chainlesschain 0.166.127 → 0.166.129

package/src/command-help-index.json

@@ -5,7 +5,7 @@
     "a2a": "Usage: chainlesschain a2a [options] [command]\n\nA2A Protocol — agent-to-agent communication\n\nOptions:\n  -h, --help                                     display help for command\n\nCommands:\n  register [options] <name>                      Register an agent card\n  discover [options]                             Discover agents by capability or skill\n  submit [options] <agent-id> <input>            Submit a task to an agent\n  status [options] <task-id>                     Get task status\n  complete <task-id> <output>                    Mark a task as completed\n  fail <task-id> <error>                         Mark a task as failed\n  peers [options]                                List all registered agents\n  cards [options]                                List all agent cards with details\n  negotiate [options] <agent-id> <capabilities>  Check if an agent supports required capabilities\n  task-statuses [options]                        List V2 task statuses (Phase 81)\n  card-statuses [options]                        List V2 card statuses (Phase 81)\n  subscription-types [options]                   List V2 subscription types (Phase 81)\n  negotiation-results [options]                  List V2 negotiation outcomes (Phase 81)\n  validate-card [options] <name>                 Validate an agent card against the A2A schema\n  set-card-status [options] <cardId> <status>    Transition a card between active/inactive/expired\n  card-status [options] <cardId>                 Show a card's V2 status\n  send-task-v2 [options] <agentId> <input>       Submit a V2 task (in-memory, with optional timeout)\n  start-working [options] <taskId>               Transition a V2 task to working\n  request-input [options] <taskId> <prompt>      Request user input while a V2 task is working\n  provide-input [options] <taskId> <input>       Provide input for an input-required V2 task\n  complete-task-v2 [options] <taskId> [output]   Complete a V2 task (from working only)\n  fail-task-v2 [options] <taskId> [error]        Fail a V2 task with an error message\n  cancel-task [options] <taskId> [reason]        Cancel a non-terminal V2 task\n  check-timeout [options] <taskId>               Check V2 task timeout (auto-fails if past deadline)\n  task-v2 [options] <taskId>                     Show a V2 task snapshot\n  tasks-v2 [options]                             List V2 tasks\n  negotiate-v2 [options] <cardJson>              Phase 81 capability negotiation against an agent card\n  stats-v2 [options]                             Aggregate V2 stats (tasks + cards + subscriptions)\n  enums-v2                                       Show V2 governance enums\n  register-agent-v2 [options]                    Register an a2a agent profile (pending)\n  activate-agent-v2 <id>                         Activate agent\n  suspend-agent-v2 <id>                          Suspend agent\n  retire-agent-v2 <id>                           Retire agent (terminal)\n  touch-agent-v2 <id>                            Refresh lastTouchedAt\n  get-agent-v2 <id>                              Get agent\n  list-agents-v2                                 List agents\n  create-message-v2 [options]                    Create an a2a message (queued)\n  start-message-v2 <id>                          Transition message to sending\n  deliver-message-v2 <id>                        Transition message to delivered\n  fail-message-v2 [options] <id>                 Fail message\n  cancel-message-v2 [options] <id>               Cancel message\n  get-message-v2 <id>                            Get message\n  list-messages-v2                               List messages\n  set-max-active-agents-v2 <n>                   Set per-owner active cap\n  set-max-pending-messages-v2 <n>                Set per-agent pending cap\n  set-agent-idle-ms-v2 <n>                       Set idle threshold\n  set-message-stuck-ms-v2 <n>                    Set stuck threshold\n  auto-suspend-idle-agents-v2                    Auto-suspend idle agents\n  auto-fail-stuck-messages-v2                    Auto-fail stuck sending messages\n  gov-stats-v2                                   V2 governance aggregate stats\n  help [command]                                 display help for command\n",
     "activitypub": "Usage: chainlesschain activitypub|ap [options] [command]\n\nActivityPub C2S bridge — actors, outbox/inbox, Follow/Create/Like/Announce\n\nOptions:\n  -h, --help                                    display help for command\n\nCommands:\n  actor                                         Manage local and remote ActivityPub actors\n  publish [options] <content>                   Publish a Create(Note) activity to the actor's outbox\n  follow [options] <target>                     Publish a Follow activity (target: username or actor URL)\n  accept [options] <follow-activity-id>         Accept a pending Follow request\n  unfollow [options] <target>                   Publish an Undo(Follow) activity\n  like [options] <object-id>                    Publish a Like activity for an object URL\n  announce [options] <object-id>                Publish an Announce (boost) activity for an object URL\n  outbox [options] <username>                   List an actor's outbox activities\n  inbox [options] <username>                    List an actor's inbox activities\n  deliver [options] <username> <activity-json>  Simulate inbox delivery — push a JSON activity into a local actor's inbox\n  followers [options] <username>                List followers of an actor\n  search [options] <query>                      Search actors and/or notes in the local Fediverse index\n  following [options] <username>                List who this actor is following\n  enums-v2                                      Show V2 enums\n  register-actor-v2 [options]                   Register an AP actor profile (pending)\n  activate-actor-v2 <id>                        Activate actor\n  suspend-actor-v2 <id>                         Suspend actor\n  deactivate-actor-v2 <id>                      Deactivate actor (terminal)\n  touch-actor-v2 <id>                           Refresh lastTouchedAt\n  get-actor-v2 <id>                             Get actor\n  list-actors-v2                                List actors\n  create-activity-v2 [options]                  Create an AP activity (queued)\n  start-activity-v2 <id>                        Transition activity to delivering\n  deliver-activity-v2 <id>                      Transition activity to delivered\n  fail-activity-v2 [options] <id>               Fail activity\n  cancel-activity-v2 [options] <id>             Cancel activity\n  get-activity-v2 <id>                          Get activity\n  list-activities-v2                            List activities\n  set-max-active-actors-v2 <n>                  Set per-owner active cap\n  set-max-pending-activities-v2 <n>             Set per-actor pending cap\n  set-actor-idle-ms-v2 <n>                      Set idle threshold\n  set-activity-stuck-ms-v2 <n>                  Set stuck threshold\n  auto-suspend-idle-actors-v2                   Auto-suspend idle actors\n  auto-fail-stuck-activities-v2                 Auto-fail stuck delivering activities\n  gov-stats-v2                                  V2 governance aggregate stats\n  help [command]                                display help for command\n",
     "agenda": "Usage: chainlesschain agenda [options] [command]\n\nFire agent-scheduled wakeups / crons / monitors (persisted by the `schedule`\ntool)\n\nOptions:\n  -h, --help             display help for command\n\nCommands:\n  list [options]         List all scheduled entries\n  run [options]          Fire every entry that is due now\n  cancel [options] <id>  Remove a scheduled entry by id\n  prune [options]        Remove finished entries (fired / matched / exhausted /\n                         expired)\n  help [command]         display help for command\n",
-    "agent": "Usage: chainlesschain agent|a [options] [command] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --service-tier <tier>                Reviewed provider service tier\n                                       (standard, fast, flex, ultrafast)\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Explicit image model override\n                                       (otherwise: multimodal main model, then\n                                       config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --decision-mode <mode>               Typed Skill-routing experiment for\n                                       durable headless sessions: off | shadow\n                                       | suggest (default: \"off\")\n  --decision-provider <provider>       Decision provider: typesafe | laya\n                                       (local) | system-one (compatible API)\n                                       (default: \"typesafe\")\n  --decision-model <model>             Decision model (defaults:\n                                       typesafe=jev-latest, laya=laya; required\n                                       for system-one)\n  --decision-base-url <url>            System One API base URL (laya: loopback\n                                       only; other providers: HTTPS or\n                                       loopback)\n  --decision-timeout-ms <ms>           Decision timeout in milliseconds\n                                       (50-30000; default: 800)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (0 =\n                                       unlimited; interactive streams default\n                                       to unlimited, unattended runs to 50)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: concise | explanatory |\n                                       learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --include-hook-events                Emit redacted hook and subagent\n                                       lifecycle events (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — requires a relay or\n                                       explicit LAN opt-in; headless waits\n                                       fail-closed, interactive races the\n                                       terminal prompt (also /remote-control)\n  --remote-control-allow-lan           Permit --remote-control to expose its\n                                       authenticated WS endpoint on a trusted\n                                       LAN\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --session-budget                     Enable the durable session-wide budget\n                                       authority (headless; requires\n                                       --session/--resume/--continue)\n  --session-max-concurrent <n>         Durable session cap for concurrent child\n                                       work\n  --session-max-spawns <n>             Durable session cap for total child-work\n                                       admissions\n  --session-max-depth <n>              Durable session cap for child-agent\n                                       nesting depth\n  --session-max-turns <n>              Durable session cap for model turns\n                                       across resumes\n  --session-max-tokens <n>             Durable session cap for\n                                       provider-reported tokens across resumes\n  --session-max-cost-usd <amount>      Durable session cost cap across resumes\n                                       (requires priced provider usage)\n  --session-max-wall-ms <n>            Durable session cap for cumulative\n                                       active wall time\n  --session-max-tool-ms <n>            Durable session cap for aggregate tool\n                                       execution time\n  --observability-workspace <id>       Persist a workspace scope on new session\n                                       authority for causal reports\n  --observability-team <id>            Persist a team scope on new session\n                                       authority for causal reports\n  --observability-policy <id>          Persist a policy scope on new session\n                                       authority for causal reports\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n\nCommands:\n  controlled-host [options]            Run against a pre-provisioned Linux\n                                       permission authority (one-shot, dontAsk)\n  process-ownership                    Inspect Linux process quarantine or\n                                       explicitly stop one recoverable\n                                       execution\n",
+    "agent": "Usage: chainlesschain agent|a [options] [command] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --service-tier <tier>                Reviewed provider service tier\n                                       (standard, fast, flex, ultrafast)\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Explicit image model override\n                                       (otherwise: multimodal main model, then\n                                       config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --decision-mode <mode>               Typed Skill-routing experiment for\n                                       durable headless sessions: off | shadow\n                                       | suggest (default: \"off\")\n  --decision-provider <provider>       Decision provider: typesafe | laya\n                                       (local) | system-one (compatible API)\n                                       (default: \"typesafe\")\n  --decision-model <model>             Decision model (defaults:\n                                       typesafe=jev-latest, laya=laya; required\n                                       for system-one)\n  --decision-base-url <url>            System One API base URL (laya: loopback\n                                       only; other providers: HTTPS or\n                                       loopback)\n  --decision-timeout-ms <ms>           Decision timeout in milliseconds\n                                       (50-30000; default: 800)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (0 =\n                                       unlimited; interactive streams default\n                                       to unlimited, unattended runs to 50)\n  --review-changes                     Headless: review write/edit tool changes\n                                       once within remaining budgets; final\n                                       text only (no partial deltas)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: concise | explanatory |\n                                       learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --include-hook-events                Emit redacted hook and subagent\n                                       lifecycle events (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --goal-recovery-reviewed             Resume an interrupted goal after\n                                       reviewing prior effects and usage\n                                       (requires --resume/--continue and\n                                       --goal-condition)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — requires a relay or\n                                       explicit LAN opt-in; headless waits\n                                       fail-closed, interactive races the\n                                       terminal prompt (also /remote-control)\n  --remote-control-allow-lan           Permit --remote-control to expose its\n                                       authenticated WS endpoint on a trusted\n                                       LAN\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --session-budget                     Enable the durable session-wide budget\n                                       authority (headless; requires\n                                       --session/--resume/--continue)\n  --session-max-concurrent <n>         Durable session cap for concurrent child\n                                       work\n  --session-max-spawns <n>             Durable session cap for total child-work\n                                       admissions\n  --session-max-depth <n>              Durable session cap for child-agent\n                                       nesting depth\n  --session-max-turns <n>              Durable session cap for model turns\n                                       across resumes\n  --session-max-tokens <n>             Durable session cap for\n                                       provider-reported tokens across resumes\n  --session-max-cost-usd <amount>      Durable session cost cap across resumes\n                                       (requires priced provider usage)\n  --session-max-wall-ms <n>            Durable session cap for cumulative\n                                       active wall time\n  --session-max-tool-ms <n>            Durable session cap for aggregate tool\n                                       execution time\n  --observability-workspace <id>       Persist a workspace scope on new session\n                                       authority for causal reports\n  --observability-team <id>            Persist a team scope on new session\n                                       authority for causal reports\n  --observability-policy <id>          Persist a policy scope on new session\n                                       authority for causal reports\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n\nCommands:\n  controlled-host [options]            Run against a pre-provisioned Linux\n                                       permission authority (one-shot, dontAsk)\n  process-ownership                    Inspect Linux process quarantine or\n                                       explicitly stop one recoverable\n                                       execution\n",
     "agent-network": "Usage: chainlesschain agent-network|anet [options] [command]\n\nDecentralized Agent Network (Phase 24) — DID / registry / credentials / task\nrouting\n\nOptions:\n  -h, --help                                           display help for command\n\nCommands:\n  config [options]                                     Show network constants & reputation weights\n  dimensions [options]                                 List reputation dimensions\n  task-statuses [options]                              List task lifecycle statuses\n  did-create [options]                                 Create an Agent DID (Ed25519 + DID document)\n  did-resolve [options] <did>                          Resolve DID → DID document\n  dids [options]                                       List Agent DIDs\n  did-deactivate [options] <did>                       Deactivate a DID (also forces registry offline)\n  sign [options] <did> <data>                          Sign data with agent's Ed25519 key\n  verify [options] <did> <data> <signature>            Verify a signature from an agent\n  register [options] <did> <orgId>                     Register an Agent in the federated registry\n  unregister [options] <did>                           Remove an Agent from the registry\n  heartbeat [options] <did>                            Bump last_heartbeat (forces online)\n  discover [options]                                   Discover agents (capability / org / status)\n  sweep [options]                                      Mark stale online agents offline\n  peer-add [options] <peerId>                          Add/update a Kademlia peer (k-bucket auto-computed)\n  peer-remove [options] <peerId>                       Remove a peer\n  peers [options]                                      List peers (optionally by k-bucket)\n  auth-start [options] <did>                           Issue an auth challenge for a DID\n  auth-complete [options] <sessionId> <signature>      Complete auth with signature over challenge\n  auth-validate [options] <token>                      Validate a session token (returns agentDid or exits 1)\n  auth-sessions [options]                              List auth sessions\n  credential-issue [options] <issuerDid> <subjectDid>  Issue a VC with HMAC/Ed25519 proof\n  credential-verify [options] <id>                     Verify a VC (signature + expiry + revocation)\n  credential-revoke [options] <id>                     Revoke a credential\n  credential-show [options] <id>                       Show a credential\n  credentials [options]                                List credentials (filter by subject/issuer/status/type)\n  task-route [options] <sourceOrg> <taskType>          Route task → pick best-rep agent matching capability\n  task-show [options] <taskId>                         Show a task\n  task-status [options] <taskId> <status>              Update task status (terminal states set completedAt)\n  task-cancel [options] <taskId>                       Cancel a task (sets CANCELLED + reason)\n  tasks [options]                                      List tasks\n  rep-update [options] <did> <dimension> <score>       Record a reputation observation\n  rep-show [options] <did>                             Show reputation summary (weighted total + per-dim avg)\n  rep-history [options] <did>                          Show reputation history (newest first)\n  rep-top [options]                                    Top agents by dimension (or total)\n  stats [options]                                      Network-level statistics\n  agent-maturities-v2                                  List V2 agent maturity states\n  task-lifecycles-v2                                   List V2 task lifecycle states\n  stats-v2                                             V2 agent-network stats\n  get-max-active-agents-v2                             Get max active agents per network (V2)\n  set-max-active-agents-v2 <n>                         Set max active agents per network (V2)\n  get-max-pending-tasks-v2                             Get max pending tasks per agent (V2)\n  set-max-pending-tasks-v2 <n>                         Set max pending tasks per agent (V2)\n  get-agent-idle-ms-v2                                 Get agent idle threshold (V2)\n  set-agent-idle-ms-v2 <ms>                            Set agent idle threshold (V2)\n  get-task-stuck-ms-v2                                 Get task stuck threshold (V2)\n  set-task-stuck-ms-v2 <ms>                            Set task stuck threshold (V2)\n  active-agent-count-v2 <networkId>                    Active agent count for network (V2)\n  pending-task-count-v2 <agentId>                      Pending task count for agent (V2)\n  register-agent-v2 [options] <id>                     Register a V2 agent\n  get-agent-v2 <id>                                    Get a V2 agent\n  list-agents-v2 [options]                             List V2 agents\n  set-agent-status-v2 <id> <next>                      Set V2 agent status\n  activate-agent-v2 <id>                               Activate a V2 agent\n  suspend-agent-v2 <id>                                Suspend a V2 agent\n  revoke-agent-v2 <id>                                 Revoke a V2 agent\n  touch-agent-v2 <id>                                  Touch a V2 agent\n  create-task-v2 [options] <id>                        Create a V2 task\n  get-task-v2 <id>                                     Get a V2 task\n  list-tasks-v2 [options]                              List V2 tasks\n  set-task-status-v2 <id> <next>                       Set V2 task status\n  start-task-v2 <id>                                   Start a V2 task\n  complete-task-v2 <id>                                Complete a V2 task\n  fail-task-v2 <id>                                    Fail a V2 task\n  cancel-task-v2 <id>                                  Cancel a V2 task\n  auto-suspend-idle-agents-v2                          Auto-suspend idle V2 agents\n  auto-fail-stuck-tasks-v2                             Auto-fail stuck V2 tasks\n  help [command]                                       display help for command\n",
     "agents": "Usage: chainlesschain agents [options] [command]\n\nUser-defined subagents (.claude/agents/*.md)\n\nOptions:\n  -h, --help                        display help for command\n\nCommands:\n  background|bg [options]           List background agent sessions\n  logs [options] <id>               Print recent output from a background agent\n  view [options] <id>               Show a detailed background agent view\n  stop [options] <id>               Stop a running background agent\n  rename [options] <id> <title...>  Rename a background agent session\n  list|ls [options]                 List discovered subagents (project +\n                                    personal)\n  show [options] <name>             Show an agent's metadata + system prompt\n  run [options] <name> [task...]    Run a task headlessly as the named subagent\n  new [options] <name>              Scaffold a new agent file (project-native\n                                    .chainlesschain/agents/)\n  help [command]                    display help for command\n",
     "android": "Usage: chainlesschain android [options] [command]\n\nAndroid-native bridge: ContentResolver / SAF / Accessibility / Shizuku / root\n(Plan A A7)\n\nOptions:\n  -h, --help              display help for command\n\nCommands:\n  caps [options]          Probe what bridge capabilities are available on this\n                          device\n  contacts                ContentResolver: contacts\n  sms                     ContentResolver: SMS\n  calls                   ContentResolver: call log\n  app                     PackageManager: app inventory + Intent\n  fs                      SAF / sandbox filesystem\n  a11y                    Accessibility Service\n  shizuku                 Shizuku ADB-like privileges\n  root                    Magisk root su\n  perms [options] <name>  Check (and request) a runtime permission\n  help [command]          display help for command\n",

package/src/commands/agent.js

@@ -509,6 +509,10 @@ export function registerAgentCommand(program, dependencies = {}) {
       "--max-turns <n>",
       "Cap agent loop iterations (0 = unlimited; interactive streams default to unlimited, unattended runs to 50)",
     )
+    .option(
+      "--review-changes",
+      "Headless: review write/edit tool changes once within remaining budgets; final text only (no partial deltas)",
+    )
     .option(
       "--json-schema <file>",
       "Headless structured output: final reply must be JSON validating against this schema (invalid replies retried)",
@@ -583,6 +587,10 @@ export function registerAgentCommand(program, dependencies = {}) {
       "--goal-condition <spec>",
       "Session completion condition; re-drives outer turns until met. Prefix exit-zero:/file-exists:/contains:/regex: (deterministic) or model:<desc> (model-judged)",
     )
+    .option(
+      "--goal-recovery-reviewed",
+      "Resume an interrupted goal after reviewing prior effects and usage (requires --resume/--continue and --goal-condition)",
+    )
     .option(
       "--max-outer-turns <n>",
       "Max outer re-drive turns for --goal-condition (default 10, hard cap 100)",
@@ -1708,6 +1716,7 @@ export function registerAgentCommand(program, dependencies = {}) {
             maxTurns: options.maxTurns
               ? parseInt(options.maxTurns, 10)
               : undefined,
+            reviewChanges: options.reviewChanges === true,
             expandFileRefs: options.fileRefs !== false,
             slashMacros: options.slashMacros !== false,
             systemPrompt: resolvePromptText(options.systemPrompt, { cwd }),
@@ -1949,6 +1958,16 @@ export function registerAgentCommand(program, dependencies = {}) {
             process.exit(1);
           }
         }
+        if (
+          options.goalRecoveryReviewed === true &&
+          (!options.goalCondition || !options.session)
+        ) {
+          process.stderr.write(
+            "--goal-recovery-reviewed requires a resumed session and --goal-condition\n",
+          );
+          await _finishWorktree();
+          process.exit(1);
+        }
         const maxTurns = options.maxTurns
           ? parseInt(options.maxTurns, 10)
           : undefined;
@@ -2025,6 +2044,7 @@ export function registerAgentCommand(program, dependencies = {}) {
             ? options.maxRewakes
             : undefined,
           maxTurns,
+          reviewChanges: options.reviewChanges === true,
           // commander maps --no-file-refs 鈫?options.fileRefs === false
           expandFileRefs: options.fileRefs !== false,
           slashMacros: options.slashMacros !== false,
@@ -2049,6 +2069,7 @@ export function registerAgentCommand(program, dependencies = {}) {
           // --goal-condition: session-level completion-condition engine — drives
           // outer turns until the condition is met or a budget is exhausted.
           goalCondition: options.goalCondition || null,
+          goalRecoveryReviewed: options.goalRecoveryReviewed === true,
           maxOuterTurns: Number.isFinite(options.maxOuterTurns)
             ? options.maxOuterTurns
             : undefined,
@@ -2210,6 +2231,14 @@ export function registerAgentCommand(program, dependencies = {}) {
         process.exitCode = 1;
         return;
       }
+      if (options.reviewChanges === true) {
+        process.stderr.write(
+          "--review-changes requires a headless prompt or --input-format stream-json.\n",
+        );
+        await _finishWorktree();
+        process.exitCode = 1;
+        return;
+      }
       // Reached only for an interactive session, where --image has no turn to
       // attach to 鈥?warn instead of silently dropping the attachment.
       if (images.length) {

package/src/commands/setup.js

@@ -9,6 +9,7 @@ import {
 } from "../constants.js";
 import { ensureHomeDir, getConfigPath } from "../lib/paths.js";
 import {
+  loadConfig,
   setSecretConfigValue,
   updateConfigAtomically,
 } from "../lib/config-manager.js";
@@ -59,6 +60,26 @@ export function assertRequiredProviderCredential(providerInfo, apiKey) {
   }
 }
 
+export function resolveSetupLlmDefaults(provider, existing = {}) {
+  const preset = LLM_PROVIDERS[provider];
+  if (!preset) throw new Error("Unknown setup provider");
+  const sameProvider = existing?.provider === provider;
+  return {
+    baseUrl:
+      sameProvider &&
+      typeof existing.baseUrl === "string" &&
+      existing.baseUrl.trim()
+        ? existing.baseUrl
+        : preset.defaultBaseUrl,
+    model:
+      sameProvider &&
+      typeof existing.model === "string" &&
+      existing.model.trim()
+        ? existing.model
+        : preset.defaultModel,
+  };
+}
+
 async function runSetup(options) {
   logger.log(chalk.bold("\n  ChainlessChain Setup Wizard\n"));
   logger.log(`  Version: ${VERSION}`);
@@ -104,6 +125,17 @@ async function runSetup(options) {
   ]);
 
   // Step 5: Configure LLM
+  let existingLlm;
+  try {
+    existingLlm = loadConfig({
+      resolveSecrets: false,
+      failIfUnavailable: true,
+    }).llm;
+  } catch {
+    throw new Error(
+      "Could not read existing LLM configuration; repair it before running setup",
+    );
+  }
   const providerChoices = Object.entries(LLM_PROVIDERS).map(([key, info]) => ({
     name: info.name,
     value: key,
@@ -112,8 +144,7 @@ async function runSetup(options) {
   const providerInfo = LLM_PROVIDERS[provider];
 
   let apiKey = null;
-  let baseUrl = providerInfo.defaultBaseUrl;
-  let model = providerInfo.defaultModel;
+  let { baseUrl, model } = resolveSetupLlmDefaults(provider, existingLlm);
 
   if (providerInfo.requiresApiKey) {
     apiKey = await askPassword(`Enter ${providerInfo.name} API key:`);
@@ -123,14 +154,8 @@ async function runSetup(options) {
   }
 
   if (provider === "custom" || providerInfo.isProxy) {
-    baseUrl = await askInput(
-      "Enter API base URL:",
-      providerInfo.defaultBaseUrl || "",
-    );
-    model = await askInput(
-      "Enter model name:",
-      providerInfo.defaultModel || "",
-    );
+    baseUrl = await askInput("Enter API base URL:", baseUrl || "");
+    model = await askInput("Enter model name:", model || "");
   } else {
     const customizeModel = await askConfirm(
       `Use default model (${model})?`,

package/src/constants.js

@@ -26,95 +26,21 @@ export const DEFAULT_PORTS = {
   wsServer: 18800,
 };
 
-export const LLM_PROVIDERS = {
-  volcengine: {
-    name: "Volcengine (火山引擎/豆包)",
-    defaultBaseUrl: "https://ark.cn-beijing.volces.com/api/v3",
-    defaultModel: "deepseek-v4-1-flash-260910",
-    requiresApiKey: true,
-  },
-  openai: {
-    name: "OpenAI",
-    defaultBaseUrl: "https://api.openai.com/v1",
-    defaultModel: "gpt-4o",
-    requiresApiKey: true,
-  },
-  anthropic: {
-    name: "Anthropic (Claude)",
-    defaultBaseUrl: "https://api.anthropic.com/v1",
-    defaultModel: "claude-sonnet-4-6",
-    requiresApiKey: true,
-  },
-  deepseek: {
-    name: "DeepSeek",
-    defaultBaseUrl: "https://api.deepseek.com/v1",
-    defaultModel: "deepseek-chat",
-    requiresApiKey: true,
-  },
-  dashscope: {
-    name: "DashScope (阿里通义)",
-    defaultBaseUrl: "https://dashscope.aliyuncs.com/compatible-mode/v1",
-    defaultModel: "qwen-max",
-    requiresApiKey: true,
-  },
-  gemini: {
-    name: "Google Gemini",
-    defaultBaseUrl: "https://generativelanguage.googleapis.com/v1beta",
-    defaultModel: "gemini-2.0-flash",
-    requiresApiKey: true,
-  },
-  kimi: {
-    name: "Kimi (月之暗面)",
-    defaultBaseUrl: "https://api.moonshot.cn/v1",
-    defaultModel: "moonshot-v1-auto",
-    requiresApiKey: true,
-  },
-  minimax: {
-    name: "MiniMax (海螺AI)",
-    defaultBaseUrl: "https://api.minimax.chat/v1",
-    defaultModel: "MiniMax-Text-01",
-    requiresApiKey: true,
-  },
-  mistral: {
-    name: "Mistral AI",
-    defaultBaseUrl: "https://api.mistral.ai/v1",
-    defaultModel: "mistral-large-latest",
-    requiresApiKey: true,
-  },
-  ollama: {
-    name: "Ollama (本地部署)",
-    defaultBaseUrl: "http://localhost:11434",
-    defaultModel: "qwen2:7b",
-    requiresApiKey: false,
-  },
-  "openai-proxy": {
-    name: "OpenAI 中转站 (API2D/CloseAI等)",
-    defaultBaseUrl: "",
-    defaultModel: "gpt-4o",
-    requiresApiKey: true,
-    isProxy: true,
-  },
-  "anthropic-proxy": {
-    name: "Anthropic 中转站 (Claude代理)",
-    defaultBaseUrl: "",
-    defaultModel: "claude-sonnet-4-6",
-    requiresApiKey: true,
-    isProxy: true,
-  },
-  "gemini-proxy": {
-    name: "Gemini 中转站 (Google代理)",
-    defaultBaseUrl: "",
-    defaultModel: "gemini-2.0-flash",
-    requiresApiKey: true,
-    isProxy: true,
-  },
-  custom: {
-    name: "自定义 Provider (自建服务/vLLM/TGI等)",
-    defaultBaseUrl: "",
-    defaultModel: "",
-    requiresApiKey: true,
-  },
-};
+// New-connection suggestions are shared with both IDEs. Runtime fallbacks and
+// existing persisted models are deliberately independent of this catalog.
+const onboardingCatalog = require("./lib/llm-onboarding-catalog.json");
+export const LLM_PROVIDERS = Object.fromEntries(
+  onboardingCatalog.providers.map((preset) => [
+    preset.id,
+    {
+      name: preset.cliLabel || preset.label,
+      defaultBaseUrl: preset.baseUrl,
+      defaultModel: preset.defaultModel,
+      requiresApiKey: preset.needsKey,
+      ...(preset.isProxy ? { isProxy: true } : {}),
+    },
+  ]),
+);
 
 export const EDITIONS = {
   personal: {

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.129",
+      "cliVersions": ["0.166.129"],
+      "date": "2026-10-28",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.129: independent change review and Codex support evidence (candidate, 2026-10-28)",
+          "body": "- Give opted-in hermetic change review its own request context and tool journal, preserving original requirements, shared request limits, permissions and cancellation. Missing review usage blocks further calls; review is not independent task acceptance.\n- Centralize experimental Codex App Server support, versioned schema probes and CI targets. Keep default-off routing and the existing experimental allowlist; probe-only 0.160.0 and 0.164.0 do not imply production admission.\n- Verify concurrent thread recovery with explicit database recency pagination on Linux, Windows and macOS. Retain documented limitations for default rollout scanning and legacy creation-time pagination.\n- Retain published child dependencies. Candidate publication requires exact-commit CLI CI and Strict Sandbox across all configured systems, GitHub Actions OIDC publication and public artifact readback. Historical task and native acceptance remain separately reported."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.128",
+      "cliVersions": ["0.166.128"],
+      "date": "2026-10-27",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.128: goal verification, tool discovery and memory queries (candidate, 2026-10-27)",
+          "body": "- Bind default goal evaluation to tool and artifact evidence, and stop automatic continuation when a reliable goal checkpoint cannot be saved.\n- Share new-connection model recommendations and protocol-aware probes across CLI and IDE integrations; retain existing model aliases and per-conversation model overrides.\n- Improve multilingual MCP and Skills descriptor discovery. Add an opt-in compact MCP provider catalog while retaining the full host execution ceiling, permission checks and revoked-schema handling.\n- Avoid unnecessary Memory posting unions when a narrower filter is already available. Preserve ordering, pagination, scope/sink filters, disk verification and generation-bound caches.\n- Add explicit headless `--review-changes` for a one-shot completion review after successful write/edit changes, with subsequent repairs inside the existing request and cost budgets. Suppress provisional text/thinking deltas and do not append review after incomplete usage. Default off; self-review is not independent task acceptance.\n- Retain published child package pins. Publish only through GitHub Actions OIDC after exact-source Linux, Windows and macOS CLI CI and Strict Sandbox pass; publish paired IDEs and clients only after upstream public readback.\n- Keep real task and billing acceptance separate from local synthetic benchmarks. Cumulative acceptance remains 32/45; NOT_PAID_READY / NOT_ADMITTED / HOLD remain."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.127",
@@ -10,7 +36,7 @@
       "sections": [
         {
           "heading": "Added - cc CLI 0.166.127: optional self-evolution controls (2026-10-27)",
-          "body": "- Default fresh installations and older automatically generated local deployments to self-evolution off. Share the boolean `evolution.enabled` setting across CLI, cc ui, VS Code and JetBrains; explicit false overrides inherited deployment environment variables, while absent settings preserve manually selected deployments.\n- Enable and disable through configuration or deployment commands, initialize the local signed runtime on explicit enable, and retain deployment and trust history when disabled. Require a restart for running Agent sessions and reread the setting for new UI model requests.\n- Keep ordinary Agent, ask, chat, session resume and UI intent confirmation available while off. Retain strict signature and evidence checks for enabled deployments and prevent unrelated configuration writes from changing an absent Evolution choice.\n- Add shared configuration documentation and regression coverage. Pair IDE candidates VS Code 0.37.164 and JetBrains 0.4.180 with CLI 0.166.127; publish them only after verified public CLI availability. Child dependency pins are unchanged.\n- Require exact-source Linux, Windows and macOS CLI CI and Strict Sandbox before GitHub Actions OIDC publication and public package readback. Automatic candidate promotion remains HOLD; this switch does not start a full RRSI campaign or claim new live model-task acceptance."
+          "body": "- Default fresh installations and older automatically generated local deployments to self-evolution off. Share the boolean `evolution.enabled` setting across CLI, cc ui, VS Code and JetBrains; explicit false overrides inherited deployment environment variables, while absent settings preserve manually selected deployments.\n- Enable and disable through configuration or deployment commands, initialize the local signed runtime on explicit enable, and retain deployment and trust history when disabled. Require a restart for running Agent sessions and reread the setting for new UI model requests.\n- Keep ordinary Agent, ask, chat, session resume and UI intent confirmation available while off. Retain strict signature and evidence checks for enabled deployments and prevent unrelated configuration writes from changing an absent Evolution choice.\n- Add shared configuration documentation and regression coverage. CLI 0.166.127 is public through OIDC after exact-source three-OS CLI CI and Strict Sandbox. Public Open VSX 0.37.165 and JetBrains 0.4.182 recommend .127; archive readback passed. Child dependency pins are unchanged. Microsoft Marketplace remains unpublished.\n- Publish mobile and PC v5.0.3.142 from frozen source c9881a2b71 after verified CLI and IDE releases. Five-platform builds, 22 public assets and three desktop updater metadata sets passed verification. No new live model-task acceptance: 32/45 accepted, 13 unfinished; NOT_PAID_READY / NOT_ADMITTED / HOLD remain.\n- Require exact-source Linux, Windows and macOS CLI CI and Strict Sandbox before GitHub Actions OIDC publication and public package readback. Automatic candidate promotion remains HOLD; this switch does not start a full RRSI campaign or claim new live model-task acceptance."
         }
       ]
     },

package/src/lib/bm25-search.js

@@ -129,11 +129,14 @@ export class BM25Search {
    * @param {number} [options.k1=1.5] - Term frequency saturation parameter
    * @param {number} [options.b=0.75] - Length normalization parameter
    * @param {string} [options.language="auto"] - Language for tokenization
+   * @param {function(string): string[]} [options.tokenizer] - Optional domain tokenizer
    */
   constructor(options = {}) {
     this.k1 = options.k1 || 1.5;
     this.b = options.b || 0.75;
     this.language = options.language || "auto";
+    this._tokenize =
+      options.tokenizer || ((text) => tokenize(text, this.language));
 
     // Index state
     this.documents = []; // Array of { id, tokens, originalDoc }
@@ -152,7 +155,7 @@ export class BM25Search {
 
     for (const doc of documents) {
       const text = [doc.title || "", doc.content || ""].join(" ");
-      const tokens = tokenize(text, this.language);
+      const tokens = this._tokenize(text);
 
       this.documents.push({
         id: doc.id,
@@ -183,7 +186,7 @@ export class BM25Search {
    */
   addDocument(doc) {
     const text = [doc.title || "", doc.content || ""].join(" ");
-    const tokens = tokenize(text, this.language);
+    const tokens = this._tokenize(text);
 
     this.documents.push({
       id: doc.id,
@@ -251,7 +254,7 @@ export class BM25Search {
 
     if (this.totalDocs === 0) return [];
 
-    const queryTokens = tokenize(query, this.language);
+    const queryTokens = this._tokenize(query);
     if (queryTokens.length === 0) return [];
 
     const scores = [];

package/src/lib/codex-app-server-adapter.js

@@ -1,13 +1,17 @@
 import { EventEmitter } from "node:events";
-
-export const CODEX_APP_SERVER_PROTOCOL = "codex-app-server-experimental-v1";
-export const CODEX_APP_SERVER_FEATURE_FLAG = "CC_EXPERIMENTAL_CODEX_APP_SERVER";
-export const CODEX_APP_SERVER_COMPATIBILITY_MATRIX = Object.freeze([
-  Object.freeze({ version: "0.149.0" }),
-  Object.freeze({ version: "0.150.0" }),
-  Object.freeze({ version: "0.150.1" }),
-  Object.freeze({ version: "0.154.0" }),
-]);
+import {
+  CODEX_APP_SERVER_PROTOCOL,
+  CODEX_APP_SERVER_FEATURE_FLAG,
+  CODEX_APP_SERVER_FALLBACK_PROTOCOL,
+  CODEX_APP_SERVER_COMPATIBILITY_MATRIX,
+  getCodexAppServerSupport,
+  parseCodexVersion,
+} from "./codex-app-server-support.js";
+export {
+  CODEX_APP_SERVER_PROTOCOL,
+  CODEX_APP_SERVER_FEATURE_FLAG,
+  CODEX_APP_SERVER_COMPATIBILITY_MATRIX,
+} from "./codex-app-server-support.js";
 
 function adapterError(code, message, details = {}) {
   const error = new Error(message);
@@ -17,17 +21,10 @@ function adapterError(code, message, details = {}) {
   return error;
 }
 
-function parseVersion(value) {
-  const match = String(value || "")
-    .trim()
-    .match(/^(?:codex(?:-cli)?\s+)?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/u);
-  return match ? match.slice(1).map(Number).join(".") : null;
-}
-
 export function isCodexAppServerVersionCompatible(version, matrix = []) {
-  const parsed = parseVersion(version);
+  const parsed = parseCodexVersion(version);
   if (!parsed || !Array.isArray(matrix) || matrix.length === 0) return false;
-  return matrix.some((entry) => parseVersion(entry?.version) === parsed);
+  return matrix.some((entry) => parseCodexVersion(entry?.version) === parsed);
 }
 
 function projectNotification(notification) {
@@ -182,11 +179,16 @@ export class CodexAppServerAdapter extends EventEmitter {
       productionCritical: false,
       featureFlag: CODEX_APP_SERVER_FEATURE_FLAG,
       enabled: this.enabled,
+      support: getCodexAppServerSupport(this.upstreamVersion),
+      compatibilitySource:
+        this.compatibilityMatrix === CODEX_APP_SERVER_COMPATIBILITY_MATRIX
+          ? "manifest"
+          : "override",
       versionCompatible: isCodexAppServerVersionCompatible(
         this.upstreamVersion,
         this.compatibilityMatrix,
       ),
-      fallback: "codex-exec-jsonl-v1",
+      fallback: CODEX_APP_SERVER_FALLBACK_PROTOCOL,
     });
   }
 
@@ -302,6 +304,7 @@ export class CodexAppServerAdapter extends EventEmitter {
     const buildResult = (terminalEvent) =>
       Object.freeze({
         protocol: CODEX_APP_SERVER_PROTOCOL,
+        support: claims.support,
         threadId: activeThreadId,
         turnId: activeTurnId,
         terminal: terminalEvent.terminal,
@@ -388,13 +391,23 @@ export class CodexAppServerAdapter extends EventEmitter {
         throw adapterError(
           "CC_CODEX_APP_SERVER_SUBMISSION_UNKNOWN",
           "Codex App Server turn submission outcome is unknown; fallback was suppressed to prevent duplicate effects",
-          { cause: error },
+          {
+            cause: error,
+            protocol: CODEX_APP_SERVER_PROTOCOL,
+            fallbackSuppressed: true,
+            support: claims.support,
+          },
         );
       }
       throw adapterError(
         "CC_CODEX_APP_SERVER_FAILED_AFTER_ADMISSION",
         "Codex App Server failed after the turn was admitted; fallback was suppressed to prevent duplicate effects",
-        { cause: error },
+        {
+          cause: error,
+          protocol: CODEX_APP_SERVER_PROTOCOL,
+          fallbackSuppressed: true,
+          support: claims.support,
+        },
       );
     } finally {
       clearTimeout(timer);
@@ -412,7 +425,8 @@ export class CodexAppServerAdapter extends EventEmitter {
     const result = await this.fallback({ prompt, ...options });
     return Object.freeze({
       ...result,
-      protocol: "codex-exec-jsonl-v1",
+      protocol: CODEX_APP_SERVER_FALLBACK_PROTOCOL,
+      support: getCodexAppServerSupport(this.upstreamVersion),
       fallback: true,
       fallbackReason: reason,
       authoritative: false,