token-goat 2.9.28 → 2.9.30

package/dist/{token-goat-chunk-I7CB3X4K.mjs → token-goat-chunk-APGZXSPS.mjs}

@@ -1,38 +1,38 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
-  DELIVERS_CONTENT_RE,
   commandPathIsTouchable,
+  docSectionHint,
+  grepLinesHint,
   leadWithCommand
-} from "./token-goat-chunk-IZXKVT4A.mjs";
+} from "./token-goat-chunk-ATCPY7EQ.mjs";
 import {
   getFileLineRanges
-} from "./token-goat-chunk-GGLEE35R.mjs";
+} from "./token-goat-chunk-C63JQV5K.mjs";
 import {
-  hasBareBackgroundOrNewline,
-  hasUnquotedOperator,
-  isRedirectAmpersand
-} from "./token-goat-chunk-4RN64ZND.mjs";
-import {
-  FALSY_ENV_VALUES,
   isUnderSystemTemp
-} from "./token-goat-chunk-CC2PYJM7.mjs";
+} from "./token-goat-chunk-7IN2MKDS.mjs";
+import {
+  FALSY_ENV_VALUES
+} from "./token-goat-chunk-IVE6U7KV.mjs";
 import {
-  escapeRegExp,
-  safeSlice
-} from "./token-goat-chunk-L45ZQRT7.mjs";
+  escapeRegExp
+} from "./token-goat-chunk-GOLEOXZP.mjs";
 import {
   TOOL_RESULTS_ID_CHARS,
+  hostPathOfIndexKey,
   normalizePath,
   resolveIndexPath
-} from "./token-goat-chunk-NMTKNYGF.mjs";
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  hasBareBackgroundOrNewline,
+  hasUnquotedOperator,
+  isRedirectAmpersand
+} from "./token-goat-chunk-KWPNJBDH.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
 
-// src/tool_error_class.ts
-init_define_import_meta_env();
-
 // src/bash_extractors.ts
 init_define_import_meta_env();
 import { statSync, openSync, readSync, closeSync } from "node:fs";
@@ -58,12 +58,15 @@ function surgicalHintFor(hintPath, isEnv, isConfig, isDoc, isXml, target, reason
   const outline = outlineCommand(hintPath);
   if (isXml) return leadWithCommand('token-goat xml-outline "' + hintPath + '"', 'to inspect structure, or `token-goat xml-query "' + hintPath + '" "<selector>"` to query specific nodes', reason);
   if (isEnv) return leadWithCommand('token-goat config-get "' + hintPath + '" ' + target.name, "to read a specific variable", reason);
+  if (isConfig && /\.properties$/i.test(hintPath)) {
+    return target.real ? leadWithCommand('token-goat config-get "' + hintPath + '" ' + target.name, "to read a specific value", reason) : grepLinesHint("<key>", hintPath, reason);
+  }
   if (isConfig) {
     const structured = structuredDataHint(hintPath, target.real ? target.name : null, reason);
     if (structured !== null) return structured;
     return target.slice === "key" ? leadWithCommand('token-goat config-get "' + hintPath + '" ' + target.name, "to read a specific value, or `" + outline + "` for every key with line ranges", reason) : leadWithCommand('token-goat section "' + hintPath + "::" + target.name + '"', "to read one table, or `" + outline + "` for every key with line ranges", reason);
   }
-  if (isDoc) return leadWithCommand('token-goat section "' + hintPath + "::" + target.name + '"', "to read one section, or `" + outline + "` for every heading with line ranges", reason);
+  if (isDoc) return docSectionHint(hintPath, target.name, reason);
   return target.real ? leadWithCommand('token-goat read "' + hintPath + "::" + target.name + '"', "to read one function or class, or `" + outline + "` for all of them", reason) : leadWithCommand(outline, "to list every function and class with its line range", reason);
 }
 function surgicalHintForConfigDoc(filePath, isConfig, isDoc, isSql, isXml, target, reason = "") {
@@ -146,7 +149,7 @@ function classifyCatPath(filePath, cmd0) {
   return { filePath, ...flags, cmd0 };
 }
 function extractCatFile(cmd) {
-  if (/-(?:TotalCount|Head|First|Tail)\b/i.test(cmd)) return null;
+  if (/(?:^|\s)-(?:TotalCount|Head|First|Tail)\b/i.test(cmd)) return null;
   const m = /^(cat|bat|type|Get-Content|gc)(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+-[a-zA-Z].*?)?(?:\s+2>(&1|\/dev\/null))?\s*$/i.exec(cmd);
   if (!m) return null;
   const cmd0 = m[1];
@@ -188,7 +191,7 @@ function extractPowerShellWrappedGetContent(cmd, event) {
   if (!w) return null;
   const inner = (w[1] ?? w[2] ?? "").trim();
   if (!inner) return null;
-  if (/-(?:TotalCount|Head|First|Tail)\b/i.test(inner)) return null;
+  if (/(?:^|\s)-(?:TotalCount|Head|First|Tail)\b/i.test(inner)) return null;
   const m = PS_GETCONTENT_INNER_RE.exec(inner);
   if (!m) return null;
   const filePath = m[1] ?? m[2] ?? m[3];
@@ -223,9 +226,12 @@ function extractPowerShellFileMethodRead(cmd, event) {
   }
   return { filePath, isDoc: flags.isDoc, isEnv: flags.isEnv, isConfig: flags.isConfig, isSql: flags.isSql, isXml: flags.isXml };
 }
+function hasLineNumberFlag(cmd) {
+  return /(?:^|\s)-[a-mo-zA-Z]*n[a-zA-Z]*(?=\s|$)/.test(cmd) || /(?:^|\s)--line-number(?=\s|$)/.test(cmd);
+}
 function extractRgSymbolSearch(cmd) {
   if (!/^(?:rg|grep)\s+/.test(cmd)) return null;
-  if (!/-n\b/.test(cmd)) return null;
+  if (!hasLineNumberFlag(cmd)) return null;
   const patternMatch = /["']([^"']+)["']/.exec(cmd);
   const pattern = patternMatch?.[1];
   if (!pattern) return null;
@@ -671,9 +677,6 @@ function extractNodeFileRead(cmd) {
   return null;
 }
 function extractTailFile(cmd) {
-  if (/-f\b/.test(cmd)) return null;
-  if (/-c\b/.test(cmd)) return null;
-  if (/-n\s*\+/.test(cmd)) return null;
   const direct = /^tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
   const piped = direct === null ? /^cat(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+?))(?:\s+2>(?:&1|\/dev\/null))?\s*\|\s*tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s*$/.exec(cmd) : null;
   if (direct === null && piped === null) return null;
@@ -694,7 +697,7 @@ function extractGetContentTail(cmd) {
   const getnMatch = /^(Get-Content|gc)\s+/i.exec(cmd);
   if (!getnMatch) return null;
   const afterCmd = cmd.slice(getnMatch[0].length).replace(/-Path\s+/i, "");
-  const beforeTail = afterCmd.split(/-Tail/i)[0]?.trim() ?? "";
+  const beforeTail = afterCmd.split(/(?:^|\s)-Tail\b/i)[0]?.trim() ?? "";
   const afterTail = afterCmd.split(/-Tail\s+\d+/i)[1]?.trim() ?? "";
   const filePath = (beforeTail || afterTail).replace(/^["']|["']$/g, "");
   if (!filePath) return null;
@@ -716,17 +719,16 @@ function extractGetContentSelectFirst(cmd) {
   return { filePath, isDoc, isConfig, isSql, isXml, n };
 }
 function extractGetContentHead(cmd) {
-  const headMatch = /-(?:TotalCount|Head|First)\s+(\d+)/i.exec(cmd);
+  const headMatch = /(?:^|\s)-(?:TotalCount|Head|First)\s+(\d+)/i.exec(cmd);
   if (!headMatch) return null;
   const n = parseInt(headMatch[1], 10);
   if (n <= 10) return null;
   const getnMatch = /^(Get-Content|gc)\s+/i.exec(cmd);
   if (!getnMatch) return null;
-  const afterCmd = cmd.slice(getnMatch[0].length).replace(/-Path\s+/i, "");
-  const beforeHead = afterCmd.split(/-(?:TotalCount|Head|First)/i)[0]?.trim() ?? "";
-  const afterHead = afterCmd.split(/-(?:TotalCount|Head|First)\s+\d+/i)[1]?.trim() ?? "";
-  const cleanedBefore = beforeHead.replace(/-(?:Encoding|Delimiter|Wait)\s+\S+/gi, "").replace(/-[a-zA-Z]+/g, "").trim();
-  const cleanedAfter = afterHead.replace(/-(?:Encoding|Delimiter|Wait)\s+\S+/gi, "").replace(/-[a-zA-Z]+/g, "").trim();
+  const afterCmd = cmd.slice(getnMatch[0].length).replace(/(?:^|\s)-Path\s+/i, " ");
+  const [beforeHead = "", afterHead = ""] = afterCmd.split(/(?:^|\s)-(?:TotalCount|Head|First)\s+\d+/i, 2);
+  const cleanedBefore = beforeHead.replace(/(?:^|\s)-(?:Encoding|Delimiter|Wait)\s+\S+/gi, " ").replace(/(?:^|\s)-[a-zA-Z]+(?=\s|$)/g, " ").trim();
+  const cleanedAfter = afterHead.replace(/(?:^|\s)-(?:Encoding|Delimiter|Wait)\s+\S+/gi, " ").replace(/(?:^|\s)-[a-zA-Z]+(?=\s|$)/g, " ").trim();
   const filePath = (cleanedBefore || cleanedAfter).replace(/^["']|["']$/g, "");
   if (!filePath) return null;
   if (isTempPath(filePath)) return null;
@@ -738,7 +740,7 @@ var JSONL_TRANSCRIPT_HEAD_RE = /^\{\s*"(?:(?:parentUuid|isSidechain)"\s*:|type"\
 function taskOutputIsJsonlTranscript(outPath) {
   let fd = null;
   try {
-    fd = openSync(normalizePath(outPath), "r");
+    fd = openSync(hostPathOfIndexKey(normalizePath(outPath)), "r");
     const buf = Buffer.alloc(64);
     const read = readSync(fd, buf, 0, buf.length, 0);
     return JSONL_TRANSCRIPT_HEAD_RE.test(buf.subarray(0, read).toString("utf-8").trim());
@@ -754,7 +756,7 @@ function taskOutputIsJsonlTranscript(outPath) {
   }
 }
 function extractTasksOutput(cmd) {
-  const taskOutputRe = /[/\\]tasks[/\\]([a-z0-9]+)\.output$/;
+  const taskOutputRe = /(?:^|[/\\])tasks[/\\]([a-z0-9]+)\.output$/;
   const catM = /^cat(?:\s+(?:-[a-zA-Z]+|--[a-zA-Z-]+))*\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
   if (catM) {
     const fp = catM[1] ?? catM[2] ?? catM[3];
@@ -763,7 +765,7 @@ function extractTasksOutput(cmd) {
       if (m) return { id: m[1], path: fp };
     }
   }
-  if (!/-f\b/.test(cmd) && !/-n\s*\+/.test(cmd)) {
+  {
     const tailM = /^tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
     if (tailM) {
       const fp = tailM[3] ?? tailM[4] ?? tailM[5];
@@ -797,7 +799,7 @@ function extractToolResultsFile(cmd) {
       if (m) return { path: fp };
     }
   }
-  if (!/-f\b/.test(cmd) && !/-n\s*\+/.test(cmd)) {
+  {
     const tailM = /^tail(?:\s+-n\s+(\d+)|\s+-(\d+))?\s+(?:"([^"]+)"|'([^']+)'|(\S+))\s*$/.exec(cmd);
     if (tailM) {
       const fp = tailM[3] ?? tailM[4] ?? tailM[5];
@@ -832,7 +834,7 @@ function extractFindCommand(cmd) {
 }
 function extractMarkdownHeadingGrep(cmd) {
   if (!/^(?:rg|grep)\s+/.test(cmd)) return null;
-  if (!/-n\b/.test(cmd)) return null;
+  if (!hasLineNumberFlag(cmd)) return null;
   const hasHeadingPattern = /["']?\^#{1,6}["']?/.test(cmd) || /["']?\^#\+["']?/.test(cmd) || /["']?\^#\\+["']?/.test(cmd);
   if (!hasHeadingPattern) return null;
   const fileMatch = /(?:^|\s)(?:"([^"]+\.(?:md|markdown))"|'([^']+\.(?:md|markdown))'|([^\s"'|<>]+\.(?:md|markdown)))\s*(?:\||$)/.exec(cmd);
@@ -968,6 +970,9 @@ function commandOptsOutOfCompression(cmd) {
   }
   return false;
 }
+function compressionOptedOut(rawCmd) {
+  return process.env["TOKEN_GOAT_BASH_COMPRESS"] === "0" || commandOptsOutOfCompression(rawCmd);
+}
 var CURL_VALUE_FLAGS = /* @__PURE__ */ new Set([
   "-H",
   "--header",
@@ -1215,118 +1220,13 @@ function extractTerminalXmlParsing(cmd) {
   return null;
 }
 
-// src/tool_error_class.ts
-var UNKNOWN_REASON = "unclassified";
-var DENIAL_KIND_REASONS = {
-  "permission-rule": "hook_deny",
-  // 73 in the census: the user declined an approval prompt.
-  "user-rejected": "user_rejected",
-  // 1 in the census; kept because it is an enumerated harness value, not a text guess.
-  "automode-blocked": "auto_mode_blocked"
-};
-var TG_DENY_RE = /\[tg\]|token-goat/;
-var CONTENT_DELIVERED_REASON = "tg_content_delivered";
-function tgDenyReason(text) {
-  return DELIVERS_CONTENT_RE.test(text) ? CONTENT_DELIVERED_REASON : "tg_deny";
-}
-var HOOK_DENY_TEXT_RE = /^PreToolUse:\S+ hook error: /;
-var TEST_OR_BUILD_COMMAND_RE = /^(?:npm\s+(?:test|run\s+(?:test|build|lint|typecheck))|npx\s+(?:vitest|tsc|eslint|jest|playwright)|vitest|jest|pytest|tsc|eslint|cargo\s+(?:test|build|check|clippy)|go\s+(?:test|build|vet)|make|gradle|mvn|dotnet\s+(?:test|build)|ruff|mypy|python3?\s+-m\s+(?:pytest|unittest))\b/;
-var SEARCH_COMMAND_RE = /^(?:grep|egrep|fgrep|rg|findstr)\b/;
-function runsCommand(command, head) {
-  return splitShellSegments(command).some((segment) => head.test(stripLeadingAssignments(segment)));
-}
-var EXPECTED_PATTERNS = [
-  // 176: the Bash tool's own timeout, reported as SIGTERM's 143 plus this line.
-  { reason: "command_timeout", tools: ["Bash"], re: /^Exit code \d+\s+Command timed out after / },
-  // 289: exit 1 with no output from a search command, which is how grep and rg report zero hits.
-  { reason: "search_no_match", tools: ["Bash"], re: /^Exit code 1\s*$/, command: SEARCH_COMMAND_RE },
-  // 252: a test, build, lint or typecheck run reporting failures, which is the tool doing its job.
-  { reason: "test_or_build_failed", tools: ["Bash"], re: /^Exit code \d+/, command: TEST_OR_BUILD_COMMAND_RE },
-  // 302: an unbalanced quote or bracket in the command itself.
-  { reason: "shell_syntax_error", tools: ["Bash"], re: /unexpected EOF while looking for matching|syntax error near unexpected token/ },
-  // 29: a binary missing from PATH.
-  { reason: "command_not_found", tools: ["Bash"], re: /command not found/ },
-  // 272: the harness refusing a bare or leading `sleep` and pointing at Monitor instead.
-  { reason: "sleep_blocked", tools: ["Bash"], re: /^Blocked: (?:sleep \d+ followed by|standalone sleep)/ },
-  // 114: old_string absent from the file.
-  { reason: "edit_string_not_found", tools: ["Edit", "MultiEdit"], re: /^String to replace not found in file/ },
-  // 37: old_string present more than once with replace_all false.
-  { reason: "edit_multiple_matches", tools: ["Edit", "MultiEdit"], re: /^Found \d+ matches of the string to replace/ },
-  // 37: the harness's read-before-write guard.
-  { reason: "file_not_read_yet", tools: ["Edit", "MultiEdit", "Write"], re: /^File has not been read yet/ },
-  // 16: the file changed on disk after the last read.
-  { reason: "file_modified_since_read", tools: ["Edit", "MultiEdit", "Write"], re: /^File has been modified since read/ },
-  // 643 (578 Bash, 53 Read, 11 Grep, 1 Edit): a path that does not exist, in each tool's own wording.
-  { reason: "path_not_found", re: /No such file or directory|^File does not exist\.|^Path does not exist:/ },
-  // 1,171: an interpreter raising: a Python traceback header, the `Node.js vN.N.N` line Node prints under every uncaught error, or a named error line (`SyntaxError: ...`). After path_not_found, so a missing file stays a missing file whichever language reported it.
-  { reason: "script_exception", tools: ["Bash"], re: /^(?:Traceback \(most recent call last\):|Node\.js v\d+\.\d+\.\d+\b|[A-Z]\w*(?:Error|Exception)(?: \[\w+\])?: )/m },
-  // 14: a Read over the harness's size ceiling.
-  { reason: "file_too_large", tools: ["Read"], re: /^File content \([^)]*\) exceeds maximum allowed/ },
-  // 85: arguments the tool's schema rejected before it ran.
-  { reason: "input_validation", re: /^InputValidationError/ },
-  // 68: a StructuredOutput call that did not match the requested schema.
-  { reason: "schema_mismatch", tools: ["StructuredOutput"], re: /^Output does not match required schema/ },
-  // 35: the harness's concurrent-subagent ceiling.
-  { reason: "subagent_limit", tools: ["Agent", "Task"], re: /^Concurrent subagent limit reached/ },
-  // 37: a tool disabled for this session or a misspelled tool name.
-  { reason: "tool_unavailable", re: /^Error: No such tool available/ }
-];
-var EXPECTED_REASONS = [
-  "interrupted",
-  "tg_deny",
-  CONTENT_DELIVERED_REASON,
-  ...new Set(Object.values(DENIAL_KIND_REASONS)),
-  ...EXPECTED_PATTERNS.map((p) => p.reason)
-];
-var TOOL_USE_ERROR_OPEN = "<tool_use_error>";
-var TOOL_USE_ERROR_CLOSE = "</tool_use_error>";
-function unwrapToolError(errorText) {
-  let text = errorText.trim();
-  if (text.startsWith(TOOL_USE_ERROR_OPEN)) text = text.slice(TOOL_USE_ERROR_OPEN.length);
-  if (text.endsWith(TOOL_USE_ERROR_CLOSE)) text = text.slice(0, text.length - TOOL_USE_ERROR_CLOSE.length);
-  return text.trim();
-}
-function expected(reason) {
-  return { kind: "expected", reason };
-}
-function classifyToolError(tool, errorText, flags = {}) {
-  if (flags.isInterrupt === true) return expected("interrupted");
-  const text = unwrapToolError(errorText);
-  const denial = flags.denialKind;
-  if (denial !== void 0 && denial !== "") {
-    const reason = DENIAL_KIND_REASONS[denial] ?? "hook_deny";
-    return expected(reason === "hook_deny" && TG_DENY_RE.test(text) ? tgDenyReason(text) : reason);
-  }
-  if (HOOK_DENY_TEXT_RE.test(text)) return expected(TG_DENY_RE.test(text) ? tgDenyReason(text) : "hook_deny");
-  for (const p of EXPECTED_PATTERNS) {
-    if (p.tools !== void 0 && (tool === void 0 || !p.tools.includes(tool))) continue;
-    if (!p.re.test(text)) continue;
-    if (p.command !== void 0 && (flags.command === void 0 || !runsCommand(flags.command, p.command))) continue;
-    return expected(p.reason);
-  }
-  return { kind: "unknown", reason: UNKNOWN_REASON };
-}
-var ERROR_PREFIX_CHARS = 60;
-var EXIT_CODE_HEADER_RE = /^Exit code (\d+)\s*/;
-function errorPrefix(errorText) {
-  let text = unwrapToolError(errorText);
-  let lead = "";
-  const exit = EXIT_CODE_HEADER_RE.exec(text);
-  if (exit !== null) {
-    lead = `exit ${exit[1] ?? ""}: `;
-    text = text.slice(exit[0].length);
-  }
-  const line = text.split("\n").find((l) => l.trim() !== "") ?? "";
-  const masked = line.trim().replace(/\b[A-Za-z]:[\\/]\S*|~?\/[\w.~-]+(?:\/[\w.~-]*)+/g, "<path>").replace(/'[^'\n]*'|"[^"\n]*"|`[^`\n]*`/g, "<q>").replace(/\d+/g, "N");
-  return safeSlice(`${lead}${masked === "" ? "(empty)" : masked}`, ERROR_PREFIX_CHARS);
-}
-
 export {
   sqlTableHint,
   surgicalHintFor,
   surgicalHintForConfigDoc,
   splitShellSegments,
   extractCatSourceFile,
+  classifyCatPath,
   extractCatFile,
   extractCatFilesMulti,
   extractPowerShellWrappedGetContent,
@@ -1358,7 +1258,7 @@ export {
   extractRgStructuralSearch,
   extractGrepPipeChain,
   stripLeadingAssignments,
-  commandOptsOutOfCompression,
+  compressionOptedOut,
   extractCurlUrl,
   extractTgSurgicalRead,
   isCurlGetCommand,
@@ -1371,9 +1271,5 @@ export {
   buildRecallHint,
   shellQuoteSingle,
   isCompressibleSingleCommand,
-  extractTerminalXmlParsing,
-  CONTENT_DELIVERED_REASON,
-  SEARCH_COMMAND_RE,
-  classifyToolError,
-  errorPrefix
+  extractTerminalXmlParsing
 };

package/dist/{token-goat-chunk-BJBRGPBX.mjs → token-goat-chunk-ARDNEC2U.mjs}

@@ -1,18 +1,22 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
-  recordStat,
-  redactSecrets
-} from "./token-goat-chunk-MVSWBNMD.mjs";
+  recordStat
+} from "./token-goat-chunk-3Z5S4KGM.mjs";
+import {
+  redactSerializedJson
+} from "./token-goat-chunk-4FVIAHSI.mjs";
 import {
   loadConfig
-} from "./token-goat-chunk-CC2PYJM7.mjs";
+} from "./token-goat-chunk-7IN2MKDS.mjs";
 import {
   atomicWriteText,
   ensureDirSync,
-  sanitizeIdForFilename,
+  sanitizeIdForFilename
+} from "./token-goat-chunk-GOLEOXZP.mjs";
+import {
   tokenGoatHome
-} from "./token-goat-chunk-L45ZQRT7.mjs";
+} from "./token-goat-chunk-VES7EL7O.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -79,7 +83,7 @@ function storeBlob(subdir, id, value, opts = {}) {
   }
   let json;
   try {
-    const result = redactSecrets(rawJson);
+    const result = redactSerializedJson(rawJson);
     json = result.text;
     if (result.count > 0) recordStat("secret_redacted", 0, result.count, void 0, subdir);
   } catch {

package/dist/token-goat-chunk-ATCPY7EQ.mjs

@@ -0,0 +1,134 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  VSCODE_TOOL_NAME_KEY,
+  getCwd
+} from "./token-goat-chunk-VPBBTSJR.mjs";
+import {
+  escapesOntoNetworkThroughLinks,
+  foldPathForContainment,
+  isInsideRoot
+} from "./token-goat-chunk-AM5V6GSX.mjs";
+import {
+  isUncOrDevicePath,
+  resolveIndexPath,
+  wslMountOfIndexKey
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/hint_suggestion_guard.ts
+init_define_import_meta_env();
+function looksLikeSuggestion(slice) {
+  return slice.includes('"');
+}
+var SAFE_OUTSIDE_QUOTES = /^[A-Za-z0-9 \t_./=:,@+-]*$/;
+var CONTROL_OR_BIDI = /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F\u200E\u200F\u202A-\u202E\u2066-\u2069\u061C\u200B-\u200D\u2028\u2029\uFE00-\uFE0F]|[\u{E0000}-\u{E007F}]/u;
+function suggestionIsUnsafe(slice) {
+  if (slice.includes("$") || slice.includes("\n") || slice.includes("\r") || slice.includes("`")) return true;
+  if (CONTROL_OR_BIDI.test(slice)) return true;
+  const regions = slice.split('"');
+  if (regions.length % 2 === 0) return true;
+  for (let i = 2; i < regions.length; i += 2) {
+    if (!SAFE_OUTSIDE_QUOTES.test(regions[i] ?? "")) return true;
+  }
+  return false;
+}
+var OMITTED = "token-goat (command omitted: the path contains shell metacharacters)";
+function stripUnsafeSuggestions(text) {
+  if (!text.includes("token-goat ")) return text;
+  let out = "";
+  let at = 0;
+  for (; ; ) {
+    const start = text.indexOf("token-goat ", at);
+    if (start === -1) return out + text.slice(at);
+    const lineBreak = text.slice(start).search(/[\r\n]/);
+    const line = lineBreak === -1 ? text.slice(start) : text.slice(start, start + lineBreak);
+    const firstTick = line.indexOf("`");
+    const narrow = firstTick === -1 ? line : line.slice(0, firstTick);
+    out += text.slice(at, start);
+    if (!looksLikeSuggestion(narrow) || !suggestionIsUnsafe(narrow)) {
+      out += narrow;
+      at = start + narrow.length;
+      continue;
+    }
+    const lastTick = line.lastIndexOf("`");
+    const wide = lastTick === -1 ? line : line.slice(0, lastTick);
+    out += OMITTED;
+    at = start + wide.length;
+  }
+}
+function leadWithCommand(command, purpose = "", reason = "") {
+  const tail = reason.trim();
+  return "Run `" + command + "`" + (purpose === "" ? "" : " " + purpose) + "." + (tail === "" ? "" : (tail.includes("`") ? "\n" : " ") + tail);
+}
+function docNavigation(filePath) {
+  const ext = /\.(txt|rst)$/i.exec(filePath)?.[1]?.toLowerCase();
+  return { section: ext !== "txt", outline: ext === void 0 };
+}
+function grepLinesHint(pattern, shownPath, reason = "") {
+  return leadWithCommand('token-goat grep "' + pattern + '" "' + shownPath + '" -C 3', "to read the matching lines", reason);
+}
+function docSectionHint(shownPath, heading, reason = "") {
+  const nav = docNavigation(shownPath);
+  if (!nav.section) return grepLinesHint("<pattern>", shownPath, reason);
+  return leadWithCommand('token-goat section "' + shownPath + "::" + heading + '"', "to read one section" + (nav.outline ? ', or `token-goat outline "' + shownPath + '"` for every heading with line ranges' : ""), reason);
+}
+
+// src/vscode_path_gate.ts
+init_define_import_meta_env();
+import * as path from "node:path";
+function resolvesToUncPath(target, cwd) {
+  try {
+    return isUncOrDevicePath(path.resolve(cwd ?? process.cwd(), target));
+  } catch {
+    return false;
+  }
+}
+function vscodePathAllowed(filePath, workspace) {
+  if (isUncOrDevicePath(filePath)) return false;
+  if (workspace === void 0 || isUncOrDevicePath(workspace)) return false;
+  const resolvedRoot = path.resolve(workspace);
+  const resolvedTarget = path.resolve(workspace, filePath);
+  const root = foldPathForContainment(resolvedRoot.replace(/\\/g, "/"));
+  const target = foldPathForContainment(resolvedTarget.replace(/\\/g, "/"));
+  if (target !== root && !target.startsWith(root.endsWith("/") ? root : root + "/")) return false;
+  return isInsideRoot(resolvedTarget, resolvedRoot);
+}
+function isVscodeEvent(event) {
+  return event.raw["_tg_harness"] === "vscode" || event.raw[VSCODE_TOOL_NAME_KEY] !== void 0;
+}
+function preToolPathDeclined(event, target) {
+  if (target === void 0) return false;
+  const cwd = getCwd(event);
+  if (spellingDeclined(event, target, cwd)) return true;
+  const mount = secondSpellingAtMount(target, cwd);
+  return mount !== null && spellingDeclined(event, mount, cwd);
+}
+function spellingDeclined(event, target, cwd) {
+  if (isUncOrDevicePath(target) || resolvesToUncPath(target, cwd)) return true;
+  if (isVscodeEvent(event)) return !vscodePathAllowed(target, cwd);
+  return escapesOntoNetworkThroughLinks(target, cwd);
+}
+function secondSpellingAtMount(target, cwd) {
+  if (process.platform === "win32") return null;
+  const base = cwd ?? "/";
+  const mount = wslMountOfIndexKey(resolveIndexPath(target, base));
+  return mount !== null && mount !== path.resolve(base, target) ? mount : null;
+}
+function commandPathIsTouchable(filePath, event) {
+  if (event === void 0) return !escapesOntoNetworkThroughLinks(filePath);
+  return !preToolPathDeclined(event, filePath);
+}
+
+export {
+  stripUnsafeSuggestions,
+  leadWithCommand,
+  docNavigation,
+  grepLinesHint,
+  docSectionHint,
+  vscodePathAllowed,
+  preToolPathDeclined,
+  commandPathIsTouchable
+};