@code-yeongyu/senpi 2026.8.18 → 2026.8.20-2

package/docs/providers.md

@@ -44,10 +44,11 @@ The `claude-sdk-oauth` provider routes LLM calls through the official [Claude Ag
 - Multiple accounts: each `/login claude-sdk-oauth` adds another named account. `CLAUDE_CODE_OAUTH_TOKEN` (and `_2`..`_N`) are honored as read-only env accounts. `/claude-account` lists, adds, removes, and pins accounts; `--claude-account <name>` pins one for the session; `claudeSdkOauthProvider.pinnedAccount` pins one in settings.
 - Session affinity: one senpi session sticks to one account (rendezvous hashing), which keeps Anthropic's prompt cache warm - accounts never rotate mid-session except on automatic failover. Rate limits and auth errors block the account (with cooldown) and retry on the next account, before any visible output; once output has started, the error surfaces instead of replaying.
 - Default lane: **ambient** - with no `tokenInjection` setting the provider inherits the environment like the upstream extension (Claude Code CLI login or `ANTHROPIC_API_KEY`). Managed lanes (`oauth-slots`, `config-dir`) are opt-in via one settings line until the live subscription spike proves a managed default.
+- Ambient lane is explicit opt-in: a Claude Code CLI login on the host is not consent to spend that subscription, so the ambient lane is gated by `claudeSdkOauthProvider.enabled` (default `false`, env override `SENPI_CLAUDE_SDK_OAUTH_ENABLED`). Before this gate existed, a logged-in Claude Code CLI made the provider available with no senpi-side action. An explicit senpi-side login is itself an opt-in: stored OAuth accounts in `auth.json` and `CLAUDE_CODE_OAUTH_TOKEN` / `CLAUDE_CODE_OAUTH_TOKEN_<n>` env accounts keep the provider available with the flag unset. Only the host-CLI-derived ambient lane requires the flag.
 - Settings (`claudeSdkOauthProvider`):
   - `systemPromptMode` — controls how the system prompt is delivered. **`full`** (default) sends senpi's composed system prompt verbatim; the lane no longer rebuilds from the SDK `claude_code` preset, so all prompt regions (project rules, response-language instructions, etc.) reach the model. **`preset-append`** is the previous behaviour (deprecated, kept for one release; emits a one-time warning). **`override`** loads the system prompt from a file (`systemPromptFile`). The legacy `appendSystemPrompt` key still works: `false` → `preset-append`, `true`/unset → `full`; setting both keys makes `systemPromptMode` win and warns.
   - In `full` and `override` modes, `settingSources` defaults to `[]` on every lane because senpi's prompt already carries project context — loading the SDK's own CLAUDE.md would double-inject it. The CLI always prepends its own `"You are a Claude agent, built on Anthropic's Claude Agent SDK."` block, which senpi cannot suppress; `full` means the prompt is delivered intact, not that it is the only system-prompt text.
-  - `settingSources` (filesystem settings load only in the ambient lane, so they cannot override your selected account), `strictMcpConfig`, `pinnedAccount`, `tokenInjection` (`oauth-slots` | `config-dir` | `ambient`), `resumeMode` (`auto` default | `off` restores per-turn sessions), `systemPromptFile`.
+  - `settingSources` (filesystem settings load only in the ambient lane, so they cannot override your selected account), `strictMcpConfig`, `pinnedAccount`, `tokenInjection` (`oauth-slots` | `config-dir` | `ambient`), `resumeMode` (`auto` default | `off` restores per-turn sessions), `systemPromptFile`, `enabled` (default `false`; gates the ambient lane only).
 - **Environment overrides** (precedence: `env > project settings > global settings > default`; no new CLI flags):
 
   | Variable | Purpose |
@@ -55,6 +56,7 @@ The `claude-sdk-oauth` provider routes LLM calls through the official [Claude Ag
   | `SENPI_CLAUDE_SDK_OAUTH_SYSTEM_PROMPT_MODE` | `full` \| `preset-append` \| `override` |
   | `SENPI_CLAUDE_SDK_OAUTH_SYSTEM_PROMPT_FILE` | Path to the system prompt file (used with `override` mode) |
   | `SENPI_CLAUDE_SDK_OAUTH_RESUME` | `auto` (default) \| `off` — disables session reuse, restoring per-turn SDK queries |
+  | `SENPI_CLAUDE_SDK_OAUTH_ENABLED` | Overrides `enabled`; gates the ambient (host-CLI-derived) lane |
   | `SENPI_CLAUDE_SDK_OAUTH_TOKEN_INJECTION` | `oauth-slots` \| `config-dir` \| `ambient` |
   | `SENPI_CLAUDE_SDK_OAUTH_SETTING_SOURCES` | Overrides `settingSources` |
   | `SENPI_CLAUDE_SDK_OAUTH_PINNED_ACCOUNT` | Overrides `pinnedAccount` |
@@ -146,7 +148,7 @@ Radius is a dynamic `pi-messages` gateway. `/login radius` stores OAuth tokens i
 
 Use the native `cursor` provider above by default - it is the first-party, primary path.
 
-`cursor-cli-oauth` is an optional fallback (never a replacement) that drives the locally installed `cursor-agent` CLI instead of Cursor's network protocol. Fall back to this lane when:
+`cursor-cli-oauth` is an opt-in fallback (never a replacement) that drives the locally installed `cursor-agent` CLI instead of Cursor's network protocol. It becomes usable when `cursor-agent` is installed, Senpi has a native `cursor` OAuth credential, and the lane has been explicitly enabled. Fall back to this lane when:
 
 - the native transport misbehaves on your setup - protocol drift after a Cursor update, Connect-RPC/HTTP2 failures the native provider cannot route around, or
 - you explicitly want Cursor's own agent harness - the model running inside the Cursor CLI with its built-in tools - rather than senpi executing the tools.
@@ -159,7 +161,7 @@ Use the native `cursor` provider above by default - it is the first-party, prima
 | Auth | senpi OAuth (`/login cursor`), tokens in `auth.json` | The same senpi OAuth flow; this lane stores multiple named accounts and injects each into a per-account file-store HOME immediately before every turn |
 | Tool execution | Cursor's server-driven exec channel bridges onto senpi's real tools (`read`, `bash`, `edit`, `write`, `grep`, `find`, `ls`, MCP/extension tools), so approvals, sandboxing, and truncation behave like model-issued calls | Runs INSIDE the Cursor CLI with no senpi approval, no senpi sandboxing, and no tool-level audit - a one-time acknowledgement is required before unattended execution |
 | Model catalog | Per-account `GetUsableModels` discovery, refreshed with `senpi update --models` | `cursor-agent models` listing (the full suffix-expanded effort x thinking x `-fast` ladder, 204 ids on the reference build), cached with a TTL; static fallback list when the CLI is missing or the probe fails |
-| Requirements | None beyond `/login cursor` | The `cursor-agent` CLI installed, plus an explicit fallback-lane login or import |
+| Requirements | None beyond `/login cursor` | The `cursor-agent` CLI installed plus a native or managed Cursor OAuth credential; native credentials bootstrap automatically |
 
 #### Setup
 
@@ -169,15 +171,16 @@ Use the native `cursor` provider above by default - it is the first-party, prima
 curl https://cursor.com/install -fsS | bash
 ```
 
-2. Sign in: `/login cursor-cli-oauth` runs the same Cursor OAuth flow as the native provider, stores the account as a named slot (the first slot is named `default`; later logins prompt for a name), and enables the fallback lane.
-3. Or reuse an existing credential explicitly: `/cursor-account import native` copies the OAuth credential already stored for the primary `cursor` provider into a managed `native` slot. The primary credential is preserved unchanged. Bare `/cursor-account import` (or `import local`) keeps copying the locally logged-in Cursor desktop/CLI credential.
+2. Sign in to native Cursor with `/login cursor`. When the CLI lane has no managed accounts, it automatically copies that stored OAuth credential into one managed `native` slot. The primary credential is preserved unchanged; repeated/concurrent startup does not create duplicates.
+3. `/login cursor-cli-oauth` remains available for separate or additional managed accounts. `/cursor-account import native` remains an explicit repair/manual-copy command, while bare `/cursor-account import` (or `import local`) copies the locally logged-in Cursor desktop/CLI credential.
 4. Manage accounts with `/cursor-account`:
 
 ```
 /cursor-account [list | add | remove <name> | pin <name> | unpin | import [local | native] | acknowledge | status]
 ```
 
-- `add`, `import local`, and `import native` are explicit opt-in actions: each enables the lane and refreshes its model availability. Set `cursorCliOauthProvider.enabled: false` (or `SENPI_CURSOR_CLI_OAUTH_ENABLED=0`) to disable it again.
+- The lane is disabled by default. A `cursor-agent` CLI being logged in on the machine is not consent to spend that subscription, so set `cursorCliOauthProvider.enabled: true` (or `SENPI_CURSOR_CLI_OAUTH_ENABLED=1`) to enable it and allow automatic native credential bootstrap. Before this gate existed, an installed and logged-in `cursor-agent` made the lane available with no senpi-side action.
+- `add`, `import local`, and `import native` explicitly persist enabled state and refresh model availability.
 - `import local` copies the locally logged-in Cursor desktop credential into a new slot: the source is read once, on this explicit request only, and copied - never referenced live.
 - `import native` copies the primary Senpi `cursor` provider's OAuth credential into a separate managed slot without moving, deleting, or refreshing the primary entry.
 - `pin <name>` (or the `cursorCliOauthProvider.pinnedAccount` setting) fixes one account for the session.

package/docs/settings.md

@@ -89,8 +89,8 @@ Permission rules are a confirmation policy, not a sandbox. Senpi, extensions, pa
 | `modelServiceTiers` | object | - | Per-model service tier memory (`"provider/id": "auto" \| "priority"`) |
 | `promptPreset` | string | `"auto"` | Force a system prompt preset: `"auto"`, `"kimi-k2-6"`, `"kimi-k2-7"`, `"kimi-k3"`, `"glm-5.2"`, `"glm-5.3"`, `"grok-4.5"`, `"grok-4.6"`, `"claude-fable-5"`, `"claude-opus-5"`, `"claude-opus-4-5"`, `"claude-opus-4-6"`, `"claude-opus-4-7"`, `"claude-opus-4-8"`, `"deepseek-v4-flash"`, `"deepseek-v4-flash-0731"`, `"deepseek-v4-pro"`, `"gpt-5"`, `"gpt-5.2"`, `"gpt-5.3-codex"`, `"gpt-5.4"`, `"gpt-5.5"`, or `"gpt-5.6"` |
 | `hideThinkingBlock` | boolean | `false` | Hide thinking blocks in output |
-| `showCacheMissNotices` | boolean | `false` | Show transcript notices for significant prompt-cache misses |
-| `thinkingBudgets` | object | - | Custom token budgets per thinking level |
+| `showCacheMissNotices` | boolean | `false` | Show transcript notices for significant prompt-cache misses and compaction or branch-summary usage |
+| `thinkingBudgets` | object | - | Custom token budgets per thinking level. Anthropic, Google, and Bedrock use these natively. OpenAI-compatible models use them when `compat.thinkingTokenBudgetField` (or `supportsThinkingTokenBudget`) is set. |
 
 #### promptPreset
 
@@ -319,6 +319,26 @@ For diagnostics, Senpi writes sanitized NDJSON records for candidate skips, cool
 
 When unset, senpi leaves provider payloads unchanged. This setting currently applies only to the built-in OpenAI Responses provider path.
 
+### Providers
+
+| Setting | Type | Default | Description |
+|---------|------|---------|-------------|
+| `claudeSdkOauthProvider.enabled` | boolean | `false` | Enable the ambient (host-CLI-derived) lane of `claude-sdk-oauth`. Env override: `SENPI_CLAUDE_SDK_OAUTH_ENABLED`. Explicit senpi-side logins (stored OAuth accounts in `auth.json`, `CLAUDE_CODE_OAUTH_TOKEN` / `CLAUDE_CODE_OAUTH_TOKEN_<n>` env accounts) keep the provider available with this unset |
+| `cursorCliOauthProvider.enabled` | boolean | `false` | Enable the `cursor-cli-oauth` fallback lane and automatic native credential bootstrap. Env override: `SENPI_CURSOR_CLI_OAUTH_ENABLED` |
+
+Both ambient-auth providers are explicit opt-in: a vendor CLI being logged in on the machine is not consent to spend that subscription. Before these gates existed, a logged-in Claude Code or `cursor-agent` CLI made the lane available with no senpi-side action, so subscription usage could flow through a provider you never configured. Env overrides follow the usual precedence (`env > project settings > global settings > default`). See [providers.md](providers.md) for the full lane documentation.
+
+```json
+{
+  "claudeSdkOauthProvider": {
+    "enabled": true
+  },
+  "cursorCliOauthProvider": {
+    "enabled": true
+  }
+}
+```
+
 ### Terminal & Images
 
 | Setting | Type | Default | Description |

package/docs/skills.md

@@ -35,9 +35,10 @@ Senpi loads skills from:
 - CLI: `--skill <path>` (repeatable, additive even with `--no-skills`)
 
 Discovery rules:
-- In `~/.senpi/agent/skills/` and `.senpi/skills/`, direct root `.md` files are discovered as individual skills
+- In `~/.senpi/agent/skills/` and `.senpi/skills/`, direct root `.md` files are discovered as individual skills when they have valid skill frontmatter with a non-empty `description`
 - In all skill locations, directories containing `SKILL.md` are discovered recursively
-- In `~/.agents/skills/` and project `.agents/skills/`, root `.md` files are ignored
+- In `~/.agents/skills/` and project `.agents/skills/`, root `.md` files are ignored, but nested `.md` files in grouping folders are discovered when they declare skill frontmatter
+- Root Markdown files other than `SKILL.md` that do not look like skills are ignored silently
 
 Disable discovery with `--no-skills` (explicit `--skill` paths still load).
 
@@ -223,7 +224,7 @@ Senpi validates skills against the Agent Skills standard. Most issues produce wa
 
 Unknown frontmatter fields are ignored.
 
-**Exception:** Skills with missing description are not loaded.
+Declared skills with missing descriptions are not loaded. Malformed `SKILL.md` files and `SKILL.md` files without a description produce warnings and are not loaded. Other Markdown files without valid skill frontmatter are ignored.
 
 Name collisions (same name from different locations) warn and keep the first skill found.
 

package/examples/extensions/border-status-editor.ts

@@ -92,7 +92,7 @@ export default function (pi: ExtensionAPI) {
 		activeTui?.requestRender();
 	});
 
-	pi.on("agent_end", () => {
+	pi.on("agent_settled", () => {
 		isWorking = false;
 		stopSpinner();
 		activeTui?.requestRender();

package/examples/extensions/git-checkpoint.ts

@@ -46,8 +46,8 @@ export default function (pi: ExtensionAPI) {
 		}
 	});
 
-	pi.on("agent_end", async () => {
-		// Clear checkpoints after agent completes
+	pi.on("agent_settled", async () => {
+		// Clear checkpoints after the full agent run completes
 		checkpoints.clear();
 	});
 }

package/examples/extensions/notify.ts

@@ -49,7 +49,9 @@ function notify(title: string, body: string): void {
 }
 
 export default function (pi: ExtensionAPI) {
-	pi.on("agent_end", async () => {
+	// `agent_end` fires after each low-level run; Pi may still retry, compact,
+	// or continue with queued follow-ups. Notify only after the full run settles.
+	pi.on("agent_settled", async () => {
 		notify("Pi", "Ready for input");
 	});
 }

package/examples/extensions/subagent/index.ts

@@ -522,7 +522,12 @@ export default function (pi: ExtensionAPI) {
 				};
 			}
 
-			if ((agentScope === "project" || agentScope === "both") && confirmProjectAgents && ctx.hasUI) {
+			if (
+				(agentScope === "project" || agentScope === "both") &&
+				confirmProjectAgents &&
+				ctx.hasUI &&
+				!ctx.isProjectTrusted()
+			) {
 				const requestedAgentNames = new Set<string>();
 				if (params.chain) for (const step of params.chain) requestedAgentNames.add(step.agent);
 				if (params.tasks) for (const t of params.tasks) requestedAgentNames.add(t.agent);

package/examples/extensions/titlebar-spinner.ts

@@ -48,7 +48,7 @@ export default function (pi: ExtensionAPI) {
 		startAnimation(ctx);
 	});
 
-	pi.on("agent_end", async (_event, ctx) => {
+	pi.on("agent_settled", async (_event, ctx) => {
 		stopAnimation(ctx);
 	});
 

package/examples/rpc-extension-ui.ts

@@ -576,7 +576,7 @@ async function main() {
 			return;
 		}
 
-		if (data.type === "agent_end") {
+		if (data.type === "agent_settled") {
 			isStreaming = false;
 			hideLoading();
 			outputLog.append("");

package/examples/sdk/06-extensions.ts

@@ -66,7 +66,7 @@ export default function (pi: ExtensionAPI) {
 	});
 
 	pi.on("agent_end", async (event) => {
-		console.log(\`[Extension] Done, \${event.messages.length} messages\`);
+		console.log(\`[Extension] Low-level run ended, \${event.messages.length} messages\`);
 	});
 
 	// Register a custom tool

package/examples/sdk/README.md

@@ -132,7 +132,7 @@ session.subscribe((event) => {
     case "tool_execution_end":
       console.log(`Result: ${event.result}`);
       break;
-    case "agent_end":
+    case "agent_settled":
       console.log("Done");
       break;
   }

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-cjs/index.js

@@ -90,7 +90,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1094.0";
+var version = "3.1111.0";
 var packageInfo = {
 	version: version};
 
@@ -546,15 +546,18 @@ const _STC = "SpecificToolChoice";
 const _STy = "SystemTool";
 const _SUE = "ServiceUnavailableException";
 const _T = "Tag";
+const _TAB = "ToolAdditionBlock";
 const _TC = "ToolConfiguration";
 const _TCo = "ToolChoice";
 const _TE = "ThrottlingException";
 const _TIS = "ToolInputSchema";
 const _TL = "TagList";
-const _TRB = "ToolResultBlock";
+const _TR = "ToolReference";
+const _TRB = "ToolRemovalBlock";
 const _TRBD = "ToolResultBlocksDelta";
 const _TRBDo = "ToolResultBlockDelta";
 const _TRBS = "ToolResultBlockStart";
+const _TRBo = "ToolResultBlock";
 const _TRCB = "ToolResultContentBlocks";
 const _TRCBo = "ToolResultContentBlock";
 const _TS = "ToolSpecification";
@@ -643,6 +646,7 @@ const _doc = "document";
 const _e = "error";
 const _eO = "endOffset";
 const _eT = "endTime";
+const _ef = "effort";
 const _en = "enabled";
 const _end = "end";
 const _ent = "entities";
@@ -750,6 +754,7 @@ const _sIP = "sensitiveInformationPolicy";
 const _sIPFU = "sensitiveInformationPolicyFreeUnits";
 const _sIPU = "sensitiveInformationPolicyUnits";
 const _sL = "s3Location";
+const _sN = "serverName";
 const _sO = "sortOrder";
 const _sODC = "s3OutputDataConfig";
 const _sPM = "streamProcessingMode";
@@ -782,7 +787,8 @@ const _stri = "strict";
 const _stru = "structure";
 const _sy = "system";
 const _t = "ttl";
-const _tA = "translationAmbiguous";
+const _tA = "toolAddition";
+const _tAr = "translationAmbiguous";
 const _tC = "toolConfig";
 const _tCe = "textCharacters";
 const _tCo = "toolChoice";
@@ -793,6 +799,7 @@ const _tP = "topicPolicy";
 const _tPU = "topicPolicyUnits";
 const _tPo = "topP";
 const _tR = "toolResult";
+const _tRo = "toolRemoval";
 const _tS = "toolSpec";
 const _tT = "totalTokens";
 const _tU = "textUnits";
@@ -804,8 +811,8 @@ const _tem = "temperature";
 const _th = "threshold";
 const _ti = "title";
 const _to = "total";
-const _too = "tools";
-const _tool = "tool";
+const _too = "tool";
+const _tool = "tools";
 const _top = "topics";
 const _tr = "trace";
 const _tra = "translation";
@@ -1505,8 +1512,8 @@ var MessageStopEvent$ = [3, n0, _MSEe,
 ];
 var OutputConfig$ = [3, n0, _OC,
     0,
-    [_tF],
-    [[() => OutputFormat$, 0]]
+    [_tF, _ef],
+    [[() => OutputFormat$, 0], 0]
 ];
 var OutputFormat$ = [3, n0, _OF,
     0,
@@ -1588,12 +1595,27 @@ var TokenUsage$ = [3, n0, _TU,
     [_iT, _oT, _tT, _cRIT, _cWIT, _cD],
     [1, 1, 1, 1, 1, () => CacheDetailsList], 3
 ];
+var ToolAdditionBlock$ = [3, n0, _TAB,
+    0,
+    [_too],
+    [() => ToolReference$], 1
+];
 var ToolConfiguration$ = [3, n0, _TC,
     0,
-    [_too, _tCo],
+    [_tool, _tCo],
     [() => Tools, () => ToolChoice$], 1
 ];
-var ToolResultBlock$ = [3, n0, _TRB,
+var ToolReference$ = [3, n0, _TR,
+    0,
+    [_ty, _n, _sN],
+    [0, 0, 0]
+];
+var ToolRemovalBlock$ = [3, n0, _TRB,
+    0,
+    [_too],
+    [() => ToolReference$], 1
+];
+var ToolResultBlock$ = [3, n0, _TRBo,
     0,
     [_tUI, _co, _st, _ty],
     [0, [() => ToolResultContentBlocks, 0], 0, 0], 2
@@ -1813,8 +1835,8 @@ var CitationSourceContent$ = [4, n0, _CSC,
 ];
 var ContentBlock$ = [4, n0, _CBo,
     0,
-    [_te, _ima, _doc, _vi, _au, _tUo, _tR, _gCua, _cPa, _rC, _cC, _sRe],
-    [0, [() => ImageBlock$, 0], () => DocumentBlock$, () => VideoBlock$, [() => AudioBlock$, 0], () => ToolUseBlock$, [() => ToolResultBlock$, 0], [() => GuardrailConverseContentBlock$, 0], () => CachePointBlock$, [() => ReasoningContentBlock$, 0], () => CitationsContentBlock$, () => SearchResultBlock$]
+    [_te, _ima, _doc, _vi, _au, _tUo, _tR, _gCua, _cPa, _rC, _cC, _sRe, _tA, _tRo],
+    [0, [() => ImageBlock$, 0], () => DocumentBlock$, () => VideoBlock$, [() => AudioBlock$, 0], () => ToolUseBlock$, [() => ToolResultBlock$, 0], [() => GuardrailConverseContentBlock$, 0], () => CachePointBlock$, [() => ReasoningContentBlock$, 0], () => CitationsContentBlock$, () => SearchResultBlock$, () => ToolAdditionBlock$, () => ToolRemovalBlock$]
 ];
 var ContentBlockDelta$ = [4, n0, _CBD,
     0,
@@ -1853,7 +1875,7 @@ var DocumentSource$ = [4, n0, _DS,
 ];
 var GuardrailAutomatedReasoningFinding$ = [4, n0, _GARF,
     0,
-    [_va, _in, _sa, _imp, _tA, _tCoo, _nTo],
+    [_va, _in, _sa, _imp, _tAr, _tCoo, _nTo],
     [[() => GuardrailAutomatedReasoningValidFinding$, 0], [() => GuardrailAutomatedReasoningInvalidFinding$, 0], [() => GuardrailAutomatedReasoningSatisfiableFinding$, 0], [() => GuardrailAutomatedReasoningImpossibleFinding$, 0], [() => GuardrailAutomatedReasoningTranslationAmbiguousFinding$, 0], () => GuardrailAutomatedReasoningTooComplexFinding$, () => GuardrailAutomatedReasoningNoTranslationsFinding$]
 ];
 var GuardrailChecksContentBlock$ = [4, n0, _GCCB,
@@ -1933,7 +1955,7 @@ var Tool$ = [4, n0, _Too,
 ];
 var ToolChoice$ = [4, n0, _TCo,
     0,
-    [_aut, _an, _tool],
+    [_aut, _an, _too],
     [() => AutoToolChoice$, () => AnyToolChoice$, () => SpecificToolChoice$]
 ];
 var ToolInputSchema$ = [4, n0, _TIS,
@@ -2788,9 +2810,12 @@ exports.ThrottlingException = ThrottlingException;
 exports.ThrottlingException$ = ThrottlingException$;
 exports.TokenUsage$ = TokenUsage$;
 exports.Tool$ = Tool$;
+exports.ToolAdditionBlock$ = ToolAdditionBlock$;
 exports.ToolChoice$ = ToolChoice$;
 exports.ToolConfiguration$ = ToolConfiguration$;
 exports.ToolInputSchema$ = ToolInputSchema$;
+exports.ToolReference$ = ToolReference$;
+exports.ToolRemovalBlock$ = ToolRemovalBlock$;
 exports.ToolResultBlock$ = ToolResultBlock$;
 exports.ToolResultBlockDelta$ = ToolResultBlockDelta$;
 exports.ToolResultBlockStart$ = ToolResultBlockStart$;

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-es/index.js

@@ -2,8 +2,8 @@ export * from "./BedrockRuntimeClient";
 export * from "./BedrockRuntime";
 export * from "./commands";
 export { Command as $Command } from "@smithy/core/client";
-export * from "./schemas/schemas_0";
 export * from "./pagination";
+export * from "./schemas/schemas_0";
 export * from "./models/enums";
 export * from "./models/errors";
 export * from "./models/models_0";

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-es/schemas/schemas_0.js

@@ -231,15 +231,18 @@ const _STC = "SpecificToolChoice";
 const _STy = "SystemTool";
 const _SUE = "ServiceUnavailableException";
 const _T = "Tag";
+const _TAB = "ToolAdditionBlock";
 const _TC = "ToolConfiguration";
 const _TCo = "ToolChoice";
 const _TE = "ThrottlingException";
 const _TIS = "ToolInputSchema";
 const _TL = "TagList";
-const _TRB = "ToolResultBlock";
+const _TR = "ToolReference";
+const _TRB = "ToolRemovalBlock";
 const _TRBD = "ToolResultBlocksDelta";
 const _TRBDo = "ToolResultBlockDelta";
 const _TRBS = "ToolResultBlockStart";
+const _TRBo = "ToolResultBlock";
 const _TRCB = "ToolResultContentBlocks";
 const _TRCBo = "ToolResultContentBlock";
 const _TS = "ToolSpecification";
@@ -328,6 +331,7 @@ const _doc = "document";
 const _e = "error";
 const _eO = "endOffset";
 const _eT = "endTime";
+const _ef = "effort";
 const _en = "enabled";
 const _end = "end";
 const _ent = "entities";
@@ -435,6 +439,7 @@ const _sIP = "sensitiveInformationPolicy";
 const _sIPFU = "sensitiveInformationPolicyFreeUnits";
 const _sIPU = "sensitiveInformationPolicyUnits";
 const _sL = "s3Location";
+const _sN = "serverName";
 const _sO = "sortOrder";
 const _sODC = "s3OutputDataConfig";
 const _sPM = "streamProcessingMode";
@@ -467,7 +472,8 @@ const _stri = "strict";
 const _stru = "structure";
 const _sy = "system";
 const _t = "ttl";
-const _tA = "translationAmbiguous";
+const _tA = "toolAddition";
+const _tAr = "translationAmbiguous";
 const _tC = "toolConfig";
 const _tCe = "textCharacters";
 const _tCo = "toolChoice";
@@ -478,6 +484,7 @@ const _tP = "topicPolicy";
 const _tPU = "topicPolicyUnits";
 const _tPo = "topP";
 const _tR = "toolResult";
+const _tRo = "toolRemoval";
 const _tS = "toolSpec";
 const _tT = "totalTokens";
 const _tU = "textUnits";
@@ -489,8 +496,8 @@ const _tem = "temperature";
 const _th = "threshold";
 const _ti = "title";
 const _to = "total";
-const _too = "tools";
-const _tool = "tool";
+const _too = "tool";
+const _tool = "tools";
 const _top = "topics";
 const _tr = "trace";
 const _tra = "translation";
@@ -1193,8 +1200,8 @@ export var MessageStopEvent$ = [3, n0, _MSEe,
 ];
 export var OutputConfig$ = [3, n0, _OC,
     0,
-    [_tF],
-    [[() => OutputFormat$, 0]]
+    [_tF, _ef],
+    [[() => OutputFormat$, 0], 0]
 ];
 export var OutputFormat$ = [3, n0, _OF,
     0,
@@ -1276,12 +1283,27 @@ export var TokenUsage$ = [3, n0, _TU,
     [_iT, _oT, _tT, _cRIT, _cWIT, _cD],
     [1, 1, 1, 1, 1, () => CacheDetailsList], 3
 ];
+export var ToolAdditionBlock$ = [3, n0, _TAB,
+    0,
+    [_too],
+    [() => ToolReference$], 1
+];
 export var ToolConfiguration$ = [3, n0, _TC,
     0,
-    [_too, _tCo],
+    [_tool, _tCo],
     [() => Tools, () => ToolChoice$], 1
 ];
-export var ToolResultBlock$ = [3, n0, _TRB,
+export var ToolReference$ = [3, n0, _TR,
+    0,
+    [_ty, _n, _sN],
+    [0, 0, 0]
+];
+export var ToolRemovalBlock$ = [3, n0, _TRB,
+    0,
+    [_too],
+    [() => ToolReference$], 1
+];
+export var ToolResultBlock$ = [3, n0, _TRBo,
     0,
     [_tUI, _co, _st, _ty],
     [0, [() => ToolResultContentBlocks, 0], 0, 0], 2
@@ -1507,8 +1529,8 @@ export var CitationSourceContent$ = [4, n0, _CSC,
 ];
 export var ContentBlock$ = [4, n0, _CBo,
     0,
-    [_te, _ima, _doc, _vi, _au, _tUo, _tR, _gCua, _cPa, _rC, _cC, _sRe],
-    [0, [() => ImageBlock$, 0], () => DocumentBlock$, () => VideoBlock$, [() => AudioBlock$, 0], () => ToolUseBlock$, [() => ToolResultBlock$, 0], [() => GuardrailConverseContentBlock$, 0], () => CachePointBlock$, [() => ReasoningContentBlock$, 0], () => CitationsContentBlock$, () => SearchResultBlock$]
+    [_te, _ima, _doc, _vi, _au, _tUo, _tR, _gCua, _cPa, _rC, _cC, _sRe, _tA, _tRo],
+    [0, [() => ImageBlock$, 0], () => DocumentBlock$, () => VideoBlock$, [() => AudioBlock$, 0], () => ToolUseBlock$, [() => ToolResultBlock$, 0], [() => GuardrailConverseContentBlock$, 0], () => CachePointBlock$, [() => ReasoningContentBlock$, 0], () => CitationsContentBlock$, () => SearchResultBlock$, () => ToolAdditionBlock$, () => ToolRemovalBlock$]
 ];
 export var ContentBlockDelta$ = [4, n0, _CBD,
     0,
@@ -1547,7 +1569,7 @@ export var DocumentSource$ = [4, n0, _DS,
 ];
 export var GuardrailAutomatedReasoningFinding$ = [4, n0, _GARF,
     0,
-    [_va, _in, _sa, _imp, _tA, _tCoo, _nTo],
+    [_va, _in, _sa, _imp, _tAr, _tCoo, _nTo],
     [[() => GuardrailAutomatedReasoningValidFinding$, 0], [() => GuardrailAutomatedReasoningInvalidFinding$, 0], [() => GuardrailAutomatedReasoningSatisfiableFinding$, 0], [() => GuardrailAutomatedReasoningImpossibleFinding$, 0], [() => GuardrailAutomatedReasoningTranslationAmbiguousFinding$, 0], () => GuardrailAutomatedReasoningTooComplexFinding$, () => GuardrailAutomatedReasoningNoTranslationsFinding$]
 ];
 export var GuardrailChecksContentBlock$ = [4, n0, _GCCB,
@@ -1627,7 +1649,7 @@ export var Tool$ = [4, n0, _Too,
 ];
 export var ToolChoice$ = [4, n0, _TCo,
     0,
-    [_aut, _an, _tool],
+    [_aut, _an, _too],
     [() => AutoToolChoice$, () => AnyToolChoice$, () => SpecificToolChoice$]
 ];
 export var ToolInputSchema$ = [4, n0, _TIS,

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-types/commands/ConverseCommand.d.ts

@@ -246,6 +246,20 @@ declare const ConverseCommand_base: {
  *               enabled: true || false, // required
  *             },
  *           },
+ *           toolAddition: { // ToolAdditionBlock
+ *             tool: { // ToolReference
+ *               type: "STRING_VALUE",
+ *               name: "STRING_VALUE",
+ *               serverName: "STRING_VALUE",
+ *             },
+ *           },
+ *           toolRemoval: { // ToolRemovalBlock
+ *             tool: {
+ *               type: "STRING_VALUE",
+ *               name: "STRING_VALUE",
+ *               serverName: "STRING_VALUE",
+ *             },
+ *           },
  *         },
  *       ],
  *     },
@@ -340,6 +354,7 @@ declare const ConverseCommand_base: {
  *         },
  *       },
  *     },
+ *     effort: "STRING_VALUE",
  *   },
  * };
  * const command = new ConverseCommand(input);
@@ -556,6 +571,20 @@ declare const ConverseCommand_base: {
  * //               enabled: true || false, // required
  * //             },
  * //           },
+ * //           toolAddition: { // ToolAdditionBlock
+ * //             tool: { // ToolReference
+ * //               type: "STRING_VALUE",
+ * //               name: "STRING_VALUE",
+ * //               serverName: "STRING_VALUE",
+ * //             },
+ * //           },
+ * //           toolRemoval: { // ToolRemovalBlock
+ * //             tool: {
+ * //               type: "STRING_VALUE",
+ * //               name: "STRING_VALUE",
+ * //               serverName: "STRING_VALUE",
+ * //             },
+ * //           },
  * //         },
  * //       ],
  * //     },

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-types/commands/ConverseStreamCommand.d.ts

@@ -246,6 +246,20 @@ declare const ConverseStreamCommand_base: {
  *               enabled: true || false, // required
  *             },
  *           },
+ *           toolAddition: { // ToolAdditionBlock
+ *             tool: { // ToolReference
+ *               type: "STRING_VALUE",
+ *               name: "STRING_VALUE",
+ *               serverName: "STRING_VALUE",
+ *             },
+ *           },
+ *           toolRemoval: { // ToolRemovalBlock
+ *             tool: {
+ *               type: "STRING_VALUE",
+ *               name: "STRING_VALUE",
+ *               serverName: "STRING_VALUE",
+ *             },
+ *           },
  *         },
  *       ],
  *     },
@@ -341,6 +355,7 @@ declare const ConverseStreamCommand_base: {
  *         },
  *       },
  *     },
+ *     effort: "STRING_VALUE",
  *   },
  * };
  * const command = new ConverseStreamCommand(input);

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-types/commands/CountTokensCommand.d.ts

@@ -251,6 +251,20 @@ declare const CountTokensCommand_base: {
  *                   enabled: true || false, // required
  *                 },
  *               },
+ *               toolAddition: { // ToolAdditionBlock
+ *                 tool: { // ToolReference
+ *                   type: "STRING_VALUE",
+ *                   name: "STRING_VALUE",
+ *                   serverName: "STRING_VALUE",
+ *                 },
+ *               },
+ *               toolRemoval: { // ToolRemovalBlock
+ *                 tool: {
+ *                   type: "STRING_VALUE",
+ *                   name: "STRING_VALUE",
+ *                   serverName: "STRING_VALUE",
+ *                 },
+ *               },
  *             },
  *           ],
  *         },

package/node_modules/@aws-sdk/client-bedrock-runtime/dist-types/index.d.ts

@@ -10,8 +10,8 @@ export type { RuntimeExtension } from "./runtimeExtensions";
 export type { BedrockRuntimeExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export { Command as $Command } from "@smithy/core/client";
-export * from "./schemas/schemas_0";
 export * from "./pagination";
+export * from "./schemas/schemas_0";
 export * from "./models/enums";
 export * from "./models/errors";
 export * from "./models/models_0";