@desplega.ai/agent-swarm 1.158.0 → 1.160.0

package/src/prompts/base-prompt.ts

@@ -7,7 +7,7 @@
  *              memory, communication, secrets) from session-templates.ts
  *   E          outputs (gated on AGENT_FS_API_URL and the pages capability)
  *   H          deployment-gated notes: slack, steering
- *   I          tools and skills (deferred-tools line, skills, MCP server names)
+ *   I          tools and skills (harness tool discovery, skills, MCP server names)
  *   J          agent notes: CLAUDE.md for codex, opencode, pi, only when edited
  *   K          repository (per task)
  *
@@ -119,6 +119,7 @@ export const getBasePrompt = async (args: BasePromptArgs): Promise<string> => {
   const { role, agentId, traits } = args;
   const {
     hasMcp = true,
+    hasToolSearch = false,
     hasLocalEnvironment: hasLocalEnv = true,
     nativeSkillDiscovery = true,
   } = traits ?? {};
@@ -221,12 +222,17 @@ export const getBasePrompt = async (args: BasePromptArgs): Promise<string> => {
 
   // I. Tools and skills. Skipped without MCP: the discovery tools are MCP tools.
   if (hasMcp) {
+    const discoveryResult = await resolveTemplateAsync(
+      hasToolSearch ? "system.agent.tool_discovery.search" : "system.agent.tool_discovery.direct",
+      {},
+    );
     const toolsResult = await resolveTemplateAsync(
       "system.agent.tools_skills",
       renderToolsAndSkillsVars({
         skillsSummary: args.skillsSummary,
         mcpServers: args.mcpServers,
         nativeSkillDiscovery,
+        toolDiscovery: discoveryResult.text,
         hasLocalEnv,
       }),
     );
@@ -265,14 +271,15 @@ export const getBasePrompt = async (args: BasePromptArgs): Promise<string> => {
 /**
  * Dynamic lines for `system.agent.tools_skills`. The static text lives in the
  * template so operators can override or skip the section; only the lists that
- * depend on the installed skills and MCP servers are built here.
+ * depend on the installed skills, MCP servers, and harness are built here.
  */
 function renderToolsAndSkillsVars(input: {
   skillsSummary?: { name: string; description: string }[];
   mcpServers?: string[];
   nativeSkillDiscovery: boolean;
   hasLocalEnv: boolean;
-}): { skills: string; mcp_servers: string } {
+  toolDiscovery: string;
+}): { skills: string; mcp_servers: string; tool_discovery: string } {
   let section = "";
 
   const skills = input.skillsSummary ?? [];
@@ -307,7 +314,11 @@ function renderToolsAndSkillsVars(input: {
       ? `Connected MCP servers: ${servers.join(", ")}. Their tools are in your tool list.\n`
       : "";
 
-  return { skills: section, mcp_servers: mcpLine };
+  return {
+    skills: section,
+    mcp_servers: mcpLine,
+    tool_discovery: input.toolDiscovery,
+  };
 }
 
 /**

package/src/prompts/session-templates.ts

@@ -202,6 +202,7 @@ agent-fs is the shared drive between agents and people. Documents (reports, dige
 Pages: only for polished artifacts shared with a wider audience or explicitly requested; see \`pages\` skill.
 A tool a person will use, with data and actions: build an app. See the \`apps\` skill.
 Link env: \`APP_URL\` for pages, \`MCP_BASE_URL\` for the API, \`AGENT_FS_LIVE_URL\` for files. Report missing variables.
+For a file anyone outside the swarm opens, use an \`agent-fs share-create\` link; \`AGENT_FS_LIVE_URL\` links are for signed-in teammates.
 `,
   variables: [],
   category: "system",
@@ -344,15 +345,36 @@ registerTemplate({
   category: "system",
 });
 
+registerTemplate({
+  eventType: "system.agent.tool_discovery.search",
+  header: "",
+  defaultBody:
+    "Most swarm tools are deferred. Load one with your harness tool search before the first call.",
+  variables: [],
+  category: "system",
+});
+
+registerTemplate({
+  eventType: "system.agent.tool_discovery.direct",
+  header: "",
+  defaultBody: "Swarm tools are already in your tool list.",
+  variables: [],
+  category: "system",
+});
+
 registerTemplate({
   eventType: "system.agent.tools_skills",
   header: "",
   defaultBody: `
 ## Tools and skills
 
-Most swarm tools are deferred. Load one with your harness tool search before the first call.
+{{tool_discovery}}
 {{skills}}{{mcp_servers}}`,
   variables: [
+    {
+      name: "tool_discovery",
+      description: "Harness-specific guidance for discovering swarm tools.",
+    },
     {
       name: "skills",
       description:

package/src/providers/acp-adapter.ts

@@ -358,6 +358,7 @@ export class ACPAdapter implements ProviderAdapter {
 
   readonly traits: ProviderTraits = {
     hasMcp: true,
+    hasToolSearch: false,
     hasLocalEnvironment: true,
   };
 

package/src/providers/claude-adapter.ts

@@ -11,6 +11,7 @@ import { getContextWindowSize } from "../utils/context-window";
 import { validateClaudeCredentials } from "../utils/credentials";
 import {
   parseStderrForErrors,
+  redactRateLimitEventLine,
   SessionErrorTracker,
   trackErrorFromJson,
 } from "../utils/error-tracker";
@@ -830,19 +831,21 @@ class ClaudeSession implements ProviderSession {
       for await (const chunk of stdout) {
         stdoutChunks++;
         const text = new TextDecoder().decode(chunk);
-        // Scrub before every log-egress point: file write, listener emit, and
-        // downstream pretty-print / session-logs push (all consume event.content).
-        logFileHandle.write(scrubSecrets(text));
 
         const combined = partialLine + text;
         const parts = combined.split("\n");
         partialLine = parts.pop() || "";
 
         for (const line of parts) {
+          // Scrub and redact before every log-egress point: file write,
+          // listener emit, and downstream pretty-print / session-logs push
+          // (all consume event.content). The file is written per complete
+          // line so a rate_limit_event is redacted as a whole JSON object.
+          logFileHandle.write(`${scrubSecrets(redactRateLimitEventLine(line))}\n`);
           const trimmed = line.trim();
           if (!trimmed) continue;
 
-          this.emit({ type: "raw_log", content: scrubSecrets(trimmed) });
+          this.emit({ type: "raw_log", content: scrubSecrets(redactRateLimitEventLine(trimmed)) });
           this.processJsonLine(trimmed, (cost) => {
             lastCost = cost;
           });
@@ -850,8 +853,12 @@ class ClaudeSession implements ProviderSession {
       }
 
       // Handle remaining partial line
+      if (partialLine) logFileHandle.write(scrubSecrets(redactRateLimitEventLine(partialLine)));
       if (partialLine.trim()) {
-        this.emit({ type: "raw_log", content: scrubSecrets(partialLine.trim()) });
+        this.emit({
+          type: "raw_log",
+          content: scrubSecrets(redactRateLimitEventLine(partialLine.trim())),
+        });
         this.processJsonLine(partialLine.trim(), (cost) => {
           lastCost = cost;
         });
@@ -931,6 +938,7 @@ class ClaudeSession implements ProviderSession {
       rateLimitResetAt: this.errorTracker.getRateLimitResetAt(),
       rateLimitWindows: this.errorTracker.getRateLimitWindows(),
       modelRateLimit: this.errorTracker.getModelRateLimit(),
+      creditsRequired: this.errorTracker.getCreditsRequired(),
       appliedReasoningEffort: this.appliedReasoningEffort,
     };
   }
@@ -1001,6 +1009,7 @@ export class ClaudeAdapter implements ProviderAdapter {
   readonly name = "claude";
   readonly traits: ProviderTraits = {
     hasMcp: true,
+    hasToolSearch: true,
     // Claude Code reads ~/.claude/skills itself and advertises every skill's
     // name + description natively.
     nativeSkillDiscovery: true,

package/src/providers/claude-managed-adapter.ts

@@ -790,6 +790,7 @@ export class ClaudeManagedAdapter implements ProviderAdapter {
   // process is a thin SSE relay — no /workspace, no PM2, no agent-fs, no skills FS.
   readonly traits: ProviderTraits = {
     hasMcp: true,
+    hasToolSearch: false,
     hasLocalEnvironment: false,
     steerModes: ["steer", "queue"],
   };

package/src/providers/claude-managed-models.ts

@@ -1,48 +1,32 @@
 /**
- * Pricing table for Anthropic-managed Claude models, mirroring the layout of
- * `src/providers/codex-models.ts`. Rates are USD per million tokens (Mtok)
- * sourced from https://platform.claude.com/docs/en/about-claude/pricing
- * (verified 2026-09-02).
+ * Anthropic-managed Claude model facts, read from the model catalog
+ * (model-catalog phase 4). Rates are USD per million tokens (Mtok).
  *
- * The managed-agents API does NOT report dollar cost on the `span.model_request_end`
- * event — only token counts (`input_tokens`, `output_tokens`,
- * `cache_read_input_tokens`, `cache_creation_input_tokens`). Phase 4 of the
- * provider plan computes USD locally via {@link computeClaudeManagedCostUsd},
- * then folds in Anthropic's $0.08/session-hour runtime fee inside the adapter.
+ * There is no hand-maintained model list or price table any more: both come
+ * from the runtime catalog (`src/utils/runtime-model-catalog.ts` — the API's
+ * `model_catalog` + overlay rows, pulled over HTTP; the vendored models.dev
+ * snapshot offline). A new Claude model is listed and priced as soon as it
+ * lands in `model_catalog`, with no code change and no redeploy.
  *
- * Bump this file when Anthropic publishes new rates or new models.
+ * The managed-agents API does NOT report dollar cost on the
+ * `span.model_request_end` event — only token counts. The adapter computes
+ * USD locally via {@link computeClaudeManagedCostUsd}, then folds in
+ * Anthropic's $0.08/session-hour runtime fee. The API server recomputes the
+ * canonical price against the pricing table.
  *
  * Cache nomenclature mapping:
- * - `cache_read_input_tokens`        → "cache hit" rate     (cheapest)
- * - `cache_creation_input_tokens`    → "cache write" rate   (input × 1.25 for 5m TTL)
- * - regular `input_tokens` (uncached) → standard input rate
- *
- * Anthropic's pricing page lists 5-minute and 1-hour cache TTLs separately;
- * managed-agents currently uses the 5-minute breakpoint by default, which is
- * the rate captured here. If a future SDK release surfaces TTL on the usage
- * payload, refine these by TTL.
+ * - `cache_read_input_tokens`        → catalog `cache_read`
+ * - `cache_creation_input_tokens`    → catalog `cache_write` (5-minute TTL)
+ * - regular `input_tokens` (uncached) → catalog `input`
  */
+import { harnessModelIds } from "@desplega/model-catalog";
+import { runtimeCatalogModel, runtimeCatalogSection } from "../utils/runtime-model-catalog";
 
-/** Models supported by the managed-agents surface for the swarm worker. */
-export const CLAUDE_MANAGED_MODELS = [
-  "claude-fable-5-1",
-  "claude-mythos-5-1",
-  "claude-opus-5-5",
-  "claude-opus-5",
-  "claude-fable-5",
-  "claude-mythos-5",
-  "claude-sonnet-5-5",
-  "claude-sonnet-5",
-  "claude-sonnet-4-6",
-  "claude-opus-4-8",
-  "claude-opus-4-7",
-  "claude-opus-4-6",
-  "claude-haiku-4-5",
-] as const;
-
-export type ClaudeManagedModel = (typeof CLAUDE_MANAGED_MODELS)[number];
+/** Managed-agents-selectable Claude models from the catalog, newest first. */
+export function listClaudeManagedModels(): string[] {
+  return harnessModelIds("claude-managed", runtimeCatalogSection("anthropic"));
+}
 
-/** Token rates per million tokens (USD). */
 export interface ClaudeManagedTokenPricing {
   /** USD per million uncached input tokens. */
   inputPerMillion: number;
@@ -54,131 +38,39 @@ export interface ClaudeManagedTokenPricing {
   cacheWritePerMillion: number;
 }
 
-/** Pricing per million tokens (USD), including an optional scheduled rate change. */
-export interface ClaudeManagedModelPricing extends ClaudeManagedTokenPricing {
-  scheduledChange?: {
-    /** ISO timestamp at which the replacement rates take effect. */
-    effectiveAt: string;
-    pricing: ClaudeManagedTokenPricing;
-  };
-}
+export type ClaudeManagedModelPricing = ClaudeManagedTokenPricing;
 
 /**
- * Anthropic public list pricing. Source:
- * https://platform.claude.com/docs/en/about-claude/pricing
- *
- * - claude-fable-5-1:  $10 / $50 / $0.25 / $12.50  (verified 2026-09-02)
- * - claude-mythos-5-1: $10 / $50 / $0.25 / $12.50  (invite only, verified 2026-09-02)
- * - claude-fable-5:   $10 / $50 / $1.00 / $12.50   (verified 2026-06-10)
- * - claude-mythos-5:  $10 / $50 / $1.00 / $12.50   (limited availability, verified 2026-06-10)
- * - claude-opus-5-5:  $4 / $20 / $0.20 / $5.00     (verified 2026-09-22)
- * - claude-opus-5:    $5 / $25 / $0.50 / $6.25     (verified 2026-07-25)
- * - claude-sonnet-5-5: $2 / $10 / $0.20 / $2.50    (verified 2026-09-28)
- * - claude-sonnet-5:  $2 / $10 / $0.20 / $2.50     (standard rate, verified 2026-08-29)
- * - claude-sonnet-4-6: $3 / $15 / $0.30 / $3.75    (in / out / cache-read / cache-write)
- * - claude-opus-4-8:   $5 / $25 / $0.50 / $6.25    (verified 2026-05-28)
- * - claude-opus-4-7:   $15 / $75 / $1.50 / $18.75  (STALE — was correct at launch, Anthropic has since dropped Opus to $5/$25)
- * - claude-opus-4-6:   $5 / $25 / $0.50 / $6.25    (verified 2026-05-28)
- * - claude-haiku-4-5:  $1 / $5 / $0.10 / $1.25
+ * Catalog pricing for a managed model. Dated ids fall back to their undated
+ * family id. Missing cache rates follow Anthropic's published multipliers
+ * (read = 0.1 × input, 5-minute write = 1.25 × input).
  */
-export const CLAUDE_MANAGED_MODEL_PRICING: Record<ClaudeManagedModel, ClaudeManagedModelPricing> = {
-  "claude-fable-5-1": {
-    inputPerMillion: 10.0,
-    outputPerMillion: 50.0,
-    cacheReadPerMillion: 0.25,
-    cacheWritePerMillion: 12.5,
-  },
-  "claude-mythos-5-1": {
-    inputPerMillion: 10.0,
-    outputPerMillion: 50.0,
-    cacheReadPerMillion: 0.25,
-    cacheWritePerMillion: 12.5,
-  },
-  "claude-opus-5-5": {
-    inputPerMillion: 4.0,
-    outputPerMillion: 20.0,
-    cacheReadPerMillion: 0.2,
-    cacheWritePerMillion: 5.0,
-  },
-  "claude-opus-5": {
-    inputPerMillion: 5.0,
-    outputPerMillion: 25.0,
-    cacheReadPerMillion: 0.5,
-    cacheWritePerMillion: 6.25,
-  },
-  "claude-fable-5": {
-    inputPerMillion: 10.0,
-    outputPerMillion: 50.0,
-    cacheReadPerMillion: 1.0,
-    cacheWritePerMillion: 12.5,
-  },
-  "claude-mythos-5": {
-    inputPerMillion: 10.0,
-    outputPerMillion: 50.0,
-    cacheReadPerMillion: 1.0,
-    cacheWritePerMillion: 12.5,
-  },
-  "claude-sonnet-5-5": {
-    inputPerMillion: 2.0,
-    outputPerMillion: 10.0,
-    cacheReadPerMillion: 0.2,
-    cacheWritePerMillion: 2.5,
-  },
-  "claude-sonnet-5": {
-    inputPerMillion: 2.0,
-    outputPerMillion: 10.0,
-    cacheReadPerMillion: 0.2,
-    cacheWritePerMillion: 2.5,
-  },
-  "claude-sonnet-4-6": {
-    inputPerMillion: 3.0,
-    outputPerMillion: 15.0,
-    cacheReadPerMillion: 0.3,
-    cacheWritePerMillion: 3.75,
-  },
-  "claude-opus-4-8": {
-    inputPerMillion: 5.0,
-    outputPerMillion: 25.0,
-    cacheReadPerMillion: 0.5,
-    cacheWritePerMillion: 6.25,
-  },
-  "claude-opus-4-7": {
-    inputPerMillion: 15.0,
-    outputPerMillion: 75.0,
-    cacheReadPerMillion: 1.5,
-    cacheWritePerMillion: 18.75,
-  },
-  "claude-opus-4-6": {
-    inputPerMillion: 5.0,
-    outputPerMillion: 25.0,
-    cacheReadPerMillion: 0.5,
-    cacheWritePerMillion: 6.25,
-  },
-  "claude-haiku-4-5": {
-    inputPerMillion: 1.0,
-    outputPerMillion: 5.0,
-    cacheReadPerMillion: 0.1,
-    cacheWritePerMillion: 1.25,
-  },
-};
+export function getClaudeManagedModelPricing(model: string): ClaudeManagedModelPricing | undefined {
+  const cost =
+    runtimeCatalogModel("anthropic", model)?.cost ??
+    runtimeCatalogModel("anthropic", model.replace(/-\d{8}$/, ""))?.cost;
+  if (typeof cost?.input !== "number" || typeof cost.output !== "number") return undefined;
+  return {
+    inputPerMillion: cost.input,
+    outputPerMillion: cost.output,
+    cacheReadPerMillion: typeof cost.cache_read === "number" ? cost.cache_read : cost.input * 0.1,
+    cacheWritePerMillion:
+      typeof cost.cache_write === "number" ? cost.cache_write : cost.input * 1.25,
+  };
+}
 
-/**
- * Models we've already warned about — keeps `console.warn` from spamming the
- * worker logs when an old session keeps replaying through `span.model_request_end`
- * events with an unrecognized model string.
- */
+/** One warning per model per process for unpriced models. */
 const warnedUnknownModels = new Set<string>();
 
 /**
  * Compute USD cost for one Claude managed-agents session, given the SDK's
  * accumulated token counts.
  *
- * Returns `0` (with a deduplicated `console.warn`) for unknown model strings —
- * we'd rather under-report than make up a number on a typo.
+ * Returns `0` (with a deduplicated `console.warn`) for models the catalog does
+ * not price — we'd rather under-report than make up a number on a typo.
  *
- * Note: the runtime $0.08/session-hour fee is NOT folded in here. The adapter
- * computes that separately because it depends on the session's wallclock
- * `durationMs`, which is provider-state, not token-state.
+ * Note: the runtime $0.08/session-hour fee is NOT folded in here; the adapter
+ * computes it from the session's wallclock.
  */
 export function computeClaudeManagedCostUsd(
   model: string,
@@ -186,24 +78,18 @@ export function computeClaudeManagedCostUsd(
   outputTokens: number,
   cacheReadTokens: number,
   cacheWriteTokens: number,
-  pricedAtMs: number = Date.now(),
 ): number {
-  const configuredPricing = CLAUDE_MANAGED_MODEL_PRICING[model as ClaudeManagedModel];
-  if (!configuredPricing) {
+  const pricing = getClaudeManagedModelPricing(model);
+  if (!pricing) {
     if (!warnedUnknownModels.has(model)) {
       warnedUnknownModels.add(model);
       console.warn(
-        `[claude-managed-models] Unknown model "${model}" — returning $0 cost. ` +
-          `Add it to CLAUDE_MANAGED_MODEL_PRICING in src/providers/claude-managed-models.ts.`,
+        `[claude-managed-models] Unpriced model "${model}" — returning $0 cost. ` +
+          "Add it to the model catalog (refresh or overlay row).",
       );
     }
     return 0;
   }
-  const pricing =
-    configuredPricing.scheduledChange &&
-    pricedAtMs >= Date.parse(configuredPricing.scheduledChange.effectiveAt)
-      ? configuredPricing.scheduledChange.pricing
-      : configuredPricing;
   const inputCost = (inputTokens / 1_000_000) * pricing.inputPerMillion;
   const outputCost = (outputTokens / 1_000_000) * pricing.outputPerMillion;
   const cacheReadCost = (cacheReadTokens / 1_000_000) * pricing.cacheReadPerMillion;

package/src/providers/claude-sdk-session.ts

@@ -13,6 +13,7 @@ import type { RunStopHookSessionSummaryOpts } from "../hooks/hook";
 import { getContextWindowSize } from "../utils/context-window";
 import {
   parseStderrForErrors,
+  redactRateLimitEvent,
   SessionErrorTracker,
   trackErrorFromJson,
 } from "../utils/error-tracker";
@@ -495,7 +496,7 @@ class ClaudeSdkSession implements ProviderSession {
       });
 
       for await (const message of this.query) {
-        const scrubbed = scrubSecrets(JSON.stringify(message));
+        const scrubbed = scrubSecrets(JSON.stringify(redactRateLimitEvent(message)));
         log.write(`${scrubbed}\n`);
         this.emit({ type: "raw_log", content: scrubbed });
         const isResult = this.handleMessage(message);
@@ -581,6 +582,7 @@ class ClaudeSdkSession implements ProviderSession {
       rateLimitResetAt: this.errorTracker.getRateLimitResetAt(),
       rateLimitWindows: this.errorTracker.getRateLimitWindows(),
       modelRateLimit: this.errorTracker.getModelRateLimit(),
+      creditsRequired: this.errorTracker.getCreditsRequired(),
       appliedReasoningEffort: sessionEnvironment.appliedReasoningEffort,
     };
   }

package/src/providers/codex-adapter.ts

@@ -392,16 +392,15 @@ export async function resolveCodexAuthMode(
  * Build the `failureReason` for a pool-slot OAuth revalidation failure
  * (see `resolveCodexAuthMode` above).
  *
- * Wording matters: when the failure is a rejected refresh whose body
- * indicates the credential is dead (invalid_grant, reused, revoked), the
- * upstream error body is embedded verbatim so the EXISTING
- * `codex-auth-expiry-watch` script's `DEAD_TOKEN_LIKE` patterns (which match
- * on substrings like "refresh token was already used" / "log out and sign in
- * again") still catch it with zero script changes. A lock-wait timeout is
- * transient/retryable — its wording is deliberately distinct so the watch
- * does NOT bench a slot over a temporary contention blip.
+ * Wording matters: every variant carries `[auth-error]`, but the runner's
+ * `isCodexAuthFailureReason` counts only a confirmed refresh rejection toward
+ * the auth-failure bench (2 in a row). A lock-wait timeout ("waiting for the
+ * refresh lock") and any other thrown error (refresh-lock HTTP or network
+ * failure, config-store persistence failure: "not a confirmed auth
+ * rejection") are excluded as transient, so an outage does NOT bench a
+ * healthy login.
  */
-function buildPoolRevalidationFailureReason(err: unknown, slot: number): string {
+export function buildPoolRevalidationFailureReason(err: unknown, slot: number): string {
   if (err instanceof CodexOAuthRefreshError) {
     if (err.reason === "lock_timeout") {
       return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: timed out waiting for the refresh lock — transient, will retry on next task.`;
@@ -409,7 +408,7 @@ function buildPoolRevalidationFailureReason(err: unknown, slot: number): string
     return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: refresh rejected (${err.status ?? "unknown status"} ${err.body ?? ""}) — credential likely revoked; re-run codex-login for this slot.`;
   }
   const message = err instanceof Error ? err.message : String(err);
-  return `[auth-error] Codex pool slot ${slot} revalidation failed: ${message}`;
+  return `[auth-error] Codex pool slot ${slot} revalidation failed (not a confirmed auth rejection, transient): ${message}`;
 }
 
 /**
@@ -558,16 +557,16 @@ export async function buildCodexConfig(
   // at `~/.codex/config.toml` (Phase 6). Repeating them here makes local dev
   // (no baseline file) behave identically to the Docker worker.
   //
-  // `features.hooks` / `features.plugin_hooks` enable Codex's hook system and
-  // the hooks contributed by installed Codex plugins (context-mode's plugin:
-  // routing injection, PreToolUse safety blocks, output capture).
+  // Keep ChatGPT apps/connectors disabled because their `codex_apps` tools use
+  // the worker's host OAuth identity. Hooks remain enabled for Codex steering
+  // and the installed context-mode plugin.
   return {
     model,
     approval_policy: "never",
     sandbox_mode: "danger-full-access",
     skip_git_repo_check: true,
     show_raw_agent_reasoning: false,
-    features: { hooks: true, plugin_hooks: true },
+    features: { apps: false, hooks: true, plugin_hooks: true },
     mcp_servers: mcpServers as CodexConfig,
     ...reasoningConfig,
   };
@@ -2373,6 +2372,7 @@ export class CodexAdapter implements ProviderAdapter {
   readonly name = "codex";
   readonly traits: ProviderTraits = {
     hasMcp: true,
+    hasToolSearch: false,
     // No native skill system: `resolveSlashSkillPrompt` only inlines a SKILL.md
     // when a turn prompt opens with `/name`, so the system prompt must
     // enumerate the installed skills for the agent to know they exist.