oroute-cli 0.3.0 → 0.4.0

package/dist/oroute.cjs

@@ -23388,7 +23388,7 @@ var require_pdf_worker = __commonJS({
                       });
                   }
                 },
-                parse: function parse(_ref4) {
+                parse: function parse2(_ref4) {
                   var xref = _ref4.xref, isEvalSupported = _ref4.isEvalSupported, fn = _ref4.fn;
                   var IR = this.getIR({
                     xref,
@@ -25624,7 +25624,7 @@ var require_pdf_worker = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -25986,7 +25986,7 @@ var require_pdf_worker = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -26004,7 +26004,7 @@ var require_pdf_worker = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -26013,7 +26013,7 @@ var require_pdf_worker = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -26022,7 +26022,7 @@ var require_pdf_worker = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -26031,7 +26031,7 @@ var require_pdf_worker = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -26040,7 +26040,7 @@ var require_pdf_worker = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -26050,7 +26050,7 @@ var require_pdf_worker = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -26063,7 +26063,7 @@ var require_pdf_worker = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -26076,7 +26076,7 @@ var require_pdf_worker = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -32121,7 +32121,7 @@ var require_pdf_worker = __commonJS({
                 };
               }
               JpegImage2.prototype = {
-                parse: function parse(data) {
+                parse: function parse2(data) {
                   function readUint16() {
                     var value = data[offset] << 8 | data[offset + 1];
                     offset += 2;
@@ -37804,7 +37804,7 @@ var require_pdf_worker = __commonJS({
                     args: [x1, y1, x2, y2, x3, y3]
                   });
                 }
-                function parse(code2) {
+                function parse2(code2) {
                   var i = 0;
                   while (i < code2.length) {
                     var stackClean = false;
@@ -37868,7 +37868,7 @@ var require_pdf_worker = __commonJS({
                         n = stack.pop() + font.subrsBias;
                         subrCode = font.subrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 11:
@@ -38054,7 +38054,7 @@ var require_pdf_worker = __commonJS({
                         n = stack.pop() + font.gsubrsBias;
                         subrCode = font.gsubrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 30:
@@ -38120,7 +38120,7 @@ var require_pdf_worker = __commonJS({
                     }
                   }
                 }
-                parse(code);
+                parse2(code);
               }
               var noop = "";
               function CompiledFont(fontMatrix) {
@@ -52673,7 +52673,7 @@ var require_pdf = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -53035,7 +53035,7 @@ var require_pdf = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -53053,7 +53053,7 @@ var require_pdf = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -53062,7 +53062,7 @@ var require_pdf = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -53071,7 +53071,7 @@ var require_pdf = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -53080,7 +53080,7 @@ var require_pdf = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -53089,7 +53089,7 @@ var require_pdf = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -53099,7 +53099,7 @@ var require_pdf = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -53112,7 +53112,7 @@ var require_pdf = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -53125,7 +53125,7 @@ var require_pdf = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -61161,8 +61161,8 @@ var require_pdf = __commonJS({
               }
             }
             var fs20 = require("fs");
-            var http = require("http");
-            var https = require("https");
+            var http2 = require("http");
+            var https2 = require("https");
             var url = require("url");
             var PDFNodeStream = (function() {
               function PDFNodeStream2(options) {
@@ -61441,9 +61441,9 @@ var require_pdf = __commonJS({
                 };
                 _this5._request = null;
                 if (_this5._url.protocol === "http:") {
-                  _this5._request = http.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = http2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 } else {
-                  _this5._request = https.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = https2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 }
                 _this5._request.on("error", function(reason) {
                   _this5._errored = true;
@@ -61471,11 +61471,11 @@ var require_pdf = __commonJS({
                 _this6._httpHeaders["Range"] = "bytes=" + start + "-" + (end - 1);
                 _this6._request = null;
                 if (_this6._url.protocol === "http:") {
-                  _this6._request = http.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = http2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 } else {
-                  _this6._request = https.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = https2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 }
@@ -85592,7 +85592,7 @@ var require_pdf_worker2 = __commonJS({
                       });
                   }
                 },
-                parse: function parse(_ref4) {
+                parse: function parse2(_ref4) {
                   var xref = _ref4.xref, isEvalSupported = _ref4.isEvalSupported, fn = _ref4.fn;
                   var IR = this.getIR({
                     xref,
@@ -87839,7 +87839,7 @@ var require_pdf_worker2 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -88201,7 +88201,7 @@ var require_pdf_worker2 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -88219,7 +88219,7 @@ var require_pdf_worker2 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -88228,7 +88228,7 @@ var require_pdf_worker2 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -88237,7 +88237,7 @@ var require_pdf_worker2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -88246,7 +88246,7 @@ var require_pdf_worker2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -88255,7 +88255,7 @@ var require_pdf_worker2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -88265,7 +88265,7 @@ var require_pdf_worker2 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -88278,7 +88278,7 @@ var require_pdf_worker2 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -88291,7 +88291,7 @@ var require_pdf_worker2 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -94329,7 +94329,7 @@ var require_pdf_worker2 = __commonJS({
                 };
               }
               JpegImage2.prototype = {
-                parse: function parse(data) {
+                parse: function parse2(data) {
                   function readUint16() {
                     var value = data[offset] << 8 | data[offset + 1];
                     offset += 2;
@@ -100006,7 +100006,7 @@ var require_pdf_worker2 = __commonJS({
                     args: [x1, y1, x2, y2, x3, y3]
                   });
                 }
-                function parse(code2) {
+                function parse2(code2) {
                   var i = 0;
                   while (i < code2.length) {
                     var stackClean = false;
@@ -100070,7 +100070,7 @@ var require_pdf_worker2 = __commonJS({
                         n = stack.pop() + font.subrsBias;
                         subrCode = font.subrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 11:
@@ -100256,7 +100256,7 @@ var require_pdf_worker2 = __commonJS({
                         n = stack.pop() + font.gsubrsBias;
                         subrCode = font.gsubrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 30:
@@ -100322,7 +100322,7 @@ var require_pdf_worker2 = __commonJS({
                     }
                   }
                 }
-                parse(code);
+                parse2(code);
               }
               var noop = "";
               function CompiledFont(fontMatrix) {
@@ -114992,7 +114992,7 @@ var require_pdf2 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -115354,7 +115354,7 @@ var require_pdf2 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -115372,7 +115372,7 @@ var require_pdf2 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -115381,7 +115381,7 @@ var require_pdf2 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -115390,7 +115390,7 @@ var require_pdf2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -115399,7 +115399,7 @@ var require_pdf2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -115408,7 +115408,7 @@ var require_pdf2 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -115418,7 +115418,7 @@ var require_pdf2 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -115431,7 +115431,7 @@ var require_pdf2 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -115444,7 +115444,7 @@ var require_pdf2 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -122997,8 +122997,8 @@ var require_pdf2 = __commonJS({
               }
             }
             var fs20 = require("fs");
-            var http = require("http");
-            var https = require("https");
+            var http2 = require("http");
+            var https2 = require("https");
             var url = require("url");
             var PDFNodeStream = (function() {
               function PDFNodeStream2(options) {
@@ -123277,9 +123277,9 @@ var require_pdf2 = __commonJS({
                 };
                 _this5._request = null;
                 if (_this5._url.protocol === "http:") {
-                  _this5._request = http.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = http2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 } else {
-                  _this5._request = https.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = https2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 }
                 _this5._request.on("error", function(reason) {
                   _this5._errored = true;
@@ -123307,11 +123307,11 @@ var require_pdf2 = __commonJS({
                 _this6._httpHeaders["Range"] = "bytes=" + start + "-" + (end - 1);
                 _this6._request = null;
                 if (_this6._url.protocol === "http:") {
-                  _this6._request = http.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = http2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 } else {
-                  _this6._request = https.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = https2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 }
@@ -153463,7 +153463,7 @@ var require_pdf_worker3 = __commonJS({
                     args: [x1, y1, x2, y2, x3, y3]
                   });
                 }
-                function parse(code2) {
+                function parse2(code2) {
                   var i = 0;
                   while (i < code2.length) {
                     var stackClean = false;
@@ -153527,7 +153527,7 @@ var require_pdf_worker3 = __commonJS({
                         n = stack.pop() + font.subrsBias;
                         subrCode = font.subrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 11:
@@ -153713,7 +153713,7 @@ var require_pdf_worker3 = __commonJS({
                         n = stack.pop() + font.gsubrsBias;
                         subrCode = font.gsubrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 30:
@@ -153779,7 +153779,7 @@ var require_pdf_worker3 = __commonJS({
                     }
                   }
                 }
-                parse(code);
+                parse2(code);
               }
               var noop = "";
               function CompiledFont(fontMatrix) {
@@ -158339,7 +158339,7 @@ var require_pdf_worker3 = __commonJS({
                 };
               }
               JpegImage2.prototype = {
-                parse: function parse(data) {
+                parse: function parse2(data) {
                   function readUint16() {
                     var value = data[offset] << 8 | data[offset + 1];
                     offset += 2;
@@ -164488,7 +164488,7 @@ var require_pdf_worker3 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -164850,7 +164850,7 @@ var require_pdf_worker3 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -164868,7 +164868,7 @@ var require_pdf_worker3 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -164877,7 +164877,7 @@ var require_pdf_worker3 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -164886,7 +164886,7 @@ var require_pdf_worker3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -164895,7 +164895,7 @@ var require_pdf_worker3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -164904,7 +164904,7 @@ var require_pdf_worker3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -164914,7 +164914,7 @@ var require_pdf_worker3 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -164927,7 +164927,7 @@ var require_pdf_worker3 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -164940,7 +164940,7 @@ var require_pdf_worker3 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -178054,7 +178054,7 @@ var require_pdf3 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -178416,7 +178416,7 @@ var require_pdf3 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -178434,7 +178434,7 @@ var require_pdf3 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -178443,7 +178443,7 @@ var require_pdf3 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -178452,7 +178452,7 @@ var require_pdf3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -178461,7 +178461,7 @@ var require_pdf3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -178470,7 +178470,7 @@ var require_pdf3 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -178480,7 +178480,7 @@ var require_pdf3 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -178493,7 +178493,7 @@ var require_pdf3 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -178506,7 +178506,7 @@ var require_pdf3 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -180268,7 +180268,7 @@ var require_pdf_worker4 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -180630,7 +180630,7 @@ var require_pdf_worker4 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -180648,7 +180648,7 @@ var require_pdf_worker4 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -180657,7 +180657,7 @@ var require_pdf_worker4 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -180666,7 +180666,7 @@ var require_pdf_worker4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -180675,7 +180675,7 @@ var require_pdf_worker4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -180684,7 +180684,7 @@ var require_pdf_worker4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -180694,7 +180694,7 @@ var require_pdf_worker4 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -180707,7 +180707,7 @@ var require_pdf_worker4 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -180720,7 +180720,7 @@ var require_pdf_worker4 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -194299,7 +194299,7 @@ var require_pdf_worker4 = __commonJS({
                 };
               }
               JpegImage2.prototype = {
-                parse: function parse(data) {
+                parse: function parse2(data) {
                   var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {}, _ref$dnlScanLines = _ref.dnlScanLines, dnlScanLines = _ref$dnlScanLines === void 0 ? null : _ref$dnlScanLines;
                   function readUint16() {
                     var value = data[offset] << 8 | data[offset + 1];
@@ -215210,7 +215210,7 @@ var require_pdf_worker4 = __commonJS({
                     args: [x1, y1, x2, y2, x3, y3]
                   });
                 }
-                function parse(code2) {
+                function parse2(code2) {
                   var i = 0;
                   while (i < code2.length) {
                     var stackClean = false;
@@ -215292,7 +215292,7 @@ var require_pdf_worker4 = __commonJS({
                           subrCode = font.subrs[n + font.subrsBias];
                         }
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 11:
@@ -215478,7 +215478,7 @@ var require_pdf_worker4 = __commonJS({
                         n = stack.pop() + font.gsubrsBias;
                         subrCode = font.gsubrs[n];
                         if (subrCode) {
-                          parse(subrCode);
+                          parse2(subrCode);
                         }
                         break;
                       case 30:
@@ -215544,7 +215544,7 @@ var require_pdf_worker4 = __commonJS({
                     }
                   }
                 }
-                parse(code);
+                parse2(code);
               }
               var noop = "";
               function CompiledFont(fontMatrix) {
@@ -220336,7 +220336,7 @@ var require_pdf_worker4 = __commonJS({
                       });
                   }
                 },
-                parse: function parse(_ref4) {
+                parse: function parse2(_ref4) {
                   var xref = _ref4.xref, isEvalSupported = _ref4.isEvalSupported, fn = _ref4.fn;
                   var IR = this.getIR({
                     xref,
@@ -223650,7 +223650,7 @@ var require_pdf4 = __commonJS({
                   return encodeURIComponent(c);
                 }
                 var EOF, ALPHA = /[a-zA-Z]/, ALPHANUMERIC = /[a-zA-Z0-9\+\-\.]/;
-                function parse(input, stateOverride, base) {
+                function parse2(input, stateOverride, base) {
                   function err(message) {
                     errors.push(message);
                   }
@@ -224012,7 +224012,7 @@ var require_pdf4 = __commonJS({
                   this._url = url;
                   clear.call(this);
                   var input = url.replace(/^[ \t\r\n\f]+|[ \t\r\n\f]+$/g, "");
-                  parse.call(this, input, null, base);
+                  parse2.call(this, input, null, base);
                 }
                 JURL.prototype = {
                   toString: function toString() {
@@ -224030,7 +224030,7 @@ var require_pdf4 = __commonJS({
                   },
                   set href(value) {
                     clear.call(this);
-                    parse.call(this, value);
+                    parse2.call(this, value);
                   },
                   get protocol() {
                     return this._scheme + ":";
@@ -224039,7 +224039,7 @@ var require_pdf4 = __commonJS({
                     if (this._isInvalid) {
                       return;
                     }
-                    parse.call(this, value + ":", "scheme start");
+                    parse2.call(this, value + ":", "scheme start");
                   },
                   get host() {
                     return this._isInvalid ? "" : this._port ? this._host + ":" + this._port : this._host;
@@ -224048,7 +224048,7 @@ var require_pdf4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "host");
+                    parse2.call(this, value, "host");
                   },
                   get hostname() {
                     return this._host;
@@ -224057,7 +224057,7 @@ var require_pdf4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "hostname");
+                    parse2.call(this, value, "hostname");
                   },
                   get port() {
                     return this._port;
@@ -224066,7 +224066,7 @@ var require_pdf4 = __commonJS({
                     if (this._isInvalid || !this._isRelative) {
                       return;
                     }
-                    parse.call(this, value, "port");
+                    parse2.call(this, value, "port");
                   },
                   get pathname() {
                     return this._isInvalid ? "" : this._isRelative ? "/" + this._path.join("/") : this._schemeData;
@@ -224076,7 +224076,7 @@ var require_pdf4 = __commonJS({
                       return;
                     }
                     this._path = [];
-                    parse.call(this, value, "relative path start");
+                    parse2.call(this, value, "relative path start");
                   },
                   get search() {
                     return this._isInvalid || !this._query || this._query === "?" ? "" : this._query;
@@ -224089,7 +224089,7 @@ var require_pdf4 = __commonJS({
                     if (value[0] === "?") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "query");
+                    parse2.call(this, value, "query");
                   },
                   get hash() {
                     return this._isInvalid || !this._fragment || this._fragment === "#" ? "" : this._fragment;
@@ -224102,7 +224102,7 @@ var require_pdf4 = __commonJS({
                     if (value[0] === "#") {
                       value = value.slice(1);
                     }
-                    parse.call(this, value, "fragment");
+                    parse2.call(this, value, "fragment");
                   },
                   get origin() {
                     var host;
@@ -238007,8 +238007,8 @@ var require_pdf4 = __commonJS({
               }
             }
             var fs20 = require("fs");
-            var http = require("http");
-            var https = require("https");
+            var http2 = require("http");
+            var https2 = require("https");
             var url = require("url");
             var fileUriRegex = /^file:\/\/\/[a-zA-Z]:\//;
             function parseUrl(sourceUrl) {
@@ -238308,9 +238308,9 @@ var require_pdf4 = __commonJS({
                 };
                 _this5._request = null;
                 if (_this5._url.protocol === "http:") {
-                  _this5._request = http.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = http2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 } else {
-                  _this5._request = https.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
+                  _this5._request = https2.request(createRequestOptions(_this5._url, stream.httpHeaders), handleResponse);
                 }
                 _this5._request.on("error", function(reason) {
                   _this5._errored = true;
@@ -238338,11 +238338,11 @@ var require_pdf4 = __commonJS({
                 _this6._httpHeaders["Range"] = "bytes=" + start + "-" + (end - 1);
                 _this6._request = null;
                 if (_this6._url.protocol === "http:") {
-                  _this6._request = http.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = http2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 } else {
-                  _this6._request = https.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
+                  _this6._request = https2.request(createRequestOptions(_this6._url, _this6._httpHeaders), function(response) {
                     _this6._setReadableStream(response);
                   });
                 }
@@ -239659,6 +239659,8 @@ var os9 = __toESM(require("node:os"), 1);
 var os7 = __toESM(require("node:os"), 1);
 var fs17 = __toESM(require("node:fs"), 1);
 var path16 = __toESM(require("node:path"), 1);
+var http = __toESM(require("node:http"), 1);
+var https = __toESM(require("node:https"), 1);
 var readline2 = __toESM(require("node:readline"), 1);
 
 // src/tools/readFile.ts
@@ -239865,6 +239867,39 @@ var readFileDefinition = {
 // src/tools/writeFile.ts
 var fs3 = __toESM(require("node:fs"), 1);
 var path3 = __toESM(require("node:path"), 1);
+var SECRET_PATTERNS = [
+  [/\bsk-[a-zA-Z0-9]{20,}/g, "OpenAI API key (sk-...)"],
+  [/\bor-[a-zA-Z0-9]{20,}/g, "O'Route API key (or-...)"],
+  [/\bAKIA[A-Z0-9]{12,}/g, "AWS Access Key (AKIA...)"],
+  [/password\s*[=:]\s*["'][^"']{4,}["']/gi, "Hardcoded password"],
+  [/secret\s*[=:]\s*["'][^"']{4,}["']/gi, "Hardcoded secret"],
+  [/token\s*[=:]\s*["'][^"']{8,}["']/gi, "Hardcoded token"],
+  [/\bghp_[a-zA-Z0-9]{30,}/g, "GitHub personal access token"],
+  [/\bglpat-[a-zA-Z0-9\-]{20,}/g, "GitLab personal access token"],
+  [/\bxox[bprs]-[a-zA-Z0-9\-]{10,}/g, "Slack token"],
+  [/-----BEGIN (?:RSA )?PRIVATE KEY-----/g, "Private key"]
+];
+function scanForSecrets(content) {
+  const warnings = [];
+  for (const [pattern, label] of SECRET_PATTERNS) {
+    pattern.lastIndex = 0;
+    if (pattern.test(content)) {
+      warnings.push(label);
+    }
+  }
+  return warnings;
+}
+function checkWritePermission(dirPath) {
+  try {
+    fs3.accessSync(dirPath, fs3.constants.W_OK);
+  } catch {
+    throw new Error(
+      `No write permission on directory: ${dirPath}
+  Check permissions with: ls -la "${path3.dirname(dirPath)}"
+  Fix with: chmod u+w "${dirPath}"`
+    );
+  }
+}
 function writeFileTool(input, cwd) {
   const resolved = smartResolve(input.path, cwd);
   const isNew = !fs3.existsSync(resolved);
@@ -239872,9 +239907,22 @@ function writeFileTool(input, cwd) {
   if (!fs3.existsSync(dir)) {
     fs3.mkdirSync(dir, { recursive: true });
   }
+  checkWritePermission(dir);
+  if (!isNew) {
+    checkWritePermission(path3.dirname(resolved));
+    try {
+      fs3.accessSync(resolved, fs3.constants.W_OK);
+    } catch {
+      throw new Error(
+        `No write permission on file: ${resolved}
+  Fix with: chmod u+w "${resolved}"`
+      );
+    }
+  }
+  const secretWarnings = scanForSecrets(input.content);
   fs3.writeFileSync(resolved, input.content, "utf-8");
   const stat = fs3.statSync(resolved);
-  return { success: true, bytesWritten: stat.size, isNew };
+  return { success: true, bytesWritten: stat.size, isNew, secretWarnings };
 }
 function generateDiff(filePath, newContent, cwd) {
   const resolved = smartResolve(filePath, cwd);
@@ -240523,8 +240571,12 @@ function diffFilesTool(input, cwd) {
   const pathB = smartResolve(input.file_b, cwd);
   if (!fs9.existsSync(pathA)) throw new Error(`File not found: ${pathA}`);
   if (!fs9.existsSync(pathB)) throw new Error(`File not found: ${pathB}`);
-  const linesA = fs9.readFileSync(pathA, "utf-8").split("\n");
-  const linesB = fs9.readFileSync(pathB, "utf-8").split("\n");
+  let linesA = fs9.readFileSync(pathA, "utf-8").split("\n");
+  let linesB = fs9.readFileSync(pathB, "utf-8").split("\n");
+  if (input.ignoreWhitespace) {
+    linesA = linesA.map((l) => l.trim());
+    linesB = linesB.map((l) => l.trim());
+  }
   const result = [];
   result.push(`--- ${input.file_a}`);
   result.push(`+++ ${input.file_b}`);
@@ -240584,20 +240636,82 @@ function diffFilesTool(input, cwd) {
 
 // src/ui.ts
 var readline = __toESM(require("node:readline"), 1);
+var colorScheme = process.env["OROUTE_COLOR_SCHEME"] ?? "default";
+var THEME_PRESETS = {
+  default: {
+    green: "\x1B[32m",
+    cyan: "\x1B[36m",
+    yellow: "\x1B[33m",
+    red: "\x1B[31m",
+    magenta: "\x1B[35m",
+    blue: "\x1B[34m",
+    gray: "\x1B[90m",
+    white: "\x1B[97m"
+  },
+  nord: {
+    green: "\x1B[38;2;163;190;140m",
+    // #A3BE8C
+    cyan: "\x1B[38;2;136;192;208m",
+    // #88C0D0
+    yellow: "\x1B[38;2;235;203;139m",
+    // #EBCB8B
+    red: "\x1B[38;2;191;97;106m",
+    // #BF616A
+    magenta: "\x1B[38;2;180;142;173m",
+    // #B48EAD
+    blue: "\x1B[38;2;129;161;193m",
+    // #81A1C1
+    gray: "\x1B[38;2;76;86;106m",
+    // #4C566A
+    white: "\x1B[38;2;236;239;244m"
+    // #ECEFF4
+  },
+  dracula: {
+    green: "\x1B[38;2;80;250;123m",
+    // #50FA7B
+    cyan: "\x1B[38;2;139;233;253m",
+    // #8BE9FD
+    yellow: "\x1B[38;2;241;250;140m",
+    // #F1FA8C
+    red: "\x1B[38;2;255;85;85m",
+    // #FF5555
+    magenta: "\x1B[38;2;255;121;198m",
+    // #FF79C6
+    blue: "\x1B[38;2;189;147;249m",
+    // #BD93F9
+    gray: "\x1B[38;2;98;114;164m",
+    // #6272A4
+    white: "\x1B[38;2;248;248;242m"
+    // #F8F8F2
+  }
+};
+var theme = THEME_PRESETS[colorScheme] ?? THEME_PRESETS.default;
 var isLightTheme = process.env["OROUTE_THEME"] === "light";
-var GREEN = isLightTheme ? "\x1B[32m" : "\x1B[32m";
-var GRAY = isLightTheme ? "\x1B[37m" : "\x1B[90m";
+var GREEN = isLightTheme ? "\x1B[32m" : theme.green;
+var GRAY = isLightTheme ? "\x1B[37m" : theme.gray;
 var BOLD = "\x1B[1m";
 var DIM = "\x1B[2m";
 var RESET = "\x1B[0m";
-var CYAN = isLightTheme ? "\x1B[36m" : "\x1B[36m";
-var YELLOW = isLightTheme ? "\x1B[33m" : "\x1B[33m";
-var WHITE = isLightTheme ? "\x1B[30m" : "\x1B[97m";
-var RED = "\x1B[31m";
-var MAGENTA = "\x1B[35m";
-var BLUE = isLightTheme ? "\x1B[34m" : "\x1B[34m";
+var CYAN = isLightTheme ? "\x1B[36m" : theme.cyan;
+var YELLOW = isLightTheme ? "\x1B[33m" : theme.yellow;
+var WHITE = isLightTheme ? "\x1B[30m" : theme.white;
+var RED = isLightTheme ? "\x1B[31m" : theme.red;
+var MAGENTA = isLightTheme ? "\x1B[35m" : theme.magenta;
+var BLUE = isLightTheme ? "\x1B[34m" : theme.blue;
 var BG_YELLOW = "\x1B[43m";
 var BLACK = "\x1B[30m";
+var LOG_LEVEL_PRIORITY = {
+  error: 0,
+  warn: 1,
+  info: 2,
+  debug: 3,
+  trace: 4
+};
+var currentLogLevel = (() => {
+  const env = (process.env["OROUTE_LOG_LEVEL"] ?? "info").toLowerCase();
+  if (env in LOG_LEVEL_PRIORITY) return env;
+  return "info";
+})();
 var TOOL_COLORS = {
   read_file: CYAN,
   write_file: YELLOW,
@@ -240924,42 +241038,14 @@ function extractPackageJson(filePath) {
     return "";
   }
 }
-function getGitBranch(cwd) {
-  try {
-    return (0, import_node_child_process2.execSync)("git rev-parse --abbrev-ref HEAD 2>/dev/null", { cwd, encoding: "utf-8" }).trim() || void 0;
-  } catch {
-    return void 0;
-  }
-}
-function getGitStatusSummary(cwd) {
-  try {
-    const isGit = (0, import_node_child_process2.execSync)("git rev-parse --is-inside-work-tree 2>/dev/null", { cwd, encoding: "utf-8" }).trim();
-    if (isGit !== "true") return void 0;
-    const status = (0, import_node_child_process2.execSync)("git status --short 2>/dev/null", { cwd, encoding: "utf-8" }).trim();
-    if (!status) return "clean";
-    const lines = status.split("\n");
-    const modified = lines.filter((l) => l.startsWith(" M") || l.startsWith("M ")).length;
-    const added = lines.filter((l) => l.startsWith("A ") || l.startsWith("??")).length;
-    const deleted = lines.filter((l) => l.startsWith(" D") || l.startsWith("D ")).length;
-    const parts = [];
-    if (modified > 0) parts.push(`${modified} modified`);
-    if (added > 0) parts.push(`${added} untracked/added`);
-    if (deleted > 0) parts.push(`${deleted} deleted`);
-    return parts.join(", ") || "clean";
-  } catch {
-    return void 0;
-  }
-}
 function loadProjectContext(cwd) {
   const contextFiles = [];
-  const candidates = [
+  const essentialCandidates = [
     { name: "CLAUDE.md", loader: () => safeReadFile(path9.join(cwd, "CLAUDE.md")) },
-    { name: ".claude/CLAUDE.md", loader: () => safeReadFile(path9.join(cwd, ".claude", "CLAUDE.md")) },
-    { name: ".oroute.md", loader: () => safeReadFile(path9.join(cwd, ".oroute.md")) },
     { name: "package.json", loader: () => extractPackageJson(path9.join(cwd, "package.json")) }
   ];
   let totalChars = 0;
-  for (const c of candidates) {
+  for (const c of essentialCandidates) {
     if (totalChars >= MAX_CONTEXT_CHARS) break;
     const content = c.loader();
     if (!content) continue;
@@ -240968,9 +241054,7 @@ function loadProjectContext(cwd) {
     contextFiles.push({ name: c.name, content: trimmed });
     totalChars += trimmed.length;
   }
-  const gitBranch = getGitBranch(cwd);
-  const gitStatus = getGitStatusSummary(cwd);
-  return { files: contextFiles, gitBranch, gitStatus };
+  return { files: contextFiles, gitBranch: void 0, gitStatus: void 0 };
 }
 function buildContextString(ctx) {
   const parts = [];
@@ -241105,7 +241189,7 @@ ${summaryParts.join("\n")}`
 }
 
 // src/streaming.ts
-async function parseSSEStream(response, onTextDelta) {
+async function parseSSEStream(response, onTextDelta, onTokenUpdate) {
   const contentBlocks = [];
   let stopReason = null;
   let usage = { input_tokens: 0, output_tokens: 0 };
@@ -241138,6 +241222,7 @@ async function parseSSEStream(response, onTextDelta) {
           },
           setUsage: (u) => {
             usage = u;
+            if (onTokenUpdate) onTokenUpdate(u);
           },
           setModel: (m) => {
             model = m;
@@ -241215,7 +241300,9 @@ function processSSEEvent(evt, contentBlocks, onTextDelta, cb) {
         if (block.type === "text") {
           block.text = (block.text ?? "") + text;
         }
-        onTextDelta(text);
+        for (const char of text) {
+          onTextDelta(char);
+        }
       } else if (delta["type"] === "input_json_delta") {
         const partial = delta["partial_json"];
         if (block.type === "tool_use") {
@@ -241368,6 +241455,15 @@ function printCostSummary(stats) {
   }
   console.log();
 }
+function isBudgetExceeded(stats, maxCostPerSession) {
+  if (maxCostPerSession <= 0) return false;
+  return estimateCost(stats) >= maxCostPerSession;
+}
+function printBudgetWarning(stats, maxCostPerSession) {
+  const cost = estimateCost(stats);
+  console.log(`${YELLOW}  \u26A0 Session cost ($${cost.toFixed(4)}) has reached the budget limit ($${maxCostPerSession.toFixed(4)}).${RESET}`);
+  console.log(`${GRAY}  Set maxCost in .oroute/config.json to adjust, or type "continue" to proceed.${RESET}`);
+}
 function printExitSummary(stats) {
   if (stats.requests === 0) return;
   const cost = estimateCost(stats);
@@ -241380,6 +241476,26 @@ var fs12 = __toESM(require("node:fs"), 1);
 var path11 = __toESM(require("node:path"), 1);
 var os3 = __toESM(require("node:os"), 1);
 var SESSIONS_DIR = path11.join(os3.homedir(), ".oroute", "sessions");
+var SESSION_CACHE_MAX = 3;
+var sessionCache = /* @__PURE__ */ new Map();
+function cacheSession(id, session) {
+  sessionCache.delete(id);
+  sessionCache.set(id, session);
+  if (sessionCache.size > SESSION_CACHE_MAX) {
+    const oldestKey = sessionCache.keys().next().value;
+    if (oldestKey !== void 0) {
+      sessionCache.delete(oldestKey);
+    }
+  }
+}
+function getCachedSession(id) {
+  const session = sessionCache.get(id);
+  if (session) {
+    sessionCache.delete(id);
+    sessionCache.set(id, session);
+  }
+  return session;
+}
 function ensureSessionsDir() {
   if (!fs12.existsSync(SESSIONS_DIR)) {
     fs12.mkdirSync(SESSIONS_DIR, { recursive: true });
@@ -241432,19 +241548,28 @@ function listSessions(limit = 10) {
 }
 function loadSession(id) {
   ensureSessionsDir();
+  const cached = getCachedSession(id);
+  if (cached) return cached;
   const exactPath = path11.join(SESSIONS_DIR, `${id}.json`);
   if (fs12.existsSync(exactPath)) {
     try {
-      return JSON.parse(fs12.readFileSync(exactPath, "utf-8"));
+      const session = JSON.parse(fs12.readFileSync(exactPath, "utf-8"));
+      cacheSession(id, session);
+      return session;
     } catch {
       return null;
     }
   }
   const files = fs12.readdirSync(SESSIONS_DIR).filter((f) => f.endsWith(".json") && f.startsWith(id)).sort().reverse();
   if (files.length === 0) return null;
+  const resolvedId = files[0].replace(".json", "");
+  const cachedPartial = getCachedSession(resolvedId);
+  if (cachedPartial) return cachedPartial;
   const filePath = path11.join(SESSIONS_DIR, files[0]);
   try {
-    return JSON.parse(fs12.readFileSync(filePath, "utf-8"));
+    const session = JSON.parse(fs12.readFileSync(filePath, "utf-8"));
+    cacheSession(resolvedId, session);
+    return session;
   } catch {
     return null;
   }
@@ -241695,6 +241820,7 @@ function getActiveTasks() {
 var import_meta = {};
 var debugMode = false;
 var dryRunMode = false;
+var skipConfirmations = false;
 var lastAiResponse = "";
 var undoStack = [];
 function isDryRun() {
@@ -241779,6 +241905,9 @@ var ALL_COMMANDS = [
   "/undo",
   "/next-task",
   "/dry-run",
+  "/estimate-cost",
+  "/skip-confirmation",
+  "/yes",
   // Conversion / Info
   "/docx",
   "/xlsx",
@@ -241799,7 +241928,20 @@ var ALL_COMMANDS = [
   "/btw",
   "/batch",
   "/color",
-  "/terminal"
+  "/terminal",
+  // New features (11-17)
+  "/explain",
+  "/refs",
+  "/resolve",
+  "/stash",
+  "/changelog",
+  // Navigation & Search (41, 43)
+  "/goto",
+  "/find",
+  // Code analysis (Features 7, 8, 10)
+  "/test-gen",
+  "/dead-code",
+  "/deps"
 ];
 var COMMAND_DESCRIPTIONS = {
   "/help": "Show all available commands",
@@ -241884,7 +242026,17 @@ var COMMAND_DESCRIPTIONS = {
   "/btw": "Quick side question",
   "/batch": "Batch operations",
   "/color": "Terminal color palette",
-  "/terminal": "Terminal settings info"
+  "/terminal": "Terminal settings info",
+  "/explain": "Explain code at file:line using AI",
+  "/refs": "Find all references of a symbol across project",
+  "/resolve": "Detect and AI-resolve merge conflicts",
+  "/stash": "Git stash management (save/pop/list)",
+  "/changelog": "Generate CHANGELOG.md from git log",
+  "/goto": "Navigate to type/function/class definition",
+  "/find": "Semantic code search using AI",
+  "/test-gen": "Generate tests for current file context",
+  "/dead-code": "Detect unused imports/exports",
+  "/deps": "Show dependency graph for a file"
 };
 var KNOWN_COMMANDS = new Set(ALL_COMMANDS);
 function shell(cmd, cwd) {
@@ -242066,20 +242218,36 @@ function handleSlashCommand(input, ctx) {
       console.log();
       return "handled";
     case "/pr":
-      console.log(`${CYAN}  Creating pull request...${RESET}`);
-      shellPrint('gh pr create --web 2>/dev/null || echo "  Install GitHub CLI: brew install gh"', ctx.cwd);
+      handlePr(arg, ctx);
       return "handled";
     case "/pull":
       console.log(`${CYAN}  Pulling latest changes...${RESET}`);
       shellPrint("git pull", ctx.cwd);
       return "handled";
     case "/push":
-      console.log(`${CYAN}  Pushing to remote...${RESET}`);
-      shellPrint("git push", ctx.cwd);
+      handlePush(ctx);
       return "handled";
     case "/commit":
       handleCommit(arg, ctx);
       return "handled";
+    case "/stash":
+      handleStash(arg, ctx);
+      return "handled";
+    case "/changelog":
+      handleChangelog(ctx);
+      return "handled";
+    case "/resolve":
+      handleResolveConflicts(ctx);
+      return "handled";
+    // -----------------------------------------------------------------------
+    // Navigation & Search (41, 43)
+    // -----------------------------------------------------------------------
+    case "/goto":
+      handleGoto(arg, ctx);
+      return "handled";
+    case "/find":
+      handleFind(arg, ctx);
+      return "handled";
     // -----------------------------------------------------------------------
     // File / Code commands
     // -----------------------------------------------------------------------
@@ -242099,6 +242267,12 @@ function handleSlashCommand(input, ctx) {
         console.log();
       }
       return "handled";
+    case "/explain":
+      handleExplain(arg, ctx);
+      return "handled";
+    case "/refs":
+      handleRefs(arg, ctx);
+      return "handled";
     case "/open":
       if (!arg) {
         console.log(`${YELLOW}  Usage: /open <file|url>  (opens in system default app)${RESET}`);
@@ -242258,6 +242432,26 @@ function handleSlashCommand(input, ctx) {
         '"\uB2E4\uC74C \uC791\uC5C5" or "Pending Tasks\uC5D0\uC11C \uB2E4\uC74C \uAC70 \uC9C4\uD589\uD574\uC918"'
       );
       return "handled";
+    case "/estimate-cost": {
+      const tokenCount = ctx.messages.reduce((sum, m) => {
+        const text = typeof m.content === "string" ? m.content : JSON.stringify(m.content);
+        return sum + Math.ceil(text.length / 4);
+      }, 0);
+      const estInputCost = tokenCount / 1e6 * 3;
+      const estOutputCost = 2e3 / 1e6 * 15;
+      console.log(`${CYAN}  Estimated cost for next request:${RESET}`);
+      console.log(`${GRAY}    Context: ~${tokenCount.toLocaleString()} tokens${RESET}`);
+      console.log(`${GRAY}    Input:   ~$${estInputCost.toFixed(4)} (Sonnet rate)${RESET}`);
+      console.log(`${GRAY}    Output:  ~$${estOutputCost.toFixed(4)} (est. 2K tokens)${RESET}`);
+      console.log(`${GRAY}    Total:   ~$${(estInputCost + estOutputCost).toFixed(4)}${RESET}`);
+      console.log(`${GRAY}    (Auto-routing may select cheaper model)${RESET}`);
+      return "handled";
+    }
+    case "/skip-confirmation":
+    case "/yes":
+      skipConfirmations = !skipConfirmations;
+      console.log(`${skipConfirmations ? YELLOW : GREEN}  Confirmations: ${skipConfirmations ? "SKIPPED (auto-yes)" : "ENABLED (will ask before writes)"}${RESET}`);
+      return "handled";
     // -----------------------------------------------------------------------
     // Conversion / Info — natural language hints
     // -----------------------------------------------------------------------
@@ -242353,6 +242547,18 @@ function handleSlashCommand(input, ctx) {
       );
       return "handled";
     // -----------------------------------------------------------------------
+    // Code analysis (Features 7, 8, 10)
+    // -----------------------------------------------------------------------
+    case "/test-gen":
+      handleTestGen(arg, ctx);
+      return "handled";
+    case "/dead-code":
+      handleDeadCode(arg, ctx);
+      return "handled";
+    case "/deps":
+      handleDeps(arg, ctx);
+      return "handled";
+    // -----------------------------------------------------------------------
     // Misc
     // -----------------------------------------------------------------------
     case "/btw":
@@ -242637,6 +242843,204 @@ function handleUndo() {
     console.log(`${RED}  Failed to undo: ${err instanceof Error ? err.message : String(err)}${RESET}`);
   }
 }
+function handleExplain(arg, ctx) {
+  if (!arg) {
+    console.log(`${YELLOW}  Usage: /explain <file:line>  (e.g. /explain src/agent.ts:42)${RESET}`);
+    return;
+  }
+  const match = arg.match(/^(.+?):(\d+)$/);
+  if (!match) {
+    console.log(`${YELLOW}  Usage: /explain <file:line>  (e.g. /explain src/agent.ts:42)${RESET}`);
+    return;
+  }
+  const filePath = path14.resolve(ctx.cwd, match[1]);
+  const lineNum = parseInt(match[2], 10);
+  if (!fs15.existsSync(filePath)) {
+    console.log(`${RED}  File not found: ${filePath}${RESET}`);
+    return;
+  }
+  try {
+    const fileLines = fs15.readFileSync(filePath, "utf-8").split("\n");
+    const start = Math.max(0, lineNum - 10);
+    const end = Math.min(fileLines.length, lineNum + 10);
+    const snippet = fileLines.slice(start, end).map((l, i) => {
+      const num = start + i + 1;
+      const marker = num === lineNum ? ">>>" : "   ";
+      return `${marker} ${String(num).padStart(4)} | ${l}`;
+    }).join("\n");
+    console.log();
+    console.log(`${WHITE}  ${match[1]}:${lineNum}${RESET}`);
+    console.log(`${GRAY}${"\u2500".repeat(50)}${RESET}`);
+    console.log(snippet);
+    console.log(`${GRAY}${"\u2500".repeat(50)}${RESET}`);
+    console.log();
+    const prompt = `Please explain this code step by step. File: ${match[1]}, around line ${lineNum}:
+
+\`\`\`
+${snippet}
+\`\`\``;
+    ctx.messages.push({ role: "user", content: prompt });
+    ctx.setMessages(ctx.messages);
+    console.log(`${GRAY}  Asking AI to explain...${RESET}`);
+  } catch (err) {
+    console.log(`${RED}  Failed to read: ${err instanceof Error ? err.message : String(err)}${RESET}`);
+  }
+}
+function handleRefs(arg, ctx) {
+  if (!arg) {
+    console.log(`${YELLOW}  Usage: /refs <symbol>  (e.g. /refs handleSlashCommand)${RESET}`);
+    return;
+  }
+  console.log(`${CYAN}  Searching for "${arg}" across project...${RESET}`);
+  console.log();
+  const escaped = arg.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const output = shell(`grep -rn --color=never "${escaped}" . --include='*.ts' --include='*.tsx' --include='*.js' --include='*.jsx' --include='*.py' --include='*.go' --include='*.rs' --include='*.java' --exclude-dir=node_modules --exclude-dir=.git --exclude-dir=dist --exclude-dir=.next 2>/dev/null | head -50`, ctx.cwd);
+  if (!output || output.includes("Command failed")) {
+    console.log(`${GRAY}  No references found for "${arg}".${RESET}`);
+  } else {
+    const resultLines = output.split("\n");
+    console.log(`${WHITE}  Found ${resultLines.length} reference(s):${RESET}`);
+    console.log();
+    for (const line of resultLines) console.log(`  ${line}`);
+  }
+  console.log();
+}
+function handlePr(_arg, ctx) {
+  const ghCheck = shell("which gh 2>/dev/null", ctx.cwd);
+  if (!ghCheck || ghCheck.includes("Command failed")) {
+    console.log(`${YELLOW}  GitHub CLI not found. Install: brew install gh${RESET}`);
+    return;
+  }
+  console.log(`${CYAN}  Preparing pull request...${RESET}`);
+  console.log();
+  const branch = shell("git rev-parse --abbrev-ref HEAD", ctx.cwd);
+  if (!branch || branch === "HEAD") {
+    console.log(`${RED}  Not on a branch. Cannot create PR.${RESET}`);
+    return;
+  }
+  const recentCommits = shell("git log --oneline -5 2>/dev/null", ctx.cwd);
+  const firstCommitLine = recentCommits.split("\n")[0] ?? "";
+  const suggestedTitle = firstCommitLine.replace(/^[a-f0-9]+ /, "");
+  const mainBranch = shell('git remote show origin 2>/dev/null | grep "HEAD branch" | sed "s/.*: //"', ctx.cwd) || "main";
+  const diffStat = shell(`git diff ${mainBranch}...HEAD --stat 2>/dev/null`, ctx.cwd);
+  const commitCount = shell(`git rev-list --count ${mainBranch}..HEAD 2>/dev/null`, ctx.cwd);
+  console.log(`${WHITE}  Branch: ${branch}${RESET}`);
+  console.log(`${WHITE}  Base:   ${mainBranch}${RESET}`);
+  console.log(`${WHITE}  Commits: ${commitCount || "?"}${RESET}`);
+  if (diffStat) console.log(`${GRAY}${diffStat}${RESET}`);
+  console.log();
+  console.log(`${WHITE}  Suggested title: ${suggestedTitle}${RESET}`);
+  console.log(`${WHITE}  Recent commits:${RESET}`);
+  console.log(`${GRAY}${recentCommits}${RESET}`);
+  console.log();
+  const safeTitle = suggestedTitle.replace(/"/g, '\\"');
+  const safeDiff = (diffStat || "").replace(/\n/g, "\\n").replace(/"/g, '\\"');
+  shellPrint(`gh pr create --title "${safeTitle}" --body "## Changes\\n${safeDiff}\\n\\nCommits: ${commitCount || "?"}" --web 2>/dev/null || echo "  Failed to create PR. Run: gh auth login"`, ctx.cwd);
+  console.log();
+}
+function handleResolveConflicts(ctx) {
+  console.log(`${CYAN}  Scanning for merge conflicts...${RESET}`);
+  const output = shell('grep -rn "<<<<<<< " . --include="*.ts" --include="*.tsx" --include="*.js" --include="*.jsx" --include="*.json" --include="*.md" --exclude-dir=node_modules --exclude-dir=.git 2>/dev/null | head -20', ctx.cwd);
+  if (!output || output.includes("Command failed")) {
+    console.log(`${GREEN}  No merge conflicts found.${RESET}`);
+    console.log();
+    return;
+  }
+  const resultLines = output.split("\n").filter(Boolean);
+  const files = [...new Set(resultLines.map((l) => l.split(":")[0]))];
+  console.log(`${YELLOW}  Found conflicts in ${files.length} file(s):${RESET}`);
+  console.log();
+  for (const file of files) console.log(`${RED}  \u2716 ${file}${RESET}`);
+  console.log();
+  const prompt = `I have merge conflicts in these files:
+${files.map((f) => `- ${f}`).join("\n")}
+
+Please read each conflicted file, understand both sides of the conflict (between <<<<<<< and >>>>>>>) and suggest the best resolution. For each file, use edit_file to resolve the conflict by removing the conflict markers and keeping the correct code.`;
+  ctx.messages.push({ role: "user", content: prompt });
+  ctx.setMessages(ctx.messages);
+  console.log(`${GRAY}  Asking AI to resolve conflicts...${RESET}`);
+}
+function handleStash(arg, ctx) {
+  const stashParts = arg.trim().split(/\s+/);
+  const sub = stashParts[0] ?? "";
+  const stashMsg = stashParts.slice(1).join(" ");
+  switch (sub) {
+    case "":
+    case "save": {
+      console.log(`${CYAN}  Stashing changes...${RESET}`);
+      const cmd = stashMsg ? `git stash push -m "${stashMsg.replace(/"/g, '\\"')}"` : "git stash push";
+      shellPrint(cmd, ctx.cwd);
+      break;
+    }
+    case "pop":
+      console.log(`${CYAN}  Applying latest stash...${RESET}`);
+      shellPrint("git stash pop", ctx.cwd);
+      break;
+    case "list":
+      console.log(`${BOLD}  Git Stash List${RESET}`);
+      console.log(`${GRAY}  ${"\u2500".repeat(40)}${RESET}`);
+      shellPrint("git stash list", ctx.cwd);
+      break;
+    case "drop":
+      console.log(`${CYAN}  Dropping latest stash...${RESET}`);
+      shellPrint("git stash drop", ctx.cwd);
+      break;
+    case "show":
+      shellPrint("git stash show -p", ctx.cwd);
+      break;
+    default:
+      console.log(`${YELLOW}  Usage: /stash [save|pop|list|drop|show] [message]${RESET}`);
+  }
+  console.log();
+}
+function handlePush(ctx) {
+  const branch = shell("git rev-parse --abbrev-ref HEAD", ctx.cwd);
+  if (["main", "master", "production", "prod"].includes(branch)) {
+    console.log(`${RED}  \u26A0 WARNING: You are on the '${branch}' branch!${RESET}`);
+    console.log(`${YELLOW}  Direct pushes to ${branch} are discouraged.${RESET}`);
+    console.log(`${GRAY}  Consider creating a feature branch and a pull request instead.${RESET}`);
+    console.log(`${GRAY}  Pushing anyway...${RESET}`);
+  }
+  console.log(`${CYAN}  Pushing to remote...${RESET}`);
+  shellPrint("git push", ctx.cwd);
+}
+function handleChangelog(ctx) {
+  console.log(`${CYAN}  Generating changelog...${RESET}`);
+  console.log();
+  const log = shell("git log --oneline -20 2>/dev/null", ctx.cwd);
+  if (!log || log.includes("Command failed")) {
+    console.log(`${YELLOW}  No git history found.${RESET}`);
+    return;
+  }
+  const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const logLines = log.split("\n").filter(Boolean);
+  const categories = {};
+  for (const line of logLines) {
+    const commitMsg = line.replace(/^[a-f0-9]+ /, "");
+    const typeMatch = commitMsg.match(/^(feat|fix|refactor|docs|test|chore|perf|ci|style|build)(\(.*?\))?:\s*/);
+    const type = typeMatch ? typeMatch[1] : "other";
+    const msg = typeMatch ? commitMsg.replace(typeMatch[0], "") : commitMsg;
+    if (!categories[type]) categories[type] = [];
+    categories[type].push(msg);
+  }
+  const typeLabels = { feat: "Features", fix: "Bug Fixes", refactor: "Refactoring", docs: "Documentation", test: "Tests", perf: "Performance", chore: "Chores", other: "Other" };
+  const changelogEntryLines = [`## [Unreleased] - ${today}`, ""];
+  for (const [type, msgs] of Object.entries(categories)) {
+    changelogEntryLines.push(`### ${typeLabels[type] ?? type}`);
+    for (const msg of msgs) changelogEntryLines.push(`- ${msg}`);
+    changelogEntryLines.push("");
+  }
+  const changelog = changelogEntryLines.join("\n");
+  console.log(changelog);
+  const changelogPath = path14.join(ctx.cwd, "CHANGELOG.md");
+  const existing = fs15.existsSync(changelogPath) ? fs15.readFileSync(changelogPath, "utf-8") : "";
+  const header = existing.startsWith("# Changelog") ? "" : "# Changelog\n\n";
+  const newContent = existing ? existing.replace(/(# Changelog\n\n?)/, `$1${changelog}
+`) : `${header}${changelog}`;
+  fs15.writeFileSync(changelogPath, newContent, "utf-8");
+  console.log(`${GREEN}  Updated: ${changelogPath}${RESET}`);
+  console.log();
+}
 function printHelp() {
   console.log();
   console.log(`${BOLD}  O'Route CLI Commands${RESET}`);
@@ -242712,6 +243116,9 @@ function printHelp() {
   console.log(`${GREEN}  /seo${RESET}                    SEO analysis`);
   console.log(`${GREEN}  /security${RESET}               Security audit`);
   console.log(`${GREEN}  /deploy-audit${RESET}           Deployment readiness check`);
+  console.log(`${GREEN}  /test-gen [file]${RESET}        Generate tests for a file`);
+  console.log(`${GREEN}  /dead-code [scope]${RESET}      Detect unused imports/exports`);
+  console.log(`${GREEN}  /deps <file>${RESET}            Show dependency graph for a file`);
   console.log();
   console.log(`${BOLD}  Sub-agents & Plugins${RESET}`);
   console.log(`${GRAY}  ${"\u2500".repeat(50)}${RESET}`);
@@ -242870,12 +243277,30 @@ function printTools() {
 function printKeybindings() {
   console.log();
   console.log(`${BOLD}  Keyboard Shortcuts${RESET}`);
-  console.log(`${GRAY}  ${"\u2500".repeat(40)}${RESET}`);
-  console.log(`${WHITE}  Ctrl+C${RESET}              Cancel current input / interrupt`);
-  console.log(`${WHITE}  Ctrl+D${RESET}              Exit CLI`);
-  console.log(`${WHITE}  Up/Down${RESET}             Navigate input history`);
-  console.log(`${WHITE}  Tab${RESET}                 Autocomplete slash commands`);
-  console.log(`${WHITE}  """${RESET}                 Toggle multi-line input mode`);
+  console.log(`${GRAY}  ${"\u2500".repeat(50)}${RESET}`);
+  console.log();
+  console.log(`${BOLD}  Navigation${RESET}`);
+  console.log(`${GREEN}  Ctrl+C${RESET}              Cancel current input / interrupt streaming`);
+  console.log(`${GREEN}  Ctrl+D${RESET}              Exit CLI (end of input)`);
+  console.log(`${GREEN}  Ctrl+L${RESET}              Clear terminal screen`);
+  console.log();
+  console.log(`${BOLD}  History${RESET}`);
+  console.log(`${GREEN}  Up Arrow${RESET}            Previous command from history`);
+  console.log(`${GREEN}  Down Arrow${RESET}          Next command from history`);
+  console.log(`${GREEN}  Ctrl+R${RESET}              Reverse search history (shell)`);
+  console.log();
+  console.log(`${BOLD}  Editing${RESET}`);
+  console.log(`${GREEN}  Tab${RESET}                 Autocomplete slash commands`);
+  console.log(`${GREEN}  Ctrl+A${RESET}              Move cursor to start of line`);
+  console.log(`${GREEN}  Ctrl+E${RESET}              Move cursor to end of line`);
+  console.log(`${GREEN}  Ctrl+W${RESET}              Delete word before cursor`);
+  console.log(`${GREEN}  Ctrl+U${RESET}              Delete from cursor to start of line`);
+  console.log(`${GREEN}  Ctrl+K${RESET}              Delete from cursor to end of line`);
+  console.log();
+  console.log(`${BOLD}  Input Modes${RESET}`);
+  console.log(`${GREEN}  """${RESET}                 Toggle multi-line input mode`);
+  console.log(`${GREEN}  !<cmd>${RESET}              Execute shell command directly`);
+  console.log(`${GREEN}  /<command>${RESET}           Run a slash command`);
   console.log();
 }
 function printColorPalette() {
@@ -242969,6 +243394,126 @@ function handleExport(arg, ctx) {
   }
   console.log();
 }
+function handleGoto(symbol, ctx) {
+  if (!symbol) {
+    console.log(`${YELLOW}  Usage: /goto <symbol>  (e.g. /goto UserService, /goto handleLogin)${RESET}`);
+    return;
+  }
+  console.log(`${CYAN}  Searching for definition of "${symbol}"...${RESET}`);
+  const escapedSymbol = symbol.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const pattern = `export.*(function|class|type|interface|const|enum)\\s+${escapedSymbol}`;
+  const output = shell(
+    `grep -rn --include='*.ts' --include='*.tsx' --include='*.js' --include='*.jsx' -E "${pattern}" . 2>/dev/null | head -20`,
+    ctx.cwd
+  );
+  if (!output || output.startsWith("Command failed")) {
+    console.log(`${GRAY}  No exported definition found for "${symbol}". Trying broader search...${RESET}`);
+    const broadOutput = shell(
+      `grep -rn --include='*.ts' --include='*.tsx' --include='*.js' --include='*.jsx' -E "(function|class|type|interface|const|enum)\\s+${escapedSymbol}" . 2>/dev/null | head -20`,
+      ctx.cwd
+    );
+    if (!broadOutput || broadOutput.startsWith("Command failed")) {
+      console.log(`${YELLOW}  No definition found for "${symbol}".${RESET}`);
+    } else {
+      console.log();
+      console.log(broadOutput);
+    }
+  } else {
+    console.log();
+    console.log(output);
+  }
+  console.log();
+}
+function handleFind(description, ctx) {
+  if (!description) {
+    console.log(`${YELLOW}  Usage: /find <description>  (e.g. /find "function that validates email")${RESET}`);
+    return;
+  }
+  const prompt = `Search this project's codebase to find code that matches this description: "${description}". Use search_files and glob tools to locate relevant files, then read the matching sections. Show the file path, line number, and a brief snippet for each match.`;
+  ctx.messages.push({ role: "user", content: prompt });
+  console.log(`${CYAN}  Asking AI to find: "${description}"${RESET}`);
+  console.log(`${GRAY}  (AI will use tools to search the codebase)${RESET}`);
+  console.log();
+}
+function handleTestGen(arg, ctx) {
+  const target = arg || "the most recently discussed file";
+  const prompt = `Generate comprehensive unit tests for ${target}. Follow these steps:
+1. Read the target file(s) using read_file
+2. Analyze all exported functions, classes, and key logic
+3. Write test cases covering: happy path, edge cases, error handling, boundary conditions
+4. Use the project's existing test framework (detect from package.json \u2014 jest, vitest, mocha, etc.)
+5. If no test framework is detected, use Node.js built-in test runner
+6. Write the tests to a corresponding test file (e.g., foo.ts \u2192 foo.test.ts)
+7. Include at minimum: 1 test per exported function, 1 edge case per function, 1 error case per function
+
+Output the complete test file content.`;
+  ctx.messages.push({ role: "user", content: prompt });
+  console.log(`${CYAN}  Generating tests for: ${target}${RESET}`);
+  console.log(`${GRAY}  (AI will read the file and create tests)${RESET}`);
+  console.log();
+}
+function handleDeadCode(arg, ctx) {
+  const scope = arg || ".";
+  const prompt = `Analyze the codebase at "${scope}" for dead code. Follow these steps:
+1. Use glob to find all TypeScript/JavaScript source files in the scope
+2. For each file, identify all exports (functions, classes, types, constants)
+3. Use search_files to check if each export is imported/used elsewhere in the project
+4. Report:
+   - Unused exports (exported but never imported)
+   - Unused imports (imported but never referenced in the file)
+   - Unreachable code (code after return/throw statements)
+   - Unused variables/parameters (if obvious)
+
+Format the results as a list grouped by file, showing the symbol name, type, and line number.
+Mark severity: HIGH (unused export), MEDIUM (unused import), LOW (unused variable).`;
+  ctx.messages.push({ role: "user", content: prompt });
+  console.log(`${CYAN}  Analyzing dead code in: ${scope}${RESET}`);
+  console.log(`${GRAY}  (AI will scan imports/exports across the project)${RESET}`);
+  console.log();
+}
+function handleDeps(arg, ctx) {
+  if (!arg) {
+    console.log(`${YELLOW}  Usage: /deps <file>  (e.g. /deps src/agent.ts)${RESET}`);
+    console.log(`${GRAY}  Shows all files that import the given file (reverse dependencies).${RESET}`);
+    return;
+  }
+  const basename6 = path14.basename(arg).replace(/\.(ts|tsx|js|jsx)$/, "");
+  const searchPatterns = [
+    `from.*['"].*${basename6}['"]`,
+    `require.*['"].*${basename6}['"]`
+  ];
+  console.log(`${BOLD}  Dependency Graph: ${arg}${RESET}`);
+  console.log(`${GRAY}  ${"\u2500".repeat(40)}${RESET}`);
+  console.log();
+  console.log(`${WHITE}  Files that import "${basename6}":${RESET}`);
+  let totalFound = 0;
+  for (const pattern of searchPatterns) {
+    try {
+      const result = shell(
+        `grep -rn --include='*.ts' --include='*.tsx' --include='*.js' --include='*.jsx' "${pattern}" . 2>/dev/null | grep -v node_modules | grep -v '.d.ts'`,
+        ctx.cwd
+      );
+      if (result && !result.startsWith("Command failed")) {
+        const lines = result.split("\n").filter(Boolean);
+        for (const line of lines) {
+          const [filePart] = line.split(":");
+          if (filePart && !filePart.includes(arg)) {
+            console.log(`${GREEN}    ${line}${RESET}`);
+            totalFound++;
+          }
+        }
+      }
+    } catch {
+    }
+  }
+  if (totalFound === 0) {
+    console.log(`${GRAY}    No files import "${basename6}" in this project.${RESET}`);
+  } else {
+    console.log();
+    console.log(`${GRAY}  Found ${totalFound} reference(s).${RESET}`);
+  }
+  console.log();
+}
 
 // src/hooks.ts
 var fs16 = __toESM(require("node:fs"), 1);
@@ -243053,6 +243598,8 @@ function substituteEnvVars(command, env) {
 
 // src/agent.ts
 init_mcpLoader();
+var keepAliveHttpAgent = new http.Agent({ keepAlive: true });
+var keepAliveHttpsAgent = new https.Agent({ keepAlive: true });
 var TOOL_DEFINITIONS = [
   readFileDefinition,
   writeFileDefinition,
@@ -243071,20 +243618,56 @@ var PARALLEL_SAFE_TOOLS = /* @__PURE__ */ new Set([
   "read_image"
 ]);
 var MAX_TOOL_RESULT_CHARS = 4e3;
-var MIN_API_DELAY_MS = 500;
+var MODEL_DELAYS = {
+  opus: 2e3,
+  sonnet: 1e3,
+  haiku: 300,
+  mini: 300
+};
+var DEFAULT_API_DELAY_MS = 500;
+function getModelDelay(model) {
+  const lower = model.toLowerCase();
+  for (const [key, delay] of Object.entries(MODEL_DELAYS)) {
+    if (lower.includes(key)) return delay;
+  }
+  return DEFAULT_API_DELAY_MS;
+}
 var lastApiCallTime = 0;
-function appendAuditLog(toolName, filePath) {
+var turnRollbackBuffer = /* @__PURE__ */ new Map();
+function appendAuditLog(toolName, filePath, extra) {
   try {
     const auditDir = path16.join(os7.homedir(), ".oroute");
     if (!fs17.existsSync(auditDir)) fs17.mkdirSync(auditDir, { recursive: true });
     const logPath = path16.join(auditDir, "audit.log");
     const ts = (/* @__PURE__ */ new Date()).toISOString();
-    const entry = `${ts} tool=${toolName} path=${filePath ?? "-"}
-`;
-    fs17.appendFileSync(logPath, entry);
+    let entry = `${ts} tool=${toolName} path=${filePath ?? "-"}`;
+    if (extra?.command) entry += ` cmd=${extra.command}`;
+    if (extra?.escalation) entry += ` escalation=${extra.escalation}`;
+    if (extra?.affectedFiles && extra.affectedFiles.length > 0) entry += ` affected=${extra.affectedFiles.join(",")}`;
+    fs17.appendFileSync(logPath, entry + "\n");
   } catch {
   }
 }
+function detectCommandEscalation(command) {
+  const modifyingPatterns = [
+    [/\bgit\s+(add|commit|reset|checkout|merge|rebase|push|rm)\b/, "git-modify"],
+    [/\bnpm\s+(install|uninstall|update|publish|init)\b/, "npm-modify"],
+    [/\bpnpm\s+(add|remove|install|update|publish)\b/, "pnpm-modify"],
+    [/\byarn\s+(add|remove|install|upgrade|publish)\b/, "yarn-modify"],
+    [/\brm\s/, "file-delete"],
+    [/\bmv\s/, "file-move"],
+    [/\bcp\s/, "file-copy"],
+    [/\bchmod\s/, "permission-change"],
+    [/\bchown\s/, "ownership-change"],
+    [/\bmkdir\s/, "directory-create"]
+  ];
+  for (const [pattern, reason] of modifyingPatterns) {
+    if (pattern.test(command)) {
+      return { escalation: reason, reason: `Command matches modifying pattern: ${reason}` };
+    }
+  }
+  return null;
+}
 function maskDebugSecrets(text) {
   return text.replace(/\b(or|sk|key)-[a-zA-Z0-9]{10,}/g, "$1-****").replace(/Bearer\s+[a-zA-Z0-9._\-]{10,}/gi, "Bearer ****").replace(/(API_KEY|SECRET|TOKEN|PASSWORD)\s*[=:]\s*["']?[^\s"']{5,}/gi, "$1=****");
 }
@@ -243263,7 +243846,21 @@ ${contextSection}${memorySection}
 - Never output API keys, tokens, passwords, or secrets
 - Never execute curl/wget piped to sh
 - Validate that file paths don't escape the project directory
-- Flag potential security issues in code you review`;
+- Flag potential security issues in code you review
+
+## Auto Import Management
+- When you create new functions, types, or constants that are used in other files, automatically add the necessary import statements to those files.
+- When you rename or move exports, update all import references across the project.
+- Before adding an import, verify the export exists in the source file.
+- Use the project's existing import style (named vs default, relative vs alias paths).
+
+## Syntax Error Context (Feature 42)
+- When you encounter a syntax error, automatically read 20 lines before and after the error line to understand the full context before attempting a fix.
+- Use read_file with offset=(errorLine - 20) and limit=41 to get surrounding context.
+
+## Refactoring Suggestions (Feature 44)
+- When you notice repeated code patterns (3+ similar blocks), proactively suggest extracting them into a shared function.
+- Mention the duplication, propose a function signature, and ask if the user wants you to refactor.`;
 }
 function truncateResult(result) {
   if (result.length <= MAX_TOOL_RESULT_CHARS) return result;
@@ -243274,123 +243871,186 @@ function truncateResult(result) {
 ... (${totalLines - keptLines} lines, ${omittedChars} chars truncated \u2014 showing ${keptLines}/${totalLines} lines)`;
 }
 async function executeTool(tool, cwd, config) {
+  if (config.toolBlacklist && config.toolBlacklist.includes(tool.name)) {
+    const msg = `Tool "${tool.name}" is blacklisted in config. Skipping.`;
+    console.log(`${YELLOW}  ${msg}${RESET}`);
+    return JSON.stringify({ error: msg });
+  }
   const confirmWrite = config.skipConfirmations ? false : config.confirmBeforeWrite !== false;
   const confirmExec = config.skipConfirmations ? false : config.confirmBeforeExecute !== false;
+  const toolStart = performance.now();
   try {
-    switch (tool.name) {
-      case "read_file": {
-        const input = tool.input;
-        printToolUse("read_file", input.path);
-        const result = await readFileTool(input, cwd);
-        printToolResult(result.content);
-        return truncateResult(JSON.stringify({ content: result.content, lines: result.lines, size: result.size }));
+    const result = await executeToolInner(tool, cwd, confirmWrite, confirmExec, config);
+    const elapsed = performance.now() - toolStart;
+    if (elapsed > 100) {
+      console.log(`${DIM}  (${tool.name} took ${elapsed.toFixed(0)}ms)${RESET}`);
+    }
+    return result;
+  } catch (err) {
+    const elapsed = performance.now() - toolStart;
+    const msg = err instanceof Error ? err.message : String(err);
+    printError(`${tool.name}: ${msg}`);
+    if (elapsed > 100) {
+      console.log(`${DIM}  (failed after ${elapsed.toFixed(0)}ms)${RESET}`);
+    }
+    if (turnRollbackBuffer.size > 0) {
+      console.log(`${YELLOW}  Tool failed. ${turnRollbackBuffer.size} file(s) can be rolled back.${RESET}`);
+      for (const [filePath] of turnRollbackBuffer) {
+        console.log(`${GRAY}    - ${filePath}${RESET}`);
       }
-      case "write_file": {
-        const input = tool.input;
-        printToolUse("write_file", input.path);
-        const diff = generateDiff(input.path, input.content, cwd);
-        console.log(`${GRAY}${diff}${RESET}`);
-        if (isDryRun()) {
-          console.log(`${YELLOW}  [DRY-RUN] Would write ${input.content.length} chars to ${input.path}${RESET}`);
-          return JSON.stringify({ success: true, note: "dry-run \u2014 not written" });
+      for (const [filePath, content] of turnRollbackBuffer) {
+        try {
+          fs17.writeFileSync(filePath, content, "utf-8");
+          console.log(`${GREEN}  Rolled back: ${filePath}${RESET}`);
+        } catch {
         }
-        if (confirmWrite) {
-          const ok = await confirm(`Write to ${input.path}?`);
-          if (!ok) return JSON.stringify({ success: false, reason: "User declined" });
+      }
+      turnRollbackBuffer.clear();
+    }
+    return JSON.stringify({ error: msg });
+  }
+}
+async function executeToolInner(tool, cwd, confirmWrite, confirmExec, config) {
+  switch (tool.name) {
+    case "read_file": {
+      const input = tool.input;
+      printToolUse("read_file", input.path);
+      const result = await readFileTool(input, cwd);
+      printToolResult(result.content);
+      return truncateResult(JSON.stringify({ content: result.content, lines: result.lines, size: result.size }));
+    }
+    case "write_file": {
+      const input = tool.input;
+      printToolUse("write_file", input.path);
+      const resolvedForRollback = path16.resolve(cwd, input.path);
+      if (fs17.existsSync(resolvedForRollback) && !turnRollbackBuffer.has(resolvedForRollback)) {
+        try {
+          turnRollbackBuffer.set(resolvedForRollback, fs17.readFileSync(resolvedForRollback, "utf-8"));
+        } catch {
         }
-        const result = writeFileTool(input, cwd);
-        printSuccess(`Written ${result.bytesWritten} bytes${result.isNew ? " (new file)" : ""}`);
-        return JSON.stringify(result);
       }
-      case "list_directory": {
-        const input = tool.input;
-        printToolUse("list_directory", input.path);
-        const tree = listDirectoryTool(input, cwd);
-        printToolResult(tree);
-        return truncateResult(tree);
+      const resolved = path16.resolve(cwd, input.path);
+      const dangerPaths = ["/etc", "/usr", "/bin", "/sbin", "/System", "/Windows", "node_modules"];
+      if (dangerPaths.some((d) => resolved.startsWith(d) || resolved.includes("node_modules"))) {
+        console.log(`${RED}  \u26A0 WARNING: Writing to system/protected path: ${resolved}${RESET}`);
       }
-      case "search_files": {
-        const input = tool.input;
-        printToolUse("search_files", `"${input.pattern}" in ${input.path}`);
-        const output = searchFilesTool(input, cwd);
-        const formatted = output.results.map((r) => `${r.file}:${r.line}: ${r.content}`).join("\n");
-        const meta = output.hasMore ? `
-(${output.totalFound}+ total matches, showing ${output.offset + 1}-${output.offset + output.results.length}. Use offset=${output.offset + output.limit} for more.)` : "";
-        printToolResult((formatted || "No matches found.") + meta);
-        return truncateResult(JSON.stringify(output));
+      if (resolved.includes(".env")) {
+        console.log(`${YELLOW}  \u26A0 Modifying .env file \u2014 secrets may be affected${RESET}`);
       }
-      case "execute_command": {
-        const input = tool.input;
-        printToolUse("execute_command", input.command);
-        if (config.planMode || isDryRun()) {
-          const tag = config.planMode ? "PLAN MODE" : "DRY-RUN";
-          console.log(`${YELLOW}  [${tag}] Would execute: ${input.command}${RESET}`);
-          return JSON.stringify({ stdout: `[${tag.toLowerCase()} \u2014 not executed]`, stderr: "", exitCode: 0 });
-        }
-        if (confirmExec) {
-          const ok = await confirm(`Execute: ${input.command}`);
-          if (!ok) return JSON.stringify({ stdout: "", stderr: "User declined", exitCode: -1 });
-        }
-        const result = executeCommandTool(input, cwd);
-        if (result.stdout) printToolResult(result.stdout);
-        if (result.stderr) console.log(`${RED}${result.stderr}${RESET}`);
-        if (result.exitCode === 0) printSuccess("Command completed");
-        else console.log(`${YELLOW}  Exit code: ${result.exitCode}${RESET}`);
-        return truncateResult(JSON.stringify(result));
+      const diff = generateDiff(input.path, input.content, cwd);
+      console.log(`${GRAY}${diff}${RESET}`);
+      if (isDryRun()) {
+        console.log(`${YELLOW}  [DRY-RUN] Would write ${input.content.length} chars to ${input.path}${RESET}`);
+        return JSON.stringify({ success: true, note: "dry-run \u2014 not written" });
       }
-      case "edit_file": {
-        const input = tool.input;
-        printToolUse("edit_file", input.path);
-        const diff = generateEditDiff(input);
-        console.log(`${GRAY}${diff}${RESET}`);
-        if (config.planMode || isDryRun()) {
-          const tag = config.planMode ? "PLAN MODE" : "DRY-RUN";
-          console.log(`${YELLOW}  [${tag}] Would edit: ${input.path}${RESET}`);
-          return JSON.stringify({ success: true, note: `${tag.toLowerCase()} \u2014 not executed` });
-        }
-        if (confirmWrite) {
-          const ok = await confirm(`Edit ${input.path}?`);
-          if (!ok) return JSON.stringify({ success: false, reason: "User declined" });
+      const secretWarnings = scanForSecrets(input.content);
+      if (secretWarnings.length > 0) {
+        console.log(`${RED}  WARNING: Potential secrets detected in file content:${RESET}`);
+        for (const warning of secretWarnings) {
+          console.log(`${YELLOW}    - ${warning}${RESET}`);
         }
-        const result = editFileTool(input, cwd);
-        printSuccess("Edit applied");
-        return JSON.stringify(result);
+        const secretOk = await confirm("File contains potential secrets. Write anyway?");
+        if (!secretOk) return JSON.stringify({ success: false, reason: "User declined \u2014 secrets detected" });
       }
-      case "glob": {
-        const input = tool.input;
-        printToolUse("glob", input.pattern);
-        const results = globTool(input, cwd);
-        const formatted = results.join("\n");
-        printToolResult(formatted || "No matches found.");
-        return truncateResult(JSON.stringify({ matches: results, count: results.length }));
+      if (confirmWrite && secretWarnings.length === 0) {
+        const ok = await confirm(`Write to ${input.path}?`);
+        if (!ok) return JSON.stringify({ success: false, reason: "User declined" });
       }
-      case "read_image": {
-        const input = tool.input;
-        printToolUse("read_image", input.path);
-        const result = readImageTool(input, cwd);
-        printSuccess(`Read image: ${result.media_type}, ${(result.size / 1024).toFixed(1)}KB`);
-        return JSON.stringify(result);
+      const result = writeFileTool(input, cwd);
+      printSuccess(`Written ${result.bytesWritten} bytes${result.isNew ? " (new file)" : ""}`);
+      return JSON.stringify(result);
+    }
+    case "list_directory": {
+      const input = tool.input;
+      printToolUse("list_directory", input.path);
+      const tree = listDirectoryTool(input, cwd);
+      printToolResult(tree);
+      return truncateResult(tree);
+    }
+    case "search_files": {
+      const input = tool.input;
+      printToolUse("search_files", `"${input.pattern}" in ${input.path}`);
+      const output = searchFilesTool(input, cwd);
+      const formatted = output.results.map((r) => `${r.file}:${r.line}: ${r.content}`).join("\n");
+      const meta = output.hasMore ? `
+(${output.totalFound}+ total matches, showing ${output.offset + 1}-${output.offset + output.results.length}. Use offset=${output.offset + output.limit} for more.)` : "";
+      printToolResult((formatted || "No matches found.") + meta);
+      return truncateResult(JSON.stringify(output));
+    }
+    case "execute_command": {
+      const input = tool.input;
+      printToolUse("execute_command", input.command);
+      if (config.planMode || isDryRun()) {
+        const tag = config.planMode ? "PLAN MODE" : "DRY-RUN";
+        console.log(`${YELLOW}  [${tag}] Would execute: ${input.command}${RESET}`);
+        return JSON.stringify({ stdout: `[${tag.toLowerCase()} \u2014 not executed]`, stderr: "", exitCode: 0 });
       }
-      case "diff_files": {
-        const input = tool.input;
-        printToolUse("diff_files", `${input.file_a} \u2194 ${input.file_b}`);
-        const result = diffFilesTool(input, cwd);
-        const coloredLines = result.split("\n").map((line) => {
-          if (line.startsWith("+")) return `${GREEN}${line}${RESET}`;
-          if (line.startsWith("-")) return `${RED}${line}${RESET}`;
-          if (line.startsWith("@")) return `${CYAN}${line}${RESET}`;
-          return line;
-        });
-        printToolResult(coloredLines.join("\n"));
-        return truncateResult(result);
+      if (confirmExec) {
+        const ok = await confirm(`Execute: ${input.command}`);
+        if (!ok) return JSON.stringify({ stdout: "", stderr: "User declined", exitCode: -1 });
       }
-      default:
-        return JSON.stringify({ error: `Unknown tool: ${tool.name}` });
+      const result = executeCommandTool(input, cwd);
+      if (result.stdout) printToolResult(result.stdout);
+      if (result.stderr) console.log(`${RED}${result.stderr}${RESET}`);
+      if (result.exitCode === 0) printSuccess("Command completed");
+      else console.log(`${YELLOW}  Exit code: ${result.exitCode}${RESET}`);
+      return truncateResult(JSON.stringify(result));
     }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    printError(msg);
-    return JSON.stringify({ error: msg });
+    case "edit_file": {
+      const input = tool.input;
+      printToolUse("edit_file", input.path);
+      const editResolved = path16.resolve(cwd, input.path);
+      if (fs17.existsSync(editResolved) && !turnRollbackBuffer.has(editResolved)) {
+        try {
+          turnRollbackBuffer.set(editResolved, fs17.readFileSync(editResolved, "utf-8"));
+        } catch {
+        }
+      }
+      const diff = generateEditDiff(input);
+      console.log(`${GRAY}${diff}${RESET}`);
+      if (config.planMode || isDryRun()) {
+        const tag = config.planMode ? "PLAN MODE" : "DRY-RUN";
+        console.log(`${YELLOW}  [${tag}] Would edit: ${input.path}${RESET}`);
+        return JSON.stringify({ success: true, note: `${tag.toLowerCase()} \u2014 not executed` });
+      }
+      if (confirmWrite) {
+        const ok = await confirm(`Edit ${input.path}?`);
+        if (!ok) return JSON.stringify({ success: false, reason: "User declined" });
+      }
+      const result = editFileTool(input, cwd);
+      printSuccess("Edit applied");
+      return JSON.stringify(result);
+    }
+    case "glob": {
+      const input = tool.input;
+      printToolUse("glob", input.pattern);
+      const results = globTool(input, cwd);
+      const formatted = results.join("\n");
+      printToolResult(formatted || "No matches found.");
+      return truncateResult(JSON.stringify({ matches: results, count: results.length }));
+    }
+    case "read_image": {
+      const input = tool.input;
+      printToolUse("read_image", input.path);
+      const result = readImageTool(input, cwd);
+      printSuccess(`Read image: ${result.media_type}, ${(result.size / 1024).toFixed(1)}KB`);
+      return JSON.stringify(result);
+    }
+    case "diff_files": {
+      const input = tool.input;
+      printToolUse("diff_files", `${input.file_a} \u2194 ${input.file_b}`);
+      const result = diffFilesTool(input, cwd);
+      const coloredLines = result.split("\n").map((line) => {
+        if (line.startsWith("+")) return `${GREEN}${line}${RESET}`;
+        if (line.startsWith("-")) return `${RED}${line}${RESET}`;
+        if (line.startsWith("@")) return `${CYAN}${line}${RESET}`;
+        return line;
+      });
+      printToolResult(coloredLines.join("\n"));
+      return truncateResult(result);
+    }
+    default:
+      return JSON.stringify({ error: `Unknown tool: ${tool.name}` });
   }
 }
 async function executeToolWithHooks(tool, cwd, config, hooks) {
@@ -243401,7 +244061,12 @@ async function executeToolWithHooks(tool, cwd, config, hooks) {
   const result = await executeTool(tool, cwd, config);
   runHooks("PostToolUse", hooks, tool.name, tool.input, cwd);
   const toolFilePath = tool.input["path"] ?? tool.input["file_path"] ?? null;
-  appendAuditLog(tool.name, toolFilePath);
+  const command = tool.input["command"];
+  const escalation = command ? detectCommandEscalation(command) : null;
+  appendAuditLog(tool.name, toolFilePath, {
+    command: command ?? void 0,
+    escalation: escalation?.escalation
+  });
   if ((tool.name === "write_file" || tool.name === "edit_file") && toolFilePath) {
     checkTypesAfterEdit(toolFilePath, cwd);
   }
@@ -243745,6 +244410,7 @@ ${mcpSummary}
     if (estimated > 5e4) {
       console.log(`${YELLOW}  \u26A0 Context ~${Math.round(estimated / 1e3)}K tokens. Consider /compact to reduce.${RESET}`);
     }
+    turnRollbackBuffer.clear();
     let continueLoop = true;
     let retryCount = 0;
     const maxRetries = 3;
@@ -243755,6 +244421,7 @@ ${mcpSummary}
     const MAX_DUPLICATE_STREAK = 3;
     const toolNameCounts = /* @__PURE__ */ new Map();
     const turnStartTime = Date.now();
+    const userTurnStart = Date.now();
     const TURN_TIMEOUT_MS = 5 * 60 * 1e3;
     while (continueLoop) {
       if (Date.now() - turnStartTime > TURN_TIMEOUT_MS) {
@@ -243773,10 +244440,11 @@ ${mcpSummary}
       }
       const spinner = createSpinner("Thinking...");
       try {
+        const modelDelay = getModelDelay(model);
         const now = Date.now();
         const elapsed = now - lastApiCallTime;
-        if (elapsed < MIN_API_DELAY_MS && lastApiCallTime > 0) {
-          await new Promise((r) => setTimeout(r, MIN_API_DELAY_MS - elapsed));
+        if (elapsed < modelDelay && lastApiCallTime > 0) {
+          await new Promise((r) => setTimeout(r, modelDelay - elapsed));
         }
         lastApiCallTime = Date.now();
         const abortCtrl = new AbortController();
@@ -243850,16 +244518,20 @@ ${headers.join("\n")}${RESET}
           }
           if (res.status === 429 && retryCount < maxRetries) {
             retryCount++;
-            const waitSec = retryCount * 3;
+            const baseDelay = 3e3;
+            const delay = Math.min(baseDelay * Math.pow(2, retryCount - 1) + Math.random() * 1e3, 3e4);
+            const waitSec = (delay / 1e3).toFixed(1);
             console.log(`${YELLOW}  Rate limited. Retrying in ${waitSec}s... (${retryCount}/${maxRetries})${RESET}`);
-            await new Promise((r) => setTimeout(r, waitSec * 1e3));
+            await new Promise((r) => setTimeout(r, delay));
             continue;
           }
           if (res.status >= 500 && retryCount < maxRetries) {
             retryCount++;
-            const waitSec = retryCount * 2;
+            const baseDelay = 2e3;
+            const delay = Math.min(baseDelay * Math.pow(2, retryCount - 1) + Math.random() * 1e3, 3e4);
+            const waitSec = (delay / 1e3).toFixed(1);
             console.log(`${YELLOW}  Server error (${res.status}). Retrying in ${waitSec}s... (${retryCount}/${maxRetries})${RESET}`);
-            await new Promise((r) => setTimeout(r, waitSec * 1e3));
+            await new Promise((r) => setTimeout(r, delay));
             continue;
           }
           printError(errMsg);
@@ -243870,14 +244542,23 @@ ${headers.join("\n")}${RESET}
         retryCount = 0;
         if (isSSEResponse(res)) {
           let firstText = true;
+          let runningTokens = { input_tokens: 0, output_tokens: 0 };
+          const onTokenUpdate = (tokens) => {
+            runningTokens = tokens;
+          };
           const streamResult = await parseSSEStream(res, (text) => {
             if (firstText) {
               console.log();
               firstText = false;
             }
             process.stdout.write(text);
-          });
+          }, onTokenUpdate);
           if (!firstText) {
+            if (runningTokens.input_tokens > 0 || runningTokens.output_tokens > 0) {
+              const total = runningTokens.input_tokens + runningTokens.output_tokens;
+              process.stdout.write(`
+${DIM}  [tokens: ${total.toLocaleString()}]${RESET}`);
+            }
             console.log();
           }
           sessionStats = updateStats(
@@ -243890,6 +244571,11 @@ ${headers.join("\n")}${RESET}
             const turnCost = estimateCost({ ...sessionStats, inputTokens: u.input_tokens, outputTokens: u.output_tokens, requests: 1, providerCounts: {} });
             console.log(`${DIM}  tokens: ${u.input_tokens} in + ${u.output_tokens} out = ${u.input_tokens + u.output_tokens} \xB7 ~$${turnCost.toFixed(4)}${RESET}`);
           }
+          if (config.maxCostPerSession && config.maxCostPerSession > 0) {
+            if (isBudgetExceeded(sessionStats, config.maxCostPerSession)) {
+              printBudgetWarning(sessionStats, config.maxCostPerSession);
+            }
+          }
           const contentBlocksForHistory = [];
           const toolBlocks = [];
           for (const block of streamResult.contentBlocks) {
@@ -243936,6 +244622,9 @@ ${headers.join("\n")}${RESET}
             const toolResults = await executeToolsParallel(toolBlocks, cwd, config, hooks);
             messages.push({ role: "user", content: toolResults });
           } else {
+            if (Date.now() - userTurnStart > 1e4) {
+              process.stdout.write("\x07");
+            }
             const meta = streamResult.routingMetadata;
             if (meta && streamResult.usage) {
               console.log(`${DIM}  - ${meta.provider} \xB7 L${meta.taskComplexity} \xB7 ${meta.totalLatencyMs?.toFixed(0) ?? "?"}ms \xB7 ${streamResult.usage.input_tokens}+${streamResult.usage.output_tokens} tokens${RESET}`);
@@ -244104,7 +244793,7 @@ var GRAY4 = "\x1B[90m";
 var BOLD2 = "\x1B[1m";
 var DIM2 = "\x1B[2m";
 var RESET2 = "\x1B[0m";
-var YELLOW3 = "\x1B[33m";
+var YELLOW2 = "\x1B[33m";
 var WHITE2 = "\x1B[37m";
 var VERSION = "0.2.0";
 var CONFIG_DIR = path18.join(os9.homedir(), ".oroute");
@@ -244174,6 +244863,21 @@ var LOGO = `${GREEN2}${BOLD2}
  | |_| | |  _ < (_) | |_| | ||  __/
   \\___/  |_| \\_\\___/ \\__,_|\\__\\___|${RESET2}
 `;
+function checkApiKeyAge(config) {
+  if (!config.apiKeyCreatedAt) return;
+  try {
+    const createdAt = new Date(config.apiKeyCreatedAt);
+    const now = /* @__PURE__ */ new Date();
+    const ageMs = now.getTime() - createdAt.getTime();
+    const ageDays = Math.floor(ageMs / (1e3 * 60 * 60 * 24));
+    if (ageDays > 90) {
+      console.log(`${YELLOW2}  WARNING: Your API key is ${ageDays} days old. Consider rotating it for security.${RESET2}`);
+      console.log(`${GRAY4}  Rotate at: https://oroute.itshin.com/api-keys${RESET2}`);
+      console.log();
+    }
+  } catch {
+  }
+}
 function loadConfig() {
   try {
     if (fs19.existsSync(CONFIG_FILE)) {
@@ -244183,6 +244887,22 @@ function loadConfig() {
   }
   return {};
 }
+function loadProjectConfig() {
+  try {
+    const projectConfigPath = path18.join(process.cwd(), ".oroute", "config.json");
+    if (fs19.existsSync(projectConfigPath)) {
+      const raw = JSON.parse(fs19.readFileSync(projectConfigPath, "utf-8"));
+      const result = {};
+      if (raw.model) result.model = raw.model;
+      if (raw.apiUrl) result.apiUrl = raw.apiUrl;
+      if (raw.maxCost !== void 0) result.maxCost = Number(raw.maxCost);
+      if (Array.isArray(raw.toolBlacklist)) result.toolBlacklist = raw.toolBlacklist;
+      return result;
+    }
+  } catch {
+  }
+  return {};
+}
 function saveConfig(config) {
   if (!fs19.existsSync(CONFIG_DIR)) {
     fs19.mkdirSync(CONFIG_DIR, { recursive: true });
@@ -244216,8 +244936,9 @@ function parseArgs(args) {
   let targetPath;
   let prompt;
   let debug = false;
-  let skipConfirmations = false;
+  let skipConfirmations2 = false;
   let planMode = false;
+  let profile = false;
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
     if (arg === "--debug") {
@@ -244225,13 +244946,17 @@ function parseArgs(args) {
       continue;
     }
     if (arg === "--yes" || arg === "-y") {
-      skipConfirmations = true;
+      skipConfirmations2 = true;
       continue;
     }
     if (arg === "--plan") {
       planMode = true;
       continue;
     }
+    if (arg === "--profile") {
+      profile = true;
+      continue;
+    }
     if (arg === "-p" && args[i + 1]) {
       prompt = args[++i];
       continue;
@@ -244243,7 +244968,7 @@ function parseArgs(args) {
     if (arg.startsWith("-")) continue;
     targetPath = arg;
   }
-  return { command, path: targetPath, prompt, debug, skipConfirmations, planMode };
+  return { command, path: targetPath, prompt, debug, skipConfirmations: skipConfirmations2, planMode, profile };
 }
 async function promptInput(prompt) {
   const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
@@ -244257,7 +244982,7 @@ async function promptInput(prompt) {
 async function loginWithApiKey(config) {
   const key = await promptInput(`${GREEN2}\u203A${RESET2} Enter your O'Route API Key (or-...): `);
   if (!key.startsWith("or-")) {
-    console.log(`${YELLOW3}  Invalid key format. O'Route keys start with "or-"${RESET2}`);
+    console.log(`${YELLOW2}  Invalid key format. O'Route keys start with "or-"${RESET2}`);
     return;
   }
   const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
@@ -244268,19 +244993,21 @@ async function loginWithApiKey(config) {
       signal: AbortSignal.timeout(5e3)
     });
     config.apiKey = key;
+    config.apiKeyCreatedAt = (/* @__PURE__ */ new Date()).toISOString();
     saveConfig(config);
     if (res.ok) {
       console.log(`${GREEN2}  \u2713 API Key verified and saved!${RESET2}`);
     } else {
-      console.log(`${YELLOW3}  Key saved (server returned ${res.status}).${RESET2}`);
+      console.log(`${YELLOW2}  Key saved (server returned ${res.status}).${RESET2}`);
     }
     console.log();
     await chat(config);
     return;
   } catch {
     config.apiKey = key;
+    config.apiKeyCreatedAt = (/* @__PURE__ */ new Date()).toISOString();
     saveConfig(config);
-    console.log(`${YELLOW3}  Saved (server offline). Starting chat...${RESET2}`);
+    console.log(`${YELLOW2}  Saved (server offline). Starting chat...${RESET2}`);
     console.log();
     await chat(config);
   }
@@ -244314,6 +245041,7 @@ async function loginWithGoogle(config) {
       const pollData = await pollRes.json();
       if (pollData.status === "approved" && pollData.apiKey) {
         config.apiKey = pollData.apiKey;
+        config.apiKeyCreatedAt = (/* @__PURE__ */ new Date()).toISOString();
         saveConfig(config);
         console.log(`
 ${GREEN2}  \u2713 Logged in!${RESET2} ${GRAY4}(${pollData.email})${RESET2}`);
@@ -244323,20 +245051,20 @@ ${GREEN2}  \u2713 Logged in!${RESET2} ${GRAY4}(${pollData.email})${RESET2}`);
         return;
       }
       if (pollData.status === "expired") {
-        console.log(`${YELLOW3}  \uC778\uC99D \uCF54\uB4DC\uAC00 \uB9CC\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.${RESET2}`);
+        console.log(`${YELLOW2}  \uC778\uC99D \uCF54\uB4DC\uAC00 \uB9CC\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.${RESET2}`);
         return;
       }
       process.stdout.write(`\r${GRAY4}  \uB300\uAE30 \uC911${"\xB7".repeat(i % 3 + 1).padEnd(3)}${RESET2}`);
     }
     console.log(`
-${YELLOW3}  \uC2DC\uAC04 \uCD08\uACFC. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.${RESET2}`);
+${YELLOW2}  \uC2DC\uAC04 \uCD08\uACFC. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.${RESET2}`);
   } catch (err) {
-    console.log(`${YELLOW3}  \uC11C\uBC84\uC5D0 \uC5F0\uACB0\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. API Key\uB85C \uB85C\uADF8\uC778\uD558\uC138\uC694 (\uC635\uC158 1).${RESET2}`);
+    console.log(`${YELLOW2}  \uC11C\uBC84\uC5D0 \uC5F0\uACB0\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. API Key\uB85C \uB85C\uADF8\uC778\uD558\uC138\uC694 (\uC635\uC158 1).${RESET2}`);
   }
 }
 async function chat(config) {
   if (!config.apiKey) {
-    console.log(`${YELLOW3}  No API Key configured. Run option 1 first.${RESET2}`);
+    console.log(`${YELLOW2}  No API Key configured. Run option 1 first.${RESET2}`);
     return;
   }
   const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
@@ -244368,7 +245096,7 @@ async function chat(config) {
       if (!res.ok) {
         const errBody = await res.json().catch(() => ({ error: { message: `HTTP ${res.status}` } }));
         const errMsg = typeof errBody.error === "string" ? errBody.error : errBody.error?.message ?? `HTTP ${res.status}`;
-        console.log(`${YELLOW3}  Error: ${errMsg}${RESET2}`);
+        console.log(`${YELLOW2}  Error: ${errMsg}${RESET2}`);
         messages.pop();
         continue;
       }
@@ -244382,7 +245110,7 @@ async function chat(config) {
       console.log();
       messages.push({ role: "assistant", content: text });
     } catch (err) {
-      console.log(`${YELLOW3}  Request failed: ${err instanceof Error ? err.message : "unknown"}${RESET2}`);
+      console.log(`${YELLOW2}  Request failed: ${err instanceof Error ? err.message : "unknown"}${RESET2}`);
       messages.pop();
     }
   }
@@ -244398,7 +245126,7 @@ async function checkStatus(config) {
     console.log(`${GRAY4}  Key: ${config.apiKey ? config.apiKey.slice(0, 11) + "..." : "not set"}${RESET2}`);
     console.log(`${GRAY4}  Model: ${config.model ?? "auto"}${RESET2}`);
   } catch {
-    console.log(`${YELLOW3}  \u2717 Server unreachable at ${apiUrl}${RESET2}`);
+    console.log(`${YELLOW2}  \u2717 Server unreachable at ${apiUrl}${RESET2}`);
   }
 }
 async function settings(config) {
@@ -244433,32 +245161,52 @@ async function settings(config) {
   }
 }
 async function main() {
+  const startupStart = performance.now();
   const rawArgs = process.argv.slice(2);
+  const parseStart = performance.now();
   const config = loadConfig();
   const parsed = parseArgs(rawArgs);
+  const configLoadMs = performance.now() - parseStart;
+  checkApiKeyAge(config);
+  const updateStart = performance.now();
   checkForUpdates(VERSION);
+  const updateMs = performance.now() - updateStart;
   if (parsed.debug) {
     console.log(`${GRAY4}  Debug mode: config=${JSON.stringify(config)}${RESET2}`);
   }
   if (parsed.path) {
     const resolved = path18.resolve(process.cwd(), parsed.path);
     if (!fs19.existsSync(resolved)) {
-      console.log(`${YELLOW3}  \uB514\uB809\uD1A0\uB9AC\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${resolved}${RESET2}`);
+      console.log(`${YELLOW2}  \uB514\uB809\uD1A0\uB9AC\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${resolved}${RESET2}`);
       process.exit(1);
     }
     const stat = fs19.statSync(resolved);
     if (!stat.isDirectory()) {
-      console.log(`${YELLOW3}  \uB514\uB809\uD1A0\uB9AC\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${resolved}${RESET2}`);
+      console.log(`${YELLOW2}  \uB514\uB809\uD1A0\uB9AC\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${resolved}${RESET2}`);
       process.exit(1);
     }
     process.chdir(resolved);
   }
+  const projectConfig = loadProjectConfig();
+  const mergedConfig = { ...config, ...projectConfig };
   const agentConfig = {
-    ...config,
+    ...mergedConfig,
     skipConfirmations: parsed.skipConfirmations,
     planMode: parsed.planMode,
-    debug: parsed.debug
+    debug: parsed.debug,
+    maxCostPerSession: mergedConfig.maxCost,
+    toolBlacklist: mergedConfig.toolBlacklist
   };
+  if (parsed.profile) {
+    const totalMs = performance.now() - startupStart;
+    console.log(`${BOLD2}  Startup Profile${RESET2}`);
+    console.log(`${GRAY4}  ${"\u2500".repeat(40)}${RESET2}`);
+    console.log(`${WHITE2}  Config load:    ${configLoadMs.toFixed(1)}ms${RESET2}`);
+    console.log(`${WHITE2}  Update check:   ${updateMs.toFixed(1)}ms${RESET2}`);
+    console.log(`${WHITE2}  Total startup:  ${totalMs.toFixed(1)}ms${RESET2}`);
+    console.log(`${GRAY4}  (context, MCP, history are loaded in agent loop)${RESET2}`);
+    console.log();
+  }
   if (parsed.command === "login") {
     printWelcome();
     await loginWithApiKey(config);
@@ -244474,7 +245222,7 @@ async function main() {
   }
   if (parsed.prompt) {
     if (!config.apiKey) {
-      console.log(`${YELLOW3}No API Key. Run: oroute login${RESET2}`);
+      console.log(`${YELLOW2}No API Key. Run: oroute login${RESET2}`);
       process.exit(1);
     }
     const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
@@ -244489,7 +245237,7 @@ async function main() {
       console.log(data.content[0]?.text ?? "");
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.log(`${YELLOW3}  Error: ${msg}${RESET2}`);
+      console.log(`${YELLOW2}  Error: ${msg}${RESET2}`);
     }
     return;
   }
@@ -244523,14 +245271,14 @@ async function main() {
         console.log(`${GRAY4}  Bye!${RESET2}`);
         process.exit(0);
       default:
-        console.log(`${YELLOW3}  Unknown option: ${choice}${RESET2}`);
+        console.log(`${YELLOW2}  Unknown option: ${choice}${RESET2}`);
     }
     console.log();
   }
 }
 main().catch((err) => {
   const msg = err instanceof Error ? err.message : String(err);
-  console.error(`${YELLOW3}  Error: ${msg}${RESET2}`);
+  console.error(`${YELLOW2}  Error: ${msg}${RESET2}`);
   process.exit(1);
 });
 //# sourceMappingURL=oroute.cjs.map