Short badge for session listings: enabled counts ("2 cron, 1 trigger"), or "automation off" when everything present is disabled. `None` when there is

Shut down the transport. Subsequent calls fail with `NotInitialized` / transport error.

Top-level compaction entry point. Picks a cut point, summarizes the prefix, returns the summary plus metadata for the harness to record on the session

Create a brand-new session under the current cwd's sessions dir.

Delete a session by id (full UUIDv7) or a unique prefix.

Enter: descend at provider level (returns `None`), select at model level (returns the `provider:id` spec).

Construct an instantly-errored stream. Per the TS contract, providers must encode failures in the returned stream rather than throw — same applies to

Two-shot stream_fn: first message asks for `prompter` tool call, second is plain stop. Used by the audit tests below to drive the classifier → prompt

Force a compaction immediately, regardless of token thresholds. Useful for `/compact`- style slash commands.

Lookup. Returns a handle that delegates to the registered provider while holding no lock — we clone-by-reference using a shim because trait objects in

Send the initialize request and the matching `initialized` notification.

List sessions for this cwd, oldest → newest, with a short preview from the first user message when available.

Build an image attachment from already-read bytes. Used by both `--image` paths and clipboard paste, so format and size validation stay identical.

Load templates from each directory. Missing directories are silently skipped. `.md` files at the directory root become templates; directory recursion

`<sess>.cron.toml` + `cron-abcdef…` → `<sess>.loop-cron-abcdef12.md` (8-char id prefix after the `cron-` marker keeps names short but unambiguous in p

Generate a URL-safe 160-bit random token (40 lowercase hex chars). Sourced from two v4 UUIDs (OS RNG) so no extra dependency is needed.

Bounded preview text for status banners. Avoids panicking on multi-byte char boundaries by walking char count, not byte count.

Resolve the local dynamic trigger poll interval. CLI overrides config; config overrides the built-in default. A malformed config reports a diagnostic

Persist a `turn_end_decision` audit entry and emit the matching [`HarnessEvent::TurnEnded`] event. Best-effort: persistence failures do not abort the

Replace the agent's in-memory state with the session's active branch. Messages, model, and thinking level are restored from `Session::build_context()`

Render the full menu (header, entries in the window, scroll indicators, footer) for a terminal of `width` columns with `height` entry rows visible.

Render the canonical `SKILL.md`. Frontmatter goes through `serde_yaml` so special characters in `description` are escaped correctly; the description i

Replace the skill catalog. Rebuilds the system prompt so the in-flight Agent state has the new `<skills>` block on its next LLM call.

Resolve the final `AssistantMessage`. Returns the message stored by the terminal event; if the sender was dropped without emitting a terminal event, r

Atomic write: rename-temp + chmod 600. Best-effort on platforms without unix perms.

Switch model. Persists a `ModelChange` session entry so resume sees the right one.

Subscribe to lifecycle events. Returns an unsubscribe closure.

Take ownership of the server-notification receiver. Returns `Some(rx)` on the first call and `None` on every call thereafter. Intended for `McpNotific

Rewrite `messages` for the destination `model`.

Write a `<base>/skills/<name>/SKILL.md` on disk and return the absolute SKILL.md path.

Cancel the in-flight sub-agent for `trace_id`. No-op if the trigger has already completed or was never accepted. The spawned task will observe the can

Re-enable the given trigger/cron ids on an imported session's sidecars — the second half of the interactive "activate imported automation now?" flow.

Convert this policy into a `BeforeToolCallHook` ready to assign to [`crate::agent::AgentOptions::before_tool_call`].

When other sessions in this repo hold *enabled* automation, return a one-line hint naming the newest such session so the user can resume it. `current`

List every built-in name in stable alphabetical order. Used by error/diagnostic messages so the `Available: ...` list is reproducible across runs.

Filtered + grouped catalog with live credential detection.

Testable core: credential detection injected.

Shared budget-cap precondition used by every entry path (`prompt` / `prompt_with_images` / `continue_` / continuation iterations).