@byfriends/agent-core 0.3.1 → 0.3.2

package/dist/{index-CZA_2ux5.d.mts → index-BNApCprm.d.mts}

@@ -2,16 +2,16 @@ import { CacheHitRate, ChatProvider, ContentPart, FinishReason, Message, ModelCa
 import { z } from "zod";
 import { OAuthClientProvider, OAuthDiscoveryState } from "@modelcontextprotocol/sdk/client/auth.js";
 import { Kaos, KaosProcess } from "@byfriends/kaos";
-import { ActivateSkillPayload, AgentAPI, AgentEvent, SDKAgentRPC, SDKSessionRPC, UsageStatus } from "./index-CZA_2ux5.mjs";
+import { ActivateSkillPayload, AgentAPI, AgentEvent, SDKAgentRPC, SDKSessionRPC, UsageStatus } from "./index-BNApCprm.mjs";
 import { OAuthClientInformationMixed, OAuthClientMetadata, OAuthTokens } from "@modelcontextprotocol/sdk/shared/auth.js";
-import { ByfConfig, ByfConfigPatch, OAuthRef } from "./index-CZA_2ux5.mjs";
-import { AgentConfigData, AgentConfigUpdateData } from "./index-CZA_2ux5.mjs";
-import { AgentContextData, ContextMessage } from "./index-CZA_2ux5.mjs";
-import { PermissionApprovalResultRecord, PermissionData, PermissionMode } from "./index-CZA_2ux5.mjs";
-import { ToolInfo } from "./index-CZA_2ux5.mjs";
-import { AgentType } from "./index-CZA_2ux5.mjs";
-import { SessionMeta } from "./index-CZA_2ux5.mjs";
-import { BackgroundTaskInfo } from "./index-CZA_2ux5.mjs";
+import { ByfConfig, ByfConfigPatch, OAuthRef } from "./index-BNApCprm.mjs";
+import { AgentConfigData, AgentConfigUpdateData } from "./index-BNApCprm.mjs";
+import { AgentContextData, ContextMessage } from "./index-BNApCprm.mjs";
+import { PermissionApprovalResultRecord, PermissionData, PermissionMode } from "./index-BNApCprm.mjs";
+import { ToolInfo } from "./index-BNApCprm.mjs";
+import { AgentType } from "./index-BNApCprm.mjs";
+import { SessionMeta } from "./index-BNApCprm.mjs";
+import { BackgroundTaskInfo } from "./index-BNApCprm.mjs";
 //#region src/logging/types.d.ts
 type LogLevel = 'off' | 'error' | 'warn' | 'info' | 'debug';
 type LogContext = Record<string, unknown>;
@@ -1102,98 +1102,6 @@ declare function transformTomlData(data: Record<string, unknown>): Record<string
 declare function writeConfigFile(filePath: string, config: ByfConfig$1): Promise<void>;
 declare function configToTomlData(config: ByfConfig$1): Record<string, unknown>;
 //#endregion
-//#region src/config/update-rules.d.ts
-/**
- * Update-rules for `byf update-config`.
- *
- * Each rule corresponds to a deprecated / renamed / migrated field that
- * `analyzeConfig` can detect in `config.raw` and (where applicable) that
- * `applyFixes` can clean up.
- *
- * **Principles** (from PRD-0013 grill decisions):
- * - G2 — Whitelist approach: only fields explicitly registered here are removed.
- * - Every rule carries a `deprecatedSince` version annotation so the report
- *   tells the user *when* the field became obsolete.
- */
-interface Finding {
-  kind: 'removed' | 'renamed' | 'migrated' | 'dangling' | 'unknown' | 'invalid-value';
-  /** TOML dotted path, e.g. `'services.byf_search'`, `'loop_control.max_steps_per_run'`. */
-  path: string;
-  /** Human-readable description of what was found and what will happen. */
-  detail: string;
-  /** Version when this field was deprecated (optional — may be unknown for very old fields). */
-  deprecatedSince?: string;
-}
-interface DeprecatedFieldRule {
-  /** TOML dotted path, same format as `Finding.path`. */
-  path: string;
-  /** Path split into segments for traversing `config.raw`. */
-  pathParts: readonly string[];
-  /** Which kind of Finding this rule produces. */
-  kind: Finding['kind'];
-  /** Human-readable description. */
-  detail: string;
-  deprecatedSince?: string;
-}
-/**
- * Combined list of all deprecated-field rules.
- *
- * Order within the list does not affect correctness (the CLI groups by kind
- * at display time), but a stable order helps test expectations.
- */
-declare const DEPRECATED_FIELD_RULES: readonly DeprecatedFieldRule[];
-//#endregion
-//#region src/config/update.d.ts
-/**
- * Minimal config shape accepted by {@link analyzeConfig}.
- *
- * All fields are optional so callers — especially tests — don't need to
- * construct a full `ByfConfig`. Backward-compatible: every `ByfConfig` is
- * a valid `UpdateAnalyzeInput`.
- */
-interface UpdateAnalyzeInput {
-  readonly raw?: Record<string, unknown>;
-  readonly thinking?: {
-    readonly mode?: string;
-    readonly effort?: string;
-  };
-  readonly models?: Record<string, {
-    readonly provider: string;
-    readonly capabilities?: readonly string[];
-  }>;
-  readonly providers?: Record<string, unknown>;
-  readonly defaultProvider?: string;
-  readonly defaultModel?: string;
-}
-/**
- * Scan a parsed config (including `config.raw`) and return all Findings
- * for deprecated / renamed / migrated / dangling / unknown / invalid-value
- * fields.
- *
- * This is a **pure** function — no file I/O, no side effects.
- *
- * Detection is based on `config.raw` (the clone of the original TOML data),
- * not on the parsed camelCase schema. This matches the PRD's observation
- * that `raw` is both the protection layer (preserving unknown fields) and
- * the blind spot (retaining stale keys through read→write cycles).
- */
-declare function analyzeConfig(config: UpdateAnalyzeInput): Finding[];
-/**
- * Apply automatic fixes to a `ByfConfig` by deleting every path registered in
- * `DEPRECATED_FIELD_RULES` from `config.raw`.
- *
- * The `_findings` parameter is intentionally **not consulted** — deletion is
- * driven exclusively by the whitelist in `DEPRECATED_FIELD_RULES`. This ensures
- * that a call to `applyFixes` always produces a clean config regardless of
- * what analysis step previously ran.
- *
- * This is a **pure** function — it returns a new config object without
- * mutating the input.
- */
-declare function applyFixes(config: ByfConfig$1, findings: readonly Finding[]): ByfConfig$1 & {
-  raw: Record<string, unknown>;
-};
-//#endregion
 //#region src/providers/request-auth.d.ts
 interface ProviderRequestAuthOptions {
   readonly forceRefresh?: boolean;
@@ -4240,5 +4148,5 @@ declare function resolveLoggingConfig(input: ResolveLoggingInput): LoggingConfig
 //#region src/prompt-plan/builder.d.ts
 declare function buildPromptPlan(renderedSystemPrompt: string, providerCacheCapability: ProviderCacheCapability): PromptPlan;
 //#endregion
-export { CreateSessionPayload as $, RootLogger as $i, TelemetryProperties as $n, ResolveConfigValueInput as $r, CompactionCancelledEvent as $t, QuestionAnswers as A, PermissionRuleSchema as Ai, TurnStepStartedEvent as An, LoopToolResultEvent as Ar, SetThinkingPayload as At, SDKSessionAPI as B, WebSearchConfig as Bi, BYF_ERROR_INFO as Bn, OAuthTokenProviderResolver as Br, WithAgentId as Bt, SDKRPCClient as C, ModelAliasSchema as Ci, ToolUpdate as Cn, UserPromptOrigin as Cr, SessionMetadataPatch as Ct, ApprovalResponse as D, PermissionConfigSchema as Di, TurnStepCompletedEvent as Dn, LoopStepBeginEvent as Dr, SetModelPayload as Dt, ApprovalRequest as E, PermissionConfig as Ei, TurnStartedEvent as En, LoopRecordedEvent as Er, SetByfConfigPayload as Et, QuestionResult as F, ProviderTypeSchema as Fi, isByfError as Fn, BackgroundLifecycleEvent as Fr, StopBackgroundPayload as Ft, AgentAPI$1 as G, getDefaultConfig as Gi, SessionSubagentHost as Gn, DeprecatedFieldRule as Gr, ResumedAgentState as Gt, ToolCallRequest as H, WebSearchProviderConfig as Hi, ByfErrorInfo as Hn, analyzeConfig as Hr, proxyWithExtraPayload as Ht, SDKAPI as I, ServicesConfig as Ii, makeErrorPayload as In, BackgroundTaskInfo$1 as Ir, TextPromptPart as It, ByfConfigPatch as J, LogEntry as Ji, Session as Jn, ensureConfigFile as Jr, AssistantDeltaEvent as Jt, BeginCompactionPayload as K, validateConfig as Ki, SubagentHandle as Kn, Finding as Kr, AgentEvent$1 as Kt, SDKAgentAPI as L, ServicesConfigSchema as Li, toByfErrorPayload as Ln, BackgroundTaskKind as Lr, UnregisterToolPayload as Lt, QuestionOption as M, ProviderConfig$1 as Mi, WarningEvent as Mn, ExecutableToolResult as Mr, ShellExecResult as Mt, QuestionRequest as N, ProviderConfigSchema as Ni, ByfErrorPayload as Nn, ExecutableToolSuccessResult as Nr, SkillSummary as Nt, ApprovalScope as O, PermissionModeSchema as Oi, TurnStepInterruptedEvent as On, LoopStepEndEvent as Or, SetModelResult as Ot, QuestionResponse as P, ProviderType as Pi, fromByfErrorPayload as Pn, ToolInputDisplay as Pr, SteerPayload as Pt, CoreInfo as Q, LoggingConfig as Qi, TelemetryClient as Qn, writeConfigFile as Qr, CompactionBlockedEvent as Qt, SDKAgentRPC$1 as R, ThinkingConfig as Ri, ByfError as Rn, BackgroundTaskStatus as Rr, Unsubscribe as Rt, RPCMethods as S, ModelAlias as Si, ToolResultEvent as Sn, USER_PROMPT_ORIGIN as Sr, SessionAPI as St, ApprovalDecision as T, OAuthRefSchema as Ti, TurnEndedEvent as Tn, LoopContentPartEvent as Tr, SetActiveToolsPayload as Tt, ToolCallResponse as U, WebSearchProviderConfigSchema as Ui, ErrorCodes as Un, applyFixes as Ur, AgentReplayRecord as Ut, SDKSessionRPC$1 as V, WebSearchConfigSchema as Vi, ByfErrorCode as Vn, UpdateAnalyzeInput as Vr, WithSessionId as Vt, ActivateSkillPayload$1 as W, formatConfigValidationError as Wi, RuntimeConfig as Wn, DEPRECATED_FIELD_RULES as Wr, ResumeSessionResult as Wt, CloseSessionPayload as X, LogPayload as Xi, SessionMeta$1 as Xn, readConfigFile as Xr, BackgroundTaskTerminatedEvent as Xt, CancelPayload as Y, LogLevel as Yi, SessionConfig as Yn, parseConfigString as Yr, BackgroundTaskStartedEvent as Yt, CoreAPI as Z, Logger as Zi, SessionSkillConfig as Zn, transformTomlData as Zr, BackgroundTaskUpdatedEvent as Zt, ByfCoreOptions as _, McpServerConfigSchema as _i, ToolCallDeltaEvent as _n, CompactionBeginData as _r, ReconnectMcpServerPayload as _t, collectFilesRecursive as a, mergeConfigPatch as ai, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE as an, BuiltinTool as ar, GetBackgroundOutputPathPayload as at, RPCCallOptions as b, McpServerStdioConfig as bi, ToolListUpdatedReason as bn, ContextMessage$1 as br, RenameSessionPayload as bt, WIRE_PROTOCOL_VERSION as c, ByfConfigPatchSchema as ci, McpServerStatusPayload as cn, UserToolRegistration as cr, JsonObject as ct, normalizeTimestampMs as d, ByfServiceConfigSchema as di, SessionMetaUpdatedEvent as dn, AgentRecordOf as dr, ListSessionsPayload as dt, SessionAttachInput as ea, parseBooleanEnv as ei, CompactionCompletedEvent as en, flushDiagnosticLogs as er, EmptyPayload as et, scanSessionWire as f, HookDefConfig as fi, SkillActivatedEvent as fn, AgentRecordPersistence as fr, McpServerInfo as ft, ByfCore as g, McpServerConfig as gi, ThinkingDeltaEvent as gn, AgentConfigUpdateData$1 as gr, PromptPayload as gt, AgentType$1 as h, LoopControlSchema as hi, SubagentSpawnedEvent as hn, PermissionMode$1 as hr, PromptPart as ht, ExtraZipEntry as i, resolveConfigPath as ii, HookResultEvent as in, resolveGlobalLogPath as ir, ForkSessionPayload as it, QuestionItem as j, PermissionRuleScopeSchema as ji, UsageStatus$1 as jn, ExecutableToolErrorResult as jr, ShellExecPayload as jt, QuestionAnswerMethod as k, PermissionRuleDecisionSchema as ki, TurnStepRetryingEvent as kn, LoopToolCallEvent as kr, SetPermissionPayload as kt, buildExportManifest as l, ByfConfigSchema as li, ObservationMaskingAppliedEvent as ln, AgentRecord as lr, JsonPrimitive as lt, AgentConfig as m, LoopControl as mi, SubagentFailedEvent as mn, PermissionApprovalResultRecord$1 as mr, PromptInput as mt, ResolveLoggingInput as n, ensureByfHome as ni, ErrorEvent as nn, log as nr, ExportSessionPayload as nt, writeExportZip as o, BackgroundConfig as oi, McpOAuthAuthorizationUrlUpdateData as on, ToolInfo$1 as or, GetBackgroundOutputPayload as ot, Agent as p, HookDefSchema as pi, SubagentCompletedEvent as pn, UsageRecordScope as pr, McpStartupMetrics as pt, ByfConfig as q, LogContext as qi, AgentMeta as qn, configToTomlData as qr, AgentStatusUpdatedEvent as qt, resolveLoggingConfig as r, resolveByfHome as ri, Event as rn, redact as rr, ExportSessionResult as rt, exportSessionDirectory as s, BackgroundConfigSchema as si, McpServerStatusEvent as sn, ToolSource as sr, GetBackgroundPayload as st, buildPromptPlan as t, SessionLogHandle as ta, resolveConfigValue as ti, CompactionStartedEvent as tn, getRootLogger as tr, ExportSessionManifest as tt, SessionWireScan as u, ByfServiceConfig as ui, PruningAppliedEvent as un, AgentRecordEvents as ur, JsonValue as ut, CoreRPC as v, McpServerHttpConfig as vi, ToolCallStartedEvent as vn, CompactionResult$1 as vr, RegisterToolPayload as vt, createRPC as w, OAuthRef$1 as wi, TurnEndReason as wn, ToolStoreUpdate as wr, SessionSummary as wt, RPCClient as x, McpServerStdioConfigSchema as xi, ToolProgressEvent as xn, PromptOrigin as xr, ResumeSessionPayload as xt, CoreRPCClient as y, McpServerHttpConfigSchema as yi, ToolListUpdatedEvent as yn, AgentContextData$1 as yr, RemoveByfProviderPayload as yt, SDKRPC as z, ThinkingConfigSchema as zi, ByfErrorOptions as zn, BearerTokenProvider as zr, UpdateSessionMetadataPayload as zt };
+export { CreateSessionPayload as $, TelemetryProperties as $n, mergeConfigPatch as $r, CompactionCancelledEvent as $t, QuestionAnswers as A, ServicesConfig as Ai, TurnStepStartedEvent as An, LoopToolResultEvent as Ar, SetThinkingPayload as At, SDKSessionAPI as B, validateConfig as Bi, BYF_ERROR_INFO as Bn, OAuthTokenProviderResolver as Br, WithAgentId as Bt, SDKRPCClient as C, PermissionRuleDecisionSchema as Ci, ToolUpdate as Cn, UserPromptOrigin as Cr, SessionMetadataPatch as Ct, ApprovalResponse as D, ProviderConfigSchema as Di, TurnStepCompletedEvent as Dn, LoopStepBeginEvent as Dr, SetModelPayload as Dt, ApprovalRequest as E, ProviderConfig$1 as Ei, TurnStartedEvent as En, LoopRecordedEvent as Er, SetByfConfigPayload as Et, QuestionResult as F, WebSearchConfigSchema as Fi, isByfError as Fn, BackgroundLifecycleEvent as Fr, StopBackgroundPayload as Ft, AgentAPI$1 as G, Logger as Gi, SessionSubagentHost as Gn, transformTomlData as Gr, ResumedAgentState as Gt, ToolCallRequest as H, LogEntry as Hi, ByfErrorInfo as Hn, ensureConfigFile as Hr, proxyWithExtraPayload as Ht, SDKAPI as I, WebSearchProviderConfig as Ii, makeErrorPayload as In, BackgroundTaskInfo$1 as Ir, TextPromptPart as It, ByfConfigPatch as J, SessionAttachInput as Ji, Session as Jn, parseBooleanEnv as Jr, AssistantDeltaEvent as Jt, BeginCompactionPayload as K, LoggingConfig as Ki, SubagentHandle as Kn, writeConfigFile as Kr, AgentEvent$1 as Kt, SDKAgentAPI as L, WebSearchProviderConfigSchema as Li, toByfErrorPayload as Ln, BackgroundTaskKind as Lr, UnregisterToolPayload as Lt, QuestionOption as M, ThinkingConfig as Mi, WarningEvent as Mn, ExecutableToolResult as Mr, ShellExecResult as Mt, QuestionRequest as N, ThinkingConfigSchema as Ni, ByfErrorPayload as Nn, ExecutableToolSuccessResult as Nr, SkillSummary as Nt, ApprovalScope as O, ProviderType as Oi, TurnStepInterruptedEvent as On, LoopStepEndEvent as Or, SetModelResult as Ot, QuestionResponse as P, WebSearchConfig as Pi, fromByfErrorPayload as Pn, ToolInputDisplay as Pr, SteerPayload as Pt, CoreInfo as Q, TelemetryClient as Qn, resolveConfigPath as Qr, CompactionBlockedEvent as Qt, SDKAgentRPC$1 as R, formatConfigValidationError as Ri, ByfError as Rn, BackgroundTaskStatus as Rr, Unsubscribe as Rt, RPCMethods as S, PermissionModeSchema as Si, ToolResultEvent as Sn, USER_PROMPT_ORIGIN as Sr, SessionAPI as St, ApprovalDecision as T, PermissionRuleScopeSchema as Ti, TurnEndedEvent as Tn, LoopContentPartEvent as Tr, SetActiveToolsPayload as Tt, ToolCallResponse as U, LogLevel as Ui, ErrorCodes as Un, parseConfigString as Ur, AgentReplayRecord as Ut, SDKSessionRPC$1 as V, LogContext as Vi, ByfErrorCode as Vn, configToTomlData as Vr, WithSessionId as Vt, ActivateSkillPayload$1 as W, LogPayload as Wi, RuntimeConfig as Wn, readConfigFile as Wr, ResumeSessionResult as Wt, CloseSessionPayload as X, SessionMeta$1 as Xn, ensureByfHome as Xr, BackgroundTaskTerminatedEvent as Xt, CancelPayload as Y, SessionLogHandle as Yi, SessionConfig as Yn, resolveConfigValue as Yr, BackgroundTaskStartedEvent as Yt, CoreAPI as Z, SessionSkillConfig as Zn, resolveByfHome as Zr, BackgroundTaskUpdatedEvent as Zt, ByfCoreOptions as _, ModelAliasSchema as _i, ToolCallDeltaEvent as _n, CompactionBeginData as _r, ReconnectMcpServerPayload as _t, collectFilesRecursive as a, ByfServiceConfigSchema as ai, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE as an, BuiltinTool as ar, GetBackgroundOutputPathPayload as at, RPCCallOptions as b, PermissionConfig as bi, ToolListUpdatedReason as bn, ContextMessage$1 as br, RenameSessionPayload as bt, WIRE_PROTOCOL_VERSION as c, LoopControl as ci, McpServerStatusPayload as cn, UserToolRegistration as cr, JsonObject as ct, normalizeTimestampMs as d, McpServerConfigSchema as di, SessionMetaUpdatedEvent as dn, AgentRecordOf as dr, ListSessionsPayload as dt, BackgroundConfig as ei, CompactionCompletedEvent as en, flushDiagnosticLogs as er, EmptyPayload as et, scanSessionWire as f, McpServerHttpConfig as fi, SkillActivatedEvent as fn, AgentRecordPersistence as fr, McpServerInfo as ft, ByfCore as g, ModelAlias as gi, ThinkingDeltaEvent as gn, AgentConfigUpdateData$1 as gr, PromptPayload as gt, AgentType$1 as h, McpServerStdioConfigSchema as hi, SubagentSpawnedEvent as hn, PermissionMode$1 as hr, PromptPart as ht, ExtraZipEntry as i, ByfServiceConfig as ii, HookResultEvent as in, resolveGlobalLogPath as ir, ForkSessionPayload as it, QuestionItem as j, ServicesConfigSchema as ji, UsageStatus$1 as jn, ExecutableToolErrorResult as jr, ShellExecPayload as jt, QuestionAnswerMethod as k, ProviderTypeSchema as ki, TurnStepRetryingEvent as kn, LoopToolCallEvent as kr, SetPermissionPayload as kt, buildExportManifest as l, LoopControlSchema as li, ObservationMaskingAppliedEvent as ln, AgentRecord as lr, JsonPrimitive as lt, AgentConfig as m, McpServerStdioConfig as mi, SubagentFailedEvent as mn, PermissionApprovalResultRecord$1 as mr, PromptInput as mt, ResolveLoggingInput as n, ByfConfigPatchSchema as ni, ErrorEvent as nn, log as nr, ExportSessionPayload as nt, writeExportZip as o, HookDefConfig as oi, McpOAuthAuthorizationUrlUpdateData as on, ToolInfo$1 as or, GetBackgroundOutputPayload as ot, Agent as p, McpServerHttpConfigSchema as pi, SubagentCompletedEvent as pn, UsageRecordScope as pr, McpStartupMetrics as pt, ByfConfig as q, RootLogger as qi, AgentMeta as qn, ResolveConfigValueInput as qr, AgentStatusUpdatedEvent as qt, resolveLoggingConfig as r, ByfConfigSchema as ri, Event as rn, redact as rr, ExportSessionResult as rt, exportSessionDirectory as s, HookDefSchema as si, McpServerStatusEvent as sn, ToolSource as sr, GetBackgroundPayload as st, buildPromptPlan as t, BackgroundConfigSchema as ti, CompactionStartedEvent as tn, getRootLogger as tr, ExportSessionManifest as tt, SessionWireScan as u, McpServerConfig as ui, PruningAppliedEvent as un, AgentRecordEvents as ur, JsonValue as ut, CoreRPC as v, OAuthRef$1 as vi, ToolCallStartedEvent as vn, CompactionResult$1 as vr, RegisterToolPayload as vt, createRPC as w, PermissionRuleSchema as wi, TurnEndReason as wn, ToolStoreUpdate as wr, SessionSummary as wt, RPCClient as x, PermissionConfigSchema as xi, ToolProgressEvent as xn, PromptOrigin as xr, ResumeSessionPayload as xt, CoreRPCClient as y, OAuthRefSchema as yi, ToolListUpdatedEvent as yn, AgentContextData$1 as yr, RemoveByfProviderPayload as yt, SDKRPC as z, getDefaultConfig as zi, ByfErrorOptions as zn, BearerTokenProvider as zr, UpdateSessionMetadataPayload as zt };
 export { ActivateSkillPayload$1 as ActivateSkillPayload, AgentAPI$1 as AgentAPI, AgentEvent$1 as AgentEvent, SDKAgentRPC$1 as SDKAgentRPC, SDKSessionRPC$1 as SDKSessionRPC, UsageStatus$1 as UsageStatus, ByfConfig$1 as ByfConfig, ByfConfigPatch$1 as ByfConfigPatch, OAuthRef$1 as OAuthRef, AgentConfigData$1 as AgentConfigData, AgentConfigUpdateData$1 as AgentConfigUpdateData, AgentContextData$1 as AgentContextData, ContextMessage$1 as ContextMessage, PermissionApprovalResultRecord$1 as PermissionApprovalResultRecord, PermissionData$1 as PermissionData, PermissionMode$1 as PermissionMode, ToolInfo$1 as ToolInfo, AgentType$1 as AgentType, SessionMeta$1 as SessionMeta, BackgroundTaskInfo$1 as BackgroundTaskInfo };

package/dist/index.d.mts

@@ -1,3 +1,3 @@
 import { t as AGENT_WIRE_PROTOCOL_VERSION } from "./index-DitEeLHK.mjs";
-import { $ as CreateSessionPayload, $i as RootLogger, $n as TelemetryProperties, $r as ResolveConfigValueInput, $t as CompactionCancelledEvent, A as QuestionAnswers, Ai as PermissionRuleSchema, An as TurnStepStartedEvent, Ar as LoopToolResultEvent, At as SetThinkingPayload, B as SDKSessionAPI, Bi as WebSearchConfig, Bn as BYF_ERROR_INFO, Br as OAuthTokenProviderResolver, Bt as WithAgentId, C as SDKRPCClient, Ci as ModelAliasSchema, Cn as ToolUpdate, Cr as UserPromptOrigin, Ct as SessionMetadataPatch, D as ApprovalResponse, Di as PermissionConfigSchema, Dn as TurnStepCompletedEvent, Dr as LoopStepBeginEvent, Dt as SetModelPayload, E as ApprovalRequest, Ei as PermissionConfig, En as TurnStartedEvent, Er as LoopRecordedEvent, Et as SetByfConfigPayload, F as QuestionResult, Fi as ProviderTypeSchema, Fn as isByfError, Fr as BackgroundLifecycleEvent, Ft as StopBackgroundPayload, G as AgentAPI, Gi as getDefaultConfig, Gn as SessionSubagentHost, Gr as DeprecatedFieldRule, Gt as ResumedAgentState, H as ToolCallRequest, Hi as WebSearchProviderConfig, Hn as ByfErrorInfo, Hr as analyzeConfig, Ht as proxyWithExtraPayload, I as SDKAPI, Ii as ServicesConfig, In as makeErrorPayload, Ir as BackgroundTaskInfo, It as TextPromptPart, J as ByfConfigPatch, Ji as LogEntry, Jn as Session, Jr as ensureConfigFile, Jt as AssistantDeltaEvent, K as BeginCompactionPayload, Ki as validateConfig, Kn as SubagentHandle, Kr as Finding, Kt as AgentEvent, L as SDKAgentAPI, Li as ServicesConfigSchema, Ln as toByfErrorPayload, Lr as BackgroundTaskKind, Lt as UnregisterToolPayload, M as QuestionOption, Mi as ProviderConfig, Mn as WarningEvent, Mr as ExecutableToolResult, Mt as ShellExecResult, N as QuestionRequest, Ni as ProviderConfigSchema, Nn as ByfErrorPayload, Nr as ExecutableToolSuccessResult, Nt as SkillSummary, O as ApprovalScope, Oi as PermissionModeSchema, On as TurnStepInterruptedEvent, Or as LoopStepEndEvent, Ot as SetModelResult, P as QuestionResponse, Pi as ProviderType, Pn as fromByfErrorPayload, Pr as ToolInputDisplay, Pt as SteerPayload, Q as CoreInfo, Qi as LoggingConfig, Qn as TelemetryClient, Qr as writeConfigFile, Qt as CompactionBlockedEvent, R as SDKAgentRPC, Ri as ThinkingConfig, Rn as ByfError, Rr as BackgroundTaskStatus, Rt as Unsubscribe, S as RPCMethods, Si as ModelAlias, Sn as ToolResultEvent, Sr as USER_PROMPT_ORIGIN, St as SessionAPI, T as ApprovalDecision, Ti as OAuthRefSchema, Tn as TurnEndedEvent, Tr as LoopContentPartEvent, Tt as SetActiveToolsPayload, U as ToolCallResponse, Ui as WebSearchProviderConfigSchema, Un as ErrorCodes, Ur as applyFixes, Ut as AgentReplayRecord, V as SDKSessionRPC, Vi as WebSearchConfigSchema, Vn as ByfErrorCode, Vr as UpdateAnalyzeInput, Vt as WithSessionId, W as ActivateSkillPayload, Wi as formatConfigValidationError, Wn as RuntimeConfig, Wr as DEPRECATED_FIELD_RULES, Wt as ResumeSessionResult, X as CloseSessionPayload, Xi as LogPayload, Xn as SessionMeta, Xr as readConfigFile, Xt as BackgroundTaskTerminatedEvent, Y as CancelPayload, Yi as LogLevel, Yn as SessionConfig, Yr as parseConfigString, Yt as BackgroundTaskStartedEvent, Z as CoreAPI, Zi as Logger, Zn as SessionSkillConfig, Zr as transformTomlData, Zt as BackgroundTaskUpdatedEvent, _ as ByfCoreOptions, _i as McpServerConfigSchema, _n as ToolCallDeltaEvent, _r as CompactionBeginData, _t as ReconnectMcpServerPayload, a as collectFilesRecursive, ai as mergeConfigPatch, an as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, ar as BuiltinTool, at as GetBackgroundOutputPathPayload, b as RPCCallOptions, bi as McpServerStdioConfig, bn as ToolListUpdatedReason, br as ContextMessage, bt as RenameSessionPayload, c as WIRE_PROTOCOL_VERSION, ci as ByfConfigPatchSchema, cn as McpServerStatusPayload, cr as UserToolRegistration, ct as JsonObject, d as normalizeTimestampMs, di as ByfServiceConfigSchema, dn as SessionMetaUpdatedEvent, dr as AgentRecordOf, dt as ListSessionsPayload, ea as SessionAttachInput, ei as parseBooleanEnv, en as CompactionCompletedEvent, er as flushDiagnosticLogs, et as EmptyPayload, f as scanSessionWire, fi as HookDefConfig, fn as SkillActivatedEvent, fr as AgentRecordPersistence, ft as McpServerInfo, g as ByfCore, gi as McpServerConfig, gn as ThinkingDeltaEvent, gr as AgentConfigUpdateData, gt as PromptPayload, h as AgentType, hi as LoopControlSchema, hn as SubagentSpawnedEvent, hr as PermissionMode, ht as PromptPart, i as ExtraZipEntry, ii as resolveConfigPath, in as HookResultEvent, ir as resolveGlobalLogPath, it as ForkSessionPayload, j as QuestionItem, ji as PermissionRuleScopeSchema, jn as UsageStatus, jr as ExecutableToolErrorResult, jt as ShellExecPayload, k as QuestionAnswerMethod, ki as PermissionRuleDecisionSchema, kn as TurnStepRetryingEvent, kr as LoopToolCallEvent, kt as SetPermissionPayload, l as buildExportManifest, li as ByfConfigSchema, ln as ObservationMaskingAppliedEvent, lr as AgentRecord, lt as JsonPrimitive, m as AgentConfig, mi as LoopControl, mn as SubagentFailedEvent, mr as PermissionApprovalResultRecord, mt as PromptInput, n as ResolveLoggingInput, ni as ensureByfHome, nn as ErrorEvent, nr as log, nt as ExportSessionPayload, o as writeExportZip, oi as BackgroundConfig, on as McpOAuthAuthorizationUrlUpdateData, or as ToolInfo, ot as GetBackgroundOutputPayload, p as Agent, pi as HookDefSchema, pn as SubagentCompletedEvent, pr as UsageRecordScope, pt as McpStartupMetrics, q as ByfConfig, qi as LogContext, qn as AgentMeta, qr as configToTomlData, qt as AgentStatusUpdatedEvent, r as resolveLoggingConfig, ri as resolveByfHome, rn as Event, rr as redact, rt as ExportSessionResult, s as exportSessionDirectory, si as BackgroundConfigSchema, sn as McpServerStatusEvent, sr as ToolSource, st as GetBackgroundPayload, t as buildPromptPlan, ta as SessionLogHandle, ti as resolveConfigValue, tn as CompactionStartedEvent, tr as getRootLogger, tt as ExportSessionManifest, u as SessionWireScan, ui as ByfServiceConfig, un as PruningAppliedEvent, ur as AgentRecordEvents, ut as JsonValue, v as CoreRPC, vi as McpServerHttpConfig, vn as ToolCallStartedEvent, vr as CompactionResult, vt as RegisterToolPayload, w as createRPC, wi as OAuthRef, wn as TurnEndReason, wr as ToolStoreUpdate, wt as SessionSummary, x as RPCClient, xi as McpServerStdioConfigSchema, xn as ToolProgressEvent, xr as PromptOrigin, xt as ResumeSessionPayload, y as CoreRPCClient, yi as McpServerHttpConfigSchema, yn as ToolListUpdatedEvent, yr as AgentContextData, yt as RemoveByfProviderPayload, z as SDKRPC, zi as ThinkingConfigSchema, zn as ByfErrorOptions, zr as BearerTokenProvider, zt as UpdateSessionMetadataPayload } from "./index-CZA_2ux5.mjs";
-export { AGENT_WIRE_PROTOCOL_VERSION, ActivateSkillPayload, Agent, AgentAPI, AgentConfig, type AgentConfigUpdateData, type AgentContextData, AgentEvent, AgentMeta, type AgentRecord, type AgentRecordEvents, type AgentRecordOf, type AgentRecordPersistence, AgentReplayRecord, AgentStatusUpdatedEvent, AgentType, ApprovalDecision, ApprovalRequest, ApprovalResponse, ApprovalScope, AssistantDeltaEvent, BYF_ERROR_INFO, BackgroundConfig, BackgroundConfigSchema, type BackgroundLifecycleEvent, type BackgroundTaskInfo, type BackgroundTaskKind, BackgroundTaskStartedEvent, type BackgroundTaskStatus, BackgroundTaskTerminatedEvent, BackgroundTaskUpdatedEvent, type BearerTokenProvider, BeginCompactionPayload, type BuiltinTool, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfCoreOptions, ByfError, type ByfErrorCode, type ByfErrorInfo, type ByfErrorOptions, type ByfErrorPayload, ByfServiceConfig, ByfServiceConfigSchema, CancelPayload, CloseSessionPayload, type CompactionBeginData, CompactionBlockedEvent, CompactionCancelledEvent, CompactionCompletedEvent, CompactionResult, CompactionStartedEvent, type ContextMessage, CoreAPI, CoreInfo, CoreRPC, CoreRPCClient, CreateSessionPayload, DEPRECATED_FIELD_RULES, DeprecatedFieldRule, EmptyPayload, ErrorCodes, ErrorEvent, Event, type ExecutableToolErrorResult, type ExecutableToolResult, type ExecutableToolSuccessResult, ExportSessionManifest, ExportSessionPayload, ExportSessionResult, ExtraZipEntry, Finding, ForkSessionPayload, GetBackgroundOutputPathPayload, GetBackgroundOutputPayload, GetBackgroundPayload, HookDefConfig, HookDefSchema, HookResultEvent, JsonObject, JsonPrimitive, JsonValue, ListSessionsPayload, type LogContext, type LogEntry, type LogLevel, type LogPayload, type Logger, type LoggingConfig, type LoopContentPartEvent, LoopControl, LoopControlSchema, type LoopRecordedEvent, type LoopStepBeginEvent, type LoopStepEndEvent, type LoopToolCallEvent, type LoopToolResultEvent, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpOAuthAuthorizationUrlUpdateData, McpServerConfig, McpServerConfigSchema, McpServerHttpConfig, McpServerHttpConfigSchema, McpServerInfo, McpServerStatusEvent, McpServerStatusPayload, McpServerStdioConfig, McpServerStdioConfigSchema, McpStartupMetrics, ModelAlias, ModelAliasSchema, OAuthRef, OAuthRefSchema, type OAuthTokenProviderResolver, ObservationMaskingAppliedEvent, type PermissionApprovalResultRecord, PermissionConfig, PermissionConfigSchema, type PermissionMode, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, PromptInput, type PromptOrigin, PromptPart, PromptPayload, ProviderConfig, ProviderConfigSchema, ProviderType, ProviderTypeSchema, PruningAppliedEvent, QuestionAnswerMethod, QuestionAnswers, QuestionItem, QuestionOption, QuestionRequest, QuestionResponse, QuestionResult, RPCCallOptions, RPCClient, RPCMethods, ReconnectMcpServerPayload, RegisterToolPayload, RemoveByfProviderPayload, RenameSessionPayload, ResolveConfigValueInput, type ResolveLoggingInput, ResumeSessionPayload, ResumeSessionResult, ResumedAgentState, type RootLogger, type RuntimeConfig, SDKAPI, SDKAgentAPI, SDKAgentRPC, SDKRPC, SDKRPCClient, SDKSessionAPI, SDKSessionRPC, ServicesConfig, ServicesConfigSchema, Session, SessionAPI, type SessionAttachInput, SessionConfig, type SessionLogHandle, SessionMeta, SessionMetaUpdatedEvent, SessionMetadataPatch, SessionSkillConfig, SessionSubagentHost, SessionSummary, SessionWireScan, SetActiveToolsPayload, SetByfConfigPayload, SetModelPayload, SetModelResult, SetPermissionPayload, SetThinkingPayload, ShellExecPayload, ShellExecResult, SkillActivatedEvent, SkillSummary, SteerPayload, StopBackgroundPayload, SubagentCompletedEvent, SubagentFailedEvent, SubagentHandle, SubagentSpawnedEvent, type TelemetryClient, type TelemetryProperties, TextPromptPart, ThinkingConfig, ThinkingConfigSchema, ThinkingDeltaEvent, ToolCallDeltaEvent, ToolCallRequest, ToolCallResponse, ToolCallStartedEvent, type ToolInfo, type ToolInputDisplay, ToolListUpdatedEvent, ToolListUpdatedReason, ToolProgressEvent, ToolResultEvent, type ToolSource, type ToolStoreUpdate, ToolUpdate, TurnEndReason, TurnEndedEvent, TurnStartedEvent, TurnStepCompletedEvent, TurnStepInterruptedEvent, TurnStepRetryingEvent, TurnStepStartedEvent, USER_PROMPT_ORIGIN, UnregisterToolPayload, Unsubscribe, UpdateAnalyzeInput, UpdateSessionMetadataPayload, type UsageRecordScope, UsageStatus, type UserPromptOrigin, type UserToolRegistration, WIRE_PROTOCOL_VERSION, WarningEvent, WebSearchConfig, WebSearchConfigSchema, WebSearchProviderConfig, WebSearchProviderConfigSchema, WithAgentId, WithSessionId, analyzeConfig, applyFixes, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };
+import { $ as CreateSessionPayload, $n as TelemetryProperties, $r as mergeConfigPatch, $t as CompactionCancelledEvent, A as QuestionAnswers, Ai as ServicesConfig, An as TurnStepStartedEvent, Ar as LoopToolResultEvent, At as SetThinkingPayload, B as SDKSessionAPI, Bi as validateConfig, Bn as BYF_ERROR_INFO, Br as OAuthTokenProviderResolver, Bt as WithAgentId, C as SDKRPCClient, Ci as PermissionRuleDecisionSchema, Cn as ToolUpdate, Cr as UserPromptOrigin, Ct as SessionMetadataPatch, D as ApprovalResponse, Di as ProviderConfigSchema, Dn as TurnStepCompletedEvent, Dr as LoopStepBeginEvent, Dt as SetModelPayload, E as ApprovalRequest, Ei as ProviderConfig, En as TurnStartedEvent, Er as LoopRecordedEvent, Et as SetByfConfigPayload, F as QuestionResult, Fi as WebSearchConfigSchema, Fn as isByfError, Fr as BackgroundLifecycleEvent, Ft as StopBackgroundPayload, G as AgentAPI, Gi as Logger, Gn as SessionSubagentHost, Gr as transformTomlData, Gt as ResumedAgentState, H as ToolCallRequest, Hi as LogEntry, Hn as ByfErrorInfo, Hr as ensureConfigFile, Ht as proxyWithExtraPayload, I as SDKAPI, Ii as WebSearchProviderConfig, In as makeErrorPayload, Ir as BackgroundTaskInfo, It as TextPromptPart, J as ByfConfigPatch, Ji as SessionAttachInput, Jn as Session, Jr as parseBooleanEnv, Jt as AssistantDeltaEvent, K as BeginCompactionPayload, Ki as LoggingConfig, Kn as SubagentHandle, Kr as writeConfigFile, Kt as AgentEvent, L as SDKAgentAPI, Li as WebSearchProviderConfigSchema, Ln as toByfErrorPayload, Lr as BackgroundTaskKind, Lt as UnregisterToolPayload, M as QuestionOption, Mi as ThinkingConfig, Mn as WarningEvent, Mr as ExecutableToolResult, Mt as ShellExecResult, N as QuestionRequest, Ni as ThinkingConfigSchema, Nn as ByfErrorPayload, Nr as ExecutableToolSuccessResult, Nt as SkillSummary, O as ApprovalScope, Oi as ProviderType, On as TurnStepInterruptedEvent, Or as LoopStepEndEvent, Ot as SetModelResult, P as QuestionResponse, Pi as WebSearchConfig, Pn as fromByfErrorPayload, Pr as ToolInputDisplay, Pt as SteerPayload, Q as CoreInfo, Qn as TelemetryClient, Qr as resolveConfigPath, Qt as CompactionBlockedEvent, R as SDKAgentRPC, Ri as formatConfigValidationError, Rn as ByfError, Rr as BackgroundTaskStatus, Rt as Unsubscribe, S as RPCMethods, Si as PermissionModeSchema, Sn as ToolResultEvent, Sr as USER_PROMPT_ORIGIN, St as SessionAPI, T as ApprovalDecision, Ti as PermissionRuleScopeSchema, Tn as TurnEndedEvent, Tr as LoopContentPartEvent, Tt as SetActiveToolsPayload, U as ToolCallResponse, Ui as LogLevel, Un as ErrorCodes, Ur as parseConfigString, Ut as AgentReplayRecord, V as SDKSessionRPC, Vi as LogContext, Vn as ByfErrorCode, Vr as configToTomlData, Vt as WithSessionId, W as ActivateSkillPayload, Wi as LogPayload, Wn as RuntimeConfig, Wr as readConfigFile, Wt as ResumeSessionResult, X as CloseSessionPayload, Xn as SessionMeta, Xr as ensureByfHome, Xt as BackgroundTaskTerminatedEvent, Y as CancelPayload, Yi as SessionLogHandle, Yn as SessionConfig, Yr as resolveConfigValue, Yt as BackgroundTaskStartedEvent, Z as CoreAPI, Zn as SessionSkillConfig, Zr as resolveByfHome, Zt as BackgroundTaskUpdatedEvent, _ as ByfCoreOptions, _i as ModelAliasSchema, _n as ToolCallDeltaEvent, _r as CompactionBeginData, _t as ReconnectMcpServerPayload, a as collectFilesRecursive, ai as ByfServiceConfigSchema, an as MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, ar as BuiltinTool, at as GetBackgroundOutputPathPayload, b as RPCCallOptions, bi as PermissionConfig, bn as ToolListUpdatedReason, br as ContextMessage, bt as RenameSessionPayload, c as WIRE_PROTOCOL_VERSION, ci as LoopControl, cn as McpServerStatusPayload, cr as UserToolRegistration, ct as JsonObject, d as normalizeTimestampMs, di as McpServerConfigSchema, dn as SessionMetaUpdatedEvent, dr as AgentRecordOf, dt as ListSessionsPayload, ei as BackgroundConfig, en as CompactionCompletedEvent, er as flushDiagnosticLogs, et as EmptyPayload, f as scanSessionWire, fi as McpServerHttpConfig, fn as SkillActivatedEvent, fr as AgentRecordPersistence, ft as McpServerInfo, g as ByfCore, gi as ModelAlias, gn as ThinkingDeltaEvent, gr as AgentConfigUpdateData, gt as PromptPayload, h as AgentType, hi as McpServerStdioConfigSchema, hn as SubagentSpawnedEvent, hr as PermissionMode, ht as PromptPart, i as ExtraZipEntry, ii as ByfServiceConfig, in as HookResultEvent, ir as resolveGlobalLogPath, it as ForkSessionPayload, j as QuestionItem, ji as ServicesConfigSchema, jn as UsageStatus, jr as ExecutableToolErrorResult, jt as ShellExecPayload, k as QuestionAnswerMethod, ki as ProviderTypeSchema, kn as TurnStepRetryingEvent, kr as LoopToolCallEvent, kt as SetPermissionPayload, l as buildExportManifest, li as LoopControlSchema, ln as ObservationMaskingAppliedEvent, lr as AgentRecord, lt as JsonPrimitive, m as AgentConfig, mi as McpServerStdioConfig, mn as SubagentFailedEvent, mr as PermissionApprovalResultRecord, mt as PromptInput, n as ResolveLoggingInput, ni as ByfConfigPatchSchema, nn as ErrorEvent, nr as log, nt as ExportSessionPayload, o as writeExportZip, oi as HookDefConfig, on as McpOAuthAuthorizationUrlUpdateData, or as ToolInfo, ot as GetBackgroundOutputPayload, p as Agent, pi as McpServerHttpConfigSchema, pn as SubagentCompletedEvent, pr as UsageRecordScope, pt as McpStartupMetrics, q as ByfConfig, qi as RootLogger, qn as AgentMeta, qr as ResolveConfigValueInput, qt as AgentStatusUpdatedEvent, r as resolveLoggingConfig, ri as ByfConfigSchema, rn as Event, rr as redact, rt as ExportSessionResult, s as exportSessionDirectory, si as HookDefSchema, sn as McpServerStatusEvent, sr as ToolSource, st as GetBackgroundPayload, t as buildPromptPlan, ti as BackgroundConfigSchema, tn as CompactionStartedEvent, tr as getRootLogger, tt as ExportSessionManifest, u as SessionWireScan, ui as McpServerConfig, un as PruningAppliedEvent, ur as AgentRecordEvents, ut as JsonValue, v as CoreRPC, vi as OAuthRef, vn as ToolCallStartedEvent, vr as CompactionResult, vt as RegisterToolPayload, w as createRPC, wi as PermissionRuleSchema, wn as TurnEndReason, wr as ToolStoreUpdate, wt as SessionSummary, x as RPCClient, xi as PermissionConfigSchema, xn as ToolProgressEvent, xr as PromptOrigin, xt as ResumeSessionPayload, y as CoreRPCClient, yi as OAuthRefSchema, yn as ToolListUpdatedEvent, yr as AgentContextData, yt as RemoveByfProviderPayload, z as SDKRPC, zi as getDefaultConfig, zn as ByfErrorOptions, zr as BearerTokenProvider, zt as UpdateSessionMetadataPayload } from "./index-BNApCprm.mjs";
+export { AGENT_WIRE_PROTOCOL_VERSION, ActivateSkillPayload, Agent, AgentAPI, AgentConfig, type AgentConfigUpdateData, type AgentContextData, AgentEvent, AgentMeta, type AgentRecord, type AgentRecordEvents, type AgentRecordOf, type AgentRecordPersistence, AgentReplayRecord, AgentStatusUpdatedEvent, AgentType, ApprovalDecision, ApprovalRequest, ApprovalResponse, ApprovalScope, AssistantDeltaEvent, BYF_ERROR_INFO, BackgroundConfig, BackgroundConfigSchema, type BackgroundLifecycleEvent, type BackgroundTaskInfo, type BackgroundTaskKind, BackgroundTaskStartedEvent, type BackgroundTaskStatus, BackgroundTaskTerminatedEvent, BackgroundTaskUpdatedEvent, type BearerTokenProvider, BeginCompactionPayload, type BuiltinTool, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfCoreOptions, ByfError, type ByfErrorCode, type ByfErrorInfo, type ByfErrorOptions, type ByfErrorPayload, ByfServiceConfig, ByfServiceConfigSchema, CancelPayload, CloseSessionPayload, type CompactionBeginData, CompactionBlockedEvent, CompactionCancelledEvent, CompactionCompletedEvent, CompactionResult, CompactionStartedEvent, type ContextMessage, CoreAPI, CoreInfo, CoreRPC, CoreRPCClient, CreateSessionPayload, EmptyPayload, ErrorCodes, ErrorEvent, Event, type ExecutableToolErrorResult, type ExecutableToolResult, type ExecutableToolSuccessResult, ExportSessionManifest, ExportSessionPayload, ExportSessionResult, ExtraZipEntry, ForkSessionPayload, GetBackgroundOutputPathPayload, GetBackgroundOutputPayload, GetBackgroundPayload, HookDefConfig, HookDefSchema, HookResultEvent, JsonObject, JsonPrimitive, JsonValue, ListSessionsPayload, type LogContext, type LogEntry, type LogLevel, type LogPayload, type Logger, type LoggingConfig, type LoopContentPartEvent, LoopControl, LoopControlSchema, type LoopRecordedEvent, type LoopStepBeginEvent, type LoopStepEndEvent, type LoopToolCallEvent, type LoopToolResultEvent, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpOAuthAuthorizationUrlUpdateData, McpServerConfig, McpServerConfigSchema, McpServerHttpConfig, McpServerHttpConfigSchema, McpServerInfo, McpServerStatusEvent, McpServerStatusPayload, McpServerStdioConfig, McpServerStdioConfigSchema, McpStartupMetrics, ModelAlias, ModelAliasSchema, OAuthRef, OAuthRefSchema, type OAuthTokenProviderResolver, ObservationMaskingAppliedEvent, type PermissionApprovalResultRecord, PermissionConfig, PermissionConfigSchema, type PermissionMode, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, PromptInput, type PromptOrigin, PromptPart, PromptPayload, ProviderConfig, ProviderConfigSchema, ProviderType, ProviderTypeSchema, PruningAppliedEvent, QuestionAnswerMethod, QuestionAnswers, QuestionItem, QuestionOption, QuestionRequest, QuestionResponse, QuestionResult, RPCCallOptions, RPCClient, RPCMethods, ReconnectMcpServerPayload, RegisterToolPayload, RemoveByfProviderPayload, RenameSessionPayload, ResolveConfigValueInput, type ResolveLoggingInput, ResumeSessionPayload, ResumeSessionResult, ResumedAgentState, type RootLogger, type RuntimeConfig, SDKAPI, SDKAgentAPI, SDKAgentRPC, SDKRPC, SDKRPCClient, SDKSessionAPI, SDKSessionRPC, ServicesConfig, ServicesConfigSchema, Session, SessionAPI, type SessionAttachInput, SessionConfig, type SessionLogHandle, SessionMeta, SessionMetaUpdatedEvent, SessionMetadataPatch, SessionSkillConfig, SessionSubagentHost, SessionSummary, SessionWireScan, SetActiveToolsPayload, SetByfConfigPayload, SetModelPayload, SetModelResult, SetPermissionPayload, SetThinkingPayload, ShellExecPayload, ShellExecResult, SkillActivatedEvent, SkillSummary, SteerPayload, StopBackgroundPayload, SubagentCompletedEvent, SubagentFailedEvent, SubagentHandle, SubagentSpawnedEvent, type TelemetryClient, type TelemetryProperties, TextPromptPart, ThinkingConfig, ThinkingConfigSchema, ThinkingDeltaEvent, ToolCallDeltaEvent, ToolCallRequest, ToolCallResponse, ToolCallStartedEvent, type ToolInfo, type ToolInputDisplay, ToolListUpdatedEvent, ToolListUpdatedReason, ToolProgressEvent, ToolResultEvent, type ToolSource, type ToolStoreUpdate, ToolUpdate, TurnEndReason, TurnEndedEvent, TurnStartedEvent, TurnStepCompletedEvent, TurnStepInterruptedEvent, TurnStepRetryingEvent, TurnStepStartedEvent, USER_PROMPT_ORIGIN, UnregisterToolPayload, Unsubscribe, UpdateSessionMetadataPayload, type UsageRecordScope, UsageStatus, type UserPromptOrigin, type UserToolRegistration, WIRE_PROTOCOL_VERSION, WarningEvent, WebSearchConfig, WebSearchConfigSchema, WebSearchProviderConfig, WebSearchProviderConfigSchema, WithAgentId, WithSessionId, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };

package/dist/index.mjs

@@ -3032,7 +3032,7 @@ function parseSkillText(options) {
 		throw error;
 	}
 	const frontmatter = parsed.data ?? {};
-	if (!isRecord$2(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
+	if (!isRecord$1(frontmatter)) throw new SkillParseError(`Frontmatter in ${options.skillMdPath} must be a mapping at the top level`);
 	const metadata = normalizeMetadata(frontmatter);
 	if (!isSupportedSkillType(metadata.type)) throw new UnsupportedSkillTypeError(metadata.type ?? String(frontmatter["type"]));
 	const name = nonEmptyString$2(metadata.name);
@@ -3145,7 +3145,7 @@ function tokenizeArgs(raw) {
 function nonEmptyString$2(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
-function isRecord$2(value) {
+function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -3153,14 +3153,36 @@ function isRecord$2(value) {
 var mcp_config_default = "---\nname: mcp-config\ndescription: Configure MCP servers and handle MCP OAuth login.\n---\n\n# Interactive MCP server configuration\n\nThe user invoked this skill through `/mcp-config` or `/skill:mcp-config`.\nEither they want to log into an MCP server that asked for OAuth, or they\nwant to edit the `mcp.json` that lists MCP servers. The work is small and\nlocal — handle it on this turn yourself, no agents or planning todos.\n\nPick the flow from the user's message and your tool list:\n\n- An `mcp__<server>__authenticate` tool is in your list, the user says\n  \"log in\" / \"auth\" / \"sign in\", they invoke `/mcp-config login\n  <server>`, or they quote a `needs-auth` status → **Login**.\n- Add / edit / remove / list of an `mcp.json` entry → **Config edit**.\n- Bare `/mcp-config` with no `authenticate` tool in your list →\n  **Config edit**. If there were a pending login, the authenticate tool\n  would be in your list.\n\n## Login\n\nEach MCP server in `needs-auth` exposes one `mcp__<server>__authenticate`\ntool. Call it for the server the user means — its own description owns\nthe OAuth UX (printing the URL, blocking on the callback, reconnecting on\nsuccess). Surface its output verbatim, including the authorization URL\nunchanged; the URL contains state and PKCE parameters that break if\nedited.\n\nIf the user named a server that has no authenticate tool, say so in one\nsentence and stop — do **not** fall into config edit. They're trying to\nlog in to a server that isn't currently waiting for login; quietly\nrewriting `mcp.json` would be the wrong fix. If multiple authenticate\ntools exist and the user didn't name one, ask which.\n\n## Config edit\n\nConfig lives in two files; on key collision the project file overrides\nthe user-global one:\n\n- User-global: `~/.byf/mcp.json` (or `$BYF_HOME/mcp.json` if\n  set). Use for servers you want everywhere.\n- Project-local: `<cwd>/.byf/mcp.json`. Mention once that stdio\n  entries spawn commands at session start, so this should only live in\n  trusted repos.\n\nBoth files wrap their entries the same way:\n\n```json\n{ \"mcpServers\": { \"<name>\": { /* entry */ } } }\n```\n\nA minimal stdio entry needs `command` (+ optional `args`, `env`, `cwd`).\nA minimal http entry needs `url`; add `bearerTokenEnvVar: \"ENV_NAME\"` for\nservers that authenticate with a static bearer token from the\nenvironment. Servers that use OAuth take no token field — the login flow\nabove handles them. `transport` is inferred from `command` vs `url`, so\nomit it. For less common fields (`enabled`, `startupTimeoutMs`,\n`toolTimeoutMs`, `enabledTools`, `disabledTools`, `headers`) the source of\ntruth is `McpServerStdioConfigSchema` / `McpServerHttpConfigSchema` in\n`packages/agent-core/src/config/schema.ts`.\n\nIf the user only wants to **see** what's configured, read both files,\nshow a merged view, and stop — no scope prompt, no write.\n\nFor changes, the flow is:\n\n1. **Pick a scope.** Infer it from the user's words when you can\n   (project / repo / this checkout / cwd → project; global / everywhere /\n   all projects → user-global). When the request is genuinely scope-less,\n   use one `AskUserQuestion` to ask user-global vs project-local, defaulting\n   to user-global. Use plain text for every other question — `AskUserQuestion`\n   is a poor fit for free-form input. If the user dismisses the scope\n   question, stop; you can't safely guess where they wanted the change.\n2. **Read and announce.** Read the target file (a missing or empty file\n   is fine; you'll create `{ \"mcpServers\": {} }`). If JSON parsing fails,\n   surface the error verbatim and stop — silently overwriting a broken\n   file could destroy work. Then show the user the target path, what's\n   currently in it, and the entry you're about to write or delete. This\n   is for transparency, not a confirmation gate — the Edit/Write\n   permission prompt is the real gate, and your message is what gives\n   the user context when that prompt appears. In yolo / afk modes there\n   is no prompt, which is those modes' explicit contract.\n3. **Write and tell them how to reload MCP servers.** Preserve unrelated\n   entries and the `mcpServers` wrapper. MCP servers load at session\n   start, so tell the user to start a new session (for example `/new`) or\n   restart BYF for the change to take effect.\n\n## Secrets\n\nDon't store secrets (tokens, keys, passwords) as literals in\n`mcp.json` — it's a plain config file on disk. http servers should use\n`bearerTokenEnvVar` to reference an env var instead; if a stdio entry\nmust inline one in `env`, warn the user before writing.\n";
 //#endregion
 //#region src/skill/builtin/mcp-config.ts
-const PSEUDO_PATH = "builtin://mcp-config";
-const parsed = parseSkillText({
+const PSEUDO_PATH$1 = "builtin://mcp-config";
+const parsed$1 = parseSkillText({
 	skillMdPath: "/builtin/skills/mcp-config.md",
 	skillDirName: "mcp-config",
 	source: "builtin",
 	text: mcp_config_default
 });
 const MCP_CONFIG_SKILL = {
+	...parsed$1,
+	path: PSEUDO_PATH$1,
+	dir: PSEUDO_PATH$1,
+	metadata: {
+		...parsed$1.metadata,
+		type: parsed$1.metadata.type ?? "inline",
+		disableModelInvocation: true
+	}
+};
+//#endregion
+//#region src/skill/builtin/update-config.md
+var update_config_default = "---\nname: update-config\ndescription: Audit and fix ~/.byf/config.toml — remove deprecated fields, migrate legacy settings, and flag semantic conflicts.\n---\n\n# Audit and fix config.toml\n\nThe user invoked this skill via `/update-config` or `/skill:update-config`.\nThe goal is to bring `~/.byf/config.toml` in line with the current BYF schema:\nremove deprecated fields, migrate legacy settings, and point out semantic\nconflicts that a deterministic linter cannot catch. The work is small and\nlocal — handle it on this turn yourself, no agents or planning todos.\n\n## Read the config\n\n1. **Resolve the path.** Default: `~/.byf/config.toml` (or\n   `$BYF_HOME/config.toml` if that env var is set). If the user passed a path\n   as an argument, use that instead.\n2. **Read the file.** If it does not exist, say so and stop — there is nothing\n   to update. If the TOML fails to parse, surface the parse error verbatim and\n   **stop** — do not overwrite a broken file, that could destroy the user's\n   work.\n3. **Never echo secrets.** `config.toml` stores `api_key` secret values, and\n   `oauth` references (a `{ storage, key }` handle that points at a\n   file/keyring entry — not the token itself). When you describe what you\n   found or plan to change, state only that a credential is present or\n   absent — never quote the `api_key` value itself, not even partially.\n\n## What to check for\n\nField-level validity (which keys exist, what types and enums are allowed) is\n**not** something to reproduce here. The single source of truth is\n`ByfConfigSchema` in `packages/agent-core/src/config/schema.ts` — read it when\nyou need to confirm whether a field is recognized and what values it accepts.\n\nThe checks below fall into three groups. Report findings from all three before\nmaking any change.\n\n### 1. Deprecated, renamed, and migrated fields\n\nThese are historical fields that the schema no longer accepts or has replaced.\nDelete them, except where the table says to rename or migrate:\n\n| Field | Action |\n|---|---|\n| `default_yolo` / `defaultYolo` (top-level) | Remove. Use `yolo` instead. |\n| `services.byf_search` | Remove. (Legacy service, superseded by `[services.web_search]`.) |\n| `services.byf_fetch` | Remove. Use `[services.fetch_url]` instead. |\n| `loop_control.max_steps_per_run` | **Rename** to `max_steps_per_turn`, preserving the value. First check whether `max_steps_per_turn` is already present: if so, the old key is a stale duplicate — just delete it; if not, write `max_steps_per_turn` with the old value, then delete `max_steps_per_run`. (The runtime auto-copies the value on read, but this skill edits the file directly and skips that roundtrip — so you must perform the rename yourself to avoid losing the limit.) |\n| `default_thinking` (top-level boolean) | Migrate — see below. |\n\n**`default_thinking` migration** (matches the runtime precedence in\n`byf-tui.ts`: a `[thinking]` block wins over `default_thinking`):\n\n- If `[thinking]` already has `mode` or `effort` set, `default_thinking` was\n  never effective — just remove it.\n- Otherwise migrate by value: `true` → write `[thinking]` with\n  `mode = \"on\"` and `effort = \"high\"`; `false` → `[thinking]` with\n  `mode = \"off\"`. Then remove `default_thinking`.\n\n> **Raw-passthrough blind spot.** Fields stripped by the schema (like\n> `byf_search`, `byf_fetch`) survive inside `config.raw` and get written back\n> on every read→write roundtrip, so they linger in the file even though they\n> have no effect. Deleting them here is the only way to clear them — that is\n> the core value of this skill.\n\n### 2. Semantic conflicts (the part a linter cannot enumerate)\n\nLook for cross-field problems that require understanding intent:\n\n- A provider with **both** `api_key` and `oauth` configured — these are\n  mutually exclusive; ask which one the user meant.\n- `thinking.mode = \"off\"` **and** a non-empty `thinking.effort` — the effort\n  is ignored; suggest removing it or flipping the mode.\n- `models.<alias>.capabilities` containing a value not in the valid set. The\n  valid set is the single source of truth: read `CAPABILITY_DEFINITIONS` (or\n  the derived `VALID_CAPABILITIES`) in\n  `packages/agent-core/src/providers/runtime-provider.ts`. Comparison is\n  case-insensitive at runtime, so flag only genuine mismatches.\n- A model alias, `default_provider`, or `default_model` that points at a\n  provider or model that does not exist — a dangling reference. Report it; do\n  **not** delete it, the user may be mid-edit.\n\n### 3. Housekeeping\n\n- Top-level keys that are not in `ByfConfigSchema` (and not a deprecated key\n  above) — likely typos or leftovers from an old version. Report them; only\n  remove with user confirmation. Note that legitimate unknown keys (e.g.\n  `theme`, `notifications`) are preserved by design through `config.raw`, so\n  do not touch keys the user clearly added on purpose.\n- **Nested keys inside containers** (`[providers.<name>]`, `[models.<alias>]`,\n  `[services]`, `[background]`, `[loop_control]`, `[thinking]`,\n  `[permission]`). A key that the corresponding section of `ByfConfigSchema`\n  does not recognize is silently dropped by the parser and has no effect — a\n  common cause is a typo (e.g. `max_context_tokns` instead of\n  `max_context_size`). Cross-check each sub-key against the schema and flag\n  any mismatch; fix only with user confirmation. Note that `[permission]`\n  still accepts the legacy `deny`/`allow`/`ask` array shorthand, so do not\n  report those as unknown.\n\n## Make changes\n\nFor each change, show the user **what is currently there → what you plan to\nwrite** before editing. Then apply edits with Write/Edit. The Edit/Write\npermission prompt is the real safety gate — your summary is what gives the\nuser context when that prompt appears. There is no automatic backup; if the\nuser wants one, suggest they copy the file first.\n\nAfter editing, tell the user to start a new session (e.g. `/new`) or restart\nBYF for the config change to take effect.\n";
+//#endregion
+//#region src/skill/builtin/update-config.ts
+const PSEUDO_PATH = "builtin://update-config";
+const parsed = parseSkillText({
+	skillMdPath: "/builtin/skills/update-config.md",
+	skillDirName: "update-config",
+	source: "builtin",
+	text: update_config_default
+});
+const UPDATE_CONFIG_SKILL = {
 	...parsed,
 	path: PSEUDO_PATH,
 	dir: PSEUDO_PATH,
@@ -3174,6 +3196,7 @@ const MCP_CONFIG_SKILL = {
 //#region src/skill/builtin/index.ts
 function registerBuiltinSkills(registry) {
 	registry.registerBuiltinSkill(MCP_CONFIG_SKILL);
+	registry.registerBuiltinSkill(UPDATE_CONFIG_SKILL);
 }
 //#endregion
 //#region src/skill/scanner.ts
@@ -8221,7 +8244,7 @@ const OptionalStringSchema = z.preprocess((value) => {
 	if (typeof value === "string") return value;
 	if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") return String(value);
 }, z.string().optional());
-const HookSpecificOutputSchema = z.preprocess((value) => isRecord$1(value) ? value : void 0, z.looseObject({
+const HookSpecificOutputSchema = z.preprocess((value) => isRecord(value) ? value : void 0, z.looseObject({
 	message: OptionalStringSchema,
 	permissionDecision: z.unknown().optional(),
 	permissionDecisionReason: OptionalStringSchema
@@ -8381,7 +8404,7 @@ function tryKillProcess(child, signal) {
 		} catch {}
 	}
 }
-function isRecord$1(value) {
+function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorMessage(error) {
@@ -11049,6 +11072,7 @@ const YoloOutsideWorkspacePermissionPolicy = {
 	evaluate({ agent, mode, toolCallContext }) {
 		if (mode !== "yolo") return void 0;
 		const toolName = toolCallContext.toolCall.name;
+		if (isDefaultAutoAllowTool(toolName)) return void 0;
 		const toolAccess = FILE_ACCESS_TOOLS[toolName];
 		if (toolAccess === void 0) return void 0;
 		const [operation, displayOperation] = toolAccess;
@@ -15908,655 +15932,66 @@ function isFileExistsError(error) {
 	return typeof error === "object" && error !== null && error.code === "EEXIST";
 }
 //#endregion
-//#region src/config/update-rules.ts
-const REMOVED_RULES = [
-	{
-		path: "default_yolo",
-		pathParts: ["default_yolo"],
-		kind: "removed",
-		detail: "Top-level field default_yolo is removed. Use yolo instead.",
-		deprecatedSince: "pre-0.1.0"
-	},
-	{
-		path: "defaultYolo",
-		pathParts: ["defaultYolo"],
-		kind: "removed",
-		detail: "Top-level field defaultYolo is removed. Use yolo instead.",
-		deprecatedSince: "pre-0.1.0"
-	},
-	{
-		path: "services.byf_search",
-		pathParts: ["services", "byf_search"],
-		kind: "removed",
-		detail: "Deprecated service byf_search is removed.",
-		deprecatedSince: "pre-0.1.0"
-	},
-	{
-		path: "services.byf_fetch",
-		pathParts: ["services", "byf_fetch"],
-		kind: "removed",
-		detail: "Deprecated service byf_fetch is removed. Use services.fetch_url instead.",
-		deprecatedSince: "pre-0.1.0"
+//#region src/version.ts
+function getCoreVersion() {
+	try {
+		const raw = readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf-8");
+		const pkg = JSON.parse(raw);
+		return typeof pkg.version === "string" ? pkg.version : "0.0.0";
+	} catch {
+		return "0.0.0";
 	}
-];
-const RENAMED_RULES = [{
-	path: "loop_control.max_steps_per_run",
-	pathParts: ["loop_control", "max_steps_per_run"],
-	kind: "renamed",
-	detail: "Renamed to max_steps_per_turn.",
-	deprecatedSince: "pre-0.1.0"
-}];
-const MIGRATED_RULES = [{
-	path: "default_thinking",
-	pathParts: ["default_thinking"],
-	kind: "migrated",
-	detail: "Migrate default_thinking to [thinking] block.",
-	deprecatedSince: "pre-0.1.0"
-}];
+}
+//#endregion
+//#region src/mcp/client-shared.ts
+const BYF_MCP_CLIENT_VERSION = getCoreVersion();
 /**
-* Combined list of all deprecated-field rules.
-*
-* Order within the list does not affect correctness (the CLI groups by kind
-* at display time), but a stable order helps test expectations.
+* Build the `RequestOptions` object accepted by the MCP SDK's `callTool`,
+* including either the configured tool-call timeout, an in-flight abort
+* signal, both, or neither. Returns `undefined` when nothing needs to be
+* passed so the SDK falls back to its defaults.
 */
-const DEPRECATED_FIELD_RULES = [
-	...REMOVED_RULES,
-	...RENAMED_RULES,
-	...MIGRATED_RULES
-];
-//#endregion
-//#region src/providers/runtime-provider.ts
-function resolveRuntimeProvider(input) {
-	const modelName = input.model ?? input.config.defaultModel;
-	if (modelName === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, "No model is selected. Set default_model in config.toml or pass a configured model alias.");
-	const alias = input.config.models?.[modelName];
-	if (alias === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" is not configured in config.toml. Add a [models."${modelName}"] entry with max_context_size.`);
-	const resolvedModel = alias.model;
-	const providerName = alias.provider ?? input.config.defaultProvider;
-	const providerConfig = providerName === void 0 ? void 0 : input.config.providers[providerName];
-	if (providerName === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" must define a provider in config.toml.`);
-	if (providerConfig === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" for model "${modelName}" is not configured.`);
-	if (!Number.isInteger(alias.maxContextSize) || alias.maxContextSize <= 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" must define a positive max_context_size in config.toml.`);
-	if (input.validateCredentials !== false && providerConfig.type !== "vertexai" && providerConfig.oauth === void 0 && providerApiKey(providerConfig) === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" has no credentials configured. Set apiKey, oauth, or a provider env API key in config.toml.`);
-	const provider = toKosongProviderConfig(providerConfig, resolvedModel, input.byfRequestHeaders, alias.maxOutputSize, alias.reasoningKey, input.promptCacheKey);
+function buildRequestOptions(toolCallTimeoutMs, signal) {
+	if (toolCallTimeoutMs === void 0 && signal === void 0) return void 0;
 	return {
-		modelName,
-		providerName,
-		modelCapabilities: resolveModelCapabilities(alias, provider),
-		provider
+		timeout: toolCallTimeoutMs,
+		signal
 	};
 }
-async function resolveRuntimeProviderWithOAuth(input) {
-	const resolved = resolveRuntimeProvider(input);
-	const resolveAuth = createRuntimeProviderAuthResolver(input, resolved);
-	if (resolveAuth === void 0) return resolved;
-	await resolveAuth();
+function toMcpToolDefinition(tool) {
 	return {
-		...resolved,
-		resolveAuth
-	};
-}
-function createRuntimeProviderAuthResolver(input, resolved = resolveRuntimeProvider(input)) {
-	const providerName = resolved.providerName;
-	if (providerName === void 0) return void 0;
-	const providerConfig = input.config.providers[providerName];
-	if (providerConfig?.oauth === void 0) return void 0;
-	if (providerApiKey(providerConfig) !== void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" has both apiKey and oauth set in config.toml — they are mutually exclusive. Remove one.`);
-	const tokenProvider = input.resolveOAuthTokenProvider?.(providerName, providerConfig.oauth);
-	if (tokenProvider === void 0) return async () => {
-		throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`);
-	};
-	return async (options) => {
-		let apiKey;
-		try {
-			apiKey = await tokenProvider.getAccessToken(options?.forceRefresh === true ? { force: true } : void 0);
-		} catch (error) {
-			if (!isAuthLoginRequired(error)) (input.log ?? log).warn("oauth token fetch failed", {
-				providerName,
-				error
-			});
-			throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`, { cause: error });
-		}
-		if (apiKey.trim().length === 0) throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`);
-		return { apiKey };
+		name: tool.name,
+		description: tool.description ?? "",
+		inputSchema: tool.inputSchema
 	};
 }
-function isAuthLoginRequired(error) {
-	return isByfError(error) && error.code === ErrorCodes.AUTH_LOGIN_REQUIRED;
-}
-const CAPABILITY_DEFINITIONS = [
-	{
-		name: "image_in",
-		returnKey: "image_in"
-	},
-	{
-		name: "video_in",
-		returnKey: "video_in"
-	},
-	{
-		name: "audio_in",
-		returnKey: "audio_in"
-	},
-	{
-		name: "thinking",
-		returnKey: "thinking"
-	},
-	{
-		name: "always_thinking",
-		returnKey: "thinking"
-	},
-	{
-		name: "tool_use",
-		returnKey: "tool_use"
-	},
-	{
-		name: "thinking_effort",
-		returnKey: "thinking_effort"
-	},
-	{
-		name: "thinking_xhigh",
-		returnKey: "thinking_xhigh"
-	},
-	{
-		name: "thinking_max",
-		returnKey: "thinking_max"
-	}
-];
 /**
-* The list of every valid capability name that can appear in a model
-* alias's `capabilities` array.
-*
-* Derives directly from {@link CAPABILITY_DEFINITIONS} so that adding a
-* new capability in one place automatically keeps both the validation
-* gate (`update-config`) and the runtime resolver in sync.
+* Normalise the SDK's `callTool` return into kosong's {@link MCPToolResult}.
+* The SDK can return either the modern `{ content, isError }` shape or a
+* legacy `{ toolResult }` shape; we collapse the legacy shape to a single
+* text content block.
 */
-const VALID_CAPABILITIES = CAPABILITY_DEFINITIONS.map((d) => d.name);
-function resolveModelCapabilities(alias, provider) {
-	const capabilities = new Set((alias.capabilities ?? []).map((capability) => capability.trim().toLowerCase()));
-	const has = (capability) => capabilities.has(capability);
-	const providerCapability = createProvider(providerForCapabilityProbe(provider)).getCapability?.(provider.model) ?? UNKNOWN_CAPABILITY;
-	const returnKeyToNames = /* @__PURE__ */ new Map();
-	for (const def of CAPABILITY_DEFINITIONS) {
-		const names = returnKeyToNames.get(def.returnKey) ?? [];
-		names.push(def.name);
-		returnKeyToNames.set(def.returnKey, names);
-	}
-	const resolved = {};
-	for (const [returnKey, names] of returnKeyToNames) resolved[returnKey] = names.some((n) => has(n)) || Boolean(providerCapability[returnKey]);
-	return {
-		...resolved,
-		max_context_tokens: alias.maxContextSize
-	};
-}
-function toKosongProviderConfig(provider, model, byfRequestHeaders, maxOutputSize, reasoningKey, promptCacheKey) {
-	switch (provider.type) {
-		case "anthropic": return {
-			type: "anthropic",
-			model,
-			baseUrl: providerValue(provider.baseUrl, provider.env, "ANTHROPIC_BASE_URL"),
-			apiKey: providerApiKey(provider),
-			...maxOutputSize !== void 0 ? { defaultMaxTokens: maxOutputSize } : {},
-			...defaultHeadersField(provider.customHeaders)
-		};
-		case "openai-completions": {
-			const defaultHeaders = {
-				...byfRequestHeaders,
-				...provider.customHeaders
-			};
-			const generationKwargs = {
-				prompt_cache_key: promptCacheKey,
-				extra_body: provider.extraBody
-			};
-			if (Object.keys(defaultHeaders).length === 0) return {
-				type: "openai-completions",
-				model,
-				baseUrl: providerValue(provider.baseUrl, provider.env, "BYF_BASE_URL"),
-				reasoningKey,
-				thinkingEffortKey: provider.thinkingEffortKey,
-				generationKwargs,
-				apiKey: providerApiKey(provider)
-			};
-			return {
-				type: "openai-completions",
-				model,
-				baseUrl: providerValue(provider.baseUrl, provider.env, "BYF_BASE_URL"),
-				reasoningKey,
-				thinkingEffortKey: provider.thinkingEffortKey,
-				generationKwargs,
-				defaultHeaders,
-				apiKey: providerApiKey(provider)
-			};
-		}
-		case "google-genai": return {
-			type: "google-genai",
-			model,
-			apiKey: providerApiKey(provider)
-		};
-		case "openai_responses": return {
-			type: "openai_responses",
-			model,
-			baseUrl: providerValue(provider.baseUrl, provider.env, "OPENAI_BASE_URL"),
-			apiKey: providerApiKey(provider),
-			...defaultHeadersField(provider.customHeaders)
+function toMcpToolResult(result) {
+	if (typeof result === "object" && result !== null && "content" in result) {
+		const typed = result;
+		if (Array.isArray(typed.content)) return {
+			content: typed.content,
+			isError: typed.isError === true
 		};
-		case "vertexai": return {
-			type: "vertexai",
-			model,
-			vertexai: hasVertexAIServiceEnv(provider),
-			apiKey: hasVertexAIServiceEnv(provider) ? void 0 : providerApiKey(provider),
-			project: vertexAIProject(provider),
-			location: vertexAILocation(provider)
+	}
+	if (typeof result === "object" && result !== null && "toolResult" in result) {
+		const legacy = result.toolResult;
+		return {
+			content: [{
+				type: "text",
+				text: typeof legacy === "string" ? legacy : JSON.stringify(legacy)
+			}],
+			isError: false
 		};
-		default: {
-			const exhaustive = provider.type;
-			throw new ByfError(ErrorCodes.MODEL_CONFIG_INVALID, `Unsupported provider type: ${String(exhaustive)}`);
-		}
 	}
-}
-function defaultHeadersField(headers) {
-	if (headers === void 0 || Object.keys(headers).length === 0) return {};
-	return { defaultHeaders: { ...headers } };
-}
-function providerForCapabilityProbe(provider) {
-	if (provider.type === "vertexai") return {
-		...provider,
-		vertexai: false,
-		project: void 0,
-		location: void 0,
-		apiKey: provider.apiKey === void 0 || provider.apiKey.length === 0 ? "capability-probe" : provider.apiKey
-	};
-	if (provider.apiKey !== void 0 && provider.apiKey.length > 0) return provider;
 	return {
-		...provider,
-		apiKey: "capability-probe"
-	};
-}
-function providerApiKey(provider) {
-	switch (provider.type) {
-		case "anthropic": return providerValue(provider.apiKey, provider.env, "ANTHROPIC_API_KEY");
-		case "openai_responses": return providerValue(provider.apiKey, provider.env, "OPENAI_API_KEY");
-		case "openai-completions": return providerValue(provider.apiKey, provider.env, "BYF_API_KEY");
-		case "google-genai": return providerValue(provider.apiKey, provider.env, "GOOGLE_API_KEY");
-		case "vertexai": return nonEmptyString$1(provider.apiKey) ?? envValue(provider.env, "VERTEXAI_API_KEY") ?? envValue(provider.env, "GOOGLE_API_KEY");
-		default: {
-			const exhaustive = provider.type;
-			throw new ByfError(ErrorCodes.MODEL_CONFIG_INVALID, `Unsupported provider type: ${String(exhaustive)}`);
-		}
-	}
-}
-function hasVertexAIServiceEnv(provider) {
-	return vertexAIProject(provider) !== void 0 && vertexAILocation(provider) !== void 0;
-}
-function vertexAIProject(provider) {
-	return envValue(provider.env, "GOOGLE_CLOUD_PROJECT");
-}
-function vertexAILocation(provider) {
-	return envValue(provider.env, "GOOGLE_CLOUD_LOCATION") ?? locationFromVertexAIBaseUrl(provider.baseUrl);
-}
-function providerValue(configured, env, envKey) {
-	return nonEmptyString$1(configured) ?? envValue(env, envKey);
-}
-function envValue(env, key) {
-	return nonEmptyString$1(env?.[key]);
-}
-function nonEmptyString$1(value) {
-	const trimmed = value?.trim();
-	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
-}
-function locationFromVertexAIBaseUrl(baseUrl) {
-	const url = nonEmptyString$1(baseUrl);
-	if (url === void 0) return void 0;
-	try {
-		const host = new URL(url).hostname;
-		return host.endsWith("-aiplatform.googleapis.com") ? nonEmptyString$1(host.slice(0, -26)) : void 0;
-	} catch {
-		return;
-	}
-}
-//#endregion
-//#region src/config/update.ts
-/**
-* Scan a parsed config (including `config.raw`) and return all Findings
-* for deprecated / renamed / migrated / dangling / unknown / invalid-value
-* fields.
-*
-* This is a **pure** function — no file I/O, no side effects.
-*
-* Detection is based on `config.raw` (the clone of the original TOML data),
-* not on the parsed camelCase schema. This matches the PRD's observation
-* that `raw` is both the protection layer (preserving unknown fields) and
-* the blind spot (retaining stale keys through read→write cycles).
-*/
-function analyzeConfig(config) {
-	const raw = config.raw;
-	const findings = [];
-	if (isRecord(raw)) {
-		for (const rule of DEPRECATED_FIELD_RULES) if (pathExistsInRaw(raw, rule.pathParts)) findings.push({
-			kind: rule.kind,
-			path: rule.path,
-			detail: rule.detail,
-			deprecatedSince: rule.deprecatedSince
-		});
-		const defaultThinkingFinding = findings.find((f) => f.path === "default_thinking");
-		if (defaultThinkingFinding) {
-			const thinking = config.thinking;
-			if (thinking && (thinking.mode !== void 0 || thinking.effort !== void 0)) {
-				defaultThinkingFinding.kind = "removed";
-				defaultThinkingFinding.detail = "Already superseded by [thinking] block.";
-			}
-		}
-		const UNKNOWN_SKIP_PATHS = new Set(DEPRECATED_FIELD_RULES.map((r) => r.pathParts.join(".")));
-		const byfShapeKeys = /* @__PURE__ */ new Set();
-		for (const key of Object.keys(ByfConfigSchema.shape)) {
-			byfShapeKeys.add(key);
-			byfShapeKeys.add(camelToSnakeStatic(key));
-		}
-		for (const rawKey of Object.keys(raw)) {
-			if (rawKey === "raw") continue;
-			if (UNKNOWN_SKIP_PATHS.has(rawKey)) continue;
-			const camelKey = snakeToCamelStatic(rawKey);
-			if (!byfShapeKeys.has(camelKey) && !byfShapeKeys.has(rawKey)) findings.push({
-				kind: "unknown",
-				path: rawKey,
-				detail: `Field "${rawKey}" is not recognized by the current schema. Its value has been ignored. This may be a typo or a field from a previous version.`
-			});
-		}
-		const nestedFindings = scanNestedUnknowns(raw, UNKNOWN_SKIP_PATHS);
-		findings.push(...nestedFindings);
-	}
-	if (config.models) {
-		const validCapsLower = new Set(VALID_CAPABILITIES.map((c) => c.toLowerCase()));
-		for (const [alias, modelConfig] of Object.entries(config.models)) if (modelConfig.capabilities) for (let i = 0; i < modelConfig.capabilities.length; i++) {
-			const cap = modelConfig.capabilities[i];
-			if (cap === void 0) continue;
-			if (!validCapsLower.has(cap.toLowerCase())) findings.push({
-				kind: "invalid-value",
-				path: `models.${alias}.capabilities[${i}]`,
-				detail: `"${cap}" is not a valid capability. Valid values: ${VALID_CAPABILITIES.join(", ")}.`
-			});
-		}
-	}
-	const providerKeys = Object.keys(config.providers ?? {});
-	if (config.models) {
-		for (const [alias, modelConfig] of Object.entries(config.models)) if (!providerKeys.includes(modelConfig.provider)) findings.push({
-			kind: "dangling",
-			path: `models.${alias}.provider`,
-			detail: `Model alias "${alias}" references provider "${modelConfig.provider}", which does not exist in [providers].`
-		});
-	}
-	if (config.defaultProvider !== void 0 && !providerKeys.includes(config.defaultProvider)) findings.push({
-		kind: "dangling",
-		path: "default_provider",
-		detail: `Default provider "${config.defaultProvider}" does not exist in [providers].`
-	});
-	const modelKeys = Object.keys(config.models ?? {});
-	if (config.defaultModel !== void 0 && !modelKeys.includes(config.defaultModel)) findings.push({
-		kind: "dangling",
-		path: "default_model",
-		detail: `Default model "${config.defaultModel}" does not exist in [models].`
-	});
-	return findings;
-}
-/**
-* Apply automatic fixes to a `ByfConfig` by deleting every path registered in
-* `DEPRECATED_FIELD_RULES` from `config.raw`.
-*
-* The `_findings` parameter is intentionally **not consulted** — deletion is
-* driven exclusively by the whitelist in `DEPRECATED_FIELD_RULES`. This ensures
-* that a call to `applyFixes` always produces a clean config regardless of
-* what analysis step previously ran.
-*
-* This is a **pure** function — it returns a new config object without
-* mutating the input.
-*/
-function applyFixes(config, findings) {
-	const newRaw = rawShallowClone(config.raw);
-	for (const rule of DEPRECATED_FIELD_RULES) deletePath(newRaw, rule.pathParts);
-	let newConfig = {
-		...config,
-		raw: newRaw
-	};
-	if (findings.find((f) => f.kind === "migrated" && f.path === "default_thinking")) {
-		const rawValue = config.raw?.["default_thinking"];
-		const isTruthy = rawValue === true || rawValue === "true" || rawValue === 1;
-		newConfig = {
-			...newConfig,
-			thinking: isTruthy ? {
-				mode: "on",
-				effort: "high"
-			} : { mode: "off" }
-		};
-	}
-	return newConfig;
-}
-/** Convert snake_case to camelCase (static helper for unknown detection). */
-function snakeToCamelStatic(str) {
-	return str.replaceAll(/_([a-z])/g, (_, ch) => ch.toUpperCase());
-}
-/** Convert camelCase to snake_case (static helper for unknown detection). */
-function camelToSnakeStatic(str) {
-	return str.replaceAll(/[A-Z]/g, (ch) => `_${ch.toLowerCase()}`);
-}
-/** True when `value` is a non-null, non-array object. */
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
-* Walk `root` along `pathParts` checking that **every** segment exists.
-*
-* Returns `true` iff all parts exist as own keys (or inherited keys — TOML
-* parse results are plain objects so the distinction doesn't matter here).
-*/
-function pathExistsInRaw(root, pathParts) {
-	let current = root;
-	for (const part of pathParts) {
-		if (!isRecord(current) || !(part in current)) return false;
-		current = current[part];
-	}
-	return true;
-}
-/**
-* Delete a leaf (or entire sub-tree) from `root` following `pathParts`.
-*
-* If the parent after deletion becomes empty it is cleaned up as well
-* (recursive upward), so that a service table cleared of all deprecated
-* keys does not leave behind an empty `{}`.
-*/
-function deletePath(root, pathParts) {
-	if (pathParts.length === 0) return;
-	const parentParts = pathParts.slice(0, -1);
-	const leafKey = pathParts.at(-1);
-	let current;
-	if (parentParts.length === 0) current = root;
-	else current = traverseTo(root, parentParts);
-	if (current === void 0) return;
-	const keyExisted = leafKey in current;
-	delete current[leafKey];
-	if (keyExisted && parentParts.length > 0 && Object.keys(current).length === 0) deletePath(root, parentParts);
-}
-/**
-* Walk `root` along `pathParts` returning the penultimate record, or
-* `undefined` if any segment is missing.
-*/
-function traverseTo(root, pathParts) {
-	let current = root;
-	for (const part of pathParts) {
-		if (!isRecord(current) || !(part in current)) return void 0;
-		current = current[part];
-	}
-	return isRecord(current) ? current : void 0;
-}
-/**
-* Shallow-clone `raw`: each nested record is also shallow-cloned so that
-* mutations in `applyFixes` do not affect the original object.
-*/
-function rawShallowClone(raw) {
-	if (!isRecord(raw)) return {};
-	const clone = {};
-	for (const [key, value] of Object.entries(raw)) clone[key] = isRecord(value) ? { ...value } : value;
-	return clone;
-}
-/**
-* Build a set of all valid keys (camelCase + snake_case) from a zod
-* object schema's `.shape`.
-*/
-function getShapeKeySet(schema) {
-	const keys = /* @__PURE__ */ new Set();
-	for (const key of Object.keys(schema.shape)) {
-		keys.add(key);
-		keys.add(camelToSnakeStatic(key));
-	}
-	return keys;
-}
-/**
-* Scan known container keys in `raw` for sub-keys that don't match the
-* corresponding schema shape.  Unknown paths that overlap with
-* `skipPaths` (e.g. already reported deprecated fields) are skipped.
-*
-* Detects e.g. `models.gpt4.max_context_tokns` (typo) or
-* `providers.anthropic.api_kei` (typo).
-*/
-function scanNestedUnknowns(raw, skipPaths) {
-	const findings = [];
-	const containers = [
-		{
-			rawKey: "models",
-			isRecord: true,
-			schema: ModelAliasSchema
-		},
-		{
-			rawKey: "providers",
-			isRecord: true,
-			schema: ProviderConfigSchema
-		},
-		{
-			rawKey: "services",
-			isRecord: false,
-			schema: ServicesConfigSchema
-		},
-		{
-			rawKey: "background",
-			isRecord: false,
-			schema: BackgroundConfigSchema
-		},
-		{
-			rawKey: "loop_control",
-			isRecord: false,
-			schema: LoopControlSchema
-		},
-		{
-			rawKey: "thinking",
-			isRecord: false,
-			schema: ThinkingConfigSchema
-		},
-		{
-			rawKey: "permission",
-			isRecord: false,
-			schema: PermissionConfigSchema,
-			legacyKeys: [
-				"deny",
-				"allow",
-				"ask"
-			]
-		}
-	];
-	const schemaKeySets = /* @__PURE__ */ new Map();
-	containers.forEach((entry, index) => {
-		const base = getShapeKeySet(entry.schema);
-		if (entry.legacyKeys) for (const k of entry.legacyKeys) base.add(k);
-		schemaKeySets.set(index, base);
-	});
-	for (const [entryIndex, entry] of containers.entries()) {
-		if (!(entry.rawKey in raw)) continue;
-		const rawValue = raw[entry.rawKey];
-		if (!isRecord(rawValue)) continue;
-		if (entry.isRecord) for (const [itemKey, itemValue] of Object.entries(rawValue)) {
-			if (!isRecord(itemValue)) continue;
-			const validKeys = schemaKeySets.get(entryIndex);
-			for (const subKey of Object.keys(itemValue)) if (!validKeys.has(subKey)) {
-				const path = `${entry.rawKey}.${itemKey}.${subKey}`;
-				if (!skipPaths.has(path)) findings.push({
-					kind: "unknown",
-					path,
-					detail: `Field "${subKey}" is not recognized in ${entry.rawKey}.${itemKey}. This may be a typo or a field from a previous version.`
-				});
-			}
-		}
-		else {
-			const validKeys = schemaKeySets.get(entryIndex);
-			for (const subKey of Object.keys(rawValue)) if (!validKeys.has(subKey)) {
-				const path = `${entry.rawKey}.${subKey}`;
-				if (!skipPaths.has(path)) findings.push({
-					kind: "unknown",
-					path,
-					detail: `Field "${subKey}" is not recognized in [${entry.rawKey}]. This may be a typo or a field from a previous version.`
-				});
-			}
-		}
-	}
-	return findings;
-}
-//#endregion
-//#region src/version.ts
-function getCoreVersion() {
-	try {
-		const raw = readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf-8");
-		const pkg = JSON.parse(raw);
-		return typeof pkg.version === "string" ? pkg.version : "0.0.0";
-	} catch {
-		return "0.0.0";
-	}
-}
-//#endregion
-//#region src/mcp/client-shared.ts
-const BYF_MCP_CLIENT_VERSION = getCoreVersion();
-/**
-* Build the `RequestOptions` object accepted by the MCP SDK's `callTool`,
-* including either the configured tool-call timeout, an in-flight abort
-* signal, both, or neither. Returns `undefined` when nothing needs to be
-* passed so the SDK falls back to its defaults.
-*/
-function buildRequestOptions(toolCallTimeoutMs, signal) {
-	if (toolCallTimeoutMs === void 0 && signal === void 0) return void 0;
-	return {
-		timeout: toolCallTimeoutMs,
-		signal
-	};
-}
-function toMcpToolDefinition(tool) {
-	return {
-		name: tool.name,
-		description: tool.description ?? "",
-		inputSchema: tool.inputSchema
-	};
-}
-/**
-* Normalise the SDK's `callTool` return into kosong's {@link MCPToolResult}.
-* The SDK can return either the modern `{ content, isError }` shape or a
-* legacy `{ toolResult }` shape; we collapse the legacy shape to a single
-* text content block.
-*/
-function toMcpToolResult(result) {
-	if (typeof result === "object" && result !== null && "content" in result) {
-		const typed = result;
-		if (Array.isArray(typed.content)) return {
-			content: typed.content,
-			isError: typed.isError === true
-		};
-	}
-	if (typeof result === "object" && result !== null && "toolResult" in result) {
-		const legacy = result.toolResult;
-		return {
-			content: [{
-				type: "text",
-				text: typeof legacy === "string" ? legacy : JSON.stringify(legacy)
-			}],
-			isError: false
-		};
-	}
-	return {
-		content: [],
-		isError: false
+		content: [],
+		isError: false
 	};
 }
 //#endregion
@@ -20048,6 +19483,247 @@ async function readOptionalFile(path) {
 	}
 }
 //#endregion
+//#region src/providers/runtime-provider.ts
+function resolveRuntimeProvider(input) {
+	const modelName = input.model ?? input.config.defaultModel;
+	if (modelName === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, "No model is selected. Set default_model in config.toml or pass a configured model alias.");
+	const alias = input.config.models?.[modelName];
+	if (alias === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" is not configured in config.toml. Add a [models."${modelName}"] entry with max_context_size.`);
+	const resolvedModel = alias.model;
+	const providerName = alias.provider ?? input.config.defaultProvider;
+	const providerConfig = providerName === void 0 ? void 0 : input.config.providers[providerName];
+	if (providerName === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" must define a provider in config.toml.`);
+	if (providerConfig === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" for model "${modelName}" is not configured.`);
+	if (!Number.isInteger(alias.maxContextSize) || alias.maxContextSize <= 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Model "${modelName}" must define a positive max_context_size in config.toml.`);
+	if (input.validateCredentials !== false && providerConfig.type !== "vertexai" && providerConfig.oauth === void 0 && providerApiKey(providerConfig) === void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" has no credentials configured. Set apiKey, oauth, or a provider env API key in config.toml.`);
+	const provider = toKosongProviderConfig(providerConfig, resolvedModel, input.byfRequestHeaders, alias.maxOutputSize, alias.reasoningKey, input.promptCacheKey);
+	return {
+		modelName,
+		providerName,
+		modelCapabilities: resolveModelCapabilities(alias, provider),
+		provider
+	};
+}
+async function resolveRuntimeProviderWithOAuth(input) {
+	const resolved = resolveRuntimeProvider(input);
+	const resolveAuth = createRuntimeProviderAuthResolver(input, resolved);
+	if (resolveAuth === void 0) return resolved;
+	await resolveAuth();
+	return {
+		...resolved,
+		resolveAuth
+	};
+}
+function createRuntimeProviderAuthResolver(input, resolved = resolveRuntimeProvider(input)) {
+	const providerName = resolved.providerName;
+	if (providerName === void 0) return void 0;
+	const providerConfig = input.config.providers[providerName];
+	if (providerConfig?.oauth === void 0) return void 0;
+	if (providerApiKey(providerConfig) !== void 0) throw new ByfError(ErrorCodes.CONFIG_INVALID, `Provider "${providerName}" has both apiKey and oauth set in config.toml — they are mutually exclusive. Remove one.`);
+	const tokenProvider = input.resolveOAuthTokenProvider?.(providerName, providerConfig.oauth);
+	if (tokenProvider === void 0) return async () => {
+		throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`);
+	};
+	return async (options) => {
+		let apiKey;
+		try {
+			apiKey = await tokenProvider.getAccessToken(options?.forceRefresh === true ? { force: true } : void 0);
+		} catch (error) {
+			if (!isAuthLoginRequired(error)) (input.log ?? log).warn("oauth token fetch failed", {
+				providerName,
+				error
+			});
+			throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`, { cause: error });
+		}
+		if (apiKey.trim().length === 0) throw new ByfError(ErrorCodes.AUTH_LOGIN_REQUIRED, `OAuth provider "${providerName}" requires login before it can be used.`);
+		return { apiKey };
+	};
+}
+function isAuthLoginRequired(error) {
+	return isByfError(error) && error.code === ErrorCodes.AUTH_LOGIN_REQUIRED;
+}
+const CAPABILITY_DEFINITIONS = [
+	{
+		name: "image_in",
+		returnKey: "image_in"
+	},
+	{
+		name: "video_in",
+		returnKey: "video_in"
+	},
+	{
+		name: "audio_in",
+		returnKey: "audio_in"
+	},
+	{
+		name: "thinking",
+		returnKey: "thinking"
+	},
+	{
+		name: "always_thinking",
+		returnKey: "thinking"
+	},
+	{
+		name: "tool_use",
+		returnKey: "tool_use"
+	},
+	{
+		name: "thinking_effort",
+		returnKey: "thinking_effort"
+	},
+	{
+		name: "thinking_xhigh",
+		returnKey: "thinking_xhigh"
+	},
+	{
+		name: "thinking_max",
+		returnKey: "thinking_max"
+	}
+];
+CAPABILITY_DEFINITIONS.map((d) => d.name);
+function resolveModelCapabilities(alias, provider) {
+	const capabilities = new Set((alias.capabilities ?? []).map((capability) => capability.trim().toLowerCase()));
+	const has = (capability) => capabilities.has(capability);
+	const providerCapability = createProvider(providerForCapabilityProbe(provider)).getCapability?.(provider.model) ?? UNKNOWN_CAPABILITY;
+	const returnKeyToNames = /* @__PURE__ */ new Map();
+	for (const def of CAPABILITY_DEFINITIONS) {
+		const names = returnKeyToNames.get(def.returnKey) ?? [];
+		names.push(def.name);
+		returnKeyToNames.set(def.returnKey, names);
+	}
+	const resolved = {};
+	for (const [returnKey, names] of returnKeyToNames) resolved[returnKey] = names.some((n) => has(n)) || Boolean(providerCapability[returnKey]);
+	return {
+		...resolved,
+		max_context_tokens: alias.maxContextSize
+	};
+}
+function toKosongProviderConfig(provider, model, byfRequestHeaders, maxOutputSize, reasoningKey, promptCacheKey) {
+	switch (provider.type) {
+		case "anthropic": return {
+			type: "anthropic",
+			model,
+			baseUrl: providerValue(provider.baseUrl, provider.env, "ANTHROPIC_BASE_URL"),
+			apiKey: providerApiKey(provider),
+			...maxOutputSize !== void 0 ? { defaultMaxTokens: maxOutputSize } : {},
+			...defaultHeadersField(provider.customHeaders)
+		};
+		case "openai-completions": {
+			const defaultHeaders = {
+				...byfRequestHeaders,
+				...provider.customHeaders
+			};
+			const generationKwargs = {
+				prompt_cache_key: promptCacheKey,
+				extra_body: provider.extraBody
+			};
+			if (Object.keys(defaultHeaders).length === 0) return {
+				type: "openai-completions",
+				model,
+				baseUrl: providerValue(provider.baseUrl, provider.env, "BYF_BASE_URL"),
+				reasoningKey,
+				thinkingEffortKey: provider.thinkingEffortKey,
+				generationKwargs,
+				apiKey: providerApiKey(provider)
+			};
+			return {
+				type: "openai-completions",
+				model,
+				baseUrl: providerValue(provider.baseUrl, provider.env, "BYF_BASE_URL"),
+				reasoningKey,
+				thinkingEffortKey: provider.thinkingEffortKey,
+				generationKwargs,
+				defaultHeaders,
+				apiKey: providerApiKey(provider)
+			};
+		}
+		case "google-genai": return {
+			type: "google-genai",
+			model,
+			apiKey: providerApiKey(provider)
+		};
+		case "openai_responses": return {
+			type: "openai_responses",
+			model,
+			baseUrl: providerValue(provider.baseUrl, provider.env, "OPENAI_BASE_URL"),
+			apiKey: providerApiKey(provider),
+			...defaultHeadersField(provider.customHeaders)
+		};
+		case "vertexai": return {
+			type: "vertexai",
+			model,
+			vertexai: hasVertexAIServiceEnv(provider),
+			apiKey: hasVertexAIServiceEnv(provider) ? void 0 : providerApiKey(provider),
+			project: vertexAIProject(provider),
+			location: vertexAILocation(provider)
+		};
+		default: {
+			const exhaustive = provider.type;
+			throw new ByfError(ErrorCodes.MODEL_CONFIG_INVALID, `Unsupported provider type: ${String(exhaustive)}`);
+		}
+	}
+}
+function defaultHeadersField(headers) {
+	if (headers === void 0 || Object.keys(headers).length === 0) return {};
+	return { defaultHeaders: { ...headers } };
+}
+function providerForCapabilityProbe(provider) {
+	if (provider.type === "vertexai") return {
+		...provider,
+		vertexai: false,
+		project: void 0,
+		location: void 0,
+		apiKey: provider.apiKey === void 0 || provider.apiKey.length === 0 ? "capability-probe" : provider.apiKey
+	};
+	if (provider.apiKey !== void 0 && provider.apiKey.length > 0) return provider;
+	return {
+		...provider,
+		apiKey: "capability-probe"
+	};
+}
+function providerApiKey(provider) {
+	switch (provider.type) {
+		case "anthropic": return providerValue(provider.apiKey, provider.env, "ANTHROPIC_API_KEY");
+		case "openai_responses": return providerValue(provider.apiKey, provider.env, "OPENAI_API_KEY");
+		case "openai-completions": return providerValue(provider.apiKey, provider.env, "BYF_API_KEY");
+		case "google-genai": return providerValue(provider.apiKey, provider.env, "GOOGLE_API_KEY");
+		case "vertexai": return nonEmptyString$1(provider.apiKey) ?? envValue(provider.env, "VERTEXAI_API_KEY") ?? envValue(provider.env, "GOOGLE_API_KEY");
+		default: {
+			const exhaustive = provider.type;
+			throw new ByfError(ErrorCodes.MODEL_CONFIG_INVALID, `Unsupported provider type: ${String(exhaustive)}`);
+		}
+	}
+}
+function hasVertexAIServiceEnv(provider) {
+	return vertexAIProject(provider) !== void 0 && vertexAILocation(provider) !== void 0;
+}
+function vertexAIProject(provider) {
+	return envValue(provider.env, "GOOGLE_CLOUD_PROJECT");
+}
+function vertexAILocation(provider) {
+	return envValue(provider.env, "GOOGLE_CLOUD_LOCATION") ?? locationFromVertexAIBaseUrl(provider.baseUrl);
+}
+function providerValue(configured, env, envKey) {
+	return nonEmptyString$1(configured) ?? envValue(env, envKey);
+}
+function envValue(env, key) {
+	return nonEmptyString$1(env?.[key]);
+}
+function nonEmptyString$1(value) {
+	const trimmed = value?.trim();
+	return trimmed === void 0 || trimmed.length === 0 ? void 0 : trimmed;
+}
+function locationFromVertexAIBaseUrl(baseUrl) {
+	const url = nonEmptyString$1(baseUrl);
+	if (url === void 0) return void 0;
+	try {
+		const host = new URL(url).hostname;
+		return host.endsWith("-aiplatform.googleapis.com") ? nonEmptyString$1(host.slice(0, -26)) : void 0;
+	} catch {
+		return;
+	}
+}
+//#endregion
 //#region src/providers/provider-manager.ts
 var ProviderManager = class ProviderManager {
 	options;
@@ -20616,4 +20292,4 @@ function parsePositiveInt(value) {
 	return n;
 }
 //#endregion
-export { AGENT_WIRE_PROTOCOL_VERSION, Agent, BYF_ERROR_INFO, BackgroundConfigSchema, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfError, ByfServiceConfigSchema, DEPRECATED_FIELD_RULES, ErrorCodes, HookDefSchema, LoopControlSchema, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpServerConfigSchema, McpServerHttpConfigSchema, McpServerStdioConfigSchema, ModelAliasSchema, OAuthRefSchema, PermissionConfigSchema, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, ProviderConfigSchema, ProviderTypeSchema, ServicesConfigSchema, Session, SessionSubagentHost, ThinkingConfigSchema, USER_PROMPT_ORIGIN, WIRE_PROTOCOL_VERSION, WebSearchConfigSchema, WebSearchProviderConfigSchema, analyzeConfig, applyFixes, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };
+export { AGENT_WIRE_PROTOCOL_VERSION, Agent, BYF_ERROR_INFO, BackgroundConfigSchema, ByfConfigPatchSchema, ByfConfigSchema, ByfCore, ByfError, ByfServiceConfigSchema, ErrorCodes, HookDefSchema, LoopControlSchema, MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, McpServerConfigSchema, McpServerHttpConfigSchema, McpServerStdioConfigSchema, ModelAliasSchema, OAuthRefSchema, PermissionConfigSchema, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleSchema, PermissionRuleScopeSchema, ProviderConfigSchema, ProviderTypeSchema, ServicesConfigSchema, Session, SessionSubagentHost, ThinkingConfigSchema, USER_PROMPT_ORIGIN, WIRE_PROTOCOL_VERSION, WebSearchConfigSchema, WebSearchProviderConfigSchema, buildExportManifest, buildPromptPlan, collectFilesRecursive, configToTomlData, createRPC, ensureByfHome, ensureConfigFile, exportSessionDirectory, flushDiagnosticLogs, formatConfigValidationError, fromByfErrorPayload, getDefaultConfig, getRootLogger, isByfError, log, makeErrorPayload, mergeConfigPatch, normalizeTimestampMs, parseBooleanEnv, parseConfigString, proxyWithExtraPayload, readConfigFile, redact, resolveByfHome, resolveConfigPath, resolveConfigValue, resolveGlobalLogPath, resolveLoggingConfig, scanSessionWire, toByfErrorPayload, transformTomlData, validateConfig, writeConfigFile, writeExportZip };

package/dist/session/store/index.d.mts

@@ -1,4 +1,4 @@
-import { ct as JsonObject, dt as ListSessionsPayload, wt as SessionSummary } from "../../index-CZA_2ux5.mjs";
+import { ct as JsonObject, dt as ListSessionsPayload, wt as SessionSummary } from "../../index-BNApCprm.mjs";
 
 //#region src/session/store/session-store.d.ts
 interface CreateSessionRecordInput {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byfriends/agent-core",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Unified agent engine for BYF",
   "license": "Proprietary",
   "author": "ByronFinn",
@@ -69,8 +69,8 @@
     "undici": "^8.4.1",
     "yauzl": "^3.3.0",
     "zod": "^4.3.6",
-    "@byfriends/kaos": "^0.2.2",
-    "@byfriends/kosong": "^0.2.3"
+    "@byfriends/kaos": "^0.3.2",
+    "@byfriends/kosong": "^0.3.2"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",