Conservative char-class-aware text estimate: ~4 chars per token for ASCII, ~1 token per char for non-ASCII (CJK and similar scripts tokenize close to

Apply every secret-pattern regex to `input`. Each match is replaced with a fixed placeholder that names which class of secret was caught so the user c

Point-in-time view of the harness's notification surface — the [`TriggerRuntimeSnapshot`] plus a `Vec<NotificationHookStatus>` collected from each reg

Hot-reload the skill catalog from disk via the embedder-supplied [`AgentHarnessOptions::reload_skills_fn`] closure. Used by `InstallSkillTool`, `/skil

Apply the overlay to a freshly-loaded skill catalog: for each skill that has an explicit `{source, name}` override, set `disable_model_invocation = !e

Parse a (potentially incomplete) JSON document, closing any open structures and trailing strings so the result is still valid JSON. Returns `Value::Nu

Upsert an explicit `{source, name} -> enabled` override.

Idempotent stop. Flips the flag, then synchronously emits the line-clear escape so any subsequent write by the caller lands on a clean line.

Build a `reqwest::Client` honoring proxy env vars and pie-ai defaults.

Build the union of CLI-requested + config-requested built-in skills. `cli_requested` is treated as authoritative: an unknown name is an error returne

Send a `reqwest::RequestBuilder` with retries. Internally uses `try_clone` to rebuild the request between attempts. For JSON / form / text bodies this

Auto-approve `on_control_plane_prompt` for tests that exercise tools whose `permission_classification` returns `Prompt` (issue #110 sub-PR 3 — `NewTri

Append a finding. Text is trimmed and capped at [`MAX_ENTRY_TEXT_CHARS`].

Feed one event-stream EventMessage. Returns zero or more typed events. Returning `Ok(vec![])` is normal — many incoming frames don't need to be surfac

Move the session leaf to a specific entry id (or root). When `summary` is provided, records a branch_summary entry so siblings see the fork's contribu

Spawn the server, wire stdio, and start the read pump. Caller must then call [`Self::initialize`] before any other method.

Fetch the server's tool catalog and cache it.

Mint a fresh UUIDv7 string (lowercase, hyphenated).

Reset per-connection state when a fresh agent socket attaches.

Build a harness whose catalog is `seed` and whose `reload_skills_from_disk` re-derives the catalog from `seed` with the overlay at `base_dir` applied

Harness whose `reload_skills_from_disk` re-scans `<base>/skills` from disk (so a removed dir actually disappears from the reloaded catalog) and applie

Evaluate a single tool call against the policy in the default [`PermissionCategory::Tool`] category. Preserved for backwards compatibility — new calle

True when the consumer has dropped the stream. Providers can short-circuit on this.

Load the overlay. A missing file is an empty overlay; a malformed file is treated as empty (the disable/enable state simply isn't applied) rather than

Completions for the current input. Returns matching `/command` strings when `line` is a bare slash token (`/`, `/he`, …) with no whitespace yet; other

Register a [`super::notification_hook::NotificationHook`] with the harness. Spawns two detached tokio tasks: - **Driver**: calls `hook.run(sink)` and

Abort the active run, if any. Subsequent calls are no-ops.

IEEE 802.3 CRC32 (polynomial 0xEDB88320). Hand-rolled with a 256-entry lookup table built at first use.