Real `*Hook` trait registrations active in this binary. Only names that map to an actual `AgentHarness` extension point — so users reading the panel l

Active cancellation token while a run is in flight, otherwise `None`.

Trigger-runtime features always wired in the current binary. Distinct from hook registrations — these are pipeline behaviors (dedup, cycle suppression

Build the per-turn agent listener. Maps streaming deltas, tool calls, and turn boundaries into feed updates.

Derive the agent WebSocket URL from the configured https base URL.

Auto-approve `on_control_plane_prompt` for tests that exercise a tool whose `permission_classification` returns `Prompt` (issue #110 sub-PR 3 — `NewTr

Build an `AfterToolCallHook` that attaches LSP diagnostics to write/edit tool results. On non-edit tools, returns the result unmodified.

Stable `decision` string for the `control_plane_prompt` audit entry. Avoid stringifying the `Debug` representation — these values are part of the audi

Build an [`crate::agent::AgentListener`] that records every assistant `MessageEnd`. The listener clones the tracker (cheap — `Arc` bump) so the harnes

Build the authorize URL + state + verifier.

Esc: model list → provider list (returns `false`), provider list → close (returns `true`).

Render the startup banner. `tool_names` comes from the registered tool definitions so adding/removing a tool in `tools::default_tools()` flows through

Normalize the Responses endpoint URL. The catalog sets `baseUrl` to either the host root (`https://api.openai.com`) or already includes the `/v1` pref

Inputs allowlisted for the promotion template per RFC 1 §5.C. Constructed once per promotion and exposed to the renderer as a sealed map; references t

Lazily get or spawn the LSP client for `ext`. Caches per language id.

Client id, base64-obfuscated in the TS source. Decoded at runtime to match 1:1.

Re-bind the service name without poisoning the existing inner's queue. Used only by `with_service_name`.

Walk the input and append closing tokens needed to balance braces/brackets/strings. Mirrors the closing logic in the `partial-json` package; minimal b

Extract text blocks from a tool result and build the same display-only compact preview used for live tool events. This keeps resume replay, headless o

Inspect the sub-agent's terminal state to summarize the outcome. Returns `(success, summary, message_count)`. `summary` is the text of the sub-agent'

Controllable stream factory. The first call (parent's initial prompt) waits on `release` so we can race a trigger promotion against the in-flight stre

Convert pi messages into Gemini `contents`. The system prompt is handled separately by the provider (as `systemInstruction`), so it is not included he

The archive carries the full transcript, so it is created owner-only and never truncates an existing file.

Deterministic short hash of an absolute cwd path. Same input → same dir, so reopening from the same project always finds prior sessions.

Insert `skill` into `combined`, replacing any existing entry with the same name. Since we load user first and project second, a later (project-side) s

Default convert-to-llm: keep only `AgentMessage::Llm` variants.

The canonical "this almost certainly causes harm" corpus. Patterns are anchored *loosely (substring match within the full command), so flag ordering f

Token-aware predicates for rules where regex alone is fragile. Currently only `rm` with recursive + force flags; intentionally small so the cost of ru

Default **redaction-safe by construction** prompt payload synthesized from the classifier outcome. Per @Provider-Auth-Lead + @CLI-TUI-Dev-Lead on PR #

Default tool set the coding agent ships with. Order matches the TS `createCodingTools()` + the read-only quartet (`grep`/`find`/`ls`) the TS exposes v

A faux stream that emits a thinking delta, then waits before emitting text + done. Lets the spinner animate while the model is still thinking.

Compute what to delete for a skill whose SKILL.md is `file_path`, given the skills root. Returns the direct child of `skills_root` on the path (a `<na

Return the most recent diagnostics for `uri` (empty if none received yet).