@cjhyy/code-shell-core 0.6.0-rc.8 → 0.7.0-beta.1

package/dist/git/worktree/slug.js

@@ -0,0 +1,58 @@
+export const DEFAULT_WORKTREE_BRANCH_PREFIX = "worktree/";
+export const HISTORICAL_WORKTREE_BRANCH_PREFIX = "worktree/";
+/**
+ * Validate worktree slug to prevent path traversal attacks.
+ */
+export function validateWorktreeSlug(slug) {
+    if (slug.trim().length === 0)
+        throw new Error("Worktree slug cannot be empty");
+    if (slug.length > 64)
+        throw new Error("Worktree slug too long (max 64 chars)");
+    if (/[^a-zA-Z0-9._-]/.test(slug))
+        throw new Error("Worktree slug contains invalid characters");
+    if (slug.startsWith(".") || slug.includes(".."))
+        throw new Error("Worktree slug cannot start with '.' or contain '..'");
+}
+export function normalizeWorktreeBranchPrefix(prefix = DEFAULT_WORKTREE_BRANCH_PREFIX) {
+    const raw = (prefix ?? DEFAULT_WORKTREE_BRANCH_PREFIX).trim();
+    if (!isValidWorktreeBranchPrefix(raw)) {
+        throw new Error(`Invalid worktree branch prefix: ${prefix ?? ""}`);
+    }
+    return raw.endsWith("/") ? raw : `${raw}/`;
+}
+export function isValidWorktreeBranchPrefix(prefix) {
+    const raw = prefix.trim();
+    if (!raw)
+        return false;
+    if (raw.startsWith("/") || raw.includes("//"))
+        return false;
+    if (raw.includes("..") || raw.includes("@{"))
+        return false;
+    if (/[\x00-\x20~^:?*[\]\\]/.test(raw))
+        return false;
+    const withoutTrailingSlash = raw.endsWith("/") ? raw.slice(0, -1) : raw;
+    if (!withoutTrailingSlash)
+        return false;
+    return withoutTrailingSlash.split("/").every((part) => {
+        if (!part)
+            return false;
+        if (part.startsWith(".") || part.endsWith("."))
+            return false;
+        if (part.endsWith(".lock"))
+            return false;
+        return true;
+    });
+}
+export function applyPrefix(prefix, slug, sessionId) {
+    validateWorktreeSlug(slug);
+    return `${normalizeWorktreeBranchPrefix(prefix)}${slug}-${sessionId.slice(0, 8)}`;
+}
+export function managedBranchPrefixes(prefix) {
+    const configured = normalizeWorktreeBranchPrefix(prefix);
+    return configured === HISTORICAL_WORKTREE_BRANCH_PREFIX
+        ? [configured]
+        : [configured, HISTORICAL_WORKTREE_BRANCH_PREFIX];
+}
+export function isManagedWorktreeBranch(branch, prefix) {
+    return managedBranchPrefixes(prefix).some((candidate) => branch.startsWith(candidate));
+}

package/dist/git/worktree.d.ts

@@ -1,84 +1 @@
-/**
- * Git worktree management — create/remove isolated worktrees for agents.
- */
-import type { SandboxBackend } from "../tool-system/sandbox/index.js";
-export interface WorktreeSession {
-    originalCwd: string;
-    worktreePath: string;
-    worktreeName: string;
-    worktreeBranch: string;
-    originalBranch?: string;
-    sessionId: string;
-    createdAt: number;
-}
-/** Per-platform setup/cleanup scripts (a project's localEnvironment). */
-export interface PlatformScripts {
-    default?: string;
-    macos?: string;
-    linux?: string;
-    windows?: string;
-}
-/**
- * Pick the setup/cleanup script for the running platform, falling back to
- * `default`. Empty/whitespace-only scripts are treated as absent so a project
- * can leave a platform key blank without spawning an empty shell. `platform`
- * defaults to `process.platform` so callers usually omit it; tests pass a
- * fixed value.
- */
-export declare function selectPlatformScript(scripts: PlatformScripts | undefined, platform?: NodeJS.Platform): string | undefined;
-/**
- * Validate worktree slug to prevent path traversal attacks.
- */
-export declare function validateWorktreeSlug(slug: string): void;
-/**
- * Find the canonical git root (resolves worktree → main repo).
- */
-export declare function findGitRoot(cwd: string): string;
-/**
- * Create an isolated git worktree for an agent session.
- */
-export declare function createWorktree(cwd: string, slug: string, sessionId: string): WorktreeSession;
-export interface WorktreeSetupResult {
-    /** True if no setup script was configured for this platform (nothing ran). */
-    skipped: boolean;
-    /** True if a script ran and exited 0. */
-    ok: boolean;
-    /** Combined stdout/stderr, for surfacing to the user on failure. */
-    output: string;
-    /** Exit code when a script ran; undefined when skipped. */
-    exitCode?: number | null;
-}
-/**
- * Run a project's `localEnvironment.setupScripts` once, in the freshly-created
- * worktree's root, right after `git worktree add`. This mirrors Codex's
- * local-environment semantics: setup belongs to the *worktree* lifecycle, not
- * the conversation — it runs when the isolated copy is born so e.g. `bun
- * install` or `cp .env.example .env` happens before the agent works there.
- *
- * Failure is non-fatal by design (Beta decision 2026-06-08, "警告但继续"): a
- * broken setup script shouldn't strand the agent outside a worktree it already
- * created. The caller surfaces `output` as a warning and proceeds. cleanup
- * scripts are intentionally NOT auto-run on exit (same decision).
- *
- * Reuses the same sandbox + env primitives as the Bash tool so the setup
- * command sees the project's `localEnvironment.env` and runs under the same
- * isolation the agent's later commands will.
- */
-export declare function runWorktreeSetup(worktreePath: string, script: string | undefined, opts?: {
-    sandbox?: SandboxBackend;
-    shellEnv?: Record<string, string>;
-    timeoutMs?: number;
-    signal?: AbortSignal;
-}): Promise<WorktreeSetupResult>;
-/**
- * Remove a worktree and optionally its branch.
- */
-export declare function removeWorktree(worktreePath: string, removeBranch?: boolean): void;
-/**
- * List active worktrees.
- */
-export declare function listWorktrees(cwd: string): Array<{
-    path: string;
-    branch: string;
-    head: string;
-}>;
+export * from "./worktree/index.js";

package/dist/git/worktree.js

@@ -1,230 +1,5 @@
-/**
- * Git worktree management — create/remove isolated worktrees for agents.
- */
-import { execFileSync } from "node:child_process";
-import { existsSync, symlinkSync, lstatSync } from "node:fs";
-import { join, resolve, dirname } from "node:path";
-import { safeSpawnShell } from "../runtime/safe-spawn.js";
-import { buildSandboxEnv, mergeShellEnv, defaultShellBinary } from "../runtime/spawn-common.js";
-import { resolveExecutable } from "../utils/exec.js";
-// git resolved via PATH×PATHEXT on Windows (.cmd/.exe shim); no-op on POSIX.
-const GIT_BIN = resolveExecutable("git");
-/**
- * Pick the setup/cleanup script for the running platform, falling back to
- * `default`. Empty/whitespace-only scripts are treated as absent so a project
- * can leave a platform key blank without spawning an empty shell. `platform`
- * defaults to `process.platform` so callers usually omit it; tests pass a
- * fixed value.
- */
-export function selectPlatformScript(scripts, platform = process.platform) {
-    if (!scripts)
-        return undefined;
-    const key = platform === "darwin" ? "macos" : platform === "win32" ? "windows" : "linux";
-    // A blank platform key shouldn't shadow a real `default` — fall through.
-    const platformScript = scripts[key]?.trim() ? scripts[key] : undefined;
-    const candidate = platformScript ?? scripts.default;
-    const trimmed = candidate?.trim();
-    return trimmed ? candidate : undefined;
-}
-/**
- * Validate worktree slug to prevent path traversal attacks.
- */
-export function validateWorktreeSlug(slug) {
-    if (slug.length > 64)
-        throw new Error("Worktree slug too long (max 64 chars)");
-    if (/[^a-zA-Z0-9._-]/.test(slug))
-        throw new Error("Worktree slug contains invalid characters");
-    if (slug.startsWith(".") || slug.includes(".."))
-        throw new Error("Worktree slug cannot start with '.' or contain '..'");
-}
-/**
- * Find the canonical git root (resolves worktree → main repo).
- */
-export function findGitRoot(cwd) {
-    return execFileSync(GIT_BIN, ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf-8", timeout: 5000 }).trim();
-}
-/**
- * Create an isolated git worktree for an agent session.
- */
-export function createWorktree(cwd, slug, sessionId) {
-    validateWorktreeSlug(slug);
-    const gitRoot = findGitRoot(cwd);
-    const branchName = `worktree/${slug}-${sessionId.slice(0, 8)}`;
-    const worktreePath = resolve(gitRoot, "..", `.worktrees/${slug}-${sessionId.slice(0, 8)}`);
-    // Get current branch for later reference
-    let originalBranch;
-    try {
-        originalBranch = execFileSync(GIT_BIN, ["branch", "--show-current"], {
-            cwd: gitRoot,
-            encoding: "utf-8",
-            timeout: 5000,
-        }).trim();
-    }
-    catch {
-        // Detached HEAD
-    }
-    // Create the worktree. Pre-fix this used a quoted command string; the argv
-    // form keeps branchName/worktreePath as literal positional arguments even
-    // if a future caller bypasses validateWorktreeSlug.
-    execFileSync(GIT_BIN, ["worktree", "add", "-b", branchName, worktreePath], {
-        cwd: gitRoot,
-        timeout: 30000,
-    });
-    // Symlink large directories to avoid disk bloat
-    symlinkLargeDirectories(gitRoot, worktreePath);
-    return {
-        originalCwd: cwd,
-        worktreePath,
-        worktreeName: slug,
-        worktreeBranch: branchName,
-        originalBranch,
-        sessionId,
-        createdAt: Date.now(),
-    };
-}
-/**
- * Run a project's `localEnvironment.setupScripts` once, in the freshly-created
- * worktree's root, right after `git worktree add`. This mirrors Codex's
- * local-environment semantics: setup belongs to the *worktree* lifecycle, not
- * the conversation — it runs when the isolated copy is born so e.g. `bun
- * install` or `cp .env.example .env` happens before the agent works there.
- *
- * Failure is non-fatal by design (Beta decision 2026-06-08, "警告但继续"): a
- * broken setup script shouldn't strand the agent outside a worktree it already
- * created. The caller surfaces `output` as a warning and proceeds. cleanup
- * scripts are intentionally NOT auto-run on exit (same decision).
- *
- * Reuses the same sandbox + env primitives as the Bash tool so the setup
- * command sees the project's `localEnvironment.env` and runs under the same
- * isolation the agent's later commands will.
- */
-export async function runWorktreeSetup(worktreePath, script, opts = {}) {
-    const trimmed = script?.trim();
-    if (!trimmed)
-        return { skipped: true, ok: true, output: "" };
-    const shell = defaultShellBinary();
-    const backend = opts.sandbox;
-    const baseEnv = backend && backend.name !== "off" ? buildSandboxEnv() : { ...process.env };
-    const env = mergeShellEnv(baseEnv, opts.shellEnv);
-    const result = await safeSpawnShell(trimmed, {
-        cwd: worktreePath,
-        env,
-        timeoutMs: opts.timeoutMs ?? 120_000,
-        maxOutputBytes: 1024 * 1024,
-        sandbox: backend,
-        shell,
-        signal: opts.signal,
-    });
-    const parts = [];
-    if (result.stdout)
-        parts.push(result.stdout);
-    if (result.stderr)
-        parts.push(result.stderr);
-    const output = parts.join("\n").trim();
-    if (result.aborted)
-        return { skipped: false, ok: false, output: output || "setup aborted" };
-    if (result.timedOut)
-        return { skipped: false, ok: false, output: output || "setup timed out" };
-    if (result.spawnFailed) {
-        return { skipped: false, ok: false, output: result.error ?? "failed to spawn setup script" };
-    }
-    return { skipped: false, ok: result.exitCode === 0, output, exitCode: result.exitCode };
-}
-/**
- * Remove a worktree and optionally its branch.
- */
-export function removeWorktree(worktreePath, removeBranch = false) {
-    try {
-        // The MAIN repo root, not the worktree's own toplevel. `git rev-parse
-        // --show-toplevel` from inside a worktree returns the worktree path, which
-        // is about to be deleted; the branch-delete must run from the main repo,
-        // which outlives the worktree. Derive it from the common git dir.
-        const commonDir = execFileSync(GIT_BIN, ["rev-parse", "--path-format=absolute", "--git-common-dir"], { cwd: worktreePath, encoding: "utf-8", timeout: 5000 }).trim();
-        const mainRoot = dirname(commonDir); // <main>/.git → <main>
-        // Capture the worktree's branch BEFORE removing the worktree — afterwards
-        // the directory is gone and `git branch --show-current` in it would fail
-        // (silently, leaving removeBranch a no-op).
-        let branch = "";
-        if (removeBranch) {
-            try {
-                branch = execFileSync(GIT_BIN, ["branch", "--show-current"], {
-                    cwd: worktreePath,
-                    encoding: "utf-8",
-                    timeout: 5000,
-                }).trim();
-            }
-            catch {
-                // Detached HEAD or unreadable — nothing to delete.
-            }
-        }
-        execFileSync(GIT_BIN, ["worktree", "remove", worktreePath, "--force"], {
-            cwd: mainRoot,
-            timeout: 30000,
-        });
-        if (removeBranch && branch.startsWith("worktree/")) {
-            try {
-                execFileSync(GIT_BIN, ["branch", "-D", branch], { cwd: mainRoot, timeout: 10000 });
-            }
-            catch {
-                // Branch might already be removed.
-            }
-        }
-    }
-    catch {
-        // Worktree might already be removed
-    }
-}
-/**
- * List active worktrees.
- */
-export function listWorktrees(cwd) {
-    const raw = execFileSync(GIT_BIN, ["worktree", "list", "--porcelain"], {
-        cwd,
-        encoding: "utf-8",
-        timeout: 10000,
-    }).trim();
-    if (!raw)
-        return [];
-    const entries = [];
-    let current = { path: "", branch: "", head: "" };
-    for (const line of raw.split("\n")) {
-        if (line.startsWith("worktree ")) {
-            if (current.path)
-                entries.push(current);
-            current = { path: line.slice(9), branch: "", head: "" };
-        }
-        else if (line.startsWith("HEAD ")) {
-            current.head = line.slice(5, 13);
-        }
-        else if (line.startsWith("branch ")) {
-            current.branch = line.slice(7).replace("refs/heads/", "");
-        }
-    }
-    if (current.path)
-        entries.push(current);
-    return entries;
-}
-/**
- * Symlink large directories (node_modules, .venv, etc.) from main repo to worktree.
- */
-function symlinkLargeDirectories(sourceRoot, worktreePath) {
-    const largeDirs = ["node_modules", ".venv", "vendor", ".pnpm-store"];
-    // Windows directory symlinks need admin/Developer Mode and throw EPERM for a
-    // normal user; NTFS junctions don't and behave the same for our purpose
-    // (share node_modules into the worktree). Use "junction" on win32, "dir"
-    // elsewhere. Failure stays non-fatal — the worktree just doesn't share dirs.
-    const linkType = process.platform === "win32" ? "junction" : "dir";
-    for (const dir of largeDirs) {
-        const source = join(sourceRoot, dir);
-        const target = join(worktreePath, dir);
-        if (existsSync(source) && lstatSync(source).isDirectory() && !existsSync(target)) {
-            try {
-                symlinkSync(source, target, linkType);
-            }
-            catch {
-                // Symlink/junction might fail on some systems — non-fatal, the
-                // worktree just won't share this directory (more disk, still works).
-            }
-        }
-    }
-}
+// Compatibility barrel for the pre-split worktree module. The split made the
+// query/create APIs async because they now share the async git executor; all
+// in-repo callers await them, so this barrel intentionally does not add sync
+// wrappers.
+export * from "./worktree/index.js";

package/dist/index.d.ts

@@ -3,15 +3,15 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.6.0-rc.8";
-export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export declare const VERSION = "0.7.0-beta.1";
+export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionWorkspace, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
 export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/types.js";
 export { resolveLLMConfigForTag } from "./engine/resolve-llm-config.js";
 export { resolveAuxKey } from "./engine/aux-key.js";
 export { parseAgentDefinition, serializeAgentDefinition, type AgentDefinition, } from "./agent/agent-definition.js";
-export { AgentDefinitionRegistry, type AgentSourceDir, } from "./agent/agent-definition-registry.js";
+export { AgentDefinitionRegistry, type AgentSourceDir } from "./agent/agent-definition-registry.js";
 export type { CostStateStore, CostStateSnapshot } from "./engine/cost-store.js";
 export { EngineRuntime } from "./engine/runtime.js";
 export type { EngineRuntimeOptions } from "./engine/runtime.js";
@@ -25,7 +25,7 @@ export { ModelPool, type ModelEntry } from "./llm/model-pool.js";
 export { modelEntriesFromConnections } from "./engine/model-connections-pool.js";
 export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
-export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend } from "./tool-system/permission.js";
+export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend, } from "./tool-system/permission.js";
 export type { ApprovalBackend } from "./tool-system/permission.js";
 export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
 export type { BuiltinTool, BuiltinToolFn } from "./tool-system/builtin/index.js";
@@ -38,17 +38,18 @@ export type { HookEventName, HookContext, HookResult } from "./hooks/events.js";
 export { wrapHookMessages } from "./hooks/inject.js";
 export { AgentServer, type AgentServerOptions } from "./protocol/server.js";
 export { AgentClient, type BackgroundAgentCompletedHandler } from "./protocol/client.js";
-export { createInProcessTransport, StdioTransport, type Transport, } from "./protocol/transport.js";
-export { SocketTransport, listenTcp, type TcpListenResult, } from "./protocol/tcp-transport.js";
+export { createInProcessTransport, StdioTransport, type Transport } from "./protocol/transport.js";
+export { SocketTransport, listenTcp, type TcpListenResult } from "./protocol/tcp-transport.js";
 export { createServer, createClient, type CreateServerOptions, type CreateClientOptions, type ServerHandle, } from "./protocol/factories.js";
-export { Methods, ErrorCodes, type RpcMessage, type RunResult, } from "./protocol/types.js";
+export { Methods, ErrorCodes, type RpcMessage, type RunResult } from "./protocol/types.js";
 export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
+export { createWorktree, currentBranch, DEFAULT_WORKTREE_BRANCH_PREFIX, getWorktreeDiff, isManagedWorktreeBranch, isValidWorktreeBranchPrefix, findMainWorktreeRoot, listWorktrees, listWorktreesFast, normalizeWorktreeBranchPrefix, removeWorktree, validateWorktreeSlug, worktreeHasUncommittedOrAheadChanges, worktreeHasUncommittedChanges, type CreateWorktreeOptions, type ListWorktreesOptions, type ListWorktreesFastOptions, type RemoveWorktreeResult, type RemoveWorktreeOptions, type WorktreeDiffSummary, type WorktreeInfo, type WorktreeWorkspaceOwner, } from "./git/worktree.js";
 export { latestUndoTarget, earliestSnapshotsPerFile, latestTurnUndoTargets, latestRedoTargets, } from "./session/undo-target.js";
 export { diffLines, renderDiffPreview, type DiffLine } from "./session/simple-diff.js";
 export { MemoryManager } from "./session/memory.js";
-export type { MemoryEntry, MemoryScope } from "./session/memory.js";
+export type { MemoryEntry, MemoryOrigin, MemoryScope } from "./session/memory.js";
 export { runDreamConsolidation, type DreamConsolidationInput, type DreamConsolidationResult, } from "./services/dream-consolidation.js";
 export type { FileSnapshot, RedoRecord } from "./session/file-history.js";
 export { PromptComposer } from "./prompt/composer.js";
@@ -56,7 +57,7 @@ export { SectionCache } from "./prompt/section-cache.js";
 export { scanInstructions, combineInstructions } from "./prompt/instruction-scanner.js";
 export { BUILTIN_AGENT_PRESETS, DEFAULT_AGENT_PRESET, DEFAULT_CLI_PRESET, resolveAgentPreset, resolveBuiltinToolNames, buildPresetSystemPrompt, registerPreset, listPresetNames, } from "./preset/index.js";
 export type { AgentPreset, AgentPresetName } from "./preset/index.js";
-export { loadSection, loadSections, availableSections, registerSection } from "./prompt/section-loader.js";
+export { loadSection, loadSections, availableSections, registerSection, } from "./prompt/section-loader.js";
 export { ContextManager } from "./context/manager.js";
 export { estimateTokens, microcompact, windowCompact, truncateToolResult, buildSummarizationPrompt, applySummaryCompaction, COMPACTABLE_TOOL_NAMES, } from "./context/compaction.js";
 export type { MicrocompactOptions } from "./context/compaction.js";
@@ -75,7 +76,7 @@ export { installPluginFromSource } from "./plugins/installer/installFromSource.j
 export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
 export { parseSource, type ParsedSource } from "./plugins/installer/parseSource.js";
 export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
-export { CodexPluginManifest, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
+export { CodexPluginManifest, CSMeta, PluginInstallError } from "./plugins/installer/types.js";
 export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
 export { listPluginHooks, pluginHookKey, type PluginHookEntry } from "./plugins/loadPluginHooks.js";
 export { describePluginContent, type PluginContentInventory } from "./plugins/pluginContent.js";
@@ -89,26 +90,26 @@ export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
 export type { ModelPreset } from "./arena/model-presets.js";
 export { detectArenaMode } from "./arena/detect-mode.js";
-export { getStrategy, getStrategyForPlan, ReviewStrategy, DiscussionStrategy, PlanningStrategy } from "./arena/strategies/index.js";
+export { getStrategy, getStrategyForPlan, ReviewStrategy, DiscussionStrategy, PlanningStrategy, } from "./arena/strategies/index.js";
 export { planArena } from "./arena/planner.js";
 export { collectEvidence } from "./arena/providers/index.js";
 export { selectTools, hasTools } from "./arena/tools/selector.js";
 export { ArenaLedger } from "./arena/ledger.js";
 export { registerClaims, selectClaimsForReview } from "./arena/phases/claim-registry.js";
 export { buildDigest, formatDigest } from "./arena/digest-builder.js";
-export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult, markUnresolved, isTerminal, validTransitions } from "./arena/transitions.js";
+export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult, markUnresolved, isTerminal, validTransitions, } from "./arena/transitions.js";
 export type { ArenaConfig, ArenaMode, ArenaResultV2, ArenaStrategy, ArenaParticipant, ArenaBaseContext, ArenaFinding, FindingReview, ParticipantReport, ArenaConsensus, ArenaConsensusItem, ArenaRoadmapPhase, ArenaProgressEvent, ArenaPlan, ArenaLens, ArenaLensName, ArenaSourceKind, ArenaArtifact, ArenaQuickFact, FindingKind, PeerVerdict, ToolTrace, EvidencePacket, FindingEvidenceLink, ResearchDossier, ClaimStatus, ClaimRecord, ClaimChallenge, ClaimAdjudication, RequestedCheck, DebateRound, DebateTurn, TargetedCheckTask, SharedResearchLedger, RoundResearchDigest, ArenaExecutionLimits, } from "./arena/types.js";
 export { IterativeArena, defaultIterateConvergence, iterateDiffRatio, iterateCodeFormat, iterateDocumentFormat, getIterateFormat, } from "./arena/index.js";
 export type { IterateConfig, IterateResult, IterateSubject, IterateFormat, IterateProgressEvent, IterateFormatPack, Draft, DraftCandidate, Critique, CritiqueCategory, CritiqueEvidence, CritiqueSeverity, ConvergenceSignal, Round, AuthorRotation, StoppedReason, CheckpointFn, CheckpointContext, CheckpointAction, } from "./arena/index.js";
 export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, AUTOMATION_PROMPT_NOTE, AUTOMATION_RUN_SOURCE, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, type RunLockConfig, type RunLockAcquireResult, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
 export { defineProduct, type ProductDefinition, type ProductPreset, type ProductAdapter, type ProductContract, type CustomTool, type ProductRuntimeOptions, type ProductInstance, } from "./product/index.js";
 export { logger } from "./logging/logger.js";
-export { SettingsManager, type SettingsScope } from "./settings/manager.js";
+export { SettingsManager, userHome, type SettingsScope } from "./settings/manager.js";
 export { migrateConfig, configVersionOf, CURRENT_CONFIG_VERSION, type MigrationStep, } from "./settings/migrate-config.js";
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
 export { settingsJsonSchema, writeSettingsSchemaFile } from "./settings/schema-export.js";
 export { personalizationFrom, type PersonalizationConfig } from "./settings/personalization.js";
-export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
+export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, getCredentialAccess, setDefaultCredentialAccess, createIpcCredentialAccess, localCredentialAccess, credentialAccessScope, isCredentialSecretAvailable, materializeCookieSecret, type CredentialAccess, type CredentialAccessScope, type CredentialMetadata, type CredentialSnapshot, type CredentialSnapshotEntry, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
 /** @internal Shared with the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, type AttributedCounter, type ChannelEntry, } from "./state.js";
 /** @internal Shared primitives for the in-repo TUI/desktop hosts; not stable SDK surface. */
@@ -125,7 +126,7 @@ export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, h
 export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
 export { classifyBashLines, type BashLineKind, type ClassifiedBashLine, } from "./tool-system/builtin/bash-output-style.js";
 export { formatDuration, formatTokens } from "./utils/format.js";
-export { getTheme, type Theme, type ThemeName, type ThemeSetting, } from "./utils/theme.js";
+export { getTheme, type Theme, type ThemeName, type ThemeSetting } from "./utils/theme.js";
 export { resolveThemeSetting, type SystemTheme } from "./utils/systemTheme.js";
 /** @internal Host-lifecycle logging hooks for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { rotateLogs } from "./logging/logger.js";
@@ -143,7 +144,7 @@ export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, type ReviewDimensio
  * primary Engine/Protocol API above.
  */
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
-export { defaultSandboxConfig, type SandboxConfig, } from "./tool-system/sandbox/index.js";
+export { defaultSandboxConfig, type SandboxConfig } from "./tool-system/sandbox/index.js";
 export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
 export type { BackgroundAgentCompletedEvent } from "./types.js";
 export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronJob, type CronPermissionLevel, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
@@ -151,8 +152,9 @@ export * from "./cc-orchestrator/index.js";
 export { checkQuota, formatQuota } from "./quota/index.js";
 export { resolveQuotaCredentials } from "./quota/credentials.js";
 export type { QuotaResult, ProviderQuota, QuotaWindow, QuotaCredentials } from "./quota/types.js";
-export { asyncAgentRegistry, type AsyncAgentEntry, } from "./tool-system/builtin/agent-registry.js";
+export { asyncAgentRegistry, type AsyncAgentEntry } from "./tool-system/builtin/agent-registry.js";
 export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
+export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
 export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
 export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
 export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";
@@ -163,23 +165,24 @@ export type { ProtocolModelEntry } from "./protocol/types.js";
 /** @internal Extended Arena surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
 export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, type OutputSink, } from "./arena/render/terminal.js";
 export { formatArenaResultForSession } from "./arena/render/session.js";
-export { installPlugin, uninstallPlugin, listInstalled, } from "./plugins/pluginInstaller.js";
+export { installPlugin, uninstallPlugin, listInstalled } from "./plugins/pluginInstaller.js";
 export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
-export { parseMarketplaceInput, deriveMarketplaceName, } from "./plugins/parseMarketplaceInput.js";
-export { scanPluginCommands, type PluginCommand, } from "./plugins/pluginCommandsLoader.js";
+export { parseMarketplaceInput, deriveMarketplaceName } from "./plugins/parseMarketplaceInput.js";
+export { scanPluginCommands, type PluginCommand } from "./plugins/pluginCommandsLoader.js";
 /** @internal Extended LLM surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { type CachedModel, defaultCacheDir, } from "./llm/model-cache.js";
-export { fetchModelList, type FetchResult, } from "./llm/model-fetcher.js";
-export { sanitizeApiKey, hasNonAsciiPrintable, } from "./llm/api-key-sanitize.js";
-export { PROVIDER_KINDS, type ProviderKindName, } from "./llm/provider-kinds.js";
-export { capabilitiesFor, type Capability, } from "./llm/capabilities/index.js";
+export { type CachedModel, defaultCacheDir } from "./llm/model-cache.js";
+export { fetchModelList, type FetchResult } from "./llm/model-fetcher.js";
+export { sanitizeApiKey, hasNonAsciiPrintable } from "./llm/api-key-sanitize.js";
+export { PROVIDER_KINDS, type ProviderKindName } from "./llm/provider-kinds.js";
+export { capabilitiesFor, type Capability } from "./llm/capabilities/index.js";
 export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
-export { REASONING_EFFORTS, type ReasoningSetting, } from "./llm/reasoning-setting.js";
+export { REASONING_EFFORTS, type ReasoningSetting } from "./llm/reasoning-setting.js";
 export { type ProviderConfig } from "./llm/provider-catalog.js";
-export { syncOpenRouterCatalog, getOpenRouterSnapshot, } from "./data/openrouter-sync.js";
+export { syncOpenRouterCatalog, getOpenRouterSnapshot } from "./data/openrouter-sync.js";
 /** @internal Extended type surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo, } from "./types.js";
+export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo } from "./types.js";
 export { resolveExternalAgentConfig } from "./external-agents/config.js";
 export type { ExternalAgentMode, ExternalAgentsSettings, ResolvedExternalAgentsConfig, ResolvedClaudeCodeSettings, ResolvedCodexSettings, } from "./external-agents/types.js";
 export { flattenAxTree, renderElementList, cleanPageText, CONTENT_CHAR_CAP, buildExtractLinksScript, EXTRACT_LINK_CAP, } from "./tool-system/browser-bridge.js";
 export type { BrowserBridge, BrowserElement, BrowserSnapshot, BrowserResult, BrowserContent, BrowserExtract, BrowserLink, BrowserImage, BrowserVideo, BrowserImageData, BrowserTab, AXNode, } from "./tool-system/browser-bridge.js";
+export type { WorkspaceBridge } from "./tool-system/workspace-bridge.js";