@cjhyy/code-shell-core 0.6.0-rc.1 → 0.6.0-rc.10

package/dist/index.d.ts

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.5.0-rc.2";
+export declare const VERSION = "0.6.0-rc.8";
 export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
@@ -116,7 +116,7 @@ export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, ge
 export { env } from "./utils/env.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
-export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, } from "./utils/exec.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
 export { gte } from "./utils/semver.js";
 export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
 export { logForDebugging } from "./utils/debug.js";
@@ -134,7 +134,7 @@ export { CostTracker, costTracker, installCostTracking } from "./cost-tracker.js
 export { NOOP_COLORIZER, type Colorizer } from "./colorizer.js";
 export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveArenaSettingsByKeys, type OnboardingResult, } from "./onboarding.js";
 export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, type UpdateInfo, } from "./updater.js";
-export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
+export { isGitRepo, resolveProjectRoot, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
 export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, type ReviewDimension, type ReviewPromptOptions, } from "./review/review-prompt.js";
 /**
  * @internal Exports below are consumed by the in-repo TUI/desktop hosts, not
@@ -153,6 +153,7 @@ export { resolveQuotaCredentials } from "./quota/credentials.js";
 export type { QuotaResult, ProviderQuota, QuotaWindow, QuotaCredentials } from "./quota/types.js";
 export { asyncAgentRegistry, type AsyncAgentEntry, } from "./tool-system/builtin/agent-registry.js";
 export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
+export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
 export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
 export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
 export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export const VERSION = "0.5.0-rc.2";
+export const VERSION = "0.6.0-rc.8";
 // ─── Exceptions ──────────────────────────────────────────────────
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 // ─── Engine (primary API) ────────────────────────────────────────
@@ -136,7 +136,7 @@ export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, ge
 export { env } from "./utils/env.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
-export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, } from "./utils/exec.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
 export { gte } from "./utils/semver.js";
 // Cross-process file lock (proper-lockfile via createRequire, ESM-safe). Used by
 // RunLock / CronStore internally; exported so other writers of shared files
@@ -163,7 +163,7 @@ export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveAr
 // ─── Updater ─────────────────────────────────────────────────────
 export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, } from "./updater.js";
 // ─── Git Utilities ───────────────────────────────────────────────
-export { isGitRepo, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
+export { isGitRepo, resolveProjectRoot, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
 // ─── Code review (TODO 7.3) ─────────────────────────────────────
 export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, } from "./review/review-prompt.js";
 // ─── Tool-system (extended for TUI) ─────────────────────────────
@@ -187,6 +187,7 @@ export { checkQuota, formatQuota } from "./quota/index.js";
 export { resolveQuotaCredentials } from "./quota/credentials.js";
 export { asyncAgentRegistry, } from "./tool-system/builtin/agent-registry.js";
 export { backgroundShellManager, BackgroundShellManager, } from "./runtime/background-shell.js";
+export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
 export { getImageProvider, DEFAULT_IMAGE_MODEL, } from "./tool-system/builtin/image-providers.js";
 // ─── Speech-to-text (voice input / 听写) ────────────────────────
 export { transcribe, } from "./stt/transcribe.js";

package/dist/llm/capabilities/rules.js

@@ -190,7 +190,7 @@ export const RULES = [
         // Most modern frontier models on OpenRouter are multimodal; flag the
         // big families explicitly. The catch-all below stays vision=false so
         // older/text-only routes don't get a green checkmark they don't earn.
-        match: /^(?:openai\/(?:gpt-4o|gpt-5|o[1-9])|anthropic\/claude-(?:3|4|opus|sonnet|haiku)|google\/gemini-[2-9]|x-ai\/grok-[4-9]|qwen\/qwen-?vl|meta\/llama-(?:3\.2|4))/i,
+        match: /^~?(?:openai\/(?:gpt-4o|gpt-5|o[1-9])|anthropic\/claude-(?:3|4|opus|sonnet|haiku|fable)|google\/gemini-(?:[2-9]|pro)|x-ai\/grok-[4-9]|qwen\/qwen-?vl|meta\/llama-(?:3\.2|4))/i,
         capability: {
             supportsVision: true,
             reasoning: { kind: "openrouter-reasoning" },

package/dist/llm/model-pool.d.ts

@@ -21,6 +21,11 @@ export interface ModelEntry {
     provider: string;
     /** Full model path: "anthropic/claude-opus-4-6" */
     model: string;
+    /**
+     * Catalog/provider kind used by capability rules. This can differ from
+     * `provider`, which only selects the client protocol family.
+     */
+    providerKind?: string;
     baseUrl?: string;
     apiKey?: string;
     /** Whether the catalog template requires a key (default true; false = local/
@@ -79,6 +84,8 @@ export declare class ModelPool {
      * The first entry (or the one matching `defaultKey`) becomes active.
      */
     constructor(entries?: ModelEntry[], defaultKey?: string);
+    /** Clear all registered models and active selection. */
+    clear(): void;
     /** Register a model at runtime. */
     register(entry: ModelEntry): void;
     /** Fill in known defaults (e.g. context window for DeepSeek V4) when the entry doesn't specify them. */

package/dist/llm/model-pool.js

@@ -142,6 +142,11 @@ export class ModelPool {
             this.activeKey = entries[0].key;
         }
     }
+    /** Clear all registered models and active selection. */
+    clear() {
+        this.models.clear();
+        this.activeKey = undefined;
+    }
     /** Register a model at runtime. */
     register(entry) {
         this.models.set(entry.key, this.withBuiltinDefaults(entry));
@@ -216,6 +221,7 @@ export class ModelPool {
                 return "anthropic";
             return "openai";
         };
+        const providerKind = entry.providerKind ?? fromCat?.kind;
         return {
             provider: entry.provider ||
                 kindToClientProvider(fromCat?.kind) ||
@@ -228,6 +234,7 @@ export class ModelPool {
             // instead of fabricating 8192, which silently truncates long outputs and
             // masks the real per-model cap.
             maxTokens: entry.maxOutputTokens,
+            ...(entry.maxContextTokens !== undefined ? { maxContextTokens: entry.maxContextTokens } : {}),
             // reasoning: entry overrides catalog. No base fallback — see class doc.
             ...(entry.reasoning ?? fromCat?.reasoning
                 ? { reasoning: entry.reasoning ?? fromCat?.reasoning }
@@ -244,7 +251,7 @@ export class ModelPool {
             ...(entry.reasoningSummary ? { reasoningSummary: entry.reasoningSummary } : {}),
             // Carry the catalog kind through so the capability layer can pick
             // per-(kind, model) request-shape rules.
-            ...(fromCat?.kind ? { providerKind: fromCat.kind } : {}),
+            ...(providerKind ? { providerKind } : {}),
             ...(entry.extraBody && Object.keys(entry.extraBody).length > 0
                 ? { extraBody: entry.extraBody }
                 : {}),

package/dist/model-catalog/builtin.js

@@ -8,6 +8,7 @@
  * ~/.code-shell/model-catalog.user.json) — no UI / adapter changes, as long as
  * its adapterKind points at an already-wired adapter.
  */
+import { capabilitiesFor } from "../llm/capabilities/index.js";
 import { paramSpecsFromCapability } from "../llm/capabilities/param-specs.js";
 /**
  * Build a text model preset, projecting its params from the capability layer
@@ -15,11 +16,13 @@ import { paramSpecsFromCapability } from "../llm/capabilities/param-specs.js";
  * when the model has none, matching the "absent → no knobs" contract.
  */
 function textPreset(kind, value, label, ctx) {
+    const capability = capabilitiesFor(kind, value);
     const params = paramSpecsFromCapability(kind, value);
     return {
         value,
         ...(label ? { label } : {}),
         ...(ctx !== undefined ? { maxContextTokens: ctx } : {}),
+        supportsVision: capability.supportsVision,
         ...(params.length > 0 ? { params } : {}),
     };
 }
@@ -97,14 +100,16 @@ const ZHIPU_PARAMS = [
 ];
 /** Zhipu GLM preset — shared ZHIPU_PARAMS, with per-model context window. */
 function glmPreset(value, label, ctx) {
-    return { value, label, maxContextTokens: ctx, params: ZHIPU_PARAMS };
+    return { value, label, maxContextTokens: ctx, supportsVision: false, params: ZHIPU_PARAMS };
 }
 /** OpenRouter preset with explicit params (no capability-layer projection). */
 function orPreset(value, label, params, ctx) {
+    const capability = capabilitiesFor("openrouter", value);
     return {
         value,
         label,
         ...(ctx !== undefined ? { maxContextTokens: ctx } : {}),
+        supportsVision: capability.supportsVision,
         ...(params && params.length > 0 ? { params } : {}),
     };
 }

package/dist/preset/index.d.ts

@@ -49,6 +49,10 @@ export declare function registerPreset(preset: AgentPreset): void;
 /** List all available preset names (built-in + custom). */
 export declare function listPresetNames(): string[];
 export declare function resolveAgentPreset(name?: string): AgentPreset;
+export interface BuildPresetSystemPromptOptions {
+    activeToolNames?: readonly string[];
+    platform?: NodeJS.Platform;
+}
 /**
  * Build the full system prompt for a preset by loading and joining its sections.
  *
@@ -58,7 +62,7 @@ export declare function resolveAgentPreset(name?: string): AgentPreset;
  * (tools + usage instructions disappear together). Omit `activeToolNames` to
  * include all sections (e.g. when assembling a generic/preview prompt).
  */
-export declare function buildPresetSystemPrompt(preset: AgentPreset, activeToolNames?: readonly string[]): string;
+export declare function buildPresetSystemPrompt(preset: AgentPreset, optionsOrActiveToolNames?: BuildPresetSystemPromptOptions | readonly string[]): string;
 export declare function resolveBuiltinToolNames(options?: {
     preset?: string;
     enabledBuiltinTools?: string[];

package/dist/preset/index.js

@@ -232,6 +232,19 @@ const BROWSER_SECTION_TOOLS = ["browser_observe", "browser_act", "browser_naviga
 const TOOL_GATED_SECTIONS = {
     browser: BROWSER_SECTION_TOOLS,
 };
+function isActiveToolNamesList(value) {
+    return Array.isArray(value);
+}
+function platformShellGuidance(platform) {
+    if (platform !== "win32")
+        return "";
+    return [
+        "# Windows Shell Guidance",
+        "- On Windows, Bash uses Git Bash when it is available. Prefer Bash for ordinary shell commands, git operations, package-manager commands, tests, and POSIX-style command lines.",
+        "- Do not choose PowerShell merely because the OS is Windows. Use PowerShell only when the user explicitly asks for it or the task requires PowerShell-specific cmdlets, Windows APIs, registry access, or `.ps1` behavior.",
+        "- When writing Bash commands on Windows, use Git Bash paths such as `/d/github/project` instead of PowerShell-only syntax or raw `D:\\...` paths inside `cd` commands.",
+    ].join("\n");
+}
 /**
  * Build the full system prompt for a preset by loading and joining its sections.
  *
@@ -241,8 +254,12 @@ const TOOL_GATED_SECTIONS = {
  * (tools + usage instructions disappear together). Omit `activeToolNames` to
  * include all sections (e.g. when assembling a generic/preview prompt).
  */
-export function buildPresetSystemPrompt(preset, activeToolNames) {
+export function buildPresetSystemPrompt(preset, optionsOrActiveToolNames) {
     let sections = preset.promptSections;
+    const options = isActiveToolNamesList(optionsOrActiveToolNames)
+        ? { activeToolNames: optionsOrActiveToolNames }
+        : (optionsOrActiveToolNames ?? {});
+    const activeToolNames = options.activeToolNames;
     if (activeToolNames) {
         const active = new Set(activeToolNames);
         sections = sections.filter((s) => {
@@ -250,7 +267,9 @@ export function buildPresetSystemPrompt(preset, activeToolNames) {
             return !gate || gate.some((t) => active.has(t));
         });
     }
-    return loadSections(sections);
+    return [loadSections(sections), platformShellGuidance(options.platform ?? process.platform)]
+        .filter(Boolean)
+        .join("\n\n");
 }
 export function resolveBuiltinToolNames(options) {
     const preset = resolveAgentPreset(options?.preset);

package/dist/prompt/composer.d.ts

@@ -41,6 +41,10 @@ export interface ComposerOptions {
      * dispatch gate.
      */
     skillAllowlist?: string[];
+    /** Volatile goal state used only in the trailing dynamic-context message. */
+    goalToolState?: {
+        hasGoal: boolean;
+    };
     /**
      * settings.memories.maxAge (days). When > 0, memories whose file mtime is
      * older than this are dropped from the injected memory context (TODO 8.1).
@@ -79,6 +83,7 @@ export declare class PromptComposer {
      * breakpoint — a change here never re-bills the history prefix.
      */
     buildDynamicContextMessage(): Promise<Message | null>;
+    private buildGoalToolContext;
     invalidateCache(sectionName?: string): void;
     private getSections;
     private getInstructions;

package/dist/prompt/composer.js

@@ -113,7 +113,8 @@ export class PromptComposer {
         // prefix — so a memory change (extraction / recall usage++ / approve) never
         // re-bills the cached prefix. See buildUserContextMessage for the rationale.
         const memoryContext = this.getMemoryContext();
-        const parts = [skillsListing, gitStatus, memoryContext].filter(Boolean);
+        const goalToolContext = this.buildGoalToolContext();
+        const parts = [skillsListing, gitStatus, memoryContext, goalToolContext].filter(Boolean);
         if (parts.length === 0)
             return null;
         return {
@@ -121,6 +122,13 @@ export class PromptComposer {
             content: `<system-reminder>\n${parts.join("\n\n")}\n</system-reminder>`,
         };
     }
+    buildGoalToolContext() {
+        if (!this.options.goalToolState)
+            return "";
+        return this.options.goalToolState.hasGoal
+            ? "当前存在 active goal。只有在目标完全完成时才可调用 complete_goal；只有用户明确要求取消/停止/放弃该目标时才可调用 cancel_goal。"
+            : "当前没有 active goal。不要调用 complete_goal/cancel_goal；如果误调用，系统会拒绝。";
+    }
     invalidateCache(sectionName) {
         this.sectionCache.invalidate(sectionName);
         if (!sectionName) {
@@ -179,7 +187,7 @@ export class PromptComposer {
             cacheBreak: true,
             compute: () => {
                 const preset = this.options.preset ?? resolveAgentPreset();
-                return buildPresetSystemPrompt(preset, activeToolNames);
+                return buildPresetSystemPrompt(preset, { activeToolNames, platform: process.platform });
             },
         });
         // Skills listing is intentionally NOT a system section: it changes when a

package/dist/prompt/sections/base.md

@@ -31,6 +31,7 @@ When you encounter an obstacle, do not use destructive actions as a shortcut to
   - To search for files use Glob instead of find or ls
   - To search the content of files, use Grep instead of grep or rg
   - Reserve using the Bash exclusively for system commands and terminal operations that require shell execution.
+ - Shell choice: use Bash for ordinary shell commands, git operations, package-manager commands, test/build scripts, and POSIX-style command lines. Use PowerShell only when the user explicitly asks for it or the task requires PowerShell-specific cmdlets, Windows APIs, registry access, or `.ps1` behavior.
  - For long-lived processes that don't exit on their own — a dev server (`npm run dev`, `vite`), a watcher, a tunnel — call Bash with `run_in_background: true`. It returns a `shell_id` immediately instead of blocking until a timeout. Then use `BashOutput(shell_id)` to read its logs (e.g. to confirm it started or to see an error), `ListShells()` to see what's running, and `KillShell(shell_id)` to stop it. Never run such a command in the foreground — it will just block until it's killed. Plain one-shot commands (build, test, git) stay foreground.
  - Break down and manage multi-step work with the TodoWrite tool. Pass the complete todo list each call; rewrite it as items move pending → in_progress → completed.
  - You can call multiple tools in a single response. If you intend to call multiple tools and there are no dependencies between them, make all independent tool calls in parallel.

package/dist/protocol/chat-session-manager.d.ts

@@ -17,6 +17,7 @@ export interface ChatSessionManagerOptions {
 }
 export declare class ChatSessionManager {
     private readonly sessions;
+    readonly runtime: EngineRuntime;
     private readonly factory;
     private readonly maxSessions;
     private readonly idleTtlMs;

package/dist/protocol/chat-session-manager.js

@@ -3,11 +3,13 @@ import { backgroundShellManager } from "../runtime/background-shell.js";
 import { clearAgentOutputFiles } from "../tool-system/builtin/agent-output-file.js";
 export class ChatSessionManager {
     sessions = new Map();
+    runtime;
     factory;
     maxSessions;
     idleTtlMs;
     sweeper = null;
     constructor(opts) {
+        this.runtime = opts.runtime;
         this.factory = opts.engineFactory;
         this.maxSessions = opts.maxSessions ?? 16;
         this.idleTtlMs = opts.idleTtlMs ?? 30 * 60 * 1000;

package/dist/protocol/chat-session.d.ts

@@ -1,4 +1,5 @@
 import type { Engine, EngineResult } from "../engine/engine.js";
+import type { ModelEntry } from "../llm/model-pool.js";
 import type { StreamEvent } from "../types.js";
 export interface ChatSessionOptions {
     id: string;
@@ -17,6 +18,8 @@ export interface TurnOpts {
      *  completion notification) rather than the user's own input — persisted so
      *  the disk reader skips it as a user bubble on replay. See Engine.run. */
     injected?: boolean;
+    /** Stable id for this user-intent; forwarded to Engine.run for idempotency. */
+    clientMessageId?: string;
 }
 /**
  * One ChatSession per UI chat tab. Owns a single Engine, an AbortController
@@ -116,7 +119,7 @@ export declare class ChatSession {
      * turn is in flight so a hot switch never mutates the model under a
      * running LLM client.
      */
-    requestModelSwitch(key: string): void;
+    requestModelSwitch(key: string): ModelEntry;
     /**
      * Perform the actual model switch for this session: rotate the engine's model
      * and reset the session's cumulative usage on disk — a different model has a

package/dist/protocol/chat-session.js

@@ -126,10 +126,14 @@ export class ChatSession {
      */
     requestModelSwitch(key) {
         if (this.isBusy()) {
+            const pool = this.engine.getModelPool();
+            const entry = pool.get(key);
+            if (!entry)
+                throw new Error(`Model not found: ${key}`);
             this.pendingModel = key;
-            return;
+            return entry;
         }
-        this.applyModelSwitch(key);
+        return this.applyModelSwitch(key);
     }
     /**
      * Perform the actual model switch for this session: rotate the engine's model
@@ -140,8 +144,9 @@ export class ChatSession {
      * path and the deferred run-boundary path.
      */
     applyModelSwitch(key) {
-        this.engine.switchModel(key);
+        const entry = this.engine.switchModel(key);
         this.engine.resetSessionUsage(this.id);
+        return entry;
     }
     queueDepth() {
         return this.queue.length;
@@ -164,6 +169,7 @@ export class ChatSession {
                 onStream,
                 goal: next.opts.goal,
                 injected: next.opts.injected,
+                clientMessageId: next.opts.clientMessageId,
             });
             this.lastActivityAt = Date.now();
             next.resolve(result);

package/dist/protocol/client.d.ts

@@ -23,6 +23,7 @@ export interface AgentRunOptions {
     cwd?: string;
     sessionId?: string;
     permissionMode?: PermissionMode;
+    model?: string;
     planMode?: boolean;
 }
 export type BackgroundAgentCompletedHandler = (sessionId: string, event: BackgroundAgentCompletedEvent) => void;
@@ -84,7 +85,10 @@ export declare class AgentClient {
      * the desktop preload's steer(); without it the SDK can't reach the method
      * (request() is private) — the protocol was asymmetric after the steer merge.
      */
-    steer(sessionId: string, text: string, id?: string): Promise<void>;
+    steer(sessionId: string, text: string, id?: string, clientMessageId?: string): Promise<{
+        accepted: boolean;
+        id?: string;
+    }>;
     /**
      * Revoke a still-pending steer entry by id (before the loop consumes it).
      * Returns false when the loop already consumed it (not an error — it will

package/dist/protocol/client.js

@@ -125,8 +125,14 @@ export class AgentClient {
      * the desktop preload's steer(); without it the SDK can't reach the method
      * (request() is private) — the protocol was asymmetric after the steer merge.
      */
-    async steer(sessionId, text, id) {
-        await this.request(Methods.Steer, { sessionId, text, id });
+    async steer(sessionId, text, id, clientMessageId) {
+        const res = (await this.request(Methods.Steer, {
+            sessionId,
+            text,
+            id,
+            clientMessageId,
+        }));
+        return { accepted: res?.accepted === true, id: res?.id };
     }
     /**
      * Revoke a still-pending steer entry by id (before the loop consumes it).

package/dist/protocol/server.d.ts

@@ -180,14 +180,11 @@ export declare class AgentServer {
      */
     private requestApprovalFromClient;
     /**
-     * Ask the client to answer a question from the agent (legacy single-engine path).
-     */
-    /**
-     * Per-session AskUserQuestion for the chatManager path. Mirrors
-     * requestAskUserFromClient but resolves via the SESSION's pendingApprovals
-     * (the chatManager approve handler looks there, keyed by sessionId+requestId)
-     * and tags the notify with sessionId so the renderer routes the question to
-     * the right chat tab.
+     * Per-session AskUserQuestion for the chatManager path. Resolves via the
+     * SESSION's pendingApprovals (the chatManager approve handler looks there,
+     * keyed by sessionId+requestId) and tags the notify with sessionId so the
+     * renderer routes the question to the right chat tab. This intentionally has
+     * no wall-clock timeout; Stop/cancel drains the pending ask.
      */
     private requestAskUserForSession;
     /**
@@ -206,6 +203,11 @@ export declare class AgentServer {
      * parse into { ok, count?, error? }. Degrades to ok:false on timeout/malformed.
      */
     private requestCredentialInjectForSession;
+    /**
+     * Ask the client to answer a question from the agent (legacy single-engine
+     * path). This intentionally has no wall-clock timeout; Stop/cancel drains
+     * the pending ask.
+     */
     private requestAskUserFromClient;
     private notify;
     /**
@@ -220,11 +222,10 @@ export declare class AgentServer {
     private clearApprovalTimer;
     /**
      * Resolve all of a chat session's pending approvals as cancelled and clear
-     * the matching server-side approval timers. Used by handleCancel's
+     * any matching server-side approval timers. Used by handleCancel's
      * per-session path so a Stop while a tool is awaiting approval doesn't leave
-     * the tool hanging until APPROVAL_TIMEOUT_MS (and leak the timer). Each
-     * requestId in the session map has a same-keyed entry in this.approvalTimers
-     * (see requestAskUserForSession / makeBrowserBridge).
+     * the tool hanging. Bounded request types have same-keyed timer entries;
+     * AskUserQuestion does not.
      */
     private cancelSessionApprovals;
     private clearAllApprovalTimers;