@cjhyy/code-shell-core 0.8.13 → 0.9.0

package/dist/engine/run-tooling.js

@@ -28,6 +28,7 @@ export function buildRunToolContext(args) {
         // properties and survive the spread. Off keeps network undefined.
         sandbox: args.sandbox,
         cwd: args.cwd,
+        workspace: args.workspace,
         shellEnv: args.shellEnv,
         // TodoWrite reads this to push task_update events independently
         // of its return value, so the UI's pinned task panel refreshes
@@ -166,6 +167,7 @@ export async function connectRunMcp(args) {
 export function buildToolVisibility(inputs) {
     return {
         cwd: inputs.cwd,
+        ...(inputs.workspace ? { workspace: inputs.workspace } : {}),
         hasGoal: inputs.hasGoal,
         ...(inputs.sessionId ? { sessionId: inputs.sessionId } : {}),
         ...(inputs.settingsScope ? { settingsScope: inputs.settingsScope } : {}),
@@ -186,6 +188,7 @@ export function assembleRunToolDefs(args) {
     const guardCwd = args.guardCwd;
     const toolVisibility = buildToolVisibility({
         cwd: guardCwd,
+        workspace: toolCtx.workspace,
         hasGoal: args.hasRunnableGoal,
         sessionId: toolCtx.sessionId,
         settingsScope: args.settingsScope,

package/dist/engine/run-types.d.ts

@@ -87,6 +87,8 @@ export declare const ISOLATED_TASK_SYSTEM_PROMPT = "# Isolated Task Boundary\n\n
 export declare const ISOLATED_TASK_PROFILE: RunBehaviorProfile;
 export interface EngineRunOptions {
     cwd?: string;
+    /** Trusted run-scoped root authorization. Protocol hosts must strip untrusted values. */
+    workspaceContext?: import("../workspace/workspace-context.js").WorkspaceContext;
     onStream?: StreamCallback;
     signal?: AbortSignal;
     sessionId?: string;
@@ -106,6 +108,8 @@ export interface EngineRunOptions {
     archiveBeforeCurrentTurn?: {
         fromClientMessageId?: string;
         segmentId?: string;
+        /** Host-authored replacement for the archived span; skips the summarizer. */
+        summary?: string;
     };
     attachments?: InputAttachmentMeta[];
     /** Named per-run behavior profile supplied by interactive product surfaces. */

package/dist/engine/run-workspace.d.ts

@@ -11,6 +11,7 @@ import type { SettingsManager } from "../settings/manager.js";
 import type { EngineConfig, EngineResult } from "./types.js";
 import type { EngineRunOptions, RunBehaviorProfile } from "./run-types.js";
 import { type RunProfileState } from "./run-setup.js";
+import { type WorkspaceContext } from "../workspace/workspace-context.js";
 /**
  * Resolve the working directory for a run. Precedence for legacy sessions:
  *   options.cwd  >  resumed session's state.cwd  >  config.cwd  >  process.cwd()
@@ -30,6 +31,9 @@ export interface RunWorkspaceResolution {
     runPermissionMode: NonNullable<EngineConfig["permissionMode"]>;
     runPlanMode: boolean;
     cwd: string;
+    workspaceContext: WorkspaceContext;
+    /** False only for the compatibility context synthesized from a lone cwd. */
+    authoritativeWorkspaceContext: boolean;
     profileState: RunProfileState;
 }
 export type ResolveRunWorkspaceResult = {
@@ -41,10 +45,11 @@ export type ResolveRunWorkspaceResult = {
 };
 export declare function resolveRunWorkspace(args: {
     options: EngineRunOptions | undefined;
-    sessionManager: Pick<SessionManager, "exists" | "readSessionKind" | "readSessionWorkspaceProfile" | "resolveSessionWorkspaceForResume" | "readSessionMainRoot">;
+    sessionManager: Pick<SessionManager, "exists" | "readSessionKind" | "readSessionWorkspaceProfile" | "resolveSessionWorkspaceForResume" | "readSessionMainRoot" | "readSessionProjectBinding">;
     resolveBehaviorProfile: (sessionKind: string, behaviorMode: string | undefined) => RunBehaviorProfile | undefined;
     configPermissionMode: EngineConfig["permissionMode"];
     configCwd: string | undefined;
+    configWorkspaceContext: WorkspaceContext | undefined;
     settings: SettingsManager;
     processCwd: string;
 }): Promise<ResolveRunWorkspaceResult>;

package/dist/engine/run-workspace.js

@@ -1,4 +1,6 @@
 import { resolveRunProfileState } from "./run-setup.js";
+import { canonicalKey } from "../workspace/canonical-key.js";
+import { legacySingleRootWorkspace, validateWorkspaceContext, workspacePrimaryRoot, } from "../workspace/workspace-context.js";
 /**
  * Resolve the working directory for a run. Precedence for legacy sessions:
  *   options.cwd  >  resumed session's state.cwd  >  config.cwd  >  process.cwd()
@@ -93,6 +95,37 @@ export async function resolveRunWorkspace(args) {
             configCwd: args.configCwd,
             processCwd: args.processCwd,
         });
+    const rawWorkspaceContext = options?.workspaceContext ?? args.configWorkspaceContext;
+    let workspaceContext;
+    try {
+        workspaceContext = rawWorkspaceContext
+            ? validateWorkspaceContext(rawWorkspaceContext)
+            : legacySingleRootWorkspace(cwd);
+    }
+    catch (error) {
+        return workspaceError(options?.sessionId, error instanceof Error ? error.message : String(error));
+    }
+    const authoritativeWorkspaceContext = rawWorkspaceContext !== undefined;
+    const primary = workspacePrimaryRoot(workspaceContext);
+    if (canonicalKey(primary.path) !== canonicalKey(cwd)) {
+        return workspaceError(options?.sessionId, `WorkspaceContext primary does not match effective cwd: ${primary.path} != ${cwd}`);
+    }
+    if (workspaceResume?.ok &&
+        workspaceResume.reason !== "legacy" &&
+        canonicalKey(workspaceResume.workspace.root) !== canonicalKey(primary.path)) {
+        return workspaceError(options?.sessionId, "WorkspaceContext primary does not match SessionWorkspace");
+    }
+    const binding = options?.sessionId
+        ? args.sessionManager.readSessionProjectBinding(options.sessionId)
+        : undefined;
+    if (binding && !authoritativeWorkspaceContext) {
+        return workspaceError(options?.sessionId, "bound Session requires an authoritative WorkspaceContext");
+    }
+    if (binding &&
+        (binding.projectId !== workspaceContext.projectId ||
+            binding.mainRootId !== workspaceContext.sessionMainRootId)) {
+        return workspaceError(options?.sessionId, "WorkspaceContext does not match persisted project binding");
+    }
     const profileState = profile?.disableWorkspaceProfile
         ? {
             workspaceProfile: undefined,
@@ -114,7 +147,21 @@ export async function resolveRunWorkspace(args) {
             runPermissionMode,
             runPlanMode,
             cwd,
+            workspaceContext,
+            authoritativeWorkspaceContext,
             profileState,
         },
     };
 }
+function workspaceError(sessionId, message) {
+    return {
+        ok: false,
+        result: {
+            text: `ERROR: ${message}`,
+            reason: "completed",
+            sessionId: sessionId ?? "workspace-invalid",
+            turnCount: 0,
+            usage: { promptTokens: 0, completionTokens: 0, totalTokens: 0 },
+        },
+    };
+}

package/dist/engine/subagent-spawner.d.ts

@@ -21,6 +21,7 @@ export interface CreateSubAgentSpawnerDeps {
     parentSandbox: SandboxConfig;
     presetName: AgentPresetName;
     cwd: string;
+    workspaceContext?: import("../workspace/workspace-context.js").WorkspaceContext;
     permissionMode: NonNullable<EngineConfig["permissionMode"]>;
     modelPool?: ModelPool;
     appendParentSubagent: (agentId: string, description: string) => void;

package/dist/engine/subagent-spawner.js

@@ -233,6 +233,7 @@ export function createSubAgentSpawner(deps) {
                     retryMaxAttempts: 2,
                 },
                 cwd: deps.cwd,
+                workspaceContext: deps.workspaceContext ?? deps.parentConfig.workspaceContext,
                 permissionMode: deps.permissionMode,
                 preset: deps.presetName,
                 enabledBuiltinTools: scope.enabled,

package/dist/engine/turn-loop.js

@@ -836,6 +836,23 @@ export class TurnLoop {
                     if (response.text) {
                         messages.push({ role: "assistant", content: response.text });
                     }
+                    // Anthropic streams tool_use_start as soon as the content block
+                    // opens. If max_tokens cuts the JSON arguments off, we deliberately
+                    // do not execute that call, but the renderer still needs a terminal
+                    // event for the already-open card. Without it Claude tool cards stay
+                    // "working" forever (often until a later context compaction hides
+                    // them), even though the loop has moved on to a retry.
+                    for (const toolCall of response.toolCalls) {
+                        this.config.onStream?.({
+                            type: "tool_result",
+                            result: {
+                                id: toolCall.id,
+                                toolName: toolCall.toolName,
+                                error: "Tool call was not executed because its arguments were truncated.",
+                                isError: true,
+                            },
+                        });
+                    }
                     messages.push({
                         role: "user",
                         content: "<system-reminder>Your previous response was truncated by the max output token limit before the tool call finished, so its arguments are incomplete. Do not assume it ran. Either retry with a smaller/more focused tool call (e.g. write the file in sections via Edit), or raise this model's maxOutputTokens.</system-reminder>",

package/dist/engine/types.d.ts

@@ -33,6 +33,8 @@ export interface EngineConfig {
      */
     clientDefaults?: ClientDefaults;
     cwd?: string;
+    /** Trusted host-provided root authorization for runs created by this Engine. */
+    workspaceContext?: import("../workspace/workspace-context.js").WorkspaceContext;
     maxTurns?: number;
     /**
      * Override the goal-mode consecutive-stop-block cap (TODO 3.1). Falls back to

package/dist/index.d.ts

@@ -3,8 +3,8 @@
  *
  * Public API exports.
  */
-export declare const VERSION = "0.8.13";
-export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionKind, SessionWorkspace, SessionForkLineage, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, TurnCompletionKind, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
+export declare const VERSION = "0.9.0";
+export type { Message, ContentBlock, ToolDefinition, ToolCall, ToolResult, RegisteredTool, TranscriptEvent, TranscriptEventType, SessionState, SessionKind, SessionWorkspace, SessionProjectBinding, SessionForkLineage, ContextUsageAnchor, SessionStatus, TokenUsage, CompiledInput, PermissionDecision, PermissionMode, PermissionRule, TurnPhase, TurnResult, TerminalReason, TurnCompletionKind, StreamEvent, StreamCallback, LLMConfig, ClientDefaults, LLMResponse, Settings, MCPServerConfig, } from "./types.js";
 export type { GoalConfig, GoalLifecycleConfig, GoalLifecyclePhase, GoalLifecycleTerminalReason, GoalLifecycleV1, } from "./goal/lifecycle.js";
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, CompositionError, SandboxUnavailableError, } from "./exceptions.js";
 export { compileComposition, toCompositionSnapshot, computeCompositionDigest, compositionToolCatalog, resolvePresetFromComposition, } from "./composition/index.js";
@@ -62,7 +62,7 @@ export { AgentClient, type BackgroundAgentCompletedHandler } from "./protocol/cl
 export { createInProcessTransport, StdioTransport, type Transport } from "./protocol/transport.js";
 export { SocketTransport, listenTcp, type TcpListenResult } from "./protocol/tcp-transport.js";
 export { createServer, createClient, type CreateServerOptions, type CreateClientOptions, type ServerHandle, } from "./protocol/factories.js";
-export { Methods, ErrorCodes, type RpcMessage, type RunResult, type ForkSessionParams, type ForkSessionResult as ProtocolForkSessionResult, } from "./protocol/types.js";
+export { Methods, ErrorCodes, type RpcMessage, type RunResult, type ForkSessionParams, type ForkSessionResult as ProtocolForkSessionResult, type MigrateSessionMainRootResult, } from "./protocol/types.js";
 export type * from "./protocol/mobile-remote-types.js";
 export { Transcript } from "./session/transcript.js";
 export { SessionManager, sessionMainRoot, codeShellHome, sessionsRoot, buildForkState, buildForkTranscript, type ForkSessionOptions, type ForkSessionResult, } from "./session/session-manager.js";
@@ -98,7 +98,7 @@ export { mergePluginMcpServers, readPluginMcp } from "./plugins/installer/loadPl
 export { approvePluginMcp, listPluginMcpTrust, revokePluginMcp, type PluginMcpApprovalResult, type PluginMcpTrustEntry, } from "./plugins/pluginMcpApproval.js";
 export { pluginMcpApprovalState, type PluginMcpApprovalState, } from "./plugins/pluginMcpIntegrity.js";
 export { pluginsRoot } from "./plugins/installer/paths.js";
-export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, type InstalledPanelApp, type InstalledPanelAppSource, type GitPanelAppSourceInput, type LocalPanelAppSourceInput, type PanelAppSourceInput, type PanelAppManifestData, type PanelAppBindingPolicy, type PanelAppPreview, } from "./panel-apps/index.js";
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, discoverGitPanelApps, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, type InstalledPanelApp, type InstalledPanelAppSource, type GitPanelAppDiscovery, type GitPanelAppDiscoveryCandidate, type GitPanelAppDiscoveryIssue, type GitPanelAppSourceInput, type LocalPanelAppSourceInput, type PanelAppSourceInput, type PanelAppManifestData, type PanelAppBindingPolicy, type PanelAppPreview, } from "./panel-apps/index.js";
 export { previewLocalTheme, installReviewedLocalTheme, listInstalledThemes, uninstallTheme, themesRoot, themeInstallDir, assertSafeThemeName, ThemeInstallError, ThemeReviewChangedError, THEME_ASSET_DIR, THEME_VAR_NAMES, detectThemeImage, type ThemePreview, type InstalledTheme, type ThemeManifest, } from "./themes/index.js";
 export { resolveSafePluginPath } from "./plugins/pluginInstaller.js";
 export { listPluginHooks, pluginHookKey, type PluginHookEntry } from "./plugins/loadPluginHooks.js";

package/dist/index.extension.d.ts

@@ -26,7 +26,7 @@ export type { ExposureRationale } from "./tool-system/external-tool-exposure.js"
 export { webSearchTool } from "./tool-system/builtin/web-search.js";
 export { webFetchTool } from "./tool-system/builtin/web-fetch.js";
 export { extractJSON, extractJSONArray } from "./utils/json.js";
-export type { ExtensionQueryHandler, ExtensionTool, } from "./tool-system/capability-module.js";
+export type { ExtensionQueryHandler, ExtensionTool } from "./tool-system/capability-module.js";
 export type { SessionWorkspace } from "./types.js";
 export type { CapabilityArtifactDetector, CapabilityDynamicContextProvider, CapabilityToolServiceHost, } from "./capabilities/index.js";
 export type { AgentModule, AgentEngineContributions, AgentProtocolContributions, AgentModuleToolContribution, ResolvedComposition, } from "./composition/types.js";

package/dist/index.internal.d.ts

@@ -7,6 +7,7 @@
  */
 export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
 export { env } from "./utils/env.js";
+export { canonicalKey, canonicalPath, computeWorkspaceRootsDigest, createWorkspaceContext, legacySingleRootWorkspace, validateWorkspaceContext, workspacePrimaryRoot, type ProjectId, type ProjectRootContext, type ProjectRootId, type WorkspaceContext, type WorkspaceContextInput, } from "./workspace/workspace-context.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
 export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
@@ -26,7 +27,7 @@ export { recordUIEvent } from "./logging/session-recorder.js";
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig, type SandboxConfig } from "./tool-system/sandbox/index.js";
 export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
-export type { BackgroundAgentCompletedEvent } from "./types.js";
+export { backgroundJobRegistry } from "./tool-system/builtin/background-jobs.js";
 export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronExecutionOutcome, type CronJob, type CronJobLifecycleEvent, type CronPermissionLevel, type CronTemplateSource, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, validateSchedule, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
 export { asyncAgentRegistry, type AsyncAgentEntry } from "./tool-system/builtin/agent-registry.js";
 export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
@@ -45,7 +46,7 @@ export { capabilitiesFor, type Capability } from "./llm/capabilities/index.js";
 export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
 export { REASONING_EFFORTS, type ReasoningSetting } from "./llm/reasoning-setting.js";
 export { type ProviderConfig } from "./llm/provider-catalog.js";
-export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo } from "./types.js";
+export type { ApprovalRequest, ApprovalResult, ApprovalScope, BackgroundAgentCompletedEvent, TaskInfo, } from "./types.js";
 export { fileCache } from "./tool-system/builtin/file-cache.js";
 export { validateToolArgs } from "./tool-system/validation.js";
 export { createOffBackend } from "./tool-system/sandbox/off.js";

package/dist/index.internal.js

@@ -8,6 +8,7 @@
 // ─── Utils (shared primitives used by TUI) ───────────────────────
 export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
 export { env } from "./utils/env.js";
+export { canonicalKey, canonicalPath, computeWorkspaceRootsDigest, createWorkspaceContext, legacySingleRootWorkspace, validateWorkspaceContext, workspacePrimaryRoot, } from "./workspace/workspace-context.js";
 export { default as sliceAnsi } from "./utils/sliceAnsi.js";
 export { execFileNoThrow } from "./utils/execFileNoThrow.js";
 export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
@@ -29,6 +30,7 @@ export { recordUIEvent } from "./logging/session-recorder.js";
 export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
 export { defaultSandboxConfig } from "./tool-system/sandbox/index.js";
 export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
+export { backgroundJobRegistry } from "./tool-system/builtin/background-jobs.js";
 export { startAutomation, CronScheduler, cronScheduler, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, isCronExpression, parseCronExpression, nextCronTime, validateSchedule, resolveWritePolicy, wrapUntrustedInput, runWriteJobInWorktree, } from "./automation/index.js";
 export { asyncAgentRegistry } from "./tool-system/builtin/agent-registry.js";
 export { backgroundShellManager, BackgroundShellManager, } from "./runtime/background-shell.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export const VERSION = "0.8.13";
+export const VERSION = "0.9.0";
 // ─── Exceptions ──────────────────────────────────────────────────
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, CompositionError, SandboxUnavailableError, } from "./exceptions.js";
 // ─── Composition (AgentModule / ResolvedComposition) ─────────────
@@ -82,7 +82,7 @@ export { mergePluginMcpServers, readPluginMcp } from "./plugins/installer/loadPl
 export { approvePluginMcp, listPluginMcpTrust, revokePluginMcp, } from "./plugins/pluginMcpApproval.js";
 export { pluginMcpApprovalState, } from "./plugins/pluginMcpIntegrity.js";
 export { pluginsRoot } from "./plugins/installer/paths.js";
-export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, } from "./panel-apps/index.js";
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, discoverGitPanelApps, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, } from "./panel-apps/index.js";
 export { previewLocalTheme, installReviewedLocalTheme, listInstalledThemes, uninstallTheme, themesRoot, themeInstallDir, assertSafeThemeName, ThemeInstallError, ThemeReviewChangedError, THEME_ASSET_DIR, THEME_VAR_NAMES, detectThemeImage, } from "./themes/index.js";
 export { resolveSafePluginPath } from "./plugins/pluginInstaller.js";
 export { listPluginHooks, pluginHookKey } from "./plugins/loadPluginHooks.js";

package/dist/llm/client-base.d.ts

@@ -12,6 +12,7 @@ export declare abstract class LLMClientBase {
     readonly timeout: number;
     readonly retryMaxAttempts: number;
     readonly imageDetail?: ClientDefaults["imageDetail"];
+    protected readonly fetch?: ClientDefaults["fetch"];
     /**
      * Process-wide hook fired on every LLM response. The CLI installs this in
      * main.ts to feed the cost tracker; lives on the base class so every code
@@ -23,7 +24,7 @@ export declare abstract class LLMClientBase {
     /**
      * `config` carries model identity (provider/model/apiKey/baseUrl/maxTokens/
      * thinking/providerKind). `defaults` carries cross-model runtime knobs
-     * (temperature/timeout/retryMaxAttempts/imageDetail) — those are owned by
+     * (temperature/timeout/retryMaxAttempts/imageDetail/fetch) — those are owned by
      * the Engine and stay stable across hot model switches.
      */
     constructor(config: LLMConfig, defaults?: ClientDefaults);

package/dist/llm/client-base.js

@@ -23,6 +23,7 @@ export class LLMClientBase {
     timeout;
     retryMaxAttempts;
     imageDetail;
+    fetch;
     /**
      * Process-wide hook fired on every LLM response. The CLI installs this in
      * main.ts to feed the cost tracker; lives on the base class so every code
@@ -34,7 +35,7 @@ export class LLMClientBase {
     /**
      * `config` carries model identity (provider/model/apiKey/baseUrl/maxTokens/
      * thinking/providerKind). `defaults` carries cross-model runtime knobs
-     * (temperature/timeout/retryMaxAttempts/imageDetail) — those are owned by
+     * (temperature/timeout/retryMaxAttempts/imageDetail/fetch) — those are owned by
      * the Engine and stay stable across hot model switches.
      */
     constructor(config, defaults) {
@@ -51,6 +52,7 @@ export class LLMClientBase {
         this.timeout = defaults?.timeout ?? 120_000;
         this.retryMaxAttempts = defaults?.retryMaxAttempts ?? 3;
         this.imageDetail = defaults?.imageDetail;
+        this.fetch = defaults?.fetch;
         this.initClient();
     }
     recordUsage(usage, options) {

package/dist/llm/providers/anthropic.js

@@ -21,6 +21,25 @@ const ANTHROPIC_FALLBACK_MAX_TOKENS = 4096;
  * no explicit token budget was given. Clamped up to the model's minimum.
  */
 const ANTHROPIC_DEFAULT_THINKING_BUDGET = 4096;
+/**
+ * Anthropic reports uncached input, cache writes, and cache reads as three
+ * disjoint counters. `TokenUsage.promptTokens` is the whole prompt throughout
+ * CodeShell (OpenAI includes cached tokens in prompt_tokens), so normalize the
+ * Anthropic shape before context accounting, compaction, cache-hit math, and
+ * cost tracking consume it.
+ */
+function tokenUsageFromAnthropic(usage) {
+    const cacheReadTokens = usage.cache_read_input_tokens ?? 0;
+    const cacheCreationTokens = usage.cache_creation_input_tokens ?? 0;
+    const promptTokens = usage.input_tokens + cacheReadTokens + cacheCreationTokens;
+    return {
+        promptTokens,
+        completionTokens: usage.output_tokens,
+        totalTokens: promptTokens + usage.output_tokens,
+        ...(usage.cache_read_input_tokens != null ? { cacheReadTokens } : {}),
+        ...(usage.cache_creation_input_tokens != null ? { cacheCreationTokens } : {}),
+    };
+}
 export class AnthropicClient extends LLMClientBase {
     _client = null;
     constructor(config, defaults) {
@@ -37,6 +56,7 @@ export class AnthropicClient extends LLMClientBase {
                 apiKey: resolveApiKey(this.config, process.env.ANTHROPIC_API_KEY),
                 ...(this.config.baseUrl ? { baseURL: this.config.baseUrl } : {}),
                 ...(Object.keys(headers).length > 0 ? { defaultHeaders: headers } : {}),
+                ...(this.fetch ? { fetch: this.fetch } : {}),
                 timeout: this.timeout,
             });
         }
@@ -106,9 +126,7 @@ export class AnthropicClient extends LLMClientBase {
         if (ceiling < min) {
             return undefined;
         }
-        let budget = reasoning.mode === "budget"
-            ? reasoning.budgetTokens
-            : ANTHROPIC_DEFAULT_THINKING_BUDGET; // "on" or "effort" → default budget
+        let budget = reasoning.mode === "budget" ? reasoning.budgetTokens : ANTHROPIC_DEFAULT_THINKING_BUDGET; // "on" or "effort" → default budget
         // Clamp into [min, ceiling] — both bounds are now guaranteed ≥ min.
         budget = Math.min(Math.max(budget, min), ceiling);
         return { type: "enabled", budget_tokens: budget };
@@ -172,13 +190,7 @@ export class AnthropicClient extends LLMClientBase {
                     ? { temperature: options.temperature }
                     : { temperature: this.temperature }),
             }, { signal: requestSignal ?? options.signal });
-            const usage = {
-                promptTokens: response.usage.input_tokens,
-                completionTokens: response.usage.output_tokens,
-                totalTokens: response.usage.input_tokens + response.usage.output_tokens,
-                cacheReadTokens: response.usage.cache_read_input_tokens,
-                cacheCreationTokens: response.usage.cache_creation_input_tokens,
-            };
+            const usage = tokenUsageFromAnthropic(response.usage);
             this.recordUsage(usage, options);
             return this.processResponse(response, usage);
         }
@@ -209,10 +221,8 @@ export class AnthropicClient extends LLMClientBase {
                     ? { temperature: options.temperature }
                     : { temperature: this.temperature }),
             }, { signal: requestSignal ?? options.signal });
-            let currentText = "";
             let currentToolName = "";
             let currentToolId = "";
-            let currentToolInput = "";
             // Abort-guarded emit: once the turn is cancelled, stop forwarding chunks
             // to the UI. The SDK's event emitter can keep firing buffered text/
             // contentBlock/inputJson events after abort() until its HTTP stream tears
@@ -249,14 +259,12 @@ export class AnthropicClient extends LLMClientBase {
                         ttft_ms: Date.now() - streamStartedAt,
                     });
                 }
-                currentText += text;
                 emit({ type: "text", text, tokens: countTokens(text) });
             });
             stream.on("contentBlock", (block) => {
                 if (block.type === "tool_use") {
                     currentToolName = block.name;
                     currentToolId = block.id;
-                    currentToolInput = "";
                     emit({
                         type: "tool_use_start",
                         toolCall: { id: block.id, toolName: block.name, args: {} },
@@ -264,7 +272,6 @@ export class AnthropicClient extends LLMClientBase {
                 }
             });
             stream.on("inputJson", (_delta, snapshot) => {
-                currentToolInput = JSON.stringify(snapshot);
                 if (currentToolId) {
                     emit({
                         type: "tool_use_delta",
@@ -277,13 +284,7 @@ export class AnthropicClient extends LLMClientBase {
                 }
             });
             const finalMessage = await stream.finalMessage();
-            const usage = {
-                promptTokens: finalMessage.usage.input_tokens,
-                completionTokens: finalMessage.usage.output_tokens,
-                totalTokens: finalMessage.usage.input_tokens + finalMessage.usage.output_tokens,
-                cacheReadTokens: finalMessage.usage.cache_read_input_tokens,
-                cacheCreationTokens: finalMessage.usage.cache_creation_input_tokens,
-            };
+            const usage = tokenUsageFromAnthropic(finalMessage.usage);
             this.recordUsage(usage, options);
             options.onChunk?.({ type: "stop", stopReason: finalMessage.stop_reason ?? undefined });
             return this.processResponse(finalMessage, usage);
@@ -415,9 +416,7 @@ export class AnthropicClient extends LLMClientBase {
                 // marking them would 400. buildMessages never emits them today (thinking
                 // is a top-level request field, not history content), but guard anyway
                 // so a future block type can't silently break the request.
-                if (lastBlock &&
-                    lastBlock.type !== "thinking" &&
-                    lastBlock.type !== "redacted_thinking") {
+                if (lastBlock && lastBlock.type !== "thinking" && lastBlock.type !== "redacted_thinking") {
                     lastBlock.cache_control = { type: "ephemeral" };
                 }
             }

package/dist/llm/providers/openai.d.ts

@@ -49,9 +49,12 @@ interface RunStreamOpts {
 export declare function runStreamWithWatchdog<T = any>(stream: AsyncIterable<T>, opts?: RunStreamOpts): Promise<string>;
 export declare class OpenAIClient extends LLMClientBase {
     private _client;
+    private readonly dangerouslyAllowBrowser;
     private _forceMaxCompletionTokens;
     private _dropReasoningEffort;
-    constructor(config: LLMConfig, defaults?: ClientDefaults);
+    constructor(config: LLMConfig, defaults?: ClientDefaults, runtimeOptions?: {
+        dangerouslyAllowBrowser?: boolean;
+    });
     protected initClient(): void;
     private get client();
     /**