context-mode 2.0.0-next.7 → 2.0.0-next.8

package/server.mjs

@@ -6,7 +6,7 @@ var __export = (target, all) => {
 
 // src/entries/server.ts
 import { randomUUID } from "node:crypto";
-import { existsSync as existsSync20, rmSync as rmSync12 } from "node:fs";
+import { existsSync as existsSync20, rmSync as rmSync11 } from "node:fs";
 import { join as join20 } from "node:path";
 
 // node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
@@ -303,10 +303,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path4) {
-  if (!path4)
+function getElementAtPath(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -646,11 +646,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path4, issues) {
+function prefixIssues(path5, issues) {
   return issues.map((iss) => {
     var _a5;
     (_a5 = iss).path ?? (_a5.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -1111,16 +1111,16 @@ function flattenError(error42, mapper = (issue4) => issue4.message) {
 }
 function formatError(error42, mapper = (issue4) => issue4.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error43, path4 = []) => {
+  const processError = (error43, path5 = []) => {
     for (const issue4 of error43.issues) {
       if (issue4.code === "invalid_union" && issue4.errors.length) {
-        issue4.errors.map((issues) => processError({ issues }, [...path4, ...issue4.path]));
+        issue4.errors.map((issues) => processError({ issues }, [...path5, ...issue4.path]));
       } else if (issue4.code === "invalid_key") {
-        processError({ issues: issue4.issues }, [...path4, ...issue4.path]);
+        processError({ issues: issue4.issues }, [...path5, ...issue4.path]);
       } else if (issue4.code === "invalid_element") {
-        processError({ issues: issue4.issues }, [...path4, ...issue4.path]);
+        processError({ issues: issue4.issues }, [...path5, ...issue4.path]);
       } else {
-        const fullpath = [...path4, ...issue4.path];
+        const fullpath = [...path5, ...issue4.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue4));
         } else {
@@ -2340,8 +2340,8 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
     }
     const input = payload.value;
     const isDate = input instanceof Date;
-    const isValidDate = isDate && !Number.isNaN(input.getTime());
-    if (isValidDate)
+    const isValidDate2 = isDate && !Number.isNaN(input.getTime());
+    if (isValidDate2)
       return payload;
     payload.issues.push({
       expected: "date",
@@ -7884,10 +7884,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path4) {
-  if (!path4)
+function getElementAtPath2(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -8227,11 +8227,11 @@ function explicitlyAborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path4, issues) {
+function prefixIssues2(path5, issues) {
   return issues.map((iss) => {
     var _a5;
     (_a5 = iss).path ?? (_a5.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -8689,16 +8689,16 @@ function flattenError2(error42, mapper = (issue4) => issue4.message) {
 }
 function formatError2(error42, mapper = (issue4) => issue4.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error43, path4 = []) => {
+  const processError = (error43, path5 = []) => {
     for (const issue4 of error43.issues) {
       if (issue4.code === "invalid_union" && issue4.errors.length) {
-        issue4.errors.map((issues) => processError({ issues }, [...path4, ...issue4.path]));
+        issue4.errors.map((issues) => processError({ issues }, [...path5, ...issue4.path]));
       } else if (issue4.code === "invalid_key") {
-        processError({ issues: issue4.issues }, [...path4, ...issue4.path]);
+        processError({ issues: issue4.issues }, [...path5, ...issue4.path]);
       } else if (issue4.code === "invalid_element") {
-        processError({ issues: issue4.issues }, [...path4, ...issue4.path]);
+        processError({ issues: issue4.issues }, [...path5, ...issue4.path]);
       } else {
-        const fullpath = [...path4, ...issue4.path];
+        const fullpath = [...path5, ...issue4.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue4));
         } else {
@@ -16914,9 +16914,9 @@ var rev2026Codec = {
     });
     const parsed = buildSchemas2026().RequestMetaEnvelopeSchema.safeParse(meta3);
     if (!parsed.success) for (const issue4 of parsed.error.issues) {
-      const path4 = issue4.path.map(String);
-      const key = path4.length > 0 ? path4.join(".") : "_meta";
-      if (path4.length === 1 && issues.some((existing) => existing.key === key && existing.problem === "missing")) continue;
+      const path5 = issue4.path.map(String);
+      const key = path5.length > 0 ? path5.join(".") : "_meta";
+      if (path5.length === 1 && issues.some((existing) => existing.key === key && existing.problem === "missing")) continue;
       issues.push({
         key,
         problem: issue4.message
@@ -17243,29 +17243,29 @@ var PERMITTED_X_MCP_HEADER_TYPES = /* @__PURE__ */ new Set([
 function scanXMcpHeaderDeclarations(inputSchema) {
   const declarations = [];
   const seenLower = /* @__PURE__ */ new Map();
-  const visit2 = (node3, path4, reachable) => {
+  const visit2 = (node3, path5, reachable) => {
     if (node3 === null || typeof node3 !== "object") return void 0;
     const schema = node3;
     if (X_MCP_HEADER_KEY in schema) {
-      if (!reachable || path4.length === 0) return `${pathName(path4)}: x-mcp-header is only permitted on properties statically reachable via a chain of 'properties' keys (not under items, additionalProperties, oneOf/anyOf/allOf/not, if/then/else, or $ref)`;
+      if (!reachable || path5.length === 0) return `${pathName(path5)}: x-mcp-header is only permitted on properties statically reachable via a chain of 'properties' keys (not under items, additionalProperties, oneOf/anyOf/allOf/not, if/then/else, or $ref)`;
       const raw = schema[X_MCP_HEADER_KEY];
-      if (typeof raw !== "string" || raw.length === 0) return `${pathName(path4)}: x-mcp-header MUST be a non-empty string`;
-      if (!RFC9110_TOKEN.test(raw)) return `${pathName(path4)}: x-mcp-header '${raw}' is not a valid RFC 9110 token (no spaces, control characters or HTTP delimiters)`;
+      if (typeof raw !== "string" || raw.length === 0) return `${pathName(path5)}: x-mcp-header MUST be a non-empty string`;
+      if (!RFC9110_TOKEN.test(raw)) return `${pathName(path5)}: x-mcp-header '${raw}' is not a valid RFC 9110 token (no spaces, control characters or HTTP delimiters)`;
       const type = typeof schema.type === "string" ? schema.type : void 0;
-      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) return `${pathName(path4)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
+      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) return `${pathName(path5)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
       const lower = raw.toLowerCase();
       const prior = seenLower.get(lower);
       if (prior !== void 0) return `x-mcp-header '${raw}' is not case-insensitively unique (also declared as '${prior}')`;
       seenLower.set(lower, raw);
       declarations.push({
-        path: path4,
+        path: path5,
         headerName: raw,
         type
       });
     }
     const properties = schema.properties;
     if (properties !== null && typeof properties === "object") for (const [key, child] of Object.entries(properties)) {
-      const fault$1 = visit2(child, [...path4, key], reachable);
+      const fault$1 = visit2(child, [...path5, key], reachable);
       if (fault$1 !== void 0) return fault$1;
     }
     for (const k of NON_REACHABLE_SUBSCHEMA_KEYWORDS) {
@@ -17273,7 +17273,7 @@ function scanXMcpHeaderDeclarations(inputSchema) {
       if (sub === void 0) continue;
       const branches = Array.isArray(sub) ? sub : sub !== null && typeof sub === "object" && OBJECT_VALUED_SUBSCHEMA_KEYWORDS.has(k) ? Object.values(sub) : [sub];
       for (const branch of branches) {
-        const fault$1 = visit2(branch, [...path4, `<${k}>`], false);
+        const fault$1 = visit2(branch, [...path5, `<${k}>`], false);
         if (fault$1 !== void 0) return fault$1;
       }
     }
@@ -17313,8 +17313,8 @@ var OBJECT_VALUED_SUBSCHEMA_KEYWORDS = /* @__PURE__ */ new Set([
   "$defs",
   "definitions"
 ]);
-function pathName(path4) {
-  return path4.length === 0 ? "<root>" : path4.join(".");
+function pathName(path5) {
+  return path5.length === 0 ? "<root>" : path5.join(".");
 }
 var HEADER_MISMATCH_ERROR_CODE = -32020;
 var INBOUND_VALIDATION_LADDER = [
@@ -17603,7 +17603,7 @@ var PROPERTY_KEYS_BY_TYPE = {
   array: shapeKeys([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema])
 };
 var SUPPORTED_STRING_FORMATS = new Set(StringSchemaSchema.shape.format.unwrap().options);
-function walkProperty(node3, path4, vendor, unsupported) {
+function walkProperty(node3, path5, vendor, unsupported) {
   if (!isJsonObject(node3)) return node3;
   const allowedKeys = typeof node3.type === "string" && Object.hasOwn(PROPERTY_KEYS_BY_TYPE, node3.type) ? PROPERTY_KEYS_BY_TYPE[node3.type] : void 0;
   if (allowedKeys === void 0) return node3;
@@ -17611,8 +17611,8 @@ function walkProperty(node3, path4, vendor, unsupported) {
   for (const [key, value] of Object.entries(node3)) if (allowedKeys.has(key) || isAnnotationOnlyJsonSchemaKeyword(key)) pruned[key] = value;
   else if (key === "pattern" && node3.type === "string" && typeof node3.format === "string") {
     if (!SUPPORTED_STRING_FORMATS.has(node3.format)) pruned[key] = value;
-    else if (typeof value !== "string" || !isLibraryFormatPattern(node3.format, value, vendor)) unsupported.push(`${path4}.${key}`);
-  } else unsupported.push(`${path4}.${key}`);
+    else if (typeof value !== "string" || !isLibraryFormatPattern(node3.format, value, vendor)) unsupported.push(`${path5}.${key}`);
+  } else unsupported.push(`${path5}.${key}`);
   return pruned;
 }
 function walkRequestedSchema(converted, vendor) {
@@ -17629,11 +17629,11 @@ function describeUnsupportedProperties(pruned, fallback) {
   const offenders = Object.entries(pruned.properties).filter(([, node3]) => !parseSchema(PrimitiveSchemaDefinitionSchema, node3).success).map(([name]) => `properties.${name}`);
   return offenders.length > 0 ? offenders.join(", ") : fallback;
 }
-function findDroppedConstraintPaths(original, parsed, path4 = "") {
-  if (Array.isArray(original) && Array.isArray(parsed)) return original.flatMap((item, index) => findDroppedConstraintPaths(item, parsed[index], `${path4}[${index}]`));
+function findDroppedConstraintPaths(original, parsed, path5 = "") {
+  if (Array.isArray(original) && Array.isArray(parsed)) return original.flatMap((item, index) => findDroppedConstraintPaths(item, parsed[index], `${path5}[${index}]`));
   if (!isJsonObject(original) || !isJsonObject(parsed)) return [];
   return Object.entries(original).flatMap(([key, value]) => {
-    const childPath = path4 ? `${path4}.${key}` : key;
+    const childPath = path5 ? `${path5}.${key}` : key;
     if (!Object.prototype.hasOwnProperty.call(parsed, key)) return isAnnotationOnlyJsonSchemaKeyword(key) ? [] : [childPath];
     return findDroppedConstraintPaths(value, parsed[key], childPath);
   });
@@ -20002,8 +20002,8 @@ var require_util = /* @__PURE__ */ __commonJSMin((exports) => {
   })(Type || (exports.Type = Type = {}));
   function getErrorPath(dataProp, dataPropType, jsPropertySyntax) {
     if (dataProp instanceof codegen_1.Name) {
-      const isNumber = dataPropType === Type.Num;
-      return jsPropertySyntax ? isNumber ? (0, codegen_1._)`"[" + ${dataProp} + "]"` : (0, codegen_1._)`"['" + ${dataProp} + "']"` : isNumber ? (0, codegen_1._)`"/" + ${dataProp}` : (0, codegen_1._)`"/" + ${dataProp}.replace(/~/g, "~0").replace(/\\//g, "~1")`;
+      const isNumber2 = dataPropType === Type.Num;
+      return jsPropertySyntax ? isNumber2 ? (0, codegen_1._)`"[" + ${dataProp} + "]"` : (0, codegen_1._)`"['" + ${dataProp} + "']"` : isNumber2 ? (0, codegen_1._)`"/" + ${dataProp}` : (0, codegen_1._)`"/" + ${dataProp}.replace(/~/g, "~0").replace(/\\//g, "~1")`;
     }
     return jsPropertySyntax ? (0, codegen_1.getProperty)(dataProp).toString() : "/" + escapeJsonPointer(dataProp);
   }
@@ -21721,8 +21721,8 @@ var require_utils = /* @__PURE__ */ __commonJSMin((exports, module) => {
     for (let i = 0; i < str.length; i++) if (str[i] === token) ind++;
     return ind;
   }
-  function removeDotSegments(path4) {
-    let input = path4;
+  function removeDotSegments(path5) {
+    let input = path5;
     const output = [];
     let nextSlash = -1;
     let len = 0;
@@ -21875,8 +21875,8 @@ var require_schemes = /* @__PURE__ */ __commonJSMin((exports, module) => {
       wsComponent.secure = void 0;
     }
     if (wsComponent.resourceName) {
-      const [path4, query] = wsComponent.resourceName.split("?");
-      wsComponent.path = path4 && path4 !== "/" ? path4 : void 0;
+      const [path5, query] = wsComponent.resourceName.split("?");
+      wsComponent.path = path5 && path5 !== "/" ? path5 : void 0;
       wsComponent.query = query;
       wsComponent.resourceName = void 0;
     }
@@ -28312,8 +28312,8 @@ var DECISION_SOURCE = "decision";
 var DECISION_USER_LABEL = "decision (user)";
 var RELEASE_REPO_URL = "https://github.com/mksglu/context-mode.git";
 var RELEASE_BRANCH = "release";
-var BUNDLE_SHA = true ? "f61b6973877b47851ac5938c46fee1399946289e" : void 0;
-var DOCTOR_CHECK_ORDER = Object.freeze(["D1", "D2", "D3", "D4", "D5", "D5b", "D6", "D7", "D8", "D9", "D10"]);
+var BUNDLE_SHA = true ? "4fb62aa646f6f53db6e655a59f4397d5ef78c0a4" : void 0;
+var DOCTOR_CHECK_ORDER = Object.freeze(["D1", "D2", "D3", "D4", "D5", "D5b", "D6", "D7", "D8", "D9", "D10", "D11"]);
 var DOCTOR_LABEL = Object.freeze({
   D1: "version",
   D2: "node",
@@ -28325,7 +28325,8 @@ var DOCTOR_LABEL = Object.freeze({
   D7: "project and worktree",
   D8: "context.db",
   D9: "index",
-  D10: "enforcement mode"
+  D10: "enforcement mode",
+  D11: "shell"
 });
 var HOOK_FIXTURE_DIR = "fixtures";
 var HOOK_FIXTURE_FILE = "hook-roundtrip.json";
@@ -28432,6 +28433,8 @@ var GIT_NO_PROMPT_ENV = Object.freeze({ GIT_TERMINAL_PROMPT: "0" });
 var GIT_NO_CRLF_ENV = Object.freeze({ GIT_CONFIG_COUNT: "1", GIT_CONFIG_KEY_0: "core.autocrlf", GIT_CONFIG_VALUE_0: "false" });
 var GIT_NOT_STARTED = "git did not start";
 var GIT_BIN = "git";
+var WIN_SHELL_LANGS = Object.freeze(["shell", "bash", "sh"]);
+var GIT_BASH_RELATIVE = Object.freeze([["..", "bin", "bash.exe"], ["..", "..", "bin", "bash.exe"]]);
 var GIT_EXIT_LABEL = "git exit ";
 var UPGRADE_TRASH_SUFFIX = ".ctx-upgrade-removing";
 var TABLE_ROW_START = "| ";
@@ -28439,7 +28442,6 @@ var TABLE_CELL_SEP = " | ";
 var TABLE_ROW_END = " |";
 var TABLE_PIPE = "|";
 var TABLE_PIPE_ESCAPED = "\\|";
-var TOML_TABLE_OPEN = "[";
 var OPS_SPLIT_FILES = Object.freeze([
   "doctor-env.ts",
   "doctor-config.ts",
@@ -28467,10 +28469,10 @@ function D3_DETAIL(parts) {
 var HOOK_HOST_FILE = Object.freeze({
   "claude-code": { root: "plugin", file: ["hooks", "claude-code.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: true },
   codex: { root: "home", file: [".codex", "hooks.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: true },
-  gemini: { root: "home", file: [".gemini", "settings.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: false },
-  qwen: { root: "home", file: [".qwen", "settings.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: true },
+  gemini: { root: "plugin", file: ["hooks", "hooks.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: false },
+  qwen: { root: "plugin", file: ["hooks", "qwen.json"], key: ["hooks"], shape: "nested", timeoutKey: "timeout", matcher: true },
   "copilot-cli": { root: "home", file: [".copilot", "hooks", "context-mode.json"], key: ["hooks"], shape: "flat", timeoutKey: "timeoutSec", matcher: false },
-  vscode: { root: "project", file: [".github", "hooks", "context-mode.json"], key: ["hooks"], shape: "flat", timeoutKey: "timeout", matcher: false },
+  vscode: { root: "home", file: [".copilot", "hooks", "context-mode-vscode.json"], key: ["hooks"], shape: "flat", timeoutKey: "timeout", matcher: false },
   kiro: { root: "home", file: [".kiro", "hooks", "context-mode.json"], key: ["hooks"], shape: "kiro", timeoutKey: "timeout", matcher: false },
   zcode: { root: "home", file: [".zcode", "cli", "config.json"], key: ["hooks", "events"], shape: "zcode", timeoutKey: "timeoutMs", matcher: true },
   pi: null,
@@ -28503,6 +28505,13 @@ var PRAGMA_INTEGRITY_CHECK = "PRAGMA integrity_check";
 function D10_DETAIL(mode) {
   return `enforcement mode: ${mode}`;
 }
+var D11_WIN_DETAIL = "Git Bash not found";
+var D11_WIN_FIX = "install Git for Windows";
+var D11_POSIX_DETAIL = "no sh on PATH";
+var D11_POSIX_FIX = "install sh or add it to PATH";
+function D11_PASS_DETAIL(shell, win) {
+  return `${win ? "Git Bash" : "sh"}: ${shell}`;
+}
 var DB_SIBLING_SUFFIXES = Object.freeze(["", DB_WAL_SUFFIX, DB_SHM_SUFFIX]);
 var HEAL_TMP_SUFFIX = ".heal";
 var HEAL_TS_SEP = ".";
@@ -28511,6 +28520,7 @@ var HASH_ENCODING = "hex";
 var PLUGIN_LINK_TMP_SUFFIX = ".swap";
 var PLUGIN_LINK_OLD_SUFFIX = ".old";
 var PLUGIN_LINK_TYPE = "dir";
+var PLUGIN_LINK_TYPE_WIN32 = "junction";
 var OWNER_STOP_EXT = ".stop";
 var UPGRADE_DATA_DELETED = "user data deleted";
 var UPGRADE_HOST_COMMAND = Object.freeze({
@@ -28551,7 +28561,14 @@ var V1_HOOKS_DIR_NAME = "hooks";
 var SETTINGS_FILE = "settings.json";
 var CLAUDE_USER_CONFIG_FILE = ".claude.json";
 var HOOKS_JSON_FILE = "hooks.json";
+var CLAUDE_CONFIG_DIR_ENV = "CLAUDE_CONFIG_DIR";
 var CODEX_HOME_ENV = "CODEX_HOME";
+var COPILOT_HOME_ENV = "COPILOT_HOME";
+var KIRO_HOME_ENV = "KIRO_HOME";
+var OPENCODE_CONFIG_DIR_ENV = "OPENCODE_CONFIG_DIR";
+var APPDATA_ENV = "APPDATA";
+var VSCODE_USER_DIR_SEGMENTS = Object.freeze(["Code", "User"]);
+var XDG_CONFIG_HOME_ENV = "XDG_CONFIG_HOME";
 var CONFIG_TOML_FILE = "config.toml";
 var CONFIG_JSON_FILE = "config.json";
 var ZCODE_CLI_DIR = "cli";
@@ -28585,6 +28602,8 @@ var PI_ROLE = "custom";
 var PI_AGENT_DIR_ENV = "PI_CODING_AGENT_DIR";
 var PI_PACKAGE_SOURCE_KEY = "source";
 var V1_PATH_SEPS = Object.freeze(["/", "\\"]);
+var HOST_SEP_TOKEN = "${/}";
+var HOOK_SCRIPT_SEPS = Object.freeze([...V1_PATH_SEPS, HOST_SEP_TOKEN]);
 var V1_REASON = Object.freeze({
   hook: "old context-mode hook entry: command contains context-mode and an old script name or context-mode hook",
   cacheHealHook: "old context-mode cache-heal SessionStart hook entry",
@@ -28611,7 +28630,13 @@ var PLUGIN_NAME = SERVER_KEY;
 var OPENCODE_TOOL_PREFIX = SERVER_KEY + "_";
 var SERVER_ENTRY_FILE = "server.mjs";
 var HOST_NODE_COMMAND = "node";
+var EXE_SUFFIX = ".exe";
 var HOST_CONFIG_TMP_SUFFIX = ".tmp";
+var ATOMIC_RENAME_RETRIES = 5;
+var ATOMIC_RENAME_DELAY_MS = 50;
+var ATOMIC_RENAME_BUSY_CODES = ["EPERM", "EBUSY", "EACCES"];
+var ATOMIC_TMP_PREFIX = ".";
+var ATOMIC_TMP_MARK = ".cm-tmp-";
 var HOST_CONFIG_TEXT_PATH = "(given text)";
 var JSON_INDENT_UNIT = "  ";
 var MCP_COMMAND_FIELD = "command";
@@ -28623,7 +28648,7 @@ var CODEX_APPROVAL_MODE_FIELD = "default_tools_approval_mode";
 var CODEX_APPROVAL_APPROVE = "approve";
 var OWN_MCP_ENTRY = Object.freeze({
   codex: { file: [".codex", "config.toml"], key: ["mcp_servers", SERVER_KEY], fields: { [CODEX_OMIT_TOOLS_FROM_FIELD]: CODEX_OMIT_DEFERRED, [CODEX_APPROVAL_MODE_FIELD]: CODEX_APPROVAL_APPROVE } },
-  vscode: { file: [".vscode", "mcp.json"], key: ["servers", SERVER_KEY] },
+  vscode: { file: [VSCODE_MCP_FILE], key: ["servers", SERVER_KEY] },
   kiro: { file: [".kiro", "settings", "mcp.json"], key: ["mcpServers", SERVER_KEY] },
   zcode: {
     file: [".zcode", "cli", "config.json"],
@@ -28646,6 +28671,8 @@ var ERROR_TEXT = Object.freeze({
   NO_PROJECT: "Project source <kind> is missing. Fix: run ctx_doctor.",
   UNKNOWN_FIELD: 'Unknown field "<f>". Fix: use "queries".',
   TIMEOUT: "Timed out after <ms> ms. Fix: pass background: true.",
+  NO_GIT_BASH: "Git Bash not found. Fix: install Git for Windows.",
+  // D-VT-WINBASH-1
   NO_RUNTIME: "No <lang> runtime on PATH. Fix: install it or pick another language.",
   FETCH_FAILED: "Fetch failed: <code>. Fix: check the URL or proxy.",
   SSRF: "Blocked private address <host>. Fix: use a public URL.",
@@ -28864,9 +28891,9 @@ function readUserVersion(raw) {
   const row5 = raw.prepare("PRAGMA user_version").get();
   return row5.user_version;
 }
-function createAtomically(sqlite, path4) {
+function createAtomically(sqlite, path5) {
   const { randomUUID: randomUUID2 } = process.getBuiltinModule("node:crypto");
-  const tmp = path4 + "." + randomUUID2() + DB_TMP_SUFFIX;
+  const tmp = path5 + "." + randomUUID2() + DB_TMP_SUFFIX;
   try {
     const raw = new sqlite.DatabaseSync(tmp, { timeout: DB_TIMEOUT_MS });
     try {
@@ -28875,7 +28902,7 @@ function createAtomically(sqlite, path4) {
       raw.close();
     }
     try {
-      linkSync(tmp, path4);
+      linkSync(tmp, path5);
     } catch (err) {
       if (err.code !== "EEXIST") throw err;
     }
@@ -28883,11 +28910,11 @@ function createAtomically(sqlite, path4) {
     for (const suffix of ["", DB_WAL_SUFFIX, DB_SHM_SUFFIX]) rmSync(tmp + suffix, { force: true });
   }
 }
-function openWritable(sqlite, path4) {
+function openWritable(sqlite, path5) {
   let raw = null;
   try {
-    if (!existsSync(path4)) createAtomically(sqlite, path4);
-    raw = new sqlite.DatabaseSync(path4, { timeout: DB_TIMEOUT_MS });
+    if (!existsSync(path5)) createAtomically(sqlite, path5);
+    raw = new sqlite.DatabaseSync(path5, { timeout: DB_TIMEOUT_MS });
     applyMigrations(raw, readUserVersion(raw));
     return raw;
   } catch (err) {
@@ -28895,8 +28922,8 @@ function openWritable(sqlite, path4) {
     throw err;
   }
 }
-function openReadOnly(sqlite, path4) {
-  const raw = new sqlite.DatabaseSync(path4, { timeout: DB_TIMEOUT_MS, readOnly: true });
+function openReadOnly(sqlite, path5) {
+  const raw = new sqlite.DatabaseSync(path5, { timeout: DB_TIMEOUT_MS, readOnly: true });
   try {
     const found = readUserVersion(raw);
     if (found !== SCHEMA_VERSION) throw new CtxError("SCHEMA_STALE", { found, want: SCHEMA_VERSION });
@@ -28910,20 +28937,20 @@ async function openDb(project, opts) {
   if (isBelow(process.version, NODE_MIN)) throw new CtxError("NODE_TOO_OLD", { v: process.version });
   const sqlite = await loadSqlite();
   mkdirSync(project.projectDir, { recursive: true });
-  const path4 = project.dbPath;
-  const sibling = existsSync(path4 + DB_WAL_SUFFIX) || existsSync(path4 + DB_SHM_SUFFIX);
-  if (sibling && !existsSync(path4)) {
+  const path5 = project.dbPath;
+  const sibling = existsSync(path5 + DB_WAL_SUFFIX) || existsSync(path5 + DB_SHM_SUFFIX);
+  if (sibling && !existsSync(path5)) {
     throw new CtxError("DB_GONE");
   }
   try {
     let raw;
     if (opts?.readOnly === true) {
-      if (!existsSync(path4)) openWritable(sqlite, path4).close();
-      raw = openReadOnly(sqlite, path4);
+      if (!existsSync(path5)) openWritable(sqlite, path5).close();
+      raw = openReadOnly(sqlite, path5);
     } else {
-      raw = openWritable(sqlite, path4);
+      raw = openWritable(sqlite, path5);
     }
-    return { raw, projectKey: project.projectKey, path: path4 };
+    return { raw, projectKey: project.projectKey, path: path5 };
   } catch (err) {
     if (isCorrupt(err)) throw new CtxError("DB_CORRUPT");
     throw err;
@@ -29053,26 +29080,71 @@ function installExitGuard(opts) {
 }
 
 // src/core/project/config-dir.ts
-import { join } from "node:path";
+import { join, posix, win32 } from "node:path";
 var { mkdirSync: mkdirSync2, realpathSync } = process.getBuiltinModule("node:fs");
-function homeDirOf(env) {
-  const home = env.HOME;
-  if (home !== void 0 && home !== "") return home;
-  const profile = env.USERPROFILE;
-  if (profile !== void 0 && profile !== "") return profile;
-  return null;
+function homeDirOf(env, platform = process.platform) {
+  const set3 = (v) => v !== void 0 && v !== "";
+  if (platform === "win32") {
+    if (set3(env.USERPROFILE)) return env.USERPROFILE;
+    if (set3(env.HOMEDRIVE) && set3(env.HOMEPATH)) return env.HOMEDRIVE + env.HOMEPATH;
+    return set3(env.HOME) ? env.HOME : null;
+  }
+  if (set3(env.HOME)) return env.HOME;
+  return set3(env.USERPROFILE) ? env.USERPROFILE : null;
 }
 function codexDirOf(env, home) {
   const dir = env[CODEX_HOME_ENV];
   return dir !== void 0 && dir !== "" ? dir : join(home, ...AGENT_HOME_DIR.codex);
 }
-function homeOf(env) {
-  const home = homeDirOf(env);
+function copilotDirOf(env, home) {
+  const dir = env[COPILOT_HOME_ENV];
+  return dir !== void 0 && dir !== "" ? dir : join(home, ...AGENT_HOME_DIR["copilot-cli"]);
+}
+function kiroDirOf(env, home, platform = process.platform) {
+  const p = platform === "win32" ? win32 : posix;
+  const fallback = p.join(home, ...AGENT_HOME_DIR.kiro);
+  const dir = env[KIRO_HOME_ENV];
+  if (dir === void 0 || dir === "" || !p.isAbsolute(dir)) return fallback;
+  if (platform === "win32" && p.parse(dir).root.length < 2) return fallback;
+  const abs = p.resolve(dir);
+  if (p.dirname(abs) === abs) return fallback;
+  const up = p.relative(abs, p.resolve(home));
+  if (!p.isAbsolute(up) && up.split(p.sep)[0] !== "..") return fallback;
+  return dir;
+}
+function claudeDirOf(env, home) {
+  const dir = env[CLAUDE_CONFIG_DIR_ENV];
+  return dir !== void 0 && dir !== "" ? dir : join(home, ...AGENT_HOME_DIR["claude-code"]);
+}
+function opencodeDirOf(env, home) {
+  const own4 = env[OPENCODE_CONFIG_DIR_ENV];
+  if (own4 !== void 0 && own4 !== "") return own4;
+  const xdg = env[XDG_CONFIG_HOME_ENV];
+  if (xdg !== void 0 && xdg !== "") return join(xdg, AGENT_HOME_DIR.opencode[AGENT_HOME_DIR.opencode.length - 1]);
+  return join(home, ...AGENT_HOME_DIR.opencode);
+}
+function piAgentDirOf(env, home) {
+  const dir = env[PI_AGENT_DIR_ENV];
+  return dir !== void 0 && dir !== "" ? dir : join(home, ...AGENT_HOME_DIR.pi, PI_AGENT_DIR);
+}
+function vscodeUserDirOf(env, home, platform = process.platform) {
+  const set3 = (v) => v !== void 0 && v !== "";
+  const p = platform === "win32" ? win32 : posix;
+  if (platform === "win32") return p.join(set3(env[APPDATA_ENV]) ? env[APPDATA_ENV] : p.join(home, "AppData", "Roaming"), ...VSCODE_USER_DIR_SEGMENTS);
+  if (platform === "darwin") return p.join(home, "Library", "Application Support", ...VSCODE_USER_DIR_SEGMENTS);
+  return p.join(set3(env[XDG_CONFIG_HOME_ENV]) ? env[XDG_CONFIG_HOME_ENV] : p.join(home, ".config"), ...VSCODE_USER_DIR_SEGMENTS);
+}
+function ownMcpFileOf(agent, file2, env, home) {
+  if (agent === "kiro") return join(kiroDirOf(env, home), ...file2.slice(1));
+  return agent === "vscode" ? join(vscodeUserDirOf(env, home), ...file2) : join(home, ...file2);
+}
+function requireHomeDir(env, platform = process.platform) {
+  const home = homeDirOf(env, platform);
   if (home !== null) return home;
-  throw new CtxError("NO_HOME", { name: process.platform === "win32" ? "USERPROFILE" : "HOME" });
+  throw new CtxError("NO_HOME", { name: platform === "win32" ? "USERPROFILE" : "HOME" });
 }
 function resolveConfigDir(env) {
-  const dir = join(homeOf(env), DATA_ROOT.slice(1));
+  const dir = join(requireHomeDir(env), DATA_ROOT.slice(1));
   mkdirSync2(dir, { recursive: true });
   return realpathSync.native(dir);
 }
@@ -29319,7 +29391,7 @@ function firstLine(file2) {
 }
 function git(dir, args) {
   const { spawnSync } = process.getBuiltinModule("node:child_process");
-  const r = spawnSync("git", args, { cwd: dir, shell: false, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+  const r = spawnSync("git", args, { cwd: dir, shell: false, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
   if (r.error !== void 0 || r.status !== 0) throw new CtxError("NO_GIT_DIR", { path: dir });
   return r.stdout.split("\n").filter((l) => l !== "");
 }
@@ -31235,9 +31307,9 @@ function isWordChar(cp) {
   while (lo <= hi) {
     const mid = lo + hi >> 1;
     const first = WORD_RANGES[2 * mid];
-    const last = WORD_RANGES[2 * mid + 1];
+    const last2 = WORD_RANGES[2 * mid + 1];
     if (cp < first) hi = mid - 1;
-    else if (cp > last) lo = mid + 1;
+    else if (cp > last2) lo = mid + 1;
     else return true;
   }
   return false;
@@ -31724,8 +31796,8 @@ function ftsQueryTimeline(db, scope, ctx, sessionId, limit, after, source, memor
   merged.sort(timelineOrder);
   let end = Math.min(limit, merged.length);
   if (end > 0) {
-    const last = merged[end - 1].ts;
-    while (end < merged.length && merged[end].ts === last) end++;
+    const last2 = merged[end - 1].ts;
+    while (end < merged.length && merged[end].ts === last2) end++;
   }
   const rows = merged.slice(0, end);
   if (rows.length === 0) return { rows, more: false };
@@ -32558,10 +32630,10 @@ function jsonStringifyReplacer3(_, value) {
   return value;
 }
 function cached3(getter) {
-  const set2 = false;
+  const set3 = false;
   return {
     get value() {
-      if (!set2) {
+      if (!set3) {
         const value = getter();
         Object.defineProperty(this, "value", { value });
         return value;
@@ -32587,10 +32659,10 @@ function floatSafeRemainder3(val, step) {
   return valInt % stepInt / 10 ** decCount;
 }
 function defineLazy3(object4, key, getter) {
-  const set2 = false;
+  const set3 = false;
   Object.defineProperty(object4, key, {
     get() {
-      if (!set2) {
+      if (!set3) {
         const value = getter();
         object4[key] = value;
         return value;
@@ -32614,10 +32686,10 @@ function assignProp3(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath3(obj, path4) {
-  if (!path4)
+function getElementAtPath3(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject3(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -32937,11 +33009,11 @@ function aborted3(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues3(path4, issues) {
+function prefixIssues3(path5, issues) {
   return issues.map((iss) => {
     var _a5;
     (_a5 = iss).path ?? (_a5.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -33078,7 +33150,7 @@ function treeifyError2(error42, _mapper) {
     return issue4.message;
   };
   const result = { errors: [] };
-  const processError = (error43, path4 = []) => {
+  const processError = (error43, path5 = []) => {
     var _a5, _b;
     for (const issue4 of error43.issues) {
       if (issue4.code === "invalid_union" && issue4.errors.length) {
@@ -33088,7 +33160,7 @@ function treeifyError2(error42, _mapper) {
       } else if (issue4.code === "invalid_element") {
         processError({ issues: issue4.issues }, issue4.path);
       } else {
-        const fullpath = [...path4, ...issue4.path];
+        const fullpath = [...path5, ...issue4.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue4));
           continue;
@@ -33118,9 +33190,9 @@ function treeifyError2(error42, _mapper) {
   processError(error42);
   return result;
 }
-function toDotPath(path4) {
+function toDotPath(path5) {
   const segs = [];
-  for (const seg of path4) {
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -34460,8 +34532,8 @@ var $ZodDate3 = /* @__PURE__ */ $constructor3("$ZodDate", (inst, def) => {
     }
     const input = payload.value;
     const isDate = input instanceof Date;
-    const isValidDate = isDate && !Number.isNaN(input.getTime());
-    if (isValidDate)
+    const isValidDate2 = isDate && !Number.isNaN(input.getTime());
+    if (isValidDate2)
       return payload;
     payload.issues.push({
       expected: "date",
@@ -43485,6 +43557,14 @@ function buildChildEnv(parent, extra) {
 // src/core/sandbox/runtimes.ts
 import { accessSync, constants as fsConstants, statSync as statSync2 } from "node:fs";
 import path from "node:path";
+
+// src/core/sandbox/path-entries.ts
+function pathEntries(value, platform = process.platform, delimiter = platform === "win32" ? ";" : ":") {
+  const win = platform === "win32";
+  return value.split(delimiter).map((e) => win && e.length >= 2 && e.startsWith('"') && e.endsWith('"') ? e.slice(1, -1) : e).filter(Boolean);
+}
+
+// src/core/sandbox/runtimes.ts
 var PATHEXT_SEPARATOR = ";";
 var WIN_STARTABLE_EXT = Object.freeze([".exe", ".com"]);
 function isWin() {
@@ -43494,7 +43574,7 @@ function candidates(lang) {
   const win = isWin();
   switch (lang) {
     case "shell":
-      return win ? ["sh.exe", "bash.exe"] : ["sh"];
+      return win ? [] : ["sh"];
     case "powershell":
       return ["pwsh", "pwsh.exe", "powershell.exe"];
     case "javascript":
@@ -43525,7 +43605,8 @@ function isRunnable(full) {
   }
 }
 function findRuntime(lang, env = process.env) {
-  const dirs = (env.PATH ?? "").split(path.delimiter).filter((d) => d !== "");
+  if (isWin() && WIN_SHELL_LANGS.includes(lang)) return findGitBash(env);
+  const dirs = pathEntries(env.PATH ?? "", process.platform, path.delimiter);
   const pathExt = isWin() ? (env.PATHEXT ?? PATHEXT_DEFAULT).split(PATHEXT_SEPARATOR).filter((e) => e !== "") : [];
   const names = candidates(lang);
   let shim = null;
@@ -43541,6 +43622,18 @@ function findRuntime(lang, env = process.env) {
   }
   return shim;
 }
+function findGitBash(env) {
+  const git3 = findRuntime(GIT_BIN, env);
+  if (git3 === null) return null;
+  for (const rel of GIT_BASH_RELATIVE) {
+    const full = path.resolve(path.dirname(git3), ...rel);
+    if (isRunnable(full)) return full;
+  }
+  return null;
+}
+function noRuntimeError(lang) {
+  return isWin() && WIN_SHELL_LANGS.includes(lang) ? new CtxError("NO_GIT_BASH") : new CtxError("NO_RUNTIME", { lang });
+}
 
 // src/core/sandbox/spawn.ts
 import { spawn } from "node:child_process";
@@ -43648,19 +43741,19 @@ function readAutoMemory(project) {
   if (project.agent !== "claude-code") return [];
   const rows = [];
   for (const segs of CLAUDE_CODE_MEMORY_FILES) {
-    const path4 = join5(project.worktree, ...segs);
-    if (!isInside(project.worktree, path4)) continue;
+    const path5 = join5(project.worktree, ...segs);
+    if (!isInside(project.worktree, path5)) continue;
     try {
-      const st = statSync3(path4);
+      const st = statSync3(path5);
       if (!st.isFile()) continue;
       rows.push({
         origin: "memory",
         ts: Math.trunc(st.mtimeMs),
         seq: null,
         sourceId: null,
-        path: path4,
+        path: path5,
         label: segs.join("/"),
-        text: readFileSync3(path4, "utf8")
+        text: readFileSync3(path5, "utf8")
       });
     } catch {
     }
@@ -43965,7 +44058,7 @@ function stoppedAt(cmd, error42) {
   return { head: headOf(cmd), block: headOf(cmd) + error42, exitCode: null, bytes: 0, error: error42 };
 }
 async function runCommand(cmd, shell, ctx, deadline, boundMs) {
-  if (shell === null) return stoppedAt(cmd, formatError3("NO_RUNTIME", { lang: SHELL }));
+  if (shell === null) return stoppedAt(cmd, noRuntimeError(SHELL).toLine());
   const left = deadline - Date.now();
   if (left <= 0) return stoppedAt(cmd, formatError3("TIMEOUT", { ms: boundMs }));
   const r = await runProcess([shell, SHELL_INLINE_FLAG, cmd], {
@@ -44085,19 +44178,19 @@ async function runBatch(input, ctx, boundMs, budgetBytes) {
   const shell = findRuntime(SHELL);
   const pool = await runPool(commands.map((c) => () => runCommand(c, shell, ctx, deadline, boundMs)), ONE_AT_A_TIME, (r) => r.error !== null);
   const ran = pool.results;
-  const last = ran[ran.length - 1];
+  const last2 = ran[ran.length - 1];
   const sandboxBytes = ran.reduce((n, r) => n + r.bytes, 0);
   const label = LABEL_PREFIX + ctx.turn;
   try {
     const db = await openDb(ctx.project);
     let sections;
     let idx;
-    const summary = commands.length + " command(s), " + queries.length + " querie(s), exit " + last.exitCode;
+    const summary = commands.length + " command(s), " + queries.length + " querie(s), exit " + last2.exitCode;
     const footer = "more: ctx_search({queries:[...], source:" + JSON.stringify(label) + "})";
     let notice;
     try {
       idx = indexCombined(db, ctx, label, ran, deadline, budgetBytes);
-      const stop = last.error;
+      const stop = last2.error;
       const cut = idx.indexed < idx.total ? "Indexed " + idx.indexed + " of " + idx.total + " B." : null;
       const timeout = formatError3("TIMEOUT", { ms: boundMs });
       const cause = stop ?? (ctx.signal.aborted ? CANCELLED_LINE : idx.stop === "deadline" ? timeout : null);
@@ -44115,7 +44208,7 @@ async function runBatch(input, ctx, boundMs, budgetBytes) {
       isError: false,
       // step 11
       sandboxBytes,
-      journal: { kind: "cmd", key: canonicalKey(TOOL, commands.join(LINE_SEP)), path: null, exit_code: last.exitCode }
+      journal: { kind: "cmd", key: canonicalKey(TOOL, commands.join(LINE_SEP)), path: null, exit_code: last2.exitCode }
     };
   } catch (err) {
     if (err instanceof CtxError) return { text: err.toLine(), isError: true, sandboxBytes };
@@ -44492,8 +44585,14 @@ var VSCODE_EVENTS = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostTool
 var MCP_PREFIX2 = "mcp_";
 var MCP_SEP2 = "_";
 var SESSION_START_NEW = "new";
-var SHELL_TOOL_NAME = "run_in_terminal";
-var NATIVE_TO_CANONICAL4 = { [SHELL_TOOL_NAME]: "Bash" };
+var SHELL_TOOL_NAMES = Object.freeze(["run_in_terminal", "runTerminalCommand", "bash", "powershell"]);
+var READ_TOOL_NAMES = Object.freeze(["read_file", "view"]);
+var WEBFETCH_TOOL_NAMES = Object.freeze(["fetch_webpage", "web_fetch"]);
+var NATIVE_TO_CANONICAL4 = Object.fromEntries([
+  ...SHELL_TOOL_NAMES.map((n) => [n, "Bash"]),
+  ...READ_TOOL_NAMES.map((n) => [n, "Read"]),
+  ...WEBFETCH_TOOL_NAMES.map((n) => [n, "WebFetch"])
+]);
 function canonicalName4(name) {
   if (name.startsWith(TOOL_NAME_PREFIX6)) return name.slice(TOOL_NAME_PREFIX6.length);
   if (Object.hasOwn(NATIVE_TO_CANONICAL4, name)) return NATIVE_TO_CANONICAL4[name];
@@ -44503,6 +44602,26 @@ function canonicalName4(name) {
   if (sep2 <= 0 || sep2 === rest.length - 1) return name;
   return "mcp:" + rest.slice(0, sep2) + ":" + rest.slice(sep2 + MCP_SEP2.length);
 }
+var isNum = (v) => typeof v === "number" && Number.isFinite(v);
+function policyInput(name, canonical, input) {
+  if (canonical === "Read" && READ_TOOL_NAMES.includes(name)) {
+    const out = { ...input };
+    if (name === "read_file") {
+      if (typeof input.filePath === "string") out.file_path = input.filePath;
+      if (isNum(input.startLine)) out.offset = input.startLine;
+      if (isNum(input.startLine) && isNum(input.endLine) && input.endLine >= input.startLine) out.limit = input.endLine - input.startLine + 1;
+    } else if (Array.isArray(input.view_range) && isNum(input.view_range[0])) {
+      out.offset = input.view_range[0];
+      const end = input.view_range[1];
+      if (isNum(end) && end >= input.view_range[0]) out.limit = end - input.view_range[0] + 1;
+    }
+    return out;
+  }
+  if (canonical === "WebFetch" && name === "fetch_webpage" && Array.isArray(input.urls) && typeof input.urls[0] === "string") {
+    return { ...input, url: input.urls[0] };
+  }
+  return input;
+}
 function readResult4(resp) {
   const text = resp === void 0 ? "" : typeof resp === "string" ? resp : JSON.stringify(resp);
   const isError = typeof resp === "object" && resp !== null && resp.is_error === true;
@@ -44550,7 +44669,8 @@ function decodeCamel(p, name) {
   if (event === "UserPromptSubmit" && typeof p.prompt === "string") ev.prompt = p.prompt;
   if (event === "PreToolUse" || event === "PostToolUse") {
     const toolName = String(p.toolName ?? "");
-    ev.tool = { name: toolName, canonicalName: canonicalName4(toolName), input: readArgs2(p.toolArgs) };
+    const canonical = canonicalName4(toolName);
+    ev.tool = { name: toolName, canonicalName: canonical, input: policyInput(toolName, canonical, readArgs2(p.toolArgs)) };
   }
   if (event === "PostToolUse") ev.result = readCamelResult(p.toolResult);
   return ev;
@@ -44572,7 +44692,8 @@ function decode8(raw) {
   if (event === "PreToolUse" || event === "PostToolUse") {
     const name = String(p.tool_name ?? "");
     const input = isRecord2(p.tool_input) ? p.tool_input : {};
-    ev.tool = { name, canonicalName: canonicalName4(name), input };
+    const canonical = canonicalName4(name);
+    ev.tool = { name, canonicalName: canonical, input: policyInput(name, canonical, input) };
   }
   if (event === "PostToolUse") ev.result = readResult4(p.tool_response);
   return ev;
@@ -44596,8 +44717,8 @@ var KIRO_EVENTS = {
 };
 var PROMPT_ENV = "USER_PROMPT";
 var MCP_PREFIX3 = "mcp_";
-var SHELL_TOOL_NAMES = Object.freeze(["execute_bash", "execute_pwsh", "shell"]);
-var NATIVE_TO_CANONICAL5 = Object.fromEntries(SHELL_TOOL_NAMES.map((n) => [n, "Bash"]));
+var SHELL_TOOL_NAMES2 = Object.freeze(["execute_bash", "execute_pwsh", "shell"]);
+var NATIVE_TO_CANONICAL5 = Object.fromEntries(SHELL_TOOL_NAMES2.map((n) => [n, "Bash"]));
 var MCP_SEP3 = "_";
 var KIRO_SOURCES = { startup: "startup", resume: "resume", clear: "clear", compact: "compact" };
 function canonicalName5(name) {
@@ -44738,8 +44859,8 @@ var OPENCODE_EVENTS = {
   compaction: "PreCompact",
   "step-finish": "Usage"
 };
-var SHELL_TOOL_NAME2 = "bash";
-var NATIVE_TO_CANONICAL7 = { webfetch: "WebFetch", [SHELL_TOOL_NAME2]: "Bash" };
+var SHELL_TOOL_NAME = "bash";
+var NATIVE_TO_CANONICAL7 = { webfetch: "WebFetch", [SHELL_TOOL_NAME]: "Bash" };
 function toCanonicalTool(name) {
   if (name.startsWith(OWN_WIRE_PREFIX)) return name.slice(OWN_WIRE_PREFIX.length);
   return Object.prototype.hasOwnProperty.call(NATIVE_TO_CANONICAL7, name) ? NATIVE_TO_CANONICAL7[name] : name;
@@ -44888,7 +45009,8 @@ var ADAPTERS = Object.freeze([
     projectSource: "arg:workspaceFolder",
     toolNamePrefix: TOOL_NAME_PREFIX6,
     // PreCompact sets the pending flag (ADR-0009 §6, DEVIATIONS D-M3-A4-1).
-    nativeTools: { shell: [SHELL_TOOL_NAME] },
+    nativeTools: { shell: [...SHELL_TOOL_NAMES], read: [...READ_TOOL_NAMES], webfetch: [...WEBFETCH_TOOL_NAMES] },
+    // D-HF-VSCODE-PROJECT-1, D-N7-VSCODE-TOOLS-1
     execReadOnlyHint: false,
     eventMap: { ...CLAUDE_EVENTS, PreCompact: "PreCompact" },
     compactDelivery: "pending-flag",
@@ -44906,7 +45028,7 @@ var ADAPTERS = Object.freeze([
     installMode: "mcp-entry",
     projectSource: "arg:--agent+cwd",
     toolNamePrefix: TOOL_NAME_PREFIX7,
-    nativeTools: { shell: [...SHELL_TOOL_NAMES] },
+    nativeTools: { shell: [...SHELL_TOOL_NAMES2] },
     execReadOnlyHint: false,
     // D-HF-KIRO-SHELL-1, D-N7-KIRO-1
     eventMap: { SessionStart: "SessionStart", UserPromptSubmit: "UserPromptSubmit", PreToolUse: "PreToolUse", PostToolUse: "PostToolUse" },
@@ -44963,7 +45085,7 @@ var ADAPTERS = Object.freeze([
     installMode: "in-process",
     projectSource: "spawn-cwd",
     toolNamePrefix: TOOL_NAME_PREFIX10,
-    nativeTools: { shell: [SHELL_TOOL_NAME2] },
+    nativeTools: { shell: [SHELL_TOOL_NAME] },
     execReadOnlyHint: false,
     // D-HF-OPENCODE-SHELL-1
     // Usage: step-finish cost row (DEVIATIONS D-M5-arch-2).
@@ -44993,305 +45115,2157 @@ function getAdapter(id) {
 import { join as join9 } from "node:path";
 
 // src/core/ops/detect-v1.ts
-import { existsSync as existsSync4, opendirSync, readdirSync as readdirSync3, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync5, opendirSync, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join6 } from "node:path";
-var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var keyPath = (...parts) => parts.join(".");
-var finding = (file2, path4, reason) => ({ file: file2, path: path4, reason });
-function stripJsonc(text) {
-  let out = "";
-  let inStr = false;
-  let esc4 = false;
-  for (let i = 0; i < text.length; i++) {
-    const c = text[i];
-    if (inStr) {
-      out += c;
-      if (esc4) esc4 = false;
-      else if (c === "\\") esc4 = true;
-      else if (c === '"') inStr = false;
-      continue;
+import { join as join7 } from "node:path";
+
+// src/core/ops/host-config.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
+import { dirname as dirname3, join as join6 } from "node:path";
+
+// node_modules/eslint-visitor-keys/lib/visitor-keys.js
+var KEYS2 = {
+  ArrayExpression: ["elements"],
+  ArrayPattern: ["elements"],
+  ArrowFunctionExpression: ["params", "body"],
+  AssignmentExpression: ["left", "right"],
+  AssignmentPattern: ["left", "right"],
+  AwaitExpression: ["argument"],
+  BinaryExpression: ["left", "right"],
+  BlockStatement: ["body"],
+  BreakStatement: ["label"],
+  CallExpression: ["callee", "arguments"],
+  CatchClause: ["param", "body"],
+  ChainExpression: ["expression"],
+  ClassBody: ["body"],
+  ClassDeclaration: ["id", "superClass", "body"],
+  ClassExpression: ["id", "superClass", "body"],
+  ConditionalExpression: ["test", "consequent", "alternate"],
+  ContinueStatement: ["label"],
+  DebuggerStatement: [],
+  DoWhileStatement: ["body", "test"],
+  EmptyStatement: [],
+  ExperimentalRestProperty: ["argument"],
+  ExperimentalSpreadProperty: ["argument"],
+  ExportAllDeclaration: ["exported", "source", "attributes"],
+  ExportDefaultDeclaration: ["declaration"],
+  ExportNamedDeclaration: [
+    "declaration",
+    "specifiers",
+    "source",
+    "attributes"
+  ],
+  ExportSpecifier: ["local", "exported"],
+  ExpressionStatement: ["expression"],
+  ForInStatement: ["left", "right", "body"],
+  ForOfStatement: ["left", "right", "body"],
+  ForStatement: ["init", "test", "update", "body"],
+  FunctionDeclaration: ["id", "params", "body"],
+  FunctionExpression: ["id", "params", "body"],
+  Identifier: [],
+  IfStatement: ["test", "consequent", "alternate"],
+  ImportAttribute: ["key", "value"],
+  ImportDeclaration: ["specifiers", "source", "attributes"],
+  ImportDefaultSpecifier: ["local"],
+  ImportExpression: ["source", "options"],
+  ImportNamespaceSpecifier: ["local"],
+  ImportSpecifier: ["imported", "local"],
+  JSXAttribute: ["name", "value"],
+  JSXClosingElement: ["name"],
+  JSXClosingFragment: [],
+  JSXElement: ["openingElement", "children", "closingElement"],
+  JSXEmptyExpression: [],
+  JSXExpressionContainer: ["expression"],
+  JSXFragment: ["openingFragment", "children", "closingFragment"],
+  JSXIdentifier: [],
+  JSXMemberExpression: ["object", "property"],
+  JSXNamespacedName: ["namespace", "name"],
+  JSXOpeningElement: ["name", "attributes"],
+  JSXOpeningFragment: [],
+  JSXSpreadAttribute: ["argument"],
+  JSXSpreadChild: ["expression"],
+  JSXText: [],
+  LabeledStatement: ["label", "body"],
+  Literal: [],
+  LogicalExpression: ["left", "right"],
+  MemberExpression: ["object", "property"],
+  MetaProperty: ["meta", "property"],
+  MethodDefinition: ["key", "value"],
+  NewExpression: ["callee", "arguments"],
+  ObjectExpression: ["properties"],
+  ObjectPattern: ["properties"],
+  PrivateIdentifier: [],
+  Program: ["body"],
+  Property: ["key", "value"],
+  PropertyDefinition: ["key", "value"],
+  RestElement: ["argument"],
+  ReturnStatement: ["argument"],
+  SequenceExpression: ["expressions"],
+  SpreadElement: ["argument"],
+  StaticBlock: ["body"],
+  Super: [],
+  SwitchCase: ["test", "consequent"],
+  SwitchStatement: ["discriminant", "cases"],
+  TaggedTemplateExpression: ["tag", "quasi"],
+  TemplateElement: [],
+  TemplateLiteral: ["quasis", "expressions"],
+  ThisExpression: [],
+  ThrowStatement: ["argument"],
+  TryStatement: ["block", "handler", "finalizer"],
+  UnaryExpression: ["argument"],
+  UpdateExpression: ["argument"],
+  VariableDeclaration: ["declarations"],
+  VariableDeclarator: ["id", "init"],
+  WhileStatement: ["test", "body"],
+  WithStatement: ["object", "body"],
+  YieldExpression: ["argument"]
+};
+var NODE_TYPES = Object.keys(KEYS2);
+for (const type of NODE_TYPES) {
+  Object.freeze(KEYS2[type]);
+}
+Object.freeze(KEYS2);
+var visitor_keys_default = KEYS2;
+
+// node_modules/eslint-visitor-keys/lib/index.js
+function unionWith(additionalKeys) {
+  const retv = (
+    /** @type {{ [type: string]: ReadonlyArray<string> }} */
+    Object.assign({}, visitor_keys_default)
+  );
+  for (const type of Object.keys(additionalKeys)) {
+    if (Object.hasOwn(retv, type)) {
+      const keys = new Set(additionalKeys[type]);
+      for (const key of retv[type]) {
+        keys.add(key);
+      }
+      retv[type] = Object.freeze(Array.from(keys));
+    } else {
+      retv[type] = Object.freeze(Array.from(additionalKeys[type]));
     }
-    if (c === '"') {
-      inStr = true;
-      out += c;
-      continue;
+  }
+  return Object.freeze(retv);
+}
+
+// node_modules/toml-eslint-parser/lib/index.mjs
+function last(arr) {
+  return arr[arr.length - 1] ?? null;
+}
+function toKeyName(node3) {
+  return node3.type === "TOMLBare" ? node3.name : node3.value;
+}
+var TOMLVerImpl = class {
+  constructor(major, minor) {
+    this.major = major;
+    this.minor = minor;
+  }
+  lt(major, minor) {
+    return this.major < major || this.major === major && this.minor < minor;
+  }
+  gte(major, minor) {
+    return this.major > major || this.major === major && this.minor >= minor;
+  }
+};
+var TOML_VERSION_1_0 = new TOMLVerImpl(1, 0);
+var TOML_VERSION_1_1 = new TOMLVerImpl(1, 1);
+var DEFAULT_TOML_VERSION = TOML_VERSION_1_1;
+var SUPPORTED_TOML_VERSIONS = {
+  "1.0": TOML_VERSION_1_0,
+  "1.0.0": TOML_VERSION_1_0,
+  "1.1": TOML_VERSION_1_1,
+  "1.1.0": TOML_VERSION_1_1,
+  latest: TOML_VERSION_1_1,
+  next: TOML_VERSION_1_1
+};
+function getTOMLVer(v) {
+  return v && SUPPORTED_TOML_VERSIONS[v] || DEFAULT_TOML_VERSION;
+}
+var MESSAGES = {
+  "unterminated-string": "Unterminated string constant",
+  "unterminated-table-key": "Unterminated table-key",
+  "unterminated-array": "Unterminated array",
+  "unterminated-inline-table": "Unterminated inline table",
+  "missing-key": "Empty bare keys are not allowed",
+  "missing-newline": "Must be a newline",
+  "missing-equals-sign": "Expected equal (=) token",
+  "missing-value": "Unspecified values are invalid",
+  "missing-comma": "Expected comma (,) token",
+  "dupe-keys": "Defining a key multiple times is invalid",
+  "unexpected-char": "Unexpected character",
+  "unexpected-token": "Unexpected token",
+  "invalid-control-character": "Control characters (codes < 0x1f and 0x7f) are not allowed",
+  "invalid-comment-character": "Invalid code point {{cp}} within comments",
+  "invalid-key-value-newline": "The key, equals sign, and value must be on the same line",
+  "invalid-inline-table-newline": "No newlines are allowed between the curly braces unless they are valid within a value",
+  "invalid-underscore": "Underscores are allowed between digits",
+  "invalid-space": "Unexpected spaces",
+  "invalid-three-quotes": "Three or more quotes are not permitted",
+  "invalid-date": "Unexpected invalid date",
+  "invalid-time": "Unexpected invalid time",
+  "invalid-leading-zero": "Leading zeros are not allowed",
+  "invalid-trailing-comma-in-inline-table": "Trailing comma is not permitted in an inline table",
+  "invalid-char-in-escape-sequence": "Invalid character in escape sequence",
+  "invalid-consecutive-dots-in-key": "Consecutive dots are not permitted in keys",
+  "invalid-code-point": "Invalid code point {{cp}}",
+  "invalid-trailing-dot-in-key": "Keys cannot end with a dot",
+  "invalid-leading-dot-in-key": "Keys cannot start with a dot"
+};
+function getMessage(code, data) {
+  if (data) return MESSAGES[code].replace(/\{\{(.*?)\}\}/gu, (_, name$2) => {
+    if (name$2 in data) return data[name$2];
+    return `{{${name$2}}}`;
+  });
+  return MESSAGES[code];
+}
+var ParseError = class extends SyntaxError {
+  /**
+  * Initialize this ParseError instance.
+  *
+  */
+  constructor(code, offset, line, column, data) {
+    super(getMessage(code, data));
+    this.index = offset;
+    this.lineNumber = line;
+    this.column = column;
+  }
+};
+var CodePoint = {
+  EOF: -1,
+  NULL: 0,
+  SOH: 1,
+  BACKSPACE: 8,
+  TABULATION: 9,
+  LINE_FEED: 10,
+  FORM_FEED: 12,
+  CARRIAGE_RETURN: 13,
+  ESCAPE: 27,
+  SO: 14,
+  US: 31,
+  SPACE: 32,
+  QUOTATION_MARK: 34,
+  HASH: 35,
+  SINGLE_QUOTE: 39,
+  PLUS_SIGN: 43,
+  COMMA: 44,
+  DASH: 45,
+  DOT: 46,
+  DIGIT_0: 48,
+  DIGIT_1: 49,
+  DIGIT_2: 50,
+  DIGIT_3: 51,
+  DIGIT_7: 55,
+  DIGIT_9: 57,
+  COLON: 58,
+  EQUALS_SIGN: 61,
+  LATIN_CAPITAL_A: 65,
+  LATIN_CAPITAL_E: 69,
+  LATIN_CAPITAL_F: 70,
+  LATIN_CAPITAL_T: 84,
+  LATIN_CAPITAL_U: 85,
+  LATIN_CAPITAL_Z: 90,
+  LEFT_BRACKET: 91,
+  BACKSLASH: 92,
+  RIGHT_BRACKET: 93,
+  UNDERSCORE: 95,
+  LATIN_SMALL_A: 97,
+  LATIN_SMALL_B: 98,
+  LATIN_SMALL_E: 101,
+  LATIN_SMALL_F: 102,
+  LATIN_SMALL_I: 105,
+  LATIN_SMALL_L: 108,
+  LATIN_SMALL_N: 110,
+  LATIN_SMALL_O: 111,
+  LATIN_SMALL_R: 114,
+  LATIN_SMALL_S: 115,
+  LATIN_SMALL_T: 116,
+  LATIN_SMALL_U: 117,
+  LATIN_SMALL_X: 120,
+  LATIN_SMALL_Z: 122,
+  LEFT_BRACE: 123,
+  RIGHT_BRACE: 125,
+  TILDE: 126,
+  DELETE: 127,
+  PAD: 128,
+  SUPERSCRIPT_TWO: 178,
+  SUPERSCRIPT_THREE: 179,
+  SUPERSCRIPT_ONE: 185,
+  VULGAR_FRACTION_ONE_QUARTER: 188,
+  VULGAR_FRACTION_THREE_QUARTERS: 190,
+  LATIN_CAPITAL_LETTER_A_WITH_GRAVE: 192,
+  LATIN_CAPITAL_LETTER_O_WITH_DIAERESIS: 214,
+  LATIN_CAPITAL_LETTER_O_WITH_STROKE: 216,
+  LATIN_SMALL_LETTER_O_WITH_DIAERESIS: 246,
+  LATIN_SMALL_LETTER_O_WITH_STROKE: 248,
+  GREEK_SMALL_REVERSED_DOTTED_LUNATE_SIGMA_SYMBOL: 891,
+  GREEK_CAPITAL_LETTER_YOT: 895,
+  CP_1FFF: 8191,
+  ZERO_WIDTH_NON_JOINER: 8204,
+  ZERO_WIDTH_JOINER: 8205,
+  UNDERTIE: 8255,
+  CHARACTER_TIE: 8256,
+  SUPERSCRIPT_ZERO: 8304,
+  CP_218F: 8591,
+  CIRCLED_DIGIT_ONE: 9312,
+  NEGATIVE_CIRCLED_DIGIT_ZERO: 9471,
+  GLAGOLITIC_CAPITAL_LETTER_AZU: 11264,
+  CP_2FEF: 12271,
+  IDEOGRAPHIC_COMMA: 12289,
+  CP_D7FF: 55295,
+  CP_E000: 57344,
+  CJK_COMPATIBILITY_IDEOGRAPH_F900: 63744,
+  ARABIC_LIGATURE_SALAAMUHU_ALAYNAA: 64975,
+  ARABIC_LIGATURE_SALLA_USED_AS_KORANIC_STOP_SIGN_ISOLATED_FORM: 65008,
+  REPLACEMENT_CHARACTER: 65533,
+  LINEAR_B_SYLLABLE_B008_A: 65536,
+  CP_EFFFF: 983039,
+  CP_10FFFF: 1114111
+};
+function isControl(cp) {
+  return cp >= CodePoint.NULL && cp <= CodePoint.US;
+}
+function isWhitespace(cp) {
+  return cp === CodePoint.TABULATION || cp === CodePoint.SPACE;
+}
+function isEOL(cp) {
+  return cp === CodePoint.LINE_FEED || cp === CodePoint.CARRIAGE_RETURN;
+}
+function isUpperLetter(cp) {
+  return cp >= CodePoint.LATIN_CAPITAL_A && cp <= CodePoint.LATIN_CAPITAL_Z;
+}
+function isLowerLetter(cp) {
+  return cp >= CodePoint.LATIN_SMALL_A && cp <= CodePoint.LATIN_SMALL_Z;
+}
+function isLetter2(cp) {
+  return isLowerLetter(cp) || isUpperLetter(cp);
+}
+function isDigit(cp) {
+  return cp >= CodePoint.DIGIT_0 && cp <= CodePoint.DIGIT_9;
+}
+function isHexDig(cp) {
+  return isDigit(cp) || cp >= CodePoint.LATIN_SMALL_A && cp <= CodePoint.LATIN_SMALL_F || cp >= CodePoint.LATIN_CAPITAL_A && cp <= CodePoint.LATIN_CAPITAL_F;
+}
+function isOctalDig(cp) {
+  return cp >= CodePoint.DIGIT_0 && cp <= CodePoint.DIGIT_7;
+}
+function isUnicodeScalarValue(cp) {
+  return cp >= 0 && cp <= 55295 || cp >= 57344 && cp <= 1114111;
+}
+function sortedLastIndex(array4, value) {
+  let low = 0;
+  let high = array4.length;
+  while (low < high) {
+    const mid = low + high >>> 1;
+    const val = array4[mid];
+    if (val === value) return mid + 1;
+    if (val < value) low = mid + 1;
+    else high = mid;
+  }
+  return low;
+}
+var Locations = class {
+  constructor() {
+    this.offsets = [];
+  }
+  addOffset(offset) {
+    for (let i = this.offsets.length - 1; i >= 0; i--) {
+      const element = this.offsets[i];
+      if (element === offset) return;
+      if (element < offset) break;
     }
-    if (c === "/" && text[i + 1] === "/") {
-      while (i < text.length && text[i] !== "\n") i++;
-      out += "\n";
-      continue;
+    this.offsets.push(offset);
+  }
+  /**
+  * Calculate the location of the given index.
+  * @param index The index to calculate their location.
+  * @returns The location of the index.
+  */
+  getLocFromIndex(offset) {
+    const line = sortedLastIndex(this.offsets, offset) + 1;
+    return {
+      line,
+      column: offset - (line === 1 ? 0 : this.offsets[line - 2])
+    };
+  }
+};
+var CodePointIterator = class {
+  /**
+  * Initialize this char iterator.
+  */
+  constructor(text) {
+    this.locs = new Locations();
+    this.lastCodePoint = CodePoint.NULL;
+    this.start = -1;
+    this.end = 0;
+    this.text = text;
+  }
+  next() {
+    if (this.lastCodePoint === CodePoint.EOF) return CodePoint.EOF;
+    return this.lastCodePoint = this.moveAt(this.end);
+  }
+  getLocFromIndex(index) {
+    return this.locs.getLocFromIndex(index);
+  }
+  eat(cp) {
+    if (this.text.codePointAt(this.end) === cp) {
+      this.next();
+      return true;
     }
-    if (c === "/" && text[i + 1] === "*") {
-      const end = text.indexOf("*/", i + 2);
-      i = end === -1 ? text.length : end + 1;
-      continue;
+    return false;
+  }
+  moveAt(offset) {
+    this.start = this.end = offset;
+    const cp = this.text.codePointAt(this.start) ?? CodePoint.EOF;
+    if (cp === CodePoint.EOF) {
+      this.end = this.start;
+      return cp;
+    }
+    this.end += cp >= 65536 ? 2 : 1;
+    if (cp === CodePoint.LINE_FEED) this.locs.addOffset(this.end);
+    else if (cp === CodePoint.CARRIAGE_RETURN) {
+      if (this.text.codePointAt(this.end) === CodePoint.LINE_FEED) {
+        this.end++;
+        this.locs.addOffset(this.end);
+      }
+      return CodePoint.LINE_FEED;
+    }
+    return cp;
+  }
+};
+var HAS_BIGINT = typeof BigInt !== "undefined";
+var RADIX_PREFIXES = {
+  16: "0x",
+  10: "",
+  8: "0o",
+  2: "0b"
+};
+var ESCAPES_1_0 = {
+  [CodePoint.QUOTATION_MARK]: CodePoint.QUOTATION_MARK,
+  [CodePoint.BACKSLASH]: CodePoint.BACKSLASH,
+  [CodePoint.LATIN_SMALL_B]: CodePoint.BACKSPACE,
+  [CodePoint.LATIN_SMALL_F]: CodePoint.FORM_FEED,
+  [CodePoint.LATIN_SMALL_N]: CodePoint.LINE_FEED,
+  [CodePoint.LATIN_SMALL_R]: CodePoint.CARRIAGE_RETURN,
+  [CodePoint.LATIN_SMALL_T]: CodePoint.TABULATION
+};
+var ESCAPES_LATEST = {
+  ...ESCAPES_1_0,
+  [CodePoint.LATIN_SMALL_E]: CodePoint.ESCAPE
+};
+var Tokenizer = class {
+  /**
+  * Initialize this tokenizer.
+  */
+  constructor(text, parserOptions) {
+    this.backCode = false;
+    this.lastCodePoint = CodePoint.NULL;
+    this.state = "DATA";
+    this.token = null;
+    this.tokenStart = -1;
+    this.valuesEnabled = false;
+    this.text = text;
+    this.parserOptions = parserOptions || {};
+    this.codePointIterator = new CodePointIterator(text);
+    this.tomlVersion = getTOMLVer(this.parserOptions.tomlVersion);
+    this.ESCAPES = this.tomlVersion.gte(1, 1) ? ESCAPES_LATEST : ESCAPES_1_0;
+  }
+  get start() {
+    return this.codePointIterator.start;
+  }
+  get end() {
+    return this.codePointIterator.end;
+  }
+  getLocFromIndex(index) {
+    return this.codePointIterator.getLocFromIndex(index);
+  }
+  /**
+  * Report an invalid character error.
+  */
+  reportParseError(code, data) {
+    const offset = this.codePointIterator.start;
+    const loc = this.codePointIterator.getLocFromIndex(offset);
+    throw new ParseError(code, offset, loc.line, loc.column, data);
+  }
+  /**
+  * Get the next token.
+  */
+  nextToken() {
+    let token = this.token;
+    if (token != null) {
+      this.token = null;
+      return token;
+    }
+    let cp = this.lastCodePoint;
+    while (cp !== CodePoint.EOF && !this.token) {
+      cp = this.nextCode();
+      const nextState = this[this.state](cp);
+      if (!nextState) throw new Error(`Unknown error: pre state=${this.state}`);
+      this.state = nextState;
+    }
+    token = this.token;
+    this.token = null;
+    return token;
+  }
+  /**
+  * Get the next code point.
+  */
+  nextCode() {
+    if (this.lastCodePoint === CodePoint.EOF) return CodePoint.EOF;
+    if (this.backCode) {
+      this.backCode = false;
+      return this.lastCodePoint;
     }
-    if (c === ",") {
-      let j = i + 1;
-      while (j < text.length && " 	\r\n".includes(text[j])) j++;
-      if (text[j] === "}" || text[j] === "]") continue;
+    return this.lastCodePoint = this.codePointIterator.next();
+  }
+  /**
+  * Eat the next code point.
+  */
+  eatCode(cp) {
+    if (this.lastCodePoint === CodePoint.EOF) return false;
+    if (this.backCode) {
+      if (this.lastCodePoint === cp) {
+        this.backCode = false;
+        return true;
+      }
+      return false;
     }
-    out += c;
+    return this.codePointIterator.eat(cp);
   }
-  return out;
-}
-function readJson(file2) {
-  try {
-    return JSON.parse(stripJsonc(readFileSync4(file2, "utf8")));
-  } catch {
-    return void 0;
+  /**
+  * Moves the character position to the given position.
+  */
+  moveAt(loc) {
+    if (this.backCode) this.backCode = false;
+    this.lastCodePoint = this.codePointIterator.moveAt(loc);
   }
-}
-function readText(file2) {
-  try {
-    return readFileSync4(file2, "utf8");
-  } catch {
-    return "";
+  /**
+  * Back the current code point as the given state.
+  */
+  back(state) {
+    this.backCode = true;
+    return state;
   }
-}
-var listOf = (v) => Array.isArray(v) ? v : [];
-var commandOf = (v) => isObj(v) && typeof v.command === "string" ? v.command : null;
-function nestedCommands(doc) {
-  const out = [];
-  if (!isObj(doc) || !isObj(doc[HOOKS_KEY])) return out;
-  for (const [event, groups] of Object.entries(doc[HOOKS_KEY])) {
-    listOf(groups).forEach((group, i) => {
-      if (!isObj(group)) return;
-      listOf(group[HOOKS_KEY]).forEach((inner, j) => {
-        const command = commandOf(inner);
-        if (command !== null) out.push({ path: keyPath(HOOKS_KEY, event, i, HOOKS_KEY, j), command });
-      });
-    });
+  punctuatorToken() {
+    this.startToken();
+    this.endToken("Punctuator", "end");
   }
-  return out;
-}
-function flatCommands(events, prefix) {
-  const out = [];
-  if (!isObj(events)) return out;
-  for (const [event, entries] of Object.entries(events)) {
-    listOf(entries).forEach((entry, i) => {
-      const command = commandOf(entry);
-      if (command !== null) out.push({ path: keyPath(...prefix, event, i), command });
-    });
+  startToken() {
+    this.tokenStart = this.codePointIterator.start;
   }
-  return out;
-}
-var isV1Hook = (cmd) => cmd.includes(SERVER_KEY) && (V1_SCRIPT_NAMES.some((name) => cmd.includes(name)) || cmd.includes(V1_HOOK_COMMAND));
-var isCodexScript = (cmd) => cmd.includes(V1_SCRIPT_EXT) && V1_PATH_SEPS.some((sep2) => cmd.includes(V1_CODEX_HOOKS_DIR.join(sep2) + sep2));
-function dataDir(dir, reason, out) {
-  if (existsSync4(dir)) out.push(finding(dir, "", reason));
-}
-function mcpEntry(file2, doc, out) {
-  if (isObj(doc) && isObj(doc[MCP_SERVERS_KEY]) && Object.hasOwn(doc[MCP_SERVERS_KEY], SERVER_KEY)) {
-    out.push(finding(file2, keyPath(MCP_SERVERS_KEY, SERVER_KEY), V1_REASON.mcpEntry));
+  /**
+  * Commit the current token.
+  */
+  endToken(type, pos, option1, option2) {
+    const { tokenStart } = this;
+    const end = this.codePointIterator[pos];
+    const range = [tokenStart, end];
+    const loc = {
+      start: this.codePointIterator.getLocFromIndex(tokenStart),
+      end: this.codePointIterator.getLocFromIndex(end)
+    };
+    if (type === "Block") this.token = {
+      type,
+      value: this.text.slice(tokenStart + 1, end),
+      range,
+      loc
+    };
+    else {
+      let token;
+      const value = this.text.slice(tokenStart, end);
+      if (type === "BasicString" || type === "LiteralString" || type === "MultiLineBasicString" || type === "MultiLineLiteralString") token = {
+        type,
+        value,
+        string: option1,
+        range,
+        loc
+      };
+      else if (type === "Integer") {
+        const text = option1;
+        token = {
+          type,
+          value,
+          number: parseInt(text, option2),
+          bigint: HAS_BIGINT ? BigInt(RADIX_PREFIXES[option2] + text) : null,
+          range,
+          loc
+        };
+      } else if (type === "Float") token = {
+        type,
+        value,
+        number: option1,
+        range,
+        loc
+      };
+      else if (type === "Boolean") token = {
+        type,
+        value,
+        boolean: option1,
+        range,
+        loc
+      };
+      else if (type === "LocalDate" || type === "LocalTime" || type === "LocalDateTime" || type === "OffsetDateTime") token = {
+        type,
+        value,
+        date: option1,
+        range,
+        loc
+      };
+      else token = {
+        type,
+        value,
+        range,
+        loc
+      };
+      this.token = token;
+    }
   }
-}
-function claudeShapeSettings(agentHome, out) {
-  const file2 = join6(agentHome, SETTINGS_FILE);
-  const doc = readJson(file2);
-  for (const c of nestedCommands(doc)) {
-    if (c.command.includes(V1_CACHE_HEAL_NAME)) out.push(finding(file2, c.path, V1_REASON.cacheHealHook));
-    else if (isV1Hook(c.command)) out.push(finding(file2, c.path, V1_REASON.hook));
+  DATA(cp) {
+    while (isWhitespace(cp) || isEOL(cp)) cp = this.nextCode();
+    if (cp === CodePoint.HASH) {
+      this.startToken();
+      return "COMMENT";
+    }
+    if (cp === CodePoint.QUOTATION_MARK) {
+      this.startToken();
+      return "BASIC_STRING";
+    }
+    if (cp === CodePoint.SINGLE_QUOTE) {
+      this.startToken();
+      return "LITERAL_STRING";
+    }
+    if (cp === CodePoint.DOT || cp === CodePoint.EQUALS_SIGN || cp === CodePoint.LEFT_BRACKET || cp === CodePoint.RIGHT_BRACKET || cp === CodePoint.LEFT_BRACE || cp === CodePoint.RIGHT_BRACE || cp === CodePoint.COMMA) {
+      this.punctuatorToken();
+      return "DATA";
+    }
+    if (this.valuesEnabled) {
+      if (cp === CodePoint.DASH || cp === CodePoint.PLUS_SIGN) {
+        this.startToken();
+        return "SIGN";
+      }
+      if (cp === CodePoint.LATIN_SMALL_N || cp === CodePoint.LATIN_SMALL_I) {
+        this.startToken();
+        return this.back("NAN_OR_INF");
+      }
+      if (isDigit(cp)) {
+        this.startToken();
+        return this.back("NUMBER");
+      }
+      if (cp === CodePoint.LATIN_SMALL_T || cp === CodePoint.LATIN_SMALL_F) {
+        this.startToken();
+        return this.back("BOOLEAN");
+      }
+    } else if (isUnquotedKeyChar(cp, this.tomlVersion)) {
+      this.startToken();
+      return "BARE";
+    }
+    if (cp === CodePoint.EOF) return "DATA";
+    return this.reportParseError("unexpected-char");
   }
-  const status = isObj(doc) ? commandOf(doc[STATUS_LINE_KEY]) : null;
-  if (status !== null && status.includes(V1_STATUSLINE_COMMAND)) {
-    out.push(finding(file2, STATUS_LINE_KEY, V1_REASON.statusLine));
+  COMMENT(cp) {
+    const processCommentChar = this.tomlVersion.gte(1, 1) ? (c) => {
+      if (!isNonEOL(c)) this.reportParseError("invalid-comment-character", { cp: JSON.stringify(String.fromCodePoint(c)).slice(1, -1) });
+    } : (c) => {
+      if (isControlOtherThanTab(c)) this.reportParseErrorControlChar();
+    };
+    while (!isEOL(cp) && cp !== CodePoint.EOF) {
+      processCommentChar(cp);
+      cp = this.nextCode();
+    }
+    this.endToken("Block", "start");
+    return "DATA";
   }
-  mcpEntry(file2, doc, out);
+  BARE(cp) {
+    while (isUnquotedKeyChar(cp, this.tomlVersion)) cp = this.nextCode();
+    this.endToken("Bare", "start");
+    return this.back("DATA");
+  }
+  BASIC_STRING(cp) {
+    if (cp === CodePoint.QUOTATION_MARK) {
+      cp = this.nextCode();
+      if (cp === CodePoint.QUOTATION_MARK) return "MULTI_LINE_BASIC_STRING";
+      this.endToken("BasicString", "start", "");
+      return this.back("DATA");
+    }
+    const out = [];
+    while (cp !== CodePoint.QUOTATION_MARK && cp !== CodePoint.EOF && cp !== CodePoint.LINE_FEED) {
+      if (isControlOtherThanTab(cp)) return this.reportParseErrorControlChar();
+      if (cp === CodePoint.BACKSLASH) {
+        cp = this.nextCode();
+        const ecp = this.ESCAPES[cp];
+        if (ecp) {
+          out.push(ecp);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_SMALL_U) {
+          const code = this.parseUnicode(4);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_CAPITAL_U) {
+          const code = this.parseUnicode(8);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_SMALL_X && this.tomlVersion.gte(1, 1)) {
+          const code = this.parseUnicode(2);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        }
+        return this.reportParseError("invalid-char-in-escape-sequence");
+      }
+      out.push(cp);
+      cp = this.nextCode();
+    }
+    if (cp !== CodePoint.QUOTATION_MARK) return this.reportParseError("unterminated-string");
+    this.endToken("BasicString", "end", String.fromCodePoint(...out));
+    return "DATA";
+  }
+  MULTI_LINE_BASIC_STRING(cp) {
+    const out = [];
+    if (cp === CodePoint.LINE_FEED) cp = this.nextCode();
+    while (cp !== CodePoint.EOF) {
+      if (cp !== CodePoint.LINE_FEED && isControlOtherThanTab(cp)) return this.reportParseErrorControlChar();
+      if (cp === CodePoint.QUOTATION_MARK) {
+        const startPos = this.codePointIterator.start;
+        if (this.eatCode(CodePoint.QUOTATION_MARK) && this.eatCode(CodePoint.QUOTATION_MARK)) {
+          if (this.eatCode(CodePoint.QUOTATION_MARK)) {
+            out.push(CodePoint.QUOTATION_MARK);
+            if (this.eatCode(CodePoint.QUOTATION_MARK)) {
+              out.push(CodePoint.QUOTATION_MARK);
+              if (this.eatCode(CodePoint.QUOTATION_MARK)) {
+                this.moveAt(startPos);
+                return this.reportParseError("invalid-three-quotes");
+              }
+            }
+          }
+          this.endToken("MultiLineBasicString", "end", String.fromCodePoint(...out));
+          return "DATA";
+        }
+        this.moveAt(startPos);
+      }
+      if (cp === CodePoint.BACKSLASH) {
+        cp = this.nextCode();
+        const ecp = this.ESCAPES[cp];
+        if (ecp) {
+          out.push(ecp);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_SMALL_U) {
+          const code = this.parseUnicode(4);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_CAPITAL_U) {
+          const code = this.parseUnicode(8);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LATIN_SMALL_X && this.tomlVersion.gte(1, 1)) {
+          const code = this.parseUnicode(2);
+          out.push(code);
+          cp = this.nextCode();
+          continue;
+        } else if (cp === CodePoint.LINE_FEED) {
+          cp = this.nextCode();
+          while (isWhitespace(cp) || cp === CodePoint.LINE_FEED) cp = this.nextCode();
+          continue;
+        } else if (isWhitespace(cp)) {
+          let valid = true;
+          const startPos = this.codePointIterator.start;
+          let nextCp;
+          while ((nextCp = this.nextCode()) !== CodePoint.EOF) {
+            if (nextCp === CodePoint.LINE_FEED) break;
+            if (!isWhitespace(nextCp)) {
+              this.moveAt(startPos);
+              valid = false;
+              break;
+            }
+          }
+          if (valid) {
+            cp = this.nextCode();
+            while (isWhitespace(cp) || cp === CodePoint.LINE_FEED) cp = this.nextCode();
+            continue;
+          }
+        }
+        return this.reportParseError("invalid-char-in-escape-sequence");
+      }
+      out.push(cp);
+      cp = this.nextCode();
+    }
+    return this.reportParseError("unterminated-string");
+  }
+  LITERAL_STRING(cp) {
+    if (cp === CodePoint.SINGLE_QUOTE) {
+      cp = this.nextCode();
+      if (cp === CodePoint.SINGLE_QUOTE) return "MULTI_LINE_LITERAL_STRING";
+      this.endToken("LiteralString", "start", "");
+      return this.back("DATA");
+    }
+    const out = [];
+    while (cp !== CodePoint.SINGLE_QUOTE && cp !== CodePoint.EOF && cp !== CodePoint.LINE_FEED) {
+      if (isControlOtherThanTab(cp)) return this.reportParseErrorControlChar();
+      out.push(cp);
+      cp = this.nextCode();
+    }
+    if (cp !== CodePoint.SINGLE_QUOTE) return this.reportParseError("unterminated-string");
+    this.endToken("LiteralString", "end", String.fromCodePoint(...out));
+    return "DATA";
+  }
+  MULTI_LINE_LITERAL_STRING(cp) {
+    const out = [];
+    if (cp === CodePoint.LINE_FEED) cp = this.nextCode();
+    while (cp !== CodePoint.EOF) {
+      if (cp !== CodePoint.LINE_FEED && isControlOtherThanTab(cp)) return this.reportParseErrorControlChar();
+      if (cp === CodePoint.SINGLE_QUOTE) {
+        const startPos = this.codePointIterator.start;
+        if (this.eatCode(CodePoint.SINGLE_QUOTE) && this.eatCode(CodePoint.SINGLE_QUOTE)) {
+          if (this.eatCode(CodePoint.SINGLE_QUOTE)) {
+            out.push(CodePoint.SINGLE_QUOTE);
+            if (this.eatCode(CodePoint.SINGLE_QUOTE)) {
+              out.push(CodePoint.SINGLE_QUOTE);
+              if (this.eatCode(CodePoint.SINGLE_QUOTE)) {
+                this.moveAt(startPos);
+                return this.reportParseError("invalid-three-quotes");
+              }
+            }
+          }
+          this.endToken("MultiLineLiteralString", "end", String.fromCodePoint(...out));
+          return "DATA";
+        }
+        this.moveAt(startPos);
+      }
+      out.push(cp);
+      cp = this.nextCode();
+    }
+    return this.reportParseError("unterminated-string");
+  }
+  SIGN(cp) {
+    if (cp === CodePoint.LATIN_SMALL_N || cp === CodePoint.LATIN_SMALL_I) return this.back("NAN_OR_INF");
+    if (isDigit(cp)) return this.back("NUMBER");
+    return this.reportParseError("unexpected-char");
+  }
+  NAN_OR_INF(cp) {
+    if (cp === CodePoint.LATIN_SMALL_N) {
+      const startPos = this.codePointIterator.start;
+      if (this.eatCode(CodePoint.LATIN_SMALL_A) && this.eatCode(CodePoint.LATIN_SMALL_N)) {
+        this.endToken("Float", "end", NaN);
+        return "DATA";
+      }
+      this.moveAt(startPos);
+    } else if (cp === CodePoint.LATIN_SMALL_I) {
+      const startPos = this.codePointIterator.start;
+      if (this.eatCode(CodePoint.LATIN_SMALL_N) && this.eatCode(CodePoint.LATIN_SMALL_F)) {
+        this.endToken("Float", "end", this.text[this.tokenStart] === "-" ? -Infinity : Infinity);
+        return "DATA";
+      }
+      this.moveAt(startPos);
+    }
+    return this.reportParseError("unexpected-char");
+  }
+  NUMBER(cp) {
+    const start = this.text[this.tokenStart];
+    const sign = start === "+" ? CodePoint.PLUS_SIGN : start === "-" ? CodePoint.DASH : CodePoint.NULL;
+    if (cp === CodePoint.DIGIT_0) {
+      if (sign === CodePoint.NULL) {
+        const startPos = this.codePointIterator.start;
+        const nextCp$1 = this.nextCode();
+        if (isDigit(nextCp$1)) {
+          const nextNextCp = this.nextCode();
+          if (nextNextCp === CodePoint.COLON) {
+            this.data = {
+              hasDate: false,
+              year: 0,
+              month: 0,
+              day: 0,
+              hour: Number(String.fromCodePoint(CodePoint.DIGIT_0, nextCp$1)),
+              minute: 0,
+              second: 0
+            };
+            return "TIME_MINUTE";
+          }
+          if (isDigit(nextNextCp)) {
+            const nextNextNextCp = this.nextCode();
+            if (isDigit(nextNextNextCp) && this.eatCode(CodePoint.DASH)) {
+              this.data = {
+                hasDate: true,
+                year: Number(String.fromCodePoint(CodePoint.DIGIT_0, nextCp$1, nextNextCp, nextNextNextCp)),
+                month: 0,
+                day: 0,
+                hour: 0,
+                minute: 0,
+                second: 0
+              };
+              return "DATE_MONTH";
+            }
+          }
+          this.moveAt(startPos);
+          return this.reportParseError("invalid-leading-zero");
+        }
+        this.moveAt(startPos);
+      }
+      cp = this.nextCode();
+      if (cp === CodePoint.LATIN_SMALL_X || cp === CodePoint.LATIN_SMALL_O || cp === CodePoint.LATIN_SMALL_B) {
+        if (sign !== CodePoint.NULL) return this.reportParseError("unexpected-char");
+        return cp === CodePoint.LATIN_SMALL_X ? "HEX" : cp === CodePoint.LATIN_SMALL_O ? "OCTAL" : "BINARY";
+      }
+      if (cp === CodePoint.LATIN_SMALL_E || cp === CodePoint.LATIN_CAPITAL_E) {
+        this.data = {
+          minus: sign === CodePoint.DASH,
+          left: [CodePoint.DIGIT_0]
+        };
+        return "EXPONENT_RIGHT";
+      }
+      if (cp === CodePoint.DOT) {
+        this.data = {
+          minus: sign === CodePoint.DASH,
+          absInt: [CodePoint.DIGIT_0]
+        };
+        return "FRACTIONAL_RIGHT";
+      }
+      this.endToken("Integer", "start", "0", 10);
+      return this.back("DATA");
+    }
+    const { out, nextCp, hasUnderscore } = this.parseDigits(cp, isDigit);
+    if (nextCp === CodePoint.DASH && sign === CodePoint.NULL && !hasUnderscore && out.length === 4) {
+      this.data = {
+        hasDate: true,
+        year: Number(String.fromCodePoint(...out)),
+        month: 0,
+        day: 0,
+        hour: 0,
+        minute: 0,
+        second: 0
+      };
+      return "DATE_MONTH";
+    }
+    if (nextCp === CodePoint.COLON && sign === CodePoint.NULL && !hasUnderscore && out.length === 2) {
+      this.data = {
+        hasDate: false,
+        year: 0,
+        month: 0,
+        day: 0,
+        hour: Number(String.fromCodePoint(...out)),
+        minute: 0,
+        second: 0
+      };
+      return "TIME_MINUTE";
+    }
+    if (nextCp === CodePoint.LATIN_SMALL_E || nextCp === CodePoint.LATIN_CAPITAL_E) {
+      this.data = {
+        minus: sign === CodePoint.DASH,
+        left: out
+      };
+      return "EXPONENT_RIGHT";
+    }
+    if (nextCp === CodePoint.DOT) {
+      this.data = {
+        minus: sign === CodePoint.DASH,
+        absInt: out
+      };
+      return "FRACTIONAL_RIGHT";
+    }
+    this.endToken("Integer", "start", sign === CodePoint.DASH ? String.fromCodePoint(CodePoint.DASH, ...out) : String.fromCodePoint(...out), 10);
+    return this.back("DATA");
+  }
+  HEX(cp) {
+    const { out } = this.parseDigits(cp, isHexDig);
+    this.endToken("Integer", "start", String.fromCodePoint(...out), 16);
+    return this.back("DATA");
+  }
+  OCTAL(cp) {
+    const { out } = this.parseDigits(cp, isOctalDig);
+    this.endToken("Integer", "start", String.fromCodePoint(...out), 8);
+    return this.back("DATA");
+  }
+  BINARY(cp) {
+    const { out } = this.parseDigits(cp, (c) => c === CodePoint.DIGIT_0 || c === CodePoint.DIGIT_1);
+    this.endToken("Integer", "start", String.fromCodePoint(...out), 2);
+    return this.back("DATA");
+  }
+  FRACTIONAL_RIGHT(cp) {
+    const { minus, absInt } = this.data;
+    const { out, nextCp } = this.parseDigits(cp, isDigit);
+    const absNum = [
+      ...absInt,
+      CodePoint.DOT,
+      ...out
+    ];
+    if (nextCp === CodePoint.LATIN_SMALL_E || nextCp === CodePoint.LATIN_CAPITAL_E) {
+      this.data = {
+        minus,
+        left: absNum
+      };
+      return "EXPONENT_RIGHT";
+    }
+    const value = Number(minus ? String.fromCodePoint(CodePoint.DASH, ...absNum) : String.fromCodePoint(...absNum));
+    this.endToken("Float", "start", value);
+    return this.back("DATA");
+  }
+  EXPONENT_RIGHT(cp) {
+    const { left, minus: leftMinus } = this.data;
+    let minus = false;
+    if (cp === CodePoint.DASH || cp === CodePoint.PLUS_SIGN) {
+      minus = cp === CodePoint.DASH;
+      cp = this.nextCode();
+    }
+    const { out } = this.parseDigits(cp, isDigit);
+    const right = out;
+    if (minus) right.unshift(CodePoint.DASH);
+    const value = Number(leftMinus ? String.fromCodePoint(CodePoint.DASH, ...left, CodePoint.LATIN_SMALL_E, ...right) : String.fromCodePoint(...left, CodePoint.LATIN_SMALL_E, ...right));
+    this.endToken("Float", "start", value);
+    return this.back("DATA");
+  }
+  BOOLEAN(cp) {
+    if (cp === CodePoint.LATIN_SMALL_T) {
+      const startPos = this.codePointIterator.start;
+      if (this.eatCode(CodePoint.LATIN_SMALL_R) && this.eatCode(CodePoint.LATIN_SMALL_U) && this.eatCode(CodePoint.LATIN_SMALL_E)) {
+        this.endToken("Boolean", "end", true);
+        return "DATA";
+      }
+      this.moveAt(startPos);
+    } else if (cp === CodePoint.LATIN_SMALL_F) {
+      const startPos = this.codePointIterator.start;
+      if (this.eatCode(CodePoint.LATIN_SMALL_A) && this.eatCode(CodePoint.LATIN_SMALL_L) && this.eatCode(CodePoint.LATIN_SMALL_S) && this.eatCode(CodePoint.LATIN_SMALL_E)) {
+        this.endToken("Boolean", "end", false);
+        return "DATA";
+      }
+      this.moveAt(startPos);
+    }
+    return this.reportParseError("unexpected-char");
+  }
+  DATE_MONTH(cp) {
+    const start = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (cp !== CodePoint.DASH) return this.reportParseError("unexpected-char");
+    const end = this.codePointIterator.start;
+    const data = this.data;
+    data.month = Number(this.text.slice(start, end));
+    return "DATE_DAY";
+  }
+  DATE_DAY(cp) {
+    const start = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const end = this.codePointIterator.end;
+    const data = this.data;
+    data.day = Number(this.text.slice(start, end));
+    if (!isValidDate(data.year, data.month, data.day)) return this.reportParseError("invalid-date");
+    cp = this.nextCode();
+    if (cp === CodePoint.LATIN_CAPITAL_T || cp === CodePoint.LATIN_SMALL_T) return "TIME_HOUR";
+    if (cp === CodePoint.SPACE) {
+      const startPos = this.codePointIterator.start;
+      if (isDigit(this.nextCode()) && isDigit(this.nextCode())) {
+        this.moveAt(startPos);
+        return "TIME_HOUR";
+      }
+      this.moveAt(startPos);
+    }
+    const dateValue = getDateFromDateTimeData(data, "");
+    this.endToken("LocalDate", "start", dateValue);
+    return this.back("DATA");
+  }
+  TIME_HOUR(cp) {
+    const start = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (cp !== CodePoint.COLON) return this.reportParseError("unexpected-char");
+    const end = this.codePointIterator.start;
+    const data = this.data;
+    data.hour = Number(this.text.slice(start, end));
+    return "TIME_MINUTE";
+  }
+  TIME_MINUTE(cp) {
+    const start = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const end = this.codePointIterator.end;
+    const data = this.data;
+    data.minute = Number(this.text.slice(start, end));
+    cp = this.nextCode();
+    if (cp === CodePoint.COLON) return "TIME_SECOND";
+    if (this.tomlVersion.lt(1, 1)) return this.reportParseError("unexpected-char");
+    if (!isValidTime(data.hour, data.minute, data.second)) return this.reportParseError("invalid-time");
+    return this.processTimeEnd(cp, data);
+  }
+  TIME_SECOND(cp) {
+    const start = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const end = this.codePointIterator.end;
+    const data = this.data;
+    data.second = Number(this.text.slice(start, end));
+    if (!isValidTime(data.hour, data.minute, data.second)) return this.reportParseError("invalid-time");
+    cp = this.nextCode();
+    if (cp === CodePoint.DOT) return "TIME_SEC_FRAC";
+    return this.processTimeEnd(cp, data);
+  }
+  TIME_SEC_FRAC(cp) {
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const start = this.codePointIterator.start;
+    while (isDigit(cp)) cp = this.nextCode();
+    const end = this.codePointIterator.start;
+    const data = this.data;
+    data.frac = this.text.slice(start, end);
+    return this.processTimeEnd(cp, data);
+  }
+  processTimeEnd(cp, data) {
+    if (data.hasDate) {
+      if (cp === CodePoint.DASH || cp === CodePoint.PLUS_SIGN) {
+        data.offsetSign = cp;
+        return "TIME_OFFSET";
+      }
+      if (cp === CodePoint.LATIN_CAPITAL_Z || cp === CodePoint.LATIN_SMALL_Z) {
+        const dateValue$2 = getDateFromDateTimeData(data, "Z");
+        this.endToken("OffsetDateTime", "end", dateValue$2);
+        return "DATA";
+      }
+      const dateValue$1 = getDateFromDateTimeData(data, "");
+      this.endToken("LocalDateTime", "start", dateValue$1);
+      return this.back("DATA");
+    }
+    const dateValue = getDateFromDateTimeData(data, "");
+    this.endToken("LocalTime", "start", dateValue);
+    return this.back("DATA");
+  }
+  TIME_OFFSET(cp) {
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const hourStart = this.codePointIterator.start;
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (cp !== CodePoint.COLON) return this.reportParseError("unexpected-char");
+    const hourEnd = this.codePointIterator.start;
+    cp = this.nextCode();
+    const minuteStart = this.codePointIterator.start;
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    cp = this.nextCode();
+    if (!isDigit(cp)) return this.reportParseError("unexpected-char");
+    const minuteEnd = this.codePointIterator.end;
+    const hour = Number(this.text.slice(hourStart, hourEnd));
+    const minute = Number(this.text.slice(minuteStart, minuteEnd));
+    if (!isValidTime(hour, minute, 0)) return this.reportParseError("invalid-time");
+    const data = this.data;
+    const dateValue = getDateFromDateTimeData(data, `${String.fromCodePoint(data.offsetSign)}${padStart(hour, 2)}:${padStart(minute, 2)}`);
+    this.endToken("OffsetDateTime", "end", dateValue);
+    return "DATA";
+  }
+  parseDigits(cp, checkDigit) {
+    if (cp === CodePoint.UNDERSCORE) return this.reportParseError("invalid-underscore");
+    if (!checkDigit(cp)) return this.reportParseError("unexpected-char");
+    const out = [];
+    let before = CodePoint.NULL;
+    let hasUnderscore = false;
+    while (checkDigit(cp) || cp === CodePoint.UNDERSCORE) {
+      if (cp === CodePoint.UNDERSCORE) {
+        hasUnderscore = true;
+        if (before === CodePoint.UNDERSCORE) return this.reportParseError("invalid-underscore");
+      } else out.push(cp);
+      before = cp;
+      cp = this.nextCode();
+    }
+    if (before === CodePoint.UNDERSCORE) return this.reportParseError("invalid-underscore");
+    return {
+      out,
+      nextCp: cp,
+      hasUnderscore
+    };
+  }
+  parseUnicode(count) {
+    const startLoc = this.codePointIterator.start;
+    const start = this.codePointIterator.end;
+    let charCount = 0;
+    let cp;
+    while ((cp = this.nextCode()) !== CodePoint.EOF) {
+      if (!isHexDig(cp)) {
+        this.moveAt(startLoc);
+        return this.reportParseError("invalid-char-in-escape-sequence");
+      }
+      charCount++;
+      if (charCount >= count) break;
+    }
+    const end = this.codePointIterator.end;
+    const code = this.text.slice(start, end);
+    const codePoint = parseInt(code, 16);
+    if (!isUnicodeScalarValue(codePoint)) return this.reportParseError("invalid-code-point", { cp: code });
+    return codePoint;
+  }
+  reportParseErrorControlChar() {
+    return this.reportParseError("invalid-control-character");
+  }
+};
+function isUnquotedKeyChar(cp, tomlVersion) {
+  if (isLetter2(cp) || isDigit(cp) || cp === CodePoint.UNDERSCORE || cp === CodePoint.DASH) return true;
+  if (tomlVersion.lt(1, 1)) return false;
+  return false;
 }
-function v1HookFile(file2, out) {
-  const doc = readJson(file2);
-  const cmds = isObj(doc) ? flatCommands(doc[HOOKS_KEY], [HOOKS_KEY]) : [];
-  if (cmds.some((c) => c.command.includes(V1_HOOK_COMMAND))) out.push(finding(file2, "", V1_REASON.hookFile));
+function isControlOtherThanTab(cp) {
+  return isControl(cp) && cp !== CodePoint.TABULATION || cp === CodePoint.DELETE;
 }
-function scanClaudeCode(home, agentHome, out) {
-  claudeShapeSettings(agentHome, out);
-  for (const ext of V1_CACHE_HEAL_EXTS) {
-    const file2 = join6(agentHome, V1_HOOKS_DIR_NAME, V1_CACHE_HEAL_NAME + ext);
-    if (existsSync4(file2)) out.push(finding(file2, "", V1_REASON.cacheHealFile));
+function isNonEOL(cp) {
+  return cp === CodePoint.TABULATION || CodePoint.SPACE <= cp && cp <= CodePoint.TILDE || isNonAscii(cp);
+}
+function isNonAscii(cp) {
+  return CodePoint.PAD <= cp && cp <= CodePoint.CP_D7FF || CodePoint.CP_E000 <= cp && cp <= CodePoint.CP_10FFFF;
+}
+function isValidDate(y, m, d) {
+  if (y >= 0 && m <= 12 && m >= 1 && d >= 1) return d <= (m === 2 ? y & 3 || !(y % 25) && y & 15 ? 28 : 29 : 30 + (m + (m >> 3) & 1));
+  return false;
+}
+function isValidTime(h, m, s) {
+  if (h >= 24 || h < 0 || m > 59 || m < 0 || s > 60 || s < 0) return false;
+  return true;
+}
+function getDateFromDateTimeData(data, timeZone) {
+  const year = padStart(data.year, 4);
+  const month = data.month ? padStart(data.month, 2) : "01";
+  const day = data.day ? padStart(data.day, 2) : "01";
+  const hour = padStart(data.hour, 2);
+  const minute = padStart(data.minute, 2);
+  const second = padStart(data.second, 2);
+  const textDate = `${year}-${month}-${day}`;
+  const frac = data.frac ? `.${data.frac}` : "";
+  const dateValue = /* @__PURE__ */ new Date(`${textDate}T${hour}:${minute}:${second}${frac}${timeZone}`);
+  if (!isNaN(dateValue.getTime()) || data.second !== 60) return dateValue;
+  return /* @__PURE__ */ new Date(`${textDate}T${hour}:${minute}:59${frac}${timeZone}`);
+}
+function padStart(num, maxLength) {
+  return String(num).padStart(maxLength, "0");
+}
+var VALUE_KIND_VALUE = Symbol("VALUE_KIND_VALUE");
+var VALUE_KIND_INTERMEDIATE = Symbol("VALUE_KIND_INTERMEDIATE");
+var KeysResolver = class {
+  constructor(ctx) {
+    this.rootKeys = /* @__PURE__ */ new Map();
+    this.tables = [];
+    this.ctx = ctx;
+  }
+  applyResolveKeyForTable(node3) {
+    let keys = this.rootKeys;
+    const peekKeyIndex = node3.key.keys.length - 1;
+    for (let index = 0; index < peekKeyIndex; index++) {
+      const keyNode = node3.key.keys[index];
+      const keyName = toKeyName(keyNode);
+      node3.resolvedKey.push(keyName);
+      let keyStore = keys.get(keyName);
+      if (!keyStore) {
+        keyStore = {
+          node: keyNode,
+          keys: /* @__PURE__ */ new Map()
+        };
+        keys.set(keyName, keyStore);
+      } else if (keyStore.table === "array") {
+        const peekIndex = keyStore.peekIndex;
+        node3.resolvedKey.push(peekIndex);
+        keyStore = keyStore.keys.get(peekIndex);
+      }
+      keys = keyStore.keys;
+    }
+    const lastKeyNode = node3.key.keys[peekKeyIndex];
+    const lastKeyName = toKeyName(lastKeyNode);
+    node3.resolvedKey.push(lastKeyName);
+    const lastKeyStore = keys.get(lastKeyName);
+    if (!lastKeyStore) if (node3.kind === "array") {
+      node3.resolvedKey.push(0);
+      const newKeyStore = {
+        node: lastKeyNode,
+        keys: /* @__PURE__ */ new Map()
+      };
+      keys.set(lastKeyName, {
+        table: node3.kind,
+        node: lastKeyNode,
+        keys: /* @__PURE__ */ new Map([[0, newKeyStore]]),
+        peekIndex: 0
+      });
+      this.tables.push({
+        node: node3,
+        keys: newKeyStore.keys
+      });
+    } else {
+      const newKeyStore = {
+        table: node3.kind,
+        node: lastKeyNode,
+        keys: /* @__PURE__ */ new Map()
+      };
+      keys.set(lastKeyName, newKeyStore);
+      this.tables.push({
+        node: node3,
+        keys: newKeyStore.keys
+      });
+    }
+    else if (!lastKeyStore.table) if (node3.kind === "array") this.ctx.reportParseError("dupe-keys", lastKeyNode);
+    else {
+      const transformKey = {
+        table: node3.kind,
+        node: lastKeyNode,
+        keys: lastKeyStore.keys
+      };
+      keys.set(lastKeyName, transformKey);
+      this.tables.push({
+        node: node3,
+        keys: transformKey.keys
+      });
+    }
+    else if (lastKeyStore.table === "array") if (node3.kind === "array") {
+      const newKeyStore = {
+        node: lastKeyNode,
+        keys: /* @__PURE__ */ new Map()
+      };
+      const newIndex = lastKeyStore.peekIndex + 1;
+      node3.resolvedKey.push(newIndex);
+      lastKeyStore.keys.set(newIndex, newKeyStore);
+      lastKeyStore.peekIndex = newIndex;
+      this.tables.push({
+        node: node3,
+        keys: newKeyStore.keys
+      });
+    } else this.ctx.reportParseError("dupe-keys", lastKeyNode);
+    else this.ctx.reportParseError("dupe-keys", lastKeyNode);
+  }
+  verifyDuplicateKeys(node3) {
+    for (const body of node3.body) if (body.type === "TOMLKeyValue") verifyDuplicateKeysForKeyValue(this.ctx, this.rootKeys, body);
+    for (const { node: tableNode, keys } of this.tables) for (const body of tableNode.body) verifyDuplicateKeysForKeyValue(this.ctx, keys, body);
+  }
+};
+function verifyDuplicateKeysForKeyValue(ctx, defineKeys, node3) {
+  let keys = defineKeys;
+  const lastKey = last(node3.key.keys);
+  for (const keyNode of node3.key.keys) {
+    const key = toKeyName(keyNode);
+    let defineKey = keys.get(key);
+    if (defineKey) {
+      if (defineKey.value === VALUE_KIND_VALUE) ctx.reportParseError("dupe-keys", getAfterNode(keyNode, defineKey.node));
+      else if (lastKey === keyNode) ctx.reportParseError("dupe-keys", getAfterNode(keyNode, defineKey.node));
+      else if (defineKey.table) ctx.reportParseError("dupe-keys", getAfterNode(keyNode, defineKey.node));
+      defineKey.value = VALUE_KIND_INTERMEDIATE;
+    } else {
+      if (lastKey === keyNode) defineKey = {
+        value: VALUE_KIND_VALUE,
+        node: keyNode,
+        keys: /* @__PURE__ */ new Map()
+      };
+      else defineKey = {
+        value: VALUE_KIND_INTERMEDIATE,
+        node: keyNode,
+        keys: /* @__PURE__ */ new Map()
+      };
+      keys.set(key, defineKey);
+    }
+    keys = defineKey.keys;
   }
-  const userFile = join6(home, CLAUDE_USER_CONFIG_FILE);
-  mcpEntry(userFile, readJson(userFile), out);
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+  if (node3.value.type === "TOMLInlineTable") verifyDuplicateKeysForInlineTable(ctx, keys, node3.value);
+  else if (node3.value.type === "TOMLArray") verifyDuplicateKeysForArray(ctx, keys, node3.value);
 }
-function scanCodex(agentHome, out) {
-  const hooksFile = join6(agentHome, HOOKS_JSON_FILE);
-  for (const c of nestedCommands(readJson(hooksFile))) {
-    if (c.command.includes(V1_CODEX_HOOK_COMMAND) || isCodexScript(c.command)) {
-      out.push(finding(hooksFile, c.path, V1_REASON.codexHook));
+function verifyDuplicateKeysForInlineTable(ctx, defineKeys, node3) {
+  for (const body of node3.body) verifyDuplicateKeysForKeyValue(ctx, defineKeys, body);
+}
+function verifyDuplicateKeysForArray(ctx, defineKeys, node3) {
+  const keys = defineKeys;
+  for (let index = 0; index < node3.elements.length; index++) {
+    const element = node3.elements[index];
+    let defineKey = keys.get(index);
+    if (defineKey) ctx.reportParseError("dupe-keys", getAfterNode(element, defineKey.node));
+    else {
+      defineKey = {
+        value: VALUE_KIND_VALUE,
+        node: element,
+        keys: /* @__PURE__ */ new Map()
+      };
+      defineKeys.set(index, defineKey);
+      if (element.type === "TOMLInlineTable") verifyDuplicateKeysForInlineTable(ctx, defineKey.keys, element);
+      else if (element.type === "TOMLArray") verifyDuplicateKeysForArray(ctx, defineKey.keys, element);
+    }
+  }
+}
+function getAfterNode(a, b) {
+  return a.range[0] <= b.range[0] ? b : a;
+}
+var Context = class {
+  constructor(data) {
+    this.tokens = [];
+    this.comments = [];
+    this.back = null;
+    this.stateStack = [];
+    this.needNewLine = false;
+    this.needSameLine = false;
+    this.currToken = null;
+    this.prevToken = null;
+    this.valueContainerStack = [];
+    this.tokenizer = new Tokenizer(data.text, data.parserOptions);
+    this.topLevelTable = data.topLevelTable;
+    this.table = data.topLevelTable;
+    this.keysResolver = new KeysResolver(this);
+  }
+  /**
+  * Get the next token.
+  */
+  nextToken(option) {
+    this.prevToken = this.currToken;
+    if (this.back) {
+      this.currToken = this.back;
+      this.back = null;
+    } else this.currToken = this._nextTokenFromTokenizer(option);
+    if ((this.needNewLine || this.needSameLine || option?.needSameLine) && this.prevToken && this.currToken) if (this.prevToken.loc.end.line === this.currToken.loc.start.line) {
+      if (this.needNewLine) return this.reportParseError("missing-newline", this.currToken);
+    } else {
+      const needSameLine = this.needSameLine || option?.needSameLine;
+      if (needSameLine) return this.reportParseError(needSameLine, this.currToken);
     }
+    this.needNewLine = false;
+    this.needSameLine = false;
+    return this.currToken;
   }
-  const tomlFile = join6(agentHome, CONFIG_TOML_FILE);
-  for (const line of readText(tomlFile).split("\n")) {
-    const header = line.trim();
-    if (header.startsWith(V1_TOML_SECTION_PREFIX)) out.push(finding(tomlFile, header, V1_REASON.codexToml));
+  _nextTokenFromTokenizer(option) {
+    const valuesEnabled = this.tokenizer.valuesEnabled;
+    if (option?.valuesEnabled) this.tokenizer.valuesEnabled = option.valuesEnabled;
+    let token = this.tokenizer.nextToken();
+    while (token && token.type === "Block") {
+      this.comments.push(token);
+      token = this.tokenizer.nextToken();
+    }
+    if (token) this.tokens.push(token);
+    this.tokenizer.valuesEnabled = valuesEnabled;
+    return token;
   }
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
-}
-function scanGemini(agentHome, out) {
-  const file2 = join6(agentHome, SETTINGS_FILE);
-  for (const c of nestedCommands(readJson(file2))) {
-    if (c.command.includes(SERVER_KEY)) out.push(finding(file2, c.path, V1_REASON.hook));
+  backToken() {
+    if (this.back) throw new Error("Illegal state");
+    this.back = this.currToken;
+    this.currToken = this.prevToken;
   }
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDirShared, out);
-}
-function scanVscode(agentHome, project, out) {
-  if (project !== void 0) {
-    v1HookFile(join6(project, GITHUB_DIR_NAME, V1_HOOKS_DIR_NAME, OWN_HOOK_FILE), out);
-    const mcpFile2 = join6(project, VSCODE_DIR_NAME, VSCODE_MCP_FILE);
-    const doc = readJson(mcpFile2);
-    const servers = isObj(doc) && isObj(doc[VSCODE_MCP_SERVERS_KEY]) ? doc[VSCODE_MCP_SERVERS_KEY] : {};
-    const entry = Object.hasOwn(servers, SERVER_KEY) ? servers[SERVER_KEY] : void 0;
-    if (isObj(entry) && (entry.command === V1_BIN_COMMAND || listOf(entry.args).some((a) => a === V1_BIN_COMMAND))) {
-      out.push(finding(mcpFile2, keyPath(VSCODE_MCP_SERVERS_KEY, SERVER_KEY), V1_REASON.vscodeMcp));
+  addValueContainer(valueContainer) {
+    this.valueContainerStack.push(valueContainer);
+    this.tokenizer.valuesEnabled = true;
+  }
+  consumeValueContainer() {
+    const valueContainer = this.valueContainerStack.pop();
+    this.tokenizer.valuesEnabled = this.valueContainerStack.length > 0;
+    return valueContainer;
+  }
+  applyResolveKeyForTable(node3) {
+    this.keysResolver.applyResolveKeyForTable(node3);
+  }
+  verifyDuplicateKeys() {
+    this.keysResolver.verifyDuplicateKeys(this.topLevelTable);
+  }
+  /**
+  * Report an invalid token error.
+  */
+  reportParseError(code, token) {
+    let offset, line, column;
+    if (token) {
+      offset = token.range[0];
+      line = token.loc.start.line;
+      column = token.loc.start.column;
+    } else {
+      offset = this.tokenizer.start;
+      const startPos = this.tokenizer.getLocFromIndex(offset);
+      line = startPos.line;
+      column = startPos.column;
     }
-    dataDir(join6(project, GITHUB_DIR_NAME, V1_DATA_DIR_NAME, V1_SESSIONS_DIR_NAME), V1_REASON.dataDir, out);
+    throw new ParseError(code, offset, line, column);
   }
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME, V1_SESSIONS_DIR_NAME), V1_REASON.dataDir, out);
-}
-function jsonFiles(dir) {
-  try {
-    return readdirSync3(dir).filter((name) => name.endsWith(KIRO_AGENT_FILE_EXT)).sort();
-  } catch {
+};
+var STATE_FOR_ERROR = { VALUE: "missing-value" };
+var STRING_VALUE_STYLE_MAP = {
+  BasicString: "basic",
+  MultiLineBasicString: "basic",
+  LiteralString: "literal",
+  MultiLineLiteralString: "literal"
+};
+var STRING_KEY_STYLE_MAP = {
+  BasicString: "basic",
+  LiteralString: "literal"
+};
+var DATETIME_VALUE_KIND_MAP = {
+  OffsetDateTime: "offset-date-time",
+  LocalDateTime: "local-date-time",
+  LocalDate: "local-date",
+  LocalTime: "local-time"
+};
+var TOMLParser = class {
+  /**
+  * Initialize this parser.
+  */
+  constructor(text, parserOptions) {
+    this.text = text;
+    this.parserOptions = parserOptions || {};
+    this.tomlVersion = getTOMLVer(this.parserOptions.tomlVersion);
+  }
+  /**
+  * Parse TOML
+  */
+  parse() {
+    const ast = {
+      type: "Program",
+      body: [],
+      sourceType: "module",
+      tokens: [],
+      comments: [],
+      parent: null,
+      range: [0, 0],
+      loc: {
+        start: {
+          line: 1,
+          column: 0
+        },
+        end: {
+          line: 1,
+          column: 0
+        }
+      }
+    };
+    const node3 = {
+      type: "TOMLTopLevelTable",
+      body: [],
+      parent: ast,
+      range: cloneRange(ast.range),
+      loc: cloneLoc(ast.loc)
+    };
+    ast.body = [node3];
+    const ctx = new Context({
+      text: this.text,
+      parserOptions: this.parserOptions,
+      topLevelTable: node3
+    });
+    let token = ctx.nextToken();
+    if (token) {
+      node3.range[0] = token.range[0];
+      node3.loc.start = clonePos(token.loc.start);
+      while (token) {
+        const state$1 = ctx.stateStack.pop() || "TABLE";
+        ctx.stateStack.push(...this[state$1](token, ctx));
+        token = ctx.nextToken();
+      }
+      const state = ctx.stateStack.pop() || "TABLE";
+      if (state in STATE_FOR_ERROR) return ctx.reportParseError(STATE_FOR_ERROR[state], null);
+      if (ctx.table.type === "TOMLTable") applyEndLoc(ctx.table, last(ctx.table.body));
+      applyEndLoc(node3, last(node3.body));
+    }
+    ctx.verifyDuplicateKeys();
+    ast.tokens = ctx.tokens;
+    ast.comments = ctx.comments;
+    const endOffset = ctx.tokenizer.end;
+    const endPos = ctx.tokenizer.getLocFromIndex(endOffset);
+    ast.range[1] = endOffset;
+    ast.loc.end = {
+      line: endPos.line,
+      column: endPos.column
+    };
+    return ast;
+  }
+  TABLE(token, ctx) {
+    if (isBare(token) || isString(token)) return this.processKeyValue(token, ctx.table, ctx);
+    if (isLeftBracket(token)) return this.processTable(token, ctx.topLevelTable, ctx);
+    return ctx.reportParseError("unexpected-token", token);
+  }
+  VALUE(token, ctx) {
+    if (isString(token) || isMultiLineString(token)) return this.processStringValue(token, ctx);
+    if (isNumber(token)) return this.processNumberValue(token, ctx);
+    if (isBoolean(token)) return this.processBooleanValue(token, ctx);
+    if (isDateTime(token)) return this.processDateTimeValue(token, ctx);
+    if (isLeftBracket(token)) return this.processArray(token, ctx);
+    if (isLeftBrace(token)) return this.processInlineTable(token, ctx);
+    return ctx.reportParseError("unexpected-token", token);
+  }
+  processTable(token, topLevelTableNode, ctx) {
+    const tableNode = {
+      type: "TOMLTable",
+      kind: "standard",
+      key: null,
+      resolvedKey: [],
+      body: [],
+      parent: topLevelTableNode,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    if (ctx.table.type === "TOMLTable") applyEndLoc(ctx.table, last(ctx.table.body));
+    topLevelTableNode.body.push(tableNode);
+    ctx.table = tableNode;
+    let targetToken = ctx.nextToken({ needSameLine: "invalid-key-value-newline" });
+    if (isLeftBracket(targetToken)) {
+      if (token.range[1] < targetToken.range[0]) return ctx.reportParseError("invalid-space", targetToken);
+      tableNode.kind = "array";
+      targetToken = ctx.nextToken({ needSameLine: "invalid-key-value-newline" });
+    }
+    if (isRightBracket(targetToken)) return ctx.reportParseError("missing-key", targetToken);
+    if (!targetToken) return ctx.reportParseError("unterminated-table-key", null);
+    targetToken = this.processKeyNode(targetToken, tableNode, ctx).nextToken;
+    if (!isRightBracket(targetToken)) return ctx.reportParseError("unterminated-table-key", targetToken);
+    if (tableNode.kind === "array") {
+      const rightBracket = targetToken;
+      targetToken = ctx.nextToken({ needSameLine: "invalid-key-value-newline" });
+      if (!isRightBracket(targetToken)) return ctx.reportParseError("unterminated-table-key", targetToken);
+      if (rightBracket.range[1] < targetToken.range[0]) return ctx.reportParseError("invalid-space", targetToken);
+    }
+    applyEndLoc(tableNode, targetToken);
+    ctx.applyResolveKeyForTable(tableNode);
+    ctx.needNewLine = true;
     return [];
   }
+  processKeyValue(token, tableNode, ctx) {
+    const keyValueNode = {
+      type: "TOMLKeyValue",
+      key: null,
+      value: null,
+      parent: tableNode,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    tableNode.body.push(keyValueNode);
+    const { nextToken: targetToken } = this.processKeyNode(token, keyValueNode, ctx);
+    if (!isEq(targetToken)) return ctx.reportParseError("missing-equals-sign", targetToken);
+    ctx.addValueContainer({
+      parent: keyValueNode,
+      set: (valNode) => {
+        keyValueNode.value = valNode;
+        applyEndLoc(keyValueNode, valNode);
+        ctx.needNewLine = true;
+        return [];
+      }
+    });
+    ctx.needSameLine = "invalid-key-value-newline";
+    return ["VALUE"];
+  }
+  processKeyNode(token, parent, ctx) {
+    if (isDot(token)) ctx.reportParseError("invalid-leading-dot-in-key", token);
+    const keyNode = {
+      type: "TOMLKey",
+      keys: [],
+      parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    parent.key = keyNode;
+    let targetToken = token;
+    let dotToken = null;
+    do {
+      if (isBare(targetToken)) this.processBareKey(targetToken, keyNode);
+      else if (isString(targetToken)) this.processStringKey(targetToken, keyNode);
+      else break;
+      dotToken = null;
+      targetToken = ctx.nextToken({ needSameLine: "invalid-key-value-newline" });
+      if (!isDot(targetToken)) break;
+      dotToken = targetToken;
+      targetToken = ctx.nextToken({ needSameLine: "invalid-key-value-newline" });
+    } while (targetToken);
+    if (dotToken) ctx.reportParseError(isDot(targetToken) ? "invalid-consecutive-dots-in-key" : "invalid-trailing-dot-in-key", dotToken);
+    applyEndLoc(keyNode, last(keyNode.keys));
+    return {
+      keyNode,
+      nextToken: targetToken
+    };
+  }
+  processBareKey(token, keyNode) {
+    const node3 = {
+      type: "TOMLBare",
+      name: token.value,
+      parent: keyNode,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    keyNode.keys.push(node3);
+  }
+  processStringKey(token, keyNode) {
+    const node3 = {
+      type: "TOMLQuoted",
+      kind: "string",
+      value: token.string,
+      style: STRING_KEY_STYLE_MAP[token.type],
+      multiline: false,
+      parent: keyNode,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    keyNode.keys.push(node3);
+  }
+  processStringValue(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const node3 = {
+      type: "TOMLValue",
+      kind: "string",
+      value: token.string,
+      style: STRING_VALUE_STYLE_MAP[token.type],
+      multiline: isMultiLineString(token),
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    return valueContainer.set(node3);
+  }
+  processNumberValue(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const text = this.text;
+    const [startRange, endRange] = token.range;
+    let numberString = null;
+    const getNumberText = () => {
+      return numberString ?? (numberString = text.slice(startRange, endRange).replace(/_/g, ""));
+    };
+    let node3;
+    if (token.type === "Integer") node3 = {
+      type: "TOMLValue",
+      kind: "integer",
+      value: token.number,
+      bigint: token.bigint,
+      get number() {
+        return getNumberText();
+      },
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    else node3 = {
+      type: "TOMLValue",
+      kind: "float",
+      value: token.number,
+      get number() {
+        return getNumberText();
+      },
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    return valueContainer.set(node3);
+  }
+  processBooleanValue(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const node3 = {
+      type: "TOMLValue",
+      kind: "boolean",
+      value: token.boolean,
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    return valueContainer.set(node3);
+  }
+  processDateTimeValue(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const node3 = {
+      type: "TOMLValue",
+      kind: DATETIME_VALUE_KIND_MAP[token.type],
+      value: token.date,
+      datetime: token.value,
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    return valueContainer.set(node3);
+  }
+  processArray(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const node3 = {
+      type: "TOMLArray",
+      elements: [],
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    const nextToken = ctx.nextToken({ valuesEnabled: true });
+    if (isRightBracket(nextToken)) {
+      applyEndLoc(node3, nextToken);
+      return valueContainer.set(node3);
+    }
+    ctx.backToken();
+    return this.processArrayValue(node3, valueContainer, ctx);
+  }
+  processArrayValue(node3, valueContainer, ctx) {
+    ctx.addValueContainer({
+      parent: node3,
+      set: (valNode) => {
+        node3.elements.push(valNode);
+        let nextToken = ctx.nextToken({ valuesEnabled: true });
+        const hasComma = isComma(nextToken);
+        if (hasComma) nextToken = ctx.nextToken({ valuesEnabled: true });
+        if (isRightBracket(nextToken)) {
+          applyEndLoc(node3, nextToken);
+          return valueContainer.set(node3);
+        }
+        if (hasComma) {
+          ctx.backToken();
+          return this.processArrayValue(node3, valueContainer, ctx);
+        }
+        return ctx.reportParseError(nextToken ? "missing-comma" : "unterminated-array", nextToken);
+      }
+    });
+    return ["VALUE"];
+  }
+  processInlineTable(token, ctx) {
+    const valueContainer = ctx.consumeValueContainer();
+    const node3 = {
+      type: "TOMLInlineTable",
+      body: [],
+      parent: valueContainer.parent,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    const needSameLine = this.tomlVersion.gte(1, 1) ? void 0 : "invalid-inline-table-newline";
+    const nextToken = ctx.nextToken({ needSameLine });
+    if (nextToken) {
+      if (isBare(nextToken) || isString(nextToken)) return this.processInlineTableKeyValue(nextToken, node3, valueContainer, ctx);
+      if (isRightBrace(nextToken)) {
+        applyEndLoc(node3, nextToken);
+        return valueContainer.set(node3);
+      }
+    }
+    return ctx.reportParseError("unexpected-token", nextToken);
+  }
+  processInlineTableKeyValue(token, inlineTableNode, valueContainer, ctx) {
+    const keyValueNode = {
+      type: "TOMLKeyValue",
+      key: null,
+      value: null,
+      parent: inlineTableNode,
+      range: cloneRange(token.range),
+      loc: cloneLoc(token.loc)
+    };
+    inlineTableNode.body.push(keyValueNode);
+    const { nextToken: targetToken } = this.processKeyNode(token, keyValueNode, ctx);
+    if (!isEq(targetToken)) return ctx.reportParseError("missing-equals-sign", targetToken);
+    const needSameLine = this.tomlVersion.gte(1, 1) ? void 0 : "invalid-inline-table-newline";
+    ctx.addValueContainer({
+      parent: keyValueNode,
+      set: (valNode) => {
+        keyValueNode.value = valNode;
+        applyEndLoc(keyValueNode, valNode);
+        let nextToken = ctx.nextToken({ needSameLine });
+        if (isComma(nextToken)) {
+          nextToken = ctx.nextToken({ needSameLine });
+          if (nextToken && (isBare(nextToken) || isString(nextToken))) return this.processInlineTableKeyValue(nextToken, inlineTableNode, valueContainer, ctx);
+          if (isRightBrace(nextToken)) {
+            if (this.tomlVersion.lt(1, 1)) return ctx.reportParseError("invalid-trailing-comma-in-inline-table", nextToken);
+          } else return ctx.reportParseError(nextToken ? "unexpected-token" : "unterminated-inline-table", nextToken);
+        }
+        if (isRightBrace(nextToken)) {
+          applyEndLoc(inlineTableNode, nextToken);
+          return valueContainer.set(inlineTableNode);
+        }
+        return ctx.reportParseError(nextToken ? "missing-comma" : "unterminated-inline-table", nextToken);
+      }
+    });
+    ctx.needSameLine = "invalid-key-value-newline";
+    return ["VALUE"];
+  }
+};
+function isDot(token) {
+  return isPunctuator(token) && token.value === ".";
 }
-function scanKiro(agentHome, project, out) {
-  const agentsDir = join6(agentHome, KIRO_AGENTS_DIR);
-  const defaultFile = join6(agentHome, ...KIRO_AGENT_FILE);
-  for (const name of jsonFiles(agentsDir)) {
-    const file2 = join6(agentsDir, name);
-    const doc = readJson(file2);
-    if (isObj(doc) && doc[KIRO_AGENT_NAME_KEY] === SERVER_KEY) {
-      out.push(finding(file2, "", V1_REASON.kiroAgentFile));
-      continue;
+function isEq(token) {
+  return isPunctuator(token) && token.value === "=";
+}
+function isLeftBracket(token) {
+  return isPunctuator(token) && token.value === "[";
+}
+function isRightBracket(token) {
+  return isPunctuator(token) && token.value === "]";
+}
+function isLeftBrace(token) {
+  return isPunctuator(token) && token.value === "{";
+}
+function isRightBrace(token) {
+  return isPunctuator(token) && token.value === "}";
+}
+function isComma(token) {
+  return isPunctuator(token) && token.value === ",";
+}
+function isPunctuator(token) {
+  return Boolean(token && token.type === "Punctuator");
+}
+function isBare(token) {
+  return token.type === "Bare";
+}
+function isString(token) {
+  return token.type === "BasicString" || token.type === "LiteralString";
+}
+function isMultiLineString(token) {
+  return token.type === "MultiLineBasicString" || token.type === "MultiLineLiteralString";
+}
+function isNumber(token) {
+  return token.type === "Integer" || token.type === "Float";
+}
+function isBoolean(token) {
+  return token.type === "Boolean";
+}
+function isDateTime(token) {
+  return token.type === "OffsetDateTime" || token.type === "LocalDateTime" || token.type === "LocalDate" || token.type === "LocalTime";
+}
+function applyEndLoc(node3, child) {
+  if (child) {
+    node3.range[1] = child.range[1];
+    node3.loc.end = clonePos(child.loc.end);
+  }
+}
+function cloneRange(range) {
+  return [range[0], range[1]];
+}
+function cloneLoc(loc) {
+  return {
+    start: clonePos(loc.start),
+    end: clonePos(loc.end)
+  };
+}
+function clonePos(pos) {
+  return {
+    line: pos.line,
+    column: pos.column
+  };
+}
+var tomlKeys = {
+  Program: ["body"],
+  TOMLTopLevelTable: ["body"],
+  TOMLTable: ["key", "body"],
+  TOMLKeyValue: ["key", "value"],
+  TOMLKey: ["keys"],
+  TOMLArray: ["elements"],
+  TOMLInlineTable: ["body"],
+  TOMLBare: [],
+  TOMLQuoted: [],
+  TOMLValue: []
+};
+var KEYS3 = unionWith(tomlKeys);
+function parseForESLint(code, options) {
+  return {
+    ast: new TOMLParser(code, options).parse(),
+    visitorKeys: KEYS3,
+    services: { isTOML: true }
+  };
+}
+var getStaticTOMLValue = generateConvertTOMLValue((node3) => node3.value);
+function generateConvertTOMLValue(convertValue) {
+  function resolveValue(node3, baseTable) {
+    return resolver[node3.type](node3, baseTable);
+  }
+  const resolver = {
+    Program(node3, baseTable = {}) {
+      return resolveValue(node3.body[0], baseTable);
+    },
+    TOMLTopLevelTable(node3, baseTable = {}) {
+      for (const body of node3.body) resolveValue(body, baseTable);
+      return baseTable;
+    },
+    TOMLKeyValue(node3, baseTable = {}) {
+      const value = resolveValue(node3.value);
+      set2(baseTable, resolveValue(node3.key), value);
+      return baseTable;
+    },
+    TOMLTable(node3, baseTable = {}) {
+      const table = getTable(baseTable, resolveValue(node3.key), node3.kind === "array");
+      for (const body of node3.body) resolveValue(body, table);
+      return baseTable;
+    },
+    TOMLArray(node3) {
+      return node3.elements.map((e) => resolveValue(e));
+    },
+    TOMLInlineTable(node3) {
+      const table = {};
+      for (const body of node3.body) resolveValue(body, table);
+      return table;
+    },
+    TOMLKey(node3) {
+      return node3.keys.map((key) => resolveValue(key));
+    },
+    TOMLBare(node3) {
+      return node3.name;
+    },
+    TOMLQuoted(node3) {
+      return node3.value;
+    },
+    TOMLValue(node3) {
+      return convertValue(node3);
+    }
+  };
+  return (node3) => resolveValue(node3);
+}
+function getTable(baseTable, keys, array4) {
+  let target = baseTable;
+  for (let index = 0; index < keys.length - 1; index++) {
+    const key = keys[index];
+    target = getNextTargetFromKey(target, key);
+  }
+  const lastKey = last(keys);
+  const lastTarget = target[lastKey];
+  if (lastTarget == null) {
+    const tableValue$1 = {};
+    target[lastKey] = array4 ? [tableValue$1] : tableValue$1;
+    return tableValue$1;
+  }
+  if (isValue(lastTarget)) {
+    const tableValue$1 = {};
+    target[lastKey] = array4 ? [tableValue$1] : tableValue$1;
+    return tableValue$1;
+  }
+  if (!array4) {
+    if (Array.isArray(lastTarget)) {
+      const tableValue$1 = {};
+      target[lastKey] = tableValue$1;
+      return tableValue$1;
+    }
+    return lastTarget;
+  }
+  if (Array.isArray(lastTarget)) {
+    const tableValue$1 = {};
+    lastTarget.push(tableValue$1);
+    return tableValue$1;
+  }
+  const tableValue = {};
+  target[lastKey] = [tableValue];
+  return tableValue;
+  function getNextTargetFromKey(currTarget, key) {
+    const nextTarget = currTarget[key];
+    if (nextTarget == null) {
+      const val = {};
+      currTarget[key] = val;
+      return val;
     }
-    if (file2 !== defaultFile) continue;
-    for (const c of isObj(doc) ? flatCommands(doc[HOOKS_KEY], [HOOKS_KEY]) : []) {
-      if (isV1Hook(c.command)) out.push(finding(file2, c.path, V1_REASON.kiroHook));
+    if (isValue(nextTarget)) {
+      const val = {};
+      currTarget[key] = val;
+      return val;
+    }
+    let resultTarget = nextTarget;
+    while (Array.isArray(resultTarget)) {
+      const lastIndex = resultTarget.length - 1;
+      const nextElement = resultTarget[lastIndex];
+      if (isValue(nextElement)) {
+        const val = {};
+        resultTarget[lastIndex] = val;
+        return val;
+      }
+      resultTarget = nextElement;
     }
+    return resultTarget;
   }
-  const steeringDocs = [join6(agentHome, ...KIRO_STEERING_FILE)];
-  if (project !== void 0) steeringDocs.push(join6(project, ...AGENT_HOME_DIR.kiro, ...KIRO_STEERING_FILE));
-  for (const file2 of steeringDocs) {
-    if (existsSync4(file2)) out.push(finding(file2, "", V1_REASON.kiroSteering));
+}
+function set2(baseTable, keys, value) {
+  let target = baseTable;
+  for (let index = 0; index < keys.length - 1; index++) {
+    const key = keys[index];
+    const nextTarget = target[key];
+    if (nextTarget == null) {
+      const val = {};
+      target[key] = val;
+      target = val;
+    } else if (isValue(nextTarget) || Array.isArray(nextTarget)) {
+      const val = {};
+      target[key] = val;
+      target = val;
+    } else target = nextTarget;
   }
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+  target[last(keys)] = value;
 }
-function scanPi(piAgentDir, agentHome, out) {
-  const file2 = join6(piAgentDir, SETTINGS_FILE);
-  const doc = readJson(file2);
-  listOf(isObj(doc) ? doc[PI_PACKAGES_KEY] : void 0).forEach((pkg, i) => {
-    const spec = isObj(pkg) ? pkg[PI_PACKAGE_SOURCE_KEY] : pkg;
-    if (spec === V1_PI_PACKAGE) out.push(finding(file2, keyPath(PI_PACKAGES_KEY, i), V1_REASON.piNpm));
-  });
-  dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+function isValue(value) {
+  return typeof value !== "object" || value instanceof Date;
 }
-function scanOpencode(agentHome, out) {
-  for (const name of OPENCODE_CONFIG_FILES) {
-    const file2 = join6(agentHome, name);
-    const doc = readJson(file2);
-    if (!isObj(doc) || !Array.isArray(doc[OPENCODE_PLUGIN_KEY])) continue;
-    doc[OPENCODE_PLUGIN_KEY].forEach((spec, i) => {
-      if (spec === V1_OPENCODE_PLUGIN_SPEC) out.push(finding(file2, keyPath(OPENCODE_PLUGIN_KEY, i), V1_REASON.opencodePlugin));
-    });
-    return;
-  }
+function parseTOML(code, options) {
+  return parseForESLint(code, options).ast;
 }
-function scanZcode(agentHome, out) {
-  const configFile = join6(agentHome, ZCODE_CLI_DIR, CONFIG_JSON_FILE);
-  const config4 = readJson(configFile);
-  const events = isObj(config4) && isObj(config4[HOOKS_KEY]) ? config4[HOOKS_KEY][ZCODE_EVENTS_KEY] : void 0;
-  for (const c of flatCommands(events, [HOOKS_KEY, ZCODE_EVENTS_KEY])) {
-    if (c.command.includes(V1_HOOK_COMMAND)) out.push(finding(configFile, c.path, V1_REASON.zcodeHook));
+
+// src/core/ops/atomic-file.ts
+import { mkdirSync as mkdirSync4, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import path3 from "node:path";
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function errCode2(e) {
+  return e.code;
+}
+function renameWithRetry(from, to, opts = {}) {
+  const rename = opts.rename ?? renameSync;
+  const sleep2 = opts.sleep ?? sleepSync;
+  const win = (opts.platform ?? process.platform) === "win32";
+  for (let attempt = 0; ; attempt += 1) {
+    try {
+      rename(from, to);
+      return;
+    } catch (e) {
+      const busy = win && ATOMIC_RENAME_BUSY_CODES.includes(errCode2(e) ?? "");
+      if (!busy || attempt >= ATOMIC_RENAME_RETRIES) throw e;
+      sleep2(ATOMIC_RENAME_DELAY_MS);
+    }
   }
-  const hooksFile = join6(agentHome, ZCODE_CLI_DIR, HOOKS_JSON_FILE);
-  for (const c of nestedCommands(readJson(hooksFile))) {
-    if (c.command.includes(V1_HOOK_COMMAND)) out.push(finding(hooksFile, c.path, V1_REASON.zcodeHook));
+}
+function unlinkWithRetry(file2, opts = {}) {
+  const unlink = opts.unlink ?? unlinkSync;
+  const sleep2 = opts.sleep ?? sleepSync;
+  const win = (opts.platform ?? process.platform) === "win32";
+  for (let attempt = 0; ; attempt += 1) {
+    try {
+      unlink(file2);
+      return;
+    } catch (e) {
+      if (errCode2(e) === "ENOENT") return;
+      const busy = win && ATOMIC_RENAME_BUSY_CODES.includes(errCode2(e) ?? "");
+      if (!busy || attempt >= ATOMIC_RENAME_RETRIES) throw replaceFailure(file2, e);
+      sleep2(ATOMIC_RENAME_DELAY_MS);
+    }
   }
 }
-function firstTmpMatch(dir) {
-  let handle;
+function replaceFailure(file2, e) {
+  const busy = ATOMIC_RENAME_BUSY_CODES.includes(errCode2(e) ?? "");
+  const cause = e.message;
+  return new Error(busy ? `Could not replace ${file2}: ${cause}. Fix: close the program using ${file2}, then re-run` : `Could not write ${file2}: ${cause}. Fix: check the path and its permissions, then re-run`, { cause: e });
+}
+function removeTmpFile(tmp, opts = {}) {
   try {
-    handle = opendirSync(dir);
+    unlinkWithRetry(tmp, opts);
   } catch {
-    return null;
   }
+}
+function atomicWriteFile(file2, text, opts = {}) {
+  mkdirSync4(path3.dirname(file2), { recursive: true });
+  const tmp = path3.join(path3.dirname(file2), `${ATOMIC_TMP_PREFIX}${path3.basename(file2)}${ATOMIC_TMP_MARK}${process.pid}`);
   try {
-    for (let e = handle.readSync(); e !== null; e = handle.readSync()) {
-      if (e.name.startsWith(V1_TMP_PREFIX)) return e.name;
-    }
-    return null;
-  } catch {
-    return null;
-  } finally {
-    handle.closeSync();
+    writeFileSync2(tmp, text);
+    renameWithRetry(tmp, file2, opts);
+  } catch (e) {
+    removeTmpFile(tmp, opts);
+    throw replaceFailure(file2, e);
   }
 }
-function scanAll(home, tmp, out) {
-  const root = join6(home, DATA_ROOT.slice(1));
-  for (const name of V1_DATA_ROOT_ENTRIES) dataDir(join6(root, name), V1_REASON.dataRoot, out);
-  if (firstTmpMatch(tmp) !== null) out.push(finding(tmp, V1_TMP_PREFIX + "*", V1_REASON.tmpFile));
-}
-function detectV1(agent, home, scope = {}) {
-  const out = [];
-  const project = scope.project;
-  const agentHome = join6(home, ...AGENT_HOME_DIR[agent]);
-  switch (agent) {
-    case "claude-code":
-      scanClaudeCode(home, agentHome, out);
-      break;
-    case "codex":
-      scanCodex(agentHome, out);
-      break;
-    case "gemini":
-      scanGemini(agentHome, out);
-      break;
-    case "qwen":
-      claudeShapeSettings(agentHome, out);
-      dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
-      break;
-    case "copilot-cli":
-      v1HookFile(join6(agentHome, V1_HOOKS_DIR_NAME, OWN_HOOK_FILE), out);
-      dataDir(join6(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
-      break;
-    case "vscode":
-      scanVscode(agentHome, project, out);
-      break;
-    case "kiro":
-      scanKiro(agentHome, project, out);
-      break;
-    case "pi":
-      scanPi(scope.piAgentDir ?? join6(agentHome, PI_AGENT_DIR), agentHome, out);
-      break;
-    case "opencode":
-      scanOpencode(agentHome, out);
-      break;
-    case "zcode":
-      scanZcode(agentHome, out);
-      break;
-  }
-  scanAll(home, scope.tmp ?? tmpdir(), out);
-  return out;
+
+// src/core/ops/host-text.ts
+var BOM_CODE = 65279;
+var CR_CODE = 13;
+var CRLF = "\r\n";
+var LF = "\n";
+function hostLayout(raw) {
+  let crlf = 0;
+  let lf = 0;
+  for (let i = raw.indexOf(LF); i >= 0; i = raw.indexOf(LF, i + 1)) {
+    if (i > 0 && raw.charCodeAt(i - 1) === CR_CODE) crlf += 1;
+    else lf += 1;
+  }
+  return { bom: raw.length > 0 && raw.charCodeAt(0) === BOM_CODE, crlf: crlf > 0 && crlf >= lf };
+}
+function hostText(raw) {
+  const bare2 = raw.length > 0 && raw.charCodeAt(0) === BOM_CODE ? raw.slice(1) : raw;
+  return bare2.indexOf(CRLF) < 0 ? bare2 : bare2.split(CRLF).join(LF);
+}
+function withLayout(text, layout) {
+  const eol = layout.crlf ? text.split(LF).join(CRLF) : text;
+  return layout.bom ? String.fromCharCode(BOM_CODE) + eol : eol;
 }
 
 // src/core/ops/host-config.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname3, join as join7 } from "node:path";
-function formatOf(path4) {
-  if (path4.endsWith(JSONC_EXT)) return "jsonc";
-  if (path4.endsWith(TOML_EXT)) return "toml";
+function formatOf(path5) {
+  if (path5.endsWith(JSONC_EXT)) return "jsonc";
+  if (path5.endsWith(TOML_EXT)) return "toml";
   return "json";
 }
-function readHostConfig(agent, path4) {
-  let file2 = path4;
+function readHostConfig(agent, path5) {
+  let file2 = path5;
   if (agent === "opencode") {
-    const jsonc = join7(dirname3(path4), OPENCODE_CONFIG_FILES[0]);
-    if (existsSync5(jsonc)) file2 = jsonc;
+    const jsonc = join6(dirname3(path5), OPENCODE_CONFIG_FILES[0]);
+    if (existsSync4(jsonc)) file2 = jsonc;
   }
-  const text = existsSync5(file2) ? readFileSync5(file2, "utf8") : "";
-  return { agent, text, format: formatOf(file2), path: file2 };
+  const raw = existsSync4(file2) ? readFileSync4(file2, "utf8") : "";
+  return { agent, text: hostText(raw), format: agent === "opencode" && !file2.endsWith(TOML_EXT) ? "jsonc" : formatOf(file2), path: file2, layout: hostLayout(raw) };
 }
 function stripJsonComments(text) {
   let out = "";
@@ -45425,171 +47399,63 @@ function scanJson(text, format) {
   if (sc.i !== clean.length) sc.fail();
   return { clean, root, value };
 }
-function tomlKeyPath(s) {
-  const out = [];
-  let i = 0;
-  for (; ; ) {
-    while (s[i] === " " || s[i] === "	") i += 1;
-    let seg = "";
-    if (s[i] === '"' || s[i] === "'") {
-      const q = s[i];
-      let j = i + 1;
-      while (j < s.length && s[j] !== q) j += q === '"' && s[j] === "\\" ? 2 : 1;
-      if (j >= s.length) throw new SyntaxError("key");
-      seg = q === '"' ? JSON.parse(s.slice(i, j + 1)) : s.slice(i + 1, j);
-      i = j + 1;
-    } else {
-      while (i < s.length && !" 	.".includes(s[i])) {
-        seg += s[i];
-        i += 1;
-      }
-      if (seg === "") throw new SyntaxError("key");
-    }
-    out.push(seg);
-    while (s[i] === " " || s[i] === "	") i += 1;
-    if (i >= s.length) return out;
-    if (s[i] !== ".") throw new SyntaxError("key");
-    i += 1;
-  }
+function keyNames(key) {
+  return key.keys.map((k) => k.type === "TOMLBare" ? k.name : k.value);
 }
-var TomlValue = class {
-  i = 0;
-  s;
-  constructor(s) {
-    this.s = s;
-  }
-  ws() {
-    for (; ; ) {
-      while (this.i < this.s.length && " 	\r\n".includes(this.s[this.i])) this.i += 1;
-      if (this.s[this.i] !== "#") return;
-      while (this.i < this.s.length && this.s[this.i] !== "\n") this.i += 1;
-    }
-  }
-  read() {
-    this.ws();
-    const c = this.s[this.i];
-    if (c === '"' || c === "'") {
-      let j2 = this.i + 1;
-      while (j2 < this.s.length && this.s[j2] !== c && this.s[j2] !== "\n") j2 += c === '"' && this.s[j2] === "\\" ? 2 : 1;
-      if (this.s[j2] !== c) throw new SyntaxError("string");
-      const raw = this.s.slice(this.i, j2 + 1);
-      this.i = j2 + 1;
-      return c === '"' ? JSON.parse(raw) : raw.slice(1, -1);
-    }
-    if (c === "[") {
-      this.i += 1;
-      const out = [];
-      for (; ; ) {
-        this.ws();
-        if (this.s[this.i] === "]") {
-          this.i += 1;
-          return out;
-        }
-        out.push(this.read());
-        this.ws();
-        if (this.s[this.i] === ",") {
-          this.i += 1;
-          continue;
-        }
-        if (this.s[this.i] !== "]") throw new SyntaxError("array");
-      }
-    }
-    if (c === "{") {
-      this.i += 1;
-      const out = {};
-      for (; ; ) {
-        this.ws();
-        if (this.s[this.i] === "}") {
-          this.i += 1;
-          return out;
-        }
-        const eq = this.s.indexOf("=", this.i);
-        if (eq < 0) throw new SyntaxError("inline table");
-        const key = tomlKeyPath(this.s.slice(this.i, eq));
-        this.i = eq + 1;
-        setPath(out, key, this.read());
-        this.ws();
-        if (this.s[this.i] === ",") {
-          this.i += 1;
-          continue;
-        }
-        if (this.s[this.i] !== "}") throw new SyntaxError("inline table");
-      }
-    }
-    let j = this.i;
-    while (j < this.s.length && !" 	\r\n,]}#".includes(this.s[j])) j += 1;
-    const word = this.s.slice(this.i, j);
-    this.i = j;
-    if (word === "true") return true;
-    if (word === "false") return false;
-    const n = Number(word.split("_").join(""));
-    if (word === "" || Number.isNaN(n)) throw new SyntaxError("value");
-    return n;
-  }
-};
-function setPath(target, path4, value) {
-  let cur = target;
-  for (let k = 0; k < path4.length - 1; k += 1) {
-    const next = cur[path4[k]];
-    if (next === void 0) cur[path4[k]] = {};
-    else if (!isPlainObject6(next)) throw new SyntaxError("key conflict");
-    cur = cur[path4[k]];
-  }
-  if (cur[path4[path4.length - 1]] !== void 0) throw new SyntaxError("duplicate key");
-  cur[path4[path4.length - 1]] = value;
+function lineStartOf(text, at) {
+  return at === 0 ? 0 : text.lastIndexOf("\n", at - 1) + 1;
+}
+function lineEndOf(text, at) {
+  const nl = text.indexOf("\n", at);
+  return nl < 0 ? text.length : nl + 1;
+}
+function tomlValue(text) {
+  return getStaticTOMLValue(parseTOML(text));
 }
 function scanToml(text) {
-  const value = {};
+  const program = parseTOML(text);
   const tables = [];
-  let table = value;
-  let i = 0;
-  while (i < text.length) {
-    const lineEnd = text.indexOf("\n", i) < 0 ? text.length : text.indexOf("\n", i) + 1;
-    const line = text.slice(i, lineEnd).trim();
-    if (line === "" || line.startsWith("#")) {
-      i = lineEnd;
-      continue;
-    }
-    if (line.startsWith("[")) {
-      if (line.startsWith("[[")) throw new SyntaxError("array of tables");
-      const close = line.indexOf("]");
-      if (close < 0) throw new SyntaxError("header");
-      const path4 = tomlKeyPath(line.slice(1, close));
-      if (tables.length > 0) tables[tables.length - 1].end = i;
-      tables.push({ path: path4, start: i, end: text.length });
-      let cur = value;
-      for (const seg of path4) {
-        if (cur[seg] === void 0) cur[seg] = {};
-        if (!isPlainObject6(cur[seg])) throw new SyntaxError("table conflict");
-        cur = cur[seg];
-      }
-      table = cur;
-      i = lineEnd;
+  const keys = [];
+  const addKey = (base, kv) => {
+    keys.push({ base, full: [...base, ...keyNames(kv.key)], start: kv.range[0], end: kv.range[1], inline: kv.value.type === "TOMLInlineTable" });
+  };
+  for (const node3 of program.body[0].body) {
+    if (node3.type === "TOMLKeyValue") {
+      addKey([], node3);
       continue;
     }
-    const eq = text.indexOf("=", i);
-    if (eq < 0 || eq >= lineEnd) throw new SyntaxError("key/value");
-    const key = tomlKeyPath(text.slice(i, eq));
-    const reader = new TomlValue(text);
-    reader.i = eq + 1;
-    setPath(table, key, reader.read());
-    while (reader.i < text.length && (text[reader.i] === " " || text[reader.i] === "	")) reader.i += 1;
-    if (text[reader.i] === "#") while (reader.i < text.length && text[reader.i] !== "\n") reader.i += 1;
-    if (reader.i < text.length && text[reader.i] !== "\n" && text[reader.i] !== "\r") throw new SyntaxError("trailing text");
-    i = text.indexOf("\n", reader.i) < 0 ? text.length : text.indexOf("\n", reader.i) + 1;
+    if (!node3.resolvedKey.every((seg) => typeof seg === "string")) continue;
+    const path5 = node3.resolvedKey;
+    for (const kv of node3.body) addKey(path5, kv);
+    if (node3.kind !== "standard") continue;
+    const start = lineStartOf(text, node3.range[0]);
+    const headEnd = lineEndOf(text, node3.key.range[1]);
+    const last2 = node3.body[node3.body.length - 1];
+    tables.push({
+      path: path5,
+      header: text.slice(start, text[headEnd - 1] === "\n" ? headEnd - 1 : headEnd),
+      start,
+      end: last2 === void 0 ? headEnd : lineEndOf(text, last2.range[1])
+    });
   }
-  return { value, tables };
+  return { value: getStaticTOMLValue(program), tables, keys };
 }
-function parseHostConfig(agent, path4, text, format) {
+function tomlTableSpans(text) {
+  return scanToml(text).tables;
+}
+function tomlHeaderText(path5) {
+  return "[" + path5.map(tomlHeaderKey).join(".") + "]";
+}
+function parseHostConfig(agent, path5, text, format) {
   try {
     return format === "toml" ? scanToml(text).value : scanJson(text, format).value;
   } catch {
-    throw new CtxError("CONFIG_PARSE_FAILED", { agent, path: path4, format });
+    throw new CtxError("CONFIG_PARSE_FAILED", { agent, path: path5, format });
   }
 }
-function hostConfigValueAt(value, path4) {
+function hostConfigValueAt(value, path5) {
   let cur = value;
-  for (const seg of path4) {
+  for (const seg of path5) {
     if (!isPlainObject6(cur)) return void 0;
     cur = cur[seg];
   }
@@ -45622,91 +47488,131 @@ function indentUnit(root, clean) {
 function render(value, unit, base) {
   return JSON.stringify(value, null, unit).split("\n").join("\n" + base);
 }
-function nest(path4, value) {
+function nest(path5, value) {
   let out = value;
-  for (let k = path4.length - 1; k >= 0; k -= 1) out = { [path4[k]]: out };
+  for (let k = path5.length - 1; k >= 0; k -= 1) out = { [path5[k]]: out };
   return out;
 }
-function setJsonText(text, format, path4, value) {
+function setJsonText(text, format, path5, value) {
   const doc = scanJson(text, format);
   const unit = indentUnit(doc.root, doc.clean);
-  if (doc.root === null) return render(nest(path4, value), unit, "") + "\n";
+  if (doc.root === null) return render(nest(path5, value), unit, "") + "\n";
   let node3 = doc.root;
   let depth = 0;
-  while (depth < path4.length && node3.kind === "object") {
-    const hit = node3.members.find((m) => m.key === path4[depth]);
+  while (depth < path5.length && node3.kind === "object") {
+    const hit = node3.members.find((m) => m.key === path5[depth]);
     if (hit === void 0) break;
     node3 = hit.node;
     depth += 1;
   }
-  if (depth === path4.length) {
+  if (depth === path5.length) {
     return text.slice(0, node3.start) + render(value, unit, lineIndent(doc.clean, node3.start)) + text.slice(node3.end);
   }
-  if (node3.kind !== "object") throw new SyntaxError("not an object at " + path4.slice(0, depth).join("."));
-  const rest = nest(path4.slice(depth + 1), value);
-  const last = node3.members[node3.members.length - 1];
-  if (last === void 0) {
+  if (node3.kind !== "object") throw new SyntaxError("not an object at " + path5.slice(0, depth).join("."));
+  const rest = nest(path5.slice(depth + 1), value);
+  const last2 = node3.members[node3.members.length - 1];
+  if (last2 === void 0) {
     const base2 = lineIndent(doc.clean, node3.start);
-    const member2 = "\n" + base2 + unit + JSON.stringify(path4[depth]) + ": " + render(rest, unit, base2 + unit) + "\n" + base2;
+    const member2 = "\n" + base2 + unit + JSON.stringify(path5[depth]) + ": " + render(rest, unit, base2 + unit) + "\n" + base2;
     return text.slice(0, node3.start + 1) + member2 + text.slice(node3.end - 1);
   }
-  const base = lineIndent(doc.clean, last.keyStart);
-  let at = last.node.end;
+  const base = lineIndent(doc.clean, last2.keyStart);
+  let at = last2.node.end;
   while (" 	\r\n".includes(doc.clean[at])) at += 1;
   const trailing = doc.clean[at] === ",";
-  const insertAt = trailing ? at + 1 : last.node.end;
-  const member = (trailing ? "" : ",") + "\n" + base + JSON.stringify(path4[depth]) + ": " + render(rest, unit, base);
+  const insertAt = trailing ? at + 1 : last2.node.end;
+  const member = (trailing ? "" : ",") + "\n" + base + JSON.stringify(path5[depth]) + ": " + render(rest, unit, base);
   return text.slice(0, insertAt) + member + text.slice(insertAt);
 }
 function tomlScalar(v) {
   if (Array.isArray(v)) return "[" + v.map(tomlScalar).join(", ") + "]";
+  if (isPlainObject6(v)) return "{ " + Object.entries(v).map(([k, x]) => tomlHeaderKey(k) + " = " + tomlScalar(x)).join(", ") + " }";
   if (typeof v === "string") return JSON.stringify(v);
   if (typeof v === "number" || typeof v === "boolean") return String(v);
   throw new SyntaxError("unsupported TOML value");
 }
 function tomlHeaderKey(seg) {
+  if (seg === "") return '""';
   for (const ch of seg) {
     const bare2 = ch >= "a" && ch <= "z" || ch >= "A" && ch <= "Z" || ch >= "0" && ch <= "9" || ch === "_" || ch === "-";
     if (!bare2) return JSON.stringify(seg);
   }
   return seg;
 }
-function tomlBlock(path4, value) {
-  let out = "[" + path4.map(tomlHeaderKey).join(".") + "]\n";
+function tomlBlock(path5, value) {
+  let out = "[" + path5.map(tomlHeaderKey).join(".") + "]\n";
   const subs = [];
   for (const [k, v] of Object.entries(value)) {
-    if (isPlainObject6(v)) subs.push(tomlBlock([...path4, k], v));
+    if (isPlainObject6(v)) subs.push(tomlBlock([...path5, k], v));
     else out += tomlHeaderKey(k) + " = " + tomlScalar(v) + "\n";
   }
   return [out, ...subs].join("\n");
 }
-function setTomlText(text, path4, value) {
-  if (!isPlainObject6(value)) throw new SyntaxError("TOML edits replace a whole table");
+function under(path5, prefix) {
+  return path5.length >= prefix.length && prefix.every((seg, k) => path5[k] === seg);
+}
+function keyLineRange(text, k) {
+  const ls = lineStartOf(text, k.start);
+  const le = lineEndOf(text, k.end);
+  const rest = text.slice(k.end, le).trim();
+  const alone = text.slice(ls, k.start).trim() === "" && (rest === "" || rest.startsWith("#"));
+  return alone ? [ls, le] : [k.start, k.end];
+}
+function withValueAt(root, rel, value) {
+  if (rel.length === 0) return value;
+  const base = isPlainObject6(root) ? { ...root } : {};
+  const next = withValueAt(base[rel[0]], rel.slice(1), value);
+  if (next === void 0) delete base[rel[0]];
+  else base[rel[0]] = next;
+  return base;
+}
+function replaceToml(text, doc, path5, value) {
+  const block = value === void 0 ? "" : tomlBlock(path5, value);
+  const owned = doc.tables.filter((t) => under(t.path, path5));
+  const cuts = doc.keys.filter((k) => under(k.full, path5) && !under(k.base, path5)).map((k) => [...keyLineRange(text, k), ""]);
+  owned.forEach((t, n) => cuts.push([t.start, t.end, n === 0 ? block : ""]));
+  cuts.sort((a, b) => b[0] - a[0]);
+  let out = text;
+  for (const [s, e, put] of cuts) out = out.slice(0, s) + put + out.slice(e);
+  if (owned.length > 0 || block === "") return out;
+  const sep2 = out === "" ? "" : out.endsWith("\n\n") ? "" : out.endsWith("\n") ? "\n" : "\n\n";
+  return out + sep2 + block;
+}
+var tableLike = (v) => v === void 0 || isPlainObject6(v);
+function setTomlText(text, path5, value) {
+  if (value !== void 0 && !isPlainObject6(value)) throw new SyntaxError("TOML edits replace a whole table");
   const doc = scanToml(text);
-  const owned = doc.tables.filter((t) => t.path.length >= path4.length && path4.every((seg, k) => t.path[k] === seg));
-  const block = tomlBlock(path4, value);
-  if (owned.length === 0) {
-    const sep2 = text === "" ? "" : text.endsWith("\n\n") ? "" : text.endsWith("\n") ? "\n" : "\n\n";
-    return text + sep2 + block;
-  }
-  let out = text.slice(0, owned[0].start) + block;
-  let cursor = owned[0].end;
-  for (const t of owned.slice(1)) {
-    out += text.slice(cursor, t.start).trim() === "" ? "" : text.slice(cursor, t.start);
-    cursor = t.end;
-  }
-  const tail = text.slice(cursor);
-  return out + (tail === "" || block.endsWith("\n\n") ? "" : "\n") + tail;
-}
-function setText(agent, path4, text, format, key, value) {
+  const cur = hostConfigValueAt(doc.value, path5);
+  if (sameValue(cur, value)) return text;
+  const inline = doc.keys.find((k) => k.inline && k.full.length < path5.length && under(path5, k.full));
+  if (inline !== void 0) {
+    const whole = withValueAt(hostConfigValueAt(doc.value, inline.full), path5.slice(inline.full.length), value);
+    return replaceToml(text, doc, inline.full, whole);
+  }
+  if (isPlainObject6(cur) && isPlainObject6(value)) {
+    const names = [.../* @__PURE__ */ new Set([...Object.keys(cur), ...Object.keys(value)])].filter((k) => !sameValue(cur[k], value[k]));
+    if (names.every((k) => tableLike(cur[k]) && tableLike(value[k]))) {
+      let out = text;
+      for (const k of names) out = setTomlText(out, [...path5, k], value[k]);
+      return out;
+    }
+  }
+  return replaceToml(text, doc, path5, value);
+}
+function setText(agent, path5, text, format, key, value) {
   try {
-    return format === "toml" ? setTomlText(text, key, value) : setJsonText(text, format, key, value);
+    if (format !== "toml") return setJsonText(text, format, key, value);
+    const out = setTomlText(text, key, value);
+    const landed = hostConfigValueAt(tomlValue(out), key);
+    const emptyTable = isPlainObject6(value) && Object.keys(value).length === 0;
+    if (!sameValue(landed, value) && !(emptyTable && landed === void 0)) throw new SyntaxError("edit did not land");
+    return out;
   } catch {
-    throw new CtxError("CONFIG_PARSE_FAILED", { agent, path: path4, format });
+    throw new CtxError("CONFIG_PARSE_FAILED", { agent, path: path5, format });
   }
 }
 function serverScript() {
-  return join7(dirname3(process.argv[1] ?? ""), SERVER_ENTRY_FILE);
+  return join6(dirname3(process.argv[1] ?? ""), SERVER_ENTRY_FILE);
 }
 function listTarget(key, own4, v1) {
   return {
@@ -45732,14 +47638,14 @@ function ownTargets(agent) {
   if (agent === "pi") return [listTarget(PI_PACKAGES_KEY, PI_GIT_PACKAGE, V1_PI_PACKAGE)];
   return [];
 }
-function applyEdits(agent, path4, text, format, wanted) {
-  const parsed = parseHostConfig(agent, path4, text, format);
+function applyEdits(agent, path5, text, format, wanted) {
+  const parsed = parseHostConfig(agent, path5, text, format);
   let out = text;
   const edits = [];
   for (const [key, after] of wanted) {
     const before = hostConfigValueAt(parsed, key);
     if (sameValue(before, after)) continue;
-    out = setText(agent, path4, out, format, key, after);
+    out = setText(agent, path5, out, format, key, after);
     edits.push({ path: key.join("."), before, after });
   }
   return { text: out, format, edits };
@@ -45753,26 +47659,307 @@ function writeHostConfigEdit(_requested, current, patch) {
   const wanted = Object.entries(patch).map(([k, v]) => [[k], v]);
   const result = applyEdits(current.agent, current.path, current.text, current.format, wanted);
   if (result.edits.length === 0) return [];
-  const tmp = current.path + HOST_CONFIG_TMP_SUFFIX;
-  writeFileSync2(tmp, result.text, "utf8");
-  renameSync(tmp, current.path);
+  atomicWriteFile(current.path, current.layout === void 0 ? result.text : withLayout(result.text, current.layout));
   return result.edits;
 }
 
+// src/core/ops/detect-v1.ts
+var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var keyPath = (...parts) => parts.join(".");
+var finding = (file2, path5, reason) => ({ file: file2, path: path5, reason });
+function stripJsonc(text) {
+  let out = "";
+  let inStr = false;
+  let esc4 = false;
+  for (let i = 0; i < text.length; i++) {
+    const c = text[i];
+    if (inStr) {
+      out += c;
+      if (esc4) esc4 = false;
+      else if (c === "\\") esc4 = true;
+      else if (c === '"') inStr = false;
+      continue;
+    }
+    if (c === '"') {
+      inStr = true;
+      out += c;
+      continue;
+    }
+    if (c === "/" && text[i + 1] === "/") {
+      while (i < text.length && text[i] !== "\n") i++;
+      out += "\n";
+      continue;
+    }
+    if (c === "/" && text[i + 1] === "*") {
+      const end = text.indexOf("*/", i + 2);
+      i = end === -1 ? text.length : end + 1;
+      continue;
+    }
+    if (c === ",") {
+      let j = i + 1;
+      while (j < text.length && " 	\r\n".includes(text[j])) j++;
+      if (text[j] === "}" || text[j] === "]") continue;
+    }
+    out += c;
+  }
+  return out;
+}
+function readJson(file2) {
+  try {
+    return JSON.parse(stripJsonc(hostText(readFileSync5(file2, "utf8"))));
+  } catch {
+    return void 0;
+  }
+}
+function readText(file2) {
+  try {
+    return hostText(readFileSync5(file2, "utf8"));
+  } catch {
+    return "";
+  }
+}
+function readTomlTables(file2) {
+  try {
+    return tomlTableSpans(readText(file2));
+  } catch {
+    return [];
+  }
+}
+var listOf = (v) => Array.isArray(v) ? v : [];
+var commandOf = (v) => isObj(v) && typeof v.command === "string" ? v.command : null;
+function nestedCommands(doc) {
+  const out = [];
+  if (!isObj(doc) || !isObj(doc[HOOKS_KEY])) return out;
+  for (const [event, groups] of Object.entries(doc[HOOKS_KEY])) {
+    listOf(groups).forEach((group, i) => {
+      if (!isObj(group)) return;
+      listOf(group[HOOKS_KEY]).forEach((inner, j) => {
+        const command = commandOf(inner);
+        if (command !== null) out.push({ path: keyPath(HOOKS_KEY, event, i, HOOKS_KEY, j), command });
+      });
+    });
+  }
+  return out;
+}
+function flatCommands(events, prefix) {
+  const out = [];
+  if (!isObj(events)) return out;
+  for (const [event, entries] of Object.entries(events)) {
+    listOf(entries).forEach((entry, i) => {
+      const command = commandOf(entry);
+      if (command !== null) out.push({ path: keyPath(...prefix, event, i), command });
+    });
+  }
+  return out;
+}
+var isV1Hook = (cmd) => cmd.includes(SERVER_KEY) && (V1_SCRIPT_NAMES.some((name) => cmd.includes(name)) || cmd.includes(V1_HOOK_COMMAND));
+var isCodexScript = (cmd) => cmd.includes(V1_SCRIPT_EXT) && V1_PATH_SEPS.some((sep2) => cmd.includes(V1_CODEX_HOOKS_DIR.join(sep2) + sep2));
+function dataDir(dir, reason, out) {
+  if (existsSync5(dir)) out.push(finding(dir, "", reason));
+}
+function mcpEntry(file2, doc, out) {
+  if (isObj(doc) && isObj(doc[MCP_SERVERS_KEY]) && Object.hasOwn(doc[MCP_SERVERS_KEY], SERVER_KEY)) {
+    out.push(finding(file2, keyPath(MCP_SERVERS_KEY, SERVER_KEY), V1_REASON.mcpEntry));
+  }
+}
+function claudeShapeSettings(agentHome, out) {
+  const file2 = join7(agentHome, SETTINGS_FILE);
+  const doc = readJson(file2);
+  for (const c of nestedCommands(doc)) {
+    if (c.command.includes(V1_CACHE_HEAL_NAME)) out.push(finding(file2, c.path, V1_REASON.cacheHealHook));
+    else if (isV1Hook(c.command)) out.push(finding(file2, c.path, V1_REASON.hook));
+  }
+  const status = isObj(doc) ? commandOf(doc[STATUS_LINE_KEY]) : null;
+  if (status !== null && status.includes(V1_STATUSLINE_COMMAND)) {
+    out.push(finding(file2, STATUS_LINE_KEY, V1_REASON.statusLine));
+  }
+  mcpEntry(file2, doc, out);
+}
+function v1HookFile(file2, out) {
+  const doc = readJson(file2);
+  const cmds = isObj(doc) ? flatCommands(doc[HOOKS_KEY], [HOOKS_KEY]) : [];
+  if (cmds.some((c) => c.command.includes(V1_HOOK_COMMAND))) out.push(finding(file2, "", V1_REASON.hookFile));
+}
+function scanClaudeCode(home, agentHome, out) {
+  claudeShapeSettings(agentHome, out);
+  for (const ext of V1_CACHE_HEAL_EXTS) {
+    const file2 = join7(agentHome, V1_HOOKS_DIR_NAME, V1_CACHE_HEAL_NAME + ext);
+    if (existsSync5(file2)) out.push(finding(file2, "", V1_REASON.cacheHealFile));
+  }
+  const userFile = join7(home, CLAUDE_USER_CONFIG_FILE);
+  mcpEntry(userFile, readJson(userFile), out);
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+}
+function scanCodex(agentHome, out) {
+  const hooksFile = join7(agentHome, HOOKS_JSON_FILE);
+  for (const c of nestedCommands(readJson(hooksFile))) {
+    if (c.command.includes(V1_CODEX_HOOK_COMMAND) || isCodexScript(c.command)) {
+      out.push(finding(hooksFile, c.path, V1_REASON.codexHook));
+    }
+  }
+  const tomlFile = join7(agentHome, CONFIG_TOML_FILE);
+  for (const span of readTomlTables(tomlFile)) {
+    if (tomlHeaderText(span.path).startsWith(V1_TOML_SECTION_PREFIX)) out.push(finding(tomlFile, span.header.trim(), V1_REASON.codexToml));
+  }
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+}
+function scanGemini(agentHome, out) {
+  const file2 = join7(agentHome, SETTINGS_FILE);
+  for (const c of nestedCommands(readJson(file2))) {
+    if (c.command.includes(SERVER_KEY)) out.push(finding(file2, c.path, V1_REASON.hook));
+  }
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDirShared, out);
+}
+function scanVscode(agentHome, project, out) {
+  if (project !== void 0) {
+    v1HookFile(join7(project, GITHUB_DIR_NAME, V1_HOOKS_DIR_NAME, OWN_HOOK_FILE), out);
+    const mcpFile2 = join7(project, VSCODE_DIR_NAME, VSCODE_MCP_FILE);
+    const doc = readJson(mcpFile2);
+    const servers = isObj(doc) && isObj(doc[VSCODE_MCP_SERVERS_KEY]) ? doc[VSCODE_MCP_SERVERS_KEY] : {};
+    const entry = Object.hasOwn(servers, SERVER_KEY) ? servers[SERVER_KEY] : void 0;
+    if (isObj(entry) && (entry.command === V1_BIN_COMMAND || listOf(entry.args).some((a) => a === V1_BIN_COMMAND))) {
+      out.push(finding(mcpFile2, keyPath(VSCODE_MCP_SERVERS_KEY, SERVER_KEY), V1_REASON.vscodeMcp));
+    }
+    dataDir(join7(project, GITHUB_DIR_NAME, V1_DATA_DIR_NAME, V1_SESSIONS_DIR_NAME), V1_REASON.dataDir, out);
+  }
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME, V1_SESSIONS_DIR_NAME), V1_REASON.dataDir, out);
+}
+function jsonFiles(dir) {
+  try {
+    return readdirSync3(dir).filter((name) => name.endsWith(KIRO_AGENT_FILE_EXT)).sort();
+  } catch {
+    return [];
+  }
+}
+function scanKiro(agentHome, project, out) {
+  const agentsDir = join7(agentHome, KIRO_AGENTS_DIR);
+  const defaultFile = join7(agentHome, ...KIRO_AGENT_FILE);
+  for (const name of jsonFiles(agentsDir)) {
+    const file2 = join7(agentsDir, name);
+    const doc = readJson(file2);
+    if (isObj(doc) && doc[KIRO_AGENT_NAME_KEY] === SERVER_KEY) {
+      out.push(finding(file2, "", V1_REASON.kiroAgentFile));
+      continue;
+    }
+    if (file2 !== defaultFile) continue;
+    for (const c of isObj(doc) ? flatCommands(doc[HOOKS_KEY], [HOOKS_KEY]) : []) {
+      if (isV1Hook(c.command)) out.push(finding(file2, c.path, V1_REASON.kiroHook));
+    }
+  }
+  const steeringDocs = [join7(agentHome, ...KIRO_STEERING_FILE)];
+  if (project !== void 0) steeringDocs.push(join7(project, ...AGENT_HOME_DIR.kiro, ...KIRO_STEERING_FILE));
+  for (const file2 of steeringDocs) {
+    if (existsSync5(file2)) out.push(finding(file2, "", V1_REASON.kiroSteering));
+  }
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+}
+function scanPi(piAgentDir, agentHome, out) {
+  const file2 = join7(piAgentDir, SETTINGS_FILE);
+  const doc = readJson(file2);
+  listOf(isObj(doc) ? doc[PI_PACKAGES_KEY] : void 0).forEach((pkg, i) => {
+    const spec = isObj(pkg) ? pkg[PI_PACKAGE_SOURCE_KEY] : pkg;
+    if (spec === V1_PI_PACKAGE) out.push(finding(file2, keyPath(PI_PACKAGES_KEY, i), V1_REASON.piNpm));
+  });
+  dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+}
+function scanOpencode(agentHome, out) {
+  for (const name of OPENCODE_CONFIG_FILES) {
+    const file2 = join7(agentHome, name);
+    const doc = readJson(file2);
+    if (!isObj(doc) || !Array.isArray(doc[OPENCODE_PLUGIN_KEY])) continue;
+    doc[OPENCODE_PLUGIN_KEY].forEach((spec, i) => {
+      if (spec === V1_OPENCODE_PLUGIN_SPEC) out.push(finding(file2, keyPath(OPENCODE_PLUGIN_KEY, i), V1_REASON.opencodePlugin));
+    });
+    return;
+  }
+}
+function scanZcode(agentHome, out) {
+  const configFile = join7(agentHome, ZCODE_CLI_DIR, CONFIG_JSON_FILE);
+  const config4 = readJson(configFile);
+  const events = isObj(config4) && isObj(config4[HOOKS_KEY]) ? config4[HOOKS_KEY][ZCODE_EVENTS_KEY] : void 0;
+  for (const c of flatCommands(events, [HOOKS_KEY, ZCODE_EVENTS_KEY])) {
+    if (c.command.includes(V1_HOOK_COMMAND)) out.push(finding(configFile, c.path, V1_REASON.zcodeHook));
+  }
+  const hooksFile = join7(agentHome, ZCODE_CLI_DIR, HOOKS_JSON_FILE);
+  for (const c of nestedCommands(readJson(hooksFile))) {
+    if (c.command.includes(V1_HOOK_COMMAND)) out.push(finding(hooksFile, c.path, V1_REASON.zcodeHook));
+  }
+}
+function firstTmpMatch(dir) {
+  let handle;
+  try {
+    handle = opendirSync(dir);
+  } catch {
+    return null;
+  }
+  try {
+    for (let e = handle.readSync(); e !== null; e = handle.readSync()) {
+      if (e.name.startsWith(V1_TMP_PREFIX)) return e.name;
+    }
+    return null;
+  } catch {
+    return null;
+  } finally {
+    handle.closeSync();
+  }
+}
+function scanAll(home, tmp, out) {
+  const root = join7(home, DATA_ROOT.slice(1));
+  for (const name of V1_DATA_ROOT_ENTRIES) dataDir(join7(root, name), V1_REASON.dataRoot, out);
+  if (firstTmpMatch(tmp) !== null) out.push(finding(tmp, V1_TMP_PREFIX + "*", V1_REASON.tmpFile));
+}
+function detectV1(agent, home, scope = {}) {
+  const out = [];
+  const project = scope.project;
+  const agentHome = agent === "claude-code" && scope.claudeDir !== void 0 ? scope.claudeDir : agent === "copilot-cli" && scope.copilotDir !== void 0 ? scope.copilotDir : agent === "kiro" && scope.kiroDir !== void 0 ? scope.kiroDir : agent === "opencode" && scope.opencodeDir !== void 0 ? scope.opencodeDir : join7(home, ...AGENT_HOME_DIR[agent]);
+  switch (agent) {
+    case "claude-code":
+      scanClaudeCode(home, agentHome, out);
+      break;
+    case "codex":
+      scanCodex(agentHome, out);
+      break;
+    case "gemini":
+      scanGemini(agentHome, out);
+      break;
+    case "qwen":
+      claudeShapeSettings(agentHome, out);
+      dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+      break;
+    case "copilot-cli":
+      v1HookFile(join7(agentHome, V1_HOOKS_DIR_NAME, OWN_HOOK_FILE), out);
+      dataDir(join7(agentHome, V1_DATA_DIR_NAME), V1_REASON.dataDir, out);
+      break;
+    case "vscode":
+      scanVscode(agentHome, project, out);
+      break;
+    case "kiro":
+      scanKiro(agentHome, project, out);
+      break;
+    case "pi":
+      scanPi(scope.piAgentDir !== void 0 && scope.piAgentDir !== "" ? scope.piAgentDir : join7(agentHome, PI_AGENT_DIR), agentHome, out);
+      break;
+    // D-WIN-PIDIR-1: empty is unset
+    case "opencode":
+      scanOpencode(agentHome, out);
+      break;
+    case "zcode":
+      scanZcode(agentHome, out);
+      break;
+  }
+  scanAll(home, scope.tmp ?? tmpdir(), out);
+  return out;
+}
+
 // src/core/ops/plugin-root.ts
 import { existsSync as existsSync6, readdirSync as readdirSync4, realpathSync as realpathSync4 } from "node:fs";
 import { dirname as dirname4, isAbsolute, join as join8 } from "node:path";
 import { fileURLToPath } from "node:url";
-function homeOf2(env) {
-  const home = homeDirOf(env);
-  if (home === null) throw new CtxError("NO_HOME", { name: process.platform === "win32" ? "USERPROFILE" : "HOME" });
-  return home;
-}
-function missing(agent, path4) {
-  return new CtxError("PLUGIN_ROOT_MISSING", { agent, path: path4 });
+function missing(agent, path5) {
+  return new CtxError("PLUGIN_ROOT_MISSING", { agent, path: path5 });
 }
 function marketplaceRoot(adapter, env) {
-  const cache = join8(homeOf2(env), HOST_CONFIG_DIR_NAME, HOST_PLUGINS_DIR_NAME, PLUGIN_CACHE_DIR_NAME);
+  const cache = join8(claudeDirOf(env, requireHomeDir(env)), HOST_PLUGINS_DIR_NAME, PLUGIN_CACHE_DIR_NAME);
   const pattern = join8(cache, "*", PLUGIN_NAME);
   if (!existsSync6(cache)) throw missing(adapter.id, pattern);
   const found = readdirSync4(cache).sort().map((marketplace) => join8(cache, marketplace, PLUGIN_NAME)).filter((dir) => existsSync6(dir));
@@ -45782,7 +47969,7 @@ function marketplaceRoot(adapter, env) {
 function configEntryRoot(adapter, env) {
   const spec = OWN_MCP_ENTRY[adapter.id];
   if (spec === void 0) throw missing(adapter.id, SERVER_KEY);
-  const file2 = join8(homeOf2(env), ...spec.file);
+  const file2 = ownMcpFileOf(adapter.id, spec.file, env, requireHomeDir(env));
   if (!existsSync6(file2)) throw missing(adapter.id, file2);
   const current = readHostConfig(adapter.id, file2);
   const value = parseHostConfig(adapter.id, file2, current.text, current.format);
@@ -45800,7 +47987,7 @@ function candidate(adapter, env) {
     case "hooks+mcp":
       return configEntryRoot(adapter, env);
     case "extension":
-      return join8(homeOf2(env), ...AGENT_HOME_DIR[adapter.id], EXTENSIONS_DIR_NAME, PLUGIN_NAME);
+      return join8(requireHomeDir(env), ...AGENT_HOME_DIR[adapter.id], EXTENSIONS_DIR_NAME, PLUGIN_NAME);
     case "plugin":
       return join8(resolveConfigDir(env), DATA_PLUGINS_DIR_NAME, adapter.id, PLUGIN_CURRENT_LINK);
     case "in-process":
@@ -45808,11 +47995,11 @@ function candidate(adapter, env) {
   }
 }
 function resolvePluginRoot(adapter, env) {
-  const path4 = candidate(adapter, env);
+  const path5 = candidate(adapter, env);
   try {
-    return realpathSync4.native(path4);
+    return realpathSync4.native(path5);
   } catch {
-    throw missing(adapter.id, path4);
+    throw missing(adapter.id, path5);
   }
 }
 
@@ -45838,14 +48025,31 @@ function composeMatcher(row5, event) {
   if (event === POST_TOOL_USE && hasReplace(row5)) alts.push(MCP_ANY_MATCH);
   return MATCHER_OPEN + alts.join(MATCHER_ALT) + MATCHER_CLOSE;
 }
+var lastSegment = (p) => {
+  let at = -1;
+  for (const sep2 of V1_PATH_SEPS) at = Math.max(at, p.lastIndexOf(sep2));
+  return p.slice(at + 1);
+};
+function splitHead(command) {
+  if (command.startsWith(SHELL_QUOTE)) {
+    const close = command.indexOf(SHELL_QUOTE, 1);
+    if (close < 0 || command.slice(close + 1, close + 1 + HOOK_COMMAND_SEP.length) !== HOOK_COMMAND_SEP) return null;
+    return { head: command.slice(1, close), rest: command.slice(close + 1 + HOOK_COMMAND_SEP.length) };
+  }
+  const end = command.indexOf(HOOK_COMMAND_SEP);
+  return end < 0 ? null : { head: command.slice(0, end), rest: command.slice(end + HOOK_COMMAND_SEP.length) };
+}
 function isOwnCommand(command, agent) {
   if (typeof command !== "string") return false;
-  const head = HOST_NODE_COMMAND + HOOK_COMMAND_SEP;
+  const split = splitHead(command);
+  if (split === null) return false;
+  const exe = lastSegment(split.head).toLowerCase();
+  if (exe !== HOST_NODE_COMMAND && exe !== HOST_NODE_COMMAND + EXE_SUFFIX) return false;
   const tail = HOOK_COMMAND_SEP + AGENT_ARG + HOOK_COMMAND_SEP + agent;
-  if (!command.startsWith(head) || !command.endsWith(tail) || command.length <= head.length + tail.length) return false;
-  let script = command.slice(head.length, command.length - tail.length);
+  if (!split.rest.endsWith(tail) || split.rest.length <= tail.length) return false;
+  let script = split.rest.slice(0, split.rest.length - tail.length);
   if (script.startsWith(SHELL_QUOTE) && script.endsWith(SHELL_QUOTE) && script.length > 1) script = script.slice(1, -1);
-  return script === HOOK_ENTRY_FILE || V1_PATH_SEPS.some((sep2) => script.endsWith(sep2 + HOOK_ENTRY_FILE));
+  return script === HOOK_ENTRY_FILE || HOOK_SCRIPT_SEPS.some((sep2) => script.endsWith(sep2 + HOOK_ENTRY_FILE));
 }
 function ownHooks(block, shape, timeoutKey, native, agent) {
   const out = [];
@@ -45877,11 +48081,10 @@ var validTimeout = (v) => typeof v === "number" && Number.isFinite(v) && v > 0;
 function mcpFile(row5, home, env) {
   const spec = OWN_MCP_ENTRY[row5.id];
   if (row5.id === "codex") return join9(codexDirOf(env, home), CONFIG_TOML_FILE);
-  if (spec !== void 0) return join9(home, ...spec.file);
-  if (row5.id === "opencode") return join9(home, ...AGENT_HOME_DIR.opencode, OPENCODE_BASE_CONFIG_FILE);
+  if (spec !== void 0) return ownMcpFileOf(row5.id, spec.file, env, home);
+  if (row5.id === "opencode") return join9(opencodeDirOf(env, home), OPENCODE_BASE_CONFIG_FILE);
   if (row5.id === "pi") {
-    const dir = env[PI_AGENT_DIR_ENV];
-    return join9(dir !== void 0 && dir !== "" ? dir : join9(home, ...AGENT_HOME_DIR.pi, PI_AGENT_DIR), SETTINGS_FILE);
+    return join9(piAgentDirOf(env, home), SETTINGS_FILE);
   }
   return null;
 }
@@ -45904,7 +48107,7 @@ function hookParts(row5, home, env, worktree) {
   let block;
   try {
     const root = spec.root === "plugin" ? resolvePluginRoot(row5, env) : spec.root === "home" ? home : worktree;
-    const file2 = row5.id === "codex" ? join9(codexDirOf(env, home), HOOKS_JSON_FILE) : join9(root, ...spec.file);
+    const file2 = row5.id === "codex" ? join9(codexDirOf(env, home), HOOKS_JSON_FILE) : row5.id === "copilot-cli" ? join9(copilotDirOf(env, home), ...spec.file.slice(1)) : row5.id === "kiro" ? join9(kiroDirOf(env, home), ...spec.file.slice(1)) : join9(root, ...spec.file);
     block = hostConfigValueAt(readParsed(row5.id, file2).value, spec.key);
     if (row5.id === "codex") {
       const config4 = readParsed(row5.id, join9(codexDirOf(env, home), CONFIG_TOML_FILE)).value;
@@ -45986,8 +48189,8 @@ async function loadSqlite2() {
     return null;
   }
 }
-function openRead(sqlite, path4) {
-  return new sqlite.DatabaseSync(path4, { timeout: DB_TIMEOUT_MS, readOnly: true });
+function openRead(sqlite, path5) {
+  return new sqlite.DatabaseSync(path5, { timeout: DB_TIMEOUT_MS, readOnly: true });
 }
 var cell = (row5) => Object.values(row5)[0];
 function readSchema(raw) {
@@ -46121,20 +48324,26 @@ function checkProject(i) {
 function checkMode(adapter) {
   return pass3("D10", D10_DETAIL(adapter.denyChannel));
 }
+function checkShell(env) {
+  const win = process.platform === "win32";
+  const shell = findRuntime("shell", env);
+  if (shell !== null) return pass3("D11", D11_PASS_DETAIL(shell, win));
+  return win ? fail3("D11", D11_WIN_DETAIL, D11_WIN_FIX) : fail3("D11", D11_POSIX_DETAIL, D11_POSIX_FIX);
+}
 
 // src/core/ops/doctor-hook.ts
 import { existsSync as existsSync9, readFileSync as readFileSync6 } from "node:fs";
-import path3 from "node:path";
+import path4 from "node:path";
 var row = (status, detail, fixCommand) => fixCommand === void 0 ? { id: "D5", label: DOCTOR_LABEL.D5, status, detail } : { id: "D5", label: DOCTOR_LABEL.D5, status, detail, fixCommand };
 function isObject5(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function loadFixture(bundleDir2, agent) {
-  const file2 = path3.join(bundleDir2, HOOK_FIXTURE_DIR, HOOK_FIXTURE_FILE);
+  const file2 = path4.join(bundleDir2, HOOK_FIXTURE_DIR, HOOK_FIXTURE_FILE);
   if (!existsSync9(file2)) return null;
   let all;
   try {
-    all = JSON.parse(readFileSync6(file2, "utf8"));
+    all = JSON.parse(hostText(readFileSync6(file2, "utf8")));
   } catch {
     return null;
   }
@@ -46159,14 +48368,14 @@ function codexHookJournaled(db) {
   return db.raw.prepare("SELECT 1 FROM events WHERE agent = ? LIMIT 1").get("codex") !== void 0;
 }
 async function checkHookRoundTrip(i) {
-  if (i.agent === "codex" && existsSync9(path3.join(i.codexConfigDir, HOOKS_JSON_FILE)) && !codexHookJournaled(i.db)) {
+  if (i.agent === "codex" && existsSync9(path4.join(i.codexConfigDir, HOOKS_JSON_FILE)) && !codexHookJournaled(i.db)) {
     return row("UNKNOWN", D5_CODEX_UNTRUSTED_DETAIL);
   }
   const fixture = loadFixture(i.bundleDir, i.agent);
   if (fixture === null) return row("UNKNOWN", D5_NO_FIXTURE_DETAIL(i.agent));
   const now = i.now ?? (() => performance.now());
   const start = now();
-  const r = await runProcess([process.execPath, path3.join(i.bundleDir, HOOK_ENTRY_FILE), AGENT_ARG, i.agent], {
+  const r = await runProcess([process.execPath, path4.join(i.bundleDir, HOOK_ENTRY_FILE), AGENT_ARG, i.agent], {
     cwd: i.bundleDir,
     env: i.env,
     signal: i.signal,
@@ -46180,7 +48389,7 @@ async function checkHookRoundTrip(i) {
 }
 
 // src/core/ops/db-heal.ts
-import { existsSync as existsSync10, renameSync as renameSync2, rmSync as rmSync4 } from "node:fs";
+import { existsSync as existsSync10, rmSync as rmSync4 } from "node:fs";
 function integrityOk2(rows) {
   return rows.length === 1 && rows[0].integrity_check === INTEGRITY_OK;
 }
@@ -46205,7 +48414,7 @@ async function healLossless(dbPath) {
     }
     rmSync4(dbPath + DB_WAL_SUFFIX, { force: true });
     rmSync4(dbPath + DB_SHM_SUFFIX, { force: true });
-    renameSync2(tmp, dbPath);
+    renameWithRetry(tmp, dbPath);
   } finally {
     rmSync4(tmp, { force: true });
   }
@@ -46214,7 +48423,7 @@ function renameAside(dbPath) {
   const ts = String(Date.now());
   for (const suffix of DB_SIBLING_SUFFIXES) {
     const file2 = dbPath + suffix;
-    if (existsSync10(file2)) renameSync2(file2, file2 + HEAL_TS_SEP + ts + HEAL_BACKUP_SUFFIX);
+    if (existsSync10(file2)) renameWithRetry(file2, file2 + HEAL_TS_SEP + ts + HEAL_BACKUP_SUFFIX);
   }
   return ts;
 }
@@ -46282,11 +48491,6 @@ async function guard(id, run) {
     return { id, label: DOCTOR_LABEL[id], status: "UNKNOWN", detail: lineOf(err) };
   }
 }
-function needHome(env) {
-  const home = homeDirOf(env);
-  if (home === null) throw new CtxError("NO_HOME", { name: "HOME" });
-  return home;
-}
 async function codexDb(ctx, adapter) {
   if (adapter.id !== "codex" || !existsSync11(ctx.project.dbPath)) return null;
   try {
@@ -46303,7 +48507,7 @@ async function hookRow(ctx, adapter, host) {
       bundleDir: host.bundleDir,
       env: buildChildEnv(host.env),
       signal: ctx.signal,
-      codexConfigDir: codexDirOf(host.env, needHome(host.env)),
+      codexConfigDir: codexDirOf(host.env, requireHomeDir(host.env)),
       // same Codex dir D3 reads (D-N6-CODEX-HOME-2)
       db
     });
@@ -46328,7 +48532,7 @@ async function runDoctorChecks(ctx, adapter, host) {
     D1: () => checkVersion({ bundleSha: BUNDLE_SHA, env: buildChildEnv(env), cwd: project.worktree, signal: ctx.signal }),
     D2: () => checkNode({ nodeVersion: process.version, bunVersion: process.versions.bun }),
     D3: () => checkHostConfig(adapter, env, project.worktree),
-    D4: () => checkV1Leftovers(adapter.id, needHome(env), { project: project.worktree, piAgentDir: env[PI_AGENT_DIR_ENV] }),
+    D4: () => checkV1Leftovers(adapter.id, requireHomeDir(env), { project: project.worktree, piAgentDir: piAgentDirOf(env, requireHomeDir(env)), claudeDir: claudeDirOf(env, requireHomeDir(env)), copilotDir: copilotDirOf(env, requireHomeDir(env)), kiroDir: kiroDirOf(env, requireHomeDir(env)), opencodeDir: opencodeDirOf(env, requireHomeDir(env)) }),
     D5: () => hookRow(ctx, adapter, host),
     D5b: () => checkDoubleFire(adapter.id, project.worktree),
     D6: () => checkMcp(ctx),
@@ -46339,7 +48543,8 @@ async function runDoctorChecks(ctx, adapter, host) {
       return r.row;
     },
     D9: () => checkIndex(project),
-    D10: () => checkMode(adapter)
+    D10: () => checkMode(adapter),
+    D11: () => checkShell(env)
   };
   const rows = [];
   for (const id of DOCTOR_CHECK_ORDER) rows.push(await guard(id, checks[id]));
@@ -46588,7 +48793,7 @@ async function handler3(raw, ctx) {
     extra.CTX_FILE = abs;
   }
   const runtime = findRuntime(input.language);
-  if (runtime === null) return fail4(new CtxError("NO_RUNTIME", { lang: input.language }).toLine());
+  if (runtime === null) return fail4(noRuntimeError(input.language).toLine());
   const env = buildChildEnv(process.env, extra);
   const timeoutMs = input.timeoutMs ?? EXEC_TIMEOUT_MS;
   const journal = { kind: "cmd", key: canonicalKey(TOOL2, input.code), path: input.file ?? null, exit_code: null };
@@ -46661,14 +48866,14 @@ function visit(abs, rel, parent, contain, seen, found) {
   const rules = entries.some((e) => e.name === GITIGNORE && e.isFile()) ? parent.concat(readRules(join12(abs, GITIGNORE), rel)) : parent;
   for (const e of entries) {
     if (e.name === GIT_DIR) continue;
-    const path4 = join12(abs, e.name);
+    const path5 = join12(abs, e.name);
     let isDir = e.isDirectory();
     let isFile = e.isFile();
-    let target = path4;
+    let target = path5;
     if (e.isSymbolicLink()) {
       let resolved;
       try {
-        resolved = realpathSync6(path4);
+        resolved = realpathSync6(path5);
       } catch {
         continue;
       }
@@ -46681,12 +48886,12 @@ function visit(abs, rel, parent, contain, seen, found) {
     const segs = rel.concat(e.name);
     if (ignored(rules, segs, isDir)) continue;
     if (isFile) {
-      found.push({ dir: rel, name: e.name, absPath: path4 });
+      found.push({ dir: rel, name: e.name, absPath: path5 });
     } else if (isDir) {
-      const key = e.isSymbolicLink() ? target : realpathSync6(path4);
+      const key = e.isSymbolicLink() ? target : realpathSync6(path5);
       if (seen.has(key)) continue;
       seen.add(key);
-      visit(path4, segs, rules, contain, seen, found);
+      visit(path5, segs, rules, contain, seen, found);
     }
   }
 }
@@ -46877,12 +49082,12 @@ function tlsName(host) {
 function request(u, conn, proxy, signal) {
   const host = bare(u.hostname);
   const port = u.port === "" ? defaultPort(u.protocol) : Number(u.port);
-  const path4 = u.pathname + u.search;
+  const path5 = u.pathname + u.search;
   return new Promise((resolve4, reject) => {
     const onErr = (err) => reject(fail5(causeCode(err)));
     if (proxy === void 0) {
       const mod = u.protocol === "https:" ? https : http;
-      const req = mod.request({ host: conn.address, port, path: path4, signal, servername: tlsName(host), headers: { host: u.host } });
+      const req = mod.request({ host: conn.address, port, path: path5, signal, servername: tlsName(host), headers: { host: u.host } });
       req.on("response", resolve4).on("error", onErr).end();
       return;
     }
@@ -46904,7 +49109,7 @@ function request(u, conn, proxy, signal) {
       const req = https.request({
         host,
         port,
-        path: path4,
+        path: path5,
         signal,
         headers: { host: u.host },
         createConnection: () => tlsConnect({ socket, host, servername: tlsName(host) })
@@ -47076,12 +49281,12 @@ function reply2(text, isError) {
   return { text, isError, sandboxBytes: 0 };
 }
 function scopesOf(input) {
-  const set2 = {
+  const set3 = {
     session: input.session !== void 0,
     source: input.source !== void 0,
     project: input.project === true
   };
-  return PURGE_SCOPES.filter((s) => set2[s]);
+  return PURGE_SCOPES.filter((s) => set3[s]);
 }
 function changes(raw, sql, ...args) {
   return Number(raw.prepare(sql).run(...args).changes);
@@ -47146,8 +49351,8 @@ function buildCandidates(rows, sessionId) {
   if (!sessionId) return emptySet();
   const own4 = rows.filter((r) => r.session_id === sessionId).sort((a, b) => a.seq - b.seq);
   const prompts = own4.filter((r) => r.kind === "prompt");
-  const last = prompts.length > 0 ? prompts[prompts.length - 1] : void 0;
-  const lastRequest = last === void 0 ? null : make("last_request", last, "now: " + firstLine2(last.body), 1, null);
+  const last2 = prompts.length > 0 ? prompts[prompts.length - 1] : void 0;
+  const lastRequest = last2 === void 0 ? null : make("last_request", last2, "now: " + firstLine2(last2.body), 1, null);
   const earlierRequests = prompts.slice(0, prompts.length - 1).map((r) => make("earlier_requests", r, "asked #" + r.seq + ": " + firstLine2(r.body), 1, null));
   const failures = /* @__PURE__ */ new Map();
   const lastOk = /* @__PURE__ */ new Map();
@@ -47171,8 +49376,8 @@ function buildCandidates(rows, sessionId) {
     edits.set(r.path, { row: r, count: (edits.get(r.path)?.count ?? 0) + 1 });
   }
   const changedFiles = [];
-  for (const [path4, e] of edits) {
-    const c = make("changed_files", e.row, "edited " + path4 + " x" + e.count, e.count, path4);
+  for (const [path5, e] of edits) {
+    const c = make("changed_files", e.row, "edited " + path5 + " x" + e.count, e.count, path5);
     changedFiles.push({ ...c, editCount: e.count });
   }
   changedFiles.sort((a, b) => a.seq - b.seq);
@@ -47186,7 +49391,7 @@ function buildCandidates(rows, sessionId) {
   for (const [key, d] of decided) decisions.push(make("decisions", d.row, "decided #" + d.row.seq + ": " + firstLine2(d.row.body), d.count, key));
   decisions.sort((a, b) => a.seq - b.seq);
   const indexedSources = own4.filter((r) => r.kind === "index").map((r) => make("indexed_sources", r, "indexed " + (r.key ?? ""), 1, r.key));
-  const set2 = {
+  const set3 = {
     lastRequest,
     openErrors: capSection(openErrors),
     changedFiles: capSection(changedFiles),
@@ -47194,17 +49399,17 @@ function buildCandidates(rows, sessionId) {
     earlierRequests: capSection(earlierRequests),
     indexedSources: capSection(indexedSources)
   };
-  const rest = [...set2.openErrors, ...set2.changedFiles, ...set2.decisions, ...set2.earlierRequests, ...set2.indexedSources];
+  const rest = [...set3.openErrors, ...set3.changedFiles, ...set3.decisions, ...set3.earlierRequests, ...set3.indexedSources];
   const total = rest.length + (lastRequest === null ? 0 : 1);
-  if (total <= MAX_CANDIDATES_TOTAL) return set2;
+  if (total <= MAX_CANDIDATES_TOTAL) return set3;
   const drop = new Set(rest.map((c) => c.seq).sort((a, b) => a - b).slice(0, total - MAX_CANDIDATES_TOTAL));
   return {
     lastRequest,
-    openErrors: set2.openErrors.filter((c) => !drop.has(c.seq)),
-    changedFiles: set2.changedFiles.filter((c) => !drop.has(c.seq)),
-    decisions: set2.decisions.filter((c) => !drop.has(c.seq)),
-    earlierRequests: set2.earlierRequests.filter((c) => !drop.has(c.seq)),
-    indexedSources: set2.indexedSources.filter((c) => !drop.has(c.seq))
+    openErrors: set3.openErrors.filter((c) => !drop.has(c.seq)),
+    changedFiles: set3.changedFiles.filter((c) => !drop.has(c.seq)),
+    decisions: set3.decisions.filter((c) => !drop.has(c.seq)),
+    earlierRequests: set3.earlierRequests.filter((c) => !drop.has(c.seq)),
+    indexedSources: set3.indexedSources.filter((c) => !drop.has(c.seq))
   };
 }
 
@@ -47303,15 +49508,15 @@ function renderState(rows, turn, extras, prefix = "") {
   for (const r of rows) if (newest === void 0 || r.seq > newest.seq) newest = r;
   const sessionId = newest === void 0 ? "" : newest.session_id;
   const upto = newest === void 0 || sessionId === "" ? 0 : newest.seq;
-  const set2 = buildCandidates(rows, sessionId);
+  const set3 = buildCandidates(rows, sessionId);
   const openTag = `<context_mode_state session="${sessionId}" upto="${upto}">`;
   const emptyMoreBytes = bytesOf2(moreLine2([], prefix));
   const budget = STATE_BUDGET - (bytesOf2(openTag) + 1 + emptyMoreBytes + 1 + bytesOf2(STATE_CLOSE_TAG));
   let used = 0;
-  const pinnedLine = set2.lastRequest === null ? null : lineOf2(set2.lastRequest, prefix);
+  const pinnedLine = set3.lastRequest === null ? null : lineOf2(set3.lastRequest, prefix);
   if (pinnedLine !== null) used += bytesOf2(pinnedLine) + 1;
   const remaining = scoreCandidates(
-    [...set2.openErrors, ...set2.changedFiles, ...set2.decisions, ...set2.earlierRequests, ...set2.indexedSources],
+    [...set3.openErrors, ...set3.changedFiles, ...set3.decisions, ...set3.earlierRequests, ...set3.indexedSources],
     turn
   );
   const k = /* @__PURE__ */ new Map();
@@ -47416,8 +49621,8 @@ async function handler6(input, ctx) {
     if (newest === void 0) return reply3(RESUME_EMPTY_LINE, false);
     const sources = listSessionSources(db, sessionId, MAX_CANDIDATES).map((r) => "source " + sourceHandle(r.id) + ": " + r.label + " (" + r.bytes + " B)");
     const goal = readFirstPrompt(db, sessionId);
-    const last = readLastPrompt(db, sessionId);
-    const units = queryUnits(db, sessionId, recallQueryText(last, goal), RECALL_UNIT_CANDIDATES).map((u) => ({ ...u, label: sourceHandle(u.sourceId) }));
+    const last2 = readLastPrompt(db, sessionId);
+    const units = queryUnits(db, sessionId, recallQueryText(last2, goal), RECALL_UNIT_CANDIDATES).map((u) => ({ ...u, label: sourceHandle(u.sourceId) }));
     const block = renderState(rows, newest.turn, { sources, units });
     if (Buffer.byteLength(block, "utf8") > RESUME_CAP) throw new Error("ctx_resume: state block over RESUME_CAP (render bug).");
     return reply3(block, false);
@@ -47459,8 +49664,8 @@ function reductionPct(t) {
   return Number((t.saved * PERCENT_SCALE / Math.max(1, t.produced)).toFixed(1));
 }
 function tableRow(label, t) {
-  const last = t.calls === 0 ? STATS_NO_DATA : String(reductionPct(t));
-  return "| " + [label, t.produced + " B", t.returned + " B", t.saved + " B", last].join(" | ") + " |";
+  const last2 = t.calls === 0 ? STATS_NO_DATA : String(reductionPct(t));
+  return "| " + [label, t.produced + " B", t.returned + " B", t.saved + " B", last2].join(" | ") + " |";
 }
 async function handler7(_input, ctx) {
   const db = await openDb(ctx.project, { readOnly: true });
@@ -47494,23 +49699,24 @@ var ctxStats = Object.freeze({
 });
 
 // src/core/tools/upgrade.ts
-import { existsSync as existsSync19, realpathSync as realpathSync7, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync19, realpathSync as realpathSync7, rmSync as rmSync10 } from "node:fs";
 import { basename as basename5, dirname as dirname9, join as join19 } from "node:path";
 
 // src/core/ops/host-write.ts
-import { copyFileSync, existsSync as existsSync14, mkdirSync as mkdirSync4, renameSync as renameSync3, rmSync as rmSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { copyFileSync, existsSync as existsSync14, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname8, join as join14 } from "node:path";
 function defaultWrite(file2, text) {
   writeFileSync4(file2, text, "utf8");
 }
 function hostConfigPath(agent, home, env) {
   const own4 = OWN_MCP_ENTRY[agent];
-  if (own4 !== void 0) return join14(home, ...own4.file);
+  if (own4 !== void 0) return ownMcpFileOf(agent, own4.file, env, home);
   switch (agent) {
     case "opencode":
-      return join14(home, ...AGENT_HOME_DIR.opencode, OPENCODE_BASE_CONFIG_FILE);
+      return join14(opencodeDirOf(env, home), OPENCODE_BASE_CONFIG_FILE);
+    // D-WIN-OPENCODE-DIR-1
     case "pi":
-      return join14(env[PI_AGENT_DIR_ENV] ?? join14(home, ...AGENT_HOME_DIR.pi, PI_AGENT_DIR), SETTINGS_FILE);
+      return join14(piAgentDirOf(env, home), SETTINGS_FILE);
     case "copilot-cli":
       return null;
     default:
@@ -47523,22 +49729,32 @@ function cell2(value) {
 function toRow(file2, edit) {
   return { area: file2 + UPGRADE_AREA_KEY_SEP + edit.path, before: cell2(edit.before), after: cell2(edit.after) };
 }
-function writeWithRollback(file2, text, write) {
+function writeWithRollback(file2, text, write, atomic) {
   const trash = file2 + UPGRADE_TRASH_SUFFIX;
-  const tmp = file2 + HOST_CONFIG_TMP_SUFFIX;
+  const tmp = `${file2}${HOST_CONFIG_TMP_SUFFIX}.${process.pid}`;
   const had = existsSync14(file2);
-  mkdirSync4(dirname8(file2), { recursive: true });
+  mkdirSync5(dirname8(file2), { recursive: true });
   if (had) copyFileSync(file2, trash);
   try {
     write(tmp, text);
-    renameSync3(tmp, file2);
+    renameWithRetry(tmp, file2, atomic);
   } catch (err) {
-    rmSync6(tmp, { force: true });
-    if (had) renameSync3(trash, file2);
-    else rmSync6(file2, { force: true });
-    throw err;
+    removeTmpFile(tmp, atomic);
+    if (!had) {
+      removeTmpFile(file2, atomic);
+      throw replaceFailure(file2, err);
+    }
+    try {
+      renameWithRetry(trash, file2, atomic);
+    } catch (restoreErr) {
+      throw new Error(`${replaceFailure(file2, err).message}. The original is kept at ${trash}`, { cause: restoreErr });
+    }
+    throw replaceFailure(file2, err);
+  }
+  try {
+    unlinkWithRetry(trash, atomic);
+  } catch {
   }
-  rmSync6(trash, { force: true });
 }
 function regenerateHostConfig(row5, home, opts = {}) {
   const env = opts.env ?? process.env;
@@ -47549,29 +49765,31 @@ function regenerateHostConfig(row5, home, opts = {}) {
   const exists = existsSync14(current.path);
   if (exists && result.text === current.text) return [];
   const text = result.text === "" && current.format !== "toml" ? JSON.stringify({}) : result.text;
-  writeWithRollback(current.path, text, opts.write ?? defaultWrite);
+  writeWithRollback(current.path, current.layout === void 0 ? text : withLayout(text, current.layout), opts.write ?? defaultWrite, opts.atomic ?? {});
   return result.edits.map((e) => toRow(current.path, e));
 }
 
 // src/core/ops/plugin-swap.ts
-import { existsSync as existsSync15, lstatSync, readdirSync as readdirSync7, readlinkSync, renameSync as renameSync4, rmSync as rmSync7, symlinkSync, unlinkSync } from "node:fs";
-import { basename as basename4, join as join15 } from "node:path";
-function linkTarget(path4) {
-  return isLink(path4) ? readlinkSync(path4) : null;
+import { existsSync as existsSync15, lstatSync, readdirSync as readdirSync7, readlinkSync, rmSync as rmSync6, symlinkSync, unlinkSync as unlinkSync2 } from "node:fs";
+import { basename as basename4, join as join15, win32 as win322 } from "node:path";
+function linkTarget(path5, win) {
+  if (!isLink(path5)) return null;
+  const target = readlinkSync(path5);
+  return win ? win322.basename(target) : target;
 }
-function isLink(path4) {
-  return lstatSync(path4, { throwIfNoEntry: false })?.isSymbolicLink() === true;
+function isLink(path5) {
+  return lstatSync(path5, { throwIfNoEntry: false })?.isSymbolicLink() === true;
 }
 function generations(agentDir) {
   return readdirSync7(agentDir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((name) => !name.startsWith(UPGRADE_FETCH_DIR_PREFIX) && !name.endsWith(UPGRADE_TRASH_SUFFIX)).sort();
 }
-function settleLinks(link, tmp, old) {
-  if (isLink(tmp)) unlinkSync(tmp);
+function settleLinks(link, tmp, old, opts) {
+  if (isLink(tmp)) unlinkSync2(tmp);
   if (!isLink(old)) return;
-  if (isLink(link)) unlinkSync(old);
-  else renameSync4(old, link);
+  if (isLink(link)) unlinkSync2(old);
+  else renameWithRetry(old, link, opts);
 }
-function swapPluginCurrent(agentDir, sha) {
+function swapPluginCurrent(agentDir, sha, opts = {}) {
   const next = join15(agentDir, sha);
   if (!existsSync15(next) || !lstatSync(next).isDirectory()) {
     throw new CtxError("PLUGIN_ROOT_MISSING", { agent: basename4(agentDir), path: next });
@@ -47579,23 +49797,26 @@ function swapPluginCurrent(agentDir, sha) {
   const link = join15(agentDir, PLUGIN_CURRENT_LINK);
   const tmp = link + PLUGIN_LINK_TMP_SUFFIX;
   const old = link + PLUGIN_LINK_OLD_SUFFIX;
-  settleLinks(link, tmp, old);
-  const before = linkTarget(link);
+  settleLinks(link, tmp, old, opts);
+  const win = (opts.platform ?? process.platform) === "win32";
+  const before = linkTarget(link, win);
   if (before === sha) return { current: next, previous: null, removed: [] };
-  symlinkSync(sha, tmp, PLUGIN_LINK_TYPE);
-  if (before !== null) renameSync4(link, old);
-  renameSync4(tmp, link);
-  if (before !== null) unlinkSync(old);
+  const symlink = opts.symlink ?? symlinkSync;
+  if (win) symlink(next, tmp, PLUGIN_LINK_TYPE_WIN32);
+  else symlink(sha, tmp, PLUGIN_LINK_TYPE);
+  if (before !== null) renameWithRetry(link, old, opts);
+  renameWithRetry(tmp, link, opts);
+  if (before !== null) unlinkSync2(old);
   const keep = /* @__PURE__ */ new Set([sha]);
   if (before !== null) keep.add(before);
   const removed = generations(agentDir).filter((name) => !keep.has(name)).map((name) => join15(agentDir, name));
-  for (const dir of removed) rmSync7(dir, { recursive: true, force: true });
+  for (const dir of removed) rmSync6(dir, { recursive: true, force: true });
   const previous = before !== null && existsSync15(join15(agentDir, before)) ? join15(agentDir, before) : null;
   return { current: next, previous, removed };
 }
 
 // src/core/ops/release-fetch.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync5, renameSync as renameSync5, rmSync as rmSync8 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync6, rmSync as rmSync7 } from "node:fs";
 import { join as join16 } from "node:path";
 function failed(r) {
   if (r.exitCode === null && r.killed === null) return new CtxError("FETCH_FAILED", { code: GIT_NOT_STARTED });
@@ -47607,11 +49828,11 @@ async function git2(bin, args, cwd, env, signal) {
   if (r.exitCode !== 0 || r.killed !== null) throw failed(r);
   return r.stdout.toString().trim();
 }
-async function fetchRelease(agent, url4, env, signal) {
+async function fetchRelease(agent, url4, env, signal, opts = {}) {
   const agentDir = join16(resolveConfigDir(env), DATA_PLUGINS_DIR_NAME, agent);
-  mkdirSync5(agentDir, { recursive: true });
+  mkdirSync6(agentDir, { recursive: true });
   const fetchDir = join16(agentDir, UPGRADE_FETCH_DIR_PREFIX + process.pid);
-  rmSync8(fetchDir, { recursive: true, force: true });
+  rmSync7(fetchDir, { recursive: true, force: true });
   const gitBin = findRuntime(GIT_BIN, env);
   if (gitBin === null) throw new CtxError("FETCH_FAILED", { code: GIT_NOT_STARTED });
   const childEnv = buildChildEnv(env, { ...GIT_NO_PROMPT_ENV, ...GIT_NO_CRLF_ENV });
@@ -47619,26 +49840,21 @@ async function fetchRelease(agent, url4, env, signal) {
     await git2(gitBin, [...GIT_CLONE_ARGS, RELEASE_BRANCH, url4, fetchDir], agentDir, childEnv, signal);
     const sha = await git2(gitBin, GIT_HEAD_SHA_ARGS, fetchDir, childEnv, signal);
     const dir = join16(agentDir, sha);
-    if (existsSync16(dir)) rmSync8(fetchDir, { recursive: true, force: true });
-    else renameSync5(fetchDir, dir);
+    if (existsSync16(dir)) rmSync7(fetchDir, { recursive: true, force: true });
+    else renameWithRetry(fetchDir, dir, opts);
     return { sha, dir };
   } catch (e) {
-    rmSync8(fetchDir, { recursive: true, force: true });
+    rmSync7(fetchDir, { recursive: true, force: true });
     throw e;
   }
 }
 
 // src/core/ops/uninstall.ts
-import { existsSync as existsSync17, readdirSync as readdirSync8, rmSync as rmSync9, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync17, readdirSync as readdirSync8, rmSync as rmSync8, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join17 } from "node:path";
 function row2(area, before, after) {
   return { area, before, after };
 }
-function homeOf3(env) {
-  const home = homeDirOf(env);
-  if (home === null) throw new CtxError("NO_HOME", { name: process.platform === "win32" ? "USERPROFILE" : "HOME" });
-  return home;
-}
 function stopServers(configDir, projectKey) {
   const stopped = listLiveOwners(configDir, projectKey);
   const dir = join17(configDir, PROJECTS_DIR_NAME, projectKey, OWNERS_DIR_NAME);
@@ -47659,13 +49875,13 @@ function removeCache(adapter, env, configDir) {
     case "extension": {
       const root = rootOrNull(adapter, env);
       if (root === null) return row2(UPGRADE_CACHE_AREA, "", UPGRADE_NOT_FOUND);
-      rmSync9(root, { recursive: true, force: true });
+      rmSync8(root, { recursive: true, force: true });
       return row2(UPGRADE_CACHE_AREA, root, UPGRADE_REMOVED);
     }
     case "plugin": {
       const agentDir = join17(configDir, DATA_PLUGINS_DIR_NAME, adapter.id);
       if (!existsSync17(agentDir)) return row2(UPGRADE_CACHE_AREA, "", UPGRADE_NOT_FOUND);
-      rmSync9(agentDir, { recursive: true, force: true });
+      rmSync8(agentDir, { recursive: true, force: true });
       return row2(UPGRADE_CACHE_AREA, agentDir, UPGRADE_REMOVED);
     }
     case "config-mcp":
@@ -47684,20 +49900,20 @@ function piSource(entry) {
   return isObj2(entry) ? entry[PI_PACKAGE_SOURCE_KEY] : entry;
 }
 function ownEntries(agent, env) {
-  const home = homeOf3(env);
+  const home = requireHomeDir(env);
   const mcp = OWN_MCP_ENTRY[agent];
   if (mcp !== void 0) {
     const top = mcp.key[0];
     const inner = mcp.key.slice(1, -1);
     const own4 = mcp.key[mcp.key.length - 1];
     const holder = (v) => inner.reduce((cur, k) => isObj2(cur) ? cur[k] : void 0, v);
-    const without = (v, path4) => {
+    const without = (v, path5) => {
       const o = v;
-      if (path4.length === 0) return Object.fromEntries(Object.entries(o).filter(([k]) => k !== own4));
-      return { ...o, [path4[0]]: without(o[path4[0]], path4.slice(1)) };
+      if (path5.length === 0) return Object.fromEntries(Object.entries(o).filter(([k]) => k !== own4));
+      return { ...o, [path5[0]]: without(o[path5[0]], path5.slice(1)) };
     };
     return [{
-      file: join17(home, ...mcp.file),
+      file: ownMcpFileOf(agent, mcp.file, env, home),
       key: top,
       shown: mcp.key.join(V1_KEY_PATH_SEP),
       has: (v) => {
@@ -47709,7 +49925,8 @@ function ownEntries(agent, env) {
   }
   if (agent === "opencode") {
     return [{
-      file: join17(home, ...AGENT_HOME_DIR.opencode, OPENCODE_BASE_CONFIG_FILE),
+      file: join17(opencodeDirOf(env, home), OPENCODE_BASE_CONFIG_FILE),
+      // D-WIN-OPENCODE-DIR-1
       key: OPENCODE_PLUGIN_KEY,
       shown: OPENCODE_PLUGIN_KEY,
       has: (v) => Array.isArray(v) && v.includes(OPENCODE_GIT_SPEC),
@@ -47717,7 +49934,7 @@ function ownEntries(agent, env) {
     }];
   }
   if (agent === "pi") {
-    const agentDir = env[PI_AGENT_DIR_ENV] ?? join17(home, ...AGENT_HOME_DIR.pi, PI_AGENT_DIR);
+    const agentDir = piAgentDirOf(env, home);
     return [{
       file: join17(agentDir, SETTINGS_FILE),
       key: PI_PACKAGES_KEY,
@@ -47746,7 +49963,7 @@ function removeProjectData(configDir, projectKey) {
   if (!existsSync17(dir)) return row2(UPGRADE_DATA_AREA, "", UPGRADE_NOT_FOUND);
   if (dir === projects || !isInside(projects, dir)) throw new CtxError("OUTSIDE_ROOT", { p: dir, root: projects });
   for (const name of readdirSync8(dir)) {
-    if (name !== OWNERS_DIR_NAME) rmSync9(join17(dir, name), { recursive: true, force: true });
+    if (name !== OWNERS_DIR_NAME) rmSync8(join17(dir, name), { recursive: true, force: true });
   }
   return row2(UPGRADE_DATA_AREA, dir, UPGRADE_DATA_DELETED);
 }
@@ -47759,52 +49976,52 @@ function runUninstall(input) {
 }
 
 // src/core/ops/v1-remove.ts
-import { copyFileSync as copyFileSync2, existsSync as existsSync18, readFileSync as readFileSync10, renameSync as renameSync6, rmSync as rmSync10, writeFileSync as writeFileSync6 } from "node:fs";
+import { copyFileSync as copyFileSync2, existsSync as existsSync18, readFileSync as readFileSync10, rmSync as rmSync9 } from "node:fs";
 var isObj3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var areaOf = (f) => f.path === "" ? f.file : f.file + UPGRADE_AREA_KEY_SEP + f.path;
 var row3 = (f, after) => ({ area: areaOf(f), before: f.reason, after });
 function moveAside(target, undo) {
   const trash = target + UPGRADE_TRASH_SUFFIX;
-  rmSync10(trash, { recursive: true, force: true });
-  renameSync6(target, trash);
+  rmSync9(trash, { recursive: true, force: true });
+  renameWithRetry(target, trash);
   undo.push({ trash, target });
 }
 function keepOriginal(file2, kept, undo) {
   if (kept.has(file2)) return;
   const trash = file2 + UPGRADE_TRASH_SUFFIX;
-  rmSync10(trash, { recursive: true, force: true });
+  rmSync9(trash, { recursive: true, force: true });
   copyFileSync2(file2, trash);
   kept.add(file2);
   undo.push({ trash, target: file2 });
 }
 function cutTomlTable(text, header) {
-  const lines = text.split("\n");
-  const start = lines.findIndex((l) => l.trim() === header);
-  if (start === -1) return null;
-  let end = start + 1;
-  while (end < lines.length && !lines[end].trim().startsWith(TOML_TABLE_OPEN)) end += 1;
-  return [...lines.slice(0, start), ...lines.slice(end)].join("\n");
+  let span;
+  try {
+    span = tomlTableSpans(text).find((t) => t.header.trim() === header);
+  } catch {
+    return null;
+  }
+  return span === void 0 ? null : text.slice(0, span.start) + text.slice(span.end);
 }
 function writeAtomic(file2, text) {
-  const tmp = file2 + HOST_CONFIG_TMP_SUFFIX;
-  writeFileSync6(tmp, text, "utf8");
-  renameSync6(tmp, file2);
+  atomicWriteFile(file2, text);
 }
-function locate(doc, path4) {
-  const segs = path4.split(V1_KEY_PATH_SEP);
+function locate(doc, path5) {
+  const segs = path5.split(V1_KEY_PATH_SEP);
   let cur = doc;
   for (const seg of segs.slice(0, -1)) {
     if (Array.isArray(cur)) cur = cur[Number(seg)];
     else if (isObj3(cur)) cur = cur[seg];
     else return null;
   }
-  const last = segs[segs.length - 1];
-  if (Array.isArray(cur)) return Number(last) < cur.length ? [cur, last] : null;
-  if (isObj3(cur)) return Object.hasOwn(cur, last) ? [cur, last] : null;
+  const last2 = segs[segs.length - 1];
+  if (Array.isArray(cur)) return Number(last2) < cur.length ? [cur, last2] : null;
+  if (isObj3(cur)) return Object.hasOwn(cur, last2) ? [cur, last2] : null;
   return null;
 }
 function stripJsonEntries(agent, file2, findings, kept, undo) {
-  const text = readFileSync10(file2, "utf8");
+  const layout = hostLayout(readFileSync10(file2, "utf8"));
+  const text = hostText(readFileSync10(file2, "utf8"));
   const doc = parseHostConfig(agent, file2, text, "jsonc");
   const hit = /* @__PURE__ */ new Set();
   const byContainer = /* @__PURE__ */ new Map();
@@ -47829,7 +50046,7 @@ function stripJsonEntries(agent, file2, findings, kept, undo) {
   const patch = {};
   for (const k of topKeys) patch[k] = doc[k];
   keepOriginal(file2, kept, undo);
-  writeHostConfigEdit(file2, { agent, text, format: "jsonc", path: file2 }, patch);
+  writeHostConfigEdit(file2, { agent, text, format: "jsonc", path: file2, layout }, patch);
   return hit;
 }
 function removeV1(agent, findings) {
@@ -47852,7 +50069,9 @@ function removeV1(agent, findings) {
       continue;
     }
     if (file2.endsWith(TOML_EXT)) {
-      let text = readFileSync10(file2, "utf8");
+      const rawToml = readFileSync10(file2, "utf8");
+      const tomlLayout = hostLayout(rawToml);
+      let text = hostText(rawToml);
       for (const f of list2) {
         const next = cutTomlTable(text, f.path);
         if (next === null) {
@@ -47864,7 +50083,7 @@ function removeV1(agent, findings) {
       }
       if (list2.some((f) => done.get(f) === UPGRADE_REMOVED)) {
         keepOriginal(file2, kept, undo);
-        writeAtomic(file2, text);
+        writeAtomic(file2, withLayout(text, tomlLayout));
       }
       continue;
     }
@@ -47874,13 +50093,13 @@ function removeV1(agent, findings) {
   return {
     rows: findings.map((f) => row3(f, done.get(f) ?? UPGRADE_NOT_FOUND)),
     commit() {
-      for (const u of undo.splice(0)) rmSync10(u.trash, { recursive: true, force: true });
+      for (const u of undo.splice(0)) rmSync9(u.trash, { recursive: true, force: true });
     },
     rollback() {
       for (const u of undo.splice(0).reverse()) {
         if (!existsSync18(u.trash)) continue;
-        rmSync10(u.target, { recursive: true, force: true });
-        renameSync6(u.trash, u.target);
+        rmSync9(u.target, { recursive: true, force: true });
+        renameWithRetry(u.trash, u.target);
       }
     }
   };
@@ -47940,11 +50159,6 @@ var ctxUpgradeSchema = external_exports.object({
 function row4(area, before, after) {
   return { area, before, after };
 }
-function homeOf4(env) {
-  const home = homeDirOf(env);
-  if (home === null) throw new CtxError("NO_HOME", { name: process.platform === "win32" ? "USERPROFILE" : "HOME" });
-  return home;
-}
 function bundleDir() {
   return dirname9(process.argv[1] ?? "");
 }
@@ -47969,7 +50183,7 @@ async function checkout(adapter, deps) {
   try {
     verifySums(fetched.dir);
   } catch (err) {
-    if (!isCurrent(agentDir, fetched.dir)) rmSync11(fetched.dir, { recursive: true, force: true });
+    if (!isCurrent(agentDir, fetched.dir)) rmSync10(fetched.dir, { recursive: true, force: true });
     throw err;
   }
   const swap = swapPluginCurrent(agentDir, fetched.sha);
@@ -47986,7 +50200,7 @@ async function upgrade(adapter, deps, home) {
   try {
     const step4 = UPGRADE_GIT_CHECKOUT_AGENTS.includes(adapter.id) ? (done = await checkout(adapter, deps)).rows : [hostRow(adapter)];
     const step5 = regenerateHostConfig(adapter, home, { env: deps.env, write: deps.write });
-    const findings = detectV1(adapter.id, home, { project: deps.project.worktree, piAgentDir: deps.env[PI_AGENT_DIR_ENV] });
+    const findings = detectV1(adapter.id, home, { project: deps.project.worktree, piAgentDir: piAgentDirOf(deps.env, home), claudeDir: claudeDirOf(deps.env, home), copilotDir: copilotDirOf(deps.env, home), kiroDir: kiroDirOf(deps.env, home), opencodeDir: opencodeDirOf(deps.env, home) });
     removal = removeV1(adapter.id, findings);
     const rows = [...step4, ...step5, ...removal.rows];
     removal.commit();
@@ -48007,7 +50221,7 @@ function renderTable(rows) {
 }
 async function runUpgrade(input, deps) {
   const adapter = getAdapter(deps.project.agent);
-  const home = homeOf4(deps.env);
+  const home = requireHomeDir(deps.env);
   const rows = pluginRootRow(adapter, deps.env);
   if ((input.mode ?? UPGRADE_DEFAULT_MODE) === "uninstall") {
     const result = runUninstall({ adapter, project: deps.project, env: deps.env, confirmDelete: input.confirmDelete === true });
@@ -48235,7 +50449,7 @@ async function startServer(argv, env) {
       try {
         const configDir = resolveConfigDir(process.env);
         removeOwnerPid(configDir, db.projectKey, serverId);
-        rmSync12(stopMarker(configDir, db.projectKey), { force: true });
+        rmSync11(stopMarker(configDir, db.projectKey), { force: true });
       } catch (err) {
         console.error(err);
       }