token-goat 2.6.31 → 2.6.32

package/dist/{token-goat-hook-chunk-66W63A4Y.mjs → token-goat-hook-chunk-Q5URQRIF.mjs}

@@ -57,7 +57,7 @@ import {
   walkProject,
   yamlLineClosesQuote,
   yamlOpenQuoteAfter
-} from "./token-goat-hook-chunk-SJM4BUZQ.mjs";
+} from "./token-goat-hook-chunk-WBTHUYJP.mjs";
 import {
   PER_FILE_COUNTERFACTUAL_CEILING,
   atomicWriteBytes,
@@ -96,13 +96,13 @@ import {
   toDisplayPath,
   windowsCmdQuoteArg,
   withExtension
-} from "./token-goat-hook-chunk-NIVRFAJ4.mjs";
+} from "./token-goat-hook-chunk-DHW6SRHR.mjs";
 import {
   registerReset
-} from "./token-goat-hook-chunk-KNVHTGEX.mjs";
+} from "./token-goat-hook-chunk-J2ZK2FYW.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/repomap.ts
 init_define_import_meta_env();
@@ -592,7 +592,7 @@ function queryJson(data, spec) {
 
 // node_modules/js-yaml/dist/js-yaml.mjs
 init_define_import_meta_env();
-var NOT_RESOLVED = Symbol("NOT_RESOLVED");
+var NOT_RESOLVED = /* @__PURE__ */ Symbol("NOT_RESOLVED");
 function defineScalarTag(tagName, options) {
   return {
     tagName,
@@ -2892,9 +2892,6 @@ function load(input, options) {
   if (documents.length === 1) return documents[0];
   throw new YAMLException("expected a single document in the stream, but found more");
 }
-var INVALID = Symbol("INVALID");
-var VISIT_BREAK = Symbol("visit:break");
-var VISIT_SKIP = Symbol("visit:skip");
 var ESCAPE_SEQUENCES = {};
 ESCAPE_SEQUENCES[0] = "\\0";
 ESCAPE_SEQUENCES[7] = "\\a";
@@ -3073,10 +3070,25 @@ function formatOperationDetail(op) {
 
 // src/archive_query.ts
 init_define_import_meta_env();
-import { unzipSync } from "fflate";
-function listZipEntries(data) {
+var loadFflate = createLazyModuleLoader(
+  async () => await import("fflate"),
+  "archive reading disabled (fflate unavailable)"
+);
+var ArchiveDependencyMissingError = class extends Error {
+  constructor() {
+    super("fflate is not installed; run `npm install fflate` to enable zip-list/zip-read");
+    this.name = "ArchiveDependencyMissingError";
+  }
+};
+async function requireFflate() {
+  const fflate = await loadFflate();
+  if (!fflate) throw new ArchiveDependencyMissingError();
+  return fflate;
+}
+async function listZipEntries(data) {
+  const fflate = await requireFflate();
   const entries = [];
-  unzipSync(data, {
+  fflate.unzipSync(data, {
     filter: (file) => {
       entries.push({
         path: file.name,
@@ -3094,8 +3106,9 @@ function formatZipList(entries) {
   if (entries.length === 0) return "(no entries found)";
   return entries.map((e) => `${String(e.size).padStart(10)}  ${e.path}`).join("\n");
 }
-function extractZipEntry(data, entryPath) {
-  const result = unzipSync(data, { filter: (file) => file.name === entryPath });
+async function extractZipEntry(data, entryPath) {
+  const fflate = await requireFflate();
+  const result = fflate.unzipSync(data, { filter: (file) => file.name === entryPath });
   return result[entryPath];
 }
 
@@ -6286,7 +6299,11 @@ function runOpenApiOp(opts) {
   }
   return 0;
 }
-function runZipList(opts) {
+function archiveReadFailure(err, file) {
+  if (err instanceof ArchiveDependencyMissingError) return err.message;
+  return `Failed to read archive (not a valid zip-format file): ${file}`;
+}
+async function runZipList(opts) {
   const data = readFileBytes(opts.file);
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
@@ -6294,9 +6311,9 @@ function runZipList(opts) {
   }
   let entries;
   try {
-    entries = listZipEntries(data);
-  } catch {
-    emitErr(`Failed to read archive (not a valid zip-format file): ${opts.file}`);
+    entries = await listZipEntries(data);
+  } catch (err) {
+    emitErr(archiveReadFailure(err, opts.file));
     return 1;
   }
   const fullSourceBytes = sumFileSizes([opts.file]);
@@ -6311,7 +6328,7 @@ function runZipList(opts) {
   }
   return 0;
 }
-function runZipRead(opts) {
+async function runZipRead(opts) {
   const data = readFileBytes(opts.file);
   if (data === null) {
     emitErr(`Could not read: ${opts.file}`);
@@ -6320,10 +6337,10 @@ function runZipRead(opts) {
   let entries;
   let content;
   try {
-    entries = listZipEntries(data);
-    content = extractZipEntry(data, opts.entry);
-  } catch {
-    emitErr(`Failed to read archive (not a valid zip-format file): ${opts.file}`);
+    entries = await listZipEntries(data);
+    content = await extractZipEntry(data, opts.entry);
+  } catch (err) {
+    emitErr(archiveReadFailure(err, opts.file));
     return 1;
   }
   const matchedEntry = entries.find((e) => e.path === opts.entry);

package/dist/{token-goat-hook-chunk-K6HLYRRI.mjs → token-goat-hook-chunk-TBJ5PUPQ.mjs}

@@ -25,7 +25,7 @@ import {
   runSkeleton,
   runSymbol,
   withPinnedReads
-} from "./token-goat-hook-chunk-66W63A4Y.mjs";
+} from "./token-goat-hook-chunk-Q5URQRIF.mjs";
 import {
   buildProjectMap,
   embeddingsDepsAvailable,
@@ -34,7 +34,7 @@ import {
   getProjectIndexCounts,
   isWorkerRunning,
   mapLookupBytesSaved
-} from "./token-goat-hook-chunk-SJM4BUZQ.mjs";
+} from "./token-goat-hook-chunk-WBTHUYJP.mjs";
 import {
   VERSION,
   dataDir,
@@ -45,11 +45,11 @@ import {
   normalizePath,
   recordStat,
   resolveProjectRoot
-} from "./token-goat-hook-chunk-NIVRFAJ4.mjs";
-import "./token-goat-hook-chunk-KNVHTGEX.mjs";
+} from "./token-goat-hook-chunk-DHW6SRHR.mjs";
+import "./token-goat-hook-chunk-J2ZK2FYW.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/mcp_server.ts
 init_define_import_meta_env();
@@ -202,7 +202,7 @@ function withConfinedRead(pins, fn) {
   }
 }
 async function createMcpServer() {
-  const [{ McpServer }, { z }] = await Promise.all([import("@modelcontextprotocol/sdk/server/mcp.js"), import("./token-goat-hook-chunk-FKZ5RBT4.mjs")]);
+  const [{ McpServer }, { z }] = await Promise.all([import("@modelcontextprotocol/sdk/server/mcp.js"), import("./token-goat-hook-chunk-TKXOXN4J.mjs")]);
   const server = new McpServer({ name: "token-goat", version: VERSION });
   const makeProjectRootField = (verb) => z.string().optional().describe(
     `absolute path to the workspace root to scope this ${verb} to; defaults to the MCP server process's cwd, which is not always the actual workspace root for MCP clients -- pass this explicitly when it might differ`

package/dist/{token-goat-hook-chunk-FKZ5RBT4.mjs → token-goat-hook-chunk-TKXOXN4J.mjs}

@@ -3,7 +3,7 @@ const require = __cjsRequire(import.meta.url);
 import {
   __export,
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // node_modules/zod/index.js
 init_define_import_meta_env();
@@ -590,7 +590,7 @@ function $constructor(name, initializer3, params) {
   Object.defineProperty(_, "name", { value: name });
   return _;
 }
-var $brand = Symbol("zod_brand");
+var $brand = /* @__PURE__ */ Symbol("zod_brand");
 var $ZodAsyncError = class extends Error {
   constructor() {
     super(`Encountered Promise during synchronous parse. Use .parseAsync() instead.`);
@@ -10407,8 +10407,8 @@ function yo_default() {
 // node_modules/zod/v4/core/registries.js
 init_define_import_meta_env();
 var _a2;
-var $output = Symbol("ZodOutput");
-var $input = Symbol("ZodInput");
+var $output = /* @__PURE__ */ Symbol("ZodOutput");
+var $input = /* @__PURE__ */ Symbol("ZodInput");
 var $ZodRegistry = class {
   constructor() {
     this._map = /* @__PURE__ */ new WeakMap();
@@ -11446,7 +11446,7 @@ function _stringbool(Classes, _params) {
     type: "pipe",
     in: stringSchema,
     out: booleanSchema,
-    transform: (input, payload) => {
+    transform: ((input, payload) => {
       let data = input;
       if (params.case !== "sensitive")
         data = data.toLowerCase();
@@ -11465,14 +11465,14 @@ function _stringbool(Classes, _params) {
         });
         return {};
       }
-    },
-    reverseTransform: (input, _payload) => {
+    }),
+    reverseTransform: ((input, _payload) => {
       if (input === true) {
         return truthyArray[0] || "true";
       } else {
         return falsyArray[0] || "false";
       }
-    },
+    }),
     error: params.error
   });
   return codec2;

package/dist/{token-goat-hook-chunk-3OJELLK5.mjs → token-goat-hook-chunk-UXD3B4OY.mjs}

@@ -10,15 +10,15 @@ import {
   selectFilter,
   shlexSplit,
   wrappedShell
-} from "./token-goat-hook-chunk-JVJUBWKT.mjs";
+} from "./token-goat-hook-chunk-VHZECEQD.mjs";
 import {
   loadConfig,
   recordStat
-} from "./token-goat-hook-chunk-NIVRFAJ4.mjs";
-import "./token-goat-hook-chunk-KNVHTGEX.mjs";
+} from "./token-goat-hook-chunk-DHW6SRHR.mjs";
+import "./token-goat-hook-chunk-J2ZK2FYW.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/bash_runner.ts
 init_define_import_meta_env();

package/dist/{token-goat-hook-chunk-JVJUBWKT.mjs → token-goat-hook-chunk-VHZECEQD.mjs}

@@ -4,10 +4,10 @@ import {
   loadConfig,
   redactSecrets,
   stripAnsiCodes
-} from "./token-goat-hook-chunk-NIVRFAJ4.mjs";
+} from "./token-goat-hook-chunk-DHW6SRHR.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/tool_filters/helpers.ts
 init_define_import_meta_env();
@@ -622,6 +622,12 @@ var CompressedOutput = class {
     this.exitCode = exitCode;
     this.notes = notes;
   }
+  text;
+  originalBytes;
+  compressedBytes;
+  filterName;
+  exitCode;
+  notes;
   /** Non-negative byte savings (`original - compressed`, clamped at 0). */
   get bytesSaved() {
     return Math.max(0, this.originalBytes - this.compressedBytes);
@@ -9272,6 +9278,10 @@ var DockerFilter = class extends ToolFilter {
         oldNew.unshift(`[building ${oldStepCount} layers, ${oldCacheCount} cached]`);
       }
       kept = oldNew;
+      void oldDroppedCache;
+      void oldDroppedSha;
+      void oldDroppedImd;
+      void oldDroppedStep;
     }
     const parts = [];
     if (droppedDigest) parts.push(`${droppedDigest} digest`);

package/dist/{token-goat-hook-chunk-SJM4BUZQ.mjs → token-goat-hook-chunk-WBTHUYJP.mjs}

@@ -56,13 +56,13 @@ import {
   withFileLock,
   writeIfDifferent,
   writeJsonSettings
-} from "./token-goat-hook-chunk-NIVRFAJ4.mjs";
+} from "./token-goat-hook-chunk-DHW6SRHR.mjs";
 import {
   registerReset
-} from "./token-goat-hook-chunk-KNVHTGEX.mjs";
+} from "./token-goat-hook-chunk-J2ZK2FYW.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/hook_registry.ts
 init_define_import_meta_env();
@@ -16294,8 +16294,9 @@ function isTooShallowToPrune(rootPrefix) {
   return segments.length === 0;
 }
 function foldedBounds(rootPrefix) {
-  const prefix = rootPrefix.endsWith("/") ? rootPrefix : `${rootPrefix}/`;
-  return { foldedRootPrefix: foldPath(rootPrefix), foldedPrefix: foldPath(prefix) };
+  const normalized = normalizePath(rootPrefix);
+  const prefix = normalized.endsWith("/") ? normalized : `${normalized}/`;
+  return { foldedRootPrefix: foldPath(normalized), foldedPrefix: foldPath(prefix) };
 }
 function allIndexedPaths(dbPath) {
   const db = getDb(dbPath);
@@ -16305,7 +16306,7 @@ function allIndexedPaths(dbPath) {
 function foldedPathsUnderRoot(rootPrefix, dbPath) {
   const { foldedRootPrefix, foldedPrefix } = foldedBounds(rootPrefix);
   return allIndexedPaths(dbPath).filter((p) => {
-    const foldedP = foldPath(p);
+    const foldedP = foldPath(normalizePath(p));
     return foldedP === foldedRootPrefix || foldedP.startsWith(foldedPrefix);
   });
 }
@@ -16351,6 +16352,11 @@ function pruneDeletedFiles(rootPrefix, dbPath = globalDbPath()) {
   const db = getDb(dbPath);
   return removeDeletedFilesBestEffort(db, findDeletablePaths(rootPrefix, dbPath)).length;
 }
+function pruneBlockedRoot(rootPrefix, dbPath = globalDbPath()) {
+  const normalized = normalizePath(rootPrefix);
+  if (isTooShallowToPrune(normalized)) return [];
+  return removeFilesBestEffort(getDb(dbPath), foldedPathsUnderRoot(normalized, dbPath));
+}
 function findSystemTempFiles(dbPath = globalDbPath()) {
   return allIndexedPaths(dbPath).filter((p) => isUnderSystemTemp(p));
 }
@@ -16613,7 +16619,7 @@ function cleanupWorkerStateFiles(dir) {
   }
   sweepExpiredKnownRootMarkers(dir);
 }
-var INDEX_FAILED = Symbol("indexFailed");
+var INDEX_FAILED = /* @__PURE__ */ Symbol("indexFailed");
 var inFlightEmbeddings = /* @__PURE__ */ new Map();
 var activeEmbedSlots = 0;
 var embedSlotWaiters = [];
@@ -17972,6 +17978,7 @@ function formatMemSuggestions(projectRoot) {
 
 // src/url_policy.ts
 init_define_import_meta_env();
+import { domainToUnicode } from "node:url";
 function wildcardToRegExp(pattern) {
   const escaped = pattern.replace(/[.+^${}()|[\]\\?]/g, "\\$&").replace(/\*/g, ".*");
   return new RegExp(`^${escaped}$`, "i");
@@ -17994,9 +18001,15 @@ function urlSpellings(url) {
     const parsed = new URL(url);
     if (parsed.hostname.endsWith(".")) parsed.hostname = parsed.hostname.replace(/\.+$/, "");
     if (!out.includes(parsed.href)) out.push(parsed.href);
+    const spellWith = (authority) => `${parsed.protocol}//${parsed.username === "" && parsed.password === "" ? "" : `${parsed.username}${parsed.password === "" ? "" : `:${parsed.password}`}@`}${authority}${parsed.pathname}${parsed.search}${parsed.hash}`;
     const defaultPort = DEFAULT_PORTS[parsed.protocol];
     if (parsed.port === "" && defaultPort !== void 0) {
-      const spelled = `${parsed.protocol}//${parsed.username === "" && parsed.password === "" ? "" : `${parsed.username}${parsed.password === "" ? "" : `:${parsed.password}`}@`}${parsed.hostname}:${defaultPort}${parsed.pathname}${parsed.search}${parsed.hash}`;
+      const spelled = spellWith(`${parsed.hostname}:${defaultPort}`);
+      if (!out.includes(spelled)) out.push(spelled);
+    }
+    const unicodeHost = domainToUnicode(parsed.hostname);
+    if (unicodeHost !== "" && unicodeHost !== parsed.hostname) {
+      const spelled = spellWith(parsed.port === "" ? unicodeHost : `${unicodeHost}:${parsed.port}`);
       if (!out.includes(spelled)) out.push(spelled);
     }
   } catch {
@@ -18027,6 +18040,12 @@ function urlAuthorities(url) {
     const hosts = [parsed.host, parsed.hostname];
     const defaultPort = DEFAULT_PORTS[parsed.protocol];
     if (parsed.port === "" && defaultPort !== void 0) hosts.push(`${parsed.hostname}:${defaultPort}`);
+    const unicodeHost = domainToUnicode(parsed.hostname);
+    if (unicodeHost !== "" && unicodeHost !== parsed.hostname) {
+      hosts.push(unicodeHost);
+      if (parsed.port !== "") hosts.push(`${unicodeHost}:${parsed.port}`);
+      else if (defaultPort !== void 0) hosts.push(`${unicodeHost}:${defaultPort}`);
+    }
     return hosts;
   } catch {
     return null;
@@ -18269,6 +18288,7 @@ export {
   indexFileEmbeddings,
   removeFileFromIndex,
   pruneDeletedFiles,
+  pruneBlockedRoot,
   findSystemTempFiles,
   pruneSystemTempFiles,
   recordKnownRootThrottled,

package/dist/token-goat-hook.mjs

@@ -2,15 +2,15 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-hook-chunk-2K7FV2ME.mjs";
-import "./token-goat-hook-chunk-JVJUBWKT.mjs";
-import "./token-goat-hook-chunk-JT5RMRIY.mjs";
-import "./token-goat-hook-chunk-SJM4BUZQ.mjs";
-import "./token-goat-hook-chunk-NIVRFAJ4.mjs";
-import "./token-goat-hook-chunk-KNVHTGEX.mjs";
+} from "./token-goat-hook-chunk-DJZGX27J.mjs";
+import "./token-goat-hook-chunk-VHZECEQD.mjs";
+import "./token-goat-hook-chunk-LFYT4DLB.mjs";
+import "./token-goat-hook-chunk-WBTHUYJP.mjs";
+import "./token-goat-hook-chunk-DHW6SRHR.mjs";
+import "./token-goat-hook-chunk-J2ZK2FYW.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-hook-chunk-7WC2H3EW.mjs";
+} from "./token-goat-hook-chunk-K33JMLL7.mjs";
 
 // src/hook_lib.ts
 init_define_import_meta_env();

package/dist/token-goat.core.mjs

@@ -2,17 +2,17 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-XEJBPPD7.mjs";
-import "./token-goat-chunk-P7I6LS5H.mjs";
-import "./token-goat-chunk-OIBTYBVR.mjs";
-import "./token-goat-chunk-HPY7XE77.mjs";
+} from "./token-goat-chunk-RD6O3PJU.mjs";
+import "./token-goat-chunk-N53GXI2Z.mjs";
+import "./token-goat-chunk-O7TGKV5I.mjs";
+import "./token-goat-chunk-X5OPORR4.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-X7PIWZMB.mjs";
-import "./token-goat-chunk-VYC34TBW.mjs";
+} from "./token-goat-chunk-5EXIMDHA.mjs";
+import "./token-goat-chunk-3KW5C2KQ.mjs";
 import {
   init_define_import_meta_env
-} from "./token-goat-chunk-4WGVGN6W.mjs";
+} from "./token-goat-chunk-3UOG7PSZ.mjs";
 
 // src/main.ts
 init_define_import_meta_env();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-goat",
-  "version": "2.6.31",
+  "version": "2.6.32",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",
@@ -17,6 +17,7 @@
   },
   "scripts": {
     "build": "node esbuild.config.mjs",
+    "sbom": "npm sbom --sbom-format cyclonedx --omit=dev",
     "typecheck": "tsc --noEmit",
     "typecheck:tests": "tsc -p tsconfig.tests.json --noEmit",
     "test": "vitest run",
@@ -51,7 +52,7 @@
     "SECURITY.md",
     "LICENSE"
   ],
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "PolyForm-Noncommercial-1.0.0",
   "engines": {
     "node": ">=22.0.0"
   },
@@ -59,7 +60,6 @@
     "better-sqlite3": "^11.3.0",
     "commander": "^12.1.0",
     "csv-parse": "^7.0.1",
-    "html-to-text": "^10.0.0",
     "js-yaml": "^5.2.1",
     "jsonc-parser": "^3.3.1",
     "smol-toml": "^1.7.0",
@@ -69,8 +69,9 @@
     "@eslint/js": "^10.0.1",
     "@types/better-sqlite3": "^7.6.11",
     "@types/node": "^22.0.0",
-    "esbuild": "^0.24.0",
+    "esbuild": "^0.28.2",
     "eslint": "^10.5.0",
+    "html-to-text": "^10.0.0",
     "lefthook": "^2.1.10",
     "tsx": "^4.19.0",
     "typescript": "^6.0.3",
@@ -119,5 +120,12 @@
     "tree-sitter-ruby@0.23.1": true,
     "tree-sitter-rust@0.23.3": true,
     "tree-sitter-typescript@0.23.2": true
+  },
+  "overrides": {
+    "protobufjs": "^8.7.2",
+    "deepmerge-ts": "^8.0.1",
+    "uuid": "^14.0.1",
+    "sharp": "^0.35.3",
+    "unzipper": "^0.12.5"
   }
 }

package/dist/token-goat-hook-chunk-ULGSXGZK.mjs

@@ -1,23 +0,0 @@
-import { createRequire as __cjsRequire } from 'node:module';
-const require = __cjsRequire(import.meta.url);
-import {
-  buildEvent,
-  relay,
-  relayInProcess
-} from "./token-goat-hook-chunk-2K7FV2ME.mjs";
-import "./token-goat-hook-chunk-JVJUBWKT.mjs";
-import {
-  MAX_STDIN_BYTES,
-  readStdinJson
-} from "./token-goat-hook-chunk-JT5RMRIY.mjs";
-import "./token-goat-hook-chunk-SJM4BUZQ.mjs";
-import "./token-goat-hook-chunk-NIVRFAJ4.mjs";
-import "./token-goat-hook-chunk-KNVHTGEX.mjs";
-import "./token-goat-hook-chunk-7WC2H3EW.mjs";
-export {
-  MAX_STDIN_BYTES,
-  buildEvent,
-  readStdinJson,
-  relay,
-  relayInProcess
-};