token-goat 2.9.28 → 2.9.30

package/dist/token-goat-chunk-YARZFCZS.mjs

@@ -0,0 +1,359 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  getDb
+} from "./token-goat-chunk-VL3YIFHZ.mjs";
+import {
+  findProject,
+  shortFingerprint
+} from "./token-goat-chunk-7IN2MKDS.mjs";
+import {
+  ensureDirSync
+} from "./token-goat-chunk-GOLEOXZP.mjs";
+import {
+  normalizePath
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  dataDir,
+  globalDbPath
+} from "./token-goat-chunk-VES7EL7O.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/known_roots.ts
+init_define_import_meta_env();
+import * as fs from "node:fs";
+import * as path from "node:path";
+function isTooShallowToPrune(rootPrefix) {
+  const normalized = normalizePath(rootPrefix);
+  const segments = normalized.split("/").filter((s) => s.length > 0 && !/^[a-z]:$/i.test(s));
+  if (segments.length === 2 && segments[0]?.toLowerCase() === "mnt" && /^[a-z]$/i.test(segments[1] ?? "")) return true;
+  if (normalized.startsWith("//") && segments.length <= 2) return true;
+  return segments.length === 0;
+}
+function recordKnownRoot(filePath, dbPath = globalDbPath()) {
+  const project = findProject(path.dirname(filePath));
+  if (project === null || isTooShallowToPrune(project.root)) return;
+  const db = getDb(dbPath);
+  db.prepare(
+    `INSERT INTO known_roots (root, last_seen_ms, first_missing_ms) VALUES (?, ?, NULL)
+     ON CONFLICT(root) DO UPDATE SET last_seen_ms = excluded.last_seen_ms, first_missing_ms = NULL`
+  ).run(project.root, Date.now());
+}
+var KNOWN_ROOT_RECORD_MIN_INTERVAL_MS = 60 * 60 * 1e3;
+function knownRootRecordMarkerPath(dir, filePath) {
+  return path.join(dir, `known-root-record-${shortFingerprint(path.dirname(filePath))}.marker`);
+}
+var KNOWN_ROOT_MARKER_PREFIX = "known-root-record-";
+function sweepExpiredKnownRootMarkers(dir = dataDir()) {
+  let removed = 0;
+  try {
+    const cutoff = Date.now() - KNOWN_ROOT_RECORD_MIN_INTERVAL_MS;
+    for (const file of fs.readdirSync(dir)) {
+      if (!file.startsWith(KNOWN_ROOT_MARKER_PREFIX) || !file.endsWith(".marker")) continue;
+      const full = path.join(dir, file);
+      try {
+        if (fs.statSync(full).mtimeMs < cutoff) {
+          fs.unlinkSync(full);
+          removed += 1;
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return removed;
+}
+function recordKnownRootThrottled(filePath, dir = dataDir(), dbPath = globalDbPath()) {
+  const markerPath = knownRootRecordMarkerPath(dir, filePath);
+  try {
+    const stat = fs.statSync(markerPath);
+    if (Date.now() - stat.mtimeMs < KNOWN_ROOT_RECORD_MIN_INTERVAL_MS) return;
+  } catch {
+  }
+  try {
+    ensureDirSync(dir);
+    fs.writeFileSync(markerPath, "");
+  } catch {
+  }
+  try {
+    recordKnownRoot(filePath, dbPath);
+  } catch {
+  }
+}
+
+// src/line_regions.ts
+init_define_import_meta_env();
+function resolveLineRegions(symbols, totalLines, start, end) {
+  if (symbols.length === 0) return [];
+  const firstStart = symbols.reduce((m, s) => Math.min(m, s.lineStart), Number.POSITIVE_INFINITY);
+  const regionFor = (line) => {
+    let best = null;
+    for (const s of symbols) {
+      if (s.lineStart > line || s.lineEnd < line) continue;
+      if (best === null || s.lineEnd - s.lineStart < best.lineEnd - best.lineStart) best = s;
+    }
+    if (best !== null) {
+      return { kind: "symbol", label: `${best.kind} ${best.name}`, start: best.lineStart, end: best.lineEnd };
+    }
+    if (line < firstStart) return { kind: "preamble", label: "file preamble", start: 1, end: firstStart - 1 };
+    let prev = null;
+    let next = null;
+    for (const s of symbols) {
+      if (s.lineEnd < line && (prev === null || s.lineEnd > prev.lineEnd)) prev = s;
+      if (s.lineStart > line && (next === null || s.lineStart < next.lineStart)) next = s;
+    }
+    const prevName = prev === null ? "start of file" : prev.name;
+    return {
+      kind: "gap",
+      label: next === null ? `gap after ${prevName}` : `gap between ${prevName} and ${next.name}`,
+      start: prev === null ? 1 : prev.lineEnd + 1,
+      end: next === null ? totalLines : next.lineStart - 1
+    };
+  };
+  const bySpan = /* @__PURE__ */ new Map();
+  for (let line = start; line <= Math.min(end, totalLines); line++) {
+    const r = regionFor(line);
+    const key = `${r.start}-${r.end}`;
+    const seen = bySpan.get(key);
+    if (seen === void 0) bySpan.set(key, r);
+    else if (!seen.label.split(" / ").includes(r.label)) seen.label = `${seen.label} / ${r.label}`;
+  }
+  const picked = [...bySpan.values()];
+  return picked.filter((r) => !picked.some((o) => o !== r && o.start <= r.start && o.end >= r.end)).sort((a, b) => a.start - b.start || a.end - b.end);
+}
+
+// src/url_policy.ts
+init_define_import_meta_env();
+import { domainToUnicode } from "node:url";
+function wildcardToRegExp(pattern) {
+  const escaped = pattern.replace(/[.+^${}()|[\]\\?]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`, "i");
+}
+function authorityPatternOf(pattern) {
+  const afterScheme = pattern.replace(/^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//, "");
+  const end = afterScheme.search(/[/?#]/);
+  return end === -1 ? afterScheme : afterScheme.slice(0, end);
+}
+function isHostLevelPattern(pattern) {
+  const afterScheme = pattern.replace(/^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//, "");
+  const end = afterScheme.search(/[/?#]/);
+  if (end === -1) return true;
+  const rest = afterScheme.slice(end);
+  return rest === "/" || rest === "/*";
+}
+function urlSpellings(url) {
+  const out = [url];
+  try {
+    const parsed = new URL(url);
+    if (parsed.hostname.endsWith(".")) parsed.hostname = parsed.hostname.replace(/\.+$/, "");
+    if (!out.includes(parsed.href)) out.push(parsed.href);
+    const spellWith = (authority) => `${parsed.protocol}//${parsed.username === "" && parsed.password === "" ? "" : `${parsed.username}${parsed.password === "" ? "" : `:${parsed.password}`}@`}${authority}${parsed.pathname}${parsed.search}${parsed.hash}`;
+    const defaultPort = DEFAULT_PORTS[parsed.protocol];
+    if (parsed.port === "" && defaultPort !== void 0) {
+      const spelled = spellWith(`${parsed.hostname}:${defaultPort}`);
+      if (!out.includes(spelled)) out.push(spelled);
+    }
+    const unicodeHost = domainToUnicode(parsed.hostname);
+    if (unicodeHost !== "" && unicodeHost !== parsed.hostname) {
+      const spelled = spellWith(parsed.port === "" ? unicodeHost : `${unicodeHost}:${parsed.port}`);
+      if (!out.includes(spelled)) out.push(spelled);
+    }
+  } catch {
+  }
+  return out;
+}
+function denyOnlySpellings(url) {
+  const out = [];
+  for (const spelling of urlSpellings(url)) {
+    try {
+      const decoded = decodeURI(spelling);
+      if (decoded !== spelling) out.push(decoded);
+    } catch {
+    }
+  }
+  return out;
+}
+var DEFAULT_PORTS = {
+  "http:": "80",
+  "https:": "443",
+  "ws:": "80",
+  "wss:": "443",
+  "ftp:": "21"
+};
+function urlAuthorities(url) {
+  try {
+    const parsed = new URL(url);
+    const hosts = [parsed.host, parsed.hostname];
+    const defaultPort = DEFAULT_PORTS[parsed.protocol];
+    if (parsed.port === "" && defaultPort !== void 0) hosts.push(`${parsed.hostname}:${defaultPort}`);
+    const unicodeHost = domainToUnicode(parsed.hostname);
+    if (unicodeHost !== "" && unicodeHost !== parsed.hostname) {
+      hosts.push(unicodeHost);
+      if (parsed.port !== "") hosts.push(`${unicodeHost}:${parsed.port}`);
+      else if (defaultPort !== void 0) hosts.push(`${unicodeHost}:${defaultPort}`);
+    }
+    return hosts;
+  } catch {
+    return null;
+  }
+}
+function matchesAuthority(authorities, pattern) {
+  if (authorities === null) return false;
+  const auth = authorityPatternOf(pattern);
+  if (auth === "") return false;
+  const re = wildcardToRegExp(auth);
+  return authorities.some((host) => re.test(host));
+}
+function matchesAllowPattern(url, patterns) {
+  const authorities = urlAuthorities(url);
+  const spellings = urlSpellings(url);
+  return patterns.some(
+    (pat) => spellings.some((s) => wildcardToRegExp(pat).test(s)) && matchesAuthority(authorities, pat)
+  );
+}
+function matchesDenyPattern(url, patterns) {
+  const authorities = urlAuthorities(url);
+  const spellings = [...urlSpellings(url), ...denyOnlySpellings(url)];
+  return patterns.some(
+    (pat) => spellings.some((s) => wildcardToRegExp(pat).test(s)) || isHostLevelPattern(pat) && matchesAuthority(authorities, pat)
+  );
+}
+function urlPolicyDenialReason(url, policy) {
+  if (policy.deny.length > 0 && matchesDenyPattern(url, [...policy.deny])) {
+    return "URL matches a configured webfetch.deny pattern";
+  }
+  if (policy.allow.length > 0 && !matchesAllowPattern(url, [...policy.allow])) {
+    return "URL does not match any configured webfetch.allow pattern";
+  }
+  return null;
+}
+function parseIpv6Groups(text) {
+  let rest = text;
+  const zoneAt = rest.indexOf("%");
+  if (zoneAt !== -1) rest = rest.slice(0, zoneAt);
+  if (!/^[0-9a-f:.]+$/i.test(rest) || !rest.includes(":")) return null;
+  const lastColon = rest.lastIndexOf(":");
+  const tail = rest.slice(lastColon + 1);
+  if (tail.includes(".")) {
+    const quad = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(tail);
+    if (!quad) return null;
+    const octets = [Number(quad[1]), Number(quad[2]), Number(quad[3]), Number(quad[4])];
+    if (octets.some((n) => n > 255)) return null;
+    const hi = octets[0] << 8 | octets[1];
+    const lo = octets[2] << 8 | octets[3];
+    rest = `${rest.slice(0, lastColon + 1)}${hi.toString(16)}:${lo.toString(16)}`;
+  }
+  const parseGroup = (g) => /^[0-9a-f]{1,4}$/i.test(g) ? parseInt(g, 16) : null;
+  const halves = rest.split("::");
+  if (halves.length > 2) return null;
+  let parts;
+  if (halves.length === 2) {
+    const left = halves[0].length > 0 ? halves[0].split(":") : [];
+    const right = halves[1].length > 0 ? halves[1].split(":") : [];
+    if (left.length + right.length > 7) return null;
+    parts = [...left, ...Array(8 - left.length - right.length).fill("0"), ...right];
+  } else {
+    parts = rest.split(":");
+    if (parts.length !== 8) return null;
+  }
+  const groups = [];
+  for (const part of parts) {
+    const value = parseGroup(part);
+    if (value === null) return null;
+    groups.push(value);
+  }
+  return groups;
+}
+function isPrivateIpv4Octets(a, b, c) {
+  return a === 0 || // 0.0.0.0/8
+  a === 127 || // 127.0.0.0/8 loopback
+  a === 10 || // 10.0.0.0/8 RFC1918
+  a === 100 && b >= 64 && b <= 127 || // 100.64.0.0/10 carrier-grade NAT, RFC 6598
+  a === 172 && b >= 16 && b <= 31 || // 172.16.0.0/12 RFC1918
+  a === 192 && b === 168 || // 192.168.0.0/16 RFC1918
+  a === 169 && b === 254 || // 169.254.0.0/16 link-local, incl. cloud metadata 169.254.169.254
+  a === 192 && b === 0 && c === 0 || // 192.0.0.0/24 IETF protocol assignments, RFC 6890
+  a === 198 && (b === 18 || b === 19) || // 198.18.0.0/15 benchmarking, RFC 2544
+  a >= 224 && a <= 239 || // 224.0.0.0/4 multicast
+  a >= 240;
+}
+function isPrivateIpv6Groups(groups) {
+  const g = (i) => groups[i] ?? 0;
+  if (groups.every((v) => v === 0)) return true;
+  if (groups.slice(0, 7).every((v) => v === 0) && g(7) === 1) return true;
+  if (groups.slice(0, 5).every((v) => v === 0) && (g(5) === 65535 || g(5) === 0)) {
+    return isPrivateIpv4Octets(g(6) >> 8, g(6) & 255, g(7) >> 8);
+  }
+  if (groups.slice(0, 4).every((v) => v === 0) && g(4) === 65535 && g(5) === 0) {
+    return isPrivateIpv4Octets(g(6) >> 8, g(6) & 255, g(7) >> 8);
+  }
+  if (g(0) === 8194) return isPrivateIpv4Octets(g(1) >> 8, g(1) & 255, g(2) >> 8);
+  if (g(0) === 100 && g(1) === 65435 && groups.slice(2, 6).every((v) => v === 0)) {
+    return isPrivateIpv4Octets(g(6) >> 8, g(6) & 255, g(7) >> 8);
+  }
+  if ((g(0) & 65024) === 64512) return true;
+  if ((g(0) & 65472) === 65152) return true;
+  if ((g(0) & 65472) === 65216) return true;
+  if ((g(0) & 65280) === 65280) return true;
+  return false;
+}
+var METADATA_HOSTNAMES = /* @__PURE__ */ new Set([
+  "metadata.google.internal",
+  "metadata.goog",
+  // GCE answers on the bare name too, and it is the form most of Google's own docs use.
+  "metadata",
+  // Alibaba Cloud's equivalent of 169.254.169.254.
+  "100.100.100.200",
+  // EC2 resolves both of these to 169.254.169.254 inside a VPC, and neither is a dotted quad, so
+  // the link-local test below never sees them.
+  "instance-data",
+  "instance-data.ec2.internal"
+]);
+var METADATA_IPV6 = /* @__PURE__ */ new Set(["fd00:ec2::254", "[fd00:ec2::254]"]);
+function metadataEndpointRefusal(url) {
+  let host;
+  try {
+    host = new URL(url).hostname.toLowerCase().replace(/\.$/, "");
+  } catch {
+    return null;
+  }
+  if (METADATA_HOSTNAMES.has(host) || METADATA_IPV6.has(host)) {
+    return `URL is a cloud instance-metadata endpoint (${host})`;
+  }
+  if (/^169\.254\.\d{1,3}\.\d{1,3}$/.test(host)) {
+    return `URL is a link-local address (${host}), where cloud metadata services answer`;
+  }
+  if (embeddedIpv4Candidates(host).some(([a, b]) => a === 169 && b === 254)) {
+    return `URL is a link-local address written as IPv6 (${host}), where cloud metadata services answer`;
+  }
+  return null;
+}
+function embeddedIpv4Candidates(host) {
+  const groups = parseIpv6Groups(host.replace(/^\[/, "").replace(/\]$/, ""));
+  if (groups === null) return [];
+  const split = (hi, lo) => [
+    hi >> 8,
+    hi & 255,
+    lo >> 8,
+    lo & 255
+  ];
+  const out = [split(groups[6] ?? 0, groups[7] ?? 0)];
+  if (groups[0] === 8194) out.push(split(groups[1] ?? 0, groups[2] ?? 0));
+  return out;
+}
+
+export {
+  isTooShallowToPrune,
+  sweepExpiredKnownRootMarkers,
+  recordKnownRootThrottled,
+  resolveLineRegions,
+  matchesAllowPattern,
+  matchesDenyPattern,
+  urlPolicyDenialReason,
+  parseIpv6Groups,
+  isPrivateIpv4Octets,
+  isPrivateIpv6Groups,
+  metadataEndpointRefusal
+};

package/dist/{token-goat-chunk-EEIDFMEM.mjs → token-goat-chunk-YZAAZU2S.mjs}

@@ -7,12 +7,20 @@ import {
 // src/reset.ts
 init_define_import_meta_env();
 var _resets = [];
-function registerReset(fn) {
+var _perRequestResets = [];
+function registerReset(fn, opts = {}) {
   _resets.push(fn);
+  if (opts.perRequest === true) _perRequestResets.push(fn);
 }
 function clearModuleCaches() {
+  runResets(_resets);
+}
+function clearPerRequestCaches() {
+  runResets(_perRequestResets);
+}
+function runResets(resets) {
   const errors = [];
-  for (const fn of _resets) {
+  for (const fn of resets) {
     try {
       fn();
     } catch (err) {
@@ -29,5 +37,6 @@ function clearModuleCaches() {
 
 export {
   registerReset,
-  clearModuleCaches
+  clearModuleCaches,
+  clearPerRequestCaches
 };

package/dist/{token-goat-chunk-E3K3BTEQ.mjs → token-goat-chunk-Z44YO3QZ.mjs}

@@ -2,7 +2,10 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   clearModuleCaches
-} from "./token-goat-chunk-EEIDFMEM.mjs";
+} from "./token-goat-chunk-YZAAZU2S.mjs";
+import {
+  _resetDataDirCacheForTesting
+} from "./token-goat-chunk-VES7EL7O.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -44,13 +47,14 @@ function captureOutput() {
     }
   };
 }
-async function serveOne(req, runFn) {
+async function serveOne(req, runFn, reset = clearModuleCaches) {
   const cwdBefore = process.cwd();
   const restoreEnv = swapEnv(req.env ?? { ...process.env });
   const cap = captureOutput();
   let status;
   try {
     if (req.cwd !== void 0) process.chdir(req.cwd);
+    _resetDataDirCacheForTesting();
     process.exitCode = void 0;
     await runFn([process.execPath, "token-goat", ...req.argv]);
     status = typeof process.exitCode === "number" ? process.exitCode : 0;
@@ -65,7 +69,7 @@ async function serveOne(req, runFn) {
       process.chdir(cwdBefore);
     } catch {
     }
-    clearModuleCaches();
+    reset();
     return { id: req.id, status, stdout: captured.out, stderr: captured.err };
   }
   cap.restore();
@@ -77,7 +81,7 @@ async function serveOne(req, runFn) {
     process.chdir(cwdBefore);
   } catch {
   }
-  clearModuleCaches();
+  reset();
   return { id: req.id, status, stdout, stderr };
 }
 function serveBatch(token, runFn) {
@@ -106,7 +110,9 @@ function serveBatch(token, runFn) {
     });
   });
 }
+
 export {
-  serveBatch,
-  serveOne
+  swapEnv,
+  serveOne,
+  serveBatch
 };

package/dist/token-goat-chunk-Z57YODA2.mjs

@@ -0,0 +1,35 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  computeSymbolFingerprints,
+  symbolNamesInFile
+} from "./token-goat-chunk-PU7V3FD6.mjs";
+import {
+  resolveIndexPath
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  globalDbPath
+} from "./token-goat-chunk-VES7EL7O.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/note_anchor.ts
+init_define_import_meta_env();
+import * as fs from "node:fs";
+function anchorStatus(root, anchor, dbPath = globalDbPath()) {
+  try {
+    const abs = resolveIndexPath(anchor.file, root);
+    if (!fs.existsSync(abs)) return "gone";
+    const now = computeSymbolFingerprints(abs, anchor.symbol, dbPath);
+    if (now.length === 1) return now[0] === anchor.sha ? "current" : "changed";
+    if (now.length > 1) return now.includes(anchor.sha) ? "current" : "unknown";
+    return symbolNamesInFile(abs, dbPath).length > 0 ? "gone" : "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+
+export {
+  anchorStatus
+};

package/dist/{token-goat-chunk-DA43OE7L.mjs → token-goat-chunk-ZCDTCVIS.mjs}

@@ -2,10 +2,10 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   Database
-} from "./token-goat-chunk-OSUFN2FV.mjs";
+} from "./token-goat-chunk-XB5KKOCG.mjs";
 import {
   displaySafeText
-} from "./token-goat-chunk-NMTKNYGF.mjs";
+} from "./token-goat-chunk-FNFBKLRD.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -53,45 +53,62 @@ function openReadonlySqlite(filePath) {
 function quoteIdent(name) {
   return `"${name.replace(/"/g, '""')}"`;
 }
+function virtualTableModule(createSql) {
+  if (typeof createSql !== "string") return null;
+  const m = /^\s*CREATE\s+VIRTUAL\s+TABLE\b[\s\S]*?\bUSING\s+["'`[]?(\w+)/i.exec(createSql);
+  return m === null ? null : m[1] ?? null;
+}
 function getSqliteSchema(filePath) {
   const db = openReadonlySqlite(filePath);
   try {
-    const objects = db.prepare("SELECT name, type FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\' ORDER BY name").all();
+    const objects = db.prepare("SELECT name, type, sql FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\' ORDER BY name").all();
     const tables = objects.map((o) => {
-      const columns = db.prepare(`PRAGMA table_info(${quoteIdent(o.name)})`).all().map(
-        (c) => ({
-          name: c.name,
-          type: c.type || "",
-          notNull: c.notnull === 1,
-          primaryKey: c.pk > 0,
-          defaultValue: c.dflt_value === null || c.dflt_value === void 0 ? null : String(c.dflt_value)
-        })
-      );
-      const indexes = db.prepare(`PRAGMA index_list(${quoteIdent(o.name)})`).all().map(
-        (idx) => {
-          const idxColumns = db.prepare(`PRAGMA index_info(${quoteIdent(idx.name)})`).all().map((c) => c.name);
-          return { name: idx.name, unique: idx.unique === 1, columns: idxColumns };
-        }
-      );
-      const foreignKeys = db.prepare(`PRAGMA foreign_key_list(${quoteIdent(o.name)})`).all().map((fk) => ({ table: fk.table, from: fk.from, to: fk.to }));
-      let rowCount;
+      const module = virtualTableModule(o.sql);
       try {
-        const row = db.prepare(`SELECT COUNT(*) AS c FROM ${quoteIdent(o.name)}`).get();
-        rowCount = row.c;
-      } catch {
-        rowCount = null;
+        return describeOne(db, o, module);
+      } catch (e) {
+        if (module === null) throw e;
+        return { name: o.name, kind: "virtual", module, ...o.sql !== null ? { createSql: o.sql } : {}, moduleNotLoaded: true, columns: [], indexes: [], foreignKeys: [], rowCount: null };
       }
-      return { name: o.name, kind: o.type === "view" ? "view" : "table", columns, indexes, foreignKeys, rowCount };
     });
     return { tables };
   } finally {
     db.close();
   }
 }
+function describeOne(db, o, module) {
+  const columns = db.prepare(`PRAGMA table_info(${quoteIdent(o.name)})`).all().map(
+    (c) => ({
+      name: c.name,
+      type: c.type || "",
+      notNull: c.notnull === 1,
+      primaryKey: c.pk > 0,
+      defaultValue: c.dflt_value === null || c.dflt_value === void 0 ? null : String(c.dflt_value)
+    })
+  );
+  const indexes = db.prepare(`PRAGMA index_list(${quoteIdent(o.name)})`).all().map(
+    (idx) => {
+      const idxColumns = db.prepare(`PRAGMA index_info(${quoteIdent(idx.name)})`).all().map((c) => c.name);
+      return { name: idx.name, unique: idx.unique === 1, columns: idxColumns };
+    }
+  );
+  const foreignKeys = db.prepare(`PRAGMA foreign_key_list(${quoteIdent(o.name)})`).all().map((fk) => ({ table: fk.table, from: fk.from, to: fk.to }));
+  let rowCount;
+  try {
+    const row = db.prepare(`SELECT COUNT(*) AS c FROM ${quoteIdent(o.name)}`).get();
+    rowCount = row.c;
+  } catch {
+    rowCount = null;
+  }
+  if (module !== null) return { name: o.name, kind: "virtual", module, columns, indexes, foreignKeys, rowCount };
+  return { name: o.name, kind: o.type === "view" ? "view" : "table", columns, indexes, foreignKeys, rowCount };
+}
 function formatSqliteSchema(result) {
   if (result.tables.length === 0) return "(no tables or views found)";
   return result.tables.map((t) => {
-    const lines = [`${t.name}  (${t.kind}${t.rowCount !== null ? `, ${t.rowCount} row${t.rowCount === 1 ? "" : "s"}` : ""})`];
+    const kind = t.kind === "virtual" ? `virtual table: ${displaySafeText(t.module ?? "?")}${t.moduleNotLoaded === true ? "; module not loaded" : ""}` : t.kind;
+    const lines = [`${displaySafeText(t.name)}  (${kind}${t.rowCount !== null ? `, ${t.rowCount} row${t.rowCount === 1 ? "" : "s"}` : ""})`];
+    if (t.createSql !== void 0) lines.push(`  ${displaySafeText(t.createSql.replace(/\s+/g, " ").trim())}`);
     for (const c of t.columns) {
       const flags = [c.primaryKey ? "PK" : null, c.notNull ? "NOT NULL" : null, c.defaultValue !== null ? `DEFAULT ${c.defaultValue}` : null].filter((f) => f !== null).join(" ");
       lines.push(`  ${displaySafeText(c.name)} ${displaySafeText(c.type || "(untyped)")}${flags ? `  ${flags}` : ""}`);
@@ -116,9 +133,10 @@ function getSqliteTables(filePath) {
   try {
     const objects = db.prepare(
       // ESCAPE makes every `_` literal; see getSqliteSchema above. Here it costs three tables rather than one, since `%_fts_%` and `%_vec0_%` exist to hide the shadow tables FTS5 and sqlite-vec create beside a virtual table, and unescaped they also hide anything of the shape `my_ftsx_cache`.
-      "SELECT name, type FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\' AND name NOT LIKE '%\\_fts\\_%' ESCAPE '\\' AND name NOT LIKE '%\\_vec0\\_%' ESCAPE '\\' ORDER BY name"
+      "SELECT name, type, sql FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\' AND name NOT LIKE '%\\_fts\\_%' ESCAPE '\\' AND name NOT LIKE '%\\_vec0\\_%' ESCAPE '\\' ORDER BY name"
     ).all();
     return objects.map((o) => {
+      const module = virtualTableModule(o.sql);
       let columnCount;
       try {
         const cols = db.prepare(`PRAGMA table_info(${quoteIdent(o.name)})`).all();
@@ -135,7 +153,8 @@ function getSqliteTables(filePath) {
       }
       return {
         name: o.name,
-        kind: o.type === "view" ? "view" : "table",
+        kind: module !== null ? "virtual" : o.type === "view" ? "view" : "table",
+        ...module !== null ? { module } : {},
         rowCount,
         columnCount
       };
@@ -147,11 +166,11 @@ function getSqliteTables(filePath) {
 function formatSqliteTables(tables) {
   if (tables.length === 0) return "(no tables or views found)";
   return tables.map((t) => {
-    const parts = [t.kind];
+    const parts = [t.kind === "virtual" ? `virtual table: ${displaySafeText(t.module ?? "?")}` : t.kind];
     if (t.rowCount !== null) {
       parts.push(`${t.rowCount.toLocaleString()} row${t.rowCount === 1 ? "" : "s"}`);
     }
-    parts.push(`${t.columnCount} col${t.columnCount === 1 ? "" : "s"}`);
+    if (t.kind !== "virtual" || t.columnCount > 0) parts.push(`${t.columnCount} col${t.columnCount === 1 ? "" : "s"}`);
     return `${displaySafeText(t.name)}  (${parts.join(", ")})`;
   }).join("\n");
 }

package/dist/token-goat-chunk-ZEJVMUQH.mjs

@@ -0,0 +1,48 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  ensureDirSync
+} from "./token-goat-chunk-GOLEOXZP.mjs";
+import {
+  dataDir
+} from "./token-goat-chunk-VES7EL7O.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/probe_marker.ts
+init_define_import_meta_env();
+import { writeFileSync } from "node:fs";
+import path from "node:path";
+var PROBE_NONCE_ENV = "TOKEN_GOAT_PROBE_NONCE";
+var NONCE_RE = /^[a-f0-9]{16,32}$/;
+var PROBE_EVENT_TAGS = { session_start: "S", user_prompt_submit: "P" };
+function probeDir() {
+  return path.join(dataDir(), "probe");
+}
+function probeMarkerLine(nonce, tag) {
+  return `token-goat probe marker: ${nonce}-${tag}`;
+}
+function applyProbeMarker(eventName, output, env = process.env) {
+  const nonce = env[PROBE_NONCE_ENV];
+  const tag = PROBE_EVENT_TAGS[eventName];
+  if (nonce === void 0 || tag === void 0 || !NONCE_RE.test(nonce)) return output;
+  try {
+    ensureDirSync(probeDir());
+    writeFileSync(path.join(probeDir(), `${nonce}.${tag}`), "");
+  } catch {
+  }
+  const line = probeMarkerLine(nonce, tag);
+  if (output.hookType === "context") return { ...output, context: `${output.context}
+
+${line}` };
+  if (output.hookType === "pass") return output.notice === void 0 ? { hookType: "context", context: line } : { hookType: "context", context: line, notice: output.notice };
+  return output;
+}
+
+export {
+  PROBE_NONCE_ENV,
+  PROBE_EVENT_TAGS,
+  probeDir,
+  applyProbeMarker
+};

package/dist/{token-goat-chunk-BGHSSJUA.mjs → token-goat-chunk-ZFOBKUWH.mjs}

@@ -6,7 +6,7 @@ import {
   quantizeRgbaToIndexed,
   require_omggif,
   resizeRgba
-} from "./token-goat-chunk-RRNZMM3A.mjs";
+} from "./token-goat-chunk-5Y6ZYL6U.mjs";
 import {
   __toESM,
   init_define_import_meta_env