@ziamana/bruine 0.1.1 → 0.1.3

package/README.md

@@ -11,8 +11,8 @@
 
 [![License: MIT](https://img.shields.io/badge/license-MIT-b4a7ff)](LICENSE)
 [![Node 22+](https://img.shields.io/badge/node-22%2B-7dcfff)](https://nodejs.org)
-![Windows · macOS · Linux](https://img.shields.io/badge/Windows%20%C2%B7%20macOS%20%C2%B7%20Linux-supported-8fe3a3)
-[![Changelog](https://img.shields.io/badge/version-0.1.1-ff9ed2)](CHANGELOG.md)
+![Linux tested · macOS and Windows in progress](https://img.shields.io/badge/Linux-tested-8fe3a3) ![macOS · Windows](https://img.shields.io/badge/macOS%20%C2%B7%20Windows-in%20progress-f5c97a)
+[![Changelog](https://img.shields.io/badge/version-0.1.3-ff9ed2)](CHANGELOG.md)
 
 <a href="docs/media/bruine-film.mp4"><img src="docs/media/hero.webp" alt="The bruine film: the word bruine becomes the logo in the rain, then the effort climbs from low to max and the rain turns into a storm" width="100%"></a>
 
@@ -144,7 +144,7 @@ training), and the offer can end without notice, so keep another model in reach.
 | `/model` and `/provider` | Switch model mid-session from the server's own live catalogue |
 | Skills | Reuses the skills you already wrote for Claude Code, OpenCode, pi or `~/.agents/skills` |
 | Context and speed | A footer that shows context used, tok/s, prefill and cache hit rate |
-| Works on | Windows Terminal, PowerShell, macOS Terminal, iTerm2, Konsole, GNOME Terminal |
+| Works on | Linux (Konsole, GNOME Terminal), tested every day. Written for macOS Terminal, iTerm2, Windows Terminal and PowerShell too, not yet checked by hand there |
 | herdr | Works with herdr: shows up as `bruine` in `herdr agent list`. |
 
 ## The weather
@@ -215,8 +215,11 @@ turn it on in the setup. Network discovery of model servers is opt-in and only t
 compatible server) with a context of 32k or more. Small models can chat but tend to lose the thread in
 long agent loops. The setup detects what the server's chat template supports (thinking, effort levels).
 
-**Does it work on Windows?** Yes: Windows Terminal, PowerShell and the classic console; commands run in
-PowerShell there. [docs/PLATFORMS.md](docs/PLATFORMS.md) lists what was checked and what still has limits.
+**Does it work on Windows or macOS?** It is written for them (on Windows, commands run in PowerShell) and
+the unit tests run on both in CI, but nobody has used it by hand on a real Windows or macOS machine yet,
+and the terminal tests on Windows still fail. Linux is the one platform used every day. If it breaks on
+yours, [open an issue](https://github.com/ziamana/bruine/issues). [docs/PLATFORMS.md](docs/PLATFORMS.md)
+lists what was checked and what still has limits.
 
 **How do I make it ask less?** `/auto` lets a fast model judge the routine actions (risky ones still
 ask), the approval's `a` (Always) remembers one exact command for the session and says which, and

package/dist/bin.js

@@ -688,8 +688,8 @@ async function writeEnvVar(envPath, key, value) {
     text = "";
   }
   const line = `${key}=${value}`;
-  const re = new RegExp(`^${key}=.*$`, "m");
-  const next = re.test(text) ? text.replace(re, line) : text === "" || text.endsWith("\n") ? `${text}${line}
+  const re = new RegExp(`^${key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}=.*$`, "m");
+  const next = re.test(text) ? text.replace(re, () => line) : text === "" || text.endsWith("\n") ? `${text}${line}
 ` : `${text}
 ${line}
 `;
@@ -1180,6 +1180,48 @@ var init_skills = __esm({
   }
 });
 
+// src/setup/default-skills.ts
+import { existsSync as existsSync6 } from "fs";
+import { readFile as readFile4 } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
+function defaultSkills(bundled) {
+  return bundled.map((s) => s.name).filter((name) => !NOT_BY_DEFAULT.includes(name));
+}
+async function ensureDefaultSkills(opts) {
+  const homeSkillsDir = join4(opts.dshHome, "skills");
+  let doc = {};
+  try {
+    doc = JSON.parse(await readFile4(configReadPath(opts.dshHome), "utf8"));
+  } catch {
+    doc = {};
+  }
+  const nothing = { installed: [], kept: [] };
+  if (Array.isArray(doc.skills)) return nothing;
+  if (existsSync6(manifestReadPath(homeSkillsDir))) return nothing;
+  const bundled = await readBundledSkills(opts.bundledRoot);
+  if (bundled.length === 0) return nothing;
+  const shipped = new Set(bundled.map((s) => s.name));
+  const home = opts.home ?? homedir3();
+  const mine = (await scanFoundSkills(home)).filter((s) => s.source === "agents" && !shipped.has(s.name));
+  const chosen = [...defaultSkills(bundled), ...mine.map((s) => s.name)];
+  const result = await syncSkills({ homeSkillsDir, bundledRoot: opts.bundledRoot, chosen, home });
+  doc.skills = chosen;
+  await writeAtomic2(configWritePath(opts.dshHome), `${JSON.stringify(doc, null, 2)}
+`);
+  return { installed: result.installed, kept: mine.map((s) => s.name).filter((n) => result.installed.includes(n)) };
+}
+var NOT_BY_DEFAULT;
+var init_default_skills = __esm({
+  "src/setup/default-skills.ts"() {
+    "use strict";
+    init_compat();
+    init_simple();
+    init_skills();
+    NOT_BY_DEFAULT = ["remotion", "remotion-best-practices"];
+  }
+});
+
 // src/render/chars.ts
 function iconsFor(env = process.env, platform = process.platform) {
   if (appEnv("ASCII", env) === "1") return ASCII_ICONS;
@@ -1518,7 +1560,7 @@ var init_theme = __esm({
 // src/update.ts
 import { spawn } from "child_process";
 import { realpathSync } from "fs";
-import { mkdir as mkdir4, readFile as readFile4, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile5, rename as rename4, writeFile as writeFile4 } from "fs/promises";
 import path5 from "path";
 function updateCachePath(dshHome, pathMod = path5) {
   return pathMod.join(dshHome, UPDATE_CACHE_FILE);
@@ -1533,7 +1575,7 @@ function updateCheckEnabled(opts) {
 async function readUpdateCache(dshHome, pathMod = path5) {
   try {
     const doc = JSON.parse(
-      await readFile4(updateCachePath(dshHome, pathMod), "utf8")
+      await readFile5(updateCachePath(dshHome, pathMod), "utf8")
     );
     if (typeof doc.checkedAt !== "number" || typeof doc.latest !== "string") return void 0;
     return { checkedAt: doc.checkedAt, latest: doc.latest };
@@ -1552,7 +1594,7 @@ async function writeUpdateCache(dshHome, cache, pathMod) {
 async function readBruineJsonDoc(dshHome) {
   try {
     return JSON.parse(
-      await readFile4(configReadPath(dshHome), "utf8")
+      await readFile5(configReadPath(dshHome), "utf8")
     );
   } catch {
     return {};
@@ -1761,8 +1803,8 @@ var init_keys = __esm({
 });
 
 // src/setup/flow.ts
-import { chmod as chmod2, mkdir as mkdir5, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
-import { dirname as dirname3, join as join5 } from "path";
+import { chmod as chmod2, mkdir as mkdir5, readFile as readFile6, rename as rename5, writeFile as writeFile5 } from "fs/promises";
+import { dirname as dirname3, join as join6 } from "path";
 function roleFromModelRef(ref) {
   if (ref.provider === "deepseek-official") return { cloud: "deepseek-official", model: ref.model };
   if (typeof ref.baseUrl === "string" && ref.baseUrl !== "") {
@@ -1811,10 +1853,10 @@ function usesLocalServer(answers) {
 }
 async function commitPlan(dshHome, plan) {
   if (plan.env.some(([name]) => name === void 0)) throw new Error("bad env entry");
-  await writeAtom(join5(dshHome, "settings.yaml"), plan.settingsYaml, 384);
+  await writeAtom(join6(dshHome, "settings.yaml"), plan.settingsYaml, 384);
   let bruineJson = plan.bruineJson;
   try {
-    const previous = JSON.parse(await readFile5(configReadPath(dshHome), "utf8"));
+    const previous = JSON.parse(await readFile6(configReadPath(dshHome), "utf8"));
     if (previous.reasoningEffort !== void 0) {
       const doc = JSON.parse(bruineJson);
       doc.reasoningEffort = previous.reasoningEffort;
@@ -1825,7 +1867,7 @@ async function commitPlan(dshHome, plan) {
   }
   await writeAtom(configWritePath(dshHome), bruineJson, 384);
   for (const [name, value] of plan.env) {
-    await writeEnvVar(join5(dshHome, ".env"), name, value);
+    await writeEnvVar(join6(dshHome, ".env"), name, value);
   }
   await syncSkills(plan.skills);
 }
@@ -2141,7 +2183,7 @@ var init_flow = __esm({
 `,
           env,
           skills: {
-            homeSkillsDir: join5(opts.dshHome, "skills"),
+            homeSkillsDir: join6(opts.dshHome, "skills"),
             bundledRoot: opts.bundledSkillsRoot,
             chosen: a.skills
           }
@@ -3103,10 +3145,10 @@ import {
   isKeyRelease as isKeyRelease4,
   matchesKey as matchesKey4
 } from "@earendil-works/pi-tui";
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync4 } from "fs";
 import { mkdir as mkdir6, rename as rename6, writeFile as writeFile6 } from "fs/promises";
-import { homedir as homedir3 } from "os";
-import { dirname as dirname4, join as join6, resolve } from "path";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname4, join as join7, resolve } from "path";
 import { fileURLToPath } from "url";
 import { parse as parseYaml3 } from "yaml";
 async function setSuggestionsChoice(dshHome, value) {
@@ -3123,7 +3165,7 @@ function bundledSkillsRoot() {
   const dir = dirname4(fileURLToPath(import.meta.url));
   for (const up of [1, 2, 3]) {
     const candidate = resolve(dir, "..".repeat(up), "skills");
-    if (existsSync6(join6(candidate, "git-workflow", "SKILL.md"))) return candidate;
+    if (existsSync7(join7(candidate, "git-workflow", "SKILL.md"))) return candidate;
   }
   return resolve(dir, "..", "skills");
 }
@@ -3144,7 +3186,7 @@ function isExistingInstall(prefill) {
 function readEnvFile(dshHome) {
   const out = {};
   try {
-    for (const line of readFileSync4(join6(dshHome, ".env"), "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync4(join7(dshHome, ".env"), "utf8").split(/\r?\n/)) {
       const m = /^([A-Z][A-Z0-9_]*)=(.*)$/.exec(line);
       if (m !== null && m[1] !== void 0 && m[2] !== void 0) out[m[1]] = m[2];
     }
@@ -3161,7 +3203,7 @@ function loadPrefill(dshHome) {
   }
   let settingsDoc;
   try {
-    settingsDoc = parseSettingsYaml(readFileSync4(join6(dshHome, "settings.yaml"), "utf8"));
+    settingsDoc = parseSettingsYaml(readFileSync4(join7(dshHome, "settings.yaml"), "utf8"));
   } catch {
     settingsDoc = void 0;
   }
@@ -3379,7 +3421,7 @@ function savedSkillsList(dshHome) {
 }
 function installedSkillsList(dshHome) {
   try {
-    const raw = JSON.parse(readFileSync4(manifestReadPath(join6(dshHome, "skills")), "utf8"));
+    const raw = JSON.parse(readFileSync4(manifestReadPath(join7(dshHome, "skills")), "utf8"));
     const names = Object.keys(raw).filter((n) => n !== "" && typeof raw[n] !== "undefined");
     return names.length > 0 ? names.sort((a, b) => a.localeCompare(b)) : [];
   } catch {
@@ -3392,8 +3434,10 @@ function initialSkillChecks(items, saved, found) {
     if (item.disabled === true) return;
     if (saved !== void 0) {
       if (saved.includes(item.value)) checked.add(i);
-    } else if (item.value !== "remotion" && item.value !== "remotion-best-practices" && (RECOMMENDED_SKILLS.includes(item.value) || found.some((f) => f.name === item.value && f.source === "agents"))) {
-      checked.add(i);
+    } else if (!NOT_BY_DEFAULT.includes(item.value)) {
+      const foundRow = found.find((f) => f.name === item.value);
+      const shipped = !item.value.startsWith("#") && foundRow === void 0;
+      if (shipped || RECOMMENDED_SKILLS.includes(item.value) || foundRow?.source === "agents") checked.add(i);
     }
   });
   return checked;
@@ -3588,6 +3632,9 @@ async function runFullSetup(dshHome, opts = {}) {
   async function drive() {
     const bundledRoot = opts.bundledSkillsRoot ?? bundledSkillsRoot();
     const bundled = await readBundledSkills(bundledRoot);
+    if (flow.answers.skills.length === 0 && savedSkillsList(dshHome) === void 0 && installedSkillsList(dshHome) === void 0) {
+      flow.answers.skills = defaultSkills(bundled);
+    }
     const showWelcome = async () => {
       keyHelp = "Enter continue  \xB7  Ctrl+C quit";
       status = "Bruine setup";
@@ -4208,7 +4255,7 @@ async function runFullSetup(dshHome, opts = {}) {
   }
   async function stepSkills(bundled) {
     displayStep = "skills";
-    const allFound = await scanFoundSkills(homedir3());
+    const allFound = await scanFoundSkills(homedir4());
     const shippedNames = new Set(bundled.map((s) => s.name));
     const found = allFound.filter((s) => !shippedNames.has(s.name));
     const project2 = await scanProjectSkills(process.cwd());
@@ -4232,7 +4279,7 @@ async function runFullSetup(dshHome, opts = {}) {
     const saved = skillsSubmitted ? flow.answers.skills : savedSkillsList(dshHome);
     const checked = initialSkillChecks(items, saved, found);
     const sel = await checkStep(
-      saved !== void 0 && saved.length > 0 ? `Skills: Space toggles, Enter continues, s skips (keeps ${String(saved.length)} enabled)` : "Skills: Space toggles, Enter continues, s skips (enables none)",
+      saved !== void 0 && saved.length > 0 ? `Skills: Space toggles, Enter continues, s skips (keeps ${String(saved.length)} enabled)` : "Skills: Space toggles, Enter continues, s skips (keeps the recommended ones)",
       items,
       checked
     );
@@ -4457,6 +4504,7 @@ var init_full = __esm({
     init_cloud();
     init_spacebunny();
     init_discover();
+    init_default_skills();
     init_skills();
     init_simple();
     init_update();
@@ -4607,12 +4655,17 @@ function readMcpServers(home, projectDir, env = process.env) {
   return { servers, problems };
 }
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function describeServer(server) {
-  if (server.transport === "stdio") return [server.command, ...server.args ?? []].join(" ");
-  return server.url ?? "";
+  const where = server.transport === "stdio" ? [server.command, ...server.args ?? []].join(" ") : server.url ?? "";
+  const may = [
+    ...server.readOnly ? ["marked read-only: usable in Plan mode, never asks"] : [],
+    ...server.alwaysAllow.length > 0 ? [`runs without asking: ${server.alwaysAllow.join(", ")}`] : []
+  ];
+  return may.length === 0 ? where : `${where} (${may.join("; ")})`;
 }
 var PROJECT_MCP_FILE, isRecord;
 var init_config = __esm({
@@ -4730,10 +4783,10 @@ var init_approve = __esm({
 // src/bin.ts
 init_compat();
 import { spawn as spawn2, spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync7, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "fs";
 import { createInterface } from "readline";
 import os from "os";
-import { dirname as dirname5, join as join7, resolve as resolve2 } from "path";
+import { dirname as dirname5, join as join8, resolve as resolve2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { createRequire as createRequire3 } from "module";
 
@@ -4962,6 +5015,7 @@ function resolveDshBaseDir() {
 // src/bin.ts
 init_simple();
 init_skills();
+init_default_skills();
 init_discover();
 init_theme();
 
@@ -5075,15 +5129,15 @@ var DSH_MISSING = "bruine: could not launch dsh (missing or broken install). Rei
 function selfPackageRoot() {
   try {
     const root = resolve2(dirname5(fileURLToPath2(import.meta.url)), "..");
-    const manifest = JSON.parse(readFileSync7(join7(root, "package.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync7(join8(root, "package.json"), "utf8"));
     return manifest.name === pkg2.name ? root : void 0;
   } catch {
     return void 0;
   }
 }
 function ensureBundleInstalled(profileDir, dshEntry, env, headless = false) {
-  const marker = join7(profileDir, "node_modules", pkg2.name, "package.json");
-  if (existsSync7(marker)) return;
+  const marker = join8(profileDir, "node_modules", pkg2.name, "package.json");
+  if (existsSync8(marker)) return;
   const root = selfPackageRoot();
   if (!headless) console.log("Setting up bruine (one time)\u2026");
   const dshBase = resolveDshBaseDir();
@@ -5120,12 +5174,12 @@ function readBruineJson(dshHome) {
 }
 async function printSkills(dshHome) {
   const { readInstalledSkills: readInstalledSkills2 } = await Promise.resolve().then(() => (init_skills(), skills_exports));
-  const skills = await readInstalledSkills2(join7(dshHome, "skills"));
+  const skills = await readInstalledSkills2(join8(dshHome, "skills"));
   if (skills.length === 0) {
     console.log("No skills enabled. Run `bruine setup` to pick skills.");
     return;
   }
-  console.log(`Skills enabled in ${join7(dshHome, "skills")}:`);
+  console.log(`Skills enabled in ${join8(dshHome, "skills")}:`);
   for (const s of skills) {
     const kind = s.copied === true ? "linked-copy" : s.kind;
     console.log(`  ${s.name}  ${kind}${s.source !== "" ? `  ${s.source}` : ""}`);
@@ -5169,7 +5223,7 @@ async function runUpdate() {
   let version = "unknown";
   try {
     const manifest = JSON.parse(
-      readFileSync7(join7(dirname5(real), "..", "package.json"), "utf8")
+      readFileSync7(join8(dirname5(real), "..", "package.json"), "utf8")
     );
     version = manifest.version ?? "unknown";
   } catch {
@@ -5303,7 +5357,7 @@ async function main() {
     console.error("bruine: --continue cannot be combined with -p");
     process.exit(2);
   }
-  if (!existsSync7(join7(dshHome, "settings.yaml"))) {
+  if (!existsSync8(join8(dshHome, "settings.yaml"))) {
     if (headless) {
       console.error("bruine: run `bruine setup` before using -p");
       process.exit(2);
@@ -5337,7 +5391,22 @@ async function main() {
   });
   const { dir } = await ensureProfile(dshHome);
   ensureBundleInstalled(dir, dshEntry, env, headless);
-  const migrated = await migrateAgentsSkills({ homeSkillsDir: join7(dshHome, "skills") });
+  const defaults = await ensureDefaultSkills({
+    dshHome,
+    bundledRoot: resolve2(dirname5(fileURLToPath2(import.meta.url)), "..", "skills")
+  });
+  const shipped = defaults.installed.filter((name) => !defaults.kept.includes(name));
+  const sayDefault = (said) => {
+    const line = process.stdout.isTTY === true ? ansi.dim(said) : said;
+    if (headless) console.error(line);
+    else console.log(line);
+  };
+  if (shipped.length > 0) sayDefault(`bruine: ${String(shipped.length)} skills are on (turn any off with bruine setup)`);
+  if (defaults.kept.length > 0) {
+    const k = String(defaults.kept.length);
+    sayDefault(`bruine: kept your ${k} skill${defaults.kept.length === 1 ? "" : "s"} from .agents/skills (manage them with bruine setup)`);
+  }
+  const migrated = await migrateAgentsSkills({ homeSkillsDir: join8(dshHome, "skills") });
   if (migrated.linked.length > 0) {
     const n = String(migrated.linked.length);
     const kept = `bruine: kept your ${n} skill${migrated.linked.length === 1 ? "" : "s"} from .agents/skills (manage them with bruine setup)`;

package/dist/plugins/mcp.js

@@ -151,7 +151,8 @@ function readMcpServers(home, projectDir, env = process.env) {
   return { servers, problems };
 }
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function toDshConfig(server) {

package/dist/plugins/modes.js

@@ -26,7 +26,8 @@ function configReadPath(home) {
 }
 
 // src/plugins/modes.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+import { join as join2 } from "path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { Text } from "@earendil-works/pi-tui";
 
@@ -190,6 +191,7 @@ var READONLY_COMMANDS = /* @__PURE__ */ new Set([
   "alias",
   "ps"
 ]);
+var PS_ENVIRONMENT = /^ps\s(?:[^\n]*\s)?(?!-)[A-Za-z]*e[A-Za-z]*(?:\s|$)|^ps\b[^\n]*--environment/;
 var NOT_SIMPLE = /[;&|<>`]|\$\(|\n/;
 var EXECUTABLE_OPTION = /--(?:pre|ext-diff|textconv)(?=$|[=\s'"\\])/;
 var FIND_MUTATING = /\s-(exec|ok|fprint|fls|delete)/;
@@ -295,7 +297,13 @@ var SENSITIVE_PATTERNS = [
   /(^|[/\\])\.bashrc\b|(^|[/\\])\.bash_profile\b/,
   /(^|[/\\])\.profile\b/,
   /(^|[/\\])\.zprofile\b/,
-  /(^|[/\\])\.config[/\\]fish[/\\]/
+  /(^|[/\\])\.config[/\\]fish[/\\]/,
+  // Cloud, cluster and registry credentials, and the tool's own config (MCP tokens may sit in it).
+  /(^|[/\\])\.(aws|gnupg|kube|azure)([/\\]|$)/,
+  /(^|[/\\])\.config[/\\](gh|gcloud|glab-cli)([/\\]|$)/,
+  /(^|[/\\])\.docker[/\\]config\.json\b/,
+  /(^|[/\\])\.(netrc|git-credentials)\b|(^|[/\\])_netrc\b/,
+  /(^|[/\\])(bruine|kumo)\.json\b/
 ];
 function parseArgs(raw) {
   if (raw !== null && typeof raw === "object") return Array.isArray(raw) ? {} : raw;
@@ -382,6 +390,7 @@ function isReadonlyBash(command) {
   const words = command.trim().split(/\s+/);
   const first = words[0] ?? "";
   if (first === "find") return !FIND_MUTATING.test(command);
+  if (first === "ps") return !PS_ENVIRONMENT.test(command.trim());
   if (first === "git") return gitReadonly(words, command);
   return READONLY_COMMANDS.has(first);
 }
@@ -463,6 +472,43 @@ function isPathInside(target, projectDir) {
   const rel = mod.relative(root, abs);
   return rel !== "" && !rel.startsWith("..") && !mod.isAbsolute(rel) ? true : rel === "";
 }
+var FILE_LOOKUP_TOOLS = /* @__PURE__ */ new Set(["read", "read_image", "glob", "grep"]);
+function lookupTargets(name2, args) {
+  const out = [];
+  for (const key of ["path", "file_path", "directory"]) if (typeof args[key] === "string") out.push(args[key]);
+  if (name2 === "glob" && typeof args.pattern === "string" && /^(?:[/\\~]|[A-Za-z]:)/.test(args.pattern)) out.push(args.pattern);
+  return out;
+}
+function lookupLeaks(name2, args, projectDir, readRoots = []) {
+  for (const raw of lookupTargets(name2, args)) {
+    const target = expandHome(raw.trim());
+    if (isSensitiveTarget(target, projectDir)) return true;
+    if (!isPathInside(target, projectDir) && !readRoots.some((root) => isPathInside(target, root))) return true;
+  }
+  return false;
+}
+function isPrivateUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw.trim());
+  } catch {
+    return false;
+  }
+  if (url.username !== "" || url.password !== "") return true;
+  const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+  if (host === "" || host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || host.endsWith(".lan") || host.endsWith(".home.arpa")) return true;
+  if (!host.includes(".") && !host.includes(":")) return true;
+  const v4 = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(host);
+  if (v4 !== null) {
+    const [a, b] = [Number(v4[1]), Number(v4[2])];
+    return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a >= 224;
+  }
+  if (host.includes(":")) {
+    if (host === "::" || host === "::1" || /^f[cd]/.test(host) || /^fe[89ab]/.test(host)) return true;
+    return host.startsWith("::ffff:");
+  }
+  return false;
+}
 function decide(name2, execArgs, ctx) {
   const isBash = name2 === "bash";
   const isPwsh = name2 === "pwsh";
@@ -482,11 +528,10 @@ function decide(name2, execArgs, ctx) {
   if (WRITE_TOOLS.has(name2)) {
     const target = String(execArgs.path ?? execArgs.file_path ?? "");
     if (isSensitive(target)) return "ask";
+    if (!isPathInside(target, ctx.projectDir)) return "ask";
   }
-  if (name2 === "read" || name2 === "read_image") {
-    const target = String(execArgs.path ?? execArgs.file_path ?? "");
-    if (isSensitiveTarget(target, ctx.projectDir)) return "ask";
-  }
+  if (FILE_LOOKUP_TOOLS.has(name2) && lookupLeaks(name2, execArgs, ctx.projectDir, ctx.readRoots)) return "ask";
+  if (name2 === "web_fetch" && isPrivateUrl(String(execArgs.url ?? ""))) return "ask";
   if (isShell && bashLeaks(command, ctx.projectDir)) return "ask";
   if (ctx.sessionAllowed.has(ruleKey(name2, execArgs))) return "allow";
   if (READ_ONLY_TOOLS.has(name2)) return "allow";
@@ -516,6 +561,83 @@ import path4 from "path";
 // src/plugins/mcp.ts
 var BRUINE_MCP_SERVICE = "bruineMcp";
 
+// src/setup/skills.ts
+import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import path5, { dirname, join } from "path";
+var SAFE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function parseSkillFrontmatter(md) {
+  const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(md);
+  if (m === null || m[1] === void 0) return {};
+  const lines = m[1].split(/\r?\n/);
+  const out = {};
+  const unquote = (v) => v.replaceAll(/^["']|["']$/g, "");
+  for (let i = 0; i < lines.length; i += 1) {
+    const kv = /^([A-Za-z_][\w-]*)\s*:\s*(.*)$/.exec(lines[i].trimEnd());
+    if (kv === null || kv[1] === void 0 || kv[2] === void 0) continue;
+    const key = kv[1];
+    let value = kv[2].trim();
+    const rest = [];
+    let j = i + 1;
+    while (j < lines.length && (lines[j].trim() === "" || /^\s+\S/.test(lines[j]))) {
+      rest.push(lines[j]);
+      j += 1;
+    }
+    while (rest.length > 0 && rest[rest.length - 1].trim() === "") rest.pop();
+    const block = /^([>|])[+-]?\d*$/.exec(value);
+    if (block !== null) {
+      const body = rest.map((l) => l.trim());
+      value = block[1] === "|" ? body.join("\n") : body.join(" ").replaceAll(/\s+/g, " ").trim();
+      i = j - 1;
+    } else if (rest.length > 0 && key !== "name") {
+      value = [value, ...rest.map((l) => l.trim())].filter((l) => l !== "").join(" ");
+      i = j - 1;
+    }
+    if (key === "name") out.name = unquote(value);
+    if (key === "description") out.description = unquote(value);
+  }
+  return out;
+}
+async function readSkillsUnder(root) {
+  const out = [];
+  if (!existsSync3(root)) return out;
+  for (const entry of await readdir(root, { withFileTypes: true })) {
+    if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
+    const skillPath = join(root, entry.name, "SKILL.md");
+    if (!existsSync3(skillPath)) continue;
+    const fm = parseSkillFrontmatter(await readFile(skillPath, "utf8"));
+    if (fm.name === void 0 || !SAFE_NAME.test(fm.name)) continue;
+    out.push({ name: fm.name, description: fm.description ?? "", dir: join(root, entry.name) });
+  }
+  return out;
+}
+async function scanProjectSkills(cwd, pathMod = path5) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rel of [
+    [".agents", "skills"],
+    [".dsh", "skills"]
+  ]) {
+    for (const skill of await readSkillsUnder(pathMod.join(cwd, ...rel))) {
+      if (seen.has(skill.name)) continue;
+      seen.add(skill.name);
+      out.push(skill);
+    }
+  }
+  return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+async function readAvailableSkills(homeSkillsDir, cwd) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const skill of await readSkillsUnder(homeSkillsDir)) {
+    byName.set(skill.name, { ...skill, scope: "user" });
+  }
+  for (const skill of await scanProjectSkills(cwd)) {
+    byName.set(skill.name, { ...skill, scope: "project" });
+  }
+  return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+
 // src/plugins/modes.ts
 function mcpPolicy(service, tool) {
   const server = service?.serverOf(tool);
@@ -539,9 +661,9 @@ var PERMISSION_ORDER = ["ask", "auto", "full"];
 function readBruineJson(env = process.env) {
   try {
     const home = runtimeHome(env);
-    const path5 = configReadPath(home);
-    if (!existsSync3(path5)) return {};
-    return JSON.parse(readFileSync3(path5, "utf8"));
+    const path6 = configReadPath(home);
+    if (!existsSync4(path6)) return {};
+    return JSON.parse(readFileSync3(path6, "utf8"));
   } catch {
     return {};
   }
@@ -778,6 +900,19 @@ ${line}
 `);
     }
   };
+  let skillRoots;
+  const readRoots = async () => {
+    if (skillRoots !== void 0 && Date.now() - skillRoots.at < 3e4) return skillRoots.roots;
+    let roots = [];
+    try {
+      const home = join2(runtimeHome(), "skills");
+      roots = [home, ...(await readAvailableSkills(home, process.cwd())).map((skill) => skill.dir)];
+    } catch {
+      roots = [];
+    }
+    skillRoots = { at: Date.now(), roots };
+    return roots;
+  };
   ctx.on("tools/pre-execute", async (exec, next) => {
     if (!modes.governs(exec.agent)) return next();
     const canAsk = repl?.ui !== void 0;
@@ -788,6 +923,7 @@ ${line}
       plan: modes.plan,
       sessionAllowed: modes.sessionAllowed,
       projectDir: process.cwd(),
+      readRoots: await readRoots(),
       mcp: (tool) => mcpPolicy(ctx.get(BRUINE_MCP_SERVICE), tool)
     });
     let decision;

package/dist/plugins/render.js

@@ -2284,7 +2284,8 @@ async function turnChanges(opts) {
 }
 
 // src/plugins/modes.ts
-import { existsSync as existsSync3, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6 } from "fs";
+import { join as join4 } from "path";
 import { createUserMessage as createUserMessage2 } from "@deepseek-ai/dsh-llm";
 import { Text as Text2 } from "@earendil-works/pi-tui";
 
@@ -2302,6 +2303,12 @@ import path3 from "path";
 import { mkdirSync, readFileSync as readFileSync5, renameSync, writeFileSync } from "fs";
 import path4 from "path";
 
+// src/setup/skills.ts
+import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import path5, { dirname, join as join3 } from "path";
+
 // src/plugins/modes.ts
 var PLAN_ON_TEXT = "Plan mode is on: do not modify files or run modifying commands.";
 var PLAN_OFF_TEXT = "Plan mode is off.";
@@ -2636,22 +2643,16 @@ import {
 // src/ui/footer.ts
 import { truncateToWidth as truncateToWidth2, visibleWidth as visibleWidth5 } from "@earendil-works/pi-tui";
 import { readFileSync as readFileSync7, statSync as statSync2 } from "fs";
-import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute5, join as join3 } from "path";
+import { homedir as homedir5 } from "os";
+import { isAbsolute as isAbsolute5, join as join5 } from "path";
 
 // src/ui/place.ts
-import { homedir as homedir3 } from "os";
+import { homedir as homedir4 } from "os";
 import { posix, win32 } from "path";
 
 // src/ui/jump-latest.ts
 import { stripTerminalSequences, visibleWidth as visibleWidth6 } from "@earendil-works/pi-tui";
 
-// src/setup/skills.ts
-import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
-import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir5 } from "os";
-import path5, { dirname, join as join4 } from "path";
-
 // src/ui/shell.ts
 import { Container as Container2 } from "@earendil-works/pi-tui";
 
@@ -2706,7 +2707,7 @@ var LOGO_BESIDE_GAP = " ".repeat(LOGO_GAP);
 
 // src/ui/intro.ts
 import { existsSync as existsSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // src/ui/intro-effects.ts
 var H = LOGO.length;
@@ -2736,7 +2737,7 @@ import { matchesKey as matchesKey3, visibleWidth as visibleWidth12, wrapTextWith
 // src/ui/file-complete.ts
 import { CombinedAutocompleteProvider } from "@earendil-works/pi-tui";
 import { existsSync as existsSync6, readdirSync } from "fs";
-import { basename, delimiter as delimiter2, join as join6, relative as relative2 } from "path";
+import { basename, delimiter as delimiter2, join as join7, relative as relative2 } from "path";
 
 // src/image/clipboard.ts
 import { readFileSync as readFileSync10 } from "fs";
@@ -2760,7 +2761,7 @@ import { visibleWidth as visibleWidth14 } from "@earendil-works/pi-tui";
 // src/setup/discover.ts
 import { readFileSync as readFileSync11 } from "fs";
 import { networkInterfaces } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { spawnSync } from "child_process";
 import { parse as parseYaml } from "yaml";
 
@@ -2795,7 +2796,7 @@ function settingsEntryAnswer(entry) {
 
 // src/ui/bruine-ui.ts
 import { existsSync as existsSync7, readFileSync as readFileSync12 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 
 // src/update.ts
 import { spawn } from "child_process";
@@ -2810,7 +2811,7 @@ var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 function readSettingsRoute(dshHome) {
   try {
     const home = dshHome ?? runtimeHome();
-    const p = join9(home, "settings.yaml");
+    const p = join10(home, "settings.yaml");
     if (!existsSync7(p)) return void 0;
     const doc = parseBruineSettingsYaml(readFileSync12(p, "utf8"));
     if (doc === void 0) return void 0;
@@ -2840,7 +2841,7 @@ function parseBruineSettingsYaml(text) {
 
 // src/ui/errors.ts
 import { appendFile, mkdir as mkdir4 } from "fs/promises";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 import { truncateToWidth as truncateToWidth7, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
 function firstLine(text) {
   return (text.split(/\r?\n/)[0] ?? text).trim();
@@ -2932,14 +2933,14 @@ async function fetchAvailableModels(baseUrl) {
 }
 function bruineLogPath(env = process.env) {
   const home = runtimeHome(env);
-  return join10(home, "logs", "bruine.log");
+  return join11(home, "logs", "bruine.log");
 }
 async function appendErrorLog(failure, extra = "") {
   const path7 = bruineLogPath();
   const line = `${(/* @__PURE__ */ new Date()).toISOString()} [llm-error] code=${String(failure.code ?? "UNKNOWN")}${failure.status === void 0 ? "" : ` status=${String(failure.status)}`} ${String(failure.message ?? "").slice(0, 2e3)}${extra === "" ? "" : ` ${extra}`}
 `;
   try {
-    await mkdir4(join10(path7, ".."), { recursive: true });
+    await mkdir4(join11(path7, ".."), { recursive: true });
     await appendFile(path7, line, "utf8");
   } catch {
   }
@@ -2983,7 +2984,7 @@ function retryLine(event) {
 
 // src/plugins/silence.ts
 import { existsSync as existsSync8, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { parse as parseYaml3 } from "yaml";
 var BRUINE_SILENCE_SERVICE = "bruineSilence";
 

package/dist/plugins/repl.js

@@ -7017,6 +7017,7 @@ var BruineUi = class {
 
 // src/plugins/modes.ts
 import { existsSync as existsSync8, readFileSync as readFileSync12 } from "fs";
+import { join as join10 } from "path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { Text as Text3 } from "@earendil-works/pi-tui";
 
@@ -7031,12 +7032,17 @@ import { readFileSync as readFileSync10 } from "fs";
 import path6 from "path";
 var PROJECT_MCP_FILE = ".mcp.json";
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function describeServer(server) {
-  if (server.transport === "stdio") return [server.command, ...server.args ?? []].join(" ");
-  return server.url ?? "";
+  const where = server.transport === "stdio" ? [server.command, ...server.args ?? []].join(" ") : server.url ?? "";
+  const may = [
+    ...server.readOnly ? ["marked read-only: usable in Plan mode, never asks"] : [],
+    ...server.alwaysAllow.length > 0 ? [`runs without asking: ${server.alwaysAllow.join(", ")}`] : []
+  ];
+  return may.length === 0 ? where : `${where} (${may.join("; ")})`;
 }
 
 // src/mcp/state.ts
@@ -7383,13 +7389,13 @@ var SPACE_BUNNY_NOTICE = [
 
 // src/setup/zen-route.ts
 import { existsSync as existsSync11, readFileSync as readFileSync14 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { parseDocument } from "yaml";
 
 // src/setup/simple.ts
 import { chmod as chmod2, mkdir as mkdir4, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
-import { dirname as dirname2, join as join10 } from "path";
+import { dirname as dirname2, join as join11 } from "path";
 
 // src/setup/cloud.ts
 var DEEPSEEK_OFFICIAL = {
@@ -7416,7 +7422,7 @@ async function writeAtomic(path8, content, mode) {
 // src/setup/zen-route.ts
 var ROUTE_PATH = ["llm-pi-ai", "providers", SPACE_BUNNY.routeName];
 async function addSpaceBunnyToHome(home) {
-  const file = join11(home, "settings.yaml");
+  const file = join12(home, "settings.yaml");
   const doc = parseDocument(existsSync11(file) ? readFileSync14(file, "utf8") : "");
   if (doc.hasIn([...ROUTE_PATH])) {
     await repairSpaceBunnyRoute(home);
@@ -7427,7 +7433,7 @@ async function addSpaceBunnyToHome(home) {
   return "added";
 }
 async function repairSpaceBunnyRoute(home) {
-  const file = join11(home, "settings.yaml");
+  const file = join12(home, "settings.yaml");
   if (!existsSync11(file)) return false;
   let doc;
   try {
@@ -7475,12 +7481,12 @@ async function repairSpaceBunnyRoute(home) {
 // src/plugins/model.ts
 import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
 import { chmod as chmod3, rename as rename6, writeFile as writeFile6 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 import { matchesKey as matchesKey6 } from "@earendil-works/pi-tui";
 
 // src/ui/errors.ts
 import { appendFile, mkdir as mkdir5 } from "fs/promises";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { truncateToWidth as truncateToWidth7, wrapTextWithAnsi as wrapTextWithAnsi3 } from "@earendil-works/pi-tui";
 function formatK2(n) {
   const k = n / 1e3;
@@ -7630,7 +7636,7 @@ function readEnvKeys(dshHome) {
   const out = /* @__PURE__ */ new Set();
   const home = dshHome ?? runtimeHome();
   try {
-    const path8 = join13(home, ".env");
+    const path8 = join14(home, ".env");
     if (!existsSync12(path8)) return out;
     for (const line of readFileSync15(path8, "utf8").split(/\r?\n/)) {
       const name4 = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)?.[1];
@@ -8211,7 +8217,7 @@ var QuestionCallComponent = class {
 
 // src/plugins/silence.ts
 import { existsSync as existsSync13, readFileSync as readFileSync16, statSync as statSync3 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 import { parse as parseYaml3 } from "yaml";
 
 // src/plugins/render.ts
@@ -8435,7 +8441,7 @@ function answersIn(output) {
 // src/plugins/config-edit.ts
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync14, readFileSync as readFileSync18 } from "fs";
-import { delimiter as delimiter3, join as join15 } from "path";
+import { delimiter as delimiter3, join as join16 } from "path";
 var TERMINAL_EDITORS = /* @__PURE__ */ new Set([
   "vi",
   "vim",
@@ -8462,7 +8468,7 @@ var TERMINAL_EDITORS = /* @__PURE__ */ new Set([
 ]);
 var GUI_EDITORS = ["kate", "kwrite", "gedit", "xed", "mousepad", "pluma", "code", "codium", "subl", "zed"];
 function configFiles(home, exists2 = existsSync14) {
-  return [join15(home, "settings.yaml"), configReadPath(home)].filter((p) => exists2(p));
+  return [join16(home, "settings.yaml"), configReadPath(home)].filter((p) => exists2(p));
 }
 function baseName(command) {
   return command.split(/[\\/]/).pop()?.replace(/\.exe$/i, "") ?? command;
@@ -8476,7 +8482,7 @@ function onPath(command, env, exists2) {
   if (/[\\/]/.test(command)) return exists2(command);
   const dirs = (env.PATH ?? "").split(delimiter3).filter((d) => d !== "");
   const names = process.platform === "win32" ? [command, `${command}.exe`, `${command}.cmd`] : [command];
-  return dirs.some((dir) => names.some((name4) => exists2(join15(dir, name4))));
+  return dirs.some((dir) => names.some((name4) => exists2(join16(dir, name4))));
 }
 function editorFromBruineJson(home) {
   try {
@@ -8639,13 +8645,13 @@ async function stopTask(services, agent, sessionId, name4) {
 
 // src/plugins/verify.ts
 import { existsSync as existsSync15, readFileSync as readFileSync19 } from "fs";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function verificationPlan(cwd) {
-  const packagePath = join16(cwd, "package.json");
+  const packagePath = join17(cwd, "package.json");
   if (existsSync15(packagePath)) {
     try {
       const doc = JSON.parse(readFileSync19(packagePath, "utf8"));
-      const manager = doc.packageManager?.split("@")[0] ?? (existsSync15(join16(cwd, "pnpm-lock.yaml")) ? "pnpm" : existsSync15(join16(cwd, "yarn.lock")) ? "yarn" : "npm");
+      const manager = doc.packageManager?.split("@")[0] ?? (existsSync15(join17(cwd, "pnpm-lock.yaml")) ? "pnpm" : existsSync15(join17(cwd, "yarn.lock")) ? "yarn" : "npm");
       const cli = ["pnpm", "yarn", "bun", "npm"].includes(manager) ? manager : "npm";
       const checks = [];
       if (typeof doc.scripts?.typecheck === "string") checks.push({ label: "Typecheck", command: `${cli} run typecheck` });
@@ -8655,8 +8661,8 @@ function verificationPlan(cwd) {
       return [];
     }
   }
-  if (existsSync15(join16(cwd, "Cargo.toml"))) return [{ label: "Tests", command: "cargo test" }];
-  if (existsSync15(join16(cwd, "go.mod"))) return [{ label: "Tests", command: "go test ./..." }];
+  if (existsSync15(join17(cwd, "Cargo.toml"))) return [{ label: "Tests", command: "cargo test" }];
+  if (existsSync15(join17(cwd, "go.mod"))) return [{ label: "Tests", command: "go test ./..." }];
   return [];
 }
 async function runVerification(cwd, run = (command, dir) => runShell(command, dir)) {
@@ -8675,7 +8681,7 @@ ${formatShell(check.command, result)}`)
 }
 
 // src/plugins/repl.ts
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 
 // src/image/attach.ts
 function attachFailureNotice(failures) {
@@ -9056,7 +9062,7 @@ async function runRepl(ctx, exit) {
     void sendWithImages(text, images);
   };
   const flush = (session) => sessions.flush(session);
-  const skillsDir = join17(runtimeHome(), "skills");
+  const skillsDir = join18(runtimeHome(), "skills");
   let skillNames = [];
   const refreshSkillNames = () => {
     void availableSkillNames(skillsDir, process.cwd()).then((names) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziamana/bruine",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Interactive terminal coding agent that runs your own models, local or OpenAI-compatible",
   "type": "module",
   "license": "MIT",