reasonix 0.48.0 → 0.48.1

package/dist/index.js

@@ -466,12 +466,11 @@ function memoryTypeDefaults(typeName, cfg = readConfig()) {
   if (found.expires) out.expires = found.expires;
   return out;
 }
-var DEFAULT_METASO_API_KEY = "mk-E384C1DD5E8501BB7EFE27C949AFDE5B";
 function loadMetasoApiKey(path2 = defaultConfigPath()) {
-  if (process.env.METASO_API_KEY) return process.env.METASO_API_KEY;
+  if (process.env.METASO_API_KEY) return process.env.METASO_API_KEY.trim();
   const cfg = readConfig(path2).metasoApiKey;
   if (cfg && typeof cfg === "string" && cfg.trim()) return cfg.trim();
-  return DEFAULT_METASO_API_KEY;
+  return void 0;
 }
 function loadTavilyApiKey(path2 = defaultConfigPath()) {
   if (process.env.TAVILY_API_KEY) return process.env.TAVILY_API_KEY.trim();
@@ -669,6 +668,11 @@ function addProjectShellAllowed(rootDir, prefix, path2 = defaultConfigPath()) {
   cfg.projects[key].shellAllowed = [...existing, trimmed];
   writeConfig(cfg, path2);
 }
+function projectHooksTrusted(rootDir, path2 = defaultConfigPath()) {
+  const cfg = readConfig(path2);
+  const key = findProjectKey(cfg, rootDir);
+  return key !== void 0 && cfg.projects?.[key]?.hooksTrusted === true;
+}
 function loadProjectPathAllowed(rootDir, path2 = defaultConfigPath()) {
   const cfg = readConfig(path2);
   const key = findProjectKey(cfg, rootDir);
@@ -1766,7 +1770,9 @@ var EN = {
     editHistoryHelpShow: "/show <id>            \u2192 per-file summary    \xB7    /show <id> <path>  \u2192 full diff of one file",
     editHistoryHelpUndo: "/undo                 \u2192 newest non-undone   \xB7    /undo <id> [path]  \u2192 target a specific batch or file",
     editHistoryAlreadyReverted: "(already reverted \u2014 /history shows the batch-level status)",
-    editHistoryRevertFile: "/undo {id} {path}  \u2192 revert just this file"
+    editHistoryRevertFile: "/undo {id} {path}  \u2192 revert just this file",
+    mcpFailed: "MCP {name} failed",
+    mcpWarn: "MCP {name} warn"
   },
   hooks: {
     head: "hook {tag} `{cmd}` {decision}{truncTag}",
@@ -1789,9 +1795,9 @@ var EN = {
     abortedAtIter: "aborted at iter {iter} \u2014 stopped without producing a summary (press \u2191 + Enter or /retry to resume)",
     toolUploadStatus: "tool result uploaded \xB7 model thinking before next response\u2026",
     preflightTruncateStatus: "preflight: context near full, truncating oldest history\u2026",
-    preflightTruncated: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \u2014 truncated {beforeMessages} messages \u2192 {afterMessages}. Sending.",
-    preflightTruncatedStillFull: "preflight: request still ~{estimate}/{ctxMax} tokens ({pct}%) after truncating {beforeMessages} messages \u2192 {afterMessages}. DeepSeek will likely 400. Run /clear or /new to start fresh.",
-    preflightNoFold: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) and nothing left to truncate \u2014 DeepSeek will likely 400. Run /clear or /new to start fresh.",
+    preflightTruncated: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB \u2014 truncated {beforeMessages} messages \u2192 {afterMessages}. Sending.",
+    preflightTruncatedStillFull: "preflight: request still ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB after truncating {beforeMessages} messages \u2192 {afterMessages}. DeepSeek will likely 400. Run /clear or /new to start fresh.",
+    preflightNoFold: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB and nothing left to truncate \u2014 DeepSeek will likely 400. Run /clear or /new to start fresh.",
     flashEscalation: "\u21E7 flash requested escalation \u2014 retrying this turn on {model}{reasonSuffix}",
     harvestStatus: "extracting plan state from reasoning\u2026",
     repeatToolCallWarning: "Caught a repeated tool call \u2014 let the model see the issue and retry with a different approach.",
@@ -2078,6 +2084,12 @@ var EN = {
       statusMcp: "  mcp     {servers} server(s), {tools} tool(s) in registry",
       statusEdits: "  edits   {count} pending (/apply to commit, /discard to drop)",
       statusPlan: "  plan    ON \u2014 writes gated (submit_plan + approval)",
+      statusLifecycle: "  lifecycle {mode}/{state} \xB7 {progress}{evidence}",
+      lifecycleNoPlan: "no plan",
+      lifecycleEvidencePending: "evidence pending",
+      lifecycleRejected: "lifecycle: {tool} blocked in {state} \u2014 next: {next}",
+      lifecycleEvidenceRejected: "lifecycle: step {stepId} needs evidence \u2014 next: {next}",
+      lifecycleRepeatedRejected: "lifecycle: repeated {tool} rejection \u2014 do not retry identical args",
       statusModeYolo: "  mode    YOLO \u2014 edits + shell auto-run with no prompt (/undo still rolls back \xB7 Shift+Tab to flip)",
       statusModeAuto: "  mode    AUTO \u2014 edits apply immediately (u to undo within 5s \xB7 Shift+Tab to flip)",
       statusModeReview: "  mode    review \u2014 edits queue for /apply or y  (Shift+Tab to flip)",
@@ -2248,7 +2260,8 @@ var EN = {
     evt: " evt",
     editsLabel: "edits:",
     mcpLoading: "MCP",
-    ctx: "ctx"
+    ctx: "ctx",
+    shortcutsHint: "Ctrl+P shortcuts"
   },
   editMode: {
     plan: "PLAN MODE",
@@ -2470,7 +2483,8 @@ var EN = {
     endpointMustBeHttp: "web_search: SearXNG endpoint must be http(s), got {protocol} \u2014 try: set a valid URL with /search-endpoint http://host:port",
     cannotReach: "web_search: Cannot reach SearXNG server at {endpoint} \u2014 try: install and start SearXNG (https://github.com/searxng/searxng, e.g. `docker run -d -p 8080:8080 searxng/searxng`), or switch to another engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
     searxngNoResults: "web_search: 0 results but SearXNG response doesn't look like an empty results page ({chars} chars) \u2014 try: rephrase the query with simpler terms, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
-    metasoDailyLimit: "web_search: daily search limit reached for the default API key \u2014 set your own METASO_API_KEY env var or get one at https://metaso.cn/search-api/playground",
+    metasoMissingKey: "web_search: Metaso requires an API key \u2014 set METASO_API_KEY or configure one with /search-engine metaso <key>. Get one at https://metaso.cn/search-api/playground",
+    metasoDailyLimit: "web_search: Metaso daily search limit reached \u2014 set METASO_API_KEY or get a key at https://metaso.cn/search-api/playground",
     metasoUnauthorized: "web_search: Metaso API key rejected \u2014 check METASO_API_KEY or get one at https://metaso.cn/search-api/playground",
     metasoRateLimit: "web_search: Metaso rate-limited \u2014 wait and retry, or get your own API key at https://metaso.cn/search-api/playground",
     metasoServerError: "web_search: Metaso server error ({status}) \u2014 try again later, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
@@ -2662,7 +2676,13 @@ var EN = {
     noResources: "No resources on any connected MCP server (or no servers connected). `/mcp` shows the current set.",
     readOne: "Read one: `/resource <uri>` \u2014 or use Tab in the picker.",
     noPrompts: "No prompts on any connected MCP server (or no servers connected). `/mcp` shows the current set.",
-    fetchOne: "Fetch one: `/prompt <name>` \u2014 args are not supported yet; prompts with required args will surface an error from the server."
+    fetchOne: "Fetch one: `/prompt <name>` \u2014 args are not supported yet; prompts with required args will surface an error from the server.",
+    noServerForResource: 'no server exposes resource "{name}"',
+    resourceHint: "`/resource` with no arg lists what's available.",
+    readFailed: "readResource failed",
+    noServerForPrompt: 'no server exposes prompt "{name}"',
+    promptHint: "`/prompt` with no arg lists what's available.",
+    fetchFailed: "getPrompt failed"
   },
   mcpLifecycle: {
     handshake: "handshake\u2026",
@@ -2675,7 +2695,9 @@ var EN = {
     disabledDetail: "via /mcp disable {name}",
     failedSetupHint: "\u2192 run `reasonix setup` to remove this entry, or fix the underlying issue (missing npm package, network, etc.).",
     failedSetupConfigHint: "\u2192 run `reasonix setup` to remove broken entries from your saved config.",
-    abortedHint: "MCP startup aborted \u2014 {count} server(s) skipped. Run /mcp to retry once you've fixed the underlying issue."
+    abortedHint: "MCP startup aborted \u2014 {count} server(s) skipped. Run /mcp to retry once you've fixed the underlying issue.",
+    toolsReady: "tools ready",
+    warnLabel: "warn"
   },
   checkpointPicker: {
     title: "restore a checkpoint \u2014 {workspace}",
@@ -2721,6 +2743,41 @@ var EN = {
     noRecords: "no records",
     untracked: "(untracked)",
     churned: "(churned \xD7{count})"
+  },
+  builtinSkills: {
+    explore: "Explore the codebase in an isolated subagent \u2014 wide-net read-only investigation that returns one distilled answer. Best for: 'find all places that\u2026', 'how does X work across the project', 'survey the code for Y'.",
+    research: "Research a question by combining web search + code reading in an isolated subagent. Best for: 'is X feature supported by lib Y', 'what\u2019s the canonical way to do Z', 'compare our impl against the spec'.",
+    review: "Review the pending changes (current branch diff by default) in an isolated subagent \u2014 flags correctness, security, missing tests, hidden behavior changes; reports verdict + per-issue file:line. Read-only; the parent decides what to act on.",
+    securityReview: "Security-focused review of the current branch diff in an isolated subagent \u2014 flags injection/authz/secrets/deserialization/path-traversal/crypto issues, severity-tagged. Read-only. Use when shipping changes that touch auth, input parsing, file IO, or external requests.",
+    test: "Run the project\u2019s test suite, diagnose failures, propose SEARCH/REPLACE fixes, re-run until green (or stop after 2 fix attempts on the same failure). Inlined \u2014 runs in the parent loop so you see the edit blocks and can /apply them. Detects npm/pnpm/yarn/pytest/go/cargo."
+  },
+  shortcutsHelp: {
+    title: "Shortcuts",
+    groupInput: "Input",
+    groupNavigation: "Navigation",
+    groupSession: "Session",
+    groupSystem: "System",
+    descEnter: "Send message",
+    descShiftEnter: "New line",
+    descCtrlU: "Clear input",
+    descCtrlW: "Delete word",
+    descCtrlP: "Toggle shortcut panel",
+    descCtrlX: "Open in editor",
+    descArrows: "Input history",
+    descPgUpDown: "Scroll page",
+    descCtrlL: "Clear screen",
+    descCtrlB: "Toggle sidebar",
+    descNewSession: "New session",
+    descListSessions: "List sessions",
+    descSwitchModel: "Switch model",
+    descSwitchPreset: "Switch preset",
+    descSwitchTheme: "Switch theme",
+    descCtrlC: "Quit",
+    descEsc: "Stop / Cancel",
+    descCtrlR: "Toggle verbose",
+    descCtrlO: "Expand stream",
+    descHelp: "Show all commands",
+    descShiftTab: "Switch edit mode"
   }
 };
 
@@ -3324,7 +3381,9 @@ var zhCN = {
     editHistoryHelpShow: "/show <id>            \u2192 \u6587\u4EF6\u6458\u8981    \xB7    /show <id> <path>  \u2192 \u67D0\u4E2A\u6587\u4EF6\u7684\u5B8C\u6574 diff",
     editHistoryHelpUndo: "/undo                 \u2192 \u6700\u65B0\u7684\u672A\u64A4\u9500\u9879   \xB7    /undo <id> [path]  \u2192 \u6307\u5B9A\u6279\u6B21\u6216\u6587\u4EF6",
     editHistoryAlreadyReverted: "\uFF08\u5DF2\u64A4\u9500 \u2014 /history \u663E\u793A\u6279\u6B21\u7EA7\u72B6\u6001\uFF09",
-    editHistoryRevertFile: "/undo {id} {path}  \u2192 \u4EC5\u8FD8\u539F\u6B64\u6587\u4EF6"
+    editHistoryRevertFile: "/undo {id} {path}  \u2192 \u4EC5\u8FD8\u539F\u6B64\u6587\u4EF6",
+    mcpFailed: "MCP {name} \u5931\u8D25",
+    mcpWarn: "MCP {name} \u8B66\u544A"
   },
   hooks: {
     head: "\u94A9\u5B50 {tag} `{cmd}` {decision}{truncTag}",
@@ -3347,9 +3406,9 @@ var zhCN = {
     abortedAtIter: "\u5728\u7B2C {iter} \u6B21\u5DE5\u5177\u8C03\u7528\u5904\u4E2D\u65AD \u2014 \u672A\u751F\u6210\u603B\u7ED3\u5373\u505C\u6B62\uFF08\u6309 \u2191 + Enter \u6216 /retry \u6062\u590D\uFF09",
     toolUploadStatus: "\u5DE5\u5177\u7ED3\u679C\u5DF2\u4E0A\u4F20 \xB7 \u6A21\u578B\u5728\u751F\u6210\u4E0B\u4E00\u6761\u54CD\u5E94\u524D\u601D\u8003\u4E2D\u2026",
     preflightTruncateStatus: "\u9884\u68C0\uFF1A\u4E0A\u4E0B\u6587\u63A5\u8FD1\u4E0A\u9650\uFF0C\u6B63\u5728\u88C1\u526A\u6700\u65E9\u5386\u53F2\u2026",
-    preflightTruncated: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u2014 \u5DF2\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages}\u3002\u53D1\u9001\u4E2D\u3002",
-    preflightTruncatedStillFull: "\u9884\u68C0\uFF1A\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages} \u540E\uFF0C\u8BF7\u6C42\u4ECD\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
-    preflightNoFold: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u4E14\u6CA1\u6709\u53EF\u88C1\u526A\u7684\u5185\u5BB9 \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
+    preflightTruncated: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u2014 \u5DF2\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages}\u3002\u53D1\u9001\u4E2D\u3002",
+    preflightTruncatedStillFull: "\u9884\u68C0\uFF1A\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages} \u540E\uFF0C\u8BF7\u6C42\u4ECD\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
+    preflightNoFold: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u4E14\u6CA1\u6709\u53EF\u88C1\u526A\u7684\u5185\u5BB9 \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
     flashEscalation: "\u21E7 flash \u8BF7\u6C42\u5347\u7EA7 \u2014 \u672C\u8F6E\u6539\u7528 {model}{reasonSuffix}",
     harvestStatus: "\u6B63\u5728\u4ECE\u63A8\u7406\u8FC7\u7A0B\u63D0\u53D6\u8BA1\u5212\u72B6\u6001\u2026",
     repeatToolCallWarning: "\u62E6\u622A\u5230\u91CD\u590D\u5DE5\u5177\u8C03\u7528 \u2014 \u8BA9\u6A21\u578B\u5BDF\u89C9\u95EE\u9898\u5E76\u6362\u79CD\u65B9\u5F0F\u91CD\u8BD5\u3002",
@@ -3636,6 +3695,12 @@ var zhCN = {
       statusMcp: "  MCP     {servers} \u4E2A\u670D\u52A1\u5668\uFF0C\u6CE8\u518C\u8868\u4E2D {tools} \u4E2A\u5DE5\u5177",
       statusEdits: "  \u7F16\u8F91    {count} \u4E2A\u5F85\u5904\u7406\uFF08/apply \u63D0\u4EA4\uFF0C/discard \u4E22\u5F03\uFF09",
       statusPlan: "  \u8BA1\u5212    \u5F00\u542F \u2014 \u5199\u5165\u53D7\u9650\uFF08submit_plan + \u5BA1\u6279\uFF09",
+      statusLifecycle: "  \u751F\u547D\u5468\u671F {mode}/{state} \xB7 {progress}{evidence}",
+      lifecycleNoPlan: "\u6682\u65E0\u8BA1\u5212",
+      lifecycleEvidencePending: "\u7B49\u5F85 evidence",
+      lifecycleRejected: "lifecycle\uFF1A{tool} \u5728 {state} \u72B6\u6001\u88AB\u62E6\u622A \u2014 \u4E0B\u4E00\u6B65\uFF1A{next}",
+      lifecycleEvidenceRejected: "lifecycle\uFF1A\u6B65\u9AA4 {stepId} \u9700\u8981 evidence \u2014 \u4E0B\u4E00\u6B65\uFF1A{next}",
+      lifecycleRepeatedRejected: "lifecycle\uFF1A{tool} \u88AB\u91CD\u590D\u62E6\u622A \u2014 \u4E0D\u8981\u7528\u76F8\u540C\u53C2\u6570\u53CD\u590D\u91CD\u8BD5",
       statusModeYolo: "  \u6A21\u5F0F    YOLO \u2014 \u7F16\u8F91 + shell \u81EA\u52A8\u8FD0\u884C\uFF0C\u65E0\u63D0\u793A\uFF08/undo \u4ECD\u53EF\u56DE\u6EDA \xB7 Shift+Tab \u5207\u6362\uFF09",
       statusModeAuto: "  \u6A21\u5F0F    AUTO \u2014 \u7F16\u8F91\u7ACB\u5373\u5E94\u7528\uFF085 \u79D2\u5185\u6309 u \u64A4\u6D88 \xB7 Shift+Tab \u5207\u6362\uFF09",
       statusModeReview: "  \u6A21\u5F0F    review \u2014 \u7F16\u8F91\u6392\u961F\u7B49\u5F85 /apply \u6216 y\uFF08Shift+Tab \u5207\u6362\uFF09",
@@ -3806,7 +3871,8 @@ var zhCN = {
     evt: " \u4E8B\u4EF6",
     editsLabel: "\u7F16\u8F91:",
     mcpLoading: "MCP",
-    ctx: "\u4E0A\u4E0B\u6587"
+    ctx: "\u4E0A\u4E0B\u6587",
+    shortcutsHint: "Ctrl+P \u5FEB\u6377\u952E"
   },
   editMode: {
     plan: "\u8BA1\u5212",
@@ -4028,7 +4094,8 @@ var zhCN = {
     endpointMustBeHttp: "web_search: SearXNG \u7AEF\u70B9\u5FC5\u987B\u662F http(s) \u534F\u8BAE\uFF0C\u5F53\u524D\u4E3A {protocol} \u2014 try: \u4F7F\u7528 /search-endpoint http://host:port \u8BBE\u7F6E\u6709\u6548\u7684 URL",
     cannotReach: "web_search: \u65E0\u6CD5\u8BBF\u95EE SearXNG \u670D\u52A1\u5668 {endpoint} \u2014 try: \u5B89\u88C5\u5E76\u542F\u52A8 SearXNG\uFF08https://github.com/searxng/searxng\uFF0C\u4F8B\u5982 `docker run -d -p 8080:8080 searxng/searxng`\uFF09\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     searxngNoResults: "web_search: \u8FD4\u56DE 0 \u6761\u7ED3\u679C\u4F46 SearXNG \u54CD\u5E94\u770B\u8D77\u6765\u4E0D\u662F\u6B63\u5E38\u7A7A\u7ED3\u679C\u9875\uFF08{chars} \u5B57\u7B26\uFF09\u2014 try: \u4F7F\u7528\u66F4\u7B80\u5355\u7684\u5173\u952E\u8BCD\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
-    metasoDailyLimit: "web_search: \u9ED8\u8BA4 API \u5BC6\u94A5\u7684\u6BCF\u65E5\u641C\u7D22\u6B21\u6570\u5DF2\u8FBE\u4E0A\u9650 \u2014 \u8BBE\u7F6E METASO_API_KEY \u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u81EA\u5DF1\u7684\u5BC6\u94A5",
+    metasoMissingKey: "web_search: Metaso \u9700\u8981 API \u5BC6\u94A5 \u2014 \u8BBE\u7F6E METASO_API_KEY\uFF0C\u6216\u4F7F\u7528 /search-engine metaso <key> \u914D\u7F6E\uFF1B\u53EF\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
+    metasoDailyLimit: "web_search: Metaso \u6BCF\u65E5\u641C\u7D22\u6B21\u6570\u5DF2\u8FBE\u4E0A\u9650 \u2014 \u8BBE\u7F6E METASO_API_KEY\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
     metasoUnauthorized: "web_search: Metaso API \u5BC6\u94A5\u88AB\u62D2\u7EDD \u2014 \u68C0\u67E5 METASO_API_KEY\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
     metasoRateLimit: "web_search: Metaso \u8BF7\u6C42\u9891\u7387\u9650\u5236 \u2014 \u7B49\u5F85\u540E\u91CD\u8BD5\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u81EA\u5DF1\u7684\u5BC6\u94A5",
     metasoServerError: "web_search: Metaso \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
@@ -4220,7 +4287,13 @@ var zhCN = {
     noResources: "\u6CA1\u6709\u4EFB\u4F55\u5DF2\u8FDE\u63A5 MCP \u670D\u52A1\u5668\u4E0A\u7684\u8D44\u6E90\uFF08\u6216\u65E0\u670D\u52A1\u5668\u8FDE\u63A5\uFF09\u3002`/mcp` \u663E\u793A\u5F53\u524D\u5217\u8868\u3002",
     readOne: "\u8BFB\u53D6\uFF1A`/resource <uri>` \u2014 \u6216\u5728\u9009\u62E9\u5668\u4E2D\u4F7F\u7528 Tab \u952E\u3002",
     noPrompts: "\u6CA1\u6709\u4EFB\u4F55\u5DF2\u8FDE\u63A5 MCP \u670D\u52A1\u5668\u4E0A\u7684\u63D0\u793A\uFF08\u6216\u65E0\u670D\u52A1\u5668\u8FDE\u63A5\uFF09\u3002`/mcp` \u663E\u793A\u5F53\u524D\u5217\u8868\u3002",
-    fetchOne: "\u83B7\u53D6\uFF1A`/prompt <name>` \u2014 \u6682\u4E0D\u652F\u6301\u53C2\u6570\uFF1B\u5E26\u5FC5\u9700\u53C2\u6570\u7684\u63D0\u793A\u5C06\u8FD4\u56DE\u670D\u52A1\u5668\u9519\u8BEF\u3002"
+    fetchOne: "\u83B7\u53D6\uFF1A`/prompt <name>` \u2014 \u6682\u4E0D\u652F\u6301\u53C2\u6570\uFF1B\u5E26\u5FC5\u9700\u53C2\u6570\u7684\u63D0\u793A\u5C06\u8FD4\u56DE\u670D\u52A1\u5668\u9519\u8BEF\u3002",
+    noServerForResource: '\u6CA1\u6709\u670D\u52A1\u5668\u66B4\u9732\u8D44\u6E90 "{name}"',
+    resourceHint: "`/resource` \u4E0D\u5E26\u53C2\u6570\u53EF\u67E5\u770B\u53EF\u7528\u5217\u8868\u3002",
+    readFailed: "\u8BFB\u53D6\u8D44\u6E90\u5931\u8D25",
+    noServerForPrompt: '\u6CA1\u6709\u670D\u52A1\u5668\u66B4\u9732 prompt "{name}"',
+    promptHint: "`/prompt` \u4E0D\u5E26\u53C2\u6570\u53EF\u67E5\u770B\u53EF\u7528\u5217\u8868\u3002",
+    fetchFailed: "\u83B7\u53D6 prompt \u5931\u8D25"
   },
   mcpLifecycle: {
     handshake: "\u63E1\u624B\u4E2D\u2026",
@@ -4233,7 +4306,9 @@ var zhCN = {
     disabledDetail: "\u901A\u8FC7 /mcp disable {name}",
     failedSetupHint: "\u2192 \u8FD0\u884C `reasonix setup` \u79FB\u9664\u6B64\u6761\u76EE\uFF0C\u6216\u4FEE\u590D\u5E95\u5C42\u95EE\u9898\uFF08\u7F3A\u5C11 npm \u5305\u3001\u7F51\u7EDC\u7B49\uFF09\u3002",
     failedSetupConfigHint: "\u2192 \u8FD0\u884C `reasonix setup` \u4ECE\u5DF2\u4FDD\u5B58\u914D\u7F6E\u4E2D\u79FB\u9664\u635F\u574F\u7684\u6761\u76EE\u3002",
-    abortedHint: "\u5DF2\u4E2D\u65AD MCP \u542F\u52A8 \u2014 \u8DF3\u8FC7 {count} \u4E2A\u670D\u52A1\u5668\u3002\u95EE\u9898\u4FEE\u590D\u540E\u7528 /mcp \u91CD\u65B0\u8FDE\u63A5\u3002"
+    abortedHint: "\u5DF2\u4E2D\u65AD MCP \u542F\u52A8 \u2014 \u8DF3\u8FC7 {count} \u4E2A\u670D\u52A1\u5668\u3002\u95EE\u9898\u4FEE\u590D\u540E\u7528 /mcp \u91CD\u65B0\u8FDE\u63A5\u3002",
+    toolsReady: "\u5DE5\u5177\u5C31\u7EEA",
+    warnLabel: "\u8B66\u544A"
   },
   checkpointPicker: {
     title: "\u6062\u590D\u68C0\u67E5\u70B9 \u2014 {workspace}",
@@ -4279,6 +4354,41 @@ var zhCN = {
     noRecords: "\u65E0\u8BB0\u5F55",
     untracked: "\uFF08\u672A\u8FFD\u8E2A\uFF09",
     churned: "\uFF08\u5DF2\u53D8\u66F4 \xD7{count}\uFF09"
+  },
+  builtinSkills: {
+    explore: "\u5728\u9694\u79BB\u5B50 agent \u4E2D\u63A2\u7D22\u4EE3\u7801\u5E93 \u2014 \u53EA\u8BFB\u5BBD\u7F51\u8C03\u67E5\uFF0C\u8FD4\u56DE\u4E00\u4E2A\u7CBE\u70BC\u7ED3\u8BBA",
+    research: "\u7ED3\u5408\u4EE3\u7801\u9605\u8BFB\u4E0E\u7F51\u7EDC\u641C\u7D22\u8FDB\u884C\u8C03\u7814 \u2014 \u5728\u9694\u79BB\u5B50 agent \u4E2D\u7EFC\u5408\u4FE1\u606F\u5E76\u8FD4\u56DE\u7ED3\u8BBA",
+    review: "\u5BA1\u67E5\u5F53\u524D\u5206\u652F\u53D8\u66F4 \u2014 \u68C0\u67E5\u6B63\u786E\u6027\u3001\u5B89\u5168\u6027\u3001\u7F3A\u5931\u6D4B\u8BD5\u3001\u9690\u85CF\u884C\u4E3A\u53D8\u66F4",
+    securityReview: "\u5B89\u5168\u4E13\u9879\u5BA1\u67E5 \u2014 \u6807\u8BB0\u6CE8\u5165/\u8BA4\u8BC1/\u5BC6\u94A5/\u53CD\u5E8F\u5217\u5316/\u8DEF\u5F84\u7A7F\u8D8A/\u52A0\u5BC6\u95EE\u9898",
+    test: "\u8FD0\u884C\u6D4B\u8BD5\u5957\u4EF6\u5E76\u8BCA\u65AD\u5931\u8D25 \u2014 \u81EA\u52A8\u8BC6\u522B\u6D4B\u8BD5\u6846\u67B6\uFF0C\u4FEE\u590D\u540E\u91CD\u8DD1\u76F4\u81F3\u901A\u8FC7"
+  },
+  shortcutsHelp: {
+    title: "\u5FEB\u6377\u952E",
+    groupInput: "\u8F93\u5165",
+    groupNavigation: "\u5BFC\u822A",
+    groupSession: "\u4F1A\u8BDD",
+    groupSystem: "\u7CFB\u7EDF",
+    descEnter: "\u53D1\u9001\u6D88\u606F",
+    descShiftEnter: "\u6362\u884C",
+    descCtrlU: "\u6E05\u7A7A\u8F93\u5165",
+    descCtrlW: "\u5220\u9664\u5355\u8BCD",
+    descCtrlP: "\u6253\u5F00/\u5173\u95ED\u5FEB\u6377\u952E\u9762\u677F",
+    descCtrlX: "\u5728\u7F16\u8F91\u5668\u4E2D\u6253\u5F00",
+    descArrows: "\u6D4F\u89C8\u8F93\u5165\u5386\u53F2",
+    descPgUpDown: "\u7FFB\u9875",
+    descCtrlL: "\u6E05\u5C4F",
+    descCtrlB: "\u5207\u6362\u4FA7\u8FB9\u680F",
+    descNewSession: "\u65B0\u5EFA\u4F1A\u8BDD",
+    descListSessions: "\u5217\u51FA\u4F1A\u8BDD",
+    descSwitchModel: "\u5207\u6362\u6A21\u578B",
+    descSwitchPreset: "\u5207\u6362\u9884\u8BBE",
+    descSwitchTheme: "\u5207\u6362\u4E3B\u9898",
+    descCtrlC: "\u9000\u51FA",
+    descEsc: "\u505C\u6B62/\u53D6\u6D88",
+    descCtrlR: "\u5207\u6362\u8BE6\u7EC6\u6A21\u5F0F",
+    descCtrlO: "\u5C55\u5F00\u6D41\u5F0F\u8F93\u51FA",
+    descHelp: "\u663E\u793A\u6240\u6709\u547D\u4EE4",
+    descShiftTab: "\u5207\u6362\u7F16\u8F91\u6A21\u5F0F"
   }
 };
 
@@ -4354,7 +4464,7 @@ function readSettingsFile(path2) {
 }
 function loadHooks(opts = {}) {
   const out = [];
-  if (opts.projectRoot) {
+  if (opts.projectRoot && (opts.trustProjectHooks === true || projectHooksTrusted(opts.projectRoot, opts.configPath))) {
     const projPath = projectSettingsPath(opts.projectRoot);
     const settings2 = readSettingsFile(projPath);
     if (settings2) appendResolved(out, settings2, "project", projPath);
@@ -5916,14 +6026,16 @@ function round(n, digits) {
 }
 
 // src/context-manager.ts
-var HISTORY_FOLD_THRESHOLD = 0.5;
+var HISTORY_FOLD_THRESHOLD = 0.75;
 var HISTORY_FOLD_TAIL_FRACTION = 0.2;
-var HISTORY_FOLD_AGGRESSIVE_THRESHOLD = 0.7;
+var HISTORY_FOLD_AGGRESSIVE_THRESHOLD = 0.78;
 var HISTORY_FOLD_AGGRESSIVE_TAIL_FRACTION = 0.1;
 var HISTORY_FOLD_MIN_SAVINGS_FRACTION = 0.3;
 var FORCE_SUMMARY_THRESHOLD = 0.8;
 var PREFLIGHT_EMERGENCY_THRESHOLD = 0.95;
 var PREFLIGHT_MECHANICAL_TARGET_FRACTION = 0.7;
+var MAX_BODY_BYTES = 7e5;
+var MAX_BODY_BYTES_TARGET = 5e5;
 var HISTORY_FOLD_SUMMARY_TIMEOUT_MS = 15e3;
 var HISTORY_FOLD_MARKER = "[CONVERSATION HISTORY SUMMARY \u2014 earlier turns folded for context efficiency]\n\n";
 var SKILL_PIN_MEMO_HEADER = "[Active skill memos \u2014 preserved verbatim across the fold:]";
@@ -5990,14 +6102,25 @@ var ContextManager = class {
     }
     return { kind: "none", ...base };
   }
-  /** Local-side preflight before sending a request — catches oversized payloads early. */
+  /** Local-side preflight before sending a request — catches oversized payloads early.
+   * Two independent signals trip mechanical truncate: token estimate above the context-window
+   * fraction, OR JSON body bytes above the gateway limit (see `MAX_BODY_BYTES`). */
   decidePreflight(messages, toolSpecs, model) {
     const ctxMax = DEEPSEEK_CONTEXT_TOKENS[model] ?? DEFAULT_CONTEXT_TOKENS;
     const estimate = estimateRequestTokens(messages, toolSpecs ?? null, true);
+    const estimateBytes = Buffer.byteLength(JSON.stringify(messages), "utf8");
+    const tokensOver = estimate / ctxMax > PREFLIGHT_EMERGENCY_THRESHOLD;
+    const bytesOver = estimateBytes > MAX_BODY_BYTES;
+    let trigger = "none";
+    if (tokensOver && bytesOver) trigger = "both";
+    else if (tokensOver) trigger = "tokens";
+    else if (bytesOver) trigger = "bytes";
     return {
-      needsAction: estimate / ctxMax > PREFLIGHT_EMERGENCY_THRESHOLD,
+      needsAction: tokensOver || bytesOver,
       estimateTokens: estimate,
-      ctxMax
+      estimateBytes,
+      ctxMax,
+      trigger
     };
   }
   /** Replace older turns with one summary message; keep tail within keepRecentTokens budget. */
@@ -6050,10 +6173,13 @@ ${pinnedBodies.join("\n\n")}` : "";
       summaryChars: summary.content.length
     };
   }
-  /** Pure local emergency compaction for preflight: drop oldest log entries and keep a valid tail. */
+  /** Pure local emergency compaction for preflight: drop oldest log entries and keep a valid tail.
+   * Bounded by tokens AND bytes — bytes matter because DeepSeek's gateway 400s on bodies past
+   * `MAX_BODY_BYTES` even when the token budget is far from exhausted. */
   mechanicalTruncate(model, opts) {
     const ctxMax = DEEPSEEK_CONTEXT_TOKENS[model] ?? DEFAULT_CONTEXT_TOKENS;
     const targetTokens = opts?.targetTokens ?? Math.floor(ctxMax * PREFLIGHT_MECHANICAL_TARGET_FRACTION);
+    const targetBytes = opts?.targetBytes ?? MAX_BODY_BYTES_TARGET;
     const all = this.deps.log.toMessages();
     const noop = {
       folded: false,
@@ -6063,6 +6189,7 @@ ${pinnedBodies.join("\n\n")}` : "";
     };
     if (all.length === 0) return noop;
     const tokenCounts = all.map((m) => estimateConversationTokens([m], true));
+    const byteCounts = all.map((m) => Buffer.byteLength(JSON.stringify(m), "utf8"));
     let latestUserBoundary = -1;
     for (let i = all.length - 1; i >= 0; i--) {
       if (all[i].role === "user") {
@@ -6071,12 +6198,15 @@ ${pinnedBodies.join("\n\n")}` : "";
       }
     }
     let cumTokens = 0;
+    let cumBytes = 0;
     let boundary = all.length;
     let foundSafeBoundary = false;
     for (let i = all.length - 1; i >= 0; i--) {
-      const next = cumTokens + tokenCounts[i];
-      if (next > targetTokens) break;
-      cumTokens = next;
+      const nextTokens = cumTokens + tokenCounts[i];
+      const nextBytes = cumBytes + byteCounts[i];
+      if (nextTokens > targetTokens || nextBytes > targetBytes) break;
+      cumTokens = nextTokens;
+      cumBytes = nextBytes;
       if (all[i].role === "user") {
         boundary = i;
         foundSafeBoundary = true;
@@ -7419,7 +7549,7 @@ ${reason}`
       {
         const decision2 = this.context.decidePreflight(messages, this.prefix.toolSpecs, this.model);
         if (decision2.needsAction) {
-          const { estimateTokens: estimate, ctxMax } = decision2;
+          const { estimateTokens: estimate, estimateBytes, ctxMax } = decision2;
           yield {
             turn: this._turn,
             role: "status",
@@ -7441,6 +7571,7 @@ ${reason}`
                   estimate: after.estimateTokens.toLocaleString(),
                   ctxMax: after.ctxMax.toLocaleString(),
                   pct: Math.round(after.estimateTokens / after.ctxMax * 100),
+                  bodyKB: Math.round(after.estimateBytes / 1024).toLocaleString(),
                   beforeMessages: result.beforeMessages,
                   afterMessages: result.afterMessages
                 }
@@ -7453,7 +7584,8 @@ ${reason}`
               content: t("loop.preflightNoFold", {
                 estimate: estimate.toLocaleString(),
                 ctxMax: ctxMax.toLocaleString(),
-                pct: Math.round(estimate / ctxMax * 100)
+                pct: Math.round(estimate / ctxMax * 100),
+                bodyKB: Math.round(estimateBytes / 1024).toLocaleString()
               })
             };
           }
@@ -8671,8 +8803,13 @@ Tips:
 - Add \`allowed-tools: read_file, search_content\` to scope a subagent's tools
 `;
 }
+function skillDescription(s) {
+  if (s.scope !== "builtin") return s.description;
+  const key = s.name === "security-review" ? "securityReview" : s.name;
+  return t(`builtinSkills.${key}`);
+}
 function skillIndexLine(s) {
-  const safeDesc = s.description.replace(/\n/g, " ").trim();
+  const safeDesc = skillDescription(s).replace(/\n/g, " ").trim();
   const tag = s.runAs === "subagent" ? " [\u{1F9EC} subagent]" : "";
   const max = 130 - s.name.length - tag.length;
   const clipped = safeDesc.length > max ? `${safeDesc.slice(0, Math.max(1, max - 1))}\u2026` : safeDesc;
@@ -10015,8 +10152,8 @@ async function searchContent(ctx, startAbs, args) {
           for (let i = realStart; i <= winEnd; i++) {
             const line = lines[i];
             const display = line.length > 200 ? `${line.slice(0, 200)}\u2026` : line;
-            const sep3 = hitSet.has(i) ? ":" : "-";
-            if (!pushLine(`${rel}:${i + 1}${sep3} ${display}`)) return;
+            const sep2 = hitSet.has(i) ? ":" : "-";
+            if (!pushLine(`${rel}:${i + 1}${sep2} ${display}`)) return;
           }
           prevWindowEnd = winEnd;
         }
@@ -13654,6 +13791,7 @@ async function searchSearxng(query, opts = {}) {
 async function searchMetaso(query, opts = {}) {
   const topK = Math.max(1, Math.min(100, opts.topK ?? DEFAULT_TOPK));
   const apiKey = loadMetasoApiKey();
+  if (!apiKey) throw new Error(t("webErrors.metasoMissingKey"));
   let resp;
   try {
     resp = await fetch(`${METASO_ENDPOINT}/search`, {
@@ -15448,7 +15586,7 @@ import {
   writeFileSync as writeFileSync6,
   writeSync
 } from "fs";
-import { dirname as dirname8, resolve as resolve12 } from "path";
+import { dirname as dirname8, isAbsolute as isAbsolute7, relative as relative8, resolve as resolve12 } from "path";
 var BLOCK_RE = /^(\S[^\n]*)\n<{7} SEARCH\n([\s\S]*?)\n?={7}\n([\s\S]*?)\n?>{7} REPLACE/gm;
 function parseEditBlocks(text) {
   const out = [];
@@ -15465,10 +15603,30 @@ function parseEditBlocks(text) {
   }
   return out;
 }
+function resolveEditPath(rootDir, rawPath) {
+  const absRoot = resolve12(rootDir);
+  if (/^[A-Za-z]:[\\/]/.test(rawPath) || looksLikeAbsoluteSystemPath2(rawPath)) {
+    return resolve12(rawPath);
+  }
+  let rooted = rawPath;
+  while (rooted.startsWith("/") || rooted.startsWith("\\")) {
+    rooted = rooted.slice(1);
+  }
+  return resolve12(absRoot, rooted || ".");
+}
+function looksLikeAbsoluteSystemPath2(rawPath) {
+  return /^\/(?:home|Users|etc|var|opt|tmp|usr|mnt|Library|Volumes|proc|sys|dev|run|srv|media|Applications|System|root|boot|private)(?:[/\\]|$)/.test(
+    rawPath
+  );
+}
+function pathIsUnder2(child, parent) {
+  const rel = relative8(parent, child);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
+}
 function applyEditBlock(block, rootDir) {
   const absRoot = resolve12(rootDir);
-  const absTarget = resolve12(absRoot, block.path);
-  if (absTarget !== absRoot && !absTarget.startsWith(`${absRoot}${sep2()}`)) {
+  const absTarget = resolveEditPath(rootDir, block.path);
+  if (!pathIsUnder2(absTarget, absRoot)) {
     return {
       path: block.path,
       status: "path-escape",
@@ -15562,13 +15720,12 @@ function applyEditBlocks(blocks, rootDir) {
   return blocks.map((b) => applyEditBlock(b, rootDir));
 }
 function snapshotBeforeEdits(blocks, rootDir) {
-  const absRoot = resolve12(rootDir);
   const seen = /* @__PURE__ */ new Set();
   const snapshots = [];
   for (const b of blocks) {
-    if (seen.has(b.path)) continue;
-    seen.add(b.path);
-    const abs = resolve12(absRoot, b.path);
+    const abs = resolveEditPath(rootDir, b.path);
+    if (seen.has(abs)) continue;
+    seen.add(abs);
     if (!existsSync11(abs)) {
       snapshots.push({ path: b.path, prevContent: null });
       continue;
@@ -15584,8 +15741,8 @@ function snapshotBeforeEdits(blocks, rootDir) {
 function restoreSnapshots(snapshots, rootDir) {
   const absRoot = resolve12(rootDir);
   return snapshots.map((snap) => {
-    const abs = resolve12(absRoot, snap.path);
-    if (abs !== absRoot && !abs.startsWith(`${absRoot}${sep2()}`)) {
+    const abs = resolveEditPath(rootDir, snap.path);
+    if (!pathIsUnder2(abs, absRoot)) {
       return {
         path: snap.path,
         status: "path-escape",
@@ -15612,9 +15769,6 @@ function restoreSnapshots(snapshots, rootDir) {
     }
   });
 }
-function sep2() {
-  return process.platform === "win32" ? "\\" : "/";
-}
 function lineEndingOf(text) {
   return text.includes("\r\n") ? "\r\n" : "\n";
 }