@cjhyy/code-shell-core 0.5.0-rc.2 → 0.6.0-rc.10

package/dist/settings/schema.d.ts

@@ -20,18 +20,28 @@ export declare const CapabilityOverridesSchema: z.ZodOptional<z.ZodObject<{
     agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
     mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
     builtin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
+    /**
+     * Per-hook overlay for PLUGIN-provided hooks, keyed by
+     * `pluginHookKey()` (`<plugin>:<RawEvent>:<command>`). Finer-grained
+     * than `plugins` (which kills a whole plugin): "off" suppresses one
+     * hook for this project only. Only "off" is meaningful today — plugin
+     * hooks have no global disable list to force back "on" from.
+     */
+    pluginHooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
 }, "strip", z.ZodTypeAny, {
     builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
     mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
     skills?: Record<string, "off" | "on" | "inherit"> | undefined;
     plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
     agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+    pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
 }, {
     builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
     mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
     skills?: Record<string, "off" | "on" | "inherit"> | undefined;
     plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
     agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+    pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
 }>>;
 export type CapabilityOverrides = z.infer<typeof CapabilityOverridesSchema>;
 export declare const SettingsSchema: z.ZodObject<{
@@ -78,23 +88,6 @@ export declare const SettingsSchema: z.ZodObject<{
             compatCodex?: boolean | undefined;
         } | undefined;
     }>>;
-    /**
-     * Primary source of truth for the active model is settings.activeKey
-     * (points at models[].key). settings.model is a derived mirror of that
-     * entry kept in sync for legacy boot paths (cli/main.ts, repl.ts, etc.)
-     * which read provider/name/apiKey/baseUrl directly. Writers must update
-     * both — appendOnboardingResult does this in one shot.
-     */
-    activeKey: z.ZodOptional<z.ZodString>;
-    /**
-     * Auxiliary-task model — points at a models[].key. Background, non-user-
-     * facing LLM calls (memory extraction, the auto-dream loop) use this model
-     * instead of the active one, so per-turn book-keeping doesn't burn the
-     * expensive primary model. Pick something fast/cheap (e.g. a Haiku or
-     * DeepSeek key). When unset, those calls fall back to the active model
-     * (legacy behavior). An invalid/missing key also falls back to active.
-     */
-    auxModelKey: z.ZodOptional<z.ZodString>;
     /**
      * Toggle background auto-update. When true (default), code-shell checks
      * npm for newer versions and — if the npm global prefix is writable —
@@ -103,254 +96,215 @@ export declare const SettingsSchema: z.ZodObject<{
      * Can also be disabled via env var `DISABLE_AUTOUPDATER=1`.
      */
     autoUpdates: z.ZodDefault<z.ZodBoolean>;
-    model: z.ZodDefault<z.ZodObject<{
-        provider: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
-        apiKey: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodDefault<z.ZodString>;
-        temperature: z.ZodDefault<z.ZodNumber>;
-        maxTokens: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Image generation is a general capability, decoupled from LLM providers
+     * (TODO 7.1): a vendor may use different keys/endpoints/models for chat vs
+     * image, and image vendors (Gemini, and later 国内 模型) don't fit the LLM
+     * `providers[].kind` enum. `imageGen.providers[]` is the canonical config;
+     * each entry has a user-chosen `id` (selected via GenerateImage's
+     * `provider` arg) and a `kind` that picks the adapter. When `imageGen` is
+     * absent, resolution falls back to scanning LLM `providers[]` for an
+     * image-capable kind — so existing configs keep working with no migration.
+     */
+    imageGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            /** User-chosen instance name; GenerateImage(provider) selects by this. */
+            id: z.ZodString;
+            /** Adapter selector — e.g. "openai", "google". */
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            /** Default model for this instance when the call omits `model`. */
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        temperature: number;
-        name: string;
-        provider: string;
-        baseUrl: string;
-        maxTokens: number;
-        apiKey?: string | undefined;
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
     }, {
-        temperature?: number | undefined;
-        name?: string | undefined;
-        provider?: string | undefined;
-        baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        maxTokens?: number | undefined;
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
     }>>;
-    providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        kind: z.ZodEnum<["openai", "anthropic", "deepseek", "zai", "xai", "mistral", "groq", "google", "openrouter", "ollama", "custom"]>;
-        baseUrl: z.ZodString;
-        apiKey: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodEnum<["openai-compat", "anthropic-style"]>>;
-        modelsPath: z.ZodOptional<z.ZodString>;
-        /**
-         * Default reasoning/thinking setting for this provider's models.
-         * Rich shape: {mode:"off"|"on"} | {mode:"effort",effort} |
-         * {mode:"budget",budgetTokens}. Per-model `reasoning` wins.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
+    /**
+     * Video generation config (TODO 7.1) — same shape as imageGen, decoupled
+     * from LLM providers. `videoGen.providers[]` each carry an `id` (selected
+     * via GenerateVideo's `provider` arg) + a `kind` picking the adapter. With
+     * no real adapters wired yet, this is config-ready: a future getVideoProvider
+     * case lights it up. Falls back to scanning LLM providers[] when absent.
+     */
+    videoGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
         }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
-    }, "strip", z.ZodTypeAny, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }>, "many">>;
-    models: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        providerKey: z.ZodOptional<z.ZodString>;
-        model: z.ZodString;
-        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
-        maxContextTokens: z.ZodOptional<z.ZodNumber>;
-        /**
-         * Which LLM client to use ("openai" or "anthropic"). New name —
-         * the legacy field is `provider`, which we still accept and
-         * fold into `protocol` below so old configs keep working.
-         * NOT the brand/vendor — that's providerKey above.
-         */
-        protocol: z.ZodOptional<z.ZodString>;
-        provider: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodOptional<z.ZodString>;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
+    }, {
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
+    }>>;
+    /**
+     * Credentials — independent key entities (统一模型接入方案 §3.3). A key
+     * lives here, not inlined on a connection, so deleting a connection never
+     * loses a key and many connections share one key by referencing the same
+     * credential id (LiteLLM credential_list model).
+     */
+    credentials: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique credential name. */
+        id: z.ZodString;
+        /** Catalog template this credential is for (a key belongs to one provider). */
+        catalogId: z.ZodString;
         apiKey: z.ZodOptional<z.ZodString>;
-        /**
-         * Per-model reasoning override. Wins over the provider-level
-         * `reasoning` setting (settings.providers[].reasoning). Use this
-         * when different models under the same provider need different
-         * defaults — e.g. one model off (faster) and another on.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
-        }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
+        baseUrl: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
     }, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
-    }>, {
-        protocol: string | undefined;
-        provider: string | undefined;
-        key: string;
+    }>, "many">>;
+    /**
+     * Unified instance layer (统一模型接入方案, see
+     * docs/superpowers/specs/2026-06-15-unified-model-catalog-design.md §3.3).
+     * One store for text/image/video connections, each pointing at a catalog
+     * entry (catalogId), a credential (credentialId), its chosen model, and the
+     * param values the user picked. Replaces the legacy split of
+     * providers[]/models[]/imageGen/videoGen.
+     */
+    modelConnections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique instance name. */
+        id: z.ZodString;
+        /** Catalog template this instance was created from. */
+        catalogId: z.ZodString;
+        tag: z.ZodEnum<["text", "image", "video", "audio"]>;
+        /** Selected modelId (from the entry's modelPresets). */
+        model: z.ZodString;
+        /** Per-connection baseUrl override (else the credential's / catalog's). */
+        baseUrl: z.ZodOptional<z.ZodString>;
+        /** Which credential supplies this connection's key. */
+        credentialId: z.ZodOptional<z.ZodString>;
+        /** Values the user picked for the model's params, e.g. { reasoning: "high" }. */
+        paramValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }, {
-        key: string;
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }>, "many">>;
+    /** Default instance id per tag (replaces activeKey / defaultProvider). */
+    defaults: z.ZodDefault<z.ZodObject<{
+        text: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        video: z.ZodOptional<z.ZodString>;
+        /** Default speech-to-text (voice input) connection. */
+        audio: z.ZodOptional<z.ZodString>;
+        /** Background-task model (replaces auxModelKey). */
+        auxText: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }>>;
     permissions: z.ZodDefault<z.ZodObject<{
         defaultMode: z.ZodDefault<z.ZodEnum<["default", "acceptEdits", "dontAsk", "bypassPermissions", "auto", "plan"]>>;
         rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -390,14 +344,17 @@ export declare const SettingsSchema: z.ZodObject<{
         maxTokens: z.ZodDefault<z.ZodNumber>;
         compactAtRatio: z.ZodDefault<z.ZodNumber>;
         summarizeAtRatio: z.ZodDefault<z.ZodNumber>;
+        microcompactFloorRatio: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         maxTokens: number;
         compactAtRatio: number;
         summarizeAtRatio: number;
+        microcompactFloorRatio: number;
     }, {
         maxTokens?: number | undefined;
         compactAtRatio?: number | undefined;
         summarizeAtRatio?: number | undefined;
+        microcompactFloorRatio?: number | undefined;
     }>>;
     session: z.ZodDefault<z.ZodObject<{
         storageDir: z.ZodOptional<z.ZodString>;
@@ -409,7 +366,7 @@ export declare const SettingsSchema: z.ZodObject<{
         storageDir?: string | undefined;
         maxHistory?: number | undefined;
     }>>;
-    mcpServers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    mcpServers: z.ZodDefault<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
         name: z.ZodString;
         command: z.ZodOptional<z.ZodString>;
         args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -417,6 +374,10 @@ export declare const SettingsSchema: z.ZodObject<{
         url: z.ZodOptional<z.ZodString>;
         transport: z.ZodOptional<z.ZodEnum<["stdio", "sse", "streamable-http", "inprocess"]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentialRef: z.ZodOptional<z.ZodString>;
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -427,6 +388,10 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }, {
         name: string;
         enabled?: boolean | undefined;
@@ -436,6 +401,49 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>>, Record<string, {
+        name: string;
+        enabled?: boolean | undefined;
+        url?: string | undefined;
+        args?: string[] | undefined;
+        command?: string | undefined;
+        env?: Record<string, string> | undefined;
+        transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
+        headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>, unknown>>;
+    /**
+     * User supplements for PLUGIN-provided MCP servers, keyed by the server's
+     * `<plugin>:<server>` name. Layered onto the plugin config at merge time
+     * (mergePluginMcpServers). Only env/credential fields are accepted —
+     * command/args/url/transport are intentionally absent and `.strict()`
+     * rejects them, so a plugin update is never shadowed by a stale copy.
+     */
+    mcpServerOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        credentialRef: z.ZodOptional<z.ZodString>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }>>>;
     /**
      * Skill names hidden from the LLM. Names include the full
@@ -470,18 +478,62 @@ export declare const SettingsSchema: z.ZodObject<{
         agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         builtin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
+        /**
+         * Per-hook overlay for PLUGIN-provided hooks, keyed by
+         * `pluginHookKey()` (`<plugin>:<RawEvent>:<command>`). Finer-grained
+         * than `plugins` (which kills a whole plugin): "off" suppresses one
+         * hook for this project only. Only "off" is meaningful today — plugin
+         * hooks have no global disable list to force back "on" from.
+         */
+        pluginHooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
     }, "strip", z.ZodTypeAny, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
     }, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
+    }>>;
+    /**
+     * Feature flags overlay: a map of flag name → boolean that overrides the
+     * compiled-in defaults (see settings/feature-flags.ts FEATURE_FLAGS).
+     * Project settings override user settings via the normal merge, so a flag
+     * can be flipped per-workspace. Unknown flag names are tolerated (kept as
+     * data) for forward-compat; consumers only read known flags via
+     * isFeatureEnabled(). Passthrough record — values coerced to boolean.
+     */
+    featureFlags: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    /**
+     * Cross-session memory knobs. Optional — absence keeps the built-in
+     * defaults (see services/extract-memories.ts). `maxCount` caps memories
+     * accepted per extraction pass; `maxAge`/`extractionModel` are reserved
+     * for the consolidation/extraction pipeline.
+     */
+    memories: z.ZodOptional<z.ZodObject<{
+        maxCount: z.ZodOptional<z.ZodNumber>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        extractionModel: z.ZodOptional<z.ZodString>;
+        /** Master switch for end-of-session automatic memory extraction.
+         *  Absent/true = extract (current behavior); false = skip extraction
+         *  while keeping session summaries and Dream untouched. */
+        autoExtract: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
+    }, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
     }>>;
     instructions: z.ZodDefault<z.ZodObject<{
         fileName: z.ZodDefault<z.ZodString>;
@@ -630,24 +682,22 @@ export declare const SettingsSchema: z.ZodObject<{
     }>>;
     /**
      * Image attachment handling. Sub-fields:
-     *   - detail: OpenAI-style fidelity hint applied to every user-
-     *     attached image. "low" = 85 tokens/image fixed (cheap
-     *     thumbnail), "high" = ~768 px tiles (default), "original" =
-     *     keep client-side dimensions (most expensive). Anthropic
-     *     ignores this field today; that's fine — it just gets
-     *     dropped on the Claude path.
+     *   - detail: provider-agnostic image clarity. Drives the
+     *     renderer-side downscale (low→~1024 / standard→~1568 /
+     *     high→~2576 px long edge) so BOTH providers save tokens
+     *     before send. Legacy "original" is migrated to "high".
      *   - mcpImageTokenBudget: per-turn cap on token cost of images
      *     returned by MCP tools. Codex doesn't enforce this; CC uses
      *     25 000. Set to 0 to disable.
      */
     images: z.ZodOptional<z.ZodObject<{
-        detail: z.ZodOptional<z.ZodEnum<["low", "high", "original"]>>;
+        detail: z.ZodOptional<z.ZodEffects<z.ZodEnum<["low", "standard", "high"]>, "low" | "high" | "standard", unknown>>;
         mcpImageTokenBudget: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: "low" | "high" | "standard" | undefined;
         mcpImageTokenBudget?: number | undefined;
     }, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: unknown;
         mcpImageTokenBudget?: number | undefined;
     }>>;
     /**
@@ -672,6 +722,21 @@ export declare const SettingsSchema: z.ZodObject<{
         deniedReads?: string[] | undefined;
         network?: "allow" | "deny" | undefined;
     }>>;
+    /**
+     * Top-level environment variables injected into tool subprocesses (the
+     * Bash tool, background shells). Mirrors Claude Code's `env` field: a
+     * KEY=VALUE map that can be set globally (~/.code-shell/settings.json) and
+     * overridden per-project (.code-shell/settings.json). The canonical home
+     * for API keys (e.g. OPENAI_API_KEY) that a skill's script reads — configure
+     * once globally and every project's skills can use it.
+     *
+     * Precedence when merged into the spawn env (lowest → highest):
+     *   project localEnvironment.env  →  global env  →  project env
+     * None of these is filtered through the deny regex (see mergeShellEnv):
+     * they are values the user typed deliberately, a different trust class from
+     * the host process.env passthrough the deny machinery guards against.
+     */
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
      * Project-local environment profile. Mirrors Codex's local-environment
      * shape at the settings layer: setup/cleanup scripts can be customized per
@@ -760,19 +825,99 @@ export declare const SettingsSchema: z.ZodObject<{
         matcher: z.ZodOptional<z.ZodString>;
         timeout_ms: z.ZodOptional<z.ZodNumber>;
         cwd: z.ZodOptional<z.ZodString>;
+        /** Soft off-switch: the entry stays in the file (and the UI) but
+         *  registerSettingsHooks skips it. Absent = enabled. */
+        disabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }>, "many">>;
+    /**
+     * External coding-agent orchestration (Claude Code / Codex CLI).
+     * Used by the Mobile Web Remote to launch managed jobs. dangerousArgs
+     * is config-provided (not hardcoded) so it tracks CLI flag changes;
+     * project-default dangerous mode only applies inside trustedWorkspaces.
+     */
+    externalAgents: z.ZodOptional<z.ZodObject<{
+        claudeCode: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            defaultMode: z.ZodOptional<z.ZodEnum<["safe", "dangerous"]>>;
+            dangerousArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            trustedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            autoStartInTrustedWorkspaces: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }>>;
+        codex: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }>>;
+    /**
+     * Credential-use gate (凭证模块第二期). Controls whether the AI's
+     * `UseCredential` tool prompts before handing a stored credential to a
+     * command. `autoApprove: true` skips the prompt entirely (默认关 — every
+     * use asks, or is remembered for the session). See
+     * docs/superpowers/specs/2026-06-16-credential-use-gate-design.md §5.
+     */
+    credentialUse: z.ZodOptional<z.ZodObject<{
+        autoApprove: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        autoApprove?: boolean | undefined;
+    }, {
+        autoApprove?: boolean | undefined;
+    }>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     agent: z.ZodDefault<z.ZodObject<{
         preset: z.ZodDefault<z.ZodString>;
@@ -817,23 +962,6 @@ export declare const SettingsSchema: z.ZodObject<{
             compatCodex?: boolean | undefined;
         } | undefined;
     }>>;
-    /**
-     * Primary source of truth for the active model is settings.activeKey
-     * (points at models[].key). settings.model is a derived mirror of that
-     * entry kept in sync for legacy boot paths (cli/main.ts, repl.ts, etc.)
-     * which read provider/name/apiKey/baseUrl directly. Writers must update
-     * both — appendOnboardingResult does this in one shot.
-     */
-    activeKey: z.ZodOptional<z.ZodString>;
-    /**
-     * Auxiliary-task model — points at a models[].key. Background, non-user-
-     * facing LLM calls (memory extraction, the auto-dream loop) use this model
-     * instead of the active one, so per-turn book-keeping doesn't burn the
-     * expensive primary model. Pick something fast/cheap (e.g. a Haiku or
-     * DeepSeek key). When unset, those calls fall back to the active model
-     * (legacy behavior). An invalid/missing key also falls back to active.
-     */
-    auxModelKey: z.ZodOptional<z.ZodString>;
     /**
      * Toggle background auto-update. When true (default), code-shell checks
      * npm for newer versions and — if the npm global prefix is writable —
@@ -842,254 +970,215 @@ export declare const SettingsSchema: z.ZodObject<{
      * Can also be disabled via env var `DISABLE_AUTOUPDATER=1`.
      */
     autoUpdates: z.ZodDefault<z.ZodBoolean>;
-    model: z.ZodDefault<z.ZodObject<{
-        provider: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
-        apiKey: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodDefault<z.ZodString>;
-        temperature: z.ZodDefault<z.ZodNumber>;
-        maxTokens: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Image generation is a general capability, decoupled from LLM providers
+     * (TODO 7.1): a vendor may use different keys/endpoints/models for chat vs
+     * image, and image vendors (Gemini, and later 国内 模型) don't fit the LLM
+     * `providers[].kind` enum. `imageGen.providers[]` is the canonical config;
+     * each entry has a user-chosen `id` (selected via GenerateImage's
+     * `provider` arg) and a `kind` that picks the adapter. When `imageGen` is
+     * absent, resolution falls back to scanning LLM `providers[]` for an
+     * image-capable kind — so existing configs keep working with no migration.
+     */
+    imageGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            /** User-chosen instance name; GenerateImage(provider) selects by this. */
+            id: z.ZodString;
+            /** Adapter selector — e.g. "openai", "google". */
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            /** Default model for this instance when the call omits `model`. */
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        temperature: number;
-        name: string;
-        provider: string;
-        baseUrl: string;
-        maxTokens: number;
-        apiKey?: string | undefined;
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
     }, {
-        temperature?: number | undefined;
-        name?: string | undefined;
-        provider?: string | undefined;
-        baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        maxTokens?: number | undefined;
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
     }>>;
-    providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        kind: z.ZodEnum<["openai", "anthropic", "deepseek", "zai", "xai", "mistral", "groq", "google", "openrouter", "ollama", "custom"]>;
-        baseUrl: z.ZodString;
-        apiKey: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodEnum<["openai-compat", "anthropic-style"]>>;
-        modelsPath: z.ZodOptional<z.ZodString>;
-        /**
-         * Default reasoning/thinking setting for this provider's models.
-         * Rich shape: {mode:"off"|"on"} | {mode:"effort",effort} |
-         * {mode:"budget",budgetTokens}. Per-model `reasoning` wins.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
+    /**
+     * Video generation config (TODO 7.1) — same shape as imageGen, decoupled
+     * from LLM providers. `videoGen.providers[]` each carry an `id` (selected
+     * via GenerateVideo's `provider` arg) + a `kind` picking the adapter. With
+     * no real adapters wired yet, this is config-ready: a future getVideoProvider
+     * case lights it up. Falls back to scanning LLM providers[] when absent.
+     */
+    videoGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
         }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
-    }, "strip", z.ZodTypeAny, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }>, "many">>;
-    models: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        providerKey: z.ZodOptional<z.ZodString>;
-        model: z.ZodString;
-        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
-        maxContextTokens: z.ZodOptional<z.ZodNumber>;
-        /**
-         * Which LLM client to use ("openai" or "anthropic"). New name —
-         * the legacy field is `provider`, which we still accept and
-         * fold into `protocol` below so old configs keep working.
-         * NOT the brand/vendor — that's providerKey above.
-         */
-        protocol: z.ZodOptional<z.ZodString>;
-        provider: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodOptional<z.ZodString>;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
+    }, {
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
+    }>>;
+    /**
+     * Credentials — independent key entities (统一模型接入方案 §3.3). A key
+     * lives here, not inlined on a connection, so deleting a connection never
+     * loses a key and many connections share one key by referencing the same
+     * credential id (LiteLLM credential_list model).
+     */
+    credentials: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique credential name. */
+        id: z.ZodString;
+        /** Catalog template this credential is for (a key belongs to one provider). */
+        catalogId: z.ZodString;
         apiKey: z.ZodOptional<z.ZodString>;
-        /**
-         * Per-model reasoning override. Wins over the provider-level
-         * `reasoning` setting (settings.providers[].reasoning). Use this
-         * when different models under the same provider need different
-         * defaults — e.g. one model off (faster) and another on.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
-        }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
+        baseUrl: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
     }, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
-    }>, {
-        protocol: string | undefined;
-        provider: string | undefined;
-        key: string;
+    }>, "many">>;
+    /**
+     * Unified instance layer (统一模型接入方案, see
+     * docs/superpowers/specs/2026-06-15-unified-model-catalog-design.md §3.3).
+     * One store for text/image/video connections, each pointing at a catalog
+     * entry (catalogId), a credential (credentialId), its chosen model, and the
+     * param values the user picked. Replaces the legacy split of
+     * providers[]/models[]/imageGen/videoGen.
+     */
+    modelConnections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique instance name. */
+        id: z.ZodString;
+        /** Catalog template this instance was created from. */
+        catalogId: z.ZodString;
+        tag: z.ZodEnum<["text", "image", "video", "audio"]>;
+        /** Selected modelId (from the entry's modelPresets). */
+        model: z.ZodString;
+        /** Per-connection baseUrl override (else the credential's / catalog's). */
+        baseUrl: z.ZodOptional<z.ZodString>;
+        /** Which credential supplies this connection's key. */
+        credentialId: z.ZodOptional<z.ZodString>;
+        /** Values the user picked for the model's params, e.g. { reasoning: "high" }. */
+        paramValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }, {
-        key: string;
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }>, "many">>;
+    /** Default instance id per tag (replaces activeKey / defaultProvider). */
+    defaults: z.ZodDefault<z.ZodObject<{
+        text: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        video: z.ZodOptional<z.ZodString>;
+        /** Default speech-to-text (voice input) connection. */
+        audio: z.ZodOptional<z.ZodString>;
+        /** Background-task model (replaces auxModelKey). */
+        auxText: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }>>;
     permissions: z.ZodDefault<z.ZodObject<{
         defaultMode: z.ZodDefault<z.ZodEnum<["default", "acceptEdits", "dontAsk", "bypassPermissions", "auto", "plan"]>>;
         rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -1129,14 +1218,17 @@ export declare const SettingsSchema: z.ZodObject<{
         maxTokens: z.ZodDefault<z.ZodNumber>;
         compactAtRatio: z.ZodDefault<z.ZodNumber>;
         summarizeAtRatio: z.ZodDefault<z.ZodNumber>;
+        microcompactFloorRatio: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         maxTokens: number;
         compactAtRatio: number;
         summarizeAtRatio: number;
+        microcompactFloorRatio: number;
     }, {
         maxTokens?: number | undefined;
         compactAtRatio?: number | undefined;
         summarizeAtRatio?: number | undefined;
+        microcompactFloorRatio?: number | undefined;
     }>>;
     session: z.ZodDefault<z.ZodObject<{
         storageDir: z.ZodOptional<z.ZodString>;
@@ -1148,7 +1240,7 @@ export declare const SettingsSchema: z.ZodObject<{
         storageDir?: string | undefined;
         maxHistory?: number | undefined;
     }>>;
-    mcpServers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    mcpServers: z.ZodDefault<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
         name: z.ZodString;
         command: z.ZodOptional<z.ZodString>;
         args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1156,6 +1248,10 @@ export declare const SettingsSchema: z.ZodObject<{
         url: z.ZodOptional<z.ZodString>;
         transport: z.ZodOptional<z.ZodEnum<["stdio", "sse", "streamable-http", "inprocess"]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentialRef: z.ZodOptional<z.ZodString>;
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -1166,6 +1262,10 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }, {
         name: string;
         enabled?: boolean | undefined;
@@ -1175,6 +1275,49 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>>, Record<string, {
+        name: string;
+        enabled?: boolean | undefined;
+        url?: string | undefined;
+        args?: string[] | undefined;
+        command?: string | undefined;
+        env?: Record<string, string> | undefined;
+        transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
+        headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>, unknown>>;
+    /**
+     * User supplements for PLUGIN-provided MCP servers, keyed by the server's
+     * `<plugin>:<server>` name. Layered onto the plugin config at merge time
+     * (mergePluginMcpServers). Only env/credential fields are accepted —
+     * command/args/url/transport are intentionally absent and `.strict()`
+     * rejects them, so a plugin update is never shadowed by a stale copy.
+     */
+    mcpServerOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        credentialRef: z.ZodOptional<z.ZodString>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }>>>;
     /**
      * Skill names hidden from the LLM. Names include the full
@@ -1209,18 +1352,62 @@ export declare const SettingsSchema: z.ZodObject<{
         agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         builtin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
+        /**
+         * Per-hook overlay for PLUGIN-provided hooks, keyed by
+         * `pluginHookKey()` (`<plugin>:<RawEvent>:<command>`). Finer-grained
+         * than `plugins` (which kills a whole plugin): "off" suppresses one
+         * hook for this project only. Only "off" is meaningful today — plugin
+         * hooks have no global disable list to force back "on" from.
+         */
+        pluginHooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
     }, "strip", z.ZodTypeAny, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
     }, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
+    }>>;
+    /**
+     * Feature flags overlay: a map of flag name → boolean that overrides the
+     * compiled-in defaults (see settings/feature-flags.ts FEATURE_FLAGS).
+     * Project settings override user settings via the normal merge, so a flag
+     * can be flipped per-workspace. Unknown flag names are tolerated (kept as
+     * data) for forward-compat; consumers only read known flags via
+     * isFeatureEnabled(). Passthrough record — values coerced to boolean.
+     */
+    featureFlags: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    /**
+     * Cross-session memory knobs. Optional — absence keeps the built-in
+     * defaults (see services/extract-memories.ts). `maxCount` caps memories
+     * accepted per extraction pass; `maxAge`/`extractionModel` are reserved
+     * for the consolidation/extraction pipeline.
+     */
+    memories: z.ZodOptional<z.ZodObject<{
+        maxCount: z.ZodOptional<z.ZodNumber>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        extractionModel: z.ZodOptional<z.ZodString>;
+        /** Master switch for end-of-session automatic memory extraction.
+         *  Absent/true = extract (current behavior); false = skip extraction
+         *  while keeping session summaries and Dream untouched. */
+        autoExtract: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
+    }, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
     }>>;
     instructions: z.ZodDefault<z.ZodObject<{
         fileName: z.ZodDefault<z.ZodString>;
@@ -1369,24 +1556,22 @@ export declare const SettingsSchema: z.ZodObject<{
     }>>;
     /**
      * Image attachment handling. Sub-fields:
-     *   - detail: OpenAI-style fidelity hint applied to every user-
-     *     attached image. "low" = 85 tokens/image fixed (cheap
-     *     thumbnail), "high" = ~768 px tiles (default), "original" =
-     *     keep client-side dimensions (most expensive). Anthropic
-     *     ignores this field today; that's fine — it just gets
-     *     dropped on the Claude path.
+     *   - detail: provider-agnostic image clarity. Drives the
+     *     renderer-side downscale (low→~1024 / standard→~1568 /
+     *     high→~2576 px long edge) so BOTH providers save tokens
+     *     before send. Legacy "original" is migrated to "high".
      *   - mcpImageTokenBudget: per-turn cap on token cost of images
      *     returned by MCP tools. Codex doesn't enforce this; CC uses
      *     25 000. Set to 0 to disable.
      */
     images: z.ZodOptional<z.ZodObject<{
-        detail: z.ZodOptional<z.ZodEnum<["low", "high", "original"]>>;
+        detail: z.ZodOptional<z.ZodEffects<z.ZodEnum<["low", "standard", "high"]>, "low" | "high" | "standard", unknown>>;
         mcpImageTokenBudget: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: "low" | "high" | "standard" | undefined;
         mcpImageTokenBudget?: number | undefined;
     }, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: unknown;
         mcpImageTokenBudget?: number | undefined;
     }>>;
     /**
@@ -1411,6 +1596,21 @@ export declare const SettingsSchema: z.ZodObject<{
         deniedReads?: string[] | undefined;
         network?: "allow" | "deny" | undefined;
     }>>;
+    /**
+     * Top-level environment variables injected into tool subprocesses (the
+     * Bash tool, background shells). Mirrors Claude Code's `env` field: a
+     * KEY=VALUE map that can be set globally (~/.code-shell/settings.json) and
+     * overridden per-project (.code-shell/settings.json). The canonical home
+     * for API keys (e.g. OPENAI_API_KEY) that a skill's script reads — configure
+     * once globally and every project's skills can use it.
+     *
+     * Precedence when merged into the spawn env (lowest → highest):
+     *   project localEnvironment.env  →  global env  →  project env
+     * None of these is filtered through the deny regex (see mergeShellEnv):
+     * they are values the user typed deliberately, a different trust class from
+     * the host process.env passthrough the deny machinery guards against.
+     */
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
      * Project-local environment profile. Mirrors Codex's local-environment
      * shape at the settings layer: setup/cleanup scripts can be customized per
@@ -1499,19 +1699,99 @@ export declare const SettingsSchema: z.ZodObject<{
         matcher: z.ZodOptional<z.ZodString>;
         timeout_ms: z.ZodOptional<z.ZodNumber>;
         cwd: z.ZodOptional<z.ZodString>;
+        /** Soft off-switch: the entry stays in the file (and the UI) but
+         *  registerSettingsHooks skips it. Absent = enabled. */
+        disabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }>, "many">>;
+    /**
+     * External coding-agent orchestration (Claude Code / Codex CLI).
+     * Used by the Mobile Web Remote to launch managed jobs. dangerousArgs
+     * is config-provided (not hardcoded) so it tracks CLI flag changes;
+     * project-default dangerous mode only applies inside trustedWorkspaces.
+     */
+    externalAgents: z.ZodOptional<z.ZodObject<{
+        claudeCode: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            defaultMode: z.ZodOptional<z.ZodEnum<["safe", "dangerous"]>>;
+            dangerousArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            trustedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            autoStartInTrustedWorkspaces: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }>>;
+        codex: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }>>;
+    /**
+     * Credential-use gate (凭证模块第二期). Controls whether the AI's
+     * `UseCredential` tool prompts before handing a stored credential to a
+     * command. `autoApprove: true` skips the prompt entirely (默认关 — every
+     * use asks, or is remembered for the session). See
+     * docs/superpowers/specs/2026-06-16-credential-use-gate-design.md §5.
+     */
+    credentialUse: z.ZodOptional<z.ZodObject<{
+        autoApprove: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        autoApprove?: boolean | undefined;
+    }, {
+        autoApprove?: boolean | undefined;
+    }>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     agent: z.ZodDefault<z.ZodObject<{
         preset: z.ZodDefault<z.ZodString>;
@@ -1556,23 +1836,6 @@ export declare const SettingsSchema: z.ZodObject<{
             compatCodex?: boolean | undefined;
         } | undefined;
     }>>;
-    /**
-     * Primary source of truth for the active model is settings.activeKey
-     * (points at models[].key). settings.model is a derived mirror of that
-     * entry kept in sync for legacy boot paths (cli/main.ts, repl.ts, etc.)
-     * which read provider/name/apiKey/baseUrl directly. Writers must update
-     * both — appendOnboardingResult does this in one shot.
-     */
-    activeKey: z.ZodOptional<z.ZodString>;
-    /**
-     * Auxiliary-task model — points at a models[].key. Background, non-user-
-     * facing LLM calls (memory extraction, the auto-dream loop) use this model
-     * instead of the active one, so per-turn book-keeping doesn't burn the
-     * expensive primary model. Pick something fast/cheap (e.g. a Haiku or
-     * DeepSeek key). When unset, those calls fall back to the active model
-     * (legacy behavior). An invalid/missing key also falls back to active.
-     */
-    auxModelKey: z.ZodOptional<z.ZodString>;
     /**
      * Toggle background auto-update. When true (default), code-shell checks
      * npm for newer versions and — if the npm global prefix is writable —
@@ -1581,254 +1844,215 @@ export declare const SettingsSchema: z.ZodObject<{
      * Can also be disabled via env var `DISABLE_AUTOUPDATER=1`.
      */
     autoUpdates: z.ZodDefault<z.ZodBoolean>;
-    model: z.ZodDefault<z.ZodObject<{
-        provider: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
-        apiKey: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodDefault<z.ZodString>;
-        temperature: z.ZodDefault<z.ZodNumber>;
-        maxTokens: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Image generation is a general capability, decoupled from LLM providers
+     * (TODO 7.1): a vendor may use different keys/endpoints/models for chat vs
+     * image, and image vendors (Gemini, and later 国内 模型) don't fit the LLM
+     * `providers[].kind` enum. `imageGen.providers[]` is the canonical config;
+     * each entry has a user-chosen `id` (selected via GenerateImage's
+     * `provider` arg) and a `kind` that picks the adapter. When `imageGen` is
+     * absent, resolution falls back to scanning LLM `providers[]` for an
+     * image-capable kind — so existing configs keep working with no migration.
+     */
+    imageGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            /** User-chosen instance name; GenerateImage(provider) selects by this. */
+            id: z.ZodString;
+            /** Adapter selector — e.g. "openai", "google". */
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            /** Default model for this instance when the call omits `model`. */
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }, {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        temperature: number;
-        name: string;
-        provider: string;
-        baseUrl: string;
-        maxTokens: number;
-        apiKey?: string | undefined;
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
     }, {
-        temperature?: number | undefined;
-        name?: string | undefined;
-        provider?: string | undefined;
-        baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        maxTokens?: number | undefined;
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
     }>>;
-    providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        kind: z.ZodEnum<["openai", "anthropic", "deepseek", "zai", "xai", "mistral", "groq", "google", "openrouter", "ollama", "custom"]>;
-        baseUrl: z.ZodString;
-        apiKey: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodEnum<["openai-compat", "anthropic-style"]>>;
-        modelsPath: z.ZodOptional<z.ZodString>;
-        /**
-         * Default reasoning/thinking setting for this provider's models.
-         * Rich shape: {mode:"off"|"on"} | {mode:"effort",effort} |
-         * {mode:"budget",budgetTokens}. Per-model `reasoning` wins.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
+    /**
+     * Video generation config (TODO 7.1) — same shape as imageGen, decoupled
+     * from LLM providers. `videoGen.providers[]` each carry an `id` (selected
+     * via GenerateVideo's `provider` arg) + a `kind` picking the adapter. With
+     * no real adapters wired yet, this is config-ready: a future getVideoProvider
+     * case lights it up. Falls back to scanning LLM providers[] when absent.
+     */
+    videoGen: z.ZodOptional<z.ZodObject<{
+        defaultProvider: z.ZodOptional<z.ZodString>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            baseUrl: z.ZodString;
+            apiKey: z.ZodOptional<z.ZodString>;
+            defaultModel: z.ZodOptional<z.ZodString>;
+            /** Catalog template this instance was created from (for paramsDoc / displayName回显). */
+            catalogId: z.ZodOptional<z.ZodString>;
+            /** Reuse another instance's key: id of the instance whose apiKey to use (when apiKey is empty). */
+            apiKeyRef: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
         }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
-    }, "strip", z.ZodTypeAny, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }, {
-        key: string;
-        kind: "openai" | "anthropic" | "deepseek" | "zai" | "xai" | "mistral" | "groq" | "google" | "openrouter" | "ollama" | "custom";
-        baseUrl: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        label?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: "openai-compat" | "anthropic-style" | undefined;
-        modelsPath?: string | undefined;
-    }>, "many">>;
-    models: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
-        key: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-        providerKey: z.ZodOptional<z.ZodString>;
-        model: z.ZodString;
-        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
-        maxContextTokens: z.ZodOptional<z.ZodNumber>;
-        /**
-         * Which LLM client to use ("openai" or "anthropic"). New name —
-         * the legacy field is `provider`, which we still accept and
-         * fold into `protocol` below so old configs keep working.
-         * NOT the brand/vendor — that's providerKey above.
-         */
-        protocol: z.ZodOptional<z.ZodString>;
-        provider: z.ZodOptional<z.ZodString>;
-        baseUrl: z.ZodOptional<z.ZodString>;
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        providers: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[];
+        defaultProvider?: string | undefined;
+    }, {
+        defaultProvider?: string | undefined;
+        providers?: {
+            id: string;
+            kind: string;
+            baseUrl: string;
+            apiKey?: string | undefined;
+            defaultModel?: string | undefined;
+            catalogId?: string | undefined;
+            apiKeyRef?: string | undefined;
+        }[] | undefined;
+    }>>;
+    /**
+     * Credentials — independent key entities (统一模型接入方案 §3.3). A key
+     * lives here, not inlined on a connection, so deleting a connection never
+     * loses a key and many connections share one key by referencing the same
+     * credential id (LiteLLM credential_list model).
+     */
+    credentials: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique credential name. */
+        id: z.ZodString;
+        /** Catalog template this credential is for (a key belongs to one provider). */
+        catalogId: z.ZodString;
         apiKey: z.ZodOptional<z.ZodString>;
-        /**
-         * Per-model reasoning override. Wins over the provider-level
-         * `reasoning` setting (settings.providers[].reasoning). Use this
-         * when different models under the same provider need different
-         * defaults — e.g. one model off (faster) and another on.
-         */
-        reasoning: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
-            mode: z.ZodLiteral<"off">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "off";
-        }, {
-            mode: "off";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"on">;
-        }, "strip", z.ZodTypeAny, {
-            mode: "on";
-        }, {
-            mode: "on";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"effort">;
-            effort: z.ZodEnum<["minimal", "low", "medium", "high", "xhigh"]>;
-        }, "strip", z.ZodTypeAny, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }, {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        }>, z.ZodObject<{
-            mode: z.ZodLiteral<"budget">;
-            budgetTokens: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            mode: "budget";
-            budgetTokens: number;
-        }, {
-            mode: "budget";
-            budgetTokens: number;
-        }>]>>;
+        baseUrl: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
     }, {
-        key: string;
-        model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        id: string;
+        catalogId: string;
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
-    }>, {
-        protocol: string | undefined;
-        provider: string | undefined;
-        key: string;
+    }>, "many">>;
+    /**
+     * Unified instance layer (统一模型接入方案, see
+     * docs/superpowers/specs/2026-06-15-unified-model-catalog-design.md §3.3).
+     * One store for text/image/video connections, each pointing at a catalog
+     * entry (catalogId), a credential (credentialId), its chosen model, and the
+     * param values the user picked. Replaces the legacy split of
+     * providers[]/models[]/imageGen/videoGen.
+     */
+    modelConnections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** User-chosen unique instance name. */
+        id: z.ZodString;
+        /** Catalog template this instance was created from. */
+        catalogId: z.ZodString;
+        tag: z.ZodEnum<["text", "image", "video", "audio"]>;
+        /** Selected modelId (from the entry's modelPresets). */
+        model: z.ZodString;
+        /** Per-connection baseUrl override (else the credential's / catalog's). */
+        baseUrl: z.ZodOptional<z.ZodString>;
+        /** Which credential supplies this connection's key. */
+        credentialId: z.ZodOptional<z.ZodString>;
+        /** Values the user picked for the model's params, e.g. { reasoning: "high" }. */
+        paramValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }, {
-        key: string;
+        id: string;
         model: string;
-        reasoning?: {
-            mode: "off";
-        } | {
-            mode: "on";
-        } | {
-            mode: "effort";
-            effort: "minimal" | "low" | "medium" | "high" | "xhigh";
-        } | {
-            mode: "budget";
-            budgetTokens: number;
-        } | undefined;
-        provider?: string | undefined;
-        maxOutputTokens?: number | undefined;
-        label?: string | undefined;
+        catalogId: string;
+        tag: "text" | "image" | "video" | "audio";
         baseUrl?: string | undefined;
-        apiKey?: string | undefined;
-        protocol?: string | undefined;
-        providerKey?: string | undefined;
-        maxContextTokens?: number | undefined;
+        credentialId?: string | undefined;
+        paramValues?: Record<string, unknown> | undefined;
     }>, "many">>;
+    /** Default instance id per tag (replaces activeKey / defaultProvider). */
+    defaults: z.ZodDefault<z.ZodObject<{
+        text: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        video: z.ZodOptional<z.ZodString>;
+        /** Default speech-to-text (voice input) connection. */
+        audio: z.ZodOptional<z.ZodString>;
+        /** Background-task model (replaces auxModelKey). */
+        auxText: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }, {
+        text?: string | undefined;
+        image?: string | undefined;
+        video?: string | undefined;
+        audio?: string | undefined;
+        auxText?: string | undefined;
+    }>>;
     permissions: z.ZodDefault<z.ZodObject<{
         defaultMode: z.ZodDefault<z.ZodEnum<["default", "acceptEdits", "dontAsk", "bypassPermissions", "auto", "plan"]>>;
         rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -1868,14 +2092,17 @@ export declare const SettingsSchema: z.ZodObject<{
         maxTokens: z.ZodDefault<z.ZodNumber>;
         compactAtRatio: z.ZodDefault<z.ZodNumber>;
         summarizeAtRatio: z.ZodDefault<z.ZodNumber>;
+        microcompactFloorRatio: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         maxTokens: number;
         compactAtRatio: number;
         summarizeAtRatio: number;
+        microcompactFloorRatio: number;
     }, {
         maxTokens?: number | undefined;
         compactAtRatio?: number | undefined;
         summarizeAtRatio?: number | undefined;
+        microcompactFloorRatio?: number | undefined;
     }>>;
     session: z.ZodDefault<z.ZodObject<{
         storageDir: z.ZodOptional<z.ZodString>;
@@ -1887,7 +2114,7 @@ export declare const SettingsSchema: z.ZodObject<{
         storageDir?: string | undefined;
         maxHistory?: number | undefined;
     }>>;
-    mcpServers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    mcpServers: z.ZodDefault<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
         name: z.ZodString;
         command: z.ZodOptional<z.ZodString>;
         args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1895,6 +2122,10 @@ export declare const SettingsSchema: z.ZodObject<{
         url: z.ZodOptional<z.ZodString>;
         transport: z.ZodOptional<z.ZodEnum<["stdio", "sse", "streamable-http", "inprocess"]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentialRef: z.ZodOptional<z.ZodString>;
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -1905,6 +2136,10 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }, {
         name: string;
         enabled?: boolean | undefined;
@@ -1914,6 +2149,49 @@ export declare const SettingsSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
         headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>>, Record<string, {
+        name: string;
+        enabled?: boolean | undefined;
+        url?: string | undefined;
+        args?: string[] | undefined;
+        command?: string | undefined;
+        env?: Record<string, string> | undefined;
+        transport?: "stdio" | "sse" | "streamable-http" | "inprocess" | undefined;
+        headers?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }>, unknown>>;
+    /**
+     * User supplements for PLUGIN-provided MCP servers, keyed by the server's
+     * `<plugin>:<server>` name. Layered onto the plugin config at merge time
+     * (mergePluginMcpServers). Only env/credential fields are accepted —
+     * command/args/url/transport are intentionally absent and `.strict()`
+     * rejects them, so a plugin update is never shadowed by a stale copy.
+     */
+    mcpServerOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        envVars: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        credentialRef: z.ZodOptional<z.ZodString>;
+        bearerTokenEnvVar: z.ZodOptional<z.ZodString>;
+        envHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
+    }, {
+        env?: Record<string, string> | undefined;
+        envVars?: string[] | undefined;
+        bearerTokenEnvVar?: string | undefined;
+        envHeaders?: Record<string, string> | undefined;
+        credentialRef?: string | undefined;
     }>>>;
     /**
      * Skill names hidden from the LLM. Names include the full
@@ -1948,18 +2226,62 @@ export declare const SettingsSchema: z.ZodObject<{
         agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
         builtin: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
+        /**
+         * Per-hook overlay for PLUGIN-provided hooks, keyed by
+         * `pluginHookKey()` (`<plugin>:<RawEvent>:<command>`). Finer-grained
+         * than `plugins` (which kills a whole plugin): "off" suppresses one
+         * hook for this project only. Only "off" is meaningful today — plugin
+         * hooks have no global disable list to force back "on" from.
+         */
+        pluginHooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["inherit", "on", "off"]>>>;
     }, "strip", z.ZodTypeAny, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
     }, {
         builtin?: Record<string, "off" | "on" | "inherit"> | undefined;
         mcp?: Record<string, "off" | "on" | "inherit"> | undefined;
         skills?: Record<string, "off" | "on" | "inherit"> | undefined;
         plugins?: Record<string, "off" | "on" | "inherit"> | undefined;
         agents?: Record<string, "off" | "on" | "inherit"> | undefined;
+        pluginHooks?: Record<string, "off" | "on" | "inherit"> | undefined;
+    }>>;
+    /**
+     * Feature flags overlay: a map of flag name → boolean that overrides the
+     * compiled-in defaults (see settings/feature-flags.ts FEATURE_FLAGS).
+     * Project settings override user settings via the normal merge, so a flag
+     * can be flipped per-workspace. Unknown flag names are tolerated (kept as
+     * data) for forward-compat; consumers only read known flags via
+     * isFeatureEnabled(). Passthrough record — values coerced to boolean.
+     */
+    featureFlags: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    /**
+     * Cross-session memory knobs. Optional — absence keeps the built-in
+     * defaults (see services/extract-memories.ts). `maxCount` caps memories
+     * accepted per extraction pass; `maxAge`/`extractionModel` are reserved
+     * for the consolidation/extraction pipeline.
+     */
+    memories: z.ZodOptional<z.ZodObject<{
+        maxCount: z.ZodOptional<z.ZodNumber>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        extractionModel: z.ZodOptional<z.ZodString>;
+        /** Master switch for end-of-session automatic memory extraction.
+         *  Absent/true = extract (current behavior); false = skip extraction
+         *  while keeping session summaries and Dream untouched. */
+        autoExtract: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
+    }, {
+        maxCount?: number | undefined;
+        maxAge?: number | undefined;
+        extractionModel?: string | undefined;
+        autoExtract?: boolean | undefined;
     }>>;
     instructions: z.ZodDefault<z.ZodObject<{
         fileName: z.ZodDefault<z.ZodString>;
@@ -2108,24 +2430,22 @@ export declare const SettingsSchema: z.ZodObject<{
     }>>;
     /**
      * Image attachment handling. Sub-fields:
-     *   - detail: OpenAI-style fidelity hint applied to every user-
-     *     attached image. "low" = 85 tokens/image fixed (cheap
-     *     thumbnail), "high" = ~768 px tiles (default), "original" =
-     *     keep client-side dimensions (most expensive). Anthropic
-     *     ignores this field today; that's fine — it just gets
-     *     dropped on the Claude path.
+     *   - detail: provider-agnostic image clarity. Drives the
+     *     renderer-side downscale (low→~1024 / standard→~1568 /
+     *     high→~2576 px long edge) so BOTH providers save tokens
+     *     before send. Legacy "original" is migrated to "high".
      *   - mcpImageTokenBudget: per-turn cap on token cost of images
      *     returned by MCP tools. Codex doesn't enforce this; CC uses
      *     25 000. Set to 0 to disable.
      */
     images: z.ZodOptional<z.ZodObject<{
-        detail: z.ZodOptional<z.ZodEnum<["low", "high", "original"]>>;
+        detail: z.ZodOptional<z.ZodEffects<z.ZodEnum<["low", "standard", "high"]>, "low" | "high" | "standard", unknown>>;
         mcpImageTokenBudget: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: "low" | "high" | "standard" | undefined;
         mcpImageTokenBudget?: number | undefined;
     }, {
-        detail?: "low" | "high" | "original" | undefined;
+        detail?: unknown;
         mcpImageTokenBudget?: number | undefined;
     }>>;
     /**
@@ -2150,6 +2470,21 @@ export declare const SettingsSchema: z.ZodObject<{
         deniedReads?: string[] | undefined;
         network?: "allow" | "deny" | undefined;
     }>>;
+    /**
+     * Top-level environment variables injected into tool subprocesses (the
+     * Bash tool, background shells). Mirrors Claude Code's `env` field: a
+     * KEY=VALUE map that can be set globally (~/.code-shell/settings.json) and
+     * overridden per-project (.code-shell/settings.json). The canonical home
+     * for API keys (e.g. OPENAI_API_KEY) that a skill's script reads — configure
+     * once globally and every project's skills can use it.
+     *
+     * Precedence when merged into the spawn env (lowest → highest):
+     *   project localEnvironment.env  →  global env  →  project env
+     * None of these is filtered through the deny regex (see mergeShellEnv):
+     * they are values the user typed deliberately, a different trust class from
+     * the host process.env passthrough the deny machinery guards against.
+     */
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
      * Project-local environment profile. Mirrors Codex's local-environment
      * shape at the settings layer: setup/cleanup scripts can be customized per
@@ -2238,19 +2573,99 @@ export declare const SettingsSchema: z.ZodObject<{
         matcher: z.ZodOptional<z.ZodString>;
         timeout_ms: z.ZodOptional<z.ZodNumber>;
         cwd: z.ZodOptional<z.ZodString>;
+        /** Soft off-switch: the entry stays in the file (and the UI) but
+         *  registerSettingsHooks skips it. Absent = enabled. */
+        disabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }, {
         command: string;
         event: string;
+        disabled?: boolean | undefined;
         matcher?: string | undefined;
         timeout_ms?: number | undefined;
         cwd?: string | undefined;
     }>, "many">>;
+    /**
+     * External coding-agent orchestration (Claude Code / Codex CLI).
+     * Used by the Mobile Web Remote to launch managed jobs. dangerousArgs
+     * is config-provided (not hardcoded) so it tracks CLI flag changes;
+     * project-default dangerous mode only applies inside trustedWorkspaces.
+     */
+    externalAgents: z.ZodOptional<z.ZodObject<{
+        claudeCode: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            defaultMode: z.ZodOptional<z.ZodEnum<["safe", "dangerous"]>>;
+            dangerousArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            trustedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            autoStartInTrustedWorkspaces: z.ZodOptional<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }, {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        }>>;
+        codex: z.ZodOptional<z.ZodObject<{
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }, {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }, {
+        claudeCode?: {
+            defaultMode?: "safe" | "dangerous" | undefined;
+            command?: string | undefined;
+            dangerousArgs?: string[] | undefined;
+            trustedWorkspaces?: string[] | undefined;
+            autoStartInTrustedWorkspaces?: boolean | undefined;
+        } | undefined;
+        codex?: {
+            args?: string[] | undefined;
+            command?: string | undefined;
+        } | undefined;
+    }>>;
+    /**
+     * Credential-use gate (凭证模块第二期). Controls whether the AI's
+     * `UseCredential` tool prompts before handing a stored credential to a
+     * command. `autoApprove: true` skips the prompt entirely (默认关 — every
+     * use asks, or is remembered for the session). See
+     * docs/superpowers/specs/2026-06-16-credential-use-gate-design.md §5.
+     */
+    credentialUse: z.ZodOptional<z.ZodObject<{
+        autoApprove: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        autoApprove?: boolean | undefined;
+    }, {
+        autoApprove?: boolean | undefined;
+    }>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type ValidatedSettings = z.infer<typeof SettingsSchema>;
 export declare function validateSettings(raw: unknown): ValidatedSettings;