token-goat 2.9.15 → 2.9.17

package/dist/{token-goat-chunk-XEPXYDPI.mjs → token-goat-chunk-SWRKVA3J.mjs}

@@ -10,7 +10,7 @@ import {
   stripMultilineStringSpan,
   stripNestedBlockCommentSpan,
   stripStringLiterals
-} from "./token-goat-chunk-K7F2BFIK.mjs";
+} from "./token-goat-chunk-MWSVUKVV.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -1748,6 +1748,15 @@ function isReturnType(typeText) {
   const last = first.split(".").pop() ?? "";
   return /^[A-Z]/.test(last);
 }
+function withoutTypeParams(code) {
+  if (!code.startsWith("<")) return code;
+  let depth = 0;
+  for (let i = 0; i < code.length; i++) {
+    if (code[i] === "<") depth++;
+    else if (code[i] === ">" && --depth === 0) return code.slice(i + 1).trimStart();
+  }
+  return code;
+}
 function matchGroovy(code, ctx) {
   const s = stripLeadingWords(code, MODIFIERS, true);
   const at = code.length - s.length;
@@ -1763,7 +1772,7 @@ function matchGroovy(code, ctx) {
     if (ctx.scope === "container" && TYPE_KINDS2.has(ctx.parentKind) && s.startsWith(ctx.parent) && /^\s*\(/.test(s.slice(ctx.parent.length))) {
       return { name: ctx.parent, kind: "constructor", end: "brace" };
     }
-    const fn = cFunctionHeader(s);
+    const fn = cFunctionHeader(withoutTypeParams(s));
     if (fn !== null && fn.qualifier === "" && isReturnType(fn.typeText)) return { name: fn.name, kind: member, end: "brace" };
   }
   if (ctx.insideFunction) return null;

package/dist/{token-goat-chunk-NU7TLMQK.mjs → token-goat-chunk-THBLW56G.mjs}

@@ -3,7 +3,7 @@ const require = __cjsRequire(import.meta.url);
 import {
   queryCsv,
   quoteCsvCell
-} from "./token-goat-chunk-YKG35VHC.mjs";
+} from "./token-goat-chunk-KZPO4DWC.mjs";
 import {
   NotAnOfficeDocumentError,
   assertOoxmlWithinDeadline,
@@ -12,13 +12,13 @@ import {
   ooxmlWorkDeadline,
   parseOoxmlPart,
   readOoxmlZip
-} from "./token-goat-chunk-MZDIJJ3R.mjs";
-import {
-  DocumentRefusedError
-} from "./token-goat-chunk-Y4AFKTHK.mjs";
+} from "./token-goat-chunk-66224KCZ.mjs";
 import {
   displaySafeText
 } from "./token-goat-chunk-ERTXEKB6.mjs";
+import {
+  DocumentRefusedError
+} from "./token-goat-chunk-Y4AFKTHK.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -158,8 +158,9 @@ function buildCell(c, shared, styles, date1904) {
     raw = { error: e };
     text = e;
   } else {
-    const n = Number(textOf(c["v"]));
-    if (!Number.isFinite(n)) {
+    const vText = textOf(c["v"]);
+    const n = Number(vText);
+    if (vText.trim() === "" || !Number.isFinite(n)) {
       raw = null;
       text = "";
     } else if (isDateStyle) {
@@ -364,6 +365,8 @@ function cellText(cell) {
     if (Array.isArray(obj.richText)) return obj.richText.map((t) => t.text).join("");
     if (typeof obj.error === "string") return obj.error;
     if (obj.result !== void 0) {
+      if (obj.result === null) return "";
+      if (typeof obj.result === "boolean") return obj.result ? "TRUE" : "FALSE";
       if (obj.result instanceof Date) return formatDateCell(obj.result);
       if (typeof obj.result === "object" && obj.result !== null && typeof obj.result.error === "string") {
         return obj.result.error;

package/dist/{token-goat-chunk-PM76YS22.mjs → token-goat-chunk-UBZCON6N.mjs}

@@ -21,7 +21,7 @@ init_define_import_meta_env();
 import { createRequire } from "node:module";
 function resolveVersion() {
   if (true) {
-    return "2.9.15";
+    return "2.9.17";
   }
   const require2 = createRequire(import.meta.url);
   const pkg = require2("../package.json");

package/dist/{token-goat-chunk-ASYEPR3S.mjs → token-goat-chunk-W2GUUQAQ.mjs}

@@ -6,12 +6,13 @@ import {
   collectElements,
   collectParagraphTexts,
   decodeZipEntry,
+  inlineMathRuns,
   ooxmlPartBudget,
   ooxmlWorkDeadline,
   parseOoxmlPart,
   readOoxmlZip,
   sortNumberedParts
-} from "./token-goat-chunk-MZDIJJ3R.mjs";
+} from "./token-goat-chunk-66224KCZ.mjs";
 import {
   compileGuardedRegex
 } from "./token-goat-chunk-GMOUBOX4.mjs";
@@ -107,16 +108,19 @@ async function notesPathFor(entries, slidePath, budget) {
   }
   return null;
 }
+function inlineSlideMath(xml) {
+  return inlineMathRuns(xml, '<a:r><a:t xml:space="preserve">', "</a:t></a:r>").replace(/<a14:m(?:\s[^>]*)?>/g, "").replace(/<\/a14:m>/g, "");
+}
 async function parseSlide(entries, path, budget) {
   const xml = decodeZipEntry(entries, path, budget);
   if (xml === null) throw new Error(`missing part: ${path}`);
-  return parseOoxmlPart(xml);
+  return parseOoxmlPart(inlineSlideMath(xml));
 }
 async function notesTextFor(entries, notesPath, budget) {
   if (notesPath === null) return "";
   const xml = decodeZipEntry(entries, notesPath, budget);
   if (xml === null) return "";
-  const parsed = await parseOoxmlPart(xml);
+  const parsed = await parseOoxmlPart(inlineSlideMath(xml));
   const shapes = collectElements(parsed, "p:sp");
   const bodyShape = shapes.find((s) => shapePlaceholderType(s) === "body");
   return bodyShape !== void 0 ? shapeText(bodyShape) : flatSlideText(parsed);

package/dist/{token-goat-chunk-DQ4J5AFF.mjs → token-goat-chunk-YFGEUIEO.mjs}

@@ -25,7 +25,8 @@ import {
   runSkeleton,
   runSymbol,
   withPinnedReads
-} from "./token-goat-chunk-LCZBPOIN.mjs";
+} from "./token-goat-chunk-IDHWKNKZ.mjs";
+import "./token-goat-chunk-CICJFVIH.mjs";
 import "./token-goat-chunk-LMFO66YD.mjs";
 import {
   buildProjectMap,
@@ -35,33 +36,31 @@ import {
   getProjectIndexCounts,
   isWorkerRunning,
   mapLookupBytesSaved
-} from "./token-goat-chunk-BL5LNGBG.mjs";
-import "./token-goat-chunk-YQ7WI2CO.mjs";
-import "./token-goat-chunk-NEI4NC54.mjs";
-import "./token-goat-chunk-YKG35VHC.mjs";
+} from "./token-goat-chunk-PKNOHVWP.mjs";
+import "./token-goat-chunk-C26ZBGBC.mjs";
+import {
+  recordStat,
+  savedTokensFromBytes
+} from "./token-goat-chunk-26YUO7MP.mjs";
+import "./token-goat-chunk-LKSXAMJB.mjs";
+import "./token-goat-chunk-KZPO4DWC.mjs";
 import "./token-goat-chunk-3BTK54F3.mjs";
 import "./token-goat-chunk-XTQAOTSO.mjs";
 import "./token-goat-chunk-AH6QILZM.mjs";
-import "./token-goat-chunk-XEPXYDPI.mjs";
+import "./token-goat-chunk-SWRKVA3J.mjs";
 import {
   checkEmbeddingPreflight,
   embeddingsDepsAvailable
-} from "./token-goat-chunk-NDRP4KJQ.mjs";
-import "./token-goat-chunk-2X2EBBC6.mjs";
-import "./token-goat-chunk-Y4AFKTHK.mjs";
-import "./token-goat-chunk-SFAS46RE.mjs";
-import {
-  recordStat,
-  savedTokensFromBytes
-} from "./token-goat-chunk-IVUQLQWN.mjs";
+} from "./token-goat-chunk-73GXYYZR.mjs";
+import "./token-goat-chunk-BK3RPPTK.mjs";
 import {
   getDb
-} from "./token-goat-chunk-K7F2BFIK.mjs";
+} from "./token-goat-chunk-MWSVUKVV.mjs";
 import {
   envStrList,
   loadConfig,
   resolveProjectRoot
-} from "./token-goat-chunk-S4XRY446.mjs";
+} from "./token-goat-chunk-2VASS5VR.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
 import "./token-goat-chunk-OSUFN2FV.mjs";
 import {
@@ -71,12 +70,14 @@ import {
   extractErrorMessage,
   foldCaseForContainment,
   globalDbPath
-} from "./token-goat-chunk-PM76YS22.mjs";
+} from "./token-goat-chunk-UBZCON6N.mjs";
 import {
   displaySafeJson,
   normalizePath
 } from "./token-goat-chunk-ERTXEKB6.mjs";
+import "./token-goat-chunk-Y4AFKTHK.mjs";
 import "./token-goat-chunk-GMOUBOX4.mjs";
+import "./token-goat-chunk-RRNZMM3A.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -84,6 +85,7 @@ import {
 // src/mcp_server.ts
 init_define_import_meta_env();
 import * as fs from "fs";
+import * as os from "os";
 import * as path from "path";
 var TOKEN_GOAT_RETRY_RE = /token-goat (\w[\w-]*) "([^"]+)"/g;
 var MCP_MAX_LIMIT = 1e3;
@@ -166,10 +168,40 @@ function resolveToolRoot(projectRoot) {
 }
 var RootNotAllowedError = class extends Error {
 };
+function getStandardAuxiliaryRoots(targetPath) {
+  const home = os.homedir();
+  const roots = [
+    path.join(home, ".claude", "skills"),
+    path.join(home, ".copilot", "skills"),
+    path.join(home, ".claude", "projects"),
+    path.join(home, ".copilot", "session-state")
+  ];
+  const appData = process.env["APPDATA"] || path.join(home, "AppData", "Roaming");
+  roots.push(
+    path.join(appData, "Code", "User", "workspaceStorage"),
+    path.join(appData, "Code - Insiders", "User", "workspaceStorage"),
+    path.join(appData, "Cursor", "User", "workspaceStorage"),
+    path.join(home, "Library", "Application Support", "Code", "User", "workspaceStorage"),
+    path.join(home, "Library", "Application Support", "Code - Insiders", "User", "workspaceStorage"),
+    path.join(home, "Library", "Application Support", "Cursor", "User", "workspaceStorage"),
+    path.join(home, ".config", "Code", "User", "workspaceStorage"),
+    path.join(home, ".config", "Code - Insiders", "User", "workspaceStorage"),
+    path.join(home, ".config", "Cursor", "User", "workspaceStorage")
+  );
+  if (targetPath) {
+    const norm = normalizePath(targetPath);
+    const promptIdx = norm.toLowerCase().indexOf("/resources/app/extensions/");
+    if (promptIdx !== -1) {
+      roots.push(norm.slice(0, promptIdx + "/resources/app/extensions/".length));
+    }
+  }
+  return roots;
+}
 function assertRootAllowed(resolvedRoot) {
   const allowedRoots = loadConfig().mcp.allowed_roots;
   if (allowedRoots.length === 0) return;
   if (allowedRoots.some((allowed) => checkWithinProjectRoot(resolvedRoot, allowed).inside)) return;
+  if (getStandardAuxiliaryRoots(resolvedRoot).some((aux) => checkWithinProjectRoot(resolvedRoot, aux).inside)) return;
   throw new RootNotAllowedError(
     `refused: "${resolvedRoot}" is not inside any root listed in mcp.allowed_roots. A caller-supplied projectRoot is untrusted input, so this deployment pins which roots may be named; add the root to mcp.allowed_roots (or TOKEN_GOAT_MCP_ALLOWED_ROOTS) to permit it.`
   );
@@ -229,6 +261,7 @@ function refusalText(file, resolvedRoot, reason) {
 }
 function confineTargets(targets, resolvedRoot, splitCommas = true) {
   if (!loadConfig(resolvedRoot).mcp.confine_reads_to_project_root) return { ok: true, targets, pins: NO_PINS };
+  const allowedRoots = loadConfig().mcp.allowed_roots;
   const checked = [];
   const pins = /* @__PURE__ */ new Map();
   for (const raw of targets) {
@@ -236,7 +269,25 @@ function confineTargets(targets, resolvedRoot, splitCommas = true) {
     for (const part of parts) {
       const file = specFilePart(part);
       if (file === "") continue;
-      const check = checkWithinProjectRoot(file, resolvedRoot);
+      let check = checkWithinProjectRoot(file, resolvedRoot);
+      if (!check.inside) {
+        for (const allowed of allowedRoots) {
+          const altCheck = checkWithinProjectRoot(file, allowed);
+          if (altCheck.inside) {
+            check = altCheck;
+            break;
+          }
+        }
+      }
+      if (!check.inside) {
+        for (const aux of getStandardAuxiliaryRoots(file)) {
+          const auxCheck = checkWithinProjectRoot(file, aux);
+          if (auxCheck.inside) {
+            check = auxCheck;
+            break;
+          }
+        }
+      }
       if (!check.inside) {
         return { ok: false, refusal: toCallToolResult({ text: refusalText(file, resolvedRoot, check.reason), code: 1 }) };
       }

package/dist/token-goat-hook.mjs

@@ -2,23 +2,24 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-chunk-SZWYESBS.mjs";
-import "./token-goat-chunk-YZX7EFG4.mjs";
-import "./token-goat-chunk-OUGNPMDA.mjs";
-import "./token-goat-chunk-BL5LNGBG.mjs";
-import "./token-goat-chunk-YQ7WI2CO.mjs";
+} from "./token-goat-chunk-2M33Q3O4.mjs";
+import "./token-goat-chunk-GLOM5W5C.mjs";
+import "./token-goat-chunk-HRUGS6CO.mjs";
+import "./token-goat-chunk-PKNOHVWP.mjs";
+import "./token-goat-chunk-C26ZBGBC.mjs";
+import "./token-goat-chunk-26YUO7MP.mjs";
 import "./token-goat-chunk-3BTK54F3.mjs";
-import "./token-goat-chunk-NDRP4KJQ.mjs";
-import "./token-goat-chunk-2X2EBBC6.mjs";
-import "./token-goat-chunk-Y4AFKTHK.mjs";
-import "./token-goat-chunk-IVUQLQWN.mjs";
-import "./token-goat-chunk-K7F2BFIK.mjs";
-import "./token-goat-chunk-S4XRY446.mjs";
+import "./token-goat-chunk-73GXYYZR.mjs";
+import "./token-goat-chunk-BK3RPPTK.mjs";
+import "./token-goat-chunk-MWSVUKVV.mjs";
+import "./token-goat-chunk-2VASS5VR.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
 import "./token-goat-chunk-OSUFN2FV.mjs";
-import "./token-goat-chunk-PM76YS22.mjs";
+import "./token-goat-chunk-UBZCON6N.mjs";
 import "./token-goat-chunk-ERTXEKB6.mjs";
+import "./token-goat-chunk-Y4AFKTHK.mjs";
 import "./token-goat-chunk-GMOUBOX4.mjs";
+import "./token-goat-chunk-RRNZMM3A.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";

package/dist/token-goat.core.mjs

@@ -2,36 +2,37 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-GMQQA7E4.mjs";
-import "./token-goat-chunk-LCZBPOIN.mjs";
+} from "./token-goat-chunk-7VQMOBPQ.mjs";
+import "./token-goat-chunk-IDHWKNKZ.mjs";
+import "./token-goat-chunk-CICJFVIH.mjs";
 import "./token-goat-chunk-LMFO66YD.mjs";
-import "./token-goat-chunk-OUGNPMDA.mjs";
-import "./token-goat-chunk-BL5LNGBG.mjs";
-import "./token-goat-chunk-YQ7WI2CO.mjs";
-import "./token-goat-chunk-NEI4NC54.mjs";
-import "./token-goat-chunk-5V7DAC7V.mjs";
-import "./token-goat-chunk-ASYEPR3S.mjs";
-import "./token-goat-chunk-NU7TLMQK.mjs";
-import "./token-goat-chunk-YKG35VHC.mjs";
+import "./token-goat-chunk-HRUGS6CO.mjs";
+import "./token-goat-chunk-PKNOHVWP.mjs";
+import "./token-goat-chunk-C26ZBGBC.mjs";
+import "./token-goat-chunk-26YUO7MP.mjs";
+import "./token-goat-chunk-LKSXAMJB.mjs";
+import "./token-goat-chunk-CPHVXKNU.mjs";
+import "./token-goat-chunk-W2GUUQAQ.mjs";
+import "./token-goat-chunk-THBLW56G.mjs";
+import "./token-goat-chunk-KZPO4DWC.mjs";
 import "./token-goat-chunk-3BTK54F3.mjs";
-import "./token-goat-chunk-MZDIJJ3R.mjs";
+import "./token-goat-chunk-66224KCZ.mjs";
 import "./token-goat-chunk-XTQAOTSO.mjs";
 import "./token-goat-chunk-AH6QILZM.mjs";
-import "./token-goat-chunk-XEPXYDPI.mjs";
-import "./token-goat-chunk-NDRP4KJQ.mjs";
-import "./token-goat-chunk-2X2EBBC6.mjs";
-import "./token-goat-chunk-Y4AFKTHK.mjs";
-import "./token-goat-chunk-SFAS46RE.mjs";
-import "./token-goat-chunk-IVUQLQWN.mjs";
-import "./token-goat-chunk-K7F2BFIK.mjs";
-import "./token-goat-chunk-S4XRY446.mjs";
+import "./token-goat-chunk-SWRKVA3J.mjs";
+import "./token-goat-chunk-73GXYYZR.mjs";
+import "./token-goat-chunk-BK3RPPTK.mjs";
+import "./token-goat-chunk-MWSVUKVV.mjs";
+import "./token-goat-chunk-2VASS5VR.mjs";
 import "./token-goat-chunk-EEIDFMEM.mjs";
 import "./token-goat-chunk-OSUFN2FV.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-PM76YS22.mjs";
+} from "./token-goat-chunk-UBZCON6N.mjs";
 import "./token-goat-chunk-ERTXEKB6.mjs";
+import "./token-goat-chunk-Y4AFKTHK.mjs";
 import "./token-goat-chunk-GMOUBOX4.mjs";
+import "./token-goat-chunk-RRNZMM3A.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";

package/docs/cli.md

@@ -74,6 +74,7 @@ token-goat pdf-extract manual.pdf --pages 12-15 --layout --head 120
 | `token-goat imports "file"` | Show the import graph for a file one level deep. Accepts a comma-separated file list (`"a,b,c"`) to cover several files in one call, one clearly-headed block per file; extra space-separated file arguments are reported in a note naming that comma form instead of being silently dropped. `--grep <pattern>` only shows imports whose MODULE SPECIFIER matches this regex (literal substring if it is not valid regex), applied before `--json`'s truncation; when it matches nothing among real imports, the output names the active filter instead of reading like the file has no imports at all. |
 | `token-goat dep-docs <package>` | Extract one installed npm package's README, `package.json` metadata, and (if resolvable) a compact `.d.ts` signature outline, instead of grepping `node_modules`. |
 | `token-goat find "<query>"` | Find the FILES defining a symbol whose name matches a pattern: a case-insensitive substring scan over indexed symbol names, emitting the distinct file paths. When no name contains the pattern, falls back to an edit-distance match so a mistyped name still lands (`getUserr` → `getUser`) — the same ranking `Did you mean:` uses. The fallback runs only when the substring pass found nothing, so an exact match is never reordered or displaced, and a query near nothing still reports a clean miss instead of unrelated names. A recovered match names what it actually matched on stderr rather than silently answering for a name you didn't type; `--json` marks it with `fuzzy: true` and `matchedNames`, both absent on an exact hit. `--limit <n>` caps the file count. Matches on NAMES only — for meaning-based search over file content use `token-goat semantic`. |
+| `token-goat locate <spec>` | Locate a symbol or landmark with exact line spans across the project or in a specific file. Supports `name` or `file::name`, with fuzzy edit-distance fallback when no exact match is found. `--file <path>` restricts search to a specific file; `--limit <n>` caps results; `--json` emits the shared envelope with exact line spans. |
 | `token-goat similar "file::symbol"` | Find the top-k symbols most similar to a given symbol, via full-text search over symbol names and bodies. Also accepts `read`'s `symbol@LINE` anchor to pick out an otherwise-ambiguous candidate. |
 | `token-goat test-for "file"` | Find test file(s) for an implementation file and list their test functions. `--json`'s `testFile` renders root-relative when a project root resolves, absolute when none does, matching plain-text output. `--json` emits the shared `{items, truncated, totalCount}` envelope — the same shape `symbol`/`refs`/`skeleton`/`outline --json` return, present whether or not truncation occurred, so a script never has to branch on shape. |
 | `token-goat dead` | Surface functions, methods, and classes with no recorded callers in the project index. Private names and common entry points (`main`, `app`, etc.) are excluded by default. `--include-private` lifts the underscore filter; `--kind` narrows to specific symbol types, comma-separated for a union (`--kind function,method`) — an unrecognized kind errors instead of silently reading as a clean codebase; `--top N` caps output; `--json` for structured output. `--exclude-tests` hides dead symbols DEFINED in a test file (opt-in — omitted, output is unchanged); prints a note naming how many were hidden. `--grep <pattern>` only shows dead symbols whose NAME matches this regex (literal substring if it is not valid regex), applied before `--top`'s slice; when it matches nothing among dead symbols that do exist, the output names the active filter instead of reading like a genuinely clean codebase. Results are a heuristic lead — dynamic dispatch and external callers are invisible to static indexing. `--json` emits both `file` and `filePath` with the identical value, root-relative when a project root resolves, absolute when none does, matching plain-text output; `file` is retained for this release only and will be removed in a future release, `filePath` is the spelling to migrate to (matching `symbol`/`types --json`). `--json` emits the shared `{items, truncated, totalCount}` envelope — the same shape `symbol`/`refs`/`skeleton`/`outline --json` return, present whether or not truncation occurred, so a script never has to branch on shape. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "token-goat",
-  "version": "2.9.15",
+  "version": "2.9.17",
   "description": "Surgical token-reduction companion for Claude Code and other AI coding agents",
   "type": "module",
   "main": "./dist/token-goat.mjs",