neko-harness 0.5.2 → 0.5.3

package/dist/gateway.js

@@ -16604,6 +16604,42 @@ import { basename as basename4, dirname as dirname9, join as join13 } from "path
 import { createHost as createHost2 } from "@earendil-works/chord";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT4 } from "@earendil-works/chord/context";
 
+// packages/core/src/codemode-mode.ts
+var CODEMODE_NAME = "codemode";
+var CODEMODE_MODES = ["off", "on", "only"];
+var DEFAULT_CODEMODE_MODE = "off";
+var isCodemodeMode = (value) => typeof value === "string" && CODEMODE_MODES.includes(value);
+var CODEMODE_LIMITS = {
+  memoryLimitBytes: 256 * 1024 * 1024,
+  maxWorkers: 2,
+  waitMs: 60000
+};
+var CODEMODE_VIEW_LIMITS = {
+  maxCalls: 100,
+  argsChars: 200,
+  errorChars: 200
+};
+function parseCodemodeMode(value, field = "codemode.mode") {
+  if (!isCodemodeMode(value))
+    throw new Error(`"${field}" must be one of ${CODEMODE_MODES.join(", ")}.`);
+  return value;
+}
+function parseCodemodeSettings(value, prefix = "codemode") {
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    throw new Error(`"${prefix}" must be an object.`);
+  const { mode, ...rest } = value;
+  const unknown = Object.keys(rest)[0];
+  if (unknown !== undefined)
+    throw new Error(`"${prefix}.${unknown}" is not a known setting.`);
+  return mode === undefined ? {} : { mode: parseCodemodeMode(mode, `${prefix}.mode`) };
+}
+function resolveCodemodeSettings(config, saved) {
+  if (isCodemodeMode(saved))
+    return { effective: { mode: saved }, source: "saved" };
+  if (config?.mode !== undefined)
+    return { effective: { mode: config.mode }, source: "config" };
+  return { effective: { mode: DEFAULT_CODEMODE_MODE }, source: "default" };
+}
 // packages/core/src/config.ts
 import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
@@ -16934,6 +16970,13 @@ function validate(config, source) {
       throw new Error(`neko config: ${source}: ${error instanceof Error ? error.message : String(error)}`);
     }
   }
+  if (config.codemode !== undefined) {
+    try {
+      parseCodemodeSettings(config.codemode);
+    } catch (error) {
+      throw new Error(`neko config: ${source}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
 }
 // packages/core/src/credentials.ts
 import { chmod, mkdir, open, readFile, stat, unlink } from "fs/promises";
@@ -17146,6 +17189,36 @@ class FileCredentialStore {
 // packages/core/src/file-changes.ts
 import { isAbsolute as isAbsolute2, relative, resolve as resolve3, sep } from "path";
 
+// packages/core/src/change-limits.ts
+var CHANGE_LIMITS = {
+  files: 500,
+  opsPerFile: 50,
+  diffBytes: 2 * 1024 * 1024,
+  opDiffBytes: 64 * 1024,
+  conversations: 64,
+  nestedRecords: 1000
+};
+function clipDiff(diff) {
+  if (Buffer.byteLength(diff, "utf8") <= CHANGE_LIMITS.opDiffBytes)
+    return { diff, truncated: false };
+  const lines = diff.split(`
+`);
+  const kept = [];
+  let bytes = 0;
+  for (const line of lines) {
+    bytes += Buffer.byteLength(line, "utf8") + 1;
+    if (bytes > CHANGE_LIMITS.opDiffBytes)
+      break;
+    kept.push(line);
+  }
+  return { diff: kept.join(`
+`), truncated: true };
+}
+
+// packages/core/src/nested-changes.ts
+import { defineDoc, wrapTool } from "@earendil-works/pi-durable";
+import { createEditTool, createWriteTool } from "@earendil-works/pi-durable/tools";
+
 // packages/core/src/image-prompt.ts
 var DEFAULT_IMAGE_PROMPT = {
   version: 2,
@@ -17310,6 +17383,47 @@ var interactionField = (name, details) => {
   const interaction = toolInteraction(name, details);
   return interaction ? { interaction } : {};
 };
+var clip2 = (text, max) => text.length <= max ? text : `${text.slice(0, max - 1)}\u2026`;
+function codemodeView(calls, fullOutputPath) {
+  const limit = CODEMODE_VIEW_LIMITS.maxCalls;
+  return { calls: calls.slice(0, limit), omitted: Math.max(0, calls.length - limit), fullOutputPath };
+}
+function liveCodemodeView(live, callId) {
+  const slots = (live.nestedTools ?? []).filter((slot) => slot.parentCallId === callId);
+  return codemodeView(slots.map((slot, index) => {
+    const key = /\/c(\d+)$/.exec(slot.callId)?.[1];
+    const summary = slot.summary;
+    return {
+      id: key === undefined ? index + 1 : Number(key),
+      name: slot.name,
+      args: clip2(JSON.stringify(slot.arguments) ?? "", CODEMODE_VIEW_LIMITS.argsChars),
+      status: slot.status !== "done" ? "running" : summary === undefined ? "cancelled" : summary.isError ? "error" : "ok",
+      durationMs: summary?.durationMs ?? null,
+      error: summary?.error === undefined ? null : clip2(summary.error, CODEMODE_VIEW_LIMITS.errorChars)
+    };
+  }), null);
+}
+function codemodeResultView(details) {
+  if (!isRecord(details) || !Array.isArray(details.calls))
+    return;
+  const calls = details.calls.flatMap((call) => {
+    if (!isRecord(call) || typeof call.name !== "string")
+      return [];
+    const { id, args, status, durationMs, error } = call;
+    return [
+      {
+        id: typeof id === "number" ? id : 0,
+        name: call.name,
+        args: typeof args === "string" ? clip2(args, CODEMODE_VIEW_LIMITS.argsChars) : "",
+        status: status === "ok" || status === "error" || status === "cancelled" ? status : "running",
+        durationMs: typeof durationMs === "number" ? durationMs : null,
+        error: typeof error === "string" ? clip2(error, CODEMODE_VIEW_LIMITS.errorChars) : null
+      }
+    ];
+  });
+  return codemodeView(calls, typeof details.fullOutputPath === "string" ? details.fullOutputPath : null);
+}
+var codemodeField = (name, view) => name === CODEMODE_NAME && view ? { codemode: view } : {};
 function summarizeToolCall(name, args) {
   const record = args ?? {};
   switch (name) {
@@ -17342,6 +17456,12 @@ function summarizeToolCall(name, args) {
 `)
       };
     }
+    case "codemode": {
+      const code = typeof record.code === "string" ? record.code : "";
+      const first = code.split(`
+`).find((line) => line.trim() !== "" && !line.trim().startsWith("// @options")) ?? "";
+      return { args: truncateMiddle(first.trim(), 100), detail: code };
+    }
     case "subagent":
       return {
         args: record.action === "list" ? "List agents" : `${record.agentId ?? record.type}: ${record.title}`,
@@ -17487,7 +17607,8 @@ function projectChatView(view, modelLabel, options = {}) {
         diff,
         diffAdded: counts?.added ?? null,
         diffRemoved: counts?.removed ?? null,
-        ...interactionField(message.toolName, message.details)
+        ...interactionField(message.toolName, message.details),
+        ...codemodeField(message.toolName, codemodeResultView(message.details))
       });
     }
   }
@@ -17585,7 +17706,8 @@ function projectChatView(view, modelLabel, options = {}) {
             diffAdded: synthesized?.added ?? null,
             diffRemoved: synthesized?.removed ?? null,
             diffTruncated: synthesized?.truncated ?? false,
-            ...interactionField(block.name, slot?.details)
+            ...interactionField(block.name, slot?.details),
+            ...codemodeField(block.name, slot?.status === "running" ? liveCodemodeView(live, block.id) : undefined)
           });
         }
       }
@@ -17708,7 +17830,8 @@ ${block.text}`;
         diff: synthesized?.diff ?? null,
         diffAdded: synthesized?.added ?? null,
         diffRemoved: synthesized?.removed ?? null,
-        diffTruncated: synthesized?.truncated ?? false
+        diffTruncated: synthesized?.truncated ?? false,
+        ...codemodeField(block.name, slot?.status === "running" ? liveCodemodeView(live, block.id) : undefined)
       });
     }
   }
@@ -17729,11 +17852,74 @@ function contextTokens(entries) {
   return null;
 }
 
+// packages/core/src/nested-changes.ts
+var NestedChangesDoc = defineDoc({
+  kind: "app.neko.nested-changes",
+  checkpointWhen: () => false,
+  version: 1,
+  scope: "conversation",
+  history: "rewindable",
+  fork: "asOf",
+  initial: () => ({ total: 0, dropped: false, items: [] })
+});
+var bytesOf = (items) => items.reduce((sum, item) => sum + Buffer.byteLength(item.diff, "utf8"), 0);
+function addNestedChange(state, change) {
+  const existing = state.items.findIndex((item) => item.id === change.id);
+  if (existing !== -1)
+    state.items.splice(existing, 1);
+  else
+    state.total += 1;
+  state.items.push(change);
+  let bytes = bytesOf(state.items);
+  while (state.items.length > 1 && (state.items.length > CHANGE_LIMITS.nestedRecords || bytes > CHANGE_LIMITS.diffBytes)) {
+    const evicted = state.items.shift();
+    bytes -= Buffer.byteLength(evicted.diff, "utf8");
+    state.dropped = true;
+  }
+}
+function describe2(tool, args, details) {
+  if (tool === "edit") {
+    const raw = editResultDiff(details);
+    if (raw === null)
+      return { diff: "", added: 0, removed: 0, truncated: false };
+    return { ...clipDiff(raw), ...countDiffLines(raw) };
+  }
+  return synthesizedWriteDiff(args) ?? { diff: "", added: 0, removed: 0, truncated: false };
+}
+function nestedChangeWraps() {
+  const wrap = (reference, tool) => wrapTool(reference, (inner) => ({
+    ...inner,
+    execute: async (args, api, context) => {
+      const result = await inner.execute(args, api, context);
+      const path = args?.path;
+      if (result.isError || typeof path !== "string" || path === "")
+        return result;
+      const task = await api.getTask(api.taskId, context);
+      const input = task?.input;
+      if (input?.kind !== "nested" || typeof input.parentCallId !== "string")
+        return result;
+      const parentCallId = input.parentCallId;
+      const change = {
+        id: api.callId,
+        parentCallId,
+        tool,
+        path,
+        ...describe2(tool, args, result.details)
+      };
+      await api.commit(async (tx) => {
+        addNestedChange(await tx.doc(NestedChangesDoc, api.conversationId), change);
+      }, context);
+      return result;
+    }
+  }));
+  return [wrap(createEditTool(), "edit"), wrap(createWriteTool(), "write")];
+}
+
 // packages/core/src/subagents.ts
 import {
   AssistantEntry,
   configure,
-  defineDoc as defineDoc2,
+  defineDoc as defineDoc4,
   defineExtension,
   defineTask,
   defineTool,
@@ -17744,9 +17930,9 @@ import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 // packages/core/src/plan-doc.ts
-import { defineDoc } from "@earendil-works/pi-durable";
+import { defineDoc as defineDoc2 } from "@earendil-works/pi-durable";
 var PLAN_HISTORY = 5;
-var PlanDoc = defineDoc({
+var PlanDoc = defineDoc2({
   kind: "app.neko.plan",
   checkpointWhen: () => false,
   version: 1,
@@ -17756,6 +17942,198 @@ var PlanDoc = defineDoc({
   initial: () => ({ mode: "normal", revision: 0, items: [] })
 });
 var PLAN_CODER_BLOCKED = "Plan mode is read-only: the coder subagent is unavailable. Use explore or plan subagents, or finish the plan first.";
+var PLAN_REMOVED_TOOLS = ["edit", "write", "job"];
+var PLAN_INSTRUCTIONS = [
+  "You are in plan mode: research and plan only, and change nothing.",
+  "- Allowed: read, find_files, search_text, web_search, web_extract, todo, ask_user, read-only subagents (explore, plan) and bash limited to read-only commands (listing, searching, git log/diff/status, version checks). Other commands are rejected.",
+  "- Not available: edit, write, job and any command that modifies files, installs packages or starts processes. Do not try to work around this.",
+  "- When you understand the task, call submit_plan once, alone in its turn, with a short title, ordered concrete steps and an optional note (risks, assumptions, verification). The user then approves it or asks for changes.",
+  "- After submit_plan do nothing else. If the user asks for changes, research what is needed and submit a revised plan.",
+  "- Use ask_user only for decisions you cannot settle by reading the code."
+].join(`
+`);
+
+// packages/core/src/agent-change.ts
+var ONLY_MODE_MAIN_TOOLS = ["todo", "ask_user", "subagent"];
+var named = (name) => ({ name });
+function onlyModeTools(plan, role) {
+  return [
+    CODEMODE_NAME,
+    ...role === "main" ? [...ONLY_MODE_MAIN_TOOLS, ...plan === "plan" ? ["submit_plan"] : []] : []
+  ];
+}
+function agentChangeFor({ plan, codemode, role }) {
+  const planning = plan === "plan";
+  return {
+    tools: planning ? { remove: PLAN_REMOVED_TOOLS.map(named) } : null,
+    modelTools: codemode === "only" ? onlyModeTools(plan, role).map(named) : planning ? { add: [named("submit_plan")] } : null,
+    extensions: codemode === "off" ? { remove: [{ name: CODEMODE_NAME }] } : { add: [{ name: CODEMODE_NAME }] },
+    instructions: planning ? PLAN_INSTRUCTIONS : null
+  };
+}
+function enabledTools(agent) {
+  const offered = new Set(agent.tools.map((tool) => tool.name));
+  return [...agent.tools, ...agent.callable.filter((tool) => !offered.has(tool.name))];
+}
+var agentInPlanMode = (agent) => agent.instructions === PLAN_INSTRUCTIONS;
+function agentSyncChange(agent, state) {
+  const desired = agentChangeFor(state);
+  const planMismatch = agentInPlanMode(agent) !== (state.plan === "plan");
+  const hasExtension = agent.extensions.some((extension) => extension.name === CODEMODE_NAME);
+  const callable = new Set(agent.callable.map((tool) => tool.name));
+  const offered = agent.tools.map((tool) => tool.name);
+  let codemodeMismatch;
+  if (state.codemode === "off")
+    codemodeMismatch = hasExtension || callable.has(CODEMODE_NAME);
+  else {
+    codemodeMismatch = !hasExtension || !offered.includes(CODEMODE_NAME);
+    if (state.codemode === "only") {
+      const allowed = new Set(onlyModeTools(state.plan, state.role));
+      codemodeMismatch ||= offered.some((name) => !allowed.has(name));
+    }
+  }
+  if (!planMismatch && !codemodeMismatch)
+    return;
+  return {
+    ...planMismatch ? { tools: desired.tools, instructions: desired.instructions } : {},
+    modelTools: desired.modelTools,
+    ...codemodeMismatch ? { extensions: desired.extensions } : {}
+  };
+}
+
+// packages/core/src/codemode.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { CodemodeSandbox } from "@earendil-works/pi-codemode";
+import { defineDoc as defineDoc3, wrapTool as wrapTool2 } from "@earendil-works/pi-durable";
+import { createCodemodeExtension, createCodemodeTool } from "@earendil-works/pi-durable/codemode";
+var CodemodeSettingsDoc = defineDoc3({
+  kind: "app.neko.codemode-settings",
+  checkpointWhen: () => false,
+  version: 1,
+  scope: "conversation",
+  history: "latest",
+  fork: "initial",
+  initial: () => ({ mode: null })
+});
+var CodemodeDoc = defineDoc3({
+  kind: "app.neko.codemode",
+  checkpointWhen: () => false,
+  version: 1,
+  scope: "conversation",
+  history: "rewindable",
+  fork: "asOf",
+  initial: () => ({ mode: "off" })
+});
+var SANDBOX_BUSY = "Codemode sandbox is busy: too many scripts are running. Try again shortly.";
+
+class WorkerLimiter {
+  #max;
+  #waitMs;
+  #tickets = new AsyncLocalStorage;
+  #waiters = [];
+  #running = 0;
+  #reserved = 0;
+  constructor(limits = CODEMODE_LIMITS) {
+    this.#max = limits.maxWorkers;
+    this.#waitMs = limits.waitMs;
+  }
+  get running() {
+    return this.#running;
+  }
+  get waiting() {
+    return this.#waiters.length;
+  }
+  #free() {
+    return this.#running + this.#reserved < this.#max;
+  }
+  #wake() {
+    while (this.#waiters.length > 0 && this.#free()) {
+      this.#reserved += 1;
+      this.#waiters.shift()?.();
+    }
+  }
+  acquireWorker = () => {
+    const ticket = this.#tickets.getStore();
+    if (ticket && !ticket.claimed) {
+      ticket.claimed = true;
+      this.#reserved -= 1;
+    } else if (!this.#free())
+      throw new Error(SANDBOX_BUSY);
+    this.#running += 1;
+    let released = false;
+    return () => {
+      if (released)
+        return;
+      released = true;
+      this.#running -= 1;
+      this.#wake();
+    };
+  };
+  async#admit(signal) {
+    signal?.throwIfAborted();
+    if (this.#waiters.length === 0 && this.#free()) {
+      this.#reserved += 1;
+      return;
+    }
+    await new Promise((resolve, reject) => {
+      let timer;
+      const leave = () => {
+        clearTimeout(timer);
+        signal?.removeEventListener("abort", onAbort);
+      };
+      const grant = () => {
+        leave();
+        resolve();
+      };
+      const drop = (error) => {
+        const index = this.#waiters.indexOf(grant);
+        if (index === -1)
+          return;
+        this.#waiters.splice(index, 1);
+        leave();
+        reject(error);
+      };
+      const onAbort = () => drop(signal?.reason instanceof Error ? signal.reason : new Error("Aborted"));
+      this.#waiters.push(grant);
+      timer = setTimeout(() => drop(new Error(SANDBOX_BUSY)), this.#waitMs);
+      signal?.addEventListener("abort", onAbort, { once: true });
+    });
+  }
+  async run(signal, work) {
+    await this.#admit(signal);
+    const ticket = { claimed: false };
+    try {
+      return await this.#tickets.run(ticket, work);
+    } finally {
+      if (!ticket.claimed) {
+        this.#reserved -= 1;
+        this.#wake();
+      }
+    }
+  }
+}
+function createCodemodeRuntime(limits = CODEMODE_LIMITS) {
+  const limiter = new WorkerLimiter(limits);
+  const sandbox = new CodemodeSandbox({
+    memoryLimitBytes: CODEMODE_LIMITS.memoryLimitBytes,
+    acquireWorker: limiter.acquireWorker
+  });
+  const options = { sandbox, models: false };
+  const base = createCodemodeExtension(options);
+  const reference = createCodemodeTool(options);
+  const extension = {
+    ...base,
+    wraps: [
+      ...base.wraps ?? [],
+      ...nestedChangeWraps(),
+      wrapTool2(reference, (tool) => ({
+        ...tool,
+        execute: (args, api, context) => limiter.run(context.abortSignal, () => tool.execute(args, api, context))
+      }))
+    ]
+  };
+  return { extension, limiter, close: () => sandbox.close() };
+}
 
 // packages/core/src/subagent-usage.ts
 var emptySubagentUsage = () => ({ models: {}, tools: {} });
@@ -17801,7 +18179,7 @@ function subagentUsageTotals(state) {
 
 // packages/core/src/subagents.ts
 var agentIdFor = (childId) => `agent-${childId}`;
-var DelegationsDoc = defineDoc2({
+var DelegationsDoc = defineDoc4({
   kind: "app.neko.delegations",
   checkpointWhen: () => false,
   version: 1,
@@ -17810,7 +18188,7 @@ var DelegationsDoc = defineDoc2({
   fork: "initial",
   initial: () => ({ items: [] })
 });
-var SubagentsDoc = defineDoc2({
+var SubagentsDoc = defineDoc4({
   kind: "app.neko.subagents",
   checkpointWhen: () => false,
   version: 1,
@@ -17819,7 +18197,7 @@ var SubagentsDoc = defineDoc2({
   fork: "initial",
   initial: () => ({ items: [] })
 });
-var SubagentDoc = defineDoc2({
+var SubagentDoc = defineDoc4({
   kind: "app.neko.subagent",
   checkpointWhen: () => false,
   version: 1,
@@ -17828,7 +18206,7 @@ var SubagentDoc = defineDoc2({
   fork: "initial",
   initial: () => ({ role: null, parentId: null })
 });
-var SlotsDoc = defineDoc2({
+var SlotsDoc = defineDoc4({
   kind: "app.neko.subagent-slots",
   checkpointWhen: () => false,
   version: 1,
@@ -17843,7 +18221,7 @@ var ROLE_PROMPTS = {
 var SUBAGENT_DELIVERY = " Work from the assigned task, your own prior conversation context and project resources; you cannot see the main conversation. Do not delegate or ask the user directly. Your final message must be a self-contained delivery to the main agent, including evidence, results and limitations. Skills never expand your allowed tools.";
 var MAIN_ONLY_TOOLS = new Set(["todo", "ask_user", "submit_plan"]);
 var MAIN_ONLY_EXTENSIONS = new Set(["neko-todos", "neko-questions", "neko-plan"]);
-var READ_TOOLS = new Set(["read", "find_files", "search_text", "web_search", "web_extract"]);
+var READ_TOOLS = new Set(["read", "find_files", "search_text", "web_search", "web_extract", CODEMODE_NAME]);
 async function refreshDelegations(tx, id) {
   const doc = await tx.doc(DelegationsDoc, id);
   const identities = await tx.doc(SubagentsDoc, id);
@@ -18131,6 +18509,7 @@ function createSubagentExtension(prepare, discard, guard) {
         parameters,
         structuredOutputSchema,
         replay: "safe",
+        callers: ["model"],
         execute: async (input, api, context) => {
           if (!Value.Check(actionParameters, input))
             throw new Error("Invalid subagent arguments. create requires type/title/task; continue requires agentId/title/task; list accepts only cursor/limit. Do not mix fields from different actions.");
@@ -18181,12 +18560,16 @@ function createSubagentExtension(prepare, discard, guard) {
             if (!identity) {
               const created = child ?? await tx.createConversation({ ownership: { kind: "task", taskId: api.taskId } });
               const role = args.action === "continue" ? "explore" : args.type;
+              const codemode = (await tx.doc(CodemodeDoc, api.conversationId)).mode;
+              (await tx.doc(CodemodeDoc, created.id)).mode = codemode;
+              const enabled = enabledTools(agent);
               await configure(tx, created.id, {
                 model: agent.model,
                 thinkingLevel: agent.thinkingLevel,
                 cwd: agent.cwd,
                 extensions: agent.extensions.filter((e) => e.name !== extension.name && !MAIN_ONLY_EXTENSIONS.has(e.name)),
-                tools: agent.tools.filter((t) => t.name !== "subagent" && t.name !== "job" && !MAIN_ONLY_TOOLS.has(t.name) && (role === "coder" || READ_TOOLS.has(t.name) || role === "explore" && t.name === "bash"))
+                modelTools: agentChangeFor({ plan: "normal", codemode, role: "subagent" }).modelTools,
+                tools: enabled.filter((t) => t.name !== "subagent" && t.name !== "job" && !MAIN_ONLY_TOOLS.has(t.name) && (role === "coder" || READ_TOOLS.has(t.name) || role === "explore" && t.name === "bash"))
               });
               Object.assign(await tx.doc(SubagentDoc, created.id), { role, parentId: api.conversationId });
               identity = {
@@ -18289,9 +18672,10 @@ async function removeMainOnlyTools(harness, ids, context) {
     if (!(await harness.snapshot(SubagentDoc, id, context))?.role)
       continue;
     const agent = await (await harness.conversation(id, context)).agent(context);
-    if (!agent.tools.some((t) => MAIN_ONLY_TOOLS.has(t.name)))
+    const enabled = enabledTools(agent);
+    if (!enabled.some((t) => MAIN_ONLY_TOOLS.has(t.name)))
       continue;
-    await harness.commit((tx) => configure(tx, id, { tools: agent.tools.filter((t) => !MAIN_ONLY_TOOLS.has(t.name)) }), context);
+    await harness.commit((tx) => configure(tx, id, { tools: enabled.filter((t) => !MAIN_ONLY_TOOLS.has(t.name)) }), context);
   }
 }
 async function installSubagentCoordinator(harness, parents, context) {
@@ -18338,13 +18722,6 @@ async function installSubagentCoordinator(harness, parents, context) {
 }
 
 // packages/core/src/file-changes.ts
-var CHANGE_LIMITS = {
-  files: 500,
-  opsPerFile: 50,
-  diffBytes: 2 * 1024 * 1024,
-  opDiffBytes: 64 * 1024,
-  conversations: 64
-};
 var MAIN_AGENT = "main";
 function normalizeChangePath(raw, cwd, workspace) {
   const resolved = raw.startsWith("~") ? raw : resolve3(cwd, raw);
@@ -18355,22 +18732,6 @@ function normalizeChangePath(raw, cwd, workspace) {
   }
   return { path: resolved.split(sep).join("/"), outside: true };
 }
-function clipDiff(diff) {
-  if (Buffer.byteLength(diff, "utf8") <= CHANGE_LIMITS.opDiffBytes)
-    return { diff, truncated: false };
-  const lines = diff.split(`
-`);
-  const kept = [];
-  let bytes = 0;
-  for (const line of lines) {
-    bytes += Buffer.byteLength(line, "utf8") + 1;
-    if (bytes > CHANGE_LIMITS.opDiffBytes)
-      break;
-    kept.push(line);
-  }
-  return { diff: kept.join(`
-`), truncated: true };
-}
 
 class ConversationChanges {
   last = 0;
@@ -18378,6 +18739,7 @@ class ConversationChanges {
   truncated = false;
   bytes = 0;
   files = new Map;
+  #scripts = new Map;
   #pending = new Map;
   #agent;
   #cwd;
@@ -18391,6 +18753,8 @@ class ConversationChanges {
     for (const message of entry.model ?? []) {
       if (message.role === "assistant") {
         for (const block of message.content) {
+          if (block.type === "toolCall" && block.name === CODEMODE_NAME)
+            this.#scripts.set(block.id, entry.id);
           if (block.type !== "toolCall" || block.name !== "edit" && block.name !== "write")
             continue;
           const path = block.arguments?.path;
@@ -18398,6 +18762,8 @@ class ConversationChanges {
             this.#pending.set(block.id, { tool: block.name, path, args: block.arguments });
         }
       } else if (message.role === "toolResult") {
+        if (this.#scripts.has(message.toolCallId))
+          this.#scripts.set(message.toolCallId, entry.id);
         const call = this.#pending.get(message.toolCallId);
         if (!call)
           continue;
@@ -18409,8 +18775,20 @@ class ConversationChanges {
     }
     this.last = entry.id;
   }
+  withNested(nested) {
+    const visible = nested.items.filter((item) => this.#scripts.has(item.parentCallId));
+    const copy = new ConversationChanges(this.#agent, this.#cwd, this.#workspace);
+    copy.last = this.last;
+    copy.total = this.total;
+    copy.truncated = this.truncated || nested.dropped && visible.length > 0;
+    copy.bytes = this.bytes;
+    for (const [path, file] of this.files)
+      copy.files.set(path, { ...file, agents: new Set(file.agents), items: file.items.map((item) => ({ ...item })) });
+    for (const item of visible)
+      copy.#record({ tool: item.tool, path: item.path }, { diff: item.diff, added: item.added, removed: item.removed, truncated: item.truncated }, this.#scripts.get(item.parentCallId));
+    return copy;
+  }
   #add(call, details, seq) {
-    const { path, outside } = normalizeChangePath(call.path, this.#cwd, this.#workspace);
     let diff = "";
     let added = 0;
     let removed = 0;
@@ -18430,6 +18808,11 @@ class ConversationChanges {
         ({ diff, added, removed, truncated } = synthesized);
       }
     }
+    this.#record(call, { diff, added, removed, truncated }, seq);
+  }
+  #record(call, shown, seq) {
+    const { path, outside } = normalizeChangePath(call.path, this.#cwd, this.#workspace);
+    const { diff, added, removed, truncated } = shown;
     this.total++;
     let file = this.files.get(path);
     if (!file) {
@@ -18450,7 +18833,7 @@ class ConversationChanges {
     file.added += added;
     file.removed += removed;
     file.agents.add(this.#agent);
-    file.lastSeq = seq;
+    file.lastSeq = Math.max(file.lastSeq, seq);
     file.items.push({ seq, agent: this.#agent, tool: call.tool, diff, added, removed, truncated });
     this.bytes += Buffer.byteLength(diff, "utf8");
     if (file.items.length > CHANGE_LIMITS.opsPerFile) {
@@ -18552,10 +18935,12 @@ class ChangeTracker {
     let revision = 0;
     let truncated = false;
     for (const member of await this.#members(rootId)) {
-      const state = await this.#sync(member, workspace);
-      if (!state)
+      const synced = await this.#sync(member, workspace);
+      if (!synced)
         continue;
-      revision += state.total;
+      const nested = await this.#harness.snapshot(NestedChangesDoc, member.id, this.#context);
+      const state = nested && nested.items.length > 0 ? synced.withNested(nested) : synced;
+      revision += synced.total + (nested?.total ?? 0);
       truncated ||= state.truncated;
       for (const file of state.files.values()) {
         const existing = merged.get(file.path);
@@ -18960,7 +19345,7 @@ function validatePlanDecision(input) {
   return { kind: "revise", feedback: text(input.feedback, "feedback", PLAN_LIMITS.feedbackChars) };
 }
 // packages/core/src/jobs.ts
-import { defineDoc as defineDoc3 } from "@earendil-works/pi-durable";
+import { defineDoc as defineDoc5 } from "@earendil-works/pi-durable";
 var JOB_LIMITS = {
   maxRunning: 4,
   keepTerminal: 20,
@@ -18974,7 +19359,7 @@ var JOB_LIMITS = {
   commandBytes: 32 * 1024,
   maxTimeoutSeconds: 7 * 24 * 3600
 };
-var JobsDoc = defineDoc3({
+var JobsDoc = defineDoc5({
   kind: "app.neko.jobs",
   checkpointWhen: () => false,
   version: 1,
@@ -19115,7 +19500,7 @@ import { PI_ATTRIBUTION } from "@earendil-works/pi-ai/utils/identity";
 import {
   AssistantEntry as AssistantEntry2,
   createRegistry,
-  defineDoc as defineDoc8,
+  defineDoc as defineDoc10,
   Harness,
   InboxDoc as InboxDoc3,
   LiveDoc as importLiveDoc,
@@ -19547,7 +19932,7 @@ var statusWord = {
   stopped: "stopped",
   lost: "lost"
 };
-var describe2 = (job) => {
+var describe3 = (job) => {
   const parts = [statusWord[job.status]];
   if (job.exitCode !== null)
     parts.push(`exit code ${job.exitCode}`);
@@ -19562,7 +19947,7 @@ var describe2 = (job) => {
 function reportText(job, tail) {
   const body = reportTail(tail);
   return [
-    `[Background job ${job.jobId} "${job.title}" ${describe2(job)}]`,
+    `[Background job ${job.jobId} "${job.title}" ${describe3(job)}]`,
     `Command: ${job.command}`,
     body ? `Last output (use the job tool's output action with jobId "${job.jobId}" for more):
 ${body}` : "It produced no output."
@@ -19772,7 +20157,7 @@ class JobManager {
             if (kind === "stop") {
               const jobId = stringField(args.jobId, "jobId");
               const job = await this.stop(io, api.conversationId, jobId, "model", context);
-              return this.#text(`Job ${job.jobId} ${describe2(job)}.`);
+              return this.#text(`Job ${job.jobId} ${describe3(job)}.`);
             }
             if (kind !== "start")
               throw new Error("Invalid job arguments: action must be start, output, stop or list.");
@@ -19800,7 +20185,7 @@ class JobManager {
   #listText(items) {
     if (!items.length)
       return "No jobs.";
-    return items.map((job) => `${job.jobId} [${describe2(job)}] "${job.title}" \u2014 ${job.command}`).join(`
+    return items.map((job) => `${job.jobId} [${describe3(job)}] "${job.title}" \u2014 ${job.command}`).join(`
 `);
   }
   async start(io, conversationId, cwd, args, context) {
@@ -19852,7 +20237,7 @@ class JobManager {
     return this.#render(job, read.text, read.offset, read.dropped);
   }
   #render(job, text, offset, dropped) {
-    const lines = [`Job ${job.jobId} ${describe2(job)}.`, `Title: ${job.title}`, `Command: ${job.command}`];
+    const lines = [`Job ${job.jobId} ${describe3(job)}.`, `Title: ${job.title}`, `Command: ${job.command}`];
     if (dropped > 0)
       lines.push(`(${dropped} bytes of earlier output were dropped)`);
     lines.push(text ? `Output (next offset ${offset}):
@@ -19926,7 +20311,7 @@ import {
   hook as hook2,
   InboxDoc,
   ToolTask as ToolTask2,
-  wrapTool
+  wrapTool as wrapTool3
 } from "@earendil-works/pi-durable";
 import { createBashTool } from "@earendil-works/pi-durable/tools";
 import { Type as Type5 } from "typebox";
@@ -20039,7 +20424,7 @@ function isSafeCommand(command) {
 // packages/core/src/user-questions.ts
 import { randomUUID } from "crypto";
 import {
-  defineDoc as defineDoc4,
+  defineDoc as defineDoc6,
   defineDocFamily,
   defineExtension as defineExtension5,
   defineTool as defineTool4
@@ -20055,7 +20440,7 @@ var QuestionDoc = defineDocFamily({
   family: true,
   initial: (seed) => seed
 });
-var QuestionsDoc = defineDoc4({
+var QuestionsDoc = defineDoc6({
   kind: "app.neko.questions",
   checkpointWhen: () => false,
   version: 1,
@@ -20377,28 +20762,7 @@ function createAskUserTool(service) {
 var createQuestionExtension = (service) => defineExtension5({ name: "neko-questions", tools: [createAskUserTool(service)] });
 
 // packages/core/src/plan.ts
-var PLAN_REMOVED_TOOLS = ["edit", "write", "job"];
-var PLAN_INSTRUCTIONS = [
-  "You are in plan mode: research and plan only, and change nothing.",
-  "- Allowed: read, find_files, search_text, web_search, web_extract, todo, ask_user, read-only subagents (explore, plan) and bash limited to read-only commands (listing, searching, git log/diff/status, version checks). Other commands are rejected.",
-  "- Not available: edit, write, job and any command that modifies files, installs packages or starts processes. Do not try to work around this.",
-  "- When you understand the task, call submit_plan once, alone in its turn, with a short title, ordered concrete steps and an optional note (risks, assumptions, verification). The user then approves it or asks for changes.",
-  "- After submit_plan do nothing else. If the user asks for changes, research what is needed and submit a revised plan.",
-  "- Use ask_user only for decisions you cannot settle by reading the code."
-].join(`
-`);
 var PLAN_BUSY = "PLAN_BUSY: Wait for the current run to finish or stop it first.";
-function planAgentChange(mode) {
-  if (mode === "normal")
-    return { tools: null, modelTools: null, instructions: null };
-  const named = (name) => ({ name });
-  return {
-    tools: { remove: PLAN_REMOVED_TOOLS.map(named) },
-    modelTools: { add: [named("submit_plan")] },
-    instructions: PLAN_INSTRUCTIONS
-  };
-}
-var agentInPlanMode = (agent) => agent.instructions === PLAN_INSTRUCTIONS;
 var clone2 = (value) => JSON.parse(JSON.stringify(value));
 var toRecord = ({ taskId: _taskId, dispatched: _dispatched, ...record }) => clone2(record);
 function settle2(state, item, status) {
@@ -20634,7 +20998,7 @@ var createPlanExtension = (service) => defineExtension6({
     })
   ],
   wraps: [
-    wrapTool(createBashTool(), (bash) => ({
+    wrapTool3(createBashTool(), (bash) => ({
       ...bash,
       execute: async (args, api, context) => {
         if ((await api.snapshot(PlanDoc, api.conversationId, context))?.mode === "plan" && !isSafeCommand(args.command))
@@ -20786,6 +21150,9 @@ import { defineExtension as defineExtension7, section } from "@earendil-works/pi
 var KEYS = ["preamble", "rules", "project_context", "skills", "cwd"];
 var PREAMBLE = "You are an expert coding assistant operating inside neko, a coding agent harness. You help users by reading files, executing commands, editing code, and writing new files.";
 var TOOL_GUIDELINES = {
+  codemode: [
+    "Use codemode to batch independent tool calls (Promise.allSettled), chain them, or filter large output, instead of many separate calls."
+  ],
   subagent: [
     "Delegate only independent, sufficiently scoped work when isolation or parallelism helps. Handle simple tasks directly. Pass necessary context and user constraints; research-only requests must not become coding tasks. For related follow-up work, list and continue a suitable idle subagent using its stable agentId; busy means no task was accepted. Do not change its role. Verify and integrate reports. Do not modify files concurrently with a coder assigned those files."
   ],
@@ -20850,7 +21217,7 @@ var createNekoPrompt = (loadResources, platform = process.platform) => {
     const resources = cwd ? await loadResources(input.conversationId, cwd) : { contextFiles: [], skills: [] };
     const sections = {
       preamble: role ? ROLE_PROMPTS[role] + SUBAGENT_DELIVERY : PREAMBLE,
-      rules: buildRules(input.agent.tools.map((tool) => tool.name), platform),
+      rules: buildRules(enabledTools(input.agent).map((tool) => tool.name), platform),
       project_context: renderProjectContext(resources.contextFiles),
       skills: formatSkillsForPrompt(resources.skills) || undefined,
       cwd: cwd?.replace(/\\/g, "/")
@@ -21017,13 +21384,13 @@ var createResourceSnapshots = (load, submission) => {
 import { stripVTControlCharacters } from "util";
 import { getSupportedThinkingLevels } from "@earendil-works/pi-ai";
 import {
-  defineDoc as defineDoc5,
+  defineDoc as defineDoc7,
   defineExtension as defineExtension8,
   defineTask as defineTask3,
   InboxDoc as InboxDoc2,
   LiveDoc as LiveDoc2
 } from "@earendil-works/pi-durable";
-var SessionMetadataDoc = defineDoc5({
+var SessionMetadataDoc = defineDoc7({
   kind: "app.neko.session-metadata",
   checkpointWhen: () => false,
   version: 1,
@@ -21360,9 +21727,9 @@ class SessionMetadataManager {
 }
 
 // packages/core/src/todos.ts
-import { defineDoc as defineDoc6, defineExtension as defineExtension9, defineTool as defineTool6 } from "@earendil-works/pi-durable";
+import { defineDoc as defineDoc8, defineExtension as defineExtension9, defineTool as defineTool6 } from "@earendil-works/pi-durable";
 import { Type as Type6 } from "typebox";
-var TodosDoc = defineDoc6({
+var TodosDoc = defineDoc8({
   kind: "app.neko.todos",
   checkpointWhen: () => false,
   version: 1,
@@ -21371,7 +21738,7 @@ var TodosDoc = defineDoc6({
   fork: "asOf",
   initial: () => ({ revision: 0, items: [] })
 });
-var TodoReceiptDoc = defineDoc6({
+var TodoReceiptDoc = defineDoc8({
   kind: "app.neko.todo-receipt",
   checkpointWhen: () => false,
   version: 1,
@@ -21463,14 +21830,14 @@ import { randomUUID as randomUUID3 } from "crypto";
 import { realpath } from "fs/promises";
 import {
   configure as configure2,
-  defineDoc as defineDoc7,
+  defineDoc as defineDoc9,
   defineExtension as defineExtension10,
   hook as hook3,
   ToolTask as ToolTask3,
-  wrapTool as wrapTool2
+  wrapTool as wrapTool4
 } from "@earendil-works/pi-durable";
 import { createBashTool as createBashTool2 } from "@earendil-works/pi-durable/tools";
-var ApprovalsDoc = defineDoc7({
+var ApprovalsDoc = defineDoc9({
   kind: "app.neko.approvals",
   checkpointWhen: () => false,
   version: 1,
@@ -21612,7 +21979,7 @@ function createApprovalExtension(service) {
       })
     ],
     wraps: [
-      wrapTool2(createBashTool2(), (bash) => ({
+      wrapTool4(createBashTool2(), (bash) => ({
         ...bash,
         execute: async (args, api, context) => {
           const role = await api.snapshot(SubagentDoc, api.conversationId, context);
@@ -21636,7 +22003,7 @@ async function prepareApprovalConversations(harness, ids, extension, context) {
     const child = await harness.conversation(id, context);
     const agent = await child.agent(context);
     await harness.commit((tx) => configure2(tx, id, {
-      tools: [...agent.tools.filter((t) => t.name !== "bash"), createBashTool2()],
+      tools: [...enabledTools(agent).filter((t) => t.name !== "bash"), createBashTool2()],
       extensions: { add: [extension] }
     }), context);
   }
@@ -22645,7 +23012,7 @@ function cancellable(work, signal) {
 var DEFAULT_MODEL = { provider: "deepseek", modelId: "deepseek-flash" };
 var DEFAULT_STORAGE_PATH = join5(homedir4(), ".neko", "neko.sqlite");
 var neverAborted = () => new AbortController().signal;
-var ArchivedDoc = defineDoc8({
+var ArchivedDoc = defineDoc10({
   kind: "app.neko.conversation",
   checkpointWhen: () => false,
   version: 1,
@@ -22654,7 +23021,7 @@ var ArchivedDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ archived: false })
 });
-var WorkspacesDoc = defineDoc8({
+var WorkspacesDoc = defineDoc10({
   kind: "app.neko.workspaces",
   checkpointWhen: () => false,
   version: 1,
@@ -22663,7 +23030,7 @@ var WorkspacesDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ items: [] })
 });
-var RemovedWorkspacesDoc = defineDoc8({
+var RemovedWorkspacesDoc = defineDoc10({
   kind: "app.neko.workspaces-removed",
   checkpointWhen: () => false,
   version: 1,
@@ -22672,7 +23039,7 @@ var RemovedWorkspacesDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ paths: [] })
 });
-var SearchSettingsDoc = defineDoc8({
+var SearchSettingsDoc = defineDoc10({
   kind: "app.neko.search-settings",
   checkpointWhen: () => false,
   version: 1,
@@ -22681,7 +23048,7 @@ var SearchSettingsDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ provider: null })
 });
-var ProviderSettingsDoc = defineDoc8({
+var ProviderSettingsDoc = defineDoc10({
   kind: "app.neko.provider-settings",
   checkpointWhen: () => false,
   version: 1,
@@ -22690,7 +23057,7 @@ var ProviderSettingsDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ enabled: null })
 });
-var DefaultModelDoc = defineDoc8({
+var DefaultModelDoc = defineDoc10({
   kind: "app.neko.default-model",
   checkpointWhen: () => false,
   version: 1,
@@ -22699,7 +23066,7 @@ var DefaultModelDoc = defineDoc8({
   fork: "initial",
   initial: () => ({ model: null })
 });
-var ContextSettingsDoc = defineDoc8({
+var ContextSettingsDoc = defineDoc10({
   kind: "app.neko.context-settings",
   checkpointWhen: () => false,
   version: 1,
@@ -22708,7 +23075,7 @@ var ContextSettingsDoc = defineDoc8({
   fork: "initial",
   initial: emptySavedContextSettings
 });
-var ActivityDoc = defineDoc8({
+var ActivityDoc = defineDoc10({
   kind: "app.neko.activity",
   checkpointWhen: () => false,
   version: 1,
@@ -22815,6 +23182,11 @@ async function createNekoRuntime(options = {}) {
   registry.install(createQuestionExtension(() => questions));
   let plans;
   registry.install(createPlanExtension(() => plans));
+  const codemode = createCodemodeRuntime({
+    maxWorkers: options.codemodeLimits?.maxWorkers ?? CODEMODE_LIMITS.maxWorkers,
+    waitMs: options.codemodeLimits?.waitMs ?? CODEMODE_LIMITS.waitMs
+  });
+  registry.install(codemode.extension);
   for (const extension of options.extensions ?? [])
     registry.install(extension);
   let approvals;
@@ -22868,6 +23240,7 @@ async function createNekoRuntime(options = {}) {
       }
     }
   } catch (error) {
+    await codemode.close();
     await workspaceFiles.close();
     await harness.close(context);
     throw error;
@@ -22882,6 +23255,13 @@ async function createNekoRuntime(options = {}) {
     }
   });
   enabled = new Set(normalizeEnabledProviders((await harness.snapshot(ProviderSettingsDoc, conversation.id, context))?.enabled));
+  const codemodeState = async () => resolveCodemodeSettings(options.codemodeSettings, (await harness.snapshot(CodemodeSettingsDoc, conversation.id, context))?.mode);
+  if (existing.length === 0) {
+    const initial = (await codemodeState()).effective.mode;
+    await harness.commit(async (tx) => {
+      (await tx.doc(CodemodeDoc, conversation.id)).mode = initial;
+    }, context);
+  }
   const savedSearch = (await harness.snapshot(SearchSettingsDoc, conversation.id, context))?.provider;
   if (isSearchProvider(savedSearch))
     searchProvider = savedSearch;
@@ -23008,13 +23388,17 @@ async function createNekoRuntime(options = {}) {
         admissions.delete(id);
     }
   };
-  const syncPlanAgent = async (target) => {
-    const mode = await plans.mode(target.id);
-    if (mode === "plan" !== agentInPlanMode(await target.agent(context)))
-      await target.configure(planAgentChange(mode), context);
+  const syncAgent = async (target) => {
+    const change = agentSyncChange(await target.agent(context), {
+      plan: await plans.mode(target.id),
+      codemode: (await harness.snapshot(CodemodeDoc, target.id, context))?.mode ?? "off",
+      role: "main"
+    });
+    if (change)
+      await target.configure(change, context);
   };
   const submitTo = async (target, content, submitOptions, extra) => admit(target.id, async () => {
-    await syncPlanAgent(target);
+    await syncAgent(target);
     const agent = await target.agent(context);
     const workspace = executionWorkspace(agent.cwd);
     const duplicate = submitOptions?.requestId !== undefined && await storage.submissionByRequest(target.id, submitOptions.requestId, context);
@@ -23178,7 +23562,7 @@ async function createNekoRuntime(options = {}) {
         if (await isRunning(target.id))
           throw new Error(PLAN_BUSY);
         await plans.setMode(target.id, mode);
-        await syncPlanAgent(target);
+        await syncAgent(target);
         return plans.view(target.id);
       });
     },
@@ -23300,7 +23684,7 @@ async function createNekoRuntime(options = {}) {
       const session = await getConversation(id);
       if (!session)
         continue;
-      await admit(id, () => syncPlanAgent(session.conversation));
+      await admit(id, () => syncAgent(session.conversation));
       const pending = await plans.undispatched(id);
       if (pending)
         await dispatchPlan(session.conversation, pending);
@@ -23386,6 +23770,8 @@ async function createNekoRuntime(options = {}) {
         }
         const child = at === undefined ? await tx.createConversation({ ownership: { kind: "ownerless" } }) : await tx.forkConversation(id, at, { ownership: { kind: "ownerless" } });
         (await tx.doc(DelegationsDoc, child.id)).items = inherited;
+        if (at === undefined)
+          (await tx.doc(CodemodeDoc, child.id)).mode = (await tx.doc(CodemodeDoc, id)).mode;
         if (sourceMetadata) {
           const doc = await tx.doc(SessionMetadataDoc, child.id);
           doc.title = sourceMetadata.title || sourceMetadata.firstPromptPreview;
@@ -23466,12 +23852,17 @@ async function createNekoRuntime(options = {}) {
       const workspace = await addWorkspace(createOptions?.cwd ?? defaultCwd);
       const savedDefault = (await harness.snapshot(DefaultModelDoc, conversation.id, context))?.model ?? null;
       const effective = createOptions?.model ?? modelOverride ?? savedDefault ?? model;
+      const mode = (await codemodeState()).effective.mode;
       const created = await harness.createConversation({
         ownership: { kind: "ownerless" },
         agent: {
           model: effective,
           thinkingLevel: resolveLevel(effective, createOptions?.thinkingLevel ?? options.thinkingLevel ?? "high"),
-          cwd: workspace.path
+          cwd: workspace.path,
+          ...agentChangeFor({ plan: "normal", codemode: mode, role: "main" })
+        },
+        init: async (tx, id) => {
+          (await tx.doc(CodemodeDoc, id)).mode = mode;
         }
       }, context);
       await metadata.initialize(created.id);
@@ -23526,6 +23917,20 @@ async function createNekoRuntime(options = {}) {
     async resetContextSettings() {
       return persistContext(emptySavedContextSettings());
     },
+    codemodeSettings: codemodeState,
+    async setCodemodeMode(mode) {
+      const parsed = parseCodemodeMode(mode);
+      await harness.commit(async (tx) => {
+        (await tx.doc(CodemodeSettingsDoc, conversation.id)).mode = parsed;
+      }, context);
+      return codemodeState();
+    },
+    async resetCodemodeMode() {
+      await harness.commit(async (tx) => {
+        (await tx.doc(CodemodeSettingsDoc, conversation.id)).mode = null;
+      }, context);
+      return codemodeState();
+    },
     async searchSettings() {
       return { selected: searchProvider };
     },
@@ -23647,6 +24052,7 @@ async function createNekoRuntime(options = {}) {
       registry.install(extension);
     },
     async close() {
+      await codemode.close();
       await cleanup();
       return harness.close(context);
     }
@@ -23689,6 +24095,18 @@ var image = Type8.Object({
   contentIndex: integer
 });
 var skill = Type8.Object({ name: str, location: str, body: str, args: str });
+var CodemodeViewSchema = Type8.Object({
+  calls: Type8.Array(Type8.Object({
+    id: integer,
+    name: str,
+    args: str,
+    status: Type8.Enum(["running", "ok", "error", "cancelled"]),
+    durationMs: Type8.Union([num, nil]),
+    error: nullableString
+  })),
+  omitted: integer,
+  fullOutputPath: nullableString
+});
 var call = Type8.Object({
   callId: str,
   name: str,
@@ -23699,7 +24117,8 @@ var call = Type8.Object({
   diff: nullableString,
   diffAdded: Type8.Union([num, nil]),
   diffRemoved: Type8.Union([num, nil]),
-  diffTruncated: Type8.Optional(bool)
+  diffTruncated: Type8.Optional(bool),
+  codemode: Type8.Optional(CodemodeViewSchema)
 });
 var DelegationSchema = Type8.Object({
   parentId: integer,
@@ -24007,7 +24426,8 @@ var ChatViewSchema = Type8.Object({
       diffAdded: Type8.Union([num, nil]),
       diffRemoved: Type8.Union([num, nil]),
       diffTruncated: Type8.Optional(bool),
-      interaction: Type8.Optional(ToolInteractionSchema)
+      interaction: Type8.Optional(ToolInteractionSchema),
+      codemode: Type8.Optional(CodemodeViewSchema)
     }),
     Type8.Object({
       type: Type8.Literal("system"),
@@ -24284,6 +24704,24 @@ var NekoContextSettings = contract("neko.context-settings", {
     }
   }
 });
+var CodemodeSettingsStateSchema = Type8.Object({
+  revision: integer,
+  effective: Type8.Object({ mode: Type8.Enum([...CODEMODE_MODES]) }),
+  source: Type8.Enum(["default", "config", "saved"])
+});
+var NekoCodemodeSettings = contract("neko.codemode-settings", {
+  version: 1,
+  input: Type8.Object({}, { additionalProperties: false }),
+  variants: {
+    ready: {
+      state: { state: CodemodeSettingsStateSchema },
+      methods: {
+        set: rpc(Type8.Object({ mode: Type8.Enum([...CODEMODE_MODES]) }, { additionalProperties: false }), nil),
+        reset: rpc(Type8.Object({}, { additionalProperties: false }), nil)
+      }
+    }
+  }
+});
 var defaultModelSource = Type8.Enum(["cli", "saved", "config", "default"]);
 var DefaultModelStateSchema = Type8.Object({
   effective: model2,
@@ -25090,8 +25528,8 @@ function subagentClient(connect) {
 import { createHash as createHash2 } from "crypto";
 
 // packages/core/src/application-version.ts
-var RUNNING_VERSION = "0.5.2";
-var APPLICATION_PROTOCOL = 9;
+var RUNNING_VERSION = "0.5.3";
+var APPLICATION_PROTOCOL = 10;
 function stableVersion(value) {
   return typeof value === "string" && /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(value) && value.split(".").every((n) => Number.isSafeInteger(Number(n)));
 }
@@ -25228,6 +25666,23 @@ var MobileToolInteractionSchema = Type10.Union([
     note: str2
   })
 ]);
+var MobileCodemodeSchema = Type10.Object({
+  calls: Type10.Array(Type10.Object({
+    id: int,
+    name: str2,
+    args: Type10.String({ maxLength: CODEMODE_VIEW_LIMITS.argsChars }),
+    status: Type10.Union([
+      Type10.Literal("running"),
+      Type10.Literal("ok"),
+      Type10.Literal("error"),
+      Type10.Literal("cancelled")
+    ]),
+    durationMs: opt(Type10.Number()),
+    error: opt(Type10.String({ maxLength: CODEMODE_VIEW_LIMITS.errorChars }))
+  }), { maxItems: CODEMODE_VIEW_LIMITS.maxCalls }),
+  omitted: int,
+  fullOutputPath: opt(str2)
+});
 var MobileToolItemSchema = Type10.Object({
   callId: str2,
   name: str2,
@@ -25242,7 +25697,8 @@ var MobileToolItemSchema = Type10.Object({
   diffTruncated: opt(Type10.Boolean()),
   durationMs: opt(Type10.Number()),
   note: opt(str2),
-  interaction: opt(MobileToolInteractionSchema)
+  interaction: opt(MobileToolInteractionSchema),
+  codemode: opt(MobileCodemodeSchema)
 });
 var MobileChatItemSchema = Type10.Object({
   key: str2,
@@ -25773,6 +26229,17 @@ function mapChatItem(raw, owner) {
         tool.note = raw.note;
       if (raw.interaction !== undefined)
         tool.interaction = raw.interaction;
+      if (raw.codemode !== undefined) {
+        tool.codemode = {
+          calls: raw.codemode.calls.map(({ durationMs, error, ...call }) => ({
+            ...call,
+            ...durationMs === null ? {} : { durationMs },
+            ...error === null ? {} : { error }
+          })),
+          omitted: raw.codemode.omitted,
+          ...raw.codemode.fullOutputPath === null ? {} : { fullOutputPath: raw.codemode.fullOutputPath }
+        };
+      }
       item = { key: raw.key, type: "tool", tool, ...images(raw.images) };
       break;
     }
@@ -30044,10 +30511,12 @@ var ServerState = local3("neko.server-state", {
     credentials: CredentialStateSchema,
     searchSettings: SearchSettingsStateSchema,
     contextSettings: ContextSettingsStateSchema,
+    codemodeSettings: CodemodeSettingsStateSchema,
     defaultModel: DefaultModelStateSchema,
     refreshCredentials: method2(Type13.Null(), Type13.Null()),
     refreshSearchSettings: method2(Type13.Null(), Type13.Null()),
     refreshContextSettings: method2(Type13.Null(), Type13.Null()),
+    refreshCodemodeSettings: method2(Type13.Null(), Type13.Null()),
     refreshDefaultModel: method2(Type13.Null(), Type13.Null())
   }
 });
@@ -30138,12 +30607,13 @@ async function createNekoServerServices(options) {
       return [spec.id, spec.kind === "model" ? { ...status, enabled: enabled.has(spec.id) } : status];
     })));
   };
-  const [sessions, workspaces, statuses, search, contextSettings0, defaultModel0] = await Promise.all([
+  const [sessions, workspaces, statuses, search, contextSettings0, codemodeSettings0, defaultModel0] = await Promise.all([
     list(),
     runtime.listWorkspaces(),
     readStatuses(),
     runtime.searchSettings(),
     runtime.contextSettings(),
+    runtime.codemodeSettings(),
     runtime.defaultModel()
   ]);
   let mutationTail = Promise.resolve();
@@ -30161,6 +30631,10 @@ async function createNekoServerServices(options) {
       revision: 1,
       ...contextSettings0
     });
+    const codemodeSettings = self2.state("codemodeSettings", CodemodeSettingsStateSchema, {
+      revision: 1,
+      ...codemodeSettings0
+    });
     const defaultModel = self2.state("defaultModel", DefaultModelStateSchema, defaultModel0);
     const refreshContextSettings = async (_input, ctx) => {
       const next = await runtime.contextSettings();
@@ -30169,6 +30643,13 @@ async function createNekoServerServices(options) {
         contextSettings.replace(ctx, { revision: revision + 1, ...next });
       return null;
     };
+    const refreshCodemodeSettings = async (_input, ctx) => {
+      const next = await runtime.codemodeSettings();
+      const { revision, ...current } = codemodeSettings.value;
+      if (JSON.stringify(next) !== JSON.stringify(current))
+        codemodeSettings.replace(ctx, { revision: revision + 1, ...next });
+      return null;
+    };
     const refreshDefaultModel = async (_input, ctx) => {
       const next = await runtime.defaultModel();
       if (JSON.stringify(next) !== JSON.stringify(defaultModel.value))
@@ -30204,6 +30685,7 @@ async function createNekoServerServices(options) {
       credentials,
       searchSettings,
       contextSettings,
+      codemodeSettings,
       defaultModel,
       async refreshCredentials(_input, ctx) {
         credentials.replace(ctx, {
@@ -30214,6 +30696,7 @@ async function createNekoServerServices(options) {
       },
       refreshSearchSettings,
       refreshContextSettings,
+      refreshCodemodeSettings,
       refreshDefaultModel
     };
   }, { lifetime: "host" });
@@ -30280,6 +30763,21 @@ async function createNekoServerServices(options) {
       })
     };
   });
+  host.serve(NekoCodemodeSettings, (_input, _principal, self2) => {
+    const hub = shared(self2);
+    return {
+      variant: "ready",
+      state: hub.codemodeSettings,
+      set: (input, ctx) => serialize(async () => {
+        await runtime.setCodemodeMode(input.mode);
+        return hub.refreshCodemodeSettings(null, ctx);
+      }),
+      reset: (_input, ctx) => serialize(async () => {
+        await runtime.resetCodemodeMode();
+        return hub.refreshCodemodeSettings(null, ctx);
+      })
+    };
+  });
   host.serve(NekoDefaultModel, (_input, _principal, self2) => {
     const hub = shared(self2);
     return {
@@ -30608,6 +31106,7 @@ async function startGateway(options = {}) {
     ...options.apiKey !== undefined ? { apiKey: options.apiKey } : {},
     ...searchProvider !== undefined ? { searchProvider } : {},
     ...fileConfig.context !== undefined ? { contextSettings: fileConfig.context } : {},
+    ...fileConfig.codemode !== undefined ? { codemodeSettings: fileConfig.codemode } : {},
     ...fileConfig.defaultModel !== undefined ? { model: fileConfig.defaultModel } : {},
     ...options.model !== undefined ? { modelOverride: options.model } : {},
     thinkingLevel: options.thinkingLevel ?? fileConfig.thinkingLevel ?? "high",