spacecode 2.5.2 → 2.5.4

package/dist/repl.mjs

@@ -4580,9 +4580,22 @@ function guardHost(inner, opts) {
       await log(kind, subject, d, false);
       throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
     }
+    const verdict = opts.rules?.evaluate(kind === "exec" ? "bash" : kind, subject);
+    const ruleTag = verdict?.rule ? `${verdict.rule} [${verdict.scope}]` : "";
+    if (verdict?.effect === "deny") {
+      d = { action: "deny", rule: "rule-deny", reason: `denied by imported rule ${ruleTag}` };
+      await log(kind, subject, d, false);
+      throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
+    }
     if (kind !== "exec" && opts.permissions?.mode === "default") {
       d = { action: "confirm", rule: "confirm-edit", reason: "modifies a file" };
     }
+    if (verdict?.effect === "ask") {
+      d = { action: "confirm", rule: "rule-ask", reason: `imported rule ${ruleTag} asks first${opts.confirm ? "" : "; no way to ask (headless), so refused"}` };
+    } else if (verdict?.effect === "allow" && d.action === "confirm") {
+      await log(kind, subject, { action: "allow", rule: "rule-allow", reason: `allowed by imported rule ${ruleTag} (would be ${d.rule})` }, true);
+      return;
+    }
     if (d.action === "confirm" && kind === "exec" && opts.permissions?.allowsCommand(subject)) {
       await log(kind, subject, { action: "allow", rule: "allow-session", reason: "approved earlier this session" }, true);
       return;
@@ -4606,7 +4619,15 @@ function guardHost(inner, opts) {
   return {
     kind: inner.kind,
     files: {
-      readFile: (p) => inner.files.readFile(p),
+      readFile: async (p) => {
+        const v2 = opts.rules?.evaluate("read_file", p.replace(/^\.\//, ""));
+        if (v2?.effect === "deny") {
+          const d = { action: "deny", rule: "rule-deny", reason: `denied by imported rule ${v2.rule} [${v2.scope}]` };
+          await log("read_file", p, d, false);
+          throw new PolicyViolation(d.rule, `Blocked by policy (${d.rule}): ${d.reason}`);
+        }
+        return inner.files.readFile(p);
+      },
       listDirectory: (p) => inner.files.listDirectory(p),
       writeFile: async (p, c) => {
         await gate("write_file", p, allow, { oldText: "", newText: c });
@@ -4904,6 +4925,30 @@ var init_summarizer = __esm({
   }
 });
 
+// ../agent/src/import/command-file.ts
+function parseCommandFile(text) {
+  const lines2 = text.replace(/\r\n/g, "\n").split("\n");
+  const close = lines2[0] === "---" ? lines2.indexOf("---", 1) : -1;
+  if (close > 0) {
+    const line = lines2.slice(1, close).find((l) => /^description\s*:/.test(l));
+    const description = line ? unquote(line.slice(line.indexOf(":") + 1)).slice(0, 200) : "";
+    return { description, body: lines2.slice(close + 1).join("\n").replace(/^\n+/, "") };
+  }
+  const normalized = lines2.join("\n");
+  const first = lines2.find((l) => l.trim() !== "");
+  return { description: first ? first.trim().slice(0, 80) : "", body: normalized };
+}
+var unquote;
+var init_command_file = __esm({
+  "../agent/src/import/command-file.ts"() {
+    "use strict";
+    unquote = (v2) => {
+      const t = v2.trim();
+      return t.length >= 2 && (t[0] === '"' || t[0] === "'") && t[t.length - 1] === t[0] ? t.slice(1, -1) : t;
+    };
+  }
+});
+
 // ../agent/src/import/claude-sources.ts
 function isEnoent(err) {
   return typeof err === "object" && err !== null && err.code === "ENOENT";
@@ -4941,6 +4986,7 @@ async function readClaudeAssets({ fs: fs6, home, projectDirs }) {
     report.assets.push({ kind: "instructions", name: "global", description: "Global CLAUDE.md", content: globalText, source: globalPath });
     if (/^@\S+/m.test(globalText)) report.notes.push("CLAUDE.md contains @path includes; they are kept as plain text and not expanded in v1");
   }
+  await readCommands(fs6, home, report);
   for (const dir of projectDirs) {
     const memDir = `${home}/.claude/projects/${claudeProjectSlug(dir)}/memory`;
     let entries;
@@ -4982,11 +5028,49 @@ async function readClaudeAssets({ fs: fs6, home, projectDirs }) {
   report.notes.push("No Claude Code memory directory found for this project");
   return report;
 }
-var NAME_RE;
+async function readCommands(fs6, home, report) {
+  const dir = `${home}/.claude/commands`;
+  let entries;
+  try {
+    entries = await fs6.readdir(dir);
+  } catch (err) {
+    if (!isEnoent(err)) report.errors.push({ path: dir, message: err instanceof Error ? err.message : String(err) });
+    return;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of [...entries].sort()) {
+    const path12 = `${dir}/${entry}`;
+    if (!entry.endsWith(".md")) {
+      if (!entry.startsWith(".")) report.notes.push(`Skipped ${path12}: only top-level .md command files are imported (subdirectories are not supported)`);
+      continue;
+    }
+    const name = entry.slice(0, -3);
+    if (!COMMAND_NAME_RE.test(name)) {
+      report.errors.push({ path: path12, message: `command name "${name}" must start with a letter and use only letters, digits, - and _` });
+      continue;
+    }
+    if (seen.has(name.toLowerCase())) {
+      report.errors.push({ path: path12, message: `command name collision on "${name}" (names are case-insensitive)` });
+      continue;
+    }
+    const text = await readOptional(fs6, path12, report);
+    if (text === null) continue;
+    if (Buffer.byteLength(text, "utf8") > MAX_ASSET_BYTES) {
+      report.errors.push({ path: path12, message: `skipped: ${Buffer.byteLength(text, "utf8")} bytes is over the ${MAX_ASSET_BYTES} byte asset limit` });
+      continue;
+    }
+    seen.add(name.toLowerCase());
+    report.assets.push({ kind: "command", name, description: parseCommandFile(text).description, content: text, source: path12 });
+  }
+}
+var MAX_ASSET_BYTES, NAME_RE, COMMAND_NAME_RE;
 var init_claude_sources = __esm({
   "../agent/src/import/claude-sources.ts"() {
     "use strict";
+    init_command_file();
+    MAX_ASSET_BYTES = 256 * 1024;
     NAME_RE = /^[A-Za-z0-9._-]{1,100}$/;
+    COMMAND_NAME_RE = /^[A-Za-z][A-Za-z0-9_-]*$/;
   }
 });
 
@@ -5572,6 +5656,200 @@ var init_imports_config = __esm({
   }
 });
 
+// ../agent/src/import/permission-rules.ts
+function splitCommand(cmd) {
+  const segments2 = [];
+  let cur = "";
+  let quote = null;
+  let compound = false;
+  const flush = () => {
+    const s = cur.trim();
+    if (s) segments2.push(s);
+    cur = "";
+  };
+  for (let i = 0; i < cmd.length; i++) {
+    const ch = cmd[i];
+    if (quote) {
+      cur += ch;
+      if (ch === quote) quote = null;
+    } else if (ch === '"' || ch === "'") {
+      quote = ch;
+      cur += ch;
+    } else if (";&|\n`()<>".includes(ch) || ch === "$" && cmd[i + 1] === "(") {
+      compound = true;
+      flush();
+    } else {
+      cur += ch;
+    }
+  }
+  if (quote) return { compound: true, segments: [cmd.trim()] };
+  flush();
+  return compound ? { compound, segments: segments2 } : { compound, segments: [cmd.trim()] };
+}
+function matchesBash(pattern, cmd, effect) {
+  const { compound, segments: segments2 } = splitCommand(cmd);
+  if (compound && effect === "allow") return false;
+  const prefix = pattern.endsWith(":*") ? pattern.slice(0, -2).trim() : null;
+  const hit = (s) => prefix === null ? s === pattern.trim() : s === prefix || s.startsWith(prefix) && /\s/.test(s[prefix.length] ?? "");
+  return segments2.some(hit);
+}
+function globToRegExp(glob) {
+  let re3 = "";
+  for (let i = 0; i < glob.length; i++) {
+    const ch = glob[i];
+    if (ch === "*") {
+      if (glob[i + 1] === "*") {
+        re3 += ".*";
+        i++;
+        if (glob[i + 1] === "/") i++;
+      } else re3 += "[^/]*";
+    } else if (ch === "?") re3 += "[^/]";
+    else re3 += ch.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return new RegExp("^" + re3 + "$");
+}
+function compile(text, effect, scope) {
+  const m2 = /^([A-Za-z0-9_-]+)(?:\((.*)\))?$/s.exec(text.trim());
+  if (!m2) return "malformed rule";
+  const [, name, rawArg] = m2;
+  const arg = rawArg === void 0 || rawArg.trim() === "" ? null : rawArg.trim();
+  const tools = name.startsWith("mcp__") ? [name] : TOOL_MAP[name];
+  if (!tools) return `unsupported tool ${name}`;
+  if (arg === null) return { effect, scope, text, tools, arg, test: () => true };
+  if (name === "Bash") return { effect, scope, text, tools, arg, test: (s, e) => matchesBash(arg, s, e) };
+  if (name.startsWith("mcp__")) return "argument patterns are not supported for MCP tools";
+  const re3 = globToRegExp(arg);
+  return { effect, scope, text, tools, arg, test: (s) => re3.test(s) };
+}
+function buildRuleSet(sources) {
+  const rules = [];
+  const skipped = [];
+  const counts = {};
+  for (const s of ["user", "repo", "local"]) counts[s] = { allow: 0, deny: 0, ask: 0 };
+  for (const src of sources) {
+    for (const effect of ["deny", "ask", "allow"]) {
+      for (const text of src[effect] ?? []) {
+        const c = typeof text === "string" ? compile(text, effect, src.scope) : "malformed rule";
+        if (typeof c === "string") skipped.push({ text: String(text), scope: src.scope, reason: c });
+        else {
+          rules.push(c);
+          counts[src.scope][effect]++;
+        }
+      }
+    }
+  }
+  const frozen = Object.freeze(rules);
+  return {
+    skipped,
+    counts,
+    evaluate(tool, subject) {
+      for (const effect of ["deny", "ask", "allow"]) {
+        const r = frozen.find((c) => c.effect === effect && c.tools.includes(tool) && c.test(subject, effect));
+        if (r) return { effect, rule: r.text, scope: r.scope };
+      }
+      return { effect: "none" };
+    }
+  };
+}
+function defaultModeFor(mode) {
+  switch (mode) {
+    case void 0:
+    case "default":
+      return { mode: "default" };
+    case "acceptEdits":
+      return { mode: "accept-edits" };
+    case "plan":
+      return { mode: "plan" };
+    case "bypassPermissions":
+      return { mode: "yolo" };
+    default:
+      return { mode: null, reason: `unmappable defaultMode "${mode}"` };
+  }
+}
+var TOOL_MAP;
+var init_permission_rules = __esm({
+  "../agent/src/import/permission-rules.ts"() {
+    "use strict";
+    TOOL_MAP = {
+      Bash: ["bash"],
+      Read: ["read_file"],
+      Edit: ["edit_file", "write_file"],
+      Write: ["edit_file", "write_file"],
+      MultiEdit: ["edit_file", "write_file"],
+      Glob: ["list_directory"],
+      Grep: ["search"]
+    };
+  }
+});
+
+// ../agent/src/import/command-args.ts
+function parseWords(input) {
+  const words = [];
+  let current = "";
+  let quote = null;
+  let has = false;
+  for (const ch of input) {
+    if (quote) {
+      if (ch === quote) quote = null;
+      else current += ch;
+    } else if (ch === '"' || ch === "'") {
+      quote = ch;
+      has = true;
+    } else if (/\s/.test(ch)) {
+      if (has) words.push(current);
+      current = "";
+      has = false;
+    } else {
+      current += ch;
+      has = true;
+    }
+  }
+  if (has) words.push(current);
+  return words;
+}
+function expandCommand(body, args) {
+  const trimmed = args.trim();
+  const words = parseWords(trimmed);
+  return body.replace(/\$ARGUMENTS|\$[1-9]/g, (m2) => m2 === "$ARGUMENTS" ? trimmed : words[Number(m2[1]) - 1] ?? "");
+}
+var init_command_args = __esm({
+  "../agent/src/import/command-args.ts"() {
+    "use strict";
+  }
+});
+
+// ../agent/src/import/command-registry.ts
+function buildCommandRegistry(input) {
+  const builtins = new Set(input.builtins.map((b2) => b2.toLowerCase()));
+  const commands = [];
+  const skipped = [];
+  const shadowed = [];
+  const accepted = /* @__PURE__ */ new Map();
+  const lists = [["repo", input.repo], ["user", input.user]];
+  for (const [scope, defs] of lists) {
+    for (const def of defs) {
+      const name = def.name.toLowerCase();
+      if (!VALID.test(def.name)) skipped.push({ name: def.name, scope, reason: "invalid name" });
+      else if (builtins.has(name)) skipped.push({ name, scope, reason: `collides with built-in /${name}` });
+      else if (accepted.get(name) === scope) skipped.push({ name, scope, reason: "duplicate name" });
+      else if (accepted.get(name) === "repo") shadowed.push(name);
+      else {
+        accepted.set(name, scope);
+        commands.push({ ...def, name, scope });
+      }
+    }
+  }
+  commands.sort((a, b2) => a.name < b2.name ? -1 : a.name > b2.name ? 1 : 0);
+  return { commands, skipped, shadowed };
+}
+var VALID;
+var init_command_registry = __esm({
+  "../agent/src/import/command-registry.ts"() {
+    "use strict";
+    VALID = /^[A-Za-z][A-Za-z0-9_-]*$/;
+  }
+});
+
 // ../agent/src/index.ts
 var init_src = __esm({
   "../agent/src/index.ts"() {
@@ -5611,13 +5889,18 @@ var init_src = __esm({
     init_instructions_tool();
     init_trust();
     init_imports_config();
+    init_permission_rules();
+    init_command_args();
+    init_command_file();
+    init_command_registry();
+    init_claude_sources();
   }
 });
 
 // src/api-key.ts
 import { join } from "node:path";
 async function resolveApiKey(deps) {
-  const { env: env3, readFile: readFile6, homedir: homedir3 } = deps;
+  const { env: env3, readFile: readFile7, homedir: homedir3 } = deps;
   for (const name of ["SPACECODE_API_KEY", "ANTHROPIC_API_KEY"]) {
     const value = env3[name]?.trim();
     if (value) return value;
@@ -5626,7 +5909,7 @@ async function resolveApiKey(deps) {
   const file = join(dir, "auth.json");
   let raw;
   try {
-    raw = await readFile6(file);
+    raw = await readFile7(file);
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw new Error(`Cannot read ${file}: ${err instanceof Error ? err.message : String(err)}`);
@@ -5879,6 +6162,13 @@ ${USAGE}`);
     return 1;
   }
   const client = createProfileClient({ baseUrl: backendUrl(deps.env), apiKey, fetch: deps.fetch });
+  const TENANT_ASSET_CAP = 200;
+  let assetCount = 0;
+  try {
+    assetCount = (await client.index())?.assets.length ?? 0;
+  } catch (err) {
+    deps.log(`  note: could not read the profile asset count (${err instanceof Error ? err.message : String(err)}); the server still enforces the cap`);
+  }
   let failed = report.errors.length > 0;
   let imported = 0;
   let skipped = 0;
@@ -5901,6 +6191,11 @@ ${USAGE}`);
         deps.log(`  unchanged  ${a.kind}/${a.name}`);
         continue;
       }
+      if (!existing && assetCount >= TENANT_ASSET_CAP) {
+        failed = true;
+        deps.log(`  SKIPPED    ${a.kind}/${a.name}: the profile already holds ${assetCount} of ${TENANT_ASSET_CAP} allowed assets`);
+        continue;
+      }
       if (existing && !overwrite) {
         failed = true;
         deps.log(`  DIFFERS    ${a.kind}/${a.name}: the profile already has a different version; re-run with --overwrite to replace it`);
@@ -5908,6 +6203,7 @@ ${USAGE}`);
       }
       await client.put(a.kind, a.name, { content: a.content, description: a.description, baseVersion: existing?.version ?? 0 });
       imported++;
+      if (!existing) assetCount++;
       deps.log(`  imported   ${a.kind}/${a.name}`);
     } catch (err) {
       failed = true;
@@ -34655,7 +34951,7 @@ var init_source = __esm({
       object.level = options.level === void 0 ? colorLevel : options.level;
     };
     chalkFactory = (options) => {
-      const chalk2 = (...strings) => strings.join(" ");
+      const chalk2 = (...strings2) => strings2.join(" ");
       applyOptions(chalk2, options);
       Object.setPrototypeOf(chalk2, createChalk.prototype);
       return chalk2;
@@ -39202,12 +39498,12 @@ var require_utils = __commonJS({
       return str;
     }
     var codeCache = {};
-    function addToCodeCache(name, on, off) {
+    function addToCodeCache(name, on, off2) {
       on = "\x1B[" + on + "m";
-      off = "\x1B[" + off + "m";
+      off2 = "\x1B[" + off2 + "m";
       codeCache[on] = { set: name, to: true };
-      codeCache[off] = { set: name, to: false };
-      codeCache[name] = { on, off };
+      codeCache[off2] = { set: name, to: false };
+      codeCache[name] = { on, off: off2 };
     }
     addToCodeCache("bold", 1, 22);
     addToCodeCache("italics", 3, 23);
@@ -41089,7 +41385,7 @@ var require_core = __commonJS({
       return match && match.index === 0;
     }
     var BACKREF_RE = /\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;
-    function join6(regexps, separator = "|") {
+    function join8(regexps, separator = "|") {
       let numCaptures = 0;
       return regexps.map((regex2) => {
         numCaptures += 1;
@@ -41393,7 +41689,7 @@ var require_core = __commonJS({
             this.exec = () => null;
           }
           const terminators = this.regexes.map((el) => el[1]);
-          this.matcherRe = langRe(join6(terminators), true);
+          this.matcherRe = langRe(join8(terminators), true);
           this.lastIndex = 0;
         }
         /** @param {string} s */
@@ -84320,12 +84616,12 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk3, ...strings) => {
-      const [firstString] = strings;
+    var chalkTag = (chalk3, ...strings2) => {
+      const [firstString] = strings2;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
-        return strings.join(" ");
+        return strings2.join(" ");
       }
-      const arguments_ = strings.slice(1);
+      const arguments_ = strings2.slice(1);
       const parts = [firstString.raw[0]];
       for (let i = 1; i < firstString.length; i++) {
         parts.push(
@@ -100195,6 +100491,7 @@ var init_slash_commands = __esm({
       { name: "compact", description: "Summarize the conversation to free up context" },
       { name: "model", description: "List gateway models; /model <n|id> switches for this session" },
       { name: "turns", description: "Browse earlier turns and open their steps (shortcut: ctrl+o)" },
+      { name: "commands", description: "List the slash commands imported from Claude Code" },
       { name: "tools", description: "List the tools available to the agent" },
       { name: "exit", description: "Quit the REPL (alias: /quit)" },
       { name: "quit", description: "Quit the REPL" }
@@ -100203,15 +100500,15 @@ var init_slash_commands = __esm({
 });
 
 // src/components/PromptEditor.tsx
-function validateSubmission(text) {
+function validateSubmission(text, extra = []) {
   const slash = parseSlashCommand(text);
-  if (slash && !isKnownSlashCommand(slash.name)) return `Unknown command: /${slash.name}. Type /help for a list.`;
+  if (slash && !isKnownSlashCommand(slash.name) && !extra.some((c) => c.name === slash.name)) return `Unknown command: /${slash.name}. Type /help for a list.`;
   return null;
 }
 function withCursor(row, col) {
   return `${row.slice(0, col)}\x1B[7m${row[col] ?? " "}\x1B[27m${row.slice(col + 1)}`;
 }
-function PromptEditor({ onSubmit, disabled, history, listFiles: listFiles2, onTab, locked = false, promptGlyph: promptGlyph2 = ">", onEmptyEnter, unicode = true, fullWidth = false }) {
+function PromptEditor({ onSubmit, disabled, history, listFiles: listFiles2, onTab, locked = false, promptGlyph: promptGlyph2 = ">", onEmptyEnter, unicode = true, fullWidth = false, extraCommands = [] }) {
   const { exit } = use_app_default();
   const { columns } = useTerminalSize();
   const { isRawModeSupported } = use_stdin_default();
@@ -100314,7 +100611,7 @@ function PromptEditor({ onSubmit, disabled, history, listFiles: listFiles2, onTa
         else update(applyEdit(cur, { type: "delete" }));
         return;
       case "tab": {
-        const completed = completeSlash(cur.text, slashMatches(cur.text, SLASH_COMMANDS));
+        const completed = completeSlash(cur.text, slashMatches(cur.text, [...SLASH_COMMANDS, ...extraCommands]));
         if (completed) update(createBuffer(completed));
         else onTab?.();
         return;
@@ -100347,7 +100644,7 @@ function PromptEditor({ onSubmit, disabled, history, listFiles: listFiles2, onTa
           return;
         }
         const text = inShell ? `!${typed}` : typed;
-        const problem = inShell ? null : validateSubmission(text);
+        const problem = inShell ? null : validateSubmission(text, extraCommands);
         if (problem) {
           setHint(problem);
           return;
@@ -100367,7 +100664,7 @@ function PromptEditor({ onSubmit, disabled, history, listFiles: listFiles2, onTa
   }
   const rows = lines(buf);
   const { line, col } = lineCol(buf);
-  const matches = shell ? [] : slashMatches(buf.text, SLASH_COMMANDS);
+  const matches = shell ? [] : slashMatches(buf.text, [...SLASH_COMMANDS, ...extraCommands]);
   const picks = mention && files ? rankPaths(files, mention.query, PICKER_ROWS) : [];
   const pickAt = Math.min(sel, Math.max(picks.length - 1, 0));
   return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
@@ -100673,6 +100970,7 @@ function createLocalToolset(opts) {
     audit: new FileAuditLog(auditFile),
     mode: opts.yolo ? "yolo" : "enforce",
     permissions: opts.permissions,
+    ...opts.rules ? { rules: opts.rules } : {},
     confirm: opts.confirm
   });
   const { handlers: githubHandlers } = createGitHubTools((command) => host.exec(command));
@@ -101040,7 +101338,7 @@ var init_node_mentions = __esm({
 
 // src/import-gate.ts
 import { createHash, randomUUID } from "node:crypto";
-import { chmod as chmod3, mkdir as mkdir3, readFile as readFile4, realpath as realpath2, rename as rename3, writeFile as writeFile3 } from "node:fs/promises";
+import { chmod as chmod3, mkdir as mkdir3, readFile as readFile4, readdir as readdir3, realpath as realpath2, rename as rename3, writeFile as writeFile3 } from "node:fs/promises";
 import { dirname as dirname3, join as join4 } from "node:path";
 async function readOrNull(path12) {
   try {
@@ -101057,6 +101355,24 @@ async function writeTextAtomic(path12, text) {
   await chmod3(tmp, 384);
   await rename3(tmp, path12);
 }
+async function readRepoSources(cwd2) {
+  const files = {};
+  for (const name of REPO_SOURCE_FILES) {
+    const text = await readOrNull(join4(cwd2, name));
+    if (text !== null) files[name] = text;
+  }
+  let entries = [];
+  try {
+    entries = await readdir3(join4(cwd2, ".claude", "commands"));
+  } catch (err) {
+    if (err.code !== "ENOENT" && err.code !== "ENOTDIR") throw err;
+  }
+  for (const e of entries.filter((x2) => x2.endsWith(".md")).sort()) {
+    const text = await readOrNull(join4(cwd2, ".claude", "commands", e));
+    if (text !== null) files[`.claude/commands/${e}`] = text;
+  }
+  return files;
+}
 function nodeTrustFs() {
   return { readText: readOrNull, writeTextAtomic, realPath: (p) => realpath2(p) };
 }
@@ -101077,11 +101393,7 @@ async function importGateStatus(deps) {
     lines2.push(`imports: not read (${err instanceof Error ? err.message : String(err)}); every category off`);
   }
   try {
-    const files = {};
-    for (const name of REPO_SOURCE_FILES) {
-      const text = await readOrNull(join4(deps.cwd, name));
-      if (text !== null) files[name] = text;
-    }
+    const files = await readRepoSources(deps.cwd);
     const found = Object.keys(files);
     if (found.length === 0) return lines2;
     const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, files);
@@ -101104,10 +101416,167 @@ var init_import_gate = __esm({
   }
 });
 
+// src/permission-rules-loader.ts
+import { readFile as readFile5 } from "node:fs/promises";
+import { join as join5 } from "node:path";
+async function readOrNull2(path12) {
+  try {
+    return await readFile5(path12, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    throw err;
+  }
+}
+async function loadPermissionRules(deps) {
+  const none = (line) => ({ rules: void 0, defaultMode: void 0, statusLines: [line] });
+  const configPath = join5(deps.configDir, "imports.json");
+  try {
+    const loaded = parseImportsConfig(await readOrNull2(configPath), configPath);
+    if (loaded.error) return none("permission rules: off (imports.json unreadable)");
+    if (!loaded.config.categories.permissions) return none("permission rules: off (imports.json has permissions off)");
+  } catch (err) {
+    return none(`permission rules: off (imports.json not read: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  const lines2 = [];
+  const files = [{ scope: "user", path: join5(deps.homeDir, ".claude", "settings.json") }];
+  try {
+    const sources2 = await readRepoSources(deps.cwd);
+    if (sources2[".claude/settings.json"] !== void 0 || sources2[".claude/settings.local.json"] !== void 0) {
+      const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, sources2);
+      if (status === "trusted" || status === "session") {
+        files.push({ scope: "repo", path: join5(deps.cwd, ".claude", "settings.json") }, { scope: "local", path: join5(deps.cwd, ".claude", "settings.local.json") });
+      } else lines2.push(`permission rules: repo settings NOT loaded (${status === "never" ? "marked never trust" : "untrusted repo"})`);
+    }
+  } catch (err) {
+    lines2.push(`permission rules: repo settings NOT loaded (trust check failed: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  const sources = [];
+  let defaultMode;
+  for (const f of files) {
+    try {
+      const text = await readOrNull2(f.path);
+      if (text === null) continue;
+      const parsed = JSON.parse(text);
+      const perms = parsed?.permissions;
+      if (!perms || typeof perms !== "object") continue;
+      sources.push({ scope: f.scope, allow: strings(perms.allow), deny: strings(perms.deny), ask: strings(perms.ask) });
+      if (typeof perms.defaultMode === "string") {
+        const m2 = defaultModeFor(perms.defaultMode);
+        if (m2.mode) defaultMode = m2.mode;
+        else lines2.push(`permission rules: ${f.path}: ${m2.reason}`);
+      }
+    } catch (err) {
+      lines2.push(`permission rules: ${f.path} NOT loaded (${err instanceof Error ? err.message : String(err)})`);
+    }
+  }
+  const rules = buildRuleSet(sources);
+  const parts = ["user", "repo", "local"].filter((s) => sources.some((x2) => x2.scope === s)).map((s) => `${s} ${rules.counts[s].allow} allow/${rules.counts[s].deny} deny/${rules.counts[s].ask} ask`);
+  lines2.unshift(`permission rules: ${parts.length ? parts.join(", ") : "none found"}${defaultMode ? `; default mode ${defaultMode}` : ""}`);
+  for (const s of rules.skipped) lines2.push(`permission rules: skipped [${s.scope}] "${s.text}" (${s.reason})`);
+  return { rules, defaultMode, statusLines: lines2 };
+}
+var strings;
+var init_permission_rules_loader = __esm({
+  "src/permission-rules-loader.ts"() {
+    "use strict";
+    init_src();
+    init_import_gate();
+    strings = (v2) => Array.isArray(v2) ? v2.filter((x2) => typeof x2 === "string") : void 0;
+  }
+});
+
+// src/command-loader.ts
+import { join as join6 } from "node:path";
+async function userCommands(deps, lines2) {
+  try {
+    const apiKey = await resolveApiKey({ env: deps.env, readFile: deps.readFile, homedir: deps.homedir });
+    if (!apiKey) {
+      lines2.push("commands: user commands NOT loaded (not signed in)");
+      return [];
+    }
+    const client = createProfileClient({ baseUrl: backendUrl(deps.env), apiKey, fetch: deps.fetch, timeoutMs: 3e3 });
+    const index = await client.index();
+    const entries = (index?.assets ?? []).filter((a) => a.kind === "command");
+    const defs = [];
+    await Promise.all(
+      entries.map(async (e) => {
+        try {
+          const asset = await client.get("command", e.name);
+          if (asset) defs.push({ name: e.name, ...parseCommandFile(asset.content) });
+        } catch (err) {
+          lines2.push(`commands: ${e.name} NOT loaded (${err instanceof Error ? err.message : String(err)})`);
+        }
+      })
+    );
+    return defs;
+  } catch (err) {
+    lines2.push(`commands: user commands NOT loaded (${err instanceof Error ? err.message : String(err)})`);
+    return [];
+  }
+}
+async function repoCommands(deps, lines2) {
+  try {
+    const sources = await readRepoSources(deps.cwd);
+    const names = Object.keys(sources).filter((k2) => k2.startsWith(".claude/commands/"));
+    if (names.length === 0) return [];
+    const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, sources);
+    if (status !== "trusted" && status !== "session") {
+      lines2.push(`commands: ${names.length} repo command(s) NOT loaded (${status === "never" ? "marked never trust" : "untrusted repo"})`);
+      return [];
+    }
+    const defs = [];
+    for (const key of names) {
+      const text = sources[key];
+      const name = key.slice(".claude/commands/".length, -3);
+      if (Buffer.byteLength(text, "utf8") > MAX_ASSET_BYTES) {
+        lines2.push(`commands: repo command ${name} skipped (over ${MAX_ASSET_BYTES} bytes)`);
+        continue;
+      }
+      defs.push({ name, ...parseCommandFile(text) });
+    }
+    return defs;
+  } catch (err) {
+    lines2.push(`commands: repo commands NOT loaded (${err instanceof Error ? err.message : String(err)})`);
+    return [];
+  }
+}
+async function loadCommands(deps) {
+  const configPath = join6(deps.configDir, "imports.json");
+  try {
+    const loaded = parseImportsConfig(await deps.readFile(configPath).catch((err) => {
+      if (err.code === "ENOENT") return null;
+      throw err;
+    }), configPath);
+    if (loaded.error) return off("commands: off (imports.json unreadable)");
+    if (!loaded.config.categories.commands) return off("commands: off (imports.json has commands off)");
+  } catch (err) {
+    return off(`commands: off (imports.json not read: ${err instanceof Error ? err.message : String(err)})`);
+  }
+  const lines2 = [];
+  const [user, repo] = await Promise.all([userCommands(deps, lines2), repoCommands(deps, lines2)]);
+  const reg = buildCommandRegistry({ builtins: deps.builtins, user, repo });
+  const nUser = reg.commands.filter((c) => c.scope === "user").length;
+  const nRepo = reg.commands.length - nUser;
+  lines2.unshift(`commands: ${nUser} user, ${nRepo} repo${reg.shadowed.length ? `; repo shadows user: ${reg.shadowed.map((n) => "/" + n).join(", ")}` : ""}`);
+  for (const s of reg.skipped) lines2.push(`commands: skipped [${s.scope}] /${s.name} (${s.reason})`);
+  return { commands: reg.commands, statusLines: lines2 };
+}
+var off;
+var init_command_loader = __esm({
+  "src/command-loader.ts"() {
+    "use strict";
+    init_src();
+    init_api_key();
+    init_import_gate();
+    init_profile_runtime();
+    off = (line) => ({ commands: [], statusLines: [line] });
+  }
+});
+
 // src/useReplController.ts
-import { readFile as readFile5, writeFile as writeFile4, mkdir as mkdir4 } from "node:fs/promises";
+import { readFile as readFile6, writeFile as writeFile4, mkdir as mkdir4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join7 } from "node:path";
 import { execFile as execFile3 } from "node:child_process";
 function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mentionsOpt, sessions, resumeLatest: resumeLatest2, onViewTurns, onViewResume, isEscOwned }) {
   const { exit } = use_app_default();
@@ -101149,6 +101618,28 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
   const abortRef = (0, import_react30.useRef)(null);
   const pendingRef = (0, import_react30.useRef)(null);
   const toolsetRef = (0, import_react30.useRef)(null);
+  const rulesRef = (0, import_react30.useRef)(void 0);
+  const [commandsLoaded, setCommandsLoaded] = (0, import_react30.useState)({ commands: [], statusLines: [] });
+  (0, import_react30.useEffect)(() => {
+    let live = true;
+    loadCommands({
+      configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join7(homedir2(), ".spacecode"),
+      cwd: process.cwd(),
+      env: process.env,
+      readFile: (p) => readFile6(p, "utf-8"),
+      homedir: homedir2,
+      fetch,
+      builtins: SLASH_COMMANDS.map((c) => c.name)
+    }).then((r) => {
+      if (live) setCommandsLoaded(r);
+    }, (err) => {
+      if (live) setCommandsLoaded({ commands: [], statusLines: [`commands: NOT loaded (${err instanceof Error ? err.message : String(err)})`] });
+    });
+    return () => {
+      live = false;
+    };
+  }, []);
+  const commandEntries = (0, import_react30.useMemo)(() => commandsLoaded.commands.map((c) => ({ name: c.name, description: c.description })), [commandsLoaded]);
   (0, import_react30.useEffect)(() => {
     sessionTokensRef.current = sessionTokens;
   }, [sessionTokens]);
@@ -101201,6 +101692,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
       cwd: process.cwd(),
       permissions,
       onTodos: setTodos,
+      ...rulesRef.current ? { rules: rulesRef.current } : {},
       ...profileRef.current && profileRef.current.tools.length > 0 ? { extra: { tools: profileRef.current.tools, handlers: profileRef.current.handlers } } : {},
       confirm: (req) => new Promise((resolve2) => {
         const item = {
@@ -101270,8 +101762,15 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
       }
     })();
   }, [resumeLatest2, sessions, projectRoot, notice, applySession]);
-  const submit = (0, import_react30.useCallback)(async (prompt) => {
-    const shellCommand = shellCommandOf(prompt);
+  const submit = (0, import_react30.useCallback)(async (rawPrompt) => {
+    const typed = parseSlashCommand(rawPrompt);
+    const custom = typed && !isKnownSlashCommand(typed.name) ? commandsLoaded.commands.find((c) => c.name === typed.name) : void 0;
+    const prompt = custom ? expandCommand(custom.body, typed.args) : rawPrompt;
+    if (custom && prompt.trim() === "") {
+      notice(`/${custom.name} expands to an empty prompt.`);
+      return;
+    }
+    const shellCommand = custom ? null : shellCommandOf(prompt);
     if (shellCommand !== null) {
       if (shellCommand === "") {
         notice("Type a command after !");
@@ -101305,7 +101804,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
       }
       return;
     }
-    const slash = parseSlashCommand(prompt);
+    const slash = custom ? null : parseSlashCommand(prompt);
     if (slash && isKnownSlashCommand(slash.name)) {
       switch (slash.name) {
         case "exit":
@@ -101343,7 +101842,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
             maxContextTokens: DEFAULT_MAX_CONTEXT_TOKENS,
             tokens: sessionTokensRef.current,
             costUsd: estimateCostUsd(sessionTokensRef.current.input, sessionTokensRef.current.output),
-            profileLines: profileRef.current?.statusLines ?? ["profile: not loaded yet (loads on your first message)"]
+            profileLines: [...profileRef.current?.statusLines ?? ["profile: not loaded yet (loads on your first message)"], ...commandsLoaded.statusLines]
           }));
           return;
         case "resume": {
@@ -101400,7 +101899,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
           }
           setIsRunning(true);
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile6(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101422,7 +101921,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
         }
         case "model": {
           try {
-            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile5(p, "utf-8"), homedir: homedir2 });
+            const apiKey2 = await resolveApiKey({ env: process.env, readFile: (p) => readFile6(p, "utf-8"), homedir: homedir2 });
             if (!apiKey2) {
               notice(MISSING_KEY_MESSAGE);
               return;
@@ -101448,6 +101947,13 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
           if (onViewTurns) onViewTurns();
           else notice("The turn viewer is not available here.");
           return;
+        case "commands": {
+          const list2 = commandsLoaded.commands;
+          notice(list2.length === 0 ? `No imported commands.
+${commandsLoaded.statusLines.map((l) => `  ${l}`).join("\n")}`.trim() : `Imported commands:
+${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.description}` : ""}`).join("\n")}`);
+          return;
+        }
         case "tools": {
           const tools = toolsetRef.current?.tools ?? createLocalToolset({ cwd: process.cwd(), permissions, onTodos: setTodos }).tools;
           notice(`Tools:
@@ -101464,7 +101970,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       apiKey = await resolveApiKey({
         env: process.env,
-        readFile: (p) => readFile5(p, "utf-8"),
+        readFile: (p) => readFile6(p, "utf-8"),
         homedir: homedir2
       });
     } catch (err) {
@@ -101500,7 +102006,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     try {
       profilePromiseRef.current ??= prepareProfile({
         env: process.env,
-        readFile: (p) => readFile5(p, "utf-8"),
+        readFile: (p) => readFile6(p, "utf-8"),
         writeFile: (p, d) => writeFile4(p, d, { encoding: "utf-8", mode: 384 }),
         mkdir: async (p) => {
           await mkdir4(p, { recursive: true });
@@ -101509,11 +102015,14 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
         fetch,
         cwd: process.cwd(),
         gitRoot: gitTopLevel,
-        importGate: () => importGateStatus({
-          configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join5(homedir2(), ".spacecode"),
-          cwd: process.cwd(),
-          interactive: Boolean(process.stdin.isTTY)
-        })
+        importGate: async () => {
+          const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join7(homedir2(), ".spacecode");
+          const gate = await importGateStatus({ configDir, cwd: process.cwd(), interactive: Boolean(process.stdin.isTTY) });
+          const loaded = await loadPermissionRules({ configDir, homeDir: homedir2(), cwd: process.cwd() });
+          rulesRef.current = loaded.rules;
+          if (loaded.defaultMode && !yolo2) permissions.set(loaded.defaultMode);
+          return [...gate, ...loaded.statusLines];
+        }
       });
       profileRef.current = await profilePromiseRef.current;
       const toolset = createToolset();
@@ -101579,7 +102088,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
       abortRef.current = null;
       setIsRunning(false);
     }
-  }, [repoName2, history, exit, permissions, notice, refuseAllConfirms, commitTurn, mentions, createToolset, sessions, projectRoot, persist, applySession, model, onViewTurns, onViewResume, setTodos]);
+  }, [commandsLoaded, repoName2, history, exit, permissions, notice, refuseAllConfirms, commitTurn, mentions, createToolset, sessions, projectRoot, persist, applySession, model, onViewTurns, onViewResume, setTodos]);
   const approxTokens = (0, import_react30.useMemo)(
     () => dropDiscardedEvents(events).reduce((n, e) => n + (e.type === "text" ? estimateTokens(e.content) : e.type === "text_delta" ? estimateTokens(e.text) : 0), 0),
     [events]
@@ -101618,7 +102127,7 @@ ${tools.map((t) => `  ${t.name}`).join("\n")}`);
     }),
     [sessions, applySession]
   );
-  return { turns, events, isRunning, livePrompt, turnTokens, notices, pending, mode, todos, stats, submit, retry, mentions, replayed, resume };
+  return { turns, events, isRunning, livePrompt, turnTokens, notices, pending, mode, todos, stats, submit, retry, mentions, replayed, resume, commandEntries };
 }
 var import_react30, gitTopLevel, apiUrl;
 var init_useReplController = __esm({
@@ -101641,6 +102150,8 @@ var init_useReplController = __esm({
     init_api_key();
     init_profile_runtime();
     init_import_gate();
+    init_permission_rules_loader();
+    init_command_loader();
     init_slash_commands();
     init_useEventAccumulator();
     gitTopLevel = () => new Promise((resolve2) => {
@@ -101941,7 +102452,7 @@ function App2({ repoName: repoName2, onboardingMode: onboardingMode2, launchCoun
   const { isRawModeSupported } = use_stdin_default();
   const [resumeFound, setResumeFound] = (0, import_react34.useState)(null);
   const openResume = (0, import_react34.useCallback)((found) => setResumeFound(found), []);
-  const { turns, events, isRunning, livePrompt, notices, pending, mode, todos, stats, submit, retry, mentions, replayed, resume } = useReplController({ repoName: repoName2, yolo: yolo2, sessions: sessionStore, resumeLatest: resumeLatest2, onViewTurns: openViewer, onViewResume: isRawModeSupported && interactivePicker ? openResume : void 0, isEscOwned });
+  const { turns, events, isRunning, livePrompt, notices, pending, mode, todos, stats, submit, retry, mentions, replayed, resume, commandEntries } = useReplController({ repoName: repoName2, yolo: yolo2, sessions: sessionStore, resumeLatest: resumeLatest2, onViewTurns: openViewer, onViewResume: isRawModeSupported && interactivePicker ? openResume : void 0, isEscOwned });
   const { columns, rows } = useTerminalSize();
   const viewing = viewingRaw && !pending;
   const picking = resumeFound !== null && !pending;
@@ -102036,7 +102547,7 @@ function App2({ repoName: repoName2, onboardingMode: onboardingMode2, launchCoun
           ] }),
           isRunning && !pending && stats.elapsedMs !== null && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: formatThinking(stats.elapsedMs, stats.approxTokens, unicode) }),
           focusing && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: unicode ? "step focus: \u2191\u2193 or tab move \xB7 enter open/close \xB7 esc back to the prompt" : "step focus: up/down or tab move - enter open/close - esc back to the prompt" }),
-          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(PromptEditor, { onEmptyEnter: isRunning ? void 0 : retry, promptGlyph: promptGlyph(mode, unicode), unicode, fullWidth: true, onSubmit: submit, disabled: isRunning, history: promptHistory, listFiles: mentions.list, onTab: enterFocus, locked: focusing || viewing || picking || Boolean(pending) }),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(PromptEditor, { extraCommands: commandEntries, onEmptyEnter: isRunning ? void 0 : retry, promptGlyph: promptGlyph(mode, unicode), unicode, fullWidth: true, onSubmit: submit, disabled: isRunning, history: promptHistory, listFiles: mentions.list, onTab: enterFocus, locked: focusing || viewing || picking || Boolean(pending) }),
           /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...footer.level === "critical" ? paint("delete") : footer.level === "warn" ? paint("needsYou") : paint("secondary"), children: footer.text }),
           /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: formatHints({ running: isRunning, asking: Boolean(pending), columns }, activeGlyphs().sep) })
         ] })
@@ -102082,7 +102593,7 @@ function App2({ repoName: repoName2, onboardingMode: onboardingMode2, launchCoun
       pending && !waitingStep && promptNode,
       isRunning && !pending && stats.elapsedMs !== null && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: formatThinking(stats.elapsedMs, stats.approxTokens, activeGlyphs().rail === "\u2502") }),
       focusing && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: activeGlyphs().rail === "\u2502" ? "step focus: \u2191\u2193 or tab move \xB7 enter open/close \xB7 esc back to the prompt" : "step focus: up/down or tab move - enter open/close - esc back to the prompt" }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(PromptEditor, { onEmptyEnter: isRunning ? void 0 : retry, promptGlyph: promptGlyph(mode, activeGlyphs().rail === "\u2502"), unicode: activeGlyphs().rail === "\u2502", onSubmit: submit, disabled: isRunning, history: promptHistory, listFiles: mentions.list, onTab: enterFocus, locked: focusing || viewing || picking || Boolean(pending) }),
+      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(PromptEditor, { extraCommands: commandEntries, onEmptyEnter: isRunning ? void 0 : retry, promptGlyph: promptGlyph(mode, activeGlyphs().rail === "\u2502"), unicode: activeGlyphs().rail === "\u2502", onSubmit: submit, disabled: isRunning, history: promptHistory, listFiles: mentions.list, onTab: enterFocus, locked: focusing || viewing || picking || Boolean(pending) }),
       /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...footer.level === "critical" ? paint("delete") : footer.level === "warn" ? paint("needsYou") : paint("secondary"), children: footer.text }),
       /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { ...paint("secondary"), children: formatHints({ running: isRunning, asking: Boolean(pending), columns }, activeGlyphs().sep) })
     ] })
@@ -102225,7 +102736,7 @@ function clearOnResize(stdout) {
 var import_jsx_runtime14 = __toESM(require_jsx_runtime(), 1);
 if (process.argv[2] === "import-claude") {
   const { runImportClaude: runImportClaude2 } = await Promise.resolve().then(() => (init_import_claude(), import_claude_exports));
-  const { readFile: readFile6, readdir: readdir3 } = await import("node:fs/promises");
+  const { readFile: readFile7, readdir: readdir4 } = await import("node:fs/promises");
   const { execFile: execFile4 } = await import("node:child_process");
   const gitRoot = () => new Promise((resolve2) => {
     execFile4("git", ["rev-parse", "--show-toplevel"], { cwd: process.cwd() }, (err, stdout) => resolve2(err ? null : stdout.trim() || null));
@@ -102233,8 +102744,8 @@ if (process.argv[2] === "import-claude") {
   const code = await runImportClaude2({
     argv: process.argv.slice(2),
     env: process.env,
-    fs: { readFile: (p) => readFile6(p, "utf-8"), readdir: (p) => readdir3(p) },
-    readFile: (p) => readFile6(p, "utf-8"),
+    fs: { readFile: (p) => readFile7(p, "utf-8"), readdir: (p) => readdir4(p) },
+    readFile: (p) => readFile7(p, "utf-8"),
     homedir: os5.homedir,
     cwd: process.cwd(),
     gitRoot,