@kyo-so/cli 0.5.0 → 0.6.0

package/dist/index.js

@@ -8124,7 +8124,7 @@ ${lanes.join(`
           writeOutputIsTTY() {
             return process.stdout.isTTY;
           },
-          readFile,
+          readFile: readFile2,
           writeFile: writeFile2,
           watchFile: watchFile2,
           watchDirectory,
@@ -8317,7 +8317,7 @@ ${lanes.join(`
         function fsWatchWorker(fileOrDirectory, recursive, callback) {
           return _fs.watch(fileOrDirectory, fsSupportsRecursiveFsWatch ? { persistent: true, recursive: !!recursive } : { persistent: true }, callback);
         }
-        function readFile(fileName, _encoding) {
+        function readFile2(fileName, _encoding) {
           let buffer;
           try {
             buffer = _fs.readFileSync(fileName);
@@ -39384,7 +39384,7 @@ ${lanes.join(`
       const possibleOption = getSpellingSuggestion(unknownOption, diagnostics.optionDeclarations, getOptionName);
       return possibleOption ? createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownDidYouMeanDiagnostic, unknownOptionErrorText || unknownOption, possibleOption.name) : createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownOptionDiagnostic, unknownOptionErrorText || unknownOption);
     }
-    function parseCommandLineWorker(diagnostics, commandLine, readFile) {
+    function parseCommandLineWorker(diagnostics, commandLine, readFile2) {
       const options = {};
       let watchOptions;
       const fileNames = [];
@@ -39422,7 +39422,7 @@ ${lanes.join(`
         }
       }
       function parseResponseFile(fileName) {
-        const text = tryReadFile(fileName, readFile || ((fileName2) => sys.readFile(fileName2)));
+        const text = tryReadFile(fileName, readFile2 || ((fileName2) => sys.readFile(fileName2)));
         if (!isString(text)) {
           errors3.push(text);
           return;
@@ -39525,8 +39525,8 @@ ${lanes.join(`
       unknownDidYouMeanDiagnostic: Diagnostics.Unknown_compiler_option_0_Did_you_mean_1,
       optionTypeMismatchDiagnostic: Diagnostics.Compiler_option_0_expects_an_argument
     };
-    function parseCommandLine(commandLine, readFile) {
-      return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile);
+    function parseCommandLine(commandLine, readFile2) {
+      return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile2);
     }
     function getOptionFromName(optionName, allowShort) {
       return getOptionDeclarationFromName(getOptionsNameMap, optionName, allowShort);
@@ -39594,8 +39594,8 @@ ${lanes.join(`
       result.originalFileName = result.fileName;
       return parseJsonSourceFileConfigFileContent(result, host, getNormalizedAbsolutePath(getDirectoryPath(configFileName), cwd), optionsToExtend, getNormalizedAbsolutePath(configFileName, cwd), undefined, extraFileExtensions, extendedConfigCache, watchOptionsToExtend);
     }
-    function readConfigFile(fileName, readFile) {
-      const textOrDiagnostic = tryReadFile(fileName, readFile);
+    function readConfigFile(fileName, readFile2) {
+      const textOrDiagnostic = tryReadFile(fileName, readFile2);
       return isString(textOrDiagnostic) ? parseConfigFileTextToJson(fileName, textOrDiagnostic) : { config: {}, error: textOrDiagnostic };
     }
     function parseConfigFileTextToJson(fileName, jsonText) {
@@ -39605,14 +39605,14 @@ ${lanes.join(`
         error: jsonSourceFile.parseDiagnostics.length ? jsonSourceFile.parseDiagnostics[0] : undefined
       };
     }
-    function readJsonConfigFile(fileName, readFile) {
-      const textOrDiagnostic = tryReadFile(fileName, readFile);
+    function readJsonConfigFile(fileName, readFile2) {
+      const textOrDiagnostic = tryReadFile(fileName, readFile2);
       return isString(textOrDiagnostic) ? parseJsonText(fileName, textOrDiagnostic) : { fileName, parseDiagnostics: [textOrDiagnostic] };
     }
-    function tryReadFile(fileName, readFile) {
+    function tryReadFile(fileName, readFile2) {
       let text;
       try {
-        text = readFile(fileName);
+        text = readFile2(fileName);
       } catch (e) {
         return createCompilerDiagnostic(Diagnostics.Cannot_read_file_0_Colon_1, fileName, e.message);
       }
@@ -107509,12 +107509,12 @@ ${lanes.join(`
     function createCompilerHost(options, setParentNodes) {
       return createCompilerHostWorker(options, setParentNodes);
     }
-    function createGetSourceFile(readFile, setParentNodes) {
+    function createGetSourceFile(readFile2, setParentNodes) {
       return (fileName, languageVersionOrOptions, onError) => {
         let text;
         try {
           mark("beforeIORead");
-          text = readFile(fileName);
+          text = readFile2(fileName);
           mark("afterIORead");
           measure("I/O Read", "beforeIORead", "afterIORead");
         } catch (e) {
@@ -108305,7 +108305,7 @@ ${lanes.join(`
         getRedirectFromOutput,
         forEachResolvedProjectReference: forEachResolvedProjectReference2
       });
-      const readFile = host.readFile.bind(host);
+      const readFile2 = host.readFile.bind(host);
       (_e = tracing) == null || _e.push(tracing.Phase.Program, "shouldProgramCreateNewSourceFiles", { hasOldProgram: !!oldProgram });
       const shouldCreateNewSourceFile = shouldProgramCreateNewSourceFiles(oldProgram, options);
       (_f = tracing) == null || _f.pop();
@@ -108482,7 +108482,7 @@ ${lanes.join(`
         shouldTransformImportCall,
         emitBuildInfo,
         fileExists,
-        readFile,
+        readFile: readFile2,
         directoryExists,
         getSymlinkCache,
         realpath: (_o = host.realpath) == null ? undefined : _o.bind(host),
@@ -121384,7 +121384,7 @@ ${lanes.join(`
           if (importingFile !== usableByFileName)
             return;
           return forEachEntry(exportInfo, (info, key2) => {
-            const { symbolName: symbolName2, ambientModuleName } = parseKey(key2);
+            const { symbolName: symbolName2, ambientModuleName } = parseKey2(key2);
             const name = preferCapitalized && info[0].capitalizedSymbolName || symbolName2;
             if (matches(name, info[0].targetFlags)) {
               const rehydrated = info.map(rehydrateCachedInfo);
@@ -121448,7 +121448,7 @@ ${lanes.join(`
         const moduleKey = ambientModuleName || "";
         return `${importedName.length} ${getSymbolId(skipAlias(symbol2, checker))} ${importedName} ${moduleKey}`;
       }
-      function parseKey(key2) {
+      function parseKey2(key2) {
         const firstSpace = key2.indexOf(" ");
         const secondSpace = key2.indexOf(" ", firstSpace + 1);
         const symbolNameLength = parseInt(key2.substring(0, firstSpace), 10);
@@ -150512,14 +150512,14 @@ ${newComment.split(`
     });
     function mapCode(sourceFile, contents, focusLocations, host, formatContext, preferences) {
       return ts_textChanges_exports.ChangeTracker.with({ host, formatContext, preferences }, (changeTracker) => {
-        const parsed = contents.map((c) => parse5(sourceFile, c));
+        const parsed = contents.map((c) => parse6(sourceFile, c));
         const flattenedLocations = focusLocations && flatten(focusLocations);
         for (const nodes of parsed) {
           placeNodeGroup(sourceFile, changeTracker, nodes, flattenedLocations);
         }
       });
     }
-    function parse5(sourceFile, content) {
+    function parse6(sourceFile, content) {
       const nodeKinds = [
         {
           parse: () => createSourceFile("__mapcode_content_nodes.ts", content, sourceFile.languageVersion, true, sourceFile.scriptKind),
@@ -183863,6 +183863,79 @@ var kyosoConfigSchema = exports_external.object({
     includeFileContents: exports_external.boolean()
   })
 });
+function agentConfigLeafPaths(agent) {
+  return [
+    `agents.${agent}.enabled`,
+    `agents.${agent}.type`,
+    `agents.${agent}.command`,
+    `agents.${agent}.args`,
+    `agents.${agent}.model`,
+    `agents.${agent}.role`,
+    `agents.${agent}.timeoutMs`,
+    `agents.${agent}.env`,
+    `agents.${agent}.auth.mode`,
+    `agents.${agent}.auth.preferExistingLogin`,
+    `agents.${agent}.auth.preferApiKey`,
+    `agents.${agent}.auth.recommendedEnv`,
+    `agents.${agent}.auth.envWhitelist`
+  ];
+}
+var kyosoConfigKnownLeafPaths = [
+  "entrypoints.mcp",
+  "entrypoints.cli",
+  "firstClassClient",
+  "tools.planReview",
+  "tools.securityReview",
+  "tools.diffReview",
+  ...agentConfigLeafPaths("codex"),
+  ...agentConfigLeafPaths("claude"),
+  "workspace.mode",
+  "workspace.root",
+  "workspace.readOnly",
+  "workspace.maxContextBytes",
+  "workspace.maxDiffBytes",
+  "workspace.deny",
+  "secrets.mode",
+  "secrets.blockOnDetectedSecret",
+  "secrets.allowOverride",
+  "network.defaultMode",
+  "network.allowUnrestricted",
+  "network.warnOnUnrestricted",
+  "network.mediatedWeb.enabled",
+  "securityReview.cisaSecureByDesign.enabled",
+  "securityReview.cisaSecureByDesign.gate",
+  "securityReview.cisaSecureByDesign.dimensions.customerSecurityOutcomes",
+  "securityReview.cisaSecureByDesign.dimensions.secureByDefault",
+  "securityReview.cisaSecureByDesign.dimensions.transparencyAndAccountability",
+  "securityReview.cisaSecureByDesign.dimensions.governance",
+  "judge.mode",
+  "judge.provider",
+  "judge.timeoutMs",
+  "verification.enabled",
+  "verification.maxFindings",
+  "verification.timeoutMs",
+  "verification.allowDemotion",
+  "audit.enabled",
+  "audit.format",
+  "audit.directory",
+  "audit.includeRawAgentOutput",
+  "audit.includeFileContents"
+];
+var kyosoConfigRecordPrefixes = [
+  "agents.codex.env",
+  "agents.claude.env"
+];
+var kyosoConfigSecuritySensitivePrefixes = [
+  "agents.codex",
+  "agents.claude",
+  "audit",
+  "judge",
+  "network",
+  "secrets",
+  "securityReview",
+  "verification",
+  "workspace"
+];
 
 // src/config/defaultConfig.ts
 var defaultConfig = {
@@ -183904,7 +183977,7 @@ var defaultConfig = {
       command: "npx",
       args: ["-y", "@agentclientprotocol/claude-agent-acp@0.57.0"],
       role: "architecture_security_reviewer",
-      timeoutMs: 240000,
+      timeoutMs: 300000,
       env: {
         KYOSO_CHILD_AGENT: "1"
       },
@@ -183993,11 +184066,1157 @@ var defaultConfig = {
 };
 
 // src/config/loadConfig.ts
-import { access, readFile as readFile2 } from "node:fs/promises";
+import { access, readFile as readFile3 } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
 import { stderr, stdin } from "node:process";
-import { resolve as resolve2 } from "node:path";
+import { extname as extname2, join as join2, resolve as resolve2 } from "node:path";
 import { createInterface } from "node:readline/promises";
 
+// src/config/projectScope.ts
+var PROJECT_GLOBAL_ONLY_MESSAGE = "Move global-only settings to the user global config:";
+function mergeProjectTomlConfig(baseConfig, projectConfig, options) {
+  const violations = collectProjectScopeViolations(projectConfig);
+  if (violations.length > 0) {
+    throw new Error(formatProjectScopeError(violations, options));
+  }
+  const projectDeny = readPath(projectConfig, ["workspace", "deny"]);
+  const mergeableProjectConfig = omitPath(projectConfig, ["workspace", "deny"]);
+  const merged = deepMerge(baseConfig, mergeableProjectConfig);
+  if (projectDeny !== undefined) {
+    writePath(merged, ["workspace", "deny"], Array.isArray(projectDeny) && allStrings(projectDeny) ? unionStrings(readStringArray(baseConfig, ["workspace", "deny"]), [
+      ...projectDeny
+    ]) : projectDeny);
+  }
+  return merged;
+}
+function collectProjectScopeViolations(config2) {
+  const leaves = flattenLeaves(config2);
+  const violations = [];
+  for (const leaf of leaves) {
+    const path = leaf.path.join(".");
+    if (!isAllowedProjectPath(leaf.path)) {
+      violations.push({ path });
+      continue;
+    }
+    const reason = tightenOnlyReason(leaf.path, leaf.value);
+    if (reason)
+      violations.push({ path, reason });
+  }
+  return violations.sort((left, right) => left.path.localeCompare(right.path));
+}
+function isAllowedProjectPath(path) {
+  const [top, second, third, fourth] = path;
+  if (top === "tools" && path.length === 2 && ["planReview", "securityReview", "diffReview"].includes(second ?? "")) {
+    return true;
+  }
+  if (top === "agents" && path.length === 3 && ["codex", "claude"].includes(second ?? "") && ["enabled", "model", "role", "timeoutMs"].includes(third ?? "")) {
+    return true;
+  }
+  if (top === "verification" && path.length === 2 && ["enabled", "maxFindings", "timeoutMs"].includes(second ?? "")) {
+    return true;
+  }
+  if (top === "workspace" && path.length === 2 && ["maxContextBytes", "maxDiffBytes", "deny"].includes(second ?? "")) {
+    return true;
+  }
+  if (top === "network" && second === "defaultMode" && path.length === 2) {
+    return true;
+  }
+  if (top === "secrets" && path.length === 2 && ["blockOnDetectedSecret", "allowOverride"].includes(second ?? "")) {
+    return true;
+  }
+  if (top === "judge" && path.length === 2 && ["mode", "provider", "timeoutMs"].includes(second ?? "")) {
+    return true;
+  }
+  if (top === "securityReview" && second === "cisaSecureByDesign" && path.length >= 3) {
+    if (third === "dimensions") {
+      return path.length === 4 && [
+        "customerSecurityOutcomes",
+        "secureByDefault",
+        "transparencyAndAccountability",
+        "governance"
+      ].includes(fourth ?? "");
+    }
+    return path.length === 3 && ["enabled", "gate"].includes(third ?? "");
+  }
+  return false;
+}
+function tightenOnlyReason(path, value) {
+  const dotted = path.join(".");
+  if (dotted === "network.defaultMode" && value !== "model_only") {
+    return 'must be "model_only" in project TOML';
+  }
+  if (dotted === "secrets.blockOnDetectedSecret" && value !== true) {
+    return "must be true in project TOML";
+  }
+  if (dotted === "secrets.allowOverride" && value !== false) {
+    return "must be false in project TOML";
+  }
+  if (path[0] === "securityReview" && path[1] === "cisaSecureByDesign" && value !== true) {
+    return "must be true in project TOML";
+  }
+  return;
+}
+function formatProjectScopeError(violations, options) {
+  const entries = violations.map((violation) => violation.reason ? `${violation.path} (${violation.reason})` : violation.path);
+  return [
+    `Project TOML config ${options.projectPath} contains settings that are not allowed in project scope: ${entries.join(", ")}`,
+    `${PROJECT_GLOBAL_ONLY_MESSAGE} ${options.globalConfigPath}. If a key is misspelled, fix the name instead.`
+  ].join(`
+`);
+}
+function flattenLeaves(value, path = []) {
+  if (!isRecord(value))
+    return path.length > 0 ? [{ path, value }] : [];
+  const entries = Object.entries(value);
+  if (entries.length === 0)
+    return path.length > 0 ? [{ path, value }] : [];
+  return entries.flatMap(([key, child]) => flattenLeaves(child, [...path, key]));
+}
+function omitPath(value, path) {
+  if (!isRecord(value) || path.length === 0)
+    return value;
+  const [head, ...tail] = path;
+  if (head === undefined)
+    return value;
+  const result = { ...value };
+  if (tail.length === 0) {
+    delete result[head];
+  } else {
+    const child = omitPath(result[head], tail);
+    if (isRecord(child) && Object.keys(child).length === 0) {
+      delete result[head];
+    } else {
+      result[head] = child;
+    }
+  }
+  return result;
+}
+function readPath(value, path) {
+  let current = value;
+  for (const key of path) {
+    if (!isRecord(current))
+      return;
+    current = current[key];
+  }
+  return current;
+}
+function writePath(target, path, value) {
+  if (!isRecord(target))
+    return;
+  let current = target;
+  for (const key of path.slice(0, -1)) {
+    const child = current[key];
+    if (!isRecord(child)) {
+      current[key] = {};
+    }
+    current = current[key];
+  }
+  const leaf = path.at(-1);
+  if (leaf)
+    current[leaf] = value;
+}
+function readStringArray(value, path) {
+  const found = readPath(value, path);
+  return Array.isArray(found) && allStrings(found) ? [...found] : [];
+}
+function unionStrings(base, override) {
+  return [...new Set([...base, ...override])];
+}
+function allStrings(values) {
+  return values.every((value) => typeof value === "string");
+}
+function deepMerge(base, override) {
+  if (!isRecord(base) || !isRecord(override))
+    return override ?? base;
+  const result = { ...base };
+  for (const [key, value] of Object.entries(override)) {
+    result[key] = deepMerge(result[key], value);
+  }
+  return result;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/security/redact.ts
+var REDACTION = "[KYOSO_REDACTED]";
+
+// src/core/constants.ts
+var DEFAULT_AGENT_TIMEOUT_MS = 120000;
+var RAW_OUTPUT_MAX_CHARS = 16384;
+var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
+
+// src/security/sanitizeText.ts
+var SENSITIVE_TEXT_PATTERNS = [
+  /\bsk-(?:proj-)?[A-Za-z0-9_-]{8,}\b/g,
+  /\bsk-ant-[A-Za-z0-9_-]{8,}\b/g,
+  /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{8,}\b/g,
+  /\bAKIA[0-9A-Z]{8,}\b/g,
+  /\bxox[baprs]-[A-Za-z0-9-]{8,}\b/g,
+  /\bsk_(?:live|test)_[A-Za-z0-9]{8,}\b/g,
+  /\b(?:api[_-]?key|secret|token|password)\b\s*[:=]\s*["']?[A-Za-z0-9_./+=-]{8,}["']?/gi
+];
+function sanitizeText(value) {
+  return SENSITIVE_TEXT_PATTERNS.reduce((text, pattern) => text.replace(pattern, REDACTION), value);
+}
+function sanitizeTextForDisplay(value, maxChars = 240) {
+  const compact = sanitizeText(value).replace(/\s+/g, " ").trim();
+  if (compact.length <= maxChars)
+    return compact;
+  return `${compact.slice(0, Math.max(0, maxChars - 3))}...`;
+}
+function sanitizeTextForRawOutput(value, maxChars = RAW_OUTPUT_MAX_CHARS) {
+  const sanitized = sanitizeText(value);
+  const limit = Math.max(0, maxChars);
+  if (sanitized.length <= limit)
+    return sanitized;
+  return `${sanitized.slice(0, limit)}
+[KYOSO_TRUNCATED: ${sanitized.length - limit} chars omitted]`;
+}
+
+// src/config/tomlConfigLoader.ts
+import { readFile } from "node:fs/promises";
+
+// node_modules/smol-toml/dist/date.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
+
+class TomlDate extends Date {
+  #hasDate = false;
+  #hasTime = false;
+  #offset = null;
+  constructor(date5) {
+    let hasDate = true;
+    let hasTime = true;
+    let offset = "Z";
+    if (typeof date5 === "string") {
+      let match = date5.match(DATE_TIME_RE);
+      if (match) {
+        if (!match[1]) {
+          hasDate = false;
+          date5 = `0000-01-01T${date5}`;
+        }
+        hasTime = !!match[2];
+        hasTime && date5[10] === " " && (date5 = date5.replace(" ", "T"));
+        if (match[2] && +match[2] > 23) {
+          date5 = "";
+        } else {
+          offset = match[3] || null;
+          date5 = date5.toUpperCase();
+          if (!offset && hasTime)
+            date5 += "Z";
+        }
+      } else {
+        date5 = "";
+      }
+    }
+    super(date5);
+    if (!isNaN(this.getTime())) {
+      this.#hasDate = hasDate;
+      this.#hasTime = hasTime;
+      this.#offset = offset;
+    }
+  }
+  isDateTime() {
+    return this.#hasDate && this.#hasTime;
+  }
+  isLocal() {
+    return !this.#hasDate || !this.#hasTime || !this.#offset;
+  }
+  isDate() {
+    return this.#hasDate && !this.#hasTime;
+  }
+  isTime() {
+    return this.#hasTime && !this.#hasDate;
+  }
+  isValid() {
+    return this.#hasDate || this.#hasTime;
+  }
+  toISOString() {
+    let iso = super.toISOString();
+    if (this.isDate())
+      return iso.slice(0, 10);
+    if (this.isTime())
+      return iso.slice(11, 23);
+    if (this.#offset === null)
+      return iso.slice(0, -1);
+    if (this.#offset === "Z")
+      return iso;
+    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
+    offset = this.#offset[0] === "-" ? offset : -offset;
+    let offsetDate = new Date(this.getTime() - offset * 60000);
+    return offsetDate.toISOString().slice(0, -1) + this.#offset;
+  }
+  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
+    let date5 = new TomlDate(jsDate);
+    date5.#offset = offset;
+    return date5;
+  }
+  static wrapAsLocalDateTime(jsDate) {
+    let date5 = new TomlDate(jsDate);
+    date5.#offset = null;
+    return date5;
+  }
+  static wrapAsLocalDate(jsDate) {
+    let date5 = new TomlDate(jsDate);
+    date5.#hasTime = false;
+    date5.#offset = null;
+    return date5;
+  }
+  static wrapAsLocalTime(jsDate) {
+    let date5 = new TomlDate(jsDate);
+    date5.#hasDate = false;
+    date5.#offset = null;
+    return date5;
+  }
+}
+
+// node_modules/smol-toml/dist/error.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function getLineColFromPtr(string4, ptr) {
+  let lines = string4.slice(0, ptr).split(/\r\n|\n|\r/g);
+  return [lines.length, lines.pop().length + 1];
+}
+function makeCodeBlock(string4, line, column) {
+  let lines = string4.split(/\r\n|\n|\r/g);
+  let codeblock = "";
+  let numberLen = (Math.log10(line + 1) | 0) + 1;
+  for (let i = line - 1;i <= line + 1; i++) {
+    let l = lines[i - 1];
+    if (!l)
+      continue;
+    codeblock += i.toString().padEnd(numberLen, " ");
+    codeblock += ":  ";
+    codeblock += l;
+    codeblock += `
+`;
+    if (i === line) {
+      codeblock += " ".repeat(numberLen + column + 2);
+      codeblock += `^
+`;
+    }
+  }
+  return codeblock;
+}
+
+class TomlError extends Error {
+  line;
+  column;
+  codeblock;
+  constructor(message, options) {
+    const [line, column] = getLineColFromPtr(options.toml, options.ptr);
+    const codeblock = makeCodeBlock(options.toml, line, column);
+    super(`Invalid TOML document: ${message}
+
+${codeblock}`, options);
+    this.line = line;
+    this.column = column;
+    this.codeblock = codeblock;
+  }
+}
+
+// node_modules/smol-toml/dist/primitive.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
+var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
+var LEADING_ZERO = /^[+-]?0[0-9_]/;
+function parseString(str, ptr) {
+  let c = str[ptr++];
+  let first = c;
+  let isLiteral = c === "'";
+  let isMultiline = c === str[ptr] && c === str[ptr + 1];
+  if (isMultiline) {
+    if (str[ptr += 2] === `
+`)
+      ptr++;
+    else if (str[ptr] === "\r" && str[ptr + 1] === `
+`)
+      ptr += 2;
+  }
+  let parsed = "";
+  let sliceStart = ptr;
+  let state = 0;
+  for (let i = ptr;i < str.length; i++) {
+    c = str[i];
+    if (isMultiline && (c === `
+` || c === "\r" && str[i + 1] === `
+`)) {
+      state = state && 3;
+    } else if (c < " " && c !== "\t" || c === "") {
+      throw new TomlError("control characters are not allowed in strings", {
+        toml: str,
+        ptr: i
+      });
+    } else if ((!state || state === 3) && c === first && (!isMultiline || str[i + 1] === first && str[i + 2] === first)) {
+      if (isMultiline) {
+        if (str[i + 3] === first)
+          i++;
+        if (str[i + 3] === first)
+          i++;
+      }
+      return [
+        state ? parsed : parsed + str.slice(sliceStart, i),
+        i + (isMultiline ? 3 : 1)
+      ];
+    } else if (!state) {
+      if (!isLiteral && c === "\\") {
+        parsed += str.slice(sliceStart, sliceStart = i);
+        state = 1;
+      }
+    } else if (state === 1) {
+      if (c === "x" || c === "u" || c === "U") {
+        let value = 0;
+        let len = c === "x" ? 2 : c === "u" ? 4 : 8;
+        for (let j = 0;j < len; j++, i++) {
+          let hex3 = str.charCodeAt(i + 1);
+          let digit = hex3 >= 48 && hex3 <= 57 ? hex3 - 48 : hex3 >= 65 && hex3 <= 70 ? hex3 - 65 + 10 : hex3 >= 97 && hex3 <= 102 ? hex3 - 97 + 10 : -1;
+          if (digit < 0)
+            throw new TomlError("invalid non-hex character in unicode escape", { toml: str, ptr: i + 1 });
+          value = value << 4 | digit;
+        }
+        if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
+          throw new TomlError("invalid unicode escape", { toml: str, ptr: i });
+        }
+        parsed += String.fromCodePoint(value);
+        sliceStart = i + 1;
+        state = 0;
+      } else if (c === " " || c === "\t") {
+        state = 2;
+      } else {
+        if (c === "b")
+          parsed += "\b";
+        else if (c === "t")
+          parsed += "\t";
+        else if (c === "n")
+          parsed += `
+`;
+        else if (c === "f")
+          parsed += "\f";
+        else if (c === "r")
+          parsed += "\r";
+        else if (c === "e")
+          parsed += "\x1B";
+        else if (c === '"')
+          parsed += '"';
+        else if (c === "\\")
+          parsed += "\\";
+        else
+          throw new TomlError("unrecognized escape sequence", { toml: str, ptr: i });
+        sliceStart = i + 1;
+        state = 0;
+      }
+    } else if (c !== " " && c !== "\t") {
+      if (state === 2) {
+        throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
+          toml: str,
+          ptr: sliceStart
+        });
+      }
+      state = !isLiteral && c === "\\" ? 1 : 0;
+      sliceStart = i;
+    }
+  }
+  throw new TomlError("unfinished string", { toml: str, ptr });
+}
+function parseValue(value, toml, ptr, integersAsBigInt) {
+  if (value === "true")
+    return true;
+  if (value === "false")
+    return false;
+  if (value === "-inf")
+    return -Infinity;
+  if (value === "inf" || value === "+inf")
+    return Infinity;
+  if (value === "nan" || value === "+nan" || value === "-nan")
+    return NaN;
+  if (value === "-0")
+    return integersAsBigInt ? 0n : 0;
+  let isInt = INT_REGEX.test(value);
+  if (isInt || FLOAT_REGEX.test(value)) {
+    if (LEADING_ZERO.test(value)) {
+      throw new TomlError("leading zeroes are not allowed", {
+        toml,
+        ptr
+      });
+    }
+    value = value.replace(/_/g, "");
+    let numeric = +value;
+    if (isNaN(numeric)) {
+      throw new TomlError("invalid number", {
+        toml,
+        ptr
+      });
+    }
+    if (isInt) {
+      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
+        throw new TomlError("integer value cannot be represented losslessly", {
+          toml,
+          ptr
+        });
+      }
+      if (isInt || integersAsBigInt === true)
+        numeric = BigInt(value);
+    }
+    return numeric;
+  }
+  const date5 = new TomlDate(value);
+  if (!date5.isValid()) {
+    throw new TomlError("invalid value", {
+      toml,
+      ptr
+    });
+  }
+  return date5;
+}
+
+// node_modules/smol-toml/dist/util.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function indexOfNewline(str, start = 0, end = str.length) {
+  let idx = str.indexOf(`
+`, start);
+  if (str[idx - 1] === "\r")
+    idx--;
+  return idx <= end ? idx : -1;
+}
+function skipComment(str, ptr) {
+  for (let i = ptr;i < str.length; i++) {
+    let c = str[i];
+    if (c === `
+`)
+      return i;
+    if (c === "\r" && str[i + 1] === `
+`)
+      return i + 1;
+    if (c < " " && c !== "\t" || c === "") {
+      throw new TomlError("control characters are not allowed in comments", {
+        toml: str,
+        ptr
+      });
+    }
+  }
+  return str.length;
+}
+function skipVoid(str, ptr, banNewLines, banComments) {
+  let c;
+  while (true) {
+    while ((c = str[ptr]) === " " || c === "\t" || !banNewLines && (c === `
+` || c === "\r" && str[ptr + 1] === `
+`))
+      ptr++;
+    if (banComments || c !== "#")
+      break;
+    ptr = skipComment(str, ptr);
+  }
+  return ptr;
+}
+function skipUntil(str, ptr, sep, end, banNewLines = false) {
+  if (!end) {
+    ptr = indexOfNewline(str, ptr);
+    return ptr < 0 ? str.length : ptr;
+  }
+  for (let i = ptr;i < str.length; i++) {
+    let c = str[i];
+    if (c === "#") {
+      i = indexOfNewline(str, i);
+    } else if (c === sep) {
+      return i + 1;
+    } else if (c === end || banNewLines && (c === `
+` || c === "\r" && str[i + 1] === `
+`)) {
+      return i;
+    }
+  }
+  throw new TomlError("cannot find end of structure", {
+    toml: str,
+    ptr
+  });
+}
+
+// node_modules/smol-toml/dist/extract.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function sliceAndTrimEndOf(str, startPtr, endPtr) {
+  let value = str.slice(startPtr, endPtr);
+  let commentIdx = value.indexOf("#");
+  if (commentIdx > -1) {
+    skipComment(str, commentIdx);
+    value = value.slice(0, commentIdx);
+  }
+  return [value.trimEnd(), commentIdx];
+}
+function extractValue(str, ptr, end, depth, integersAsBigInt) {
+  if (depth === 0) {
+    throw new TomlError("document contains excessively nested structures. aborting.", {
+      toml: str,
+      ptr
+    });
+  }
+  let c = str[ptr];
+  if (c === "[" || c === "{") {
+    let [value, endPtr2] = c === "[" ? parseArray(str, ptr, depth, integersAsBigInt) : parseInlineTable(str, ptr, depth, integersAsBigInt);
+    if (end) {
+      endPtr2 = skipVoid(str, endPtr2);
+      if (str[endPtr2] === ",")
+        endPtr2++;
+      else if (str[endPtr2] !== end) {
+        throw new TomlError("expected comma or end of structure", {
+          toml: str,
+          ptr: endPtr2
+        });
+      }
+    }
+    return [value, endPtr2];
+  }
+  if (c === '"' || c === "'") {
+    let [parsed, endPtr2] = parseString(str, ptr);
+    if (end) {
+      endPtr2 = skipVoid(str, endPtr2);
+      if (str[endPtr2] && str[endPtr2] !== "," && str[endPtr2] !== end && str[endPtr2] !== `
+` && str[endPtr2] !== "\r") {
+        throw new TomlError("unexpected character encountered", {
+          toml: str,
+          ptr: endPtr2
+        });
+      }
+      if (str[endPtr2] === ",")
+        endPtr2++;
+    }
+    return [parsed, endPtr2];
+  }
+  let endPtr = skipUntil(str, ptr, ",", end);
+  let slice = sliceAndTrimEndOf(str, ptr, endPtr - (str[endPtr - 1] === "," ? 1 : 0));
+  if (!slice[0]) {
+    throw new TomlError("incomplete key-value declaration: no value specified", {
+      toml: str,
+      ptr
+    });
+  }
+  if (end && slice[1] > -1) {
+    endPtr = skipVoid(str, ptr + slice[1]);
+    if (str[endPtr] === ",")
+      endPtr++;
+  }
+  return [
+    parseValue(slice[0], str, ptr, integersAsBigInt),
+    endPtr
+  ];
+}
+
+// node_modules/smol-toml/dist/struct.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
+function parseKey(str, ptr, end = "=") {
+  let dot = ptr - 1;
+  let parsed = [];
+  let endPtr = str.indexOf(end, ptr);
+  if (endPtr < 0) {
+    throw new TomlError("incomplete key-value: cannot find end of key", {
+      toml: str,
+      ptr
+    });
+  }
+  do {
+    let c = str[ptr = ++dot];
+    if (c !== " " && c !== "\t") {
+      if (c === '"' || c === "'") {
+        if (c === str[ptr + 1] && c === str[ptr + 2]) {
+          throw new TomlError("multiline strings are not allowed in keys", {
+            toml: str,
+            ptr
+          });
+        }
+        let [part, eos] = parseString(str, ptr);
+        dot = str.indexOf(".", eos);
+        let strEnd = str.slice(eos, dot < 0 || dot > endPtr ? endPtr : dot);
+        let newLine = indexOfNewline(strEnd);
+        if (newLine > -1) {
+          throw new TomlError("newlines are not allowed in keys", {
+            toml: str,
+            ptr: ptr + dot + newLine
+          });
+        }
+        if (strEnd.trimStart()) {
+          throw new TomlError("found extra tokens after the string part", {
+            toml: str,
+            ptr: eos
+          });
+        }
+        if (endPtr < eos) {
+          endPtr = str.indexOf(end, eos);
+          if (endPtr < 0) {
+            throw new TomlError("incomplete key-value: cannot find end of key", {
+              toml: str,
+              ptr
+            });
+          }
+        }
+        parsed.push(part);
+      } else {
+        dot = str.indexOf(".", ptr);
+        let part = str.slice(ptr, dot < 0 || dot > endPtr ? endPtr : dot);
+        if (!KEY_PART_RE.test(part)) {
+          throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
+            toml: str,
+            ptr
+          });
+        }
+        parsed.push(part.trimEnd());
+      }
+    }
+  } while (dot + 1 && dot < endPtr);
+  return [parsed, skipVoid(str, endPtr + 1, true, true)];
+}
+function parseInlineTable(str, ptr, depth, integersAsBigInt) {
+  let res = {};
+  let seen = new Set;
+  let c;
+  ptr++;
+  while ((c = str[ptr++]) !== "}" && c) {
+    if (c === ",") {
+      throw new TomlError("expected value, found comma", {
+        toml: str,
+        ptr: ptr - 1
+      });
+    } else if (c === "#")
+      ptr = skipComment(str, ptr);
+    else if (c !== " " && c !== "\t" && c !== `
+` && c !== "\r") {
+      let k;
+      let t = res;
+      let hasOwn = false;
+      let [key, keyEndPtr] = parseKey(str, ptr - 1);
+      for (let i = 0;i < key.length; i++) {
+        if (i)
+          t = hasOwn ? t[k] : t[k] = {};
+        k = key[i];
+        if ((hasOwn = Object.hasOwn(t, k)) && (typeof t[k] !== "object" || seen.has(t[k]))) {
+          throw new TomlError("trying to redefine an already defined value", {
+            toml: str,
+            ptr
+          });
+        }
+        if (!hasOwn && k === "__proto__") {
+          Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
+        }
+      }
+      if (hasOwn) {
+        throw new TomlError("trying to redefine an already defined value", {
+          toml: str,
+          ptr
+        });
+      }
+      let [value, valueEndPtr] = extractValue(str, keyEndPtr, "}", depth - 1, integersAsBigInt);
+      seen.add(value);
+      t[k] = value;
+      ptr = valueEndPtr;
+    }
+  }
+  if (!c) {
+    throw new TomlError("unfinished table encountered", {
+      toml: str,
+      ptr
+    });
+  }
+  return [res, ptr];
+}
+function parseArray(str, ptr, depth, integersAsBigInt) {
+  let res = [];
+  let c;
+  ptr++;
+  while ((c = str[ptr++]) !== "]" && c) {
+    if (c === ",") {
+      throw new TomlError("expected value, found comma", {
+        toml: str,
+        ptr: ptr - 1
+      });
+    } else if (c === "#")
+      ptr = skipComment(str, ptr);
+    else if (c !== " " && c !== "\t" && c !== `
+` && c !== "\r") {
+      let e = extractValue(str, ptr - 1, "]", depth - 1, integersAsBigInt);
+      res.push(e[0]);
+      ptr = e[1];
+    }
+  }
+  if (!c) {
+    throw new TomlError("unfinished array encountered", {
+      toml: str,
+      ptr
+    });
+  }
+  return [res, ptr];
+}
+
+// node_modules/smol-toml/dist/parse.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+function peekTable(key, table, meta3, type) {
+  let t = table;
+  let m = meta3;
+  let k;
+  let hasOwn = false;
+  let state;
+  for (let i = 0;i < key.length; i++) {
+    if (i) {
+      t = hasOwn ? t[k] : t[k] = {};
+      m = (state = m[k]).c;
+      if (type === 0 && (state.t === 1 || state.t === 2)) {
+        return null;
+      }
+      if (state.t === 2) {
+        let l = t.length - 1;
+        t = t[l];
+        m = m[l].c;
+      }
+    }
+    k = key[i];
+    if ((hasOwn = Object.hasOwn(t, k)) && m[k]?.t === 0 && m[k]?.d) {
+      return null;
+    }
+    if (!hasOwn) {
+      if (k === "__proto__") {
+        Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
+        Object.defineProperty(m, k, { enumerable: true, configurable: true, writable: true });
+      }
+      m[k] = {
+        t: i < key.length - 1 && type === 2 ? 3 : type,
+        d: false,
+        i: 0,
+        c: {}
+      };
+    }
+  }
+  state = m[k];
+  if (state.t !== type && !(type === 1 && state.t === 3)) {
+    return null;
+  }
+  if (type === 2) {
+    if (!state.d) {
+      state.d = true;
+      t[k] = [];
+    }
+    t[k].push(t = {});
+    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: {} };
+  }
+  if (state.d) {
+    return null;
+  }
+  state.d = true;
+  if (type === 1) {
+    t = hasOwn ? t[k] : t[k] = {};
+  } else if (type === 0 && hasOwn) {
+    return null;
+  }
+  return [k, t, state.c];
+}
+function parse5(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
+  let res = {};
+  let meta3 = {};
+  let tbl = res;
+  let m = meta3;
+  for (let ptr = skipVoid(toml, 0);ptr < toml.length; ) {
+    if (toml[ptr] === "[") {
+      let isTableArray = toml[++ptr] === "[";
+      let k = parseKey(toml, ptr += +isTableArray, "]");
+      if (isTableArray) {
+        if (toml[k[1] - 1] !== "]") {
+          throw new TomlError("expected end of table declaration", {
+            toml,
+            ptr: k[1] - 1
+          });
+        }
+        k[1]++;
+      }
+      let p = peekTable(k[0], res, meta3, isTableArray ? 2 : 1);
+      if (!p) {
+        throw new TomlError("trying to redefine an already defined table or value", {
+          toml,
+          ptr
+        });
+      }
+      m = p[2];
+      tbl = p[1];
+      ptr = k[1];
+    } else {
+      let k = parseKey(toml, ptr);
+      let p = peekTable(k[0], tbl, m, 0);
+      if (!p) {
+        throw new TomlError("trying to redefine an already defined table or value", {
+          toml,
+          ptr
+        });
+      }
+      let v = extractValue(toml, k[1], undefined, maxDepth, integersAsBigInt);
+      p[1][p[0]] = v[0];
+      ptr = v[1];
+    }
+    ptr = skipVoid(toml, ptr, true);
+    if (toml[ptr] && toml[ptr] !== `
+` && toml[ptr] !== "\r") {
+      throw new TomlError("each key-value declaration must be followed by an end-of-line", {
+        toml,
+        ptr
+      });
+    }
+    ptr = skipVoid(toml, ptr);
+  }
+  return res;
+}
+
+// node_modules/smol-toml/dist/stringify.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+// node_modules/smol-toml/dist/index.js
+/*!
+ * Copyright (c) Squirrel Chat et al., All rights reserved.
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice,
+ *    this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software without
+ *    specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+// src/config/tomlConfigLoader.ts
+async function loadTomlConfigFile(configPath) {
+  const source = await readFile(configPath, "utf8");
+  try {
+    return parse5(source);
+  } catch (error51) {
+    throw new Error(formatTomlError(configPath, error51));
+  }
+}
+function formatTomlError(configPath, error51) {
+  if (error51 instanceof TomlError) {
+    return `TOML config parse failed for ${configPath} at ${error51.line}:${error51.column}: ${error51.message}`;
+  }
+  return `TOML config parse failed for ${configPath}: ${error51 instanceof Error ? error51.message : String(error51)}`;
+}
+
 // src/config/tsConfigLoader.ts
 var import_typescript = __toESM(require_typescript(), 1);
 import { createRequire as createRequire2 } from "node:module";
@@ -184034,14 +185253,14 @@ ${transpiled}
 
 // src/config/trustedConfig.ts
 import { createHash } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname as dirname2, join, resolve } from "node:path";
 function hashConfigSource(source) {
   return createHash("sha256").update(source).digest("hex");
 }
 function defaultTrustedConfigStorePath(env = process.env) {
-  return env.KYOSO_TRUST_STORE_PATH ? resolve(env.KYOSO_TRUST_STORE_PATH) : join(homedir(), ".kyoso", "trusted-configs.json");
+  return env.KYOSO_TRUST_STORE_PATH ? resolve(env.KYOSO_TRUST_STORE_PATH) : join(env.HOME ? resolve(env.HOME) : homedir(), ".kyoso", "trusted-configs.json");
 }
 async function isTrustedConfig(storePath, configPath, configHash) {
   const store = await readTrustedConfigStore(storePath);
@@ -184060,7 +185279,7 @@ async function trustConfig(storePath, configPath, configHash) {
 async function readTrustedConfigStore(storePath) {
   let parsed;
   try {
-    parsed = JSON.parse(await readFile(storePath, "utf8"));
+    parsed = JSON.parse(await readFile2(storePath, "utf8"));
   } catch (error51) {
     if (isMissingPathError(error51))
       return {};
@@ -184068,7 +185287,7 @@ async function readTrustedConfigStore(storePath) {
       return {};
     throw error51;
   }
-  if (!isRecord(parsed))
+  if (!isRecord2(parsed))
     return {};
   const store = {};
   for (const [configPath, configHash] of Object.entries(parsed)) {
@@ -184077,7 +185296,7 @@ async function readTrustedConfigStore(storePath) {
   }
   return store;
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isMissingPathError(error51) {
@@ -184085,44 +185304,178 @@ function isMissingPathError(error51) {
 }
 
 // src/config/loadConfig.ts
+var KNOWN_GLOBAL_CONFIG_LEAF_PATHS = new Set(kyosoConfigKnownLeafPaths);
+var GLOBAL_CONFIG_RECORD_PREFIXES = kyosoConfigRecordPrefixes.map((path) => path.split("."));
+var SECURITY_SENSITIVE_GLOBAL_PREFIXES = kyosoConfigSecuritySensitivePrefixes.map((path) => path.split("."));
 async function loadConfig(options = {}) {
   const cwd = options.cwd ?? process.cwd();
+  const env = options.env ?? process.env;
+  const globalConfigPath = resolveGlobalTomlConfigPath(env);
   const warnings = [];
-  let userConfig = {};
+  const sources = [];
+  let mergedConfig = defaultConfig;
   let configPath;
   let configHash;
   let configTrustStatus = options.ignoreConfig ? "ignored" : "not_found";
   if (!options.ignoreConfig) {
-    const candidate = resolve2(cwd, options.configPath ?? "kyoso.config.ts");
-    if (await exists(candidate)) {
-      configPath = candidate;
-      const source = await readFile2(candidate, "utf8");
-      configHash = hashConfigSource(source);
-      const trustStorePath = options.trustStorePath ?? defaultTrustedConfigStorePath();
-      const trusted = await isTrustedConfig(trustStorePath, candidate, configHash);
-      const trustDecision = await resolveTrustDecision({
-        configPath: candidate,
-        configHash,
-        trusted,
+    if (await exists(globalConfigPath)) {
+      const globalConfig2 = await loadTomlConfigFile(globalConfigPath);
+      const globalConfigWarnings = collectGlobalConfigWarnings(globalConfigPath, globalConfig2);
+      const securitySensitiveWarnings = globalConfigWarnings.filter((warning) => warning.startsWith("security-sensitive unknown settings "));
+      if (securitySensitiveWarnings.length > 0 && !options.allowUnknownConfig) {
+        throw new Error(`Security-sensitive unknown config settings rejected. Fix the key name or pass --allow-unknown-config to continue with warnings: ${securitySensitiveWarnings.join("; ")}`);
+      }
+      warnings.push(...globalConfigWarnings);
+      mergedConfig = deepMerge2(mergedConfig, globalConfig2);
+      sources.push({ path: globalConfigPath, layer: "global_toml" });
+    }
+    if (options.configPath) {
+      const explicitConfigPath = resolve2(cwd, options.configPath);
+      if (!await exists(explicitConfigPath)) {
+        throw new Error(`Config file not found: ${explicitConfigPath} (from --config)`);
+      }
+      const loaded = await loadProjectConfig({
+        configPath: explicitConfigPath,
+        baseConfig: mergedConfig,
+        globalConfigPath,
         options
       });
-      configTrustStatus = trustDecision.status;
-      if (trustDecision.execute) {
-        userConfig = await loadUserConfig(candidate, source);
-        if (trustDecision.shouldPersist) {
-          await trustConfig(trustStorePath, candidate, configHash);
-        }
-      } else {
-        warnings.push(`untrusted config was not executed: ${candidate}; run \`kyoso doctor --trust-config\` or pass \`--trust-config\` once to trust it`);
+      mergedConfig = loaded.mergedConfig;
+      configPath = loaded.configPath;
+      configHash = loaded.configHash;
+      configTrustStatus = loaded.configTrustStatus;
+      sources.push(loaded.source);
+      warnings.push(...loaded.warnings);
+    } else {
+      const projectTomlPath = resolve2(cwd, "kyoso.toml");
+      const projectTsPath = resolve2(cwd, "kyoso.config.ts");
+      const hasProjectToml = await exists(projectTomlPath);
+      const hasProjectTs = await exists(projectTsPath);
+      if (hasProjectToml) {
+        mergedConfig = mergeProjectTomlConfig(mergedConfig, await loadTomlConfigFile(projectTomlPath), { projectPath: projectTomlPath, globalConfigPath });
+        configPath = projectTomlPath;
+        sources.push({ path: projectTomlPath, layer: "project_toml" });
+        if (hasProjectTs) {
+          warnings.push(`kyoso.config.ts was ignored because kyoso.toml takes precedence: ${projectTsPath}`);
+        }
+      } else if (hasProjectTs) {
+        const loaded = await loadProjectTsConfig({
+          configPath: projectTsPath,
+          baseConfig: mergedConfig,
+          options
+        });
+        mergedConfig = loaded.mergedConfig;
+        configPath = loaded.configPath;
+        configHash = loaded.configHash;
+        configTrustStatus = loaded.configTrustStatus;
+        sources.push(loaded.source);
+        warnings.push(...loaded.warnings);
       }
     }
   }
-  const parsed = kyosoConfigSchema.parse(deepMerge(defaultConfig, userConfig));
+  const parsed = kyosoConfigSchema.parse(mergedConfig);
   return {
     config: parsed,
     configPath,
     configHash,
     configTrustStatus,
+    sources,
+    warnings
+  };
+}
+function resolveGlobalTomlConfigPath(env = process.env) {
+  const configHome = env.XDG_CONFIG_HOME ? resolve2(env.XDG_CONFIG_HOME) : join2(env.HOME ? resolve2(env.HOME) : homedir2(), ".config");
+  return join2(configHome, "kyoso", "config.toml");
+}
+function collectGlobalConfigWarnings(configPath, config2) {
+  const unknownSettings = flattenLeaves(config2).map((leaf) => leaf.path).filter((path) => !isKnownGlobalConfigPath(path)).map((path) => ({
+    path: sanitizeWarningText(path.join(".")),
+    securitySensitive: isSecuritySensitiveGlobalPath(path)
+  })).sort((left, right) => left.path.localeCompare(right.path));
+  const warnings = [];
+  const securitySensitivePaths = unknownSettings.filter((setting) => setting.securitySensitive).map((setting) => setting.path);
+  const generalPaths = unknownSettings.filter((setting) => !setting.securitySensitive).map((setting) => setting.path);
+  const sanitizedConfigPath = sanitizeWarningText(configPath);
+  if (securitySensitivePaths.length > 0) {
+    warnings.push(`security-sensitive unknown settings in ${sanitizedConfigPath} were ignored: ${formatUnknownPaths(securitySensitivePaths)}`);
+  }
+  if (generalPaths.length > 0) {
+    warnings.push(`unknown settings in ${sanitizedConfigPath} were ignored: ${formatUnknownPaths(generalPaths)}`);
+  }
+  return warnings;
+}
+function sanitizeWarningText(value) {
+  const withoutControlChars = value.replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, "").replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+  return sanitizeText(withoutControlChars);
+}
+function formatUnknownPaths(paths) {
+  return paths.map((path) => JSON.stringify(path)).join("; ");
+}
+function isSecuritySensitiveGlobalPath(path) {
+  return SECURITY_SENSITIVE_GLOBAL_PREFIXES.some((prefix) => pathStartsWith(path, prefix));
+}
+function isKnownGlobalConfigPath(path) {
+  if (KNOWN_GLOBAL_CONFIG_LEAF_PATHS.has(path.join(".")))
+    return true;
+  return GLOBAL_CONFIG_RECORD_PREFIXES.some((prefix) => pathStartsWith(path, prefix));
+}
+function pathStartsWith(path, prefix) {
+  return path.length >= prefix.length && prefix.every((part, index) => path[index] === part);
+}
+async function loadProjectConfig(input) {
+  const extension = extname2(input.configPath);
+  if (extension === ".toml") {
+    return {
+      mergedConfig: mergeProjectTomlConfig(input.baseConfig, await loadTomlConfigFile(input.configPath), {
+        projectPath: input.configPath,
+        globalConfigPath: input.globalConfigPath
+      }),
+      configPath: input.configPath,
+      configTrustStatus: "not_found",
+      source: { path: input.configPath, layer: "project_toml" },
+      warnings: []
+    };
+  }
+  if (extension === ".ts") {
+    return await loadProjectTsConfig(input);
+  }
+  throw new Error(`Unsupported config file extension for ${input.configPath}. Expected .toml or .ts.`);
+}
+async function loadProjectTsConfig(input) {
+  const warnings = [
+    'kyoso.config.ts is deprecated; migrate to kyoso.toml (see README "Configuration")'
+  ];
+  const source = await readFile3(input.configPath, "utf8");
+  const configHash = hashConfigSource(source);
+  const trustStorePath = input.options.trustStorePath ?? defaultTrustedConfigStorePath(input.options.env);
+  const trusted = await isTrustedConfig(trustStorePath, input.configPath, configHash);
+  const trustDecision = await resolveTrustDecision({
+    configPath: input.configPath,
+    configHash,
+    trusted,
+    options: input.options
+  });
+  if (trustDecision.execute) {
+    const userConfig = await loadUserConfig(input.configPath, source);
+    if (trustDecision.shouldPersist) {
+      await trustConfig(trustStorePath, input.configPath, configHash);
+    }
+    return {
+      mergedConfig: deepMerge2(input.baseConfig, userConfig),
+      configPath: input.configPath,
+      configHash,
+      configTrustStatus: trustDecision.status,
+      source: { path: input.configPath, layer: "project_ts" },
+      warnings
+    };
+  }
+  warnings.push(`untrusted config was not executed: ${input.configPath}; run \`kyoso doctor --trust-config\` or pass \`--trust-config\` once to trust it`);
+  return {
+    mergedConfig: input.baseConfig,
+    configPath: input.configPath,
+    configHash,
+    configTrustStatus: trustDecision.status,
+    source: { path: input.configPath, layer: "project_ts" },
     warnings
   };
 }
@@ -184172,16 +185525,16 @@ async function promptForConfigTrust(configPath, configHash) {
     rl.close();
   }
 }
-function deepMerge(base, override) {
-  if (!isRecord2(base) || !isRecord2(override))
+function deepMerge2(base, override) {
+  if (!isRecord3(base) || !isRecord3(override))
     return override ?? base;
   const result = { ...base };
   for (const [key, value] of Object.entries(override)) {
-    result[key] = deepMerge(result[key], value);
+    result[key] = deepMerge2(result[key], value);
   }
   return result;
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function exists(path) {
@@ -184195,7 +185548,7 @@ async function exists(path) {
 
 // src/acp/AcpAgentProcess.ts
 import { spawn } from "node:child_process";
-import { readFile as readFile3, realpath } from "node:fs/promises";
+import { readFile as readFile4, realpath } from "node:fs/promises";
 import { isAbsolute, relative, resolve as resolve3 } from "node:path";
 import { Readable, Writable } from "node:stream";
 
@@ -186069,14 +187422,14 @@ function ndJsonStream(output, input) {
 }
 // node_modules/@agentclientprotocol/sdk/dist/jsonrpc.js
 var CANCEL_REQUEST_METHOD = "$/cancel_request";
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null;
 }
 function isJsonRpcId(value) {
   return value === null || typeof value === "string" || typeof value === "number" && Number.isFinite(value);
 }
 function cancelRequestId(params) {
-  if (!isRecord3(params) || !isJsonRpcId(params["requestId"])) {
+  if (!isRecord4(params) || !isJsonRpcId(params["requestId"])) {
     return;
   }
   return params["requestId"];
@@ -186578,25 +187931,25 @@ class ConnectionBuilder {
       describe: () => this.connectionName ?? "onReceiveMessage"
     });
   }
-  onReceiveRequest(method, parse5, handler) {
+  onReceiveRequest(method, parse6, handler) {
     return this.withHandler({
       handleMessage: async (message, cx) => {
         if (message.kind !== "request" || message.method !== method) {
           return Handled.no(message);
         }
-        const request = parse5(message.params);
+        const request = parse6(message.params);
         return await handler(request, message.responder, cx) ?? Handled.yes();
       },
       describe: () => `${this.connectionName ?? "request"}:${method}`
     });
   }
-  onReceiveNotification(method, parse5, handler) {
+  onReceiveNotification(method, parse6, handler) {
     return this.withHandler({
       handleMessage: async (message, cx) => {
         if (message.kind !== "notification" || message.method !== method) {
           return Handled.no(message);
         }
-        const notification = parse5(message.params);
+        const notification = parse6(message.params);
         return await handler(notification, cx) ?? Handled.yes();
       },
       describe: () => `${this.connectionName ?? "notification"}:${method}`
@@ -187470,42 +188823,6 @@ var legacyClientNotificationMethods = new Set([
   CLIENT_METHODS.elicitation_complete
 ]);
 
-// src/security/redact.ts
-var REDACTION = "[KYOSO_REDACTED]";
-
-// src/core/constants.ts
-var DEFAULT_AGENT_TIMEOUT_MS = 120000;
-var RAW_OUTPUT_MAX_CHARS = 16384;
-var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-
-// src/security/sanitizeText.ts
-var SENSITIVE_TEXT_PATTERNS = [
-  /\bsk-(?:proj-)?[A-Za-z0-9_-]{8,}\b/g,
-  /\bsk-ant-[A-Za-z0-9_-]{8,}\b/g,
-  /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{8,}\b/g,
-  /\bAKIA[0-9A-Z]{8,}\b/g,
-  /\bxox[baprs]-[A-Za-z0-9-]{8,}\b/g,
-  /\bsk_(?:live|test)_[A-Za-z0-9]{8,}\b/g,
-  /\b(?:api[_-]?key|secret|token|password)\b\s*[:=]\s*["']?[A-Za-z0-9_./+=-]{8,}["']?/gi
-];
-function sanitizeText(value) {
-  return SENSITIVE_TEXT_PATTERNS.reduce((text, pattern) => text.replace(pattern, REDACTION), value);
-}
-function sanitizeTextForDisplay(value, maxChars = 240) {
-  const compact = sanitizeText(value).replace(/\s+/g, " ").trim();
-  if (compact.length <= maxChars)
-    return compact;
-  return `${compact.slice(0, Math.max(0, maxChars - 3))}...`;
-}
-function sanitizeTextForRawOutput(value, maxChars = RAW_OUTPUT_MAX_CHARS) {
-  const sanitized = sanitizeText(value);
-  const limit = Math.max(0, maxChars);
-  if (sanitized.length <= limit)
-    return sanitized;
-  return `${sanitized.slice(0, limit)}
-[KYOSO_TRUNCATED: ${sanitized.length - limit} chars omitted]`;
-}
-
 // src/utils/env.ts
 var MINIMAL_ENV_KEYS = [
   "PATH",
@@ -187685,7 +189002,7 @@ function isSeverity(value) {
   return typeof value === "string" && severities.includes(value);
 }
 function normalizeCisaSecureByDesign(value) {
-  if (!isRecord4(value))
+  if (!isRecord5(value))
     return;
   const normalized = {};
   const customerSecurityOutcomes = normalizeGateStatus(value.customerSecurityOutcomes);
@@ -187726,7 +189043,7 @@ function normalizeFindingFiles(value) {
   if (!Array.isArray(value))
     return;
   const files = value.flatMap((item) => {
-    if (!isRecord4(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
+    if (!isRecord5(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
       return [];
     }
     const file2 = {
@@ -187745,7 +189062,7 @@ function normalizeFindingFiles(value) {
 function normalizeLineNumber(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -187933,7 +189250,7 @@ async function readWorkspaceFile(workspaceDir, requestedPath, line, limit) {
     const readablePath = await resolveReadableFile(workspaceRoot, absolute);
     if (!readablePath)
       continue;
-    content = await readFile3(readablePath, "utf8").catch(() => {
+    content = await readFile4(readablePath, "utf8").catch(() => {
       return;
     });
     if (content !== undefined)
@@ -188686,7 +190003,7 @@ function normalizeTitle(value) {
 
 // src/audit/trace.ts
 import { mkdir as mkdir2, appendFile } from "node:fs/promises";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join2 } from "node:path";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3 } from "node:path";
 
 // src/context/pathPolicy.ts
 import { normalize, sep } from "node:path";
@@ -188780,7 +190097,7 @@ function createTraceWriter(options) {
   }
   const date5 = new Date().toISOString().slice(0, 10);
   const directory = validateAuditDirectory(options.directory, warnings);
-  const tracePath = join2(options.cwd, directory, date5, `${options.traceId}.jsonl`);
+  const tracePath = join3(options.cwd, directory, date5, `${options.traceId}.jsonl`);
   return {
     tracePath,
     warnings,
@@ -188961,6 +190278,10 @@ function renderMarkdownResult(tool, result, options = {}) {
   lines.push(...result.testsToAdd.length > 0 ? result.testsToAdd.map((test) => `- ${test}`) : ["- None."]);
   lines.push("", "## Residual Risks", "");
   lines.push(...result.residualRisks.length > 0 ? result.residualRisks.map((risk) => `- ${risk}`) : ["- None."]);
+  if (result.audit.warnings && result.audit.warnings.length > 0) {
+    lines.push("", "## Warnings", "");
+    lines.push(...result.audit.warnings.map((warning) => `- ${escapeMarkdownText(warning)}`));
+  }
   if (result.crossModelAnalysis) {
     lines.push("", "## Cross-Model Analysis", "");
     if (result.reviewMode === "single_agent") {
@@ -189025,6 +190346,9 @@ function formatVerification(finding) {
 function formatList(items) {
   return items.length > 0 ? items.map((item) => `- ${item}`) : ["- None."];
 }
+function escapeMarkdownText(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replace(/[\r\n]+/g, " ").replace(/([\\`*_{}\[\]()#+!|])/g, "\\$1");
+}
 
 // src/judge/prompt.ts
 var ANALYSIS_MAX_ITEMS = 5;
@@ -189074,7 +190398,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   const parsed = JSON.parse(json2);
   const summaryText = typeof parsed.summaryText === "string" && parsed.summaryText.trim().length > 0 ? sanitizeText(parsed.summaryText) : fallbackSummaryText;
   const disagreementComments = Array.isArray(parsed.disagreementComments) ? parsed.disagreementComments.flatMap((item) => {
-    if (!isRecord5(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
+    if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
       return [];
     }
     return [
@@ -189090,7 +190414,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   return { summaryText, disagreementComments, analysis };
 }
 function parseAnalysis(value) {
-  if (!isRecord5(value))
+  if (!isRecord6(value))
     return;
   if (!Array.isArray(value.blindSpots) || !Array.isArray(value.contradictions) || !Array.isArray(value.partialCoverage)) {
     return;
@@ -189098,7 +190422,7 @@ function parseAnalysis(value) {
   return {
     blindSpots: value.blindSpots.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => typeof item === "string" ? [sanitizeAnalysisText(item)] : []),
     contradictions: value.contradictions.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord5(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
+      if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
         return [];
       }
       return [
@@ -189109,7 +190433,7 @@ function parseAnalysis(value) {
       ];
     }),
     partialCoverage: value.partialCoverage.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord5(item) || typeof item.note !== "string")
+      if (!isRecord6(item) || typeof item.note !== "string")
         return [];
       const findingId = typeof item.findingId === "string" ? sanitizeAnalysisText(item.findingId) : undefined;
       return [
@@ -189156,7 +190480,7 @@ function extractFirstJsonObject2(text) {
   }
   return;
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -189492,12 +190816,12 @@ function decide(input) {
 
 // src/workspace/createSnapshot.ts
 import { chmod, mkdir as mkdir3, mkdtemp, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, join as join3 } from "node:path";
+import { dirname as dirname4, join as join4 } from "node:path";
 import { tmpdir } from "node:os";
 async function createSnapshot(traceId, tool, request, options = {}) {
-  const root = await mkdtemp(join3(tmpdir(), `kyoso-${traceId}-`));
-  const repoDir = join3(root, "repo");
-  const contextDir = join3(root, "context");
+  const root = await mkdtemp(join4(tmpdir(), `kyoso-${traceId}-`));
+  const repoDir = join4(root, "repo");
+  const contextDir = join4(root, "context");
   await mkdir3(repoDir, { recursive: true });
   await mkdir3(contextDir, { recursive: true });
   let fileCount = 0;
@@ -189507,7 +190831,7 @@ async function createSnapshot(traceId, tool, request, options = {}) {
       continue;
     if (!isAllowedPath(relative2, options.allowPatterns ?? []))
       continue;
-    const dest = join3(repoDir, relative2);
+    const dest = join4(repoDir, relative2);
     await mkdir3(dirname4(dest), { recursive: true });
     await writeFile2(dest, file2.content, "utf8");
     await chmod(dest, 292).catch(() => {
@@ -189515,16 +190839,16 @@ async function createSnapshot(traceId, tool, request, options = {}) {
     });
     fileCount += 1;
   }
-  await writeFile2(join3(contextDir, "request.json"), JSON.stringify(stripContents(request), null, 2), "utf8");
-  await writeFile2(join3(contextDir, "selected_files_manifest.json"), JSON.stringify(buildSelectedFilesManifest(request), null, 2), "utf8");
-  await writeFile2(join3(contextDir, "instructions.codex.md"), buildAgentPrompt(tool, request, "codex", options.agentRoles?.codex ?? "implementation_reviewer"), "utf8");
-  await writeFile2(join3(contextDir, "instructions.claude.md"), buildAgentPrompt(tool, request, "claude", options.agentRoles?.claude ?? "architecture_security_reviewer"), "utf8");
+  await writeFile2(join4(contextDir, "request.json"), JSON.stringify(stripContents(request), null, 2), "utf8");
+  await writeFile2(join4(contextDir, "selected_files_manifest.json"), JSON.stringify(buildSelectedFilesManifest(request), null, 2), "utf8");
+  await writeFile2(join4(contextDir, "instructions.codex.md"), buildAgentPrompt(tool, request, "codex", options.agentRoles?.codex ?? "implementation_reviewer"), "utf8");
+  await writeFile2(join4(contextDir, "instructions.claude.md"), buildAgentPrompt(tool, request, "claude", options.agentRoles?.claude ?? "architecture_security_reviewer"), "utf8");
   if (request.repoSummary)
-    await writeFile2(join3(contextDir, "repo_summary.md"), request.repoSummary, "utf8");
+    await writeFile2(join4(contextDir, "repo_summary.md"), request.repoSummary, "utf8");
   if (request.currentPlan)
-    await writeFile2(join3(contextDir, "current_plan.md"), request.currentPlan, "utf8");
+    await writeFile2(join4(contextDir, "current_plan.md"), request.currentPlan, "utf8");
   if (request.diff?.unifiedDiff)
-    await writeFile2(join3(contextDir, "diff.patch"), request.diff.unifiedDiff, "utf8");
+    await writeFile2(join4(contextDir, "diff.patch"), request.diff.unifiedDiff, "utf8");
   return { root, repoDir, contextDir, fileCount };
 }
 function stripContents(request) {
@@ -189614,7 +190938,7 @@ function parseVerificationVerdicts(rawText) {
     if (!Array.isArray(parsed.verdicts))
       return;
     return parsed.verdicts.flatMap((item) => {
-      if (!isRecord6(item))
+      if (!isRecord7(item))
         return [];
       if (typeof item.findingId !== "string")
         return [];
@@ -189692,7 +191016,7 @@ function verificationNote(reasoning) {
 function isVerdict(value) {
   return value === "confirmed" || value === "refuted" || value === "uncertain";
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -189745,14 +191069,17 @@ async function runReview(tool, request, options = {}) {
     config: options.config,
     configHash: options.configHash,
     configTrustStatus: "trusted",
+    sources: [],
     warnings: []
   } : await loadConfig({
     cwd,
     configPath: options.configPath,
     ignoreConfig: options.ignoreConfig,
     trustConfig: options.trustConfig,
+    allowUnknownConfig: options.allowUnknownConfig,
     promptForTrust: options.promptForTrust,
     trustStorePath: options.trustStorePath,
+    env: options.env,
     trustPrompt: options.trustPrompt
   });
   const trace = createTraceWriter({
@@ -189775,6 +191102,7 @@ async function runReview(tool, request, options = {}) {
       traceId,
       configHash: loaded.configHash,
       configPath: loaded.configPath,
+      configSources: loaded.sources,
       configTrustStatus: loaded.configTrustStatus,
       timestamp: new Date().toISOString()
     });