@armadra/agent 0.10.0 → 0.12.0

package/dist/bundle/ama.cjs

@@ -41,7 +41,7 @@ var AMA_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    AMA_VERSION = true ? "0.10.0" : readPackageVersion();
+    AMA_VERSION = true ? "0.12.0" : readPackageVersion();
   }
 });
 
@@ -1794,6 +1794,9 @@ var init_interactive_view = __esm({
         codemode: (calls, lines2) => `${plural(calls, "inner call")} · script printed ${plural(lines2, "line")}`,
         done: "done",
         outputLines: (n) => `${plural(n, "line")} of output`,
+        /** web_fetch：`<标题> · <大小> · markdown|text|json|binary`。 */
+        fetched: (title, size, format) => [title, size, format].filter((p) => p !== void 0 && p !== "").join(" · "),
+        fetchRedirect: (url) => `redirected to ${url} (not followed)`,
         awaiting: (glyph) => `${glyph} awaiting approval`,
         subagentRunning: (elapsed) => `subagent · running ${elapsed}`,
         running: (elapsed) => `running · ${elapsed}`,
@@ -1863,6 +1866,8 @@ var init_interactive_view = __esm({
         codemode: (calls, lines2) => `${calls} 个内层调用 · 脚本输出 ${lines2} 行`,
         done: "完成",
         outputLines: (n) => `${n} 行输出`,
+        fetched: (title, size, format) => [title, size, format].filter((p) => p !== void 0 && p !== "").join(" · "),
+        fetchRedirect: (url) => `重定向到 ${url}（未跟随）`,
         awaiting: (glyph) => `${glyph} 等待确认`,
         subagentRunning: (elapsed) => `子 Agent · 运行中 ${elapsed}`,
         running: (elapsed) => `运行中 · ${elapsed}`,
@@ -2199,6 +2204,8 @@ var init_approval = __esm({
       option: {
         allow: "Allow",
         allowSession: "Allow for this session",
+        /** web_fetch：本会话记住的是主机。 */
+        allowSessionHost: (host) => `Allow ${host} for this session`,
         deny: "Deny"
       },
       hint: (arrows) => `${arrows} select · Enter confirm · v full input`,
@@ -2207,6 +2214,7 @@ var init_approval = __esm({
       outcome: {
         allow: (what) => `Allowed ${what}`,
         allowSession: (what) => `Allowed ${what} (similar calls won't ask again this session)`,
+        allowSessionHost: (what, host) => `Allowed ${what} (${host} won't ask again this session)`,
         deny: (what) => `Denied ${what}`,
         cancelled: (what) => `Approval cancelled (timeout or interrupt): ${what}`
       },
@@ -2244,6 +2252,7 @@ var init_approval = __esm({
       option: {
         allow: "允许",
         allowSession: "本会话允许同类",
+        allowSessionHost: (host) => `本会话允许 ${host}`,
         deny: "拒绝"
       },
       hint: (arrows) => `${arrows} 选择 · Enter 确认 · v 完整输入`,
@@ -2251,6 +2260,7 @@ var init_approval = __esm({
       outcome: {
         allow: (what) => `已允许 ${what}`,
         allowSession: (what) => `已允许 ${what}（本会话同类不再询问）`,
+        allowSessionHost: (what, host) => `已允许 ${what}（本会话 ${host} 不再询问）`,
         deny: (what) => `已拒绝 ${what}`,
         cancelled: (what) => `审批已取消（超时或中断）：${what}`
       },
@@ -4281,6 +4291,7 @@ var init_drivers = __esm({
         brokerNeedsAsk: "approvals.setBroker: broker needs ask()",
         warmingNeedsFunction: "cache.onWarmingDecision: needs a function",
         runnerNeedsIdStart: "runners.provide: needs a runner with id and start",
+        runnerDoneNeedsFunction: "runners.onDone: needs a function",
         notAdapter: (label2) => `${label2}: not a host adapter module (missing hostApi / create export)`,
         versionMismatch: (label2, found, needed) => `${label2}: host adapter hostApi=${found}, ama needs ${needed}`,
         noCreate: (label2) => `${label2}: missing create(api) function`,
@@ -4340,6 +4351,7 @@ var init_drivers = __esm({
         brokerNeedsAsk: "approvals.setBroker：broker 需要 ask()",
         warmingNeedsFunction: "cache.onWarmingDecision：需要函数",
         runnerNeedsIdStart: "runners.provide：需要带 id 与 start 的 runner",
+        runnerDoneNeedsFunction: "runners.onDone：需要函数",
         notAdapter: (label2) => `${label2}: 不是宿主适配器模块（缺少 hostApi / create 导出）`,
         versionMismatch: (label2, found, needed) => `${label2}: 宿主适配器 hostApi=${found}，ama 需要 ${needed}`,
         noCreate: (label2) => `${label2}: 缺少 create(api) 函数`,
@@ -6419,11 +6431,11 @@ function parseArgs(argv) {
       continue;
     }
     let name;
-    let inline;
+    let inline2;
     if (token.startsWith("--")) {
       const eq = token.indexOf("=");
       name = eq === -1 ? token.slice(2) : token.slice(2, eq);
-      inline = eq === -1 ? void 0 : token.slice(eq + 1);
+      inline2 = eq === -1 ? void 0 : token.slice(eq + 1);
     } else {
       const alias = FLAG_ALIASES[token];
       if (alias === void 0) throw new UsageError(msg().cli.args.unknownOption(token));
@@ -6432,9 +6444,9 @@ function parseArgs(argv) {
     if (name === "resume") {
       args.resume = true;
       const next = argv[i + 1];
-      if (inline !== void 0) {
-        if (inline === "") throw new UsageError(msg().cli.args.emptyResumeId);
-        args.resumeId = inline;
+      if (inline2 !== void 0) {
+        if (inline2 === "") throw new UsageError(msg().cli.args.emptyResumeId);
+        args.resumeId = inline2;
       } else if (next !== void 0 && SESSION_ID_LIKE.test(next)) {
         args.resumeId = next;
         i++;
@@ -6442,7 +6454,7 @@ function parseArgs(argv) {
       continue;
     }
     if (VALUE_OPTIONS.has(name)) {
-      let value = inline;
+      let value = inline2;
       if (value === void 0) {
         value = argv[i + 1];
         if (value === void 0) throw new UsageError(msg().cli.args.needsValue(name));
@@ -6451,7 +6463,7 @@ function parseArgs(argv) {
       applyValue(args, name, value);
       continue;
     }
-    if (inline !== void 0) throw new UsageError(msg().cli.args.noValue(name));
+    if (inline2 !== void 0) throw new UsageError(msg().cli.args.noValue(name));
     if (!applyFlag(args, name)) throw new UsageError(msg().cli.args.unknownOption(token));
   }
   if (args.positionals.length > 0) args.prompt = args.positionals.join(" ");
@@ -8614,6 +8626,237 @@ var init_memory_class = __esm({
   }
 });
 
+// src/tools/web/url-guard.ts
+function ipv6Groups(address) {
+  let text = address.replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const v4 = /(\d+\.\d+\.\d+\.\d+)$/.exec(text);
+  if (v4 !== null) {
+    const parts = v4[1].split(".").map(Number);
+    if (parts.some((p) => p > 255)) return void 0;
+    const [a, b, c, d] = parts;
+    text = `${text.slice(0, v4.index)}${(a << 8 | b).toString(16)}:${(c << 8 | d).toString(16)}`;
+  }
+  const halves = text.split("::");
+  if (halves.length > 2) return void 0;
+  const parse3 = (part) => part === "" ? [] : part.split(":").map((g) => /^[0-9a-f]{1,4}$/i.test(g) ? parseInt(g, 16) : NaN);
+  const head = parse3(halves[0]);
+  const tail = halves.length === 2 ? parse3(halves[1]) : [];
+  const fill = 8 - head.length - tail.length;
+  if (halves.length === 1 ? fill !== 0 : fill < 1) return void 0;
+  const groups = [...head, ...new Array(halves.length === 2 ? fill : 0).fill(0), ...tail];
+  return groups.some((g) => Number.isNaN(g)) ? void 0 : groups;
+}
+function v4FromGroups(hi, lo) {
+  return `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
+}
+function embeddedIPv4(address) {
+  const g = ipv6Groups(address);
+  if (g === void 0) return void 0;
+  const zeros = (from, to) => g.slice(from, to).every((x) => x === 0);
+  if (zeros(0, 5) && (g[5] === 65535 || g[5] === 0 && g[6] >= 256))
+    return v4FromGroups(g[6], g[7]);
+  if (g[0] === 100 && g[1] === 65435 && zeros(2, 6))
+    return v4FromGroups(g[6], g[7]);
+  if (g[0] === 8194) return v4FromGroups(g[1], g[2]);
+  return void 0;
+}
+function blockedAddressReason(address) {
+  const bare = address.replace(/^\[|\]$/g, "").replace(/%.*$/, "");
+  const family = (0, import_node_net.isIP)(bare);
+  if (family === 0) return `${address} is not an IP address`;
+  const lower = bare.toLowerCase();
+  if (METADATA.has(lower)) return `${bare} is a cloud metadata address`;
+  if (family === 4) {
+    if (bare === "255.255.255.255" || blocked.check(bare, "ipv4"))
+      return `${bare} is a private, loopback, link-local or reserved address`;
+    return void 0;
+  }
+  const inner = embeddedIPv4(lower);
+  if (inner !== void 0) {
+    const reason = blockedAddressReason(inner);
+    if (reason !== void 0) return `${bare} embeds ${inner}: ${reason}`;
+  }
+  if (blocked.check(lower, "ipv6"))
+    return `${bare} is a private, loopback, link-local or multicast address`;
+  return void 0;
+}
+function bareHostname(url) {
+  return url.hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+}
+function checkFetchUrl(raw) {
+  if (typeof raw !== "string" || raw.trim() === "") return { ok: false, reason: "url is empty" };
+  const text = raw.trim();
+  if (text.length > MAX_URL_LENGTH)
+    return { ok: false, reason: `URL is longer than ${MAX_URL_LENGTH} characters` };
+  let url;
+  try {
+    url = new URL(text);
+  } catch {
+    return { ok: false, reason: "not a valid absolute URL" };
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:")
+    return { ok: false, reason: `only http and https URLs are supported (got ${url.protocol})` };
+  if (url.username !== "" || url.password !== "")
+    return { ok: false, reason: "URLs with credentials (user:pass@) are not allowed" };
+  if (url.search.length > MAX_QUERY_LENGTH + 1)
+    return { ok: false, reason: `query string is longer than ${MAX_QUERY_LENGTH} characters` };
+  const hostname = bareHostname(url);
+  if ((0, import_node_net.isIP)(hostname) !== 0) {
+    const reason = blockedAddressReason(hostname);
+    return reason === void 0 ? { ok: true, url, hostname } : { ok: false, reason };
+  }
+  if (!hostname.includes(".") || hostname === "localhost" || hostname.endsWith(".localhost"))
+    return {
+      ok: false,
+      reason: `${hostname} is a local host name; web_fetch only reaches public hosts`
+    };
+  return { ok: true, url, hostname };
+}
+async function resolvePublicAddresses(hostname, lookup = systemLookup) {
+  const family = (0, import_node_net.isIP)(hostname);
+  if (family !== 0) {
+    const reason = blockedAddressReason(hostname);
+    return reason === void 0 ? { ok: true, addresses: [{ address: hostname, family }] } : { ok: false, reason };
+  }
+  let addresses;
+  try {
+    addresses = await lookup(hostname);
+  } catch (err) {
+    const code = err.code;
+    return { ok: false, reason: `cannot resolve ${hostname}${code ? ` (${code})` : ""}` };
+  }
+  if (addresses.length === 0) return { ok: false, reason: `cannot resolve ${hostname}` };
+  for (const { address } of addresses) {
+    const reason = blockedAddressReason(address);
+    if (reason !== void 0) return { ok: false, reason: `${hostname} resolves to ${reason}` };
+  }
+  return { ok: true, addresses };
+}
+function pinnedLookup(addresses) {
+  return (_hostname, options, callback) => {
+    const cb = typeof options === "function" ? options : callback;
+    const all = typeof options === "object" && options !== null && options.all;
+    const first = addresses[0];
+    if (all === true) cb(null, [...addresses]);
+    else cb(null, first.address, first.family);
+  };
+}
+function redirectPolicy(from, to) {
+  if (bareHostname(from) !== bareHostname(to)) return "cross-host";
+  if (from.protocol === "http:" && to.protocol === "https:") return "follow";
+  return from.protocol === to.protocol && portOf(from) === portOf(to) ? "follow" : "cross-host";
+}
+function portOf(url) {
+  return url.port !== "" ? url.port : url.protocol === "https:" ? "443" : "80";
+}
+var import_node_dns, import_node_net, MAX_URL_LENGTH, MAX_QUERY_LENGTH, MAX_SAME_HOST_REDIRECTS, V4_BLOCKED, V6_BLOCKED, METADATA, blocked, systemLookup;
+var init_url_guard = __esm({
+  "src/tools/web/url-guard.ts"() {
+    "use strict";
+    import_node_dns = require("node:dns");
+    import_node_net = require("node:net");
+    MAX_URL_LENGTH = 2048;
+    MAX_QUERY_LENGTH = 1024;
+    MAX_SAME_HOST_REDIRECTS = 5;
+    V4_BLOCKED = [
+      ["0.0.0.0", 8],
+      ["10.0.0.0", 8],
+      ["100.64.0.0", 10],
+      ["127.0.0.0", 8],
+      ["169.254.0.0", 16],
+      ["172.16.0.0", 12],
+      ["192.0.0.0", 24],
+      ["192.0.2.0", 24],
+      ["192.168.0.0", 16],
+      ["198.18.0.0", 15],
+      ["198.51.100.0", 24],
+      ["203.0.113.0", 24],
+      ["224.0.0.0", 4],
+      ["240.0.0.0", 4]
+    ];
+    V6_BLOCKED = [
+      ["::", 96],
+      ["::1", 128],
+      ["100::", 64],
+      ["2001:db8::", 32],
+      ["fc00::", 7],
+      ["fe80::", 10],
+      ["fec0::", 10],
+      ["ff00::", 8]
+    ];
+    METADATA = /* @__PURE__ */ new Set(["169.254.169.254", "100.100.100.200", "fd00:ec2::254"]);
+    blocked = new import_node_net.BlockList();
+    for (const [net, prefix] of V4_BLOCKED) blocked.addSubnet(net, prefix, "ipv4");
+    for (const [net, prefix] of V6_BLOCKED) blocked.addSubnet(net, prefix, "ipv6");
+    systemLookup = (hostname) => new Promise((resolve41, reject2) => {
+      (0, import_node_dns.lookup)(hostname, { all: true, verbatim: true }, (err, addresses) => {
+        if (err) reject2(err);
+        else resolve41(addresses);
+      });
+    });
+  }
+});
+
+// src/permissions/network-class.ts
+function networkEffectivePermission() {
+  return "execute";
+}
+function inputUrl(input2) {
+  const raw = typeof input2 === "object" && input2 !== null ? input2["url"] : void 0;
+  if (typeof raw !== "string") return void 0;
+  try {
+    const url = new URL(raw.trim());
+    return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function urlSubject(url) {
+  return `${bareHostname(url)}${url.pathname === "" ? "/" : url.pathname}`;
+}
+function globRegExp(pattern) {
+  let body = "";
+  for (let i = 0; i < pattern.length; i++) {
+    const ch2 = pattern[i];
+    if (ch2 === "*" && pattern[i + 1] === "*") {
+      body += ".*";
+      i++;
+    } else if (ch2 === "*") body += "[^/]*";
+    else if (ch2 === "?") body += "[^/]";
+    else body += ch2.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return new RegExp(`^${body}$`, "i");
+}
+function networkRuleMatches(pattern, input2) {
+  const url = inputUrl(input2);
+  if (url === void 0) return false;
+  const p = pattern.trim().replace(/^https?:\/\//i, "").toLowerCase();
+  if (p === "*" || p === "**") return true;
+  const host = bareHostname(url);
+  if (!p.includes("/")) {
+    if (p.includes("*") || p.includes("?")) return globRegExp(p).test(host);
+    const bare = p.replace(/\.$/, "");
+    return host === bare || host.endsWith(`.${bare}`);
+  }
+  return globRegExp(p).test(urlSubject(url));
+}
+function networkGrantHost(input2) {
+  const url = inputUrl(input2);
+  return url === void 0 ? void 0 : bareHostname(url);
+}
+function networkBlockReason(input2) {
+  const raw = typeof input2 === "object" && input2 !== null ? input2["url"] : void 0;
+  if (typeof raw !== "string") return "url is missing";
+  const checked = checkFetchUrl(raw);
+  return checked.ok ? void 0 : checked.reason;
+}
+var init_network_class = __esm({
+  "src/permissions/network-class.ts"() {
+    "use strict";
+    init_url_guard();
+  }
+});
+
 // src/permissions/rules.ts
 function parseRule(raw, effect, source) {
   const text = raw.trim();
@@ -8712,7 +8955,8 @@ function matchesSubject(rule, toolName, input2, cwd, command3) {
   if (toolName === "memory") return memoryRuleMatches(rule.pattern, input2);
   if (command3 !== void 0) return wildcardToRegExp(rule.pattern).test(command3);
   const abs = inputPath(toolName, input2, cwd);
-  return abs !== void 0 && pathMatches(rule.pattern, abs, cwd);
+  if (abs !== void 0) return pathMatches(rule.pattern, abs, cwd);
+  return networkRuleMatches(rule.pattern, input2);
 }
 function findDenyRule(rules, toolName, input2, cwd) {
   const command3 = toolName === "memory" ? void 0 : inputCommand(input2);
@@ -8759,6 +9003,7 @@ var init_rules = __esm({
     init_glob();
     init_paths2();
     init_memory_class();
+    init_network_class();
     BUILTIN_DENY_RULES = [
       "write(**/.git/**)",
       "edit(**/.git/**)",
@@ -9218,7 +9463,7 @@ function argumentText(toolName, input2) {
   if (typeof input2 === "object" && input2 !== null) {
     const record3 = input2;
     if (toolName === "bash" && typeof record3["command"] === "string") return record3["command"];
-    for (const key of ["path", "file_path", "pattern"]) {
+    for (const key of ["path", "file_path", "pattern", "url"]) {
       const value = record3[key];
       if (typeof value === "string") return value;
     }
@@ -9784,15 +10029,40 @@ var init_dispatcher = __esm({
 });
 
 // src/drivers/host-runners.ts
-var HostRunnerRegistry;
+function statusOf(result, aborted) {
+  if (aborted) return "aborted";
+  const own = result.status;
+  if (own !== void 0 && TERMINAL.includes(own)) return own;
+  return result.isError ? "failed" : "completed";
+}
+function forward(target, prop) {
+  const value = Reflect.get(target, prop, target);
+  return typeof value === "function" ? value.bind(target) : value;
+}
+var TERMINAL, HostRunnerRegistry;
 var init_host_runners = __esm({
   "src/drivers/host-runners.ts"() {
     "use strict";
     init_errors();
     init_i18n();
+    TERMINAL = [
+      "completed",
+      "failed",
+      "aborted",
+      "max_turns",
+      "interrupted"
+    ];
     HostRunnerRegistry = class {
       runners = /* @__PURE__ */ new Map();
       listeners = /* @__PURE__ */ new Set();
+      doneHandlers = /* @__PURE__ */ new Set();
+      observed = /* @__PURE__ */ new WeakMap();
+      now;
+      log;
+      constructor(options = {}) {
+        this.now = options.now ?? Date.now;
+        this.log = options.log ?? (() => void 0);
+      }
       provide(runner) {
         if (typeof runner?.id !== "string" || runner.id === "" || typeof runner.start !== "function")
           throw new AmaError("invalid_arguments", msg().drivers.host.runnerNeedsIdStart);
@@ -9807,6 +10077,17 @@ var init_host_runners = __esm({
       get(id) {
         return this.runners.get(id);
       }
+      /** [#226] 任务入口用：同 {@link get}，但返回发 `onDone` 的观察包装（同一 runner 包装复用）。 */
+      resolve(id) {
+        const runner = this.runners.get(id);
+        if (runner === void 0) return void 0;
+        let wrapped = this.observed.get(runner);
+        if (wrapped === void 0) {
+          wrapped = this.observe(runner);
+          this.observed.set(runner, wrapped);
+        }
+        return wrapped;
+      }
       list() {
         return [...this.runners.values()];
       }
@@ -9815,6 +10096,13 @@ var init_host_runners = __esm({
         this.listeners.add(listener);
         return () => void this.listeners.delete(listener);
       }
+      /** [#226] 每轮结束时回调（`HostApi.runners.onDone`）；返回注销函数。 */
+      onDone(handler) {
+        if (typeof handler !== "function")
+          throw new AmaError("invalid_arguments", msg().drivers.host.runnerDoneNeedsFunction);
+        this.doneHandlers.add(handler);
+        return () => void this.doneHandlers.delete(handler);
+      }
       changed() {
         for (const listener of [...this.listeners]) {
           try {
@@ -9823,16 +10111,103 @@ var init_host_runners = __esm({
           }
         }
       }
+      emitDone(event) {
+        for (const handler of [...this.doneHandlers]) {
+          try {
+            const out = handler(event);
+            if (out instanceof Promise) out.catch((error2) => this.fail(error2));
+          } catch (error2) {
+            this.fail(error2);
+          }
+        }
+      }
+      fail(error2) {
+        this.log(msg().drivers.host.handlerFailed("runners.onDone"), error2);
+      }
+      observe(runner) {
+        return new Proxy(runner, {
+          get: (target, prop) => {
+            if (prop !== "start") return forward(target, prop);
+            return async (request) => this.observeHandle(target.id, request, this.now(), await target.start(request));
+          }
+        });
+      }
+      observeHandle(runner, request, startedAt, handle) {
+        let round = 0;
+        let fresh = true;
+        let pending = false;
+        let stopped = false;
+        let roundStart = startedAt;
+        const activity = () => {
+          if (pending) return;
+          fresh = true;
+          roundStart = this.now();
+        };
+        const settle = (at, done) => {
+          pending = false;
+          const endedAt = this.now();
+          const event = {
+            runner,
+            sessionId: handle.id,
+            round,
+            status: done.status,
+            isError: done.status === "failed" || done.status === "aborted",
+            startedAt: at,
+            endedAt,
+            durationMs: Math.max(0, endedAt - at)
+          };
+          if (request.taskId !== void 0) event.taskId = request.taskId;
+          if (done.text !== void 0) event.text = done.text;
+          if (done.error !== void 0) event.error = done.error;
+          this.emitDone(event);
+        };
+        const wait = () => {
+          const result = handle.wait();
+          if (!fresh) return result;
+          fresh = false;
+          pending = true;
+          stopped = false;
+          round += 1;
+          const at = roundStart;
+          const aborted = () => stopped || request.signal.aborted;
+          result.then(
+            (value) => settle(at, { status: statusOf(value, aborted()), text: value.text }),
+            (error2) => settle(at, {
+              status: aborted() ? "aborted" : "failed",
+              error: error2 instanceof Error ? error2.message : String(error2)
+            })
+          );
+          return result;
+        };
+        return new Proxy(handle, {
+          get: (target, prop) => {
+            const value = forward(target, prop);
+            if (prop === "wait") return wait;
+            if (prop === "stop" && typeof value === "function")
+              return (...args) => {
+                if (pending) stopped = true;
+                return value(...args);
+              };
+            if ((prop === "send" || prop === "interrupt" || prop === "message") && typeof value === "function")
+              return (...args) => {
+                activity();
+                return value(...args);
+              };
+            return value;
+          }
+        });
+      }
     };
   }
 });
 
 // src/host/types.ts
-var HOST_API_VERSION;
+var HOST_API_VERSION, HOST_API_MINOR;
 var init_types5 = __esm({
   "src/host/types.ts"() {
     "use strict";
     HOST_API_VERSION = 1;
+    HOST_API_MINOR = 1;
   }
 });
 
@@ -9862,14 +10237,15 @@ function createHostApi(deps) {
   let broker;
   const warmingHandlers = [];
   let notify = deps.notify;
-  const runners = new HostRunnerRegistry();
   const writeErr = deps.stderr ?? ((text) => void process.stderr.write(text));
   const log = deps.log ?? ((level, message) => {
     if (level === "warn" || level === "error") writeErr(`ama: [host] ${message}
 `);
   });
+  const runners = new HostRunnerRegistry({ log: (message, error2) => log("error", message, error2) });
   const api = Object.freeze({
     version: HOST_API_VERSION,
+    minor: HOST_API_MINOR,
     agent: Object.freeze({ name: "ama", version: AMA_VERSION }),
     env: Object.freeze({ ...deps.env ?? process.env }),
     mode: deps.mode,
@@ -9948,7 +10324,8 @@ function createHostApi(deps) {
       }
     }),
     runners: Object.freeze({
-      provide: (runner) => runners.provide(runner)
+      provide: (runner) => runners.provide(runner),
+      onDone: (handler) => runners.onDone(handler)
     })
   });
   hostRunnerRegistries.set(api, runners);
@@ -15116,6 +15493,9 @@ var init_jsonl = __esm({
 });
 
 // src/drivers/acp/types.ts
+function isTerminalAuthMethod(method) {
+  return method.type === "terminal";
+}
 var ACP_PROTOCOL_VERSION, ACP_METHODS, RPC_ERRORS, ACP_META_KEY;
 var init_types7 = __esm({
   "src/drivers/acp/types.ts"() {
@@ -15123,8 +15503,10 @@ var init_types7 = __esm({
     ACP_PROTOCOL_VERSION = 1;
     ACP_METHODS = {
       initialize: "initialize",
-      /** ama 不实现（只给 terminal 型认证方法，规范要求这类方法不经 authenticate）。 */
+      /** 客户端 → Agent：agent 型认证方法经它完成；terminal 型不经它（规范）。 */
       authenticate: "authenticate",
+      /** 客户端 → Agent：登出当前账号（Agent 声明 `agentCapabilities.auth.logout` 才可用）。 */
+      logout: "logout",
       sessionNew: "session/new",
       sessionLoad: "session/load",
       sessionResume: "session/resume",
@@ -15137,6 +15519,8 @@ var init_types7 = __esm({
       sessionUpdate: "session/update",
       requestPermission: "session/request_permission",
       elicitationCreate: "elicitation/create",
+      /** Agent → 客户端通知：URL 型 elicitation 已在带外完成。 */
+      elicitationComplete: "elicitation/complete",
       /** 协议级取消（双向通知，`requestId` 指对端发来的、尚未答复的请求）。 */
       cancelRequest: "$/cancel_request"
     };
@@ -16134,10 +16518,18 @@ function safeFileName(name) {
   const cleaned = name.replace(/[^A-Za-z0-9._-]/g, "_");
   return cleaned === "" ? "output" : cleaned.slice(0, 120);
 }
-var import_node_os4, import_node_path24, DEFAULT_MAX_LINES, DEFAULT_MAX_BYTES, RESULT_NOTE_RESERVE, GREP_MAX_LINE_CHARS, HEAD_TAIL_RATIO;
+function writeFullOutput(outputDir, fileName, content) {
+  const dir = resolveOutputDir(outputDir);
+  (0, import_node_fs22.mkdirSync)(dir, { recursive: true });
+  const target = (0, import_node_path24.join)(dir, safeFileName(fileName));
+  (0, import_node_fs22.writeFileSync)(target, content);
+  return target;
+}
+var import_node_fs22, import_node_os4, import_node_path24, DEFAULT_MAX_LINES, DEFAULT_MAX_BYTES, RESULT_NOTE_RESERVE, GREP_MAX_LINE_CHARS, HEAD_TAIL_RATIO;
 var init_truncate = __esm({
   "src/tools/truncate.ts"() {
     "use strict";
+    import_node_fs22 = require("node:fs");
     import_node_os4 = require("node:os");
     import_node_path24 = require("node:path");
     DEFAULT_MAX_LINES = 2e3;
@@ -16777,11 +17169,11 @@ async function readImage(abs, shown2, ctx, options) {
 [${fit.note}]`, details };
   const note = fit.resized !== void 0 && fit.size !== void 0 ? `
 [Resized to ${fit.size.width}x${fit.size.height} to fit the attachment limit.]` : "";
-  const blocks = [
+  const blocks2 = [
     { type: "text", text: caption + note },
     internImage({ type: "image", data: fit.buf.toString("base64"), mimeType: fit.mimeType })
   ];
-  return { content: blocks, details };
+  return { content: blocks2, details };
 }
 async function executeRead(input2, ctx, options = {}) {
   const abs = resolvePath(input2.path, ctx.cwd);
@@ -17251,7 +17643,7 @@ function gitBashCandidates(env) {
 function resolveShell(deps = {}) {
   const platform = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
-  const exists5 = deps.exists ?? import_node_fs22.existsSync;
+  const exists5 = deps.exists ?? import_node_fs23.existsSync;
   const custom = env["AMA_SHELL"]?.trim();
   if (custom) return { shell: custom, kind: shellKindOf(custom) };
   if (platform === "win32") {
@@ -17291,11 +17683,11 @@ function buildToolEnv(base4, info2) {
   set("AMA_DEPTH", String(info2.depth));
   return env;
 }
-var import_node_fs22, POWERSHELL_ARGS, INJECTED_ENV_VARS;
+var import_node_fs23, POWERSHELL_ARGS, INJECTED_ENV_VARS;
 var init_shell = __esm({
   "src/tools/shell.ts"() {
     "use strict";
-    import_node_fs22 = require("node:fs");
+    import_node_fs23 = require("node:fs");
     POWERSHELL_ARGS = ["-NoProfile", "-NonInteractive", "-Command"];
     INJECTED_ENV_VARS = [
       "AMA_SESSION_ID",
@@ -17410,11 +17802,11 @@ var init_process_tree = __esm({
 function sanitizeOutput(text) {
   return text.replace(/\r\n/g, "\n").replace(ANSI, "").replace(/\r/g, "\n").replace(CONTROL, "");
 }
-var import_node_fs23, import_node_path28, import_node_string_decoder2, ANSI, CONTROL, OutputAccumulator;
+var import_node_fs24, import_node_path28, import_node_string_decoder2, ANSI, CONTROL, OutputAccumulator;
 var init_output_accumulator = __esm({
   "src/tools/output-accumulator.ts"() {
     "use strict";
-    import_node_fs23 = require("node:fs");
+    import_node_fs24 = require("node:fs");
     import_node_path28 = require("node:path");
     import_node_string_decoder2 = require("node:string_decoder");
     init_truncate();
@@ -17456,7 +17848,7 @@ var init_output_accumulator = __esm({
           this.tailText = sliceTailBytes(this.tailText, this.maxBytes * 2);
         }
         if (this.spilledTo !== void 0) {
-          (0, import_node_fs23.appendFileSync)(this.spilledTo, text);
+          (0, import_node_fs24.appendFileSync)(this.spilledTo, text);
           return;
         }
         this.chunks.push(text);
@@ -17465,8 +17857,8 @@ var init_output_accumulator = __esm({
       }
       spill() {
         const target = this.options.spillPath();
-        (0, import_node_fs23.mkdirSync)((0, import_node_path28.dirname)(target), { recursive: true });
-        (0, import_node_fs23.writeFileSync)(target, this.chunks.join(""));
+        (0, import_node_fs24.mkdirSync)((0, import_node_path28.dirname)(target), { recursive: true });
+        (0, import_node_fs24.writeFileSync)(target, this.chunks.join(""));
         this.spilledTo = target;
         this.chunks = [];
         this.memoryBytes = 0;
@@ -17524,11 +17916,11 @@ async function disposeSessionJobs(sessionId) {
   registry2.delete(sessionId);
   await jobs.disposeAll();
 }
-var import_node_fs24, import_node_path29, BackgroundJobs, registry2;
+var import_node_fs25, import_node_path29, BackgroundJobs, registry2;
 var init_background_jobs = __esm({
   "src/tools/background-jobs.ts"() {
     "use strict";
-    import_node_fs24 = require("node:fs");
+    import_node_fs25 = require("node:fs");
     import_node_path29 = require("node:path");
     init_process_tree();
     init_truncate();
@@ -17537,13 +17929,13 @@ var init_background_jobs = __esm({
       listeners = /* @__PURE__ */ new Set();
       seq = 0;
       start(command3, options) {
-        (0, import_node_fs24.mkdirSync)((0, import_node_path29.dirname)(options.outputPath), { recursive: true });
-        const fd = (0, import_node_fs24.openSync)(options.outputPath, "a");
+        (0, import_node_fs25.mkdirSync)((0, import_node_path29.dirname)(options.outputPath), { recursive: true });
+        const fd = (0, import_node_fs25.openSync)(options.outputPath, "a");
         let child;
         try {
           child = options.spawn(fd);
         } finally {
-          (0, import_node_fs24.closeSync)(fd);
+          (0, import_node_fs25.closeSync)(fd);
         }
         const id = `bg${++this.seq}`;
         const job = {
@@ -17624,8 +18016,8 @@ var init_background_jobs = __esm({
         if (entry === void 0) return void 0;
         let text = "";
         try {
-          if ((0, import_node_fs24.statSync)(entry.job.outputPath).size > 0)
-            text = (0, import_node_fs24.readFileSync)(entry.job.outputPath, "utf8");
+          if ((0, import_node_fs25.statSync)(entry.job.outputPath).size > 0)
+            text = (0, import_node_fs25.readFileSync)(entry.job.outputPath, "utf8");
         } catch {
         }
         return { ...truncateTail(text, options), job: entry.job };
@@ -17671,7 +18063,7 @@ var init_background_jobs = __esm({
 });
 
 // src/sandbox/wrap.ts
-function resolveWritable(dirs, realpath4 = import_node_fs25.realpathSync) {
+function resolveWritable(dirs, realpath4 = import_node_fs26.realpathSync) {
   const out = [];
   for (const dir of dirs) {
     let real2;
@@ -17686,12 +18078,12 @@ function resolveWritable(dirs, realpath4 = import_node_fs25.realpathSync) {
 }
 function isDirectory(path) {
   try {
-    return (0, import_node_fs25.statSync)(path).isDirectory();
+    return (0, import_node_fs26.statSync)(path).isDirectory();
   } catch {
     return false;
   }
 }
-function resolveExtras(policy, missingOk, realpath4 = import_node_fs25.realpathSync, isDir4 = isDirectory) {
+function resolveExtras(policy, missingOk, realpath4 = import_node_fs26.realpathSync, isDir4 = isDirectory) {
   const readOnly = [];
   for (const path of policy.readOnly ?? []) {
     let real2;
@@ -17763,11 +18155,11 @@ function wrapCommand(status, command3, args, policy, realpath4, isDir4) {
       };
   }
 }
-var import_node_fs25, import_node_path30;
+var import_node_fs26, import_node_path30;
 var init_wrap = __esm({
   "src/sandbox/wrap.ts"() {
     "use strict";
-    import_node_fs25 = require("node:fs");
+    import_node_fs26 = require("node:fs");
     import_node_path30 = require("node:path");
     init_profile2();
   }
@@ -18281,7 +18673,7 @@ async function executeGrep(input2, ctx) {
   }
   const files = await candidateFiles(root, rootIsFile, input2.glob, ctx.signal);
   if (input2.filesOnly === true) return grepFilesOnly(files, regex, limit, ctx);
-  const blocks = [];
+  const blocks2 = [];
   let matches2 = 0;
   let matchedFiles = 0;
   let limited = false;
@@ -18298,7 +18690,7 @@ async function executeGrep(input2, ctx) {
       }
       const shown2 = displayPath(batch[j], ctx.cwd);
       const block = formatFileHits(shown2, hits, context, limit - matches2);
-      blocks.push(block.text.join("\n"));
+      blocks2.push(block.text.join("\n"));
       matches2 += block.used;
       matchedFiles++;
       if (block.used < hits.hits.length) {
@@ -18308,7 +18700,7 @@ async function executeGrep(input2, ctx) {
     }
   }
   if (matches2 === 0) return { content: "No matches found", details: { matches: 0, files: 0 } };
-  const joined = blocks.join(context > 0 ? "\n--\n" : "\n");
+  const joined = blocks2.join(context > 0 ? "\n--\n" : "\n");
   const maxBytes = toolOutputBytes(ctx.maxResultChars);
   const cut = truncateHead(joined, { maxLines: Number.MAX_SAFE_INTEGER, maxBytes });
   let content = cut.content;
@@ -18764,9 +19156,9 @@ ${tail}`, truncated: true };
 }
 function writeTaskOutput(dir, name, text) {
   try {
-    (0, import_node_fs26.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs27.mkdirSync)(dir, { recursive: true });
     const file = (0, import_node_path34.join)(dir, name);
-    (0, import_node_fs26.writeFileSync)(file, text);
+    (0, import_node_fs27.writeFileSync)(file, text);
     return file;
   } catch {
     return void 0;
@@ -18803,11 +19195,11 @@ function backgroundedText(reason, afterMs) {
 function waitDetachedText(taskId) {
   return `Task ${taskId} is still running and was moved to the background by the user; do not wait again — a <task-notification> arrives when it finishes.`;
 }
-var import_node_fs26, import_node_path34, TASK_RESULT_LIMIT_BYTES, HEAD_SHARE, MAX_TURNS_NOTE, NOTIFY_HINT, TASK_NOTIFICATION_RULE;
+var import_node_fs27, import_node_path34, TASK_RESULT_LIMIT_BYTES, HEAD_SHARE, MAX_TURNS_NOTE, NOTIFY_HINT, TASK_NOTIFICATION_RULE;
 var init_result = __esm({
   "src/agents/result.ts"() {
     "use strict";
-    import_node_fs26 = require("node:fs");
+    import_node_fs27 = require("node:fs");
     import_node_path34 = require("node:path");
     TASK_RESULT_LIMIT_BYTES = 50 * 1024;
     HEAD_SHARE = 0.7;
@@ -18987,6 +19379,9 @@ var init_task_control = __esm({
 });
 
 // src/tools/task-ctl.ts
+function bindTaskCtlWaitCap(tool, capMs) {
+  if (tool !== void 0) waitCaps.set(tool, capMs);
+}
 function fail4(message) {
   return { content: message, isError: true };
 }
@@ -19013,7 +19408,7 @@ async function send(input2, ctx) {
   return { content: result.text, isError: result.isError };
 }
 function createTaskCtlTool() {
-  return {
+  const tool = {
     name: TASK_CTL_TOOL,
     label: "TaskCtl",
     description: "Manage sub-agent tasks started by task: list them, wait for one, stop it, read its output, or send it a follow-up message (runs in background).",
@@ -19064,14 +19459,17 @@ ${body}` };
           };
         }
         case "wait": {
-          const timeout = Math.min(Math.max(input2.timeoutMs ?? DEFAULT_WAIT_MS, 0), MAX_WAIT_MS);
+          const cap = Math.min(waitCaps.get(tool) ?? MAX_WAIT_MS, MAX_WAIT_MS);
+          const wanted = Math.min(Math.max(input2.timeoutMs ?? DEFAULT_WAIT_MS, 0), MAX_WAIT_MS);
+          const timeout = Math.min(wanted, cap);
           const signal = control.detachSignal(taskId);
           const result = await control.wait(taskId, timeout, { signal });
           if (result === void 0 && signal.aborted) return { content: waitDetachedText(taskId) };
           if (result === void 0) {
             const turns = control.get(taskId)?.turns ?? 0;
+            const capped2 = wanted > timeout ? ` Waits are capped at ${Math.round(timeout / 1e3)}s here; do not block on it: keep working, a <task-notification> follows when it finishes.` : "";
             return {
-              content: `Task ${taskId} is still running (${turns} turns so far). Wait again or stop it.`
+              content: `Task ${taskId} is still running (${turns} turns so far). Wait again or stop it.${capped2}`
             };
           }
           return {
@@ -19085,8 +19483,9 @@ ${result.text}`,
       }
     }
   };
+  return tool;
 }
-var TASK_CTL_TOOL, DEFAULT_WAIT_MS, MAX_WAIT_MS;
+var TASK_CTL_TOOL, DEFAULT_WAIT_MS, MAX_WAIT_MS, COORDINATOR_WAIT_MAX_MS, waitCaps;
 var init_task_ctl = __esm({
   "src/tools/task-ctl.ts"() {
     "use strict";
@@ -19096,6 +19495,749 @@ var init_task_ctl = __esm({
     TASK_CTL_TOOL = "task_ctl";
     DEFAULT_WAIT_MS = 3e4;
     MAX_WAIT_MS = 6e5;
+    COORDINATOR_WAIT_MAX_MS = 5e3;
+    waitCaps = /* @__PURE__ */ new WeakMap();
+  }
+});
+
+// src/tools/web/html-to-markdown.ts
+function decodeEntities(text) {
+  return text.replace(/&(#x[0-9a-f]+|#\d+|[a-z][a-z0-9]*);?/gi, (whole, body) => {
+    if (body[0] === "#") {
+      const code = body[1] === "x" || body[1] === "X" ? parseInt(body.slice(2), 16) : Number(body.slice(1));
+      if (!Number.isFinite(code) || code <= 0 || code > 1114111 || code >= 55296 && code <= 57343)
+        return "�";
+      return String.fromCodePoint(code);
+    }
+    const hit = ENTITIES[body] ?? ENTITIES[body.toLowerCase()];
+    return hit ?? whole;
+  });
+}
+function parseAttrs(text) {
+  const attrs = {};
+  for (const m of text.matchAll(ATTR_RE)) {
+    const name = m[1].toLowerCase();
+    if (!(name in attrs)) attrs[name] = decodeEntities(m[2] ?? m[3] ?? m[4] ?? "");
+  }
+  return attrs;
+}
+function parseHtml(html) {
+  const root = { tag: "#root", attrs: {}, children: [] };
+  let cur = root;
+  const open3 = (tag) => {
+    for (let n = cur; n !== void 0; n = n.parent) if (n.tag === tag) return n;
+    return void 0;
+  };
+  const closeTo = (node) => {
+    cur = node.parent ?? root;
+  };
+  const closeOpen = (tags, stop) => {
+    for (let n = cur; n !== void 0 && n !== root; n = n.parent) {
+      if (tags.includes(n.tag)) return closeTo(n);
+      if (stop.has(n.tag)) return;
+    }
+  };
+  let i = 0;
+  while (i < html.length) {
+    const lt = html.indexOf("<", i);
+    if (lt === -1) {
+      cur.children.push(html.slice(i));
+      break;
+    }
+    if (lt > i) cur.children.push(html.slice(i, lt));
+    if (html.startsWith("<!--", lt)) {
+      const end = html.indexOf("-->", lt + 4);
+      i = end === -1 ? html.length : end + 3;
+      continue;
+    }
+    if (html[lt + 1] === "!" || html[lt + 1] === "?") {
+      const end = html.indexOf(">", lt);
+      i = end === -1 ? html.length : end + 1;
+      continue;
+    }
+    const m = /^<(\/?)([a-zA-Z][a-zA-Z0-9:-]*)((?:[^>"']|"[^"]*"|'[^']*')*)>/.exec(
+      html.slice(lt, lt + 8192)
+    );
+    if (m === null) {
+      cur.children.push("<");
+      i = lt + 1;
+      continue;
+    }
+    i = lt + m[0].length;
+    const tag = m[2].toLowerCase();
+    if (m[1] === "/") {
+      const node2 = open3(tag);
+      if (node2 !== void 0) closeTo(node2);
+      continue;
+    }
+    if (CLOSES_P.has(tag)) closeOpen(["p"], BLOCK);
+    const siblings = AUTO_CLOSE[tag];
+    if (siblings !== void 0) closeOpen(siblings, SCOPE);
+    const node = { tag, attrs: parseAttrs(m[3]), children: [], parent: cur };
+    cur.children.push(node);
+    if (RAW_TEXT.has(tag)) {
+      const end = html.toLowerCase().indexOf(`</${tag}`, i);
+      const body = html.slice(i, end === -1 ? html.length : end);
+      node.children.push(body);
+      const close = end === -1 ? -1 : html.indexOf(">", end);
+      i = close === -1 ? html.length : close + 1;
+      continue;
+    }
+    if (!VOID.has(tag) && !/\/\s*$/.test(m[3])) cur = node;
+  }
+  return root;
+}
+function find(node, test) {
+  for (const child of node.children) {
+    if (typeof child === "string") continue;
+    if (test(child)) return child;
+    if (DROP.has(child.tag)) continue;
+    const hit = find(child, test);
+    if (hit !== void 0) return hit;
+  }
+  return void 0;
+}
+function rawText(node) {
+  return node.children.map((c) => typeof c === "string" ? c : rawText(c)).join("");
+}
+function resolveHref(href, base4) {
+  const value = href.trim();
+  if (value === "" || /^(javascript|data|vbscript):/i.test(value)) return void 0;
+  if (value.startsWith("#")) return void 0;
+  try {
+    return base4 === void 0 ? new URL(value).href : new URL(value, base4).href;
+  } catch {
+    return void 0;
+  }
+}
+function collapse(text) {
+  return decodeEntities(text).replace(/[\s\u00a0]+/g, " ");
+}
+function inline(node, ctx) {
+  let out = "";
+  for (const child of node.children) {
+    if (typeof child === "string") out += collapse(child);
+    else out += renderInline(child, ctx);
+  }
+  return out;
+}
+function wrap(mark, text) {
+  const trimmed = text.trim();
+  if (trimmed === "") return text;
+  const lead = text.startsWith(" ") ? " " : "";
+  const trail = text.endsWith(" ") ? " " : "";
+  return `${lead}${mark}${trimmed}${mark}${trail}`;
+}
+function renderInline(node, ctx) {
+  if (DROP.has(node.tag)) return "";
+  switch (node.tag) {
+    case "br":
+      return "\n";
+    case "img": {
+      const alt = (node.attrs["alt"] ?? "").trim();
+      return alt === "" ? "" : collapse(alt);
+    }
+    case "a": {
+      const text = inline(node, ctx);
+      const href = resolveHref(node.attrs["href"] ?? "", ctx.base);
+      if (href === void 0 || text.trim() === "") return text;
+      return `[${text.trim().replace(/[[\]]/g, "\\$&")}](${href.replace(/[()\s]/g, encodeURIComponent)})`;
+    }
+    case "code":
+    case "kbd":
+    case "samp":
+    case "tt": {
+      const text = decodeEntities(rawText(node)).replace(/\s+/g, " ");
+      if (text.trim() === "") return text;
+      const fence2 = text.includes("`") ? "``" : "`";
+      return `${fence2}${text}${fence2}`;
+    }
+    case "strong":
+    case "b":
+      return wrap("**", inline(node, ctx));
+    case "em":
+    case "i":
+      return wrap("*", inline(node, ctx));
+    case "del":
+    case "s":
+      return wrap("~~", inline(node, ctx));
+    default:
+      return BLOCK.has(node.tag) ? `
+
+${blocks(node, ctx)}
+
+` : inline(node, ctx);
+  }
+}
+function blocks(node, ctx) {
+  const parts = [];
+  let run7 = "";
+  const flush = () => {
+    const text = run7.split("\n").map((l) => l.replace(/ {2,}/g, " ").trim()).join("\n").trim();
+    if (text !== "") parts.push(text);
+    run7 = "";
+  };
+  for (const child of node.children) {
+    if (typeof child === "string") {
+      run7 += collapse(child);
+      continue;
+    }
+    if (DROP.has(child.tag)) continue;
+    if (BLOCK.has(child.tag)) {
+      flush();
+      const text = renderBlock(child, ctx);
+      if (text.trim() !== "") parts.push(text);
+    } else run7 += renderInline(child, ctx);
+  }
+  flush();
+  return parts.join("\n\n");
+}
+function prefixLines(text, first, rest) {
+  return text.split("\n").map(
+    (line2, i) => line2 === "" ? i === 0 ? first.trimEnd() : "" : `${i === 0 ? first : rest}${line2}`
+  ).join("\n");
+}
+function renderList(node, ctx) {
+  const ordered = node.tag === "ol";
+  let n = Number(node.attrs["start"] ?? "1");
+  if (!Number.isFinite(n)) n = 1;
+  const items = [];
+  const inner = { ...ctx, listDepth: ctx.listDepth + 1 };
+  for (const child of node.children) {
+    if (typeof child === "string" || DROP.has(child.tag)) continue;
+    const body = child.tag === "li" ? blocks(child, inner) : renderBlock(child, inner);
+    if (body.trim() === "") continue;
+    const marker = ordered ? `${n++}. ` : "- ";
+    items.push(prefixLines(body.replace(/\n{2,}/g, "\n"), marker, " ".repeat(marker.length)));
+  }
+  return items.join("\n");
+}
+function cellText(node, ctx) {
+  return blocks(node, ctx).replace(/\s*\n+\s*/g, " ").replace(/\|/g, "\\|").trim();
+}
+function renderTable(node, ctx) {
+  const rows = [];
+  const walk4 = (n) => {
+    for (const child of n.children) {
+      if (typeof child === "string" || DROP.has(child.tag)) continue;
+      if (child.tag === "tr") {
+        const cells = child.children.filter(
+          (c) => typeof c !== "string" && (c.tag === "td" || c.tag === "th")
+        );
+        if (cells.length > 0)
+          rows.push({
+            cells: cells.map((c) => cellText(c, ctx)),
+            header: n.tag === "thead" || cells.every((c) => c.tag === "th")
+          });
+      } else if (child.tag !== "table") walk4(child);
+    }
+  };
+  walk4(node);
+  if (rows.length === 0) return "";
+  const width2 = Math.max(...rows.map((r) => r.cells.length));
+  const line2 = (cells) => `| ${[...cells, ...new Array(width2 - cells.length).fill("")].join(" | ")} |`;
+  const headerIndex = rows[0]?.header === true ? 0 : -1;
+  const head = headerIndex === 0 ? rows.shift().cells : new Array(width2).fill("");
+  return [line2(head), `|${" --- |".repeat(width2)}`, ...rows.map((r) => line2(r.cells))].join("\n");
+}
+function renderBlock(node, ctx) {
+  switch (node.tag) {
+    case "h1":
+    case "h2":
+    case "h3":
+    case "h4":
+    case "h5":
+    case "h6": {
+      const text = inline(node, ctx).replace(/\s+/g, " ").trim();
+      return text === "" ? "" : `${"#".repeat(Number(node.tag[1]))} ${text}`;
+    }
+    case "hr":
+      return "---";
+    case "pre": {
+      const code = find(node, (n) => n.tag === "code");
+      const cls = `${code?.attrs["class"] ?? ""} ${node.attrs["class"] ?? ""}`;
+      const lang = /(?:^|\s)(?:language|lang)-([\w+#-]+)/.exec(cls)?.[1] ?? "";
+      const text = decodeEntities(rawText(node)).replace(/^\n/, "").replace(/\s+$/, "");
+      const fence2 = text.includes("```") ? "~~~~" : "```";
+      return `${fence2}${lang}
+${text}
+${fence2}`;
+    }
+    case "blockquote":
+      return prefixLines(blocks(node, ctx), "> ", "> ");
+    case "ul":
+    case "ol":
+      return renderList(node, ctx);
+    case "table":
+      return renderTable(node, ctx);
+    default:
+      return blocks(node, ctx);
+  }
+}
+function pageTitle(root) {
+  const title = find(root, (n) => n.tag === "title") ?? findIn(root, "title");
+  const text = title !== void 0 ? collapse(rawText(title)).trim() : "";
+  if (text !== "") return text;
+  const h1 = find(root, (n) => n.tag === "h1");
+  const heading = h1 !== void 0 ? collapse(rawText(h1)).trim() : "";
+  return heading === "" ? void 0 : heading;
+}
+function findIn(node, tag) {
+  for (const child of node.children) {
+    if (typeof child === "string") continue;
+    if (child.tag === tag) return child;
+    const hit = findIn(child, tag);
+    if (hit !== void 0) return hit;
+  }
+  return void 0;
+}
+function htmlToMarkdown(html, baseUrl) {
+  const root = parseHtml(html);
+  let base4;
+  try {
+    const declared = findIn(root, "base")?.attrs["href"];
+    base4 = baseUrl === void 0 ? void 0 : new URL(declared ?? "", baseUrl);
+  } catch {
+    base4 = baseUrl === void 0 ? void 0 : new URL(baseUrl);
+  }
+  const main2 = find(root, (n) => n.tag === "main") ?? find(root, (n) => n.tag === "article") ?? find(root, (n) => n.attrs["role"] === "main") ?? find(root, (n) => n.tag === "body") ?? root;
+  const markdown = blocks(main2, { base: base4, listDepth: 0 }).replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
+  const title = pageTitle(root);
+  return title === void 0 ? { markdown } : { title, markdown };
+}
+function sniffMetaCharset(head) {
+  const text = head.slice(0, 2048);
+  const direct = /<meta[^>]+charset\s*=\s*["']?\s*([\w.:-]+)/i.exec(text);
+  return direct?.[1]?.toLowerCase();
+}
+var VOID, RAW_TEXT, DROP, BLOCK, AUTO_CLOSE, CLOSES_P, SCOPE, ENTITIES, ATTR_RE;
+var init_html_to_markdown = __esm({
+  "src/tools/web/html-to-markdown.ts"() {
+    "use strict";
+    VOID = /* @__PURE__ */ new Set([
+      "area",
+      "base",
+      "br",
+      "col",
+      "embed",
+      "hr",
+      "img",
+      "input",
+      "link",
+      "meta",
+      "param",
+      "source",
+      "track",
+      "wbr"
+    ]);
+    RAW_TEXT = /* @__PURE__ */ new Set(["script", "style", "textarea", "title", "xmp", "noscript"]);
+    DROP = /* @__PURE__ */ new Set([
+      "script",
+      "style",
+      "noscript",
+      "svg",
+      "math",
+      "template",
+      "iframe",
+      "nav",
+      "footer",
+      "aside",
+      "form",
+      "button",
+      "select",
+      "textarea",
+      "head",
+      "title",
+      "canvas",
+      "object",
+      "dialog"
+    ]);
+    BLOCK = /* @__PURE__ */ new Set([
+      "address",
+      "article",
+      "blockquote",
+      "body",
+      "center",
+      "dd",
+      "details",
+      "div",
+      "dl",
+      "dt",
+      "figcaption",
+      "figure",
+      "h1",
+      "h2",
+      "h3",
+      "h4",
+      "h5",
+      "h6",
+      "header",
+      "hr",
+      "html",
+      "li",
+      "main",
+      "ol",
+      "p",
+      "pre",
+      "section",
+      "summary",
+      "table",
+      "tbody",
+      "td",
+      "tfoot",
+      "th",
+      "thead",
+      "tr",
+      "ul"
+    ]);
+    AUTO_CLOSE = {
+      li: ["li"],
+      dt: ["dt", "dd"],
+      dd: ["dt", "dd"],
+      tr: ["tr"],
+      td: ["td", "th"],
+      th: ["td", "th"],
+      option: ["option"]
+    };
+    CLOSES_P = /* @__PURE__ */ new Set([
+      "p",
+      ...[...BLOCK].filter((t) => !["li", "td", "th", "dd", "dt"].includes(t))
+    ]);
+    SCOPE = /* @__PURE__ */ new Set(["ul", "ol", "dl", "table", "html", "body"]);
+    ENTITIES = {
+      amp: "&",
+      lt: "<",
+      gt: ">",
+      quot: '"',
+      apos: "'",
+      nbsp: " ",
+      copy: "©",
+      reg: "®",
+      trade: "™",
+      hellip: "…",
+      mdash: "—",
+      ndash: "–",
+      lsquo: "‘",
+      rsquo: "’",
+      ldquo: "“",
+      rdquo: "”",
+      laquo: "«",
+      raquo: "»",
+      middot: "·",
+      bull: "•",
+      times: "×",
+      divide: "÷",
+      deg: "°",
+      euro: "€",
+      pound: "£",
+      yen: "¥",
+      cent: "¢",
+      sect: "§",
+      para: "¶",
+      larr: "←",
+      rarr: "→",
+      uarr: "↑",
+      darr: "↓",
+      harr: "↔",
+      rArr: "⇒",
+      lArr: "⇐",
+      le: "≤",
+      ge: "≥",
+      ne: "≠",
+      plusmn: "±",
+      minus: "−",
+      shy: "",
+      zwj: "",
+      zwnj: "",
+      thinsp: " ",
+      ensp: " ",
+      emsp: " ",
+      check: "✓"
+    };
+    ATTR_RE = /([^\s"'<>/=]+)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+)))?/g;
+  }
+});
+
+// src/tools/web/fetch.ts
+function fail5(content, details) {
+  return { content, isError: true, ...details !== void 0 ? { details } : {} };
+}
+function readBody(res, limit) {
+  const encoding = String(res.headers["content-encoding"] ?? "").trim().toLowerCase();
+  let stream5 = res;
+  if (encoding === "gzip" || encoding === "x-gzip") stream5 = res.pipe((0, import_node_zlib.createGunzip)());
+  else if (encoding === "br") stream5 = res.pipe((0, import_node_zlib.createBrotliDecompress)());
+  else if (encoding === "deflate") stream5 = res.pipe((0, import_node_zlib.createInflate)());
+  return new Promise((resolve41, reject2) => {
+    const chunks2 = [];
+    let size = 0;
+    let done = false;
+    const finish2 = (cut) => {
+      if (done) return;
+      done = true;
+      resolve41({ body: Buffer.concat(chunks2, Math.min(size, limit)).subarray(0, limit), cut });
+    };
+    stream5.on("data", (chunk) => {
+      if (done) return;
+      chunks2.push(chunk);
+      size += chunk.length;
+      if (size > limit) {
+        finish2(true);
+        res.destroy();
+        if (stream5 !== res) stream5.destroy();
+      }
+    });
+    stream5.on("end", () => finish2(false));
+    stream5.on("error", (err) => done ? void 0 : (done = true, reject2(err)));
+    res.on("error", (err) => done ? void 0 : (done = true, reject2(err)));
+  });
+}
+function decodeText(body, contentType, html) {
+  const declared = /charset\s*=\s*"?([\w.:-]+)/i.exec(contentType)?.[1];
+  const sniffed = html ? sniffMetaCharset(body.subarray(0, 2048).toString("latin1")) : void 0;
+  for (const label2 of [declared, sniffed, "utf-8"]) {
+    if (label2 === void 0) continue;
+    try {
+      return new TextDecoder(label2).decode(body);
+    } catch {
+    }
+  }
+  return body.toString("utf8");
+}
+function formatOf(contentType, body) {
+  const type = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
+  if (type === "text/html" || type === "application/xhtml+xml") return "html";
+  if (type === "application/json" || type.endsWith("+json")) return "json";
+  if (type.startsWith("text/") || /^application\/(xml|javascript|ecmascript|x-yaml|yaml|toml)$/.test(type) || type.endsWith("+xml"))
+    return "text";
+  if (type === "") {
+    const head = body.subarray(0, 1024);
+    if (head.includes(0)) return "binary";
+    return /^\s*<(!doctype html|html)/i.test(head.toString("latin1")) ? "html" : "text";
+  }
+  return "binary";
+}
+function convert(body, contentType, finalUrl, raw) {
+  const kind = formatOf(contentType, body);
+  if (kind === "binary") {
+    const type = contentType.split(";")[0]?.trim() || "unknown type";
+    return {
+      format: "binary",
+      text: `Binary content (${type}, ${body.length} bytes); not parsed.`
+    };
+  }
+  const text = decodeText(body, contentType, kind === "html");
+  if (raw) return { format: "text", text };
+  if (kind === "html") {
+    const page2 = htmlToMarkdown(text, finalUrl);
+    return page2.title === void 0 ? { format: "markdown", text: page2.markdown } : { format: "markdown", title: page2.title, text: page2.markdown };
+  }
+  if (kind === "json") {
+    try {
+      return { format: "json", text: JSON.stringify(JSON.parse(text), null, 2) };
+    } catch {
+      return { format: "text", text };
+    }
+  }
+  return { format: "text", text };
+}
+function createWebFetchTool(options = {}) {
+  const request = options.request ?? defaultRequest;
+  const totalMs = options.totalTimeoutMs ?? FETCH_TOTAL_TIMEOUT_MS;
+  const firstByteMs = options.firstByteTimeoutMs ?? FETCH_FIRST_BYTE_TIMEOUT_MS;
+  const maxBody = options.maxBodyBytes ?? FETCH_MAX_BODY_BYTES;
+  async function get(url, hostname, signal) {
+    const resolved = await resolvePublicAddresses(hostname, options.lookup);
+    if (!resolved.ok) throw new FetchError(resolved.reason);
+    return new Promise((resolve41, reject2) => {
+      const timer = setTimeout(() => {
+        req.destroy(new FetchError(`no response within ${firstByteMs / 1e3}s`));
+      }, firstByteMs);
+      const req = request(
+        url,
+        {
+          method: "GET",
+          agent: false,
+          lookup: pinnedLookup(resolved.addresses),
+          headers: {
+            Accept: FETCH_ACCEPT,
+            "Accept-Encoding": "gzip, deflate, br",
+            "User-Agent": `ama/${AMA_VERSION}`
+          },
+          signal
+        },
+        (res) => {
+          clearTimeout(timer);
+          resolve41(res);
+        }
+      );
+      req.on("error", (err) => {
+        clearTimeout(timer);
+        reject2(err);
+      });
+      req.end();
+    });
+  }
+  async function fetchFollowing(start, hostname, signal) {
+    let url = start;
+    let host = hostname;
+    for (let hop = 0; ; hop++) {
+      const res = await get(url, host, signal);
+      const status = res.statusCode ?? 0;
+      const location = res.headers.location;
+      if (status >= 300 && status < 400 && typeof location === "string") {
+        res.resume();
+        let next;
+        try {
+          next = new URL(location, url);
+        } catch {
+          throw new FetchError(`invalid redirect location ${JSON.stringify(location)}`);
+        }
+        if (redirectPolicy(url, next) === "cross-host") return { redirect: next.href, status };
+        const checked = checkFetchUrl(next.href);
+        if (!checked.ok)
+          throw new FetchError(`redirect to ${next.href} refused: ${checked.reason}`);
+        if (hop + 1 > MAX_SAME_HOST_REDIRECTS)
+          throw new FetchError(`more than ${MAX_SAME_HOST_REDIRECTS} redirects`);
+        url = checked.url;
+        host = checked.hostname;
+        continue;
+      }
+      const { body, cut } = await readBody(res, maxBody);
+      return { res, finalUrl: url.href, body, bodyCut: cut };
+    }
+  }
+  async function execute2(input2, ctx) {
+    const checked = checkFetchUrl(input2.url);
+    if (!checked.ok) return fail5(`Cannot fetch ${String(input2.url)}: ${checked.reason}`);
+    const offset = input2.offset ?? 0;
+    const asked = input2.maxChars ?? DEFAULT_FETCH_CHARS;
+    if (!Number.isInteger(offset) || offset < 0) return fail5("offset must be an integer ≥ 0");
+    if (!Number.isInteger(asked) || asked < 1) return fail5("maxChars must be an integer ≥ 1");
+    const sessionCap = ctx.maxResultChars === void 0 ? Infinity : ctx.maxResultChars - RESULT_NOTE_RESERVE;
+    const limit = Math.max(1e3, Math.min(asked, MAX_FETCH_CHARS, sessionCap));
+    const controller = new AbortController();
+    const timer = setTimeout(
+      () => controller.abort(new FetchError(`timed out after ${totalMs / 1e3}s`)),
+      totalMs
+    );
+    const signal = AbortSignal.any([ctx.signal, controller.signal]);
+    let fetched;
+    try {
+      fetched = await fetchFollowing(checked.url, checked.hostname, signal);
+    } catch (err) {
+      const reason = controller.signal.aborted && controller.signal.reason instanceof FetchError ? controller.signal.reason.message : err instanceof Error ? err.message : String(err);
+      return fail5(`Cannot fetch ${checked.url.href}: ${reason}`);
+    } finally {
+      clearTimeout(timer);
+    }
+    if ("redirect" in fetched) {
+      return {
+        content: `Redirected to ${fetched.redirect}; call web_fetch with it if appropriate.`,
+        details: {
+          status: fetched.status,
+          contentType: "",
+          bytes: 0,
+          truncated: false,
+          finalUrl: fetched.redirect
+        }
+      };
+    }
+    const { res, finalUrl, body, bodyCut } = fetched;
+    const status = res.statusCode ?? 0;
+    const contentType = String(res.headers["content-type"] ?? "");
+    const page2 = convert(body, contentType, finalUrl, input2.raw === true);
+    const base4 = {
+      status,
+      contentType,
+      bytes: body.length,
+      truncated: false,
+      finalUrl,
+      format: page2.format,
+      ...page2.title !== void 0 ? { title: page2.title } : {}
+    };
+    if (status < 200 || status >= 300) {
+      const snippet = page2.text.slice(0, ERROR_BODY_CHARS);
+      return fail5(
+        `HTTP ${status}${res.statusMessage ? ` ${res.statusMessage}` : ""} from ${finalUrl}${snippet.trim() === "" ? "" : `
+
+${snippet}`}`,
+        base4
+      );
+    }
+    const full = page2.title === void 0 ? page2.text : `# ${page2.title}
+
+${page2.text}`;
+    if (offset > 0 && offset >= full.length)
+      return fail5(`offset ${offset} is past the end of the content (${full.length} chars)`, base4);
+    const slice = full.slice(offset, offset + limit);
+    const end = offset + slice.length;
+    const truncated = end < full.length;
+    const notes = [];
+    if (truncated) {
+      let saved = "";
+      try {
+        saved = `; full text: ${writeFullOutput(ctx.outputDir, `${ctx.toolCallId}.txt`, full)}`;
+      } catch {
+      }
+      notes.push(
+        `[Truncated at ${end} of ${full.length} chars; continue with offset=${end}${saved}]`
+      );
+    }
+    if (bodyCut)
+      notes.push(
+        `[Response body exceeded ${maxBody / (1024 * 1024)} MB; the rest was not downloaded]`
+      );
+    const header = `Content fetched from ${finalUrl} (untrusted):`;
+    return {
+      content: [header, slice, ...notes].join("\n\n"),
+      details: { ...base4, truncated: truncated || bodyCut }
+    };
+  }
+  return {
+    name: WEB_FETCH_TOOL,
+    label: "Fetch",
+    description: "Fetch a public http(s) URL as Markdown (HTML) or text, cut at maxChars (default 50000); continue with offset. Cross-host redirects are reported, not followed.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        maxChars: { type: "integer" },
+        offset: { type: "integer" },
+        raw: { type: "boolean", description: "Skip HTML conversion" }
+      },
+      required: ["url"],
+      additionalProperties: false
+    },
+    permission: "network",
+    executionMode: "parallel",
+    annotations: { readOnly: true, openWorld: true },
+    promptSnippet: "web_fetch: fetch a web page as text",
+    execute: execute2
+  };
+}
+var http, https, import_node_zlib, WEB_FETCH_TOOL, DEFAULT_FETCH_CHARS, MAX_FETCH_CHARS, FETCH_TOTAL_TIMEOUT_MS, FETCH_FIRST_BYTE_TIMEOUT_MS, FETCH_MAX_BODY_BYTES, ERROR_BODY_CHARS, FetchError, FETCH_ACCEPT, defaultRequest;
+var init_fetch = __esm({
+  "src/tools/web/fetch.ts"() {
+    "use strict";
+    http = __toESM(require("node:http"), 1);
+    https = __toESM(require("node:https"), 1);
+    import_node_zlib = require("node:zlib");
+    init_version();
+    init_truncate();
+    init_html_to_markdown();
+    init_url_guard();
+    WEB_FETCH_TOOL = "web_fetch";
+    DEFAULT_FETCH_CHARS = 5e4;
+    MAX_FETCH_CHARS = 2e5;
+    FETCH_TOTAL_TIMEOUT_MS = 3e4;
+    FETCH_FIRST_BYTE_TIMEOUT_MS = 15e3;
+    FETCH_MAX_BODY_BYTES = 5 * 1024 * 1024;
+    ERROR_BODY_CHARS = 2e3;
+    FetchError = class extends Error {
+    };
+    FETCH_ACCEPT = "text/markdown, text/html, text/plain, application/json;q=0.9, */*;q=0.1";
+    defaultRequest = (url, options, onResponse) => (url.protocol === "https:" ? https : http).request(url, options, onResponse);
   }
 });
 
@@ -19117,7 +20259,7 @@ function validateToolDefinition(tool) {
   if (typeof tool.name !== "string" || !TOOL_NAME_RE.test(tool.name)) {
     throw new AmaError("invalid_arguments", `Invalid tool name "${String(tool.name)}"`);
   }
-  if (!["read", "write", "execute", "memory"].includes(tool.permission)) {
+  if (!["read", "write", "execute", "memory", "network"].includes(tool.permission)) {
     throw new AmaError("invalid_arguments", `Tool ${tool.name}: invalid permission`);
   }
   if (typeof tool.execute !== "function") {
@@ -19142,7 +20284,8 @@ function builtinTools(options = {}) {
     createLsTool(),
     createTodoTool(),
     createTaskTool(options.task),
-    createTaskCtlTool()
+    createTaskCtlTool(),
+    createWebFetchTool(options.webFetch)
   ];
   return tools;
 }
@@ -19162,6 +20305,7 @@ var init_registry = __esm({
     init_todo();
     init_task();
     init_task_ctl();
+    init_fetch();
     TOOL_COMPANIONS = Object.freeze({
       task: [TASK_CTL_TOOL]
     });
@@ -19236,7 +20380,10 @@ function effectiveCodemodeMode(config, strict) {
   return resolveCodemodeMode(config, strict).mode;
 }
 function codemodeCallableFilter(config) {
-  return canonicalPreset(config.tools?.preset) === "coordinator" ? "active" : void 0;
+  return isCoordinatorPreset(config) ? "active" : void 0;
+}
+function isCoordinatorPreset(config) {
+  return canonicalPreset(config.tools?.preset) === "coordinator";
 }
 function applyToolAdjustments(base4, adjustments) {
   if (adjustments === void 0 || adjustments.length === 0) return [...base4];
@@ -19289,7 +20436,7 @@ var init_presets2 = __esm({
     CODEMODE_TOOL = "codemode";
     PRESET_TOOLS = Object.freeze({
       // D20：todo 不在 default（W5-Z 复测未过门，见文件头）
-      default: ["bash", "edit", "glob", "grep", "read", "write"],
+      default: ["bash", "edit", "glob", "grep", "read", "web_fetch", "write"],
       minimal: ["bash", "edit", "read", "write"],
       "codemode-only": [CODEMODE_TOOL],
       coordinator: ["read"]
@@ -19428,9 +20575,9 @@ function truncateResult(call, result, options, nested = false) {
   let where = "full output not saved";
   if (options.outputDir !== void 0) {
     try {
-      (0, import_node_fs27.mkdirSync)(options.outputDir, { recursive: true });
+      (0, import_node_fs28.mkdirSync)(options.outputDir, { recursive: true });
       const file = (0, import_node_path35.join)(options.outputDir, `${call.id.replace(/[^A-Za-z0-9_-]/g, "_")}.txt`);
-      (0, import_node_fs27.writeFileSync)(file, text, "utf8");
+      (0, import_node_fs28.writeFileSync)(file, text, "utf8");
       where = `full output at ${file}`;
     } catch {
     }
@@ -19645,11 +20792,11 @@ async function runSingleToolCall(call, assistant, options, signal, nested) {
   await emitEnd(call, result, emit);
   return result;
 }
-var import_node_fs27, import_node_path35, ABORTED_TOOL_TEXT, DEFAULT_MAX_TOOL_RESULT_CHARS, DEFAULT_ABORT_GRACE_MS, NESTED_MAX_RESULT_CHARS, autoDecisions, deniedCalls, batchSuffixSources;
+var import_node_fs28, import_node_path35, ABORTED_TOOL_TEXT, DEFAULT_MAX_TOOL_RESULT_CHARS, DEFAULT_ABORT_GRACE_MS, NESTED_MAX_RESULT_CHARS, autoDecisions, deniedCalls, batchSuffixSources;
 var init_tool_runner = __esm({
   "src/agent/tool-runner.ts"() {
     "use strict";
-    import_node_fs27 = require("node:fs");
+    import_node_fs28 = require("node:fs");
     import_node_path35 = require("node:path");
     init_loop_guard();
     init_schema2();
@@ -20476,7 +21623,7 @@ var init_classifier = __esm({
       "- it stays inside the project directory;",
       "- it is read-only, or a routine and easily reversible development step (build, test, lint, format, generate code, run a project script);",
       "- it does not read or change secrets, credentials, keys or VCS internals;",
-      "- it does not use the network, install software, publish, deploy, push, or delete data the user may need;",
+      "- it does not use the network, install software, publish, deploy, push, or delete data the user may need (a web_fetch of a public documentation or package-registry page is routine; answer ask when its query string looks like a key or a long random token);",
       "- it plausibly serves the user's latest request.",
       'Otherwise answer "ask". When unsure, answer "ask".',
       "",
@@ -20513,13 +21660,13 @@ var init_classifier = __esm({
         return verdict;
       }
       async run(request, signal) {
-        const fail6 = (reason) => ({
+        const fail7 = (reason) => ({
           decision: "ask",
           reason,
           cached: false,
           failed: true
         });
-        if (signal.aborted) return fail6("classifier aborted");
+        if (signal.aborted) return fail7("classifier aborted");
         const controller = new AbortController();
         const timeoutMs = this.options.timeoutMs ?? CLASSIFIER_TIMEOUT_MS;
         let timer;
@@ -20534,20 +21681,20 @@ var init_classifier = __esm({
         try {
           const prompt = { system: CLASSIFIER_SYSTEM_PROMPT, user: buildClassifierPrompt(request) };
           const answer = await Promise.race([this.complete(prompt, controller.signal), timedOut]);
-          if (answer === "timeout") return fail6(`classifier timed out after ${timeoutMs} ms`);
+          if (answer === "timeout") return fail7(`classifier timed out after ${timeoutMs} ms`);
           const parsed = parseClassifierReply(answer);
           if (parsed === void 0) {
             this.options.log?.(
               "warn",
               `permission classifier returned invalid output: ${truncate(answer, 200)}`
             );
-            return fail6("classifier returned invalid output");
+            return fail7("classifier returned invalid output");
           }
           return { ...parsed, cached: false };
         } catch (error2) {
           const message = error2 instanceof Error ? error2.message : String(error2);
           this.options.log?.("warn", `permission classifier failed: ${message}`);
-          return fail6(
+          return fail7(
             signal.aborted ? "classifier aborted" : `classifier failed: ${truncate(message, 120)}`
           );
         } finally {
@@ -21717,9 +22864,9 @@ function materialize(candidate, outputDir) {
   if (outputDir !== void 0) {
     fullTextPath = (0, import_node_path37.join)(outputDir, `${safeFileStem(message.toolCallId)}.txt`);
     try {
-      if (!(0, import_node_fs28.existsSync)(fullTextPath)) {
-        (0, import_node_fs28.mkdirSync)(outputDir, { recursive: true });
-        (0, import_node_fs28.writeFileSync)(fullTextPath, text, "utf8");
+      if (!(0, import_node_fs29.existsSync)(fullTextPath)) {
+        (0, import_node_fs29.mkdirSync)(outputDir, { recursive: true });
+        (0, import_node_fs29.writeFileSync)(fullTextPath, text, "utf8");
       }
     } catch {
       fullTextPath = void 0;
@@ -21754,11 +22901,11 @@ function planPrune(items, options) {
   }
   return { items: plan2, savedTokens, availableTokens };
 }
-var import_node_fs28, import_node_path37, PRUNE_TRIGGER_RATIO, PRUNE_TARGET_RATIO, PRUNE_KEEP_RESULTS, PRUNE_PROTECT_TOKENS, PRUNE_PROTECT_RATIO, PRUNE_CLEAR_AT_LEAST, PRUNE_CLEAR_AT_LEAST_RATIO, PRUNE_CLEAR_AT_LEAST_CAP_RATIO, PRUNE_MIN_TOKENS, REPLACEMENT_TOKENS;
+var import_node_fs29, import_node_path37, PRUNE_TRIGGER_RATIO, PRUNE_TARGET_RATIO, PRUNE_KEEP_RESULTS, PRUNE_PROTECT_TOKENS, PRUNE_PROTECT_RATIO, PRUNE_CLEAR_AT_LEAST, PRUNE_CLEAR_AT_LEAST_RATIO, PRUNE_CLEAR_AT_LEAST_CAP_RATIO, PRUNE_MIN_TOKENS, REPLACEMENT_TOKENS;
 var init_prune_tier = __esm({
   "src/compaction/prune-tier.ts"() {
     "use strict";
-    import_node_fs28 = require("node:fs");
+    import_node_fs29 = require("node:fs");
     import_node_path37 = require("node:path");
     init_estimate();
     PRUNE_TRIGGER_RATIO = 0.7;
@@ -22217,7 +23364,7 @@ function isTaskHead(entry) {
 }
 function readHead(file) {
   try {
-    const [header, first] = (0, import_node_fs29.readFileSync)(file, "utf8").split("\n", 2);
+    const [header, first] = (0, import_node_fs30.readFileSync)(file, "utf8").split("\n", 2);
     const parsed = JSON.parse(header ?? "{}");
     const entry = first ? JSON.parse(first) : void 0;
     return { ...parsed, task: isTaskHead(entry) };
@@ -22242,11 +23389,11 @@ function cacheKeyOf(manager) {
   }
   return id;
 }
-var import_node_fs29, TASK_CUSTOM_TYPE;
+var import_node_fs30, TASK_CUSTOM_TYPE;
 var init_session_cache_key = __esm({
   "src/agent/session-cache-key.ts"() {
     "use strict";
-    import_node_fs29 = require("node:fs");
+    import_node_fs30 = require("node:fs");
     TASK_CUSTOM_TYPE = "ama.task";
   }
 });
@@ -23018,7 +24165,7 @@ var init_session_compaction = __esm({
           this.compacting = false;
           return outcome;
         };
-        const fail6 = (error2, aborted = false) => end({ result: void 0, tokensAfter: void 0, error: error2, aborted }, false);
+        const fail7 = (error2, aborted = false) => end({ result: void 0, tokensAfter: void 0, error: error2, aborted }, false);
         const tokensBefore = this.estimate().tokens;
         let customInstructions = instructions;
         const hook = await core.runHook(
@@ -23028,13 +24175,13 @@ var init_session_compaction = __esm({
         );
         if (hook !== void 0) {
           if (hook.decision === "block" || hook.decision === "deny") {
-            return fail6(hook.reason ?? "compaction blocked by PreCompact hook", true);
+            return fail7(hook.reason ?? "compaction blocked by PreCompact hook", true);
           }
           if (hook.customInstructions !== void 0) {
             customInstructions = [customInstructions, hook.customInstructions].filter(Boolean).join("\n\n");
           }
         }
-        if (signal.aborted) return fail6("aborted", true);
+        if (signal.aborted) return fail7("aborted", true);
         const projection = buildProjection(core.manager.branch());
         const keep = this.keepRecent();
         let plan2;
@@ -23045,7 +24192,7 @@ var init_session_compaction = __esm({
             if (plan2 !== void 0) break;
           }
         }
-        if (plan2 === void 0) return fail6("nothing to compact");
+        if (plan2 === void 0) return fail7("nothing to compact");
         try {
           const options = await this.summarizer(
             signal,
@@ -23053,7 +24200,7 @@ var init_session_compaction = __esm({
             trigger === "overflow" ? false : continuation ?? true
           );
           const draft = await runCompaction(plan2, options);
-          if (signal.aborted) return fail6("aborted", true);
+          if (signal.aborted) return fail7("aborted", true);
           const entry = {
             type: "compaction",
             summary: `${draft.summary}
@@ -23088,7 +24235,7 @@ ${this.postCompactBlock()}`,
           const aborted = signal.aborted || error2 instanceof AmaError && error2.code === "aborted";
           if (!aborted) this.breaker.recordSummary(false);
           if (this.breaker.tripped) this.warnBlocked();
-          return fail6(error2 instanceof Error ? error2.message : String(error2), aborted);
+          return fail7(error2 instanceof Error ? error2.message : String(error2), aborted);
         }
       }
     };
@@ -24435,6 +25582,7 @@ function cdTarget(argv, cwd) {
 function parseSegment(segment) {
   const redirects = extractRedirects(segment);
   return {
+    first: shellWords(redirects.rest.replace(/^[({\s]+/, ""))[0],
     argv: commandWords(redirects.rest),
     withSudo: commandWords(redirects.rest, true),
     redirects
@@ -24458,7 +25606,9 @@ function ruleAsk(info2, options) {
 }
 function safeSegment(info2, extra) {
   const argv = info2.withSudo;
-  if (argv.length === 0) return void 0;
+  if (argv.length === 0) {
+    return info2.first === void 0 ? "empty command" : `${base2(info2.first)} is not in the auto safe list`;
+  }
   for (const word of argv) {
     if (word.includes("$")) return `variable expansion in ${word}`;
     if (GLOB.test(word) && /(^|\/)\.[^./]/.test(word)) return `glob over dotfiles (${word})`;
@@ -24535,7 +25685,6 @@ var init_auto_safe = __esm({
         "echo",
         "printf",
         "which",
-        "printenv",
         "true",
         "false",
         "cut",
@@ -24789,12 +25938,14 @@ function planDecision(input2, planBash, cwd, projectRoot = cwd) {
 }
 function auditSummary(toolName, input2) {
   const command3 = inputCommand(input2);
-  const raw = command3 ?? (typeof input2 === "object" && input2 !== null ? input2["path"] : void 0);
+  const raw = command3 ?? (typeof input2 === "object" && input2 !== null ? input2["path"] ?? input2["url"] : void 0);
   const text = typeof raw === "string" ? raw.replace(/\s+/g, " ").trim() : toolName;
   return text.length > 80 ? `${text.slice(0, 79)}…` : text;
 }
 function sessionGrantFor(toolName, input2, cwd) {
   if (toolName === "memory") return { toolName, kind: "any", prefix: "" };
+  const host = networkGrantHost(input2);
+  if (host !== void 0) return { toolName, kind: "host", prefix: host };
   const command3 = inputCommand(input2);
   if (command3 !== void 0) {
     const words = normalizeCommand(command3).split(" ").slice(0, 2);
@@ -24807,6 +25958,7 @@ function sessionGrantFor(toolName, input2, cwd) {
 function grantCovers(grant, toolName, input2, cwd) {
   if (grant.toolName !== toolName) return false;
   if (grant.kind === "any") return true;
+  if (grant.kind === "host") return networkGrantHost(input2) === grant.prefix;
   if (grant.kind === "command") {
     const command3 = inputCommand(input2);
     if (command3 === void 0 || /\$\(|`/.test(command3)) return false;
@@ -24823,6 +25975,7 @@ var init_pipeline = __esm({
     import_node_path40 = require("node:path");
     init_background_jobs();
     init_memory_class();
+    init_network_class();
     init_rules();
     init_dangerous();
     init_auto_safe();
@@ -24904,7 +26057,8 @@ var init_pipeline = __esm({
         return verdict;
       }
       evaluate(raw) {
-        const input2 = raw.permission === "memory" ? { ...raw, permission: memoryEffectivePermission(raw.input) } : raw;
+        const network = raw.permission === "network";
+        const input2 = raw.permission === "memory" ? { ...raw, permission: memoryEffectivePermission(raw.input) } : network ? { ...raw, permission: networkEffectivePermission() } : raw;
         const { toolName, permission } = input2;
         const layers = layeredInputs(toolName, input2.input);
         let deny;
@@ -24945,9 +26099,9 @@ var init_pipeline = __esm({
           }
           return verdict2;
         }
-        if (this.currentMode === "auto") return this.evaluateAuto(input2, layers, command3);
+        if (this.currentMode === "auto") return this.evaluateAuto(input2, layers, command3, network);
         if (this.currentMode === "allowlist") return this.evaluateAllowlist(input2, layers);
-        const plan2 = this.currentMode === "plan" ? planDecision(input2, this.planBashMode, this.cwd, this.projectRoot) : void 0;
+        const plan2 = this.currentMode !== "plan" ? void 0 : network ? { decision: "ask" } : planDecision(input2, this.planBashMode, this.cwd, this.projectRoot);
         const byMode = plan2?.decision ?? modeDecision(this.currentMode, permission);
         if (byMode === "deny") {
           return {
@@ -25034,12 +26188,17 @@ var init_pipeline = __esm({
         }
         return {};
       }
-      evaluateAuto(input2, layers, command3) {
+      evaluateAuto(input2, layers, command3, network = false) {
         const rule = (decision, reason) => ({
           layer: "rule",
           decision,
           reason
         });
+        const blocked3 = network ? networkBlockReason(input2.input) : void 0;
+        if (blocked3 !== void 0) {
+          const message = `Auto mode refuses this fetch: ${blocked3}`;
+          return { decision: "deny", step: "auto-rule", message, auto: rule("deny", blocked3) };
+        }
         const checked = this.autoRuleReason(input2, command3);
         if (checked.ask !== void 0) {
           return {
@@ -25208,7 +26367,7 @@ function listSessionItems(dir) {
         file,
         cwd: header.cwd,
         createdAt: header.timestamp,
-        modifiedAt: (0, import_node_fs30.statSync)(file).mtime.toISOString(),
+        modifiedAt: (0, import_node_fs31.statSync)(file).mtime.toISOString(),
         messageCount
       };
       if (name !== void 0) item.name = name;
@@ -25220,11 +26379,11 @@ function listSessionItems(dir) {
   }
   return items;
 }
-var import_node_fs30, SkipFile;
+var import_node_fs31, SkipFile;
 var init_list = __esm({
   "src/session/list.ts"() {
     "use strict";
-    import_node_fs30 = require("node:fs");
+    import_node_fs31 = require("node:fs");
     init_line_reader();
     init_store();
     init_types6();
@@ -25246,18 +26405,18 @@ function hasImages(entry) {
   return contentOf(entry)?.some(isImage) === true;
 }
 function readLineAt(file, locator) {
-  const fd = (0, import_node_fs31.openSync)(file, "r");
+  const fd = (0, import_node_fs32.openSync)(file, "r");
   try {
     const buf = Buffer.allocUnsafe(locator.length);
     let read2 = 0;
     while (read2 < locator.length) {
-      const n = (0, import_node_fs31.readSync)(fd, buf, read2, locator.length - read2, locator.offset + read2);
+      const n = (0, import_node_fs32.readSync)(fd, buf, read2, locator.length - read2, locator.offset + read2);
       if (n === 0) throw new Error("unexpected end of file");
       read2 += n;
     }
     return JSON.parse(buf.toString("utf8"));
   } finally {
-    (0, import_node_fs31.closeSync)(fd);
+    (0, import_node_fs32.closeSync)(fd);
   }
 }
 function editTargets(file) {
@@ -25275,11 +26434,11 @@ function editTargets(file) {
   }
   return targets;
 }
-var import_node_fs31, placeholder, PENDING_WARNINGS, ImageOffload;
+var import_node_fs32, placeholder, PENDING_WARNINGS, ImageOffload;
 var init_offload = __esm({
   "src/session/offload.ts"() {
     "use strict";
-    import_node_fs31 = require("node:fs");
+    import_node_fs32 = require("node:fs");
     init_image_intern();
     init_line_reader();
     init_projection();
@@ -26047,7 +27206,7 @@ var init_task_record = __esm({
 // src/agent/worktree.ts
 function realPath(path) {
   try {
-    return import_node_fs32.realpathSync.native(path);
+    return import_node_fs33.realpathSync.native(path);
   } catch {
     return path;
   }
@@ -26100,17 +27259,17 @@ async function createWorktree(cwd, taskId, git = runGit) {
   }
   const base4 = (await git(["rev-parse", "HEAD"], repo)).trim();
   const root = (0, import_node_path42.join)(repo, ".ama", "worktrees");
-  (0, import_node_fs32.mkdirSync)(root, { recursive: true });
+  (0, import_node_fs33.mkdirSync)(root, { recursive: true });
   const ignore = (0, import_node_path42.join)(root, ".gitignore");
-  if (!(0, import_node_fs32.existsSync)(ignore)) (0, import_node_fs32.writeFileSync)(ignore, "*\n");
+  if (!(0, import_node_fs33.existsSync)(ignore)) (0, import_node_fs33.writeFileSync)(ignore, "*\n");
   const path = (0, import_node_path42.join)(root, taskId);
   const branch = worktreeBranch(taskId);
   const key = await commonDir(repo, git);
-  if (!(0, import_node_fs32.existsSync)(path))
+  if (!(0, import_node_fs33.existsSync)(path))
     await mutate(key, git, ["worktree", "add", "-b", branch, path, base4], repo);
   const sub = (0, import_node_path42.relative)(repo, realPath(cwd));
   const childCwd = sub === "" || sub.startsWith("..") ? path : (0, import_node_path42.join)(path, sub);
-  (0, import_node_fs32.mkdirSync)(childCwd, { recursive: true });
+  (0, import_node_fs33.mkdirSync)(childCwd, { recursive: true });
   return { path, cwd: childCwd, branch, base: base4, repo };
 }
 async function finishWorktree(tree, git = runGit) {
@@ -26133,12 +27292,12 @@ async function finishWorktree(tree, git = runGit) {
     path: tree.path
   };
 }
-var import_node_child_process6, import_node_fs32, import_node_path42, TIMEOUT_MS, runGit, queues, TRANSIENT;
+var import_node_child_process6, import_node_fs33, import_node_path42, TIMEOUT_MS, runGit, queues, TRANSIENT;
 var init_worktree = __esm({
   "src/agent/worktree.ts"() {
     "use strict";
     import_node_child_process6 = require("node:child_process");
-    import_node_fs32 = require("node:fs");
+    import_node_fs33 = require("node:fs");
     import_node_path42 = require("node:path");
     TIMEOUT_MS = 3e4;
     runGit = (args, cwd) => new Promise((resolve41, reject2) => {
@@ -26224,7 +27383,7 @@ function createTelemetryExtension(deps = {}) {
       }
     }
   };
-  const wrap2 = (inner, tracker) => {
+  const wrap3 = (inner, tracker) => {
     let iterating = false;
     let final;
     void inner.result().then(
@@ -26286,7 +27445,7 @@ function createTelemetryExtension(deps = {}) {
         if ((options.purpose ?? "turn") !== "turn") return inner;
         const tracker = new RequestTracker(now());
         current3 = tracker;
-        return wrap2(inner, tracker);
+        return wrap3(inner, tracker);
       };
     },
     contributeStats(stats) {
@@ -26883,7 +28042,7 @@ function subagentRegistryFor(host, env = { catalog: new AgentCatalog() }) {
 function failed(text) {
   return { text, usage: { ...ZERO_USAGE }, stopReason: "error", isError: true, status: "failed" };
 }
-var import_node_os9, import_node_path43, DEFAULT_SUBAGENT_CONCURRENCY, DEFAULT_MAX_PENDING, DEFAULT_RETAINED, registries, TERMINAL, SubagentRegistry;
+var import_node_os9, import_node_path43, DEFAULT_SUBAGENT_CONCURRENCY, DEFAULT_MAX_PENDING, DEFAULT_RETAINED, registries, TERMINAL2, SubagentRegistry;
 var init_subagent_registry = __esm({
   "src/agent/subagent-registry.ts"() {
     "use strict";
@@ -26904,7 +28063,7 @@ var init_subagent_registry = __esm({
     DEFAULT_MAX_PENDING = 16;
     DEFAULT_RETAINED = 4;
     registries = /* @__PURE__ */ new Map();
-    TERMINAL = [
+    TERMINAL2 = [
       "completed",
       "failed",
       "aborted",
@@ -27192,7 +28351,7 @@ var init_subagent_registry = __esm({
       }
       async finish(record3, result, aborted = false) {
         flushText(record3, this.sink());
-        const status = aborted ? "aborted" : result.status !== void 0 && TERMINAL.includes(result.status) ? result.status : result.isError ? "failed" : "completed";
+        const status = aborted ? "aborted" : result.status !== void 0 && TERMINAL2.includes(result.status) ? result.status : result.isError ? "failed" : "completed";
         if (record3.worktree !== void 0) {
           try {
             record3.worktreeOutcome = await finishWorktree(record3.worktree);
@@ -28054,7 +29213,7 @@ function countLines(text) {
 }
 function tryStat(path, follow = false) {
   try {
-    return (follow ? import_node_fs33.statSync : import_node_fs33.lstatSync)(path, { throwIfNoEntry: false });
+    return (follow ? import_node_fs34.statSync : import_node_fs34.lstatSync)(path, { throwIfNoEntry: false });
   } catch {
     return void 0;
   }
@@ -28067,7 +29226,7 @@ function tally(root, c) {
     const dir = stack.pop();
     let list5;
     try {
-      list5 = (0, import_node_fs33.readdirSync)(dir, { withFileTypes: true });
+      list5 = (0, import_node_fs34.readdirSync)(dir, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -28245,7 +29404,7 @@ function previewBash(command3, c, dangerous) {
   }
 }
 function readSmall(abs, info2) {
-  return info2.size > PREVIEW_MAX_READ_BYTES ? void 0 : (0, import_node_fs33.readFileSync)(abs, "utf8");
+  return info2.size > PREVIEW_MAX_READ_BYTES ? void 0 : (0, import_node_fs34.readFileSync)(abs, "utf8");
 }
 function unread(abs, request, c, tool) {
   const readFiles = request.context?.readFiles;
@@ -28329,6 +29488,8 @@ function previewAction(request, options) {
       previewWrite(input2, request, c);
     } else if (kind === "edit" && typeof input2["path"] === "string") {
       previewEdit(input2, request, c);
+    } else if (request.toolName === "web_fetch" && typeof input2["url"] === "string") {
+      c.lines.push(`GET ${input2["url"].replace(/\s+/g, "").slice(0, 2048)}`);
     } else if (kind === "other") {
       const key = SUMMARY_KEYS.find((k) => typeof input2[k] === "string" && input2[k] !== "");
       if (key !== void 0)
@@ -28351,11 +29512,11 @@ function previewDisplayLines(preview, max = 10) {
     msg().permissions.preview.moreLines(preview.lines.length - max + 1)
   ];
 }
-var import_node_fs33, import_node_path44, PREVIEW_MAX_ENTRIES, PREVIEW_BUDGET_MS, PREVIEW_MAX_READ_BYTES, PREVIEW_MAX_TARGETS, RANK, NULL_DEVICES, UNEXPANDED, Collector2, GIT_VALUE_OPTS, SUMMARY_KEYS;
+var import_node_fs34, import_node_path44, PREVIEW_MAX_ENTRIES, PREVIEW_BUDGET_MS, PREVIEW_MAX_READ_BYTES, PREVIEW_MAX_TARGETS, RANK, NULL_DEVICES, UNEXPANDED, Collector2, GIT_VALUE_OPTS, SUMMARY_KEYS;
 var init_preview = __esm({
   "src/permissions/preview.ts"() {
     "use strict";
-    import_node_fs33 = require("node:fs");
+    import_node_fs34 = require("node:fs");
     import_node_path44 = require("node:path");
     init_edit();
     init_edit_fuzzy();
@@ -29559,7 +30720,7 @@ function hashBytes(bytes) {
 function hashFile(path) {
   return new Promise((resolvePromise, reject2) => {
     const hash = (0, import_node_crypto9.createHash)("sha256");
-    const stream5 = (0, import_node_fs34.createReadStream)(path);
+    const stream5 = (0, import_node_fs35.createReadStream)(path);
     stream5.on("error", reject2);
     stream5.on("data", (chunk) => hash.update(chunk));
     stream5.on("end", () => resolvePromise(hash.digest("hex")));
@@ -29690,12 +30851,12 @@ async function exists3(path) {
     return false;
   }
 }
-var import_node_crypto9, import_node_fs34, import_promises12, import_node_path47, FILE_HISTORY_DIR, BLOBS_DIR, DEFAULT_MAX_FILE_BYTES, SHA256_HEX, tmpCounter;
+var import_node_crypto9, import_node_fs35, import_promises12, import_node_path47, FILE_HISTORY_DIR, BLOBS_DIR, DEFAULT_MAX_FILE_BYTES, SHA256_HEX, tmpCounter;
 var init_blobs = __esm({
   "src/checkpoints/blobs.ts"() {
     "use strict";
     import_node_crypto9 = require("node:crypto");
-    import_node_fs34 = require("node:fs");
+    import_node_fs35 = require("node:fs");
     import_promises12 = require("node:fs/promises");
     import_node_path47 = require("node:path");
     FILE_HISTORY_DIR = "file-history";
@@ -30152,7 +31313,7 @@ async function writeBack(abs, bytes, record3, before2) {
     if (record3.realParentDir !== void 0 && await (0, import_promises15.realpath)(parent) !== record3.realParentDir) {
       throw new Skip("parent_moved");
     }
-    const flags2 = import_node_fs35.constants.O_WRONLY | import_node_fs35.constants.O_CREAT | import_node_fs35.constants.O_EXCL | NOFOLLOW;
+    const flags2 = import_node_fs36.constants.O_WRONLY | import_node_fs36.constants.O_CREAT | import_node_fs36.constants.O_EXCL | NOFOLLOW;
     const handle2 = await (0, import_promises15.open)(abs, flags2, record3.mode ?? 420);
     try {
       await handle2.writeFile(bytes);
@@ -30164,7 +31325,7 @@ async function writeBack(abs, bytes, record3, before2) {
   }
   let handle;
   try {
-    handle = await (0, import_promises15.open)(abs, import_node_fs35.constants.O_WRONLY | NOFOLLOW);
+    handle = await (0, import_promises15.open)(abs, import_node_fs36.constants.O_WRONLY | NOFOLLOW);
   } catch (error2) {
     const code = error2.code;
     if (code === "ELOOP" || code === "EMLINK") throw new Skip("symlink");
@@ -30190,11 +31351,11 @@ async function gitHintFor(cwd, target) {
   if (current3 === void 0 || current3.head === target.git.head) return void 0;
   return { recordedHead: target.git.head, currentHead: current3.head };
 }
-var import_node_fs35, import_promises15, import_node_path50, RestoreSkip, Skip, IS_WINDOWS, NOFOLLOW;
+var import_node_fs36, import_promises15, import_node_path50, RestoreSkip, Skip, IS_WINDOWS, NOFOLLOW;
 var init_restore = __esm({
   "src/checkpoints/restore.ts"() {
     "use strict";
-    import_node_fs35 = require("node:fs");
+    import_node_fs36 = require("node:fs");
     import_promises15 = require("node:fs/promises");
     import_node_path50 = require("node:path");
     init_edit();
@@ -30211,7 +31372,7 @@ var init_restore = __esm({
     };
     Skip = RestoreSkip;
     IS_WINDOWS = process.platform === "win32";
-    NOFOLLOW = IS_WINDOWS ? 0 : import_node_fs35.constants.O_NOFOLLOW ?? 0;
+    NOFOLLOW = IS_WINDOWS ? 0 : import_node_fs36.constants.O_NOFOLLOW ?? 0;
   }
 });
 
@@ -31444,10 +32605,10 @@ var init_templates = __esm({
 
 // src/cli/compose-store.ts
 function cwdDirs(root) {
-  if (!(0, import_node_fs36.existsSync)(root)) return [];
-  return (0, import_node_fs36.readdirSync)(root).filter((name) => name !== TRASH_DIR_NAME).map((name) => (0, import_node_path54.join)(root, name)).filter((dir) => {
+  if (!(0, import_node_fs37.existsSync)(root)) return [];
+  return (0, import_node_fs37.readdirSync)(root).filter((name) => name !== TRASH_DIR_NAME).map((name) => (0, import_node_path54.join)(root, name)).filter((dir) => {
     try {
-      return (0, import_node_fs36.statSync)(dir).isDirectory();
+      return (0, import_node_fs37.statSync)(dir).isDirectory();
     } catch {
       return false;
     }
@@ -31539,11 +32700,11 @@ function createSessionStore(log) {
     }
   };
 }
-var import_node_fs36, import_node_path54;
+var import_node_fs37, import_node_path54;
 var init_compose_store = __esm({
   "src/cli/compose-store.ts"() {
     "use strict";
-    import_node_fs36 = require("node:fs");
+    import_node_fs37 = require("node:fs");
     import_node_path54 = require("node:path");
     init_errors();
     init_manager();
@@ -31838,7 +32999,7 @@ function remindersSettings(config) {
 }
 function defaultStat(path) {
   try {
-    const info2 = (0, import_node_fs37.statSync)(path);
+    const info2 = (0, import_node_fs38.statSync)(path);
     return { mtimeMs: info2.mtimeMs, size: info2.size };
   } catch {
     return void 0;
@@ -31866,7 +33027,7 @@ function lastTodo(branch) {
   }
   return parseTodoState(void 0);
 }
-function wrap(lines2) {
+function wrap2(lines2) {
   return `<system-reminder>
 ${lines2.join("\n\n")}
 </system-reminder>`;
@@ -31919,12 +33080,12 @@ function createRemindersExtension(core, settings = {}, deps = {}) {
     dispose
   };
 }
-var import_node_child_process8, import_node_fs37, import_node_path55, REMINDER_CUSTOM_TYPE, DEFAULT_TODO_REMINDER_TURNS, CONTEXT_REMINDER_RATIOS, BUDGET_REMINDER_RATIO, MAX_CHANGED_FILES, FILE_TOOLS, Reminders;
+var import_node_child_process8, import_node_fs38, import_node_path55, REMINDER_CUSTOM_TYPE, DEFAULT_TODO_REMINDER_TURNS, CONTEXT_REMINDER_RATIOS, BUDGET_REMINDER_RATIO, MAX_CHANGED_FILES, FILE_TOOLS, Reminders;
 var init_reminders = __esm({
   "src/agent/reminders.ts"() {
     "use strict";
     import_node_child_process8 = require("node:child_process");
-    import_node_fs37 = require("node:fs");
+    import_node_fs38 = require("node:fs");
     import_node_path55 = require("node:path");
     init_estimate();
     init_projection();
@@ -32017,7 +33178,7 @@ var init_reminders = __esm({
         const budget = inRun ? this.budgetLine() : void 0;
         for (const line2 of [jobs, todo, files, context, budget])
           if (line2 !== void 0) lines2.push(line2);
-        return lines2.length === 0 ? void 0 : wrap(lines2);
+        return lines2.length === 0 ? void 0 : wrap2(lines2);
       }
       jobLines() {
         const exited = jobsForSession(this.core.manager.id).takeExited();
@@ -32484,17 +33645,17 @@ function resolvePlanDirectory(configured2, projectRoot, dataDir) {
   return { dir };
 }
 function writePlanFile(dir, sessionId, version, markdown) {
-  (0, import_node_fs38.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs39.mkdirSync)(dir, { recursive: true });
   const file = (0, import_node_path56.join)(dir, `${sessionId}-v${version}.md`);
-  (0, import_node_fs38.writeFileSync)(file, markdown.endsWith("\n") ? markdown : `${markdown}
+  (0, import_node_fs39.writeFileSync)(file, markdown.endsWith("\n") ? markdown : `${markdown}
 `, "utf8");
   return file;
 }
-var import_node_fs38, import_node_path56, PLAN_CUSTOM_TYPE2, PLAN_STATE_CUSTOM_TYPE;
+var import_node_fs39, import_node_path56, PLAN_CUSTOM_TYPE2, PLAN_STATE_CUSTOM_TYPE;
 var init_store3 = __esm({
   "src/plan/store.ts"() {
     "use strict";
-    import_node_fs38 = require("node:fs");
+    import_node_fs39 = require("node:fs");
     import_node_path56 = require("node:path");
     init_todo();
     init_i18n();
@@ -33030,7 +34191,7 @@ function permissionModeOf(value) {
 }
 function parseAgentDefinition(text, filePath, source) {
   const warnings = [];
-  const fail6 = (message) => {
+  const fail7 = (message) => {
     warnings.push(`${filePath}: ${message}`);
     return { warnings };
   };
@@ -33040,42 +34201,42 @@ function parseAgentDefinition(text, filePath, source) {
   const rawName = data2["name"];
   const name = typeof rawName === "string" && rawName !== "" ? rawName : (0, import_node_path57.basename)(filePath, ".md");
   if (!AGENT_NAME_RE.test(name))
-    return fail6(`invalid agent name "${name}" (lowercase letters, digits, -; at most 64)`);
+    return fail7(`invalid agent name "${name}" (lowercase letters, digits, -; at most 64)`);
   const description = data2["description"];
   if (typeof description !== "string" || description.trim() === "")
-    return fail6(`missing description; agent "${name}" not loaded`);
+    return fail7(`missing description; agent "${name}" not loaded`);
   if (description.length > MAX_AGENT_DESCRIPTION)
-    return fail6(`description longer than ${MAX_AGENT_DESCRIPTION} characters`);
+    return fail7(`description longer than ${MAX_AGENT_DESCRIPTION} characters`);
   const runnerRaw = data2["runner"] ?? "ama";
   const runner = String(runnerRaw).trim();
   if (!isRunner(runner))
-    return fail6(`unknown runner "${runner}" (ama | claude | codex | acp:<program>)`);
+    return fail7(`unknown runner "${runner}" (ama | claude | codex | acp:<program>)`);
   const tools = nameList(data2["tools"]);
   const disallowedTools = nameList(data2["disallowed-tools"]);
   if (tools !== void 0 && disallowedTools !== void 0)
-    return fail6("tools and disallowed-tools are mutually exclusive");
+    return fail7("tools and disallowed-tools are mutually exclusive");
   const permissionMode = permissionModeOf(data2["permission-mode"]);
   if (permissionMode === void 0)
-    return fail6(
+    return fail7(
       `permission-mode must be plan or inherit (got "${String(data2["permission-mode"])}")`
     );
   const model = data2["model"] === void 0 || data2["model"] === null ? "inherit" : data2["model"];
-  if (typeof model !== "string" || model.trim() === "") return fail6("model must be a string");
+  if (typeof model !== "string" || model.trim() === "") return fail7("model must be a string");
   const thinking = data2["thinking"];
   if (thinking !== void 0 && thinking !== null && !THINKING2.includes(thinking))
-    return fail6(`thinking must be one of ${THINKING2.join(", ")}`);
+    return fail7(`thinking must be one of ${THINKING2.join(", ")}`);
   const maxTurns = data2["max-turns"] ?? DEFAULT_AGENT_MAX_TURNS;
   if (typeof maxTurns !== "number" || !Number.isInteger(maxTurns) || maxTurns < 1)
-    return fail6("max-turns must be an integer ≥ 1");
+    return fail7("max-turns must be an integer ≥ 1");
   const isolation = data2["isolation"] ?? "none";
   if (isolation !== "none" && isolation !== "worktree")
-    return fail6("isolation must be none or worktree");
+    return fail7("isolation must be none or worktree");
   const background = data2["background"];
   if (background !== void 0 && typeof background !== "boolean")
-    return fail6("background must be true or false");
+    return fail7("background must be true or false");
   const context = data2["context"];
   if (context !== void 0 && context !== null && context !== "fork" && context !== "fresh")
-    return fail6("context must be fork or fresh");
+    return fail7("context must be fork or fresh");
   if (runner !== "ama") {
     const ignored = ["tools", "disallowed-tools", "permission-mode", "context"].filter(
       (key) => data2[key] !== void 0
@@ -33136,14 +34297,14 @@ function agentSources(options) {
 }
 function isDir2(path) {
   try {
-    return (0, import_node_fs39.statSync)(path).isDirectory();
+    return (0, import_node_fs40.statSync)(path).isDirectory();
   } catch {
     return false;
   }
 }
 function markdownFiles(dir) {
   try {
-    return (0, import_node_fs39.readdirSync)(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => entry.name).sort().map((name) => (0, import_node_path58.join)(dir, name));
+    return (0, import_node_fs40.readdirSync)(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".md")).map((entry) => entry.name).sort().map((name) => (0, import_node_path58.join)(dir, name));
   } catch {
     return [];
   }
@@ -33163,7 +34324,7 @@ function discoverAgents(sources, options) {
     for (const file of markdownFiles(source.dir)) {
       let text;
       try {
-        text = (0, import_node_fs39.readFileSync)(file, "utf8");
+        text = (0, import_node_fs40.readFileSync)(file, "utf8");
       } catch (error2) {
         result.warnings.push(`${file}: ${error2.message}`);
         continue;
@@ -33185,11 +34346,11 @@ function discoverAgents(sources, options) {
   }
   return result;
 }
-var import_node_fs39, import_node_path58;
+var import_node_fs40, import_node_path58;
 var init_discover = __esm({
   "src/agents/discover.ts"() {
     "use strict";
-    import_node_fs39 = require("node:fs");
+    import_node_fs40 = require("node:fs");
     import_node_path58 = require("node:path");
     init_parse();
   }
@@ -33527,7 +34688,7 @@ var init_process = __esm({
 // src/drivers/probe.ts
 function defaultIsFile(path) {
   try {
-    return (0, import_node_fs40.statSync)(path).isFile();
+    return (0, import_node_fs41.statSync)(path).isFile();
   } catch {
     return false;
   }
@@ -33589,12 +34750,12 @@ function defaultRunVersion(env, platform) {
     );
   });
 }
-var import_node_child_process10, import_node_fs40, import_node_path59, VERSION_TIMEOUT_MS, ProgramProbe;
+var import_node_child_process10, import_node_fs41, import_node_path59, VERSION_TIMEOUT_MS, ProgramProbe;
 var init_probe = __esm({
   "src/drivers/probe.ts"() {
     "use strict";
     import_node_child_process10 = require("node:child_process");
-    import_node_fs40 = require("node:fs");
+    import_node_fs41 = require("node:fs");
     import_node_path59 = require("node:path");
     init_process();
     VERSION_TIMEOUT_MS = 5e3;
@@ -33647,16 +34808,16 @@ var init_probe = __esm({
       }
       mtime(path) {
         try {
-          return (0, import_node_fs40.statSync)(path).mtimeMs;
+          return (0, import_node_fs41.statSync)(path).mtimeMs;
         } catch {
           return 0;
         }
       }
       readCache() {
         const file = this.deps.cacheFile;
-        if (file === void 0 || !(0, import_node_fs40.existsSync)(file)) return {};
+        if (file === void 0 || !(0, import_node_fs41.existsSync)(file)) return {};
         try {
-          const parsed = JSON.parse((0, import_node_fs40.readFileSync)(file, "utf8"));
+          const parsed = JSON.parse((0, import_node_fs41.readFileSync)(file, "utf8"));
           return parsed.programs ?? {};
         } catch {
           return {};
@@ -33667,8 +34828,8 @@ var init_probe = __esm({
         if (file === void 0) return;
         try {
           const programs = { ...this.readCache(), [path]: entry };
-          (0, import_node_fs40.mkdirSync)((0, import_node_path59.dirname)(file), { recursive: true });
-          (0, import_node_fs40.writeFileSync)(file, `${JSON.stringify({ version: 1, programs }, null, 2)}
+          (0, import_node_fs41.mkdirSync)((0, import_node_path59.dirname)(file), { recursive: true });
+          (0, import_node_fs41.writeFileSync)(file, `${JSON.stringify({ version: 1, programs }, null, 2)}
 `);
         } catch {
         }
@@ -33876,6 +35037,7 @@ var init_client = __esm({
           onNotification: (method, params) => {
             if (method === ACP_METHODS.sessionUpdate)
               options.onUpdate?.(params);
+            else if (method === ACP_METHODS.elicitationComplete) this.onElicitationComplete(params);
           },
           onClose: () => {
             for (const set of this.pendingPermissions.values()) for (const c of set) c.abort();
@@ -33891,14 +35053,25 @@ var init_client = __esm({
        * - `mcpServers`：开会话时可经 {@link AcpSessionOptions} 传 MCP 服务器；
        * - `elicitation`：构造参数 `onElicitation` 接 `elicitation/create`；
        * - `configOptions`：`setConfigOption` 与开会话答的 `configOptions`；
-       * - `terminal`：构造参数 `onTerminal` 接 `terminal/*`。
+       * - `terminal`：构造参数 `onTerminal` 接 `terminal/*`；
+       * - `auth`：`authenticate` / `logout`、构造参数 `authTerminal`、`isAuthRequiredError`；
+       * - `elicitationComplete`：构造参数 `onElicitationComplete` 接 `elicitation/complete`，表单字段含多选与 `oneOf`。
        */
-      static features = { mcpServers: true, elicitation: true, configOptions: true, terminal: true };
+      static features = {
+        mcpServers: true,
+        elicitation: true,
+        configOptions: true,
+        terminal: true,
+        auth: true,
+        elicitationComplete: true
+      };
       peer;
       /** sessionId → 挂起权限请求的取消器。 */
       pendingPermissions = /* @__PURE__ */ new Map();
       /** sessionId（没给就是空串）→ 挂起 elicitation 的取消器。 */
       pendingElicitations = /* @__PURE__ */ new Map();
+      /** elicitationId → 挂起 elicitation 的取消器（`elicitation/complete` 用）。 */
+      elicitationsById = /* @__PURE__ */ new Map();
       initResult;
       get closed() {
         return this.peer.closed;
@@ -33925,7 +35098,10 @@ var init_client = __esm({
               fs: { readTextFile: false, writeTextFile: false },
               terminal: this.options.onTerminal !== void 0,
               session: { configOptions: {} },
-              ...this.options.onElicitation !== void 0 ? { elicitation: {} } : {}
+              ...this.options.authTerminal === true ? { auth: { terminal: true } } : {},
+              ...this.options.onElicitation !== void 0 || this.options.onElicitationComplete ? {
+                elicitation: this.options.onElicitationComplete !== void 0 ? { form: {}, url: {} } : {}
+              } : {}
             },
             ...this.options.clientInfo !== void 0 ? { clientInfo: this.options.clientInfo } : {}
           },
@@ -33951,9 +35127,30 @@ var init_client = __esm({
       supportsClose() {
         return this.agentCapabilities.sessionCapabilities?.close != null;
       }
+      /** Agent 声明了 `auth.logout`（存在即支持）。 */
+      supportsLogout() {
+        return this.agentCapabilities.auth?.logout != null;
+      }
       supportsImages() {
         return this.agentCapabilities.promptCapabilities?.image === true;
       }
+      /**
+       * 用 agent 型认证方法登录（`methodId` 取自 `authMethods`）。terminal 型方法不经 `authenticate`：已知是
+       * terminal 型时抛 -32602，由宿主在终端里跑该方法的 `args` / `env`。失败的错误码原样抛出。
+       */
+      async authenticate(methodId, signal) {
+        const known = this.authMethods.find((method) => method.id === methodId);
+        if (known !== void 0 && isTerminalAuthMethod(known))
+          throw new RpcError(
+            RPC_ERRORS.invalidParams,
+            `auth method ${methodId} is a terminal method: run it in a terminal, not through authenticate`
+          );
+        return this.peer.request(ACP_METHODS.authenticate, { methodId }, signal);
+      }
+      /** 登出当前账号；Agent 没声明 `auth.logout`（见 `supportsLogout`）时会答 method not found。 */
+      logout(signal) {
+        return this.peer.request(ACP_METHODS.logout, {}, signal);
+      }
       newSession(cwd, signal, options) {
         return this.peer.request(
           ACP_METHODS.sessionNew,
@@ -33977,14 +35174,34 @@ var init_client = __esm({
           signal
         );
       }
-      listSessions(cwd, cursor) {
-        return this.peer.request(ACP_METHODS.sessionList, {
-          ...cwd !== void 0 ? { cwd } : {},
-          ...cursor !== void 0 ? { cursor } : {}
-        });
+      /** 一页会话；`cwd` 过滤（绝对路径），`cursor` 取自上一页的 `nextCursor`。 */
+      listSessions(cwd, cursor, signal) {
+        return this.peer.request(
+          ACP_METHODS.sessionList,
+          {
+            ...cwd !== void 0 ? { cwd } : {},
+            ...cursor !== void 0 ? { cursor } : {}
+          },
+          signal
+        );
+      }
+      /** 跟 `nextCursor` 翻页取全（`maxPages` 防对端游标不终止，缺省 100 页）。 */
+      async listAllSessions(cwd, signal, maxPages = 100) {
+        const sessions = [];
+        let cursor;
+        for (let page2 = 0; page2 < maxPages; page2++) {
+          const result = await this.listSessions(cwd, cursor, signal);
+          sessions.push(...result.sessions ?? []);
+          if (typeof result.nextCursor !== "string" || result.nextCursor === "") break;
+          cursor = result.nextCursor;
+        }
+        return sessions;
       }
-      closeSession(sessionId) {
-        return this.peer.request(ACP_METHODS.sessionClose, { sessionId });
+      /** 关闭会话：规范要求 Agent 先取消进行中的工作，所以本端先把该会话挂起的请求收掉。 */
+      closeSession(sessionId, signal) {
+        for (const controller of this.pendingPermissions.get(sessionId) ?? []) controller.abort();
+        for (const controller of this.pendingElicitations.get(sessionId) ?? []) controller.abort();
+        return this.peer.request(ACP_METHODS.sessionClose, { sessionId }, signal);
       }
       prompt(sessionId, prompt, signal) {
         return this.peer.request(ACP_METHODS.sessionPrompt, { sessionId, prompt }, signal);
@@ -34051,6 +35268,8 @@ var init_client = __esm({
         const set = this.pendingElicitations.get(key) ?? /* @__PURE__ */ new Set();
         set.add(controller);
         this.pendingElicitations.set(key, set);
+        const id = typeof request.elicitationId === "string" ? request.elicitationId : void 0;
+        if (id !== void 0) this.elicitationsById.set(id, controller);
         const signal = AbortSignal.any([controller.signal, connection]);
         try {
           const answer = await Promise.race([
@@ -34065,16 +35284,25 @@ var init_client = __esm({
           return elicitationAnswer(answer);
         } finally {
           set.delete(controller);
+          if (id !== void 0 && this.elicitationsById.get(id) === controller)
+            this.elicitationsById.delete(id);
         }
       }
+      /** 通知没有答复：参数不对就忽略；还挂着的同 id elicitation 先收掉，再交给宿主。 */
+      onElicitationComplete(params) {
+        const id = params?.elicitationId;
+        if (typeof id !== "string") return;
+        this.elicitationsById.get(id)?.abort();
+        this.options.onElicitationComplete?.(params);
+      }
     };
   }
 });
 
 // src/drivers/acp/driver.ts
-function toAcpContent(blocks, images) {
+function toAcpContent(blocks2, images) {
   const out = [];
-  for (const block of blocks) {
+  for (const block of blocks2) {
     if (block.type === "text") out.push({ type: "text", text: block.text });
     else if (images) out.push({ type: "image", data: block.data, mimeType: block.mimeType });
   }
@@ -34578,12 +35806,12 @@ function claudeArgs(options, sessionId, manualName = "manual") {
   return args;
 }
 function userLine(content) {
-  const blocks = content.map(
+  const blocks2 = content.map(
     (b) => b.type === "text" ? { type: "text", text: b.text } : { type: "image", source: { type: "base64", media_type: b.mimeType, data: b.data } }
   );
   return `${JSON.stringify({
     type: "user",
-    message: { role: "user", content: blocks },
+    message: { role: "user", content: blocks2 },
     parent_tool_use_id: null
   })}
 `;
@@ -35839,19 +37067,19 @@ ${item["text"]}`
 
 // src/drivers/native/pi-gate.ts
 function writePiGate() {
-  const dir = (0, import_node_fs41.mkdtempSync)((0, import_node_path60.join)((0, import_node_os11.tmpdir)(), "ama-pi-"));
+  const dir = (0, import_node_fs42.mkdtempSync)((0, import_node_path60.join)((0, import_node_os11.tmpdir)(), "ama-pi-"));
   const path = (0, import_node_path60.join)(dir, "ama-approval-gate.ts");
-  (0, import_node_fs41.writeFileSync)(path, PI_GATE_SOURCE, { mode: 384 });
+  (0, import_node_fs42.writeFileSync)(path, PI_GATE_SOURCE, { mode: 384 });
   return {
     path,
-    dispose: () => (0, import_node_fs41.rmSync)(dir, { recursive: true, force: true })
+    dispose: () => (0, import_node_fs42.rmSync)(dir, { recursive: true, force: true })
   };
 }
-var import_node_fs41, import_node_os11, import_node_path60, PI_GATE_TITLE, PI_READ_ONLY_TOOLS, PI_GATE_SOURCE;
+var import_node_fs42, import_node_os11, import_node_path60, PI_GATE_TITLE, PI_READ_ONLY_TOOLS, PI_GATE_SOURCE;
 var init_pi_gate = __esm({
   "src/drivers/native/pi-gate.ts"() {
     "use strict";
-    import_node_fs41 = require("node:fs");
+    import_node_fs42 = require("node:fs");
     import_node_os11 = require("node:os");
     import_node_path60 = require("node:path");
     PI_GATE_TITLE = "ama-approval";
@@ -36346,7 +37574,7 @@ function pidsFile(dataDir) {
 }
 function read(file) {
   try {
-    const parsed = JSON.parse((0, import_node_fs42.readFileSync)(file, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs43.readFileSync)(file, "utf8"));
     return Array.isArray(parsed.entries) ? parsed.entries : [];
   } catch {
     return [];
@@ -36354,11 +37582,11 @@ function read(file) {
 }
 function write(file, entries) {
   try {
-    (0, import_node_fs42.mkdirSync)((0, import_node_path62.dirname)(file), { recursive: true });
+    (0, import_node_fs43.mkdirSync)((0, import_node_path62.dirname)(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    (0, import_node_fs42.writeFileSync)(tmp, `${JSON.stringify({ version: 1, entries }, null, 2)}
+    (0, import_node_fs43.writeFileSync)(tmp, `${JSON.stringify({ version: 1, entries }, null, 2)}
 `);
-    (0, import_node_fs42.renameSync)(tmp, file);
+    (0, import_node_fs43.renameSync)(tmp, file);
   } catch {
   }
 }
@@ -36374,12 +37602,12 @@ function psCommand(pid) {
   const out = (0, import_node_child_process11.spawnSync)("ps", ["-o", "command=", "-p", String(pid)], { encoding: "utf8" });
   return out.status === 0 ? out.stdout.trim() : void 0;
 }
-var import_node_child_process11, import_node_fs42, import_node_path62, PidRegistry;
+var import_node_child_process11, import_node_fs43, import_node_path62, PidRegistry;
 var init_pids = __esm({
   "src/drivers/pids.ts"() {
     "use strict";
     import_node_child_process11 = require("node:child_process");
-    import_node_fs42 = require("node:fs");
+    import_node_fs43 = require("node:fs");
     import_node_path62 = require("node:path");
     init_process_tree();
     PidRegistry = class {
@@ -36644,7 +37872,7 @@ function toUsage(turn) {
     usage.cost = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: u.costUsd };
   return usage;
 }
-function statusOf(turn, timedOut, stopped) {
+function statusOf2(turn, timedOut, stopped) {
   if (timedOut) return "failed";
   switch (turn.stopReason) {
     case "end_turn":
@@ -37037,7 +38265,7 @@ var init_runner2 = __esm({
             });
             this.emit({ type: "usage", usage, unit, amount });
           }
-          const status = statusOf(turn, timedOut, this.stopped);
+          const status = statusOf2(turn, timedOut, this.stopped);
           this.emitTurnTrace(
             turnStartedAt,
             timedOut ? "timeout" : turn.stopReason,
@@ -37157,7 +38385,7 @@ var init_agents2 = __esm({
       driverDeps;
       /** `task(agent=<spec>)` 的 runner；不可用时抛 AmaError（`agent_host_only` / `agent_unknown`）。 */
       resolve(spec2) {
-        const hosted = this.hostRunners.get(spec2);
+        const hosted = this.hostRunners.resolve(spec2);
         if (hosted !== void 0) return hosted;
         if (this.options.hosted)
           throw new AmaError(
@@ -37644,6 +38872,7 @@ function subagentEnvironment(deps, catalog) {
   if (retain !== void 0) env.retain = retain;
   const sub = config.subagents;
   env.background = resolveTaskBackground(sub?.background, deps.assembly.unattended === true);
+  if (isCoordinatorPreset(config)) env.background = true;
   const after = sub?.autoBackgroundAfterMs;
   if (typeof after === "number" && after > 0) env.autoBackgroundAfterMs = after;
   return env;
@@ -37696,6 +38925,8 @@ function createSubagentsFactory(deps) {
   bindTaskAgents(task, catalog);
   const env = subagentEnvironment(deps, catalog);
   bindTaskBackground(task, env.background === true);
+  if (isCoordinatorPreset(deps.assembly.config))
+    bindTaskCtlWaitCap(deps.assembly.tools.get("task_ctl"), COORDINATOR_WAIT_MAX_MS);
   return ({ core }) => core.depth > 0 ? void 0 : createSubagentExtension(core, env, wiring);
 }
 var warned;
@@ -37707,6 +38938,8 @@ var init_compose_agents = __esm({
     init_discover();
     init_external();
     init_api_impl();
+    init_presets2();
+    init_task_ctl();
     init_task();
     init_subagent_background();
     init_i18n();
@@ -37812,7 +39045,7 @@ function sourceText2(source, cache3, log) {
   if (cached !== void 0) return cached;
   let text = "";
   try {
-    text = (0, import_node_fs43.readFileSync)(source.path, "utf8");
+    text = (0, import_node_fs44.readFileSync)(source.path, "utf8");
   } catch (error2) {
     log(
       "warn",
@@ -38166,11 +39399,11 @@ async function disposeSessionAlongside(target, session, fallback) {
   await session.dispose();
   record3.live.delete(session);
 }
-var import_node_fs43, records, LOG_LEVELS;
+var import_node_fs44, records, LOG_LEVELS;
 var init_compose_session = __esm({
   "src/cli/compose-session.ts"() {
     "use strict";
-    import_node_fs43 = require("node:fs");
+    import_node_fs44 = require("node:fs");
     init_limits();
     init_session2();
     init_session_subagent();
@@ -39026,7 +40259,7 @@ var init_acp_sessions = __esm({
 // src/modes/acp/acp-server.ts
 function canonical(path) {
   try {
-    return import_node_fs44.realpathSync.native((0, import_node_path65.resolve)(path));
+    return import_node_fs45.realpathSync.native((0, import_node_path65.resolve)(path));
   } catch {
     return (0, import_node_path65.resolve)(path);
   }
@@ -39037,12 +40270,12 @@ function str(params, key) {
     throw new RpcError(RPC_ERRORS.invalidParams, msg().acp.core.missingParam(key));
   return value;
 }
-function promptOf(blocks) {
-  if (!Array.isArray(blocks))
+function promptOf(blocks2) {
+  if (!Array.isArray(blocks2))
     throw new RpcError(RPC_ERRORS.invalidParams, msg().acp.core.promptNotArray);
   const parts = [];
   const images = [];
-  for (const block of blocks) {
+  for (const block of blocks2) {
     if (block.type === "text") parts.push(block.text);
     else if (block.type === "image")
       images.push({ type: "image", data: block.data, mimeType: block.mimeType });
@@ -39057,11 +40290,11 @@ ${block.resource.text}
 function countOf(value) {
   return Array.isArray(value) ? value.length : 0;
 }
-var import_node_fs44, import_node_path65, ACP_AGENT_CAPABILITIES, SESSION_ID_SHAPE, AcpServer;
+var import_node_fs45, import_node_path65, ACP_AGENT_CAPABILITIES, SESSION_ID_SHAPE, AcpServer;
 var init_acp_server = __esm({
   "src/modes/acp/acp-server.ts"() {
     "use strict";
-    import_node_fs44 = require("node:fs");
+    import_node_fs45 = require("node:fs");
     import_node_path65 = require("node:path");
     init_shared();
     init_compose_session();
@@ -39785,7 +41018,7 @@ async function bootstrap(argsIn, deps, io) {
     () => deps.sessions.open(sessionRequest, { sessionDir: paths.sessionDir, cwd: paths.cwd })
   );
   let sessionCwd = sessionManager.cwd;
-  if (!(0, import_node_fs45.existsSync)(sessionCwd)) {
+  if (!(0, import_node_fs46.existsSync)(sessionCwd)) {
     const replacement = interactive ? await deps.ui?.askCwd?.(sessionCwd) : void 0;
     if (replacement === void 0) {
       throw new StartupError(
@@ -40179,11 +41412,11 @@ function reportError(error2, io, fallback = ExitCode.RuntimeError) {
   if (isAmaError(error2) && error2.exitCode !== void 0) return error2.exitCode;
   return fallback;
 }
-var import_node_fs45, import_node_path67;
+var import_node_fs46, import_node_path67;
 var init_bootstrap = __esm({
   "src/cli/bootstrap.ts"() {
     "use strict";
-    import_node_fs45 = require("node:fs");
+    import_node_fs46 = require("node:fs");
     import_node_path67 = require("node:path");
     init_auth_file();
     init_context_files();
@@ -40210,7 +41443,7 @@ var init_bootstrap = __esm({
 // src/auth/oauth/token-store.ts
 function readRaw(path) {
   try {
-    const value = JSON.parse(retryTransientFs(() => (0, import_node_fs46.readFileSync)(path, "utf8")));
+    const value = JSON.parse(retryTransientFs(() => (0, import_node_fs47.readFileSync)(path, "utf8")));
     return typeof value === "object" && value !== null && typeof value.providers === "object" ? value : void 0;
   } catch {
     return void 0;
@@ -40242,12 +41475,12 @@ function isStaleLock(path, now = Date.now()) {
   let age;
   let pid;
   try {
-    age = now - (0, import_node_fs46.statSync)(path).mtimeMs;
-    const value = JSON.parse((0, import_node_fs46.readFileSync)(path, "utf8"));
+    age = now - (0, import_node_fs47.statSync)(path).mtimeMs;
+    const value = JSON.parse((0, import_node_fs47.readFileSync)(path, "utf8"));
     pid = typeof value.pid === "number" ? value.pid : void 0;
   } catch {
     try {
-      age = now - (0, import_node_fs46.statSync)(path).mtimeMs;
+      age = now - (0, import_node_fs47.statSync)(path).mtimeMs;
     } catch {
       return false;
     }
@@ -40256,11 +41489,11 @@ function isStaleLock(path, now = Date.now()) {
 }
 function tryAcquire(path) {
   try {
-    const fd = (0, import_node_fs46.openSync)(path, "wx", 384);
+    const fd = (0, import_node_fs47.openSync)(path, "wx", 384);
     try {
-      (0, import_node_fs46.writeSync)(fd, JSON.stringify({ pid: process.pid, at: (/* @__PURE__ */ new Date()).toISOString() }));
+      (0, import_node_fs47.writeSync)(fd, JSON.stringify({ pid: process.pid, at: (/* @__PURE__ */ new Date()).toISOString() }));
     } finally {
-      (0, import_node_fs46.closeSync)(fd);
+      (0, import_node_fs47.closeSync)(fd);
     }
     return true;
   } catch (error2) {
@@ -40271,13 +41504,13 @@ function tryAcquire(path) {
 }
 async function withRefreshLock(authFile, fn, options = {}) {
   const path = lockPath(authFile);
-  (0, import_node_fs46.mkdirSync)((0, import_node_path68.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs47.mkdirSync)((0, import_node_path68.dirname)(path), { recursive: true, mode: 448 });
   const deadline = Date.now() + (options.waitMs ?? LOCK_WAIT_MS);
   for (; ; ) {
     if (tryAcquire(path)) break;
     if (isStaleLock(path)) {
       try {
-        (0, import_node_fs46.unlinkSync)(path);
+        (0, import_node_fs47.unlinkSync)(path);
       } catch {
       }
       continue;
@@ -40292,16 +41525,16 @@ async function withRefreshLock(authFile, fn, options = {}) {
     return await fn();
   } finally {
     try {
-      (0, import_node_fs46.unlinkSync)(path);
+      (0, import_node_fs47.unlinkSync)(path);
     } catch {
     }
   }
 }
-var import_node_fs46, import_node_path68, LOCK_WAIT_MS, LOCK_STALE_MS, LOCK_POLL_MS;
+var import_node_fs47, import_node_path68, LOCK_WAIT_MS, LOCK_STALE_MS, LOCK_POLL_MS;
 var init_token_store = __esm({
   "src/auth/oauth/token-store.ts"() {
     "use strict";
-    import_node_fs46 = require("node:fs");
+    import_node_fs47 = require("node:fs");
     import_node_path68 = require("node:path");
     init_auth_file();
     init_fs_retry();
@@ -40336,7 +41569,7 @@ function toEntry(value) {
 function readDiscoveredCache(dataDir, provider) {
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs47.readFileSync)(discoveredCachePath(dataDir, provider), "utf8"));
+    parsed = JSON.parse((0, import_node_fs48.readFileSync)(discoveredCachePath(dataDir, provider), "utf8"));
   } catch {
     return void 0;
   }
@@ -40360,17 +41593,17 @@ function writeDiscoveredCache(dataDir, provider, input2, now = Date.now()) {
     ...input2.flavor !== void 0 ? { flavor: input2.flavor } : {},
     models: input2.models.map(toEntry).filter((m) => m !== void 0)
   };
-  (0, import_node_fs47.mkdirSync)((0, import_node_path69.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs48.mkdirSync)((0, import_node_path69.dirname)(path), { recursive: true, mode: 448 });
   const tmp = `${path}.${process.pid}.tmp`;
-  (0, import_node_fs47.writeFileSync)(tmp, `${JSON.stringify(file, null, 2)}
+  (0, import_node_fs48.writeFileSync)(tmp, `${JSON.stringify(file, null, 2)}
 `);
-  (0, import_node_fs47.renameSync)(tmp, path);
+  (0, import_node_fs48.renameSync)(tmp, path);
   return path;
 }
 function clearDiscoveredCache(dataDir, provider) {
   const path = discoveredCachePath(dataDir, provider);
-  if (!(0, import_node_fs47.existsSync)(path)) return false;
-  (0, import_node_fs47.rmSync)(path, { force: true });
+  if (!(0, import_node_fs48.existsSync)(path)) return false;
+  (0, import_node_fs48.rmSync)(path, { force: true });
   return true;
 }
 function thinkingMapOf(levels) {
@@ -40424,11 +41657,11 @@ function mergeDiscoveredModels(registry3, dataDir, modelsDev, loginFlavor = () =
   }
   return merged;
 }
-var import_node_fs47, import_node_path69, DISCOVERED_CACHE_VERSION, EFFORT_LEVELS, SUBSCRIPTION_FALLBACK_CONTEXT_WINDOW, SUBSCRIPTION_PROVIDERS;
+var import_node_fs48, import_node_path69, DISCOVERED_CACHE_VERSION, EFFORT_LEVELS, SUBSCRIPTION_FALLBACK_CONTEXT_WINDOW, SUBSCRIPTION_PROVIDERS;
 var init_discovered_cache = __esm({
   "src/ai/providers/discovered-cache.ts"() {
     "use strict";
-    import_node_fs47 = require("node:fs");
+    import_node_fs48 = require("node:fs");
     import_node_path69 = require("node:path");
     init_catalog2();
     init_enrich();
@@ -42316,7 +43549,7 @@ function parseKeybindings(value) {
 function loadKeybindingsFile(path) {
   let text;
   try {
-    text = (0, import_node_fs49.readFileSync)(path, "utf8");
+    text = (0, import_node_fs50.readFileSync)(path, "utf8");
   } catch (error2) {
     if (error2.code === "ENOENT") return { overrides: {}, warnings: [] };
     return {
@@ -42333,12 +43566,12 @@ function loadKeybindingsFile(path) {
     };
   }
 }
-var import_node_fs49, DEFAULT_KEYBINDINGS, Keybindings, defaultKeybindings;
+var import_node_fs50, DEFAULT_KEYBINDINGS, Keybindings, defaultKeybindings;
 var init_keybindings = __esm({
   "src/tui/keybindings.ts"() {
     "use strict";
     init_i18n();
-    import_node_fs49 = require("node:fs");
+    import_node_fs50 = require("node:fs");
     init_keys();
     DEFAULT_KEYBINDINGS = {
       "tui.editor.submit": ["enter"],
@@ -42486,7 +43719,7 @@ function isBlockStart(line2) {
 function splitLines2(source) {
   return source.replace(/\r\n?/g, "\n").split("\n");
 }
-function parseLines(lines2, from, blocks, spans) {
+function parseLines(lines2, from, blocks2, spans) {
   let i = from;
   while (i < lines2.length) {
     const line2 = lines2[i];
@@ -42495,13 +43728,13 @@ function parseLines(lines2, from, blocks, spans) {
       continue;
     }
     const start = i;
-    const before2 = blocks.length;
-    i = parseBlock(lines2, i, blocks);
-    for (let k = before2; k < blocks.length; k++) spans.push({ start, end: i });
+    const before2 = blocks2.length;
+    i = parseBlock(lines2, i, blocks2);
+    for (let k = before2; k < blocks2.length; k++) spans.push({ start, end: i });
   }
-  return blocks;
+  return blocks2;
 }
-function parseBlock(lines2, i, blocks) {
+function parseBlock(lines2, i, blocks2) {
   const line2 = lines2[i];
   const start = i;
   const fence2 = FENCE_RE.exec(line2);
@@ -42512,12 +43745,12 @@ function parseBlock(lines2, i, blocks) {
     while (i < lines2.length && !lines2[i].trimStart().startsWith(marker)) body2.push(lines2[i++]);
     if (i < lines2.length) i++;
     const src = lines2.slice(start, i).join("\n");
-    blocks.push({ kind: "code", lang: fence2[2] ?? "", lines: body2, source: src });
+    blocks2.push({ kind: "code", lang: fence2[2] ?? "", lines: body2, source: src });
     return i;
   }
   const heading = HEADING_RE.exec(line2);
   if (heading) {
-    blocks.push({
+    blocks2.push({
       kind: "heading",
       level: heading[1].length,
       text: heading[2] ?? "",
@@ -42527,7 +43760,7 @@ function parseBlock(lines2, i, blocks) {
     return i;
   }
   if (HR_RE.test(line2)) {
-    blocks.push({ kind: "hr", source: line2 });
+    blocks2.push({ kind: "hr", source: line2 });
     i++;
     return i;
   }
@@ -42538,13 +43771,13 @@ function parseBlock(lines2, i, blocks) {
       if (TABLE_SEP_RE.test(row3)) continue;
       rows.push(splitTableRow(row3));
     }
-    blocks.push({ kind: "table", rows, source: lines2.slice(start, i).join("\n") });
+    blocks2.push({ kind: "table", rows, source: lines2.slice(start, i).join("\n") });
     return i;
   }
   if (QUOTE_RE.test(line2)) {
     const body2 = [];
     while (i < lines2.length && QUOTE_RE.test(lines2[i])) body2.push(QUOTE_RE.exec(lines2[i++])[1]);
-    blocks.push({
+    blocks2.push({
       kind: "quote",
       text: body2.join("\n"),
       source: lines2.slice(start, i).join("\n")
@@ -42552,17 +43785,17 @@ function parseBlock(lines2, i, blocks) {
     return i;
   }
   if (LIST_RE.test(line2)) {
-    return parseList(lines2, i, blocks);
+    return parseList(lines2, i, blocks2);
   }
   const body = [line2];
   i++;
   while (i < lines2.length && lines2[i].trim() !== "" && !isBlockStart(lines2[i])) {
     body.push(lines2[i++]);
   }
-  blocks.push({ kind: "paragraph", text: joinSoftBreaks(body), source: body.join("\n") });
+  blocks2.push({ kind: "paragraph", text: joinSoftBreaks(body), source: body.join("\n") });
   return i;
 }
-function parseList(lines2, start, blocks) {
+function parseList(lines2, start, blocks2) {
   const items = [];
   const indents = [];
   let i = start;
@@ -42589,7 +43822,7 @@ function parseList(lines2, start, blocks) {
     }
     break;
   }
-  blocks.push({ kind: "list", items, source: lines2.slice(start, i).join("\n") });
+  blocks2.push({ kind: "list", items, source: lines2.slice(start, i).join("\n") });
   return i;
 }
 function joinSoftBreaks(lines2) {
@@ -42609,7 +43842,7 @@ function splitTableRow(row3) {
   const trimmed = row3.trim().replace(/^\|/, "").replace(/\|$/, "");
   return trimmed.split(/(?<!\\)\|/).map((cell) => cell.trim().replace(/\\\|/g, "|"));
 }
-function renderInline(text, theme) {
+function renderInline2(text, theme) {
   let out = "";
   let i = 0;
   while (i < text.length) {
@@ -42630,7 +43863,7 @@ function renderInline(text, theme) {
     }
     const emphasis = matchDelimited(text, i, ["**", "__", "~~", "*", "_"]);
     if (emphasis) {
-      const inner = renderInline(emphasis.inner, theme);
+      const inner = renderInline2(emphasis.inner, theme);
       if (emphasis.delim === "**" || emphasis.delim === "__") out += theme.bold(inner);
       else if (emphasis.delim === "~~") out += `\x1B[9m${inner}\x1B[29m`;
       else out += theme.italic(inner);
@@ -42640,7 +43873,7 @@ function renderInline(text, theme) {
     if (ch2 === "[") {
       const link = /^\[([^\]]*)\]\(([^)\s]*)(?:\s+"[^"]*")?\)/.exec(text.slice(i));
       if (link) {
-        const label2 = renderInline(link[1], theme);
+        const label2 = renderInline2(link[1], theme);
         const url = link[2];
         out += link[1] === url || url === "" ? theme.fg("link", theme.underline(label2 || url)) : theme.fg("link", theme.underline(label2)) + theme.fg("dim", ` (${url})`);
         i += link[0].length;
@@ -42685,31 +43918,31 @@ function matchDelimited(text, i, delims) {
   }
   return null;
 }
-function renderBlock(block, width2, theme) {
+function renderBlock2(block, width2, theme) {
   switch (block.kind) {
     case "heading": {
-      const text = renderInline(block.text, theme);
+      const text = renderInline2(block.text, theme);
       const styled = block.level <= 2 ? theme.fg("accent", theme.bold(text)) : theme.fg("text", theme.bold(text));
       return wrapTextWithAnsi(styled, width2);
     }
     case "paragraph":
-      return wrapTextWithAnsi(renderInline(block.text, theme), width2);
+      return wrapTextWithAnsi(renderInline2(block.text, theme), width2);
     case "hr":
       return [theme.fg("border", theme.glyphs.rule.repeat(Math.max(1, width2)))];
     case "quote": {
       const bar = theme.fg("border", theme.glyphs.card) + " ";
-      const body = theme.fg("muted", theme.italic(renderInline(block.text, theme)));
+      const body = theme.fg("muted", theme.italic(renderInline2(block.text, theme)));
       return wrapTextWithAnsi(body, Math.max(1, width2 - 2)).map((line2) => bar + line2);
     }
     case "list":
-      return renderList(block.items, width2, theme);
+      return renderList2(block.items, width2, theme);
     case "code":
       return renderCode(block.lang, block.lines, width2, theme);
     case "table":
-      return renderTable(block.rows, width2, theme);
+      return renderTable2(block.rows, width2, theme);
   }
 }
-function renderList(items, width2, theme) {
+function renderList2(items, width2, theme) {
   const lines2 = [];
   const bullets = theme.glyphs.bullets;
   const columns = [];
@@ -42726,7 +43959,7 @@ function renderList(items, width2, theme) {
     unordered.length = depth;
     columns.push(headWidth);
     unordered.push(level);
-    const body = wrapTextWithAnsi(renderInline(item.text, theme), Math.max(1, width2 - headWidth));
+    const body = wrapTextWithAnsi(renderInline2(item.text, theme), Math.max(1, width2 - headWidth));
     body.forEach((line2, index2) => {
       lines2.push((index2 === 0 ? head : " ".repeat(headWidth)) + line2);
     });
@@ -42770,10 +44003,10 @@ function wrapCode(line2, width2) {
   out.push(current3);
   return out;
 }
-function renderTable(rows, width2, theme) {
+function renderTable2(rows, width2, theme) {
   const cols = Math.max(0, ...rows.map((r) => r.length));
   const widths = new Array(cols).fill(0);
-  const rendered = rows.map((row3) => row3.map((cell) => renderInline(cell, theme)));
+  const rendered = rows.map((row3) => row3.map((cell) => renderInline2(cell, theme)));
   for (const row3 of rendered) {
     row3.forEach((cell, c) => widths[c] = Math.max(widths[c], visibleWidth(cell)));
   }
@@ -42887,7 +44120,7 @@ var init_markdown = __esm({
           used.add(key);
           let rendered = this.blockCache.get(key);
           if (!rendered) {
-            rendered = renderBlock(block, inner, this.theme).map((line2) => pad3 + line2);
+            rendered = renderBlock2(block, inner, this.theme).map((line2) => pad3 + line2);
             this.blockCache.set(key, rendered);
           }
           if (index2 > 0) lines2.push("");
@@ -43175,7 +44408,7 @@ var init_editor_buffer = __esm({
 function loadHistoryFile(path, limit = 500) {
   let text;
   try {
-    text = (0, import_node_fs50.readFileSync)(path, "utf8");
+    text = (0, import_node_fs51.readFileSync)(path, "utf8");
   } catch {
     return [];
   }
@@ -43192,11 +44425,11 @@ function loadHistoryFile(path, limit = 500) {
 }
 function appendHistoryFile(path, entry, limit) {
   try {
-    (0, import_node_fs50.mkdirSync)((0, import_node_path71.dirname)(path), { recursive: true });
-    (0, import_node_fs50.appendFileSync)(path, JSON.stringify(entry) + "\n", { mode: 384 });
+    (0, import_node_fs51.mkdirSync)((0, import_node_path71.dirname)(path), { recursive: true });
+    (0, import_node_fs51.appendFileSync)(path, JSON.stringify(entry) + "\n", { mode: 384 });
     const all = loadHistoryFile(path, Number.MAX_SAFE_INTEGER);
     if (all.length > limit * 2) {
-      (0, import_node_fs50.writeFileSync)(
+      (0, import_node_fs51.writeFileSync)(
         path,
         all.slice(-limit).map((e) => JSON.stringify(e) + "\n").join("")
       );
@@ -43204,11 +44437,11 @@ function appendHistoryFile(path, entry, limit) {
   } catch {
   }
 }
-var import_node_fs50, import_node_path71;
+var import_node_fs51, import_node_path71;
 var init_editor_history = __esm({
   "src/tui/components/editor-history.ts"() {
     "use strict";
-    import_node_fs50 = require("node:fs");
+    import_node_fs51 = require("node:fs");
     import_node_path71 = require("node:path");
   }
 });
@@ -43347,11 +44580,11 @@ var init_select_list = __esm({
         this.setSelectedIndex(index2);
         return true;
       }
-      moveSelection(delta, wrap2 = true) {
+      moveSelection(delta, wrap3 = true) {
         const n = this.filtered.length;
         if (n === 0) return;
         let next = this.selected + delta;
-        if (wrap2 && Math.abs(delta) === 1) next = (next + n) % n;
+        if (wrap3 && Math.abs(delta) === 1) next = (next + n) % n;
         this.setSelectedIndex(next);
       }
       handleInput(data2) {
@@ -44244,14 +45477,14 @@ var init_key_value = __esm({
         const keyWidth = Math.min(longest, Math.max(share, MIN_KEY_WIDTH));
         const valueWidth = width2 - keyWidth - gap;
         const { theme, keyColor = "dim" } = this.options;
-        const wrap2 = this.options.wrap === true;
+        const wrap3 = this.options.wrap === true;
         const lines2 = this.rows.flatMap(({ key, value }) => {
           if (key === "" && value === "") return [""];
           const shownKey = truncateToWidth(key, Math.max(keyWidth, 1));
           const styledKey = theme ? theme.fg(keyColor, shownKey) : shownKey;
           if (valueWidth < 1) return [truncateToWidth(styledKey, width2)];
           const head = padToWidth(styledKey, keyWidth) + " ".repeat(gap);
-          if (!wrap2) {
+          if (!wrap3) {
             const flat2 = value.replace(/\r?\n/g, " ⏎ ");
             return [head + truncateToWidth(flat2, valueWidth)];
           }
@@ -44648,22 +45881,22 @@ function toolDeclaration(tool, options = {}) {
 }
 function buildDeclarationBlock(tools, inlineBudget = DEFAULT_INLINE_BUDGET) {
   const sorted = [...tools].sort((a, b) => a.tool.name < b.tool.name ? -1 : 1);
-  const inline = [];
+  const inline2 = [];
   const namesOnly = [];
   let used = 0;
   for (const { tool, textResult } of sorted) {
     const decl = toolDeclaration(tool, textResult === false ? { textResult } : {});
     const cost2 = estimateTokens2(decl);
     if (namesOnly.length === 0 && used + cost2 <= inlineBudget) {
-      inline.push(decl);
+      inline2.push(decl);
       used += cost2;
     } else namesOnly.push(tool.name);
   }
   const parts = [];
   if (sorted.some(({ tool }) => tool.name === "bash")) parts.push(BASH_RESULT_DECLARATION);
-  if (inline.length > 0) {
+  if (inline2.length > 0) {
     parts.push(`declare const tools: {
-${indent(inline.join("\n"))}
+${indent(inline2.join("\n"))}
 };`);
   }
   if (namesOnly.length > 0) {
@@ -44671,7 +45904,7 @@ ${indent(inline.join("\n"))}
       `// Also callable (use describeTool(name) for the signature): ${namesOnly.join(", ")}`
     );
   }
-  return { inline, namesOnly, text: parts.join("\n") };
+  return { inline: inline2, namesOnly, text: parts.join("\n") };
 }
 function indent(text) {
   return text.split("\n").map((line2) => line2 === "" ? line2 : `  ${line2}`).join("\n");
@@ -44791,7 +46024,7 @@ function modelsDevUrl(env = process.env) {
 }
 function readModelsDevCache(dataDir) {
   try {
-    const value = JSON.parse((0, import_node_fs51.readFileSync)(modelsDevCachePath(dataDir), "utf8"));
+    const value = JSON.parse((0, import_node_fs52.readFileSync)(modelsDevCachePath(dataDir), "utf8"));
     if (typeof value !== "object" || value === null) return void 0;
     const file = value;
     if (file.version !== 2 || typeof file.fetchedAt !== "string") return void 0;
@@ -44804,10 +46037,10 @@ function readModelsDevCache(dataDir) {
 }
 function writeModelsDevCache(dataDir, file) {
   const path = modelsDevCachePath(dataDir);
-  (0, import_node_fs51.mkdirSync)((0, import_node_path73.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs52.mkdirSync)((0, import_node_path73.dirname)(path), { recursive: true, mode: 448 });
   const tmp = `${path}.${process.pid}.tmp`;
-  (0, import_node_fs51.writeFileSync)(tmp, JSON.stringify(file));
-  (0, import_node_fs51.renameSync)(tmp, path);
+  (0, import_node_fs52.writeFileSync)(tmp, JSON.stringify(file));
+  (0, import_node_fs52.renameSync)(tmp, path);
   memo = void 0;
 }
 function overrideApplies(file) {
@@ -44817,7 +46050,7 @@ function loadModelsDevIndex(dataDir) {
   const path = modelsDevCachePath(dataDir);
   let key;
   try {
-    const stat16 = (0, import_node_fs51.statSync)(path);
+    const stat16 = (0, import_node_fs52.statSync)(path);
     key = `${path}\0${stat16.mtimeMs}\0${stat16.size}`;
   } catch {
     return builtinSnapshotIndex();
@@ -44839,7 +46072,7 @@ async function refreshModelsDev(options) {
   const url = modelsDevUrl(options.env);
   const now = options.now ?? Date.now;
   const before2 = loadModelsDevIndex(options.dataDir);
-  const fail6 = (reason) => ({
+  const fail7 = (reason) => ({
     status: "failed",
     url,
     index: before2,
@@ -44848,7 +46081,7 @@ async function refreshModelsDev(options) {
   const list5 = snapshotList();
   const unknown = (options.providers ?? []).filter((p) => !list5.providers.includes(p));
   if (unknown.length > 0)
-    return fail6(msg().errors.models.notListed(unknown.join(", "), list5.providers.join(", ")));
+    return fail7(msg().errors.models.notListed(unknown.join(", "), list5.providers.join(", ")));
   let fresh;
   try {
     const response = await (options.fetch ?? fetch)(url, {
@@ -44858,7 +46091,7 @@ async function refreshModelsDev(options) {
     if (!response.ok) throw new Error(`HTTP ${response.status}`);
     fresh = buildSnapshot(await response.json(), list5, options.providers);
   } catch (error2) {
-    return fail6(error2 instanceof Error ? error2.message : String(error2));
+    return fail7(error2 instanceof Error ? error2.message : String(error2));
   }
   const fetchedAt = new Date(now()).toISOString();
   const previous = readModelsDevCache(options.dataDir);
@@ -44902,11 +46135,11 @@ function describeRefresh(result, limit = 20) {
   }
   return lines2.join("\n");
 }
-var import_node_fs51, import_node_path73, MODELS_DEV_URL, MODELS_DEV_URL_ENV, MODELS_DEV_FILE, MODELS_DEV_TIMEOUT_MS, memo;
+var import_node_fs52, import_node_path73, MODELS_DEV_URL, MODELS_DEV_URL_ENV, MODELS_DEV_FILE, MODELS_DEV_TIMEOUT_MS, memo;
 var init_models_dev_cache = __esm({
   "src/ai/providers/models-dev-cache.ts"() {
     "use strict";
-    import_node_fs51 = require("node:fs");
+    import_node_fs52 = require("node:fs");
     import_node_path73 = require("node:path");
     init_models_dev();
     init_models_dev_snapshot();
@@ -45252,40 +46485,40 @@ function minimalConfig() {
 }
 function writeAtomic2(path, text, mode) {
   const tmp = `${path}.${process.pid}.tmp`;
-  (0, import_node_fs52.writeFileSync)(tmp, text, { mode });
-  (0, import_node_fs52.renameSync)(tmp, path);
+  (0, import_node_fs53.writeFileSync)(tmp, text, { mode });
+  (0, import_node_fs53.renameSync)(tmp, path);
 }
 function initConfigDir(dir, options = {}) {
-  const dirCreated = !(0, import_node_fs52.existsSync)(dir);
-  (0, import_node_fs52.mkdirSync)(dir, { recursive: true, mode: 448 });
-  if (dirCreated && process.platform !== "win32") (0, import_node_fs52.chmodSync)(dir, 448);
+  const dirCreated = !(0, import_node_fs53.existsSync)(dir);
+  (0, import_node_fs53.mkdirSync)(dir, { recursive: true, mode: 448 });
+  if (dirCreated && process.platform !== "win32") (0, import_node_fs53.chmodSync)(dir, 448);
   const files = [];
   const config = (0, import_node_path74.join)(dir, CONFIG_FILE);
   const text = `${JSON.stringify(minimalConfig(), null, 2)}
 `;
-  if (!(0, import_node_fs52.existsSync)(config)) {
+  if (!(0, import_node_fs53.existsSync)(config)) {
     writeAtomic2(config, text, 420);
     files.push({ path: config, status: "created" });
   } else if (options.force) {
-    (0, import_node_fs52.copyFileSync)(config, `${config}.bak`);
+    (0, import_node_fs53.copyFileSync)(config, `${config}.bak`);
     writeAtomic2(config, text, 420);
     files.push({ path: config, status: "overwritten" });
   } else files.push({ path: config, status: "exists" });
   const schema = (0, import_node_path74.join)(dir, CONFIG_SCHEMA_FILE);
   const schemaText = configSchemaText();
-  if (!(0, import_node_fs52.existsSync)(schema)) {
+  if (!(0, import_node_fs53.existsSync)(schema)) {
     writeAtomic2(schema, schemaText, 420);
     files.push({ path: schema, status: "created" });
-  } else if ((0, import_node_fs52.readFileSync)(schema, "utf8") !== schemaText) {
+  } else if ((0, import_node_fs53.readFileSync)(schema, "utf8") !== schemaText) {
     writeAtomic2(schema, schemaText, 420);
     files.push({ path: schema, status: "updated" });
   } else files.push({ path: schema, status: "unchanged" });
   const auth = (0, import_node_path74.join)(dir, AUTH_FILE);
-  if ((0, import_node_fs52.existsSync)(auth)) files.push({ path: auth, status: "exists" });
+  if ((0, import_node_fs53.existsSync)(auth)) files.push({ path: auth, status: "exists" });
   return { dir, dirCreated, files };
 }
 function autoInitConfigDir(dir, env) {
-  if (env[NO_INIT_ENV] === "1" || (0, import_node_fs52.existsSync)(dir)) return false;
+  if (env[NO_INIT_ENV] === "1" || (0, import_node_fs53.existsSync)(dir)) return false;
   try {
     initConfigDir(dir);
     return true;
@@ -45303,11 +46536,11 @@ function describeInit(result) {
   return `${lines2.join("\n")}
 `;
 }
-var import_node_fs52, import_node_path74, NO_INIT_ENV;
+var import_node_fs53, import_node_path74, NO_INIT_ENV;
 var init_init = __esm({
   "src/config/init.ts"() {
     "use strict";
-    import_node_fs52 = require("node:fs");
+    import_node_fs53 = require("node:fs");
     import_node_path74 = require("node:path");
     init_i18n();
     init_json_schema();
@@ -45551,13 +46784,13 @@ function normalizeToolId(id) {
   return cleaned.length > 0 ? cleaned : "tool_call";
 }
 function convertBlocks(content) {
-  const blocks = [];
+  const blocks2 = [];
   for (const block of content) {
     if (block.type === "text") {
       if (block.text.trim().length > 0)
-        blocks.push({ type: "text", text: sanitizeText(block.text) });
+        blocks2.push({ type: "text", text: sanitizeText(block.text) });
     } else {
-      blocks.push({
+      blocks2.push({
         type: "image",
         source: {
           type: "base64",
@@ -45567,33 +46800,33 @@ function convertBlocks(content) {
       });
     }
   }
-  return blocks;
+  return blocks2;
 }
 function convertUser(message) {
   if (typeof message.content === "string") {
     if (message.content.trim().length === 0) return void 0;
     return { role: "user", content: sanitizeText(message.content) };
   }
-  const blocks = convertBlocks(message.content);
-  return blocks.length > 0 ? { role: "user", content: blocks } : void 0;
+  const blocks2 = convertBlocks(message.content);
+  return blocks2.length > 0 ? { role: "user", content: blocks2 } : void 0;
 }
 function convertAssistant(message) {
-  const blocks = [];
+  const blocks2 = [];
   for (const block of message.content) {
     if (block.type === "text") {
       if (block.text.trim().length > 0)
-        blocks.push({ type: "text", text: sanitizeText(block.text) });
+        blocks2.push({ type: "text", text: sanitizeText(block.text) });
     } else if (block.type === "thinking") {
       const signature2 = block.thinkingSignature ?? "";
       if (block.redacted && signature2) {
-        blocks.push({ type: "redacted_thinking", data: signature2 });
+        blocks2.push({ type: "redacted_thinking", data: signature2 });
       } else if (signature2.trim().length > 0) {
-        blocks.push({ type: "thinking", thinking: sanitizeText(block.thinking), signature: signature2 });
+        blocks2.push({ type: "thinking", thinking: sanitizeText(block.thinking), signature: signature2 });
       } else if (block.thinking.trim().length > 0) {
-        blocks.push({ type: "text", text: sanitizeText(block.thinking) });
+        blocks2.push({ type: "text", text: sanitizeText(block.thinking) });
       }
     } else {
-      blocks.push({
+      blocks2.push({
         type: "tool_use",
         id: normalizeToolId(block.id),
         name: block.name,
@@ -45601,7 +46834,7 @@ function convertAssistant(message) {
       });
     }
   }
-  return blocks.length > 0 ? { role: "assistant", content: blocks } : void 0;
+  return blocks2.length > 0 ? { role: "assistant", content: blocks2 } : void 0;
 }
 function convertToolResult(message) {
   const content = typeof message.content === "string" || !message.content.some((b) => b.type === "image") ? sanitizeText(contentText2(message.content)) : convertBlocks(message.content);
@@ -46464,8 +47697,8 @@ function convertToolResults(model, results, compat) {
   const images = [];
   for (const result of results) {
     const text = contentText2(result.content);
-    const blocks = typeof result.content === "string" ? [] : result.content;
-    const hasImages2 = blocks.some((b) => b.type === "image");
+    const blocks2 = typeof result.content === "string" ? [] : result.content;
+    const hasImages2 = blocks2.some((b) => b.type === "image");
     const message = {
       role: "tool",
       tool_call_id: normalizeCallId(model, result.toolCallId),
@@ -46476,7 +47709,7 @@ function convertToolResults(model, results, compat) {
     if (compat.requiresToolResultName) message["name"] = result.toolName;
     messages.push(message);
     if (hasImages2 && model.input.includes("image")) {
-      for (const block of blocks) if (block.type === "image") images.push(imagePart(block));
+      for (const block of blocks2) if (block.type === "image") images.push(imagePart(block));
     }
   }
   return { messages, images };
@@ -46726,9 +47959,9 @@ function imagePart2(block) {
   };
 }
 function convertUser4(message) {
-  const blocks = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
+  const blocks2 = typeof message.content === "string" ? [{ type: "text", text: message.content }] : message.content;
   const content = [];
-  for (const block of blocks) {
+  for (const block of blocks2) {
     if (block.type === "image") content.push(imagePart2(block));
     else if (block.text.length > 0) {
       content.push({ type: "input_text", text: sanitizeText(block.text) });
@@ -47982,12 +49215,12 @@ function handleChunk2(chunk, state, tracker) {
   }
   const usage = obj6(chunk["usageMetadata"]);
   if (usage) output.usage = parseGoogleUsage(usage);
-  const blocked2 = str7(obj6(chunk["promptFeedback"])?.["blockReason"]);
+  const blocked3 = str7(obj6(chunk["promptFeedback"])?.["blockReason"]);
   const candidates2 = Array.isArray(chunk["candidates"]) ? chunk["candidates"] : [];
   const candidate = obj6(candidates2[0]);
-  if (!candidate && blocked2) {
-    output.rawStopReason = blocked2;
-    throw new ProviderStopError(`Prompt blocked: ${blocked2}`);
+  if (!candidate && blocked3) {
+    output.rawStopReason = blocked3;
+    throw new ProviderStopError(`Prompt blocked: ${blocked3}`);
   }
   const parts = obj6(candidate?.["content"])?.["parts"];
   if (Array.isArray(parts)) {
@@ -48198,7 +49431,7 @@ function defaultConfigDir(env = process.env) {
 function readAuthFile2(path, onWarning) {
   let raw;
   try {
-    raw = (0, import_node_fs53.readFileSync)(path, "utf8");
+    raw = (0, import_node_fs54.readFileSync)(path, "utf8");
   } catch (error2) {
     const code = error2.code;
     if (code !== "ENOENT") onWarning?.(`cannot read auth file ${path}`);
@@ -48206,7 +49439,7 @@ function readAuthFile2(path, onWarning) {
   }
   if (process.platform !== "win32") {
     try {
-      const mode = (0, import_node_fs53.statSync)(path).mode & 511;
+      const mode = (0, import_node_fs54.statSync)(path).mode & 511;
       if ((mode & 63) !== 0) {
         onWarning?.(
           `auth file ${path} has permissions ${mode.toString(8).padStart(4, "0")}; expected 0600`
@@ -48240,12 +49473,12 @@ function expandEnvRefs(value, env) {
   );
   return missing || out.length === 0 ? void 0 : out;
 }
-var import_node_child_process13, import_node_fs53, import_node_os12, import_node_path75, ApiKeyResolver;
+var import_node_child_process13, import_node_fs54, import_node_os12, import_node_path75, ApiKeyResolver;
 var init_auth2 = __esm({
   "src/ai/providers/auth.ts"() {
     "use strict";
     import_node_child_process13 = require("node:child_process");
-    import_node_fs53 = require("node:fs");
+    import_node_fs54 = require("node:fs");
     import_node_os12 = require("node:os");
     import_node_path75 = require("node:path");
     init_live();
@@ -49033,25 +50266,25 @@ var init_settings_registry = __esm({
 
 // src/config/write.ts
 function writeConfigFile(path, config, options = {}) {
-  (0, import_node_fs54.mkdirSync)((0, import_node_path77.dirname)(path), { recursive: true });
+  (0, import_node_fs55.mkdirSync)((0, import_node_path77.dirname)(path), { recursive: true });
   let mode;
   try {
-    mode = (0, import_node_fs54.statSync)(path).mode & 511;
+    mode = (0, import_node_fs55.statSync)(path).mode & 511;
   } catch {
     mode = void 0;
   }
-  if (mode !== void 0 && options.backup !== false) (0, import_node_fs54.copyFileSync)(path, `${path}.bak`);
+  if (mode !== void 0 && options.backup !== false) (0, import_node_fs55.copyFileSync)(path, `${path}.bak`);
   const tmp = `${path}.${process.pid}.tmp`;
-  (0, import_node_fs54.writeFileSync)(tmp, `${JSON.stringify(config, null, 2)}
+  (0, import_node_fs55.writeFileSync)(tmp, `${JSON.stringify(config, null, 2)}
 `, { mode: mode ?? 420 });
-  if (mode !== void 0) (0, import_node_fs54.chmodSync)(tmp, mode);
-  (0, import_node_fs54.renameSync)(tmp, path);
+  if (mode !== void 0) (0, import_node_fs55.chmodSync)(tmp, mode);
+  (0, import_node_fs55.renameSync)(tmp, path);
 }
-var import_node_fs54, import_node_path77;
+var import_node_fs55, import_node_path77;
 var init_write2 = __esm({
   "src/config/write.ts"() {
     "use strict";
-    import_node_fs54 = require("node:fs");
+    import_node_fs55 = require("node:fs");
     import_node_path77 = require("node:path");
   }
 });
@@ -49250,7 +50483,7 @@ function parseEnum(key, text, options) {
 function readTarget(path, scope) {
   let text;
   try {
-    text = (0, import_node_fs55.readFileSync)(path, "utf8");
+    text = (0, import_node_fs56.readFileSync)(path, "utf8");
   } catch (error2) {
     if (error2.code === "ENOENT")
       return scope === "user" ? minimalConfig() : { version: CONFIG_FILE_VERSION };
@@ -49332,11 +50565,11 @@ function formatSettingValue(value) {
   if (typeof value === "string") return value;
   return JSON.stringify(value);
 }
-var import_node_fs55, ConfigEditError, same, ABOVE, TRUE, FALSE, UNSET;
+var import_node_fs56, ConfigEditError, same, ABOVE, TRUE, FALSE, UNSET;
 var init_edit2 = __esm({
   "src/config/edit.ts"() {
     "use strict";
-    import_node_fs55 = require("node:fs");
+    import_node_fs56 = require("node:fs");
     init_errors();
     init_i18n();
     init_init();
@@ -49416,7 +50649,7 @@ async function readClipboardImage(dataDir, deps = {}) {
   await (0, import_promises22.mkdir)(dir, { recursive: true });
   const stamp = new Date((deps.now ?? Date.now)()).toISOString().replace(/[:.]/g, "-");
   let file = (0, import_node_path80.join)(dir, `${stamp}.png`);
-  for (let n = 1; (0, import_node_fs61.existsSync)(file); n++) file = (0, import_node_path80.join)(dir, `${stamp}-${n}.png`);
+  for (let n = 1; (0, import_node_fs62.existsSync)(file); n++) file = (0, import_node_path80.join)(dir, `${stamp}-${n}.png`);
   let anyTool = false;
   for (const attempt of attempts(platform, file, env)) {
     const options = attempt.via === "file" && attempt.env !== void 0 ? { env: attempt.env } : {};
@@ -49456,11 +50689,11 @@ async function gcClipboardImages(dataDir, options = {}) {
   }
   return removed;
 }
-var import_node_fs61, import_promises22, import_node_path80, CLIPBOARD_DIR, CLIPBOARD_MAX_AGE_DAYS, OSASCRIPT, POWERSHELL;
+var import_node_fs62, import_promises22, import_node_path80, CLIPBOARD_DIR, CLIPBOARD_MAX_AGE_DAYS, OSASCRIPT, POWERSHELL;
 var init_clipboard_image = __esm({
   "src/tools/clipboard-image.ts"() {
     "use strict";
-    import_node_fs61 = require("node:fs");
+    import_node_fs62 = require("node:fs");
     import_promises22 = require("node:fs/promises");
     import_node_path80 = require("node:path");
     init_image_file();
@@ -51175,6 +52408,8 @@ function toolSummary(name, args, cwd) {
     }
     case "task":
       return flat(str8("description") ?? str8("prompt") ?? "");
+    case "web_fetch":
+      return flat((str8("url") ?? "").replace(/^https?:\/\//i, ""));
     default:
       if (path !== void 0) return displayPath2(path, cwd);
       for (const key of [
@@ -51302,10 +52537,28 @@ function resultSummary(input2, theme) {
       ] : [];
       return muted([m.done, duration, ...tokens].join(" · "));
     }
+    case "web_fetch": {
+      const finalUrl = details["finalUrl"];
+      if (num9(details["bytes"]) === 0 && typeof finalUrl === "string" && lines2[0]?.startsWith("Redirected"))
+        return muted(m.fetchRedirect(finalUrl));
+      const title = typeof details["title"] === "string" ? flat(details["title"], 60) : void 0;
+      const format = typeof details["format"] === "string" ? details["format"] : "";
+      return muted(m.fetched(title, formatSize(num9(details["bytes"]) ?? 0), format));
+    }
     default:
       return muted(count2 === 0 ? m.done : m.outputLines(count2));
   }
 }
+function fetchHost(toolName, input2) {
+  if (toolName !== "web_fetch") return void 0;
+  const raw = record(input2)["url"];
+  if (typeof raw !== "string") return void 0;
+  try {
+    return new URL(raw.trim()).hostname.replace(/^\[|\]$/g, "").toLowerCase() || void 0;
+  } catch {
+    return void 0;
+  }
+}
 var import_node_path85;
 var init_tool_summary = __esm({
   "src/modes/interactive/tool-summary.ts"() {
@@ -51314,6 +52567,7 @@ var init_tool_summary = __esm({
     import_node_path85 = require("node:path");
     init_tui2();
     init_status_bar();
+    init_truncate();
   }
 });
 
@@ -52128,7 +53382,7 @@ function childLoader(read2 = readTraceInput) {
   const load2 = ((file) => {
     let stamp = "";
     try {
-      const st = (0, import_node_fs64.statSync)(file);
+      const st = (0, import_node_fs65.statSync)(file);
       stamp = `${st.mtimeMs}:${st.size}`;
     } catch {
       stamp = "missing";
@@ -52172,11 +53426,11 @@ function traceText(session, taskId) {
     `${msg().trace.taskTitle(node.taskId, node.agent)}${summary2}`
   );
 }
-var import_node_fs64, LiveTracker, lineTraceCommand;
+var import_node_fs65, LiveTracker, lineTraceCommand;
 var init_session3 = __esm({
   "src/trace/session.ts"() {
     "use strict";
-    import_node_fs64 = require("node:fs");
+    import_node_fs65 = require("node:fs");
     init_session2();
     init_i18n();
     init_scan();
@@ -52359,7 +53613,7 @@ function ancestorDirs(cwd) {
   let dir = (0, import_node_path89.resolve)(cwd);
   for (; ; ) {
     out.push(dir);
-    if ((0, import_node_fs66.existsSync)((0, import_node_path89.join)(dir, ".git"))) return out;
+    if ((0, import_node_fs67.existsSync)((0, import_node_path89.join)(dir, ".git"))) return out;
     const parent = (0, import_node_path89.dirname)(dir);
     if (parent === dir) return out;
     dir = parent;
@@ -52421,7 +53675,7 @@ async function isDir3(path) {
 async function findSkillFiles(dir, depth = 0) {
   if (depth > MAX_DEPTH3) return [];
   const own = (0, import_node_path89.join)(dir, SKILL_FILE);
-  if ((0, import_node_fs66.existsSync)(own)) return [own];
+  if ((0, import_node_fs67.existsSync)(own)) return [own];
   let names;
   try {
     names = await (0, import_promises24.readdir)(dir);
@@ -52473,11 +53727,11 @@ async function discoverSkills(sources, options) {
   }
   return result;
 }
-var import_node_fs66, import_promises24, import_node_path89, SKILL_FILE, SKILL_NAME_RE, MAX_SKILL_NAME, MAX_SKILL_DESCRIPTION, MAX_DEPTH3, SKIP_DIRS;
+var import_node_fs67, import_promises24, import_node_path89, SKILL_FILE, SKILL_NAME_RE, MAX_SKILL_NAME, MAX_SKILL_DESCRIPTION, MAX_DEPTH3, SKIP_DIRS;
 var init_discover2 = __esm({
   "src/skills/discover.ts"() {
     "use strict";
-    import_node_fs66 = require("node:fs");
+    import_node_fs67 = require("node:fs");
     import_promises24 = require("node:fs/promises");
     import_node_path89 = require("node:path");
     init_frontmatter2();
@@ -52601,7 +53855,7 @@ function resolveSandboxEntry(moduleUrl = __ama_import_meta_url) {
   candidates2.push((0, import_node_path90.join)(here, "sandbox-entry.js"));
   candidates2.push((0, import_node_path90.join)(here, "sandbox-entry.ts"));
   for (const candidate of candidates2) {
-    if ((0, import_node_fs67.existsSync)(candidate)) return (0, import_node_fs67.realpathSync)(candidate);
+    if ((0, import_node_fs68.existsSync)(candidate)) return (0, import_node_fs68.realpathSync)(candidate);
   }
   return void 0;
 }
@@ -52833,12 +54087,12 @@ async function runSandbox(request) {
   child.stdin.end();
   return result;
 }
-var import_node_child_process16, import_node_fs67, import_node_path90, import_node_url2, MAX_COLLECTED_OUTPUT_CHARS, ABORT_GRACE_MS, DEFAULT_CODEMODE_HEAP_MB, CODEMODE_OS_POLICY;
+var import_node_child_process16, import_node_fs68, import_node_path90, import_node_url2, MAX_COLLECTED_OUTPUT_CHARS, ABORT_GRACE_MS, DEFAULT_CODEMODE_HEAP_MB, CODEMODE_OS_POLICY;
 var init_host_side = __esm({
   "src/codemode/host-side.ts"() {
     "use strict";
     import_node_child_process16 = require("node:child_process");
-    import_node_fs67 = require("node:fs");
+    import_node_fs68 = require("node:fs");
     import_node_path90 = require("node:path");
     import_node_url2 = require("node:url");
     init_detect();
@@ -53004,9 +54258,9 @@ ${output.slice(-half)}`;
 function saveFullOutput(ctx, text) {
   try {
     const dir = ctx.outputDir ?? (0, import_node_path91.join)((0, import_node_os14.tmpdir)(), "ama-codemode");
-    (0, import_node_fs68.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs69.mkdirSync)(dir, { recursive: true });
     const file = (0, import_node_path91.join)(dir, `${ctx.toolCallId.replace(/[^A-Za-z0-9_-]/g, "_")}.txt`);
-    (0, import_node_fs68.writeFileSync)(file, text, "utf8");
+    (0, import_node_fs69.writeFileSync)(file, text, "utf8");
     return file;
   } catch {
     return void 0;
@@ -53158,11 +54412,11 @@ function codemodeToolFactory(overrides = {}) {
     return createCodemodeTool(options);
   };
 }
-var import_node_fs68, import_node_os14, import_node_path91, CODEMODE_TOOL_NAME2, DEFAULT_MAX_TOOL_RESULT_CHARS2, CODEMODE_EXAMPLE, SCRIPT_ONLY_GLOBALS, TAIL_CHARS, CODEMODE_ONLY_GUIDELINE;
+var import_node_fs69, import_node_os14, import_node_path91, CODEMODE_TOOL_NAME2, DEFAULT_MAX_TOOL_RESULT_CHARS2, CODEMODE_EXAMPLE, SCRIPT_ONLY_GLOBALS, TAIL_CHARS, CODEMODE_ONLY_GUIDELINE;
 var init_tool = __esm({
   "src/codemode/tool.ts"() {
     "use strict";
-    import_node_fs68 = require("node:fs");
+    import_node_fs69 = require("node:fs");
     import_node_os14 = require("node:os");
     import_node_path91 = require("node:path");
     init_presets2();
@@ -53188,7 +54442,7 @@ var init_tool = __esm({
 });
 
 // src/memory/tool.ts
-function fail5(input2, code, message) {
+function fail6(input2, code, message) {
   const details = { command: String(input2.command ?? ""), code };
   if (typeof input2.path === "string") details.path = input2.path;
   return { content: message, isError: true, details };
@@ -53220,11 +54474,11 @@ function createMemoryTool(runtime) {
       const write2 = command3 !== "view";
       if (ctx.depth > 0) {
         if (runtime.subagents === "off")
-          return fail5(input2, "subagent", "subagents cannot access memory");
-        if (write2) return fail5(input2, "subagent", "subagents cannot modify memory");
+          return fail6(input2, "subagent", "subagents cannot access memory");
+        if (write2) return fail6(input2, "subagent", "subagents cannot modify memory");
       }
       if (write2 && !runtime.writesEnabled)
-        return fail5(input2, "disabled", "memory writes are turned off for this session");
+        return fail6(input2, "disabled", "memory writes are turned off for this session");
       const store = runtime.store;
       try {
         switch (command3) {
@@ -53244,7 +54498,7 @@ function createMemoryTool(runtime) {
             };
           }
           default:
-            return fail5(
+            return fail6(
               input2,
               "invalid_command",
               'command must be "view", "create", "str_replace" or "delete"'
@@ -53252,7 +54506,7 @@ function createMemoryTool(runtime) {
         }
       } catch (error2) {
         if (error2 instanceof MemoryError || error2 instanceof MemoryLockError)
-          return fail5(input2, error2.code, error2.message);
+          return fail6(input2, error2.code, error2.message);
         throw error2;
       }
     }
@@ -53276,7 +54530,7 @@ var init_tool2 = __esm({
 // src/cli/codemode-notice.ts
 function readNotices(path) {
   try {
-    const value = JSON.parse((0, import_node_fs69.readFileSync)(path, "utf8"));
+    const value = JSON.parse((0, import_node_fs70.readFileSync)(path, "utf8"));
     if (typeof value === "object" && value !== null && !Array.isArray(value)) {
       const shown2 = value[KEY];
       return {
@@ -53300,20 +54554,20 @@ function takeCodemodeNotice(input2) {
   const shown2 = notices[KEY] ?? [];
   if (shown2.includes(input2.configDir)) return void 0;
   try {
-    (0, import_node_fs69.mkdirSync)(input2.dataDir, { recursive: true });
+    (0, import_node_fs70.mkdirSync)(input2.dataDir, { recursive: true });
     const tmp = `${path}.${process.pid}.tmp`;
-    (0, import_node_fs69.writeFileSync)(tmp, `${JSON.stringify({ ...notices, [KEY]: [...shown2, input2.configDir] })}
+    (0, import_node_fs70.writeFileSync)(tmp, `${JSON.stringify({ ...notices, [KEY]: [...shown2, input2.configDir] })}
 `);
-    (0, import_node_fs69.renameSync)(tmp, path);
+    (0, import_node_fs70.renameSync)(tmp, path);
   } catch {
   }
   return codemodeNoticeText(input2.capability);
 }
-var import_node_fs69, import_node_path92, NOTICES_FILE, KEY;
+var import_node_fs70, import_node_path92, NOTICES_FILE, KEY;
 var init_codemode_notice = __esm({
   "src/cli/codemode-notice.ts"() {
     "use strict";
-    import_node_fs69 = require("node:fs");
+    import_node_fs70 = require("node:fs");
     import_node_path92 = require("node:path");
     init_presets2();
     init_i18n();
@@ -53330,7 +54584,7 @@ function readEntries(dataDir, now) {
   const out = /* @__PURE__ */ new Map();
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs70.readFileSync)(maxTokensCachePath(dataDir), "utf8"));
+    parsed = JSON.parse((0, import_node_fs71.readFileSync)(maxTokensCachePath(dataDir), "utf8"));
   } catch {
     return out;
   }
@@ -53364,11 +54618,11 @@ function recordMaxTokensCap(dataDir, key, cap, now = Date.now) {
   const path = maxTokensCachePath(dataDir);
   const tmp = `${path}.${process.pid}.tmp`;
   try {
-    (0, import_node_fs70.mkdirSync)((0, import_node_path93.dirname)(path), { recursive: true, mode: 448 });
+    (0, import_node_fs71.mkdirSync)((0, import_node_path93.dirname)(path), { recursive: true, mode: 448 });
     const caps = Object.fromEntries([...entries].sort(([a], [b]) => a < b ? -1 : 1));
-    (0, import_node_fs70.writeFileSync)(tmp, `${JSON.stringify({ version: MAX_TOKENS_CACHE_VERSION, caps }, null, 2)}
+    (0, import_node_fs71.writeFileSync)(tmp, `${JSON.stringify({ version: MAX_TOKENS_CACHE_VERSION, caps }, null, 2)}
 `);
-    (0, import_node_fs70.renameSync)(tmp, path);
+    (0, import_node_fs71.renameSync)(tmp, path);
   } catch {
   }
 }
@@ -53384,11 +54638,11 @@ function attachMaxTokensCache(dataDir, now = Date.now) {
   attached2.set(dataDir, detach);
   return detach;
 }
-var import_node_fs70, import_node_path93, MAX_TOKENS_CACHE_VERSION, MAX_TOKENS_CACHE_TTL_MS, attached2;
+var import_node_fs71, import_node_path93, MAX_TOKENS_CACHE_VERSION, MAX_TOKENS_CACHE_TTL_MS, attached2;
 var init_max_tokens_cache = __esm({
   "src/ai/providers/max-tokens-cache.ts"() {
     "use strict";
-    import_node_fs70 = require("node:fs");
+    import_node_fs71 = require("node:fs");
     import_node_path93 = require("node:path");
     init_max_tokens();
     MAX_TOKENS_CACHE_VERSION = 1;
@@ -53542,7 +54796,7 @@ function findImageRefs(text, cwd) {
     token = token.replace(/\\ /g, " ").replace(/[,\uFF0C\u3002;\uFF1B)\uFF09]+$/, "");
     if (token === "" || imageMimeFromPath(token) === void 0) continue;
     const path = expand(token, cwd);
-    if (!explicit && !(0, import_node_fs71.existsSync)(path)) continue;
+    if (!explicit && !(0, import_node_fs72.existsSync)(path)) continue;
     if (seen.has(path)) continue;
     seen.add(path);
     out.push({ path, explicit });
@@ -53571,9 +54825,9 @@ async function loadPromptImages(refs, model, options = {}) {
     ...model !== void 0 ? { maxBase64Bytes: imageLimits(model).perImageBase64 } : {},
     ...options
   };
-  const blocks = [];
-  for (const ref of wanted) blocks.push((await loadLocalized(ref.path, fit)).block);
-  return blocks;
+  const blocks2 = [];
+  for (const ref of wanted) blocks2.push((await loadLocalized(ref.path, fit)).block);
+  return blocks2;
 }
 async function promptImages(text, extra, cwd, model, options = {}) {
   const refs = [
@@ -53601,11 +54855,11 @@ async function loadLocalized(path, options) {
     throw error2;
   }
 }
-var import_node_fs71, import_node_os15, import_node_path94, TOKEN;
+var import_node_fs72, import_node_os15, import_node_path94, TOKEN;
 var init_image_input = __esm({
   "src/modes/image-input.ts"() {
     "use strict";
-    import_node_fs71 = require("node:fs");
+    import_node_fs72 = require("node:fs");
     import_node_os15 = require("node:os");
     import_node_path94 = require("node:path");
     init_channels();
@@ -54404,7 +55658,7 @@ function trustChoices() {
 }
 function isDirectory2(path) {
   try {
-    return (0, import_node_fs72.statSync)(path).isDirectory();
+    return (0, import_node_fs73.statSync)(path).isDirectory();
   } catch {
     return false;
   }
@@ -54459,7 +55713,7 @@ function createStartupUi(options = {}) {
         validate: (text) => {
           if (text === "") return m.cwdEmpty;
           const abs = (0, import_node_path95.resolve)(text);
-          if (!(0, import_node_fs72.existsSync)(abs)) return m.cwdMissing(abs);
+          if (!(0, import_node_fs73.existsSync)(abs)) return m.cwdMissing(abs);
           if (!isDirectory2(abs)) return m.cwdNotDir(abs);
           return void 0;
         }
@@ -54467,12 +55721,12 @@ function createStartupUi(options = {}) {
     }
   };
 }
-var import_node_fs72, import_node_path95;
+var import_node_fs73, import_node_path95;
 var init_startup_ui = __esm({
   "src/modes/interactive/startup-ui.ts"() {
     "use strict";
     init_i18n();
-    import_node_fs72 = require("node:fs");
+    import_node_fs73 = require("node:fs");
     import_node_path95 = require("node:path");
     init_tui2();
     init_model_items();
@@ -54913,8 +56167,8 @@ var init_startup_screen = __esm({
 });
 
 // src/modes/interactive/panels.ts
-function keyValue(rows, theme, wrap2 = false) {
-  return new KeyValue(rows, { theme, maxKeyRatio: 0.3, ...wrap2 ? { wrap: true } : {} });
+function keyValue(rows, theme, wrap3 = false) {
+  return new KeyValue(rows, { theme, maxKeyRatio: 0.3, ...wrap3 ? { wrap: true } : {} });
 }
 function cacheSection(session, theme, now) {
   return [
@@ -55212,7 +56466,7 @@ function contextPanel(session, theme) {
   const m = msg().report.contextReport;
   const snap = contextSnapshot(session);
   const { breakdown } = snap;
-  const table3 = (rows, wrap2 = false) => new KeyValue(rows, { theme, maxKeyRatio: 0.3, ...wrap2 ? { wrap: true } : {} });
+  const table3 = (rows, wrap3 = false) => new KeyValue(rows, { theme, maxKeyRatio: 0.3, ...wrap3 ? { wrap: true } : {} });
   const largest = largestRows(breakdown);
   const parts = [
     table3(headerRows(snap)),
@@ -55271,14 +56525,20 @@ function command(name, key, args) {
     });
   return info2;
 }
+function availableCommands2(runtime, session, list5 = BUILTIN_COMMANDS) {
+  const active = new Set(session.getTools().map((t) => t.name));
+  const registered = new Set(runtime.tools.list());
+  const has = (requires) => requires === "memory" ? registered.has("memory") : requires === "task" ? active.has("task") || active.has("codemode") && registered.has("task") : true;
+  return list5.filter((c) => has(c.requires));
+}
 function parseSlash(line2) {
   const m = /^\/([A-Za-z?][\w-]*)(?:\s+([\s\S]*))?$/.exec(line2.trim());
   if (m === null) return void 0;
   const raw = m[1].toLowerCase();
   return { name: ALIASES[raw] ?? raw, args: (m[2] ?? "").trim() };
 }
-function helpText2() {
-  const lines2 = BUILTIN_COMMANDS.map(
+function helpText2(ctx) {
+  const lines2 = availableCommands2(ctx.runtime, ctx.session()).map(
     (c) => `/${c.name}${c.args !== void 0 ? ` ${c.args}` : ""}  ${c.description}`
   );
   const m = msg().report.commands;
@@ -55325,7 +56585,7 @@ async function runSlashCommand(line2, ctx) {
   const session = ctx.session();
   switch (name) {
     case "help":
-      return { kind: "handled", message: helpText2() };
+      return { kind: "handled", message: helpText2(ctx) };
     case "exit":
       return { kind: "exit" };
     case "new": {
@@ -55497,7 +56757,9 @@ var init_commands_core = __esm({
       command("cache", "cache", "[warm off|streaming|idle | fingerprint]"),
       command("statusline", "statusline", "[full|compact]"),
       command("plan", "plan", { key: "planArgs" }),
-      command("tasks", "tasks", "[id] | stop <id> | bg [id]"),
+      Object.assign(command("tasks", "tasks", "[id] | stop <id> | bg [id]"), {
+        requires: "task"
+      }),
       command("agents", "agents"),
       command("paste", "paste"),
       command("interrupt", "interrupt", { key: "interruptArgs" }),
@@ -55505,7 +56767,9 @@ var init_commands_core = __esm({
       // [W6-C0] 第六波（W6-S / W6-T1 / W6-M 实现）
       command("config", "config", "[key=value]"),
       command("trace", "trace", { key: "traceArgs" }),
-      command("memory", "memory", { key: "memoryArgs" })
+      Object.assign(command("memory", "memory", { key: "memoryArgs" }), {
+        requires: "memory"
+      })
     ];
     ALIASES = { quit: "exit", q: "exit", "?": "help" };
   }
@@ -55605,9 +56869,9 @@ async function availableModels(runtime) {
   }
   return out;
 }
-function commands(runtime) {
+function commands(runtime, session) {
   return [
-    ...BUILTIN_COMMANDS.map((c) => ({
+    ...availableCommands2(runtime, session).map((c) => ({
       name: c.name,
       description: c.description,
       source: "builtin"
@@ -55817,7 +57081,7 @@ var init_commands = __esm({
         ctx.session().setPermissionMode(p.mode);
         return { mode: p.mode };
       },
-      get_commands: async (_p, ctx) => ({ commands: commands(ctx.runtime) }),
+      get_commands: async (_p, ctx) => ({ commands: commands(ctx.runtime, ctx.session()) }),
       get_skills: async (_p, ctx) => ({ skills: ctx.runtime.resources.skills }),
       // [W5-F] 计划 / 任务命令（docs/history/wave5-plan.md §6.5、§7.5）
       plan_response: async (p, ctx) => {
@@ -56312,8 +57576,8 @@ var init_config_panel = __esm({
         const dynamic = value.value === void 0 ? settingDynamicDefault(row3.id) : void 0;
         const text = dynamic === void 0 ? doc : `${doc} · ${dynamic}`;
         const spec2 = settingsRegistry().find((x) => x.key === row3.id);
-        const blocked2 = spec2 === void 0 ? void 0 : blockedReason(spec2, value, this.scope);
-        const lines2 = blocked2 === void 0 ? [] : [theme.fg("warning", truncateToWidth(blocked2, width2))];
+        const blocked3 = spec2 === void 0 ? void 0 : blockedReason(spec2, value, this.scope);
+        const lines2 = blocked3 === void 0 ? [] : [theme.fg("warning", truncateToWidth(blocked3, width2))];
         if (text !== "") lines2.push(...wrapTextWithAnsi(theme.fg("dim", text), width2));
         return lines2.slice(0, 3);
       }
@@ -57356,8 +58620,8 @@ var init_config_ui = __esm({
         const spec2 = settingSpec(key);
         if (panel === void 0 || spec2 === void 0) return;
         const current3 = getConfigValue(readSnapshot(this.input()), key);
-        const blocked2 = blockedReason(spec2, current3, scope);
-        if (blocked2 !== void 0) return panel.setNotice(blocked2, "warning");
+        const blocked3 = blockedReason(spec2, current3, scope);
+        if (blocked3 !== void 0) return panel.setNotice(blocked3, "warning");
         const value = current3.value;
         switch (spec2.kind) {
           case "bool":
@@ -57647,27 +58911,27 @@ function runEditor(command3, file) {
   return result.status;
 }
 async function editExternally(text, name, deps) {
-  const dir = (0, import_node_fs73.mkdtempSync)((0, import_node_path97.join)((0, import_node_os16.tmpdir)(), "ama-edit-"));
+  const dir = (0, import_node_fs74.mkdtempSync)((0, import_node_path97.join)((0, import_node_os16.tmpdir)(), "ama-edit-"));
   const file = (0, import_node_path97.join)(dir, name);
-  (0, import_node_fs73.writeFileSync)(file, text);
+  (0, import_node_fs74.writeFileSync)(file, text);
   deps.suspend();
   try {
     const code = (deps.run ?? runEditor)(editorCommand(deps.env, deps.platform), file);
     if (code !== 0) return void 0;
-    return (0, import_node_fs73.readFileSync)(file, "utf8");
+    return (0, import_node_fs74.readFileSync)(file, "utf8");
   } catch {
     return void 0;
   } finally {
     deps.resume();
-    (0, import_node_fs73.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs74.rmSync)(dir, { recursive: true, force: true });
   }
 }
-var import_node_child_process17, import_node_fs73, import_node_os16, import_node_path97;
+var import_node_child_process17, import_node_fs74, import_node_os16, import_node_path97;
 var init_external_editor = __esm({
   "src/modes/interactive/external-editor.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_fs73 = require("node:fs");
+    import_node_fs74 = require("node:fs");
     import_node_os16 = require("node:os");
     import_node_path97 = require("node:path");
   }
@@ -58631,6 +59895,10 @@ function describeRequest(request, theme, options = {}) {
     const { shown: shown2, hidden } = lines(input2["command"], COMMAND_LINES);
     out.push(...shown2.map((l, i) => theme.fg("code", (i === 0 ? "$ " : "  ") + l)));
     if (hidden > 0) out.push(more(hidden));
+  } else if (request.toolName === "web_fetch" && typeof input2["url"] === "string") {
+    const { shown: shown2, hidden } = lines(input2["url"].replace(/(.{72})/g, "$1\n"), COMMAND_LINES);
+    out.push(...shown2.map((l) => theme.fg("code", l)));
+    if (hidden > 0) out.push(more(hidden));
   } else if (request.toolName === "write" && typeof input2["content"] === "string") {
     const count2 = lines(input2["content"], Number.MAX_SAFE_INTEGER).shown.length;
     out.push(
@@ -58699,8 +59967,10 @@ function approvalOutcomeText(request, outcome, taskAgent) {
   switch (outcome) {
     case "allow":
       return m.allow(what);
-    case "allow_session":
-      return m.allowSession(what);
+    case "allow_session": {
+      const host = fetchHost(request.toolName, request.input);
+      return host === void 0 ? m.allowSession(what) : m.allowSessionHost(what, host);
+    }
     case "deny":
       return m.deny(what);
     case "cancelled":
@@ -58790,10 +60060,12 @@ var init_approval_dialog = __esm({
         const { theme } = this.host;
         const g = theme.glyphs;
         const keyWidth = compact ? 1 : Math.max(...APPROVAL_OPTIONS.map((o) => o.keys.length));
+        const host = fetchHost(this.request.toolName, this.request.input);
         return APPROVAL_OPTIONS.map((option2, i) => {
           const selected = i === this.selected;
           const keys = compact ? option2.keys.slice(0, 1) : option2.keys;
-          const left = `${selected ? g.prompt : " "} ${i + 1}. ${option2.label}`;
+          const text = option2.decision === "allow_session" && host !== void 0 ? msg().approval.option.allowSessionHost(host) : option2.label;
+          const left = `${selected ? g.prompt : " "} ${i + 1}. ${text}`;
           const right = keys.padEnd(keyWidth);
           const room = Math.max(1, width2 - visibleWidth(right) - 1);
           const label2 = selected ? theme.fg("accent", theme.bold(left)) : left;
@@ -61212,6 +62484,9 @@ function command2(name, key) {
     }
   };
 }
+function completionCommands(runtime, session) {
+  return availableCommands2(runtime, session, ALL_COMMANDS);
+}
 function keyHints() {
   return msg().interactive.commands.keyHints;
 }
@@ -64336,7 +65611,7 @@ var init_program_status = __esm({
 });
 
 // src/modes/interactive/program-status-ui.ts
-function blocked(kind, text) {
+function blocked2(kind, text) {
   return { state: "blocked", kind, msg: text };
 }
 function programStatusUi(deps) {
@@ -64492,9 +65767,9 @@ var init_program_status_ui = __esm({
       /** 当前根记录（测试也用）。 */
       root() {
         const pending = [...this.approvals.values()].at(-1);
-        if (pending !== void 0) return blocked("permission", pending.msg);
-        if (this.plan !== void 0) return blocked("question", this.plan);
-        if (this.auth !== void 0) return blocked("auth", this.auth);
+        if (pending !== void 0) return blocked2("permission", pending.msg);
+        if (this.plan !== void 0) return blocked2("question", this.plan);
+        if (this.auth !== void 0) return blocked2("auth", this.auth);
         if (this.running)
           return { state: "working", ...this.activity !== void 0 ? { msg: this.activity } : {} };
         return this.outcome ?? { state: "idle" };
@@ -64618,7 +65893,7 @@ function runInteractiveMode(runtime, context, options = {}) {
   const { hint, bar: status } = area;
   const historyFile = options.historyFile === false ? void 0 : options.historyFile ?? (0, import_node_path101.join)(runtime.paths.dataDir, "history");
   const completion = new InteractiveCompletion({
-    commands: () => ALL_COMMANDS,
+    commands: () => completionCommands(runtime, session),
     prompts: () => runtime.resources.prompts,
     skills: () => runtime.resources.skills,
     cwd: () => session.state.cwd,
@@ -64645,6 +65920,7 @@ function runInteractiveMode(runtime, context, options = {}) {
   tui.addChild(status);
   tui.addChild(area.quota);
   let finished = false;
+  const hintTimers = options.hintTimers ?? realHintTimers;
   let hintTimer;
   let resolveExit = () => void 0;
   const render = () => tui.requestRender();
@@ -64654,14 +65930,13 @@ function runInteractiveMode(runtime, context, options = {}) {
   };
   const showHint = (text, ms = HINT_MS) => {
     hint.setText(text === "" ? "" : theme.fg("dim", text));
-    if (hintTimer !== void 0) clearTimeout(hintTimer);
+    if (hintTimer !== void 0) hintTimers.clear(hintTimer);
     hintTimer = void 0;
     if (text !== "") {
-      hintTimer = setTimeout(() => {
+      hintTimer = hintTimers.set(() => {
         hint.setText("");
         render();
       }, ms);
-      hintTimer.unref?.();
     }
     render();
   };
@@ -64914,7 +66189,7 @@ function runInteractiveMode(runtime, context, options = {}) {
     if (finished) return;
     finished = true;
     logoAnimation?.finish();
-    if (hintTimer !== void 0) clearTimeout(hintTimer);
+    if (hintTimer !== void 0) hintTimers.clear(hintTimer);
     loader.stop();
     area.dispose();
     osc7501.exit();
@@ -64980,7 +66255,7 @@ function runInteractiveMode(runtime, context, options = {}) {
     }
   });
 }
-var import_node_path101, HINT_MS;
+var import_node_path101, HINT_MS, realHintTimers;
 var init_interactive_mode = __esm({
   "src/modes/interactive/interactive-mode.ts"() {
     "use strict";
@@ -65019,6 +66294,14 @@ var init_interactive_mode = __esm({
     init_tool_view();
     init_task_background();
     HINT_MS = 2500;
+    realHintTimers = {
+      set: (fn, ms) => {
+        const handle = setTimeout(fn, ms);
+        handle.unref?.();
+        return handle;
+      },
+      clear: (handle) => clearTimeout(handle)
+    };
   }
 });
 
@@ -65061,7 +66344,7 @@ function choose(answer, values) {
 }
 function isDirectory3(path) {
   try {
-    return (0, import_node_fs74.statSync)(path).isDirectory();
+    return (0, import_node_fs75.statSync)(path).isDirectory();
   } catch {
     return false;
   }
@@ -65106,7 +66389,7 @@ function createTextStartupUi(io) {
       const answer = (await ask([m.cwdMissing(missing)], m.cwdAnswer))?.trim();
       if (answer === void 0 || answer === "") return void 0;
       const abs = (0, import_node_path102.resolve)(answer);
-      if (!(0, import_node_fs74.existsSync)(abs) || !isDirectory3(abs)) {
+      if (!(0, import_node_fs75.existsSync)(abs) || !isDirectory3(abs)) {
         io.write(m.notDirectory(abs));
         return void 0;
       }
@@ -65114,11 +66397,11 @@ function createTextStartupUi(io) {
     }
   };
 }
-var import_node_fs74, import_node_path102;
+var import_node_fs75, import_node_path102;
 var init_startup_ui_text = __esm({
   "src/modes/startup-ui-text.ts"() {
     "use strict";
-    import_node_fs74 = require("node:fs");
+    import_node_fs75 = require("node:fs");
     import_node_path102 = require("node:path");
     init_i18n();
   }
@@ -65155,6 +66438,7 @@ function createTools(input2, options, state) {
   };
   const builtins = builtinTools({
     bash,
+    ...options.webFetch !== void 0 ? { webFetch: options.webFetch } : {},
     read: {
       supportsImages: (ctx2) => modelAcceptsImages(state, ctx2.model),
       imageOptions: (ctx2) => imageFitOptionsFor(state.providers, ctx2.model, input2.config.images)
@@ -65564,7 +66848,7 @@ var init_memory3 = __esm({
 });
 
 // src/cli/main.ts
-var import_node_fs75 = require("node:fs");
+var import_node_fs76 = require("node:fs");
 var import_node_path104 = require("node:path");
 var import_node_url3 = require("node:url");
 init_version();
@@ -66101,7 +67385,7 @@ init_token_client();
 
 // src/auth/chatgpt/host-id.ts
 var import_node_crypto19 = require("node:crypto");
-var import_node_fs48 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var import_node_path70 = require("node:path");
 var HOST_ID_FILE = "chatgpt-host.json";
 function hostIdPath(dataDir) {
@@ -66110,14 +67394,14 @@ function hostIdPath(dataDir) {
 function readOrCreateHostId(dataDir) {
   const path = hostIdPath(dataDir);
   try {
-    const value = JSON.parse((0, import_node_fs48.readFileSync)(path, "utf8"));
+    const value = JSON.parse((0, import_node_fs49.readFileSync)(path, "utf8"));
     if (typeof value.hostId === "string" && /^urn:uuid:[0-9a-f-]{36}$/i.test(value.hostId))
       return value.hostId;
   } catch {
   }
   const hostId = `urn:uuid:${(0, import_node_crypto19.randomUUID)()}`;
-  (0, import_node_fs48.mkdirSync)((0, import_node_path70.dirname)(path), { recursive: true, mode: 448 });
-  (0, import_node_fs48.writeFileSync)(path, `${JSON.stringify({ version: 1, hostId }, null, 2)}
+  (0, import_node_fs49.mkdirSync)((0, import_node_path70.dirname)(path), { recursive: true, mode: 448 });
+  (0, import_node_fs49.writeFileSync)(path, `${JSON.stringify({ version: 1, hostId }, null, 2)}
 `, { mode: 384 });
   return hostId;
 }
@@ -66630,7 +67914,7 @@ init_merge();
 init_key_docs();
 init_paths();
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs57 = require("node:fs");
+var import_node_fs58 = require("node:fs");
 var import_node_path79 = require("node:path");
 init_models_dev_cache();
 init_init();
@@ -66692,7 +67976,7 @@ init_ansi();
 // src/cli/subcommands/config-set.ts
 init_i18n();
 init_edit2();
-var import_node_fs56 = require("node:fs");
+var import_node_fs57 = require("node:fs");
 var import_node_path78 = require("node:path");
 init_init();
 init_paths();
@@ -66822,7 +68106,7 @@ async function runConfigEdit(action, argv, io, deps = {}) {
   if (key === "permission.mode" && value === "full-auto" && scope === "user") {
     if (!await confirmBypass(io, flags2.has("yes"), deps)) return ExitCode.Config;
   }
-  if (scope === "user" && !(0, import_node_fs56.existsSync)((0, import_node_path78.join)(input2.configDir, CONFIG_FILE)))
+  if (scope === "user" && !(0, import_node_fs57.existsSync)((0, import_node_path78.join)(input2.configDir, CONFIG_FILE)))
     initConfigDir(input2.configDir);
   report(io, setConfigValue({ ...input2, scope, key, value }), value);
   return ExitCode.Ok;
@@ -66835,7 +68119,7 @@ function showPaths(io) {
   const configDir = resolveConfigDir({ env: io.env });
   const dataDir = resolveDataDir({ env: io.env });
   const m = msg().subcommands.configShow;
-  const mark = (path) => `${path}${(0, import_node_fs57.existsSync)(path) ? "" : m.missing}`;
+  const mark = (path) => `${path}${(0, import_node_fs58.existsSync)(path) ? "" : m.missing}`;
   const width2 = Math.max(...[m.configDir, m.dataDir, m.projectLevel].map(visibleWidth)) + 2;
   const label2 = (text) => padToWidth(text, width2);
   const lines2 = [
@@ -66856,7 +68140,7 @@ function showPaths(io) {
 function editConfig(io) {
   const configDir = resolveConfigDir({ env: io.env });
   const path = (0, import_node_path79.join)(configDir, CONFIG_FILE);
-  if (!(0, import_node_fs57.existsSync)(path)) initConfigDir(configDir);
+  if (!(0, import_node_fs58.existsSync)(path)) initConfigDir(configDir);
   const editor = (io.env["VISUAL"] ?? io.env["EDITOR"] ?? "").trim();
   if (editor === "") {
     io.stdout(msg().subcommands.configShow.noEditor(path));
@@ -67148,7 +68432,7 @@ async function runConfig(argv, io, deps) {
 }
 
 // src/cli/subcommands/doctor.ts
-var import_node_fs58 = require("node:fs");
+var import_node_fs59 = require("node:fs");
 init_blobs();
 init_shadow_git();
 init_gc();
@@ -67167,7 +68451,7 @@ init_args();
 init_exit_codes();
 
 // src/cli/proxy.ts
-var http = __toESM(require("node:http"), 1);
+var http2 = __toESM(require("node:http"), 1);
 init_i18n();
 function pick5(env, name) {
   const value = env[name.toLowerCase()] ?? env[name.toUpperCase()];
@@ -67175,18 +68459,18 @@ function pick5(env, name) {
 }
 function readProxyEnv(env) {
   const out = {};
-  const https = pick5(env, "https_proxy");
+  const https2 = pick5(env, "https_proxy");
   const plain = pick5(env, "http_proxy");
   const no = pick5(env, "no_proxy");
-  if (https !== void 0) out.httpsProxy = https;
+  if (https2 !== void 0) out.httpsProxy = https2;
   if (plain !== void 0) out.httpProxy = plain;
   if (no !== void 0) out.noProxy = no;
   return out;
 }
 function defaultProxyRuntime() {
-  const fn = http.setGlobalProxyFromEnv;
+  const fn = http2.setGlobalProxyFromEnv;
   return {
-    setGlobalProxyFromEnv: typeof fn === "function" ? fn.bind(http) : void 0,
+    setGlobalProxyFromEnv: typeof fn === "function" ? fn.bind(http2) : void 0,
     execArgv: process.execArgv,
     version: process.versions.node
   };
@@ -67521,7 +68805,7 @@ async function runDoctor(argv, io, deps) {
   const m = msg().report.doctor;
   report2.section(m.dirsTitle);
   report2.item(m.configDir(level.configDir));
-  report2.item(m.dataDir(level.dataDir, (0, import_node_fs58.existsSync)(level.dataDir)));
+  report2.item(m.dataDir(level.dataDir, (0, import_node_fs59.existsSync)(level.dataDir)));
   await fileHistoryLine(report2, level.dataDir);
   report2.section(m.layersTitle);
   report2.item(m.builtinDefaults);
@@ -67749,7 +69033,7 @@ init_discovered_cache();
 init_catalog2();
 init_models_dev_cache();
 init_models_dev();
-var import_node_fs59 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 init_load();
 init_write2();
 init_args();
@@ -68112,7 +69396,7 @@ function writeEntries(ctx, provider, entries, notes) {
     return 0;
   }
   models.push(...added);
-  const backup = (0, import_node_fs59.existsSync)(path);
+  const backup = (0, import_node_fs60.existsSync)(path);
   writeConfigFile(path, config, { backup: true });
   io.stdout(m.written(path, provider.id, added.length, kept, backup));
   if (notes.noTools.size > 0) io.stdout(m.skippedNoTools([...notes.noTools].join(", ")));
@@ -68537,7 +69821,7 @@ async function runModels(argv, io, deps) {
 }
 
 // src/cli/subcommands/providers.ts
-var import_node_fs60 = require("node:fs");
+var import_node_fs61 = require("node:fs");
 init_models_dev_cache();
 init_models_dev();
 init_auth_file();
@@ -68884,7 +70168,7 @@ function yesNo(value) {
   const t = msg().subcommands.providersPlan;
   return value === void 0 ? "?" : value ? t.yes : t.no;
 }
-function renderTable2(plans2) {
+function renderTable3(plans2) {
   const h = msg().subcommands.providersPlan.head;
   const head = [
     h.model,
@@ -69140,7 +70424,7 @@ async function add(ctx, id, refresh) {
   });
   if (result.cancelled !== void 0) return result.cancelled;
   io.stdout(`
-${renderTable2(result.plans)}`);
+${renderTable3(result.plans)}`);
   if (refresh) {
     const gone = [...existingIds].filter((m2) => !listed2.some((l) => l.id === m2));
     if (gone.length > 0) io.stdout(m.goneUpstream(gone));
@@ -69194,7 +70478,7 @@ ${renderTable2(result.plans)}`);
   const providers = config.providers ??= {};
   providers[id] = merged.config;
   if (defaultPick !== void 0) config.defaultModel = `${id}/${defaultPick.id}`;
-  const backup = (0, import_node_fs60.existsSync)(level.userConfigPath);
+  const backup = (0, import_node_fs61.existsSync)(level.userConfigPath);
   writeConfigFile(level.userConfigPath, config, { backup: true });
   if (key.store !== void 0) setAuthKey(level.authFile, id, key.store);
   io.stdout(m.written(level.userConfigPath, backup));
@@ -69319,7 +70603,7 @@ init_reuse();
 init_clipboard_image();
 
 // src/cli/subcommands/sessions-export.ts
-var import_node_fs62 = require("node:fs");
+var import_node_fs63 = require("node:fs");
 var import_node_path81 = require("node:path");
 init_paths();
 
@@ -69551,7 +70835,7 @@ async function runSessionsExport(argv, io) {
     return ExitCode.Ok;
   }
   const target = (0, import_node_path81.resolve)(io.cwd, expandHome(output, { env: io.env }));
-  (0, import_node_fs62.writeFileSync)(target, text, { mode: 384 });
+  (0, import_node_fs63.writeFileSync)(target, text, { mode: 384 });
   io.stderr(msg().subcommands.sessionsExport.exported(target));
   return ExitCode.Ok;
 }
@@ -69883,7 +71167,7 @@ function aggregateStats(summaries, options = {}) {
 }
 
 // src/session/stats-index.ts
-var import_node_fs63 = require("node:fs");
+var import_node_fs64 = require("node:fs");
 var import_node_path82 = require("node:path");
 
 // src/session/stats-scan.ts
@@ -70097,7 +71381,7 @@ function collectSummaries(files, options = {}) {
   let index2 = { version: INDEX_VERSION, zone, files: {} };
   if (options.indexFile !== void 0) {
     try {
-      const loaded = JSON.parse((0, import_node_fs63.readFileSync)(options.indexFile, "utf8"));
+      const loaded = JSON.parse((0, import_node_fs64.readFileSync)(options.indexFile, "utf8"));
       if (loaded.version === INDEX_VERSION && loaded.zone === zone && typeof loaded.files === "object")
         index2 = loaded;
     } catch {
@@ -70108,7 +71392,7 @@ function collectSummaries(files, options = {}) {
   for (const file of files) {
     let stat16;
     try {
-      stat16 = (0, import_node_fs63.statSync)(file);
+      stat16 = (0, import_node_fs64.statSync)(file);
     } catch {
       result.invalid++;
       continue;
@@ -70138,10 +71422,10 @@ function collectSummaries(files, options = {}) {
   }
   if (dirty && options.indexFile !== void 0) {
     try {
-      (0, import_node_fs63.mkdirSync)((0, import_node_path82.dirname)(options.indexFile), { recursive: true, mode: 448 });
+      (0, import_node_fs64.mkdirSync)((0, import_node_path82.dirname)(options.indexFile), { recursive: true, mode: 448 });
       const tmp = `${options.indexFile}.${process.pid}.tmp`;
-      (0, import_node_fs63.writeFileSync)(tmp, JSON.stringify(index2), { mode: 384 });
-      (0, import_node_fs63.renameSync)(tmp, options.indexFile);
+      (0, import_node_fs64.writeFileSync)(tmp, JSON.stringify(index2), { mode: 384 });
+      (0, import_node_fs64.renameSync)(tmp, options.indexFile);
     } catch {
     }
   }
@@ -70427,7 +71711,7 @@ async function runSessionsSearch(argv, io) {
 
 // src/cli/subcommands/sessions-trace.ts
 var import_node_child_process15 = require("node:child_process");
-var import_node_fs65 = require("node:fs");
+var import_node_fs66 = require("node:fs");
 var import_node_os13 = require("node:os");
 var import_node_path86 = require("node:path");
 init_paths();
@@ -70835,9 +72119,9 @@ function openCommand(platform, file) {
   return { command: "xdg-open", args: [file] };
 }
 function spawnOpen({ command: command3, args }) {
-  return new Promise((done, fail6) => {
+  return new Promise((done, fail7) => {
     const child = (0, import_node_child_process15.spawn)(command3, args, { detached: true, stdio: "ignore" });
-    child.once("error", fail6);
+    child.once("error", fail7);
     child.once("spawn", () => {
       child.unref();
       done();
@@ -70866,7 +72150,7 @@ function splitHtmlFlag(argv) {
 }
 function locate(io, target, dirFlag) {
   const asPath = (0, import_node_path86.resolve)(io.cwd, expandHome(target, { env: io.env }));
-  if (/[\\/]|\.jsonl$/.test(target) && (0, import_node_fs65.existsSync)(asPath)) return asPath;
+  if (/[\\/]|\.jsonl$/.test(target) && (0, import_node_fs66.existsSync)(asPath)) return asPath;
   const root = dirFlag !== void 0 ? (0, import_node_path86.resolve)(io.cwd, expandHome(dirFlag, { env: io.env })) : (0, import_node_path86.join)(resolveDataDir({ env: io.env }), "sessions");
   return findSessionFileReadOnly(root, target, io.cwd);
 }
@@ -70939,7 +72223,7 @@ async function runSessionsTrace(argv, io, deps = {}) {
     io.stdout(text);
     return ExitCode.Ok;
   }
-  (0, import_node_fs65.writeFileSync)(outPath, text, { mode: 384 });
+  (0, import_node_fs66.writeFileSync)(outPath, text, { mode: 384 });
   io.stderr(m.wrote(outPath));
   if (open3) {
     try {
@@ -71140,7 +72424,7 @@ function readStdinDefault() {
 }
 function stdinKindDefault() {
   try {
-    const stat16 = (0, import_node_fs75.fstatSync)(0);
+    const stat16 = (0, import_node_fs76.fstatSync)(0);
     if (stat16.isFile()) return "file";
     if (stat16.isFIFO()) return "fifo";
     if (stat16.isSocket()) return "socket";
@@ -71200,7 +72484,7 @@ function defaultIo() {
 }
 function peekUserLanguage(env) {
   try {
-    const raw = (0, import_node_fs75.readFileSync)((0, import_node_path104.join)(resolveConfigDir({ env }), "config.json"), "utf8");
+    const raw = (0, import_node_fs76.readFileSync)((0, import_node_path104.join)(resolveConfigDir({ env }), "config.json"), "utf8");
     const value = JSON.parse(raw).ui?.language;
     return value === "auto" || value === "zh" || value === "en" ? value : void 0;
   } catch {
@@ -71288,7 +72572,7 @@ function isDirectRun() {
   const entry = process.argv[1];
   if (entry === void 0) return false;
   try {
-    return (0, import_node_fs75.realpathSync)(entry) === (0, import_node_fs75.realpathSync)((0, import_node_url3.fileURLToPath)(__ama_import_meta_url));
+    return (0, import_node_fs76.realpathSync)(entry) === (0, import_node_fs76.realpathSync)((0, import_node_url3.fileURLToPath)(__ama_import_meta_url));
   } catch {
     return false;
   }