@botiverse/kimi-code-sdk 0.9.3 → 0.15.0

package/dist/index.mjs

@@ -1026,6 +1026,19 @@ function createToolMessage(toolCallId, output) {
 		toolCallId
 	};
 }
+/**
+* Shared read-only default returned when a provider has not catalogued a
+* given model. Frozen so accidental mutation at one call site cannot leak
+* into another.
+*/
+const UNKNOWN_CAPABILITY = Object.freeze(Object.defineProperty({
+	image_in: false,
+	video_in: false,
+	audio_in: false,
+	thinking: false,
+	tool_use: false,
+	max_context_tokens: 0
+}, Symbol.for("moonshot-ai.kosong.UNKNOWN_CAPABILITY"), { value: true }));
 //#endregion
 //#region ../kosong/src/errors.ts
 /**
@@ -8623,179 +8636,6 @@ Anthropic.Completions = Completions$2;
 Anthropic.Messages = Messages$2;
 Anthropic.Models = Models$2;
 Anthropic.Beta = Beta$1;
-/**
-* Shared read-only default returned when a provider has not catalogued a
-* given model. Frozen so accidental mutation at one call site cannot leak
-* into another.
-*/
-const UNKNOWN_CAPABILITY = Object.freeze(Object.defineProperty({
-	image_in: false,
-	video_in: false,
-	audio_in: false,
-	thinking: false,
-	tool_use: false,
-	max_context_tokens: 0
-}, Symbol.for("moonshot-ai.kosong.UNKNOWN_CAPABILITY"), { value: true }));
-//#endregion
-//#region ../kosong/src/providers/capability-registry.ts
-const OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS = new Set([
-	"gpt-4.1",
-	"gpt-4.1-mini",
-	"gpt-4.1-nano",
-	"gpt-5-codex",
-	"o1",
-	"o1-mini",
-	"o1-pro",
-	"o3",
-	"o3-mini",
-	"o3-pro",
-	"o4-mini"
-]);
-const OPENAI_VISION_TOOL_PREFIXES = [
-	"gpt-4o",
-	"gpt-4-turbo",
-	"gpt-4.1",
-	"gpt-4.5"
-];
-const CLAUDE_VISION_TOOL_PREFIXES = [
-	"claude-3-",
-	"claude-3.5-",
-	"claude-3.7-"
-];
-const CLAUDE_THINKING_VISION_TOOL_PREFIXES = [
-	"claude-opus-4",
-	"claude-sonnet-4",
-	"claude-haiku-4",
-	"claude-fable"
-];
-const GEMINI_CATALOGUED_PREFIXES = [
-	"gemini-1.5-pro",
-	"gemini-1.5-flash",
-	"gemini-2.0-flash",
-	"gemini-2.0-pro",
-	"gemini-2.5-pro",
-	"gemini-2.5-flash"
-];
-const OPENAI_REASONING_CAPABILITY = Object.freeze({
-	image_in: false,
-	video_in: false,
-	audio_in: false,
-	thinking: true,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const OPENAI_VISION_TOOL_CAPABILITY = Object.freeze({
-	image_in: true,
-	video_in: false,
-	audio_in: false,
-	thinking: false,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const OPENAI_TEXT_TOOL_CAPABILITY = Object.freeze({
-	image_in: false,
-	video_in: false,
-	audio_in: false,
-	thinking: false,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const ANTHROPIC_VISION_TOOL_CAPABILITY = Object.freeze({
-	image_in: true,
-	video_in: false,
-	audio_in: false,
-	thinking: false,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const ANTHROPIC_THINKING_VISION_TOOL_CAPABILITY = Object.freeze({
-	image_in: true,
-	video_in: false,
-	audio_in: false,
-	thinking: true,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const GEMINI_MULTIMODAL_TOOL_CAPABILITY = Object.freeze({
-	image_in: true,
-	video_in: true,
-	audio_in: true,
-	thinking: false,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const GEMINI_THINKING_MULTIMODAL_TOOL_CAPABILITY = Object.freeze({
-	image_in: true,
-	video_in: true,
-	audio_in: true,
-	thinking: true,
-	tool_use: true,
-	max_context_tokens: 0
-});
-const OPENAI_LEGACY_CAPABILITY_CATALOG = [
-	{
-		matches: isOpenAIReasoningModel,
-		capability: OPENAI_REASONING_CAPABILITY
-	},
-	{
-		matches: (name) => hasPrefix(name, OPENAI_VISION_TOOL_PREFIXES),
-		capability: OPENAI_VISION_TOOL_CAPABILITY
-	},
-	{
-		matches: (name) => name.startsWith("gpt-3.5-turbo"),
-		capability: OPENAI_TEXT_TOOL_CAPABILITY
-	}
-];
-const OPENAI_RESPONSES_CAPABILITY_CATALOG = [{
-	matches: isOpenAIReasoningModel,
-	capability: OPENAI_REASONING_CAPABILITY
-}, {
-	matches: (name) => hasPrefix(name, OPENAI_VISION_TOOL_PREFIXES),
-	capability: OPENAI_VISION_TOOL_CAPABILITY
-}];
-const ANTHROPIC_CAPABILITY_CATALOG = [{
-	matches: (name) => hasPrefix(name, CLAUDE_VISION_TOOL_PREFIXES),
-	capability: ANTHROPIC_VISION_TOOL_CAPABILITY
-}, {
-	matches: (name) => hasPrefix(name, CLAUDE_THINKING_VISION_TOOL_PREFIXES),
-	capability: ANTHROPIC_THINKING_VISION_TOOL_CAPABILITY
-}];
-function normalizeModelName(modelName) {
-	return modelName.toLowerCase();
-}
-function hasPrefix(modelName, prefixes) {
-	return prefixes.some((prefix) => modelName.startsWith(prefix));
-}
-function isOpenAIReasoningModel(modelName) {
-	return /^o\d/.test(modelName);
-}
-function capabilityFromCatalog(modelName, catalog) {
-	const normalized = normalizeModelName(modelName);
-	for (const entry of catalog) if (entry.matches(normalized)) return entry.capability;
-	return UNKNOWN_CAPABILITY;
-}
-function getOpenAILegacyModelCapability(modelName) {
-	return capabilityFromCatalog(modelName, OPENAI_LEGACY_CAPABILITY_CATALOG);
-}
-function getOpenAIResponsesModelCapability(modelName) {
-	return capabilityFromCatalog(modelName, OPENAI_RESPONSES_CAPABILITY_CATALOG);
-}
-function getAnthropicModelCapability(modelName) {
-	return capabilityFromCatalog(modelName, ANTHROPIC_CAPABILITY_CATALOG);
-}
-function getGoogleGenAIModelCapability(modelName) {
-	const normalized = normalizeModelName(modelName);
-	if (!normalized.startsWith("gemini-")) return UNKNOWN_CAPABILITY;
-	if (!hasPrefix(normalized, GEMINI_CATALOGUED_PREFIXES)) return UNKNOWN_CAPABILITY;
-	if (normalized.startsWith("gemini-2.5-") || normalized.includes("thinking")) return GEMINI_THINKING_MULTIMODAL_TOOL_CAPABILITY;
-	return GEMINI_MULTIMODAL_TOOL_CAPABILITY;
-}
-function usesOpenAIResponsesDeveloperRole(modelName) {
-	const normalized = normalizeModelName(modelName);
-	if (OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS.has(normalized)) return true;
-	for (const cataloguedModel of OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS) if (normalized.startsWith(cataloguedModel + "-")) return true;
-	return false;
-}
 //#endregion
 //#region ../kosong/src/providers/request-auth.ts
 function requireProviderApiKey(providerName, auth, defaultApiKey) {
@@ -9552,9 +9392,6 @@ var AnthropicChatProvider = class {
 			...this._generationKwargs
 		};
 	}
-	getCapability(model) {
-		return getAnthropicModelCapability(model ?? this._model);
-	}
 	async generate(systemPrompt, tools, history, options) {
 		const system = systemPrompt ? [{
 			type: "text",
@@ -9695,6 +9532,166 @@ var AnthropicChatProvider = class {
 	}
 };
 //#endregion
+//#region ../kosong/src/providers/capability-registry.ts
+const OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS = new Set([
+	"gpt-4.1",
+	"gpt-4.1-mini",
+	"gpt-4.1-nano",
+	"gpt-5-codex",
+	"o1",
+	"o1-mini",
+	"o1-pro",
+	"o3",
+	"o3-mini",
+	"o3-pro",
+	"o4-mini"
+]);
+const OPENAI_VISION_TOOL_PREFIXES = [
+	"gpt-4o",
+	"gpt-4-turbo",
+	"gpt-4.1",
+	"gpt-4.5"
+];
+const CLAUDE_VISION_TOOL_PREFIXES = [
+	"claude-3-",
+	"claude-3.5-",
+	"claude-3.7-"
+];
+const CLAUDE_THINKING_VISION_TOOL_PREFIXES = [
+	"claude-opus-4",
+	"claude-sonnet-4",
+	"claude-haiku-4",
+	"claude-fable"
+];
+const GEMINI_CATALOGUED_PREFIXES = [
+	"gemini-1.5-pro",
+	"gemini-1.5-flash",
+	"gemini-2.0-flash",
+	"gemini-2.0-pro",
+	"gemini-2.5-pro",
+	"gemini-2.5-flash"
+];
+const OPENAI_REASONING_CAPABILITY = Object.freeze({
+	image_in: false,
+	video_in: false,
+	audio_in: false,
+	thinking: true,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const OPENAI_VISION_TOOL_CAPABILITY = Object.freeze({
+	image_in: true,
+	video_in: false,
+	audio_in: false,
+	thinking: false,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const OPENAI_TEXT_TOOL_CAPABILITY = Object.freeze({
+	image_in: false,
+	video_in: false,
+	audio_in: false,
+	thinking: false,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const ANTHROPIC_VISION_TOOL_CAPABILITY = Object.freeze({
+	image_in: true,
+	video_in: false,
+	audio_in: false,
+	thinking: false,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const ANTHROPIC_THINKING_VISION_TOOL_CAPABILITY = Object.freeze({
+	image_in: true,
+	video_in: false,
+	audio_in: false,
+	thinking: true,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const GEMINI_MULTIMODAL_TOOL_CAPABILITY = Object.freeze({
+	image_in: true,
+	video_in: true,
+	audio_in: true,
+	thinking: false,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const GEMINI_THINKING_MULTIMODAL_TOOL_CAPABILITY = Object.freeze({
+	image_in: true,
+	video_in: true,
+	audio_in: true,
+	thinking: true,
+	tool_use: true,
+	max_context_tokens: 0
+});
+const OPENAI_LEGACY_CAPABILITY_CATALOG = [
+	{
+		matches: isOpenAIReasoningModel,
+		capability: OPENAI_REASONING_CAPABILITY
+	},
+	{
+		matches: (name) => hasPrefix(name, OPENAI_VISION_TOOL_PREFIXES),
+		capability: OPENAI_VISION_TOOL_CAPABILITY
+	},
+	{
+		matches: (name) => name.startsWith("gpt-3.5-turbo"),
+		capability: OPENAI_TEXT_TOOL_CAPABILITY
+	}
+];
+const OPENAI_RESPONSES_CAPABILITY_CATALOG = [{
+	matches: isOpenAIReasoningModel,
+	capability: OPENAI_REASONING_CAPABILITY
+}, {
+	matches: (name) => hasPrefix(name, OPENAI_VISION_TOOL_PREFIXES),
+	capability: OPENAI_VISION_TOOL_CAPABILITY
+}];
+const ANTHROPIC_CAPABILITY_CATALOG = [{
+	matches: (name) => hasPrefix(name, CLAUDE_VISION_TOOL_PREFIXES),
+	capability: ANTHROPIC_VISION_TOOL_CAPABILITY
+}, {
+	matches: (name) => hasPrefix(name, CLAUDE_THINKING_VISION_TOOL_PREFIXES),
+	capability: ANTHROPIC_THINKING_VISION_TOOL_CAPABILITY
+}];
+function normalizeModelName(modelName) {
+	return modelName.toLowerCase();
+}
+function hasPrefix(modelName, prefixes) {
+	return prefixes.some((prefix) => modelName.startsWith(prefix));
+}
+function isOpenAIReasoningModel(modelName) {
+	return /^o\d/.test(modelName);
+}
+function capabilityFromCatalog(modelName, catalog) {
+	const normalized = normalizeModelName(modelName);
+	for (const entry of catalog) if (entry.matches(normalized)) return entry.capability;
+	return UNKNOWN_CAPABILITY;
+}
+function getOpenAILegacyModelCapability(modelName) {
+	return capabilityFromCatalog(modelName, OPENAI_LEGACY_CAPABILITY_CATALOG);
+}
+function getOpenAIResponsesModelCapability(modelName) {
+	return capabilityFromCatalog(modelName, OPENAI_RESPONSES_CAPABILITY_CATALOG);
+}
+function getAnthropicModelCapability(modelName) {
+	return capabilityFromCatalog(modelName, ANTHROPIC_CAPABILITY_CATALOG);
+}
+function getGoogleGenAIModelCapability(modelName) {
+	const normalized = normalizeModelName(modelName);
+	if (!normalized.startsWith("gemini-")) return UNKNOWN_CAPABILITY;
+	if (!hasPrefix(normalized, GEMINI_CATALOGUED_PREFIXES)) return UNKNOWN_CAPABILITY;
+	if (normalized.startsWith("gemini-2.5-") || normalized.includes("thinking")) return GEMINI_THINKING_MULTIMODAL_TOOL_CAPABILITY;
+	return GEMINI_MULTIMODAL_TOOL_CAPABILITY;
+}
+function usesOpenAIResponsesDeveloperRole(modelName) {
+	const normalized = normalizeModelName(modelName);
+	if (OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS.has(normalized)) return true;
+	for (const cataloguedModel of OPENAI_RESPONSES_DEVELOPER_ROLE_MODELS) if (normalized.startsWith(cataloguedModel + "-")) return true;
+	return false;
+}
+//#endregion
 //#region ../../node_modules/.pnpm/retry@0.13.1/node_modules/retry/lib/retry_operation.js
 var require_retry_operation$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function RetryOperation(timeouts, options) {
@@ -38362,9 +38359,6 @@ var GoogleGenAIChatProvider = class {
 			...this._generationKwargs
 		};
 	}
-	getCapability(model) {
-		return getGoogleGenAIModelCapability(model ?? this._model);
-	}
 	async generate(systemPrompt, tools, history, options) {
 		if (options?.signal?.aborted === true) throw createAbortError();
 		const contents = messagesToGoogleGenAIContents(history);
@@ -38746,9 +38740,29 @@ function normalizeProperty(node) {
 		if (Array.isArray(enumValues) && enumValues.length > 0) node["type"] = inferTypeFromValues(enumValues);
 		else if (hasOwn$2(node, "const")) node["type"] = inferTypeFromValues([node["const"]]);
 		else node["type"] = inferTypeFromStructure(node);
+	} else if (!hasAnyKey(node, TYPE_COMPLETION_SKIP_KEYS) && typeof node["type"] === "string") {
+		const enumValues = node["enum"];
+		if (Array.isArray(enumValues) && enumValues.length > 0) try {
+			const inferred = inferTypeFromValues(enumValues);
+			if (node["type"] !== inferred) {
+				node["type"] = inferred;
+				removeIrrelevantStructureKeys(node, inferred);
+			}
+		} catch {}
+		else if (hasOwn$2(node, "const")) try {
+			const inferred = inferTypeFromValues([node["const"]]);
+			if (node["type"] !== inferred) {
+				node["type"] = inferred;
+				removeIrrelevantStructureKeys(node, inferred);
+			}
+		} catch {}
 	}
 	recurseSchema(node);
 }
+function removeIrrelevantStructureKeys(node, newType) {
+	if (newType !== "object") for (const key of OBJECT_STRUCTURE_KEYS) delete node[key];
+	if (newType !== "array") for (const key of ARRAY_STRUCTURE_KEYS) delete node[key];
+}
 function inferTypeFromStructure(schema) {
 	if (hasAnyKey(schema, OBJECT_STRUCTURE_KEYS)) return "object";
 	if (hasAnyKey(schema, ARRAY_STRUCTURE_KEYS)) return "array";
@@ -46219,9 +46233,6 @@ var KimiChatProvider = class {
 			throw convertOpenAIError(error);
 		}
 	}
-	getCapability(_model) {
-		return UNKNOWN_CAPABILITY;
-	}
 	withThinking(effort) {
 		const thinking = { type: effort === "off" ? "disabled" : "enabled" };
 		let reasoningEffort;
@@ -46526,9 +46537,6 @@ var OpenAILegacyChatProvider = class {
 			...normalizeGenerationKwargs(this._model, this._generationKwargs)
 		};
 	}
-	getCapability(model) {
-		return getOpenAILegacyModelCapability(model ?? this._model);
-	}
 	async generate(systemPrompt, tools, history, options) {
 		const messages = [];
 		if (systemPrompt) messages.push({
@@ -47247,9 +47255,6 @@ var OpenAIResponsesChatProvider = class {
 			...this._generationKwargs
 		};
 	}
-	getCapability(model) {
-		return getOpenAIResponsesModelCapability(model ?? this._model);
-	}
 	async generate(systemPrompt, tools, history, options) {
 		const input = [];
 		const normalizedHistory = normalizeToolCallIdsForProvider(history, OPENAI_RESPONSES_TOOL_CALL_ID_POLICY);
@@ -47337,6 +47342,25 @@ function createProvider(config) {
 		default: throw new Error(`Unknown provider type: ${String(config)}`);
 	}
 }
+/**
+* Look up the declared {@link ModelCapability} for a `(wire, model)` pair.
+*
+* This is a pure static table lookup — it does not instantiate a provider.
+* Unknown / uncatalogued models (and the Kimi wire, whose capabilities come
+* from the host's catalog/config rather than the model name) return
+* {@link UNKNOWN_CAPABILITY} so capability checks stay non-fatal.
+*/
+function getModelCapability(wire, modelName) {
+	switch (wire) {
+		case "anthropic": return getAnthropicModelCapability(modelName);
+		case "openai": return getOpenAILegacyModelCapability(modelName);
+		case "openai_responses": return getOpenAIResponsesModelCapability(modelName);
+		case "google-genai":
+		case "vertexai": return getGoogleGenAIModelCapability(modelName);
+		case "kimi": return UNKNOWN_CAPABILITY;
+		default: return UNKNOWN_CAPABILITY;
+	}
+}
 //#endregion
 //#region ../kosong/src/catalog.ts
 const KNOWN_WIRE_TYPES = [
@@ -54781,7 +54805,7 @@ function applyCompletionBudget(args) {
 }
 //#endregion
 //#region ../agent-core/src/agent/compaction/compaction-instruction.md?raw
-var compaction_instruction_default = "\n--- This message is a direct task, not part of the above conversation ---\n\nYou are now given a task to compact this conversation context according to specific priorities and output requirements.\n\nOutput text only. DO NOT CALL ANY TOOLS. Calling tools will be rejected and fails the task. You already have all the information you need in the conversation history. You have only one chance.\n\nThe goal of compaction is to keep essential code patterns, technical details, and architectural decisions for continuing development without losing context after the above messages are cleared work.\n\n{{ customInstruction }}\n\n<!-- Compression Priorities (in order) -->\n\n1. **Current Task State**: What is being worked on RIGHT NOW\n2. **Errors & Solutions**: All encountered errors and their resolutions\n3. **Code Evolution**: Final working versions only (remove intermediate attempts)\n4. **System Context**: Project structure, dependencies, environment setup\n5. **Design Decisions**: Architectural choices and their rationale\n6. **TODO Items**: Unfinished tasks and known issues\n\n<!-- Required Output Structure -->\n\n## Current Focus\n\n[What we're working on now]\n\n## Environment\n\n- [Key setup/config points]\n- ...\n\n## Completed Tasks\n\n- [Task]: [Brief outcome]\n- ...\n\n## Active Issues\n\n- [Issue]: [Status/Next steps]\n- ...\n\n## Code State\n\n### [Critical file name]\n\n[Brief description of the file's purpose and current state]\n\n```\n[The latest version of critical code snippets in this file, <20 lines]\n```\n\n### [Critical file name]\n\n- [Useful classes/methods/functions]: [Brief description/usage]\n- ...\n\n<!-- Omit non-critical code, intermediate attempts, and resolved errors -->\n\n## Important Context\n\n- [Any crucial information not covered above]\n- ...\n\n## All User Messages\n\n- [Detailed non tool use user message]\n- ...\n";
+var compaction_instruction_default = "\n--- This message is a direct task, not part of the above conversation ---\n\nYou are now given a task to compact this conversation context according to specific priorities and output requirements.\n\nOutput text only. DO NOT CALL ANY TOOLS. Calling tools will be rejected and fails the task. You already have all the information you need in the conversation history. You have only one chance.\n\nThe goal of compaction is to keep essential code patterns, technical details, and architectural decisions for continuing development without losing context after the above messages are cleared work.\n\n{{ customInstruction }}\n\n<!-- Compression Priorities (in order) -->\n\n1. **Current Task State**: What is being worked on RIGHT NOW\n2. **Errors & Solutions**: All encountered errors and their resolutions\n3. **Code Evolution**: Final working versions only (remove intermediate attempts)\n4. **System Context**: Project structure, dependencies, environment setup\n5. **Design Decisions**: Architectural choices and their rationale\n6. **TODO Items**: Unfinished tasks and known issues\n\n<!-- Required Output Structure -->\n\n## Current Focus\n\n[What we're working on now]\n\n## Environment\n\n- [Key setup/config points]\n- ...\n\n## Completed Tasks\n\n- [Task]: [Brief outcome]\n- ...\n\n## Active Issues\n\n- [Issue]: [Status/Next steps]\n- ...\n\n## Code State\n\n### [Critical file name]\n\n[Brief description of the file's purpose and current state]\n\n```\n[The latest version of critical code snippets in this file, <20 lines]\n```\n\n### [Critical file name]\n\n- [Useful classes/methods/functions]: [Brief description/usage]\n- ...\n\n<!-- Omit non-critical code, intermediate attempts, and resolved errors -->\n\n## Important Context\n\n- [Any crucial information not covered above]\n- ...\n\n## All User Messages\n\n- [Detailed non tool use user message]\n- ...\n\n<!-- Must output a summary matching the above template in the **final answer**, not in thinking. -->\n";
 //#endregion
 //#region ../agent-core/src/agent/compaction/render-messages.ts
 function renderMessagesToText(messages) {
@@ -55074,7 +55098,9 @@ var DefaultCompactionStrategy = class {
 *     results for one exchange land consecutively before the next non-tool
 *     message. So if the suffix starts with a tool result, its `asst_w_tc`
 *     must be in the compacted prefix, which would orphan that result
-*     (e.g. splitting between tool_a and tool_b of a parallel call).
+*     (e.g. splitting between tool_a and tool_b of a parallel call), AND
+*   - the compacted prefix itself does not end with an unresolved tool
+*     exchange, because pending tool results must remain in the retained tail.
 */
 function canSplitAfter(messages, index) {
 	const m = messages[index];
@@ -55082,8 +55108,23 @@ function canSplitAfter(messages, index) {
 	if (m.role === "user") return false;
 	if (m.role === "assistant" && m.toolCalls.length > 0) return false;
 	if (messages[index + 1]?.role === "tool") return false;
+	if (prefixEndsWithOpenToolExchange(messages, index)) return false;
 	return true;
 }
+function prefixEndsWithOpenToolExchange(messages, index) {
+	if (messages[index]?.role !== "tool") return false;
+	let toolResultCount = 0;
+	for (let i = index; i >= 0; i--) {
+		const message = messages[i];
+		if (message === void 0) return false;
+		if (message.role === "tool") {
+			toolResultCount++;
+			continue;
+		}
+		return message.role === "assistant" && message.toolCalls.length > toolResultCount;
+	}
+	return false;
+}
 var CompactionTruncatedError = class extends Error {
 	constructor() {
 		super("Compaction response was truncated before producing a complete summary.");
@@ -56964,6 +57005,7 @@ const TOOL_ERROR_STATUS = "<system>ERROR: Tool execution failed.</system>";
 const TOOL_EMPTY_STATUS = "<system>Tool output is empty.</system>";
 const TOOL_EMPTY_ERROR_STATUS = "<system>ERROR: Tool execution failed. Tool output is empty.</system>";
 const TOOL_OUTPUT_EMPTY_TEXT = "Tool output is empty.";
+const TOOL_INTERRUPTED_ON_RESUME_OUTPUT = "Tool execution was interrupted before its result was recorded. Do not assume the tool completed successfully.";
 var ContextMemory = class {
 	agent;
 	_history = [];
@@ -57119,6 +57161,20 @@ var ContextMemory = class {
 		this.clear();
 		this.pushHistory(...trimTrailingOpenToolExchange(source.project(source.history)));
 	}
+	finishResume() {
+		const interruptedToolCallIds = [...this.pendingToolResultIds];
+		this.openSteps.clear();
+		if (interruptedToolCallIds.length === 0) return;
+		for (const toolCallId of interruptedToolCallIds) this.appendLoopEvent({
+			type: "tool.result",
+			parentUuid: toolCallId,
+			toolCallId,
+			result: {
+				output: TOOL_INTERRUPTED_ON_RESUME_OUTPUT,
+				isError: true
+			}
+		});
+	}
 	appendLoopEvent(event) {
 		this.agent.records.logRecord({
 			type: "context.append_loop_event",
@@ -62456,8 +62512,7 @@ var AgentRecords = class {
 			this.persistence.append({
 				type: "metadata",
 				protocol_version: "1.4",
-				created_at: Date.now(),
-				app_version: this.agent.appVersion
+				created_at: Date.now()
 			});
 			this.metadataInitialized = true;
 		}
@@ -62506,17 +62561,6 @@ var AgentRecords = class {
 			await this.persistence.flush();
 		}
 		if (this.agent.blobStore !== void 0) for (const msg of this.agent.context.history) await this.agent.blobStore.rehydrateParts(msg.content);
-		const firstRecord = replayedRecords[0];
-		if (firstRecord?.type === "metadata" && firstRecord.app_version !== this.agent.appVersion) {
-			this.persistence.append({
-				type: "metadata",
-				protocol_version: "1.4",
-				created_at: Date.now(),
-				app_version: this.agent.appVersion,
-				resumed: true
-			});
-			await this.persistence.flush();
-		}
 		return { warning };
 	}
 	async flush() {
@@ -62527,13 +62571,14 @@ var AgentRecords = class {
 //#region ../agent-core/src/agent/replay/index.ts
 var ReplayBuilder = class {
 	agent;
+	postRestoring = false;
 	captureLiveRecords = false;
 	records = [];
 	constructor(agent) {
 		this.agent = agent;
 	}
 	push(record) {
-		if (this.captureLiveRecords || this.agent.records.restoring) this.records.push({
+		if (this.captureLiveRecords || this.agent.records.restoring || this.postRestoring) this.records.push({
 			...record,
 			time: this.agent.records.restoring?.time ?? Date.now()
 		});
@@ -66625,7 +66670,7 @@ function isWithin$1(child, parent) {
 //#endregion
 //#region ../agent-core/src/skill/registry.ts
 const LISTING_DESC_MAX = 250;
-var SkillRegistry = class {
+var SessionSkillRegistry = class {
 	byName = /* @__PURE__ */ new Map();
 	byPluginAndName = /* @__PURE__ */ new Map();
 	roots = [];
@@ -66789,6 +66834,7 @@ function renderSkillAttributes(input) {
 		["name", input.skillName],
 		["trigger", input.trigger],
 		["source", input.skillSource],
+		["dir", input.skillDir],
 		["args", input.skillArgs]
 	].filter((item) => item[1] !== void 0).map(([name, value]) => ` ${name}="${escapeXml(value)}"`).join("");
 }
@@ -66813,7 +66859,8 @@ var SkillManager = class {
 				skillName: skill.name,
 				skillArgs,
 				skillContent,
-				skillSource: skill.source
+				skillSource: skill.source,
+				skillDir: skill.dir
 			})
 		}];
 		this.recordActivation({
@@ -79838,7 +79885,7 @@ function stableHash8(input) {
 /**
 * Synthetic `mcp__<server>__authenticate` tool.
 *
-* When an MCP HTTP server lands in the `needs-auth` state — i.e. its
+* When a remote MCP server lands in the `needs-auth` state — i.e. its
 * initial connection failed with a 401 / `UnauthorizedError` and no static
 * bearer token is configured — the {@link ToolManager} swaps the real MCP
 * tool list for this single tool. Calling it:
@@ -80195,12 +80242,15 @@ async function collectEntries(kaos, dirPath, maxWidth) {
 		readable: true
 	};
 }
+function shouldCollapseDirectory(entry, options) {
+	return options.collapseHiddenDirs === true && entry.isDir && entry.name.startsWith(".");
+}
 /**
 * Return a 2-level tree listing of `workDir` suitable for inclusion in a
 * tool error message. Returns `"(empty directory)"` if the directory is
 * empty, or an error marker line if the directory itself is unreadable.
 */
-async function listDirectory(kaos, workDir = kaos.getcwd()) {
+async function listDirectory(kaos, workDir = kaos.getcwd(), options = {}) {
 	const lines = [];
 	const { entries, total, readable } = await collectEntries(kaos, workDir, 30);
 	if (!readable) return "[not readable]";
@@ -80213,6 +80263,7 @@ async function listDirectory(kaos, workDir = kaos.getcwd()) {
 		const connector = isLast ? "└── " : "├── ";
 		if (isDir) {
 			lines.push(`${connector}${name}/`);
+			if (shouldCollapseDirectory(entry, options)) continue;
 			const childPrefix = isLast ? "    " : "│   ";
 			const child = await collectEntries(kaos, join$1(workDir, name), 10);
 			if (!child.readable) {
@@ -80236,10 +80287,11 @@ async function listDirectory(kaos, workDir = kaos.getcwd()) {
 //#endregion
 //#region ../agent-core/src/profile/context.ts
 const AGENTS_MD_MAX_BYTES = 32 * 1024;
+const AGENTS_MD_TRUNCATION_MARKER = "<!-- Some AGENTS.md files were truncated or omitted to fit the 32 KB budget -->";
 const S_IFMT$3 = 61440;
 const S_IFREG$1 = 32768;
 async function prepareSystemPromptContext(kaos, brandHome) {
-	const [cwdListing, agentsMd] = await Promise.all([listDirectory(kaos), loadAgentsMd(kaos, brandHome)]);
+	const [cwdListing, agentsMd] = await Promise.all([listDirectory(kaos, void 0, { collapseHiddenDirs: true }), loadAgentsMd(kaos, brandHome)]);
 	return {
 		cwdListing,
 		agentsMd
@@ -80318,6 +80370,7 @@ async function isFile$2(kaos, path) {
 function renderAgentFiles(files) {
 	if (files.length === 0) return "";
 	let remaining = AGENTS_MD_MAX_BYTES;
+	let didTruncate = false;
 	const budgeted = Array.from({ length: files.length });
 	for (let i = files.length - 1; i >= 0; i--) {
 		const file = files[i];
@@ -80331,17 +80384,22 @@ function renderAgentFiles(files) {
 				content: ""
 			};
 			remaining = 0;
+			didTruncate = true;
 			continue;
 		}
 		let content = file.content;
-		if (byteLength(content) > remaining) content = truncateUtf8(content, remaining).trim();
+		if (byteLength(content) > remaining) {
+			content = truncateUtf8(content, remaining).trim();
+			didTruncate = true;
+		}
 		remaining -= byteLength(content);
 		budgeted[i] = {
 			path: file.path,
 			content
 		};
 	}
-	return budgeted.filter((file) => file !== void 0 && file.content.length > 0).map((file) => `${annotationFor(file.path)}${file.content}`).join("\n\n");
+	const rendered = budgeted.filter((file) => file !== void 0 && file.content.length > 0).map((file) => `${annotationFor(file.path)}${file.content}`).join("\n\n");
+	return didTruncate ? `${AGENTS_MD_TRUNCATION_MARKER}\n${rendered}` : rendered;
 }
 function truncateUtf8(text, maxBytes) {
 	let result = text;
@@ -80540,7 +80598,7 @@ const PROFILE_SOURCES = {
 	"profile/default/coder.yaml": coder_default,
 	"profile/default/explore.yaml": explore_default,
 	"profile/default/plan.yaml": "extends: agent\nname: plan\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    Before designing your implementation plan, consider whether you fully understand the codebase areas relevant to the task. If not, recommend the parent agent to use the explore agent (subagent_type=\"explore\") to investigate key questions first. In your response, clearly state:\n    1. What you already know from the information provided\n    2. What questions remain unanswered that would benefit from explore agent investigation\n    3. Your implementation plan (either preliminary if questions remain, or final if sufficient context exists)\nwhenToUse: |\n  Use this agent when the parent agent needs a step-by-step implementation plan, key file identification, and architectural trade-off analysis before code changes are made.\ntools:\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - WebSearch\n  - FetchURL\n",
-	"profile/default/system.md": "You are Kimi Code CLI, an interactive general AI agent running on a user's computer.\n\nYour primary goal is to help users with software engineering tasks by taking action — use the tools available to you to make real changes on the user's system. You should also answer questions when asked. Always adhere strictly to the following system instructions and the user's requirements.\n\n{{ ROLE_ADDITIONAL }}\n\n# Prompt and Tool Use\n\nThe user's messages may contain questions and/or task descriptions in natural language, code snippets, logs, file paths, or other forms of information. Read them, understand them and do what the user requested. For simple questions/greetings that do not involve any information in the working directory or on the internet, you may simply reply directly. For anything else, default to taking action with tools. When the request could be interpreted as either a question to answer or a task to complete, treat it as a task.\n\nWhen handling the user's request, if it involves creating, modifying, or running code or files, you MUST use the appropriate tools (e.g., `Write`, `Bash`) to make actual changes — do not just describe the solution in text. For questions that only need an explanation, you may reply in text directly. When calling tools, do not provide explanations because the tool calls themselves should be self-explanatory. You MUST follow the description of each tool and its parameters when calling tools.\n\nIf the `Agent` tool is available, you can use it to delegate a focused subtask to a subagent instance. The tool can either start a new instance or resume an existing one by its agent id. Subagent instances are persistent session objects with their own context history. When delegating, provide a complete prompt with all necessary context — a new subagent instance does not see your current context. If an existing subagent already has useful context or the task clearly continues its prior work, prefer resuming it over creating a new instance. Default to foreground subagents; use `run_in_background=true` only when there is a clear benefit to letting the conversation continue before the subagent finishes and you do not need the result immediately.\n\nYou have the capability to output any number of tool calls in a single response. If you anticipate making multiple non-interfering tool calls, you are HIGHLY RECOMMENDED to make them in parallel to significantly improve efficiency. This is very important to your performance.\n\nThe results of the tool calls will be returned to you in a tool message. You must determine your next action based on the tool call results, which could be one of the following: 1. Continue working on the task, 2. Inform the user that the task is completed or has failed, or 3. Ask the user for more information.\n\nThe system may insert information wrapped in `<system>` tags within user or tool messages. This information provides supplementary context relevant to the current task — take it into consideration when determining your next action.\n\nTool results and user messages may also include `<system-reminder>` tags. Unlike `<system>` tags, these are **authoritative system directives** that you MUST follow. They bear no direct relation to the specific tool results or user messages in which they appear. Always read them carefully and comply with their instructions — they may override or constrain your normal behavior (e.g., restricting you to read-only actions during plan mode).\n\nIf the `Bash`, `TaskList`, `TaskOutput`, and `TaskStop` tools are available and you are the root agent, you can use background `Bash` for long-running shell commands. Launch it via `Bash` with `run_in_background=true` and a short `description`. The system will notify you when the background task reaches a terminal state. Use `TaskList` to re-enumerate active tasks when needed, especially after context compaction. Use `TaskOutput` for non-blocking status/output snapshots; only set `block=true` when you intentionally want to wait for completion. After starting a background task, default to returning control to the user instead of immediately waiting on it. Use `TaskStop` only when you need to cancel the task. For human users in the interactive shell, the only task-management slash command is `/tasks`. Do not tell users to run `/task`, `/tasks list`, `/tasks output`, `/tasks stop`, or any other invented slash subcommands. If you are a subagent or these tools are not available, do not assume you can create or control background tasks.\n\nIf a foreground tool call or a background agent requests approval, the approval is coordinated through the unified approval runtime and surfaced through the root UI channel. Do not assume approvals are local to a single subagent turn.\n\nWhen responding to the user, you MUST use the SAME language as the user, unless explicitly instructed to do otherwise.\n\n# General Guidelines for Coding\n\nWhen building something from scratch, you should:\n\n- Understand the user's requirements.\n- Ask the user for clarification if there is anything unclear.\n- Design the architecture and make a plan for the implementation.\n- Write the code in a modular and maintainable way.\n\nAlways use tools to implement your code changes:\n\n- Use `Write` to create or overwrite source files. Code that only appears in your text response is NOT saved to the file system and will not take effect.\n- Use `Bash` to run and test your code after writing it.\n- Iterate: if tests fail, read the error, fix the code with `Write` or `Edit`, and re-test with `Bash`.\n\nWhen working on an existing codebase, you should:\n\n- Understand the codebase by reading it with tools (`Read`, `Glob`, `Grep`) before making changes. Identify the ultimate goal and the most important criteria to achieve the goal.\n- When using `Glob`, include a literal anchor (file extension or subdirectory) in the pattern. Pure wildcards like `*` or `**/*` are rejected by the tool.\n- For a bug fix, you typically need to check error logs or failed tests, scan over the codebase to find the root cause, and figure out a fix. If user mentioned any failed tests, you should make sure they pass after the changes.\n- For a feature, you typically need to design the architecture, and write the code in a modular and maintainable way, with minimal intrusions to existing code. Add new tests if the project already has tests.\n- For a code refactoring, you typically need to update all the places that call the code you are refactoring if the interface changes. DO NOT change any existing logic especially in tests, focus only on fixing any errors caused by the interface changes.\n- Make MINIMAL changes to achieve the goal. This is very important to your performance.\n- Follow the coding style of existing code in the project.\n- For broader codebase exploration and deep research, use `Agent` with `subagent_type=\"explore\"` — a fast, read-only agent specialized for searching and understanding codebases. Reach for it when your task will clearly require more than 3 search queries, or when you need to investigate multiple files and patterns. Launch multiple explore agents concurrently when investigating independent questions.\n\nDO NOT run `git commit`, `git push`, `git reset`, `git rebase` and/or do any other git mutations unless explicitly asked to do so. Ask for confirmation each time when you need to do git mutations, even if the user has confirmed in earlier conversations.\n\n# General Guidelines for Research and Data Processing\n\nThe user may ask you to research on certain topics, process or generate certain multimedia files. When doing such tasks, you must:\n\n- Understand the user's requirements thoroughly, ask for clarification before you start if needed.\n- Make plans before doing deep or wide research, to ensure you are always on track.\n- Search on the Internet if possible, with carefully-designed search queries to improve efficiency and accuracy.\n- Use proper tools or shell commands or Python packages to process or generate images, videos, PDFs, docs, spreadsheets, presentations, or other multimedia files. Detect if there are already such tools in the environment. If you have to install third-party tools/packages, you MUST ensure that they are installed in a virtual/isolated environment.\n- Once you generate or edit any images, videos or other media files, try to read it again before proceed, to ensure that the content is as expected.\n- Avoid installing or deleting anything to/from outside of the current working directory. If you have to do so, ask the user for confirmation.\n\n# Working Environment\n\n## Operating System\n\nYou are running on **{{ KIMI_OS }}**. The Bash tool executes commands using **{{ KIMI_SHELL }}**.\n{% if KIMI_OS == \"Windows\" %}\n\nIMPORTANT: You are on Windows. The Bash tool runs through Git Bash, so use Unix shell syntax inside Bash commands — `/dev/null` not `NUL`, and forward slashes in paths. For file operations, always prefer the built-in tools (Read, Write, Edit, Glob, Grep) over Bash commands — they work reliably across all platforms.\n{% endif %}\n\nThe operating environment is not in a sandbox. Any actions you do will immediately affect the user's system. So you MUST be extremely cautious. Unless being explicitly instructed to do so, you should never access (read/write/execute) files outside of the working directory.\n\n## Date and Time\n\nThe current date and time in ISO format is `{{ KIMI_NOW }}`. This is only a reference for you when searching the web, or checking file modification time, etc. If you need the exact time, use Bash tool with proper command.\n\n## Working Directory\n\nThe current working directory is `{{ KIMI_WORK_DIR }}`. This should be considered as the project root if you are instructed to perform tasks on the project. Every file system operation will be relative to the working directory if you do not explicitly specify the absolute path. Tools may require absolute paths for some parameters, IF SO, YOU MUST use absolute paths for these parameters.\n\nThe directory listing of current working directory is:\n\n```\n{{ KIMI_WORK_DIR_LS }}\n```\n\nUse this as your basic understanding of the project structure. The tree only shows the first two levels; entries marked \"... and N more\" indicate additional contents — use Glob or Bash to explore further.\n{% if KIMI_ADDITIONAL_DIRS_INFO %}\n\n## Additional Directories\n\nThe following directories have been added to the workspace. You can read, write, search, and glob files in these directories as part of your workspace scope.\n\n{{ KIMI_ADDITIONAL_DIRS_INFO }}\n{% endif %}\n\n# Project Information\n\nMarkdown files named `AGENTS.md` usually contain the background, structure, coding styles, user preferences and other relevant information about the project. You should use this information to understand the project and the user's preferences. `AGENTS.md` files may exist at different locations in the project, but typically there is one in the project root.\n\n> Why `AGENTS.md`?\n>\n> `README.md` files are for humans: quick starts, project descriptions, and contribution guidelines. `AGENTS.md` complements this by containing the extra, sometimes detailed context coding agents need: build steps, tests, and conventions that might clutter a README or aren’t relevant to human contributors.\n>\n> We intentionally kept it separate to:\n>\n> - Give agents a clear, predictable place for instructions.\n> - Keep `README`s concise and focused on human contributors.\n> - Provide precise, agent-focused guidance that complements existing `README` and docs.\n\nThe `AGENTS.md` instructions (merged from all applicable directories):\n\n`````````\n{{ KIMI_AGENTS_MD }}\n`````````\n\n`AGENTS.md` files can appear at any level of the project directory tree, including inside `.kimi-code/` directories. Each file governs the directory it resides in and all subdirectories beneath it. When multiple `AGENTS.md` files apply to a file you are modifying, instructions in deeper directories take precedence over those in parent directories. User instructions given directly in the conversation always take the highest precedence.\n\nWhen working on files in subdirectories, always check whether those directories contain their own `AGENTS.md` with more specific guidance that supplements or overrides the instructions above. You may also check `README`/`README.md` files for more information about the project.\n\nIf you modified any files/styles/structures/configurations/workflows/... mentioned in `AGENTS.md` files, you MUST update the corresponding `AGENTS.md` files to keep them up-to-date.\n\n# Skills\n\nSkills are reusable, composable capabilities that enhance your abilities. Each skill is either a self-contained directory with a `SKILL.md` file or a standalone `.md` file that contains instructions, examples, and/or reference material.\n\n## What are skills?\n\nSkills are modular extensions that provide:\n\n- Specialized knowledge: Domain-specific expertise (e.g., PDF processing, data analysis)\n- Workflow patterns: Best practices for common tasks\n- Tool integrations: Pre-configured tool chains for specific operations\n- Reference material: Documentation, templates, and examples\n\n## Available skills\n\nSkills are grouped by scope (`Project`, `User`, `Extra`, `Built-in`) so you can tell where each came from. When the user refers to \"the skill in this project\" or \"the user-scope skill\", use the scope heading to disambiguate. When multiple scopes define a skill with the same name, the more specific scope takes precedence: **Project overrides User overrides Extra overrides Built-in**.\n\n{{ KIMI_SKILLS }}\n\n## How to use skills\n\nIdentify the skills that are likely to be useful for the tasks you are currently working on, read the skill file for detailed instructions, guidelines, scripts and more.\n\nOnly read skill details when needed to conserve the context window.\n\n# Ultimate Reminders\n\nAt any time, you should be HELPFUL, CONCISE, and ACCURATE. Be thorough in your actions — test what you build, verify what you change — not in your explanations.\n\n- Never diverge from the requirements and the goals of the task you work on. Stay on track.\n- Never give the user more than what they want.\n- Try your best to avoid any hallucination. Do fact checking before providing any factual information.\n- Think about the best approach, then take action decisively.\n- Do not give up too early.\n- ALWAYS, keep it stupidly simple. Do not overcomplicate things.\n- When the task requires creating or modifying files, always use tools to do so. Never treat displaying code in your response as a substitute for actually writing it to the file system.\n"
+	"profile/default/system.md": "You are Kimi Code CLI, an interactive general AI agent running on a user's computer.\n\nYour primary goal is to help users with software engineering tasks by taking action — use the tools available to you to make real changes on the user's system. You should also answer questions when asked. Always adhere strictly to the following system instructions and the user's requirements.\n\n{{ ROLE_ADDITIONAL }}\n\n# Prompt and Tool Use\n\nThe user's messages may contain questions and/or task descriptions in natural language, code snippets, logs, file paths, or other forms of information. Read them, understand them and do what the user requested. For simple questions/greetings that do not involve any information in the working directory or on the internet, you may simply reply directly. For anything else, default to taking action with tools. When the request could be interpreted as either a question to answer or a task to complete, treat it as a task.\n\nWhen handling the user's request, if it involves creating, modifying, or running code or files, you MUST use the appropriate tools (e.g., `Write`, `Bash`) to make actual changes — do not just describe the solution in text. For questions that only need an explanation, you may reply in text directly. When calling tools, do not provide detailed explanations or chain-of-thought. For simple requests, call tools directly. For non-trivial or multi-step tasks, first emit one short user-visible sentence in the same language as the user describing what you will do next, then call the tool(s). You MUST follow the description of each tool and its parameters when calling tools.\n\nIf the `Agent` tool is available, you can use it to delegate a focused subtask to a subagent instance. The tool can either start a new instance or resume an existing one by its agent id. Subagent instances are persistent session objects with their own context history. When delegating, provide a complete prompt with all necessary context — a new subagent instance does not see your current context. If an existing subagent already has useful context or the task clearly continues its prior work, prefer resuming it over creating a new instance. Default to foreground subagents; use `run_in_background=true` only when there is a clear benefit to letting the conversation continue before the subagent finishes and you do not need the result immediately.\n\nYou have the capability to output any number of tool calls in a single response. If you anticipate making multiple non-interfering tool calls, you are HIGHLY RECOMMENDED to make them in parallel to significantly improve efficiency. This is very important to your performance.\n\nThe results of the tool calls will be returned to you in a tool message. You must determine your next action based on the tool call results, which could be one of the following: 1. Continue working on the task, 2. Inform the user that the task is completed or has failed, or 3. Ask the user for more information.\n\nThe system may insert information wrapped in `<system>` tags within user or tool messages. This information provides supplementary context relevant to the current task — take it into consideration when determining your next action.\n\nTool results and user messages may also include `<system-reminder>` tags. Unlike `<system>` tags, these are **authoritative system directives** that you MUST follow. They bear no direct relation to the specific tool results or user messages in which they appear. Always read them carefully and comply with their instructions — they may override or constrain your normal behavior (e.g., restricting you to read-only actions during plan mode).\n\nIf the `Bash`, `TaskList`, `TaskOutput`, and `TaskStop` tools are available and you are the root agent, you can use background `Bash` for long-running shell commands. Launch it via `Bash` with `run_in_background=true` and a short `description`. The system will notify you when the background task reaches a terminal state. Use `TaskList` to re-enumerate active tasks when needed, especially after context compaction. Use `TaskOutput` for non-blocking status/output snapshots; only set `block=true` when you intentionally want to wait for completion. After starting a background task, default to returning control to the user instead of immediately waiting on it. Use `TaskStop` only when you need to cancel the task. For human users in the interactive shell, the only task-management slash command is `/tasks`. Do not tell users to run `/task`, `/tasks list`, `/tasks output`, `/tasks stop`, or any other invented slash subcommands. If you are a subagent or these tools are not available, do not assume you can create or control background tasks.\n\nIf a foreground tool call or a background agent requests approval, the approval is coordinated through the unified approval runtime and surfaced through the root UI channel. Do not assume approvals are local to a single subagent turn.\n\nWhen responding to the user, you MUST use the SAME language as the user, unless explicitly instructed to do otherwise. This applies to your reasoning and thinking as well, not just your final reply — think in the user's language, while keeping code, commands, identifiers, file paths, and technical terms in their original form.\n\n# General Guidelines for Coding\n\nWhen building something from scratch, you should:\n\n- Understand the user's requirements.\n- Ask the user for clarification if there is anything unclear.\n- Design the architecture and make a plan for the implementation.\n- Write the code in a modular and maintainable way.\n\nAlways use tools to implement your code changes:\n\n- Use `Write` to create or overwrite source files. Code that only appears in your text response is NOT saved to the file system and will not take effect.\n- Use `Bash` to run and test your code after writing it.\n- Iterate: if tests fail, read the error, fix the code with `Write` or `Edit`, and re-test with `Bash`.\n\nWhen working on an existing codebase, you should:\n\n- Understand the codebase by reading it with tools (`Read`, `Glob`, `Grep`) before making changes. Identify the ultimate goal and the most important criteria to achieve the goal.\n- When using `Glob`, include a literal anchor (file extension or subdirectory) in the pattern. Pure wildcards like `*` or `**/*` are rejected by the tool.\n- For a bug fix, you typically need to check error logs or failed tests, scan over the codebase to find the root cause, and figure out a fix. If user mentioned any failed tests, you should make sure they pass after the changes.\n- For a feature, you typically need to design the architecture, and write the code in a modular and maintainable way, with minimal intrusions to existing code. Add new tests if the project already has tests.\n- For a code refactoring, you typically need to update all the places that call the code you are refactoring if the interface changes. DO NOT change any existing logic especially in tests, focus only on fixing any errors caused by the interface changes.\n- Make MINIMAL changes to achieve the goal. This is very important to your performance.\n- Follow the coding style of existing code in the project.\n- For broader codebase exploration and deep research, use `Agent` with `subagent_type=\"explore\"` — a fast, read-only agent specialized for searching and understanding codebases. Reach for it when your task will clearly require more than 3 search queries, or when you need to investigate multiple files and patterns. Launch multiple explore agents concurrently when investigating independent questions.\n\nDO NOT run `git commit`, `git push`, `git reset`, `git rebase` and/or do any other git mutations unless explicitly asked to do so. Ask for confirmation each time when you need to do git mutations, even if the user has confirmed in earlier conversations.\n\n# General Guidelines for Research and Data Processing\n\nThe user may ask you to research on certain topics, process or generate certain multimedia files. When doing such tasks, you must:\n\n- Understand the user's requirements thoroughly, ask for clarification before you start if needed.\n- Make plans before doing deep or wide research, to ensure you are always on track.\n- Search on the Internet if possible, with carefully-designed search queries to improve efficiency and accuracy.\n- Use proper tools or shell commands or Python packages to process or generate images, videos, PDFs, docs, spreadsheets, presentations, or other multimedia files. Detect if there are already such tools in the environment. If you have to install third-party tools/packages, you MUST ensure that they are installed in a virtual/isolated environment.\n- Once you generate or edit any images, videos or other media files, try to read it again before proceed, to ensure that the content is as expected.\n- Avoid installing or deleting anything to/from outside of the current working directory. If you have to do so, ask the user for confirmation.\n\n# Working Environment\n\n## Operating System\n\nYou are running on **{{ KIMI_OS }}**. The Bash tool executes commands using **{{ KIMI_SHELL }}**.\n{% if KIMI_OS == \"Windows\" %}\n\nIMPORTANT: You are on Windows. The Bash tool runs through Git Bash, so use Unix shell syntax inside Bash commands — `/dev/null` not `NUL`, and forward slashes in paths. For file operations, always prefer the built-in tools (Read, Write, Edit, Glob, Grep) over Bash commands — they work reliably across all platforms.\n{% endif %}\n\nThe operating environment is not in a sandbox. Any actions you do will immediately affect the user's system. So you MUST be extremely cautious. Unless being explicitly instructed to do so, you should never access (read/write/execute) files outside of the working directory.\n\n## Date and Time\n\nThe current date and time in ISO format is `{{ KIMI_NOW }}`. This is only a reference for you when searching the web, or checking file modification time, etc. If you need the exact time, use Bash tool with proper command.\n\n## Working Directory\n\nThe current working directory is `{{ KIMI_WORK_DIR }}`. This should be considered as the project root if you are instructed to perform tasks on the project. Every file system operation will be relative to the working directory if you do not explicitly specify the absolute path. Tools may require absolute paths for some parameters, IF SO, YOU MUST use absolute paths for these parameters.\n\nUse this as your basic understanding of the project structure. The tree only shows the first two levels for normal directories; entries marked \"... and N more\" indicate additional contents. Hidden directories are shown as entries only; their contents are intentionally omitted to reduce noise.\n\nIf the task requires inspecting hidden paths, use `Glob` to discover them (for example `.*`, `.github/**`, `.agents/**`, or `.git/**`), use `Read` for known non-sensitive hidden files, and use `Grep` to search hidden file contents. `Grep` searches hidden files by default but excludes VCS metadata and sensitive files such as `.env`, credential stores, and SSH keys. Use `Bash` only for raw listings like `ls -A` when a dedicated tool is not appropriate.\n\nThe directory listing of current working directory is:\n\n```\n{{ KIMI_WORK_DIR_LS }}\n```\n{% if KIMI_ADDITIONAL_DIRS_INFO %}\n\n## Additional Directories\n\nThe following directories have been added to the workspace. You can read, write, search, and glob files in these directories as part of your workspace scope.\n\n{{ KIMI_ADDITIONAL_DIRS_INFO }}\n{% endif %}\n\n# Project Information\n\nMarkdown files named `AGENTS.md` contain agent-specific instructions such as project structure, build commands, coding style, testing expectations, and user preferences. `README.md` files are still useful for human-facing project context; `AGENTS.md` files are the focused instruction source for coding agents.\n\n`AGENTS.md` files can appear at any level of the project tree, including inside `.kimi-code/` directories. When multiple `AGENTS.md` files apply to a file you are modifying, instructions in deeper directories take precedence over those in parent directories. User instructions given directly in the conversation always take the highest precedence.\n\nWhen working on files in subdirectories, check whether those directories contain their own `AGENTS.md` with more specific guidance. You may also check `README`/`README.md` files for more information about the project. If you modified any files, styles, structures, configurations, workflows, or other conventions mentioned in `AGENTS.md` files, update the corresponding `AGENTS.md` files to keep them current.\n\nThe applicable `AGENTS.md` instructions are:\n\n```````\n{{ KIMI_AGENTS_MD }}\n```````\n\n# Skills\n\nSkills are reusable, composable capabilities that enhance your abilities. Each skill is either a self-contained directory with a `SKILL.md` file or a standalone `.md` file that contains instructions, examples, and/or reference material.\n\n## What are skills?\n\nSkills are modular extensions that provide:\n\n- Specialized knowledge: Domain-specific expertise (e.g., PDF processing, data analysis)\n- Workflow patterns: Best practices for common tasks\n- Tool integrations: Pre-configured tool chains for specific operations\n- Reference material: Documentation, templates, and examples\n\n## How to use skills\n\nIdentify the skills that are likely to be useful for the tasks you are currently working on, read the skill file for detailed instructions, guidelines, scripts and more.\n\nOnly read skill details when needed to conserve the context window.\n\n## Available skills\n\nSkills are grouped by scope (`Project`, `User`, `Extra`, `Built-in`) so you can tell where each came from. When the user refers to \"the skill in this project\" or \"the user-scope skill\", use the scope heading to disambiguate. When multiple scopes define a skill with the same name, the more specific scope takes precedence: **Project overrides User overrides Extra overrides Built-in**.\n\n{{ KIMI_SKILLS }}\n\n# Ultimate Reminders\n\nAt any time, you should be HELPFUL, CONCISE, and ACCURATE. Be thorough in your actions — test what you build, verify what you change — not in your explanations.\n\n- Never diverge from the requirements and the goals of the task you work on. Stay on track.\n- Never give the user more than what they want.\n- Try your best to avoid any hallucination. Do fact checking before providing any factual information.\n- Think about the best approach, then take action decisively.\n- Do not give up too early.\n- ALWAYS, keep it stupidly simple. Do not overcomplicate things.\n- When the task requires creating or modifying files, always use tools to do so. Never treat displaying code in your response as a substitute for actually writing it to the file system.\n"
 };
 const DEFAULT_INIT_PROMPT = init_default;
 const DEFAULT_AGENT_PROFILES = loadAgentProfilesFromSources([
@@ -82682,6 +82740,7 @@ var SkillTool = class SkillTool {
 				skillArgs,
 				skillContent,
 				skillSource: skill.source,
+				skillDir: skill.dir,
 				trigger: promptTrigger
 			})
 		}], origin);
@@ -88517,7 +88576,7 @@ function getSuffix(path) {
 	if (idx <= Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\")) + 1) return "";
 	return path.slice(idx).toLowerCase();
 }
-function detectFileType(path, header) {
+function detectFileType(path, header, type = "text") {
 	const suffix = getSuffix(path);
 	let mediaHint = null;
 	if (suffix in TEXT_MIME_BY_SUFFIX) mediaHint = {
@@ -88536,6 +88595,7 @@ function detectFileType(path, header) {
 		const buf = toBuffer(header);
 		const sniffed = sniffMediaFromMagic(buf);
 		if (sniffed) {
+			if (type === "media") return sniffed;
 			if (mediaHint) {
 				if (sniffed.kind !== mediaHint.kind) return {
 					kind: "unknown",
@@ -88545,6 +88605,7 @@ function detectFileType(path, header) {
 			}
 			return sniffed;
 		}
+		if (type === "media" && mediaHint !== null && mediaHint.kind !== "text") return mediaHint;
 		if (buf.includes(0)) return {
 			kind: "unknown",
 			mimeType: ""
@@ -88952,7 +89013,7 @@ var ReadMediaFileTool = class {
 			output: "File path cannot be empty."
 		};
 		try {
-			const fileType = detectFileType(safePath, await this.kaos.readBytes(safePath, 512));
+			const fileType = detectFileType(safePath, await this.kaos.readBytes(safePath, 512), "media");
 			if (fileType.kind === "text") return {
 				isError: true,
 				output: `"${args.path}" is a text file. Use Read to read text files.`
@@ -91258,7 +91319,7 @@ var ToolManager = class {
 	registerNeedsAuthMcpServer(mcp, entry) {
 		this.unregisterMcpServer(entry.name);
 		const oauthService = mcp.oauthService;
-		const serverUrl = mcp.getHttpServerUrl(entry.name);
+		const serverUrl = mcp.getRemoteServerUrl(entry.name);
 		if (oauthService === void 0 || serverUrl === void 0) return;
 		const tool = createMcpAuthTool({
 			serverName: entry.name,
@@ -91379,6 +91440,9 @@ var ToolManager = class {
 			toolServices?.urlFetcher && new FetchURLTool(toolServices.urlFetcher)
 		].filter((tool) => !!tool).map((tool) => [tool.name, tool]));
 	}
+	refreshBuiltinTools() {
+		this.initializeBuiltinTools();
+	}
 	createVideoUploader(provider) {
 		const uploadVideo = provider.uploadVideo?.bind(provider);
 		if (uploadVideo === void 0) return void 0;
@@ -91629,7 +91693,6 @@ var Agent$1 = class {
 	hooks;
 	log;
 	telemetry;
-	appVersion;
 	experimentalFlags;
 	blobStore;
 	records;
@@ -91663,7 +91726,6 @@ var Agent$1 = class {
 		this.subagentHost = options.subagentHost;
 		this.mcp = options.mcp;
 		this.hooks = options.hookEngine;
-		this.appVersion = options.appVersion;
 		this.log = options.log ?? log;
 		this.telemetry = options.telemetry ?? noopTelemetryClient;
 		this.experimentalFlags = options.experimentalFlags ?? new FlagResolver();
@@ -91770,11 +91832,17 @@ var Agent$1 = class {
 	}
 	async resume() {
 		const result = await this.records.replay();
-		this.goal.normalizeAfterReplay();
-		await this.background.loadFromDisk();
-		await this.background.reconcile();
-		await this.cron?.loadFromDisk();
-		this.turn.finishResume();
+		try {
+			this.replayBuilder.postRestoring = true;
+			this.goal.normalizeAfterReplay();
+			await this.background.loadFromDisk();
+			await this.background.reconcile();
+			await this.cron?.loadFromDisk();
+			this.context.finishResume();
+			this.turn.finishResume();
+		} finally {
+			this.replayBuilder.postRestoring = false;
+		}
 		return result;
 	}
 	get rpcMethods() {
@@ -92087,7 +92155,18 @@ const McpServerHttpConfigSchema = z.object({
 	bearerTokenEnvVar: z.string().min(1).optional(),
 	...McpServerCommonFields
 });
-const McpServerConfigDiscriminatedSchema = z.discriminatedUnion("transport", [McpServerStdioConfigSchema, McpServerHttpConfigSchema]);
+const McpServerSseConfigSchema = z.object({
+	transport: z.literal("sse"),
+	url: z.string().url(),
+	headers: StringRecordSchema.optional(),
+	bearerTokenEnvVar: z.string().min(1).optional(),
+	...McpServerCommonFields
+});
+const McpServerConfigDiscriminatedSchema = z.discriminatedUnion("transport", [
+	McpServerStdioConfigSchema,
+	McpServerHttpConfigSchema,
+	McpServerSseConfigSchema
+]);
 const McpServerConfigSchema = z.preprocess((raw) => {
 	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return raw;
 	const obj = raw;
@@ -95046,6 +95125,21 @@ function toMcpToolResult(result) {
 	};
 }
 //#endregion
+//#region ../agent-core/src/mcp/client-remote.ts
+function buildMcpRemoteHeaders(config, envLookup) {
+	const headers = { ...config.headers };
+	if (config.bearerTokenEnvVar !== void 0) {
+		const token = envLookup(config.bearerTokenEnvVar);
+		if (token === void 0 || token.length === 0) throw new KimiError(ErrorCodes.CONFIG_INVALID, `MCP ${config.transport.toUpperCase()} bearer token env var "${config.bearerTokenEnvVar}" is not set or is empty`);
+		for (const key of Object.keys(headers)) if (key.toLowerCase() === "authorization") delete headers[key];
+		headers["Authorization"] = `Bearer ${token}`;
+	}
+	return Object.keys(headers).length > 0 ? headers : void 0;
+}
+function isRemoteMcpConfig(config) {
+	return config.transport === "http" || config.transport === "sse";
+}
+//#endregion
 //#region ../agent-core/src/mcp/client-http.ts
 /**
 * Wraps the SDK streamable-HTTP transport as a kosong {@link MCPClient}.
@@ -95174,14 +95268,520 @@ function isTerminalTransportError(error) {
 	return false;
 }
 function buildMcpHttpHeaders(config, envLookup) {
-	const headers = { ...config.headers };
-	if (config.bearerTokenEnvVar !== void 0) {
-		const token = envLookup(config.bearerTokenEnvVar);
-		if (token === void 0 || token.length === 0) throw new KimiError(ErrorCodes.CONFIG_INVALID, `MCP HTTP bearer token env var "${config.bearerTokenEnvVar}" is not set or is empty`);
-		for (const key of Object.keys(headers)) if (key.toLowerCase() === "authorization") delete headers[key];
-		headers["Authorization"] = `Bearer ${token}`;
+	return buildMcpRemoteHeaders(config, envLookup);
+}
+//#endregion
+//#region ../../node_modules/.pnpm/eventsource@3.0.7/node_modules/eventsource/dist/index.js
+var ErrorEvent = class extends Event {
+	/**
+	* Constructs a new `ErrorEvent` instance. This is typically not called directly,
+	* but rather emitted by the `EventSource` object when an error occurs.
+	*
+	* @param type - The type of the event (should be "error")
+	* @param errorEventInitDict - Optional properties to include in the error event
+	*/
+	constructor(type, errorEventInitDict) {
+		var _a, _b;
+		super(type), this.code = (_a = errorEventInitDict == null ? void 0 : errorEventInitDict.code) != null ? _a : void 0, this.message = (_b = errorEventInitDict == null ? void 0 : errorEventInitDict.message) != null ? _b : void 0;
 	}
-	return Object.keys(headers).length > 0 ? headers : void 0;
+	/**
+	* Node.js "hides" the `message` and `code` properties of the `ErrorEvent` instance,
+	* when it is `console.log`'ed. This makes it harder to debug errors. To ease debugging,
+	* we explicitly include the properties in the `inspect` method.
+	*
+	* This is automatically called by Node.js when you `console.log` an instance of this class.
+	*
+	* @param _depth - The current depth
+	* @param options - The options passed to `util.inspect`
+	* @param inspect - The inspect function to use (prevents having to import it from `util`)
+	* @returns A string representation of the error
+	*/
+	[Symbol.for("nodejs.util.inspect.custom")](_depth, options, inspect) {
+		return inspect(inspectableError(this), options);
+	}
+	/**
+	* Deno "hides" the `message` and `code` properties of the `ErrorEvent` instance,
+	* when it is `console.log`'ed. This makes it harder to debug errors. To ease debugging,
+	* we explicitly include the properties in the `inspect` method.
+	*
+	* This is automatically called by Deno when you `console.log` an instance of this class.
+	*
+	* @param inspect - The inspect function to use (prevents having to import it from `util`)
+	* @param options - The options passed to `Deno.inspect`
+	* @returns A string representation of the error
+	*/
+	[Symbol.for("Deno.customInspect")](inspect, options) {
+		return inspect(inspectableError(this), options);
+	}
+};
+function syntaxError(message) {
+	const DomException = globalThis.DOMException;
+	return typeof DomException == "function" ? new DomException(message, "SyntaxError") : new SyntaxError(message);
+}
+function flattenError(err) {
+	return err instanceof Error ? "errors" in err && Array.isArray(err.errors) ? err.errors.map(flattenError).join(", ") : "cause" in err && err.cause instanceof Error ? `${err}: ${flattenError(err.cause)}` : err.message : `${err}`;
+}
+function inspectableError(err) {
+	return {
+		type: err.type,
+		message: err.message,
+		code: err.code,
+		defaultPrevented: err.defaultPrevented,
+		cancelable: err.cancelable,
+		timeStamp: err.timeStamp
+	};
+}
+var __typeError = (msg) => {
+	throw TypeError(msg);
+}, __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg), __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj)), __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value), __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), member.set(obj, value), value), __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method), _readyState, _url, _redirectUrl, _withCredentials, _fetch, _reconnectInterval, _reconnectTimer, _lastEventId, _controller, _parser, _onError, _onMessage, _onOpen, _EventSource_instances, connect_fn, _onFetchResponse, _onFetchError, getRequestOptions_fn, _onEvent, _onRetryChange, failConnection_fn, scheduleReconnect_fn, _reconnect;
+var EventSource = class extends EventTarget {
+	constructor(url, eventSourceInitDict) {
+		var _a, _b;
+		super(), __privateAdd(this, _EventSource_instances), this.CONNECTING = 0, this.OPEN = 1, this.CLOSED = 2, __privateAdd(this, _readyState), __privateAdd(this, _url), __privateAdd(this, _redirectUrl), __privateAdd(this, _withCredentials), __privateAdd(this, _fetch), __privateAdd(this, _reconnectInterval), __privateAdd(this, _reconnectTimer), __privateAdd(this, _lastEventId, null), __privateAdd(this, _controller), __privateAdd(this, _parser), __privateAdd(this, _onError, null), __privateAdd(this, _onMessage, null), __privateAdd(this, _onOpen, null), __privateAdd(this, _onFetchResponse, async (response) => {
+			var _a2;
+			__privateGet(this, _parser).reset();
+			const { body, redirected, status, headers } = response;
+			if (status === 204) {
+				__privateMethod(this, _EventSource_instances, failConnection_fn).call(this, "Server sent HTTP 204, not reconnecting", 204), this.close();
+				return;
+			}
+			if (redirected ? __privateSet(this, _redirectUrl, new URL(response.url)) : __privateSet(this, _redirectUrl, void 0), status !== 200) {
+				__privateMethod(this, _EventSource_instances, failConnection_fn).call(this, `Non-200 status code (${status})`, status);
+				return;
+			}
+			if (!(headers.get("content-type") || "").startsWith("text/event-stream")) {
+				__privateMethod(this, _EventSource_instances, failConnection_fn).call(this, "Invalid content type, expected \"text/event-stream\"", status);
+				return;
+			}
+			if (__privateGet(this, _readyState) === this.CLOSED) return;
+			__privateSet(this, _readyState, this.OPEN);
+			const openEvent = new Event("open");
+			if ((_a2 = __privateGet(this, _onOpen)) == null || _a2.call(this, openEvent), this.dispatchEvent(openEvent), typeof body != "object" || !body || !("getReader" in body)) {
+				__privateMethod(this, _EventSource_instances, failConnection_fn).call(this, "Invalid response body, expected a web ReadableStream", status), this.close();
+				return;
+			}
+			const decoder = new TextDecoder(), reader = body.getReader();
+			let open = !0;
+			do {
+				const { done, value } = await reader.read();
+				value && __privateGet(this, _parser).feed(decoder.decode(value, { stream: !done })), done && (open = !1, __privateGet(this, _parser).reset(), __privateMethod(this, _EventSource_instances, scheduleReconnect_fn).call(this));
+			} while (open);
+		}), __privateAdd(this, _onFetchError, (err) => {
+			__privateSet(this, _controller, void 0), !(err.name === "AbortError" || err.type === "aborted") && __privateMethod(this, _EventSource_instances, scheduleReconnect_fn).call(this, flattenError(err));
+		}), __privateAdd(this, _onEvent, (event) => {
+			typeof event.id == "string" && __privateSet(this, _lastEventId, event.id);
+			const messageEvent = new MessageEvent(event.event || "message", {
+				data: event.data,
+				origin: __privateGet(this, _redirectUrl) ? __privateGet(this, _redirectUrl).origin : __privateGet(this, _url).origin,
+				lastEventId: event.id || ""
+			});
+			__privateGet(this, _onMessage) && (!event.event || event.event === "message") && __privateGet(this, _onMessage).call(this, messageEvent), this.dispatchEvent(messageEvent);
+		}), __privateAdd(this, _onRetryChange, (value) => {
+			__privateSet(this, _reconnectInterval, value);
+		}), __privateAdd(this, _reconnect, () => {
+			__privateSet(this, _reconnectTimer, void 0), __privateGet(this, _readyState) === this.CONNECTING && __privateMethod(this, _EventSource_instances, connect_fn).call(this);
+		});
+		try {
+			if (url instanceof URL) __privateSet(this, _url, url);
+			else if (typeof url == "string") __privateSet(this, _url, new URL(url, getBaseURL()));
+			else throw new Error("Invalid URL");
+		} catch {
+			throw syntaxError("An invalid or illegal string was specified");
+		}
+		__privateSet(this, _parser, createParser({
+			onEvent: __privateGet(this, _onEvent),
+			onRetry: __privateGet(this, _onRetryChange)
+		})), __privateSet(this, _readyState, this.CONNECTING), __privateSet(this, _reconnectInterval, 3e3), __privateSet(this, _fetch, (_a = eventSourceInitDict == null ? void 0 : eventSourceInitDict.fetch) != null ? _a : globalThis.fetch), __privateSet(this, _withCredentials, (_b = eventSourceInitDict == null ? void 0 : eventSourceInitDict.withCredentials) != null ? _b : !1), __privateMethod(this, _EventSource_instances, connect_fn).call(this);
+	}
+	/**
+	* Returns the state of this EventSource object's connection. It can have the values described below.
+	*
+	* [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/readyState)
+	*
+	* Note: typed as `number` instead of `0 | 1 | 2` for compatibility with the `EventSource` interface,
+	* defined in the TypeScript `dom` library.
+	*
+	* @public
+	*/
+	get readyState() {
+		return __privateGet(this, _readyState);
+	}
+	/**
+	* Returns the URL providing the event stream.
+	*
+	* [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/url)
+	*
+	* @public
+	*/
+	get url() {
+		return __privateGet(this, _url).href;
+	}
+	/**
+	* Returns true if the credentials mode for connection requests to the URL providing the event stream is set to "include", and false otherwise.
+	*
+	* [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/withCredentials)
+	*/
+	get withCredentials() {
+		return __privateGet(this, _withCredentials);
+	}
+	/** [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/error_event) */
+	get onerror() {
+		return __privateGet(this, _onError);
+	}
+	set onerror(value) {
+		__privateSet(this, _onError, value);
+	}
+	/** [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/message_event) */
+	get onmessage() {
+		return __privateGet(this, _onMessage);
+	}
+	set onmessage(value) {
+		__privateSet(this, _onMessage, value);
+	}
+	/** [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/open_event) */
+	get onopen() {
+		return __privateGet(this, _onOpen);
+	}
+	set onopen(value) {
+		__privateSet(this, _onOpen, value);
+	}
+	addEventListener(type, listener, options) {
+		const listen = listener;
+		super.addEventListener(type, listen, options);
+	}
+	removeEventListener(type, listener, options) {
+		const listen = listener;
+		super.removeEventListener(type, listen, options);
+	}
+	/**
+	* Aborts any instances of the fetch algorithm started for this EventSource object, and sets the readyState attribute to CLOSED.
+	*
+	* [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventSource/close)
+	*
+	* @public
+	*/
+	close() {
+		__privateGet(this, _reconnectTimer) && clearTimeout(__privateGet(this, _reconnectTimer)), __privateGet(this, _readyState) !== this.CLOSED && (__privateGet(this, _controller) && __privateGet(this, _controller).abort(), __privateSet(this, _readyState, this.CLOSED), __privateSet(this, _controller, void 0));
+	}
+};
+_readyState = /* @__PURE__ */ new WeakMap(), _url = /* @__PURE__ */ new WeakMap(), _redirectUrl = /* @__PURE__ */ new WeakMap(), _withCredentials = /* @__PURE__ */ new WeakMap(), _fetch = /* @__PURE__ */ new WeakMap(), _reconnectInterval = /* @__PURE__ */ new WeakMap(), _reconnectTimer = /* @__PURE__ */ new WeakMap(), _lastEventId = /* @__PURE__ */ new WeakMap(), _controller = /* @__PURE__ */ new WeakMap(), _parser = /* @__PURE__ */ new WeakMap(), _onError = /* @__PURE__ */ new WeakMap(), _onMessage = /* @__PURE__ */ new WeakMap(), _onOpen = /* @__PURE__ */ new WeakMap(), _EventSource_instances = /* @__PURE__ */ new WeakSet(), connect_fn = function() {
+	__privateSet(this, _readyState, this.CONNECTING), __privateSet(this, _controller, new AbortController()), __privateGet(this, _fetch)(__privateGet(this, _url), __privateMethod(this, _EventSource_instances, getRequestOptions_fn).call(this)).then(__privateGet(this, _onFetchResponse)).catch(__privateGet(this, _onFetchError));
+}, _onFetchResponse = /* @__PURE__ */ new WeakMap(), _onFetchError = /* @__PURE__ */ new WeakMap(), getRequestOptions_fn = function() {
+	var _a;
+	const init = {
+		mode: "cors",
+		redirect: "follow",
+		headers: {
+			Accept: "text/event-stream",
+			...__privateGet(this, _lastEventId) ? { "Last-Event-ID": __privateGet(this, _lastEventId) } : void 0
+		},
+		cache: "no-store",
+		signal: (_a = __privateGet(this, _controller)) == null ? void 0 : _a.signal
+	};
+	return "window" in globalThis && (init.credentials = this.withCredentials ? "include" : "same-origin"), init;
+}, _onEvent = /* @__PURE__ */ new WeakMap(), _onRetryChange = /* @__PURE__ */ new WeakMap(), failConnection_fn = function(message, code) {
+	var _a;
+	__privateGet(this, _readyState) !== this.CLOSED && __privateSet(this, _readyState, this.CLOSED);
+	const errorEvent = new ErrorEvent("error", {
+		code,
+		message
+	});
+	(_a = __privateGet(this, _onError)) == null || _a.call(this, errorEvent), this.dispatchEvent(errorEvent);
+}, scheduleReconnect_fn = function(message, code) {
+	var _a;
+	if (__privateGet(this, _readyState) === this.CLOSED) return;
+	__privateSet(this, _readyState, this.CONNECTING);
+	const errorEvent = new ErrorEvent("error", {
+		code,
+		message
+	});
+	(_a = __privateGet(this, _onError)) == null || _a.call(this, errorEvent), this.dispatchEvent(errorEvent), __privateSet(this, _reconnectTimer, setTimeout(__privateGet(this, _reconnect), __privateGet(this, _reconnectInterval)));
+}, _reconnect = /* @__PURE__ */ new WeakMap(), EventSource.CONNECTING = 0, EventSource.OPEN = 1, EventSource.CLOSED = 2;
+function getBaseURL() {
+	const doc = "document" in globalThis ? globalThis.document : void 0;
+	return doc && typeof doc == "object" && "baseURI" in doc && typeof doc.baseURI == "string" ? doc.baseURI : void 0;
+}
+//#endregion
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/client/sse.js
+var SseError = class extends Error {
+	constructor(code, message, event) {
+		super(`SSE error: ${message}`);
+		this.code = code;
+		this.event = event;
+	}
+};
+/**
+* Client transport for SSE: this will connect to a server using Server-Sent Events for receiving
+* messages and make separate POST requests for sending messages.
+* @deprecated SSEClientTransport is deprecated. Prefer to use StreamableHTTPClientTransport where possible instead. Note that because some servers are still using SSE, clients may need to support both transports during the migration period.
+*/
+var SSEClientTransport = class {
+	constructor(url, opts) {
+		this._url = url;
+		this._resourceMetadataUrl = void 0;
+		this._scope = void 0;
+		this._eventSourceInit = opts?.eventSourceInit;
+		this._requestInit = opts?.requestInit;
+		this._authProvider = opts?.authProvider;
+		this._fetch = opts?.fetch;
+		this._fetchWithInit = createFetchWithInit(opts?.fetch, opts?.requestInit);
+	}
+	async _authThenStart() {
+		if (!this._authProvider) throw new UnauthorizedError("No auth provider");
+		let result;
+		try {
+			result = await auth(this._authProvider, {
+				serverUrl: this._url,
+				resourceMetadataUrl: this._resourceMetadataUrl,
+				scope: this._scope,
+				fetchFn: this._fetchWithInit
+			});
+		} catch (error) {
+			this.onerror?.(error);
+			throw error;
+		}
+		if (result !== "AUTHORIZED") throw new UnauthorizedError();
+		return await this._startOrAuth();
+	}
+	async _commonHeaders() {
+		const headers = {};
+		if (this._authProvider) {
+			const tokens = await this._authProvider.tokens();
+			if (tokens) headers["Authorization"] = `Bearer ${tokens.access_token}`;
+		}
+		if (this._protocolVersion) headers["mcp-protocol-version"] = this._protocolVersion;
+		const extraHeaders = normalizeHeaders(this._requestInit?.headers);
+		return new Headers({
+			...headers,
+			...extraHeaders
+		});
+	}
+	_startOrAuth() {
+		const fetchImpl = this?._eventSourceInit?.fetch ?? this._fetch ?? fetch;
+		return new Promise((resolve, reject) => {
+			this._eventSource = new EventSource(this._url.href, {
+				...this._eventSourceInit,
+				fetch: async (url, init) => {
+					const headers = await this._commonHeaders();
+					headers.set("Accept", "text/event-stream");
+					const response = await fetchImpl(url, {
+						...init,
+						headers
+					});
+					if (response.status === 401 && response.headers.has("www-authenticate")) {
+						const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
+						this._resourceMetadataUrl = resourceMetadataUrl;
+						this._scope = scope;
+					}
+					return response;
+				}
+			});
+			this._abortController = new AbortController();
+			this._eventSource.onerror = (event) => {
+				if (event.code === 401 && this._authProvider) {
+					this._authThenStart().then(resolve, reject);
+					return;
+				}
+				const error = new SseError(event.code, event.message, event);
+				reject(error);
+				this.onerror?.(error);
+			};
+			this._eventSource.onopen = () => {};
+			this._eventSource.addEventListener("endpoint", (event) => {
+				const messageEvent = event;
+				try {
+					this._endpoint = new URL(messageEvent.data, this._url);
+					if (this._endpoint.origin !== this._url.origin) throw new Error(`Endpoint origin does not match connection origin: ${this._endpoint.origin}`);
+				} catch (error) {
+					reject(error);
+					this.onerror?.(error);
+					this.close();
+					return;
+				}
+				resolve();
+			});
+			this._eventSource.onmessage = (event) => {
+				const messageEvent = event;
+				let message;
+				try {
+					message = JSONRPCMessageSchema.parse(JSON.parse(messageEvent.data));
+				} catch (error) {
+					this.onerror?.(error);
+					return;
+				}
+				this.onmessage?.(message);
+			};
+		});
+	}
+	async start() {
+		if (this._eventSource) throw new Error("SSEClientTransport already started! If using Client class, note that connect() calls start() automatically.");
+		return await this._startOrAuth();
+	}
+	/**
+	* Call this method after the user has finished authorizing via their user agent and is redirected back to the MCP client application. This will exchange the authorization code for an access token, enabling the next connection attempt to successfully auth.
+	*/
+	async finishAuth(authorizationCode) {
+		if (!this._authProvider) throw new UnauthorizedError("No auth provider");
+		if (await auth(this._authProvider, {
+			serverUrl: this._url,
+			authorizationCode,
+			resourceMetadataUrl: this._resourceMetadataUrl,
+			scope: this._scope,
+			fetchFn: this._fetchWithInit
+		}) !== "AUTHORIZED") throw new UnauthorizedError("Failed to authorize");
+	}
+	async close() {
+		this._abortController?.abort();
+		this._eventSource?.close();
+		this.onclose?.();
+	}
+	async send(message) {
+		if (!this._endpoint) throw new Error("Not connected");
+		try {
+			const headers = await this._commonHeaders();
+			headers.set("content-type", "application/json");
+			const init = {
+				...this._requestInit,
+				method: "POST",
+				headers,
+				body: JSON.stringify(message),
+				signal: this._abortController?.signal
+			};
+			const response = await (this._fetch ?? fetch)(this._endpoint, init);
+			if (!response.ok) {
+				const text = await response.text().catch(() => null);
+				if (response.status === 401 && this._authProvider) {
+					const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
+					this._resourceMetadataUrl = resourceMetadataUrl;
+					this._scope = scope;
+					if (await auth(this._authProvider, {
+						serverUrl: this._url,
+						resourceMetadataUrl: this._resourceMetadataUrl,
+						scope: this._scope,
+						fetchFn: this._fetchWithInit
+					}) !== "AUTHORIZED") throw new UnauthorizedError();
+					return this.send(message);
+				}
+				throw new Error(`Error POSTing to endpoint (HTTP ${response.status}): ${text}`);
+			}
+			await response.body?.cancel();
+		} catch (error) {
+			this.onerror?.(error);
+			throw error;
+		}
+	}
+	setProtocolVersion(version) {
+		this._protocolVersion = version;
+	}
+};
+//#endregion
+//#region ../agent-core/src/mcp/client-sse.ts
+/**
+* Wraps the SDK's deprecated HTTP+SSE transport as a kosong
+* {@link MCPClient}. This exists for compatibility with older MCP servers;
+* new remote servers should prefer streamable HTTP.
+*/
+var SseMcpClient = class {
+	client;
+	transport;
+	toolCallTimeoutMs;
+	started = false;
+	closed = false;
+	ready = false;
+	hooksInstalled = false;
+	unexpectedCloseListener;
+	lastTransportError;
+	pendingUnexpectedClose;
+	unexpectedCloseFired = false;
+	constructor(config, options = {}) {
+		const headers = buildMcpRemoteHeaders(config, options.envLookup ?? ((name) => process.env[name]));
+		this.transport = new SSEClientTransport(new URL(config.url), {
+			requestInit: headers !== void 0 ? { headers } : void 0,
+			fetch: options.fetch,
+			authProvider: options.oauthProvider
+		});
+		this.client = new Client({
+			name: options.clientName ?? "kimi-code",
+			version: options.clientVersion ?? KIMI_MCP_CLIENT_VERSION
+		});
+		this.toolCallTimeoutMs = options.toolCallTimeoutMs;
+	}
+	async connect() {
+		if (this.closed) throw new Error("MCP SSE client is closed");
+		if (this.started) return;
+		this.started = true;
+		this.installTransportHooks();
+		try {
+			await this.client.connect(this.transport);
+		} catch (error) {
+			await this.closeStartedClient();
+			throw error;
+		}
+		if (this.closed) {
+			await this.closeStartedClient();
+			throw new Error("MCP SSE client was closed during startup");
+		}
+		this.ready = true;
+	}
+	async close() {
+		if (this.closed) return;
+		this.closed = true;
+		await this.closeStartedClient();
+	}
+	/**
+	* Register a listener for unsolicited terminal transport drops. Brief SSE
+	* stream flaps are left to EventSource's retry loop; terminal HTTP status
+	* errors after startup remove the tools from the agent.
+	*/
+	onUnexpectedClose(listener) {
+		this.unexpectedCloseListener = listener;
+		const pending = this.pendingUnexpectedClose;
+		if (pending !== void 0) {
+			this.pendingUnexpectedClose = void 0;
+			listener(pending);
+		}
+	}
+	async listTools() {
+		return (await this.client.listTools()).tools.map(toMcpToolDefinition);
+	}
+	async callTool(name, args, signal) {
+		const requestOptions = buildRequestOptions(this.toolCallTimeoutMs, signal);
+		return toMcpToolResult(await this.client.callTool({
+			name,
+			arguments: args
+		}, void 0, requestOptions));
+	}
+	async closeStartedClient() {
+		if (!this.started) return;
+		this.started = false;
+		await this.client.close();
+	}
+	installTransportHooks() {
+		if (this.hooksInstalled) return;
+		this.hooksInstalled = true;
+		this.client.onclose = () => {
+			if (this.closed) return;
+			if (!this.ready) return;
+			this.fireUnexpectedClose({ error: this.lastTransportError });
+		};
+		this.client.onerror = (error) => {
+			this.lastTransportError = error;
+			if (this.closed) return;
+			if (!this.ready) return;
+			if (isTerminalSseTransportError(error)) this.fireUnexpectedClose({ error });
+		};
+	}
+	fireUnexpectedClose(reason) {
+		if (this.unexpectedCloseFired) return;
+		this.unexpectedCloseFired = true;
+		const listener = this.unexpectedCloseListener;
+		if (listener !== void 0) listener(reason);
+		else this.pendingUnexpectedClose = reason;
+	}
+};
+function isTerminalSseTransportError(error) {
+	if (error.name === "UnauthorizedError") return true;
+	return error instanceof SseError && error.code !== void 0;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/undici@7.27.1/node_modules/undici/lib/core/symbols.js
@@ -121737,16 +122337,23 @@ var McpConnectionManager = class {
 		this.log = options.log ?? log;
 	}
 	/**
-	* Returns the URL of an HTTP MCP server by name, or `undefined` for
-	* unknown / non-HTTP / disabled entries. Used by the synthetic auth tool
+	* Returns the URL of a remote MCP server by name, or `undefined` for
+	* unknown / non-remote / disabled entries. Used by the synthetic auth tool
 	* to drive OAuth discovery against the right base URL.
 	*/
-	getHttpServerUrl(name) {
+	getRemoteServerUrl(name) {
 		const entry = this.entries.get(name);
 		if (entry === void 0) return void 0;
-		if (entry.config.transport !== "http") return void 0;
+		if (!isRemoteMcpConfig(entry.config)) return void 0;
 		return entry.config.url;
 	}
+	/**
+	* @deprecated Use {@link getRemoteServerUrl}. Kept for in-repo callers that
+	* were written before legacy SSE support shared the same OAuth path.
+	*/
+	getHttpServerUrl(name) {
+		return this.getRemoteServerUrl(name);
+	}
 	onStatusChange(listener) {
 		this.listeners.add(listener);
 		return () => {
@@ -121915,6 +122522,11 @@ var McpConnectionManager = class {
 	createClient(config, name) {
 		const toolCallTimeoutMs = config.toolTimeoutMs;
 		if (config.transport === "stdio") return new StdioMcpClient(config, { toolCallTimeoutMs });
+		if (config.transport === "sse") return new SseMcpClient(config, {
+			toolCallTimeoutMs,
+			envLookup: this.options.envLookup,
+			oauthProvider: this.resolveOAuthProvider(config, name)
+		});
 		return new HttpMcpClient(config, {
 			toolCallTimeoutMs,
 			envLookup: this.options.envLookup,
@@ -121924,14 +122536,14 @@ var McpConnectionManager = class {
 	resolveOAuthProvider(config, name) {
 		const oauthService = this.oauthService;
 		if (oauthService === void 0) return void 0;
-		if (config.transport !== "http") return void 0;
+		if (!isRemoteMcpConfig(config)) return void 0;
 		if (config.bearerTokenEnvVar !== void 0) return void 0;
 		if (!oauthService.hasTokens(name, config.url)) return void 0;
 		return oauthService.getProvider(name, config.url);
 	}
 	shouldMarkNeedsAuth(entry, error) {
 		if (this.oauthService === void 0) return false;
-		if (entry.config.transport !== "http") return false;
+		if (!isRemoteMcpConfig(entry.config)) return false;
 		if (entry.config.bearerTokenEnvVar !== void 0) return false;
 		if (entry.config.headers !== void 0) return false;
 		return isUnauthorizedLikeError(error);
@@ -122215,7 +122827,7 @@ var Session$1 = class {
 		this.telemetry = options.telemetry ?? noopTelemetryClient;
 		this.toolKaos = options.kaos;
 		this.persistenceKaos = options.persistenceKaos ?? options.kaos;
-		this.skills = new SkillRegistry({ sessionId: options.id });
+		this.skills = new SessionSkillRegistry({ sessionId: options.id });
 		this.mcp = new McpConnectionManager({
 			oauthService: new McpOAuthService({ kimiHomeDir: options.kimiHomeDir }),
 			log: this.log
@@ -122254,6 +122866,7 @@ var Session$1 = class {
 	}
 	async resume() {
 		await this.skillsReady;
+		this.log.info("session resume", { app_version: this.options.appVersion });
 		const { agents } = await this.readMetadata();
 		this.agents.clear();
 		const { warning } = agents["main"] === void 0 ? { warning: void 0 } : await this.resumeAgent("main");
@@ -122508,7 +123121,6 @@ var Session$1 = class {
 			telemetry: this.telemetry,
 			log: this.log.createChild({ agentId: id }),
 			pluginSessionStarts: type === "main" ? this.options.pluginSessionStarts : void 0,
-			appVersion: this.options.appVersion,
 			experimentalFlags: this.experimentalFlags
 		});
 	}
@@ -122904,7 +123516,7 @@ async function readMcpServers(pluginRoot, raw, diagnostics) {
 }
 async function normalizePluginMcpServer(input) {
 	const { config } = input;
-	if (config.transport === "http") return config;
+	if (config.transport === "http" || config.transport === "sse") return config;
 	let command = config.command;
 	if (command.startsWith("./")) {
 		const resolvedCommand = await resolvePluginPathField({
@@ -123684,11 +124296,11 @@ function pluginMcpServersInfo(record) {
 	return Object.entries(record.manifest?.mcpServers ?? {}).map(([name, config]) => pluginMcpServerInfo(record, name, config)).toSorted((a, b) => a.name.localeCompare(b.name));
 }
 function pluginMcpServerInfo(record, name, config) {
-	if (config.transport === "http") return {
+	if (config.transport === "http" || config.transport === "sse") return {
 		name,
 		runtimeName: pluginMcpRuntimeName(record.id, name),
 		enabled: isMcpServerEnabled(record, name, config),
-		transport: "http",
+		transport: config.transport,
 		url: config.url,
 		headerKeys: config.headers === void 0 ? void 0 : Object.keys(config.headers).toSorted()
 	};
@@ -123713,7 +124325,7 @@ function pluginMcpRuntimeName(pluginId, serverName) {
 	return `plugin-${pluginId}:${serverName}`;
 }
 function withPluginMcpRuntime(config, pluginRoot, kimiHomeDir) {
-	if (config.transport === "http") return config;
+	if (config.transport === "http" || config.transport === "sse") return config;
 	const env = {
 		...config.env,
 		KIMI_CODE_HOME: kimiHomeDir,
@@ -136891,7 +137503,7 @@ var ProviderManager = class {
 };
 function resolveModelCapabilities(alias, provider) {
 	const declared = new Set((alias.capabilities ?? []).map((c) => c.trim().toLowerCase()));
-	const detected = createProvider(providerForCapabilityProbe(provider)).getCapability?.(provider.model) ?? UNKNOWN_CAPABILITY;
+	const detected = getModelCapability(provider.type, provider.model);
 	return {
 		image_in: declared.has("image_in") || detected.image_in,
 		video_in: declared.has("video_in") || detected.video_in,
@@ -136964,20 +137576,6 @@ function defaultHeadersField(headers) {
 	if (headers === void 0 || Object.keys(headers).length === 0) return {};
 	return { defaultHeaders: { ...headers } };
 }
-function providerForCapabilityProbe(provider) {
-	const apiKey = provider.apiKey && provider.apiKey.length > 0 ? provider.apiKey : "capability-probe";
-	if (provider.type === "vertexai") return {
-		...provider,
-		vertexai: false,
-		project: void 0,
-		location: void 0,
-		apiKey
-	};
-	return {
-		...provider,
-		apiKey
-	};
-}
 function providerApiKey(provider) {
 	switch (provider.type) {
 		case "anthropic": return providerValue(provider.apiKey, provider.env, "ANTHROPIC_API_KEY");
@@ -141745,19 +142343,26 @@ var OAuthManager = class {
 * production state.
 */
 const KIMI_CODE_PLATFORM = "kimi_code_cli";
-function createKimiDeviceId(homeDir, options = {}) {
+function readKimiDeviceId(homeDir) {
 	const deviceIdPath = join(homeDir, "device_id");
-	if (existsSync(deviceIdPath)) try {
+	if (!existsSync(deviceIdPath)) return null;
+	try {
 		const text = readFileSync(deviceIdPath, "utf-8").trim();
-		if (text.length > 0) return text;
-	} catch {}
+		return text.length > 0 ? text : null;
+	} catch {
+		return null;
+	}
+}
+function createKimiDeviceId(homeDir, options = {}) {
+	const existing = readKimiDeviceId(homeDir);
+	if (existing !== null) return existing;
 	const id = randomUUID();
 	try {
 		mkdirSync(homeDir, {
 			recursive: true,
 			mode: 448
 		});
-		writeFileSync(deviceIdPath, id, {
+		writeFileSync(join(homeDir, "device_id"), id, {
 			encoding: "utf-8",
 			mode: 384
 		});