norn-cli 4.6.3 → 5.0.0

package/dist/cli.js

@@ -15274,7 +15274,7 @@ var require_mime_types = __commonJS({
   "node_modules/mime-types/index.js"(exports2) {
     "use strict";
     var db = require_mime_db();
-    var extname9 = require("path").extname;
+    var extname10 = require("path").extname;
     var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
     var TEXT_TYPE_REGEXP = /^text\//i;
     exports2.charset = charset;
@@ -15328,7 +15328,7 @@ var require_mime_types = __commonJS({
       if (!path44 || typeof path44 !== "string") {
         return false;
       }
-      var extension3 = extname9("x." + path44).toLowerCase().substr(1);
+      var extension3 = extname10("x." + path44).toLowerCase().substr(1);
       if (!extension3) {
         return false;
       }
@@ -16437,7 +16437,7 @@ var require_form_data = __commonJS({
     var http5 = require("http");
     var https5 = require("https");
     var parseUrl = require("url").parse;
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var Stream6 = require("stream").Stream;
     var crypto13 = require("crypto");
     var mime = require_mime_types();
@@ -16504,7 +16504,7 @@ var require_form_data = __commonJS({
         if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
           callback(null, value.end + 1 - (value.start ? value.start : 0));
         } else {
-          fs38.stat(value.path, function(err, stat4) {
+          fs39.stat(value.path, function(err, stat4) {
             if (err) {
               callback(err);
               return;
@@ -20212,15 +20212,15 @@ var require_pg_connection_string = __commonJS({
       if (config2.sslcert || config2.sslkey || config2.sslrootcert || config2.sslmode) {
         config2.ssl = {};
       }
-      const fs38 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
+      const fs39 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
       if (config2.sslcert) {
-        config2.ssl.cert = fs38.readFileSync(config2.sslcert).toString();
+        config2.ssl.cert = fs39.readFileSync(config2.sslcert).toString();
       }
       if (config2.sslkey) {
-        config2.ssl.key = fs38.readFileSync(config2.sslkey).toString();
+        config2.ssl.key = fs39.readFileSync(config2.sslkey).toString();
       }
       if (config2.sslrootcert) {
-        config2.ssl.ca = fs38.readFileSync(config2.sslrootcert).toString();
+        config2.ssl.ca = fs39.readFileSync(config2.sslrootcert).toString();
       }
       if (options.useLibpqCompat && config2.uselibpqcompat) {
         throw new Error("Both useLibpqCompat and uselibpqcompat are set. Please use only one of them.");
@@ -22157,15 +22157,15 @@ var require_lib = __commonJS({
   "node_modules/pgpass/lib/index.js"(exports2, module2) {
     "use strict";
     var path44 = require("path");
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var helper = require_helper();
     module2.exports = function(connInfo, cb) {
       var file2 = helper.getFileName();
-      fs38.stat(file2, function(err, stat4) {
+      fs39.stat(file2, function(err, stat4) {
         if (err || !helper.usePgPass(stat4, file2)) {
           return cb(void 0);
         }
-        var st = fs38.createReadStream(file2);
+        var st = fs39.createReadStream(file2);
         helper.getPassword(connInfo, st, cb);
       });
     };
@@ -41656,7 +41656,7 @@ var require_msal_node = __commonJS({
     var crypto13 = require("crypto");
     var msalCommon = require_lib4();
     var jwt2 = require_jsonwebtoken();
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var path44 = require("path");
     var Serializer = class {
       /**
@@ -51405,7 +51405,7 @@ Headers: ${JSON.stringify(headers)}`
         if (!identityEndpoint || !imdsEndpoint) {
           const fileDetectionPath = AZURE_ARC_FILE_DETECTION[process.platform];
           try {
-            fs38.accessSync(fileDetectionPath, fs38.constants.F_OK | fs38.constants.R_OK);
+            fs39.accessSync(fileDetectionPath, fs39.constants.F_OK | fs39.constants.R_OK);
             identityEndpoint = DEFAULT_AZURE_ARC_IDENTITY_ENDPOINT;
             imdsEndpoint = HIMDS_EXECUTABLE_HELPER_STRING;
           } catch (err) {
@@ -51517,7 +51517,7 @@ Headers: ${JSON.stringify(headers)}`
           }
           let secretFileSize;
           try {
-            secretFileSize = await fs38.statSync(secretFilePath).size;
+            secretFileSize = await fs39.statSync(secretFilePath).size;
           } catch (e2) {
             throw createManagedIdentityError(unableToReadSecretFile);
           }
@@ -51526,7 +51526,7 @@ Headers: ${JSON.stringify(headers)}`
           }
           let secret;
           try {
-            secret = fs38.readFileSync(secretFilePath, EncodingTypes.UTF8);
+            secret = fs39.readFileSync(secretFilePath, EncodingTypes.UTF8);
           } catch (e2) {
             throw createManagedIdentityError(unableToReadSecretFile);
           }
@@ -68241,8 +68241,8 @@ var require_primordials = __commonJS({
       ArrayPrototypeIndexOf(self2, el) {
         return self2.indexOf(el);
       },
-      ArrayPrototypeJoin(self2, sep11) {
-        return self2.join(sep11);
+      ArrayPrototypeJoin(self2, sep10) {
+        return self2.join(sep10);
       },
       ArrayPrototypeMap(self2, fn) {
         return self2.map(fn);
@@ -100776,12 +100776,12 @@ var require_dist5 = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f3;
     };
-    function addFormats(ajv2, list, fs38, exportName) {
+    function addFormats(ajv2, list, fs39, exportName) {
       var _a6;
       var _b;
       (_a6 = (_b = ajv2.opts.code).formats) !== null && _a6 !== void 0 ? _a6 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f3 of list)
-        ajv2.addFormat(f3, fs38[f3]);
+        ajv2.addFormat(f3, fs39[f3]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -100794,7 +100794,7 @@ var require_windows = __commonJS({
   "node_modules/isexe/windows.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     function checkPathExt(path44, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
@@ -100819,12 +100819,12 @@ var require_windows = __commonJS({
       return checkPathExt(path44, options);
     }
     function isexe(path44, options, cb) {
-      fs38.stat(path44, function(er, stat4) {
+      fs39.stat(path44, function(er, stat4) {
         cb(er, er ? false : checkStat(stat4, path44, options));
       });
     }
     function sync(path44, options) {
-      return checkStat(fs38.statSync(path44), path44, options);
+      return checkStat(fs39.statSync(path44), path44, options);
     }
   }
 });
@@ -100834,14 +100834,14 @@ var require_mode = __commonJS({
   "node_modules/isexe/mode.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     function isexe(path44, options, cb) {
-      fs38.stat(path44, function(er, stat4) {
+      fs39.stat(path44, function(er, stat4) {
         cb(er, er ? false : checkStat(stat4, options));
       });
     }
     function sync(path44, options) {
-      return checkStat(fs38.statSync(path44), options);
+      return checkStat(fs39.statSync(path44), options);
     }
     function checkStat(stat4, options) {
       return stat4.isFile() && checkMode(stat4, options);
@@ -100865,7 +100865,7 @@ var require_mode = __commonJS({
 // node_modules/isexe/index.js
 var require_isexe = __commonJS({
   "node_modules/isexe/index.js"(exports2, module2) {
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var core;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
       core = require_windows();
@@ -101129,16 +101129,16 @@ var require_shebang_command = __commonJS({
 var require_readShebang = __commonJS({
   "node_modules/cross-spawn/lib/util/readShebang.js"(exports2, module2) {
     "use strict";
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs38.openSync(command, "r");
-        fs38.readSync(fd, buffer, 0, size, 0);
-        fs38.closeSync(fd);
+        fd = fs39.openSync(command, "r");
+        fs39.readSync(fd, buffer, 0, size, 0);
+        fs39.closeSync(fd);
       } catch (e2) {
       }
       return shebangCommand(buffer.toString());
@@ -102253,12 +102253,12 @@ function redactSensitive(body) {
 async function checkCredentialsFileSafety(path44, onWarn = (m2) => console.warn(`anthropic-sdk: ${m2}`)) {
   if (typeof process === "undefined" || process.platform === "win32")
     return;
-  const fs38 = await import("node:fs");
+  const fs39 = await import("node:fs");
   let resolved = path44;
   let st;
   try {
-    resolved = await fs38.promises.realpath(path44);
-    st = await fs38.promises.stat(resolved);
+    resolved = await fs39.promises.realpath(path44);
+    st = await fs39.promises.stat(resolved);
   } catch {
     return;
   }
@@ -102274,27 +102274,27 @@ async function checkCredentialsFileSafety(path44, onWarn = (m2) => console.warn(
   }
 }
 async function writeCredentialsFileAtomic(targetPath, data) {
-  const fs38 = await import("node:fs");
+  const fs39 = await import("node:fs");
   const path44 = await import("node:path");
   const dir = path44.dirname(targetPath);
-  await fs38.promises.mkdir(dir, { recursive: true, mode: 448 });
+  await fs39.promises.mkdir(dir, { recursive: true, mode: 448 });
   const tmpPath = `${targetPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
   try {
-    const fh = await fs38.promises.open(tmpPath, "w", 384);
+    const fh = await fs39.promises.open(tmpPath, "w", 384);
     try {
       await fh.writeFile(JSON.stringify(data, null, 2));
       await fh.sync();
     } finally {
       await fh.close();
     }
-    await fs38.promises.rename(tmpPath, targetPath);
+    await fs39.promises.rename(tmpPath, targetPath);
   } catch (err) {
-    await fs38.promises.unlink(tmpPath).catch(() => {
+    await fs39.promises.unlink(tmpPath).catch(() => {
     });
     throw err;
   }
   try {
-    const dirFh = await fs38.promises.open(dir, "r");
+    const dirFh = await fs39.promises.open(dir, "r");
     try {
       await dirFh.sync();
     } finally {
@@ -102658,12 +102658,12 @@ var init_credentials = __esm({
         return null;
       }
       validateProfileName(profileName);
-      const fs38 = await import("node:fs");
+      const fs39 = await import("node:fs");
       const path44 = await import("node:path");
       const configPath = path44.join(rootConfigPath, "configs", `${profileName}.json`);
       let configRaw;
       try {
-        configRaw = await fs38.promises.readFile(configPath, "utf-8");
+        configRaw = await fs39.promises.readFile(configPath, "utf-8");
       } catch (err) {
         if (err?.code !== "ENOENT") {
           throw new Error(`failed to read config file ${configPath}: ${err}`);
@@ -102791,11 +102791,11 @@ var init_credentials = __esm({
       if (profileName) {
         return profileName;
       }
-      const fs38 = await import("node:fs");
+      const fs39 = await import("node:fs");
       const path44 = await import("node:path");
       const filePath = path44.join(rootConfigPath, "active_config");
       try {
-        return (await fs38.promises.readFile(filePath, "utf-8")).trim() || "default";
+        return (await fs39.promises.readFile(filePath, "utf-8")).trim() || "default";
       } catch (err) {
         if (err?.code !== "ENOENT") {
           throw new Error(`failed to read ${filePath}: ${err}`);
@@ -102812,10 +102812,10 @@ function identityTokenFromFile(path44) {
     throw new AnthropicError("Identity token file path is empty");
   }
   return async () => {
-    const fs38 = await import("node:fs");
+    const fs39 = await import("node:fs");
     let content;
     try {
-      content = await fs38.promises.readFile(path44, "utf-8");
+      content = await fs39.promises.readFile(path44, "utf-8");
     } catch (err) {
       throw new AnthropicError(`Failed to read identity token file at ${path44}: ${err}`);
     }
@@ -102906,11 +102906,11 @@ var init_oidc_federation = __esm({
 // node_modules/@anthropic-ai/sdk/lib/credentials/user-oauth.mjs
 function userOAuthProvider(config2) {
   return async (opts) => {
-    const fs38 = await import("node:fs");
+    const fs39 = await import("node:fs");
     await checkCredentialsFileSafety(config2.credentialsPath, config2.onSafetyWarning);
     let raw;
     try {
-      raw = await fs38.promises.readFile(config2.credentialsPath, "utf-8");
+      raw = await fs39.promises.readFile(config2.credentialsPath, "utf-8");
     } catch (err) {
       throw new WorkloadIdentityError(`Credentials file not found at ${config2.credentialsPath}: ${err}`);
     }
@@ -103082,11 +103082,11 @@ function resolveIdentityTokenProvider(auth2) {
 }
 function cachedExchangeProvider(exchange, credentialsPath, onCacheWriteError, onSafetyWarning) {
   return async (opts) => {
-    const fs38 = await import("node:fs");
+    const fs39 = await import("node:fs");
     await checkCredentialsFileSafety(credentialsPath, onSafetyWarning);
     let existing;
     try {
-      const raw = await fs38.promises.readFile(credentialsPath, "utf-8");
+      const raw = await fs39.promises.readFile(credentialsPath, "utf-8");
       existing = JSON.parse(raw);
       const token = existing?.["access_token"];
       if (token && !opts?.forceRefresh) {
@@ -106778,7 +106778,7 @@ var init_promise = __esm({
 // node_modules/@anthropic-ai/sdk/tools/agent-toolset/fs-util.mjs
 async function realpathOrSelf(p) {
   try {
-    return await fs15.realpath(p);
+    return await fs16.realpath(p);
   } catch {
     return p;
   }
@@ -106790,18 +106790,18 @@ async function canonicalize(abs) {
   for (; ; ) {
     let real;
     try {
-      real = await fs15.realpath(prefix);
+      real = await fs16.realpath(prefix);
     } catch {
       let isLink = false;
       try {
-        isLink = (await fs15.lstat(prefix)).isSymbolicLink();
+        isLink = (await fs16.lstat(prefix)).isSymbolicLink();
       } catch {
       }
       if (isLink) {
         if (++hops > 40) {
           throw new ToolError(`path ${JSON.stringify(abs)} has too many levels of symbolic links`);
         }
-        prefix = path17.resolve(path17.dirname(prefix), await fs15.readlink(prefix));
+        prefix = path17.resolve(path17.dirname(prefix), await fs16.readlink(prefix));
         continue;
       }
       const parent = path17.dirname(prefix);
@@ -106831,17 +106831,17 @@ async function atomicWriteFile(targetPath, content) {
   const tempPath = path17.join(dir, `.tmp-${process.pid}-${(0, import_node_crypto.randomUUID)()}`);
   let handle;
   try {
-    handle = await fs15.open(tempPath, "wx", FILE_CREATE_MODE);
+    handle = await fs16.open(tempPath, "wx", FILE_CREATE_MODE);
     await handle.writeFile(content, "utf-8");
     await handle.sync();
     await handle.close();
     handle = void 0;
-    await fs15.rename(tempPath, targetPath);
+    await fs16.rename(tempPath, targetPath);
   } catch (err) {
     if (handle)
       await handle.close().catch(() => {
       });
-    await fs15.unlink(tempPath).catch(() => {
+    await fs16.unlink(tempPath).catch(() => {
     });
     throw err;
   }
@@ -106871,10 +106871,10 @@ function fsErrorMessage(err, file2) {
       return `${file2}: ${err instanceof Error ? err.message : String(err)}`;
   }
 }
-var fs15, path17, import_node_crypto, DIR_CREATE_MODE, FILE_CREATE_MODE;
+var fs16, path17, import_node_crypto, DIR_CREATE_MODE, FILE_CREATE_MODE;
 var init_fs_util = __esm({
   "node_modules/@anthropic-ai/sdk/tools/agent-toolset/fs-util.mjs"() {
-    fs15 = __toESM(require("node:fs/promises"), 1);
+    fs16 = __toESM(require("node:fs/promises"), 1);
     path17 = __toESM(require("node:path"), 1);
     import_node_crypto = require("node:crypto");
     init_ToolError();
@@ -106909,8 +106909,8 @@ async function setupSkills(ctx) {
         continue;
       }
       const resp = await client.beta.skills.versions.download(versionId, { skill_id: skill.skill_id });
-      await fs16.rm(dest, { recursive: true, force: true });
-      await fs16.mkdir(dest, { recursive: true, mode: DIR_CREATE_MODE });
+      await fs17.rm(dest, { recursive: true, force: true });
+      await fs17.mkdir(dest, { recursive: true, mode: DIR_CREATE_MODE });
       created.push(dest);
       await extractSkillArchive(resp, dest);
       log.info("downloaded skill", {
@@ -106929,7 +106929,7 @@ async function setupSkills(ctx) {
   }
   return async () => {
     for (const dest of created) {
-      await fs16.rm(dest, { recursive: true, force: true }).catch((e2) => {
+      await fs17.rm(dest, { recursive: true, force: true }).catch((e2) => {
         log.warn("failed to clean up skill", { component: "agent-tool-context", dest, error: String(e2) });
       });
     }
@@ -107010,19 +107010,19 @@ async function extractSkillArchive(resp, dest) {
     assertSafeMemberNames(listing);
     assertNoSpecialMembers(await runArchiveTool(archiveCmd, isZip ? ["-Z", tmp] : ["-tvf", tmp]));
     const top = archiveTopDir(listing);
-    await fs16.mkdir(stage, { recursive: true, mode: DIR_CREATE_MODE });
+    await fs17.mkdir(stage, { recursive: true, mode: DIR_CREATE_MODE });
     await runArchiveTool(archiveCmd, isZip ? ["-oq", tmp, "-d", stage] : ["-xf", tmp, "-C", stage]);
     const srcRoot = top ? path18.join(stage, top) : stage;
-    for (const entry of await fs16.readdir(srcRoot)) {
-      await fs16.rename(path18.join(srcRoot, entry), path18.join(dest, entry));
+    for (const entry of await fs17.readdir(srcRoot)) {
+      await fs17.rename(path18.join(srcRoot, entry), path18.join(dest, entry));
     }
   } finally {
-    await fs16.rm(tmp, { force: true });
-    await fs16.rm(stage, { recursive: true, force: true });
+    await fs17.rm(tmp, { force: true });
+    await fs17.rm(stage, { recursive: true, force: true });
   }
 }
 async function readHead(file2, n) {
-  const handle = await fs16.open(file2, "r");
+  const handle = await fs17.open(file2, "r");
   try {
     const buf = Buffer.alloc(n);
     const { bytesRead } = await handle.read(buf, 0, n, 0);
@@ -107031,10 +107031,10 @@ async function readHead(file2, n) {
     await handle.close();
   }
 }
-var fs16, fssync, path18, import_node_child_process6, import_node_util6, import_node_stream2, import_promises3, execFileAsync5;
+var fs17, fssync, path18, import_node_child_process6, import_node_util6, import_node_stream2, import_promises3, execFileAsync5;
 var init_skills = __esm({
   "node_modules/@anthropic-ai/sdk/tools/agent-toolset/skills.mjs"() {
-    fs16 = __toESM(require("node:fs/promises"), 1);
+    fs17 = __toESM(require("node:fs/promises"), 1);
     fssync = __toESM(require("node:fs"), 1);
     path18 = __toESM(require("node:path"), 1);
     import_node_child_process6 = require("node:child_process");
@@ -107170,7 +107170,7 @@ function betaReadTool(ctx) {
       const abs = await resolvePath(ctx, file_path);
       let data;
       try {
-        const st = await fs17.stat(abs);
+        const st = await fs18.stat(abs);
         if (!st.isFile()) {
           throw new ToolError(`read: ${file_path} is not a regular file`);
         }
@@ -107178,7 +107178,7 @@ function betaReadTool(ctx) {
         if (limit3 !== null && st.size > limit3) {
           throw new ToolError(`read: ${file_path} is ${st.size} bytes, exceeds ${limit3}-byte limit. Use bash (head/tail/sed) to read a slice.`);
         }
-        data = await fs17.readFile(abs, "utf8");
+        data = await fs18.readFile(abs, "utf8");
       } catch (e2) {
         if (e2 instanceof ToolError)
           throw e2;
@@ -107210,7 +107210,7 @@ function betaWriteTool(ctx) {
         throw new ToolError("write: file_path is required");
       const abs = await resolvePath(ctx, file_path);
       try {
-        await fs17.mkdir(path19.dirname(abs), { recursive: true, mode: DIR_CREATE_MODE });
+        await fs18.mkdir(path19.dirname(abs), { recursive: true, mode: DIR_CREATE_MODE });
         await atomicWriteFile(abs, content ?? "");
       } catch (e2) {
         throw new ToolError(`write: ${fsErrorMessage(e2, file_path)}`);
@@ -107241,7 +107241,7 @@ function betaEditTool(ctx) {
       const abs = await resolvePath(ctx, file_path);
       let data;
       try {
-        const st = await fs17.stat(abs);
+        const st = await fs18.stat(abs);
         if (!st.isFile()) {
           throw new ToolError(`edit: ${file_path} is not a regular file`);
         }
@@ -107249,7 +107249,7 @@ function betaEditTool(ctx) {
         if (limit3 !== null && st.size > limit3) {
           throw new ToolError(`edit: ${file_path} is ${st.size} bytes, exceeds ${limit3}-byte limit. Use bash (sed/awk) to edit a large file.`);
         }
-        data = await fs17.readFile(abs, "utf8");
+        data = await fs18.readFile(abs, "utf8");
       } catch (e2) {
         if (e2 instanceof ToolError)
           throw e2;
@@ -107303,7 +107303,7 @@ function betaGlobTool(ctx) {
       if (!ctx.unrestrictedPaths && pat.split(/[\\/]/).includes("..")) {
         throw new ToolError('glob: ".." is not permitted in the pattern');
       }
-      const realRoot = ctx.unrestrictedPaths ? root : await fs17.realpath(root).catch(() => root);
+      const realRoot = ctx.unrestrictedPaths ? root : await fs18.realpath(root).catch(() => root);
       const matches = [];
       try {
         for await (const entry of fsGlob(pat, {
@@ -107317,7 +107317,7 @@ function betaGlobTool(ctx) {
           if (!ctx.unrestrictedPaths) {
             let real;
             try {
-              real = await fs17.realpath(full);
+              real = await fs18.realpath(full);
             } catch {
               continue;
             }
@@ -107326,7 +107326,7 @@ function betaGlobTool(ctx) {
           }
           let mtime = 0;
           try {
-            mtime = (await fs17.stat(full)).mtimeMs;
+            mtime = (await fs18.stat(full)).mtimeMs;
           } catch {
           }
           matches.push({ path: full, mtime });
@@ -107417,7 +107417,7 @@ async function runWalkGrep(pattern, root, signal) {
     hits.push(line2);
     return true;
   };
-  const stat4 = await fs17.stat(root).catch(() => null);
+  const stat4 = await fs18.stat(root).catch(() => null);
   if (stat4?.isFile()) {
     await grepFile(root, re, push);
   } else {
@@ -107460,7 +107460,7 @@ async function walk(root, rel, fn, signal) {
       return false;
     let entries;
     try {
-      entries = await fs17.readdir(path19.join(root, rel2), { withFileTypes: true });
+      entries = await fs18.readdir(path19.join(root, rel2), { withFileTypes: true });
     } catch {
       return true;
     }
@@ -107489,18 +107489,18 @@ async function findRg() {
   for (const d of dirs) {
     const candidate = path19.join(d, "rg");
     try {
-      await fs17.access(candidate, fssync2.constants.X_OK);
+      await fs18.access(candidate, fssync2.constants.X_OK);
       return candidate;
     } catch {
     }
   }
   return null;
 }
-var fs17, fssync2, path19, cp, crypto8, readline, _BashSession_instances, _BashSession_proc, _BashSession_buf, _BashSession_truncated, _BashSession_closed, _BashSession_waiting, _BashSession_append, BASH_OUTPUT_LIMIT, BASH_DEFAULT_TIMEOUT_MS, DEFAULT_MAX_FILE_BYTES, GREP_OUTPUT_LIMIT, GREP_MAX_LINE_LENGTH, GLOB_RESULT_LIMIT, BashTimeoutError, ANSI_RE, fsGlob, BashSession, WALK_MAX_DEPTH, WALK_MAX_ENTRIES;
+var fs18, fssync2, path19, cp, crypto8, readline, _BashSession_instances, _BashSession_proc, _BashSession_buf, _BashSession_truncated, _BashSession_closed, _BashSession_waiting, _BashSession_append, BASH_OUTPUT_LIMIT, BASH_DEFAULT_TIMEOUT_MS, DEFAULT_MAX_FILE_BYTES, GREP_OUTPUT_LIMIT, GREP_MAX_LINE_LENGTH, GLOB_RESULT_LIMIT, BashTimeoutError, ANSI_RE, fsGlob, BashSession, WALK_MAX_DEPTH, WALK_MAX_ENTRIES;
 var init_node = __esm({
   "node_modules/@anthropic-ai/sdk/tools/agent-toolset/node.mjs"() {
     init_tslib();
-    fs17 = __toESM(require("node:fs/promises"), 1);
+    fs18 = __toESM(require("node:fs/promises"), 1);
     fssync2 = __toESM(require("node:fs"), 1);
     path19 = __toESM(require("node:path"), 1);
     cp = __toESM(require("node:child_process"), 1);
@@ -107526,7 +107526,7 @@ var init_node = __esm({
       }
     };
     ANSI_RE = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
-    fsGlob = fs17.glob;
+    fsGlob = fs18.glob;
     BashSession = class {
       constructor(dir, env4 = scrubbedShellEnv()) {
         _BashSession_instances.add(this);
@@ -124447,7 +124447,7 @@ var require_util4 = __commonJS({
     exports2.removeUndefinedValuesInObject = removeUndefinedValuesInObject;
     exports2.isValidFile = isValidFile;
     exports2.getWellKnownCertificateConfigFileLocation = getWellKnownCertificateConfigFileLocation;
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var os4 = require("os");
     var path44 = require("path");
     var WELL_KNOWN_CERTIFICATE_CONFIG_FILE = "certificate_config.json";
@@ -124535,7 +124535,7 @@ var require_util4 = __commonJS({
     }
     async function isValidFile(filePath) {
       try {
-        const stats = await fs38.promises.lstat(filePath);
+        const stats = await fs39.promises.lstat(filePath);
         return stats.isFile();
       } catch (e2) {
         return false;
@@ -125947,10 +125947,10 @@ var require_getCredentials = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.getCredentials = getCredentials;
     var path44 = require("path");
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var util_1 = require("util");
     var errorWithCode_1 = require_errorWithCode();
-    var readFile4 = fs38.readFile ? (0, util_1.promisify)(fs38.readFile) : async () => {
+    var readFile4 = fs39.readFile ? (0, util_1.promisify)(fs39.readFile) : async () => {
       throw new errorWithCode_1.ErrorWithCode("use key rather than keyFile.", "MISSING_CREDENTIALS");
     };
     var ExtensionFiles;
@@ -127627,12 +127627,12 @@ var require_filesubjecttokensupplier = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.FileSubjectTokenSupplier = void 0;
     var util_1 = require("util");
-    var fs38 = require("fs");
-    var readFile4 = (0, util_1.promisify)(fs38.readFile ?? (() => {
+    var fs39 = require("fs");
+    var readFile4 = (0, util_1.promisify)(fs39.readFile ?? (() => {
     }));
-    var realpath3 = (0, util_1.promisify)(fs38.realpath ?? (() => {
+    var realpath3 = (0, util_1.promisify)(fs39.realpath ?? (() => {
     }));
-    var lstat2 = (0, util_1.promisify)(fs38.lstat ?? (() => {
+    var lstat2 = (0, util_1.promisify)(fs39.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -127750,7 +127750,7 @@ var require_certificatesubjecttokensupplier = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.CertificateSubjectTokenSupplier = exports2.InvalidConfigurationError = exports2.CertificateSourceUnavailableError = exports2.CERTIFICATE_CONFIGURATION_ENV_VARIABLE = void 0;
     var util_1 = require_util4();
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var crypto_1 = require("crypto");
     var https5 = require("https");
     exports2.CERTIFICATE_CONFIGURATION_ENV_VARIABLE = "GOOGLE_API_CERTIFICATE_CONFIG";
@@ -127844,7 +127844,7 @@ var require_certificatesubjecttokensupplier = __commonJS({
         const configPath = this.certificateConfigPath;
         let fileContents;
         try {
-          fileContents = await fs38.promises.readFile(configPath, "utf8");
+          fileContents = await fs39.promises.readFile(configPath, "utf8");
         } catch (err) {
           throw new CertificateSourceUnavailableError(`Failed to read certificate config file at: ${configPath}`);
         }
@@ -127869,14 +127869,14 @@ var require_certificatesubjecttokensupplier = __commonJS({
       async #getKeyAndCert(certPath, keyPath) {
         let cert, key;
         try {
-          cert = await fs38.promises.readFile(certPath);
+          cert = await fs39.promises.readFile(certPath);
           new crypto_1.X509Certificate(cert);
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           throw new CertificateSourceUnavailableError(`Failed to read certificate file at ${certPath}: ${message}`);
         }
         try {
-          key = await fs38.promises.readFile(keyPath);
+          key = await fs39.promises.readFile(keyPath);
           (0, crypto_1.createPrivateKey)(key);
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
@@ -127895,7 +127895,7 @@ var require_certificatesubjecttokensupplier = __commonJS({
           return JSON.stringify([leafCert.raw.toString("base64")]);
         }
         try {
-          const chainPems = await fs38.promises.readFile(this.trustChainPath, "utf8");
+          const chainPems = await fs39.promises.readFile(this.trustChainPath, "utf8");
           const pemBlocks = chainPems.match(/-----BEGIN CERTIFICATE-----[^-]+-----END CERTIFICATE-----/g) ?? [];
           const chainCerts = pemBlocks.map((pem, index) => {
             try {
@@ -128597,7 +128597,7 @@ var require_pluggable_auth_handler = __commonJS({
     exports2.PluggableAuthHandler = exports2.ExecutableError = void 0;
     var executable_response_1 = require_executable_response();
     var childProcess2 = require("child_process");
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var ExecutableError = class extends Error {
       /**
        * The exit code returned by the executable.
@@ -128682,14 +128682,14 @@ var require_pluggable_auth_handler = __commonJS({
         }
         let filePath;
         try {
-          filePath = await fs38.promises.realpath(this.outputFile);
+          filePath = await fs39.promises.realpath(this.outputFile);
         } catch {
           return void 0;
         }
-        if (!(await fs38.promises.lstat(filePath)).isFile()) {
+        if (!(await fs39.promises.lstat(filePath)).isFile()) {
           return void 0;
         }
-        const responseString = await fs38.promises.readFile(filePath, {
+        const responseString = await fs39.promises.readFile(filePath, {
           encoding: "utf8"
         });
         if (responseString === "") {
@@ -129100,7 +129100,7 @@ var require_gdchclient = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.GdchClient = exports2.GDCH_SERVICE_ACCOUNT_TYPE = void 0;
     var crypto13 = require("crypto");
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var https5 = require("https");
     var oauth2client_1 = require_oauth2client();
     var DEFAULT_LIFETIME_IN_SECONDS = 3600;
@@ -129323,7 +129323,7 @@ var require_gdchclient = __commonJS({
         const currentPath = this.caCertPath;
         this.caAgentPromise = (async () => {
           try {
-            const ca = await fs38.promises.readFile(currentPath);
+            const ca = await fs39.promises.readFile(currentPath);
             return new https5.Agent({ ca });
           } catch (err) {
             if (this.cachedCaCertPath === currentPath) {
@@ -129383,7 +129383,7 @@ var require_googleauth = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.GoogleAuth = exports2.GoogleAuthExceptionMessages = void 0;
     var child_process_1 = require("child_process");
-    var fs38 = require("fs");
+    var fs39 = require("fs");
     var gaxios_1 = require_src2();
     var gcpMetadata = require_src4();
     var os4 = require("os");
@@ -129685,7 +129685,7 @@ var require_googleauth = __commonJS({
           return null;
         }
         const location = path44.join(configDir, "application_default_credentials.json");
-        if (!fs38.existsSync(location)) {
+        if (!fs39.existsSync(location)) {
           return null;
         }
         const client = await this._getApplicationCredentialsFromFilePath(location, options);
@@ -129702,8 +129702,8 @@ var require_googleauth = __commonJS({
           throw new Error("The file path is invalid.");
         }
         try {
-          filePath = fs38.realpathSync(filePath);
-          if (!fs38.lstatSync(filePath).isFile()) {
+          filePath = fs39.realpathSync(filePath);
+          if (!fs39.lstatSync(filePath).isFile()) {
             throw new Error();
           }
         } catch (err) {
@@ -129712,7 +129712,7 @@ var require_googleauth = __commonJS({
           }
           throw err;
         }
-        const readStream2 = fs38.createReadStream(filePath);
+        const readStream2 = fs39.createReadStream(filePath);
         return this.fromStream(readStream2, options);
       }
       /**
@@ -130040,7 +130040,7 @@ var require_googleauth = __commonJS({
           return this._cacheClientFromJSON(this.jsonContent, this.clientOptions);
         } else if (this.keyFilename) {
           const filePath = path44.resolve(this.keyFilename);
-          const stream4 = fs38.createReadStream(filePath);
+          const stream4 = fs39.createReadStream(filePath);
           return await this.fromStreamAsync(stream4, this.clientOptions);
         } else if (this.apiKey) {
           const client = await this.fromAPIKey(this.apiKey, this.clientOptions);
@@ -144718,7 +144718,7 @@ function isPlainObject$1(value) {
     return false;
   }
 }
-function formEncoder(sep11) {
+function formEncoder(sep10) {
   return (key, value, options) => {
     let out = "";
     const pairs = (options === null || options === void 0 ? void 0 : options.explode) ? explode(key, value) : [[key, value]];
@@ -144729,7 +144729,7 @@ function formEncoder(sep11) {
       return (options === null || options === void 0 ? void 0 : options.charEncoding) === "percent" ? encodeURIComponent(v) : v;
     };
     const encodeValue = (v) => encodeString(serializeValue(v));
-    const encodedSep = encodeString(sep11);
+    const encodedSep = encodeString(sep10);
     pairs.forEach(([pk, pv]) => {
       var _a6, _b;
       let tmp = "";
@@ -149279,13 +149279,13 @@ function getApiKeyFromEnv() {
   }
   return envGoogleApiKey || envGeminiApiKey || void 0;
 }
-var import_p_retry, import_google_auth_library, import_fs, fs19, import_promises4, import_node_stream5, import_promises5, path20, _defaultBaseGeminiUrl, _defaultBaseVertexUrl, BaseModule, Outcome, Language, FunctionResponseScheduling, Type, AuthType, HttpElementLocation, ApiSpec, Environment, SafetyPolicy, PhishBlockThreshold, Behavior, DynamicRetrievalConfigMode, ThinkingLevel, PersonGeneration, ProminentPeople, HarmCategory, HarmBlockMethod, HarmBlockThreshold, FunctionCallingConfigMode, FinishReason, HarmProbability, HarmSeverity, UrlRetrievalStatus, BlockedReason, TrafficType, MediaModality, ModelStage, MediaResolution, Modality, Delivery, AspectRatio, ImageSize, TuningMode, AdapterSize, ResponseParseType, MatchOperation, ReinforcementTuningThinkingLevel, JobState, TuningJobState, AggregationMetric, PairwiseChoice, VideoOrientation, TuningSpeed, TuningTask, DocumentState, ServiceTier, PartMediaResolutionLevel, ToolType, ResourceScope, FeatureSelectionPreference, EmbeddingApiType, SafetyFilterLevel, ImagePromptLanguage, MaskReferenceMode, ControlReferenceType, SubjectReferenceType, EditMode, SegmentMode, VideoGenerationReferenceType, VideoGenerationMaskMode, VideoCompressionQuality, ImageResizeMode, TuningMethod, FileState, FileSource, TurnCompleteReason, VadSignalType, VoiceActivityType, StartSensitivity, EndSensitivity, ActivityHandling, TurnCoverage, Scale, MusicGenerationMode, LiveMusicPlaybackControl, ToolResponse, FunctionResponseFileData, FunctionResponseBlob, FunctionResponsePart, FunctionResponse, HttpResponse, GenerateContentResponsePromptFeedback, GenerateContentResponseUsageMetadata, GenerateContentResponse, EmbedContentResponse, GenerateImagesResponse, EditImageResponse, UpscaleImageResponse, RecontextImageResponse, SegmentImageResponse, ListModelsResponse, DeleteModelResponse, AudioResponseFormat, ImageResponseFormat, TextResponseFormat, VideoResponseFormat, ResponseFormat, CountTokensResponse, ComputeTokensResponse, GenerateVideosResponse, GenerateVideosOperation, ReinforcementTuningParseResponseConfig, ReinforcementTuningAutoraterScorerParsedResponseConversionScorer, EvaluateDatasetResponse, ListTuningJobsResponse, CancelTuningJobResponse, ValidateRewardResponse, DeleteCachedContentResponse, ListCachedContentsResponse, ListDocumentsResponse, ListFileSearchStoresResponse, UploadToFileSearchStoreResumableResponse, ImportFileResponse, ImportFileOperation, ListFilesResponse, CreateFileResponse, DeleteFileResponse, RegisterFilesResponse, InlinedResponse, SingleEmbedContentResponse, InlinedEmbedContentResponse, ListBatchJobsResponse, ReplayResponse, RawReferenceImage, MaskReferenceImage, ControlReferenceImage, StyleReferenceImage, SubjectReferenceImage, ContentReferenceImage, LiveServerMessage, LiveClientToolResponse, LiveSendToolResponseParameters, LiveMusicServerMessage, UploadToFileSearchStoreResponse, UploadToFileSearchStoreOperation, PagedItem, Pager, Batches3, Caches, Chats, Chat, ApiError, Files2, CONTENT_TYPE_HEADER, SERVER_TIMEOUT_HEADER, USER_AGENT_HEADER, GOOGLE_API_CLIENT_HEADER, SDK_VERSION, LIBRARY_LABEL, VERTEX_AI_API_DEFAULT_VERSION, GOOGLE_AI_API_DEFAULT_VERSION, MULTI_REGIONAL_LOCATIONS, DEFAULT_RETRY_ATTEMPTS, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_MAX_DELAY, DEFAULT_RETRY_EXP_BASE, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_HTTP_STATUS_CODES, ApiClient, MCP_LABEL, hasMcpToolUsageFromMcpToTool, McpCallableTool, LiveMusic, LiveMusicSession, FUNCTION_RESPONSE_REQUIRES_ID, Live, defaultLiveSendClientContentParamerters, Session, DEFAULT_MAX_REMOTE_CALLS, Models3, Operations, Tokens, Documents, FileSearchStores, envMemo, GoogleGenAISecurityProvider, GoogleGenAIAuthHook, HTTPClientError, UnexpectedClientError, InvalidRequestError2, RequestAbortedError, RequestTimeoutError, ConnectionError, GoogleGenAiError, GeminiNextGenAPIClientError, APIError2, APIUserAbortError2, APIConnectionError2, APIConnectionTimeoutError2, BadRequestError2, AuthenticationError2, PermissionDeniedError2, NotFoundError2, ConflictError2, UnprocessableEntityError2, RateLimitError2, InternalServerError2, SDKHooks, hasOwn2, ServerList, SDK_METADATA, encodeForm, encodeSimple, encodeFormQuery, DEFAULT_FETCHER, HTTPClient, mediaParamSeparator, codeRangeRE$1, defaultBackoff, PermanentError, TemporaryError, codeRangeRE, gt, webWorkerLike, isBrowserLike, ClientSDK, jsonLikeContentTypeRE, jsonlLikeContentTypeRE, GoogleGenAiDefaultError, Stream4, CR3, LF3, BOUNDARIES, MAX_BOUNDARY_LEN, DEFAULT_CONTENT_TYPES, headerValRE, SecurityErrorCode, SecurityError, _a3, APIPromise2, Agents2, Environments2, CancelInteractionByIdServerError, CancelInteractionByIdClientError, CreateInteractionServerError, CreateInteractionClientError, DeleteInteractionServerError, DeleteInteractionClientError, GetInteractionByIdServerError, GetInteractionByIdClientError, Interactions, Triggers, Webhooks2, GoogleGenAI$1, LEGACY_LYRIA_MODELS, GeminiNextGenInteractions, GeminiNextGenAgents, GeminiNextGenWebhooks, GeminiNextGenTriggers, GeminiNextGenEnvironments, GOOGLE_API_KEY_HEADER, REQUIRED_VERTEX_AI_SCOPE, NodeAuth, NodeDownloader, NodeWebSocketFactory, NodeWebSocket, Tunings, MAX_CHUNK_SIZE, MAX_RETRY_COUNT, INITIAL_RETRY_DELAY_MS, DELAY_MULTIPLIER, X_GOOG_UPLOAD_STATUS_HEADER_FIELD, NodeUploader, NodeFiles, LANGUAGE_LABEL_PREFIX, GoogleGenAI2;
+var import_p_retry, import_google_auth_library, import_fs, fs20, import_promises4, import_node_stream5, import_promises5, path20, _defaultBaseGeminiUrl, _defaultBaseVertexUrl, BaseModule, Outcome, Language, FunctionResponseScheduling, Type, AuthType, HttpElementLocation, ApiSpec, Environment, SafetyPolicy, PhishBlockThreshold, Behavior, DynamicRetrievalConfigMode, ThinkingLevel, PersonGeneration, ProminentPeople, HarmCategory, HarmBlockMethod, HarmBlockThreshold, FunctionCallingConfigMode, FinishReason, HarmProbability, HarmSeverity, UrlRetrievalStatus, BlockedReason, TrafficType, MediaModality, ModelStage, MediaResolution, Modality, Delivery, AspectRatio, ImageSize, TuningMode, AdapterSize, ResponseParseType, MatchOperation, ReinforcementTuningThinkingLevel, JobState, TuningJobState, AggregationMetric, PairwiseChoice, VideoOrientation, TuningSpeed, TuningTask, DocumentState, ServiceTier, PartMediaResolutionLevel, ToolType, ResourceScope, FeatureSelectionPreference, EmbeddingApiType, SafetyFilterLevel, ImagePromptLanguage, MaskReferenceMode, ControlReferenceType, SubjectReferenceType, EditMode, SegmentMode, VideoGenerationReferenceType, VideoGenerationMaskMode, VideoCompressionQuality, ImageResizeMode, TuningMethod, FileState, FileSource, TurnCompleteReason, VadSignalType, VoiceActivityType, StartSensitivity, EndSensitivity, ActivityHandling, TurnCoverage, Scale, MusicGenerationMode, LiveMusicPlaybackControl, ToolResponse, FunctionResponseFileData, FunctionResponseBlob, FunctionResponsePart, FunctionResponse, HttpResponse, GenerateContentResponsePromptFeedback, GenerateContentResponseUsageMetadata, GenerateContentResponse, EmbedContentResponse, GenerateImagesResponse, EditImageResponse, UpscaleImageResponse, RecontextImageResponse, SegmentImageResponse, ListModelsResponse, DeleteModelResponse, AudioResponseFormat, ImageResponseFormat, TextResponseFormat, VideoResponseFormat, ResponseFormat, CountTokensResponse, ComputeTokensResponse, GenerateVideosResponse, GenerateVideosOperation, ReinforcementTuningParseResponseConfig, ReinforcementTuningAutoraterScorerParsedResponseConversionScorer, EvaluateDatasetResponse, ListTuningJobsResponse, CancelTuningJobResponse, ValidateRewardResponse, DeleteCachedContentResponse, ListCachedContentsResponse, ListDocumentsResponse, ListFileSearchStoresResponse, UploadToFileSearchStoreResumableResponse, ImportFileResponse, ImportFileOperation, ListFilesResponse, CreateFileResponse, DeleteFileResponse, RegisterFilesResponse, InlinedResponse, SingleEmbedContentResponse, InlinedEmbedContentResponse, ListBatchJobsResponse, ReplayResponse, RawReferenceImage, MaskReferenceImage, ControlReferenceImage, StyleReferenceImage, SubjectReferenceImage, ContentReferenceImage, LiveServerMessage, LiveClientToolResponse, LiveSendToolResponseParameters, LiveMusicServerMessage, UploadToFileSearchStoreResponse, UploadToFileSearchStoreOperation, PagedItem, Pager, Batches3, Caches, Chats, Chat, ApiError, Files2, CONTENT_TYPE_HEADER, SERVER_TIMEOUT_HEADER, USER_AGENT_HEADER, GOOGLE_API_CLIENT_HEADER, SDK_VERSION, LIBRARY_LABEL, VERTEX_AI_API_DEFAULT_VERSION, GOOGLE_AI_API_DEFAULT_VERSION, MULTI_REGIONAL_LOCATIONS, DEFAULT_RETRY_ATTEMPTS, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_MAX_DELAY, DEFAULT_RETRY_EXP_BASE, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_HTTP_STATUS_CODES, ApiClient, MCP_LABEL, hasMcpToolUsageFromMcpToTool, McpCallableTool, LiveMusic, LiveMusicSession, FUNCTION_RESPONSE_REQUIRES_ID, Live, defaultLiveSendClientContentParamerters, Session, DEFAULT_MAX_REMOTE_CALLS, Models3, Operations, Tokens, Documents, FileSearchStores, envMemo, GoogleGenAISecurityProvider, GoogleGenAIAuthHook, HTTPClientError, UnexpectedClientError, InvalidRequestError2, RequestAbortedError, RequestTimeoutError, ConnectionError, GoogleGenAiError, GeminiNextGenAPIClientError, APIError2, APIUserAbortError2, APIConnectionError2, APIConnectionTimeoutError2, BadRequestError2, AuthenticationError2, PermissionDeniedError2, NotFoundError2, ConflictError2, UnprocessableEntityError2, RateLimitError2, InternalServerError2, SDKHooks, hasOwn2, ServerList, SDK_METADATA, encodeForm, encodeSimple, encodeFormQuery, DEFAULT_FETCHER, HTTPClient, mediaParamSeparator, codeRangeRE$1, defaultBackoff, PermanentError, TemporaryError, codeRangeRE, gt, webWorkerLike, isBrowserLike, ClientSDK, jsonLikeContentTypeRE, jsonlLikeContentTypeRE, GoogleGenAiDefaultError, Stream4, CR3, LF3, BOUNDARIES, MAX_BOUNDARY_LEN, DEFAULT_CONTENT_TYPES, headerValRE, SecurityErrorCode, SecurityError, _a3, APIPromise2, Agents2, Environments2, CancelInteractionByIdServerError, CancelInteractionByIdClientError, CreateInteractionServerError, CreateInteractionClientError, DeleteInteractionServerError, DeleteInteractionClientError, GetInteractionByIdServerError, GetInteractionByIdClientError, Interactions, Triggers, Webhooks2, GoogleGenAI$1, LEGACY_LYRIA_MODELS, GeminiNextGenInteractions, GeminiNextGenAgents, GeminiNextGenWebhooks, GeminiNextGenTriggers, GeminiNextGenEnvironments, GOOGLE_API_KEY_HEADER, REQUIRED_VERTEX_AI_SCOPE, NodeAuth, NodeDownloader, NodeWebSocketFactory, NodeWebSocket, Tunings, MAX_CHUNK_SIZE, MAX_RETRY_COUNT, INITIAL_RETRY_DELAY_MS, DELAY_MULTIPLIER, X_GOOG_UPLOAD_STATUS_HEADER_FIELD, NodeUploader, NodeFiles, LANGUAGE_LABEL_PREFIX, GoogleGenAI2;
 var init_node2 = __esm({
   "node_modules/@google/genai/dist/node/index.mjs"() {
     import_p_retry = __toESM(require_p_retry(), 1);
     import_google_auth_library = __toESM(require_src5(), 1);
     import_fs = require("fs");
-    fs19 = __toESM(require("fs/promises"), 1);
+    fs20 = __toESM(require("fs/promises"), 1);
     import_promises4 = require("fs/promises");
     import_node_stream5 = require("node:stream");
     import_promises5 = require("node:stream/promises");
@@ -156581,7 +156581,7 @@ var init_node2 = __esm({
       async stat(file2) {
         const fileStat = { size: 0, type: void 0 };
         if (typeof file2 === "string") {
-          const originalStat = await fs19.stat(file2);
+          const originalStat = await fs20.stat(file2);
           fileStat.size = originalStat.size;
           fileStat.type = this.inferMimeType(file2);
           return fileStat;
@@ -156729,7 +156729,7 @@ var init_node2 = __esm({
         let fileHandle;
         const fileName = path20.basename(file2);
         try {
-          fileHandle = await fs19.open(file2, "r");
+          fileHandle = await fs20.open(file2, "r");
           if (!fileHandle) {
             throw new Error(`Failed to open file`);
           }
@@ -157476,7 +157476,7 @@ var init_source = __esm({
 });
 
 // src/cli.ts
-var fs37 = __toESM(require("fs"));
+var fs38 = __toESM(require("fs"));
 var fsPromises = __toESM(require("fs/promises"));
 var path43 = __toESM(require("path"));
 
@@ -158939,6 +158939,7 @@ function parseNornAgentFile(content, sourcePath) {
   const models = /* @__PURE__ */ new Map();
   const mcpServers = /* @__PURE__ */ new Map();
   const knowledgeBases = /* @__PURE__ */ new Map();
+  const databases = /* @__PURE__ */ new Map();
   const agents = [];
   const errors = [];
   const agentNames = /* @__PURE__ */ new Map();
@@ -158946,8 +158947,10 @@ function parseNornAgentFile(content, sourcePath) {
   let pendingModel;
   let pendingMcp;
   let pendingKnowledge;
+  let pendingDatabase;
   let sawAgent = false;
   let sawMcpDeclaration = false;
+  let sawDatabaseDeclaration = false;
   const reportBareMcpAlias = (mcp) => {
     errors.push(parseError(
       mcp.lineNumber,
@@ -159102,6 +159105,36 @@ end mcp
       sourcePath
     });
   };
+  const finishDatabase = (lineNumber) => {
+    if (!pendingDatabase) {
+      errors.push(parseError(lineNumber, "Unexpected 'end database' without a matching database block.", "agent-database-end-unexpected"));
+      return;
+    }
+    const database = pendingDatabase;
+    pendingDatabase = void 0;
+    for (const required2 of ["adapter", "connectionString"]) {
+      if (!database.values[required2]) {
+        errors.push(parseError(database.lineNumber, `Database '${database.alias}' requires ${required2}.`, `agent-database-${required2}-missing`));
+        database.invalid = true;
+      }
+    }
+    const access2 = database.values.access?.value.toLowerCase() ?? "read";
+    if (access2 !== "read" && access2 !== "full") {
+      errors.push(parseError(database.values.access.lineNumber, `Database '${database.alias}' access must be read or full.`, "agent-database-access-invalid"));
+      database.invalid = true;
+    }
+    if (!database.invalid) {
+      databases.set(database.alias.toLowerCase(), {
+        alias: database.alias,
+        adapter: database.values.adapter.value,
+        connectionStringTemplate: database.values.connectionString.value,
+        access: access2,
+        lineNumber: database.lineNumber,
+        endLineNumber: lineNumber,
+        sourcePath
+      });
+    }
+  };
   const finishModel = (lineNumber) => {
     if (!pendingModel) {
       errors.push(parseError(lineNumber, "Unexpected 'end model' without a matching model block.", "agent-model-end-unexpected"));
@@ -159236,8 +159269,10 @@ end mcp
         ...pending.grantedMcpServers.length > 0 ? { grantedMcpServers: pending.grantedMcpServers } : {},
         callableAgents: pending.callableAgents,
         ...pending.knowledge.length > 0 ? { knowledge: pending.knowledge } : {},
+        ...pending.databases.length > 0 ? { grantedDatabases: pending.databases } : {},
         mcpServers,
         knowledgeBases,
+        databases,
         accepts: pending.accepts,
         returns: pending.returns,
         maxTokens: pending.maxTokens?.value,
@@ -159258,6 +159293,44 @@ end mcp
     const rawLine = lines[index];
     const withoutComment = stripInlineComment(rawLine);
     const trimmed = withoutComment.trim();
+    if (pendingDatabase) {
+      if (!trimmed) {
+        continue;
+      }
+      if (/^end\s+database$/i.test(trimmed)) {
+        finishDatabase(index);
+        continue;
+      }
+      const directive = trimmed.match(/^(adapter|connectionString|access)\s+(.+)$/i);
+      if (directive) {
+        const key = ["adapter", "connectionString", "access"].find((value) => value.toLowerCase() === directive[1].toLowerCase());
+        if (pendingDatabase.values[key]) {
+          errors.push(parseError(index, `Database '${pendingDatabase.alias}' declares ${key} more than once.`, "agent-database-directive-duplicate"));
+          pendingDatabase.invalid = true;
+        } else {
+          pendingDatabase.values[key] = { value: normalizeDirectiveValue(directive[2]), lineNumber: index };
+        }
+        continue;
+      }
+      if (/^command\b/i.test(trimmed)) {
+        errors.push(parseError(
+          index,
+          `Database '${pendingDatabase.alias}' uses a script path in adapter; remove command and set adapter to ./path/to/adapter.js.`,
+          "agent-database-command-removed"
+        ));
+        pendingDatabase.invalid = true;
+        continue;
+      }
+      if (/^(agent|model|mcp|knowledge|database)\b/i.test(trimmed)) {
+        errors.push(parseError(pendingDatabase.lineNumber, `Database '${pendingDatabase.alias}' is missing 'end database'.`, "agent-database-end-missing"));
+        pendingDatabase = void 0;
+        index--;
+        continue;
+      }
+      errors.push(parseError(index, `Unknown directive in database '${pendingDatabase.alias}': '${trimmed}'.`, "agent-database-directive-unknown"));
+      pendingDatabase.invalid = true;
+      continue;
+    }
     if (pendingKnowledge) {
       if (!trimmed) {
         continue;
@@ -159310,7 +159383,7 @@ end mcp
         }
         continue;
       }
-      if (/^(agent|model|mcp|knowledge)\b/i.test(trimmed)) {
+      if (/^(agent|model|mcp|knowledge|database)\b/i.test(trimmed)) {
         errors.push(parseError(
           pendingKnowledge.lineNumber,
           `Knowledge '${pendingKnowledge.alias}' is missing 'end knowledge'.`,
@@ -159408,7 +159481,7 @@ end mcp
       }
       if (/^mcp\b/i.test(trimmed)) {
         errors.push(parseError(index, `Nested mcp blocks are not allowed (inside '${pendingMcp.alias}').`, "agent-mcp-nested"));
-      } else if (/^(agent|model|knowledge)\b/i.test(trimmed)) {
+      } else if (/^(agent|model|knowledge|database)\b/i.test(trimmed)) {
         errors.push(parseError(pendingMcp.lineNumber, `MCP server '${pendingMcp.alias}' is missing 'end mcp'.`, "agent-mcp-unterminated"));
         pendingMcp = void 0;
         index--;
@@ -159459,7 +159532,7 @@ end mcp
       }
       if (/^model\b/i.test(trimmed)) {
         errors.push(parseError(index, `Nested model blocks are not allowed (inside '${pendingModel.alias}').`, "agent-model-nested"));
-      } else if (/^(agent|knowledge)\b/i.test(trimmed)) {
+      } else if (/^(agent|knowledge|database|mcp)\b/i.test(trimmed)) {
         errors.push(parseError(pendingModel.lineNumber, `Model '${pendingModel.alias}' is missing 'end model'.`, "agent-model-end-missing"));
         pendingModel = void 0;
         index--;
@@ -159568,6 +159641,20 @@ end model`,
         };
         continue;
       }
+      const databaseMatch = trimmed.match(new RegExp(`^database\\s+(${IDENTIFIER})$`, "i"));
+      if (databaseMatch) {
+        sawDatabaseDeclaration = true;
+        const alias = databaseMatch[1];
+        const invalid = sawAgent || databases.has(alias.toLowerCase());
+        if (sawAgent) {
+          errors.push(parseError(index, "Database blocks must be declared before the first agent block.", "agent-database-not-at-top"));
+        }
+        if (databases.has(alias.toLowerCase())) {
+          errors.push(parseError(index, `Duplicate database alias '${alias}'.`, "agent-database-duplicate"));
+        }
+        pendingDatabase = { alias, lineNumber: index, values: {}, invalid };
+        continue;
+      }
       if (/^end\s+mcp$/i.test(trimmed)) {
         finishMcp(index);
         continue;
@@ -159576,6 +159663,10 @@ end model`,
         finishKnowledge(index);
         continue;
       }
+      if (/^end\s+database$/i.test(trimmed)) {
+        finishDatabase(index);
+        continue;
+      }
       const agentMatch = trimmed.match(new RegExp(`^agent\\s+(${IDENTIFIER})$`, "i"));
       if (agentMatch) {
         sawAgent = true;
@@ -159595,6 +159686,7 @@ end model`,
           tools: [],
           grantedMcpServers: [],
           knowledge: [],
+          databases: [],
           callableAgents: [],
           invalid
         };
@@ -159610,6 +159702,8 @@ end model`,
         errors.push(parseError(index, "Malformed MCP declaration. Expected: mcp <Alias>, then transport and its directives, then end mcp.", "agent-mcp-malformed"));
       } else if (/^knowledge\b/i.test(trimmed)) {
         errors.push(parseError(index, "Malformed knowledge declaration. Expected: knowledge <Alias>, then source/exclude directives, then end knowledge.", "agent-knowledge-malformed"));
+      } else if (/^database\b/i.test(trimmed)) {
+        errors.push(parseError(index, "Malformed database declaration. Expected: database <Alias>, then adapter/connectionString/access directives, then end database.", "agent-database-malformed"));
       } else if (/^agent\b/i.test(trimmed)) {
         errors.push(parseError(index, "Malformed agent declaration. Expected: agent <Name>.", "agent-declaration-malformed"));
       } else {
@@ -159683,6 +159777,27 @@ end model`,
       }
       continue;
     }
+    const databaseGrantMatch = trimmed.match(/^database(?:\s+(.*))?$/i);
+    if (databaseGrantMatch) {
+      const aliases = (databaseGrantMatch[1] ?? "").split(",").map((value) => value.trim());
+      if (aliases.some((alias) => !new RegExp(`^${IDENTIFIER}$`).test(alias))) {
+        errors.push(parseError(index, `Invalid database grant '${trimmed}'. Expected: database <Alias>[, <Alias>\u2026].`, "agent-database-grant-invalid"));
+        pending.invalid = true;
+        continue;
+      }
+      for (const alias of aliases) {
+        if (pending.databases.some((grant) => grant.alias.toLowerCase() === alias.toLowerCase())) {
+          errors.push(parseError(index, `Agent '${pending.name}' grants database '${alias}' more than once.`, "agent-database-grant-duplicate"));
+          pending.invalid = true;
+        } else if (!databases.has(alias.toLowerCase())) {
+          errors.push(parseError(index, `Unknown database alias '${alias}' in agent '${pending.name}'.`, "agent-database-alias-unknown"));
+          pending.invalid = true;
+        } else {
+          pending.databases.push({ alias, lineNumber: index });
+        }
+      }
+      continue;
+    }
     const returnsMatch = trimmed.match(/^returns\s+(.+)$/i);
     if (returnsMatch) {
       if (pending.returns) {
@@ -159881,7 +159996,7 @@ end model`,
       errors.push(parseError(index, 'Malformed describe block. Expected: describe "..." (multi-line allowed) or describe file <path>.', "agent-describe-malformed"));
     } else if (/^system\b/i.test(trimmed)) {
       errors.push(parseError(index, 'Malformed system prompt. Expected: system "..." (multi-line allowed) or system file <path>.', "agent-system-malformed"));
-    } else if (new RegExp(`^(accepts|returns|tools|agents|model|knowledge|${Object.keys(LIMIT_DIRECTIVES).join("|")})\\b`, "i").test(trimmed)) {
+    } else if (new RegExp(`^(accepts|returns|tools|agents|model|knowledge|database|${Object.keys(LIMIT_DIRECTIVES).join("|")})\\b`, "i").test(trimmed)) {
       errors.push(parseError(index, `Malformed agent directive: '${trimmed}'.`, "agent-directive-malformed"));
     } else if (/^agent\b/i.test(trimmed)) {
       errors.push(parseError(index, `Nested agent blocks are not allowed (inside '${pending.name}').`, "agent-nested"));
@@ -159910,10 +160025,13 @@ end model`,
       "agent-knowledge-end-missing"
     ));
   }
-  if (!sawMcpDeclaration && models.size === 0) {
+  if (pendingDatabase) {
+    errors.push(parseError(pendingDatabase.lineNumber, `Database '${pendingDatabase.alias}' is missing 'end database'.`, "agent-database-end-missing"));
+  }
+  if (!sawMcpDeclaration && !sawDatabaseDeclaration && models.size === 0) {
     errors.push(parseError(0, "An agent sidecar must declare at least one model block.", "agent-model-required"));
   }
-  if (!sawMcpDeclaration && agentNames.size === 0) {
+  if (!sawMcpDeclaration && !sawDatabaseDeclaration && agentNames.size === 0) {
     errors.push(parseError(0, "An agent sidecar must declare at least one agent.", "agent-required"));
   }
   const localScope = new Map(agents.map((agent) => [agent.name.toLowerCase(), agent]));
@@ -159921,7 +160039,7 @@ end model`,
     const { sourcePath: _sourcePath, ...parseValidationError } = validationError;
     errors.push(parseValidationError);
   }
-  return { sourcePath, models, mcpServers, knowledgeBases, agents, errors };
+  return { sourcePath, models, mcpServers, knowledgeBases, databases, agents, errors };
 }
 
 // src/nornConfig.ts
@@ -160107,7 +160225,7 @@ function isNornProjectConfig(value) {
   if (value.version !== 1) {
     return false;
   }
-  return isNornHttpConfig(value.http) && isKnownSection(value.sql) && isKnownSection(value.mcp) && isNornContractsConfig(value.contracts) && isNornAgentsConfig(value.agents) && isNornKnowledgeConfig(value.knowledge);
+  return value.sql === void 0 && isNornHttpConfig(value.http) && isKnownSection(value.mcp) && isNornContractsConfig(value.contracts) && isNornAgentsConfig(value.agents) && isNornKnowledgeConfig(value.knowledge);
 }
 function loadNornConfig(startPath) {
   const filePath = findNearestConfigFile(startPath, NORN_CONFIG_FILENAME);
@@ -160485,6 +160603,7 @@ async function resolveImports(text, baseDir, readFile4, alreadyImported = /* @__
   const endpointSources = /* @__PURE__ */ new Map();
   const namedRequestSources = /* @__PURE__ */ new Map();
   const sequenceSources = /* @__PURE__ */ new Map();
+  const directDatabases = /* @__PURE__ */ new Map();
   if (!sqlOperationsBySource.has(sourceFilePath)) {
     sqlOperationsBySource.set(sourceFilePath, /* @__PURE__ */ new Map());
   }
@@ -160572,6 +160691,18 @@ async function resolveImports(text, baseDir, readFile4, alreadyImported = /* @__
             blocking: true
           });
         }
+        for (const [alias, database] of parsedAgents.databases) {
+          if (directDatabases.has(alias)) {
+            errors.push({
+              path: imp.path,
+              error: `Database '${database.alias}' is declared by more than one directly imported sidecar.`,
+              lineNumber: imp.lineNumber,
+              blocking: true
+            });
+          } else {
+            directDatabases.set(alias, database);
+          }
+        }
         const mcpScope = mcpServersBySource.get(sourceFilePath);
         for (const [alias, declaration] of parsedAgents.mcpServers) {
           const existing = mcpScope.get(alias);
@@ -160758,6 +160889,9 @@ end sequence`);
     }
   }
   const directAgentScope = agentDefinitionsBySource.get(sourceFilePath);
+  for (const operation of sqlOperationsBySource.get(sourceFilePath).values()) {
+    operation.database = directDatabases.get(operation.connectionName.toLowerCase());
+  }
   const directAgentImportsByPath = new Map(
     imports.filter((imp) => isAgentSidecarPath(imp.path)).map((imp) => [path4.resolve(baseDir, imp.path), imp])
   );
@@ -168223,6 +168357,7 @@ function validatePreparedRequest(parsed, context) {
 
 // src/sqlConfig.ts
 var path9 = __toESM(require("path"));
+var fs11 = __toESM(require("fs"));
 
 // src/sqlBuiltInAdapters.ts
 var fs10 = __toESM(require("fs"));
@@ -168291,7 +168426,7 @@ function usesWindowsIntegratedSqlServerAuth(connectionString) {
   return /(?:^|;)\s*Integrated\s+Security\s*=\s*(?:true|yes|sspi)\s*(?:;|$)/i.test(connectionString) || /(?:^|;)\s*Trusted_Connection\s*=\s*(?:true|yes|sspi)\s*(?:;|$)/i.test(connectionString);
 }
 function buildMissingConnectionError(adapterLabel, profile) {
-  return `Missing required ${adapterLabel} connection string. Expected 'connectionString ${profile} = ...' in .nornenv.`;
+  return `Missing required ${adapterLabel} connection string for database '${profile}'. Declare connectionString in its .nornai database block.`;
 }
 function getBundledSqlClientDirectory() {
   return path8.resolve(__dirname, "..", "vendor", "microsoft.data.sqlclient", "windows-netfx");
@@ -168676,6 +168811,9 @@ async function runBuiltInPostgresAdapter(request) {
   const client = new Client(connectionString);
   try {
     await client.connect();
+    if (request.readOnly) {
+      await client.query("BEGIN READ ONLY");
+    }
     const compiled = compilePostgresSql(request.operation.sql, request.params || {});
     const result = await client.query(compiled.text, compiled.values);
     if (request.mode === "query") {
@@ -168708,7 +168846,7 @@ async function runBuiltInSqlServerAdapter(request) {
     fail(buildMissingConnectionError("SQL Server", request.connection.profile));
   }
   if (usesWindowsIntegratedSqlServerAuth(connectionString)) {
-    fail("This SQL Server connection string uses Windows/Integrated authentication. Use adapter 'sqlserver-windows' in norn.config.json sql.connections.");
+    fail("This SQL Server connection string uses Windows/Integrated authentication. Use adapter 'sqlserver-windows' in the .nornai database block.");
   }
   const pool = new mssql.ConnectionPool(connectionString);
   try {
@@ -168768,6 +168906,9 @@ async function runBuiltInSqlServerIntegratedAdapter(request) {
 function isBuiltInSqlAdapter(adapterId) {
   return BUILT_IN_SQL_ADAPTER_MAP.has(adapterId.toLowerCase());
 }
+function getBuiltInSqlAdapterIds() {
+  return BUILT_IN_SQL_ADAPTERS.map((adapter2) => adapter2.id);
+}
 async function runBuiltInSqlAdapter(adapterId, request) {
   switch (adapterId.toLowerCase()) {
     case "postgres":
@@ -168782,107 +168923,66 @@ async function runBuiltInSqlAdapter(adapterId, request) {
 }
 
 // src/sqlConfig.ts
-function isConnectionsConfig(value) {
-  return isObjectRecord(value) && Object.values(value).every(
-    (connection) => isStringRecord(connection) && typeof connection.adapter === "string" && typeof connection.profile === "string"
-  );
-}
-function isAdaptersConfig(value) {
-  return isObjectRecord(value) && Object.values(value).every((adapter2) => {
-    if (!isObjectRecord(adapter2)) {
-      return false;
-    }
-    const command = adapter2.command;
-    return Array.isArray(command) && command.length > 0 && command.every((part) => typeof part === "string" && part.length > 0);
-  });
-}
-function isSqlConfigSection(value) {
-  if (!isObjectRecord(value)) {
-    return false;
-  }
-  if (value.connections !== void 0 && !isConnectionsConfig(value.connections)) {
-    return false;
-  }
-  if (value.adapters !== void 0 && !isAdaptersConfig(value.adapters)) {
-    return false;
-  }
-  return true;
-}
-function loadSqlConfigSection(startPath) {
-  const { filePath, section } = loadNornConfigSection(startPath, "sql", isSqlConfigSection);
-  return {
-    filePath,
-    config: section
-  };
-}
 function loadNornSqlProjectConfig(startPath) {
-  const { filePath, config: config2 } = loadSqlConfigSection(startPath);
-  if (!config2.connections) {
-    throw new Error(`Could not find sql.connections in ${NORN_CONFIG_FILENAME}`);
-  }
-  return {
-    filePath,
-    config: {
-      version: 1,
-      connections: config2.connections
+  const filePath = path9.resolve(startPath);
+  if (!filePath.endsWith(".norn") || !fs11.existsSync(filePath)) {
+    throw new Error("Database connections are declared in a .nornai file imported by a .norn file.");
+  }
+  const connections = {};
+  const content = fs11.readFileSync(filePath, "utf8");
+  const imports = [...content.matchAll(/^\s*import\s+["']([^"']+)["']/gm)];
+  for (const match2 of imports) {
+    if (!isAgentSidecarPath(match2[1])) {
+      continue;
+    }
+    const sidecarPath = path9.resolve(path9.dirname(filePath), match2[1]);
+    const parsed = parseNornAgentFile(fs11.readFileSync(sidecarPath, "utf8"), sidecarPath);
+    const databaseErrors = parsed.errors.filter((error2) => error2.code.startsWith("agent-database-"));
+    if (databaseErrors.length) {
+      throw new Error(databaseErrors.map((error2) => `${path9.basename(sidecarPath)}:${error2.lineNumber + 1}: ${error2.message}`).join("\n"));
+    }
+    for (const database of parsed.databases.values()) {
+      if (Object.keys(connections).some((alias) => alias.toLowerCase() === database.alias.toLowerCase())) {
+        throw new Error(`Database '${database.alias}' is declared by more than one imported sidecar.`);
+      }
+      connections[database.alias] = {
+        adapter: database.adapter,
+        profile: database.alias,
+        connectionStringTemplate: database.connectionStringTemplate,
+        sourcePath: database.sourcePath,
+        access: database.access
+      };
     }
-  };
-}
-function loadNornSqlAdaptersConfig(startPath) {
-  const { filePath, config: config2 } = loadSqlConfigSection(startPath);
-  if (!config2.adapters) {
-    throw new Error(`Could not find sql.adapters in ${NORN_CONFIG_FILENAME}`);
   }
   return {
     filePath,
     config: {
       version: 1,
-      adapters: config2.adapters
+      connections
     }
   };
 }
 function resolveSqlConnection(startPath, alias) {
   const { filePath, config: config2 } = loadNornSqlProjectConfig(startPath);
-  const connection = config2.connections[alias];
+  const connection = Object.entries(config2.connections).find(([name]) => name.toLowerCase() === alias.toLowerCase())?.[1];
   if (!connection) {
-    throw new Error(`Connection alias '${alias}' was not found in ${NORN_CONFIG_FILENAME} sql.connections`);
+    throw new Error(`Database '${alias}' was not declared in a directly imported .nornai file.`);
   }
   return {
     alias,
     adapter: connection.adapter,
     profile: connection.profile,
-    configPath: filePath
+    configPath: filePath,
+    connectionStringTemplate: connection.connectionStringTemplate,
+    sourcePath: connection.sourcePath,
+    access: connection.access
   };
 }
-function resolveCommandParts(configPath, command) {
-  const configDir = path9.dirname(configPath);
-  return command.map((part, index) => {
-    if (!part) {
-      return part;
-    }
-    if (index === 0) {
-      if (path9.isAbsolute(part) || !part.startsWith(".") && !part.includes(path9.sep) && !part.includes("/")) {
-        return part;
-      }
-      return path9.resolve(configDir, part);
-    }
-    if (part.startsWith(".")) {
-      return path9.resolve(configDir, part);
-    }
-    return part;
-  });
-}
-function resolveSqlAdapterCommand(startPath, adapterId) {
-  const { filePath, config: config2 } = loadNornSqlAdaptersConfig(startPath);
-  const adapter2 = config2.adapters[adapterId];
-  if (!adapter2) {
-    throw new Error(`Adapter '${adapterId}' was not found in ${NORN_CONFIG_FILENAME} sql.adapters`);
+function customAdapterPath(sourcePath, adapterId) {
+  if (!path9.isAbsolute(adapterId) && !/^\.{1,2}[\\/]/.test(adapterId)) {
+    return void 0;
   }
-  return {
-    adapterId,
-    command: resolveCommandParts(filePath, adapter2.command),
-    configPath: filePath
-  };
+  return path9.resolve(path9.dirname(sourcePath), adapterId);
 }
 function resolveSqlAdapterTarget(startPath, adapterId) {
   if (isBuiltInSqlAdapter(adapterId)) {
@@ -168891,14 +168991,36 @@ function resolveSqlAdapterTarget(startPath, adapterId) {
       adapterId
     };
   }
-  const resolved = resolveSqlAdapterCommand(startPath, adapterId);
+  const validation = validateSqlAdapterReference(startPath, adapterId);
+  if (!validation.ok) {
+    throw new Error(validation.message);
+  }
+  const filePath = customAdapterPath(startPath, adapterId);
+  const extension2 = path9.extname(filePath).toLowerCase();
+  const command = [".js", ".cjs", ".mjs"].includes(extension2) ? [process.execPath, filePath] : [filePath];
   return {
     kind: "custom",
-    adapterId: resolved.adapterId,
-    command: resolved.command,
-    configPath: resolved.configPath
+    adapterId,
+    command,
+    configPath: startPath
   };
 }
+function validateSqlAdapterReference(startPath, adapterId) {
+  if (isBuiltInSqlAdapter(adapterId)) {
+    return { ok: true, kind: "builtin" };
+  }
+  const filePath = customAdapterPath(startPath, adapterId);
+  if (!filePath) {
+    return { ok: false, message: `Adapter '${adapterId}' is not built in. Use a relative file path such as ./scripts/adapter.js, or ${getBuiltInSqlAdapterIds().join(", ")}.` };
+  }
+  try {
+    if (fs11.statSync(filePath).isFile()) {
+      return { ok: true, kind: "custom" };
+    }
+  } catch {
+  }
+  return { ok: false, message: `Database adapter file '${adapterId}' does not exist relative to '${path9.basename(startPath)}'.` };
+}
 
 // src/sqlAdapterRunner.ts
 var import_child_process3 = require("child_process");
@@ -169041,8 +169163,262 @@ async function runSqlAdapter(target, request, workingDir, signal) {
   return runExternalSqlAdapter(target.command, request, workingDir, signal);
 }
 
+// src/environmentTemplates.ts
+var TEMPLATE_TOKEN_REGEX = /\{\{([^{}]+)\}\}/g;
+var ENV_REFERENCE_REGEX = /^(?:\$env\.)?([a-zA-Z_][a-zA-Z0-9_]*)$/;
+var ENV_TEMPLATE_SCOPES_KEY = "$nornEnvTemplateScopes";
+function attachEnvironmentTemplateScopes(variables, commonVariables, environmentVariables) {
+  Object.defineProperty(variables, ENV_TEMPLATE_SCOPES_KEY, {
+    value: {
+      commonNames: new Set(Object.keys(commonVariables)),
+      environmentNames: new Set(Object.keys(environmentVariables ?? {}))
+    },
+    enumerable: false,
+    configurable: true,
+    writable: false
+  });
+  return variables;
+}
+function getEnvironmentTemplateScopes(variables) {
+  const value = variables[ENV_TEMPLATE_SCOPES_KEY];
+  if (!value || typeof value !== "object") {
+    return void 0;
+  }
+  const candidate = value;
+  if (!(candidate.commonNames instanceof Set) || !(candidate.environmentNames instanceof Set)) {
+    return void 0;
+  }
+  return candidate;
+}
+function valueToTemplateString(value) {
+  if (value === void 0 || value === null) {
+    return "";
+  }
+  if (typeof value === "object") {
+    return JSON.stringify(value);
+  }
+  return String(value);
+}
+function parseTemplateReference(rawReference) {
+  const trimmed = rawReference.trim();
+  const match2 = trimmed.match(ENV_REFERENCE_REGEX);
+  return match2?.[1];
+}
+function resolveEnvironmentTemplateValue(variableName, variables, secretNames = /* @__PURE__ */ new Set()) {
+  const resolving = /* @__PURE__ */ new Set();
+  const cache = /* @__PURE__ */ new Map();
+  const scopes = getEnvironmentTemplateScopes(variables);
+  const resolveVariable = (name) => {
+    const cached2 = cache.get(name);
+    if (cached2) {
+      return cached2;
+    }
+    if (resolving.has(name)) {
+      const cycle = [...resolving, name].join(" -> ");
+      return {
+        value: `{{${name}}}`,
+        secret: secretNames.has(name),
+        dependencies: /* @__PURE__ */ new Set([name]),
+        errors: [{
+          kind: "cycle",
+          variableName: name,
+          reference: name,
+          message: `Circular .nornenv template reference detected: ${cycle}`
+        }]
+      };
+    }
+    if (!Object.prototype.hasOwnProperty.call(variables, name)) {
+      return {
+        value: `{{${name}}}`,
+        secret: false,
+        dependencies: /* @__PURE__ */ new Set([name]),
+        errors: [{
+          kind: "unresolved",
+          variableName: name,
+          reference: name,
+          message: `.nornenv template reference '${name}' was not found in the active environment.`
+        }]
+      };
+    }
+    resolving.add(name);
+    const rawValue = valueToTemplateString(variables[name]);
+    const dependencies = /* @__PURE__ */ new Set();
+    const errors = [];
+    let secret = secretNames.has(name);
+    const value = rawValue.replace(TEMPLATE_TOKEN_REGEX, (token, rawReference) => {
+      const referenceName = parseTemplateReference(rawReference);
+      if (!referenceName) {
+        errors.push({
+          kind: "unsupported",
+          variableName: name,
+          reference: rawReference.trim(),
+          message: `.nornenv template reference '${rawReference.trim()}' is not supported. Use {{name}} or {{$env.name}}.`
+        });
+        return token;
+      }
+      const resolved = resolveVariable(referenceName);
+      dependencies.add(referenceName);
+      for (const dependency of resolved.dependencies) {
+        dependencies.add(dependency);
+      }
+      if (scopes?.environmentNames.has(name) && scopes.environmentNames.has(referenceName)) {
+        errors.push({
+          kind: "scope",
+          variableName: name,
+          reference: referenceName,
+          message: `.nornenv template reference '${referenceName}' is not in scope. Values inside [env:...] sections can reference common variables and inherited ancestor variables only.`
+        });
+      }
+      if (resolved.secret) {
+        secret = true;
+      }
+      errors.push(...resolved.errors);
+      return resolved.value;
+    });
+    resolving.delete(name);
+    const resolution = {
+      value,
+      secret,
+      dependencies,
+      errors
+    };
+    cache.set(name, resolution);
+    return resolution;
+  };
+  return resolveVariable(variableName);
+}
+function collectResolvedEnvironmentSecretValues(variables, secretNames) {
+  const values = /* @__PURE__ */ new Map();
+  for (const name of secretNames) {
+    if (!Object.prototype.hasOwnProperty.call(variables, name)) {
+      continue;
+    }
+    const resolved = resolveEnvironmentTemplateValue(name, variables, secretNames);
+    if (resolved.errors.length === 0) {
+      values.set(name, resolved.value);
+    }
+  }
+  return values;
+}
+
+// src/agents/databaseTools.ts
+function resolveDatabaseConnectionTemplate(alias, template, runtimeVariables) {
+  const environment = runtimeVariables.$env;
+  const scoped = { ...runtimeVariables, $env: { ...environment } };
+  for (const match2 of template.matchAll(/\{\{(?:\$env\.)?([A-Za-z_][A-Za-z0-9_]*)\}\}/g)) {
+    const name = match2[1];
+    if (environment && name in environment) {
+      const resolved = resolveEnvironmentTemplateValue(name, environment);
+      if (resolved.errors.length) {
+        throw new Error(`Database '${alias}' could not resolve environment value '${name}': ${resolved.errors[0].message}`);
+      }
+      scoped.$env[name] = resolved.value;
+      if (name in runtimeVariables) {
+        scoped[name] = resolved.value;
+      }
+    }
+  }
+  const value = substituteVariables(template, scoped).replace(/\{\{\$env\.([A-Za-z_][A-Za-z0-9_]*)\}\}/g, (match2, name) => process.env[name] || match2);
+  if (!value || /\{\{[^}]+\}\}/.test(value)) {
+    throw new Error(`Database '${alias}' has an unresolved connectionString reference.`);
+  }
+  return value;
+}
+function resolveDatabaseConnectionString(database, runtimeVariables) {
+  return resolveDatabaseConnectionTemplate(database.alias, database.connectionStringTemplate, runtimeVariables);
+}
+function assertReadOnlySql(sql) {
+  let visible = "";
+  for (let index = 0; index < sql.length; ) {
+    const char = sql[index];
+    const next = sql[index + 1];
+    if (char === "-" && next === "-") {
+      const end = sql.indexOf("\n", index + 2);
+      index = end < 0 ? sql.length : end;
+      visible += " ";
+      continue;
+    }
+    if (char === "/" && next === "*") {
+      const end = sql.indexOf("*/", index + 2);
+      if (end < 0) {
+        throw new Error("Read-only SQL has an unterminated comment.");
+      }
+      index = end + 2;
+      visible += " ";
+      continue;
+    }
+    const quote = char === "'" || char === '"' ? char : void 0;
+    const dollar = char === "$" ? sql.slice(index).match(/^\$[A-Za-z_0-9]*\$/)?.[0] : void 0;
+    if (quote || dollar) {
+      const delimiter2 = quote || dollar;
+      index += delimiter2.length;
+      let closed = false;
+      while (index < sql.length) {
+        if (sql.startsWith(delimiter2, index)) {
+          index += delimiter2.length;
+          if (quote && sql.startsWith(delimiter2, index)) {
+            index += delimiter2.length;
+          } else {
+            closed = true;
+            break;
+          }
+        } else {
+          index++;
+        }
+      }
+      if (!closed) {
+        throw new Error("Read-only SQL has an unterminated string.");
+      }
+      visible += " ";
+      continue;
+    }
+    visible += char;
+    index++;
+  }
+  const statement = visible.trim().replace(/;\s*$/, "").trim();
+  if (!/^select\b/i.test(statement) || statement.includes(";") || /\binto\b|\bfor\s+update\b/i.test(statement)) {
+    throw new Error("This database grants read access only. Use one SELECT statement without INTO or FOR UPDATE.");
+  }
+}
+var SCHEMA_SQL = `SELECT table_schema, table_name, column_name, data_type, is_nullable, ordinal_position
+FROM information_schema.columns
+WHERE table_schema NOT IN ('information_schema', 'pg_catalog')
+ORDER BY table_schema, table_name, ordinal_position`;
+async function executeDatabaseTool(database, operation, input2, runtimeVariables, workingDir, signal) {
+  const sql = operation === "inspect" ? SCHEMA_SQL : input2.sql;
+  if (typeof sql !== "string" || !sql.trim()) {
+    throw new Error("Database query requires a nonempty sql string.");
+  }
+  if (database.access === "read" || operation === "inspect") {
+    assertReadOnlySql(sql);
+  }
+  const mode = operation === "inspect" || /^\s*(select|with|show|explain)\b/i.test(sql) ? "query" : "command";
+  const request = {
+    protocolVersion: 1,
+    mode,
+    operation: {
+      name: operation === "inspect" ? "inspect_database" : "query_database",
+      type: mode,
+      sql,
+      parameters: [],
+      connectionName: database.alias,
+      sourcePath: database.sourcePath
+    },
+    params: {},
+    connection: {
+      name: database.alias,
+      profile: database.alias,
+      values: { connectionString: resolveDatabaseConnectionString(database, runtimeVariables) }
+    },
+    context: { workingDir },
+    readOnly: database.access === "read" || operation === "inspect"
+  };
+  const result = await runSqlAdapter(resolveSqlAdapterTarget(database.sourcePath, database.adapter), request, workingDir, signal);
+  return result.result;
+}
+
 // src/mcpClient.ts
-var fs12 = __toESM(require("fs"));
+var fs13 = __toESM(require("fs"));
 var path13 = __toESM(require("path"));
 
 // node_modules/zod/v3/helpers/util.js
@@ -184854,7 +185230,7 @@ function splitCommandLine(value) {
   }
   return parts;
 }
-function resolveCommandParts2(originPath, command, envVariables) {
+function resolveCommandParts(originPath, command, envVariables) {
   const configDir = path10.dirname(originPath);
   return command.map((part, index) => {
     const resolvedPart = resolveTemplateString(part, envVariables);
@@ -184900,7 +185276,7 @@ function resolveServerConfig(filePath, config2, envVariables) {
   if (config2.transport === "stdio") {
     return {
       transport: "stdio",
-      command: resolveCommandParts2(filePath, config2.command, envVariables),
+      command: resolveCommandParts(filePath, config2.command, envVariables),
       cwd: resolveRelativeDirectory(filePath, config2.cwd, envVariables)
     };
   }
@@ -184997,7 +185373,7 @@ function resolveMcpServerDeclaration(declaration, envVariables) {
       transport: "stdio",
       // Reuse the config path's own resolution so a bare name stays a PATH lookup and a
       // relative one resolves against the declaring file — here, the sidecar.
-      command: resolveCommandParts2(declaration.sourcePath, command),
+      command: resolveCommandParts(declaration.sourcePath, command),
       cwd: resolveRelativeDirectory(
         declaration.sourcePath,
         declaration.cwdTemplate === void 0 ? void 0 : resolveTemplate(declaration.cwdTemplate, declaration, "cwd", envVariables)
@@ -185062,7 +185438,7 @@ function resolveMcpTarget(alias, options) {
 var path12 = __toESM(require("path"));
 
 // src/cacheDir.ts
-var fs11 = __toESM(require("fs"));
+var fs12 = __toESM(require("fs"));
 var path11 = __toESM(require("path"));
 var NORN_CACHE_DIR = ".norn-cache";
 var CACHE_GITIGNORE_FILE = ".gitignore";
@@ -185071,7 +185447,7 @@ var PROJECT_ROOT_MARKERS = [".git", "package.json", "pnpm-workspace.yaml", "pack
 function getSearchStartDirectory(targetPath) {
   const resolvedPath = path11.resolve(targetPath);
   try {
-    const stats = fs11.statSync(resolvedPath);
+    const stats = fs12.statSync(resolvedPath);
     return stats.isDirectory() ? resolvedPath : path11.dirname(resolvedPath);
   } catch {
     return path11.dirname(resolvedPath);
@@ -185081,7 +185457,7 @@ function findProjectRoot(targetPath) {
   let dir = getSearchStartDirectory(targetPath);
   let projectRoot;
   while (true) {
-    if (PROJECT_ROOT_MARKERS.some((marker) => fs11.existsSync(path11.join(dir, marker)))) {
+    if (PROJECT_ROOT_MARKERS.some((marker) => fs12.existsSync(path11.join(dir, marker)))) {
       projectRoot = dir;
     }
     const parent = path11.dirname(dir);
@@ -185095,19 +185471,19 @@ function findProjectRoot(targetPath) {
 function ensureNornCacheGitignore(cacheDir) {
   const gitignorePath = path11.join(cacheDir, CACHE_GITIGNORE_FILE);
   try {
-    const hasDesiredContent = fs11.existsSync(gitignorePath) && fs11.readFileSync(gitignorePath, "utf8") === CACHE_GITIGNORE_CONTENT;
+    const hasDesiredContent = fs12.existsSync(gitignorePath) && fs12.readFileSync(gitignorePath, "utf8") === CACHE_GITIGNORE_CONTENT;
     if (hasDesiredContent) {
       return;
     }
-    fs11.writeFileSync(gitignorePath, CACHE_GITIGNORE_CONTENT, "utf8");
+    fs12.writeFileSync(gitignorePath, CACHE_GITIGNORE_CONTENT, "utf8");
   } catch {
   }
 }
 function ensureNornCacheDir(rootPath) {
   const cacheDir = path11.join(rootPath, NORN_CACHE_DIR);
   try {
-    if (!fs11.existsSync(cacheDir)) {
-      fs11.mkdirSync(cacheDir, { recursive: true });
+    if (!fs12.existsSync(cacheDir)) {
+      fs12.mkdirSync(cacheDir, { recursive: true });
     }
     ensureNornCacheGitignore(cacheDir);
     return cacheDir;
@@ -185119,11 +185495,11 @@ function getNornCacheFilePath(rootPath, fileName) {
   return path11.join(rootPath, NORN_CACHE_DIR, fileName);
 }
 function loadVersionedJsonCache(options) {
-  if (!options.cachePath || !fs11.existsSync(options.cachePath)) {
+  if (!options.cachePath || !fs12.existsSync(options.cachePath)) {
     return options.createDefault();
   }
   try {
-    const content = fs11.readFileSync(options.cachePath, "utf-8");
+    const content = fs12.readFileSync(options.cachePath, "utf-8");
     const parsed = JSON.parse(content);
     if (parsed.version !== options.version) {
       return options.createDefault();
@@ -185141,7 +185517,7 @@ function saveVersionedJsonCache(cachePath, cache, ensureDirectory) {
     return false;
   }
   try {
-    fs11.writeFileSync(cachePath, JSON.stringify(cache, null, 2), "utf-8");
+    fs12.writeFileSync(cachePath, JSON.stringify(cache, null, 2), "utf-8");
     return true;
   } catch {
     return false;
@@ -185224,7 +185600,7 @@ var NornJsonSchemaValidator = class {
 function getNornClientVersion() {
   try {
     const packageJsonPath = path13.resolve(__dirname, "..", "package.json");
-    const packageJson = JSON.parse(fs12.readFileSync(packageJsonPath, "utf-8"));
+    const packageJson = JSON.parse(fs13.readFileSync(packageJsonPath, "utf-8"));
     return typeof packageJson.version === "string" ? packageJson.version : "0.0.0";
   } catch {
     return "0.0.0";
@@ -185631,7 +186007,7 @@ function prepareRequestFromContent(requestContent, variables, apiDefinitions) {
 }
 
 // src/contracts/contractMode.ts
-var fs13 = __toESM(require("fs"));
+var fs14 = __toESM(require("fs"));
 var path14 = __toESM(require("path"));
 
 // src/swaggerParser.ts
@@ -185887,7 +186263,7 @@ function isContractModeEnabled(startPath) {
     return false;
   }
   try {
-    const config2 = JSON.parse(fs13.readFileSync(configPath, "utf-8"));
+    const config2 = JSON.parse(fs14.readFileSync(configPath, "utf-8"));
     return config2?.contracts?.mode === "auto";
   } catch {
     return false;
@@ -185895,11 +186271,11 @@ function isContractModeEnabled(startPath) {
 }
 function readManifestFiles(contractsDir) {
   const manifestPath = path14.join(contractsDir, MANIFEST_FILENAME);
-  if (!fs13.existsSync(manifestPath)) {
+  if (!fs14.existsSync(manifestPath)) {
     return void 0;
   }
   try {
-    const parsed = JSON.parse(fs13.readFileSync(manifestPath, "utf-8"));
+    const parsed = JSON.parse(fs14.readFileSync(manifestPath, "utf-8"));
     return Array.isArray(parsed?.files) ? parsed.files.filter((f3) => typeof f3 === "string") : void 0;
   } catch {
     return void 0;
@@ -185935,144 +186311,6 @@ function validateResponseContract(endpoint, statusCode, body, leftExpression) {
   };
 }
 
-// src/environmentTemplates.ts
-var TEMPLATE_TOKEN_REGEX = /\{\{([^{}]+)\}\}/g;
-var ENV_REFERENCE_REGEX = /^(?:\$env\.)?([a-zA-Z_][a-zA-Z0-9_]*)$/;
-var ENV_TEMPLATE_SCOPES_KEY = "$nornEnvTemplateScopes";
-function attachEnvironmentTemplateScopes(variables, commonVariables, environmentVariables) {
-  Object.defineProperty(variables, ENV_TEMPLATE_SCOPES_KEY, {
-    value: {
-      commonNames: new Set(Object.keys(commonVariables)),
-      environmentNames: new Set(Object.keys(environmentVariables ?? {}))
-    },
-    enumerable: false,
-    configurable: true,
-    writable: false
-  });
-  return variables;
-}
-function getEnvironmentTemplateScopes(variables) {
-  const value = variables[ENV_TEMPLATE_SCOPES_KEY];
-  if (!value || typeof value !== "object") {
-    return void 0;
-  }
-  const candidate = value;
-  if (!(candidate.commonNames instanceof Set) || !(candidate.environmentNames instanceof Set)) {
-    return void 0;
-  }
-  return candidate;
-}
-function valueToTemplateString(value) {
-  if (value === void 0 || value === null) {
-    return "";
-  }
-  if (typeof value === "object") {
-    return JSON.stringify(value);
-  }
-  return String(value);
-}
-function parseTemplateReference(rawReference) {
-  const trimmed = rawReference.trim();
-  const match2 = trimmed.match(ENV_REFERENCE_REGEX);
-  return match2?.[1];
-}
-function resolveEnvironmentTemplateValue(variableName, variables, secretNames = /* @__PURE__ */ new Set()) {
-  const resolving = /* @__PURE__ */ new Set();
-  const cache = /* @__PURE__ */ new Map();
-  const scopes = getEnvironmentTemplateScopes(variables);
-  const resolveVariable = (name) => {
-    const cached2 = cache.get(name);
-    if (cached2) {
-      return cached2;
-    }
-    if (resolving.has(name)) {
-      const cycle = [...resolving, name].join(" -> ");
-      return {
-        value: `{{${name}}}`,
-        secret: secretNames.has(name),
-        dependencies: /* @__PURE__ */ new Set([name]),
-        errors: [{
-          kind: "cycle",
-          variableName: name,
-          reference: name,
-          message: `Circular .nornenv template reference detected: ${cycle}`
-        }]
-      };
-    }
-    if (!Object.prototype.hasOwnProperty.call(variables, name)) {
-      return {
-        value: `{{${name}}}`,
-        secret: false,
-        dependencies: /* @__PURE__ */ new Set([name]),
-        errors: [{
-          kind: "unresolved",
-          variableName: name,
-          reference: name,
-          message: `.nornenv template reference '${name}' was not found in the active environment.`
-        }]
-      };
-    }
-    resolving.add(name);
-    const rawValue = valueToTemplateString(variables[name]);
-    const dependencies = /* @__PURE__ */ new Set();
-    const errors = [];
-    let secret = secretNames.has(name);
-    const value = rawValue.replace(TEMPLATE_TOKEN_REGEX, (token, rawReference) => {
-      const referenceName = parseTemplateReference(rawReference);
-      if (!referenceName) {
-        errors.push({
-          kind: "unsupported",
-          variableName: name,
-          reference: rawReference.trim(),
-          message: `.nornenv template reference '${rawReference.trim()}' is not supported. Use {{name}} or {{$env.name}}.`
-        });
-        return token;
-      }
-      const resolved = resolveVariable(referenceName);
-      dependencies.add(referenceName);
-      for (const dependency of resolved.dependencies) {
-        dependencies.add(dependency);
-      }
-      if (scopes?.environmentNames.has(name) && scopes.environmentNames.has(referenceName)) {
-        errors.push({
-          kind: "scope",
-          variableName: name,
-          reference: referenceName,
-          message: `.nornenv template reference '${referenceName}' is not in scope. Values inside [env:...] sections can reference common variables and inherited ancestor variables only.`
-        });
-      }
-      if (resolved.secret) {
-        secret = true;
-      }
-      errors.push(...resolved.errors);
-      return resolved.value;
-    });
-    resolving.delete(name);
-    const resolution = {
-      value,
-      secret,
-      dependencies,
-      errors
-    };
-    cache.set(name, resolution);
-    return resolution;
-  };
-  return resolveVariable(variableName);
-}
-function collectResolvedEnvironmentSecretValues(variables, secretNames) {
-  const values = /* @__PURE__ */ new Map();
-  for (const name of secretNames) {
-    if (!Object.prototype.hasOwnProperty.call(variables, name)) {
-      continue;
-    }
-    const resolved = resolveEnvironmentTemplateValue(name, variables, secretNames);
-    if (resolved.errors.length === 0) {
-      values.set(name, resolved.value);
-    }
-  }
-  return values;
-}
-
 // src/mcpToolSchema.ts
 function getInputSchemaObject(source) {
   if (!source.inputSchema || typeof source.inputSchema !== "object" || Array.isArray(source.inputSchema)) {
@@ -186138,7 +186376,7 @@ function describeAgentActivity(event) {
 }
 
 // src/agents/judgeExpectations.ts
-var fs14 = __toESM(require("fs"));
+var fs15 = __toESM(require("fs"));
 var path15 = __toESM(require("path"));
 var JUDGE_STATEMENT = /^\s*judge\b(.*)$/i;
 var JUDGE_SUBJECT_AND_AGENT = /^(.+?)\s+with\s+(\S+)\s*$/i;
@@ -186179,7 +186417,7 @@ function readExpectationFileFrom(options, resolvedPath) {
   if (options.readExpectationFile) {
     return options.readExpectationFile(resolvedPath);
   }
-  return fs14.readFileSync(resolvedPath, "utf8");
+  return fs15.readFileSync(resolvedPath, "utf8");
 }
 function readInlineExpectation(value) {
   const verbatim = value.startsWith('@"');
@@ -199114,7 +199352,7 @@ function createDefaultAgentProviderRegistry() {
 }
 
 // src/agents/agentRunner.ts
-var fs20 = __toESM(require("fs"));
+var fs21 = __toESM(require("fs"));
 var path23 = __toESM(require("path"));
 var import_crypto8 = require("crypto");
 
@@ -199701,7 +199939,7 @@ function hasReturnsContract(agent) {
   return Boolean(agent.returns || agent.builtInContracts?.returns);
 }
 function readAgentSchema(schemaPath) {
-  const parsed = JSON.parse(fs20.readFileSync(schemaPath, "utf8"));
+  const parsed = JSON.parse(fs21.readFileSync(schemaPath, "utf8"));
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error(`Agent schema '${schemaPath}' must contain a JSON object.`);
   }
@@ -200433,7 +200671,7 @@ ${TOOL_RESULT_RECOVERY_INSTRUCTIONS}`;
       overrideKeys.add(key);
     }
     let callerLimitBreaches = 0;
-    const reservedAgentNames = ["load_knowledge", "norn_read_tool_result", "norn_search_tool_results"];
+    const reservedAgentNames = ["load_knowledge", "query_database", "inspect_database", "norn_read_tool_result", "norn_search_tool_results"];
     if (this.options.onJournalEvent || requestToolsOverride?.some((tool) => tool.kind === "journal")) {
       reservedAgentNames.push("report_progress");
     }
@@ -200473,6 +200711,54 @@ ${TOOL_RESULT_RECOVERY_INSTRUCTIONS}`;
         }));
       }
     }
+    if (agent.grantedDatabases?.length) {
+      const permitted = agent.grantedDatabases.map((grant) => agent.databases?.get(grant.alias.toLowerCase())).filter((database) => database !== void 0);
+      for (const [toolName2, operation, description, inputSchema] of [
+        ["query_database", "query", "Execute SQL against a granted database, subject to its access mode.", {
+          type: "object",
+          properties: { database: { type: "string", enum: permitted.map((database) => database.alias) }, sql: { type: "string" } },
+          required: ["database", "sql"],
+          additionalProperties: false
+        }],
+        ["inspect_database", "inspect", "List schemas, tables, columns, and column types in a granted database.", {
+          type: "object",
+          properties: { database: { type: "string", enum: permitted.map((database) => database.alias) } },
+          required: ["database"],
+          additionalProperties: false
+        }]
+      ]) {
+        const offeredOverride = requestToolsOverride?.find((tool) => tool.kind === "database" && tool.name === toolName2);
+        providerTools.push(this.createRecordedProviderTool(parentHop, {
+          name: toolName2,
+          providerName: offeredOverride?.providerName ?? `norn_${toolName2}`,
+          kind: "database",
+          description: offeredOverride?.description ?? description,
+          inputSchema: offeredOverride?.inputSchema ?? inputSchema
+        }, async (input2, context) => {
+          const databaseName = input2.database;
+          const database = typeof databaseName === "string" ? permitted.find((candidate) => candidate.alias.toLowerCase() === databaseName.toLowerCase()) : void 0;
+          if (!database) {
+            throw new Error(`Database '${String(databaseName)}' is not granted to agent '${agent.name}'.`);
+          }
+          const replayed = await this.options.executeDatabaseToolOverride?.(parentHop.hopPath, toolName2, input2);
+          if (replayed) {
+            context.recordedMs = replayed.ms;
+            return replayed.output;
+          }
+          if (requestToolsOverride && !offeredOverride) {
+            throw new Error(`Recorded request did not offer database tool '${toolName2}'.`);
+          }
+          return executeDatabaseTool(
+            database,
+            operation,
+            input2,
+            this.options.runtimeVariables,
+            path23.dirname(this.options.startPath || process.cwd()),
+            this.options.signal
+          );
+        }));
+      }
+    }
     const expansion = agent.grantedMcpServers?.length ? await this.expandServerGrants(agent, parentHop) : void 0;
     for (const reference of [...agent.tools, ...expansion?.references ?? []]) {
       const offeredOverride = requestToolsOverride?.find(
@@ -200855,11 +201141,11 @@ ${TOOL_RESULT_RECOVERY_INSTRUCTIONS}`;
 
 // src/agents/agentRecording.ts
 var import_crypto10 = require("crypto");
-var fs23 = __toESM(require("fs"));
+var fs24 = __toESM(require("fs"));
 var path26 = __toESM(require("path"));
 
 // src/environmentParser.ts
-var fs22 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 var path25 = __toESM(require("path"));
 
 // src/secrets/crypto.ts
@@ -200928,7 +201214,7 @@ function decryptSecretValue(encryptedValue, sharedKey) {
 }
 
 // src/secrets/keyStore.ts
-var fs21 = __toESM(require("fs"));
+var fs22 = __toESM(require("fs"));
 var path24 = __toESM(require("path"));
 var CACHE_FILE2 = "secret-keys.json";
 var CACHE_VERSION2 = 1;
@@ -200941,7 +201227,7 @@ function getCacheFilePath(cacheDir) {
 function cacheFileExists(cacheDir) {
   const cacheFilePath = getCacheFilePath(cacheDir);
   try {
-    return fs21.existsSync(cacheFilePath) && fs21.statSync(cacheFilePath).isFile();
+    return fs22.existsSync(cacheFilePath) && fs22.statSync(cacheFilePath).isFile();
   } catch {
     return false;
   }
@@ -200964,7 +201250,7 @@ function getProjectSecretKeyCacheDirs(projectRoot) {
     }
     let entries;
     try {
-      entries = fs21.readdirSync(dir, { withFileTypes: true });
+      entries = fs22.readdirSync(dir, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -201015,8 +201301,8 @@ function ensureCacheDir(targetPath) {
   const existing = findExistingSecretKeyCacheDir(targetPath);
   const projectRoot = findProjectRoot(targetPath);
   const cacheDir = existing ?? path24.join(projectRoot, NORN_CACHE_DIR);
-  if (!fs21.existsSync(cacheDir)) {
-    fs21.mkdirSync(cacheDir, { recursive: true });
+  if (!fs22.existsSync(cacheDir)) {
+    fs22.mkdirSync(cacheDir, { recursive: true });
   }
   ensureNornCacheGitignore(cacheDir);
   rememberSecretKeyCacheDir(targetPath, cacheDir);
@@ -201029,7 +201315,7 @@ function getReadCachePath(targetPath) {
   }
   const projectRoot = findProjectRoot(targetPath);
   const projectCacheDir = path24.join(projectRoot, NORN_CACHE_DIR);
-  if (fs21.existsSync(projectCacheDir) && fs21.statSync(projectCacheDir).isDirectory()) {
+  if (fs22.existsSync(projectCacheDir) && fs22.statSync(projectCacheDir).isDirectory()) {
     return getCacheFilePath(projectCacheDir);
   }
   return void 0;
@@ -201039,11 +201325,11 @@ function getWriteCachePath(targetPath) {
 }
 function readCache(targetPath) {
   const cachePath = getReadCachePath(targetPath);
-  if (!cachePath || !fs21.existsSync(cachePath)) {
+  if (!cachePath || !fs22.existsSync(cachePath)) {
     return { version: CACHE_VERSION2, keys: {} };
   }
   try {
-    const parsed = JSON.parse(fs21.readFileSync(cachePath, "utf8"));
+    const parsed = JSON.parse(fs22.readFileSync(cachePath, "utf8"));
     if (parsed.version !== CACHE_VERSION2 || typeof parsed.keys !== "object" || parsed.keys === null) {
       return { version: CACHE_VERSION2, keys: {} };
     }
@@ -201054,9 +201340,9 @@ function readCache(targetPath) {
 }
 function writeCache(targetPath, cache) {
   const cachePath = getWriteCachePath(targetPath);
-  fs21.writeFileSync(cachePath, JSON.stringify(cache, null, 2), { encoding: "utf8", mode: 384 });
+  fs22.writeFileSync(cachePath, JSON.stringify(cache, null, 2), { encoding: "utf8", mode: 384 });
   try {
-    fs21.chmodSync(cachePath, 384);
+    fs22.chmodSync(cachePath, 384);
   } catch {
   }
 }
@@ -201263,7 +201549,7 @@ function parseEnvFile(content, sourceFilePath) {
 function getEnvSearchStartDirectory(targetPath) {
   const resolvedPath = path25.resolve(targetPath);
   try {
-    const stats = fs22.statSync(resolvedPath);
+    const stats = fs23.statSync(resolvedPath);
     return stats.isDirectory() ? resolvedPath : path25.dirname(resolvedPath);
   } catch {
     return path25.dirname(resolvedPath);
@@ -201273,7 +201559,7 @@ function findEnvFileFromPath(filePath) {
   let dir = getEnvSearchStartDirectory(filePath);
   while (true) {
     const envPath = path25.join(dir, ENV_FILENAME);
-    if (fs22.existsSync(envPath)) {
+    if (fs23.existsSync(envPath)) {
       return envPath;
     }
     const parentDir = path25.dirname(dir);
@@ -201307,7 +201593,7 @@ function resolveNornenvImports(config2, baseDir, entryFilePath, readFile4, impor
   }
   for (const imp of config2.imports) {
     const resolvedImportPath = resolveImportPath(imp.path, baseDir);
-    if (!resolvedImportPath || !fs22.existsSync(resolvedImportPath)) {
+    if (!resolvedImportPath || !fs23.existsSync(resolvedImportPath)) {
       errors.push({
         message: `Imported file not found: '${imp.path}'`,
         filePath: entryFilePath,
@@ -201482,7 +201768,7 @@ function toDisplayPath(filePath, entryFilePath) {
   return relative12 && relative12 !== "" ? relative12 : path25.basename(filePath);
 }
 function loadAndResolveEnvFile(filePath) {
-  const content = fs22.readFileSync(filePath, "utf-8");
+  const content = fs23.readFileSync(filePath, "utf-8");
   const config2 = parseEnvFile(content, filePath);
   if (config2.imports.length === 0) {
     const secretErrors = resolveEncryptedSecretValues(config2, filePath);
@@ -201492,7 +201778,7 @@ function loadAndResolveEnvFile(filePath) {
     config2,
     path25.dirname(filePath),
     filePath,
-    (p) => fs22.readFileSync(p, "utf-8")
+    (p) => fs23.readFileSync(p, "utf-8")
   );
   result.secretErrors.push(...resolveEncryptedSecretValues(result.config, filePath));
   return result;
@@ -202023,7 +202309,7 @@ function chooseCollisionSafeRecordingPath(runsDirectory, recording) {
   while (true) {
     const suffix = index === 1 ? "" : `-${index}`;
     const candidate = path26.join(runsDirectory, `${base}${suffix}.json`);
-    if (!fs23.existsSync(candidate)) {
+    if (!fs24.existsSync(candidate)) {
       return candidate;
     }
     index++;
@@ -202034,13 +202320,13 @@ function isGeneratedRecordingCandidate(filePath) {
     return void 0;
   }
   try {
-    const parsed = JSON.parse(fs23.readFileSync(filePath, "utf8"));
+    const parsed = JSON.parse(fs24.readFileSync(filePath, "utf8"));
     if (!isObjectRecord2(parsed) || !Number.isSafeInteger(parsed.version) || typeof parsed.timestamp !== "string" || typeof parsed.sequenceName !== "string" || typeof parsed.sourcePath !== "string") {
       return void 0;
     }
     const parsedTimestamp = Date.parse(parsed.timestamp);
     return {
-      timestamp: Number.isFinite(parsedTimestamp) ? parsedTimestamp : fs23.statSync(filePath).mtimeMs,
+      timestamp: Number.isFinite(parsedTimestamp) ? parsedTimestamp : fs24.statSync(filePath).mtimeMs,
       filePath
     };
   } catch {
@@ -202048,14 +202334,14 @@ function isGeneratedRecordingCandidate(filePath) {
   }
 }
 function pruneAgentRunRecordings(runsDirectory) {
-  if (!fs23.existsSync(runsDirectory)) {
+  if (!fs24.existsSync(runsDirectory)) {
     return [];
   }
-  const candidates = fs23.readdirSync(runsDirectory, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => isGeneratedRecordingCandidate(path26.join(runsDirectory, entry.name))).filter((entry) => Boolean(entry)).sort((left, right) => left.timestamp - right.timestamp || compareStrings(left.filePath, right.filePath));
+  const candidates = fs24.readdirSync(runsDirectory, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => isGeneratedRecordingCandidate(path26.join(runsDirectory, entry.name))).filter((entry) => Boolean(entry)).sort((left, right) => left.timestamp - right.timestamp || compareStrings(left.filePath, right.filePath));
   const deleted = [];
   for (const candidate of candidates.slice(0, Math.max(0, candidates.length - MAX_AGENT_RUN_RECORDINGS))) {
     try {
-      fs23.unlinkSync(candidate.filePath);
+      fs24.unlinkSync(candidate.filePath);
       deleted.push(candidate.filePath);
     } catch {
     }
@@ -202097,14 +202383,14 @@ function writeAgentRunRecording(input2, options = {}) {
   let destinationPath;
   if (options.outputPath) {
     destinationPath = path26.resolve(options.outputPath);
-    fs23.mkdirSync(path26.dirname(destinationPath), { recursive: true });
+    fs24.mkdirSync(path26.dirname(destinationPath), { recursive: true });
   } else {
     const cacheDirectory = ensureNornCacheDir(projectRoot);
     if (!cacheDirectory) {
       throw new Error(`Could not create Norn cache directory under '${projectRoot}'.`);
     }
     runsDirectory = path26.join(cacheDirectory, AGENT_RUN_RECORDINGS_DIRECTORY);
-    fs23.mkdirSync(runsDirectory, { recursive: true, mode: 448 });
+    fs24.mkdirSync(runsDirectory, { recursive: true, mode: 448 });
     destinationPath = chooseCollisionSafeRecordingPath(runsDirectory, masked);
   }
   const temporaryPath = path26.join(
@@ -202112,12 +202398,12 @@ function writeAgentRunRecording(input2, options = {}) {
     `.${path26.basename(destinationPath)}.${process.pid}.${(0, import_crypto10.randomUUID)()}.tmp`
   );
   try {
-    fs23.writeFileSync(temporaryPath, serialized, { encoding: "utf8", flag: "wx", mode: 384 });
-    fs23.renameSync(temporaryPath, destinationPath);
+    fs24.writeFileSync(temporaryPath, serialized, { encoding: "utf8", flag: "wx", mode: 384 });
+    fs24.renameSync(temporaryPath, destinationPath);
   } catch (error2) {
     try {
-      if (fs23.existsSync(temporaryPath)) {
-        fs23.unlinkSync(temporaryPath);
+      if (fs24.existsSync(temporaryPath)) {
+        fs24.unlinkSync(temporaryPath);
       }
     } catch {
     }
@@ -202143,7 +202429,7 @@ function isSafeProjectRelativePath(value) {
   return isRelativePath(value) && !normalizePathSeparators(value).split("/").includes("..");
 }
 function isAgentToolCall(value) {
-  return isObjectRecord2(value) && typeof value.name === "string" && (value.kind === void 0 || value.kind === "mcp" || value.kind === "agent" || value.kind === "knowledge" || value.kind === "context" || value.kind === "journal") && isObjectRecord2(value.input) && isFiniteNonNegativeNumber(value.ms) && (value.childInvocationId === void 0 || typeof value.childInvocationId === "string");
+  return isObjectRecord2(value) && typeof value.name === "string" && (value.kind === void 0 || value.kind === "mcp" || value.kind === "agent" || value.kind === "knowledge" || value.kind === "database" || value.kind === "context" || value.kind === "journal") && isObjectRecord2(value.input) && isFiniteNonNegativeNumber(value.ms) && (value.childInvocationId === void 0 || typeof value.childInvocationId === "string");
 }
 function isAgentKnowledgeTopicSnapshot(value) {
   return isObjectRecord2(value) && typeof value.topicHash === "string" && (value.heading === void 0 || typeof value.heading === "string") && isFiniteNonNegativeNumber(value.estimatedTokens) && isStringArray(value.itemPaths);
@@ -202159,7 +202445,7 @@ function isAgentRequestSnapshot(value) {
     (message) => isObjectRecord2(message) && (message.role === "user" || message.role === "assistant") && typeof message.content === "string"
   );
   const validTools = value.tools.every(
-    (tool) => isObjectRecord2(tool) && typeof tool.name === "string" && typeof tool.providerName === "string" && (tool.kind === void 0 || tool.kind === "mcp" || tool.kind === "agent" || tool.kind === "knowledge" || tool.kind === "context" || tool.kind === "journal") && (tool.description === void 0 || typeof tool.description === "string") && isObjectRecord2(tool.inputSchema)
+    (tool) => isObjectRecord2(tool) && typeof tool.name === "string" && typeof tool.providerName === "string" && (tool.kind === void 0 || tool.kind === "mcp" || tool.kind === "agent" || tool.kind === "knowledge" || tool.kind === "database" || tool.kind === "context" || tool.kind === "journal") && (tool.description === void 0 || typeof tool.description === "string") && isObjectRecord2(tool.inputSchema)
   );
   const validKnowledge = value.knowledge === void 0 || isObjectRecord2(value.knowledge) && typeof value.knowledge.runId === "string" && typeof value.knowledge.snapshotId === "string" && isStringArray(value.knowledge.declarationIds) && ["exact_entity", "lexical_unique", "lexical_ambiguous", "no_match"].includes(
     String(value.knowledge.routingRule)
@@ -202220,7 +202506,7 @@ function isMaskedAgentRunRecordingEnvelope(value) {
 function readMaskedAgentRunRecording(filePath) {
   let content;
   try {
-    content = fs23.readFileSync(filePath, "utf8");
+    content = fs24.readFileSync(filePath, "utf8");
   } catch (error2) {
     throw new AgentRunRecordingLoadError(
       "read",
@@ -202332,11 +202618,11 @@ var import_crypto11 = require("crypto");
 var path35 = __toESM(require("path"));
 
 // src/knowledge/knowledgeIndexBuilder.ts
-var fs27 = __toESM(require("fs"));
+var fs28 = __toESM(require("fs"));
 var path31 = __toESM(require("path"));
 
 // src/knowledge/knowledgeBuilder.ts
-var fs24 = __toESM(require("fs"));
+var fs25 = __toESM(require("fs"));
 var path28 = __toESM(require("path"));
 var crypto11 = __toESM(require("crypto"));
 
@@ -202713,7 +202999,7 @@ function knowledgeGlobMatches(pattern, itemPath) {
   return new RegExp(`^${source}$`).test(normalizeRelative(itemPath));
 }
 function walkFiles(directory) {
-  const entries = fs24.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
+  const entries = fs25.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
   return entries.flatMap((entry) => {
     const entryPath = path28.join(directory, entry.name);
     if (entry.isDirectory()) {
@@ -202723,7 +203009,7 @@ function walkFiles(directory) {
   });
 }
 function sourceCandidates(sourcePath) {
-  const stats = fs24.statSync(sourcePath);
+  const stats = fs25.statSync(sourcePath);
   return stats.isDirectory() ? walkFiles(sourcePath) : [sourcePath];
 }
 function knowledgeItemPathFor(sourcePath, sourceIsFile, absolutePath) {
@@ -202908,7 +203194,7 @@ function buildKnowledgeBase(declaration, options = {}) {
   const memberships = [];
   declaration.sources.forEach((source, sourceIndex) => {
     for (const absolutePath of sourceCandidates(source.resolvedPath)) {
-      const sourceIsFile = fs24.statSync(source.resolvedPath).isFile();
+      const sourceIsFile = fs25.statSync(source.resolvedPath).isFile();
       const itemPath = knowledgeItemPathFor(source.resolvedPath, sourceIsFile, absolutePath);
       const glob2 = declaration.excludes.find((entry) => knowledgeGlobMatches(entry.pattern, itemPath));
       const extension2 = path28.extname(absolutePath).toLowerCase();
@@ -202917,7 +203203,7 @@ function buildKnowledgeBase(declaration, options = {}) {
       let reason = glob2 ? `excluded by config glob '${glob2.pattern}'` : topicProducing ? `declared source; topic-producing extension '${extension2}'` : `declared source; '${extension2 || "(none)"}' is not a topic-producing extension`;
       let topics = { topics: [], diagnostics: [], fileExcluded: false, metaBlocks: [] };
       if (topicProducing) {
-        const content = fs24.readFileSync(absolutePath, "utf8");
+        const content = fs25.readFileSync(absolutePath, "utf8");
         const inputHash = crypto11.createHash("sha256").update(content).digest("hex");
         const analyzerInputsHash = crypto11.createHash("sha256").update(JSON.stringify({
           analyzer: "knowledge-markdown-topics",
@@ -203157,7 +203443,7 @@ function sha256(value) {
 }
 
 // src/knowledge/knowledgeEntityExtractors.ts
-var fs25 = __toESM(require("fs"));
+var fs26 = __toESM(require("fs"));
 var path29 = __toESM(require("path"));
 var HTTP_METHODS = "GET|POST|PUT|DELETE|PATCH|HEAD|OPTIONS|TRACE|CONNECT";
 var PROJECT_EXTENSIONS = /* @__PURE__ */ new Set([".norn", ".nornapi"]);
@@ -203409,7 +203695,7 @@ function extractNornEvidence(content, projectPath) {
 function walkProjectFiles(projectRoot, directory = projectRoot) {
   let entries;
   try {
-    entries = fs25.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
+    entries = fs26.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
   } catch {
     return [];
   }
@@ -203428,7 +203714,7 @@ function walkProjectFiles(projectRoot, directory = projectRoot) {
 function discoverProjectEntityFiles(projectRoot) {
   return walkProjectFiles(projectRoot);
 }
-function extractProjectEntityInput(projectRoot, absolutePath, content = fs25.readFileSync(absolutePath, "utf8")) {
+function extractProjectEntityInput(projectRoot, absolutePath, content = fs26.readFileSync(absolutePath, "utf8")) {
   const projectPath = path29.relative(projectRoot, absolutePath).split(path29.sep).join("/");
   const extension2 = path29.extname(absolutePath).toLowerCase();
   const evidence = path29.basename(absolutePath) === ".nornenv" ? extractNornEnvEvidence(content, projectPath) : extension2 === ".nornapi" ? extractNornApiEvidence(content, projectPath) : extractNornEvidence(content, projectPath);
@@ -203436,7 +203722,7 @@ function extractProjectEntityInput(projectRoot, absolutePath, content = fs25.rea
 }
 
 // src/knowledge/knowledgeIndex.ts
-var fs26 = __toESM(require("fs"));
+var fs27 = __toESM(require("fs"));
 var path30 = __toESM(require("path"));
 var import_node_sqlite = require("node:sqlite");
 var KNOWLEDGE_SCHEMA_VERSION = 3;
@@ -203672,13 +203958,13 @@ function defaultDatabasePath(projectRoot) {
     throw new Error(`Could not create the Norn cache directory below '${projectRoot}'.`);
   }
   const directory = path30.join(cache, "knowledge");
-  fs26.mkdirSync(directory, { recursive: true, mode: 448 });
+  fs27.mkdirSync(directory, { recursive: true, mode: 448 });
   return path30.join(directory, "knowledge.sqlite");
 }
 function removeDatabaseFiles(databasePath) {
   for (const candidate of [databasePath, `${databasePath}-wal`, `${databasePath}-shm`]) {
-    if (fs26.existsSync(candidate)) {
-      fs26.unlinkSync(candidate);
+    if (fs27.existsSync(candidate)) {
+      fs27.unlinkSync(candidate);
     }
   }
 }
@@ -203691,7 +203977,7 @@ var KnowledgeIndex = class {
   database;
   constructor(projectRoot, options = {}) {
     this.databasePath = options.databasePath ?? defaultDatabasePath(projectRoot);
-    fs26.mkdirSync(path30.dirname(this.databasePath), { recursive: true, mode: 448 });
+    fs27.mkdirSync(path30.dirname(this.databasePath), { recursive: true, mode: 448 });
     let database = new import_node_sqlite.DatabaseSync(this.databasePath);
     const version4 = currentSchemaVersion(database);
     if (version4 !== 0 && version4 !== 1 && version4 !== 2 && version4 !== KNOWLEDGE_SCHEMA_VERSION) {
@@ -203711,7 +203997,7 @@ var KnowledgeIndex = class {
     }
     this.database.exec(`PRAGMA user_version = ${KNOWLEDGE_SCHEMA_VERSION}`);
     try {
-      fs26.chmodSync(this.databasePath, 384);
+      fs27.chmodSync(this.databasePath, 384);
     } catch {
     }
   }
@@ -203879,7 +204165,7 @@ function portablePath(projectRoot, targetPath) {
 function walkSidecars(directory) {
   let entries;
   try {
-    entries = fs27.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
+    entries = fs28.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
   } catch {
     return [];
   }
@@ -203897,7 +204183,7 @@ function walkSidecars(directory) {
 function discoverKnowledgeDeclarations(projectRoot) {
   const declarations = [];
   for (const sidecarPath of walkSidecars(projectRoot)) {
-    const parsed = parseNornAgentFile(fs27.readFileSync(sidecarPath, "utf8"), sidecarPath);
+    const parsed = parseNornAgentFile(fs28.readFileSync(sidecarPath, "utf8"), sidecarPath);
     const knowledgeErrors = parsed.errors.filter((error2) => error2.code.startsWith("agent-knowledge-"));
     if (knowledgeErrors.length > 0) {
       throw new Error(knowledgeErrors.map((error2) => `${portablePath(projectRoot, sidecarPath)}:${error2.lineNumber + 1}: ${error2.message}`).join("\n"));
@@ -203910,7 +204196,7 @@ function knowledgeDeclarationId(projectRoot, declaration) {
   return `declaration:${sha256(`${portablePath(projectRoot, declaration.sourcePath)}\0${declaration.alias}`).slice(0, 32)}`;
 }
 function knowledgeSourceId(projectRoot, declarationId, resolvedPath) {
-  const kind = fs27.statSync(resolvedPath).isDirectory() ? "directory" : "file";
+  const kind = fs28.statSync(resolvedPath).isDirectory() ? "directory" : "file";
   const locator = portablePath(projectRoot, resolvedPath);
   return {
     sourceId: `source:${sha256(`${declarationId}\0${kind}\0${locator}`).slice(0, 32)}`,
@@ -204071,7 +204357,7 @@ function knowledgeEntities(index, pending, used, occurrence, topic, analyzerVers
 }
 function projectEntityInputs(index, projectRoot, pending, used, analyzerVersion, stats) {
   return discoverProjectEntityFiles(projectRoot).map((absolutePath) => {
-    const content = fs27.readFileSync(absolutePath, "utf8");
+    const content = fs28.readFileSync(absolutePath, "utf8");
     const projectPath = portablePath(projectRoot, absolutePath);
     const inputHash = sha256(content);
     const inputsHash = sha256(canonicalJson({ projectPath }));
@@ -204147,7 +204433,7 @@ function commitSnapshot(index, projectRoot, snapshotId, manifestJson, builtAt, d
                     `,
             descriptor.sourceId,
             member.itemPath,
-            sha256(fs27.readFileSync(member.absolutePath)),
+            sha256(fs28.readFileSync(member.absolutePath)),
             member.included ? 1 : 0,
             member.topicProducing ? 1 : 0,
             member.extension,
@@ -204828,7 +205114,7 @@ function routeKnowledge(startPath, input2, projection, config2, agentName, optio
 }
 
 // src/knowledge/knowledgeEnvironment.ts
-var fs28 = __toESM(require("fs"));
+var fs29 = __toESM(require("fs"));
 var path34 = __toESM(require("path"));
 var REFERENCE = /\{\{(?:\$env\.)?([A-Za-z_][A-Za-z0-9_]*)\}\}/g;
 var extensionSelection;
@@ -204845,7 +205131,7 @@ function resolveKnowledgeMarkdown(text, filePath, metadata, environmentName, opt
   if (!envFile) {
     return text;
   }
-  if (!fs28.existsSync(envFile)) {
+  if (!fs29.existsSync(envFile)) {
     throw new Error(`Knowledge file '${filePath}' cannot read environment import '${envFile}'.`);
   }
   const loaded = loadAndResolveEnvFile(envFile);
@@ -204883,7 +205169,7 @@ function resolveKnowledgeProjectionVariables(projection, projectRoot, environmen
       const source = path34.resolve(projectRoot, domain2.sourcePath);
       let sourceIsFile;
       try {
-        sourceIsFile = fs28.statSync(source).isFile();
+        sourceIsFile = fs29.statSync(source).isFile();
       } catch {
         sourceIsFile = path34.extname(source).toLowerCase() === ".md";
       }
@@ -206299,30 +206585,6 @@ function evaluateSqlArgumentExpression(expr, runtimeVariables) {
   }
   return evaluateValueExpression(trimmed, runtimeVariables);
 }
-function getSqlConnectionValues(profile, runtimeVariables) {
-  const values = {};
-  const envScope = runtimeVariables.$env && typeof runtimeVariables.$env === "object" ? runtimeVariables.$env : void 0;
-  if (!envScope) {
-    return values;
-  }
-  const prefix = `${profile}_`;
-  for (const [key, value] of Object.entries(envScope)) {
-    if (!key.startsWith(prefix) || value === void 0 || value === null) {
-      continue;
-    }
-    const propertyName = key.slice(prefix.length);
-    if (!propertyName) {
-      continue;
-    }
-    const resolved = resolveEnvironmentTemplateValue(key, envScope);
-    if (resolved.errors.length > 0) {
-      const message = resolved.errors.map((error2) => error2.message).join("; ");
-      throw new Error(`Failed to resolve SQL connection value '${key}': ${message}`);
-    }
-    values[propertyName] = resolved.value;
-  }
-  return values;
-}
 function getRuntimeEnvironmentVariables(runtimeVariables) {
   const envScope = runtimeVariables.$env;
   if (!envScope || typeof envScope !== "object" || Array.isArray(envScope)) {
@@ -207989,9 +208251,23 @@ ${describeUnmetExpectations(verdict).map((line2) => `  - ${line2}`).join("\n")}`
           }
           const adapterWorkingDir = workingDir || process.cwd();
           try {
-            const connection = resolveSqlConnection(executionContext?.filePath || adapterWorkingDir, operation.connectionName);
-            const adapterTarget = resolveSqlAdapterTarget(executionContext?.filePath || adapterWorkingDir, connection.adapter);
-            const connectionValues = getSqlConnectionValues(connection.profile, runtimeVariables);
+            const connection = operation.database ? {
+              alias: operation.database.alias,
+              adapter: operation.database.adapter,
+              profile: operation.database.alias,
+              sourcePath: operation.database.sourcePath,
+              connectionStringTemplate: operation.database.connectionStringTemplate
+            } : resolveSqlConnection(executionContext?.filePath || adapterWorkingDir, operation.connectionName);
+            const adapterTarget = resolveSqlAdapterTarget(
+              connection.sourcePath || executionContext?.filePath || adapterWorkingDir,
+              connection.adapter
+            );
+            const connectionString = resolveDatabaseConnectionTemplate(
+              connection.alias,
+              connection.connectionStringTemplate || "",
+              runtimeVariables
+            );
+            const connectionValues = { connectionString };
             const adapterResponse = await runSqlAdapter(
               adapterTarget,
               {
@@ -210091,7 +210367,7 @@ function formatRunSummary(results, totalDuration, colors) {
 }
 
 // src/cli/reporters/junit.ts
-var fs29 = __toESM(require("fs"));
+var fs30 = __toESM(require("fs"));
 function escapeXml(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
@@ -210118,7 +210394,7 @@ function generateJUnitReport(results, options) {
     xml += generateTestSuite(result, redaction);
   }
   xml += "</testsuites>\n";
-  fs29.writeFileSync(outputPath, xml, "utf-8");
+  fs30.writeFileSync(outputPath, xml, "utf-8");
 }
 function generateTestSuite(result, redaction) {
   const assertions = result.assertionResults || [];
@@ -210282,11 +210558,11 @@ Response: ${bodyStr}`;
   xml += "    </testcase>\n";
   xml += "  </testsuite>\n";
   xml += "</testsuites>\n";
-  fs29.writeFileSync(outputPath, xml, "utf-8");
+  fs30.writeFileSync(outputPath, xml, "utf-8");
 }
 
 // src/cli/reporters/html.ts
-var fs30 = __toESM(require("fs"));
+var fs31 = __toESM(require("fs"));
 function escapeHtml(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
 }
@@ -210400,7 +210676,7 @@ function generateHtmlReport(results, options) {
     </script>
 </body>
 </html>`;
-  fs30.writeFileSync(outputPath, html, "utf-8");
+  fs31.writeFileSync(outputPath, html, "utf-8");
 }
 function generateSequenceHtml(result, index, redaction) {
   const statusClass = result.success ? "passed" : "failed";
@@ -210856,13 +211132,13 @@ function generateHtmlReportFromResponse(response, testName, options) {
 }
 
 // src/secrets/cliSecrets.ts
-var fs32 = __toESM(require("fs"));
+var fs33 = __toESM(require("fs"));
 var path38 = __toESM(require("path"));
 var readline2 = __toESM(require("readline"));
 var import_process = require("process");
 
 // src/secrets/envFileSecrets.ts
-var fs31 = __toESM(require("fs"));
+var fs32 = __toESM(require("fs"));
 var path37 = __toESM(require("path"));
 var envRegex = /^\s*\[env:([a-zA-Z_][a-zA-Z0-9_-]*)\]\s*$/;
 var secretConnectionStringRegex2 = /^(\s*secret\s+connectionString\s+)([a-zA-Z_][a-zA-Z0-9_]*)(\s*=\s*)(.+)$/;
@@ -210948,7 +211224,7 @@ function findSecretLine(content, variableName, envName) {
   return secretLines.find((secret) => secret.name === variableName);
 }
 function loadSecretLine(filePath, variableName, envName) {
-  const content = fs31.readFileSync(filePath, "utf8");
+  const content = fs32.readFileSync(filePath, "utf8");
   const secret = findSecretLine(content, variableName, envName);
   if (!secret) {
     const envLabel = envName ? ` in [env:${envName}]` : "";
@@ -210957,20 +211233,20 @@ function loadSecretLine(filePath, variableName, envName) {
   return { content, secret };
 }
 function writeSecretLine(filePath, content) {
-  fs31.writeFileSync(filePath, content, "utf8");
+  fs32.writeFileSync(filePath, content, "utf8");
 }
 function discoverNornenvFiles(targetPath) {
   const resolved = path37.resolve(targetPath);
-  if (!fs31.existsSync(resolved)) {
+  if (!fs32.existsSync(resolved)) {
     return [];
   }
-  const stats = fs31.statSync(resolved);
+  const stats = fs32.statSync(resolved);
   if (stats.isFile()) {
     return isNornenvFilePath(resolved) ? [resolved] : [];
   }
   const results = [];
   const walk2 = (dir) => {
-    const entries = fs31.readdirSync(dir, { withFileTypes: true });
+    const entries = fs32.readdirSync(dir, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = path37.join(dir, entry.name);
       if (entry.isDirectory()) {
@@ -211201,7 +211477,7 @@ async function handleRekey(args) {
   let updatedFiles = 0;
   let updatedSecrets = 0;
   for (const filePath of files) {
-    const original = fs32.readFileSync(filePath, "utf8");
+    const original = fs33.readFileSync(filePath, "utf8");
     const secretLines = extractSecretLines(original, filePath);
     if (secretLines.length === 0) {
       continue;
@@ -211252,7 +211528,7 @@ async function handleRekey(args) {
       updatedSecrets += 1;
     }
     if (updated !== original) {
-      fs32.writeFileSync(filePath, updated, "utf8");
+      fs33.writeFileSync(filePath, updated, "utf8");
       updatedFiles += 1;
     }
   }
@@ -211269,7 +211545,7 @@ async function handleAudit(args) {
   }
   const issues = [];
   for (const filePath of files) {
-    const content = fs32.readFileSync(filePath, "utf8");
+    const content = fs33.readFileSync(filePath, "utf8");
     const secrets = extractSecretLines(content, filePath);
     for (const secret of secrets) {
       if (!secret.encrypted) {
@@ -211355,7 +211631,7 @@ function printSecretResolutionErrors(errors, envFilePath) {
 }
 
 // src/contracts/cliContracts.ts
-var fs33 = __toESM(require("fs"));
+var fs34 = __toESM(require("fs"));
 var path39 = __toESM(require("path"));
 function getFlagValue2(args, flag) {
   const index = args.indexOf(flag);
@@ -211368,11 +211644,11 @@ function resolveTarget(args) {
     return void 0;
   }
   const nornapiPath = path39.resolve(fileArg);
-  if (!fs33.existsSync(nornapiPath)) {
+  if (!fs34.existsSync(nornapiPath)) {
     console.error(`Error: File not found: ${nornapiPath}`);
     return void 0;
   }
-  const content = fs33.readFileSync(nornapiPath, "utf-8");
+  const content = fs34.readFileSync(nornapiPath, "utf-8");
   const specUrl = parseSwaggerDirective(content);
   if (!specUrl) {
     console.error(`Error: No swagger directive found in ${path39.basename(nornapiPath)}`);
@@ -211391,11 +211667,11 @@ function applyTlsFlag(args) {
 }
 function readManifest(contractsDir) {
   const manifestPath = path39.join(contractsDir, MANIFEST_FILENAME);
-  if (!fs33.existsSync(manifestPath)) {
+  if (!fs34.existsSync(manifestPath)) {
     return void 0;
   }
   try {
-    const parsed = JSON.parse(fs33.readFileSync(manifestPath, "utf-8"));
+    const parsed = JSON.parse(fs34.readFileSync(manifestPath, "utf-8"));
     if (typeof parsed?.specUrl === "string" && Array.isArray(parsed?.files)) {
       return { specUrl: parsed.specUrl, files: parsed.files.filter((f3) => typeof f3 === "string") };
     }
@@ -211463,25 +211739,25 @@ async function handleSync(args) {
     console.error("Error: No response schemas found in the spec - nothing to sync");
     return 1;
   }
-  fs33.mkdirSync(target.contractsDir, { recursive: true });
+  fs34.mkdirSync(target.contractsDir, { recursive: true });
   const previousManifest = readManifest(target.contractsDir);
   const sortedFilenames = [...files.keys()].sort();
   for (const filename of sortedFilenames) {
     const filePath = path39.join(target.contractsDir, filename);
-    fs33.writeFileSync(filePath, JSON.stringify(files.get(filename), null, 2), "utf-8");
+    fs34.writeFileSync(filePath, JSON.stringify(files.get(filename), null, 2), "utf-8");
   }
   let pruned = 0;
   for (const staleFile of previousManifest?.files ?? []) {
     if (!files.has(staleFile)) {
       const stalePath = path39.join(target.contractsDir, staleFile);
-      if (fs33.existsSync(stalePath)) {
-        fs33.unlinkSync(stalePath);
+      if (fs34.existsSync(stalePath)) {
+        fs34.unlinkSync(stalePath);
         pruned++;
       }
     }
   }
   const manifest = { specUrl: target.specUrl, files: sortedFilenames };
-  fs33.writeFileSync(path39.join(target.contractsDir, MANIFEST_FILENAME), JSON.stringify(manifest, null, 2), "utf-8");
+  fs34.writeFileSync(path39.join(target.contractsDir, MANIFEST_FILENAME), JSON.stringify(manifest, null, 2), "utf-8");
   const componentCount = files.has(COMPONENTS_FILENAME2) ? Object.keys(files.get(COMPONENTS_FILENAME2).definitions ?? {}).length : 0;
   const relativeDir = path39.relative(process.cwd(), target.contractsDir) || ".";
   console.log(`Synced ${sortedFilenames.length} schema file(s) to ${relativeDir}/ (${componentCount} shared component(s)${pruned > 0 ? `, pruned ${pruned} stale` : ""})`);
@@ -211515,11 +211791,11 @@ async function handleCheck(args) {
   const committed = /* @__PURE__ */ new Map();
   for (const filename of manifest.files) {
     const filePath = path39.join(target.contractsDir, filename);
-    if (!fs33.existsSync(filePath)) {
+    if (!fs34.existsSync(filePath)) {
       continue;
     }
     try {
-      committed.set(filename, JSON.parse(fs33.readFileSync(filePath, "utf-8")));
+      committed.set(filename, JSON.parse(fs34.readFileSync(filePath, "utf-8")));
     } catch {
       console.error(`Warning: ${filename} is not valid JSON - treating as missing`);
     }
@@ -211585,7 +211861,7 @@ async function handleContractsCommand(args) {
 }
 
 // src/theoryCaseLoader.ts
-var fs34 = __toESM(require("fs/promises"));
+var fs35 = __toESM(require("fs/promises"));
 var path40 = __toESM(require("path"));
 function formatTheoryCaseLabel(params, index) {
   const entries = Object.entries(params);
@@ -211611,7 +211887,7 @@ function normalizeTheoryCase(caseValue, sequenceParamNames) {
 }
 async function loadTheoryCasesFromSource(sourcePath, workingDir, sequenceParamNames) {
   const resolvedPath = path40.resolve(workingDir, sourcePath);
-  const content = await fs34.readFile(resolvedPath, "utf-8");
+  const content = await fs35.readFile(resolvedPath, "utf-8");
   const parsed = JSON.parse(content);
   if (!Array.isArray(parsed)) {
     throw new Error(`Theory file "${sourcePath}" must contain a JSON array of test cases`);
@@ -213132,6 +213408,20 @@ var ReplayCoordinator = class {
     this.mcpExecutionCounts.set(executionKey, executionIndex + 1);
     return { output: structuredClone(call.output), ms: call.ms };
   }
+  executeDatabaseToolOverride(hopPath, toolName2, input2) {
+    if (this.isLiveInvocation(hopPath)) {
+      return void 0;
+    }
+    const calls = this.getRecordedHop(hopPath)?.output.toolCalls.filter((call2) => call2.kind === "database" && call2.name === toolName2) ?? [];
+    const key = `${pathKey(hopPath)}\0database\0${toolName2}`;
+    const index = this.mcpExecutionCounts.get(key) ?? 0;
+    const call = calls[index];
+    if (!call || !(0, import_util8.isDeepStrictEqual)(input2, call.input)) {
+      throw new Error(`Replay input drift at '${hopPath}' for database tool '${toolName2}' call ${index + 1}.`);
+    }
+    this.mcpExecutionCounts.set(key, index + 1);
+    return { output: structuredClone(call.output), ms: call.ms };
+  }
   async runRecordedProviderRequest(request) {
     const startsLive = this.isLiveInvocation(request.hopPath);
     const recorded = this.getRecordedHop(request.hopPath);
@@ -213395,6 +213685,7 @@ async function replayAgentRun(options) {
         ),
         executeMcpToolOverride: (hopPath, reference, input2) => coordinator.executeMcpToolOverride(hopPath, reference, input2),
         executeKnowledgeToolOverride: (hopPath, input2) => coordinator.executeKnowledgeToolOverride(hopPath, input2),
+        executeDatabaseToolOverride: (hopPath, toolName2, input2) => coordinator.executeDatabaseToolOverride(hopPath, toolName2, input2),
         onInvocationProgress: (event) => {
           generatedEvents.push(event);
           if (targetHopPath) {
@@ -213522,7 +213813,7 @@ Pure replay never calls a model or re-fires an MCP tool. Recordings default to
 }
 
 // src/knowledge/cliKnowledge.ts
-var fs35 = __toESM(require("fs"));
+var fs36 = __toESM(require("fs"));
 var path41 = __toESM(require("path"));
 var SKIPPED_DIRECTORIES3 = /* @__PURE__ */ new Set([".git", ".norn-cache", "coverage", "dist", "node_modules", "out"]);
 function knowledgeCliHelp() {
@@ -213565,7 +213856,7 @@ function parseKnowledgeCliArgs(args) {
   return options;
 }
 function discoverSidecars(directory) {
-  const entries = fs35.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
+  const entries = fs36.readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
   return entries.flatMap((entry) => {
     const entryPath = path41.join(directory, entry.name);
     if (entry.isDirectory()) {
@@ -213576,18 +213867,18 @@ function discoverSidecars(directory) {
 }
 function resolveSidecar(target) {
   const resolved = path41.resolve(target ?? process.cwd());
-  if (fs35.existsSync(resolved) && fs35.statSync(resolved).isFile()) {
+  if (fs36.existsSync(resolved) && fs36.statSync(resolved).isFile()) {
     if (!isAgentSidecarPath(resolved)) {
       throw new Error(`Knowledge target '${target}' is not a .nornai or .nornagent sidecar.`);
     }
     return resolved;
   }
-  if (!fs35.existsSync(resolved) || !fs35.statSync(resolved).isDirectory()) {
+  if (!fs36.existsSync(resolved) || !fs36.statSync(resolved).isDirectory()) {
     throw new Error(`Knowledge target '${target ?? resolved}' was not found.`);
   }
   const matches = discoverSidecars(resolved).filter((sidecarPath) => {
     try {
-      const content = fs35.readFileSync(sidecarPath, "utf8");
+      const content = fs36.readFileSync(sidecarPath, "utf8");
       const parsed = parseNornAgentFile(content, sidecarPath);
       return parsed.knowledgeBases.size > 0 || parsed.errors.some((error2) => error2.code.startsWith("agent-knowledge-"));
     } catch {
@@ -213620,7 +213911,7 @@ async function handleKnowledgeCommand(args) {
   }
   try {
     const sidecarPath = resolveSidecar(options.target);
-    const parsed = parseNornAgentFile(fs35.readFileSync(sidecarPath, "utf8"), sidecarPath);
+    const parsed = parseNornAgentFile(fs36.readFileSync(sidecarPath, "utf8"), sidecarPath);
     if (parsed.errors.length > 0) {
       for (const error2 of parsed.errors) {
         console.error(`${path41.basename(sidecarPath)}:${error2.lineNumber + 1}: ${error2.message}`);
@@ -213671,7 +213962,7 @@ async function handleKnowledgeCommand(args) {
 }
 
 // src/cli/sequenceParameters.ts
-var fs36 = __toESM(require("fs"));
+var fs37 = __toESM(require("fs"));
 var path42 = __toESM(require("path"));
 var PARAMETER_NAME = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 function parseCliSequenceParameterAssignment(authored2, source) {
@@ -213711,7 +214002,7 @@ function loadJsonParameter(assignment, cwd) {
   }
   let content;
   try {
-    content = fs36.readFileSync(filePath, "utf8");
+    content = fs37.readFileSync(filePath, "utf8");
   } catch (error2) {
     throw new Error(
       `Could not read JSON parameter${parameterLabel} from '${filePath}': ${error2 instanceof Error ? error2.message : String(error2)}`
@@ -214273,7 +214564,7 @@ async function handleReplayCommand(args) {
     sequenceName = metadata.sequenceName;
     const projectRoot = resolveAgentRecordingProjectRoot(recordingPath);
     const sourcePath = resolveAgentRecordingSourcePath(recordingPath, metadata, projectRoot);
-    if (!fs37.existsSync(sourcePath) || !fs37.statSync(sourcePath).isFile()) {
+    if (!fs38.existsSync(sourcePath) || !fs38.statSync(sourcePath).isFile()) {
       throw new Error(
         `Recorded source '${metadata.sourcePath}' was not found under project root '${projectRoot}'.`
       );
@@ -214310,7 +214601,7 @@ async function handleReplayCommand(args) {
       environment: restorationEnvironment(resolvedEnv),
       ...selectedEnvironment ? { environmentName: selectedEnvironment } : {}
     });
-    const fileContent = fs37.readFileSync(sourcePath, "utf8");
+    const fileContent = fs38.readFileSync(sourcePath, "utf8");
     const workingDirectory = path43.dirname(sourcePath);
     const importResult = await resolveImports(
       fileContent,
@@ -214598,7 +214889,7 @@ function formatRegionPatternSummary(pattern) {
   return lines;
 }
 function runNornenvRegionRefactor(filePath, options) {
-  const content = fs37.readFileSync(filePath, "utf-8");
+  const content = fs38.readFileSync(filePath, "utf-8");
   const config2 = parseEnvFile(content, filePath);
   const pattern = detectRegionPattern(config2, content);
   if (!pattern) {
@@ -214611,7 +214902,7 @@ function runNornenvRegionRefactor(filePath, options) {
   }
   const refactored = applyRegionRefactorToText(content, pattern);
   if (options.writeRefactor) {
-    fs37.writeFileSync(filePath, refactored, "utf-8");
+    fs38.writeFileSync(filePath, refactored, "utf-8");
   }
   if (options.output === "json") {
     console.log(JSON.stringify({
@@ -214689,7 +214980,7 @@ async function runK8sCliFile(filePath, options, colors) {
     console.log(colors.info(`Using environment: ${options.env}`));
   }
   const redaction = createRedactionOptions(resolvedEnv.secretNames, resolvedEnv.secretValues, !options.noRedact);
-  const fileContent = fs37.readFileSync(filePath, "utf-8");
+  const fileContent = fs38.readFileSync(filePath, "utf-8");
   const parsed = parseK8sDocument(fileContent);
   const variables = attachEnvironmentScope({ ...resolvedEnv.variables }, resolvedEnv.variables);
   const executionOptions = {
@@ -214768,7 +215059,7 @@ async function runSingleRequest(fileContent, variables, cookieJar, apiDefinition
 function discoverNornFiles(dirPath) {
   const files = [];
   function walkDir(currentPath) {
-    const entries = fs37.readdirSync(currentPath, { withFileTypes: true });
+    const entries = fs38.readdirSync(currentPath, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = path43.join(currentPath, entry.name);
       if (entry.isDirectory()) {
@@ -214786,7 +215077,7 @@ function discoverNornFiles(dirPath) {
 function discoverNornK8sFiles(dirPath) {
   const files = [];
   function walkDir(currentPath) {
-    const entries = fs37.readdirSync(currentPath, { withFileTypes: true });
+    const entries = fs38.readdirSync(currentPath, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = path43.join(currentPath, entry.name);
       if (entry.isDirectory()) {
@@ -214912,7 +215203,7 @@ async function main() {
   }
   const args = rawArgs[0] === "run" ? rawArgs.slice(1) : rawArgs;
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-V")) {
-    console.log(`Norn CLI ${"4.6.2"}`);
+    console.log(`Norn CLI ${"5.0.0"}`);
     return;
   }
   if (args.length === 0) {
@@ -214945,11 +215236,11 @@ async function main() {
     console.error(colors.warning("Warning: TLS certificate verification is disabled (--insecure). Use this only for local development."));
   }
   const inputPath = path43.resolve(options.file);
-  if (!fs37.existsSync(inputPath)) {
+  if (!fs38.existsSync(inputPath)) {
     console.error(`Error: Path not found: ${inputPath}`);
     process.exit(1);
   }
-  const isDirectory = fs37.statSync(inputPath).isDirectory();
+  const isDirectory = fs38.statSync(inputPath).isDirectory();
   const hasHostedSequenceOptions = options.sequenceParameters.length > 0 || options.agentRecordingOutputPath !== void 0;
   if (hasHostedSequenceOptions && !options.sequence) {
     console.error("Error: --param, --param-json, and --recording require --sequence.");
@@ -215072,7 +215363,7 @@ async function main() {
     }
     mergeSecrets(combinedSecretNames, combinedSecretValues, resolvedEnv.secretNames, resolvedEnv.secretValues);
     const redaction2 = createRedactionOptions(combinedSecretNames, combinedSecretValues, !options.noRedact);
-    const fileContent = fs37.readFileSync(filePath, "utf-8");
+    const fileContent = fs38.readFileSync(filePath, "utf-8");
     const fileVariables = extractFileLevelVariables(fileContent);
     const variables = attachEnvironmentScope({ ...resolvedEnv.variables, ...fileVariables }, resolvedEnv.variables);
     const cookieJar = createCookieJar();
@@ -215277,7 +215568,7 @@ ${fileContent}` : fileContent;
   let totalTestCount = 0;
   let filteredTestCount = 0;
   for (const filePath of filesToRun) {
-    const fileContent = fs37.readFileSync(filePath, "utf-8");
+    const fileContent = fs38.readFileSync(filePath, "utf-8");
     const counts = countTestSequences(fileContent, tagFilterOptions);
     totalTestCount += counts.total;
     filteredTestCount += counts.filtered;
@@ -215328,7 +215619,7 @@ ${fileContent}` : fileContent;
     }
     mergeSecrets(combinedSecretNames, combinedSecretValues, resolvedEnv.secretNames, resolvedEnv.secretValues);
     const redaction2 = createRedactionOptions(combinedSecretNames, combinedSecretValues, !options.noRedact);
-    const fileContent = fs37.readFileSync(filePath, "utf-8");
+    const fileContent = fs38.readFileSync(filePath, "utf-8");
     const fileVariables = extractFileLevelVariables(fileContent);
     const variables = attachEnvironmentScope({ ...resolvedEnv.variables, ...fileVariables }, resolvedEnv.variables);
     const cookieJar = createCookieJar();
@@ -215417,8 +215708,8 @@ ${fileContent}` : fileContent;
     if (!htmlOutputPath) {
       htmlOutputPath = generatedPaths.htmlPath;
     }
-    if (!fs37.existsSync(options.outputDir)) {
-      fs37.mkdirSync(options.outputDir, { recursive: true });
+    if (!fs38.existsSync(options.outputDir)) {
+      fs38.mkdirSync(options.outputDir, { recursive: true });
     }
   }
   if (junitOutputPath) {