aiden-runtime 4.9.1 → 4.9.3

package/dist/core/v4/update/executeInstall.js

@@ -54,6 +54,8 @@ const node_os_1 = __importDefault(require("node:os"));
 const depWarningFilter_1 = require("./depWarningFilter");
 const platformInstructions_1 = require("./platformInstructions");
 const progressBar_1 = require("../../../cli/v4/ui/progressBar");
+const spawnCommand_1 = require("../util/spawnCommand");
+const recoveryScript_1 = require("./recoveryScript");
 /** 90 s wall-clock cap. Generous on cold caches / slow networks. */
 exports.INSTALL_TIMEOUT_MS = 90000;
 const DEFAULT_PACKAGE_SPEC = 'aiden-runtime@latest';
@@ -76,29 +78,38 @@ async function executeInstall(opts = {}) {
     const onPhase = opts.onPhase ?? ((_p) => { });
     return new Promise((resolve) => {
         const args = ['install', '-g', packageSpec];
-        // v4.8.1 Slice 2 — drop `shell: true`. Node 20+ emits
-        // `DeprecationWarning: Passing args to a child process with shell
-        // option true can lead to security vulnerabilities` whenever
-        // shell:true is paired with an args array. We don't need the
-        // shell either — on Windows we spawn `npm.cmd` explicitly (the
-        // shim that PATHEXT would otherwise resolve to); on POSIX we
-        // spawn `npm` directly. No user input flows into argv on either
-        // path so the prior shell-resolution wasn't load-bearing.
-        const cmd = platform === 'win32' ? 'npm.cmd' : 'npm';
-        const spawnOpts = {
-            stdio: ['ignore', 'pipe', 'pipe'],
-        };
+        // v4.9.2 — route through the shared spawnCommand helper. On
+        // Windows it wraps `npm.cmd` through `cmd.exe /d /s /c` with
+        // escaped args (no shell:true → no argument injection; no plain
+        // .cmd spawn → no Node 20+ EINVAL). On Unix it's a direct spawn.
         onPhase('spawning');
         let child;
         try {
-            child = spawn(cmd, args, spawnOpts);
+            const r = (0, spawnCommand_1.spawnCommand)('npm', args, {
+                stdio: ['ignore', 'pipe', 'pipe'],
+                platform,
+                spawnImpl: spawn,
+            });
+            child = r.child;
         }
         catch (err) {
-            resolve({
-                success: false,
-                error: `Could not launch npm: ${err.message}. ` +
-                    `Run \`npm install -g aiden-runtime@latest\` manually.`,
-            });
+            // Synchronous spawn failure (helper crash, cmd.exe missing,
+            // invalid argv). Drop a recovery script the user can run by
+            // hand and report its path.
+            (async () => {
+                let recoveryPath = null;
+                try {
+                    recoveryPath = await (0, recoveryScript_1.writeRecoveryScript)({ platform, home, packageSpec });
+                }
+                catch { /* best-effort */ }
+                resolve({
+                    success: false,
+                    error: `Could not launch npm: ${err.message}. ` +
+                        (recoveryPath
+                            ? `A recovery script was written to ${recoveryPath} — run it to complete the install.`
+                            : `Run \`npm install -g ${packageSpec}\` manually.`),
+                });
+            })();
             return;
         }
         let stdoutBuf = '';

package/dist/core/v4/update/recoveryScript.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/update/recoveryScript.ts — v4.9.2 SLICE 1.
+ *
+ * Fallback when spawnCommand() itself fails to launch npm (synchronous
+ * throw — invalid argv shape, cmd.exe missing, etc.). We write a small
+ * shell script the user can run by hand to complete the install and
+ * report its path in the failure message. Honest: we tried, we couldn't
+ * launch, here's the exact thing to type.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeRecoveryScript = writeRecoveryScript;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Write a recovery script under `~/.aiden/`:
+ *   - Windows → update-recovery.ps1 (PowerShell)
+ *   - Unix    → update-recovery.sh  (bash, +x)
+ *
+ * Returns the absolute path written. Creates `~/.aiden/` if missing.
+ */
+async function writeRecoveryScript(input) {
+    const aidenDir = node_path_1.default.join(input.home, '.aiden');
+    await node_fs_1.promises.mkdir(aidenDir, { recursive: true });
+    if (input.platform === 'win32') {
+        const p = node_path_1.default.join(aidenDir, 'update-recovery.ps1');
+        const body = [
+            '# Aiden v4.9.2 — install-recovery fallback.',
+            '# Run from PowerShell (right-click → "Run with PowerShell" if associated).',
+            `Write-Host "Installing ${input.packageSpec} via npm..."`,
+            `npm install -g ${input.packageSpec}`,
+            'if ($LASTEXITCODE -ne 0) {',
+            '  Write-Host "If you saw EPERM/EACCES, retry from an Administrator PowerShell."',
+            '  exit $LASTEXITCODE',
+            '}',
+            `Write-Host "Done. Type 'aiden' to launch the new version."`,
+            '',
+        ].join('\r\n');
+        await node_fs_1.promises.writeFile(p, body, 'utf8');
+        return p;
+    }
+    const p = node_path_1.default.join(aidenDir, 'update-recovery.sh');
+    const body = [
+        '#!/usr/bin/env bash',
+        '# Aiden v4.9.2 — install-recovery fallback.',
+        'set -e',
+        `echo "Installing ${input.packageSpec} via npm..."`,
+        `if ! npm install -g ${input.packageSpec}; then`,
+        '  echo "Install failed. If you saw EACCES, retry with: sudo $0"',
+        '  exit 1',
+        'fi',
+        'echo "Done. Type \\"aiden\\" to launch the new version."',
+        '',
+    ].join('\n');
+    await node_fs_1.promises.writeFile(p, body, 'utf8');
+    try {
+        await node_fs_1.promises.chmod(p, 0o755);
+    }
+    catch { /* noop on platforms that don't support chmod */ }
+    return p;
+}

package/dist/core/v4/util/spawnCommand.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/util/spawnCommand.ts — v4.9.2 SLICE 1.
+ *
+ * Cross-platform spawn helper that survives the Node 18.20+ / 20+
+ * Windows EINVAL trap on `.cmd` / `.bat` shims. Two surfaces consume it:
+ *   - core/v4/update/executeInstall.ts  (spawns `npm install -g …`)
+ *   - core/v4/mcp/transport.ts          (spawns user-configured MCP servers,
+ *                                        typically `npx -y <server>`)
+ *
+ * Both previously called `spawn(cmd, args, { shell: false })` directly,
+ * which throws EINVAL on Windows when `cmd` resolves to `.cmd` / `.bat`.
+ * The naive fix — `shell: true` — would silently permit argument
+ * injection through MCP server config (user-supplied command line),
+ * so we route Windows shims through `cmd.exe /d /s /c <quoted>` with
+ * `windowsVerbatimArguments: true` and manual cmd-meta escaping.
+ *
+ * Returns the raw ChildProcess (not a callback abstraction): both
+ * consumers need the full duplex surface (stdin write, stdout/stderr
+ * stream, exit + error events, SIGTERM → SIGKILL escalation). The
+ * helper's value is resolving the EINVAL trap, not abstracting I/O.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCommand = resolveCommand;
+exports.escapeCmdArg = escapeCmdArg;
+exports.spawnCommand = spawnCommand;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Resolve a bare command name to an absolute disk path via PATH lookup.
+ * On Windows tries PATHEXT order (.cmd, .exe, .bat, .ps1). If `command`
+ * is already absolute or contains a path separator, returns it verbatim
+ * (still detects shim suffix). Returns null when no match — caller can
+ * still spawn the bare name and let node:child_process emit ENOENT.
+ *
+ * Implemented in pure Node (no `where` subprocess — that would face
+ * the same spawn problem).
+ */
+function resolveCommand(command, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    const env = opts.env ?? process.env;
+    const isWin = platform === 'win32';
+    // Already absolute or has a separator → trust the caller, just detect suffix.
+    if (node_path_1.default.isAbsolute(command) || command.includes('/') || command.includes('\\')) {
+        if (!(0, node_fs_1.existsSync)(command))
+            return null;
+        return { path: command, isShim: isWin && /\.(cmd|bat)$/i.test(command) };
+    }
+    const pathDirs = (env.PATH ?? env.Path ?? '').split(node_path_1.default.delimiter).filter(Boolean);
+    const pathExts = isWin
+        ? (env.PATHEXT ?? '.CMD;.EXE;.BAT;.COM').split(';').filter(Boolean)
+        : [''];
+    for (const dir of pathDirs) {
+        for (const ext of pathExts) {
+            const candidate = node_path_1.default.join(dir, command + ext);
+            try {
+                if ((0, node_fs_1.existsSync)(candidate) && (0, node_fs_1.statSync)(candidate).isFile()) {
+                    return { path: candidate, isShim: isWin && /\.(cmd|bat)$/i.test(candidate) };
+                }
+            }
+            catch { /* permissions / ENOENT — keep walking */ }
+        }
+    }
+    return null;
+}
+/**
+ * Escape an argv element for cmd.exe /c invocation. Wraps in double
+ * quotes if the value contains whitespace or any cmd metachar (& | <
+ * > ( ) @ ^ "), doubling any embedded quotes. Used together with
+ * `windowsVerbatimArguments: true` so Node passes our quoted string
+ * straight through to cmd.exe without its own (broken-for-.cmd)
+ * quoting heuristics.
+ *
+ * Reference: cross-spawn / npm-cli use the same pattern; Node 20+
+ * refuses to do this for us when spawning .cmd files because the
+ * heuristics were the source of CVE-2024-27980.
+ */
+function escapeCmdArg(s) {
+    if (s.length === 0)
+        return '""';
+    // Conservative: any whitespace OR cmd metachar triggers quoting.
+    if (!/[\s&|<>()@^"]/.test(s))
+        return s;
+    // Double internal quotes (cmd.exe convention) and wrap.
+    return '"' + s.replace(/"/g, '""') + '"';
+}
+/**
+ * Cross-platform spawn. See file header for the why.
+ *
+ *   - Unix              → spawn(cmd, args, { shell:false, ...opts })
+ *   - Win + .cmd/.bat   → spawn('cmd.exe', ['/d','/s','/c', quoted], {
+ *                            shell:false,
+ *                            windowsVerbatimArguments: true, ...opts })
+ *   - Win + .exe / abs  → spawn(cmd, args, { shell:false, ...opts })
+ *   - Win + bare name   → resolveCommand() picks; bucket by suffix.
+ *
+ * Never throws synchronously for "not found" — emits 'error' on the
+ * returned ChildProcess like plain spawn() does. May throw synchronously
+ * for the same reasons spawn() itself does (e.g. invalid argv types).
+ */
+function spawnCommand(command, args, opts = {}) {
+    const spawn = opts.spawnImpl ?? node_child_process_1.spawn;
+    const platform = opts.platform ?? process.platform;
+    const isWin = platform === 'win32';
+    const baseOpts = {
+        stdio: opts.stdio ?? ['pipe', 'pipe', 'pipe'],
+        env: opts.env,
+        cwd: opts.cwd,
+        shell: false,
+    };
+    if (!isWin) {
+        const child = spawn(command, args, baseOpts);
+        return { child, resolvedCmd: command, resolvedArgs: args, viaCmdExe: false };
+    }
+    // Windows: detect shim suffix.
+    const resolved = resolveCommand(command, { platform, env: opts.env });
+    const isShim = resolved
+        ? resolved.isShim
+        : /\.(cmd|bat)$/i.test(command); // unresolved but caller passed .cmd explicitly
+    if (!isShim) {
+        const child = spawn(command, args, baseOpts);
+        return { child, resolvedCmd: command, resolvedArgs: args, viaCmdExe: false };
+    }
+    // Wrap through cmd.exe /d /s /c. Pass resolved path if we have it so
+    // we don't re-walk PATH; otherwise let cmd.exe resolve the bare name.
+    //
+    // cmd.exe /s rule: it strips a single pair of outer quotes from the
+    // command line and parses the remainder. We therefore wrap the entire
+    // escaped argv sequence in an OUTER quote pair on top of each
+    // individual arg's escapeCmdArg quoting. Otherwise a command path
+    // containing whitespace (e.g. "C:\Program Files\nodejs\npm.CMD")
+    // gets its inner quotes stripped, breaking on the first space.
+    const target = resolved?.path ?? command;
+    const line = '"' + [target, ...args].map(escapeCmdArg).join(' ') + '"';
+    const cmdArgs = ['/d', '/s', '/c', line];
+    const child = spawn('cmd.exe', cmdArgs, {
+        ...baseOpts,
+        windowsVerbatimArguments: true,
+    });
+    return { child, resolvedCmd: 'cmd.exe', resolvedArgs: cmdArgs, viaCmdExe: true };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiden-runtime",
-  "version": "4.9.1",
+  "version": "4.9.3",
   "publishConfig": {
     "access": "public"
   },

package/themes/default.yaml

@@ -1,52 +1,52 @@
-# Aiden Theme — Default
-# This is the bundled default theme. To customise, copy this file to
-# ~/.aiden/theme.yaml and edit any field. Aiden hot-reloads on save.
-# Bad values warn + fall back per-field; the theme system never crashes
-# Aiden on a typo. Slash commands: /theme reload, /theme reset, /theme edit.
-
-name: "default"
-description: "Aiden's signature brand-orange theme on a dark terminal."
-
-# ── Colors — hex strings ───────────────────────────────────────────────
-colors:
-  brand:
-    primary: "#FF6B35"   # signature brand orange
-    muted:   "#7a3119"   # 30%-luma brand for borders + dim brand surfaces
-  content:
-    primary:   "#e8ebf0" # brightest text — replies, headings on dark bg
-    secondary: "#b8a89a" # warm muted — gutter, secondary detail
-    tertiary:  "#6a6a6a" # captions, deprecated rows, dim status
-  semantic:
-    success: "#7fc28b"
-    warn:    "#e0a040"
-    error:   "#e05a5a"
-    info:    "#7da7c7"
-  metrics:
-    model:     "#9cdcfe" # status bar — model name (cyan)
-    tokens:    "#e0a040" # status bar — token ratio (amber)
-    turnCount: "#a48be0" # status bar — turn counter (purple)
-    timer:     "#7fc28b" # status bar — per-turn elapsed (teal/green)
-  surface:
-    bg:       "#0d0e10"
-    elevated: "#16181b"
-    border:   "#2a2a2a"
-    divider:  "#3a3a3a"
-
-# ── Glyphs ─────────────────────────────────────────────────────────────
-glyphs:
-  panel:
-    bar: "│"           # left-edge bar on /help, approval, Aiden reply chrome
-  trail:
-    gutter: "┊"        # tool-trail row gutter
-  status:
-    triangle: "▲"      # user-prompt prefix + brand mark
-    dot:      "●"
-    dotOpen:  "○"
-    sep:      "│"      # status footer column separator
-    timer:    "⌛"
-  bar:
-    filled: "●"        # context-bar filled cell
-    empty:  "○"        # context-bar empty cell
-  shimmer:
-    block: "█"         # activity-indicator sliding block
-    track: "─"         # activity-indicator track
+# Aiden Theme — Default
+# This is the bundled default theme. To customise, copy this file to
+# ~/.aiden/theme.yaml and edit any field. Aiden hot-reloads on save.
+# Bad values warn + fall back per-field; the theme system never crashes
+# Aiden on a typo. Slash commands: /theme reload, /theme reset, /theme edit.
+
+name: "default"
+description: "Aiden's signature brand-orange theme on a dark terminal."
+
+# ── Colors — hex strings ───────────────────────────────────────────────
+colors:
+  brand:
+    primary: "#FF6B35"   # signature brand orange
+    muted:   "#7a3119"   # 30%-luma brand for borders + dim brand surfaces
+  content:
+    primary:   "#e8ebf0" # brightest text — replies, headings on dark bg
+    secondary: "#b8a89a" # warm muted — gutter, secondary detail
+    tertiary:  "#6a6a6a" # captions, deprecated rows, dim status
+  semantic:
+    success: "#7fc28b"
+    warn:    "#e0a040"
+    error:   "#e05a5a"
+    info:    "#7da7c7"
+  metrics:
+    model:     "#9cdcfe" # status bar — model name (cyan)
+    tokens:    "#e0a040" # status bar — token ratio (amber)
+    turnCount: "#a48be0" # status bar — turn counter (purple)
+    timer:     "#7fc28b" # status bar — per-turn elapsed (teal/green)
+  surface:
+    bg:       "#0d0e10"
+    elevated: "#16181b"
+    border:   "#2a2a2a"
+    divider:  "#3a3a3a"
+
+# ── Glyphs ─────────────────────────────────────────────────────────────
+glyphs:
+  panel:
+    bar: "│"           # left-edge bar on /help, approval, Aiden reply chrome
+  trail:
+    gutter: "┊"        # tool-trail row gutter
+  status:
+    triangle: "▲"      # user-prompt prefix + brand mark
+    dot:      "●"
+    dotOpen:  "○"
+    sep:      "│"      # status footer column separator
+    timer:    "⌛"
+  bar:
+    filled: "●"        # context-bar filled cell
+    empty:  "○"        # context-bar empty cell
+  shimmer:
+    block: "█"         # activity-indicator sliding block
+    track: "─"         # activity-indicator track

package/themes/dracula.yaml

@@ -1,32 +1,32 @@
-# Aiden Theme — Dracula
-# Palette inspired by the public Dracula theme by Zeno Rocha
-# (draculatheme.com). High-contrast dark with vivid accents, widely
-# re-implemented across editors and terminals. Hex values are the
-# public palette. Glyphs unchanged from default.
-
-name: "dracula"
-description: "Inspired by Dracula (draculatheme.com). High-contrast dark with vivid accents."
-
-colors:
-  brand:
-    primary: "#FF79C6"
-    muted:   "#BD7AA3"
-  content:
-    primary:   "#F8F8F2"
-    secondary: "#BFBFBF"
-    tertiary:  "#6272A4"
-  semantic:
-    success: "#50FA7B"
-    warn:    "#F1FA8C"
-    error:   "#FF5555"
-    info:    "#8BE9FD"
-  metrics:
-    model:     "#8BE9FD"
-    tokens:    "#F1FA8C"
-    timer:     "#8BE9FD"
-    turnCount: "#BD93F9"
-  surface:
-    bg:       "#282A36"
-    elevated: "#21222C"
-    border:   "#44475A"
-    divider:  "#1E1F29"
+# Aiden Theme — Dracula
+# Palette inspired by the public Dracula theme by Zeno Rocha
+# (draculatheme.com). High-contrast dark with vivid accents, widely
+# re-implemented across editors and terminals. Hex values are the
+# public palette. Glyphs unchanged from default.
+
+name: "dracula"
+description: "Inspired by Dracula (draculatheme.com). High-contrast dark with vivid accents."
+
+colors:
+  brand:
+    primary: "#FF79C6"
+    muted:   "#BD7AA3"
+  content:
+    primary:   "#F8F8F2"
+    secondary: "#BFBFBF"
+    tertiary:  "#6272A4"
+  semantic:
+    success: "#50FA7B"
+    warn:    "#F1FA8C"
+    error:   "#FF5555"
+    info:    "#8BE9FD"
+  metrics:
+    model:     "#8BE9FD"
+    tokens:    "#F1FA8C"
+    timer:     "#8BE9FD"
+    turnCount: "#BD93F9"
+  surface:
+    bg:       "#282A36"
+    elevated: "#21222C"
+    border:   "#44475A"
+    divider:  "#1E1F29"

package/themes/light.yaml

@@ -1,32 +1,32 @@
-# Aiden Theme — Light
-# Dark text on light terminal background. Brand orange retained as the
-# single warm accent. For users on light-theme terminals (Apple Terminal
-# default profile, Windows Terminal Light, light VS Code integrated, etc.).
-# Glyphs unchanged from default.
-
-name: "light"
-description: "Light terminal. Dark text on light background. Brand orange accent."
-
-colors:
-  brand:
-    primary: "#D9531E"
-    muted:   "#A03D0E"
-  content:
-    primary:   "#1A1A1A"
-    secondary: "#555555"
-    tertiary:  "#888888"
-  semantic:
-    success: "#2E8B2E"
-    warn:    "#B8860B"
-    error:   "#C8202C"
-    info:    "#1F5FA8"
-  metrics:
-    model:     "#1F5FA8"
-    tokens:    "#B8860B"
-    timer:     "#1F5FA8"
-    turnCount: "#7B3FBF"
-  surface:
-    bg:       "#F8F8F8"
-    elevated: "#EFEFEF"
-    border:   "#D0D0D0"
-    divider:  "#E5E5E5"
+# Aiden Theme — Light
+# Dark text on light terminal background. Brand orange retained as the
+# single warm accent. For users on light-theme terminals (Apple Terminal
+# default profile, Windows Terminal Light, light VS Code integrated, etc.).
+# Glyphs unchanged from default.
+
+name: "light"
+description: "Light terminal. Dark text on light background. Brand orange accent."
+
+colors:
+  brand:
+    primary: "#D9531E"
+    muted:   "#A03D0E"
+  content:
+    primary:   "#1A1A1A"
+    secondary: "#555555"
+    tertiary:  "#888888"
+  semantic:
+    success: "#2E8B2E"
+    warn:    "#B8860B"
+    error:   "#C8202C"
+    info:    "#1F5FA8"
+  metrics:
+    model:     "#1F5FA8"
+    tokens:    "#B8860B"
+    timer:     "#1F5FA8"
+    turnCount: "#7B3FBF"
+  surface:
+    bg:       "#F8F8F8"
+    elevated: "#EFEFEF"
+    border:   "#D0D0D0"
+    divider:  "#E5E5E5"

package/themes/monochrome.yaml

@@ -1,31 +1,31 @@
-# Aiden Theme — Monochrome
-# Pure greyscale. Two semantic accents (error red + success green) are
-# retained for readability of state signals. Everything else greyscale.
-# Glyphs unchanged from default — themes change colors, not shapes.
-
-name: "monochrome"
-description: "Pure greyscale. Semantic accents retained for error/success readability."
-
-colors:
-  brand:
-    primary: "#C8CCD4"
-    muted:   "#888888"
-  content:
-    primary:   "#C8CCD4"
-    secondary: "#888888"
-    tertiary:  "#555555"
-  semantic:
-    success: "#7DC97D"
-    warn:    "#999999"
-    error:   "#D97777"
-    info:    "#AAAAAA"
-  metrics:
-    model:     "#AAAAAA"
-    tokens:    "#AAAAAA"
-    timer:     "#888888"
-    turnCount: "#BBBBBB"
-  surface:
-    bg:       "#0A0A0A"
-    elevated: "#1A1A1A"
-    border:   "#444444"
-    divider:  "#3A3A3A"
+# Aiden Theme — Monochrome
+# Pure greyscale. Two semantic accents (error red + success green) are
+# retained for readability of state signals. Everything else greyscale.
+# Glyphs unchanged from default — themes change colors, not shapes.
+
+name: "monochrome"
+description: "Pure greyscale. Semantic accents retained for error/success readability."
+
+colors:
+  brand:
+    primary: "#C8CCD4"
+    muted:   "#888888"
+  content:
+    primary:   "#C8CCD4"
+    secondary: "#888888"
+    tertiary:  "#555555"
+  semantic:
+    success: "#7DC97D"
+    warn:    "#999999"
+    error:   "#D97777"
+    info:    "#AAAAAA"
+  metrics:
+    model:     "#AAAAAA"
+    tokens:    "#AAAAAA"
+    timer:     "#888888"
+    turnCount: "#BBBBBB"
+  surface:
+    bg:       "#0A0A0A"
+    elevated: "#1A1A1A"
+    border:   "#444444"
+    divider:  "#3A3A3A"

package/themes/tokyo-night.yaml

@@ -1,32 +1,32 @@
-# Aiden Theme — Tokyo Night
-# Palette inspired by the public Tokyo Night theme by Folke Lemaitre
-# (folke/tokyonight.nvim). Cool nocturnal palette widely re-implemented
-# across editors and terminals. Hex values are the public palette.
-# Glyphs unchanged from default.
-
-name: "tokyo-night"
-description: "Inspired by Tokyo Night (folke/tokyonight.nvim). Cool nocturnal palette."
-
-colors:
-  brand:
-    primary: "#7AA2F7"
-    muted:   "#3D59A1"
-  content:
-    primary:   "#C0CAF5"
-    secondary: "#9AA5CE"
-    tertiary:  "#565F89"
-  semantic:
-    success: "#9ECE6A"
-    warn:    "#E0AF68"
-    error:   "#F7768E"
-    info:    "#7DCFFF"
-  metrics:
-    model:     "#7DCFFF"
-    tokens:    "#E0AF68"
-    timer:     "#7DCFFF"
-    turnCount: "#BB9AF7"
-  surface:
-    bg:       "#1A1B26"
-    elevated: "#24283B"
-    border:   "#3B4261"
-    divider:  "#1F2335"
+# Aiden Theme — Tokyo Night
+# Palette inspired by the public Tokyo Night theme by Folke Lemaitre
+# (folke/tokyonight.nvim). Cool nocturnal palette widely re-implemented
+# across editors and terminals. Hex values are the public palette.
+# Glyphs unchanged from default.
+
+name: "tokyo-night"
+description: "Inspired by Tokyo Night (folke/tokyonight.nvim). Cool nocturnal palette."
+
+colors:
+  brand:
+    primary: "#7AA2F7"
+    muted:   "#3D59A1"
+  content:
+    primary:   "#C0CAF5"
+    secondary: "#9AA5CE"
+    tertiary:  "#565F89"
+  semantic:
+    success: "#9ECE6A"
+    warn:    "#E0AF68"
+    error:   "#F7768E"
+    info:    "#7DCFFF"
+  metrics:
+    model:     "#7DCFFF"
+    tokens:    "#E0AF68"
+    timer:     "#7DCFFF"
+    turnCount: "#BB9AF7"
+  surface:
+    bg:       "#1A1B26"
+    elevated: "#24283B"
+    border:   "#3B4261"
+    divider:  "#1F2335"