token-goat 2.9.28 → 2.9.30

package/dist/{token-goat-chunk-CC2PYJM7.mjs → token-goat-chunk-7IN2MKDS.mjs}

@@ -1,130 +1,40 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
+import {
+  KNOWN_HARNESS_NAMES
+} from "./token-goat-chunk-U4N3BN2W.mjs";
 import {
   registerReset
-} from "./token-goat-chunk-EEIDFMEM.mjs";
+} from "./token-goat-chunk-YZAAZU2S.mjs";
+import {
+  FALSY_ENV_VALUES,
+  TRUTHY_ENV_VALUES,
+  envBool,
+  envInt,
+  envStr,
+  envStrList
+} from "./token-goat-chunk-IVE6U7KV.mjs";
 import {
-  ENV_KEYS,
   atomicWriteText,
-  canonicalize,
-  configPath,
   decodeSource,
   extractErrorMessage,
-  foldPath,
-  projectConfigPath,
   runGit
-} from "./token-goat-chunk-L45ZQRT7.mjs";
+} from "./token-goat-chunk-GOLEOXZP.mjs";
+import {
+  canonicalize,
+  foldPath
+} from "./token-goat-chunk-AM5V6GSX.mjs";
 import {
   normalizeDarwinSystemAlias
-} from "./token-goat-chunk-NMTKNYGF.mjs";
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  configPath,
+  projectConfigPath
+} from "./token-goat-chunk-VES7EL7O.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
 
-// src/bridges/registry.ts
-init_define_import_meta_env();
-var KNOWN_HARNESS_NAMES = /* @__PURE__ */ new Set([
-  "claudecode",
-  "codex",
-  "opencode",
-  "gemini",
-  "hermes",
-  "openclaw",
-  "pi",
-  "copilot_cli",
-  "grok",
-  "qwen",
-  "kimi",
-  "vscode",
-  "visualstudio",
-  "generic"
-]);
-function detectHarness() {
-  const env = process.env;
-  const override = (env[ENV_KEYS.HARNESS_OVERRIDE] ?? "").toLowerCase().trim();
-  if (override && KNOWN_HARNESS_NAMES.has(override)) {
-    return override;
-  }
-  if (env["HERMES_SESSION_ID"] || env["HERMES_HOME"]) {
-    return "hermes";
-  }
-  if (env["TERM_PROGRAM"] === "claude-code" || env["CLAUDE_CODE_VERSION"] !== void 0 || env["CLAUDE_CODE_SESSION_ID"]) {
-    return "claudecode";
-  }
-  if (env["CODEX_SESSION_ID"] !== void 0 || env["CODEX_SESSION"]) {
-    return "codex";
-  }
-  if (env["OPENCODE_SESSION_ID"] !== void 0 || env["OPENCODE_SESSION"]) {
-    return "opencode";
-  }
-  if (env["GROK_SESSION_ID"] !== void 0) {
-    return "grok";
-  }
-  if (env["OPENCLAW_SESSION_ID"] !== void 0) {
-    return "openclaw";
-  }
-  if (env["ANTHROPIC_API_KEY"]) {
-    return "claudecode";
-  }
-  if (env["OPENAI_API_KEY"] && !env["ANTHROPIC_API_KEY"]) {
-    return "codex";
-  }
-  if ((env["GEMINI_API_KEY"] || env["GOOGLE_API_KEY"]) && !env["ANTHROPIC_API_KEY"]) {
-    return "gemini";
-  }
-  return "generic";
-}
-var _cached = null;
-function getHarnessName() {
-  if (_cached === null) {
-    _cached = detectHarness();
-  }
-  return _cached;
-}
-function resetHarnessCache() {
-  _cached = null;
-}
-registerReset(resetHarnessCache);
-
-// src/env.ts
-init_define_import_meta_env();
-var FALSY_ENV_VALUES = /* @__PURE__ */ new Set(["0", "false", "no", "off"]);
-var TRUTHY_ENV_VALUES = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
-function envStr(key, defaultVal) {
-  const raw = process.env[key];
-  if (raw === void 0) return defaultVal;
-  const trimmed = raw.trim();
-  return trimmed === "" ? defaultVal : trimmed;
-}
-function envBool(key, defaultVal) {
-  const raw = process.env[key];
-  if (raw === void 0) return defaultVal;
-  const norm = raw.trim().toLowerCase();
-  if (norm === "") return defaultVal;
-  if (TRUTHY_ENV_VALUES.has(norm)) return true;
-  if (FALSY_ENV_VALUES.has(norm)) return false;
-  return defaultVal;
-}
-function envInt(key, defaultVal, min, max) {
-  const raw = process.env[key];
-  if (raw === void 0) return defaultVal;
-  const norm = raw.trim();
-  if (norm === "") return defaultVal;
-  if (!/^[+-]?\d+$/.test(norm)) return defaultVal;
-  const val = parseInt(norm, 10);
-  if (!Number.isFinite(val)) return defaultVal;
-  let clamped = val;
-  if (min !== void 0) clamped = Math.max(min, clamped);
-  if (max !== void 0) clamped = Math.min(max, clamped);
-  return clamped;
-}
-function envStrList(key, defaultVal, delimiter2) {
-  const raw = process.env[key];
-  if (raw === void 0) return defaultVal;
-  const entries = raw.split(delimiter2).map((s) => s.trim()).filter((s) => s !== "");
-  return entries.length > 0 ? entries : defaultVal;
-}
-
 // src/fingerprint.ts
 init_define_import_meta_env();
 import { createHash } from "node:crypto";
@@ -137,6 +47,14 @@ function fingerprintContent(content) {
 function shortFingerprint(content) {
   return fingerprintContent(content).slice(0, 16);
 }
+function indexedFileIsGone(filePath) {
+  try {
+    return !fs.statSync(filePath).isFile();
+  } catch (err) {
+    const code = err?.code;
+    return code === "ENOENT" || code === "ENOTDIR";
+  }
+}
 function fingerprintFile(filePath) {
   let data;
   try {
@@ -328,7 +246,7 @@ function getDisplayRoot(explicitRoot) {
 }
 registerReset(() => {
   _displayRootCache = null;
-});
+}, { perRequest: true });
 function isUnderSystemTemp(filePath) {
   let sysTemp;
   try {
@@ -361,6 +279,7 @@ function resolveProjectRoot(opts) {
 // src/config_project.ts
 init_define_import_meta_env();
 import * as fs3 from "node:fs";
+import * as path2 from "node:path";
 
 // node_modules/smol-toml/dist/index.js
 init_define_import_meta_env();
@@ -374,107 +293,14 @@ init_define_import_meta_env();
 // node_modules/smol-toml/dist/primitive.js
 init_define_import_meta_env();
 
-// node_modules/smol-toml/dist/date.js
-init_define_import_meta_env();
-var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
-var TomlDate = class _TomlDate extends Date {
-  #hasDate = false;
-  #hasTime = false;
-  #offset = null;
-  constructor(date) {
-    let hasDate = true;
-    let hasTime = true;
-    let offset = "Z";
-    if (typeof date === "string") {
-      let match = date.match(DATE_TIME_RE);
-      if (match) {
-        if (!match[1]) {
-          hasDate = false;
-          date = `0000-01-01T${date}`;
-        }
-        hasTime = !!match[2];
-        hasTime && date[10] === " " && (date = date.replace(" ", "T"));
-        if (match[2] && +match[2] > 23) {
-          date = "";
-        } else {
-          offset = match[3] || null;
-          date = date.toUpperCase();
-          if (!offset && hasTime)
-            date += "Z";
-        }
-      } else {
-        date = "";
-      }
-    }
-    super(date);
-    if (!isNaN(this.getTime())) {
-      this.#hasDate = hasDate;
-      this.#hasTime = hasTime;
-      this.#offset = offset;
-    }
-  }
-  isDateTime() {
-    return this.#hasDate && this.#hasTime;
-  }
-  isLocal() {
-    return !this.#hasDate || !this.#hasTime || !this.#offset;
-  }
-  isDate() {
-    return this.#hasDate && !this.#hasTime;
-  }
-  isTime() {
-    return this.#hasTime && !this.#hasDate;
-  }
-  isValid() {
-    return this.#hasDate || this.#hasTime;
-  }
-  toISOString() {
-    let iso = super.toISOString();
-    if (this.isDate())
-      return iso.slice(0, 10);
-    if (this.isTime())
-      return iso.slice(11, 23);
-    if (this.#offset === null)
-      return iso.slice(0, -1);
-    if (this.#offset === "Z")
-      return iso;
-    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
-    offset = this.#offset[0] === "-" ? offset : -offset;
-    let offsetDate = new Date(this.getTime() - offset * 6e4);
-    return offsetDate.toISOString().slice(0, -1) + this.#offset;
-  }
-  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
-    let date = new _TomlDate(jsDate);
-    date.#offset = offset;
-    return date;
-  }
-  static wrapAsLocalDateTime(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#offset = null;
-    return date;
-  }
-  static wrapAsLocalDate(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#hasTime = false;
-    date.#offset = null;
-    return date;
-  }
-  static wrapAsLocalTime(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#hasDate = false;
-    date.#offset = null;
-    return date;
-  }
-};
-
 // node_modules/smol-toml/dist/error.js
 init_define_import_meta_env();
 function getLineColFromPtr(string, ptr) {
-  let lines = string.slice(0, ptr).split(/\r\n|\n|\r/g);
+  let lines = string.slice(0, ptr).split(/\r?\n/);
   return [lines.length, lines.pop().length + 1];
 }
 function makeCodeBlock(string, line, column) {
-  let lines = string.split(/\r\n|\n|\r/g);
+  let lines = string.split(/\r?\n/);
   let codeblock = "";
   let numberLen = (Math.log10(line + 1) | 0) + 1;
   for (let i = line - 1; i <= line + 1; i++) {
@@ -492,7 +318,7 @@ function makeCodeBlock(string, line, column) {
   }
   return codeblock;
 }
-var TomlError = class extends Error {
+var TomlError = class _TomlError extends Error {
   line;
   column;
   codeblock;
@@ -506,70 +332,15 @@ ${codeblock}`, options);
     this.column = column;
     this.codeblock = codeblock;
   }
-};
-
-// node_modules/smol-toml/dist/util.js
-init_define_import_meta_env();
-function indexOfNewline(str, start = 0) {
-  let idx = str.indexOf("\n", start);
-  if (str.charCodeAt(idx - 1) === 13)
-    idx--;
-  return idx;
-}
-function skipComment(ctx) {
-  for (; ctx.p < ctx.s.length; ctx.p++) {
-    let c = ctx.s.charCodeAt(ctx.p);
-    if (c === 10)
-      break;
-    if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
-      ctx.p++;
-      break;
-    }
-    if (c < 32 && c !== 9 || c === 127) {
-      throw new TomlError("control characters are not allowed in comments", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
-    }
-  }
-}
-function skipVoid(ctx, banNewLines, banComments) {
-  let c;
-  while (1) {
-    while ((c = ctx.s.charCodeAt(ctx.p)) === 32 || c === 9 || !banNewLines && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10))
-      ctx.p++;
-    if (banComments || c !== 35)
-      break;
-    skipComment(ctx);
+  /** @internal */
+  static x(message, ctx, ptr) {
+    throw new _TomlError(message, { toml: ctx.s, ptr: ptr ?? ctx.p });
   }
-}
-function skipUntil(ctx, sep, end) {
-  let ptr = ctx.p;
-  if (!end) {
-    ptr = indexOfNewline(ctx.s, ptr);
-    ctx.p = ptr < 0 ? ctx.s.length : ptr;
-    return;
-  }
-  for (; ctx.p < ctx.s.length; ctx.p++) {
-    let c = ctx.s.charCodeAt(ctx.p);
-    if (c === 35) {
-      skipComment(ctx);
-    } else if (c === end || c === sep) {
-      return;
-    }
-  }
-  throw new TomlError("cannot find end of structure", {
-    toml: ctx.s,
-    ptr
-  });
-}
+};
 
 // node_modules/smol-toml/dist/primitive.js
-var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
-var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
-var LEADING_ZERO = /^[+-]?0[0-9_]/;
 function parseString(ctx) {
-  let start = ctx.p;
+  let startPtr = ctx.p;
   let c = ctx.s.charCodeAt(ctx.p++);
   let first = c;
   let isLiteral = c === 39;
@@ -588,10 +359,7 @@ function parseString(ctx) {
     if (isMultiline && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)) {
       state = state && 3;
     } else if (c < 32 && c !== 9 || c === 127) {
-      throw new TomlError("control characters are not allowed in strings", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
+      TomlError.x("control characters are not allowed in strings", ctx);
     } else if ((!state || state === 3) && c === first && (!isMultiline || ctx.s.charCodeAt(ctx.p + 1) === first && ctx.s.charCodeAt(ctx.p + 2) === first)) {
       if (isMultiline) {
         if (ctx.s.charCodeAt(ctx.p + 3) === first)
@@ -599,8 +367,10 @@ function parseString(ctx) {
         if (ctx.s.charCodeAt(ctx.p + 3) === first)
           ctx.p++;
       }
-      if (!state)
-        parsed += ctx.s.slice(sliceStart, ctx.p);
+      if (!state) {
+        let s = ctx.s.slice(sliceStart, ctx.p);
+        parsed = parsed ? parsed + s : s;
+      }
       ctx.p += isMultiline ? 3 : 1;
       return parsed;
     } else if (!state) {
@@ -610,10 +380,11 @@ function parseString(ctx) {
       }
     } else if (state === 1) {
       if (c === 120 || c === 117 || c === 85) {
+        let errPtr = ctx.p++ - 1;
         let value = 0;
         let len = c === 120 ? 2 : c === 117 ? 4 : 8;
         for (let j = 0; j < len; j++, ctx.p++) {
-          let hex = ctx.s.charCodeAt(ctx.p + 1);
+          let hex = ctx.s.charCodeAt(ctx.p);
           let digit = (
             /* 0-9 */
             hex >= 48 && hex <= 57 ? hex - 48 : (
@@ -625,16 +396,16 @@ function parseString(ctx) {
             )
           );
           if (digit < 0)
-            throw new TomlError("invalid non-hex character in unicode escape", { toml: ctx.s, ptr: ctx.p + 1 });
+            TomlError.x("invalid non-hex character in unicode escape", ctx);
           value = value << 4 | digit;
         }
         if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
-          throw new TomlError("invalid unicode escape", { toml: ctx.s, ptr: ctx.p });
+          TomlError.x("invalid unicode escape", ctx, errPtr);
         }
         parsed += String.fromCodePoint(value);
-        sliceStart = ctx.p + 1;
+        sliceStart = ctx.p--;
         state = 0;
-      } else if (c === 32 || c === 9) {
+      } else if (isMultiline && (c === 32 || c === 9)) {
         state = 2;
       } else {
         if (c === 98)
@@ -654,85 +425,154 @@ function parseString(ctx) {
         else if (c === 92)
           parsed += "\\";
         else
-          throw new TomlError("unrecognized escape sequence", { toml: ctx.s, ptr: ctx.p });
+          TomlError.x("unrecognised escape sequence", ctx);
         sliceStart = ctx.p + 1;
         state = 0;
       }
     } else if (c !== 32 && c !== 9) {
-      if (state === 2) {
-        throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
-          toml: ctx.s,
-          ptr: sliceStart
-        });
-      }
+      if (state === 2)
+        TomlError.x("invalid escape: only line-ending whitespace may be escaped", ctx, sliceStart);
       state = !isLiteral && c === 92 ? 1 : 0;
       sliceStart = ctx.p;
     }
   }
-  throw new TomlError("unfinished string", { toml: ctx.s, ptr: start });
-}
-function sliceAndTrimEndOf(ctx, start, end) {
-  let value = ctx.s.slice(start, end);
-  let commentIdx = value.indexOf("#");
-  if (commentIdx > 0) {
-    skipComment({ s: value, p: commentIdx, d: 0 });
-    value = value.slice(0, commentIdx);
-  }
-  return value.trimEnd();
-}
-function parseValue(ctx, integersAsBigInt, end) {
-  let ptr = ctx.p;
-  let err = { toml: ctx.s, ptr };
-  skipUntil(ctx, 44, end);
-  let value = sliceAndTrimEndOf(ctx, ptr, ctx.p);
-  if (!value)
-    throw new TomlError("incomplete declaration: value expected", err);
-  if (value === "-inf")
-    return -Infinity;
-  if (value === "inf" || value === "+inf")
-    return Infinity;
-  if (value === "nan" || value === "+nan" || value === "-nan")
-    return NaN;
-  if (value === "-0")
-    return integersAsBigInt ? 0n : 0;
-  let isInt = INT_REGEX.test(value);
-  if (isInt || FLOAT_REGEX.test(value)) {
-    if (LEADING_ZERO.test(value)) {
-      throw new TomlError("leading zeroes are not allowed", err);
-    }
-    value = value.replace(/_/g, "");
-    let numeric = +value;
-    if (isNaN(numeric)) {
-      throw new TomlError("invalid number", err);
-    }
-    if (isInt) {
-      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
-        throw new TomlError("integer value cannot be represented losslessly", err);
+  TomlError.x("unfinished string", ctx, startPtr);
+}
+
+// node_modules/smol-toml/dist/extract.js
+init_define_import_meta_env();
+
+// node_modules/smol-toml/dist/date.js
+init_define_import_meta_env();
+var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[Tt ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|z|[-+]\d{2}:\d{2})?$/i;
+var TomlDate = class _TomlDate extends Date {
+  #hasDate = false;
+  #hasTime = false;
+  #offset = null;
+  constructor(date, fasttype, unsafeDelim) {
+    let hasDate = true;
+    let hasTime = true;
+    let offset = "Z";
+    let c;
+    if (typeof date === "string") {
+      if (fasttype)
+        prep: {
+          if (fasttype < 3) {
+            if (+date.slice(11, 13) > 23) {
+              date = "";
+              break prep;
+            }
+            if (fasttype === 2) {
+              offset = null;
+              date += "Z";
+            } else if ((c = date.charCodeAt(date.length - 1)) !== 90 && c !== 122) {
+              offset = date.slice(date.length - 6);
+            }
+            if (unsafeDelim)
+              date = date.slice(0, 10) + "T" + date.slice(11);
+          } else if (fasttype === 4) {
+            date = +date.slice(0, 2) > 23 ? "" : `0000-01-01T${date}Z`;
+          }
+          hasDate = fasttype !== 4;
+          hasTime = fasttype !== 3;
+        }
+      else {
+        let match = date.match(DATE_TIME_RE);
+        if (match) {
+          if (!match[1]) {
+            hasDate = false;
+            date = `0000-01-01T${date}`;
+          }
+          hasTime = !!match[2];
+          hasTime && date[10] === " " && (date = date.replace(" ", "T"));
+          if (match[2] && +match[2] > 23) {
+            date = "";
+          } else {
+            offset = match[3] || null;
+            if (!offset && hasTime)
+              date += "Z";
+          }
+        } else {
+          date = "";
+        }
       }
-      if (isInt || integersAsBigInt === true)
-        numeric = BigInt(value);
     }
-    return numeric;
+    super(date);
+    if (!isNaN(this.getTime())) {
+      this.#hasDate = hasDate;
+      this.#hasTime = hasTime;
+      this.#offset = offset;
+    }
   }
-  const date = new TomlDate(value);
-  if (!date.isValid())
-    throw new TomlError("invalid value", err);
-  return date;
-}
+  isDateTime() {
+    return this.#hasDate && this.#hasTime;
+  }
+  isLocal() {
+    return !this.#hasDate || !this.#hasTime || !this.#offset;
+  }
+  isDate() {
+    return this.#hasDate && !this.#hasTime;
+  }
+  isTime() {
+    return this.#hasTime && !this.#hasDate;
+  }
+  isValid() {
+    return this.#hasDate || this.#hasTime;
+  }
+  toISOString() {
+    let iso = super.toISOString();
+    if (this.isDate())
+      return iso.slice(0, 10);
+    if (this.isTime())
+      return iso.slice(11, 23);
+    if (this.#offset === null)
+      return iso.slice(0, -1);
+    if (this.#offset === "Z" || this.#offset === "z")
+      return iso;
+    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
+    offset = this.#offset[0] === "-" ? offset : -offset;
+    let offsetDate = new Date(this.getTime() - offset * 6e4);
+    return offsetDate.toISOString().slice(0, -1) + this.#offset;
+  }
+  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
+    let date = new _TomlDate(jsDate);
+    date.#offset = offset;
+    return date;
+  }
+  static wrapAsLocalDateTime(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalDate(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#hasTime = false;
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalTime(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#hasDate = false;
+    date.#offset = null;
+    return date;
+  }
+};
 
 // node_modules/smol-toml/dist/extract.js
-init_define_import_meta_env();
-function extractValue(ctx, end, integersAsBigInt) {
-  let ptr = ctx.p;
-  let c = ctx.s.charCodeAt(ptr);
+function isDigit(char, base = 10) {
+  return base === 16 ? char > 47 && char < 58 || char > 64 && char < 71 || char > 96 && char < 103 : char > 47 && char < 48 + base;
+}
+function isEndOfValue(char, delim) {
+  return char === 32 || char === 9 || char === 10 || char === 13 || // Structure end or next value delimiter
+  delim && (char === delim || char === 44) || // Comment
+  char === 35;
+}
+function extractValue(ctx, end) {
+  let errPtr = ctx.p;
+  let c = ctx.s.charCodeAt(ctx.p);
   if (c === 91 || c === 123) {
-    if (!ctx.d--) {
-      throw new TomlError("document contains excessively nested structures. aborting.", {
-        toml: ctx.s,
-        ptr
-      });
-    }
-    let value = c === 91 ? parseArray(ctx, integersAsBigInt) : parseInlineTable(ctx, integersAsBigInt);
+    ctx.d-- || TomlError.x("document contains excessively nested structures. aborting.", ctx);
+    let value = c === 91 ? parseArray(ctx) : parseInlineTable(ctx);
     ctx.d++;
     return value;
   }
@@ -741,90 +581,263 @@ function extractValue(ctx, end, integersAsBigInt) {
   }
   if (c === 116) {
     if (ctx.s.charCodeAt(++ctx.p) !== 114 || ctx.s.charCodeAt(++ctx.p) !== 117 || ctx.s.charCodeAt(++ctx.p) !== 101)
-      throw new TomlError("invalid value", { toml: ctx.s, ptr });
-    ctx.p++;
-    return true;
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, true;
   }
   if (c === 102) {
     if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 108 || ctx.s.charCodeAt(++ctx.p) !== 115 || ctx.s.charCodeAt(++ctx.p) !== 101)
-      throw new TomlError("invalid value", { toml: ctx.s, ptr });
-    ctx.p++;
-    return false;
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, false;
+  }
+  if (c === 43 || c === 45) {
+    return parseNumber(ctx, ctx.p, ctx.s.charCodeAt(++ctx.p), 44 - c, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 4) === 45 && ctx.s.charCodeAt(ctx.p + 7) === 45) {
+    return parseDate(ctx, c, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 2) === 58) {
+    return parseTime(ctx, c, end);
+  }
+  return parseNumber(ctx, ctx.p, c, 0, end);
+}
+function parseNumber(ctx, startPtr, startChr, sign, endChr) {
+  let c = startChr;
+  let state = 0;
+  let hasUnderscores = false;
+  if (c === 105) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 110 || ctx.s.charCodeAt(++ctx.p) !== 102)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, (sign || 1) / 0;
+  }
+  if (c === 110) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 110)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, NaN;
+  }
+  if (c === 48) {
+    if (++ctx.p >= ctx.s.length || isEndOfValue(c = ctx.s.charCodeAt(ctx.p), endChr))
+      return ctx.bi === true ? 0n : 0;
+    if (!sign) {
+      if (c === 120)
+        return parseIntegerBaseN(ctx, startPtr, 16, endChr);
+      else if (c === 98)
+        return parseIntegerBaseN(ctx, startPtr, 2, endChr);
+      else if (c === 111)
+        return parseIntegerBaseN(ctx, startPtr, 8, endChr);
+    }
+    if (c === 46)
+      state = 2;
+    else if (c === 101 || c === 69)
+      state = 4;
+    else
+      TomlError.x("illegal leading zero", ctx, startPtr);
+  } else if (!isDigit(c))
+    TomlError.x("invalid value", ctx, startPtr);
+  while (++ctx.p < ctx.s.length && (c = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c, endChr))) {
+    if (!state)
+      state = 1;
+    if (c === 95) {
+      if (!(state & 1))
+        TomlError.x("illegal underscore", ctx);
+      state += 11;
+      hasUnderscores = true;
+    } else if (state === 1 && c === 46)
+      state = 2;
+    else if ((state === 1 || state === 3) && (c === 101 || c === 69))
+      state = 4;
+    else if (state === 4 && (c === 43 || c === 45)) {
+    } else if (!isDigit(c))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (state > 9)
+      state -= 11;
+    else if (!(state & 1))
+      state++;
+  }
+  if (!state) {
+    let val = (startChr - 48) * (sign || 1);
+    return ctx.bi === true ? BigInt(val) : val;
+  }
+  if (!(state & 1))
+    TomlError.x("unfinished numeric value", ctx, startPtr);
+  let str = ctx.s.slice(startPtr, ctx.p);
+  if (hasUnderscores)
+    str = str.replaceAll("_", "");
+  return state > 1 ? parseFloat(str) : parseInteger(ctx, str, 10, startPtr);
+}
+function parseIntegerBaseN(ctx, startPtr, base, endChr) {
+  let c, underscore = 1;
+  while (++ctx.p < ctx.s.length && (c = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c, endChr))) {
+    if (c === 95) {
+      if (underscore & 1)
+        TomlError.x("illegal underscore", ctx);
+      underscore = 3;
+    } else if (!isDigit(c, base))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (underscore & 1)
+      underscore--;
+  }
+  if (underscore & 1)
+    TomlError.x("unfinished numeric value", ctx);
+  let str = ctx.s.slice(startPtr + 2, ctx.p);
+  if (underscore)
+    str = str.replaceAll("_", "");
+  return parseInteger(ctx, str, base, startPtr);
+}
+function parseInteger(ctx, str, base, startPtr) {
+  if (ctx.bi !== true)
+    int: {
+      let val = parseInt(str, base);
+      if (!Number.isSafeInteger(val)) {
+        if (ctx.bi)
+          break int;
+        TomlError.x("integer value cannot be represented losslessly", ctx, startPtr);
+      }
+      return val;
+    }
+  return base === 10 ? BigInt(str) : BigInt((base === 2 ? "0b" : base === 8 ? "0o" : "0x") + str);
+}
+function parseDate(ctx, c, endChr) {
+  let startPtr = ctx.p++, unsafeSeparator;
+  if (!isDigit(c) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++))) {
+    return parseNumber(ctx, ctx.p = startPtr, c, 0, endChr);
+  }
+  ctx.p += 5;
+  if (!isDigit(ctx.s.charCodeAt(ctx.p++)))
+    TomlError.x("invalid date-time: date part is malformed", ctx, startPtr);
+  if (ctx.p >= ctx.s.length || ((c = ctx.s.charCodeAt(ctx.p)) !== 32 || (unsafeSeparator = true, !isDigit(ctx.s.charCodeAt(ctx.p + 1)))) && c !== 84 && c !== 116) {
+    let t2 = ctx.s.slice(startPtr, ctx.p);
+    return readDate(ctx, t2, 3, false, startPtr);
+  }
+  if (ctx.s.charCodeAt(ctx.p += 3) !== 58)
+    TomlError.x("invalid date-time: time part is malformed", ctx, startPtr);
+  if (ctx.s.charCodeAt(ctx.p += 3) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  if (c = ctx.s.charCodeAt(ctx.p)) {
+    if (c === 90 || c === 122) {
+      let t2 = ctx.s.slice(startPtr, ++ctx.p);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, "[+00:00]");
+    }
+    if (c === 43 || c === 45) {
+      let t2 = ctx.s.slice(startPtr, ctx.p += 6);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, !ctx.ld && "[" + ctx.s.slice(ctx.p - 6, ctx.p) + "]");
+    }
+  }
+  let t = ctx.s.slice(startPtr, ctx.p);
+  return readDate(ctx, t, 2, unsafeSeparator, startPtr);
+}
+function parseTime(ctx, c, endChr) {
+  let start = ctx.p;
+  if (!isDigit(c) || !isDigit(ctx.s.charCodeAt(++ctx.p))) {
+    return parseNumber(ctx, --ctx.p, c, 0, endChr);
+  }
+  if (ctx.s.charCodeAt(ctx.p += 4) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  let t = ctx.s.slice(start, ctx.p);
+  return readDate(ctx, t, 4, false, start);
+}
+function readDate(ctx, str, type, unsafeDelim, errPtr, temporalSuffix) {
+  if (ctx.ld) {
+    let date = new TomlDate(str, type, unsafeDelim);
+    if (!date.isValid())
+      TomlError.x("invalid date", ctx, errPtr);
+    return date;
+  }
+  try {
+    if (temporalSuffix)
+      str += temporalSuffix;
+    switch (type) {
+      case 1:
+        return Temporal.ZonedDateTime.from(str);
+      case 2:
+        return Temporal.PlainDateTime.from(str);
+      case 3:
+        return Temporal.PlainDate.from(str);
+      case 4:
+        return Temporal.PlainTime.from(str);
+    }
+  } catch (e) {
+    TomlError.x(e instanceof Error ? e.message : "" + e, ctx, errPtr);
+  }
+}
+
+// node_modules/smol-toml/dist/util.js
+init_define_import_meta_env();
+function skipComment(ctx) {
+  for (; ctx.p < ctx.s.length; ctx.p++) {
+    let c = ctx.s.charCodeAt(ctx.p);
+    if (c === 10)
+      break;
+    if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
+      ctx.p++;
+      break;
+    }
+    if (c < 32 && c !== 9 || c === 127) {
+      TomlError.x("control characters are not allowed in comments", ctx);
+    }
+  }
+}
+function skipVoid(ctx, banNewLines, banComments) {
+  let c;
+  while (ctx.p < ctx.s.length) {
+    while (ctx.p < ctx.s.length && ((c = ctx.s.charCodeAt(ctx.p)) === 32 || c === 9 || !banNewLines && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)))
+      ctx.p++;
+    if (banComments || c !== 35)
+      break;
+    skipComment(ctx);
   }
-  return parseValue(ctx, integersAsBigInt, end);
 }
 
 // node_modules/smol-toml/dist/struct.js
-var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
-function parseKey(ctx, end = "=") {
-  let start = ctx.p;
-  let dot = start - 1;
+function parseKey(ctx, end = 61) {
+  let startPtr;
+  let state = 0;
   let parsed = [];
-  let endPtr = ctx.s.indexOf(end, start);
-  if (endPtr < 0) {
-    throw new TomlError("incomplete key-value: cannot find end of key", {
-      toml: ctx.s,
-      ptr: start
-    });
-  }
+  let sliceStart;
+  let c = ctx.s.charCodeAt(startPtr = ctx.p);
   do {
-    let c = ctx.s.charCodeAt(ctx.p = ++dot);
-    if (c !== 32 && c !== 9) {
-      if (c === 34 || c === 39) {
-        if (c === ctx.s.charCodeAt(ctx.p + 1) && c === ctx.s.charCodeAt(ctx.p + 2)) {
-          throw new TomlError("multiline strings are not allowed in keys", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        let part = parseString(ctx);
-        dot = ctx.s.indexOf(".", ctx.p);
-        let strEnd = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
-        let newLine = indexOfNewline(strEnd);
-        if (newLine > -1) {
-          throw new TomlError("newlines are not allowed in keys", {
-            toml: ctx.s,
-            ptr: newLine
-          });
-        }
-        if (strEnd.trimStart()) {
-          throw new TomlError("found extra tokens after the string part", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        if (endPtr < ctx.p) {
-          endPtr = ctx.s.indexOf(end, ctx.p);
-          if (endPtr < 0) {
-            throw new TomlError("incomplete key-value: cannot find end of key", {
-              toml: ctx.s,
-              ptr: start
-            });
-          }
-        }
-        parsed.push(part);
-      } else {
-        dot = ctx.s.indexOf(".", ctx.p);
-        let part = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
-        if (!KEY_PART_RE.test(part)) {
-          throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        parsed.push(part.trimEnd());
+    if (c === end) {
+      if (!state)
+        TomlError.x("unexpected end of key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      return ctx.p++, parsed;
+    } else if (c === 46) {
+      if (!state)
+        TomlError.x("illegal empty bare key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      state = 0;
+    } else if (!state && (c === 34 || c === 39)) {
+      if (c === ctx.s.charCodeAt(ctx.p + 1) && c === ctx.s.charCodeAt(ctx.p + 2))
+        TomlError.x("illegal quoted key: multiline strings are not allowed", ctx);
+      parsed.push(parseString(ctx));
+      state = 2;
+      ctx.p--;
+    } else if (c === 32 || c === 9) {
+      if (state === 1) {
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+        state = 2;
       }
+    } else if (state === 2 || c < 48 && c !== 45 || c > 57 && c < 65 || c > 90 && c < 97 && c !== 95 || c > 122) {
+      TomlError.x("illegal character in key", ctx);
+    } else if (!state) {
+      state = 1;
+      sliceStart = ctx.p;
     }
-  } while (dot + 1 && dot < endPtr);
-  ctx.p = endPtr + 1;
-  skipVoid(ctx, true, true);
-  return parsed;
+  } while (c = ctx.s.charCodeAt(++ctx.p));
+  TomlError.x("incomplete key-value: cannot find end of key", ctx, startPtr);
 }
-function parseInlineTable(ctx, integersAsBigInt) {
-  let res = {};
+function parseInlineTable(ctx) {
+  let startPtr = ctx.p++;
+  let res = /* @__PURE__ */ Object.create(null);
   let seen = /* @__PURE__ */ new Set();
   let c;
-  ctx.p++;
   while (ctx.p < ctx.s.length) {
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p)) === 125) {
@@ -834,70 +847,71 @@ function parseInlineTable(ctx, integersAsBigInt) {
     let k;
     let t = res;
     let hasOwn = false;
-    let p = ctx.p;
+    let errPtr = ctx.p;
     let key = parseKey(ctx);
     for (let i = 0; i < key.length; i++) {
       if (i)
-        t = hasOwn ? t[k] : t[k] = {};
+        t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
       k = key[i];
       if ((hasOwn = Object.hasOwn(t, k)) && (typeof t[k] !== "object" || seen.has(t[k]))) {
-        throw new TomlError("trying to redefine an already defined value", {
-          toml: ctx.s,
-          ptr: p
-        });
+        TomlError.x("trying to redefine an already defined value", ctx, errPtr);
+      }
+      let unsafe = k === "__proto__";
+      if (ctx.uk && (unsafe || k === "constructor")) {
+        t = ctx.uk !== 1 && TomlError.x("document contains an unsafe property", ctx, errPtr);
+        break;
       }
-      if (!hasOwn && k === "__proto__") {
+      if (!hasOwn && unsafe) {
         Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
       }
     }
     if (hasOwn) {
-      throw new TomlError("trying to redefine an already defined value", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
+      TomlError.x("trying to redefine an already defined value", ctx, errPtr);
     }
-    let value = extractValue(ctx, 125, integersAsBigInt);
-    seen.add(t[k] = value);
+    skipVoid(ctx, true, true);
+    let value = extractValue(
+      ctx,
+      125
+      /* } */
+    );
+    if (t && typeof (t[k] = value) === "object")
+      seen.add(value);
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p++)) === 125) {
       return res;
     }
-    if (c !== 44) {
-      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
-    }
+    if (c !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  throw new TomlError("unfinished table encountered", {
-    toml: ctx.s,
-    ptr: ctx.p
-  });
+  TomlError.x("unfinished table", ctx, startPtr);
 }
-function parseArray(ctx, integersAsBigInt) {
+function parseArray(ctx) {
+  let startPtr = ctx.p++;
   let res = [];
   let c;
-  ctx.p++;
   while (ctx.p < ctx.s.length) {
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p)) === 93) {
       ctx.p++;
       return res;
     }
-    res.push(extractValue(ctx, 93, integersAsBigInt));
+    res.push(extractValue(
+      ctx,
+      93
+      /* ] */
+    ));
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p++)) === 93) {
       return res;
     }
-    if (c !== 44) {
-      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
-    }
+    if (c !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  throw new TomlError("unfinished array encountered", {
-    toml: ctx.s,
-    ptr: ctx.p
-  });
+  TomlError.x("unfinished array", ctx, startPtr);
 }
 
 // node_modules/smol-toml/dist/parse.js
-function peekTable(key, table, meta, type) {
+function peekTable(ctx, key, table, meta, type) {
   let t = table;
   let m = meta;
   let k;
@@ -905,7 +919,7 @@ function peekTable(key, table, meta, type) {
   let state;
   for (let i = 0; i < key.length; i++) {
     if (i) {
-      t = hasOwn ? t[k] : t[k] = {};
+      t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
       m = (state = m[k]).c;
       if (type === 0 && (state.t === 1 || state.t === 2)) {
         return null;
@@ -921,7 +935,10 @@ function peekTable(key, table, meta, type) {
       return null;
     }
     if (!hasOwn) {
-      if (k === "__proto__") {
+      let unsafe = k === "__proto__";
+      if (ctx.uk && (unsafe || k === "constructor"))
+        return false;
+      if (unsafe) {
         Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
         Object.defineProperty(m, k, { enumerable: true, configurable: true, writable: true });
       }
@@ -929,7 +946,7 @@ function peekTable(key, table, meta, type) {
         t: i < key.length - 1 && type === 2 ? 3 : type,
         d: false,
         i: 0,
-        c: {}
+        c: /* @__PURE__ */ Object.create(null)
       };
     }
   }
@@ -942,43 +959,60 @@ function peekTable(key, table, meta, type) {
       state.d = true;
       t[k] = [];
     }
-    t[k].push(t = {});
-    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: {} };
+    t[k].push(t = /* @__PURE__ */ Object.create(null));
+    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: /* @__PURE__ */ Object.create(null) };
   }
   if (state.d) {
     return null;
   }
   state.d = true;
   if (type === 1) {
-    t = hasOwn ? t[k] : t[k] = {};
+    t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
   } else if (type === 0 && hasOwn) {
     return null;
   }
   return [k, t, state.c];
 }
-function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
-  let ctx = { s: toml, p: 0, d: maxDepth };
-  let res = {};
-  let meta = {};
+function validateTablePeek(ctx, peek, ptr) {
+  if (peek === null || ctx.uk === 2)
+    TomlError.x(peek === null ? "trying to redefine an already defined table or value" : "document contains an unsafe property", ctx, ptr);
+}
+function parse(toml, options = {}) {
+  let ctx = {
+    s: toml,
+    p: 0,
+    d: options.maxDepth ?? 1e3,
+    bi: options.integersAsBigInt ?? false,
+    ld: options.useLegacyDate ?? true,
+    uk: options.unsafeKeyBehaviour === "throw" ? 2 : options.unsafeKeyBehaviour === "drop" ? 1 : 0
+  };
+  let res = /* @__PURE__ */ Object.create(null);
+  let meta = /* @__PURE__ */ Object.create(null);
   let tmp;
+  let skipping = false;
   let tbl = res;
   let m = meta;
+  if (toml.charCodeAt(0) === 65279)
+    ctx.p++;
   skipVoid(ctx);
   while (ctx.p < toml.length) {
     if (toml.charCodeAt(ctx.p) === 91) {
       let isTableArray = toml.charCodeAt(++ctx.p) === 91;
       tmp = ctx.p += +isTableArray;
-      let k = parseKey(ctx, "]");
+      skipping = false;
+      let k = parseKey(
+        ctx,
+        93
+        /* ] */
+      );
       if (isTableArray) {
-        if (toml.charCodeAt(ctx.p - 1) !== 93) {
-          throw new TomlError("expected end of table declaration", {
-            toml,
-            ptr: ctx.p - 1
-          });
+        if (toml.charCodeAt(ctx.p) !== 93) {
+          TomlError.x("expected end of table array declaration", ctx);
         }
         ctx.p++;
       }
       let p = peekTable(
+        ctx,
         k,
         res,
         meta,
@@ -986,37 +1020,33 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
         /* Type.EXPLICIT */
       );
       if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr: tmp
-        });
+        validateTablePeek(ctx, p, tmp);
+        skipping = true;
+      } else {
+        m = p[2];
+        tbl = p[1];
       }
-      m = p[2];
-      tbl = p[1];
     } else {
       tmp = ctx.p;
       let k = parseKey(ctx);
       let p = peekTable(
+        ctx,
         k,
         tbl,
         m,
         0
         /* Type.DOTTED */
       );
-      if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr: tmp
-        });
-      }
-      p[1][p[0]] = extractValue(ctx, void 0, integersAsBigInt);
+      if (!p && !skipping)
+        validateTablePeek(ctx, p, tmp);
+      skipVoid(ctx, true, true);
+      let v = extractValue(ctx, void 0);
+      if (p && !skipping)
+        p[1][p[0]] = v;
     }
     skipVoid(ctx, true);
-    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && tmp !== 13) {
-      throw new TomlError("each key-value declaration must be followed by an end-of-line", {
-        toml,
-        ptr: ctx.p
-      });
+    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && (tmp !== 13 || toml.charCodeAt(ctx.p + 1) !== 10)) {
+      TomlError.x("each key-value declaration must be followed by an end-of-line", ctx);
     }
     skipVoid(ctx);
   }
@@ -1026,16 +1056,27 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
 // node_modules/smol-toml/dist/stringify.js
 init_define_import_meta_env();
 var BARE_KEY = /^[a-z0-9-_]+$/i;
+var HAS_WELLFORMED = !!"".isWellFormed;
 function extendedTypeOf(obj) {
   let type = typeof obj;
   if (type === "object") {
     if (Array.isArray(obj))
       return "array";
-    if (typeof obj?.getUTCDate === "function" && obj instanceof Date)
+    if (typeof obj.getUTCDate === "function" && obj instanceof Date)
       return "date";
-    if (globalThis.Temporal && // check for the 'since' property as an early bailout that avoids running all 5 instanceof checks
-    typeof obj?.since === "function" && (obj instanceof Temporal.Instant || obj instanceof Temporal.PlainDate || obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainTime || obj instanceof Temporal.ZonedDateTime)) {
-      return "temporal";
+    if (globalThis.Temporal) {
+      if (obj.until) {
+        if (obj instanceof Temporal.ZonedDateTime)
+          return "temporal/tz+uc";
+        if (obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainDate)
+          return "temporal/uc";
+        if (obj instanceof Temporal.PlainTime || obj instanceof Temporal.Instant)
+          return "temporal";
+        if (obj instanceof Temporal.PlainYearMonth)
+          return "temporal/x";
+      } else if (obj.toPlainDate && obj instanceof Temporal.PlainMonthDay || obj.negated && obj instanceof Temporal.Duration) {
+        return "temporal/x";
+      }
     }
   }
   return type;
@@ -1047,16 +1088,20 @@ function isArrayOfTables(obj) {
   }
   return obj.length != 0;
 }
+function formatWellFormedStringUnchecked(s) {
+  return JSON.stringify(s).replaceAll("\x7F", "\\u007f");
+}
 function formatString(s) {
-  return JSON.stringify(s).replace(/\x7f/g, "\\u007f");
+  return formatWellFormedStringUnchecked(HAS_WELLFORMED ? s.toWellFormed() : s);
 }
-function stringifyTemporal(temporal) {
-  return temporal.toString({
-    calendarName: "never",
-    timeZoneName: "never"
-  });
+function formatKey(s) {
+  if (BARE_KEY.test(s))
+    return s;
+  if (HAS_WELLFORMED && !s.isWellFormed())
+    throw new RangeError("key contains illegal lone surrogates");
+  return formatWellFormedStringUnchecked(s);
 }
-function stringifyValue(val, type, depth, numberAsFloat) {
+function stringifyValue(val, type, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1073,6 +1118,7 @@ function stringifyValue(val, type, depth, numberAsFloat) {
         return val.toFixed(1);
     case "bigint":
     case "boolean":
+    case "temporal":
       return val.toString();
     case "string":
       return formatString(val);
@@ -1081,14 +1127,37 @@ function stringifyValue(val, type, depth, numberAsFloat) {
         throw new TypeError("cannot serialize invalid date");
       return val.toISOString();
     case "object":
-      return stringifyInlineTable(val, depth, numberAsFloat);
+      return stringifyInlineTable(val, depth, numberAsFloat, strictTemporal);
     case "array":
-      return stringifyArray(val, depth, numberAsFloat);
-    case "temporal":
-      return stringifyTemporal(val);
+      return stringifyArray(val, depth, numberAsFloat, strictTemporal);
+    // @ts-expect-error -- intentional fallthrough case
+    case "temporal/tz+uc":
+      if (strictTemporal) {
+        let tz = val.timeZoneId;
+        let tzc = tz.charCodeAt(0);
+        if (
+          // Classic offset
+          tzc !== 43 && tzc !== 45 && // Fast pre-check pass; see below for the actually accepted values
+          (tzc !== 85 && tzc !== 71 && tzc !== 90 && tzc !== 69 || // UTC and its aliases; Temporal implementations don't all canonicalise unfortunately
+          tz !== "UTC" && tz !== "UCT" && tz !== "Universal" && tz !== "Zulu" && // GMT is a TZ but it's for all intents and purposes equivalent to UTC. Safe to downgrade.
+          !tz.startsWith("GMT") && tz !== "Greenwich" && // Etc/* are all safe to downgrade to offset (either UTC, GMT, or offset)
+          !tz.startsWith("Etc/"))
+        ) {
+          throw new TypeError("Temporal objects with an IANA timezone are not allowed in Temporal strict mode");
+        }
+      }
+    case "temporal/uc":
+      if (strictTemporal && val.calendarId !== "iso8601")
+        throw new TypeError("Temporal objects with a non-default calendar are not allowed in Temporal strict mode");
+      return val.toString({
+        calendarName: "never",
+        timeZoneName: "never"
+      });
+    case "temporal/x":
+      throw new TypeError("Unsupported " + val[Symbol.toStringTag]);
   }
 }
-function stringifyInlineTable(obj, depth, numberAsFloat) {
+function stringifyInlineTable(obj, depth, numberAsFloat, strictTemporal) {
   let keys = Object.keys(obj);
   if (keys.length === 0)
     return "{}";
@@ -1097,13 +1166,11 @@ function stringifyInlineTable(obj, depth, numberAsFloat) {
     let k = keys[i];
     if (i)
       res += ", ";
-    res += BARE_KEY.test(k) ? k : formatString(k);
-    res += " = ";
-    res += stringifyValue(obj[k], extendedTypeOf(obj[k]), depth - 1, numberAsFloat);
+    res += formatKey(k) + " = " + stringifyValue(obj[k], extendedTypeOf(obj[k]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " }";
 }
-function stringifyArray(array, depth, numberAsFloat) {
+function stringifyArray(array, depth, numberAsFloat, strictTemporal) {
   if (array.length === 0)
     return "[]";
   let res = "[ ";
@@ -1113,11 +1180,11 @@ function stringifyArray(array, depth, numberAsFloat) {
     if (array[i] === null || array[i] === void 0) {
       throw new TypeError("arrays cannot contain null or undefined values");
     }
-    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat);
+    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " ]";
 }
-function stringifyArrayTable(array, key, depth, numberAsFloat) {
+function stringifyArrayTable(array, key, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1125,11 +1192,11 @@ function stringifyArrayTable(array, key, depth, numberAsFloat) {
   for (let i = 0; i < array.length; i++) {
     res += `${res && "\n"}[[${key}]]
 `;
-    res += stringifyTable(0, array[i], key, depth, numberAsFloat);
+    res += stringifyTable(0, array[i], key, depth, numberAsFloat, strictTemporal);
   }
   return res;
 }
-function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
+function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1143,16 +1210,16 @@ function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
       if (type === "symbol" || type === "function") {
         throw new TypeError(`cannot serialize values of type '${type}'`);
       }
-      let key = BARE_KEY.test(k) ? k : formatString(k);
+      let key = formatKey(k);
       if (type === "array" && isArrayOfTables(obj[k])) {
-        tables += (tables && "\n") + stringifyArrayTable(obj[k], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat);
+        tables += (tables && "\n") + stringifyArrayTable(obj[k], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat, strictTemporal);
       } else if (type === "object") {
         let tblKey = prefix ? `${prefix}.${key}` : key;
-        tables += (tables && "\n") + stringifyTable(tblKey, obj[k], tblKey, depth - 1, numberAsFloat);
+        tables += (tables && "\n") + stringifyTable(tblKey, obj[k], tblKey, depth - 1, numberAsFloat, strictTemporal);
       } else {
         preamble += key;
         preamble += " = ";
-        preamble += stringifyValue(obj[k], type, depth, numberAsFloat);
+        preamble += stringifyValue(obj[k], type, depth, numberAsFloat, strictTemporal);
         preamble += "\n";
       }
     }
@@ -1163,11 +1230,11 @@ ${preamble}` : `[${tableKey}]`;
   return preamble && tables ? `${preamble}
 ${tables}` : preamble || tables;
 }
-function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
+function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false, strictTemporal = false } = {}) {
   if (extendedTypeOf(obj) !== "object") {
     throw new TypeError("stringify can only be called with an object");
   }
-  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat);
+  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat, strictTemporal);
   if (str[str.length - 1] !== "\n")
     return str + "\n";
   return str;
@@ -1200,6 +1267,7 @@ var PROJECT_LOCKED_KEYS = [
   // The same principle as the four fold keys above, applied one layer earlier and with a wider blast radius: those decide how much of an indexed file is shown, these decide whether it is indexed at all. A checked-in `.token-goat.toml` adding its own attack surface to `skip_dirs` -- or dropping `large_file_skip_kb` to a handful of kilobytes -- removes those files from `symbol`, `read`, `refs`, `semantic` and `graph` for a reviewing agent, and every one of them then answers "not found" in the same words it uses for a name that genuinely does not exist. There is no notice to read, because from the index's point of view nothing was hidden. The user's own global config still sets all three freely; only the project-supplied layer is refused.
   "indexing.skip_dirs",
   "indexing.skip_files",
+  "indexing.skip_minified",
   "indexing.large_file_skip_kb",
   "indexing.large_file_symbol_only_kb",
   // Same reasoning as the two thresholds above, on the chunk axis: a checked-in `.token-goat.toml` dropping this to 1 would take every file in the repository out of `semantic` for a reviewing agent, and `semantic` would answer "no matches" in the words it uses for a genuine absence.
@@ -1207,12 +1275,14 @@ var PROJECT_LOCKED_KEYS = [
   "indexing.cross_project_symbols",
   // The same blast radius as the indexing keys above, applied to retrieval rather than to what gets indexed: `semantic` drops a dense hit whose distance exceeds this, so a checked-in `.token-goat.toml` setting it near the floor removes this repository's own code from the vector half of every search a reviewing agent runs, and the command then answers "no matches" in the words it uses for a name that genuinely is not there. The keyword pass would still answer, which makes it worse rather than better -- the result looks like a working search. The user's own global config still sets it freely; only the project-supplied layer is refused.
   "semantic.max_distance",
+  // The advisory twin of the floor above: a checked-in `.token-goat.toml` raising it to the 1.2 maximum would make every poor hit read as confident, silencing the one warning that says a result is probably unrelated. The user's own global config still sets it freely.
+  "semantic.weak_distance",
   "worker.blocked_roots",
-  // global.db is a machine-wide shared database across every project on the host. A checked-in
-  // per-project .token-goat.toml must not be able to lower the size warning threshold or trigger
-  // auto-reclaim/purging of embeddings across other repositories sharing the same database.
+  // global.db is a machine-wide shared database across every project on the host. A checked-in per-project .token-goat.toml must not be able to lower the size warning threshold or trigger auto-reclaim/purging of embeddings across other repositories sharing the same database.
   "indexing.max_db_size_mb",
-  "indexing.auto_reclaim_embeddings"
+  "indexing.auto_reclaim_embeddings",
+  // Which executable every harness runs on every tool call. `install` writes that choice into user-scope harness configs that every project on the machine then runs, so a checked-in `.token-goat.toml` must not be the layer that makes it. The user's global config and TOKEN_GOAT_NATIVE_HOOKS still set it freely.
+  "hooks.native"
 ];
 var _lastProjectConfigLockedKeys = [];
 function lastProjectConfigLockedKeys() {
@@ -1308,7 +1378,28 @@ function mergeRawConfig(base, override) {
   return merged;
 }
 var _projectRootCache = null;
+var _projectRootOverride = null;
+function withConfigProjectRoot(root, fn) {
+  const prior = _projectRootOverride;
+  _projectRootOverride = root;
+  try {
+    return fn();
+  } finally {
+    _projectRootOverride = prior;
+  }
+}
+function configProjectRootFor(dir) {
+  const own = findProject(dir);
+  let project = own;
+  while (project !== null) {
+    if (fs3.existsSync(projectConfigPath(project.root))) return project.root;
+    const parent = path2.dirname(project.root);
+    project = parent === project.root ? null : findProject(parent);
+  }
+  return own?.root ?? dir;
+}
 function resolveConfigProjectRoot() {
+  if (_projectRootOverride !== null) return _projectRootOverride;
   const cwd = process.cwd();
   if (_projectRootCache !== null && _projectRootCache.cwd === cwd) return _projectRootCache.root;
   const project = findProject(cwd);
@@ -1318,7 +1409,7 @@ function resolveConfigProjectRoot() {
 }
 registerReset(() => {
   _projectRootCache = null;
-});
+}, { perRequest: true });
 function getProjectConfigInfo(projectRoot) {
   const root = projectRoot ?? resolveConfigProjectRoot();
   const p = projectConfigPath(root);
@@ -1349,7 +1440,7 @@ function isAutoTriggerMultiplierExplicit() {
 
 // src/config.ts
 init_define_import_meta_env();
-import * as path2 from "node:path";
+import * as path3 from "node:path";
 
 // src/own_lookup.ts
 init_define_import_meta_env();
@@ -1377,18 +1468,12 @@ var CONFIG_DEFAULTS = {
     max_lines: 1e3,
     max_bytes: 64 * 1024,
     timeout_seconds: 600,
-    // Matches the hardcoded MIN_CACHE_BYTES floor hooks_bash.ts used before this
-    // knob was wired to a real consumer, so untouched-config installs see no
-    // behavior change now that hooks_bash.ts reads this value instead.
+    // Matches the hardcoded MIN_CACHE_BYTES floor hooks_bash.ts used before this knob was wired to a real consumer, so untouched-config installs see no behavior change now that hooks_bash_post.ts reads this value instead.
     cache_min_bytes: 512,
     cache_max_file_count: 4096,
     cache_max_bytes: 16 * 1024 * 1024,
     cache_max_bytes_per_output: 50 * 1024 * 1024,
-    // Measured against the filter test-fixture corpus (424 apply() calls, 298 with
-    // bytesSaved > 0): net-of-marker savings (bytesSaved - ~70-79B marker cost) is
-    // <= 0 for 130/298 (44%) of "compressed" results and <= 100 for 170/298 (57%),
-    // while the real-win half sits at p75=393B / p90=952B net. 100 kills the
-    // marker-doesn't-even-pay-for-itself tier without touching genuine wins.
+    // Measured against the filter test-fixture corpus (424 apply() calls, 298 with bytesSaved > 0): net-of-marker savings (bytesSaved - ~70-79B marker cost) is <= 0 for 130/298 (44%) of "compressed" results and <= 100 for 170/298 (57%), while the real-win half sits at p75=393B / p90=952B net. 100 kills the marker-doesn't-even-pay-for-itself tier without touching genuine wins.
     min_net_savings_bytes: 100,
     // Extends the per-file already-served elision (which only reaches cat/head/tail/sed/awk-shaped reads) to every other Bash command's output -- npm test, git, rg, build runs -- matched against a session-wide served-output list instead of a per-file one. On by default: it goes through the same isRewriteWorthwhile net-benefit gate as every other rewrite here, so it never ships a notice that costs more than the lines it withholds.
     elide_served_shell_output: true
@@ -1432,20 +1517,10 @@ var CONFIG_DEFAULTS = {
     max_image_pixels: 64e6,
     screenshot_redirect: true,
     ocr_enabled: true,
-    // Confidence is Tesseract's own 0-100 mean-word-confidence score. 65 is a deliberately
-    // conservative floor: a real screenshot of terminal/code/prose text routinely scores
-    // 85+, while a photo with an incidental sign or logo in frame scores much lower and
-    // noisier -- padding the threshold below the terminal/code norm still comfortably
-    // excludes photographic false positives without needing a second heuristic.
+    // Confidence is Tesseract's own 0-100 mean-word-confidence score. 65 is a deliberately conservative floor: a real screenshot of terminal/code/prose text routinely scores 85+, while a photo with an incidental sign or logo in frame scores much lower and noisier -- padding the threshold below the terminal/code norm still comfortably excludes photographic false positives without needing a second heuristic.
     ocr_min_confidence: 65,
     ocr_lang: DEFAULT_OCR_LANG,
-    // Which resolution tier the model being shown the image is on, which decides what its pixels
-    // cost. 'standard' (1568px long edge, 1568 visual tokens) is every model before Claude 4.7;
-    // 'high' (2576px, 4784 tokens) is 4.7 and later, and bills the same large image up to roughly
-    // three times higher. Only the saving *reported* by `token-goat stats` depends on this -- no
-    // image is encoded differently -- and 'standard' is the default because it is the floor: it
-    // caps the counterfactual at the smaller of the two bills and so can never credit a saving
-    // that was not there. Set it to 'high' on a Claude 4.7+ model to see the larger real figure.
+    // Which resolution tier the model being shown the image is on, which decides what its pixels cost. 'standard' (1568px long edge, 1568 visual tokens) is every model before Claude 4.7; 'high' (2576px, 4784 tokens) is 4.7 and later, and bills the same large image up to roughly three times higher. Only the saving *reported* by `token-goat stats` depends on this -- no image is encoded differently -- and 'standard' is the default because it is the floor: it caps the counterfactual at the smaller of the two bills and so can never credit a saving that was not there. Set it to 'high' on a Claude 4.7+ model to see the larger real figure.
     vision_tier: "standard"
   },
   screenshot: {
@@ -1471,33 +1546,24 @@ var CONFIG_DEFAULTS = {
     web_dedup_min_bytes: 200,
     grep_dedup_min_matches: 5,
     glob_dedup_min_matches: 5,
-    // Existing on-disk file must have at least this many lines before a Write rewrite is even
-    // considered -- rewriting a small file whole is fine, so hooks_write.ts's detector skips
-    // comparison entirely below this floor rather than firing on trivial files.
+    // Existing on-disk file must have at least this many lines before a Write rewrite is even considered -- rewriting a small file whole is fine, so hooks_write.ts's detector skips comparison entirely below this floor rather than firing on trivial files.
     write_rewrite_min_lines: 40,
-    // Minimum percentage of the existing file's lines that must survive unchanged (by LCS) in
-    // the incoming Write content for hooks_write.ts to advise Edit instead. High by design: this
-    // is only meant to catch the "mostly untouched, a few lines changed" case, not a genuine
-    // rewrite that happens to share some boilerplate.
+    // Minimum percentage of the existing file's lines that must survive unchanged (by LCS) in the incoming Write content for hooks_write.ts to advise Edit instead. High by design: this is only meant to catch the "mostly untouched, a few lines changed" case, not a genuine rewrite that happens to share some boilerplate.
     write_rewrite_unchanged_pct: 75,
     serve_diff_on_reread: true,
     elide_served_lines: true,
     subagent_markdown_first_read_deny: false,
+    agent_scoped_spawn_deny: false,
     backoff_thresholds: [1, 3, 10, 30],
     git_hint_max_ms: 50,
     min_session_hint_savings_bytes: 512,
     pre_skill_advisory: true,
     context_threshold_advisory: true,
     diff_hint_min_tokens_saved: 1e3,
-    // Base for the pressure-scaled first-read deny gate in hooks_read.ts (large file, never read
-    // before). Matches that gate's long-tuned 500KB threshold at 'cool' context pressure; warm/hot/
-    // critical scale it down from there so the same read gets redirected to a surgical read sooner
-    // once the context window is nearly full.
+    // Base for the pressure-scaled first-read deny gate in hooks_read.ts (large file, never read before). Matches that gate's long-tuned 500KB threshold at 'cool' context pressure; warm/hot/ critical scale it down from there so the same read gets redirected to a surgical read sooner once the context window is nearly full.
     large_read_redirect_bytes: 512e3,
     reread_deny: true,
-    // Matches hooks_read.ts's previously-hardcoded REREAD_DENY_BYTES (50 * 1024) so wiring this
-    // key up as the real gate for that logic does not silently change default behavior for
-    // existing users -- see the reread_deny/reread_deny_min_bytes fix's commit message.
+    // Matches hooks_read.ts's previously-hardcoded REREAD_DENY_BYTES (50 * 1024) so wiring this key up as the real gate for that logic does not silently change default behavior for existing users -- see the reread_deny/reread_deny_min_bytes fix's commit message.
     reread_deny_min_bytes: 51200,
     stable_doc_compacts: true,
     // On. It has now run. The gate that finds the spans answered only from the index, and the index carried the shipping parser stamp on 46 of 17,952 files, so the lever was very nearly dead in practice: a disk parse of the delivered file is now the fallback, worth +3.0 points of withheld bytes on shell reads with no index at all. The cost side is the one this comment used to call unobservable, and it is observable: joining folds to later reads of the folded symbol scores 62.3% recovery, but the same window measured backwards scores 55.8% and a shuffled pairing scores 24.3%, so the excess attributable to the fold is 6.6 points rather than 62. Unlike every re-read mechanism beside it this rewrites a FIRST look, where the reader has no prior copy to notice an omission against, which is why the notice names the symbol and the command that returns it verbatim.
@@ -1513,6 +1579,8 @@ var CONFIG_DEFAULTS = {
     truncated_read_min_lines: 200,
     protect_recent_reads: 4,
     warn_unbalanced_shell_quoting: true,
+    // On. Claude Code's Bash tool on Windows hands the command to Git Bash as a `-c` argument, and the argv quoting plus the MSYS2 runtime's decoding turn every run of two or more backslashes into half as many, so `printf 'a\\nb'` or a `C:\\Users` path arrives changed and nothing says so. Only that pairing is denied: another platform, another harness, or a command without a doubled backslash passes untouched.
+    deny_bash_double_backslash: true,
     prompt_triggers: [],
     log_large_file_hint_outcomes: false,
     cross_session_read_dedup: false,
@@ -1521,8 +1589,9 @@ var CONFIG_DEFAULTS = {
     session_start_reminder: true
   },
   hooks: {
-    watchdog_ms: 700,
-    latency_budget_ms: 1500
+    latency_budget_ms: 1500,
+    server: true,
+    native: "auto"
   },
   webfetch: {
     allow: [],
@@ -1535,15 +1604,7 @@ var CONFIG_DEFAULTS = {
   worker: {
     blocked_roots: [],
     max_pool_workers: 4,
-    // 4, not 2. Measured on a 26-core Windows host with a foreground CPU probe: at `priority`
-    // below_normal, 2, 4 and 6 threads are all indistinguishable from an idle machine, including
-    // when the indexer and the probe are pinned to the same 4 cores, and including 4 threads pinned
-    // to 2 cores, which is genuine oversubscription. The same probe reads -10% at 16 threads and
-    // -69% with a 292 ms stall at 4 threads on 2 cores once the priority is normal instead. So the
-    // priority below is what keeps the foreground responsive, not this number, and 4 buys a
-    // measured 1.77x on indexing for no foreground cost. It stays a cap rather than tracking the
-    // core count, because where the platform refuses the priority change (some hardened Linux
-    // setups, sandboxes) this is the only thing left holding indexing back.
+    // 4, not 2. Measured on a 26-core Windows host with a foreground CPU probe: at `priority` below_normal, 2, 4 and 6 threads are all indistinguishable from an idle machine, including when the indexer and the probe are pinned to the same 4 cores, and including 4 threads pinned to 2 cores, which is genuine oversubscription. The same probe reads -10% at 16 threads and -69% with a 292 ms stall at 4 threads on 2 cores once the priority is normal instead. So the priority below is what keeps the foreground responsive, not this number, and 4 buys a measured 1.77x on indexing for no foreground cost. It stays a cap rather than tracking the core count, because where the platform refuses the priority change (some hardened Linux setups, sandboxes) this is the only thing left holding indexing back.
     embed_threads: 4,
     priority: "below_normal"
   },
@@ -1554,6 +1615,7 @@ var CONFIG_DEFAULTS = {
     max_chunks_per_file: 600,
     skip_dirs: [],
     skip_files: ["coverage.json", "coverage-final.json"],
+    skip_minified: true,
     embeddings_enabled: true,
     cross_project_symbols: true,
     max_db_size_mb: 1500,
@@ -1591,7 +1653,9 @@ var CONFIG_DEFAULTS = {
     archive_weight: 0.7,
     docs_weight: 0.92,
     // Deliberately loose enough to admit everything this metric produces, which is a measured conclusion rather than a placeholder. Against a large index, 12 genuine questions about code that is present had best hits from 0.635 to 0.813 and 11 off-corpus ones (nonsense strings, digits, a cake recipe) from 0.820 to 1.017, which looks separable at about 0.9. It is not: on a small corpus the nearest genuine match is much further away, and a two-file project in this repo's own suite matches its target at 0.934 -- above that cut and inside the noise band. So the two populations overlap across corpus sizes and no fixed distance tells them apart, while getting it wrong removes real answers and says nothing. Left at the retrieval bound's value so the default filters nothing; it exists to be lowered per-project by someone who has measured their own corpus, and runSemantic says which distance it refused when a lowered value empties the vector half.
-    max_distance: 1.2
+    max_distance: 1.2,
+    // Best surviving dense distance above which runSemantic says its closest match is weak. Measured on this repo's index on 2026-09-24: 38 questions about code that is present had best hits from 0.565 to 0.800, and 12 nonsense or off-topic ones from 0.863 to 1.043 (8 questions from other programming domains spread over 0.718-0.952, the low ones landing on code that is genuinely related, so those are not separable by distance), so the cut sits in that gap nearer the noise edge, because a small corpus pushes genuine matches farther out (0.934 in a two-file project, see semantic.max_distance) and a false alarm on a right answer costs more than a missed one. Advisory only: it removes nothing, unlike that floor.
+    weak_distance: 0.85
   }
 };
 function getDefaultConfig(section2) {
@@ -1647,6 +1711,18 @@ function validatedFloat(raw, def, min, max) {
 function validatedVisionTier(raw, def) {
   return raw === "standard" || raw === "high" ? raw : def;
 }
+function validatedNativeHooksMode(raw, def) {
+  return raw === "auto" || raw === "off" ? raw : def;
+}
+function nativeHooksModeFromEnv(raw) {
+  const norm = raw?.trim().toLowerCase() ?? "";
+  if (TRUTHY_ENV_VALUES.has(norm)) return "auto";
+  if (FALSY_ENV_VALUES.has(norm)) return "off";
+  return void 0;
+}
+var ENV_VALUE_COERCERS = {
+  "hooks.native": nativeHooksModeFromEnv
+};
 function validatedOcrLang(raw, def) {
   if (typeof raw !== "string") return def;
   const tokens = raw.split(/[+,;\s]+/).map((s) => s.trim().toLowerCase()).filter(Boolean);
@@ -1716,7 +1792,6 @@ var NUMERIC_FIELD_BOUNDS = {
   "hints.protect_recent_reads": { min: 0, max: 100 },
   "hints.cross_session_read_dedup_ttl_secs": { min: 1, max: 86400 },
   "hints.mcp_dedup_ttl_secs": { min: 1, max: 3600 },
-  "hooks.watchdog_ms": { min: 100, max: 3e4 },
   "hooks.latency_budget_ms": { min: 1, max: 6e5 },
   "webfetch.max_file_count": { min: 0, max: 1e7 },
   "webfetch.max_bytes": { min: 0, max: 100 * 1024 * 1024 * 1024 },
@@ -1734,7 +1809,9 @@ var NUMERIC_FIELD_BOUNDS = {
   "semantic.archive_weight": { min: 0.05, max: 1 },
   "semantic.docs_weight": { min: 0.05, max: 1 },
   // Upper bound is DEFAULT_DISTANCE_THRESHOLD, not the metric's own ceiling of 2. An L2 distance between unit vectors cannot exceed 2, so 2 reads like 'admit everything' -- but this floor only ever narrows what searchSemantic already returned, and runSemantic lets that scan keep its own 1.2 bound (see the max_distance comment on SemanticConfig for why the scan is the wrong place for a relevance decision). Anything between 1.2 and 2 was therefore discarded inside the scan before the floor could see it: a user raising this to widen recall got the setting accepted, validated and persisted, and identical results, with no diagnostic able to say why. validatedFloat clamps rather than rejects, so an existing value above the new bound becomes 1.2 and behaves exactly as it already did. The lower bound is not 0: a floor of 0 admits only an exact vector match, which would disable the vector half entirely while `semantic` went on answering in the words it uses for a genuine absence.
-  "semantic.max_distance": { min: 0.05, max: 1.2 }
+  "semantic.max_distance": { min: 0.05, max: 1.2 },
+  // Same range as max_distance: both are L2 distances on the scan's own 1.2 ceiling, and a weak line above what the scan can return would never fire.
+  "semantic.weak_distance": { min: 0.05, max: 1.2 }
 };
 function boundsOf(key) {
   const b = ownGet(NUMERIC_FIELD_BOUNDS, key);
@@ -1766,10 +1843,9 @@ var ENUM_FIELD_VALUES = {
   "compression.profile": ["auto", "aggressive", "balanced", "minimal"],
   "compact_assist.harness": ["auto", ...KNOWN_HARNESS_NAMES],
   "image_shrink.ocr_lang": [...SUPPORTED_OCR_LANG_CODES],
-  // Deliberately has no entry above `normal`. This table is what `config set` checks; a
-  // hand-edited TOML bypasses it, which is why resolveWorkerPriority (process_priority.ts) maps an
-  // unrecognized value back to the default rather than trusting whatever the file said.
-  "worker.priority": ["below_normal", "low", "normal"]
+  // Deliberately has no entry above `normal`. This table is what `config set` checks; a hand-edited TOML bypasses it, which is why resolveWorkerPriority (process_priority.ts) maps an unrecognized value back to the default rather than trusting whatever the file said.
+  "worker.priority": ["below_normal", "low", "normal"],
+  "hooks.native": ["auto", "off"]
 };
 function validateEnumField(fieldKey, value) {
   if (fieldKey === "image_shrink.ocr_lang") {
@@ -1781,7 +1857,7 @@ function validateEnumField(fieldKey, value) {
   if (!allowed) return void 0;
   return allowed.includes(value) ? void 0 : allowed;
 }
-var ENV_KEYS2 = [
+var ENV_KEYS = [
   "TOKEN_GOAT_COMPACT_ASSIST",
   "TOKENWISE_COMPACT_ASSIST",
   "TOKEN_GOAT_BASH_COMPRESS",
@@ -1796,7 +1872,6 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_HINT_JSON_SIDECAR",
   "TOKEN_GOAT_LARGE_READ_BYTES",
   "TOKEN_GOAT_HINT_BUDGET",
-  "TOKEN_GOAT_HOOK_WATCHDOG_MS",
   "TOKEN_GOAT_WEB_COMPRESS",
   "TOKEN_GOAT_WORKER_WATCHDOG",
   "TOKEN_GOAT_WORKER_MAX_POOL",
@@ -1815,6 +1890,7 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_PRE_SKILL",
   "TOKEN_GOAT_ORPHAN_SWEEP",
   "TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING",
+  "TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH",
   "TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES",
   "TOKEN_GOAT_CROSS_SESSION_READ_DEDUP",
   "TOKEN_GOAT_CROSS_SESSION_READ_DEDUP_TTL_SECS",
@@ -1831,7 +1907,7 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_INDEXING_AUTO_RECLAIM_EMBEDDINGS"
 ];
 function allEnvKeys() {
-  return [.../* @__PURE__ */ new Set([...ENV_KEYS2, ...Object.values(CONFIG_KEY_ENV_OVERRIDES).flat()])];
+  return [.../* @__PURE__ */ new Set([...ENV_KEYS, ...Object.values(CONFIG_KEY_ENV_OVERRIDES).flat()])];
 }
 function configEnvFingerprint() {
   const snap = {};
@@ -1840,7 +1916,7 @@ function configEnvFingerprint() {
   }
   return JSON.stringify(snap);
 }
-var _cached2 = null;
+var _cached = null;
 function deepFreeze(value) {
   if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
     Object.freeze(value);
@@ -1914,7 +1990,9 @@ function resolveConfigKeyLayer(key, effectiveValue, cfg, projectInfo) {
   const envVar = (CONFIG_KEY_ENV_OVERRIDES[key] ?? []).find((name) => process.env[name] !== void 0);
   if (envVar !== void 0) {
     const rawStr = process.env[envVar] ?? "";
-    const judged = coerceEnvLike(rawStr, effectiveValue);
+    const coerce = ownGet(ENV_VALUE_COERCERS, key);
+    const special = coerce === void 0 ? void 0 : coerce(rawStr);
+    const judged = coerce === void 0 ? coerceEnvLike(rawStr, effectiveValue) : special === void 0 ? "unusable" : { parsed: special };
     if (judged === null) return { layer: "env", envVar };
     if (judged === "unusable") {
       return { layer: "env-invalid", envVar, rawValue: rawStr, effectiveValue, reason: rawStr.trim() === "" ? "empty" : rejectionReason(key, rawStr, effectiveValue, cfg) };
@@ -1926,6 +2004,10 @@ function resolveConfigKeyLayer(key, effectiveValue, cfg, projectInfo) {
   if (projectInfo.parseError !== null) return { layer: "project-unparsed", path: projectInfo.path, parseError: projectInfo.parseError };
   if (!Object.prototype.hasOwnProperty.call(projectInfo.values, key)) return { layer: "global" };
   const rawValue = projectInfo.values[key];
+  if (PROJECT_LOCKED_SECTIONS.includes(key.split(".")[0] ?? "") || PROJECT_LOCKED_KEYS.includes(key)) {
+    if (rawValueEquals(rawValue, effectiveValue)) return { layer: "global" };
+    return { layer: "project-invalid", path: projectInfo.path, rawValue, effectiveValue, reason: "a security setting, which only the global config or the environment may set" };
+  }
   if (rawValueEquals(rawValue, effectiveValue)) return { layer: "project", path: projectInfo.path };
   return { layer: "project-invalid", path: projectInfo.path, rawValue, effectiveValue, reason: rejectionReason(key, rawValue, effectiveValue, cfg) };
 }
@@ -1938,8 +2020,8 @@ function loadConfig(projectRoot) {
   const { text: projText, readError: projReadError } = readConfigText(projPath);
   const projectContentFp = projText !== null ? shortFingerprint(projText) : "";
   const envFp = configEnvFingerprint();
-  if (_cached2 !== null && _cached2.contentFp === contentFp && _cached2.envFp === envFp && _cached2.projectRoot === root && _cached2.projectContentFp === projectContentFp) {
-    return _cached2.config;
+  if (_cached !== null && _cached.contentFp === contentFp && _cached.envFp === envFp && _cached.projectRoot === root && _cached.projectContentFp === projectContentFp) {
+    return _cached.config;
   }
   let raw = {};
   if (text !== null) {
@@ -1964,11 +2046,11 @@ function loadConfig(projectRoot) {
     _lastProjectConfigParseError = projReadError;
   }
   const cfg = deepFreeze(_buildConfig(raw, projectRaw));
-  _cached2 = { config: cfg, contentFp, envFp, projectRoot: root, projectContentFp };
+  _cached = { config: cfg, contentFp, envFp, projectRoot: root, projectContentFp };
   return cfg;
 }
 function invalidateConfigCache() {
-  _cached2 = null;
+  _cached = null;
   resetLastProjectConfigLockedKeys();
 }
 registerReset(invalidateConfigCache);
@@ -1998,6 +2080,12 @@ function loadPersistedConfig() {
   _lastConfigParseError = parseError;
   return buildPersistedConfig(raw);
 }
+function hookServerEnabled() {
+  return envBool("TOKEN_GOAT_HOOK_SERVER", loadPersistedConfig().hooks.server);
+}
+function nativeHooksEnabled() {
+  return (nativeHooksModeFromEnv(process.env["TOKEN_GOAT_NATIVE_HOOKS"]) ?? loadPersistedConfig().hooks.native) !== "off";
+}
 function _buildConfig(raw, projectRaw = {}) {
   const { cleaned: safeProjectRaw, dropped: lockedKeys } = stripLockedProjectKeys(projectRaw);
   setLastProjectConfigLockedKeys(lockedKeys);
@@ -2076,7 +2164,7 @@ function _buildConfig(raw, projectRaw = {}) {
   const is_cfg = getDefaultConfig("image_shrink");
   is_cfg.enabled = validatedBool(is_raw["enabled"], is_cfg.enabled);
   is_cfg.jpeg_quality = validatedInt(is_raw["jpeg_quality"], is_cfg.jpeg_quality, ...boundsOf("image_shrink.jpeg_quality"));
-  is_cfg.max_image_pixels = validatedInt(is_raw["max_image_pixels"], is_cfg.max_image_pixels, ...boundsOf("image_shrink.max_image_pixels"));
+  is_cfg.max_image_pixels = validatedIntWithLegacySentinel(is_raw["max_image_pixels"], is_cfg.max_image_pixels, 16e6, ...boundsOf("image_shrink.max_image_pixels"));
   is_cfg.screenshot_redirect = validatedBool(is_raw["screenshot_redirect"], is_cfg.screenshot_redirect);
   is_cfg.ocr_enabled = validatedBool(is_raw["ocr_enabled"], is_cfg.ocr_enabled);
   is_cfg.ocr_min_confidence = validatedInt(is_raw["ocr_min_confidence"], is_cfg.ocr_min_confidence, ...boundsOf("image_shrink.ocr_min_confidence"));
@@ -2126,6 +2214,7 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.serve_diff_on_reread = validatedBool(hi_raw["serve_diff_on_reread"], hi.serve_diff_on_reread);
   hi.elide_served_lines = validatedBool(hi_raw["elide_served_lines"], hi.elide_served_lines);
   hi.subagent_markdown_first_read_deny = validatedBool(hi_raw["subagent_markdown_first_read_deny"], hi.subagent_markdown_first_read_deny);
+  hi.agent_scoped_spawn_deny = validatedBool(hi_raw["agent_scoped_spawn_deny"], hi.agent_scoped_spawn_deny);
   hi.backoff_thresholds = validatedIntList(hi_raw["backoff_thresholds"], hi.backoff_thresholds);
   hi.git_hint_max_ms = validatedInt(hi_raw["git_hint_max_ms"], hi.git_hint_max_ms, ...boundsOf("hints.git_hint_max_ms"));
   hi.min_session_hint_savings_bytes = validatedInt(hi_raw["min_session_hint_savings_bytes"], hi.min_session_hint_savings_bytes, ...boundsOf("hints.min_session_hint_savings_bytes"));
@@ -2144,11 +2233,14 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.truncated_read_min_lines = validatedInt(hi_raw["truncated_read_min_lines"], hi.truncated_read_min_lines, ...boundsOf("hints.truncated_read_min_lines"));
   hi.protect_recent_reads = validatedInt(hi_raw["protect_recent_reads"], hi.protect_recent_reads, ...boundsOf("hints.protect_recent_reads"));
   hi.warn_unbalanced_shell_quoting = validatedBool(hi_raw["warn_unbalanced_shell_quoting"], hi.warn_unbalanced_shell_quoting);
+  hi.deny_bash_double_backslash = validatedBool(hi_raw["deny_bash_double_backslash"], hi.deny_bash_double_backslash);
   hi.log_large_file_hint_outcomes = validatedBool(hi_raw["log_large_file_hint_outcomes"], hi.log_large_file_hint_outcomes);
   hi.warn_unbalanced_shell_quoting = envBool("TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING", hi.warn_unbalanced_shell_quoting);
+  hi.deny_bash_double_backslash = envBool("TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH", hi.deny_bash_double_backslash);
   hi.serve_diff_on_reread = envBool("TOKEN_GOAT_SERVE_DIFF_ON_REREAD", hi.serve_diff_on_reread);
   hi.elide_served_lines = envBool("TOKEN_GOAT_ELIDE_SERVED_LINES", hi.elide_served_lines);
   hi.subagent_markdown_first_read_deny = envBool("TOKEN_GOAT_SUBAGENT_MARKDOWN_FIRST_READ_DENY", hi.subagent_markdown_first_read_deny);
+  hi.agent_scoped_spawn_deny = envBool("TOKEN_GOAT_AGENT_SCOPED_SPAWN_DENY", hi.agent_scoped_spawn_deny);
   hi.log_large_file_hint_outcomes = envBool("TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES", hi.log_large_file_hint_outcomes);
   hi.json_sidecar = envBool("TOKEN_GOAT_HINT_JSON_SIDECAR", hi.json_sidecar);
   hi.large_read_redirect_bytes = envInt("TOKEN_GOAT_LARGE_READ_BYTES", hi.large_read_redirect_bytes, ...boundsOf("hints.large_read_redirect_bytes"));
@@ -2186,10 +2278,12 @@ function _buildConfig(raw, projectRaw = {}) {
   }
   const hk_raw = section(raw, "hooks");
   const hk = getDefaultConfig("hooks");
-  hk.watchdog_ms = validatedInt(hk_raw["watchdog_ms"], hk.watchdog_ms, ...boundsOf("hooks.watchdog_ms"));
-  hk.watchdog_ms = envInt("TOKEN_GOAT_HOOK_WATCHDOG_MS", hk.watchdog_ms, ...boundsOf("hooks.watchdog_ms"));
   hk.latency_budget_ms = validatedInt(hk_raw["latency_budget_ms"], hk.latency_budget_ms, ...boundsOf("hooks.latency_budget_ms"));
   hk.latency_budget_ms = envInt("TOKEN_GOAT_HOOK_LATENCY_BUDGET_MS", hk.latency_budget_ms, ...boundsOf("hooks.latency_budget_ms"));
+  hk.server = validatedBool(hk_raw["server"], hk.server);
+  hk.server = envBool("TOKEN_GOAT_HOOK_SERVER", hk.server);
+  hk.native = validatedNativeHooksMode(hk_raw["native"], hk.native);
+  hk.native = nativeHooksModeFromEnv(process.env["TOKEN_GOAT_NATIVE_HOOKS"]) ?? hk.native;
   const wf_raw = section(raw, "webfetch");
   const wf = getDefaultConfig("webfetch");
   wf.allow = validatedStrList(wf_raw["allow"], wf.allow);
@@ -2220,6 +2314,7 @@ function _buildConfig(raw, projectRaw = {}) {
   ix.max_chunks_per_file = validatedInt(ix_raw["max_chunks_per_file"], ix.max_chunks_per_file, ...boundsOf("indexing.max_chunks_per_file"));
   ix.skip_dirs = validatedStrList(ix_raw["skip_dirs"], ix.skip_dirs);
   ix.skip_files = validatedStrList(ix_raw["skip_files"], ix.skip_files);
+  ix.skip_minified = validatedBool(ix_raw["skip_minified"], ix.skip_minified);
   ix.embeddings_enabled = validatedBool(ix_raw["embeddings_enabled"], ix.embeddings_enabled);
   ix.embeddings_enabled = envBool("TOKEN_GOAT_EMBEDDINGS_ENABLED", ix.embeddings_enabled);
   ix.cross_project_symbols = validatedBool(ix_raw["cross_project_symbols"], ix.cross_project_symbols);
@@ -2259,7 +2354,7 @@ function _buildConfig(raw, projectRaw = {}) {
   mcp.confine_reads_to_project_root = validatedBool(mcp_raw["confine_reads_to_project_root"], mcp.confine_reads_to_project_root);
   mcp.confine_reads_to_project_root = envBool("TOKEN_GOAT_MCP_CONFINE_READS", mcp.confine_reads_to_project_root);
   mcp.allowed_roots = validatedStrList(mcp_raw["allowed_roots"], mcp.allowed_roots);
-  mcp.allowed_roots = envStrList("TOKEN_GOAT_MCP_ALLOWED_ROOTS", mcp.allowed_roots, path2.delimiter);
+  mcp.allowed_roots = envStrList("TOKEN_GOAT_MCP_ALLOWED_ROOTS", mcp.allowed_roots, path3.delimiter);
   const hs_raw = section(raw, "hint_stats");
   const hs = getDefaultConfig("hint_stats");
   hs.suppress_threshold_pct = validatedInt(hs_raw["suppress_threshold_pct"], hs.suppress_threshold_pct, ...boundsOf("hint_stats.suppress_threshold_pct"));
@@ -2271,6 +2366,7 @@ function _buildConfig(raw, projectRaw = {}) {
   sem.archive_weight = validatedFloat(sem_raw["archive_weight"], sem.archive_weight, ...boundsOf("semantic.archive_weight"));
   sem.docs_weight = validatedFloat(sem_raw["docs_weight"], sem.docs_weight, ...boundsOf("semantic.docs_weight"));
   sem.max_distance = validatedFloat(sem_raw["max_distance"], sem.max_distance, ...boundsOf("semantic.max_distance"));
+  sem.weak_distance = validatedFloat(sem_raw["weak_distance"], sem.weak_distance, ...boundsOf("semantic.weak_distance"));
   return {
     compact_assist: ca,
     bash_compress: bc,
@@ -2335,9 +2431,11 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "hints.write_rewrite_unchanged_pct": ["TOKEN_GOAT_WRITE_REWRITE_UNCHANGED_PCT"],
   "hints.large_read_redirect_bytes": ["TOKEN_GOAT_LARGE_READ_BYTES"],
   "hints.warn_unbalanced_shell_quoting": ["TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING"],
+  "hints.deny_bash_double_backslash": ["TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH"],
   "hints.serve_diff_on_reread": ["TOKEN_GOAT_SERVE_DIFF_ON_REREAD"],
   "hints.elide_served_lines": ["TOKEN_GOAT_ELIDE_SERVED_LINES"],
   "hints.subagent_markdown_first_read_deny": ["TOKEN_GOAT_SUBAGENT_MARKDOWN_FIRST_READ_DENY"],
+  "hints.agent_scoped_spawn_deny": ["TOKEN_GOAT_AGENT_SCOPED_SPAWN_DENY"],
   "hints.log_large_file_hint_outcomes": ["TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES"],
   "hints.cross_session_read_dedup": ["TOKEN_GOAT_CROSS_SESSION_READ_DEDUP"],
   "hints.cross_session_read_dedup_ttl_secs": ["TOKEN_GOAT_CROSS_SESSION_READ_DEDUP_TTL_SECS"],
@@ -2360,8 +2458,9 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "hints.context_threshold_advisory": ["TOKEN_GOAT_CONTEXT_THRESHOLD_ADVISORY"],
   "hints.pre_skill_advisory": ["TOKEN_GOAT_PRE_SKILL_ADVISORY"],
   "hints.quiet_hours": ["TOKEN_GOAT_QUIET_HOURS"],
-  "hooks.watchdog_ms": ["TOKEN_GOAT_HOOK_WATCHDOG_MS"],
   "hooks.latency_budget_ms": ["TOKEN_GOAT_HOOK_LATENCY_BUDGET_MS"],
+  "hooks.server": ["TOKEN_GOAT_HOOK_SERVER"],
+  "hooks.native": ["TOKEN_GOAT_NATIVE_HOOKS"],
   "webfetch.max_file_count": ["TOKEN_GOAT_WEB_CACHE_MAX_FILES"],
   "webfetch.max_bytes": ["TOKEN_GOAT_WEB_CACHE_MAX_BYTES"],
   "webfetch.compress_bodies": ["TOKEN_GOAT_WEB_COMPRESS"],
@@ -2385,7 +2484,26 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "indexing.max_db_size_mb": ["TOKEN_GOAT_INDEXING_MAX_DB_SIZE_MB"],
   "indexing.auto_reclaim_embeddings": ["TOKEN_GOAT_INDEXING_AUTO_RECLAIM_EMBEDDINGS"]
 };
-function saveConfig(config) {
+function isPlainObject(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function sparsifyAgainstDefaults(data, defaults, raw, explicit, prefix = "") {
+  const out = {};
+  for (const [k, v] of Object.entries(data)) {
+    const dotted = prefix === "" ? k : `${prefix}.${k}`;
+    const d = defaults[k];
+    const r = raw[k];
+    if (isPlainObject(v) && isPlainObject(d)) {
+      const sub = sparsifyAgainstDefaults(v, d, isPlainObject(r) ? r : {}, explicit, dotted);
+      if (Object.keys(sub).length > 0) out[k] = sub;
+      continue;
+    }
+    const keep = d === void 0 || !rawValueEquals(v, d) || r !== void 0 || explicit.has(dotted);
+    if (keep) out[k] = v;
+  }
+  return out;
+}
+function saveConfig(config, explicitKeys = []) {
   const ca = config.compact_assist;
   const bc = config.bash_compress;
   const sp = config.skill_preservation;
@@ -2483,6 +2601,7 @@ function saveConfig(config) {
       serve_diff_on_reread: config.hints.serve_diff_on_reread,
       elide_served_lines: config.hints.elide_served_lines,
       subagent_markdown_first_read_deny: config.hints.subagent_markdown_first_read_deny,
+      agent_scoped_spawn_deny: config.hints.agent_scoped_spawn_deny,
       backoff_thresholds: config.hints.backoff_thresholds,
       git_hint_max_ms: config.hints.git_hint_max_ms,
       min_session_hint_savings_bytes: config.hints.min_session_hint_savings_bytes,
@@ -2502,6 +2621,7 @@ function saveConfig(config) {
       protect_recent_reads: config.hints.protect_recent_reads,
       prompt_triggers: config.hints.prompt_triggers,
       warn_unbalanced_shell_quoting: config.hints.warn_unbalanced_shell_quoting,
+      deny_bash_double_backslash: config.hints.deny_bash_double_backslash,
       log_large_file_hint_outcomes: config.hints.log_large_file_hint_outcomes,
       cross_session_read_dedup: config.hints.cross_session_read_dedup,
       cross_session_read_dedup_ttl_secs: config.hints.cross_session_read_dedup_ttl_secs,
@@ -2509,8 +2629,9 @@ function saveConfig(config) {
       session_start_reminder: config.hints.session_start_reminder
     },
     hooks: {
-      watchdog_ms: config.hooks.watchdog_ms,
-      latency_budget_ms: config.hooks.latency_budget_ms
+      latency_budget_ms: config.hooks.latency_budget_ms,
+      server: config.hooks.server,
+      native: config.hooks.native
     },
     webfetch: {
       allow: config.webfetch.allow,
@@ -2532,6 +2653,7 @@ function saveConfig(config) {
       max_chunks_per_file: config.indexing.max_chunks_per_file,
       skip_dirs: config.indexing.skip_dirs,
       skip_files: config.indexing.skip_files,
+      skip_minified: config.indexing.skip_minified,
       embeddings_enabled: config.indexing.embeddings_enabled,
       cross_project_symbols: config.indexing.cross_project_symbols,
       max_db_size_mb: config.indexing.max_db_size_mb,
@@ -2567,25 +2689,21 @@ function saveConfig(config) {
     semantic: {
       archive_weight: config.semantic.archive_weight,
       max_distance: config.semantic.max_distance,
+      weak_distance: config.semantic.weak_distance,
       docs_weight: config.semantic.docs_weight
     }
   };
-  const toml = stringify(data);
+  const toml = stringify(sparsifyAgainstDefaults(data, buildPersistedConfig({}), readConfigToml(configPath()).raw, new Set(explicitKeys)));
   atomicWriteText(configPath(), toml);
-  _cached2 = null;
+  _cached = null;
 }
 
 export {
   parse,
   stringify,
-  detectHarness,
-  getHarnessName,
-  FALSY_ENV_VALUES,
-  envBool,
-  envInt,
-  envStrList,
   fingerprintContent,
   shortFingerprint,
+  indexedFileIsGone,
   fingerprintFile,
   fileIsAbsent,
   DEFAULT_OCR_LANG,
@@ -2594,6 +2712,7 @@ export {
   resolveOcrLangs,
   ownGet,
   defaultConfig,
+  projectHash,
   makeProjectAt,
   findProject,
   getDisplayRoot,
@@ -2603,6 +2722,8 @@ export {
   PROJECT_LOCKED_KEYS,
   lastProjectConfigLockedKeys,
   readConfigSource,
+  withConfigProjectRoot,
+  configProjectRootFor,
   getProjectConfigInfo,
   isAutoTriggerMultiplierExplicit,
   validateNumericField,
@@ -2613,16 +2734,18 @@ export {
   loadConfig,
   invalidateConfigCache,
   loadPersistedConfig,
+  hookServerEnabled,
+  nativeHooksEnabled,
   CONFIG_KEY_ENV_OVERRIDES,
   saveConfig
 };
 /*! Bundled license information:
 
-smol-toml/dist/date.js:
 smol-toml/dist/error.js:
-smol-toml/dist/util.js:
 smol-toml/dist/primitive.js:
+smol-toml/dist/date.js:
 smol-toml/dist/extract.js:
+smol-toml/dist/util.js:
 smol-toml/dist/struct.js:
 smol-toml/dist/parse.js:
 smol-toml/dist/stringify.js: