@byfriends/agent-core 0.2.1 → 0.2.3

package/dist/{index-DiU4aKCD.d.mts → index-C2yfSu8d.d.mts}

@@ -827,6 +827,13 @@ interface McpConnectionManagerOptions {
    * `session.log` so MCP events land in the session log too.
    */
   readonly log?: Logger;
+  /**
+   * Custom fetch function for HTTP MCP transports. When provided, the
+   * connection manager passes it to every `HttpMcpClient` so the
+   * transport uses it for all HTTP requests — enabling proxy fallback,
+   * custom retries, or test doubles.
+   */
+  readonly fetch?: typeof fetch;
 }
 /**
  * Owns the lifecycle of every configured MCP server for a Session.
@@ -2635,6 +2642,12 @@ interface RuntimeConfig {
   readonly osEnv: Environment;
   readonly urlFetcher?: UrlFetcher | undefined;
   readonly webSearcher?: WebSearchProvider | undefined;
+  /**
+   * ProxiedFetch — a `typeof fetch` wrapper that retries through an
+   * HTTP/SOCKS proxy when the direct attempt fails with a retryable error.
+   * Used by MCP HTTP connections, URL fetcher, and web search.
+   */
+  readonly fetch?: typeof fetch;
 }
 //#endregion
 //#region src/utils/types.d.ts

package/dist/index.d.mts

@@ -1,3 +1,3 @@
 import { t as AGENT_WIRE_PROTOCOL_VERSION } from "./index-DitEeLHK.mjs";
-import { $ as CoreInfo, $n as SessionSkillConfig, $r as resolveByfHome, $t as BackgroundTaskUpdatedEvent, A as QuestionAnswers, Ai as ProviderType, An as TurnStepInterruptedEvent, Ar as LoopStepEndEvent, At as SetModelResult, B as SDKSessionAPI, Bi as LogEntry, Bn as ByfError, Br as BackgroundTaskStatus, Bt as Unsubscribe, C as SDKRPCClient, Ci as PermissionConfigSchema, Cn as ToolProgressEvent, Cr as PromptOrigin, Ct as ResumeSessionPayload, D as ApprovalResponse, Di as PermissionRuleScopeSchema, Dn as TurnEndedEvent, Dr as LoopContentPartEvent, Dt as SetActiveToolsPayload, E as ApprovalRequest, Ei as PermissionRuleSchema, En as TurnEndReason, Er as ToolStoreUpdate, Et as SessionSummary, F as QuestionResult, Fi as ThinkingConfigSchema, Fn as ByfErrorPayload, Fr as ExecutableToolSuccessResult, Ft as SkillSummary, G as AgentAPI, Gi as RootLogger, Gn as ErrorCodes, Gr as parseConfigString, Gt as AgentReplayRecord, H as ToolCallRequest, Hi as LogPayload, Hn as BYF_ERROR_INFO, Hr as OAuthTokenProviderResolver, Ht as WithAgentId, I as SDKAPI, Ii as formatConfigValidationError, In as fromByfErrorPayload, Ir as ToolInputDisplay, It as SteerPayload, J as ByfConfigPatch, Jn as SubagentHandle, Jr as writeConfigFile, Jt as AgentEvent, K as BeginCompactionPayload, Ki as SessionAttachInput, Kn as RuntimeConfig, Kr as readConfigFile, Kt as ResumeSessionResult, L as SDKAgentAPI, Li as getDefaultConfig, Ln as isByfError, Lr as BackgroundLifecycleEvent, Lt as StopBackgroundPayload, M as QuestionOption, Mi as ServicesConfig, Mn as TurnStepStartedEvent, Mr as LoopToolResultEvent, Mt as SetThinkingPayload, N as QuestionRequest, Ni as ServicesConfigSchema, Nn as UsageStatus, Nr as ExecutableToolErrorResult, Nt as ShellExecPayload, O as ApprovalScope, Oi as ProviderConfig, On as TurnStartedEvent, Or as LoopRecordedEvent, Ot as SetByfConfigPayload, P as QuestionResponse, Pi as ThinkingConfig, Pn as WarningEvent, Pr as ExecutableToolResult, Pt as ShellExecResult, Q as CoreAPI, Qn as SessionMeta, Qr as ensureByfHome, Qt as BackgroundTaskTerminatedEvent, R as SDKAgentRPC, Ri as validateConfig, Rn as makeErrorPayload, Rr as BackgroundTaskInfo, Rt as TextPromptPart, S as RPCMethods, Si as PermissionConfig, Sn as ToolListUpdatedReason, Sr as ContextMessage, St as RenameSessionPayload, T as ApprovalDecision, Ti as PermissionRuleDecisionSchema, Tn as ToolUpdate, Tr as UserPromptOrigin, Tt as SessionMetadataPatch, U as ToolCallResponse, Ui as Logger, Un as ByfErrorCode, Ur as configToTomlData, Ut as WithSessionId, V as SDKSessionRPC, Vi as LogLevel, Vn as ByfErrorOptions, Vr as BearerTokenProvider, Vt as UpdateSessionMetadataPayload, W as ActivateSkillPayload, Wi as LoggingConfig, Wn as ByfErrorInfo, Wr as ensureConfigFile, Wt as proxyWithExtraPayload, X as CancelPlanPayload, Xn as Session, Xr as parseBooleanEnv, Xt as AssistantDeltaEvent, Y as CancelPayload, Yn as AgentMeta, Yr as ResolveConfigValueInput, Yt as AgentStatusUpdatedEvent, Z as CloseSessionPayload, Zn as SessionConfig, Zr as resolveConfigValue, Zt as BackgroundTaskStartedEvent, _ as ByfCoreOptions, _i as McpServerStdioConfigSchema, _n as SubagentSpawnedEvent, _r as PermissionMode, _t as PromptPart, a as collectFilesRecursive, ai as ByfConfigSchema, an as Event, ar as redact, at as ForkSessionPayload, b as RPCCallOptions, bi as OAuthRef, bn as ToolCallStartedEvent, br as CompactionResult, bt as RegisterToolPayload, c as WIRE_PROTOCOL_VERSION, ci as HookDefConfig, cn as McpOAuthAuthorizationUrlUpdateData, cr as ToolInfo, ct as GetBackgroundPayload, d as normalizeTimestampMs, di as LoopControlSchema, dn as ObservationMaskingAppliedEvent, dr as AgentRecord, dt as JsonValue, ei as resolveConfigPath, en as CompactionBlockedEvent, er as TelemetryClient, et as CreateSessionPayload, f as scanSessionWire, fi as McpServerConfig, fn as PruningAppliedEvent, fr as AgentRecordEvents, ft as ListSessionsPayload, g as ByfCore, gi as McpServerStdioConfig, gn as SubagentFailedEvent, gr as PermissionApprovalResultRecord, gt as PromptInput, h as AgentType, hi as McpServerHttpConfigSchema, hn as SubagentCompletedEvent, hr as UsageRecordScope, ht as PlanData, i as ExtraZipEntry, ii as ByfConfigPatchSchema, in as ErrorEvent, ir as log, it as ExportSessionResult, j as QuestionItem, ji as ProviderTypeSchema, jn as TurnStepRetryingEvent, jr as LoopToolCallEvent, jt as SetPermissionPayload, k as QuestionAnswerMethod, ki as ProviderConfigSchema, kn as TurnStepCompletedEvent, kr as LoopStepBeginEvent, kt as SetModelPayload, l as buildExportManifest, li as HookDefSchema, ln as McpServerStatusEvent, lr as ToolSource, lt as JsonObject, m as AgentConfig, mi as McpServerHttpConfig, mn as SkillActivatedEvent, mr as AgentRecordPersistence, mt as McpStartupMetrics, n as ResolveLoggingInput, ni as BackgroundConfig, nn as CompactionCompletedEvent, nr as flushDiagnosticLogs, nt as ExportSessionManifest, o as writeExportZip, oi as ByfServiceConfig, on as HookResultEvent, or as resolveGlobalLogPath, ot as GetBackgroundOutputPathPayload, p as Agent, pi as McpServerConfigSchema, pn as SessionMetaUpdatedEvent, pr as AgentRecordOf, pt as McpServerInfo, q as ByfConfig, qi as SessionLogHandle, qn as SessionSubagentHost, qr as transformTomlData, qt as ResumedAgentState, r as resolveLoggingConfig, ri as BackgroundConfigSchema, rn as CompactionStartedEvent, rr as getRootLogger, rt as ExportSessionPayload, s as exportSessionDirectory, si as ByfServiceConfigSchema, sn as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, sr as BuiltinTool, st as GetBackgroundOutputPayload, t as buildPromptPlan, ti as mergeConfigPatch, tn as CompactionCancelledEvent, tr as TelemetryProperties, tt as EmptyPayload, u as SessionWireScan, ui as LoopControl, un as McpServerStatusPayload, ur as UserToolRegistration, ut as JsonPrimitive, v as CoreRPC, vi as ModelAlias, vn as ThinkingDeltaEvent, vr as AgentConfigUpdateData, vt as PromptPayload, w as createRPC, wi as PermissionModeSchema, wn as ToolResultEvent, wr as USER_PROMPT_ORIGIN, wt as SessionAPI, x as RPCClient, xi as OAuthRefSchema, xn as ToolListUpdatedEvent, xr as AgentContextData, xt as RemoveByfProviderPayload, y as CoreRPCClient, yi as ModelAliasSchema, yn as ToolCallDeltaEvent, yr as CompactionBeginData, yt as ReconnectMcpServerPayload, z as SDKRPC, zi as LogContext, zn as toByfErrorPayload, zr as BackgroundTaskKind, zt as UnregisterToolPayload } from "./index-DiU4aKCD.mjs";
+import { $ as CoreInfo, $n as SessionSkillConfig, $r as resolveByfHome, $t as BackgroundTaskUpdatedEvent, A as QuestionAnswers, Ai as ProviderType, An as TurnStepInterruptedEvent, Ar as LoopStepEndEvent, At as SetModelResult, B as SDKSessionAPI, Bi as LogEntry, Bn as ByfError, Br as BackgroundTaskStatus, Bt as Unsubscribe, C as SDKRPCClient, Ci as PermissionConfigSchema, Cn as ToolProgressEvent, Cr as PromptOrigin, Ct as ResumeSessionPayload, D as ApprovalResponse, Di as PermissionRuleScopeSchema, Dn as TurnEndedEvent, Dr as LoopContentPartEvent, Dt as SetActiveToolsPayload, E as ApprovalRequest, Ei as PermissionRuleSchema, En as TurnEndReason, Er as ToolStoreUpdate, Et as SessionSummary, F as QuestionResult, Fi as ThinkingConfigSchema, Fn as ByfErrorPayload, Fr as ExecutableToolSuccessResult, Ft as SkillSummary, G as AgentAPI, Gi as RootLogger, Gn as ErrorCodes, Gr as parseConfigString, Gt as AgentReplayRecord, H as ToolCallRequest, Hi as LogPayload, Hn as BYF_ERROR_INFO, Hr as OAuthTokenProviderResolver, Ht as WithAgentId, I as SDKAPI, Ii as formatConfigValidationError, In as fromByfErrorPayload, Ir as ToolInputDisplay, It as SteerPayload, J as ByfConfigPatch, Jn as SubagentHandle, Jr as writeConfigFile, Jt as AgentEvent, K as BeginCompactionPayload, Ki as SessionAttachInput, Kn as RuntimeConfig, Kr as readConfigFile, Kt as ResumeSessionResult, L as SDKAgentAPI, Li as getDefaultConfig, Ln as isByfError, Lr as BackgroundLifecycleEvent, Lt as StopBackgroundPayload, M as QuestionOption, Mi as ServicesConfig, Mn as TurnStepStartedEvent, Mr as LoopToolResultEvent, Mt as SetThinkingPayload, N as QuestionRequest, Ni as ServicesConfigSchema, Nn as UsageStatus, Nr as ExecutableToolErrorResult, Nt as ShellExecPayload, O as ApprovalScope, Oi as ProviderConfig, On as TurnStartedEvent, Or as LoopRecordedEvent, Ot as SetByfConfigPayload, P as QuestionResponse, Pi as ThinkingConfig, Pn as WarningEvent, Pr as ExecutableToolResult, Pt as ShellExecResult, Q as CoreAPI, Qn as SessionMeta, Qr as ensureByfHome, Qt as BackgroundTaskTerminatedEvent, R as SDKAgentRPC, Ri as validateConfig, Rn as makeErrorPayload, Rr as BackgroundTaskInfo, Rt as TextPromptPart, S as RPCMethods, Si as PermissionConfig, Sn as ToolListUpdatedReason, Sr as ContextMessage, St as RenameSessionPayload, T as ApprovalDecision, Ti as PermissionRuleDecisionSchema, Tn as ToolUpdate, Tr as UserPromptOrigin, Tt as SessionMetadataPatch, U as ToolCallResponse, Ui as Logger, Un as ByfErrorCode, Ur as configToTomlData, Ut as WithSessionId, V as SDKSessionRPC, Vi as LogLevel, Vn as ByfErrorOptions, Vr as BearerTokenProvider, Vt as UpdateSessionMetadataPayload, W as ActivateSkillPayload, Wi as LoggingConfig, Wn as ByfErrorInfo, Wr as ensureConfigFile, Wt as proxyWithExtraPayload, X as CancelPlanPayload, Xn as Session, Xr as parseBooleanEnv, Xt as AssistantDeltaEvent, Y as CancelPayload, Yn as AgentMeta, Yr as ResolveConfigValueInput, Yt as AgentStatusUpdatedEvent, Z as CloseSessionPayload, Zn as SessionConfig, Zr as resolveConfigValue, Zt as BackgroundTaskStartedEvent, _ as ByfCoreOptions, _i as McpServerStdioConfigSchema, _n as SubagentSpawnedEvent, _r as PermissionMode, _t as PromptPart, a as collectFilesRecursive, ai as ByfConfigSchema, an as Event, ar as redact, at as ForkSessionPayload, b as RPCCallOptions, bi as OAuthRef, bn as ToolCallStartedEvent, br as CompactionResult, bt as RegisterToolPayload, c as WIRE_PROTOCOL_VERSION, ci as HookDefConfig, cn as McpOAuthAuthorizationUrlUpdateData, cr as ToolInfo, ct as GetBackgroundPayload, d as normalizeTimestampMs, di as LoopControlSchema, dn as ObservationMaskingAppliedEvent, dr as AgentRecord, dt as JsonValue, ei as resolveConfigPath, en as CompactionBlockedEvent, er as TelemetryClient, et as CreateSessionPayload, f as scanSessionWire, fi as McpServerConfig, fn as PruningAppliedEvent, fr as AgentRecordEvents, ft as ListSessionsPayload, g as ByfCore, gi as McpServerStdioConfig, gn as SubagentFailedEvent, gr as PermissionApprovalResultRecord, gt as PromptInput, h as AgentType, hi as McpServerHttpConfigSchema, hn as SubagentCompletedEvent, hr as UsageRecordScope, ht as PlanData, i as ExtraZipEntry, ii as ByfConfigPatchSchema, in as ErrorEvent, ir as log, it as ExportSessionResult, j as QuestionItem, ji as ProviderTypeSchema, jn as TurnStepRetryingEvent, jr as LoopToolCallEvent, jt as SetPermissionPayload, k as QuestionAnswerMethod, ki as ProviderConfigSchema, kn as TurnStepCompletedEvent, kr as LoopStepBeginEvent, kt as SetModelPayload, l as buildExportManifest, li as HookDefSchema, ln as McpServerStatusEvent, lr as ToolSource, lt as JsonObject, m as AgentConfig, mi as McpServerHttpConfig, mn as SkillActivatedEvent, mr as AgentRecordPersistence, mt as McpStartupMetrics, n as ResolveLoggingInput, ni as BackgroundConfig, nn as CompactionCompletedEvent, nr as flushDiagnosticLogs, nt as ExportSessionManifest, o as writeExportZip, oi as ByfServiceConfig, on as HookResultEvent, or as resolveGlobalLogPath, ot as GetBackgroundOutputPathPayload, p as Agent, pi as McpServerConfigSchema, pn as SessionMetaUpdatedEvent, pr as AgentRecordOf, pt as McpServerInfo, q as ByfConfig, qi as SessionLogHandle, qn as SessionSubagentHost, qr as transformTomlData, qt as ResumedAgentState, r as resolveLoggingConfig, ri as BackgroundConfigSchema, rn as CompactionStartedEvent, rr as getRootLogger, rt as ExportSessionPayload, s as exportSessionDirectory, si as ByfServiceConfigSchema, sn as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, sr as BuiltinTool, st as GetBackgroundOutputPayload, t as buildPromptPlan, ti as mergeConfigPatch, tn as CompactionCancelledEvent, tr as TelemetryProperties, tt as EmptyPayload, u as SessionWireScan, ui as LoopControl, un as McpServerStatusPayload, ur as UserToolRegistration, ut as JsonPrimitive, v as CoreRPC, vi as ModelAlias, vn as ThinkingDeltaEvent, vr as AgentConfigUpdateData, vt as PromptPayload, w as createRPC, wi as PermissionModeSchema, wn as ToolResultEvent, wr as USER_PROMPT_ORIGIN, wt as SessionAPI, x as RPCClient, xi as OAuthRefSchema, xn as ToolListUpdatedEvent, xr as AgentContextData, xt as RemoveByfProviderPayload, y as CoreRPCClient, yi as ModelAliasSchema, yn as ToolCallDeltaEvent, yr as CompactionBeginData, yt as ReconnectMcpServerPayload, z as SDKRPC, zi as LogContext, zn as toByfErrorPayload, zr as BackgroundTaskKind, zt as UnregisterToolPayload } from "./index-C2yfSu8d.mjs";
 export { AGENT_WIRE_PROTOCOL_VERSION, ActivateSkillPayload, Agent, AgentAPI, AgentConfig, type AgentConfigUpdateData, type AgentContextData, AgentEvent, AgentMeta, type AgentRecord, type AgentRecordEvents, type AgentRecordOf, type AgentRecordPersistence, AgentReplayRecord, AgentStatusUpdatedEvent, AgentType, ApprovalDecision, ApprovalRequest, ApprovalResponse, ApprovalScope, AssistantDeltaEvent, BYF_ERROR_INFO, BackgroundConfig, BackgroundConfigSchema, type BackgroundLifecycleEvent, type BackgroundTaskInfo, type BackgroundTaskKind, BackgroundTaskStartedEvent, type BackgroundTaskStatus, BackgroundTaskTerminatedEvent, BackgroundTaskUpdatedEvent, type BearerTokenProvider, BeginCompactionPayload, type BuiltinTool, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfCoreOptions, ByfError, type ByfErrorCode, type ByfErrorInfo, type ByfErrorOptions, type ByfErrorPayload, ByfServiceConfig, ByfServiceConfigSchema, CancelPayload, CancelPlanPayload, CloseSessionPayload, type CompactionBeginData, CompactionBlockedEvent, CompactionCancelledEvent, CompactionCompletedEvent, CompactionResult, CompactionStartedEvent, type ContextMessage, CoreAPI, CoreInfo, CoreRPC, CoreRPCClient, CreateSessionPayload, EmptyPayload, ErrorCodes, ErrorEvent, Event, type ExecutableToolErrorResult, type ExecutableToolResult, type ExecutableToolSuccessResult, ExportSessionManifest, ExportSessionPayload, ExportSessionResult, ExtraZipEntry, ForkSessionPayload, GetBackgroundOutputPathPayload, GetBackgroundOutputPayload, GetBackgroundPayload, HookDefConfig, HookDefSchema, HookResultEvent, JsonObject, JsonPrimitive, JsonValue, ListSessionsPayload, type LogContext, type LogEntry, type LogLevel, type LogPayload, type Logger, type LoggingConfig, type LoopContentPartEvent, LoopControl, LoopControlSchema, type LoopRecordedEvent, type LoopStepBeginEvent, type LoopStepEndEvent, type LoopToolCallEvent, type LoopToolResultEvent, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpOAuthAuthorizationUrlUpdateData, McpServerConfig, McpServerConfigSchema, McpServerHttpConfig, McpServerHttpConfigSchema, McpServerInfo, McpServerStatusEvent, McpServerStatusPayload, McpServerStdioConfig, McpServerStdioConfigSchema, McpStartupMetrics, ModelAlias, ModelAliasSchema, OAuthRef, OAuthRefSchema, type OAuthTokenProviderResolver, ObservationMaskingAppliedEvent, type PermissionApprovalResultRecord, PermissionConfig, PermissionConfigSchema, type PermissionMode, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, PlanData, PromptInput, type PromptOrigin, PromptPart, PromptPayload, ProviderConfig, ProviderConfigSchema, ProviderType, ProviderTypeSchema, PruningAppliedEvent, QuestionAnswerMethod, QuestionAnswers, QuestionItem, QuestionOption, QuestionRequest, QuestionResponse, QuestionResult, RPCCallOptions, RPCClient, RPCMethods, ReconnectMcpServerPayload, RegisterToolPayload, RemoveByfProviderPayload, RenameSessionPayload, ResolveConfigValueInput, type ResolveLoggingInput, ResumeSessionPayload, ResumeSessionResult, ResumedAgentState, type RootLogger, type RuntimeConfig, SDKAPI, SDKAgentAPI, SDKAgentRPC, SDKRPC, SDKRPCClient, SDKSessionAPI, SDKSessionRPC, ServicesConfig, ServicesConfigSchema, Session, SessionAPI, type SessionAttachInput, SessionConfig, type SessionLogHandle, SessionMeta, SessionMetaUpdatedEvent, SessionMetadataPatch, SessionSkillConfig, SessionSubagentHost, SessionSummary, SessionWireScan, SetActiveToolsPayload, SetByfConfigPayload, SetModelPayload, SetModelResult, SetPermissionPayload, SetThinkingPayload, ShellExecPayload, ShellExecResult, SkillActivatedEvent, SkillSummary, SteerPayload, StopBackgroundPayload, SubagentCompletedEvent, SubagentFailedEvent, SubagentHandle, SubagentSpawnedEvent, type TelemetryClient, type TelemetryProperties, TextPromptPart, ThinkingConfig, ThinkingConfigSchema, ThinkingDeltaEvent, ToolCallDeltaEvent, ToolCallRequest, ToolCallResponse, ToolCallStartedEvent, type ToolInfo, type ToolInputDisplay, ToolListUpdatedEvent, ToolListUpdatedReason, ToolProgressEvent, ToolResultEvent, type ToolSource, type ToolStoreUpdate, ToolUpdate, TurnEndReason, TurnEndedEvent, TurnStartedEvent, TurnStepCompletedEvent, TurnStepInterruptedEvent, TurnStepRetryingEvent, TurnStepStartedEvent, USER_PROMPT_ORIGIN, UnregisterToolPayload, Unsubscribe, UpdateSessionMetadataPayload, type UsageRecordScope, UsageStatus, type UserPromptOrigin, type UserToolRegistration, WIRE_PROTOCOL_VERSION, WarningEvent, WithAgentId, WithSessionId, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };

package/dist/index.mjs

@@ -23,7 +23,7 @@ import { fromBuffer } from "yauzl";
 import { StringDecoder } from "node:string_decoder";
 import { createControlledPromise, objectMap, sleep } from "@antfu/utils";
 import * as retry from "retry";
-import { spawn } from "node:child_process";
+import { execSync, spawn } from "node:child_process";
 import Ajv from "ajv";
 import Ajv2019 from "ajv/dist/2019.js";
 import Ajv2020 from "ajv/dist/2020.js";
@@ -38,6 +38,7 @@ import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js"
 import { localKaos } from "@byfriends/kaos";
 import { Readability } from "@mozilla/readability";
 import { parseHTML } from "linkedom";
+import { ProxyAgent } from "undici";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -1678,13 +1679,18 @@ var BackgroundProcessManager = class {
 	* restart. Active-only mode never shows ghosts (they're terminal).
 	*/
 	list(activeOnly = true, limit) {
+		const seen = /* @__PURE__ */ new Set();
 		const result = [];
 		for (const entry of this.processes.values()) {
 			if (activeOnly && TERMINAL_STATUSES.has(entry.status)) continue;
+			if (seen.has(entry.taskId)) continue;
+			seen.add(entry.taskId);
 			result.push(this.toInfo(entry));
 			if (limit !== void 0 && result.length >= limit) return result;
 		}
 		if (!activeOnly) for (const ghost of this.ghosts.values()) {
+			if (seen.has(ghost.taskId)) continue;
+			seen.add(ghost.taskId);
 			result.push(ghost);
 			if (limit !== void 0 && result.length >= limit) return result;
 		}
@@ -16488,7 +16494,8 @@ var McpConnectionManager = class {
 		return new HttpMcpClient(config, {
 			toolCallTimeoutMs,
 			envLookup: this.options.envLookup,
-			oauthProvider: this.resolveOAuthProvider(config, name)
+			oauthProvider: this.resolveOAuthProvider(config, name),
+			fetch: this.options.fetch
 		});
 	}
 	resolveOAuthProvider(config, name) {
@@ -17076,7 +17083,8 @@ var Session = class {
 		this.skills = new SkillRegistry({ sessionId: config.id });
 		this.mcp = new McpConnectionManager({
 			oauthService: new McpOAuthService({ byfHomeDir: config.byfHomeDir }),
-			log: this.log
+			log: this.log,
+			fetch: config.runtime.fetch
 		});
 		this.mcp.onStatusChange((entry) => {
 			this.onMcpServerStatusChange(entry);
@@ -17548,6 +17556,213 @@ var LocalFetchURLProvider = class {
 	}
 };
 //#endregion
+//#region src/tools/providers/proxied-fetch.ts
+/**
+* ProxiedFetch — a `typeof fetch` wrapper with automatic proxy fallback.
+*
+* Flow:
+*   1. Attempt the request with a 60-second timeout (via AbortController,
+*      respecting any external AbortSignal).
+*   2. If the request succeeds, return the response.
+*   3. If the request fails with a retryable error and a proxy is detected,
+*      retry through the proxy (also 60-second timeout).
+*   4. If the request fails with a non-retryable error, or no proxy is
+*      configured, propagate the original error / response.
+*   5. If the proxy retry also fails, propagate the proxy error in the same
+*      format as a normal fetch error — no special wrapping.
+*
+* Proxy detection reads environment variables only (macOS `scutil --proxy`
+* is added in a separate slice). Env vars take priority over system proxy.
+*/
+const REQUEST_TIMEOUT_MS = 6e4;
+const RETRYABLE_HTTP_STATUSES = new Set([
+	403,
+	429,
+	502,
+	503,
+	504
+]);
+const RETRYABLE_NETWORK_CODES = new Set([
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ENOTFOUND",
+	"ETIMEDOUT",
+	"EPIPE",
+	"EAI_AGAIN"
+]);
+const HTTPS_PROXY_KEYS = ["HTTPS_PROXY", "https_proxy"];
+const HTTP_PROXY_KEYS = ["HTTP_PROXY", "http_proxy"];
+const ALL_PROXY_KEYS = ["ALL_PROXY", "all_proxy"];
+const SOCKS_PROXY_KEYS = ["SOCKS_PROXY", "socks_proxy"];
+const NO_PROXY_KEYS = ["NO_PROXY", "no_proxy"];
+/**
+* Determine the proxy URL for a given request URL based on environment
+* variables and optional system proxy settings.
+*
+* Env vars always take priority over system proxy.
+*
+* Priority for HTTPS requests:
+*   HTTPS_PROXY → system HTTPS → ALL_PROXY → SOCKS_PROXY → system SOCKS → HTTP_PROXY → system HTTP
+* Priority for HTTP requests:
+*   HTTP_PROXY → system HTTP → ALL_PROXY → SOCKS_PROXY → system SOCKS
+*/
+function getProxyForUrl(requestUrl, envLookup, systemProxy) {
+	if (new URL(requestUrl).protocol === "https:") return firstDefined(HTTPS_PROXY_KEYS, envLookup) ?? systemProxy?.httpsProxy ?? firstDefined(ALL_PROXY_KEYS, envLookup) ?? firstDefined(SOCKS_PROXY_KEYS, envLookup) ?? systemProxy?.socksProxy ?? firstDefined(HTTP_PROXY_KEYS, envLookup) ?? systemProxy?.httpProxy;
+	return firstDefined(HTTP_PROXY_KEYS, envLookup) ?? systemProxy?.httpProxy ?? firstDefined(ALL_PROXY_KEYS, envLookup) ?? firstDefined(SOCKS_PROXY_KEYS, envLookup) ?? systemProxy?.socksProxy;
+}
+/**
+* Classify an error or response as retryable (should trigger proxy fallback).
+*
+* Retryable: network-level errors (DNS failure, ECONNREFUSED, ECONNRESET,
+* timeout, abort) and HTTP 403, 429, 502, 503, 504.
+* Non-retryable: HTTP 4xx (except 403/429) and everything else.
+*/
+function isRetryableError(error) {
+	if (error instanceof TypeError && error.cause && typeof error.cause === "object") {
+		const code = error.cause.code;
+		if (typeof code === "string" && RETRYABLE_NETWORK_CODES.has(code)) return true;
+	}
+	if (error instanceof DOMException && error.name === "AbortError") return true;
+	if (error instanceof Response) return RETRYABLE_HTTP_STATUSES.has(error.status);
+	return false;
+}
+/**
+* Check whether a hostname matches the NO_PROXY list.
+*
+* Entries can be:
+* - `*` → match everything
+* - `.example.com` → domain suffix (matches `sub.example.com` and `example.com`)
+* - `example.com` → exact match + suffix match (matches `sub.example.com`)
+* - `127.0.0.1` → exact IP/hostname match
+*/
+function isNoProxyHost(hostname, noProxyValue) {
+	if (noProxyValue === void 0 || noProxyValue.length === 0) return false;
+	const entries = noProxyValue.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
+	const host = hostname.toLowerCase();
+	for (const entry of entries) {
+		if (entry === "*") return true;
+		if (entry.startsWith(".")) {
+			if (host.endsWith(entry) || host === entry.slice(1)) return true;
+		} else if (host === entry || host.endsWith("." + entry)) return true;
+	}
+	return false;
+}
+/**
+* Create a `fetch`-compatible function that adds proxy fallback behaviour.
+*
+* - Successful requests are returned as-is.
+* - Retryable failures (network errors, HTTP 403/429/5xx) trigger a single
+*   retry through the proxy detected from environment variables.
+* - If no proxy is configured, or the error is non-retryable, the original
+*   error/response is propagated unchanged.
+*/
+function createProxiedFetch(deps) {
+	const envLookup = deps.envLookup;
+	const innerFetch = deps.innerFetch ?? globalThis.fetch.bind(globalThis);
+	const proxiedFetch = async (input, init) => {
+		const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+		const noProxy = firstDefined(NO_PROXY_KEYS, envLookup);
+		const hostname = new URL(url).hostname;
+		const sysProxy = deps.systemProxy?.();
+		const proxyUrl = getProxyForUrl(url, envLookup, sysProxy);
+		const noProxyMatch = noProxy !== void 0 && isNoProxyHost(hostname, noProxy);
+		const controller = new AbortController();
+		const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+		if (init?.signal) if (init.signal.aborted) {
+			clearTimeout(timeoutId);
+			controller.abort();
+		} else init.signal.addEventListener("abort", () => controller.abort(), { once: true });
+		const mergedInit = {
+			...init,
+			signal: controller.signal
+		};
+		try {
+			const response = await innerFetch(input, mergedInit);
+			clearTimeout(timeoutId);
+			if (!response.ok && isRetryableError(response) && proxyUrl && !noProxyMatch) return await retryViaProxy(input, init, proxyUrl, innerFetch);
+			return response;
+		} catch (error) {
+			clearTimeout(timeoutId);
+			if (isRetryableError(error) && proxyUrl && !noProxyMatch) return await retryViaProxy(input, init, proxyUrl, innerFetch);
+			throw error;
+		}
+	};
+	return proxiedFetch;
+}
+async function retryViaProxy(input, init, proxyUrl, innerFetch) {
+	const controller = new AbortController();
+	const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+	if (init?.signal) if (init.signal.aborted) {
+		clearTimeout(timeoutId);
+		controller.abort();
+	} else init.signal.addEventListener("abort", () => controller.abort(), { once: true });
+	const dispatcher = new ProxyAgent(proxyUrl);
+	const retryInit = {
+		...init,
+		signal: controller.signal,
+		dispatcher
+	};
+	try {
+		const response = await innerFetch(input, retryInit);
+		clearTimeout(timeoutId);
+		return response;
+	} catch (error) {
+		clearTimeout(timeoutId);
+		throw error;
+	}
+}
+function firstDefined(keys, lookup) {
+	for (const key of keys) {
+		const value = lookup(key);
+		if (value !== void 0 && value.length > 0) return value;
+	}
+}
+//#endregion
+//#region src/tools/providers/system-proxy.ts
+/**
+* macOS system proxy detection via `scutil --proxy`.
+*
+* Parses the scutil output to extract HTTP, HTTPS, and SOCKS proxy settings.
+* On non-darwin platforms, returns an empty object.
+*/
+/**
+* Detect macOS system proxy settings by running `scutil --proxy`.
+*
+* On non-darwin platforms, returns `{}` immediately.
+* If `scutil` fails or produces unparseable output, returns `{}`.
+*/
+function detectSystemProxy(options) {
+	if ((options?.platform ?? process.platform) !== "darwin") return {};
+	const runCmd = options?.execSync ?? ((cmd) => execSync(cmd, { encoding: "utf-8" }));
+	let raw;
+	try {
+		raw = runCmd("scutil --proxy");
+	} catch {
+		return {};
+	}
+	return parseScutilProxy(raw);
+}
+function parseScutilProxy(raw) {
+	const http = extractProxyEntry(raw, "HTTP");
+	const https = extractProxyEntry(raw, "HTTPS");
+	const socks = extractProxyEntry(raw, "SOCKS");
+	return {
+		...http.enabled ? { httpProxy: `http://${http.host}:${http.port}` } : void 0,
+		...https.enabled ? { httpsProxy: `http://${https.host}:${https.port}` } : void 0,
+		...socks.enabled ? { socksProxy: `socks5://${socks.host}:${socks.port}` } : void 0
+	};
+}
+function extractProxyEntry(raw, prefix) {
+	const enableMatch = raw.match(new RegExp(`${prefix}Enable\\s*:\\s*(\\d+)`));
+	const hostMatch = raw.match(new RegExp(`${prefix}Proxy\\s*:\\s*(\\S+)`));
+	const portMatch = raw.match(new RegExp(`${prefix}Port\\s*:\\s*(\\d+)`));
+	return {
+		enabled: enableMatch?.[1] === "1",
+		host: hostMatch?.[1] ?? "",
+		port: portMatch?.[1] ? parseInt(portMatch[1], 10) : 0
+	};
+}
+//#endregion
 //#region src/tools/providers/remote-fetch-url.ts
 /**
 * RemoteFetchURLProvider — host-side UrlFetcher.
@@ -19831,21 +20046,28 @@ var ByfCore = class {
 	}
 };
 async function createRuntimeConfig(input) {
-	const localFetcher = new LocalFetchURLProvider();
+	const proxiedFetch = createProxiedFetch({
+		envLookup: (key) => process.env[key],
+		systemProxy: () => detectSystemProxy()
+	});
+	const localFetcher = new LocalFetchURLProvider({ fetchImpl: proxiedFetch });
 	const searchService = input.config.services?.byfSearch;
 	const fetchService = input.config.services?.byfFetch;
 	return {
 		kaos: localKaos,
 		osEnv: await detectEnvironmentFromNode(),
+		fetch: proxiedFetch,
 		urlFetcher: fetchService?.baseUrl === void 0 ? localFetcher : new RemoteFetchURLProvider({
 			baseUrl: fetchService.baseUrl,
 			localFallback: localFetcher,
 			defaultHeaders: input.byfRequestHeaders,
+			fetchImpl: proxiedFetch,
 			...serviceCredentials(fetchService, input.resolveOAuthTokenProvider)
 		}),
 		webSearcher: searchService?.baseUrl === void 0 ? void 0 : new RemoteWebSearchProvider({
 			baseUrl: searchService.baseUrl,
 			defaultHeaders: input.byfRequestHeaders,
+			fetchImpl: proxiedFetch,
 			...serviceCredentials(searchService, input.resolveOAuthTokenProvider)
 		})
 	};

package/dist/session/store/index.d.mts

@@ -1,4 +1,4 @@
-import { Et as SessionSummary, ft as ListSessionsPayload, lt as JsonObject } from "../../index-DiU4aKCD.mjs";
+import { Et as SessionSummary, ft as ListSessionsPayload, lt as JsonObject } from "../../index-C2yfSu8d.mjs";
 
 //#region src/session/store/session-store.d.ts
 interface CreateSessionRecordInput {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byfriends/agent-core",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Unified agent engine for BYF",
   "license": "Proprietary",
   "author": "ByronFinn",
@@ -66,10 +66,11 @@
     "retry": "0.13.1",
     "smol-toml": "^1.6.1",
     "tar": "^7.5.13",
+    "undici": "^8.4.1",
     "yauzl": "^3.3.0",
     "zod": "^4.3.6",
-    "@byfriends/kosong": "^0.2.1",
-    "@byfriends/kaos": "^0.2.1"
+    "@byfriends/kaos": "^0.2.2",
+    "@byfriends/kosong": "^0.2.2"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",