reasonix 0.40.0 → 0.41.0

package/dist/cli/{sessions-F5GPGTJN.js → sessions-BOWFPTXT.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
-import "./chunk-4YV2GBYG.js";
-import "./chunk-XJLZ4HKU.js";
-import "./chunk-HCC42PEI.js";
-import "./chunk-XHQIK7B6.js";
-import "./chunk-R4YTW7PR.js";
+import "./chunk-IEA6JOIP.js";
+import "./chunk-VFG4GIT3.js";
+import "./chunk-7SPOFTMT.js";
+import "./chunk-CFY2XLY6.js";
+import "./chunk-ARF3N2SY.js";
 import "./chunk-DAEAAVDF.js";
-import "./chunk-KMWKGPFZ.js";
+import "./chunk-H4OLWRSX.js";
 import "./chunk-3Q3C4W66.js";
-import "./chunk-SZH34P45.js";
-import "./chunk-7DLHHBGN.js";
-import "./chunk-FFNOMR32.js";
+import "./chunk-BYZGO3BX.js";
+import "./chunk-CD4SCQL4.js";
+import "./chunk-WE3YZULK.js";
 import "./chunk-5X7LZJDE.js";
 import {
   listSessions,
   loadSessionMessages,
   sessionPath
-} from "./chunk-XST7BSZJ.js";
-import "./chunk-H7PHYVPM.js";
-import "./chunk-CZSJILQP.js";
+} from "./chunk-YJFKFTAL.js";
+import "./chunk-MHGPBJ2T.js";
+import "./chunk-65Q5HQ26.js";
 import "./chunk-ZTLZO42A.js";
 import "./chunk-ORM6PK57.js";
 import "./chunk-CRPQUBP6.js";
@@ -100,4 +100,4 @@ function truncate(s, max) {
 export {
   sessionsCommand
 };
-//# sourceMappingURL=sessions-F5GPGTJN.js.map
+//# sourceMappingURL=sessions-BOWFPTXT.js.map

package/dist/cli/{setup-WWMDBPSB.js → setup-FQL2JJC2.js}

@@ -2,11 +2,11 @@
 import {
   MultiSelect,
   SingleSelect
-} from "./chunk-A5LSGEEK.js";
+} from "./chunk-4W2CICFQ.js";
 import {
   ThemeProvider,
   useTheme
-} from "./chunk-4X3NY5ZM.js";
+} from "./chunk-UV7XJUJH.js";
 import {
   PRESET_DESCRIPTIONS
 } from "./chunk-E46ECXJD.js";
@@ -24,7 +24,7 @@ import {
   onLanguageChange,
   setLanguage,
   t
-} from "./chunk-H7PHYVPM.js";
+} from "./chunk-MHGPBJ2T.js";
 import {
   defaultConfigPath,
   isPlausibleKey,
@@ -36,7 +36,7 @@ import {
   redactKey,
   resolveThemePreference,
   writeConfig
-} from "./chunk-CZSJILQP.js";
+} from "./chunk-65Q5HQ26.js";
 
 // src/cli/commands/setup.tsx
 import { render } from "ink";
@@ -513,4 +513,4 @@ async function setupCommand(opts = {}) {
 export {
   setupCommand
 };
-//# sourceMappingURL=setup-WWMDBPSB.js.map
+//# sourceMappingURL=setup-FQL2JJC2.js.map

package/dist/cli/version-XQXYSJ5L.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import "./chunk-IEA6JOIP.js";
+import "./chunk-VFG4GIT3.js";
+import "./chunk-7SPOFTMT.js";
+import "./chunk-CFY2XLY6.js";
+import "./chunk-ARF3N2SY.js";
+import "./chunk-DAEAAVDF.js";
+import "./chunk-H4OLWRSX.js";
+import "./chunk-3Q3C4W66.js";
+import "./chunk-BYZGO3BX.js";
+import "./chunk-CD4SCQL4.js";
+import "./chunk-WE3YZULK.js";
+import "./chunk-5X7LZJDE.js";
+import "./chunk-YJFKFTAL.js";
+import "./chunk-MHGPBJ2T.js";
+import "./chunk-65Q5HQ26.js";
+import "./chunk-ZTLZO42A.js";
+import "./chunk-ORM6PK57.js";
+import {
+  VERSION
+} from "./chunk-CRPQUBP6.js";
+
+// src/cli/commands/version.ts
+function versionCommand() {
+  console.log(`reasonix ${VERSION}`);
+}
+export {
+  versionCommand
+};
+//# sourceMappingURL=version-XQXYSJ5L.js.map

package/dist/index.d.ts

@@ -636,13 +636,16 @@ interface ImmutablePrefixOptions {
     fewShots?: readonly ChatMessage[];
 }
 declare class ImmutablePrefix {
-    readonly system: string;
+    /** Stable across turns; rebuilt only on /new when REASONIX.md changed on disk. */
+    system: string;
     /** Each `addTool` costs one cache-miss turn — DeepSeek's prefix cache is keyed by full tool list. */
     private _toolSpecs;
     readonly fewShots: readonly ChatMessage[];
-    /** Invalidated only via `addTool`; bypassing it leaves cache stale → fingerprint diverges from sent prefix. */
+    /** Invalidated by addTool / removeTool / replaceSystem; bypassing any of those leaves cache stale → fingerprint diverges from sent prefix. */
     private _fingerprintCache;
     constructor(opts: ImmutablePrefixOptions);
+    /** Replaces the system prompt; returns true iff the string actually changed. Caller must accept a cache miss on the next turn. */
+    replaceSystem(s: string): boolean;
     get toolSpecs(): readonly ToolSpec[];
     toMessages(): ChatMessage[];
     tools(): ToolSpec[];
@@ -766,6 +769,8 @@ interface CacheFirstLoopOptions {
     hookCwd?: string;
     /** PauseGate bridge — defaults to singleton, injectable for tests. */
     confirmationGate?: PauseGate;
+    /** Re-runs the prompt builder (applyMemoryStack / codeSystemPrompt) on /new so REASONIX.md edits take effect without a restart. Accepting a cache miss is the price. */
+    rebuildSystem?: () => string;
 }
 interface ReconfigurableOptions {
     model?: string;
@@ -798,6 +803,7 @@ declare class CacheFirstLoop {
     readonly confirmationGate: PauseGate;
     /** Number of messages that were pre-loaded from the session file. */
     readonly resumedMessageCount: number;
+    private readonly _rebuildSystem;
     private _turn;
     private _streamPreference;
     /** Threaded through HTTP + every tool dispatch so Esc cancels in-flight work, not after. */
@@ -807,6 +813,7 @@ declare class CacheFirstLoop {
     private _proArmedForNextTurn;
     private _escalateThisTurn;
     private readonly _turnFailures;
+    private readonly _readOnlyLoop;
     private _turnSelfCorrected;
     private _foldedThisTurn;
     private _toolDispatchesThisStep;
@@ -827,10 +834,11 @@ declare class CacheFirstLoop {
     appendAndPersist(message: ChatMessage): void;
     /** Swap the just-appended assistant entry — used by self-correction to restore the original tool_calls without dropping reasoning_content. */
     private replaceTailAssistantMessage;
-    /** "New chat" — drops in-memory messages, archives the on-disk transcript so it survives in Sessions, keeps sessionName so the prefix cache stays warm. */
+    /** "New chat" — drops in-memory messages, archives the on-disk transcript so it survives in Sessions, keeps sessionName so the prefix cache stays warm. Re-runs the system-prompt builder if one was wired (issue #778: REASONIX.md edits otherwise need a restart). */
     clearLog(): {
         dropped: number;
         archived: string | null;
+        systemRebuilt: boolean;
     };
     configure(opts: ReconfigurableOptions): void;
     /** `null` disables the cap; any change re-arms the 80% warning. */
@@ -848,6 +856,10 @@ declare class CacheFirstLoop {
     private modelForCurrentCall;
     /** Returns true ONLY on the tipping call — caller surfaces a one-shot warning. */
     private noteToolFailureSignal;
+    /** Returns true ONLY on the call where the read-only streak crosses the threshold (#681). */
+    private noteReadOnlyToolCall;
+    /** A call counts as mutating when its definition reports `readOnly !== true` and any dynamic `readOnlyCheck` doesn't override that for these args. */
+    private isMutating;
     private runOneToolCall;
     /** Stable per-call id used as the inflight key AND threaded into tool_start / tool events so the UI matches them up. */
     private inflightIdFor;
@@ -928,7 +940,7 @@ interface ParsedAtQuery {
 }
 /** Split `src/auth/log` → `{dir: "src/auth", filter: "log"}`; trailing slash sets `trailingSlash` and clears filter. */
 declare function parseAtQuery(query: string): ParsedAtQuery;
-/** Trailing-token only, anchored at end-of-input — distinct from `AT_MENTION_PATTERN` which scans all. */
+/** Trailing-token only, anchored at end-of-input — distinct from `AT_MENTION_PATTERN` which scans all. `\p{L}\p{N}` for CJK and other non-ASCII filenames. */
 declare const AT_PICKER_PREFIX: RegExp;
 declare function detectAtPicker(input: string): {
     query: string;
@@ -1012,13 +1024,136 @@ declare function memoryEnabled(): boolean;
 /** Deterministic — same memory file always yields the same prefix hash. */
 declare function applyProjectMemory(basePrompt: string, rootDir: string): string;
 
+type ThemeName = "default" | "dark" | "light" | "tokyo-night" | "github-dark" | "github-light" | "high-contrast";
+
+type LanguageCode = "EN" | "zh-CN";
+
+/** Shared exclude defaults + resolver — chunker, directory_tree, and dashboard read from here. */
+interface IndexUserConfig {
+    excludeDirs?: string[];
+    excludeFiles?: string[];
+    excludeExts?: string[];
+    excludePatterns?: string[];
+    respectGitignore?: boolean;
+    maxFileBytes?: number;
+}
+
+/** Library reads only DEEPSEEK_API_KEY from env; the CLI bridges config.json → env var. */
+
+/** Legacy `fast|smart|max` kept for back-compat with existing config.json files. */
+type PresetName = "auto" | "flash" | "pro" | "fast" | "smart" | "max";
+/** Single trust dial: review queues edits + gates shell; auto applies + gates shell; yolo skips both gates. */
+type EditMode = "review" | "auto" | "yolo";
+type ReasoningEffort = "high" | "max";
+type EmbeddingProvider = "ollama" | "openai-compat";
+interface OllamaEmbeddingUserConfig {
+    baseUrl?: string;
+    model?: string;
+}
+interface OpenAICompatEmbeddingUserConfig {
+    baseUrl?: string;
+    apiKey?: string;
+    model?: string;
+    extraBody?: Record<string, unknown>;
+}
+interface SemanticEmbeddingUserConfig {
+    provider?: EmbeddingProvider;
+    ollama?: OllamaEmbeddingUserConfig;
+    openaiCompat?: OpenAICompatEmbeddingUserConfig;
+}
+interface ReasonixConfig {
+    apiKey?: string;
+    baseUrl?: string;
+    lang?: LanguageCode;
+    preset?: PresetName;
+    editMode?: EditMode;
+    editModeHintShown?: boolean;
+    mouseClipboardHintShown?: boolean;
+    reasoningEffort?: ReasoningEffort;
+    /** Default workspace root for the desktop client. CLI uses cwd. */
+    workspaceDir?: string;
+    /** Last N workspace paths the desktop client has opened, most recent first. */
+    recentWorkspaces?: string[];
+    /** Desktop only — `openWith` value for clicking file links. Empty/undefined = OS default app. Examples: "code", "cursor", "C:\\path\\to\\editor.exe". */
+    editor?: string;
+    theme?: ThemeName | "auto";
+    /** Stored as `--mcp`-format strings so one parser handles both flag and config. */
+    mcp?: string[];
+    /** Names of servers in `mcp` to skip on bridge — see `/mcp disable <name>`. */
+    mcpDisabled?: string[];
+    /** Env overlay per MCP server name (matches the `name=` prefix of the spec). Stdio transports merge this over process.env; SSE/HTTP ignore it. */
+    mcpEnv?: Record<string, Record<string, string>>;
+    session?: string | null;
+    setupCompleted?: boolean;
+    search?: boolean;
+    /** Web search engine backend: "mojeek" (default, scrapes Mojeek) or "searxng" (self-hosted SearXNG). */
+    webSearchEngine?: "mojeek" | "searxng";
+    /** Base URL for SearXNG instance (default http://localhost:8080). */
+    webSearchEndpoint?: string;
+    dashboard?: {
+        /** Pin the embedded dashboard to a fixed port — required for stable SSH tunnels. 0/absent → ephemeral. */
+        port?: number;
+    };
+    escalation?: {
+        /** Per-turn repair/error signal count required to escalate flash→pro. Defaults to 3. Out-of-range → default. */
+        failureThreshold?: number;
+    };
+    /** Per-field visibility toggles for the bottom status row. All default to true (visible). */
+    statusBar?: {
+        showBalance?: boolean;
+        showSessionCost?: boolean;
+        showTurnCost?: boolean;
+        showCacheHit?: boolean;
+        showVersion?: boolean;
+        showFeedbackHint?: boolean;
+    };
+    projects?: {
+        [absoluteRootDir: string]: {
+            shellAllowed?: string[];
+            /** Absolute directory prefixes the user pre-approved for outside-sandbox file access (#684). */
+            pathAllowed?: string[];
+        };
+    };
+    index?: IndexUserConfig;
+    semantic?: SemanticEmbeddingUserConfig;
+    /** User-declared extensions to the built-in memory types (#709). Unknown types round-trip even without a declaration; declaring one lets you attach a default priority + lifecycle. */
+    memory?: {
+        customTypes?: CustomMemoryTypeConfig[];
+    };
+}
+interface CustomMemoryTypeConfig {
+    name: string;
+    description?: string;
+    priority?: "low" | "medium" | "high";
+    expires?: "project_end";
+}
+declare function defaultConfigPath(): string;
+declare function readConfig(path?: string): ReasonixConfig;
+declare function writeConfig(cfg: ReasonixConfig, path?: string): void;
+/** Resolve the API key from env var first, then the config file. */
+declare function loadApiKey(path?: string): string | undefined;
+/** env > config > undefined. Client falls back to api.deepseek.com when undefined. */
+declare function loadBaseUrl(path?: string): string | undefined;
+declare function saveBaseUrl(url: string, path?: string): void;
+declare function saveApiKey(key: string, path?: string): void;
+/** Self-hosted DeepSeek-compatible endpoints may issue any token shape, so we only typo-guard here — the real auth check is the first API call against `baseUrl`. */
+declare function isPlausibleKey(key: string): boolean;
+/** Mask a key for display: `sk-abcd...wxyz`. */
+declare function redactKey(key: string): string;
+
 /** User-private memory pinned into the immutable prefix; distinct from committable REASONIX.md. */
+
 declare const USER_MEMORY_DIR = "memory";
 declare const MEMORY_INDEX_FILE = "MEMORY.md";
 /** Cap on the index file content loaded into the prefix, per scope. */
 declare const MEMORY_INDEX_MAX_CHARS = 4000;
-type MemoryType = "user" | "feedback" | "project" | "reference";
+declare const BUILTIN_MEMORY_TYPES: readonly ["user", "feedback", "project", "reference"];
+type BuiltinMemoryType = (typeof BUILTIN_MEMORY_TYPES)[number];
+/** Built-ins plus any string declared in `config.memory.customTypes`. Unknown values are accepted (round-tripped verbatim). */
+type MemoryType = BuiltinMemoryType | (string & {});
 type MemoryScope = "global" | "project";
+type MemoryPriority = "low" | "medium" | "high";
+type MemoryExpires = "project_end";
 interface MemoryEntry {
     name: string;
     type: MemoryType;
@@ -1027,6 +1162,10 @@ interface MemoryEntry {
     body: string;
     /** ISO date string (YYYY-MM-DD). */
     createdAt: string;
+    /** Explicit per-entry priority; absent → resolve from config default for `type`, else "medium". */
+    priority?: MemoryPriority;
+    /** Lifecycle hint. `project_end` → cleared by `/memory clear project`. */
+    expires?: MemoryExpires;
 }
 interface MemoryStoreOptions {
     /** Override `~/.reasonix` — tests set this to a tmpdir. */
@@ -1040,6 +1179,8 @@ interface WriteInput {
     scope: MemoryScope;
     description: string;
     body: string;
+    priority?: MemoryPriority;
+    expires?: MemoryExpires;
 }
 /** Throws on path-injection (../, /, leading dot). Allowed: 3-40 chars, alnum/_/-, interior `.`. */
 declare function sanitizeMemoryName(raw: string): string;
@@ -1074,6 +1215,7 @@ declare class MemoryStore {
 declare function applyUserMemory(basePrompt: string, opts?: {
     homeDir?: string;
     projectRoot?: string;
+    cfg?: ReasonixConfig;
 }): string;
 declare function applyMemoryStack(basePrompt: string, rootDir: string): string;
 
@@ -1273,6 +1415,7 @@ declare class JobRegistry {
     }): JobReadResult | null;
     waitForJob(id: number, opts?: {
         timeoutMs?: number;
+        waitFor?: "exit" | "output-or-exit";
     }): Promise<JobWaitResult | null>;
     /** SIGTERM, wait graceMs, then SIGKILL. Idempotent on already-exited jobs. */
     stop(id: number, opts?: {
@@ -2080,104 +2223,6 @@ interface CodeSystemPromptOptions {
 }
 declare function codeSystemPrompt(rootDir: string, opts?: CodeSystemPromptOptions): string;
 
-type ThemeName = "default" | "dark" | "light" | "tokyo-night" | "github-dark" | "github-light" | "high-contrast";
-
-type LanguageCode = "EN" | "zh-CN";
-
-/** Shared exclude defaults + resolver — chunker, directory_tree, and dashboard read from here. */
-interface IndexUserConfig {
-    excludeDirs?: string[];
-    excludeFiles?: string[];
-    excludeExts?: string[];
-    excludePatterns?: string[];
-    respectGitignore?: boolean;
-    maxFileBytes?: number;
-}
-
-/** Library reads only DEEPSEEK_API_KEY from env; the CLI bridges config.json → env var. */
-
-/** Legacy `fast|smart|max` kept for back-compat with existing config.json files. */
-type PresetName = "auto" | "flash" | "pro" | "fast" | "smart" | "max";
-/** Single trust dial: review queues edits + gates shell; auto applies + gates shell; yolo skips both gates. */
-type EditMode = "review" | "auto" | "yolo";
-type ReasoningEffort = "high" | "max";
-type EmbeddingProvider = "ollama" | "openai-compat";
-interface OllamaEmbeddingUserConfig {
-    baseUrl?: string;
-    model?: string;
-}
-interface OpenAICompatEmbeddingUserConfig {
-    baseUrl?: string;
-    apiKey?: string;
-    model?: string;
-    extraBody?: Record<string, unknown>;
-}
-interface SemanticEmbeddingUserConfig {
-    provider?: EmbeddingProvider;
-    ollama?: OllamaEmbeddingUserConfig;
-    openaiCompat?: OpenAICompatEmbeddingUserConfig;
-}
-interface ReasonixConfig {
-    apiKey?: string;
-    baseUrl?: string;
-    lang?: LanguageCode;
-    preset?: PresetName;
-    editMode?: EditMode;
-    editModeHintShown?: boolean;
-    mouseClipboardHintShown?: boolean;
-    reasoningEffort?: ReasoningEffort;
-    /** Default workspace root for the desktop client. CLI uses cwd. */
-    workspaceDir?: string;
-    /** Last N workspace paths the desktop client has opened, most recent first. */
-    recentWorkspaces?: string[];
-    /** Desktop only — `openWith` value for clicking file links. Empty/undefined = OS default app. Examples: "code", "cursor", "C:\\path\\to\\editor.exe". */
-    editor?: string;
-    theme?: ThemeName | "auto";
-    /** Stored as `--mcp`-format strings so one parser handles both flag and config. */
-    mcp?: string[];
-    /** Names of servers in `mcp` to skip on bridge — see `/mcp disable <name>`. */
-    mcpDisabled?: string[];
-    /** Env overlay per MCP server name (matches the `name=` prefix of the spec). Stdio transports merge this over process.env; SSE/HTTP ignore it. */
-    mcpEnv?: Record<string, Record<string, string>>;
-    session?: string | null;
-    setupCompleted?: boolean;
-    search?: boolean;
-    /** Web search engine backend: "mojeek" (default, scrapes Mojeek) or "searxng" (self-hosted SearXNG). */
-    webSearchEngine?: "mojeek" | "searxng";
-    /** Base URL for SearXNG instance (default http://localhost:8080). */
-    webSearchEndpoint?: string;
-    dashboard?: {
-        /** Pin the embedded dashboard to a fixed port — required for stable SSH tunnels. 0/absent → ephemeral. */
-        port?: number;
-    };
-    escalation?: {
-        /** Per-turn repair/error signal count required to escalate flash→pro. Defaults to 3. Out-of-range → default. */
-        failureThreshold?: number;
-    };
-    projects?: {
-        [absoluteRootDir: string]: {
-            shellAllowed?: string[];
-            /** Absolute directory prefixes the user pre-approved for outside-sandbox file access (#684). */
-            pathAllowed?: string[];
-        };
-    };
-    index?: IndexUserConfig;
-    semantic?: SemanticEmbeddingUserConfig;
-}
-declare function defaultConfigPath(): string;
-declare function readConfig(path?: string): ReasonixConfig;
-declare function writeConfig(cfg: ReasonixConfig, path?: string): void;
-/** Resolve the API key from env var first, then the config file. */
-declare function loadApiKey(path?: string): string | undefined;
-/** env > config > undefined. Client falls back to api.deepseek.com when undefined. */
-declare function loadBaseUrl(path?: string): string | undefined;
-declare function saveBaseUrl(url: string, path?: string): void;
-declare function saveApiKey(key: string, path?: string): void;
-/** Self-hosted DeepSeek-compatible endpoints may issue any token shape, so we only typo-guard here — the real auth check is the first API call against `baseUrl`. */
-declare function isPlausibleKey(key: string): boolean;
-/** Mask a key for display: `sk-abcd...wxyz`. */
-declare function redactKey(key: string): string;
-
 /** VERSION sourced from package.json so it never drifts from npm; latest-check returns null on any failure. */
 /** TTL for the on-disk cache entry. 24h keeps noise low; users who
  * want a fresh check can run `reasonix update` which passes