English documentation · runtime 7.24.4 · SDK 2.6.7. Content is maintained with runtime development; see each guide's scope and review date.

Stability

Status: Active
Scope: current-state
Last reviewed: 2026-07-18
Owner: ax-code runtime

How AX Code stays reliable for long interactive sessions and headless runs.

Layers

Layer	What is hardened	Key modules
TUI lifecycle	Suspend/resume, crash terminal restore, session leave memory prune	ADR-047; `cli/tui/util/*`
Process faults	Abort/cancel/broken-pipe ignored; real crashes still exit	`util/harmless-interrupt`, TUI crash handler, CLI boot hooks
Timeouts	Tool/LSP/MCP bounds without unhandledRejection	`util/timeout.withTimeout`
Streams	Idle watchdog, resilient reconnect	`session/llm-impl` idle watchdog; `resilient-stream`
Permissions	Double-submit latch + reply timeout	`permission-submit-latch`, permission prompt
Repo wiki	Path containment, atomic manifest-last writes, protected content, pre-write validation	`packages/ax-wiki`; `src/wiki/*`

The supported runtime stack is:

Runtime: Node bundled
UI: AX Code TUI + Solid (primary default)
Render: Zig (production); the native libraries are fully vendored in-repo (vendored inside the standalone ax-tui framework, hash-pinned by its vendor/manifest.json) — no upstream @opentui/* npm packages are involved at install or runtime
Yoga is not a selectable mode; AX Code TUI’s native renderer remains the default

Signal	Expected behavior
User abort / Esc / tool cancel (`AbortError`)	Log at warn if unhandled; do not exit TUI
Broken pipe (`EPIPE`) when shell closes	Ignore as harmless
Uncaught application exception	Reset terminal, exit non-zero
Stream idle too long	Abort turn via stream idle watchdog (configurable)

Override stream idle timeout with AX_CODE_STREAM_IDLE_TIMEOUT_MS (0 disables).

Permission replies are: