token-goat 2.9.10 → 2.9.12

package/dist/{token-goat-chunk-DCYHAUW3.mjs → token-goat-chunk-SBYRP3X4.mjs}

@@ -25,7 +25,8 @@ import {
   runSkeleton,
   runSymbol,
   withPinnedReads
-} from "./token-goat-chunk-YFXFUG3L.mjs";
+} from "./token-goat-chunk-4CK445AW.mjs";
+import "./token-goat-chunk-6F5TLJC7.mjs";
 import {
   buildProjectMap,
   embeddingsDepsAvailable,
@@ -34,22 +35,26 @@ import {
   getProjectIndexCounts,
   isWorkerRunning,
   mapLookupBytesSaved
-} from "./token-goat-chunk-PA5UXNOT.mjs";
+} from "./token-goat-chunk-GM6QZWCF.mjs";
 import {
-  ENV_KEYS,
-  VERSION,
-  dataDir,
   envStrList,
-  extractErrorMessage,
   getDb,
-  globalDbPath,
   loadConfig,
-  normalizePath,
   recordStat,
   resolveProjectRoot,
   savedTokensFromBytes
-} from "./token-goat-chunk-VCEK77ED.mjs";
+} from "./token-goat-chunk-TOGYS5A7.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
+import {
+  ENV_KEYS,
+  VERSION,
+  dataDir,
+  displaySafeJson,
+  extractErrorMessage,
+  foldCaseForContainment,
+  globalDbPath,
+  normalizePath
+} from "./token-goat-chunk-LOCOX2ML.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -121,15 +126,16 @@ function toCallToolResultFromExitCode(fn) {
   const { code, text } = captureOutput(fn);
   return toCallToolResult({ text, code });
 }
-function realPathOrSelf(p) {
+function realPathForContainment(p) {
   try {
     return fs.realpathSync.native(p);
-  } catch {
-    return p;
+  } catch (err) {
+    const code = err.code;
+    return code === "ENOENT" || code === "ENOTDIR" ? p : null;
   }
 }
 function forCompare(p) {
-  return process.platform === "win32" ? p.toLowerCase() : p;
+  return process.platform === "win32" ? foldCaseForContainment(p) : p;
 }
 function resolveToolRoot(projectRoot) {
   const resolved = resolveProjectRoot(projectRoot !== void 0 ? { project: projectRoot } : {});
@@ -146,18 +152,40 @@ function assertRootAllowed(resolvedRoot) {
     `refused: "${resolvedRoot}" is not inside any root listed in mcp.allowed_roots. A caller-supplied projectRoot is untrusted input, so this deployment pins which roots may be named; add the root to mcp.allowed_roots (or TOKEN_GOAT_MCP_ALLOWED_ROOTS) to permit it.`
   );
 }
-function checkWithinProjectRoot(target, resolvedRoot) {
-  const root = forCompare(normalizePath(realPathOrSelf(resolvedRoot)));
-  const abs = path.resolve(resolvedRoot, normalizePath(target));
-  let identity;
+var NO_CHECK_PINS = [];
+function identityOf(p) {
   try {
-    identity = fileIdentity(fs.statSync(abs, { bigint: true }));
+    return fileIdentity(fs.statSync(p, { bigint: true }));
   } catch {
-    identity = null;
+    return null;
   }
-  const realNative = realPathOrSelf(abs);
-  const real = forCompare(normalizePath(realNative));
-  return { inside: real === root || real.startsWith(root.endsWith("/") ? root : root + "/"), abs, real: realNative, identity };
+}
+function pinsFor(abs, real, identity) {
+  const pinIdentity = identity ?? ABSENT_PIN;
+  return [
+    [pinKey(abs), pinIdentity],
+    [pinKey(real), pinIdentity]
+  ];
+}
+function checkWithinProjectRoot(target, resolvedRoot) {
+  const rootReal = realPathForContainment(resolvedRoot);
+  const abs = path.resolve(resolvedRoot, normalizePath(target));
+  const absRaw = path.resolve(resolvedRoot, target);
+  const identity = identityOf(absRaw);
+  const realNative = realPathForContainment(abs);
+  if (rootReal === null) return { inside: false, reason: "unresolvable-root", pins: NO_CHECK_PINS };
+  if (realNative === null) return { inside: false, reason: "unresolvable-target", pins: NO_CHECK_PINS };
+  const root = forCompare(normalizePath(rootReal));
+  const under = (real) => {
+    const r = forCompare(normalizePath(real));
+    return r === root || r.startsWith(root.endsWith("/") ? root : root + "/");
+  };
+  if (!under(realNative)) return { inside: false, reason: "outside", pins: NO_CHECK_PINS };
+  if (absRaw === abs) return { inside: true, reason: "inside", pins: pinsFor(abs, realNative, identity) };
+  const realRaw = realPathForContainment(absRaw);
+  if (realRaw === null) return { inside: false, reason: "unresolvable-target", pins: NO_CHECK_PINS };
+  if (!under(realRaw)) return { inside: false, reason: "outside", pins: NO_CHECK_PINS };
+  return { inside: true, reason: "inside", pins: [...pinsFor(abs, realNative, identity), ...pinsFor(absRaw, realRaw, identity)] };
 }
 function specFilePart(spec) {
   const range = parseLineRange(spec);
@@ -166,6 +194,17 @@ function specFilePart(spec) {
   return colonIdx === -1 ? spec : spec.slice(0, colonIdx);
 }
 var NO_PINS = /* @__PURE__ */ new Map();
+function refusalText(file, resolvedRoot, reason) {
+  const escapeHatch = "Set mcp.confine_reads_to_project_root = false (or TOKEN_GOAT_MCP_CONFINE_READS=0) to allow cross-root reads.";
+  if (reason === "unresolvable-root") {
+    return `refused: the project root "${resolvedRoot}" could not be resolved, so no path can be confirmed to sit inside it. This is a broken workspace root -- an unmounted share, a deleted directory, or a permission change on a parent -- not a request to read outside the project.`;
+  }
+  if (reason === "unresolvable-target") {
+    return `refused: "${file}" could not be resolved to a real location, so it cannot be confirmed to sit inside the project root. A symlink loop, a permission error on a parent directory, or a path past the operating system's length limit all produce this. The check fails closed rather than falling back to comparing the text of the path.`;
+  }
+  const rootScope = loadConfig().mcp.allowed_roots.length === 0 ? "Each call is confined to the projectRoot it names, and that root comes from the caller: set mcp.allowed_roots (or TOKEN_GOAT_MCP_ALLOWED_ROOTS) to pin which roots may be named at all." : "Each call is confined to the projectRoot it names, which must itself sit inside mcp.allowed_roots.";
+  return `refused: "${file}" is outside the project root "${resolvedRoot}". ${rootScope} ${escapeHatch}`;
+}
 function confineTargets(targets, resolvedRoot, splitCommas = true) {
   if (!loadConfig(resolvedRoot).mcp.confine_reads_to_project_root) return { ok: true, targets, pins: NO_PINS };
   const checked = [];
@@ -177,17 +216,9 @@ function confineTargets(targets, resolvedRoot, splitCommas = true) {
       if (file === "") continue;
       const check = checkWithinProjectRoot(file, resolvedRoot);
       if (!check.inside) {
-        return {
-          ok: false,
-          refusal: toCallToolResult({
-            text: `refused: "${file}" is outside the project root. The MCP tools are confined to the workspace. Set mcp.confine_reads_to_project_root = false (or TOKEN_GOAT_MCP_CONFINE_READS=0) to allow cross-root reads.`,
-            code: 1
-          })
-        };
+        return { ok: false, refusal: toCallToolResult({ text: refusalText(file, resolvedRoot, check.reason), code: 1 }) };
       }
-      const pinIdentity = check.identity ?? ABSENT_PIN;
-      pins.set(pinKey(check.abs), pinIdentity);
-      pins.set(pinKey(check.real), pinIdentity);
+      for (const [key, identity] of check.pins) pins.set(key, identity);
     }
     checked.push(splitCommas ? parts.join(",") : parts[0]);
   }
@@ -211,7 +242,7 @@ function mcpToolAllowlist() {
   return names.length === 0 ? null : new Set(names);
 }
 async function createMcpServer() {
-  const [{ McpServer }, { z }] = await Promise.all([import("./token-goat-chunk-LYWIRYCF.mjs"), import("./token-goat-chunk-PXWBHSFB.mjs")]);
+  const [{ McpServer }, { z }] = await Promise.all([import("./token-goat-chunk-LHLQFGWQ.mjs"), import("./token-goat-chunk-T6M7DAW3.mjs")]);
   const server = new McpServer({ name: "token-goat", version: VERSION });
   const allowlist = mcpToolAllowlist();
   if (allowlist !== null) {
@@ -473,7 +504,7 @@ async function createMcpServer() {
         embeddingsEnabled,
         embeddingsAvailable
       };
-      return toCallToolResult({ text: JSON.stringify(status, null, 2), code: 0 });
+      return toCallToolResult({ text: displaySafeJson(status), code: 0 });
     }
   );
   server.registerTool(
@@ -678,7 +709,7 @@ async function createMcpServer() {
         text: z.string().max(CONTENT_MAX_INPUT_CHARS).describe("text to compress")
       }
     },
-    (args) => toCallToolResult({ text: JSON.stringify(compressionPayload(compressText(args.text)), null, 2), code: 0 })
+    (args) => toCallToolResult({ text: displaySafeJson(compressionPayload(compressText(args.text))), code: 0 })
   );
   server.registerTool(
     "retrieve_text",
@@ -704,7 +735,7 @@ async function createMcpServer() {
       }
     },
     (args) => toCallToolResult({
-      text: JSON.stringify(createHandoff(args.name, args.text, resolveToolRoot(args.projectRoot)), null, 2),
+      text: displaySafeJson(createHandoff(args.name, args.text, resolveToolRoot(args.projectRoot))),
       code: 0
     })
   );
@@ -723,12 +754,13 @@ async function createMcpServer() {
         projectRoot: resolveToolRoot(args.projectRoot),
         ...args.full === true ? { full: true } : {}
       });
-      return result === null ? toCallToolResult({ text: `no local handoff named "${args.name}" in this project`, code: 1 }) : typeof result === "string" ? toRawCallToolResult({ text: result, code: 0 }) : toCallToolResult({ text: JSON.stringify(compressionPayload(result), null, 2), code: 0 });
+      return result === null ? toCallToolResult({ text: `no local handoff named "${args.name}" in this project`, code: 1 }) : typeof result === "string" ? toRawCallToolResult({ text: result, code: 0 }) : toCallToolResult({ text: displaySafeJson(compressionPayload(result)), code: 0 });
     }
   );
   return server;
 }
 export {
+  checkWithinProjectRoot,
   createMcpServer,
   mcpToolAllowlist
 };

package/dist/{token-goat-chunk-JS44SRAX.mjs → token-goat-chunk-SF2CKCFQ.mjs}

@@ -3,7 +3,7 @@ const require = __cjsRequire(import.meta.url);
 import {
   deliveredOutputBytes,
   wrappedShell
-} from "./token-goat-chunk-ATVQ6IIT.mjs";
+} from "./token-goat-chunk-6NIGPPN6.mjs";
 import {
   ToolFilter,
   capTokens,
@@ -15,8 +15,9 @@ import {
   recordStat,
   selectFilter,
   shlexSplit
-} from "./token-goat-chunk-VCEK77ED.mjs";
+} from "./token-goat-chunk-TOGYS5A7.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
+import "./token-goat-chunk-LOCOX2ML.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";

package/dist/{token-goat-chunk-PXWBHSFB.mjs → token-goat-chunk-T6M7DAW3.mjs}

@@ -19,6 +19,9 @@ import {
   ZodCUID2,
   ZodCatch,
   ZodCodec,
+  ZodCompileAsyncError,
+  ZodCompileUnsupportedError,
+  ZodCreditCard,
   ZodCustom,
   ZodCustomStringFormat,
   ZodDate,
@@ -110,6 +113,7 @@ import {
   _null,
   _overwrite,
   _positive,
+  _properties,
   _property,
   _regex,
   _size,
@@ -133,14 +137,17 @@ import {
   clone,
   codec,
   coerce_exports,
+  compile,
   config,
   core_exports,
+  creditCard,
   cuid,
   cuid2,
   custom,
   date,
   decode,
   decodeAsync,
+  deepPartial,
   describe,
   discriminatedUnion,
   e164,
@@ -156,6 +163,7 @@ import {
   float64,
   formatError,
   fromJSONSchema,
+  getDiscriminatedOption,
   getErrorMap,
   globalRegistry,
   guid,
@@ -163,6 +171,7 @@ import {
   hex,
   hostname,
   httpUrl,
+  input,
   int,
   int32,
   int64,
@@ -182,6 +191,7 @@ import {
   looseRecord,
   mac,
   map,
+  memoizer,
   meta,
   nan,
   nanoid,
@@ -193,6 +203,7 @@ import {
   number,
   object,
   optional,
+  output,
   parse,
   parseAsync,
   partialRecord,
@@ -223,6 +234,7 @@ import {
   symbol,
   templateLiteral,
   toJSONSchema,
+  toZod,
   transform,
   treeifyError,
   tuple,
@@ -237,10 +249,11 @@ import {
   uuidv4,
   uuidv6,
   uuidv7,
+  validate,
+  validateAsync,
   xid,
-  xor,
-  zod_default
-} from "./token-goat-chunk-FQD3OB5W.mjs";
+  xor
+} from "./token-goat-chunk-QCQUIPIP.mjs";
 import "./token-goat-chunk-A37V4PBF.mjs";
 export {
   $brand,
@@ -261,6 +274,9 @@ export {
   ZodCUID2,
   ZodCatch,
   ZodCodec,
+  ZodCompileAsyncError,
+  ZodCompileUnsupportedError,
+  ZodCreditCard,
   ZodCustom,
   ZodCustomStringFormat,
   ZodDate,
@@ -341,15 +357,18 @@ export {
   clone,
   codec,
   coerce_exports as coerce,
+  compile,
   config,
   core_exports as core,
+  creditCard,
   cuid,
   cuid2,
   custom,
   date,
   decode,
   decodeAsync,
-  zod_default as default,
+  deepPartial,
+  external_exports as default,
   describe,
   discriminatedUnion,
   e164,
@@ -367,6 +386,7 @@ export {
   formatError,
   fromJSONSchema,
   _function as function,
+  getDiscriminatedOption,
   getErrorMap,
   globalRegistry,
   _gt as gt,
@@ -377,6 +397,7 @@ export {
   hostname,
   httpUrl,
   _includes as includes,
+  input,
   _instanceof as instanceof,
   int,
   int32,
@@ -403,6 +424,7 @@ export {
   map,
   _maxLength as maxLength,
   _maxSize as maxSize,
+  memoizer,
   meta,
   _mime as mime,
   _minLength as minLength,
@@ -423,6 +445,7 @@ export {
   number,
   object,
   optional,
+  output,
   _overwrite as overwrite,
   parse,
   parseAsync,
@@ -433,6 +456,7 @@ export {
   preprocess,
   prettifyError,
   promise,
+  _properties as properties,
   _property as property,
   readonly,
   record,
@@ -462,6 +486,7 @@ export {
   toJSONSchema,
   _toLowerCase as toLowerCase,
   _toUpperCase as toUpperCase,
+  toZod,
   transform,
   treeifyError,
   _trim as trim,
@@ -479,6 +504,8 @@ export {
   uuidv4,
   uuidv6,
   uuidv7,
+  validate,
+  validateAsync,
   _void as void,
   xid,
   xor,