token-goat 2.9.30 → 2.9.31

package/dist/{token-goat-chunk-E3OQX2XT.mjs → token-goat-chunk-IAGXMHIK.mjs}

@@ -3,53 +3,75 @@ const require = __cjsRequire(import.meta.url);
 import {
   serveOne,
   swapEnv
-} from "./token-goat-chunk-Z44YO3QZ.mjs";
+} from "./token-goat-chunk-XRKUX6CM.mjs";
 import {
   relayInProcess
-} from "./token-goat-chunk-SQSSNQPE.mjs";
-import "./token-goat-chunk-ZEJVMUQH.mjs";
-import "./token-goat-chunk-GFBSN7BD.mjs";
+} from "./token-goat-chunk-VXEXMJDL.mjs";
+import "./token-goat-chunk-Q5QDBC6O.mjs";
+import "./token-goat-chunk-G5PJ7AGM.mjs";
 import "./token-goat-chunk-5RG5SBL6.mjs";
+import "./token-goat-chunk-HLPW63A7.mjs";
 import {
   HOOK_EVENTS
 } from "./token-goat-chunk-KKUFXAPD.mjs";
-import "./token-goat-chunk-7F2UBPD3.mjs";
-import "./token-goat-chunk-54K3EUV3.mjs";
-import "./token-goat-chunk-7BXSNBY5.mjs";
-import "./token-goat-chunk-G5PJ7AGM.mjs";
-import "./token-goat-chunk-YARZFCZS.mjs";
-import "./token-goat-chunk-FBNQNSJK.mjs";
-import "./token-goat-chunk-PEPTHRFF.mjs";
+import "./token-goat-chunk-6ENQSNRZ.mjs";
+import "./token-goat-chunk-PX5PQWTY.mjs";
+import "./token-goat-chunk-VWDXLT4F.mjs";
+import "./token-goat-chunk-DOWRSMWO.mjs";
+import "./token-goat-chunk-5AC66HNP.mjs";
+import "./token-goat-chunk-PUO5INXP.mjs";
+import "./token-goat-chunk-2XBMMDBD.mjs";
+import "./token-goat-chunk-PFWIMH2E.mjs";
+import "./token-goat-chunk-Z7N5OMMP.mjs";
+import "./token-goat-chunk-LCNQ2CNN.mjs";
+import "./token-goat-chunk-GWFLAUMQ.mjs";
+import "./token-goat-chunk-PJZXIS3G.mjs";
+import "./token-goat-chunk-JVFSHVFJ.mjs";
+import "./token-goat-chunk-ODBT2USM.mjs";
+import "./token-goat-chunk-DGS2LVNA.mjs";
+import "./token-goat-chunk-INNPTRUX.mjs";
+import "./token-goat-chunk-VWZA2H4P.mjs";
+import "./token-goat-chunk-N5LSOVSU.mjs";
+import "./token-goat-chunk-OBOFIHKN.mjs";
+import {
+  primeHiddenRulesAhead,
+  primeManagedPolicyAhead
+} from "./token-goat-chunk-QH7YVYOY.mjs";
+import "./token-goat-chunk-NOSS5VWY.mjs";
+import "./token-goat-chunk-NMD42SFQ.mjs";
+import "./token-goat-chunk-SAMFDIS2.mjs";
+import "./token-goat-chunk-4SMRO4TO.mjs";
+import "./token-goat-chunk-WBA5SKT4.mjs";
 import "./token-goat-chunk-MNWKPRAL.mjs";
-import "./token-goat-chunk-JTQQGXZH.mjs";
-import "./token-goat-chunk-67TQJ76B.mjs";
-import "./token-goat-chunk-H2PHHGM5.mjs";
+import "./token-goat-chunk-CIMQ2BB3.mjs";
+import "./token-goat-chunk-WDH44VAU.mjs";
+import "./token-goat-chunk-BPGCUMR7.mjs";
+import "./token-goat-chunk-KQBLRPBN.mjs";
+import "./token-goat-chunk-4ZBFWLXF.mjs";
 import {
   materializeShrunkImageFile
-} from "./token-goat-chunk-P4QMM4WK.mjs";
-import "./token-goat-chunk-5KDMCMF2.mjs";
-import "./token-goat-chunk-APGZXSPS.mjs";
-import "./token-goat-chunk-COBQGL5S.mjs";
-import "./token-goat-chunk-ATCPY7EQ.mjs";
+} from "./token-goat-chunk-C75NA7PL.mjs";
+import "./token-goat-chunk-CBIQ7WTD.mjs";
+import "./token-goat-chunk-P6VGNTQT.mjs";
 import {
   COPILOT_CLI_TOOL_NAME_MAP,
   foldToolName
-} from "./token-goat-chunk-VPBBTSJR.mjs";
-import "./token-goat-chunk-Q5VTGRH7.mjs";
-import "./token-goat-chunk-Y776AENC.mjs";
-import "./token-goat-chunk-SJHWVNDQ.mjs";
-import "./token-goat-chunk-AFLYLHDH.mjs";
-import "./token-goat-chunk-BPGCUMR7.mjs";
-import "./token-goat-chunk-C63JQV5K.mjs";
-import "./token-goat-chunk-JB6QN6VF.mjs";
-import "./token-goat-chunk-RHXKCZX3.mjs";
+} from "./token-goat-chunk-76FGDLRO.mjs";
+import "./token-goat-chunk-GL3ETKSC.mjs";
+import "./token-goat-chunk-OXFMP75N.mjs";
+import "./token-goat-chunk-NISNMD7T.mjs";
 import "./token-goat-chunk-EVMZJ27Z.mjs";
-import "./token-goat-chunk-HYBFA5X3.mjs";
+import "./token-goat-chunk-IK2DRMFX.mjs";
 import "./token-goat-chunk-5Y6ZYL6U.mjs";
-import "./token-goat-chunk-ARDNEC2U.mjs";
-import "./token-goat-chunk-3Z5S4KGM.mjs";
-import "./token-goat-chunk-VL3YIFHZ.mjs";
+import "./token-goat-chunk-4NAPX7BA.mjs";
+import "./token-goat-chunk-U4WHMG6Y.mjs";
+import {
+  limitDbWaitsForHook
+} from "./token-goat-chunk-GVB2MUST.mjs";
 import "./token-goat-chunk-XB5KKOCG.mjs";
+import "./token-goat-chunk-OUKDTVNU.mjs";
+import "./token-goat-chunk-3BTK54F3.mjs";
+import "./token-goat-chunk-4GILLLWY.mjs";
 import {
   HARNESS_PROTOCOL_VERSION,
   PROTOCOL_VERSION,
@@ -70,29 +92,35 @@ import {
   serverKeyPath,
   touchMarker,
   writeFrame
-} from "./token-goat-chunk-LOBGHXPB.mjs";
-import "./token-goat-chunk-3BTK54F3.mjs";
-import "./token-goat-chunk-4FVIAHSI.mjs";
+} from "./token-goat-chunk-N5MMR2IW.mjs";
+import "./token-goat-chunk-BFCWY73P.mjs";
+import "./token-goat-chunk-KGEFFSHD.mjs";
+import "./token-goat-chunk-XX6O25RN.mjs";
+import "./token-goat-chunk-HAVAOB3S.mjs";
+import "./token-goat-chunk-F6PAUIEK.mjs";
+import "./token-goat-chunk-65N4RHP4.mjs";
+import "./token-goat-chunk-X2SUP3EI.mjs";
+import "./token-goat-chunk-T5P5ACNQ.mjs";
 import {
   hookServerEnabled,
   ownGet
-} from "./token-goat-chunk-7IN2MKDS.mjs";
-import "./token-goat-chunk-U4N3BN2W.mjs";
+} from "./token-goat-chunk-7EZTZOMC.mjs";
+import "./token-goat-chunk-QYHO5CPH.mjs";
+import "./token-goat-chunk-4GBVPH3D.mjs";
 import {
   clearPerRequestCaches
 } from "./token-goat-chunk-YZAAZU2S.mjs";
 import "./token-goat-chunk-IVE6U7KV.mjs";
 import "./token-goat-chunk-Y4AFKTHK.mjs";
-import "./token-goat-chunk-GOLEOXZP.mjs";
+import "./token-goat-chunk-HU4TORC5.mjs";
+import "./token-goat-chunk-GGGG7RWB.mjs";
 import "./token-goat-chunk-AM5V6GSX.mjs";
 import "./token-goat-chunk-FNFBKLRD.mjs";
 import {
   VERSION,
   configPath,
   ensureDataDirPrivate
-} from "./token-goat-chunk-VES7EL7O.mjs";
-import "./token-goat-chunk-KWPNJBDH.mjs";
-import "./token-goat-chunk-HAVAOB3S.mjs";
+} from "./token-goat-chunk-CO3UYX6G.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
@@ -152,6 +180,13 @@ function bashResultByteLength(resp) {
   }
   return 0;
 }
+var TG_LEDGER_PREFIX_RE = /^(?:(?:cd\s+(?:"[^"]*"|'[^']*'|\S+)|export[ \t]+[A-Za-z_]\w*=(?:"[^"]*"|'[^']*'|[^\s"'])*(?:[ \t]+[A-Za-z_]\w*=(?:"[^"]*"|'[^']*'|[^\s"'])*)*)[ \t]*(?:&&|;|\r?\n)\s*)+/;
+var TG_LEDGER_READ_RE = /^(?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)*(?:env\s+(?:(?:(?:-u|--unset)\s+\S+|-(?![A-Za-z]*C|-c)\S*|[A-Za-z_][A-Za-z0-9_]*=\S+)\s+)*)?(?:token-goat|tg|node(?:\.exe)?\s+["']?(?:\S*[\\/])?token-goat(?:\.mjs)?["']?)\s+(?:read|section|symbol)\b/i;
+function isLedgerReadCommand(cmd) {
+  if (typeof cmd !== "string") return false;
+  const body = cmd.trim().replace(/^\(\s*/, "");
+  return TG_LEDGER_READ_RE.test((body.replace(TG_LEDGER_PREFIX_RE, "") || body).trim());
+}
 function isAsyncDetachEligible(event, input) {
   if (event === "subagent_stop") return true;
   if (event !== "post_tool_use") return false;
@@ -164,7 +199,7 @@ function isAsyncDetachEligible(event, input) {
       const notebookPath = get(toolInput, "notebook_path");
       return !ASYNC_DETACH_SKIP_EXT_RE.test(typeof filePath === "string" ? filePath : typeof notebookPath === "string" ? notebookPath : "");
     }
-    if (toolName === "Bash") return bashResultByteLength(get(payload, "tool_response")) < ASYNC_DETACH_BASH_MAX_BYTES;
+    if (toolName === "Bash") return !isLedgerReadCommand(get(get(payload, "tool_input"), "command")) && bashResultByteLength(get(payload, "tool_response")) < ASYNC_DETACH_BASH_MAX_BYTES;
     return false;
   } catch {
     return false;
@@ -537,6 +572,7 @@ async function handle(request, runCli, send) {
     const res = await serveOne({ id: 0, argv: request.argv, cwd: request.cwd, env: request.env }, runCli, clearPerRequestCaches);
     return send({ ok: true, stdout: res.stdout, stderr: res.stderr, status: res.status });
   }
+  limitDbWaitsForHook();
   const startedAt = performance.now();
   const cwdBefore = process.cwd();
   const restoreEnv = swapEnv(request.env);
@@ -571,6 +607,7 @@ function parseHarnessRequest(body, harness) {
 }
 async function handleHarness(request, harness, early, finish) {
   clearPerRequestCaches();
+  limitDbWaitsForHook();
   const startedAt = performance.now();
   const cwdBefore = process.cwd();
   const restoreEnv = swapEnv(request.env);
@@ -630,6 +667,8 @@ async function runHookServer(slot, runCli) {
     return;
   }
   ensureDataDirPrivate();
+  primeHiddenRulesAhead();
+  primeManagedPolicyAhead();
   const key = ensureServerKey();
   const keyPath = serverKeyPath();
   const loadedStamp = bundleStamp();

package/dist/{token-goat-chunk-HYBFA5X3.mjs → token-goat-chunk-IK2DRMFX.mjs}

@@ -1,53 +1,26 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
-  getDb
-} from "./token-goat-chunk-VL3YIFHZ.mjs";
+  filePathSpellingsClause,
+  fileRowByIndexKey,
+  getReadDb,
+  pathEqClause,
+  pathSuffixClause,
+  projectScopeClause
+} from "./token-goat-chunk-GVB2MUST.mjs";
 import {
-  foldPath,
-  isCaseInsensitiveFs
+  foldPath
 } from "./token-goat-chunk-AM5V6GSX.mjs";
 import {
   normalizePath
 } from "./token-goat-chunk-FNFBKLRD.mjs";
 import {
   globalDbPath
-} from "./token-goat-chunk-VES7EL7O.mjs";
+} from "./token-goat-chunk-CO3UYX6G.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
 
-// src/sql_path.ts
-init_define_import_meta_env();
-function pathEqClause(column) {
-  return isCaseInsensitiveFs() ? `TG_LOWER(${column}) = ?` : `${column} = ?`;
-}
-function pathSuffixClause(column) {
-  const col = isCaseInsensitiveFs() ? `TG_LOWER(${column})` : column;
-  return {
-    // Both separators are accepted because not every writer into `symbols` stores a normalizePath'd (forward-slash) file_path, and the JS-side path-boundary test this narrowing feeds treats `/` and `\` alike.
-    clause: `(${col} = ? OR substr(${col}, -length(?)) = ? OR substr(${col}, -length(?)) = ?)`,
-    params: (baseName) => {
-      const folded = foldPath(baseName);
-      return [folded, `/${folded}`, `/${folded}`, `\\${folded}`, `\\${folded}`];
-    }
-  };
-}
-function projectScopeClause(column) {
-  const caseInsensitive = isCaseInsensitiveFs();
-  const col = caseInsensitive ? `TG_LOWER(${column})` : column;
-  return {
-    // Parenthesised so an OR anywhere in the surrounding WHERE cannot bind tighter than the pair.
-    clause: `(${col} >= ? AND ${col} < ?)`,
-    params: (root) => {
-      const folded = caseInsensitive ? foldPath(normalizePath(root)) : normalizePath(root);
-      const lower = folded.endsWith("/") ? folded : `${folded}/`;
-      const upper = `${lower.slice(0, -1)}0`;
-      return [lower, upper];
-    }
-  };
-}
-
 // src/index_reader.ts
 init_define_import_meta_env();
 
@@ -181,15 +154,9 @@ function buildSymbolWhere(opts) {
     params.push(opts.name);
   }
   if (opts.filePath !== void 0) {
-    const key = indexKey(opts.filePath);
-    if (key.includes("/") || key.includes("\\")) {
-      const alt = key.includes("/") ? key.replace(/\//g, "\\") : key.replace(/\\/g, "/");
-      where.push(`(${pathEqClause("file_path")} OR ${pathEqClause("file_path")})`);
-      params.push(foldPath(key), foldPath(alt));
-    } else {
-      where.push(pathEqClause("file_path"));
-      params.push(foldPath(key));
-    }
+    const spellings = filePathSpellingsClause("file_path", opts.filePath);
+    where.push(spellings.clause);
+    params.push(...spellings.params);
   }
   if (opts.kind !== void 0) {
     where.push("kind = ?");
@@ -213,7 +180,7 @@ function querySymbols(opts = {}, dbPath = globalDbPath()) {
   const limit = opts.limit ?? DEFAULT_QUERY_LIMIT;
   const offset = opts.offset ?? 0;
   const sql = `SELECT file_path, name, kind, line_start, line_end, body, docstring, parent FROM symbols ${clause} ORDER BY file_path, line_start, rowid LIMIT ? OFFSET ?`;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const rows = db.prepare(sql).all(...params, limit, offset);
   return rows.map(toSymbolEntry);
 }
@@ -222,14 +189,14 @@ function distinctSymbolKinds(rootDir, dbPath = globalDbPath()) {
   const params = [];
   applyRootDirScope(rootDir, "file_path", where, params);
   const clause = where.length > 0 ? `WHERE ${where.join(" AND ")}` : "";
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const rows = db.prepare(`SELECT DISTINCT kind FROM symbols ${clause} ORDER BY kind`).all(...params);
   return rows.map((r) => r.kind);
 }
 function countSymbols(opts = {}, dbPath = globalDbPath()) {
   const { clause, params } = buildSymbolWhere(opts);
   const sql = `SELECT COUNT(*) as cnt FROM symbols ${clause}`;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const row = db.prepare(sql).get(...params);
   return row.cnt;
 }
@@ -247,20 +214,20 @@ function queryRefs(opts, dbPath = globalDbPath()) {
   const { clause, params } = buildRefsWhere(opts);
   const limit = opts.limit ?? DEFAULT_QUERY_LIMIT;
   const sql = `SELECT file_path, name, line, col, context FROM refs ${clause} ORDER BY file_path, line LIMIT ?`;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const rows = db.prepare(sql).all(...params, limit);
   return rows.map(toRefEntry);
 }
 function countRefs(opts, dbPath = globalDbPath()) {
   const { clause, params } = buildRefsWhere(opts);
   const sql = `SELECT COUNT(*) as cnt FROM refs ${clause}`;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const row = db.prepare(sql).get(...params);
   return row.cnt;
 }
 function queryRefsByContext(context, filePath, dbPath = globalDbPath()) {
   const sql = `SELECT file_path, name, line, col, context FROM refs WHERE context = ? AND ${pathEqClause("file_path")} ORDER BY line LIMIT 20`;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const rows = db.prepare(sql).all(context, foldPath(indexKey(filePath)));
   return rows.map(toRefEntry);
 }
@@ -268,7 +235,7 @@ var REF_COUNT_BATCH = 900;
 function queryRefCounts(names, dbPath = globalDbPath(), rootDir) {
   const counts = /* @__PURE__ */ new Map();
   if (names.length === 0) return counts;
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const scopeWhere = [];
   const scopeParams = [];
   applyRootDirScope(rootDir, "file_path", scopeWhere, scopeParams);
@@ -295,7 +262,7 @@ function getOwnProjectFileEntries(rootDir, dbPath = globalDbPath()) {
   return fileEntriesWhere(clause, params, dbPath);
 }
 function fileEntriesWhere(clause, params, dbPath) {
-  const rows = getDb(dbPath).prepare(`SELECT path, sha, mtime, language, indexed_at, embed_sha, parser_sha FROM files WHERE ${clause}`).all(...params);
+  const rows = getReadDb(dbPath).prepare(`SELECT path, sha, mtime, language, indexed_at, embed_sha, parser_sha FROM files WHERE ${clause}`).all(...params);
   const out = /* @__PURE__ */ new Map();
   for (const row of rows) {
     out.set(foldPath(row.path), {
@@ -311,17 +278,8 @@ function fileEntriesWhere(clause, params, dbPath) {
   return out;
 }
 function getFileEntry(filePath, dbPath = globalDbPath()) {
-  const db = getDb(dbPath);
-  const key = indexKey(filePath);
-  let row = db.prepare(
-    `SELECT path, sha, mtime, language, indexed_at, embed_sha, parser_sha FROM files WHERE ${pathEqClause("path")}`
-  ).get(foldPath(key));
-  if (row === void 0 && (key.includes("/") || key.includes("\\"))) {
-    const altPath = key.includes("/") ? key.replace(/\//g, "\\") : key.replace(/\\/g, "/");
-    row = db.prepare(
-      `SELECT path, sha, mtime, language, indexed_at, embed_sha, parser_sha FROM files WHERE ${pathEqClause("path")}`
-    ).get(foldPath(altPath));
-  }
+  const db = getReadDb(dbPath);
+  const row = fileRowByIndexKey(db, filePath, "path, sha, mtime, language, indexed_at, embed_sha, parser_sha");
   if (row === void 0) return null;
   return {
     filePath: row.path,
@@ -348,7 +306,7 @@ function runFtsQuery(db, match, limit, scope) {
 function searchSymbolsFts(query, limit = 50, dbPath = globalDbPath(), rootDir) {
   const andMatch = sanitizeFtsQuery(query, "AND");
   if (andMatch === "") return [];
-  const db = getDb(dbPath);
+  const db = getReadDb(dbPath);
   const scope = rootDir !== void 0 ? ownProjectScope("s.file_path", indexKey(rootDir)) : void 0;
   try {
     const andResults = runFtsQuery(db, andMatch, limit, scope);
@@ -362,9 +320,7 @@ function searchSymbolsFts(query, limit = 50, dbPath = globalDbPath(), rootDir) {
 }
 
 export {
-  pathEqClause,
-  pathSuffixClause,
-  projectScopeClause,
+  commonGitDir,
   ownProjectScope,
   nestedWorktreeExclusions,
   DEFAULT_QUERY_LIMIT,