@cjhyy/code-shell-core 0.7.0 → 0.8.0

package/dist/hooks/shell-runner.d.ts

@@ -28,16 +28,27 @@
  *   timeout     Defaults to 60_000 ms; settings.timeout_ms overrides.
  *               On timeout we SIGTERM then SIGKILL, log, and return {}.
  */
+import type { Writable } from "node:stream";
 import type { HookContext, HookResult } from "./events.js";
 import type { SettingsHookConfig } from "../types.js";
 import { validateHookResult } from "./hook-output.js";
 export { validateHookResult };
+export declare const MAX_HOOK_STDIN_BYTES: number;
+/**
+ * Write one hook envelope without leaving a Writable `error` event unhandled.
+ * The listener is installed before write(), remains through end(), and the
+ * promise does not resolve until both the write callback and any required
+ * drain have completed.
+ */
+export declare function writeHookStdin(stdin: Writable | null | undefined, envelope: string): Promise<void>;
+/** Close stdin for an oversized envelope while still absorbing stream errors. */
+export declare function closeHookStdin(stdin: Writable | null | undefined): void;
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
  * every failure mode (spawn error, timeout, malformed JSON) and
  * returns an empty result so the registry's chain keeps going.
  */
-export declare function runShellHook(config: SettingsHookConfig, ctx: HookContext): Promise<HookResult>;
+export declare function runShellHook(config: SettingsHookConfig, ctx: HookContext, abortSignal?: AbortSignal): Promise<HookResult>;
 /**
  * Check whether the hook should fire for the current ctx, respecting
  * the optional `matcher` regex. Returns false for non-tool events

package/dist/hooks/shell-runner.js

@@ -35,13 +35,105 @@ import { killChildTree } from "../runtime/spawn-common.js";
 // "./shell-runner.js" (e.g. tests) keep compiling.
 export { validateHookResult };
 const DEFAULT_TIMEOUT_MS = 60_000;
+export const MAX_HOOK_STDIN_BYTES = 256 * 1024;
+function stdinFailure(error) {
+    const err = error;
+    return {
+        type: "stdin_error",
+        code: typeof err?.code === "string" ? err.code : "UNKNOWN",
+        message: err instanceof Error ? err.message : String(error),
+    };
+}
+/**
+ * Write one hook envelope without leaving a Writable `error` event unhandled.
+ * The listener is installed before write(), remains through end(), and the
+ * promise does not resolve until both the write callback and any required
+ * drain have completed.
+ */
+export function writeHookStdin(stdin, envelope) {
+    if (!stdin)
+        return Promise.resolve();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let writeComplete = false;
+        let drained = false;
+        let ending = false;
+        const cleanup = (removeErrorListener = true) => {
+            if (removeErrorListener)
+                stdin.off("error", onError);
+            stdin.off("drain", onDrain);
+        };
+        const finish = (error, keepErrorListener = false) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup(!keepErrorListener);
+            if (error !== undefined)
+                reject(error);
+            else
+                resolve();
+        };
+        const onError = (error) => finish(error);
+        const onDrain = () => {
+            drained = true;
+            maybeEnd();
+        };
+        const maybeEnd = () => {
+            if (!writeComplete || !drained || ending || settled)
+                return;
+            ending = true;
+            try {
+                stdin.end(() => finish());
+            }
+            catch (error) {
+                finish(error, true);
+            }
+        };
+        // EventEmitter treats an unhandled stream `error` as fatal. Register the
+        // one-shot handler before the first byte is handed to the child.
+        stdin.once("error", onError);
+        try {
+            drained = stdin.write(envelope, (error) => {
+                if (error) {
+                    // Some Writable implementations invoke the callback before emitting
+                    // their fatal `error`. Keep the one-shot guard installed for it.
+                    finish(error, true);
+                    return;
+                }
+                writeComplete = true;
+                maybeEnd();
+            });
+            if (!drained)
+                stdin.once("drain", onDrain);
+            maybeEnd();
+        }
+        catch (error) {
+            finish(error, true);
+        }
+    });
+}
+/** Close stdin for an oversized envelope while still absorbing stream errors. */
+export function closeHookStdin(stdin) {
+    if (!stdin)
+        return;
+    stdin.once("error", () => { });
+    try {
+        stdin.end();
+    }
+    catch {
+        // No envelope was written; the hook is still allowed to run without args.
+    }
+}
 /**
  * Run one shell-hook command and return the parsed HookResult. Catches
  * every failure mode (spawn error, timeout, malformed JSON) and
  * returns an empty result so the registry's chain keeps going.
  */
-export async function runShellHook(config, ctx) {
+export async function runShellHook(config, ctx, abortSignal) {
     const timeoutMs = config.timeout_ms ?? DEFAULT_TIMEOUT_MS;
+    const signal = abortSignal ?? ctx.data.signal;
+    if (signal?.aborted)
+        return {};
     return new Promise((resolve) => {
         let child;
         try {
@@ -64,13 +156,20 @@ export async function runShellHook(config, ctx) {
         let stdout = "";
         let stderr = "";
         let settled = false;
+        let timer;
         const settle = (value) => {
             if (settled)
                 return;
             settled = true;
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", onAbort);
             resolve(value);
         };
-        const timer = setTimeout(() => {
+        const onAbort = () => {
+            killChildTree(child, 1000);
+            settle({});
+        };
+        timer = setTimeout(() => {
             // eslint-disable-next-line no-console
             console.warn(`[hooks] ${config.event} hook timed out after ${timeoutMs}ms: ${config.command}`);
             // win32: taskkill /T reaps the shell tree; POSIX: SIGTERM → grace →
@@ -78,6 +177,9 @@ export async function runShellHook(config, ctx) {
             killChildTree(child, 1000);
             settle({});
         }, timeoutMs);
+        signal?.addEventListener("abort", onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
         // Byte cap: once we cross MAX_HOOK_OUTPUT_BYTES on stdout, kill the
         // child and surface a 'cap exceeded' failure. A misbehaving handler
         // can otherwise hold the engine memory hostage while we accumulate
@@ -119,8 +221,9 @@ export async function runShellHook(config, ctx) {
             console.error(`[hooks] ${config.event} hook failed: ${config.command}`, err.message);
             settle({});
         });
-        child.on("close", (code) => {
-            clearTimeout(timer);
+        let stdinFinished = false;
+        let pendingClose;
+        const handleClose = (code) => {
             if (stdoutCapped) {
                 // eslint-disable-next-line no-console
                 console.error(`[hooks] ${config.event} hook killed due to oversized stdout (> ${MAX_HOOK_OUTPUT_BYTES} bytes)`);
@@ -166,17 +269,65 @@ export async function runShellHook(config, ctx) {
             // eslint-disable-next-line no-console
             console.error(`[hooks] ${config.event} hook exited with code ${code}:`, stderr.slice(0, 500));
             settle({});
+        };
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            if (settled)
+                return;
+            // If close wins the event-loop race, wait for stdin's callback/error so
+            // an EPIPE cannot be overwritten by an apparently clean child exit.
+            if (!stdinFinished && !stdoutCapped) {
+                pendingClose = { code };
+                return;
+            }
+            handleClose(code);
         });
-        // Write the context envelope on stdin then close.
+        const finishStdin = () => {
+            stdinFinished = true;
+            if (pendingClose && !settled) {
+                const { code } = pendingClose;
+                pendingClose = undefined;
+                handleClose(code);
+            }
+        };
+        let envelope;
         try {
-            child.stdin?.write(JSON.stringify({ eventName: ctx.eventName, data: ctx.data }));
-            child.stdin?.end();
+            envelope = JSON.stringify({ eventName: ctx.eventName, data: ctx.data });
         }
-        catch (err) {
+        catch (error) {
             // eslint-disable-next-line no-console
-            console.error(`[hooks] failed to write stdin for ${config.event}:`, err.message);
+            console.error(`[hooks] failed to serialize stdin for ${config.event}:`, error instanceof Error ? error.message : String(error));
             settle({});
+            return;
         }
+        if (Buffer.byteLength(envelope, "utf8") > MAX_HOOK_STDIN_BYTES) {
+            // eslint-disable-next-line no-console
+            console.warn(`[hooks] ${config.event} hook stdin exceeded ${MAX_HOOK_STDIN_BYTES} bytes; running without envelope`);
+            closeHookStdin(child.stdin);
+            finishStdin();
+            return;
+        }
+        // Let the spawned shell enter user code before writing. Besides avoiding a
+        // needless race, this makes an intentional early stdin close observable as
+        // EPIPE/ECONNRESET while the child is still alive.
+        setImmediate(() => {
+            void (async () => {
+                if (settled)
+                    return;
+                try {
+                    await writeHookStdin(child.stdin, envelope);
+                    finishStdin();
+                }
+                catch (error) {
+                    clearTimeout(timer);
+                    const failure = stdinFailure(error);
+                    // eslint-disable-next-line no-console
+                    console.error(`[hooks] failed to write stdin for ${config.event}:`, failure.message);
+                    killChildTree(child, 1000);
+                    settle({ data: { hookFailure: failure } });
+                }
+            })();
+        });
     });
 }
 /**

package/dist/index.d.ts

@@ -3,11 +3,13 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.7.0";
-export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionWorkspace, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export declare const VERSION = "0.8.0";
+export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionKind, SessionWorkspace, SessionForkLineage, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, TurnCompletionKind, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export type { GoalConfig, GoalLifecycleConfig, GoalLifecyclePhase, GoalLifecycleTerminalReason, GoalLifecycleV1, } from "./goal/lifecycle.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 export { Engine, loadAgentDefinitionsForCwd } from "./engine/engine.js";
 export type { EngineConfig, EngineHookConfig, EngineResult } from "./engine/types.js";
+export type { RunBehaviorMode, RunBehaviorProfile } from "./engine/run-types.js";
 export { resolveLLMConfigForTag } from "./engine/resolve-llm-config.js";
 export { resolveAuxKey } from "./engine/aux-key.js";
 export { parseAgentDefinition, serializeAgentDefinition, type AgentDefinition, } from "./agent/agent-definition.js";
@@ -15,10 +17,11 @@ export { AgentDefinitionRegistry, type AgentSourceDir } from "./agent/agent-defi
 export type { CostStateStore, CostStateSnapshot } from "./engine/cost-store.js";
 export { EngineRuntime } from "./engine/runtime.js";
 export type { EngineRuntimeOptions } from "./engine/runtime.js";
-export { ChatSessionManager } from "./protocol/chat-session-manager.js";
-export type { ChatSessionManagerOptions } from "./protocol/chat-session-manager.js";
+export { ChatSessionManager, createChatSessionManager, LOCAL_CHAT_IDENTITY, } from "./protocol/chat-session-manager.js";
+export type { ChatSessionManagerOptions, LiveChatSessionSnapshot, } from "./protocol/chat-session-manager.js";
 export { LLMClientBase } from "./llm/client-base.js";
 export { createLLMClient, registerProvider } from "./llm/client-factory.js";
+export type { CreateMessageOptions } from "./llm/types.js";
 export { AnthropicClient } from "./llm/providers/anthropic.js";
 export { OpenAIClient } from "./llm/providers/openai.js";
 export { ModelPool, type ModelEntry } from "./llm/model-pool.js";
@@ -27,30 +30,50 @@ export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend, } from "./tool-system/permission.js";
 export type { ApprovalBackend } from "./tool-system/permission.js";
-export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
+export { BUILTIN_TOOLS, derivePresetExposure } from "./tool-system/builtin/index.js";
 export type { BuiltinTool, BuiltinToolFn } from "./tool-system/builtin/index.js";
+export type { ToolContext } from "./tool-system/context.js";
+export type { AgentPanelDescriptor, AgentPanelToolDescriptor, PanelHostBridge, PanelInvokeResult, PanelOpenResult, } from "./tool-system/panel-bridge.js";
+export { fileCache, invalidateFileCache } from "./tool-system/builtin/file-cache.js";
+export { validateToolArgs, validateToolArgsStrict } from "./tool-system/validation.js";
+export { createOffBackend } from "./tool-system/sandbox/off.js";
+export { SKILL_REPO_RE, WORKSPACE_PROFILE_NAME_RE, WorkspaceProfileSchema, WorkspaceProfileRequirementsSchema, buildSkillInstallArgs, planProfileRequirements, summarizeSkillConflicts, type WorkspaceProfile, type WorkspaceProfileRequirements, type WorkspaceProfileSubtree, type ResolveActiveWorkspaceProfileInput, type SkillRequirement, type ToolRequirement, type KnownSkill, type MissingTool, type PlannedSkillInstall, type ProfileRequirementPlan, type SkillConflict, } from "./profile/index.js";
+export { SOURCE_ID_RE, SOURCE_KINDS, SourceDefinitionSchema, WorkspaceSourceBindingSchema, type SourceKind, type SourceDefinition, type WorkspaceSourceBinding, type SourceScope, type SourceResourceMeta, type SourceContent, } from "./sources/types.js";
+export type { ConnectorAdapter } from "./sources/adapter.js";
+export type { SourceAccessStatus, CredentialStatusFn, EffectiveSourceAccess, ResolveSourceAccessInput, } from "./sources/resolve.js";
+export type { BuildSourcesContextSummaryInput } from "./sources/context-summary.js";
+export { createFakeToolContext, createToolRegistryHarness, type FakeToolContextOptions, type ToolRegistryHarness, type ToolRegistryHarnessOptions, } from "./tool-system/testing/tool-registry-harness.js";
+export { registerCapability, unregisterCapability, listRegisteredCapabilities, } from "./capabilities/index.js";
+export type { CapabilityArtifact, CapabilityArtifactDetectionContext, CapabilityArtifactDetector, CapabilityDynamicContext, CapabilityDynamicContextProvider, CapabilityFileHistoryContribution, CapabilityEngineHookContribution, CapabilityInstructionBoundaryFinder, CapabilityModule, CapabilityToolServiceHost, CapabilityToolSelectionContext, SessionWorkspaceCapability, } from "./capabilities/index.js";
 export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
-export { MCPManager, buildHttpHeaders, buildStdioEnv } from "./tool-system/mcp-manager.js";
+export { MCPManager, buildHttpHeaders, buildStdioEnv, createMcpAuthenticatedFetch, } from "./tool-system/mcp-manager.js";
 export type { AskUserFn } from "./tool-system/builtin/ask-user.js";
+export type { ExtensionModule, ExtensionQueryHandler, ExtensionTool, ProtocolLiveSession, ProtocolObserver, ProtocolObserverHost, } from "./tool-system/capability-module.js";
+export { registerExtensionModules, queryExtensionModules, } from "./tool-system/capability-module.js";
 export type { Task, TaskStatus } from "./tool-system/builtin/task.js";
 export { HookRegistry } from "./hooks/registry.js";
+export type { HookHandler } from "./hooks/registry.js";
 export type { HookEventName, HookContext, HookResult } from "./hooks/events.js";
 export { wrapHookMessages } from "./hooks/inject.js";
+export { PanelAppLifecycleRuntime } from "./panel-apps/runtime.js";
+export type { PanelAppInstance, PanelAppLifecycleError, PanelAppLifecycleEvent, PanelAppLifecycleEventName, PanelAppLifecycleHook, PanelAppLifecycleHookContext, PanelAppLifecycleHooks, PanelAppLifecycleModule, PanelAppLifecycleRuntimeOptions, } from "./panel-apps/runtime.js";
 export { AgentServer, type AgentServerOptions } from "./protocol/server.js";
 export { AgentClient, type BackgroundAgentCompletedHandler } from "./protocol/client.js";
 export { createInProcessTransport, StdioTransport, type Transport } from "./protocol/transport.js";
 export { SocketTransport, listenTcp, type TcpListenResult } from "./protocol/tcp-transport.js";
 export { createServer, createClient, type CreateServerOptions, type CreateClientOptions, type ServerHandle, } from "./protocol/factories.js";
-export { Methods, ErrorCodes, type RpcMessage, type RunResult } from "./protocol/types.js";
+export { Methods, ErrorCodes, type RpcMessage, type RunResult, type ForkSessionParams, type ForkSessionResult as ProtocolForkSessionResult, } from "./protocol/types.js";
+export type * from "./protocol/mobile-remote-types.js";
 export { Transcript } from "./session/transcript.js";
-export { SessionManager } from "./session/session-manager.js";
+export { SessionManager, sessionMainRoot, codeShellHome, sessionsRoot, buildForkState, buildForkTranscript, type ForkSessionOptions, type ForkSessionResult, } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
-export { createWorktree, currentBranch, DEFAULT_WORKTREE_BRANCH_PREFIX, getWorktreeDiff, isManagedWorktreeBranch, isValidWorktreeBranchPrefix, findMainWorktreeRoot, listWorktrees, listWorktreesFast, normalizeWorktreeBranchPrefix, removeWorktree, validateWorktreeSlug, worktreeHasUncommittedOrAheadChanges, worktreeHasUncommittedChanges, type CreateWorktreeOptions, type ListWorktreesOptions, type ListWorktreesFastOptions, type RemoveWorktreeResult, type RemoveWorktreeOptions, type WorktreeDiffSummary, type WorktreeInfo, type WorktreeWorkspaceOwner, } from "./git/worktree.js";
 export { latestUndoTarget, earliestSnapshotsPerFile, latestTurnUndoTargets, latestRedoTargets, } from "./session/undo-target.js";
 export { diffLines, renderDiffPreview, type DiffLine } from "./session/simple-diff.js";
 export { MemoryManager } from "./session/memory.js";
 export type { MemoryEntry, MemoryOrigin, MemoryScope } from "./session/memory.js";
+export type { RouteSessionMessageInput, SessionMessageRouter, SessionMessageTarget, SessionMessageToolService, } from "./session/session-message.js";
 export { runDreamConsolidation, type DreamConsolidationInput, type DreamConsolidationResult, } from "./services/dream-consolidation.js";
+export { authorize, refreshToken, generatePKCE, createHardenedOAuthFetch, type OAuthConfig, type OAuthTokens, type OAuthAuthorizeOptions, type OAuthRefreshOptions, type HardenedOAuthFetchOptions, } from "./services/oauth.js";
 export type { FileSnapshot, RedoRecord } from "./session/file-history.js";
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
@@ -66,41 +89,27 @@ export { applyToolResultPersistence, createContentReplacementState, reconstructC
 export type { ContentReplacementState } from "./context/tool-result-storage.js";
 export { scanSkills, invalidateSkillCache } from "./skills/index.js";
 export type { SkillDefinition } from "./skills/index.js";
-export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
 export type { CapabilityServiceDeps, CapabilityDescriptor, CapabilityControl, } from "./capability-control/index.js";
 export { readInstalledPlugins } from "./plugins/installedPlugins.js";
-export { computeEffectiveDisabledLists, type EffectiveDisabledLists, } from "./capability-control/disabled-lists.js";
+export type { EffectiveDisabledLists } from "./capability-control/disabled-lists.js";
 export type { InstalledPluginsV2 } from "./plugins/types.js";
-export { installPluginFromPath } from "./plugins/installer/install.js";
-export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
-export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
-export { parseSource, type ParsedSource } from "./plugins/installer/parseSource.js";
-export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
-export { CodexPluginManifest, CSMeta, PluginInstallError } from "./plugins/installer/types.js";
-export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+export { CodexPluginManifest, PluginAutomationTemplate, PluginAutomationsManifest, CanonicalPluginManifest, CANONICAL_PLUGIN_MANIFEST_FILE, CSMeta, PluginInstallError, type PluginAutomationTemplate as PluginAutomationTemplateData, type PluginAutomationsManifest as PluginAutomationsManifestData, type CanonicalPluginManifest as CanonicalPluginManifestData, } from "./plugins/installer/types.js";
+export { normalizePluginManifest, readCanonicalPluginManifest, type NormalizePluginManifestOptions, } from "./plugins/installer/normalizeManifest.js";
+export { mergePluginMcpServers, readPluginMcp } from "./plugins/installer/loadPluginMcp.js";
+export { approvePluginMcp, listPluginMcpTrust, revokePluginMcp, type PluginMcpApprovalResult, type PluginMcpTrustEntry, } from "./plugins/pluginMcpApproval.js";
+export { pluginMcpApprovalState, type PluginMcpApprovalState, } from "./plugins/pluginMcpIntegrity.js";
+export { pluginsRoot } from "./plugins/installer/paths.js";
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, type InstalledPanelApp, type InstalledPanelAppSource, type GitPanelAppSourceInput, type LocalPanelAppSourceInput, type PanelAppSourceInput, type PanelAppManifestData, type PanelAppBindingPolicy, type PanelAppPreview, } from "./panel-apps/index.js";
+export { previewLocalTheme, installReviewedLocalTheme, listInstalledThemes, uninstallTheme, themesRoot, themeInstallDir, assertSafeThemeName, ThemeInstallError, ThemeReviewChangedError, THEME_ASSET_DIR, THEME_VAR_NAMES, detectThemeImage, type ThemePreview, type InstalledTheme, type ThemeManifest, } from "./themes/index.js";
+export { resolveSafePluginPath } from "./plugins/pluginInstaller.js";
 export { listPluginHooks, pluginHookKey, type PluginHookEntry } from "./plugins/loadPluginHooks.js";
-export { describePluginContent, type PluginContentInventory } from "./plugins/pluginContent.js";
+export { approvePluginHooks, reviewPluginHooks, revokePluginHooks, type PluginHookApprovalResult, type PluginHookReview, type PluginHookReviewDiffItem, } from "./plugins/pluginHookApproval.js";
+export { pluginHookApprovalState, type PluginHookApprovalState, } from "./plugins/pluginHookIntegrity.js";
+export { describePluginContent, type PluginAutomationTemplateDescriptor, type PluginContentInventory, } from "./plugins/pluginContent.js";
+export { loadPluginCatalog, loadPluginAutomationTemplateContributions, pluginAutomationTemplateRevision, type LoadPluginCatalogOptions, type PluginAutomationTemplateContribution, type PluginCatalogEntry, } from "./plugins/pluginCatalog.js";
+export { instantiatePluginAutomationTemplate, MAX_PLUGIN_AUTOMATIONS, type InstantiatePluginAutomationTemplateOptions, } from "./plugins/pluginAutomationTemplates.js";
 export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
 export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
-export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
-export { listInstalledPlugins, type PluginListRow } from "./plugins/installer/list.js";
-export { updatePluginByName, type UpdateResult } from "./plugins/installer/update.js";
-export { checkPluginUpdate, type UpdateCheck } from "./plugins/installer/checkUpdate.js";
-export { Arena } from "./arena/arena.js";
-export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
-export type { ModelPreset } from "./arena/model-presets.js";
-export { detectArenaMode } from "./arena/detect-mode.js";
-export { getStrategy, getStrategyForPlan, ReviewStrategy, DiscussionStrategy, PlanningStrategy, } from "./arena/strategies/index.js";
-export { planArena } from "./arena/planner.js";
-export { collectEvidence } from "./arena/providers/index.js";
-export { selectTools, hasTools } from "./arena/tools/selector.js";
-export { ArenaLedger } from "./arena/ledger.js";
-export { registerClaims, selectClaimsForReview } from "./arena/phases/claim-registry.js";
-export { buildDigest, formatDigest } from "./arena/digest-builder.js";
-export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult, markUnresolved, isTerminal, validTransitions, } from "./arena/transitions.js";
-export type { ArenaConfig, ArenaMode, ArenaResultV2, ArenaStrategy, ArenaParticipant, ArenaBaseContext, ArenaFinding, FindingReview, ParticipantReport, ArenaConsensus, ArenaConsensusItem, ArenaRoadmapPhase, ArenaProgressEvent, ArenaPlan, ArenaLens, ArenaLensName, ArenaSourceKind, ArenaArtifact, ArenaQuickFact, FindingKind, PeerVerdict, ToolTrace, EvidencePacket, FindingEvidenceLink, ResearchDossier, ClaimStatus, ClaimRecord, ClaimChallenge, ClaimAdjudication, RequestedCheck, DebateRound, DebateTurn, TargetedCheckTask, SharedResearchLedger, RoundResearchDigest, ArenaExecutionLimits, } from "./arena/types.js";
-export { IterativeArena, defaultIterateConvergence, iterateDiffRatio, iterateCodeFormat, iterateDocumentFormat, getIterateFormat, } from "./arena/index.js";
-export type { IterateConfig, IterateResult, IterateSubject, IterateFormat, IterateProgressEvent, IterateFormatPack, Draft, DraftCandidate, Critique, CritiqueCategory, CritiqueEvidence, CritiqueSeverity, ConvergenceSignal, Round, AuthorRotation, StoppedReason, CheckpointFn, CheckpointContext, CheckpointAction, } from "./arena/index.js";
 export { RunManager, type RunManagerConfig, type RunStore, FileRunStore, RunQueue, EngineRunner, AUTOMATION_PROMPT_NOTE, AUTOMATION_RUN_SOURCE, type EngineRunnerConfig, type RunExecutionHandle, type RunExecutor, type CustomToolEntry, RunApprovalBackend, createRunAskUserFn, type RunLifecycleHooks, CheckpointWriter, ArtifactTracker, RunLock, type RunLockConfig, type RunLockAcquireResult, Heartbeat, NoopEvaluator, CompositeEvaluator, type Evaluator, type EvaluatorResult, type EvaluatorContext, type RunStatus, type RunSnapshot, type RunEvent, type RunCheckpoint, type RunApproval, type RunArtifactRef, type SubmitRunInput, type ResumeRunInput, type ListRunsQuery, type RunStreamEvent, type RunStreamCallback, type DetachFn, VALID_TRANSITIONS, createRunManager, type CreateRunManagerOptions, } from "./run/index.js";
 export { defineProduct, type ProductDefinition, type ProductPreset, type ProductAdapter, type ProductContract, type CustomTool, type ProductRuntimeOptions, type ProductInstance, } from "./product/index.js";
 export { logger } from "./logging/logger.js";
@@ -109,80 +118,12 @@ export { migrateConfig, configVersionOf, CURRENT_CONFIG_VERSION, type MigrationS
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
 export { settingsJsonSchema, writeSettingsSchemaFile } from "./settings/schema-export.js";
 export { personalizationFrom, type PersonalizationConfig } from "./settings/personalization.js";
-export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, type OAuthCredentialPublicStatus, type OAuthCredentialSecret, buildOAuthRefreshRequest, isOAuthAccessTokenExpired, oauthCredentialStatus, parseOAuthCredentialSecret, summarizeOAuthCredentialSecret, type OAuthClockOptions, type OAuthRefreshHandler, type OAuthRefreshRequest, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, getCredentialAccess, setDefaultCredentialAccess, createIpcCredentialAccess, localCredentialAccess, credentialAccessScope, isCredentialSecretAvailable, materializeCookieSecret, type CredentialAccess, type CredentialAccessScope, type CredentialMetadata, type CredentialSnapshot, type CredentialSnapshotEntry, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
-/** @internal Shared with the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, type AttributedCounter, type ChannelEntry, } from "./state.js";
-/** @internal Shared primitives for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
-export { env } from "./utils/env.js";
-export { default as sliceAnsi } from "./utils/sliceAnsi.js";
-export { execFileNoThrow } from "./utils/execFileNoThrow.js";
-export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
-export { gte } from "./utils/semver.js";
-export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
-export { logForDebugging } from "./utils/debug.js";
-export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
-export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
-export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
-export { classifyBashLines, type BashLineKind, type ClassifiedBashLine, } from "./tool-system/builtin/bash-output-style.js";
-export { formatDuration, formatTokens } from "./utils/format.js";
-export { getTheme, type Theme, type ThemeName, type ThemeSetting } from "./utils/theme.js";
-export { resolveThemeSetting, type SystemTheme } from "./utils/systemTheme.js";
-/** @internal Host-lifecycle logging hooks for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { rotateLogs } from "./logging/logger.js";
-export { recordUIEvent } from "./logging/session-recorder.js";
+export { CredentialStore, type CredentialScope, type MaskedCredential, type Credential, type CredentialType, type CredentialStoreFile, type OAuthCredentialPublicStatus, type OAuthCredentialSecret, type OAuthTokenResponse, buildOAuthRefreshRequest, isOAuthAccessTokenExpired, isBrowserOAuthLinkCredential, oauthCredentialStatus, parseOAuthCredentialSecret, resolveLinkCredentialAccessToken, mergeOAuthTokenResponse, shouldRefreshOAuthCredential, summarizeOAuthCredentialSecret, type OAuthClockOptions, type OAuthRefreshHandler, type OAuthRefreshRequest, formatNetscapeCookies, parseCookieJar, type CookieLike, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, getCredentialAccess, setDefaultCredentialAccess, createIpcCredentialAccess, localCredentialAccess, credentialAccessScope, credentialAllowsEnvExposure, credentialSecretHint, isCredentialSecretAvailable, materializeCookieSecret, type CredentialAccess, type CredentialAccessScope, type CredentialMetadata, type CredentialSnapshot, type CredentialSnapshotEntry, type EncryptionCipher, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
+export { LOCAL_LINK_PROVIDERS, getLocalLinkProvider, listLocalLinkProviders, validateLocalLinkToken, connectCliLink, executeCliLinkAction, getCliLinkStatus, isCliLinkProvider, managedLinkCliPath, resolveLinkCliExecutable, runCliLinkCommand, linkActionToolDef, linkActionTool, isLinkActionAvailable, type LinkActionRisk, type LocalLinkIdentity, type LocalLinkValidationResult, type LocalLinkActionSummary, type LocalLinkProviderSummary, type LocalLinkActionContext, type LocalLinkActionSpec, type LocalLinkProviderSpec, type CliLinkCommandResult, type CliLinkCommandRunner, type CliLinkProviderId, type CliLinkRunOptions, type CliLinkStatus, } from "./links/index.js";
 export { CostTracker, costTracker, installCostTracking } from "./cost-tracker.js";
 export { NOOP_COLORIZER, type Colorizer } from "./colorizer.js";
-export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveArenaSettingsByKeys, type OnboardingResult, } from "./onboarding.js";
-export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, type UpdateInfo, } from "./updater.js";
-export { isGitRepo, resolveProjectRoot, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
-export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, type ReviewDimension, type ReviewPromptOptions, } from "./review/review-prompt.js";
-/**
- * @internal Exports below are consumed by the in-repo TUI/desktop hosts, not
- * part of the stable `@cjhyy/code-shell-core` SDK surface. They may change or
- * move to a `/tui` subpath without a major bump. External SDK users: prefer the
- * primary Engine/Protocol API above.
- */
-export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
-export { defaultSandboxConfig, type SandboxConfig } from "./tool-system/sandbox/index.js";
-export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
-export type { BackgroundAgentCompletedEvent } from "./types.js";
-export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronJob, type CronPermissionLevel, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
-export * from "./cc-orchestrator/index.js";
-export { checkQuota, formatQuota } from "./quota/index.js";
-export { resolveQuotaCredentials } from "./quota/credentials.js";
-export type { QuotaResult, ProviderQuota, QuotaWindow, QuotaCredentials } from "./quota/types.js";
-export { asyncAgentRegistry, type AsyncAgentEntry } from "./tool-system/builtin/agent-registry.js";
-export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
-export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
-export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
-export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
-export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";
-export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, type CatalogEntry, } from "./model-catalog/index.js";
-/** @internal Extended protocol surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { createInProcessClient } from "./protocol/helpers.js";
-export type { ProtocolModelEntry } from "./protocol/types.js";
-/** @internal Extended Arena surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, type OutputSink, } from "./arena/render/terminal.js";
-export { formatArenaResultForSession } from "./arena/render/session.js";
-export { installPlugin, uninstallPlugin, listInstalled } from "./plugins/pluginInstaller.js";
-export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
-export { parseMarketplaceInput, deriveMarketplaceName } from "./plugins/parseMarketplaceInput.js";
-export { scanPluginCommands, type PluginCommand } from "./plugins/pluginCommandsLoader.js";
-/** @internal Extended LLM surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { type CachedModel, defaultCacheDir } from "./llm/model-cache.js";
-export { fetchModelList, type FetchResult } from "./llm/model-fetcher.js";
-export { sanitizeApiKey, hasNonAsciiPrintable } from "./llm/api-key-sanitize.js";
-export { PROVIDER_KINDS, type ProviderKindName } from "./llm/provider-kinds.js";
-export { capabilitiesFor, type Capability } from "./llm/capabilities/index.js";
-export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
-export { REASONING_EFFORTS, type ReasoningSetting } from "./llm/reasoning-setting.js";
-export { type ProviderConfig } from "./llm/provider-catalog.js";
+export { expandPluginCommandBody, describePluginCommands, scanPluginCommands, MAX_PLUGIN_COMMAND_FILE_BYTES, MAX_PLUGIN_COMMAND_ARGUMENT_CHARS, MAX_PLUGIN_COMMAND_EXPANDED_CHARS, type PluginCommand, type PluginCommandDescriptor, } from "./plugins/pluginCommandsLoader.js";
 export { syncOpenRouterCatalog, getOpenRouterSnapshot } from "./data/openrouter-sync.js";
-/** @internal Extended type surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo } from "./types.js";
-export { resolveExternalAgentConfig } from "./external-agents/config.js";
-export type { ExternalAgentMode, ExternalAgentsSettings, ResolvedExternalAgentsConfig, ResolvedClaudeCodeSettings, ResolvedCodexSettings, } from "./external-agents/types.js";
 export { flattenAxTree, renderElementList, cleanPageText, CONTENT_CHAR_CAP, buildExtractLinksScript, EXTRACT_LINK_CAP, } from "./tool-system/browser-bridge.js";
-export type { BrowserBridge, BrowserElement, BrowserSnapshot, BrowserResult, BrowserContent, BrowserExtract, BrowserLink, BrowserImage, BrowserVideo, BrowserImageData, BrowserTab, AXNode, } from "./tool-system/browser-bridge.js";
+export type { BrowserBridge, BrowserElement, BrowserSnapshot, BrowserResult, BrowserResultCode, BrowserScrollState, BrowserReadOptions, BrowserContent, BrowserExtract, BrowserLink, BrowserImage, BrowserVideo, BrowserImageData, BrowserTab, AXNode, } from "./tool-system/browser-bridge.js";
 export type { WorkspaceBridge } from "./tool-system/workspace-bridge.js";

package/dist/index.extension.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Stable extension contract for trusted in-process capability packages.
+ * Product capabilities depend on this narrow entry instead of private core
+ * paths, keeping the package graph one-way: capability -> core.
+ */
+export type { ClientDefaults, ContentBlock, LLMConfig, LLMResponse, Message, RegisteredTool, SessionOrigin, SessionStatus, StreamEvent, TerminalReason, TurnCompletionKind, TokenUsage, ToolCall, ToolDefinition, } from "./types.js";
+export type { PendingApprovalMetadata } from "./protocol/types.js";
+export type { CreateMessageOptions } from "./llm/types.js";
+export { LLMClientBase } from "./llm/client-base.js";
+export { createLLMClient, registerProvider } from "./llm/client-factory.js";
+export { ModelPool, type ModelEntry } from "./llm/model-pool.js";
+export { logger } from "./logging/logger.js";
+export { addTokenUsage } from "./session/usage.js";
+export { resolveMaxOutput } from "./onboarding.js";
+export { SettingsManager, userHome } from "./settings/manager.js";
+export { isFeatureEnabled, featureFlagNames, resolveFeatureFlags, } from "./settings/feature-flags.js";
+export type { FeatureFlagName, FeatureFlagOverrides } from "./settings/feature-flags.js";
+export { NOOP_COLORIZER, type Colorizer } from "./colorizer.js";
+export type { ToolContext } from "./tool-system/context.js";
+export type { AgentPanelDescriptor, AgentPanelToolDescriptor, PanelDiscoveryResult, PanelHostBridge, PanelInvokeResult, PanelOpenResult, } from "./tool-system/panel-bridge.js";
+export { createSessionToolHost } from "./tool-system/session-tool-host.js";
+export type { CreateSessionToolHostOptions, ExternalSessionPermissionMode, ExternalToolExposurePolicy, SessionToolHost, } from "./tool-system/session-tool-host.js";
+export type { ToolVisibilityInputs } from "./engine/run-tooling.js";
+export { FIRST_PHASE_EXPOSURE, FIRST_PHASE_EXPOSURE_RATIONALE, } from "./tool-system/external-tool-exposure.js";
+export type { ExposureRationale } from "./tool-system/external-tool-exposure.js";
+export { webSearchTool } from "./tool-system/builtin/web-search.js";
+export { webFetchTool } from "./tool-system/builtin/web-fetch.js";
+export { extractJSON, extractJSONArray } from "./utils/json.js";
+export type { ExtensionModule, ExtensionQueryHandler, ExtensionTool, } from "./tool-system/capability-module.js";
+export type { SessionWorkspace } from "./types.js";
+export { registerCapability } from "./capabilities/index.js";
+export type { CapabilityArtifactDetector, CapabilityDynamicContextProvider, CapabilityModule, CapabilityToolServiceHost, } from "./capabilities/index.js";
+export { BUILTIN_AGENT_PRESETS } from "./preset/index.js";
+export type { AgentPreset } from "./preset/index.js";
+export { BUILTIN_TOOLS, derivePresetExposure } from "./tool-system/builtin/index.js";
+export type { BuiltinTool } from "./tool-system/builtin/index.js";
+export { SessionManager, codeShellHome } from "./session/session-manager.js";
+export { invalidateFileCache } from "./tool-system/builtin/file-cache.js";
+export { notificationQueue } from "./tool-system/builtin/agent-notifications.js";
+export { resolveExecutable, resolveGit } from "./utils/exec.js";
+export { safeSpawnShell } from "./runtime/safe-spawn.js";
+export { buildSandboxEnv, defaultShellBinary, killChildTree, killProcessGroup, mergeShellEnv, } from "./runtime/spawn-common.js";
+export { isExistingDirectory, normalizeCwdPath } from "./utils/cwd-normalize.js";
+export { backgroundJobRegistry, type BackgroundJobEntry, } from "./tool-system/builtin/background-jobs.js";
+export type { SandboxBackend } from "./tool-system/sandbox/index.js";
+export type { RunBehaviorProfile } from "./engine/run-types.js";
+export type { ProtocolLiveSession, ProtocolObserver, ProtocolObserverHost, } from "./tool-system/capability-module.js";
+export type { ToolVisibilityContext } from "./tool-system/context.js";
+export type { BuiltinToolExposure } from "./tool-system/builtin/index.js";
+export type { PermissionRule, PermissionMode } from "./types.js";
+export { ApprovalRouter } from "./tool-system/permission.js";

package/dist/index.extension.js

@@ -0,0 +1,39 @@
+/**
+ * Stable extension contract for trusted in-process capability packages.
+ * Product capabilities depend on this narrow entry instead of private core
+ * paths, keeping the package graph one-way: capability -> core.
+ */
+export { LLMClientBase } from "./llm/client-base.js";
+export { createLLMClient, registerProvider } from "./llm/client-factory.js";
+export { ModelPool } from "./llm/model-pool.js";
+export { logger } from "./logging/logger.js";
+export { addTokenUsage } from "./session/usage.js";
+export { resolveMaxOutput } from "./onboarding.js";
+export { SettingsManager, userHome } from "./settings/manager.js";
+// Feature flags: a host needs to READ them to decide whether an experimental
+// backend is permitted. Read-only surface — the flag registry itself stays in core.
+export { isFeatureEnabled, featureFlagNames, resolveFeatureFlags, } from "./settings/feature-flags.js";
+export { NOOP_COLORIZER } from "./colorizer.js";
+// Session-scoped tool surface for external Agent Runtimes (Codex / Claude Code).
+// This is intentionally the STRONGEST tool-execution handle a capability package
+// can obtain: `ToolExecutor`, `ToolRegistry` and `PermissionClassifier` are
+// deliberately NOT exported here, because exporting them would hand the caller a
+// supported way to bypass SessionToolHost — and with it every authorization check
+// the design routes through ToolExecutor.
+export { createSessionToolHost } from "./tool-system/session-tool-host.js";
+export { FIRST_PHASE_EXPOSURE, FIRST_PHASE_EXPOSURE_RATIONALE, } from "./tool-system/external-tool-exposure.js";
+export { webSearchTool } from "./tool-system/builtin/web-search.js";
+export { webFetchTool } from "./tool-system/builtin/web-fetch.js";
+export { extractJSON, extractJSONArray } from "./utils/json.js";
+export { registerCapability } from "./capabilities/index.js";
+export { BUILTIN_AGENT_PRESETS } from "./preset/index.js";
+export { BUILTIN_TOOLS, derivePresetExposure } from "./tool-system/builtin/index.js";
+export { SessionManager, codeShellHome } from "./session/session-manager.js";
+export { invalidateFileCache } from "./tool-system/builtin/file-cache.js";
+export { notificationQueue } from "./tool-system/builtin/agent-notifications.js";
+export { resolveExecutable, resolveGit } from "./utils/exec.js";
+export { safeSpawnShell } from "./runtime/safe-spawn.js";
+export { buildSandboxEnv, defaultShellBinary, killChildTree, killProcessGroup, mergeShellEnv, } from "./runtime/spawn-common.js";
+export { isExistingDirectory, normalizeCwdPath } from "./utils/cwd-normalize.js";
+export { backgroundJobRegistry, } from "./tool-system/builtin/background-jobs.js";
+export { ApprovalRouter } from "./tool-system/permission.js";