reasonix 0.43.0 → 0.44.0

package/dist/cli/{mcp-WUL2WO75.js → mcp-MPVGBBJF.js}

@@ -15,7 +15,7 @@ import {
   defaultConfigPath,
   readConfig,
   writeConfig
-} from "./chunk-XPDVG52A.js";
+} from "./chunk-AVFXO2EZ.js";
 import "./chunk-TUK7OWJA.js";
 
 // src/cli/commands/mcp.ts
@@ -274,4 +274,4 @@ export {
   mcpListCommand,
   mcpSearchCommand
 };
-//# sourceMappingURL=mcp-WUL2WO75.js.map
+//# sourceMappingURL=mcp-MPVGBBJF.js.map

package/dist/cli/{mcp-browse-RR7R4XET.js → mcp-browse-4XOTC3FJ.js}

@@ -10,7 +10,7 @@ import {
   require_react,
   use_app_default,
   use_input_default
-} from "./chunk-6G3CUUFG.js";
+} from "./chunk-X53B3JIX.js";
 import {
   loadDotenv
 } from "./chunk-2UQP6H6T.js";
@@ -23,7 +23,7 @@ import "./chunk-PLHAZOLZ.js";
 import {
   readConfig,
   writeConfig
-} from "./chunk-XPDVG52A.js";
+} from "./chunk-AVFXO2EZ.js";
 import {
   __toESM
 } from "./chunk-TUK7OWJA.js";
@@ -175,4 +175,4 @@ async function mcpBrowseCommand(_opts = {}) {
 export {
   mcpBrowseCommand
 };
-//# sourceMappingURL=mcp-browse-RR7R4XET.js.map
+//# sourceMappingURL=mcp-browse-4XOTC3FJ.js.map

package/dist/cli/{mcp-inspect-REGLYBWT.js → mcp-inspect-CEMGKKAH.js}

@@ -3,25 +3,30 @@ import { createRequire as __cr } from 'node:module'; if (typeof globalThis.requi
 import {
   buildTransportFromSpec,
   preflightStdioSpec
-} from "./chunk-PQXPXJBJ.js";
+} from "./chunk-NVURFF27.js";
 import {
   McpClient,
-  inspectMcpServer,
-  parseMcpSpec
-} from "./chunk-6AK4EY3D.js";
+  inspectMcpServer
+} from "./chunk-XSU4QVFW.js";
 import "./chunk-25T6CVUP.js";
 import {
-  mcpEnvFor,
+  normalizeMcpConfig,
+  overlayMatchedSpec,
+  parseMcpSpec,
   readConfig
-} from "./chunk-XPDVG52A.js";
+} from "./chunk-AVFXO2EZ.js";
 import "./chunk-XXC2BYTV.js";
 import "./chunk-TUK7OWJA.js";
 
 // src/cli/commands/mcp-inspect.ts
 async function mcpInspectCommand(opts) {
-  const spec = parseMcpSpec(opts.spec);
+  const parsed = parseMcpSpec(opts.spec);
+  const cfg = readConfig();
+  const normalized = normalizeMcpConfig(cfg);
+  const matched = parsed.name ? normalized.find((s) => s.name === parsed.name) : void 0;
+  const spec = overlayMatchedSpec(parsed, matched);
   if (spec.transport === "stdio") preflightStdioSpec(spec);
-  const transport = buildTransportFromSpec(spec, { env: mcpEnvFor(spec.name, readConfig()) });
+  const transport = buildTransportFromSpec(spec);
   const client = new McpClient({ transport });
   try {
     await client.initialize();
@@ -140,4 +145,4 @@ export {
   formatMcpInspectFailure,
   mcpInspectCommand
 };
-//# sourceMappingURL=mcp-inspect-REGLYBWT.js.map
+//# sourceMappingURL=mcp-inspect-CEMGKKAH.js.map

package/dist/cli/mcp-inspect-CEMGKKAH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cli/commands/mcp-inspect.ts"],"sourcesContent":["import { normalizeMcpConfig, readConfig } from \"../../config.js\";\nimport { McpClient } from \"../../mcp/client.js\";\nimport { inspectMcpServer } from \"../../mcp/inspect.js\";\nimport type { InspectionReport } from \"../../mcp/inspect.js\";\nimport { preflightStdioSpec } from \"../../mcp/preflight.js\";\nimport { overlayMatchedSpec, parseMcpSpec } from \"../../mcp/spec.js\";\nimport { buildTransportFromSpec } from \"../../mcp/transport-from-spec.js\";\n\nexport interface McpInspectOptions {\n  /** The raw --mcp spec string (e.g. `fs=npx -y @modelcontextprotocol/server-filesystem .`). */\n  spec: string;\n  /** Emit JSON on stdout instead of the human-readable table. */\n  json?: boolean;\n}\n\nexport async function mcpInspectCommand(opts: McpInspectOptions): Promise<void> {\n  const parsed = parseMcpSpec(opts.spec);\n  const cfg = readConfig();\n  const normalized = normalizeMcpConfig(cfg);\n  const matched = parsed.name ? normalized.find((s) => s.name === parsed.name) : undefined;\n  const spec = overlayMatchedSpec(parsed, matched);\n  if (spec.transport === \"stdio\") preflightStdioSpec(spec);\n  const transport = buildTransportFromSpec(spec);\n  const client = new McpClient({ transport });\n  try {\n    await client.initialize();\n    const report = await inspectMcpServer(client);\n    if (opts.json) {\n      console.log(JSON.stringify(report, null, 2));\n    } else {\n      console.log(formatReport(spec.name ?? \"(anon)\", report));\n    }\n  } finally {\n    await client.close();\n  }\n}\n\nexport function formatMcpInspectFailure(err: unknown): string {\n  const error = err instanceof Error ? err : new Error(String(err));\n  const message = error.message;\n  const code = (error as NodeJS.ErrnoException).code;\n\n  if (code === \"ENOENT\") {\n    const command = message.match(/^spawn\\s+([^\\s]+)\\s+ENOENT$/)?.[1] ?? \"the command\";\n    return `${message} — try: install or verify \\`${command}\\`, then check the MCP spec's command spelling`;\n  }\n\n  if (code === \"ECONNREFUSED\") {\n    const target = message.match(/\\b(https?:\\/\\/\\S+|\\d+\\.\\d+\\.\\d+\\.\\d+:\\d+|localhost:\\d+)\\b/i)?.[1];\n    return `${message} — try: confirm ${target ?? \"the MCP server\"} is running and the host/port match the spec`;\n  }\n\n  if (code === \"ENOTFOUND\" || code === \"EAI_AGAIN\") {\n    return `${message} — try: confirm the hostname is spelled correctly and DNS resolution is working (check your network/VPN)`;\n  }\n\n  if (code === \"ECONNRESET\") {\n    return `${message} — try: retry the request; if it keeps happening, check the server's logs for crashes or rate limits`;\n  }\n\n  if (code === \"ETIMEDOUT\") {\n    return `${message} — try: confirm the host is reachable and no firewall/proxy is blocking the port`;\n  }\n\n  if (\n    code === \"CERT_HAS_EXPIRED\" ||\n    code === \"DEPTH_ZERO_SELF_SIGNED_CERT\" ||\n    code === \"UNABLE_TO_VERIFY_LEAF_SIGNATURE\" ||\n    code === \"SELF_SIGNED_CERT_IN_CHAIN\"\n  ) {\n    return `${message} — try: renew or trust the server's TLS certificate, or point the spec at an endpoint with a valid cert`;\n  }\n\n  // HTTP non-2xx from SSE / Streamable HTTP transports. Match the three\n  // exact shapes those transports emit and surface an auth/endpoint hint.\n  const httpStatus = matchTransportHttpStatus(message);\n  if (httpStatus !== null) {\n    return `${message}${hintForHttpStatus(httpStatus)}`;\n  }\n\n  if (/^MCP request initialize \\(id=\\d+\\) timed out after \\d+ms$/.test(message)) {\n    return `${message} — try: confirm the target speaks MCP and completes the handshake before the request timeout`;\n  }\n\n  if (/^(empty MCP spec|MCP spec \".*\" has name but no command)/.test(message)) {\n    return `${message} — try: pass \\`name=command args\\` or an http(s):// URL`;\n  }\n\n  return message;\n}\n\nfunction matchTransportHttpStatus(message: string): number | null {\n  // src/mcp/sse.ts: `SSE handshake <url> → <status> <statusText>`\n  // src/mcp/sse.ts: `MCP SSE POST <url> failed: <status> <statusText>`\n  // src/mcp/streamable-http.ts: `MCP Streamable HTTP POST <url> → <status> <statusText>...`\n  const m =\n    message.match(/^SSE handshake \\S+ → (\\d{3})\\b/) ??\n    message.match(/^MCP SSE POST \\S+ failed: (\\d{3})\\b/) ??\n    message.match(/^MCP Streamable HTTP POST \\S+ → (\\d{3})\\b/);\n  return m ? Number(m[1]) : null;\n}\n\nfunction hintForHttpStatus(status: number): string {\n  if (status === 401) {\n    return \" — try: check the spec's auth header (e.g. `Authorization: Bearer …`) or confirm the token isn't expired\";\n  }\n  if (status === 403) {\n    return \" — try: confirm the credentials have permission to reach this MCP endpoint\";\n  }\n  if (status === 404) {\n    return \" — try: confirm the endpoint path in the spec matches what the server actually exposes\";\n  }\n  if (status >= 500 && status <= 599) {\n    return \" — try: retry shortly; if the failure persists, check the MCP server's logs\";\n  }\n  return \"\";\n}\n\nfunction formatReport(nsName: string, r: InspectionReport): string {\n  const lines: string[] = [];\n  lines.push(`MCP server [${nsName}]`);\n  lines.push(\n    `  server     ${r.serverInfo.name || \"(unknown)\"}${r.serverInfo.version ? ` v${r.serverInfo.version}` : \"\"}`,\n  );\n  lines.push(`  protocol   ${r.protocolVersion}`);\n  const capKeys = Object.keys(r.capabilities);\n  lines.push(`  caps       ${capKeys.length > 0 ? capKeys.join(\", \") : \"(none advertised)\"}`);\n  if (r.instructions) {\n    lines.push(`  notes      ${r.instructions.trim().slice(0, 200)}`);\n  }\n  lines.push(\"\");\n  lines.push(formatSection(\"Tools\", r.tools, toolLine));\n  lines.push(formatSection(\"Resources\", r.resources, resourceLine));\n  lines.push(formatSection(\"Prompts\", r.prompts, promptLine));\n  return lines.join(\"\\n\");\n}\n\nfunction formatSection<T>(\n  title: string,\n  section: { supported: true; items: T[] } | { supported: false; reason: string },\n  render: (item: T) => string,\n): string {\n  if (!section.supported) {\n    return `${title}: (not supported — ${section.reason})`;\n  }\n  if (section.items.length === 0) {\n    return `${title}: (none)`;\n  }\n  const lines = [`${title} (${section.items.length}):`];\n  for (const item of section.items) lines.push(`  ${render(item)}`);\n  return lines.join(\"\\n\");\n}\n\nfunction toolLine(t: { name: string; description?: string }): string {\n  const desc = t.description ? ` — ${oneLine(t.description, 80)}` : \"\";\n  return `· ${t.name}${desc}`;\n}\n\nfunction resourceLine(r: { uri: string; name: string; mimeType?: string }): string {\n  const mime = r.mimeType ? ` [${r.mimeType}]` : \"\";\n  return `· ${r.name}${mime}  ${r.uri}`;\n}\n\nfunction promptLine(p: {\n  name: string;\n  description?: string;\n  arguments?: Array<{ name: string; required?: boolean }>;\n}): string {\n  const argPart =\n    p.arguments && p.arguments.length > 0\n      ? ` (${p.arguments.map((a) => (a.required ? a.name : `${a.name}?`)).join(\", \")})`\n      : \"\";\n  const desc = p.description ? ` — ${oneLine(p.description, 80)}` : \"\";\n  return `· ${p.name}${argPart}${desc}`;\n}\n\nfunction oneLine(s: string, max: number): string {\n  const flat = s.replace(/\\s+/g, \" \").trim();\n  return flat.length <= max ? flat : `${flat.slice(0, max - 1)}…`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAeA,eAAsB,kBAAkB,MAAwC;AAC9E,QAAM,SAAS,aAAa,KAAK,IAAI;AACrC,QAAM,MAAM,WAAW;AACvB,QAAM,aAAa,mBAAmB,GAAG;AACzC,QAAM,UAAU,OAAO,OAAO,WAAW,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO,IAAI,IAAI;AAC/E,QAAM,OAAO,mBAAmB,QAAQ,OAAO;AAC/C,MAAI,KAAK,cAAc,QAAS,oBAAmB,IAAI;AACvD,QAAM,YAAY,uBAAuB,IAAI;AAC7C,QAAM,SAAS,IAAI,UAAU,EAAE,UAAU,CAAC;AAC1C,MAAI;AACF,UAAM,OAAO,WAAW;AACxB,UAAM,SAAS,MAAM,iBAAiB,MAAM;AAC5C,QAAI,KAAK,MAAM;AACb,cAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,IAC7C,OAAO;AACL,cAAQ,IAAI,aAAa,KAAK,QAAQ,UAAU,MAAM,CAAC;AAAA,IACzD;AAAA,EACF,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEO,SAAS,wBAAwB,KAAsB;AAC5D,QAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,QAAM,UAAU,MAAM;AACtB,QAAM,OAAQ,MAAgC;AAE9C,MAAI,SAAS,UAAU;AACrB,UAAM,UAAU,QAAQ,MAAM,6BAA6B,IAAI,CAAC,KAAK;AACrE,WAAO,GAAG,OAAO,oCAA+B,OAAO;AAAA,EACzD;AAEA,MAAI,SAAS,gBAAgB;AAC3B,UAAM,SAAS,QAAQ,MAAM,4DAA4D,IAAI,CAAC;AAC9F,WAAO,GAAG,OAAO,wBAAmB,UAAU,gBAAgB;AAAA,EAChE;AAEA,MAAI,SAAS,eAAe,SAAS,aAAa;AAChD,WAAO,GAAG,OAAO;AAAA,EACnB;AAEA,MAAI,SAAS,cAAc;AACzB,WAAO,GAAG,OAAO;AAAA,EACnB;AAEA,MAAI,SAAS,aAAa;AACxB,WAAO,GAAG,OAAO;AAAA,EACnB;AAEA,MACE,SAAS,sBACT,SAAS,iCACT,SAAS,qCACT,SAAS,6BACT;AACA,WAAO,GAAG,OAAO;AAAA,EACnB;AAIA,QAAM,aAAa,yBAAyB,OAAO;AACnD,MAAI,eAAe,MAAM;AACvB,WAAO,GAAG,OAAO,GAAG,kBAAkB,UAAU,CAAC;AAAA,EACnD;AAEA,MAAI,4DAA4D,KAAK,OAAO,GAAG;AAC7E,WAAO,GAAG,OAAO;AAAA,EACnB;AAEA,MAAI,0DAA0D,KAAK,OAAO,GAAG;AAC3E,WAAO,GAAG,OAAO;AAAA,EACnB;AAEA,SAAO;AACT;AAEA,SAAS,yBAAyB,SAAgC;AAIhE,QAAM,IACJ,QAAQ,MAAM,gCAAgC,KAC9C,QAAQ,MAAM,qCAAqC,KACnD,QAAQ,MAAM,2CAA2C;AAC3D,SAAO,IAAI,OAAO,EAAE,CAAC,CAAC,IAAI;AAC5B;AAEA,SAAS,kBAAkB,QAAwB;AACjD,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,UAAU,OAAO,UAAU,KAAK;AAClC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAAgB,GAA6B;AACjE,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,eAAe,MAAM,GAAG;AACnC,QAAM;AAAA,IACJ,gBAAgB,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE,WAAW,UAAU,KAAK,EAAE,WAAW,OAAO,KAAK,EAAE;AAAA,EAC5G;AACA,QAAM,KAAK,gBAAgB,EAAE,eAAe,EAAE;AAC9C,QAAM,UAAU,OAAO,KAAK,EAAE,YAAY;AAC1C,QAAM,KAAK,gBAAgB,QAAQ,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,mBAAmB,EAAE;AAC1F,MAAI,EAAE,cAAc;AAClB,UAAM,KAAK,gBAAgB,EAAE,aAAa,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,EAClE;AACA,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,cAAc,SAAS,EAAE,OAAO,QAAQ,CAAC;AACpD,QAAM,KAAK,cAAc,aAAa,EAAE,WAAW,YAAY,CAAC;AAChE,QAAM,KAAK,cAAc,WAAW,EAAE,SAAS,UAAU,CAAC;AAC1D,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,cACP,OACA,SACA,QACQ;AACR,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO,GAAG,KAAK,2BAAsB,QAAQ,MAAM;AAAA,EACrD;AACA,MAAI,QAAQ,MAAM,WAAW,GAAG;AAC9B,WAAO,GAAG,KAAK;AAAA,EACjB;AACA,QAAM,QAAQ,CAAC,GAAG,KAAK,KAAK,QAAQ,MAAM,MAAM,IAAI;AACpD,aAAW,QAAQ,QAAQ,MAAO,OAAM,KAAK,KAAK,OAAO,IAAI,CAAC,EAAE;AAChE,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,SAAS,GAAmD;AACnE,QAAM,OAAO,EAAE,cAAc,WAAM,QAAQ,EAAE,aAAa,EAAE,CAAC,KAAK;AAClE,SAAO,QAAK,EAAE,IAAI,GAAG,IAAI;AAC3B;AAEA,SAAS,aAAa,GAA6D;AACjF,QAAM,OAAO,EAAE,WAAW,KAAK,EAAE,QAAQ,MAAM;AAC/C,SAAO,QAAK,EAAE,IAAI,GAAG,IAAI,KAAK,EAAE,GAAG;AACrC;AAEA,SAAS,WAAW,GAIT;AACT,QAAM,UACJ,EAAE,aAAa,EAAE,UAAU,SAAS,IAChC,KAAK,EAAE,UAAU,IAAI,CAAC,MAAO,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,IAAI,GAAI,EAAE,KAAK,IAAI,CAAC,MAC5E;AACN,QAAM,OAAO,EAAE,cAAc,WAAM,QAAQ,EAAE,aAAa,EAAE,CAAC,KAAK;AAClE,SAAO,QAAK,EAAE,IAAI,GAAG,OAAO,GAAG,IAAI;AACrC;AAEA,SAAS,QAAQ,GAAW,KAAqB;AAC/C,QAAM,OAAO,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACzC,SAAO,KAAK,UAAU,MAAM,OAAO,GAAG,KAAK,MAAM,GAAG,MAAM,CAAC,CAAC;AAC9D;","names":[]}

package/dist/cli/{prompt-UW6EFLVR.js → prompt-2D7ID24X.js}

@@ -4,13 +4,13 @@ import {
   CODE_SYSTEM_PROMPT,
   codeSystemBase,
   codeSystemPrompt
-} from "./chunk-5JJRUIPA.js";
-import "./chunk-2K65GZBT.js";
-import "./chunk-XPDVG52A.js";
+} from "./chunk-JNAQYELD.js";
+import "./chunk-TEUDEGX2.js";
+import "./chunk-AVFXO2EZ.js";
 import "./chunk-TUK7OWJA.js";
 export {
   CODE_SYSTEM_PROMPT,
   codeSystemBase,
   codeSystemPrompt
 };
-//# sourceMappingURL=prompt-UW6EFLVR.js.map
+//# sourceMappingURL=prompt-2D7ID24X.js.map

package/dist/cli/{replay-YOURXV4C.js → replay-SR44E6RS.js}

@@ -2,21 +2,21 @@
 import { createRequire as __cr } from 'node:module'; if (typeof globalThis.require === 'undefined') { globalThis.require = __cr(import.meta.url); }
 import {
   RecordView
-} from "./chunk-32TIKD5U.js";
+} from "./chunk-TXJMRPIL.js";
 import {
   Bar,
   ChromeRule,
   stringWidth
-} from "./chunk-2Z35JOA4.js";
+} from "./chunk-TKVXTQ3T.js";
 import {
   computeCumulativeStats,
   groupRecordsByTurn,
   replayFromFile
-} from "./chunk-FHOGSSCH.js";
+} from "./chunk-C53JQES5.js";
 import {
   COLOR,
   GRADIENT
-} from "./chunk-TJX6BFZZ.js";
+} from "./chunk-AB2RED3C.js";
 import {
   Box_default,
   Static,
@@ -26,17 +26,17 @@ import {
   use_app_default,
   use_input_default,
   use_stdout_default
-} from "./chunk-6G3CUUFG.js";
-import "./chunk-2KDUS647.js";
+} from "./chunk-X53B3JIX.js";
+import "./chunk-V26WPN3J.js";
 import "./chunk-25T6CVUP.js";
+import "./chunk-ZZYBBX5N.js";
 import {
   t
-} from "./chunk-RE4RAVFF.js";
+} from "./chunk-CGDR2ELH.js";
 import {
   formatBalance,
   formatCost
-} from "./chunk-XPDVG52A.js";
-import "./chunk-YQ6NTIIE.js";
+} from "./chunk-AVFXO2EZ.js";
 import {
   __toESM
 } from "./chunk-TUK7OWJA.js";
@@ -288,4 +288,4 @@ function oneLine(s, max = 200) {
 export {
   replayCommand
 };
-//# sourceMappingURL=replay-YOURXV4C.js.map
+//# sourceMappingURL=replay-SR44E6RS.js.map

package/dist/cli/{run-Q6BUXV66.js → run-MDGL27WL.js}

@@ -3,55 +3,56 @@ import { createRequire as __cr } from 'node:module'; if (typeof globalThis.requi
 import {
   formatMcpLifecycleEvent,
   formatMcpSlowToast
-} from "./chunk-H6PS7IUE.js";
+} from "./chunk-7UCMM425.js";
 import {
   buildTransportFromSpec,
   preflightStdioSpec
-} from "./chunk-PQXPXJBJ.js";
+} from "./chunk-NVURFF27.js";
 import {
   CacheFirstLoop,
   ImmutablePrefix,
   ToolRegistry,
   bridgeMcpTools
-} from "./chunk-2R4QCDOZ.js";
-import "./chunk-F3PXYSNN.js";
+} from "./chunk-OPFUUYHL.js";
+import "./chunk-WK3UFQY3.js";
 import {
   openTranscriptFile,
   recordFromLoopEvent,
   writeRecord
-} from "./chunk-FHOGSSCH.js";
+} from "./chunk-C53JQES5.js";
 import {
-  McpClient,
-  parseMcpSpec
-} from "./chunk-6AK4EY3D.js";
-import "./chunk-5JJRUIPA.js";
-import "./chunk-PV55UMTO.js";
+  McpClient
+} from "./chunk-XSU4QVFW.js";
+import "./chunk-JNAQYELD.js";
+import "./chunk-6OWJV3YW.js";
 import {
   DeepSeekClient
-} from "./chunk-2KDUS647.js";
+} from "./chunk-V26WPN3J.js";
 import "./chunk-25T6CVUP.js";
 import {
   loadDotenv
 } from "./chunk-2UQP6H6T.js";
-import "./chunk-O52OLQL3.js";
-import "./chunk-2K65GZBT.js";
-import "./chunk-7O5ALB4C.js";
+import "./chunk-RDRC3XDT.js";
+import "./chunk-TEUDEGX2.js";
+import "./chunk-7CIGMZT3.js";
 import "./chunk-S4XVGLRW.js";
 import "./chunk-6PBZN4VI.js";
-import "./chunk-RE4RAVFF.js";
+import {
+  appendUsage
+} from "./chunk-R3CTO2HM.js";
+import "./chunk-ZZYBBX5N.js";
+import {
+  t
+} from "./chunk-CGDR2ELH.js";
 import {
   defaultConfigPath,
   isPlausibleKey,
   loadApiKey,
   loadBaseUrl,
-  mcpEnvFor,
+  normalizeMcpConfig,
   readConfig,
   saveApiKey
-} from "./chunk-XPDVG52A.js";
-import {
-  appendUsage
-} from "./chunk-HFEAY5DT.js";
-import "./chunk-YQ6NTIIE.js";
+} from "./chunk-AVFXO2EZ.js";
 import "./chunk-XXC2BYTV.js";
 import "./chunk-TUK7OWJA.js";
 
@@ -62,9 +63,7 @@ async function ensureApiKey() {
   const existing = loadApiKey();
   if (existing) return existing;
   if (!stdin.isTTY) {
-    process.stderr.write(
-      "DEEPSEEK_API_KEY is not set and stdin is not a TTY (cannot prompt).\nSet the env var, or run `reasonix chat` once interactively to save a key.\n"
-    );
+    process.stderr.write(t("run.missingApiKey"));
     process.exit(1);
   }
   process.stdout.write(
@@ -93,20 +92,22 @@ async function runCommand(opts) {
   loadDotenv();
   const apiKey = await ensureApiKey();
   process.env.DEEPSEEK_API_KEY = apiKey;
-  const requestedSpecs = opts.mcp ?? [];
+  const cfg = readConfig();
+  const normalizedSpecs = normalizeMcpConfig(
+    cfg,
+    opts.mcp && opts.mcp.length > 0 ? opts.mcp : void 0
+  );
   const clients = [];
   let tools;
   let successCount = 0;
-  const disabledNames = new Set(readConfig().mcpDisabled ?? []);
-  if (requestedSpecs.length > 0) {
+  if (normalizedSpecs.length > 0) {
     tools = new ToolRegistry();
-    for (const raw of requestedSpecs) {
+    for (const spec of normalizedSpecs) {
       let label = "anon";
       let mcp;
       try {
-        const spec = parseMcpSpec(raw);
         label = spec.name ?? "anon";
-        if (spec.name && disabledNames.has(spec.name)) {
+        if (spec.disabled) {
           process.stderr.write(`${formatMcpLifecycleEvent({ state: "disabled", name: label })}
 `);
           continue;
@@ -114,11 +115,9 @@ async function runCommand(opts) {
         process.stderr.write(`${formatMcpLifecycleEvent({ state: "handshake", name: label })}
 `);
         const t0 = Date.now();
-        const prefix2 = spec.name ? `${spec.name}_` : requestedSpecs.length === 1 && opts.mcpPrefix ? opts.mcpPrefix : "";
+        const prefix2 = spec.name ? `${spec.name}_` : normalizedSpecs.length === 1 && opts.mcpPrefix ? opts.mcpPrefix : "";
         if (spec.transport === "stdio") preflightStdioSpec(spec);
-        const transport = buildTransportFromSpec(spec, {
-          env: mcpEnvFor(spec.name, readConfig())
-        });
+        const transport = buildTransportFromSpec(spec);
         mcp = new McpClient({ transport });
         await mcp.initialize();
         const bridge = await bridgeMcpTools(mcp, {
@@ -145,7 +144,7 @@ async function runCommand(opts) {
         await mcp?.close().catch(() => void 0);
         process.stderr.write(
           `${formatMcpLifecycleEvent({ state: "failed", name: label, reason: err.message })}
-  \u2192 run \`reasonix setup\` to remove broken entries from your saved config.
+  ${t("mcpLifecycle.failedSetupConfigHint")}
 `
         );
       }
@@ -219,4 +218,4 @@ transcript: ${opts.transcript}
 export {
   runCommand
 };
-//# sourceMappingURL=run-Q6BUXV66.js.map
+//# sourceMappingURL=run-MDGL27WL.js.map

package/dist/cli/run-MDGL27WL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cli/commands/run.ts"],"sourcesContent":["import type { WriteStream } from \"node:fs\";\nimport { stdin, stdout } from \"node:process\";\nimport { createInterface } from \"node:readline/promises\";\nimport {\n  defaultConfigPath,\n  isPlausibleKey,\n  loadApiKey,\n  loadBaseUrl,\n  normalizeMcpConfig,\n  readConfig,\n  saveApiKey,\n} from \"../../config.js\";\nimport { loadDotenv } from \"../../env.js\";\nimport { t } from \"../../i18n/index.js\";\nimport { CacheFirstLoop, DeepSeekClient, ImmutablePrefix } from \"../../index.js\";\nimport { McpClient } from \"../../mcp/client.js\";\nimport { preflightStdioSpec } from \"../../mcp/preflight.js\";\nimport { bridgeMcpTools } from \"../../mcp/registry.js\";\nimport { buildTransportFromSpec } from \"../../mcp/transport-from-spec.js\";\nimport { appendUsage } from \"../../telemetry/usage.js\";\nimport { ToolRegistry } from \"../../tools.js\";\nimport { openTranscriptFile, recordFromLoopEvent, writeRecord } from \"../../transcript/log.js\";\nimport { formatMcpLifecycleEvent } from \"../ui/mcp-lifecycle.js\";\nimport { formatMcpSlowToast } from \"../ui/mcp-toast.js\";\n\nexport interface RunOptions {\n  task: string;\n  model: string;\n  system: string;\n  budgetUsd?: number;\n  /** Per-turn repair-signal count required to escalate flash→pro. Undefined → loop default (3). */\n  failureThreshold?: number;\n  /** JSONL transcript path — lets `reasonix replay` / `diff` audit this run. */\n  transcript?: string;\n  /** Zero or more MCP server specs. Each: `\"name=cmd args...\"` or `\"cmd args...\"`. */\n  mcp?: string[];\n  /** Global prefix — only honored when a single anonymous server is given. */\n  mcpPrefix?: string;\n}\n\nasync function ensureApiKey(): Promise<string> {\n  const existing = loadApiKey();\n  if (existing) return existing;\n\n  if (!stdin.isTTY) {\n    process.stderr.write(t(\"run.missingApiKey\"));\n    process.exit(1);\n  }\n\n  process.stdout.write(\n    \"DeepSeek API key not configured.\\nGet one at https://platform.deepseek.com/api_keys\\n\",\n  );\n  const rl = createInterface({ input: stdin, output: stdout });\n  try {\n    while (true) {\n      const answer = (await rl.question(\"API key › \")).trim();\n      if (!answer) continue;\n      if (!isPlausibleKey(answer)) {\n        process.stdout.write(\"Key looks too short. Paste the full token (16+ chars, no spaces).\\n\");\n        continue;\n      }\n      saveApiKey(answer);\n      process.stdout.write(`Saved to ${defaultConfigPath()}\\n\\n`);\n      return answer;\n    }\n  } finally {\n    rl.close();\n  }\n}\n\nexport async function runCommand(opts: RunOptions): Promise<void> {\n  loadDotenv();\n  const apiKey = await ensureApiKey();\n  process.env.DEEPSEEK_API_KEY = apiKey;\n\n  // Optional MCP setup — mirrors chat's flow. Must happen before loop\n  // construction so the tools make it into the prefix.\n  const cfg = readConfig();\n  const normalizedSpecs = normalizeMcpConfig(\n    cfg,\n    opts.mcp && opts.mcp.length > 0 ? opts.mcp : undefined,\n  );\n  const clients: McpClient[] = [];\n  let tools: ToolRegistry | undefined;\n  let successCount = 0;\n  if (normalizedSpecs.length > 0) {\n    tools = new ToolRegistry();\n    for (const spec of normalizedSpecs) {\n      let label = \"anon\";\n      let mcp: McpClient | undefined;\n      try {\n        label = spec.name ?? \"anon\";\n        if (spec.disabled) {\n          process.stderr.write(`${formatMcpLifecycleEvent({ state: \"disabled\", name: label })}\\n`);\n          continue;\n        }\n        process.stderr.write(`${formatMcpLifecycleEvent({ state: \"handshake\", name: label })}\\n`);\n        const t0 = Date.now();\n        const prefix = spec.name\n          ? `${spec.name}_`\n          : normalizedSpecs.length === 1 && opts.mcpPrefix\n            ? opts.mcpPrefix\n            : \"\";\n        if (spec.transport === \"stdio\") preflightStdioSpec(spec);\n        const transport = buildTransportFromSpec(spec);\n        mcp = new McpClient({ transport });\n        await mcp.initialize();\n        const bridge = await bridgeMcpTools(mcp, {\n          registry: tools,\n          namePrefix: prefix,\n          serverName: label,\n          onSlow: (info) =>\n            process.stderr.write(\n              `${formatMcpSlowToast({ name: info.serverName, p95Ms: info.p95Ms, sampleSize: info.sampleSize })}\\n`,\n            ),\n        });\n        process.stderr.write(\n          `${formatMcpLifecycleEvent({\n            state: \"connected\",\n            name: label,\n            tools: bridge.registeredNames.length,\n            ms: Date.now() - t0,\n          })}\\n`,\n        );\n        clients.push(mcp);\n        successCount++;\n      } catch (err) {\n        // Non-fatal — skip and continue, same as `reasonix chat`. A\n        // one-shot `run` invocation with a broken MCP server otherwise\n        // fails the whole run over a side-concern tool the task might\n        // not even touch.\n        await mcp?.close().catch(() => undefined);\n        process.stderr.write(\n          `${formatMcpLifecycleEvent({ state: \"failed\", name: label, reason: (err as Error).message })}\\n  ${t(\"mcpLifecycle.failedSetupConfigHint\")}\\n`,\n        );\n      }\n    }\n    if (successCount === 0) tools = undefined;\n  }\n\n  const client = new DeepSeekClient({ baseUrl: loadBaseUrl() });\n  const prefix = new ImmutablePrefix({\n    system: opts.system,\n    toolSpecs: tools?.specs(),\n  });\n  const loop = new CacheFirstLoop({\n    client,\n    prefix,\n    tools,\n    model: opts.model,\n    budgetUsd: opts.budgetUsd,\n    failureThreshold: opts.failureThreshold,\n  });\n  const prefixHash = prefix.fingerprint;\n\n  let transcriptStream: WriteStream | null = null;\n  if (opts.transcript) {\n    transcriptStream = openTranscriptFile(opts.transcript, {\n      version: 1,\n      source: \"reasonix run\",\n      model: opts.model,\n      startedAt: new Date().toISOString(),\n    });\n    // Also persist the user turn itself (the loop's event stream starts with\n    // assistant output, not the prompt we're about to send).\n    writeRecord(transcriptStream, {\n      ts: new Date().toISOString(),\n      turn: 1,\n      role: \"user\",\n      content: opts.task,\n    });\n  }\n\n  try {\n    for await (const ev of loop.step(opts.task)) {\n      if (ev.role === \"assistant_delta\" && ev.content) process.stdout.write(ev.content);\n      if (ev.role === \"tool\") process.stdout.write(`\\n[tool ${ev.toolName}] ${ev.content}\\n`);\n      if (ev.role === \"error\") process.stderr.write(`\\n[error] ${ev.error}\\n`);\n      if (ev.role === \"done\") process.stdout.write(\"\\n\");\n      if (ev.role === \"assistant_final\" && ev.stats?.usage) {\n        // `reasonix run` is often used in CI / scripting — we want\n        // those turns to show up in `reasonix stats` too so the\n        // dashboard reflects all DeepSeek spend, not just TUI sessions.\n        appendUsage({ session: null, model: ev.stats.model, usage: ev.stats.usage });\n      }\n      // Persist every non-streaming event — deltas would flood the file and\n      // aren't useful for replay (replay renders final content, not keystrokes).\n      if (transcriptStream && ev.role !== \"assistant_delta\") {\n        writeRecord(transcriptStream, recordFromLoopEvent(ev, { model: opts.model, prefixHash }));\n      }\n    }\n  } finally {\n    transcriptStream?.end();\n  }\n\n  const s = loop.stats.summary();\n  process.stdout.write(\n    `\\n— turns:${s.turns} cache:${(s.cacheHitRatio * 100).toFixed(1)}% ` +\n      `cost:$${s.totalCostUsd.toFixed(6)} save-vs-claude:${s.savingsVsClaudePct.toFixed(1)}%\\n`,\n  );\n  if (opts.transcript) {\n    process.stdout.write(`\\ntranscript: ${opts.transcript}\\n`);\n    process.stdout.write(`  → npx reasonix replay ${opts.transcript}\\n`);\n  }\n\n  for (const c of clients) await c.close();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,OAAO,cAAc;AAC9B,SAAS,uBAAuB;AAsChC,eAAe,eAAgC;AAC7C,QAAM,WAAW,WAAW;AAC5B,MAAI,SAAU,QAAO;AAErB,MAAI,CAAC,MAAM,OAAO;AAChB,YAAQ,OAAO,MAAM,EAAE,mBAAmB,CAAC;AAC3C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,OAAO;AAAA,IACb;AAAA,EACF;AACA,QAAM,KAAK,gBAAgB,EAAE,OAAO,OAAO,QAAQ,OAAO,CAAC;AAC3D,MAAI;AACF,WAAO,MAAM;AACX,YAAM,UAAU,MAAM,GAAG,SAAS,iBAAY,GAAG,KAAK;AACtD,UAAI,CAAC,OAAQ;AACb,UAAI,CAAC,eAAe,MAAM,GAAG;AAC3B,gBAAQ,OAAO,MAAM,qEAAqE;AAC1F;AAAA,MACF;AACA,iBAAW,MAAM;AACjB,cAAQ,OAAO,MAAM,YAAY,kBAAkB,CAAC;AAAA;AAAA,CAAM;AAC1D,aAAO;AAAA,IACT;AAAA,EACF,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,eAAsB,WAAW,MAAiC;AAChE,aAAW;AACX,QAAM,SAAS,MAAM,aAAa;AAClC,UAAQ,IAAI,mBAAmB;AAI/B,QAAM,MAAM,WAAW;AACvB,QAAM,kBAAkB;AAAA,IACtB;AAAA,IACA,KAAK,OAAO,KAAK,IAAI,SAAS,IAAI,KAAK,MAAM;AAAA,EAC/C;AACA,QAAM,UAAuB,CAAC;AAC9B,MAAI;AACJ,MAAI,eAAe;AACnB,MAAI,gBAAgB,SAAS,GAAG;AAC9B,YAAQ,IAAI,aAAa;AACzB,eAAW,QAAQ,iBAAiB;AAClC,UAAI,QAAQ;AACZ,UAAI;AACJ,UAAI;AACF,gBAAQ,KAAK,QAAQ;AACrB,YAAI,KAAK,UAAU;AACjB,kBAAQ,OAAO,MAAM,GAAG,wBAAwB,EAAE,OAAO,YAAY,MAAM,MAAM,CAAC,CAAC;AAAA,CAAI;AACvF;AAAA,QACF;AACA,gBAAQ,OAAO,MAAM,GAAG,wBAAwB,EAAE,OAAO,aAAa,MAAM,MAAM,CAAC,CAAC;AAAA,CAAI;AACxF,cAAM,KAAK,KAAK,IAAI;AACpB,cAAMA,UAAS,KAAK,OAChB,GAAG,KAAK,IAAI,MACZ,gBAAgB,WAAW,KAAK,KAAK,YACnC,KAAK,YACL;AACN,YAAI,KAAK,cAAc,QAAS,oBAAmB,IAAI;AACvD,cAAM,YAAY,uBAAuB,IAAI;AAC7C,cAAM,IAAI,UAAU,EAAE,UAAU,CAAC;AACjC,cAAM,IAAI,WAAW;AACrB,cAAM,SAAS,MAAM,eAAe,KAAK;AAAA,UACvC,UAAU;AAAA,UACV,YAAYA;AAAA,UACZ,YAAY;AAAA,UACZ,QAAQ,CAAC,SACP,QAAQ,OAAO;AAAA,YACb,GAAG,mBAAmB,EAAE,MAAM,KAAK,YAAY,OAAO,KAAK,OAAO,YAAY,KAAK,WAAW,CAAC,CAAC;AAAA;AAAA,UAClG;AAAA,QACJ,CAAC;AACD,gBAAQ,OAAO;AAAA,UACb,GAAG,wBAAwB;AAAA,YACzB,OAAO;AAAA,YACP,MAAM;AAAA,YACN,OAAO,OAAO,gBAAgB;AAAA,YAC9B,IAAI,KAAK,IAAI,IAAI;AAAA,UACnB,CAAC,CAAC;AAAA;AAAA,QACJ;AACA,gBAAQ,KAAK,GAAG;AAChB;AAAA,MACF,SAAS,KAAK;AAKZ,cAAM,KAAK,MAAM,EAAE,MAAM,MAAM,MAAS;AACxC,gBAAQ,OAAO;AAAA,UACb,GAAG,wBAAwB,EAAE,OAAO,UAAU,MAAM,OAAO,QAAS,IAAc,QAAQ,CAAC,CAAC;AAAA,IAAO,EAAE,oCAAoC,CAAC;AAAA;AAAA,QAC5I;AAAA,MACF;AAAA,IACF;AACA,QAAI,iBAAiB,EAAG,SAAQ;AAAA,EAClC;AAEA,QAAM,SAAS,IAAI,eAAe,EAAE,SAAS,YAAY,EAAE,CAAC;AAC5D,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,QAAQ,KAAK;AAAA,IACb,WAAW,OAAO,MAAM;AAAA,EAC1B,CAAC;AACD,QAAM,OAAO,IAAI,eAAe;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK;AAAA,IAChB,kBAAkB,KAAK;AAAA,EACzB,CAAC;AACD,QAAM,aAAa,OAAO;AAE1B,MAAI,mBAAuC;AAC3C,MAAI,KAAK,YAAY;AACnB,uBAAmB,mBAAmB,KAAK,YAAY;AAAA,MACrD,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,OAAO,KAAK;AAAA,MACZ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAGD,gBAAY,kBAAkB;AAAA,MAC5B,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC3B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,KAAK;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,MAAI;AACF,qBAAiB,MAAM,KAAK,KAAK,KAAK,IAAI,GAAG;AAC3C,UAAI,GAAG,SAAS,qBAAqB,GAAG,QAAS,SAAQ,OAAO,MAAM,GAAG,OAAO;AAChF,UAAI,GAAG,SAAS,OAAQ,SAAQ,OAAO,MAAM;AAAA,QAAW,GAAG,QAAQ,KAAK,GAAG,OAAO;AAAA,CAAI;AACtF,UAAI,GAAG,SAAS,QAAS,SAAQ,OAAO,MAAM;AAAA,UAAa,GAAG,KAAK;AAAA,CAAI;AACvE,UAAI,GAAG,SAAS,OAAQ,SAAQ,OAAO,MAAM,IAAI;AACjD,UAAI,GAAG,SAAS,qBAAqB,GAAG,OAAO,OAAO;AAIpD,oBAAY,EAAE,SAAS,MAAM,OAAO,GAAG,MAAM,OAAO,OAAO,GAAG,MAAM,MAAM,CAAC;AAAA,MAC7E;AAGA,UAAI,oBAAoB,GAAG,SAAS,mBAAmB;AACrD,oBAAY,kBAAkB,oBAAoB,IAAI,EAAE,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF,UAAE;AACA,sBAAkB,IAAI;AAAA,EACxB;AAEA,QAAM,IAAI,KAAK,MAAM,QAAQ;AAC7B,UAAQ,OAAO;AAAA,IACb;AAAA,eAAa,EAAE,KAAK,WAAW,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,WACrD,EAAE,aAAa,QAAQ,CAAC,CAAC,mBAAmB,EAAE,mBAAmB,QAAQ,CAAC,CAAC;AAAA;AAAA,EACxF;AACA,MAAI,KAAK,YAAY;AACnB,YAAQ,OAAO,MAAM;AAAA,cAAiB,KAAK,UAAU;AAAA,CAAI;AACzD,YAAQ,OAAO,MAAM,gCAA2B,KAAK,UAAU;AAAA,CAAI;AAAA,EACrE;AAEA,aAAW,KAAK,QAAS,OAAM,EAAE,MAAM;AACzC;","names":["prefix"]}

package/dist/cli/{server-XGDBRWMB.js → server-27ARQXIZ.js}

@@ -13,7 +13,7 @@ import {
   listCheckpoints,
   loadCheckpoint,
   restoreCheckpoint
-} from "./chunk-3BXRZFWS.js";
+} from "./chunk-KLQTAZIY.js";
 import "./chunk-4QUNBQQ2.js";
 import {
   fetchSmitheryDetail,
@@ -24,26 +24,27 @@ import {
 } from "./chunk-XJXDHAES.js";
 import {
   registerSemanticSearchTool
-} from "./chunk-YYQAUTTN.js";
+} from "./chunk-MJ6W5UN3.js";
 import {
   BUILTIN_ALLOWLIST,
   lineDiff
-} from "./chunk-O52OLQL3.js";
+} from "./chunk-RDRC3XDT.js";
 import {
   PROJECT_MEMORY_FILE,
   SKILLS_DIRNAME,
   SKILL_FILE,
+  SkillStore,
   findProjectMemoryPath,
   parseFrontmatter,
   resolveProjectMemoryWritePath,
   validateSkillFrontmatter
-} from "./chunk-2K65GZBT.js";
+} from "./chunk-TEUDEGX2.js";
 import "./chunk-PLHAZOLZ.js";
 import {
   checkOllamaStatus,
   pullOllamaModel,
   startOllamaDaemon
-} from "./chunk-DOYHN4KB.js";
+} from "./chunk-LIR2HBQH.js";
 import {
   INDEX_DIR_NAME,
   buildIndex,
@@ -52,24 +53,34 @@ import {
   querySemantic,
   readIndexMeta,
   walkChunks
-} from "./chunk-XCGGEJTI.js";
+} from "./chunk-4CTDEJUF.js";
 import {
   HOOK_EVENTS,
   globalSettingsPath,
   loadHooks,
   projectSettingsPath
-} from "./chunk-7O5ALB4C.js";
+} from "./chunk-7CIGMZT3.js";
 import "./chunk-S4XVGLRW.js";
 import {
   listSessions,
   sessionPath,
   sessionsDir
 } from "./chunk-6PBZN4VI.js";
+import {
+  aggregateUsage,
+  bucketCacheHitRatio,
+  formatLogSize,
+  readUsageLog
+} from "./chunk-R3CTO2HM.js";
+import {
+  DEEPSEEK_PRICING,
+  cacheSavingsUsd
+} from "./chunk-ZZYBBX5N.js";
 import {
   getLanguage,
   getSupportedLanguages,
   setLanguage
-} from "./chunk-RE4RAVFF.js";
+} from "./chunk-CGDR2ELH.js";
 import {
   DEFAULT_INDEX_EXCLUDES,
   DEFAULT_MAX_FILE_BYTES,
@@ -80,7 +91,10 @@ import {
   loadIndexConfig,
   loadIndexUserConfig,
   loadProjectShellAllowed,
+  loadResolvedSkillPaths,
   loadSemanticEmbeddingUserConfig,
+  normalizeSkillPathEntries,
+  normalizeSkillPaths,
   readConfig,
   redactKey,
   redactSemanticEmbeddingConfig,
@@ -89,17 +103,7 @@ import {
   resolveSemanticEmbeddingConfig,
   saveSemanticEmbeddingConfig,
   writeConfig
-} from "./chunk-XPDVG52A.js";
-import {
-  aggregateUsage,
-  bucketCacheHitRatio,
-  formatLogSize,
-  readUsageLog
-} from "./chunk-HFEAY5DT.js";
-import {
-  DEEPSEEK_PRICING,
-  cacheSavingsUsd
-} from "./chunk-YQ6NTIIE.js";
+} from "./chunk-AVFXO2EZ.js";
 import {
   VERSION
 } from "./chunk-XXC2BYTV.js";
@@ -270,8 +274,13 @@ async function handleCheckpointCreate(method, _rest, body, ctx) {
   let paths;
   try {
     const { execSync: execSync2 } = await import("child_process");
+    const env = { ...process.env };
+    for (const k of Object.keys(env)) {
+      if (k.startsWith("GIT_")) delete env[k];
+    }
     const stdout = execSync2("git ls-files --cached --others --exclude-standard", {
       cwd: rootDir,
+      env,
       encoding: "utf8",
       maxBuffer: 10 * 1024 * 1024
     });
@@ -1164,7 +1173,7 @@ function findRegistryEntry(entries, name) {
 }
 async function handleMcp(method, rest, body, ctx, query = new URLSearchParams()) {
   if (method === "GET" && rest.length === 0) {
-    const servers = (ctx.mcpServers ?? []).map((s) => ({
+    const servers = (ctx.getMcpServers?.() ?? []).map((s) => ({
       label: s.label,
       spec: s.spec,
       toolCount: s.toolCount,
@@ -1971,7 +1980,7 @@ async function handleOverview(method, _rest, _body, ctx) {
     editMode: ctx.getEditMode?.() ?? null,
     planMode: ctx.getPlanMode?.() ?? null,
     pendingEdits: ctx.getPendingEditCount?.() ?? null,
-    mcpServerCount: ctx.mcpServers?.length ?? null,
+    mcpServerCount: ctx.getMcpServers?.().length ?? null,
     toolCount: ctx.tools ? ctx.tools.size : null,
     preset: cfg.preset ?? "auto",
     reasoningEffort: cfg.reasoningEffort ?? "max",
@@ -2737,6 +2746,14 @@ async function handleSettings(method, _rest, body, ctx) {
         proNext: live?.proArmed ?? false,
         budgetUsd: live?.budgetUsd ?? null,
         sessionSpendUsd: ctx.getStats?.()?.totalCostUsd ?? null,
+        skillPaths: normalizeSkillPaths(
+          cfg.skills?.paths ?? [],
+          ctx.getCurrentCwd?.() ?? process.cwd()
+        ),
+        skillPathEntries: normalizeSkillPathEntries(
+          cfg.skills?.paths ?? [],
+          ctx.getCurrentCwd?.() ?? process.cwd()
+        ),
         // Hint to the SPA which fields require restart.
         appliesAt: {
           apiKey: "next-session",
@@ -2746,7 +2763,8 @@ async function handleSettings(method, _rest, body, ctx) {
           search: "next-session",
           model: "next-turn",
           proNext: "next-turn",
-          budgetUsd: "live"
+          budgetUsd: "live",
+          skillPaths: "next-session"
         }
       }
     };
@@ -2836,6 +2854,17 @@ async function handleSettings(method, _rest, body, ctx) {
       }
       changed.push("budgetUsd");
     }
+    if (fields.skillPaths !== void 0) {
+      const raw = Array.isArray(fields.skillPaths) ? fields.skillPaths : typeof fields.skillPaths === "string" ? fields.skillPaths.split(",") : null;
+      if (!raw) {
+        return { status: 400, body: { error: "skillPaths must be a string or string[]" } };
+      }
+      cfg.skills = {
+        ...cfg.skills ?? {},
+        paths: normalizeSkillPaths(raw, ctx.getCurrentCwd?.() ?? process.cwd())
+      };
+      changed.push("skillPaths");
+    }
     if (changed.length > 0) {
       writeConfig(cfg, ctx.configPath);
       if (langPending) setLanguage(langPending);
@@ -2977,10 +3006,16 @@ async function handleSkills(method, rest, body, ctx) {
   if (method === "GET" && rest.length === 0) {
     const runs7d = countSubagentRuns(ctx.usageLogPath);
     const tag = (rows) => rows.map((r) => ({ ...r, runs7d: runs7d.get(r.name) ?? 0 }));
+    const store = new SkillStore({
+      projectRoot: cwd,
+      customSkillPaths: loadResolvedSkillPaths(cwd ?? process.cwd(), ctx.configPath)
+    });
+    const customRoots = store.customRoots();
     return {
       status: 200,
       body: {
         global: tag(listSkills(globalSkillsDir(), "global")),
+        custom: tag(customRoots.flatMap((root) => listSkills(root.dir, "custom"))),
         project: cwd ? tag(listSkills(projectSkillsDir(cwd), "project")) : [],
         builtin: [
           {
@@ -2998,7 +3033,8 @@ async function handleSkills(method, rest, body, ctx) {
         ],
         paths: {
           global: globalSkillsDir(),
-          project: cwd ? projectSkillsDir(cwd) : null
+          project: cwd ? projectSkillsDir(cwd) : null,
+          custom: customRoots
         }
       }
     };
@@ -3300,6 +3336,7 @@ async function handleApi(pathTail, method, body, ctx, query = new URLSearchParam
 }
 
 // src/server/index.ts
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "::1", "localhost"]);
 function mintToken() {
   return randomBytes(32).toString("hex");
 }
@@ -3439,6 +3476,12 @@ function startDashboardServer(ctx, opts = {}) {
       const addr = server.address();
       const finalPort = addr.port;
       const url = `http://${host}:${finalPort}/?token=${token}`;
+      if (!LOOPBACK_HOSTS.has(host)) {
+        process.stderr.write(
+          `\u25B2 Dashboard bound to ${host}:${finalPort} (non-loopback). The URL token is the only auth \u2014 keep it secret.
+`
+        );
+      }
       let closed = false;
       const close = () => new Promise((doneResolve) => {
         if (closed) return doneResolve();
@@ -3457,4 +3500,4 @@ export {
   readBody,
   startDashboardServer
 };
-//# sourceMappingURL=server-XGDBRWMB.js.map
+//# sourceMappingURL=server-27ARQXIZ.js.map