@garuda-agent/garuda 0.18.0 → 0.18.2

package/dist/{chunk-FARS4R67.js → chunk-AX3A5KPH.js}

@@ -1,4 +1,8 @@
 #!/usr/bin/env node
+import {
+  receiptText,
+  screenReaderMode
+} from "./chunk-2OYTNNUJ.js";
 import {
   serverCallText,
   serverResultSummary
@@ -85,6 +89,19 @@ var PlainRenderer = class {
   info(text) {
     this.line(this.paint("dim", text));
   }
+  /** UX U1: a box on a terminal of 60 columns or more, else plain lines (stderr, like notes). */
+  receipt(receipt) {
+    const tty = this.err.isTTY === true;
+    const columns = tty ? this.err.columns : void 0;
+    this.line(
+      `
+${receiptText(receipt, {
+        ...columns === void 0 ? {} : { columns },
+        ...this.color ? { paint: (style, text) => this.paint(style, text) } : {},
+        screenReader: screenReaderMode()
+      })}`
+    );
+  }
   warn(text) {
     this.line(this.paint("yellow", text));
   }
@@ -203,4 +220,4 @@ export {
   summariseCall,
   summariseResult
 };
-//# sourceMappingURL=chunk-FARS4R67.js.map
+//# sourceMappingURL=chunk-AX3A5KPH.js.map

package/dist/chunk-CFDRP6XW.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+
+// src/version.ts
+var VERSION = "0.18.2";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-CFDRP6XW.js.map

package/dist/chunk-E6YRCDSF.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+
+// src/buildInfo.ts
+var BUILD_COMMIT = true ? "fc82b442119fbfe9c40bd2903b344c7e1166b2a8" : void 0;
+
+export {
+  BUILD_COMMIT
+};
+//# sourceMappingURL=chunk-E6YRCDSF.js.map

package/dist/{chunk-OQ26W5L4.js → chunk-HP6EGFHV.js}

@@ -1,7 +1,18 @@
 #!/usr/bin/env node
 import {
   colorDiff
-} from "./chunk-4JSUUDFQ.js";
+} from "./chunk-VISKX36R.js";
+import {
+  budgetNote,
+  chatStopMessage,
+  formatTokens,
+  formatUsd,
+  stopMessage,
+  usageLine
+} from "./chunk-2OYTNNUJ.js";
+import {
+  tourChoice
+} from "./chunk-Y62J7PTD.js";
 import {
   AuditDirError,
   SPECIALIST_SPECS,
@@ -18,19 +29,21 @@ import {
   repoMapText,
   repoMapTool,
   verifyAuditDir
-} from "./chunk-NHWHG3SW.js";
+} from "./chunk-STVFWSIL.js";
+import {
+  hasReceipt
+} from "./chunk-4QRTTRVK.js";
 import {
-  budgetSpent,
   isCostIncomplete,
   pendingChildTokens
-} from "./chunk-UKIE4AAM.js";
+} from "./chunk-NLS7GMF7.js";
 import {
   WEB_SEARCH_USD,
   totalTokens
 } from "./chunk-7KBOIPUT.js";
 import {
   BUILTIN_COMMANDS
-} from "./chunk-23FXBNBB.js";
+} from "./chunk-MNE7HHX2.js";
 import {
   LSP_LANGUAGES
 } from "./chunk-EU7PA45O.js";
@@ -76,70 +89,19 @@ function focusEvent(input) {
   return void 0;
 }
 
-// src/cli/report.ts
-function formatTokens(n) {
-  if (n < 1e3) return String(n);
-  if (n < 1e6) return `${(n / 1e3).toFixed(1)}k`;
-  return `${(n / 1e6).toFixed(1)}M`;
-}
-function formatUsd(usd, incomplete = false) {
-  if (usd === void 0) return "cost unknown";
-  const amount = usd < 0.01 ? `$${usd.toFixed(4)}` : `$${usd.toFixed(2)}`;
-  return incomplete ? `\u2265 ${amount} (incomplete)` : amount;
-}
-function budgetNote(session) {
-  const unreported = session.unreportedTokens;
-  const children = pendingChildTokens(session);
-  if (unreported <= 0 && children <= 0) return void 0;
-  const parts = [
-    ...unreported > 0 ? [`${formatTokens(unreported)} reserved without reported usage`] : [],
-    ...children > 0 ? [`${formatTokens(children)} from subagents with no report`] : []
-  ];
-  return `budget ${formatTokens(budgetSpent(session))} tokens (${parts.join(", ")})`;
-}
-function usageLine(result, session, runCostUsd, contextWindow, runCostIncomplete = false) {
-  const u = result.usage;
-  const input = u.inputTokens + u.cacheReadTokens + u.cacheWriteTokens;
-  const percent = Math.round(session.contextTokens / contextWindow * 100);
-  return [
-    `${result.stopReason} \xB7 ${result.steps} step(s)`,
-    `${budgetNote(session) !== void 0 ? "reported " : ""}${formatTokens(input)} in (${formatTokens(u.cacheReadTokens)} cached) / ${formatTokens(u.outputTokens)} out`,
-    formatUsd(runCostUsd, runCostIncomplete),
-    `context ${percent}% of ${formatTokens(contextWindow)}`,
-    `session ${formatTokens(totalTokens(session.usage))} tokens, ${formatUsd(session.costUsd, isCostIncomplete(session))}`,
-    ...budgetNote(session) === void 0 ? [] : [budgetNote(session)]
-  ].join(" \xB7 ");
-}
-function stopMessage(reason, limits) {
-  switch (reason) {
-    case "done":
-      return void 0;
-    case "max_steps":
-      return `Stopped: the run reached the step limit (${limits.maxSteps}). Use --resume to continue, or raise limits.maxSteps in .garuda/settings.json.`;
-    case "token_budget":
-      return `Stopped: the session used its token budget (${formatTokens(limits.tokenBudget)} tokens). Raise limits.tokenBudget in .garuda/settings.json to continue.`;
-    case "repeated_calls":
-      return "Stopped: the agent made the same tool call 3 times in a row, so it may be stuck. Use --resume with a hint to continue.";
-    case "max_tokens":
-      return "Stopped: the response reached the output token limit.";
-    case "refusal":
-      return "Stopped: the model refused the request.";
-  }
-}
-
 // src/cli/turn.ts
-async function runTurnInTerminal(runtime, approver, renderer, prompt, exitNow, watcher) {
+async function runTurnInTerminal(runtime, approver, renderer, prompt, exitNow, watcher, options = {}) {
   const started = performance.now();
   watcher?.turnStarted();
   let outcome;
   try {
-    outcome = await runTurn(runtime, approver, renderer, prompt, exitNow);
+    outcome = await runTurn(runtime, approver, renderer, prompt, exitNow, options);
     return outcome;
   } finally {
     watcher?.turnEnded(outcome, performance.now() - started);
   }
 }
-async function runTurn(runtime, approver, renderer, prompt, exitNow) {
+async function runTurn(runtime, approver, renderer, prompt, exitNow, options) {
   const controller = new AbortController();
   const stop = () => {
     if (controller.signal.aborted) exitNow();
@@ -158,12 +120,20 @@ async function runTurn(runtime, approver, renderer, prompt, exitNow) {
     if (session !== void 0) {
       const runCost = session.costUsd === void 0 ? void 0 : session.costUsd - costBefore;
       const runIncomplete = session.unreportedTokens > unreportedBefore || pendingChildTokens(session) > pendingBefore || session.costIncomplete && !incompleteBefore;
-      renderer.info(
-        `
+      const receipt = runtime.lastReceipt;
+      if (receipt !== void 0 && hasReceipt(receipt) && renderer.receipt !== void 0) {
+        renderer.receipt(receipt);
+      } else {
+        renderer.info(
+          `
 [${usageLine(result, session, runCost, runtime.limits.contextWindow, runIncomplete)}]`
-      );
+        );
+      }
     }
-    const message = stopMessage(result.stopReason, runtime.limits);
+    const message = (options.chat === true ? chatStopMessage : stopMessage)(
+      result.stopReason,
+      runtime.limits
+    );
     if (message !== void 0) renderer.warn(message);
     return { kind: "done", result };
   } catch (error) {
@@ -208,6 +178,34 @@ function modeText(runtime) {
   return runtime.mode === "plan" ? "Plan mode: the agent reads and plans. It cannot change files; commands run read-only in the sandbox. /build (or Shift+Tab) switches back." : "Build mode: the agent can change files and run commands, with the usual approvals.";
 }
 
+// src/cli/chat/rewind.ts
+function ago(at, now) {
+  if (at === void 0) return "";
+  const minutes = Math.floor(Math.max(0, now - at) / 6e4);
+  if (minutes < 1) return "<1 min";
+  if (minutes < 60) return `${minutes} min`;
+  const hours = Math.floor(minutes / 60);
+  return hours < 48 ? `${hours} h` : `${Math.floor(hours / 24)} d`;
+}
+function rewindList(points, now = Date.now()) {
+  if (points.length === 0) return "There is no turn to rewind to yet.";
+  const width = Math.min(40, Math.max(...points.map((p) => p.prompt.length + 2)));
+  const rows = points.map((p, i) => {
+    const prompt = `"${p.prompt}"`;
+    const shown = prompt.length > width ? `${prompt.slice(0, width - 2)}\u2026"` : prompt;
+    const files = p.changedFiles === void 0 ? "" : p.changedFiles === 0 ? "no files" : `${p.changedFiles} file${p.changedFiles === 1 ? "" : "s"}`;
+    const cost = p.costUsd === void 0 ? "" : formatUsd(p.costUsd);
+    const note = p.conversation ? "" : "  (before a compaction: files only)";
+    return `  ${String(i + 1).padStart(3)}  ${shown.padEnd(width)}  ${files.padEnd(8)}  ${cost.padEnd(8)}  ${ago(p.at, now)}${note}`.trimEnd();
+  }).reverse();
+  return [
+    "Rewind to the start of a turn (newest first):",
+    ...rows,
+    "/rewind <n> goes back to the start of turn n (/redo brings the turns back).",
+    "/rewind fork <n> starts a new session from there; this one stays as it is."
+  ].join("\n");
+}
+
 // src/cli/chat/commands.ts
 var HELP = [
   "Type a task and press Enter. @path attaches a file or folder, !command runs a command, Tab completes.",
@@ -217,7 +215,7 @@ var HELP = [
   "  /session   the session id and file",
   "  /sessions  this project's sessions; /sessions <n|id> continues one; rename, delete",
   "  /models    the models; /models <n|id|opus|sonnet|haiku> switches for this chat",
-  "  /export    write this conversation as Markdown; /export <file>",
+  "  /export    write this conversation as Markdown; /export <file>; /export --html [file] as one page",
   "  /compact   summarise the older turns now; /compact <what to keep>",
   "  /diff      file changes in this session; /diff last (last turn); /diff [last] <path>",
   "  /schedule  make the last plan a job that runs later: /schedule [HH:MM], then garuda run <id>",
@@ -240,6 +238,7 @@ var HELP = [
   "  /build     build mode: change files and run commands (the default); /build <task> runs it",
   "  /undo      take back the last turn: its file changes and its messages",
   "  /redo      bring back the last undone turn",
+  "  /rewind    the turns of this session; /rewind <n> goes back to turn n, /rewind fork <n> forks",
   "  /init      set up this folder: AGENTS.md, and files from other agents (Claude Code, OpenCode \u2026)",
   "  /editor    write the next prompt in $VISUAL or $EDITOR (also Ctrl-G)",
   "  /details   show or hide the result line under each tool call; /details on|off",
@@ -362,6 +361,18 @@ async function runCommand(text, { runtime, renderer, sessionPath, output, signal
     await expertsCommand(runtime, renderer);
   } else if (command === "/audit") {
     await auditCommand(runtime, renderer, text.slice(command.length).trim());
+  } else if (command === "/rewind") {
+    const args = text.slice(command.length).trim().split(/\s+/).filter((a) => a !== "");
+    const signal2 = new AbortController().signal;
+    const fork = args[0] === "fork";
+    const number = fork ? args[1] : args[0];
+    if (number === void 0 && !fork) renderer.info(rewindList(runtime.rewindPoints));
+    else if (number === void 0 || !/^\d+$/.test(number) || args.length > (fork ? 2 : 1)) {
+      renderer.info("Use: /rewind, /rewind <n> or /rewind fork <n>.");
+    } else {
+      const turn = Number(number);
+      renderer.info(await (fork ? runtime.fork(turn, signal2) : runtime.rewind(turn, signal2)));
+    }
   } else if (command === "/undo" || command === "/redo") {
     const signal2 = new AbortController().signal;
     renderer.info(await (command === "/undo" ? runtime.undo(signal2) : runtime.redo(signal2)));
@@ -484,10 +495,10 @@ async function diffCommand(runtime, renderer, arg, output) {
       `Changes${where} ${since} (${result.files.length} file${result.files.length === 1 ? "" : "s"}, +${plus} \u2212${minus}). Changes you made yourself count too.`,
       ...rows,
       "",
-      colorDiff(lines.slice(0, DIFF_LINES).join("\n")),
+      colorDiff(lines.slice(0, DIFF_LINES).join("\n"), process.stdout.columns),
       ...cut ? [`\u2026 ${lines.length - DIFF_LINES} more lines. ${more}`] : []
     ].join("\n"),
-    cut ? { title: `diff ${since}${where}`, text: colorDiff(result.patch) } : void 0
+    cut ? { title: `diff ${since}${where}`, text: colorDiff(result.patch, process.stdout.columns) } : void 0
   );
 }
 async function jobsCommand(runtime, renderer, id) {
@@ -513,7 +524,7 @@ async function jobsCommand(runtime, renderer, id) {
     return;
   }
   const jobs = await listJobs2(runtime.root);
-  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-3A3ONEW5.js");
+  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-QG6R5RAK.js");
   const night = nightAgentTime(runtime.root, defaultAgentEnv());
   const nightLine = night === void 0 ? [] : [
     `Night shift: launchd starts the queue at ${night.toTimeString().slice(0, 5)} on ${night.toDateString()} (/jobs cancel night removes it).`
@@ -551,8 +562,11 @@ async function exportCommand(runtime, renderer, file) {
     renderer.info("There is no conversation to export yet.");
     return;
   }
-  const { sessionMarkdown, writeExport } = await import("./export-SJ3DUP6W.js");
-  const result = await writeExport(runtime.root, id, sessionMarkdown(records, id), file);
+  const { sessionMarkdown, writeExport } = await import("./export-ZPF3AMO6.js");
+  const html = /^--html(\s|$)/.test(file);
+  const name = html ? file.slice("--html".length).trim() : file;
+  const text = html ? (await import("./exportHtml-ISISG5HG.js")).sessionHtml(records, id) : sessionMarkdown(records, id);
+  const result = await writeExport(runtime.root, id, text, name, html ? ".html" : ".md");
   if ("problem" in result) renderer.warn(result.problem);
   else
     renderer.info(
@@ -896,6 +910,7 @@ var RUN_AT_ONCE = /* @__PURE__ */ new Set([
   "build",
   "undo",
   "redo",
+  "rewind",
   "init",
   "editor",
   "details",
@@ -1097,8 +1112,30 @@ function rootFiles(root, now = Date.now) {
   };
 }
 
+// src/cli/chat/stop.ts
+var CONTINUE_PROMPT = "Go on with the task from where you stopped. You reached the step limit; the conversation above has your work so far.";
+var SUMMARY_PROMPT = "Stop the work here and do not call tools. Say what is done, what is left, and the next step.";
+async function stopHandoff(approver, maxSteps, isolation, signal = new AbortController().signal) {
+  const request = {
+    tool: "step_limit",
+    target: { kind: "input", json: "{}" },
+    preview: `The turn used its ${maxSteps} steps. The next turn gets ${maxSteps} more.`,
+    isolation,
+    title: "The task is not finished.",
+    question: "Go on?",
+    labels: {
+      once: `Go on for ${maxSteps} more steps`,
+      session: "Summarise what is done and what is left",
+      deny: "Stop here"
+    }
+  };
+  const choice = await approver.ask(request, signal);
+  return choice === "once" ? "more" : choice === "session" ? "summary" : "stop";
+}
+
 // src/cli/chat/controller.ts
-async function runChat(runtime, store, sessionPath, exitNow, notifier) {
+async function runChat(runtime, store, sessionPath, exitNow, notifier, tour) {
+  let tourTasks = tour;
   store.onToggleMode = () => {
     runtime.setMode(runtime.mode === "plan" ? "build" : "plan");
     return statusOf(runtime);
@@ -1117,7 +1154,8 @@ async function runChat(runtime, store, sessionPath, exitNow, notifier) {
     void args.refresh();
     const input = await store.nextInput();
     if (input === void 0) return;
-    const text = input.trim();
+    const text = tourChoice(input.trim(), tourTasks);
+    tourTasks = void 0;
     let prompt = text;
     if (text.startsWith("!") && text.length > 1) {
       await runShell(runtime, store, text.slice(1).trim());
@@ -1167,10 +1205,20 @@ async function runChat(runtime, store, sessionPath, exitNow, notifier) {
       store.begin(display, prompt === display);
       let outcome;
       try {
-        outcome = await runTurnInTerminal(runtime, store, store, prompt, exitNow, notifier);
+        outcome = await runTurnInTerminal(runtime, store, store, prompt, exitNow, notifier, {
+          chat: true
+        });
       } finally {
         store.end(statusOf(runtime));
       }
+      if (outcome.kind === "done" && outcome.result.stopReason === "max_steps") {
+        const next2 = await stopHandoff(store, runtime.limits.maxSteps, runtime.executor.isolation);
+        store.refreshStatus(statusOf(runtime));
+        if (next2 === "stop") break;
+        prompt = next2 === "more" ? CONTINUE_PROMPT : SUMMARY_PROMPT;
+        display = prompt;
+        continue;
+      }
       if (!planning || outcome.kind !== "done" || outcome.result.stopReason !== "done") break;
       const next = await planHandoff(runtime, store);
       store.refreshStatus(statusOf(runtime));
@@ -1252,6 +1300,14 @@ var CommandArgs = class {
         return (first === "cancel" || first === "delete") && second === void 0 ? this.jobs : [];
       case "diff":
         return first === void 0 ? words("last") : [];
+      case "rewind": {
+        const turns = this.runtime.rewindPoints.map((p, i) => ({
+          value: String(i + 1),
+          hint: p.prompt
+        }));
+        if (first === void 0) return [...words("fork"), ...turns];
+        return first === "fork" && second === void 0 ? turns : [];
+      }
       case "mcp":
         if (first === void 0) return words("logout");
         return first === "logout" && second === void 0 ? this.runtime.mcpStatus().map((s) => ({ value: s.name })) : [];
@@ -1278,8 +1334,6 @@ export {
   reportsFocus,
   FocusTracker,
   focusEvent,
-  formatTokens,
-  stopMessage,
   BUILD_PROMPT,
   planHandoff,
   runCommand,
@@ -1288,9 +1342,12 @@ export {
   fuzzyFiles,
   rootFiles,
   runTurnInTerminal,
+  CONTINUE_PROMPT,
+  SUMMARY_PROMPT,
+  stopHandoff,
   runChat,
   commandNames,
   statusOf,
   CommandArgs
 };
-//# sourceMappingURL=chunk-OQ26W5L4.js.map
+//# sourceMappingURL=chunk-HP6EGFHV.js.map

package/dist/chunk-L55VUSX3.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+
+// src/cli/uiState.ts
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+var KEY_HINT_CHATS = 5;
+async function countChat(home) {
+  const dir = join(home, ".garuda");
+  const file = join(dir, "ui.json");
+  let chats = 0;
+  let data = {};
+  try {
+    const read = JSON.parse(await readFile(file, "utf8"));
+    if (typeof read === "object" && read !== null && !Array.isArray(read)) {
+      data = read;
+    }
+    if (typeof data.chats === "number" && Number.isInteger(data.chats) && data.chats >= 0) {
+      chats = data.chats;
+    }
+  } catch {
+  }
+  chats++;
+  try {
+    await mkdir(dir, { recursive: true, mode: 448 });
+    await writeFile(file, `${JSON.stringify({ ...data, chats })}
+`, { mode: 384 });
+  } catch {
+  }
+  return chats;
+}
+var KEYS_HELP = [
+  "Keys:",
+  "  Enter sends \xB7 \\ then Enter, or Alt+Enter: a new line \xB7 \u2191\u2193 earlier inputs",
+  "  Tab completes /commands and @paths \xB7 Shift+Tab plan mode \xB7 Ctrl-P commands",
+  "  Ctrl-G edits the prompt in your editor \xB7 Ctrl-O shows the last output in full",
+  "  Esc or Ctrl-C stops a turn \xB7 Ctrl-C clears the line \xB7 Ctrl-D exits",
+  "  !command runs a command yourself \xB7 @path attaches a file"
+].join("\n");
+function contextBar(percent) {
+  const full = percent <= 0 ? 0 : Math.max(1, Math.min(10, Math.round(percent / 10)));
+  return `${"\u2593".repeat(full)}${"\u2591".repeat(10 - full)}`;
+}
+function contextLevel(percent) {
+  return percent >= 80 ? "full" : percent >= 70 ? "high" : "ok";
+}
+
+export {
+  KEY_HINT_CHATS,
+  countChat,
+  KEYS_HELP,
+  contextBar,
+  contextLevel
+};
+//# sourceMappingURL=chunk-L55VUSX3.js.map

package/dist/{chunk-B4SJY7KT.js → chunk-LMKGSYJC.js}

@@ -42,6 +42,10 @@ var NETWORK_PRESETS = {
   ]
 };
 var PRESET_NAMES = Object.keys(NETWORK_PRESETS);
+function presetFor(host) {
+  const bare = host.toLowerCase();
+  return PRESET_NAMES.find((name) => NETWORK_PRESETS[name]?.includes(bare));
+}
 var NETWORK_PORTS = [80, 443];
 var HOST = /^(\*\.)?([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,63}$/;
 function expandAllowlist(entries) {
@@ -74,9 +78,9 @@ function describeAllowlist(entries) {
 }
 
 // src/permissions/sandboxPaths.ts
-import { realpathSync } from "fs";
+import { readdirSync, realpathSync } from "fs";
 import { homedir, tmpdir } from "os";
-import { isAbsolute, join, resolve } from "path";
+import { isAbsolute, join, resolve, sep } from "path";
 import { globbySync } from "globby";
 var DENY_READ_IN_HOME = [
   ".ssh",
@@ -101,6 +105,49 @@ var DENY_READ_IN_HOME = [
   ".claude.json",
   ".claude/.credentials.json"
 ];
+var PERSONAL_IN_HOME = [
+  "Desktop",
+  "Documents",
+  "Downloads",
+  "Movies",
+  "Music",
+  "Pictures",
+  "Public",
+  "Library/Mail",
+  "Library/Messages",
+  "Library/Safari",
+  "Library/Calendars",
+  "Library/Application Support/AddressBook",
+  "Library/Mobile Documents",
+  "Library/CloudStorage"
+];
+function denyAround(base, keep, keepHidden = false) {
+  let names;
+  try {
+    names = readdirSync(base);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const name of names) {
+    const path = join(base, name);
+    if (keep.includes(path)) continue;
+    if (keep.some((k) => k.startsWith(`${path}${sep}`))) {
+      out.push(...denyAround(path, keep));
+      continue;
+    }
+    if (keepHidden && name.startsWith(".")) continue;
+    out.push(path);
+  }
+  return out;
+}
+function personalDenials(home, root) {
+  return PERSONAL_IN_HOME.flatMap((name) => {
+    const folder = join(home, name);
+    if (root === folder) return [];
+    return root.startsWith(`${folder}${sep}`) ? denyAround(folder, [root]) : [folder];
+  });
+}
 var PROTECTED_IN_ROOT = [".git/hooks", ".git/config", ".garuda"];
 var WRITE_IN_HOME = [
   ".cache",
@@ -122,6 +169,7 @@ function sandboxPaths(root, settings = {}, home = homedir()) {
     denyWritePaths: PROTECTED_IN_ROOT.map((p) => join(root, p)),
     denyReadPaths: unique([
       ...DENY_READ_IN_HOME.map((p) => join(home, p)),
+      ...personalDenials(home, root),
       ...(settings.denyRead ?? []).map(expand)
     ])
   };
@@ -817,10 +865,10 @@ function seatbeltProfile(policy, extra = []) {
     }
   }
   if (policy.denyWritePaths.length > 0) {
-    lines.push(`(deny file-write* ${paths(policy.denyWritePaths)})`);
+    lines.push(`(deny file-write* ${paths(withDataVolume(policy.denyWritePaths))})`);
   }
   if (policy.denyReadPaths.length > 0) {
-    lines.push(`(deny file-read* ${paths(policy.denyReadPaths)})`);
+    lines.push(`(deny file-read* ${paths(withDataVolume(policy.denyReadPaths))})`);
   }
   lines.push("(deny lsopen)", "(deny appleevent-send)");
   if (!policy.network) {
@@ -836,6 +884,14 @@ function seatbeltProfile(policy, extra = []) {
   lines.push(...extra);
   return lines.join("\n");
 }
+function withDataVolume(list) {
+  const out = [];
+  for (const path of list) {
+    out.push(path);
+    if (path.startsWith("/Users/")) out.push(`/System/Volumes/Data${path}`);
+  }
+  return out;
+}
 function quote2(path) {
   return `"${path.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
 }
@@ -976,6 +1032,8 @@ var schema = z.strictObject({
   }).optional(),
   /** Language server diagnostics after edits (0.4). enabled: default false. */
   lsp: z.strictObject({ enabled: z.boolean().optional() }).optional(),
+  /** The chat's look (0.18.1). clearOnStart: default true (the Ink chat starts on a clear screen). */
+  ui: z.strictObject({ clearOnStart: z.boolean().optional() }).optional(),
   /**
    * The project's formatter after edits (0.10). enabled: default false (A/B first). commands: by
    * name, false turns a detected formatter off; a command adds one or replaces a detected one.
@@ -1065,6 +1123,7 @@ function parseSettings(json, source = SETTINGS_FILE) {
     skills,
     agents,
     notifications,
+    ui,
     thinking,
     formatters,
     network
@@ -1102,6 +1161,7 @@ function parseSettings(json, source = SETTINGS_FILE) {
     ...commands?.mode === void 0 ? {} : { commands: { mode: commands.mode } },
     ...todo?.enabled === void 0 ? {} : { todo: { enabled: todo.enabled } },
     ...lsp?.enabled === void 0 ? {} : { lsp: { enabled: lsp.enabled } },
+    ...ui?.clearOnStart === void 0 ? {} : { ui: { clearOnStart: ui.clearOnStart } },
     ...undo?.enabled === void 0 ? {} : { undo: { enabled: undo.enabled } },
     ...skills?.enabled === void 0 ? {} : { skills: { enabled: skills.enabled } },
     ...agents?.enabled === void 0 ? {} : { agents: { enabled: agents.enabled } },
@@ -1160,7 +1220,7 @@ async function loadSettings(root) {
 }
 
 // src/permissions/engine.ts
-import { sep } from "path";
+import { sep as sep2 } from "path";
 
 // src/permissions/sensitive.ts
 var SENSITIVE_PATTERNS = [
@@ -1430,7 +1490,14 @@ var PermissionEngine = class {
     if (choice === "once" && accepted !== void 0) {
       return { decision: { allowed: true, by: "user", hunks: accepted }, userChoice: choice };
     }
-    return { decision: { allowed: true, by: "user" }, userChoice: choice };
+    return {
+      decision: {
+        allowed: true,
+        by: "user",
+        ...choice === "session" ? { remembered: true } : {}
+      },
+      userChoice: choice
+    };
   }
   /**
    * Plan mode: file changes and memory are always denied; a command runs only in the OS sandbox
@@ -1518,7 +1585,7 @@ var PermissionEngine = class {
     const denied = policyDeniedPaths(this.root, this.policy?.denyPaths ?? []);
     let writePaths = [.../* @__PURE__ */ new Set([...paths.writePaths, ...this.access.writePaths])];
     let denyWritePaths = [...paths.denyWritePaths, ...denied];
-    const inRoot = (p) => p === this.root || p.startsWith(`${this.root}${sep}`);
+    const inRoot = (p) => p === this.root || p.startsWith(`${this.root}${sep2}`);
     if (readOnlyRoot) {
       writePaths = writePaths.filter((p) => !inRoot(p));
       denyWritePaths = [this.root, ...denyWritePaths];
@@ -1588,10 +1655,12 @@ function describeTarget(target) {
 
 export {
   isSensitive,
+  presetFor,
   NETWORK_PORTS,
   expandAllowlist,
   hostAllowed,
   describeAllowlist,
+  denyAround,
   sandboxPaths,
   HostExecutor,
   EXECUTOR_NAMES,
@@ -1602,4 +1671,4 @@ export {
   JOB_DENIAL,
   PermissionEngine
 };
-//# sourceMappingURL=chunk-B4SJY7KT.js.map
+//# sourceMappingURL=chunk-LMKGSYJC.js.map