@kodax-ai/kodax 0.7.72 → 0.7.73

package/dist/types-chunks/{base.d-Cz_rwpOi.d.ts → base.d-ChvpaKjZ.d.ts}

@@ -1,4 +1,4 @@
-import { q as KodaXProviderConfig, k as KodaXMessage, a1 as KodaXToolDefinition, H as KodaXReasoningRequest, y as KodaXProviderStreamOptions, N as KodaXStreamResult, a7 as KodaXVerifyCredentialResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, B as KodaXReasoningCapability, G as KodaXReasoningProfile, n as KodaXNormalizedReasoningRequest, a9 as KodaXWireReasoningEffort } from './types.d-Cqaw71Ax.js';
+import { q as KodaXProviderConfig, k as KodaXMessage, a1 as KodaXToolDefinition, H as KodaXReasoningRequest, y as KodaXProviderStreamOptions, N as KodaXStreamResult, a7 as KodaXVerifyCredentialResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, B as KodaXReasoningCapability, G as KodaXReasoningProfile, n as KodaXNormalizedReasoningRequest, a9 as KodaXWireReasoningEffort } from './types.d-CSmF0t0n.js';
 
 /**
  * Retry-After header parsing — FEATURE_130 (v0.7.36).

package/dist/types-chunks/{bash-prefix-extractor.d-CHJO5y94.d.ts → bash-prefix-extractor.d-bApf5nGw.d.ts}

@@ -1,10 +1,10 @@
-import { br as KodaXGoalState, a8 as AgentMessage, du as StopHookFn, bL as KodaXSessionLineage, k as AgentActorStore, aC as AgentTurnExecutor, t as AgentBudgetPort, h as AgentActorClient, N as AgentExecutionResult, V as AgentExecutorPlaneBinding, bx as KodaXJsonValue, bl as KodaXExtensionSessionRecord, f as Agent, dR as WorkflowIsolation, bm as KodaXExtensionSessionState, bC as KodaXSessionArtifactLedgerEntry, de as SessionErrorMetadata, bT as KodaXSessionScope, bU as KodaXSessionStorage, ci as MemoryContextIdentity, cu as MemoryPack, aK as AskUserQuestionOptions, aG as AskUserAnswer, aI as AskUserMultiOptions, dO as WorkflowEventCorrelation, aS as CompactionUpdate, e3 as WorkflowProcessEvent, dN as WorkflowEvent, cI as MemoryReviewPlan, bz as KodaXMemoryOutcomeDigest, ba as Guardrail, aX as DiscoveredInstance, bv as KodaXInputArtifact, cJ as MemoryReviewRunner } from './types.d-DH1mvdcl.js';
-import { a0 as KodaXTokenUsage, k as KodaXMessage, a1 as KodaXToolDefinition, a9 as KodaXWireReasoningEffort, U as KodaXTaskRoutingDecision, V as KodaXTaskType, W as KodaXTaskWorkIntent, Q as KodaXTaskComplexity, L as KodaXRiskLevel, h as KodaXHarnessProfile, f as KodaXExecutionMode, b as KodaXChildFanoutClass, F as KodaXReasoningMode, J as KodaXReviewScale } from './types.d-Cqaw71Ax.js';
+import { br as KodaXGoalState, a8 as AgentMessage, du as StopHookFn, bL as KodaXSessionLineage, k as AgentActorStore, aC as AgentTurnExecutor, t as AgentBudgetPort, h as AgentActorClient, N as AgentExecutionResult, V as AgentExecutorPlaneBinding, bx as KodaXJsonValue, bl as KodaXExtensionSessionRecord, f as Agent, dR as WorkflowIsolation, bm as KodaXExtensionSessionState, bC as KodaXSessionArtifactLedgerEntry, de as SessionErrorMetadata, bT as KodaXSessionScope, bU as KodaXSessionStorage, ci as MemoryContextIdentity, cu as MemoryPack, aK as AskUserQuestionOptions, aG as AskUserAnswer, aI as AskUserMultiOptions, dO as WorkflowEventCorrelation, aS as CompactionUpdate, e3 as WorkflowProcessEvent, dN as WorkflowEvent, cI as MemoryReviewPlan, bz as KodaXMemoryOutcomeDigest, ba as Guardrail, aX as DiscoveredInstance, bv as KodaXInputArtifact, cJ as MemoryReviewRunner } from './types.d-BnPhGmar.js';
+import { a0 as KodaXTokenUsage, k as KodaXMessage, a1 as KodaXToolDefinition, a9 as KodaXWireReasoningEffort, U as KodaXTaskRoutingDecision, V as KodaXTaskType, W as KodaXTaskWorkIntent, Q as KodaXTaskComplexity, L as KodaXRiskLevel, h as KodaXHarnessProfile, f as KodaXExecutionMode, b as KodaXChildFanoutClass, F as KodaXReasoningMode, J as KodaXReviewScale } from './types.d-CSmF0t0n.js';
 import { d as SkillDynamicContextExecutor, I as ISkillRegistry } from './types.d-DCQVBqVn.js';
 import { Diagnostic, Position, Location, Hover, DocumentSymbol, SymbolInformation, WorkspaceSymbol, CallHierarchyItem, CallHierarchyIncomingCall, CallHierarchyOutgoingCall } from 'vscode-languageserver-protocol';
 import { K as KodaXLlmTimeoutConfig, a as CostTracker } from './cost-tracker.d-BeaenODW.js';
 import { C as CapabilityKind, f as CapabilitySearchSnapshot, b as CapabilityResult } from './capability.d-K664nHOS.js';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 
 /**
  * FEATURE_192 v0.7.44 Phase C — Goal-tools execution context.

package/dist/types-chunks/{capability-learning.d-_lR0J4iR.d.ts → capability-learning.d-DPrYxRjF.d.ts}

@@ -1,4 +1,4 @@
-import { G as KodaXReasoningProfile } from './types.d-Cqaw71Ax.js';
+import { G as KodaXReasoningProfile } from './types.d-CSmF0t0n.js';
 
 type CapabilityCacheSource = 'observed' | 'probed';
 interface CapabilityCacheEntry {

package/dist/types-chunks/{capsule.d-DxtdE-GD.d.ts → capsule.d-CGWltwno.d.ts}

@@ -1,5 +1,5 @@
-import { k as KodaXMessage } from './types.d-Cqaw71Ax.js';
-import { a8 as AgentMessage, dd as SessionEntry, db as Session, df as SessionExtension, bL as KodaXSessionLineage, bx as KodaXJsonValue, aP as CompactionDetails, bk as KodaXCompactMemorySeed, bH as KodaXSessionEntry, bV as KodaXSessionTreeNode, bK as KodaXSessionLabelEntry, bJ as KodaXSessionGoalEntry, bE as KodaXSessionClientNoticeEntry, bR as KodaXSessionRewindMarkerEntry, bM as KodaXSessionMemoryOutcomeDigestEntry, bN as KodaXSessionMemoryReviewReceiptEntry, bQ as KodaXSessionNavigationOptions, bC as KodaXSessionArtifactLedgerEntry, b8 as FileOperations, dU as WorkflowMeta, dV as WorkflowModelHint, dW as WorkflowModule } from './types.d-DH1mvdcl.js';
+import { k as KodaXMessage } from './types.d-CSmF0t0n.js';
+import { a8 as AgentMessage, dd as SessionEntry, db as Session, df as SessionExtension, bL as KodaXSessionLineage, bx as KodaXJsonValue, aP as CompactionDetails, bk as KodaXCompactMemorySeed, bH as KodaXSessionEntry, bV as KodaXSessionTreeNode, bK as KodaXSessionLabelEntry, bJ as KodaXSessionGoalEntry, bE as KodaXSessionClientNoticeEntry, bR as KodaXSessionRewindMarkerEntry, bM as KodaXSessionMemoryOutcomeDigestEntry, bN as KodaXSessionMemoryReviewReceiptEntry, bQ as KodaXSessionNavigationOptions, bC as KodaXSessionArtifactLedgerEntry, b8 as FileOperations, dU as WorkflowMeta, dV as WorkflowModelHint, dW as WorkflowModule } from './types.d-BnPhGmar.js';
 
 /**
  * @kodax-ai/agent Constants

package/dist/types-chunks/{commands.d-DZxHzH5-.d.ts → commands.d-CEHGwRok.d.ts}

@@ -1,7 +1,53 @@
-import { X as SessionStorage$1, R as PermissionMode, L as LearningBinding } from './public-api.d--IDNJsu1.js';
-import { $ as KodaXOptions, a9 as KodaXResult } from './bash-prefix-extractor.d-CHJO5y94.js';
-import { n as RuntimeSurfaceStatus, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest } from './utils.d-gmn3c5U4.js';
-import { bU as KodaXSessionStorage, bG as KodaXSessionData } from './types.d-DH1mvdcl.js';
+import { X as SessionStorage$1, R as PermissionMode, L as LearningBinding } from './public-api.d-FBmX0kxo.js';
+import { $ as KodaXOptions, a9 as KodaXResult } from './bash-prefix-extractor.d-bApf5nGw.js';
+import { n as ResolvedAutoModeSettings, p as RuntimeSurfaceStatus, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest } from './utils.d-BPYX7-KN.js';
+import { bU as KodaXSessionStorage, bG as KodaXSessionData } from './types.d-BnPhGmar.js';
+import { j as AutoModeStats } from './guardrail.d-CXIPlWP3.js';
+
+interface ReplRuntimePermissionGrantSuggestion {
+    readonly id: string;
+    readonly kind: 'session' | 'persistent';
+    readonly label: string;
+}
+interface ReplRuntimePermissionRequest {
+    readonly id: string;
+    readonly toolName: string;
+    readonly toolCallId?: string;
+    readonly input: Readonly<Record<string, unknown>>;
+    readonly reason?: string;
+    readonly risk?: 'low' | 'medium' | 'high';
+    readonly executionCwd?: string;
+    readonly grantSuggestions?: readonly ReplRuntimePermissionGrantSuggestion[];
+}
+type ReplRuntimePermissionDecision = {
+    readonly type: 'allow_once';
+} | {
+    readonly type: 'allow_session';
+    readonly suggestionId: string;
+} | {
+    readonly type: 'allow_always';
+    readonly suggestionId: string;
+} | {
+    readonly type: 'reject';
+    readonly reason?: string;
+};
+type ReplRuntimePermissionPrompt = (request: ReplRuntimePermissionRequest) => Promise<ReplRuntimePermissionDecision>;
+declare const RUNTIME_PERMISSION_PENDING_NOTICE = "Runtime state: run active until this approval is resolved.";
+interface ReplRuntimeAutoModeControl {
+    getStats(sessionId: string): Promise<AutoModeStats | undefined>;
+    setEngine(sessionId: string, engine: 'llm' | 'rules'): Promise<AutoModeStats | undefined>;
+    syncSettings?(sessionId: string, permissionMode: string, settings: ReplRuntimeAutoModeSettings): Promise<AutoModeStats | undefined>;
+    subscribe?(sessionId: string, listener: (stats: AutoModeStats | undefined) => void): {
+        close(): void;
+    };
+}
+interface ReplRuntimeAutoModeSettings {
+    readonly engine: 'llm' | 'rules';
+    readonly classifierModel?: string;
+    readonly timeoutMs?: number;
+    readonly speculativeWindowMs?: number;
+}
+declare function toReplRuntimeAutoModeSettings(settings: ResolvedAutoModeSettings): ReplRuntimeAutoModeSettings;
 
 /**
  * InkREPL - Ink-based REPL Adapter
@@ -20,6 +66,10 @@ interface InkRuntimeRunnerInput {
     readonly prompt: string;
     readonly sessionId: string;
     readonly permissionMode: PermissionMode;
+    readonly autoModeSettings?: ReplRuntimeAutoModeSettings;
+    readonly requestPermission?: ReplRuntimePermissionPrompt;
+    /** Marks the callback installed by the REPL's legacy permission UI. */
+    readonly legacyPermissionHook?: true;
 }
 type InkRuntimeRunner = (input: InkRuntimeRunnerInput) => Promise<KodaXResult>;
 type InkRuntimeStatusProvider = () => Promise<RuntimeSurfaceStatus | undefined>;
@@ -27,6 +77,7 @@ interface InkREPLOptions extends KodaXOptions {
     storage?: SessionStorage$1;
     hardExitOnClose?: boolean;
     runtimeRunner?: InkRuntimeRunner;
+    runtimeAutoModeControl?: ReplRuntimeAutoModeControl;
     getRuntimeStatus?: InkRuntimeStatusProvider;
     learning?: LearningBinding;
 }
@@ -49,12 +100,17 @@ interface ReplRuntimeRunnerInput {
     readonly prompt: string;
     readonly sessionId: string;
     readonly permissionMode: PermissionMode;
+    readonly autoModeSettings?: ReplRuntimeAutoModeSettings;
+    readonly requestPermission?: ReplRuntimePermissionPrompt;
+    /** Marks the callback installed by the REPL's legacy permission UI. */
+    readonly legacyPermissionHook?: true;
 }
 type ReplRuntimeRunner = (input: ReplRuntimeRunnerInput) => Promise<KodaXResult>;
 type ReplRuntimeStatusProvider = () => Promise<RuntimeSurfaceStatus | undefined>;
 interface RepLOptions extends KodaXOptions {
     storage?: SessionStorage;
     runtimeRunner?: ReplRuntimeRunner;
+    runtimeAutoModeControl?: ReplRuntimeAutoModeControl;
     getRuntimeStatus?: ReplRuntimeStatusProvider;
     learning?: LearningBinding;
 }
@@ -211,5 +267,5 @@ declare function executeCommand(parsed: {
     };
 }, context: InteractiveContext, callbacks: CommandCallbacks, currentConfig: CurrentConfig): Promise<CommandResult>;
 
-export { BUILTIN_COMMANDS as B, executeCommand as g, getCommandRegistry as h, processSpecialSyntax as i, runInteractiveMode as j, parseCommand as p, runInkInteractiveMode as r };
-export type { Command as C, InkREPLOptions as I, RepLOptions as R, InkRuntimeRunner as a, InkRuntimeRunnerInput as b, InkRuntimeStatusProvider as c, ReplRuntimeRunner as d, ReplRuntimeRunnerInput as e, ReplRuntimeStatusProvider as f };
+export { BUILTIN_COMMANDS as B, RUNTIME_PERMISSION_PENDING_NOTICE as R, executeCommand as n, getCommandRegistry as o, parseCommand as p, processSpecialSyntax as q, runInkInteractiveMode as r, runInteractiveMode as s, toReplRuntimeAutoModeSettings as t };
+export type { Command as C, InkREPLOptions as I, InkRuntimeRunner as a, InkRuntimeRunnerInput as b, InkRuntimeStatusProvider as c, RepLOptions as d, ReplRuntimeAutoModeControl as e, ReplRuntimeAutoModeSettings as f, ReplRuntimePermissionDecision as g, ReplRuntimePermissionGrantSuggestion as h, ReplRuntimePermissionPrompt as i, ReplRuntimePermissionRequest as j, ReplRuntimeRunner as k, ReplRuntimeRunnerInput as l, ReplRuntimeStatusProvider as m };

package/dist/types-chunks/{guardrail.d-DlpMnd-Y.d.ts → guardrail.d-CC4vAQl7.d.ts}

@@ -1,4 +1,4 @@
-import { ba as Guardrail, d5 as RunnerToolCall, f as Agent, a8 as AgentMessage, d8 as RunnerToolResult, dj as Span } from './types.d-DH1mvdcl.js';
+import { ba as Guardrail, d5 as RunnerToolCall, f as Agent, a8 as AgentMessage, d8 as RunnerToolResult, dj as Span } from './types.d-BnPhGmar.js';
 
 /**
  * Guardrail Runtime — FEATURE_085 (v0.7.26).
@@ -137,6 +137,7 @@ type ToolBeforeOutcome = {
     readonly call: RunnerToolCall;
 } | {
     readonly kind: 'block';
+    readonly call: RunnerToolCall;
     readonly result: RunnerToolResult;
 };
 /**

package/dist/types-chunks/{guardrail.d-auV61_h5.d.ts → guardrail.d-CXIPlWP3.d.ts}

@@ -1,8 +1,8 @@
 import { b as McpServersConfig, M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './config.d-CJy1WENT.js';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 import { a as CostTracker } from './cost-tracker.d-BeaenODW.js';
-import { d5 as RunnerToolCall } from './types.d-DH1mvdcl.js';
-import { d as ToolGuardrail } from './guardrail.d-DlpMnd-Y.js';
+import { d5 as RunnerToolCall } from './types.d-BnPhGmar.js';
+import { d as ToolGuardrail } from './guardrail.d-CC4vAQl7.js';
 
 /**
  * FEATURE_200 Phase F (v0.7.45) — MCP domain types extracted from types.ts.
@@ -365,10 +365,10 @@ declare function checkAbsoluteDeny(call: RunnerToolCall, projectRoot: string, ex
  *
  * Decision flow (per design doc "三层权限金字塔"):
  *
- *   1. Tool projection is '' (Tier 1)        → allow (zero token cost)
- *   2. Engine has been downgraded to rules   → escalate (user confirms)
- *   3. denialTracker.shouldFallback (3/20)   → engine downgrade, then escalate
- *   4. circuitBreaker.shouldFallback (5/10m) → engine downgrade, then escalate
+ *   1. Tier-0 deterministic deny             → block
+ *   2. Tool projection is '' (Tier 1)        → allow (zero token cost)
+ *   3. Engine has been downgraded to rules   → escalate (user confirms)
+ *   4. denial/circuit threshold              → engine downgrade, then escalate
  *   5. classify(...) sideQuery
  *        allow                               → allow (record allow → reset consecutive)
  *        block                               → block + reason (record block)
@@ -451,9 +451,8 @@ interface AutoModeGuardrailConfig {
     readonly askUser?: AutoModeAskUser;
     /**
      * Look up a tool's `toClassifierInput` projection by tool name.
-     * Returns `undefined` when the tool isn't in the registry — guardrail
-     * treats that as "no projection ⇒ Tier 1 skip" (conservative for
-     * unknown tools is debatable; v1 favors not blocking on noise).
+     * Returns `undefined` when the tool isn't in the registry. Unknown tools
+     * receive a metadata-only fail-closed projection rather than a Tier-1 skip.
      */
     readonly getToolProjection: (toolName: string) => ((input: unknown) => string) | undefined;
     /**
@@ -585,6 +584,7 @@ interface AutoModeGuardrailConfig {
  */
 interface AutoModeStats {
     readonly engine: AutoModeEngine;
+    readonly classifierModel?: string;
     readonly denials: DenialTracker;
     readonly breaker: CircuitBreaker;
 }

package/dist/types-chunks/{public-api.d--IDNJsu1.d.ts → public-api.d-FBmX0kxo.d.ts}

@@ -1,7 +1,7 @@
-import { a as BashPrefixExtractor, t as KodaXAgentMode } from './bash-prefix-extractor.d-CHJO5y94.js';
-import { F as KodaXReasoningMode, k as KodaXMessage, S as KodaXTaskResultMetadata } from './types.d-Cqaw71Ax.js';
+import { a as BashPrefixExtractor, t as KodaXAgentMode } from './bash-prefix-extractor.d-bApf5nGw.js';
+import { F as KodaXReasoningMode, k as KodaXMessage, S as KodaXTaskResultMetadata } from './types.d-CSmF0t0n.js';
 import { p as LearningSurfaceSnapshot$1, n as LearningQuery, m as LearningPage, b as LearnedCapabilityRecord, j as LearningEvent, o as LearningSubscribeOptions } from './center-types.d-BBT122uJ.js';
-import { bG as KodaXSessionData, bL as KodaXSessionLineage, bQ as KodaXSessionNavigationOptions, bS as KodaXSessionRuntimeInfo, bU as KodaXSessionStorage, i as AgentActorSnapshot, bx as KodaXJsonValue } from './types.d-DH1mvdcl.js';
+import { bG as KodaXSessionData, bL as KodaXSessionLineage, bQ as KodaXSessionNavigationOptions, bS as KodaXSessionRuntimeInfo, bU as KodaXSessionStorage, i as AgentActorSnapshot, bx as KodaXJsonValue } from './types.d-BnPhGmar.js';
 
 /**
  * TextBuffer - Text buffer management class - 文本缓冲区管理类
@@ -265,6 +265,7 @@ declare function permissionModeDisplayName(mode: PermissionMode): string;
 interface ConfirmResult {
     confirmed: boolean;
     always?: boolean;
+    runtimeGrantKind?: 'session' | 'persistent';
 }
 /**
  * Tools that mutate the local filesystem AND accept a `path` input.

package/dist/types-chunks/{run-manager.d-Bh50OdVl.d.ts → run-manager.d-DUNnJcpE.d.ts}

@@ -1,4 +1,4 @@
-import { ef as WorkflowProcessTrackerOptions, dN as WorkflowEvent, e9 as WorkflowProcessSnapshot, e3 as WorkflowProcessEvent } from './types.d-DH1mvdcl.js';
+import { ef as WorkflowProcessTrackerOptions, dN as WorkflowEvent, e9 as WorkflowProcessSnapshot, e3 as WorkflowProcessEvent } from './types.d-BnPhGmar.js';
 
 /**
  * FEATURE_246 Part A0 (ADR-046) — neutral workflow run lifecycle manager.

package/dist/types-chunks/{sdk-session-Cfw6NFu-.d.ts → sdk-session-XqacVOs8.d.ts}

@@ -1,6 +1,6 @@
-import { g as CreatableHistoryItem, a8 as ToolCall } from './public-api.d--IDNJsu1.js';
-import { k as KodaXMessage, c as KodaXContentBlock } from './types.d-Cqaw71Ax.js';
-import { bW as KodaXSessionUiHistoryItem, b_ as KodaXSessionUiToolCall } from './types.d-DH1mvdcl.js';
+import { g as CreatableHistoryItem, a8 as ToolCall } from './public-api.d-FBmX0kxo.js';
+import { k as KodaXMessage, c as KodaXContentBlock } from './types.d-CSmF0t0n.js';
+import { bW as KodaXSessionUiHistoryItem, b_ as KodaXSessionUiToolCall } from './types.d-BnPhGmar.js';
 
 interface RestoreHistoryItemsFromSessionInput {
     messages: readonly KodaXMessage[];

package/dist/types-chunks/{resolver.d-ssgNSlrh.d.ts → side-query.d-DWTMsndP.d.ts}

@@ -1,7 +1,8 @@
-import { F as KodaXReasoningMode, M as KodaXStableEffortIntent, a9 as KodaXWireReasoningEffort, G as KodaXReasoningProfile, Z as KodaXThinkingBudgetMap, _ as KodaXThinkingDepth, q as KodaXProviderConfig, B as KodaXReasoningCapability, H as KodaXReasoningRequest, n as KodaXNormalizedReasoningRequest, V as KodaXTaskType, a7 as KodaXVerifyCredentialResult, a1 as KodaXToolDefinition, k as KodaXMessage, y as KodaXProviderStreamOptions, N as KodaXStreamResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, a8 as KodaXVerifyStrategy, d as KodaXCustomProviderConfig, j as KodaXListModelsResult } from './types.d-Cqaw71Ax.js';
+import { F as KodaXReasoningMode, M as KodaXStableEffortIntent, a9 as KodaXWireReasoningEffort, G as KodaXReasoningProfile, Z as KodaXThinkingBudgetMap, _ as KodaXThinkingDepth, q as KodaXProviderConfig, B as KodaXReasoningCapability, H as KodaXReasoningRequest, n as KodaXNormalizedReasoningRequest, V as KodaXTaskType, a7 as KodaXVerifyCredentialResult, a1 as KodaXToolDefinition, k as KodaXMessage, y as KodaXProviderStreamOptions, N as KodaXStreamResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, a8 as KodaXVerifyStrategy, d as KodaXCustomProviderConfig, j as KodaXListModelsResult, a0 as KodaXTokenUsage } from './types.d-CSmF0t0n.js';
 import Anthropic from '@anthropic-ai/sdk';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 import OpenAI from 'openai';
+import { a as CostTracker } from './cost-tracker.d-BeaenODW.js';
 
 /**
  * KodaX AI Errors
@@ -352,7 +353,7 @@ declare abstract class KodaXOpenAICompatProvider extends KodaXBaseProvider {
   * Provider 注册表 - 统一管理所有 Provider
  */
 
-type ProviderName = 'anthropic' | 'openai' | 'deepseek' | 'kimi' | 'kimi-code' | 'qwen' | 'zhipu' | 'zhipu-coding' | 'zai-coding' | 'minimax-coding' | 'mimo-coding' | 'mimo' | 'ark-coding' | 'gemini-cli' | 'codex-cli';
+type ProviderName = 'anthropic' | 'openai' | 'deepseek' | 'kimi' | 'kimi-code' | 'qwen' | 'qwen-token-plan' | 'zhipu' | 'zhipu-coding' | 'zai-coding' | 'minimax-coding' | 'mimo-coding' | 'mimo' | 'ark-coding' | 'gemini-cli' | 'codex-cli';
 /**
  * Per-provider static metadata. v0.7.43 promoted this from a partial
  * descriptor (`models: string[]`) to the full capability surface so
@@ -648,5 +649,67 @@ declare function listProviderModels(name: string, _opts?: {
     signal?: AbortSignal;
 }): Promise<KodaXListModelsResult>;
 
-export { normalizeReasoningEffortValue as $, getDefaultThinkingDepthForMode as A, getModelCapabilities as B, getProvider as C, getProviderConfiguredCapabilityProfile as D, getProviderConfiguredReasoningCapability as E, getProviderList as F, getProviderModel as G, getProviderModelDescriptors as H, getProviderModels as I, getReasoningCapability as J, KODAX_DEFAULT_PROVIDER as K, getRuntimeModelProvider as L, getRuntimeModelProviderNames as M, isCustomProviderName as N, isKnownProvider as O, isProviderConfigured as Q, isProviderName as S, isReasoningEnabled as T, isRuntimeModelProviderName as U, listAllModelCapabilities as V, listBuiltinModelCapabilities as W, listCustomProviderModelCapabilities as X, listProviderModels as Y, mapDepthToOpenAIReasoningEffort as Z, mapLegacyReasoningModeToEffortIntent as _, KODAX_DEFAULT_THINKING_BUDGETS as a, normalizeReasoningRequest as a0, parseReasoningEffortEnv as a1, registerCustomProviders as a2, registerModelProvider as a3, resolveModelCapabilities as a4, resolveProvider as a5, resolveProviderModelDescriptors as a6, resolveReasoningEffort as a7, resolveReasoningEffortForModelSwitch as a8, resolveThinkingBudget as a9, resolveWireEffort as aa, validateCustomProviderConfig as ab, verifyProviderCredential as ac, KODAX_PROVIDERS as b, KODAX_PROVIDER_SNAPSHOTS as c, KODAX_REASONING_MODE_SEQUENCE as d, KODAX_REASONING_SAFETY_RESERVE as e, KODAX_STABLE_EFFORT_INTENTS as f, KodaXAnthropicCompatProvider as g, KodaXError as h, KodaXNetworkError as j, KodaXOpenAICompatProvider as k, KodaXProviderError as l, KodaXRateLimitError as m, KodaXToolCallIdError as n, clampThinkingBudget as p, clearRuntimeModelProviders as q, createCustomProvider as r, effortToLegacyReasoningMode as s, getAvailableProviderNames as t, getCustomModelCapabilities as u, getCustomProvider as v, getCustomProviderList as w, getCustomProviderModelDescriptors as x, getCustomProviderModels as y, getCustomProviderNames as z };
-export type { ProviderName as P, ResolveWireEffortInput as R, KodaXModelCapabilities as i, ResolvedWireEffort as o };
+/**
+ * sideQuery — independent one-shot LLM invocation.
+ *
+ * Used by features that need a clean LLM call outside the main agent loop.
+ * The auto mode classifier (FEATURE_092) is the first consumer; future
+ * users include compaction, title generation, and SA mutation reflection.
+ *
+ * Constraints (deliberate):
+ *   - tools=[] hardcoded — sideQuery is single-turn, no tool loop
+ *   - text-only output — tool_use blocks from the model produce stopReason='error'
+ *   - independent timeout (default 30s; callers may supply a bounded deadline)
+ *   - independent cost bucket via querySource (mapped to TokenUsageRecord.role)
+ *
+ * Failure handling: never throws. Timeout, abort, provider error, and
+ * unexpected tool_use all produce a result with stopReason='timeout' /
+ * 'aborted' / 'error' so callers implement their own degradation.
+ */
+
+type SideQueryStopReason = 'end_turn' | 'max_tokens' | 'timeout' | 'aborted' | 'error';
+interface SideQueryRequest {
+    readonly provider: KodaXBaseProvider;
+    readonly model: string;
+    readonly system: string;
+    readonly messages: readonly KodaXMessage[];
+    readonly reasoning?: KodaXReasoningRequest;
+    /** Optional per-request cap for small structured sidecar responses. */
+    readonly maxOutputTokens?: number;
+    readonly timeoutMs?: number;
+    readonly abortSignal?: AbortSignal;
+    readonly querySource: string;
+    readonly costTracker?: CostTracker;
+}
+interface SideQueryResult {
+    readonly text: string;
+    readonly usage: KodaXTokenUsage;
+    readonly costTracker?: CostTracker;
+    readonly stopReason: SideQueryStopReason;
+    /**
+     * Bounded request metadata only; prompts and response text are never copied.
+     * The built-in `sideQuery()` always supplies it. Optionality preserves source
+     * compatibility for existing SDK mocks and structural result adapters.
+     */
+    readonly diagnostics?: SideQueryDiagnostics;
+    readonly error?: Error;
+}
+type SideQueryTerminalPhase = 'completed' | 'pre_output' | 'streaming' | 'contract_error';
+interface SideQueryDiagnostics {
+    readonly provider: string;
+    readonly model: string;
+    readonly timeoutMs: number;
+    readonly elapsedMs: number;
+    readonly retryCount: number;
+    readonly retryWaitMs: number;
+    /** Time until the first non-empty text delta, when the adapter exposes it. */
+    readonly firstOutputMs?: number;
+    /** Time from the first observed text delta until termination. */
+    readonly streamMs?: number;
+    /** Honest coarse phase; provider adapters cannot split DNS/connect/remote queue. */
+    readonly terminalPhase: SideQueryTerminalPhase;
+}
+declare function sideQuery(req: SideQueryRequest): Promise<SideQueryResult>;
+
+export { listBuiltinModelCapabilities as $, getCustomProviderList as A, getCustomProviderModelDescriptors as B, getCustomProviderModels as C, getCustomProviderNames as D, getDefaultThinkingDepthForMode as E, getModelCapabilities as F, getProvider as G, getProviderConfiguredCapabilityProfile as H, getProviderConfiguredReasoningCapability as I, getProviderList as J, KODAX_DEFAULT_PROVIDER as K, getProviderModel as L, getProviderModelDescriptors as M, getProviderModels as N, getReasoningCapability as O, getRuntimeModelProvider as Q, getRuntimeModelProviderNames as T, isCustomProviderName as U, isKnownProvider as V, isProviderConfigured as W, isProviderName as X, isReasoningEnabled as Y, isRuntimeModelProviderName as Z, listAllModelCapabilities as _, KODAX_DEFAULT_THINKING_BUDGETS as a, listCustomProviderModelCapabilities as a0, listProviderModels as a1, mapDepthToOpenAIReasoningEffort as a2, mapLegacyReasoningModeToEffortIntent as a3, normalizeReasoningEffortValue as a4, normalizeReasoningRequest as a5, parseReasoningEffortEnv as a6, registerCustomProviders as a7, registerModelProvider as a8, resolveModelCapabilities as a9, resolveProvider as aa, resolveProviderModelDescriptors as ab, resolveReasoningEffort as ac, resolveReasoningEffortForModelSwitch as ad, resolveThinkingBudget as ae, resolveWireEffort as af, sideQuery as ag, validateCustomProviderConfig as ah, verifyProviderCredential as ai, KODAX_PROVIDERS as b, KODAX_PROVIDER_SNAPSHOTS as c, KODAX_REASONING_MODE_SEQUENCE as d, KODAX_REASONING_SAFETY_RESERVE as e, KODAX_STABLE_EFFORT_INTENTS as f, KodaXAnthropicCompatProvider as g, KodaXError as h, KodaXNetworkError as j, KodaXOpenAICompatProvider as k, KodaXProviderError as l, KodaXRateLimitError as m, KodaXToolCallIdError as n, clampThinkingBudget as t, clearRuntimeModelProviders as u, createCustomProvider as v, effortToLegacyReasoningMode as w, getAvailableProviderNames as x, getCustomModelCapabilities as y, getCustomProvider as z };
+export type { ProviderName as P, ResolveWireEffortInput as R, SideQueryDiagnostics as S, KodaXModelCapabilities as i, ResolvedWireEffort as o, SideQueryRequest as p, SideQueryResult as q, SideQueryStopReason as r, SideQueryTerminalPhase as s };

package/dist/types-chunks/{types.d-DH1mvdcl.d.ts → types.d-BnPhGmar.d.ts}

@@ -1,4 +1,4 @@
-import { k as KodaXMessage, a1 as KodaXToolDefinition, F as KodaXReasoningMode, a9 as KodaXWireReasoningEffort, a3 as KodaXToolResultContentItem, Y as KodaXThinkingBlock, I as KodaXRedactedThinkingBlock } from './types.d-Cqaw71Ax.js';
+import { k as KodaXMessage, a1 as KodaXToolDefinition, F as KodaXReasoningMode, a9 as KodaXWireReasoningEffort, a3 as KodaXToolResultContentItem, Y as KodaXThinkingBlock, I as KodaXRedactedThinkingBlock } from './types.d-CSmF0t0n.js';
 
 type AgentActorState = 'running' | 'idle' | 'closed';
 type AgentTurnState = 'accepted' | 'running' | 'completed' | 'failed' | 'interrupted';
@@ -1001,6 +1001,8 @@ interface GuardrailSpanData {
     readonly kind: 'guardrail';
     readonly guardrailName: string;
     readonly hookPoint: 'input' | 'output' | 'tool';
+    /** True between span start and the guardrail callback settling. */
+    readonly pending?: boolean;
     readonly decision: 'pass' | 'veto' | 'rewrite' | 'error';
     readonly reason?: string;
     readonly error?: string;

package/dist/types-chunks/{types.d-Cqaw71Ax.d.ts → types.d-CSmF0t0n.d.ts}

@@ -138,14 +138,15 @@ interface KodaXMessage {
      * Identifies which subsystem injected a synthetic message so consumers can
      * render/attribute it distinctly instead of treating it like a user query.
      * Absent on genuine user/assistant/system messages. Known values include
-     * `'sidecar-verifier'` (Sidecar Verifier revise feedback) and `'task-completed'`
-     * (a dispatch_child_task / run_workflow `<task-completed>` result banner spliced
-     * into the transcript; a rare same-wake mix with a system-reminder shares this
-     * one label, content preserved). Exposed verbatim through `KodaXResult.messages`
+     * `'sidecar-verifier'` (Sidecar Verifier revise feedback),
+     * `'agent-completed'` (an Actor `<agent-completed>` result banner), and the
+     * legacy `'task-completed'` workflow banner. A rare same-wake mix with a
+     * system-reminder shares the completion label, content preserved. Exposed
+     * verbatim through `KodaXResult.messages`
      * and session-load APIs for SDK consumers.
      */
     _source?: string;
-    /** Structured task/workflow result metadata for synthetic task-completed messages. */
+    /** Structured task/workflow result metadata for synthetic completion messages. */
     _taskResult?: KodaXTaskResultMetadata;
     /** Multiple task results when one synthetic wake message contains several banners. */
     _taskResults?: KodaXTaskResultMetadata[];

package/dist/types-chunks/{types.d-EqQmHztg.d.ts → types.d-DKr6TCXL.d.ts}

@@ -1,8 +1,8 @@
-import { a9 as KodaXWireReasoningEffort, a1 as KodaXToolDefinition, a3 as KodaXToolResultContentItem, k as KodaXMessage } from './types.d-Cqaw71Ax.js';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { a9 as KodaXWireReasoningEffort, a1 as KodaXToolDefinition, a3 as KodaXToolResultContentItem, k as KodaXMessage } from './types.d-CSmF0t0n.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 import { C as CapabilityKind, a as CapabilityProvider } from './capability.d-K664nHOS.js';
-import { bx as KodaXJsonValue, bl as KodaXExtensionSessionRecord, bn as KodaXExtensionStore } from './types.d-DH1mvdcl.js';
-import { aE as KodaXToolExecutionContext, bl as ToolSideEffect } from './bash-prefix-extractor.d-CHJO5y94.js';
+import { bx as KodaXJsonValue, bl as KodaXExtensionSessionRecord, bn as KodaXExtensionStore } from './types.d-BnPhGmar.js';
+import { aE as KodaXToolExecutionContext, bl as ToolSideEffect } from './bash-prefix-extractor.d-bApf5nGw.js';
 
 /**
  * KodaX Constructed-World types (FEATURE_087, v0.7.28).
@@ -438,17 +438,18 @@ interface LocalToolDefinition extends KodaXToolDefinition {
      * THREE-TIER STRATEGY (pick by tool's risk profile):
      *
      *   1. ZERO RISK (read-only, structural):
-     *      → return ''  (Tier 1 — classifier is skipped entirely, zero token cost)
-     *      Examples: read, grep, glob, ask_user_question, exit_plan_mode
+     *      → return '' (Tier 1; classifier is skipped, zero token cost)
+     *      Non-readonly tools need an explicit `classifierExemptReason`.
+     *      Examples: read, grep, glob, ask_user_question
      *
      *   2. HIGH RISK (mutates state, network, exec, spawn):
      *      → write a CUSTOM projection that surfaces the risk-bearing fields
      *      Examples: bash (`Bash: ${i.command}`), web_fetch (`WebFetch ${i.url}`)
      *      See `classifier-projection.ts` for examples by category.
      *
-     *   3. LOW RISK (structured input, side-effect-capable):
-     *      → return defaultToClassifierInput(name, input)  (one-line helper)
-     *      Examples: semantic_lookup (refresh: true rebuilds index)
+     *   3. UNKNOWN / EXTENSION INPUT:
+     *      → use `safeFallbackToClassifierInput(name, input)`. It retains
+     *      operational metadata and body sizes without serializing raw JSON.
      *
      * KEEP IT SHORT: ≤ 100 chars typical. Variable-length user-provided fields
      * (bash command, URL, `spawn_agent` objective) may legitimately
@@ -462,6 +463,12 @@ interface LocalToolDefinition extends KodaXToolDefinition {
      * See `docs/features/v0.7.33.md` "Tool 接口扩展" for design rationale.
      */
     toClassifierInput: (input: unknown) => string;
+    /**
+     * Required justification when a non-readonly tool intentionally returns
+     * an empty classifier projection. This makes classifier bypasses auditable
+     * instead of allowing an accidental `() => ''` to fail open.
+     */
+    classifierExemptReason?: string;
 }
 interface ToolDefinitionSource {
     /**

package/dist/types-chunks/{types.d-CNZgY52F.d.ts → types.d-DgciGHoG.d.ts}

@@ -1,5 +1,5 @@
-import { bv as KodaXInputArtifact } from './types.d-DH1mvdcl.js';
-import { S as KodaXTaskResultMetadata } from './types.d-Cqaw71Ax.js';
+import { bv as KodaXInputArtifact } from './types.d-BnPhGmar.js';
+import { S as KodaXTaskResultMetadata } from './types.d-CSmF0t0n.js';
 
 /**
  * @kodax-ai/agent/messaging — Message queue types

package/dist/types-chunks/{utils.d-gmn3c5U4.d.ts → utils.d-BPYX7-KN.d.ts}

@@ -1,11 +1,94 @@
-import { k as KodaXMessage, F as KodaXReasoningMode, d as KodaXCustomProviderConfig, p as KodaXProviderCapabilityProfile } from './types.d-Cqaw71Ax.js';
-import { M as KodaXContextTokenSnapshot, ah as KodaXSkillDynamicContextPolicy, t as KodaXAgentMode, a4 as KodaXRepoIntelligenceMode, $ as KodaXOptions, ai as KodaXSkillInvocationContext } from './bash-prefix-extractor.d-CHJO5y94.js';
-import { bW as KodaXSessionUiHistoryItem, bL as KodaXSessionLineage, bC as KodaXSessionArtifactLedgerEntry, bm as KodaXExtensionSessionState, bl as KodaXExtensionSessionRecord, bS as KodaXSessionRuntimeInfo, ea as WorkflowProcessSource } from './types.d-DH1mvdcl.js';
-import { d as AgentsFile, j as AutoModeStats, p as KodaXMcpServersConfig } from './guardrail.d-auV61_h5.js';
+import { k as KodaXMessage, F as KodaXReasoningMode, d as KodaXCustomProviderConfig, p as KodaXProviderCapabilityProfile } from './types.d-CSmF0t0n.js';
+import { M as KodaXContextTokenSnapshot, ah as KodaXSkillDynamicContextPolicy, t as KodaXAgentMode, a4 as KodaXRepoIntelligenceMode, $ as KodaXOptions, ai as KodaXSkillInvocationContext } from './bash-prefix-extractor.d-bApf5nGw.js';
+import { bW as KodaXSessionUiHistoryItem, bL as KodaXSessionLineage, bC as KodaXSessionArtifactLedgerEntry, bm as KodaXExtensionSessionState, bl as KodaXExtensionSessionRecord, bS as KodaXSessionRuntimeInfo, ea as WorkflowProcessSource } from './types.d-BnPhGmar.js';
+import { d as AgentsFile, j as AutoModeStats, p as KodaXMcpServersConfig } from './guardrail.d-CXIPlWP3.js';
 import * as readline from 'readline';
-import { R as PermissionMode, L as LearningBinding, E as LearningSurfaceSnapshot } from './public-api.d--IDNJsu1.js';
+import { R as PermissionMode, L as LearningBinding, E as LearningSurfaceSnapshot } from './public-api.d-FBmX0kxo.js';
 import { SpawnSyncReturns } from 'child_process';
 
+/**
+ * Permission Config - 2-level permission configuration load/save
+ *
+ * Priority: project-level (.kodax/config.local.json) > user-level (~/.kodax/config.json)
+ * 优先级：项目级 (.kodax/config.local.json) > 用户级 (~/.kodax/config.json)
+ *
+ * Pattern format (ONLY for Bash tool in accept-edits mode):
+ * - "Bash(npm install)" - exact command match
+ * - "Bash(git commit:*)" - prefix wildcard (matches "git commit -m 'msg'" etc.)
+ * - "Bash(npm:*)" - command prefix wildcard (matches "npm install", "npm run" etc.)
+ *
+ * Note: Bash(*) is REJECTED for safety. Use specific command patterns.
+ * Note: Other tools don't need patterns:
+ * - Read/Glob/Grep: Always allowed (project-external is enforced confirmation)
+ * - Edit/Write: Auto-allowed in accept-edits, blocked in plan
+ */
+
+/**
+ * Auto-mode classifier configuration. Read from `~/.kodax/config.json` (user-
+ * level only — project-level is intentionally not consulted, matching
+ * `permissionMode`'s scope) plus the `KODAX_AUTO_MODE_*` env override family.
+ */
+interface AutoModeSettings {
+    /**
+     * Starting engine for the session.
+     * - `'llm'` (default): classifier runs on every non-Tier-1 tool call
+     * - `'rules'`: classifier skipped; every non-Tier-1 call escalates to askUser
+     * Engine downgrades stay sticky within the session regardless of this value.
+     */
+    engine?: 'llm' | 'rules';
+    /**
+     * Classifier model spec — `"provider:model"` or `"model"` (provider then
+     * inherits from the main session). Feeds layer 4 of `resolveClassifierModel`.
+     */
+    classifierModel?: string;
+    /** sideQuery timeout in ms. Default 20_000. */
+    timeoutMs?: number;
+    /**
+     * Issue 143 (WS3): speculative-classify quiet window in ms. Default 500.
+     * The window only controls "resolve instantly vs wait for the verdict" — the
+     * classifier verdict is always adopted (WS1), so this never decides
+     * "dialog vs no dialog". `0` disables the speculative race (synchronous
+     * classify). Lets users on slow/remote providers widen the window so a fast
+     * local classify still short-circuits while a slow one simply waits.
+     */
+    speculativeWindowMs?: number;
+}
+interface ResolvedAutoModeSettings {
+    readonly engine: 'llm' | 'rules';
+    readonly classifierModel?: string;
+    readonly classifierModelEnv?: string;
+    readonly timeoutMs?: number;
+    readonly speculativeWindowMs?: number;
+}
+interface ResolveAutoModeSettingsInput {
+    readonly settings?: AutoModeSettings;
+    readonly env?: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>>;
+}
+/**
+ * Load auto-mode settings from `~/.kodax/config.json` and apply the
+ * `KODAX_AUTO_MODE_*` env override family. This wrapper performs one
+ * filesystem read; `resolveAutoModeSettings()` is the pure counterpart.
+ *
+ * Env priority (highest first):
+ *   - KODAX_AUTO_MODE_ENGINE: 'llm' | 'rules' — overrides settings.engine
+ *   - KODAX_AUTO_MODE_CLASSIFIER_MODEL: model spec — surfaced as `classifierModelEnv`
+ *     so it reaches `AutoModeGuardrailConfig.envVar` (the resolver's layer 2)
+ *   - KODAX_AUTO_MODE_TIMEOUT_MS: integer ms — overrides settings.timeoutMs
+ *   - KODAX_AUTO_SPECULATIVE_WINDOW_MS: integer ms (0 disables) — overrides
+ *     settings.speculativeWindowMs (Issue 143 WS3; reuses the same env name
+ *     speculative.ts reads, so a single var controls the knob everywhere)
+ *
+ * Invalid env values fall through to settings (defensive: a typo in an env
+ * var must not silently disable the classifier).
+ */
+declare function loadAutoModeSettings(env?: NodeJS.ProcessEnv): ResolvedAutoModeSettings;
+/**
+ * Resolve Auto settings from caller-owned data without reading global files.
+ * SDK hosts can therefore share the REPL's validation and precedence rules
+ * while retaining ownership of their own configuration source.
+ */
+declare function resolveAutoModeSettings(input?: ResolveAutoModeSettingsInput): ResolvedAutoModeSettings;
+
 /**
  * KodaX Interactive Context Management - 交互式上下文管理
  */
@@ -165,7 +248,7 @@ interface CommandCallbacks {
     setThinking?: (enabled: boolean) => void;
     setReasoningMode?: (mode: KodaXReasoningMode) => void;
     setAgentMode?: (mode: KodaXAgentMode) => void;
-    setPermissionMode?: (mode: PermissionMode) => void;
+    setPermissionMode?: (mode: PermissionMode) => void | Promise<void>;
     setRepoIntelligenceRuntime?: (update: {
         mode?: KodaXRepoIntelligenceMode;
         trace?: boolean;
@@ -238,13 +321,13 @@ interface CommandCallbacks {
      * guardrail state through it. Used by `/auto-engine` (show), `/auto-denials`,
      * and the status bar engine indicator.
      */
-    getAutoModeStats?: () => AutoModeStats | undefined;
+    getAutoModeStats?: () => AutoModeStats | undefined | Promise<AutoModeStats | undefined>;
     /**
      * FEATURE_092 phase 2b.8: manual engine setter for `/auto-engine llm|rules`.
      * No-op when the guardrail hasn't been constructed yet. Threshold downgrades
      * still operate normally — a subsequent denial cross will downgrade again.
      */
-    setAutoModeEngine?: (engine: 'llm' | 'rules') => void;
+    setAutoModeEngine?: (engine: 'llm' | 'rules') => void | Promise<void>;
     ui: UIContext;
 }
 interface CommandResultData {
@@ -428,6 +511,7 @@ declare function loadConfig(): {
     reasoningCeiling?: KodaXReasoningMode;
     agentMode?: KodaXAgentMode;
     permissionMode?: string;
+    autoMode?: AutoModeSettings;
     locale?: string;
     providerModels?: Record<string, string[]>;
     customProviders?: KodaXCustomProviderConfig[];
@@ -599,5 +683,5 @@ declare function resolveRuntimeEffortSelection(input: {
 declare function getGitRoot(cwd?: string): Promise<string | null>;
 declare function rateLimitedCall<T>(fn: () => Promise<T>): Promise<T>;
 
-export { registerConfiguredCustomProviders as A, resolveRuntimeEffortSelection as B, resolveRuntimeModelSelection as D, resolveRuntimeProviderSelection as E, saveConfig as F, touchContext as G, KODAX_CONFIG_FILE as K, PREVIEW_MAX_LENGTH as P, KODAX_DIR as i, KODAX_EXAMPLE_CONFIG_FILE as j, KODAX_INTEGRATION_EXAMPLE_FILES as k, KODAX_SESSIONS_DIR as l, KODAX_VERSION as m, createInteractiveContext as o, ensureExampleConfigFile as p, ensureExampleConfigFiles as q, getGitRoot as r, getProviderList as s, getProviderModel as t, getVersion as u, hydrateProcessEnvFromShell as v, isProviderConfigured as w, loadConfig as x, prepareRuntimeConfig as y, rateLimitedCall as z };
-export type { Command as C, InteractiveContext as I, RuntimeSurfaceMode as R, CommandCallbacks as a, CommandDefinition as b, CommandInfo as c, CommandInvocationRequest as d, CommandSource as e, CommandWorkflowInvocationRequest as f, CurrentConfig as g, InteractiveMode as h, RuntimeSurfaceStatus as n };
+export { loadConfig as B, prepareRuntimeConfig as D, rateLimitedCall as E, registerConfiguredCustomProviders as F, resolveAutoModeSettings as G, resolveRuntimeEffortSelection as H, resolveRuntimeModelSelection as J, KODAX_CONFIG_FILE as K, resolveRuntimeProviderSelection as L, saveConfig as M, touchContext as N, PREVIEW_MAX_LENGTH as P, KODAX_DIR as i, KODAX_EXAMPLE_CONFIG_FILE as j, KODAX_INTEGRATION_EXAMPLE_FILES as k, KODAX_SESSIONS_DIR as l, KODAX_VERSION as m, createInteractiveContext as q, ensureExampleConfigFile as r, ensureExampleConfigFiles as s, getGitRoot as t, getProviderList as u, getProviderModel as v, getVersion as w, hydrateProcessEnvFromShell as x, isProviderConfigured as y, loadAutoModeSettings as z };
+export type { AutoModeSettings as A, Command as C, InteractiveContext as I, ResolveAutoModeSettingsInput as R, CommandCallbacks as a, CommandDefinition as b, CommandInfo as c, CommandInvocationRequest as d, CommandSource as e, CommandWorkflowInvocationRequest as f, CurrentConfig as g, InteractiveMode as h, ResolvedAutoModeSettings as n, RuntimeSurfaceMode as o, RuntimeSurfaceStatus as p };