token-goat 2.6.36 → 2.8.0

package/dist/token-goat-hook-chunk-5UH54CW6.mjs

@@ -1,912 +0,0 @@
-import { createRequire as __cjsRequire } from 'node:module';
-const require = __cjsRequire(import.meta.url);
-import {
-  isBlobStale,
-  isBuildCommand,
-  loadBlob,
-  sanitizeFtsQuery,
-  storeBlob
-} from "./token-goat-hook-chunk-A77A26A7.mjs";
-import {
-  SYMBOL_BODY_CHAR_CAP,
-  extractErrorMessage,
-  getDb,
-  globalDbPath,
-  normalizePath,
-  redactSecrets,
-  runGit,
-  shortFingerprint
-} from "./token-goat-hook-chunk-Y2WHX2P3.mjs";
-import {
-  registerReset
-} from "./token-goat-hook-chunk-BUOCULAM.mjs";
-
-// src/hooks_cli.ts
-var _LOG = {
-  warn: (msg, ...args) => console.warn(`[hooks_cli] ${msg}`, ...args),
-  debug: (msg, ...args) => console.error(`[hooks_cli] ${msg}`, ...args),
-  error: (msg, err, ...args) => console.error(`[hooks_cli] ${msg}`, ...err ? [err] : [], ...args)
-};
-var CODEX_TOOL_NAME_MAP = {
-  bash: "Bash",
-  edit_file: "Edit",
-  edit: "Edit",
-  apply_patch: "Edit",
-  write_file: "Write",
-  search_files: "Grep",
-  grep: "Grep",
-  list_files: "Glob",
-  glob: "Glob",
-  web_search: "WebFetch"
-};
-var GEMINI_TOOL_NAME_MAP = {
-  run_shell_command: "Bash",
-  read_file: "Read",
-  read_many_files: "Read",
-  list_directory: "Read",
-  write_file: "Write",
-  replace: "Edit",
-  glob: "Glob",
-  grep_search: "Grep",
-  // 'search_file_content' was GREP_TOOL_NAME's value before gemini-cli renamed it to 'grep_search' (confirmed against gemini-cli's current base-declarations.ts, which now defines GREP_TOOL_NAME = 'grep_search'; some of gemini-cli's own docs pages still lag the rename). Kept as a backward-compat entry for older installed gemini-cli versions that still emit the pre-rename name -- not dead/hallucinated, just legacy.
-  search_file_content: "Grep",
-  // Gemini's real web-search tool is registered as 'google_web_search' (WEB_SEARCH_TOOL_NAME in gemini-cli's tool-names.ts) -- 'web_search' is not a tool name Gemini CLI ever emits, so the old entry here silently never matched a real invocation.
-  google_web_search: "WebFetch",
-  web_fetch: "WebFetch"
-};
-var GEMINI_INPUT_KEY_MAP = {
-  // Gemini's real write_file/replace tool schemas already use 'file_path' (and replace's 'old_string'/'new_string') verbatim -- identical to token-goat's own canonical keys (see getFilePath() in hooks_common.ts, which reads event.toolInput['file_path']) -- confirmed against gemini-cli's own EditToolParams/WriteFileToolParams interfaces. No remap is needed for Write/Edit; the previous entries here actively renamed a key that was already correct (file_path -> path), which would have silently corrupted the path argument on every real Gemini Write/Edit call.
-  // 'Read' covers THREE distinct raw Gemini tools (see GEMINI_TOOL_NAME_MAP above), and they do NOT share one schema: read_file already uses 'file_path' verbatim, no remap needed; list_directory uses 'dir_path' (confirmed against gemini-cli's LSToolParams) -- remapped to 'file_path' below, exactly mirroring Grep's existing dir_path->path fix; read_many_files uses 'include' (confirmed against gemini-cli's ReadManyFilesParams), an ARRAY of glob patterns, not a single file path -- there is no single string to remap it to, so it is deliberately left unmapped. getFilePath() (hooks_common.ts) will return undefined for this call, and preReadHandler/postReadHandler already fall back to passOutput() on an undefined path (see preReadHandler's `if (filePath === undefined) return passOutput()`), so a real read_many_files call still succeeds normally; it just doesn't get session-dedup tracking or read-count hints. Accepted limitation, not a bug to force-fit.
-  Read: { dir_path: "file_path" },
-  // Grep's real tool (grep_search) calls its target-directory argument 'dir_path', which preReadHandler's Grep fallback (event.toolInput['path']) doesn't recognize, so that one remains remapped.
-  Grep: { dir_path: "path" }
-};
-var GROK_TOOL_NAME_MAP = {
-  read_file: "Read",
-  write: "Write",
-  search_replace: "Edit",
-  run_terminal_command: "Bash",
-  grep: "Grep",
-  list_dir: "Glob"
-};
-var GROK_INPUT_KEY_MAP = {
-  Read: { target_file: "file_path" }
-};
-var KIMI_TOOL_NAME_MAP = {
-  FetchURL: "WebFetch",
-  ReadMediaFile: "Read"
-};
-var KIMI_INPUT_KEY_MAP = {
-  Read: { path: "file_path" },
-  Write: { path: "file_path" },
-  Edit: { path: "file_path" }
-};
-function remapInputKeys(input, keyMap) {
-  const newInput = {};
-  for (const [k, v] of Object.entries(input)) {
-    newInput[keyMap[k] || k] = v;
-  }
-  return newInput;
-}
-function remapToolName(obj, toolName, nameMap, inputKeyMap) {
-  const mapped = nameMap[toolName] ?? toolName;
-  const result = { ...obj };
-  result["tool_name"] = mapped;
-  const rawInput = obj["tool_input"];
-  const keyMap = inputKeyMap[mapped];
-  if (keyMap && typeof rawInput === "object" && rawInput !== null && !Array.isArray(rawInput)) {
-    result["tool_input"] = remapInputKeys(rawInput, keyMap);
-  }
-  return result;
-}
-function grokToCanonicalWire(obj) {
-  const wire = { ...obj };
-  if (typeof wire["toolName"] === "string" && wire["tool_name"] === void 0) {
-    wire["tool_name"] = wire["toolName"];
-  }
-  if (typeof wire["toolInput"] === "object" && wire["toolInput"] !== null && !Array.isArray(wire["toolInput"]) && wire["tool_input"] === void 0) {
-    wire["tool_input"] = wire["toolInput"];
-  }
-  if (typeof wire["sessionId"] === "string" && wire["session_id"] === void 0) {
-    wire["session_id"] = wire["sessionId"];
-  }
-  const toolResult = wire["toolResult"];
-  if (toolResult !== null && typeof toolResult === "object" && !Array.isArray(toolResult)) {
-    const tr = toolResult;
-    if (typeof tr["output_for_prompt"] === "string") {
-      wire["tool_response"] = { content: tr["output_for_prompt"], exit_code: tr["exit_code"] };
-    } else {
-      const firstString = Object.entries(tr).find(([k, v]) => k !== "type" && typeof v === "string");
-      if (firstString) {
-        wire["tool_response"] = { content: firstString[1] };
-      }
-    }
-  }
-  return wire;
-}
-function normalizePayload(payload, harness = "claude") {
-  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-    _LOG.warn("normalizePayload: payload is not a dict; received %s", typeof payload);
-    return {};
-  }
-  const rawObj = payload;
-  const obj = harness === "grok" ? grokToCanonicalWire(rawObj) : rawObj;
-  const toolName = obj["tool_name"];
-  if (typeof toolName !== "string" || !toolName.trim()) {
-    _LOG.debug("normalizePayload: tool_name missing or invalid; received %s", toolName);
-    return {};
-  }
-  if (harness === "grok") {
-    const result2 = remapToolName(obj, toolName, GROK_TOOL_NAME_MAP, GROK_INPUT_KEY_MAP);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "codex") {
-    const mapped = CODEX_TOOL_NAME_MAP[toolName];
-    const result2 = { ...obj };
-    if (mapped) {
-      result2["tool_name"] = mapped;
-    }
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "kimi") {
-    const result2 = remapToolName(obj, toolName, KIMI_TOOL_NAME_MAP, KIMI_INPUT_KEY_MAP);
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  if (harness === "gemini") {
-    const result2 = remapToolName(obj, toolName, GEMINI_TOOL_NAME_MAP, GEMINI_INPUT_KEY_MAP);
-    if ("functionCallId" in result2 && !("toolUseId" in result2)) {
-      result2["toolUseId"] = result2["functionCallId"];
-      delete result2["functionCallId"];
-    }
-    result2["_tg_harness"] = harness;
-    return result2;
-  }
-  const result = { ...obj };
-  result["_tg_harness"] = harness;
-  return result;
-}
-
-// src/types.ts
-var HOOK_EVENTS = [
-  "pre_tool_use",
-  "post_tool_use",
-  "notification",
-  "stop",
-  "pre_compact",
-  "user_prompt_submit",
-  "subagent_stop",
-  "session_start"
-];
-
-// src/stdin_json.ts
-var DEFAULT_STDIN_TIMEOUT_MS = 5e3;
-var MAX_STDIN_WALL_MS = 6e4;
-var MAX_STDIN_BYTES = 64 * 1024 * 1024;
-function readStdinJson(timeoutMs = DEFAULT_STDIN_TIMEOUT_MS, maxBytes = MAX_STDIN_BYTES) {
-  return new Promise((resolve2, reject) => {
-    const chunks = [];
-    let totalBytes = 0;
-    let settled = false;
-    const finish = (fn) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(idleTimer);
-      clearTimeout(wallTimer);
-      process.stdin.removeListener("data", onData);
-      process.stdin.removeListener("end", onEnd);
-      process.stdin.removeListener("error", onError);
-      fn();
-    };
-    let idleTimer = setTimeout(() => {
-      finish(() => reject(new Error("readStdinJson: timed out waiting for stdin")));
-    }, timeoutMs);
-    const wallTimer = setTimeout(() => {
-      finish(() => {
-        process.stdin.destroy();
-        reject(new Error(`readStdinJson: stdin took longer than ${MAX_STDIN_WALL_MS} ms`));
-      });
-    }, MAX_STDIN_WALL_MS);
-    const onData = (chunk) => {
-      clearTimeout(idleTimer);
-      idleTimer = setTimeout(() => {
-        finish(() => reject(new Error("readStdinJson: timed out waiting for stdin")));
-      }, timeoutMs);
-      totalBytes += chunk.length;
-      if (totalBytes > maxBytes) {
-        finish(() => {
-          process.stdin.destroy();
-          reject(new Error(`readStdinJson: stdin exceeded ${maxBytes} bytes`));
-        });
-        return;
-      }
-      chunks.push(chunk);
-    };
-    const onEnd = () => {
-      finish(() => {
-        const text = Buffer.concat(chunks).toString("utf8").trim();
-        if (text === "") {
-          reject(new Error("readStdinJson: empty stdin"));
-          return;
-        }
-        try {
-          resolve2(JSON.parse(text));
-        } catch (err) {
-          reject(err instanceof Error ? err : new Error(String(err)));
-        }
-      });
-    };
-    const onError = (err) => {
-      finish(() => reject(err instanceof Error ? err : new Error(String(err))));
-    };
-    process.stdin.on("data", onData);
-    process.stdin.on("end", onEnd);
-    process.stdin.on("error", onError);
-  });
-}
-
-// src/recall_index.ts
-var VALID_TYPES = ["bash", "web", "mcp"];
-function isRecallCacheType(value) {
-  return VALID_TYPES.includes(value);
-}
-function indexRecallEntry(cacheType, id, label, content, storedAt) {
-  try {
-    const db = getDb(globalDbPath());
-    db.prepare(
-      `INSERT INTO cache_recall (cache_type, entry_id, label, content, stored_at)
-       VALUES (@cacheType, @id, @label, @content, @storedAt)
-       ON CONFLICT(cache_type, entry_id) DO UPDATE SET
-         label = excluded.label,
-         content = excluded.content,
-         stored_at = excluded.stored_at`
-    ).run({ cacheType, id, label, content, storedAt });
-  } catch {
-  }
-}
-var _ftsAvailable = null;
-function hasFtsTable() {
-  if (_ftsAvailable !== null) return _ftsAvailable;
-  try {
-    const db = getDb(globalDbPath());
-    const row = db.prepare(`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'cache_recall_fts'`).get();
-    _ftsAvailable = row !== void 0;
-  } catch {
-    _ftsAvailable = false;
-  }
-  return _ftsAvailable;
-}
-function buildSnippet(content, query, maxLen = 160) {
-  const flat = content.replace(/\s+/g, " ").trim();
-  const tokens = query.split(/\s+/).filter(Boolean);
-  let idx = -1;
-  const lowerFlat = flat.toLowerCase();
-  for (const token of tokens) {
-    const at = lowerFlat.indexOf(token.toLowerCase());
-    if (at !== -1) {
-      idx = at;
-      break;
-    }
-  }
-  if (idx === -1) {
-    return flat.length > maxLen ? flat.slice(0, maxLen) + "..." : flat;
-  }
-  const start = Math.max(0, idx - Math.floor(maxLen / 3));
-  const end = Math.min(flat.length, start + maxLen);
-  const prefix = start > 0 ? "..." : "";
-  const suffix = end < flat.length ? "..." : "";
-  return prefix + flat.slice(start, end) + suffix;
-}
-function toFtsMatchExpr(query) {
-  if (query.trim().length === 0) return null;
-  return sanitizeFtsQuery(query);
-}
-function mapRowsToHits(rows, snippetQuery) {
-  return rows.filter((r) => isRecallCacheType(r.cacheType)).map((r) => ({
-    id: r.id,
-    cacheType: r.cacheType,
-    label: r.label ?? "",
-    snippet: buildSnippet(r.content ?? "", snippetQuery),
-    storedAt: r.storedAt ?? 0
-  }));
-}
-function ftsSearch(query, type, limit) {
-  const matchExpr = toFtsMatchExpr(query);
-  if (matchExpr === null) return [];
-  const db = getDb(globalDbPath());
-  const rows = type !== void 0 ? db.prepare(
-    `SELECT c.entry_id AS id, c.cache_type AS cacheType, c.label AS label, c.content AS content, c.stored_at AS storedAt
-             FROM cache_recall_fts
-             JOIN cache_recall c ON c.row_id = cache_recall_fts.rowid
-             WHERE cache_recall_fts MATCH ? AND c.cache_type = ?
-             ORDER BY bm25(cache_recall_fts)
-             LIMIT ?`
-  ).all(matchExpr, type, limit) : db.prepare(
-    `SELECT c.entry_id AS id, c.cache_type AS cacheType, c.label AS label, c.content AS content, c.stored_at AS storedAt
-             FROM cache_recall_fts
-             JOIN cache_recall c ON c.row_id = cache_recall_fts.rowid
-             WHERE cache_recall_fts MATCH ?
-             ORDER BY bm25(cache_recall_fts)
-             LIMIT ?`
-  ).all(matchExpr, limit);
-  return mapRowsToHits(rows, query);
-}
-function likeSearch(query, type, limit) {
-  const trimmed = query.trim();
-  if (!trimmed) return [];
-  const db = getDb(globalDbPath());
-  const needle = `%${trimmed.replace(/\\/g, "\\\\").replace(/[%_]/g, (c) => `\\${c}`)}%`;
-  const rows = type !== void 0 ? db.prepare(
-    `SELECT entry_id AS id, cache_type AS cacheType, label, content, stored_at AS storedAt
-             FROM cache_recall
-             WHERE cache_type = ? AND (label LIKE ? ESCAPE '\\' OR content LIKE ? ESCAPE '\\')
-             ORDER BY stored_at DESC
-             LIMIT ?`
-  ).all(type, needle, needle, limit) : db.prepare(
-    `SELECT entry_id AS id, cache_type AS cacheType, label, content, stored_at AS storedAt
-             FROM cache_recall
-             WHERE label LIKE ? ESCAPE '\\' OR content LIKE ? ESCAPE '\\'
-             ORDER BY stored_at DESC
-             LIMIT ?`
-  ).all(needle, needle, limit);
-  return mapRowsToHits(rows, trimmed);
-}
-function listRecentRecall(opts = {}) {
-  const limit = opts.limit ?? 10;
-  const columns = `SELECT entry_id AS id, cache_type AS cacheType, label, content, stored_at AS storedAt FROM cache_recall`;
-  try {
-    const db = getDb(globalDbPath());
-    const rows = opts.type !== void 0 ? db.prepare(`${columns} WHERE cache_type = ? ORDER BY stored_at DESC LIMIT ?`).all(opts.type, limit) : db.prepare(`${columns} ORDER BY stored_at DESC LIMIT ?`).all(limit);
-    return mapRowsToHits(rows, "");
-  } catch {
-    return [];
-  }
-}
-function searchRecall(query, opts = {}) {
-  const limit = opts.limit ?? 10;
-  if (query.trim() === "") return [];
-  try {
-    if (hasFtsTable()) {
-      return ftsSearch(query, opts.type, limit);
-    }
-    return likeSearch(query, opts.type, limit);
-  } catch {
-    try {
-      return likeSearch(query, opts.type, limit);
-    } catch {
-      return [];
-    }
-  }
-}
-
-// src/bash_output_cache.ts
-import { readdirSync, readFileSync, statSync } from "fs";
-import { resolve } from "path";
-var BASH_OUTPUT_SUBDIR = "bash_outputs";
-var _byId = /* @__PURE__ */ new Map();
-var COMMAND_PATTERNS = {
-  gitMutable: /^\s*git\s+(diff|status)\b/i,
-  gitImmutable: /^\s*git\s+show\s+[0-9a-f]{40}\b/i,
-  gitDiffScoped: /\s--\s+\S/,
-  dirListing: /^\s*(?:ls|eza|exa|dir|Get-ChildItem|gci)\b/i,
-  depList: /^\s*(?:npm\s+(?:-\S+\s+)*(?:ls|list)\b|pip\s+(?:-\S+\s+)*(?:list|freeze)\b|uv\s+pip\s+(?:-\S+\s+)*(?:list|freeze)\b|pnpm\s+(?:-\S+\s+)*(?:list|ls)\b|yarn\s+(?:-\S+\s+)*(?:list)\b|cargo\s+(?:-\S+\s+)*tree\b|bundle\s+(?:-\S+\s+)*(?:list|show)\b|composer\s+(?:-\S+\s+)*show\b)/i,
-  npmInstall: /^\s*npm\s+(?:-\S+\s+)*(?:install|ci)\b/i,
-  npmAudit: /^\s*npm\s+(?:-\S+\s+)*audit\b(?!.*(?:--fix|fix)\b)/i,
-  npmOutdated: /^\s*npm\s+(?:-\S+\s+)*outdated\b/i,
-  envProbe: /^\s*(?:node\s+(?:-v|--version)|npm\s+(?:-v|--version)|python3?\s+(?:(?:-V)\b|--?version)|git\s+--version|uv\s+--version|go\s+version|rustc\s+--version|cargo\s+--version|java\s+--version|ruby\s+--version|gem\s+--version|php\s+--version|which\b|where\b)/i,
-  npx: /^\s*npx\s+(?:--?yes\s+)?(?!.*\b(?:install|add|remove|uninstall|i|rm|update|upgrade|set|get|publish|link|ci|audit|shrinkwrap|dedupe|prune|rebuild)\b)/i,
-  gitPush: /^\s*git\s+push\b/i,
-  testRunner: /^\s*(?:npx\s+)?(?:pytest|vitest|jest|go\s+test)\b/i,
-  lintCommand: /^\s*(?:(?:npx\s+)?eslint|(?:uv\s+run\s+)?ruff)\b/i,
-  npmRunScript: /^\s*npm\s+run(?:-script)?\b/i,
-  catCommand: /^\s*cat\b/i
-};
-var DEP_LOCKFILES = {
-  npm: ["package-lock.json", "yarn.lock"],
-  pip: ["requirements.txt"],
-  uv: ["uv.lock", "requirements.txt"],
-  pnpm: ["pnpm-lock.yaml"],
-  yarn: ["yarn.lock"],
-  cargo: ["Cargo.lock"],
-  bundle: ["Gemfile.lock"],
-  composer: ["composer.lock"]
-};
-function isCommandOfType(cmd, type) {
-  const pattern = COMMAND_PATTERNS[type];
-  return pattern?.test(cmd) ?? false;
-}
-var isGitMutableCommand = (cmd) => isCommandOfType(cmd, "gitMutable");
-var isDirListingCommand = (cmd) => isCommandOfType(cmd, "dirListing");
-var isDepListCommand = (cmd) => isCommandOfType(cmd, "depList");
-var isNpmInstallCommand = (cmd) => isCommandOfType(cmd, "npmInstall");
-var isNpmAuditCommand = (cmd) => isCommandOfType(cmd, "npmAudit");
-var isNpmOutdatedCommand = (cmd) => isCommandOfType(cmd, "npmOutdated");
-var isGitPushCommand = (cmd) => isCommandOfType(cmd, "gitPush");
-var isTestRunnerCommand = (cmd) => isCommandOfType(cmd, "testRunner");
-var isLintCommand = (cmd) => isCommandOfType(cmd, "lintCommand");
-var isNpmRunScriptCommand = (cmd) => isCommandOfType(cmd, "npmRunScript");
-var isCatCommand = (cmd) => isCommandOfType(cmd, "catCommand");
-function isScopedGitStatusOrDiffStatCommand(cmd) {
-  if (!isCommandOfType(cmd, "gitMutable")) return false;
-  if (!isCommandOfType(cmd, "gitDiffScoped")) return false;
-  if (/^\s*git\s+diff\b/i.test(cmd) && !/--stat\b/.test(cmd)) return false;
-  return true;
-}
-function gitStateFingerprintSync(cwd) {
-  try {
-    const headResult = runGit(["rev-parse", "HEAD"], { cwd });
-    if (headResult.exitCode !== 0) return null;
-    const headSha = headResult.stdout.trim();
-    let statusHash = "";
-    const statusResult = runGit(["status", "--porcelain"], { cwd });
-    if (statusResult.exitCode === 0) {
-      statusHash = shortFingerprint(statusResult.stdout);
-    }
-    const key = `${headSha}\0${statusHash}`;
-    return shortFingerprint(key);
-  } catch {
-    return null;
-  }
-}
-var DIR_FINGERPRINT_LISTING_CAP_ENTRIES = 1e4;
-function dirStateFingerprintSync(path) {
-  try {
-    const stat = statSync(path);
-    if (!stat.isDirectory()) return null;
-    const entries = readdirSync(path);
-    if (entries.length <= DIR_FINGERPRINT_LISTING_CAP_ENTRIES) {
-      return shortFingerprint(entries.slice().sort().join("\0"));
-    }
-    return shortFingerprint(stat.mtimeMs.toString());
-  } catch {
-    return null;
-  }
-}
-var FILE_FINGERPRINT_CONTENT_CAP_BYTES = 2 * 1024 * 1024;
-function fileStateFingerprintSync(path) {
-  try {
-    const stat = statSync(path);
-    if (!stat.isFile()) return null;
-    if (stat.size <= FILE_FINGERPRINT_CONTENT_CAP_BYTES) {
-      return shortFingerprint(readFileSync(path));
-    }
-    return shortFingerprint(`${stat.mtimeMs}\0${stat.size}`);
-  } catch {
-    return null;
-  }
-}
-function depLockfileFingerprintSync(cmd, cwd) {
-  if (!cwd) return null;
-  const stripped = cmd.trim();
-  const firstToken = stripped.split(/\s+/)[0]?.toLowerCase() || "";
-  if (!firstToken) return null;
-  const candidates = firstToken === "uv" ? DEP_LOCKFILES["uv"] : DEP_LOCKFILES[firstToken];
-  if (!candidates) return null;
-  for (const lockfile of candidates) {
-    try {
-      const content = readFileSync(resolve(cwd, lockfile));
-      return shortFingerprint(content);
-    } catch {
-      continue;
-    }
-  }
-  return null;
-}
-function normalizeCommandForCacheKey(cmd) {
-  const trimmed = cmd.trim();
-  const tokens = [];
-  let current = "";
-  let quoteChar = null;
-  const flush = () => {
-    if (current.length > 0) {
-      tokens.push(current);
-      current = "";
-    }
-  };
-  for (let i = 0; i < trimmed.length; i++) {
-    const ch = trimmed[i];
-    if (quoteChar !== null) {
-      current += ch;
-      if (ch === quoteChar) quoteChar = null;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quoteChar = ch;
-      current += ch;
-      continue;
-    }
-    if (/\s/.test(ch)) {
-      flush();
-      continue;
-    }
-    current += ch === "\\" ? "/" : ch;
-  }
-  flush();
-  const normalized_tokens = tokens.map((token) => {
-    if (token.startsWith("-") || ["&&", "||", "|", ">", ">>", ";", "&"].includes(token)) {
-      return token;
-    }
-    if (token.startsWith("./") && !token.startsWith("../")) {
-      token = token.slice(2);
-    }
-    if (token.endsWith("/") && token !== "/") {
-      token = token.slice(0, -1);
-    }
-    return token || ".";
-  });
-  return normalized_tokens.join(" ");
-}
-async function commandHash(command, cwd = null) {
-  const normalized = normalizeCommandForCacheKey(command);
-  let key = cwd ? `${normalizePath(cwd)}\0${normalized}` : normalized;
-  if (cwd && isGitMutableCommand(command)) {
-    const fp = gitStateFingerprintSync(cwd);
-    if (fp) key = `${key}\0git:${fp}`;
-  }
-  if (cwd && isDirListingCommand(command)) {
-    const target = extractFirstPathArg(command, cwd, cwd);
-    if (target) {
-      const fp = dirStateFingerprintSync(target);
-      if (fp) key = `${key}\0dir:${fp}`;
-    }
-  }
-  if (isDepListCommand(command)) {
-    const fp = depLockfileFingerprintSync(command, cwd);
-    if (fp) key = `${key}\0lockfile:${fp}`;
-  }
-  if (cwd && (isNpmInstallCommand(command) || isNpmAuditCommand(command) || isNpmOutdatedCommand(command))) {
-    const fp = depLockfileFingerprintSync(command, cwd);
-    if (fp) key = `${key}\0npm-install:${fp}`;
-  }
-  return shortFingerprint(key);
-}
-function computeBashFingerprints(command, cwd) {
-  const fingerprints = {};
-  if (cwd && (isGitMutableCommand(command) || isGitPushCommand(command) || isTestRunnerCommand(command) || isLintCommand(command) || isBuildCommand(command) || isNpmRunScriptCommand(command))) {
-    const fp = gitStateFingerprintSync(cwd);
-    if (fp) fingerprints.git = fp;
-  }
-  if (cwd && isDirListingCommand(command)) {
-    const target = extractFirstPathArg(command, cwd, cwd);
-    if (target) {
-      const fp = dirStateFingerprintSync(target);
-      if (fp) fingerprints.dir = fp;
-    }
-  }
-  if (isDepListCommand(command) || cwd && (isNpmInstallCommand(command) || isNpmAuditCommand(command) || isNpmOutdatedCommand(command))) {
-    const fp = depLockfileFingerprintSync(command, cwd);
-    if (fp) fingerprints.lockfile = fp;
-  }
-  if (cwd && isCatCommand(command)) {
-    const target = extractFirstPathArg(command, cwd, null);
-    if (target) {
-      const fp = fileStateFingerprintSync(target);
-      if (fp) fingerprints.file = fp;
-    }
-  }
-  return Object.keys(fingerprints).length > 0 ? fingerprints : void 0;
-}
-function isBashEntryStale(entry, command, cwd) {
-  const stored = entry.fingerprints;
-  if (!stored) return false;
-  const current = computeBashFingerprints(command, cwd);
-  if (stored.git !== void 0 && stored.git !== current?.git) return true;
-  if (stored.dir !== void 0 && stored.dir !== current?.dir) return true;
-  if (stored.lockfile !== void 0 && stored.lockfile !== current?.lockfile) return true;
-  if (stored.file !== void 0 && stored.file !== current?.file) return true;
-  return false;
-}
-function tokenizeShellArgs(cmd) {
-  const trimmed = cmd.trim();
-  const tokens = [];
-  let current = "";
-  let quoteChar = null;
-  let hasToken = false;
-  for (let i = 0; i < trimmed.length; i++) {
-    const ch = trimmed[i];
-    if (quoteChar !== null) {
-      if (ch === quoteChar) {
-        quoteChar = null;
-      } else {
-        current += ch;
-      }
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quoteChar = ch;
-      hasToken = true;
-      continue;
-    }
-    if (/\s/.test(ch)) {
-      if (hasToken) {
-        tokens.push(current);
-        current = "";
-        hasToken = false;
-      }
-      continue;
-    }
-    current += ch;
-    hasToken = true;
-  }
-  if (hasToken) tokens.push(current);
-  return tokens;
-}
-function extractFirstPathArg(cmd, cwd, fallback) {
-  const tokens = tokenizeShellArgs(cmd);
-  for (let i = 1; i < tokens.length; i++) {
-    const token = tokens[i];
-    if (!token.startsWith("-")) {
-      if (!token.startsWith("/")) {
-        return resolve(cwd, token);
-      }
-      return token;
-    }
-  }
-  return fallback;
-}
-var ISSUE_LINE_PATTERN = /\b(?:error|fail(?:ed|ure)?|warning)\b/i;
-function summarizeOutputDelta(oldOutput, newOutput) {
-  if (oldOutput === newOutput) return null;
-  const oldLines = oldOutput.split("\n");
-  const newLines = newOutput.split("\n");
-  const oldIssueLines = oldLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
-  if (oldIssueLines.length > 0) {
-    const newIssueLines = newLines.filter((l) => ISSUE_LINE_PATTERN.test(l));
-    const priorTotal = oldIssueLines.length;
-    const availableCounts = /* @__PURE__ */ new Map();
-    for (const l of newIssueLines) availableCounts.set(l, (availableCounts.get(l) ?? 0) + 1);
-    let resolved = 0;
-    for (const l of oldIssueLines) {
-      const avail = availableCounts.get(l) ?? 0;
-      if (avail > 0) {
-        availableCounts.set(l, avail - 1);
-      } else {
-        resolved++;
-      }
-    }
-    const remaining = newIssueLines.length;
-    return `[token-goat: delta] ${resolved} of ${priorTotal} prior issues resolved; remaining: ${remaining}`;
-  }
-  return `[token-goat: delta] output changed: ${oldLines.length} -> ${newLines.length} lines`;
-}
-async function storeBashOutput(command, output, exitCode, cwd = null) {
-  const id = await commandHash(command, cwd);
-  const fingerprints = computeBashFingerprints(command, cwd);
-  const redactedOutput = redactSecrets(output).text;
-  const redactedCommand = redactSecrets(command).text;
-  const entry = {
-    id,
-    command: redactedCommand,
-    output: redactedOutput,
-    exitCode,
-    storedAt: Date.now(),
-    sizeBytes: Buffer.byteLength(redactedOutput, "utf-8"),
-    ...fingerprints ? { fingerprints } : {}
-  };
-  _byId.set(id, entry);
-  storeBlob(BASH_OUTPUT_SUBDIR, id, entry);
-  indexRecallEntry("bash", id, redactedCommand, `${redactedCommand}
-${redactedOutput}`, entry.storedAt);
-  return id;
-}
-function coerceBashEntry(raw) {
-  if (raw === null || typeof raw !== "object") return null;
-  const o = raw;
-  if (typeof o["id"] !== "string" || typeof o["command"] !== "string" || typeof o["output"] !== "string" || typeof o["exitCode"] !== "number" || typeof o["storedAt"] !== "number" || typeof o["sizeBytes"] !== "number") {
-    return null;
-  }
-  const entry = {
-    id: o["id"],
-    command: o["command"],
-    output: o["output"],
-    exitCode: o["exitCode"],
-    storedAt: o["storedAt"],
-    sizeBytes: o["sizeBytes"]
-  };
-  const rawFingerprints = o["fingerprints"];
-  if (rawFingerprints !== null && typeof rawFingerprints === "object") {
-    const f = rawFingerprints;
-    const fingerprints = {};
-    if (typeof f["git"] === "string") fingerprints.git = f["git"];
-    if (typeof f["dir"] === "string") fingerprints.dir = f["dir"];
-    if (typeof f["lockfile"] === "string") fingerprints.lockfile = f["lockfile"];
-    if (typeof f["file"] === "string") fingerprints.file = f["file"];
-    if (Object.keys(fingerprints).length > 0) return { ...entry, fingerprints };
-  }
-  return entry;
-}
-function getBashOutput(id) {
-  const hit = _byId.get(id);
-  if (hit !== void 0) return hit;
-  if (isBlobStale(BASH_OUTPUT_SUBDIR, id)) return null;
-  const entry = coerceBashEntry(loadBlob(BASH_OUTPUT_SUBDIR, id));
-  if (entry === null) return null;
-  _byId.set(id, entry);
-  return entry;
-}
-registerReset(() => {
-  _byId = /* @__PURE__ */ new Map();
-});
-
-// src/cli_commands.ts
-function toEntry(cmd) {
-  return {
-    name: cmd.name(),
-    description: cmd.description(),
-    aliases: cmd.aliases(),
-    options: cmd.options.map((o) => ({ flags: o.flags, description: o.description })),
-    arguments: cmd.registeredArguments.map((a) => ({ name: a.name(), description: a.description, required: a.required })),
-    subcommands: cmd.commands.filter((sub) => sub.name() !== "help").map(toEntry)
-  };
-}
-function buildCommandManifest(program) {
-  return program.commands.filter((cmd) => cmd.name() !== "help").map(toEntry);
-}
-function flattenCommandNames(manifest) {
-  const names = [];
-  for (const entry of manifest) {
-    names.push(entry.name);
-    for (const sub of entry.subcommands) {
-      names.push(`${entry.name} ${sub.name}`);
-    }
-  }
-  return names;
-}
-function entryMatches(entry, re, pattern) {
-  const haystacks = [entry.name, entry.description, ...entry.aliases];
-  return haystacks.some((h) => re !== null ? re.test(h) : h.includes(pattern));
-}
-function filterCommandManifest(manifest, pattern) {
-  let re;
-  try {
-    re = new RegExp(pattern);
-  } catch {
-    re = null;
-  }
-  const result = [];
-  for (const entry of manifest) {
-    if (entryMatches(entry, re, pattern)) {
-      result.push(entry);
-      continue;
-    }
-    const matchingSubs = entry.subcommands.filter((sub) => entryMatches(sub, re, pattern));
-    if (matchingSubs.length > 0) {
-      result.push({ ...entry, subcommands: matchingSubs });
-    }
-  }
-  return result;
-}
-function formatCommandManifest(manifest) {
-  const lines = [];
-  lines.push("# token-goat commands");
-  lines.push("");
-  for (const entry of manifest) {
-    lines.push(`## ${entry.name}${entry.aliases.length ? " (alias: " + entry.aliases.join(", ") + ")" : ""}${entry.description ? " -- " + entry.description : ""}`);
-    for (const arg of entry.arguments) {
-      lines.push(`  arg: ${arg.name}${arg.required ? "" : " (optional)"}${arg.description ? " -- " + arg.description : ""}`);
-    }
-    for (const opt of entry.options) {
-      lines.push(`  ${opt.flags}${opt.description ? " -- " + opt.description : ""}`);
-    }
-    for (const sub of entry.subcommands) {
-      lines.push(`  ${entry.name} ${sub.name}${sub.description ? " -- " + sub.description : ""}`);
-    }
-    lines.push("");
-  }
-  return lines.join("\n").trimEnd();
-}
-
-// src/web_cache.ts
-var WEB_OUTPUT_SUBDIR = "web_outputs";
-var _byId2 = /* @__PURE__ */ new Map();
-var _rawById = /* @__PURE__ */ new Map();
-var _urlIndex = /* @__PURE__ */ new Map();
-function cacheIdForUrl(url) {
-  return shortFingerprint(url);
-}
-function storeWebOutput(url, content, dedupKey = url, rawContent) {
-  const cacheId = cacheIdForUrl(dedupKey);
-  const redactedContent = redactSecrets(content).text;
-  _byId2.set(cacheId, redactedContent);
-  _urlIndex.set(url, cacheId);
-  const redactedRaw = rawContent !== void 0 && rawContent !== content ? redactSecrets(rawContent).text : void 0;
-  if (redactedRaw !== void 0) _rawById.set(cacheId, redactedRaw);
-  else _rawById.delete(cacheId);
-  storeBlob(WEB_OUTPUT_SUBDIR, cacheId, redactedRaw !== void 0 ? { url, content: redactedContent, raw: redactedRaw } : { url, content: redactedContent });
-  const redactedUrl = redactSecrets(url).text;
-  indexRecallEntry("web", cacheId, redactedUrl, `${redactedUrl}
-${redactedContent}`, Date.now());
-  return cacheId;
-}
-function coerceWebBlob(raw) {
-  if (raw === null || typeof raw !== "object") return null;
-  const o = raw;
-  if (typeof o["content"] !== "string") return null;
-  return { url: typeof o["url"] === "string" ? o["url"] : null, content: o["content"], raw: typeof o["raw"] === "string" ? o["raw"] : null };
-}
-function getWebOutput(cacheId) {
-  const hit = _byId2.get(cacheId);
-  if (hit !== void 0) return hit;
-  if (isBlobStale(WEB_OUTPUT_SUBDIR, cacheId)) return null;
-  const blob = coerceWebBlob(loadBlob(WEB_OUTPUT_SUBDIR, cacheId));
-  if (blob === null) return null;
-  _byId2.set(cacheId, blob.content);
-  if (blob.raw !== null) _rawById.set(cacheId, blob.raw);
-  if (blob.url !== null) _urlIndex.set(blob.url, cacheId);
-  return blob.content;
-}
-function getWebOutputRaw(cacheId) {
-  const cleaned = getWebOutput(cacheId);
-  if (cleaned === null) return null;
-  return _rawById.get(cacheId) ?? cleaned;
-}
-function getWebOutputByUrlFromDisk(url, dedupKey = url) {
-  const cacheId = cacheIdForUrl(dedupKey);
-  const content = getWebOutput(cacheId);
-  if (content === null) return null;
-  return { cacheId, content };
-}
-registerReset(() => {
-  _byId2 = /* @__PURE__ */ new Map();
-  _rawById = /* @__PURE__ */ new Map();
-  _urlIndex = /* @__PURE__ */ new Map();
-});
-
-// src/symbol_body_probe.ts
-import * as fs from "fs";
-var OVERSIZED_BODY_PROBE_SQL = `SELECT 1 FROM symbols WHERE LENGTH(body) > ${SYMBOL_BODY_CHAR_CAP} LIMIT 1`;
-function checkSymbolBodySize(dbPath) {
-  if (!fs.existsSync(dbPath)) {
-    return { name: "Symbol body size", status: "ok", message: "no database yet" };
-  }
-  try {
-    const db = getDb(dbPath);
-    const row = db.prepare(OVERSIZED_BODY_PROBE_SQL).get();
-    if (row !== void 0) {
-      return {
-        name: "Symbol body size",
-        status: "warn",
-        message: `one or more stored symbol bodies exceed the ${SYMBOL_BODY_CHAR_CAP}-char cap enforced by boundSymbolBody -- likely a pre-fix leftover from a minified/generated file. A plain 'token-goat reclaim-index' (VACUUM only) CANNOT remove these rows -- it only reclaims freed pages, it never deletes row content. Only 'token-goat reclaim-index --rebuild' drops and re-derives them under the cap (stop the worker first with 'token-goat worker stop', since reclaim-index refuses to run while it's live); --rebuild reparses and re-embeds every indexed file across every project and can take a long time on a large multi-project index`
-      };
-    }
-    return { name: "Symbol body size", status: "ok", message: "no stored symbol body exceeds the cap" };
-  } catch (err) {
-    return {
-      name: "Symbol body size",
-      status: "warn",
-      message: `could not query symbol body size: ${extractErrorMessage(err)}`
-    };
-  }
-}
-
-export {
-  GEMINI_TOOL_NAME_MAP,
-  normalizePayload,
-  HOOK_EVENTS,
-  MAX_STDIN_BYTES,
-  readStdinJson,
-  isRecallCacheType,
-  indexRecallEntry,
-  listRecentRecall,
-  searchRecall,
-  BASH_OUTPUT_SUBDIR,
-  isScopedGitStatusOrDiffStatCommand,
-  normalizeCommandForCacheKey,
-  commandHash,
-  isBashEntryStale,
-  summarizeOutputDelta,
-  storeBashOutput,
-  getBashOutput,
-  buildCommandManifest,
-  flattenCommandNames,
-  filterCommandManifest,
-  formatCommandManifest,
-  WEB_OUTPUT_SUBDIR,
-  storeWebOutput,
-  getWebOutput,
-  getWebOutputRaw,
-  getWebOutputByUrlFromDisk,
-  checkSymbolBodySize
-};