internal/

validateNoDroppedDecls and validateNoDroppedStmts are the issue #14 guard against silent data loss in op=replace patches whose replacement text is SHORTER (in bytes) than the matched text.

Package discovery is the single source of truth for go-surgeon's tool catalog.

Package filesystem worktree-guard helpers: anchor writes on the worktree the MCP server was launched in, rewrite cross-worktree paths that arrive via symlinks (the /go/<module> -> parent-checkout case), and refuse writes that would land outside any worktree we can map back to that root.