@cjhyy/code-shell-core 0.5.0-rc.1 → 0.5.0-rc.2

package/dist/hooks/registry.js

@@ -1,6 +1,20 @@
 /**
  * Hook registry with priority-based chain-of-responsibility execution.
  */
+// Strictness order for merging hook permission decisions across the chain.
+// Higher = stricter. deny wins over ask wins over allow.
+const DECISION_RANK = { deny: 2, ask: 1, allow: 0 };
+/**
+ * Merge two hook decisions, keeping the stricter one. `undefined` (no prior
+ * decision) yields the incoming one. Prevents a later handler from relaxing
+ * an earlier handler's deny — aligns with the executor's clampHookDecision
+ * "downgrades only" rule.
+ */
+function stricterDecision(prev, next) {
+    if (prev === undefined)
+        return next;
+    return DECISION_RANK[next] >= DECISION_RANK[prev] ? next : prev;
+}
 export class HookRegistry {
     hooks = new Map();
     register(eventName, handler, priority = 0, name) {
@@ -11,6 +25,22 @@ export class HookRegistry {
         // Sort by priority descending (highest first)
         this.hooks.get(eventName).sort((a, b) => b.priority - a.priority);
     }
+    /**
+     * Remove a previously-registered handler by identity. Used for handlers
+     * with a run-scoped lifetime (e.g. the per-run GoalStopHook) so they don't
+     * leak across subsequent runs on the same long-lived registry. No-op if
+     * the handler isn't registered for that event.
+     */
+    unregister(eventName, handler) {
+        const list = this.hooks.get(eventName);
+        if (!list)
+            return;
+        const next = list.filter((h) => h.handler !== handler);
+        if (next.length === 0)
+            this.hooks.delete(eventName);
+        else
+            this.hooks.set(eventName, next);
+    }
     async emit(eventName, data = {}) {
         const handlers = this.hooks.get(eventName);
         if (!handlers?.length)
@@ -28,7 +58,10 @@ export class HookRegistry {
                     aggregated.messages = [...(aggregated.messages ?? []), ...result.messages];
                 }
                 if (result.decision) {
-                    aggregated.decision = result.decision;
+                    // Strictest decision across the chain wins (deny > ask > allow),
+                    // not last-write-wins. Otherwise a low-priority (later-running)
+                    // handler could relax a high-priority handler's deny to allow.
+                    aggregated.decision = stricterDecision(aggregated.decision, result.decision);
                 }
                 // Last-write-wins for input/prompt rewrites — the priority order
                 // already determined which handler "owns" the override.
@@ -45,6 +78,10 @@ export class HookRegistry {
                         ? `${aggregated.additionalContext}\n\n${result.additionalContext}`
                         : result.additionalContext;
                 }
+                // on_stop: any handler asking to continue blocks termination.
+                if (result.continueSession) {
+                    aggregated.continueSession = true;
+                }
                 if (result.stop) {
                     aggregated.stop = true;
                     break;

package/dist/hooks/shell-runner.d.ts

@@ -30,6 +30,8 @@
  */
 import type { HookContext, HookResult } from "./events.js";
 import type { SettingsHookConfig } from "../types.js";
+import { validateHookResult } from "./hook-output.js";
+export { validateHookResult };
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
  * every failure mode (spawn error, timeout, malformed JSON) and

package/dist/hooks/shell-runner.js

@@ -29,6 +29,10 @@
  *               On timeout we SIGTERM then SIGKILL, log, and return {}.
  */
 import { spawn } from "node:child_process";
+import { MAX_HOOK_OUTPUT_BYTES, validateHookResult } from "./hook-output.js";
+// Re-export so existing call sites that import { validateHookResult } from
+// "./shell-runner.js" (e.g. tests) keep compiling.
+export { validateHookResult };
 const DEFAULT_TIMEOUT_MS = 60_000;
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
@@ -86,10 +90,38 @@ export async function runShellHook(config, ctx) {
             }
             settle({});
         }, timeoutMs);
+        // Byte cap: once we cross MAX_HOOK_OUTPUT_BYTES on stdout, kill the
+        // child and surface a 'cap exceeded' failure. A misbehaving handler
+        // can otherwise hold the engine memory hostage while we accumulate
+        // its output. Stderr is also capped but treated more leniently —
+        // truncated, not fatal — since stderr is just diagnostic chatter.
+        let stdoutBytes = 0;
+        let stdoutCapped = false;
+        let stderrCapped = false;
         child.stdout?.on("data", (chunk) => {
+            stdoutBytes += chunk.length;
+            if (stdoutBytes > MAX_HOOK_OUTPUT_BYTES) {
+                if (!stdoutCapped) {
+                    stdoutCapped = true;
+                    // eslint-disable-next-line no-console
+                    console.warn(`[hooks] ${config.event} hook stdout exceeded ${MAX_HOOK_OUTPUT_BYTES} bytes — killing`);
+                    try {
+                        child.kill("SIGTERM");
+                    }
+                    catch { /* already exited */ }
+                }
+                return;
+            }
             stdout += chunk.toString("utf8");
         });
         child.stderr?.on("data", (chunk) => {
+            if (stderr.length + chunk.length > MAX_HOOK_OUTPUT_BYTES) {
+                if (!stderrCapped) {
+                    stderrCapped = true;
+                    stderr += "\n…[stderr truncated]";
+                }
+                return;
+            }
             stderr += chunk.toString("utf8");
         });
         child.on("error", (err) => {
@@ -100,6 +132,12 @@ export async function runShellHook(config, ctx) {
         });
         child.on("close", (code) => {
             clearTimeout(timer);
+            if (stdoutCapped) {
+                // eslint-disable-next-line no-console
+                console.error(`[hooks] ${config.event} hook killed due to oversized stdout (> ${MAX_HOOK_OUTPUT_BYTES} bytes)`);
+                settle({});
+                return;
+            }
             if (code === 0) {
                 const trimmed = stdout.trim();
                 if (trimmed.length === 0) {
@@ -108,10 +146,13 @@ export async function runShellHook(config, ctx) {
                 }
                 try {
                     const parsed = JSON.parse(trimmed);
-                    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-                        settle(parsed);
+                    const validated = validateHookResult(parsed);
+                    if (validated) {
+                        settle(validated);
                     }
                     else {
+                        // eslint-disable-next-line no-console
+                        console.warn(`[hooks] ${config.event} hook returned a value that failed HookResult schema, ignoring. stdout:`, trimmed.slice(0, 200));
                         settle({});
                     }
                 }

package/dist/index.d.ts

@@ -4,10 +4,12 @@
  * Public API exports.
  */
 export declare const VERSION = "0.5.0-rc.0";
-export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
-export { Engine } from "./engine/engine.js";
+export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
 export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/engine.js";
+export { parseAgentDefinition, serializeAgentDefinition, type AgentDefinition, } from "./agent/agent-definition.js";
+export { AgentDefinitionRegistry, type AgentSourceDir, } from "./agent/agent-definition-registry.js";
 export type { CostStateStore, CostStateSnapshot } from "./engine/cost-store.js";
 export { EngineRuntime } from "./engine/runtime.js";
 export type { EngineRuntimeOptions } from "./engine/runtime.js";
@@ -23,6 +25,8 @@ export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend } from "./tool-system/permission.js";
 export type { ApprovalBackend } from "./tool-system/permission.js";
 export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
+export type { BuiltinTool, BuiltinToolFn } from "./tool-system/builtin/index.js";
+export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
 export { MCPManager } from "./tool-system/mcp-manager.js";
 export type { AskUserFn } from "./tool-system/builtin/ask-user.js";
 export type { Task, TaskStatus } from "./tool-system/builtin/task.js";
@@ -32,13 +36,15 @@ export { wrapHookMessages } from "./hooks/inject.js";
 export { AgentServer, type AgentServerOptions } from "./protocol/server.js";
 export { AgentClient, type BackgroundAgentCompletedHandler } from "./protocol/client.js";
 export { createInProcessTransport, StdioTransport, type Transport, } from "./protocol/transport.js";
+export { SocketTransport, listenTcp, type TcpListenResult, } from "./protocol/tcp-transport.js";
 export { createServer, createClient, type CreateServerOptions, type CreateClientOptions, type ServerHandle, } from "./protocol/factories.js";
 export { Methods, ErrorCodes, type RpcMessage, type RunResult, } from "./protocol/types.js";
 export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
 export { MemoryManager } from "./session/memory.js";
-export type { MemoryEntry } from "./session/memory.js";
+export type { MemoryEntry, MemoryScope } from "./session/memory.js";
+export { runDreamConsolidation, type DreamConsolidationInput, type DreamConsolidationResult, } from "./services/dream-consolidation.js";
 export type { FileSnapshot } from "./session/file-history.js";
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
@@ -54,6 +60,21 @@ export { applyToolResultPersistence, createContentReplacementState, reconstructC
 export type { ContentReplacementState } from "./context/tool-result-storage.js";
 export { scanSkills, invalidateSkillCache } from "./skills/index.js";
 export type { SkillDefinition } from "./skills/index.js";
+export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
+export type { CapabilityServiceDeps, CapabilityDescriptor, CapabilityControl, } from "./capability-control/index.js";
+export { readInstalledPlugins } from "./plugins/installedPlugins.js";
+export type { InstalledPluginsV2 } from "./plugins/types.js";
+export { installPluginFromPath } from "./plugins/installer/install.js";
+export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { parseSource, type ParsedSource } from "./plugins/installer/parseSource.js";
+export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
+export { CodexPluginManifest, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
+export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
+export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
+export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
+export { listInstalledPlugins, type PluginListRow } from "./plugins/installer/list.js";
+export { updatePluginByName, type UpdateResult } from "./plugins/installer/update.js";
 export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
 export type { ModelPreset } from "./arena/model-presets.js";
@@ -69,11 +90,12 @@ export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult
 export type { ArenaConfig, ArenaMode, ArenaResultV2, ArenaStrategy, ArenaParticipant, ArenaBaseContext, ArenaFinding, FindingReview, ParticipantReport, ArenaConsensus, ArenaConsensusItem, ArenaRoadmapPhase, ArenaProgressEvent, ArenaPlan, ArenaLens, ArenaLensName, ArenaSourceKind, ArenaArtifact, ArenaQuickFact, FindingKind, PeerVerdict, ToolTrace, EvidencePacket, FindingEvidenceLink, ResearchDossier, ClaimStatus, ClaimRecord, ClaimChallenge, ClaimAdjudication, RequestedCheck, DebateRound, DebateTurn, TargetedCheckTask, SharedResearchLedger, RoundResearchDigest, ArenaExecutionLimits, } from "./arena/types.js";
 export { IterativeArena, defaultIterateConvergence, iterateDiffRatio, iterateCodeFormat, iterateDocumentFormat, getIterateFormat, } from "./arena/index.js";
 export type { IterateConfig, IterateResult, IterateSubject, IterateFormat, IterateProgressEvent, IterateFormatPack, Draft, DraftCandidate, Critique, CritiqueCategory, CritiqueEvidence, CritiqueSeverity, ConvergenceSignal, Round, AuthorRotation, StoppedReason, CheckpointFn, CheckpointContext, CheckpointAction, } from "./arena/index.js";
-export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
+export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, AUTOMATION_PROMPT_NOTE, AUTOMATION_RUN_SOURCE, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, type RunLockConfig, type RunLockAcquireResult, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
 export { defineProduct, type ProductDefinition, type ProductPreset, type ProductAdapter, type ProductContract, type CustomTool, type ProductRuntimeOptions, type ProductInstance, } from "./product/index.js";
 export { logger } from "./logging/logger.js";
 export { SettingsManager, type SettingsScope } from "./settings/manager.js";
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
+export { personalizationFrom, type PersonalizationConfig } from "./settings/personalization.js";
 export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, type AttributedCounter, type ChannelEntry, } from "./state.js";
 export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
 export { env } from "./utils/env.js";
@@ -96,15 +118,16 @@ export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdate
 export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig, type SandboxConfig, } from "./tool-system/sandbox/index.js";
-export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
+export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
 export type { BackgroundAgentCompletedEvent } from "./types.js";
+export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronJob, type CronPermissionLevel, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
 export { asyncAgentRegistry, type AsyncAgentEntry, } from "./tool-system/builtin/agent-registry.js";
 export { createInProcessClient } from "./protocol/helpers.js";
 export type { ProtocolModelEntry } from "./protocol/types.js";
 export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, type OutputSink, } from "./arena/render/terminal.js";
 export { formatArenaResultForSession } from "./arena/render/session.js";
 export { installPlugin, uninstallPlugin, listInstalled, } from "./plugins/pluginInstaller.js";
-export { addMarketplace, removeMarketplace, listMarketplaces, } from "./plugins/marketplaceManager.js";
+export { addMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
 export { parseMarketplaceInput, deriveMarketplaceName, } from "./plugins/parseMarketplaceInput.js";
 export { scanPluginCommands, type PluginCommand, } from "./plugins/pluginCommandsLoader.js";
 export { type CachedModel, defaultCacheDir, } from "./llm/model-cache.js";
@@ -112,6 +135,8 @@ export { fetchModelList, type FetchResult, } from "./llm/model-fetcher.js";
 export { sanitizeApiKey, hasNonAsciiPrintable, } from "./llm/api-key-sanitize.js";
 export { PROVIDER_KINDS, type ProviderKindName, } from "./llm/provider-kinds.js";
 export { capabilitiesFor, type Capability, } from "./llm/capabilities/index.js";
+export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
+export { REASONING_EFFORTS, type ReasoningSetting, } from "./llm/reasoning-setting.js";
 export { type ProviderConfig } from "./llm/provider-catalog.js";
 export { syncOpenRouterCatalog, getOpenRouterSnapshot, } from "./data/openrouter-sync.js";
 export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo, } from "./types.js";

package/dist/index.js

@@ -7,7 +7,9 @@ export const VERSION = "0.5.0-rc.0";
 // ─── Exceptions ──────────────────────────────────────────────────
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 // ─── Engine (primary API) ────────────────────────────────────────
-export { Engine } from "./engine/engine.js";
+export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
+export { parseAgentDefinition, serializeAgentDefinition, } from "./agent/agent-definition.js";
+export { AgentDefinitionRegistry, } from "./agent/agent-definition-registry.js";
 export { EngineRuntime } from "./engine/runtime.js";
 export { ChatSessionManager } from "./protocol/chat-session-manager.js";
 // ─── LLM ─────────────────────────────────────────────────────────
@@ -21,6 +23,7 @@ export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend } from "./tool-system/permission.js";
 export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
+export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
 export { MCPManager } from "./tool-system/mcp-manager.js";
 // ─── Hooks ───────────────────────────────────────────────────────
 export { HookRegistry } from "./hooks/registry.js";
@@ -29,6 +32,7 @@ export { wrapHookMessages } from "./hooks/inject.js";
 export { AgentServer } from "./protocol/server.js";
 export { AgentClient } from "./protocol/client.js";
 export { createInProcessTransport, StdioTransport, } from "./protocol/transport.js";
+export { SocketTransport, listenTcp, } from "./protocol/tcp-transport.js";
 // Recommended public factories — see protocol/factories.ts for the
 // stable construction contract referenced by standard §7.
 export { createServer, createClient, } from "./protocol/factories.js";
@@ -38,6 +42,7 @@ export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
 export { MemoryManager } from "./session/memory.js";
+export { runDreamConsolidation, } from "./services/dream-consolidation.js";
 // ─── Prompt ──────────────────────────────────────────────────────
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
@@ -51,6 +56,21 @@ export { estimateTokens, microcompact, windowCompact, truncateToolResult, buildS
 export { applyToolResultPersistence, createContentReplacementState, reconstructContentReplacementState, resolveToolResultsDir, isPersistedReplacement, DEFAULT_PERSIST_THRESHOLD, PER_MESSAGE_AGGREGATE_CAP, PREVIEW_SIZE, } from "./context/tool-result-storage.js";
 // ─── Skills ──────────────────────────────────────────────────────
 export { scanSkills, invalidateSkillCache } from "./skills/index.js";
+// ─── Capability control (扩展能力 backend) ───────────────────────
+export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
+export { readInstalledPlugins } from "./plugins/installedPlugins.js";
+// ─── Plugin installer (CC + Codex) ───────────────────────────────
+export { installPluginFromPath } from "./plugins/installer/install.js";
+export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { parseSource } from "./plugins/installer/parseSource.js";
+export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
+export { CodexPluginManifest, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
+export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
+export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
+export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
+export { listInstalledPlugins } from "./plugins/installer/list.js";
+export { updatePluginByName } from "./plugins/installer/update.js";
 // ─── Arena ───────────────────────────────────────────────────────
 export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
@@ -75,7 +95,7 @@ RunManager, FileRunStore,
 // Queue
 RunQueue, 
 // Runner
-EngineRunner, 
+EngineRunner, AUTOMATION_PROMPT_NOTE, AUTOMATION_RUN_SOURCE, 
 // Approval / Input adapters
 RunApprovalBackend, createRunAskUserFn, 
 // Checkpoint & Artifacts
@@ -93,6 +113,7 @@ export { logger } from "./logging/logger.js";
 // ─── Settings ────────────────────────────────────────────────────
 export { SettingsManager } from "./settings/manager.js";
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
+export { personalizationFrom } from "./settings/personalization.js";
 // ─── State (runtime singletons shared with TUI) ──────────────────
 export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, } from "./state.js";
 // ─── Utils (shared primitives used by TUI) ───────────────────────
@@ -124,6 +145,10 @@ export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat,
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig, } from "./tool-system/sandbox/index.js";
 export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
+// Automation — zero-env-dependency scheduling module (startAutomation facade
+// + scheduler/store/runner). Hosts (Electron main, future CLI server) load
+// this and inject store + runner. See docs/automation-plan-2026-05-31.md.
+export { startAutomation, CronScheduler, cronScheduler, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, isCronExpression, parseCronExpression, nextCronTime, resolveWritePolicy, wrapUntrustedInput, runWriteJobInWorktree, } from "./automation/index.js";
 export { asyncAgentRegistry, } from "./tool-system/builtin/agent-registry.js";
 // ─── Protocol (extended for TUI) ────────────────────────────────
 export { createInProcessClient } from "./protocol/helpers.js";
@@ -132,7 +157,7 @@ export { formatArenaResult, printArenaResult, renderProgress, createProgressRend
 export { formatArenaResultForSession } from "./arena/render/session.js";
 // ─── Plugins ─────────────────────────────────────────────────────
 export { installPlugin, uninstallPlugin, listInstalled, } from "./plugins/pluginInstaller.js";
-export { addMarketplace, removeMarketplace, listMarketplaces, } from "./plugins/marketplaceManager.js";
+export { addMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
 export { parseMarketplaceInput, deriveMarketplaceName, } from "./plugins/parseMarketplaceInput.js";
 export { scanPluginCommands, } from "./plugins/pluginCommandsLoader.js";
 // ─── LLM (extended for TUI) ─────────────────────────────────────
@@ -141,5 +166,7 @@ export { fetchModelList, } from "./llm/model-fetcher.js";
 export { sanitizeApiKey, hasNonAsciiPrintable, } from "./llm/api-key-sanitize.js";
 export { PROVIDER_KINDS, } from "./llm/provider-kinds.js";
 export { capabilitiesFor, } from "./llm/capabilities/index.js";
+export { reasoningControlFor, } from "./llm/capabilities/reasoning-control.js";
+export { REASONING_EFFORTS, } from "./llm/reasoning-setting.js";
 // ─── Data ────────────────────────────────────────────────────────
 export { syncOpenRouterCatalog, getOpenRouterSnapshot, } from "./data/openrouter-sync.js";

package/dist/llm/capabilities/reasoning-control.d.ts

@@ -0,0 +1,24 @@
+/**
+ * reasoningControlFor — projects a model's ReasoningShape into "what control
+ * the UI should render". The UI never branches on provider; it switches on
+ * ReasoningControl.kind. Mirrors the capability-control descriptor pattern.
+ */
+import type { ProviderKindName } from "../provider-kinds.js";
+import type { ReasoningEffort } from "./types.js";
+export type ReasoningControl = {
+    kind: "none";
+} | {
+    kind: "toggle";
+    default: boolean;
+} | {
+    kind: "effort";
+    options: ReasoningEffort[];
+    default: ReasoningEffort;
+} | {
+    kind: "budget";
+    min: number;
+    default: number;
+} | {
+    kind: "adaptive";
+};
+export declare function reasoningControlFor(kind: ProviderKindName, model: string): ReasoningControl;

package/dist/llm/capabilities/reasoning-control.js

@@ -0,0 +1,38 @@
+import { capabilitiesFor } from "./index.js";
+const FULL_EFFORTS = ["minimal", "low", "medium", "high"];
+export function reasoningControlFor(kind, model) {
+    const cap = capabilitiesFor(kind, model);
+    const r = cap.reasoning;
+    switch (r.kind) {
+        case "none":
+            return { kind: "none" };
+        case "deepseek-thinking":
+            return { kind: "toggle", default: true };
+        case "anthropic-adaptive":
+            return { kind: "adaptive" };
+        case "anthropic-budget":
+            return {
+                kind: "budget",
+                min: r.minBudgetTokens,
+                default: Math.max(r.minBudgetTokens, 4096),
+            };
+        case "openrouter-reasoning":
+            // OpenRouter normalizes to minimal..high (no xhigh passthrough).
+            return { kind: "effort", options: FULL_EFFORTS, default: "medium" };
+        case "openai-effort": {
+            // Prefer the capability's first-class supportedEfforts list (gpt-5.5 →
+            // low..xhigh, magistral → [high]). Fall back to the default four levels
+            // when a rule didn't specify one. We no longer infer the level set from
+            // disabledEffort — that's a wire-detail two vendors can coincidentally
+            // share (gpt-5.5 and magistral both use "none"), so inferring misrendered
+            // magistral as a gpt-5.5-style control.
+            const options = r.supportedEfforts && r.supportedEfforts.length > 0
+                ? r.supportedEfforts
+                : FULL_EFFORTS;
+            // Default to "medium" if available, else the first offered level
+            // (magistral has only "high", so its default is "high").
+            const def = options.includes("medium") ? "medium" : options[0];
+            return { kind: "effort", options, default: def };
+        }
+    }
+}

package/dist/llm/capabilities/rules.js

@@ -39,10 +39,18 @@ export const RULES = [
                 "temperature", "top_p", "presence_penalty",
                 "frequency_penalty", "logit_bias", "logprobs", "top_logprobs",
             ]),
-            reasoning: { kind: "openai-effort", disabledEffort: "none" },
+            reasoning: {
+                kind: "openai-effort",
+                disabledEffort: "none",
+                supportedEfforts: ["low", "medium", "high", "xhigh"], // no "minimal"; adds "xhigh"
+            },
             echoReasoning: "optional",
+            // 400s on `max_tokens is too large: ... at most 128000`. Clamp here so a
+            // stale 384000 (copied from a DeepSeek/OpenRouter entry on a prior model)
+            // can't bleed in after a hot switch.
+            maxOutputTokens: 128_000,
         },
-        why: "OpenAI gpt-5.5+ accepts reasoning_effort none|low|medium|high|xhigh (no `minimal`).",
+        why: "OpenAI gpt-5.5+ accepts reasoning_effort none|low|medium|high|xhigh (no `minimal`); output cap 128k.",
     },
     // ─── OpenAI native — o-series + gpt-5 through gpt-5.4 ──────────
     {
@@ -63,6 +71,24 @@ export const RULES = [
         },
         why: "OpenAI o-series + gpt-5..5.4 reject classic sampling params; use max_completion_tokens + reasoning_effort.",
     },
+    // ─── OpenAI native — gpt-4o / gpt-4-turbo (multimodal, non-reasoning) ──
+    // The famous vision models. They are NOT reasoning models, so they keep
+    // classic sampling params + max_tokens — only `supportsVision` differs
+    // from DEFAULT_CAPABILITY. Listed AFTER the gpt-5+ rules (those anchor on
+    // gpt-[5-9]) so neither family masks the other. Without this rule gpt-4o
+    // falls through to DEFAULT_CAPABILITY (supportsVision:false) and a famous
+    // vision model gets its history images stripped / new attachments rejected.
+    {
+        kind: "openai",
+        // gpt-4o, gpt-4o-mini, gpt-4-turbo, gpt-4-vision-preview, gpt-4.1*.
+        // gpt-4o has no separator before the "o"; the rest are `-`/`.`-separated.
+        // Stays clear of gpt-3.5-turbo (no vision) and gpt-5+ (handled above).
+        match: /^gpt-4o(?:[-.]|$)|^gpt-4(?:\.1|-turbo|-vision)(?:[-.]|$)/i,
+        capability: {
+            supportsVision: true,
+        },
+        why: "OpenAI gpt-4o / gpt-4o-mini / gpt-4-turbo / gpt-4.1 are multimodal but non-reasoning; only vision differs from default.",
+    },
     // ─── DeepSeek ──────────────────────────────────────────────────
     {
         kind: "deepseek",
@@ -196,7 +222,11 @@ export const RULES = [
         // Magistral series exposes reasoning_effort: high|none — no minimal/low/medium.
         match: /^magistral/i,
         capability: {
-            reasoning: { kind: "openai-effort", disabledEffort: "none" },
+            reasoning: {
+                kind: "openai-effort",
+                disabledEffort: "none",
+                supportedEfforts: ["high"], // magistral: only high|none — "none" is the off value
+            },
         },
         why: "Mistral magistral models accept only reasoning_effort `high` or `none`.",
     },

package/dist/llm/capabilities/types.d.ts

@@ -9,8 +9,11 @@
  * `rules.ts` — vendor docs, not folklore.
  */
 import type { ProviderKindName } from "../provider-kinds.js";
-/** OpenAI-style reasoning effort levels — shared by several vendors. */
-export type ReasoningEffort = "minimal" | "low" | "medium" | "high";
+/**
+ * OpenAI-style reasoning effort levels — shared by several vendors.
+ * `xhigh` is gpt-5.5+ only (which also drops `minimal`); see rules.ts.
+ */
+export type ReasoningEffort = "minimal" | "low" | "medium" | "high" | "xhigh";
 /** A binary thinking switch, like DeepSeek V4 and Z.AI GLM use. */
 export type ThinkingSwitch = "enabled" | "disabled";
 /**
@@ -31,10 +34,19 @@ export type ReasoningShape = {
  * "disabled" — defaults to `"minimal"` (OpenAI), but vendors with a
  * narrower vocabulary override it (e.g. xAI Grok 4.3 has no `"minimal"`;
  * Mistral Magistral only accepts `"high"` and `"none"`).
+ *
+ * `supportedEfforts` is the FIRST-CLASS list of levels a UI may offer for
+ * this model. Set it whenever the vocabulary differs from the default
+ * `["minimal","low","medium","high"]` — e.g. gpt-5.5 is
+ * `["low","medium","high","xhigh"]`, Mistral magistral is `["high"]`. The UI
+ * (reasoningControlFor) reads this directly instead of inferring the
+ * level set from `disabledEffort`, which is a wire-detail, not a
+ * capability marker (two unrelated vendors can share `disabledEffort:"none"`).
  */
  | {
     kind: "openai-effort";
     disabledEffort?: ReasoningEffort | "none";
+    supportedEfforts?: ReasoningEffort[];
 }
 /** Anthropic Claude 4.x ≤ 4.5 — `{thinking: {type: "enabled", budget_tokens: N}}`. */
  | {
@@ -95,6 +107,14 @@ export interface Capability {
     parallelToolCalls: ParallelToolCallsShape;
     /** Streaming usage reporting shape. */
     streamUsage: StreamUsageShape;
+    /**
+     * Known hard ceiling for max-output-tokens, when the vendor publishes one
+     * and exceeding it 400s. Used to clamp a requested/inherited max_tokens so
+     * a stale catalog value (e.g. 384000 copied from a DeepSeek/OpenRouter
+     * entry) can't bleed onto a smaller-cap model after a hot switch. Undefined
+     * = no known cap → send the request value unclamped.
+     */
+    maxOutputTokens?: number;
 }
 /**
  * Conservative default — used when no rule matches. Picks "send everything

package/dist/llm/clamp-max-tokens.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Clamp a requested max-output-tokens value to a model's known output cap.
+ *
+ * Background: model-pool copies a catalog `maxOutputTokens` straight into
+ * LLMConfig.maxTokens. For some OpenRouter/DeepSeek entries that value is huge
+ * (e.g. 384000) and bleeds onto a model with a much smaller cap after a hot
+ * switch, producing `max_tokens is too large` 400s. When the capability layer
+ * knows the model's real ceiling we clamp to it; when it doesn't we pass the
+ * value through (or omit it entirely when there is no request value).
+ */
+export declare function clampMaxTokens(requested: number | undefined, cap: number | undefined): number | undefined;

package/dist/llm/clamp-max-tokens.js

@@ -0,0 +1,17 @@
+/**
+ * Clamp a requested max-output-tokens value to a model's known output cap.
+ *
+ * Background: model-pool copies a catalog `maxOutputTokens` straight into
+ * LLMConfig.maxTokens. For some OpenRouter/DeepSeek entries that value is huge
+ * (e.g. 384000) and bleeds onto a model with a much smaller cap after a hot
+ * switch, producing `max_tokens is too large` 400s. When the capability layer
+ * knows the model's real ceiling we clamp to it; when it doesn't we pass the
+ * value through (or omit it entirely when there is no request value).
+ */
+export function clampMaxTokens(requested, cap) {
+    if (requested === undefined)
+        return undefined;
+    if (cap === undefined)
+        return requested;
+    return Math.min(requested, cap);
+}