muonroi-cli 1.8.4 → 1.8.5

package/dist/src/ui/slash/menu-items.js

@@ -31,26 +31,21 @@ export const SLASH_MENU_ITEMS = [
     { id: "providers", label: "providers", description: "Manage providers + API keys (enable/disable, set default)" },
     { id: "compact", label: "compact", description: "Compact conversation context" },
     { id: "clear", label: "clear", description: "Clear conversation and start fresh" },
-    { id: "ideal", label: "ideal", description: "Product Ideal Loop — autonomous build from idea to ship" },
+    { id: "ideal", label: "ideal", description: "Product Ideal Loop — from idea to shipped product, autonomously" },
     { id: "council", label: "council", description: "Multi-model adversarial debate" },
     // ── Hidden (still functional when typed in full) ───────────────────────
     { id: "help", label: "help", description: "Show available commands", hidden: true },
-    { id: "config", label: "config", description: "Open provider and council configuration", hidden: true },
     { id: "remote-control", label: "remote-control", description: "Remote control", hidden: true },
-    { id: "agents", label: "agents", description: "Manage custom sub-agents", hidden: true },
-    { id: "schedule", label: "schedule", description: "View scheduled runs", hidden: true },
     { id: "mcp", label: "mcp", description: "Manage MCP servers", hidden: true },
     { id: "sandbox", label: "sandbox", description: "Select shell sandbox mode", hidden: true },
     { id: "wallet", label: "wallet", description: "Wallet and payment settings", hidden: true },
     { id: "models", label: "models", description: "Alias of /providers", hidden: true },
     { id: "new", label: "new session", description: "Start a new session", hidden: true },
-    { id: "sessions", label: "sessions", description: "List recent sessions to resume", hidden: true },
+    { id: "resume", label: "resume", description: "List recent sessions to resume" },
     { id: "commit-push", label: "commit & push", description: "Commit and push", hidden: true },
     { id: "commit-pr", label: "commit & pr", description: "Commit and open PR", hidden: true },
     { id: "review", label: "review", description: "Review recent changes", hidden: true },
     { id: "verify", label: "verify", description: "Run local verification", hidden: true },
-    { id: "skills", label: "skills", description: "Manage skills", hidden: true },
-    { id: "btw", label: "btw", description: "Ask a side question without interrupting", hidden: true },
     { id: "update", label: "update", description: "Update muonroi-cli to the latest version", hidden: true },
     { id: "cost", label: "cost", description: "Show session cost breakdown", hidden: true },
     { id: "ee", label: "ee", description: "Experience Engine status and controls", hidden: true },
@@ -74,21 +69,20 @@ export const SLASH_MENU_ITEMS = [
     { id: "pin", label: "pin", description: "Pin a user message so it survives compaction", hidden: true },
     { id: "unpin", label: "unpin", description: "Remove a pinned message by sequence number", hidden: true },
     { id: "pins", label: "pins", description: "List currently pinned message sequences", hidden: true },
-    { id: "ee-stats", label: "ee stats", description: "Knowledge base statistics", hidden: true },
-    { id: "ee-gates", label: "ee gates", description: "Quality gate checklist", hidden: true },
-    { id: "ee-evolve", label: "ee evolve", description: "Trigger EE evolution cycle", hidden: true },
-    { id: "ee-user", label: "ee user", description: "Current EE user identity", hidden: true },
-    { id: "ee-search", label: "ee search", description: "Semantic search across knowledge base", hidden: true },
-    { id: "ee-timeline", label: "ee timeline", description: "Principle evolution for a topic", hidden: true },
-    { id: "ee-graph", label: "ee graph", description: "Principle relationship graph", hidden: true },
-    { id: "ee-route", label: "ee route", description: "Route task to workflow", hidden: true },
-    { id: "ee-context-on", label: "ee-context on", description: "Enable BB-aware EE context injection", hidden: true },
-    { id: "ee-context-off", label: "ee-context off", description: "Disable BB-aware EE context injection", hidden: true },
-    { id: "ee-context-status", label: "ee-context status", description: "Show current BB-context setting", hidden: true },
     { id: "export", label: "export", description: "Export entire conversation to a .txt file", hidden: true },
     { id: "status", label: "status", description: "Show Agile sprint progress dashboard", hidden: true },
     { id: "ponytail", label: "ponytail", description: "Toggle Lazy Senior AI Mode (on/off/status)", hidden: false },
 ];
 /** Items shown in the splash autocomplete + /help listing. */
 export const VISIBLE_SLASH_MENU_ITEMS = SLASH_MENU_ITEMS.filter((m) => !m.hidden);
+/**
+ * Arrow-navigation order for the empty-query ("just /") dropdown: primary
+ * surface first, then the hidden commands. The dropdown renders a scrolling
+ * viewport, so listing the full set here makes every command reachable by
+ * arrow keys without cluttering the top of the list (primary stays on top).
+ */
+export const SLASH_MENU_ITEMS_ARROW_ORDER = [
+    ...VISIBLE_SLASH_MENU_ITEMS,
+    ...SLASH_MENU_ITEMS.filter((m) => m.hidden),
+];
 //# sourceMappingURL=menu-items.js.map

package/dist/src/ui/slash/registry.d.ts

@@ -23,6 +23,8 @@ export interface SlashContext {
 export type SlashHandler = (args: string[], ctx: SlashContext) => Promise<string> | string;
 /** Register a slash command handler. */
 export declare function registerSlash(name: string, handler: SlashHandler): void;
+/** Unregister a slash command handler (used for tests). */
+export declare function unregisterSlash(name: string): void;
 /**
  * Dispatch a slash command by name.
  * Returns null if command not registered (caller falls back to legacy switch).

package/dist/src/ui/slash/registry.js

@@ -9,6 +9,10 @@ const registry = new Map();
 export function registerSlash(name, handler) {
     registry.set(name, handler);
 }
+/** Unregister a slash command handler (used for tests). */
+export function unregisterSlash(name) {
+    registry.delete(name);
+}
 /**
  * Dispatch a slash command by name.
  * Returns null if command not registered (caller falls back to legacy switch).

package/dist/src/ui/status-bar/cache-hit.d.ts

@@ -0,0 +1,6 @@
+/** Cache-hit ratio = cache_read / total input (cumulative). `in_tokens` already
+ *  includes cache-read tokens (verified: usage_events cache_read ⊆ input_tokens). */
+export declare function computeCacheHitPct(s: {
+    in_tokens: number;
+    cache_read_tokens: number;
+}): number | null;

package/dist/src/ui/status-bar/cache-hit.js

@@ -0,0 +1,9 @@
+/** Cache-hit ratio = cache_read / total input (cumulative). `in_tokens` already
+ *  includes cache-read tokens (verified: usage_events cache_read ⊆ input_tokens). */
+export function computeCacheHitPct(s) {
+    if (s.in_tokens <= 0)
+        return null;
+    const pct = (s.cache_read_tokens / s.in_tokens) * 100;
+    return Math.max(0, Math.min(100, Math.round(pct)));
+}
+//# sourceMappingURL=cache-hit.js.map

package/dist/src/ui/status-bar/index.d.ts

@@ -7,7 +7,7 @@
  * Subscribes to statusBarStore for live updates (no polling).
  */
 import * as React from "react";
-import { type SprintProgressSegment, type StatusBarState } from "./store.js";
+import { type SprintProgressSegment, type StatusBarState } from "../../state/status-bar-store.js";
 /**
  * Format a SprintProgressSegment into the StatusBar display string.
  * Format: Sprint N/M · X/Y stories · Z%

package/dist/src/ui/status-bar/index.js

@@ -9,7 +9,8 @@ import { jsx as _jsx } from "@opentui/react/jsx-runtime";
  */
 import { Semantic } from "@muonroi/agent-harness-opentui";
 import * as React from "react";
-import { statusBarStore } from "./store.js";
+import { statusBarStore } from "../../state/status-bar-store.js";
+import { computeCacheHitPct } from "./cache-hit.js";
 import { TierBadge } from "./tier-badge.js";
 import { UsdMeter } from "./usd-meter.js";
 function useStatusBarState() {
@@ -57,7 +58,11 @@ export function renderStatusBar(s) {
         : s.ctx_tokens !== undefined
             ? ` [ctx: ${fmtTokens(s.ctx_tokens)}]`
             : "";
-    const tokenStr = `↑${fmtTokens(s.in_tokens)} ↓${fmtTokens(s.out_tokens)}${s.cache_read_tokens ? ` ⊚${fmtTokens(s.cache_read_tokens)}` : ""}${ctxFill}`;
+    const hitPct = computeCacheHitPct(s);
+    const cacheSeg = s.cache_read_tokens
+        ? ` ⊚${fmtTokens(s.cache_read_tokens)}${hitPct !== null ? ` ${hitPct}%` : ""}`
+        : "";
+    const tokenStr = `↑${fmtTokens(s.in_tokens)} ↓${fmtTokens(s.out_tokens)}${cacheSeg}${ctxFill}`;
     const ee = EE_DOT[s.ee_status] ?? EE_DOT.unknown;
     const slots = [
         React.createElement("text", { key: "pm", fg: "#5c9cf5", "data-testid": "slot-provider-model" }, modelLabel),
@@ -66,7 +71,6 @@ export function renderStatusBar(s) {
         React.createElement(UsdMeter, {
             key: "usd",
             session_usd: s.session_usd,
-            month_usd: s.month_usd,
             current_pct: s.current_pct,
         }),
         React.createElement("text", { key: "ee", fg: ee.color, "data-testid": "slot-ee" }, ee.symbol),

package/dist/src/ui/status-bar/usd-meter.d.ts

@@ -1,13 +1,14 @@
 /**
  * src/ui/status-bar/usd-meter.tsx
  *
- * USD meter sub-component: session + month with threshold color escalation.
- * white < 50%, cyan >= 50%, yellow >= 80%, red >= 100%.
+ * USD meter sub-component: session spend with threshold color escalation.
+ * white < 50%, cyan >= 50%, yellow >= 80%, red >= 100%. The month total is
+ * intentionally NOT shown here (redundant on the status bar); it remains in the
+ * store and is surfaced on demand via `/cost`.
  */
 import * as React from "react";
 export interface UsdMeterProps {
     session_usd: number;
-    month_usd: number;
     current_pct: number;
 }
-export declare function UsdMeter({ session_usd, month_usd, current_pct }: UsdMeterProps): React.ReactElement;
+export declare function UsdMeter({ session_usd, current_pct }: UsdMeterProps): React.ReactElement;

package/dist/src/ui/status-bar/usd-meter.js

@@ -1,13 +1,15 @@
 /**
  * src/ui/status-bar/usd-meter.tsx
  *
- * USD meter sub-component: session + month with threshold color escalation.
- * white < 50%, cyan >= 50%, yellow >= 80%, red >= 100%.
+ * USD meter sub-component: session spend with threshold color escalation.
+ * white < 50%, cyan >= 50%, yellow >= 80%, red >= 100%. The month total is
+ * intentionally NOT shown here (redundant on the status bar); it remains in the
+ * store and is surfaced on demand via `/cost`.
  */
 import * as React from "react";
-export function UsdMeter({ session_usd, month_usd, current_pct }) {
+export function UsdMeter({ session_usd, current_pct }) {
     const color = current_pct >= 100 ? "red" : current_pct >= 80 ? "yellow" : current_pct >= 50 ? "cyan" : "white";
-    const text = `session: $${session_usd.toFixed(2)} | month: $${month_usd.toFixed(2)}`;
+    const text = `session: $${session_usd.toFixed(2)}`;
     return React.createElement("text", { fg: color, "data-testid": "usd-meter", "data-pct": current_pct }, text);
 }
 //# sourceMappingURL=usd-meter.js.map

package/dist/src/ui/theme.d.ts

@@ -65,6 +65,7 @@ export declare const dark: {
     readonly syntaxRegex: "#d16969";
     readonly syntaxTag: "#569cd6";
     readonly syntaxAttr: "#9cdcfe";
+    readonly overlay: "#000000cc";
     readonly councilLeaderBorder: "#666666";
     readonly councilSynthesisBorder: "#5c9cf5";
     readonly councilInfoCardBorder: "#4a4a4a";

package/dist/src/ui/theme.js

@@ -65,6 +65,8 @@ export const dark = {
     syntaxRegex: "#d16969",
     syntaxTag: "#569cd6",
     syntaxAttr: "#9cdcfe",
+    // ── Overlay / modal backdrop ─────────────────────────────────────────────
+    overlay: "#000000cc",
     // ── Council bubble tokens ────────────────────────────────────────────────
     councilLeaderBorder: "#666666",
     councilSynthesisBorder: "#5c9cf5",

package/dist/src/ui/types.d.ts

@@ -63,6 +63,13 @@ export interface AppStartupConfig {
      * Never set this in production — only passed via --inject-halt CLI flag.
      */
     injectHalt?: boolean;
+    /**
+     * TEST SEAM (A): when true, dispatch a synthetic `sprint_failed` halt chunk
+     * (Resume / Retry / Skip verify / Abort) after first idle. Lets harness E2E
+     * specs verify the sprint-break recovery card without a real mid-run failure.
+     * Never set this in production — only passed via --inject-halt-sprint.
+     */
+    injectHaltSprint?: boolean;
 }
 export interface AppProps {
     agent: Agent;

package/dist/src/ui/utils/format.d.ts

@@ -35,4 +35,18 @@ export declare function buildPreflightQuestion(pf: {
         model: string;
     }>;
 }): CouncilQuestionData;
+/**
+ * F5 — the council entrypoint (council/index.ts) emits `leader`+`panel`+`topic`
+ * together exactly once, at the START of each debate; every later `council_meta`
+ * patch is partial (a lone roundBudget / researchMode / successCriteria /
+ * criteriaMet). That combination is the strongest new-council signal — stronger
+ * than a topic change, which misses a re-run on the SAME topic (auto-council
+ * re-firing on a phase, or a fresh /council after an Esc that skipped
+ * clearLiveTurnUi) and leaks the prior council's pinned criteria into the rail as
+ * stale ○ rows. The rail resets its meta+rounds on this.
+ */
+export declare function isCouncilStartPatch(patch: {
+    leader?: string;
+    panel?: string[];
+}): boolean;
 export declare function mapCouncilCardKey(key: KeyEvent): CouncilCardKey | null;

package/dist/src/ui/utils/format.js

@@ -41,6 +41,13 @@ export function formatAnswerForLog(ans, ctx) {
         return verb;
     // Single line — labels carry value + rationale tail; keep echo to the value.
     const valueOnly = label.split("—")[0].trim().replace(/\s+/g, " ");
+    // Internal snake_case action ids (continue_session, save_exit, generate_plan,
+    // ask_followup…) are routing tokens the user should NEVER see. When the value
+    // is such an id, echo the human label alone instead of "continue_session · …".
+    // Short human verbs (accept, skip, override) have no underscore and keep the
+    // value-prefixed forensics form below.
+    if (/_/.test(verb))
+        return valueOnly || verb;
     if (ctx?.questionId) {
         return `${verb} · ${ctx.questionId}=${valueOnly}`;
     }
@@ -89,15 +96,28 @@ export function buildPreflightQuestion(pf) {
         questionId: pf.preflightId,
         phase: "preflight",
         question: `Approve discussion plan for: ${pf.problemStatement}`,
-        context: pf.participants.length > 0 ? `Participants: ${pf.participants.map((p) => p.role).join(", ")}` : undefined,
+        context: pf.participants.length > 0 ? `Panel: ${pf.participants.map((p) => p.model).join(", ")}` : undefined,
         options: [
-            { label: "Approve", value: "approve", kind: "choice", description: "Start the debate now" },
-            { label: "Reject", value: "reject", kind: "choice", description: "Cancel and rewrite the topic" },
+            { label: "Approve", value: "approve", kind: "choice", description: "Looks good — start the debate" },
+            { label: "Reject", value: "reject", kind: "choice", description: "Hold off — go back and rephrase the topic" },
         ],
         isRequired: true,
         defaultIndex: 0,
     };
 }
+/**
+ * F5 — the council entrypoint (council/index.ts) emits `leader`+`panel`+`topic`
+ * together exactly once, at the START of each debate; every later `council_meta`
+ * patch is partial (a lone roundBudget / researchMode / successCriteria /
+ * criteriaMet). That combination is the strongest new-council signal — stronger
+ * than a topic change, which misses a re-run on the SAME topic (auto-council
+ * re-firing on a phase, or a fresh /council after an Esc that skipped
+ * clearLiveTurnUi) and leaks the prior council's pinned criteria into the rail as
+ * stale ○ rows. The rail resets its meta+rounds on this.
+ */
+export function isCouncilStartPatch(patch) {
+    return !!patch.leader && !!patch.panel;
+}
 export function mapCouncilCardKey(key) {
     if (key.name === "up")
         return { kind: "up" };

package/dist/src/usage/downgrade.js

@@ -7,7 +7,7 @@
  *
  * Plan 06 (status bar) subscribes to DowngradeEvent for UI updates.
  */
-import { getModelByTier } from "../models/registry.js";
+import { getRoutedModelByTier } from "../router/peak-hour.js";
 import { getDefaultProvider } from "../utils/settings.js";
 function buildDowngradeChain() {
     const provider = getDefaultProvider() ?? undefined;
@@ -15,7 +15,7 @@ function buildDowngradeChain() {
     const seen = new Set();
     const chain = [];
     for (const tier of tiers) {
-        const m = getModelByTier(tier, provider);
+        const m = getRoutedModelByTier(tier, provider);
         if (m && !seen.has(m.id)) {
             chain.push(m.id);
             seen.add(m.id);

package/dist/src/usage/product-ledger.js

@@ -24,12 +24,12 @@ async function ensureDirectory(filePath) {
 export async function appendProductLedger(productRunId, entry, homeOverride) {
     const filePath = getProductLedgerPath(productRunId, homeOverride);
     await ensureDirectory(filePath);
-    // Ensure file exists for lockfile to target
+    // Ensure file exists for lockfile to target without truncating it concurrently
     try {
         await fs.access(filePath);
     }
     catch {
-        await fs.writeFile(filePath, "");
+        await fs.appendFile(filePath, "");
     }
     const releaseLock = await lockfile.lock(filePath, {
         retries: { retries: 10, minTimeout: 10, maxTimeout: 100 },

package/dist/src/utils/install-manager.js

@@ -194,7 +194,8 @@ export function detectInstallMethod(homeDir = os.homedir()) {
     }
     // Not under node_modules and not launched by node/bun → standalone binary.
     const exeBase = ((process.execPath || "").replace(/\\/g, "/").split("/").pop() ?? "").toLowerCase();
-    if (!modPath.includes("/node_modules/") && !/^(node|bun)(\.exe)?$/.test(exeBase)) {
+    const isNodeOrBunRunner = /^(node|bun)(\.exe|-[\d.]+)?$/i.test(exeBase);
+    if (!modPath.includes("/node_modules/") && !isNodeOrBunRunner) {
         return "compiled";
     }
     // Linked/source build run from a git checkout (e.g. `bun link`, a symlinked

package/dist/src/utils/logger.js

@@ -1,6 +1,6 @@
-import * as fs from "fs";
-import * as path from "path";
+import fs from "fs";
 import * as os from "os";
+import * as path from "path";
 const LEVEL_WEIGHTS = {
     debug: 0,
     info: 1,

package/dist/src/utils/permission-mode.js

@@ -3,7 +3,8 @@
  *
  * safe      - Every tool call prompts the user for approval.
  * auto-edit - File operation tools (read/write/edit/grep/list) auto-approve;
- *             shell execution and computer tools still require confirmation.
+ *             shell execution auto-approves for non-dangerous commands;
+ *             computer tools still require confirmation.
  * yolo      - All tool calls auto-approve without any prompting.
  */
 import { appendDecisionLog } from "../usage/decision-log.js";
@@ -217,8 +218,9 @@ export function toolNeedsApproval(toolName, mode, context) {
         return false;
     }
     if (mode === "auto-edit") {
-        if (toolName === "bash" && dangerous(context?.command))
-            return true;
+        // bash auto-approves when non-dangerous; only dangerous bash needs approval
+        if (toolName === "bash")
+            return dangerous(context?.command);
         return !AUTO_EDIT_ALLOWED.has(toolName);
     }
     // "safe" — always confirm; dangerous patterns explicitly require (no bypass)

package/dist/src/utils/redactor.js

@@ -34,7 +34,7 @@ const STATIC_PATTERNS = [
     },
     // Environment variable assignments for common API keys
     {
-        pattern: /(ANTHROPIC_API_KEY|OPENAI_API_KEY|GOOGLE_API_KEY|DEEPSEEK_API_KEY)\s*=\s*\S+/g,
+        pattern: /(ANTHROPIC_API_KEY|OPENAI_API_KEY|DEEPSEEK_API_KEY)\s*=\s*\S+/g,
         replacement: "$1=***REDACTED***",
     },
     // Authorization Bearer header

package/dist/src/utils/settings.d.ts

@@ -4,6 +4,17 @@ import type { ProviderId } from "../providers/types.js";
 import type { AgentMode, ReasoningEffort } from "../types/index.js";
 import { type ShellSettings } from "./shell.js";
 export type ModelRole = "leader" | "implement" | "verify" | "research";
+export type PeakHourMode = "downgrade" | "switch";
+export interface PeakHourPolicy {
+    /** Default true — peak-hour routing active. */
+    enabled?: boolean;
+    /**
+     * downgrade: same-provider only (per catalog provider_policies.peak_hour).
+     * switch: try catalog switch_fallback_providers first.
+     * Default: switch.
+     */
+    mode?: PeakHourMode;
+}
 export declare function getCatalogDefaultModel(): string;
 export type TelegramStreamingMode = "off" | "partial";
 export type CouncilExperienceMode = "off" | "advisory" | "enforcing";
@@ -101,6 +112,9 @@ export interface UserSettings {
     autoCompactAfterTurn?: boolean;
     /** Minimum % of context window to trigger post-turn auto-compact (default 0.25 = 25%, range 0.05-0.50). */
     autoCompactThresholdPct?: number;
+    /** Minimum new tokens accumulated since the last compaction before another
+     *  post-turn compaction may fire. Prevents cache-reset thrash. Default 20000. */
+    autoCompactMinNewTokens?: number;
     roleModels?: Partial<Record<ModelRole, string>>;
     councilRounds?: number;
     autoCouncil?: boolean;
@@ -118,6 +132,26 @@ export interface UserSettings {
      * preserving legacy behavior).
      */
     autoCouncilMinRoles?: number;
+    /**
+     * Whether an auto-triggered council/debate runs the pre-debate clarification
+     * interview (model-designed askcards) before debating, instead of jumping
+     * straight into the debate on the bare prompt. Default true — a broad request
+     * like "dùng debate mode thảo luận lên plan" is exactly the kind of ambiguous
+     * scope the interview is meant to chốt first (prevents the debate drifting /
+     * "lan man"). The clarifier is ROI-gated and returns 0 cards on already-detailed
+     * topics, so enabling it is safe. Set false (or env MUONROI_AUTOCOUNCIL_CLARIFY=0)
+     * to restore the old skip-clarification behaviour.
+     */
+    autoCouncilClarify?: boolean;
+    /**
+     * When true (default), auto-council is skipped if the current session model is
+     * a reasoning model (catalog `reasoning: true`). Reasoning models already
+     * perform an internal self-debate via extended thinking, so running an
+     * explicit multi-role council on the same prompt is usually low-ROI and
+     * expensive. Set false (or env MUONROI_AUTOCOUNCIL_SKIP_REASONING=0) to force
+     * council even for reasoning models.
+     */
+    autoCouncilSkipReasoning?: boolean;
     councilPreferMultiProvider?: boolean;
     /** EE involvement level in council debates. Default: advisory. CQ-19. */
     councilExperienceMode?: CouncilExperienceMode;
@@ -132,6 +166,20 @@ export interface UserSettings {
      * decide structure and quality, not throughput.
      */
     councilCostAware?: boolean;
+    /**
+     * Language the council debate is conducted in (Feature B). The chosen language
+     * IS the debate language — no separate translate-back pass, so no extra LLM
+     * rounds. Values:
+     *   - "auto" (default) — debate + conclusion follow the language of the user's
+     *     prompt/brief (they type Vietnamese → the debate runs in Vietnamese).
+     *   - "english" — force the historical English-only debate (citation tags,
+     *     JSON, cross-turn citations stay maximally machine-stable).
+     *   - any other free-text locale label (e.g. "vietnamese", "日本語") — pin the
+     *     debate to that language regardless of the prompt's language.
+     * Citation tags, JSON keys, the `type` field, code identifiers, and STACK LOCK
+     * technology names always stay verbatim English regardless of this setting.
+     */
+    councilLanguage?: string;
     /** Set true after the user has been prompted (or skipped) the web-research onboarding. */
     webResearchPrompted?: boolean;
     /** Set true after the user has been prompted (or skipped) the first-run Experience Engine setup. */
@@ -151,13 +199,13 @@ export interface UserSettings {
     providers?: {
         anthropic?: ProviderKeyConfig;
         openai?: ProviderKeyConfig;
-        google?: ProviderKeyConfig;
         deepseek?: ProviderKeyConfig;
-        siliconflow?: ProviderKeyConfig;
         xai?: ProviderKeyConfig;
         ollama?: {
             baseURL?: string;
         };
+        zai?: ProviderKeyConfig;
+        "opencode-go"?: ProviderKeyConfig;
     };
     /** Providers the user has explicitly disabled in the model picker (still configured but hidden). */
     disabledProviders?: ProviderId[];
@@ -187,6 +235,11 @@ export interface UserSettings {
         /** Switch back to premium for final synthesis. Default: false. */
         premiumSynthesis?: boolean;
     };
+    /**
+     * Peak-hour routing for Z.ai (14:00–18:00 UTC+8 per docs) and DeepSeek
+     * (pro→flash downgrade in the same window to ease concurrency pressure).
+     */
+    peakHourPolicy?: PeakHourPolicy;
     /**
      * Reporter auto-fire settings (B2).
      * Controls whether the reporter posts to Discord automatically on sprint
@@ -216,6 +269,27 @@ export interface UserSettings {
      * Default 400_000 (~100k tokens).
      */
     topLevelToolBudgetChars?: number;
+    /**
+     * Router tier-promotion cap. The session's default model is treated as the
+     * user's cost ceiling: the EE router may DOWNGRADE per turn (cheaper model)
+     * but may not promote to a HIGHER tier than this setting allows without an
+     * explicit opt-in.
+     *
+     * - `"off"`: never promote beyond the default model's own tier.
+     * - `"balanced"` (default): allow promotion up to balanced, never premium.
+     *   Routine tasks the EE brain over-classifies as premium get clamped to
+     *   balanced (or to the default model when the provider has no balanced
+     *   option — e.g. DeepSeek native only has fast + premium).
+     * - `"any"`: restore legacy behavior (router may promote to any tier).
+     *
+     * Evidence: session 89b34ce9a4e8 — default deepseek-v4-flash (fast tier),
+     * stored session.model=flash, but EE warm path returned premium for a
+     * routine "check và commit files" task → 47/47 turns silently ran on
+     * deepseek-v4-pro ($0.353) instead of flash (~$0.06). The per-turn routing
+     * override never flowed through setModel so the sessions row stayed flash
+     * ("session.model lie"). Default cap="balanced" prevents that silent leak.
+     */
+    routingPromoteMax?: "off" | "balanced" | "any";
 }
 export interface ProjectSettings {
     model?: string;
@@ -279,6 +353,7 @@ export declare function loadPaymentSettings(): Required<PaymentSettings>;
 export declare function savePaymentSettings(partial: PaymentSettings): void;
 export declare function isAutoCompactAfterTurnEnabled(): boolean;
 export declare function getAutoCompactThresholdPct(): number;
+export declare function getAutoCompactMinNewTokens(): number;
 /**
  * Per-invocation cap on cumulative tool-output chars inside a `task`
  * sub-agent. See orchestrator/sub-agent-cap.ts for the tiered compression
@@ -294,6 +369,21 @@ export declare function getSubAgentBudgetChars(): number;
  * Default 120_000 (2 min). Env override: MUONROI_PROVIDER_STALL_TIMEOUT_MS.
  */
 export declare function getProviderStallTimeoutMs(): number;
+/**
+ * No-forward-progress watchdog timeout (ms) for streaming model calls. Distinct
+ * from the stall watchdog: the stall watchdog re-arms on ANY stream chunk —
+ * including a reasoning model's `reasoning-delta` chunks — so a model stuck in an
+ * endless chain-of-thought keeps petting it and it NEVER fires (observed live
+ * 2026-07-10: a deepseek-v4-flash sub-agent churned reasoning for 30+ min, 1.4M
+ * input tokens, ZERO text/tool output, and the 2-min stall watchdog never tripped
+ * because reasoning chunks kept arriving). This second watchdog is petted ONLY on
+ * REAL forward progress (a text-delta or a tool-call), so a runaway-reasoning /
+ * no-output loop is aborted while a legitimately long reasoning burst that DOES
+ * eventually emit text/tools survives. Set generously above a normal reasoning
+ * burst. Range 30_000–1_800_000; 0 disables. Default 300_000 (5 min). Env
+ * override: MUONROI_PROVIDER_PROGRESS_TIMEOUT_MS.
+ */
+export declare function getProviderProgressTimeoutMs(): number;
 /**
  * Number of times to AUTOMATICALLY re-issue a streaming model call after the
  * stall watchdog fires WITHOUT any chunk having arrived (a time-to-first-byte
@@ -337,21 +427,48 @@ export declare function getSubAgentCompactKeepLast(): number;
  * top-level loops typically carry more useful early context.
  * Env override: MUONROI_TOP_LEVEL_COMPACT_THRESHOLD_CHARS.
  */
-export declare function getTopLevelCompactThresholdChars(): number;
+export declare function getTopLevelCompactThresholdChars(contextWindowTokens?: number): number;
+/**
+ * Compaction hysteresis factor for the top-level loop. Once B4 compaction has
+ * fired within a turn, the compacted prefix is FROZEN and only new messages are
+ * appended (keeping the provider prompt-cache prefix byte-stable) until the
+ * cumulative size grows past `lastTriggerChars * factor` — then it re-compacts.
+ *
+ * Why: measured on session 1afb2728e67a — a 24-step turn re-ran compaction every
+ * step, and each step's sliding keepLast boundary flipped one more tool result
+ * verbatim→stub, breaking the cache prefix at that position. 63% of that
+ * session's FRESH input came from 5 such compaction-induced cache breaks.
+ * Holding the boundary between compactions trades a higher peak input for far
+ * fewer cache-break re-bills.
+ *
+ * Range 1.0–3.0. Default 1.15 (re-compact at +15% growth). `1.0` or env `0`
+ * disables hysteresis → legacy per-step compaction.
+ * Env override: MUONROI_COMPACT_HYSTERESIS.
+ */
+export declare function getTopLevelCompactHysteresis(): number;
 /**
  * Phase B4 — number of trailing tool turns kept verbatim during top-level
  * compaction. Higher than sub-agent default because top-level agents make
  * decisions across longer horizons.
  * Env override: MUONROI_TOP_LEVEL_COMPACT_KEEP_LAST.
  */
-export declare function getTopLevelCompactKeepLast(): number;
+export declare function getTopLevelCompactKeepLast(contextWindowTokens?: number): number;
+/**
+ * O2 — byte budget for the verbatim tail (last keepLast turns) in top-level B4
+ * compaction. The keepLast shrink is otherwise fill-ratio based, so on a
+ * large-context model a read-heavy tail stays verbatim at ~50% fill, pinning
+ * each tool round at 60-80K input (measured on July-8 sessions). This caps the
+ * tail's actual chars, shrinking keepLast further (floor 2) when the kept tool
+ * results are large. 0 disables. Env: MUONROI_TOP_LEVEL_COMPACT_TAIL_BUDGET_CHARS.
+ */
+export declare function getTopLevelCompactTailBudgetChars(contextWindowTokens?: number): number;
 /**
  * Per-turn cap on cumulative tool-output chars inside the top-level
  * orchestrator agentic loop. Same tiered compression as the sub-agent cap,
  * higher default so single-tool turns are unaffected. Env override:
  * MUONROI_TOP_LEVEL_TOOL_BUDGET_CHARS.
  */
-export declare function getTopLevelToolBudgetChars(maxRounds?: number): number;
+export declare function getTopLevelToolBudgetChars(maxRounds?: number, contextWindowTokens?: number): number;
 export declare function getRoleModel(role: ModelRole): string | undefined;
 export declare function getRoleModels(): Partial<Record<ModelRole, string>>;
 export declare function getCouncilRounds(): number;
@@ -361,10 +478,41 @@ export declare function normalizeAutoCouncilConfidence(val: unknown): number;
 /** Pure validator extracted for testability; clamps user input to a sane range. */
 export declare function normalizeAutoCouncilMinRoles(val: unknown): number;
 export declare function getAutoCouncilConfidence(): number;
+/**
+ * Whether the auto-council path runs the pre-debate clarification interview
+ * (model-designed askcards) before debating. Default true so a broadly-scoped
+ * "debate mode" request is clarified first. Env override wins over the user
+ * setting for quick dev toggling; env "0"/"false" disables, "1"/"true" enables.
+ */
+export declare function isAutoCouncilClarifyEnabled(): boolean;
+/**
+ * Whether auto-council should be skipped when the session model is a reasoning
+ * model. Default true. Env override wins over the user setting for quick dev
+ * toggling; env "0"/"false" disables the skip (forces council), "1"/"true"
+ * enables the skip.
+ */
+export declare function isAutoCouncilSkipReasoning(): boolean;
 export declare function getAutoCouncilMinRoles(): number;
 export declare function isCouncilMultiProviderPreferred(): boolean;
 export declare function getCouncilExperienceMode(): CouncilExperienceMode;
+export declare function normalizePeakHourPolicy(raw: unknown): PeakHourPolicy;
+export declare function getPeakHourPolicy(): PeakHourPolicy;
 export declare function isCouncilCostAware(): boolean;
+/**
+ * Normalize a raw councilLanguage value (Feature B). Trims + lowercases the two
+ * reserved modes ("auto", "english"); any other non-empty string is preserved
+ * as-is (trimmed) so locale labels keep the user's exact casing (e.g. "日本語").
+ * Empty / non-string → "auto".
+ */
+export declare function normalizeCouncilLanguage(raw: unknown): string;
+export declare function getCouncilLanguage(): string;
+/**
+ * Router tier-promotion ceiling. See UserSettings.routingPromoteMax.
+ * Default "balanced" — router may promote up to balanced but never silently
+ * to premium. Validated to the three allowed values; any unknown value
+ * falls back to the default.
+ */
+export declare function getRoutingPromoteMax(): "off" | "balanced" | "any";
 export declare function getDisabledProviders(): ProviderId[];
 export declare function isProviderDisabled(provider: ProviderId): boolean;
 export declare function setProviderDisabled(provider: ProviderId, disabled: boolean): ProviderId[];