@papert-code/papert-code 0.3.95 → 0.3.96

package/dist/chunks/{chunk-DQ32BMUI.js → chunk-TNDQXJLA.js}

@@ -114,7 +114,7 @@ import {
   supportsMultimodalFunctionResponse,
   tokenLimit,
   uiTelemetryService
-} from "./chunk-KDPC3L34.js";
+} from "./chunk-IK4ISYCE.js";
 import {
   escape,
   glob,
@@ -9998,7 +9998,7 @@ var require_ignore = __commonJS({
       //   path matching.
       // - check `string` either `MODE_IGNORE` or `MODE_CHECK_IGNORE`
       // @returns {TestResult} true if a file is ignored
-      test(path66, checkUnignored, mode) {
+      test(path67, checkUnignored, mode) {
         let ignored = false;
         let unignored = false;
         let matchedRule;
@@ -10007,7 +10007,7 @@ var require_ignore = __commonJS({
           if (unignored === negative && ignored !== unignored || negative && !ignored && !unignored && !checkUnignored) {
             return;
           }
-          const matched = rule[mode].test(path66);
+          const matched = rule[mode].test(path67);
           if (!matched) {
             return;
           }
@@ -10028,17 +10028,17 @@ var require_ignore = __commonJS({
     var throwError = /* @__PURE__ */ __name((message, Ctor) => {
       throw new Ctor(message);
     }, "throwError");
-    var checkPath = /* @__PURE__ */ __name((path66, originalPath, doThrow) => {
-      if (!isString(path66)) {
+    var checkPath = /* @__PURE__ */ __name((path67, originalPath, doThrow) => {
+      if (!isString(path67)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
         );
       }
-      if (!path66) {
+      if (!path67) {
         return doThrow(`path must not be empty`, TypeError);
       }
-      if (checkPath.isNotRelative(path66)) {
+      if (checkPath.isNotRelative(path67)) {
         const r2 = "`path.relative()`d";
         return doThrow(
           `path should be a ${r2} string, but got "${originalPath}"`,
@@ -10047,7 +10047,7 @@ var require_ignore = __commonJS({
       }
       return true;
     }, "checkPath");
-    var isNotRelative = /* @__PURE__ */ __name((path66) => REGEX_TEST_INVALID_PATH.test(path66), "isNotRelative");
+    var isNotRelative = /* @__PURE__ */ __name((path67) => REGEX_TEST_INVALID_PATH.test(path67), "isNotRelative");
     checkPath.isNotRelative = isNotRelative;
     checkPath.convert = (p) => p;
     var Ignore2 = class {
@@ -10080,19 +10080,19 @@ var require_ignore = __commonJS({
       }
       // @returns {TestResult}
       _test(originalPath, cache2, checkUnignored, slices) {
-        const path66 = originalPath && checkPath.convert(originalPath);
+        const path67 = originalPath && checkPath.convert(originalPath);
         checkPath(
-          path66,
+          path67,
           originalPath,
           this._strictPathCheck ? throwError : RETURN_FALSE
         );
-        return this._t(path66, cache2, checkUnignored, slices);
+        return this._t(path67, cache2, checkUnignored, slices);
       }
-      checkIgnore(path66) {
-        if (!REGEX_TEST_TRAILING_SLASH.test(path66)) {
-          return this.test(path66);
+      checkIgnore(path67) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path67)) {
+          return this.test(path67);
         }
-        const slices = path66.split(SLASH).filter(Boolean);
+        const slices = path67.split(SLASH).filter(Boolean);
         slices.pop();
         if (slices.length) {
           const parent = this._t(
@@ -10105,18 +10105,18 @@ var require_ignore = __commonJS({
             return parent;
           }
         }
-        return this._rules.test(path66, false, MODE_CHECK_IGNORE);
+        return this._rules.test(path67, false, MODE_CHECK_IGNORE);
       }
-      _t(path66, cache2, checkUnignored, slices) {
-        if (path66 in cache2) {
-          return cache2[path66];
+      _t(path67, cache2, checkUnignored, slices) {
+        if (path67 in cache2) {
+          return cache2[path67];
         }
         if (!slices) {
-          slices = path66.split(SLASH).filter(Boolean);
+          slices = path67.split(SLASH).filter(Boolean);
         }
         slices.pop();
         if (!slices.length) {
-          return cache2[path66] = this._rules.test(path66, checkUnignored, MODE_IGNORE);
+          return cache2[path67] = this._rules.test(path67, checkUnignored, MODE_IGNORE);
         }
         const parent = this._t(
           slices.join(SLASH) + SLASH,
@@ -10124,29 +10124,29 @@ var require_ignore = __commonJS({
           checkUnignored,
           slices
         );
-        return cache2[path66] = parent.ignored ? parent : this._rules.test(path66, checkUnignored, MODE_IGNORE);
+        return cache2[path67] = parent.ignored ? parent : this._rules.test(path67, checkUnignored, MODE_IGNORE);
       }
-      ignores(path66) {
-        return this._test(path66, this._ignoreCache, false).ignored;
+      ignores(path67) {
+        return this._test(path67, this._ignoreCache, false).ignored;
       }
       createFilter() {
-        return (path66) => !this.ignores(path66);
+        return (path67) => !this.ignores(path67);
       }
       filter(paths) {
         return makeArray(paths).filter(this.createFilter());
       }
       // @returns {TestResult}
-      test(path66) {
-        return this._test(path66, this._testCache, true);
+      test(path67) {
+        return this._test(path67, this._testCache, true);
       }
     };
     var factory = /* @__PURE__ */ __name((options2) => new Ignore2(options2), "factory");
-    var isPathValid = /* @__PURE__ */ __name((path66) => checkPath(path66 && checkPath.convert(path66), path66, RETURN_FALSE), "isPathValid");
+    var isPathValid = /* @__PURE__ */ __name((path67) => checkPath(path67 && checkPath.convert(path67), path67, RETURN_FALSE), "isPathValid");
     var setupWindows = /* @__PURE__ */ __name(() => {
       const makePosix = /* @__PURE__ */ __name((str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/"), "makePosix");
       checkPath.convert = makePosix;
       const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path66) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path66) || isNotRelative(path66);
+      checkPath.isNotRelative = (path67) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path67) || isNotRelative(path67);
     }, "setupWindows");
     if (
       // Detect `process` so that it can run in browsers.
@@ -10173,10 +10173,10 @@ var require_src3 = __commonJS({
     var fs_1 = __require("fs");
     var debug_1 = __importDefault(require_src());
     var log = debug_1.default("@kwsites/file-exists");
-    function check2(path66, isFile, isDirectory) {
-      log(`checking %s`, path66);
+    function check2(path67, isFile, isDirectory) {
+      log(`checking %s`, path67);
       try {
-        const stat3 = fs_1.statSync(path66);
+        const stat3 = fs_1.statSync(path67);
         if (stat3.isFile() && isFile) {
           log(`[OK] path represents a file`);
           return true;
@@ -10197,8 +10197,8 @@ var require_src3 = __commonJS({
       }
     }
     __name(check2, "check");
-    function exists2(path66, type = exports2.READABLE) {
-      return check2(path66, (type & exports2.FILE) > 0, (type & exports2.FOLDER) > 0);
+    function exists2(path67, type = exports2.READABLE) {
+      return check2(path67, (type & exports2.FILE) > 0, (type & exports2.FOLDER) > 0);
     }
     __name(exists2, "exists");
     exports2.exists = exists2;
@@ -16369,7 +16369,7 @@ var require_windows = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs53 = __require("fs");
-    function checkPathExt(path66, options2) {
+    function checkPathExt(path67, options2) {
       var pathext = options2.pathExt !== void 0 ? options2.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -16380,28 +16380,28 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p = pathext[i].toLowerCase();
-        if (p && path66.substr(-p.length).toLowerCase() === p) {
+        if (p && path67.substr(-p.length).toLowerCase() === p) {
           return true;
         }
       }
       return false;
     }
     __name(checkPathExt, "checkPathExt");
-    function checkStat(stat3, path66, options2) {
+    function checkStat(stat3, path67, options2) {
       if (!stat3.isSymbolicLink() && !stat3.isFile()) {
         return false;
       }
-      return checkPathExt(path66, options2);
+      return checkPathExt(path67, options2);
     }
     __name(checkStat, "checkStat");
-    function isexe(path66, options2, cb) {
-      fs53.stat(path66, function(er, stat3) {
-        cb(er, er ? false : checkStat(stat3, path66, options2));
+    function isexe(path67, options2, cb) {
+      fs53.stat(path67, function(er, stat3) {
+        cb(er, er ? false : checkStat(stat3, path67, options2));
       });
     }
     __name(isexe, "isexe");
-    function sync(path66, options2) {
-      return checkStat(fs53.statSync(path66), path66, options2);
+    function sync(path67, options2) {
+      return checkStat(fs53.statSync(path67), path67, options2);
     }
     __name(sync, "sync");
   }
@@ -16414,14 +16414,14 @@ var require_mode = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs53 = __require("fs");
-    function isexe(path66, options2, cb) {
-      fs53.stat(path66, function(er, stat3) {
+    function isexe(path67, options2, cb) {
+      fs53.stat(path67, function(er, stat3) {
         cb(er, er ? false : checkStat(stat3, options2));
       });
     }
     __name(isexe, "isexe");
-    function sync(path66, options2) {
-      return checkStat(fs53.statSync(path66), options2);
+    function sync(path67, options2) {
+      return checkStat(fs53.statSync(path67), options2);
     }
     __name(sync, "sync");
     function checkStat(stat3, options2) {
@@ -16458,7 +16458,7 @@ var require_isexe = __commonJS({
     }
     module2.exports = isexe;
     isexe.sync = sync;
-    function isexe(path66, options2, cb) {
+    function isexe(path67, options2, cb) {
       if (typeof options2 === "function") {
         cb = options2;
         options2 = {};
@@ -16468,7 +16468,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve17, reject) {
-          isexe(path66, options2 || {}, function(er, is) {
+          isexe(path67, options2 || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -16477,7 +16477,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path66, options2 || {}, function(er, is) {
+      core(path67, options2 || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options2 && options2.ignoreErrors) {
             er = null;
@@ -16488,9 +16488,9 @@ var require_isexe = __commonJS({
       });
     }
     __name(isexe, "isexe");
-    function sync(path66, options2) {
+    function sync(path67, options2) {
       try {
-        return core.sync(path66, options2 || {});
+        return core.sync(path67, options2 || {});
       } catch (er) {
         if (options2 && options2.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -16508,7 +16508,7 @@ var require_which = __commonJS({
   "node_modules/which/which.js"(exports2, module2) {
     init_esbuild_shims();
     var isWindows2 = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path66 = __require("path");
+    var path67 = __require("path");
     var COLON = isWindows2 ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = /* @__PURE__ */ __name((cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" }), "getNotFoundError");
@@ -16546,7 +16546,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve17(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path66.join(pathPart, cmd);
+        const pCmd = path67.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve17(subStep(p, i, 0));
       }), "step");
@@ -16573,7 +16573,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path66.join(pathPart, cmd);
+        const pCmd = path67.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j = 0; j < pathExt.length; j++) {
           const cur = p + pathExt[j];
@@ -16623,7 +16623,7 @@ var require_resolveCommand = __commonJS({
   "node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
     "use strict";
     init_esbuild_shims();
-    var path66 = __require("path");
+    var path67 = __require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -16641,7 +16641,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env3[getPathKey({ env: env3 })],
-          pathExt: withoutPathExt ? path66.delimiter : void 0
+          pathExt: withoutPathExt ? path67.delimiter : void 0
         });
       } catch (e2) {
       } finally {
@@ -16650,7 +16650,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path66.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path67.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -16711,8 +16711,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path66, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path66.split("/").pop();
+      const [path67, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path67.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -16750,7 +16750,7 @@ var require_parse2 = __commonJS({
   "node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
     "use strict";
     init_esbuild_shims();
-    var path66 = __require("path");
+    var path67 = __require("path");
     var resolveCommand2 = require_resolveCommand();
     var escape5 = require_escape();
     var readShebang = require_readShebang();
@@ -16776,7 +16776,7 @@ var require_parse2 = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path66.normalize(parsed.command);
+        parsed.command = path67.normalize(parsed.command);
         parsed.command = escape5.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape5.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -17267,8 +17267,8 @@ var require_utils2 = __commonJS({
       }
       return output;
     };
-    exports2.basename = (path66, { windows } = {}) => {
-      const segs = path66.split(windows ? /[\\/]/ : "/");
+    exports2.basename = (path67, { windows } = {}) => {
+      const segs = path67.split(windows ? /[\\/]/ : "/");
       const last2 = segs[segs.length - 1];
       if (last2 === "") {
         return segs[segs.length - 2];
@@ -18546,8 +18546,8 @@ var require_utils3 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.normalizePath = exports2.isRootDirectory = exports2.convertSlashes = exports2.cleanPath = void 0;
     var path_1 = __require("path");
-    function cleanPath(path66) {
-      let normalized2 = (0, path_1.normalize)(path66);
+    function cleanPath(path67) {
+      let normalized2 = (0, path_1.normalize)(path67);
       if (normalized2.length > 1 && normalized2[normalized2.length - 1] === path_1.sep)
         normalized2 = normalized2.substring(0, normalized2.length - 1);
       return normalized2;
@@ -18555,28 +18555,28 @@ var require_utils3 = __commonJS({
     __name(cleanPath, "cleanPath");
     exports2.cleanPath = cleanPath;
     var SLASHES_REGEX = /[\\/]/g;
-    function convertSlashes(path66, separator) {
-      return path66.replace(SLASHES_REGEX, separator);
+    function convertSlashes(path67, separator) {
+      return path67.replace(SLASHES_REGEX, separator);
     }
     __name(convertSlashes, "convertSlashes");
     exports2.convertSlashes = convertSlashes;
     var WINDOWS_ROOT_DIR_REGEX = /^[a-z]:[\\/]$/i;
-    function isRootDirectory(path66) {
-      return path66 === "/" || WINDOWS_ROOT_DIR_REGEX.test(path66);
+    function isRootDirectory(path67) {
+      return path67 === "/" || WINDOWS_ROOT_DIR_REGEX.test(path67);
     }
     __name(isRootDirectory, "isRootDirectory");
     exports2.isRootDirectory = isRootDirectory;
-    function normalizePath(path66, options2) {
+    function normalizePath(path67, options2) {
       const { resolvePaths, normalizePath: normalizePath2, pathSeparator } = options2;
-      const pathNeedsCleaning = process.platform === "win32" && path66.includes("/") || path66.startsWith(".");
+      const pathNeedsCleaning = process.platform === "win32" && path67.includes("/") || path67.startsWith(".");
       if (resolvePaths)
-        path66 = (0, path_1.resolve)(path66);
+        path67 = (0, path_1.resolve)(path67);
       if (normalizePath2 || pathNeedsCleaning)
-        path66 = cleanPath(path66);
-      if (path66 === ".")
+        path67 = cleanPath(path67);
+      if (path67 === ".")
         return "";
-      const needsSeperator = path66[path66.length - 1] !== pathSeparator;
-      return convertSlashes(needsSeperator ? path66 + pathSeparator : path66, pathSeparator);
+      const needsSeperator = path67[path67.length - 1] !== pathSeparator;
+      return convertSlashes(needsSeperator ? path67 + pathSeparator : path67, pathSeparator);
     }
     __name(normalizePath, "normalizePath");
     exports2.normalizePath = normalizePath;
@@ -18651,9 +18651,9 @@ var require_push_directory = __commonJS({
       paths.push(directoryPath || ".");
     }, "pushDirectory");
     var pushDirectoryFilter = /* @__PURE__ */ __name((directoryPath, paths, filters) => {
-      const path66 = directoryPath || ".";
-      if (filters.every((filter3) => filter3(path66, true))) {
-        paths.push(path66);
+      const path67 = directoryPath || ".";
+      if (filters.every((filter3) => filter3(path67, true))) {
+        paths.push(path67);
       }
     }, "pushDirectoryFilter");
     var empty = /* @__PURE__ */ __name(() => {
@@ -18764,29 +18764,29 @@ var require_resolve_symlink = __commonJS({
     exports2.build = void 0;
     var fs_1 = __importDefault(__require("fs"));
     var path_1 = __require("path");
-    var resolveSymlinksAsync = /* @__PURE__ */ __name(function(path66, state, callback) {
+    var resolveSymlinksAsync = /* @__PURE__ */ __name(function(path67, state, callback) {
       const { queue, options: { suppressErrors } } = state;
       queue.enqueue();
-      fs_1.default.realpath(path66, (error2, resolvedPath) => {
+      fs_1.default.realpath(path67, (error2, resolvedPath) => {
         if (error2)
           return queue.dequeue(suppressErrors ? null : error2, state);
         fs_1.default.stat(resolvedPath, (error3, stat3) => {
           if (error3)
             return queue.dequeue(suppressErrors ? null : error3, state);
-          if (stat3.isDirectory() && isRecursive(path66, resolvedPath, state))
+          if (stat3.isDirectory() && isRecursive(path67, resolvedPath, state))
             return queue.dequeue(null, state);
           callback(stat3, resolvedPath);
           queue.dequeue(null, state);
         });
       });
     }, "resolveSymlinksAsync");
-    var resolveSymlinks = /* @__PURE__ */ __name(function(path66, state, callback) {
+    var resolveSymlinks = /* @__PURE__ */ __name(function(path67, state, callback) {
       const { queue, options: { suppressErrors } } = state;
       queue.enqueue();
       try {
-        const resolvedPath = fs_1.default.realpathSync(path66);
+        const resolvedPath = fs_1.default.realpathSync(path67);
         const stat3 = fs_1.default.statSync(resolvedPath);
-        if (stat3.isDirectory() && isRecursive(path66, resolvedPath, state))
+        if (stat3.isDirectory() && isRecursive(path67, resolvedPath, state))
           return;
         callback(stat3, resolvedPath);
       } catch (e2) {
@@ -18801,10 +18801,10 @@ var require_resolve_symlink = __commonJS({
     }
     __name(build, "build");
     exports2.build = build;
-    function isRecursive(path66, resolved, state) {
+    function isRecursive(path67, resolved, state) {
       if (state.options.useRealPaths)
         return isRecursiveUsingRealPaths(resolved, state);
-      let parent = (0, path_1.dirname)(path66);
+      let parent = (0, path_1.dirname)(path67);
       let depth = 1;
       while (parent !== state.root && depth < 2) {
         const resolvedPath = state.symlinks.get(parent);
@@ -18814,7 +18814,7 @@ var require_resolve_symlink = __commonJS({
         else
           parent = (0, path_1.dirname)(parent);
       }
-      state.symlinks.set(path66, resolved);
+      state.symlinks.set(path67, resolved);
       return depth > 1;
     }
     __name(isRecursive, "isRecursive");
@@ -19100,21 +19100,21 @@ var require_walker = __commonJS({
             const filename = this.joinPath(entry.name, directoryPath);
             this.pushFile(filename, files, this.state.counts, filters);
           } else if (entry.isDirectory()) {
-            let path66 = joinPath.joinDirectoryPath(entry.name, directoryPath, this.state.options.pathSeparator);
-            if (exclude && exclude(entry.name, path66))
+            let path67 = joinPath.joinDirectoryPath(entry.name, directoryPath, this.state.options.pathSeparator);
+            if (exclude && exclude(entry.name, path67))
               continue;
-            this.pushDirectory(path66, paths, filters);
-            this.walkDirectory(this.state, path66, path66, depth - 1, this.walk);
+            this.pushDirectory(path67, paths, filters);
+            this.walkDirectory(this.state, path67, path67, depth - 1, this.walk);
           } else if (this.resolveSymlink && entry.isSymbolicLink()) {
-            let path66 = joinPath.joinPathWithBasePath(entry.name, directoryPath);
-            this.resolveSymlink(path66, this.state, (stat3, resolvedPath) => {
+            let path67 = joinPath.joinPathWithBasePath(entry.name, directoryPath);
+            this.resolveSymlink(path67, this.state, (stat3, resolvedPath) => {
               if (stat3.isDirectory()) {
                 resolvedPath = (0, utils_1.normalizePath)(resolvedPath, this.state.options);
-                if (exclude && exclude(entry.name, useRealPaths ? resolvedPath : path66 + pathSeparator))
+                if (exclude && exclude(entry.name, useRealPaths ? resolvedPath : path67 + pathSeparator))
                   return;
-                this.walkDirectory(this.state, resolvedPath, useRealPaths ? resolvedPath : path66 + pathSeparator, depth - 1, this.walk);
+                this.walkDirectory(this.state, resolvedPath, useRealPaths ? resolvedPath : path67 + pathSeparator, depth - 1, this.walk);
               } else {
-                resolvedPath = useRealPaths ? resolvedPath : path66;
+                resolvedPath = useRealPaths ? resolvedPath : path67;
                 const filename = (0, path_1.basename)(resolvedPath);
                 const directoryPath2 = (0, utils_1.normalizePath)((0, path_1.dirname)(resolvedPath), this.state.options);
                 resolvedPath = this.joinPath(filename, directoryPath2);
@@ -19341,7 +19341,7 @@ var require_builder = __commonJS({
           isMatch = globFn(patterns, ...options2);
           this.globCache[patterns.join("\0")] = isMatch;
         }
-        this.options.filters.push((path66) => isMatch(path66));
+        this.options.filters.push((path67) => isMatch(path67));
         return this;
       }
     };
@@ -21490,6 +21490,27 @@ init_esbuild_shims();
 
 // packages/core/dist/src/telemetry/config.js
 init_esbuild_shims();
+var warnedLegacyEnvVars = /* @__PURE__ */ new Set();
+function warnLegacyEnvVar(legacyName, canonicalName) {
+  if (warnedLegacyEnvVars.has(legacyName)) {
+    return;
+  }
+  warnedLegacyEnvVars.add(legacyName);
+  console.warn(`[DEPRECATION] Environment variable ${legacyName} is deprecated. Use ${canonicalName} instead.`);
+}
+__name(warnLegacyEnvVar, "warnLegacyEnvVar");
+function resolveEnvAlias(env3, canonicalName, legacyName) {
+  const canonicalValue = env3[canonicalName];
+  if (canonicalValue !== void 0) {
+    return canonicalValue;
+  }
+  const legacyValue = env3[legacyName];
+  if (legacyValue !== void 0) {
+    warnLegacyEnvVar(legacyName, canonicalName);
+  }
+  return legacyValue;
+}
+__name(resolveEnvAlias, "resolveEnvAlias");
 function parseBooleanEnvFlag(value) {
   if (value === void 0)
     return void 0;
@@ -21512,21 +21533,21 @@ async function resolveTelemetrySettings(options2) {
   const argv = options2.argv ?? {};
   const env3 = options2.env ?? {};
   const settings = options2.settings ?? {};
-  const enabled = argv.telemetry ?? parseBooleanEnvFlag(env3["GEMINI_TELEMETRY_ENABLED"]) ?? settings.enabled;
-  const rawTarget = argv.telemetryTarget ?? env3["GEMINI_TELEMETRY_TARGET"] ?? settings.target;
+  const enabled = argv.telemetry ?? parseBooleanEnvFlag(resolveEnvAlias(env3, "PAPERT_TELEMETRY_ENABLED", "GEMINI_TELEMETRY_ENABLED")) ?? settings.enabled;
+  const rawTarget = argv.telemetryTarget ?? resolveEnvAlias(env3, "PAPERT_TELEMETRY_TARGET", "GEMINI_TELEMETRY_TARGET") ?? settings.target;
   const target = parseTelemetryTargetValue(rawTarget);
   if (rawTarget !== void 0 && target === void 0) {
     throw new FatalConfigError(`Invalid telemetry target: ${String(rawTarget)}. Valid values are: local, gcp`);
   }
-  const otlpEndpoint = argv.telemetryOtlpEndpoint ?? env3["GEMINI_TELEMETRY_OTLP_ENDPOINT"] ?? env3["OTEL_EXPORTER_OTLP_ENDPOINT"] ?? settings.otlpEndpoint;
-  const rawProtocol = argv.telemetryOtlpProtocol ?? env3["GEMINI_TELEMETRY_OTLP_PROTOCOL"] ?? settings.otlpProtocol;
+  const otlpEndpoint = argv.telemetryOtlpEndpoint ?? resolveEnvAlias(env3, "PAPERT_TELEMETRY_OTLP_ENDPOINT", "GEMINI_TELEMETRY_OTLP_ENDPOINT") ?? env3["OTEL_EXPORTER_OTLP_ENDPOINT"] ?? settings.otlpEndpoint;
+  const rawProtocol = argv.telemetryOtlpProtocol ?? resolveEnvAlias(env3, "PAPERT_TELEMETRY_OTLP_PROTOCOL", "GEMINI_TELEMETRY_OTLP_PROTOCOL") ?? settings.otlpProtocol;
   const otlpProtocol = ["grpc", "http"].find((p) => p === rawProtocol);
   if (rawProtocol !== void 0 && otlpProtocol === void 0) {
     throw new FatalConfigError(`Invalid telemetry OTLP protocol: ${String(rawProtocol)}. Valid values are: grpc, http`);
   }
-  const logPrompts = argv.telemetryLogPrompts ?? parseBooleanEnvFlag(env3["GEMINI_TELEMETRY_LOG_PROMPTS"]) ?? settings.logPrompts;
-  const outfile = argv.telemetryOutfile ?? env3["GEMINI_TELEMETRY_OUTFILE"] ?? settings.outfile;
-  const useCollector = parseBooleanEnvFlag(env3["GEMINI_TELEMETRY_USE_COLLECTOR"]) ?? settings.useCollector;
+  const logPrompts = argv.telemetryLogPrompts ?? parseBooleanEnvFlag(resolveEnvAlias(env3, "PAPERT_TELEMETRY_LOG_PROMPTS", "GEMINI_TELEMETRY_LOG_PROMPTS")) ?? settings.logPrompts;
+  const outfile = argv.telemetryOutfile ?? resolveEnvAlias(env3, "PAPERT_TELEMETRY_OUTFILE", "GEMINI_TELEMETRY_OUTFILE") ?? settings.outfile;
+  const useCollector = parseBooleanEnvFlag(resolveEnvAlias(env3, "PAPERT_TELEMETRY_USE_COLLECTOR", "GEMINI_TELEMETRY_USE_COLLECTOR")) ?? settings.useCollector;
   return {
     enabled,
     target,
@@ -22359,7 +22380,7 @@ init_esbuild_shims();
 // packages/core/dist/src/config/config.js
 init_esbuild_shims();
 var import_undici3 = __toESM(require_undici(), 1);
-import * as path54 from "node:path";
+import * as path55 from "node:path";
 import process7 from "node:process";
 
 // packages/core/dist/src/core/baseLlmClient.js
@@ -22873,7 +22894,7 @@ async function retryWithBackoff(fn, options2) {
       const classifiedError = classifyGoogleError(error2);
       const errorCode = getErrorStatus(error2);
       if (classifiedError instanceof TerminalQuotaError || classifiedError instanceof ModelNotFoundError) {
-        if (onPersistent429 && authType !== AuthType.PAPERT_OAUTH) {
+        if (onPersistent429) {
           try {
             const fallbackModel = await onPersistent429(authType, classifiedError);
             if (fallbackModel) {
@@ -22890,7 +22911,7 @@ async function retryWithBackoff(fn, options2) {
       const is500 = errorCode !== void 0 && errorCode >= 500 && errorCode < 600;
       if (classifiedError instanceof RetryableQuotaError || is500) {
         if (attempt >= maxAttempts) {
-          if (onPersistent429 && authType !== AuthType.PAPERT_OAUTH) {
+          if (onPersistent429) {
             try {
               const fallbackModel = await onPersistent429(authType, classifiedError);
               if (fallbackModel) {
@@ -23567,6 +23588,34 @@ __name(openBrowserSecurely, "openBrowserSecurely");
 
 // packages/core/dist/src/availability/errorClassification.js
 init_esbuild_shims();
+var TERMINAL_MESSAGE_PATTERNS = [
+  /\binsufficient[_\s-]?quota\b/i,
+  /\bquota exceeded\b/i,
+  /\bbilling.*(limit|exceeded)\b/i,
+  /\bunauthorized\b/i,
+  /\bforbidden\b/i,
+  /\binvalid api key\b/i,
+  /\bauthentication\b/i
+];
+var TRANSIENT_MESSAGE_PATTERNS = [
+  /\brate limit\b/i,
+  /\btoo many requests\b/i,
+  /\btemporar(?:y|ily)\b/i,
+  /\bplease retry\b/i,
+  /\btimeout\b/i,
+  /\bservice unavailable\b/i
+];
+var MODEL_NOT_FOUND_PATTERNS = [
+  /\bmodel\b.*\bnot found\b/i,
+  /\bunknown model\b/i
+];
+function getErrorMessage2(error2) {
+  if (error2 instanceof Error) {
+    return error2.message;
+  }
+  return String(error2 ?? "");
+}
+__name(getErrorMessage2, "getErrorMessage");
 function classifyFailureKind(error2) {
   if (error2 instanceof TerminalQuotaError) {
     return "terminal";
@@ -23577,6 +23626,28 @@ function classifyFailureKind(error2) {
   if (error2 instanceof ModelNotFoundError) {
     return "not_found";
   }
+  const status = getErrorStatus(error2);
+  if (status === 404) {
+    return "not_found";
+  }
+  if (status === 401 || status === 402 || status === 403) {
+    return "terminal";
+  }
+  if (typeof status === "number") {
+    if (status === 408 || status === 409 || status === 425 || status === 429 || status >= 500 && status < 600) {
+      return "transient";
+    }
+  }
+  const message = getErrorMessage2(error2);
+  if (MODEL_NOT_FOUND_PATTERNS.some((pattern) => pattern.test(message))) {
+    return "not_found";
+  }
+  if (TERMINAL_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) {
+    return "terminal";
+  }
+  if (TRANSIENT_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) {
+    return "transient";
+  }
   return "unknown";
 }
 __name(classifyFailureKind, "classifyFailureKind");
@@ -23594,9 +23665,9 @@ var DEFAULT_ACTIONS = {
 };
 var DEFAULT_STATE = {
   terminal: "terminal",
-  transient: "terminal",
+  transient: "sticky_retry",
   not_found: "terminal",
-  unknown: "terminal"
+  unknown: "transient"
 };
 var DEFAULT_CHAIN = [
   definePolicy({ model: DEFAULT_GEMINI_MODEL }),
@@ -23621,6 +23692,19 @@ function createDefaultPolicy(model, options2) {
   return definePolicy({ model, isLastResort: options2?.isLastResort });
 }
 __name(createDefaultPolicy, "createDefaultPolicy");
+function validateModelPolicyChain(chain2) {
+  if (chain2.length === 0) {
+    throw new Error("Model policy chain must include at least one model.");
+  }
+  const lastResortCount = chain2.filter((policy) => policy.isLastResort).length;
+  if (lastResortCount === 0) {
+    throw new Error("Model policy chain must include an `isLastResort` model.");
+  }
+  if (lastResortCount > 1) {
+    throw new Error("Model policy chain must only have one `isLastResort`.");
+  }
+}
+__name(validateModelPolicyChain, "validateModelPolicyChain");
 function definePolicy(config2) {
   return {
     model: config2.model,
@@ -23659,6 +23743,7 @@ function resolvePolicyChain(config2, preferredModel, wrapsAround = false) {
   } else {
     chain2 = createSingleModelChain(modelFromConfig);
   }
+  validateModelPolicyChain(chain2);
   const activeModel = resolveModel(modelFromConfig);
   const activeIndex = chain2.findIndex((policy) => policy.model === activeModel);
   if (activeIndex !== -1) {
@@ -23688,7 +23773,7 @@ function selectModelForAvailability(config2, requestedModel) {
   const selection = config2.getModelAvailabilityService().selectFirstAvailable(chain2.map((p) => p.model));
   if (selection.selectedModel)
     return selection;
-  const backupModel = chain2.find((p) => p.isLastResort)?.model ?? DEFAULT_GEMINI_MODEL;
+  const backupModel = chain2.find((p) => p.isLastResort)?.model ?? resolveModel(requestedModel);
   return { selectedModel: backupModel, skipped: [] };
 }
 __name(selectModelForAvailability, "selectModelForAvailability");
@@ -23701,6 +23786,8 @@ function applyAvailabilityTransition(getContext, failureKind) {
     return;
   if (transition === "terminal") {
     context.service.markTerminal(context.policy.model, failureKind === "terminal" ? "quota" : "capacity");
+  } else if (transition === "transient") {
+    context.service.markTransient(context.policy.model);
   } else if (transition === "sticky_retry") {
     context.service.markRetryOncePerTurn(context.policy.model);
   }
@@ -23711,15 +23798,15 @@ __name(applyAvailabilityTransition, "applyAvailabilityTransition");
 var UPGRADE_URL_PAGE = "https://goo.gle/set-up-gemini-code-assist";
 async function handleFallback(config2, failedModel, authType, error2) {
   if (authType === AuthType.PAPERT_OAUTH) {
-    return handlePapertOAuthError(error2);
+    const papertResult = await handlePapertOAuthError(error2);
+    if (papertResult) {
+      return papertResult;
+    }
   }
   return handlePolicyDrivenFallback(config2, failedModel, authType, error2);
 }
 __name(handleFallback, "handleFallback");
 async function handlePolicyDrivenFallback(config2, failedModel, authType, error2) {
-  if (authType !== AuthType.LOGIN_WITH_GOOGLE) {
-    return null;
-  }
   const chain2 = resolvePolicyChain(config2);
   const { failedPolicy, candidates } = buildFallbackPolicyContext(chain2, failedModel);
   const failureKind = classifyFailureKind(error2);
@@ -23731,6 +23818,7 @@ async function handlePolicyDrivenFallback(config2, failedModel, authType, error2
   }, "getAvailabilityContext");
   let fallbackModel;
   if (!candidates.length) {
+    applyAvailabilityTransition(getAvailabilityContext, failureKind);
     return null;
   } else {
     const selection = availability.selectFirstAvailable(candidates.map((policy) => policy.model));
@@ -23738,6 +23826,7 @@ async function handlePolicyDrivenFallback(config2, failedModel, authType, error2
     const selectedFallbackModel = selection.selectedModel ?? lastResortPolicy?.model;
     const selectedPolicy = candidates.find((policy) => policy.model === selectedFallbackModel);
     if (!selectedFallbackModel || selectedFallbackModel === failedModel || !selectedPolicy) {
+      applyAvailabilityTransition(getAvailabilityContext, failureKind);
       return null;
     }
     fallbackModel = selectedFallbackModel;
@@ -24644,16 +24733,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path66, added, removed, oldPosInc, options2) {
-    const last2 = path66.lastComponent;
+  addToPath(path67, added, removed, oldPosInc, options2) {
+    const last2 = path67.lastComponent;
     if (last2 && !options2.oneChangePerToken && last2.added === added && last2.removed === removed) {
       return {
-        oldPos: path66.oldPos + oldPosInc,
+        oldPos: path67.oldPos + oldPosInc,
         lastComponent: { count: last2.count + 1, added, removed, previousComponent: last2.previousComponent }
       };
     } else {
       return {
-        oldPos: path66.oldPos + oldPosInc,
+        oldPos: path67.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last2 }
       };
     }
@@ -29449,6 +29538,42 @@ __name(safetyRuleMatches, "safetyRuleMatches");
 import * as fs11 from "node:fs/promises";
 import * as path11 from "node:path";
 var import_fast_levenshtein = __toESM(require_levenshtein(), 1);
+
+// packages/core/dist/src/policy/types.js
+init_esbuild_shims();
+var PolicyDecision;
+(function(PolicyDecision2) {
+  PolicyDecision2["ALLOW"] = "allow";
+  PolicyDecision2["DENY"] = "deny";
+  PolicyDecision2["ASK_USER"] = "ask_user";
+})(PolicyDecision || (PolicyDecision = {}));
+var VALID_HOOK_SOURCES = [
+  "project",
+  "user",
+  "system",
+  "extension"
+];
+function getHookSource(input) {
+  const source = input["hook_source"];
+  if (typeof source === "string" && VALID_HOOK_SOURCES.includes(source)) {
+    return source;
+  }
+  return "project";
+}
+__name(getHookSource, "getHookSource");
+var ApprovalMode;
+(function(ApprovalMode3) {
+  ApprovalMode3["DEFAULT"] = "default";
+  ApprovalMode3["AUTO_EDIT"] = "autoEdit";
+  ApprovalMode3["YOLO"] = "yolo";
+  ApprovalMode3["PLAN"] = "plan";
+})(ApprovalMode || (ApprovalMode = {}));
+var InProcessCheckerType;
+(function(InProcessCheckerType2) {
+  InProcessCheckerType2["ALLOWED_PATH"] = "allowed-path";
+})(InProcessCheckerType || (InProcessCheckerType = {}));
+
+// packages/core/dist/src/core/coreToolScheduler.js
 function createFunctionResponsePart(callId, toolName, output) {
   return {
     functionResponse: {
@@ -29543,6 +29668,7 @@ var createErrorResponse = /* @__PURE__ */ __name((request, error2, errorType) =>
   ],
   resultDisplay: error2.message,
   errorType,
+  reason: error2.message,
   contentLength: error2.message.length
 }), "createErrorResponse");
 async function truncateAndSaveToFile(content, callId, projectTempDir, threshold, truncateLines) {
@@ -29592,6 +29718,7 @@ ${truncatedContent}`,
   }
 }
 __name(truncateAndSaveToFile, "truncateAndSaveToFile");
+var DOOM_LOOP_IDENTICAL_TOOL_CALL_THRESHOLD = 6;
 var CoreToolScheduler = class {
   static {
     __name(this, "CoreToolScheduler");
@@ -29608,6 +29735,9 @@ var CoreToolScheduler = class {
   isFinalizingToolCalls = false;
   isScheduling = false;
   requestQueue = [];
+  doomLoopPromptId = null;
+  doomLoopLastSignature = null;
+  doomLoopRunLength = 0;
   constructor(options2) {
     this.config = options2.config;
     this.toolRegistry = options2.config.getToolRegistry();
@@ -29708,9 +29838,10 @@ var CoreToolScheduler = class {
                   }
                 }
               ],
-              resultDisplay,
+              resultDisplay: resultDisplay ?? String(auxiliaryData),
               error: void 0,
               errorType: void 0,
+              reason: String(auxiliaryData),
               contentLength: errorMessage.length
             },
             durationMs,
@@ -29842,6 +29973,33 @@ var CoreToolScheduler = class {
       }
       const requestsToProcess = Array.isArray(request) ? request : [request];
       const newToolCalls = requestsToProcess.map((reqInfo) => {
+        const doomLoopBlockReason = this.getDoomLoopBlockReason(reqInfo);
+        if (doomLoopBlockReason) {
+          return {
+            status: "error",
+            request: reqInfo,
+            response: createErrorResponse(reqInfo, new Error(doomLoopBlockReason), ToolErrorType.EXECUTION_DENIED),
+            durationMs: 0
+          };
+        }
+        const policyEngine2 = this.config.getPolicyEngine?.();
+        if (policyEngine2) {
+          const workspaceDirs = this.config.getWorkspaceContext?.().getDirectories?.();
+          const policyDetails = policyEngine2.getDecisionDetails({ name: reqInfo.name, args: reqInfo.args }, void 0, {
+            cwd: this.config.getTargetDir?.(),
+            workspaces: Array.isArray(workspaceDirs) ? workspaceDirs : void 0,
+            agentName: reqInfo.agentName
+          });
+          if (policyDetails.decision === PolicyDecision.DENY) {
+            const permissionErrorMessage = policyDetails.reason ?? `Papert Code requires permission to use "${reqInfo.name}", but that permission was declined.`;
+            return {
+              status: "error",
+              request: reqInfo,
+              response: createErrorResponse(reqInfo, new Error(permissionErrorMessage), ToolErrorType.EXECUTION_DENIED),
+              durationMs: 0
+            };
+          }
+        }
         const excludeTools = this.config.getExcludeTools?.() ?? void 0;
         if (excludeTools && excludeTools.length > 0) {
           const normalizedToolName = reqInfo.name.toLowerCase().trim();
@@ -29867,6 +30025,15 @@ var CoreToolScheduler = class {
             durationMs: 0
           };
         }
+        const modeProfileBlockReason = this.getModeProfileBlockReason(reqInfo, toolInstance);
+        if (modeProfileBlockReason) {
+          return {
+            status: "error",
+            request: reqInfo,
+            response: createErrorResponse(reqInfo, new Error(modeProfileBlockReason), ToolErrorType.EXECUTION_DENIED),
+            durationMs: 0
+          };
+        }
         const invocationOrError = this.buildInvocation(toolInstance, reqInfo.args);
         if (invocationOrError instanceof Error) {
           return {
@@ -29904,7 +30071,7 @@ var CoreToolScheduler = class {
             continue;
           }
           const allowedTools = this.config.getAllowedTools() || [];
-          const isPlanMode = this.config.getApprovalMode() === ApprovalMode.PLAN;
+          const isPlanMode = this.config.getApprovalMode() === ApprovalMode2.PLAN;
           const isExitPlanModeTool = reqInfo.name === "exit_plan_mode";
           if (isPlanMode && !isExitPlanModeTool) {
             if (confirmationDetails) {
@@ -29918,7 +30085,7 @@ var CoreToolScheduler = class {
             } else {
               this.setStatusInternal(reqInfo.callId, "scheduled");
             }
-          } else if (this.config.getApprovalMode() === ApprovalMode.YOLO || doesToolInvocationMatch(toolCall.tool, invocation, allowedTools)) {
+          } else if (this.config.getApprovalMode() === ApprovalMode2.YOLO || doesToolInvocationMatch(toolCall.tool, invocation, allowedTools)) {
             this.setToolCallOutcome(reqInfo.callId, ToolConfirmationOutcome.ProceedAlways);
             this.setStatusInternal(reqInfo.callId, "scheduled");
           } else {
@@ -30127,6 +30294,43 @@ var CoreToolScheduler = class {
       }
     }
   }
+  getDoomLoopBlockReason(request) {
+    if (this.doomLoopPromptId !== request.prompt_id) {
+      this.doomLoopPromptId = request.prompt_id;
+      this.doomLoopLastSignature = null;
+      this.doomLoopRunLength = 0;
+    }
+    const signature = `${request.name}:${stableStringify(request.args ?? {})}`;
+    if (this.doomLoopLastSignature === signature) {
+      this.doomLoopRunLength += 1;
+    } else {
+      this.doomLoopLastSignature = signature;
+      this.doomLoopRunLength = 1;
+    }
+    if (this.doomLoopRunLength < DOOM_LOOP_IDENTICAL_TOOL_CALL_THRESHOLD) {
+      return void 0;
+    }
+    return `Doom-loop protection blocked repeated identical tool call "${request.name}" after ${this.doomLoopRunLength} consecutive attempts in the same prompt.`;
+  }
+  getModeProfileBlockReason(request, tool) {
+    const modeProfile = this.config.getModeProfile?.();
+    if (!modeProfile || modeProfile === "build") {
+      return void 0;
+    }
+    const isMutatingTool = tool.kind === Kind.Edit || tool.kind === Kind.Delete || tool.kind === Kind.Move || tool.kind === Kind.Execute;
+    if (modeProfile === "plan" && isMutatingTool && request.name !== "exit_plan_mode") {
+      return `Mode profile "${modeProfile}" blocked mutating tool "${request.name}". Switch to "/mode build" before making changes.`;
+    }
+    if (modeProfile === "review") {
+      if (request.name === "task") {
+        return 'Mode profile "review" blocks the "task" tool to prevent delegated writes/execution.';
+      }
+      if (isMutatingTool) {
+        return `Mode profile "${modeProfile}" blocked mutating tool "${request.name}". Switch to "/mode build" before making changes.`;
+      }
+    }
+    return void 0;
+  }
   async checkAndNotifyCompletion() {
     const allCallsAreTerminal = this.toolCalls.every((call) => call.status === "success" || call.status === "error" || call.status === "cancelled");
     if (this.toolCalls.length > 0 && allCallsAreTerminal) {
@@ -30677,6 +30881,7 @@ var SubAgentScope = class _SubAgentScope {
         args,
         isClientInitiated: true,
         prompt_id: promptId,
+        agentName: this.name,
         response_id: responseId
       };
       const description = this.getToolDescription(toolName, args);
@@ -32536,18 +32741,18 @@ var GeminiClient = class {
         f
       ]));
       const openedFiles = [];
-      for (const [path66] of currentFiles.entries()) {
-        if (!lastFiles.has(path66)) {
-          openedFiles.push(path66);
+      for (const [path67] of currentFiles.entries()) {
+        if (!lastFiles.has(path67)) {
+          openedFiles.push(path67);
         }
       }
       if (openedFiles.length > 0) {
         changes["filesOpened"] = openedFiles;
       }
       const closedFiles = [];
-      for (const [path66] of lastFiles.entries()) {
-        if (!currentFiles.has(path66)) {
-          closedFiles.push(path66);
+      for (const [path67] of lastFiles.entries()) {
+        if (!currentFiles.has(path67)) {
+          closedFiles.push(path67);
         }
       }
       if (closedFiles.length > 0) {
@@ -32725,7 +32930,7 @@ var GeminiClient = class {
         if (hasTaskTool && subagents.length > 0) {
           systemReminders.push(getSubagentSystemReminder(subagents));
         }
-        if (this.config.getApprovalMode() === ApprovalMode.PLAN) {
+        if (this.config.getApprovalMode() === ApprovalMode2.PLAN) {
           systemReminders.push(getPlanModeSystemReminder(this.config.getSdkMode()));
         }
         requestToSent = [...systemReminders, ...requestToSent];
@@ -33281,8 +33486,8 @@ function pathspec(...paths) {
   return key;
 }
 __name(pathspec, "pathspec");
-function isPathSpec(path66) {
-  return path66 instanceof String && cache.has(path66);
+function isPathSpec(path67) {
+  return path67 instanceof String && cache.has(path67);
 }
 __name(isPathSpec, "isPathSpec");
 function toPaths(pathSpec) {
@@ -33390,8 +33595,8 @@ function forEachLineWithContent(input, callback) {
   return toLinesWithContent(input, true).map((line) => callback(line));
 }
 __name(forEachLineWithContent, "forEachLineWithContent");
-function folderExists(path66) {
-  return (0, import_file_exists.exists)(path66, import_file_exists.FOLDER);
+function folderExists(path67) {
+  return (0, import_file_exists.exists)(path67, import_file_exists.FOLDER);
 }
 __name(folderExists, "folderExists");
 function append(target, item) {
@@ -33824,8 +34029,8 @@ function checkIsRepoRootTask() {
     commands,
     format: "utf-8",
     onError,
-    parser(path66) {
-      return /^\.(git)?$/.test(path66.trim());
+    parser(path67) {
+      return /^\.(git)?$/.test(path67.trim());
     }
   };
 }
@@ -34293,11 +34498,11 @@ function parseGrep(grep) {
   const paths = /* @__PURE__ */ new Set();
   const results = {};
   forEachLineWithContent(grep, (input) => {
-    const [path66, line, preview] = input.split(NULL);
-    paths.add(path66);
-    (results[path66] = results[path66] || []).push({
+    const [path67, line, preview] = input.split(NULL);
+    paths.add(path67);
+    (results[path67] = results[path67] || []).push({
       line: asNumber(line),
-      path: path66,
+      path: path67,
       preview
     });
   });
@@ -35098,14 +35303,14 @@ var init_hash_object = __esm2({
     init_task();
   }
 });
-function parseInit(bare, path66, text) {
+function parseInit(bare, path67, text) {
   const response = String(text).trim();
   let result;
   if (result = initResponseRegex.exec(response)) {
-    return new InitSummary(bare, path66, false, result[1]);
+    return new InitSummary(bare, path67, false, result[1]);
   }
   if (result = reInitResponseRegex.exec(response)) {
-    return new InitSummary(bare, path66, true, result[1]);
+    return new InitSummary(bare, path67, true, result[1]);
   }
   let gitDir = "";
   const tokens = response.split(" ");
@@ -35116,7 +35321,7 @@ function parseInit(bare, path66, text) {
       break;
     }
   }
-  return new InitSummary(bare, path66, /^re/i.test(response), gitDir);
+  return new InitSummary(bare, path67, /^re/i.test(response), gitDir);
 }
 __name(parseInit, "parseInit");
 var InitSummary;
@@ -35129,9 +35334,9 @@ var init_InitSummary = __esm2({
       static {
         __name(this, "InitSummary");
       }
-      constructor(bare, path66, existing, gitDir) {
+      constructor(bare, path67, existing, gitDir) {
         this.bare = bare;
-        this.path = path66;
+        this.path = path67;
         this.existing = existing;
         this.gitDir = gitDir;
       }
@@ -35144,7 +35349,7 @@ function hasBareCommand(command) {
   return command.includes(bareCommand);
 }
 __name(hasBareCommand, "hasBareCommand");
-function initTask(bare = false, path66, customArgs) {
+function initTask(bare = false, path67, customArgs) {
   const commands = ["init", ...customArgs];
   if (bare && !hasBareCommand(commands)) {
     commands.splice(1, 0, bareCommand);
@@ -35153,7 +35358,7 @@ function initTask(bare = false, path66, customArgs) {
     commands,
     format: "utf-8",
     parser(text) {
-      return parseInit(commands.includes("--bare"), path66, text);
+      return parseInit(commands.includes("--bare"), path67, text);
     }
   };
 }
@@ -36014,12 +36219,12 @@ var init_FileStatusSummary = __esm2({
       static {
         __name(this, "FileStatusSummary");
       }
-      constructor(path66, index, working_dir) {
-        this.path = path66;
+      constructor(path67, index, working_dir) {
+        this.path = path67;
         this.index = index;
         this.working_dir = working_dir;
         if (index === "R" || working_dir === "R") {
-          const detail = fromPathRegex.exec(path66) || [null, path66, path66];
+          const detail = fromPathRegex.exec(path67) || [null, path67, path67];
           this.from = detail[2] || "";
           this.path = detail[1] || "";
         }
@@ -36053,14 +36258,14 @@ function splitLine(result, lineStr) {
     default:
       return;
   }
-  function data(index, workingDir, path66) {
+  function data(index, workingDir, path67) {
     const raw = `${index}${workingDir}`;
     const handler = parsers6.get(raw);
     if (handler) {
-      handler(result, path66);
+      handler(result, path67);
     }
     if (raw !== "##" && raw !== "!!") {
-      result.files.push(new FileStatusSummary(path66, index, workingDir));
+      result.files.push(new FileStatusSummary(path67, index, workingDir));
     }
   }
   __name(data, "data");
@@ -36385,9 +36590,9 @@ var init_simple_git_api = __esm2({
           next
         );
       }
-      hashObject(path66, write2) {
+      hashObject(path67, write2) {
         return this._runTask(
-          hashObjectTask(path66, write2 === true),
+          hashObjectTask(path67, write2 === true),
           trailingFunctionArgument(arguments)
         );
       }
@@ -37080,8 +37285,8 @@ __export2(sub_module_exports, {
   subModuleTask: /* @__PURE__ */ __name(() => subModuleTask, "subModuleTask"),
   updateSubModuleTask: /* @__PURE__ */ __name(() => updateSubModuleTask, "updateSubModuleTask")
 });
-function addSubModuleTask(repo, path66) {
-  return subModuleTask(["add", repo, path66]);
+function addSubModuleTask(repo, path67) {
+  return subModuleTask(["add", repo, path67]);
 }
 __name(addSubModuleTask, "addSubModuleTask");
 function initSubModuleTask(customArgs) {
@@ -37427,8 +37632,8 @@ var require_git = __commonJS2({
       }
       return this._runTask(straightThroughStringTask2(command, this._trimmed), next);
     };
-    Git2.prototype.submoduleAdd = function(repo, path66, then) {
-      return this._runTask(addSubModuleTask2(repo, path66), trailingFunctionArgument2(arguments));
+    Git2.prototype.submoduleAdd = function(repo, path67, then) {
+      return this._runTask(addSubModuleTask2(repo, path67), trailingFunctionArgument2(arguments));
     };
     Git2.prototype.submoduleUpdate = function(args, then) {
       return this._runTask(
@@ -37829,11 +38034,11 @@ function isTaskError(result) {
   return !!(result.exitCode && result.stdErr.length);
 }
 __name(isTaskError, "isTaskError");
-function getErrorMessage2(result) {
+function getErrorMessage3(result) {
   return Buffer.concat([...result.stdOut, ...result.stdErr]);
 }
-__name(getErrorMessage2, "getErrorMessage");
-function errorDetectionHandler(overwrite = false, isError = isTaskError, errorMessage = getErrorMessage2) {
+__name(getErrorMessage3, "getErrorMessage");
+function errorDetectionHandler(overwrite = false, isError = isTaskError, errorMessage = getErrorMessage3) {
   return (error2, result) => {
     if (!overwrite && error2 || !isError(result)) {
       return error2;
@@ -38578,12 +38783,12 @@ var Mime = class {
     }
     return this;
   }
-  getType(path66) {
-    if (typeof path66 !== "string")
+  getType(path67) {
+    if (typeof path67 !== "string")
       return null;
-    const last2 = path66.replace(/^.*[/\\]/s, "").toLowerCase();
+    const last2 = path67.replace(/^.*[/\\]/s, "").toLowerCase();
     const ext = last2.replace(/^.*\./s, "").toLowerCase();
-    const hasPath = last2.length < path66.length;
+    const hasPath = last2.length < path67.length;
     const hasDot = ext.length < last2.length - 1;
     if (!hasDot && hasPath)
       return null;
@@ -40319,10 +40524,10 @@ function assignProp(target, prop, value) {
   });
 }
 __name(assignProp, "assignProp");
-function getElementAtPath(obj, path66) {
-  if (!path66)
+function getElementAtPath(obj, path67) {
+  if (!path67)
     return obj;
-  return path66.reduce((acc, key) => acc?.[key], obj);
+  return path67.reduce((acc, key) => acc?.[key], obj);
 }
 __name(getElementAtPath, "getElementAtPath");
 function promiseAllObject(promisesObj) {
@@ -40662,11 +40867,11 @@ function aborted(x, startIndex = 0) {
   return false;
 }
 __name(aborted, "aborted");
-function prefixIssues(path66, issues) {
+function prefixIssues(path67, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path66);
+    iss.path.unshift(path67);
     return iss;
   });
 }
@@ -49397,11 +49602,11 @@ var IDEConnectionStatus;
   IDEConnectionStatus2["Disconnected"] = "disconnected";
   IDEConnectionStatus2["Connecting"] = "connecting";
 })(IDEConnectionStatus || (IDEConnectionStatus = {}));
-function getRealPath(path66) {
+function getRealPath(path67) {
   try {
-    return fs23.realpathSync(path66);
+    return fs23.realpathSync(path67);
   } catch (_e) {
-    return path66;
+    return path67;
   }
 }
 __name(getRealPath, "getRealPath");
@@ -50379,7 +50584,7 @@ var EditToolInvocation = class {
    * It needs to calculate the diff to show the user.
    */
   async shouldConfirmExecute(abortSignal) {
-    if (this.config.getApprovalMode() === ApprovalMode.AUTO_EDIT) {
+    if (this.config.getApprovalMode() === ApprovalMode2.AUTO_EDIT) {
       return false;
     }
     let editData;
@@ -50411,7 +50616,7 @@ var EditToolInvocation = class {
       newContent: editData.newContent,
       onConfirm: /* @__PURE__ */ __name(async (outcome) => {
         if (outcome === ToolConfirmationOutcome.ProceedAlways) {
-          this.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+          this.config.setApprovalMode(ApprovalMode2.AUTO_EDIT);
         }
         if (ideConfirmation) {
           const result = await ideConfirmation;
@@ -50687,19 +50892,19 @@ var ExitPlanModeToolInvocation = class extends BaseToolInvocation {
         switch (outcome) {
           case ToolConfirmationOutcome.ProceedAlways:
             this.wasApproved = true;
-            this.setApprovalModeSafely(ApprovalMode.AUTO_EDIT);
+            this.setApprovalModeSafely(ApprovalMode2.AUTO_EDIT);
             break;
           case ToolConfirmationOutcome.ProceedOnce:
             this.wasApproved = true;
-            this.setApprovalModeSafely(ApprovalMode.DEFAULT);
+            this.setApprovalModeSafely(ApprovalMode2.DEFAULT);
             break;
           case ToolConfirmationOutcome.Cancel:
             this.wasApproved = false;
-            this.setApprovalModeSafely(ApprovalMode.PLAN);
+            this.setApprovalModeSafely(ApprovalMode2.PLAN);
             break;
           default:
             this.wasApproved = true;
-            this.setApprovalModeSafely(ApprovalMode.DEFAULT);
+            this.setApprovalModeSafely(ApprovalMode2.DEFAULT);
             break;
         }
       }, "onConfirm")
@@ -53682,7 +53887,7 @@ var EditToolInvocation2 = class {
    * It needs to calculate the diff to show the user.
    */
   async shouldConfirmExecute(abortSignal) {
-    if (this.config.getApprovalMode() === ApprovalMode.AUTO_EDIT) {
+    if (this.config.getApprovalMode() === ApprovalMode2.AUTO_EDIT) {
       return false;
     }
     let editData;
@@ -53714,7 +53919,7 @@ var EditToolInvocation2 = class {
       newContent: editData.newContent,
       onConfirm: /* @__PURE__ */ __name(async (outcome) => {
         if (outcome === ToolConfirmationOutcome.ProceedAlways) {
-          this.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+          this.config.setApprovalMode(ApprovalMode2.AUTO_EDIT);
         }
         if (ideConfirmation) {
           const result = await ideConfirmation;
@@ -60927,8 +61132,8 @@ function mergeDuplicatesPreferLast(items, getKey) {
 }
 __name(mergeDuplicatesPreferLast, "mergeDuplicatesPreferLast");
 var overwriteMerge$1 = /* @__PURE__ */ __name((acc, src, options2) => [...src], "overwriteMerge$1");
-function get(obj, path66) {
-  for (const key of path66) {
+function get(obj, path67) {
+  for (const key of path67) {
     if (!obj) {
       return void 0;
     }
@@ -62151,8 +62356,8 @@ function withBrackets(str, brackets) {
   return lbr + str + rbr;
 }
 __name(withBrackets, "withBrackets");
-function pathRewrite(path66, rewriter, baseUrl, metadata, elem) {
-  const modifiedPath = typeof rewriter === "function" ? rewriter(path66, metadata, elem) : path66;
+function pathRewrite(path67, rewriter, baseUrl, metadata, elem) {
+  const modifiedPath = typeof rewriter === "function" ? rewriter(path67, metadata, elem) : path67;
   return modifiedPath[0] === "/" && baseUrl ? trimCharacterEnd(baseUrl, "/") + modifiedPath : modifiedPath;
 }
 __name(pathRewrite, "pathRewrite");
@@ -62500,9 +62705,9 @@ function handleDeprecatedOptions(options2) {
     options2.selectors.push(...tagDefinitions);
     options2.selectors = mergeDuplicatesPreferLast(options2.selectors, (s2) => s2.selector);
   }
-  function set(obj, path66, value) {
-    const valueKey = path66.pop();
-    for (const key of path66) {
+  function set(obj, path67, value) {
+    const valueKey = path67.pop();
+    for (const key of path67) {
       let nested = obj[key];
       if (!nested) {
         nested = {};
@@ -62655,7 +62860,7 @@ ${textContent2}
     return `Fetching content from ${this.params.url} and processing with prompt: "${displayPrompt}"`;
   }
   async shouldConfirmExecute() {
-    if (this.config.getApprovalMode() === ApprovalMode.AUTO_EDIT) {
+    if (this.config.getApprovalMode() === ApprovalMode2.AUTO_EDIT) {
       return false;
     }
     const confirmationDetails = {
@@ -62665,7 +62870,7 @@ ${textContent2}
       urls: [this.params.url],
       onConfirm: /* @__PURE__ */ __name(async (outcome) => {
         if (outcome === ToolConfirmationOutcome.ProceedAlways) {
-          this.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+          this.config.setApprovalMode(ApprovalMode2.AUTO_EDIT);
         }
       }, "onConfirm")
     };
@@ -63003,7 +63208,7 @@ var WebSearchToolInvocation = class extends BaseToolInvocation {
     return ` (Searching the web via ${provider})`;
   }
   async shouldConfirmExecute(_abortSignal) {
-    if (this.config.getApprovalMode() === ApprovalMode.AUTO_EDIT) {
+    if (this.config.getApprovalMode() === ApprovalMode2.AUTO_EDIT) {
       return false;
     }
     const confirmationDetails = {
@@ -63012,7 +63217,7 @@ var WebSearchToolInvocation = class extends BaseToolInvocation {
       prompt: `Search the web for: "${this.params.query}"`,
       onConfirm: /* @__PURE__ */ __name(async (outcome) => {
         if (outcome === ToolConfirmationOutcome.ProceedAlways) {
-          this.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+          this.config.setApprovalMode(ApprovalMode2.AUTO_EDIT);
         }
       }, "onConfirm")
     };
@@ -63241,7 +63446,7 @@ var WriteFileToolInvocation = class extends BaseToolInvocation {
     return `Writing to ${shortenPath(relativePath)}`;
   }
   async shouldConfirmExecute(_abortSignal) {
-    if (this.config.getApprovalMode() === ApprovalMode.AUTO_EDIT) {
+    if (this.config.getApprovalMode() === ApprovalMode2.AUTO_EDIT) {
       return false;
     }
     const correctedContentResult = await getCorrectedFileContent(this.config, this.params.file_path, this.params.content);
@@ -63273,7 +63478,7 @@ var WriteFileToolInvocation = class extends BaseToolInvocation {
       newContent: correctedContent,
       onConfirm: /* @__PURE__ */ __name(async (outcome) => {
         if (outcome === ToolConfirmationOutcome.ProceedAlways) {
-          this.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+          this.config.setApprovalMode(ApprovalMode2.AUTO_EDIT);
         }
         if (ideConfirmation) {
           const result = await ideConfirmation;
@@ -64585,6 +64790,16 @@ var ModelAvailabilityService = class {
       consumed
     });
   }
+  markTransient(model) {
+    const currentState = this.health.get(model);
+    if (currentState?.status === "terminal") {
+      return;
+    }
+    this.setState(model, {
+      status: "transient",
+      reason: "transient_failure"
+    });
+  }
   consumeStickyAttempt(model) {
     const state = this.health.get(model);
     if (state?.status === "sticky_retry") {
@@ -64599,6 +64814,9 @@ var ModelAvailabilityService = class {
     if (state.status === "terminal") {
       return { available: false, reason: state.reason };
     }
+    if (state.status === "transient") {
+      return { available: false, reason: state.reason };
+    }
     if (state.status === "sticky_retry" && state.consumed) {
       return { available: false, reason: state.reason };
     }
@@ -64620,6 +64838,9 @@ var ModelAvailabilityService = class {
   }
   resetTurn() {
     for (const [model, state] of this.health.entries()) {
+      if (state.status === "transient") {
+        this.clearState(model);
+      }
       if (state.status === "sticky_retry") {
         this.setState(model, { ...state, consumed: false });
       }
@@ -67481,7 +67702,7 @@ function findImports(content) {
       j++;
     }
     const importPath = content.slice(i + 1, j);
-    if (importPath.length > 0 && (importPath[0] === "." || importPath[0] === "/" || isLetter(importPath[0]))) {
+    if (isLikelyImportPath(importPath)) {
       imports.push({
         start: i,
         _end: j,
@@ -67503,6 +67724,19 @@ function isLetter(char) {
   code >= 97 && code <= 122;
 }
 __name(isLetter, "isLetter");
+function isLikelyImportPath(importPath) {
+  if (importPath.length === 0) {
+    return false;
+  }
+  if (importPath[0] === "." || importPath[0] === "/") {
+    return true;
+  }
+  if (!isLetter(importPath[0])) {
+    return false;
+  }
+  return importPath.includes(".");
+}
+__name(isLikelyImportPath, "isLikelyImportPath");
 function findCodeRegions(content) {
   const regions = [];
   const tokens = marked.lexer(content);
@@ -68211,42 +68445,7 @@ __name(generateAndSaveSummary, "generateAndSaveSummary");
 
 // packages/core/dist/src/policy/policy-engine.js
 init_esbuild_shims();
-
-// packages/core/dist/src/policy/types.js
-init_esbuild_shims();
-var PolicyDecision;
-(function(PolicyDecision2) {
-  PolicyDecision2["ALLOW"] = "allow";
-  PolicyDecision2["DENY"] = "deny";
-  PolicyDecision2["ASK_USER"] = "ask_user";
-})(PolicyDecision || (PolicyDecision = {}));
-var VALID_HOOK_SOURCES = [
-  "project",
-  "user",
-  "system",
-  "extension"
-];
-function getHookSource(input) {
-  const source = input["hook_source"];
-  if (typeof source === "string" && VALID_HOOK_SOURCES.includes(source)) {
-    return source;
-  }
-  return "project";
-}
-__name(getHookSource, "getHookSource");
-var ApprovalMode2;
-(function(ApprovalMode3) {
-  ApprovalMode3["DEFAULT"] = "default";
-  ApprovalMode3["AUTO_EDIT"] = "autoEdit";
-  ApprovalMode3["YOLO"] = "yolo";
-  ApprovalMode3["PLAN"] = "plan";
-})(ApprovalMode2 || (ApprovalMode2 = {}));
-var InProcessCheckerType;
-(function(InProcessCheckerType2) {
-  InProcessCheckerType2["ALLOWED_PATH"] = "allowed-path";
-})(InProcessCheckerType || (InProcessCheckerType = {}));
-
-// packages/core/dist/src/policy/policy-engine.js
+import path50 from "node:path";
 var PolicyEngine = class {
   static {
     __name(this, "PolicyEngine");
@@ -68255,21 +68454,29 @@ var PolicyEngine = class {
   defaultDecision;
   nonInteractive;
   allowHooks;
+  wildcardRegexCache = /* @__PURE__ */ new Map();
   constructor(config2 = {}) {
-    this.rules = (config2.rules ?? []).sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    this.rules = [...config2.rules ?? []].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
     this.defaultDecision = config2.defaultDecision ?? PolicyDecision.ASK_USER;
     this.nonInteractive = config2.nonInteractive ?? false;
     this.allowHooks = config2.allowHooks ?? true;
   }
-  check(toolCall, serverName) {
-    return this.getDecisionDetails(toolCall, serverName).decision;
+  check(toolCall, serverName, context) {
+    return this.getDecisionDetails(toolCall, serverName, context).decision;
   }
-  getDecisionReason(toolCall, serverName) {
-    return this.getDecisionDetails(toolCall, serverName).reason;
+  getDecisionReason(toolCall, serverName, context) {
+    return this.getDecisionDetails(toolCall, serverName, context).reason;
   }
-  getDecisionDetails(toolCall, serverName) {
+  getDecisionDetails(toolCall, serverName, context) {
+    const commandValue = this.extractCommandValue(toolCall.args);
+    const externalDirectoryAccess = this.checkExternalDirectoryAccess(toolCall.args, context);
     const stringifiedArgs = toolCall.args && this.rules.some((rule) => rule.argsPattern) ? stableStringify(toolCall.args) : void 0;
-    const matchedRule = this.rules.find((rule) => this.ruleMatches(rule, toolCall.name, stringifiedArgs, serverName));
+    let matchedRule;
+    for (const rule of this.rules) {
+      if (this.ruleMatches(rule, toolCall.name, stringifiedArgs, serverName, commandValue, externalDirectoryAccess, context?.agentName)) {
+        matchedRule = rule;
+      }
+    }
     if (matchedRule) {
       const decision = this.applyNonInteractiveMode(matchedRule.decision);
       const deniedByNonInteractive2 = matchedRule.decision === PolicyDecision.ASK_USER && decision === PolicyDecision.DENY && this.nonInteractive;
@@ -68295,22 +68502,35 @@ var PolicyEngine = class {
   }
   addRule(rule) {
     this.rules.push(rule);
-    this.rules.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    this.rules.sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
   }
   getRules() {
     return this.rules;
   }
-  ruleMatches(rule, toolName, stringifiedArgs, serverName) {
-    if (rule.toolName) {
-      if (rule.toolName.endsWith("__*")) {
-        const prefix = rule.toolName.slice(0, -3);
-        if (serverName && serverName !== prefix) {
-          return false;
-        }
-        if (!toolName?.startsWith(`${prefix}__`)) {
-          return false;
-        }
-      } else if (rule.toolName !== toolName) {
+  ruleMatches(rule, toolName, stringifiedArgs, serverName, commandValue, externalDirectoryAccess, contextAgentName) {
+    if (rule.agentName) {
+      if (!contextAgentName) {
+        return false;
+      }
+      if (rule.agentName.trim().toLowerCase() !== contextAgentName.trim().toLowerCase()) {
+        return false;
+      }
+    }
+    if (rule.toolName && !this.matchesToolPattern(rule.toolName, toolName, serverName)) {
+      return false;
+    }
+    if (rule.commandPrefix) {
+      if (!commandValue) {
+        return false;
+      }
+      const prefixes = Array.isArray(rule.commandPrefix) ? rule.commandPrefix : [rule.commandPrefix];
+      const matchedPrefix = prefixes.some((prefix) => this.matchesCommandPrefix(commandValue, prefix));
+      if (!matchedPrefix) {
+        return false;
+      }
+    }
+    if (rule.permissionClass === "external_directory") {
+      if (!externalDirectoryAccess) {
         return false;
       }
     }
@@ -68319,6 +68539,86 @@ var PolicyEngine = class {
     }
     return !rule.argsPattern;
   }
+  matchesToolPattern(pattern, toolName, serverName) {
+    if (!toolName) {
+      return false;
+    }
+    if (!pattern.includes("*")) {
+      return pattern === toolName;
+    }
+    if (pattern.endsWith("__*") && serverName) {
+      const serverPrefix = pattern.slice(0, -3);
+      if (serverName !== serverPrefix) {
+        return false;
+      }
+    }
+    return this.getWildcardRegex(pattern).test(toolName);
+  }
+  extractCommandValue(args) {
+    if (!args || typeof args !== "object") {
+      return void 0;
+    }
+    const command = args["command"];
+    return typeof command === "string" ? command : void 0;
+  }
+  matchesCommandPrefix(command, prefix) {
+    if (!prefix) {
+      return false;
+    }
+    if (prefix.includes("*")) {
+      const escaped = prefix.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+      return new RegExp(`^${escaped}(?:\\s|$)`).test(command);
+    }
+    return command === prefix || command.startsWith(`${prefix} `);
+  }
+  checkExternalDirectoryAccess(args, context) {
+    const candidatePaths = this.collectPathCandidates(args);
+    if (candidatePaths.length === 0) {
+      return false;
+    }
+    const cwd3 = context?.cwd ?? process.cwd();
+    const workspaceRoots = [cwd3, ...context?.workspaces ?? []].filter((value) => typeof value === "string" && value.length > 0).map((value) => path50.resolve(value));
+    return candidatePaths.some((candidatePath) => {
+      const resolvedPath = path50.resolve(cwd3, candidatePath);
+      return !workspaceRoots.some((workspaceRoot) => this.isPathInsideWorkspace(resolvedPath, workspaceRoot));
+    });
+  }
+  collectPathCandidates(args, prefix = "") {
+    if (!args || typeof args !== "object") {
+      return [];
+    }
+    const pathCandidates = [];
+    const entries = Object.entries(args);
+    for (const [key, value] of entries) {
+      const fullKey = prefix ? `${prefix}.${key}` : key;
+      const lowerKey = key.toLowerCase();
+      const looksLikePathKey = lowerKey.includes("path") || lowerKey.includes("file") || lowerKey.includes("directory") || lowerKey === "source" || lowerKey === "destination";
+      if (typeof value === "string") {
+        if (looksLikePathKey) {
+          pathCandidates.push(value);
+        }
+        continue;
+      }
+      if (typeof value === "object" && value !== null) {
+        pathCandidates.push(...this.collectPathCandidates(value, fullKey));
+      }
+    }
+    return pathCandidates;
+  }
+  isPathInsideWorkspace(resolvedPath, workspaceRoot) {
+    const relative8 = path50.relative(workspaceRoot, resolvedPath);
+    return relative8 === "" || !relative8.startsWith("..") && !path50.isAbsolute(relative8);
+  }
+  getWildcardRegex(pattern) {
+    const cached2 = this.wildcardRegexCache.get(pattern);
+    if (cached2) {
+      return cached2;
+    }
+    const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+    const compiled = new RegExp(`^${escaped}$`);
+    this.wildcardRegexCache.set(pattern, compiled);
+    return compiled;
+  }
   applyNonInteractiveMode(decision) {
     if (this.nonInteractive && decision === PolicyDecision.ASK_USER) {
       return PolicyDecision.DENY;
@@ -68339,6 +68639,16 @@ var PolicyEngine = class {
     if (typeof rule.priority === "number") {
       parts.push(`priority=${rule.priority}`);
     }
+    if (rule.commandPrefix) {
+      const prefixes = Array.isArray(rule.commandPrefix) ? rule.commandPrefix.join("|") : rule.commandPrefix;
+      parts.push(`commandPrefix=${prefixes}`);
+    }
+    if (rule.permissionClass) {
+      parts.push(`permissionClass=${rule.permissionClass}`);
+    }
+    if (rule.agentName) {
+      parts.push(`agentName=${rule.agentName}`);
+    }
     return parts.length > 0 ? `Denied by matching policy rule (${parts.join(", ")})` : "Denied by matching policy rule";
   }
 };
@@ -68516,12 +68826,12 @@ var CheckerRunner = class _CheckerRunner {
 
 // packages/core/dist/src/safety/registry.js
 init_esbuild_shims();
-import * as path51 from "node:path";
+import * as path52 from "node:path";
 import * as fs43 from "node:fs";
 
 // packages/core/dist/src/safety/built-in.js
 init_esbuild_shims();
-import * as path50 from "node:path";
+import * as path51 from "node:path";
 import * as fs42 from "node:fs";
 var AllowedPathChecker = class {
   static {
@@ -68562,15 +68872,15 @@ var AllowedPathChecker = class {
   }
   safelyResolvePath(inputPath, cwd3) {
     try {
-      const resolved = path50.resolve(cwd3, inputPath);
+      const resolved = path51.resolve(cwd3, inputPath);
       let current = resolved;
-      while (current && current !== path50.dirname(current)) {
+      while (current && current !== path51.dirname(current)) {
         if (fs42.existsSync(current)) {
           const canonical = fs42.realpathSync(current);
-          const relative8 = path50.relative(current, resolved);
-          return path50.join(canonical, relative8);
+          const relative8 = path51.relative(current, resolved);
+          return path51.join(canonical, relative8);
         }
-        current = path50.dirname(current);
+        current = path51.dirname(current);
       }
       return resolved;
     } catch {
@@ -68578,8 +68888,8 @@ var AllowedPathChecker = class {
     }
   }
   isPathAllowed(targetPath, allowedDir) {
-    const relative8 = path50.relative(allowedDir, targetPath);
-    return relative8 === "" || !relative8.startsWith("..") && !path50.isAbsolute(relative8);
+    const relative8 = path51.relative(allowedDir, targetPath);
+    return relative8 === "" || !relative8.startsWith("..") && !path51.isAbsolute(relative8);
   }
   collectPathsToCheck(args, includedArgs, excludedArgs, prefix = "") {
     const paths = [];
@@ -68621,7 +68931,7 @@ var CheckerRegistry = class _CheckerRegistry {
     }
     const builtInPath = _CheckerRegistry.BUILT_IN_EXTERNAL_CHECKERS.get(name2);
     if (builtInPath) {
-      const fullPath = path51.join(this.checkersPath, builtInPath);
+      const fullPath = path52.join(this.checkersPath, builtInPath);
       if (!fs43.existsSync(fullPath)) {
         throw new Error(`Built-in checker "${name2}" not found at ${fullPath}`);
       }
@@ -68690,13 +69000,13 @@ var ContextBuilder = class {
 
 // packages/core/dist/src/skills/skillManager.js
 init_esbuild_shims();
-import * as path53 from "node:path";
+import * as path54 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // packages/core/dist/src/skills/skillLoader.js
 init_esbuild_shims();
 import * as fs44 from "node:fs/promises";
-import * as path52 from "node:path";
+import * as path53 from "node:path";
 var FRONTMATTER_REGEX = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n([\s\S]*))?/;
 function parseFrontmatter(content) {
   return parseSimpleFrontmatter(content);
@@ -68738,7 +69048,7 @@ __name(parseSimpleFrontmatter, "parseSimpleFrontmatter");
 async function loadSkillsFromDir(dir) {
   const discoveredSkills = [];
   try {
-    const absoluteSearchPath = path52.resolve(dir);
+    const absoluteSearchPath = path53.resolve(dir);
     const stats = await fs44.stat(absoluteSearchPath).catch(() => null);
     if (!stats || !stats.isDirectory()) {
       return [];
@@ -68816,8 +69126,8 @@ var SkillManager = class {
     this.addSkillsWithPrecedence(projectSkills);
   }
   async discoverBuiltinSkills() {
-    const __dirname3 = path53.dirname(fileURLToPath2(import.meta.url));
-    const builtinDir = path53.join(__dirname3, "builtin");
+    const __dirname3 = path54.dirname(fileURLToPath2(import.meta.url));
+    const builtinDir = path54.join(__dirname3, "builtin");
     const builtinSkills = await loadSkillsFromDir(builtinDir);
     for (const skill of builtinSkills) {
       skill.isBuiltin = true;
@@ -69436,36 +69746,56 @@ var ModelRouterService = class {
 };
 
 // packages/core/dist/src/config/config.js
-var ApprovalMode;
+var ApprovalMode2;
 (function(ApprovalMode3) {
   ApprovalMode3["PLAN"] = "plan";
   ApprovalMode3["DEFAULT"] = "default";
   ApprovalMode3["AUTO_EDIT"] = "auto-edit";
   ApprovalMode3["YOLO"] = "yolo";
-})(ApprovalMode || (ApprovalMode = {}));
-var APPROVAL_MODES = Object.values(ApprovalMode);
+})(ApprovalMode2 || (ApprovalMode2 = {}));
+var APPROVAL_MODES = Object.values(ApprovalMode2);
 var APPROVAL_MODE_INFO = {
-  [ApprovalMode.PLAN]: {
-    id: ApprovalMode.PLAN,
+  [ApprovalMode2.PLAN]: {
+    id: ApprovalMode2.PLAN,
     name: "Plan",
     description: "Analyze only, do not modify files or execute commands"
   },
-  [ApprovalMode.DEFAULT]: {
-    id: ApprovalMode.DEFAULT,
+  [ApprovalMode2.DEFAULT]: {
+    id: ApprovalMode2.DEFAULT,
     name: "Default",
     description: "Require approval for file edits or shell commands"
   },
-  [ApprovalMode.AUTO_EDIT]: {
-    id: ApprovalMode.AUTO_EDIT,
+  [ApprovalMode2.AUTO_EDIT]: {
+    id: ApprovalMode2.AUTO_EDIT,
     name: "Auto Edit",
     description: "Automatically approve file edits"
   },
-  [ApprovalMode.YOLO]: {
-    id: ApprovalMode.YOLO,
+  [ApprovalMode2.YOLO]: {
+    id: ApprovalMode2.YOLO,
     name: "YOLO",
     description: "Automatically approve all tools"
   }
 };
+var MODE_PROFILE_INFO = {
+  build: {
+    id: "build",
+    name: "Build",
+    description: "Implementation mode that enables coding and shell workflows with minimal friction.",
+    approvalMode: ApprovalMode2.AUTO_EDIT
+  },
+  plan: {
+    id: "plan",
+    name: "Plan",
+    description: "Planning mode that keeps the session focused on analysis before changes.",
+    approvalMode: ApprovalMode2.PLAN
+  },
+  review: {
+    id: "review",
+    name: "Review",
+    description: "Review mode that keeps tool usage read-oriented for audits and code review.",
+    approvalMode: ApprovalMode2.DEFAULT
+  }
+};
 var DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD = 25e3;
 var DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES = 1e3;
 var MCPServerConfig = class {
@@ -69534,6 +69864,21 @@ function normalizeConfigOutputFormat(format) {
   }
 }
 __name(normalizeConfigOutputFormat, "normalizeConfigOutputFormat");
+function normalizeStructuredOutputSettings(settings) {
+  if (!settings) {
+    return void 0;
+  }
+  if (typeof settings.schema !== "object" || settings.schema === null || Array.isArray(settings.schema)) {
+    return void 0;
+  }
+  const retriesRaw = settings.retries ?? 2;
+  const retries = Number.isFinite(retriesRaw) && retriesRaw >= 0 ? Math.floor(retriesRaw) : 2;
+  return {
+    schema: structuredClone(settings.schema),
+    retries
+  };
+}
+__name(normalizeStructuredOutputSettings, "normalizeStructuredOutputSettings");
 var Config = class {
   static {
     __name(this, "Config");
@@ -69558,6 +69903,7 @@ var Config = class {
   debugMode;
   inputFormat;
   outputFormat;
+  structuredOutput;
   includePartialMessages;
   question;
   fullContext;
@@ -69574,6 +69920,7 @@ var Config = class {
   geminiMdFileCount;
   contextFileName;
   approvalMode;
+  modeProfile;
   showMemoryUsage;
   accessibility;
   telemetrySettings;
@@ -69662,12 +70009,13 @@ var Config = class {
     this.modelConfigService = new ModelConfigService(params.modelConfigServiceConfig ?? DEFAULT_MODEL_CONFIGS);
     this.modelAvailabilityService = new ModelAvailabilityService();
     this.sandbox = params.sandbox;
-    this.targetDir = path54.resolve(params.targetDir);
+    this.targetDir = path55.resolve(params.targetDir);
     this.workspaceContext = new WorkspaceContext(this.targetDir, params.includeDirectories ?? []);
     this.debugMode = params.debugMode;
     this.inputFormat = params.inputFormat ?? InputFormat.TEXT;
     const normalizedOutputFormat = normalizeConfigOutputFormat(params.outputFormat ?? params.output?.format);
     this.outputFormat = normalizedOutputFormat ?? OutputFormat.TEXT;
+    this.structuredOutput = normalizeStructuredOutputSettings(params.structuredOutput ?? params.output?.structured);
     this.includePartialMessages = params.includePartialMessages ?? false;
     this.question = params.question;
     this.fullContext = params.fullContext ?? false;
@@ -69683,7 +70031,8 @@ var Config = class {
     this.userMemory = params.userMemory ?? "";
     this.geminiMdFileCount = params.geminiMdFileCount ?? 0;
     this.contextFileName = params.contextFileName;
-    this.approvalMode = params.approvalMode ?? ApprovalMode.DEFAULT;
+    this.approvalMode = params.approvalMode ?? ApprovalMode2.DEFAULT;
+    this.modeProfile = params.modeProfile;
     this.showMemoryUsage = params.showMemoryUsage ?? false;
     this.accessibility = params.accessibility ?? {};
     this.telemetrySettings = {
@@ -69740,6 +70089,9 @@ var Config = class {
     this.trustedFolder = params.trustedFolder;
     this.skipLoopDetection = params.skipLoopDetection ?? false;
     this.skipStartupContext = params.skipStartupContext ?? false;
+    if (this.modeProfile) {
+      this.setApprovalMode(MODE_PROFILE_INFO[this.modeProfile].approvalMode);
+    }
     this.webSearch = params.webSearch;
     this.useRipgrep = params.useRipgrep ?? true;
     this.useBuiltinRipgrep = params.useBuiltinRipgrep ?? true;
@@ -70130,10 +70482,23 @@ var Config = class {
     return this.approvalMode;
   }
   setApprovalMode(mode) {
-    if (!this.isTrustedFolder() && mode !== ApprovalMode.DEFAULT && mode !== ApprovalMode.PLAN) {
+    if (!this.isTrustedFolder() && mode !== ApprovalMode2.DEFAULT && mode !== ApprovalMode2.PLAN) {
       throw new Error("Cannot enable privileged approval modes in an untrusted folder.");
     }
     this.approvalMode = mode;
+    if (this.modeProfile && MODE_PROFILE_INFO[this.modeProfile].approvalMode !== mode) {
+      this.modeProfile = void 0;
+    }
+  }
+  getModeProfile() {
+    return this.modeProfile;
+  }
+  setModeProfile(modeProfile) {
+    this.modeProfile = modeProfile;
+    if (!modeProfile) {
+      return;
+    }
+    this.setApprovalMode(MODE_PROFILE_INFO[modeProfile].approvalMode);
   }
   getShowMemoryUsage() {
     return this.showMemoryUsage;
@@ -70482,6 +70847,15 @@ var Config = class {
   getOutputFormat() {
     return this.outputFormat;
   }
+  getStructuredOutput() {
+    if (!this.structuredOutput) {
+      return void 0;
+    }
+    return {
+      schema: structuredClone(this.structuredOutput.schema),
+      retries: this.structuredOutput.retries
+    };
+  }
   async getGitService() {
     if (!this.gitService) {
       this.gitService = new GitService(this.targetDir, this.storage);
@@ -70624,7 +70998,7 @@ init_esbuild_shims();
 
 // packages/core/dist/src/core/logger.js
 init_esbuild_shims();
-import path55 from "node:path";
+import path56 from "node:path";
 import { promises as fs45 } from "node:fs";
 var LOG_FILE_NAME = "logs.json";
 var MessageSenderType;
@@ -70703,7 +71077,7 @@ var Logger = class {
       return;
     }
     this.papertDir = this.storage.getProjectTempDir();
-    this.logFilePath = path55.join(this.papertDir, LOG_FILE_NAME);
+    this.logFilePath = path56.join(this.papertDir, LOG_FILE_NAME);
     try {
       await fs45.mkdir(this.papertDir, { recursive: true });
       let fileExisted = true;
@@ -70794,7 +71168,7 @@ var Logger = class {
       throw new Error("Checkpoint file path not set.");
     }
     const encodedTag = encodeTagName(tag2);
-    return path55.join(this.papertDir, `checkpoint-${encodedTag}.json`);
+    return path56.join(this.papertDir, `checkpoint-${encodedTag}.json`);
   }
   async _getCheckpointPath(tag2) {
     const newPath = this._checkpointPath(tag2);
@@ -70807,7 +71181,7 @@ var Logger = class {
         throw error2;
       }
     }
-    const oldPath = path55.join(this.papertDir, `checkpoint-${tag2}.json`);
+    const oldPath = path56.join(this.papertDir, `checkpoint-${tag2}.json`);
     try {
       await fs45.access(oldPath);
       return oldPath;
@@ -70824,10 +71198,10 @@ var Logger = class {
       debugLogger.error("Logger not initialized or checkpoint file path not set. Cannot save a checkpoint.");
       return;
     }
-    const path66 = this._checkpointPath(tag2);
+    const path67 = this._checkpointPath(tag2);
     try {
       const checkpoint = Array.isArray(conversation) ? { history: conversation } : conversation;
-      await fs45.writeFile(path66, JSON.stringify(checkpoint, null, 2), "utf-8");
+      await fs45.writeFile(path67, JSON.stringify(checkpoint, null, 2), "utf-8");
     } catch (error2) {
       debugLogger.error("Error writing to checkpoint file:", error2);
     }
@@ -70837,9 +71211,9 @@ var Logger = class {
       debugLogger.error("Logger not initialized or checkpoint file path not set. Cannot load checkpoint.");
       return { history: [] };
     }
-    const path66 = await this._getCheckpointPath(tag2);
+    const path67 = await this._getCheckpointPath(tag2);
     try {
-      const fileContent = await fs45.readFile(path66, "utf-8");
+      const fileContent = await fs45.readFile(path67, "utf-8");
       const parsedContent = JSON.parse(fileContent);
       if (Array.isArray(parsedContent)) {
         return { history: parsedContent };
@@ -70847,14 +71221,14 @@ var Logger = class {
       if (typeof parsedContent === "object" && parsedContent !== null && "history" in parsedContent) {
         return parsedContent;
       }
-      debugLogger.warn(`Checkpoint file at ${path66} has an unknown format. Returning empty checkpoint.`);
+      debugLogger.warn(`Checkpoint file at ${path67} has an unknown format. Returning empty checkpoint.`);
       return { history: [] };
     } catch (error2) {
       const nodeError = error2;
       if (nodeError.code === "ENOENT") {
         return { history: [] };
       }
-      debugLogger.error(`Failed to read or parse checkpoint file ${path66}:`, error2);
+      debugLogger.error(`Failed to read or parse checkpoint file ${path67}:`, error2);
       return { history: [] };
     }
   }
@@ -70875,7 +71249,7 @@ var Logger = class {
         throw error2;
       }
     }
-    const oldPath = path55.join(this.papertDir, `checkpoint-${tag2}.json`);
+    const oldPath = path56.join(this.papertDir, `checkpoint-${tag2}.json`);
     if (newPath !== oldPath) {
       try {
         await fs45.unlink(oldPath);
@@ -71077,25 +71451,25 @@ __name(getAdminErrorMessage, "getAdminErrorMessage");
 // packages/core/dist/src/utils/filesearch/fileSearch.js
 init_esbuild_shims();
 var import_picomatch2 = __toESM(require_picomatch2(), 1);
-import path58 from "node:path";
+import path59 from "node:path";
 
 // packages/core/dist/src/utils/filesearch/ignore.js
 init_esbuild_shims();
 var import_ignore4 = __toESM(require_ignore(), 1);
 var import_picomatch = __toESM(require_picomatch2(), 1);
 import fs46 from "node:fs";
-import path56 from "node:path";
+import path57 from "node:path";
 var hasFileExtension = (0, import_picomatch.default)("**/*[*.]*");
 function loadIgnoreRules(options2) {
   const ignorer = new Ignore();
   if (options2.useGitignore) {
-    const gitignorePath = path56.join(options2.projectRoot, ".gitignore");
+    const gitignorePath = path57.join(options2.projectRoot, ".gitignore");
     if (fs46.existsSync(gitignorePath)) {
       ignorer.add(fs46.readFileSync(gitignorePath, "utf8"));
     }
   }
   if (options2.usePapertignore) {
-    const papertignorePath = path56.join(options2.projectRoot, ".papertignore");
+    const papertignorePath = path57.join(options2.projectRoot, ".papertignore");
     if (fs46.existsSync(papertignorePath)) {
       ignorer.add(fs46.readFileSync(papertignorePath, "utf8"));
     }
@@ -71225,7 +71599,7 @@ var ResultCache = class {
 // packages/core/dist/src/utils/filesearch/crawler.js
 init_esbuild_shims();
 var import_fdir = __toESM(require_dist4(), 1);
-import path57 from "node:path";
+import path58 from "node:path";
 
 // packages/core/dist/src/utils/filesearch/crawlCache.js
 init_esbuild_shims();
@@ -71283,7 +71657,7 @@ var write = /* @__PURE__ */ __name((key, results, ttlMs) => {
 
 // packages/core/dist/src/utils/filesearch/crawler.js
 function toPosixPath(p) {
-  return p.split(path57.sep).join(path57.posix.sep);
+  return p.split(path58.sep).join(path58.posix.sep);
 }
 __name(toPosixPath, "toPosixPath");
 async function crawl(options2) {
@@ -71300,7 +71674,7 @@ async function crawl(options2) {
   try {
     const dirFilter = options2.ignore.getDirectoryFilter();
     const api = new import_fdir.fdir().withRelativePaths().withDirs().withPathSeparator("/").exclude((_, dirPath) => {
-      const relativePath = path57.posix.relative(posixCrawlDirectory, dirPath);
+      const relativePath = path58.posix.relative(posixCrawlDirectory, dirPath);
       return dirFilter(`${relativePath}/`);
     });
     if (options2.maxDepth !== void 0) {
@@ -71310,8 +71684,8 @@ async function crawl(options2) {
   } catch (_e) {
     return [];
   }
-  const relativeToCrawlDir = path57.posix.relative(posixCwd, posixCrawlDirectory);
-  const relativeToCwdResults = results.map((p) => path57.posix.join(relativeToCrawlDir, p));
+  const relativeToCrawlDir = path58.posix.relative(posixCwd, posixCrawlDirectory);
+  const relativeToCwdResults = results.map((p) => path58.posix.join(relativeToCrawlDir, p));
   if (options2.cache) {
     const cacheKey = getCacheKey(options2.crawlDirectory, options2.ignore.getFingerprint(), options2.maxDepth);
     write(cacheKey, relativeToCwdResults, options2.cacheTtl * 1e3);
@@ -72450,9 +72824,9 @@ var DirectoryFileSearch = class {
       throw new Error("Engine not initialized. Call initialize() first.");
     }
     pattern = pattern || "*";
-    const dir = pattern.endsWith("/") ? pattern : path58.dirname(pattern);
+    const dir = pattern.endsWith("/") ? pattern : path59.dirname(pattern);
     const results = await crawl({
-      crawlDirectory: path58.join(this.options.projectRoot, dir),
+      crawlDirectory: path59.join(this.options.projectRoot, dir),
       cwd: this.options.projectRoot,
       maxDepth: 0,
       ignore: this.ignore,
@@ -72675,9 +73049,9 @@ __name(subagentGenerator, "subagentGenerator");
 // packages/core/dist/src/utils/projectSummary.js
 init_esbuild_shims();
 import * as fs47 from "fs/promises";
-import * as path59 from "path";
+import * as path60 from "path";
 async function getProjectSummaryInfo() {
-  const summaryPath = path59.join(process.cwd(), ".papert", "PROJECT_SUMMARY.md");
+  const summaryPath = path60.join(process.cwd(), ".papert", "PROJECT_SUMMARY.md");
   try {
     await fs47.access(summaryPath);
   } catch {
@@ -72743,7 +73117,7 @@ init_esbuild_shims();
 
 // packages/core/dist/src/policy/config.js
 init_esbuild_shims();
-import * as path61 from "node:path";
+import * as path62 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // packages/core/dist/src/policy/index.js
@@ -72756,7 +73130,7 @@ var ADMIN_POLICY_TIER = 3;
 init_esbuild_shims();
 var import_toml = __toESM(require_toml(), 1);
 import fs48 from "node:fs";
-import path60 from "node:path";
+import path61 from "node:path";
 function toTierName(tier) {
   if (tier === 3)
     return "admin";
@@ -72779,7 +73153,7 @@ function loadPoliciesFromToml(approvalMode, policyDirs, getPolicyTier2) {
     const tier = getPolicyTier2(dir);
     const tierName = toTierName(tier);
     for (const fileName of files) {
-      const filePath = path60.join(dir, fileName);
+      const filePath = path61.join(dir, fileName);
       let parsed;
       try {
         parsed = import_toml.default.parse(fs48.readFileSync(filePath, "utf-8"));
@@ -72872,10 +73246,76 @@ __name(loadPoliciesFromToml, "loadPoliciesFromToml");
 
 // packages/core/dist/src/policy/config.js
 var __filename2 = fileURLToPath3(import.meta.url);
-var __dirname2 = path61.dirname(__filename2);
-var DEFAULT_CORE_POLICIES_DIR = path61.join(__dirname2, "policies");
-var USER_POLICIES_DIR = path61.join(Storage.getGlobalPapertDir(), "policies");
-var SYSTEM_POLICIES_DIR = path61.join(Storage.getGlobalPapertDir(), "system-policies");
+var __dirname2 = path62.dirname(__filename2);
+var DEFAULT_CORE_POLICIES_DIR = path62.join(__dirname2, "policies");
+var USER_POLICIES_DIR = path62.join(Storage.getGlobalPapertDir(), "policies");
+var SYSTEM_POLICIES_DIR = path62.join(Storage.getGlobalPapertDir(), "system-policies");
+function toPolicyDecision(decision) {
+  if (decision === "allow") {
+    return PolicyDecision.ALLOW;
+  }
+  if (decision === "deny") {
+    return PolicyDecision.DENY;
+  }
+  return PolicyDecision.ASK_USER;
+}
+__name(toPolicyDecision, "toPolicyDecision");
+function parsePermissionDslString(entry) {
+  const match = entry.trim().match(/^(allow|ask|deny)\s+([^\s(]+)(?:\((.+)\))?$/i);
+  if (!match) {
+    return null;
+  }
+  const [, decisionKeyword, toolPattern, commandPrefix] = match;
+  const normalizedToolPattern = toolPattern.trim();
+  if (!normalizedToolPattern) {
+    return null;
+  }
+  const normalizedCommandPrefix = commandPrefix?.trim();
+  if (normalizedToolPattern === "external_directory") {
+    return {
+      decision: toPolicyDecision(decisionKeyword.toLowerCase()),
+      toolName: "*",
+      permissionClass: "external_directory"
+    };
+  }
+  return {
+    decision: toPolicyDecision(decisionKeyword.toLowerCase()),
+    toolName: normalizedToolPattern,
+    ...normalizedCommandPrefix ? { commandPrefix: normalizedCommandPrefix } : {}
+  };
+}
+__name(parsePermissionDslString, "parsePermissionDslString");
+function parsePermissionDslEntry(entry, forcedAgentName) {
+  if (typeof entry === "string") {
+    const parsed = parsePermissionDslString(entry);
+    if (!parsed) {
+      return null;
+    }
+    return {
+      toolName: parsed.toolName,
+      decision: parsed.decision,
+      ...parsed.commandPrefix ? { commandPrefix: parsed.commandPrefix } : {},
+      ...parsed.permissionClass ? { permissionClass: parsed.permissionClass } : {},
+      ...forcedAgentName ? { agentName: forcedAgentName } : {}
+    };
+  }
+  if (!entry || typeof entry.tool !== "string") {
+    return null;
+  }
+  const toolName = entry.tool.trim();
+  if (!toolName) {
+    return null;
+  }
+  return {
+    toolName,
+    decision: toPolicyDecision(entry.decision),
+    ...entry.commandPrefix ? { commandPrefix: entry.commandPrefix } : {},
+    ...entry.permissionClass ? { permissionClass: entry.permissionClass } : {},
+    ...forcedAgentName || entry.agentName ? { agentName: forcedAgentName ?? entry.agentName } : {},
+    reason: entry.reason
+  };
+}
+__name(parsePermissionDslEntry, "parsePermissionDslEntry");
 function getPolicyDirectories(defaultPoliciesDir) {
   const dirs = [];
   if (defaultPoliciesDir) {
@@ -72889,17 +73329,17 @@ function getPolicyDirectories(defaultPoliciesDir) {
 }
 __name(getPolicyDirectories, "getPolicyDirectories");
 function getPolicyTier(dir, defaultPoliciesDir) {
-  const normalizedDir = path61.resolve(dir);
-  if (defaultPoliciesDir && normalizedDir === path61.resolve(defaultPoliciesDir)) {
+  const normalizedDir = path62.resolve(dir);
+  if (defaultPoliciesDir && normalizedDir === path62.resolve(defaultPoliciesDir)) {
     return DEFAULT_POLICY_TIER;
   }
-  if (normalizedDir === path61.resolve(DEFAULT_CORE_POLICIES_DIR)) {
+  if (normalizedDir === path62.resolve(DEFAULT_CORE_POLICIES_DIR)) {
     return DEFAULT_POLICY_TIER;
   }
-  if (normalizedDir === path61.resolve(USER_POLICIES_DIR)) {
+  if (normalizedDir === path62.resolve(USER_POLICIES_DIR)) {
     return USER_POLICY_TIER;
   }
-  if (normalizedDir === path61.resolve(SYSTEM_POLICIES_DIR)) {
+  if (normalizedDir === path62.resolve(SYSTEM_POLICIES_DIR)) {
     return ADMIN_POLICY_TIER;
   }
   return DEFAULT_POLICY_TIER;
@@ -72948,6 +73388,34 @@ function createPolicyEngineConfig(settings, approvalMode, defaultPoliciesDir) {
       }
     }
   }
+  if (settings.tools?.permissions) {
+    const parsedPermissionRules = settings.tools.permissions.map((entry) => parsePermissionDslEntry(entry)).filter((rule) => !!rule);
+    parsedPermissionRules.forEach((rule, index) => {
+      rules.push({
+        ...rule,
+        priority: 2.95 + index / 1e3
+      });
+    });
+  }
+  if (settings.tools?.agentPermissions) {
+    let agentRuleOffset = 0;
+    for (const [agentName, permissions] of Object.entries(settings.tools.agentPermissions)) {
+      const normalizedAgentName = agentName.trim();
+      if (!normalizedAgentName || !Array.isArray(permissions)) {
+        continue;
+      }
+      const parsedAgentRules = permissions.map((entry) => parsePermissionDslEntry(entry, normalizedAgentName)).filter((rule) => !!rule);
+      parsedAgentRules.forEach((rule, index) => {
+        rules.push({
+          ...rule,
+          // Agent-scoped permission rules intentionally evaluate after global
+          // rules so they can override behavior for that specific agent.
+          priority: 2.98 + (agentRuleOffset + index) / 1e3
+        });
+      });
+      agentRuleOffset += parsedAgentRules.length;
+    }
+  }
   return {
     rules,
     checkers,
@@ -73745,7 +74213,7 @@ import * as fs50 from "node:fs/promises";
 // packages/core/dist/src/scheduler/store.js
 init_esbuild_shims();
 import * as fs49 from "node:fs/promises";
-import * as path62 from "node:path";
+import * as path63 from "node:path";
 async function loadSchedulerStore(storePath) {
   try {
     const raw = await fs49.readFile(storePath, "utf8");
@@ -73763,7 +74231,7 @@ async function loadSchedulerStore(storePath) {
 }
 __name(loadSchedulerStore, "loadSchedulerStore");
 async function saveSchedulerStore(storePath, store) {
-  await fs49.mkdir(path62.dirname(storePath), { recursive: true });
+  await fs49.mkdir(path63.dirname(storePath), { recursive: true });
   await fs49.writeFile(storePath, JSON.stringify(store, null, 2));
 }
 __name(saveSchedulerStore, "saveSchedulerStore");
@@ -73933,15 +74401,15 @@ __name(emit, "emit");
 // packages/core/dist/src/scheduler/run-log.js
 init_esbuild_shims();
 import * as fs51 from "node:fs/promises";
-import * as path63 from "node:path";
+import * as path64 from "node:path";
 function resolveRunLogPath(storePath, jobId) {
-  const baseDir = path63.join(path63.dirname(storePath), "runs");
-  return path63.join(baseDir, `${jobId}.jsonl`);
+  const baseDir = path64.join(path64.dirname(storePath), "runs");
+  return path64.join(baseDir, `${jobId}.jsonl`);
 }
 __name(resolveRunLogPath, "resolveRunLogPath");
 async function appendRunLogEntry(storePath, entry) {
   const logPath = resolveRunLogPath(storePath, entry.jobId);
-  await fs51.mkdir(path63.dirname(logPath), { recursive: true });
+  await fs51.mkdir(path64.dirname(logPath), { recursive: true });
   await fs51.appendFile(logPath, `${JSON.stringify(entry)}
 `);
 }
@@ -74247,12 +74715,12 @@ var TaskScheduler = class {
 
 // packages/core/dist/src/scheduler/paths.js
 init_esbuild_shims();
-import * as path64 from "node:path";
+import * as path65 from "node:path";
 var SCHEDULER_DIRNAME = "schedule";
 var SCHEDULER_STORE_FILENAME = "jobs.json";
 function resolveSchedulerStorePath(cwd3) {
   const storage = new Storage(cwd3);
-  return path64.join(storage.getProjectDir(), SCHEDULER_DIRNAME, SCHEDULER_STORE_FILENAME);
+  return path65.join(storage.getProjectDir(), SCHEDULER_DIRNAME, SCHEDULER_STORE_FILENAME);
 }
 __name(resolveSchedulerStorePath, "resolveSchedulerStorePath");
 
@@ -74263,7 +74731,7 @@ init_esbuild_shims();
 init_esbuild_shims();
 import * as child_process from "node:child_process";
 import * as process8 from "node:process";
-import * as path65 from "node:path";
+import * as path66 from "node:path";
 import * as fs52 from "node:fs";
 import * as os11 from "node:os";
 function getVsCodeCommand(platform3 = process8.platform) {
@@ -74290,11 +74758,11 @@ async function findVsCodeCommand(platform3 = process8.platform) {
   const locations = [];
   const homeDir = os11.homedir();
   if (platform3 === "darwin") {
-    locations.push("/Applications/Visual Studio Code.app/Contents/Resources/app/bin/code", path65.join(homeDir, "Library/Application Support/Code/bin/code"));
+    locations.push("/Applications/Visual Studio Code.app/Contents/Resources/app/bin/code", path66.join(homeDir, "Library/Application Support/Code/bin/code"));
   } else if (platform3 === "linux") {
-    locations.push("/usr/share/code/bin/code", "/snap/bin/code", path65.join(homeDir, ".local/share/code/bin/code"));
+    locations.push("/usr/share/code/bin/code", "/snap/bin/code", path66.join(homeDir, ".local/share/code/bin/code"));
   } else if (platform3 === "win32") {
-    locations.push(path65.join(process8.env["ProgramFiles"] || "C:\\Program Files", "Microsoft VS Code", "bin", "code.cmd"), path65.join(homeDir, "AppData", "Local", "Programs", "Microsoft VS Code", "bin", "code.cmd"));
+    locations.push(path66.join(process8.env["ProgramFiles"] || "C:\\Program Files", "Microsoft VS Code", "bin", "code.cmd"), path66.join(homeDir, "AppData", "Local", "Programs", "Microsoft VS Code", "bin", "code.cmd"));
   }
   for (const location of locations) {
     if (fs52.existsSync(location)) {
@@ -74495,10 +74963,126 @@ init_esbuild_shims();
 
 // packages/core/dist/src/utils/checkpointUtils.js
 init_esbuild_shims();
+import { createHash as createHash4 } from "node:crypto";
+var CHECKPOINT_INTEGRITY_VERSION = 1;
+var CHECKPOINT_INTEGRITY_ALGORITHM = "sha256";
 var ContentSchema = external_exports.object({
   role: external_exports.string().optional(),
   parts: external_exports.array(external_exports.record(external_exports.unknown()))
 }).passthrough();
+function stableNormalize(value) {
+  if (Array.isArray(value)) {
+    return value.map((item) => stableNormalize(item));
+  }
+  if (value && typeof value === "object") {
+    const sortedEntries = Object.entries(value).sort(([left2], [right2]) => left2.localeCompare(right2)).map(([key, nestedValue]) => [key, stableNormalize(nestedValue)]);
+    return Object.fromEntries(sortedEntries);
+  }
+  return value;
+}
+__name(stableNormalize, "stableNormalize");
+function stableStringify2(value) {
+  return JSON.stringify(stableNormalize(value));
+}
+__name(stableStringify2, "stableStringify");
+function getToolCallDataSchema(historyItemSchema) {
+  const schema = historyItemSchema ?? external_exports.any();
+  return external_exports.object({
+    history: external_exports.array(schema).optional(),
+    clientHistory: external_exports.array(ContentSchema).optional(),
+    commitHash: external_exports.string().optional(),
+    toolCall: external_exports.object({
+      name: external_exports.string(),
+      args: external_exports.record(external_exports.unknown())
+    }),
+    messageId: external_exports.string().optional()
+  });
+}
+__name(getToolCallDataSchema, "getToolCallDataSchema");
+function getCheckpointEnvelopeSchema(historyItemSchema) {
+  return external_exports.object({
+    version: external_exports.number().int().positive(),
+    createdAt: external_exports.string(),
+    data: getToolCallDataSchema(historyItemSchema),
+    integrity: external_exports.object({
+      algorithm: external_exports.string(),
+      hash: external_exports.string().min(1)
+    })
+  });
+}
+__name(getCheckpointEnvelopeSchema, "getCheckpointEnvelopeSchema");
+function computeCheckpointHash(data, version2 = CHECKPOINT_INTEGRITY_VERSION) {
+  return createHash4(CHECKPOINT_INTEGRITY_ALGORITHM).update(stableStringify2({ version: version2, data })).digest("hex");
+}
+__name(computeCheckpointHash, "computeCheckpointHash");
+function parseCheckpointContent(rawContent, historyItemSchema) {
+  let parsedJson;
+  try {
+    parsedJson = JSON.parse(rawContent);
+  } catch {
+    return {
+      success: false,
+      error: {
+        code: "invalid_json",
+        message: "Checkpoint JSON could not be parsed."
+      }
+    };
+  }
+  const envelopeSchema = getCheckpointEnvelopeSchema(historyItemSchema);
+  const envelopeResult = envelopeSchema.safeParse(parsedJson);
+  if (envelopeResult.success) {
+    const envelope = envelopeResult.data;
+    if (envelope.integrity.algorithm !== CHECKPOINT_INTEGRITY_ALGORITHM) {
+      return {
+        success: false,
+        error: {
+          code: "invalid_checkpoint",
+          message: `Unsupported checkpoint integrity algorithm: ${envelope.integrity.algorithm}`
+        }
+      };
+    }
+    const expectedHash = computeCheckpointHash(envelope.data, envelope.version);
+    if (expectedHash !== envelope.integrity.hash) {
+      return {
+        success: false,
+        error: {
+          code: "integrity_mismatch",
+          message: "Checkpoint integrity hash mismatch."
+        }
+      };
+    }
+    return {
+      success: true,
+      checkpoint: {
+        data: envelope.data,
+        integrityVerified: true,
+        version: envelope.version,
+        createdAt: envelope.createdAt
+      }
+    };
+  }
+  const legacySchema = getToolCallDataSchema(historyItemSchema);
+  const legacyResult = legacySchema.safeParse(parsedJson);
+  if (!legacyResult.success) {
+    return {
+      success: false,
+      error: {
+        code: "invalid_checkpoint",
+        message: "Checkpoint file is invalid or corrupted."
+      }
+    };
+  }
+  return {
+    success: true,
+    checkpoint: {
+      data: legacyResult.data,
+      integrityVerified: false,
+      version: null,
+      createdAt: null
+    }
+  };
+}
+__name(parseCheckpointContent, "parseCheckpointContent");
 
 // packages/core/dist/src/utils/tool-utils.js
 var normalizeIdentifier = /* @__PURE__ */ __name((identifier) => identifier.trim().replace(/^_+/, ""), "normalizeIdentifier");
@@ -74857,7 +75441,7 @@ __name(isShellCommandReadOnly, "isShellCommandReadOnly");
 // packages/core/dist/src/utils/shell-utils.js
 import { execFile as execFile3, execFileSync } from "node:child_process";
 import { accessSync, constants as fsConstants } from "node:fs";
-var policyEngine = new PolicyEngine(createPolicyEngineConfig({}, ApprovalMode2.DEFAULT));
+var policyEngine = new PolicyEngine(createPolicyEngineConfig({}, ApprovalMode.DEFAULT));
 var SHELL_TOOL_NAMES2 = ["run_shell_command", "ShellTool"];
 function getShellConfiguration() {
   if (isWindows()) {
@@ -75169,8 +75753,8 @@ function resolveCommandPath(command) {
 }
 __name(resolveCommandPath, "resolveCommandPath");
 function isCommandAvailable(command) {
-  const { path: path66, error: error2 } = resolveCommandPath(command);
-  return { available: path66 !== null, error: error2 };
+  const { path: path67, error: error2 } = resolveCommandPath(command);
+  return { available: path67 !== null, error: error2 };
 }
 __name(isCommandAvailable, "isCommandAvailable");
 function isCommandAllowed(command, config2) {
@@ -76334,13 +76918,14 @@ export {
   init_ansi_regex,
   stripAnsi,
   require_shell_quote,
-  ApprovalMode2 as ApprovalMode,
+  ApprovalMode,
   require_toml,
   createPolicyEngineConfig,
   getShellConfiguration,
   escapeShellArg,
   checkCommandPermissions,
   execCommand,
+  resolveCommandPath,
   isCommandAvailable,
   isBinary,
   ShellExecutionService,
@@ -76359,6 +76944,7 @@ export {
   GitService,
   isWithinRoot,
   processSingleFileContent,
+  ResultSchema,
   Client,
   require_cross_spawn,
   IDEConnectionStatus,
@@ -76370,10 +76956,12 @@ export {
   TodoWriteTool,
   MCPOAuthTokenStorage,
   MCPOAuthProvider,
+  MCP_DEFAULT_TIMEOUT_MSEC,
   MCPServerStatus,
   MCPDiscoveryState,
   getMCPServerStatus,
   getMCPDiscoveryState,
+  connectToMcpServer,
   createTransport,
   WriteFileTool,
   InputFormat,
@@ -76382,7 +76970,7 @@ export {
   ModelRegistry,
   DEFAULT_PAPERT_VISION_MODEL,
   DEFAULT_MODEL_PROVIDERS,
-  ApprovalMode as ApprovalMode2,
+  ApprovalMode2,
   APPROVAL_MODES,
   APPROVAL_MODE_INFO,
   DEFAULT_TRUNCATE_TOOL_OUTPUT_THRESHOLD,
@@ -76405,7 +76993,8 @@ export {
   TaskScheduler,
   resolveSchedulerStorePath,
   getIdeInstaller,
-  getMCPServerPrompts
+  getMCPServerPrompts,
+  parseCheckpointContent
 };
 /**
  * @license