@cjhyy/code-shell-core 0.5.0-rc.1 → 0.6.0-rc.1

package/dist/hooks/hook-output.js

@@ -0,0 +1,79 @@
+/**
+ * Shared output-handling primitives for hook runners.
+ *
+ * Two runners spawn child processes that produce HookResult JSON:
+ *   - hooks/shell-runner.ts (user-configured shell hooks from settings)
+ *   - plugins/pluginCommandHook.ts (hooks declared by installed plugins)
+ *
+ * Both need the same defences against:
+ *   1. Runaway output (a chatty / malicious handler eating engine RAM).
+ *   2. Schema drift (unknown decision values, typo'd top-level keys,
+ *      non-string messages — silent no-ops are worse than rejections).
+ *
+ * Keeping the byte cap and validator in one module guarantees the two
+ * runners can't accidentally diverge on what counts as "valid".
+ */
+/**
+ * Cap hook output to avoid runaway logging / OOM. 1 MiB is more than enough
+ * for any legitimate HookResult (which is typically < 1 KiB), while still
+ * absorbing chatty handlers without truncating their decision/messages
+ * payload. Past the cap callers kill the child and treat the hook as failed.
+ */
+export const MAX_HOOK_OUTPUT_BYTES = 1024 * 1024;
+/**
+ * Permissive runtime check that a parsed object matches HookResult.
+ * Rejects unknown decision values, non-string/array fields, and unknown
+ * top-level keys (signalling a typo or hostile/garbage payload). Returns
+ * a normalized HookResult on success or null on failure — caller treats
+ * null the same as "no result, drop it".
+ *
+ * Exported so a unit test can pin the contract without spawning a shell.
+ */
+export function validateHookResult(parsed) {
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const p = parsed;
+    const known = new Set([
+        "stop",
+        "continueSession",
+        "data",
+        "messages",
+        "decision",
+        "updatedInput",
+        "additionalContext",
+        "updatedPrompt",
+    ]);
+    for (const k of Object.keys(p)) {
+        if (!known.has(k))
+            return null;
+    }
+    if ("stop" in p && typeof p.stop !== "boolean")
+        return null;
+    if ("continueSession" in p && typeof p.continueSession !== "boolean")
+        return null;
+    if ("data" in p) {
+        if (!p.data || typeof p.data !== "object" || Array.isArray(p.data))
+            return null;
+    }
+    if ("messages" in p) {
+        if (!Array.isArray(p.messages))
+            return null;
+        for (const m of p.messages) {
+            if (typeof m !== "string")
+                return null;
+        }
+    }
+    if ("decision" in p) {
+        if (p.decision !== "allow" && p.decision !== "deny" && p.decision !== "ask")
+            return null;
+    }
+    if ("updatedInput" in p) {
+        if (!p.updatedInput || typeof p.updatedInput !== "object" || Array.isArray(p.updatedInput))
+            return null;
+    }
+    if ("additionalContext" in p && typeof p.additionalContext !== "string")
+        return null;
+    if ("updatedPrompt" in p && typeof p.updatedPrompt !== "string")
+        return null;
+    return p;
+}

package/dist/hooks/registry.d.ts

@@ -6,6 +6,21 @@ export type HookHandler = (ctx: HookContext) => HookResult | Promise<HookResult>
 export declare class HookRegistry {
     private hooks;
     register(eventName: HookEventName, handler: HookHandler, priority?: number, name?: string): void;
+    /**
+     * Remove a previously-registered handler by identity. Used for handlers
+     * with a run-scoped lifetime (e.g. the per-run GoalStopHook) so they don't
+     * leak across subsequent runs on the same long-lived registry. No-op if
+     * the handler isn't registered for that event.
+     */
+    unregister(eventName: HookEventName, handler: HookHandler): void;
+    /**
+     * Remove every registered hook whose `name` starts with `prefix`, across all
+     * events. Used to drop a whole source's hooks by naming convention (e.g.
+     * `plugin:` handlers) when that source is reloaded mid-session — so disabling
+     * a plugin stops its hooks on the live session, not just on new sessions.
+     * Returns the number removed.
+     */
+    removeByNamePrefix(prefix: string): number;
     emit(eventName: HookEventName, data?: Record<string, unknown>): Promise<HookResult>;
     hasHooks(eventName: HookEventName): boolean;
     clear(eventName?: HookEventName): void;

package/dist/hooks/registry.js

@@ -1,6 +1,20 @@
 /**
  * Hook registry with priority-based chain-of-responsibility execution.
  */
+// Strictness order for merging hook permission decisions across the chain.
+// Higher = stricter. deny wins over ask wins over allow.
+const DECISION_RANK = { deny: 2, ask: 1, allow: 0 };
+/**
+ * Merge two hook decisions, keeping the stricter one. `undefined` (no prior
+ * decision) yields the incoming one. Prevents a later handler from relaxing
+ * an earlier handler's deny — aligns with the executor's clampHookDecision
+ * "downgrades only" rule.
+ */
+function stricterDecision(prev, next) {
+    if (prev === undefined)
+        return next;
+    return DECISION_RANK[next] >= DECISION_RANK[prev] ? next : prev;
+}
 export class HookRegistry {
     hooks = new Map();
     register(eventName, handler, priority = 0, name) {
@@ -11,6 +25,41 @@ export class HookRegistry {
         // Sort by priority descending (highest first)
         this.hooks.get(eventName).sort((a, b) => b.priority - a.priority);
     }
+    /**
+     * Remove a previously-registered handler by identity. Used for handlers
+     * with a run-scoped lifetime (e.g. the per-run GoalStopHook) so they don't
+     * leak across subsequent runs on the same long-lived registry. No-op if
+     * the handler isn't registered for that event.
+     */
+    unregister(eventName, handler) {
+        const list = this.hooks.get(eventName);
+        if (!list)
+            return;
+        const next = list.filter((h) => h.handler !== handler);
+        if (next.length === 0)
+            this.hooks.delete(eventName);
+        else
+            this.hooks.set(eventName, next);
+    }
+    /**
+     * Remove every registered hook whose `name` starts with `prefix`, across all
+     * events. Used to drop a whole source's hooks by naming convention (e.g.
+     * `plugin:` handlers) when that source is reloaded mid-session — so disabling
+     * a plugin stops its hooks on the live session, not just on new sessions.
+     * Returns the number removed.
+     */
+    removeByNamePrefix(prefix) {
+        let removed = 0;
+        for (const [event, list] of this.hooks) {
+            const next = list.filter((h) => !(h.name && h.name.startsWith(prefix)));
+            removed += list.length - next.length;
+            if (next.length === 0)
+                this.hooks.delete(event);
+            else
+                this.hooks.set(event, next);
+        }
+        return removed;
+    }
     async emit(eventName, data = {}) {
         const handlers = this.hooks.get(eventName);
         if (!handlers?.length)
@@ -28,7 +77,10 @@ export class HookRegistry {
                     aggregated.messages = [...(aggregated.messages ?? []), ...result.messages];
                 }
                 if (result.decision) {
-                    aggregated.decision = result.decision;
+                    // Strictest decision across the chain wins (deny > ask > allow),
+                    // not last-write-wins. Otherwise a low-priority (later-running)
+                    // handler could relax a high-priority handler's deny to allow.
+                    aggregated.decision = stricterDecision(aggregated.decision, result.decision);
                 }
                 // Last-write-wins for input/prompt rewrites — the priority order
                 // already determined which handler "owns" the override.
@@ -45,6 +97,10 @@ export class HookRegistry {
                         ? `${aggregated.additionalContext}\n\n${result.additionalContext}`
                         : result.additionalContext;
                 }
+                // on_stop: any handler asking to continue blocks termination.
+                if (result.continueSession) {
+                    aggregated.continueSession = true;
+                }
                 if (result.stop) {
                     aggregated.stop = true;
                     break;

package/dist/hooks/shell-runner.d.ts

@@ -30,6 +30,8 @@
  */
 import type { HookContext, HookResult } from "./events.js";
 import type { SettingsHookConfig } from "../types.js";
+import { validateHookResult } from "./hook-output.js";
+export { validateHookResult };
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
  * every failure mode (spawn error, timeout, malformed JSON) and

package/dist/hooks/shell-runner.js

@@ -29,6 +29,11 @@
  *               On timeout we SIGTERM then SIGKILL, log, and return {}.
  */
 import { spawn } from "node:child_process";
+import { MAX_HOOK_OUTPUT_BYTES, validateHookResult } from "./hook-output.js";
+import { killChildTree } from "../runtime/spawn-common.js";
+// Re-export so existing call sites that import { validateHookResult } from
+// "./shell-runner.js" (e.g. tests) keep compiling.
+export { validateHookResult };
 const DEFAULT_TIMEOUT_MS = 60_000;
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
@@ -68,28 +73,44 @@ export async function runShellHook(config, ctx) {
         const timer = setTimeout(() => {
             // eslint-disable-next-line no-console
             console.warn(`[hooks] ${config.event} hook timed out after ${timeoutMs}ms: ${config.command}`);
-            try {
-                child.kill("SIGTERM");
-                // SIGKILL fallback if the process ignores SIGTERM. Short delay so
-                // a graceful-shutdown handler in the child has a moment to flush.
-                setTimeout(() => {
-                    try {
-                        child.kill("SIGKILL");
-                    }
-                    catch {
-                        /* already exited */
-                    }
-                }, 1000);
-            }
-            catch {
-                /* already exited */
-            }
+            // win32: taskkill /T reaps the shell tree; POSIX: SIGTERM → grace →
+            // SIGKILL (a graceful handler gets a moment to flush). See killChildTree.
+            killChildTree(child, 1000);
             settle({});
         }, timeoutMs);
+        // Byte cap: once we cross MAX_HOOK_OUTPUT_BYTES on stdout, kill the
+        // child and surface a 'cap exceeded' failure. A misbehaving handler
+        // can otherwise hold the engine memory hostage while we accumulate
+        // its output. Stderr is also capped but treated more leniently —
+        // truncated, not fatal — since stderr is just diagnostic chatter.
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let stdoutCapped = false;
+        let stderrCapped = false;
         child.stdout?.on("data", (chunk) => {
+            stdoutBytes += chunk.length;
+            if (stdoutBytes > MAX_HOOK_OUTPUT_BYTES) {
+                if (!stdoutCapped) {
+                    stdoutCapped = true;
+                    // eslint-disable-next-line no-console
+                    console.warn(`[hooks] ${config.event} hook stdout exceeded ${MAX_HOOK_OUTPUT_BYTES} bytes — killing`);
+                    killChildTree(child, 1000);
+                }
+                return;
+            }
             stdout += chunk.toString("utf8");
         });
         child.stderr?.on("data", (chunk) => {
+            // Count raw bytes (not decoded string length) so multibyte UTF-8 output
+            // can't slip past the cap — matches the stdout accounting above.
+            stderrBytes += chunk.length;
+            if (stderrBytes > MAX_HOOK_OUTPUT_BYTES) {
+                if (!stderrCapped) {
+                    stderrCapped = true;
+                    stderr += "\n…[stderr truncated]";
+                }
+                return;
+            }
             stderr += chunk.toString("utf8");
         });
         child.on("error", (err) => {
@@ -100,6 +121,12 @@ export async function runShellHook(config, ctx) {
         });
         child.on("close", (code) => {
             clearTimeout(timer);
+            if (stdoutCapped) {
+                // eslint-disable-next-line no-console
+                console.error(`[hooks] ${config.event} hook killed due to oversized stdout (> ${MAX_HOOK_OUTPUT_BYTES} bytes)`);
+                settle({});
+                return;
+            }
             if (code === 0) {
                 const trimmed = stdout.trim();
                 if (trimmed.length === 0) {
@@ -108,10 +135,13 @@ export async function runShellHook(config, ctx) {
                 }
                 try {
                     const parsed = JSON.parse(trimmed);
-                    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-                        settle(parsed);
+                    const validated = validateHookResult(parsed);
+                    if (validated) {
+                        settle(validated);
                     }
                     else {
+                        // eslint-disable-next-line no-console
+                        console.warn(`[hooks] ${config.event} hook returned a value that failed HookResult schema, ignoring. stdout:`, trimmed.slice(0, 200));
                         settle({});
                     }
                 }

package/dist/index.d.ts

@@ -3,11 +3,15 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.5.0-rc.0";
-export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export declare const VERSION = "0.5.0-rc.2";
+export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
-export { Engine } from "./engine/engine.js";
-export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/engine.js";
+export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
+export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/types.js";
+export { resolveLLMConfigForTag } from "./engine/resolve-llm-config.js";
+export { resolveAuxKey } from "./engine/aux-key.js";
+export { parseAgentDefinition, serializeAgentDefinition, type AgentDefinition, } from "./agent/agent-definition.js";
+export { AgentDefinitionRegistry, type AgentSourceDir, } from "./agent/agent-definition-registry.js";
 export type { CostStateStore, CostStateSnapshot } from "./engine/cost-store.js";
 export { EngineRuntime } from "./engine/runtime.js";
 export type { EngineRuntimeOptions } from "./engine/runtime.js";
@@ -18,12 +22,15 @@ export { createLLMClient, registerProvider } from "./llm/client-factory.js";
 export { AnthropicClient } from "./llm/providers/anthropic.js";
 export { OpenAIClient } from "./llm/providers/openai.js";
 export { ModelPool, type ModelEntry } from "./llm/model-pool.js";
+export { modelEntriesFromConnections } from "./engine/model-connections-pool.js";
 export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend } from "./tool-system/permission.js";
 export type { ApprovalBackend } from "./tool-system/permission.js";
 export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
-export { MCPManager } from "./tool-system/mcp-manager.js";
+export type { BuiltinTool, BuiltinToolFn } from "./tool-system/builtin/index.js";
+export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
+export { MCPManager, buildHttpHeaders, buildStdioEnv } from "./tool-system/mcp-manager.js";
 export type { AskUserFn } from "./tool-system/builtin/ask-user.js";
 export type { Task, TaskStatus } from "./tool-system/builtin/task.js";
 export { HookRegistry } from "./hooks/registry.js";
@@ -32,14 +39,18 @@ export { wrapHookMessages } from "./hooks/inject.js";
 export { AgentServer, type AgentServerOptions } from "./protocol/server.js";
 export { AgentClient, type BackgroundAgentCompletedHandler } from "./protocol/client.js";
 export { createInProcessTransport, StdioTransport, type Transport, } from "./protocol/transport.js";
+export { SocketTransport, listenTcp, type TcpListenResult, } from "./protocol/tcp-transport.js";
 export { createServer, createClient, type CreateServerOptions, type CreateClientOptions, type ServerHandle, } from "./protocol/factories.js";
 export { Methods, ErrorCodes, type RpcMessage, type RunResult, } from "./protocol/types.js";
 export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
+export { latestUndoTarget, earliestSnapshotsPerFile, latestTurnUndoTargets, latestRedoTargets, } from "./session/undo-target.js";
+export { diffLines, renderDiffPreview, type DiffLine } from "./session/simple-diff.js";
 export { MemoryManager } from "./session/memory.js";
-export type { MemoryEntry } from "./session/memory.js";
-export type { FileSnapshot } from "./session/file-history.js";
+export type { MemoryEntry, MemoryScope } from "./session/memory.js";
+export { runDreamConsolidation, type DreamConsolidationInput, type DreamConsolidationResult, } from "./services/dream-consolidation.js";
+export type { FileSnapshot, RedoRecord } from "./session/file-history.js";
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
 export { scanInstructions, combineInstructions } from "./prompt/instruction-scanner.js";
@@ -54,6 +65,26 @@ export { applyToolResultPersistence, createContentReplacementState, reconstructC
 export type { ContentReplacementState } from "./context/tool-result-storage.js";
 export { scanSkills, invalidateSkillCache } from "./skills/index.js";
 export type { SkillDefinition } from "./skills/index.js";
+export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
+export type { CapabilityServiceDeps, CapabilityDescriptor, CapabilityControl, } from "./capability-control/index.js";
+export { readInstalledPlugins } from "./plugins/installedPlugins.js";
+export { computeEffectiveDisabledLists, type EffectiveDisabledLists, } from "./capability-control/disabled-lists.js";
+export type { InstalledPluginsV2 } from "./plugins/types.js";
+export { installPluginFromPath } from "./plugins/installer/install.js";
+export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
+export { parseSource, type ParsedSource } from "./plugins/installer/parseSource.js";
+export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
+export { CodexPluginManifest, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
+export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+export { listPluginHooks, pluginHookKey, type PluginHookEntry } from "./plugins/loadPluginHooks.js";
+export { describePluginContent, type PluginContentInventory } from "./plugins/pluginContent.js";
+export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
+export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
+export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
+export { listInstalledPlugins, type PluginListRow } from "./plugins/installer/list.js";
+export { updatePluginByName, type UpdateResult } from "./plugins/installer/update.js";
+export { checkPluginUpdate, type UpdateCheck } from "./plugins/installer/checkUpdate.js";
 export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
 export type { ModelPreset } from "./arena/model-presets.js";
@@ -69,24 +100,34 @@ export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult
 export type { ArenaConfig, ArenaMode, ArenaResultV2, ArenaStrategy, ArenaParticipant, ArenaBaseContext, ArenaFinding, FindingReview, ParticipantReport, ArenaConsensus, ArenaConsensusItem, ArenaRoadmapPhase, ArenaProgressEvent, ArenaPlan, ArenaLens, ArenaLensName, ArenaSourceKind, ArenaArtifact, ArenaQuickFact, FindingKind, PeerVerdict, ToolTrace, EvidencePacket, FindingEvidenceLink, ResearchDossier, ClaimStatus, ClaimRecord, ClaimChallenge, ClaimAdjudication, RequestedCheck, DebateRound, DebateTurn, TargetedCheckTask, SharedResearchLedger, RoundResearchDigest, ArenaExecutionLimits, } from "./arena/types.js";
 export { IterativeArena, defaultIterateConvergence, iterateDiffRatio, iterateCodeFormat, iterateDocumentFormat, getIterateFormat, } from "./arena/index.js";
 export type { IterateConfig, IterateResult, IterateSubject, IterateFormat, IterateProgressEvent, IterateFormatPack, Draft, DraftCandidate, Critique, CritiqueCategory, CritiqueEvidence, CritiqueSeverity, ConvergenceSignal, Round, AuthorRotation, StoppedReason, CheckpointFn, CheckpointContext, CheckpointAction, } from "./arena/index.js";
-export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
+export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, AUTOMATION_PROMPT_NOTE, AUTOMATION_RUN_SOURCE, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, type RunLockConfig, type RunLockAcquireResult, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
 export { defineProduct, type ProductDefinition, type ProductPreset, type ProductAdapter, type ProductContract, type CustomTool, type ProductRuntimeOptions, type ProductInstance, } from "./product/index.js";
 export { logger } from "./logging/logger.js";
 export { SettingsManager, type SettingsScope } from "./settings/manager.js";
+export { migrateConfig, configVersionOf, CURRENT_CONFIG_VERSION, type MigrationStep, } from "./settings/migrate-config.js";
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
+export { settingsJsonSchema, writeSettingsSchemaFile } from "./settings/schema-export.js";
+export { personalizationFrom, type PersonalizationConfig } from "./settings/personalization.js";
+export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
+/** @internal Shared with the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, type AttributedCounter, type ChannelEntry, } from "./state.js";
+/** @internal Shared primitives for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
 export { env } from "./utils/env.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, } from "./utils/exec.js";
 export { gte } from "./utils/semver.js";
+export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
 export { logForDebugging } from "./utils/debug.js";
-export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, isRunningOnHomespace, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, isInProtectedNamespace, } from "./utils/envUtils.js";
+export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
 export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
 export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
+export { classifyBashLines, type BashLineKind, type ClassifiedBashLine, } from "./tool-system/builtin/bash-output-style.js";
 export { formatDuration, formatTokens } from "./utils/format.js";
 export { getTheme, type Theme, type ThemeName, type ThemeSetting, } from "./utils/theme.js";
 export { resolveThemeSetting, type SystemTheme } from "./utils/systemTheme.js";
+/** @internal Host-lifecycle logging hooks for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { rotateLogs } from "./logging/logger.js";
 export { recordUIEvent } from "./logging/session-recorder.js";
 export { CostTracker, costTracker, installCostTracking } from "./cost-tracker.js";
@@ -94,24 +135,51 @@ export { NOOP_COLORIZER, type Colorizer } from "./colorizer.js";
 export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveArenaSettingsByKeys, type OnboardingResult, } from "./onboarding.js";
 export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, type UpdateInfo, } from "./updater.js";
 export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
+export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, type ReviewDimension, type ReviewPromptOptions, } from "./review/review-prompt.js";
+/**
+ * @internal Exports below are consumed by the in-repo TUI/desktop hosts, not
+ * part of the stable `@cjhyy/code-shell-core` SDK surface. They may change or
+ * move to a `/tui` subpath without a major bump. External SDK users: prefer the
+ * primary Engine/Protocol API above.
+ */
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig, type SandboxConfig, } from "./tool-system/sandbox/index.js";
-export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
+export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
 export type { BackgroundAgentCompletedEvent } from "./types.js";
+export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronJob, type CronPermissionLevel, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
+export * from "./cc-orchestrator/index.js";
+export { checkQuota, formatQuota } from "./quota/index.js";
+export { resolveQuotaCredentials } from "./quota/credentials.js";
+export type { QuotaResult, ProviderQuota, QuotaWindow, QuotaCredentials } from "./quota/types.js";
 export { asyncAgentRegistry, type AsyncAgentEntry, } from "./tool-system/builtin/agent-registry.js";
+export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
+export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
+export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
+export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";
+export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, type CatalogEntry, } from "./model-catalog/index.js";
+/** @internal Extended protocol surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { createInProcessClient } from "./protocol/helpers.js";
 export type { ProtocolModelEntry } from "./protocol/types.js";
+/** @internal Extended Arena surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, type OutputSink, } from "./arena/render/terminal.js";
 export { formatArenaResultForSession } from "./arena/render/session.js";
 export { installPlugin, uninstallPlugin, listInstalled, } from "./plugins/pluginInstaller.js";
-export { addMarketplace, removeMarketplace, listMarketplaces, } from "./plugins/marketplaceManager.js";
+export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
 export { parseMarketplaceInput, deriveMarketplaceName, } from "./plugins/parseMarketplaceInput.js";
 export { scanPluginCommands, type PluginCommand, } from "./plugins/pluginCommandsLoader.js";
+/** @internal Extended LLM surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { type CachedModel, defaultCacheDir, } from "./llm/model-cache.js";
 export { fetchModelList, type FetchResult, } from "./llm/model-fetcher.js";
 export { sanitizeApiKey, hasNonAsciiPrintable, } from "./llm/api-key-sanitize.js";
 export { PROVIDER_KINDS, type ProviderKindName, } from "./llm/provider-kinds.js";
 export { capabilitiesFor, type Capability, } from "./llm/capabilities/index.js";
+export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
+export { REASONING_EFFORTS, type ReasoningSetting, } from "./llm/reasoning-setting.js";
 export { type ProviderConfig } from "./llm/provider-catalog.js";
 export { syncOpenRouterCatalog, getOpenRouterSnapshot, } from "./data/openrouter-sync.js";
+/** @internal Extended type surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo, } from "./types.js";
+export { resolveExternalAgentConfig } from "./external-agents/config.js";
+export type { ExternalAgentMode, ExternalAgentsSettings, ResolvedExternalAgentsConfig, ResolvedClaudeCodeSettings, ResolvedCodexSettings, } from "./external-agents/types.js";
+export { flattenAxTree, renderElementList, cleanPageText, CONTENT_CHAR_CAP, buildExtractLinksScript, EXTRACT_LINK_CAP, } from "./tool-system/browser-bridge.js";
+export type { BrowserBridge, BrowserElement, BrowserSnapshot, BrowserResult, BrowserContent, BrowserExtract, BrowserLink, BrowserImage, BrowserVideo, BrowserImageData, BrowserTab, AXNode, } from "./tool-system/browser-bridge.js";