@cjhyy/code-shell-core 0.5.0-rc.2 → 0.6.0-rc.2

package/dist/hooks/goal-stop-hook.js

@@ -1,7 +1,44 @@
 import { normalizeGoal } from "../engine/goal.js";
-const JUDGE_SYSTEM = "你是一个目标完成度裁判。给定一个目标和 agent 最近的输出,判断目标是否已经" +
-    "完全达成。只返回一个 JSON 对象,形如 " +
-    '{"met": true|false, "gaps": "若未达成,简述还差什么;达成则空串"}。' +
+import { listRunningBackgroundWork } from "../tool-system/builtin/background-work.js";
+/**
+ * Render the current instant for the judge: a human-readable local time plus
+ * the numeric UTC offset and IANA zone, so the judge can reason about a
+ * wall-clock deadline written into the objective (e.g. "until 12:00"). An LLM
+ * has no clock — without this line it can never tell whether a time cutoff has
+ * passed. Falls back gracefully if Intl is unavailable.
+ */
+function renderNow(now) {
+    const iso = now.toISOString(); // unambiguous UTC anchor
+    try {
+        const zone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+        // e.g. "2026-07-01 12:11:32 GMT+8"
+        const local = now.toLocaleString("sv-SE", {
+            timeZoneName: "short",
+        });
+        return `${local} (时区 ${zone}；UTC 基准 ${iso})`;
+    }
+    catch {
+        return iso;
+    }
+}
+const JUDGE_SYSTEM = "你是一个目标完成度裁判。给定一个目标、agent 最近的输出,以及当前在后台运行的任务清单," +
+    "判断目标状态。只返回一个 JSON 对象,形如 " +
+    '{"met": true|false, "waiting": true|false, "gaps": "若未达成,简述还差什么;达成则空串"}。' +
+    "三态语义:" +
+    "(1) met:true —— 目标已完全达成。" +
+    "(2) waiting:true —— 目标尚未达成,但剩下唯一要做的事就是等一个【会结束的】后台任务完成" +
+    "(如下载、视频渲染、会退出的脚本),它完成后系统会自动唤醒你继续。此时应允许停下来等。" +
+    "(3) 两者皆 false —— 目标未达成,且还有你能【主动去做】的事。" +
+    "关键:【常驻服务】(如 dev server、watch、`npm run dev`/`bun run dev` 这类永不退出的进程)" +
+    "不算‘在等的任务’——它永远在跑,目标若不依赖它就照常判断达成与否,绝不要因为它而返回 waiting。" +
+    "时间截止:若目标里写了明确的时间截止(如“到 12:00 停”“until 15:00”“干到今晚 22 点”)," +
+    "你会拿到【当前时间】(含时区),据此自行判断截止时刻是否已到、目标是否应当结束;解读截止以【当前时间】所在时区为准。" +
+    "关键——解读【相对/不完整的时间】(如只说“3点”“今晚”而没写日期):以【目标设定时间】为基准," +
+    "取其之后【最近的那个】时点。例如目标设定于 07-01 23:00、说“做到3点”,那就是 07-02 03:00;" +
+    "设定于 10:00、说“做到3点”,那就是当天 15:00(下午3点,设定后最近的3点)。" +
+    "绝不要因为“当前时间已过那个钟点”就把它顺延到第二天——只要当前时间已过【据设定时间算出的】截止时刻,就应当结束。" +
+    "(未提供【目标设定时间】时,退回仅凭当前时间按常理推断。)" +
+    "目标没有时间截止时,忽略当前时间,照常按内容判断。" +
     "不要输出任何额外文字。宁可严格:只有确信目标已完全完成时才返回 met:true。";
 /** Pull the first balanced JSON object out of possibly-prose text. */
 function extractJson(text) {
@@ -18,14 +55,43 @@ function extractJson(text) {
         if (typeof p.met !== "boolean")
             return null;
         const gaps = typeof p.gaps === "string" ? p.gaps : "";
-        return { met: p.met, gaps };
+        const waiting = typeof p.waiting === "boolean" ? p.waiting : false;
+        return { met: p.met, waiting, gaps };
     }
     catch {
         return null;
     }
 }
+/** Render the running background tasks for the judge prompt. */
+function renderBackgroundTasks(items) {
+    if (items.length === 0)
+        return "(无)";
+    const kindLabel = {
+        subagent: "后台子代理",
+        job: "后台任务",
+        shell: "后台命令",
+    };
+    return items
+        .map((i) => {
+        // A listening port strongly implies a long-lived service (dev server) —
+        // tell the judge so it doesn't classify it as a finite task to wait on.
+        const portNote = i.detectedPort != null
+            ? `(在 :${i.detectedPort} 监听端口,疑似常驻服务)`
+            : "";
+        return `- [${kindLabel[i.kind] ?? i.kind}] ${i.description}${portNote}`;
+    })
+        .join("\n");
+}
 export function createGoalStopHook(opts) {
     const { llm, log } = opts;
+    const now = opts.now ?? (() => new Date());
+    // Per-run cache: if the model emits the same final text with the same set of
+    // running background tasks twice in a row (it stalls repeating itself), the
+    // verdict can't have changed — reuse it instead of paying for another judge
+    // call. Keyed on (finalText + rendered task list); a `met` verdict is never
+    // cached (it ends the run anyway and triggers the onMet side-effect).
+    let lastKey = null;
+    let lastResult = null;
     return async (ctx) => {
         // Accept string or GoalConfig from either the override or ctx.data.goal.
         const g = normalizeGoal(opts.goal ?? ctx.data.goal);
@@ -33,8 +99,56 @@ export function createGoalStopHook(opts) {
         if (!g)
             return {};
         const goal = g.objective;
+        const sessionId = ctx.data.sessionId;
+        // Re-check the LIVE goal each turn. `goal` above is frozen at hook creation,
+        // so a goal cleared mid-run (清除) on a long-lived run (automation / resumed)
+        // would keep being judged off the stale copy — Engine.clearGoal's unregister
+        // only reaches the single in-flight hook it tracks. If the persisted goal is
+        // gone, allow the stop now and skip the judge call entirely.
+        if (opts.isGoalActive &&
+            typeof sessionId === "string" &&
+            sessionId.length > 0 &&
+            !opts.isGoalActive(sessionId)) {
+            log.info("goal_stop.cleared_midrun", { cat: "goal" });
+            return {};
+        }
+        // Background work is no longer a mechanical short-circuit. Instead we list
+        // what's running and let the judge decide (s-mqe0ox7n-a8d11c26 bug): a
+        // boolean "has background work" can't tell a finite download/render (→ wait
+        // for the wakeup, allow stop) from a never-ending dev server (→ judge the
+        // goal normally). The judge sees each task's kind + command and returns a
+        // three-state verdict; `waiting:true` allows the stop without pushing.
+        const runningWork = typeof sessionId === "string" && sessionId.length > 0
+            ? listRunningBackgroundWork(sessionId)
+            : [];
+        const backgroundTasks = renderBackgroundTasks(runningWork);
         const finalText = typeof ctx.data.finalText === "string" ? ctx.data.finalText : "";
+        const nowDate = now();
+        const nowLabel = renderNow(nowDate);
+        // The goal-set instant (when the user last set/replaced this goal), used by
+        // the judge to anchor relative deadlines ("做到3点"). renderNow renders any
+        // instant, not just "now". Absent for pre-field goals → line omitted, judge
+        // falls back to reasoning from current time alone.
+        const setAtLabel = typeof g.setAtMs === "number" && g.setAtMs > 0
+            ? renderNow(new Date(g.setAtMs))
+            : undefined;
+        // Verdict cache key: same goal + same final text + same running tasks +
+        // same MINUTE ⇒ verdict unchanged; skip the LLM call and replay it.
+        // The minute bucket is in the key on purpose: if a goal has a wall-clock
+        // deadline and the model stalls repeating identical output, a time-blind
+        // key would replay a stale "not met" forever and the deadline would never
+        // fire. Bucketing to the minute still absorbs same-minute repeats while
+        // re-judging once the clock advances past a cutoff.
+        const minuteBucket = nowDate.toISOString().slice(0, 16);
+        const cacheKey = `${goal} ${finalText} ${backgroundTasks} ${minuteBucket}`;
+        if (lastKey === cacheKey && lastResult) {
+            log.info("goal_stop.verdict_cache_hit", { cat: "goal" });
+            return lastResult;
+        }
+        const signal = ctx.data.signal;
         let verdict = null;
+        let respText = "";
+        let respStopReason;
         try {
             const resp = await llm.createMessage({
                 systemPrompt: JUDGE_SYSTEM,
@@ -42,16 +156,36 @@ export function createGoalStopHook(opts) {
                     {
                         role: "user",
                         content: `目标:\n${goal}\n\n` +
+                            (setAtLabel ? `目标设定于:${setAtLabel}\n\n` : "") +
+                            `当前时间:${nowLabel}\n\n` +
                             `agent 最近的输出:\n${finalText || "(无文本输出)"}\n\n` +
-                            "目标完全达成了吗?按要求只返回 JSON。",
+                            `当前在后台运行的任务:\n${backgroundTasks}\n\n` +
+                            "判断目标状态,按要求只返回 JSON(met / waiting / gaps)。",
                     },
                 ],
                 stream: false,
-                maxTokens: 400,
+                // Headroom, not 400. A reasoning-capable aux model (e.g. DeepSeek V4)
+                // shares this budget between hidden reasoning tokens and the visible
+                // JSON. At 400 the reasoning ate the budget and the JSON got truncated
+                // (stopReason:"length") → extractJson returned null → the P0
+                // "unparseable" branch kept the run going forever, so a wall-clock
+                // deadline in the goal never fired. `reasoning:off` below is the real
+                // fix; 1500 is the belt-and-suspenders for models that ignore it.
+                maxTokens: 1500,
                 // Auxiliary sub-call — keep it out of the session cost/turn stats.
                 recordUsage: false,
+                // Turn thinking OFF. The judge only emits a tiny JSON verdict; reasoning
+                // tokens are pure waste here and (per above) actively caused truncation.
+                // On DeepSeek V4 / Anthropic-budget this genuinely disables thinking; on
+                // effort/adaptive/unknown models the field is a no-op (never a 400), so
+                // it is safe to always send — matching the aux summary/memory calls.
+                reasoning: { mode: "off" },
+                // Let a user Stop mid-judge abort this call rather than block on it.
+                signal,
             });
-            verdict = extractJson(resp.text ?? "");
+            respText = resp.text ?? "";
+            respStopReason = resp.stopReason;
+            verdict = extractJson(respText);
         }
         catch (err) {
             log.warn("goal_stop.judge_failed", {
@@ -70,7 +204,15 @@ export function createGoalStopHook(opts) {
             };
         }
         if (!verdict) {
-            log.warn("goal_stop.unparseable", { cat: "goal" });
+            // Record enough to diagnose WHY the verdict didn't parse without having to
+            // reproduce it live: stopReason ("length" ⇒ the reply was truncated, the
+            // most common cause) plus a short preview of the raw text. Preview is
+            // capped so a runaway reply can't bloat the log line.
+            log.warn("goal_stop.unparseable", {
+                cat: "goal",
+                stopReason: respStopReason,
+                preview: respText.slice(0, 200),
+            });
             // P0: same as the throw path — unparseable judge output must not be
             // treated as "done". Continue instead of silently allowing the stop.
             return {
@@ -82,12 +224,44 @@ export function createGoalStopHook(opts) {
         }
         if (verdict.met) {
             log.info("goal_stop.met", { cat: "goal" });
+            // Clear the persisted active goal (engine side-effect) so a later bare
+            // send doesn't re-inherit a satisfied goal. Isolated so a throwing
+            // callback can't block the stop.
+            try {
+                opts.onMet?.();
+            }
+            catch {
+                /* ignore */
+            }
             // Surface the verdict so the loop can emit a goal_progress(met) event.
             return { data: { goalVerdict: { met: true, gaps: "" } } };
         }
+        // waiting: goal not met, but the only remaining work is a FINITE background
+        // task that will wake the session on completion. Allow the stop (no push) —
+        // forcing continueSession here is exactly the busy-loop bug. The completion
+        // notification wakes the idle session (server maybeWakeIdleSession) and the
+        // goal is re-judged on that woken turn.
+        //
+        // GUARD: only honor `waiting` when real background work is actually running.
+        // If the judge hallucinates waiting:true with an empty task list, allowing
+        // the stop would silently abandon the goal — NOTHING would ever wake the
+        // session (no notification to drain). So a baseless `waiting` falls through
+        // to not_met (continueSession), where the model is nudged to keep working.
+        if (verdict.waiting && runningWork.length > 0) {
+            log.info("goal_stop.waiting_on_background_task", { cat: "goal", sessionId });
+            const result = {
+                data: { goalVerdict: { met: false, gaps: verdict.gaps.trim() } },
+            };
+            lastKey = cacheKey;
+            lastResult = result;
+            return result;
+        }
+        if (verdict.waiting) {
+            log.warn("goal_stop.waiting_without_background_work", { cat: "goal", sessionId });
+        }
         log.info("goal_stop.not_met", { cat: "goal", gaps: verdict.gaps });
         const gaps = verdict.gaps.trim();
-        return {
+        const result = {
             continueSession: true,
             messages: [
                 gaps
@@ -98,5 +272,8 @@ export function createGoalStopHook(opts) {
             // with this `gaps` instead of re-running the judge.
             data: { goalVerdict: { met: false, gaps } },
         };
+        lastKey = cacheKey;
+        lastResult = result;
+        return result;
     };
 }

package/dist/hooks/registry.d.ts

@@ -13,6 +13,14 @@ export declare class HookRegistry {
      * the handler isn't registered for that event.
      */
     unregister(eventName: HookEventName, handler: HookHandler): void;
+    /**
+     * Remove every registered hook whose `name` starts with `prefix`, across all
+     * events. Used to drop a whole source's hooks by naming convention (e.g.
+     * `plugin:` handlers) when that source is reloaded mid-session — so disabling
+     * a plugin stops its hooks on the live session, not just on new sessions.
+     * Returns the number removed.
+     */
+    removeByNamePrefix(prefix: string): number;
     emit(eventName: HookEventName, data?: Record<string, unknown>): Promise<HookResult>;
     hasHooks(eventName: HookEventName): boolean;
     clear(eventName?: HookEventName): void;

package/dist/hooks/registry.js

@@ -41,6 +41,25 @@ export class HookRegistry {
         else
             this.hooks.set(eventName, next);
     }
+    /**
+     * Remove every registered hook whose `name` starts with `prefix`, across all
+     * events. Used to drop a whole source's hooks by naming convention (e.g.
+     * `plugin:` handlers) when that source is reloaded mid-session — so disabling
+     * a plugin stops its hooks on the live session, not just on new sessions.
+     * Returns the number removed.
+     */
+    removeByNamePrefix(prefix) {
+        let removed = 0;
+        for (const [event, list] of this.hooks) {
+            const next = list.filter((h) => !(h.name && h.name.startsWith(prefix)));
+            removed += list.length - next.length;
+            if (next.length === 0)
+                this.hooks.delete(event);
+            else
+                this.hooks.set(event, next);
+        }
+        return removed;
+    }
     async emit(eventName, data = {}) {
         const handlers = this.hooks.get(eventName);
         if (!handlers?.length)

package/dist/hooks/shell-runner.js

@@ -30,6 +30,7 @@
  */
 import { spawn } from "node:child_process";
 import { MAX_HOOK_OUTPUT_BYTES, validateHookResult } from "./hook-output.js";
+import { killChildTree } from "../runtime/spawn-common.js";
 // Re-export so existing call sites that import { validateHookResult } from
 // "./shell-runner.js" (e.g. tests) keep compiling.
 export { validateHookResult };
@@ -72,22 +73,9 @@ export async function runShellHook(config, ctx) {
         const timer = setTimeout(() => {
             // eslint-disable-next-line no-console
             console.warn(`[hooks] ${config.event} hook timed out after ${timeoutMs}ms: ${config.command}`);
-            try {
-                child.kill("SIGTERM");
-                // SIGKILL fallback if the process ignores SIGTERM. Short delay so
-                // a graceful-shutdown handler in the child has a moment to flush.
-                setTimeout(() => {
-                    try {
-                        child.kill("SIGKILL");
-                    }
-                    catch {
-                        /* already exited */
-                    }
-                }, 1000);
-            }
-            catch {
-                /* already exited */
-            }
+            // win32: taskkill /T reaps the shell tree; POSIX: SIGTERM → grace →
+            // SIGKILL (a graceful handler gets a moment to flush). See killChildTree.
+            killChildTree(child, 1000);
             settle({});
         }, timeoutMs);
         // Byte cap: once we cross MAX_HOOK_OUTPUT_BYTES on stdout, kill the
@@ -96,6 +84,7 @@ export async function runShellHook(config, ctx) {
         // its output. Stderr is also capped but treated more leniently —
         // truncated, not fatal — since stderr is just diagnostic chatter.
         let stdoutBytes = 0;
+        let stderrBytes = 0;
         let stdoutCapped = false;
         let stderrCapped = false;
         child.stdout?.on("data", (chunk) => {
@@ -105,17 +94,17 @@ export async function runShellHook(config, ctx) {
                     stdoutCapped = true;
                     // eslint-disable-next-line no-console
                     console.warn(`[hooks] ${config.event} hook stdout exceeded ${MAX_HOOK_OUTPUT_BYTES} bytes — killing`);
-                    try {
-                        child.kill("SIGTERM");
-                    }
-                    catch { /* already exited */ }
+                    killChildTree(child, 1000);
                 }
                 return;
             }
             stdout += chunk.toString("utf8");
         });
         child.stderr?.on("data", (chunk) => {
-            if (stderr.length + chunk.length > MAX_HOOK_OUTPUT_BYTES) {
+            // Count raw bytes (not decoded string length) so multibyte UTF-8 output
+            // can't slip past the cap — matches the stdout accounting above.
+            stderrBytes += chunk.length;
+            if (stderrBytes > MAX_HOOK_OUTPUT_BYTES) {
                 if (!stderrCapped) {
                     stderrCapped = true;
                     stderr += "\n…[stderr truncated]";

package/dist/index.d.ts

@@ -3,11 +3,13 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.5.0-rc.0";
+export declare const VERSION = "0.5.0-rc.2";
 export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
-export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/engine.js";
+export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/types.js";
+export { resolveLLMConfigForTag } from "./engine/resolve-llm-config.js";
+export { resolveAuxKey } from "./engine/aux-key.js";
 export { parseAgentDefinition, serializeAgentDefinition, type AgentDefinition, } from "./agent/agent-definition.js";
 export { AgentDefinitionRegistry, type AgentSourceDir, } from "./agent/agent-definition-registry.js";
 export type { CostStateStore, CostStateSnapshot } from "./engine/cost-store.js";
@@ -20,6 +22,7 @@ export { createLLMClient, registerProvider } from "./llm/client-factory.js";
 export { AnthropicClient } from "./llm/providers/anthropic.js";
 export { OpenAIClient } from "./llm/providers/openai.js";
 export { ModelPool, type ModelEntry } from "./llm/model-pool.js";
+export { modelEntriesFromConnections } from "./engine/model-connections-pool.js";
 export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend } from "./tool-system/permission.js";
@@ -27,7 +30,7 @@ export type { ApprovalBackend } from "./tool-system/permission.js";
 export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
 export type { BuiltinTool, BuiltinToolFn } from "./tool-system/builtin/index.js";
 export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
-export { MCPManager } from "./tool-system/mcp-manager.js";
+export { MCPManager, buildHttpHeaders, buildStdioEnv } from "./tool-system/mcp-manager.js";
 export type { AskUserFn } from "./tool-system/builtin/ask-user.js";
 export type { Task, TaskStatus } from "./tool-system/builtin/task.js";
 export { HookRegistry } from "./hooks/registry.js";
@@ -42,10 +45,12 @@ export { Methods, ErrorCodes, type RpcMessage, type RunResult, } from "./protoco
 export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
+export { latestUndoTarget, earliestSnapshotsPerFile, latestTurnUndoTargets, latestRedoTargets, } from "./session/undo-target.js";
+export { diffLines, renderDiffPreview, type DiffLine } from "./session/simple-diff.js";
 export { MemoryManager } from "./session/memory.js";
 export type { MemoryEntry, MemoryScope } from "./session/memory.js";
 export { runDreamConsolidation, type DreamConsolidationInput, type DreamConsolidationResult, } from "./services/dream-consolidation.js";
-export type { FileSnapshot } from "./session/file-history.js";
+export type { FileSnapshot, RedoRecord } from "./session/file-history.js";
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
 export { scanInstructions, combineInstructions } from "./prompt/instruction-scanner.js";
@@ -63,18 +68,23 @@ export type { SkillDefinition } from "./skills/index.js";
 export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
 export type { CapabilityServiceDeps, CapabilityDescriptor, CapabilityControl, } from "./capability-control/index.js";
 export { readInstalledPlugins } from "./plugins/installedPlugins.js";
+export { computeEffectiveDisabledLists, type EffectiveDisabledLists, } from "./capability-control/disabled-lists.js";
 export type { InstalledPluginsV2 } from "./plugins/types.js";
 export { installPluginFromPath } from "./plugins/installer/install.js";
 export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
 export { parseSource, type ParsedSource } from "./plugins/installer/parseSource.js";
 export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
 export { CodexPluginManifest, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
 export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+export { listPluginHooks, pluginHookKey, type PluginHookEntry } from "./plugins/loadPluginHooks.js";
+export { describePluginContent, type PluginContentInventory } from "./plugins/pluginContent.js";
 export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
 export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
 export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
 export { listInstalledPlugins, type PluginListRow } from "./plugins/installer/list.js";
 export { updatePluginByName, type UpdateResult } from "./plugins/installer/update.js";
+export { checkPluginUpdate, type UpdateCheck } from "./plugins/installer/checkUpdate.js";
 export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
 export type { ModelPreset } from "./arena/model-presets.js";
@@ -94,21 +104,30 @@ export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueu
 export { defineProduct, type ProductDefinition, type ProductPreset, type ProductAdapter, type ProductContract, type CustomTool, type ProductRuntimeOptions, type ProductInstance, } from "./product/index.js";
 export { logger } from "./logging/logger.js";
 export { SettingsManager, type SettingsScope } from "./settings/manager.js";
+export { migrateConfig, configVersionOf, CURRENT_CONFIG_VERSION, type MigrationStep, } from "./settings/migrate-config.js";
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
+export { settingsJsonSchema, writeSettingsSchemaFile } from "./settings/schema-export.js";
 export { personalizationFrom, type PersonalizationConfig } from "./settings/personalization.js";
+export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
+/** @internal Shared with the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, type AttributedCounter, type ChannelEntry, } from "./state.js";
+/** @internal Shared primitives for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
 export { env } from "./utils/env.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, } from "./utils/exec.js";
 export { gte } from "./utils/semver.js";
+export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
 export { logForDebugging } from "./utils/debug.js";
-export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, isRunningOnHomespace, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, isInProtectedNamespace, } from "./utils/envUtils.js";
+export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
 export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
 export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
+export { classifyBashLines, type BashLineKind, type ClassifiedBashLine, } from "./tool-system/builtin/bash-output-style.js";
 export { formatDuration, formatTokens } from "./utils/format.js";
 export { getTheme, type Theme, type ThemeName, type ThemeSetting, } from "./utils/theme.js";
 export { resolveThemeSetting, type SystemTheme } from "./utils/systemTheme.js";
+/** @internal Host-lifecycle logging hooks for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { rotateLogs } from "./logging/logger.js";
 export { recordUIEvent } from "./logging/session-recorder.js";
 export { CostTracker, costTracker, installCostTracking } from "./cost-tracker.js";
@@ -116,20 +135,39 @@ export { NOOP_COLORIZER, type Colorizer } from "./colorizer.js";
 export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveArenaSettingsByKeys, type OnboardingResult, } from "./onboarding.js";
 export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, type UpdateInfo, } from "./updater.js";
 export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
+export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, type ReviewDimension, type ReviewPromptOptions, } from "./review/review-prompt.js";
+/**
+ * @internal Exports below are consumed by the in-repo TUI/desktop hosts, not
+ * part of the stable `@cjhyy/code-shell-core` SDK surface. They may change or
+ * move to a `/tui` subpath without a major bump. External SDK users: prefer the
+ * primary Engine/Protocol API above.
+ */
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig, type SandboxConfig, } from "./tool-system/sandbox/index.js";
 export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
 export type { BackgroundAgentCompletedEvent } from "./types.js";
 export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronJob, type CronPermissionLevel, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
+export * from "./cc-orchestrator/index.js";
+export { checkQuota, formatQuota } from "./quota/index.js";
+export { resolveQuotaCredentials } from "./quota/credentials.js";
+export type { QuotaResult, ProviderQuota, QuotaWindow, QuotaCredentials } from "./quota/types.js";
 export { asyncAgentRegistry, type AsyncAgentEntry, } from "./tool-system/builtin/agent-registry.js";
+export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
+export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
+export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
+export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";
+export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, type CatalogEntry, } from "./model-catalog/index.js";
+/** @internal Extended protocol surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { createInProcessClient } from "./protocol/helpers.js";
 export type { ProtocolModelEntry } from "./protocol/types.js";
+/** @internal Extended Arena surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, type OutputSink, } from "./arena/render/terminal.js";
 export { formatArenaResultForSession } from "./arena/render/session.js";
 export { installPlugin, uninstallPlugin, listInstalled, } from "./plugins/pluginInstaller.js";
-export { addMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
+export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
 export { parseMarketplaceInput, deriveMarketplaceName, } from "./plugins/parseMarketplaceInput.js";
 export { scanPluginCommands, type PluginCommand, } from "./plugins/pluginCommandsLoader.js";
+/** @internal Extended LLM surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { type CachedModel, defaultCacheDir, } from "./llm/model-cache.js";
 export { fetchModelList, type FetchResult, } from "./llm/model-fetcher.js";
 export { sanitizeApiKey, hasNonAsciiPrintable, } from "./llm/api-key-sanitize.js";
@@ -139,4 +177,9 @@ export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/
 export { REASONING_EFFORTS, type ReasoningSetting, } from "./llm/reasoning-setting.js";
 export { type ProviderConfig } from "./llm/provider-catalog.js";
 export { syncOpenRouterCatalog, getOpenRouterSnapshot, } from "./data/openrouter-sync.js";
+/** @internal Extended type surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo, } from "./types.js";
+export { resolveExternalAgentConfig } from "./external-agents/config.js";
+export type { ExternalAgentMode, ExternalAgentsSettings, ResolvedExternalAgentsConfig, ResolvedClaudeCodeSettings, ResolvedCodexSettings, } from "./external-agents/types.js";
+export { flattenAxTree, renderElementList, cleanPageText, CONTENT_CHAR_CAP, buildExtractLinksScript, EXTRACT_LINK_CAP, } from "./tool-system/browser-bridge.js";
+export type { BrowserBridge, BrowserElement, BrowserSnapshot, BrowserResult, BrowserContent, BrowserExtract, BrowserLink, BrowserImage, BrowserVideo, BrowserImageData, BrowserTab, AXNode, } from "./tool-system/browser-bridge.js";