@garuda-agent/garuda 0.14.1 → 0.16.0

package/dist/{chunk-ITITLNAR.js → chunk-WIJL72ZE.js}

@@ -1,32 +1,41 @@
 #!/usr/bin/env node
+import {
+  loadLspConfig
+} from "./chunk-G2AX7MGS.js";
 import {
   hasServerBlocks,
   serverCallText,
   serverPairText,
   withoutServerBlocks
 } from "./chunk-A2QAIRQL.js";
+import {
+  gateProjectSettings
+} from "./chunk-ULAJPMY7.js";
+import {
+  REDACTED,
+  Redactor,
+  writeFileAtomic
+} from "./chunk-EIXUSVFX.js";
 import {
   aliasModel,
   contextSize,
-  gateProjectSettings,
   knownModels,
   lookupModel,
   responseCost,
   totalTokens
-} from "./chunk-W7BPYQMW.js";
-import {
-  loadLspConfig
-} from "./chunk-G2AX7MGS.js";
+} from "./chunk-R7I2NBPX.js";
 import {
-  BUILTIN_COMMANDS,
   MAX_RESULTS,
   providerLabel,
   saveSearchUse,
   search
-} from "./chunk-KWRJREUH.js";
+} from "./chunk-B25VL4RU.js";
+import {
+  BUILTIN_COMMANDS
+} from "./chunk-23FXBNBB.js";
 import {
   VERSION
-} from "./chunk-6TWBYMY7.js";
+} from "./chunk-XOK5OZOC.js";
 import {
   TrustStore
 } from "./chunk-5DEWP3YX.js";
@@ -50,24 +59,26 @@ import {
 } from "./chunk-OUCV3FCT.js";
 import {
   DEFAULT_ENV_ALLOWLIST,
-  EFFORTS,
   NETWORK_PORTS,
   PermissionEngine,
-  ZERO_USAGE,
-  addUsage,
   createExecutor,
   describeAllowlist,
   expandAllowlist,
   hostAllowed,
   isSensitive,
   loadSettings
-} from "./chunk-D5O5CIWK.js";
+} from "./chunk-GXZACJUI.js";
 import {
   PathOutsideRootError,
   displayPath,
   isInside,
   resolveInRoot
 } from "./chunk-WMOLXTBU.js";
+import {
+  EFFORTS,
+  ZERO_USAGE,
+  addUsage
+} from "./chunk-3EQU2GUX.js";
 import {
   assertModelAllowedByPolicy,
   ignoredProjectPolicy,
@@ -84,71 +95,6 @@ import { randomBytes } from "crypto";
 import { appendFileSync, mkdirSync } from "fs";
 import { readdir, readFile, rm, stat, utimes } from "fs/promises";
 import { basename, join } from "path";
-
-// src/session/redact.ts
-var REDACTED = "[REDACTED]";
-var PATTERNS = [
-  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g,
-  /sk-ant-[A-Za-z0-9_-]{16,}/g,
-  /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
-  /\bAKIA[0-9A-Z]{16}\b/g,
-  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
-  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
-  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
-  /\bAIza[0-9A-Za-z_-]{35}\b/g,
-  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
-];
-var ASSIGNMENT = /\b([A-Za-z0-9_]*(?:api[_-]?key|secret|token|password|passwd)[A-Za-z0-9_]*)(["']?\s*[:=]\s*["']?)([^\s"'`,;]{8,})/gi;
-var OPAQUE_KEYS = /* @__PURE__ */ new Set(["encrypted_content", "encrypted_index", "signature"]);
-function looksLikeCode(name, value, next) {
-  if (/^[\d_.]+$/.test(value)) return !/pass|secret/i.test(name);
-  if (value.includes("(") || next === "(") return true;
-  return /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) && !/\d{4,}/.test(value);
-}
-var SECRET_ENV_NAME = /(KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL)/i;
-var movedSecrets = /* @__PURE__ */ new Map();
-function keepSecretForRedaction(name, value) {
-  movedSecrets.set(name, value);
-}
-var Redactor = class {
-  literals;
-  /**
-   * `env`: variables whose names look secret have their values removed wherever they appear.
-   * Default: this process's environment and the secrets moved out of it.
-   */
-  constructor(env = { ...process.env, ...Object.fromEntries(movedSecrets) }) {
-    this.literals = Object.entries(env).filter(([name, value]) => SECRET_ENV_NAME.test(name) && (value?.length ?? 0) >= 8).map(([, value]) => value).sort((a, b) => b.length - a.length);
-  }
-  text(input12) {
-    let out = input12;
-    for (const literal of this.literals) out = out.split(literal).join(REDACTED);
-    for (const pattern of PATTERNS) out = out.replace(pattern, REDACTED);
-    return out.replace(
-      ASSIGNMENT,
-      (all, name, sep4, value, at) => looksLikeCode(name, value, out[at + all.length]) ? all : `${name}${sep4}${REDACTED}`
-    );
-  }
-  /** A copy of `value` with every string redacted. */
-  value(value) {
-    return this.walk(value);
-  }
-  walk(value) {
-    if (typeof value === "string") return this.text(value);
-    if (Array.isArray(value)) return value.map((item) => this.walk(item));
-    if (value !== null && typeof value === "object") {
-      const redactedThinking = value.type === "redacted_thinking";
-      return Object.fromEntries(
-        Object.entries(value).map(([k, v]) => [
-          k,
-          (OPAQUE_KEYS.has(k) || redactedThinking && k === "data") && typeof v === "string" ? v : this.walk(v)
-        ])
-      );
-    }
-    return value;
-  }
-};
-
-// src/session/store.ts
 var SESSIONS_DIR = join(".garuda", "sessions");
 var FileSessionStore = class {
   dir;
@@ -1392,15 +1338,22 @@ ${z.prettifyError(parsed.error)}`,
       }
       const readOnly = tool.readOnly && info?.mutates !== true;
       const decision = await context.permissions.check(
-        info === void 0 ? { tool: tool.name, readOnly } : { tool: tool.name, readOnly, info },
+        {
+          tool: tool.name,
+          readOnly,
+          ...info === void 0 ? {} : { info },
+          // The question names this call (0.15: ACP shows it next to the right tool call).
+          callId: call.id
+        },
         context.signal
       );
       if (!decision.allowed) {
         return { content: `Permission denied: ${decision.reason}`, isError: true, denied: true };
       }
       startTime = Date.now();
-      const runContext = decision.hunks === void 0 ? context : {
+      const runContext = decision.hunks === void 0 ? { ...context, callId: call.id } : {
         ...context,
+        callId: call.id,
         approvedHunks: decision.hunks,
         ...info?.preview === void 0 ? {} : { approvedPreview: info.preview }
       };
@@ -1927,50 +1880,6 @@ var repoMapTool = {
 // src/tools/editFile.ts
 import { readFile as readFile3 } from "fs/promises";
 import { z as z4 } from "zod";
-
-// src/tools/atomicWrite.ts
-import { randomBytes as randomBytes3 } from "crypto";
-import { chmod, link, realpath, rename, stat as stat2, unlink, writeFile } from "fs/promises";
-import { basename as basename3, dirname, join as join4 } from "path";
-async function writeFileAtomic(path, content, { createOnly }) {
-  const target = createOnly ? path : await realpath(path);
-  const temp = join4(
-    dirname(target),
-    `.${basename3(target)}.garuda-${randomBytes3(4).toString("hex")}.tmp`
-  );
-  const mode = createOnly ? void 0 : (await stat2(target)).mode & 4095;
-  await writeFile(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
-  try {
-    if (createOnly) {
-      try {
-        await link(temp, target);
-      } catch (error) {
-        const code = error.code;
-        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
-        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
-        await rename(temp, target);
-        return;
-      }
-    } else {
-      await chmod(temp, mode ?? 420);
-      await rename(temp, target);
-      return;
-    }
-  } finally {
-    await unlink(temp).catch(() => {
-    });
-  }
-}
-async function exists(path) {
-  try {
-    await stat2(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// src/tools/editFile.ts
 var input2 = z4.object({
   path: z4.string().min(1).describe("File path, relative to the working root."),
   old_string: z4.string().min(1).describe("The exact text to replace. It must occur exactly once in the file."),
@@ -1994,6 +1903,7 @@ var editFileTool = {
     return {
       target: { kind: "path", path: edit.shown },
       preview,
+      change: { path: edit.absolute, oldText: edit.before, newText: edit.after },
       // Hunk-by-hunk approval only when the user sees every hunk (U0).
       ...previewIsComplete(preview) ? { hunks: true } : {}
     };
@@ -2075,11 +1985,11 @@ function countOccurrences(text, search3) {
 }
 
 // src/tools/glob.ts
-import { stat as stat4 } from "fs/promises";
+import { stat as stat3 } from "fs/promises";
 import { z as z5 } from "zod";
 
 // src/tools/files.ts
-import { stat as stat3 } from "fs/promises";
+import { stat as stat2 } from "fs/promises";
 import { globby } from "globby";
 async function listFiles(base, pattern, root) {
   assertSafePattern(pattern);
@@ -2104,7 +2014,7 @@ function assertSafePattern(pattern) {
 }
 async function isDirectory(path) {
   try {
-    return (await stat3(path)).isDirectory();
+    return (await stat2(path)).isDirectory();
   } catch {
     return false;
   }
@@ -2130,7 +2040,7 @@ var globTool = {
       (p) => !permissions.deniedByPolicy(displayPath(root, p))
     );
     const withTimes = await Promise.all(
-      paths.map(async (p) => ({ p, mtime: (await stat4(p).catch(() => void 0))?.mtimeMs ?? 0 }))
+      paths.map(async (p) => ({ p, mtime: (await stat3(p).catch(() => void 0))?.mtimeMs ?? 0 }))
     );
     withTimes.sort((a, b) => b.mtime - a.mtime || a.p.localeCompare(b.p));
     return {
@@ -2148,7 +2058,7 @@ var globTool = {
 };
 
 // src/tools/grep.ts
-import { lstat, readFile as readFile4, realpath as realpath2, stat as stat5 } from "fs/promises";
+import { lstat, readFile as readFile4, realpath, stat as stat4 } from "fs/promises";
 import { z as z6 } from "zod";
 
 // src/tools/regexWorker.ts
@@ -2298,13 +2208,13 @@ async function search2(args, root, signal, permissions, matcher, mode, max, cont
     const shownPath = displayPath(root, file2);
     if (isSensitive(shownPath) || permissions.deniedByPolicy(shownPath)) continue;
     if ((await lstat(file2).catch(() => void 0))?.isSymbolicLink() === true) {
-      realRoot ??= await realpath2(root);
-      const real = await realpath2(file2).catch(() => void 0);
+      realRoot ??= await realpath(root);
+      const real = await realpath(file2).catch(() => void 0);
       if (real === void 0 || !isInside(realRoot, real)) continue;
       const realShown = displayPath(realRoot, real);
       if (isSensitive(realShown) || permissions.deniedByPolicy(realShown)) continue;
     }
-    const info = await stat5(file2).catch(() => void 0);
+    const info = await stat4(file2).catch(() => void 0);
     if (info === void 0 || !info.isFile() || info.size > LIMITS.grepFileBytes) continue;
     const buffer = await readFile4(file2);
     if (looksBinary(buffer)) continue;
@@ -2577,7 +2487,7 @@ var processManagerTool = {
 };
 
 // src/tools/readFile.ts
-import { readFile as readFile5, stat as stat6 } from "fs/promises";
+import { readFile as readFile5, stat as stat5 } from "fs/promises";
 import { z as z9 } from "zod";
 var input6 = z9.object({
   path: z9.string().min(1).describe("File path, relative to the working root."),
@@ -2599,7 +2509,7 @@ var readFileTool = {
   async run({ path, offset = 1, limit = LIMITS.readLines }, { root, files }) {
     const absolute = await resolveInRoot(root, path);
     const shown = displayPath(root, absolute);
-    const info = await stat6(absolute).catch(() => void 0);
+    const info = await stat5(absolute).catch(() => void 0);
     if (info === void 0) throw new Error(`${shown} does not exist.`);
     if (info.isDirectory()) throw new Error(`${shown} is a folder. Use glob to list its files.`);
     if (info.size > LIMITS.readFileBytes) {
@@ -2632,23 +2542,23 @@ var readFileTool = {
 
 // src/tools/remember.ts
 import { mkdir as mkdir2, readFile as readFile7 } from "fs/promises";
-import { dirname as dirname2 } from "path";
+import { dirname } from "path";
 import { z as z10 } from "zod";
 
 // src/context/instructions.ts
-import { readFile as readFile6, realpath as realpath3 } from "fs/promises";
-import { join as join5 } from "path";
+import { readFile as readFile6, realpath as realpath2 } from "fs/promises";
+import { join as join4 } from "path";
 async function readInRoot(root, name) {
-  const file2 = join5(root, name);
+  const file2 = join4(root, name);
   let real;
   try {
-    real = await realpath3(file2);
+    real = await realpath2(file2);
   } catch (error) {
     const code = error.code;
     if (code === "ENOENT" || code === "ENOTDIR") return void 0;
     throw error;
   }
-  if (!isInside(await realpath3(root), real)) return void 0;
+  if (!isInside(await realpath2(root), real)) return void 0;
   try {
     return await readFile6(real, "utf8");
   } catch (error) {
@@ -2862,7 +2772,7 @@ var rememberTool = {
         `The project memory is full (${MEMORY_MAX_CHARS} characters). Ask the user to clean up ${MEMORY_FILE}.`
       );
     }
-    await mkdir2(dirname2(path), { recursive: true });
+    await mkdir2(dirname(path), { recursive: true });
     await writeFileAtomic(path, next, { createOnly: current === "" });
     return `Saved to ${MEMORY_FILE}. It loads in the next session.`;
   }
@@ -3183,7 +3093,8 @@ function createWebFetchTool(options = {}) {
                     target: { kind: "url", url: next.toString(), host: next.hostname },
                     preview: `  GET ${next.toString()}
   (a redirect from ${new URL(key).host})`
-                  }
+                  },
+                  ...context.callId === void 0 ? {} : { callId: context.callId }
                 },
                 context.signal
               );
@@ -3224,7 +3135,7 @@ function pageText(page, start, maxChars) {
 
 // src/tools/writeFile.ts
 import { mkdir as mkdir3 } from "fs/promises";
-import { dirname as dirname3 } from "path";
+import { dirname as dirname2 } from "path";
 import { z as z13 } from "zod";
 var input9 = z13.object({
   path: z13.string().min(1).describe("Path of the new file, relative to the working root."),
@@ -3240,14 +3151,20 @@ var writeFileTool = {
   inputSchema: input9,
   readOnly: false,
   async describe({ path, content }, { root }) {
-    const shown = displayPath(root, await resolveInRoot(root, path));
-    return { target: { kind: "path", path: shown }, preview: unifiedDiff(shown, "", content) };
+    const absolute = await resolveInRoot(root, path);
+    const shown = displayPath(root, absolute);
+    return {
+      target: { kind: "path", path: shown },
+      preview: unifiedDiff(shown, "", content),
+      // write_file only creates files, so there is no old text (0.15: ACP's diff view).
+      change: { path: absolute, oldText: null, newText: content }
+    };
   },
   async run({ path, content }, context) {
     const { root, files } = context;
     const absolute = await resolveInRoot(root, path);
     const shown = displayPath(root, absolute);
-    await mkdir3(dirname3(absolute), { recursive: true });
+    await mkdir3(dirname2(absolute), { recursive: true });
     try {
       await writeFileAtomic(absolute, content, { createOnly: true });
     } catch (error) {
@@ -3300,7 +3217,7 @@ function defaultTools({
 // src/app/runtime.ts
 import { readFile as readFile16 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { join as join18 } from "path";
+import { join as join17 } from "path";
 
 // src/agents/agentTool.ts
 import { z as z14 } from "zod";
@@ -3461,7 +3378,7 @@ function describeCall(call) {
 // src/agents/custom.ts
 import { createHash as createHash3 } from "crypto";
 import { lstat as lstat2, readdir as readdir3, readFile as readFile8 } from "fs/promises";
-import { join as join6 } from "path";
+import { join as join5 } from "path";
 
 // src/skills/frontmatter.ts
 function parseFrontmatterBlock(text) {
@@ -3548,10 +3465,10 @@ var READ_ONLY_AGENT_TOOLS = [
 ];
 function agentDirs(home, root) {
   return [
-    { dir: join6(home, ".garuda", "agents"), shown: "~/.garuda/agents", source: "user" },
-    { dir: join6(home, ".claude", "agents"), shown: "~/.claude/agents", source: "user" },
-    { dir: join6(root, ".garuda", "agents"), shown: ".garuda/agents", source: "project" },
-    { dir: join6(root, ".claude", "agents"), shown: ".claude/agents", source: "project" }
+    { dir: join5(home, ".garuda", "agents"), shown: "~/.garuda/agents", source: "user" },
+    { dir: join5(home, ".claude", "agents"), shown: "~/.claude/agents", source: "user" },
+    { dir: join5(root, ".garuda", "agents"), shown: ".garuda/agents", source: "project" },
+    { dir: join5(root, ".claude", "agents"), shown: ".claude/agents", source: "project" }
   ];
 }
 async function loadAgents(options) {
@@ -3568,7 +3485,7 @@ async function loadAgents(options) {
       continue;
     }
     for (const entry of entries) {
-      const file2 = join6(place.dir, entry);
+      const file2 = join5(place.dir, entry);
       const shown = `${place.shown}/${entry}`;
       try {
         const info = await lstat2(file2);
@@ -4151,16 +4068,16 @@ function createMoeDispatchTool(options) {
 
 // src/commands/custom.ts
 import { createHash as createHash4 } from "crypto";
-import { lstat as lstat3, readdir as readdir4, readFile as readFile9, stat as stat7 } from "fs/promises";
-import { join as join7, relative, sep } from "path";
-var COMMANDS_DIR = join7(".garuda", "commands");
+import { lstat as lstat3, readdir as readdir4, readFile as readFile9, stat as stat6 } from "fs/promises";
+import { join as join6, relative, sep } from "path";
+var COMMANDS_DIR = join6(".garuda", "commands");
 var COMMAND_MAX_CHARS = 2e4;
 var MAX_FILES = 200;
 var NAME = /^[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)*$/;
 async function loadCommands(options) {
   const problems = [];
-  const user = await loadDir(join7(options.home, COMMANDS_DIR), "user", problems);
-  const project = join7(options.home, COMMANDS_DIR) === join7(options.root, COMMANDS_DIR) ? [] : await loadDir(join7(options.root, COMMANDS_DIR), "project", problems);
+  const user = await loadDir(join6(options.home, COMMANDS_DIR), "user", problems);
+  const project = join6(options.home, COMMANDS_DIR) === join6(options.root, COMMANDS_DIR) ? [] : await loadDir(join6(options.root, COMMANDS_DIR), "project", problems);
   const byName = /* @__PURE__ */ new Map();
   for (const command of [...user, ...project]) {
     if (options.builtins.includes(command.name)) {
@@ -4190,7 +4107,7 @@ async function loadDir(dir, source, problems) {
   }
   const out = [];
   for (const rel of files) {
-    const file2 = join7(dir, rel);
+    const file2 = join6(dir, rel);
     const name = relative(dir, file2).slice(0, -3).split(sep).join(":").toLowerCase();
     if (!NAME.test(name)) {
       problems.push(`${file2}: a command name may hold only a\u2013z, 0\u20139, "-" and "_".`);
@@ -4201,7 +4118,7 @@ async function loadDir(dir, source, problems) {
         problems.push(`${file2}: a project command may not be a symbolic link; ignored.`);
         continue;
       }
-      if (!(await stat7(file2)).isFile()) continue;
+      if (!(await stat6(file2)).isFile()) continue;
       const text = await readFile9(file2, "utf8");
       if (text.length > COMMAND_MAX_CHARS) {
         problems.push(`${file2}: longer than ${COMMAND_MAX_CHARS} characters; ignored.`);
@@ -4293,18 +4210,18 @@ function commandConsent(command, changed, isolation) {
 
 // src/format/formatters.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "fs";
-import { delimiter, extname, join as join8 } from "path";
+import { delimiter, extname, join as join7 } from "path";
 var JS_EXTENSIONS = ["js", "jsx", "mjs", "cjs", "ts", "tsx", "mts", "cts"];
 function detectFormatters(root, path, settings = {}) {
   const found = [];
   const onPath = (name) => findOnPath(name, path);
   const local = (name) => {
-    const file2 = join8(root, "node_modules", ".bin", name);
+    const file2 = join7(root, "node_modules", ".bin", name);
     return isFile(file2) ? file2 : void 0;
   };
-  const venv = (name) => [join8(root, ".venv", "bin", name), join8(root, "venv", "bin", name)].find(isFile);
+  const venv = (name) => [join7(root, ".venv", "bin", name), join7(root, "venv", "bin", name)].find(isFile);
   const biome = local("biome");
-  if (biome !== void 0 && ["biome.json", "biome.jsonc"].some((f) => isFile(join8(root, f)))) {
+  if (biome !== void 0 && ["biome.json", "biome.jsonc"].some((f) => isFile(join7(root, f)))) {
     found.push({
       name: "biome",
       extensions: [...JS_EXTENSIONS, "json", "jsonc", "css"],
@@ -4330,9 +4247,9 @@ function detectFormatters(root, path, settings = {}) {
       command: [prettier, "--write", "$FILE"]
     });
   }
-  const pyproject = readText(join8(root, "pyproject.toml"));
+  const pyproject = readText(join7(root, "pyproject.toml"));
   const ruff = venv("ruff") ?? onPath("ruff");
-  if (ruff !== void 0 && (pyproject.includes("[tool.ruff") || ["ruff.toml", ".ruff.toml"].some((f) => isFile(join8(root, f))))) {
+  if (ruff !== void 0 && (pyproject.includes("[tool.ruff") || ["ruff.toml", ".ruff.toml"].some((f) => isFile(join7(root, f))))) {
     found.push({ name: "ruff", extensions: ["py", "pyi"], command: [ruff, "format", "$FILE"] });
   }
   const black = venv("black") ?? onPath("black");
@@ -4340,11 +4257,11 @@ function detectFormatters(root, path, settings = {}) {
     found.push({ name: "black", extensions: ["py", "pyi"], command: [black, "-q", "$FILE"] });
   }
   const gofmt = onPath("gofmt");
-  if (gofmt !== void 0 && isFile(join8(root, "go.mod"))) {
+  if (gofmt !== void 0 && isFile(join7(root, "go.mod"))) {
     found.push({ name: "gofmt", extensions: ["go"], command: [gofmt, "-w", "$FILE"] });
   }
   const rustfmt = onPath("rustfmt");
-  const cargo = readText(join8(root, "Cargo.toml"));
+  const cargo = readText(join7(root, "Cargo.toml"));
   if (rustfmt !== void 0 && cargo !== "") {
     const edition = /^\s*edition\s*=\s*"(\d{4})"/m.exec(cargo)?.[1] ?? "2021";
     found.push({
@@ -4390,9 +4307,9 @@ function hasPrettierConfig(root) {
     "prettier.config.cjs",
     "prettier.config.mjs"
   ];
-  if (files.some((f) => isFile(join8(root, f)))) return true;
+  if (files.some((f) => isFile(join7(root, f)))) return true;
   try {
-    const pkg = JSON.parse(readText(join8(root, "package.json")) || "{}");
+    const pkg = JSON.parse(readText(join7(root, "package.json")) || "{}");
     return pkg.prettier !== void 0;
   } catch {
     return false;
@@ -4401,7 +4318,7 @@ function hasPrettierConfig(root) {
 function findOnPath(name, path) {
   for (const dir of (path ?? "").split(delimiter)) {
     if (dir === "") continue;
-    const file2 = join8(dir, name);
+    const file2 = join7(dir, name);
     if (isFile(file2)) return file2;
   }
   return void 0;
@@ -4424,9 +4341,9 @@ function readText(file2) {
 // src/hooks/config.ts
 import { createHash as createHash5 } from "crypto";
 import { readFile as readFile10 } from "fs/promises";
-import { join as join9 } from "path";
+import { join as join8 } from "path";
 import { z as z17 } from "zod";
-var HOOKS_FILE = join9(".garuda", "hooks.json");
+var HOOKS_FILE = join8(".garuda", "hooks.json");
 var HOOK_EVENTS = ["preToolUse", "postToolUse"];
 var hookSchema = z17.strictObject({
   command: z17.string().min(1),
@@ -4472,8 +4389,8 @@ async function readHooks(file2, source) {
   return { hooks, problems };
 }
 async function loadHooks(home, root) {
-  const user = await readHooks(join9(home, HOOKS_FILE), "user");
-  const project = home === root ? { hooks: [], problems: [] } : await readHooks(join9(root, HOOKS_FILE), "project");
+  const user = await readHooks(join8(home, HOOKS_FILE), "user");
+  const project = home === root ? { hooks: [], problems: [] } : await readHooks(join8(root, HOOKS_FILE), "project");
   return {
     user: user.hooks,
     project: project.hooks,
@@ -4486,10 +4403,10 @@ function hooksHash(hooks) {
 }
 
 // src/hooks/runner.ts
-import { randomBytes as randomBytes4 } from "crypto";
-import { rm as rm2, writeFile as writeFile2 } from "fs/promises";
+import { randomBytes as randomBytes3 } from "crypto";
+import { rm as rm2, writeFile } from "fs/promises";
 import { tmpdir } from "os";
-import { isAbsolute as isAbsolute2, join as join10 } from "path";
+import { isAbsolute as isAbsolute2, join as join9 } from "path";
 var OUTPUT_BYTES = 8e3;
 var FEEDBACK_CHARS = 4e3;
 var HookRunner = class {
@@ -4560,7 +4477,7 @@ ${clean2(r.stderr)}
       });
       return { exitCode: null, signal: "refused by the team policy", timedOut: false, stderr: "" };
     }
-    const file2 = join10(tmpdir(), `garuda-hook-${randomBytes4(6).toString("hex")}.json`);
+    const file2 = join9(tmpdir(), `garuda-hook-${randomBytes3(6).toString("hex")}.json`);
     const data = {
       event: hook.event,
       tool: call.tool,
@@ -4569,14 +4486,14 @@ ${clean2(r.stderr)}
       ...outcome === void 0 ? {} : { result: outcome },
       root
     };
-    await writeFile2(file2, JSON.stringify(data), { mode: 384 });
+    await writeFile(file2, JSON.stringify(data), { mode: 384 });
     const env = {
       GARUDA_HOOK_EVENT: hook.event,
       GARUDA_TOOL: call.tool,
       GARUDA_HOOK_INPUT: file2
     };
     if (target?.kind === "path") {
-      env.GARUDA_FILE = isAbsolute2(target.path) ? target.path : join10(root, target.path);
+      env.GARUDA_FILE = isAbsolute2(target.path) ? target.path : join9(root, target.path);
     }
     if (target?.kind === "command") env.GARUDA_COMMAND = target.command;
     if (target?.kind === "url") env.GARUDA_URL = target.url;
@@ -4642,8 +4559,8 @@ function hooksConsent(hooks, file2, isolation, changed) {
 
 // src/knowledge/index.ts
 import { createHash as createHash7 } from "crypto";
-import { mkdir as mkdir4, readFile as readFile12, stat as stat8, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname5, extname as extname3, join as join13 } from "path";
+import { mkdir as mkdir4, readFile as readFile12, stat as stat7, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname4, extname as extname3, join as join12 } from "path";
 
 // src/knowledge/java.ts
 import { readFileSync as readFileSync3, statSync as statSync2 } from "fs";
@@ -5325,7 +5242,7 @@ function createRustExpert(root) {
 // src/knowledge/plugins.ts
 import { createHash as createHash6 } from "crypto";
 import { readdir as readdir5, readFile as readFile11 } from "fs/promises";
-import { basename as basename4, extname as extname2, join as join12 } from "path";
+import { basename as basename3, extname as extname2, join as join11 } from "path";
 import { pathToFileURL } from "url";
 
 // src/knowledge/python.ts
@@ -5568,7 +5485,7 @@ function openTripleQuote(line) {
 
 // src/knowledge/typescript.ts
 import { readFileSync as readFileSync7, statSync as statSync6 } from "fs";
-import { dirname as dirname4, isAbsolute as isAbsolute7, join as join11, relative as relative2, sep as sep2 } from "path";
+import { dirname as dirname3, isAbsolute as isAbsolute7, join as join10, relative as relative2, sep as sep2 } from "path";
 async function createTypeScriptExpert(root) {
   const ts = (await import("ts6")).default;
   return new TypeScriptExpert(ts, root);
@@ -5734,7 +5651,7 @@ var TypeScriptExpert = class {
     };
   }
   abs(path) {
-    return isAbsolute7(path) ? path : join11(this.root, path);
+    return isAbsolute7(path) ? path : join10(this.root, path);
   }
   rel(file2) {
     return relative2(this.root, file2).split(sep2).join("/");
@@ -5758,7 +5675,7 @@ function declarationKind(ts, node) {
 function compilerOptions(ts, root) {
   let base = {};
   const configPath = ts.findConfigFile(root, (f) => ts.sys.fileExists(f));
-  if (configPath !== void 0 && dirname4(configPath) === root) {
+  if (configPath !== void 0 && dirname3(configPath) === root) {
     const read = ts.readConfigFile(configPath, (f) => ts.sys.readFile(f));
     if (read.config !== void 0) {
       base = ts.parseJsonConfigFileContent(read.config, ts.sys, root).options;
@@ -5821,12 +5738,12 @@ async function discoverPlugins({
 }) {
   const plugins = includeBuiltins ? [...BUILTIN_PLUGINS] : [];
   const warnings = [];
-  const userDir = join12(home, ".garuda", "languages");
+  const userDir = join11(home, ".garuda", "languages");
   const userFiles = await safeReaddir(userDir);
   for (const filename of userFiles) {
     if (!isPluginFile(filename)) continue;
-    const fullPath = join12(userDir, filename);
-    const id = basename4(filename, extname2(filename));
+    const fullPath = join11(userDir, filename);
+    const id = basename3(filename, extname2(filename));
     try {
       const plugin = await loadPluginModule(fullPath, id, "user", root);
       if (plugin) {
@@ -5836,7 +5753,7 @@ async function discoverPlugins({
       warnings.push(`Failed to load user language plugin "${id}": ${error.message}`);
     }
   }
-  const projDir = join12(root, ".garuda", "languages");
+  const projDir = join11(root, ".garuda", "languages");
   const projFiles = (await safeReaddir(projDir)).filter(isPluginFile);
   if (!projectPlugins) {
     if (projFiles.length > 0) {
@@ -5848,8 +5765,8 @@ async function discoverPlugins({
   }
   for (const filename of projFiles) {
     if (!isPluginFile(filename)) continue;
-    const fullPath = join12(projDir, filename);
-    const id = basename4(filename, extname2(filename));
+    const fullPath = join11(projDir, filename);
+    const id = basename3(filename, extname2(filename));
     try {
       const content = await readFile11(fullPath, "utf8");
       const hash2 = createHash6("sha256").update(content).digest("hex");
@@ -6084,7 +6001,7 @@ var KnowledgeIndex = class {
       const callableSymbols = fileSymbols.filter(
         (s) => s.kind === "function" || s.kind === "method" || s.kind === "constructor" || s.kind === "class"
       );
-      const content = await readFile12(join13(this.root, filePath), "utf8").catch(() => "");
+      const content = await readFile12(join12(this.root, filePath), "utf8").catch(() => "");
       const lines = content.split("\n");
       for (const site of sites) {
         const enclosing = enclosingSymbol(filePath, content, lines, site.line, callableSymbols);
@@ -6274,7 +6191,7 @@ var KnowledgeIndex = class {
     const prefix = dir.replace(/^\.?\/?/, "").replace(/\/?$/, dir === "" || dir === "." ? "" : "/");
     for (const { expert, files } of await this.byExpert()) {
       for (const path of files) {
-        const content = await readFile12(join13(this.root, path), "utf8").catch(() => void 0);
+        const content = await readFile12(join12(this.root, path), "utf8").catch(() => void 0);
         if (content === void 0) continue;
         const hash2 = createHash7("sha256").update(content).digest("hex");
         const cached = cache.files[path];
@@ -6346,7 +6263,7 @@ var KnowledgeIndex = class {
       const ext = extname3(path);
       const group = groups.find((g) => g.expert.extensions.includes(ext));
       if (group === void 0) continue;
-      const info = await stat8(absolute).catch(() => void 0);
+      const info = await stat7(absolute).catch(() => void 0);
       if (info === void 0 || info.size > MAX_FILE_BYTES) continue;
       group.files.push(path);
       if (++count >= MAX_FILES2) break;
@@ -6355,7 +6272,7 @@ var KnowledgeIndex = class {
   }
   async loadCache() {
     try {
-      const cache = JSON.parse(await readFile12(join13(this.root, GRAPH_FILE), "utf8"));
+      const cache = JSON.parse(await readFile12(join12(this.root, GRAPH_FILE), "utf8"));
       if (cache.version === GRAPH_VERSION) return cache;
     } catch {
     }
@@ -6363,10 +6280,10 @@ var KnowledgeIndex = class {
   }
   /** Best effort (0.14, review): a read-only checkout gives the map without a cache, not an error. */
   async saveCache(cache) {
-    const path = join13(this.root, GRAPH_FILE);
+    const path = join12(this.root, GRAPH_FILE);
     try {
-      await mkdir4(dirname5(path), { recursive: true });
-      await writeFile3(path, JSON.stringify(cache));
+      await mkdir4(dirname4(path), { recursive: true });
+      await writeFile2(path, JSON.stringify(cache));
     } catch {
     }
   }
@@ -6603,8 +6520,8 @@ function repairServerBlocks(message) {
 
 // src/skills/load.ts
 import { createHash as createHash8 } from "crypto";
-import { lstat as lstat4, readdir as readdir6, readFile as readFile13, stat as stat9 } from "fs/promises";
-import { join as join14 } from "path";
+import { lstat as lstat4, readdir as readdir6, readFile as readFile13, stat as stat8 } from "fs/promises";
+import { join as join13 } from "path";
 var SKILL_FILE = "SKILL.md";
 var SKILL_NAME = /^(?!-)(?!.*--)[a-z0-9-]{1,64}(?<!-)$/;
 var SKILL_MAX_CHARS = 5e4;
@@ -6612,10 +6529,10 @@ var DESCRIPTION_MAX_CHARS2 = 1536;
 var MAX_SKILLS = 100;
 function skillDirs(home, root) {
   return [
-    { dir: join14(home, ".garuda", "skills"), shown: "~/.garuda/skills", source: "user" },
-    { dir: join14(home, ".claude", "skills"), shown: "~/.claude/skills", source: "user" },
-    { dir: join14(root, ".garuda", "skills"), shown: ".garuda/skills", source: "project" },
-    { dir: join14(root, ".claude", "skills"), shown: ".claude/skills", source: "project" }
+    { dir: join13(home, ".garuda", "skills"), shown: "~/.garuda/skills", source: "user" },
+    { dir: join13(home, ".claude", "skills"), shown: "~/.claude/skills", source: "user" },
+    { dir: join13(root, ".garuda", "skills"), shown: ".garuda/skills", source: "project" },
+    { dir: join13(root, ".claude", "skills"), shown: ".claude/skills", source: "project" }
   ];
 }
 async function loadSkills(options) {
@@ -6655,11 +6572,11 @@ async function loadDir2(place, problems) {
   const out = [];
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const dir = join14(place.dir, entry);
+    const dir = join13(place.dir, entry);
     const shown = `${place.shown}/${entry}`;
-    const file2 = join14(dir, SKILL_FILE);
+    const file2 = join13(dir, SKILL_FILE);
     try {
-      if (!(await stat9(dir)).isDirectory()) continue;
+      if (!(await stat8(dir)).isDirectory()) continue;
       if (place.source === "project" && ((await lstat4(dir)).isSymbolicLink() || (await lstat4(file2)).isSymbolicLink())) {
         problems.push(`${shown}: a project skill may not be a symbolic link; ignored.`);
         continue;
@@ -6757,8 +6674,8 @@ function skillConsent(skill, changed, isolation) {
 }
 
 // src/skills/tool.ts
-import { readdir as readdir7, readFile as readFile14, realpath as realpath4, stat as stat10 } from "fs/promises";
-import { join as join15, relative as relative3, resolve, sep as sep3 } from "path";
+import { readdir as readdir7, readFile as readFile14, realpath as realpath3, stat as stat9 } from "fs/promises";
+import { join as join14, relative as relative3, resolve, sep as sep3 } from "path";
 import { z as z18 } from "zod";
 var input10 = z18.object({
   name: z18.string().min(1).describe("The skill name from the list."),
@@ -6828,11 +6745,11 @@ async function skillText(skill, args, place) {
 async function readSkillFile(skill, file2) {
   const target = resolve(skill.dir, file2);
   try {
-    const [realDir, realTarget] = await Promise.all([realpath4(skill.dir), realpath4(target)]);
+    const [realDir, realTarget] = await Promise.all([realpath3(skill.dir), realpath3(target)]);
     if (!isInside(realDir, realTarget) || !isInside(skill.dir, target)) {
       return { error: true, text: `"${file2}" is outside the skill folder.` };
     }
-    if (!(await stat10(realTarget)).isFile()) {
+    if (!(await stat9(realTarget)).isFile()) {
       return { error: true, text: `"${file2}" is not a file.` };
     }
     const buffer = await readFile14(realTarget);
@@ -6869,8 +6786,8 @@ async function listFiles2(dir) {
     for (const name of entries) {
       if (out.length >= MAX_FILES_LISTED) return;
       if (name.startsWith(".")) continue;
-      const full = join15(current, name);
-      const info = await stat10(full).catch(() => void 0);
+      const full = join14(current, name);
+      const info = await stat9(full).catch(() => void 0);
       if (info?.isDirectory()) {
         if (depth < 3) await walk(full, depth + 1);
       } else if (info?.isFile()) {
@@ -6960,9 +6877,9 @@ No results.
 
 // src/undo/snapshots.ts
 import { createHash as createHash9 } from "crypto";
-import { mkdir as mkdir5, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir5, writeFile as writeFile3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { join as join16 } from "path";
+import { join as join15 } from "path";
 var SNAPSHOT_EXCLUDES = [
   ".git",
   ".garuda/sessions/",
@@ -7059,7 +6976,7 @@ var SnapshotStore = class {
     this.ready ??= (async () => {
       await mkdir5(this.dir, { recursive: true, mode: 448 });
       await this.git("init -q", signal, true);
-      await writeFile4(join16(this.dir, "info", "exclude"), `${SNAPSHOT_EXCLUDES.join("\n")}
+      await writeFile3(join15(this.dir, "info", "exclude"), `${SNAPSHOT_EXCLUDES.join("\n")}
 `);
     })().catch((error) => {
       this.ready = void 0;
@@ -7113,7 +7030,7 @@ var SnapshotStore = class {
 };
 function storeDir(root, home = homedir3()) {
   const id = createHash9("sha256").update(root).digest("hex").slice(0, 16);
-  return join16(home, ".garuda", "snapshots", id);
+  return join15(home, ".garuda", "snapshots", id);
 }
 function shellQuote(text) {
   return `'${text.replace(/'/g, "'\\''")}'`;
@@ -7124,7 +7041,7 @@ function tree(id) {
 }
 
 // src/app/mentions.ts
-import { readdir as readdir8, readFile as readFile15, stat as stat11 } from "fs/promises";
+import { readdir as readdir8, readFile as readFile15, stat as stat10 } from "fs/promises";
 var MAX_ATTACHMENTS = 10;
 var MAX_TOTAL_CHARS = 15e4;
 var MAX_FOLDER_ENTRIES = 200;
@@ -7150,7 +7067,7 @@ async function attachMentions(prompt, root, files, denial = async () => void 0)
       }
       continue;
     }
-    const info = await stat11(absolute).catch(() => void 0);
+    const info = await stat10(absolute).catch(() => void 0);
     if (info === void 0) continue;
     const shown = displayPath(root, absolute);
     if (attachments.length >= MAX_ATTACHMENTS) {
@@ -7353,7 +7270,7 @@ var ModelState = class {
 // src/app/network.ts
 import { createHash as createHash10 } from "crypto";
 import { existsSync as existsSync3 } from "fs";
-import { basename as basename5, delimiter as delimiter2, join as join17 } from "path";
+import { basename as basename4, delimiter as delimiter2, join as join16 } from "path";
 function networkHash(entries) {
   const canonical = [...new Set(entries.map((e) => e.trim().toLowerCase()))].sort();
   return createHash10("sha256").update(JSON.stringify(canonical)).digest("hex");
@@ -7388,10 +7305,10 @@ function networkConsent(entries, isolation, changed) {
   };
 }
 function nodeBinary(execPath = process.execPath, path = process.env.PATH ?? "") {
-  if (/^node(\.exe)?$/.test(basename5(execPath))) return execPath;
+  if (/^node(\.exe)?$/.test(basename4(execPath))) return execPath;
   for (const dir of path.split(delimiter2)) {
     if (dir === "") continue;
-    const candidate = join17(dir, "node");
+    const candidate = join16(dir, "node");
     if (existsSync3(candidate)) return candidate;
   }
   return void 0;
@@ -8605,7 +8522,7 @@ ${neutralizeTags(output)}`
         text: "There is no finished plan in this chat. Make one in plan mode (/plan), then type /schedule."
       };
     }
-    const { createJob } = await import("./create-Y5SXJUXO.js");
+    const { createJob } = await import("./create-VXIH2GUZ.js");
     const created = await createJob({
       root: this.root,
       executor: this.executor,
@@ -8672,7 +8589,7 @@ ${result.stderr.text}`)
    */
   async cancelJob(id, agent = {}) {
     const { loadJob, saveJob } = await import("./job-3NYDMP2M.js");
-    const { defaultAgentEnv, nightSpec, removeAgent, removeSpec } = await import("./launchd-2FL5UN2U.js");
+    const { defaultAgentEnv, nightSpec, removeAgent, removeSpec } = await import("./launchd-SSX362VG.js");
     if (id === "night") {
       const removed = await removeSpec(
         agent.executor ?? this.executor,
@@ -8704,8 +8621,8 @@ ${result.stderr.text}`)
    */
   async deleteJob(id, signal, agent = {}) {
     const { loadJob } = await import("./job-3NYDMP2M.js");
-    const { defaultAgentEnv, removeAgent } = await import("./launchd-2FL5UN2U.js");
-    const { jobLeftovers, removeJob } = await import("./remove-AENULZZE.js");
+    const { defaultAgentEnv, removeAgent } = await import("./launchd-SSX362VG.js");
+    const { jobLeftovers, removeJob } = await import("./remove-6GDSTAIO.js");
     let job;
     try {
       job = await loadJob(this.root, id);
@@ -8840,7 +8757,7 @@ ${result.stderr.text}`)
         if (known === hash2) {
           active = [...active, ...project];
         } else {
-          const file2 = join18(this.root, HOOKS_FILE);
+          const file2 = join17(this.root, HOOKS_FILE);
           const request = hooksConsent(project, file2, this.executor.isolation, known !== void 0);
           const choice = await this.approver.ask(request, signal);
           if (choice !== "deny") active = [...active, ...project];
@@ -8877,7 +8794,7 @@ ${result.stderr.text}`)
    * The files it writes are new only; the turn's own writes go through the normal approvals.
    */
   async init(signal) {
-    const { runInit } = await import("./run-66Y6R2KU.js");
+    const { runInit } = await import("./run-ML6GSPN4.js");
     const result = await runInit({
       root: this.root,
       home: this.commandsHome,
@@ -9032,7 +8949,7 @@ ${result.stderr.text}`)
   }
   /** Install a language server into ~/.garuda/lsp (the user asked for it). */
   async installLsp(language, signal) {
-    const { installServer } = await import("./install-XWLU22OH.js");
+    const { installServer } = await import("./install-EWDSPFFZ.js");
     const result = await installServer(language, {
       executor: this.executor,
       home: this.lspHome,
@@ -9043,7 +8960,7 @@ ${result.stderr.text}`)
   }
   /** autoInstall (~/.garuda/lsp.json): ask before a managed install. */
   async askInstall(language, signal) {
-    const { installCommand } = await import("./install-XWLU22OH.js");
+    const { installCommand } = await import("./install-EWDSPFFZ.js");
     const { LANGUAGE_LABELS } = await import("./manager-4PMSXT47.js");
     const { managedLabel, managedDir } = await import("./servers-6YDGWOZ6.js");
     const dir = managedDir(language, this.lspHome);
@@ -9076,7 +8993,7 @@ ${result.stderr.text}`)
   async startMcp(signal) {
     if (this.mcpServers.length === 0) return;
     this.mcpStarted ??= (async () => {
-      const { McpManager } = await import("./manager-EBTYO2GR.js");
+      const { McpManager } = await import("./manager-AWU4NHHK.js");
       const { AuthStore } = await import("./oauth-W6OK6XXO.js");
       const manager = new McpManager({
         root: this.root,
@@ -9303,7 +9220,6 @@ async function gatedProjectSettings(options) {
 }
 
 export {
-  keepSecretForRedaction,
   FileSessionStore,
   parseRecords,
   newSessionId,
@@ -9338,4 +9254,4 @@ export {
   modelFacts,
   Runtime
 };
-//# sourceMappingURL=chunk-ITITLNAR.js.map
+//# sourceMappingURL=chunk-WIJL72ZE.js.map