@cruxy/cli 1.0.3 → 1.0.5

package/dist/config/schema.d.ts

@@ -1,2143 +0,0 @@
-import { z } from "zod";
-export declare const ProviderSchema: z.ZodEnum<["cruxy", "anthropic", "openai", "custom"]>;
-export type Provider = z.infer<typeof ProviderSchema>;
-export declare const ModelConfigSchema: z.ZodObject<{
-    provider: z.ZodDefault<z.ZodEnum<["cruxy", "anthropic", "openai", "custom"]>>;
-    model: z.ZodDefault<z.ZodString>;
-    maxTokens: z.ZodDefault<z.ZodNumber>;
-    temperature: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    provider: "cruxy" | "anthropic" | "openai" | "custom";
-    model: string;
-    maxTokens: number;
-    temperature: number;
-}, {
-    provider?: "cruxy" | "anthropic" | "openai" | "custom" | undefined;
-    model?: string | undefined;
-    maxTokens?: number | undefined;
-    temperature?: number | undefined;
-}>;
-/** Cruxy gateway backend settings (no secrets — the API key comes from env). */
-export declare const CruxyBackendConfigSchema: z.ZodObject<{
-    gatewayUrl: z.ZodDefault<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    gatewayUrl: string;
-}, {
-    gatewayUrl?: string | undefined;
-}>;
-export declare const AgentConfigSchema: z.ZodObject<{
-    /**
-     * Hard ceiling on agent loop turns per user turn — the interactive default.
-     * In the REPL this is a soft checkpoint: hitting it ends the turn and the
-     * human continues (or Ctrl-C's a runaway), so it can be generous.
-     */
-    maxIterations: z.ZodDefault<z.ZodNumber>;
-    /**
-     * Turn ceiling for a ONE-SHOT `cruxy run "task"` (non-interactive). Set higher
-     * than {@link maxIterations} because a headless run has no human to resume it:
-     * hitting the cap abandons the whole task (fail-loud, non-zero exit), so it
-     * must clear the legit long tail (real "fix the failing tests" work runs
-     * ~10-25 turns) while still bounding a runaway. Not clamped to
-     * `maxIterations` — a user may deliberately set it lower or higher.
-     */
-    maxIterationsOneShot: z.ZodDefault<z.ZodNumber>;
-    /**
-     * Optional hard cap on combined input+output tokens for a SINGLE user turn
-     * — a last-resort runaway guard, not cost control (cumulative session cost
-     * is C.22's concern). OFF by default (0 = off): today's behavior is
-     * preserved exactly and no turn is ever token-stopped. When set, a turn that
-     * crosses the cap stops at the next turn boundary with a coherent partial
-     * history (`stop: "budget"`); in one-shot that fails loud (exit 20), while
-     * interactively the human simply continues. Compaction is the everyday
-     * pressure valve for context — this only bounds a genuinely runaway turn, so
-     * a hostile hard stop mid-work stays opt-in. Reset each `send`, never
-     * cumulative across turns.
-     */
-    maxTokensPerTurn: z.ZodDefault<z.ZodNumber>;
-    /** Skip per-action confirmation prompts. */
-    autoApprove: z.ZodDefault<z.ZodBoolean>;
-    /** Plan mode: propose a plan for approval before executing (C.31, opt-in). */
-    planMode: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    maxIterations: number;
-    maxIterationsOneShot: number;
-    maxTokensPerTurn: number;
-    autoApprove: boolean;
-    planMode: boolean;
-}, {
-    maxIterations?: number | undefined;
-    maxIterationsOneShot?: number | undefined;
-    maxTokensPerTurn?: number | undefined;
-    autoApprove?: boolean | undefined;
-    planMode?: boolean | undefined;
-}>;
-export declare const ToolsConfigSchema: z.ZodObject<{
-    fileEdit: z.ZodDefault<z.ZodBoolean>;
-    shell: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    fileEdit: boolean;
-    shell: boolean;
-}, {
-    fileEdit?: boolean | undefined;
-    shell?: boolean | undefined;
-}>;
-export declare const GitConfigSchema: z.ZodObject<{
-    autoCommit: z.ZodDefault<z.ZodBoolean>;
-    /** Branches cruxy never commits/pushes to directly (PR flow branches off
-     * first). `main` and `master` are always protected; these add to them. */
-    protectedBranches: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    /** Default base branch for generated pull requests; falls back to the
-     * repo's default branch, then `main`, when unset. */
-    defaultBase: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    autoCommit: boolean;
-    protectedBranches: string[];
-    defaultBase?: string | undefined;
-}, {
-    autoCommit?: boolean | undefined;
-    protectedBranches?: string[] | undefined;
-    defaultBase?: string | undefined;
-}>;
-/** Execution bounds for the `run_command` shell tool (distinct from the
- * `tools.shell` enable flag above). */
-export declare const ShellConfigSchema: z.ZodObject<{
-    /** Kill the command (and its process tree) after this many ms. */
-    timeoutMs: z.ZodDefault<z.ZodNumber>;
-    /** Cap on combined stdout+stderr bytes captured; the rest is truncated. */
-    maxOutputBytes: z.ZodDefault<z.ZodNumber>;
-    /**
-     * Explicit shell to run commands through, overriding platform detection. A
-     * path (`/bin/bash`, `C:\\Program Files\\Git\\bin\\bash.exe`, `pwsh`). When
-     * set it WINS over the Git Bash → PowerShell tiering (see resolve-shell.ts):
-     * the user owns the choice. Unset → POSIX uses the default shell; Windows
-     * probes for Git Bash, then PowerShell, then fails loud (CRUXY_E_NO_SHELL).
-     */
-    executable: z.ZodOptional<z.ZodString>;
-    /**
-     * The command dialect of `executable`, so the model is told which syntax to
-     * emit. Only sniffed automatically for unambiguous basenames (bash/sh →
-     * posix, pwsh/powershell → powershell, cmd → cmd); set this for anything else
-     * or the override is rejected (CRUXY_E_CONFIG_INVALID). Ignored without
-     * `executable`.
-     */
-    dialect: z.ZodOptional<z.ZodEnum<["posix", "powershell", "cmd"]>>;
-}, "strict", z.ZodTypeAny, {
-    timeoutMs: number;
-    maxOutputBytes: number;
-    executable?: string | undefined;
-    dialect?: "posix" | "powershell" | "cmd" | undefined;
-}, {
-    timeoutMs?: number | undefined;
-    maxOutputBytes?: number | undefined;
-    executable?: string | undefined;
-    dialect?: "posix" | "powershell" | "cmd" | undefined;
-}>;
-export type ShellConfig = z.infer<typeof ShellConfigSchema>;
-/** Context-window management: when to compact the running conversation. */
-export declare const ContextConfigSchema: z.ZodObject<{
-    /** Approximate model context budget, in tokens (heuristic estimate). */
-    maxTokens: z.ZodDefault<z.ZodNumber>;
-    /** Compact once the history estimate exceeds this fraction of maxTokens. */
-    compactThreshold: z.ZodDefault<z.ZodNumber>;
-    /**
-     * Fixed token allowance for request payload that `estimateTokens` never
-     * sees — the system prompt and every tool's JSON schema — added to the
-     * measured history before the threshold test so the trigger reflects the
-     * real request size, not just the visible messages. Roughly the size of
-     * the built system prompt plus the default tool catalogue today.
-     */
-    reserveTokens: z.ZodDefault<z.ZodNumber>;
-    /** Most-recent messages always kept verbatim (a floor; the cut rounds up to
-     * a clean turn boundary). */
-    keepRecentMessages: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    maxTokens: number;
-    compactThreshold: number;
-    reserveTokens: number;
-    keepRecentMessages: number;
-}, {
-    maxTokens?: number | undefined;
-    compactThreshold?: number | undefined;
-    reserveTokens?: number | undefined;
-    keepRecentMessages?: number | undefined;
-}>;
-/**
- * How tool-action approval is resolved. Only `prompt` exists: ask interactively
- * and **deny by default** when non-interactive. There is deliberately no
- * auto-approve / skip mode — the policy seam for a future CI mode lives in
- * `src/approval` (see U.3), not behind a footgun flag.
- */
-export declare const ApprovalConfigSchema: z.ZodObject<{
-    mode: z.ZodDefault<z.ZodEnum<["prompt"]>>;
-}, "strict", z.ZodTypeAny, {
-    mode: "prompt";
-}, {
-    mode?: "prompt" | undefined;
-}>;
-/**
- * Codebase semantic index (C.17): the local embedding index that backs the
- * `search_codebase` tool and `cruxy index`. Every field is defaulted so the
- * feature works with zero configuration.
- */
-export declare const IndexConfigSchema: z.ZodObject<{
-    /** Master switch for `search_codebase` and `cruxy index`. */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Embedding backend. Only `fastembed` (bge-small-en-v1.5, local ONNX; the
-     * model downloads and caches on first use) is selectable — if it cannot be
-     * loaded, or the model cannot be downloaded/initialized, indexing fails
-     * loudly rather than degrading. (The deterministic hashing embedder exists
-     * for tests and is injected directly, never chosen here.)
-     *
-     * THE STORE-VS-EMBEDDER ASYMMETRY (deliberate — see `store` below). The
-     * embedder has NO degrade path while the store's `auto` does, and that is
-     * correct, not an inconsistency: a store fallback (sqlite → in-memory) loses
-     * only PERSISTENCE — search results are byte-identical, you just re-index
-     * each session, a quality-NEUTRAL trade. The embedder's only cheaper
-     * substitute is the lexical hashing backend, whose degrade is a SILENT
-     * QUALITY LOSS — semantic search quietly stops being semantic. That is the
-     * "reads like success, isn't" trap C.17 forbids, so the embedder fails loud
-     * (module-load → CRUXY_E_INDEX_EMBEDDER_UNAVAILABLE; first-run download/init
-     * → CRUXY_E_INDEX_EMBEDDER_DOWNLOAD_FAILED) and `search_codebase` routes the
-     * model to `grep_files` rather than substituting a weaker index.
-     */
-    embedder: z.ZodDefault<z.ZodEnum<["fastembed"]>>;
-    /**
-     * Vector store backend. `sqlite` persists to `.cruxy/index.db` via
-     * better-sqlite3; `memory` is ephemeral (tests). `auto` prefers sqlite and
-     * falls back to memory when the native dependency cannot be loaded — a
-     * quality-NEUTRAL degrade (only persistence is lost; results are identical).
-     * This is why `auto` may degrade while `embedder` may not — see the
-     * asymmetry note above.
-     */
-    store: z.ZodDefault<z.ZodEnum<["auto", "sqlite", "memory"]>>;
-    /** Hard per-file size cap, in bytes; larger files are skipped entirely. */
-    maxFileBytes: z.ZodDefault<z.ZodNumber>;
-    chunk: z.ZodEffects<z.ZodDefault<z.ZodObject<{
-        /** Target chunk window, in lines. */
-        windowLines: z.ZodDefault<z.ZodNumber>;
-        /** Lines shared between consecutive chunks; must be < windowLines. */
-        overlapLines: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        windowLines: number;
-        overlapLines: number;
-    }, {
-        windowLines?: number | undefined;
-        overlapLines?: number | undefined;
-    }>>, {
-        windowLines: number;
-        overlapLines: number;
-    }, {
-        windowLines?: number | undefined;
-        overlapLines?: number | undefined;
-    } | undefined>;
-    search: z.ZodDefault<z.ZodObject<{
-        /** Number of hits returned when the tool omits `k`. */
-        defaultK: z.ZodDefault<z.ZodNumber>;
-        /** Approximate token budget for combined snippets (chars/4 heuristic). */
-        tokenBudget: z.ZodDefault<z.ZodNumber>;
-        /** Maximum lines kept in any single returned snippet. */
-        maxSnippetLines: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        defaultK: number;
-        tokenBudget: number;
-        maxSnippetLines: number;
-    }, {
-        defaultK?: number | undefined;
-        tokenBudget?: number | undefined;
-        maxSnippetLines?: number | undefined;
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    search: {
-        defaultK: number;
-        tokenBudget: number;
-        maxSnippetLines: number;
-    };
-    enabled: boolean;
-    embedder: "fastembed";
-    store: "memory" | "auto" | "sqlite";
-    maxFileBytes: number;
-    chunk: {
-        windowLines: number;
-        overlapLines: number;
-    };
-}, {
-    search?: {
-        defaultK?: number | undefined;
-        tokenBudget?: number | undefined;
-        maxSnippetLines?: number | undefined;
-    } | undefined;
-    enabled?: boolean | undefined;
-    embedder?: "fastembed" | undefined;
-    store?: "memory" | "auto" | "sqlite" | undefined;
-    maxFileBytes?: number | undefined;
-    chunk?: {
-        windowLines?: number | undefined;
-        overlapLines?: number | undefined;
-    } | undefined;
-}>;
-/**
- * Working-tree checkpoints (C.32): a snapshot taken before an agent run's first
- * file mutation, so `cruxy rollback` can undo the whole run atomically.
- */
-export declare const CheckpointConfigSchema: z.ZodObject<{
-    /** Auto-checkpoint before a run's first mutation (and enable `cruxy rollback`). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /** How many checkpoints to keep; older ones are pruned oldest-first. */
-    retention: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    retention: number;
-}, {
-    enabled?: boolean | undefined;
-    retention?: number | undefined;
-}>;
-/**
- * Test-execution loop (C.13): how the agent runs the project's test suite and
- * iterates on failures. The command is detected from package.json when unset;
- * cruxy never invents one.
- */
-export declare const TestConfigSchema: z.ZodObject<{
-    /** Explicit test command (overrides package.json detection). */
-    command: z.ZodOptional<z.ZodString>;
-    /** Consecutive failing runs before the edit→re-run loop trips its cap. */
-    maxIterations: z.ZodDefault<z.ZodNumber>;
-    /** Cap on captured test output bytes (tail-biased — failures come last). */
-    captureBytes: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    maxIterations: number;
-    captureBytes: number;
-    command?: string | undefined;
-}, {
-    command?: string | undefined;
-    maxIterations?: number | undefined;
-    captureBytes?: number | undefined;
-}>;
-/**
- * Subagent orchestration (C.14): scoped child agents the main agent can spawn
- * for bounded subtasks. Every cap here is a hard bound — a subagent can narrow
- * its budget at spawn time but never exceed these ceilings.
- */
-export declare const SubagentConfigSchema: z.ZodObject<{
-    /**
-     * Maximum subagent nesting depth. The main agent is depth 0; the default of
-     * 1 lets it spawn subagents that cannot themselves spawn (no fork bombs).
-     */
-    maxDepth: z.ZodDefault<z.ZodNumber>;
-    /**
-     * Parallel fan-out breadth (C.33): the maximum number of subagents that run
-     * concurrently across the whole session, enforced by one shared semaphore.
-     * Parallel fan-out happens at depth 0 only and everything beneath it is
-     * sequential, so this composes with {@link maxDepth} into a LINEAR global
-     * ceiling (≤ maxConcurrency × maxDepth live agents) — never an exponential
-     * depth×breadth fork bomb. Default 3.
-     */
-    maxConcurrency: z.ZodDefault<z.ZodNumber>;
-    /** Per-subagent budget ceilings; spawn-time overrides are clamped to these. */
-    defaultBudget: z.ZodDefault<z.ZodObject<{
-        /** Hard cap on the subagent's model turns. */
-        maxIterations: z.ZodDefault<z.ZodNumber>;
-        /** Hard cap on the subagent's combined input+output tokens. */
-        maxTokens: z.ZodDefault<z.ZodNumber>;
-        /** Optional wall-clock cap; unset means no time limit. */
-        timeoutMs: z.ZodOptional<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        maxIterations: number;
-        maxTokens: number;
-        timeoutMs?: number | undefined;
-    }, {
-        timeoutMs?: number | undefined;
-        maxIterations?: number | undefined;
-        maxTokens?: number | undefined;
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    maxDepth: number;
-    maxConcurrency: number;
-    defaultBudget: {
-        maxIterations: number;
-        maxTokens: number;
-        timeoutMs?: number | undefined;
-    };
-}, {
-    maxDepth?: number | undefined;
-    maxConcurrency?: number | undefined;
-    defaultBudget?: {
-        timeoutMs?: number | undefined;
-        maxIterations?: number | undefined;
-        maxTokens?: number | undefined;
-    } | undefined;
-}>;
-/**
- * Session-scoped background jobs (C.28): non-interactive orchestration the main
- * agent dispatches with `run_in_background`, running CONCURRENTLY with the
- * foreground session but bound to it — nothing survives session exit (NOT a
- * daemon). A job hitting a gated action enqueues an approval request into the one
- * foreground queue and pauses until a human services it; a paused job releases
- * its execution slot.
- *
- * Two distinct ceilings, stated explicitly because they bound different things:
- *   • {@link maxJobs} — how many background JOBS may exist at once (queued +
- *     running + paused). A dispatch past it is refused (`CRUXY_E_JOB_LIMIT`).
- *   • the shared execution cap is `subagent.maxConcurrency` (default 3) — how many
- *     runs (subagents AND jobs, combined) may EXECUTE at once. It is NOT
- *     duplicated here: jobs and subagents draw from the one semaphore. So up to
- *     `maxJobs` jobs can be alive while only `maxConcurrency` execute; the rest
- *     wait for a slot (or are paused on a human).
- */
-export declare const JobsConfigSchema: z.ZodObject<{
-    /**
-     * Master switch. When true, the `run_in_background` tool is registered so the
-     * agent can dispatch background jobs. OFF by default — background work is an
-     * opt-in capability, and a session that never enables it behaves exactly as
-     * before (no tool, no manager, no queue).
-     */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Ceiling on live background jobs (queued + running + paused). Distinct from
-     * the shared execution cap (`subagent.maxConcurrency`): this bounds how many
-     * jobs can be OUTSTANDING, not how many run at once. Default 5.
-     */
-    maxJobs: z.ZodDefault<z.ZodNumber>;
-    /**
-     * How many of a job's most-recent log lines are retained in its ring buffer
-     * for `cruxy logs <id>`. Bounded so a chatty job can't grow memory without
-     * limit; older lines roll off oldest-first. Default 1000.
-     */
-    logBufferLines: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    maxJobs: number;
-    enabled: boolean;
-    logBufferLines: number;
-}, {
-    maxJobs?: number | undefined;
-    enabled?: boolean | undefined;
-    logBufferLines?: number | undefined;
-}>;
-export type JobsConfig = z.infer<typeof JobsConfigSchema>;
-/**
- * Sandbox / container execution (C.16): defense-in-depth beneath the U.3 gate.
- * When enabled, `run_command` and `run_tests` execute inside an isolated,
- * network-denied, resource-capped, non-root container with only the project
- * workdir mounted — never on the host directly. OFF by default (a container
- * runtime isn't universal); turning it on is a hard promise, so if the runtime
- * is missing execution FAILS LOUD rather than silently falling back to the host.
- */
-export declare const SandboxConfigSchema: z.ZodObject<{
-    /** Master switch. When true, shell + test commands run in the sandbox. */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Base image the container runs. Must ship a POSIX `sh`. Pin by digest
-     * (`name@sha256:…`) where possible; cruxy never builds or substitutes one.
-     */
-    image: z.ZodDefault<z.ZodString>;
-    /**
-     * Egress policy. `none` denies all network (default deny); `host-loopback`
-     * permits reaching services on the host; `full` allows outbound. Anything
-     * other than `none` is a deliberate widening the user must opt into.
-     */
-    network: z.ZodDefault<z.ZodEnum<["none", "host-loopback", "full"]>>;
-    /** Memory cap (docker `--memory` syntax, e.g. `512m`, `2g`). */
-    memory: z.ZodDefault<z.ZodString>;
-    /** Process/thread cap (`--pids-limit`) — a fork-bomb guard. */
-    pids: z.ZodDefault<z.ZodNumber>;
-    /** CPU cap (docker `--cpus`, fractional allowed). */
-    cpus: z.ZodDefault<z.ZodNumber>;
-    /** Wall-clock timeout in ms; falls back to `shell.timeoutMs` when unset. */
-    timeout: z.ZodOptional<z.ZodNumber>;
-    /**
-     * Extra bind mounts beyond the workdir + tmp, each `src:dst[:ro|:rw]`.
-     * Explicit by construction — the default exposes ONLY the workdir. The
-     * docker socket and the cruxy home are rejected here (see policy.ts).
-     */
-    mounts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    memory: string;
-    image: string;
-    enabled: boolean;
-    network: "none" | "host-loopback" | "full";
-    pids: number;
-    cpus: number;
-    mounts: string[];
-    timeout?: number | undefined;
-}, {
-    memory?: string | undefined;
-    image?: string | undefined;
-    enabled?: boolean | undefined;
-    network?: "none" | "host-loopback" | "full" | undefined;
-    pids?: number | undefined;
-    cpus?: number | undefined;
-    timeout?: number | undefined;
-    mounts?: string[] | undefined;
-}>;
-export type SandboxConfig = z.infer<typeof SandboxConfigSchema>;
-/**
- * Hooks + custom slash commands (C.19). Hooks run user-authored shell commands
- * on lifecycle events — a real execution surface — so they are OFF by default
- * and, when on, still funnel through the SAME U.3 gate + C.16 sandbox as any
- * agent command (never a bypass). The hook *definitions* live in layered
- * `hooks.json` files (project > user, source-tracked for the trust model); this
- * schema holds only the global toggles.
- */
-export declare const HooksConfigSchema: z.ZodObject<{
-    /** Master switch. When false, NO hook ever fires (config with hooks stays
-     * inert until explicitly enabled). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Whether to interactively prompt to trust a project's hooks the first time
-     * they would run. When false, untrusted project hooks fail loud
-     * (CRUXY_E_HOOK_UNTRUSTED) instead of prompting — never auto-trust.
-     */
-    trustPrompt: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    trustPrompt: boolean;
-}, {
-    enabled?: boolean | undefined;
-    trustPrompt?: boolean | undefined;
-}>;
-export type HooksConfig = z.infer<typeof HooksConfigSchema>;
-/**
- * Multi-model routing (C.30): map declared task classes to tiers so mechanical
- * work runs on a cheap tier and hard reasoning on a strong one. Fully opt-in —
- * with an empty `map` and no `default`, every task class routes to the session's
- * single tier and behavior is unchanged (routing stays inert until configured).
- * Only tier names appear here; upstream model names never do (U.8). Keys are the
- * fixed {@link TASK_CLASSES}, so a mistyped class is rejected at config load.
- */
-export declare const RoutingConfigSchema: z.ZodObject<{
-    /** Tier for any task class not in `map`. Unset → the tier implied by
-     * `model.model` (a real tier, or the auto-fallback tier). */
-    default: z.ZodOptional<z.ZodEnum<["kavi", "vaani", "mira"]>>;
-    /** Per-task-class tier overrides; anything omitted takes `default`. */
-    map: z.ZodDefault<z.ZodRecord<z.ZodEnum<["main-turn", "subagent", "plan", "commit-msg", "classify", "summarize"]>, z.ZodEnum<["kavi", "vaani", "mira"]>>>;
-}, "strict", z.ZodTypeAny, {
-    map: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">>;
-    default?: "kavi" | "vaani" | "mira" | undefined;
-}, {
-    map?: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">> | undefined;
-    default?: "kavi" | "vaani" | "mira" | undefined;
-}>;
-/**
- * Persistent memory (C.29): structured notes recalled across sessions. ON by
- * default and safe to be so — user memory is self-authored (nothing you didn't
- * write is injected) and project memory still requires an explicit
- * `cruxy memory trust`, so a cloned repo never auto-injects. Recall is bounded
- * by a token budget; the `remember` tool refuses to persist secrets.
- */
-export declare const MemoryConfigSchema: z.ZodObject<{
-    /** Master switch. When false, nothing is recalled and the `remember` tool
-     * is not registered (memory stays fully inert). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /** Token budget for the recalled block injected at session start; entries
-     * beyond it are pruned oldest-first (the omission is stated, never silent). */
-    maxRecallTokens: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    maxRecallTokens: number;
-}, {
-    enabled?: boolean | undefined;
-    maxRecallTokens?: number | undefined;
-}>;
-export type MemoryConfig = z.infer<typeof MemoryConfigSchema>;
-/**
- * Per-language LSP integration (C.12): read-only, symbol-aware tools
- * (find_definition, find_references, get_diagnostics, hover) backed by a
- * managed pool of language servers. OFF by default — like the sandbox and
- * hooks, it spawns and manages EXTERNAL server processes, a real execution
- * surface the user opts into explicitly. When on, a missing server binary is
- * an actionable, coded failure (CRUXY_E_LSP_SERVER_NOT_FOUND), never a silent
- * empty result. Servers spawn lazily per language, are reused for the session,
- * and are shut down cleanly (with a process-exit kill-tree backstop).
- */
-export declare const LspConfigSchema: z.ZodObject<{
-    /** Master switch. When false, the four LSP tools are not registered and no
-     * server ever spawns (the feature stays fully inert). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * Per-language command overrides, keyed by language id (e.g. `typescript`,
-     * `python`, `go`, `rust`). The value is the full command line
-     * (`"gopls -remote=auto"`); it is split on whitespace. Anything omitted
-     * falls back to the built-in default table (see `lsp/registry.ts`).
-     */
-    servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-    /** Kill and fail (CRUXY_E_LSP_TIMEOUT) if the `initialize` handshake does
-     * not complete within this many ms. */
-    startupTimeout: z.ZodDefault<z.ZodNumber>;
-    /** Fail a single query (CRUXY_E_LSP_TIMEOUT) if the server does not respond
-     * within this many ms — the server is kept alive, only the request errors. */
-    requestTimeout: z.ZodDefault<z.ZodNumber>;
-    /** Maximum concurrently-running language servers; acquiring past the cap
-     * evicts the idle-oldest server first. */
-    maxServers: z.ZodDefault<z.ZodNumber>;
-    /** Shut a server down after it has been idle this many ms. */
-    idleTimeout: z.ZodDefault<z.ZodNumber>;
-    /** Cap on locations/diagnostics returned by a single tool call; the rest are
-     * summarized as an "N more" note (bounded output). */
-    maxResults: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    startupTimeout: number;
-    requestTimeout: number;
-    servers: Record<string, string>;
-    enabled: boolean;
-    maxServers: number;
-    idleTimeout: number;
-    maxResults: number;
-}, {
-    startupTimeout?: number | undefined;
-    requestTimeout?: number | undefined;
-    servers?: Record<string, string> | undefined;
-    enabled?: boolean | undefined;
-    maxServers?: number | undefined;
-    idleTimeout?: number | undefined;
-    maxResults?: number | undefined;
-}>;
-export type LspConfig = z.infer<typeof LspConfigSchema>;
-/** A per-tier price, in the user's own currency, PER MILLION TOKENS (C.22). */
-export declare const TierPriceSchema: z.ZodObject<{
-    /** Price per 1,000,000 input tokens. */
-    input: z.ZodNumber;
-    /** Price per 1,000,000 output tokens. */
-    output: z.ZodNumber;
-}, "strict", z.ZodTypeAny, {
-    input: number;
-    output: number;
-}, {
-    input: number;
-    output: number;
-}>;
-/**
- * Usage telemetry + cost tracking (C.22): LOCAL usage accounting only — nothing
- * here is ever transmitted. Costs are opt-in and honest: prices are per-TIER and
- * per-million-tokens, configured by the user; with none set, tokens are shown
- * and cost is omitted (cruxy ships no bundled price table). The `prices` keys are
- * the fixed {@link MODEL_TIERS}, so an upstream model name can never appear here
- * (U.8 gag holds by construction) and a mistyped tier is rejected at config load.
- */
-export declare const UsageConfigSchema: z.ZodObject<{
-    /** Master switch. When false, no usage is collected, persisted, or shown. */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /** Currency label to prefix costs with (e.g. "$", "€"). Empty ⇒ no symbol is
-     * assumed — a bare number is shown, since the user configured the prices. */
-    currency: z.ZodDefault<z.ZodString>;
-    /** How many past runs to keep in the store; older ones are pruned oldest-first. */
-    retention: z.ZodDefault<z.ZodNumber>;
-    /** Per-tier prices. Any tier omitted is simply unpriced (cost omitted for it). */
-    prices: z.ZodDefault<z.ZodObject<{
-        kavi: z.ZodOptional<z.ZodObject<{
-            /** Price per 1,000,000 input tokens. */
-            input: z.ZodNumber;
-            /** Price per 1,000,000 output tokens. */
-            output: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            input: number;
-            output: number;
-        }, {
-            input: number;
-            output: number;
-        }>>;
-        vaani: z.ZodOptional<z.ZodObject<{
-            /** Price per 1,000,000 input tokens. */
-            input: z.ZodNumber;
-            /** Price per 1,000,000 output tokens. */
-            output: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            input: number;
-            output: number;
-        }, {
-            input: number;
-            output: number;
-        }>>;
-        mira: z.ZodOptional<z.ZodObject<{
-            /** Price per 1,000,000 input tokens. */
-            input: z.ZodNumber;
-            /** Price per 1,000,000 output tokens. */
-            output: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            input: number;
-            output: number;
-        }, {
-            input: number;
-            output: number;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        kavi?: {
-            input: number;
-            output: number;
-        } | undefined;
-        vaani?: {
-            input: number;
-            output: number;
-        } | undefined;
-        mira?: {
-            input: number;
-            output: number;
-        } | undefined;
-    }, {
-        kavi?: {
-            input: number;
-            output: number;
-        } | undefined;
-        vaani?: {
-            input: number;
-            output: number;
-        } | undefined;
-        mira?: {
-            input: number;
-            output: number;
-        } | undefined;
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    enabled: boolean;
-    retention: number;
-    currency: string;
-    prices: {
-        kavi?: {
-            input: number;
-            output: number;
-        } | undefined;
-        vaani?: {
-            input: number;
-            output: number;
-        } | undefined;
-        mira?: {
-            input: number;
-            output: number;
-        } | undefined;
-    };
-}, {
-    enabled?: boolean | undefined;
-    retention?: number | undefined;
-    currency?: string | undefined;
-    prices?: {
-        kavi?: {
-            input: number;
-            output: number;
-        } | undefined;
-        vaani?: {
-            input: number;
-            output: number;
-        } | undefined;
-        mira?: {
-            input: number;
-            output: number;
-        } | undefined;
-    } | undefined;
-}>;
-export type UsageConfig = z.infer<typeof UsageConfigSchema>;
-/**
- * One MCP server entry. A `command` (+ optional `args`/`env`) is a stdio server
- * cruxy spawns as a child process (C.27); a `url` names a remote server reached
- * over Streamable HTTP (C.27b). Exactly one transport must be given.
- *
- * Both are gated by an explicit, fingerprinted trust decision (`mcp/trust.ts`),
- * but the escalation differs: a stdio server runs its code UNSANDBOXED with your
- * privileges, while a `url` server runs remotely — cruxy sends it your tool
- * arguments over the network (https + cert-validated + pinned to a public IP; http
- * only for a loopback dev server) and treats its responses as untrusted data. A
- * url's trust also binds its resolved IP set at trust time, so a later IP-set
- * change re-gates (weaker than a local binary fingerprint — see `mcp/types.ts`).
- */
-export declare const McpServerSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-    /** stdio transport: the server program to spawn. */
-    command: z.ZodOptional<z.ZodString>;
-    /** Arguments for `command`. */
-    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    /** Extra environment variables for the spawned server (stdio only). */
-    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-    /** Remote transport: the server URL (mutually exclusive with `command`). */
-    url: z.ZodOptional<z.ZodString>;
-    /**
-     * Remote auth (C.27c, url only): the NAME of a bearer credential, resolved
-     * solely from `~/.cruxy/credentials.json` (0600) as `Authorization: Bearer …`.
-     * This field holds a NAME, never the secret — a project config may name a
-     * credential it does not contain, so the value never lives in-repo. Resolution
-     * never consults the environment or any config file. Requires an `https` URL.
-     */
-    credentialRef: z.ZodOptional<z.ZodString>;
-    /**
-     * Remote auth (C.27c, url only): raw request headers sent to the endpoint.
-     * A LIVE header value is a secret, so this is accepted ONLY from user-scope
-     * config (`~/.cruxy/config.json`) — the loader REJECTS it from project-scope
-     * config (a cloned repo must not inject live headers). Prefer `credentialRef`.
-     * Requires an `https` URL; reserved framing headers cannot be overridden.
-     */
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, "strict", z.ZodTypeAny, {
-    args: string[];
-    env: Record<string, string>;
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    headers?: Record<string, string> | undefined;
-}, {
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    args?: string[] | undefined;
-    env?: Record<string, string> | undefined;
-    headers?: Record<string, string> | undefined;
-}>, {
-    args: string[];
-    env: Record<string, string>;
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    headers?: Record<string, string> | undefined;
-}, {
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    args?: string[] | undefined;
-    env?: Record<string, string> | undefined;
-    headers?: Record<string, string> | undefined;
-}>, {
-    args: string[];
-    env: Record<string, string>;
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    headers?: Record<string, string> | undefined;
-}, {
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    args?: string[] | undefined;
-    env?: Record<string, string> | undefined;
-    headers?: Record<string, string> | undefined;
-}>, {
-    args: string[];
-    env: Record<string, string>;
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    headers?: Record<string, string> | undefined;
-}, {
-    command?: string | undefined;
-    credentialRef?: string | undefined;
-    url?: string | undefined;
-    args?: string[] | undefined;
-    env?: Record<string, string> | undefined;
-    headers?: Record<string, string> | undefined;
-}>;
-export type McpServerConfig = z.infer<typeof McpServerSchema>;
-/**
- * MCP client integration (C.27): connect to trusted MCP servers and expose their
- * tools to the agent. OFF by default — like the sandbox, LSP, and hooks, it runs
- * EXTERNAL code (a stdio server executes UNSANDBOXED with your privileges), a
- * real execution surface you opt into explicitly. When off, nothing connects or
- * spawns and no MCP tool is ever registered. Every server-advertised tool is
- * gated (destructive tier — a server can never self-declare a tool "safe"), its
- * description and results are demarcated as untrusted external data with upstream
- * model names scrubbed, and results are NEVER persisted. The tool list a server
- * advertises is bounded (count + per-tool description/schema size) so a hostile
- * server can't blow the context budget.
- */
-export declare const McpConfigSchema: z.ZodObject<{
-    /** Master switch. When false, no server is connected/spawned and no MCP tool
-     * is registered (the feature stays fully inert). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /** Named MCP servers, keyed by a short server id used as the tool prefix
-     * (`mcp__<server>__<tool>`) and in the trust prompt. */
-    servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-        /** stdio transport: the server program to spawn. */
-        command: z.ZodOptional<z.ZodString>;
-        /** Arguments for `command`. */
-        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        /** Extra environment variables for the spawned server (stdio only). */
-        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-        /** Remote transport: the server URL (mutually exclusive with `command`). */
-        url: z.ZodOptional<z.ZodString>;
-        /**
-         * Remote auth (C.27c, url only): the NAME of a bearer credential, resolved
-         * solely from `~/.cruxy/credentials.json` (0600) as `Authorization: Bearer …`.
-         * This field holds a NAME, never the secret — a project config may name a
-         * credential it does not contain, so the value never lives in-repo. Resolution
-         * never consults the environment or any config file. Requires an `https` URL.
-         */
-        credentialRef: z.ZodOptional<z.ZodString>;
-        /**
-         * Remote auth (C.27c, url only): raw request headers sent to the endpoint.
-         * A LIVE header value is a secret, so this is accepted ONLY from user-scope
-         * config (`~/.cruxy/config.json`) — the loader REJECTS it from project-scope
-         * config (a cloned repo must not inject live headers). Prefer `credentialRef`.
-         * Requires an `https` URL; reserved framing headers cannot be overridden.
-         */
-        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        args: string[];
-        env: Record<string, string>;
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        headers?: Record<string, string> | undefined;
-    }, {
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        args?: string[] | undefined;
-        env?: Record<string, string> | undefined;
-        headers?: Record<string, string> | undefined;
-    }>, {
-        args: string[];
-        env: Record<string, string>;
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        headers?: Record<string, string> | undefined;
-    }, {
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        args?: string[] | undefined;
-        env?: Record<string, string> | undefined;
-        headers?: Record<string, string> | undefined;
-    }>, {
-        args: string[];
-        env: Record<string, string>;
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        headers?: Record<string, string> | undefined;
-    }, {
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        args?: string[] | undefined;
-        env?: Record<string, string> | undefined;
-        headers?: Record<string, string> | undefined;
-    }>, {
-        args: string[];
-        env: Record<string, string>;
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        headers?: Record<string, string> | undefined;
-    }, {
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        args?: string[] | undefined;
-        env?: Record<string, string> | undefined;
-        headers?: Record<string, string> | undefined;
-    }>>>;
-    /** Fail a server's `initialize` handshake (its tools are skipped) if it does
-     * not complete within this many ms. */
-    startupTimeout: z.ZodDefault<z.ZodNumber>;
-    /** Fail a single `tools/call` if the server does not respond within this many
-     * ms — the connection is kept, only the one call errors. */
-    requestTimeout: z.ZodDefault<z.ZodNumber>;
-    /** Max tools accepted from ONE server; extras are dropped with a visible note
-     * (a hostile server can't advertise thousands of tools to flood context). */
-    maxToolsPerServer: z.ZodDefault<z.ZodNumber>;
-    /** Max characters kept from a single tool's description; the rest is truncated
-     * with a visible marker. */
-    maxDescriptionChars: z.ZodDefault<z.ZodNumber>;
-    /** Max bytes kept from a single tool's advertised JSON input schema; an
-     * over-cap schema is replaced with a permissive one and a visible note. */
-    maxSchemaBytes: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    startupTimeout: number;
-    requestTimeout: number;
-    servers: Record<string, {
-        args: string[];
-        env: Record<string, string>;
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        headers?: Record<string, string> | undefined;
-    }>;
-    enabled: boolean;
-    maxToolsPerServer: number;
-    maxDescriptionChars: number;
-    maxSchemaBytes: number;
-}, {
-    startupTimeout?: number | undefined;
-    requestTimeout?: number | undefined;
-    servers?: Record<string, {
-        command?: string | undefined;
-        credentialRef?: string | undefined;
-        url?: string | undefined;
-        args?: string[] | undefined;
-        env?: Record<string, string> | undefined;
-        headers?: Record<string, string> | undefined;
-    }> | undefined;
-    enabled?: boolean | undefined;
-    maxToolsPerServer?: number | undefined;
-    maxDescriptionChars?: number | undefined;
-    maxSchemaBytes?: number | undefined;
-}>;
-export type McpConfig = z.infer<typeof McpConfigSchema>;
-/**
- * Web-search + web-fetch subtool (C.20). OFF by default. When enabled, the agent
- * gets a bounded `web_search` (query → ranked title/url/snippet) and a `web_fetch`
- * (read one URL as text). Both surface EXTERNAL, attacker-controllable data:
- * results and fetched pages are wrapped as untrusted data (do-not-follow-instructions
- * envelope, fence-forgery neutralized) with upstream model names scrubbed, and
- * are NEVER persisted to memory/index/checkpoint. `web_fetch` refuses non-http(s)
- * schemes and any host that resolves into a private/loopback/link-local range
- * (SSRF guard) — the request is never dispatched. No provider is constructed and
- * no tool is registered while this is off. Search runs through a swappable
- * `SearchProvider` seam; the direct provider's API key comes from the environment
- * (`apiKeyEnv`), never from config-in-repo and never logged.
- */
-export declare const WebConfigSchema: z.ZodObject<{
-    /** Master switch. When false, neither tool is registered and no provider is
-     * constructed (the feature stays fully inert). */
-    enabled: z.ZodDefault<z.ZodBoolean>;
-    /** Which search backend to use behind the `SearchProvider` seam. A gateway
-     * provider slots in here first-class if the backend ever proxies search. */
-    provider: z.ZodDefault<z.ZodEnum<["tavily"]>>;
-    /** Environment variable holding the direct provider's API key. The key is
-     * read at call time, sent only in the provider's auth field, and never
-     * logged or written to the repo. */
-    apiKeyEnv: z.ZodDefault<z.ZodString>;
-    /** Max search results returned to the model (top-N; the rest are dropped). */
-    maxResults: z.ZodDefault<z.ZodNumber>;
-    /** Max characters kept from a single result's snippet; the rest is truncated
-     * with a visible marker. */
-    snippetMaxChars: z.ZodDefault<z.ZodNumber>;
-    /** Max bytes read from a single `web_fetch` page; the rest is truncated with
-     * a visible marker (a hostile/huge page can't blow the context budget). */
-    fetchMaxBytes: z.ZodDefault<z.ZodNumber>;
-    /** Per-request timeout (search and fetch) — a slow host errors, never hangs. */
-    timeoutMs: z.ZodDefault<z.ZodNumber>;
-    /** Max HTTP redirects `web_fetch` follows; each hop is re-checked by the SSRF
-     * guard so a 3xx can't bounce the request into a private range. */
-    maxRedirects: z.ZodDefault<z.ZodNumber>;
-    /** Escape hatch: allow `web_fetch` to reach private/loopback/link-local hosts.
-     * OFF by default (SSRF-safe); only set true for a deliberate internal-network
-     * use case. */
-    allowPrivateHosts: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    provider: "tavily";
-    timeoutMs: number;
-    apiKeyEnv: string;
-    enabled: boolean;
-    maxResults: number;
-    snippetMaxChars: number;
-    fetchMaxBytes: number;
-    maxRedirects: number;
-    allowPrivateHosts: boolean;
-}, {
-    provider?: "tavily" | undefined;
-    timeoutMs?: number | undefined;
-    apiKeyEnv?: string | undefined;
-    enabled?: boolean | undefined;
-    maxResults?: number | undefined;
-    snippetMaxChars?: number | undefined;
-    fetchMaxBytes?: number | undefined;
-    maxRedirects?: number | undefined;
-    allowPrivateHosts?: boolean | undefined;
-}>;
-export type WebConfig = z.infer<typeof WebConfigSchema>;
-export declare const CruxyConfigSchema: z.ZodObject<{
-    model: z.ZodDefault<z.ZodObject<{
-        provider: z.ZodDefault<z.ZodEnum<["cruxy", "anthropic", "openai", "custom"]>>;
-        model: z.ZodDefault<z.ZodString>;
-        maxTokens: z.ZodDefault<z.ZodNumber>;
-        temperature: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        provider: "cruxy" | "anthropic" | "openai" | "custom";
-        model: string;
-        maxTokens: number;
-        temperature: number;
-    }, {
-        provider?: "cruxy" | "anthropic" | "openai" | "custom" | undefined;
-        model?: string | undefined;
-        maxTokens?: number | undefined;
-        temperature?: number | undefined;
-    }>>;
-    cruxy: z.ZodDefault<z.ZodObject<{
-        gatewayUrl: z.ZodDefault<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        gatewayUrl: string;
-    }, {
-        gatewayUrl?: string | undefined;
-    }>>;
-    agent: z.ZodDefault<z.ZodObject<{
-        /**
-         * Hard ceiling on agent loop turns per user turn — the interactive default.
-         * In the REPL this is a soft checkpoint: hitting it ends the turn and the
-         * human continues (or Ctrl-C's a runaway), so it can be generous.
-         */
-        maxIterations: z.ZodDefault<z.ZodNumber>;
-        /**
-         * Turn ceiling for a ONE-SHOT `cruxy run "task"` (non-interactive). Set higher
-         * than {@link maxIterations} because a headless run has no human to resume it:
-         * hitting the cap abandons the whole task (fail-loud, non-zero exit), so it
-         * must clear the legit long tail (real "fix the failing tests" work runs
-         * ~10-25 turns) while still bounding a runaway. Not clamped to
-         * `maxIterations` — a user may deliberately set it lower or higher.
-         */
-        maxIterationsOneShot: z.ZodDefault<z.ZodNumber>;
-        /**
-         * Optional hard cap on combined input+output tokens for a SINGLE user turn
-         * — a last-resort runaway guard, not cost control (cumulative session cost
-         * is C.22's concern). OFF by default (0 = off): today's behavior is
-         * preserved exactly and no turn is ever token-stopped. When set, a turn that
-         * crosses the cap stops at the next turn boundary with a coherent partial
-         * history (`stop: "budget"`); in one-shot that fails loud (exit 20), while
-         * interactively the human simply continues. Compaction is the everyday
-         * pressure valve for context — this only bounds a genuinely runaway turn, so
-         * a hostile hard stop mid-work stays opt-in. Reset each `send`, never
-         * cumulative across turns.
-         */
-        maxTokensPerTurn: z.ZodDefault<z.ZodNumber>;
-        /** Skip per-action confirmation prompts. */
-        autoApprove: z.ZodDefault<z.ZodBoolean>;
-        /** Plan mode: propose a plan for approval before executing (C.31, opt-in). */
-        planMode: z.ZodDefault<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        maxIterations: number;
-        maxIterationsOneShot: number;
-        maxTokensPerTurn: number;
-        autoApprove: boolean;
-        planMode: boolean;
-    }, {
-        maxIterations?: number | undefined;
-        maxIterationsOneShot?: number | undefined;
-        maxTokensPerTurn?: number | undefined;
-        autoApprove?: boolean | undefined;
-        planMode?: boolean | undefined;
-    }>>;
-    tools: z.ZodDefault<z.ZodObject<{
-        fileEdit: z.ZodDefault<z.ZodBoolean>;
-        shell: z.ZodDefault<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        fileEdit: boolean;
-        shell: boolean;
-    }, {
-        fileEdit?: boolean | undefined;
-        shell?: boolean | undefined;
-    }>>;
-    git: z.ZodDefault<z.ZodObject<{
-        autoCommit: z.ZodDefault<z.ZodBoolean>;
-        /** Branches cruxy never commits/pushes to directly (PR flow branches off
-         * first). `main` and `master` are always protected; these add to them. */
-        protectedBranches: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        /** Default base branch for generated pull requests; falls back to the
-         * repo's default branch, then `main`, when unset. */
-        defaultBase: z.ZodOptional<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        autoCommit: boolean;
-        protectedBranches: string[];
-        defaultBase?: string | undefined;
-    }, {
-        autoCommit?: boolean | undefined;
-        protectedBranches?: string[] | undefined;
-        defaultBase?: string | undefined;
-    }>>;
-    shell: z.ZodDefault<z.ZodObject<{
-        /** Kill the command (and its process tree) after this many ms. */
-        timeoutMs: z.ZodDefault<z.ZodNumber>;
-        /** Cap on combined stdout+stderr bytes captured; the rest is truncated. */
-        maxOutputBytes: z.ZodDefault<z.ZodNumber>;
-        /**
-         * Explicit shell to run commands through, overriding platform detection. A
-         * path (`/bin/bash`, `C:\\Program Files\\Git\\bin\\bash.exe`, `pwsh`). When
-         * set it WINS over the Git Bash → PowerShell tiering (see resolve-shell.ts):
-         * the user owns the choice. Unset → POSIX uses the default shell; Windows
-         * probes for Git Bash, then PowerShell, then fails loud (CRUXY_E_NO_SHELL).
-         */
-        executable: z.ZodOptional<z.ZodString>;
-        /**
-         * The command dialect of `executable`, so the model is told which syntax to
-         * emit. Only sniffed automatically for unambiguous basenames (bash/sh →
-         * posix, pwsh/powershell → powershell, cmd → cmd); set this for anything else
-         * or the override is rejected (CRUXY_E_CONFIG_INVALID). Ignored without
-         * `executable`.
-         */
-        dialect: z.ZodOptional<z.ZodEnum<["posix", "powershell", "cmd"]>>;
-    }, "strict", z.ZodTypeAny, {
-        timeoutMs: number;
-        maxOutputBytes: number;
-        executable?: string | undefined;
-        dialect?: "posix" | "powershell" | "cmd" | undefined;
-    }, {
-        timeoutMs?: number | undefined;
-        maxOutputBytes?: number | undefined;
-        executable?: string | undefined;
-        dialect?: "posix" | "powershell" | "cmd" | undefined;
-    }>>;
-    context: z.ZodDefault<z.ZodObject<{
-        /** Approximate model context budget, in tokens (heuristic estimate). */
-        maxTokens: z.ZodDefault<z.ZodNumber>;
-        /** Compact once the history estimate exceeds this fraction of maxTokens. */
-        compactThreshold: z.ZodDefault<z.ZodNumber>;
-        /**
-         * Fixed token allowance for request payload that `estimateTokens` never
-         * sees — the system prompt and every tool's JSON schema — added to the
-         * measured history before the threshold test so the trigger reflects the
-         * real request size, not just the visible messages. Roughly the size of
-         * the built system prompt plus the default tool catalogue today.
-         */
-        reserveTokens: z.ZodDefault<z.ZodNumber>;
-        /** Most-recent messages always kept verbatim (a floor; the cut rounds up to
-         * a clean turn boundary). */
-        keepRecentMessages: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        maxTokens: number;
-        compactThreshold: number;
-        reserveTokens: number;
-        keepRecentMessages: number;
-    }, {
-        maxTokens?: number | undefined;
-        compactThreshold?: number | undefined;
-        reserveTokens?: number | undefined;
-        keepRecentMessages?: number | undefined;
-    }>>;
-    approval: z.ZodDefault<z.ZodObject<{
-        mode: z.ZodDefault<z.ZodEnum<["prompt"]>>;
-    }, "strict", z.ZodTypeAny, {
-        mode: "prompt";
-    }, {
-        mode?: "prompt" | undefined;
-    }>>;
-    index: z.ZodDefault<z.ZodObject<{
-        /** Master switch for `search_codebase` and `cruxy index`. */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Embedding backend. Only `fastembed` (bge-small-en-v1.5, local ONNX; the
-         * model downloads and caches on first use) is selectable — if it cannot be
-         * loaded, or the model cannot be downloaded/initialized, indexing fails
-         * loudly rather than degrading. (The deterministic hashing embedder exists
-         * for tests and is injected directly, never chosen here.)
-         *
-         * THE STORE-VS-EMBEDDER ASYMMETRY (deliberate — see `store` below). The
-         * embedder has NO degrade path while the store's `auto` does, and that is
-         * correct, not an inconsistency: a store fallback (sqlite → in-memory) loses
-         * only PERSISTENCE — search results are byte-identical, you just re-index
-         * each session, a quality-NEUTRAL trade. The embedder's only cheaper
-         * substitute is the lexical hashing backend, whose degrade is a SILENT
-         * QUALITY LOSS — semantic search quietly stops being semantic. That is the
-         * "reads like success, isn't" trap C.17 forbids, so the embedder fails loud
-         * (module-load → CRUXY_E_INDEX_EMBEDDER_UNAVAILABLE; first-run download/init
-         * → CRUXY_E_INDEX_EMBEDDER_DOWNLOAD_FAILED) and `search_codebase` routes the
-         * model to `grep_files` rather than substituting a weaker index.
-         */
-        embedder: z.ZodDefault<z.ZodEnum<["fastembed"]>>;
-        /**
-         * Vector store backend. `sqlite` persists to `.cruxy/index.db` via
-         * better-sqlite3; `memory` is ephemeral (tests). `auto` prefers sqlite and
-         * falls back to memory when the native dependency cannot be loaded — a
-         * quality-NEUTRAL degrade (only persistence is lost; results are identical).
-         * This is why `auto` may degrade while `embedder` may not — see the
-         * asymmetry note above.
-         */
-        store: z.ZodDefault<z.ZodEnum<["auto", "sqlite", "memory"]>>;
-        /** Hard per-file size cap, in bytes; larger files are skipped entirely. */
-        maxFileBytes: z.ZodDefault<z.ZodNumber>;
-        chunk: z.ZodEffects<z.ZodDefault<z.ZodObject<{
-            /** Target chunk window, in lines. */
-            windowLines: z.ZodDefault<z.ZodNumber>;
-            /** Lines shared between consecutive chunks; must be < windowLines. */
-            overlapLines: z.ZodDefault<z.ZodNumber>;
-        }, "strict", z.ZodTypeAny, {
-            windowLines: number;
-            overlapLines: number;
-        }, {
-            windowLines?: number | undefined;
-            overlapLines?: number | undefined;
-        }>>, {
-            windowLines: number;
-            overlapLines: number;
-        }, {
-            windowLines?: number | undefined;
-            overlapLines?: number | undefined;
-        } | undefined>;
-        search: z.ZodDefault<z.ZodObject<{
-            /** Number of hits returned when the tool omits `k`. */
-            defaultK: z.ZodDefault<z.ZodNumber>;
-            /** Approximate token budget for combined snippets (chars/4 heuristic). */
-            tokenBudget: z.ZodDefault<z.ZodNumber>;
-            /** Maximum lines kept in any single returned snippet. */
-            maxSnippetLines: z.ZodDefault<z.ZodNumber>;
-        }, "strict", z.ZodTypeAny, {
-            defaultK: number;
-            tokenBudget: number;
-            maxSnippetLines: number;
-        }, {
-            defaultK?: number | undefined;
-            tokenBudget?: number | undefined;
-            maxSnippetLines?: number | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        search: {
-            defaultK: number;
-            tokenBudget: number;
-            maxSnippetLines: number;
-        };
-        enabled: boolean;
-        embedder: "fastembed";
-        store: "memory" | "auto" | "sqlite";
-        maxFileBytes: number;
-        chunk: {
-            windowLines: number;
-            overlapLines: number;
-        };
-    }, {
-        search?: {
-            defaultK?: number | undefined;
-            tokenBudget?: number | undefined;
-            maxSnippetLines?: number | undefined;
-        } | undefined;
-        enabled?: boolean | undefined;
-        embedder?: "fastembed" | undefined;
-        store?: "memory" | "auto" | "sqlite" | undefined;
-        maxFileBytes?: number | undefined;
-        chunk?: {
-            windowLines?: number | undefined;
-            overlapLines?: number | undefined;
-        } | undefined;
-    }>>;
-    lsp: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, the four LSP tools are not registered and no
-         * server ever spawns (the feature stays fully inert). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Per-language command overrides, keyed by language id (e.g. `typescript`,
-         * `python`, `go`, `rust`). The value is the full command line
-         * (`"gopls -remote=auto"`); it is split on whitespace. Anything omitted
-         * falls back to the built-in default table (see `lsp/registry.ts`).
-         */
-        servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-        /** Kill and fail (CRUXY_E_LSP_TIMEOUT) if the `initialize` handshake does
-         * not complete within this many ms. */
-        startupTimeout: z.ZodDefault<z.ZodNumber>;
-        /** Fail a single query (CRUXY_E_LSP_TIMEOUT) if the server does not respond
-         * within this many ms — the server is kept alive, only the request errors. */
-        requestTimeout: z.ZodDefault<z.ZodNumber>;
-        /** Maximum concurrently-running language servers; acquiring past the cap
-         * evicts the idle-oldest server first. */
-        maxServers: z.ZodDefault<z.ZodNumber>;
-        /** Shut a server down after it has been idle this many ms. */
-        idleTimeout: z.ZodDefault<z.ZodNumber>;
-        /** Cap on locations/diagnostics returned by a single tool call; the rest are
-         * summarized as an "N more" note (bounded output). */
-        maxResults: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        startupTimeout: number;
-        requestTimeout: number;
-        servers: Record<string, string>;
-        enabled: boolean;
-        maxServers: number;
-        idleTimeout: number;
-        maxResults: number;
-    }, {
-        startupTimeout?: number | undefined;
-        requestTimeout?: number | undefined;
-        servers?: Record<string, string> | undefined;
-        enabled?: boolean | undefined;
-        maxServers?: number | undefined;
-        idleTimeout?: number | undefined;
-        maxResults?: number | undefined;
-    }>>;
-    checkpoint: z.ZodDefault<z.ZodObject<{
-        /** Auto-checkpoint before a run's first mutation (and enable `cruxy rollback`). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /** How many checkpoints to keep; older ones are pruned oldest-first. */
-        retention: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        retention: number;
-    }, {
-        enabled?: boolean | undefined;
-        retention?: number | undefined;
-    }>>;
-    subagent: z.ZodDefault<z.ZodObject<{
-        /**
-         * Maximum subagent nesting depth. The main agent is depth 0; the default of
-         * 1 lets it spawn subagents that cannot themselves spawn (no fork bombs).
-         */
-        maxDepth: z.ZodDefault<z.ZodNumber>;
-        /**
-         * Parallel fan-out breadth (C.33): the maximum number of subagents that run
-         * concurrently across the whole session, enforced by one shared semaphore.
-         * Parallel fan-out happens at depth 0 only and everything beneath it is
-         * sequential, so this composes with {@link maxDepth} into a LINEAR global
-         * ceiling (≤ maxConcurrency × maxDepth live agents) — never an exponential
-         * depth×breadth fork bomb. Default 3.
-         */
-        maxConcurrency: z.ZodDefault<z.ZodNumber>;
-        /** Per-subagent budget ceilings; spawn-time overrides are clamped to these. */
-        defaultBudget: z.ZodDefault<z.ZodObject<{
-            /** Hard cap on the subagent's model turns. */
-            maxIterations: z.ZodDefault<z.ZodNumber>;
-            /** Hard cap on the subagent's combined input+output tokens. */
-            maxTokens: z.ZodDefault<z.ZodNumber>;
-            /** Optional wall-clock cap; unset means no time limit. */
-            timeoutMs: z.ZodOptional<z.ZodNumber>;
-        }, "strict", z.ZodTypeAny, {
-            maxIterations: number;
-            maxTokens: number;
-            timeoutMs?: number | undefined;
-        }, {
-            timeoutMs?: number | undefined;
-            maxIterations?: number | undefined;
-            maxTokens?: number | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        maxDepth: number;
-        maxConcurrency: number;
-        defaultBudget: {
-            maxIterations: number;
-            maxTokens: number;
-            timeoutMs?: number | undefined;
-        };
-    }, {
-        maxDepth?: number | undefined;
-        maxConcurrency?: number | undefined;
-        defaultBudget?: {
-            timeoutMs?: number | undefined;
-            maxIterations?: number | undefined;
-            maxTokens?: number | undefined;
-        } | undefined;
-    }>>;
-    jobs: z.ZodDefault<z.ZodObject<{
-        /**
-         * Master switch. When true, the `run_in_background` tool is registered so the
-         * agent can dispatch background jobs. OFF by default — background work is an
-         * opt-in capability, and a session that never enables it behaves exactly as
-         * before (no tool, no manager, no queue).
-         */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Ceiling on live background jobs (queued + running + paused). Distinct from
-         * the shared execution cap (`subagent.maxConcurrency`): this bounds how many
-         * jobs can be OUTSTANDING, not how many run at once. Default 5.
-         */
-        maxJobs: z.ZodDefault<z.ZodNumber>;
-        /**
-         * How many of a job's most-recent log lines are retained in its ring buffer
-         * for `cruxy logs <id>`. Bounded so a chatty job can't grow memory without
-         * limit; older lines roll off oldest-first. Default 1000.
-         */
-        logBufferLines: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        maxJobs: number;
-        enabled: boolean;
-        logBufferLines: number;
-    }, {
-        maxJobs?: number | undefined;
-        enabled?: boolean | undefined;
-        logBufferLines?: number | undefined;
-    }>>;
-    test: z.ZodDefault<z.ZodObject<{
-        /** Explicit test command (overrides package.json detection). */
-        command: z.ZodOptional<z.ZodString>;
-        /** Consecutive failing runs before the edit→re-run loop trips its cap. */
-        maxIterations: z.ZodDefault<z.ZodNumber>;
-        /** Cap on captured test output bytes (tail-biased — failures come last). */
-        captureBytes: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        maxIterations: number;
-        captureBytes: number;
-        command?: string | undefined;
-    }, {
-        command?: string | undefined;
-        maxIterations?: number | undefined;
-        captureBytes?: number | undefined;
-    }>>;
-    sandbox: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When true, shell + test commands run in the sandbox. */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Base image the container runs. Must ship a POSIX `sh`. Pin by digest
-         * (`name@sha256:…`) where possible; cruxy never builds or substitutes one.
-         */
-        image: z.ZodDefault<z.ZodString>;
-        /**
-         * Egress policy. `none` denies all network (default deny); `host-loopback`
-         * permits reaching services on the host; `full` allows outbound. Anything
-         * other than `none` is a deliberate widening the user must opt into.
-         */
-        network: z.ZodDefault<z.ZodEnum<["none", "host-loopback", "full"]>>;
-        /** Memory cap (docker `--memory` syntax, e.g. `512m`, `2g`). */
-        memory: z.ZodDefault<z.ZodString>;
-        /** Process/thread cap (`--pids-limit`) — a fork-bomb guard. */
-        pids: z.ZodDefault<z.ZodNumber>;
-        /** CPU cap (docker `--cpus`, fractional allowed). */
-        cpus: z.ZodDefault<z.ZodNumber>;
-        /** Wall-clock timeout in ms; falls back to `shell.timeoutMs` when unset. */
-        timeout: z.ZodOptional<z.ZodNumber>;
-        /**
-         * Extra bind mounts beyond the workdir + tmp, each `src:dst[:ro|:rw]`.
-         * Explicit by construction — the default exposes ONLY the workdir. The
-         * docker socket and the cruxy home are rejected here (see policy.ts).
-         */
-        mounts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        memory: string;
-        image: string;
-        enabled: boolean;
-        network: "none" | "host-loopback" | "full";
-        pids: number;
-        cpus: number;
-        mounts: string[];
-        timeout?: number | undefined;
-    }, {
-        memory?: string | undefined;
-        image?: string | undefined;
-        enabled?: boolean | undefined;
-        network?: "none" | "host-loopback" | "full" | undefined;
-        pids?: number | undefined;
-        cpus?: number | undefined;
-        timeout?: number | undefined;
-        mounts?: string[] | undefined;
-    }>>;
-    hooks: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, NO hook ever fires (config with hooks stays
-         * inert until explicitly enabled). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * Whether to interactively prompt to trust a project's hooks the first time
-         * they would run. When false, untrusted project hooks fail loud
-         * (CRUXY_E_HOOK_UNTRUSTED) instead of prompting — never auto-trust.
-         */
-        trustPrompt: z.ZodDefault<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        trustPrompt: boolean;
-    }, {
-        enabled?: boolean | undefined;
-        trustPrompt?: boolean | undefined;
-    }>>;
-    routing: z.ZodDefault<z.ZodObject<{
-        /** Tier for any task class not in `map`. Unset → the tier implied by
-         * `model.model` (a real tier, or the auto-fallback tier). */
-        default: z.ZodOptional<z.ZodEnum<["kavi", "vaani", "mira"]>>;
-        /** Per-task-class tier overrides; anything omitted takes `default`. */
-        map: z.ZodDefault<z.ZodRecord<z.ZodEnum<["main-turn", "subagent", "plan", "commit-msg", "classify", "summarize"]>, z.ZodEnum<["kavi", "vaani", "mira"]>>>;
-    }, "strict", z.ZodTypeAny, {
-        map: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">>;
-        default?: "kavi" | "vaani" | "mira" | undefined;
-    }, {
-        map?: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">> | undefined;
-        default?: "kavi" | "vaani" | "mira" | undefined;
-    }>>;
-    memory: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, nothing is recalled and the `remember` tool
-         * is not registered (memory stays fully inert). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /** Token budget for the recalled block injected at session start; entries
-         * beyond it are pruned oldest-first (the omission is stated, never silent). */
-        maxRecallTokens: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        maxRecallTokens: number;
-    }, {
-        enabled?: boolean | undefined;
-        maxRecallTokens?: number | undefined;
-    }>>;
-    usage: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, no usage is collected, persisted, or shown. */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /** Currency label to prefix costs with (e.g. "$", "€"). Empty ⇒ no symbol is
-         * assumed — a bare number is shown, since the user configured the prices. */
-        currency: z.ZodDefault<z.ZodString>;
-        /** How many past runs to keep in the store; older ones are pruned oldest-first. */
-        retention: z.ZodDefault<z.ZodNumber>;
-        /** Per-tier prices. Any tier omitted is simply unpriced (cost omitted for it). */
-        prices: z.ZodDefault<z.ZodObject<{
-            kavi: z.ZodOptional<z.ZodObject<{
-                /** Price per 1,000,000 input tokens. */
-                input: z.ZodNumber;
-                /** Price per 1,000,000 output tokens. */
-                output: z.ZodNumber;
-            }, "strict", z.ZodTypeAny, {
-                input: number;
-                output: number;
-            }, {
-                input: number;
-                output: number;
-            }>>;
-            vaani: z.ZodOptional<z.ZodObject<{
-                /** Price per 1,000,000 input tokens. */
-                input: z.ZodNumber;
-                /** Price per 1,000,000 output tokens. */
-                output: z.ZodNumber;
-            }, "strict", z.ZodTypeAny, {
-                input: number;
-                output: number;
-            }, {
-                input: number;
-                output: number;
-            }>>;
-            mira: z.ZodOptional<z.ZodObject<{
-                /** Price per 1,000,000 input tokens. */
-                input: z.ZodNumber;
-                /** Price per 1,000,000 output tokens. */
-                output: z.ZodNumber;
-            }, "strict", z.ZodTypeAny, {
-                input: number;
-                output: number;
-            }, {
-                input: number;
-                output: number;
-            }>>;
-        }, "strict", z.ZodTypeAny, {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        }, {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        retention: number;
-        currency: string;
-        prices: {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        };
-    }, {
-        enabled?: boolean | undefined;
-        retention?: number | undefined;
-        currency?: string | undefined;
-        prices?: {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        } | undefined;
-    }>>;
-    mcp: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, no server is connected/spawned and no MCP tool
-         * is registered (the feature stays fully inert). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /** Named MCP servers, keyed by a short server id used as the tool prefix
-         * (`mcp__<server>__<tool>`) and in the trust prompt. */
-        servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-            /** stdio transport: the server program to spawn. */
-            command: z.ZodOptional<z.ZodString>;
-            /** Arguments for `command`. */
-            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-            /** Extra environment variables for the spawned server (stdio only). */
-            env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-            /** Remote transport: the server URL (mutually exclusive with `command`). */
-            url: z.ZodOptional<z.ZodString>;
-            /**
-             * Remote auth (C.27c, url only): the NAME of a bearer credential, resolved
-             * solely from `~/.cruxy/credentials.json` (0600) as `Authorization: Bearer …`.
-             * This field holds a NAME, never the secret — a project config may name a
-             * credential it does not contain, so the value never lives in-repo. Resolution
-             * never consults the environment or any config file. Requires an `https` URL.
-             */
-            credentialRef: z.ZodOptional<z.ZodString>;
-            /**
-             * Remote auth (C.27c, url only): raw request headers sent to the endpoint.
-             * A LIVE header value is a secret, so this is accepted ONLY from user-scope
-             * config (`~/.cruxy/config.json`) — the loader REJECTS it from project-scope
-             * config (a cloned repo must not inject live headers). Prefer `credentialRef`.
-             * Requires an `https` URL; reserved framing headers cannot be overridden.
-             */
-            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, "strict", z.ZodTypeAny, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }>, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }>, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }>, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }>>>;
-        /** Fail a server's `initialize` handshake (its tools are skipped) if it does
-         * not complete within this many ms. */
-        startupTimeout: z.ZodDefault<z.ZodNumber>;
-        /** Fail a single `tools/call` if the server does not respond within this many
-         * ms — the connection is kept, only the one call errors. */
-        requestTimeout: z.ZodDefault<z.ZodNumber>;
-        /** Max tools accepted from ONE server; extras are dropped with a visible note
-         * (a hostile server can't advertise thousands of tools to flood context). */
-        maxToolsPerServer: z.ZodDefault<z.ZodNumber>;
-        /** Max characters kept from a single tool's description; the rest is truncated
-         * with a visible marker. */
-        maxDescriptionChars: z.ZodDefault<z.ZodNumber>;
-        /** Max bytes kept from a single tool's advertised JSON input schema; an
-         * over-cap schema is replaced with a permissive one and a visible note. */
-        maxSchemaBytes: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        startupTimeout: number;
-        requestTimeout: number;
-        servers: Record<string, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }>;
-        enabled: boolean;
-        maxToolsPerServer: number;
-        maxDescriptionChars: number;
-        maxSchemaBytes: number;
-    }, {
-        startupTimeout?: number | undefined;
-        requestTimeout?: number | undefined;
-        servers?: Record<string, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }> | undefined;
-        enabled?: boolean | undefined;
-        maxToolsPerServer?: number | undefined;
-        maxDescriptionChars?: number | undefined;
-        maxSchemaBytes?: number | undefined;
-    }>>;
-    web: z.ZodDefault<z.ZodObject<{
-        /** Master switch. When false, neither tool is registered and no provider is
-         * constructed (the feature stays fully inert). */
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        /** Which search backend to use behind the `SearchProvider` seam. A gateway
-         * provider slots in here first-class if the backend ever proxies search. */
-        provider: z.ZodDefault<z.ZodEnum<["tavily"]>>;
-        /** Environment variable holding the direct provider's API key. The key is
-         * read at call time, sent only in the provider's auth field, and never
-         * logged or written to the repo. */
-        apiKeyEnv: z.ZodDefault<z.ZodString>;
-        /** Max search results returned to the model (top-N; the rest are dropped). */
-        maxResults: z.ZodDefault<z.ZodNumber>;
-        /** Max characters kept from a single result's snippet; the rest is truncated
-         * with a visible marker. */
-        snippetMaxChars: z.ZodDefault<z.ZodNumber>;
-        /** Max bytes read from a single `web_fetch` page; the rest is truncated with
-         * a visible marker (a hostile/huge page can't blow the context budget). */
-        fetchMaxBytes: z.ZodDefault<z.ZodNumber>;
-        /** Per-request timeout (search and fetch) — a slow host errors, never hangs. */
-        timeoutMs: z.ZodDefault<z.ZodNumber>;
-        /** Max HTTP redirects `web_fetch` follows; each hop is re-checked by the SSRF
-         * guard so a 3xx can't bounce the request into a private range. */
-        maxRedirects: z.ZodDefault<z.ZodNumber>;
-        /** Escape hatch: allow `web_fetch` to reach private/loopback/link-local hosts.
-         * OFF by default (SSRF-safe); only set true for a deliberate internal-network
-         * use case. */
-        allowPrivateHosts: z.ZodDefault<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        provider: "tavily";
-        timeoutMs: number;
-        apiKeyEnv: string;
-        enabled: boolean;
-        maxResults: number;
-        snippetMaxChars: number;
-        fetchMaxBytes: number;
-        maxRedirects: number;
-        allowPrivateHosts: boolean;
-    }, {
-        provider?: "tavily" | undefined;
-        timeoutMs?: number | undefined;
-        apiKeyEnv?: string | undefined;
-        enabled?: boolean | undefined;
-        maxResults?: number | undefined;
-        snippetMaxChars?: number | undefined;
-        fetchMaxBytes?: number | undefined;
-        maxRedirects?: number | undefined;
-        allowPrivateHosts?: boolean | undefined;
-    }>>;
-    logLevel: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error", "silent"]>>;
-}, "strict", z.ZodTypeAny, {
-    cruxy: {
-        gatewayUrl: string;
-    };
-    memory: {
-        enabled: boolean;
-        maxRecallTokens: number;
-    };
-    usage: {
-        enabled: boolean;
-        retention: number;
-        currency: string;
-        prices: {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        };
-    };
-    checkpoint: {
-        enabled: boolean;
-        retention: number;
-    };
-    sandbox: {
-        memory: string;
-        image: string;
-        enabled: boolean;
-        network: "none" | "host-loopback" | "full";
-        pids: number;
-        cpus: number;
-        mounts: string[];
-        timeout?: number | undefined;
-    };
-    approval: {
-        mode: "prompt";
-    };
-    mcp: {
-        startupTimeout: number;
-        requestTimeout: number;
-        servers: Record<string, {
-            args: string[];
-            env: Record<string, string>;
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            headers?: Record<string, string> | undefined;
-        }>;
-        enabled: boolean;
-        maxToolsPerServer: number;
-        maxDescriptionChars: number;
-        maxSchemaBytes: number;
-    };
-    subagent: {
-        maxDepth: number;
-        maxConcurrency: number;
-        defaultBudget: {
-            maxIterations: number;
-            maxTokens: number;
-            timeoutMs?: number | undefined;
-        };
-    };
-    model: {
-        provider: "cruxy" | "anthropic" | "openai" | "custom";
-        model: string;
-        maxTokens: number;
-        temperature: number;
-    };
-    shell: {
-        timeoutMs: number;
-        maxOutputBytes: number;
-        executable?: string | undefined;
-        dialect?: "posix" | "powershell" | "cmd" | undefined;
-    };
-    agent: {
-        maxIterations: number;
-        maxIterationsOneShot: number;
-        maxTokensPerTurn: number;
-        autoApprove: boolean;
-        planMode: boolean;
-    };
-    tools: {
-        fileEdit: boolean;
-        shell: boolean;
-    };
-    git: {
-        autoCommit: boolean;
-        protectedBranches: string[];
-        defaultBase?: string | undefined;
-    };
-    context: {
-        maxTokens: number;
-        compactThreshold: number;
-        reserveTokens: number;
-        keepRecentMessages: number;
-    };
-    index: {
-        search: {
-            defaultK: number;
-            tokenBudget: number;
-            maxSnippetLines: number;
-        };
-        enabled: boolean;
-        embedder: "fastembed";
-        store: "memory" | "auto" | "sqlite";
-        maxFileBytes: number;
-        chunk: {
-            windowLines: number;
-            overlapLines: number;
-        };
-    };
-    lsp: {
-        startupTimeout: number;
-        requestTimeout: number;
-        servers: Record<string, string>;
-        enabled: boolean;
-        maxServers: number;
-        idleTimeout: number;
-        maxResults: number;
-    };
-    jobs: {
-        maxJobs: number;
-        enabled: boolean;
-        logBufferLines: number;
-    };
-    test: {
-        maxIterations: number;
-        captureBytes: number;
-        command?: string | undefined;
-    };
-    hooks: {
-        enabled: boolean;
-        trustPrompt: boolean;
-    };
-    routing: {
-        map: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">>;
-        default?: "kavi" | "vaani" | "mira" | undefined;
-    };
-    web: {
-        provider: "tavily";
-        timeoutMs: number;
-        apiKeyEnv: string;
-        enabled: boolean;
-        maxResults: number;
-        snippetMaxChars: number;
-        fetchMaxBytes: number;
-        maxRedirects: number;
-        allowPrivateHosts: boolean;
-    };
-    logLevel: "debug" | "info" | "warn" | "error" | "silent";
-}, {
-    cruxy?: {
-        gatewayUrl?: string | undefined;
-    } | undefined;
-    memory?: {
-        enabled?: boolean | undefined;
-        maxRecallTokens?: number | undefined;
-    } | undefined;
-    usage?: {
-        enabled?: boolean | undefined;
-        retention?: number | undefined;
-        currency?: string | undefined;
-        prices?: {
-            kavi?: {
-                input: number;
-                output: number;
-            } | undefined;
-            vaani?: {
-                input: number;
-                output: number;
-            } | undefined;
-            mira?: {
-                input: number;
-                output: number;
-            } | undefined;
-        } | undefined;
-    } | undefined;
-    checkpoint?: {
-        enabled?: boolean | undefined;
-        retention?: number | undefined;
-    } | undefined;
-    sandbox?: {
-        memory?: string | undefined;
-        image?: string | undefined;
-        enabled?: boolean | undefined;
-        network?: "none" | "host-loopback" | "full" | undefined;
-        pids?: number | undefined;
-        cpus?: number | undefined;
-        timeout?: number | undefined;
-        mounts?: string[] | undefined;
-    } | undefined;
-    approval?: {
-        mode?: "prompt" | undefined;
-    } | undefined;
-    mcp?: {
-        startupTimeout?: number | undefined;
-        requestTimeout?: number | undefined;
-        servers?: Record<string, {
-            command?: string | undefined;
-            credentialRef?: string | undefined;
-            url?: string | undefined;
-            args?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            headers?: Record<string, string> | undefined;
-        }> | undefined;
-        enabled?: boolean | undefined;
-        maxToolsPerServer?: number | undefined;
-        maxDescriptionChars?: number | undefined;
-        maxSchemaBytes?: number | undefined;
-    } | undefined;
-    subagent?: {
-        maxDepth?: number | undefined;
-        maxConcurrency?: number | undefined;
-        defaultBudget?: {
-            timeoutMs?: number | undefined;
-            maxIterations?: number | undefined;
-            maxTokens?: number | undefined;
-        } | undefined;
-    } | undefined;
-    model?: {
-        provider?: "cruxy" | "anthropic" | "openai" | "custom" | undefined;
-        model?: string | undefined;
-        maxTokens?: number | undefined;
-        temperature?: number | undefined;
-    } | undefined;
-    shell?: {
-        timeoutMs?: number | undefined;
-        maxOutputBytes?: number | undefined;
-        executable?: string | undefined;
-        dialect?: "posix" | "powershell" | "cmd" | undefined;
-    } | undefined;
-    agent?: {
-        maxIterations?: number | undefined;
-        maxIterationsOneShot?: number | undefined;
-        maxTokensPerTurn?: number | undefined;
-        autoApprove?: boolean | undefined;
-        planMode?: boolean | undefined;
-    } | undefined;
-    tools?: {
-        fileEdit?: boolean | undefined;
-        shell?: boolean | undefined;
-    } | undefined;
-    git?: {
-        autoCommit?: boolean | undefined;
-        protectedBranches?: string[] | undefined;
-        defaultBase?: string | undefined;
-    } | undefined;
-    context?: {
-        maxTokens?: number | undefined;
-        compactThreshold?: number | undefined;
-        reserveTokens?: number | undefined;
-        keepRecentMessages?: number | undefined;
-    } | undefined;
-    index?: {
-        search?: {
-            defaultK?: number | undefined;
-            tokenBudget?: number | undefined;
-            maxSnippetLines?: number | undefined;
-        } | undefined;
-        enabled?: boolean | undefined;
-        embedder?: "fastembed" | undefined;
-        store?: "memory" | "auto" | "sqlite" | undefined;
-        maxFileBytes?: number | undefined;
-        chunk?: {
-            windowLines?: number | undefined;
-            overlapLines?: number | undefined;
-        } | undefined;
-    } | undefined;
-    lsp?: {
-        startupTimeout?: number | undefined;
-        requestTimeout?: number | undefined;
-        servers?: Record<string, string> | undefined;
-        enabled?: boolean | undefined;
-        maxServers?: number | undefined;
-        idleTimeout?: number | undefined;
-        maxResults?: number | undefined;
-    } | undefined;
-    jobs?: {
-        maxJobs?: number | undefined;
-        enabled?: boolean | undefined;
-        logBufferLines?: number | undefined;
-    } | undefined;
-    test?: {
-        command?: string | undefined;
-        maxIterations?: number | undefined;
-        captureBytes?: number | undefined;
-    } | undefined;
-    hooks?: {
-        enabled?: boolean | undefined;
-        trustPrompt?: boolean | undefined;
-    } | undefined;
-    routing?: {
-        map?: Partial<Record<"main-turn" | "subagent" | "plan" | "commit-msg" | "classify" | "summarize", "kavi" | "vaani" | "mira">> | undefined;
-        default?: "kavi" | "vaani" | "mira" | undefined;
-    } | undefined;
-    web?: {
-        provider?: "tavily" | undefined;
-        timeoutMs?: number | undefined;
-        apiKeyEnv?: string | undefined;
-        enabled?: boolean | undefined;
-        maxResults?: number | undefined;
-        snippetMaxChars?: number | undefined;
-        fetchMaxBytes?: number | undefined;
-        maxRedirects?: number | undefined;
-        allowPrivateHosts?: boolean | undefined;
-    } | undefined;
-    logLevel?: "debug" | "info" | "warn" | "error" | "silent" | undefined;
-}>;
-export type CruxyConfig = z.infer<typeof CruxyConfigSchema>;
-/** Fully-populated defaults (every field resolved). */
-export declare function defaultConfig(): CruxyConfig;