zidane 4.1.6 → 4.1.7

package/dist/tui.d.ts

@@ -1,355 +1,8 @@
-import { D as SessionRun, Et as SessionTurn, H as Provider, It as TurnUsage, Mt as ToolResultContent, O as SessionStore } from "./agent-BAoqUvwA.js";
-import { P as Preset } from "./index-B8-yNSsk.js";
-import { OAuthCredentials, OAuthProviderInterface } from "@mariozechner/pi-ai/oauth";
-import { SyntaxStyle } from "@opentui/core";
+import { F as Picked, G as ModelInfo, L as SessionMeta, R as Settings, V as ProviderAuth, _ as ChatOptions, a as Theme, d as ApprovalRequest, u as ApprovalDecision, y as ResolvedConfig, z as StreamEvent } from "./theme-BlXO6yHe.js";
 import * as _$react from "react";
-import { Dispatch, ReactNode, SetStateAction } from "react";
+import { ReactNode } from "react";
+import { SyntaxStyle } from "@opentui/core";
 
-//#region src/tui/providers.d.ts
-/**
- * Structural model metadata — compatible with pi-ai's `Model` interface but
- * not coupled to it, so hosts can pass either pi-ai-shaped objects or a
- * custom registry of their own.
- *
- * Deliberately a structural duplicate of pi-ai's `Model` rather than a
- * re-export: keeps the public API stable when pi-ai bumps shape, and lets
- * hosts implement their own registry without depending on pi-ai's types.
- *
- * Lives here (rather than `./config`) because `ProviderDescriptor.models`
- * needs it — pushing it to `config.tsx` created an import cycle.
- */
-interface ModelInfo {
-  id: string;
-  name?: string;
-  contextWindow: number;
-  maxTokens?: number;
-  reasoning?: boolean;
-  input?: readonly ('text' | 'image')[];
-  cost?: {
-    input: number;
-    output: number;
-    cacheRead?: number;
-    cacheWrite?: number;
-  };
-  provider?: string;
-}
-interface ProviderDescriptor {
-  /**
-   * Unique identifier. Used as the registry key, persisted in `state.json`
-   * as the resumed provider, and (by default) as the credential-file key.
-   */
-  key: string;
-  /** Display name shown in the TUI's provider picker and labels. */
-  label: string;
-  /**
-   * Factory that builds a fresh `Provider` instance. Called on every session
-   * activation. Some factories (e.g. zidane's built-in `anthropic`) eagerly
-   * resolve credentials at construction time and throw when none are
-   * configured — set {@link defaultModel} on the descriptor to avoid the TUI
-   * calling the factory before the user has picked + authed a provider.
-   */
-  factory: () => Provider;
-  /**
-   * Default model id to seed the picker with. When omitted, the TUI falls
-   * back to `descriptor.factory().meta.defaultModel`, which constructs the
-   * provider — fine for lazy-credential factories, but breaks for factories
-   * that throw on missing credentials before the wizard runs. Setting this
-   * eagerly lets the TUI render the auth wizard without ever instantiating
-   * the provider.
-   */
-  defaultModel?: string;
-  /**
-   * Env var checked when detecting whether the user has an API key
-   * configured for this provider. Optional — set to `undefined` when the
-   * provider only supports OAuth (or only credentials via a custom path).
-   */
-  envKey?: string;
-  /**
-   * Key under which credentials live in `credentials.json`. Defaults to
-   * `key`. The only built-in that overrides this is OpenAI Codex
-   * (`openai` → `openai-codex`) to stay compatible with the harness
-   * provider's existing lookup.
-   */
-  credentialFileKey?: string;
-  /** Placeholder shown in the wizard's API-key input. */
-  apiKeyPlaceholder?: string;
-  /**
-   * pi-ai (or compat) OAuth provider. When present, the wizard offers an
-   * OAuth option in addition to API key.
-   */
-  oauthProvider?: OAuthProviderInterface;
-  /**
-   * Optional copy appended to the wizard's "OAuth" method description.
-   * Use to communicate why a user might pick OAuth (e.g. subscription tier,
-   * org-wide SSO). Shown after `browser-based sign-in`. Skip the leading
-   * space — the wizard adds it. Example: `'Claude Pro/Max subscription'`.
-   */
-  oauthHint?: string;
-  /**
-   * pi-ai provider id used to look up models in pi-ai's built-in registry.
-   * Defaults to `key`. Only Codex differs (`openai` → `openai-codex`).
-   */
-  piProviderId?: string;
-  /**
-   * Override the model list returned for this provider's picker. When set,
-   * skips pi-ai's registry entirely. Useful for hosts maintaining their
-   * own model catalogue or for custom providers pi-ai doesn't know about.
-   */
-  models?: readonly ModelInfo[];
-}
-/** Convenience accessor — returns `credentialFileKey ?? key`. */
-declare function credKeyOf(desc: ProviderDescriptor): string;
-/** Convenience accessor — returns `piProviderId ?? key`. */
-declare function piIdOf(desc: ProviderDescriptor): string;
-declare const anthropicDescriptor: ProviderDescriptor;
-declare const openaiDescriptor: ProviderDescriptor;
-declare const openrouterDescriptor: ProviderDescriptor;
-declare const cerebrasDescriptor: ProviderDescriptor;
-/**
- * Default provider registry. Passed verbatim when `runTui` is invoked without
- * an explicit `providers` option. Hosts that want to override per-provider
- * metadata can spread this and replace specific entries:
- *
- * ```ts
- * runTui({ providers: { ...BUILTIN_PROVIDERS, anthropic: myOwnAnthropicDescriptor } })
- * ```
- */
-declare const BUILTIN_PROVIDERS: Readonly<Record<string, ProviderDescriptor>>;
-/**
- * Resolve the model list for a given provider. Honors `descriptor.models`
- * when set; otherwise queries pi-ai via `descriptor.piProviderId`. Returns
- * `[]` for descriptors with no known mapping (custom providers without a
- * model list) — callers should hide the model picker in that case.
- */
-declare function modelsForDescriptor(descriptor: ProviderDescriptor): readonly ModelInfo[];
-/**
- * Look up the model's max context window via the descriptor's model source.
- * Returns `null` when the model isn't known (custom slugs, providers without
- * a registry); callers should hide the context indicator in that case.
- */
-declare function getContextWindow(descriptor: ProviderDescriptor, modelId: string): number | null;
-//#endregion
-//#region src/tui/auth.d.ts
-/**
- * Provider identifier as known to the TUI. Built-in keys are `anthropic`,
- * `openai`, `openrouter`, `cerebras`, but hosts can register additional
- * keys via {@link ProviderDescriptor} — so the type is open.
- */
-type ProviderKey = string;
-interface AuthMethod {
-  source: 'env' | 'oauth' | 'apikey';
-  /** Human-readable detail (env var name, expiry timestamp, …). */
-  detail: string;
-}
-interface ProviderAuth {
-  key: ProviderKey;
-  label: string;
-  /** True when at least one credential source is present. */
-  available: boolean;
-  methods: AuthMethod[];
-}
-/**
- * Detect available auth for every registered provider.
- *
- * Resolution order per provider (a method appears in `methods` for each
- * layer that has a credential — the agent itself resolves them in the same
- * order via its provider factories):
- *
- *   1. `kind: 'apikey'` from `credentials.json` (injected into env at TUI launch)
- *   2. explicit env var (descriptor's `envKey`)
- *   3. `kind: 'oauth'` from `credentials.json` (or legacy `cwd/.credentials.json`)
- *
- * Pure read — never refreshes or rewrites the credentials file.
- */
-declare function detectAuth(dataDir: string, registry: Readonly<Record<string, ProviderDescriptor>>, env?: Record<string, string | undefined>): ProviderAuth[];
-//#endregion
-//#region src/tui/types.d.ts
-type Screen = 'auth' | 'sessions' | 'chat';
-/** Identifies the agent that produced a streaming event. */
-type Owner = 'parent' | string;
-interface StreamEvent {
-  kind: 'thinking' | 'tool' | 'tool-result' | 'error' | 'info' | 'separator' | 'markdown' | 'spawn-start' | 'spawn-end';
-  text: string;
-  /**
-   * For `markdown` events: true while the block is still receiving deltas.
-   * The renderer applies `md4x.heal()` and keeps OpenTUI's markdown parser in
-   * streaming mode while this is true. Flipped to false on `turn:after`.
-   */
-  streaming?: boolean;
-  /** Subagent that produced this event. Absent / 'parent' = top-level agent. */
-  childId?: string;
-  /** Nesting depth — 0 = parent, ≥ 1 = subagent (matches zidane's spawn depth). */
-  depth?: number;
-  /**
-   * Canonical tool name for `tool` / `tool-result` events. Lets the renderer
-   * filter by tool — e.g. hide the parent's `spawn` tool-result when
-   * `hideSubagentOutput` is on, since the spawn-end marker already shows the
-   * same stats. Absent for non-tool events.
-   */
-  tool?: string;
-}
-interface Picked {
-  provider: ProviderAuth;
-  model: string;
-}
-interface SessionMeta {
-  id: string;
-  title: string;
-  turnCount: number;
-  updatedAt: number;
-}
-/** Persisted, user-toggleable transcript filters and modes. */
-interface Settings {
-  showThinking: boolean;
-  showToolCalls: boolean;
-  showToolResults: boolean;
-  /**
-   * Safe mode — when enabled, every tool call requires explicit user
-   * approval unless it's covered by the project safelist (`projects.json`)
-   * or the implicit read-only allow-list. Default: on.
-   */
-  safeMode: boolean;
-  /**
-   * Hide a subagent's internal events (its streamed markdown, thinking,
-   * tool calls, and tool results) from the transcript. The `🌱` start and
-   * `✓` end markers stay visible so the user still sees that a subagent
-   * is working and when it finished. Default: on — subagent runs are
-   * usually noisy and the parent's final response already summarizes them.
-   *
-   * When off, those events are visible and wrapped in a dim bordered box
-   * for clear visual hierarchy.
-   */
-  hideSubagentOutput: boolean;
-}
-//#endregion
-//#region src/tui/store.d.ts
-declare function createTuiStore(dbPath: string): SessionStore;
-interface TuiState {
-  lastProvider?: ProviderKey;
-  lastSessionId?: string;
-  /** Per-provider last-used model id. */
-  lastModelByProvider?: Partial<Record<ProviderKey, string>>;
-  /** User-toggled transcript filters. Persisted so they outlive a launch. */
-  settings?: Partial<Settings>;
-}
-interface StateStoreApi {
-  load: () => TuiState;
-  save: (state: TuiState) => void;
-}
-declare function createStateStore(path: string): StateStoreApi;
-declare function loadState(path: string): TuiState;
-declare function saveState(path: string, state: TuiState): void;
-/**
- * Load every session and project it to the compact `SessionMeta` shape used by
- * the picker. Sorted by recency via the underlying store's `list()` contract
- * (sqlite store returns by `updated_at DESC`).
- */
-declare function listSessionMeta(store: SessionStore): Promise<SessionMeta[]>;
-/** Derive a short title from the first user message — returns null when empty. */
-declare function titleFromTurns(turns: SessionTurn[]): string | null;
-/**
- * Replay persisted turns as a viewable transcript. Mirrors the event shape
- * produced live by the agent hooks so loaded and streaming history render
- * identically — including subagent ancestry when `runs` is supplied.
- *
- * Subagent reconstruction:
- *   - Every turn carries a `runId`. We look that up in `runs` to get the
- *     run's `depth` and tag the resulting events with `{ depth, childId }`
- *     — the same shape the live `child:*` bubble hooks produce.
- *   - We synthesize `spawn-start` / `spawn-end` markers at each child-run
- *     boundary so the transcript reads the same as a live run did
- *     (`🌱 [run-id] task` … child events … `🌳 [run-id] done · tokens`).
- *   - For child runs (`depth > 0`), the user-role "task" text is suppressed
- *     because `spawn-start` already shows it.
- *
- * Without `runs` (legacy callers / tests), the function falls back to the
- * old behavior: depth-0 events with no subagent grouping.
- */
-declare function eventsFromTurns(turns: SessionTurn[], runs?: readonly SessionRun[]): StreamEvent[];
-/** Shared formatter for the `↳ name(args)` line shown on tool calls. */
-declare function toolCallPreview(name: string, input: Record<string, unknown>): string;
-/** Render tool output as plain text, whether it's a string or structured content. */
-declare function toolResultText(output: string | ToolResultContent[]): string;
-/** Effective context size of the most recent assistant turn — drives the footer indicator. */
-declare function lastContextSizeFromTurns(turns: SessionTurn[]): number;
-//#endregion
-//#region src/tui/config.d.ts
-/**
- * Provider registry — a map keyed by `descriptor.key`. Passed verbatim to the
- * TUI; there is no implicit merge with built-ins. Hosts that want the four
- * default providers spread {@link BUILTIN_PROVIDERS}; hosts that only want
- * their own pass exactly their own.
- */
-type ProviderRegistry = Readonly<Record<string, ProviderDescriptor>>;
-/**
- * Options accepted by `runTui()` and `resolveConfig()`. Every field is optional
- * — defaults boot a working chat against the built-in providers with sessions
- * stored under `~/.zidane/`.
- */
-interface TuiOptions {
-  /**
-   * Directory name used under `storageDir` for sessions + state.
-   * Default: `'.zidane'` → `~/.zidane/sessions.db` + `~/.zidane/state.json`.
-   * Pass e.g. `'.myapp'` for `~/.myapp/...`, or `'myapp'` for a visible dir.
-   */
-  prefix?: string;
-  /**
-   * Storage root. Defaults to the user's home directory. Combined with
-   * `prefix` to form the data directory.
-   */
-  storageDir?: string;
-  /**
-   * Provider registry. Each value is a {@link ProviderDescriptor} carrying
-   * label + factory + credential metadata. **No automatic merge** — hosts
-   * pass exactly what they want.
-   *
-   * - Omitted → {@link BUILTIN_PROVIDERS} (anthropic + openai + openrouter + cerebras).
-   * - `providers: BUILTIN_PROVIDERS` → same as omitted, but explicit.
-   * - `providers: { anthropic: anthropicDescriptor }` → only Anthropic.
-   * - `providers: { ...BUILTIN_PROVIDERS, mine: customDescriptor }` → built-ins + custom.
-   * - `providers: { mine: customDescriptor }` → custom-only, **no built-ins**.
-   */
-  providers?: ProviderRegistry;
-  /**
-   * Agent preset (tools, system prompt, behavior). Default: `basic`.
-   */
-  preset?: Preset;
-  /**
-   * Bring your own session store. Default: a SQLite store at
-   * `<storageDir>/<prefix>/sessions.db`.
-   */
-  store?: SessionStore;
-}
-interface ResolvedConfig {
-  prefix: string;
-  storageDir: string;
-  paths: {
-    dir: string;
-    db: string;
-    state: string;
-  };
-  providers: ProviderRegistry;
-  preset: Preset;
-  store: SessionStore;
-  stateStore: StateStoreApi;
-  /** Lookup by `ProviderKey` returning the available models for the picker. */
-  modelsFor: (key: ProviderKey) => readonly ModelInfo[];
-  initialState: TuiState;
-  initialSettings: Partial<Settings>;
-  resumeProvider: ProviderAuth | null;
-  initialPicked: Picked | null;
-}
-/** Resolve user options into a fully-bound runtime config. Pure aside from disk reads. */
-declare function resolveConfig(options?: TuiOptions): ResolvedConfig;
-declare function ConfigProvider({
-  config,
-  children
-}: {
-  config: ResolvedConfig;
-  children: ReactNode;
-}): ReactNode;
-declare function useConfig(): ResolvedConfig;
-//#endregion
 //#region src/tui/app.d.ts
 /**
  * Top-level TUI component. Accepts a fully-resolved `ResolvedConfig` and wires
@@ -402,6 +55,20 @@ declare function Transcript({
   events: StreamEvent[];
   settings: Settings;
 }): _$react.ReactNode;
+/**
+ * Per-event visibility — filters honor user toggles and the
+ * `hideSubagentOutput` setting. When subagent output is hidden:
+ *   - Child-agent events are filtered down to the `spawn-start` /
+ *     `spawn-end` markers so the user still sees "🌱 working… 🌳 done".
+ *   - The parent's `tool-result` for `spawn` is hidden too. Its body
+ *     duplicates `spawn-end`'s stats line *and* the parent's next markdown
+ *     turn ("Here's what the sub-agent found: …"). Showing it again
+ *     produced an extra `┃ [sub-agent child-1] Completed …` block that
+ *     the user just wanted gone.
+ *
+ * Exported so the visibility matrix can be unit-tested without rendering.
+ */
+declare function isVisible(event: StreamEvent, settings: Settings): boolean;
 /**
  * Resolve the top margin for an event given the one rendered just before it.
  *
@@ -422,74 +89,6 @@ declare function Transcript({
  */
 declare function marginTopFor(event: StreamEvent, previous: StreamEvent | undefined): number;
 //#endregion
-//#region src/tui/credentials.d.ts
-interface ApiKeyCredential {
-  kind: 'apikey';
-  value: string;
-}
-interface OAuthCredential {
-  kind: 'oauth';
-  access: string;
-  refresh?: string;
-  expires?: number;
-  /** Provider-specific extras (e.g. OpenAI Codex `accountId`). */
-  [extra: string]: unknown;
-}
-type ProviderCredential = ApiKeyCredential | OAuthCredential;
-/** Top-level shape of `credentials.json` — keys are credential-file keys. */
-type CredentialsFile = Record<string, ProviderCredential>;
-/**
- * Resolve the credentials file path given the resolved TUI data directory
- * (typically `~/.zidane`, i.e. `config.paths.dir`).
- *
- * Matches the convention used elsewhere in the TUI (sessions.db, state.json)
- * so a single `ZIDANE_STORAGE_DIR` override moves the entire data root.
- */
-declare function credentialsPath(dataDir: string): string;
-/**
- * Read credentials from disk.
- *
- * Returns `{}` when the file is missing or corrupt (last-ditch tolerance —
- * a hand-edit gone wrong shouldn't lock the user out of re-authing). On first
- * call with no file present, attempts a migration from `cwd/.credentials.json`
- * (the legacy location used by `bun run auth`).
- */
-declare function readCredentials(dataDir: string): CredentialsFile;
-/** Read a single provider's credential (translating via the descriptor). */
-declare function readProviderCredential(dataDir: string, descriptor: ProviderDescriptor): ProviderCredential | undefined;
-/**
- * Write credentials atomically (write-then-rename) with mode 0o600.
- *
- * Atomic on the same filesystem — readers either see the previous file or the
- * new one, never a half-written intermediate. Creates the parent dir if needed
- * (first launch on a fresh machine: `~/.zidane/` may not exist yet).
- */
-declare function writeCredentials(dataDir: string, creds: CredentialsFile): void;
-declare function setProviderCredential(dataDir: string, descriptor: ProviderDescriptor, cred: ProviderCredential): void;
-declare function removeProviderCredential(dataDir: string, descriptor: ProviderDescriptor): void;
-/**
- * Inject API-key credentials into `process.env` so the harness providers pick
- * them up via their existing env-var resolution. Called once at TUI launch
- * after the credentials file has been resolved. OAuth credentials are NOT
- * injected — those reach providers via `ZIDANE_CREDENTIALS_PATH` + the file
- * reader in `src/providers/oauth.ts`.
- *
- * Does not overwrite env vars that are already set — explicit user-provided
- * env values win over stored API keys.
- *
- * Descriptors without an `envKey` (OAuth-only providers, custom providers
- * that bypass env-var resolution) are skipped silently.
- */
-declare function applyApiKeyEnv(dataDir: string, registry: Readonly<Record<string, ProviderDescriptor>>): void;
-//#endregion
-//#region src/tui/format.d.ts
-/** Compact token formatter — 12_415 → "12.4k", 1_234_567 → "1.23M". */
-declare function fmtTokens(n: number): string;
-/** Compact relative-time formatter — "just now / 5m / 3h / 2d". */
-declare function ageString(ts: number, now?: number): string;
-/** Six-char short form of a session id for headers and lists. */
-declare function shortId(id: string): string;
-//#endregion
 //#region src/tui/modal.d.ts
 interface ModalApi {
   open: (node: ReactNode) => void;
@@ -562,134 +161,6 @@ declare function ModelPickerModal({
   onPick: (modelId: string) => void;
 }): _$react.ReactNode;
 //#endregion
-//#region src/tui/oauth.d.ts
-declare function supportsOAuth(descriptor: ProviderDescriptor): boolean;
-interface OAuthFlowOptions {
-  /** Called when the provider emits its login URL — typically right after the callback server starts. */
-  onUrl: (url: string, instructions?: string) => void;
-  /** Called when the provider needs a code entered manually (rare; only when callback server fails). */
-  onCodeRequest?: () => Promise<string>;
-  /** Called with each progress message from the OAuth flow (token exchange, etc.). */
-  onProgress?: (message: string) => void;
-  /** Abort the in-flight login (e.g. user pressed esc). */
-  signal?: AbortSignal;
-}
-/**
- * Run the OAuth login flow for a provider.
- *
- * Returns the OAuth credentials on success; caller persists them via
- * `setProviderCredential(dataDir, descriptor, { kind: 'oauth', ...credentials })`.
- * Throws when the descriptor has no `oauthProvider` configured.
- */
-declare function runOAuthLogin(descriptor: ProviderDescriptor, options: OAuthFlowOptions): Promise<OAuthCredentials>;
-//#endregion
-//#region src/tui/safe-mode.d.ts
-/**
- * Safe-mode storage + matching for the TUI.
- *
- * Lives at `<dataDir>/projects.json` (default `~/.zidane/projects.json`). Each
- * top-level key is an absolute project directory; the value carries that
- * project's persisted tool-call `safelist`.
- *
- * ```json
- * {
- *   "/Users/me/proj-a": { "safelist": ["read_file", "shell:git:*"] }
- * }
- * ```
- *
- * Two granularities for safelist entries:
- *   - **bare tool name** — `"read_file"` matches every `read_file` call.
- *   - **tool + first-arg token + wildcard** — `"shell:git:*"` matches `shell`
- *     calls whose primary string argument starts with the token `git`
- *     (followed by whitespace or end-of-string). Modelled on Claude Code's
- *     `Bash(git:*)` syntax.
- *
- * A short list of read-only tools is **implicitly safe** without being
- * persisted — see {@link IMPLICITLY_SAFE_TOOLS}.
- */
-interface ProjectEntry {
-  safelist?: string[];
-}
-type ProjectsFile = Record<string, ProjectEntry>;
-/** Resolve `projects.json`'s on-disk path given the TUI data directory. */
-declare function projectsFilePath(dataDir: string): string;
-declare function readProjects(dataDir: string): ProjectsFile;
-/** Atomic write — tmp + rename so a crash never leaves a half-file. */
-declare function writeProjects(dataDir: string, file: ProjectsFile): void;
-/**
- * Append `entry` to the safelist for `projectDir`, dedup-aware. Returns the
- * updated entry list (post-write) so callers can render it without re-reading.
- */
-declare function addToSafelist(dataDir: string, projectDir: string, entry: string): readonly string[];
-/** Read the safelist for one project. Returns `[]` for unknown projects. */
-declare function getSafelist(dataDir: string, projectDir: string): readonly string[];
-/**
- * Tools that always pass without prompting — pure file/dir reads with no
- * side effects. Users who want to gate them must disable safe-mode entirely
- * (or fork this list in their own embedding).
- */
-declare const IMPLICITLY_SAFE_TOOLS: readonly string[];
-/**
- * Test whether a `{ tool, input }` pair is covered by one safelist entry.
- *
- * Supported entry shapes:
- *   - `"<tool>"` — broad match on tool name. For `shell` this still requires
- *     a single-program command (compound forms always prompt).
- *   - `"<tool>:<token>:*"` — match when the primary arg's first token equals
- *     `<token>`. For `shell`, also requires the command to be free of
- *     metacharacters (`;`, `&&`, `||`, `|`, `$(`, backticks, `>`, `<`,
- *     newlines, subshells) — otherwise a `shell:git:*` entry would silently
- *     greenlight `git status && rm -rf /`.
- *
- * Entries that don't fit either shape are ignored (forward-compat for future
- * pattern syntax — readers shouldn't choke on entries written by a newer
- * version of the TUI).
- */
-declare function matchesSafelistEntry(entry: string, tool: string, input: Record<string, unknown>): boolean;
-/** True when a call matches ANY entry in the project's safelist (or is implicitly safe). */
-declare function isOnSafelist(entries: readonly string[], tool: string, input: Record<string, unknown>): boolean;
-/**
- * Suggest the safelist entry to write when the user picks "accept and
- * remember" for a `{ tool, input }`. Heuristic:
- *
- *   - `shell` → scope by first command token (`shell:git:*`).
- *   - anything else → bare tool name (broad).
- *
- * Returning a string ensures the UI always has a concrete entry to display
- * as the button label.
- */
-declare function suggestSafelistEntry(tool: string, input: Record<string, unknown>): string;
-//#endregion
-//#region src/tui/safe-mode-context.d.ts
-type ApprovalDecision = 'accept-once' | 'accept-safelist' | 'deny';
-interface ApprovalRequest {
-  id: string;
-  tool: string;
-  input: Record<string, unknown>;
-  resolve: (decision: ApprovalDecision) => void;
-}
-/** Function signature consumed by `tool:gate` handlers + the child-tool wrap. */
-type RequestApproval = (tool: string, input: Record<string, unknown>) => Promise<ApprovalDecision>;
-interface SafeModeActions {
-  /** Request a decision; resolves once the user picks. */
-  requestApproval: RequestApproval;
-  /** Resolve the head and shift the queue forward. */
-  resolveHead: (decision: ApprovalDecision) => void;
-  /** Resolve all pending with `deny`. Used on abort / hard exit. */
-  denyAll: () => void;
-}
-/**
- * Owns the queue + actions. Splits the value across two contexts so a queue
- * change doesn't invalidate every callback memo that closes over the actions.
- */
-declare function SafeModeProvider({
-  children
-}: {
-  children: ReactNode;
-}): ReactNode;
-declare function useSafeModeQueue(): readonly ApprovalRequest[];
-declare function useSafeModeActions(): SafeModeActions;
-//#endregion
 //#region src/tui/screens.d.ts
 declare function AuthScreen({
   onPick
@@ -725,22 +196,7 @@ declare function ChatScreen({
   onApproval: (decision: ApprovalDecision) => void;
 }): ReactNode;
 //#endregion
-//#region src/tui/settings.d.ts
-declare const DEFAULT_SETTINGS: Settings;
-interface SettingsContextValue {
-  settings: Settings;
-  toggle: (key: keyof Settings) => void;
-}
-declare function SettingsProvider({
-  initial,
-  onChange,
-  children
-}: {
-  initial: Settings;
-  onChange?: (settings: Settings) => void;
-  children: ReactNode;
-}): ReactNode;
-declare function useSettings(): SettingsContextValue;
+//#region src/tui/settings-modal.d.ts
 interface SettingsActions {
   /**
    * Re-open the auth screen so the user can switch providers or run the
@@ -753,83 +209,24 @@ declare function SettingsModal({
   actions
 }?: {
   actions?: SettingsActions;
-}): ReactNode;
-//#endregion
-//#region src/tui/streaming.d.ts
-/** Flip any trailing streaming markdown blocks (any owner) to finalized. */
-declare function finalizeStreamingMarkdown(events: StreamEvent[]): StreamEvent[];
-/** Flip the trailing streaming markdown block for one specific owner. */
-declare function finalizeStreamingMarkdownForOwner(events: StreamEvent[], owner: Owner): StreamEvent[];
-/**
- * Effective context size for a single turn.
- *
- * `usage.input` is misleading on its own when prompt caching is active: providers
- * (Anthropic, OpenRouter→Anthropic, Gemini) report `input` as the *new uncached*
- * tokens only — the cached prefix shows up in `cacheRead`, and newly-cached
- * tokens in `cacheCreation`. The model still saw all three buckets, so the real
- * context-window utilization is their sum.
- *
- * Non-caching providers leave `cacheRead`/`cacheCreation` undefined, so this
- * collapses to plain `input` for them.
- */
-declare function turnContextSize(usage: TurnUsage | undefined): number;
-interface StreamSource {
-  /** Pass `undefined` / omit for parent-agent events. */
-  childId?: string;
-  /** Nesting depth — 0 for parent, ≥ 1 for subagents. */
-  depth?: number;
-}
-interface StreamBuffer {
-  /** Queue a streaming delta for the next flush tick. */
-  queueStreamDelta: (kind: 'markdown' | 'thinking', delta: string, source?: StreamSource) => void;
-  /** Drain pending deltas immediately, then append a non-streaming event. */
-  appendImmediate: (evt: StreamEvent) => void;
-  /** Drain pending deltas immediately, then transform the event list. */
-  flushAndUpdate: (update: (events: StreamEvent[]) => StreamEvent[]) => void;
-  /** Drain pending deltas without further transformation. */
-  flush: () => void;
-  /** Cancel any pending flush and drop buffered deltas (on session teardown). */
-  reset: () => void;
-}
-declare function useStreamBuffer(setEvents: Dispatch<SetStateAction<StreamEvent[]>>): StreamBuffer;
+}): _$react.ReactNode;
 //#endregion
 //#region src/tui/theme.d.ts
 /**
- * Shared color palette. Kept as plain hex strings so it can be consumed by
- * OpenTUI props that accept `string | RGBA`. The names describe role, not
- * literal hue, so the theme can be swapped without touching call sites.
- */
-declare const COLOR: {
-  readonly brand: "#FFCC00";
-  readonly accent: "#00FF88";
-  readonly model: "#88CCFF";
-  readonly warn: "#FFAA66";
-  readonly error: "#FF6666";
-  readonly dim: "#888888";
-  readonly mute: "#555555";
-  readonly border: "#333333";
-  readonly borderActive: "#555555";
-};
-/**
- * Shared select styling — keeps the highlight bar from filling with a
- * different background than the surrounding box. The `▶` marker and the
- * brand-colored selected text carry the focus affordance.
+ * Convert the renderer-agnostic `Theme.syntax` map (hex strings + plain
+ * booleans) into an OpenTUI `SyntaxStyle`. Used both for the markdown
+ * structural captures (`markup.heading`, `markup.bold`, …) and the
+ * embedded Tree-sitter language tokens (`keyword`, `string`, `function`,
+ * …) — OpenTUI's `<markdown>` re-uses the same `SyntaxStyle` for the
+ * fenced-code renderable, so one table drives both surfaces.
  */
-declare const SELECT_THEME: {
-  readonly backgroundColor: "transparent";
-  readonly focusedBackgroundColor: "transparent";
-  readonly selectedBackgroundColor: "transparent";
-  readonly selectedTextColor: "#FFCC00";
-  readonly textColor: "#888888";
-  readonly descriptionColor: "#555555";
-  readonly selectedDescriptionColor: "#888888";
-};
+declare function buildMdStyle(theme: Theme): SyntaxStyle;
 /**
- * Theme for markdown token highlighting. Token names map to Tree-sitter highlight
- * captures emitted by OpenTUI's markdown parser; the `default` entry is the
- * fallback for unstyled text.
+ * Active markdown / syntax-highlighting style, memoized per theme. Reading
+ * this in a component subscribes it to theme changes — a `Settings.theme`
+ * flip immediately re-renders the affected `<markdown>` instances.
  */
-declare const MD_STYLE: SyntaxStyle;
+declare function useMdStyle(): SyntaxStyle;
 //#endregion
 //#region src/tui/index.d.ts
 /**
@@ -860,7 +257,8 @@ declare const MD_STYLE: SyntaxStyle;
  * to `runTui({ storageDir, prefix })`.
  *
  * ```ts
- * import { BUILTIN_PROVIDERS, runTui } from 'zidane/tui'
+ * import { BUILTIN_PROVIDERS } from 'zidane/chat'
+ * import { runTui } from 'zidane/tui'
  * import { createRemoteStore } from 'zidane/session'  // for the `store` option
  *
  * await runTui()                                       // ~/.zidane/sessions.db + state.json
@@ -870,7 +268,7 @@ declare const MD_STYLE: SyntaxStyle;
  * await runTui({ store: createRemoteStore({ url: '…' }) })
  * ```
  */
-declare function runTui(options?: TuiOptions): Promise<never>;
+declare function runTui(options?: ChatOptions): Promise<never>;
 //#endregion
-export { type ApiKeyCredential, App, type ApprovalDecision, type ApprovalRequest, type AuthMethod, AuthScreen, BUILTIN_PROVIDERS, COLOR, ChatScreen, ConfigProvider, type ContextUsage, type CredentialsFile, DEFAULT_SETTINGS, Footer, type Hint, IMPLICITLY_SAFE_TOOLS, MD_STYLE, Modal, type ModalProps, ModalRoot, type ModelInfo, ModelPickerModal, type OAuthCredential, type OAuthFlowOptions, type Owner, type Picked, type ProjectEntry, type ProjectsFile, type ProviderAuth, type ProviderCredential, type ProviderDescriptor, type ProviderKey, type ProviderRegistry, type RequestApproval, type ResolvedConfig, SELECT_THEME, type SafeModeActions, SafeModeProvider, type Screen, type SessionMeta, SessionsScreen, type Settings, SettingsModal, SettingsProvider, Spinner, type StateStoreApi, type StreamBuffer, type StreamEvent, type StreamSource, Transcript, type TuiOptions, type TuiState, addToSafelist, ageString, anthropicDescriptor, applyApiKeyEnv, cerebrasDescriptor, createStateStore, createTuiStore, credKeyOf, credentialsPath, detectAuth, eventsFromTurns, finalizeStreamingMarkdown, finalizeStreamingMarkdownForOwner, fmtTokens, getContextWindow, getSafelist, isOnSafelist, lastContextSizeFromTurns, listSessionMeta, loadState, marginTopFor, matchesSafelistEntry, modelsForDescriptor, onInputSubmit, openaiDescriptor, openrouterDescriptor, piIdOf, projectsFilePath, readCredentials, readProjects, readProviderCredential, removeProviderCredential, resolveConfig, runOAuthLogin, runTui, saveState, setProviderCredential, shortId, suggestSafelistEntry, supportsOAuth, titleFromTurns, toolCallPreview, toolResultText, turnContextSize, useConfig, useModal, useModalAwareFocus, useSafeModeActions, useSafeModeQueue, useSettings, useStreamBuffer, writeCredentials, writeProjects };
+export { App, AuthScreen, ChatScreen, type ContextUsage, Footer, type Hint, Modal, type ModalProps, ModalRoot, ModelPickerModal, SessionsScreen, type SettingsActions, SettingsModal, Spinner, Transcript, buildMdStyle, isVisible, marginTopFor, onInputSubmit, runTui, useMdStyle, useModal, useModalAwareFocus };
 //# sourceMappingURL=tui.d.ts.map