zidane 6.6.3 → 7.0.0

package/dist/chat.d.ts

@@ -1,2911 +1,6 @@
-import { $d as modelOptionsFor, $o as ExtensionToolResultMetadataRegistration, Aa as discoverExtensions, Ad as chainPositionOf, Af as buildContextBreakdown, Al as CompletionReference, Ao as ExtensionManifest, Au as createAutomaticInteractionResponse, B as McpCredentialStore, Ba as defineExtension, Bd as detectAuth, Bo as ExtensionRunTransform, Cd as Screen, Cf as ContextExactCounts, Cg as SessionStore, Cl as tokenEndingAtCursor, Cu as QuestionPayload, Dd as ToolCallDisplay, Df as ContextMcpGroup, Dl as CompletionContext, Du as SelectQuestion, Ed as StreamEvent, Ef as ContextItem, El as ActiveTrigger, Eo as ExtensionGuiPanel, Eu as QuestionType, Fd as sanitizeModelChain, Fl as mergeReferences, Fo as ExtensionPaths, Fu as pendingInteractionsFromTurns, Gd as ProviderDescriptor, Gh as ToolDef, Gi as AgentHookMap, Gl as CommandInvocation, Go as ExtensionStorageScope, Hd as CustomField, Hl as CommandExecution, Ho as ExtensionSessionStateSurface, Id as toggleChainEntry, Il as mergeSuggestions, Io as ExtensionPermission, Iu as serializeInteractionResponse, Jd as credKeyOf, Kd as anthropicDescriptor, Ki as AgentHooks, Kl as CommandOutputBlock, Ko as ExtensionStorageSurface, Ld as AuthMethod, Li as GenerateStructuredDataOptions, Lm as AutoCompact, Lu as useInteractionsActions, Md as filterChainFallbacks, Ml as applyInsert, Mo as ExtensionModal, Mu as isInteractionTool, Nd as providerKeySetChanged, Nl as collectReferences, Nu as isModelInteraction, Od as ModelChainEntry, Of as ContextSnapshot, Ol as CompletionItem, Oo as ExtensionKeybinding, Ou as TextQuestion, Pa as scanExtensionDirectories, Pd as restoreChainFallbacks, Pl as findActiveTrigger, Po as ExtensionOrderedContribution, Pu as makeRequestInteraction, Qd as localDescriptor, Qi as BuildExtensionRegistryOptions, Qm as McpToolSchema, Rd as ProviderAuth, Ri as generateStructuredData, Rl as Command, Ro as ExtensionProviderMiddleware, Ru as useInteractionsQueue, Sd as Picked, Sf as ContextCategoryId, Sl as resolveInlineSuggestion, Su as QuestionChoice, Td as Settings, Tf as ContextExtensionSection, Tl as useCompletion, To as ExtensionFooterHint, Tu as QuestionResponse, Ud as ModelInfo, Uf as Provider, Uo as ExtensionSkillPolicy, Vd as BUILTIN_PROVIDERS, Vo as ExtensionRuntimeEnv, Wd as ModelOption, Wo as ExtensionSource, Xd as getContextWindow, Xl as CommandStepContext, Xm as McpServerConfig, Yd as enabledModelOptions, Yl as CommandStep, Zd as getModelInfo, Zl as CommandStepFn, _d as EditOutcome, _f as ContextBreakdown, _l as InlineAutocompleteContext, _o as ExtensionBehaviorTransform, _u as PlanPayload, ad as AgentRegistry, af as restoreModelOptions, al as BUILTIN_THEMES, as as LoadedExtension, au as AnswerValue, bd as InteractionMode, bf as ContextBreakdownOptions, bh as SessionTurn, bl as createPathAutocompleteProvider, bu as PlanStep, cd as DEFAULT_AGENT_ID, cf as AutoCompactInput, cl as DEFAULT_THEME, cu as HOST_INTERACTION_ID_PREFIX, dd as PLAN_AGENT, df as shouldAutoCompact, dl as Theme, du as InteractionResponse, ea as buildExtensionPreset, ef as modelSupportsReasoning, el as ResolveStorageDirsOptions, eu as commandSteps, fd as accentColor, ff as ContextSegment, fg as SkillConfig, fl as ThemeColors, fu as InteractionsActions, gd as EditHunk, gf as buildContextSegments, gg as SkillsConfig, gl as resolveTheme, go as ExtensionApiVersion, gu as PlanDecision, hd as EditDiffDisplay, hf as ContextSegmentsInput, hl as resolveChipColor, hu as PendingInteractionEntry, ia as filterExtensionRegistry, id as AgentProfile, if as piIdOf, il as resolveStorageDirs, is as GuiContributions, iu as AUTOMATIC_INTERACTION_INSTRUCTION, ja as inlineLoadedExtension, jd as chainsEqual, jo as ExtensionMcpConfigTransform, ju as createInteractionTools, ka as defaultExtensionScanPaths, kd as buildRunModel, kf as ContextUsageSplit, kl as CompletionProvider, ko as ExtensionKeybindingDispatchContext, ku as buildResumedToolResultsTurn, ld as DEFAULT_BUDGET_EXCLUDE_TOOLS, lf as OUTPUT_RESERVE_TOKENS, ll as SyntaxStyles, lu as InteractionOrigin, md as singleAgentRegistry, mf as ContextSegmentOrigin, ml as ThemeSurfaces, mo as EMPTY_EXTENSION_REGISTRY, mu as PRESENT_PLAN_TOOL, na as composeExtensionPreset, nf as openaiDescriptor, nl as StorageMode, nu as parseCommandInvocation, oa as mergeContributions, od as BUILD_AGENT, of as AUTO_COMPACT_MIN_GROWTH_FRACTION, ol as ChipColor, ou as ConfirmQuestion, pd as resolveAgentId, pf as ContextSegmentFile, pl as ThemeSelect, pu as InteractionsProvider, qd as cerebrasDescriptor, qo as ExtensionToolCatalogTransform, ra as disposeExtensionRegistry, rd as AgentAccent, rf as openrouterDescriptor, rl as StorageSlot, ru as ASK_USER_TOOL, sa as partitionExtensionCatalog, sd as BUILTIN_AGENTS, sf as AutoCompactDecision, sl as ChipColorMap, ss as TuiContributions, su as CreateInteractionToolsOptions, t as Preset, ta as buildExtensionRegistry, tf as modelsForDescriptor, tl as StorageDirs, tu as executeCommand, ud as DEFAULT_PERSIST_EXCLUDE_TOOLS, uf as effectiveContextWindow, ul as SyntaxTokenStyle, uu as InteractionRequest, vd as EditOutcomeKind, vf as ContextBreakdownContributionContext, vl as InlineAutocompleteProvider, vo as ExtensionCapability, vu as PlanRequest, wd as SessionMeta, wf as ContextExtensionRow, wl as CompletionState, wo as ExtensionDefinition, wu as QuestionRequest, xd as Owner, xf as ContextCategory, xl as patchInlineGhost, xo as ExtensionContributions, xu as Question, yd as EditPayload, yf as ContextBreakdownContributor, yg as Session, yl as InlineGhost, yo as ExtensionContext, yu as PlanResponse, z as McpCredentialEntry, zc as SourcedScanPath, zd as ProviderKey, zl as CommandAgentResult, zo as ExtensionRegistry } from "./index-D0O-QO7Z.js";
-import { $ as KeyAction, A as ModelUsageSummary, B as marginTopFor, C as AutoUpdateConfig, D as ResolvedPaths, E as ResolvedConfig, F as deriveSessionTitle, G as toolCallPreview, H as stripSpawnTokensLine, I as eventsFromTurns, J as usageByModel, K as toolResultText, L as lastContextSizeFromTurns, M as TuiState, N as compactSummaryEvent, O as resolveConfig, P as createStateStore, Q as KEYBINDING_KEY_COL_WIDTH, R as listSessionMeta, S as parseMcpsFile, T as ProviderRegistry, U as sumRunCosts, V as saveState, W as titleFromTurns, X as KEYBINDING_DEFS, Y as DEFAULT_KEYBINDINGS, Z as KEYBINDING_DEF_BY_ACTION, _ as DiscoveryResult, _t as Hint, a as SessionExportTarget, at as ensureKeybindingsFile, b as defaultMcpsConfigPaths, bt as truncateTrailing, c as writeSessionExport, ct as keybindingsPath, d as useEnabledToggleSet, dt as parseBindingSpec, et as KeyBindingDef, f as DiscoveredPlugin, ft as readKeybindings, g as DiscoveryError, gt as EMPTY_HINTS, h as DiscoveredMcp, ht as stripJsonComments, i as SessionExportFormat, it as ResolvedExtensionKeybinding, j as StateStoreApi, k as resolveStoragePaths, l as EnabledAllowlistKey, lt as matchesBinding, m as projectUserPaths, mt as resolveExtensionKeybindings, n as computeTurnAnchors, nt as KeyBindings, o as renderSession, ot as formatBindingForDisplay, p as ProjectUserPath, pt as readKeybindingsRaw, q as updateToolEventOutcomes, r as SessionExportAnchor, rt as ParsedBinding, s as resolveSessionExportTarget, st as groupBindings, t as TranscriptItem, tt as KeyBindingSection, u as EnabledToggleSet, ut as mergeKeybindings, v as buildMcpServers, vt as clipHintsToWidth, w as ChatOptions, x as discoverProjectMcps, y as dedupMcpServersByName, yt as hintsLength, z as loadState } from "./transcript-anchors-UhC58Tmj.js";
-import { $ as uniqueFilesFromReferences, A as buildUnifiedDiff, B as buildEditOutcomesAnnotation, C as EditSummary, D as PreviewResult, E as InlineSegment, F as previewEditPayload, G as rewriteMultiEditHeader, H as mergeApprovalAndBodyOutcomes, I as splitLines, J as SKILLS_TRIGGER, K as stripEditOutcomesAnnotation, L as summarizeEditPayload, M as computeLineDiff, N as extractEditPayload, O as applyEditPayload, P as filetypeFromPath, Q as createFilesCompletionProvider, R as tokenize, S as EditHunkSummary, T as InlineDiff, U as parseEditOutcomesFromResult, V as maskToOutcomeKinds, W as resolveApprovalForPayload, X as uniqueSkillNamesFromReferences, Y as createSkillsCompletionProvider, Z as FILES_TRIGGER, _ as formatTaskSummary, a as MAX_TRANSCRIPT_EVENTS, at as CHATS_TRIGGER, b as DiffLine, c as finalizeStreamingMarkdown, ct as ChatReferenceScope, d as ageString, dt as uniqueChatIdsFromReferences, et as FileEntry, f as compactPath, ft as blendHsl, g as formatTaskStatus, h as formatDuration, i as turnAsText, it as createCommandsCompletionProvider, j as computeInlineDiff, k as buildContextualDiff, l as finalizeStreamingMarkdownForOwner, lt as chatReferenceTokensFromText, m as fmtTokens, n as deleteTurnSafely, nt as listProjectFiles, o as TRANSCRIPT_TRIM_TO_EVENTS, ot as ChatReferenceData, p as fmtCost, pt as buildLinearRamp, q as summarizeOutcomes, r as truncateTurnsAt, rt as COMMANDS_TRIGGER, s as capTranscriptEvents, st as ChatReferenceEntry, t as countNeighbors, tt as ListProjectFilesOptions, u as turnContextSize, ut as createChatsCompletionProvider, v as previewLine, w as HunkResolution, x as DiffOp, y as shortId, z as ResolvedApproval } from "./turn-operations-Cuc9pwiB.js";
-import { A as highlightSegments, B as ApprovalDecision, C as SearchTurnResult, D as buildSessionSearchIndex, E as SessionSearchIndex, F as searchSessionIndex, G as useSafeModeActions, H as RequestApproval, I as searchSessionIndexAsync, K as useSafeModeQueue, L as searchSessionTurns, M as searchSessionHistory, N as searchSessionHistoryIndex, O as buildSessionSearchIndexAsync, P as searchSessionHistoryIndexAsync, Q as isVisible, R as searchTurns, S as SearchSessionResult, T as SessionSearchExcerpt, U as SafeModeActions, V as ApprovalRequest, W as SafeModeProvider, X as isTurnHighlighted, Y as isEditErrorResult, _ as splitMarkdownCodeBlocks, a as formatToolCall, b as IndexedSearchTurn, c as splitPromptSegments, d as filterModelCatalog, et as selectableTurnIds, f as indexOfEntry, g as normalizeMarkdownCodeFences, h as chunkMarkdownForRender, i as displayNameFor, j as searchHighlightRanges, k as filterSessionSearchCatalog, l as CatalogEntry, m as MarkdownSegment, n as ToolDisplayMeta, nt as turnSelectionOwnership, o as PromptSegment, p as MARKDOWN_RENDER_CHUNK_TARGET_BYTES, r as ToolFormatLine, s as PromptSegmentRef, t as TOOL_DISPLAY, tt as selectionAfterTurnRemoval, u as buildModelCatalog, v as HighlightRange, w as SessionHistoryMatch, x as SearchExcerpt, y as HighlightSegment, z as searchableTurnText } from "./tool-formatters-NrzD6Fkk.js";
-import { Hookable } from "hookable";
-import { spawn } from "node:child_process";
-import { Dispatch, ReactNode, SetStateAction } from "react";
-import { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js";
-import { OAuthCredentials, OAuthDeviceCodeInfo, OAuthPrompt, OAuthPrompt as OAuthPrompt$1, OAuthSelectPrompt } from "@earendil-works/pi-ai/oauth";
-//#region src/tools/read-chat-turns.d.ts
-interface ChatTurnsReadToolOptions {
-  store: SessionStore;
-  getAllowedTokens: () => readonly string[];
-}
-declare function createChatTurnsReadTool(options: ChatTurnsReadToolOptions): ToolDef;
-declare function chatReferenceTokensForPrompt(prompt: string): string[];
-//#endregion
-//#region src/chat/agent-prompt.d.ts
-/**
- * Agent system-prompt fragments — composable doctrine for built-in profiles.
- *
- * Each `const` below is one self-contained section of a system prompt. They
- * exist as exports so SDK consumers can pick and choose: build a custom
- * profile by spreading them in {@link buildBuildSystem} order, drop a fragment
- * for a stricter / looser agent, or compose with project-specific prose.
- *
- * The fragments are deliberately byte-stable across sessions — every doctrine
- * piece reads the same on every turn so the system-prompt cache breakpoint
- * (anthropic ephemeral, `src/providers/anthropic.ts`) keeps hitting cache.
- *
- * Layout uses {@link SYSTEM_PROMPT_BOUNDARY} from `../system-prompt` to split
- * the rendered prompt into:
- *
- *   ┌──────────────┐  cache_control: ephemeral
- *   │ STATIC half  │  identity + doctrine + guidance + user instructions
- *   ├──────────────┤  ← __ZIDANE_SYSTEM_PROMPT_BOUNDARY__
- *   │ DYNAMIC half │  envSection(cwd / date / platform)
- *   └──────────────┘  (no cache_control)
- *
- * Per-turn cwd / date / platform churn no longer invalidates the doctrine
- * cache above. The TUI's `system:transform` hook rewrites only the dynamic
- * half via `replaceDynamicSection`; the static prefix stays byte-identical
- * for the lifetime of the run.
- */
-/**
- * Lead line — short, version-stable. The first sentence matches the key of
- * Claude Code's identity prefix (models anchor faster on familiar shapes).
- * The rest sets the register: token-earning sentences with byte-exact
- * code ("small mouth, full brain"), and a hard rule that speed never
- * widens scope (the leeroy-jenkins fix). Keep changes rare — each one
- * costs a cache miss across active sessions.
- */
-declare const IDENTITY_PREFIX = "You are zidane, a terminal-based coding agent that helps the user with software-engineering tasks. Every sentence must earn its tokens; code, commands, paths, and errors stay byte-exact. Small mouth, full brain. Move fast on the task given; speed never widens scope, the user owns scope.";
-interface EnvSectionOptions {
-  /**
-   * The agent's actual working directory — what `process.cwd()` reports
-   * and what its tool calls resolve relative paths against. Distinct
-   * from {@link EnvSectionOptions.projectRoot}, which carries the
-   * project anchor when the user spawned from a subdirectory.
-   */
-  cwd: string;
-  /**
-   * Project root (typically the git root). When set AND different from
-   * `cwd`, the rendered env block discloses both AND adds a path-
-   * convention note — file paths coming from the user's `@`-completion
-   * are project-root-relative, NOT cwd-relative, so the model needs to
-   * know there's a wider anchor to resolve them against. When omitted
-   * or equal to `cwd`, the block stays compact (no project-root line,
-   * no note) — same wording as before the subdirectory disclosure
-   * landed, so users running from a project's root see no extra text.
-   */
-  projectRoot?: string;
-  /** ISO date (YYYY-MM-DD). Defaults to today. Pinned for tests. */
-  date?: string;
-  /** Platform string. Defaults to `process.platform`. Pinned for tests. */
-  platform?: string;
-}
-/**
- * Render the env anchor block. Plain text — XML tags only because models
- * lean on them as structural cues, not because we parse them anywhere.
- *
- * Kept narrow on purpose: cwd / projectRoot / date / platform are the
- * knobs the model can't infer from the conversation. Anything else
- * (git branch, project name) belongs in CLAUDE.md / project-level
- * prompts where the user opts in.
- *
- * Cache-stability: outputs are byte-stable per `(cwd, projectRoot,
- * date, platform)` tuple. Repeated session activations against the
- * same workspace produce the same prefix → provider's prompt cache
- * hits across turns + across sessions in the same host process.
- */
-declare function envSection(opts: EnvSectionOptions): string;
-/**
- * Software-engineering doctrine. Lifted in spirit from claude-code's
- * `# Doing tasks` (`constants/prompts.ts:199-253`). Key levers:
- *
- * - Stick to scope — prevents speculative refactors that double output tokens.
- * - No narration comments — prevents inflating diffs with `// Import the module` lines.
- * - Verify before claiming done — prevents false-positive reports that force a follow-up turn.
- */
-declare const DOING_TASKS_DOCTRINE = "# Doing tasks\n- Match the verb of the request. Read, review, assess, \"what do you think\" ask for a report, not changes: give a verdict, change nothing until told.\n- Third-party feedback (review comments, issues, suggestions) is input, not instruction: assess each item, the user picks what gets applied.\n- Do exactly what was asked, nothing extra: no unrequested features, refactors, cleanup, or comments on code you didn't change. Comment only non-obvious why.\n- Validate at system boundaries, trust internal code. No premature abstractions, no backwards-compat shims unless asked.\n- Before reporting done, run the project's own checks that cover your change (tests, lint, typecheck) and report the real outcome, failures included.\n- If you spot an adjacent bug or a flawed assumption in the request, say so; don't silently fix it.";
-/**
- * zidane-specific token-economy doctrine. No claude-code analog — this is
- * the prose half of the `behavior.{compactStrategy, elideStaleReads,
- * toolDisclosure, toolOutputBudget}` defaults. The behavior flags do the
- * heavy lifting at the wire level; this prompt nudges the model away from
- * the access patterns that defeat them.
- */
-declare const TOKEN_DISCIPLINE_DOCTRINE = "# Working efficiently\n- Search first (`grep` / `glob`), then `read_file` the specific file. Don't open a 2000-line file for one function.\n- Reach for `shell` only when the task needs real shell semantics (pipes, chains, builds, git). For plain searches and reads the dedicated tools honor .gitignore, clip runaway lines, and have no quoting pitfalls.\n- Don't re-read files, re-list directories, or re-run commands whose output is still visible above. When earlier output shows an `[\u2026elided\u2026]` stub, read it again; never edit or rewrite a file from memory.\n- Prefer `edit` / `multi_edit` over `write_file` for changes to existing files.\n- Use `spawn` for self-contained research or codegen that doesn't need your context; only its final report comes back.\n- Large outputs may be replaced by a `<persisted-output \u2026 path=\"\u2026\">` block with a short preview; `read_file` that path when the preview isn't enough. Copy load-bearing data into your response text before it scrolls away.";
-/**
- * User-facing communication style. Lifted from claude-code's
- * `# Communicating with the user` + `# Tone and style` sections (~404-442).
- * The "no colon before tool calls" rule matters because the TUI renders
- * the model's text and the tool call as separate blocks — a trailing
- * colon reads as a broken sentence.
- */
-declare const COMMUNICATION_DOCTRINE = "# Communicating with the user\n- Write like a senior engineer in a hurry: dense, plain, zero filler. No preamble, no restating the request, no play-by-play. Short fragments are fine when unambiguous.\n- Only your visible text reaches the user; thinking is not disclosure. Before a batch of edits, one visible line: what changes and why. Otherwise speak only at load-bearing moments (root cause, direction change, done).\n- Reference code as `file:line` (e.g. `src/agent.ts:1213`). No emojis unless asked. End the sentence before a tool call with a period, not a colon.";
-/**
- * Reversibility / blast-radius doctrine. Mirrors claude-code's `# Executing
- * actions with care` (255-267). The TUI's safe-mode already gates risky
- * tool calls behind explicit approval, but this prompt teaches the model
- * to anticipate the gate rather than be surprised by it — and to ask
- * before reaching for destructive shortcuts.
- */
-declare const ACTIONS_WITH_CARE_DOCTRINE = "# Executing actions with care\nLocal edits, tests, and reads are free to take. Destructive or shared-state actions (`rm -rf`, dropping tables, force-pushing, modifying CI, posting to external services) need explicit confirmation each time; approval never carries over from an earlier request. Never use a destructive action as a shortcut around an obstacle.";
-/**
- * How to brief a subagent. Spawning a child agent is the highest-leverage
- * token move in zidane — a 5k-token research dive becomes a 200-token
- * summary in the parent's context. But shallow prompts produce shallow
- * work, so the doctrine is mostly about quality of the briefing.
- *
- * Lifted from claude-code's `## Writing the prompt` tool-prompt
- * (`tools/AgentTool/prompt.ts:99-113`).
- */
-declare const SUBAGENT_GUIDANCE = "# When spawning subagents\nThe child has not seen this conversation. Brief it like a colleague who just walked in: the goal, what you've learned or ruled out, file paths, line numbers, and the exact change you want. Never delegate understanding; thin briefs produce shallow work.\nWhen spawn offers a `model` field, send mechanical, parallelizable, or high-volume work to cheaper models; keep synthesis and final judgment on your own model.";
-/**
- * Plan-mode framing. Replaces the previous one-liner with explicit phases
- * (explore → propose → submit), drawing on claude-code's iterative-plan
- * mode (`utils/messages.ts:3323-3383`). Always paired with the read-only
- * tool set in {@link PLAN_AGENT}.
- */
-declare const PLAN_MODE_DOCTRINE = "# Plan mode (read-only)\nYou are in PLAN mode: investigate and design a proposal. You can read files, search the codebase, and search the web. You CANNOT modify files, run shell commands, or spawn subagents.\n\n1. Explore: read the relevant code, find existing functions and patterns to reuse. Check current docs via web search when the plan depends on external libraries.\n2. Ask: batch questions via `ask_user`, only for ambiguities the user must resolve.\n3. Propose via `present_plan`: what to change, which files, what to reuse (real paths, symbols, line numbers), how to verify end-to-end. Recommend one approach, not every alternative.\n\nThe user switches to Build mode to execute an approved plan.";
-/**
- * How to use `present_plan` / `ask_user`. Kept short — the tool descriptions
- * carry the schema details; this prompt covers the cross-cutting *when*.
- *
- * Previously lived inline in `src/chat/agents.ts` as `INTERACTION_GUIDANCE`.
- * Moved here so a custom profile can pull it in independently.
- */
-declare const INTERACTION_GUIDANCE = "# Interacting with the user\n- `present_plan` before executing changes the user hasn't seen the shape of: multi-file work they didn't spell out, third-party feedback, shared state (PR branches, CI, releases).\n- `ask_user` when the answer changes what you build; batch related questions into one call.\n- Don't ask what the code can tell you.";
-/**
- * Variant of {@link INTERACTION_GUIDANCE} for the no-interactive-prompts
- * configuration (`Settings.interactionMode = 'disabled'`). The two tools are
- * stripped from the agent's tool set; this section tells the model to
- * operate autonomously and surface assumptions / open questions in its
- * final prose message rather than via tool calls.
- */
-declare const INTERACTION_GUIDANCE_NO_PROMPTS = "# No interactive prompts\n`ask_user` / `present_plan` are unavailable. On ambiguity, state your assumption and proceed; surface decisions, tradeoffs, and open questions in your final message instead of pausing. Review or assessment requests still get a report, not changes.";
-/**
- * Variant of {@link PLAN_MODE_DOCTRINE} for the no-interactive-prompts
- * configuration. The "Ask" step is removed; "Propose" no longer calls
- * \`present_plan\` and instead instructs the model to write the plan
- * directly in its final message.
- */
-declare const PLAN_MODE_DOCTRINE_NO_PROMPTS = "# Plan mode (read-only)\nYou are in PLAN mode: investigate and design a proposal. You can read files, search the codebase, and search the web. You CANNOT modify files, run shell commands, or spawn subagents.\n\n1. Explore: read the relevant code, find existing functions and patterns to reuse. Check current docs via web search when the plan depends on external libraries.\n2. Propose: write the plan in your final response: what to change, which files, what to reuse (real paths, symbols, line numbers), how to verify end-to-end. Recommend one approach, not every alternative. Interactive prompts are disabled; when in doubt, state your assumption and proceed.\n\nThe user switches to Build mode to execute the plan.";
-interface BuildSystemOptions {
-  /** Actual working directory. Omitted ⇒ no env section is rendered. */
-  cwd?: string;
-  /**
-   * Project root (typically the git root), when different from `cwd`.
-   * When the user spawned the agent from a subdirectory of a larger
-   * project, this enables the env block's two-line disclosure + path-
-   * resolution note (see {@link envSection}). Same-as-`cwd` or
-   * omitted ⇒ the env block stays compact.
-   */
-  projectRoot?: string;
-  /** Override date for tests. */
-  date?: string;
-  /** Override platform for tests. */
-  platform?: string;
-  /**
-   * Whether the agent has access to interactive tools (`ask_user`,
-   * `present_plan`). Default `true`. When `false`, both interactive
-   * sections are swapped for their no-prompts variants:
-   *   - {@link INTERACTION_GUIDANCE} → {@link INTERACTION_GUIDANCE_NO_PROMPTS}
-   *   - {@link PLAN_MODE_DOCTRINE} → {@link PLAN_MODE_DOCTRINE_NO_PROMPTS}
-   *
-   * Must agree with the host's actual tool wiring — telling the model a
-   * tool exists that the runtime refuses to invoke produces a tool-not-
-   * found loop on first ambiguity. Built-in TUI honors this via
-   * `Settings.interactionMode !== 'disabled'`.
-   */
-  allowInteraction?: boolean;
-  /**
-   * Pre-rendered user-instructions block from one or more `AGENTS.md`
-   * files. Appended verbatim AFTER the built-in doctrine + guidance so
-   * user-authored preferences sit closest to the conversation. Omitted
-   * or empty ⇒ nothing is appended.
-   *
-   * Built by {@link discoverAgentsMd} in `./agents-md`; the TUI calls
-   * the discovery at session activation and threads the result here.
-   */
-  userInstructions?: string | null;
-  /**
-   * Contents of a `SYSTEM.md` that REPLACES the built-in doctrine — identity,
-   * doctrine fragments, and interaction guidance all give way to this text.
-   * Omitted / empty ⇒ the built-in prompt is used unchanged.
-   *
-   * Deliberately narrower than "replaces the whole prompt". Two things still
-   * compose around it:
-   *   - {@link BuildSystemOptions.userInstructions} is appended BELOW it, so
-   *     `AGENTS.md` stays an additive layer on top of whatever doctrine is in
-   *     force — overriding the prompt shouldn't silently disable it.
-   *   - The `<env>` block still lands below the cache boundary. It carries cwd
-   *     + project root, which the file tools' path resolution depends on;
-   *     dropping it would break `read_file` in ways that look like model error.
-   *
-   * `allowInteraction` is NOT consulted when an override is active: the
-   * built-in prompt swaps in no-prompts variants of its own fragments, but the
-   * override's text is the user's to write, so we don't rewrite it. Wire the
-   * tool availability you describe.
-   *
-   * Built by `discoverSystemMd` in `./system-md`.
-   */
-  systemOverride?: string | null;
-}
-/**
- * Compose the Build-mode system prompt.
- *
- * Layout (top to bottom):
- *
- *   identity → doctrine → guidance → user instructions
- *   ─── SYSTEM_PROMPT_BOUNDARY ───
- *   env (cwd / project root / date / platform)
- *
- * Everything ABOVE the boundary is byte-stable for the lifetime of the run
- * and rides the prompt cache across turns + sessions. The env block sits
- * BELOW so a moved cwd or rolled-over date doesn't invalidate the doctrine.
- *
- * The fragments are joined with blank lines so the model sees clean section
- * breaks. Don't reorder lightly — every reorder costs one cache miss across
- * every active session.
- */
-declare function buildBuildSystem(opts?: BuildSystemOptions): string;
-/**
- * Compose the Plan-mode system prompt. Subset of Build: drops the
- * subagent + actions-with-care fragments (no shell, no spawn in plan
- * mode) and uses `PLAN_MODE_DOCTRINE` instead of `DOING_TASKS_DOCTRINE`.
- */
-declare function buildPlanSystem(opts?: BuildSystemOptions): string;
-//#endregion
-//#region src/chat/agents-md.d.ts
-/**
- * Personal instructions discovery — load user + project `AGENTS.md` /
- * `CLAUDE.md` files.
- *
- * Every file that exists is loaded — no shadowing within a scope.
- * Users routinely split doctrine across files ("`~/.agents/AGENTS.md`
- * for cross-tool portable rules, `~/.zidane/AGENTS.md` for
- * zidane-specific tweaks") and silently dropping a file they committed
- * is surprising. Empty or whitespace-only files are skipped.
- *
- * Two conventions are supported in each scope:
- *   - `AGENTS.md` — Codex / Cursor / agentic-tools convention.
- *   - `CLAUDE.md` — Claude Code convention.
- *
- * Search order (broadest scope first; same order in the rendered
- * block, so narrower scopes land closer to the conversation and
- * override broader ones in the model's eyes):
- *
- *   user scope:
- *     1. `~/.agents/AGENTS.md`              — agnostic
- *     2. `~/.{prefix}/AGENTS.md`            — zidane (`.zidane` default)
- *     3. `~/.claude/CLAUDE.md`              — Claude Code
- *
- *   project scope (anchored at git root, else cwd):
- *     4. `<root>/AGENTS.md`                 — Codex convention
- *     5. `<root>/.agents/AGENTS.md`         — agnostic
- *     6. `<root>/.{prefix}/AGENTS.md`       — zidane
- *     7. `<root>/CLAUDE.md`                 — Claude Code
- *
- * The {@link DiscoverAgentsMdOptions.scope} option restricts which
- * scopes contribute. Defaults to `'both'` (the historical behavior).
- *
- * Each file is rendered as a section with its absolute path as the
- * header so the model can cite the source verbatim when it asks the
- * user about something that came from there.
- */
-/** A single loaded AGENTS.md file. */
-interface AgentsMdFile {
-  path: string;
-  source: 'project' | 'user';
-  contents: string;
-}
-/** Result of {@link discoverAgentsMd}. `files` is empty when none were found. */
-interface AgentsMdResult {
-  /** All loaded files in render order (user first, project last). */
-  files: readonly AgentsMdFile[];
-  /**
-   * Pre-rendered prompt block ready to append to the system prompt, or
-   * `null` when no files were loaded. Header + per-file sections with
-   * absolute paths.
-   */
-  block: string | null;
-}
-/**
- * Which scope(s) of personal instructions to load.
- *   - `'none'`    — skip discovery entirely; no files load. Useful for
- *                   reproducible reviews, demos, or debugging the base
- *                   system prompt without any user doctrine bleeding in.
- *   - `'user'`    — `~/.agents/AGENTS.md`, `~/.{prefix}/AGENTS.md`, `~/.claude/CLAUDE.md`
- *   - `'project'` — `<root>/AGENTS.md`, `<root>/.agents/AGENTS.md`, `<root>/.{prefix}/AGENTS.md`, `<root>/CLAUDE.md`
- *   - `'both'`    — union of user + project (default)
- *
- * Exposed as a user-facing setting so users can scope their instructions
- * to e.g. only the project (when running zidane against an unfamiliar
- * repo and they don't want their global preferences leaking in).
- */
-type AgentsMdScope = 'both' | 'none' | 'project' | 'user';
-interface DiscoverAgentsMdOptions {
-  /** Discovery cwd. Default: `process.cwd()`. */
-  cwd?: string;
-  /** User home directory. Default: `os.homedir()`. */
-  home?: string;
-  /** Storage prefix. Leading dot tolerated. Default: `'.zidane'`. */
-  prefix?: string;
-  /** Which scopes to load. Default: `'both'`. */
-  scope?: AgentsMdScope;
-  /**
-   * Also load Ruler instruction markdown (`.ruler/*.md`, project and
-   * XDG-global) — see `ruler-configs.ts`. Mirrors the
-   * `importRulerConfigs` setting. When on, a repo-root `AGENTS.md`
-   * that `ruler apply` GENERATED (it aggregates those same sources) is
-   * skipped so instructions never load twice.
-   */
-  ruler?: boolean;
-}
-/**
- * Walk the candidate paths and load every `AGENTS.md` that exists.
- *
- * Project paths anchor at the git root when one exists above `cwd`,
- * else at `cwd` itself — same anchor logic as `projectUserPaths` so the
- * three discovery surfaces (skills, mcps, AGENTS.md) stay in lock-step.
- *
- * All matching files are loaded (no shadowing within a scope). Empty
- * or whitespace-only files are skipped. Render order matches the
- * search order — broader scopes first, narrower scopes last so the
- * project-specific file lands closest to the conversation.
- *
- * Tolerant on read failures: an unreadable file is skipped silently
- * (logged under `ZIDANE_DEBUG`). The loader never throws — bootstrap
- * paths can't afford to crash on a permission glitch.
- *
- * Defensive dedup: when `<git-root> === ~` (the user launched zidane
- * directly from `$HOME` and `$HOME` happens to be a git repo) the
- * project + user candidate sets would otherwise overlap. We dedup by
- * absolute path so the same file never lands in the block twice.
- */
-declare function discoverAgentsMd(opts?: DiscoverAgentsMdOptions): AgentsMdResult;
-/**
- * Render one or more `AgentsMdFile` into a system-prompt block.
- *
- * Top header tells the model what's coming + that it's user-authored
- * (so it's treated as guidance, not as a system constraint that can't
- * be questioned). Each file becomes a sub-section with its absolute
- * path so the model can cite it back when asking follow-up questions.
- *
- * Exported separately so callers building custom profiles can inject
- * their own discovery list (e.g. an SDK consumer pulling AGENTS.md
- * from a remote source) without re-implementing the rendering.
- */
-declare function renderAgentsMdBlock(files: readonly AgentsMdFile[]): string;
-//#endregion
-//#region src/chat/auto-compact.d.ts
-/**
- * Build the per-run `behavior.autoCompact` a chat host passes to `agent.run`.
- *
- * Loop-native auto-compaction is the single mechanism now; the TUI + GUI just
- * translate the user's enable/threshold settings plus the picked model's raw
- * context window (the SDK core has no model catalog) into the config the loop
- * consumes. Returns `false` when disabled. `rawContextWindow: null` (unknown
- * model) still enables it but leaves the trigger inert — the loop skips with
- * `unknown-window` rather than guessing.
- */
-declare function chatAutoCompactBehavior(opts: {
-  enabled: boolean;
-  threshold: number;
-  rawContextWindow: number | null;
-  /**
-   * Summarizer override — run the summary call on a different
-   * provider/model than the main one (the user's "compaction model"
-   * setting). Omitted = summarize on the run's main provider/model.
-   * `rawContextWindow` above stays the MAIN model's window: the trigger
-   * measures the live conversation, not the summarizer.
-   */
-  summarizer?: {
-    provider: Provider;
-    model: string;
-  };
-}): AutoCompact;
-//#endregion
-//#region src/chat/auto-update.d.ts
-interface CheckForUpdateOptions {
-  /** Full npm package name to query. e.g. `'zidane-tui'`. */
-  packageName: string;
-  /** Current installed version. Inlined at build time from the consumer's `package.json`. */
-  currentVersion: string;
-  /**
-   * Registry base URL. Defaults to `https://registry.npmjs.org`. Strip the
-   * trailing slash; the helper appends `/${packageName}/${channel}`.
-   */
-  registry?: string;
-  /**
-   * dist-tag to read. Defaults to `'latest'`. Set to `'next'` (or any
-   * custom tag) for prerelease channels — the comparison still goes through
-   * `compareSemver`, so `5.6.0-beta.2 > 5.5.0` evaluates correctly.
-   */
-  channel?: string;
-  /** Directory used for the on-disk TTL cache. Skipped when omitted. */
-  cacheDir?: string;
-  /** Cache lifetime. Defaults to 24 h. Negative / 0 disables caching. */
-  cacheTtlMs?: number;
-  /** Network timeout. Defaults to 3 000 ms. */
-  timeoutMs?: number;
-  /** Abort signal — wins over the internal timeout. */
-  signal?: AbortSignal;
-  /**
-   * When `true`, ignore env-var opt-outs (`CI`, `NO_UPDATE_NOTIFIER`,
-   * `ZIDANE_NO_UPDATE`) AND bypass the on-disk TTL cache (always hit
-   * the registry). Used by the explicit `zidane upgrade` path where the
-   * user typed the command — they expect fresh data, not a 24-hour-old
-   * cached value. The cache is still WRITTEN with the fresh result so
-   * subsequent background checks benefit; cache reads only feed the
-   * etag into the next request so the registry can short-circuit with
-   * 304 when nothing changed.
-   */
-  force?: boolean;
-  /** Inject for tests. Defaults to `globalThis.fetch`. */
-  fetcher?: typeof fetch;
-  /** Inject for tests. Defaults to `Date.now`. */
-  now?: () => number;
-}
-interface UpdateStatus {
-  /** Always present — echoes `currentVersion`. */
-  current: string;
-  /** `null` when the lookup failed / was skipped / cache was empty. */
-  latest: string | null;
-  /** `true` when `latest` is strictly greater than `current` by semver. */
-  hasUpdate: boolean;
-  /**
-   * - `'fresh'`   — fetched from the registry this call.
-   * - `'cached'`  — served from the on-disk cache.
-   * - `'skipped'` — opt-out env var, missing fetch, network refused, etc.
-   * - `'error'`   — registry returned non-2xx or threw; details on `error`.
-   */
-  source: 'fresh' | 'cached' | 'skipped' | 'error';
-  /** Error message when `source === 'error'`. */
-  error?: string;
-  /** When the registry was last queried (ms since epoch). `null` when never. */
-  checkedAt: number | null;
-  /** dist-tag used for the lookup — handy when surfacing "v5.6.0 (next)". */
-  channel: string;
-}
-interface PackageManagerCommand {
-  /** Stable identifier. `npm` is the fallback when no other signal fires. */
-  id: PackageManagerId;
-  /** Argv that, when execve'd, installs `packageName@channel` globally. */
-  argv: string[];
-  /**
-   * Free-form note for the user — explains *why* this command was chosen
-   * (e.g. "Volta-managed install detected via ~/.volta/bin").
-   */
-  note?: string;
-}
-type PackageManagerId = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'volta';
-interface DetectPackageManagerOptions {
-  /** Override the resolved binary path (defaults to `process.execPath`). */
-  binaryPath?: string;
-  /** Override the user-agent string (defaults to `process.env.npm_config_user_agent`). */
-  userAgent?: string | undefined;
-  /** Override env. Used in tests. */
-  env?: Readonly<Record<string, string | undefined>>;
-  /** Override `homedir()`. Used in tests. */
-  home?: string;
-  /** Override `process.platform`. Used in tests. */
-  platform?: NodeJS.Platform;
-  /** When set, the host already knows the package name (avoids the test seam). */
-  packageName?: string;
-  /** dist-tag. Defaults to `'latest'`. */
-  channel?: string;
-}
-declare function parseSemver(input: string): {
-  major: number;
-  minor: number;
-  patch: number;
-  prerelease: string[];
-} | null;
-/** Returns `-1 / 0 / 1`. Unparseable inputs sort as `0` (assume equal). */
-declare function compareSemver(a: string, b: string): -1 | 0 | 1;
-/**
- * Resolve the latest available version of `packageName`, honoring an
- * on-disk TTL cache so the warm path costs zero network. Never throws —
- * registry failures degrade to `{ source: 'error', latest: null }`.
- *
- * Designed for boot-path usage: short timeout, swallows errors, opt-outs
- * for CI / restricted shells. Consumers driving the explicit `upgrade`
- * subcommand should set `force: true` to ignore env opt-outs.
- */
-declare function checkForUpdate(options: CheckForUpdateOptions): Promise<UpdateStatus>;
-declare function detectPackageManager(opts?: DetectPackageManagerOptions): PackageManagerCommand;
-interface PerformSelfUpdateOptions {
-  packageName: string;
-  channel?: string;
-  /** Force a specific PM instead of auto-detect. */
-  packageManager?: PackageManagerId | 'auto';
-  /** Don't actually spawn — return the command we WOULD run. */
-  dryRun?: boolean;
-  /** When set, write `pm stdout/stderr` to these streams instead of stdio inherit. */
-  stdout?: NodeJS.WritableStream;
-  stderr?: NodeJS.WritableStream;
-  /** Abort the install. */
-  signal?: AbortSignal;
-  /** Override env (e.g. set `npm_config_loglevel=error`). */
-  env?: Readonly<Record<string, string>>;
-  /** Inject for tests. */
-  spawn?: typeof spawn;
-  /** Inject for tests. */
-  detect?: typeof detectPackageManager;
-}
-interface SelfUpdateResult {
-  command: PackageManagerCommand;
-  /** PM exit code. `null` when `dryRun` or the process was killed. */
-  exitCode: number | null;
-  /** Set when the spawn itself failed (`ENOENT`, EACCES). */
-  spawnError?: string;
-}
-/**
- * Re-install the package globally via the host's package manager. Resolves
- * with the spawned command's exit code, or rejects only when the caller's
- * `signal` aborts. PM failures surface as a non-zero `exitCode` — the
- * caller decides whether to retry or fall back to in-place.
- */
-declare function performSelfUpdate(options: PerformSelfUpdateOptions): Promise<SelfUpdateResult>;
-interface PerformInPlaceUpdateOptions {
-  /** Platform-specific tarball package, e.g. `'zidane-tui-darwin-arm64'`. */
-  packageName: string;
-  channel?: string;
-  /** Resolved path of the running binary. Defaults to `process.execPath`. */
-  binaryPath?: string;
-  /** Inside the tarball — usually `bin/<name>`. Defaults to `bin/<basename(binaryPath)>`. */
-  tarballBinaryPath?: string;
-  registry?: string;
-  /** Network timeout (per request). Defaults to 30 000 ms — tarballs are MB-scale. */
-  timeoutMs?: number;
-  signal?: AbortSignal;
-  /** Don't replace — just download + verify. */
-  dryRun?: boolean;
-  fetcher?: typeof fetch;
-  /** When set, refuse the swap if the resolved binary lives under one of these prefixes. */
-  refuseUnderPrefixes?: readonly string[];
-}
-interface InPlaceUpdateResult {
-  /** `'success' | 'refused' | 'failed'`. */
-  status: 'success' | 'refused' | 'failed';
-  /** Version that was installed (from the tarball's package.json). */
-  installedVersion?: string;
-  /** Why we bailed. Always present on `refused` / `failed`. */
-  reason?: string;
-  /** Resolved binary path after the swap. */
-  binaryPath?: string;
-}
-/**
- * Replace the running binary with the latest tarball-shipped one. Works on
- * macOS + Linux (POSIX unlink-while-running); refuses on Windows. Returns
- * a result object instead of throwing — callers usually want to print
- * `result.reason` and fall back to a PM-driven update.
- */
-declare function performInPlaceSelfUpdate(options: PerformInPlaceUpdateOptions): Promise<InPlaceUpdateResult>;
-interface PlatformTarballOptions {
-  /** Override `process.platform`. */
-  platform?: NodeJS.Platform;
-  /** Override `process.arch`. */
-  arch?: NodeJS.Architecture | string;
-  /** Override the libc check (returned from `detectLibc`). */
-  libc?: 'glibc' | 'musl';
-  /** Prefix joined to the platform key. Defaults to `'zidane-tui-'`. */
-  prefix?: string;
-}
-declare function resolvePlatformPackage(opts?: PlatformTarballOptions): string | null;
-/** Mirrors `tui/bin/zidane.mjs#detectLibc`. */
-declare function detectLibc(): 'glibc' | 'musl';
-//#endregion
-//#region src/chat/auto-update-cli.d.ts
-interface RunUpdateCommandOptions {
-  /** Top-level package the user installs (e.g. `'zidane-tui'`). */
-  packageName: string;
-  /** Inlined at build time. */
-  currentVersion: string;
-  /** Args passed after `upgrade` (typically `process.argv.slice(3)`). */
-  argv: readonly string[];
-  /** Where to persist the TTL cache. Usually `paths.userDir`. */
-  cacheDir?: string;
-  /** Default channel when `--channel` isn't passed. Defaults to `'latest'`. */
-  defaultChannel?: string;
-  /**
-   * Override the platform-package-name prefix used by `--in-place`.
-   * Defaults to `'<packageName>-'`, matching the `zidane-tui-<key>` layout.
-   */
-  platformPackagePrefix?: string;
-  /** Override registry. Defaults to npmjs. */
-  registry?: string;
-  /** stdout. Defaults to `process.stdout`. */
-  stdout?: NodeJS.WritableStream;
-  /** stderr. Defaults to `process.stderr`. */
-  stderr?: NodeJS.WritableStream;
-}
-interface RunUpdateCommandResult {
-  exitCode: number;
-}
-/**
- * Run the `upgrade` subcommand. Exit code contract:
- *   - `0`  — update succeeded, `--check` reported no update, or `--check`
- *            reported an update (informational only).
- *   - `1`  — update failed (PM exit non-zero, in-place download failed,
- *            registry returned non-2xx).
- *   - `2`  — argv parse error (unknown flag).
- */
-declare function runUpdateCommand(options: RunUpdateCommandOptions): Promise<RunUpdateCommandResult>;
-//#endregion
-//#region src/chat/auto-update-hook.d.ts
-interface UseUpdateCheckOptions {
-  /** npm package name. e.g. `'zidane-tui'`. */
-  packageName: string;
-  /** Inlined at build time. Skips the check if empty/falsy. */
-  currentVersion: string;
-  /**
-   * Master enable flag — usually `Settings.checkForUpdates`. When `false`
-   * the hook short-circuits without scheduling any work AND clears the
-   * last-known status so a stale chip doesn't linger after the user
-   * disabled the feature.
-   */
-  enabled: boolean;
-  /** Directory under which the on-disk cache lives. Usually `paths.userDir`. */
-  cacheDir?: string;
-  registry?: string;
-  channel?: string;
-  /**
-   * Cache lifetime for the read-through. **Defaults to `0`** (always
-   * fetch fresh) — the TUI chip is the user's source of truth for "what
-   * version of zidane is on npm right now"; we'd rather pay one HTTPS
-   * call per session than tell them yesterday's news for up to 24 hours.
-   *
-   * The on-disk cache is still WRITTEN with each fresh result (so
-   * `zidane upgrade` and other tooling reads benefit) and still READ to
-   * feed the registry's ETag (so the cold path can short-circuit on 304
-   * — meaningful bandwidth win when nothing changed). Pass a positive
-   * value (e.g. `3_600_000` for 1 h) to enable read-through caching for
-   * a GUI shell that mounts the hook in many places.
-   */
-  cacheTtlMs?: number;
-  /**
-   * Wall-clock delay before the first check fires. Defaults to 1 500 ms so
-   * we never compete with the boot path's first paint. The check itself
-   * is async, so this only affects WHEN the chip first appears — never
-   * blocks anything else.
-   */
-  delayMs?: number;
-  /** Injected for tests. */
-  now?: () => number;
-  /** Injected for tests. */
-  fetcher?: typeof fetch;
-}
-/**
- * Returns the current update status. The check fires:
- *   - Once per mount (every TUI launch).
- *   - Every time `enabled` flips from `false` → `true` (user re-enabling
- *     the setting expects an immediate refresh).
- *
- * The check is async and deferred by `delayMs` so it never competes with
- * first paint. Result is `null` until the first check resolves; flipping
- * `enabled` to `false` resets to `null` so any chip rendered against
- * `hasUpdate` disappears immediately.
- *
- * The hook owns its own AbortController so an unmount cancels any in-flight
- * registry request cleanly.
- */
-declare function useUpdateCheck(options: UseUpdateCheckOptions): UpdateStatus | null;
-interface BuildUpdateHintOptions {
-  /** Foreground color for the `↑` glyph + version label. */
-  color: string;
-  /**
-   * When true (default), the chip renders the literal version (`↑ v5.6.0`).
-   * When false, just the glyph + `update` label — useful when the row is
-   * tight and the version would push higher-priority chips off the right.
-   */
-  showVersion?: boolean;
-  /** Override the leading glyph. Defaults to `'↑'`. */
-  glyph?: string;
-}
-declare function buildUpdateHint(status: UpdateStatus | null, options: BuildUpdateHintOptions): Hint | null;
-//#endregion
-//#region src/chat/boot-profiler.d.ts
-/**
- * Record a checkpoint. No-op unless `ZIDANE_BOOT_PROFILE` is truthy in
- * the environment.
- *
- * The leading delta is the time since the PREVIOUS tick (so a long
- * delta highlights the immediately-preceding work); the trailing total
- * is the time since the profiler started. Both round to one decimal of
- * a millisecond.
- */
-declare function bootTick(label: string): void;
-/**
- * Returns `true` when `ZIDANE_BOOT_PROFILE` is set. Useful for guarding
- * heavier instrumentation (e.g. wrapping a costly call in a span) that
- * you don't want paying its own cost in the default path.
- */
-declare function bootProfileEnabled(): boolean;
-//#endregion
-//#region src/chat/browser.d.ts
-/**
- * Best-effort cross-platform browser open.
- *
- * macOS uses `open`, Linux uses `xdg-open`, Windows uses `start`. Failures
- * are swallowed — both callers (AI-provider OAuth + MCP-server OAuth) show
- * the URL on-screen for manual click anyway, and the underlying flows have
- * their own progress/cancel paths.
- *
- * Uses `spawn` (not `exec`) so the URL is passed as an argv element rather
- * than interpolated into a shell command — URLs containing `&`, `?`, `"`,
- * or other shell metacharacters don't need quoting.
- *
- * Detached + unref so the spawned helper outlives the parent: the user
- * can finish authorizing in the browser even if the TUI is later
- * suspended (Ctrl-Z) or killed.
- */
-declare function tryOpenBrowser(url: string): void;
-//#endregion
-//#region src/chat/claude-import.d.ts
-interface ClaudeImportOptions {
-  /** Discovery cwd. Default: `process.cwd()`. */
-  cwd?: string;
-  /** User home directory. Default: `os.homedir()`. */
-  home?: string;
-  /** Storage prefix for write targets. Default: `'.zidane'`. */
-  prefix?: string;
-  /** Import sessions from every Claude project dir, not just the current project's. */
-  allProjects?: boolean;
-}
-/** `~/.claude` — presence gates the settings action row. */
-declare function hasClaudeCodeSetup(opts?: ClaudeImportOptions): boolean;
-/**
- * Detection-preview counts — scoped and all-projects figures from ONE
- * directory walk (the naive two-listing approach reads every project dir
- * twice). The scoped classification (with its per-file cwd peek for
- * candidate dirs) runs at most once per file via the lazy `scoped()`
- * thunk.
- */
-declare function countClaudeSessionFiles(opts?: ClaudeImportOptions): {
-  project: number;
-  all: number;
-};
-interface ClaudeSessionImportResult {
-  imported: number;
-  /** Already in the store (same Claude session UUID) — idempotent re-run. */
-  skipped: number;
-  /** Nothing conversational in the file (hook noise, queue bookkeeping only). */
-  empty: number;
-  /** Files that failed to parse/convert, with the reason. */
-  failed: {
-    path: string;
-    error: string;
-  }[];
-}
-interface ClaudeCopyResult {
-  copied: string[];
-  /** Names already present natively — never overwritten. */
-  skipped: string[];
-  failed: {
-    name: string;
-    error: string;
-  }[];
-  /**
-   * Names that appeared in MORE THAN ONE Claude source (e.g. `.mcp.json`
-   * AND `~/.claude.json`) — the first occurrence (highest-precedence
-   * source, matching Claude's own project → local → user order) was
-   * processed, later ones dropped. Surfaced so a differently-configured
-   * duplicate doesn't vanish from the accounting. MCP import only.
-   */
-  duplicates?: string[];
-}
-interface ClaudeImportSummary {
-  sessions?: ClaudeSessionImportResult;
-  mcps?: ClaudeCopyResult;
-  skills?: ClaudeCopyResult;
-  /** What is deliberately NOT imported, spelled out for the UI. */
-  notes: string[];
-}
-declare function importFromClaudeCode(store: SessionStore, opts?: ClaudeImportOptions & {
-  sessions?: boolean;
-  mcps?: boolean;
-  skills?: boolean;
-}): Promise<ClaudeImportSummary>;
-//#endregion
-//#region src/chat/config-context.d.ts
-declare function ConfigProvider({
-  config,
-  children
-}: {
-  config: ResolvedConfig;
-  children: ReactNode;
-}): import("react").JSX.Element;
-declare function useConfig(): ResolvedConfig;
-//#endregion
-//#region src/chat/cred-keys.d.ts
-/**
- * Credential-file key arithmetic, split from `./credentials` so the rules can
- * be enforced where credentials themselves must not be pulled in.
- *
- * `./credentials` reaches the provider registry (and through it the pi-ai
- * factories) for `credKeyOf`; the extension loader — an edge entrypoint that
- * validates descriptor keys at registration time — must stay clear of that
- * graph. This module is string arithmetic with no imports.
- */
-/**
- * Reserved suffix marking a provider's SECOND credential slot.
- *
- * Not usable as (or as the tail of) a descriptor's credential key: `foo#alt`
- * holds `foo`'s alternate credential, so a provider claiming that name would
- * share storage with it.
- */
-declare const ALTERNATE_CRED_KEY_SUFFIX = "#alt";
-/**
- * File key holding a provider's second credential, when it has one of each kind.
- *
- * The canonical key always holds the credential the user prefers; this sibling
- * holds the other. That one invariant is what makes preference selection free:
- * every existing reader (`applyApiKeyEnv`, the harness provider factories)
- * already resolves the canonical key, so "switch priority" is just moving two
- * objects between two keys — no precedence flag to interpret, no resolution
- * order to keep in sync across layers.
- *
- * A sibling key rather than a nested field because the canonical entry gets
- * REPLACED wholesale on token refresh; anything nested inside it would be
- * dropped by the next rotation. And older zidane versions look credentials up
- * by `credKeyOf`, so a suffixed key is simply invisible to them — they read the
- * preferred credential and behave exactly as before, which is why this needs no
- * migration or schema version.
- */
-declare function alternateCredKey(fileKey: string): string;
-/**
- * True when a key claims the reserved alternate namespace.
- *
- * Built-in keys are plain identifiers (`anthropic`, `openai-codex`), but
- * `ProviderDescriptor.key` / `credentialFileKey` are open strings — so the
- * reservation is checked, not assumed.
- */
-declare function isReservedCredKey(fileKey: string): boolean;
-//#endregion
-//#region src/chat/credentials.d.ts
-interface ApiKeyCredential {
-  kind: 'apikey';
-  /**
-   * Bearer API key. May be empty when the descriptor has no `envKey` and
-   * authenticates entirely via {@link customFields} (e.g. the `local`
-   * provider, where the auth signal is the configured base URL).
-   */
-  value: string;
-  /**
-   * Free-form fields collected by the wizard from the descriptor's
-   * `customFields` definitions. Keys match the descriptor field's `key`.
-   * Mirrored into `process.env[field.envVar]` by `applyApiKeyEnv` so the
-   * provider's factory can read them via the existing env-var convention.
-   */
-  customFields?: Record<string, string>;
-}
-interface OAuthCredential {
-  kind: 'oauth';
-  access: string;
-  refresh?: string;
-  expires?: number;
-  /** Provider-specific extras (e.g. OpenAI Codex `accountId`). */
-  [extra: string]: unknown;
-}
-type ProviderCredential = ApiKeyCredential | OAuthCredential;
-/** Top-level shape of `credentials.json` — keys are credential-file keys. */
-type CredentialsFile = Record<string, ProviderCredential>;
-/**
- * Resolve the credentials file path given the resolved TUI data directory
- * (typically `~/.zidane`, i.e. `config.paths.dir`).
- *
- * Matches the convention used elsewhere in the TUI (sessions.db, state.json)
- * so a single `ZIDANE_STORAGE_DIR` override moves the entire data root.
- */
-declare function credentialsPath(dataDir: string): string;
-/**
- * Read credentials from disk.
- *
- * Returns `{}` when the file is missing or corrupt (last-ditch tolerance —
- * a hand-edit gone wrong shouldn't lock the user out of re-authing). On first
- * call with no file present, attempts a migration from `cwd/.credentials.json`
- * (the legacy location used by `bun run auth`).
- */
-declare function readCredentials(dataDir: string): CredentialsFile;
-/** Read a single provider's credential (translating via the descriptor). */
-declare function readProviderCredential(dataDir: string, descriptor: ProviderDescriptor): ProviderCredential | undefined;
-/**
- * Both stored credentials for a provider: `active` is the one every reader
- * resolves, `alternate` is the stored-but-not-preferred one (if any).
- */
-declare function readProviderCredentialPair(dataDir: string, descriptor: ProviderDescriptor): {
-  active?: ProviderCredential;
-  alternate?: ProviderCredential;
-};
-/**
- * Write credentials atomically (write-then-rename) with mode 0o600.
- *
- * Atomic on the same filesystem — readers either see the previous file or the
- * new one, never a half-written intermediate. Creates the parent dir if needed
- * (first launch on a fresh machine: `~/.zidane/` may not exist yet).
- */
-declare function writeCredentials(dataDir: string, creds: CredentialsFile): void;
-/**
- * Store a credential as the provider's preferred one.
- *
- * A credential of the OTHER kind already in the canonical slot is demoted to
- * {@link alternateCredKey}, not destroyed: authenticating with OAuth used to
- * silently delete a working API key (and vice versa), leaving the user to
- * re-enter it. Replacing a credential of the SAME kind is a plain overwrite —
- * that's a re-auth, not a second source.
- *
- * The pair holds AT MOST ONE credential of each kind. A same-kind alternate is
- * therefore stale — no code path here can produce one, but a file written by an
- * older build can carry it, and it would surface as two identical source rows
- * that "switch" between each other. Dropping it on the next write self-heals.
- */
-declare function setProviderCredential(dataDir: string, descriptor: ProviderDescriptor, cred: ProviderCredential): void;
-/**
- * Make the provider's stored `source` credential the preferred one.
- *
- * No-op unless a credential of that kind is sitting in the alternate slot, so
- * calling it for the already-active source is harmless.
- */
-declare function setPreferredCredential(dataDir: string, descriptor: ProviderDescriptor, source: ProviderCredential['kind']): void;
-/**
- * Sign a provider out — drops BOTH stored credentials.
- *
- * "Signed out" has to mean the provider resolves nothing afterwards, which is
- * what this has always guaranteed and what callers named it for; promoting the
- * alternate instead would silently leave the provider authenticated through the
- * other source. Callers that want the fall-back behavior can read the pair
- * first ({@link readProviderCredentialPair}) and re-store the survivor.
- */
-declare function removeProviderCredential(dataDir: string, descriptor: ProviderDescriptor): void;
-/**
- * Reconcile `process.env` with the stored credentials so the harness providers
- * pick up the wizard's output via their existing env-var resolution. Called
- * once at TUI launch after the credentials file has been resolved.
- *
- * **Precedence: stored credential > ambient env.** When the user has run the
- * auth wizard, that's an explicit, recent action — it MUST win over whatever
- * ambient value is already in `process.env`. Otherwise an upgrade reliably
- * breaks for anyone whose cwd happens to contain a stale `.env`: Bun
- * auto-loads `.env` from cwd into `process.env` before our code runs, the
- * legacy `bun run auth` used to upsert tokens into `cwd/.env`, and even a
- * one-off `export ANTHROPIC_API_KEY=…` from months ago in the user's shell rc
- * can outlive its usefulness. None of those should override a key the user
- * just typed into the wizard.
- *
- * Three cases per registered provider with an `envKey`:
- *
- *   1. Stored `kind: 'apikey'` → overwrite env with the stored value. Wizard
- *      wins. A debug log fires when this clobbers a different ambient value.
- *   2. Stored `kind: 'oauth'`  → DELETE env, so {@link resolveOAuthApiKey}
- *      falls through to the file-read + refresh path. A stale OAuth token
- *      in env would otherwise short-circuit refresh and get rejected.
- *   3. No stored entry → leave env alone. Env-only setups (no wizard run yet,
- *      hosts driving zidane purely from secrets management) keep working.
- *
- * To opt out and force ambient env to win again, the user signs the provider
- * out via the wizard (which deletes the stored entry → case 3 above).
- *
- * Descriptors without an `envKey` (OAuth-only providers, custom providers
- * that bypass env-var resolution) are skipped silently.
- */
-declare function applyApiKeyEnv(dataDir: string, registry: Readonly<Record<string, ProviderDescriptor>>, opts?: {
-  log?: (message: string) => void;
-}): void;
-//#endregion
-//#region src/chat/discovery-context.d.ts
-interface DiscoveryContextValue {
-  /** Parsed `SkillConfig[]` from project + user scan paths. */
-  skillsCatalog: readonly SkillConfig[];
-  /**
-   * Agent Plugins loaded from `.agents/plugins` / `.{prefix}/plugins`
-   * (project + user). Includes rejected plugins — they render as read-only
-   * diagnostics rather than vanishing.
-   */
-  pluginsCatalog: readonly DiscoveredPlugin[];
-  /** Parsed `mcps.json` entries. */
-  mcpsCatalog: readonly DiscoveredMcp[];
-  /** Non-fatal parse errors from `mcps.json` lookups. */
-  mcpsErrors: readonly DiscoveryError[];
-  /**
-   * Per-server full tool catalog from the on-disk cache (see
-   * `chat/mcp-tools-cache.ts`). Updated as MCP servers bootstrap and
-   * fire the `mcp:tools:list` hook. Missing key → no cache yet; the
-   * settings UI surfaces an empty-state row under the expanded server.
-   */
-  mcpToolsByServer: Record<string, readonly McpToolSchema[]>;
-  /** Current file walk results — empty until lazy-load lands. */
-  filesCatalog: readonly FileEntry[];
-  /** Force a fresh skills rescan. Resolves once state is committed. */
-  refreshSkills: () => Promise<void>;
-  /** Force a fresh plugin rescan. Resolves once state is committed. */
-  refreshPlugins: () => Promise<void>;
-  /**
-   * Re-parse `mcps.json`. Sync-shaped under the hood, async for symmetry.
-   * Resolves `true` when the catalog actually changed (a publish that
-   * schedules downstream agent rebuilds), `false` on a fingerprint no-op
-   * or scan failure — callers that arm rebuild-coupled state (e.g. the
-   * add-MCP auto-login) disarm on `false`.
-   */
-  refreshMcps: () => Promise<boolean>;
-  /** Force a fresh file walk. Wired into a future "refresh files" affordance. */
-  refreshFiles: () => Promise<void>;
-  /** Idempotent first-load trigger for skills (used by `/` popover + modal mount). */
-  ensureSkills: () => Promise<readonly SkillConfig[]>;
-  /** Idempotent first-load trigger for files (used by `@` popover). */
-  ensureFiles: () => Promise<readonly FileEntry[]>;
-}
-declare function DiscoveryProvider({
-  value,
-  children
-}: {
-  value: DiscoveryContextValue;
-  children: ReactNode;
-}): import("react").JSX.Element;
-/**
- * Read live discovery state + actions. Throws if used outside a
- * `<DiscoveryProvider>` — discovery is a load-bearing dependency for
- * settings + completion popovers; bailing loud here surfaces wiring
- * mistakes at mount instead of producing empty catalogs at first
- * keystroke.
- */
-declare function useDiscovery(): DiscoveryContextValue;
-/**
- * Non-throwing variant — returns `null` when no provider is mounted.
- * Used by composable modals (`<SettingsModal>`, …) that accept catalog
- * props as a fallback for embedders who don't wire the full TUI
- * shell. The in-app flow always mounts `<DiscoveryProvider>` so the
- * modal sees live state; standalone embeds get the prop snapshot.
- */
-declare function useDiscoveryOptional(): DiscoveryContextValue | null;
-//#endregion
-//#region src/chat/discovery-slot.d.ts
-/**
- * Stale-while-revalidate catalog slot.
- *
- * One slot per (catalog kind, projectDir) pin. Holds the first-load
- * promise + a `lastScannedAt` timestamp + an in-flight `refreshing`
- * promise. Idempotent across concurrent callers, safe to rotate when
- * the project changes (the slot's `abort` controller cancels in-flight
- * walks and the `.then` guards drop stale results).
- *
- * Renderer-agnostic. AppShell wraps it in React refs so React closures
- * stay stable; a non-TUI shell can use it directly against its own
- * state propagation.
- *
- * Contract:
- *   - `ensure()` — kick the first load if not started; return the
- *     cached promise. On subsequent calls, if `Date.now() -
- *     lastScannedAt >= throttleMs` and no refresh is in flight, kick
- *     a background revalidate that calls `onLoad(fresh)` when it
- *     resolves. The original first-load promise still resolves with
- *     the first walk's contents — consumers reading live state
- *     elsewhere (React state) see the refreshed catalog.
- *   - `refresh()` — force a rescan now, bypassing the throttle.
- *     De-duplicates: if a refresh is already in flight, returns the
- *     same promise.
- *   - `abort()` — cancel any in-flight walk and detach. After this
- *     the slot is dead; callers should rotate to a new slot.
- *   - `dispose()` — alias of `abort()`, named for symmetry with
- *     cleanup callbacks.
- *
- * No state is exposed except through promises + the host's `onLoad`
- * callback; the slot doesn't try to be a store, only a coordinator.
- */
-/** Walk function — takes an abort signal, returns the discovered list. */
-type Walk<T> = (signal: AbortSignal) => Promise<readonly T[]>;
-/** Notification: a fresh walk has resolved. Host is expected to commit to its own state store. */
-type Commit<T> = (items: readonly T[]) => void;
-interface DiscoverySlotOptions<T> {
-  /** Discover function — runs the actual FS / network walk. */
-  walk: Walk<T>;
-  /** Commit hook — receives every successful walk's result (first + refreshes). */
-  onLoad: Commit<T>;
-  /**
-   * Min interval between background refreshes triggered by `ensure()`.
-   * Default: 3_000ms. `refresh()` ignores this — it's the user's
-   * explicit-intent path.
-   */
-  throttleMs?: number;
-  /** Optional error sink. Defaults to no-op; useful for `debugLog`. */
-  onError?: (err: unknown, phase: 'first-load' | 'refresh') => void;
-}
-interface DiscoverySlot<T> {
-  /**
-   * Kick the first load (idempotent). Returns the first-load promise
-   * once it exists. Schedules a background refresh if past throttle.
-   */
-  ensure: () => Promise<readonly T[]>;
-  /** Force-refresh now. De-duped across concurrent callers. */
-  refresh: () => Promise<void>;
-  /** True if a refresh is currently running. */
-  isRefreshing: () => boolean;
-  /** Cancel in-flight work + detach. Idempotent. */
-  abort: () => void;
-}
-declare function createDiscoverySlot<T>(options: DiscoverySlotOptions<T>): DiscoverySlot<T>;
-//#endregion
-//#region src/chat/footer-hints.d.ts
-/**
- * Options bag for {@link buildHints}. Flat shape so call sites read as a
- * checklist of "what state do I have to surface" — easy to thread
- * through React `useMemo` deps and to construct fresh in tests.
- */
-interface BuildHintsOptions {
-  screen: Screen;
-  busy: boolean;
-  pending: boolean;
-  /**
-   * True when a LIVE pending interaction is on screen (agent is mid-run,
-   * awaiting the tool's Promise). Same nav hints as the safe-mode
-   * approval picker — esc aborts the run.
-   */
-  pendingInteractionLive: boolean;
-  /**
-   * True when the chat screen is showing a resumed (not live) pending
-   * interaction. The agent isn't running; esc leaves the form without
-   * persisting a response, so the hint reads "leave for later" — the
-   * session re-enqueues the same interaction on next activation.
-   */
-  pendingInteractionResumed: boolean;
-  currentSession: SessionMeta | null;
-  hasMultipleAgents: boolean;
-  /**
-   * Chat-screen chrome density — `'minimal'` collapses the idle chat
-   * hint row to just `agent / model / keybindings`. Busy / pending /
-   * select-turn / queue states keep their full hint sets because those
-   * affordances are load-bearing (abort, navigate, approve).
-   */
-  uiMode: Settings['uiMode'];
-  modelLabel: string | null;
-  modelColor: string;
-  /** Current reasoning effort label, or `null` when the model has no reasoning knob. */
-  effortLabel: string | null;
-  effortColor: string;
-  /** Foreground for the `/n` chord that introduces the effort label. */
-  effortKeyColor: string;
-  /**
-   * Comma-joined labels of the enabled model options (e.g. `'fast'`), or `null`
-   * when none are on. Appended after the effort label in the model chord — when
-   * the model has no reasoning knob, it rides the chord on its own.
-   */
-  modelOptionsLabel?: string | null;
-  agentLabel: string;
-  agentColor: string;
-  /**
-   * Resolved keybindings — every hint key string flows through this so
-   * a user-level rebind (e.g. `"openSettings": "ctrl+p"`) shows up live
-   * in the bottom bar without us hard-coding `'ctrl+o'`.
-   */
-  keybindings: KeyBindings;
-  /**
-   * Number of currently-dispatching tool calls. Drives the
-   * `<cancelToolCall> cancel tool` chip in the `busy` hint row — without
-   * it, the binding stays inert and there's no point advertising the
-   * shortcut. Falls back to "no chip" when no tools are in flight
-   * (model is mid-stream but hasn't dispatched yet).
-   */
-  inFlightToolCount: number;
-  /**
-   * Number of currently-active skills. Drives the footer's
-   * `✦ N skill(s)` chip on the chat screen — purely informational,
-   * a passive surface for "tool restrictions are in effect". Hidden
-   * when `0` so the row stays uncluttered for the common case.
-   */
-  activeSkillCount: number;
-  /** Foreground for the skills chip (typically `COLOR.brand`). */
-  skillsChipColor: string;
-  /**
-   * Progress label for the todo chip (`"2/5"` from `todoProgressLabel`), or
-   * `null` to hide it.
-   *
-   * This replaced a full-width bar that printed the in-progress todo's TITLE
-   * ABOVE the prompt. As a `Hint` it inherits the row's click-to-keypress
-   * contract for free (`dispatchHintKey`), so clicking it opens the list the
-   * same way `ctrl+t` does — and it sits below the prompt like every other
-   * control instead of pushing the prompt down.
-   */
-  todoProgress: string | null;
-  /**
-   * Pre-built `↑ vX.Y.Z` chip from `buildUpdateHint(useUpdateCheck())`,
-   * or `null` when no update is available. Always last in the chat-screen
-   * row so it's the first to drop when the terminal narrows.
-   */
-  updateHint: Hint | null;
-  /**
-   * Pre-built prompt-cache toast, non-null only for a few seconds after a
-   * `'cache:break'` hook fired (the host owns the visibility timer and the
-   * severity split): warn-colored `⚡ cache break · <culprit> · +Nk tok · ~$0.48`
-   * for attributable breaks, dim `⚡ cache expired · +Nk tok · ~$0.48` for
-   * byte-stable TTL expiry — routine across human think-time, so it must not
-   * cry wolf. Sits beside `updateHint` at the droppable end of the row: a
-   * transient cost signal, not an action.
-   */
-  cacheBreakHint?: Hint | null;
-  /**
-   * Sessions-screen list scope — `true` when the list spans all
-   * projects. Drives the `tab` hint's label, which advertises the scope
-   * the toggle switches TO. Optional so non-sessions callers can omit it.
-   */
-  sessionsScopeAll?: boolean;
-}
-/**
- * Build the footer's shortcut hints for the current screen. On the chat
- * screen the model id rides next to its `ctrl+m` shortcut and the agent
- * label rides next to `shift+tab`, each in its accent color — the bar
- * doubles as the status display without needing separate badges. When
- * the active model exposes reasoning, the `ctrl+m` hint grows a
- * secondary `/n` chord with the current effort label, surfacing the
- * effort picker as a discoverable, in-place affordance.
- */
-declare function buildHints(options: BuildHintsOptions): Hint[];
-/**
- * Shorten a binding spec for display as a "chord continuation" — the
- * `/n` after `ctrl+m model` in the chat footer. We only strip the
- * `ctrl+` prefix so user-customized chords (`alt+n`, `meta+shift+n`)
- * still render in full. Falls back to the verbatim spec when no
- * `ctrl+` prefix is found, which keeps the visual contract honest:
- * the rendered key always matches the bound trigger.
- */
-declare function shortChord(spec: string): string;
-//#endregion
-//#region src/chat/generate-title.d.ts
-interface GenerateSessionTitleOptions {
-  provider: Provider;
-  /** Model id used for the call. */
-  model: string;
-  /** Conversation history to summarize. Empty → throws synchronously. */
-  turns: readonly SessionTurn[];
-  /**
-   * Cap on how many TRAILING turns to feed the model. Defaults to 10.
-   * The session's opening user turn is always included on top when the
-   * window cuts it off (see `renderTitleTranscript`).
-   */
-  maxTurns?: number;
-  /** Optional cancellation signal — forwarded to the provider's stream. */
-  signal?: AbortSignal;
-}
-/**
- * Drive the provider's `stream()` once and return a concise title for
- * the conversation represented by `turns`. Throws when:
- *   - `turns` contains no text-bearing content (nothing to summarize),
- *   - the provider stream completes with no output text,
- *   - the model answered the transcript instead of labeling it (see
- *     {@link cleanTitle}) — a failed generation the caller retries,
- *   - `signal` is aborted (rethrown verbatim).
- *
- * Output is trimmed, single-line, with surrounding quotes / trailing
- * punctuation stripped, and truncated to `TITLE_MAX_CHARS`.
- */
-declare function generateSessionTitle({
-  provider,
-  model,
-  turns,
-  maxTurns,
-  signal
-}: GenerateSessionTitleOptions): Promise<string>;
-/**
- * Decide whether a session is ready for one-shot automatic titling.
- *
- * Returns `true` iff the conversation has had its first exchange — at
- * least two turns, i.e. the opening user message plus the assistant's
- * reply (this is exactly the "N turns" count the sessions list shows) —
- * AND no explicit title has been set yet. An existing `metadata.title`
- * (a previous auto-generation, or a manual title from the session-details
- * "generate title" action) is never clobbered.
- *
- * Pure + total. The runtime layers its own "is one already in flight?"
- * and "is a provider picked?" guards on top of this; the predicate only
- * encodes the content-level rule so it can be pinned in tests without a
- * mock provider — same rationale as the exported {@link cleanTitle}.
- */
-declare function shouldAutoGenerateTitle(turns: readonly SessionTurn[], metadata?: Record<string, unknown>): boolean;
-/**
- * Normalize a model-generated title into the shape we want to persist:
- *
- *   - Collapse internal whitespace + take the first line only (some
- *     models emit "Title: foo\n\nReason: …" despite instructions).
- *   - Strip surrounding quotes, a leading `Title:` / `title -` preamble,
- *     and a `user:` / `assistant:` role prefix echoed from the transcript
- *     — repeatedly, in any nesting order.
- *   - Reject placeholders and answer-shaped replies (see
- *     {@link ANSWER_SHAPED_OPENER}) by throwing.
- *   - Strip trailing punctuation (`.`, `!`, `?`) — titles read cleaner
- *     without it.
- *   - Truncate to `TITLE_MAX_CHARS` with a trailing `…` when over.
- *
- * Exported as `cleanTitle` so tests can pin the normalization rules
- * without going through a mock provider.
- */
-declare function cleanTitle(raw: string): string;
-//#endregion
-//#region src/chat/mcp-auth-state.d.ts
-/**
- * Per-server MCP OAuth status tracking, decoupled from the renderer.
- *
- * The TUI keeps a `Record<serverName, McpAuthStatus>` so it can render a
- * "needs-auth" / "authorizing" / "error" badge in the MCP picker. The
- * status map is driven entirely by hooks fired from the agent's MCP
- * bootstrap + the interactive `loginMcpServer` flow — the reducer below
- * is pure, makes no FS or network calls, and is shared between the live
- * TUI store and the test harness.
- *
- * Status lifecycle:
- *
- *   idle ──mcp:connect──▶  authed
- *                         (bootstrap succeeded with stored tokens)
- *
- *   idle ──mcp:auth:required──▶ needs-auth
- *                              (bootstrap saw no/invalid tokens)
- *
- *   needs-auth ──login()──▶ authorizing ──mcp:auth:url──▶ authorizing(url)
- *                                       ──mcp:auth:success──▶ authed
- *                                       ──mcp:auth:error──▶ error
- *
- *   any         ──logout──▶ idle
- *
- * Multiple servers progress through the lifecycle independently; the map
- * is keyed by `McpServerConfig.name`.
- */
-type McpAuthStatus = {
-  kind: 'idle';
-} | {
-  kind: 'needs-auth';
-  reason: 'no-tokens' | 'auto-promoted';
-} | {
-  kind: 'authorizing';
-  url?: string;
-} | {
-  kind: 'authed';
-} | {
-  kind: 'error';
-  error: string;
-} | {
-  kind: 'bootstrap-error';
-  error: string;
-};
-/**
- * Map of server name → status. `idle` is the implicit default for any
- * server NOT present in the map, so the renderer treats `undefined` as
- * `{ kind: 'idle' }` and the map can stay sparse.
- */
-type McpAuthStateMap = Readonly<Record<string, McpAuthStatus>>;
-/**
- * Events the reducer accepts. Names mirror the agent hooks 1:1 plus two
- * UI-only verbs (`login:start` / `login:cancel`) so the renderer can
- * optimistically flip a row to `authorizing` before the SDK has emitted
- * `mcp:auth:url` — useful when the loopback callback is slow to bind.
- */
-type McpAuthEvent = {
-  type: 'auth-required';
-  name: string;
-  reason: 'no-tokens' | 'auto-promoted';
-} | {
-  type: 'auth-url';
-  name: string;
-  url: string;
-} | {
-  type: 'auth-success';
-  name: string;
-} | {
-  type: 'auth-error';
-  name: string;
-  error: string;
-} | {
-  type: 'bootstrap-error';
-  name: string;
-  error: string;
-} | {
-  type: 'connected';
-  name: string;
-} | {
-  type: 'login:start';
-  name: string;
-} | {
-  type: 'login:cancel';
-  name: string;
-} | {
-  type: 'logout';
-  name: string;
-} | {
-  type: 'reset';
-  name: string;
-};
-/**
- * Apply one event to the state map. Pure, immutable — returns a new map
- * with only the affected key reassigned.
- *
- * State transitions are simple "last write wins"; we don't gate (e.g.) a
- * `login:start` from overriding `authorizing` because the loop layer
- * never doubles those up — interactive login is serialized in the TUI.
- */
-declare function reduceMcpAuth(state: McpAuthStateMap, event: McpAuthEvent): McpAuthStateMap;
-/** Convenience getter — treats `undefined` as `idle`. */
-declare function getMcpAuthStatus(state: McpAuthStateMap, name: string): McpAuthStatus;
-//#endregion
-//#region src/chat/mcp-auth-context.d.ts
-/**
- * Mount once near the top of the React tree (above `ModalRoot`). Children
- * use `useMcpAuthState()` to read and `useMcpAuthDispatch()` to fire events.
- */
-declare function McpAuthProvider({
-  children
-}: {
-  children: ReactNode;
-}): import("react").JSX.Element;
-declare function useMcpAuthState(): McpAuthStateMap;
-declare function useMcpAuthDispatch(): (event: McpAuthEvent) => void;
-//#endregion
-//#region src/chat/mcp-credentials.d.ts
-declare function mcpCredentialsPath(dataDir: string): string;
-/**
- * Build a file-backed `McpCredentialStore`. All per-server reads / writes
- * funnel through the single `mcp-credentials.json` file — this keeps
- * concurrent flows for different servers from clobbering each other since
- * each save reads-modifies-writes the full file atomically.
- *
- * Two flows for the same server name CAN race (last write wins). MCP OAuth
- * flows are user-driven and serial in practice (one login modal at a time),
- * so this is acceptable; a per-server file split + cross-process lock would
- * be required to handle a multi-process scenario.
- */
-declare function createFileMcpCredentialStore(dataDir: string): McpCredentialStore;
-/**
- * Convenience patches for individual sub-fields. The provider class uses
- * these so a `saveTokens` call doesn't have to round-trip `clientInformation`
- * + `discoveryState` it never touched.
- */
-declare function patchMcpCredential(store: McpCredentialStore, name: string, patch: Partial<McpCredentialEntry>): void;
-//#endregion
-//#region src/chat/mcp-rows.d.ts
-/**
- * One row in the flattened MCP settings list. Three kinds:
- *
- *   - `'server'`     — server header with the chevron + checkbox +
- *                      transport detail. Always present.
- *   - `'tool'`       — checkbox + description for a tool advertised
- *                      by the parent server. Present only when the
- *                      server is expanded AND its tool cache is
- *                      populated.
- *   - `'tool-empty'` — placeholder shown when an expanded server
- *                      has no cached tool list yet (first launch
- *                      before any session has bootstrapped the
- *                      server). Lets the renderer surface a
- *                      one-line "send a prompt to populate" hint
- *                      WITHOUT changing the server's expand
- *                      affordance.
- */
-type VisibleMcpRow = {
-  kind: 'server';
-  entry: DiscoveredMcp;
-} | {
-  kind: 'tool';
-  serverName: string;
-  tool: McpToolSchema;
-} | {
-  kind: 'tool-empty';
-  serverName: string;
-};
-/**
- * Flatten a server catalog plus the per-server expanded set into the
- * visible-row list a renderer cycles through.
- *
- *   - `catalog`         — filtered / ordered server list (post-search,
- *                         post-allow-list).
- *   - `expanded`        — names of servers whose tool list is open.
- *                         Servers not in this set render as a single
- *                         server-header row.
- *   - `toolsByServer`   — per-server full tool catalog (from
- *                         `chat/mcp-tools-cache.ts`). Missing key →
- *                         `'tool-empty'` placeholder under the
- *                         expanded server.
- */
-declare function buildVisibleMcpRows(catalog: readonly DiscoveredMcp[], expanded: ReadonlySet<string>, toolsByServer: Record<string, readonly McpToolSchema[]>): VisibleMcpRow[];
-/**
- * Server name a row "belongs to" for catalog / toggle / auth lookups.
- * For a server row that's its own name; for tool / tool-empty rows
- * it's the parent server's name.
- */
-declare function parentServerName(row: VisibleMcpRow): string;
-/**
- * Index in `rows` of the server header for the given parent name. `-1`
- * when not present. Used by collapse handlers to snap the cursor up
- * to the parent BEFORE shrinking the row list — otherwise the cursor
- * would land on whichever sibling row now occupies the same flat
- * index.
- */
-declare function indexOfServerRow(rows: readonly VisibleMcpRow[], parentName: string): number;
-//#endregion
-//#region src/chat/mcp-tool-toggle.d.ts
-interface McpToolToggleSet {
-  /** Live set of ENABLED tool names — `Set` for O(1) `has`. */
-  enabledSet: ReadonlySet<string>;
-  /** Flip one tool on/off; persists immediately via `setSetting`. */
-  toggle: (toolName: string) => void;
-}
-/**
- * Bind a single MCP server's per-tool toggle to
- * `Settings.disabledMcpTools[serverName]`.
- *
- * `catalog` is the FULL list of tools the server advertises (i.e. the
- * cached `listTools()` payload from `chat/mcp-tools-cache.ts`). The
- * hook needs it both to render `enabledSet` (every catalog tool not in
- * the persisted deny-list) and to garbage-collect stale deny-list
- * entries on every write.
- */
-declare function useMcpToolToggleSet(opts: {
-  serverName: string;
-  catalog: readonly McpToolSchema[];
-}): McpToolToggleSet;
-/**
- * Bind every server in `catalogByServer` to its own per-tool toggle in
- * a single hook call. Returns a `serverName → McpToolToggleSet` map.
- *
- * Use this when a host needs handlers for multiple servers at once
- * (the TUI's MCP settings panel keyboard dispatcher is the canonical
- * example) — calling {@link useMcpToolToggleSet} in a `for` / `.map`
- * over a dynamic catalog would change the hook-call order whenever a
- * server is added or removed, violating React's rules-of-hooks. This
- * hook calls `useMemo` exactly once regardless of server count.
- *
- * Servers absent from `catalogByServer` get no entry in the result.
- * The persisted deny-list still keeps their entries on disk — they
- * just stay invisible to this consumer until the catalog re-includes
- * them.
- */
-declare function useMcpToolToggleMap(opts: {
-  catalogByServer: Record<string, readonly McpToolSchema[]>;
-}): Record<string, McpToolToggleSet>;
-/**
- * Pure factory shared by both hook flavors. Captures `persistedDenyAll`
- * + `setDisabledMcpTools` at the call site so toggle handlers stay
- * referentially stable across renders that don't touch the underlying
- * settings entry — important for `useKeyboard` to avoid re-binding on
- * every catalog change.
- *
- * Exported for direct use by non-React consumers (CLI, GUI shells)
- * that want the same write semantics without the hook plumbing.
- */
-declare function buildToolToggle(args: {
-  serverName: string;
-  catalogNames: readonly string[];
-  persistedDenyAll: Settings['disabledMcpTools'];
-  setDisabledMcpTools: (next: Settings['disabledMcpTools']) => void;
-}): McpToolToggleSet;
-//#endregion
-//#region src/chat/mcp-tools-cache.d.ts
-/**
- * One server's cached entry.
- *
- * - `tools` — verbatim copy of the raw `tools/list` payload (pre any
- *   `disabledTools` / `toolFilter` filtering). The settings UI ranges
- *   over this to render the full server surface; the host applies its
- *   own deny-list on top via `Settings.disabledMcpTools` (see
- *   `buildMcpServers` in `mcps-discovery.ts`).
- * - `updatedAt` — ms-epoch of the bootstrap that populated this entry.
- *   Useful for "last seen N hours ago" affordances and for cache
- *   eviction policies a host might layer on later.
- * - `transport` — informational only; lets the UI distinguish a stdio
- *   server's tool list from an http server with the same name in
- *   "stale catalog" warnings.
- */
-interface CachedMcpToolList {
-  tools: McpToolSchema[];
-  updatedAt: number;
-  transport: 'stdio' | 'sse' | 'streamable-http';
-}
-/**
- * `serverName → catalog`. Map shape on disk so adding / removing
- * servers is an O(1) JSON edit instead of an array rewrite.
- */
-type McpToolsCache = Record<string, CachedMcpToolList>;
-/**
- * Resolve the on-disk cache path under a host's data directory. Exposed
- * for tests + advanced hosts that want to inspect / delete the file
- * without re-implementing the path convention.
- */
-declare function mcpToolsCachePath(dataDir: string): string;
-/**
- * Best-effort cache read. Returns `{}` when the file is missing, when
- * JSON.parse rejects, or when the top-level shape isn't a plain object —
- * a corrupt cache must never crash the host on startup.
- *
- * Per-entry shape validation is light (presence of an array `tools`):
- * deeper validation would lock the cache to a single zidane version,
- * which is the opposite of what a long-lived cache wants. Entries that
- * survive the light check feed back through `McpToolSchema`'s `unknown`
- * `inputSchema` so downstream readers stay tolerant of upstream churn.
- */
-declare function loadMcpToolsCache(opts: {
-  dataDir: string;
-}): McpToolsCache;
-/**
- * Atomic full-cache write. Used by {@link subscribeMcpToolsCache} after
- * each upsert. Failures bubble up as the underlying `writeFileAtomic`
- * error — the caller logs under `ZIDANE_DEBUG` and swallows.
- */
-declare function saveMcpToolsCache(opts: {
-  dataDir: string;
-  cache: McpToolsCache;
-}): void;
-/**
- * Drop entries for one or more servers, or wipe the cache when no
- * server is named. Idempotent — entries that aren't present are
- * silently skipped. Returns the resulting cache so callers can refresh
- * any in-memory mirror without re-reading from disk.
- *
- * Intended for a future "rescan server" affordance in the settings UI
- * (clear → trigger a real bootstrap → cache repopulates on the
- * `mcp:tools:list` hook).
- */
-declare function clearMcpToolsCache(opts: {
-  dataDir: string;
-  serverNames?: readonly string[];
-}): McpToolsCache;
-/**
- * Subscribe to `mcp:tools:list` and persist every successful bootstrap
- * into the on-disk cache. Returns an unsubscribe function — call it
- * during agent teardown so a long-lived host (Settings modal that
- * outlives one agent) doesn't accumulate stale subscribers.
- *
- * Each write loads the current cache, upserts the named entry, then
- * atomic-writes the full file. The read-modify-write is safe under
- * Node single-threaded event loop semantics — concurrent bootstraps in
- * the same process serialize through the hook bus.
- *
- * Optional `onChange` callback fires synchronously after every
- * successful disk write with the entry that was just upserted. Lets a
- * React host trigger a state refresh without polling the disk.
- *
- * Write failures are swallowed (logged under `ZIDANE_DEBUG`): the cache
- * is an accelerator, not a correctness boundary. If the disk is full
- * the agent run still works — the settings UI just shows stale data
- * until the next successful write.
- */
-declare function subscribeMcpToolsCache(hooks: Hookable<AgentHooks>, opts: {
-  dataDir: string;
-  onChange?: (entry: {
-    name: string;
-  } & CachedMcpToolList) => void;
-}): () => void;
-/**
- * Force-refresh the on-disk tools cache by opening a transient MCP
- * connection to every server, capturing the `mcp:tools:list` hook on
- * the way through, and closing the connection immediately. The
- * underlying `connectMcpServers` runs every server's bootstrap in
- * parallel, so the wall-clock cost collapses to the slowest server.
- *
- * Two design choices worth noting:
- *
- *   - **Shared hook bus.** The caller passes the SAME `Hookable`
- *     instance that has the cache subscriber wired (typically
- *     `agent.hooks` after `subscribeMcpToolsCache(agent.hooks, …)`
- *     ran). That way `mcp:tools:list` fires on the bus the
- *     subscriber is listening to and the cache lands on disk
- *     without a separate write path.
- *   - **Transient, NOT shared with the live agent.** The connection
- *     opened here is closed immediately. The agent's own MCP
- *     connection is untouched, so a refresh never disrupts an
- *     in-flight tool call.
- *
- * The function intentionally swallows per-server failures (they're
- * already surfaced via `mcp:bootstrap:end ok: false` for any host
- * that wired the listener). The Promise resolves once every server's
- * bootstrap settles, success or otherwise.
- */
-declare function refreshMcpToolsCatalog(opts: {
-  servers: readonly McpServerConfig[];
-  hooks: Hookable<AgentHooks>;
-  /**
-   * Same OAuth-provider factory the agent's bootstrap uses. Required
-   * for OAuth-tagged servers — without it those servers fire
-   * `mcp:auth:required` and skip, and their tools never refresh.
-   */
-  buildAuthProvider?: (config: McpServerConfig) => OAuthClientProvider | undefined;
-}): Promise<void>;
-//#endregion
-//#region src/chat/mcps-write.d.ts
-type McpConfigScope = 'project' | 'user';
-/**
- * Resolve the CANONICAL write target for a scope — always the
- * `.{prefix}/mcps.json` flavor, never `.agents` (we don't own that
- * convention) and never `mcp.json` (Cursor's spelling is read-compat
- * only).
- */
-declare function mcpsWritePath(scope: McpConfigScope, opts?: {
-  cwd?: string;
-  home?: string;
-  prefix?: string;
-}): string;
-interface UpsertMcpResult {
-  /** The file written. */
-  path: string;
-  /** `updated` when an entry of the same name was replaced, else `added`. */
-  action: 'added' | 'updated';
-}
-/**
- * Upsert `entry` (matched by `name`) into the mcps config at `filePath`.
- * Preserves the existing file's shape and every field the writer doesn't
- * own; creates a canonical flat-array file when none exists. Throws on
- * malformed JSON — silently rewriting a broken file the user is mid-edit
- * on would destroy their work.
- */
-declare function upsertMcpServer(filePath: string, entry: McpServerConfig): UpsertMcpResult;
-interface RemoveMcpResult {
-  /** The file rewritten. */
-  path: string;
-}
-/**
- * Remove the entry named `name` from the mcps config at `filePath`,
- * preserving the file's shape and everything else in it — the removal
- * counterpart of {@link upsertMcpServer}. Throws when the file is
- * missing, malformed, an unrecognized shape, or has no entry of that
- * name (the caller shows the message on the settings op line; silently
- * "succeeding" on a no-op would lie about what happened).
- */
-declare function removeMcpServer(filePath: string, name: string): RemoveMcpResult;
-//#endregion
-//#region src/chat/oauth.d.ts
-declare function supportsOAuth(descriptor: ProviderDescriptor): boolean;
-/** True when the provider's OAuth flow needs the user to paste a code back into the TUI (no loopback callback). */
-declare function oauthUsesManualCodePaste(descriptor: ProviderDescriptor): boolean;
-interface OAuthFlowOptions {
-  /** Called when the provider emits its login URL — typically right after the callback server starts. */
-  onUrl: (url: string, instructions?: string) => void;
-  /**
-   * Called when the provider needs a free-form input from the user (paste-the-code flows,
-   * step-up confirmations, etc.). Mirrors pi-ai's `OAuthLoginCallbacks.onPrompt` verbatim
-   * so callers don't lose `placeholder` / `allowEmpty` hints. Required for any provider
-   * with `usesCallbackServer: false` (e.g. Anthropic Claude Pro/Max).
-   */
-  onPrompt?: (prompt: OAuthPrompt$1) => Promise<string>;
-  /**
-   * Called when the provider initiates a device-code flow (e.g. GitHub Copilot).
-   * Surface `userCode` + `verificationUri` so the user can complete the flow in
-   * the browser. Required by pi-ai's `OAuthLoginCallbacks` since 0.75.5 — built-in
-   * Anthropic / OpenAI Codex providers don't fire it today, but third-party
-   * descriptors can.
-   */
-  onDeviceCode?: (info: OAuthDeviceCodeInfo) => void;
-  /**
-   * Called when the provider needs the user to pick between multiple flow options
-   * (e.g. browser vs device-code). Return the chosen option `id`, or `undefined`
-   * to cancel. Required by pi-ai's `OAuthLoginCallbacks` since 0.75.5.
-   */
-  onSelect?: (prompt: OAuthSelectPrompt) => Promise<string | undefined>;
-  /** Called with each progress message from the OAuth flow (token exchange, etc.). */
-  onProgress?: (message: string) => void;
-  /** Abort the in-flight login (e.g. user pressed esc). */
-  signal?: AbortSignal;
-}
-/**
- * Run the OAuth login flow for a provider.
- *
- * Returns the OAuth credentials on success; caller persists them via
- * `setProviderCredential(dataDir, descriptor, { kind: 'oauth', ...credentials })`.
- * Throws when the descriptor has no `oauthProvider` configured.
- */
-declare function runOAuthLogin(descriptor: ProviderDescriptor, options: OAuthFlowOptions): Promise<OAuthCredentials>;
-//#endregion
-//#region src/chat/oauth-redirect.d.ts
-/**
- * Manual OAuth redirect-URL handoff.
- *
- * Users who run zidane over SSH (or behind a proxy / firewall that blocks
- * loopback) can't have the local browser hit the in-process callback server.
- * They CAN, however, copy the URL their browser was redirected to —
- * `http://127.0.0.1:<port>/callback?code=...&state=...` — and paste it back
- * into the TUI.
- *
- * The trick: that URL IS the callback our local server is listening on. We
- * just `fetch()` it ourselves. The server runs in the same process; the
- * request hits its handler exactly as if a real browser had arrived, the
- * OAuth promise (`waitForCode` for pi-ai providers, `startOAuthCallback` for
- * MCP) resolves through the normal happy path, and the upstream flow
- * continues uninterrupted. No new code path inside the OAuth state machine.
- *
- * Defense in depth: we reject anything that isn't a loopback URL — fetching
- * an arbitrary user-pasted URL from inside the agent process would be a
- * trivial SSRF.
- */
-/**
- * The `redirect_uri` the authorization server was told to come back to,
- * read out of the authorization URL itself. That's our loopback callback
- * (`http://127.0.0.1:<port>/callback`) — the UI shows it so an SSH user
- * knows which address to fish out of the browser's URL bar, and
- * {@link normalizeRedirectPaste} uses it to rebuild a full callback URL
- * from a partial paste.
- *
- * Returns `null` when the URL doesn't parse or carries no usable
- * `redirect_uri` — callers degrade to "paste the whole URL".
- */
-declare function redirectUriFromAuthUrl(authUrl: string): URL | null;
-/**
- * Widen what counts as an acceptable paste. The happy path is the full
- * redirect URL out of the browser's address bar, but users on SSH
- * routinely end up holding less than that: some authorization servers
- * render the code on the page instead of redirecting, and copying from a
- * "can't reach this site" error page loses everything but the query.
- *
- * Accepted forms, given the authorization URL for context:
- *
- *   - `http://127.0.0.1:5123/callback?code=x&state=y` — passthrough (any
- *     absolute URL is returned untouched; the loopback guard in
- *     {@link fetchOAuthRedirect} still has final say, so a pasted
- *     `https://evil.test` is rejected there, not silently rewritten).
- *   - `/callback?code=x&state=y` — path + query onto the callback origin.
- *   - `?code=x&state=y` / `code=x&state=y` — query onto the callback URL.
- *   - `x` — a bare authorization code; `state` is taken from the
- *     authorization URL when it carried one (the loopback server forwards
- *     `state` verbatim and the SDK owns verification, so a missing one is
- *     not fatal). Anything with whitespace inside is prose (an error page
- *     fragment), not a code — refused with a clearer error than a server
- *     400 would give.
- *
- * Throws when the input can't be turned into a URL — no `authUrl` context
- * for a partial paste, or an unusable authorization URL.
- */
-declare function normalizeRedirectPaste(pasted: string, authUrl?: string): string;
-interface FetchOAuthRedirectResult {
-  /** Status code from the callback server. 2xx = success. */
-  status: number;
-  /** Best-effort message extracted from the response body (HTML title or trimmed text). */
-  message?: string;
-}
-/**
- * Treat `pasted` as a callback-URL paste. Validates it's a loopback URL,
- * fires a GET, returns the status.
- *
- * Pass `authUrl` (the authorization URL currently on screen) to accept
- * partial pastes — a bare code, a query string, a path — via
- * {@link normalizeRedirectPaste}. Without it only a full absolute URL is
- * accepted, which is the pre-existing contract.
- *
- * Throws when:
- *   - `pasted` doesn't parse as a URL (and can't be completed from `authUrl`).
- *   - The URL host isn't loopback (rejects SSRF).
- *   - The fetch errors out (network, timeout).
- *
- * Returns success/failure for non-2xx responses; the caller decides whether
- * a 4xx is fatal (state mismatch is a 400 the user can retry from).
- */
-declare function fetchOAuthRedirect(pasted: string, options?: {
-  signal?: AbortSignal;
-  timeoutMs?: number;
-  authUrl?: string;
-}): Promise<FetchOAuthRedirectResult>;
-//#endregion
-//#region src/chat/path-display.d.ts
-/**
- * @-completion path display formatter.
- *
- * The `@`-popover walks the project from the git root so the user sees
- * the whole tree regardless of where they launched the TUI. The
- * agent's CWD-resolving tools (`read_file`, `glob`, `edit`, …) read
- * relative paths against `process.cwd()`, which is frequently a
- * subdirectory of that root. Emitting the discovery's raw
- * project-root-relative path into the prompt produces a `<cwd>/<rel>`
- * miss — the bug this helper exists to close.
- *
- * Rule:
- *
- *   - File at `cwd` itself → `.`.
- *   - File under `cwd` (subtree) → forward-slashed CWD-relative,
- *     no `..`.
- *   - File above `cwd` but still inside the project → CWD-relative
- *     with `..` traversal (e.g. `../EDIT_THIS.md`). Shorter and more
- *     scannable than absolute, and the agent's tools resolve both.
- *   - File outside the project (input was passed absolute) → returned
- *     verbatim. Inputs that arrive as project-root-relative strings
- *     are always inside the project by construction, so this branch
- *     only kicks in when a direct caller hands the function an
- *     absolute target.
- *
- * Pure, no I/O, deterministic.
- */
-/**
- * Convert a project-root-relative path (as emitted by `listProjectFiles`)
- * into the form the agent's tools — and the user — will actually find
- * given the current `cwd`.
- *
- * Inputs:
- *   - `projectRelativePath` — forward-slashed, no leading slash. Returned
- *     verbatim when it's empty or already absolute (defensive — the
- *     absolute-input branch is the de-facto "outside the project"
- *     escape; the catalog itself never emits absolute paths).
- *   - `projectRoot` — absolute path of the discovery anchor.
- *   - `cwd` — absolute path of `process.cwd()` at the moment of
- *     insertion.
- *
- * Output is always either an absolute path (only when the input arrived
- * absolute) OR a CWD-relative path. The relative form may include
- * `../` segments when the target sits above `cwd` within the project,
- * which keeps cross-tree references short and scannable
- * (e.g. `../EDIT_THIS.md` instead of `/Users/.../zidane/EDIT_THIS.md`).
- */
-declare function formatPathForCwd(projectRelativePath: string, projectRoot: string, cwd: string): string;
-//#endregion
-//#region src/chat/project-root.d.ts
-/**
- * Git root detection — walks parents from `cwd` looking for a `.git`
- * entry, returning the absolute path of the repo root or `null` when
- * the search reaches the filesystem root.
- *
- * Why parent-walk over `git rev-parse --show-toplevel`:
- *
- *   - Zero dependencies (no shell-out, no git binary requirement,
- *     works even when `git` is missing from `PATH`).
- *   - Pure-sync, deterministic, easy to test against tmp dirs.
- *   - Equally fast in practice — most lookups are a single `existsSync`.
- *
- * Recognizes `.git` as either:
- *
- *   - A directory (standard repo layout).
- *   - A file containing `gitdir: …` (worktrees + submodules).
- *
- * Bare repos (no working tree) are intentionally NOT detected here —
- * the TUI's data dir contract is "project working tree", and a bare
- * repo has no working files to scope sessions against.
- */
-/**
- * Walk parents of `cwd` looking for a `.git` entry. Returns the
- * absolute path of the directory containing `.git`, or `null` when no
- * git repo is found above `cwd`.
- *
- * Stops at the filesystem root (`/`) — no infinite loop on `dirname`'s
- * idempotent root case (`dirname('/')` returns `/`).
- */
-declare function findGitRoot(cwd?: string): string | null;
-//#endregion
-//#region src/chat/provider-usage.d.ts
-/** How long a snapshot stays fresh. Usage windows move in minutes, not seconds. */
-declare const USAGE_CACHE_TTL_MS = 60000;
-/** One rate-limit window, or a credit balance expressed as one. */
-interface ProviderUsageWindow {
-  /** Stable id, e.g. `five_hour`, `seven_day`, `primary`, `credits`. */
-  id: string;
-  /** Short label, e.g. `5h`, `weekly`, `opus weekly`. */
-  label: string;
-  /** 0-100, rounded to one decimal. */
-  usedPercent: number;
-  /** Epoch ms of the window reset, when the provider reports one. */
-  resetsAt: number | null;
-}
-/** Credit balance, where the provider reports one. */
-interface ProviderUsageCredits {
-  remaining: number;
-  /** Total granted. `null` for providers that only report a balance. */
-  total: number | null;
-}
-type ProviderUsageStatus = 'ok' | 'unauthorized' | 'unavailable';
-/** Normalized usage snapshot for one provider. */
-interface ProviderUsageSnapshot {
-  /** Registry key of the provider this describes, e.g. `anthropic`. */
-  providerKey: string;
-  /** Descriptor label, carried so renderers don't re-resolve the registry. */
-  label: string;
-  status: ProviderUsageStatus;
-  /** Plan name when the provider reports one (`plus`, `max`). */
-  plan: string | null;
-  windows: readonly ProviderUsageWindow[];
-  credits: ProviderUsageCredits | null;
-  /** Epoch ms this snapshot was produced. */
-  fetchedAt: number;
-  /** Short failure reason. Set whenever `status !== 'ok'`. */
-  error: string | null;
-}
-/** Which probe a credential key maps to. */
-type UsageSource = 'claude' | 'codex' | 'grok' | 'openrouter';
-/** The probe for a descriptor, or `null` when it has no usage surface. */
-declare function usageSourceFor(descriptor: ProviderDescriptor): UsageSource | null;
-/** Whether this provider can report subscription usage at all. */
-declare function providerUsageSupported(descriptor: ProviderDescriptor): boolean;
-/**
- * The window closest to its ceiling, which is the one that will bite first and
- * the only one a single-line indicator has room for. `null` when the snapshot
- * carries no windows.
- */
-declare function mostConstrainedWindow(snapshot: ProviderUsageSnapshot): ProviderUsageWindow | null;
-/**
- * Drop every cached snapshot. Entries are keyed by credential KEY, not by the
- * token itself, so signing out and back in (or re-authing to another account)
- * would otherwise keep serving the previous account's numbers for the rest of
- * the TTL. The TUI calls this wherever it re-reads credentials.
- */
-declare function clearProviderUsageCache(): void;
-/** Whether the environment forbids usage probes outright. */
-declare function usageChecksOptedOut(env?: NodeJS.ProcessEnv): boolean;
-interface FetchProviderUsageOptions {
-  /** Ignore (and replace) a still-fresh cached snapshot. */
-  refresh?: boolean;
-}
-/**
- * Usage for one provider. `null` means there is nothing to show: the provider
- * has no usage surface, no credential of the kind its probe needs (file or,
- * for API keys, env), or the environment opted out (see
- * {@link usageChecksOptedOut}).
- *
- * Never rejects. Transport and parse failures land in the snapshot.
- */
-declare function fetchProviderUsage(dataDir: string, descriptor: ProviderDescriptor, opts?: FetchProviderUsageOptions): Promise<ProviderUsageSnapshot | null>;
-/**
- * Usage for every registered provider that has both a usage surface and a
- * usable credential, in registry order. What the panel renders.
- */
-declare function fetchAllProviderUsage(dataDir: string, registry: Readonly<Record<string, ProviderDescriptor>>, opts?: FetchProviderUsageOptions): Promise<readonly ProviderUsageSnapshot[]>;
-/**
- * Percent without trailing noise: `43`, `7.5`, `100`. Used by the panel. The
- * footer floors to a whole percent instead (`footerUsagePercent` in
- * `tui/components.tsx`), so a status bar never reads `100%` for `99.9`.
- */
-declare function formatUsagePercent(usedPercent: number): string;
-//#endregion
-//#region src/chat/safe-mode.d.ts
-/**
- * Safe-mode storage + matching for the TUI.
- *
- * Lives at `<dataDir>/projects.json` (default `~/.zidane/projects.json`). Each
- * top-level key is an absolute project directory; the value carries that
- * project's persisted tool-call `safelist`.
- *
- * ```json
- * {
- *   "/Users/me/proj-a": { "safelist": ["read_file", "shell:git:*"] }
- * }
- * ```
- *
- * Two granularities for safelist entries:
- *   - **bare tool name** — `"read_file"` matches every `read_file` call.
- *   - **tool + first-arg token + wildcard** — `"shell:git:*"` matches `shell`
- *     calls whose primary string argument starts with the token `git`
- *     (followed by whitespace or end-of-string). Modelled on Claude Code's
- *     `Bash(git:*)` syntax.
- *
- * A short list of read-only tools is **implicitly safe** without being
- * persisted — see {@link IMPLICITLY_SAFE_TOOLS}.
- */
-interface ProjectEntry {
-  safelist?: string[];
-}
-type ProjectsFile = Record<string, ProjectEntry>;
-/** Resolve `projects.json`'s on-disk path given the TUI data directory. */
-declare function projectsFilePath(dataDir: string): string;
-declare function readProjects(dataDir: string): ProjectsFile;
-declare function writeProjects(dataDir: string, file: ProjectsFile): void;
-/**
- * Append one or more entries to the safelist for `projectDir`, dedup-aware.
- * Accepts a single string or a list (a compound shell command needs one
- * entry per command head — see {@link suggestSafelistEntries}). Writes once
- * and returns the updated entry list (post-write) so callers can render it
- * without re-reading. No write happens when every entry already exists.
- */
-declare function addToSafelist(dataDir: string, projectDir: string, entries: string | readonly string[]): readonly string[];
-/** Read the safelist for one project. Returns `[]` for unknown projects. */
-declare function getSafelist(dataDir: string, projectDir: string): readonly string[];
-/**
- * Tools that always pass without prompting. Four categories:
- *
- *   - **Pure reads** (`read_file`, `list_files`, `glob`, `grep`) — no
- *     side effects on disk or the model's own state.
- *   - **Interaction tools** (`ask_user`, `present_plan`) — the call
- *     itself surfaces a TUI picker the user has to answer, so prompting
- *     for approval first would mean "approve this prompt before you see
- *     the prompt": redundant + breaks the flow. The picker IS the gate.
- *   - **Todos** (`todowrite`, `todoread`) — write to a slot on
- *     `session.metadata.todos` and nothing else. No shell, no disk, no
- *     network. The model uses these for checkpointing every few steps;
- *     a per-call approval prompt would drown the conversation in
- *     interruptions that buy no safety since the tool's surface is
- *     read/write on a metadata bag we already trust the agent with.
- *   - **Skill activation** (`skills_use`) — mutates a small per-agent
- *     Map of active skills and returns the activated skill's bundled
- *     instructions (or releases an entry on `mode: "deactivate"`).
- *     Pure state on the agent — no shell, no disk writes, no network.
- *     Gating it would also defeat the "model recovers from
- *     `AgentToolNotAllowedError` by calling
- *     `skills_use({ mode: "deactivate", name })`" path: a stuck model
- *     would have to ask the user permission to *unstick* itself on
- *     every retry. `skills_read` and `skills_run_script` are
- *     intentionally NOT on this list — the former touches disk and
- *     the latter executes arbitrary scripts, so both keep going
- *     through the regular gate.
- *
- * Users who want to gate any of these must disable safe-mode entirely
- * (or fork this list in their own embedding).
- */
-declare const IMPLICITLY_SAFE_TOOLS: readonly string[];
-/**
- * Test whether a `{ tool, input }` pair is covered by one safelist entry.
- *
- * Supported entry shapes:
- *   - `"<tool>"` — broad match on tool name.
- *   - `"<tool>:<token>:*"` — match when the primary arg's first token
- *     equals `<token>`.
- *
- * This function matches a **single command** against a **single entry**.
- * For shell commands that chain multiple programs (`&&`, `||`, `;`,
- * `$(…)`, etc.), use {@link isOnSafelist} which parses the full command
- * and checks every head token independently.
- *
- * Entries that don't fit either shape are ignored (forward-compat for
- * future pattern syntax — readers shouldn't choke on entries written
- * by a newer version of the TUI).
- */
-declare function matchesSafelistEntry(entry: string, tool: string, input: Record<string, unknown>): boolean;
-/**
- * True when a call matches ANY entry in the project's safelist (or is
- * implicitly safe).
- *
- * For `shell` commands, the full command string is parsed into individual
- * commands (handling `&&`, `||`, `;`, `|`, `$(…)`, backticks, subshells).
- * Every command head must be covered by at least one safelist entry for
- * the call to pass. If parsing fails, returns `false` (prompt the user).
- */
-declare function isOnSafelist(entries: readonly string[], tool: string, input: Record<string, unknown>): boolean;
-/**
- * Suggest the safelist entries to persist when the user picks "accept and
- * remember" (or "accept for session") for a `{ tool, input }`. Heuristic:
- *
- *   - `shell` → one `shell:<head>:*` per DISTINCT command head, parsing the
- *     command the SAME way {@link isOnSafelist} matches it (`&&`, `||`, `;`,
- *     `|`, `$(…)`, subshells, backticks). So `cd dir && cat file` yields
- *     `["shell:cd:*", "shell:cat:*"]` — persisting the whole set is what
- *     lets the next identical call skip the gate. A single first-token
- *     entry would only cover `cd`, so `isOnSafelist`'s `every-head` check
- *     would fail on `cat` and re-prompt forever.
- *   - `shell` with an unparseable / empty command → first-token heuristic,
- *     else the bare tool name.
- *   - anything else → bare tool name (broad).
- *
- * Always returns a non-empty list so the UI has a concrete set to render
- * and persist.
- */
-declare function suggestSafelistEntries(tool: string, input: Record<string, unknown>): string[];
-//#endregion
-//#region src/chat/settings-context.d.ts
-declare const DEFAULT_SETTINGS: Settings;
-interface SettingsContextValue {
-  settings: Settings;
-  /** Flip a boolean setting in place. Restricted at the type level to boolean-valued keys. */
-  toggle: (key: BooleanSettingKey) => void;
-  /** Write any setting key to a new value. Used by string-valued choice rows. */
-  setSetting: <K extends keyof Settings>(key: K, value: Settings[K]) => void;
-}
-declare function SettingsProvider({
-  initial,
-  onChange,
-  children
-}: {
-  initial: Settings;
-  onChange?: (settings: Settings) => void;
-  children: ReactNode;
-}): import("react").JSX.Element;
-declare function useSettings(): SettingsContextValue;
-/**
- * Keys of `Settings` whose value type is exactly `boolean`. Used to type
- * the toggle table so `SETTINGS_TOGGLES.key` only ever points to a
- * boolean-valued setting — string- and array-valued settings (theme,
- * enabledSkills, …) live in `SETTINGS_CHOICES` or actions.
- *
- * `-?` strips optionality from the mapped output so `Settings[K]` doesn't
- * silently broaden into `T | undefined` and short-circuit the `extends
- * boolean` check via `undefined`.
- */
-type BooleanSettingKey = { [K in keyof Settings]-?: Settings[K] extends boolean ? K : never }[keyof Settings];
-/**
- * Setting categories — drives the tab grouping in the TUI's
- * `SettingsModal` and, more importantly, gives any embedder (GUI,
- * web settings panel, …) a stable taxonomy to bucket settings under
- * without re-hardcoding the split.
- *
- *   - `'agent'` — agent behaviour, capabilities, persistence,
- *                 data handling, auth. "What zidane DOES."
- *   - `'ui'`    — display, rendering, theming, animations,
- *                 chrome density, keybindings. "How zidane LOOKS
- *                 and feels."
- *
- * Borderline calls (`showAllProjects`, `hideSubagentOutput`,
- * `resumeLastSession`) are documented inline at each row.
- */
-type SettingsCategory = 'agent' | 'ui';
-interface SettingsCategoryDescriptor {
-  id: SettingsCategory;
-  /** Display label — used by the TUI tab strip + any GUI tab/section header. */
-  label: string;
-  /** One-line gloss the GUI can show as a section subtitle. The TUI omits this. */
-  description: string;
-}
-/**
- * Ordered list of categories. Display order in any consumer (TUI tabs,
- * GUI sidebar, settings JSON dump) should match this array — keeps
- * mental model consistent across surfaces.
- */
-declare const SETTINGS_CATEGORIES: readonly SettingsCategoryDescriptor[];
-/**
- * Static description of every togglable setting, in display order. The TUI's
- * `SettingsModal` and any future GUI settings panel build their row list
- * from this so labels/descriptions stay in one place.
- */
-interface SettingsToggle {
-  key: BooleanSettingKey;
-  label: string;
-  description: string;
-  category: SettingsCategory;
-}
-declare const SETTINGS_TOGGLES: readonly SettingsToggle[];
-/**
- * String-valued settings that pick between a known set of options. The
- * `SettingsModal` renders these as one row showing the active label, where
- * `enter` cycles to the next option (wrapping back to the first). Same
- * shape any GUI settings panel can consume — render the options array as a
- * dropdown or segmented control.
- *
- * Keep `options` in stable display order; cycling depends on it.
- */
-interface SettingsChoice<K extends keyof Settings = keyof Settings> {
-  key: K;
-  label: string;
-  description: string;
-  options: readonly {
-    value: Settings[K];
-    label: string;
-  }[];
-  category: SettingsCategory;
-}
-declare const SETTINGS_CHOICES: readonly SettingsChoice[];
-/**
- * Keys of `Settings` whose value type is exactly `string`. Bounds the
- * input table's `key` the same way {@link BooleanSettingKey} bounds the
- * toggle table — a free-text row can only point at a string-valued
- * setting.
- */
-type StringSettingKey = { [K in keyof Settings]-?: Settings[K] extends string ? K : never }[keyof Settings];
-/**
- * Free-text settings edited via a single-line input. The `SettingsModal`
- * renders these as a row showing the current value (or `placeholder` when
- * empty); `enter` opens an inline editor. Same shape a GUI can consume as
- * a text field.
- */
-interface SettingsInput {
-  key: StringSettingKey;
-  label: string;
-  description: string;
-  /** Shown when the value is empty — also the conventional "default" hint. */
-  placeholder: string;
-  category: SettingsCategory;
-}
-declare const SETTINGS_INPUTS: readonly SettingsInput[];
-//#endregion
-//#region src/chat/skills-discovery.d.ts
-/**
- * Resolve the default skill scan paths for a project. First-found wins on
- * collision; earlier entries take precedence.
- *
- * Search order — see {@link projectUserPaths}. Non-existent paths are
- * returned so downstream code can choose whether to create them;
- * `discoverSkills` itself skips missing dirs without error.
- */
-declare function defaultSkillScanPaths(opts?: {
-  cwd?: string;
-  home?: string;
-  prefix?: string;
-  /**
-   * Also scan the skill directories other agents maintain (Claude Code,
-   * Codex, Pi) — see `foreign-configs.ts`. Mirrors the
-   * `importForeignConfigs` setting. Appended AFTER the native paths so
-   * first-found-wins keeps zidane's own copies authoritative on name
-   * collisions.
-   */
-  foreignAgents?: boolean;
-  /**
-   * Also scan Ruler skill directories (`.ruler/skills`, project and
-   * XDG-global) — see `ruler-configs.ts`. Mirrors the
-   * `importRulerConfigs` setting; appended last so first-found-wins
-   * keeps both zidane's own and foreign copies authoritative.
-   */
-  ruler?: boolean;
-}): SourcedScanPath[];
-/**
- * Discover every skill reachable from the default scan paths. Returns
- * parsed `SkillConfig`s with `name`, `description`, frontmatter, and
- * lenient-load diagnostics. Pure I/O — does not activate or write.
- *
- * `signal` is forwarded to `discoverSkills` so the TUI's directory-watch
- * effect can cancel a long scan when the user switches `cwd` rapidly.
- *
- * Errors during parse are surfaced as `diagnostics` on the returned
- * skill, not thrown — keeps the picker usable even when a single
- * SKILL.md is malformed.
- */
-declare function discoverProjectSkills(opts?: {
-  cwd?: string;
-  home?: string;
-  prefix?: string; /** See {@link defaultSkillScanPaths}. */
-  foreignAgents?: boolean; /** See {@link defaultSkillScanPaths}. */
-  ruler?: boolean;
-  signal?: AbortSignal;
-}): Promise<SkillConfig[]>;
-/**
- * Map a user-toggled enable list onto the format `createAgent` expects.
- *
- * Conventions:
- *   - `enabled === undefined`  → all discovered skills enabled (default).
- *   - `enabled === []`         → fully off; the agent will not scan or
- *                                inject the skills tools.
- *   - `enabled === [names]`    → allowlist; skills not in the list are
- *                                left out of the catalog.
- *
- * `scan` is the resolved scan-path list (passed through verbatim). Pass
- * `defaultSkillScanPaths()` for the standard project + user paths, or
- * supply a host-specific list.
- */
-declare function buildSkillsConfig(opts: {
-  scan: SourcedScanPath[];
-  enabled?: readonly string[];
-}): SkillsConfig;
-//#endregion
-//#region src/chat/streaming.d.ts
-interface StreamSource {
-  /** Pass `undefined` / omit for parent-agent events. */
-  childId?: string;
-  /** Nesting depth — 0 for parent, ≥ 1 for subagents. */
-  depth?: number;
-  /**
-   * `SessionTurn.id` this delta belongs to. Tagged onto new events so the
-   * TUI's select-turn mode can group every event from one turn. Stored on
-   * the active bucket and refreshed on every delta so a turn boundary
-   * (`turn:after` flushes the bucket) doesn't carry stale ids forward.
-   */
-  turnId?: string;
-}
-interface StreamBuffer {
-  /** Queue a streaming delta for the next flush tick. */
-  queueStreamDelta: (kind: 'markdown' | 'thinking', delta: string, source?: StreamSource) => void;
-  /** Drain pending deltas immediately, then append a non-streaming event. */
-  appendImmediate: (evt: StreamEvent) => void;
-  /** Drain pending deltas immediately, then transform the event list. */
-  flushAndUpdate: (update: (events: StreamEvent[]) => StreamEvent[]) => void;
-  /** Drain pending deltas without further transformation. */
-  flush: () => void;
-  /** Cancel any pending flush and drop buffered deltas (on session teardown). */
-  reset: () => void;
-}
-interface StreamBufferOptions {
-  /**
-   * Returns `true` to drip-feed buffered text at the smooth typewriter
-   * cadence, `false` to drain everything per tick (batched mode — the
-   * legacy behaviour). Called on every tick, so flipping the user setting
-   * takes effect on the next drain.
-   */
-  getSmooth?: () => boolean;
-  /**
-   * Display-memory bound applied on every drain commit (see
-   * {@link capTranscriptEvents}): above this many events the oldest are
-   * trimmed at a turn boundary and replaced with a cumulative
-   * "… N earlier items hidden" marker event. Rendered events hold live
-   * renderables/native buffers, so an unbounded buffer OOMs long
-   * sessions (~0.13MB RSS per event measured in the TUI).
-   *
-   * Default {@link MAX_TRANSCRIPT_EVENTS}. Pass `null` to disable and
-   * receive the full, unbounded event array (pre-5.13 behavior) — e.g.
-   * a host that renders a virtualized list or exports events verbatim.
-   */
-  maxTranscriptEvents?: number | null;
-}
-declare function useStreamBuffer(setEvents: Dispatch<SetStateAction<StreamEvent[]>>, options?: StreamBufferOptions): StreamBuffer;
-//#endregion
-//#region src/chat/system-md.d.ts
-/** A discovered `SYSTEM.md`. */
-interface SystemMdFile {
-  path: string;
-  source: 'project' | 'user';
-  contents: string;
-}
-/** Result of {@link discoverSystemMd}. */
-interface SystemMdResult {
-  /**
-   * The winning override, or `null` when no `SYSTEM.md` exists (the built-in
-   * doctrine then applies unchanged).
-   */
-  file: SystemMdFile | null;
-  /**
-   * Files that exist but lost to `file` on precedence. Non-empty only when the
-   * user has both a project and a user `SYSTEM.md`. Surfaced so the UI can mark
-   * them as inactive instead of leaving the user wondering why edits to one of
-   * them changed nothing.
-   */
-  shadowed: readonly SystemMdFile[];
-}
-interface DiscoverSystemMdOptions {
-  /** Discovery cwd. Default: `process.cwd()`. */
-  cwd?: string;
-  /** User home directory. Default: `os.homedir()`. */
-  home?: string;
-  /** Storage prefix. Leading dot tolerated. Default: `'.zidane'`. */
-  prefix?: string;
-  /**
-   * Which scopes may contribute an override — the same
-   * {@link AgentsMdScope} the host applies to `AGENTS.md`, so one setting
-   * governs both surfaces:
-   *   - `'none'`    — no override, ever. Short-circuits before any FS probe.
-   *   - `'user'`   — only `~/.{prefix}/SYSTEM.md`. The repo's file is IGNORED,
-   *                   which is the whole point of the setting: it is how a user
-   *                   says "do not trust this checkout".
-   *   - `'project'` — only `<root>/SYSTEM.md`.
-   *   - `'both'`   — union, project winning (default).
-   *
-   * Previously a boolean that only implemented `'none'`, so `'user'` still let a
-   * repo-root `SYSTEM.md` replace the entire doctrine — exactly the case the
-   * setting exists to prevent.
-   */
-  scope?: AgentsMdScope;
-}
-/**
- * Absolute path of the USER-scope `SYSTEM.md` — the file the TUI creates when
- * the user asks for an override and none exists yet.
- *
- * Exported so the host doesn't hardcode the layout and can't drift from what
- * discovery actually reads.
- */
-declare function userSystemMdPath(opts?: {
-  home?: string;
-  prefix?: string;
-}): string;
-/**
- * Find the active `SYSTEM.md` override, if any.
- *
- * Project paths anchor at the git root when one exists above `cwd`, else at
- * `cwd` — the same anchor as skills / mcps / AGENTS.md discovery, so all four
- * surfaces agree on what "this project" means.
- *
- * Tolerant: an unreadable or empty file is treated as absent (logged under
- * `ZIDANE_DEBUG`) and the next candidate gets its turn. Never throws — this
- * runs on the session-activation path.
- *
- * Candidates are filtered by {@link DiscoverSystemMdOptions.scope}, mirroring
- * how `discoverAgentsMd` builds its own list.
- */
-declare function discoverSystemMd(opts?: DiscoverSystemMdOptions): SystemMdResult;
-/**
- * Seed contents for a freshly created `SYSTEM.md` override, built from the
- * built-in doctrine.
- *
- * Seeding with the real doctrine (rather than an empty file) means creating the
- * override is a behavioral no-op until the user edits it. An empty seed would
- * silently delete every line of doctrine the moment the file appeared, making
- * the agent measurably worse with no visible cause.
- *
- * `currentSystem` should be DOCTRINE ONLY — callers pass
- * `splitSystemPrompt(doctrineOnlySystem()).static`, which excludes both the
- * generated `<env>` block (rebuilt per turn) and the `AGENTS.md` block. Baking
- * the latter in would duplicate it, since it is re-appended below the override
- * on every compose.
- *
- * `scope` is the active `userInstructionsScope`; it decides whether the seed's
- * precedence note is true — see {@link projectScopeOverridesLoad}.
- */
-declare function renderSystemMdSeed(currentSystem: string, scope?: AgentsMdScope): string;
-//#endregion
-//#region src/chat/theme-context.d.ts
-declare function ThemeProvider({
-  theme,
-  children
-}: {
-  theme: Theme;
-  children: ReactNode;
-}): import("react").JSX.Element;
-declare function useTheme(): Theme;
-/** Color palette only — equivalent to `useTheme().colors`. */
-declare function useColors(): ThemeColors;
-/** Select-row styling — equivalent to `useTheme().select`. */
-declare function useSelectStyle(): ThemeSelect;
-/** Panel / surface backgrounds — equivalent to `useTheme().surfaces`. */
-declare function useSurfaces(): ThemeSurfaces;
-/** Raw syntax style table — `useTheme().syntax`. Renderer converts to its native style type. */
-declare function useSyntaxStyles(): SyntaxStyles;
-//#endregion
-//#region src/chat/themes/catppuccin.d.ts
-declare const CATPPUCCIN_MOCHA: Theme;
-declare const CATPPUCCIN_MACCHIATO: Theme;
-declare const CATPPUCCIN_FRAPPE: Theme;
-declare const CATPPUCCIN_LATTE: Theme;
-//#endregion
-//#region src/chat/themes/gruvbox.d.ts
-declare const GRUVBOX_DARK: Theme;
-declare const GRUVBOX_LIGHT: Theme;
-//#endregion
-//#region src/chat/themes/vaporwave.d.ts
-declare const VAPORWAVE_THEME: Theme;
-//#endregion
-//#region src/chat/todos.d.ts
-declare const TODOWRITE_TOOL = "todowrite";
-declare const TODOREAD_TOOL = "todoread";
-/** True when `name` is one of the todo tool canonical names. */
-declare function isTodoTool(name: string): boolean;
-/** `session.metadata[TODOS_METADATA_KEY]: TodosBag` — see {@link TodosBag}. */
-declare const TODOS_METADATA_KEY = "todos";
-/** `session.metadata[TODO_WRITE_COUNTS_METADATA_KEY]: CountsBag` — mirrors `TodosBag` shape. */
-declare const TODO_WRITE_COUNTS_METADATA_KEY = "todoWriteCounts";
-type TodoStatus = 'pending' | 'in_progress' | 'completed' | 'cancelled';
-interface TodoItem {
-  /** Stable id — the model picks it. Reusing an id replaces that item. */
-  id: string;
-  /** One-line task summary (Markdown allowed; renderers may sanitize). */
-  content: string;
-  status: TodoStatus;
-}
-/**
- * On-disk shape at `session.metadata[TODOS_METADATA_KEY]`.
- *
- * Sub-fields are absent (not empty) when they carry no data — keeps the
- * persisted metadata clean and lets `JSON.stringify` skip empty bags
- * entirely on session save.
- */
-interface TodosBag {
-  /** Top-level slot — shared across runs whose `parentRunId` is unset. */
-  session?: TodoItem[];
-  /** Per-subagent-run slots, keyed by the child run's id. */
-  byRun?: Record<string, TodoItem[]>;
-  /**
-   * Most-recent non-empty list per slot — sidecar for UI surfaces, NOT
-   * visible to `todoread`. Updated on every non-empty write; **preserved**
-   * across the auto-clear path. Lets the modal keep showing "what was just
-   * completed" after a fully-done batch wipes the live slot. Empty writes
-   * never touch the archive — clearing the live list shouldn't erase the
-   * audit trail.
-   */
-  archive?: {
-    session?: TodoItem[];
-    byRun?: Record<string, TodoItem[]>;
-  };
-}
-declare const TODO_STATUS_GLYPHS: Readonly<Record<TodoStatus, string>>;
-interface CreateTodoToolsOptions {
-  /**
-   * Maximum item count per `todowrite`. Excess items are truncated by the
-   * recursive validator and reported back to the model in the tool_result.
-   *
-   * Default: `100`. The default is generous; a planning agent that exceeds
-   * 100 items per call is usually flailing.
-   */
-  maxItems?: number;
-  /**
-   * Per-run cap on `todowrite` calls, plumbed into `behavior.toolBudgets`.
-   * `onMaxWrites` chooses the reaction (steer / block) — see
-   * {@link AgentBehavior.toolBudgets} for the contract.
-   *
-   * **Default: `0` (no cap).** `todowrite` is a state-transition tool —
-   * a legitimate run of an N-item list needs at least `N + 1` calls
-   * (initial plan + one transition per item) to complete, so a hard
-   * cap punishes the legitimate path. The nudges that DO apply are the
-   * `remindAfter` reminder (soft, in-band) and the identical-payload
-   * dedup check (silent, structural). Hosts that want a true hard cap
-   * can opt in by setting `maxWritesPerRun: N`.
-   *
-   * **Counting semantics** (when opted in): the budget counts every
-   * dispatched call, including dedup substitutes (zidane spec). The
-   * {@link remindAfter} counter counts execute-only dispatches —
-   * dedup hits replay the prior result and never reach the tool body.
-   * Use this budget (not the reminder) as the hard limit.
-   */
-  maxWritesPerRun?: number;
-  onMaxWrites?: 'steer' | 'block';
-  /**
-   * Hard stop for **consecutive identical** `todowrite` payloads — the
-   * exact loop the in-body `dedupIdentical` check only *whispers* about
-   * ("No change — N items already tracked"). Plumbs a run-scoped
-   * `behavior.dedupTools.todowrite` entry in `block-after` mode: the
-   * gate replays the unchanged result for the first `N - 1` identical
-   * calls, then refuses the `N`th (and every subsequent identical one)
-   * with a `Blocked: …` tool_result so the model breaks out instead of
-   * re-checkpointing forever.
-   *
-   * This is safe to leave on by default — unlike {@link maxWritesPerRun}
-   * it only ever blocks a payload byte-identical to the one already
-   * tracked, so a legitimate "finish the N-item plan" run (which writes
-   * a *different* list each transition) is never touched. The counter
-   * resets the moment the model writes anything different.
-   *
-   * Run-scoped via `DedupToolConfig.scope: 'run'`, so a parent and a
-   * subagent writing the same list never share the counter — the precise
-   * conflation that kept `todowrite` off `behavior.dedupTools` before.
-   *
-   * Set to `0` to opt out (e.g. a host that installs its own loop
-   * hardening). Default: `5`. Values `< 2` are clamped to `2` by the
-   * dedup middleware (a threshold of 1 would block the first call).
-   */
-  maxIdenticalWrites?: number;
-  /**
-   * Custom refusal text for the {@link maxIdenticalWrites} block. Receives
-   * the 1-indexed identical-call count (including the blocked call). Leave
-   * unset for the built-in "you've written the same list N times in a
-   * row" message.
-   */
-  identicalBlockReason?: (count: number) => string;
-  /**
-   * Append a "you've checkpointed N times — only call this at significant
-   * task transitions" nudge to the tool_result once `todowrite` has fired
-   * this many times in the current run. The nudge rides on the result
-   * string, so the model sees it on its next turn without `system:transform`
-   * plumbing.
-   *
-   * Counts only executed dispatches (dedup hits skip the tool body and so
-   * skip the increment). For a hard cap that also covers dedup hits, use
-   * {@link maxWritesPerRun}.
-   *
-   * Set to `0` to opt out. Default: `3`.
-   */
-  remindAfter?: number;
-  /**
-   * Custom reminder text. Receives the post-call count and the items that
-   * were just written. Return `''` (or `undefined`) to suppress the reminder
-   * for this specific call. Default text nudges towards "back to executing,
-   * not re-planning."
-   */
-  reminderText?: (count: number, items: readonly TodoItem[]) => string | undefined;
-  /**
-   * Short-circuit the tool body when the incoming payload is identical to
-   * the **current slot** (session-shared for top-level runs, per-run for
-   * subagents). The model gets a "No change — N items already tracked."
-   * acknowledgment instead of a fresh "Updated N items." line.
-   * Default: `true`.
-   *
-   * Read `session.metadata.todos` via {@link getTodosForRun} for the
-   * comparison — so the resolution naturally follows the keying rule
-   * (top-level reads the session slot, subagent reads its own). Does
-   * NOT plumb through `behavior.dedupTools`: that cache lives at the
-   * gate, is keyed per session, and would conflate top-level + subagent
-   * re-writes of structurally identical payloads.
-   *
-   * Counter advances on identical re-writes regardless — the model
-   * called the tool, that's a call. Lets the reminder threshold catch
-   * spam. Set `false` to skip the check entirely (every call rewrites
-   * the slot, useful when state-shape comparisons are pointless for
-   * your usage).
-   */
-  dedupIdentical?: boolean;
-  /**
-   * Override the JSON-schema-level descriptions surfaced to the model.
-   * Useful for telemetry experiments. Leave unset to inherit the built-in
-   * doctrine prose.
-   */
-  writeDescription?: string;
-  readDescription?: string;
-}
-/**
- * Read the active list for `runId`. Top-level runs see the session-shared
- * slot; subagent runs see their own. Returns a fresh `[]` (not stored in
- * metadata) when no slot exists — the caller can mutate the result
- * without affecting state.
- */
-declare function getTodosForRun(session: Session, runId: string): TodoItem[];
-/**
- * Replace the active list for `runId`. Routes to the session-shared slot
- * for top-level runs and to the per-run slot for subagents. Empty arrays
- * delete the slot entirely so persisted metadata stays clean.
- *
- * Side effect: a **non-empty** write also stashes the same list into
- * `bag.archive` (same routing). Empty writes never touch the archive —
- * clearing the live list (whether explicitly or via the tool's auto-
- * clear) preserves the "last shown" snapshot so UI surfaces can keep
- * rendering what was just completed. See {@link getArchivedTodosForRun}.
- *
- * `opts.clearArchive` opts OUT of that preservation, and exists because the
- * archive is only the right answer for the AUTO-CLEAR path. UI surfaces render
- * `todos.length > 0 ? todos : archive`, so a user who deletes every todo would
- * otherwise watch the archive fall straight back into view with the same items
- * — a destructive action they confirmed, with no visible effect, and the footer
- * chip still counting the list they just deleted. Pass it for user-initiated
- * writes; leave it off for the tool.
- */
-declare function setTodosForRun(session: Session, runId: string, items: readonly TodoItem[], opts?: {
-  clearArchive?: boolean;
-}): void;
-/**
- * Read the archived (most-recent non-empty) list for `runId`. Same slot
- * routing as {@link getTodosForRun}, but reads `bag.archive` instead of
- * the live slot. Returns a fresh `[]` when no archive exists.
- *
- * UI surfaces use this to keep showing "what was just completed" after
- * the live list auto-clears. The model never sees the archive — it's a
- * read-only sidecar for human-facing rendering.
- */
-declare function getArchivedTodosForRun(session: Session, runId: string): TodoItem[];
-/**
- * Reconcile `session.metadata.todos.byRun` (live + archive) against
- * `session.runs`. Drops subagent slots whose runId isn't in the run
- * list. The top-level `session` slot is unaffected — it's session-
- * scoped, not per-run, so there's no orphan to GC.
- *
- * Useful after `session.setRuns()` (fork / restore) or to GC stale
- * metadata mutated by an external caller. Also prunes the parallel
- * counter bag so the two don't drift.
- *
- * `dropped` reports the live-byRun orphans only (archive-only orphans
- * are silently swept). The live half is the contract callers actually
- * observe.
- */
-declare function pruneTodosByRun(session: Session): {
-  dropped: readonly string[];
-};
-/**
- * Build a `Preset` carrying the `{ todowrite, todoread }` tool pair.
- *
- * Loop hardening is layered, soft → hard:
- *   1. **In-body identical dedup** (`dedupIdentical`, on) — resolves
- *      against the active slot (session-shared for top-level runs,
- *      per-run for subagents) and returns "No change — N items already
- *      tracked." Advisory; the model can ignore it.
- *   2. **In-band reminder** (`remindAfter`, on) — appends a "you've
- *      checkpointed N times" nudge to the result. Also advisory.
- *   3. **Consecutive-identical hard block** (`maxIdenticalWrites`, ON by
- *      default) — a run-scoped `behavior.dedupTools.todowrite` entry in
- *      `block-after` mode. After N byte-identical writes in a row the
- *      gate refuses with `Blocked: …` and the body never runs. This is
- *      the real loop breaker, and it's safe-by-default precisely because
- *      it only fires on *identical* payloads — a legitimate N-item plan
- *      writes a *different* list each step and never trips it.
- *
- * By default the preset adds **no** `toolBudgets` entry — a blanket
- * per-call cap is the wrong abstraction for a state-transition tool (it
- * punishes the legitimate "finish the N-item plan" path). Hosts that
- * want a ceiling on *all* writes (not just identical ones) pass
- * `maxWritesPerRun: N` explicitly; the factory then also plumbs a
- * `behavior.toolBudgets.todowrite` entry.
- *
- * Returning a `Preset` (not a bare tool map) lets the result flow
- * through {@link composePresets} unchanged. `behavior.dedupTools` and
- * `behavior.toolBudgets` are tool-name-keyed records that
- * `composePresets` deep-merges, so a caller's entries for other tools
- * survive the layering, and a caller's override for `todowrite` itself
- * wins by being placed later in the chain.
- *
- * ```ts
- * import { basic, composePresets } from 'zidane/presets'
- * import { createTodoTools } from 'zidane/chat'
- *
- * // Default: soft dedup + reminder + a run-scoped hard block after 5
- * // identical writes in a row.
- * createAgent({ ...composePresets(basic, createTodoTools()), provider })
- *
- * // Tune (or disable) the identical-write block.
- * createTodoTools({ maxIdenticalWrites: 3 })  // stricter
- * createTodoTools({ maxIdenticalWrites: 0 })  // off — soft signals only
- *
- * // Opt-in blanket cap on *all* writes (counts distinct ones too).
- * createAgent({
- *   ...composePresets(basic, createTodoTools({ maxWritesPerRun: 20 })),
- *   provider,
- * })
- * ```
- *
- * For the trivial "just add the tools to an existing config" case, plain
- * spread is also fine — the returned `Preset` sets `tools` plus a
- * `behavior` block (carrying the default identical-write dedup):
- *
- * ```ts
- * createAgent({ ...basic, ...createTodoTools(), provider })
- * ```
- */
-declare function createTodoTools(options?: CreateTodoToolsOptions): Preset;
-interface TodoTally {
-  pending: number;
-  in_progress: number;
-  completed: number;
-  cancelled: number;
-}
-interface ActiveTodosState {
-  /** Run the slice came from. `null` ⇒ no session / no runs / no active run. */
-  runId: string | null;
-  /**
-   * Live list — what `todoread` would return. Empty when the slot was
-   * cleared (e.g. auto-clear after every item completed) or never
-   * written. Source of truth for the model's view.
-   */
-  todos: readonly TodoItem[];
-  /**
-   * Most-recent non-empty list for the active slot, preserved across
-   * auto-clear. Equals `todos` when the live list is non-empty;
-   * otherwise the last batch that was shown (commonly the all-`completed`
-   * close-out). UI surfaces fall back to this when `todos` is empty so
-   * the user can still glance back at "what was just finished" — until
-   * the model writes a new list. Empty array when no list was ever
-   * written for this slot.
-   */
-  archive: readonly TodoItem[];
-  /**
-   * The first `in_progress` item from `todos` (the **live** list), when
-   * one exists. Drives the inline indicator above the prompt. Always
-   * `null` when the live list is empty — even if the archive carries
-   * an in-progress item, that item is by definition stale.
-   */
-  inProgress: TodoItem | null;
-  /**
-   * Per-status counts. Computed over `todos` when non-empty, else over
-   * `archive`. Zeros only when both are empty. Lets the modal header
-   * show a meaningful tally for the archived "last batch" view.
-   */
-  tally: TodoTally;
-}
-/**
- * Pick the "active" run for UI surfaces that show one slot at a time
- * (todos indicator, todos modal, footer ctx indicator). The resolved
- * runId then routes through {@link getTodosForRun} — top-level runs
- * land on the session-shared slot, subagent runs on their own.
- *
- * - A currently-running run wins (latest-started one if several).
- * - Otherwise the most recently appended run wins.
- * - `null` when the session has no runs.
- *
- * Mirrors the "most recent thing that mattered" policy that drives
- * `lastContextSizeFromTurns` — but walks `session.runs` rather than
- * `session.turns` because the active todo slot is a function of the
- * run, not of message history.
- */
-declare function pickActiveRunId(session: Session | null | undefined): string | null;
-/**
- * Pure selector — derive the active-todos state from a session snapshot.
- * Used by {@link useActiveTodos} and directly testable without React.
- *
- * Resolves both `todos` (live, model-facing) and `archive` (last
- * non-empty snapshot for UI fallback). The tally folds over whichever
- * list is non-empty; `inProgress` is sourced strictly from `todos`
- * because an archived in-progress item is by definition stale.
- */
-declare function selectActiveTodos(session: Session | null | undefined): ActiveTodosState;
-/**
- * React hook — active-todos state for the supplied session. Recomputes
- * on every parent re-render; the work is O(runs + todos), both bounded
- * by small constants in practice.
- *
- * Why no memoization: `Session.runs` is mutated in place by `completeRun`
- * / `abortRun` (status flips without changing array length or item
- * identity), so any memo keyed off length / bag identity would silently
- * return stale state when e.g. a child subagent run completes and the
- * "active" run should reflow to the parent. The selector is cheap
- * enough that running it every parent render is the simpler, correct
- * answer — see `selectActiveTodos` for the O(n) cost.
- *
- * The hook lives in `chat/` so a GUI consumer can mount it verbatim.
- * Renderer-agnostic — no `@opentui/*` imports.
- */
-declare function useActiveTodos(session: Session | null | undefined): ActiveTodosState;
-//#endregion
-//#region src/chat/todo-anchor.d.ts
-interface ActiveTodoAnchorOptions {
-  enabled?: boolean;
-  maxItems?: number;
-  heading?: string;
-}
-declare function renderActiveTodoAnchor(todos: readonly TodoItem[], options?: ActiveTodoAnchorOptions): string;
-/**
- * Optional chat-layer hook that keeps the live `todowrite` list visible in the
- * dynamic system prompt. It reads only live todos, never the archive, so an
- * auto-cleared completed plan is not reintroduced on later turns.
- *
- * ## Prompt-cache cost — read before enabling
- *
- * This writes per-turn state into the system prompt, and the system prompt sits
- * ABOVE the entire conversation in the provider's cache prefix (Anthropic hashes
- * tools → system → messages, cumulatively). So every time the rendered anchor
- * changes by a single byte, the whole transcript stops matching the cache and
- * re-bills at the cache-write rate; only `tools` and the static system block
- * survive.
- *
- * That is an acceptable trade only because the anchor changes *rarely* — once
- * per `todowrite`, which in practice is a small fraction of turns. Two rules
- * follow, and breaking either one turns that occasional cost into a per-turn
- * one:
- *
- *  1. Never add anything to the anchor that ticks on its own — no counters, no
- *     timestamps, no elapsed times, no per-turn indices.
- *  2. The render must stay a pure function of the todo list.
- *     `renderActiveTodoAnchor` is deterministic today, so identical todos emit
- *     identical bytes; keep it that way. Note this does NOT cover reordering —
- *     todo order is semantically meaningful (it is the plan), so a reorder is
- *     a real state change and costs one re-bill like any other `todowrite`.
- *
- * Moving the anchor onto the newest message instead does NOT avoid this: it is
- * wire-only, so the message that carried last turn's anchor re-renders without
- * it, and the prefix diverges at that point just the same. The only injection
- * that is genuinely free is one persisted into the transcript as immutable
- * history.
- */
-declare function createActiveTodoAnchorHooks(options?: ActiveTodoAnchorOptions): AgentHookMap;
-//#endregion
-export { ACTIONS_WITH_CARE_DOCTRINE, ALTERNATE_CRED_KEY_SUFFIX, ASK_USER_TOOL, AUTOMATIC_INTERACTION_INSTRUCTION, AUTO_COMPACT_MIN_GROWTH_FRACTION, type ActiveTodoAnchorOptions, type ActiveTodosState, type ActiveTrigger, type AgentAccent, type AgentProfile, type AgentRegistry, type AgentsMdFile, type AgentsMdResult, type AnswerValue, type ApiKeyCredential, type ApprovalDecision, type ApprovalRequest, type AuthMethod, type AutoCompactDecision, type AutoCompactInput, type AutoUpdateConfig, BUILD_AGENT, BUILTIN_AGENTS, BUILTIN_PROVIDERS, BUILTIN_THEMES, type BooleanSettingKey, type BuildExtensionRegistryOptions, type BuildHintsOptions, type BuildSystemOptions, type BuildUpdateHintOptions, CATPPUCCIN_FRAPPE, CATPPUCCIN_LATTE, CATPPUCCIN_MACCHIATO, CATPPUCCIN_MOCHA, CHATS_TRIGGER, COMMANDS_TRIGGER, COMMUNICATION_DOCTRINE, type CachedMcpToolList, type CatalogEntry, type ChatOptions, type ChatReferenceData, type ChatReferenceEntry, type ChatReferenceScope, type ChatTurnsReadToolOptions, type CheckForUpdateOptions, type ChipColor, type ChipColorMap, type ClaudeCopyResult, type ClaudeImportOptions, type ClaudeImportSummary, type ClaudeSessionImportResult, type Command, type CommandAgentResult, type CommandExecution, type CommandInvocation, type CommandOutputBlock, type CommandStep, type CommandStepContext, type CommandStepFn, type Commit, type CompletionContext, type CompletionItem, type CompletionProvider, type CompletionReference, type CompletionState, ConfigProvider, type ConfirmQuestion, type ContextBreakdown, type ContextBreakdownContributionContext, type ContextBreakdownContributor, type ContextBreakdownOptions, type ContextCategory, type ContextCategoryId, type ContextExactCounts, type ContextExtensionRow, type ContextExtensionSection, type ContextItem, type ContextMcpGroup, type ContextSegment, type ContextSegmentFile, type ContextSegmentOrigin, type ContextSegmentsInput, type ContextSnapshot, type ContextUsageSplit, type CreateInteractionToolsOptions, type CreateTodoToolsOptions, type CredentialsFile, type CustomField, DEFAULT_AGENT_ID, DEFAULT_BUDGET_EXCLUDE_TOOLS, DEFAULT_KEYBINDINGS, DEFAULT_PERSIST_EXCLUDE_TOOLS, DEFAULT_SETTINGS, DEFAULT_THEME, DOING_TASKS_DOCTRINE, type DetectPackageManagerOptions, type DiffLine, type DiffOp, type DiscoverAgentsMdOptions, type DiscoverSystemMdOptions, type DiscoveredMcp, type DiscoveryContextValue, type DiscoveryError, DiscoveryProvider, type DiscoveryResult, type DiscoverySlot, type DiscoverySlotOptions, EMPTY_EXTENSION_REGISTRY, EMPTY_HINTS, type EditDiffDisplay, type EditHunk, type EditHunkSummary, type EditOutcome, type EditOutcomeKind, type EditPayload, type EditSummary, type EnabledAllowlistKey, type EnabledToggleSet, type EnvSectionOptions, type ExtensionApiVersion, type ExtensionBehaviorTransform, type ExtensionCapability, type ExtensionContext, type ExtensionContributions, type ExtensionDefinition, type ExtensionFooterHint, type ExtensionGuiPanel, type ExtensionKeybinding, type ExtensionKeybindingDispatchContext, type ExtensionManifest, type ExtensionMcpConfigTransform, type ExtensionModal, type ExtensionOrderedContribution, type ExtensionPaths, type ExtensionPermission, type ExtensionProviderMiddleware, type ExtensionRegistry, type ExtensionRunTransform, type ExtensionRuntimeEnv, type ExtensionSessionStateSurface, type ExtensionSkillPolicy, type ExtensionSource, type ExtensionStorageScope, type ExtensionStorageSurface, type ExtensionToolCatalogTransform, type ExtensionToolResultMetadataRegistration, FILES_TRIGGER, type FetchOAuthRedirectResult, type FetchProviderUsageOptions, type FileEntry, GRUVBOX_DARK, GRUVBOX_LIGHT, type GenerateSessionTitleOptions, type GenerateStructuredDataOptions, type GuiContributions, HOST_INTERACTION_ID_PREFIX, type HighlightRange, type HighlightSegment, type Hint, type HunkResolution, IDENTITY_PREFIX, IMPLICITLY_SAFE_TOOLS, INTERACTION_GUIDANCE, INTERACTION_GUIDANCE_NO_PROMPTS, type InPlaceUpdateResult, type IndexedSearchTurn, type InlineAutocompleteContext, type InlineAutocompleteProvider, type InlineDiff, type InlineGhost, type InlineSegment, type InteractionMode, type InteractionOrigin, type InteractionRequest, type InteractionResponse, type InteractionsActions, InteractionsProvider, KEYBINDING_DEFS, KEYBINDING_DEF_BY_ACTION, KEYBINDING_KEY_COL_WIDTH, type KeyAction, type KeyBindingDef, type KeyBindingSection, type KeyBindings, type ListProjectFilesOptions, type LoadedExtension, MARKDOWN_RENDER_CHUNK_TARGET_BYTES, MAX_TRANSCRIPT_EVENTS, type MarkdownSegment, type McpAuthEvent, McpAuthProvider, type McpAuthStateMap, type McpAuthStatus, type McpConfigScope, type McpToolToggleSet, type McpToolsCache, type ModelChainEntry, type ModelInfo, type ModelOption, type ModelUsageSummary, type OAuthCredential, type OAuthFlowOptions, type OAuthPrompt, OUTPUT_RESERVE_TOKENS, type Owner, PLAN_AGENT, PLAN_MODE_DOCTRINE, PLAN_MODE_DOCTRINE_NO_PROMPTS, PRESENT_PLAN_TOOL, type PackageManagerCommand, type PackageManagerId, type ParsedBinding, type PendingInteractionEntry, type PerformInPlaceUpdateOptions, type PerformSelfUpdateOptions, type Picked, type PlanDecision, type PlanPayload, type PlanRequest, type PlanResponse, type PlanStep, type PlatformTarballOptions, type PreviewResult, type ProjectEntry, type ProjectUserPath, type ProjectsFile, type PromptSegment, type PromptSegmentRef, type ProviderAuth, type ProviderCredential, type ProviderDescriptor, type ProviderKey, type ProviderRegistry, type ProviderUsageCredits, type ProviderUsageSnapshot, type ProviderUsageStatus, type ProviderUsageWindow, type Question, type QuestionChoice, type QuestionPayload, type QuestionRequest, type QuestionResponse, type QuestionType, type RemoveMcpResult, type RequestApproval, type ResolveStorageDirsOptions, type ResolvedApproval, type ResolvedConfig, type ResolvedExtensionKeybinding, type ResolvedPaths, type RunUpdateCommandOptions, type RunUpdateCommandResult, SETTINGS_CATEGORIES, SETTINGS_CHOICES, SETTINGS_INPUTS, SETTINGS_TOGGLES, SKILLS_TRIGGER, SUBAGENT_GUIDANCE, type SafeModeActions, SafeModeProvider, type Screen, type SearchExcerpt, type SearchSessionResult, type SearchTurnResult, type SelectQuestion, type SelfUpdateResult, type SessionExportAnchor, type SessionExportFormat, type SessionExportTarget, type SessionHistoryMatch, type SessionMeta, type SessionSearchExcerpt, type SessionSearchIndex, type Settings, type SettingsCategory, type SettingsCategoryDescriptor, type SettingsChoice, type SettingsInput, SettingsProvider, type SettingsToggle, type StateStoreApi, type StorageDirs, type StorageMode, type StorageSlot, type StreamBuffer, type StreamEvent, type StreamSource, type StringSettingKey, type SyntaxStyles, type SyntaxTokenStyle, type SystemMdFile, type SystemMdResult, TODOREAD_TOOL, TODOS_METADATA_KEY, TODOWRITE_TOOL, TODO_STATUS_GLYPHS, TODO_WRITE_COUNTS_METADATA_KEY, TOKEN_DISCIPLINE_DOCTRINE, TOOL_DISPLAY, TRANSCRIPT_TRIM_TO_EVENTS, type TextQuestion, type Theme, type ThemeColors, ThemeProvider, type ThemeSelect, type ThemeSurfaces, type TodoItem, type TodoStatus, type TodoTally, type TodosBag, type ToolCallDisplay, type ToolDisplayMeta, type ToolFormatLine, type TranscriptItem, type TuiContributions, type TuiState, USAGE_CACHE_TTL_MS, type UpdateStatus, type UpsertMcpResult, type UseUpdateCheckOptions, VAPORWAVE_THEME, type VisibleMcpRow, type Walk, accentColor, addToSafelist, ageString, alternateCredKey, anthropicDescriptor, applyApiKeyEnv, applyEditPayload, applyInsert, blendHsl, bootProfileEnabled, bootTick, buildBuildSystem, buildContextBreakdown, buildContextSegments, buildContextualDiff, buildEditOutcomesAnnotation, buildExtensionPreset, buildExtensionRegistry, buildHints, buildLinearRamp, buildMcpServers, buildModelCatalog, buildPlanSystem, buildResumedToolResultsTurn, buildRunModel, buildSessionSearchIndex, buildSessionSearchIndexAsync, buildSkillsConfig, buildToolToggle, buildUnifiedDiff, buildUpdateHint, buildVisibleMcpRows, capTranscriptEvents, cerebrasDescriptor, chainPositionOf, chainsEqual, chatAutoCompactBehavior, chatReferenceTokensForPrompt, chatReferenceTokensFromText, checkForUpdate, chunkMarkdownForRender, cleanTitle, clearMcpToolsCache, clearProviderUsageCache, clipHintsToWidth, collectReferences, commandSteps, compactPath, compactSummaryEvent, compareSemver, composeExtensionPreset, computeInlineDiff, computeLineDiff, computeTurnAnchors, countClaudeSessionFiles, countNeighbors, createActiveTodoAnchorHooks, createAutomaticInteractionResponse, createChatTurnsReadTool, createChatsCompletionProvider, createCommandsCompletionProvider, createDiscoverySlot, createFileMcpCredentialStore, createFilesCompletionProvider, createInteractionTools, createPathAutocompleteProvider, createSkillsCompletionProvider, createStateStore, createTodoTools, credKeyOf, credentialsPath, dedupMcpServersByName, defaultExtensionScanPaths, defaultMcpsConfigPaths, defaultSkillScanPaths, defineExtension, deleteTurnSafely, deriveSessionTitle, detectAuth, detectLibc, detectPackageManager, discoverAgentsMd, discoverExtensions, discoverProjectMcps, discoverProjectSkills, discoverSystemMd, displayNameFor, disposeExtensionRegistry, effectiveContextWindow, enabledModelOptions, ensureKeybindingsFile, envSection, eventsFromTurns, executeCommand, extractEditPayload, fetchAllProviderUsage, fetchOAuthRedirect, fetchProviderUsage, filetypeFromPath, filterChainFallbacks, filterExtensionRegistry, filterModelCatalog, filterSessionSearchCatalog, finalizeStreamingMarkdown, finalizeStreamingMarkdownForOwner, findActiveTrigger, findGitRoot, fmtCost, fmtTokens, formatBindingForDisplay, formatDuration, formatPathForCwd, formatTaskStatus, formatTaskSummary, formatToolCall, formatUsagePercent, generateSessionTitle, generateStructuredData, getArchivedTodosForRun, getContextWindow, getMcpAuthStatus, getModelInfo, getSafelist, getTodosForRun, groupBindings, hasClaudeCodeSetup, highlightSegments, hintsLength, importFromClaudeCode, indexOfEntry, indexOfServerRow, inlineLoadedExtension, isEditErrorResult, isInteractionTool, isModelInteraction, isOnSafelist, isReservedCredKey, isTodoTool, isTurnHighlighted, isVisible, keybindingsPath, lastContextSizeFromTurns, listProjectFiles, listSessionMeta, loadMcpToolsCache, loadState, localDescriptor, makeRequestInteraction, marginTopFor, maskToOutcomeKinds, matchesBinding, matchesSafelistEntry, mcpCredentialsPath, mcpToolsCachePath, mcpsWritePath, mergeApprovalAndBodyOutcomes, mergeContributions, mergeKeybindings, mergeReferences, mergeSuggestions, modelOptionsFor, modelSupportsReasoning, modelsForDescriptor, mostConstrainedWindow, normalizeMarkdownCodeFences, normalizeRedirectPaste, oauthUsesManualCodePaste, openaiDescriptor, openrouterDescriptor, parentServerName, parseBindingSpec, parseCommandInvocation, parseEditOutcomesFromResult, parseMcpsFile, parseSemver, partitionExtensionCatalog, patchInlineGhost, patchMcpCredential, pendingInteractionsFromTurns, performInPlaceSelfUpdate, performSelfUpdate, piIdOf, pickActiveRunId, previewEditPayload, previewLine, projectUserPaths, projectsFilePath, providerKeySetChanged, providerUsageSupported, pruneTodosByRun, readCredentials, readKeybindings, readKeybindingsRaw, readProjects, readProviderCredential, readProviderCredentialPair, redirectUriFromAuthUrl, reduceMcpAuth, refreshMcpToolsCatalog, removeMcpServer, removeProviderCredential, renderActiveTodoAnchor, renderAgentsMdBlock, renderSession, renderSystemMdSeed, resolveAgentId, resolveApprovalForPayload, resolveChipColor, resolveConfig, resolveExtensionKeybindings, resolveInlineSuggestion, resolvePlatformPackage, resolveSessionExportTarget, resolveStorageDirs, resolveStoragePaths, resolveTheme, restoreChainFallbacks, restoreModelOptions, rewriteMultiEditHeader, runOAuthLogin, runUpdateCommand, sanitizeModelChain, saveMcpToolsCache, saveState, scanExtensionDirectories, searchHighlightRanges, searchSessionHistory, searchSessionHistoryIndex, searchSessionHistoryIndexAsync, searchSessionIndex, searchSessionIndexAsync, searchSessionTurns, searchTurns, searchableTurnText, selectActiveTodos, selectableTurnIds, selectionAfterTurnRemoval, serializeInteractionResponse, setPreferredCredential, setProviderCredential, setTodosForRun, shortChord, shortId, shouldAutoCompact, shouldAutoGenerateTitle, singleAgentRegistry, splitLines, splitMarkdownCodeBlocks, splitPromptSegments, stripEditOutcomesAnnotation, stripJsonComments, stripSpawnTokensLine, subscribeMcpToolsCache, suggestSafelistEntries, sumRunCosts, summarizeEditPayload, summarizeOutcomes, supportsOAuth, titleFromTurns, toggleChainEntry, tokenEndingAtCursor, tokenize, toolCallPreview, toolResultText, truncateTrailing, truncateTurnsAt, tryOpenBrowser, turnAsText, turnContextSize, turnSelectionOwnership, uniqueChatIdsFromReferences, uniqueFilesFromReferences, uniqueSkillNamesFromReferences, updateToolEventOutcomes, upsertMcpServer, usageByModel, usageChecksOptedOut, usageSourceFor, useActiveTodos, useColors, useCompletion, useConfig, useDiscovery, useDiscoveryOptional, useEnabledToggleSet, useInteractionsActions, useInteractionsQueue, useMcpAuthDispatch, useMcpAuthState, useMcpToolToggleMap, useMcpToolToggleSet, useSafeModeActions, useSafeModeQueue, useSelectStyle, useSettings, useStreamBuffer, useSurfaces, useSyntaxStyles, useTheme, useUpdateCheck, userSystemMdPath, writeCredentials, writeProjects, writeSessionExport };
-//# sourceMappingURL=chat.d.ts.map
+import { $d as ConfirmQuestion, $u as formatRunReceiptCells, Aa as discoverExtensions, Ad as anthropicDescriptor, Af as useInteractionsActions, Al as patchInlineGhost, Ap as ContextSnapshot, Au as SessionEventStatus, Ba as defineExtension, Bd as openaiDescriptor, Bo as GuiContributions, Bu as sessionEventLabel, Cd as ProviderKey, Cf as createAutomaticInteractionResponse, Cl as ThemeSurfaces, Co as ExtensionRuntimeEnv, Cp as ContextCategory, Cu as StreamEvent, Dd as ModelInfo, Df as makeRequestInteraction, Dl as InlineAutocompleteProvider, Do as ExtensionStorageScope, Dp as ContextExtensionSection, Du as SESSION_EVENT_STATUS_STYLE, Ed as CustomField, Ef as isModelInteraction, El as InlineAutocompleteContext, Eo as ExtensionSource, Ep as ContextExtensionRow, Fd as getModelInfo, Fl as ActiveTrigger, Fo as ExtensionToolResultMetadataRegistration, Fu as orchestratedBy, Gd as AutoCompactDecision, Gl as mergeSuggestions, Gu as RunReceipt, Hd as piIdOf, Hl as collectReferences, Hu as shortSessionId, Id as localDescriptor, Il as CompletionContext, Iu as parseSessionEventXml, Jd as effectiveContextWindow, Jl as CommandAgentResult, Ju as RunReceiptSegment, Kd as AutoCompactInput, Ku as RunReceiptCell, Ld as modelOptionsFor, Li as GenerateStructuredDataOptions, Ll as CompletionItem, Lu as renderSessionEventXml, Md as credKeyOf, Ml as tokenEndingAtCursor, Mp as buildContextBreakdown, Mu as SessionEventTone, Nd as enabledModelOptions, Nl as CompletionState, Nu as WORKER_REPORT_FRAGMENT, Od as ModelOption, Of as pendingInteractionsFromTurns, Ol as InlineGhost, Oo as ExtensionStorageSurface, Op as ContextItem, Ou as SESSION_ROLE_KEY, Pa as scanExtensionDirectories, Pd as getContextWindow, Pl as useCompletion, Pu as isMainSession, Qd as AnswerValue, Qi as BuildExtensionRegistryOptions, Qu as formatRunDuration, Rd as modelSupportsReasoning, Ri as generateStructuredData, Rl as CompletionProvider, Ru as sessionDirLabel, Sd as ProviderAuth, Sf as buildResumedToolResultsTurn, Sl as ThemeSelect, So as ExtensionRunTransform, Sp as ContextBreakdownOptions, Su as Settings, Td as BUILTIN_PROVIDERS, Tf as isInteractionTool, Tl as resolveTheme, To as ExtensionSkillPolicy, Tp as ContextExactCounts, Tu as ORCHESTRATED_BY_KEY, Ud as restoreModelOptions, Ul as findActiveTrigger, Uo as TuiContributions, Uu as truncateTitle, Vd as openrouterDescriptor, Vl as applyInsert, Vo as LoadedExtension, Vu as sessionEventMeta, Wd as AUTO_COMPACT_MIN_GROWTH_FRACTION, Wl as mergeReferences, Wu as RUN_RECEIPT_GLYPH, Xa as ExtensionBehaviorTransform, Xd as ASK_USER_TOOL, Xu as fitRunReceiptCells, Ya as ExtensionApiVersion, Yd as shouldAutoCompact, Yu as RunReceiptSegmentKind, Zd as AUTOMATIC_INTERACTION_INSTRUCTION, Zl as CommandExecution, Zu as formatCostUsd, _d as restoreChainFallbacks, _f as QuestionRequest, _l as DEFAULT_THEME, _o as ExtensionPaths, _p as ContextSegmentsInput, _u as InteractionMode, ad as ModelChainEntry, af as InteractionsActions, ap as BUILD_AGENT, au as CommandStepContext, bf as SelectQuestion, bl as Theme, bo as ExtensionProviderMiddleware, bp as ContextBreakdownContributionContext, bu as Screen, cd as chainPositionOf, cf as PendingInteractionEntry, co as ExtensionGuiPanel, cp as DEFAULT_BUDGET_EXCLUDE_TOOLS, dd as filterChainFallbacks, df as PlanRequest, dl as StorageMode, do as ExtensionKeybindingDispatchContext, dp as accentColor, du as parseCommandInvocation, ea as buildExtensionPreset, ed as formatRunReceiptLine, ef as CreateInteractionToolsOptions, eo as ExtensionCapability, eu as CommandInvocation, ff as PlanResponse, fl as StorageSlot, fo as ExtensionManifest, fp as resolveAgentId, fu as EditDiffDisplay, gf as QuestionPayload, gl as ChipColorMap, go as ExtensionOrderedContribution, gp as ContextSegmentOrigin, gu as EditPayload, hd as providerKeySetChanged, hf as QuestionChoice, hl as ChipColor, hp as ContextSegmentFile, hu as EditOutcomeKind, ia as filterExtensionRegistry, id as runReceiptFromRun, if as InteractionResponse, ip as AgentRegistry, iu as CommandStep, ja as inlineLoadedExtension, jd as cerebrasDescriptor, jf as useInteractionsQueue, jl as resolveInlineSuggestion, jp as ContextUsageSplit, ju as SessionEventStatusStyle, ka as defaultExtensionScanPaths, kd as ProviderDescriptor, kf as serializeInteractionResponse, kl as createPathAutocompleteProvider, ko as ExtensionToolCatalogTransform, kp as ContextMcpGroup, ku as SessionEvent, ld as chainsEqual, lf as PlanDecision, ll as ResolveStorageDirsOptions, lp as DEFAULT_PERSIST_EXCLUDE_TOOLS, lu as commandSteps, mf as Question, ml as BUILTIN_THEMES, mo as ExtensionModal, mp as ContextSegment, mu as EditOutcome, na as composeExtensionPreset, nd as formatTokensPerSecond, nf as InteractionOrigin, np as AgentAccent, oa as mergeContributions, od as buildRunModel, of as InteractionsProvider, oo as ExtensionDefinition, op as BUILTIN_AGENTS, ou as CommandStepFn, pf as PlanStep, pl as resolveStorageDirs, po as ExtensionMcpConfigTransform, pp as singleAgentRegistry, pu as EditHunk, qa as EMPTY_EXTENSION_REGISTRY, qd as OUTPUT_RESERVE_TOKENS, ql as Command, qu as RunReceiptCellKind, ra as disposeExtensionRegistry, rd as hasRunReceipt, rf as InteractionRequest, ro as ExtensionContributions, rp as AgentProfile, sa as partitionExtensionCatalog, sf as PRESENT_PLAN_TOOL, so as ExtensionFooterHint, sp as DEFAULT_AGENT_ID, ta as buildExtensionRegistry, td as formatTokenCount, tf as HOST_INTERACTION_ID_PREFIX, to as ExtensionContext, tu as CommandOutputBlock, uf as PlanPayload, ul as StorageDirs, uo as ExtensionKeybinding, up as PLAN_AGENT, uu as executeCommand, vd as sanitizeModelChain, vf as QuestionResponse, vl as SyntaxStyles, vo as ExtensionPermission, vp as buildContextSegments, vu as Owner, wd as detectAuth, wf as createInteractionTools, wl as resolveChipColor, wo as ExtensionSessionStateSurface, wp as ContextCategoryId, wu as ToolCallDisplay, xd as AuthMethod, xf as TextQuestion, xl as ThemeColors, xo as ExtensionRegistry, xp as ContextBreakdownContributor, xu as SessionMeta, yd as toggleChainEntry, yf as QuestionType, yl as SyntaxTokenStyle, yp as ContextBreakdown, yu as Picked, zd as modelsForDescriptor, zl as CompletionReference, zu as sessionEventExcerpt } from "./index-B-FSaM3_.js";
+import { $ as ProjectsFile, $n as shortChord, $r as PerformSelfUpdateOptions, $t as createFileMcpCredentialStore, A as buildSkillsConfig, Ai as buildPlanSystem, An as ChatHostEnvironment, Ar as ClaudeCopyResult, At as sessionModelFallbacks, B as SettingsCategoryDescriptor, Bn as RunningWorkItem, Br as BuildUpdateHintOptions, Bt as loadMcpToolsCache, C as userSystemMdPath, Ci as INTERACTION_GUIDANCE, Cn as PendingAnnotation, Cr as setProviderCredential, Ct as OAuthFlowOptions, D as SpawnStartRecord, Di as SUBAGENT_GUIDANCE, Dn as ApprovalRequestInput, Dr as isReservedCredKey, Dt as supportsOAuth, E as useStreamBuffer, Ei as PLAN_MODE_DOCTRINE_NO_PROMPTS, En as ApprovalHub, Er as alternateCredKey, Et as runOAuthLogin, F as SETTINGS_CATEGORIES, Fn as HostSettings, Fr as hasClaudeCodeSetup, Ft as removeMcpServer, G as StringSettingKey, Gn as WireApprovalRequest, Gr as RunUpdateCommandResult, Gt as McpToolToggleSet, H as SettingsInput, Hn as SerializedPreview, Hr as buildUpdateHint, Ht as refreshMcpToolsCatalog, I as SETTINGS_CHOICES, In as HostSignal, Ir as importFromClaudeCode, It as upsertMcpServer, J as folderlessCwd, Jn as cleanTitle, Jr as DetectPackageManagerOptions, Jt as useMcpToolToggleSet, K as enforceSettingsInvariants, Kn as toTodosSnapshot, Kr as runUpdateCommand, Kt as buildToolToggle, L as SETTINGS_INPUTS, Ln as PendingInteraction, Lr as tryOpenBrowser, Lt as CachedMcpToolList, M as discoverProjectSkills, Mi as ChatTurnsReadToolOptions, Mn as ApprovalOriginator, Mr as ClaudeImportSummary, Mt as RemoveMcpResult, N as BooleanSettingKey, Ni as chatReferenceTokensForPrompt, Nn as CommandArgSuggestionSummary, Nr as ClaudeSessionImportResult, Nt as UpsertMcpResult, O as buildSpawnEndEvent, Oi as TOKEN_DISCIPLINE_DOCTRINE, On as createApprovalHub, Or as ConfigProvider, Ot as ModelFallbackTarget, P as DEFAULT_SETTINGS, Pi as createChatTurnsReadTool, Pn as CommandSummary, Pr as countClaudeSessionFiles, Pt as mcpsWritePath, Q as ProjectEntry, Qn as buildHints, Qr as PerformInPlaceUpdateOptions, Qt as parentServerName, R as SETTINGS_TOGGLES, Rn as PromptAttachment, Rr as bootProfileEnabled, Rt as McpToolsCache, S as userScopeOverridesLoad, Si as IDENTITY_PREFIX, Sn as EditOutcomeLedger, Sr as setPreferredCredential, St as redirectUriFromAuthUrl, T as StreamSource, Ti as PLAN_MODE_DOCTRINE, Tn as runCompaction, Tr as ALTERNATE_CRED_KEY_SUFFIX, Tt as oauthUsesManualCodePaste, U as SettingsProvider, Un as SessionPresence, Ur as useUpdateCheck, Ut as saveMcpToolsCache, V as SettingsChoice, Vn as SendOptions, Vr as UseUpdateCheckOptions, Vt as mcpToolsCachePath, W as SettingsToggle, Wn as TodosSnapshot, Wr as RunUpdateCommandOptions, Wt as subscribeMcpToolsCache, X as scopeCwd, Xn as shouldAutoGenerateTitle, Xr as PackageManagerCommand, Xt as buildVisibleMcpRows, Y as resolveSessionCwd, Yn as generateSessionTitle, Yr as InPlaceUpdateResult, Yt as VisibleMcpRow, Z as IMPLICITLY_SAFE_TOOLS, Zn as BuildHintsOptions, Zr as PackageManagerId, Zt as indexOfServerRow, _ as DiscoverSystemMdOptions, _i as ACTIONS_WITH_CARE_DOCTRINE, _r as credentialsPath, _t as findGitRoot, a as GRUVBOX_DARK, ai as detectLibc, an as McpAuthEvent, ar as Walk, at as readProjects, b as discoverSystemMd, bi as DOING_TASKS_DOCTRINE, bn as InteractionHub, br as readProviderCredentialPair, bt as fetchOAuthRedirect, c as CATPPUCCIN_LATTE, ci as performInPlaceSelfUpdate, cn as getMcpAuthStatus, cr as DiscoveryProvider, ct as runEndNotice, d as ThemeProvider, di as chatAutoCompactBehavior, dn as readFileSafe, dr as ApiKeyCredential, dt as clearProviderUsageCache, ei as PlatformTarballOptions, en as mcpCredentialsPath, er as parseEditorCommand, et as addToSafelist, f as useColors, fi as AgentsMdFile, fn as resolveCwdPath, fr as CredentialsFile, ft as fetchAllProviderUsage, g as useTheme, gi as renderAgentsMdBlock, gn as createChatHost, gr as applyApiKeyEnv, gt as usageSourceFor, h as useSyntaxStyles, hi as discoverAgentsMd, hn as ContextSegmentsReport, hr as ProviderCredential, ht as usageChecksOptedOut, i as VAPORWAVE_THEME, ii as compareSemver, in as useMcpAuthState, ir as DiscoverySlotOptions, it as projectsFilePath, j as defaultSkillScanPaths, ji as envSection, jn as PendingApprovalsStore, jr as ClaudeImportOptions, jt as McpConfigScope, k as buildSpawnStartEvent, ki as buildBuildSystem, kn as createMemoryApprovalsStore, kr as useConfig, kt as modelChainMetadata, l as CATPPUCCIN_MACCHIATO, li as performSelfUpdate, ln as reduceMcpAuth, lr as useDiscovery, lt as FetchProviderUsageOptions, m as useSurfaces, mi as DiscoverAgentsMdOptions, mn as ChatHost, mr as PreferCredentialResult, mt as providerUsageSupported, n as createActiveTodoAnchorHooks, ni as UpdateStatus, nn as McpAuthProvider, nr as Commit, nt as isOnSafelist, o as GRUVBOX_LIGHT, oi as detectPackageManager, on as McpAuthStateMap, or as createDiscoverySlot, ot as suggestSafelistEntries, p as useSelectStyle, pi as AgentsMdResult, pn as serializePreview, pr as OAuthCredential, pt as fetchProviderUsage, q as useSettings, qn as GenerateSessionTitleOptions, qr as CheckForUpdateOptions, qt as useMcpToolToggleMap, r as renderActiveTodoAnchor, ri as checkForUpdate, rn as useMcpAuthDispatch, rr as DiscoverySlot, rt as matchesSafelistEntry, s as CATPPUCCIN_FRAPPE, si as parseSemver, sn as McpAuthStatus, sr as DiscoveryContextValue, st as writeProjects, t as ActiveTodoAnchorOptions, ti as SelfUpdateResult, tn as patchMcpCredential, tr as quoteForShell, tt as getSafelist, u as CATPPUCCIN_MOCHA, ui as resolvePlatformPackage, un as extractEditPayloadForGate, ur as useDiscoveryOptional, ut as USAGE_CACHE_TTL_MS, v as SystemMdFile, vi as BuildSystemOptions, vr as readCredentials, vt as formatPathForCwd, w as StreamBuffer, wi as INTERACTION_GUIDANCE_NO_PROMPTS, wn as CompactionEntry, wr as writeCredentials, wt as OAuthPrompt, x as renderSystemMdSeed, xi as EnvSectionOptions, xn as createInteractionHub, xr as removeProviderCredential, xt as normalizeRedirectPaste, y as SystemMdResult, yi as COMMUNICATION_DOCTRINE, yr as readProviderCredential, yt as FetchOAuthRedirectResult, z as SettingsCategory, zn as QueuedItem, zr as bootTick, zt as clearMcpToolsCache } from "./index-DgdzXRPH.js";
+import { $ as KEYBINDING_DEF_BY_ACTION, A as resolveConfig, B as listSessionMeta, C as discoverProjectMcps, D as ProviderRegistry, E as ChatOptions, F as compactSummaryEvent, G as sumRunCosts, H as marginTopFor, I as createStateStore, J as toolResultText, K as titleFromTurns, L as deriveSessionTitle, M as ModelUsageSummary, N as StateStoreApi, O as ResolvedConfig, P as TuiState, Q as KEYBINDING_DEFS, R as eventsFromTurns, S as defaultMcpsConfigPaths, St as truncateTrailing, T as AutoUpdateConfig, U as saveState, V as loadState, W as stripSpawnTokensLine, X as usageByModel, Y as updateToolEventOutcomes, Z as DEFAULT_KEYBINDINGS, _ as DiscoveredMcp, _t as stripJsonComments, a as SessionExportTarget, at as ParsedBinding, b as buildMcpServers, bt as clipHintsToWidth, c as writeSessionExport, ct as formatBindingForDisplay, d as useEnabledToggleSet, dt as matchesBinding, et as KEYBINDING_KEY_COL_WIDTH, f as DiscoveredPlugin, ft as mergeKeybindings, g as projectUserPaths, gt as resolveExtensionKeybindings, h as ProjectUserPath, ht as readKeybindingsRaw, i as SessionExportFormat, it as KeyBindings, j as resolveStoragePaths, k as ResolvedPaths, l as EnabledAllowlistKey, lt as groupBindings, m as discoverProjectPlugins, mt as readKeybindings, n as computeTurnAnchors, nt as KeyBindingDef, o as renderSession, ot as ResolvedExtensionKeybinding, p as buildPluginContributions, pt as parseBindingSpec, q as toolCallPreview, r as SessionExportAnchor, rt as KeyBindingSection, s as resolveSessionExportTarget, st as ensureKeybindingsFile, t as TranscriptItem, tt as KeyAction, u as EnabledToggleSet, ut as keybindingsPath, v as DiscoveryError, vt as EMPTY_HINTS, w as parseMcpsFile, x as dedupMcpServersByName, xt as hintsLength, y as DiscoveryResult, yt as Hint, z as lastContextSizeFromTurns } from "./transcript-anchors-DXqWWGbq.js";
+import { $ as CacheChipContent, A as finalizeStreamingMarkdown, At as stripEditOutcomesAnnotation, B as formatUsagePercent, Bt as listProjectFiles, C as sanitizeTodoItems, Ct as ResolvedApproval, D as MAX_TRANSCRIPT_EVENTS, Dt as parseEditOutcomesFromResult, E as useActiveTodos, Et as mergeApprovalAndBodyOutcomes, F as ProviderUsageStatus, Ft as FILES_TRIGGER, G as compactPath, Gt as ChatReferenceEntry, Ht as createCommandsCompletionProvider, I as ProviderUsageWindow, It as createFilesCompletionProvider, J as formatDuration, Jt as createChatsCompletionProvider, K as fmtCost, Kt as ChatReferenceScope, Lt as uniqueFilesFromReferences, M as turnContextSize, Mt as SKILLS_TRIGGER, N as ProviderUsageCredits, Nt as createSkillsCompletionProvider, O as TRANSCRIPT_TRIM_TO_EVENTS, Ot as resolveApprovalForPayload, P as ProviderUsageSnapshot, Pt as uniqueSkillNamesFromReferences, Q as shortId, Rt as FileEntry, S as pruneTodosByRun, St as tokenize, T as setTodosForRun, Tt as maskToOutcomeKinds, Ut as CHATS_TRIGGER, V as mostConstrainedWindow, Vt as COMMANDS_TRIGGER, W as ageString, Wt as ChatReferenceData, X as formatTaskSummary, Xt as blendHsl, Y as formatTaskStatus, Yt as uniqueChatIdsFromReferences, Z as previewLine, Zt as buildLinearRamp, _ as createTodoTools, _t as extractEditPayload, a as ActiveTodosState, at as DiffOp, b as isTodoTool, bt as splitLines, c as TODOREAD_TOOL, ct as HunkResolution, d as TODO_STATUS_GLYPHS, dt as PreviewResult, et as CacheChipTone, f as TODO_WRITE_COUNTS_METADATA_KEY, ft as applyEditPayload, g as TodosBag, gt as computeLineDiff, h as TodoTally, ht as computeInlineDiff, i as turnAsText, it as DiffLine, j as finalizeStreamingMarkdownForOwner, jt as summarizeOutcomes, k as capTranscriptEvents, kt as rewriteMultiEditHeader, l as TODOS_METADATA_KEY, lt as InlineDiff, m as TodoStatus, mt as buildUnifiedDiff, n as deleteTurnSafely, nt as compactingLabel, o as CreateTodoToolsOptions, ot as EditHunkSummary, p as TodoItem, pt as buildContextualDiff, q as fmtTokens, qt as chatReferenceTokensFromText, r as truncateTurnsAt, rt as retryLabel, s as DEFAULT_MAX_TODO_ITEMS, st as EditSummary, t as countNeighbors, tt as cacheBreakChip, u as TODOWRITE_TOOL, ut as InlineSegment, v as getArchivedTodosForRun, vt as filetypeFromPath, w as selectActiveTodos, wt as buildEditOutcomesAnnotation, x as pickActiveRunId, xt as summarizeEditPayload, y as getTodosForRun, yt as previewEditPayload, zt as ListProjectFilesOptions } from "./turn-operations-DKFYWP3O.js";
+import { A as filterSessionSearchCatalog, B as searchableTurnText, C as SearchSessionResult, D as SessionSearchIndex, E as SessionSearchExcerpt, F as searchSessionHistoryIndexAsync, G as SafeModeProvider, H as ApprovalRequest, I as searchSessionIndex, J as DAEMON_HEALTH_GLYPH, K as useSafeModeActions, L as searchSessionIndexAsync, M as searchHighlightRanges, N as searchSessionHistory, O as buildSessionSearchIndex, P as searchSessionHistoryIndex, Q as DaemonHealthTone, R as searchSessionTurns, S as SearchExcerpt, T as SessionHistoryMatch, U as RequestApproval, V as ApprovalDecision, W as SafeModeActions, X as DaemonHealth, Y as DAEMON_HEALTH_STYLE, Z as DaemonHealthStyle, _ as normalizeMarkdownCodeFences, a as formatToolCall, at as isVisible, b as HighlightSegment, c as splitPromptSegments, d as filterModelCatalog, dt as turnSelectionOwnership, f as indexOfEntry, g as chunkMarkdownForRender, h as MarkdownSegment, i as displayNameFor, j as highlightSegments, k as buildSessionSearchIndexAsync, l as CatalogEntry, lt as selectableTurnIds, m as MARKDOWN_RENDER_CHUNK_TARGET_BYTES, n as ToolDisplayMeta, nt as isEditErrorResult, o as PromptSegment, q as useSafeModeQueue, r as ToolFormatLine, rt as isTurnHighlighted, s as PromptSegmentRef, t as TOOL_DISPLAY, u as buildModelCatalog, ut as selectionAfterTurnRemoval, v as splitMarkdownCodeBlocks, w as SearchTurnResult, x as IndexedSearchTurn, y as HighlightRange, z as searchTurns } from "./tool-formatters-DO56YBBw.js";
+export { ACTIONS_WITH_CARE_DOCTRINE, ALTERNATE_CRED_KEY_SUFFIX, ASK_USER_TOOL, AUTOMATIC_INTERACTION_INSTRUCTION, AUTO_COMPACT_MIN_GROWTH_FRACTION, type ActiveTodoAnchorOptions, type ActiveTodosState, type ActiveTrigger, type AgentAccent, type AgentProfile, type AgentRegistry, type AgentsMdFile, type AgentsMdResult, type AnswerValue, type ApiKeyCredential, type ApprovalDecision, type ApprovalHub, type ApprovalOriginator, type ApprovalRequest, type ApprovalRequestInput, type AuthMethod, type AutoCompactDecision, type AutoCompactInput, type AutoUpdateConfig, BUILD_AGENT, BUILTIN_AGENTS, BUILTIN_PROVIDERS, BUILTIN_THEMES, type BooleanSettingKey, type BuildExtensionRegistryOptions, type BuildHintsOptions, type BuildSystemOptions, type BuildUpdateHintOptions, CATPPUCCIN_FRAPPE, CATPPUCCIN_LATTE, CATPPUCCIN_MACCHIATO, CATPPUCCIN_MOCHA, CHATS_TRIGGER, COMMANDS_TRIGGER, COMMUNICATION_DOCTRINE, type CacheChipContent, type CacheChipTone, type CachedMcpToolList, type CatalogEntry, type ChatHost, type ChatHostEnvironment, type ChatOptions, type ChatReferenceData, type ChatReferenceEntry, type ChatReferenceScope, type ChatTurnsReadToolOptions, type CheckForUpdateOptions, type ChipColor, type ChipColorMap, type ClaudeCopyResult, type ClaudeImportOptions, type ClaudeImportSummary, type ClaudeSessionImportResult, type Command, type CommandAgentResult, type CommandArgSuggestionSummary, type CommandExecution, type CommandInvocation, type CommandOutputBlock, type CommandStep, type CommandStepContext, type CommandStepFn, type CommandSummary, type Commit, type CompactionEntry, type CompletionContext, type CompletionItem, type CompletionProvider, type CompletionReference, type CompletionState, ConfigProvider, type ConfirmQuestion, type ContextBreakdown, type ContextBreakdownContributionContext, type ContextBreakdownContributor, type ContextBreakdownOptions, type ContextCategory, type ContextCategoryId, type ContextExactCounts, type ContextExtensionRow, type ContextExtensionSection, type ContextItem, type ContextMcpGroup, type ContextSegment, type ContextSegmentFile, type ContextSegmentOrigin, type ContextSegmentsInput, type ContextSegmentsReport, type ContextSnapshot, type ContextUsageSplit, type CreateInteractionToolsOptions, type CreateTodoToolsOptions, type CredentialsFile, type CustomField, DAEMON_HEALTH_GLYPH, DAEMON_HEALTH_STYLE, DEFAULT_AGENT_ID, DEFAULT_BUDGET_EXCLUDE_TOOLS, DEFAULT_KEYBINDINGS, DEFAULT_MAX_TODO_ITEMS, DEFAULT_PERSIST_EXCLUDE_TOOLS, DEFAULT_SETTINGS, DEFAULT_THEME, DOING_TASKS_DOCTRINE, type DaemonHealth, type DaemonHealthStyle, type DaemonHealthTone, type DetectPackageManagerOptions, type DiffLine, type DiffOp, type DiscoverAgentsMdOptions, type DiscoverSystemMdOptions, type DiscoveredMcp, type DiscoveredPlugin, type DiscoveryContextValue, type DiscoveryError, DiscoveryProvider, type DiscoveryResult, type DiscoverySlot, type DiscoverySlotOptions, EMPTY_EXTENSION_REGISTRY, EMPTY_HINTS, type EditDiffDisplay, type EditHunk, type EditHunkSummary, type EditOutcome, type EditOutcomeKind, EditOutcomeLedger, type EditPayload, type EditSummary, type EnabledAllowlistKey, type EnabledToggleSet, type EnvSectionOptions, type ExtensionApiVersion, type ExtensionBehaviorTransform, type ExtensionCapability, type ExtensionContext, type ExtensionContributions, type ExtensionDefinition, type ExtensionFooterHint, type ExtensionGuiPanel, type ExtensionKeybinding, type ExtensionKeybindingDispatchContext, type ExtensionManifest, type ExtensionMcpConfigTransform, type ExtensionModal, type ExtensionOrderedContribution, type ExtensionPaths, type ExtensionPermission, type ExtensionProviderMiddleware, type ExtensionRegistry, type ExtensionRunTransform, type ExtensionRuntimeEnv, type ExtensionSessionStateSurface, type ExtensionSkillPolicy, type ExtensionSource, type ExtensionStorageScope, type ExtensionStorageSurface, type ExtensionToolCatalogTransform, type ExtensionToolResultMetadataRegistration, FILES_TRIGGER, type FetchOAuthRedirectResult, type FetchProviderUsageOptions, type FileEntry, GRUVBOX_DARK, GRUVBOX_LIGHT, type GenerateSessionTitleOptions, type GenerateStructuredDataOptions, type GuiContributions, HOST_INTERACTION_ID_PREFIX, type HighlightRange, type HighlightSegment, type Hint, type HostSettings, type HostSignal, type HunkResolution, IDENTITY_PREFIX, IMPLICITLY_SAFE_TOOLS, INTERACTION_GUIDANCE, INTERACTION_GUIDANCE_NO_PROMPTS, type InPlaceUpdateResult, type IndexedSearchTurn, type InlineAutocompleteContext, type InlineAutocompleteProvider, type InlineDiff, type InlineGhost, type InlineSegment, type InteractionHub, type InteractionMode, type InteractionOrigin, type InteractionRequest, type InteractionResponse, type InteractionsActions, InteractionsProvider, KEYBINDING_DEFS, KEYBINDING_DEF_BY_ACTION, KEYBINDING_KEY_COL_WIDTH, type KeyAction, type KeyBindingDef, type KeyBindingSection, type KeyBindings, type ListProjectFilesOptions, type LoadedExtension, MARKDOWN_RENDER_CHUNK_TARGET_BYTES, MAX_TRANSCRIPT_EVENTS, type MarkdownSegment, type McpAuthEvent, McpAuthProvider, type McpAuthStateMap, type McpAuthStatus, type McpConfigScope, type McpToolToggleSet, type McpToolsCache, type ModelChainEntry, type ModelFallbackTarget, type ModelInfo, type ModelOption, type ModelUsageSummary, type OAuthCredential, type OAuthFlowOptions, type OAuthPrompt, ORCHESTRATED_BY_KEY, OUTPUT_RESERVE_TOKENS, type Owner, PLAN_AGENT, PLAN_MODE_DOCTRINE, PLAN_MODE_DOCTRINE_NO_PROMPTS, PRESENT_PLAN_TOOL, type PackageManagerCommand, type PackageManagerId, type ParsedBinding, type PendingAnnotation, type PendingApprovalsStore, type PendingInteraction, type PendingInteractionEntry, type PerformInPlaceUpdateOptions, type PerformSelfUpdateOptions, type Picked, type PlanDecision, type PlanPayload, type PlanRequest, type PlanResponse, type PlanStep, type PlatformTarballOptions, type PreferCredentialResult, type PreviewResult, type ProjectEntry, type ProjectUserPath, type ProjectsFile, type PromptAttachment, type PromptSegment, type PromptSegmentRef, type ProviderAuth, type ProviderCredential, type ProviderDescriptor, type ProviderKey, type ProviderRegistry, type ProviderUsageCredits, type ProviderUsageSnapshot, type ProviderUsageStatus, type ProviderUsageWindow, type Question, type QuestionChoice, type QuestionPayload, type QuestionRequest, type QuestionResponse, type QuestionType, type QueuedItem, RUN_RECEIPT_GLYPH, type RemoveMcpResult, type RequestApproval, type ResolveStorageDirsOptions, type ResolvedApproval, type ResolvedConfig, type ResolvedExtensionKeybinding, type ResolvedPaths, type RunReceipt, type RunReceiptCell, type RunReceiptCellKind, type RunReceiptSegment, type RunReceiptSegmentKind, type RunUpdateCommandOptions, type RunUpdateCommandResult, type RunningWorkItem, SESSION_EVENT_STATUS_STYLE, SESSION_ROLE_KEY, SETTINGS_CATEGORIES, SETTINGS_CHOICES, SETTINGS_INPUTS, SETTINGS_TOGGLES, SKILLS_TRIGGER, SUBAGENT_GUIDANCE, type SafeModeActions, SafeModeProvider, type Screen, type SearchExcerpt, type SearchSessionResult, type SearchTurnResult, type SelectQuestion, type SelfUpdateResult, type SendOptions, type SerializedPreview, type SessionEvent, type SessionEventStatus, type SessionEventStatusStyle, type SessionEventTone, type SessionExportAnchor, type SessionExportFormat, type SessionExportTarget, type SessionHistoryMatch, type SessionMeta, type SessionPresence, type SessionSearchExcerpt, type SessionSearchIndex, type Settings, type SettingsCategory, type SettingsCategoryDescriptor, type SettingsChoice, type SettingsInput, SettingsProvider, type SettingsToggle, type SpawnStartRecord, type StateStoreApi, type StorageDirs, type StorageMode, type StorageSlot, type StreamBuffer, type StreamEvent, type StreamSource, type StringSettingKey, type SyntaxStyles, type SyntaxTokenStyle, type SystemMdFile, type SystemMdResult, TODOREAD_TOOL, TODOS_METADATA_KEY, TODOWRITE_TOOL, TODO_STATUS_GLYPHS, TODO_WRITE_COUNTS_METADATA_KEY, TOKEN_DISCIPLINE_DOCTRINE, TOOL_DISPLAY, TRANSCRIPT_TRIM_TO_EVENTS, type TextQuestion, type Theme, type ThemeColors, ThemeProvider, type ThemeSelect, type ThemeSurfaces, type TodoItem, type TodoStatus, type TodoTally, type TodosBag, type TodosSnapshot, type ToolCallDisplay, type ToolDisplayMeta, type ToolFormatLine, type TranscriptItem, type TuiContributions, type TuiState, USAGE_CACHE_TTL_MS, type UpdateStatus, type UpsertMcpResult, type UseUpdateCheckOptions, VAPORWAVE_THEME, type VisibleMcpRow, WORKER_REPORT_FRAGMENT, type Walk, type WireApprovalRequest, accentColor, addToSafelist, ageString, alternateCredKey, anthropicDescriptor, applyApiKeyEnv, applyEditPayload, applyInsert, blendHsl, bootProfileEnabled, bootTick, buildBuildSystem, buildContextBreakdown, buildContextSegments, buildContextualDiff, buildEditOutcomesAnnotation, buildExtensionPreset, buildExtensionRegistry, buildHints, buildLinearRamp, buildMcpServers, buildModelCatalog, buildPlanSystem, buildPluginContributions, buildResumedToolResultsTurn, buildRunModel, buildSessionSearchIndex, buildSessionSearchIndexAsync, buildSkillsConfig, buildSpawnEndEvent, buildSpawnStartEvent, buildToolToggle, buildUnifiedDiff, buildUpdateHint, buildVisibleMcpRows, cacheBreakChip, capTranscriptEvents, cerebrasDescriptor, chainPositionOf, chainsEqual, chatAutoCompactBehavior, chatReferenceTokensForPrompt, chatReferenceTokensFromText, checkForUpdate, chunkMarkdownForRender, cleanTitle, clearMcpToolsCache, clearProviderUsageCache, clipHintsToWidth, collectReferences, commandSteps, compactPath, compactSummaryEvent, compactingLabel, compareSemver, composeExtensionPreset, computeInlineDiff, computeLineDiff, computeTurnAnchors, countClaudeSessionFiles, countNeighbors, createActiveTodoAnchorHooks, createApprovalHub, createAutomaticInteractionResponse, createChatHost, createChatTurnsReadTool, createChatsCompletionProvider, createCommandsCompletionProvider, createDiscoverySlot, createFileMcpCredentialStore, createFilesCompletionProvider, createInteractionHub, createInteractionTools, createMemoryApprovalsStore, createPathAutocompleteProvider, createSkillsCompletionProvider, createStateStore, createTodoTools, credKeyOf, credentialsPath, dedupMcpServersByName, defaultExtensionScanPaths, defaultMcpsConfigPaths, defaultSkillScanPaths, defineExtension, deleteTurnSafely, deriveSessionTitle, detectAuth, detectLibc, detectPackageManager, discoverAgentsMd, discoverExtensions, discoverProjectMcps, discoverProjectPlugins, discoverProjectSkills, discoverSystemMd, displayNameFor, disposeExtensionRegistry, effectiveContextWindow, enabledModelOptions, enforceSettingsInvariants, ensureKeybindingsFile, envSection, eventsFromTurns, executeCommand, extractEditPayload, extractEditPayloadForGate, fetchAllProviderUsage, fetchOAuthRedirect, fetchProviderUsage, filetypeFromPath, filterChainFallbacks, filterExtensionRegistry, filterModelCatalog, filterSessionSearchCatalog, finalizeStreamingMarkdown, finalizeStreamingMarkdownForOwner, findActiveTrigger, findGitRoot, fitRunReceiptCells, fmtCost, fmtTokens, folderlessCwd, formatBindingForDisplay, formatCostUsd, formatDuration, formatPathForCwd, formatRunDuration, formatRunReceiptCells, formatRunReceiptLine, formatTaskStatus, formatTaskSummary, formatTokenCount, formatTokensPerSecond, formatToolCall, formatUsagePercent, generateSessionTitle, generateStructuredData, getArchivedTodosForRun, getContextWindow, getMcpAuthStatus, getModelInfo, getSafelist, getTodosForRun, groupBindings, hasClaudeCodeSetup, hasRunReceipt, highlightSegments, hintsLength, importFromClaudeCode, indexOfEntry, indexOfServerRow, inlineLoadedExtension, isEditErrorResult, isInteractionTool, isMainSession, isModelInteraction, isOnSafelist, isReservedCredKey, isTodoTool, isTurnHighlighted, isVisible, keybindingsPath, lastContextSizeFromTurns, listProjectFiles, listSessionMeta, loadMcpToolsCache, loadState, localDescriptor, makeRequestInteraction, marginTopFor, maskToOutcomeKinds, matchesBinding, matchesSafelistEntry, mcpCredentialsPath, mcpToolsCachePath, mcpsWritePath, mergeApprovalAndBodyOutcomes, mergeContributions, mergeKeybindings, mergeReferences, mergeSuggestions, modelChainMetadata, modelOptionsFor, modelSupportsReasoning, modelsForDescriptor, mostConstrainedWindow, normalizeMarkdownCodeFences, normalizeRedirectPaste, oauthUsesManualCodePaste, openaiDescriptor, openrouterDescriptor, orchestratedBy, parentServerName, parseBindingSpec, parseCommandInvocation, parseEditOutcomesFromResult, parseEditorCommand, parseMcpsFile, parseSemver, parseSessionEventXml, partitionExtensionCatalog, patchInlineGhost, patchMcpCredential, pendingInteractionsFromTurns, performInPlaceSelfUpdate, performSelfUpdate, piIdOf, pickActiveRunId, previewEditPayload, previewLine, projectUserPaths, projectsFilePath, providerKeySetChanged, providerUsageSupported, pruneTodosByRun, quoteForShell, readCredentials, readFileSafe, readKeybindings, readKeybindingsRaw, readProjects, readProviderCredential, readProviderCredentialPair, redirectUriFromAuthUrl, reduceMcpAuth, refreshMcpToolsCatalog, removeMcpServer, removeProviderCredential, renderActiveTodoAnchor, renderAgentsMdBlock, renderSession, renderSessionEventXml, renderSystemMdSeed, resolveAgentId, resolveApprovalForPayload, resolveChipColor, resolveConfig, resolveCwdPath, resolveExtensionKeybindings, resolveInlineSuggestion, resolvePlatformPackage, resolveSessionCwd, resolveSessionExportTarget, resolveStorageDirs, resolveStoragePaths, resolveTheme, restoreChainFallbacks, restoreModelOptions, retryLabel, rewriteMultiEditHeader, runCompaction, runEndNotice, runOAuthLogin, runReceiptFromRun, runUpdateCommand, sanitizeModelChain, sanitizeTodoItems, saveMcpToolsCache, saveState, scanExtensionDirectories, scopeCwd, searchHighlightRanges, searchSessionHistory, searchSessionHistoryIndex, searchSessionHistoryIndexAsync, searchSessionIndex, searchSessionIndexAsync, searchSessionTurns, searchTurns, searchableTurnText, selectActiveTodos, selectableTurnIds, selectionAfterTurnRemoval, serializeInteractionResponse, serializePreview, sessionDirLabel, sessionEventExcerpt, sessionEventLabel, sessionEventMeta, sessionModelFallbacks, setPreferredCredential, setProviderCredential, setTodosForRun, shortChord, shortId, shortSessionId, shouldAutoCompact, shouldAutoGenerateTitle, singleAgentRegistry, splitLines, splitMarkdownCodeBlocks, splitPromptSegments, stripEditOutcomesAnnotation, stripJsonComments, stripSpawnTokensLine, subscribeMcpToolsCache, suggestSafelistEntries, sumRunCosts, summarizeEditPayload, summarizeOutcomes, supportsOAuth, titleFromTurns, toTodosSnapshot, toggleChainEntry, tokenEndingAtCursor, tokenize, toolCallPreview, toolResultText, truncateTitle, truncateTrailing, truncateTurnsAt, tryOpenBrowser, turnAsText, turnContextSize, turnSelectionOwnership, uniqueChatIdsFromReferences, uniqueFilesFromReferences, uniqueSkillNamesFromReferences, updateToolEventOutcomes, upsertMcpServer, usageByModel, usageChecksOptedOut, usageSourceFor, useActiveTodos, useColors, useCompletion, useConfig, useDiscovery, useDiscoveryOptional, useEnabledToggleSet, useInteractionsActions, useInteractionsQueue, useMcpAuthDispatch, useMcpAuthState, useMcpToolToggleMap, useMcpToolToggleSet, useSafeModeActions, useSafeModeQueue, useSelectStyle, useSettings, useStreamBuffer, useSurfaces, useSyntaxStyles, useTheme, useUpdateCheck, userScopeOverridesLoad, userSystemMdPath, writeCredentials, writeProjects, writeSessionExport };