reasonix 0.48.0 → 0.49.0

package/dist/index.js

@@ -2,7 +2,14 @@
 import { createParser } from "eventsource-parser";
 
 // src/config.ts
-import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import {
+  appendFileSync,
+  chmodSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  writeFileSync
+} from "fs";
 import { homedir } from "os";
 import { dirname, isAbsolute, join, resolve } from "path";
 import { z } from "zod";
@@ -429,6 +436,117 @@ function parseMcpSpec(input) {
   return { transport: "stdio", name, command, args };
 }
 
+// src/tools/rate-limit.ts
+var DEFAULT_TOOL_RATE_LIMIT = {
+  aggregate: { maxCalls: 200, windowSeconds: 60 },
+  tools: {
+    run_command: { maxCalls: 60, windowSeconds: 60 },
+    run_background: { maxCalls: 10, windowSeconds: 60 }
+  }
+};
+var ToolRateLimiter = class {
+  config;
+  clock;
+  aggregate = [];
+  tools = /* @__PURE__ */ new Map();
+  constructor(config = {}, clock = () => Date.now()) {
+    this.config = normalizeToolRateLimitConfig(config);
+    this.clock = clock;
+  }
+  get policy() {
+    return this.config;
+  }
+  consume(tool) {
+    if (this.config === false) return { allowed: true };
+    const now = this.clock();
+    const toolBucket = this.config.tools[tool];
+    if (toolBucket !== false && toolBucket !== void 0) {
+      const timestamps = this.timestampsFor(tool);
+      const blocked = inspectBucket(tool, timestamps, toolBucket, now);
+      if (blocked) return { allowed: false, result: blocked };
+    }
+    const aggregateBlocked = inspectBucket(
+      tool,
+      this.aggregate,
+      this.config.aggregate,
+      now,
+      "all_tools"
+    );
+    if (aggregateBlocked) return { allowed: false, result: aggregateBlocked };
+    this.aggregate.push(now);
+    if (toolBucket !== false && toolBucket !== void 0) this.timestampsFor(tool).push(now);
+    return { allowed: true };
+  }
+  timestampsFor(tool) {
+    const existing = this.tools.get(tool);
+    if (existing) return existing;
+    const created = [];
+    this.tools.set(tool, created);
+    return created;
+  }
+};
+function normalizeToolRateLimitConfig(config) {
+  if (config === false || config?.enabled === false) return false;
+  const aggregate = normalizeBucket(config?.aggregate, DEFAULT_TOOL_RATE_LIMIT.aggregate);
+  const tools = {
+    ...DEFAULT_TOOL_RATE_LIMIT.tools
+  };
+  for (const [name, value] of Object.entries(config?.tools ?? {})) {
+    if (value === false) {
+      tools[name] = false;
+      continue;
+    }
+    const fallback = DEFAULT_TOOL_RATE_LIMIT.tools[name];
+    tools[name] = normalizeBucket(
+      value,
+      fallback === false || fallback === void 0 ? DEFAULT_TOOL_RATE_LIMIT.aggregate : fallback
+    );
+  }
+  return { aggregate, tools };
+}
+function parseRateLimitedToolResult(result) {
+  try {
+    const parsed = JSON.parse(result);
+    if (!parsed || typeof parsed !== "object") return null;
+    const value = parsed;
+    if (value.error !== "rate_limited") return null;
+    if (typeof value.tool !== "string" || typeof value.scope !== "string") return null;
+    if (typeof value.limit !== "number" || typeof value.windowSeconds !== "number") return null;
+    if (typeof value.retryAfterMs !== "number" || typeof value.message !== "string") return null;
+    return value;
+  } catch {
+    return null;
+  }
+}
+function normalizeBucket(raw, fallback) {
+  return {
+    maxCalls: positiveInteger(raw?.maxCalls) ?? fallback.maxCalls,
+    windowSeconds: positiveInteger(raw?.windowSeconds) ?? fallback.windowSeconds
+  };
+}
+function positiveInteger(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
+}
+function inspectBucket(tool, timestamps, bucket, now, scope = tool) {
+  const windowMs = bucket.windowSeconds * 1e3;
+  while (timestamps.length > 0 && now - timestamps[0] >= windowMs) timestamps.shift();
+  if (timestamps.length < bucket.maxCalls) return null;
+  const retryAfterMs = Math.max(0, timestamps[0] + windowMs - now);
+  return {
+    error: "rate_limited",
+    tool,
+    scope,
+    limit: bucket.maxCalls,
+    windowSeconds: bucket.windowSeconds,
+    retryAfterMs,
+    message: `${scope} rate-limited: ${bucket.maxCalls} calls / ${bucket.windowSeconds}s. Wait ${formatWait(retryAfterMs)} or summarize what you know.`
+  };
+}
+function formatWait(ms) {
+  const seconds = ms / 1e3;
+  return `${Number.isInteger(seconds) ? seconds.toFixed(0) : seconds.toFixed(1)}s`;
+}
+
 // src/config.ts
 var BUILTIN_TYPE_DOCS = {
   user: "role / skills / preferences",
@@ -466,12 +584,11 @@ function memoryTypeDefaults(typeName, cfg = readConfig()) {
   if (found.expires) out.expires = found.expires;
   return out;
 }
-var DEFAULT_METASO_API_KEY = "mk-E384C1DD5E8501BB7EFE27C949AFDE5B";
 function loadMetasoApiKey(path2 = defaultConfigPath()) {
-  if (process.env.METASO_API_KEY) return process.env.METASO_API_KEY;
+  if (process.env.METASO_API_KEY) return process.env.METASO_API_KEY.trim();
   const cfg = readConfig(path2).metasoApiKey;
   if (cfg && typeof cfg === "string" && cfg.trim()) return cfg.trim();
-  return DEFAULT_METASO_API_KEY;
+  return void 0;
 }
 function loadTavilyApiKey(path2 = defaultConfigPath()) {
   if (process.env.TAVILY_API_KEY) return process.env.TAVILY_API_KEY.trim();
@@ -543,10 +660,30 @@ function readConfig(path2 = defaultConfigPath()) {
   return {};
 }
 function writeConfig(cfg, path2 = defaultConfigPath()) {
+  debugLogConfigWrite(cfg, path2);
   mkdirSync(dirname(path2), { recursive: true });
-  writeFileSync(path2, JSON.stringify(cfg, null, 2), "utf8");
+  const tmp = `${path2}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(cfg, null, 2), "utf8");
+  try {
+    chmodSync(tmp, 384);
+  } catch {
+  }
+  renameSync(tmp, path2);
+}
+function debugLogConfigWrite(cfg, configPath) {
+  const debugPath = process.env.REASONIX_DEBUG_PRESET;
+  if (!debugPath) return;
   try {
-    chmodSync(path2, 384);
+    const stack = new Error("trace").stack ?? "";
+    const keys = Object.keys(cfg).sort().join(",");
+    const presetField = cfg.preset === void 0 ? "(absent)" : JSON.stringify(cfg.preset);
+    const line = `${(/* @__PURE__ */ new Date()).toISOString()} writeConfig pid=${process.pid} \u2192 ${configPath}
+  keys=[${keys}]
+  preset=${presetField}
+${stack.split("\n").slice(1, 10).map((l) => `  ${l.trim()}`).join("\n")}
+
+`;
+    appendFileSync(debugPath, line);
   } catch {
   }
 }
@@ -634,7 +771,7 @@ function webSearchEngine(path2 = defaultConfigPath()) {
   if (cfg === "tavily") return "tavily";
   if (cfg === "perplexity") return "perplexity";
   if (cfg === "exa") return "exa";
-  return "mojeek";
+  return "bing";
 }
 function webSearchEndpoint(path2 = defaultConfigPath()) {
   const cfg = readConfig(path2).webSearchEndpoint;
@@ -669,6 +806,11 @@ function addProjectShellAllowed(rootDir, prefix, path2 = defaultConfigPath()) {
   cfg.projects[key].shellAllowed = [...existing, trimmed];
   writeConfig(cfg, path2);
 }
+function projectHooksTrusted(rootDir, path2 = defaultConfigPath()) {
+  const cfg = readConfig(path2);
+  const key = findProjectKey(cfg, rootDir);
+  return key !== void 0 && cfg.projects?.[key]?.hooksTrusted === true;
+}
 function loadProjectPathAllowed(rootDir, path2 = defaultConfigPath()) {
   const cfg = readConfig(path2);
   const key = findProjectKey(cfg, rootDir);
@@ -749,8 +891,8 @@ function computeWait(attempt, initial, cap, retryAfter) {
 }
 function sleep(ms, signal) {
   if (ms <= 0) return Promise.resolve();
-  return new Promise((resolve13, reject) => {
-    const timer = setTimeout(resolve13, ms);
+  return new Promise((resolve14, reject) => {
+    const timer = setTimeout(resolve14, ms);
     if (signal) {
       const onAbort = () => {
         clearTimeout(timer);
@@ -838,8 +980,8 @@ var DeepSeekClient = class {
     const waitMs = Math.max(0, this.nextChatRequestAt - now);
     this.nextChatRequestAt = Math.max(now, this.nextChatRequestAt) + this.minChatIntervalMs;
     if (waitMs <= 0) return;
-    await new Promise((resolve13, reject) => {
-      const timer = setTimeout(resolve13, waitMs);
+    await new Promise((resolve14, reject) => {
+      const timer = setTimeout(resolve14, waitMs);
       signal?.addEventListener(
         "abort",
         () => {
@@ -913,8 +1055,11 @@ var DeepSeekClient = class {
   }
   async chat(opts) {
     const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
-    const signal = opts.signal ?? ctrl.signal;
+    const timer = setTimeout(
+      () => ctrl.abort(new Error(`DeepSeek request timed out after ${this.timeoutMs}ms`)),
+      this.timeoutMs
+    );
+    const signal = opts.signal ? AbortSignal.any([opts.signal, ctrl.signal]) : ctrl.signal;
     try {
       await this.waitForChatRateLimit(signal);
       const resp = await fetchWithRetry(
@@ -949,8 +1094,11 @@ var DeepSeekClient = class {
   }
   async *stream(opts) {
     const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
-    const signal = opts.signal ?? ctrl.signal;
+    const timer = setTimeout(
+      () => ctrl.abort(new Error(`DeepSeek stream timed out after ${this.timeoutMs}ms`)),
+      this.timeoutMs
+    );
+    const signal = opts.signal ? AbortSignal.any([opts.signal, ctrl.signal]) : ctrl.signal;
     let resp;
     try {
       await this.waitForChatRateLimit(signal);
@@ -1049,10 +1197,10 @@ var PauseGate = class {
         `${kind}: no confirmation listener registered \u2014 cannot prompt the user. This tool can only be used inside an interactive Reasonix session.`
       );
     }
-    return new Promise((resolve13) => {
+    return new Promise((resolve14) => {
       const id = this._nextId++;
       const request = { id, kind, payload };
-      this._pending.set(id, { resolve: resolve13, request });
+      this._pending.set(id, { resolve: resolve14, request });
       for (const fn of this._listeners) {
         try {
           fn(request);
@@ -1207,7 +1355,17 @@ var EN = {
     missingApiKey: "DEEPSEEK_API_KEY is not set and stdin is not a TTY (cannot prompt).\nSet the env var, or run `reasonix chat` once interactively to save a key.\n"
   },
   sessions: {
-    emptyHint: "no saved sessions yet \u2014 run `reasonix chat` (sessions are auto-saved unless --no-session)."
+    emptyHint: "no saved sessions yet \u2014 run `reasonix chat` (sessions are auto-saved unless --no-session).",
+    listHeader: "Saved sessions (~/.reasonix/sessions/):",
+    inspectHint: "Inspect:  reasonix sessions <name>",
+    resumeHint: "Resume:   reasonix chat --session <name>",
+    noSession: 'no session named "{name}" (or it\u2019s empty).',
+    lookedAt: "looked at: {path}",
+    noIdleSessions: "no sessions idle \u2265{days} days. Nothing pruned.",
+    wouldPrune: "would prune {count} session(s) idle \u2265{days} days:",
+    dryRunHint: "re-run without --dry-run to actually delete.",
+    prunedCount: "pruned {count} session(s) idle \u2265{days} days:",
+    daysInvalid: "--days must be a positive integer (got {days})."
   },
   ui: {
     welcome: "Run `reasonix` any time to start chatting \u2014 your settings are remembered.",
@@ -1311,10 +1469,6 @@ var EN = {
           title: "copy / paste",
           rows: [
             { key: "select text", text: "drag to select \u2014 terminal-native (no modifier needed)" },
-            {
-              key: "/copy",
-              text: "vim/tmux-style copy mode \u2014 works in SSH/mosh/tmux where drag-select can't extend past the viewport"
-            },
             {
               key: "copy",
               text: "Ctrl+Shift+C (Win/Linux) \xB7 Cmd+C (macOS) \u2014 or auto-copy-on-select if your terminal does it"
@@ -1405,9 +1559,6 @@ var EN = {
   },
   slash: {
     help: { description: "show the full command reference" },
-    copy: {
-      description: "open vim/tmux-style copy mode \u2014 j/k navigate, v select, y yank to clipboard"
-    },
     status: { description: "current model, flags, context, session" },
     preset: {
       description: "model bundle \u2014 auto escalates flash \u2192 pro, flash/pro lock",
@@ -1559,8 +1710,8 @@ var EN = {
       argsHint: "<question>"
     },
     "search-engine": {
-      description: "switch web search backend \u2014 mojeek (default, no deps), searxng (self-hosted), metaso (free 100/d), tavily (free 1000/mo), perplexity (AI-native), or exa (AI-native)",
-      argsHint: "<mojeek|searxng|metaso|tavily|perplexity|exa> [<key>]"
+      description: "switch web search backend \u2014 bing (default, works from CN without proxy), searxng (self-hosted), metaso (free 100/d), tavily (free 1000/mo), perplexity (AI-native), or exa (AI-native)",
+      argsHint: "<bing|searxng|metaso|tavily|perplexity|exa> [<key>]"
     }
   },
   wizard: {
@@ -1723,6 +1874,8 @@ var EN = {
     verboseOn: "\u25B8 verbose mode on \u2014 full reasoning + tool output",
     verboseOff: "\u25B8 verbose mode off \u2014 head/tail elision restored",
     commandFailed: "! command failed",
+    steerInjected: "\u25B8 steering queued \u2014 will be added after the current step",
+    steerCommandRejected: "\u25B8 commands are disabled while steering a busy turn",
     btwUsage: "\u25B8 /btw <question> \u2014 ask a side question without polluting the conversation context.",
     btwHeader: "\u226B btw",
     btwFailed: "/btw failed",
@@ -1766,7 +1919,11 @@ var EN = {
     editHistoryHelpShow: "/show <id>            \u2192 per-file summary    \xB7    /show <id> <path>  \u2192 full diff of one file",
     editHistoryHelpUndo: "/undo                 \u2192 newest non-undone   \xB7    /undo <id> [path]  \u2192 target a specific batch or file",
     editHistoryAlreadyReverted: "(already reverted \u2014 /history shows the batch-level status)",
-    editHistoryRevertFile: "/undo {id} {path}  \u2192 revert just this file"
+    editHistoryRevertFile: "/undo {id} {path}  \u2192 revert just this file",
+    mcpFailed: "MCP {name} failed",
+    mcpWarn: "MCP {name} warn",
+    unknownTheme: "unknown theme: {name}\navailable: {choices}",
+    themeSaved: "theme saved: {name}\nactive on next launch: {active}"
   },
   hooks: {
     head: "hook {tag} `{cmd}` {decision}{truncTag}",
@@ -1789,9 +1946,9 @@ var EN = {
     abortedAtIter: "aborted at iter {iter} \u2014 stopped without producing a summary (press \u2191 + Enter or /retry to resume)",
     toolUploadStatus: "tool result uploaded \xB7 model thinking before next response\u2026",
     preflightTruncateStatus: "preflight: context near full, truncating oldest history\u2026",
-    preflightTruncated: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \u2014 truncated {beforeMessages} messages \u2192 {afterMessages}. Sending.",
-    preflightTruncatedStillFull: "preflight: request still ~{estimate}/{ctxMax} tokens ({pct}%) after truncating {beforeMessages} messages \u2192 {afterMessages}. DeepSeek will likely 400. Run /clear or /new to start fresh.",
-    preflightNoFold: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) and nothing left to truncate \u2014 DeepSeek will likely 400. Run /clear or /new to start fresh.",
+    preflightTruncated: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB \u2014 truncated {beforeMessages} messages \u2192 {afterMessages}. Sending.",
+    preflightTruncatedStillFull: "preflight: request still ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB after truncating {beforeMessages} messages \u2192 {afterMessages}. DeepSeek will likely 400. Run /clear or /new to start fresh.",
+    preflightNoFold: "preflight: request ~{estimate}/{ctxMax} tokens ({pct}%) \xB7 body {bodyKB} KB and nothing left to truncate \u2014 DeepSeek will likely 400. Run /clear or /new to start fresh.",
     flashEscalation: "\u21E7 flash requested escalation \u2014 retrying this turn on {model}{reasonSuffix}",
     harvestStatus: "extracting plan state from reasoning\u2026",
     repeatToolCallWarning: "Caught a repeated tool call \u2014 let the model see the issue and retry with a different approach.",
@@ -1810,6 +1967,7 @@ var EN = {
     balance402: "Out of balance (DeepSeek 402): {inner}. Top up at https://platform.deepseek.com/top_up \u2014 the panel header shows your balance once it's non-zero.",
     badparam422: "Invalid parameter (DeepSeek 422): {inner}",
     badrequest400: "Bad request (DeepSeek 400): {inner}",
+    concurrency429: "DeepSeek concurrency limit hit (429): {inner}. The account has too many in-flight requests (cap: 500 for v4-pro, 2500 for v4-flash, summed across API keys account-wide). Usually means another Reasonix process is sharing the same key, or a parallel subagent fan-out overshot. Wait a few seconds and retry, reduce parallelism, or request a higher cap at https://platform.deepseek.com.",
     deepseek5xxHead: "DeepSeek service unavailable ({status}) \u2014 this is a DeepSeek-side problem, not Reasonix. Already retried 4\xD7 with backoff.",
     deepseek5xxReachable: " DeepSeek's main API answered our health check, but /chat/completions is failing \u2014 partial outage on their side.",
     deepseek5xxUnreachable: " DeepSeek API is unreachable from your network \u2014 could be a wider DS outage or a local network issue.",
@@ -2078,6 +2236,12 @@ var EN = {
       statusMcp: "  mcp     {servers} server(s), {tools} tool(s) in registry",
       statusEdits: "  edits   {count} pending (/apply to commit, /discard to drop)",
       statusPlan: "  plan    ON \u2014 writes gated (submit_plan + approval)",
+      statusLifecycle: "  lifecycle {mode}/{state} \xB7 {progress}{evidence}",
+      lifecycleNoPlan: "no plan",
+      lifecycleEvidencePending: "evidence pending",
+      lifecycleRejected: "lifecycle: {tool} blocked in {state} \u2014 next: {next}",
+      lifecycleEvidenceRejected: "lifecycle: step {stepId} needs evidence \u2014 next: {next}",
+      lifecycleRepeatedRejected: "lifecycle: repeated {tool} rejection \u2014 do not retry identical args",
       statusModeYolo: "  mode    YOLO \u2014 edits + shell auto-run with no prompt (/undo still rolls back \xB7 Shift+Tab to flip)",
       statusModeAuto: "  mode    AUTO \u2014 edits apply immediately (u to undo within 5s \xB7 Shift+Tab to flip)",
       statusModeReview: "  mode    review \u2014 edits queue for /apply or y  (Shift+Tab to flip)",
@@ -2089,6 +2253,9 @@ var EN = {
       activeNone: "\u25B8 active plan: (none)",
       noArchives: "no archived plans yet for this session \u2014 they auto-archive when every step is done",
       archivedHeader: "Archived ({count}):",
+      evidencePending: "  ! evidence pending \u2014 current step needs verification/diff/checkpoint/manual evidence",
+      evidenceLine: "  evidence {stepId}: {summary}",
+      archivedEvidenceLine: "    evidence: {summary}",
       replayNoSession: "no session attached \u2014 `/replay` is per-session. Run `reasonix code` in a project to get a session.",
       replayNoArchives: "no archived plans yet for this session \u2014 `/replay` lights up once a plan completes (auto-archives when every step is done).",
       replayInvalidIndex: "invalid index \u2014 `/replay` takes 1..{max} (newest = 1). Use `/plans` to see the list.",
@@ -2183,7 +2350,7 @@ var EN = {
       currentEngine: "Current web search engine: {engine}",
       endpoint: "SearXNG endpoint: {url}",
       usageHeader: "Usage:",
-      usageMojeek: "  /search-engine mojeek            use Mojeek (default, no external deps)",
+      usageBing: "  /search-engine bing              use Bing (default, works from CN without proxy)",
       usageSearxng: "  /search-engine searxng            use SearXNG at default endpoint",
       usageSearxngUrl: "  /search-engine searxng <url>      use SearXNG at custom endpoint",
       usageMetaso: "  /search-engine metaso              use Metaso API (100/d free, configure your own API key for more)",
@@ -2248,7 +2415,8 @@ var EN = {
     evt: " evt",
     editsLabel: "edits:",
     mcpLoading: "MCP",
-    ctx: "ctx"
+    ctx: "ctx",
+    shortcutsHint: "Ctrl+P shortcuts"
   },
   editMode: {
     plan: "PLAN MODE",
@@ -2278,7 +2446,9 @@ var EN = {
     editorFailed: "external editor:",
     editorMissing: "no $EDITOR / $VISUAL / $GIT_EDITOR set \u2014 export one (e.g. `export EDITOR=nano`) and retry",
     editorExited: "editor exited with code {code}",
-    typeaheadStaged: "\u25B8 {count} line(s) staged \xB7 esc recall"
+    typeaheadStaged: "\u25B8 {count} line(s) staged \xB7 esc recall",
+    steerPlaceholder: "type to steer the current task \u2014 commands are disabled while busy",
+    steerHint: "send \u2014 injected mid-turn"
   },
   pathConfirm: {
     title: "Outside-sandbox path",
@@ -2297,7 +2467,13 @@ var EN = {
     denyDesc: "press Tab to add context telling the model why",
     pathLabel: "path",
     sandboxLabel: "sandbox",
-    allowPrefixLabel: "prefix"
+    allowPrefixLabel: "prefix",
+    promptTitleRead: "Access path \u2014 read",
+    promptTitleWrite: "Access path \u2014 write",
+    actionAllowRead: "Allow read",
+    actionAllowWrite: "Allow write",
+    actionAlwaysAllow: "Always allow \u2014 {prefix}",
+    actionDeny: "Deny"
   },
   shellConfirm: {
     title: "Shell command",
@@ -2319,7 +2495,12 @@ var EN = {
     timeoutLabel: "timeout",
     waitLabel: "wait",
     previewMore: "\u2026 {n} more line hidden \u2014 press esc, ask the model to split it",
-    previewMorePlural: "\u2026 {n} more lines hidden \u2014 press esc, ask the model to split it"
+    previewMorePlural: "\u2026 {n} more lines hidden \u2014 press esc, ask the model to split it",
+    promptTitleRunCommand: "Run command",
+    promptTitleRunBackground: "Run background command",
+    actionRunOnce: "Run once",
+    actionAlwaysAllow: "Always allow \u2014 {prefix}",
+    actionDeny: "Deny"
   },
   editConfirm: {
     footer: "[y/Enter] apply  \xB7  [n] reject with reason  \xB7  [a] apply rest  \xB7  [A] flip AUTO  \xB7  [\u2191\u2193/Space] scroll  \xB7  [Esc] abort",
@@ -2460,36 +2641,37 @@ var EN = {
     probeFailed: "probe failed \u2014 {message}"
   },
   webErrors: {
-    status: "web_search {status} \u2014 try: the search backend returned an error; rephrase the query, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    status: "web_search {status} \u2014 try: the search backend returned an error; rephrase the query, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     rateLimit429: "web_search 429 \u2014 try: wait 10s before retrying, or rephrase the query; the search backend is rate-limiting this client",
-    forbidden403: "web_search 403 \u2014 try: the search backend is blocking this client; switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa, or wait and retry later",
+    forbidden403: "web_search 403 \u2014 try: the search backend is blocking this client; switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa, or wait and retry later",
     serverError5xx: "web_search {status} \u2014 try: open the search URL in a browser; if it loads this is transient and a retry in 30s may help",
-    mojeekBlocked: "web_search: Mojeek anti-bot page \u2014 rate-limited or blocked \u2014 try: wait 30s and retry, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
-    mojeekNoResults: "web_search: 0 results but response doesn't look like a real empty page ({chars} chars, first 120: {preview}) \u2014 try: rephrase the query with simpler terms, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    bingBlocked: "web_search: Bing anti-bot page \u2014 rate-limited or blocked \u2014 try: wait 30s and retry, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
+    bingNoResults: "web_search: 0 results but response doesn't look like a real empty page ({chars} chars, first 120: {preview}) \u2014 try: rephrase the query with simpler terms, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     invalidEndpoint: 'web_search: invalid SearXNG endpoint "{endpoint}" \u2014 try: set a valid URL with /search-endpoint http://host:port',
     endpointMustBeHttp: "web_search: SearXNG endpoint must be http(s), got {protocol} \u2014 try: set a valid URL with /search-endpoint http://host:port",
-    cannotReach: "web_search: Cannot reach SearXNG server at {endpoint} \u2014 try: install and start SearXNG (https://github.com/searxng/searxng, e.g. `docker run -d -p 8080:8080 searxng/searxng`), or switch to another engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
-    searxngNoResults: "web_search: 0 results but SearXNG response doesn't look like an empty results page ({chars} chars) \u2014 try: rephrase the query with simpler terms, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
-    metasoDailyLimit: "web_search: daily search limit reached for the default API key \u2014 set your own METASO_API_KEY env var or get one at https://metaso.cn/search-api/playground",
+    cannotReach: "web_search: Cannot reach SearXNG server at {endpoint} \u2014 try: install and start SearXNG (https://github.com/searxng/searxng, e.g. `docker run -d -p 8080:8080 searxng/searxng`), or switch to another engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
+    searxngNoResults: "web_search: 0 results but SearXNG response doesn't look like an empty results page ({chars} chars) \u2014 try: rephrase the query with simpler terms, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
+    metasoMissingKey: "web_search: Metaso requires an API key \u2014 set METASO_API_KEY or configure one with /search-engine metaso <key>. Get one at https://metaso.cn/search-api/playground",
+    metasoDailyLimit: "web_search: Metaso daily search limit reached \u2014 set METASO_API_KEY or get a key at https://metaso.cn/search-api/playground",
     metasoUnauthorized: "web_search: Metaso API key rejected \u2014 check METASO_API_KEY or get one at https://metaso.cn/search-api/playground",
     metasoRateLimit: "web_search: Metaso rate-limited \u2014 wait and retry, or get your own API key at https://metaso.cn/search-api/playground",
-    metasoServerError: "web_search: Metaso server error ({status}) \u2014 try again later, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    metasoServerError: "web_search: Metaso server error ({status}) \u2014 try again later, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     metasoParseError: "web_search: Metaso returned unparseable response (HTTP {status}) \u2014 try again later",
     metasoApiError: "web_search: Metaso API error (code {code}: {message}) \u2014 try again later",
     tavilyMissingKey: "web_search: Tavily backend requires an API key \u2014 set TAVILY_API_KEY env var or `tavilyApiKey` in ~/.reasonix/config.json; free 1000/mo signup at https://tavily.com",
     tavilyUnauthorized: "web_search: Tavily API key rejected \u2014 check TAVILY_API_KEY or get one at https://tavily.com",
-    tavilyRateLimit: "web_search: Tavily rate-limited or monthly quota exceeded \u2014 wait, switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa, or upgrade your Tavily plan",
-    tavilyServerError: "web_search: Tavily server error ({status}) \u2014 try again later, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    tavilyRateLimit: "web_search: Tavily rate-limited or monthly quota exceeded \u2014 wait, switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa, or upgrade your Tavily plan",
+    tavilyServerError: "web_search: Tavily server error ({status}) \u2014 try again later, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     tavilyParseError: "web_search: Tavily returned unparseable response (HTTP {status}) \u2014 try again later",
     perplexityMissingKey: "web_search: Perplexity backend requires an API key \u2014 set PERPLEXITY_API_KEY env var or `perplexityApiKey` in ~/.reasonix/config.json; get one at https://perplexity.ai/settings/api",
     perplexityUnauthorized: "web_search: Perplexity API key rejected \u2014 check PERPLEXITY_API_KEY or get one at https://perplexity.ai/settings/api",
-    perplexityRateLimit: "web_search: Perplexity rate-limited \u2014 wait and retry, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
-    perplexityServerError: "web_search: Perplexity server error ({status}) \u2014 try again later, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    perplexityRateLimit: "web_search: Perplexity rate-limited \u2014 wait and retry, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
+    perplexityServerError: "web_search: Perplexity server error ({status}) \u2014 try again later, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     perplexityParseError: "web_search: Perplexity returned unparseable response (HTTP {status}) \u2014 try again later",
     exaMissingKey: "web_search: Exa backend requires an API key \u2014 set EXA_API_KEY env var or `exaApiKey` in ~/.reasonix/config.json; free 1000/mo signup at https://exa.ai",
     exaUnauthorized: "web_search: Exa API key rejected \u2014 check EXA_API_KEY or get one at https://exa.ai",
     exaRateLimit: "web_search: Exa API rate-limited or monthly quota exceeded \u2014 wait or upgrade at https://exa.ai/pricing",
-    exaServerError: "web_search: Exa server error ({status}) \u2014 try again later, or switch engine with /search-engine mojeek|searxng|metaso|tavily|perplexity|exa",
+    exaServerError: "web_search: Exa server error ({status}) \u2014 try again later, or switch engine with /search-engine bing|searxng|metaso|tavily|perplexity|exa",
     exaParseError: "web_search: Exa returned unparseable response (HTTP {status}) \u2014 try again later",
     fetchStatus: "web_fetch {status} for {url} \u2014 try: confirm the URL resolves in a browser; status suggests the host returned an error page",
     fetchRateLimit429: "web_fetch 429 for {url} \u2014 try: wait 10s before retrying; the host is rate-limiting this client",
@@ -2581,19 +2763,6 @@ var EN = {
     categoryProject: "project",
     categoryReference: "reference"
   },
-  copyMode: {
-    title: "\u2500\u2500 COPY MODE \u2500\u2500",
-    help: "j/k or \u2191/\u2193 move \xB7 v select \xB7 y yank \xB7 g/G top/bottom \xB7 q quit",
-    statusBar: "line {cur}/{total} \xB7 selection: {sel}",
-    statusYanked: "yanked {size} chars (osc52={osc52})",
-    statusEmpty: "nothing selected",
-    empty: "(no chat content yet \u2014 say something to the model first)",
-    labelUser: "you",
-    labelAssistant: "assistant",
-    labelReasoning: "reasoning",
-    yankedToast: "\u25B8 copied {size} chars to clipboard (osc52)",
-    yankedToastFile: "\u25B8 copied {size} chars \xB7 file: {path}"
-  },
   mcpHealth: {
     noData: "no inspect data",
     healthy: "healthy \xB7 {ms}ms",
@@ -2662,7 +2831,13 @@ var EN = {
     noResources: "No resources on any connected MCP server (or no servers connected). `/mcp` shows the current set.",
     readOne: "Read one: `/resource <uri>` \u2014 or use Tab in the picker.",
     noPrompts: "No prompts on any connected MCP server (or no servers connected). `/mcp` shows the current set.",
-    fetchOne: "Fetch one: `/prompt <name>` \u2014 args are not supported yet; prompts with required args will surface an error from the server."
+    fetchOne: "Fetch one: `/prompt <name>` \u2014 args are not supported yet; prompts with required args will surface an error from the server.",
+    noServerForResource: 'no server exposes resource "{name}"',
+    resourceHint: "`/resource` with no arg lists what's available.",
+    readFailed: "readResource failed",
+    noServerForPrompt: 'no server exposes prompt "{name}"',
+    promptHint: "`/prompt` with no arg lists what's available.",
+    fetchFailed: "getPrompt failed"
   },
   mcpLifecycle: {
     handshake: "handshake\u2026",
@@ -2675,7 +2850,9 @@ var EN = {
     disabledDetail: "via /mcp disable {name}",
     failedSetupHint: "\u2192 run `reasonix setup` to remove this entry, or fix the underlying issue (missing npm package, network, etc.).",
     failedSetupConfigHint: "\u2192 run `reasonix setup` to remove broken entries from your saved config.",
-    abortedHint: "MCP startup aborted \u2014 {count} server(s) skipped. Run /mcp to retry once you've fixed the underlying issue."
+    abortedHint: "MCP startup aborted \u2014 {count} server(s) skipped. Run /mcp to retry once you've fixed the underlying issue.",
+    toolsReady: "tools ready",
+    warnLabel: "warn"
   },
   checkpointPicker: {
     title: "restore a checkpoint \u2014 {workspace}",
@@ -2721,6 +2898,64 @@ var EN = {
     noRecords: "no records",
     untracked: "(untracked)",
     churned: "(churned \xD7{count})"
+  },
+  builtinSkills: {
+    explore: "Explore the codebase in an isolated subagent \u2014 wide-net read-only investigation that returns one distilled answer. Best for: 'find all places that\u2026', 'how does X work across the project', 'survey the code for Y'.",
+    research: "Research a question by combining web search + code reading in an isolated subagent. Best for: 'is X feature supported by lib Y', 'what\u2019s the canonical way to do Z', 'compare our impl against the spec'.",
+    review: "Review the pending changes (current branch diff by default) in an isolated subagent \u2014 flags correctness, security, missing tests, hidden behavior changes; reports verdict + per-issue file:line. Read-only; the parent decides what to act on.",
+    securityReview: "Security-focused review of the current branch diff in an isolated subagent \u2014 flags injection/authz/secrets/deserialization/path-traversal/crypto issues, severity-tagged. Read-only. Use when shipping changes that touch auth, input parsing, file IO, or external requests.",
+    test: "Run the project\u2019s test suite, diagnose failures, propose SEARCH/REPLACE fixes, re-run until green (or stop after 2 fix attempts on the same failure). Inlined \u2014 runs in the parent loop so you see the edit blocks and can /apply them. Detects npm/pnpm/yarn/pytest/go/cargo."
+  },
+  shortcutsHelp: {
+    title: "Shortcuts",
+    groupInput: "Input",
+    groupNavigation: "Navigation",
+    groupSession: "Session",
+    groupSystem: "System",
+    descEnter: "Send message",
+    descShiftEnter: "New line",
+    descCtrlEnter: "New line",
+    descCtrlJ: "New line",
+    descCtrlU: "Clear input",
+    descCtrlW: "Delete word",
+    descCtrlP: "Show/hide shortcuts",
+    descCtrlX: "Open in editor",
+    descArrows: "Input history",
+    descPgUpDown: "Scroll page",
+    descCtrlL: "Clear screen",
+    descCtrlB: "Toggle sidebar",
+    descNewSession: "New session",
+    descListSessions: "List sessions",
+    descSwitchModel: "Switch model",
+    descSwitchPreset: "Switch preset",
+    descSwitchTheme: "Switch theme",
+    descCtrlC: "Quit",
+    descEsc: "Stop / Cancel",
+    descCtrlR: "Toggle verbose",
+    descCtrlO: "Expand reply (streaming only)",
+    descHelp: "Show all commands",
+    descShiftTab: "Switch edit mode"
+  },
+  mcpCli: {
+    bundledCatalog: "Bundled MCP servers (offline catalog):",
+    justFetched: "just fetched",
+    cachedAge: "cached, {age}",
+    moreAvailable: "more available",
+    allLoaded: "all loaded",
+    morePagesAvailable: "\u25B8 more pages available \u2014 `reasonix mcp list --pages <n>` or --all",
+    installHint: "Install:  reasonix mcp install <name>",
+    usageSearch: "usage: reasonix mcp search <query>",
+    usageInstall: "usage: reasonix mcp install <name>",
+    noMatchesFor: 'No matches for "{q}" across {count} loaded entries ({source})',
+    matchCount: '{count} match(es) for "{q}" in {source} registry ({loaded} entries scanned):',
+    moreLoaded: "\u2026 {count} more loaded \u2014 use `reasonix mcp search <query>` to filter",
+    moreMatches: "\u2026 {count} more matches",
+    installed: "Installed: {spec}",
+    noServerFound: 'No MCP server named "{target}" found after walking {pages} page(s) of the {source} registry.',
+    noServerTryMore: "Try: reasonix mcp install {target} --max-pages 100",
+    noInstallMeta: 'Could not derive install metadata for "{name}" \u2014 try `npx -y @smithery/cli install {name}` directly.',
+    buildSpecFailed: "Cannot build install spec for {name}: {message}",
+    alreadyInstalled: "Already installed: {spec}"
   }
 };
 
@@ -2767,7 +3002,17 @@ var zhCN = {
     missingApiKey: "\u672A\u8BBE\u7F6E DEEPSEEK_API_KEY \u4E14\u6807\u51C6\u8F93\u5165\u4E0D\u662F TTY\uFF08\u65E0\u6CD5\u4EA4\u4E92\u5F0F\u8F93\u5165\uFF09\u3002\n\u8BF7\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5148\u8FD0\u884C `reasonix chat` \u4EA4\u4E92\u4E00\u6B21\u4EE5\u4FDD\u5B58\u5BC6\u94A5\u3002\n"
   },
   sessions: {
-    emptyHint: "\u6682\u65E0\u5DF2\u4FDD\u5B58\u7684\u4F1A\u8BDD \u2014 \u8FD0\u884C `reasonix chat`\uFF08\u4F1A\u8BDD\u4F1A\u81EA\u52A8\u4FDD\u5B58\uFF0C\u9664\u975E\u4F7F\u7528\u4E86 --no-session\uFF09\u3002"
+    emptyHint: "\u6682\u65E0\u5DF2\u4FDD\u5B58\u7684\u4F1A\u8BDD \u2014 \u8FD0\u884C `reasonix chat`\uFF08\u4F1A\u8BDD\u4F1A\u81EA\u52A8\u4FDD\u5B58\uFF0C\u9664\u975E\u4F7F\u7528\u4E86 --no-session\uFF09\u3002",
+    listHeader: "\u4FDD\u5B58\u7684\u4F1A\u8BDD (~/.reasonix/sessions/)\uFF1A",
+    inspectHint: "\u67E5\u770B\uFF1Areasonix sessions <name>",
+    resumeHint: "\u6062\u590D\uFF1Areasonix chat --session <name>",
+    noSession: '\u627E\u4E0D\u5230\u4F1A\u8BDD "{name}"\uFF08\u6216\u4E3A\u7A7A\uFF09\u3002',
+    lookedAt: "\u4F4D\u7F6E\uFF1A{path}",
+    noIdleSessions: "\u6CA1\u6709\u95F2\u7F6E \u2265{days} \u5929\u7684\u4F1A\u8BDD\u3002\u65E0\u9700\u6E05\u7406\u3002",
+    wouldPrune: "\u5C06\u6E05\u7406 {count} \u4E2A\u95F2\u7F6E \u2265{days} \u5929\u7684\u4F1A\u8BDD\uFF1A",
+    dryRunHint: "\u53BB\u6389 --dry-run \u53EF\u5B9E\u9645\u6267\u884C\u5220\u9664\u3002",
+    prunedCount: "\u5DF2\u6E05\u7406 {count} \u4E2A\u95F2\u7F6E \u2265{days} \u5929\u7684\u4F1A\u8BDD\uFF1A",
+    daysInvalid: "--days \u5FC5\u987B\u662F\u6B63\u6574\u6570\uFF08\u4F20\u5165\u4E86 {days}\uFF09\u3002"
   },
   ui: {
     welcome: "\u968F\u65F6\u8FD0\u884C `reasonix` \u5F00\u59CB\u804A\u5929 \u2014 \u60A8\u7684\u8BBE\u7F6E\u5C06\u88AB\u8BB0\u4F4F\u3002",
@@ -2865,10 +3110,6 @@ var zhCN = {
           title: "\u590D\u5236 / \u7C98\u8D34",
           rows: [
             { key: "\u9009\u4E2D\u6587\u5B57", text: "\u76F4\u63A5\u62D6\u52A8 \u2014 \u7EC8\u7AEF\u539F\u751F\uFF08\u4E0D\u9700\u8981\u4EFB\u4F55\u4FEE\u9970\u952E\uFF09" },
-            {
-              key: "/copy",
-              text: "vim/tmux \u98CE\u683C\u590D\u5236\u6A21\u5F0F \u2014 SSH / mosh / tmux \u4E0B\u62D6\u9009\u8D8A\u8FC7\u53EF\u89C6\u533A\u65E0\u6548\u65F6\u7528\u8FD9\u4E2A"
-            },
             {
               key: "\u590D\u5236",
               text: "Ctrl+Shift+C\uFF08Win/Linux\uFF09\xB7 Cmd+C\uFF08macOS\uFF09\u2014 \u6216\u9009\u4E2D\u5373\u590D\u5236\uFF08\u770B\u7EC8\u7AEF\u8BBE\u7F6E\uFF09"
@@ -2959,9 +3200,6 @@ var zhCN = {
   },
   slash: {
     help: { description: "\u663E\u793A\u5B8C\u6574\u547D\u4EE4\u53C2\u8003" },
-    copy: {
-      description: "\u8FDB\u5165 vim/tmux \u98CE\u683C\u590D\u5236\u6A21\u5F0F \u2014 j/k \u79FB\u52A8\u3001v \u8D77\u9009\u533A\u3001y \u590D\u5236\u5230\u526A\u8D34\u677F"
-    },
     status: { description: "\u5F53\u524D\u6A21\u578B\u3001\u6807\u5FD7\u3001\u4E0A\u4E0B\u6587\u3001\u4F1A\u8BDD" },
     preset: {
       description: "\u6A21\u578B\u7EC4\u5408 \u2014 \u81EA\u52A8\u5728 flash \u2192 pro \u4E4B\u95F4\u5207\u6362\uFF0C\u6216\u9501\u5B9A flash/pro",
@@ -3117,8 +3355,8 @@ var zhCN = {
       argsHint: "<question>"
     },
     "search-engine": {
-      description: "\u5207\u6362\u7F51\u7EDC\u641C\u7D22\u540E\u7AEF \u2014 mojeek\uFF08\u9ED8\u8BA4\uFF0C\u65E0\u4F9D\u8D56\uFF09\u3001searxng\uFF08\u81EA\u6258\u7BA1\uFF09\u3001metaso\uFF08\u6BCF\u65E5 100 \u6B21\uFF09\u3001tavily\uFF08\u6BCF\u6708 1000 \u6B21\u514D\u8D39\uFF09\u3001perplexity\uFF08AI \u76F4\u63A5\u56DE\u7B54\uFF09\u6216 exa\uFF08AI \u76F4\u63A5\u56DE\u7B54\uFF09",
-      argsHint: "<mojeek|searxng|metaso|tavily|perplexity|exa> [<key>]"
+      description: "\u5207\u6362\u7F51\u7EDC\u641C\u7D22\u540E\u7AEF \u2014 bing\uFF08\u9ED8\u8BA4\uFF0C\u56FD\u5185\u88F8 IP \u76F4\u8FDE\uFF09\u3001searxng\uFF08\u81EA\u6258\u7BA1\uFF09\u3001metaso\uFF08\u6BCF\u65E5 100 \u6B21\uFF09\u3001tavily\uFF08\u6BCF\u6708 1000 \u6B21\u514D\u8D39\uFF09\u3001perplexity\uFF08AI \u76F4\u63A5\u56DE\u7B54\uFF09\u6216 exa\uFF08AI \u76F4\u63A5\u56DE\u7B54\uFF09",
+      argsHint: "<bing|searxng|metaso|tavily|perplexity|exa> [<key>]"
     }
   },
   wizard: {
@@ -3281,6 +3519,8 @@ var zhCN = {
     verboseOn: "\u25B8 \u8BE6\u7EC6\u6A21\u5F0F\u5DF2\u5F00 \u2014 \u663E\u793A\u5B8C\u6574\u63A8\u7406 + \u5DE5\u5177\u8F93\u51FA",
     verboseOff: "\u25B8 \u8BE6\u7EC6\u6A21\u5F0F\u5DF2\u5173 \u2014 \u6062\u590D\u5934\u5C3E\u7701\u7565",
     commandFailed: "! \u547D\u4EE4\u5931\u8D25",
+    steerInjected: "\u25B8 \u5DF2\u52A0\u5165\u5F15\u5BFC\u961F\u5217 \u2014 \u5C06\u5728\u5F53\u524D\u6B65\u9AA4\u540E\u6CE8\u5165",
+    steerCommandRejected: "\u25B8 \u5F53\u524D\u8F6E\u6B21\u5FD9\u788C\u65F6\u4E0D\u80FD\u63D0\u4EA4\u547D\u4EE4\uFF0C\u53EA\u80FD\u8F93\u5165\u666E\u901A\u5F15\u5BFC\u6D88\u606F",
     btwUsage: "\u25B8 /btw <\u95EE\u9898> \u2014 \u987A\u4FBF\u95EE\u4E2A\u9898\u5916\u8BDD\uFF0C\u4E0D\u4F1A\u5199\u5165\u5F53\u524D\u4F1A\u8BDD\u4E0A\u4E0B\u6587\u3002",
     btwHeader: "\u226B btw",
     btwFailed: "/btw \u8C03\u7528\u5931\u8D25",
@@ -3324,7 +3564,11 @@ var zhCN = {
     editHistoryHelpShow: "/show <id>            \u2192 \u6587\u4EF6\u6458\u8981    \xB7    /show <id> <path>  \u2192 \u67D0\u4E2A\u6587\u4EF6\u7684\u5B8C\u6574 diff",
     editHistoryHelpUndo: "/undo                 \u2192 \u6700\u65B0\u7684\u672A\u64A4\u9500\u9879   \xB7    /undo <id> [path]  \u2192 \u6307\u5B9A\u6279\u6B21\u6216\u6587\u4EF6",
     editHistoryAlreadyReverted: "\uFF08\u5DF2\u64A4\u9500 \u2014 /history \u663E\u793A\u6279\u6B21\u7EA7\u72B6\u6001\uFF09",
-    editHistoryRevertFile: "/undo {id} {path}  \u2192 \u4EC5\u8FD8\u539F\u6B64\u6587\u4EF6"
+    editHistoryRevertFile: "/undo {id} {path}  \u2192 \u4EC5\u8FD8\u539F\u6B64\u6587\u4EF6",
+    mcpFailed: "MCP {name} \u5931\u8D25",
+    mcpWarn: "MCP {name} \u8B66\u544A",
+    unknownTheme: "\u672A\u77E5\u4E3B\u9898\uFF1A{name}\n\u53EF\u7528\u4E3B\u9898\uFF1A{choices}",
+    themeSaved: "\u4E3B\u9898\u5DF2\u4FDD\u5B58\uFF1A{name}\n\u4E0B\u6B21\u542F\u52A8\u751F\u6548\uFF1A{active}"
   },
   hooks: {
     head: "\u94A9\u5B50 {tag} `{cmd}` {decision}{truncTag}",
@@ -3347,9 +3591,9 @@ var zhCN = {
     abortedAtIter: "\u5728\u7B2C {iter} \u6B21\u5DE5\u5177\u8C03\u7528\u5904\u4E2D\u65AD \u2014 \u672A\u751F\u6210\u603B\u7ED3\u5373\u505C\u6B62\uFF08\u6309 \u2191 + Enter \u6216 /retry \u6062\u590D\uFF09",
     toolUploadStatus: "\u5DE5\u5177\u7ED3\u679C\u5DF2\u4E0A\u4F20 \xB7 \u6A21\u578B\u5728\u751F\u6210\u4E0B\u4E00\u6761\u54CD\u5E94\u524D\u601D\u8003\u4E2D\u2026",
     preflightTruncateStatus: "\u9884\u68C0\uFF1A\u4E0A\u4E0B\u6587\u63A5\u8FD1\u4E0A\u9650\uFF0C\u6B63\u5728\u88C1\u526A\u6700\u65E9\u5386\u53F2\u2026",
-    preflightTruncated: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u2014 \u5DF2\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages}\u3002\u53D1\u9001\u4E2D\u3002",
-    preflightTruncatedStillFull: "\u9884\u68C0\uFF1A\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages} \u540E\uFF0C\u8BF7\u6C42\u4ECD\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
-    preflightNoFold: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\u4E14\u6CA1\u6709\u53EF\u88C1\u526A\u7684\u5185\u5BB9 \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
+    preflightTruncated: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u2014 \u5DF2\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages}\u3002\u53D1\u9001\u4E2D\u3002",
+    preflightTruncatedStillFull: "\u9884\u68C0\uFF1A\u88C1\u526A {beforeMessages} \u6761\u6D88\u606F \u2192 {afterMessages} \u540E\uFF0C\u8BF7\u6C42\u4ECD\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
+    preflightNoFold: "\u9884\u68C0\uFF1A\u8BF7\u6C42\u7EA6 {estimate}/{ctxMax} tokens\uFF08{pct}%\uFF09\xB7 body {bodyKB} KB \u4E14\u6CA1\u6709\u53EF\u88C1\u526A\u7684\u5185\u5BB9 \u2014 DeepSeek \u5927\u6982\u7387\u4F1A\u8FD4\u56DE 400\u3002\u8BF7\u8FD0\u884C /clear \u6216 /new \u91CD\u65B0\u5F00\u59CB\u3002",
     flashEscalation: "\u21E7 flash \u8BF7\u6C42\u5347\u7EA7 \u2014 \u672C\u8F6E\u6539\u7528 {model}{reasonSuffix}",
     harvestStatus: "\u6B63\u5728\u4ECE\u63A8\u7406\u8FC7\u7A0B\u63D0\u53D6\u8BA1\u5212\u72B6\u6001\u2026",
     repeatToolCallWarning: "\u62E6\u622A\u5230\u91CD\u590D\u5DE5\u5177\u8C03\u7528 \u2014 \u8BA9\u6A21\u578B\u5BDF\u89C9\u95EE\u9898\u5E76\u6362\u79CD\u65B9\u5F0F\u91CD\u8BD5\u3002",
@@ -3368,6 +3612,7 @@ var zhCN = {
     balance402: "\u4F59\u989D\u4E0D\u8DB3\uFF08DeepSeek 402\uFF09\uFF1A{inner}\u3002\u5728 https://platform.deepseek.com/top_up \u5145\u503C \u2014 \u4F59\u989D\u975E\u96F6\u65F6\u9762\u677F\u9876\u680F\u4F1A\u663E\u793A\u3002",
     badparam422: "\u53C2\u6570\u9519\u8BEF\uFF08DeepSeek 422\uFF09\uFF1A{inner}",
     badrequest400: "\u8BF7\u6C42\u9519\u8BEF\uFF08DeepSeek 400\uFF09\uFF1A{inner}",
+    concurrency429: "DeepSeek \u5E76\u53D1\u8D85\u9650\uFF08429\uFF09\uFF1A{inner}\u3002\u8D26\u53F7\u5728\u8DD1\u7684\u8BF7\u6C42\u8D85\u8FC7\u4E0A\u9650\uFF08v4-pro 500\u3001v4-flash 2500\uFF0C\u8D26\u53F7\u4E0B\u6240\u6709 API key \u7D2F\u52A0\uFF09\u3002\u901A\u5E38\u662F\u540C\u4E00\u8D26\u53F7\u5F00\u4E86\u591A\u4E2A Reasonix \u8FDB\u7A0B\uFF0C\u6216\u8005\u5E76\u884C subagent \u4E00\u6B21\u53D1\u592A\u591A\u3002\u7B49\u51E0\u79D2\u91CD\u8BD5\u3001\u51CF\u5C11\u5E76\u884C\uFF0C\u6216\u5728 https://platform.deepseek.com \u7533\u8BF7\u6269\u5BB9\u3002",
     deepseek5xxHead: "DeepSeek \u670D\u52A1\u4E0D\u53EF\u7528\uFF08{status}\uFF09 \u2014 \u8FD9\u662F DeepSeek \u670D\u52A1\u7AEF\u95EE\u9898\uFF0C\u4E0D\u662F Reasonix \u6545\u969C\u3002\u5DF2\u6309\u6307\u6570\u9000\u907F\u91CD\u8BD5 4 \u6B21\u3002",
     deepseek5xxReachable: " DeepSeek \u4E3B API \u5065\u5EB7\u68C0\u67E5\u901A\u8FC7\uFF0C\u4F46 /chat/completions \u5728\u6302 \u2014 \u4ED6\u4EEC\u90A3\u8FB9\u90E8\u5206\u670D\u52A1\u5F02\u5E38\u3002",
     deepseek5xxUnreachable: " \u65E0\u6CD5\u4ECE\u4F60\u7684\u7F51\u7EDC\u8BBF\u95EE DeepSeek API \u2014 \u53EF\u80FD\u662F DS \u6574\u4F53\u6545\u969C\uFF0C\u4E5F\u53EF\u80FD\u662F\u672C\u5730\u7F51\u7EDC\u95EE\u9898\u3002",
@@ -3636,6 +3881,12 @@ var zhCN = {
       statusMcp: "  MCP     {servers} \u4E2A\u670D\u52A1\u5668\uFF0C\u6CE8\u518C\u8868\u4E2D {tools} \u4E2A\u5DE5\u5177",
       statusEdits: "  \u7F16\u8F91    {count} \u4E2A\u5F85\u5904\u7406\uFF08/apply \u63D0\u4EA4\uFF0C/discard \u4E22\u5F03\uFF09",
       statusPlan: "  \u8BA1\u5212    \u5F00\u542F \u2014 \u5199\u5165\u53D7\u9650\uFF08submit_plan + \u5BA1\u6279\uFF09",
+      statusLifecycle: "  \u751F\u547D\u5468\u671F {mode}/{state} \xB7 {progress}{evidence}",
+      lifecycleNoPlan: "\u6682\u65E0\u8BA1\u5212",
+      lifecycleEvidencePending: "\u7B49\u5F85 evidence",
+      lifecycleRejected: "lifecycle\uFF1A{tool} \u5728 {state} \u72B6\u6001\u88AB\u62E6\u622A \u2014 \u4E0B\u4E00\u6B65\uFF1A{next}",
+      lifecycleEvidenceRejected: "lifecycle\uFF1A\u6B65\u9AA4 {stepId} \u9700\u8981 evidence \u2014 \u4E0B\u4E00\u6B65\uFF1A{next}",
+      lifecycleRepeatedRejected: "lifecycle\uFF1A{tool} \u88AB\u91CD\u590D\u62E6\u622A \u2014 \u4E0D\u8981\u7528\u76F8\u540C\u53C2\u6570\u53CD\u590D\u91CD\u8BD5",
       statusModeYolo: "  \u6A21\u5F0F    YOLO \u2014 \u7F16\u8F91 + shell \u81EA\u52A8\u8FD0\u884C\uFF0C\u65E0\u63D0\u793A\uFF08/undo \u4ECD\u53EF\u56DE\u6EDA \xB7 Shift+Tab \u5207\u6362\uFF09",
       statusModeAuto: "  \u6A21\u5F0F    AUTO \u2014 \u7F16\u8F91\u7ACB\u5373\u5E94\u7528\uFF085 \u79D2\u5185\u6309 u \u64A4\u6D88 \xB7 Shift+Tab \u5207\u6362\uFF09",
       statusModeReview: "  \u6A21\u5F0F    review \u2014 \u7F16\u8F91\u6392\u961F\u7B49\u5F85 /apply \u6216 y\uFF08Shift+Tab \u5207\u6362\uFF09",
@@ -3647,6 +3898,9 @@ var zhCN = {
       activeNone: "\u25B8 \u6D3B\u8DC3\u8BA1\u5212\uFF1A\uFF08\u65E0\uFF09",
       noArchives: "\u6B64\u4F1A\u8BDD\u5C1A\u65E0\u5F52\u6863\u8BA1\u5212 \u2014 \u5F53\u6BCF\u4E2A\u6B65\u9AA4\u5B8C\u6210\u65F6\u81EA\u52A8\u5F52\u6863",
       archivedHeader: "\u5DF2\u5F52\u6863\uFF08{count}\uFF09\uFF1A",
+      evidencePending: "  ! \u7B49\u5F85 evidence \u2014 \u5F53\u524D\u6B65\u9AA4\u9700\u8981 verification/diff/checkpoint/manual evidence",
+      evidenceLine: "  evidence {stepId}: {summary}",
+      archivedEvidenceLine: "    evidence: {summary}",
       replayNoSession: "\u672A\u9644\u52A0\u4F1A\u8BDD \u2014 `/replay` \u662F\u6309\u4F1A\u8BDD\u7684\u3002\u5728\u9879\u76EE\u4E2D\u8FD0\u884C `reasonix code` \u4EE5\u83B7\u53D6\u4F1A\u8BDD\u3002",
       replayNoArchives: "\u6B64\u4F1A\u8BDD\u5C1A\u65E0\u5F52\u6863\u8BA1\u5212 \u2014 `/replay` \u5728\u8BA1\u5212\u5B8C\u6210\u540E\u542F\u7528\uFF08\u6BCF\u4E2A\u6B65\u9AA4\u5B8C\u6210\u65F6\u81EA\u52A8\u5F52\u6863\uFF09\u3002",
       replayInvalidIndex: "\u65E0\u6548\u7D22\u5F15 \u2014 `/replay` \u63A5\u53D7 1..{max}\uFF08\u6700\u65B0 = 1\uFF09\u3002\u4F7F\u7528 `/plans` \u67E5\u770B\u5217\u8868\u3002",
@@ -3741,7 +3995,7 @@ var zhCN = {
       currentEngine: "\u5F53\u524D\u7F51\u9875\u641C\u7D22\u5F15\u64CE\uFF1A{engine}",
       endpoint: "SearXNG \u7AEF\u70B9\uFF1A{url}",
       usageHeader: "\u7528\u6CD5\uFF1A",
-      usageMojeek: "  /search-engine mojeek            \u4F7F\u7528 Mojeek\uFF08\u9ED8\u8BA4\uFF0C\u65E0\u5916\u90E8\u4F9D\u8D56\uFF09",
+      usageBing: "  /search-engine bing              \u4F7F\u7528 Bing\uFF08\u9ED8\u8BA4\uFF0C\u56FD\u5185\u88F8 IP \u76F4\u8FDE\uFF0C\u65E0\u9700\u4EE3\u7406\uFF09",
       usageSearxng: "  /search-engine searxng            \u4F7F\u7528 SearXNG \u9ED8\u8BA4\u7AEF\u70B9",
       usageSearxngUrl: "  /search-engine searxng <url>      \u4F7F\u7528 SearXNG \u81EA\u5B9A\u4E49\u7AEF\u70B9",
       usageMetaso: "  /search-engine metaso              \u4F7F\u7528 Metaso API\uFF08\u6BCF\u5929 100 \u6B21\u514D\u8D39\uFF0C\u914D\u7F6E\u4F60\u81EA\u5DF1\u7684 API \u5BC6\u94A5\u53EF\u63D0\u5347\u9650\u989D\uFF09",
@@ -3806,7 +4060,8 @@ var zhCN = {
     evt: " \u4E8B\u4EF6",
     editsLabel: "\u7F16\u8F91:",
     mcpLoading: "MCP",
-    ctx: "\u4E0A\u4E0B\u6587"
+    ctx: "\u4E0A\u4E0B\u6587",
+    shortcutsHint: "Ctrl+P \u5FEB\u6377\u952E"
   },
   editMode: {
     plan: "\u8BA1\u5212",
@@ -3836,7 +4091,9 @@ var zhCN = {
     editorFailed: "\u5916\u90E8\u7F16\u8F91\u5668\uFF1A",
     editorMissing: "\u672A\u8BBE\u7F6E $EDITOR / $VISUAL / $GIT_EDITOR \u2014 \u8BF7\u5BFC\u51FA\u73AF\u5883\u53D8\u91CF\uFF08\u4F8B\u5982 `export EDITOR=nano`\uFF09\u540E\u91CD\u8BD5",
     editorExited: "\u7F16\u8F91\u5668\u5F02\u5E38\u9000\u51FA\uFF0C\u8FD4\u56DE\u7801 {code}",
-    typeaheadStaged: "\u25B8 {count} \u884C\u5DF2\u6682\u5B58 \xB7 esc \u53EC\u56DE"
+    typeaheadStaged: "\u25B8 {count} \u884C\u5DF2\u6682\u5B58 \xB7 esc \u53EC\u56DE",
+    steerPlaceholder: "\u8F93\u5165\u6D88\u606F\u4EE5\u5F15\u5BFC\u5F53\u524D\u4EFB\u52A1 \u2014 \u5FD9\u788C\u65F6\u4E0D\u652F\u6301\u547D\u4EE4",
+    steerHint: "\u53D1\u9001 \u2014 \u56DE\u5408\u5185\u6CE8\u5165"
   },
   pathConfirm: {
     title: "\u6C99\u7BB1\u5916\u8DEF\u5F84",
@@ -3855,7 +4112,13 @@ var zhCN = {
     denyDesc: "\u6309 Tab \u6DFB\u52A0\u8BF4\u660E\uFF0C\u544A\u8BC9\u6A21\u578B\u539F\u56E0",
     pathLabel: "\u8DEF\u5F84",
     sandboxLabel: "\u6C99\u7BB1",
-    allowPrefixLabel: "\u524D\u7F00"
+    allowPrefixLabel: "\u524D\u7F00",
+    promptTitleRead: "\u8BBF\u95EE\u8DEF\u5F84 \u2014 \u8BFB\u53D6",
+    promptTitleWrite: "\u8BBF\u95EE\u8DEF\u5F84 \u2014 \u5199\u5165",
+    actionAllowRead: "\u5141\u8BB8\u8BFB\u53D6",
+    actionAllowWrite: "\u5141\u8BB8\u5199\u5165",
+    actionAlwaysAllow: "\u59CB\u7EC8\u5141\u8BB8 \u2014 {prefix}",
+    actionDeny: "\u62D2\u7EDD"
   },
   shellConfirm: {
     title: "Shell \u547D\u4EE4",
@@ -3877,7 +4140,12 @@ var zhCN = {
     timeoutLabel: "\u8D85\u65F6",
     waitLabel: "\u7B49\u5F85",
     previewMore: "\u2026 \u8FD8\u6709 {n} \u884C\u672A\u663E\u793A \u2014 \u6309 esc \u53D6\u6D88\uFF0C\u8BA9\u6A21\u578B\u62C6\u5206\u540E\u518D\u8BD5",
-    previewMorePlural: "\u2026 \u8FD8\u6709 {n} \u884C\u672A\u663E\u793A \u2014 \u6309 esc \u53D6\u6D88\uFF0C\u8BA9\u6A21\u578B\u62C6\u5206\u540E\u518D\u8BD5"
+    previewMorePlural: "\u2026 \u8FD8\u6709 {n} \u884C\u672A\u663E\u793A \u2014 \u6309 esc \u53D6\u6D88\uFF0C\u8BA9\u6A21\u578B\u62C6\u5206\u540E\u518D\u8BD5",
+    promptTitleRunCommand: "\u8FD0\u884C\u547D\u4EE4",
+    promptTitleRunBackground: "\u8FD0\u884C\u540E\u53F0\u547D\u4EE4",
+    actionRunOnce: "\u8FD0\u884C\u4E00\u6B21",
+    actionAlwaysAllow: "\u59CB\u7EC8\u5141\u8BB8 \u2014 {prefix}",
+    actionDeny: "\u62D2\u7EDD"
   },
   editConfirm: {
     footer: "[y/Enter] \u5E94\u7528 \xB7 [n] \u62D2\u7EDD\u5E76\u8BF4\u660E \xB7 [a] \u5E94\u7528\u5269\u4F59 \xB7 [A] \u5207\u6362 AUTO \xB7 [\u2191\u2193/Space] \u6EDA\u52A8 \xB7 [Esc] \u4E2D\u6B62",
@@ -4018,36 +4286,37 @@ var zhCN = {
     probeFailed: "\u63A2\u6D4B\u5931\u8D25 \u2014 {message}"
   },
   webErrors: {
-    status: "web_search {status} \u2014 try: \u641C\u7D22\u540E\u7AEF\u8FD4\u56DE\u9519\u8BEF\uFF1B\u8BF7\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    status: "web_search {status} \u2014 try: \u641C\u7D22\u540E\u7AEF\u8FD4\u56DE\u9519\u8BEF\uFF1B\u8BF7\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     rateLimit429: "web_search 429 \u2014 try: \u7B49\u5F85 10 \u79D2\u540E\u91CD\u8BD5\uFF0C\u6216\u6539\u5199\u67E5\u8BE2\uFF1B\u641C\u7D22\u540E\u7AEF\u6B63\u5728\u5BF9\u8BE5\u5BA2\u6237\u7AEF\u8FDB\u884C\u9650\u6D41",
-    forbidden403: "web_search 403 \u2014 try: \u641C\u7D22\u540E\u7AEF\u62D2\u7EDD\u8BE5\u5BA2\u6237\u7AEF\u8BBF\u95EE\uFF1B\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE\uFF0C\u6216\u7A0D\u540E\u91CD\u8BD5",
+    forbidden403: "web_search 403 \u2014 try: \u641C\u7D22\u540E\u7AEF\u62D2\u7EDD\u8BE5\u5BA2\u6237\u7AEF\u8BBF\u95EE\uFF1B\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE\uFF0C\u6216\u7A0D\u540E\u91CD\u8BD5",
     serverError5xx: "web_search {status} \u2014 try: \u5728\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00\u641C\u7D22 URL\uFF1B\u82E5\u80FD\u52A0\u8F7D\u5219\u5C5E\u4E34\u65F6\u6545\u969C\uFF0C\u7B49 30 \u79D2\u91CD\u8BD5\u5373\u53EF",
-    mojeekBlocked: "web_search: Mojeek \u53CD\u722C\u9875\u9762 \u2014 \u9891\u7387\u9650\u5236\u6216\u88AB\u5C4F\u853D \u2014 try: \u7B49\u5F85 30 \u79D2\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
-    mojeekNoResults: "web_search: \u8FD4\u56DE 0 \u6761\u7ED3\u679C\u4F46\u54CD\u5E94\u770B\u8D77\u6765\u4E0D\u662F\u6B63\u5E38\u7A7A\u7ED3\u679C\u9875\uFF08{chars} \u5B57\u7B26\uFF0C\u524D 120 \u5B57\u7B26\uFF1A{preview}\uFF09\u2014 try: \u4F7F\u7528\u66F4\u7B80\u5355\u7684\u5173\u952E\u8BCD\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    bingBlocked: "web_search: Bing \u53CD\u722C\u9875\u9762 \u2014 \u9891\u7387\u9650\u5236\u6216\u88AB\u5C4F\u853D \u2014 try: \u7B49\u5F85 30 \u79D2\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    bingNoResults: "web_search: \u8FD4\u56DE 0 \u6761\u7ED3\u679C\u4F46\u54CD\u5E94\u770B\u8D77\u6765\u4E0D\u662F\u6B63\u5E38\u7A7A\u7ED3\u679C\u9875\uFF08{chars} \u5B57\u7B26\uFF0C\u524D 120 \u5B57\u7B26\uFF1A{preview}\uFF09\u2014 try: \u4F7F\u7528\u66F4\u7B80\u5355\u7684\u5173\u952E\u8BCD\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     invalidEndpoint: 'web_search: \u65E0\u6548\u7684 SearXNG \u7AEF\u70B9 "{endpoint}" \u2014 try: \u4F7F\u7528 /search-endpoint http://host:port \u8BBE\u7F6E\u6709\u6548\u7684 URL',
     endpointMustBeHttp: "web_search: SearXNG \u7AEF\u70B9\u5FC5\u987B\u662F http(s) \u534F\u8BAE\uFF0C\u5F53\u524D\u4E3A {protocol} \u2014 try: \u4F7F\u7528 /search-endpoint http://host:port \u8BBE\u7F6E\u6709\u6548\u7684 URL",
-    cannotReach: "web_search: \u65E0\u6CD5\u8BBF\u95EE SearXNG \u670D\u52A1\u5668 {endpoint} \u2014 try: \u5B89\u88C5\u5E76\u542F\u52A8 SearXNG\uFF08https://github.com/searxng/searxng\uFF0C\u4F8B\u5982 `docker run -d -p 8080:8080 searxng/searxng`\uFF09\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
-    searxngNoResults: "web_search: \u8FD4\u56DE 0 \u6761\u7ED3\u679C\u4F46 SearXNG \u54CD\u5E94\u770B\u8D77\u6765\u4E0D\u662F\u6B63\u5E38\u7A7A\u7ED3\u679C\u9875\uFF08{chars} \u5B57\u7B26\uFF09\u2014 try: \u4F7F\u7528\u66F4\u7B80\u5355\u7684\u5173\u952E\u8BCD\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
-    metasoDailyLimit: "web_search: \u9ED8\u8BA4 API \u5BC6\u94A5\u7684\u6BCF\u65E5\u641C\u7D22\u6B21\u6570\u5DF2\u8FBE\u4E0A\u9650 \u2014 \u8BBE\u7F6E METASO_API_KEY \u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u81EA\u5DF1\u7684\u5BC6\u94A5",
+    cannotReach: "web_search: \u65E0\u6CD5\u8BBF\u95EE SearXNG \u670D\u52A1\u5668 {endpoint} \u2014 try: \u5B89\u88C5\u5E76\u542F\u52A8 SearXNG\uFF08https://github.com/searxng/searxng\uFF0C\u4F8B\u5982 `docker run -d -p 8080:8080 searxng/searxng`\uFF09\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    searxngNoResults: "web_search: \u8FD4\u56DE 0 \u6761\u7ED3\u679C\u4F46 SearXNG \u54CD\u5E94\u770B\u8D77\u6765\u4E0D\u662F\u6B63\u5E38\u7A7A\u7ED3\u679C\u9875\uFF08{chars} \u5B57\u7B26\uFF09\u2014 try: \u4F7F\u7528\u66F4\u7B80\u5355\u7684\u5173\u952E\u8BCD\u6539\u5199\u67E5\u8BE2\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    metasoMissingKey: "web_search: Metaso \u9700\u8981 API \u5BC6\u94A5 \u2014 \u8BBE\u7F6E METASO_API_KEY\uFF0C\u6216\u4F7F\u7528 /search-engine metaso <key> \u914D\u7F6E\uFF1B\u53EF\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
+    metasoDailyLimit: "web_search: Metaso \u6BCF\u65E5\u641C\u7D22\u6B21\u6570\u5DF2\u8FBE\u4E0A\u9650 \u2014 \u8BBE\u7F6E METASO_API_KEY\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
     metasoUnauthorized: "web_search: Metaso API \u5BC6\u94A5\u88AB\u62D2\u7EDD \u2014 \u68C0\u67E5 METASO_API_KEY\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u5BC6\u94A5",
     metasoRateLimit: "web_search: Metaso \u8BF7\u6C42\u9891\u7387\u9650\u5236 \u2014 \u7B49\u5F85\u540E\u91CD\u8BD5\uFF0C\u6216\u5728 https://metaso.cn/search-api/playground \u83B7\u53D6\u81EA\u5DF1\u7684\u5BC6\u94A5",
-    metasoServerError: "web_search: Metaso \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    metasoServerError: "web_search: Metaso \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     metasoParseError: "web_search: Metaso \u8FD4\u56DE\u65E0\u6CD5\u89E3\u6790\u7684\u54CD\u5E94\uFF08HTTP {status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5",
     metasoApiError: "web_search: Metaso API \u9519\u8BEF\uFF08code {code}: {message}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5",
     tavilyMissingKey: "web_search: Tavily \u540E\u7AEF\u9700\u8981 API \u5BC6\u94A5 \u2014 \u8BBE\u7F6E TAVILY_API_KEY \u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5728 ~/.reasonix/config.json \u4E2D\u914D\u7F6E `tavilyApiKey`\uFF1Bhttps://tavily.com \u6BCF\u6708 1000 \u6B21\u514D\u8D39",
     tavilyUnauthorized: "web_search: Tavily API \u5BC6\u94A5\u88AB\u62D2\u7EDD \u2014 \u68C0\u67E5 TAVILY_API_KEY\uFF0C\u6216\u5728 https://tavily.com \u83B7\u53D6\u5BC6\u94A5",
-    tavilyRateLimit: "web_search: Tavily \u8BF7\u6C42\u9891\u7387\u9650\u5236\u6216\u6708\u5EA6\u914D\u989D\u7528\u5C3D \u2014 \u7B49\u5F85\u3001\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE\uFF0C\u6216\u5347\u7EA7 Tavily \u8BA1\u5212",
-    tavilyServerError: "web_search: Tavily \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    tavilyRateLimit: "web_search: Tavily \u8BF7\u6C42\u9891\u7387\u9650\u5236\u6216\u6708\u5EA6\u914D\u989D\u7528\u5C3D \u2014 \u7B49\u5F85\u3001\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE\uFF0C\u6216\u5347\u7EA7 Tavily \u8BA1\u5212",
+    tavilyServerError: "web_search: Tavily \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     tavilyParseError: "web_search: Tavily \u8FD4\u56DE\u65E0\u6CD5\u89E3\u6790\u7684\u54CD\u5E94\uFF08HTTP {status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5",
     perplexityMissingKey: "web_search: Perplexity \u540E\u7AEF\u9700\u8981 API \u5BC6\u94A5 \u2014 \u8BBE\u7F6E PERPLEXITY_API_KEY \u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5728 ~/.reasonix/config.json \u4E2D\u914D\u7F6E `perplexityApiKey`\uFF1B\u5728 https://perplexity.ai/settings/api \u83B7\u53D6\u5BC6\u94A5",
     perplexityUnauthorized: "web_search: Perplexity API \u5BC6\u94A5\u88AB\u62D2\u7EDD \u2014 \u68C0\u67E5 PERPLEXITY_API_KEY\uFF0C\u6216\u5728 https://perplexity.ai/settings/api \u83B7\u53D6\u5BC6\u94A5",
-    perplexityRateLimit: "web_search: Perplexity \u8BF7\u6C42\u9891\u7387\u9650\u5236 \u2014 \u7B49\u5F85\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
-    perplexityServerError: "web_search: Perplexity \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    perplexityRateLimit: "web_search: Perplexity \u8BF7\u6C42\u9891\u7387\u9650\u5236 \u2014 \u7B49\u5F85\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    perplexityServerError: "web_search: Perplexity \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     perplexityParseError: "web_search: Perplexity \u8FD4\u56DE\u65E0\u6CD5\u89E3\u6790\u7684\u54CD\u5E94\uFF08HTTP {status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5",
     exaMissingKey: "web_search: Exa \u540E\u7AEF\u9700\u8981 API \u5BC6\u94A5 \u2014 \u8BBE\u7F6E EXA_API_KEY \u73AF\u5883\u53D8\u91CF\uFF0C\u6216\u5728 ~/.reasonix/config.json \u4E2D\u914D\u7F6E `exaApiKey`\uFF1Bhttps://exa.ai \u6BCF\u6708 1000 \u6B21\u514D\u8D39",
     exaUnauthorized: "web_search: Exa API \u5BC6\u94A5\u88AB\u62D2\u7EDD \u2014 \u68C0\u67E5 EXA_API_KEY\uFF0C\u6216\u5728 https://exa.ai \u83B7\u53D6\u5BC6\u94A5",
     exaRateLimit: "web_search: Exa \u8BF7\u6C42\u9891\u7387\u9650\u5236\u6216\u6708\u5EA6\u914D\u989D\u7528\u5C3D \u2014 \u7B49\u5F85\u5347\u7EA7\uFF0C\u6216\u5728 https://exa.ai/pricing \u67E5\u770B\u8BA1\u5212",
-    exaServerError: "web_search: Exa \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine mojeek|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
+    exaServerError: "web_search: Exa \u670D\u52A1\u5668\u9519\u8BEF\uFF08{status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u4F7F\u7528 /search-engine bing|searxng|metaso|tavily|perplexity|exa \u5207\u6362\u5F15\u64CE",
     exaParseError: "web_search: Exa \u8FD4\u56DE\u65E0\u6CD5\u89E3\u6790\u7684\u54CD\u5E94\uFF08HTTP {status}\uFF09\u2014 \u7A0D\u540E\u91CD\u8BD5",
     fetchStatus: "web_fetch {status} for {url} \u2014 try: \u5728\u6D4F\u89C8\u5668\u4E2D\u786E\u8BA4\u8BE5 URL \u80FD\u5426\u8BBF\u95EE\uFF1B\u8BE5\u72B6\u6001\u7801\u8868\u660E\u76EE\u6807\u4E3B\u673A\u8FD4\u56DE\u4E86\u9519\u8BEF\u9875\u9762",
     fetchRateLimit429: "web_fetch 429 for {url} \u2014 try: \u7B49\u5F85 10 \u79D2\u540E\u91CD\u8BD5\uFF1B\u76EE\u6807\u4E3B\u673A\u6B63\u5728\u5BF9\u8BE5\u5BA2\u6237\u7AEF\u8FDB\u884C\u9650\u6D41",
@@ -4139,19 +4408,6 @@ var zhCN = {
     categoryProject: "\u9879\u76EE",
     categoryReference: "\u53C2\u8003"
   },
-  copyMode: {
-    title: "\u2500\u2500 \u590D\u5236\u6A21\u5F0F \u2500\u2500",
-    help: "j/k \u6216 \u2191/\u2193 \u79FB\u52A8 \xB7 v \u8D77\u9009\u533A \xB7 y \u590D\u5236 \xB7 g/G \u9876/\u5E95 \xB7 q \u9000\u51FA",
-    statusBar: "\u7B2C {cur}/{total} \u884C \xB7 \u9009\u533A\uFF1A{sel}",
-    statusYanked: "\u5DF2\u590D\u5236 {size} \u5B57\u7B26\uFF08osc52={osc52}\uFF09",
-    statusEmpty: "\u672A\u9009\u4E2D\u5185\u5BB9",
-    empty: "\uFF08\u8FD8\u6CA1\u6709\u804A\u5929\u5185\u5BB9 \u2014 \u5148\u548C\u6A21\u578B\u8BF4\u70B9\u4EC0\u4E48\uFF09",
-    labelUser: "\u4F60",
-    labelAssistant: "\u52A9\u624B",
-    labelReasoning: "\u63A8\u7406",
-    yankedToast: "\u25B8 \u5DF2\u590D\u5236 {size} \u5B57\u7B26\u5230\u526A\u8D34\u677F (osc52)",
-    yankedToastFile: "\u25B8 \u5DF2\u590D\u5236 {size} \u5B57\u7B26 \xB7 \u6587\u4EF6\uFF1A{path}"
-  },
   mcpHealth: {
     noData: "\u65E0\u68C0\u67E5\u6570\u636E",
     healthy: "\u6B63\u5E38 \xB7 {ms}ms",
@@ -4220,7 +4476,13 @@ var zhCN = {
     noResources: "\u6CA1\u6709\u4EFB\u4F55\u5DF2\u8FDE\u63A5 MCP \u670D\u52A1\u5668\u4E0A\u7684\u8D44\u6E90\uFF08\u6216\u65E0\u670D\u52A1\u5668\u8FDE\u63A5\uFF09\u3002`/mcp` \u663E\u793A\u5F53\u524D\u5217\u8868\u3002",
     readOne: "\u8BFB\u53D6\uFF1A`/resource <uri>` \u2014 \u6216\u5728\u9009\u62E9\u5668\u4E2D\u4F7F\u7528 Tab \u952E\u3002",
     noPrompts: "\u6CA1\u6709\u4EFB\u4F55\u5DF2\u8FDE\u63A5 MCP \u670D\u52A1\u5668\u4E0A\u7684\u63D0\u793A\uFF08\u6216\u65E0\u670D\u52A1\u5668\u8FDE\u63A5\uFF09\u3002`/mcp` \u663E\u793A\u5F53\u524D\u5217\u8868\u3002",
-    fetchOne: "\u83B7\u53D6\uFF1A`/prompt <name>` \u2014 \u6682\u4E0D\u652F\u6301\u53C2\u6570\uFF1B\u5E26\u5FC5\u9700\u53C2\u6570\u7684\u63D0\u793A\u5C06\u8FD4\u56DE\u670D\u52A1\u5668\u9519\u8BEF\u3002"
+    fetchOne: "\u83B7\u53D6\uFF1A`/prompt <name>` \u2014 \u6682\u4E0D\u652F\u6301\u53C2\u6570\uFF1B\u5E26\u5FC5\u9700\u53C2\u6570\u7684\u63D0\u793A\u5C06\u8FD4\u56DE\u670D\u52A1\u5668\u9519\u8BEF\u3002",
+    noServerForResource: '\u6CA1\u6709\u670D\u52A1\u5668\u66B4\u9732\u8D44\u6E90 "{name}"',
+    resourceHint: "`/resource` \u4E0D\u5E26\u53C2\u6570\u53EF\u67E5\u770B\u53EF\u7528\u5217\u8868\u3002",
+    readFailed: "\u8BFB\u53D6\u8D44\u6E90\u5931\u8D25",
+    noServerForPrompt: '\u6CA1\u6709\u670D\u52A1\u5668\u66B4\u9732 prompt "{name}"',
+    promptHint: "`/prompt` \u4E0D\u5E26\u53C2\u6570\u53EF\u67E5\u770B\u53EF\u7528\u5217\u8868\u3002",
+    fetchFailed: "\u83B7\u53D6 prompt \u5931\u8D25"
   },
   mcpLifecycle: {
     handshake: "\u63E1\u624B\u4E2D\u2026",
@@ -4233,7 +4495,9 @@ var zhCN = {
     disabledDetail: "\u901A\u8FC7 /mcp disable {name}",
     failedSetupHint: "\u2192 \u8FD0\u884C `reasonix setup` \u79FB\u9664\u6B64\u6761\u76EE\uFF0C\u6216\u4FEE\u590D\u5E95\u5C42\u95EE\u9898\uFF08\u7F3A\u5C11 npm \u5305\u3001\u7F51\u7EDC\u7B49\uFF09\u3002",
     failedSetupConfigHint: "\u2192 \u8FD0\u884C `reasonix setup` \u4ECE\u5DF2\u4FDD\u5B58\u914D\u7F6E\u4E2D\u79FB\u9664\u635F\u574F\u7684\u6761\u76EE\u3002",
-    abortedHint: "\u5DF2\u4E2D\u65AD MCP \u542F\u52A8 \u2014 \u8DF3\u8FC7 {count} \u4E2A\u670D\u52A1\u5668\u3002\u95EE\u9898\u4FEE\u590D\u540E\u7528 /mcp \u91CD\u65B0\u8FDE\u63A5\u3002"
+    abortedHint: "\u5DF2\u4E2D\u65AD MCP \u542F\u52A8 \u2014 \u8DF3\u8FC7 {count} \u4E2A\u670D\u52A1\u5668\u3002\u95EE\u9898\u4FEE\u590D\u540E\u7528 /mcp \u91CD\u65B0\u8FDE\u63A5\u3002",
+    toolsReady: "\u5DE5\u5177\u5C31\u7EEA",
+    warnLabel: "\u8B66\u544A"
   },
   checkpointPicker: {
     title: "\u6062\u590D\u68C0\u67E5\u70B9 \u2014 {workspace}",
@@ -4279,6 +4543,64 @@ var zhCN = {
     noRecords: "\u65E0\u8BB0\u5F55",
     untracked: "\uFF08\u672A\u8FFD\u8E2A\uFF09",
     churned: "\uFF08\u5DF2\u53D8\u66F4 \xD7{count}\uFF09"
+  },
+  builtinSkills: {
+    explore: "\u5728\u9694\u79BB\u5B50 agent \u4E2D\u63A2\u7D22\u4EE3\u7801\u5E93 \u2014 \u53EA\u8BFB\u5BBD\u7F51\u8C03\u67E5\uFF0C\u8FD4\u56DE\u4E00\u4E2A\u7CBE\u70BC\u7ED3\u8BBA",
+    research: "\u7ED3\u5408\u4EE3\u7801\u9605\u8BFB\u4E0E\u7F51\u7EDC\u641C\u7D22\u8FDB\u884C\u8C03\u7814 \u2014 \u5728\u9694\u79BB\u5B50 agent \u4E2D\u7EFC\u5408\u4FE1\u606F\u5E76\u8FD4\u56DE\u7ED3\u8BBA",
+    review: "\u5BA1\u67E5\u5F53\u524D\u5206\u652F\u53D8\u66F4 \u2014 \u68C0\u67E5\u6B63\u786E\u6027\u3001\u5B89\u5168\u6027\u3001\u7F3A\u5931\u6D4B\u8BD5\u3001\u9690\u85CF\u884C\u4E3A\u53D8\u66F4",
+    securityReview: "\u5B89\u5168\u4E13\u9879\u5BA1\u67E5 \u2014 \u6807\u8BB0\u6CE8\u5165/\u8BA4\u8BC1/\u5BC6\u94A5/\u53CD\u5E8F\u5217\u5316/\u8DEF\u5F84\u7A7F\u8D8A/\u52A0\u5BC6\u95EE\u9898",
+    test: "\u8FD0\u884C\u6D4B\u8BD5\u5957\u4EF6\u5E76\u8BCA\u65AD\u5931\u8D25 \u2014 \u81EA\u52A8\u8BC6\u522B\u6D4B\u8BD5\u6846\u67B6\uFF0C\u4FEE\u590D\u540E\u91CD\u8DD1\u76F4\u81F3\u901A\u8FC7"
+  },
+  shortcutsHelp: {
+    title: "\u5FEB\u6377\u952E",
+    groupInput: "\u8F93\u5165",
+    groupNavigation: "\u5BFC\u822A",
+    groupSession: "\u4F1A\u8BDD",
+    groupSystem: "\u7CFB\u7EDF",
+    descEnter: "\u53D1\u9001\u6D88\u606F",
+    descShiftEnter: "\u6362\u884C",
+    descCtrlEnter: "\u6362\u884C",
+    descCtrlJ: "\u6362\u884C",
+    descCtrlU: "\u6E05\u7A7A\u8F93\u5165",
+    descCtrlW: "\u5220\u9664\u5355\u8BCD",
+    descCtrlP: "\u663E\u793A/\u9690\u85CF\u5FEB\u6377\u952E",
+    descCtrlX: "\u5728\u7F16\u8F91\u5668\u4E2D\u6253\u5F00",
+    descArrows: "\u6D4F\u89C8\u8F93\u5165\u5386\u53F2",
+    descPgUpDown: "\u7FFB\u9875",
+    descCtrlL: "\u6E05\u5C4F",
+    descCtrlB: "\u5207\u6362\u4FA7\u8FB9\u680F",
+    descNewSession: "\u65B0\u5EFA\u4F1A\u8BDD",
+    descListSessions: "\u5217\u51FA\u4F1A\u8BDD",
+    descSwitchModel: "\u5207\u6362\u6A21\u578B",
+    descSwitchPreset: "\u5207\u6362\u9884\u8BBE",
+    descSwitchTheme: "\u5207\u6362\u4E3B\u9898",
+    descCtrlC: "\u9000\u51FA",
+    descEsc: "\u505C\u6B62/\u53D6\u6D88",
+    descCtrlR: "\u5207\u6362\u8BE6\u7EC6\u6A21\u5F0F",
+    descCtrlO: "\u5C55\u5F00\u56DE\u590D\uFF08\u4EC5\u6D41\u5F0F\u8F93\u51FA\u671F\u95F4\uFF09",
+    descHelp: "\u663E\u793A\u6240\u6709\u547D\u4EE4",
+    descShiftTab: "\u5207\u6362\u7F16\u8F91\u6A21\u5F0F"
+  },
+  mcpCli: {
+    bundledCatalog: "\u5DF2\u6253\u5305\u7684 MCP \u670D\u52A1\u5668\uFF08\u79BB\u7EBF\u76EE\u5F55\uFF09\uFF1A",
+    justFetched: "\u521A\u521A\u83B7\u53D6",
+    cachedAge: "\u7F13\u5B58\uFF0C{age}",
+    moreAvailable: "\u8FD8\u6709\u66F4\u591A",
+    allLoaded: "\u5DF2\u5168\u90E8\u52A0\u8F7D",
+    morePagesAvailable: "\u25B8 \u8FD8\u6709\u66F4\u591A\u9875\u53EF\u7528 \u2014 `reasonix mcp list --pages <n>` \u6216 --all",
+    installHint: "\u5B89\u88C5\uFF1Areasonix mcp install <name>",
+    usageSearch: "\u7528\u6CD5\uFF1Areasonix mcp search <query>",
+    usageInstall: "\u7528\u6CD5\uFF1Areasonix mcp install <name>",
+    noMatchesFor: '\u672A\u627E\u5230 "{q}" \u7684\u5339\u914D\u9879\uFF08\u5DF2\u68C0\u7D22 {count} \u6761\u8BB0\u5F55\uFF0C\u6765\u6E90\uFF1A{source}\uFF09',
+    matchCount: '\u5728 {source} \u4E2D\u627E\u5230 {count} \u6761 "{q}" \u7684\u5339\u914D\u9879\uFF08\u5DF2\u626B\u63CF {loaded} \u6761\u8BB0\u5F55\uFF09\uFF1A',
+    moreLoaded: "\u2026 \u8FD8\u6709 {count} \u6761\u5DF2\u52A0\u8F7D \u2014 \u4F7F\u7528 `reasonix mcp search <query>` \u7B5B\u9009",
+    moreMatches: "\u2026 \u8FD8\u6709 {count} \u6761\u5339\u914D\u9879",
+    installed: "\u5DF2\u5B89\u88C5\uFF1A{spec}",
+    noServerFound: '\u5728 {source} \u4E2D\u904D\u5386\u4E86 {pages} \u9875\u540E\u672A\u627E\u5230\u540D\u4E3A "{target}" \u7684 MCP \u670D\u52A1\u5668\u3002',
+    noServerTryMore: "\u8BD5\u8BD5\uFF1Areasonix mcp install {target} --max-pages 100",
+    noInstallMeta: '\u65E0\u6CD5\u4E3A "{name}" \u83B7\u53D6\u5B89\u88C5\u5143\u6570\u636E \u2014 \u8BD5\u8BD5 `npx -y @smithery/cli install {name}`\u3002',
+    buildSpecFailed: "\u65E0\u6CD5\u4E3A {name} \u6784\u5EFA\u5B89\u88C5 spec\uFF1A{message}",
+    alreadyInstalled: "\u5DF2\u5B89\u88C5\uFF1A{spec}"
   }
 };
 
@@ -4354,7 +4676,7 @@ function readSettingsFile(path2) {
 }
 function loadHooks(opts = {}) {
   const out = [];
-  if (opts.projectRoot) {
+  if (opts.projectRoot && (opts.trustProjectHooks === true || projectHooksTrusted(opts.projectRoot, opts.configPath))) {
     const projPath = projectSettingsPath(opts.projectRoot);
     const settings2 = readSettingsFile(projPath);
     if (settings2) appendResolved(out, settings2, "project", projPath);
@@ -4388,7 +4710,7 @@ function matchesTool(hook, toolName) {
 }
 var HOOK_OUTPUT_CAP_BYTES = 256 * 1024;
 function defaultSpawner(input) {
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const child = spawn(input.command, {
       cwd: input.cwd,
       shell: true,
@@ -4433,7 +4755,7 @@ function defaultSpawner(input) {
     child.stderr.on("data", (chunk) => onChunk("stderr", chunk));
     child.once("error", (err) => {
       clearTimeout(timer);
-      resolve13({
+      resolve14({
         exitCode: null,
         stdout: Buffer.concat(stdoutChunks).toString("utf8"),
         stderr: Buffer.concat(stderrChunks).toString("utf8"),
@@ -4444,7 +4766,7 @@ function defaultSpawner(input) {
     });
     child.once("close", (code) => {
       clearTimeout(timer);
-      resolve13({
+      resolve14({
         exitCode: code,
         stdout: Buffer.concat(stdoutChunks).toString("utf8").trim(),
         stderr: Buffer.concat(stderrChunks).toString("utf8").trim(),
@@ -4966,12 +5288,14 @@ var ToolRegistry = class {
   _interceptors = [];
   _auditListener = null;
   _resultAugmenter = null;
+  _rateLimiter;
   /** Per-tool fingerprint of the last call that failed schema validation. Cleared by any successful validation for that tool. */
   _lastMalformed = /* @__PURE__ */ new Map();
   /** Per-tool fingerprint of the last host-side gate rejection. */
   _lastGateRejection = /* @__PURE__ */ new Map();
   constructor(opts = {}) {
     this._autoFlatten = opts.autoFlatten !== false;
+    this._rateLimiter = new ToolRateLimiter(opts.rateLimit);
   }
   /** Enable / disable plan-mode enforcement at dispatch. */
   setPlanMode(on) {
@@ -5008,6 +5332,9 @@ var ToolRegistry = class {
   get hasResultAugmenter() {
     return this._resultAugmenter !== null;
   }
+  get rateLimitPolicy() {
+    return this._rateLimiter.policy;
+  }
   register(def) {
     if (!def.name) throw new Error("tool requires a name");
     const internal = { ...def };
@@ -5106,6 +5433,10 @@ var ToolRegistry = class {
         rejectedReason: "aborted"
       });
     }
+    const rateLimit = this._rateLimiter.consume(name);
+    if (!rateLimit.allowed) {
+      return JSON.stringify(rateLimit.result);
+    }
     let finalResult;
     try {
       try {
@@ -5114,7 +5445,8 @@ var ToolRegistry = class {
       }
       const result = await tool.fn(args, {
         signal: opts.signal,
-        confirmationGate: opts.confirmationGate
+        confirmationGate: opts.confirmationGate,
+        readTracker: opts.readTracker
       });
       const str = typeof result === "string" ? result : JSON.stringify(result);
       let clipped = str;
@@ -5199,6 +5531,9 @@ function plainTextRejectedReason(name, result) {
   if ((name === "edit_file" || name === "write_file") && /rejected this edit/i.test(result)) {
     return "edit-gate";
   }
+  if ((name === "edit_file" || name === "multi_edit") && /read_file first/i.test(result)) {
+    return "read-before-edit";
+  }
   if ((name === "run_command" || name === "run_background") && /\buser denied:/i.test(result)) {
     return "shell-gate";
   }
@@ -5208,6 +5543,8 @@ function rejectionRecoveryHint(reason) {
   switch (reason) {
     case "edit-gate":
       return "Do not re-emit the same edit. Try a genuinely different edit or ask the user how to proceed.";
+    case "read-before-edit":
+      return "Call read_file on the target path first, then re-issue the edit.";
     case "shell-gate":
       return "Do not retry the same command. Use an allowlisted/read-only command, wait for approval, or ask the user how to proceed.";
     case "engineering-lifecycle":
@@ -5336,12 +5673,12 @@ async function waitForReady(ready, timeoutMs, serverName, signal) {
   let timer;
   let onAbort;
   try {
-    await new Promise((resolve13, reject) => {
+    await new Promise((resolve14, reject) => {
       ready.then(
         () => {
           if (settled) return;
           settled = true;
-          resolve13();
+          resolve14();
         },
         (err) => {
           if (settled) return;
@@ -5558,14 +5895,14 @@ function buildSyntheticAssistantMessage(content, fallbackModel) {
 // src/memory/session.ts
 import { execFileSync } from "child_process";
 import {
-  appendFileSync,
+  appendFileSync as appendFileSync2,
   chmodSync as chmodSync2,
   copyFileSync,
   existsSync as existsSync3,
   mkdirSync as mkdirSync2,
   readFileSync as readFileSync4,
   readdirSync,
-  renameSync,
+  renameSync as renameSync2,
   statSync,
   unlinkSync,
   writeFileSync as writeFileSync2
@@ -5622,7 +5959,7 @@ function readSessionMessages(path2) {
 function appendSessionMessage(name, message) {
   const path2 = sessionPath(name);
   mkdirSync2(dirname3(path2), { recursive: true });
-  appendFileSync(path2, `${JSON.stringify(message)}
+  appendFileSync2(path2, `${JSON.stringify(message)}
 `, "utf8");
   try {
     chmodSync2(path2, 384);
@@ -5681,13 +6018,13 @@ function renameSession(oldName, newName) {
   const oldJsonl = sessionPath(oldName);
   const newJsonl = sessionPath(newName);
   if (!existsSync3(oldJsonl) || existsSync3(newJsonl)) return false;
-  renameSync(oldJsonl, newJsonl);
+  renameSync2(oldJsonl, newJsonl);
   for (const ext of SESSION_SIDECAR_EXTS) {
     const oldP = oldJsonl.replace(/\.jsonl$/, ext);
     const newP = newJsonl.replace(/\.jsonl$/, ext);
     if (existsSync3(oldP)) {
       try {
-        renameSync(oldP, newP);
+        renameSync2(oldP, newP);
       } catch {
       }
     }
@@ -5724,7 +6061,7 @@ function rewriteSession(name, messages) {
       copyFileSync(path2, backup);
       chmodPrivate(backup);
     }
-    renameSync(tmp, path2);
+    renameSync2(tmp, path2);
     chmodPrivate(path2);
   } catch (err) {
     try {
@@ -5916,32 +6253,43 @@ function round(n, digits) {
 }
 
 // src/context-manager.ts
-var HISTORY_FOLD_THRESHOLD = 0.5;
+function extractPinnedConstraints(systemPrompt) {
+  const pattern = /# (?:HIGH PRIORITY constraints|User memory|Project memory)[\s\S]*?(?=\n# |\n---|$)/g;
+  return Array.from(systemPrompt.matchAll(pattern), (m) => m[0]).join("\n\n");
+}
+var HISTORY_FOLD_THRESHOLD = 0.75;
 var HISTORY_FOLD_TAIL_FRACTION = 0.2;
-var HISTORY_FOLD_AGGRESSIVE_THRESHOLD = 0.7;
+var HISTORY_FOLD_AGGRESSIVE_THRESHOLD = 0.78;
 var HISTORY_FOLD_AGGRESSIVE_TAIL_FRACTION = 0.1;
 var HISTORY_FOLD_MIN_SAVINGS_FRACTION = 0.3;
 var FORCE_SUMMARY_THRESHOLD = 0.8;
 var PREFLIGHT_EMERGENCY_THRESHOLD = 0.95;
 var PREFLIGHT_MECHANICAL_TARGET_FRACTION = 0.7;
+var MAX_BODY_BYTES = 7e5;
+var MAX_BODY_BYTES_TARGET = 5e5;
 var HISTORY_FOLD_SUMMARY_TIMEOUT_MS = 15e3;
 var HISTORY_FOLD_MARKER = "[CONVERSATION HISTORY SUMMARY \u2014 earlier turns folded for context efficiency]\n\n";
 var SKILL_PIN_MEMO_HEADER = "[Active skill memos \u2014 preserved verbatim across the fold:]";
 var SKILL_PIN_REGEX = /<skill-pin name="([^"]+)">\n[\s\S]*?\n<\/skill-pin>/g;
-function extractPinnedSkills(head) {
+function buildFoldSummaryInstruction(pinnedSkillNames) {
+  const base = "Summarize the conversation above as one self-contained prose recap. Preserve the user's ORIGINAL OBJECTIVE (never paraphrase away negative constraints like 'do NOT do X'), all 'do not' / 'never' / 'avoid' instructions, decisions reached, files inspected or modified, tool results still relevant, and any open todos. Skip turn-by-turn play-by-play. Output plain prose only \u2014 no tool calls, no markdown headings, no SEARCH/REPLACE blocks.";
+  if (pinnedSkillNames.length === 0) return base;
+  const list = pinnedSkillNames.map((n) => `"${n}"`).join(", ");
+  return `${base} The following skill memos are pinned verbatim and appended after your summary \u2014 do NOT quote or paraphrase their bodies: ${list}.`;
+}
+function collectPinnedSkills(head) {
   const pinned = /* @__PURE__ */ new Map();
-  const stubbedHead = head.map((msg) => {
-    if (typeof msg.content !== "string") return msg;
-    let hit = false;
-    const next = msg.content.replace(SKILL_PIN_REGEX, (full, name) => {
+  for (const msg of head) {
+    if (typeof msg.content !== "string") continue;
+    SKILL_PIN_REGEX.lastIndex = 0;
+    for (const match of msg.content.matchAll(SKILL_PIN_REGEX)) {
+      const name = match[1];
+      const full = match[0];
       pinned.delete(name);
       pinned.set(name, full);
-      hit = true;
-      return `[skill ${JSON.stringify(name)} memo \u2014 preserved separately, do not summarize.]`;
-    });
-    return hit ? { ...msg, content: next } : msg;
-  });
-  return { stubbedHead, pinnedBodies: [...pinned.values()] };
+    }
+  }
+  return { names: [...pinned.keys()], bodies: [...pinned.values()] };
 }
 var ContextManager = class {
   constructor(deps) {
@@ -5990,14 +6338,25 @@ var ContextManager = class {
     }
     return { kind: "none", ...base };
   }
-  /** Local-side preflight before sending a request — catches oversized payloads early. */
+  /** Local-side preflight before sending a request — catches oversized payloads early.
+   * Two independent signals trip mechanical truncate: token estimate above the context-window
+   * fraction, OR JSON body bytes above the gateway limit (see `MAX_BODY_BYTES`). */
   decidePreflight(messages, toolSpecs, model) {
     const ctxMax = DEEPSEEK_CONTEXT_TOKENS[model] ?? DEFAULT_CONTEXT_TOKENS;
     const estimate = estimateRequestTokens(messages, toolSpecs ?? null, true);
+    const estimateBytes = Buffer.byteLength(JSON.stringify(messages), "utf8");
+    const tokensOver = estimate / ctxMax > PREFLIGHT_EMERGENCY_THRESHOLD;
+    const bytesOver = estimateBytes > MAX_BODY_BYTES;
+    let trigger = "none";
+    if (tokensOver && bytesOver) trigger = "both";
+    else if (tokensOver) trigger = "tokens";
+    else if (bytesOver) trigger = "bytes";
     return {
-      needsAction: estimate / ctxMax > PREFLIGHT_EMERGENCY_THRESHOLD,
+      needsAction: tokensOver || bytesOver,
       estimateTokens: estimate,
-      ctxMax
+      estimateBytes,
+      ctxMax,
+      trigger
     };
   }
   /** Replace older turns with one summary message; keep tail within keepRecentTokens budget. */
@@ -6026,16 +6385,22 @@ var ContextManager = class {
     const tail = all.slice(boundary);
     const headTokens = totalTokens - cumTokens;
     if (headTokens < totalTokens * HISTORY_FOLD_MIN_SAVINGS_FRACTION) return noop;
-    const { stubbedHead, pinnedBodies } = extractPinnedSkills(head);
-    const summary = await this.summarizeForFold(stubbedHead);
+    const { names: pinnedNames, bodies: pinnedBodies } = collectPinnedSkills(head);
+    const summary = await this.summarizeForFold(head, pinnedNames);
     if (!summary.content) return noop;
     const memoTail = pinnedBodies.length > 0 ? `
 
 ${SKILL_PIN_MEMO_HEADER}
 
 ${pinnedBodies.join("\n\n")}` : "";
+    const constraints = extractPinnedConstraints(this.deps.getSystemPrompt());
+    const constraintTail = constraints ? `
+
+[PINNED CONSTRAINTS \u2014 preserved verbatim]
+
+${constraints}` : "";
     const summaryMsg = buildAssistantMessage(
-      HISTORY_FOLD_MARKER + summary.content + memoTail,
+      HISTORY_FOLD_MARKER + summary.content + memoTail + constraintTail,
       [],
       model,
       summary.reasoningContent
@@ -6043,6 +6408,7 @@ ${pinnedBodies.join("\n\n")}` : "";
     const replacement = [summaryMsg, ...tail];
     this.deps.log.compactInPlace(replacement);
     this.persistRewrite(replacement);
+    this.deps.onLogRewrite?.();
     return {
       folded: true,
       beforeMessages: all.length,
@@ -6050,10 +6416,13 @@ ${pinnedBodies.join("\n\n")}` : "";
       summaryChars: summary.content.length
     };
   }
-  /** Pure local emergency compaction for preflight: drop oldest log entries and keep a valid tail. */
+  /** Pure local emergency compaction for preflight: drop oldest log entries and keep a valid tail.
+   * Bounded by tokens AND bytes — bytes matter because DeepSeek's gateway 400s on bodies past
+   * `MAX_BODY_BYTES` even when the token budget is far from exhausted. */
   mechanicalTruncate(model, opts) {
     const ctxMax = DEEPSEEK_CONTEXT_TOKENS[model] ?? DEFAULT_CONTEXT_TOKENS;
     const targetTokens = opts?.targetTokens ?? Math.floor(ctxMax * PREFLIGHT_MECHANICAL_TARGET_FRACTION);
+    const targetBytes = opts?.targetBytes ?? MAX_BODY_BYTES_TARGET;
     const all = this.deps.log.toMessages();
     const noop = {
       folded: false,
@@ -6063,6 +6432,7 @@ ${pinnedBodies.join("\n\n")}` : "";
     };
     if (all.length === 0) return noop;
     const tokenCounts = all.map((m) => estimateConversationTokens([m], true));
+    const byteCounts = all.map((m) => Buffer.byteLength(JSON.stringify(m), "utf8"));
     let latestUserBoundary = -1;
     for (let i = all.length - 1; i >= 0; i--) {
       if (all[i].role === "user") {
@@ -6071,12 +6441,15 @@ ${pinnedBodies.join("\n\n")}` : "";
       }
     }
     let cumTokens = 0;
+    let cumBytes = 0;
     let boundary = all.length;
     let foundSafeBoundary = false;
     for (let i = all.length - 1; i >= 0; i--) {
-      const next = cumTokens + tokenCounts[i];
-      if (next > targetTokens) break;
-      cumTokens = next;
+      const nextTokens = cumTokens + tokenCounts[i];
+      const nextBytes = cumBytes + byteCounts[i];
+      if (nextTokens > targetTokens || nextBytes > targetBytes) break;
+      cumTokens = nextTokens;
+      cumBytes = nextBytes;
       if (all[i].role === "user") {
         boundary = i;
         foundSafeBoundary = true;
@@ -6087,6 +6460,7 @@ ${pinnedBodies.join("\n\n")}` : "";
     if (replacement.length === all.length) return noop;
     this.deps.log.compactInPlace(replacement);
     this.persistRewrite(replacement);
+    this.deps.onLogRewrite?.();
     return {
       folded: true,
       beforeMessages: all.length,
@@ -6105,17 +6479,18 @@ ${pinnedBodies.join("\n\n")}` : "";
     this.persistRewrite([...kept]);
     return true;
   }
-  async summarizeForFold(messagesToSummarize) {
+  async summarizeForFold(messagesToSummarize, pinnedSkillNames) {
     const summaryModel = "deepseek-v4-flash";
-    const systemPrompt = "You compress conversation history for a coding agent. Output one prose recap that preserves: the user's overall goal, decisions and conclusions reached, files inspected or modified, important tool results still relevant to ongoing work, and any open todos. Skip turn-by-turn play-by-play. No tool calls, no markdown headings, no SEARCH/REPLACE blocks \u2014 plain prose only.";
     const healed = healLoadedMessages(messagesToSummarize, DEFAULT_MAX_RESULT_CHARS).messages;
+    const agentSystem = this.deps.getSystemPrompt();
+    const fewShots = this.deps.getFewShots?.() ?? [];
+    const tools = this.deps.getToolSpecs?.() ?? [];
+    const instruction = buildFoldSummaryInstruction(pinnedSkillNames);
     const messages = [
-      { role: "system", content: systemPrompt },
+      { role: "system", content: agentSystem },
+      ...fewShots.map((m) => ({ ...m })),
       ...healed,
-      {
-        role: "user",
-        content: "Summarize the conversation above as plain prose. This summary replaces the original turns to free context \u2014 make it self-contained."
-      }
+      { role: "user", content: instruction }
     ];
     const turnSignal = this.deps.getAbortSignal();
     const foldCtrl = new AbortController();
@@ -6145,9 +6520,9 @@ ${pinnedBodies.join("\n\n")}` : "";
         this.deps.client.chat({
           model: summaryModel,
           messages,
+          tools: tools.length ? tools : void 0,
           signal: foldCtrl.signal,
-          thinking: thinkingModeForModel(summaryModel),
-          reasoningEffort: "high"
+          thinking: "disabled"
         }),
         abortPromise,
         timeoutPromise
@@ -6232,6 +6607,7 @@ function formatLoopError(err, probe) {
   if (status === "402") return t("errors.balance402", { inner });
   if (status === "422") return t("errors.badparam422", { inner });
   if (status === "400") return t("errors.badrequest400", { inner });
+  if (status === "429") return t("errors.concurrency429", { inner });
   if (is5xxStatus(status)) return formatDeepSeek5xx(status, probe);
   return msg;
 }
@@ -6922,8 +7298,34 @@ function signature(call) {
   return `${call.function?.name ?? ""}::${call.function?.arguments ?? ""}`;
 }
 
+// src/tools/read-tracker.ts
+import * as pathMod from "path";
+var ReadTracker = class _ReadTracker {
+  _seen = /* @__PURE__ */ new Set();
+  static norm(abs) {
+    const resolved = pathMod.resolve(abs);
+    return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+  }
+  markRead(abs) {
+    this._seen.add(_ReadTracker.norm(abs));
+  }
+  hasRead(abs) {
+    return this._seen.has(_ReadTracker.norm(abs));
+  }
+  reset() {
+    this._seen.clear();
+  }
+  get size() {
+    return this._seen.size;
+  }
+};
+
 // src/loop.ts
 var ESCALATION_MODEL = "deepseek-v4-pro";
+var MID_TURN_STEER_WRAPPER = "[Mid-turn steer queued by the user. Do not treat this as a new task; use it only as additional guidance for the current task after completing the current step.]";
+function formatSteerUserMessage(content) {
+  return [MID_TURN_STEER_WRAPPER, content].join("\n");
+}
 var CacheFirstLoop = class {
   client;
   prefix;
@@ -6932,6 +7334,8 @@ var CacheFirstLoop = class {
   scratch = new VolatileScratch();
   stats = new SessionStats();
   repair;
+  /** Files the model has read this session; gates edit_file / multi_edit so SEARCH text matches on-disk bytes. Cleared on fold / mechanical truncate (the model's byte-level view of the elided history is gone). In-memory only — naturally empty on resume. */
+  readTracker = new ReadTracker();
   // Mutable via configure() — slash commands in the TUI / library callers tweak
   // these mid-session so users don't have to restart.
   model;
@@ -6955,15 +7359,19 @@ var CacheFirstLoop = class {
   _turnAbort = new AbortController();
   /** Authoritative running-id set — UI cards consult this instead of trusting end-event delivery. Insert at dispatch entry, delete in finally. */
   _inflight = new InflightSet();
-  /** Typeahead steer message set by the UI; step() consumes it at the next iter boundary. */
-  _steer = null;
+  /** Typeahead steer messages set by the UI; step() consumes one at each iter boundary. */
+  _steerQueue = [];
   /** Set true when a steer was consumed this turn; cleared on next step() entry. */
   _steerConsumed = false;
   /** UI calls this to inject a mid-turn steer message without aborting the current turn.
-   *  New text resets steerConsumed — a fresh steer hasn't been consumed yet. */
+   *  New text resets steerConsumed because a fresh steer is queued. */
   steer(text) {
-    this._steer = text;
-    if (text !== null) this._steerConsumed = false;
+    if (text === null) {
+      this._steerQueue.length = 0;
+      return;
+    }
+    this._steerQueue.push(text);
+    this._steerConsumed = false;
   }
   /** True when a steer was consumed this turn (UI gate to avoid double-submit). */
   get steerConsumed() {
@@ -7049,7 +7457,11 @@ var CacheFirstLoop = class {
       stats: this.stats,
       sessionName: this.sessionName,
       getAbortSignal: () => this._turnAbort.signal,
-      getCurrentTurn: () => this._turn
+      getCurrentTurn: () => this._turn,
+      getSystemPrompt: () => this.prefix.system,
+      getToolSpecs: () => this.prefix.toolSpecs,
+      getFewShots: () => this.prefix.fewShots,
+      onLogRewrite: () => this.readTracker.reset()
     });
   }
   /** Replace older turns with one summary message; keep tail within keepRecentTokens budget. */
@@ -7220,7 +7632,8 @@ ${reason}`
       const result = await this.tools.dispatch(name, args, {
         signal,
         maxResultTokens: DEFAULT_MAX_RESULT_TOKENS,
-        confirmationGate: this.confirmationGate
+        confirmationGate: this.confirmationGate,
+        readTracker: this.readTracker
       });
       const postReport = await runHooks({
         hooks: this.hooks,
@@ -7248,11 +7661,9 @@ ${reason}`
     return generated;
   }
   _inflightCounter = 0;
-  buildMessages(pendingUser) {
+  buildMessages() {
     const healedMessages = this.healActiveLogBeforeSend();
-    const msgs = [...this.prefix.toMessages(), ...healedMessages];
-    if (pendingUser !== null) msgs.push({ role: "user", content: pendingUser });
-    return msgs;
+    return [...this.prefix.toMessages(), ...healedMessages];
   }
   healActiveLogBeforeSend() {
     const current = this.log.toMessages();
@@ -7333,6 +7744,7 @@ ${reason}`
             cap: this.budgetUsd.toFixed(2)
           })
         };
+        this._steerQueue.length = 0;
         return;
       }
       if (!this._budgetWarned && spent >= this.budgetUsd * 0.8) {
@@ -7371,8 +7783,8 @@ ${reason}`
       };
     }
     this.appendAndPersist({ role: "user", content: userInput });
-    let pendingUser = null;
     const toolSpecs = this.prefix.tools();
+    let rateLimitWarningShown = false;
     for (let iter = 0; ; iter++) {
       if (signal.aborted) {
         try {
@@ -7393,6 +7805,7 @@ ${reason}`
         } finally {
           this._turnAbort = new AbortController();
         }
+        this._steerQueue.length = 0;
         return;
       }
       if (iter > 0) {
@@ -7402,14 +7815,15 @@ ${reason}`
           content: t("loop.toolUploadStatus")
         };
       }
-      let messages = this.buildMessages(pendingUser);
-      if (this._steer !== null) {
-        const steer = this._steer;
-        this._steer = null;
-        this._steerConsumed = true;
-        this.appendAndPersist({ role: "user", content: steer });
-        messages = this.buildMessages(pendingUser);
-        pendingUser = null;
+      let messages = this.buildMessages();
+      if (this._steerQueue.length > 0) {
+        const steer = this._steerQueue.shift();
+        this._steerConsumed = this._steerQueue.length === 0;
+        this.appendAndPersist({
+          role: "user",
+          content: formatSteerUserMessage(steer)
+        });
+        messages = this.buildMessages();
         yield {
           turn: this._turn,
           role: "steer",
@@ -7419,17 +7833,17 @@ ${reason}`
       {
         const decision2 = this.context.decidePreflight(messages, this.prefix.toolSpecs, this.model);
         if (decision2.needsAction) {
-          const { estimateTokens: estimate, ctxMax } = decision2;
+          const { estimateTokens: estimate, estimateBytes, ctxMax } = decision2;
           yield {
             turn: this._turn,
             role: "status",
             content: t("loop.preflightTruncateStatus")
           };
           const result = this.context.mechanicalTruncate(this.model, {
-            allowEmpty: pendingUser !== null
+            allowEmpty: false
           });
           if (result.folded) {
-            messages = this.buildMessages(pendingUser);
+            messages = this.buildMessages();
             const after = this.context.decidePreflight(messages, this.prefix.toolSpecs, this.model);
             const stillFull = after.needsAction;
             yield {
@@ -7441,6 +7855,7 @@ ${reason}`
                   estimate: after.estimateTokens.toLocaleString(),
                   ctxMax: after.ctxMax.toLocaleString(),
                   pct: Math.round(after.estimateTokens / after.ctxMax * 100),
+                  bodyKB: Math.round(after.estimateBytes / 1024).toLocaleString(),
                   beforeMessages: result.beforeMessages,
                   afterMessages: result.afterMessages
                 }
@@ -7453,7 +7868,8 @@ ${reason}`
               content: t("loop.preflightNoFold", {
                 estimate: estimate.toLocaleString(),
                 ctxMax: ctxMax.toLocaleString(),
-                pct: Math.round(estimate / ctxMax * 100)
+                pct: Math.round(estimate / ctxMax * 100),
+                bodyKB: Math.round(estimateBytes / 1024).toLocaleString()
               })
             };
           }
@@ -7573,6 +7989,7 @@ ${reason}`
           } finally {
             this._turnAbort = new AbortController();
           }
+          this._steerQueue.length = 0;
           return;
         }
         const probe = is5xxError(err) ? await probeDeepSeekReachable(this.client) : void 0;
@@ -7582,6 +7999,7 @@ ${reason}`
           content: "",
           error: formatLoopError(err, probe)
         };
+        this._steerQueue.length = 0;
         return;
       }
       if (this.autoEscalate && this.modelForCurrentCall() !== ESCALATION_MODEL && isEscalationRequest(assistantContent)) {
@@ -7662,11 +8080,16 @@ ${reason}`
         };
       }
       if (repairedCalls.length === 0) {
+        if (this._steerQueue.length > 0) {
+          continue;
+        }
         if (allSuppressed) {
           yield* forceSummaryAfterIterLimit(this.summaryContext(), { reason: "stuck" });
+          this._steerQueue.length = 0;
           return;
         }
         yield { turn: this._turn, role: "done", content: assistantContent };
+        this._steerQueue.length = 0;
         return;
       }
       const decision = this.context.decideAfterUsage(usage, this.model, this._foldedThisTurn);
@@ -7712,6 +8135,7 @@ ${reason}`
         };
         this.context.trimTrailingToolCalls();
         yield* forceSummaryAfterIterLimit(this.summaryContext(), { reason: "context-guard" });
+        this._steerQueue.length = 0;
         return;
       }
       const dispatchSerial = (process.env.REASONIX_TOOL_DISPATCH ?? "auto").toLowerCase() === "serial";
@@ -7759,6 +8183,15 @@ ${reason}`
           }
           for (const w of preWarnings) yield w;
           for (const w of postWarnings) yield w;
+          const rateLimited = parseRateLimitedToolResult(result);
+          if (rateLimited && !rateLimitWarningShown) {
+            rateLimitWarningShown = true;
+            yield {
+              turn: this._turn,
+              role: "warning",
+              content: rateLimited.message
+            };
+          }
           this.appendAndPersist({
             role: "tool",
             tool_call_id: call.id ?? "",
@@ -7781,7 +8214,7 @@ ${reason}`
     return {
       client: this.client,
       signal: this._turnAbort.signal,
-      buildMessages: () => this.buildMessages(null),
+      buildMessages: () => this.buildMessages(),
       appendAndPersist: (m) => this.appendAndPersist(m),
       recordStats: (model, usage) => this.stats.record(this._turn, model, usage),
       turn: this._turn
@@ -7806,7 +8239,7 @@ function parsePositiveIntEnv(raw) {
 // src/at-mentions.ts
 import { existsSync as existsSync4, readFileSync as readFileSync6, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
 import { readdir, stat } from "fs/promises";
-import { isAbsolute as isAbsolute2, join as join5, relative, resolve as resolve2 } from "path";
+import { isAbsolute as isAbsolute2, join as join5, relative, resolve as resolve3 } from "path";
 
 // src/gitignore.ts
 import { readFileSync as readFileSync5 } from "fs";
@@ -7861,7 +8294,7 @@ function listFilesSync(root, opts = {}) {
 function listFilesWithStatsSync(root, opts = {}) {
   const maxResults = Math.max(1, opts.maxResults ?? 2e3);
   const ignoreDirs = new Set(opts.ignoreDirs ?? DEFAULT_PICKER_IGNORE_DIRS);
-  const rootAbs = resolve2(root);
+  const rootAbs = resolve3(root);
   const respectGi = opts.respectGitignore !== false;
   const out = [];
   const walk2 = (dirAbs, dirRel, layers) => {
@@ -7925,7 +8358,7 @@ async function listFilesWithStatsAsync(root, opts = {}) {
 async function walkFilesStream(root, opts) {
   const ignoreDirs = new Set(opts.ignoreDirs ?? DEFAULT_PICKER_IGNORE_DIRS);
   const respectGi = opts.respectGitignore !== false;
-  const rootAbs = resolve2(root);
+  const rootAbs = resolve3(root);
   const progressGap = Math.max(0, opts.progressIntervalMs ?? 100);
   let scanned = 0;
   let halted = false;
@@ -8003,8 +8436,8 @@ async function flushFiles(ents, dirAbs, dirRel, layers, emit) {
 async function listDirectory(root, relDir, opts = {}) {
   const ignoreDirs = new Set(opts.ignoreDirs ?? DEFAULT_PICKER_IGNORE_DIRS);
   const respectGi = opts.respectGitignore !== false;
-  const rootAbs = resolve2(root);
-  const dirAbs = resolve2(rootAbs, relDir);
+  const rootAbs = resolve3(root);
+  const dirAbs = resolve3(rootAbs, relDir);
   const rel = relative(rootAbs, dirAbs);
   if (rel.startsWith("..") || isAbsolute2(rel)) return [];
   const layers = [];
@@ -8169,7 +8602,7 @@ function expandAtMentions(text, rootDir, opts = {}) {
   const maxBytes = opts.maxBytes ?? DEFAULT_AT_MENTION_MAX_BYTES;
   const maxDirEntries = Math.max(1, opts.maxDirEntries ?? DEFAULT_AT_DIR_MAX_ENTRIES);
   const fs5 = opts.fs ?? defaultFs;
-  const root = resolve2(rootDir);
+  const root = resolve3(rootDir);
   const seen = /* @__PURE__ */ new Map();
   const expansions = [];
   const dirListings = /* @__PURE__ */ new Map();
@@ -8216,7 +8649,7 @@ function resolveMention(rawPath, root, maxBytes, maxDirEntries, fs5, dirListings
   if (isAbsolute2(rawPath)) {
     return { token: `@${rawPath}`, path: rawPath, ok: false, skip: "escape" };
   }
-  const resolved = resolve2(root, rawPath);
+  const resolved = resolve3(root, rawPath);
   const rel = relative(root, resolved);
   if (rel.startsWith("..") || isAbsolute2(rel)) {
     return { token: `@${rawPath}`, path: rawPath, ok: false, skip: "escape" };
@@ -8246,7 +8679,7 @@ function resolveMention(rawPath, root, maxBytes, maxDirEntries, fs5, dirListings
   return { token: `@${rawPath}`, path: rawPath, ok: false, skip: "not-file" };
 }
 function readSafe(root, rawPath, fs5) {
-  const resolved = resolve2(root, rawPath);
+  const resolved = resolve3(root, rawPath);
   try {
     return fs5.read(resolved);
   } catch {
@@ -8356,7 +8789,7 @@ import {
   writeFileSync as writeFileSync4
 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join8, resolve as resolve4 } from "path";
+import { join as join8, resolve as resolve5 } from "path";
 
 // src/frontmatter.ts
 var KEY_RE = /^([a-zA-Z_][a-zA-Z0-9_-]*):\s*(.*)$/;
@@ -8417,7 +8850,7 @@ import {
 } from "fs";
 import { accessSync } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname4, isAbsolute as isAbsolute3, join as join7, resolve as resolve3 } from "path";
+import { dirname as dirname4, isAbsolute as isAbsolute3, join as join7, resolve as resolve4 } from "path";
 
 // src/prompt-fragments.ts
 var TUI_FORMATTING_RULES = `Formatting (rendered in a TUI with a real markdown renderer):
@@ -8469,7 +8902,7 @@ var SkillStore = class {
   disableBuiltins;
   constructor(opts = {}) {
     this.homeDir = opts.homeDir ?? homedir4();
-    this.projectRoot = opts.projectRoot ? resolve3(opts.projectRoot) : void 0;
+    this.projectRoot = opts.projectRoot ? resolve4(opts.projectRoot) : void 0;
     const baseDir = this.projectRoot ?? process.cwd();
     this.customSkillPaths = dedupePaths(
       opts.customSkillPaths?.map((p) => resolveCustomSkillPath(p, baseDir, this.homeDir)) ?? []
@@ -8635,7 +9068,7 @@ function dedupePaths(paths) {
 function resolveCustomSkillPath(path2, baseDir, homeDir) {
   const trimmed = path2.trim();
   const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") || trimmed.startsWith("~\\") ? join7(homeDir, trimmed.slice(2)) : trimmed;
-  return resolve3(isAbsolute3(expanded) ? expanded : join7(baseDir, expanded));
+  return resolve4(isAbsolute3(expanded) ? expanded : join7(baseDir, expanded));
 }
 function skillPathStatus(dir) {
   try {
@@ -8671,8 +9104,13 @@ Tips:
 - Add \`allowed-tools: read_file, search_content\` to scope a subagent's tools
 `;
 }
+function skillDescription(s) {
+  if (s.scope !== "builtin") return s.description;
+  const key = s.name === "security-review" ? "securityReview" : s.name;
+  return t(`builtinSkills.${key}`);
+}
 function skillIndexLine(s) {
-  const safeDesc = s.description.replace(/\n/g, " ").trim();
+  const safeDesc = skillDescription(s).replace(/\n/g, " ").trim();
   const tag = s.runAs === "subagent" ? " [\u{1F9EC} subagent]" : "";
   const max = 130 - s.name.length - tag.length;
   const clipped = safeDesc.length > max ? `${safeDesc.slice(0, Math.max(1, max - 1))}\u2026` : safeDesc;
@@ -8903,7 +9341,7 @@ function sanitizeMemoryName(raw) {
   return trimmed;
 }
 function projectHash(rootDir) {
-  const abs = resolve4(rootDir);
+  const abs = resolve5(rootDir);
   return createHash2("sha1").update(abs).digest("hex").slice(0, 16);
 }
 function scopeDir(opts) {
@@ -8953,7 +9391,7 @@ var MemoryStore = class {
   projectRoot;
   constructor(opts = {}) {
     this.homeDir = opts.homeDir ?? join8(homedir5(), ".reasonix");
-    this.projectRoot = opts.projectRoot ? resolve4(opts.projectRoot) : void 0;
+    this.projectRoot = opts.projectRoot ? resolve5(opts.projectRoot) : void 0;
   }
   /** Directory this store writes `scope` files into, creating it if needed. */
   dir(scope) {
@@ -9209,15 +9647,44 @@ function applyMemoryStack(basePrompt, rootDir, opts = {}) {
 
 // src/tools/filesystem.ts
 import { promises as fs4 } from "fs";
-import * as pathMod5 from "path";
+import * as pathMod6 from "path";
 import picomatch3 from "picomatch";
 
+// src/code/file-encoding.ts
+import { promises as fsp, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
+import iconv from "iconv-lite";
+var UTF8_BOM = Buffer.from([239, 187, 191]);
+function decodeFileBuffer(buf) {
+  if (buf.length >= 3 && buf[0] === 239 && buf[1] === 187 && buf[2] === 191) {
+    return { text: buf.subarray(3).toString("utf8"), encoding: "utf8-bom" };
+  }
+  try {
+    return { text: new TextDecoder("utf-8", { fatal: true }).decode(buf), encoding: "utf8" };
+  } catch {
+  }
+  try {
+    return {
+      text: new TextDecoder("gb18030", { fatal: true }).decode(buf),
+      encoding: "gb18030"
+    };
+  } catch {
+  }
+  return { text: buf.toString("utf8"), encoding: "utf8" };
+}
+function encodeFile(text, encoding) {
+  if (encoding === "utf8") return Buffer.from(text, "utf8");
+  if (encoding === "utf8-bom") {
+    return Buffer.concat([UTF8_BOM, Buffer.from(text, "utf8")]);
+  }
+  return iconv.encode(text, "gb18030");
+}
+
 // src/memory/subdir.ts
-import { existsSync as existsSync8, readFileSync as readFileSync10 } from "fs";
-import { dirname as dirname5, join as join9, relative as relative2, resolve as resolve5 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync11 } from "fs";
+import { dirname as dirname5, join as join9, relative as relative2, resolve as resolve6 } from "path";
 function findDirMemory(absDir, rootDir) {
-  const root = resolve5(rootDir);
-  const target = resolve5(absDir);
+  const root = resolve6(rootDir);
+  const target = resolve6(absDir);
   const rel = relative2(root, target);
   if (rel.startsWith("..")) return [];
   const found = [];
@@ -9239,12 +9706,12 @@ function findDirMemory(absDir, rootDir) {
   return found;
 }
 function findSubdirMemoryAncestors(absPath, rootDir) {
-  return findDirMemory(dirname5(resolve5(absPath)), rootDir);
+  return findDirMemory(dirname5(resolve6(absPath)), rootDir);
 }
 function readSubdirMemoryContent(path2) {
   let raw;
   try {
-    raw = readFileSync10(path2, "utf8");
+    raw = readFileSync11(path2, "utf8");
   } catch {
     return null;
   }
@@ -9262,15 +9729,22 @@ ${content}`;
 
 // src/tools/fs/edit.ts
 import { promises as fs } from "fs";
-import * as pathMod from "path";
+import * as pathMod2 from "path";
 function displayRel(rootDir, full) {
-  return pathMod.relative(rootDir, full).replaceAll("\\", "/");
+  return pathMod2.relative(rootDir, full).replaceAll("\\", "/");
 }
-async function applyEdit(rootDir, abs, args) {
+var READ_BEFORE_EDIT_MARKER = "read_file first";
+async function applyEdit(rootDir, abs, args, hasRead) {
   if (args.search.length === 0) {
     throw new Error("edit_file: search cannot be empty");
   }
-  const before = await fs.readFile(abs, "utf8");
+  if (hasRead && !hasRead(abs)) {
+    throw new Error(
+      `edit_file: ${displayRel(rootDir, abs)} was not read this session \u2014 ${READ_BEFORE_EDIT_MARKER} so your SEARCH matches the bytes on disk.`
+    );
+  }
+  const beforeBuf = await fs.readFile(abs);
+  const { text: before, encoding } = decodeFileBuffer(beforeBuf);
   const le = before.includes("\r\n") ? "\r\n" : "\n";
   const adaptedSearch = args.search.replace(/\r?\n/g, le);
   const adaptedReplace = args.replace.replace(/\r?\n/g, le);
@@ -9285,7 +9759,7 @@ async function applyEdit(rootDir, abs, args) {
     );
   }
   const after = before.slice(0, firstIdx) + adaptedReplace + before.slice(firstIdx + adaptedSearch.length);
-  await fs.writeFile(abs, after, "utf8");
+  await fs.writeFile(abs, encodeFile(after, encoding));
   const rel = displayRel(rootDir, abs);
   const header = `edited ${rel} (${adaptedSearch.length}\u2192${adaptedReplace.length} chars)`;
   const startLine = before.slice(0, firstIdx).split(/\r?\n/).length;
@@ -9293,7 +9767,7 @@ async function applyEdit(rootDir, abs, args) {
   return `${header}
 ${diff}`;
 }
-async function applyMultiEdit(rootDir, edits) {
+async function applyMultiEdit(rootDir, edits, hasRead) {
   if (edits.length === 0) {
     throw new Error("multi_edit: edits must contain at least one entry");
   }
@@ -9319,16 +9793,23 @@ async function applyMultiEdit(rootDir, edits) {
     }
     let state = filesByPath.get(e.abs);
     if (!state) {
+      if (hasRead && !hasRead(e.abs)) {
+        throw new Error(
+          `multi_edit: edit #${i + 1} target ${rel} was not read this session \u2014 ${READ_BEFORE_EDIT_MARKER} (no edits applied)`
+        );
+      }
       let before;
+      let encoding;
       try {
-        before = await fs.readFile(e.abs, "utf8");
+        const buf = await fs.readFile(e.abs);
+        ({ text: before, encoding } = decodeFileBuffer(buf));
       } catch (err) {
         throw new Error(
           `multi_edit: edit #${i + 1} cannot read ${rel}: ${err.message} (no edits applied)`
         );
       }
       const le = before.includes("\r\n") ? "\r\n" : "\n";
-      state = { before, buf: before, le, hunks: [], deltaChars: 0, touched: 0 };
+      state = { before, buf: before, le, hunks: [], deltaChars: 0, touched: 0, encoding };
       filesByPath.set(e.abs, state);
     }
     const adaptedSearch = e.search.replace(/\r?\n/g, state.le);
@@ -9355,14 +9836,14 @@ ${renderEditDiff(adaptedSearch, adaptedReplace, startLine)}`);
   const attempted = [];
   try {
     for (const [abs, state] of filesByPath) {
-      attempted.push({ abs, before: state.before });
-      await fs.writeFile(abs, state.buf, "utf8");
+      attempted.push({ abs, before: state.before, encoding: state.encoding });
+      await fs.writeFile(abs, encodeFile(state.buf, state.encoding));
     }
   } catch (writeErr) {
     const rollbackFailures = [];
     for (const item of [...attempted].reverse()) {
       try {
-        await fs.writeFile(item.abs, item.before, "utf8");
+        await fs.writeFile(item.abs, encodeFile(item.before, item.encoding));
       } catch (restoreErr) {
         rollbackFailures.push(`${displayRel(rootDir, item.abs)}: ${restoreErr.message}`);
       }
@@ -9439,10 +9920,10 @@ function lineDiff(a, b) {
 
 // src/tools/fs/glob.ts
 import { promises as fs2 } from "fs";
-import * as pathMod2 from "path";
+import * as pathMod3 from "path";
 import picomatch2 from "picomatch";
 function displayRel2(rootDir, full) {
-  return pathMod2.relative(rootDir, full).replaceAll("\\", "/");
+  return pathMod3.relative(rootDir, full).replaceAll("\\", "/");
 }
 async function globFiles(ctx, startAbs, args) {
   if (args.signal?.aborted) {
@@ -9464,7 +9945,7 @@ async function globFiles(ctx, startAbs, args) {
       return;
     }
     for (const e of entries) {
-      const full = pathMod2.join(dir, e.name);
+      const full = pathMod3.join(dir, e.name);
       if (e.isDirectory()) {
         if (!includeDeps && ctx.skipDirNames.has(e.name)) continue;
         await walk2(full);
@@ -9501,7 +9982,7 @@ async function globFiles(ctx, startAbs, args) {
 }
 
 // src/tools/fs/outline.ts
-import * as pathMod3 from "path";
+import * as pathMod4 from "path";
 var OUTLINE_MAX_ENTRIES = 30;
 var OUTLINE_TAIL_KEEP = 5;
 var TS_EXPORT_RE = /^export\s+(?:default\s+)?(?:async\s+)?(function|class|const|let|var|interface|type|enum)\s+\*?\s*(\w+)/;
@@ -9544,7 +10025,7 @@ var EXT_TO_LANG = {
   ".text": "txt"
 };
 function extractOutline(filename, lines) {
-  const ext = pathMod3.extname(filename).toLowerCase();
+  const ext = pathMod4.extname(filename).toLowerCase();
   const lang = EXT_TO_LANG[ext];
   if (!lang) return [];
   switch (lang) {
@@ -9685,7 +10166,7 @@ function formatOutline(entries) {
 
 // src/tools/fs/search.ts
 import { promises as fs3 } from "fs";
-import * as pathMod4 from "path";
+import * as pathMod5 from "path";
 
 // src/tools/fs/regex-runner.ts
 import { Worker } from "worker_threads";
@@ -9718,7 +10199,7 @@ var RegexRunner = class {
     this.defaultTimeoutMs = opts.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;
   }
   testLines(text, source, flags, opts = {}) {
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve14, reject) => {
       if (opts.signal?.aborted) {
         reject(new Error("regex evaluation aborted"));
         return;
@@ -9731,7 +10212,7 @@ var RegexRunner = class {
         this.killWorker();
         reject(new Error(`regex evaluation exceeded ${timeoutMs}ms`));
       }, timeoutMs);
-      const entry = { resolve: resolve13, reject, timer };
+      const entry = { resolve: resolve14, reject, timer };
       if (opts.signal) {
         entry.signal = opts.signal;
         entry.onAbort = () => {
@@ -9814,7 +10295,7 @@ function throwIfAborted(signal) {
   throw new DOMException("search aborted by user", "AbortError");
 }
 function displayRel3(rootDir, full) {
-  return pathMod4.relative(rootDir, full).replaceAll("\\", "/");
+  return pathMod5.relative(rootDir, full).replaceAll("\\", "/");
 }
 async function searchFiles(ctx, startAbs, args) {
   throwIfAborted(args.signal);
@@ -9838,7 +10319,7 @@ async function searchFiles(ctx, startAbs, args) {
     }
     for (const e of entries) {
       throwIfAborted(args.signal);
-      const full = pathMod4.join(dir, e.name);
+      const full = pathMod5.join(dir, e.name);
       const lower = e.name.toLowerCase();
       const hit = re ? re.test(e.name) : lower.includes(needle);
       if (hit) {
@@ -9930,11 +10411,11 @@ async function searchContent(ctx, startAbs, args) {
       throwIfTimedOut();
       if (e.isDirectory()) {
         if (!includeDeps && ctx.skipDirNames.has(e.name)) continue;
-        await walk2(pathMod4.join(dir, e.name));
+        await walk2(pathMod5.join(dir, e.name));
         continue;
       }
       if (!e.isFile()) continue;
-      const full = pathMod4.join(dir, e.name);
+      const full = pathMod5.join(dir, e.name);
       if (ctx.nameMatch && !ctx.nameMatch(e.name, displayRel3(ctx.rootDir, full))) continue;
       if (ctx.isBinaryByName(e.name)) continue;
       let fh;
@@ -10015,8 +10496,8 @@ async function searchContent(ctx, startAbs, args) {
           for (let i = realStart; i <= winEnd; i++) {
             const line = lines[i];
             const display = line.length > 200 ? `${line.slice(0, 200)}\u2026` : line;
-            const sep3 = hitSet.has(i) ? ":" : "-";
-            if (!pushLine(`${rel}:${i + 1}${sep3} ${display}`)) return;
+            const sep2 = hitSet.has(i) ? ":" : "-";
+            if (!pushLine(`${rel}:${i + 1}${sep2} ${display}`)) return;
           }
           prevWindowEnd = winEnd;
         }
@@ -10052,7 +10533,7 @@ var SKIP_DIR_NAMES = new Set(
 );
 var BINARY_EXTENSIONS = new Set(DEFAULT_INDEX_EXCLUDES.exts);
 function displayRel4(rootDir, full) {
-  return pathMod5.relative(rootDir, full).replaceAll("\\", "/");
+  return pathMod6.relative(rootDir, full).replaceAll("\\", "/");
 }
 function looksLikeAbsoluteSystemPath(raw) {
   if (/^[A-Za-z]:[\\/]/.test(raw)) return true;
@@ -10061,8 +10542,8 @@ function looksLikeAbsoluteSystemPath(raw) {
   );
 }
 function pathIsUnder(child, parent) {
-  const rel = pathMod5.relative(parent, child);
-  return rel === "" || !rel.startsWith("..") && !pathMod5.isAbsolute(rel);
+  const rel = pathMod6.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !pathMod6.isAbsolute(rel);
 }
 var GLOB_METACHARS = /[*?{[]/;
 function compileNameFilter(filter) {
@@ -10094,11 +10575,11 @@ function formatBytes(n) {
   return `${(n / (1024 * 1024 * 1024)).toFixed(2)} GiB`;
 }
 function registerFilesystemTools(registry, opts) {
-  const rootDir = pathMod5.resolve(opts.rootDir);
+  const rootDir = pathMod6.resolve(opts.rootDir);
   const allowWriting = opts.allowWriting !== false;
   const outlineThresholdBytes = opts.outlineThresholdBytes ?? DEFAULT_OUTLINE_THRESHOLD_BYTES;
   const maxListBytes = opts.maxListBytes ?? DEFAULT_MAX_LIST_BYTES;
-  const normRoot = pathMod5.resolve(rootDir);
+  const normRoot = pathMod6.resolve(rootDir);
   const sessionApproved = /* @__PURE__ */ new Set();
   const shownSubdirMemory = /* @__PURE__ */ new Set();
   function withSubdirMemory(absPath, body) {
@@ -10131,7 +10612,7 @@ ${body}`;
       if (pathIsUnder(abs, dir)) return;
     }
     const stat2 = await safeLstat(abs);
-    const allowPrefix = stat2?.isDirectory() ? abs : pathMod5.dirname(abs);
+    const allowPrefix = stat2?.isDirectory() ? abs : pathMod6.dirname(abs);
     let pending = inflightGate.get(allowPrefix);
     if (!pending) {
       const gate = ctx?.confirmationGate ?? pauseGate;
@@ -10159,7 +10640,7 @@ ${body}`;
       throw new Error("path must be a non-empty string");
     }
     if (looksLikeAbsoluteSystemPath(raw)) {
-      const abs = pathMod5.resolve(raw);
+      const abs = pathMod6.resolve(raw);
       if (pathIsUnder(abs, normRoot)) return abs;
       await ensureOutsideSandboxAllowed(abs, intent, toolName, ctx);
       return abs;
@@ -10169,7 +10650,7 @@ ${body}`;
       normalized = normalized.slice(1);
     }
     if (normalized.length === 0) normalized = ".";
-    const resolved = pathMod5.resolve(rootDir, normalized);
+    const resolved = pathMod6.resolve(rootDir, normalized);
     if (!pathIsUnder(resolved, normRoot)) {
       throw new Error(
         `path escapes sandbox root (${normRoot}): ${raw} \u2014 use an absolute system path like /Users/foo or C:\\Users\\foo to request approved outside-sandbox access`
@@ -10231,7 +10712,8 @@ ${body}`;
       if (looksBinary(raw)) {
         return `[refused: ${rel} appears to be binary (${formatBytes(sizeBytes)}) \u2014 read_file returns text only. Use get_file_info for stat.]`;
       }
-      const text = raw.toString("utf8");
+      const { text } = decodeFileBuffer(raw);
+      ctx?.readTracker?.markRead(abs);
       let lines = text.split(/\r?\n/);
       if (lines.length > 0 && lines[lines.length - 1] === "") lines = lines.slice(0, -1);
       const totalLines = lines.length;
@@ -10369,7 +10851,7 @@ ${slice.join("\n")}`);
           lines.push(line);
           emitted++;
           if (e.isDirectory() && !skip) {
-            await walk2(pathMod5.join(dir, e.name), depth + 1);
+            await walk2(pathMod6.join(dir, e.name), depth + 1);
           }
         }
       };
@@ -10529,14 +11011,20 @@ ${slice.join("\n")}`);
     },
     fn: async (args, ctx) => {
       const abs = await safePath(args.path, "write_file", ctx, "write");
-      await fs4.mkdir(pathMod5.dirname(abs), { recursive: true });
-      await fs4.writeFile(abs, args.content, "utf8");
+      await fs4.mkdir(pathMod6.dirname(abs), { recursive: true });
+      let encoding = "utf8";
+      try {
+        encoding = decodeFileBuffer(await fs4.readFile(abs)).encoding;
+      } catch {
+      }
+      await fs4.writeFile(abs, encodeFile(args.content, encoding));
+      ctx?.readTracker?.markRead(abs);
       return `wrote ${args.content.length} chars to ${displayRel4(rootDir, abs)}`;
     }
   });
   registry.register({
     name: "edit_file",
-    description: "Apply a SEARCH/REPLACE edit to an existing file. `search` must match exactly (whitespace sensitive) \u2014 no regex. The match must be unique in the file; otherwise the edit is refused to avoid surprise rewrites.",
+    description: "Apply a SEARCH/REPLACE edit to an existing file. Call `read_file` on this path first this session \u2014 the tool refuses otherwise, since SEARCH must match on-disk bytes exactly. `search` is whitespace-sensitive plain text (no regex) and must be unique in the file; otherwise the edit is refused to avoid surprise rewrites.",
     parameters: {
       type: "object",
       properties: {
@@ -10546,11 +11034,16 @@ ${slice.join("\n")}`);
       },
       required: ["path", "search", "replace"]
     },
-    fn: async (args, ctx) => applyEdit(rootDir, await safePath(args.path, "edit_file", ctx, "write"), args)
+    fn: async (args, ctx) => applyEdit(
+      rootDir,
+      await safePath(args.path, "edit_file", ctx, "write"),
+      args,
+      ctx?.readTracker ? (abs) => ctx.readTracker.hasRead(abs) : void 0
+    )
   });
   registry.register({
     name: "multi_edit",
-    description: "Apply N SEARCH/REPLACE edits across ONE OR MORE files in one call. Edits validate across the full batch before writing. Validation failures leave all files untouched; disk write failures trigger best-effort rollback of files that may have been modified. Per-file edits run in array order, so a later edit can match text inserted by an earlier one. Same per-edit rules as edit_file: `search` is exact text (whitespace sensitive, no regex) and must be unique in its target file at the moment that edit applies. Use this for renames spanning multiple files, cross-file refactors, or any batch where you'd otherwise loop edit_file.",
+    description: "Apply N SEARCH/REPLACE edits across ONE OR MORE files in one call. Every target file must have been `read_file`'d this session \u2014 the tool refuses the whole batch otherwise. Edits validate across the full batch before writing. Validation failures leave all files untouched; disk write failures trigger best-effort rollback of files that may have been modified. Per-file edits run in array order, so a later edit can match text inserted by an earlier one. Same per-edit rules as edit_file: `search` is exact text (whitespace sensitive, no regex) and must be unique in its target file at the moment that edit applies. Use this for renames spanning multiple files, cross-file refactors, or any batch where you'd otherwise loop edit_file.",
     parameters: {
       type: "object",
       properties: {
@@ -10584,7 +11077,11 @@ ${slice.join("\n")}`);
           replace: e?.replace
         }))
       );
-      return applyMultiEdit(rootDir, resolved);
+      return applyMultiEdit(
+        rootDir,
+        resolved,
+        ctx?.readTracker ? (abs) => ctx.readTracker.hasRead(abs) : void 0
+      );
     }
   });
   registry.register({
@@ -10615,7 +11112,7 @@ ${slice.join("\n")}`);
     fn: async (args, ctx) => {
       const src = await safePath(args.source, "move_file", ctx, "write");
       const dst = await safePath(args.destination, "move_file", ctx, "write");
-      await fs4.mkdir(pathMod5.dirname(dst), { recursive: true });
+      await fs4.mkdir(pathMod6.dirname(dst), { recursive: true });
       await fs4.rename(src, dst);
       return `moved ${displayRel4(rootDir, src)} \u2192 ${displayRel4(rootDir, dst)}`;
     }
@@ -10683,7 +11180,7 @@ ${slice.join("\n")}`);
     fn: async (args, ctx) => {
       const src = await safePath(args.source, "copy_file", ctx);
       const dst = await safePath(args.destination, "copy_file", ctx, "write");
-      await fs4.mkdir(pathMod5.dirname(dst), { recursive: true });
+      await fs4.mkdir(pathMod6.dirname(dst), { recursive: true });
       await fs4.cp(src, dst, { recursive: true, force: false, errorOnExist: true });
       return `copied ${displayRel4(rootDir, src)} \u2192 ${displayRel4(rootDir, dst)}`;
     }
@@ -11783,7 +12280,7 @@ ${hint}` : formatted;
   return parentRegistry;
 }
 function forkRegistryExcluding(parent, exclude) {
-  const child = new ToolRegistry();
+  const child = new ToolRegistry({ rateLimit: parent.rateLimitPolicy });
   for (const spec of parent.specs()) {
     const name = spec.function.name;
     if (exclude.has(name)) continue;
@@ -11795,7 +12292,7 @@ function forkRegistryExcluding(parent, exclude) {
   return child;
 }
 function forkRegistryWithAllowList(parent, allow, alsoExclude) {
-  const child = new ToolRegistry();
+  const child = new ToolRegistry({ rateLimit: parent.rateLimitPolicy });
   for (const spec of parent.specs()) {
     const name = spec.function.name;
     if (!allow.has(name)) continue;
@@ -11901,11 +12398,11 @@ var SubagentTelemetry = class {
 };
 
 // src/tools/shell.ts
-import * as pathMod10 from "path";
+import * as pathMod11 from "path";
 
 // src/tools/jobs.ts
 import { spawn as spawn2 } from "child_process";
-import * as pathMod6 from "path";
+import * as pathMod7 from "path";
 function killProcessTree(pid, signal) {
   if (process.platform === "win32") {
     const args = ["/pid", String(pid), "/T"];
@@ -11965,7 +12462,7 @@ var JobRegistry = class {
     const maxBytes = opts.maxBufferBytes ?? DEFAULT_OUTPUT_CAP_BYTES;
     const { bin, args, spawnOverrides } = prepareSpawn(argv);
     const spawnOpts = {
-      cwd: pathMod6.resolve(opts.cwd),
+      cwd: pathMod7.resolve(opts.cwd),
       shell: false,
       windowsHide: true,
       env: process.env,
@@ -12150,16 +12647,16 @@ ${job.output.slice(start)}`;
     let wakeOutput = null;
     if (waitFor === "output-or-exit") {
       racers.push(
-        new Promise((resolve13) => {
-          wakeOutput = resolve13;
-          job.outputWaiters.add(resolve13);
+        new Promise((resolve14) => {
+          wakeOutput = resolve14;
+          job.outputWaiters.add(resolve14);
         })
       );
     }
     let timer = null;
     racers.push(
-      new Promise((resolve13) => {
-        timer = setTimeout(resolve13, timeoutMs);
+      new Promise((resolve14) => {
+        timer = setTimeout(resolve14, timeoutMs);
       })
     );
     await Promise.race(racers);
@@ -12269,13 +12766,13 @@ function latestOutputSince(before, after) {
 // src/tools/shell/exec.ts
 import { spawn as spawn4, spawnSync } from "child_process";
 import { existsSync as existsSync9, statSync as statSync5 } from "fs";
-import * as pathMod9 from "path";
+import * as pathMod10 from "path";
 
 // src/tools/shell-chain.ts
 import { spawn as spawn3 } from "child_process";
-import { closeSync, openSync } from "fs";
+import { constants as constants2, closeSync, lstatSync, openSync, realpathSync } from "fs";
 import { devNull } from "os";
-import * as pathMod7 from "path";
+import * as pathMod8 from "path";
 var UnsupportedSyntaxError = class extends Error {
   constructor(detail) {
     super(`run_command: ${detail}`);
@@ -12540,7 +13037,49 @@ function isNullDeviceAlias(target) {
   if (process.platform === "win32" && lower === "nul") return true;
   return false;
 }
+function pathIsUnder2(child, parent) {
+  const rel = pathMod8.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !pathMod8.isAbsolute(rel);
+}
+function openFlags(mode) {
+  const noFollow = "O_NOFOLLOW" in constants2 ? constants2.O_NOFOLLOW : 0;
+  if (mode === "r") return constants2.O_RDONLY | noFollow;
+  if (mode === "w") return constants2.O_WRONLY | constants2.O_CREAT | constants2.O_TRUNC | noFollow;
+  return constants2.O_WRONLY | constants2.O_CREAT | constants2.O_APPEND | noFollow;
+}
+function ensureUnderSandbox(path2, sandboxRoot, target) {
+  if (!pathIsUnder2(path2, sandboxRoot)) {
+    throw new Error(
+      `redirect target "${target}" resolves outside the workspace sandbox (${sandboxRoot})`
+    );
+  }
+}
+function resolveRedirectTarget(target, cwd) {
+  const lexicalRoot = pathMod8.resolve(cwd);
+  const sandboxRoot = realpathSync(lexicalRoot);
+  const resolved = pathMod8.resolve(lexicalRoot, target);
+  ensureUnderSandbox(resolved, lexicalRoot, target);
+  try {
+    const stat2 = lstatSync(resolved);
+    if (stat2.isSymbolicLink()) {
+      throw new Error(`redirect target "${target}" is a symbolic link`);
+    }
+    ensureUnderSandbox(realpathSync(resolved), sandboxRoot, target);
+  } catch (err) {
+    const code = err.code;
+    if (code !== "ENOENT") throw err;
+    ensureUnderSandbox(realpathSync(pathMod8.dirname(resolved)), sandboxRoot, target);
+  }
+  return resolved;
+}
+function validateRedirectTargets(redirects, cwd) {
+  for (const r of redirects) {
+    if (r.kind === "2>&1" || !r.target || isNullDeviceAlias(r.target)) continue;
+    resolveRedirectTarget(r.target, cwd);
+  }
+}
 function openRedirects(redirects, cwd) {
+  validateRedirectTargets(redirects, cwd);
   let stdinFd = null;
   let stdoutFd = null;
   let stderrFd = null;
@@ -12548,8 +13087,8 @@ function openRedirects(redirects, cwd) {
   let bothFd = null;
   const toClose = [];
   const open = (target, flags) => {
-    const resolved = isNullDeviceAlias(target) ? devNull : pathMod7.resolve(cwd, target);
-    const fd = openSync(resolved, flags);
+    const resolved = isNullDeviceAlias(target) ? devNull : resolveRedirectTarget(target, cwd);
+    const fd = openSync(resolved, openFlags(flags), 438);
     toClose.push(fd);
     return fd;
   };
@@ -12656,9 +13195,9 @@ async function runPipeGroup(segments, opts) {
     }
     const exits = await Promise.all(
       children.map(
-        (c) => new Promise((resolve13) => {
-          c.once("error", () => resolve13(null));
-          c.once("close", (code) => resolve13(code));
+        (c) => new Promise((resolve14) => {
+          c.once("error", () => resolve14(null));
+          c.once("close", (code) => resolve14(code));
         })
       )
     );
@@ -12703,7 +13242,7 @@ var OutputBuffer = class {
 
 // src/tools/shell/parse.ts
 import { homedir as homedir7 } from "os";
-import * as pathMod8 from "path";
+import * as pathMod9 from "path";
 
 // packages/core-utils/src/tildeify.ts
 import { homedir as homedir6 } from "os";
@@ -12908,16 +13447,16 @@ function resolveSensitivePath(token, projectRoot) {
     return null;
   let expanded = token;
   if (expanded.startsWith("~")) {
-    expanded = pathMod8.join(homedir7(), expanded.slice(1));
+    expanded = pathMod9.join(homedir7(), expanded.slice(1));
   }
-  return pathMod8.resolve(projectRoot, expanded);
+  return pathMod9.resolve(projectRoot, expanded);
 }
 function expandPrefix(prefix) {
-  if (prefix.startsWith("~")) return pathMod8.join(homedir7(), prefix.slice(1));
-  return pathMod8.resolve(prefix);
+  if (prefix.startsWith("~")) return pathMod9.join(homedir7(), prefix.slice(1));
+  return pathMod9.resolve(prefix);
 }
 function pathStartsWithPrefix(normalized, prefix) {
-  return normalized === prefix || normalized.startsWith(`${prefix}${pathMod8.sep}`);
+  return normalized === prefix || normalized.startsWith(`${prefix}${pathMod9.sep}`);
 }
 function matchesGlob(name, pattern) {
   const regex = new RegExp(
@@ -12932,17 +13471,39 @@ function hasSensitivePathArgs(argv, projectRoot, extraPrefixes = [], extraPatter
   for (const token of argv) {
     const resolved = resolveSensitivePath(token, projectRoot);
     if (!resolved) continue;
-    const normalized = pathMod8.normalize(resolved);
+    const normalized = pathMod9.normalize(resolved);
     for (const pfx of prefixes) {
       if (pathStartsWithPrefix(normalized, pfx)) return true;
     }
-    const base = pathMod8.basename(normalized);
+    const base = pathMod9.basename(normalized);
     for (const pat of patterns) {
       if (matchesGlob(base, pat)) return true;
     }
   }
   return false;
 }
+function pathIsUnder3(child, parent) {
+  const rel = pathMod9.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !pathMod9.isAbsolute(rel);
+}
+function redirectTargets(chain) {
+  const targets = [];
+  for (const seg of chain.segments) {
+    for (const r of seg.redirects) {
+      if (r.kind === "2>&1" || !r.target || isNullDeviceAlias(r.target)) continue;
+      targets.push(r.target);
+    }
+  }
+  return targets;
+}
+function redirectsEscapeSandbox(chain, projectRoot) {
+  const root = pathMod9.resolve(projectRoot);
+  for (const target of redirectTargets(chain)) {
+    const resolved = pathMod9.resolve(root, target);
+    if (!pathIsUnder3(resolved, root)) return true;
+  }
+  return false;
+}
 function isAllowed(cmd, extra = [], projectRoot, sensitivePathConfig) {
   let argv;
   try {
@@ -12984,6 +13545,18 @@ function isCommandAllowed(cmd, extra = [], projectRoot, sensitivePathConfig) {
     return false;
   }
   if (chain === null) return isAllowed(cmd, extra, projectRoot, sensitivePathConfig);
+  const targets = redirectTargets(chain);
+  if (targets.length > 0 && !projectRoot) return false;
+  if (projectRoot) {
+    if (redirectsEscapeSandbox(chain, projectRoot)) return false;
+    if (hasSensitivePathArgs(
+      targets,
+      projectRoot,
+      sensitivePathConfig?.prefixes,
+      sensitivePathConfig?.patterns
+    ))
+      return false;
+  }
   return chainAllowed(chain, (seg) => isAllowed(seg, extra, projectRoot, sensitivePathConfig));
 }
 
@@ -13052,7 +13625,7 @@ async function runCommand(cmd, opts) {
   };
   const { bin, args, spawnOverrides } = prepareSpawn(argv, { env: normalizedEnv });
   const effectiveSpawnOpts = { ...spawnOpts, ...spawnOverrides };
-  return await new Promise((resolve13, reject) => {
+  return await new Promise((resolve14, reject) => {
     let child;
     try {
       child = spawn4(bin, args, effectiveSpawnOpts);
@@ -13106,7 +13679,7 @@ async function runCommand(cmd, opts) {
       const output = buf.length > maxChars ? `${buf.slice(0, maxChars)}
 
 [\u2026 truncated ${buf.length - maxChars} chars \u2026]` : buf;
-      resolve13({ exitCode: code, output, timedOut });
+      resolve14({ exitCode: code, output, timedOut });
     });
   });
 }
@@ -13128,16 +13701,16 @@ function resolveExecutable(cmd, opts = {}) {
   const platform = opts.platform ?? process.platform;
   if (platform !== "win32") return cmd;
   if (!cmd) return cmd;
-  if (cmd.includes("/") || cmd.includes("\\") || pathMod9.isAbsolute(cmd)) return cmd;
-  if (pathMod9.extname(cmd)) return cmd;
+  if (cmd.includes("/") || cmd.includes("\\") || pathMod10.isAbsolute(cmd)) return cmd;
+  if (pathMod10.extname(cmd)) return cmd;
   const env = opts.env ?? process.env;
   const pathExt = (getEnvCaseInsensitive(env, "PATHEXT") ?? ".COM;.EXE;.BAT;.CMD").split(";").map((e) => e.trim()).filter(Boolean);
-  const delimiter2 = opts.pathDelimiter ?? (platform === "win32" ? ";" : pathMod9.delimiter);
+  const delimiter2 = opts.pathDelimiter ?? (platform === "win32" ? ";" : pathMod10.delimiter);
   const pathDirs = (getEnvCaseInsensitive(env, "PATH") ?? "").split(delimiter2).filter(Boolean);
   const isFile = opts.isFile ?? defaultIsFile;
   for (const dir of pathDirs) {
     for (const ext of pathExt) {
-      const full = pathMod9.win32.join(dir, cmd + ext);
+      const full = pathMod10.win32.join(dir, cmd + ext);
       if (isFile(full)) return full;
     }
   }
@@ -13253,8 +13826,8 @@ function withUtf8Codepage(cmdline) {
 function isBareWindowsName(s) {
   if (!s) return false;
   if (s.includes("/") || s.includes("\\")) return false;
-  if (pathMod9.isAbsolute(s)) return false;
-  if (pathMod9.extname(s)) return false;
+  if (pathMod10.isAbsolute(s)) return false;
+  if (pathMod10.extname(s)) return false;
   return true;
 }
 function quoteForCmdExe(arg) {
@@ -13275,7 +13848,7 @@ var NeedsConfirmationError = class extends Error {
   }
 };
 function registerShellTools(registry, opts) {
-  const rootDir = pathMod10.resolve(opts.rootDir);
+  const rootDir = pathMod11.resolve(opts.rootDir);
   const timeoutSec = opts.timeoutSec ?? DEFAULT_TIMEOUT_SEC;
   const maxOutputChars = opts.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
   const jobs = opts.jobs ?? new JobRegistry();
@@ -13286,7 +13859,7 @@ function registerShellTools(registry, opts) {
   const isAllowAll = typeof opts.allowAll === "function" ? opts.allowAll : () => opts.allowAll === true;
   registry.register({
     name: "run_command",
-    description: 'Run a shell command in the project root; returns combined stdout+stderr. Allowlisted read-only / test / lint / typecheck commands run immediately; mutating / network / install commands gate on user confirmation.\n\nNo real shell \u2014 argv parsed natively for cross-platform parity:\n\u2022 Supported: chains `|`/`||`/`&&`/`;` (each segment allowlist-checked) and file redirects `>`/`>>`/`<`/`2>`/`2>>`/`2>&1`/`&>`.\n\u2022 Rejected: background `&`, heredoc `<<`, `$(\u2026)`, subshells, `$VAR` expansion, glob expansion. Quote operator chars as literals (`grep "a|b" file`).\n\u2022 `cd` does NOT persist \u2014 between calls OR within a chain. Use `npm --prefix <dir>`, `git -C <dir>`, `cargo -C <dir>` instead.\n\u2022 Filter at source \u2014 `grep -c` / `wc -l` / narrower paths over unbounded dumps.',
+    description: 'Run a shell command in the project root; returns combined stdout+stderr. Allowlisted read-only / test / lint / typecheck commands run immediately; mutating / network / install commands gate on user confirmation.\n\nDO NOT use run_command for file operations \u2014 use write_file, edit_file, multi_edit, copy_file, move_file, or delete_file instead. Shell utilities (echo, cp, sed, cat, tee, perl, python -c, etc.) bypass validation, lack rollback, and will trigger user confirmation gates that waste turns.\n\nNo real shell \u2014 argv parsed natively for cross-platform parity:\n\u2022 Supported: chains `|`/`||`/`&&`/`;` (each segment allowlist-checked) and file redirects `>`/`>>`/`<`/`2>`/`2>>`/`2>&1`/`&>`.\n\u2022 Rejected: background `&`, heredoc `<<`, `$(\u2026)`, subshells, `$VAR` expansion, glob expansion. Quote operator chars as literals (`grep "a|b" file`).\n\u2022 `cd` does NOT persist \u2014 between calls OR within a chain. Use `npm --prefix <dir>`, `git -C <dir>`, `cargo -C <dir>` instead.\n\u2022 Filter at source \u2014 `grep -c` / `wc -l` / narrower paths over unbounded dumps.',
     // Plan-mode gate: allow allowlisted commands through (git status,
     // cargo check, ls, grep …) so the model can actually investigate
     // during planning. Anything that would otherwise trigger a
@@ -13488,11 +14061,11 @@ function registerShellTools(registry, opts) {
   return registry;
 }
 function resolveCwdInsideRoot(rootDir, raw) {
-  const root = pathMod10.resolve(rootDir);
+  const root = pathMod11.resolve(rootDir);
   if (!raw || !raw.trim()) return root;
-  const resolved = pathMod10.resolve(root, raw);
-  const rel = pathMod10.relative(root, resolved);
-  if (rel.startsWith("..") || pathMod10.isAbsolute(rel)) {
+  const resolved = pathMod11.resolve(root, raw);
+  const rel = pathMod11.relative(root, resolved);
+  if (rel.startsWith("..") || pathMod11.isAbsolute(rel)) {
     throw new Error(
       `run_background: cwd "${raw}" resolves outside the workspace root (${root}). Pass a workspace-relative path.`
     );
@@ -13540,17 +14113,20 @@ ${r.output}` : header;
 }
 
 // src/tools/web.ts
+import { lookup } from "dns/promises";
+import { isIP } from "net";
 import { parse as parseHtml } from "node-html-parser";
 var DEFAULT_FETCH_MAX_CHARS = 32e3;
 var DEFAULT_FETCH_TIMEOUT_MS = 15e3;
 var DEFAULT_TOPK = 5;
 var FETCH_MAX_BYTES = 10 * 1024 * 1024;
 var USER_AGENT = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36";
-var MOJEEK_ENDPOINT = "https://www.mojeek.com/search";
+var BING_ENDPOINT = "https://cn.bing.com/search";
 var METASO_ENDPOINT = "https://metaso.cn/api/v1";
 var TAVILY_ENDPOINT = "https://api.tavily.com/search";
 var PERPLEXITY_ENDPOINT = "https://api.perplexity.ai/chat/completions";
 var EXA_ENDPOINT = "https://api.exa.ai/answer";
+var FETCH_MAX_REDIRECTS = 5;
 function searchStatusError(status) {
   if (status === 429) return t("webErrors.rateLimit429");
   if (status === 403) return t("webErrors.forbidden403");
@@ -13563,6 +14139,63 @@ function fetchStatusError(status, url) {
   if (status >= 500 && status <= 599) return t("webErrors.fetchServerError5xx", { status, url });
   return t("webErrors.fetchStatus", { status, url });
 }
+function parseIpv4(address) {
+  const parts = address.split(".");
+  if (parts.length !== 4) return null;
+  let out = 0;
+  for (const part of parts) {
+    if (!/^\d+$/.test(part)) return null;
+    const n = Number(part);
+    if (!Number.isInteger(n) || n < 0 || n > 255) return null;
+    out = (out << 8) + n;
+  }
+  return out >>> 0;
+}
+function ipv4InRange(value, base, bits) {
+  const parsed = parseIpv4(base);
+  if (parsed === null) return false;
+  const mask = bits === 0 ? 0 : 4294967295 << 32 - bits >>> 0;
+  return (value & mask) === (parsed & mask);
+}
+function isPrivateIpv4(address) {
+  const value = parseIpv4(address);
+  if (value === null) return false;
+  return ipv4InRange(value, "0.0.0.0", 8) || ipv4InRange(value, "10.0.0.0", 8) || ipv4InRange(value, "100.64.0.0", 10) || ipv4InRange(value, "127.0.0.0", 8) || ipv4InRange(value, "169.254.0.0", 16) || ipv4InRange(value, "172.16.0.0", 12) || ipv4InRange(value, "192.0.0.0", 24) || ipv4InRange(value, "192.0.2.0", 24) || ipv4InRange(value, "192.168.0.0", 16) || ipv4InRange(value, "198.18.0.0", 15) || ipv4InRange(value, "198.51.100.0", 24) || ipv4InRange(value, "203.0.113.0", 24) || ipv4InRange(value, "224.0.0.0", 4) || ipv4InRange(value, "240.0.0.0", 4);
+}
+function normalizeIpv6(address) {
+  return address.toLowerCase().replace(/(^|:)0+([0-9a-f])/g, "$1$2");
+}
+function isPrivateIpv6(address) {
+  const normalized = normalizeIpv6(address);
+  const mapped = /^::ffff:(?:0+:)?(\d+\.\d+\.\d+\.\d+)$/i.exec(normalized);
+  if (mapped) return isPrivateIpv4(mapped[1]);
+  return normalized === "::" || normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe8") || normalized.startsWith("fe9") || normalized.startsWith("fea") || normalized.startsWith("feb") || normalized.startsWith("ff");
+}
+function isInternalAddress(address) {
+  const family = isIP(address);
+  if (family === 4) return isPrivateIpv4(address);
+  if (family === 6) return isPrivateIpv6(address);
+  return false;
+}
+async function assertPublicHttpUrl(rawUrl) {
+  const url = new URL(rawUrl);
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error(`web_fetch refuses non-HTTP URL: ${url.protocol}`);
+  }
+  const host = url.hostname;
+  const literal = isIP(host);
+  const addresses = literal ? [host] : (await lookup(host, { all: true, verbatim: true })).map((entry) => entry.address);
+  if (addresses.length === 0 || addresses.some(isInternalAddress)) {
+    throw new Error(`web_fetch refuses internal or reserved host: ${host}`);
+  }
+  return url;
+}
+function redirectLocation(resp, currentUrl) {
+  if (resp.status < 300 || resp.status > 399) return null;
+  const location = resp.headers.get("location");
+  if (!location) return null;
+  return new URL(location, currentUrl).toString();
+}
 async function webSearch(query, opts = {}) {
   if (opts.engine === "metaso") {
     return searchMetaso(query, opts);
@@ -13579,29 +14212,29 @@ async function webSearch(query, opts = {}) {
   if (opts.engine === "exa") {
     return searchExa(query, opts);
   }
-  return searchMojeek(query, opts);
+  return searchBing(query, opts);
 }
-async function searchMojeek(query, opts = {}) {
+async function searchBing(query, opts = {}) {
   const topK = Math.max(1, Math.min(10, opts.topK ?? DEFAULT_TOPK));
-  const resp = await fetch(`${MOJEEK_ENDPOINT}?q=${encodeURIComponent(query)}`, {
+  const resp = await fetch(`${BING_ENDPOINT}?q=${encodeURIComponent(query)}`, {
     headers: {
       "User-Agent": USER_AGENT,
       Accept: "text/html,application/xhtml+xml,application/xml;q=0.9",
-      "Accept-Language": "en-US,en;q=0.9"
+      "Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8"
     },
     signal: opts.signal,
     redirect: "follow"
   });
   if (!resp.ok) throw new Error(searchStatusError(resp.status));
   const html = await resp.text();
-  const results = parseMojeekResults(html).slice(0, topK);
+  const results = parseBingResults(html).slice(0, topK);
   if (results.length === 0) {
     if (/no results found|did not match any documents/i.test(html)) return [];
     if (/captcha|verify you are human|access denied|forbidden/i.test(html)) {
-      throw new Error(t("webErrors.mojeekBlocked"));
+      throw new Error(t("webErrors.bingBlocked"));
     }
     throw new Error(
-      t("webErrors.mojeekNoResults", {
+      t("webErrors.bingNoResults", {
         chars: html.length,
         preview: html.slice(0, 120).replace(/\s+/g, " ")
       })
@@ -13654,6 +14287,7 @@ async function searchSearxng(query, opts = {}) {
 async function searchMetaso(query, opts = {}) {
   const topK = Math.max(1, Math.min(100, opts.topK ?? DEFAULT_TOPK));
   const apiKey = loadMetasoApiKey();
+  if (!apiKey) throw new Error(t("webErrors.metasoMissingKey"));
   let resp;
   try {
     resp = await fetch(`${METASO_ENDPOINT}/search`, {
@@ -13917,35 +14551,19 @@ function parseSearxngHtmlResults(html) {
   }
   return results;
 }
-function parseMojeekResults(html) {
-  const titles = [];
-  const titleAnchorRe = /<a\b[^>]*\bclass="title"[^>]*>[\s\S]*?<\/a>/g;
-  let m;
-  while (true) {
-    m = titleAnchorRe.exec(html);
-    if (m === null) break;
-    titles.push(m[0]);
-  }
-  const snippets = [];
-  const snippetRe = /<p\b[^>]*\bclass="s"[^>]*>([\s\S]*?)<\/p>/g;
-  while (true) {
-    m = snippetRe.exec(html);
-    if (m === null) break;
-    snippets.push(m[1] ?? "");
-  }
-  const hrefRe = /href="([^"]+)"/;
-  const innerRe = /<a\b[^>]*>([\s\S]*?)<\/a>/;
+function parseBingResults(html) {
+  const root = parseHtml(html);
   const results = [];
-  for (let i = 0; i < titles.length; i++) {
-    const anchor = titles[i];
-    const hrefMatch = anchor.match(hrefRe);
-    const innerMatch = anchor.match(innerRe);
-    if (!hrefMatch?.[1]) continue;
-    results.push({
-      title: decodeHtmlEntities(stripHtml(innerMatch?.[1] ?? "")).trim(),
-      url: hrefMatch[1],
-      snippet: decodeHtmlEntities(stripHtml(snippets[i] ?? "")).replace(/\s+/g, " ").trim()
-    });
+  for (const li of root.querySelectorAll("li.b_algo")) {
+    const anchor = li.querySelector("h2 a[href]");
+    if (!anchor) continue;
+    const href = anchor.getAttribute("href");
+    if (!href) continue;
+    const title = anchor.textContent.trim();
+    if (!title) continue;
+    const cap = li.querySelector("div.b_caption p");
+    const snippet = cap ? cap.textContent.trim().replace(/\s+/g, " ") : "";
+    results.push({ title, url: href, snippet });
   }
   return results;
 }
@@ -13961,12 +14579,23 @@ async function webFetch(url, opts = {}) {
   const cancel = () => ctl.abort();
   opts.signal?.addEventListener("abort", cancel, { once: true });
   let resp;
+  let currentUrl = url;
   try {
-    resp = await fetch(url, {
-      headers: { "User-Agent": USER_AGENT, Accept: "text/html,text/plain,*/*" },
-      signal: ctl.signal,
-      redirect: "follow"
-    });
+    for (let redirects = 0; ; redirects++) {
+      const parsed = await assertPublicHttpUrl(currentUrl);
+      if (ctl.signal.aborted) throw new DOMException("aborted", "AbortError");
+      resp = await fetch(parsed, {
+        headers: { "User-Agent": USER_AGENT, Accept: "text/html,text/plain,*/*" },
+        signal: ctl.signal,
+        redirect: "manual"
+      });
+      const nextUrl = redirectLocation(resp, parsed.toString());
+      if (!nextUrl) break;
+      if (redirects >= FETCH_MAX_REDIRECTS) {
+        throw new Error(`web_fetch redirect limit exceeded for ${url}`);
+      }
+      currentUrl = nextUrl;
+    }
   } catch (err) {
     if (timedOut) {
       throw new Error(t("webErrors.fetchTimeout", { ms: timeoutMs, url }));
@@ -13989,7 +14618,7 @@ async function webFetch(url, opts = {}) {
   const finalText = truncated ? `${text.slice(0, maxChars)}
 
 [\u2026 truncated ${text.length - maxChars} chars \u2026]` : text;
-  return { url, title, text: finalText, truncated };
+  return { url: currentUrl, title, text: finalText, truncated };
 }
 async function readBodyCapped(resp, maxBytes) {
   if (!resp.body) return await resp.text();
@@ -14061,9 +14690,6 @@ function walkExtract(node, out) {
   for (const child of node.childNodes) walkExtract(child, out);
   if (isBreak) out.push("\n");
 }
-function stripHtml(s) {
-  return parseHtml(s).text;
-}
 var HTML_ENTITIES = {
   amp: "&",
   lt: "<",
@@ -14176,12 +14802,12 @@ ${i + 1}. ${r.title}`);
 }
 
 // src/env.ts
-import { readFileSync as readFileSync11 } from "fs";
-import { resolve as resolve11 } from "path";
+import { readFileSync as readFileSync12 } from "fs";
+import { resolve as resolve12 } from "path";
 function loadDotenv(path2 = ".env") {
   let raw;
   try {
-    raw = readFileSync11(resolve11(process.cwd(), path2), "utf8");
+    raw = readFileSync12(resolve12(process.cwd(), path2), "utf8");
   } catch {
     return;
   }
@@ -14200,7 +14826,7 @@ function loadDotenv(path2 = ".env") {
 }
 
 // src/transcript/log.ts
-import { createWriteStream, readFileSync as readFileSync12 } from "fs";
+import { createWriteStream, readFileSync as readFileSync13 } from "fs";
 function recordFromLoopEvent(ev, extra) {
   const rec = {
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -14243,7 +14869,7 @@ function openTranscriptFile(path2, meta) {
   return stream;
 }
 function readTranscript(path2) {
-  const raw = readFileSync12(path2, "utf8");
+  const raw = readFileSync13(path2, "utf8");
   return parseTranscript(raw);
 }
 function parseTranscript(raw) {
@@ -14630,25 +15256,25 @@ function truncate(s, n) {
 }
 
 // src/version.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync5, readFileSync as readFileSync13, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync5, readFileSync as readFileSync14, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname7, join as join14 } from "path";
+import { dirname as dirname8, join as join14 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var REGISTRY_URL = "https://registry.npmjs.org/reasonix/latest";
 var LATEST_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 var LATEST_FETCH_TIMEOUT_MS = 2e3;
 function readPackageVersion() {
   try {
-    let dir = dirname7(fileURLToPath2(import.meta.url));
+    let dir = dirname8(fileURLToPath2(import.meta.url));
     for (let i = 0; i < 6; i++) {
       const p = join14(dir, "package.json");
       if (existsSync10(p)) {
-        const pkg = JSON.parse(readFileSync13(p, "utf8"));
+        const pkg = JSON.parse(readFileSync14(p, "utf8"));
         if (pkg?.name === "reasonix" && typeof pkg.version === "string") {
           return pkg.version;
         }
       }
-      const parent = dirname7(dir);
+      const parent = dirname8(dir);
       if (parent === dir) break;
       dir = parent;
     }
@@ -14662,7 +15288,7 @@ function cachePath(homeDirOverride) {
 }
 function readCache(homeDirOverride) {
   try {
-    const raw = readFileSync13(cachePath(homeDirOverride), "utf8");
+    const raw = readFileSync14(cachePath(homeDirOverride), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed.version === "string" && typeof parsed.checkedAt === "number") {
       return parsed;
@@ -14674,8 +15300,8 @@ function readCache(homeDirOverride) {
 function writeCache(entry, homeDirOverride) {
   try {
     const p = cachePath(homeDirOverride);
-    mkdirSync5(dirname7(p), { recursive: true });
-    writeFileSync5(p, JSON.stringify(entry), "utf8");
+    mkdirSync5(dirname8(p), { recursive: true });
+    writeFileSync6(p, JSON.stringify(entry), "utf8");
   } catch {
   }
 }
@@ -14890,7 +15516,7 @@ var McpClient = class {
     const id = this.nextId++;
     const frame = { jsonrpc: "2.0", id, method, params };
     let abortHandler = null;
-    const promise = new Promise((resolve13, reject) => {
+    const promise = new Promise((resolve14, reject) => {
       const timeout = setTimeout(() => {
         this.pending.delete(id);
         if (abortHandler && signal) signal.removeEventListener("abort", abortHandler);
@@ -14899,7 +15525,7 @@ var McpClient = class {
         );
       }, this.requestTimeoutMs);
       this.pending.set(id, {
-        resolve: resolve13,
+        resolve: resolve14,
         reject,
         timeout
       });
@@ -15031,12 +15657,12 @@ var StdioTransport = class {
   }
   async send(message) {
     if (this.closed) throw new Error("MCP transport is closed");
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve14, reject) => {
       const line = `${JSON.stringify(message)}
 `;
       this.child.stdin.write(line, "utf8", (err) => {
         if (err) reject(err);
-        else resolve13();
+        else resolve14();
       });
     });
   }
@@ -15047,8 +15673,8 @@ var StdioTransport = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve13) => {
-        this.waiters.push(resolve13);
+      const next = await new Promise((resolve14) => {
+        this.waiters.push(resolve14);
       });
       if (next === null) return;
       yield next;
@@ -15128,8 +15754,8 @@ var SseTransport = class {
   constructor(opts) {
     this.url = opts.url;
     this.headers = opts.headers ?? {};
-    this.endpointReady = new Promise((resolve13, reject) => {
-      this.resolveEndpoint = resolve13;
+    this.endpointReady = new Promise((resolve14, reject) => {
+      this.resolveEndpoint = resolve14;
       this.rejectEndpoint = reject;
     });
     this.endpointReady.catch(() => void 0);
@@ -15156,8 +15782,8 @@ var SseTransport = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve13) => {
-        this.waiters.push(resolve13);
+      const next = await new Promise((resolve14) => {
+        this.waiters.push(resolve14);
       });
       if (next === null) return;
       yield next;
@@ -15343,8 +15969,8 @@ var StreamableHttpTransport = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve13) => {
-        this.waiters.push(resolve13);
+      const next = await new Promise((resolve14) => {
+        this.waiters.push(resolve14);
       });
       if (next === null) return;
       yield next;
@@ -15442,13 +16068,13 @@ import {
   ftruncateSync,
   mkdirSync as mkdirSync6,
   openSync as openSync2,
-  readFileSync as readFileSync14,
+  readFileSync as readFileSync15,
   readSync,
   unlinkSync as unlinkSync3,
-  writeFileSync as writeFileSync6,
+  writeFileSync as writeFileSync7,
   writeSync
 } from "fs";
-import { dirname as dirname8, resolve as resolve12 } from "path";
+import { dirname as dirname9, isAbsolute as isAbsolute9, relative as relative10, resolve as resolve13 } from "path";
 var BLOCK_RE = /^(\S[^\n]*)\n<{7} SEARCH\n([\s\S]*?)\n?={7}\n([\s\S]*?)\n?>{7} REPLACE/gm;
 function parseEditBlocks(text) {
   const out = [];
@@ -15465,10 +16091,30 @@ function parseEditBlocks(text) {
   }
   return out;
 }
+function resolveEditPath(rootDir, rawPath) {
+  const absRoot = resolve13(rootDir);
+  if (/^[A-Za-z]:[\\/]/.test(rawPath) || looksLikeAbsoluteSystemPath2(rawPath)) {
+    return resolve13(rawPath);
+  }
+  let rooted = rawPath;
+  while (rooted.startsWith("/") || rooted.startsWith("\\")) {
+    rooted = rooted.slice(1);
+  }
+  return resolve13(absRoot, rooted || ".");
+}
+function looksLikeAbsoluteSystemPath2(rawPath) {
+  return /^\/(?:home|Users|etc|var|opt|tmp|usr|mnt|Library|Volumes|proc|sys|dev|run|srv|media|Applications|System|root|boot|private)(?:[/\\]|$)/.test(
+    rawPath
+  );
+}
+function pathIsUnder4(child, parent) {
+  const rel = relative10(parent, child);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute9(rel);
+}
 function applyEditBlock(block, rootDir) {
-  const absRoot = resolve12(rootDir);
-  const absTarget = resolve12(absRoot, block.path);
-  if (absTarget !== absRoot && !absTarget.startsWith(`${absRoot}${sep2()}`)) {
+  const absRoot = resolve13(rootDir);
+  const absTarget = resolveEditPath(rootDir, block.path);
+  if (!pathIsUnder4(absTarget, absRoot)) {
     return {
       path: block.path,
       status: "path-escape",
@@ -15478,7 +16124,7 @@ function applyEditBlock(block, rootDir) {
   const searchEmpty = block.search.length === 0;
   if (searchEmpty) {
     try {
-      mkdirSync6(dirname8(absTarget), { recursive: true });
+      mkdirSync6(dirname9(absTarget), { recursive: true });
       const fd = openSync2(absTarget, "wx");
       try {
         writeSync(fd, block.replace);
@@ -15521,7 +16167,7 @@ function applyEditBlock(block, rootDir) {
         if (n <= 0) break;
         readBytes += n;
       }
-      const content = inBuf.toString("utf8", 0, readBytes);
+      const { text: content, encoding } = decodeFileBuffer(inBuf.subarray(0, readBytes));
       const le = lineEndingOf(content);
       const adaptedSearch = block.search.replace(/\r?\n/g, le);
       const adaptedReplace = block.replace.replace(/\r?\n/g, le);
@@ -15542,7 +16188,7 @@ function applyEditBlock(block, rootDir) {
         };
       }
       const replaced = `${content.slice(0, idx)}${adaptedReplace}${content.slice(idx + adaptedSearch.length)}`;
-      const outBuf = Buffer.from(replaced, "utf8");
+      const outBuf = encodeFile(replaced, encoding);
       ftruncateSync(fd, outBuf.length);
       let written = 0;
       while (written < outBuf.length) {
@@ -15562,19 +16208,21 @@ function applyEditBlocks(blocks, rootDir) {
   return blocks.map((b) => applyEditBlock(b, rootDir));
 }
 function snapshotBeforeEdits(blocks, rootDir) {
-  const absRoot = resolve12(rootDir);
+  const absRoot = resolve13(rootDir);
   const seen = /* @__PURE__ */ new Set();
   const snapshots = [];
   for (const b of blocks) {
-    if (seen.has(b.path)) continue;
-    seen.add(b.path);
-    const abs = resolve12(absRoot, b.path);
+    const abs = resolveEditPath(rootDir, b.path);
+    if (!pathIsUnder4(abs, absRoot)) continue;
+    if (seen.has(abs)) continue;
+    seen.add(abs);
     if (!existsSync11(abs)) {
       snapshots.push({ path: b.path, prevContent: null });
       continue;
     }
     try {
-      snapshots.push({ path: b.path, prevContent: readFileSync14(abs, "utf8") });
+      const { text, encoding } = decodeFileBuffer(readFileSync15(abs));
+      snapshots.push({ path: b.path, prevContent: text, prevEncoding: encoding });
     } catch {
       snapshots.push({ path: b.path, prevContent: null });
     }
@@ -15582,10 +16230,10 @@ function snapshotBeforeEdits(blocks, rootDir) {
   return snapshots;
 }
 function restoreSnapshots(snapshots, rootDir) {
-  const absRoot = resolve12(rootDir);
+  const absRoot = resolve13(rootDir);
   return snapshots.map((snap) => {
-    const abs = resolve12(absRoot, snap.path);
-    if (abs !== absRoot && !abs.startsWith(`${absRoot}${sep2()}`)) {
+    const abs = resolveEditPath(rootDir, snap.path);
+    if (!pathIsUnder4(abs, absRoot)) {
       return {
         path: snap.path,
         status: "path-escape",
@@ -15601,7 +16249,7 @@ function restoreSnapshots(snapshots, rootDir) {
           message: "removed (the edit had created it)"
         };
       }
-      writeFileSync6(abs, snap.prevContent, "utf8");
+      writeFileSync7(abs, encodeFile(snap.prevContent, snap.prevEncoding ?? "utf8"));
       return {
         path: snap.path,
         status: "applied",
@@ -15612,15 +16260,12 @@ function restoreSnapshots(snapshots, rootDir) {
     }
   });
 }
-function sep2() {
-  return process.platform === "win32" ? "\\" : "/";
-}
 function lineEndingOf(text) {
   return text.includes("\r\n") ? "\r\n" : "\n";
 }
 
 // src/code/prompt.ts
-import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync16 } from "fs";
 import { join as join15 } from "path";
 var DEFAULT_CODE_MODEL = "deepseek-v4-flash";
 function codeSystemBase(modelId) {
@@ -15684,7 +16329,7 @@ the new lines
 >>>>>>> REPLACE
 
 Rules:
-- read_file first so your SEARCH matches byte-for-byte.
+- **Read before edit (enforced).** You MUST call \`read_file\` on the target this session before \`edit_file\` / \`multi_edit\` will accept it \u2014 the tool refuses unread targets up front, so SEARCH text is grounded in on-disk bytes, not a guess. A fold / mechanical truncate clears the tracker, so re-read after one of those before mutating. \`write_file\` counts as a read for that path (the content is what you just wrote).
 - One edit per block; multiple blocks per response are fine.
 - Create a new file with empty SEARCH:
     path/to/new.ts
@@ -15727,6 +16372,10 @@ When the user says run / start / launch / serve / boot up: start it, verify it c
 - One short paragraph explaining *why*, then the blocks.
 - Silence during exploration is fine \u2014 tool calls first, prose after.
 
+# Task integrity \u2014 non-negotiable
+
+The user's original objective and ALL constraints (especially "do NOT do X", "avoid Y", "never Z") remain in force for the entire session. You may NOT unilaterally simplify, narrow, or change the objective to save tokens, time, or steps. If you believe the objective needs adjustment, ask the user \u2014 do NOT decide on your own.
+
 __ESCALATION_CONTRACT__
 
 ${TUI_FORMATTING_RULES}
@@ -15751,7 +16400,7 @@ function codeSystemPrompt(rootDir, opts = {}) {
   if (existsSync12(gitignorePath)) {
     let content;
     try {
-      content = readFileSync15(gitignorePath, "utf8");
+      content = readFileSync16(gitignorePath, "utf8");
     } catch {
     }
     if (content !== void 0) {
@@ -15783,21 +16432,21 @@ ${appendParts.join("\n\n")}`;
 
 // src/telemetry/usage.ts
 import {
-  appendFileSync as appendFileSync2,
+  appendFileSync as appendFileSync3,
   closeSync as closeSync3,
   existsSync as existsSync13,
   fstatSync as fstatSync2,
   mkdirSync as mkdirSync7,
   openSync as openSync3,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   readSync as readSync2,
-  renameSync as renameSync2,
+  renameSync as renameSync3,
   statSync as statSync6,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync7
+  writeFileSync as writeFileSync8
 } from "fs";
 import { homedir as homedir9 } from "os";
-import { dirname as dirname9, join as join16 } from "path";
+import { dirname as dirname10, join as join16 } from "path";
 function defaultUsageLogPath(homeDirOverride) {
   return join16(homeDirOverride ?? homedir9(), ".reasonix", "usage.jsonl");
 }
@@ -15838,9 +16487,9 @@ function compactUsageLogIfLarge(path2, now) {
   if (kept.length === lines.filter((l) => l.trim()).length) return;
   const tmp = `${path2}.compacting`;
   try {
-    writeFileSync7(tmp, kept.length > 0 ? `${kept.join("\n")}
+    writeFileSync8(tmp, kept.length > 0 ? `${kept.join("\n")}
 ` : "", "utf8");
-    renameSync2(tmp, path2);
+    renameSync3(tmp, path2);
   } catch {
     try {
       unlinkSync4(tmp);
@@ -15864,8 +16513,8 @@ function appendUsage(input) {
   if (input.subagent) record.subagent = input.subagent;
   const path2 = input.path ?? defaultUsageLogPath();
   try {
-    mkdirSync7(dirname9(path2), { recursive: true });
-    appendFileSync2(path2, `${JSON.stringify(record)}
+    mkdirSync7(dirname10(path2), { recursive: true });
+    appendFileSync3(path2, `${JSON.stringify(record)}
 `, "utf8");
     compactUsageLogIfLarge(path2, record.ts);
   } catch {
@@ -15876,7 +16525,7 @@ function readUsageLog(path2 = defaultUsageLogPath()) {
   if (!existsSync13(path2)) return [];
   let raw;
   try {
-    raw = readFileSync16(path2, "utf8");
+    raw = readFileSync17(path2, "utf8");
   } catch {
     return [];
   }
@@ -16108,9 +16757,9 @@ export {
   openTranscriptFile,
   outputCostUsd,
   parseAtQuery,
+  parseBingResults,
   parseEditBlocks,
   parseMcpSpec,
-  parseMojeekResults,
   parseSearxngHtmlResults,
   parseTranscript,
   prepareSpawn,