@letrquan/book 0.3.0 → 0.4.0-beta.0

package/dist/chunk-DNFQTSMJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/skills.ts"],"sourcesContent":["import {\n  closeSync,\n  existsSync,\n  lstatSync,\n  openSync,\n  readFileSync,\n  readSync,\n  readdirSync,\n  realpathSync,\n  statSync,\n} from 'node:fs';\nimport { createHash } from 'node:crypto';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, parse, relative, resolve, sep } from 'node:path';\nimport { parseFrontmatter } from './frontmatter.js';\nimport { resolveBookHome } from './book-home.js';\nimport { isUserHome, tryRealPath } from './repo-containment.js';\nimport type { SkillActivation, SkillExecution } from './settings.js';\nimport { createUncGuard, reachesUncPath, type UncGuard } from './unc-path.js';\n\nexport const SKILL_ENTRY_FILENAME = 'SKILL.md';\nexport const MAX_SKILL_HEADER_BYTES = 64 * 1024;\nexport const MAX_SKILL_BODY_BYTES = 100 * 1024;\nexport const MAX_SKILL_RESOURCES = 200;\nexport const MAX_SKILL_RESOURCE_DEPTH = 4;\nexport const MAX_SKILL_RESOURCE_BYTES = 2 * 1024 * 1024;\n\nconst SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst KNOWN_FRONTMATTER_FIELDS = new Set([\n  'name',\n  'description',\n  'license',\n  'compatibility',\n  'version',\n  'metadata',\n  'allowed-tools',\n  'tools',\n  'when_to_use',\n  'model',\n  'lifetime',\n  'disabled',\n  // Interoperable Claude/Codex skill metadata. Invocation controls are\n  // advisory to Book's explicit `$name` UI and do not grant permissions.\n  'disable-model-invocation',\n  'user-invocable',\n  'argument-hint',\n]);\n\nexport type SkillSource = 'user' | 'project';\nexport type SkillRootKind = 'book' | 'agents' | 'claude' | 'opencode';\nexport type SkillIssueSeverity = 'error' | 'warning';\n\nexport interface SkillIssue {\n  code: string;\n  message: string;\n  severity: SkillIssueSeverity;\n}\n\nexport interface SkillResource {\n  relativePath: string;\n  byteSize: number;\n  mtimeMs: number;\n  digest: string;\n}\n\nexport interface ShadowedSkill {\n  path: string;\n  source: SkillSource;\n  rootKind: SkillRootKind;\n}\n\n/** Metadata discovered without retaining or injecting the SKILL.md body. */\nexport interface Skill {\n  id: string;\n  version: string;\n  descriptorDigest: string;\n  resourceDigest: string;\n  name: string;\n  description: string;\n  whenToUse?: string;\n  license?: string;\n  compatibility?: string;\n  metadata: Record<string, string>;\n  /** Requested tool ceiling. It never grants permission by itself. */\n  allowedTools?: string[];\n  model?: string;\n  lifetime: 'turn' | 'run';\n  /** Absolute path to the skill entrypoint. */\n  path: string;\n  /** Absolute directory that owns the skill and its resources. */\n  rootPath: string;\n  source: SkillSource;\n  rootKind: SkillRootKind;\n  activation: SkillActivation;\n  execution: SkillExecution;\n  invocationCount: number;\n  entryByteSize: number;\n  entryMtimeMs: number;\n  resources: SkillResource[];\n  issues: SkillIssue[];\n  valid: boolean;\n  shadowed: ShadowedSkill[];\n}\n\nexport interface LoadedSkillBody {\n  body: string;\n  digest: string;\n  byteSize: number;\n}\n\nexport interface SkillRoot {\n  path: string;\n  source: SkillSource;\n  kind: SkillRootKind;\n}\n\nexport interface DiscoverSkillsOptions {\n  homeDir?: string;\n  bookHomeDir?: string;\n  includeUser?: boolean;\n  projectRoot?: string;\n  includeOpenCode?: boolean;\n  enabled?: boolean;\n  executionOverrides?: Readonly<Record<string, SkillExecution>>;\n}\n\nfunction pathKey(path: string): string {\n  return process.platform === 'win32' ? resolve(path).toLowerCase() : resolve(path);\n}\n\n/**\n * The real path of a skill root, or undefined when it does not exist (it contributes no skills,\n * so there is nothing to fold).\n *\n * Only for asking whether a project root is a user root reached another way. {@link pathKey}\n * stays the path as written because it also builds the skill id, which keys consent and\n * execution overrides, and it is what roots are otherwise deduped by.\n */\nfunction realRootPath(path: string): string | undefined {\n  try {\n    const real = realpathSync.native(path);\n    return process.platform === 'win32' ? real.toLowerCase() : real;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction isInside(root: string, candidate: string): boolean {\n  const rel = relative(root, candidate);\n  return rel === '' || (!rel.startsWith(`..${sep}`) && rel !== '..' && !isAbsolute(rel));\n}\n\n/**\n * The nearest directory above `workspace`, as written, with a `.git` entry; the workspace when\n * there is none. A `.git` at the home directory (`home`, the user's when not given) is a dotfiles\n * repository, not a project (`findRepositoryRoot` in `repo-containment.ts`), so it ends the walk\n * with no repository: a project under the home directory without its own `.git` scans its own\n * directory, not every directory from the home directory down.\n */\nfunction projectRootFor(workspace: string, home: string | undefined, reachesUnc: UncGuard): string {\n  // A workspace that reaches a network share has no project roots (`skillRoots`), so nothing on\n  // the way up is probed; nor is a `.git` that does, which `existsSync` would follow (#579).\n  if (reachesUnc(workspace)) return resolve(workspace);\n  let current = resolve(workspace);\n  const filesystemRoot = parse(current).root;\n  while (true) {\n    const dotGit = join(current, '.git');\n    // A `.git` it may not open is one it cannot read: the workspace is then its own root, as for\n    // memory (`findGitRoot`).\n    if (reachesUnc(dotGit)) return resolve(workspace);\n    if (existsSync(dotGit)) {\n      return isUserHome(tryRealPath(current) ?? current, home) ? resolve(workspace) : current;\n    }\n    if (current === filesystemRoot) return resolve(workspace);\n    current = dirname(current);\n  }\n}\n\nfunction directoriesFromRoot(root: string, workspace: string): string[] {\n  const normalizedRoot = resolve(root);\n  const normalizedWorkspace = resolve(workspace);\n  if (!isInside(normalizedRoot, normalizedWorkspace)) return [normalizedWorkspace];\n  const directories: string[] = [];\n  let current = normalizedWorkspace;\n  while (true) {\n    directories.push(current);\n    if (pathKey(current) === pathKey(normalizedRoot)) break;\n    current = dirname(current);\n  }\n  return directories.reverse();\n}\n\n/**\n * Roots are ordered from lowest to highest precedence.\n *\n * A project root is a path a repository can commit as a link, and on Windows resolving a link to\n * a network share opens the share, which can send the user's credentials to the host it names\n * (#567, #579). A project root that reaches one is therefore not a root at all, so nothing that\n * takes its roots from here resolves it. The user's own roots are theirs to keep on a share.\n * `reachesUnc` is the UNC guard of the discovery this is part of, so the two share what it probed.\n */\nexport function skillRoots(\n  workspace: string,\n  options: DiscoverSkillsOptions = {},\n  reachesUnc: UncGuard = createUncGuard(),\n): SkillRoot[] {\n  const roots: SkillRoot[] = [];\n  if (options.includeUser !== false) {\n    const home = options.homeDir ?? homedir();\n    const bookHome =\n      options.bookHomeDir ?? (options.homeDir ? join(home, '.book') : resolveBookHome());\n    roots.push(\n      { path: join(home, '.claude', 'skills'), source: 'user', kind: 'claude' },\n      { path: join(home, '.agents', 'skills'), source: 'user', kind: 'agents' },\n      ...(options.includeOpenCode === false\n        ? []\n        : [\n            {\n              path: join(home, '.config', 'opencode', 'skills'),\n              source: 'user' as const,\n              kind: 'opencode' as const,\n            },\n          ]),\n      { path: join(bookHome, 'skills'), source: 'user', kind: 'book' },\n    );\n  }\n\n  const projectRoot = options.projectRoot ?? projectRootFor(workspace, options.homeDir, reachesUnc);\n  for (const directory of directoriesFromRoot(projectRoot, workspace)) {\n    roots.push(\n      { path: join(directory, '.claude', 'skills'), source: 'project', kind: 'claude' },\n      { path: join(directory, '.agents', 'skills'), source: 'project', kind: 'agents' },\n      ...(options.includeOpenCode === false\n        ? []\n        : [\n            {\n              path: join(directory, '.opencode', 'skills'),\n              source: 'project' as const,\n              kind: 'opencode' as const,\n            },\n          ]),\n      { path: join(directory, '.book', 'skills'), source: 'project', kind: 'book' },\n    );\n  }\n  // The real paths of the user roots, for the one fold below. Two roots that merely alias each\n  // other (a repository linking `.claude/skills` to `.book/skills`) are *not* merged: each keeps\n  // its slot, and the later one still wins, as it did before roots were compared by real path.\n  const userRealPaths = new Set<string>();\n  for (const root of roots) {\n    if (root.source !== 'user') continue;\n    const real = realRootPath(root.path);\n    if (real) userRealPaths.add(real);\n  }\n  const byPath = new Map<string, SkillRoot>();\n  for (const root of roots) {\n    const key = pathKey(root.path);\n    // A workspace at `$HOME` walks the user's own roots again as project roots. They stay\n    // user roots: a project skill asks before the model may run it, and the user's own\n    // skills must not start asking because of where Book was launched (#429).\n    if (byPath.get(key)?.source === 'user') continue;\n    if (root.source === 'project' && reachesUnc(root.path)) continue;\n    // The same, when the home is reached through a link, so the project spelling of the path\n    // differs (#449). Only a project root is ever folded into a user root, never the reverse.\n    if (root.source === 'project' && userRealPaths.size > 0) {\n      const real = realRootPath(root.path);\n      if (real && userRealPaths.has(real)) continue;\n    }\n    byPath.set(key, root);\n  }\n  return [...byPath.values()];\n}\n\nfunction readFrontmatterPrefix(path: string): {\n  frontmatter: Record<string, unknown>;\n  headerText: string;\n  issues: SkillIssue[];\n} {\n  const issues: SkillIssue[] = [];\n  const fd = openSync(path, 'r');\n  const chunks: Buffer[] = [];\n  let total = 0;\n  try {\n    while (total < MAX_SKILL_HEADER_BYTES) {\n      const chunk = Buffer.alloc(Math.min(4096, MAX_SKILL_HEADER_BYTES - total));\n      const count = readSync(fd, chunk, 0, chunk.length, total);\n      if (count === 0) break;\n      chunks.push(chunk.subarray(0, count));\n      total += count;\n      const text = Buffer.concat(chunks).toString('utf8');\n      if (/^---\\r?\\n[\\s\\S]*?\\r?\\n---(?:\\r?\\n|$)/.test(text)) {\n        const match = text.match(/^---\\r?\\n[\\s\\S]*?\\r?\\n---(?:\\r?\\n|$)/);\n        const headerText = match?.[0] ?? '';\n        return { frontmatter: parseFrontmatter(headerText).frontmatter, headerText, issues };\n      }\n    }\n  } finally {\n    closeSync(fd);\n  }\n  issues.push({\n    code: 'invalid_frontmatter',\n    message: `Missing YAML frontmatter or closing delimiter within ${MAX_SKILL_HEADER_BYTES} bytes.`,\n    severity: 'error',\n  });\n  return { frontmatter: {}, headerText: '', issues };\n}\n\nfunction stringField(frontmatter: Record<string, unknown>, name: string): string | undefined {\n  const value = frontmatter[name];\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction metadataFromHeader(headerText: string): Record<string, string> {\n  const lines = headerText.split(/\\r?\\n/);\n  const metadata: Record<string, string> = {};\n  const start = lines.findIndex((line) => /^metadata\\s*:\\s*$/.test(line.trim()));\n  if (start < 0) return metadata;\n  for (const line of lines.slice(start + 1)) {\n    if (/^---\\s*$/.test(line)) break;\n    if (line.trim() && !/^\\s+/.test(line)) break;\n    const match = line.match(/^\\s+([A-Za-z0-9_.-]+)\\s*:\\s*(.*?)\\s*$/);\n    if (!match) continue;\n    metadata[match[1]] = match[2].replace(/^[\"'](.*)[\"']$/, '$1');\n  }\n  return metadata;\n}\n\nfunction allowedToolsFrom(frontmatter: Record<string, unknown>): string[] | undefined {\n  const value = frontmatter['allowed-tools'] ?? frontmatter.tools;\n  if (Array.isArray(value)) {\n    const tools = value\n      .map(String)\n      .map((tool) => tool.trim())\n      .filter(Boolean);\n    return tools.length ? tools : undefined;\n  }\n  if (typeof value === 'string') {\n    const tools = value.match(/[^\\s]+(?:\\([^)]*\\))?/g)?.map((tool) => tool.trim()) ?? [];\n    return tools.length ? tools : undefined;\n  }\n  return undefined;\n}\n\nfunction collectResources(\n  rootPath: string,\n  entryPath: string,\n): {\n  resources: SkillResource[];\n  issues: SkillIssue[];\n} {\n  const resources: SkillResource[] = [];\n  const issues: SkillIssue[] = [];\n  let depthLimitReported = false;\n  const visit = (directory: string, depth: number): void => {\n    if (depth > MAX_SKILL_RESOURCE_DEPTH) {\n      if (!depthLimitReported) {\n        depthLimitReported = true;\n        issues.push({\n          code: 'resource_depth_limit',\n          message: `Resources deeper than ${MAX_SKILL_RESOURCE_DEPTH} directories are ignored.`,\n          severity: 'warning',\n        });\n      }\n      return;\n    }\n    if (resources.length >= MAX_SKILL_RESOURCES) return;\n    let entries: string[];\n    try {\n      entries = readdirSync(directory).sort();\n    } catch (error) {\n      issues.push({\n        code: 'resource_unreadable',\n        message: `Could not inspect resources in ${directory}: ${error instanceof Error ? error.message : String(error)}`,\n        severity: 'warning',\n      });\n      return;\n    }\n    for (const entry of entries) {\n      if (resources.length >= MAX_SKILL_RESOURCES) break;\n      const fullPath = join(directory, entry);\n      if (pathKey(fullPath) === pathKey(entryPath)) continue;\n      let info;\n      try {\n        info = lstatSync(fullPath);\n      } catch {\n        continue;\n      }\n      if (info.isSymbolicLink()) {\n        issues.push({\n          code: 'resource_symlink_ignored',\n          message: `Ignored symbolic-link resource: ${relative(rootPath, fullPath)}`,\n          severity: 'warning',\n        });\n        continue;\n      }\n      if (info.isDirectory()) {\n        visit(fullPath, depth + 1);\n        continue;\n      }\n      if (!info.isFile()) continue;\n      let digest = createHash('sha256')\n        .update(`unavailable:${info.size}:${info.mtimeMs}`)\n        .digest('hex');\n      if (info.size > MAX_SKILL_RESOURCE_BYTES) {\n        issues.push({\n          code: 'resource_too_large',\n          message: `Resource exceeds ${MAX_SKILL_RESOURCE_BYTES} bytes: ${relative(rootPath, fullPath)}`,\n          severity: 'warning',\n        });\n      }\n      try {\n        const fd = openSync(fullPath, 'r');\n        try {\n          const prefix = Buffer.alloc(Math.min(info.size, 8192));\n          const read = readSync(fd, prefix, 0, prefix.length, 0);\n          if (prefix.subarray(0, read).includes(0)) {\n            issues.push({\n              code: 'binary_resource',\n              message: `Binary resource cannot be loaded into model context: ${relative(rootPath, fullPath)}`,\n              severity: 'warning',\n            });\n          }\n        } finally {\n          closeSync(fd);\n        }\n      } catch (error) {\n        issues.push({\n          code: 'resource_unreadable',\n          message: `Could not validate resource ${relative(rootPath, fullPath)}: ${error instanceof Error ? error.message : String(error)}`,\n          severity: 'warning',\n        });\n      }\n      if (info.size <= MAX_SKILL_RESOURCE_BYTES) {\n        try {\n          digest = createHash('sha256').update(readFileSync(fullPath)).digest('hex');\n        } catch {\n          // The visible unreadable-resource issue above is the actionable diagnostic.\n        }\n      }\n      resources.push({\n        relativePath: relative(rootPath, fullPath).split(sep).join('/'),\n        byteSize: info.size,\n        mtimeMs: info.mtimeMs,\n        digest,\n      });\n    }\n  };\n  visit(rootPath, 1);\n  if (resources.length >= MAX_SKILL_RESOURCES) {\n    issues.push({\n      code: 'resource_limit',\n      message: `Only the first ${MAX_SKILL_RESOURCES} resources are available.`,\n      severity: 'warning',\n    });\n  }\n  return { resources, issues };\n}\n\nfunction descriptorFromEntry(\n  entryPath: string,\n  root: SkillRoot,\n  directoryName: string,\n  flat = false,\n): Skill {\n  const { frontmatter, headerText, issues: headerIssues } = readFrontmatterPrefix(entryPath);\n  const issues = [...headerIssues];\n  const declaredName = stringField(frontmatter, 'name');\n  const name = declaredName ?? directoryName;\n  const description = stringField(frontmatter, 'description') ?? '';\n\n  if (!SKILL_NAME_PATTERN.test(name) || name.length > 64) {\n    issues.push({\n      code: 'invalid_name',\n      message: 'Skill names must be 1-64 lowercase letters, numbers, or single hyphens.',\n      severity: 'error',\n    });\n  }\n  if (!flat && declaredName !== directoryName) {\n    issues.push({\n      code: 'name_directory_mismatch',\n      message: `Declared name \"${declaredName ?? '(missing)'}\" must match directory \"${directoryName}\".`,\n      severity: 'error',\n    });\n  }\n  if (!declaredName && flat) {\n    issues.push({\n      code: 'legacy_flat_skill',\n      message: 'Flat .skill.md files are supported for compatibility; use <name>/SKILL.md.',\n      severity: 'warning',\n    });\n  }\n  if (!description || description.length > 1024) {\n    issues.push({\n      code: 'invalid_description',\n      message: 'Skill description is required and must be at most 1024 characters.',\n      severity: 'error',\n    });\n  }\n  const compatibility = stringField(frontmatter, 'compatibility');\n  if (compatibility && compatibility.length > 500) {\n    issues.push({\n      code: 'invalid_compatibility',\n      message: 'Skill compatibility must be at most 500 characters.',\n      severity: 'error',\n    });\n  }\n  const whenToUse = stringField(frontmatter, 'when_to_use');\n  if (whenToUse && whenToUse.length > 1024) {\n    issues.push({\n      code: 'invalid_when_to_use',\n      message: 'Skill when_to_use must be at most 1024 characters.',\n      severity: 'error',\n    });\n  }\n  const model = stringField(frontmatter, 'model');\n  if (model) {\n    issues.push({\n      code: 'unsupported_model_hint',\n      message: 'The model field is retained for compatibility but does not change Book models.',\n      severity: 'warning',\n    });\n  }\n  const requestedLifetime = stringField(frontmatter, 'lifetime');\n  if (requestedLifetime && requestedLifetime !== 'run' && requestedLifetime !== 'turn') {\n    issues.push({\n      code: 'invalid_lifetime',\n      message: 'Skill lifetime must be run or turn; Book will use run.',\n      severity: 'warning',\n    });\n  }\n  const lifetime = requestedLifetime === 'turn' ? 'turn' : 'run';\n  for (const field of Object.keys(frontmatter)) {\n    if (!KNOWN_FRONTMATTER_FIELDS.has(field)) {\n      issues.push({\n        code: 'unknown_frontmatter_field',\n        message: `Unknown frontmatter field: ${field}`,\n        severity: 'warning',\n      });\n    }\n  }\n\n  let entryByteSize = 0;\n  let entryMtimeMs = 0;\n  try {\n    const entryInfo = statSync(entryPath);\n    entryByteSize = entryInfo.size;\n    entryMtimeMs = entryInfo.mtimeMs;\n    if (entryByteSize > MAX_SKILL_BODY_BYTES + MAX_SKILL_HEADER_BYTES) {\n      issues.push({\n        code: 'body_too_large',\n        message: `SKILL.md exceeds the ${MAX_SKILL_BODY_BYTES}-byte body budget.`,\n        severity: 'error',\n      });\n    }\n  } catch {\n    issues.push({\n      code: 'skill_unreadable',\n      message: 'Skill entrypoint is unreadable.',\n      severity: 'error',\n    });\n  }\n\n  const rootPath = dirname(entryPath);\n  const resourceResult = flat\n    ? { resources: [] as SkillResource[], issues: [] as SkillIssue[] }\n    : collectResources(rootPath, entryPath);\n  issues.push(...resourceResult.issues);\n\n  const metadata = metadataFromHeader(headerText);\n  const version = stringField(frontmatter, 'version') ?? metadata.version ?? 'unversioned';\n  const resourceDigest = createHash('sha256')\n    .update(JSON.stringify(resourceResult.resources))\n    .digest('hex');\n  const descriptorDigest = createHash('sha256')\n    .update(\n      JSON.stringify({\n        name,\n        description,\n        whenToUse,\n        version,\n        source: root.source,\n        rootKind: root.kind,\n        path: pathKey(entryPath),\n        allowedTools: allowedToolsFrom(frontmatter),\n        lifetime,\n        resourceDigest,\n      }),\n    )\n    .digest('hex');\n\n  return {\n    id: `${root.kind}:${pathKey(entryPath)}`,\n    version,\n    descriptorDigest,\n    resourceDigest,\n    name,\n    description,\n    whenToUse,\n    license: stringField(frontmatter, 'license'),\n    compatibility,\n    metadata,\n    allowedTools: allowedToolsFrom(frontmatter),\n    model,\n    lifetime,\n    path: entryPath,\n    rootPath,\n    source: root.source,\n    rootKind: root.kind,\n    activation: String(frontmatter.disabled).toLowerCase() === 'true' ? 'off' : 'manual',\n    execution: 'inherit',\n    invocationCount: 0,\n    entryByteSize,\n    entryMtimeMs,\n    resources: resourceResult.resources,\n    issues,\n    valid: !issues.some((issue) => issue.severity === 'error'),\n    shadowed: [],\n  };\n}\n\n/**\n * The skills in one root. In a project root, each skill directory and SKILL.md is a path a\n * repository can commit as a link to a network share, as the root itself can (see\n * {@link skillRoots}, which drops such a root): each is asked of `reachesUnc` before anything\n * follows it, and one that reaches a share is not listed. A resource link is never followed\n * (`collectResources`).\n */\nfunction skillsUnderRoot(root: SkillRoot, reachesUnc: UncGuard): Skill[] {\n  const refused = (path: string) => root.source === 'project' && reachesUnc(path);\n  if (!existsSync(root.path)) return [];\n  let entries: string[];\n  try {\n    entries = readdirSync(root.path).sort();\n  } catch {\n    return [];\n  }\n\n  const skills: Skill[] = [];\n  for (const entry of entries) {\n    const fullPath = join(root.path, entry);\n    let info;\n    try {\n      info = lstatSync(fullPath);\n    } catch {\n      continue;\n    }\n    let directory = info.isDirectory();\n    if (info.isSymbolicLink()) {\n      if (refused(fullPath)) continue;\n      try {\n        directory = statSync(fullPath).isDirectory();\n      } catch {\n        continue;\n      }\n    }\n    if (directory) {\n      const entryPath = join(fullPath, SKILL_ENTRY_FILENAME);\n      if (!refused(entryPath) && existsSync(entryPath) && statSync(entryPath).isFile()) {\n        skills.push(descriptorFromEntry(entryPath, root, entry));\n      }\n    } else if (info.isFile() && entry.endsWith('.skill.md')) {\n      skills.push(descriptorFromEntry(fullPath, root, entry.replace(/\\.skill\\.md$/, ''), true));\n    }\n  }\n  return skills;\n}\n\nexport function discoverSkills(\n  workspace: string,\n  overrides: Readonly<Record<string, SkillActivation>> = {},\n  options: DiscoverSkillsOptions = {},\n): Skill[] {\n  const byName = new Map<string, Skill>();\n  const reachesUnc = createUncGuard();\n  for (const root of skillRoots(workspace, options, reachesUnc)) {\n    for (const skill of skillsUnderRoot(root, reachesUnc)) {\n      const previous = byName.get(skill.name);\n      if (previous) {\n        skill.shadowed = [\n          ...previous.shadowed,\n          { path: previous.path, source: previous.source, rootKind: previous.rootKind },\n        ];\n      }\n      byName.set(skill.name, skill);\n    }\n  }\n  return applySkillOverrides(\n    [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)),\n    overrides,\n    options.executionOverrides ?? {},\n    options.enabled ?? true,\n  );\n}\n\nexport function applySkillOverrides(\n  skills: readonly Skill[],\n  overrides: Readonly<Record<string, SkillActivation>>,\n  executionOverrides: Readonly<Record<string, SkillExecution>> = {},\n  enabled = true,\n): Skill[] {\n  return skills.map((skill) => ({\n    ...skill,\n    activation: enabled ? (overrides[skill.name] ?? skill.activation ?? 'manual') : 'off',\n    execution: executionOverrides[skill.name] ?? skill.execution ?? 'inherit',\n  }));\n}\n\nexport function loadSkillBody(skill: Skill): LoadedSkillBody {\n  if (!skill.valid) throw new Error(`Skill \"${skill.name}\" is invalid.`);\n  // Asked again here, not only at discovery: the directory may have become a link since (#579).\n  if (skill.source === 'project' && reachesUncPath(skill.path)) {\n    throw new Error(`Skill \"${skill.name}\" is on a network (UNC) path and is not loaded.`);\n  }\n  const canonicalRoot = realpathSync(skill.rootPath);\n  const canonicalEntry = realpathSync(skill.path);\n  if (!isInside(canonicalRoot, canonicalEntry)) {\n    throw new Error(`Skill entrypoint escapes its root: ${skill.path}`);\n  }\n  const current = statSync(canonicalEntry);\n  if (current.size !== skill.entryByteSize || current.mtimeMs !== skill.entryMtimeMs) {\n    throw new Error(`Skill \"${skill.name}\" changed after discovery; reload skills before use.`);\n  }\n  const buffer = readFileSync(canonicalEntry);\n  if (buffer.includes(0)) {\n    throw new Error(`Skill \"${skill.name}\" contains binary content.`);\n  }\n  const raw = buffer.toString('utf8');\n  const { body } = parseFrontmatter(raw);\n  const byteSize = Buffer.byteLength(body);\n  if (byteSize > MAX_SKILL_BODY_BYTES) {\n    throw new Error(`Skill body exceeds ${MAX_SKILL_BODY_BYTES} bytes.`);\n  }\n  return {\n    body,\n    digest: createHash('sha256').update(body).digest('hex'),\n    byteSize,\n  };\n}\n\nexport interface SkillListingResult {\n  text: string;\n  budgetChars: number;\n  visibleCount: number;\n  included: string[];\n  omitted: string[];\n  collapsed: string[];\n  charCount: number;\n}\n\n/**\n * Characters the skill listing may occupy in the system prompt.\n *\n * Lives here so the listing shipped to the model and the /skills diagnostics\n * that describe it cannot drift: both call this, neither re-derives the share\n * or the cap.\n */\nexport function skillListingBudgetChars(contextWindow: number): number {\n  return Math.min(8000, Math.max(512, Math.floor(contextWindow * 0.08)));\n}\n\nexport function buildSkillListing(\n  skills: readonly Skill[],\n  budgetChars = 8000,\n): SkillListingResult {\n  const visible = skills.filter(\n    (skill) => skill.valid && (skill.activation === 'auto' || skill.activation === 'name-only'),\n  );\n  if (visible.length === 0) {\n    return {\n      text: '',\n      budgetChars,\n      visibleCount: 0,\n      included: [],\n      omitted: [],\n      collapsed: [],\n      charCount: 0,\n    };\n  }\n\n  const sorted = [...visible].sort(\n    (a, b) => b.invocationCount - a.invocationCount || a.name.localeCompare(b.name),\n  );\n  const lines = [\n    '## Available skills',\n    'Use InvokeSkill when a request matches a description. A user can force exact use with `$skill-name`.',\n  ];\n  let remainingBudget = budgetChars - lines.join('\\n').length;\n  const includedNames: string[] = [];\n  const collapsedNames = new Set<string>();\n\n  let included = 0;\n  for (const skill of sorted) {\n    if (skill.activation === 'name-only') {\n      const bare = `- **${skill.name}**`;\n      if (bare.length > remainingBudget) break;\n      lines.push(bare);\n      remainingBudget -= bare.length + 1;\n      included++;\n      includedNames.push(skill.name);\n      collapsedNames.add(skill.name);\n      continue;\n    }\n    const entry = `- **${skill.name}**: ${skill.description}`;\n    const trigger = skill.whenToUse ? `\\n  when: ${skill.whenToUse}` : '';\n    const full = `${entry}${trigger}`;\n    if (full.length > remainingBudget) {\n      const bare = `- **${skill.name}**`;\n      if (bare.length <= remainingBudget) {\n        lines.push(bare);\n        included++;\n        includedNames.push(skill.name);\n        collapsedNames.add(skill.name);\n      }\n      break;\n    }\n    lines.push(full);\n    remainingBudget -= full.length + 1;\n    included++;\n    includedNames.push(skill.name);\n  }\n  let omitted = sorted.length - included;\n  if (omitted > 0) {\n    let warning = `- ${omitted} additional skill${omitted === 1 ? ' was' : 's were'} omitted from this prompt budget. Use /skills to inspect the full catalog.`;\n    while (warning.length > remainingBudget && lines.length > 2) {\n      const removed = lines.pop();\n      if (!removed) break;\n      remainingBudget += removed.length + 1;\n      included--;\n      const removedName = includedNames.pop();\n      if (removedName) collapsedNames.delete(removedName);\n      omitted = sorted.length - included;\n      warning = `- ${omitted} additional skill${omitted === 1 ? ' was' : 's were'} omitted from this prompt budget. Use /skills to inspect the full catalog.`;\n    }\n    if (warning.length <= remainingBudget) lines.push(warning);\n  }\n  const text = lines.join('\\n');\n  const includedSet = new Set(includedNames);\n  return {\n    text,\n    budgetChars,\n    visibleCount: sorted.length,\n    included: includedNames,\n    omitted: sorted.filter((skill) => !includedSet.has(skill.name)).map((skill) => skill.name),\n    collapsed: includedNames.filter((name) => collapsedNames.has(name)),\n    charCount: text.length,\n  };\n}\n\nexport function generateSkillListing(skills: readonly Skill[], budgetChars = 8000): string {\n  return buildSkillListing(skills, budgetChars).text;\n}\n\nexport function explicitSkillMentions(prompt: string, skills: readonly Skill[]): string[] {\n  const available = new Set(skills.map((skill) => skill.name));\n  const mentions: string[] = [];\n  // A `$` that follows a path separator, a dot or a mention's `@` is part of a file or command name\n  // (`@$deploy.md`, `docs/$deploy/`, `/$deploy`), not a request for a skill.\n  const pattern = /(?<![A-Za-z0-9_\\-/\\\\@.])\\$([a-z0-9]+(?:-[a-z0-9]+)*)(?![A-Za-z0-9_-])/g;\n  for (const match of prompt.matchAll(pattern)) {\n    const name = match[1];\n    if (available.has(name) && !mentions.includes(name)) mentions.push(name);\n  }\n  return mentions;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY,MAAM,OAAO,UAAU,SAAS,WAAW;AAOlE,IAAM,uBAAuB;AAC7B,IAAM,yBAAyB,KAAK;AACpC,IAAM,uBAAuB,MAAM;AACnC,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AACjC,IAAM,2BAA2B,IAAI,OAAO;AAEnD,IAAM,qBAAqB;AAC3B,IAAM,2BAA2B,oBAAI,IAAI;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAgFD,SAAS,QAAQ,MAAsB;AACrC,SAAO,QAAQ,aAAa,UAAU,QAAQ,IAAI,EAAE,YAAY,IAAI,QAAQ,IAAI;AAClF;AAUA,SAAS,aAAa,MAAkC;AACtD,MAAI;AACF,UAAM,OAAO,aAAa,OAAO,IAAI;AACrC,WAAO,QAAQ,aAAa,UAAU,KAAK,YAAY,IAAI;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,SAAS,MAAc,WAA4B;AAC1D,QAAM,MAAM,SAAS,MAAM,SAAS;AACpC,SAAO,QAAQ,MAAO,CAAC,IAAI,WAAW,KAAK,GAAG,EAAE,KAAK,QAAQ,QAAQ,CAAC,WAAW,GAAG;AACtF;AASA,SAAS,eAAe,WAAmB,MAA0B,YAA8B;AAGjG,MAAI,WAAW,SAAS,EAAG,QAAO,QAAQ,SAAS;AACnD,MAAI,UAAU,QAAQ,SAAS;AAC/B,QAAM,iBAAiB,MAAM,OAAO,EAAE;AACtC,SAAO,MAAM;AACX,UAAM,SAAS,KAAK,SAAS,MAAM;AAGnC,QAAI,WAAW,MAAM,EAAG,QAAO,QAAQ,SAAS;AAChD,QAAI,WAAW,MAAM,GAAG;AACtB,aAAO,WAAW,YAAY,OAAO,KAAK,SAAS,IAAI,IAAI,QAAQ,SAAS,IAAI;AAAA,IAClF;AACA,QAAI,YAAY,eAAgB,QAAO,QAAQ,SAAS;AACxD,cAAU,QAAQ,OAAO;AAAA,EAC3B;AACF;AAEA,SAAS,oBAAoB,MAAc,WAA6B;AACtE,QAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAM,sBAAsB,QAAQ,SAAS;AAC7C,MAAI,CAAC,SAAS,gBAAgB,mBAAmB,EAAG,QAAO,CAAC,mBAAmB;AAC/E,QAAM,cAAwB,CAAC;AAC/B,MAAI,UAAU;AACd,SAAO,MAAM;AACX,gBAAY,KAAK,OAAO;AACxB,QAAI,QAAQ,OAAO,MAAM,QAAQ,cAAc,EAAG;AAClD,cAAU,QAAQ,OAAO;AAAA,EAC3B;AACA,SAAO,YAAY,QAAQ;AAC7B;AAWO,SAAS,WACd,WACA,UAAiC,CAAC,GAClC,aAAuB,eAAe,GACzB;AACb,QAAM,QAAqB,CAAC;AAC5B,MAAI,QAAQ,gBAAgB,OAAO;AACjC,UAAM,OAAO,QAAQ,WAAW,QAAQ;AACxC,UAAM,WACJ,QAAQ,gBAAgB,QAAQ,UAAU,KAAK,MAAM,OAAO,IAAI,gBAAgB;AAClF,UAAM;AAAA,MACJ,EAAE,MAAM,KAAK,MAAM,WAAW,QAAQ,GAAG,QAAQ,QAAQ,MAAM,SAAS;AAAA,MACxE,EAAE,MAAM,KAAK,MAAM,WAAW,QAAQ,GAAG,QAAQ,QAAQ,MAAM,SAAS;AAAA,MACxE,GAAI,QAAQ,oBAAoB,QAC5B,CAAC,IACD;AAAA,QACE;AAAA,UACE,MAAM,KAAK,MAAM,WAAW,YAAY,QAAQ;AAAA,UAChD,QAAQ;AAAA,UACR,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACJ,EAAE,MAAM,KAAK,UAAU,QAAQ,GAAG,QAAQ,QAAQ,MAAM,OAAO;AAAA,IACjE;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,eAAe,eAAe,WAAW,QAAQ,SAAS,UAAU;AAChG,aAAW,aAAa,oBAAoB,aAAa,SAAS,GAAG;AACnE,UAAM;AAAA,MACJ,EAAE,MAAM,KAAK,WAAW,WAAW,QAAQ,GAAG,QAAQ,WAAW,MAAM,SAAS;AAAA,MAChF,EAAE,MAAM,KAAK,WAAW,WAAW,QAAQ,GAAG,QAAQ,WAAW,MAAM,SAAS;AAAA,MAChF,GAAI,QAAQ,oBAAoB,QAC5B,CAAC,IACD;AAAA,QACE;AAAA,UACE,MAAM,KAAK,WAAW,aAAa,QAAQ;AAAA,UAC3C,QAAQ;AAAA,UACR,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACJ,EAAE,MAAM,KAAK,WAAW,SAAS,QAAQ,GAAG,QAAQ,WAAW,MAAM,OAAO;AAAA,IAC9E;AAAA,EACF;AAIA,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,WAAW,OAAQ;AAC5B,UAAM,OAAO,aAAa,KAAK,IAAI;AACnC,QAAI,KAAM,eAAc,IAAI,IAAI;AAAA,EAClC;AACA,QAAM,SAAS,oBAAI,IAAuB;AAC1C,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,QAAQ,KAAK,IAAI;AAI7B,QAAI,OAAO,IAAI,GAAG,GAAG,WAAW,OAAQ;AACxC,QAAI,KAAK,WAAW,aAAa,WAAW,KAAK,IAAI,EAAG;AAGxD,QAAI,KAAK,WAAW,aAAa,cAAc,OAAO,GAAG;AACvD,YAAM,OAAO,aAAa,KAAK,IAAI;AACnC,UAAI,QAAQ,cAAc,IAAI,IAAI,EAAG;AAAA,IACvC;AACA,WAAO,IAAI,KAAK,IAAI;AAAA,EACtB;AACA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;AAEA,SAAS,sBAAsB,MAI7B;AACA,QAAM,SAAuB,CAAC;AAC9B,QAAM,KAAK,SAAS,MAAM,GAAG;AAC7B,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ;AACZ,MAAI;AACF,WAAO,QAAQ,wBAAwB;AACrC,YAAM,QAAQ,OAAO,MAAM,KAAK,IAAI,MAAM,yBAAyB,KAAK,CAAC;AACzE,YAAM,QAAQ,SAAS,IAAI,OAAO,GAAG,MAAM,QAAQ,KAAK;AACxD,UAAI,UAAU,EAAG;AACjB,aAAO,KAAK,MAAM,SAAS,GAAG,KAAK,CAAC;AACpC,eAAS;AACT,YAAM,OAAO,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAClD,UAAI,uCAAuC,KAAK,IAAI,GAAG;AACrD,cAAM,QAAQ,KAAK,MAAM,sCAAsC;AAC/D,cAAM,aAAa,QAAQ,CAAC,KAAK;AACjC,eAAO,EAAE,aAAa,iBAAiB,UAAU,EAAE,aAAa,YAAY,OAAO;AAAA,MACrF;AAAA,IACF;AAAA,EACF,UAAE;AACA,cAAU,EAAE;AAAA,EACd;AACA,SAAO,KAAK;AAAA,IACV,MAAM;AAAA,IACN,SAAS,wDAAwD,sBAAsB;AAAA,IACvF,UAAU;AAAA,EACZ,CAAC;AACD,SAAO,EAAE,aAAa,CAAC,GAAG,YAAY,IAAI,OAAO;AACnD;AAEA,SAAS,YAAY,aAAsC,MAAkC;AAC3F,QAAM,QAAQ,YAAY,IAAI;AAC9B,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACpE;AAEA,SAAS,mBAAmB,YAA4C;AACtE,QAAM,QAAQ,WAAW,MAAM,OAAO;AACtC,QAAM,WAAmC,CAAC;AAC1C,QAAM,QAAQ,MAAM,UAAU,CAAC,SAAS,oBAAoB,KAAK,KAAK,KAAK,CAAC,CAAC;AAC7E,MAAI,QAAQ,EAAG,QAAO;AACtB,aAAW,QAAQ,MAAM,MAAM,QAAQ,CAAC,GAAG;AACzC,QAAI,WAAW,KAAK,IAAI,EAAG;AAC3B,QAAI,KAAK,KAAK,KAAK,CAAC,OAAO,KAAK,IAAI,EAAG;AACvC,UAAM,QAAQ,KAAK,MAAM,uCAAuC;AAChE,QAAI,CAAC,MAAO;AACZ,aAAS,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,QAAQ,kBAAkB,IAAI;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAA4D;AACpF,QAAM,QAAQ,YAAY,eAAe,KAAK,YAAY;AAC1D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,QAAQ,MACX,IAAI,MAAM,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACjB,WAAO,MAAM,SAAS,QAAQ;AAAA,EAChC;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC;AACnF,WAAO,MAAM,SAAS,QAAQ;AAAA,EAChC;AACA,SAAO;AACT;AAEA,SAAS,iBACP,UACA,WAIA;AACA,QAAM,YAA6B,CAAC;AACpC,QAAM,SAAuB,CAAC;AAC9B,MAAI,qBAAqB;AACzB,QAAM,QAAQ,CAAC,WAAmB,UAAwB;AACxD,QAAI,QAAQ,0BAA0B;AACpC,UAAI,CAAC,oBAAoB;AACvB,6BAAqB;AACrB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS,yBAAyB,wBAAwB;AAAA,UAC1D,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,QAAI,UAAU,UAAU,oBAAqB;AAC7C,QAAI;AACJ,QAAI;AACF,gBAAU,YAAY,SAAS,EAAE,KAAK;AAAA,IACxC,SAAS,OAAO;AACd,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,kCAAkC,SAAS,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QAC/G,UAAU;AAAA,MACZ,CAAC;AACD;AAAA,IACF;AACA,eAAW,SAAS,SAAS;AAC3B,UAAI,UAAU,UAAU,oBAAqB;AAC7C,YAAM,WAAW,KAAK,WAAW,KAAK;AACtC,UAAI,QAAQ,QAAQ,MAAM,QAAQ,SAAS,EAAG;AAC9C,UAAI;AACJ,UAAI;AACF,eAAO,UAAU,QAAQ;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,KAAK,eAAe,GAAG;AACzB,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS,mCAAmC,SAAS,UAAU,QAAQ,CAAC;AAAA,UACxE,UAAU;AAAA,QACZ,CAAC;AACD;AAAA,MACF;AACA,UAAI,KAAK,YAAY,GAAG;AACtB,cAAM,UAAU,QAAQ,CAAC;AACzB;AAAA,MACF;AACA,UAAI,CAAC,KAAK,OAAO,EAAG;AACpB,UAAI,SAAS,WAAW,QAAQ,EAC7B,OAAO,eAAe,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,EACjD,OAAO,KAAK;AACf,UAAI,KAAK,OAAO,0BAA0B;AACxC,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS,oBAAoB,wBAAwB,WAAW,SAAS,UAAU,QAAQ,CAAC;AAAA,UAC5F,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AACA,UAAI;AACF,cAAM,KAAK,SAAS,UAAU,GAAG;AACjC,YAAI;AACF,gBAAM,SAAS,OAAO,MAAM,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;AACrD,gBAAM,OAAO,SAAS,IAAI,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACrD,cAAI,OAAO,SAAS,GAAG,IAAI,EAAE,SAAS,CAAC,GAAG;AACxC,mBAAO,KAAK;AAAA,cACV,MAAM;AAAA,cACN,SAAS,wDAAwD,SAAS,UAAU,QAAQ,CAAC;AAAA,cAC7F,UAAU;AAAA,YACZ,CAAC;AAAA,UACH;AAAA,QACF,UAAE;AACA,oBAAU,EAAE;AAAA,QACd;AAAA,MACF,SAAS,OAAO;AACd,eAAO,KAAK;AAAA,UACV,MAAM;AAAA,UACN,SAAS,+BAA+B,SAAS,UAAU,QAAQ,CAAC,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,UAC/H,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AACA,UAAI,KAAK,QAAQ,0BAA0B;AACzC,YAAI;AACF,mBAAS,WAAW,QAAQ,EAAE,OAAO,aAAa,QAAQ,CAAC,EAAE,OAAO,KAAK;AAAA,QAC3E,QAAQ;AAAA,QAER;AAAA,MACF;AACA,gBAAU,KAAK;AAAA,QACb,cAAc,SAAS,UAAU,QAAQ,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG;AAAA,QAC9D,UAAU,KAAK;AAAA,QACf,SAAS,KAAK;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,UAAU,CAAC;AACjB,MAAI,UAAU,UAAU,qBAAqB;AAC3C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kBAAkB,mBAAmB;AAAA,MAC9C,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO,EAAE,WAAW,OAAO;AAC7B;AAEA,SAAS,oBACP,WACA,MACA,eACA,OAAO,OACA;AACP,QAAM,EAAE,aAAa,YAAY,QAAQ,aAAa,IAAI,sBAAsB,SAAS;AACzF,QAAM,SAAS,CAAC,GAAG,YAAY;AAC/B,QAAM,eAAe,YAAY,aAAa,MAAM;AACpD,QAAM,OAAO,gBAAgB;AAC7B,QAAM,cAAc,YAAY,aAAa,aAAa,KAAK;AAE/D,MAAI,CAAC,mBAAmB,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI;AACtD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,QAAQ,iBAAiB,eAAe;AAC3C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kBAAkB,gBAAgB,WAAW,2BAA2B,aAAa;AAAA,MAC9F,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,gBAAgB,MAAM;AACzB,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,eAAe,YAAY,SAAS,MAAM;AAC7C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,gBAAgB,YAAY,aAAa,eAAe;AAC9D,MAAI,iBAAiB,cAAc,SAAS,KAAK;AAC/C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,YAAY,YAAY,aAAa,aAAa;AACxD,MAAI,aAAa,UAAU,SAAS,MAAM;AACxC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,QAAQ,YAAY,aAAa,OAAO;AAC9C,MAAI,OAAO;AACT,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,oBAAoB,YAAY,aAAa,UAAU;AAC7D,MAAI,qBAAqB,sBAAsB,SAAS,sBAAsB,QAAQ;AACpF,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,WAAW,sBAAsB,SAAS,SAAS;AACzD,aAAW,SAAS,OAAO,KAAK,WAAW,GAAG;AAC5C,QAAI,CAAC,yBAAyB,IAAI,KAAK,GAAG;AACxC,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,8BAA8B,KAAK;AAAA,QAC5C,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,gBAAgB;AACpB,MAAI,eAAe;AACnB,MAAI;AACF,UAAM,YAAY,SAAS,SAAS;AACpC,oBAAgB,UAAU;AAC1B,mBAAe,UAAU;AACzB,QAAI,gBAAgB,uBAAuB,wBAAwB;AACjE,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,wBAAwB,oBAAoB;AAAA,QACrD,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AACN,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAEA,QAAM,WAAW,QAAQ,SAAS;AAClC,QAAM,iBAAiB,OACnB,EAAE,WAAW,CAAC,GAAsB,QAAQ,CAAC,EAAkB,IAC/D,iBAAiB,UAAU,SAAS;AACxC,SAAO,KAAK,GAAG,eAAe,MAAM;AAEpC,QAAM,WAAW,mBAAmB,UAAU;AAC9C,QAAM,UAAU,YAAY,aAAa,SAAS,KAAK,SAAS,WAAW;AAC3E,QAAM,iBAAiB,WAAW,QAAQ,EACvC,OAAO,KAAK,UAAU,eAAe,SAAS,CAAC,EAC/C,OAAO,KAAK;AACf,QAAM,mBAAmB,WAAW,QAAQ,EACzC;AAAA,IACC,KAAK,UAAU;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,MAAM,QAAQ,SAAS;AAAA,MACvB,cAAc,iBAAiB,WAAW;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,EACC,OAAO,KAAK;AAEf,SAAO;AAAA,IACL,IAAI,GAAG,KAAK,IAAI,IAAI,QAAQ,SAAS,CAAC;AAAA,IACtC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,YAAY,aAAa,SAAS;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,cAAc,iBAAiB,WAAW;AAAA,IAC1C;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK;AAAA,IACf,YAAY,OAAO,YAAY,QAAQ,EAAE,YAAY,MAAM,SAAS,QAAQ;AAAA,IAC5E,WAAW;AAAA,IACX,iBAAiB;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW,eAAe;AAAA,IAC1B;AAAA,IACA,OAAO,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,aAAa,OAAO;AAAA,IACzD,UAAU,CAAC;AAAA,EACb;AACF;AASA,SAAS,gBAAgB,MAAiB,YAA+B;AACvE,QAAM,UAAU,CAAC,SAAiB,KAAK,WAAW,aAAa,WAAW,IAAI;AAC9E,MAAI,CAAC,WAAW,KAAK,IAAI,EAAG,QAAO,CAAC;AACpC,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,KAAK,IAAI,EAAE,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,SAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,UAAM,WAAW,KAAK,KAAK,MAAM,KAAK;AACtC,QAAI;AACJ,QAAI;AACF,aAAO,UAAU,QAAQ;AAAA,IAC3B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,YAAY,KAAK,YAAY;AACjC,QAAI,KAAK,eAAe,GAAG;AACzB,UAAI,QAAQ,QAAQ,EAAG;AACvB,UAAI;AACF,oBAAY,SAAS,QAAQ,EAAE,YAAY;AAAA,MAC7C,QAAQ;AACN;AAAA,MACF;AAAA,IACF;AACA,QAAI,WAAW;AACb,YAAM,YAAY,KAAK,UAAU,oBAAoB;AACrD,UAAI,CAAC,QAAQ,SAAS,KAAK,WAAW,SAAS,KAAK,SAAS,SAAS,EAAE,OAAO,GAAG;AAChF,eAAO,KAAK,oBAAoB,WAAW,MAAM,KAAK,CAAC;AAAA,MACzD;AAAA,IACF,WAAW,KAAK,OAAO,KAAK,MAAM,SAAS,WAAW,GAAG;AACvD,aAAO,KAAK,oBAAoB,UAAU,MAAM,MAAM,QAAQ,gBAAgB,EAAE,GAAG,IAAI,CAAC;AAAA,IAC1F;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,eACd,WACA,YAAuD,CAAC,GACxD,UAAiC,CAAC,GACzB;AACT,QAAM,SAAS,oBAAI,IAAmB;AACtC,QAAM,aAAa,eAAe;AAClC,aAAW,QAAQ,WAAW,WAAW,SAAS,UAAU,GAAG;AAC7D,eAAW,SAAS,gBAAgB,MAAM,UAAU,GAAG;AACrD,YAAM,WAAW,OAAO,IAAI,MAAM,IAAI;AACtC,UAAI,UAAU;AACZ,cAAM,WAAW;AAAA,UACf,GAAG,SAAS;AAAA,UACZ,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,QAAQ,UAAU,SAAS,SAAS;AAAA,QAC9E;AAAA,MACF;AACA,aAAO,IAAI,MAAM,MAAM,KAAK;AAAA,IAC9B;AAAA,EACF;AACA,SAAO;AAAA,IACL,CAAC,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,IAChE;AAAA,IACA,QAAQ,sBAAsB,CAAC;AAAA,IAC/B,QAAQ,WAAW;AAAA,EACrB;AACF;AAEO,SAAS,oBACd,QACA,WACA,qBAA+D,CAAC,GAChE,UAAU,MACD;AACT,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC5B,GAAG;AAAA,IACH,YAAY,UAAW,UAAU,MAAM,IAAI,KAAK,MAAM,cAAc,WAAY;AAAA,IAChF,WAAW,mBAAmB,MAAM,IAAI,KAAK,MAAM,aAAa;AAAA,EAClE,EAAE;AACJ;AAEO,SAAS,cAAc,OAA+B;AAC3D,MAAI,CAAC,MAAM,MAAO,OAAM,IAAI,MAAM,UAAU,MAAM,IAAI,eAAe;AAErE,MAAI,MAAM,WAAW,aAAa,eAAe,MAAM,IAAI,GAAG;AAC5D,UAAM,IAAI,MAAM,UAAU,MAAM,IAAI,iDAAiD;AAAA,EACvF;AACA,QAAM,gBAAgB,aAAa,MAAM,QAAQ;AACjD,QAAM,iBAAiB,aAAa,MAAM,IAAI;AAC9C,MAAI,CAAC,SAAS,eAAe,cAAc,GAAG;AAC5C,UAAM,IAAI,MAAM,sCAAsC,MAAM,IAAI,EAAE;AAAA,EACpE;AACA,QAAM,UAAU,SAAS,cAAc;AACvC,MAAI,QAAQ,SAAS,MAAM,iBAAiB,QAAQ,YAAY,MAAM,cAAc;AAClF,UAAM,IAAI,MAAM,UAAU,MAAM,IAAI,sDAAsD;AAAA,EAC5F;AACA,QAAM,SAAS,aAAa,cAAc;AAC1C,MAAI,OAAO,SAAS,CAAC,GAAG;AACtB,UAAM,IAAI,MAAM,UAAU,MAAM,IAAI,4BAA4B;AAAA,EAClE;AACA,QAAM,MAAM,OAAO,SAAS,MAAM;AAClC,QAAM,EAAE,KAAK,IAAI,iBAAiB,GAAG;AACrC,QAAM,WAAW,OAAO,WAAW,IAAI;AACvC,MAAI,WAAW,sBAAsB;AACnC,UAAM,IAAI,MAAM,sBAAsB,oBAAoB,SAAS;AAAA,EACrE;AACA,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,IACtD;AAAA,EACF;AACF;AAmBO,SAAS,wBAAwB,eAA+B;AACrE,SAAO,KAAK,IAAI,KAAM,KAAK,IAAI,KAAK,KAAK,MAAM,gBAAgB,IAAI,CAAC,CAAC;AACvE;AAEO,SAAS,kBACd,QACA,cAAc,KACM;AACpB,QAAM,UAAU,OAAO;AAAA,IACrB,CAAC,UAAU,MAAM,UAAU,MAAM,eAAe,UAAU,MAAM,eAAe;AAAA,EACjF;AACA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,cAAc;AAAA,MACd,UAAU,CAAC;AAAA,MACX,SAAS,CAAC;AAAA,MACV,WAAW,CAAC;AAAA,MACZ,WAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAS,CAAC,GAAG,OAAO,EAAE;AAAA,IAC1B,CAAC,GAAG,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,IAAI;AAAA,EAChF;AACA,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACA,MAAI,kBAAkB,cAAc,MAAM,KAAK,IAAI,EAAE;AACrD,QAAM,gBAA0B,CAAC;AACjC,QAAM,iBAAiB,oBAAI,IAAY;AAEvC,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,eAAe,aAAa;AACpC,YAAM,OAAO,OAAO,MAAM,IAAI;AAC9B,UAAI,KAAK,SAAS,gBAAiB;AACnC,YAAM,KAAK,IAAI;AACf,yBAAmB,KAAK,SAAS;AACjC;AACA,oBAAc,KAAK,MAAM,IAAI;AAC7B,qBAAe,IAAI,MAAM,IAAI;AAC7B;AAAA,IACF;AACA,UAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,MAAM,WAAW;AACvD,UAAM,UAAU,MAAM,YAAY;AAAA,UAAa,MAAM,SAAS,KAAK;AACnE,UAAM,OAAO,GAAG,KAAK,GAAG,OAAO;AAC/B,QAAI,KAAK,SAAS,iBAAiB;AACjC,YAAM,OAAO,OAAO,MAAM,IAAI;AAC9B,UAAI,KAAK,UAAU,iBAAiB;AAClC,cAAM,KAAK,IAAI;AACf;AACA,sBAAc,KAAK,MAAM,IAAI;AAC7B,uBAAe,IAAI,MAAM,IAAI;AAAA,MAC/B;AACA;AAAA,IACF;AACA,UAAM,KAAK,IAAI;AACf,uBAAmB,KAAK,SAAS;AACjC;AACA,kBAAc,KAAK,MAAM,IAAI;AAAA,EAC/B;AACA,MAAI,UAAU,OAAO,SAAS;AAC9B,MAAI,UAAU,GAAG;AACf,QAAI,UAAU,KAAK,OAAO,oBAAoB,YAAY,IAAI,SAAS,QAAQ;AAC/E,WAAO,QAAQ,SAAS,mBAAmB,MAAM,SAAS,GAAG;AAC3D,YAAM,UAAU,MAAM,IAAI;AAC1B,UAAI,CAAC,QAAS;AACd,yBAAmB,QAAQ,SAAS;AACpC;AACA,YAAM,cAAc,cAAc,IAAI;AACtC,UAAI,YAAa,gBAAe,OAAO,WAAW;AAClD,gBAAU,OAAO,SAAS;AAC1B,gBAAU,KAAK,OAAO,oBAAoB,YAAY,IAAI,SAAS,QAAQ;AAAA,IAC7E;AACA,QAAI,QAAQ,UAAU,gBAAiB,OAAM,KAAK,OAAO;AAAA,EAC3D;AACA,QAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,QAAM,cAAc,IAAI,IAAI,aAAa;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,UAAU;AAAA,IACV,SAAS,OAAO,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,IACzF,WAAW,cAAc,OAAO,CAAC,SAAS,eAAe,IAAI,IAAI,CAAC;AAAA,IAClE,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,qBAAqB,QAA0B,cAAc,KAAc;AACzF,SAAO,kBAAkB,QAAQ,WAAW,EAAE;AAChD;AAEO,SAAS,sBAAsB,QAAgB,QAAoC;AACxF,QAAM,YAAY,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC;AAC3D,QAAM,WAAqB,CAAC;AAG5B,QAAM,UAAU;AAChB,aAAW,SAAS,OAAO,SAAS,OAAO,GAAG;AAC5C,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,UAAU,IAAI,IAAI,KAAK,CAAC,SAAS,SAAS,IAAI,EAAG,UAAS,KAAK,IAAI;AAAA,EACzE;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-TLX3H2CL.js → chunk-E5WLQSKA.js}

@@ -5,7 +5,7 @@ import {
   runHostReview,
   toElicitationFields,
   validateElicitationContent
-} from "./chunk-RFJ6Q6LE.js";
+} from "./chunk-ENLB7NYV.js";
 import {
   SessionRuntime,
   buildAgentCompletionMessage,
@@ -20,64 +20,85 @@ import {
   normalizePersistedTodos,
   planApprovalFromUserQuestionResponse,
   planStopDecision,
+  seedShellIds,
   separateInlineReasoning,
   takeAgentCompletionBatch,
   uniqueAgentDisplayName
-} from "./chunk-5YHTKWJN.js";
-import {
-  consoleMcpDiagnosticSink,
-  resolveMcpServerList
-} from "./chunk-Y2VHN7TC.js";
+} from "./chunk-KDNWMKXV.js";
 import {
   TRUSTED_SETTINGS_LOCATION,
+  collectSkippedInstructionNotices,
+  collectSkippedReviewNotices,
   compactionGate,
   createBuiltinCommandRegistry,
   estimateUsageCost,
+  formatGoalStatus,
   getPackageVersion,
+  goalKickoffPrompt,
   planWasLost,
   resolveContextLimit,
   resolvePermissionMode,
   usageAtGate,
   usagePressureTokens
-} from "./chunk-IME7R2UI.js";
+} from "./chunk-FPR7SKIE.js";
+import {
+  onAbort,
+  seedObservationLedger,
+  throwIfAborted
+} from "./chunk-N2G4Q7ME.js";
 import {
   formatIgnoredWorkspaceSandboxKey,
   ignoredWorkspaceSandboxKeys,
+  isUserSettingsFile,
   loadSettingsFile,
   settingsLayerPaths,
   workspaceLayerThatEnabledSandbox
-} from "./chunk-W3XFHEF4.js";
-import {
-  onAbort,
-  seedObservationLedger,
-  throwIfAborted
-} from "./chunk-J62VZYOB.js";
+} from "./chunk-UCFJ43OS.js";
 import {
+  collectSkippedCommandNotices,
   commandEnforcementContext,
   discoverCommands,
   parseSlashInput,
   resolveCommandBody
-} from "./chunk-EFJ2NH6E.js";
+} from "./chunk-AJZWLKLQ.js";
+import {
+  consoleMcpDiagnosticSink,
+  resolveMcpServerList
+} from "./chunk-MEOB2DZA.js";
+import {
+  isProcessAlive
+} from "./chunk-32WBCUAN.js";
 import {
   buildChildEnv
 } from "./chunk-XHAO3K7I.js";
 import {
   collectDeclaredDirectories,
   partitionProjectDirectories
-} from "./chunk-525CAZPY.js";
+} from "./chunk-4DKHLZRI.js";
 import {
   getPrimaryArg,
   toolFailure,
   toolResultErrorMessage,
   toolSuccess
-} from "./chunk-224FJZLH.js";
+} from "./chunk-YIL6HTJX.js";
 import {
   partitionProjectAllowRules
-} from "./chunk-KBQS35OV.js";
+} from "./chunk-MV5PQNIA.js";
+import {
+  LEGACY_BASE_URL_ID,
+  describeApiKeyDeclaration,
+  describeDroppedOverride,
+  describeOrigin,
+  describeReservedProvider,
+  describeUnaffectedSelection,
+  describeWithheldSelection,
+  providerTrustCommand
+} from "./chunk-B5FC3MYZ.js";
 import {
   collectDeclaredHooks,
-  partitionProjectHooks
-} from "./chunk-SOW4WRQP.js";
+  partitionProjectHooks,
+  renderUntrustedText
+} from "./chunk-WV3O5PGX.js";
 import {
   resolveBookHome
 } from "./chunk-ZPSZZUWF.js";
@@ -87,10 +108,13 @@ import {
   closeSync,
   mkdirSync,
   openSync,
+  readdirSync,
   readFileSync,
   renameSync,
   rmSync,
   statfsSync,
+  statSync,
+  unlinkSync,
   writeSync
 } from "fs";
 import { join } from "path";
@@ -140,6 +164,43 @@ function readRunStatus(sessionId, home = resolveBookHome()) {
     return void 0;
   }
 }
+var RUN_RECORD_NAME = /\.json$/;
+var RUN_TEMP_NAME = /\.json\..+\.tmp$/;
+function recordsLiveRun(path) {
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    if (!parsed || typeof parsed !== "object") return false;
+    const record = parsed;
+    if (record.terminal || record.crash) return false;
+    const pid = record.pid;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0) return false;
+    return isProcessAlive(pid);
+  } catch {
+    return false;
+  }
+}
+function cleanupRunStatus(days, home = resolveBookHome(), now = Date.now()) {
+  const cutoff = now - Math.max(1, days) * 864e5;
+  const directory = runStatusDir(home);
+  let removed = 0;
+  try {
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      if (!entry.isFile()) continue;
+      const isRecord = RUN_RECORD_NAME.test(entry.name);
+      if (!isRecord && !RUN_TEMP_NAME.test(entry.name)) continue;
+      const path = join(directory, entry.name);
+      try {
+        if (statSync(path).mtimeMs >= cutoff) continue;
+        if (isRecord && recordsLiveRun(path)) continue;
+        unlinkSync(path);
+        removed++;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return removed;
+}
 var RunStatusWriter = class {
   seed;
   last;
@@ -274,6 +335,10 @@ async function performPrintReview(effect, env, command) {
     // Every reviewer, lens and verifier agent is spawned under the host's run,
     // so the whole pipeline is billed and budgeted as one root.
     runner: reviewRunnerFor(env.agents.manager(), {
+      // The stored session the run belongs to, as the TUI passes its own. Without it
+      // each agent's tool-use records carry a made-up `agent:<id>` session id that
+      // matches no session file, and `book tool-stats` counts every one separately.
+      parentSessionId: env.agents.runContext.sessionId,
       rootRunId: env.agents.runContext.rootRunId,
       parentRunId: env.agents.runContext.runId
     })
@@ -290,12 +355,40 @@ function createPrintEffectRegistry() {
   return new PrintEffectRegistry().register("send-prompt", (effect) => ({
     kind: "prompt",
     prompt: effect.prompt,
-    commandContext: effect.context
+    commandContext: effect.context,
+    projectCommand: effect.projectCommand
   })).register("local-message", (effect, _env, command) => {
     if (effect.isError) throw new PrintCommandUsageError(command, effect.content);
     return { kind: "handled", command, output: effect.content };
-  }).register("review", performPrintReview);
+  }).register("review", performPrintReview).register("set-goal", (effect, env, command) => {
+    if (!env.goal) throw new UnsupportedPrintCommandError(command, GOAL_REFUSAL);
+    env.goal.set(effect.condition);
+    const kickoff = goalKickoffPrompt(effect.condition);
+    return {
+      kind: "prompt",
+      prompt: kickoff,
+      commandContext: {
+        command: {
+          name: "goal",
+          description: "Set a goal Book checks before stopping",
+          body: kickoff,
+          source: "project"
+        },
+        resolvedBody: kickoff
+      },
+      sessionNameSource: effect.condition
+    };
+  }).register("clear-goal", (_effect, env, command) => {
+    if (!env.goal) throw new UnsupportedPrintCommandError(command, GOAL_REFUSAL);
+    const cleared = env.goal.clear();
+    return {
+      kind: "handled",
+      command,
+      output: cleared ? formatGoalStatus({ state: "cleared", condition: cleared.condition }) : "No goal set"
+    };
+  });
 }
+var GOAL_REFUSAL = "\u2715 /goal needs a host that checks goals; this one does not.";
 function printBuiltinContext(env, commands) {
   return {
     workspace: env.config.workspace,
@@ -308,6 +401,7 @@ function printBuiltinContext(env, commands) {
     runtimeConfig: env.config,
     mode: env.mode,
     usage: null,
+    activeGoal: env.goal?.get(),
     turnDurationMs: 0,
     contextHistory: [],
     compactBoundaries: [],
@@ -324,6 +418,9 @@ function supportedCommandHelp(builtins, commands) {
   const lines = ["Commands supported in print mode:"];
   for (const definition of builtins.getDefinitions()) {
     if (definition.nonInteractive) lines.push(`  /${definition.name} \u2014 ${definition.description}`);
+    for (const subcommand of definition.nonInteractiveSubcommands ?? []) {
+      lines.push(`  /${definition.name} ${subcommand} \u2014 ${definition.description}`);
+    }
   }
   const custom = commands.map((command) => `/${command.name}`);
   lines.push(
@@ -352,7 +449,9 @@ async function resolvePrintCommand(input, env, deps = {}) {
   const context = printBuiltinContext(env, commands);
   const resolved = builtins.resolve(parsed.name, context);
   if (resolved && !resolved.definition.tuiOnly) {
-    if (!resolved.definition.nonInteractive) {
+    const subcommand = parsed.rawArguments.trim().split(/\s+/)[0] ?? "";
+    const allowedHere = resolved.definition.nonInteractive || (resolved.definition.nonInteractiveSubcommands?.includes(subcommand) ?? false);
+    if (!allowedHere) {
       throw unsupported(
         parsed.name,
         "needs an interactive session: it changes host state instead of producing a prompt.",
@@ -381,7 +480,8 @@ async function resolvePrintCommand(input, env, deps = {}) {
         commands
       );
     }
-    return dispatch.kind === "handled" ? { ...dispatch, command: parsed.name } : dispatch;
+    if (dispatch.kind === "handled") return { ...dispatch, command: parsed.name };
+    return dispatch.kind === "prompt" ? { ...dispatch, sessionNameSource: dispatch.sessionNameSource ?? input.trim() } : dispatch;
   }
   const custom = commands.find((command) => command.name === parsed.name);
   if (!custom) return { kind: "passthrough", prompt: input };
@@ -400,7 +500,9 @@ async function resolvePrintCommand(input, env, deps = {}) {
     kind: "prompt",
     prompt: body,
     commandContext: commandEnforcementContext(custom, body),
-    shellErrors
+    sessionNameSource: input.trim(),
+    shellErrors,
+    projectCommand: custom.source === "project"
   };
 }
 
@@ -584,7 +686,7 @@ function createReaderFlush(stdout, options = {}) {
 function carriedCostUsd(usage, models) {
   let worst = null;
   for (const model of models) {
-    const quote = estimateUsageCost(model, usage);
+    const quote = estimateUsageCost(model, usage, "pool");
     if (quote.status !== "known") return null;
     worst = worst === null ? quote.costUsd : Math.max(worst, quote.costUsd);
   }
@@ -644,12 +746,7 @@ async function runHeadless(config, registry, opts) {
   let sessionDisposed = false;
   let startedSessionId;
   const agentSession = new AgentSession({
-    // The transcript is the rendered conversation and still carries the tool
-    // records compaction summarized out of the context history, so prefer it
-    // when a resume supplies both.
-    runtime: new SessionRuntime({
-      history: opts.transcript?.length ? opts.transcript : opts.history
-    })
+    runtime: new SessionRuntime()
   });
   const disposeSession = () => {
     if (sessionDisposed) return;
@@ -659,12 +756,14 @@ async function runHeadless(config, registry, opts) {
   const runtime = agentSession.getRuntime();
   runtime.todos.push(...normalizePersistedTodos(opts.plan?.todos));
   if (opts.plan?.tasks?.length) runtime.tasks.push(...opts.plan.tasks);
+  agentSession.restoreGoal(opts.goal);
   runtime.planUnrestored = planWasLost({
     planRecordExisted: opts.plan !== void 0,
     priorMessages: opts.history.length,
     todos: runtime.todos.length,
     tasks: runtime.tasks.length
   });
+  seedShellIds(runtime.backgroundShells, opts.transcript ?? opts.history, opts.history);
   try {
     if (opts.outputFormat === "stream-json") {
       emit({ type: "system", model: config.model, cwd: config.workspace });
@@ -979,7 +1078,7 @@ async function runHeadless(config, registry, opts) {
         }
       }
     });
-    const runParentTurn = async (prompt, displayMessage, userMessage, runContext, commandContext) => {
+    const runParentTurn = async (prompt, displayMessage, userMessage, runContext, commandContext, typedText) => {
       eventState.errorReported = false;
       let runOutcome;
       finalRunOpeningId = userMessage.id;
@@ -1018,6 +1117,8 @@ async function runHeadless(config, registry, opts) {
             parentSessionId: runtimeSessionId,
             runContext,
             runtime,
+            // Only what the user typed invokes a skill by `$name`, as in the TUI.
+            typedText,
             // Command frontmatter enforcement, exactly as the TUI passes it.
             allowedTools: commandContext?.allowedTools,
             modelOverride: commandContext?.modelOverride,
@@ -1076,8 +1177,19 @@ async function runHeadless(config, registry, opts) {
           hookEventSink: createHookEventHandler(opts, emit)
         }),
         runContext
+      },
+      goal: {
+        get: () => agentSession.getGoal(),
+        set: (condition) => {
+          agentSession.setGoal(condition, goalTarget());
+        },
+        clear: () => agentSession.clearGoal(goalTarget())
       }
     });
+    const goalTarget = () => ({
+      sessionId,
+      timelineStore: store && sessionId ? store : void 0
+    });
     const commandResults = [];
     let commandUsage = null;
     const prompts = [];
@@ -1251,16 +1363,29 @@ async function runHeadless(config, registry, opts) {
         displayMessage: prompt,
         userMessage,
         sessionName,
+        sessionNameSource: dispatch.kind === "prompt" ? dispatch.sessionNameSource : void 0,
         timelineStore: store && sessionId ? store : void 0,
         expandShellInput: false,
+        projectCommand: dispatch.kind === "prompt" ? dispatch.projectCommand : void 0,
         runtime,
         signal: runSignal
       });
+      for (const notice of recorded.mentionNotices) process.stderr.write(`${notice}
+`);
       sessionName = recorded.sessionName;
       const contextMessage = recorded.contextMessage;
       transcript.push(userMessage);
       rootContexts.set(runContext.rootRunId, runContext);
-      await runParentTurn(contextMessage, prompt, userMessage, runContext, commandContext);
+      await runParentTurn(
+        contextMessage,
+        prompt,
+        userMessage,
+        runContext,
+        commandContext,
+        // What the user typed is the line they submitted, whatever it resolved to: a command's
+        // body or a built-in command's prompt is not.
+        submitted
+      );
       const spentSoFar = runtime.runAccounting.snapshotRoot(runContext.rootRunId);
       carriedSpend = {
         usage: spentSoFar.inclusiveUsage,
@@ -1324,6 +1449,9 @@ async function runHeadless(config, registry, opts) {
           displayMessage,
           contextMessage: userMessage.contextContent,
           userMessage,
+          // The local name is deliberately not reassigned from the result: a
+          // notification never names the session (#446).
+          sessionName,
           timelineStore: store && sessionId ? store : void 0,
           expandShellInput: false,
           runtime,
@@ -1491,6 +1619,17 @@ function emitAgentEvent(event, opts, emit, state) {
     else console.warn(event.message);
     return;
   }
+  if (event.type === "goal_status") {
+    const endsRunFailed = event.event.state === "failed" || event.event.state === "paused";
+    if (opts.outputFormat === "stream-json") emit({ type: "goal_status", ...event.event });
+    else if (opts.outputFormat === "text" && opts.runSource !== "sdk" && (opts.quiet !== true || endsRunFailed)) {
+      process.stderr.write(
+        `goal: ${progressLine(formatGoalStatus(event.event), PROGRESS_NOTICE_MAX)}
+`
+      );
+    }
+    return;
+  }
   if (event.type === "agent_notice") {
     if (opts.outputFormat === "stream-json") {
       emit({ type: "agent_notice", agentId: event.agentId, message: event.message });
@@ -1657,8 +1796,8 @@ function emitCompactBoundary(outputFormat, emit, result) {
   });
 }
 async function generatePromptSuggestions(config, _registry, history, signal, resolveAttachment) {
-  const { chatCompletionStream } = await import("./openai-compatible-2OB54YST.js");
-  const { buildMessages } = await import("./context-CBOBDY5Q.js");
+  const { chatCompletionStream } = await import("./openai-compatible-IPUNBJ53.js");
+  const { buildMessages } = await import("./context-C3RAP6K5.js");
   const suggestionMessages = await buildMessages(
     config,
     [
@@ -2267,10 +2406,51 @@ async function disconnectMcpServers(connections) {
 
 // src/project-approval-notices.ts
 import { join as join2 } from "path";
+function collectWithheldProviderNotices(gate, workspace) {
+  const notices = [];
+  const approveCommand = (id) => {
+    const { command, note } = providerTrustCommand(workspace, id);
+    return `\`${command}\`${note}`;
+  };
+  for (const dropped of gate.droppedOverrides) {
+    notices.push(`\u26A0  ${describeDroppedOverride(dropped)}`);
+  }
+  for (const entry of gate.partition.reserved) {
+    notices.push(`\u26A0  ${describeReservedProvider(entry)}`);
+  }
+  const pendingIds = new Set(gate.partition.pending.map((entry) => entry.id));
+  for (const entry of gate.partition.pending) {
+    const id = renderUntrustedText(entry.id, 64);
+    const origin = entry.declaration.baseURL ?? entry.declaration.baseUrl;
+    notices.push(
+      `\u26A0  Ignoring workspace-declared provider "${id}" (${describeOrigin(origin)}, key: ${describeApiKeyDeclaration(
+        entry.declaration.apiKey,
+        workspace
+      )}) from ${entry.layers.map((layer) => renderUntrustedText(layer)).join(", ")}: it requires approval. Run ${approveCommand(entry.id)} to review and approve it.`
+    );
+  }
+  for (const selection of gate.withheldSelections) {
+    if (!pendingIds.has(selection.providerId)) continue;
+    notices.push(
+      `\u26A0  ${describeWithheldSelection(selection)} Run ${approveCommand(selection.providerId)} to approve it.`
+    );
+  }
+  for (const selection of gate.unaffectedSelections) {
+    if (!pendingIds.has(selection.providerId)) continue;
+    notices.push(`\u26A0  ${describeUnaffectedSelection(selection)}`);
+  }
+  if (gate.legacyBaseUrl?.state === "pending") {
+    notices.push(
+      `\u26A0  Ignoring baseUrl "${renderUntrustedText(gate.legacyBaseUrl.baseUrl)}" from ${LEGACY_BASE_URL_ID}: it would receive BOOK_API_KEY, so it requires approval. Run ${approveCommand(LEGACY_BASE_URL_ID)} to review and approve it.`
+    );
+  }
+  return notices;
+}
 function collectWithheldProjectNotices(input) {
-  if (!input.settingsEnabled) return [];
+  const providerNotices = input.providerGate ? collectWithheldProviderNotices(input.providerGate, input.workspace) : [];
+  if (!input.settingsEnabled) return providerNotices;
   const projectPath = join2(input.workspace, ".book", "settings.json");
-  const projectSettings = loadSettingsFile(projectPath);
+  const projectSettings = isUserSettingsFile(projectPath) ? null : loadSettingsFile(projectPath);
   const notices = [];
   const allow = partitionProjectAllowRules(
     projectSettings?.permissions?.allow ?? [],
@@ -2331,16 +2511,27 @@ function collectWithheldProjectNotices(input) {
       `\u26A0  ${activation} declared sandbox.enabled=true, so sandbox.autoAllowBashIfSandboxed is false for this session: no Bash command is auto-approved. ${TRUSTED_SETTINGS_LOCATION}`
     );
   }
-  return notices;
+  return [...notices, ...providerNotices];
+}
+function collectSkippedProjectFileNotices(workspace) {
+  return [
+    ...collectSkippedInstructionNotices(workspace),
+    ...collectSkippedReviewNotices(workspace),
+    ...collectSkippedCommandNotices(workspace)
+  ];
 }
 
 export {
+  runStatusPath,
   readRunStatus,
+  cleanupRunStatus,
   isReaderGoneError,
   runHeadless,
   buildMcpToolDefinitions,
   connectMcpServers,
   disconnectMcpServers,
-  collectWithheldProjectNotices
+  collectWithheldProviderNotices,
+  collectWithheldProjectNotices,
+  collectSkippedProjectFileNotices
 };
-//# sourceMappingURL=chunk-TLX3H2CL.js.map
+//# sourceMappingURL=chunk-E5WLQSKA.js.map