ -1,4 +1,4 @@
-import { __commonJSMin } from "../../rolldown-runtime.mjs";
+import { t as __commonJSMin } from "../../rolldown-runtime.mjs";
 var require_dist = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.createDeferred = exports.deferred = void 0;
@@ -34,4 +34,4 @@ var require_dist = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.deferred = deferred;
 	exports.createDeferred = deferred;
 }));
-export { require_dist };
+export { require_dist as t };

package/dist/_chunks/libs/@vercel/detect-agent.mjs

@@ -1,4 +1,4 @@
-import { __commonJSMin, __require } from "../../rolldown-runtime.mjs";
+import { n as __require, t as __commonJSMin } from "../../rolldown-runtime.mjs";
 var require_dist = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var __defProp = Object.defineProperty;
 	var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -134,9 +134,5 @@ var require_dist = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			agent: void 0
 		};
 	}
-	0 && (module.exports = {
-		KNOWN_AGENTS,
-		determineAgent
-	});
 }));
-export { require_dist };
+export { require_dist as t };

package/dist/_chunks/libs/simple-git.mjs

@@ -1,8 +1,7 @@
-import { __toESM } from "../rolldown-runtime.mjs";
-import { require_dist, require_src } from "./@kwsites/file-exists.mjs";
-import { c, o, r } from "./@simple-git/args-pathspec.mjs";
-import { require_dist as require_dist$1 } from "./@kwsites/promise-deferred.mjs";
-import { ne } from "./@simple-git/argv-parser.mjs";
+import { r as __toESM } from "../rolldown-runtime.mjs";
+import { n as require_src, t as require_dist } from "./@kwsites/file-exists.mjs";
+import { t as require_dist$1 } from "./@kwsites/promise-deferred.mjs";
+import { Buffer as Buffer$1 } from "node:buffer";
 import { spawn } from "child_process";
 import { normalize } from "node:path";
 import { EventEmitter } from "node:events";
@@ -35,6 +34,22 @@ var __copyProps = (to, from, except, desc) => {
 	return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+function pathspec(...paths) {
+	const key = new String(paths);
+	cache.set(key, paths);
+	return key;
+}
+function isPathSpec(path) {
+	return path instanceof String && cache.has(path);
+}
+function toPaths(pathSpec) {
+	return cache.get(pathSpec) || [];
+}
+var cache;
+var init_pathspec = __esm({ "src/lib/args/pathspec.ts"() {
+	"use strict";
+	cache = /* @__PURE__ */ new WeakMap();
+} });
 var GitError;
 var init_git_error = __esm({ "src/lib/errors/git-error.ts"() {
 	"use strict";
@@ -142,7 +157,7 @@ function prefixedArray(input, prefix) {
 	return output;
 }
 function bufferToString(input) {
-	return (Array.isArray(input) ? Buffer.concat(input) : input).toString("utf-8");
+	return (Array.isArray(input) ? Buffer$1.concat(input) : input).toString("utf-8");
 }
 function pick(source, properties) {
 	const out = {};
@@ -171,7 +186,7 @@ function filterType(input, filter, def) {
 	return arguments.length > 2 ? def : void 0;
 }
 function filterPrimitives(input, omit) {
-	const type = r(input) ? "string" : typeof input;
+	const type = isPathSpec(input) ? "string" : typeof input;
 	return /number|string|boolean/.test(type) && (!omit || !omit.includes(type));
 }
 function filterPlainObject(input) {
@@ -183,6 +198,7 @@ function filterFunction(input) {
 var filterArray, filterNumber, filterString, filterStringOrStringArray, filterHasLength;
 var init_argument_filters = __esm({ "src/lib/utils/argument-filters.ts"() {
 	"use strict";
+	init_pathspec();
 	init_util();
 	filterArray = (input) => {
 		return Array.isArray(input);
@@ -191,7 +207,7 @@ var init_argument_filters = __esm({ "src/lib/utils/argument-filters.ts"() {
 		return typeof input === "number";
 	};
 	filterString = (input) => {
-		return typeof input === "string" || r(input);
+		return typeof input === "string";
 	};
 	filterStringOrStringArray = (input) => {
 		return filterString(input) || Array.isArray(input) && input.every(filterString);
@@ -291,7 +307,7 @@ function appendTaskOptions(options, commands = []) {
 	if (!filterPlainObject(options)) return commands;
 	return Object.keys(options).reduce((commands2, key) => {
 		const value = options[key];
-		if (r(value)) commands2.push(value);
+		if (isPathSpec(value)) commands2.push(value);
 		else if (filterPrimitives(value, ["boolean"])) commands2.push(key + "=" + value);
 		else if (Array.isArray(value)) {
 			for (const v of value) if (!filterPrimitives(v, ["string", "number"])) commands2.push(key + "=" + v);
@@ -320,6 +336,7 @@ var init_task_options = __esm({ "src/lib/utils/task-options.ts"() {
 	"use strict";
 	init_argument_filters();
 	init_util();
+	init_pathspec();
 } });
 function callTaskParser(parser4, streams) {
 	return parser4(streams.stdOut, streams.stdErr);
@@ -1073,10 +1090,7 @@ var init_git_executor_chain = __esm({ "src/lib/runners/git-executor-chain.ts"()
 		}
 		async attemptRemoteTask(task, logger) {
 			const binary = this._plugins.exec("spawn.binary", "", pluginContext(task, task.commands));
-			const args = this._plugins.exec("spawn.args", [...task.commands], {
-				...pluginContext(task, task.commands),
-				env: { ...this.env }
-			});
+			const args = this._plugins.exec("spawn.args", [...task.commands], pluginContext(task, task.commands));
 			const raw = await this.gitResponse(task, binary, args, this.outputHandler, logger.step("SPAWN"));
 			const outputStreams = await this.handleTaskData(task, args, raw, logger.step("HANDLE"));
 			logger(`passing response to task's parser as a %s`, task.format);
@@ -1670,7 +1684,7 @@ function parseLogOptions(opt = {}, customArgs = []) {
 		const rangeOperator = opt.symmetric !== false ? "..." : "..";
 		suffix.push(`${opt.from || ""}${rangeOperator}${opt.to || ""}`);
 	}
-	if (filterString(opt.file)) command.push("--follow", c(opt.file));
+	if (filterString(opt.file)) command.push("--follow", pathspec(opt.file));
 	appendTaskOptions(userOptions(opt), command);
 	return {
 		fields,
@@ -1704,6 +1718,7 @@ var excludeOptions;
 var init_log = __esm({ "src/lib/tasks/log.ts"() {
 	"use strict";
 	init_log_format();
+	init_pathspec();
 	init_parse_list_log_summary();
 	init_utils();
 	init_task();
@@ -2110,13 +2125,13 @@ function parser3(indexX, indexY, handler) {
 	return [`${indexX}${indexY}`, handler];
 }
 function conflicts(indexX, ...indexY) {
-	return indexY.map((y) => parser3(indexX, y, (result, file) => result.conflicted.push(file)));
+	return indexY.map((y) => parser3(indexX, y, (result, file) => append(result.conflicted, file)));
 }
 function splitLine(result, lineStr) {
 	const trimmed2 = lineStr.trim();
 	switch (" ") {
-		case trimmed2.charAt(2): return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.slice(3));
-		case trimmed2.charAt(1): return data(" ", trimmed2.charAt(0), trimmed2.slice(2));
+		case trimmed2.charAt(2): return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.substr(3));
+		case trimmed2.charAt(1): return data(" ", trimmed2.charAt(0), trimmed2.substr(2));
 		default: return;
 	}
 	function data(index, workingDir, path) {
@@ -2153,42 +2168,26 @@ var init_StatusSummary = __esm({ "src/lib/responses/StatusSummary.ts"() {
 		}
 	};
 	parsers6 = new Map([
-		parser3(" ", "A", (result, file) => result.created.push(file)),
-		parser3(" ", "D", (result, file) => result.deleted.push(file)),
-		parser3(" ", "M", (result, file) => result.modified.push(file)),
-		parser3("A", " ", (result, file) => {
-			result.created.push(file);
-			result.staged.push(file);
-		}),
-		parser3("A", "M", (result, file) => {
-			result.created.push(file);
-			result.staged.push(file);
-			result.modified.push(file);
-		}),
-		parser3("D", " ", (result, file) => {
-			result.deleted.push(file);
-			result.staged.push(file);
-		}),
-		parser3("M", " ", (result, file) => {
-			result.modified.push(file);
-			result.staged.push(file);
-		}),
-		parser3("M", "M", (result, file) => {
-			result.modified.push(file);
-			result.staged.push(file);
-		}),
+		parser3(" ", "A", (result, file) => append(result.created, file)),
+		parser3(" ", "D", (result, file) => append(result.deleted, file)),
+		parser3(" ", "M", (result, file) => append(result.modified, file)),
+		parser3("A", " ", (result, file) => append(result.created, file) && append(result.staged, file)),
+		parser3("A", "M", (result, file) => append(result.created, file) && append(result.staged, file) && append(result.modified, file)),
+		parser3("D", " ", (result, file) => append(result.deleted, file) && append(result.staged, file)),
+		parser3("M", " ", (result, file) => append(result.modified, file) && append(result.staged, file)),
+		parser3("M", "M", (result, file) => append(result.modified, file) && append(result.staged, file)),
 		parser3("R", " ", (result, file) => {
-			result.renamed.push(renamedFile(file));
+			append(result.renamed, renamedFile(file));
 		}),
 		parser3("R", "M", (result, file) => {
 			const renamed = renamedFile(file);
-			result.renamed.push(renamed);
-			result.modified.push(renamed.to);
+			append(result.renamed, renamed);
+			append(result.modified, renamed.to);
 		}),
 		parser3("!", "!", (_result, _file) => {
-			(_result.ignored = _result.ignored || []).push(_file);
+			append(_result.ignored = _result.ignored || [], _file);
 		}),
-		parser3("?", "?", (result, file) => result.not_added.push(file)),
+		parser3("?", "?", (result, file) => append(result.not_added, file)),
 		...conflicts("A", "A", "U"),
 		...conflicts("D", "D", "U"),
 		...conflicts("U", "A", "D", "U"),
@@ -2291,36 +2290,6 @@ var init_version = __esm({ "src/lib/tasks/version.ts"() {
 		Object.assign(result, versionResponse(asNumber(major), asNumber(minor), patch, agent));
 	})];
 } });
-function createCloneTask(api, task, repoPath, ...args) {
-	if (!filterString(repoPath)) return configurationErrorTask(`git.${api}() requires a string 'repoPath'`);
-	return task(repoPath, filterType(args[0], filterString), getTrailingOptions(arguments));
-}
-function clone_default() {
-	return {
-		clone(repo, ...rest) {
-			return this._runTask(createCloneTask("clone", cloneTask, filterType(repo, filterString), ...rest), trailingFunctionArgument(arguments));
-		},
-		mirror(repo, ...rest) {
-			return this._runTask(createCloneTask("mirror", cloneMirrorTask, filterType(repo, filterString), ...rest), trailingFunctionArgument(arguments));
-		}
-	};
-}
-var cloneTask, cloneMirrorTask;
-var init_clone = __esm({ "src/lib/tasks/clone.ts"() {
-	"use strict";
-	init_task();
-	init_utils();
-	cloneTask = (repo, directory, customArgs) => {
-		const commands = ["clone", ...customArgs];
-		filterString(repo) && commands.push(c(repo));
-		filterString(directory) && commands.push(c(directory));
-		return straightThroughStringTask(commands);
-	};
-	cloneMirrorTask = (repo, directory, customArgs) => {
-		append(customArgs, "--mirror");
-		return cloneTask(repo, directory, customArgs);
-	};
-} });
 var simple_git_api_exports = {};
 __export(simple_git_api_exports, { SimpleGitApi: () => SimpleGitApi });
 var SimpleGitApi;
@@ -2344,7 +2313,6 @@ var init_simple_git_api = __esm({ "src/lib/simple-git-api.ts"() {
 	init_task();
 	init_version();
 	init_utils();
-	init_clone();
 	SimpleGitApi = class {
 		constructor(_executor) {
 			this._executor = _executor;
@@ -2403,7 +2371,7 @@ var init_simple_git_api = __esm({ "src/lib/simple-git-api.ts"() {
 			return this._runTask(statusTask(getTrailingOptions(arguments)), trailingFunctionArgument(arguments));
 		}
 	};
-	Object.assign(SimpleGitApi.prototype, checkout_default(), clone_default(), commit_default(), config_default(), count_objects_default(), first_commit_default(), grep_default(), log_default(), show_default(), version_default());
+	Object.assign(SimpleGitApi.prototype, checkout_default(), commit_default(), config_default(), count_objects_default(), first_commit_default(), grep_default(), log_default(), show_default(), version_default());
 } });
 var scheduler_exports = {};
 __export(scheduler_exports, { Scheduler: () => Scheduler });
@@ -2672,6 +2640,30 @@ var init_check_ignore = __esm({ "src/lib/tasks/check-ignore.ts"() {
 	"use strict";
 	init_CheckIgnore();
 } });
+var clone_exports = {};
+__export(clone_exports, {
+	cloneMirrorTask: () => cloneMirrorTask,
+	cloneTask: () => cloneTask
+});
+function disallowedCommand(command) {
+	return /^--upload-pack(=|$)/.test(command);
+}
+function cloneTask(repo, directory, customArgs) {
+	const commands = ["clone", ...customArgs];
+	filterString(repo) && commands.push(repo);
+	filterString(directory) && commands.push(directory);
+	if (commands.find(disallowedCommand)) return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
+	return straightThroughStringTask(commands);
+}
+function cloneMirrorTask(repo, directory, customArgs) {
+	append(customArgs, "--mirror");
+	return cloneTask(repo, directory, customArgs);
+}
+var init_clone = __esm({ "src/lib/tasks/clone.ts"() {
+	"use strict";
+	init_task();
+	init_utils();
+} });
 function parseFetchResult(stdOut, stdErr) {
 	return parseStringResponse({
 		raw: stdOut,
@@ -2717,13 +2709,13 @@ var init_parse_fetch = __esm({ "src/lib/parsers/parse-fetch.ts"() {
 } });
 var fetch_exports = {};
 __export(fetch_exports, { fetchTask: () => fetchTask });
-function disallowedCommand(command) {
+function disallowedCommand2(command) {
 	return /^--upload-pack(=|$)/.test(command);
 }
 function fetchTask(remote, branch, customArgs) {
 	const commands = ["fetch", ...customArgs];
 	if (remote && branch) commands.push(remote, branch);
-	if (commands.find(disallowedCommand)) return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
+	if (commands.find(disallowedCommand2)) return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
 	return {
 		commands,
 		format: "utf-8",
@@ -3012,12 +3004,13 @@ var require_git = __commonJS({ "src/git.js"(exports, module) {
 	var { GitExecutor: GitExecutor2 } = (init_git_executor(), __toCommonJS(git_executor_exports));
 	var { SimpleGitApi: SimpleGitApi2 } = (init_simple_git_api(), __toCommonJS(simple_git_api_exports));
 	var { Scheduler: Scheduler2 } = (init_scheduler(), __toCommonJS(scheduler_exports));
-	var { adhocExecTask: adhocExecTask2, configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS(task_exports));
+	var { configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS(task_exports));
 	var { asArray: asArray2, filterArray: filterArray2, filterPrimitives: filterPrimitives2, filterString: filterString2, filterStringOrStringArray: filterStringOrStringArray2, filterType: filterType2, getTrailingOptions: getTrailingOptions2, trailingFunctionArgument: trailingFunctionArgument2, trailingOptionsArgument: trailingOptionsArgument2 } = (init_utils(), __toCommonJS(utils_exports));
 	var { applyPatchTask: applyPatchTask2 } = (init_apply_patch(), __toCommonJS(apply_patch_exports));
 	var { branchTask: branchTask2, branchLocalTask: branchLocalTask2, deleteBranchesTask: deleteBranchesTask2, deleteBranchTask: deleteBranchTask2 } = (init_branch(), __toCommonJS(branch_exports));
 	var { checkIgnoreTask: checkIgnoreTask2 } = (init_check_ignore(), __toCommonJS(check_ignore_exports));
 	var { checkIsRepoTask: checkIsRepoTask2 } = (init_check_is_repo(), __toCommonJS(check_is_repo_exports));
+	var { cloneTask: cloneTask2, cloneMirrorTask: cloneMirrorTask2 } = (init_clone(), __toCommonJS(clone_exports));
 	var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS(clean_exports));
 	var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS(diff_exports));
 	var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS(fetch_exports));
@@ -3048,6 +3041,16 @@ var require_git = __commonJS({ "src/git.js"(exports, module) {
 	Git2.prototype.stashList = function(options) {
 		return this._runTask(stashListTask2(trailingOptionsArgument2(arguments) || {}, filterArray2(options) && options || []), trailingFunctionArgument2(arguments));
 	};
+	function createCloneTask(api, task, repoPath, localPath) {
+		if (typeof repoPath !== "string") return configurationErrorTask2(`git.${api}() requires a string 'repoPath'`);
+		return task(repoPath, filterType2(localPath, filterString2), getTrailingOptions2(arguments));
+	}
+	Git2.prototype.clone = function() {
+		return this._runTask(createCloneTask("clone", cloneTask2, ...arguments), trailingFunctionArgument2(arguments));
+	};
+	Git2.prototype.mirror = function() {
+		return this._runTask(createCloneTask("mirror", cloneMirrorTask2, ...arguments), trailingFunctionArgument2(arguments));
+	};
 	Git2.prototype.mv = function(from, to) {
 		return this._runTask(moveTask2(from, to), trailingFunctionArgument2(arguments));
 	};
@@ -3066,7 +3069,8 @@ var require_git = __commonJS({ "src/git.js"(exports, module) {
 		return this._runTask(fetchTask2(filterType2(remote, filterString2), filterType2(branch, filterString2), getTrailingOptions2(arguments)), trailingFunctionArgument2(arguments));
 	};
 	Git2.prototype.silent = function(silence) {
-		return this._runTask(adhocExecTask2(() => console.warn("simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this method will be removed.")));
+		console.warn("simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this will be an error in version 3");
+		return this;
 	};
 	Git2.prototype.tags = function(options, then) {
 		return this._runTask(tagListTask2(getTrailingOptions2(arguments)), trailingFunctionArgument2(arguments));
@@ -3216,7 +3220,7 @@ var require_git = __commonJS({ "src/git.js"(exports, module) {
 		});
 	};
 	Git2.prototype.clearQueue = function() {
-		return this._runTask(adhocExecTask2(() => console.warn("simple-git deprecation notice: clearQueue() is deprecated and will be removed, switch to using the abortPlugin instead.")));
+		return this;
 	};
 	Git2.prototype.checkIgnore = function(pathnames, then) {
 		return this._runTask(checkIgnoreTask2(asArray2(filterType2(pathnames, filterStringOrStringArray2, []))), trailingFunctionArgument2(arguments));
@@ -3226,6 +3230,7 @@ var require_git = __commonJS({ "src/git.js"(exports, module) {
 	};
 	module.exports = Git2;
 } });
+init_pathspec();
 init_git_error();
 var GitConstructError = class extends GitError {
 	constructor(config, message) {
@@ -3269,11 +3274,28 @@ function abortPlugin(signal) {
 		}
 	}];
 }
-function blockUnsafeOperationsPlugin(options = {}) {
+function isConfigSwitch(arg) {
+	return typeof arg === "string" && arg.trim().toLowerCase() === "-c";
+}
+function preventProtocolOverride(arg, next) {
+	if (!isConfigSwitch(arg)) return;
+	if (!/^\s*protocol(.[a-z]+)?.allow/.test(next)) return;
+	throw new GitPluginError(void 0, "unsafe", "Configuring protocol.allow is not permitted without enabling allowUnsafeExtProtocol");
+}
+function preventUploadPack(arg, method) {
+	if (/^\s*--(upload|receive)-pack/.test(arg)) throw new GitPluginError(void 0, "unsafe", `Use of --upload-pack or --receive-pack is not permitted without enabling allowUnsafePack`);
+	if (method === "clone" && /^\s*-u\b/.test(arg)) throw new GitPluginError(void 0, "unsafe", `Use of clone with option -u is not permitted without enabling allowUnsafePack`);
+	if (method === "push" && /^\s*--exec\b/.test(arg)) throw new GitPluginError(void 0, "unsafe", `Use of push with option --exec is not permitted without enabling allowUnsafePack`);
+}
+function blockUnsafeOperationsPlugin({ allowUnsafeProtocolOverride = false, allowUnsafePack = false } = {}) {
 	return {
 		type: "spawn.args",
-		action(args, { env }) {
-			for (const vulnerability of ne(args, env)) if (options[vulnerability.category] !== true) throw new GitPluginError(void 0, "unsafe", vulnerability.message);
+		action(args, context) {
+			args.forEach((current, index) => {
+				const next = index < args.length ? args[index + 1] : "";
+				allowUnsafeProtocolOverride || preventProtocolOverride(current, next);
+				allowUnsafePack || preventUploadPack(current, context.method);
+			});
 			return args;
 		}
 	};
@@ -3346,7 +3368,7 @@ init_utils();
 var WRONG_NUMBER_ERR = `Invalid value supplied for custom binary, requires a single string or an array containing either one or two strings`;
 var WRONG_CHARS_ERR = `Invalid value supplied for custom binary, restricted characters must be removed or supply the unsafe.allowUnsafeCustomBinary option`;
 function isBadArgument(arg) {
-	return !arg || !/^([a-z]:)?([a-z0-9/.\\_~-]+)$/i.test(arg);
+	return !arg || !/^([a-z]:)?([a-z0-9/.\\_-]+)$/i.test(arg);
 }
 function toBinaryConfig(input, allowUnsafe) {
 	if (input.length < 1 || input.length > 2) throw new GitPluginError(void 0, "binary", WRONG_NUMBER_ERR);
@@ -3508,6 +3530,7 @@ function timeoutPlugin({ block, stdErr = true, stdOut = true }) {
 		}
 	};
 }
+init_pathspec();
 function suffixPathsPlugin() {
 	return {
 		type: "spawn.args",
@@ -3519,12 +3542,12 @@ function suffixPathsPlugin() {
 			}
 			for (let i = 0; i < data.length; i++) {
 				const param = data[i];
-				if (r(param)) {
-					append2(o(param));
+				if (isPathSpec(param)) {
+					append2(toPaths(param));
 					continue;
 				}
 				if (param === "--") {
-					append2(data.slice(i + 1).flatMap((item) => r(item) && o(item) || item));
+					append2(data.slice(i + 1).flatMap((item) => isPathSpec(item) && toPaths(item) || item));
 					break;
 				}
 				prefix.push(param);
@@ -3545,12 +3568,12 @@ function gitInstanceFactory(baseDir, options) {
 	if (!folderExists(config.baseDir)) throw new GitConstructError(config, `Cannot use simple-git on a directory that does not exist`);
 	if (Array.isArray(config.config)) plugins.add(commandConfigPrefixingPlugin(config.config));
 	plugins.add(blockUnsafeOperationsPlugin(config.unsafe));
+	plugins.add(suffixPathsPlugin());
 	plugins.add(completionDetectionPlugin(config.completion));
 	config.abort && plugins.add(abortPlugin(config.abort));
 	config.progress && plugins.add(progressMonitorPlugin(config.progress));
 	config.timeout && plugins.add(timeoutPlugin(config.timeout));
 	config.spawnOptions && plugins.add(spawnOptionsPlugin(config.spawnOptions));
-	plugins.add(suffixPathsPlugin());
 	plugins.add(errorDetectionPlugin(errorDetectionHandler(true)));
 	config.errors && plugins.add(errorDetectionPlugin(config.errors));
 	customBinaryPlugin(plugins, config.binary, config.unsafe?.allowUnsafeCustomBinary);
@@ -3558,4 +3581,4 @@ function gitInstanceFactory(baseDir, options) {
 }
 init_git_response_error();
 var esm_default = gitInstanceFactory;
-export { esm_default };
+export { esm_default as t };

package/dist/_chunks/libs/xdg-basedir.mjs

@@ -11,4 +11,4 @@ const xdgDataDirectories = (env.XDG_DATA_DIRS || "/usr/local/share/:/usr/share/"
 if (xdgData) xdgDataDirectories.unshift(xdgData);
 const xdgConfigDirectories = (env.XDG_CONFIG_DIRS || "/etc/xdg").split(":");
 if (xdgConfig) xdgConfigDirectories.unshift(xdgConfig);
-export { xdgConfig };
+export { xdgConfig as t };

package/dist/_chunks/rolldown-runtime.mjs

@@ -5,7 +5,7 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -21,4 +21,4 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
-export { __commonJSMin, __require, __toESM };
+export { __require as n, __toESM as r, __commonJSMin as t };

package/dist/cli.mjs

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
-import { __toESM } from "./_chunks/rolldown-runtime.mjs";
-import { pD, require_picocolors } from "./_chunks/libs/@clack/core.mjs";
-import { Ie, M, Me, Se, Y, be, fe, ge, he, ve, xe, ye } from "./_chunks/libs/@clack/prompts.mjs";
-import { esm_default } from "./_chunks/libs/simple-git.mjs";
-import { xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
-import { require_dist } from "./_chunks/libs/@vercel/detect-agent.mjs";
+import { r as __toESM } from "./_chunks/rolldown-runtime.mjs";
+import { l as pD, u as require_picocolors } from "./_chunks/libs/@clack/core.mjs";
+import { a as Y, c as ge, d as xe, f as ye, i as Se, l as he, n as M, o as be, r as Me, s as fe, t as Ie, u as ve } from "./_chunks/libs/@clack/prompts.mjs";
+import "./_chunks/libs/@kwsites/file-exists.mjs";
+import "./_chunks/libs/@kwsites/promise-deferred.mjs";
+import { t as esm_default } from "./_chunks/libs/simple-git.mjs";
+import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
+import { t as require_dist } from "./_chunks/libs/@vercel/detect-agent.mjs";
 import { copyFileSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
 import { fileURLToPath } from "url";
@@ -2135,6 +2137,7 @@ const PRUFF_CATALOG = process.env.PRUFF_SKILLS_CATALOG || "Pruff-Tech/pruff-skil
 function isBareSkillName(value) {
 	return !!value && /^[a-z0-9][a-z0-9-]*$/.test(value) && !value.includes("/") && !value.includes(".") && !value.includes(":");
 }
+const CATALOG_SCHEMA_VERSION = 1;
 var CatalogSchemaError = class extends UserFacingError {};
 function parseCatalogIndex(raw, sourceLabel) {
 	let parsed;
@@ -2144,7 +2147,7 @@ function parseCatalogIndex(raw, sourceLabel) {
 		throw new CatalogSchemaError(`Could not parse the catalog index from ${sourceLabel}: ${error.message}`);
 	}
 	const declared = parsed?.schemaVersion;
-	if (typeof declared === "number" && declared > 1) throw new CatalogSchemaError(`The catalog at ${sourceLabel} declares index schema v${declared}, but this pruff-skills understands up to v1.\n  Upgrade with: npm i -g pruff-skills@latest`);
+	if (typeof declared === "number" && declared > CATALOG_SCHEMA_VERSION) throw new CatalogSchemaError(`The catalog at ${sourceLabel} declares index schema v${declared}, but this pruff-skills understands up to v${CATALOG_SCHEMA_VERSION}.\n  Upgrade with: npm i -g pruff-skills@latest`);
 	return parsed ?? {};
 }
 var import_dist = require_dist();
@@ -2998,6 +3001,7 @@ async function isSourcePrivate(source) {
 function getLockSource(parsedUrl, normalizedSource) {
 	return parsedUrl.startsWith("git@") || parsedUrl.startsWith("ssh://") ? parsedUrl : normalizedSource;
 }
+function initTelemetry(version) {}
 const DEFAULT_AGENTS = ["claude-code", "cursor"];
 function riskLabel(risk) {
 	switch (risk) {
@@ -6316,7 +6320,7 @@ async function sweepLine(text, { slow = false, indent = "  " } = {}) {
 	process.stdout.write("\x1B[?25l");
 	try {
 		let first = true;
-		for (let pos = -5; pos <= width; pos += step) {
+		for (let pos = -band; pos <= width; pos += step) {
 			if (!first) process.stdout.write("\x1B[1A");
 			process.stdout.write("\r" + renderSweepLine(chars, indent, pos, band) + "\n");
 			first = false;
@@ -6377,7 +6381,7 @@ async function showBlockLogo(lines, letterCuts, { slow = false, palette = BLUES
 			first = false;
 			await sleep(revealMs);
 		}
-		for (let pos = -7; pos <= width; pos += step) {
+		for (let pos = -band; pos <= width; pos += step) {
 			process.stdout.write(`\x1b[${rows}A`);
 			process.stdout.write("\r" + renderBlockLogoFrame(lines, palette, pos, band) + "\n");
 			await sleep(sweepMs);
@@ -7772,7 +7776,7 @@ function setupLocalDatabase(serverPath, env) {
 	const tenantName = `tenant-${clientId}`;
 	const tenantUrl = swapDbName(controlPlaneUrl, tenantName);
 	const adminEmail = `admin@${clientId}.com`;
-	if (controlPlaneName !== "pruff-local") {
+	if (controlPlaneName !== CONTROL_PLANE_DB) {
 		note(`Local database not set up — DATABASE_URL must point at "${CONTROL_PLANE_DB}".`);
 		M.warn(`DATABASE_URL points at ${import_picocolors.default.cyan(controlPlaneName)}, but Pruff-server hardcodes the local control plane as ${import_picocolors.default.cyan(CONTROL_PLANE_DB)}.\n  Company/user seeds would silently write to the wrong database — fix local.env and re-run with --db.`);
 		return;
@@ -8776,6 +8780,7 @@ function getVersion() {
 	}
 }
 const VERSION = getVersion();
+initTelemetry(VERSION);
 const BOLD = "\x1B[1m";
 const TEXT = "\x1B[38;5;145m";
 const BLUE = "\x1B[38;2;110;139;255m";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pruff-skills",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "The official Pruff agent skills CLI",
   "type": "module",
   "bin": {