reasonix 0.3.2 → 0.4.1

package/dist/cli/prompt-MMANQ36Z.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  CODE_SYSTEM_PROMPT,
+  codeSystemPrompt
+} from "./chunk-2P2MZLCE.js";
+export {
+  CODE_SYSTEM_PROMPT,
+  codeSystemPrompt
+};
+//# sourceMappingURL=prompt-MMANQ36Z.js.map

package/dist/cli/prompt-MMANQ36Z.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -433,7 +433,15 @@ declare class ToolRegistry {
     dispatch(name: string, argumentsRaw: string | Record<string, unknown>): Promise<string>;
 }
 
-type EventRole = "assistant_delta" | "assistant_final" | "tool" | "done" | "error" | "warning" | "branch_start" | "branch_progress" | "branch_done";
+type EventRole = "assistant_delta" | "assistant_final"
+/**
+ * Yielded immediately before a tool is dispatched. Lets the TUI put
+ * up a "▸ tool<X> running…" spinner while the tool's Promise is
+ * pending — otherwise the UI looks frozen whenever a tool call
+ * takes more than a few hundred ms (a big `filesystem_edit_file`
+ * is a typical trigger).
+ */
+ | "tool_start" | "tool" | "done" | "error" | "warning" | "branch_start" | "branch_progress" | "branch_done";
 interface BranchSummary {
     budget: number;
     chosenIndex: number;
@@ -465,6 +473,16 @@ interface LoopEvent {
     branch?: BranchSummary;
     branchProgress?: BranchProgress;
     error?: string;
+    /**
+     * True on `assistant_final` events emitted by the no-tools fallback
+     * when the loop hit its budget, was aborted, or tripped the
+     * token-context guard. Consumers that act on assistant text (notably
+     * the code-mode edit applier) MUST treat these as display-only —
+     * the model is "wrapping up," not proposing new work. Applying
+     * SEARCH/REPLACE blocks found in a forced summary caused the
+     * "analysis became edits" bug in v0.4.1 and earlier.
+     */
+    forcedSummary?: boolean;
 }
 interface CacheFirstLoopOptions {
     client: DeepSeekClient;
@@ -1238,6 +1256,113 @@ interface SseMcpSpec {
 type McpSpec = StdioMcpSpec | SseMcpSpec;
 declare function parseMcpSpec(input: string): McpSpec;
 
+/**
+ * Aider-style SEARCH/REPLACE edit blocks.
+ *
+ * The model emits blocks in this exact shape, one or more per response:
+ *
+ *   path/to/file.ts
+ *   <<<<<<< SEARCH
+ *   exact existing lines (whitespace-sensitive)
+ *   =======
+ *   replacement lines
+ *   >>>>>>> REPLACE
+ *
+ * We chose this over unified diffs because:
+ *   - Models produce it reliably — no line-number drift.
+ *   - It tolerates multi-edit responses without ambiguity over which
+ *     hunk belongs to which file.
+ *   - Aider has years of evidence that this format works even against
+ *     weaker models than DeepSeek R1, so it's a conservative pick.
+ *
+ * The SEARCH text must match the file byte-for-byte. Empty SEARCH is a
+ * sentinel for "create new file" — the REPLACE becomes the whole file.
+ * If SEARCH doesn't match we refuse the edit and surface the failure;
+ * we do NOT guess or fuzzy-match. A wrong silent edit is worse than a
+ * missing one — the user can re-ask with the exact current content.
+ */
+interface EditBlock {
+    /** Path as written by the model — relative to rootDir, or absolute. */
+    path: string;
+    /** Literal text to match in the target file. Empty → create new file. */
+    search: string;
+    /** Replacement text to write in place of `search`. */
+    replace: string;
+    /** Char offset in the source message where this block started. */
+    offset: number;
+}
+type ApplyStatus = 
+/** Edit landed on disk. */
+"applied"
+/** New file created (SEARCH was empty and file didn't exist). */
+ | "created"
+/** File exists but SEARCH block wasn't found in its content. */
+ | "not-found"
+/** File doesn't exist and SEARCH was non-empty (can't create without content). */
+ | "file-missing"
+/** Path escapes rootDir — refused on safety grounds. */
+ | "path-escape"
+/** fs write / read threw. */
+ | "error";
+interface ApplyResult {
+    path: string;
+    status: ApplyStatus;
+    /** Extra detail (e.g. error message) for logs. */
+    message?: string;
+}
+declare function parseEditBlocks(text: string): EditBlock[];
+declare function applyEditBlock(block: EditBlock, rootDir: string): ApplyResult;
+declare function applyEditBlocks(blocks: EditBlock[], rootDir: string): ApplyResult[];
+interface EditSnapshot {
+    /** Path relative to rootDir, as the block named it. */
+    path: string;
+    /**
+     * File content before the edit batch was applied. `null` means the
+     * file didn't exist yet — restoring that means deleting whatever the
+     * edit created.
+     */
+    prevContent: string | null;
+}
+/**
+ * Capture the current state of every file an edit batch is about to
+ * touch, so `/undo` can roll back if the user doesn't like the result.
+ * De-duplicates by path because one batch can contain multiple blocks
+ * for the same file, and we only want one "before" snapshot per file.
+ */
+declare function snapshotBeforeEdits(blocks: EditBlock[], rootDir: string): EditSnapshot[];
+/**
+ * Restore files to their snapshotted state. Snapshots with
+ * `prevContent === null` were created by the edit, so undo = delete.
+ * Otherwise the prior content is written back, replacing whatever the
+ * edit left behind.
+ */
+declare function restoreSnapshots(snapshots: EditSnapshot[], rootDir: string): ApplyResult[];
+
+/**
+ * System prompt used by `reasonix code`. Teaches the model:
+ *
+ *   1. It has a filesystem MCP bridge rooted at the user's CWD.
+ *   2. To modify files it emits SEARCH/REPLACE blocks (not
+ *      `write_file` — that would whole-file rewrite and kill diff
+ *      reviewability).
+ *   3. Read first, edit second — SEARCH must match byte-for-byte.
+ *   4. Be concise. The user can read a diff faster than prose.
+ *
+ * Kept short on purpose. Long system prompts eat context budget that
+ * the Cache-First Loop is trying to conserve. The SEARCH/REPLACE spec
+ * is the one unavoidable bloat; we trim everything else.
+ */
+declare const CODE_SYSTEM_PROMPT = "You are Reasonix Code, a coding assistant. You have filesystem tools (read_file, write_file, list_directory, search_files, etc.) rooted at the user's working directory.\n\n# When to edit vs. when to explore\n\nOnly propose edits when the user explicitly asks you to change, fix, add, remove, refactor, or write something. Do NOT propose edits when the user asks you to:\n- analyze, read, explore, describe, or summarize a project\n- explain how something works\n- answer a question about the code\n\nIn those cases, use tools to gather what you need, then reply in prose. No SEARCH/REPLACE blocks, no file changes. If you're unsure what the user wants, ask.\n\nWhen you do propose edits, the user will review them and decide whether to `/apply` or `/discard`. Don't assume they'll accept \u2014 write as if each edit will be audited, because it will.\n\n# Editing files\n\nWhen you've been asked to change a file, output one or more SEARCH/REPLACE blocks in this exact format:\n\npath/to/file.ext\n<<<<<<< SEARCH\nexact existing lines from the file, including whitespace\n=======\nthe new lines\n>>>>>>> REPLACE\n\nRules:\n- Always read_file first so your SEARCH matches byte-for-byte. If it doesn't match, the edit is rejected and you'll have to retry with the exact current content.\n- One edit per block. Multiple blocks in one response are fine.\n- To create a new file, leave SEARCH empty:\n    path/to/new.ts\n    <<<<<<< SEARCH\n    =======\n    (whole file content here)\n    >>>>>>> REPLACE\n- Do NOT use write_file to change existing files \u2014 the user reviews your edits as SEARCH/REPLACE. write_file is only for files you explicitly want to overwrite wholesale (rare).\n- Paths are relative to the working directory. Don't use absolute paths.\n\n# Exploration\n\n- Avoid listing or reading inside these common dependency / build directories unless the user explicitly asks about them: node_modules, dist, build, out, .next, .nuxt, .svelte-kit, .git, .venv, venv, __pycache__, target, coverage, .turbo, .cache. They're expensive and usually irrelevant.\n- Prefer search_files / grep over list_directory when you know roughly what you're looking for \u2014 it saves context and avoids enumerating huge trees.\n\n# Style\n\n- Show edits; don't narrate them in prose. \"Here's the fix:\" is enough.\n- One short paragraph explaining *why*, then the blocks.\n- If you need to explore first (list / grep / read), do it with tool calls before writing any prose \u2014 silence while exploring is fine.\n";
+/**
+ * Inject the project's `.gitignore` content into the system prompt as a
+ * "respect this on top of the built-in denylist" hint. We don't parse
+ * the file — we hand it to the model as-is. Truncate long ones so we
+ * don't eat context budget on huge generated ignore lists.
+ *
+ * Missing or unreadable .gitignore → returns the base prompt unchanged.
+ */
+declare function codeSystemPrompt(rootDir: string): string;
+
 /**
  * User-level config storage for the Reasonix CLI.
  *
@@ -1291,6 +1416,6 @@ declare function redactKey(key: string): string;
 
 /** Reasonix — DeepSeek-native agent framework. Library entry point. */
 
-declare const VERSION = "0.3.2";
+declare const VERSION = "0.4.1";
 
-export { AppendOnlyLog, type BranchOptions, type BranchProgress, type BranchResult, type BranchSample, type BranchSelector, type BranchSummary, type BridgeOptions, type BridgeResult, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, DEFAULT_MAX_RESULT_CHARS, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type EventRole, type FlattenDecision, type FlattenOptions, type HarvestOptions, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, type ListToolsResult, type LoopEvent, MCP_PROTOCOL_VERSION, McpClient, type McpClientOptions, type McpContentBlock, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type RetryInfo, type RetryOptions, type Role, type ScavengeOptions, type ScavengeResult, type SessionInfo, SessionStats, type SessionSummary, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, StormBreaker, type StreamChunk, type ToolCall, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, type TypedPlanState, Usage, VERSION, VolatileScratch, aggregateBranchUsage, analyzeSchema, appendSessionMessage, bridgeMcpTools, claudeEquivalentCost, computeReplayStats, costUsd, defaultConfigPath, defaultSelector, deleteSession, diffTranscripts, emptyPlanState, fetchWithRetry, flattenMcpResult, flattenSchema, formatLoopError, harvest, healLoadedMessages, isJsonRpcError, isPlanStateEmpty, isPlausibleKey, listSessions, loadApiKey, loadDotenv, loadSessionMessages, nestArguments, openTranscriptFile, parseMcpSpec, parseTranscript, readConfig, readTranscript, recordFromLoopEvent, redactKey, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, runBranches, sanitizeName as sanitizeSessionName, saveApiKey, scavengeToolCalls, sessionPath, sessionsDir, similarity, truncateForModel, writeConfig, writeMeta, writeRecord };
+export { AppendOnlyLog, type ApplyResult, type ApplyStatus, type BranchOptions, type BranchProgress, type BranchResult, type BranchSample, type BranchSelector, type BranchSummary, type BridgeOptions, type BridgeResult, CODE_SYSTEM_PROMPT, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, DEFAULT_MAX_RESULT_CHARS, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type EditBlock, type EditSnapshot, type EventRole, type FlattenDecision, type FlattenOptions, type HarvestOptions, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, type ListToolsResult, type LoopEvent, MCP_PROTOCOL_VERSION, McpClient, type McpClientOptions, type McpContentBlock, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type RetryInfo, type RetryOptions, type Role, type ScavengeOptions, type ScavengeResult, type SessionInfo, SessionStats, type SessionSummary, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, StormBreaker, type StreamChunk, type ToolCall, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, type TypedPlanState, Usage, VERSION, VolatileScratch, aggregateBranchUsage, analyzeSchema, appendSessionMessage, applyEditBlock, applyEditBlocks, bridgeMcpTools, claudeEquivalentCost, codeSystemPrompt, computeReplayStats, costUsd, defaultConfigPath, defaultSelector, deleteSession, diffTranscripts, emptyPlanState, fetchWithRetry, flattenMcpResult, flattenSchema, formatLoopError, harvest, healLoadedMessages, isJsonRpcError, isPlanStateEmpty, isPlausibleKey, listSessions, loadApiKey, loadDotenv, loadSessionMessages, nestArguments, openTranscriptFile, parseEditBlocks, parseMcpSpec, parseTranscript, readConfig, readTranscript, recordFromLoopEvent, redactKey, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, restoreSnapshots, runBranches, sanitizeName as sanitizeSessionName, saveApiKey, scavengeToolCalls, sessionPath, sessionsDir, similarity, snapshotBeforeEdits, truncateForModel, writeConfig, writeMeta, writeRecord };

package/dist/index.js

@@ -47,8 +47,8 @@ function computeWait(attempt, initial, cap, retryAfter) {
 }
 function sleep(ms, signal) {
   if (ms <= 0) return Promise.resolve();
-  return new Promise((resolve2, reject) => {
-    const timer = setTimeout(resolve2, ms);
+  return new Promise((resolve3, reject) => {
+    const timer = setTimeout(resolve3, ms);
     if (signal) {
       const onAbort = () => {
         clearTimeout(timer);
@@ -1020,6 +1020,11 @@ var DEEPSEEK_PRICING = {
   "deepseek-reasoner": { inputCacheHit: 0.14, inputCacheMiss: 0.55, output: 2.19 }
 };
 var CLAUDE_SONNET_PRICING = { input: 3, output: 15 };
+var DEEPSEEK_CONTEXT_TOKENS = {
+  "deepseek-chat": 131072,
+  "deepseek-reasoner": 131072
+};
+var DEFAULT_CONTEXT_TOKENS = 131072;
 function costUsd(model, usage) {
   const p = DEEPSEEK_PRICING[model];
   if (!p) return 0;
@@ -1113,7 +1118,7 @@ var CacheFirstLoop = class {
     this.prefix = opts.prefix;
     this.tools = opts.tools ?? new ToolRegistry();
     this.model = opts.model ?? "deepseek-chat";
-    this.maxToolIters = opts.maxToolIters ?? 24;
+    this.maxToolIters = opts.maxToolIters ?? 64;
     if (typeof opts.branch === "number") {
       this.branchOptions = { budget: opts.branch };
     } else if (opts.branch && typeof opts.branch === "object") {
@@ -1302,8 +1307,8 @@ var CacheFirstLoop = class {
             }
           );
           for (let k = 0; k < budget; k++) {
-            const sample = queue.shift() ?? await new Promise((resolve2) => {
-              waiter = resolve2;
+            const sample = queue.shift() ?? await new Promise((resolve3) => {
+              waiter = resolve3;
             });
             yield {
               turn: this._turn,
@@ -1423,9 +1428,28 @@ var CacheFirstLoop = class {
         yield { turn: this._turn, role: "done", content: assistantContent };
         return;
       }
+      const ctxMax = DEEPSEEK_CONTEXT_TOKENS[this.model] ?? DEFAULT_CONTEXT_TOKENS;
+      if (usage && usage.promptTokens / ctxMax > 0.8) {
+        yield {
+          turn: this._turn,
+          role: "warning",
+          content: `context ${usage.promptTokens}/${ctxMax} (${Math.round(
+            usage.promptTokens / ctxMax * 100
+          )}%) \u2014 more tools would overflow. Forcing summary from what was gathered.`
+        };
+        yield* this.forceSummaryAfterIterLimit({ reason: "context-guard" });
+        return;
+      }
       for (const call of repairedCalls) {
         const name = call.function?.name ?? "";
         const args = call.function?.arguments ?? "{}";
+        yield {
+          turn: this._turn,
+          role: "tool_start",
+          content: "",
+          toolName: name,
+          toolArgs: args
+        };
         const result = await this.tools.dispatch(name, args);
         this.appendAndPersist({
           role: "tool",
@@ -1453,7 +1477,7 @@ var CacheFirstLoop = class {
         // no tools → model is forced to answer in text
       });
       const summary = resp.content?.trim() || "(model returned no text; try a narrower question or raise --max-tool-iters)";
-      const reasonPrefix = opts.reason === "aborted" ? "[aborted by user (Esc) \u2014 summarizing what I found so far]" : `[tool-call budget (${this.maxToolIters}) reached \u2014 forcing summary from what I found]`;
+      const reasonPrefix = reasonPrefixFor(opts.reason, this.maxToolIters);
       const annotated = `${reasonPrefix}
 
 ${summary}`;
@@ -1463,11 +1487,12 @@ ${summary}`;
         turn: this._turn,
         role: "assistant_final",
         content: annotated,
-        stats: summaryStats
+        stats: summaryStats,
+        forcedSummary: true
       };
       yield { turn: this._turn, role: "done", content: summary };
     } catch (err) {
-      const label = opts.reason === "aborted" ? "aborted by user" : `tool-call budget (${this.maxToolIters}) reached`;
+      const label = errorLabelFor(opts.reason, this.maxToolIters);
       yield {
         turn: this._turn,
         role: "error",
@@ -1492,6 +1517,18 @@ ${summary}`;
     return msg;
   }
 };
+function reasonPrefixFor(reason, iterCap) {
+  if (reason === "aborted") return "[aborted by user (Esc) \u2014 summarizing what I found so far]";
+  if (reason === "context-guard") {
+    return "[context budget running low \u2014 summarizing before the next call would overflow]";
+  }
+  return `[tool-call budget (${iterCap}) reached \u2014 forcing summary from what I found]`;
+}
+function errorLabelFor(reason, iterCap) {
+  if (reason === "aborted") return "aborted by user";
+  if (reason === "context-guard") return "context-guard triggered (prompt > 80% of window)";
+  return `tool-call budget (${iterCap}) reached`;
+}
 function summarizeBranch(chosen, samples) {
   return {
     budget: samples.length,
@@ -2114,7 +2151,7 @@ var McpClient = class {
   async request(method, params) {
     const id = this.nextId++;
     const frame = { jsonrpc: "2.0", id, method, params };
-    const promise = new Promise((resolve2, reject) => {
+    const promise = new Promise((resolve3, reject) => {
       const timeout = setTimeout(() => {
         this.pending.delete(id);
         reject(
@@ -2122,7 +2159,7 @@ var McpClient = class {
         );
       }, this.requestTimeoutMs);
       this.pending.set(id, {
-        resolve: resolve2,
+        resolve: resolve3,
         reject,
         timeout
       });
@@ -2206,12 +2243,12 @@ var StdioTransport = class {
   }
   async send(message) {
     if (this.closed) throw new Error("MCP transport is closed");
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const line = `${JSON.stringify(message)}
 `;
       this.child.stdin.write(line, "utf8", (err) => {
         if (err) reject(err);
-        else resolve2();
+        else resolve3();
       });
     });
   }
@@ -2222,8 +2259,8 @@ var StdioTransport = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve2) => {
-        this.waiters.push(resolve2);
+      const next = await new Promise((resolve3) => {
+        this.waiters.push(resolve3);
       });
       if (next === null) return;
       yield next;
@@ -2289,8 +2326,8 @@ var SseTransport = class {
   constructor(opts) {
     this.url = opts.url;
     this.headers = opts.headers ?? {};
-    this.endpointReady = new Promise((resolve2, reject) => {
-      this.resolveEndpoint = resolve2;
+    this.endpointReady = new Promise((resolve3, reject) => {
+      this.resolveEndpoint = resolve3;
       this.rejectEndpoint = reject;
     });
     this.endpointReady.catch(() => void 0);
@@ -2317,8 +2354,8 @@ var SseTransport = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve2) => {
-        this.waiters.push(resolve2);
+      const next = await new Promise((resolve3) => {
+        this.waiters.push(resolve3);
       });
       if (next === null) return;
       yield next;
@@ -2486,16 +2523,215 @@ function parseMcpSpec(input) {
   return { transport: "stdio", name, command, args };
 }
 
+// src/code/edit-blocks.ts
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname2, resolve as resolve2 } from "path";
+var BLOCK_RE = /^(\S[^\n]*)\n<{7} SEARCH\n([\s\S]*?)\n?={7}\n([\s\S]*?)\n?>{7} REPLACE/gm;
+function parseEditBlocks(text) {
+  const out = [];
+  BLOCK_RE.lastIndex = 0;
+  let m = BLOCK_RE.exec(text);
+  while (m !== null) {
+    out.push({
+      path: m[1].trim(),
+      search: m[2],
+      replace: m[3],
+      offset: m.index
+    });
+    m = BLOCK_RE.exec(text);
+  }
+  return out;
+}
+function applyEditBlock(block, rootDir) {
+  const absRoot = resolve2(rootDir);
+  const absTarget = resolve2(absRoot, block.path);
+  if (absTarget !== absRoot && !absTarget.startsWith(`${absRoot}${sep()}`)) {
+    return {
+      path: block.path,
+      status: "path-escape",
+      message: `resolved path ${absTarget} is outside rootDir ${absRoot}`
+    };
+  }
+  const searchEmpty = block.search.length === 0;
+  const exists = existsSync2(absTarget);
+  try {
+    if (!exists) {
+      if (!searchEmpty) {
+        return {
+          path: block.path,
+          status: "file-missing",
+          message: "file does not exist; to create it, use an empty SEARCH block"
+        };
+      }
+      mkdirSync2(dirname2(absTarget), { recursive: true });
+      writeFileSync2(absTarget, block.replace, "utf8");
+      return { path: block.path, status: "created" };
+    }
+    const content = readFileSync4(absTarget, "utf8");
+    if (searchEmpty) {
+      return {
+        path: block.path,
+        status: "not-found",
+        message: "empty SEARCH only creates new files \u2014 this file already exists"
+      };
+    }
+    const idx = content.indexOf(block.search);
+    if (idx === -1) {
+      return {
+        path: block.path,
+        status: "not-found",
+        message: "SEARCH text does not match the current file content exactly"
+      };
+    }
+    const replaced = `${content.slice(0, idx)}${block.replace}${content.slice(idx + block.search.length)}`;
+    writeFileSync2(absTarget, replaced, "utf8");
+    return { path: block.path, status: "applied" };
+  } catch (err) {
+    return { path: block.path, status: "error", message: err.message };
+  }
+}
+function applyEditBlocks(blocks, rootDir) {
+  return blocks.map((b) => applyEditBlock(b, rootDir));
+}
+function snapshotBeforeEdits(blocks, rootDir) {
+  const absRoot = resolve2(rootDir);
+  const seen = /* @__PURE__ */ new Set();
+  const snapshots = [];
+  for (const b of blocks) {
+    if (seen.has(b.path)) continue;
+    seen.add(b.path);
+    const abs = resolve2(absRoot, b.path);
+    if (!existsSync2(abs)) {
+      snapshots.push({ path: b.path, prevContent: null });
+      continue;
+    }
+    try {
+      snapshots.push({ path: b.path, prevContent: readFileSync4(abs, "utf8") });
+    } catch {
+      snapshots.push({ path: b.path, prevContent: null });
+    }
+  }
+  return snapshots;
+}
+function restoreSnapshots(snapshots, rootDir) {
+  const absRoot = resolve2(rootDir);
+  return snapshots.map((snap) => {
+    const abs = resolve2(absRoot, snap.path);
+    if (abs !== absRoot && !abs.startsWith(`${absRoot}${sep()}`)) {
+      return {
+        path: snap.path,
+        status: "path-escape",
+        message: "snapshot path escapes rootDir \u2014 refusing to restore"
+      };
+    }
+    try {
+      if (snap.prevContent === null) {
+        if (existsSync2(abs)) unlinkSync2(abs);
+        return {
+          path: snap.path,
+          status: "applied",
+          message: "removed (the edit had created it)"
+        };
+      }
+      writeFileSync2(abs, snap.prevContent, "utf8");
+      return {
+        path: snap.path,
+        status: "applied",
+        message: "restored to pre-edit content"
+      };
+    } catch (err) {
+      return { path: snap.path, status: "error", message: err.message };
+    }
+  });
+}
+function sep() {
+  return process.platform === "win32" ? "\\" : "/";
+}
+
+// src/code/prompt.ts
+import { existsSync as existsSync3, readFileSync as readFileSync5 } from "fs";
+import { join as join2 } from "path";
+var CODE_SYSTEM_PROMPT = `You are Reasonix Code, a coding assistant. You have filesystem tools (read_file, write_file, list_directory, search_files, etc.) rooted at the user's working directory.
+
+# When to edit vs. when to explore
+
+Only propose edits when the user explicitly asks you to change, fix, add, remove, refactor, or write something. Do NOT propose edits when the user asks you to:
+- analyze, read, explore, describe, or summarize a project
+- explain how something works
+- answer a question about the code
+
+In those cases, use tools to gather what you need, then reply in prose. No SEARCH/REPLACE blocks, no file changes. If you're unsure what the user wants, ask.
+
+When you do propose edits, the user will review them and decide whether to \`/apply\` or \`/discard\`. Don't assume they'll accept \u2014 write as if each edit will be audited, because it will.
+
+# Editing files
+
+When you've been asked to change a file, output one or more SEARCH/REPLACE blocks in this exact format:
+
+path/to/file.ext
+<<<<<<< SEARCH
+exact existing lines from the file, including whitespace
+=======
+the new lines
+>>>>>>> REPLACE
+
+Rules:
+- Always read_file first so your SEARCH matches byte-for-byte. If it doesn't match, the edit is rejected and you'll have to retry with the exact current content.
+- One edit per block. Multiple blocks in one response are fine.
+- To create a new file, leave SEARCH empty:
+    path/to/new.ts
+    <<<<<<< SEARCH
+    =======
+    (whole file content here)
+    >>>>>>> REPLACE
+- Do NOT use write_file to change existing files \u2014 the user reviews your edits as SEARCH/REPLACE. write_file is only for files you explicitly want to overwrite wholesale (rare).
+- Paths are relative to the working directory. Don't use absolute paths.
+
+# Exploration
+
+- Avoid listing or reading inside these common dependency / build directories unless the user explicitly asks about them: node_modules, dist, build, out, .next, .nuxt, .svelte-kit, .git, .venv, venv, __pycache__, target, coverage, .turbo, .cache. They're expensive and usually irrelevant.
+- Prefer search_files / grep over list_directory when you know roughly what you're looking for \u2014 it saves context and avoids enumerating huge trees.
+
+# Style
+
+- Show edits; don't narrate them in prose. "Here's the fix:" is enough.
+- One short paragraph explaining *why*, then the blocks.
+- If you need to explore first (list / grep / read), do it with tool calls before writing any prose \u2014 silence while exploring is fine.
+`;
+function codeSystemPrompt(rootDir) {
+  const gitignorePath = join2(rootDir, ".gitignore");
+  if (!existsSync3(gitignorePath)) return CODE_SYSTEM_PROMPT;
+  let content;
+  try {
+    content = readFileSync5(gitignorePath, "utf8");
+  } catch {
+    return CODE_SYSTEM_PROMPT;
+  }
+  const MAX = 2e3;
+  const truncated = content.length > MAX ? `${content.slice(0, MAX)}
+\u2026 (truncated ${content.length - MAX} chars)` : content;
+  return `${CODE_SYSTEM_PROMPT}
+
+# Project .gitignore
+
+The user's repo ships this .gitignore \u2014 treat every pattern as "don't traverse or edit inside these paths unless explicitly asked":
+
+\`\`\`
+${truncated}
+\`\`\`
+`;
+}
+
 // src/config.ts
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join2 } from "path";
+import { dirname as dirname3, join as join3 } from "path";
 function defaultConfigPath() {
-  return join2(homedir2(), ".reasonix", "config.json");
+  return join3(homedir2(), ".reasonix", "config.json");
 }
 function readConfig(path = defaultConfigPath()) {
   try {
-    const raw = readFileSync4(path, "utf8");
+    const raw = readFileSync6(path, "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object") return parsed;
   } catch {
@@ -2503,8 +2739,8 @@ function readConfig(path = defaultConfigPath()) {
   return {};
 }
 function writeConfig(cfg, path = defaultConfigPath()) {
-  mkdirSync2(dirname2(path), { recursive: true });
-  writeFileSync2(path, JSON.stringify(cfg, null, 2), "utf8");
+  mkdirSync3(dirname3(path), { recursive: true });
+  writeFileSync3(path, JSON.stringify(cfg, null, 2), "utf8");
   try {
     chmodSync2(path, 384);
   } catch {
@@ -2530,9 +2766,10 @@ function redactKey(key) {
 }
 
 // src/index.ts
-var VERSION = "0.3.2";
+var VERSION = "0.4.1";
 export {
   AppendOnlyLog,
+  CODE_SYSTEM_PROMPT,
   CacheFirstLoop,
   DEFAULT_MAX_RESULT_CHARS,
   DeepSeekClient,
@@ -2551,8 +2788,11 @@ export {
   aggregateBranchUsage,
   analyzeSchema,
   appendSessionMessage,
+  applyEditBlock,
+  applyEditBlocks,
   bridgeMcpTools,
   claudeEquivalentCost,
+  codeSystemPrompt,
   computeReplayStats,
   costUsd,
   defaultConfigPath,
@@ -2575,6 +2815,7 @@ export {
   loadSessionMessages,
   nestArguments,
   openTranscriptFile,
+  parseEditBlocks,
   parseMcpSpec,
   parseTranscript,
   readConfig,
@@ -2585,6 +2826,7 @@ export {
   renderSummaryTable as renderDiffSummary,
   repairTruncatedJson,
   replayFromFile,
+  restoreSnapshots,
   runBranches,
   sanitizeName as sanitizeSessionName,
   saveApiKey,
@@ -2592,6 +2834,7 @@ export {
   sessionPath,
   sessionsDir,
   similarity,
+  snapshotBeforeEdits,
   truncateForModel,
   writeConfig,
   writeMeta,