token-goat 2.9.29 → 2.9.31

package/dist/{token-goat-chunk-TGOXNAHW.mjs → token-goat-chunk-7EZTZOMC.mjs}

@@ -1,5 +1,12 @@
 import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
+import {
+  KNOWN_HARNESS_NAMES
+} from "./token-goat-chunk-QYHO5CPH.mjs";
+import {
+  findProject,
+  shortFingerprint
+} from "./token-goat-chunk-4GBVPH3D.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-YZAAZU2S.mjs";
@@ -14,333 +21,23 @@ import {
 import {
   atomicWriteText,
   decodeSource,
-  extractErrorMessage,
-  runGit
-} from "./token-goat-chunk-XYWPOSCN.mjs";
-import {
-  canonicalize,
-  foldPath
-} from "./token-goat-chunk-TCQANXYC.mjs";
+  extractErrorMessage
+} from "./token-goat-chunk-HU4TORC5.mjs";
 import {
-  normalizeDarwinSystemAlias
-} from "./token-goat-chunk-NMTKNYGF.mjs";
+  echoedValue
+} from "./token-goat-chunk-GGGG7RWB.mjs";
 import {
-  ENV_KEYS,
   configPath,
   projectConfigPath
-} from "./token-goat-chunk-MELOKFDJ.mjs";
+} from "./token-goat-chunk-CO3UYX6G.mjs";
 import {
   init_define_import_meta_env
 } from "./token-goat-chunk-A37V4PBF.mjs";
 
-// src/bridges/registry.ts
-init_define_import_meta_env();
-var KNOWN_HARNESS_NAMES = /* @__PURE__ */ new Set([
-  "claudecode",
-  "codex",
-  "opencode",
-  "gemini",
-  "hermes",
-  "openclaw",
-  "pi",
-  "copilot_cli",
-  "grok",
-  "qwen",
-  "kimi",
-  "vscode",
-  "visualstudio",
-  "generic"
-]);
-var relaySeededSessionIdValue;
-function setRelaySeededSessionId(id) {
-  relaySeededSessionIdValue = id;
-}
-function relaySeededSessionId() {
-  return relaySeededSessionIdValue;
-}
-function detectHarness() {
-  const env = process.env;
-  const override = (env[ENV_KEYS.HARNESS_OVERRIDE] ?? "").toLowerCase().trim();
-  if (override && KNOWN_HARNESS_NAMES.has(override)) {
-    return override;
-  }
-  if (env["HERMES_SESSION_ID"] || env["HERMES_HOME"]) {
-    return "hermes";
-  }
-  if (env["TERM_PROGRAM"] === "claude-code" || env["CLAUDE_CODE_VERSION"] !== void 0 || env["CLAUDE_CODE_SESSION_ID"] && env["CLAUDE_CODE_SESSION_ID"] !== relaySeededSessionIdValue) {
-    return "claudecode";
-  }
-  if (env["CODEX_SESSION_ID"] !== void 0 || env["CODEX_SESSION"]) {
-    return "codex";
-  }
-  if (env["OPENCODE_SESSION_ID"] !== void 0 || env["OPENCODE_SESSION"]) {
-    return "opencode";
-  }
-  if (env["GROK_SESSION_ID"] !== void 0) {
-    return "grok";
-  }
-  if (env["OPENCLAW_SESSION_ID"] !== void 0) {
-    return "openclaw";
-  }
-  if (env["ANTHROPIC_API_KEY"]) {
-    return "claudecode";
-  }
-  if (env["OPENAI_API_KEY"] && !env["ANTHROPIC_API_KEY"]) {
-    return "codex";
-  }
-  if ((env["GEMINI_API_KEY"] || env["GOOGLE_API_KEY"]) && !env["ANTHROPIC_API_KEY"]) {
-    return "gemini";
-  }
-  return "generic";
-}
-var _cached = null;
-function getHarnessName() {
-  if (_cached === null) {
-    _cached = detectHarness();
-  }
-  return _cached;
-}
-function resetHarnessCache() {
-  _cached = null;
-}
-registerReset(resetHarnessCache, { perRequest: true });
-
-// src/fingerprint.ts
+// src/config_project.ts
 init_define_import_meta_env();
-import { createHash } from "node:crypto";
 import * as fs from "node:fs";
-function fingerprintContent(content) {
-  const hash = createHash("sha256");
-  hash.update(typeof content === "string" ? Buffer.from(content, "utf-8") : content);
-  return hash.digest("hex");
-}
-function shortFingerprint(content) {
-  return fingerprintContent(content).slice(0, 16);
-}
-function fingerprintFile(filePath) {
-  let data;
-  try {
-    data = fs.readFileSync(filePath);
-  } catch {
-    return null;
-  }
-  return fingerprintContent(data);
-}
-function fileIsAbsent(filePath) {
-  try {
-    return fs.statSync(filePath, { throwIfNoEntry: false }) === void 0;
-  } catch {
-    return false;
-  }
-}
-
-// src/ocr_languages.ts
-init_define_import_meta_env();
-var DEFAULT_OCR_LANG = "eng";
-var SUPPORTED_OCR_LANG_CODES = [
-  "eng",
-  "fra",
-  "spa",
-  "deu",
-  "ita",
-  "por",
-  "nld",
-  "pol",
-  "rus",
-  "tur",
-  "swe",
-  "ara",
-  "chi_sim",
-  "chi_tra",
-  "jpn",
-  "kor"
-];
-var SUPPORTED_SET = new Set(SUPPORTED_OCR_LANG_CODES);
-function isSupportedOcrLang(lang) {
-  return SUPPORTED_SET.has(lang);
-}
-function resolveOcrLangs(input) {
-  const result = [DEFAULT_OCR_LANG];
-  if (!input) return result;
-  const tokens = input.split(/[+,;\s]+/).map((s) => s.trim().toLowerCase());
-  for (const token of tokens) {
-    if (token && isSupportedOcrLang(token) && !result.includes(token)) {
-      result.push(token);
-    }
-  }
-  return result;
-}
-
-// src/project.ts
-init_define_import_meta_env();
-import * as fs2 from "node:fs";
-import * as os from "node:os";
 import * as path from "node:path";
-var PROJECT_MARKERS = [
-  ".git",
-  "package.json",
-  "pyproject.toml",
-  "Cargo.toml",
-  "go.mod",
-  "shopify.app.toml",
-  "_config.yml",
-  "deno.json",
-  "deno.jsonc"
-];
-var REPO_CONTAINER_THRESHOLD = 3;
-function projectHash(canonicalRoot) {
-  return shortFingerprint(foldPath(canonicalRoot));
-}
-function makeProjectAt(root) {
-  let canonical;
-  try {
-    canonical = canonicalize(root);
-  } catch (exc) {
-    throw new Error(
-      `makeProjectAt: could not resolve path: ${extractErrorMessage(exc)}`,
-      { cause: exc }
-    );
-  }
-  try {
-    const stat = fs2.statSync(canonical);
-    if (!stat.isDirectory()) {
-      throw new Error(`makeProjectAt: path is not a directory: ${canonical}`);
-    }
-  } catch (exc) {
-    if (exc instanceof Error && exc.message.includes("ENOENT")) {
-      throw new Error(`makeProjectAt: path does not exist: ${canonical}`, { cause: exc });
-    }
-    throw exc;
-  }
-  const hash = projectHash(canonical);
-  return { root: canonical, hash, marker: "manual" };
-}
-function isRepoContainer(pathStr) {
-  let nestedRepos = 0;
-  try {
-    const entries = fs2.readdirSync(pathStr, { withFileTypes: true });
-    for (const entry of entries) {
-      if (entry.isDirectory()) {
-        const gitPath = path.join(pathStr, entry.name, ".git");
-        if (fs2.existsSync(gitPath)) {
-          let isGitDir = false;
-          try {
-            isGitDir = fs2.statSync(gitPath).isDirectory();
-          } catch {
-          }
-          if (isGitDir) {
-            nestedRepos++;
-            if (nestedRepos >= REPO_CONTAINER_THRESHOLD) {
-              return true;
-            }
-          }
-        }
-      }
-    }
-  } catch {
-    return false;
-  }
-  return false;
-}
-function markerExists(current, marker) {
-  const markerPath = path.join(current, marker);
-  try {
-    if (!fs2.existsSync(markerPath)) {
-      return false;
-    }
-    const stat = fs2.lstatSync(markerPath);
-    if (!stat.isSymbolicLink()) {
-      return true;
-    }
-    const resolved = fs2.realpathSync(markerPath);
-    const rel = path.relative(path.resolve(current), path.resolve(resolved));
-    return !rel.startsWith("..") && !path.isAbsolute(rel);
-  } catch {
-    return false;
-  }
-}
-function findProject(cwd) {
-  let p;
-  try {
-    p = canonicalize(cwd);
-  } catch {
-    return null;
-  }
-  let sysTemp = null;
-  try {
-    sysTemp = canonicalize(os.tmpdir());
-  } catch {
-  }
-  let current = p;
-  while (true) {
-    if (sysTemp && normalizeDarwinSystemAlias(foldPath(current)) === normalizeDarwinSystemAlias(foldPath(sysTemp))) {
-      break;
-    }
-    for (const marker of PROJECT_MARKERS) {
-      if (markerExists(current, marker)) {
-        if (!isRepoContainer(current)) {
-          return {
-            root: current,
-            hash: projectHash(current),
-            marker
-          };
-        }
-        break;
-      }
-    }
-    const parent = path.dirname(current);
-    if (parent === current) {
-      break;
-    }
-    current = parent;
-  }
-  return null;
-}
-var _displayRootCache = null;
-function getDisplayRoot(explicitRoot) {
-  if (explicitRoot !== void 0) return explicitRoot;
-  const cwd = process.cwd();
-  if (_displayRootCache !== null && _displayRootCache.cwd === cwd) return _displayRootCache.root;
-  const project = findProject(cwd);
-  const root = project !== null ? project.root : void 0;
-  _displayRootCache = { cwd, root };
-  return root;
-}
-registerReset(() => {
-  _displayRootCache = null;
-}, { perRequest: true });
-function isUnderSystemTemp(filePath) {
-  let sysTemp;
-  try {
-    sysTemp = canonicalize(os.tmpdir());
-  } catch {
-    return false;
-  }
-  let target;
-  try {
-    target = canonicalize(filePath);
-  } catch {
-    return false;
-  }
-  const foldedTemp = normalizeDarwinSystemAlias(foldPath(sysTemp));
-  const foldedTarget = normalizeDarwinSystemAlias(foldPath(target));
-  return foldedTarget === foldedTemp || foldedTarget.startsWith(`${foldedTemp}/`);
-}
-function resolveProjectRoot(opts) {
-  const base = opts?.project !== void 0 ? path.resolve(opts.project) : process.cwd();
-  const toplevel = runGit(["rev-parse", "--show-toplevel"], { cwd: base });
-  if (toplevel.exitCode === 0) {
-    const trimmed = toplevel.stdout.trim();
-    if (trimmed.length > 0) return canonicalize(trimmed);
-  }
-  const project = findProject(base);
-  if (project !== null) return project.root;
-  return canonicalize(base);
-}
-
-// src/config_project.ts
-init_define_import_meta_env();
-import * as fs3 from "node:fs";
 
 // node_modules/smol-toml/dist/index.js
 init_define_import_meta_env();
@@ -354,107 +51,14 @@ init_define_import_meta_env();
 // node_modules/smol-toml/dist/primitive.js
 init_define_import_meta_env();
 
-// node_modules/smol-toml/dist/date.js
-init_define_import_meta_env();
-var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
-var TomlDate = class _TomlDate extends Date {
-  #hasDate = false;
-  #hasTime = false;
-  #offset = null;
-  constructor(date) {
-    let hasDate = true;
-    let hasTime = true;
-    let offset = "Z";
-    if (typeof date === "string") {
-      let match = date.match(DATE_TIME_RE);
-      if (match) {
-        if (!match[1]) {
-          hasDate = false;
-          date = `0000-01-01T${date}`;
-        }
-        hasTime = !!match[2];
-        hasTime && date[10] === " " && (date = date.replace(" ", "T"));
-        if (match[2] && +match[2] > 23) {
-          date = "";
-        } else {
-          offset = match[3] || null;
-          date = date.toUpperCase();
-          if (!offset && hasTime)
-            date += "Z";
-        }
-      } else {
-        date = "";
-      }
-    }
-    super(date);
-    if (!isNaN(this.getTime())) {
-      this.#hasDate = hasDate;
-      this.#hasTime = hasTime;
-      this.#offset = offset;
-    }
-  }
-  isDateTime() {
-    return this.#hasDate && this.#hasTime;
-  }
-  isLocal() {
-    return !this.#hasDate || !this.#hasTime || !this.#offset;
-  }
-  isDate() {
-    return this.#hasDate && !this.#hasTime;
-  }
-  isTime() {
-    return this.#hasTime && !this.#hasDate;
-  }
-  isValid() {
-    return this.#hasDate || this.#hasTime;
-  }
-  toISOString() {
-    let iso = super.toISOString();
-    if (this.isDate())
-      return iso.slice(0, 10);
-    if (this.isTime())
-      return iso.slice(11, 23);
-    if (this.#offset === null)
-      return iso.slice(0, -1);
-    if (this.#offset === "Z")
-      return iso;
-    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
-    offset = this.#offset[0] === "-" ? offset : -offset;
-    let offsetDate = new Date(this.getTime() - offset * 6e4);
-    return offsetDate.toISOString().slice(0, -1) + this.#offset;
-  }
-  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
-    let date = new _TomlDate(jsDate);
-    date.#offset = offset;
-    return date;
-  }
-  static wrapAsLocalDateTime(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#offset = null;
-    return date;
-  }
-  static wrapAsLocalDate(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#hasTime = false;
-    date.#offset = null;
-    return date;
-  }
-  static wrapAsLocalTime(jsDate) {
-    let date = new _TomlDate(jsDate);
-    date.#hasDate = false;
-    date.#offset = null;
-    return date;
-  }
-};
-
 // node_modules/smol-toml/dist/error.js
 init_define_import_meta_env();
 function getLineColFromPtr(string, ptr) {
-  let lines = string.slice(0, ptr).split(/\r\n|\n|\r/g);
+  let lines = string.slice(0, ptr).split(/\r?\n/);
   return [lines.length, lines.pop().length + 1];
 }
 function makeCodeBlock(string, line, column) {
-  let lines = string.split(/\r\n|\n|\r/g);
+  let lines = string.split(/\r?\n/);
   let codeblock = "";
   let numberLen = (Math.log10(line + 1) | 0) + 1;
   for (let i = line - 1; i <= line + 1; i++) {
@@ -472,7 +76,7 @@ function makeCodeBlock(string, line, column) {
   }
   return codeblock;
 }
-var TomlError = class extends Error {
+var TomlError = class _TomlError extends Error {
   line;
   column;
   codeblock;
@@ -486,70 +90,15 @@ ${codeblock}`, options);
     this.column = column;
     this.codeblock = codeblock;
   }
-};
-
-// node_modules/smol-toml/dist/util.js
-init_define_import_meta_env();
-function indexOfNewline(str, start = 0) {
-  let idx = str.indexOf("\n", start);
-  if (str.charCodeAt(idx - 1) === 13)
-    idx--;
-  return idx;
-}
-function skipComment(ctx) {
-  for (; ctx.p < ctx.s.length; ctx.p++) {
-    let c = ctx.s.charCodeAt(ctx.p);
-    if (c === 10)
-      break;
-    if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
-      ctx.p++;
-      break;
-    }
-    if (c < 32 && c !== 9 || c === 127) {
-      throw new TomlError("control characters are not allowed in comments", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
-    }
-  }
-}
-function skipVoid(ctx, banNewLines, banComments) {
-  let c;
-  while (1) {
-    while ((c = ctx.s.charCodeAt(ctx.p)) === 32 || c === 9 || !banNewLines && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10))
-      ctx.p++;
-    if (banComments || c !== 35)
-      break;
-    skipComment(ctx);
-  }
-}
-function skipUntil(ctx, sep, end) {
-  let ptr = ctx.p;
-  if (!end) {
-    ptr = indexOfNewline(ctx.s, ptr);
-    ctx.p = ptr < 0 ? ctx.s.length : ptr;
-    return;
+  /** @internal */
+  static x(message, ctx, ptr) {
+    throw new _TomlError(message, { toml: ctx.s, ptr: ptr ?? ctx.p });
   }
-  for (; ctx.p < ctx.s.length; ctx.p++) {
-    let c = ctx.s.charCodeAt(ctx.p);
-    if (c === 35) {
-      skipComment(ctx);
-    } else if (c === end || c === sep) {
-      return;
-    }
-  }
-  throw new TomlError("cannot find end of structure", {
-    toml: ctx.s,
-    ptr
-  });
-}
+};
 
 // node_modules/smol-toml/dist/primitive.js
-var INT_REGEX = /^((0x[0-9a-fA-F](_?[0-9a-fA-F])*)|(([+-]|0[ob])?\d(_?\d)*))$/;
-var FLOAT_REGEX = /^[+-]?\d(_?\d)*(\.\d(_?\d)*)?([eE][+-]?\d(_?\d)*)?$/;
-var LEADING_ZERO = /^[+-]?0[0-9_]/;
 function parseString(ctx) {
-  let start = ctx.p;
+  let startPtr = ctx.p;
   let c = ctx.s.charCodeAt(ctx.p++);
   let first = c;
   let isLiteral = c === 39;
@@ -568,10 +117,7 @@ function parseString(ctx) {
     if (isMultiline && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)) {
       state = state && 3;
     } else if (c < 32 && c !== 9 || c === 127) {
-      throw new TomlError("control characters are not allowed in strings", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
+      TomlError.x("control characters are not allowed in strings", ctx);
     } else if ((!state || state === 3) && c === first && (!isMultiline || ctx.s.charCodeAt(ctx.p + 1) === first && ctx.s.charCodeAt(ctx.p + 2) === first)) {
       if (isMultiline) {
         if (ctx.s.charCodeAt(ctx.p + 3) === first)
@@ -579,8 +125,10 @@ function parseString(ctx) {
         if (ctx.s.charCodeAt(ctx.p + 3) === first)
           ctx.p++;
       }
-      if (!state)
-        parsed += ctx.s.slice(sliceStart, ctx.p);
+      if (!state) {
+        let s = ctx.s.slice(sliceStart, ctx.p);
+        parsed = parsed ? parsed + s : s;
+      }
       ctx.p += isMultiline ? 3 : 1;
       return parsed;
     } else if (!state) {
@@ -590,10 +138,11 @@ function parseString(ctx) {
       }
     } else if (state === 1) {
       if (c === 120 || c === 117 || c === 85) {
+        let errPtr = ctx.p++ - 1;
         let value = 0;
         let len = c === 120 ? 2 : c === 117 ? 4 : 8;
         for (let j = 0; j < len; j++, ctx.p++) {
-          let hex = ctx.s.charCodeAt(ctx.p + 1);
+          let hex = ctx.s.charCodeAt(ctx.p);
           let digit = (
             /* 0-9 */
             hex >= 48 && hex <= 57 ? hex - 48 : (
@@ -605,16 +154,16 @@ function parseString(ctx) {
             )
           );
           if (digit < 0)
-            throw new TomlError("invalid non-hex character in unicode escape", { toml: ctx.s, ptr: ctx.p + 1 });
+            TomlError.x("invalid non-hex character in unicode escape", ctx);
           value = value << 4 | digit;
         }
         if (value < 0 || value > 1114111 || value >= 55296 && value <= 57343) {
-          throw new TomlError("invalid unicode escape", { toml: ctx.s, ptr: ctx.p });
+          TomlError.x("invalid unicode escape", ctx, errPtr);
         }
         parsed += String.fromCodePoint(value);
-        sliceStart = ctx.p + 1;
+        sliceStart = ctx.p--;
         state = 0;
-      } else if (c === 32 || c === 9) {
+      } else if (isMultiline && (c === 32 || c === 9)) {
         state = 2;
       } else {
         if (c === 98)
@@ -634,85 +183,154 @@ function parseString(ctx) {
         else if (c === 92)
           parsed += "\\";
         else
-          throw new TomlError("unrecognized escape sequence", { toml: ctx.s, ptr: ctx.p });
+          TomlError.x("unrecognised escape sequence", ctx);
         sliceStart = ctx.p + 1;
         state = 0;
       }
     } else if (c !== 32 && c !== 9) {
-      if (state === 2) {
-        throw new TomlError("invalid escape: only line-ending whitespace may be escaped", {
-          toml: ctx.s,
-          ptr: sliceStart
-        });
-      }
+      if (state === 2)
+        TomlError.x("invalid escape: only line-ending whitespace may be escaped", ctx, sliceStart);
       state = !isLiteral && c === 92 ? 1 : 0;
       sliceStart = ctx.p;
     }
   }
-  throw new TomlError("unfinished string", { toml: ctx.s, ptr: start });
-}
-function sliceAndTrimEndOf(ctx, start, end) {
-  let value = ctx.s.slice(start, end);
-  let commentIdx = value.indexOf("#");
-  if (commentIdx > 0) {
-    skipComment({ s: value, p: commentIdx, d: 0 });
-    value = value.slice(0, commentIdx);
-  }
-  return value.trimEnd();
-}
-function parseValue(ctx, integersAsBigInt, end) {
-  let ptr = ctx.p;
-  let err = { toml: ctx.s, ptr };
-  skipUntil(ctx, 44, end);
-  let value = sliceAndTrimEndOf(ctx, ptr, ctx.p);
-  if (!value)
-    throw new TomlError("incomplete declaration: value expected", err);
-  if (value === "-inf")
-    return -Infinity;
-  if (value === "inf" || value === "+inf")
-    return Infinity;
-  if (value === "nan" || value === "+nan" || value === "-nan")
-    return NaN;
-  if (value === "-0")
-    return integersAsBigInt ? 0n : 0;
-  let isInt = INT_REGEX.test(value);
-  if (isInt || FLOAT_REGEX.test(value)) {
-    if (LEADING_ZERO.test(value)) {
-      throw new TomlError("leading zeroes are not allowed", err);
-    }
-    value = value.replace(/_/g, "");
-    let numeric = +value;
-    if (isNaN(numeric)) {
-      throw new TomlError("invalid number", err);
-    }
-    if (isInt) {
-      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
-        throw new TomlError("integer value cannot be represented losslessly", err);
+  TomlError.x("unfinished string", ctx, startPtr);
+}
+
+// node_modules/smol-toml/dist/extract.js
+init_define_import_meta_env();
+
+// node_modules/smol-toml/dist/date.js
+init_define_import_meta_env();
+var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[Tt ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|z|[-+]\d{2}:\d{2})?$/i;
+var TomlDate = class _TomlDate extends Date {
+  #hasDate = false;
+  #hasTime = false;
+  #offset = null;
+  constructor(date, fasttype, unsafeDelim) {
+    let hasDate = true;
+    let hasTime = true;
+    let offset = "Z";
+    let c;
+    if (typeof date === "string") {
+      if (fasttype)
+        prep: {
+          if (fasttype < 3) {
+            if (+date.slice(11, 13) > 23) {
+              date = "";
+              break prep;
+            }
+            if (fasttype === 2) {
+              offset = null;
+              date += "Z";
+            } else if ((c = date.charCodeAt(date.length - 1)) !== 90 && c !== 122) {
+              offset = date.slice(date.length - 6);
+            }
+            if (unsafeDelim)
+              date = date.slice(0, 10) + "T" + date.slice(11);
+          } else if (fasttype === 4) {
+            date = +date.slice(0, 2) > 23 ? "" : `0000-01-01T${date}Z`;
+          }
+          hasDate = fasttype !== 4;
+          hasTime = fasttype !== 3;
+        }
+      else {
+        let match = date.match(DATE_TIME_RE);
+        if (match) {
+          if (!match[1]) {
+            hasDate = false;
+            date = `0000-01-01T${date}`;
+          }
+          hasTime = !!match[2];
+          hasTime && date[10] === " " && (date = date.replace(" ", "T"));
+          if (match[2] && +match[2] > 23) {
+            date = "";
+          } else {
+            offset = match[3] || null;
+            if (!offset && hasTime)
+              date += "Z";
+          }
+        } else {
+          date = "";
+        }
       }
-      if (isInt || integersAsBigInt === true)
-        numeric = BigInt(value);
     }
-    return numeric;
+    super(date);
+    if (!isNaN(this.getTime())) {
+      this.#hasDate = hasDate;
+      this.#hasTime = hasTime;
+      this.#offset = offset;
+    }
   }
-  const date = new TomlDate(value);
-  if (!date.isValid())
-    throw new TomlError("invalid value", err);
-  return date;
-}
+  isDateTime() {
+    return this.#hasDate && this.#hasTime;
+  }
+  isLocal() {
+    return !this.#hasDate || !this.#hasTime || !this.#offset;
+  }
+  isDate() {
+    return this.#hasDate && !this.#hasTime;
+  }
+  isTime() {
+    return this.#hasTime && !this.#hasDate;
+  }
+  isValid() {
+    return this.#hasDate || this.#hasTime;
+  }
+  toISOString() {
+    let iso = super.toISOString();
+    if (this.isDate())
+      return iso.slice(0, 10);
+    if (this.isTime())
+      return iso.slice(11, 23);
+    if (this.#offset === null)
+      return iso.slice(0, -1);
+    if (this.#offset === "Z" || this.#offset === "z")
+      return iso;
+    let offset = +this.#offset.slice(1, 3) * 60 + +this.#offset.slice(4, 6);
+    offset = this.#offset[0] === "-" ? offset : -offset;
+    let offsetDate = new Date(this.getTime() - offset * 6e4);
+    return offsetDate.toISOString().slice(0, -1) + this.#offset;
+  }
+  static wrapAsOffsetDateTime(jsDate, offset = "Z") {
+    let date = new _TomlDate(jsDate);
+    date.#offset = offset;
+    return date;
+  }
+  static wrapAsLocalDateTime(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalDate(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#hasTime = false;
+    date.#offset = null;
+    return date;
+  }
+  static wrapAsLocalTime(jsDate) {
+    let date = new _TomlDate(jsDate);
+    date.#hasDate = false;
+    date.#offset = null;
+    return date;
+  }
+};
 
 // node_modules/smol-toml/dist/extract.js
-init_define_import_meta_env();
-function extractValue(ctx, end, integersAsBigInt) {
-  let ptr = ctx.p;
-  let c = ctx.s.charCodeAt(ptr);
+function isDigit(char, base = 10) {
+  return base === 16 ? char > 47 && char < 58 || char > 64 && char < 71 || char > 96 && char < 103 : char > 47 && char < 48 + base;
+}
+function isEndOfValue(char, delim) {
+  return char === 32 || char === 9 || char === 10 || char === 13 || // Structure end or next value delimiter
+  delim && (char === delim || char === 44) || // Comment
+  char === 35;
+}
+function extractValue(ctx, end) {
+  let errPtr = ctx.p;
+  let c = ctx.s.charCodeAt(ctx.p);
   if (c === 91 || c === 123) {
-    if (!ctx.d--) {
-      throw new TomlError("document contains excessively nested structures. aborting.", {
-        toml: ctx.s,
-        ptr
-      });
-    }
-    let value = c === 91 ? parseArray(ctx, integersAsBigInt) : parseInlineTable(ctx, integersAsBigInt);
+    ctx.d-- || TomlError.x("document contains excessively nested structures. aborting.", ctx);
+    let value = c === 91 ? parseArray(ctx) : parseInlineTable(ctx);
     ctx.d++;
     return value;
   }
@@ -721,90 +339,263 @@ function extractValue(ctx, end, integersAsBigInt) {
   }
   if (c === 116) {
     if (ctx.s.charCodeAt(++ctx.p) !== 114 || ctx.s.charCodeAt(++ctx.p) !== 117 || ctx.s.charCodeAt(++ctx.p) !== 101)
-      throw new TomlError("invalid value", { toml: ctx.s, ptr });
-    ctx.p++;
-    return true;
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, true;
   }
   if (c === 102) {
     if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 108 || ctx.s.charCodeAt(++ctx.p) !== 115 || ctx.s.charCodeAt(++ctx.p) !== 101)
-      throw new TomlError("invalid value", { toml: ctx.s, ptr });
-    ctx.p++;
-    return false;
+      TomlError.x("invalid value", ctx, errPtr);
+    return ctx.p++, false;
+  }
+  if (c === 43 || c === 45) {
+    return parseNumber(ctx, ctx.p, ctx.s.charCodeAt(++ctx.p), 44 - c, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 4) === 45 && ctx.s.charCodeAt(ctx.p + 7) === 45) {
+    return parseDate(ctx, c, end);
+  }
+  if (ctx.s.charCodeAt(ctx.p + 2) === 58) {
+    return parseTime(ctx, c, end);
+  }
+  return parseNumber(ctx, ctx.p, c, 0, end);
+}
+function parseNumber(ctx, startPtr, startChr, sign, endChr) {
+  let c = startChr;
+  let state = 0;
+  let hasUnderscores = false;
+  if (c === 105) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 110 || ctx.s.charCodeAt(++ctx.p) !== 102)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, (sign || 1) / 0;
+  }
+  if (c === 110) {
+    if (ctx.s.charCodeAt(++ctx.p) !== 97 || ctx.s.charCodeAt(++ctx.p) !== 110)
+      TomlError.x("invalid value", ctx, startPtr);
+    return ctx.p++, NaN;
+  }
+  if (c === 48) {
+    if (++ctx.p >= ctx.s.length || isEndOfValue(c = ctx.s.charCodeAt(ctx.p), endChr))
+      return ctx.bi === true ? 0n : 0;
+    if (!sign) {
+      if (c === 120)
+        return parseIntegerBaseN(ctx, startPtr, 16, endChr);
+      else if (c === 98)
+        return parseIntegerBaseN(ctx, startPtr, 2, endChr);
+      else if (c === 111)
+        return parseIntegerBaseN(ctx, startPtr, 8, endChr);
+    }
+    if (c === 46)
+      state = 2;
+    else if (c === 101 || c === 69)
+      state = 4;
+    else
+      TomlError.x("illegal leading zero", ctx, startPtr);
+  } else if (!isDigit(c))
+    TomlError.x("invalid value", ctx, startPtr);
+  while (++ctx.p < ctx.s.length && (c = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c, endChr))) {
+    if (!state)
+      state = 1;
+    if (c === 95) {
+      if (!(state & 1))
+        TomlError.x("illegal underscore", ctx);
+      state += 11;
+      hasUnderscores = true;
+    } else if (state === 1 && c === 46)
+      state = 2;
+    else if ((state === 1 || state === 3) && (c === 101 || c === 69))
+      state = 4;
+    else if (state === 4 && (c === 43 || c === 45)) {
+    } else if (!isDigit(c))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (state > 9)
+      state -= 11;
+    else if (!(state & 1))
+      state++;
+  }
+  if (!state) {
+    let val = (startChr - 48) * (sign || 1);
+    return ctx.bi === true ? BigInt(val) : val;
+  }
+  if (!(state & 1))
+    TomlError.x("unfinished numeric value", ctx, startPtr);
+  let str = ctx.s.slice(startPtr, ctx.p);
+  if (hasUnderscores)
+    str = str.replaceAll("_", "");
+  return state > 1 ? parseFloat(str) : parseInteger(ctx, str, 10, startPtr);
+}
+function parseIntegerBaseN(ctx, startPtr, base, endChr) {
+  let c, underscore = 1;
+  while (++ctx.p < ctx.s.length && (c = ctx.s.charCodeAt(ctx.p), !isEndOfValue(c, endChr))) {
+    if (c === 95) {
+      if (underscore & 1)
+        TomlError.x("illegal underscore", ctx);
+      underscore = 3;
+    } else if (!isDigit(c, base))
+      TomlError.x(`illegal character in numeric literal`, ctx);
+    else if (underscore & 1)
+      underscore--;
+  }
+  if (underscore & 1)
+    TomlError.x("unfinished numeric value", ctx);
+  let str = ctx.s.slice(startPtr + 2, ctx.p);
+  if (underscore)
+    str = str.replaceAll("_", "");
+  return parseInteger(ctx, str, base, startPtr);
+}
+function parseInteger(ctx, str, base, startPtr) {
+  if (ctx.bi !== true)
+    int: {
+      let val = parseInt(str, base);
+      if (!Number.isSafeInteger(val)) {
+        if (ctx.bi)
+          break int;
+        TomlError.x("integer value cannot be represented losslessly", ctx, startPtr);
+      }
+      return val;
+    }
+  return base === 10 ? BigInt(str) : BigInt((base === 2 ? "0b" : base === 8 ? "0o" : "0x") + str);
+}
+function parseDate(ctx, c, endChr) {
+  let startPtr = ctx.p++, unsafeSeparator;
+  if (!isDigit(c) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++)) || !isDigit(ctx.s.charCodeAt(ctx.p++))) {
+    return parseNumber(ctx, ctx.p = startPtr, c, 0, endChr);
+  }
+  ctx.p += 5;
+  if (!isDigit(ctx.s.charCodeAt(ctx.p++)))
+    TomlError.x("invalid date-time: date part is malformed", ctx, startPtr);
+  if (ctx.p >= ctx.s.length || ((c = ctx.s.charCodeAt(ctx.p)) !== 32 || (unsafeSeparator = true, !isDigit(ctx.s.charCodeAt(ctx.p + 1)))) && c !== 84 && c !== 116) {
+    let t2 = ctx.s.slice(startPtr, ctx.p);
+    return readDate(ctx, t2, 3, false, startPtr);
+  }
+  if (ctx.s.charCodeAt(ctx.p += 3) !== 58)
+    TomlError.x("invalid date-time: time part is malformed", ctx, startPtr);
+  if (ctx.s.charCodeAt(ctx.p += 3) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  if (c = ctx.s.charCodeAt(ctx.p)) {
+    if (c === 90 || c === 122) {
+      let t2 = ctx.s.slice(startPtr, ++ctx.p);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, "[+00:00]");
+    }
+    if (c === 43 || c === 45) {
+      let t2 = ctx.s.slice(startPtr, ctx.p += 6);
+      return readDate(ctx, t2, 1, unsafeSeparator, startPtr, !ctx.ld && "[" + ctx.s.slice(ctx.p - 6, ctx.p) + "]");
+    }
+  }
+  let t = ctx.s.slice(startPtr, ctx.p);
+  return readDate(ctx, t, 2, unsafeSeparator, startPtr);
+}
+function parseTime(ctx, c, endChr) {
+  let start = ctx.p;
+  if (!isDigit(c) || !isDigit(ctx.s.charCodeAt(++ctx.p))) {
+    return parseNumber(ctx, --ctx.p, c, 0, endChr);
+  }
+  if (ctx.s.charCodeAt(ctx.p += 4) === 58)
+    ctx.p += 3;
+  if (ctx.s.charCodeAt(ctx.p) === 46)
+    while (isDigit(ctx.s.charCodeAt(++ctx.p)))
+      ;
+  let t = ctx.s.slice(start, ctx.p);
+  return readDate(ctx, t, 4, false, start);
+}
+function readDate(ctx, str, type, unsafeDelim, errPtr, temporalSuffix) {
+  if (ctx.ld) {
+    let date = new TomlDate(str, type, unsafeDelim);
+    if (!date.isValid())
+      TomlError.x("invalid date", ctx, errPtr);
+    return date;
+  }
+  try {
+    if (temporalSuffix)
+      str += temporalSuffix;
+    switch (type) {
+      case 1:
+        return Temporal.ZonedDateTime.from(str);
+      case 2:
+        return Temporal.PlainDateTime.from(str);
+      case 3:
+        return Temporal.PlainDate.from(str);
+      case 4:
+        return Temporal.PlainTime.from(str);
+    }
+  } catch (e) {
+    TomlError.x(e instanceof Error ? e.message : "" + e, ctx, errPtr);
+  }
+}
+
+// node_modules/smol-toml/dist/util.js
+init_define_import_meta_env();
+function skipComment(ctx) {
+  for (; ctx.p < ctx.s.length; ctx.p++) {
+    let c = ctx.s.charCodeAt(ctx.p);
+    if (c === 10)
+      break;
+    if (c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10) {
+      ctx.p++;
+      break;
+    }
+    if (c < 32 && c !== 9 || c === 127) {
+      TomlError.x("control characters are not allowed in comments", ctx);
+    }
+  }
+}
+function skipVoid(ctx, banNewLines, banComments) {
+  let c;
+  while (ctx.p < ctx.s.length) {
+    while (ctx.p < ctx.s.length && ((c = ctx.s.charCodeAt(ctx.p)) === 32 || c === 9 || !banNewLines && (c === 10 || c === 13 && ctx.s.charCodeAt(ctx.p + 1) === 10)))
+      ctx.p++;
+    if (banComments || c !== 35)
+      break;
+    skipComment(ctx);
   }
-  return parseValue(ctx, integersAsBigInt, end);
 }
 
 // node_modules/smol-toml/dist/struct.js
-var KEY_PART_RE = /^[a-zA-Z0-9-_]+[ \t]*$/;
-function parseKey(ctx, end = "=") {
-  let start = ctx.p;
-  let dot = start - 1;
+function parseKey(ctx, end = 61) {
+  let startPtr;
+  let state = 0;
   let parsed = [];
-  let endPtr = ctx.s.indexOf(end, start);
-  if (endPtr < 0) {
-    throw new TomlError("incomplete key-value: cannot find end of key", {
-      toml: ctx.s,
-      ptr: start
-    });
-  }
+  let sliceStart;
+  let c = ctx.s.charCodeAt(startPtr = ctx.p);
   do {
-    let c = ctx.s.charCodeAt(ctx.p = ++dot);
-    if (c !== 32 && c !== 9) {
-      if (c === 34 || c === 39) {
-        if (c === ctx.s.charCodeAt(ctx.p + 1) && c === ctx.s.charCodeAt(ctx.p + 2)) {
-          throw new TomlError("multiline strings are not allowed in keys", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        let part = parseString(ctx);
-        dot = ctx.s.indexOf(".", ctx.p);
-        let strEnd = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
-        let newLine = indexOfNewline(strEnd);
-        if (newLine > -1) {
-          throw new TomlError("newlines are not allowed in keys", {
-            toml: ctx.s,
-            ptr: newLine
-          });
-        }
-        if (strEnd.trimStart()) {
-          throw new TomlError("found extra tokens after the string part", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        if (endPtr < ctx.p) {
-          endPtr = ctx.s.indexOf(end, ctx.p);
-          if (endPtr < 0) {
-            throw new TomlError("incomplete key-value: cannot find end of key", {
-              toml: ctx.s,
-              ptr: start
-            });
-          }
-        }
-        parsed.push(part);
-      } else {
-        dot = ctx.s.indexOf(".", ctx.p);
-        let part = ctx.s.slice(ctx.p, dot < 0 || dot > endPtr ? endPtr : dot);
-        if (!KEY_PART_RE.test(part)) {
-          throw new TomlError("only letter, numbers, dashes and underscores are allowed in keys", {
-            toml: ctx.s,
-            ptr: ctx.p
-          });
-        }
-        parsed.push(part.trimEnd());
+    if (c === end) {
+      if (!state)
+        TomlError.x("unexpected end of key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      return ctx.p++, parsed;
+    } else if (c === 46) {
+      if (!state)
+        TomlError.x("illegal empty bare key", ctx);
+      if (state === 1)
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+      state = 0;
+    } else if (!state && (c === 34 || c === 39)) {
+      if (c === ctx.s.charCodeAt(ctx.p + 1) && c === ctx.s.charCodeAt(ctx.p + 2))
+        TomlError.x("illegal quoted key: multiline strings are not allowed", ctx);
+      parsed.push(parseString(ctx));
+      state = 2;
+      ctx.p--;
+    } else if (c === 32 || c === 9) {
+      if (state === 1) {
+        parsed.push(ctx.s.slice(sliceStart, ctx.p));
+        state = 2;
       }
+    } else if (state === 2 || c < 48 && c !== 45 || c > 57 && c < 65 || c > 90 && c < 97 && c !== 95 || c > 122) {
+      TomlError.x("illegal character in key", ctx);
+    } else if (!state) {
+      state = 1;
+      sliceStart = ctx.p;
     }
-  } while (dot + 1 && dot < endPtr);
-  ctx.p = endPtr + 1;
-  skipVoid(ctx, true, true);
-  return parsed;
+  } while (c = ctx.s.charCodeAt(++ctx.p));
+  TomlError.x("incomplete key-value: cannot find end of key", ctx, startPtr);
 }
-function parseInlineTable(ctx, integersAsBigInt) {
-  let res = {};
+function parseInlineTable(ctx) {
+  let startPtr = ctx.p++;
+  let res = /* @__PURE__ */ Object.create(null);
   let seen = /* @__PURE__ */ new Set();
   let c;
-  ctx.p++;
   while (ctx.p < ctx.s.length) {
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p)) === 125) {
@@ -814,70 +605,71 @@ function parseInlineTable(ctx, integersAsBigInt) {
     let k;
     let t = res;
     let hasOwn = false;
-    let p = ctx.p;
+    let errPtr = ctx.p;
     let key = parseKey(ctx);
     for (let i = 0; i < key.length; i++) {
       if (i)
-        t = hasOwn ? t[k] : t[k] = {};
+        t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
       k = key[i];
       if ((hasOwn = Object.hasOwn(t, k)) && (typeof t[k] !== "object" || seen.has(t[k]))) {
-        throw new TomlError("trying to redefine an already defined value", {
-          toml: ctx.s,
-          ptr: p
-        });
+        TomlError.x("trying to redefine an already defined value", ctx, errPtr);
       }
-      if (!hasOwn && k === "__proto__") {
+      let unsafe = k === "__proto__";
+      if (ctx.uk && (unsafe || k === "constructor")) {
+        t = ctx.uk !== 1 && TomlError.x("document contains an unsafe property", ctx, errPtr);
+        break;
+      }
+      if (!hasOwn && unsafe) {
         Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
       }
     }
     if (hasOwn) {
-      throw new TomlError("trying to redefine an already defined value", {
-        toml: ctx.s,
-        ptr: ctx.p
-      });
+      TomlError.x("trying to redefine an already defined value", ctx, errPtr);
     }
-    let value = extractValue(ctx, 125, integersAsBigInt);
-    seen.add(t[k] = value);
+    skipVoid(ctx, true, true);
+    let value = extractValue(
+      ctx,
+      125
+      /* } */
+    );
+    if (t && typeof (t[k] = value) === "object")
+      seen.add(value);
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p++)) === 125) {
       return res;
     }
-    if (c !== 44) {
-      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
-    }
+    if (c !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  throw new TomlError("unfinished table encountered", {
-    toml: ctx.s,
-    ptr: ctx.p
-  });
+  TomlError.x("unfinished table", ctx, startPtr);
 }
-function parseArray(ctx, integersAsBigInt) {
+function parseArray(ctx) {
+  let startPtr = ctx.p++;
   let res = [];
   let c;
-  ctx.p++;
   while (ctx.p < ctx.s.length) {
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p)) === 93) {
       ctx.p++;
       return res;
     }
-    res.push(extractValue(ctx, 93, integersAsBigInt));
+    res.push(extractValue(
+      ctx,
+      93
+      /* ] */
+    ));
     skipVoid(ctx);
     if ((c = ctx.s.charCodeAt(ctx.p++)) === 93) {
       return res;
     }
-    if (c !== 44) {
-      throw new TomlError("expected comma or end of structure", { toml: ctx.s, ptr: ctx.p - 1 });
-    }
+    if (c !== 44)
+      TomlError.x("expected comma or end of structure", ctx, ctx.p - 1);
   }
-  throw new TomlError("unfinished array encountered", {
-    toml: ctx.s,
-    ptr: ctx.p
-  });
+  TomlError.x("unfinished array", ctx, startPtr);
 }
 
 // node_modules/smol-toml/dist/parse.js
-function peekTable(key, table, meta, type) {
+function peekTable(ctx, key, table, meta, type) {
   let t = table;
   let m = meta;
   let k;
@@ -885,7 +677,7 @@ function peekTable(key, table, meta, type) {
   let state;
   for (let i = 0; i < key.length; i++) {
     if (i) {
-      t = hasOwn ? t[k] : t[k] = {};
+      t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
       m = (state = m[k]).c;
       if (type === 0 && (state.t === 1 || state.t === 2)) {
         return null;
@@ -901,7 +693,10 @@ function peekTable(key, table, meta, type) {
       return null;
     }
     if (!hasOwn) {
-      if (k === "__proto__") {
+      let unsafe = k === "__proto__";
+      if (ctx.uk && (unsafe || k === "constructor"))
+        return false;
+      if (unsafe) {
         Object.defineProperty(t, k, { enumerable: true, configurable: true, writable: true });
         Object.defineProperty(m, k, { enumerable: true, configurable: true, writable: true });
       }
@@ -909,7 +704,7 @@ function peekTable(key, table, meta, type) {
         t: i < key.length - 1 && type === 2 ? 3 : type,
         d: false,
         i: 0,
-        c: {}
+        c: /* @__PURE__ */ Object.create(null)
       };
     }
   }
@@ -922,43 +717,60 @@ function peekTable(key, table, meta, type) {
       state.d = true;
       t[k] = [];
     }
-    t[k].push(t = {});
-    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: {} };
+    t[k].push(t = /* @__PURE__ */ Object.create(null));
+    state.c[state.i++] = state = { t: 1, d: false, i: 0, c: /* @__PURE__ */ Object.create(null) };
   }
   if (state.d) {
     return null;
   }
   state.d = true;
   if (type === 1) {
-    t = hasOwn ? t[k] : t[k] = {};
+    t = hasOwn ? t[k] : t[k] = /* @__PURE__ */ Object.create(null);
   } else if (type === 0 && hasOwn) {
     return null;
   }
   return [k, t, state.c];
 }
-function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
-  let ctx = { s: toml, p: 0, d: maxDepth };
-  let res = {};
-  let meta = {};
+function validateTablePeek(ctx, peek, ptr) {
+  if (peek === null || ctx.uk === 2)
+    TomlError.x(peek === null ? "trying to redefine an already defined table or value" : "document contains an unsafe property", ctx, ptr);
+}
+function parse(toml, options = {}) {
+  let ctx = {
+    s: toml,
+    p: 0,
+    d: options.maxDepth ?? 1e3,
+    bi: options.integersAsBigInt ?? false,
+    ld: options.useLegacyDate ?? true,
+    uk: options.unsafeKeyBehaviour === "throw" ? 2 : options.unsafeKeyBehaviour === "drop" ? 1 : 0
+  };
+  let res = /* @__PURE__ */ Object.create(null);
+  let meta = /* @__PURE__ */ Object.create(null);
   let tmp;
+  let skipping = false;
   let tbl = res;
   let m = meta;
+  if (toml.charCodeAt(0) === 65279)
+    ctx.p++;
   skipVoid(ctx);
   while (ctx.p < toml.length) {
     if (toml.charCodeAt(ctx.p) === 91) {
       let isTableArray = toml.charCodeAt(++ctx.p) === 91;
       tmp = ctx.p += +isTableArray;
-      let k = parseKey(ctx, "]");
+      skipping = false;
+      let k = parseKey(
+        ctx,
+        93
+        /* ] */
+      );
       if (isTableArray) {
-        if (toml.charCodeAt(ctx.p - 1) !== 93) {
-          throw new TomlError("expected end of table declaration", {
-            toml,
-            ptr: ctx.p - 1
-          });
+        if (toml.charCodeAt(ctx.p) !== 93) {
+          TomlError.x("expected end of table array declaration", ctx);
         }
         ctx.p++;
       }
       let p = peekTable(
+        ctx,
         k,
         res,
         meta,
@@ -966,37 +778,33 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
         /* Type.EXPLICIT */
       );
       if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr: tmp
-        });
+        validateTablePeek(ctx, p, tmp);
+        skipping = true;
+      } else {
+        m = p[2];
+        tbl = p[1];
       }
-      m = p[2];
-      tbl = p[1];
     } else {
       tmp = ctx.p;
       let k = parseKey(ctx);
       let p = peekTable(
+        ctx,
         k,
         tbl,
         m,
         0
         /* Type.DOTTED */
       );
-      if (!p) {
-        throw new TomlError("trying to redefine an already defined table or value", {
-          toml,
-          ptr: tmp
-        });
-      }
-      p[1][p[0]] = extractValue(ctx, void 0, integersAsBigInt);
+      if (!p && !skipping)
+        validateTablePeek(ctx, p, tmp);
+      skipVoid(ctx, true, true);
+      let v = extractValue(ctx, void 0);
+      if (p && !skipping)
+        p[1][p[0]] = v;
     }
     skipVoid(ctx, true);
-    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && tmp !== 13) {
-      throw new TomlError("each key-value declaration must be followed by an end-of-line", {
-        toml,
-        ptr: ctx.p
-      });
+    if (ctx.p < toml.length && (tmp = toml.charCodeAt(ctx.p)) !== 10 && (tmp !== 13 || toml.charCodeAt(ctx.p + 1) !== 10)) {
+      TomlError.x("each key-value declaration must be followed by an end-of-line", ctx);
     }
     skipVoid(ctx);
   }
@@ -1006,16 +814,27 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
 // node_modules/smol-toml/dist/stringify.js
 init_define_import_meta_env();
 var BARE_KEY = /^[a-z0-9-_]+$/i;
+var HAS_WELLFORMED = !!"".isWellFormed;
 function extendedTypeOf(obj) {
   let type = typeof obj;
   if (type === "object") {
     if (Array.isArray(obj))
       return "array";
-    if (typeof obj?.getUTCDate === "function" && obj instanceof Date)
+    if (typeof obj.getUTCDate === "function" && obj instanceof Date)
       return "date";
-    if (globalThis.Temporal && // check for the 'since' property as an early bailout that avoids running all 5 instanceof checks
-    typeof obj?.since === "function" && (obj instanceof Temporal.Instant || obj instanceof Temporal.PlainDate || obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainTime || obj instanceof Temporal.ZonedDateTime)) {
-      return "temporal";
+    if (globalThis.Temporal) {
+      if (obj.until) {
+        if (obj instanceof Temporal.ZonedDateTime)
+          return "temporal/tz+uc";
+        if (obj instanceof Temporal.PlainDateTime || obj instanceof Temporal.PlainDate)
+          return "temporal/uc";
+        if (obj instanceof Temporal.PlainTime || obj instanceof Temporal.Instant)
+          return "temporal";
+        if (obj instanceof Temporal.PlainYearMonth)
+          return "temporal/x";
+      } else if (obj.toPlainDate && obj instanceof Temporal.PlainMonthDay || obj.negated && obj instanceof Temporal.Duration) {
+        return "temporal/x";
+      }
     }
   }
   return type;
@@ -1027,16 +846,20 @@ function isArrayOfTables(obj) {
   }
   return obj.length != 0;
 }
+function formatWellFormedStringUnchecked(s) {
+  return JSON.stringify(s).replaceAll("\x7F", "\\u007f");
+}
 function formatString(s) {
-  return JSON.stringify(s).replace(/\x7f/g, "\\u007f");
+  return formatWellFormedStringUnchecked(HAS_WELLFORMED ? s.toWellFormed() : s);
 }
-function stringifyTemporal(temporal) {
-  return temporal.toString({
-    calendarName: "never",
-    timeZoneName: "never"
-  });
+function formatKey(s) {
+  if (BARE_KEY.test(s))
+    return s;
+  if (HAS_WELLFORMED && !s.isWellFormed())
+    throw new RangeError("key contains illegal lone surrogates");
+  return formatWellFormedStringUnchecked(s);
 }
-function stringifyValue(val, type, depth, numberAsFloat) {
+function stringifyValue(val, type, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1053,6 +876,7 @@ function stringifyValue(val, type, depth, numberAsFloat) {
         return val.toFixed(1);
     case "bigint":
     case "boolean":
+    case "temporal":
       return val.toString();
     case "string":
       return formatString(val);
@@ -1061,14 +885,37 @@ function stringifyValue(val, type, depth, numberAsFloat) {
         throw new TypeError("cannot serialize invalid date");
       return val.toISOString();
     case "object":
-      return stringifyInlineTable(val, depth, numberAsFloat);
+      return stringifyInlineTable(val, depth, numberAsFloat, strictTemporal);
     case "array":
-      return stringifyArray(val, depth, numberAsFloat);
-    case "temporal":
-      return stringifyTemporal(val);
+      return stringifyArray(val, depth, numberAsFloat, strictTemporal);
+    // @ts-expect-error -- intentional fallthrough case
+    case "temporal/tz+uc":
+      if (strictTemporal) {
+        let tz = val.timeZoneId;
+        let tzc = tz.charCodeAt(0);
+        if (
+          // Classic offset
+          tzc !== 43 && tzc !== 45 && // Fast pre-check pass; see below for the actually accepted values
+          (tzc !== 85 && tzc !== 71 && tzc !== 90 && tzc !== 69 || // UTC and its aliases; Temporal implementations don't all canonicalise unfortunately
+          tz !== "UTC" && tz !== "UCT" && tz !== "Universal" && tz !== "Zulu" && // GMT is a TZ but it's for all intents and purposes equivalent to UTC. Safe to downgrade.
+          !tz.startsWith("GMT") && tz !== "Greenwich" && // Etc/* are all safe to downgrade to offset (either UTC, GMT, or offset)
+          !tz.startsWith("Etc/"))
+        ) {
+          throw new TypeError("Temporal objects with an IANA timezone are not allowed in Temporal strict mode");
+        }
+      }
+    case "temporal/uc":
+      if (strictTemporal && val.calendarId !== "iso8601")
+        throw new TypeError("Temporal objects with a non-default calendar are not allowed in Temporal strict mode");
+      return val.toString({
+        calendarName: "never",
+        timeZoneName: "never"
+      });
+    case "temporal/x":
+      throw new TypeError("Unsupported " + val[Symbol.toStringTag]);
   }
 }
-function stringifyInlineTable(obj, depth, numberAsFloat) {
+function stringifyInlineTable(obj, depth, numberAsFloat, strictTemporal) {
   let keys = Object.keys(obj);
   if (keys.length === 0)
     return "{}";
@@ -1077,13 +924,11 @@ function stringifyInlineTable(obj, depth, numberAsFloat) {
     let k = keys[i];
     if (i)
       res += ", ";
-    res += BARE_KEY.test(k) ? k : formatString(k);
-    res += " = ";
-    res += stringifyValue(obj[k], extendedTypeOf(obj[k]), depth - 1, numberAsFloat);
+    res += formatKey(k) + " = " + stringifyValue(obj[k], extendedTypeOf(obj[k]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " }";
 }
-function stringifyArray(array, depth, numberAsFloat) {
+function stringifyArray(array, depth, numberAsFloat, strictTemporal) {
   if (array.length === 0)
     return "[]";
   let res = "[ ";
@@ -1093,11 +938,11 @@ function stringifyArray(array, depth, numberAsFloat) {
     if (array[i] === null || array[i] === void 0) {
       throw new TypeError("arrays cannot contain null or undefined values");
     }
-    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat);
+    res += stringifyValue(array[i], extendedTypeOf(array[i]), depth - 1, numberAsFloat, strictTemporal);
   }
   return res + " ]";
 }
-function stringifyArrayTable(array, key, depth, numberAsFloat) {
+function stringifyArrayTable(array, key, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1105,11 +950,11 @@ function stringifyArrayTable(array, key, depth, numberAsFloat) {
   for (let i = 0; i < array.length; i++) {
     res += `${res && "\n"}[[${key}]]
 `;
-    res += stringifyTable(0, array[i], key, depth, numberAsFloat);
+    res += stringifyTable(0, array[i], key, depth, numberAsFloat, strictTemporal);
   }
   return res;
 }
-function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
+function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat, strictTemporal) {
   if (depth === 0) {
     throw new Error("Could not stringify the object: maximum object depth exceeded");
   }
@@ -1123,16 +968,16 @@ function stringifyTable(tableKey, obj, prefix, depth, numberAsFloat) {
       if (type === "symbol" || type === "function") {
         throw new TypeError(`cannot serialize values of type '${type}'`);
       }
-      let key = BARE_KEY.test(k) ? k : formatString(k);
+      let key = formatKey(k);
       if (type === "array" && isArrayOfTables(obj[k])) {
-        tables += (tables && "\n") + stringifyArrayTable(obj[k], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat);
+        tables += (tables && "\n") + stringifyArrayTable(obj[k], prefix ? `${prefix}.${key}` : key, depth - 1, numberAsFloat, strictTemporal);
       } else if (type === "object") {
         let tblKey = prefix ? `${prefix}.${key}` : key;
-        tables += (tables && "\n") + stringifyTable(tblKey, obj[k], tblKey, depth - 1, numberAsFloat);
+        tables += (tables && "\n") + stringifyTable(tblKey, obj[k], tblKey, depth - 1, numberAsFloat, strictTemporal);
       } else {
         preamble += key;
         preamble += " = ";
-        preamble += stringifyValue(obj[k], type, depth, numberAsFloat);
+        preamble += stringifyValue(obj[k], type, depth, numberAsFloat, strictTemporal);
         preamble += "\n";
       }
     }
@@ -1143,11 +988,11 @@ ${preamble}` : `[${tableKey}]`;
   return preamble && tables ? `${preamble}
 ${tables}` : preamble || tables;
 }
-function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
+function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false, strictTemporal = false } = {}) {
   if (extendedTypeOf(obj) !== "object") {
     throw new TypeError("stringify can only be called with an object");
   }
-  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat);
+  let str = stringifyTable(0, obj, "", maxDepth, numbersAsFloat, strictTemporal);
   if (str[str.length - 1] !== "\n")
     return str + "\n";
   return str;
@@ -1174,12 +1019,16 @@ var PROJECT_LOCKED_KEYS = [
   "hints.outline_large_documents",
   // Same reasoning one file type over: a repository must not be able to decide, from its own checked-in config, how much of its source a reviewing agent is shown -- neither by turning the skeleton off to bury a declaration in a wall of bodies, nor by leaving it on to withhold the bodies themselves. The user's global config and TOKEN_GOAT_SKELETON_LARGE_SOURCES still set it freely.
   "hints.skeleton_large_sources",
+  // The symbol-aware first-read advice and its size: a repository must not be able to turn off, or turn into a refusal, what an agent is told when it first opens one of the repository's own large files.
+  "hints.first_read_symbol_bytes",
+  "hints.first_read_symbol_policy",
   // The widest blast radius of anything on this list. The fold keys above decide how much of a file an agent is shown; this decides how much of the whole session survives compaction. A checked-in `.token-goat.toml` setting it to a handful of characters would ask the summarizer to discard the session's accumulated state at every compaction boundary, and the loss is silent -- what comes back is a well-formed short summary, not an error. The user's own global config still sets it freely; only the project-supplied layer is refused.
   "compact_assist.summary_budget_chars",
   "image_shrink.max_image_pixels",
   // The same principle as the four fold keys above, applied one layer earlier and with a wider blast radius: those decide how much of an indexed file is shown, these decide whether it is indexed at all. A checked-in `.token-goat.toml` adding its own attack surface to `skip_dirs` -- or dropping `large_file_skip_kb` to a handful of kilobytes -- removes those files from `symbol`, `read`, `refs`, `semantic` and `graph` for a reviewing agent, and every one of them then answers "not found" in the same words it uses for a name that genuinely does not exist. There is no notice to read, because from the index's point of view nothing was hidden. The user's own global config still sets all three freely; only the project-supplied layer is refused.
   "indexing.skip_dirs",
   "indexing.skip_files",
+  "indexing.skip_minified",
   "indexing.large_file_skip_kb",
   "indexing.large_file_symbol_only_kb",
   // Same reasoning as the two thresholds above, on the chunk axis: a checked-in `.token-goat.toml` dropping this to 1 would take every file in the repository out of `semantic` for a reviewing agent, and `semantic` would answer "no matches" in the words it uses for a genuine absence.
@@ -1187,10 +1036,14 @@ var PROJECT_LOCKED_KEYS = [
   "indexing.cross_project_symbols",
   // The same blast radius as the indexing keys above, applied to retrieval rather than to what gets indexed: `semantic` drops a dense hit whose distance exceeds this, so a checked-in `.token-goat.toml` setting it near the floor removes this repository's own code from the vector half of every search a reviewing agent runs, and the command then answers "no matches" in the words it uses for a name that genuinely is not there. The keyword pass would still answer, which makes it worse rather than better -- the result looks like a working search. The user's own global config still sets it freely; only the project-supplied layer is refused.
   "semantic.max_distance",
+  // The advisory twin of the floor above: a checked-in `.token-goat.toml` raising it to the 1.2 maximum would make every poor hit read as confident, silencing the one warning that says a result is probably unrelated. The user's own global config still sets it freely.
+  "semantic.weak_distance",
   "worker.blocked_roots",
   // global.db is a machine-wide shared database across every project on the host. A checked-in per-project .token-goat.toml must not be able to lower the size warning threshold or trigger auto-reclaim/purging of embeddings across other repositories sharing the same database.
   "indexing.max_db_size_mb",
-  "indexing.auto_reclaim_embeddings"
+  "indexing.auto_reclaim_embeddings",
+  // Which executable every harness runs on every tool call. `install` writes that choice into user-scope harness configs that every project on the machine then runs, so a checked-in `.token-goat.toml` must not be the layer that makes it. The user's global config and TOKEN_GOAT_NATIVE_HOOKS still set it freely.
+  "hooks.native"
 ];
 var _lastProjectConfigLockedKeys = [];
 function lastProjectConfigLockedKeys() {
@@ -1250,7 +1103,7 @@ function flattenRawValues(raw) {
   return out;
 }
 function readConfigSource(p) {
-  return decodeSource(fs3.readFileSync(p));
+  return decodeSource(fs.readFileSync(p));
 }
 function readConfigToml(p) {
   try {
@@ -1286,7 +1139,28 @@ function mergeRawConfig(base, override) {
   return merged;
 }
 var _projectRootCache = null;
+var _projectRootOverride = null;
+function withConfigProjectRoot(root, fn) {
+  const prior = _projectRootOverride;
+  _projectRootOverride = root;
+  try {
+    return fn();
+  } finally {
+    _projectRootOverride = prior;
+  }
+}
+function configProjectRootFor(dir) {
+  const own = findProject(dir);
+  let project = own;
+  while (project !== null) {
+    if (fs.existsSync(projectConfigPath(project.root))) return project.root;
+    const parent = path.dirname(project.root);
+    project = parent === project.root ? null : findProject(parent);
+  }
+  return own?.root ?? dir;
+}
 function resolveConfigProjectRoot() {
+  if (_projectRootOverride !== null) return _projectRootOverride;
   const cwd = process.cwd();
   if (_projectRootCache !== null && _projectRootCache.cwd === cwd) return _projectRootCache.root;
   const project = findProject(cwd);
@@ -1300,7 +1174,7 @@ registerReset(() => {
 function getProjectConfigInfo(projectRoot) {
   const root = projectRoot ?? resolveConfigProjectRoot();
   const p = projectConfigPath(root);
-  if (!fs3.existsSync(p)) return null;
+  if (!fs.existsSync(p)) return null;
   const { raw, parseError } = readConfigToml(p);
   if (parseError !== null) return { path: p, keys: [], values: {}, parseError };
   return { path: p, keys: flattenRawKeys(raw), values: flattenRawValues(raw), parseError };
@@ -1329,6 +1203,43 @@ function isAutoTriggerMultiplierExplicit() {
 init_define_import_meta_env();
 import * as path2 from "node:path";
 
+// src/ocr_languages.ts
+init_define_import_meta_env();
+var DEFAULT_OCR_LANG = "eng";
+var SUPPORTED_OCR_LANG_CODES = [
+  "eng",
+  "fra",
+  "spa",
+  "deu",
+  "ita",
+  "por",
+  "nld",
+  "pol",
+  "rus",
+  "tur",
+  "swe",
+  "ara",
+  "chi_sim",
+  "chi_tra",
+  "jpn",
+  "kor"
+];
+var SUPPORTED_SET = new Set(SUPPORTED_OCR_LANG_CODES);
+function isSupportedOcrLang(lang) {
+  return SUPPORTED_SET.has(lang);
+}
+function resolveOcrLangs(input) {
+  const result = [DEFAULT_OCR_LANG];
+  if (!input) return result;
+  const tokens = input.split(/[+,;\s]+/).map((s) => s.trim().toLowerCase());
+  for (const token of tokens) {
+    if (token && isSupportedOcrLang(token) && !result.includes(token)) {
+      result.push(token);
+    }
+  }
+  return result;
+}
+
 // src/own_lookup.ts
 init_define_import_meta_env();
 function ownGet(map, key) {
@@ -1341,6 +1252,7 @@ init_define_import_meta_env();
 
 // src/config_defaults.ts
 init_define_import_meta_env();
+var RETIRED_CONFIG_KEYS = /* @__PURE__ */ new Set(["stats.record_zero_savings", "image_shrink.ocr_enabled"]);
 var CONFIG_DEFAULTS = {
   compact_assist: {
     enabled: true,
@@ -1355,11 +1267,12 @@ var CONFIG_DEFAULTS = {
     max_lines: 1e3,
     max_bytes: 64 * 1024,
     timeout_seconds: 600,
-    // Matches the hardcoded MIN_CACHE_BYTES floor hooks_bash.ts used before this knob was wired to a real consumer, so untouched-config installs see no behavior change now that hooks_bash.ts reads this value instead.
+    // Matches the hardcoded MIN_CACHE_BYTES floor hooks_bash.ts used before this knob was wired to a real consumer, so untouched-config installs see no behavior change now that hooks_bash_post.ts reads this value instead.
     cache_min_bytes: 512,
     cache_max_file_count: 4096,
     cache_max_bytes: 16 * 1024 * 1024,
-    cache_max_bytes_per_output: 50 * 1024 * 1024,
+    // A quarter of cache_max_bytes: the loader caps the per-output value at the total, so a larger default (it was 50 MiB against a 16 MiB total) was never in effect.
+    cache_max_bytes_per_output: 4 * 1024 * 1024,
     // Measured against the filter test-fixture corpus (424 apply() calls, 298 with bytesSaved > 0): net-of-marker savings (bytesSaved - ~70-79B marker cost) is <= 0 for 130/298 (44%) of "compressed" results and <= 100 for 170/298 (57%), while the real-win half sits at p75=393B / p90=952B net. 100 kills the marker-doesn't-even-pay-for-itself tier without touching genuine wins.
     min_net_savings_bytes: 100,
     // Extends the per-file already-served elision (which only reaches cat/head/tail/sed/awk-shaped reads) to every other Bash command's output -- npm test, git, rg, build runs -- matched against a session-wide served-output list instead of a per-file one. On by default: it goes through the same isRewriteWorthwhile net-benefit gate as every other rewrite here, so it never ships a notice that costs more than the lines it withholds.
@@ -1403,7 +1316,6 @@ var CONFIG_DEFAULTS = {
     // 16,000,000 used to reject a routine 24MP DSLR/phone photo outright -- the exact input this feature exists to shrink -- while the engine's own decode ceiling (MAX_DECODED_BYTES in image_engine.ts, 256MB at 4 bytes/pixel for a single frame) sits at 67,108,864px. 64,000,000 covers cameras well past 24MP (including 48MP phone sensors) with ~4.9% margin below that hard ceiling, which assertDecodableSize enforces independently of this value on every decode regardless of what this header check allows through. Measured on this engine (2026-09-17): a 24MP PNG decodes+shrinks in ~370ms, 60,000,516px in ~920ms, and 67,108,864px (the ceiling itself) in ~760ms -- all comfortably fast, so the new value is chosen for coverage headroom under the ceiling, not for decode-time cost. Decode time is not the cost that binds, though: memory is. This value is read off a header before anything is decoded, so what it really sets is how large a buffer a file's own declared dimensions may talk this hook into allocating -- at 4 bytes per pixel, raising it from 16,000,000 raised that peak from ~64MB to ~256MB, which is why it now sits flush against MAX_DECODED_BYTES rather than comfortably below it. And on the JPEG path there is no assertDecodableSize call at all: decodeJpeg hands the buffer to jpeg-js, so a JPEG decode is bounded by whatever maxResolutionInMP/maxMemoryUsageInMB that call passes -- a bound this codebase states only because decodeJpeg passes both explicitly rather than inheriting jpeg-js's own 100MP default, which is looser than the 67.1MP MAX_DECODED_BYTES allows.
     max_image_pixels: 64e6,
     screenshot_redirect: true,
-    ocr_enabled: true,
     // Confidence is Tesseract's own 0-100 mean-word-confidence score. 65 is a deliberately conservative floor: a real screenshot of terminal/code/prose text routinely scores 85+, while a photo with an incidental sign or logo in frame scores much lower and noisier -- padding the threshold below the terminal/code norm still comfortably excludes photographic false positives without needing a second heuristic.
     ocr_min_confidence: 65,
     ocr_lang: DEFAULT_OCR_LANG,
@@ -1422,9 +1334,6 @@ var CONFIG_DEFAULTS = {
     enabled: true,
     max_tokens: 25e3
   },
-  stats: {
-    record_zero_savings: false
-  },
   hints: {
     quiet_hours: "",
     json_sidecar: false,
@@ -1440,14 +1349,26 @@ var CONFIG_DEFAULTS = {
     serve_diff_on_reread: true,
     elide_served_lines: true,
     subagent_markdown_first_read_deny: false,
+    agent_scoped_spawn_deny: false,
     backoff_thresholds: [1, 3, 10, 30],
     git_hint_max_ms: 50,
     min_session_hint_savings_bytes: 512,
     pre_skill_advisory: true,
+    stop_verification_advisory: true,
+    agent_receipt: true,
     context_threshold_advisory: true,
     diff_hint_min_tokens_saved: 1e3,
     // Base for the pressure-scaled first-read deny gate in hooks_read.ts (large file, never read before). Matches that gate's long-tuned 500KB threshold at 'cool' context pressure; warm/hot/ critical scale it down from there so the same read gets redirected to a surgical read sooner once the context window is nearly full.
     large_read_redirect_bytes: 512e3,
+    // Smallest whole-file first read of an indexed file that draws the symbol-aware advice; 0 turns the check off.
+    first_read_symbol_bytes: 5e4,
+    // Advice, not refusal: `warn` notes the file's size and symbols, `deny` refuses the whole-file read, `off` says nothing.
+    first_read_symbol_policy: "warn",
+    // A refusal that costs one retry, against a file overwritten with a placeholder that costs a re-read, a re-write and a debugging loop.
+    write_blind_drop: "deny",
+    // A hint costs one sentence, against a whole file sent again as output and a second copy of every symbol in the index.
+    write_sibling_copy: true,
+    write_sibling_copy_allow: [],
     reread_deny: true,
     // Matches hooks_read.ts's previously-hardcoded REREAD_DENY_BYTES (50 * 1024) so wiring this key up as the real gate for that logic does not silently change default behavior for existing users -- see the reread_deny/reread_deny_min_bytes fix's commit message.
     reread_deny_min_bytes: 51200,
@@ -1465,6 +1386,8 @@ var CONFIG_DEFAULTS = {
     truncated_read_min_lines: 200,
     protect_recent_reads: 4,
     warn_unbalanced_shell_quoting: true,
+    // On. Claude Code's Bash tool on Windows hands the command to Git Bash as a `-c` argument, and the argv quoting plus the MSYS2 runtime's decoding turn every run of two or more backslashes into half as many, so `printf 'a\\nb'` or a `C:\\Users` path arrives changed and nothing says so. Only that pairing is denied: another platform, another harness, or a command without a doubled backslash passes untouched.
+    deny_bash_double_backslash: true,
     prompt_triggers: [],
     log_large_file_hint_outcomes: false,
     cross_session_read_dedup: false,
@@ -1474,7 +1397,8 @@ var CONFIG_DEFAULTS = {
   },
   hooks: {
     latency_budget_ms: 1500,
-    server: true
+    server: true,
+    native: "auto"
   },
   webfetch: {
     allow: [],
@@ -1498,6 +1422,7 @@ var CONFIG_DEFAULTS = {
     max_chunks_per_file: 600,
     skip_dirs: [],
     skip_files: ["coverage.json", "coverage-final.json"],
+    skip_minified: true,
     embeddings_enabled: true,
     cross_project_symbols: true,
     max_db_size_mb: 1500,
@@ -1535,7 +1460,9 @@ var CONFIG_DEFAULTS = {
     archive_weight: 0.7,
     docs_weight: 0.92,
     // Deliberately loose enough to admit everything this metric produces, which is a measured conclusion rather than a placeholder. Against a large index, 12 genuine questions about code that is present had best hits from 0.635 to 0.813 and 11 off-corpus ones (nonsense strings, digits, a cake recipe) from 0.820 to 1.017, which looks separable at about 0.9. It is not: on a small corpus the nearest genuine match is much further away, and a two-file project in this repo's own suite matches its target at 0.934 -- above that cut and inside the noise band. So the two populations overlap across corpus sizes and no fixed distance tells them apart, while getting it wrong removes real answers and says nothing. Left at the retrieval bound's value so the default filters nothing; it exists to be lowered per-project by someone who has measured their own corpus, and runSemantic says which distance it refused when a lowered value empties the vector half.
-    max_distance: 1.2
+    max_distance: 1.2,
+    // Best surviving dense distance above which runSemantic says its closest match is weak. Measured on this repo's index on 2026-09-24: 38 questions about code that is present had best hits from 0.565 to 0.800, and 12 nonsense or off-topic ones from 0.863 to 1.043 (8 questions from other programming domains spread over 0.718-0.952, the low ones landing on code that is genuinely related, so those are not separable by distance), so the cut sits in that gap nearer the noise edge, because a small corpus pushes genuine matches farther out (0.934 in a two-file project, see semantic.max_distance) and a false alarm on a right answer costs more than a missed one. Advisory only: it removes nothing, unlike that floor.
+    weak_distance: 0.85
   }
 };
 function getDefaultConfig(section2) {
@@ -1555,7 +1482,6 @@ function defaultConfig() {
     screenshot: getDefaultConfig("screenshot"),
     repomap: getDefaultConfig("repomap"),
     overflow_guard: getDefaultConfig("overflow_guard"),
-    stats: getDefaultConfig("stats"),
     hints: getDefaultConfig("hints"),
     hooks: getDefaultConfig("hooks"),
     webfetch: getDefaultConfig("webfetch"),
@@ -1591,6 +1517,24 @@ function validatedFloat(raw, def, min, max) {
 function validatedVisionTier(raw, def) {
   return raw === "standard" || raw === "high" ? raw : def;
 }
+function validatedEnum(key, raw, def) {
+  return typeof raw === "string" && (ENUM_FIELD_VALUES[key] ?? []).includes(raw) ? raw : def;
+}
+function envEnum(key, name, def) {
+  return validatedEnum(key, process.env[name], def);
+}
+function validatedNativeHooksMode(raw, def) {
+  return raw === "auto" || raw === "off" ? raw : def;
+}
+function nativeHooksModeFromEnv(raw) {
+  const norm = raw?.trim().toLowerCase() ?? "";
+  if (TRUTHY_ENV_VALUES.has(norm)) return "auto";
+  if (FALSY_ENV_VALUES.has(norm)) return "off";
+  return void 0;
+}
+var ENV_VALUE_COERCERS = {
+  "hooks.native": nativeHooksModeFromEnv
+};
 function validatedOcrLang(raw, def) {
   if (typeof raw !== "string") return def;
   const tokens = raw.split(/[+,;\s]+/).map((s) => s.trim().toLowerCase()).filter(Boolean);
@@ -1655,6 +1599,7 @@ var NUMERIC_FIELD_BOUNDS = {
   "hints.min_session_hint_savings_bytes": { min: 0, max: 1e6 },
   "hints.diff_hint_min_tokens_saved": { min: 0, max: 1e5 },
   "hints.large_read_redirect_bytes": { min: 0, max: 1e8 },
+  "hints.first_read_symbol_bytes": { min: 0, max: 1e8 },
   "hints.reread_deny_min_bytes": { min: 0, max: 1e8 },
   "hints.truncated_read_min_lines": { min: 0, max: 1e6 },
   "hints.protect_recent_reads": { min: 0, max: 100 },
@@ -1677,11 +1622,13 @@ var NUMERIC_FIELD_BOUNDS = {
   "semantic.archive_weight": { min: 0.05, max: 1 },
   "semantic.docs_weight": { min: 0.05, max: 1 },
   // Upper bound is DEFAULT_DISTANCE_THRESHOLD, not the metric's own ceiling of 2. An L2 distance between unit vectors cannot exceed 2, so 2 reads like 'admit everything' -- but this floor only ever narrows what searchSemantic already returned, and runSemantic lets that scan keep its own 1.2 bound (see the max_distance comment on SemanticConfig for why the scan is the wrong place for a relevance decision). Anything between 1.2 and 2 was therefore discarded inside the scan before the floor could see it: a user raising this to widen recall got the setting accepted, validated and persisted, and identical results, with no diagnostic able to say why. validatedFloat clamps rather than rejects, so an existing value above the new bound becomes 1.2 and behaves exactly as it already did. The lower bound is not 0: a floor of 0 admits only an exact vector match, which would disable the vector half entirely while `semantic` went on answering in the words it uses for a genuine absence.
-  "semantic.max_distance": { min: 0.05, max: 1.2 }
+  "semantic.max_distance": { min: 0.05, max: 1.2 },
+  // Same range as max_distance: both are L2 distances on the scan's own 1.2 ceiling, and a weak line above what the scan can return would never fire.
+  "semantic.weak_distance": { min: 0.05, max: 1.2 }
 };
 function boundsOf(key) {
   const b = ownGet(NUMERIC_FIELD_BOUNDS, key);
-  if (!b) throw new Error(`token-goat: no NUMERIC_FIELD_BOUNDS entry for '${key}'`);
+  if (!b) throw new Error(`token-goat: no NUMERIC_FIELD_BOUNDS entry for ${echoedValue(key)}`);
   return [b.min, b.max];
 }
 function walkGetNumeric(obj, parts) {
@@ -1710,7 +1657,10 @@ var ENUM_FIELD_VALUES = {
   "compact_assist.harness": ["auto", ...KNOWN_HARNESS_NAMES],
   "image_shrink.ocr_lang": [...SUPPORTED_OCR_LANG_CODES],
   // Deliberately has no entry above `normal`. This table is what `config set` checks; a hand-edited TOML bypasses it, which is why resolveWorkerPriority (process_priority.ts) maps an unrecognized value back to the default rather than trusting whatever the file said.
-  "worker.priority": ["below_normal", "low", "normal"]
+  "worker.priority": ["below_normal", "low", "normal"],
+  "hooks.native": ["auto", "off"],
+  "hints.first_read_symbol_policy": ["warn", "deny", "off"],
+  "hints.write_blind_drop": ["deny", "warn", "off"]
 };
 function validateEnumField(fieldKey, value) {
   if (fieldKey === "image_shrink.ocr_lang") {
@@ -1722,7 +1672,7 @@ function validateEnumField(fieldKey, value) {
   if (!allowed) return void 0;
   return allowed.includes(value) ? void 0 : allowed;
 }
-var ENV_KEYS2 = [
+var ENV_KEYS = [
   "TOKEN_GOAT_COMPACT_ASSIST",
   "TOKENWISE_COMPACT_ASSIST",
   "TOKEN_GOAT_BASH_COMPRESS",
@@ -1755,6 +1705,7 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_PRE_SKILL",
   "TOKEN_GOAT_ORPHAN_SWEEP",
   "TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING",
+  "TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH",
   "TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES",
   "TOKEN_GOAT_CROSS_SESSION_READ_DEDUP",
   "TOKEN_GOAT_CROSS_SESSION_READ_DEDUP_TTL_SECS",
@@ -1771,7 +1722,7 @@ var ENV_KEYS2 = [
   "TOKEN_GOAT_INDEXING_AUTO_RECLAIM_EMBEDDINGS"
 ];
 function allEnvKeys() {
-  return [.../* @__PURE__ */ new Set([...ENV_KEYS2, ...Object.values(CONFIG_KEY_ENV_OVERRIDES).flat()])];
+  return [.../* @__PURE__ */ new Set([...ENV_KEYS, ...Object.values(CONFIG_KEY_ENV_OVERRIDES).flat()])];
 }
 function configEnvFingerprint() {
   const snap = {};
@@ -1780,7 +1731,7 @@ function configEnvFingerprint() {
   }
   return JSON.stringify(snap);
 }
-var _cached2 = null;
+var _cached = null;
 function deepFreeze(value) {
   if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
     Object.freeze(value);
@@ -1854,7 +1805,9 @@ function resolveConfigKeyLayer(key, effectiveValue, cfg, projectInfo) {
   const envVar = (CONFIG_KEY_ENV_OVERRIDES[key] ?? []).find((name) => process.env[name] !== void 0);
   if (envVar !== void 0) {
     const rawStr = process.env[envVar] ?? "";
-    const judged = coerceEnvLike(rawStr, effectiveValue);
+    const coerce = ownGet(ENV_VALUE_COERCERS, key);
+    const special = coerce === void 0 ? void 0 : coerce(rawStr);
+    const judged = coerce === void 0 ? coerceEnvLike(rawStr, effectiveValue) : special === void 0 ? "unusable" : { parsed: special };
     if (judged === null) return { layer: "env", envVar };
     if (judged === "unusable") {
       return { layer: "env-invalid", envVar, rawValue: rawStr, effectiveValue, reason: rawStr.trim() === "" ? "empty" : rejectionReason(key, rawStr, effectiveValue, cfg) };
@@ -1866,9 +1819,22 @@ function resolveConfigKeyLayer(key, effectiveValue, cfg, projectInfo) {
   if (projectInfo.parseError !== null) return { layer: "project-unparsed", path: projectInfo.path, parseError: projectInfo.parseError };
   if (!Object.prototype.hasOwnProperty.call(projectInfo.values, key)) return { layer: "global" };
   const rawValue = projectInfo.values[key];
+  if (PROJECT_LOCKED_SECTIONS.includes(key.split(".")[0] ?? "") || PROJECT_LOCKED_KEYS.includes(key)) {
+    if (rawValueEquals(rawValue, effectiveValue)) return { layer: "global" };
+    return { layer: "project-invalid", path: projectInfo.path, rawValue, effectiveValue, reason: "a security setting, which only the global config or the environment may set" };
+  }
   if (rawValueEquals(rawValue, effectiveValue)) return { layer: "project", path: projectInfo.path };
   return { layer: "project-invalid", path: projectInfo.path, rawValue, effectiveValue, reason: rejectionReason(key, rawValue, effectiveValue, cfg) };
 }
+function globalValueRejection(key, rawValue, persistedCfg) {
+  let eff = persistedCfg;
+  for (const part of key.split(".")) {
+    if (eff === null || typeof eff !== "object" || !Object.prototype.hasOwnProperty.call(eff, part)) return null;
+    eff = eff[part];
+  }
+  if (rawValueEquals(rawValue, eff)) return null;
+  return rejectionReason(key, rawValue, eff, persistedCfg);
+}
 function loadConfig(projectRoot) {
   const p = configPath();
   const root = projectRoot ?? resolveConfigProjectRoot();
@@ -1878,8 +1844,8 @@ function loadConfig(projectRoot) {
   const { text: projText, readError: projReadError } = readConfigText(projPath);
   const projectContentFp = projText !== null ? shortFingerprint(projText) : "";
   const envFp = configEnvFingerprint();
-  if (_cached2 !== null && _cached2.contentFp === contentFp && _cached2.envFp === envFp && _cached2.projectRoot === root && _cached2.projectContentFp === projectContentFp) {
-    return _cached2.config;
+  if (_cached !== null && _cached.contentFp === contentFp && _cached.envFp === envFp && _cached.projectRoot === root && _cached.projectContentFp === projectContentFp) {
+    return _cached.config;
   }
   let raw = {};
   if (text !== null) {
@@ -1904,11 +1870,11 @@ function loadConfig(projectRoot) {
     _lastProjectConfigParseError = projReadError;
   }
   const cfg = deepFreeze(_buildConfig(raw, projectRaw));
-  _cached2 = { config: cfg, contentFp, envFp, projectRoot: root, projectContentFp };
+  _cached = { config: cfg, contentFp, envFp, projectRoot: root, projectContentFp };
   return cfg;
 }
 function invalidateConfigCache() {
-  _cached2 = null;
+  _cached = null;
   resetLastProjectConfigLockedKeys();
 }
 registerReset(invalidateConfigCache);
@@ -1941,6 +1907,9 @@ function loadPersistedConfig() {
 function hookServerEnabled() {
   return envBool("TOKEN_GOAT_HOOK_SERVER", loadPersistedConfig().hooks.server);
 }
+function nativeHooksEnabled() {
+  return (nativeHooksModeFromEnv(process.env["TOKEN_GOAT_NATIVE_HOOKS"]) ?? loadPersistedConfig().hooks.native) !== "off";
+}
 function _buildConfig(raw, projectRaw = {}) {
   const { cleaned: safeProjectRaw, dropped: lockedKeys } = stripLockedProjectKeys(projectRaw);
   setLastProjectConfigLockedKeys(lockedKeys);
@@ -2019,14 +1988,12 @@ function _buildConfig(raw, projectRaw = {}) {
   const is_cfg = getDefaultConfig("image_shrink");
   is_cfg.enabled = validatedBool(is_raw["enabled"], is_cfg.enabled);
   is_cfg.jpeg_quality = validatedInt(is_raw["jpeg_quality"], is_cfg.jpeg_quality, ...boundsOf("image_shrink.jpeg_quality"));
-  is_cfg.max_image_pixels = validatedInt(is_raw["max_image_pixels"], is_cfg.max_image_pixels, ...boundsOf("image_shrink.max_image_pixels"));
+  is_cfg.max_image_pixels = validatedIntWithLegacySentinel(is_raw["max_image_pixels"], is_cfg.max_image_pixels, 16e6, ...boundsOf("image_shrink.max_image_pixels"));
   is_cfg.screenshot_redirect = validatedBool(is_raw["screenshot_redirect"], is_cfg.screenshot_redirect);
-  is_cfg.ocr_enabled = validatedBool(is_raw["ocr_enabled"], is_cfg.ocr_enabled);
   is_cfg.ocr_min_confidence = validatedInt(is_raw["ocr_min_confidence"], is_cfg.ocr_min_confidence, ...boundsOf("image_shrink.ocr_min_confidence"));
   is_cfg.ocr_lang = validatedOcrLang(is_raw["ocr_lang"], is_cfg.ocr_lang);
   is_cfg.vision_tier = validatedVisionTier(is_raw["vision_tier"], is_cfg.vision_tier);
   is_cfg.max_image_pixels = envInt("TOKEN_GOAT_MAX_IMAGE_PIXELS", is_cfg.max_image_pixels, ...boundsOf("image_shrink.max_image_pixels"));
-  is_cfg.ocr_enabled = envBool("TOKEN_GOAT_OCR_ENABLED", is_cfg.ocr_enabled);
   is_cfg.ocr_lang = validatedOcrLang(process.env["TOKEN_GOAT_OCR_LANG"], is_cfg.ocr_lang);
   is_cfg.vision_tier = validatedVisionTier(process.env["TOKEN_GOAT_VISION_TIER"], is_cfg.vision_tier);
   const sc_raw = section(raw, "screenshot");
@@ -2046,9 +2013,6 @@ function _buildConfig(raw, projectRaw = {}) {
   og.max_tokens = validatedInt(og_raw["max_tokens"], og.max_tokens, ...boundsOf("overflow_guard.max_tokens"));
   og.enabled = envBool("TOKEN_GOAT_OVERFLOW_GUARD", og.enabled);
   og.max_tokens = envInt("TOKEN_GOAT_OVERFLOW_MAX_TOKENS", og.max_tokens, ...boundsOf("overflow_guard.max_tokens"));
-  const st_raw = section(raw, "stats");
-  const st = getDefaultConfig("stats");
-  st.record_zero_savings = validatedBool(st_raw["record_zero_savings"], st.record_zero_savings);
   const hi_raw = section(raw, "hints");
   const hi = getDefaultConfig("hints");
   hi.quiet_hours = validatedStr(hi_raw["quiet_hours"], hi.quiet_hours);
@@ -2069,13 +2033,21 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.serve_diff_on_reread = validatedBool(hi_raw["serve_diff_on_reread"], hi.serve_diff_on_reread);
   hi.elide_served_lines = validatedBool(hi_raw["elide_served_lines"], hi.elide_served_lines);
   hi.subagent_markdown_first_read_deny = validatedBool(hi_raw["subagent_markdown_first_read_deny"], hi.subagent_markdown_first_read_deny);
+  hi.agent_scoped_spawn_deny = validatedBool(hi_raw["agent_scoped_spawn_deny"], hi.agent_scoped_spawn_deny);
   hi.backoff_thresholds = validatedIntList(hi_raw["backoff_thresholds"], hi.backoff_thresholds);
   hi.git_hint_max_ms = validatedInt(hi_raw["git_hint_max_ms"], hi.git_hint_max_ms, ...boundsOf("hints.git_hint_max_ms"));
   hi.min_session_hint_savings_bytes = validatedInt(hi_raw["min_session_hint_savings_bytes"], hi.min_session_hint_savings_bytes, ...boundsOf("hints.min_session_hint_savings_bytes"));
   hi.pre_skill_advisory = validatedBool(hi_raw["pre_skill_advisory"], hi.pre_skill_advisory);
+  hi.stop_verification_advisory = validatedBool(hi_raw["stop_verification_advisory"], hi.stop_verification_advisory);
+  hi.agent_receipt = validatedBool(hi_raw["agent_receipt"], hi.agent_receipt);
   hi.context_threshold_advisory = validatedBool(hi_raw["context_threshold_advisory"], hi.context_threshold_advisory);
   hi.diff_hint_min_tokens_saved = validatedInt(hi_raw["diff_hint_min_tokens_saved"], hi.diff_hint_min_tokens_saved, ...boundsOf("hints.diff_hint_min_tokens_saved"));
   hi.large_read_redirect_bytes = validatedIntWithLegacySentinel(hi_raw["large_read_redirect_bytes"], hi.large_read_redirect_bytes, 45e3, ...boundsOf("hints.large_read_redirect_bytes"));
+  hi.first_read_symbol_bytes = validatedInt(hi_raw["first_read_symbol_bytes"], hi.first_read_symbol_bytes, ...boundsOf("hints.first_read_symbol_bytes"));
+  hi.first_read_symbol_policy = validatedEnum("hints.first_read_symbol_policy", hi_raw["first_read_symbol_policy"], hi.first_read_symbol_policy);
+  hi.write_blind_drop = validatedEnum("hints.write_blind_drop", hi_raw["write_blind_drop"], hi.write_blind_drop);
+  hi.write_sibling_copy = validatedBool(hi_raw["write_sibling_copy"], hi.write_sibling_copy);
+  hi.write_sibling_copy_allow = validatedStrList(hi_raw["write_sibling_copy_allow"], hi.write_sibling_copy_allow);
   hi.reread_deny = validatedBool(hi_raw["reread_deny"], hi.reread_deny);
   hi.reread_deny_min_bytes = validatedIntWithLegacySentinel(hi_raw["reread_deny_min_bytes"], hi.reread_deny_min_bytes, 2048, ...boundsOf("hints.reread_deny_min_bytes"));
   hi.stable_doc_compacts = validatedBool(hi_raw["stable_doc_compacts"], hi.stable_doc_compacts);
@@ -2087,11 +2059,14 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.truncated_read_min_lines = validatedInt(hi_raw["truncated_read_min_lines"], hi.truncated_read_min_lines, ...boundsOf("hints.truncated_read_min_lines"));
   hi.protect_recent_reads = validatedInt(hi_raw["protect_recent_reads"], hi.protect_recent_reads, ...boundsOf("hints.protect_recent_reads"));
   hi.warn_unbalanced_shell_quoting = validatedBool(hi_raw["warn_unbalanced_shell_quoting"], hi.warn_unbalanced_shell_quoting);
+  hi.deny_bash_double_backslash = validatedBool(hi_raw["deny_bash_double_backslash"], hi.deny_bash_double_backslash);
   hi.log_large_file_hint_outcomes = validatedBool(hi_raw["log_large_file_hint_outcomes"], hi.log_large_file_hint_outcomes);
   hi.warn_unbalanced_shell_quoting = envBool("TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING", hi.warn_unbalanced_shell_quoting);
+  hi.deny_bash_double_backslash = envBool("TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH", hi.deny_bash_double_backslash);
   hi.serve_diff_on_reread = envBool("TOKEN_GOAT_SERVE_DIFF_ON_REREAD", hi.serve_diff_on_reread);
   hi.elide_served_lines = envBool("TOKEN_GOAT_ELIDE_SERVED_LINES", hi.elide_served_lines);
   hi.subagent_markdown_first_read_deny = envBool("TOKEN_GOAT_SUBAGENT_MARKDOWN_FIRST_READ_DENY", hi.subagent_markdown_first_read_deny);
+  hi.agent_scoped_spawn_deny = envBool("TOKEN_GOAT_AGENT_SCOPED_SPAWN_DENY", hi.agent_scoped_spawn_deny);
   hi.log_large_file_hint_outcomes = envBool("TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES", hi.log_large_file_hint_outcomes);
   hi.json_sidecar = envBool("TOKEN_GOAT_HINT_JSON_SIDECAR", hi.json_sidecar);
   hi.large_read_redirect_bytes = envInt("TOKEN_GOAT_LARGE_READ_BYTES", hi.large_read_redirect_bytes, ...boundsOf("hints.large_read_redirect_bytes"));
@@ -2106,6 +2081,10 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.min_session_hint_savings_bytes = envInt("TOKEN_GOAT_SESSION_HINT_MIN_BYTES", hi.min_session_hint_savings_bytes, ...boundsOf("hints.min_session_hint_savings_bytes"));
   hi.reread_deny = envBool("TOKEN_GOAT_REREAD_DENY", hi.reread_deny);
   hi.reread_deny_min_bytes = envInt("TOKEN_GOAT_REREAD_DENY_MIN_BYTES", hi.reread_deny_min_bytes, ...boundsOf("hints.reread_deny_min_bytes"));
+  hi.first_read_symbol_bytes = envInt("TOKEN_GOAT_FIRST_READ_SYMBOL_BYTES", hi.first_read_symbol_bytes, ...boundsOf("hints.first_read_symbol_bytes"));
+  hi.first_read_symbol_policy = envEnum("hints.first_read_symbol_policy", "TOKEN_GOAT_FIRST_READ_SYMBOL_POLICY", hi.first_read_symbol_policy);
+  hi.write_blind_drop = envEnum("hints.write_blind_drop", "TOKEN_GOAT_WRITE_BLIND_DROP", hi.write_blind_drop);
+  hi.write_sibling_copy = envBool("TOKEN_GOAT_WRITE_SIBLING_COPY", hi.write_sibling_copy);
   hi.protect_recent_reads = envInt("TOKEN_GOAT_PROTECT_RECENT_READS", hi.protect_recent_reads, ...boundsOf("hints.protect_recent_reads"));
   hi.truncated_read_min_lines = envInt("TOKEN_GOAT_TRUNCATED_READ_MIN_LINES", hi.truncated_read_min_lines, ...boundsOf("hints.truncated_read_min_lines"));
   hi.diff_hint_min_tokens_saved = envInt("TOKEN_GOAT_DIFF_HINT_MIN_TOKENS_SAVED", hi.diff_hint_min_tokens_saved, ...boundsOf("hints.diff_hint_min_tokens_saved"));
@@ -2119,6 +2098,8 @@ function _buildConfig(raw, projectRaw = {}) {
   hi.skeleton_large_sources = envBool("TOKEN_GOAT_SKELETON_LARGE_SOURCES", hi.skeleton_large_sources);
   hi.context_threshold_advisory = envBool("TOKEN_GOAT_CONTEXT_THRESHOLD_ADVISORY", hi.context_threshold_advisory);
   hi.pre_skill_advisory = envBool("TOKEN_GOAT_PRE_SKILL_ADVISORY", hi.pre_skill_advisory);
+  hi.stop_verification_advisory = envBool("TOKEN_GOAT_STOP_VERIFICATION_ADVISORY", hi.stop_verification_advisory);
+  hi.agent_receipt = envBool("TOKEN_GOAT_AGENT_RECEIPT", hi.agent_receipt);
   hi.quiet_hours = envStr("TOKEN_GOAT_QUIET_HOURS", hi.quiet_hours);
   const triggers_raw = hi_raw["prompt_triggers"];
   if (Array.isArray(triggers_raw)) {
@@ -2133,6 +2114,8 @@ function _buildConfig(raw, projectRaw = {}) {
   hk.latency_budget_ms = envInt("TOKEN_GOAT_HOOK_LATENCY_BUDGET_MS", hk.latency_budget_ms, ...boundsOf("hooks.latency_budget_ms"));
   hk.server = validatedBool(hk_raw["server"], hk.server);
   hk.server = envBool("TOKEN_GOAT_HOOK_SERVER", hk.server);
+  hk.native = validatedNativeHooksMode(hk_raw["native"], hk.native);
+  hk.native = nativeHooksModeFromEnv(process.env["TOKEN_GOAT_NATIVE_HOOKS"]) ?? hk.native;
   const wf_raw = section(raw, "webfetch");
   const wf = getDefaultConfig("webfetch");
   wf.allow = validatedStrList(wf_raw["allow"], wf.allow);
@@ -2163,6 +2146,7 @@ function _buildConfig(raw, projectRaw = {}) {
   ix.max_chunks_per_file = validatedInt(ix_raw["max_chunks_per_file"], ix.max_chunks_per_file, ...boundsOf("indexing.max_chunks_per_file"));
   ix.skip_dirs = validatedStrList(ix_raw["skip_dirs"], ix.skip_dirs);
   ix.skip_files = validatedStrList(ix_raw["skip_files"], ix.skip_files);
+  ix.skip_minified = validatedBool(ix_raw["skip_minified"], ix.skip_minified);
   ix.embeddings_enabled = validatedBool(ix_raw["embeddings_enabled"], ix.embeddings_enabled);
   ix.embeddings_enabled = envBool("TOKEN_GOAT_EMBEDDINGS_ENABLED", ix.embeddings_enabled);
   ix.cross_project_symbols = validatedBool(ix_raw["cross_project_symbols"], ix.cross_project_symbols);
@@ -2214,6 +2198,7 @@ function _buildConfig(raw, projectRaw = {}) {
   sem.archive_weight = validatedFloat(sem_raw["archive_weight"], sem.archive_weight, ...boundsOf("semantic.archive_weight"));
   sem.docs_weight = validatedFloat(sem_raw["docs_weight"], sem.docs_weight, ...boundsOf("semantic.docs_weight"));
   sem.max_distance = validatedFloat(sem_raw["max_distance"], sem.max_distance, ...boundsOf("semantic.max_distance"));
+  sem.weak_distance = validatedFloat(sem_raw["weak_distance"], sem.weak_distance, ...boundsOf("semantic.weak_distance"));
   return {
     compact_assist: ca,
     bash_compress: bc,
@@ -2227,7 +2212,6 @@ function _buildConfig(raw, projectRaw = {}) {
     screenshot: sc_cfg,
     repomap: rm,
     overflow_guard: og,
-    stats: st,
     hints: hi,
     hooks: hk,
     webfetch: wf,
@@ -2261,7 +2245,6 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "skill_preservation.pre_skill_enabled": ["TOKEN_GOAT_PRE_SKILL"],
   "skill_preservation.orphan_sweep_enabled": ["TOKEN_GOAT_ORPHAN_SWEEP"],
   "image_shrink.max_image_pixels": ["TOKEN_GOAT_MAX_IMAGE_PIXELS"],
-  "image_shrink.ocr_enabled": ["TOKEN_GOAT_OCR_ENABLED"],
   "image_shrink.ocr_lang": ["TOKEN_GOAT_OCR_LANG"],
   "image_shrink.vision_tier": ["TOKEN_GOAT_VISION_TIER"],
   "screenshot.block_private_targets": ["TOKEN_GOAT_SCREENSHOT_BLOCK_PRIVATE_TARGETS"],
@@ -2277,10 +2260,16 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "hints.write_rewrite_min_lines": ["TOKEN_GOAT_WRITE_REWRITE_MIN_LINES"],
   "hints.write_rewrite_unchanged_pct": ["TOKEN_GOAT_WRITE_REWRITE_UNCHANGED_PCT"],
   "hints.large_read_redirect_bytes": ["TOKEN_GOAT_LARGE_READ_BYTES"],
+  "hints.first_read_symbol_bytes": ["TOKEN_GOAT_FIRST_READ_SYMBOL_BYTES"],
+  "hints.first_read_symbol_policy": ["TOKEN_GOAT_FIRST_READ_SYMBOL_POLICY"],
+  "hints.write_blind_drop": ["TOKEN_GOAT_WRITE_BLIND_DROP"],
+  "hints.write_sibling_copy": ["TOKEN_GOAT_WRITE_SIBLING_COPY"],
   "hints.warn_unbalanced_shell_quoting": ["TOKEN_GOAT_WARN_UNBALANCED_SHELL_QUOTING"],
+  "hints.deny_bash_double_backslash": ["TOKEN_GOAT_DENY_BASH_DOUBLE_BACKSLASH"],
   "hints.serve_diff_on_reread": ["TOKEN_GOAT_SERVE_DIFF_ON_REREAD"],
   "hints.elide_served_lines": ["TOKEN_GOAT_ELIDE_SERVED_LINES"],
   "hints.subagent_markdown_first_read_deny": ["TOKEN_GOAT_SUBAGENT_MARKDOWN_FIRST_READ_DENY"],
+  "hints.agent_scoped_spawn_deny": ["TOKEN_GOAT_AGENT_SCOPED_SPAWN_DENY"],
   "hints.log_large_file_hint_outcomes": ["TOKEN_GOAT_LOG_LARGE_FILE_HINT_OUTCOMES"],
   "hints.cross_session_read_dedup": ["TOKEN_GOAT_CROSS_SESSION_READ_DEDUP"],
   "hints.cross_session_read_dedup_ttl_secs": ["TOKEN_GOAT_CROSS_SESSION_READ_DEDUP_TTL_SECS"],
@@ -2302,9 +2291,12 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "hints.skeleton_large_sources": ["TOKEN_GOAT_SKELETON_LARGE_SOURCES"],
   "hints.context_threshold_advisory": ["TOKEN_GOAT_CONTEXT_THRESHOLD_ADVISORY"],
   "hints.pre_skill_advisory": ["TOKEN_GOAT_PRE_SKILL_ADVISORY"],
+  "hints.stop_verification_advisory": ["TOKEN_GOAT_STOP_VERIFICATION_ADVISORY"],
+  "hints.agent_receipt": ["TOKEN_GOAT_AGENT_RECEIPT"],
   "hints.quiet_hours": ["TOKEN_GOAT_QUIET_HOURS"],
   "hooks.latency_budget_ms": ["TOKEN_GOAT_HOOK_LATENCY_BUDGET_MS"],
   "hooks.server": ["TOKEN_GOAT_HOOK_SERVER"],
+  "hooks.native": ["TOKEN_GOAT_NATIVE_HOOKS"],
   "webfetch.max_file_count": ["TOKEN_GOAT_WEB_CACHE_MAX_FILES"],
   "webfetch.max_bytes": ["TOKEN_GOAT_WEB_CACHE_MAX_BYTES"],
   "webfetch.compress_bodies": ["TOKEN_GOAT_WEB_COMPRESS"],
@@ -2328,7 +2320,26 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "indexing.max_db_size_mb": ["TOKEN_GOAT_INDEXING_MAX_DB_SIZE_MB"],
   "indexing.auto_reclaim_embeddings": ["TOKEN_GOAT_INDEXING_AUTO_RECLAIM_EMBEDDINGS"]
 };
-function saveConfig(config) {
+function isPlainObject(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function sparsifyAgainstDefaults(data, defaults, raw, explicit, prefix = "") {
+  const out = {};
+  for (const [k, v] of Object.entries(data)) {
+    const dotted = prefix === "" ? k : `${prefix}.${k}`;
+    const d = defaults[k];
+    const r = raw[k];
+    if (isPlainObject(v) && isPlainObject(d)) {
+      const sub = sparsifyAgainstDefaults(v, d, isPlainObject(r) ? r : {}, explicit, dotted);
+      if (Object.keys(sub).length > 0) out[k] = sub;
+      continue;
+    }
+    const keep = d === void 0 || !rawValueEquals(v, d) || r !== void 0 || explicit.has(dotted);
+    if (keep) out[k] = v;
+  }
+  return out;
+}
+function saveConfig(config, explicitKeys = []) {
   const ca = config.compact_assist;
   const bc = config.bash_compress;
   const sp = config.skill_preservation;
@@ -2393,7 +2404,6 @@ function saveConfig(config) {
       jpeg_quality: is_cfg.jpeg_quality,
       max_image_pixels: is_cfg.max_image_pixels,
       screenshot_redirect: is_cfg.screenshot_redirect,
-      ocr_enabled: is_cfg.ocr_enabled,
       ocr_min_confidence: is_cfg.ocr_min_confidence,
       ocr_lang: is_cfg.ocr_lang,
       vision_tier: is_cfg.vision_tier
@@ -2410,9 +2420,6 @@ function saveConfig(config) {
       enabled: config.overflow_guard.enabled,
       max_tokens: config.overflow_guard.max_tokens
     },
-    stats: {
-      record_zero_savings: config.stats.record_zero_savings
-    },
     hints: {
       quiet_hours: config.hints.quiet_hours,
       json_sidecar: config.hints.json_sidecar,
@@ -2426,13 +2433,21 @@ function saveConfig(config) {
       serve_diff_on_reread: config.hints.serve_diff_on_reread,
       elide_served_lines: config.hints.elide_served_lines,
       subagent_markdown_first_read_deny: config.hints.subagent_markdown_first_read_deny,
+      agent_scoped_spawn_deny: config.hints.agent_scoped_spawn_deny,
       backoff_thresholds: config.hints.backoff_thresholds,
       git_hint_max_ms: config.hints.git_hint_max_ms,
       min_session_hint_savings_bytes: config.hints.min_session_hint_savings_bytes,
       pre_skill_advisory: config.hints.pre_skill_advisory,
+      stop_verification_advisory: config.hints.stop_verification_advisory,
+      agent_receipt: config.hints.agent_receipt,
       context_threshold_advisory: config.hints.context_threshold_advisory,
       diff_hint_min_tokens_saved: config.hints.diff_hint_min_tokens_saved,
       large_read_redirect_bytes: config.hints.large_read_redirect_bytes,
+      first_read_symbol_bytes: config.hints.first_read_symbol_bytes,
+      first_read_symbol_policy: config.hints.first_read_symbol_policy,
+      write_blind_drop: config.hints.write_blind_drop,
+      write_sibling_copy: config.hints.write_sibling_copy,
+      write_sibling_copy_allow: config.hints.write_sibling_copy_allow,
       reread_deny: config.hints.reread_deny,
       reread_deny_min_bytes: config.hints.reread_deny_min_bytes,
       stable_doc_compacts: config.hints.stable_doc_compacts,
@@ -2445,6 +2460,7 @@ function saveConfig(config) {
       protect_recent_reads: config.hints.protect_recent_reads,
       prompt_triggers: config.hints.prompt_triggers,
       warn_unbalanced_shell_quoting: config.hints.warn_unbalanced_shell_quoting,
+      deny_bash_double_backslash: config.hints.deny_bash_double_backslash,
       log_large_file_hint_outcomes: config.hints.log_large_file_hint_outcomes,
       cross_session_read_dedup: config.hints.cross_session_read_dedup,
       cross_session_read_dedup_ttl_secs: config.hints.cross_session_read_dedup_ttl_secs,
@@ -2453,7 +2469,8 @@ function saveConfig(config) {
     },
     hooks: {
       latency_budget_ms: config.hooks.latency_budget_ms,
-      server: config.hooks.server
+      server: config.hooks.server,
+      native: config.hooks.native
     },
     webfetch: {
       allow: config.webfetch.allow,
@@ -2475,6 +2492,7 @@ function saveConfig(config) {
       max_chunks_per_file: config.indexing.max_chunks_per_file,
       skip_dirs: config.indexing.skip_dirs,
       skip_files: config.indexing.skip_files,
+      skip_minified: config.indexing.skip_minified,
       embeddings_enabled: config.indexing.embeddings_enabled,
       cross_project_symbols: config.indexing.cross_project_symbols,
       max_db_size_mb: config.indexing.max_db_size_mb,
@@ -2510,40 +2528,32 @@ function saveConfig(config) {
     semantic: {
       archive_weight: config.semantic.archive_weight,
       max_distance: config.semantic.max_distance,
+      weak_distance: config.semantic.weak_distance,
       docs_weight: config.semantic.docs_weight
     }
   };
-  const toml = stringify(data);
+  const toml = stringify(sparsifyAgainstDefaults(data, buildPersistedConfig({}), readConfigToml(configPath()).raw, new Set(explicitKeys)));
   atomicWriteText(configPath(), toml);
-  _cached2 = null;
+  _cached = null;
 }
 
 export {
   parse,
   stringify,
-  setRelaySeededSessionId,
-  relaySeededSessionId,
-  detectHarness,
-  getHarnessName,
-  fingerprintContent,
-  shortFingerprint,
-  fingerprintFile,
-  fileIsAbsent,
   DEFAULT_OCR_LANG,
   SUPPORTED_OCR_LANG_CODES,
   isSupportedOcrLang,
   resolveOcrLangs,
   ownGet,
+  RETIRED_CONFIG_KEYS,
   defaultConfig,
-  makeProjectAt,
-  findProject,
-  getDisplayRoot,
-  isUnderSystemTemp,
-  resolveProjectRoot,
   PROJECT_LOCKED_SECTIONS,
   PROJECT_LOCKED_KEYS,
   lastProjectConfigLockedKeys,
   readConfigSource,
+  readConfigToml,
+  withConfigProjectRoot,
+  configProjectRootFor,
   getProjectConfigInfo,
   isAutoTriggerMultiplierExplicit,
   validateNumericField,
@@ -2551,20 +2561,23 @@ export {
   getLastConfigParseError,
   getLastProjectConfigParseError,
   resolveConfigKeyLayer,
+  globalValueRejection,
   loadConfig,
   invalidateConfigCache,
+  buildPersistedConfig,
   loadPersistedConfig,
   hookServerEnabled,
+  nativeHooksEnabled,
   CONFIG_KEY_ENV_OVERRIDES,
   saveConfig
 };
 /*! Bundled license information:
 
-smol-toml/dist/date.js:
 smol-toml/dist/error.js:
-smol-toml/dist/util.js:
 smol-toml/dist/primitive.js:
+smol-toml/dist/date.js:
 smol-toml/dist/extract.js:
+smol-toml/dist/util.js:
 smol-toml/dist/struct.js:
 smol-toml/dist/parse.js:
 smol-toml/dist/stringify.js: