reasonix 0.49.0 → 0.50.1

package/dist/index.d.ts

@@ -24,6 +24,275 @@ interface RetryInfo {
 }
 declare function fetchWithRetry(fetchFn: typeof fetch, url: string, init: RequestInit, opts?: RetryOptions): Promise<Response>;
 
+type ThemeName = "dark" | "light" | "midnight" | "deep-blue" | "high-contrast";
+
+type LanguageCode = "EN" | "zh-CN";
+
+/** Shared exclude defaults + resolver — chunker, directory_tree, and dashboard read from here. */
+interface IndexUserConfig {
+    excludeDirs?: string[];
+    excludeFiles?: string[];
+    excludeExts?: string[];
+    excludePatterns?: string[];
+    respectGitignore?: boolean;
+    maxFileBytes?: number;
+}
+
+/** Plain http:// stays HTTP+SSE for back-compat; Streamable HTTP is opt-in via the `streamable+` URL prefix. */
+interface StdioMcpSpec {
+    transport: "stdio";
+    /** Namespace prefix applied to each registered tool, or null if anonymous. */
+    name: string | null;
+    /** Argv[0]. */
+    command: string;
+    /** Remaining argv. */
+    args: string[];
+}
+interface SseMcpSpec {
+    transport: "sse";
+    name: string | null;
+    /** Fully qualified SSE endpoint URL. */
+    url: string;
+}
+interface StreamableHttpMcpSpec {
+    transport: "streamable-http";
+    name: string | null;
+    /** Fully qualified Streamable HTTP endpoint URL (no `streamable+` prefix). */
+    url: string;
+}
+type McpSpec = StdioMcpSpec | SseMcpSpec | StreamableHttpMcpSpec;
+declare function parseMcpSpec(input: string): McpSpec;
+
+/** Sliding-window limits for per-session tool dispatch, with aggregate and per-tool buckets. */
+interface ToolRateLimitBucketConfig {
+    maxCalls?: number;
+    windowSeconds?: number;
+}
+interface ToolRateLimitConfig {
+    enabled?: boolean;
+    aggregate?: ToolRateLimitBucketConfig;
+    tools?: Record<string, false | ToolRateLimitBucketConfig>;
+}
+interface NormalizedToolRateLimitBucket {
+    maxCalls: number;
+    windowSeconds: number;
+}
+interface NormalizedToolRateLimitConfig {
+    aggregate: NormalizedToolRateLimitBucket;
+    tools: Record<string, false | NormalizedToolRateLimitBucket>;
+}
+type ToolRateLimitOption = false | ToolRateLimitConfig;
+
+/** Library reads only DEEPSEEK_API_KEY from env; the CLI bridges config.json → env var. */
+
+/** Single trust dial: review queues edits + gates shell; auto applies + gates shell; yolo skips both gates; plan blocks every non-readonly tool (write_file / edit_file / multi_edit / run_command) at dispatch. */
+type EditMode = "review" | "auto" | "yolo" | "plan";
+type ReasoningEffort = "low" | "medium" | "high" | "max";
+type EngineeringLifecycleMode = "off" | "strict";
+type EmbeddingProvider = "ollama" | "openai-compat";
+interface OllamaEmbeddingUserConfig {
+    baseUrl?: string;
+    model?: string;
+}
+interface OpenAICompatEmbeddingUserConfig {
+    baseUrl?: string;
+    apiKey?: string;
+    model?: string;
+    extraBody?: Record<string, unknown>;
+    batchSize?: number;
+}
+interface SemanticEmbeddingUserConfig {
+    provider?: EmbeddingProvider;
+    ollama?: OllamaEmbeddingUserConfig;
+    openaiCompat?: OpenAICompatEmbeddingUserConfig;
+}
+interface McpServerConfig {
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    transport?: "stdio" | "sse" | "streamable-http";
+    /** Claude `.mcp.json` alias for `transport`; `"http"` is treated as `"streamable-http"`. */
+    type?: "stdio" | "sse" | "streamable-http" | "http";
+    url?: string;
+    headers?: Record<string, string>;
+    disabled?: boolean;
+}
+interface QQBotConfig {
+    appId?: string;
+    appSecret?: string;
+    sandbox?: boolean;
+    enabled?: boolean;
+    ownerOpenId?: string;
+    allowlist?: string[];
+}
+interface PricingOverride {
+    inputCacheHit?: number;
+    inputCacheMiss?: number;
+    output?: number;
+}
+interface RateLimitConfig {
+    /** Client-side self-throttle in requests/minute — paces outbound chat calls with a min-interval timer. NOT a DeepSeek-enforced limit: DeepSeek's actual cap is concurrency, not RPM (500 for v4-pro, 2500 for v4-flash, account-wide), surfaced as HTTP 429. Set this only to be a polite neighbor on shared infra; single-user CLI rarely needs it. */
+    rpm?: number;
+}
+interface ProxyConfig {
+    /** Skip proxy detection entirely — equivalent to launching with `--no-proxy`. */
+    disabled?: boolean;
+    /** Additional NO_PROXY patterns (curl syntax). Additive on top of env NO_PROXY and the default DeepSeek-bypass whitelist. */
+    noProxy?: string[];
+    /** When false, route api.deepseek.com / *.deepseek.com through the proxy too (issue #1497 — corporate firewalls that block direct egress). Default true preserves the clash/v2ray US-exit-IP 403 fix. Env `REASONIX_PROXY_DEEPSEEK_DIRECT` overrides. */
+    bypassDeepSeekDirect?: boolean;
+}
+interface ReasonixConfig {
+    apiKey?: string;
+    baseUrl?: string;
+    lang?: LanguageCode;
+    /** Persisted DeepSeek model id — `/model <id>` and the dashboard model picker write through this. */
+    model?: string;
+    editMode?: EditMode;
+    editModeHintShown?: boolean;
+    mouseClipboardHintShown?: boolean;
+    /** When false, skip the boot splash animation and show the main UI immediately. Default true. */
+    banner?: boolean;
+    reasoningEffort?: ReasoningEffort;
+    /** Default workspace root for the desktop client. CLI uses cwd. */
+    workspaceDir?: string;
+    /** Last N workspace paths the desktop client has opened, most recent first. */
+    recentWorkspaces?: string[];
+    /** Desktop only — open tabs in tab order, each with its workspace dir, loaded session and focus, persisted so restart restores every tab and its conversation (issues #933, #1244). Empty/absent → boot with a single default tab. */
+    desktopOpenTabs?: DesktopOpenTab[];
+    /** Desktop only — `openWith` value for clicking file links. Empty/undefined = OS default app. Examples: "code", "cursor", "C:\\path\\to\\editor.exe". */
+    editor?: string;
+    theme?: ThemeName | "auto";
+    /** Stored as `--mcp`-format strings so one parser handles both flag and config. */
+    mcp?: string[];
+    /** Names of servers in `mcp` to skip on bridge — see `/mcp disable <name>`. */
+    mcpDisabled?: string[];
+    /** Env overlay per MCP server name (matches the `name=` prefix of the spec). Stdio transports merge this over process.env; SSE/HTTP ignore it. */
+    mcpEnv?: Record<string, Record<string, string>>;
+    /** Canonical MCP server configuration — merges with and overrides legacy `mcp`/`mcpEnv`/`mcpDisabled`. */
+    mcpServers?: Record<string, McpServerConfig>;
+    session?: string | null;
+    setupCompleted?: boolean;
+    search?: boolean;
+    /** Web search engine backend: "bing" (default, scrapes cn.bing.com), "searxng" (self-hosted SearXNG), "metaso" (Metaso API), "tavily" (LLM-friendly API, free tier), "perplexity" (Perplexity AI), or "exa" (Exa API). */
+    webSearchEngine?: "bing" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
+    /** Base URL for SearXNG instance (default http://localhost:8080). */
+    webSearchEndpoint?: string;
+    /** Metaso API key. Falls back to METASO_API_KEY env var. */
+    metasoApiKey?: string;
+    /** Tavily API key. Falls back to TAVILY_API_KEY env var. No baked-in default — free tier is 1000/mo per account, sharing would burn out. */
+    tavilyApiKey?: string;
+    /** Perplexity API key. Falls back to PERPLEXITY_API_KEY env var. Get one at https://perplexity.ai/settings/api */
+    perplexityApiKey?: string;
+    /** Exa API key. Falls back to EXA_API_KEY env var. Free 1000/mo signup at https://exa.ai */
+    exaApiKey?: string;
+    /** TUI mouse-wheel scrolling via SGR mouse tracking. Default true. Set false to fall back to native terminal drag-select for copy (then wheel is terminal-dependent — most terminals translate wheel→arrow in alt-screen, some don't). */
+    mouseTracking?: boolean;
+    /** Rows scrolled per single SGR mouse-wheel report. Default 1 — most terminals emit 2-5 reports per physical notch, so 1 already produces 2-5 rows per notch (#1419). Bump to 3-5 only if your terminal emits one report per notch and scrolling feels slow (#1494). Clamped to [1, 10]. */
+    mouseWheelRows?: number;
+    dashboard?: {
+        /** Whether the embedded dashboard auto-starts on launch. Default true. Set false to disable without passing --no-dashboard each time. */
+        enabled?: boolean;
+        /** Pin the embedded dashboard to a fixed port — required for stable SSH tunnels. 0/absent → ephemeral. */
+        port?: number;
+        /** Bind address (#968). Defaults to 127.0.0.1 (loopback only). Set to 0.0.0.0 / :: / a LAN IP to expose to other devices; the URL token is then the only auth, so keep it secret. */
+        host?: string;
+        /** Stable URL token (#968). If unset, a fresh token is minted each boot. Min 16 chars enforced at load time. */
+        token?: string;
+    };
+    /** Thread-area visibility toggles. */
+    thread?: {
+        /** When false, suppresses the quiet inline dividers for fold / abort / rate-limit
+         *  warnings (severity="high" from the kernel). Default true. */
+        showSystemEvents?: boolean;
+    };
+    /** Per-field visibility toggles for the bottom status row. All default to true (visible). */
+    statusBar?: {
+        showBalance?: boolean;
+        showSessionCost?: boolean;
+        showTurnCost?: boolean;
+        showCacheHit?: boolean;
+        showCtxUsage?: boolean;
+        showVersion?: boolean;
+        showFeedbackHint?: boolean;
+    };
+    projects?: {
+        [absoluteRootDir: string]: {
+            shellAllowed?: string[];
+            /** Project-scoped hooks are arbitrary shell commands; load only after explicit trust. */
+            hooksTrusted?: boolean;
+            /** Absolute directory prefixes the user pre-approved for outside-sandbox file access (#684). */
+            pathAllowed?: string[];
+        };
+    };
+    /** Issue #259 — user-configurable sensitive-path prefixes and filename patterns.
+     *  Commands touching these paths are demoted to the confirm gate even when allowlisted. */
+    sensitivePaths?: {
+        /** Path prefixes (tilde-relative or absolute) that trigger confirmation. */
+        prefixes?: string[];
+        /** Glob-style filename patterns (matched against basename, case-insensitive). */
+        patterns?: string[];
+    };
+    index?: IndexUserConfig;
+    semantic?: SemanticEmbeddingUserConfig;
+    skills?: {
+        paths?: string[];
+    };
+    /** Per-skill model override for `runAs: subagent` skills, keyed by skill name. Empty / missing entry → spawn site's default. */
+    subagentModels?: Record<string, "flash" | "pro">;
+    /** Enable the `java_source` tool for finding and decompiling Java class source. Default off. */
+    javaSource?: boolean;
+    /** User-declared extensions to the built-in memory types (#709). Unknown types round-trip even without a declaration; declaring one lets you attach a default priority + lifecycle. */
+    memory?: {
+        customTypes?: CustomMemoryTypeConfig[];
+    };
+    pricingOverride?: Record<string, PricingOverride>;
+    /** Per-app proxy override. Layered on top of HTTPS_PROXY / NO_PROXY env vars + the default DeepSeek-bypass whitelist. */
+    proxy?: ProxyConfig;
+    rateLimit?: RateLimitConfig;
+    toolRateLimit?: ToolRateLimitConfig;
+    /** Host-enforced engineering lifecycle. Defaults to off so opt-outs pay zero prefix cost. */
+    engineeringLifecycle?: {
+        mode?: EngineeringLifecycleMode;
+    };
+    filesystem?: {
+        /** read_file flips to outline mode for files above this. Default 64 KiB — keeps the cache prefix slim while covering ~99% of source files. Raise to 524288 (512 KiB) for the pre-0.46.0 "trust the cache" behavior. */
+        outlineThresholdBytes?: number;
+    };
+    /** QQ Bot configuration */
+    qq?: QQBotConfig;
+}
+interface CustomMemoryTypeConfig {
+    name: string;
+    description?: string;
+    priority?: "low" | "medium" | "high";
+    expires?: "project_end";
+}
+declare function loadMetasoApiKey(path?: string): string | undefined;
+/** Perplexity API key — env > config > undefined. Get one at https://perplexity.ai/settings/api */
+declare function loadPerplexityApiKey(path?: string): string | undefined;
+/** Exa API key — env > config > undefined. Free 1000/mo signup at https://exa.ai */
+declare function loadExaApiKey(path?: string): string | undefined;
+declare function defaultConfigPath(): string;
+declare function readConfig(path?: string): ReasonixConfig;
+declare function writeConfig(cfg: ReasonixConfig, path?: string): void;
+declare function loadApiKey(path?: string): string | undefined;
+declare function loadBaseUrl(path?: string): string | undefined;
+declare function saveBaseUrl(url: string, path?: string): void;
+declare function saveApiKey(key: string, path?: string): void;
+/** Desktop only — one open tab's restorable state. */
+interface DesktopOpenTab {
+    dir: string;
+    /** Session the tab had loaded; reopened on boot if its jsonl still exists. */
+    session?: string;
+    /** Whether this was the focused tab. */
+    active?: boolean;
+}
+/** Self-hosted DeepSeek-compatible endpoints may issue any token shape, so we only typo-guard here — the real auth check is the first API call against `baseUrl`. */
+declare function isPlausibleKey(key: string): boolean;
+/** Mask a key for display: `sk-abcd...wxyz`. */
+declare function redactKey(key: string): string;
+
 interface JSONSchema {
     type?: string;
     properties?: Record<string, JSONSchema>;
@@ -80,7 +349,7 @@ interface ChatRequestOptions {
         type: "json_object" | "text";
     };
     thinking?: "enabled" | "disabled";
-    reasoningEffort?: "high" | "max";
+    reasoningEffort?: ReasoningEffort;
 }
 
 declare class Usage {
@@ -556,6 +825,7 @@ declare class SessionStats {
     private _carryoverTurns;
     private _carryoverCacheHit;
     private _carryoverCacheMiss;
+    private _carryoverCompletion;
     /** Last turn's promptTokens before exit — surfaced via summary() until the next live turn lands. */
     private _carryoverLastPromptTokens;
     /** Seed totals from a resumed session's persisted meta — only call once at construction. */
@@ -564,10 +834,20 @@ declare class SessionStats {
         turnCount?: number;
         cacheHitTokens?: number;
         cacheMissTokens?: number;
+        totalCompletionTokens?: number;
         lastPromptTokens?: number;
     }): void;
+    /** Cumulative cache hit tokens across carryover + current turns. */
+    get cumulativeCacheHitTokens(): number;
+    /** Cumulative cache miss tokens across carryover + current turns. */
+    get cumulativeCacheMissTokens(): number;
+    /** Cumulative completion (output) tokens across carryover + current turns. */
+    get cumulativeCompletionTokens(): number;
     reset(): void;
     record(turn: number, model: string, usage: Usage): TurnStats;
+    /** Drop oldest turns beyond MAX_TURNS, folding their costs into carryover so
+     *  session totals remain accurate even after trimming. */
+    private trimOldTurns;
     get totalCost(): number;
     get totalClaudeEquivalent(): number;
     get savingsVsClaude(): number;
@@ -586,10 +866,15 @@ type EventRole = "assistant_delta" | "assistant_final"
  | "status"
 /** Mid-turn steer injected as queued user guidance without aborting the current turn. */
  | "steer";
+/** "low" = chatty / self-correcting / counter — Desktop+Dashboard filter these out by default.
+ *  Undefined / "high" = real event the user should see (compaction, abort, budget, rate-limit, etc.).
+ *  TUI ignores this and renders every warning. */
+type EventSeverity = "low" | "high";
 interface LoopEvent {
     turn: number;
     role: EventRole;
     content: string;
+    severity?: EventSeverity;
     reasoningDelta?: string;
     toolName?: string;
     /** Raw args JSON — needed by `reasonix diff` to explain why a tool was called. */
@@ -636,42 +921,22 @@ declare class ImmutablePrefix {
     verifyFingerprint(): string;
     private computeFingerprint;
 }
-declare class AppendOnlyLog {
-    private _entries;
-    append(message: ChatMessage): void;
-    extend(messages: ChatMessage[]): void;
-    /** The one append-only-breaking path — reserved for `/compact` + recovery. Use `append()` otherwise. */
-    compactInPlace(replacement: ChatMessage[]): void;
-    get entries(): readonly ChatMessage[];
-    toMessages(): ChatMessage[];
-    get length(): number;
-}
-declare class VolatileScratch {
-    reasoning: string | null;
-    planState: Record<string, unknown> | null;
-    notes: string[];
-    reset(): void;
-}
-
-/** Sliding-window limits for per-session tool dispatch, with aggregate and per-tool buckets. */
-interface ToolRateLimitBucketConfig {
-    maxCalls?: number;
-    windowSeconds?: number;
-}
-interface ToolRateLimitConfig {
-    enabled?: boolean;
-    aggregate?: ToolRateLimitBucketConfig;
-    tools?: Record<string, false | ToolRateLimitBucketConfig>;
-}
-interface NormalizedToolRateLimitBucket {
-    maxCalls: number;
-    windowSeconds: number;
-}
-interface NormalizedToolRateLimitConfig {
-    aggregate: NormalizedToolRateLimitBucket;
-    tools: Record<string, false | NormalizedToolRateLimitBucket>;
+declare class AppendOnlyLog {
+    private _entries;
+    append(message: ChatMessage): void;
+    extend(messages: ChatMessage[]): void;
+    /** The one append-only-breaking path — reserved for `/compact` + recovery. Use `append()` otherwise. */
+    compactInPlace(replacement: ChatMessage[]): void;
+    get entries(): readonly ChatMessage[];
+    toMessages(): ChatMessage[];
+    get length(): number;
+}
+declare class VolatileScratch {
+    reasoning: string | null;
+    planState: Record<string, unknown> | null;
+    notes: string[];
+    reset(): void;
 }
-type ToolRateLimitOption = false | ToolRateLimitConfig;
 
 /** Tracks files the model has had byte-exact visibility into this session. `edit_file` and `multi_edit` consult it before mutating, so the SEARCH text matches the on-disk bytes the model actually saw — not what it guessed. */
 declare class ReadTracker {
@@ -778,8 +1043,7 @@ interface CacheFirstLoopOptions {
     tools?: ToolRegistry;
     model?: string;
     stream?: boolean;
-    reasoningEffort?: "high" | "max";
-    autoEscalate?: boolean;
+    reasoningEffort?: ReasoningEffort;
     /** Soft USD cap — warns at 80%, refuses next turn at 100%. Opt-in (default no cap). */
     budgetUsd?: number;
     session?: string;
@@ -796,9 +1060,11 @@ interface ReconfigurableOptions {
     model?: string;
     stream?: boolean;
     /** V4 thinking mode only; deepseek-chat ignores. */
-    reasoningEffort?: "high" | "max";
-    /** `false` pins to `model` — disables the model-marker scavenge that flips flash→pro. */
-    autoEscalate?: boolean;
+    reasoningEffort?: ReasoningEffort;
+}
+interface LoopAbortOptions {
+    /** Explicit user interrupts can discard the unfinished turn so the next prompt starts clean. */
+    discardCurrentTurn?: boolean;
 }
 declare class CacheFirstLoop {
     readonly client: DeepSeekClient;
@@ -812,8 +1078,7 @@ declare class CacheFirstLoop {
     readonly readTracker: ReadTracker;
     model: string;
     stream: boolean;
-    reasoningEffort: "high" | "max";
-    autoEscalate: boolean;
+    reasoningEffort: ReasoningEffort;
     budgetUsd: number | null;
     /** One-shot 80% warning latch — cleared by setBudget so a bump re-arms at the new boundary. */
     private _budgetWarned;
@@ -829,6 +1094,7 @@ declare class CacheFirstLoop {
     private _streamPreference;
     /** Threaded through HTTP + every tool dispatch so Esc cancels in-flight work, not after. */
     private _turnAbort;
+    private _discardAbortRequested;
     /** Authoritative running-id set — UI cards consult this instead of trusting end-event delivery. Insert at dispatch entry, delete in finally. */
     private readonly _inflight;
     /** Typeahead steer messages set by the UI; step() consumes one at each iter boundary. */
@@ -840,8 +1106,6 @@ declare class CacheFirstLoop {
     steer(text: string | null): void;
     /** True when a steer was consumed this turn (UI gate to avoid double-submit). */
     get steerConsumed(): boolean;
-    private _proArmedForNextTurn;
-    private _escalateThisTurn;
     private _turnSelfCorrected;
     private _foldedThisTurn;
     private context;
@@ -879,17 +1143,8 @@ declare class CacheFirstLoop {
     configure(opts: ReconfigurableOptions): void;
     /** `null` disables the cap; any change re-arms the 80% warning. */
     setBudget(usd: number | null): void;
-    /** Single-turn upgrade consumed at next step() — distinct from `/preset max` (persistent). */
-    armProForNextTurn(): void;
-    /** Cancel `/pro` arming before the next turn starts. */
-    disarmPro(): void;
-    /** UI surface — true while `/pro` is queued but hasn't fired yet. */
-    get proArmed(): boolean;
-    /** UI surface — true while the current turn is running on pro (armed or auto-escalated). */
-    get escalatedThisTurn(): boolean;
-    /** UI surface — model id of the call about to run (or running) right now, including escalation. */
+    /** UI surface — model id of the call about to run (or running) right now. */
     get currentCallModel(): string;
-    private modelForCurrentCall;
     /** A call counts as mutating when its definition reports `readOnly !== true` and any dynamic `readOnlyCheck` doesn't override that for these args. */
     private isMutating;
     private runOneToolCall;
@@ -898,7 +1153,9 @@ declare class CacheFirstLoop {
     private _inflightCounter;
     private buildMessages;
     private healActiveLogBeforeSend;
-    abort(): void;
+    abort(opts?: LoopAbortOptions): void;
+    private resetAbortState;
+    private discardLogFrom;
     /** Drop the last user message + everything after; caller re-sends. Persists to session file. */
     retryLastUser(): string | null;
     /** Rewind to the N-th user turn (0-indexed). Drops that turn + everything after. */
@@ -1059,248 +1316,6 @@ declare function memoryEnabled(): boolean;
 /** Deterministic — same memory file always yields the same prefix hash. */
 declare function applyProjectMemory(basePrompt: string, rootDir: string): string;
 
-type ThemeName = "default" | "dark" | "light" | "tokyo-night" | "github-dark" | "github-light" | "high-contrast";
-
-type LanguageCode = "EN" | "zh-CN";
-
-/** Shared exclude defaults + resolver — chunker, directory_tree, and dashboard read from here. */
-interface IndexUserConfig {
-    excludeDirs?: string[];
-    excludeFiles?: string[];
-    excludeExts?: string[];
-    excludePatterns?: string[];
-    respectGitignore?: boolean;
-    maxFileBytes?: number;
-}
-
-/** Plain http:// stays HTTP+SSE for back-compat; Streamable HTTP is opt-in via the `streamable+` URL prefix. */
-interface StdioMcpSpec {
-    transport: "stdio";
-    /** Namespace prefix applied to each registered tool, or null if anonymous. */
-    name: string | null;
-    /** Argv[0]. */
-    command: string;
-    /** Remaining argv. */
-    args: string[];
-}
-interface SseMcpSpec {
-    transport: "sse";
-    name: string | null;
-    /** Fully qualified SSE endpoint URL. */
-    url: string;
-}
-interface StreamableHttpMcpSpec {
-    transport: "streamable-http";
-    name: string | null;
-    /** Fully qualified Streamable HTTP endpoint URL (no `streamable+` prefix). */
-    url: string;
-}
-type McpSpec = StdioMcpSpec | SseMcpSpec | StreamableHttpMcpSpec;
-declare function parseMcpSpec(input: string): McpSpec;
-
-/** Library reads only DEEPSEEK_API_KEY from env; the CLI bridges config.json → env var. */
-
-/** Legacy `fast|smart|max` kept for back-compat with existing config.json files. */
-type PresetName = "auto" | "flash" | "pro" | "fast" | "smart" | "max";
-/** Single trust dial: review queues edits + gates shell; auto applies + gates shell; yolo skips both gates. */
-type EditMode = "review" | "auto" | "yolo";
-type ReasoningEffort = "high" | "max";
-type EngineeringLifecycleMode = "off" | "strict";
-type EmbeddingProvider = "ollama" | "openai-compat";
-interface OllamaEmbeddingUserConfig {
-    baseUrl?: string;
-    model?: string;
-}
-interface OpenAICompatEmbeddingUserConfig {
-    baseUrl?: string;
-    apiKey?: string;
-    model?: string;
-    extraBody?: Record<string, unknown>;
-    batchSize?: number;
-}
-interface SemanticEmbeddingUserConfig {
-    provider?: EmbeddingProvider;
-    ollama?: OllamaEmbeddingUserConfig;
-    openaiCompat?: OpenAICompatEmbeddingUserConfig;
-}
-interface McpServerConfig {
-    command?: string;
-    args?: string[];
-    env?: Record<string, string>;
-    transport?: "stdio" | "sse" | "streamable-http";
-    /** Claude `.mcp.json` alias for `transport`; `"http"` is treated as `"streamable-http"`. */
-    type?: "stdio" | "sse" | "streamable-http" | "http";
-    url?: string;
-    headers?: Record<string, string>;
-    disabled?: boolean;
-}
-interface QQBotConfig {
-    appId?: string;
-    appSecret?: string;
-    sandbox?: boolean;
-    enabled?: boolean;
-    ownerOpenId?: string;
-    allowlist?: string[];
-}
-interface PricingOverride {
-    inputCacheHit?: number;
-    inputCacheMiss?: number;
-    output?: number;
-}
-interface RateLimitConfig {
-    /** Client-side self-throttle in requests/minute — paces outbound chat calls with a min-interval timer. NOT a DeepSeek-enforced limit: DeepSeek's actual cap is concurrency, not RPM (500 for v4-pro, 2500 for v4-flash, account-wide), surfaced as HTTP 429. Set this only to be a polite neighbor on shared infra; single-user CLI rarely needs it. */
-    rpm?: number;
-}
-interface ProxyConfig {
-    /** Skip proxy detection entirely — equivalent to launching with `--no-proxy`. */
-    disabled?: boolean;
-    /** Additional NO_PROXY patterns (curl syntax). Additive on top of env NO_PROXY and the default DeepSeek-bypass whitelist. */
-    noProxy?: string[];
-    /** When false, route api.deepseek.com / *.deepseek.com through the proxy too (issue #1497 — corporate firewalls that block direct egress). Default true preserves the clash/v2ray US-exit-IP 403 fix. Env `REASONIX_PROXY_DEEPSEEK_DIRECT` overrides. */
-    bypassDeepSeekDirect?: boolean;
-}
-interface ReasonixConfig {
-    apiKey?: string;
-    baseUrl?: string;
-    lang?: LanguageCode;
-    preset?: PresetName;
-    editMode?: EditMode;
-    editModeHintShown?: boolean;
-    mouseClipboardHintShown?: boolean;
-    /** When false, skip the boot splash animation and show the main UI immediately. Default true. */
-    banner?: boolean;
-    reasoningEffort?: ReasoningEffort;
-    /** Default workspace root for the desktop client. CLI uses cwd. */
-    workspaceDir?: string;
-    /** Last N workspace paths the desktop client has opened, most recent first. */
-    recentWorkspaces?: string[];
-    /** Desktop only — open tabs in tab order, each with its workspace dir, loaded session and focus, persisted so restart restores every tab and its conversation (issues #933, #1244). Empty/absent → boot with a single default tab. */
-    desktopOpenTabs?: DesktopOpenTab[];
-    /** Desktop only — `openWith` value for clicking file links. Empty/undefined = OS default app. Examples: "code", "cursor", "C:\\path\\to\\editor.exe". */
-    editor?: string;
-    theme?: ThemeName | "auto";
-    /** Stored as `--mcp`-format strings so one parser handles both flag and config. */
-    mcp?: string[];
-    /** Names of servers in `mcp` to skip on bridge — see `/mcp disable <name>`. */
-    mcpDisabled?: string[];
-    /** Env overlay per MCP server name (matches the `name=` prefix of the spec). Stdio transports merge this over process.env; SSE/HTTP ignore it. */
-    mcpEnv?: Record<string, Record<string, string>>;
-    /** Canonical MCP server configuration — merges with and overrides legacy `mcp`/`mcpEnv`/`mcpDisabled`. */
-    mcpServers?: Record<string, McpServerConfig>;
-    session?: string | null;
-    setupCompleted?: boolean;
-    search?: boolean;
-    /** Web search engine backend: "bing" (default, scrapes cn.bing.com), "searxng" (self-hosted SearXNG), "metaso" (Metaso API), "tavily" (LLM-friendly API, free tier), "perplexity" (Perplexity AI), or "exa" (Exa API). */
-    webSearchEngine?: "bing" | "searxng" | "metaso" | "tavily" | "perplexity" | "exa";
-    /** Base URL for SearXNG instance (default http://localhost:8080). */
-    webSearchEndpoint?: string;
-    /** Metaso API key. Falls back to METASO_API_KEY env var. */
-    metasoApiKey?: string;
-    /** Tavily API key. Falls back to TAVILY_API_KEY env var. No baked-in default — free tier is 1000/mo per account, sharing would burn out. */
-    tavilyApiKey?: string;
-    /** Perplexity API key. Falls back to PERPLEXITY_API_KEY env var. Get one at https://perplexity.ai/settings/api */
-    perplexityApiKey?: string;
-    /** Exa API key. Falls back to EXA_API_KEY env var. Free 1000/mo signup at https://exa.ai */
-    exaApiKey?: string;
-    /** TUI mouse-wheel scrolling via SGR mouse tracking. Default true. Set false to fall back to native terminal drag-select for copy (then wheel is terminal-dependent — most terminals translate wheel→arrow in alt-screen, some don't). */
-    mouseTracking?: boolean;
-    /** Rows scrolled per single SGR mouse-wheel report. Default 1 — most terminals emit 2-5 reports per physical notch, so 1 already produces 2-5 rows per notch (#1419). Bump to 3-5 only if your terminal emits one report per notch and scrolling feels slow (#1494). Clamped to [1, 10]. */
-    mouseWheelRows?: number;
-    dashboard?: {
-        /** Pin the embedded dashboard to a fixed port — required for stable SSH tunnels. 0/absent → ephemeral. */
-        port?: number;
-        /** Bind address (#968). Defaults to 127.0.0.1 (loopback only). Set to 0.0.0.0 / :: / a LAN IP to expose to other devices; the URL token is then the only auth, so keep it secret. */
-        host?: string;
-        /** Stable URL token (#968). If unset, a fresh token is minted each boot. Min 16 chars enforced at load time. */
-        token?: string;
-    };
-    /** Per-field visibility toggles for the bottom status row. All default to true (visible). */
-    statusBar?: {
-        showBalance?: boolean;
-        showSessionCost?: boolean;
-        showTurnCost?: boolean;
-        showCacheHit?: boolean;
-        showCtxUsage?: boolean;
-        showVersion?: boolean;
-        showFeedbackHint?: boolean;
-    };
-    projects?: {
-        [absoluteRootDir: string]: {
-            shellAllowed?: string[];
-            /** Project-scoped hooks are arbitrary shell commands; load only after explicit trust. */
-            hooksTrusted?: boolean;
-            /** Absolute directory prefixes the user pre-approved for outside-sandbox file access (#684). */
-            pathAllowed?: string[];
-        };
-    };
-    /** Issue #259 — user-configurable sensitive-path prefixes and filename patterns.
-     *  Commands touching these paths are demoted to the confirm gate even when allowlisted. */
-    sensitivePaths?: {
-        /** Path prefixes (tilde-relative or absolute) that trigger confirmation. */
-        prefixes?: string[];
-        /** Glob-style filename patterns (matched against basename, case-insensitive). */
-        patterns?: string[];
-    };
-    index?: IndexUserConfig;
-    semantic?: SemanticEmbeddingUserConfig;
-    skills?: {
-        paths?: string[];
-    };
-    /** Enable the `java_source` tool for finding and decompiling Java class source. Default off. */
-    javaSource?: boolean;
-    /** User-declared extensions to the built-in memory types (#709). Unknown types round-trip even without a declaration; declaring one lets you attach a default priority + lifecycle. */
-    memory?: {
-        customTypes?: CustomMemoryTypeConfig[];
-    };
-    pricingOverride?: Record<string, PricingOverride>;
-    /** Per-app proxy override. Layered on top of HTTPS_PROXY / NO_PROXY env vars + the default DeepSeek-bypass whitelist. */
-    proxy?: ProxyConfig;
-    rateLimit?: RateLimitConfig;
-    toolRateLimit?: ToolRateLimitConfig;
-    /** Host-enforced engineering lifecycle. Defaults to off so opt-outs pay zero prefix cost. */
-    engineeringLifecycle?: {
-        mode?: EngineeringLifecycleMode;
-    };
-    filesystem?: {
-        /** read_file flips to outline mode for files above this. Default 64 KiB — keeps the cache prefix slim while covering ~99% of source files. Raise to 524288 (512 KiB) for the pre-0.46.0 "trust the cache" behavior. */
-        outlineThresholdBytes?: number;
-    };
-    /** QQ Bot configuration */
-    qq?: QQBotConfig;
-}
-interface CustomMemoryTypeConfig {
-    name: string;
-    description?: string;
-    priority?: "low" | "medium" | "high";
-    expires?: "project_end";
-}
-declare function loadMetasoApiKey(path?: string): string | undefined;
-/** Perplexity API key — env > config > undefined. Get one at https://perplexity.ai/settings/api */
-declare function loadPerplexityApiKey(path?: string): string | undefined;
-/** Exa API key — env > config > undefined. Free 1000/mo signup at https://exa.ai */
-declare function loadExaApiKey(path?: string): string | undefined;
-declare function defaultConfigPath(): string;
-declare function readConfig(path?: string): ReasonixConfig;
-declare function writeConfig(cfg: ReasonixConfig, path?: string): void;
-/** Resolve the API key from env var first, then the config file. */
-declare function loadApiKey(path?: string): string | undefined;
-/** env > config > undefined. Client falls back to api.deepseek.com when undefined. */
-declare function loadBaseUrl(path?: string): string | undefined;
-declare function saveBaseUrl(url: string, path?: string): void;
-declare function saveApiKey(key: string, path?: string): void;
-/** Desktop only — one open tab's restorable state. */
-interface DesktopOpenTab {
-    dir: string;
-    /** Session the tab had loaded; reopened on boot if its jsonl still exists. */
-    session?: string;
-    /** Whether this was the focused tab. */
-    active?: boolean;
-}
-/** Self-hosted DeepSeek-compatible endpoints may issue any token shape, so we only typo-guard here — the real auth check is the first API call against `baseUrl`. */
-declare function isPlausibleKey(key: string): boolean;
-/** Mask a key for display: `sk-abcd...wxyz`. */
-declare function redactKey(key: string): string;
-
 /** User-private memory pinned into the immutable prefix; distinct from committable REASONIX.md. */
 
 declare const USER_MEMORY_DIR = "memory";
@@ -1657,6 +1672,8 @@ interface JobRecord {
 declare class JobRegistry {
     private readonly jobs;
     private nextId;
+    /** Max completed jobs to retain for list_jobs / job_output lookups. */
+    private static readonly MAX_COMPLETED_JOBS;
     /** Resolves on (a) ready signal, (b) early exit, or (c) waitSec deadline — child keeps running regardless. */
     start(command: string, opts: JobStartOptions): Promise<JobStartResult>;
     read(id: number, opts?: {
@@ -1675,6 +1692,8 @@ declare class JobRegistry {
     shutdown(deadlineMs?: number): Promise<void>;
     /** Count of still-running jobs — drives the TUI status-bar indicator. */
     runningCount(): number;
+    /** Evict oldest completed jobs when the map exceeds MAX_COMPLETED_JOBS. */
+    private maybeCleanup;
 }
 interface JobReadResult {
     output: string;
@@ -1835,6 +1854,8 @@ interface SessionMeta {
     /** Cumulative cache hit / miss tokens across the session — survives resume so /status cache% isn't 0 on a fresh boot. */
     cacheHitTokens?: number;
     cacheMissTokens?: number;
+    /** Cumulative completion (output) tokens across the session. */
+    totalCompletionTokens?: number;
     /** Last turn's promptTokens — lets /status render the context bar before the next turn fires. */
     lastPromptTokens?: number;
     /** True when the session filename/summary was generated from conversation content. */
@@ -2166,12 +2187,15 @@ declare class StdioTransport implements McpTransport {
 interface McpClientOptions {
     transport: McpTransport;
     clientInfo?: McpClientInfo;
+    workspaceDir?: string;
     /** Per-request timeout. Default 60s. */
     requestTimeoutMs?: number;
 }
 declare class McpClient {
     private readonly transport;
     private readonly clientInfo;
+    private readonly workspaceDir;
+    private readonly workspaceRoot;
     private readonly requestTimeoutMs;
     private readonly pending;
     private nextId;
@@ -2192,6 +2216,7 @@ declare class McpClient {
     get protocolVersion(): string;
     /** Optional free-form instructions the server provides at handshake. */
     get serverInstructions(): string | undefined;
+    get workspaceRootDir(): string | undefined;
     /** Compliant servers reject other methods until this completes. */
     initialize(opts?: {
         signal?: AbortSignal;
@@ -2217,6 +2242,7 @@ declare class McpClient {
     private startReaderIfNeeded;
     private readLoop;
     private dispatch;
+    private handleServerRequest;
 }
 
 /** MCP HTTP+SSE transport (spec 2024-11-05) — POST endpoint URL arrives as the first `event: endpoint` SSE frame. */
@@ -2612,4 +2638,4 @@ declare function aggregateUsage(records: UsageRecord[], opts?: AggregateOptions)
 /** File-size helper for the stats header — "1.2 MB" etc. Returns "" if missing. */
 declare function formatLogSize(path?: string): string;
 
-export { AT_MENTION_PATTERN, AT_PICKER_PREFIX, type AggregateOptions, AppendOnlyLog, type AppendUsageInput, type ApplyResult, type ApplyStatus, type AtMentionExpansion, type AtMentionOptions, type BridgeOptions, type BridgeResult, CODE_SYSTEM_PROMPT, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, type ChoiceOption, ChoiceRequestedError, type ChoiceToolOptions, type CodeSystemPromptOptions, DEFAULT_AT_DIR_MAX_ENTRIES, DEFAULT_AT_MENTION_MAX_BYTES, DEFAULT_MAX_RESULT_CHARS, DEFAULT_MAX_RESULT_TOKENS, DEFAULT_PICKER_IGNORE_DIRS, DEFAULT_SPAWN_STORM_THRESHOLD, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type DirEntry, type EditBlock, type EditSnapshot, type EventRole, type FileWithStats, type FilesystemToolsOptions, type FlattenDecision, type FlattenOptions, type GetLatestVersionOptions, type GetPromptResult, HOOK_EVENTS, HOOK_SETTINGS_DIRNAME, HOOK_SETTINGS_FILENAME, type HookConfig, type HookEvent, type HookOutcome, type HookPayload, type HookReport, type HookScope, type HookSettings, type HookSpawnInput, type HookSpawnResult, type HookSpawner, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type InspectionReport, type InstallSource, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, LATEST_CACHE_TTL_MS, LATEST_FETCH_TIMEOUT_MS, type ListDirectoryOptions, type ListFilesOptions, type ListPromptsResult, type ListResourcesResult, type ListToolsResult, type LoadHookSettingsOptions, type LoopEvent, MCP_PROTOCOL_VERSION, MEMORY_INDEX_FILE, MEMORY_INDEX_MAX_CHARS, McpClient, type McpClientOptions, type McpContentBlock, type McpProgressHandler, type McpProgressInfo, type McpPrompt, type McpPromptArgument, type McpPromptMessage, type McpPromptResourceBlock, type McpResource, type McpResourceContents, type McpResourceContentsBlob, type McpResourceContentsText, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type MemoryEntry, type MemoryScope, MemoryStore, type MemoryStoreOptions, type MemoryToolsOptions, type MemoryType, type WriteInput as MemoryWriteInput, NeedsConfirmationError, PROJECT_MEMORY_FILE, PROJECT_MEMORY_FILES, PROJECT_MEMORY_MAX_CHARS, type PageContent, type ParsedAtQuery, type PickerCandidate, PlanProposedError, PlanRevisionProposedError, type PlanStep, type PlanStepRisk, type PlanToolOptions, type ProgressNotificationParams, type ProjectMemory, type RankPickerOptions, type ReadResourceResult, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type ResolvedHook, type RetryInfo, type RetryOptions, type Role, type RunCommandResult, type RunHooksOptions, type ScavengeOptions, type ScavengeResult, type SearchResult, type SectionResult, type SessionInfo, SessionStats, type SessionSummary, type ShellToolsOptions, type SpawnDistillation, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, type StepCompletion, StormBreaker, type StreamChunk, type StreamWalkOptions, type StreamableHttpMcpSpec, StreamableHttpTransport, type StreamableHttpTransportOptions, type SubagentEvent, type SubagentResult, type SubagentResultLike, type SubagentSessionSummary, type SubagentSink, SubagentTelemetry, type SubagentToolOptions, type TodoItem, type TodoStatus, type TodoToolOptions, type ToolCall, type ToolCallContext, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, USER_MEMORY_DIR, Usage, type UsageAggregate, type UsageBucket, type UsageRecord, VERSION, VolatileScratch, type WebFetchOptions, type WebSearchOptions, type WebToolsOptions, aggregateUsage, analyzeSchema, appendSessionMessage, appendUsage, applyEditBlock, applyEditBlocks, applyMemoryStack, applyProjectMemory, applyUserMemory, bridgeMcpTools, bucketCacheHitRatio, bucketSavingsFraction, claudeEquivalentCost, codeSystemPrompt, compareVersions, computeReplayStats, computeSpawnDistillation, costUsd, countSpawnStorms, decideOutcome, defaultConfigPath, defaultUsageLogPath, deleteSession, detectAtPicker, detectInstallSource, detectNpmInstallPrefix, detectShellOperator, diffTranscripts, expandAtMentions, fetchWithRetry, findProjectMemoryPath, fixToolCallPairing, flattenMcpResult, flattenSchema, forkRegistryExcluding, formatCommandResult, formatHookOutcomeMessage, formatLogSize, formatLoopError, formatSearchResults, getLatestVersion, globalSettingsPath, healLoadedMessages, healLoadedMessagesByTokens, htmlToText, injectPowerShellUtf8, inputCostUsd, inspectMcpServer, isAllowed, isJsonRpcError, isNpxInstall, isPlausibleKey, listDirectory, listFilesSync, listFilesWithStatsAsync, listFilesWithStatsSync, listSessions, loadApiKey, loadBaseUrl, loadDotenv, loadExaApiKey, loadHooks, loadMetasoApiKey, loadPerplexityApiKey, loadSessionMessages, matchesTool, memoryEnabled, nestArguments, openTranscriptFile, outputCostUsd, parseAtQuery, parseBingResults, parseEditBlocks, parseMcpSpec, parseSearxngHtmlResults, parseTranscript, prepareSpawn, projectHash, projectSettingsPath, quoteForCmdExe, rankPickerCandidates, readConfig, readProjectMemory, readTranscript, readUsageLog, recordFromLoopEvent, redactKey, registerChoiceTool, registerFilesystemTools, registerMemoryTools, registerPlanTool, registerShellTools, registerSubagentTool, registerTodoTool, registerWebTools, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, resolveExecutable, resolveProjectMemoryWritePath, restoreSnapshots, runCommand, runHooks, sanitizeMemoryName, sanitizeName as sanitizeSessionName, saveApiKey, saveBaseUrl, scavengeToolCalls, sessionPath, sessionsDir, similarity, snapshotBeforeEdits, stripHallucinatedToolMarkup, summarizeSubagentSession, tokenizeCommand, truncateForModel, truncateForModelByTokens, walkFilesStream, webFetch, webSearch, withUtf8Codepage, writeConfig, writeMeta, writeRecord };
+export { AT_MENTION_PATTERN, AT_PICKER_PREFIX, type AggregateOptions, AppendOnlyLog, type AppendUsageInput, type ApplyResult, type ApplyStatus, type AtMentionExpansion, type AtMentionOptions, type BridgeOptions, type BridgeResult, CODE_SYSTEM_PROMPT, CacheFirstLoop, type CacheFirstLoopOptions, type CallToolResult, type ChatMessage, type ChatResponse, type ChoiceOption, ChoiceRequestedError, type ChoiceToolOptions, type CodeSystemPromptOptions, DEFAULT_AT_DIR_MAX_ENTRIES, DEFAULT_AT_MENTION_MAX_BYTES, DEFAULT_MAX_RESULT_CHARS, DEFAULT_MAX_RESULT_TOKENS, DEFAULT_PICKER_IGNORE_DIRS, DEFAULT_SPAWN_STORM_THRESHOLD, DeepSeekClient, type DeepSeekClientOptions, type RenderOptions as DiffRenderOptions, type DiffReport, type DiffSide, type DirEntry, type EditBlock, type EditSnapshot, type EventRole, type FileWithStats, type FilesystemToolsOptions, type FlattenDecision, type FlattenOptions, type GetLatestVersionOptions, type GetPromptResult, HOOK_EVENTS, HOOK_SETTINGS_DIRNAME, HOOK_SETTINGS_FILENAME, type HookConfig, type HookEvent, type HookOutcome, type HookPayload, type HookReport, type HookScope, type HookSettings, type HookSpawnInput, type HookSpawnResult, type HookSpawner, ImmutablePrefix, type ImmutablePrefixOptions, type InitializeResult, type InspectionReport, type InstallSource, type JSONSchema, type JsonRpcMessage, type JsonRpcRequest, type JsonRpcResponse, LATEST_CACHE_TTL_MS, LATEST_FETCH_TIMEOUT_MS, type ListDirectoryOptions, type ListFilesOptions, type ListPromptsResult, type ListResourcesResult, type ListToolsResult, type LoadHookSettingsOptions, type LoopAbortOptions, type LoopEvent, MCP_PROTOCOL_VERSION, MEMORY_INDEX_FILE, MEMORY_INDEX_MAX_CHARS, McpClient, type McpClientOptions, type McpContentBlock, type McpProgressHandler, type McpProgressInfo, type McpPrompt, type McpPromptArgument, type McpPromptMessage, type McpPromptResourceBlock, type McpResource, type McpResourceContents, type McpResourceContentsBlob, type McpResourceContentsText, type McpSpec, type McpTool, type McpToolSchema, type McpTransport, type MemoryEntry, type MemoryScope, MemoryStore, type MemoryStoreOptions, type MemoryToolsOptions, type MemoryType, type WriteInput as MemoryWriteInput, NeedsConfirmationError, PROJECT_MEMORY_FILE, PROJECT_MEMORY_FILES, PROJECT_MEMORY_MAX_CHARS, type PageContent, type ParsedAtQuery, type PickerCandidate, PlanProposedError, PlanRevisionProposedError, type PlanStep, type PlanStepRisk, type PlanToolOptions, type ProgressNotificationParams, type ProjectMemory, type RankPickerOptions, type ReadResourceResult, type ReadTranscriptResult, type ReasonixConfig, type ReconfigurableOptions, type RepairReport, type ReplayStats, type ResolvedHook, type RetryInfo, type RetryOptions, type Role, type RunCommandResult, type RunHooksOptions, type ScavengeOptions, type ScavengeResult, type SearchResult, type SectionResult, type SessionInfo, SessionStats, type SessionSummary, type ShellToolsOptions, type SpawnDistillation, type SseMcpSpec, SseTransport, type SseTransportOptions, type StdioMcpSpec, StdioTransport, type StdioTransportOptions, type StepCompletion, StormBreaker, type StreamChunk, type StreamWalkOptions, type StreamableHttpMcpSpec, StreamableHttpTransport, type StreamableHttpTransportOptions, type SubagentEvent, type SubagentResult, type SubagentResultLike, type SubagentSessionSummary, type SubagentSink, SubagentTelemetry, type SubagentToolOptions, type TodoItem, type TodoStatus, type TodoToolOptions, type ToolCall, type ToolCallContext, ToolCallRepair, type ToolCallRepairOptions, type ToolDefinition, type ToolFunctionSpec, ToolRegistry, type ToolSpec, type TranscriptMeta, type TranscriptRecord, type TruncationRepairResult, type TurnPair, type TurnStats, USER_MEMORY_DIR, Usage, type UsageAggregate, type UsageBucket, type UsageRecord, VERSION, VolatileScratch, type WebFetchOptions, type WebSearchOptions, type WebToolsOptions, aggregateUsage, analyzeSchema, appendSessionMessage, appendUsage, applyEditBlock, applyEditBlocks, applyMemoryStack, applyProjectMemory, applyUserMemory, bridgeMcpTools, bucketCacheHitRatio, bucketSavingsFraction, claudeEquivalentCost, codeSystemPrompt, compareVersions, computeReplayStats, computeSpawnDistillation, costUsd, countSpawnStorms, decideOutcome, defaultConfigPath, defaultUsageLogPath, deleteSession, detectAtPicker, detectInstallSource, detectNpmInstallPrefix, detectShellOperator, diffTranscripts, expandAtMentions, fetchWithRetry, findProjectMemoryPath, fixToolCallPairing, flattenMcpResult, flattenSchema, forkRegistryExcluding, formatCommandResult, formatHookOutcomeMessage, formatLogSize, formatLoopError, formatSearchResults, getLatestVersion, globalSettingsPath, healLoadedMessages, healLoadedMessagesByTokens, htmlToText, injectPowerShellUtf8, inputCostUsd, inspectMcpServer, isAllowed, isJsonRpcError, isNpxInstall, isPlausibleKey, listDirectory, listFilesSync, listFilesWithStatsAsync, listFilesWithStatsSync, listSessions, loadApiKey, loadBaseUrl, loadDotenv, loadExaApiKey, loadHooks, loadMetasoApiKey, loadPerplexityApiKey, loadSessionMessages, matchesTool, memoryEnabled, nestArguments, openTranscriptFile, outputCostUsd, parseAtQuery, parseBingResults, parseEditBlocks, parseMcpSpec, parseSearxngHtmlResults, parseTranscript, prepareSpawn, projectHash, projectSettingsPath, quoteForCmdExe, rankPickerCandidates, readConfig, readProjectMemory, readTranscript, readUsageLog, recordFromLoopEvent, redactKey, registerChoiceTool, registerFilesystemTools, registerMemoryTools, registerPlanTool, registerShellTools, registerSubagentTool, registerTodoTool, registerWebTools, renderMarkdown as renderDiffMarkdown, renderSummaryTable as renderDiffSummary, repairTruncatedJson, replayFromFile, resolveExecutable, resolveProjectMemoryWritePath, restoreSnapshots, runCommand, runHooks, sanitizeMemoryName, sanitizeName as sanitizeSessionName, saveApiKey, saveBaseUrl, scavengeToolCalls, sessionPath, sessionsDir, similarity, snapshotBeforeEdits, stripHallucinatedToolMarkup, summarizeSubagentSession, tokenizeCommand, truncateForModel, truncateForModelByTokens, walkFilesStream, webFetch, webSearch, withUtf8Codepage, writeConfig, writeMeta, writeRecord };