reasonix 0.48.0 → 0.49.0

package/dist/cli/{sessions-2A4DGSHA.js → sessions-NXQ5SAV7.js}

@@ -1,29 +1,29 @@
 #!/usr/bin/env node
 import { createRequire as __cr } from 'node:module'; if (typeof globalThis.require === 'undefined') { globalThis.require = __cr(import.meta.url); }
-import "./chunk-OPYALNTT.js";
-import "./chunk-5OHHAQ4W.js";
-import "./chunk-MRZG4GBF.js";
+import "./chunk-MQWO32ZD.js";
+import "./chunk-7AST3QQ3.js";
+import "./chunk-7JTKBJ2G.js";
 import "./chunk-HIYTRCSW.js";
-import "./chunk-2QSTA2QV.js";
+import "./chunk-O5LIHAMP.js";
 import "./chunk-6OWJV3YW.js";
-import "./chunk-TE5UIIFL.js";
+import "./chunk-J2IHQGPQ.js";
 import "./chunk-25T6CVUP.js";
 import "./chunk-2UQP6H6T.js";
-import "./chunk-WZGNXR6E.js";
-import "./chunk-FY4S7TJZ.js";
-import "./chunk-NMQSUNLB.js";
+import "./chunk-ZWHSHFDP.js";
+import "./chunk-JNTMOX7G.js";
+import "./chunk-PB3MAFEI.js";
 import "./chunk-S4XVGLRW.js";
 import {
   listSessions,
   loadSessionMessages,
   sessionPath
 } from "./chunk-RRXUIPWG.js";
-import "./chunk-JMDE6IO3.js";
-import "./chunk-OG5JANQ4.js";
+import "./chunk-ZAEJWKXB.js";
+import "./chunk-QX5TWXRZ.js";
 import {
   t
-} from "./chunk-YW63N3ZR.js";
-import "./chunk-CDVSFSAK.js";
+} from "./chunk-YEF7C4XI.js";
+import "./chunk-WMTMMSXU.js";
 import "./chunk-XXC2BYTV.js";
 import "./chunk-TUK7OWJA.js";
 
@@ -41,7 +41,7 @@ function listAll() {
     console.log(t("sessions.emptyHint"));
     return;
   }
-  console.log("Saved sessions (~/.reasonix/sessions/):");
+  console.log(t("sessions.listHeader"));
   console.log("");
   console.log(`  ${"name".padEnd(22)} ${"msgs".padStart(6)}  ${"size".padStart(8)}  modified`);
   console.log(`  ${"\u2500".repeat(60)}`);
@@ -55,15 +55,15 @@ function listAll() {
     if (details.length > 0) console.log(`      ${details.join(" \xB7 ")}`);
   }
   console.log("");
-  console.log("Inspect:  reasonix sessions <name>");
-  console.log("Resume:   reasonix chat --session <name>");
+  console.log(t("sessions.inspectHint"));
+  console.log(t("sessions.resumeHint"));
 }
 function inspectSession(name, verbose) {
   const path = sessionPath(name);
   const messages = loadSessionMessages(name);
   if (messages.length === 0) {
-    console.error(`no session named "${name}" (or it's empty).`);
-    console.error(`looked at: ${path}`);
+    console.error(t("sessions.noSession", { name }));
+    console.error(t("sessions.lookedAt", { path }));
     process.exit(1);
   }
   console.log(`[session] ${name}   ${messages.length} messages   ${path}`);
@@ -117,4 +117,4 @@ function truncate(s, max) {
 export {
   sessionsCommand
 };
-//# sourceMappingURL=sessions-2A4DGSHA.js.map
+//# sourceMappingURL=sessions-NXQ5SAV7.js.map

package/dist/cli/sessions-NXQ5SAV7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cli/commands/sessions.ts"],"sourcesContent":["import { t } from \"../../i18n/index.js\";\nimport { listSessions, loadSessionMessages, sessionPath } from \"../../index.js\";\nimport type { ChatMessage, SessionInfo } from \"../../index.js\";\n\nexport interface SessionsOptions {\n  /** When present, inspect that session instead of listing. */\n  name?: string;\n  /** Include assistant tool-call metadata in the inspect output. */\n  verbose?: boolean;\n}\n\nexport function sessionsCommand(opts: SessionsOptions): void {\n  if (opts.name) {\n    inspectSession(opts.name, !!opts.verbose);\n  } else {\n    listAll();\n  }\n}\n\nfunction listAll(): void {\n  const items = listSessions();\n  if (items.length === 0) {\n    console.log(t(\"sessions.emptyHint\"));\n    return;\n  }\n  console.log(t(\"sessions.listHeader\"));\n  console.log(\"\");\n  console.log(`  ${\"name\".padEnd(22)} ${\"msgs\".padStart(6)}  ${\"size\".padStart(8)}  modified`);\n  console.log(`  ${\"─\".repeat(60)}`);\n  for (const s of items) {\n    const sizeKb = `${(s.size / 1024).toFixed(1)} KB`;\n    const when = s.mtime.toISOString().replace(\"T\", \" \").slice(0, 16);\n    console.log(\n      `  ${s.name.padEnd(22)} ${String(s.messageCount).padStart(6)}  ${sizeKb.padStart(8)}  ${when}`,\n    );\n    const details = sessionDetails(s);\n    if (details.length > 0) console.log(`      ${details.join(\" · \")}`);\n  }\n  console.log(\"\");\n  console.log(t(\"sessions.inspectHint\"));\n  console.log(t(\"sessions.resumeHint\"));\n}\n\nfunction inspectSession(name: string, verbose: boolean): void {\n  const path = sessionPath(name);\n  const messages = loadSessionMessages(name);\n  if (messages.length === 0) {\n    console.error(t(\"sessions.noSession\", { name }));\n    console.error(t(\"sessions.lookedAt\", { path }));\n    process.exit(1);\n  }\n\n  console.log(`[session] ${name}   ${messages.length} messages   ${path}`);\n  console.log(\"\");\n\n  let turnIndex = 0;\n  for (const msg of messages) {\n    renderMessage(msg, turnIndex, verbose);\n    // Roughly bump \"turn\" after each user message so the reader can follow\n    // the conversation shape without the transcript's richer turn numbering.\n    if (msg.role === \"user\") turnIndex++;\n  }\n}\n\nfunction renderMessage(msg: ChatMessage, turnIdx: number, verbose: boolean): void {\n  const turn = turnIdx > 0 ? `[t${turnIdx}]` : \"[start]\";\n  const content = typeof msg.content === \"string\" ? msg.content : \"\";\n  const flat = oneLine(content);\n\n  if (msg.role === \"user\") {\n    console.log(`${turn} USER: ${flat}`);\n  } else if (msg.role === \"assistant\") {\n    console.log(`${turn} AGENT: ${flat || \"(tool call only)\"}`);\n    if (verbose && msg.tool_calls?.length) {\n      for (const tc of msg.tool_calls) {\n        console.log(\n          `         → call ${tc.function?.name} ${truncate(tc.function?.arguments ?? \"\", 80)}`,\n        );\n      }\n    }\n  } else if (msg.role === \"tool\") {\n    console.log(`${turn} TOOL ${msg.name ?? \"?\"}: ${truncate(flat, 160)}`);\n  } else if (msg.role === \"system\") {\n    if (verbose) console.log(`${turn} SYSTEM: ${truncate(flat, 160)}`);\n    // otherwise suppress — session's system prompt is usually session-wide\n    // boilerplate.\n  }\n}\n\nfunction oneLine(s: string, max = 200): string {\n  const collapsed = s.replace(/\\s+/g, \" \").trim();\n  return collapsed.length > max ? `${collapsed.slice(0, max)}…` : collapsed;\n}\n\nfunction sessionDetails(s: SessionInfo): string[] {\n  const details: string[] = [];\n  if (s.meta.summary) details.push(`summary: ${oneLine(s.meta.summary, 88)}`);\n  if (s.meta.workspace) details.push(`workspace: ${workspaceLabel(s.meta.workspace)}`);\n  if (s.meta.branch) details.push(`branch: ${truncate(s.meta.branch, 40)}`);\n  return details;\n}\n\nfunction workspaceLabel(workspace: string): string {\n  const trimmed = workspace.replace(/[\\\\/]+$/, \"\");\n  const label = trimmed.split(/[\\\\/]+/).at(-1) ?? trimmed;\n  return truncate(label || workspace, 40);\n}\n\nfunction truncate(s: string, max: number): string {\n  return s.length <= max ? s : `${s.slice(0, max)}…`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWO,SAAS,gBAAgB,MAA6B;AAC3D,MAAI,KAAK,MAAM;AACb,mBAAe,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO;AAAA,EAC1C,OAAO;AACL,YAAQ;AAAA,EACV;AACF;AAEA,SAAS,UAAgB;AACvB,QAAM,QAAQ,aAAa;AAC3B,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,IAAI,EAAE,oBAAoB,CAAC;AACnC;AAAA,EACF;AACA,UAAQ,IAAI,EAAE,qBAAqB,CAAC;AACpC,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,KAAK,OAAO,OAAO,EAAE,CAAC,IAAI,OAAO,SAAS,CAAC,CAAC,KAAK,OAAO,SAAS,CAAC,CAAC,YAAY;AAC3F,UAAQ,IAAI,KAAK,SAAI,OAAO,EAAE,CAAC,EAAE;AACjC,aAAW,KAAK,OAAO;AACrB,UAAM,SAAS,IAAI,EAAE,OAAO,MAAM,QAAQ,CAAC,CAAC;AAC5C,UAAM,OAAO,EAAE,MAAM,YAAY,EAAE,QAAQ,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE;AAChE,YAAQ;AAAA,MACN,KAAK,EAAE,KAAK,OAAO,EAAE,CAAC,IAAI,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,SAAS,CAAC,CAAC,KAAK,IAAI;AAAA,IAC9F;AACA,UAAM,UAAU,eAAe,CAAC;AAChC,QAAI,QAAQ,SAAS,EAAG,SAAQ,IAAI,SAAS,QAAQ,KAAK,QAAK,CAAC,EAAE;AAAA,EACpE;AACA,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,EAAE,sBAAsB,CAAC;AACrC,UAAQ,IAAI,EAAE,qBAAqB,CAAC;AACtC;AAEA,SAAS,eAAe,MAAc,SAAwB;AAC5D,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,WAAW,oBAAoB,IAAI;AACzC,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,MAAM,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC;AAC/C,YAAQ,MAAM,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;AAC9C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,IAAI,aAAa,IAAI,MAAM,SAAS,MAAM,eAAe,IAAI,EAAE;AACvE,UAAQ,IAAI,EAAE;AAEd,MAAI,YAAY;AAChB,aAAW,OAAO,UAAU;AAC1B,kBAAc,KAAK,WAAW,OAAO;AAGrC,QAAI,IAAI,SAAS,OAAQ;AAAA,EAC3B;AACF;AAEA,SAAS,cAAc,KAAkB,SAAiB,SAAwB;AAChF,QAAM,OAAO,UAAU,IAAI,KAAK,OAAO,MAAM;AAC7C,QAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAChE,QAAM,OAAO,QAAQ,OAAO;AAE5B,MAAI,IAAI,SAAS,QAAQ;AACvB,YAAQ,IAAI,GAAG,IAAI,UAAU,IAAI,EAAE;AAAA,EACrC,WAAW,IAAI,SAAS,aAAa;AACnC,YAAQ,IAAI,GAAG,IAAI,WAAW,QAAQ,kBAAkB,EAAE;AAC1D,QAAI,WAAW,IAAI,YAAY,QAAQ;AACrC,iBAAW,MAAM,IAAI,YAAY;AAC/B,gBAAQ;AAAA,UACN,wBAAmB,GAAG,UAAU,IAAI,IAAI,SAAS,GAAG,UAAU,aAAa,IAAI,EAAE,CAAC;AAAA,QACpF;AAAA,MACF;AAAA,IACF;AAAA,EACF,WAAW,IAAI,SAAS,QAAQ;AAC9B,YAAQ,IAAI,GAAG,IAAI,SAAS,IAAI,QAAQ,GAAG,KAAK,SAAS,MAAM,GAAG,CAAC,EAAE;AAAA,EACvE,WAAW,IAAI,SAAS,UAAU;AAChC,QAAI,QAAS,SAAQ,IAAI,GAAG,IAAI,YAAY,SAAS,MAAM,GAAG,CAAC,EAAE;AAAA,EAGnE;AACF;AAEA,SAAS,QAAQ,GAAW,MAAM,KAAa;AAC7C,QAAM,YAAY,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAC9C,SAAO,UAAU,SAAS,MAAM,GAAG,UAAU,MAAM,GAAG,GAAG,CAAC,WAAM;AAClE;AAEA,SAAS,eAAe,GAA0B;AAChD,QAAM,UAAoB,CAAC;AAC3B,MAAI,EAAE,KAAK,QAAS,SAAQ,KAAK,YAAY,QAAQ,EAAE,KAAK,SAAS,EAAE,CAAC,EAAE;AAC1E,MAAI,EAAE,KAAK,UAAW,SAAQ,KAAK,cAAc,eAAe,EAAE,KAAK,SAAS,CAAC,EAAE;AACnF,MAAI,EAAE,KAAK,OAAQ,SAAQ,KAAK,WAAW,SAAS,EAAE,KAAK,QAAQ,EAAE,CAAC,EAAE;AACxE,SAAO;AACT;AAEA,SAAS,eAAe,WAA2B;AACjD,QAAM,UAAU,UAAU,QAAQ,WAAW,EAAE;AAC/C,QAAM,QAAQ,QAAQ,MAAM,QAAQ,EAAE,GAAG,EAAE,KAAK;AAChD,SAAO,SAAS,SAAS,WAAW,EAAE;AACxC;AAEA,SAAS,SAAS,GAAW,KAAqB;AAChD,SAAO,EAAE,UAAU,MAAM,IAAI,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;AACjD;","names":[]}

package/dist/cli/{setup-GOLP7J4C.js → setup-LHZELI6I.js}

@@ -3,11 +3,11 @@ import { createRequire as __cr } from 'node:module'; if (typeof globalThis.requi
 import {
   MultiSelect,
   SingleSelect
-} from "./chunk-DOWEOA6E.js";
+} from "./chunk-W46ZMNKO.js";
 import {
   ThemeProvider,
   useTheme
-} from "./chunk-RUDBUHO4.js";
+} from "./chunk-PXBQ6IZ7.js";
 import {
   Box_default,
   Text,
@@ -16,7 +16,7 @@ import {
   source_default,
   use_app_default,
   use_input_default
-} from "./chunk-X53B3JIX.js";
+} from "./chunk-7X4JJOO7.js";
 import {
   PRESET_DESCRIPTIONS
 } from "./chunk-LGEKVMMV.js";
@@ -34,7 +34,7 @@ import {
   onLanguageChange,
   setLanguage,
   t
-} from "./chunk-YW63N3ZR.js";
+} from "./chunk-YEF7C4XI.js";
 import {
   defaultConfigPath,
   isPlausibleKey,
@@ -46,7 +46,7 @@ import {
   redactKey,
   resolveThemePreference,
   writeConfig
-} from "./chunk-CDVSFSAK.js";
+} from "./chunk-WMTMMSXU.js";
 import {
   __toESM
 } from "./chunk-TUK7OWJA.js";
@@ -615,4 +615,4 @@ async function setupCommand(opts = {}) {
 export {
   setupCommand
 };
-//# sourceMappingURL=setup-GOLP7J4C.js.map
+//# sourceMappingURL=setup-LHZELI6I.js.map

package/dist/cli/{stats-CGDAFDKI.js → stats-SUIJ3QWY.js}

@@ -3,14 +3,14 @@ import { createRequire as __cr } from 'node:module'; if (typeof globalThis.requi
 import {
   renderDashboard,
   statsCommand
-} from "./chunk-MOJYKO2A.js";
-import "./chunk-JMDE6IO3.js";
-import "./chunk-OG5JANQ4.js";
-import "./chunk-YW63N3ZR.js";
-import "./chunk-CDVSFSAK.js";
+} from "./chunk-ASOLXV67.js";
+import "./chunk-ZAEJWKXB.js";
+import "./chunk-QX5TWXRZ.js";
+import "./chunk-YEF7C4XI.js";
+import "./chunk-WMTMMSXU.js";
 import "./chunk-TUK7OWJA.js";
 export {
   renderDashboard,
   statsCommand
 };
-//# sourceMappingURL=stats-CGDAFDKI.js.map
+//# sourceMappingURL=stats-SUIJ3QWY.js.map

package/dist/cli/{version-FIL4ZFOS.js → version-BIFONEUB.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import { createRequire as __cr } from 'node:module'; if (typeof globalThis.require === 'undefined') { globalThis.require = __cr(import.meta.url); }
-import "./chunk-OPYALNTT.js";
-import "./chunk-5OHHAQ4W.js";
-import "./chunk-MRZG4GBF.js";
+import "./chunk-MQWO32ZD.js";
+import "./chunk-7AST3QQ3.js";
+import "./chunk-7JTKBJ2G.js";
 import "./chunk-HIYTRCSW.js";
-import "./chunk-2QSTA2QV.js";
+import "./chunk-O5LIHAMP.js";
 import "./chunk-6OWJV3YW.js";
-import "./chunk-TE5UIIFL.js";
+import "./chunk-J2IHQGPQ.js";
 import "./chunk-25T6CVUP.js";
 import "./chunk-2UQP6H6T.js";
-import "./chunk-WZGNXR6E.js";
-import "./chunk-FY4S7TJZ.js";
-import "./chunk-NMQSUNLB.js";
+import "./chunk-ZWHSHFDP.js";
+import "./chunk-JNTMOX7G.js";
+import "./chunk-PB3MAFEI.js";
 import "./chunk-S4XVGLRW.js";
 import "./chunk-RRXUIPWG.js";
-import "./chunk-JMDE6IO3.js";
-import "./chunk-OG5JANQ4.js";
-import "./chunk-YW63N3ZR.js";
-import "./chunk-CDVSFSAK.js";
+import "./chunk-ZAEJWKXB.js";
+import "./chunk-QX5TWXRZ.js";
+import "./chunk-YEF7C4XI.js";
+import "./chunk-WMTMMSXU.js";
 import {
   VERSION
 } from "./chunk-XXC2BYTV.js";
@@ -30,4 +30,4 @@ function versionCommand() {
 export {
   versionCommand
 };
-//# sourceMappingURL=version-FIL4ZFOS.js.map
+//# sourceMappingURL=version-BIFONEUB.js.map

package/dist/index.d.ts

@@ -343,6 +343,10 @@ declare function projectSettingsPath(projectRoot: string): string;
 interface LoadHookSettingsOptions {
     /** Absolute project root, if any. Without it, only global hooks load. */
     projectRoot?: string;
+    /** Override config path for tests. */
+    configPath?: string;
+    /** Tests and intentionally trusted callers can opt in without touching config. */
+    trustProjectHooks?: boolean;
     /** Override `~` for tests. */
     homeDir?: string;
 }
@@ -580,7 +584,7 @@ type EventRole = "assistant_delta" | "assistant_final"
  | "tool_start" | "tool" | "done" | "error" | "warning"
 /** Transient indicator for silent phases; UI clears on next primary event. */
  | "status"
-/** Mid-turn steer injected as a user utterance without aborting the current turn. */
+/** Mid-turn steer injected as queued user guidance without aborting the current turn. */
  | "steer";
 interface LoopEvent {
     turn: number;
@@ -649,10 +653,42 @@ declare class VolatileScratch {
     reset(): void;
 }
 
+/** Sliding-window limits for per-session tool dispatch, with aggregate and per-tool buckets. */
+interface ToolRateLimitBucketConfig {
+    maxCalls?: number;
+    windowSeconds?: number;
+}
+interface ToolRateLimitConfig {
+    enabled?: boolean;
+    aggregate?: ToolRateLimitBucketConfig;
+    tools?: Record<string, false | ToolRateLimitBucketConfig>;
+}
+interface NormalizedToolRateLimitBucket {
+    maxCalls: number;
+    windowSeconds: number;
+}
+interface NormalizedToolRateLimitConfig {
+    aggregate: NormalizedToolRateLimitBucket;
+    tools: Record<string, false | NormalizedToolRateLimitBucket>;
+}
+type ToolRateLimitOption = false | ToolRateLimitConfig;
+
+/** Tracks files the model has had byte-exact visibility into this session. `edit_file` and `multi_edit` consult it before mutating, so the SEARCH text matches the on-disk bytes the model actually saw — not what it guessed. */
+declare class ReadTracker {
+    private readonly _seen;
+    private static norm;
+    markRead(abs: string): void;
+    hasRead(abs: string): boolean;
+    reset(): void;
+    get size(): number;
+}
+
 interface ToolCallContext {
     signal?: AbortSignal;
     /** Inject a mock PauseGate for tests. When absent, tools use the singleton. */
     confirmationGate?: PauseGate;
+    /** Per-session tracker of files the model has read. Filesystem tools mark on read/write, edit_file/multi_edit consult before mutating. */
+    readTracker?: ReadTracker;
 }
 interface ToolDefinition<A = any, R = any> {
     name: string;
@@ -671,6 +707,7 @@ interface ToolDefinition<A = any, R = any> {
 interface ToolRegistryOptions {
     /** Auto-flatten + re-nest at dispatch; default true. */
     autoFlatten?: boolean;
+    rateLimit?: ToolRateLimitOption;
 }
 type ToolCallAuditEvent = {
     name: string;
@@ -689,6 +726,7 @@ declare class ToolRegistry {
     private readonly _interceptors;
     private _auditListener;
     private _resultAugmenter;
+    private readonly _rateLimiter;
     /** Per-tool fingerprint of the last call that failed schema validation. Cleared by any successful validation for that tool. */
     private readonly _lastMalformed;
     /** Per-tool fingerprint of the last host-side gate rejection. */
@@ -707,6 +745,7 @@ declare class ToolRegistry {
     setResultAugmenter(fn: ToolResultAugmenter | null): void;
     /** True when an augmenter is already wired — lets late-installing callers skip clobbering an earlier one. */
     get hasResultAugmenter(): boolean;
+    get rateLimitPolicy(): false | NormalizedToolRateLimitConfig;
     register<A, R>(def: ToolDefinition<A, R>): this;
     /** Drop a registered tool. Returns true if the name was present. Used by MCP hot-unbridge. */
     unregister(name: string): boolean;
@@ -724,6 +763,8 @@ declare class ToolRegistry {
         maxResultTokens?: number;
         /** Inject a mock PauseGate for tests. */
         confirmationGate?: PauseGate;
+        /** Session-scoped read tracker; filesystem tools mark on read/write, edit_file/multi_edit gate on it. */
+        readTracker?: ReadTracker;
     }): Promise<string>;
     private _augmentResult;
     /** Records the failed call's fingerprint; on the 2nd consecutive identical malformed call to the same tool, returns a sharper error that tells the model to stop retrying. */
@@ -767,6 +808,8 @@ declare class CacheFirstLoop {
     readonly scratch: VolatileScratch;
     readonly stats: SessionStats;
     readonly repair: ToolCallRepair;
+    /** Files the model has read this session; gates edit_file / multi_edit so SEARCH text matches on-disk bytes. Cleared on fold / mechanical truncate (the model's byte-level view of the elided history is gone). In-memory only — naturally empty on resume. */
+    readonly readTracker: ReadTracker;
     model: string;
     stream: boolean;
     reasoningEffort: "high" | "max";
@@ -788,12 +831,12 @@ declare class CacheFirstLoop {
     private _turnAbort;
     /** Authoritative running-id set — UI cards consult this instead of trusting end-event delivery. Insert at dispatch entry, delete in finally. */
     private readonly _inflight;
-    /** Typeahead steer message set by the UI; step() consumes it at the next iter boundary. */
-    private _steer;
+    /** Typeahead steer messages set by the UI; step() consumes one at each iter boundary. */
+    private readonly _steerQueue;
     /** Set true when a steer was consumed this turn; cleared on next step() entry. */
     private _steerConsumed;
     /** UI calls this to inject a mid-turn steer message without aborting the current turn.
-     *  New text resets steerConsumed — a fresh steer hasn't been consumed yet. */
+     *  New text resets steerConsumed because a fresh steer is queued. */
     steer(text: string | null): void;
     /** True when a steer was consumed this turn (UI gate to avoid double-submit). */
     get steerConsumed(): boolean;
@@ -1105,6 +1148,7 @@ interface PricingOverride {
     output?: number;
 }
 interface RateLimitConfig {
+    /** Client-side self-throttle in requests/minute — paces outbound chat calls with a min-interval timer. NOT a DeepSeek-enforced limit: DeepSeek's actual cap is concurrency, not RPM (500 for v4-pro, 2500 for v4-flash, account-wide), surfaced as HTTP 429. Set this only to be a polite neighbor on shared infra; single-user CLI rarely needs it. */
     rpm?: number;
 }
 interface ProxyConfig {
@@ -1112,6 +1156,8 @@ interface ProxyConfig {
     disabled?: boolean;
     /** Additional NO_PROXY patterns (curl syntax). Additive on top of env NO_PROXY and the default DeepSeek-bypass whitelist. */
     noProxy?: string[];
+    /** When false, route api.deepseek.com / *.deepseek.com through the proxy too (issue #1497 — corporate firewalls that block direct egress). Default true preserves the clash/v2ray US-exit-IP 403 fix. Env `REASONIX_PROXY_DEEPSEEK_DIRECT` overrides. */
+    bypassDeepSeekDirect?: boolean;
 }
 interface ReasonixConfig {
     apiKey?: string;
@@ -1144,11 +1190,11 @@ interface ReasonixConfig {
     session?: string | null;
     setupCompleted?: boolean;
     search?: boolean;
-    /** Web search engine backend: "mojeek" (default, scrapes Mojeek), "searxng" (self-hosted SearXNG), "metaso" (Metaso API), "tavily" (LLM-friendly API, free tier), "perplexity" (Perplexity AI), or "exa" (Exa API). */
-    webSearchEngine?: "mojeek" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
+    /** Web search engine backend: "bing" (default, scrapes cn.bing.com), "searxng" (self-hosted SearXNG), "metaso" (Metaso API), "tavily" (LLM-friendly API, free tier), "perplexity" (Perplexity AI), or "exa" (Exa API). */
+    webSearchEngine?: "bing" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
     /** Base URL for SearXNG instance (default http://localhost:8080). */
     webSearchEndpoint?: string;
-    /** Metaso API key. Falls back to METASO_API_KEY env var, then a built-in default. */
+    /** Metaso API key. Falls back to METASO_API_KEY env var. */
     metasoApiKey?: string;
     /** Tavily API key. Falls back to TAVILY_API_KEY env var. No baked-in default — free tier is 1000/mo per account, sharing would burn out. */
     tavilyApiKey?: string;
@@ -1158,6 +1204,8 @@ interface ReasonixConfig {
     exaApiKey?: string;
     /** TUI mouse-wheel scrolling via SGR mouse tracking. Default true. Set false to fall back to native terminal drag-select for copy (then wheel is terminal-dependent — most terminals translate wheel→arrow in alt-screen, some don't). */
     mouseTracking?: boolean;
+    /** Rows scrolled per single SGR mouse-wheel report. Default 1 — most terminals emit 2-5 reports per physical notch, so 1 already produces 2-5 rows per notch (#1419). Bump to 3-5 only if your terminal emits one report per notch and scrolling feels slow (#1494). Clamped to [1, 10]. */
+    mouseWheelRows?: number;
     dashboard?: {
         /** Pin the embedded dashboard to a fixed port — required for stable SSH tunnels. 0/absent → ephemeral. */
         port?: number;
@@ -1179,6 +1227,8 @@ interface ReasonixConfig {
     projects?: {
         [absoluteRootDir: string]: {
             shellAllowed?: string[];
+            /** Project-scoped hooks are arbitrary shell commands; load only after explicit trust. */
+            hooksTrusted?: boolean;
             /** Absolute directory prefixes the user pre-approved for outside-sandbox file access (#684). */
             pathAllowed?: string[];
         };
@@ -1206,6 +1256,7 @@ interface ReasonixConfig {
     /** Per-app proxy override. Layered on top of HTTPS_PROXY / NO_PROXY env vars + the default DeepSeek-bypass whitelist. */
     proxy?: ProxyConfig;
     rateLimit?: RateLimitConfig;
+    toolRateLimit?: ToolRateLimitConfig;
     /** Host-enforced engineering lifecycle. Defaults to off so opt-outs pay zero prefix cost. */
     engineeringLifecycle?: {
         mode?: EngineeringLifecycleMode;
@@ -1223,7 +1274,7 @@ interface CustomMemoryTypeConfig {
     priority?: "low" | "medium" | "high";
     expires?: "project_end";
 }
-declare function loadMetasoApiKey(path?: string): string;
+declare function loadMetasoApiKey(path?: string): string | undefined;
 /** Perplexity API key — env > config > undefined. Get one at https://perplexity.ai/settings/api */
 declare function loadPerplexityApiKey(path?: string): string | undefined;
 /** Exa API key — env > config > undefined. Free 1000/mo signup at https://exa.ai */
@@ -1656,10 +1707,7 @@ declare function runCommand(cmd: string, opts: {
 }): Promise<RunCommandResult>;
 interface ResolveExecutableOptions {
     platform?: NodeJS.Platform;
-    env?: {
-        PATH?: string;
-        PATHEXT?: string;
-    };
+    env?: Record<string, string | undefined>;
     isFile?: (path: string) => boolean;
     pathDelimiter?: string;
 }
@@ -1717,7 +1765,7 @@ declare class NeedsConfirmationError extends Error {
 declare function registerShellTools(registry: ToolRegistry, opts: ShellToolsOptions): ToolRegistry;
 declare function formatCommandResult(cmd: string, r: RunCommandResult): string;
 
-/** web_search uses Mojeek (DDG returns anti-bot 202 to unauthenticated POSTs); web_fetch sniffs HTML to text. */
+/** web_search uses Bing (cn.bing.com — works from CN without proxy); web_fetch sniffs HTML to text. */
 
 interface SearchResult {
     title: string;
@@ -1743,8 +1791,8 @@ interface WebFetchOptions {
 interface WebSearchOptions {
     topK?: number;
     signal?: AbortSignal;
-    /** Backend engine: "mojeek" (scrapes Mojeek HTML), "searxng" (self-hosted SearXNG JSON API), "metaso" (Metaso API), "tavily" (LLM-friendly JSON API), "perplexity" (Perplexity AI), or "exa" (Exa API). */
-    engine?: "mojeek" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
+    /** Backend engine: "bing" (scrapes cn.bing.com HTML — default, works from CN without proxy), "searxng" (self-hosted SearXNG), "metaso" (Metaso API), "tavily" (LLM-friendly JSON API), "perplexity" (Perplexity AI), or "exa" (Exa API). */
+    engine?: "bing" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
     /** Base URL for SearXNG. Default http://localhost:8080. */
     endpoint?: string;
 }
@@ -1753,7 +1801,7 @@ declare function webSearch(query: string, opts?: WebSearchOptions): Promise<Sear
 /** Parse SearXNG HTML search results using node-html-parser. */
 declare function parseSearxngHtmlResults(html: string): SearchResult[];
 /** Title-anchor + snippet-paragraph passes paired positionally — robust to attribute reorder. */
-declare function parseMojeekResults(html: string): SearchResult[];
+declare function parseBingResults(html: string): SearchResult[];
 declare function webFetch(url: string, opts?: WebFetchOptions): Promise<PageContent>;
 declare function htmlToText(html: string): string;
 interface WebToolsOptions {
@@ -2351,7 +2399,11 @@ type SectionResult<T> = {
 /** Caller owns initialize() / close() — keeps this pure so tests can feed a FakeMcpTransport. */
 declare function inspectMcpServer(client: McpClient): Promise<InspectionReport>;
 
+/** Read/write preserves the file's original encoding so edit_file on GB18030 (CN Windows) or UTF-8-BOM files doesn't silently convert or fail SEARCH on mangled decode (issue #1445). */
+type FileEncoding = "utf8" | "utf8-bom" | "gb18030";
+
 /** SEARCH must match byte-for-byte; empty SEARCH = create new file. No fuzzy match — silent wrong edit beats a missing one. */
+
 interface EditBlock {
     /** Path as written by the model — relative to rootDir, or absolute. */
     path: string;
@@ -2389,6 +2441,8 @@ interface EditSnapshot {
     path: string;
     /** `null` = file didn't exist; restore means delete. */
     prevContent: string | null;
+    /** Encoding the file used before the edit. Required to round-trip GB18030 / UTF-8-BOM on restore. */
+    prevEncoding?: FileEncoding;
 }
 /** De-duped by path — one "before" snapshot per file even with multiple blocks. */
 declare function snapshotBeforeEdits(blocks: EditBlock[], rootDir: string): EditSnapshot[];
@@ -2558,4 +2612,4 @@ declare function aggregateUsage(records: UsageRecord[], opts?: AggregateOptions)
 /** File-size helper for the stats header — "1.2 MB" etc. Returns "" if missing. */
 declare function formatLogSize(path?: string): string;
 
-export { AT_MENTION_PATTERN, AT_PICKER_PREFIX, type AggregateOptions, AppendOnlyLog, type AppendUsageInput, type ApplyResult, type ApplyStatus, type AtMentionExpansion, type AtMentionOptions, type BridgeOptions, type BridgeResult, CODE_SYSTEM_PROMPT, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, type ChoiceOption, ChoiceRequestedError, type ChoiceToolOptions, type CodeSystemPromptOptions, DEFAULT_AT_DIR_MAX_ENTRIES, DEFAULT_AT_MENTION_MAX_BYTES, DEFAULT_MAX_RESULT_CHARS, DEFAULT_MAX_RESULT_TOKENS, DEFAULT_PICKER_IGNORE_DIRS, DEFAULT_SPAWN_STORM_THRESHOLD, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type DirEntry, type EditBlock, type EditSnapshot, type EventRole, type FileWithStats, type FilesystemToolsOptions, type FlattenDecision, type FlattenOptions, type GetLatestVersionOptions, type GetPromptResult, HOOK_EVENTS, HOOK_SETTINGS_DIRNAME, HOOK_SETTINGS_FILENAME, type HookConfig, type HookEvent, type HookOutcome, type HookPayload, type HookReport, type HookScope, type HookSettings, type HookSpawnInput, type HookSpawnResult, type HookSpawner, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type InspectionReport, type InstallSource, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, LATEST_CACHE_TTL_MS, LATEST_FETCH_TIMEOUT_MS, type ListDirectoryOptions, type ListFilesOptions, type ListPromptsResult, type ListResourcesResult, type ListToolsResult, type LoadHookSettingsOptions, type LoopEvent, MCP_PROTOCOL_VERSION, MEMORY_INDEX_FILE, MEMORY_INDEX_MAX_CHARS, McpClient, type McpClientOptions, type McpContentBlock, type McpProgressHandler, type McpProgressInfo, type McpPrompt, type McpPromptArgument, type McpPromptMessage, type McpPromptResourceBlock, type McpResource, type McpResourceContents, type McpResourceContentsBlob, type McpResourceContentsText, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type MemoryEntry, type MemoryScope, MemoryStore, type MemoryStoreOptions, type MemoryToolsOptions, type MemoryType, type WriteInput as MemoryWriteInput, NeedsConfirmationError, PROJECT_MEMORY_FILE, PROJECT_MEMORY_FILES, PROJECT_MEMORY_MAX_CHARS, type PageContent, type ParsedAtQuery, type PickerCandidate, PlanProposedError, PlanRevisionProposedError, type PlanStep, type PlanStepRisk, type PlanToolOptions, type ProgressNotificationParams, type ProjectMemory, type RankPickerOptions, type ReadResourceResult, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type ResolvedHook, type RetryInfo, type RetryOptions, type Role, type RunCommandResult, type RunHooksOptions, type ScavengeOptions, type ScavengeResult, type SearchResult, type SectionResult, type SessionInfo, SessionStats, type SessionSummary, type ShellToolsOptions, type SpawnDistillation, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, type StepCompletion, StormBreaker, type StreamChunk, type StreamWalkOptions, type StreamableHttpMcpSpec, StreamableHttpTransport, type StreamableHttpTransportOptions, type SubagentEvent, type SubagentResult, type SubagentResultLike, type SubagentSessionSummary, type SubagentSink, SubagentTelemetry, type SubagentToolOptions, type TodoItem, type TodoStatus, type TodoToolOptions, type ToolCall, type ToolCallContext, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, USER_MEMORY_DIR, Usage, type UsageAggregate, type UsageBucket, type UsageRecord, VERSION, VolatileScratch, type WebFetchOptions, type WebSearchOptions, type WebToolsOptions, aggregateUsage, analyzeSchema, appendSessionMessage, appendUsage, applyEditBlock, applyEditBlocks, applyMemoryStack, applyProjectMemory, applyUserMemory, bridgeMcpTools, bucketCacheHitRatio, bucketSavingsFraction, claudeEquivalentCost, codeSystemPrompt, compareVersions, computeReplayStats, computeSpawnDistillation, costUsd, countSpawnStorms, decideOutcome, defaultConfigPath, defaultUsageLogPath, deleteSession, detectAtPicker, detectInstallSource, detectNpmInstallPrefix, detectShellOperator, diffTranscripts, expandAtMentions, fetchWithRetry, findProjectMemoryPath, fixToolCallPairing, flattenMcpResult, flattenSchema, forkRegistryExcluding, formatCommandResult, formatHookOutcomeMessage, formatLogSize, formatLoopError, formatSearchResults, getLatestVersion, globalSettingsPath, healLoadedMessages, healLoadedMessagesByTokens, htmlToText, injectPowerShellUtf8, inputCostUsd, inspectMcpServer, isAllowed, isJsonRpcError, isNpxInstall, isPlausibleKey, listDirectory, listFilesSync, listFilesWithStatsAsync, listFilesWithStatsSync, listSessions, loadApiKey, loadBaseUrl, loadDotenv, loadExaApiKey, loadHooks, loadMetasoApiKey, loadPerplexityApiKey, loadSessionMessages, matchesTool, memoryEnabled, nestArguments, openTranscriptFile, outputCostUsd, parseAtQuery, parseEditBlocks, parseMcpSpec, parseMojeekResults, parseSearxngHtmlResults, parseTranscript, prepareSpawn, projectHash, projectSettingsPath, quoteForCmdExe, rankPickerCandidates, readConfig, readProjectMemory, readTranscript, readUsageLog, recordFromLoopEvent, redactKey, registerChoiceTool, registerFilesystemTools, registerMemoryTools, registerPlanTool, registerShellTools, registerSubagentTool, registerTodoTool, registerWebTools, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, resolveExecutable, resolveProjectMemoryWritePath, restoreSnapshots, runCommand, runHooks, sanitizeMemoryName, sanitizeName as sanitizeSessionName, saveApiKey, saveBaseUrl, scavengeToolCalls, sessionPath, sessionsDir, similarity, snapshotBeforeEdits, stripHallucinatedToolMarkup, summarizeSubagentSession, tokenizeCommand, truncateForModel, truncateForModelByTokens, walkFilesStream, webFetch, webSearch, withUtf8Codepage, writeConfig, writeMeta, writeRecord };
+export { AT_MENTION_PATTERN, AT_PICKER_PREFIX, type AggregateOptions, AppendOnlyLog, type AppendUsageInput, type ApplyResult, type ApplyStatus, type AtMentionExpansion, type AtMentionOptions, type BridgeOptions, type BridgeResult, CODE_SYSTEM_PROMPT, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, type ChoiceOption, ChoiceRequestedError, type ChoiceToolOptions, type CodeSystemPromptOptions, DEFAULT_AT_DIR_MAX_ENTRIES, DEFAULT_AT_MENTION_MAX_BYTES, DEFAULT_MAX_RESULT_CHARS, DEFAULT_MAX_RESULT_TOKENS, DEFAULT_PICKER_IGNORE_DIRS, DEFAULT_SPAWN_STORM_THRESHOLD, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type DirEntry, type EditBlock, type EditSnapshot, type EventRole, type FileWithStats, type FilesystemToolsOptions, type FlattenDecision, type FlattenOptions, type GetLatestVersionOptions, type GetPromptResult, HOOK_EVENTS, HOOK_SETTINGS_DIRNAME, HOOK_SETTINGS_FILENAME, type HookConfig, type HookEvent, type HookOutcome, type HookPayload, type HookReport, type HookScope, type HookSettings, type HookSpawnInput, type HookSpawnResult, type HookSpawner, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type InspectionReport, type InstallSource, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, LATEST_CACHE_TTL_MS, LATEST_FETCH_TIMEOUT_MS, type ListDirectoryOptions, type ListFilesOptions, type ListPromptsResult, type ListResourcesResult, type ListToolsResult, type LoadHookSettingsOptions, type LoopEvent, MCP_PROTOCOL_VERSION, MEMORY_INDEX_FILE, MEMORY_INDEX_MAX_CHARS, McpClient, type McpClientOptions, type McpContentBlock, type McpProgressHandler, type McpProgressInfo, type McpPrompt, type McpPromptArgument, type McpPromptMessage, type McpPromptResourceBlock, type McpResource, type McpResourceContents, type McpResourceContentsBlob, type McpResourceContentsText, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type MemoryEntry, type MemoryScope, MemoryStore, type MemoryStoreOptions, type MemoryToolsOptions, type MemoryType, type WriteInput as MemoryWriteInput, NeedsConfirmationError, PROJECT_MEMORY_FILE, PROJECT_MEMORY_FILES, PROJECT_MEMORY_MAX_CHARS, type PageContent, type ParsedAtQuery, type PickerCandidate, PlanProposedError, PlanRevisionProposedError, type PlanStep, type PlanStepRisk, type PlanToolOptions, type ProgressNotificationParams, type ProjectMemory, type RankPickerOptions, type ReadResourceResult, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type ResolvedHook, type RetryInfo, type RetryOptions, type Role, type RunCommandResult, type RunHooksOptions, type ScavengeOptions, type ScavengeResult, type SearchResult, type SectionResult, type SessionInfo, SessionStats, type SessionSummary, type ShellToolsOptions, type SpawnDistillation, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, type StepCompletion, StormBreaker, type StreamChunk, type StreamWalkOptions, type StreamableHttpMcpSpec, StreamableHttpTransport, type StreamableHttpTransportOptions, type SubagentEvent, type SubagentResult, type SubagentResultLike, type SubagentSessionSummary, type SubagentSink, SubagentTelemetry, type SubagentToolOptions, type TodoItem, type TodoStatus, type TodoToolOptions, type ToolCall, type ToolCallContext, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, USER_MEMORY_DIR, Usage, type UsageAggregate, type UsageBucket, type UsageRecord, VERSION, VolatileScratch, type WebFetchOptions, type WebSearchOptions, type WebToolsOptions, aggregateUsage, analyzeSchema, appendSessionMessage, appendUsage, applyEditBlock, applyEditBlocks, applyMemoryStack, applyProjectMemory, applyUserMemory, bridgeMcpTools, bucketCacheHitRatio, bucketSavingsFraction, claudeEquivalentCost, codeSystemPrompt, compareVersions, computeReplayStats, computeSpawnDistillation, costUsd, countSpawnStorms, decideOutcome, defaultConfigPath, defaultUsageLogPath, deleteSession, detectAtPicker, detectInstallSource, detectNpmInstallPrefix, detectShellOperator, diffTranscripts, expandAtMentions, fetchWithRetry, findProjectMemoryPath, fixToolCallPairing, flattenMcpResult, flattenSchema, forkRegistryExcluding, formatCommandResult, formatHookOutcomeMessage, formatLogSize, formatLoopError, formatSearchResults, getLatestVersion, globalSettingsPath, healLoadedMessages, healLoadedMessagesByTokens, htmlToText, injectPowerShellUtf8, inputCostUsd, inspectMcpServer, isAllowed, isJsonRpcError, isNpxInstall, isPlausibleKey, listDirectory, listFilesSync, listFilesWithStatsAsync, listFilesWithStatsSync, listSessions, loadApiKey, loadBaseUrl, loadDotenv, loadExaApiKey, loadHooks, loadMetasoApiKey, loadPerplexityApiKey, loadSessionMessages, matchesTool, memoryEnabled, nestArguments, openTranscriptFile, outputCostUsd, parseAtQuery, parseBingResults, parseEditBlocks, parseMcpSpec, parseSearxngHtmlResults, parseTranscript, prepareSpawn, projectHash, projectSettingsPath, quoteForCmdExe, rankPickerCandidates, readConfig, readProjectMemory, readTranscript, readUsageLog, recordFromLoopEvent, redactKey, registerChoiceTool, registerFilesystemTools, registerMemoryTools, registerPlanTool, registerShellTools, registerSubagentTool, registerTodoTool, registerWebTools, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, resolveExecutable, resolveProjectMemoryWritePath, restoreSnapshots, runCommand, runHooks, sanitizeMemoryName, sanitizeName as sanitizeSessionName, saveApiKey, saveBaseUrl, scavengeToolCalls, sessionPath, sessionsDir, similarity, snapshotBeforeEdits, stripHallucinatedToolMarkup, summarizeSubagentSession, tokenizeCommand, truncateForModel, truncateForModelByTokens, walkFilesStream, webFetch, webSearch, withUtf8Codepage, writeConfig, writeMeta, writeRecord };