token-goat 2.9.11 → 2.9.13

package/dist/{token-goat-chunk-2ZUPQYLO.mjs → token-goat-chunk-B3CTCQTH.mjs}

@@ -9,7 +9,7 @@ import {
   stripMultilineStringSpan,
   stripNestedBlockCommentSpan,
   stripStringLiterals
-} from "./token-goat-chunk-YCKCFYTM.mjs";
+} from "./token-goat-chunk-QKXBGBQR.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";

package/dist/{token-goat-chunk-V53Z47ZH.mjs → token-goat-chunk-FQCNJV4V.mjs}

@@ -5,19 +5,23 @@ import {
   enqueueDirtyPathSafe,
   getProjectFileEntries,
   getTrackedFiles,
-  indexRecallEntry,
+  indexRecallEntry
+} from "./token-goat-chunk-ZZI3IDQZ.mjs";
+import {
+  estimateTokensFromLength
+} from "./token-goat-chunk-JOXLE672.mjs";
+import {
   isBlobStale,
   loadBlob,
   storeBlob
-} from "./token-goat-chunk-SY7WTZMW.mjs";
+} from "./token-goat-chunk-UM47DRD3.mjs";
 import {
-  estimateTokensFromLength,
   fingerprintFile,
   getDb,
   getDisplayRoot,
   redactSecrets,
   shortFingerprint
-} from "./token-goat-chunk-AAEYU2U2.mjs";
+} from "./token-goat-chunk-UMXJN7DI.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-EEIDFMEM.mjs";
@@ -33,7 +37,7 @@ import {
   normalizePath,
   resolveIndexPath,
   toDisplayPath
-} from "./token-goat-chunk-YCKCFYTM.mjs";
+} from "./token-goat-chunk-QKXBGBQR.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -319,7 +323,17 @@ function reconcileProject(opts = {}) {
   const removed = [];
   if (!budgetExhausted && !trackedUnavailable) {
     for (const [folded, entry] of indexed) {
-      if (!seenOnDisk.has(folded)) removed.push(entry.filePath);
+      if (seenOnDisk.has(folded)) continue;
+      if (Date.now() - startedAt > budgetMs) {
+        budgetExhausted = true;
+        removed.length = 0;
+        break;
+      }
+      try {
+        fs.statSync(entry.filePath);
+      } catch {
+        removed.push(entry.filePath);
+      }
     }
   }
   let enqueued = 0;

package/dist/{token-goat-chunk-3ZALKJ23.mjs → token-goat-chunk-FZU7GMUS.mjs}

@@ -25,8 +25,7 @@ import {
   runSkeleton,
   runSymbol,
   withPinnedReads
-} from "./token-goat-chunk-LKOYKSID.mjs";
-import "./token-goat-chunk-2ZUPQYLO.mjs";
+} from "./token-goat-chunk-U7X6LQD2.mjs";
 import {
   buildProjectMap,
   embeddingsDepsAvailable,
@@ -35,7 +34,10 @@ import {
   getProjectIndexCounts,
   isWorkerRunning,
   mapLookupBytesSaved
-} from "./token-goat-chunk-SY7WTZMW.mjs";
+} from "./token-goat-chunk-ZZI3IDQZ.mjs";
+import "./token-goat-chunk-JOXLE672.mjs";
+import "./token-goat-chunk-YOA4N6WA.mjs";
+import "./token-goat-chunk-UM47DRD3.mjs";
 import {
   envStrList,
   getDb,
@@ -43,8 +45,9 @@ import {
   recordStat,
   resolveProjectRoot,
   savedTokensFromBytes
-} from "./token-goat-chunk-AAEYU2U2.mjs";
+} from "./token-goat-chunk-UMXJN7DI.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
+import "./token-goat-chunk-B3CTCQTH.mjs";
 import {
   ENV_KEYS,
   VERSION,
@@ -54,7 +57,7 @@ import {
   foldCaseForContainment,
   globalDbPath,
   normalizePath
-} from "./token-goat-chunk-YCKCFYTM.mjs";
+} from "./token-goat-chunk-QKXBGBQR.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -242,7 +245,7 @@ function mcpToolAllowlist() {
   return names.length === 0 ? null : new Set(names);
 }
 async function createMcpServer() {
-  const [{ McpServer }, { z }] = await Promise.all([import("./token-goat-chunk-LHLQFGWQ.mjs"), import("./token-goat-chunk-T6M7DAW3.mjs")]);
+  const [{ McpServer }, { z }] = await Promise.all([import("./token-goat-chunk-OMNQUUIT.mjs"), import("./token-goat-chunk-T6M7DAW3.mjs")]);
   const server = new McpServer({ name: "token-goat", version: VERSION });
   const allowlist = mcpToolAllowlist();
   if (allowlist !== null) {
@@ -276,7 +279,8 @@ async function createMcpServer() {
         kind: z.string().optional().describe("restrict to one kind (function, class, ...)"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { name, limit, file, kind, json, projectRoot } = args;
@@ -314,7 +318,9 @@ async function createMcpServer() {
         forceRefresh: z.boolean().optional().describe("reparse file from disk before querying (ignore stale index)"),
         stats: z.boolean().optional().describe("add per-symbol reference count and doc-coverage flag"),
         projectRoot: projectRootField
-      }
+      },
+      // What readOnlyHint claims here, once, for all fifteen tools that carry it: the caller's own environment is untouched -- the project's files, and anything the caller would notice missing. Three things these tools do are deliberately outside that. They append a row to token-goat's `stats` table. They may reparse a file whose index entry is stale, and enqueue it for the background indexer. Opening a database for the first time creates its schema. All three are token-goat's own derived state, rebuilt from the project on demand and worth nothing if deleted; calling a symbol lookup a writing tool on their account would cost the caller a confirmation prompt for every read while protecting nothing. A tool that touches anything the caller owns says so instead, and the guard beside this file measures which tools those are rather than trusting the claim.
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { spec, json, forceRefresh, stats, projectRoot } = args;
@@ -343,7 +349,8 @@ async function createMcpServer() {
         spec: z.string().describe("file::Heading"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { spec, json, projectRoot } = args;
@@ -373,7 +380,8 @@ async function createMcpServer() {
         forceRefresh: z.boolean().optional().describe("reparse file from disk before querying (ignore stale index)"),
         stats: z.boolean().optional().describe("add per-symbol reference count and doc-coverage flag"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { file, json, minLines, forceRefresh, stats, projectRoot } = args;
@@ -406,7 +414,8 @@ async function createMcpServer() {
         forceRefresh: z.boolean().optional().describe("reparse file from disk before querying (ignore stale index)"),
         stats: z.boolean().optional().describe("add per-symbol reference count and doc-coverage flag"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { file, json, minLines, forceRefresh, stats, projectRoot } = args;
@@ -439,7 +448,9 @@ async function createMcpServer() {
         excludeTests: z.boolean().optional().describe("hide hits whose file is a test file (opt-in; default output is unchanged)"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: makeProjectRootField("search")
-      }
+      },
+      // openWorldHint stays false although a first call on a machine with no cached model downloads one over the network: what this tool interacts with is the local index, and the download provisions the tool rather than being the tool reaching out. A client reading `true` here would take it as "this searches the internet", which is the wrong warning.
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     async (args) => {
       const { query, limit, grep, excludeTests, json, projectRoot } = args;
@@ -461,7 +472,8 @@ async function createMcpServer() {
       description: 'Report whether the index for a project can be trusted right now: whether it has ever been indexed at all, current file/symbol counts, dirty-reindex-queue depth, whether the background worker is alive, and whether embeddings are available (semantic silently degrades to full-text search without them). Call this after an unexpectedly empty result from another token-goat tool (symbol/read/semantic/refs/brief/...) to tell apart "no match" from "the index is not ready yet" -- an MCP-only client has no hook layer to warn about this on its own, so an empty tool result and a stale/unindexed project look identical without this check.',
       inputSchema: {
         projectRoot: makeProjectRootField("check")
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { projectRoot } = args;
@@ -520,7 +532,8 @@ async function createMcpServer() {
         ),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { spec, callers, limit, top, json, projectRoot } = args;
@@ -554,7 +567,8 @@ async function createMcpServer() {
         excludeTests: z.boolean().optional().describe("hide callers whose call site lives in a test file (opt-in; default output is unchanged)"),
         grep: z.string().optional().describe("only show callers whose enclosing symbol name matches this regex (literal substring if it is not valid regex)"),
         projectRoot: makeProjectRootField("orient")
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { spec, limit, json, context, excludeTests, grep, projectRoot } = args;
@@ -584,7 +598,8 @@ async function createMcpServer() {
       inputSchema: {
         compact: z.boolean().optional().describe("compact, low-token summary"),
         projectRoot: makeProjectRootField("overview")
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { compact, projectRoot } = args;
@@ -604,7 +619,8 @@ async function createMcpServer() {
         symbolMode: z.boolean().optional().describe("list symbols instead of files"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { ref, symbolMode, json, projectRoot } = args;
@@ -631,7 +647,8 @@ async function createMcpServer() {
         context: z.number().int().nonnegative().max(MCP_MAX_CONTEXT_LINES).optional().describe("lines of context to show before and after each match"),
         // runGrep takes no projectRoot of its own (its `path` array is its scope), so this field only names the root the confinement check is made against -- without it, a search rooted anywhere but the server process's cwd is refused.
         projectRoot: makeProjectRootField("search")
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { pattern, path: searchPath, maxLines, json, recursive, context, projectRoot } = args;
@@ -663,7 +680,8 @@ async function createMcpServer() {
         file: z.string().describe("file path"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { file, json, projectRoot } = args;
@@ -686,7 +704,8 @@ async function createMcpServer() {
         file: z.string().describe("file path"),
         json: z.boolean().optional().describe("output as JSON"),
         projectRoot: projectRootField
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const { file, json, projectRoot } = args;
@@ -707,7 +726,9 @@ async function createMcpServer() {
       description: "Compress arbitrary local text, persist it in the bounded local cache, and return an opaque recovery ID plus metadata.",
       inputSchema: {
         text: z.string().max(CONTENT_MAX_INPUT_CHARS).describe("text to compress")
-      }
+      },
+      // destructiveHint is true for every tool that writes here, including the ones that only ever add: the store is bounded by item count and by total bytes, so a write can evict an earlier entry and leave a recovery id the caller is holding unredeemable. idempotentHint survives a repeat writing a fresh timestamp and another stats row, on the same reading of "its environment" set out on the read tool above.
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
     },
     (args) => toCallToolResult({ text: displaySafeJson(compressionPayload(compressText(args.text))), code: 0 })
   );
@@ -717,7 +738,8 @@ async function createMcpServer() {
       description: "Retrieve original text from a token-goat compression ID.",
       inputSchema: {
         id: z.string().regex(/^tg_[0-9a-f]{16}$/).describe("opaque token-goat content ID")
-      }
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
     },
     (args) => {
       const text = retrieveText(args.id);
@@ -732,7 +754,8 @@ async function createMcpServer() {
         name: z.string().regex(/^[A-Za-z0-9._-]{1,128}$/).describe("handoff name"),
         text: z.string().max(CONTENT_MAX_INPUT_CHARS).describe("handoff text"),
         projectRoot: makeProjectRootField("scope")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
     },
     (args) => toCallToolResult({
       text: displaySafeJson(createHandoff(args.name, args.text, resolveToolRoot(args.projectRoot))),
@@ -747,7 +770,9 @@ async function createMcpServer() {
         name: z.string().regex(/^[A-Za-z0-9._-]{1,128}$/).describe("handoff name"),
         full: z.boolean().optional().describe("return full text instead of a compact payload"),
         projectRoot: makeProjectRootField("scope")
-      }
+      },
+      // Reads like a read, and is not one: resolving compactly runs the handoff text back through compressText, which stores the compact payload so the recovery id it hands back can be redeemed. A measurement, not a reading of this code -- the guard hashes the store's bytes around every tool call, and this is the tool it caught.
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false }
     },
     (args) => {
       const result = resolveHandoff(args.name, {