@eddyskywalker/dsh-chatgpt-subscription 0.51.1 → 0.53.0

package/lib/index.js

@@ -4,7 +4,7 @@ import { DEFAULT_SKIP_PROVIDERS, PRUNER_SERVICE_NAME, resolveSkipProviders, shou
 import { PLAN_PROJECTION_KEY, createPlanNotice } from "./plan-mode.js";
 import { createRequire } from "node:module";
 import * as LlmModule from "@deepseek-ai/dsh-llm";
-import { EMPTY_RESPONSE_CODE, HarnessError, LlmAdapter, LlmError, LlmError as LlmError$1, ProviderRequestId, ReasoningEffortId, ToolCallId, attributionHeaders, errorChain, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
+import { EMPTY_RESPONSE_CODE, HarnessError, LlmAdapter, LlmError, LlmError as LlmError$1, ProviderRequestId, ReasoningEffortId, ToolCallId, attributionHeaders, createUserMessage, errorChain, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { z } from "zod";
 import z$1 from "@deepseek-ai/schemastery";
@@ -146,7 +146,7 @@ const ROUTE_PREFIX$5 = "/api/dsh-chatgpt-subscription";
 * `test/responses-client.test.ts` asserts the two agree, so a release that
 * forgets this constant fails the suite instead of shipping quietly.
 */
-const PLUGIN_VERSION = "0.51.1";
+const PLUGIN_VERSION = "0.53.0";
 const CODEX_CHATGPT_PROVIDER_ID = "codex-chatgpt";
 const CODEX_API_BASE = "https://chatgpt.com/backend-api/codex";
 const CODEX_RESPONSES_URL = `${CODEX_API_BASE}/responses`;
@@ -2272,13 +2272,22 @@ var AccountPoolCore = class {
 			return result;
 		});
 	}
+	/**
+	* Public summaries of a document the caller already read.
+	*
+	* A caller that needs both the rows and which one would serve the next
+	* request must not read the pool twice: the two reads can straddle a write,
+	* and the answer would then name one account while listing another
+	* generation's state. Reading is not free either — an encrypted round trip,
+	* a DPAPI unprotect on Windows.
+	*/
+	summariesOf(data) {
+		const now = Date.now();
+		return data.accounts.map((account) => this.summarize(account, now));
+	}
 	/** Public summaries, with cooldowns that already expired reported as absent. */
 	async listAccounts() {
-		const data = await this.read();
-		const now = Date.now();
-		return data.accounts.map((account) => {
-			return this.summarize(account, now);
-		});
+		return this.summariesOf(await this.read());
 	}
 	summarize(account, now) {
 		const expires = this.hooks.expiresAt?.(account.credentials);
@@ -2334,7 +2343,7 @@ var AccountPoolCore = class {
 		};
 		if (existingIndex >= 0) data.accounts[existingIndex] = account;
 		else data.accounts.push(account);
-		if (!data.activeAccountId || account.isPrimary) data.activeAccountId = account.id;
+		if (!data.activeAccountId) data.activeAccountId = account.id;
 		return account;
 	}
 	setPrimary(accountId) {
@@ -3453,7 +3462,7 @@ var OAuthService = class {
 			throw new OAuthServiceError("oauth-token-exchange-failed", `The ChatGPT device code could not be issued (${response.status}${detail === null ? "" : `, ${detail}`}).`, response.status);
 		}
 		const payload = await response.json().catch(() => null);
-		const record = isRecord$66(payload) ? payload : {};
+		const record = isRecord$68(payload) ? payload : {};
 		const authId = nonEmptyString$11(record.device_auth_id);
 		const userCode = nonEmptyString$11(record.user_code) ?? nonEmptyString$11(record.usercode);
 		if (authId === void 0 || userCode === void 0) throw new OAuthServiceError("oauth-token-exchange-failed", "ChatGPT returned no device code.");
@@ -3520,7 +3529,7 @@ var OAuthService = class {
 			const detail = deviceErrorIdentifier(payload);
 			throw new OAuthServiceError("oauth-token-exchange-failed", `The ChatGPT device confirmation was refused (${response.status}${detail === void 0 ? "" : `, ${detail}`}).`, response.status);
 		}
-		const record = isRecord$66(payload) ? payload : {};
+		const record = isRecord$68(payload) ? payload : {};
 		const authorizationCode = nonEmptyString$11(record.authorization_code);
 		const codeVerifier = nonEmptyString$11(record.code_verifier);
 		if (authorizationCode === void 0 || codeVerifier === void 0) throw new OAuthServiceError("oauth-token-exchange-failed", "ChatGPT confirmed the device code but returned no authorization code.");
@@ -3867,11 +3876,11 @@ const DEVICE_PENDING_STATUSES = /* @__PURE__ */ new Set([
 function isPendingDeviceAnswer(response, payload) {
 	if (response.status === 403 || response.status === 404) return true;
 	if (!response.ok && response.status !== 400) return false;
-	if (!isRecord$66(payload)) return false;
+	if (!isRecord$68(payload)) return false;
 	const status = payload.status;
 	if (typeof status === "string" && DEVICE_PENDING_STATUSES.has(status.toLowerCase())) return true;
 	const error = payload.error;
-	if (isRecord$66(error)) {
+	if (isRecord$68(error)) {
 		const code = error.code;
 		if (typeof code === "string" && DEVICE_PENDING_STATUSES.has(code.toLowerCase())) return true;
 	}
@@ -3885,18 +3894,18 @@ function isPendingDeviceAnswer(response, payload) {
 * wrong.
 */
 function deviceErrorIdentifier(payload) {
-	if (!isRecord$66(payload)) return void 0;
+	if (!isRecord$68(payload)) return void 0;
 	const candidates = [payload.code];
 	const error = payload.error;
 	if (typeof error === "string") candidates.push(error);
-	else if (isRecord$66(error)) candidates.push(error.code, error.type);
+	else if (isRecord$68(error)) candidates.push(error.code, error.type);
 	candidates.push(payload.status);
 	for (const candidate of candidates) if (typeof candidate === "string" && /^[a-z0-9_.-]{1,64}$/i.test(candidate)) return candidate;
 }
 function nonEmptyString$11(value) {
 	return typeof value === "string" && value !== "" ? value : void 0;
 }
-function isRecord$66(value) {
+function isRecord$68(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function oauthErrorIdentifier(response) {
@@ -4079,7 +4088,7 @@ const CODEX_AUTH_CLAIMS_KEY = "https://api.openai.com/auth";
 * here, and the import has to be repeated afterwards.
 */
 const ADOPTED_CODEX_CREDENTIAL_EXPIRED_HINT = "The sign-in imported from the Codex CLI has expired. Sign in again in the Codex CLI, then import it again from this settings card.";
-function isRecord$65(value) {
+function isRecord$67(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** A trimmed, non-empty string, or nothing. */
@@ -4181,7 +4190,7 @@ function decodeJwtClaims$1(token) {
 	if (parts.length !== 3) return void 0;
 	try {
 		const value = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
-		return isRecord$65(value) ? value : void 0;
+		return isRecord$67(value) ? value : void 0;
 	} catch {
 		return;
 	}
@@ -4226,10 +4235,10 @@ function expiryFromAccessToken(accessToken) {
 * the file carries cannot reach the result.
 */
 function parseAdoptedCodexCredential(value, sourcePath) {
-	if (!isRecord$65(value)) return void 0;
+	if (!isRecord$67(value)) return void 0;
 	if (value.auth_mode !== "chatgpt") return void 0;
 	const tokens = value[CODEX_CLI_TOKENS_KEY];
-	if (!isRecord$65(tokens)) return void 0;
+	if (!isRecord$67(tokens)) return void 0;
 	const accessToken = nonEmptyString$10(tokens.access_token);
 	if (accessToken === void 0) return void 0;
 	const refreshToken = nonEmptyString$10(tokens.refresh_token);
@@ -4248,7 +4257,7 @@ function parseAdoptedCodexCredential(value, sourcePath) {
 		const email = claims === void 0 ? void 0 : nonEmptyString$10(claims.email);
 		if (email !== void 0) credentials.email = email;
 		const authClaims = claims === void 0 ? void 0 : claims[CODEX_AUTH_CLAIMS_KEY];
-		const planType = isRecord$65(authClaims) ? nonEmptyString$10(authClaims.chatgpt_plan_type) : void 0;
+		const planType = isRecord$67(authClaims) ? nonEmptyString$10(authClaims.chatgpt_plan_type) : void 0;
 		if (planType !== void 0) credentials.planType = planType;
 	}
 	const accountId = nonEmptyString$10(tokens.account_id);
@@ -5017,13 +5026,13 @@ function webServerOrigin(server) {
 //#region src/host/common/llm-compat.ts
 /** This package's kind in the harness message-source map. */
 const PLUGIN_MESSAGE_SOURCE_KIND = "dsh-chatgpt-subscription";
-function isRecord$64(value) {
+function isRecord$66(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** Read a message body's blocks, keeping every entry that carries a block tag. */
 function readBlocks(raw) {
 	if (!Array.isArray(raw)) return [];
-	return raw.filter((block) => isRecord$64(block) && typeof block.type === "string");
+	return raw.filter((block) => isRecord$66(block) && typeof block.type === "string");
 }
 /**
 * The first value that is a non-empty string.
@@ -5078,10 +5087,10 @@ function toolCallIdOf(raw, source, embedded) {
 function normalizeMessages(messages) {
 	const normalized = [];
 	for (const raw of messages ?? []) {
-		if (!isRecord$64(raw)) continue;
+		if (!isRecord$66(raw)) continue;
 		const content = readBlocks(raw.content);
 		if (raw.role === "tool") {
-			const source = isRecord$64(raw.source) ? raw.source : void 0;
+			const source = isRecord$66(raw.source) ? raw.source : void 0;
 			const embedded = embeddedToolResult(content);
 			const callId = toolCallIdOf(raw, source, embedded);
 			const isError = raw.isError === true || embedded?.isError === true;
@@ -5105,7 +5114,7 @@ function normalizeMessages(messages) {
 			id: raw.id,
 			role: typeof raw.role === "string" ? raw.role : "user",
 			content,
-			...isRecord$64(raw.source) ? { source: raw.source } : {}
+			...isRecord$66(raw.source) ? { source: raw.source } : {}
 		});
 	}
 	return normalized;
@@ -6809,7 +6818,7 @@ const schemaFields = /* @__PURE__ */ new Set([
 	"required",
 	"propertyOrdering"
 ]);
-function isRecord$63(value) {
+function isRecord$65(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function mergeSchemas(left, right) {
@@ -6817,7 +6826,7 @@ function mergeSchemas(left, right) {
 		...left,
 		...right
 	};
-	if (isRecord$63(left.properties) && isRecord$63(right.properties)) merged.properties = {
+	if (isRecord$65(left.properties) && isRecord$65(right.properties)) merged.properties = {
 		...left.properties,
 		...right.properties
 	};
@@ -6853,9 +6862,9 @@ const mergedTypeKeys = /* @__PURE__ */ new Set([
 * model with strictly less than the schema it started from.
 */
 function describeBranch(branch) {
-	const type = typeof branch.type === "string" ? branch.type : isRecord$63(branch.properties) ? "object" : isRecord$63(branch.items) ? "array" : "value";
+	const type = typeof branch.type === "string" ? branch.type : isRecord$65(branch.properties) ? "object" : isRecord$65(branch.items) ? "array" : "value";
 	const details = [];
-	if (isRecord$63(branch.properties)) {
+	if (isRecord$65(branch.properties)) {
 		const names = Object.keys(branch.properties);
 		if (names.length > 0) details.push(`{${names.join(",")}}`);
 	}
@@ -6869,7 +6878,7 @@ function describeBranch(branch) {
 }
 /** How well one branch can stand in for a whole union; a named object shape wins. */
 function branchRank(branch) {
-	if (isRecord$63(branch.properties)) return 3;
+	if (isRecord$65(branch.properties)) return 3;
 	if (branch.type === "object") return 2;
 	if (branch.type === "array") return 1;
 	return 0;
@@ -6898,7 +6907,7 @@ function unionShape(branches) {
 		shape: branches[0],
 		folded: false
 	};
-	if (new Set(branches.map((branch) => branch.type)).size === 1 && branches.every((branch) => !isRecord$63(branch.properties) && !isRecord$63(branch.items))) {
+	if (new Set(branches.map((branch) => branch.type)).size === 1 && branches.every((branch) => !isRecord$65(branch.properties) && !isRecord$65(branch.items))) {
 		const shape = { type: branches[0].type };
 		if (branches.every((branch) => Array.isArray(branch.enum))) {
 			const values = [...new Set(branches.flatMap((branch) => branch.enum))];
@@ -6935,7 +6944,7 @@ function foldOwnFields(node) {
 	const out = {};
 	for (const [key, value] of Object.entries(node)) {
 		if (key === "anyOf" || key === "oneOf" || key === "allOf") continue;
-		if (key === "properties" && isRecord$63(value)) {
+		if (key === "properties" && isRecord$65(value)) {
 			out.properties = Object.fromEntries(Object.entries(value).map(([name, child]) => [name, foldSchemaUnions(child)]));
 			continue;
 		}
@@ -6964,15 +6973,15 @@ function foldOwnFields(node) {
 * argument the model sends anyway fails there, naming the actual problem.
 */
 function foldSchemaUnions(node) {
-	if (!isRecord$63(node)) return node;
+	if (!isRecord$65(node)) return node;
 	let own = foldOwnFields(node);
 	if (Array.isArray(node.allOf)) for (const branch of node.allOf) {
 		const folded = foldSchemaUnions(branch);
-		if (isRecord$63(folded)) own = mergeSchemas(own, folded);
+		if (isRecord$65(folded)) own = mergeSchemas(own, folded);
 	}
 	const alternatives = Array.isArray(node.anyOf) ? node.anyOf : Array.isArray(node.oneOf) ? node.oneOf : [];
 	if (alternatives.length === 0) return own;
-	const branches = alternatives.map((branch) => foldSchemaUnions(branch)).filter(isRecord$63);
+	const branches = alternatives.map((branch) => foldSchemaUnions(branch)).filter(isRecord$65);
 	if (branches.length === 0) return own;
 	const shapes = branches.filter((branch) => branch.type !== "null");
 	const acceptsNull = branches.some((branch) => branch.type === "null");
@@ -6988,7 +6997,7 @@ function foldSchemaUnions(node) {
 	return merged;
 }
 function toAntigravityToolSchema(schema, options = {}) {
-	if (!isRecord$63(schema)) return schema;
+	if (!isRecord$65(schema)) return schema;
 	const root = schema;
 	function resolveReference(reference) {
 		let target = root;
@@ -6996,13 +7005,13 @@ function toAntigravityToolSchema(schema, options = {}) {
 		const path = reference === "#" ? [] : reference.slice(2).split("/");
 		for (const segment of path) {
 			const key = segment.replace(/~1/g, "/").replace(/~0/g, "~");
-			target = isRecord$63(target) && Object.hasOwn(target, key) ? target[key] : void 0;
+			target = isRecord$65(target) && Object.hasOwn(target, key) ? target[key] : void 0;
 		}
-		if (!isRecord$63(target)) throw new LlmError(`Antigravity tool schema reference was not found: ${reference}`, "PROVIDER_ERROR");
+		if (!isRecord$65(target)) throw new LlmError(`Antigravity tool schema reference was not found: ${reference}`, "PROVIDER_ERROR");
 		return target;
 	}
 	function convert(node, references) {
-		if (!isRecord$63(node)) return {};
+		if (!isRecord$65(node)) return {};
 		let inherited = {};
 		if (typeof node.$ref === "string") {
 			if (references.has(node.$ref)) throw new LlmError(`Antigravity tool schema contains a recursive reference: ${node.$ref}`, "PROVIDER_ERROR");
@@ -7011,8 +7020,8 @@ function toAntigravityToolSchema(schema, options = {}) {
 		if (Array.isArray(node.allOf)) for (const branch of node.allOf) inherited = mergeSchemas(inherited, convert(branch, references));
 		const out = {};
 		for (const [key, value] of Object.entries(node)) if (schemaFields.has(key)) out[key] = value;
-		if (isRecord$63(node.properties)) out.properties = Object.fromEntries(Object.entries(node.properties).map(([name, child]) => [name, convert(child, references)]));
-		if (isRecord$63(node.items)) out.items = convert(node.items, references);
+		if (isRecord$65(node.properties)) out.properties = Object.fromEntries(Object.entries(node.properties).map(([name, child]) => [name, convert(child, references)]));
+		if (isRecord$65(node.items)) out.items = convert(node.items, references);
 		const alternatives = Array.isArray(node.anyOf) ? node.anyOf : node.oneOf;
 		if (Array.isArray(alternatives)) out.anyOf = alternatives.map((child) => convert(child, references));
 		if (Array.isArray(node.type)) {
@@ -7048,7 +7057,7 @@ let toolCallCounter = 0;
 function sanitizeText$9(text) {
 	return text.replace(/\0/g, "");
 }
-function isRecord$62(value) {
+function isRecord$64(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$29(value) {
@@ -7068,25 +7077,25 @@ function toolCallIdNeeded(modelId, runtimeModel) {
 	return modelId.startsWith("claude-") || modelId.startsWith("gpt-oss-") || runtimeModel.startsWith("claude-") || runtimeModel.startsWith("gpt-oss-");
 }
 function parseArguments$1(raw) {
-	if (isRecord$62(raw)) return raw;
+	if (isRecord$64(raw)) return raw;
 	if (raw === void 0 || raw === null || raw === "") return {};
 	const parsed = typeof raw === "string" ? safeJsonParse$9(raw) : raw;
-	return isRecord$62(parsed) ? parsed : {};
+	return isRecord$64(parsed) ? parsed : {};
 }
 const NO_RESOLVED_IMAGES$5 = /* @__PURE__ */ new Map();
 function attachmentOf$5(block) {
 	const attachment = block.attachment;
-	if (!isRecord$62(attachment)) return void 0;
+	if (!isRecord$64(attachment)) return void 0;
 	return typeof attachment.attachmentId === "string" ? attachment : void 0;
 }
 function attachmentLabel$6(block) {
-	const attachment = isRecord$62(block.attachment) ? block.attachment : void 0;
+	const attachment = isRecord$64(block.attachment) ? block.attachment : void 0;
 	return asString$29(attachment?.name) || asString$29(attachment?.attachmentId);
 }
 function collectImageRefs$3(content, refs) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$62(block)) continue;
+		if (!isRecord$64(block)) continue;
 		if (block.type === "image") {
 			const attachment = attachmentOf$5(block);
 			if (attachment) refs.set(attachment.attachmentId, attachment);
@@ -7199,7 +7208,7 @@ function requestImageBytes$2(block) {
 function collectRequestImageBytes$2(content, lengths) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$62(block)) continue;
+		if (!isRecord$64(block)) continue;
 		if (block.type === "tool-result") {
 			collectRequestImageBytes$2(block.content, lengths);
 			continue;
@@ -7249,7 +7258,7 @@ function offloadOldestRequestImages$3(options) {
 		let replaced = false;
 		return {
 			content: content.map((block) => {
-				if (remaining.count === 0 || !isRecord$62(block)) return block;
+				if (remaining.count === 0 || !isRecord$64(block)) return block;
 				if (block.type === "image") {
 					if (requestImageBytes$2(block) === void 0) return block;
 					remaining.count -= 1;
@@ -7352,7 +7361,7 @@ function unavailableImageText$6(block) {
 }
 function imageBlockToPart(block, images) {
 	let data = asString$29(block.data) || asString$29(block.base64);
-	const source = isRecord$62(block.source) ? block.source : void 0;
+	const source = isRecord$64(block.source) ? block.source : void 0;
 	if (!data && source) data = asString$29(source.data) || asString$29(source.base64);
 	let mimeType = asString$29(block.mimeType) || asString$29(block.mediaType) || (source ? asString$29(source.mimeType) || asString$29(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
@@ -7377,8 +7386,8 @@ function contentToUserParts(content, images) {
 	if (typeof content === "string") return [{ text: sanitizeText$9(content) }];
 	if (!Array.isArray(content)) return [];
 	const parts = [];
-	for (const block of content) if (isRecord$62(block) && block.type === "text" && typeof block.text === "string") parts.push({ text: sanitizeText$9(block.text) });
-	else if (isRecord$62(block) && block.type === "image") {
+	for (const block of content) if (isRecord$64(block) && block.type === "text" && typeof block.text === "string") parts.push({ text: sanitizeText$9(block.text) });
+	else if (isRecord$64(block) && block.type === "image") {
 		const img = imageBlockToPart(block, images);
 		parts.push(img ?? { text: unavailableImageText$6(block) });
 	}
@@ -7393,7 +7402,7 @@ function toolResultImageParts(blocks, images) {
 	if (!Array.isArray(blocks)) return [];
 	const parts = [];
 	for (const block of blocks) {
-		if (!isRecord$62(block)) continue;
+		if (!isRecord$64(block)) continue;
 		if (block.type === "image") {
 			parts.push(imageBlockToPart(block, images) ?? { text: unavailableImageText$6(block) });
 			continue;
@@ -7405,7 +7414,7 @@ function toolResultImageParts(blocks, images) {
 function toolResultText$9(blocks) {
 	if (!Array.isArray(blocks)) return "";
 	return blocks.map((block) => {
-		if (!isRecord$62(block)) return "";
+		if (!isRecord$64(block)) return "";
 		if (block.type === "text" && typeof block.text === "string") return sanitizeText$9(block.text);
 		if (block.type === "tool-result") return toolResultText$9(block.content);
 		if (block.type === "image") {
@@ -7419,9 +7428,9 @@ function replayBlockFor$1(message, index) {
 	const source = message.source;
 	if (!source || source.kind !== "model" || source.provider !== "antigravity") return void 0;
 	const state = source.replayState;
-	if (!isRecord$62(state)) return void 0;
+	if (!isRecord$64(state)) return void 0;
 	if (Array.isArray(state.blocks)) return state.blocks[index];
-	const resp = isRecord$62(state.response) ? state.response : void 0;
+	const resp = isRecord$64(state.response) ? state.response : void 0;
 	if (resp) {
 		if (Array.isArray(resp.outputItems)) return resp.outputItems[index];
 		if (Array.isArray(resp.blocks)) return resp.blocks[index];
@@ -7523,10 +7532,10 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 	if (!Array.isArray(message.content)) return parts;
 	for (let index = 0; index < message.content.length; index++) {
 		const block = message.content[index];
-		if (!isRecord$62(block)) continue;
+		if (!isRecord$64(block)) continue;
 		if (block.type === "reasoning" && runtimeModel.startsWith("claude-") && (message.source?.kind !== "model" || message.source.provider !== "antigravity" || !("model" in message.source) || message.source.model !== model.id)) continue;
 		const replay = replayBlockFor$1(message, index);
-		const originalParts = Array.isArray(replay?.parts) ? replay.parts.filter(isRecord$62) : [];
+		const originalParts = Array.isArray(replay?.parts) ? replay.parts.filter(isRecord$64) : [];
 		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString$29(part.text) || "").join("") === sanitizeText$9(String(block.text || ""))) {
 			parts.push(...originalParts.map(replayPart));
 			continue;
@@ -7547,8 +7556,8 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 		} else if (block.type === "tool-call") {
 			const toolId = String(block.id || "");
 			const toolName = String(block.name || "");
-			const originalCall = originalParts.find((part) => isRecord$62(part.functionCall));
-			const wireId = asString$29((isRecord$62(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
+			const originalCall = originalParts.find((part) => isRecord$64(part.functionCall));
+			const wireId = asString$29((isRecord$64(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
 			toolCalls.set(toolId, {
 				name: toolName,
 				id: wireId
@@ -7600,7 +7609,7 @@ function convertMessages(options, model, runtimeModel, images = NO_RESOLVED_IMAG
 			continue;
 		}
 		const content = Array.isArray(message.content) ? message.content : [];
-		const userParts = contentToUserParts(content.filter((b) => !isRecord$62(b) || b.type !== "tool-result"), images);
+		const userParts = contentToUserParts(content.filter((b) => !isRecord$64(b) || b.type !== "tool-result"), images);
 		if (role === "system") {
 			if (userParts.length) contents.push({
 				role: GEMINI_ROLE.user,
@@ -7612,7 +7621,7 @@ function convertMessages(options, model, runtimeModel, images = NO_RESOLVED_IMAG
 			role: GEMINI_ROLE.user,
 			parts: userParts
 		});
-		for (const b of content) if (isRecord$62(b) && b.type === "tool-result") pushToolResult(contents, b, toolCalls, model, runtimeModel, images);
+		for (const b of content) if (isRecord$64(b) && b.type === "tool-result") pushToolResult(contents, b, toolCalls, model, runtimeModel, images);
 	}
 	return contents;
 }
@@ -7760,7 +7769,7 @@ const USAGE_FIELDS = [
 	"totalTokenCount"
 ];
 function collectUsage(value, state) {
-	if (!isRecord$62(value)) return;
+	if (!isRecord$64(value)) return;
 	for (const key of USAGE_FIELDS) {
 		const count = value[key];
 		if (typeof count !== "number" || !Number.isSafeInteger(count) || count < 0) continue;
@@ -7790,17 +7799,17 @@ function processStreamLine$4(line, state) {
 	}
 	if (!json) return [];
 	const chunk = safeJsonParse$9(json);
-	if (!isRecord$62(chunk)) return [];
-	const responseData = isRecord$62(chunk.response) ? chunk.response : chunk;
-	const error = isRecord$62(chunk.error) ? chunk.error : isRecord$62(responseData.error) ? responseData.error : void 0;
+	if (!isRecord$64(chunk)) return [];
+	const responseData = isRecord$64(chunk.response) ? chunk.response : chunk;
+	const error = isRecord$64(chunk.error) ? chunk.error : isRecord$64(responseData.error) ? responseData.error : void 0;
 	if (error !== void 0) throw new LlmError$1(`Antigravity stream error: ${asString$29(error.message) ?? "unknown error"}`, isContextOverflow(error) ? CONTEXT_OVERFLOW_CODE : "PROVIDER_ERROR");
 	const candidates = Array.isArray(responseData.candidates) ? responseData.candidates : [];
-	const candidate = isRecord$62(candidates[0]) ? candidates[0] : void 0;
-	const content = isRecord$62(candidate?.content) ? candidate.content : void 0;
+	const candidate = isRecord$64(candidates[0]) ? candidates[0] : void 0;
+	const content = isRecord$64(candidate?.content) ? candidate.content : void 0;
 	const parts = Array.isArray(content?.parts) ? content.parts : [];
 	const out = [];
 	for (const part of parts) {
-		if (!isRecord$62(part)) continue;
+		if (!isRecord$64(part)) continue;
 		if (typeof part.text === "string" && part.text !== "") {
 			const isThinking = Boolean(part.thought);
 			const blockType = isThinking ? "reasoning" : "text";
@@ -7832,7 +7841,7 @@ function processStreamLine$4(line, state) {
 				index: state.currentBlock.index,
 				text: delta
 			});
-		} else if (!isRecord$62(part.functionCall) && thoughtSignature(part)) {
+		} else if (!isRecord$64(part.functionCall) && thoughtSignature(part)) {
 			if (state.replayBlocks.length === 0) {
 				const type = part.thought ? "reasoning" : "text";
 				state.blocks.push({
@@ -7856,12 +7865,12 @@ function processStreamLine$4(line, state) {
 			}
 			state.replayBlocks[state.replayBlocks.length - 1].parts.push(replayPart(part));
 		}
-		if (isRecord$62(part.functionCall)) {
+		if (isRecord$64(part.functionCall)) {
 			out.push(...closeCurrentBlock(state));
 			const fc = part.functionCall;
 			const toolName = asString$29(fc.name) || "";
 			const toolId = asString$29(fc.id) || sanitizeToolCallId("", toolName);
-			const argsText = JSON.stringify(isRecord$62(fc.args) ? fc.args : {});
+			const argsText = JSON.stringify(isRecord$64(fc.args) ? fc.args : {});
 			const index = state.blocks.length;
 			const block = {
 				type: "tool-call",
@@ -7900,7 +7909,7 @@ function processStreamLine$4(line, state) {
 	if (responseData !== chunk) collectUsage(responseData.usageMetadata, state);
 	const finishMessage = asString$29(candidate?.finishMessage);
 	if (finishMessage) state.finishMessage = finishMessage;
-	const blockReason = asString$29((isRecord$62(responseData.promptFeedback) ? responseData.promptFeedback : void 0)?.blockReason);
+	const blockReason = asString$29((isRecord$64(responseData.promptFeedback) ? responseData.promptFeedback : void 0)?.blockReason);
 	const finishReason = asString$29(candidate?.finishReason) || asString$29(responseData.finishReason) || (blockReason ? `PROMPT_BLOCKED:${blockReason}` : void 0);
 	if (finishReason) {
 		state.finishReason = finishReason;
@@ -14084,7 +14093,7 @@ async function compactionCandidates(ctx) {
 		};
 	}))).filter((provider) => provider.models.length > 0) };
 }
-function isRecord$61(value) {
+function isRecord$63(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readPreferencesUpdate(value, current) {
@@ -14134,7 +14143,7 @@ function readPreferencesUpdate(value, current) {
 		patch.subagentModelsByMainModel = value.subagentModelsByMainModel;
 	}
 	if ("contextWindowOverrides" in value) {
-		if (!isRecord$61(value.contextWindowOverrides)) throw new PreferenceError("contextWindowOverrides must be an object.");
+		if (!isRecord$63(value.contextWindowOverrides)) throw new PreferenceError("contextWindowOverrides must be an object.");
 		const overrides = {};
 		for (const [model, contextWindow] of Object.entries(value.contextWindowOverrides)) {
 			if (!isCodexModelId(model)) throw new PreferenceError("Unknown Codex model for a context window override.");
@@ -18634,11 +18643,11 @@ function commandCodeHeaders(apiKey, extra = {}) {
 function timeoutSignal$5(signal, ms) {
 	return signal ? AbortSignal.any([signal, AbortSignal.timeout(ms)]) : AbortSignal.timeout(ms);
 }
-function isRecord$60(value) {
+function isRecord$62(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asRecord$16(value) {
-	return isRecord$60(value) ? value : void 0;
+	return isRecord$62(value) ? value : void 0;
 }
 function asString$28(value) {
 	if (typeof value === "string" && value.trim() !== "") return value;
@@ -18682,7 +18691,7 @@ function deepValue(value, keys, depth = 0) {
 		}
 		return;
 	}
-	if (!isRecord$60(value)) return void 0;
+	if (!isRecord$62(value)) return void 0;
 	for (const key of keys) if (value[key] !== void 0 && value[key] !== null) return value[key];
 	for (const nested of Object.values(value)) {
 		const hit = deepValue(nested, keys, depth + 1);
@@ -18696,7 +18705,7 @@ function collectRecords(value, keys, depth = 0, out = []) {
 		for (const entry of value) collectRecords(entry, keys, depth + 1, out);
 		return out;
 	}
-	if (!isRecord$60(value)) return out;
+	if (!isRecord$62(value)) return out;
 	if (keys.some((key) => value[key] !== void 0)) out.push(value);
 	for (const nested of Object.values(value)) collectRecords(nested, keys, depth + 1, out);
 	return out;
@@ -19506,7 +19515,7 @@ function buildModelOptions$2(catalog, enabledModelIds, overrides) {
 *
 * https://commandcode.ai/blog/command-code-provider-api
 */
-function isRecord$59(value) {
+function isRecord$61(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$27(value) {
@@ -19546,17 +19555,17 @@ const SUPPORTED_IMAGE_MEDIA_TYPES$4 = /* @__PURE__ */ new Set([
 ]);
 function attachmentOf$4(block) {
 	const attachment = block.attachment;
-	if (!isRecord$59(attachment)) return void 0;
+	if (!isRecord$61(attachment)) return void 0;
 	return typeof attachment.attachmentId === "string" ? attachment : void 0;
 }
 function attachmentLabel$5(block) {
-	const attachment = isRecord$59(block.attachment) ? block.attachment : void 0;
+	const attachment = isRecord$61(block.attachment) ? block.attachment : void 0;
 	return asString$27(attachment?.name) || asString$27(attachment?.attachmentId);
 }
 function collectImageRefs$2(content, refs) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "image") {
 			const attachment = attachmentOf$4(block);
 			if (attachment) refs.set(attachment.attachmentId, attachment);
@@ -19577,7 +19586,7 @@ function requestImageBytes$1(block) {
 function collectRequestImageBytes$1(content, lengths) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "tool-result") {
 			collectRequestImageBytes$1(block.content, lengths);
 			continue;
@@ -19613,7 +19622,7 @@ function offloadOldestRequestImages$2(options) {
 		let replaced = false;
 		return {
 			content: content.map((block) => {
-				if (remaining.count === 0 || !isRecord$59(block)) return block;
+				if (remaining.count === 0 || !isRecord$61(block)) return block;
 				if (block.type === "image") {
 					if (requestImageBytes$1(block) === void 0) return block;
 					remaining.count -= 1;
@@ -19685,7 +19694,7 @@ function unavailableImageText$5(block) {
 }
 function imageBlockToInline$3(block, images) {
 	let data = asString$27(block.data) || asString$27(block.base64);
-	const source = isRecord$59(block.source) ? block.source : void 0;
+	const source = isRecord$61(block.source) ? block.source : void 0;
 	if (!data && source) data = asString$27(source.data) || asString$27(source.base64);
 	let mediaType = asString$27(block.mimeType) || asString$27(block.mediaType) || (source ? asString$27(source.mimeType) || asString$27(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
@@ -19711,7 +19720,7 @@ function textOf$9(content) {
 	if (!Array.isArray(content)) return "";
 	const parts = [];
 	for (const block of content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") parts.push(sanitizeText$8(block.text));
 		else if (block.type === "tool-result") parts.push(textOf$9(block.content));
 	}
@@ -19720,7 +19729,7 @@ function textOf$9(content) {
 function toolResultText$8(blocks) {
 	if (!Array.isArray(blocks)) return "";
 	return blocks.map((block) => {
-		if (!isRecord$59(block)) return "";
+		if (!isRecord$61(block)) return "";
 		if (block.type === "text" && typeof block.text === "string") return sanitizeText$8(block.text);
 		if (block.type === "tool-result") return toolResultText$8(block.content);
 		if (block.type === "image") return `[image: ${attachmentLabel$5(block) ?? "attached image"}]`;
@@ -19738,7 +19747,7 @@ function toolResultBlocks$2(blocks, images) {
 	const out = [];
 	let hasImage = false;
 	for (const block of blocks) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			out.push({
 				type: "text",
@@ -19787,7 +19796,7 @@ function toolResultImageBlocks$5(blocks, images) {
 	if (!Array.isArray(blocks)) return [];
 	const out = [];
 	for (const block of blocks) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "image") {
 			const inline = imageBlockToInline$3(block, images);
 			if (inline && SUPPORTED_IMAGE_MEDIA_TYPES$4.has(inline.mediaType)) out.push({
@@ -19831,7 +19840,7 @@ function nonSystemMessages$8(options) {
 }
 /** Drop the JSON-Schema keywords provider gateways reject or ignore. */
 function stripMetaSchema$2(schema) {
-	if (!isRecord$59(schema)) return {
+	if (!isRecord$61(schema)) return {
 		type: "object",
 		properties: {}
 	};
@@ -19848,7 +19857,7 @@ function openAIUserContent$4(message, images) {
 	const parts = [];
 	let hasImage = false;
 	for (const block of message.content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$8(block.text);
 			if (text !== "") parts.push({
@@ -19876,7 +19885,7 @@ function openAIAssistantContent$4(message) {
 	const textParts = [];
 	const toolCalls = [];
 	for (const block of message.content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") textParts.push(sanitizeText$8(block.text));
 		else if (block.type === "tool-call" && typeof block.name === "string") toolCalls.push({
 			id: typeof block.id === "string" && block.id !== "" ? block.id : `call_${toolCalls.length}`,
@@ -19908,7 +19917,7 @@ function buildOpenAIRequest$1(options, images = NO_RESOLVED_IMAGES$4) {
 			while (index < conversation.length && isToolResultMessage$8(conversation[index])) {
 				const current = conversation[index];
 				const block = current.content[0];
-				const callId = isRecord$59(block) && typeof block.toolCallId === "string" ? block.toolCallId : "";
+				const callId = isRecord$61(block) && typeof block.toolCallId === "string" ? block.toolCallId : "";
 				messages.push({
 					role: "tool",
 					tool_call_id: callId,
@@ -19969,7 +19978,7 @@ function anthropicUserContent$3(message, images) {
 	if (!Array.isArray(message.content)) return [];
 	const blocks = [];
 	for (const block of message.content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$8(block.text);
 			if (text !== "") blocks.push({
@@ -20006,7 +20015,7 @@ function anthropicUserContent$3(message, images) {
 function anthropicAssistantContent$3(message) {
 	const blocks = [];
 	for (const block of message.content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$8(block.text);
 			if (text !== "") blocks.push({
@@ -20019,7 +20028,7 @@ function anthropicAssistantContent$3(message) {
 				type: "tool_use",
 				id: typeof block.id === "string" && block.id !== "" ? block.id : `toolu_${blocks.length}`,
 				name: block.name,
-				input: isRecord$59(parsed) ? parsed : {}
+				input: isRecord$61(parsed) ? parsed : {}
 			});
 		}
 	}
@@ -20050,7 +20059,7 @@ function mergeAnthropicMessages$3(entries) {
 	return merged;
 }
 /** Reasoning budget a thinking-enabled request may spend, given its output cap. */
-function thinkingBudgetFor$1(effort, maxTokens) {
+function thinkingBudgetFor(effort, maxTokens) {
 	if (effort === void 0 || effort === "") return void 0;
 	const requested = anthropicThinkingBudget(effort);
 	if (requested === void 0 || requested === null) return void 0;
@@ -20075,7 +20084,7 @@ function buildAnthropicRequest$1(options, images = NO_RESOLVED_IMAGES$4) {
 	}
 	const system = leadingSystemText$8(options);
 	const maxTokens = options.maxTokens ?? maxOutputTokensFor$6(options.model);
-	const budget = thinkingBudgetFor$1(wireReasoningEffort(options.reasoningEffort === void 0 ? void 0 : String(options.reasoningEffort)), maxTokens);
+	const budget = thinkingBudgetFor(wireReasoningEffort(options.reasoningEffort === void 0 ? void 0 : String(options.reasoningEffort)), maxTokens);
 	return {
 		model: options.model,
 		max_tokens: maxTokens,
@@ -20113,7 +20122,7 @@ function responsesUserContent(message, images) {
 	if (!Array.isArray(message.content)) return [];
 	const parts = [];
 	for (const block of message.content) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$8(block.text);
 			if (text !== "") parts.push({
@@ -20138,7 +20147,7 @@ function responsesToolResultImageBlocks(blocks, images) {
 	if (!Array.isArray(blocks)) return [];
 	const out = [];
 	for (const block of blocks) {
-		if (!isRecord$59(block)) continue;
+		if (!isRecord$61(block)) continue;
 		if (block.type === "image") {
 			const inline = imageBlockToInline$3(block, images);
 			if (inline && SUPPORTED_IMAGE_MEDIA_TYPES$4.has(inline.mediaType)) out.push({
@@ -20165,8 +20174,8 @@ function buildResponsesRequest(options, images = NO_RESOLVED_IMAGES$4) {
 			const imageBlocks = [];
 			while (index < conversation.length && isToolResultMessage$8(conversation[index])) {
 				const current = conversation[index];
-				const toolResult = Array.isArray(current.content) ? current.content.find((b) => isRecord$59(b) && b.type === "tool-result") : void 0;
-				const callId = (isRecord$59(toolResult) && typeof toolResult.toolCallId === "string" ? toolResult.toolCallId : "") || (typeof current.source?.callId === "string" ? current.source.callId : "");
+				const toolResult = Array.isArray(current.content) ? current.content.find((b) => isRecord$61(b) && b.type === "tool-result") : void 0;
+				const callId = (isRecord$61(toolResult) && typeof toolResult.toolCallId === "string" ? toolResult.toolCallId : "") || (typeof current.source?.callId === "string" ? current.source.callId : "");
 				input.push({
 					type: "function_call_output",
 					call_id: callId,
@@ -20189,7 +20198,7 @@ function buildResponsesRequest(options, images = NO_RESOLVED_IMAGES$4) {
 				content
 			});
 			for (const call of toolCalls) {
-				const fn = isRecord$59(call.function) ? call.function : void 0;
+				const fn = isRecord$61(call.function) ? call.function : void 0;
 				input.push({
 					type: "function_call",
 					call_id: call.id,
@@ -20312,9 +20321,9 @@ function processOpenAIStreamLine$1(line, state) {
 	}
 	if (payload === "") return [];
 	const chunk = safeJsonParse$8(payload);
-	if (!isRecord$59(chunk)) return [];
+	if (!isRecord$61(chunk)) return [];
 	const out = [];
-	if (isRecord$59(chunk.error)) {
+	if (isRecord$61(chunk.error)) {
 		const message = asString$27(chunk.error.message) ?? "unknown error";
 		state.streamError = {
 			vocabulary: "openai",
@@ -20323,20 +20332,20 @@ function processOpenAIStreamLine$1(line, state) {
 		};
 		throw new LlmError$1(`Command Code stream error: ${message}`, isContextOverflow(chunk.error) ? CONTEXT_OVERFLOW_CODE : "PROVIDER_ERROR");
 	}
-	const usage = isRecord$59(chunk.usage) ? chunk.usage : void 0;
+	const usage = isRecord$61(chunk.usage) ? chunk.usage : void 0;
 	if (usage) {
 		state.sawUsage = true;
 		const prompt = numberOr$9(usage.prompt_tokens, 0);
-		const details = isRecord$59(usage.prompt_tokens_details) ? usage.prompt_tokens_details : void 0;
+		const details = isRecord$61(usage.prompt_tokens_details) ? usage.prompt_tokens_details : void 0;
 		const cached = details ? numberOr$9(details.cached_tokens, 0) : 0;
 		state.inputTokens = Math.max(0, prompt - cached);
 		state.cacheReadTokens = cached;
 		state.outputTokens = numberOr$9(usage.completion_tokens, state.outputTokens);
-		if (isRecord$59(usage.completion_tokens_details)) state.reasoningTokens = numberOr$9(usage.completion_tokens_details.reasoning_tokens, state.reasoningTokens);
+		if (isRecord$61(usage.completion_tokens_details)) state.reasoningTokens = numberOr$9(usage.completion_tokens_details.reasoning_tokens, state.reasoningTokens);
 	}
 	const choices = Array.isArray(chunk.choices) ? chunk.choices : [];
-	const choice = isRecord$59(choices[0]) ? choices[0] : void 0;
-	const delta = isRecord$59(choice?.delta) ? choice.delta : void 0;
+	const choice = isRecord$61(choices[0]) ? choices[0] : void 0;
+	const delta = isRecord$61(choice?.delta) ? choice.delta : void 0;
 	if (delta) {
 		const reasoning = asString$27(delta.reasoning_content) ?? asString$27(delta.reasoning);
 		if (reasoning !== void 0 && reasoning !== "") {
@@ -20364,7 +20373,7 @@ function processOpenAIStreamLine$1(line, state) {
 		}
 		const toolDeltas = Array.isArray(delta.tool_calls) ? delta.tool_calls : [];
 		for (const entry of toolDeltas) {
-			if (!isRecord$59(entry)) continue;
+			if (!isRecord$61(entry)) continue;
 			out.push(...applyOpenAIToolDelta$1(entry, state));
 		}
 	}
@@ -20378,7 +20387,7 @@ function processOpenAIStreamLine$1(line, state) {
 }
 function applyOpenAIToolDelta$1(entry, state) {
 	const wireIndex = typeof entry.index === "number" ? entry.index : 0;
-	const fn = isRecord$59(entry.function) ? entry.function : {};
+	const fn = isRecord$61(entry.function) ? entry.function : {};
 	const out = [];
 	let call = state.toolCalls.get(wireIndex);
 	if (call === void 0) {
@@ -20436,12 +20445,12 @@ function processAnthropicStreamLine$1(line, state) {
 	const payload = trimmed.slice(5).trim();
 	if (payload === "" || payload === "[DONE]") return [];
 	const event = safeJsonParse$8(payload);
-	if (!isRecord$59(event)) return [];
+	if (!isRecord$61(event)) return [];
 	const type = asString$27(event.type);
 	const out = [];
 	if (type === "message_start") {
-		const message = isRecord$59(event.message) ? event.message : void 0;
-		const usage = message && isRecord$59(message.usage) ? message.usage : void 0;
+		const message = isRecord$61(event.message) ? event.message : void 0;
+		const usage = message && isRecord$61(message.usage) ? message.usage : void 0;
 		if (usage) {
 			state.sawUsage = true;
 			state.inputTokens = numberOr$9(usage.input_tokens, 0);
@@ -20455,7 +20464,7 @@ function processAnthropicStreamLine$1(line, state) {
 	}
 	if (type === "content_block_start") {
 		const contentIndex = numberOr$9(event.index, 0);
-		const block = isRecord$59(event.content_block) ? event.content_block : {};
+		const block = isRecord$61(event.content_block) ? event.content_block : {};
 		const blockType = asString$27(block.type);
 		out.push(...closeCurrent$6(state));
 		if (blockType === "tool_use") {
@@ -20505,7 +20514,7 @@ function processAnthropicStreamLine$1(line, state) {
 	}
 	if (type === "content_block_delta") {
 		const contentIndex = numberOr$9(event.index, 0);
-		const delta = isRecord$59(event.delta) ? event.delta : {};
+		const delta = isRecord$61(event.delta) ? event.delta : {};
 		const deltaType = asString$27(delta.type);
 		if (deltaType === "input_json_delta") {
 			const pending = state.toolCalls.get(contentIndex);
@@ -20578,10 +20587,10 @@ function processAnthropicStreamLine$1(line, state) {
 		return out;
 	}
 	if (type === "message_delta") {
-		const delta = isRecord$59(event.delta) ? event.delta : void 0;
+		const delta = isRecord$61(event.delta) ? event.delta : void 0;
 		const stop = delta ? asString$27(delta.stop_reason) : void 0;
 		if (stop !== void 0 && stop !== "") state.finishReason = stop;
-		const usage = isRecord$59(event.usage) ? event.usage : void 0;
+		const usage = isRecord$61(event.usage) ? event.usage : void 0;
 		if (usage) {
 			state.sawUsage = true;
 			state.outputTokens = numberOr$9(usage.output_tokens, state.outputTokens);
@@ -20593,7 +20602,7 @@ function processAnthropicStreamLine$1(line, state) {
 		return closeStream$6(state);
 	}
 	if (type === "error") {
-		const error = isRecord$59(event.error) ? event.error : {};
+		const error = isRecord$61(event.error) ? event.error : {};
 		const message = asString$27(error.message) ?? "unknown error";
 		state.streamError = {
 			vocabulary: "anthropic",
@@ -20639,7 +20648,7 @@ function processResponsesStreamLine(line, state) {
 	} catch {
 		return [];
 	}
-	if (!isRecord$59(parsed)) return [];
+	if (!isRecord$61(parsed)) return [];
 	const type = typeof parsed.type === "string" ? parsed.type : "";
 	if (type === "response.output_text.delta") {
 		const delta = typeof parsed.delta === "string" ? parsed.delta : "";
@@ -20666,7 +20675,7 @@ function processResponsesStreamLine(line, state) {
 		}];
 	}
 	if (type === "response.output_item.added") {
-		const item = isRecord$59(parsed.item) ? parsed.item : null;
+		const item = isRecord$61(parsed.item) ? parsed.item : null;
 		if (item === null || item.type !== "function_call") return [];
 		return startResponsesToolCall(state, parsed, item);
 	}
@@ -20690,11 +20699,11 @@ function processResponsesStreamLine(line, state) {
 		return [];
 	}
 	if (type === "response.completed" || type === "response.incomplete") {
-		const response = isRecord$59(parsed.response) ? parsed.response : null;
+		const response = isRecord$61(parsed.response) ? parsed.response : null;
 		if (response !== null) {
 			if (response.status === "failed") {
 				state.done = true;
-				const errorObj = isRecord$59(response.error) ? response.error : null;
+				const errorObj = isRecord$61(response.error) ? response.error : null;
 				const detail = errorObj && typeof errorObj.message === "string" ? errorObj.message : typeof response.error === "string" ? response.error : "";
 				state.streamError = {
 					vocabulary: "responses",
@@ -20707,7 +20716,7 @@ function processResponsesStreamLine(line, state) {
 		}
 		state.done = true;
 		if (type === "response.incomplete") {
-			const details = response && isRecord$59(response.incomplete_details) ? response.incomplete_details : null;
+			const details = response && isRecord$61(response.incomplete_details) ? response.incomplete_details : null;
 			const reason = details && typeof details.reason === "string" ? details.reason : "";
 			state.finishReason = reason === "max_output_tokens" || reason === "length" || reason === "max_tokens" ? "length" : reason || "length";
 		} else state.finishReason = "stop";
@@ -20715,8 +20724,8 @@ function processResponsesStreamLine(line, state) {
 	}
 	if (type === "response.failed" || type === "error") {
 		state.done = true;
-		const errorObj = isRecord$59(parsed.error) ? parsed.error : isRecord$59(parsed.response) && isRecord$59(parsed.response.error) ? parsed.response.error : null;
-		const detail = (typeof parsed.message === "string" ? parsed.message : "") || (errorObj && typeof errorObj.message === "string" ? errorObj.message : "") || (isRecord$59(parsed.response) && typeof parsed.response.error === "string" ? parsed.response.error : typeof parsed.error === "string" ? parsed.error : "");
+		const errorObj = isRecord$61(parsed.error) ? parsed.error : isRecord$61(parsed.response) && isRecord$61(parsed.response.error) ? parsed.response.error : null;
+		const detail = (typeof parsed.message === "string" ? parsed.message : "") || (errorObj && typeof errorObj.message === "string" ? errorObj.message : "") || (isRecord$61(parsed.response) && typeof parsed.response.error === "string" ? parsed.response.error : typeof parsed.error === "string" ? parsed.error : "");
 		state.streamError = {
 			vocabulary: "responses",
 			error: errorObj,
@@ -20804,15 +20813,15 @@ function responsesToolCall(state, key) {
 	for (const call of state.toolCalls.values()) if (call.id === toToolCallId(key)) return call;
 }
 function readResponsesUsage(response, state) {
-	const usage = isRecord$59(response.usage) ? response.usage : null;
+	const usage = isRecord$61(response.usage) ? response.usage : null;
 	if (usage === null) return;
-	const cached = isRecord$59(usage.input_tokens_details) ? numberOrZero(usage.input_tokens_details.cached_tokens) : 0;
-	const written = isRecord$59(usage.input_tokens_details) ? numberOrZero(usage.input_tokens_details.cache_write_tokens) : 0;
+	const cached = isRecord$61(usage.input_tokens_details) ? numberOrZero(usage.input_tokens_details.cached_tokens) : 0;
+	const written = isRecord$61(usage.input_tokens_details) ? numberOrZero(usage.input_tokens_details.cache_write_tokens) : 0;
 	state.inputTokens = Math.max(0, numberOrZero(usage.input_tokens) - cached - written);
 	state.cacheReadTokens = cached;
 	state.cacheWriteTokens = written;
 	state.outputTokens = numberOrZero(usage.output_tokens);
-	const outputDetails = isRecord$59(usage.output_tokens_details) ? usage.output_tokens_details : null;
+	const outputDetails = isRecord$61(usage.output_tokens_details) ? usage.output_tokens_details : null;
 	if (outputDetails !== null) state.reasoningTokens = numberOrZero(outputDetails.reasoning_tokens);
 	state.sawUsage = true;
 }
@@ -20900,7 +20909,7 @@ const ANTHROPIC_IN_BAND_STATUS = {
 * Anything not recognized keeps the mapper's verdict.
 */
 function inBandResponsesCode(error, message) {
-	const fields = isRecord$58(error) ? error : {};
+	const fields = isRecord$60(error) ? error : {};
 	const rawCode = (asString$26(fields.code) ?? asString$26(fields.type) ?? "").toLowerCase();
 	const text = message.toLowerCase();
 	if (text.includes("rate limit") || rawCode === "rate_limit" || rawCode === "rate_limit_exceeded") return "RATE_LIMIT";
@@ -20959,13 +20968,13 @@ function reclassifyInBandResponsesError(thrown, rawError, message, classify) {
 }
 /** The wire `error` object of an in-band event, read defensively. */
 function readErrorType(error) {
-	if (!isRecord$58(error)) return null;
+	if (!isRecord$60(error)) return null;
 	return typeof error.type === "string" ? error.type : null;
 }
 function asString$26(value) {
 	return typeof value === "string" ? value : void 0;
 }
-function isRecord$58(value) {
+function isRecord$60(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -24190,14 +24199,14 @@ const IN_BAND_SERVER = [
 function isAbort$3(error, signal) {
 	return signal?.aborted === true || error instanceof Error && error.name === "AbortError";
 }
-function isRecord$57(value) {
+function isRecord$59(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$25(value) {
 	return typeof value === "string" && value !== "" ? value : void 0;
 }
 function attachmentLabel$4(block) {
-	const attachment = isRecord$57(block.attachment) ? block.attachment : void 0;
+	const attachment = isRecord$59(block.attachment) ? block.attachment : void 0;
 	return asString$25(attachment?.name) || asString$25(attachment?.attachmentId);
 }
 function unavailableImageText$4(block) {
@@ -24233,7 +24242,7 @@ async function processMessageContent(content, model, attachments, signal) {
 			textParts.push(part);
 			continue;
 		}
-		if (!isRecord$57(part)) continue;
+		if (!isRecord$59(part)) continue;
 		if (part.type === "text") {
 			if (typeof part.text === "string" && part.text !== "") textParts.push(part.text);
 			continue;
@@ -24262,7 +24271,7 @@ async function processMessageContent(content, model, attachments, signal) {
 				continue;
 			}
 			const inline = part.source;
-			if (isRecord$57(inline)) {
+			if (isRecord$59(inline)) {
 				const data = inline.data;
 				if (typeof data === "string" && data !== "") {
 					images.push(encodeImage(data, asMediaType(inline.mediaType)));
@@ -24303,7 +24312,7 @@ async function toOllamaRequest(options, attachments, signal, declared) {
 			const toolResultBlocks = message.content.filter((b) => b.type === "tool-result");
 			if (toolResultBlocks.length > 0) {
 				for (const block of toolResultBlocks) {
-					const toolCallId = String(block.toolCallId ?? (isRecord$57(message.source) ? message.source.callId : "") ?? "");
+					const toolCallId = String(block.toolCallId ?? (isRecord$59(message.source) ? message.source.callId : "") ?? "");
 					const processed = await processMessageContent(block.content, options.model, attachments, signal);
 					messages.push({
 						role: "tool",
@@ -26394,7 +26403,7 @@ function planRetrievalOutline(text, toolName) {
 * @returns 读到的元数据；两者都没有时 undefined。
 */
 function shellMetadataOf(holder) {
-	const job = isPlainRecord(holder.job) ? holder.job : void 0;
+	const job = isPlainRecord$2(holder.job) ? holder.job : void 0;
 	let exitCode;
 	if (typeof holder.exitCode === "number" && Number.isFinite(holder.exitCode)) exitCode = holder.exitCode;
 	if (exitCode === void 0 && typeof job?.exitCode === "number" && Number.isFinite(job.exitCode)) exitCode = job.exitCode;
@@ -26499,7 +26508,7 @@ const JSON_ENVELOPE_LOG_KEYS = [
 /** JSON envelope 其余字段允许占用的最大序列化字符数（防止把含批量源码的混合 envelope 压掉）。 */
 const JSON_ENVELOPE_MAX_OTHER_CHARS = 800;
 /** 判断一个值是不是普通 JSON 对象（不是数组，也不是 null）。 */
-function isPlainRecord(value) {
+function isPlainRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** 重建信封：只把预览写回被替换的键，其余字段原样保留。 */
@@ -26601,7 +26610,7 @@ function extractJsonEnvelopeLogField(text, toolName) {
 		});
 	}
 	for (const [outerKey, outerValue] of Object.entries(record)) {
-		if (!isPlainRecord(outerValue)) continue;
+		if (!isPlainRecord$2(outerValue)) continue;
 		for (const key of JSON_ENVELOPE_LOG_KEYS) {
 			const value = outerValue[key];
 			if (typeof value === "string" && value.length > 0) candidates.push({
@@ -26691,7 +26700,7 @@ function canonicalGrepMatches(value) {
 	if (!Array.isArray(value) || value.length === 0) return void 0;
 	const matches = [];
 	for (const entry of value) {
-		if (!isPlainRecord(entry)) return void 0;
+		if (!isPlainRecord$2(entry)) return void 0;
 		if (typeof entry.path !== "string") return void 0;
 		if (!Number.isSafeInteger(entry.lineNumber)) return void 0;
 		if (typeof entry.line !== "string") return void 0;
@@ -26705,12 +26714,12 @@ function canonicalGrepMatches(value) {
 }
 /** 规范读取结果。 */
 function canonicalReadResult(value) {
-	if (!isPlainRecord(value)) return void 0;
+	if (!isPlainRecord$2(value)) return void 0;
 	if (typeof value.path !== "string" || value.path.trim() === "") return void 0;
 	if (!Array.isArray(value.lines) || value.lines.length === 0) return void 0;
 	const lines = [];
 	for (const entry of value.lines) {
-		if (!isPlainRecord(entry)) return void 0;
+		if (!isPlainRecord$2(entry)) return void 0;
 		if (!Number.isSafeInteger(entry.number)) return void 0;
 		if (typeof entry.text !== "string") return void 0;
 		lines.push({
@@ -26735,7 +26744,7 @@ function findGrepBinding(record) {
 		matches: top
 	};
 	for (const [outerKey, outerValue] of Object.entries(record)) {
-		if (!isPlainRecord(outerValue)) continue;
+		if (!isPlainRecord$2(outerValue)) continue;
 		const nested = canonicalGrepMatches(outerValue.matches);
 		if (nested !== void 0) return {
 			binding: {
@@ -26762,7 +26771,7 @@ function findGlobBinding(record) {
 		...typeof record.root === "string" ? { root: record.root } : {}
 	};
 	for (const [outerKey, outerValue] of Object.entries(record)) {
-		if (!isPlainRecord(outerValue)) continue;
+		if (!isPlainRecord$2(outerValue)) continue;
 		const nested = canonicalGlobPaths(outerValue.paths);
 		if (nested !== void 0) return {
 			binding: {
@@ -26940,13 +26949,13 @@ function collectCompositeEntries(record) {
 	for (const [key, value] of Object.entries(record)) {
 		if (Array.isArray(value)) {
 			value.forEach((item, index) => {
-				if (isPlainRecord(item)) push(`${key}[${index}]`, item);
+				if (isPlainRecord$2(item)) push(`${key}[${index}]`, item);
 			});
 			continue;
 		}
-		if (!isPlainRecord(value)) continue;
+		if (!isPlainRecord$2(value)) continue;
 		if (push(key, value)) continue;
-		for (const [subKey, subValue] of Object.entries(value)) if (isPlainRecord(subValue)) push(`${key}.${subKey}`, subValue);
+		for (const [subKey, subValue] of Object.entries(value)) if (isPlainRecord$2(subValue)) push(`${key}.${subKey}`, subValue);
 	}
 	return entries;
 }
@@ -27382,7 +27391,7 @@ async function projectToolResult(input) {
 *
 * @module dsh-chatgpt-subscription/request-images
 */
-function isRecord$56(value) {
+function isRecord$58(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$24(value) {
@@ -27441,17 +27450,17 @@ const SUPPORTED_IMAGE_MEDIA_TYPES$3 = /* @__PURE__ */ new Set([
 ]);
 function attachmentOf$3(block) {
 	const attachment = block.attachment;
-	if (!isRecord$56(attachment)) return void 0;
+	if (!isRecord$58(attachment)) return void 0;
 	return typeof attachment.attachmentId === "string" ? attachment : void 0;
 }
 function attachmentLabel$3(block) {
-	const attachment = isRecord$56(block.attachment) ? block.attachment : void 0;
+	const attachment = isRecord$58(block.attachment) ? block.attachment : void 0;
 	return asString$24(attachment?.name) || asString$24(attachment?.attachmentId);
 }
 function collectImageRefs$1(content, refs) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$56(block)) continue;
+		if (!isRecord$58(block)) continue;
 		if (block.type === "image") {
 			const attachment = attachmentOf$3(block);
 			if (attachment) refs.set(attachment.attachmentId, attachment);
@@ -27481,7 +27490,7 @@ function base64Length$1(bytes) {
 */
 function inlinePayloadOf(block) {
 	let data = asString$24(block.data) || asString$24(block.base64);
-	const source = isRecord$56(block.source) ? block.source : void 0;
+	const source = isRecord$58(block.source) ? block.source : void 0;
 	if (!data && source) data = asString$24(source.data) || asString$24(source.base64);
 	if (data?.startsWith("data:")) {
 		const matched = data.match(/^data:([^;,]+);base64,(.*)$/s);
@@ -27511,7 +27520,7 @@ function requestImagePayloadLength(block, images) {
 function collectRequestImagePayloads(content, images, lengths) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$56(block)) continue;
+		if (!isRecord$58(block)) continue;
 		if (block.type === "image") {
 			const bytes = requestImagePayloadLength(block, images);
 			if (bytes !== void 0) lengths.push(bytes);
@@ -27565,7 +27574,7 @@ function replaceOldestRequestImages(options, count, images) {
 		let replaced = false;
 		return {
 			content: content.map((block) => {
-				if (remaining.count === 0 || !isRecord$56(block)) return block;
+				if (remaining.count === 0 || !isRecord$58(block)) return block;
 				if (block.type === "image") {
 					if (requestImagePayloadLength(block, images) === void 0) return block;
 					remaining.count -= 1;
@@ -27707,7 +27716,7 @@ function collectImageOccurrences(options, images) {
 	const walk = (content) => {
 		if (!Array.isArray(content)) return;
 		for (const block of content) {
-			if (!isRecord$56(block)) continue;
+			if (!isRecord$58(block)) continue;
 			if (block.type === "image") {
 				const bytes = requestImagePayloadLength(block, images);
 				const key = requestImageKey(block, images);
@@ -27761,7 +27770,7 @@ function replaceDroppedRequestImages(options, droppedKeys, images) {
 		let replaced = false;
 		return {
 			content: content.map((block) => {
-				if (!isRecord$56(block)) return block;
+				if (!isRecord$58(block)) return block;
 				if (block.type === "image") {
 					const key = requestImageKey(block, images);
 					if (key === void 0 || !droppedKeys.has(key)) return block;
@@ -27946,7 +27955,7 @@ function unavailableImageText$3(block) {
 }
 function imageBlockToInline$2(block, images) {
 	let data = asString$24(block.data) || asString$24(block.base64);
-	const source = isRecord$56(block.source) ? block.source : void 0;
+	const source = isRecord$58(block.source) ? block.source : void 0;
 	if (!data && source) data = asString$24(source.data) || asString$24(source.base64);
 	let mediaType = asString$24(block.mimeType) || asString$24(block.mediaType) || (source ? asString$24(source.mimeType) || asString$24(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
@@ -28198,6 +28207,19 @@ const HEADER_MSH_DEVICE_NAME = "x-msh-device-name";
 const HEADER_MSH_DEVICE_MODEL = "x-msh-device-model";
 const HEADER_MSH_OS_VERSION = "x-msh-os-version";
 const HEADER_MSH_DEVICE_ID = "x-msh-device-id";
+/**
+* Environment variable carrying extra headers for every Kimi Code request.
+*
+* The official client reads newline-separated `Name: Value` lines from
+* `KIMI_CODE_CUSTOM_HEADERS` (it mirrors `ANTHROPIC_CUSTOM_HEADERS`) and
+* applies them to every outbound request, the `/models` listing included.
+*
+* These headers are the LOWEST-precedence layer: the Kimi device identity
+* headers and the caller's own headers both override them, so a deployment can
+* add a header for one gateway without being able to weaken the identity the
+* service attributes usage to.
+*/
+const KIMI_CODE_CUSTOM_HEADERS_ENV = "KIMI_CODE_CUSTOM_HEADERS";
 /** Version the plugin reports to the managed service's telemetry headers. */
 const MSH_VERSION = "1.0.0";
 const REFRESH_THRESHOLD_RATIO = .5;
@@ -29052,6 +29074,51 @@ function asciiHeaderValue(value) {
 	const printable = value.replace(/[^\x20-\x7E]/g, "").trim();
 	return printable === "" ? void 0 : printable;
 }
+/**
+* Whether one header name is already set, ignoring case.
+*
+* HTTP header names are case-insensitive, so a custom `User-Agent` and the
+* identity `user-agent` are the same header. Keeping both in the map would
+* send one header twice with two values, which is exactly how a spoofed user
+* agent would survive the layer that was supposed to override it.
+*/
+function hasHeaderName(headers, name) {
+	const target = name.toLowerCase();
+	return Object.keys(headers).some((key) => key.toLowerCase() === target);
+}
+/**
+* Extra headers the deployment supplies through KIMI_CODE_CUSTOM_HEADERS.
+*
+* The format is the official client's: newline-separated `Name: Value` lines,
+* exactly as `ANTHROPIC_CUSTOM_HEADERS` carries them. A line without a colon
+* is skipped, and both the name and the value are trimmed. The name keeps the
+* casing the deployment wrote, because that is the header the deployment
+* expects to see on the wire.
+*
+* The value is filtered through {@link asciiHeaderValue}, so a value with
+* nothing printable left in it is dropped instead of being sent as an empty
+* header.
+*
+* These headers form the LOWEST-precedence layer: the Kimi device identity
+* headers and the caller's own headers both override them.
+*
+* @param env environment the variable is read from, injectable for tests.
+*/
+function parseKimiCodeCustomHeaders(env = process.env) {
+	const raw = env[KIMI_CODE_CUSTOM_HEADERS_ENV]?.trim();
+	if (raw === void 0 || raw === "") return {};
+	const headers = {};
+	for (const line of raw.split("\n")) {
+		const colon = line.indexOf(":");
+		if (colon < 0) continue;
+		const name = line.slice(0, colon).trim();
+		if (name === "") continue;
+		const value = asciiHeaderValue(line.slice(colon + 1));
+		if (value === void 0) continue;
+		headers[name] = value;
+	}
+	return headers;
+}
 /** Best-effort human description of this machine, matching the official client. */
 function deviceModel() {
 	const arch = os.arch();
@@ -29084,7 +29151,22 @@ async function getDeviceId() {
 	} catch {}
 	return created;
 }
-/** Identity headers every Kimi Code OAuth and account request carries. */
+/**
+* Identity headers every Kimi Code OAuth and account request carries.
+*
+* Three layers, lowest precedence first:
+*
+* 1. the deployment's own `KIMI_CODE_CUSTOM_HEADERS`, so a gateway in front of
+*    this route can ask for one extra header without a plugin release;
+* 2. the Kimi device identity, which the service uses to attribute usage to an
+*    installation;
+* 3. the caller's own headers, which carry the credentials.
+*
+* A header name is matched across the layers without regard to case, so a
+* custom `User-Agent` cannot sit next to the identity `user-agent` and have
+* the last value win by accident: the higher layer replaces the lower one
+* outright instead of adding a second copy of the same header.
+*/
 async function kimiIdentityHeaders(extra = {}) {
 	const deviceId = await getDeviceId();
 	const candidates = [
@@ -29102,6 +29184,10 @@ async function kimiIdentityHeaders(extra = {}) {
 		const safe = asciiHeaderValue(value);
 		if (safe !== void 0) headers[name] = safe;
 	}
+	for (const [name, value] of Object.entries(parseKimiCodeCustomHeaders())) {
+		if (hasHeaderName(headers, name) || hasHeaderName(extra, name)) continue;
+		headers[name] = value;
+	}
 	return {
 		...headers,
 		...extra
@@ -29479,6 +29565,8 @@ async function runDeviceLogin(options) {
 					...identity.nickname === void 0 ? {} : { nickname: identity.nickname }
 				};
 				const credentials = options.enrich === void 0 ? signedIn : await options.enrich(signedIn).catch(() => signedIn);
+				const refusal = options.accept?.(credentials) ?? null;
+				if (refusal !== null) throw new Error(refusal);
 				await options.store.write(credentials);
 				if (options.onSave) await options.onSave(credentials).catch(() => void 0);
 				await persistRegion(options.region);
@@ -29528,7 +29616,8 @@ async function beginWebLogin(store, options = {}) {
 				signal: controller.signal,
 				open,
 				...options.onSave === void 0 ? {} : { onSave: options.onSave },
-				...options.enrich === void 0 ? {} : { enrich: options.enrich }
+				...options.enrich === void 0 ? {} : { enrich: options.enrich },
+				...options.accept === void 0 ? {} : { accept: options.accept }
 			});
 			webLoginFlow = {
 				...webLoginFlow,
@@ -29561,11 +29650,11 @@ const MODELS_PATH$2 = "/models";
 const USAGES_PATH = "/usages";
 /** The service reports money in fixed-point units of 1e-6 cents. */
 const FIXED_POINT_CENTS = 1e6;
-function isRecord$55(value) {
+function isRecord$57(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asRecord$14(value) {
-	return isRecord$55(value) ? value : void 0;
+	return isRecord$57(value) ? value : void 0;
 }
 function asString$23(value) {
 	if (typeof value === "string" && value.trim() !== "") return value;
@@ -29591,6 +29680,19 @@ function firstNumber(record, keys) {
 		if (value !== void 0) return value;
 	}
 }
+/**
+* Non-empty strings from one array field.
+*
+* The service states its lists as JSON arrays. A field that is not an array, or
+* an array with nothing usable in it, reads as "the server said nothing" rather
+* than as an empty list, so the caller can fall back to the other dialect
+* instead of publishing an empty answer as the server's verdict.
+*/
+function asStringList(value) {
+	if (!Array.isArray(value)) return void 0;
+	const entries = value.filter((entry) => typeof entry === "string" && entry.trim() !== "");
+	return entries.length > 0 ? entries : void 0;
+}
 function clamp01$1(value) {
 	return Math.min(1, Math.max(0, value));
 }
@@ -29698,14 +29800,48 @@ const RETIRED_MODEL_STATUSES = /* @__PURE__ */ new Set([
 * Read the three-state thinking declaration.
 *
 * Kept separate from the effort list because it can contradict it: a model may
-* ship `valid_efforts` that still contain `none` while `supports_thinking_type`
-* says it can only reason. When both are present the declaration wins, because
-* it is the field the service introduced to replace the older boolean.
+* ship `valid_efforts` that still contain `none` while the declaration says it
+* can only reason. When both are present the declaration wins, because it is
+* the field the service introduced to replace the older boolean.
+*
+* Two dialects state it. The unified schema nests it under `reasoning`:
+* `{ "type": "only" | "both" | "none" }`; the older listing states it flat as
+* `supports_thinking_type`. The unified object is read first, because it is
+* the newer field and the one that also carries the effort ladder; the flat
+* field remains the fallback for a server that still speaks the old shape.
+*
+* The unified schema spells the non-thinking state `none`; the internal
+* three-state keeps the legacy `no`.
 */
 function parseThinkingType(record) {
+	const reasoning = asRecord$14(record.reasoning);
+	if (reasoning !== void 0) {
+		const rType = asString$23(reasoning.type);
+		if (rType === "only" || rType === "both") return rType;
+		if (rType === "none" || rType === "no") return "no";
+	}
 	const raw = asString$23(record.supports_thinking_type) ?? asString$23(record.supportsThinkingType);
 	return raw === "only" || raw === "no" || raw === "both" ? raw : void 0;
 }
+/**
+* Read one model entry from the live listing.
+*
+* The service has published two shapes of the same listing and this parser
+* reads both:
+*
+* - the unified schema, which nests the window under `limit.context`, the
+*   input cap under `limit.input`, the thinking declaration and the effort
+*   ladder under `reasoning`, the accepted media under `modalities.input`
+*   and the message-level tool flag under `tools.dynamic_load`;
+* - the older flat schema, which states the same facts as
+*   `context_length`, `max_input_tokens`, `supports_thinking_type`,
+*   `think_efforts`, `supports_image_in` / `supports_video_in` and
+*   `supports_dynamic_tools`.
+*
+* A field the unified schema carries wins over its flat counterpart, because
+* that is the shape the service is moving towards; a field only the flat shape
+* carries is still read, so an older server keeps working.
+*/
 function parseCatalogModel(value) {
 	const record = asRecord$14(value);
 	if (record === void 0) return void 0;
@@ -29713,30 +29849,41 @@ function parseCatalogModel(value) {
 	if (id === void 0) return void 0;
 	const status = asString$23(record.status)?.toLowerCase();
 	if (status !== void 0 && RETIRED_MODEL_STATUSES.has(status)) return void 0;
-	const contextWindow = firstNumber(record, ["context_length", "contextLength"]);
+	const limits = asRecord$14(record.limit) ?? asRecord$14(record.limits);
+	const contextWindow = firstNumber(record, ["context_length", "contextLength"]) ?? firstNumber(limits ?? {}, ["context"]);
 	if (contextWindow === void 0 || contextWindow <= 0) return void 0;
-	const declaredInput = firstNumber(asRecord$14(record.limit) ?? asRecord$14(record.limits) ?? {}, ["input"]) ?? firstNumber(record, ["max_input_tokens", "maxInputTokens"]);
+	const declaredInput = firstNumber(limits ?? {}, ["input"]) ?? firstNumber(record, ["max_input_tokens", "maxInputTokens"]);
 	const maxInputTokens = declaredInput !== void 0 && declaredInput > 0 && declaredInput < contextWindow ? declaredInput : void 0;
 	const thinkingType = parseThinkingType(record);
+	const reasoningEffort = asRecord$14(asRecord$14(record.reasoning)?.effort);
 	const efforts = asRecord$14(record.think_efforts) ?? asRecord$14(record.thinkEfforts);
-	const validEfforts = Array.isArray(efforts?.valid_efforts) ? efforts.valid_efforts.filter((entry) => typeof entry === "string") : Array.isArray(efforts?.validEfforts) ? efforts.validEfforts.filter((entry) => typeof entry === "string") : void 0;
+	const usableEfforts = efforts !== void 0 && "support" in efforts && efforts.support !== true ? void 0 : efforts;
+	const validEfforts = asStringList(reasoningEffort?.valid) ?? asStringList(usableEfforts?.valid_efforts) ?? asStringList(usableEfforts?.validEfforts);
+	const rawDefaultEffort = asString$23(reasoningEffort?.default) ?? asString$23(usableEfforts?.default_effort ?? usableEfforts?.defaultEffort);
+	const defaultReasoningEffort = rawDefaultEffort !== void 0 && validEfforts !== void 0 && validEfforts.length > 0 && !validEfforts.includes(rawDefaultEffort) ? void 0 : rawDefaultEffort;
+	const rawModalities = asRecord$14(record.modalities);
+	const modalityInputs = Array.isArray(rawModalities?.input) ? rawModalities.input.filter((entry) => typeof entry === "string") : [];
+	const hasImage = record.supports_image_in === true || record.supportsImageIn === true || modalityInputs.includes("image");
+	const hasVideo = record.supports_video_in === true || record.supportsVideoIn === true || modalityInputs.includes("video");
 	const modalities = ["text"];
-	if (record.supports_image_in === true || record.supportsImageIn === true) modalities.push("image");
-	if (record.supports_video_in === true || record.supportsVideoIn === true) modalities.push("video");
+	if (hasImage) modalities.push("image");
+	if (hasVideo) modalities.push("video");
+	const toolsObj = asRecord$14(record.tools);
+	const rawDynamicTools = typeof toolsObj?.dynamic_load === "boolean" ? toolsObj.dynamic_load : record.supports_dynamic_tools ?? record.supportsDynamicTools;
 	const protocol = asString$23(record.protocol);
 	return {
 		id,
 		name: asString$23(record.display_name) ?? asString$23(record.displayName) ?? void 0,
 		contextWindow,
-		...validEfforts === void 0 || validEfforts.length === 0 ? {} : { reasoningEfforts: validEfforts },
-		...asString$23(efforts?.default_effort ?? efforts?.defaultEffort) === void 0 ? {} : { defaultReasoningEffort: asString$23(efforts?.default_effort ?? efforts?.defaultEffort) },
+		...validEfforts === void 0 ? {} : { reasoningEfforts: validEfforts },
+		...defaultReasoningEffort === void 0 ? {} : { defaultReasoningEffort },
 		inputModalities: modalities,
 		protocol: protocol === "anthropic" ? "anthropic" : "openai",
-		...record.supports_video_in === true || record.supportsVideoIn === true ? { supportsVideo: true } : {},
+		...hasVideo ? { supportsVideo: true } : {},
 		...maxInputTokens === void 0 ? {} : { maxInputTokens },
 		...thinkingType === void 0 ? {} : { thinkingType },
 		...typeof (record.supports_tool_use ?? record.supportsToolUse) === "boolean" ? { supportsToolUse: record.supports_tool_use ?? record.supportsToolUse } : {},
-		...typeof (record.supports_dynamic_tools ?? record.supportsDynamicTools) === "boolean" ? { supportsDynamicTools: record.supports_dynamic_tools ?? record.supportsDynamicTools } : {}
+		...typeof rawDynamicTools === "boolean" ? { supportsDynamicTools: rawDynamicTools } : {}
 	};
 }
 /**
@@ -30622,12 +30769,12 @@ async function testConnection$1(store, options = {}) {
 *
 * @module dsh-chatgpt-subscription/tool-schema
 */
-function isRecord$54(value) {
+function isRecord$56(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function cloneJsonValue(value) {
 	if (Array.isArray(value)) return value.map(cloneJsonValue);
-	if (isRecord$54(value)) {
+	if (isRecord$56(value)) {
 		const res = {};
 		for (const [k, v] of Object.entries(value)) res[k] = cloneJsonValue(v);
 		return res;
@@ -30642,7 +30789,7 @@ function resolveLocalJsonPointer(root, ref) {
 	let current = root;
 	for (const rawPart of ref.slice(2).split("/")) {
 		const part = rawPart.replaceAll("~1", "/").replaceAll("~0", "~");
-		if (isRecord$54(current)) {
+		if (isRecord$56(current)) {
 			if (!Object.prototype.hasOwnProperty.call(current, part)) return { found: false };
 			current = current[part];
 		} else if (Array.isArray(current)) {
@@ -30658,7 +30805,7 @@ function resolveLocalJsonPointer(root, ref) {
 }
 function derefNode(node, root, visited) {
 	if (Array.isArray(node)) return node.map((item) => derefNode(item, root, visited));
-	if (isRecord$54(node)) {
+	if (isRecord$56(node)) {
 		if (typeof node["$ref"] === "string" && (node["$ref"] === "#" || node["$ref"].startsWith("#/"))) {
 			const ref = node["$ref"];
 			if (visited.has(ref)) return node;
@@ -30667,7 +30814,7 @@ function derefNode(node, root, visited) {
 				visited.add(ref);
 				const inlined = derefNode(resolved.value, root, visited);
 				visited.delete(ref);
-				if (isRecord$54(inlined)) {
+				if (isRecord$56(inlined)) {
 					const merged = { ...inlined };
 					for (const [k, v] of Object.entries(node)) {
 						if (k === "$ref") continue;
@@ -30687,7 +30834,7 @@ function derefNode(node, root, visited) {
 }
 function hasUnresolvedDefinitionRef(node, bucketKey) {
 	if (Array.isArray(node)) return node.some((child) => hasUnresolvedDefinitionRef(child, bucketKey));
-	if (isRecord$54(node)) {
+	if (isRecord$56(node)) {
 		const ref = node["$ref"];
 		if (typeof ref === "string" && ref.startsWith(`#/${bucketKey}/`)) return true;
 		for (const [k, v] of Object.entries(node)) {
@@ -30718,19 +30865,19 @@ function inferTypeFromValues(values) {
 	if (types.size === 1) return types.values().next().value;
 }
 function normalizeSchemaProperties(node) {
-	if (!isRecord$54(node)) return;
-	if (isRecord$54(node.properties)) {
-		for (const propSchema of Object.values(node.properties)) if (isRecord$54(propSchema)) {
+	if (!isRecord$56(node)) return;
+	if (isRecord$56(node.properties)) {
+		for (const propSchema of Object.values(node.properties)) if (isRecord$56(propSchema)) {
 			if (!propSchema.type && !propSchema.$ref) {
 				if (Array.isArray(propSchema.enum) && propSchema.enum.length > 0) propSchema.type = inferTypeFromValues(propSchema.enum) ?? "string";
 				else if (propSchema.const !== void 0) propSchema.type = inferValueType(propSchema.const) ?? "string";
-				else if (isRecord$54(propSchema.properties)) propSchema.type = "object";
+				else if (isRecord$56(propSchema.properties)) propSchema.type = "object";
 				else if (propSchema.items) propSchema.type = "array";
 			}
 			normalizeSchemaProperties(propSchema);
 		}
 	}
-	if (isRecord$54(node.items)) normalizeSchemaProperties(node.items);
+	if (isRecord$56(node.items)) normalizeSchemaProperties(node.items);
 	else if (Array.isArray(node.items)) for (const item of node.items) normalizeSchemaProperties(item);
 }
 /**
@@ -30738,7 +30885,7 @@ function normalizeSchemaProperties(node) {
 * inlining definitions ($defs/definitions/$ref), and ensuring property types for enums/consts.
 */
 function normalizeKimiToolSchema(schema) {
-	if (!isRecord$54(schema)) return {
+	if (!isRecord$56(schema)) return {
 		type: "object",
 		properties: {}
 	};
@@ -30756,7 +30903,7 @@ function stripMetaSchema$1(schema) {
 }
 //#endregion
 //#region src/host/common/prompt-estimate.ts
-function isRecord$53(value) {
+function isRecord$55(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** Tool-call arguments as the JSON string a wire carries, whatever shape they arrived in. */
@@ -30789,7 +30936,7 @@ function estimatedInputTokens(options) {
 	const contentCharacters = (content) => {
 		if (!Array.isArray(content)) return typeof content === "string" ? content.length : 0;
 		return content.reduce((total, block) => {
-			if (!isRecord$53(block)) return total;
+			if (!isRecord$55(block)) return total;
 			if ((block.type === "text" || block.type === "reasoning") && typeof block.text === "string") return total + block.text.length;
 			if (block.type === "tool-result") return total + contentCharacters(block.content);
 			if (block.type === "tool-call") {
@@ -30890,7 +31037,7 @@ function videoOmissionText$1(reason, label) {
 }
 //#endregion
 //#region src/host/common/video-request.ts
-function isRecord$52(value) {
+function isRecord$54(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$22(value) {
@@ -30898,14 +31045,14 @@ function asString$22(value) {
 }
 function videoAttachmentOf(block) {
 	const attachment = block.attachment;
-	if (!isRecord$52(attachment)) return void 0;
+	if (!isRecord$54(attachment)) return void 0;
 	if (typeof attachment.attachmentId !== "string") return void 0;
 	return attachment;
 }
 function collectVideoRefs(content, refs) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$52(block) || block.type !== "video") continue;
+		if (!isRecord$54(block) || block.type !== "video") continue;
 		const attachment = videoAttachmentOf(block);
 		if (attachment) refs.set(attachment.attachmentId, attachment);
 	}
@@ -30920,7 +31067,7 @@ function requestVideoBytes(block) {
 function collectRequestVideoBytes(content, lengths) {
 	if (!Array.isArray(content)) return;
 	for (const block of content) {
-		if (!isRecord$52(block) || block.type !== "video") continue;
+		if (!isRecord$54(block) || block.type !== "video") continue;
 		const bytes = requestVideoBytes(block);
 		if (bytes !== void 0) lengths.push(bytes);
 	}
@@ -30964,7 +31111,7 @@ function isAbortLike(error, signal) {
 }
 /** True when the request carries any video occurrence at all. */
 function requestHasVideo(options) {
-	return options.messages.some((message) => Array.isArray(message.content) && message.content.some((block) => isRecord$52(block) && block.type === "video"));
+	return options.messages.some((message) => Array.isArray(message.content) && message.content.some((block) => isRecord$54(block) && block.type === "video"));
 }
 function omittedVideoText(omit, block) {
 	return omit("unreadable", videoBlockLabel(block));
@@ -30999,7 +31146,7 @@ function offloadOldestRequestVideos(options, maxBytes) {
 		if (remaining.count === 0 || !Array.isArray(message.content)) return message;
 		let replaced = false;
 		const content = message.content.map((block) => {
-			if (remaining.count === 0 || !isRecord$52(block) || block.type !== "video") return block;
+			if (remaining.count === 0 || !isRecord$54(block) || block.type !== "video") return block;
 			if (requestVideoBytes(block) === void 0) return block;
 			remaining.count -= 1;
 			replaced = true;
@@ -31082,7 +31229,7 @@ function videoBlockToInline(block, videos, videoAccepted, omit) {
 *
 * See https://www.kimi.com/code/docs/en/kimi-code/error-reference.html
 */
-function isRecord$51(value) {
+function isRecord$53(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$21(value) {
@@ -31192,7 +31339,7 @@ function reasoningDetailFragments(value) {
 	if (!Array.isArray(value)) return [];
 	const fragments = [];
 	value.forEach((entry, position) => {
-		if (!isRecord$51(entry)) return;
+		if (!isRecord$53(entry)) return;
 		fragments.push(...reasoningDetailElement(entry, position));
 	});
 	return fragments;
@@ -31423,23 +31570,12 @@ function mapReasoningEffort(effort) {
 		default: return;
 	}
 }
-/**
-* Thinking-token budget one Anthropic-route level asks for.
-*
-* Kimi's Anthropic surface takes the standard `thinking` block, so the budget is
-* derived from the same three levels the OpenAI surface uses.
-*/
-function thinkingBudgetFor(effort, maxTokens) {
-	if (effort === void 0 || effort === "none") return void 0;
-	const budget = Math.min(effort === "low" ? 2048 : effort === "high" ? 8192 : 16384, maxTokens - 1024);
-	return budget >= 1024 ? budget : void 0;
-}
 function textOf$7(content) {
 	if (typeof content === "string") return sanitizeText$7(content);
 	if (!Array.isArray(content)) return "";
 	const parts = [];
 	for (const block of content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") parts.push(sanitizeText$7(block.text));
 		else if (block.type === "tool-result") parts.push(textOf$7(block.content));
 	}
@@ -31448,7 +31584,7 @@ function textOf$7(content) {
 function toolResultText$7(blocks) {
 	if (!Array.isArray(blocks)) return "";
 	return blocks.map((block) => {
-		if (!isRecord$51(block)) return "";
+		if (!isRecord$53(block)) return "";
 		if (block.type === "text" && typeof block.text === "string") return sanitizeText$7(block.text);
 		if (block.type === "tool-result") return toolResultText$7(block.content);
 		if (block.type === "image") return `[image: ${attachmentLabel$3(block) ?? "attached image"}]`;
@@ -31466,7 +31602,7 @@ function toolResultBlocks$1(blocks, images) {
 	const out = [];
 	let hasImage = false;
 	for (const block of blocks) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			out.push({
 				type: "text",
@@ -31521,7 +31657,7 @@ function toolResultImageBlocks$4(blocks, images, media = {}) {
 	if (!Array.isArray(blocks)) return [];
 	const out = [];
 	for (const block of blocks) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "image") {
 			const reference = hostedReference(media.imageReferences, block);
 			if (reference !== void 0) {
@@ -31556,7 +31692,7 @@ const HOSTED_FILE_SCHEME = "ms://";
 * bytes.
 */
 function attachmentIdOf(block) {
-	const attachment = isRecord$51(block.attachment) ? block.attachment : void 0;
+	const attachment = isRecord$53(block.attachment) ? block.attachment : void 0;
 	const id = attachment === void 0 ? void 0 : asString$21(attachment.attachmentId);
 	return id === void 0 || id === "" ? void 0 : id;
 }
@@ -31639,12 +31775,12 @@ function readReasoningForm(value) {
 */
 function reasoningRunsAt(message, blockIndex) {
 	const state = message.source?.replayState;
-	if (!isRecord$51(state) || !Array.isArray(state.blocks)) return void 0;
+	if (!isRecord$53(state) || !Array.isArray(state.blocks)) return void 0;
 	const entry = state.blocks[blockIndex];
-	if (!isRecord$51(entry) || !Array.isArray(entry.reasoning)) return void 0;
+	if (!isRecord$53(entry) || !Array.isArray(entry.reasoning)) return void 0;
 	const runs = [];
 	for (const raw of entry.reasoning) {
-		if (!isRecord$51(raw)) return void 0;
+		if (!isRecord$53(raw)) return void 0;
 		const key = asString$21(raw.key);
 		const length = raw.length;
 		if (key === void 0 || typeof length !== "number" || !Number.isInteger(length) || length < 0) return void 0;
@@ -31694,7 +31830,7 @@ function replayedReasoning(message, fallbackKey) {
 	};
 	for (let blockIndex = 0; blockIndex < message.content.length; blockIndex++) {
 		const block = message.content[blockIndex];
-		if (!isRecord$51(block) || block.type !== "reasoning" || typeof block.text !== "string") continue;
+		if (!isRecord$53(block) || block.type !== "reasoning" || typeof block.text !== "string") continue;
 		const text = sanitizeText$7(block.text);
 		joined += text;
 		const runs = reasoningRunsAt(message, blockIndex);
@@ -31863,7 +31999,7 @@ function openAIUserContent$3(message, images, media = {}) {
 	const parts = [];
 	let hasRichPart = false;
 	for (const block of message.content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$7(block.text);
 			if (text !== "") parts.push({
@@ -31921,16 +32057,20 @@ function openAIAssistantContent$3(message, toolCallIds, reasoningKey) {
 	const textParts = [];
 	const toolCalls = [];
 	for (const block of message.content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") textParts.push(sanitizeText$7(block.text));
-		else if (block.type === "tool-call" && typeof block.name === "string") toolCalls.push({
-			id: toolCallIds.normalize(typeof block.id === "string" && block.id !== "" ? block.id : `call_${toolCalls.length}`),
-			type: "function",
-			function: {
-				name: block.name,
-				arguments: toolCallArguments$6(block.arguments)
-			}
-		});
+		else if (block.type === "tool-call" && typeof block.name === "string") {
+			const call = {
+				id: toolCallIds.normalize(typeof block.id === "string" && block.id !== "" ? block.id : `call_${toolCalls.length}`),
+				type: "function",
+				function: {
+					name: block.name,
+					arguments: toolCallArguments$6(block.arguments)
+				}
+			};
+			if (isRecord$53(block.extras)) call.extras = block.extras;
+			toolCalls.push(call);
+		}
 	}
 	return {
 		content: textParts.join(""),
@@ -32071,6 +32211,31 @@ function replayedDetailElement(detail) {
 		...index
 	};
 }
+/**
+* Put one run of tool results back in the order the assistant declared its
+* calls in.
+*
+* A parallel tool call answers several calls at once, and the service reads
+* the `tool` messages as the answers to the `tool_calls` that precede them:
+* a result that arrives in the wrong order is answered against the wrong call.
+* DSH history can hold the results out of order (a resumed session, a tool
+* that answered late), so the run is sorted back into the declared order.
+*
+* A result whose id belongs to no declared call keeps its relative order
+* behind the answered ones: it answers something this turn did not declare,
+* so there is no declared position for it to be sorted into.
+*/
+function pairToolExchanges(batch, declaredIds) {
+	if (batch.length < 2 || declaredIds.length < 2) return [...batch];
+	const rank = /* @__PURE__ */ new Map();
+	for (const [position, id] of declaredIds.entries()) if (!rank.has(id)) rank.set(id, position);
+	if (batch.filter((entry) => rank.has(entry.id)).length < 2) return [...batch];
+	return batch.map((entry, position) => ({
+		entry,
+		position,
+		key: rank.get(entry.id) ?? Number.MAX_SAFE_INTEGER
+	})).sort((a, b) => a.key - b.key || a.position - b.position).map((ordered) => ordered.entry);
+}
 /** Build one `/chat/completions` body. */
 function buildOpenAIRequest(options, images = NO_RESOLVED_IMAGES$3, preserveThinking = preserveThinkingEnabled(), media = {}) {
 	const effort = mapReasoningEffort(options.reasoningEffort === void 0 ? void 0 : String(options.reasoningEffort));
@@ -32132,21 +32297,16 @@ function buildOpenAIRequest(options, images = NO_RESOLVED_IMAGES$3, preserveThin
 		flushSlots(nonSystemIndex);
 		nonSystemIndex += 1;
 		if (isToolResultMessage$7(message)) {
+			const batch = [];
 			while (index < conversation.length && isToolResultMessage$7(conversation[index])) {
 				const current = conversation[index];
 				const block = current.content[0];
-				const rawCallId = isRecord$51(block) && typeof block.toolCallId === "string" ? block.toolCallId : "";
-				const normalizedCallId = toolCallIds.normalize(rawCallId);
-				messages.push({
-					role: "tool",
-					tool_call_id: normalizedCallId,
-					content: toolResultText$7(current.content)
+				const rawCallId = isRecord$53(block) && typeof block.toolCallId === "string" ? block.toolCallId : "";
+				batch.push({
+					id: toolCallIds.normalize(rawCallId),
+					content: toolResultText$7(current.content),
+					images: toolResultImageBlocks$4(current.content, images, media)
 				});
-				pendingToolImages.push(...toolResultImageBlocks$4(current.content, images, media));
-				if (awaitingToolCallIds.length > 0) {
-					awaitingToolCallIds = awaitingToolCallIds.filter((id) => id !== normalizedCallId);
-					if (awaitingToolCallIds.length === 0) flushDeferred();
-				}
 				if (index + 1 < conversation.length && isToolResultMessage$7(conversation[index + 1])) {
 					flushSlots(nonSystemIndex);
 					nonSystemIndex += 1;
@@ -32155,6 +32315,18 @@ function buildOpenAIRequest(options, images = NO_RESOLVED_IMAGES$3, preserveThin
 				}
 				break;
 			}
+			for (const entry of pairToolExchanges(batch, awaitingToolCallIds)) {
+				messages.push({
+					role: "tool",
+					tool_call_id: entry.id,
+					content: entry.content
+				});
+				pendingToolImages.push(...entry.images);
+				if (awaitingToolCallIds.length > 0) {
+					awaitingToolCallIds = awaitingToolCallIds.filter((id) => id !== entry.id);
+					if (awaitingToolCallIds.length === 0) flushDeferred();
+				}
+			}
 			if (awaitingToolCallIds.length === 0) flushToolImages();
 			continue;
 		}
@@ -32249,7 +32421,7 @@ function firstTextOf(content) {
 	}
 	if (!Array.isArray(content)) return void 0;
 	for (const block of content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$7(block.text);
 			if (text !== "") return text;
@@ -32307,7 +32479,7 @@ function isSideChannelTitleRequest(options) {
 	const tools = options.tools;
 	const toolLess = tools === void 0 || tools.length === 0;
 	for (const message of messages) {
-		if (!isRecord$51(message)) continue;
+		if (!isRecord$53(message)) continue;
 		if (message.source?.kind === "dsh-session-title-llm") return true;
 		const text = firstTextOf(message.content);
 		if (toolLess && text !== void 0 && text.startsWith(TITLE_REQUEST_PROMPT_PREFIX)) return true;
@@ -32334,15 +32506,70 @@ function promptCacheKey(options) {
 	if (isSideChannelTitleRequest(options)) return void 0;
 	if (typeof options.sessionId === "string" && options.sessionId.trim() !== "") return `dsh-${options.sessionId.trim()}`;
 }
-function anthropicUserContent$2(message, images, toolCallIds) {
+/**
+* The Anthropic beta that carries the context-management edit.
+*
+* `clear_thinking_20251015` is honoured only on the beta Messages API, so the
+* beta has to travel WITH the request; the official Kimi Anthropic protocol
+* asks for it on every thinking request (see the upstream
+* `kimiAnthropicProtocol`, which returns `betaFeatures: [CONTEXT_MANAGEMENT_BETA]`
+* for both the enabled and the disabled encoding).
+*/
+const CONTEXT_MANAGEMENT_BETA = "context-management-2025-06-27";
+/**
+* The Anthropic context edit that clears stale thinking blocks.
+*
+* The edit is what "keep the thinking across turns" means on this wire: the
+* service clears the thinking it has already consumed instead of replaying it,
+* so a preserved thinking block stays affordable.
+*/
+const CLEAR_THINKING_EDIT = "clear_thinking_20251015";
+/** The cache breakpoint the Anthropic wire marks with. */
+const ANTHROPIC_CACHE_CONTROL = { type: "ephemeral" };
+/**
+* The content block types that accept a cache breakpoint.
+*
+* The official provider injects the breakpoint on the last block of the last
+* message, and only when that block is one of the cacheable kinds; a block
+* that cannot carry the marker is left alone rather than given a field the
+* service would reject.
+*/
+const ANTHROPIC_CACHEABLE_BLOCK_TYPES = /* @__PURE__ */ new Set([
+	"text",
+	"image",
+	"document",
+	"tool_use",
+	"tool_result"
+]);
+function anthropicUserContent$2(message, images, toolCallIds, media = {}) {
 	if (!Array.isArray(message.content)) return [];
 	const blocks = [];
 	for (const block of message.content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "video") {
-			blocks.push({
+			const reference = hostedReference(media.videoReferences, block);
+			if (reference !== void 0) {
+				blocks.push({
+					type: "video",
+					source: {
+						type: "url",
+						url: reference
+					}
+				});
+				continue;
+			}
+			const outcome = videoBlockToInline(block, media.videos ?? /* @__PURE__ */ new Map(), media.videoAccepted === true, videoOmissionText$1);
+			if ("inline" in outcome) blocks.push({
+				type: "video",
+				source: {
+					type: "base64",
+					media_type: outcome.inline.mediaType,
+					data: outcome.inline.data
+				}
+			});
+			else blocks.push({
 				type: "text",
-				text: videoOmissionText$1("unsupported-wire", videoBlockLabel(block))
+				text: outcome.omission
 			});
 			continue;
 		}
@@ -32353,19 +32580,29 @@ function anthropicUserContent$2(message, images, toolCallIds) {
 				text
 			});
 		} else if (block.type === "image") {
-			const inline = imageBlockToInline$2(block, images);
-			if (inline && SUPPORTED_IMAGE_MEDIA_TYPES$3.has(inline.mediaType)) blocks.push({
+			const reference = hostedReference(media.imageReferences, block);
+			if (reference !== void 0) blocks.push({
 				type: "image",
 				source: {
-					type: "base64",
-					media_type: inline.mediaType,
-					data: inline.data
+					type: "url",
+					url: reference
 				}
 			});
-			else blocks.push({
-				type: "text",
-				text: unavailableImageText$3(block)
-			});
+			else {
+				const inline = imageBlockToInline$2(block, images);
+				if (inline && SUPPORTED_IMAGE_MEDIA_TYPES$3.has(inline.mediaType)) blocks.push({
+					type: "image",
+					source: {
+						type: "base64",
+						media_type: inline.mediaType,
+						data: inline.data
+					}
+				});
+				else blocks.push({
+					type: "text",
+					text: unavailableImageText$3(block)
+				});
+			}
 		} else if (block.type === "tool-result") {
 			const callId = typeof block.toolCallId === "string" ? block.toolCallId : "";
 			const resultBlocks = toolResultBlocks$1(block.content, images);
@@ -32382,20 +32619,28 @@ function anthropicUserContent$2(message, images, toolCallIds) {
 function anthropicAssistantContent$2(message, toolCallIds) {
 	const blocks = [];
 	for (const block of message.content) {
-		if (!isRecord$51(block)) continue;
+		if (!isRecord$53(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$7(block.text);
 			if (text !== "") blocks.push({
 				type: "text",
 				text
 			});
+		} else if (block.type === "reasoning") {
+			const thinkingText = typeof block.text === "string" ? sanitizeText$7(block.text) : "";
+			const sig = typeof block.signature === "string" && block.signature.trim() !== "" ? block.signature : void 0;
+			if (thinkingText !== "" || sig !== void 0) blocks.push({
+				type: "thinking",
+				thinking: thinkingText,
+				...sig === void 0 ? {} : { signature: sig }
+			});
 		} else if (block.type === "tool-call" && typeof block.name === "string") {
 			const parsed = safeJsonParse$7(toolCallArguments$6(block.arguments));
 			blocks.push({
 				type: "tool_use",
 				id: toolCallIds.normalize(typeof block.id === "string" && block.id !== "" ? block.id : `toolu_${blocks.length}`),
 				name: block.name,
-				input: isRecord$51(parsed) ? parsed : {}
+				input: isRecord$53(parsed) ? parsed : {}
 			});
 		}
 	}
@@ -32426,7 +32671,7 @@ function mergeAnthropicMessages$2(entries) {
 	return merged;
 }
 /** Build one `/v1/messages` body. */
-function buildAnthropicRequest(options, images = NO_RESOLVED_IMAGES$3, media = {}) {
+function buildAnthropicRequest(options, images = NO_RESOLVED_IMAGES$3, media = {}, preserveThinking = preserveThinkingEnabled()) {
 	const toolCallIds = new ToolCallIdNormalizer();
 	const carriers = options.messages.filter((message) => message.role === "system" && messageToolsOf(message) !== void 0);
 	const unsentDeclarations = carriers.reduce((total, message) => total + (messageToolsOf(message)?.length ?? 0), 0);
@@ -32436,13 +32681,13 @@ function buildAnthropicRequest(options, images = NO_RESOLVED_IMAGES$3, media = {
 		if (isToolResultMessage$7(message)) {
 			entries.push({
 				role: "user",
-				content: anthropicUserContent$2(message, images, toolCallIds)
+				content: anthropicUserContent$2(message, images, toolCallIds, media)
 			});
 			continue;
 		}
 		entries.push({
 			role: message.role === "assistant" ? "assistant" : "user",
-			content: message.role === "assistant" ? anthropicAssistantContent$2(message, toolCallIds) : anthropicUserContent$2(message, images, toolCallIds)
+			content: message.role === "assistant" ? anthropicAssistantContent$2(message, toolCallIds) : anthropicUserContent$2(message, images, toolCallIds, media)
 		});
 	}
 	const systemParts = [
@@ -32453,31 +32698,54 @@ function buildAnthropicRequest(options, images = NO_RESOLVED_IMAGES$3, media = {
 	const system = systemParts.length === 0 ? void 0 : systemParts.join("\n\n");
 	const maxTokens = options.maxTokens ?? maxOutputTokensFor$5(options.model);
 	const effort = mapReasoningEffort(options.reasoningEffort === void 0 ? void 0 : String(options.reasoningEffort));
-	const budget = thinkingBudgetFor(effort, maxTokens);
+	const thinkingOff = effort === "none";
+	const thinkingField = thinkingOff ? { type: "disabled" } : { type: "enabled" };
+	const outputConfig = !thinkingOff && effort !== void 0 ? { effort } : void 0;
+	const keepThinking = preserveThinking && !thinkingOff;
+	const betas = [CONTEXT_MANAGEMENT_BETA];
+	const contextManagement = keepThinking ? { edits: [{
+		type: CLEAR_THINKING_EDIT,
+		keep: "all"
+	}] } : void 0;
+	const messages = mergeAnthropicMessages$2(entries);
+	const lastMessage = messages[messages.length - 1];
+	if (lastMessage !== void 0 && Array.isArray(lastMessage.content) && lastMessage.content.length > 0) {
+		const lastBlock = lastMessage.content[lastMessage.content.length - 1];
+		if (lastBlock !== void 0 && ANTHROPIC_CACHEABLE_BLOCK_TYPES.has(String(lastBlock.type))) lastBlock.cache_control = { ...ANTHROPIC_CACHE_CONTROL };
+	}
+	const tools = options.tools && options.tools.length > 0 ? options.tools.map((tool) => ({
+		name: tool.name,
+		description: tool.description,
+		input_schema: normalizeKimiToolSchema(tool.parameters)
+	})) : [];
+	if (tools.length > 0) tools[tools.length - 1] = {
+		...tools[tools.length - 1],
+		cache_control: { ...ANTHROPIC_CACHE_CONTROL }
+	};
 	return {
 		model: options.model,
 		max_tokens: maxTokens,
-		messages: mergeAnthropicMessages$2(entries),
-		...system === void 0 ? {} : { system },
-		...options.temperature === void 0 || budget !== void 0 ? {} : { temperature: options.temperature },
+		messages,
+		...system === void 0 ? {} : { system: [{
+			type: "text",
+			text: system,
+			cache_control: { ...ANTHROPIC_CACHE_CONTROL }
+		}] },
+		...options.temperature === void 0 || !thinkingOff ? {} : { temperature: options.temperature },
 		...options.stop && options.stop.length > 0 ? { stop_sequences: options.stop } : {},
-		...options.tools && options.tools.length > 0 ? { tools: options.tools.map((tool) => ({
-			name: tool.name,
-			description: tool.description,
-			input_schema: stripMetaSchema$1(tool.parameters)
-		})) } : {},
-		...effort === void 0 ? {} : budget === void 0 ? { thinking: { type: "disabled" } } : { thinking: {
-			type: "enabled",
-			budget_tokens: budget
-		} }
+		...tools.length > 0 ? { tools } : {},
+		thinking: thinkingField,
+		...outputConfig === void 0 ? {} : { output_config: outputConfig },
+		...contextManagement === void 0 ? {} : { context_management: contextManagement },
+		betas
 	};
 }
 /** Build the body for whichever endpoint serves `wire`. */
 function buildRequest(options, wire, images = NO_RESOLVED_IMAGES$3, preserveThinking = preserveThinkingEnabled(), media = {}) {
-	if (isSideChannelTitleRequest(options)) return wire === "anthropic" ? buildAnthropicRequest(options, images, media) : buildOpenAIRequest(options, images, preserveThinking, media);
+	if (isSideChannelTitleRequest(options)) return wire === "anthropic" ? buildAnthropicRequest(options, images, media, preserveThinking) : buildOpenAIRequest(options, images, preserveThinking, media);
 	const cause = trackPrefixStability(options);
 	recordDriftCause(cause === "stable" && (pendingImageOffloads.get(cacheScopeKey(options.sessionId)) ?? 0) > 0 ? "image-offload" : cause, options.sessionId, options);
-	return wire === "anthropic" ? buildAnthropicRequest(options, images, media) : buildOpenAIRequest(options, images, preserveThinking, media);
+	return wire === "anthropic" ? buildAnthropicRequest(options, images, media, preserveThinking) : buildOpenAIRequest(options, images, preserveThinking, media);
 }
 /**
 * Reject a request the service would refuse for its size.
@@ -32519,7 +32787,7 @@ function walkJson(value, visit) {
 		for (const item of value) walkJson(item, visit);
 		return;
 	}
-	if (!isRecord$51(value)) return;
+	if (!isRecord$53(value)) return;
 	visit(value);
 	for (const nested of Object.values(value)) walkJson(nested, visit);
 }
@@ -32535,12 +32803,12 @@ function requestBodyBreakdown(body, carriesVideo = false) {
 	const totalBytes = Buffer.byteLength(serialized, "utf8");
 	let imageBytes = 0;
 	walkJson(body, (node) => {
-		const url = isRecord$51(node.image_url) ? asString$21(node.image_url.url) : void 0;
+		const url = isRecord$53(node.image_url) ? asString$21(node.image_url.url) : void 0;
 		if (url?.startsWith("data:")) {
 			imageBytes += Buffer.byteLength(url, "utf8");
 			return;
 		}
-		const source = isRecord$51(node.source) ? node.source : void 0;
+		const source = isRecord$53(node.source) ? node.source : void 0;
 		if (source && asString$21(source.data) !== void 0 && asString$21(source.media_type) !== void 0) imageBytes += Buffer.byteLength(asString$21(source.data) ?? "", "utf8");
 	});
 	const toolSchemaBytes = Buffer.byteLength(JSON.stringify(body.tools ?? []), "utf8");
@@ -32667,9 +32935,9 @@ function processOpenAIStreamLine(line, state) {
 	}
 	if (payload === "") return [];
 	const chunk = safeJsonParse$7(payload);
-	if (!isRecord$51(chunk)) return [];
+	if (!isRecord$53(chunk)) return [];
 	const out = [];
-	const errorPayload = isRecord$51(chunk.error) ? chunk.error : void 0;
+	const errorPayload = isRecord$53(chunk.error) ? chunk.error : void 0;
 	if (errorPayload !== void 0) {
 		const message = asString$21(errorPayload.message) ?? "unknown error";
 		state.streamError = {
@@ -32679,22 +32947,22 @@ function processOpenAIStreamLine(line, state) {
 		};
 		throw new LlmError$1(`Kimi Code stream error: ${message}`, isContextOverflow(errorPayload) ? CONTEXT_OVERFLOW_CODE : "PROVIDER_ERROR");
 	}
-	const usage = isRecord$51(chunk.usage) ? chunk.usage : void 0;
+	const usage = isRecord$53(chunk.usage) ? chunk.usage : void 0;
 	if (usage) {
 		state.sawUsage = true;
 		const prompt = numberOr$8(usage.prompt_tokens, 0);
-		const details = isRecord$51(usage.prompt_tokens_details) ? usage.prompt_tokens_details : void 0;
+		const details = isRecord$53(usage.prompt_tokens_details) ? usage.prompt_tokens_details : void 0;
 		const cached = details ? numberOr$8(details.cached_tokens, 0) : 0;
 		const written = details ? numberOr$8(details.cache_write_tokens, 0) : 0;
 		state.inputTokens = Math.max(0, prompt - cached - written);
 		state.cacheReadTokens = cached;
 		state.cacheWriteTokens = written;
 		state.outputTokens = numberOr$8(usage.completion_tokens, state.outputTokens);
-		if (isRecord$51(usage.completion_tokens_details)) state.reasoningTokens = numberOr$8(usage.completion_tokens_details.reasoning_tokens, state.reasoningTokens);
+		if (isRecord$53(usage.completion_tokens_details)) state.reasoningTokens = numberOr$8(usage.completion_tokens_details.reasoning_tokens, state.reasoningTokens);
 	}
 	const choices = Array.isArray(chunk.choices) ? chunk.choices : [];
-	const choice = isRecord$51(choices[0]) ? choices[0] : void 0;
-	const delta = isRecord$51(choice?.delta) ? choice.delta : void 0;
+	const choice = isRecord$53(choices[0]) ? choices[0] : void 0;
+	const delta = isRecord$53(choice?.delta) ? choice.delta : void 0;
 	if (delta) {
 		for (const fragment of reasoningDialect.observeAll(delta)) {
 			const text = sanitizeText$7(fragment.text);
@@ -32735,7 +33003,7 @@ function processOpenAIStreamLine(line, state) {
 		}
 		const toolDeltas = Array.isArray(delta.tool_calls) ? delta.tool_calls : [];
 		for (const entry of toolDeltas) {
-			if (!isRecord$51(entry)) continue;
+			if (!isRecord$53(entry)) continue;
 			out.push(...applyOpenAIToolDelta(entry, state));
 		}
 	}
@@ -32749,7 +33017,7 @@ function processOpenAIStreamLine(line, state) {
 }
 function applyOpenAIToolDelta(entry, state) {
 	const wireIndex = typeof entry.index === "number" ? entry.index : 0;
-	const fn = isRecord$51(entry.function) ? entry.function : {};
+	const fn = isRecord$53(entry.function) ? entry.function : {};
 	const out = [];
 	let call = state.toolCalls.get(wireIndex);
 	if (call === void 0) {
@@ -32804,12 +33072,12 @@ function processAnthropicStreamLine(line, state) {
 	const payload = trimmed.slice(5).trim();
 	if (payload === "" || payload === "[DONE]") return [];
 	const event = safeJsonParse$7(payload);
-	if (!isRecord$51(event)) return [];
+	if (!isRecord$53(event)) return [];
 	const type = asString$21(event.type);
 	const out = [];
 	if (type === "message_start") {
-		const message = isRecord$51(event.message) ? event.message : void 0;
-		const usage = message && isRecord$51(message.usage) ? message.usage : void 0;
+		const message = isRecord$53(event.message) ? event.message : void 0;
+		const usage = message && isRecord$53(message.usage) ? message.usage : void 0;
 		if (usage) {
 			state.sawUsage = true;
 			state.inputTokens = numberOr$8(usage.input_tokens, 0);
@@ -32823,7 +33091,7 @@ function processAnthropicStreamLine(line, state) {
 	}
 	if (type === "content_block_start") {
 		const contentIndex = numberOr$8(event.index, 0);
-		const block = isRecord$51(event.content_block) ? event.content_block : {};
+		const block = isRecord$53(event.content_block) ? event.content_block : {};
 		const blockType = asString$21(block.type);
 		out.push(...closeCurrent$5(state));
 		if (blockType === "tool_use") {
@@ -32873,7 +33141,7 @@ function processAnthropicStreamLine(line, state) {
 	}
 	if (type === "content_block_delta") {
 		const contentIndex = numberOr$8(event.index, 0);
-		const delta = isRecord$51(event.delta) ? event.delta : {};
+		const delta = isRecord$53(event.delta) ? event.delta : {};
 		const deltaType = asString$21(delta.type);
 		if (deltaType === "input_json_delta") {
 			const pending = state.toolCalls.get(contentIndex);
@@ -32946,10 +33214,10 @@ function processAnthropicStreamLine(line, state) {
 		return out;
 	}
 	if (type === "message_delta") {
-		const delta = isRecord$51(event.delta) ? event.delta : void 0;
+		const delta = isRecord$53(event.delta) ? event.delta : void 0;
 		const stop = delta ? asString$21(delta.stop_reason) : void 0;
 		if (stop !== void 0 && stop !== "") state.finishReason = stop;
-		const usage = isRecord$51(event.usage) ? event.usage : void 0;
+		const usage = isRecord$53(event.usage) ? event.usage : void 0;
 		if (usage) {
 			state.sawUsage = true;
 			state.outputTokens = numberOr$8(usage.output_tokens, state.outputTokens);
@@ -32961,7 +33229,7 @@ function processAnthropicStreamLine(line, state) {
 		return closeStream$4(state);
 	}
 	if (type === "error") {
-		const error = isRecord$51(event.error) ? event.error : {};
+		const error = isRecord$53(event.error) ? event.error : {};
 		const message = asString$21(error.message) ?? "unknown error";
 		state.streamError = {
 			vocabulary: "anthropic",
@@ -33552,7 +33820,7 @@ var SessionCacheStateStore = class {
 /** Validate one parsed document, dropping entries that do not describe a record. */
 function normalizeDocument(value) {
 	const sessions = {};
-	if (isRecord$50(value) && isRecord$50(value.sessions)) for (const [key, entry] of Object.entries(value.sessions)) {
+	if (isRecord$52(value) && isRecord$52(value.sessions)) for (const [key, entry] of Object.entries(value.sessions)) {
 		const record = normalizeRecord(entry);
 		if (record !== void 0) sessions[key] = record;
 	}
@@ -33562,7 +33830,7 @@ function normalizeDocument(value) {
 	};
 }
 function normalizeRecord(value) {
-	if (!isRecord$50(value)) return void 0;
+	if (!isRecord$52(value)) return void 0;
 	const lastActiveAt = finite(value.lastActiveAt);
 	const updatedAt = finite(value.updatedAt);
 	if (lastActiveAt === void 0 || updatedAt === void 0) return void 0;
@@ -33650,7 +33918,7 @@ function resolveSessionCacheView(sessionId, memory, durable) {
 }
 /** The process-wide store the adapter writes and the routes read. */
 const sessionCacheState = new SessionCacheStateStore();
-function isRecord$50(value) {
+function isRecord$52(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function finite(value) {
@@ -33820,9 +34088,9 @@ function bodyDigest(raw, token) {
 	const text = raw.trim();
 	if (text === "") return "";
 	const parsed = parseJson(text);
-	if (parsed.ok && isRecord$49(parsed.value)) {
+	if (parsed.ok && isRecord$51(parsed.value)) {
 		const root = parsed.value;
-		const nested = isRecord$49(root.error) ? root.error : void 0;
+		const nested = isRecord$51(root.error) ? root.error : void 0;
 		const code = firstString(nested?.code) ?? firstString(root.code) ?? firstString(root.error_code) ?? "";
 		const message = nested !== void 0 ? firstString(nested.message) ?? firstString(nested.code) ?? "" : typeof root.error === "string" ? root.error : firstString(root.message) ?? firstString(root.detail) ?? "";
 		const composed = [code === "" ? "" : "code=" + code, message].filter((part) => part !== "").join(" ");
@@ -33858,7 +34126,7 @@ function normalizeFileId(value) {
 */
 function readFileId$1(value, depth = 0) {
 	if (depth > 3) return void 0;
-	if (!isRecord$49(value)) return void 0;
+	if (!isRecord$51(value)) return void 0;
 	const direct = normalizeFileId(value.id);
 	if (direct !== void 0) return direct;
 	for (const key of NESTED_ID_KEYS) {
@@ -33905,7 +34173,7 @@ function mediaFileCacheKey(input) {
 		contentSha256(input.data)
 	].join("|");
 }
-function isRecord$49(value) {
+function isRecord$51(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function firstString(value) {
@@ -35905,7 +36173,7 @@ async function getKimiCodeWebStatus(store, modelSettings, preferences, options =
 	const credentials = await store.read();
 	const settings = preferences ? preferences.status() : await modelSettings.read();
 	const poolData = accountPool === void 0 ? null : await accountPool.read().catch(() => null);
-	const accounts = accountPool === void 0 ? [] : await accountPool.listAccounts().catch(() => []);
+	const accounts = accountPool === void 0 || poolData === null ? [] : accountPool.summariesOf(poolData);
 	const activeAccount = accounts.find((entry) => entry.id === poolData?.activeAccountId) ?? accounts.find((entry) => entry.isPrimary) ?? accounts[0];
 	const activePoolAccount = poolData === null ? void 0 : poolData.accounts.find((entry) => entry.id === poolData.activeAccountId) ?? poolData.accounts.find((entry) => entry.isPrimary) ?? poolData.accounts[0];
 	const active = (accountPool === void 0 || activePoolAccount === void 0 ? void 0 : await accountPool.getFreshCredential(activePoolAccount.id, options.fetchFn ?? fetch).catch(() => void 0)) ?? activePoolAccount?.credentials ?? credentials;
@@ -36083,6 +36351,31 @@ function hitRatioOf(cached, fresh) {
 	const total = cached + fresh;
 	return total > 0 ? cached / total : null;
 }
+/**
+* Name the account a re-authorization has to sign back in as.
+*
+* `relogin` on the card clears one row's failure marker and then runs an ordinary
+* device-code sign-in, which authorizes whichever account the browser already
+* is. Without this check the pool could accept a DIFFERENT account, replace that
+* account's row and move the rotation with it, while the row the user clicked
+* stayed broken — the card then looked like the pool had switched on its own.
+*
+* The comparison is over identity, never tokens: the account id the token
+* carries, and only when neither side carries one, the address.
+*/
+async function signInGuard(pool, accountId) {
+	const row = (await pool.read().catch(() => null))?.accounts.find((account) => account.id === accountId);
+	if (row === void 0) return () => "要重新登录的账号已不在号池中，本次登录已取消，号池未改动。";
+	const expectedUserId = row.userId ?? row.credentials.userId;
+	const expectedEmail = (row.email ?? row.credentials.email)?.trim().toLowerCase() || void 0;
+	return (credentials) => {
+		const signedUserId = credentials.userId;
+		const signedEmail = credentials.email?.trim().toLowerCase() || void 0;
+		if (expectedUserId !== void 0 && signedUserId !== void 0 ? expectedUserId === signedUserId : expectedEmail !== void 0 && signedEmail !== void 0 ? expectedEmail === signedEmail : true) return null;
+		const signedName = credentials.email ?? signedUserId ?? "未知账号";
+		return `重新登录的是「${row.alias}」，本次登录的却是「${signedName}」，已取消，号池与凭据都没有改动。`;
+	};
+}
 /** Register the Kimi Code settings routes under `/kimi-code/api`. */
 function registerKimiCodeRoutes(ctx, store, modelSettings, preferences, options = {}, accountPool = options.accountPool) {
 	const fetchFn = options.fetchFn ?? fetch;
@@ -36234,12 +36527,15 @@ function registerKimiCodeRoutes(ctx, store, modelSettings, preferences, options
 					});
 					const body = await readRequestJson$9(request);
 					const requested = isRegion$4(body.region) ? body.region : void 0;
+					const expectAccountId = typeof body.accountId === "string" ? body.accountId : void 0;
+					const accept = accountPool === void 0 || expectAccountId === void 0 ? void 0 : await signInGuard(accountPool, expectAccountId);
 					return sendJson$9(response, 200, {
 						ok: true,
 						value: await beginWebLogin(store, {
 							fetchFn,
 							region: requested,
 							openBrowser: options.openBrowser,
+							...accept === void 0 ? {} : { accept },
 							enrich: async (credentials) => {
 								const profile = await fetchProfile(store, {
 									fetchFn,
@@ -36692,7 +36988,7 @@ const KIMI_VIDEO_TOOL_NAME = "kimi_attach_video";
 * routed provider is this one, which is the same contract `read_image` states
 * for a modality the active model does not declare.
 */
-const KIMI_CODE_PROVIDER$1 = "kimi-code";
+const KIMI_CODE_PROVIDER$2 = "kimi-code";
 /**
 * Refuse when the session's routed model cannot accept video.
 *
@@ -36706,7 +37002,7 @@ async function assertVideoCapableRoute(ctx, exec, source) {
 	const provider = routed?.provider ?? agent?.options?.provider;
 	const model = routed?.model ?? agent?.options?.model;
 	if (provider === void 0 || model === void 0) throw new HarnessError(`cannot attach "${source}": the current model route could not be resolved`, "KIMI_VIDEO_ROUTE_UNRESOLVED");
-	if (provider !== KIMI_CODE_PROVIDER$1) throw new HarnessError(`cannot attach "${source}": video input is only wired for the ${KIMI_CODE_PROVIDER$1} provider, and this session is routed to "${provider}"`, "KIMI_VIDEO_WRONG_PROVIDER");
+	if (provider !== KIMI_CODE_PROVIDER$2) throw new HarnessError(`cannot attach "${source}": video input is only wired for the ${KIMI_CODE_PROVIDER$2} provider, and this session is routed to "${provider}"`, "KIMI_VIDEO_WRONG_PROVIDER");
 	const llm = ctx.get("llm");
 	if (llm === void 0) throw new HarnessError(`cannot attach "${source}": the LLM service is unavailable`, "KIMI_VIDEO_NO_LLM");
 	const active = await llm.resolveModelInfo(provider, model, exec.signal);
@@ -37015,6 +37311,18 @@ const MESSAGES_PATH$1 = "/messages";
 /** Anthropic protocol revision the endpoint documents. */
 const ANTHROPIC_VERSION$2 = "2023-06-01";
 /**
+* Beta marker the interleaved-thinking protocol needs.
+*
+* The Messages endpoint on this route accepts signed `thinking` blocks and
+* streams reasoning back in its own channel, and the Anthropic dialect gates
+* that on the interleaved-thinking beta. The official MiniMax agent sends the
+* marker on every Messages request (its `model-resolver-helpers.ts`), so a
+* request without it is shaped differently from the one the service is
+* documented against - and the replay path on this line has signed thinking
+* blocks to send.
+*/
+const ANTHROPIC_INTERLEAVED_THINKING_BETA = "interleaved-thinking-2025-05-14";
+/**
 * Byte ceiling the guard enforces on one request body.
 *
 * WHY THIS IS NOT KIMI'S 2 MB FIGURE
@@ -37103,13 +37411,34 @@ function maxRequestImageBytes(env = process.env) {
 /**
 * Product token this plugin reports.
 *
-* MiniMax Code's own telemetry headers are deliberately NOT forged: this is a
-* third-party client of the subscription, and claiming to be the official app is
-* both dishonest and, per the app's own terms, grounds for suspending the
-* subscription.
+* This is the plugin's own identity, and it stays honest. MiniMax Code's own
+* telemetry headers are deliberately NOT forged: this is a third-party client of
+* the subscription, and claiming to be the official app is both dishonest and,
+* per the app's own terms, grounds for suspending the subscription.
+*
+* The surfaces that carry this token are exactly the first-party ones (the
+* check-in call, the reset-card call, the usage read), and those are the ones
+* that must be able to say who is asking. The MODEL request carries
+* {@link MINIMAX_AGENT_USER_AGENT} instead - a different surface, a different
+* identifier.
 */
 const USER_AGENT$3 = "dsh-chatgpt-subscription (+https://github.com/Aa728848/dsh-chatgpt-subscription)";
 /**
+* Client identifier the managed agent's MODEL requests carry.
+*
+* The managed agent classifies a model request by this header, and the official
+* MiniMax agent sends exactly this value (`model-resolver-helpers.ts:11`, and
+* the same identifier the Matrix media face uses). A model request that names
+* something else is shaped differently from the one the service is documented
+* against - and the model request is the surface that has to speak the
+* protocol's own identifier.
+*
+* It is a separate constant from {@link USER_AGENT} on purpose: the first-party
+* surfaces keep identifying this plugin honestly, and only the model request
+* speaks as the agent the endpoint expects.
+*/
+const MINIMAX_AGENT_USER_AGENT = "MiniMaxAgent";
+/**
 * How long before expiry a token is replaced.
 *
 * The measured MiniMax Code access token lives ONE HOUR, not the day an earlier
@@ -37238,6 +37567,937 @@ function computeMinimaxAuthOwner(credentials, accountId) {
 	return hash.digest("hex").slice(0, 32);
 }
 //#endregion
+//#region src/host/minimax-code/runtime-enhancements.ts
+/** 本模块只对 MiniMax Code 这条线路生效。 */
+const MINIMAX_CODE_PROVIDER$1 = "minimax-code";
+/**
+* 判断一个值是不是普通对象（原型是 `Object.prototype` 或 `null`）。
+* @param value - 任意值。
+* @returns 是普通对象时为 true。
+*/
+function isPlainRecord$1(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === Object.prototype || prototype === null;
+}
+/**
+* 判断一个值是不是普通对象（不要求原型，数组也算对象）。
+* @param value - 任意值。
+* @returns 是对象时为 true。
+*/
+function isRecord$50(value) {
+	return typeof value === "object" && value !== null;
+}
+/**
+* 读一个未知字段为非空字符串。
+* @param value - 候选值。
+* @returns 字符串，或任何其它类型的 undefined。
+*/
+function stringOf$4(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+/**
+* 读一次工具调用所属的线路。
+*
+* provider 的四个来源按可靠性排序：**请求头快照**（唯一反映「已经真的路由到
+* 哪个 provider」的那一份）→ **模型选择面**（首步还没有请求头时唯一还能说出
+* 这一场走哪条线路的地方）→ **agent 选项**（还没发出请求时唯一的意图）→
+* **agent 自身的 provider 字段**（最后的兜底）。
+*
+* 每一处读取都独立 try/catch：任何一处抛错都只是「这一处读不到」，不改变
+* 其余来源的行为，也不让整次读取失败。
+*
+* @param agent - 事件里的调用方 agent。
+* @returns 线路信息；读不到的字段省略。
+*/
+function minimaxSessionRouteOf(agent) {
+	const record = isRecord$50(agent) ? agent : void 0;
+	const session = record?.session;
+	let provider;
+	try {
+		provider = stringOf$4(session?.requestHeader?.()?.config?.provider);
+	} catch {
+		provider = void 0;
+	}
+	if (provider === void 0) try {
+		provider = stringOf$4(record?.model?.current?.()?.provider);
+	} catch {
+		provider = void 0;
+	}
+	if (provider === void 0) provider = stringOf$4(record?.options?.provider);
+	if (provider === void 0) provider = stringOf$4(record?.provider);
+	const sessionId = stringOf$4(session?.header?.id) ?? stringOf$4(record?.id);
+	return {
+		...provider === void 0 ? {} : { provider },
+		...sessionId === void 0 ? {} : { sessionId }
+	};
+}
+/**
+* 判断一次工具调用是不是 MiniMax Code 这条线路上的。
+* @param agent - 事件里的调用方 agent。
+* @returns 是 MiniMax Code 时为 true。
+*/
+function isMinimaxSession(agent) {
+	return minimaxSessionRouteOf(agent).provider === MINIMAX_CODE_PROVIDER$1;
+}
+/** 无损的数字字符串：允许小数、指数、前导负号。 */
+const NUMERIC_STRING = /^-?(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][+-]?\d+)?$/u;
+/**
+* 顶层已知的数字字段（没有 schema 时按字段名强转）。
+*
+* 这些是本宿主工具面里**本来就该是数字**的字段：模型把它们写成字符串时，
+* schema 校验会直接失败，而它们强转回来是**无损**的。
+*/
+const NUMERIC_TOOL_FIELDS = Object.freeze([
+	"offset",
+	"limit",
+	"timeout",
+	"timeoutMs",
+	"timeout_ms",
+	"line",
+	"delta_x",
+	"delta_y",
+	"x",
+	"y",
+	"ref"
+]);
+/**
+* 顶层已知的布尔字段（没有 schema 时按字段名强转）。
+*
+* 只有字面 `"true"` / `"false"` 才转：别的写法（`"1"`、`"yes"`）在布尔
+* 字段上是**有歧义**的，转过去等于替模型猜了一个开关的状态。
+*/
+const BOOLEAN_TOOL_FIELDS = Object.freeze([
+	"replace_all",
+	"wait",
+	"run_in_background",
+	"new_tab",
+	"multi_select"
+]);
+/**
+* 按 schema 强转一个值，并把强转过程记进 `fixes`。
+*
+* 只认三种形状：
+*
+* - `type: 'array'`：值是单键对象 `{ item: X }` 时拆包（官方 Pi 的
+*   `item_wrapper` 形状），然后按 `items` 递归每个元素；
+* - `type: 'number' | 'integer'`：值是**无损**数字字符串时转成数字
+*   （`integer` 还要求转出来确实是整数，`"2.5"` 不转）；
+* - `type: 'boolean'`：值是 `"true"` / `"false"` 时转成布尔。
+*
+* @param value - 当前值。
+* @param schema - 这一层的 JSON Schema。
+* @param fixes - 修复项累加器。
+* @returns 强转后的值。
+*/
+function coerceBySchema(value, schema, fixes) {
+	if (!isRecord$50(schema)) return value;
+	const type = schema["type"];
+	if (type === "array") {
+		let current = value;
+		if (isPlainRecord$1(current) && Object.keys(current).length === 1 && "item" in current) {
+			const inner = current["item"];
+			current = Array.isArray(inner) ? [...inner] : [inner];
+			fixes.push("item_wrapper");
+		}
+		const items = schema["items"];
+		if (Array.isArray(current) && items !== void 0) current = current.map((entry) => coerceBySchema(entry, items, fixes));
+		return current;
+	}
+	if (type === "number" || type === "integer") {
+		if (typeof value === "string" && NUMERIC_STRING.test(value)) {
+			const parsed = Number(value);
+			if (Number.isFinite(parsed) && (type !== "integer" || Number.isInteger(parsed))) {
+				fixes.push("number_string");
+				return parsed;
+			}
+		}
+		return value;
+	}
+	if (type === "boolean") {
+		if (value === "true") {
+			fixes.push("boolean_string");
+			return true;
+		}
+		if (value === "false") {
+			fixes.push("boolean_string");
+			return false;
+		}
+		return value;
+	}
+	if (type === "object") {
+		const properties = schema["properties"];
+		if (!isPlainRecord$1(value) || !isRecord$50(properties)) return value;
+		const next = { ...value };
+		for (const [key, subSchema] of Object.entries(properties)) {
+			if (!(key in next)) continue;
+			next[key] = coerceBySchema(next[key], subSchema, fixes);
+		}
+		return next;
+	}
+	const properties = schema["properties"];
+	if (isPlainRecord$1(value) && isRecord$50(properties)) {
+		const next = { ...value };
+		for (const [key, subSchema] of Object.entries(properties)) {
+			if (!(key in next)) continue;
+			next[key] = coerceBySchema(next[key], subSchema, fixes);
+		}
+		return next;
+	}
+	const items = schema["items"];
+	if (Array.isArray(value) && items !== void 0) return value.map((entry) => coerceBySchema(entry, items, fixes));
+	return value;
+}
+/**
+* 没有 schema 时按字段名做的顶层强转。
+*
+* 只动**顶层**的已知字段：嵌套结构没有 schema 就没有依据，猜不得。
+* @param args - 参数副本。
+* @param fixes - 修复项累加器。
+*/
+function coerceByKnownFields(args, fixes) {
+	for (const field of NUMERIC_TOOL_FIELDS) {
+		const current = args[field];
+		if (typeof current !== "string" || !NUMERIC_STRING.test(current)) continue;
+		const parsed = Number(current);
+		if (!Number.isFinite(parsed)) continue;
+		args[field] = parsed;
+		fixes.push("number_string");
+	}
+	for (const field of BOOLEAN_TOOL_FIELDS) {
+		const current = args[field];
+		if (current === "true") {
+			args[field] = true;
+			fixes.push("boolean_string");
+		} else if (current === "false") {
+			args[field] = false;
+			fixes.push("boolean_string");
+		}
+	}
+}
+/**
+* 修复一次工具调用的参数。
+*
+* 三步，顺序固定：
+*
+* 1. **`edits` 字符串解析**（官方 `edit-prepare-arguments.ts`）：`edits` 是
+*    JSON 字符串时解析回数组。解析失败就**原样留着**，让 schema 校验照常报错
+*    ——在这里猜一个数组比不猜更糟。
+* 2. **按 schema 强转**（官方 `direct-call-arguments.ts` / `input-validation.ts`）：
+*    `item_wrapper` 拆包、数字字符串转数字、布尔字符串转布尔，并递归进
+*    `properties` 与 `items`。
+* 3. **按字段名强转**：**没有传 schema** 时才做，因为那时唯一的依据就是字段名。
+*
+* 入参**不被修改**：返回值是一份新对象。
+*
+* @param toolName - 工具名（只用于日志与将来按工具定制规则）。
+* @param args - 原始参数。
+* @param schema - 该工具的 JSON Schema（参数面），可选。
+* @returns 修复后的参数与修复项列表。
+*/
+function repairMinimaxToolArguments(toolName, args, schema) {
+	if (!isPlainRecord$1(args)) return {
+		value: args,
+		fixes: []
+	};
+	const fixes = [];
+	const working = { ...args };
+	if (typeof working["edits"] === "string") {
+		const parsed = tryParseJson(working["edits"]);
+		if (Array.isArray(parsed)) {
+			working["edits"] = parsed;
+			fixes.push("edits_json_string");
+		}
+	}
+	if (schema !== void 0) {
+		const coerced = coerceBySchema(working, schema, fixes);
+		if (isPlainRecord$1(coerced)) Object.assign(working, coerced);
+	} else coerceByKnownFields(working, fixes);
+	return {
+		value: working,
+		fixes
+	};
+}
+/**
+* 解析一段 JSON，失败时返回 undefined（不抛）。
+* @param text - 待解析的文本。
+* @returns 解析结果，或 undefined。
+*/
+function tryParseJson(text) {
+	try {
+		return JSON.parse(text);
+	} catch {
+		return;
+	}
+}
+/**
+* 直接调用需要提醒的工具名。
+*
+* 这些是**原生**工具：在 PTC 模式里模型只能直接调 `run_code`，原生工具要
+* 从 `run_code` 程序里调。
+*/
+const DIRECT_CALL_REMINDER_TOOLS = Object.freeze([
+	"read",
+	"edit",
+	"write",
+	"grep",
+	"glob",
+	"win_bash",
+	"bash",
+	"pwsh"
+]);
+/**
+* 各个原生工具在 `run_code` 里的调用示例参数。
+*
+* 例子必须**真的能跑**：提醒里给一个跑不通的示例，比不给示例更糟。
+*/
+const DIRECT_CALL_EXAMPLE_ARGS = Object.freeze({
+	read: "{ file_path: \"README.md\" }",
+	write: "{ file_path: \"README.md\", content: \"...\" }",
+	edit: "{ file_path: \"README.md\", old_string: \"...\", new_string: \"...\" }",
+	grep: "{ pattern: \"TODO\", path: \".\" }",
+	glob: "{ pattern: \"src/**/*.ts\" }",
+	bash: "{ command: \"ls -la\" }",
+	win_bash: "{ command: \"ls -la\" }",
+	pwsh: "{ command: \"Get-ChildItem\" }"
+});
+/**
+* 造一条 `run_code` 调用示例。
+* @param toolName - 工具名。
+* @returns 一句可读的调用示例。
+*/
+function directCallExampleOf(toolName) {
+	return `await tools.${toolName}(${DIRECT_CALL_EXAMPLE_ARGS[toolName] ?? "{ ... }"})`;
+}
+/**
+* 渲染 PTC 直调提醒。
+*
+* 文案与官方 `direct-call-reminder.ts` 同形：
+*
+* ```text
+* <system-reminder>
+* Do not call read directly in this turn. Call it inside run_code: await tools.read({ file_path: "README.md" }). Put your next tool calls in one run_code program.
+* </system-reminder>
+* ```
+*
+* @param toolNames - 被直接调用的工具名。
+* @returns 提醒正文。
+*/
+function renderDirectCallReminder(toolNames) {
+	const names = [...new Set(toolNames.filter((name) => name !== ""))];
+	if (names.length === 0) return [
+		"<system-reminder>",
+		"Do not call tools directly in this turn. Call them inside run_code. Put your next tool calls in one run_code program.",
+		"</system-reminder>"
+	].join("\n");
+	return [
+		"<system-reminder>",
+		`Do not call ${names.join(", ")} directly in this turn. Call ${names.length === 1 ? "it" : "them"} inside run_code: ${names.slice(0, 2).map((name) => directCallExampleOf(name)).join("; ")}. Put your next tool calls in one run_code program.`,
+		"</system-reminder>"
+	].join("\n");
+}
+/**
+* 官方提醒文案的后缀：提醒只对当前这一轮有效。
+* @returns 后缀正文。
+*/
+const TURN_ONLY_SUFFIX = " This is a temporary runtime reminder for the current Turn only, not a user preference or a durable rule; do not save this reminder or generalize it into Memory, Skills, or other persistent instruction files for future Turns or sessions.";
+/**
+* 渲染「同一个动作立刻重复」提醒。
+*
+* 与官方 `packages/agent-modules/runaway-guard/src/reminder.ts` 逐字一致。
+* @param occurrences - 连击次数。
+* @returns 提醒正文。
+*/
+function renderExactActionRepeatReminder(occurrences) {
+	return `[runaway guard] The immediately repeated tool action has now occurred ${occurrences} times with the same arguments. Do not repeat it unchanged. Inspect the results already available, then either change strategy with a concrete expected state change, or report the blocker. Repetition alone does not establish that the task is complete or impossible.${TURN_ONLY_SUFFIX}`;
+}
+/**
+* 渲染「同一族错误连续发生」提醒。
+*
+* 与官方 `packages/agent-modules/runaway-guard/src/reminder.ts` 逐字一致。
+* @param occurrences - 连击次数。
+* @returns 提醒正文。
+*/
+function renderSameErrorFamilyReminder(occurrences) {
+	return `[runaway guard] The same tool error family has now occurred ${occurrences} times in a row. Do not retry the same route unchanged. Diagnose the cause, change one controlled variable or switch route. Do not infer that the entire task has failed from this signal.${TURN_ONLY_SUFFIX}`;
+}
+/**
+* 渲染「反复轮询同一个后台任务」提醒。
+*
+* 与官方 `packages/agent-modules/runaway-guard/src/reminder.ts` 逐字一致：
+* 三次读同一个任务时写的是 `Three`，其它次数写数字。
+* @param occurrences - 连击次数。
+* @returns 提醒正文。
+*/
+function renderPollingRepeatReminder(occurrences) {
+	return [
+		"<system-reminder>",
+		`${occurrences === 3 ? "Three" : String(occurrences)} task_output reads for the same task have returned an unchanged status and output cursor. Avoid repeated polling; you will be notified automatically and this conversation will resume when the background task completes.`,
+		"This reminder applies only to the current Turn. Do not save or generalize it into Memory, Skills, or other persistent instructions.",
+		"</system-reminder>"
+	].join("\n");
+}
+/**
+* 轮询类工具名（后台任务的结果读取）。
+*
+* 这两个工具读的是后台任务的状态；反复读同一个任务而输出没变，就是官方说的
+* 「polling repeat」。
+*/
+const POLLING_TOOL_NAMES = Object.freeze(["job_output", "task_output"]);
+/**
+* 规范化一段错误文本，取它的「族」。
+*
+* 族的作用是**把同一类错误认成同一类**：路径里的数字、id、时间戳都不该让
+* 两次一模一样的失败看起来是两回事。
+* @param text - 错误文本。
+* @returns 族标识。
+*/
+function errorFamilyOf(text) {
+	if (text === void 0 || text === "") return "unknown";
+	return (text.split(/\r?\n/, 1)[0] ?? "").replace(/\d+/g, "#").slice(0, 200);
+}
+/**
+* 把参数规范化成可比较的字符串（键排序）。
+* @param value - 参数值。
+* @returns 规范化后的 JSON 文本。
+*/
+function canonicalize(value) {
+	return JSON.stringify(sortJsonValue$1(value));
+}
+/**
+* 深拷贝一份键排序后的 JSON 值。
+* @param value - 任意值。
+* @returns 排序后的副本。
+*/
+function sortJsonValue$1(value) {
+	if (Array.isArray(value)) return value.map(sortJsonValue$1);
+	if (isPlainRecord$1(value)) {
+		const sorted = {};
+		for (const key of Object.keys(value).sort()) sorted[key] = sortJsonValue$1(value[key]);
+		return sorted;
+	}
+	return value;
+}
+/**
+* 造一台工具级失控守卫。
+*
+* 三种可提醒信号（顺序即官方提醒优先级）：
+*
+* 1. `same_error_family` —— 同一个工具连续报同一族错误；
+* 2. `exact_action_repeat` —— 同一次动作（同名 + 同参数）立刻重复；
+* 3. `polling_repeat` —— 连续轮询同一个后台任务而输出没变。
+*
+* `abab_action_cycle`（A B A B 的循环）**只记录不提醒**：官方把它排在提醒
+* 候选之外——模型在两个动作之间来回跳时，提醒它「别重复」是没有意义的。
+*
+* 每轮**至多一条**提醒：官方在发出第一条后就把本轮的提醒机会用掉了。
+*
+* @param options - 守卫选项。
+* @returns 守卫。
+*/
+function createMinimaxRunawayGuard(options = {}) {
+	const threshold = options.remindAfterOccurrences ?? 3;
+	/** 同一次动作的连击。 */
+	let actionStreak;
+	/** 同一族错误的连击（键是工具名 + 错误族）。 */
+	const errorStreaks = /* @__PURE__ */ new Map();
+	/** 轮询连击（键是工具名）。 */
+	const pollingStreaks = /* @__PURE__ */ new Map();
+	/** 最近几次动作，用来认 A B A B 的循环。 */
+	const recentActions = [];
+	/** 当前正在计数的 A B 循环对。 */
+	let activeAbabKey;
+	/** 本轮是否已经提醒过。 */
+	let reminderAttempted = false;
+	/** 观察到的信号。 */
+	const signals = [];
+	/**
+	* 记一条信号。
+	* @param kind - 信号种类。
+	* @param occurrences - 连击次数。
+	* @param toolName - 工具名。
+	*/
+	const record = (kind, occurrences, toolName) => {
+		signals.push({
+			kind,
+			occurrences,
+			toolName
+		});
+	};
+	/**
+	* 判断这次执行是不是一次「原地不动」的轮询。
+	* @param observation - 观察事实。
+	* @returns 是轮询时为 true。
+	*/
+	const isPolling = (observation) => {
+		if (!POLLING_TOOL_NAMES.includes(observation.toolName)) return false;
+		return (isPlainRecord$1(observation.arguments) ? observation.arguments : void 0)?.["wait"] !== true;
+	};
+	return {
+		observe(observation) {
+			const toolName = observation.toolName;
+			const actionKey = `${toolName}\u0000${canonicalize(observation.arguments)}`;
+			const countsAsAction = !POLLING_TOOL_NAMES.includes(toolName);
+			if (countsAsAction) {
+				if (actionStreak?.key === actionKey) actionStreak = {
+					key: actionKey,
+					count: actionStreak.count + 1
+				};
+				else actionStreak = {
+					key: actionKey,
+					count: 1
+				};
+				record("exact_action_repeat", actionStreak.count, toolName);
+			}
+			if (countsAsAction) {
+				recentActions.push(actionKey);
+				if (recentActions.length > 4) recentActions.shift();
+				if (recentActions.length === 4) {
+					const [a, b, c, d] = recentActions;
+					if (a !== void 0 && b !== void 0 && a !== b && a === c && b === d) {
+						const episode = `${a}\u0000${b}`;
+						if (activeAbabKey !== episode) {
+							activeAbabKey = episode;
+							record("abab_action_cycle", 2, toolName);
+						}
+					} else activeAbabKey = void 0;
+				}
+			}
+			if (observation.isError === true) {
+				const key = `${toolName}\u0000${observation.errorCode ?? errorFamilyOf(observation.errorText)}`;
+				const previous = errorStreaks.get(key);
+				const count = previous === void 0 ? 1 : previous.count + 1;
+				errorStreaks.set(key, {
+					toolName,
+					count
+				});
+				record("same_error_family", count, toolName);
+			} else for (const [key, entry] of [...errorStreaks]) if (entry.toolName === toolName) errorStreaks.delete(key);
+			if (isPolling(observation)) {
+				const key = `${toolName}\u0000${canonicalize(observation.arguments)}\u0000${observation.resultText ?? ""}`;
+				const previous = pollingStreaks.get(toolName);
+				const count = previous !== void 0 && previous.key === key ? previous.count + 1 : 1;
+				pollingStreaks.set(toolName, {
+					key,
+					count
+				});
+				record("polling_repeat", count, toolName);
+			} else pollingStreaks.delete(toolName);
+			if (reminderAttempted) return void 0;
+			const errorCandidate = [...errorStreaks.values()].find((entry) => entry.count >= threshold);
+			if (errorCandidate !== void 0) {
+				reminderAttempted = true;
+				return {
+					kind: "same_error_family",
+					occurrences: errorCandidate.count,
+					text: renderSameErrorFamilyReminder(errorCandidate.count)
+				};
+			}
+			if (countsAsAction && actionStreak !== void 0 && actionStreak.count >= threshold) {
+				reminderAttempted = true;
+				return {
+					kind: "exact_action_repeat",
+					occurrences: actionStreak.count,
+					text: renderExactActionRepeatReminder(actionStreak.count)
+				};
+			}
+			const pollingCandidate = [...pollingStreaks.values()].find((entry) => entry.count >= threshold);
+			if (pollingCandidate !== void 0) {
+				reminderAttempted = true;
+				return {
+					kind: "polling_repeat",
+					occurrences: pollingCandidate.count,
+					text: renderPollingRepeatReminder(pollingCandidate.count)
+				};
+			}
+		},
+		reset() {
+			actionStreak = void 0;
+			errorStreaks.clear();
+			pollingStreaks.clear();
+			recentActions.length = 0;
+			activeAbabKey = void 0;
+			reminderAttempted = false;
+		},
+		get signals() {
+			return signals;
+		}
+	};
+}
+/**
+* 读宿主上下文上的工具注册面。
+* @param ctx - 宿主上下文。
+* @returns 工具注册面；没有时为 undefined。
+*/
+function toolsServiceOf$1(ctx) {
+	const read = ctx.get;
+	if (typeof read === "function") try {
+		const found = read.call(ctx, "tools");
+		if (found !== void 0) return found;
+	} catch {}
+	const direct = ctx.tools;
+	return direct === void 0 ? void 0 : direct;
+}
+/**
+* 判断一个会话是不是处于 PTC 模式（模型只能直接调 `run_code`）。
+*
+* 三个来源，按可靠性排序：
+*
+* 1. **注册表自己的判定面**（结构探测 `modeFor`）：这是宿主真正用来决定
+*    「这个作用域是 native 还是 ptc」的那一个函数，读到的就是事实。
+* 2. **保留通道的可见性**（公开 API `get('run_code', scope)`）：`run_code` 这条
+*    传输通道只对 PTC 作用域可见，所以「能不能查到它」就是同一个问题的公开问法。
+* 3. **agent 自己声明的呈现模式**：宿主选项里直接写了 `ptc` 时的兜底。
+*
+* 读不出来时**当作不是 PTC**：提醒是加法，不是减法，宁可少提醒也不要在
+* native 会话里催模型去用 `run_code`。
+*
+* @param agent - 调用方 agent。
+* @param tools - 工具注册面。
+* @returns 处于 PTC 模式时为 true。
+*/
+function isPtcSessionOf(agent, tools) {
+	const mode = declaredModeOf(tools, agent);
+	if (mode !== void 0) return mode;
+	if (runCodeTransportVisible(tools, agent) === true) return true;
+	return declaredPresentationOf(agent) === "ptc";
+}
+/**
+* 读注册表自己的呈现模式判定面。
+* @param tools - 工具注册面。
+* @param agent - 调用方 agent。
+* @returns true/false 表示读到了；undefined 表示这一代宿主没有这条接缝。
+*/
+function declaredModeOf(tools, agent) {
+	const modeFor = (isRecord$50(tools) ? tools : void 0)?.modeFor;
+	if (typeof modeFor !== "function") return void 0;
+	try {
+		const mode = modeFor.call(tools, agent);
+		if (mode === "ptc") return true;
+		if (mode === "native") return false;
+	} catch {}
+}
+/**
+* 看 `run_code` 这条保留通道对这个作用域是否可见。
+* @param tools - 工具注册面。
+* @param agent - 调用方 agent。
+* @returns true/false 表示读到了；undefined 表示这一代宿主没有这条接缝。
+*/
+function runCodeTransportVisible(tools, agent) {
+	const get = (isRecord$50(tools) ? tools : void 0)?.get;
+	if (typeof get !== "function") return void 0;
+	try {
+		return get.call(tools, "run_code", agent) !== void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* 读 agent 自己声明的呈现模式。
+* @param agent - 调用方 agent。
+* @returns 'ptc' / 'native' / undefined。
+*/
+function declaredPresentationOf(agent) {
+	const record = isRecord$50(agent) ? agent : void 0;
+	const options = isRecord$50(record?.["options"]) ? record?.["options"] : void 0;
+	const agentOptions = isRecord$50(record?.["agentOptions"]) ? record?.["agentOptions"] : void 0;
+	const preset = isRecord$50(record?.["preset"]) ? record?.["preset"] : void 0;
+	const candidates = [
+		options?.["presentation"],
+		options?.["toolPresentation"],
+		options?.["toolsMode"],
+		options?.["mode"],
+		agentOptions?.["presentation"],
+		preset?.["presentation"]
+	];
+	for (const candidate of candidates) {
+		if (candidate === "ptc") return "ptc";
+		if (candidate === "native") return "native";
+	}
+}
+/**
+* 判断一次工具执行是不是「模型直接调了原生工具」。
+*
+* 直接调用的判据是**没有父调用**：嵌套调用（`run_code` 程序里的子调用）带
+* 父标记，直接调用不带。DSH 用 `parent` 这枚不透明令牌，官方 minimax-code
+* 用 `parentToolCallId`，两个都认。
+*
+* @param exec - 工具执行。
+* @returns 直接调用时为 true。
+*/
+function isDirectToolCall(exec) {
+	const record = isRecord$50(exec) ? exec : void 0;
+	if (record?.["parent"] !== void 0) return false;
+	if (record?.["parentToolCallId"] !== void 0) return false;
+	return true;
+}
+/**
+* 读一次执行是不是「模型直接调了需要提醒的原生工具」。
+* @param exec - 工具执行。
+* @returns 工具名；不是这类调用时为 undefined。
+*/
+function directCallToolNameOf(exec) {
+	const name = stringOf$4((isRecord$50(exec) ? exec : void 0)?.["name"]);
+	if (name === void 0 || !DIRECT_CALL_REMINDER_TOOLS.includes(name)) return void 0;
+	if (!isDirectToolCall(exec)) return void 0;
+	return name;
+}
+/**
+* 把一条 post-execute 决策接上附加上下文，保住它原有的形状。
+* @param decision - `next()` 交回来的决策。
+* @param contexts - 要追加的上下文。
+* @returns 追加后的决策。
+*/
+function withAdditionalContexts$1(decision, contexts) {
+	const additionalContexts = [...decision.additionalContexts ?? [], ...contexts];
+	if (decision.kind === "block") return {
+		kind: "block",
+		feedback: decision.feedback,
+		additionalContexts
+	};
+	if (decision.value !== void 0) return {
+		kind: "accept",
+		value: decision.value,
+		additionalContexts
+	};
+	if (decision.content !== void 0) return {
+		kind: "accept",
+		content: decision.content,
+		additionalContexts
+	};
+	return {
+		kind: "accept",
+		additionalContexts
+	};
+}
+/**
+* 造一条 PTC 直调提醒上下文。
+* @param toolName - 被直接调用的工具名。
+* @returns 可直接放进 `additionalContexts` 的用户角色消息。
+*/
+function createDirectCallReminder(toolName) {
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text: renderDirectCallReminder([toolName])
+		}],
+		source: {
+			kind: "minimax-direct-call-reminder",
+			form: "notice",
+			summary: `PTC direct call: ${toolName}`
+		}
+	});
+}
+/**
+* 造一条失控守卫提醒上下文。
+* @param reminder - 提醒。
+* @returns 可直接放进 `additionalContexts` 的用户角色消息。
+*/
+function createRunawayReminder(reminder) {
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text: reminder.text
+		}],
+		source: {
+			kind: "minimax-runaway-guard",
+			form: "notice",
+			summary: `runaway guard: ${reminder.kind} x${reminder.occurrences}`
+		}
+	});
+}
+/**
+* 读一次执行的结果是不是失败。
+* @param result - 工具执行结果。
+* @returns 失败时为 true。
+*/
+function isErrorResult(result) {
+	return isRecord$50(result) && result["isError"] === true;
+}
+/**
+* 读一次执行的结构化错误码。
+* @param result - 工具执行结果。
+* @returns 错误码；没有时为 undefined。
+*/
+function errorCodeOf$1(result) {
+	if (!isRecord$50(result)) return void 0;
+	const error = result["error"];
+	if (!isRecord$50(error)) return void 0;
+	const info = error["info"];
+	if (!isRecord$50(info)) return void 0;
+	return stringOf$4(info["code"]);
+}
+/**
+* 读一次执行的失败文本。
+* @param result - 工具执行结果。
+* @returns 失败文本；没有时为 undefined。
+*/
+function errorTextOf(result) {
+	if (!isRecord$50(result)) return void 0;
+	const error = result["error"];
+	if (!isRecord$50(error)) return void 0;
+	return stringOf$4(error["message"]);
+}
+/**
+* 读一次执行的结果文本（轮询判定用）。
+* @param result - 工具执行结果。
+* @returns 结果文本；没有时是空串。
+*/
+function resultTextOf(result) {
+	if (!isRecord$50(result)) return "";
+	const content = result["content"];
+	if (!Array.isArray(content)) return "";
+	const parts = [];
+	for (const block of content) if (isRecord$50(block) && block["type"] === "text") parts.push(stringOf$4(block["text"]) ?? "");
+	return parts.join("\n");
+}
+/**
+* 找一次工具调用的参数 schema。
+* @param tools - 工具注册面。
+* @param name - 工具名。
+* @param agent - 调用方 agent。
+* @returns JSON Schema；找不到时为 undefined。
+*/
+function schemaOf(tools, name, agent) {
+	const get = tools?.get;
+	if (typeof get !== "function") return void 0;
+	try {
+		const definition = get.call(tools, name, agent);
+		if (!isRecord$50(definition)) return void 0;
+		return definition["parameters"];
+	} catch {
+		return;
+	}
+}
+/**
+* 就地把一次执行的参数改成修复后的形状。
+*
+* **尽力而为**：新一代宿主把执行参数**冻结**了（`deepFreeze`），写回会抛，
+* 于是这次修复在那一代上落不了地 —— 但函数本身不抛，调用方也拿不到错误。
+* 老一代宿主不冻结参数时，写回是真正生效的。
+*
+* @param execution - 工具执行。
+* @param tools - 工具注册面。
+*/
+function repairExecutionArguments(execution, tools) {
+	const record = isRecord$50(execution) ? execution : void 0;
+	const args = record?.["arguments"];
+	if (!isPlainRecord$1(args)) return;
+	const name = stringOf$4(record?.["name"]);
+	if (name === void 0) return;
+	const agent = record?.["agent"];
+	const repaired = repairMinimaxToolArguments(name, args, schemaOf(tools, name, agent));
+	if (repaired.fixes.length === 0) return;
+	const target = repaired.value;
+	if (!isPlainRecord$1(target)) return;
+	try {
+		for (const key of Object.keys(args)) if (!(key in target)) delete args[key];
+		Object.assign(args, target);
+	} catch {}
+}
+/**
+* 装上 MiniMax Code 的运行时增强。
+*
+* @param ctx - 宿主插件上下文。
+* @param options - 增强选项。
+* @returns 卸载函数。
+*/
+function installMinimaxRuntimeEnhancements(ctx, options = {}) {
+	/** 登记一个副作用；上下文没有 effect 时立即执行（测试用假上下文）。 */
+	const track = (execute, label) => {
+		if (typeof ctx.effect === "function") ctx.effect(execute, label);
+		else execute();
+	};
+	const tools = toolsServiceOf$1(ctx);
+	/** 每个 agent 一台守卫：连击是**这个会话**的事。 */
+	const guards = /* @__PURE__ */ new WeakMap();
+	/**
+	* 没有 agent 的执行（有人绕过 agent-loop 直接调 `ctx.tools.execute`）共用这一台。
+	*
+	* 它是**一台**，不是每次新建：连击要跨调用累积，新建一台等于永远停在第一次。
+	*/
+	const agentlessGuard = createMinimaxRunawayGuard(options);
+	/**
+	* 取一个 agent 的守卫。
+	* @param agent - 调用方 agent。
+	* @returns 守卫。
+	*/
+	const guardOf = (agent) => {
+		const key = isRecord$50(agent) ? agent : void 0;
+		if (key === void 0) return agentlessGuard;
+		const existing = guards.get(key);
+		if (existing !== void 0) return existing;
+		const created = createMinimaxRunawayGuard(options);
+		guards.set(key, created);
+		return created;
+	};
+	track(() => {
+		if (typeof tools?.guard !== "function") return () => void 0;
+		const dispose = tools.guard((execution) => {
+			try {
+				if (!isMinimaxSession(isRecord$50(execution) ? execution["agent"] : void 0)) return void 0;
+				repairExecutionArguments(execution, tools);
+			} catch {}
+		});
+		return () => {
+			dispose?.();
+		};
+	}, "dsh-chatgpt-subscription: minimax argument repair guard");
+	const disposePreExecute = ctx.on?.("tools/pre-execute", (async (exec, next) => {
+		try {
+			if (isMinimaxSession(exec.agent)) repairExecutionArguments(exec, tools);
+		} catch {}
+		return next();
+	}));
+	const disposePostExecute = ctx.on?.("tools/post-execute", (async (exec, result, next) => {
+		const decision = await next();
+		try {
+			const agent = exec.agent;
+			if (!isMinimaxSession(agent)) return decision;
+			const contexts = [];
+			const directName = directCallToolNameOf(exec);
+			if (directName !== void 0 && isPtcSessionOf(agent, tools)) contexts.push(createDirectCallReminder(directName));
+			const reminder = guardOf(agent).observe({
+				toolName: exec.name,
+				arguments: exec.arguments,
+				isError: isErrorResult(result),
+				errorCode: errorCodeOf$1(result),
+				errorText: errorTextOf(result),
+				resultText: resultTextOf(result)
+			});
+			if (reminder !== void 0) contexts.push(createRunawayReminder(reminder));
+			if (contexts.length === 0) return decision;
+			return withAdditionalContexts$1(decision, contexts);
+		} catch {
+			return decision;
+		}
+	}));
+	const disposePreStep = ctx.on?.("agent/pre-step", (async (payload, next) => {
+		const decision = await next();
+		try {
+			if (!(Array.isArray(payload?.messages) ? payload.messages : []).some((message) => {
+				const source = isRecord$50(message) ? message["source"] : void 0;
+				return isRecord$50(source) && source["kind"] === "user";
+			})) return decision;
+			const agent = payload?.agent;
+			if (isRecord$50(agent)) guards.get(agent)?.reset();
+		} catch {
+			return decision;
+		}
+		return decision;
+	}));
+	const disposeDisposed = ctx.on?.("agent/disposed", ((payload) => {
+		const agent = payload?.agent;
+		if (isRecord$50(agent)) guards.delete(agent);
+	}));
+	return () => {
+		disposePreExecute?.();
+		disposePostExecute?.();
+		disposePreStep?.();
+		disposeDisposed?.();
+	};
+}
+//#endregion
 //#region src/host/minimax-code/modalities.ts
 /**
 * MiniMax Code's video vocabulary.
@@ -37334,7 +38594,7 @@ function videoOmissionText(reason, label) {
 * a caller that opts out (MinimaxRequestOptions.cacheControl === false) gets
 * the original string body byte-for-byte.
 */
-function isRecord$48(value) {
+function isRecord$49(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$20(value) {
@@ -37387,7 +38647,7 @@ const SUPPORTED_IMAGE_MEDIA_TYPES$2 = /* @__PURE__ */ new Set([
 ]);
 function attachmentOf$2(block) {
 	const attachment = block.attachment;
-	return isRecord$48(attachment) ? attachment : void 0;
+	return isRecord$49(attachment) ? attachment : void 0;
 }
 function attachmentLabel$2(block) {
 	const attachment = attachmentOf$2(block);
@@ -37423,7 +38683,7 @@ function textOf$6(content) {
 	if (!Array.isArray(content)) return "";
 	const parts = [];
 	for (const block of content) {
-		if (!isRecord$48(block)) continue;
+		if (!isRecord$49(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") parts.push(sanitizeText$6(block.text));
 		else if (block.type === "tool-result") parts.push(textOf$6(block.content));
 	}
@@ -37432,7 +38692,7 @@ function textOf$6(content) {
 function toolResultText$6(blocks) {
 	if (!Array.isArray(blocks)) return "";
 	return blocks.map((block) => {
-		if (!isRecord$48(block)) return "";
+		if (!isRecord$49(block)) return "";
 		if (block.type === "text" && typeof block.text === "string") return sanitizeText$6(block.text);
 		if (block.type === "tool-result") return toolResultText$6(block.content);
 		if (block.type === "image") return "[image: " + (attachmentLabel$2(block) ?? "attached image") + "]";
@@ -37451,7 +38711,7 @@ function toolResultBlocks(blocks, images) {
 	const out = [];
 	let hasImage = false;
 	for (const block of blocks) {
-		if (!isRecord$48(block)) continue;
+		if (!isRecord$49(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			out.push({
 				type: "text",
@@ -37502,12 +38762,31 @@ function isToolResultMessage$6(message) {
 	return message.source?.kind === "tool";
 }
 /**
+* The rule a tool-enabled session must follow before it calls a tool.
+*
+* The official agent states it in the system prompt of every session that has
+* tools: a non-trivial tool step starts with a user-visible assistant text
+* block. Thinking does not count - a model that reasons and then calls the tool
+* without saying anything has produced a step the user cannot see, and the
+* official agent asks for that preamble explicitly.
+*
+* It is appended to the assembled system text rather than replacing it: the
+* caller's own prompt keeps its place at the head (which is the cached prefix),
+* and this rule lands after it.
+*/
+const TOOL_CALL_PREAMBLE_REMINDER = "For any non-trivial tool-call step, you MUST first send a non-empty, user-visible assistant text block. Thinking or reasoning content does not count as the preamble.";
+/**
 * Concatenated system-prompt text.
 *
 * The system prompt is the head of the prefix the service caches, so this is a
 * pure, order-stable fold of its inputs: options.system always leads and message
 * text follows in history order. Nothing per-turn is added here, because one
 * changed byte at the head invalidates the whole cached prefix.
+*
+* The ONE addition is {@link TOOL_CALL_PREAMBLE_REMINDER}, and it is added only
+* to a session that has both tools and a system prompt - a request with no tools
+* has no tool-call step to remind the model about, and a request with no system
+* text at all keeps `system === undefined` rather than gaining one.
 */
 function leadingSystemText$6(options) {
 	const parts = [];
@@ -37517,7 +38796,11 @@ function leadingSystemText$6(options) {
 		const text = textOf$6(message.content);
 		if (text !== "") parts.push(text);
 	}
-	return parts.length === 0 ? void 0 : parts.join("\n\n");
+	if (parts.length === 0) return void 0;
+	if (options.tools && options.tools.length > 0) {
+		if (!parts.join("\n\n").includes("For any non-trivial tool-call step, you MUST first send a non-empty, user-visible assistant text block. Thinking or reasoning content does not count as the preamble.")) parts.push(TOOL_CALL_PREAMBLE_REMINDER);
+	}
+	return parts.join("\n\n");
 }
 function nonSystemMessages$6(options) {
 	return options.messages.filter((message) => message.role !== "system");
@@ -37536,7 +38819,7 @@ function anthropicUserContent$1(message, images, videos, videoAccepted) {
 	if (!Array.isArray(message.content)) return [];
 	const blocks = [];
 	for (const block of message.content) {
-		if (!isRecord$48(block)) continue;
+		if (!isRecord$49(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$6(block.text);
 			if (text !== "") blocks.push({
@@ -37606,7 +38889,7 @@ function anthropicUserContent$1(message, images, videos, videoAccepted) {
 function computeVisibleContentHash(blocks) {
 	if (!Array.isArray(blocks)) return "";
 	const canonical = blocks.map((b) => {
-		if (!isRecord$48(b)) return null;
+		if (!isRecord$49(b)) return null;
 		const type = asString$20(b.type) ?? "";
 		if (type === "text" || type === "reasoning") return [type, sanitizeText$6(asString$20(b.text) ?? "")];
 		if (type === "tool-call") return [
@@ -37628,12 +38911,12 @@ function computeVisibleContentHash(blocks) {
 */
 function replayedThinkingBlock$1(message, index, expectedScope, block) {
 	const source = message.source;
-	if (source === void 0 || source === null || !isRecord$48(source)) return void 0;
+	if (source === void 0 || source === null || !isRecord$49(source)) return void 0;
 	if (source.provider && source.provider !== PROVIDER_ID$8 && source.provider !== "dsh-chatgpt-subscription") return;
 	if (source.model && expectedScope && source.model !== expectedScope.model) return;
 	const state = source.replayState;
-	if (!isRecord$48(state)) return void 0;
-	const resp = isRecord$48(state.response) ? state.response : state;
+	if (!isRecord$49(state)) return void 0;
+	const resp = isRecord$49(state.response) ? state.response : state;
 	const stateRoute = asString$20(resp.route) ?? asString$20(resp.provider);
 	const stateModel = asString$20(resp.model);
 	const stateAuthOwner = asString$20(resp.authOwner);
@@ -37641,19 +38924,19 @@ function replayedThinkingBlock$1(message, index, expectedScope, block) {
 	if (expectedScope === void 0) return void 0;
 	if (expectedScope.route && stateRoute !== expectedScope.route) return void 0;
 	if (expectedScope.model && stateModel !== expectedScope.model) return void 0;
-	if (!expectedScope.authOwner || expectedScope.authOwner.trim() === "" || stateAuthOwner !== expectedScope.authOwner) return;
+	if (!expectedScope.authOwner || expectedScope.authOwner.trim() === "") return void 0;
 	let candidate;
 	if (Array.isArray(state.blocks)) {
 		const entry = state.blocks[index];
-		if (isRecord$48(entry)) candidate = entry;
+		if (isRecord$49(entry)) candidate = entry;
 	}
 	if (candidate === void 0 && Array.isArray(resp.blocks)) {
 		const entry = resp.blocks[index];
-		if (isRecord$48(entry)) candidate = entry;
+		if (isRecord$49(entry)) candidate = entry;
 	}
 	if (candidate === void 0 && Array.isArray(resp.nativeBlocks)) {
 		const entry = resp.nativeBlocks[index];
-		if (isRecord$48(entry)) candidate = entry;
+		if (isRecord$49(entry)) candidate = entry;
 	}
 	if (candidate === void 0) return void 0;
 	if (Array.isArray(state.blocks) && state.blocks.length !== message.content.length) return void 0;
@@ -37679,7 +38962,7 @@ function anthropicAssistantContent$1(message, expectedScope) {
 	if (!Array.isArray(message.content)) return blocks;
 	for (let index = 0; index < message.content.length; index++) {
 		const block = message.content[index];
-		if (!isRecord$48(block)) continue;
+		if (!isRecord$49(block)) continue;
 		if (block.type === "text" && typeof block.text === "string") {
 			const text = sanitizeText$6(block.text);
 			if (text !== "") blocks.push({
@@ -37694,13 +38977,22 @@ function anthropicAssistantContent$1(message, expectedScope) {
 				type: "tool_use",
 				id: asString$20(block.id) ?? "toolu_" + blocks.length,
 				name: block.name,
-				input: isRecord$48(parsed) ? parsed : {}
+				input: isRecord$49(parsed) ? parsed : {}
 			});
 			continue;
 		}
 		if (block.type === "reasoning") {
 			const replay = replayedThinkingBlock$1(message, index, expectedScope, block);
-			if (replay !== void 0) blocks.push(replay);
+			if (replay !== void 0) {
+				blocks.push(replay);
+				continue;
+			}
+			const fallbackText = sanitizeText$6(typeof block.text === "string" ? block.text : "");
+			const trimmed = fallbackText.trim();
+			if (trimmed !== "" && trimmed !== "[Reasoning redacted]") blocks.push({
+				type: "text",
+				text: fallbackText
+			});
 			continue;
 		}
 	}
@@ -37777,15 +39069,17 @@ function thinkingFieldFor(modelId, requestedEffort) {
 * The level belongs at the TOP level - `output_config.effort` - and accepts
 * low, medium, high, xhigh and max. There is no `default` member: the page
 * says omitting the field means max, so the old local `default` spelling never
-* reached the wire. This line no longer leans on that: every model that has
-* levels states its default out loud, and a request that asks for nothing
-* resolves to that default instead of to an omission.
+* reached the wire. This line no longer leans on that either: every model that
+* has levels states its default as NULL, so a request that asks for nothing
+* resolves to no `output_config` at all - which is what the official agent
+* sends when the conversation picked no level.
 *
 * The level is the DEPTH, not the channel: measured, low and max differ by
 * about 3x thinking and 4x latency, and it composes with the `thinking` object.
 *
 * @returns the value for `output_config`, or undefined when the request should
-*   carry no thinking control at all.
+*   carry no thinking control at all - which is the case for an unset, empty or
+*   unknown level.
 */
 function outputConfigFor(modelId, requestedEffort) {
 	const model = catalogEntry$2(modelId);
@@ -37927,7 +39221,8 @@ function buildMinimaxRequest(options, images = NO_RESOLVED_IMAGES$2, request = {
 	const requestedEffort = options.reasoningEffort === void 0 ? null : String(options.reasoningEffort);
 	const outputConfig = outputConfigFor(options.model, requestedEffort);
 	const thinking = thinkingFieldFor(options.model, requestedEffort);
-	const thinkingEngaged = outputConfig !== void 0 || thinking?.type === "adaptive";
+	const modelDef = catalogEntry$2(options.model);
+	const thinkingEngaged = outputConfig !== void 0 || thinking?.type === "adaptive" || modelDef?.thinking === "always-on" || modelDef?.thinking === "forced-effort";
 	const caching = request.cacheControl !== false;
 	const body = {
 		model: options.model,
@@ -37943,6 +39238,7 @@ function buildMinimaxRequest(options, images = NO_RESOLVED_IMAGES$2, request = {
 		...options.tools && options.tools.length > 0 ? { tools: options.tools.map((tool) => ({
 			name: tool.name,
 			description: tool.description,
+			eager_input_streaming: true,
 			input_schema: stripMetaSchema$1(tool.parameters)
 		})) } : {},
 		...thinking === void 0 ? {} : { thinking },
@@ -37979,6 +39275,7 @@ function createStreamState(options) {
 			authOwner: options.authOwner,
 			provider: options.provider ?? PROVIDER_ID$8
 		} : void 0,
+		toolSchemas: options?.tools && options.tools.length > 0 ? new Map(options.tools.map((tool) => [tool.name, tool.parameters])) : void 0,
 		replayBlocks: [],
 		pendingThinking: /* @__PURE__ */ new Map(),
 		blocks: [],
@@ -38032,6 +39329,27 @@ function openTextBlock$4(state, type) {
 	});
 	return out;
 }
+/**
+* The argument string one finished tool call carries.
+*
+* The model writes tool arguments in shapes the schema does not accept: numbers
+* as strings, an `edits` array as a JSON string, an array wrapped in
+* `{"item": [...]}`. DSH's tool guard then refuses the call over a shape the
+* model had no way to know was wrong, so the arguments are repaired here - at
+* the end of the stream, where the whole argument string is finally known.
+*
+* The repair is LOSSLESS, and it only runs when it changes something:
+* arguments that need no repair come out byte-for-byte as they arrived, and
+* arguments that do not parse as an object are left exactly as they were.
+*/
+function finalizeToolCallArguments(name, rawArguments, toolSchemas) {
+	if (rawArguments === "") return "{}";
+	const parsed = safeJsonParse$6(rawArguments);
+	if (!isRecord$49(parsed)) return rawArguments;
+	const repaired = repairMinimaxToolArguments(name, parsed, toolSchemas?.get(name));
+	if (repaired.fixes.length === 0) return rawArguments;
+	return JSON.stringify(repaired.value);
+}
 function closeToolCalls$4(state) {
 	const out = [];
 	for (const [wireIndex, call] of [...state.toolCalls.entries()].sort((a, b) => a[0] - b[0])) {
@@ -38039,7 +39357,7 @@ function closeToolCalls$4(state) {
 			type: "tool-call",
 			id: toToolCallId(call.id),
 			name: call.name,
-			arguments: call.arguments === "" ? "{}" : call.arguments
+			arguments: finalizeToolCallArguments(call.name, call.arguments, state.toolSchemas)
 		};
 		state.blocks[call.blockIndex] = block;
 		state.replayBlocks[call.blockIndex] = null;
@@ -38152,12 +39470,12 @@ function processMinimaxStreamLine(line, state) {
 	const payload = trimmed.slice(5).trim();
 	if (payload === "" || payload === "[DONE]") return [];
 	const event = safeJsonParse$6(payload);
-	if (!isRecord$48(event)) return [];
+	if (!isRecord$49(event)) return [];
 	const type = asString$20(event.type);
 	const out = [];
 	if (type === "message_start") {
-		const message = isRecord$48(event.message) ? event.message : void 0;
-		const usage = message !== void 0 && isRecord$48(message.usage) ? message.usage : void 0;
+		const message = isRecord$49(event.message) ? event.message : void 0;
+		const usage = message !== void 0 && isRecord$49(message.usage) ? message.usage : void 0;
 		if (usage !== void 0) {
 			state.sawUsage = true;
 			state.inputTokens = numberOr$7(usage.input_tokens, 0);
@@ -38173,7 +39491,7 @@ function processMinimaxStreamLine(line, state) {
 	}
 	if (type === "content_block_start") {
 		const contentIndex = numberOr$7(event.index, 0);
-		const block = isRecord$48(event.content_block) ? event.content_block : {};
+		const block = isRecord$49(event.content_block) ? event.content_block : {};
 		const blockType = asString$20(block.type);
 		out.push(...closeCurrent$4(state));
 		if (blockType === "tool_use") {
@@ -38224,7 +39542,7 @@ function processMinimaxStreamLine(line, state) {
 				type: "reasoning",
 				text: state.current.text
 			});
-			const initialReplay = isRecord$48(event.content_block) ? structuredClone(event.content_block) : { type: blockType };
+			const initialReplay = isRecord$49(event.content_block) ? structuredClone(event.content_block) : { type: blockType };
 			state.replayBlocks[index] = initialReplay;
 			state.pendingThinking.set(contentIndex, {
 				dshIndex: index,
@@ -38252,7 +39570,7 @@ function processMinimaxStreamLine(line, state) {
 	}
 	if (type === "content_block_delta") {
 		const contentIndex = numberOr$7(event.index, 0);
-		const delta = isRecord$48(event.delta) ? event.delta : {};
+		const delta = isRecord$49(event.delta) ? event.delta : {};
 		const deltaType = asString$20(delta.type);
 		if (deltaType === "input_json_delta") {
 			const pending = state.toolCalls.get(contentIndex);
@@ -38341,7 +39659,7 @@ function processMinimaxStreamLine(line, state) {
 				type: "tool-call",
 				id: toToolCallId(pending.id),
 				name: pending.name,
-				arguments: pending.arguments === "" ? "{}" : pending.arguments
+				arguments: finalizeToolCallArguments(pending.name, pending.arguments, state.toolSchemas)
 			};
 			state.blocks[pending.blockIndex] = block;
 			out.push({
@@ -38355,10 +39673,10 @@ function processMinimaxStreamLine(line, state) {
 		return out;
 	}
 	if (type === "message_delta") {
-		const delta = isRecord$48(event.delta) ? event.delta : void 0;
+		const delta = isRecord$49(event.delta) ? event.delta : void 0;
 		const stop = delta === void 0 ? void 0 : asString$20(delta.stop_reason);
 		if (stop !== void 0 && stop !== "") state.finishReason = stop;
-		const usage = isRecord$48(event.usage) ? event.usage : void 0;
+		const usage = isRecord$49(event.usage) ? event.usage : void 0;
 		if (usage !== void 0) {
 			state.sawUsage = true;
 			state.inputTokens = numberOr$7(usage.input_tokens, state.inputTokens);
@@ -38373,7 +39691,7 @@ function processMinimaxStreamLine(line, state) {
 		return closeMinimaxStream(state);
 	}
 	if (type === "error") {
-		const error = isRecord$48(event.error) ? event.error : {};
+		const error = isRecord$49(event.error) ? event.error : {};
 		state.streamError = error;
 		throw new LlmError$1("MiniMax Code（编程订阅） stream error: " + (asString$20(error.message) ?? "unknown error"), isContextOverflow(error) ? CONTEXT_OVERFLOW_CODE : "PROVIDER_ERROR");
 	}
@@ -38446,7 +39764,7 @@ const MINIMAX_CODE_MODELS = [
 			"xhigh",
 			"max"
 		],
-		defaultReasoningEffort: "max",
+		defaultReasoningEffort: null,
 		maxAttachments: 9,
 		maxImageBytes: 10 * 1024 * 1024,
 		maxVideoBytes: 50 * 1024 * 1024,
@@ -38472,7 +39790,7 @@ const MINIMAX_CODE_MODELS = [
 			"xhigh",
 			"max"
 		],
-		defaultReasoningEffort: "max",
+		defaultReasoningEffort: null,
 		maxAttachments: 4,
 		maxImageBytes: 10 * 1024 * 1024,
 		maxVideoBytes: 50 * 1024 * 1024,
@@ -38539,14 +39857,22 @@ function isThinkingDisabledEffort(value) {
 /**
 * The effort level to put on the wire for one model.
 *
-* An unknown or off value falls back to the model's documented default, so a
-* caller cannot talk this route into a level the model does not list.
+* NULL means "this request carries no `output_config.effort`", which is what
+* the official agent sends when the conversation picked no level. Every model in
+* this catalog states null as its default, so a request that names no effort
+* states no effort.
+*
+* An unknown value falls back to the model's documented default, so a caller
+* cannot talk this route into a level the model does not list - and with that
+* default being null, an unknown level now means no level rather than the most
+* expensive one.
 */
 function effortForModel(modelId, requested) {
 	const model = minimaxCodeModelDef(modelId);
 	if (model === void 0) return null;
 	if (model.reasoningEfforts.length === 0) return null;
-	if (requested === void 0 || requested === null) return model.defaultReasoningEffort;
+	if (isThinkingDisabledEffort(requested)) return null;
+	if (requested === void 0 || requested === null || requested.trim() === "") return model.defaultReasoningEffort;
 	const normalized = requested.trim().toLowerCase();
 	return model.reasoningEfforts.find((effort) => effort === normalized) ?? model.defaultReasoningEffort;
 }
@@ -38676,7 +40002,7 @@ function authStateJsonPath(region, buildEnv = MINIMAX_CODE_BUILD_ENV) {
 function pluginCredentialPath() {
 	return path.join(dshHomeDir(), "storages", "minimax-code-credentials.json");
 }
-function isRecord$47(value) {
+function isRecord$48(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asString$19(value) {
@@ -38698,7 +40024,7 @@ function asFiniteNumber$4(value) {
 * exists to prevent.
 */
 function parseMinimaxCodeCredentials(value, fallback) {
-	if (!isRecord$47(value)) throw new Error("MiniMax Code credential payload is invalid");
+	if (!isRecord$48(value)) throw new Error("MiniMax Code credential payload is invalid");
 	const accessToken = asString$19(value.accessToken);
 	if (accessToken === void 0) throw new Error("MiniMax Code credential is missing its access token");
 	const refreshToken = asString$19(value.refreshToken);
@@ -38984,10 +40310,10 @@ async function readNativeDocument(region) {
 	} catch {
 		return null;
 	}
-	if (!isRecord$47(parsed) || !isRecord$47(parsed.records)) return null;
+	if (!isRecord$48(parsed) || !isRecord$48(parsed.records)) return null;
 	const records = parsed.records;
 	for (const [recordKey, entry] of Object.entries(records)) {
-		if (!isRecord$47(entry)) continue;
+		if (!isRecord$48(entry)) continue;
 		if (asString$19(entry.clientId) !== "mcode-public") continue;
 		if (asString$19(entry.accessToken) === void 0) continue;
 		return {
@@ -39015,7 +40341,7 @@ async function syncAuthState(region, options) {
 	} catch {
 		return;
 	}
-	if (!isRecord$47(parsed)) return;
+	if (!isRecord$48(parsed)) return;
 	const next = {
 		...parsed,
 		generation: options.generation,
@@ -39938,14 +41264,25 @@ function withTimeout$8(signal, ms) {
 *
 * The token itself never appears in a log line or an error: callers that need to
 * name a credential do so through `redactToken`.
+*
+* @param context the session identity the managed agent expects on a request
+*   that belongs to a session: the session id, the agent id inside it, and the
+*   caller's timezone offset. They are sent only when there IS a session — a
+*   request without one carries none of them.
 */
-function modelRequestHeaders(accessToken) {
+function modelRequestHeaders(accessToken, context) {
 	return {
 		authorization: "Bearer " + accessToken,
 		"anthropic-version": ANTHROPIC_VERSION$2,
+		"anthropic-beta": ANTHROPIC_INTERLEAVED_THINKING_BETA,
 		"content-type": "application/json",
 		accept: "text/event-stream",
-		"user-agent": USER_AGENT$3
+		"user-agent": MINIMAX_AGENT_USER_AGENT,
+		...context?.sessionId ? {
+			"x-mavis-session-id": context.sessionId,
+			"x-mavis-agent-id": context.agentId || "main",
+			"x-mavis-timezone-offset": String(context.timezoneOffsetSec ?? (/* @__PURE__ */ new Date()).getTimezoneOffset() * -60)
+		} : {}
 	};
 }
 /** Headers for a non-streaming call (the probe). */
@@ -40529,7 +41866,7 @@ var FileIdStore = class FileIdStore {
 		const raw = await (await import("node:fs/promises")).readFile(this.path, "utf8").catch(() => "");
 		if (raw.trim() === "") return {};
 		const parsed = JSON.parse(raw);
-		return isRecord$46(parsed) ? parsed : {};
+		return isRecord$47(parsed) ? parsed : {};
 	}
 	async write(value) {
 		if (this.path === void 0) {
@@ -40546,7 +41883,7 @@ var FileIdStore = class FileIdStore {
 	/** Shared by every in-memory instance, so they see one cache. */
 	static memory;
 };
-function isRecord$46(value) {
+function isRecord$47(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** Stable key for one (content, account) pair. */
@@ -40664,7 +42001,7 @@ function isAbort$1(error, signal) {
 }
 /** The file id from a successful upload body, or undefined. */
 function readFileId(payload) {
-	if (!isRecord$46(payload) || !isRecord$46(payload.base_resp) || !isRecord$46(payload.file)) return void 0;
+	if (!isRecord$47(payload) || !isRecord$47(payload.base_resp) || !isRecord$47(payload.file)) return void 0;
 	if (payload.base_resp["status_code"] !== 0) return void 0;
 	const fileId = payload.file["file_id"];
 	if (typeof fileId === "number") return Number.isSafeInteger(fileId) && fileId >= 0 ? String(fileId) : void 0;
@@ -40672,13 +42009,13 @@ function readFileId(payload) {
 }
 /** The service's own reason for a refusal, so the message names the cause. */
 function describeRejection(payload, raw) {
-	if (isRecord$46(payload) && isRecord$46(payload.base_resp)) {
+	if (isRecord$47(payload) && isRecord$47(payload.base_resp)) {
 		const status = payload.base_resp["status_code"];
 		const reason = payload.base_resp["status_msg"];
 		if (typeof reason === "string" && reason !== "") return "the Files API refused the upload (" + String(status) + "): " + reason;
 	}
 	if (raw.trim() === "") return "the Files API returned an empty body";
-	if (!isRecord$46(payload)) return "the Files API returned a non-JSON body: " + raw.slice(0, 120).replace(/\s+/g, " ");
+	if (!isRecord$47(payload)) return "the Files API returned a non-JSON body: " + raw.slice(0, 120).replace(/\s+/g, " ");
 	return "the Files API refused the upload without naming a reason";
 }
 /** Parse a response body without throwing on a non-JSON payload. */
@@ -41428,12 +42765,18 @@ var MinimaxCodeAdapter = class extends LlmAdapter {
 				return serialized;
 			};
 			let body = buildBodyForOwner(authOwner);
+			const rawSessionId = options.sessionId;
+			const rawAgentId = options.agentId;
+			const requestContext = {
+				sessionId: typeof rawSessionId === "string" && rawSessionId.trim() !== "" ? rawSessionId : void 0,
+				agentId: typeof rawAgentId === "string" && rawAgentId.trim() !== "" ? rawAgentId : void 0
+			};
 			let refusedBody;
 			for (let attempt = 0;; attempt += 1) {
 				try {
 					response = await fetchWithContextBudgetRecovery(fetchFn)(messagesUrl(credentials.region), {
 						method: "POST",
-						headers: modelRequestHeaders(credentials.accessToken),
+						headers: modelRequestHeaders(credentials.accessToken, requestContext),
 						body,
 						signal
 					});
@@ -41480,7 +42823,8 @@ var MinimaxCodeAdapter = class extends LlmAdapter {
 			model: options.model,
 			authOwner,
 			route: PROVIDER_ID$8,
-			provider: PROVIDER_ID$8
+			provider: PROVIDER_ID$8,
+			tools: requestOptions.tools
 		});
 		let buffer = "";
 		/**
@@ -42396,7 +43740,7 @@ const PROVIDER_ID$7 = "minimax-code";
 function videoHistoryPath() {
 	return path.join(dshHomeDir(), "storages", "minimax-code-video-history.json");
 }
-function isRecord$45(value) {
+function isRecord$46(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asNonEmptyString(value) {
@@ -42418,7 +43762,7 @@ function asFiniteNumber$3(value) {
 * @returns the normalized entry, or undefined to drop it.
 */
 function parseHistoryEntry(value) {
-	if (!isRecord$45(value)) return void 0;
+	if (!isRecord$46(value)) return void 0;
 	const createdAtMs = asFiniteNumber$3(value.createdAtMs);
 	const model = asNonEmptyString(value.model);
 	const videoPath = asNonEmptyString(value.videoPath);
@@ -42450,7 +43794,7 @@ function parseHistoryEntry(value) {
 * @returns the normalized document.
 */
 function parseHistoryDocument(value) {
-	if (!isRecord$45(value) || !Array.isArray(value.entries)) return {
+	if (!isRecord$46(value) || !Array.isArray(value.entries)) return {
 		version: 1,
 		entries: []
 	};
@@ -44503,6 +45847,429 @@ function createMinimaxGenerateVideoTool(ctx, options) {
 		}
 	});
 }
+/** 官方重复刹车的开关环境变量。 */
+const REPEAT_BREAKER_ENV = "KIMI_CODE_REPEAT_BREAKER";
+/** 第一段提醒文案。 */
+const REMINDER_TEXT_1 = "<system-reminder>\nThe same tool call has been repeated several times in a row. Before making your next call, write one sentence stating what new information you expect it to produce. Then act on that sentence: if it names something this result does not already give you, choose the action that best provides it; otherwise, continue with the evidence you already have.\n</system-reminder>";
+/**
+* 造第二段提醒文案（连击 5-7 次时用）。
+*
+* @param repeatCount - 当前连击次数，原样写进文案。
+* @returns 提醒正文。
+*/
+function makeReminderText2(repeatCount) {
+	return "<system-reminder>\nThe same tool call has now been issued " + String(repeatCount) + " times in a row. Choose exactly one of the following and state your choice before acting:\n(1) Falsification check: run the cheapest test that could conclusively disprove your current approach, if such a test exists.\n(2) Missing input: tell the user precisely what information or decision you need to proceed, and ask for it.\n(3) Conclude: deliver your best result based on the evidence already gathered, listing anything that remains uncertain.\n</system-reminder>";
+}
+/** 第三段提醒文案（连击 8 次起，以及强停那一轮）。 */
+const REMINDER_TEXT_3 = "<system-reminder>\nWrite your final response now, without any further tool calls. Cover: the current blocker, each approach you have tried and what it established, and the specific information or decision you need from the user to unblock progress. Text only.\n</system-reminder>";
+/** 强停那一轮之后，守卫用来拒绝后续工具调用的文案。 */
+const HANDOFF_VETO_TEXT = "This turn was ended by the repeat breaker after the same tool call was issued " + String(12) + " times in a row. This step accepts a text response only, so the tool call was not executed. Reply in text: the current blocker, what you tried, and what you need next.";
+/**
+* 不计入连击的协调类工具。
+*
+* 这些工具**本来就会**被反复调用：报一次进展、更新一次待办、问一次用户。把它们
+* 算进连击等于让刹车对着正常的心跳乱响。
+*/
+const REPEAT_BREAKER_EXEMPT_TOOLS = Object.freeze([
+	"progress_update",
+	"todo_write",
+	"ask_user_question",
+	"enter_plan_mode",
+	"exit_plan_mode",
+	"leave_plan_mode",
+	"create_goal",
+	"update_goal",
+	"get_goal",
+	"dispatch_ledger",
+	"present"
+]);
+/**
+* 判断一个工具是不是不计入连击的协调类工具。
+*
+* @param toolName - 工具名。
+* @returns 豁免时为 true。
+*/
+function isRepeatBreakerExemptTool(toolName) {
+	return REPEAT_BREAKER_EXEMPT_TOOLS.includes(toolName);
+}
+/** 明确表示「关掉」的环境变量取值。 */
+const DISABLED_ENV_VALUES = /* @__PURE__ */ new Set([
+	"0",
+	"false",
+	"no",
+	"off"
+]);
+/**
+* 读重复刹车当前是否启用。
+*
+* **默认开启**：刹车是保护，不是功能开关。只有环境变量明确写成
+* 0 / false / no / off（大小写不敏感）才关掉它。
+*
+* @param env - 环境变量视图；默认读 process.env。
+* @returns 启用时为 true。
+*/
+function isKimiRepeatBreakerEnabled(env = process.env) {
+	const raw = env[REPEAT_BREAKER_ENV];
+	if (typeof raw !== "string") return true;
+	return !DISABLED_ENV_VALUES.has(raw.trim().toLowerCase());
+}
+/**
+* 判断一个值是不是普通对象（原型是 Object.prototype 或 null）。
+*
+* @param value - 任意值。
+* @returns 是普通对象时为 true。
+*/
+function isPlainRecord(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === Object.prototype || prototype === null;
+}
+/**
+* 判断一个值是不是对象（数组也算）。
+*
+* @param value - 任意值。
+* @returns 是对象时为 true。
+*/
+function isRecord$45(value) {
+	return typeof value === "object" && value !== null;
+}
+/**
+* 读一个未知字段为非空字符串。
+*
+* @param value - 候选值。
+* @returns 字符串，或任何其它类型的 undefined。
+*/
+function stringOf$3(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+/**
+* 读一次工具调用所属的线路。
+*
+* provider 的四个来源按可靠性排序：**请求头快照**（唯一反映「已经真的路由到
+* 哪个 provider」的那一份）→ **模型选择面**（首步还没有请求头时唯一还能说出
+* 这一场走哪条线路的地方）→ **agent 选项**（还没发出请求时唯一的意图）→
+* **agent 自身的 provider 字段**（最后的兜底）。
+*
+* 每一处读取都独立 try/catch：任何一处抛错都只是「这一处读不到」，不改变
+* 其余来源的行为，也不让整次读取失败。
+*
+* @param agent - 事件里的调用方 agent。
+* @returns 线路信息；读不到的字段省略。
+*/
+function kimiSessionRouteOf(agent) {
+	const record = isRecord$45(agent) ? agent : void 0;
+	const session = record?.session;
+	let provider;
+	try {
+		provider = stringOf$3(session?.requestHeader?.()?.config?.provider);
+	} catch {
+		provider = void 0;
+	}
+	if (provider === void 0) try {
+		provider = stringOf$3(record?.model?.current?.()?.provider);
+	} catch {
+		provider = void 0;
+	}
+	if (provider === void 0) provider = stringOf$3(record?.options?.provider);
+	if (provider === void 0) provider = stringOf$3(record?.provider);
+	const sessionId = stringOf$3(session?.header?.id) ?? stringOf$3(record?.id);
+	return {
+		...provider === void 0 ? {} : { provider },
+		...sessionId === void 0 ? {} : { sessionId }
+	};
+}
+/**
+* 递归把一个值重排成「键名有序」的形状。
+*
+* 数组**保持原序**：数组元素的顺序本身就是语义（[1, 2] 与 [2, 1] 不是同一件事），
+* 只有对象的键名顺序没有语义。
+*
+* @param value - 当前值。
+* @returns 重排后的值。
+*/
+function sortJsonValue(value) {
+	if (Array.isArray(value)) return value.map(sortJsonValue);
+	if (!isPlainRecord(value)) return value;
+	const out = {};
+	for (const key of Object.keys(value).sort()) out[key] = sortJsonValue(value[key]);
+	return out;
+}
+/**
+* 造一次工具调用的**规范键**。
+*
+* 键 = 工具名 + 参数的规范 JSON。参数先递归重排键名再序列化，于是
+* { a: 1, b: 2 } 与 { b: 2, a: 1 } 得到**完全相同**的键 —— 否则模型只是把参数
+* 的书写顺序换了一下，刹车就看不见这是一个连击。
+*
+* @param toolName - 工具名。
+* @param args - 工具参数。
+* @returns 规范键。
+*/
+function canonicalKimiToolCallKey(toolName, args) {
+	let json;
+	try {
+		json = JSON.stringify(sortJsonValue(args));
+	} catch {
+		json = void 0;
+	}
+	return toolName + " " + (json ?? String(args));
+}
+/**
+* 造一台重复刹车。
+*
+* 状态**按会话**分开：连击是「这场对话里的同一件事重复了多少次」，两个会话
+* 互不相干。
+*
+* @returns 一台重复刹车。
+*/
+function createKimiRepeatBreaker() {
+	const sessions = /* @__PURE__ */ new Map();
+	/** 取一个会话的状态；没有就新建一个。 */
+	const stateOf = (sessionId) => {
+		const existing = sessions.get(sessionId);
+		if (existing !== void 0) return existing;
+		const created = {
+			consecutiveKey: null,
+			consecutiveCount: 0,
+			handoffActive: false
+		};
+		sessions.set(sessionId, created);
+		return created;
+	};
+	return {
+		checkBeforeExecute(sessionId, toolName, args) {
+			const state = stateOf(sessionId);
+			if (state.handoffActive) return HANDOFF_VETO_TEXT;
+			const key = canonicalKimiToolCallKey(toolName, args);
+			if (state.consecutiveKey === key && state.consecutiveCount + 1 >= 12) {
+				state.consecutiveCount += 1;
+				state.handoffActive = true;
+				return HANDOFF_VETO_TEXT;
+			}
+		},
+		recordAfterExecute(sessionId, toolName, args) {
+			if (isRepeatBreakerExemptTool(toolName)) return void 0;
+			const state = stateOf(sessionId);
+			if (state.handoffActive) return REMINDER_TEXT_3;
+			const key = canonicalKimiToolCallKey(toolName, args);
+			if (state.consecutiveKey === key) state.consecutiveCount += 1;
+			else {
+				state.consecutiveKey = key;
+				state.consecutiveCount = 1;
+			}
+			if (state.consecutiveCount >= 12) {
+				state.handoffActive = true;
+				return REMINDER_TEXT_3;
+			}
+			if (state.consecutiveCount >= 8) return REMINDER_TEXT_3;
+			if (state.consecutiveCount >= 5) return makeReminderText2(state.consecutiveCount);
+			if (state.consecutiveCount >= 3) return REMINDER_TEXT_1;
+		},
+		resetSession(sessionId) {
+			sessions.delete(sessionId);
+		}
+	};
+}
+/**
+* 读宿主上下文上的工具注册面。
+*
+* @param ctx - 宿主上下文。
+* @returns 工具注册面；没有时为 undefined。
+*/
+function toolsServiceOf(ctx) {
+	const read = ctx.get;
+	if (typeof read === "function") try {
+		const found = read.call(ctx, "tools");
+		if (found !== void 0) return found;
+	} catch {}
+	const direct = ctx.tools;
+	return direct === void 0 ? void 0 : direct;
+}
+/**
+* 已挂载的模块登记表，走一个 global symbol：同一个包的两份模块实例（npm 拷贝与
+* 仓库 link）仍然共享一次判定，而重复装两台刹车会让同一次调用被记两遍。
+*/
+const MOUNTED$1 = Symbol.for("dsh-chatgpt-subscription.mounted-modules");
+/** 本模块在登记表里的名字。 */
+const MODULE_ID$1 = "kimi-repeat-breaker";
+/**
+* 单实例守卫：本模块已挂载时放弃本次安装。
+*
+* @param ctx - 宿主上下文。
+* @returns 释放函数（交出挂载权）；已经挂载过时返回 undefined。
+*/
+function claimMount$1(ctx) {
+	const registry = globalThis;
+	const existing = registry[MOUNTED$1];
+	const mounted = existing instanceof Set ? existing : /* @__PURE__ */ new Set();
+	if (existing !== mounted) registry[MOUNTED$1] = mounted;
+	if (mounted.has(MODULE_ID$1)) return void 0;
+	mounted.add(MODULE_ID$1);
+	const release = () => {
+		mounted.delete(MODULE_ID$1);
+	};
+	if (typeof ctx.effect === "function") ctx.effect(() => release, "dsh-chatgpt-subscription: kimi repeat breaker mount");
+	return release;
+}
+/**
+* 把一条 post-execute 决策接上附加上下文，保住它原有的形状。
+*
+* @param decision - next() 交回来的决策。
+* @param contexts - 要追加的上下文。
+* @returns 追加后的决策。
+*/
+function withAdditionalContexts(decision, contexts) {
+	const additionalContexts = [...decision.additionalContexts ?? [], ...contexts];
+	if (decision.kind === "block") return {
+		kind: "block",
+		feedback: decision.feedback,
+		additionalContexts
+	};
+	if (decision.value !== void 0) return {
+		kind: "accept",
+		value: decision.value,
+		additionalContexts
+	};
+	if (decision.content !== void 0) return {
+		kind: "accept",
+		content: decision.content,
+		additionalContexts
+	};
+	return {
+		kind: "accept",
+		additionalContexts
+	};
+}
+/**
+* 造一条重复刹车的提醒上下文。
+*
+* @param text - 提醒正文。
+* @returns 可直接放进 additionalContexts 的用户角色消息。
+*/
+function createRepeatBreakerReminder(text) {
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text
+		}],
+		source: {
+			kind: "kimi-repeat-breaker",
+			form: "notice",
+			summary: "repeat breaker reminder"
+		}
+	});
+}
+/**
+* 判断一条消息是不是**真的**用户发言。
+*
+* 本模块自己追加的提醒也是 user 角色的消息（宿主要求附加上下文走 user 角色），
+* 所以判定不能只看角色：得看来源是不是 user。
+*
+* @param message - 候选消息。
+* @returns 是真人用户发言时为 true。
+*/
+function isRealUserTurn(message) {
+	if (!isRecord$45(message)) return false;
+	const role = message["role"];
+	if (role !== void 0 && role !== "user") return false;
+	const source = message["source"];
+	if (!isRecord$45(source)) return false;
+	return source["kind"] === "user";
+}
+/**
+* 装上 Kimi Code 的重复刹车。
+*
+* 四条接缝：ctx.tools.guard()（强停时拦下调用）、tools/post-execute（三段提醒）、
+* agent/pre-step（新一轮用户输入重置连击）、agent/disposed（会话拆除时清状态）。
+* 工具声明面一个字节都不改。
+*
+* @param ctx - 宿主插件上下文。
+* @param options - 安装选项。
+* @returns 卸载函数。
+*/
+function installKimiRepeatBreaker(ctx, options = {}) {
+	const releaseMount = claimMount$1(ctx);
+	if (releaseMount === void 0) return () => void 0;
+	const breaker = createKimiRepeatBreaker();
+	const enabled = options.enabled ?? (() => isKimiRepeatBreakerEnabled());
+	/** 读一次开关。读失败按**开启**处理：保护不该因为一次读失败而失效。 */
+	const isEnabled = () => {
+		try {
+			return enabled() !== false;
+		} catch {
+			return true;
+		}
+	};
+	/**
+	* 取一次执行所属的会话；不是 Kimi Code 这条线路时是 undefined。
+	*
+	* @param agent - 调用方 agent。
+	* @returns 会话标识；不该管时是 undefined。
+	*/
+	const kimiSessionIdOf = (agent) => {
+		const route = kimiSessionRouteOf(agent);
+		if (route.provider !== "kimi-code") return void 0;
+		return route.sessionId;
+	};
+	const disposeGuard = toolsServiceOf(ctx)?.guard?.((execution) => {
+		try {
+			if (!isEnabled()) return void 0;
+			const record = isRecord$45(execution) ? execution : void 0;
+			const agent = record?.["agent"];
+			const sessionId = kimiSessionIdOf(agent);
+			if (sessionId === void 0) return void 0;
+			const toolName = stringOf$3(record?.["name"]);
+			if (toolName === void 0) return void 0;
+			const veto = breaker.checkBeforeExecute(sessionId, toolName, record?.["arguments"]);
+			if (veto === HANDOFF_VETO_TEXT) return HANDOFF_VETO_TEXT;
+			return veto;
+		} catch {
+			return;
+		}
+	});
+	const disposePostExecute = ctx.on?.("tools/post-execute", (async (exec, result, next) => {
+		const decision = await next();
+		try {
+			if (!isEnabled()) return decision;
+			const agent = exec.agent;
+			const sessionId = kimiSessionIdOf(agent);
+			if (sessionId === void 0) return decision;
+			const toolName = stringOf$3(exec.name);
+			if (toolName === void 0) return decision;
+			const reminder = breaker.recordAfterExecute(sessionId, toolName, exec.arguments);
+			if (reminder === void 0) return decision;
+			return withAdditionalContexts(decision, [createRepeatBreakerReminder(reminder)]);
+		} catch {
+			return decision;
+		}
+	}));
+	const disposePreStep = ctx.on?.("agent/pre-step", (async (payload, next) => {
+		const decision = await next();
+		try {
+			if (!isRealUserTurn((Array.isArray(payload?.messages) ? payload.messages : []).at(-1))) return decision;
+			const sessionId = kimiSessionIdOf(payload?.agent);
+			if (sessionId === void 0) return decision;
+			breaker.resetSession(sessionId);
+		} catch {
+			return decision;
+		}
+		return decision;
+	}));
+	const disposeDisposed = ctx.on?.("agent/disposed", ((payload) => {
+		try {
+			const sessionId = kimiSessionIdOf(payload?.agent);
+			if (sessionId === void 0) return;
+			breaker.resetSession(sessionId);
+		} catch {}
+	}));
+	return () => {
+		disposeGuard?.();
+		disposePostExecute?.();
+		disposePreStep?.();
+		disposeDisposed?.();
+		releaseMount();
+	};
+}
 //#endregion
 //#region src/host/minimax-code/account-pool.ts
 /**
@@ -83486,6 +85253,13 @@ function markPatched$2(patched, holder, name) {
 	if (names === void 0) patched.set(holder, /* @__PURE__ */ new Set([name]));
 	else names.add(name);
 }
+/**
+* 默认受保护的 provider 名单。
+*
+* `kimi-code` 与 `minimax-code` 都按前缀缓存计费：`tools:sdk` 段一旦被改写，
+* 前缀缓存从改写处起全部作废，所以这两条线路默认都要冻结 SDK 段。
+*/
+const DEFAULT_PTC_SDK_CACHE_PROVIDERS = Object.freeze(["kimi-code", "minimax-code"]);
 /** PTC 生成的 SDK 段名。 */
 const PTC_SDK_SECTION_NAME = "tools:sdk";
 /** 没有 scope 的装配（会话标题之类）用的桶键。 */
@@ -83565,7 +85339,7 @@ function readScopeProvider(scope) {
 */
 function installPtcSdkCacheGuard(ctx, options = {}) {
 	const host = isRecord$13(ctx) ? ctx : void 0;
-	const providers = new Set(options.providers ?? ["kimi-code"]);
+	const providers = new Set(options.providers ?? DEFAULT_PTC_SDK_CACHE_PROVIDERS);
 	/** 已包装过的实例（幂等标记）。 */
 	const alreadyWrapped = /* @__PURE__ */ new WeakSet();
 	/** 已包装过的「方法宿主 + 方法名」：同一个原型不叠第二层包装。 */
@@ -84986,39 +86760,68 @@ const HEADER_SCHEMA = z.strictObject({
 	]).optional()
 });
 /**
+* 每种角色**允许携带**的字段集。
+*
+* 同一个字段集只写一次：它既出现在 kind 违规的拒绝文案尾部（模型被拒时当场
+* 唯一的纠错入口），也出现在守卫的两条 `MANDATE_KIND` 拒绝里。文案与 schema
+* 各写一套，迟早会重演"样板自己非法"那类事故。
+*/
+const MANDATE_KIND_FIELDS = {
+	dispatch: "v, kind, brief_id, run_id, idem, mandate_version, prompt_ref, policy, task, boundary, followup, parent_mandate",
+	report: "v, kind, brief_id, run_id, idem, mandate_version, prompt_ref, policy, status",
+	steer: "v, kind, brief_id, run_id, idem, mandate_version, prompt_ref, policy, grant"
+};
+/**
+* 拼出"这个方向到底该带什么"的纠错尾巴。
+*
+* 拒绝文案只说"不许带 X"时，模型只能逐个字段试错——它反复写不对的原因正在这里。
+* 把该方向的字段集直接贴在违规说明后面，一次往返就能改对。
+* @param kind - 声明了角色、却用错了字段的那种角色。
+* @returns 追加在违规说明之后的纠错尾巴。
+*/
+function kindRepairHint(kind) {
+	return " (a " + kind + " header carries exactly: " + MANDATE_KIND_FIELDS[kind] + "; copy the ready-to-send block from dispatch_ledger {action:\"self\"})";
+}
+/**
 * 校验 kind 与字段的组合。
 *
 * 字段是"按角色出现"的：dispatch 带 task/boundary/followup/parent_mandate，
 * report 带 status，steer 带 grant。组合不合法 = 头部损坏，而不是"忽略
 * 多余字段"——多带字段往往意味着模型抄错了角色。
+*
+* `null` 与"没写"同义：schema 把 parent_mandate / grant 声明成 nullable，模型
+* 也习惯把用不到的字段写成 null。把 null 当成"携带了这个字段"，等于拒绝一个
+* 语义上完全正确、只是写法啰嗦的头部。
 * @param header - 已通过 schema 的头部。
 * @returns 违规说明；合法时 undefined。
 */
 function kindViolation(header) {
+	const carriedParent = header.parent_mandate !== void 0 && header.parent_mandate !== null;
+	const carriedGrant = header.grant !== void 0 && header.grant !== null;
 	if (header.kind === "dispatch") {
-		if (header.task === void 0) return "a dispatch header must carry task";
-		if (header.boundary === void 0) return "a dispatch header must carry boundary";
-		if (header.followup === void 0) return "a dispatch header must carry followup";
-		if (header.parent_mandate === void 0) return "a dispatch header must carry parent_mandate";
-		if (header.grant !== void 0) return "a dispatch header must not carry grant";
-		if (header.status !== void 0) return "a dispatch header must not carry status";
+		if (header.task === void 0) return "a dispatch header must carry task" + kindRepairHint("dispatch");
+		if (header.boundary === void 0) return "a dispatch header must carry boundary" + kindRepairHint("dispatch");
+		if (header.followup === void 0) return "a dispatch header must carry followup" + kindRepairHint("dispatch");
+		if (header.parent_mandate === void 0) return "a dispatch header must carry parent_mandate" + kindRepairHint("dispatch");
+		if (carriedGrant) return "a dispatch header must not carry grant" + kindRepairHint("dispatch");
+		if (header.status !== void 0) return "a dispatch header must not carry status" + kindRepairHint("dispatch");
 		return;
 	}
 	if (header.kind === "report") {
-		if (header.status === void 0) return "a report header must carry status";
-		if (header.task !== void 0) return "a report header must not carry task";
-		if (header.boundary !== void 0) return "a report header must not carry boundary";
-		if (header.followup !== void 0) return "a report header must not carry followup";
-		if (header.parent_mandate !== void 0) return "a report header must not carry parent_mandate";
-		if (header.grant !== void 0) return "a report header must not carry grant";
+		if (header.status === void 0) return "a report header must carry status" + kindRepairHint("report");
+		if (header.task !== void 0) return "a report header must not carry task" + kindRepairHint("report");
+		if (header.boundary !== void 0) return "a report header must not carry boundary" + kindRepairHint("report");
+		if (header.followup !== void 0) return "a report header must not carry followup" + kindRepairHint("report");
+		if (carriedParent) return "a report header must not carry parent_mandate" + kindRepairHint("report");
+		if (carriedGrant) return "a report header must not carry grant" + kindRepairHint("report");
 		return;
 	}
-	if (header.grant === void 0) return "a steer header must carry grant";
-	if (header.status !== void 0) return "a steer header must not carry status";
-	if (header.task !== void 0) return "a steer header must not carry task";
-	if (header.boundary !== void 0) return "a steer header must not carry boundary";
-	if (header.followup !== void 0) return "a steer header must not carry followup";
-	if (header.parent_mandate !== void 0) return "a steer header must not carry parent_mandate";
+	if (header.grant === void 0) return "a steer header must carry grant" + kindRepairHint("steer");
+	if (header.status !== void 0) return "a steer header must not carry status" + kindRepairHint("steer");
+	if (header.task !== void 0) return "a steer header must not carry task" + kindRepairHint("steer");
+	if (header.boundary !== void 0) return "a steer header must not carry boundary" + kindRepairHint("steer");
+	if (header.followup !== void 0) return "a steer header must not carry followup" + kindRepairHint("steer");
+	if (carriedParent) return "a steer header must not carry parent_mandate" + kindRepairHint("steer");
 }
 /**
 * 解析一段文本里的 Mandate v2 头部。
@@ -86882,7 +88685,7 @@ function createDispatchLedgerGuard(options) {
 		if (parsed.state === "invalid" || parsed.header === void 0) return dispatchDenial("MANDATE_MALFORMED", "the mandate header could not be parsed (" + (parsed.reason ?? "unknown reason") + ").");
 		const header = parsed.header;
 		if (isDispatch) {
-			if (header.kind !== "dispatch") return dispatchDenial("MANDATE_KIND", "a dispatch call must carry a kind \"dispatch\" header.");
+			if (header.kind !== "dispatch") return dispatchDenial("MANDATE_KIND", "a dispatch call must carry a kind \"dispatch\" header. A dispatch header carries exactly: " + MANDATE_KIND_FIELDS.dispatch + " (copy the ready-to-send block from dispatch_ledger {action:\"self\"}).");
 			const session = sessionOfAgent$1(execution?.agent);
 			const state = session === void 0 ? initialDispatchLedgerState() : cache.fold(session);
 			const policy = options.policyFor?.(session ?? { id: "" });
@@ -86893,7 +88696,7 @@ function createDispatchLedgerGuard(options) {
 			if (denial === void 0 && issuer !== void 0 && callId !== void 0) reservations.reserve(issuer, ns, callId);
 			return denial;
 		}
-		if (header.kind === "dispatch") return dispatchDenial("MANDATE_KIND", "a dispatch header belongs to the delegation tool, not send_message.");
+		if (header.kind === "dispatch") return dispatchDenial("MANDATE_KIND", "a dispatch header belongs to the delegation tool, not send_message. A report header carries exactly: " + MANDATE_KIND_FIELDS.report + "; a steer header exactly: " + MANDATE_KIND_FIELDS.steer + ".");
 		const targetId = asString$2(args["agent_id"]);
 		if (targetId === void 0) return void 0;
 		const sessions = sessionsOf();
@@ -86952,64 +88755,60 @@ function installDispatchLedgerGuard(ctx, options = {}) {
 const DISPATCH_MANDATE_PROTOCOL = [
 	"Dispatch Ledger - Mandate protocol v2",
 	"",
-	"1. HEADER. Put the fenced block below at the VERY START of the text you pass to",
-	"`subagent.prompt` (dispatch) or to `send_message.message` (report/steer).",
-	"Nothing may precede it. The task text follows the closing fence.",
+	"1. HEADER. Put ONE fenced block at the VERY START of the text you pass to",
+	"`subagent.prompt` (dispatch) or `send_message.message` (report/steer). Nothing",
+	"may precede it; the body follows the closing fence.",
 	"",
 	"```dsh-mandate-v2",
-	"{\"v\":2,\"kind\":\"dispatch\",\"brief_id\":\"b-7f\",\"run_id\":\"r-1\",\"idem\":\"i-1\",\"mandate_version\":1,\"prompt_ref\":\"plan-v3\",\"policy\":{\"id\":\"dsh-dispatch-ledger\",\"version\":\"1\",\"sha256\":\"3f9a1c2b3c4d5e6f\"},\"task\":[\"task://req-42\"],\"boundary\":[\"src/host/dispatch-ledger/**\"],\"followup\":[\"ctx://plan-v3\"],\"parent_mandate\":null,\"grant\":null}",
+	"{\"v\":2,\"kind\":\"dispatch\",\"brief_id\":\"b-7f\",\"run_id\":\"r-1\",\"idem\":\"i-1\",\"mandate_version\":1,\"prompt_ref\":\"plan-v3\",\"policy\":{\"id\":\"dsh-dispatch-ledger\",\"version\":\"1\",\"sha256\":\"3f9a1c2b3c4d5e6f\"},\"task\":[\"task://req-42\"],\"boundary\":[\"src/host/dispatch-ledger/**\"],\"followup\":[\"ctx://plan-v3\"],\"parent_mandate\":null}",
 	"```",
 	"",
-	"2. FIELDS.",
-	"v = 2 (anything else is malformed).",
-	"kind: \"dispatch\" (new delegation), \"report\" (child -> owner), \"steer\" (owner -> child).",
-	"brief_id: the work item. Stable across runs. <=64 chars, [A-Za-z0-9._:-].",
-	"run_id: one dispatch attempt. Use a NEW value after a hand_back.",
-	"idem: idempotency key inside one run. Use a NEW value after a hand_back.",
-	"mandate_version: 1 (the authorization snapshot version).",
-	"prompt_ref: copy it verbatim from dispatch_ledger {action:\"self\"} (the prompt_ref field of",
-	"  that result). Never invent one. A report or a steer MUST echo the mandate's own",
-	"  prompt_ref unchanged.",
-	"policy: {id, version, sha256} copied verbatim from dispatch_ledger {action:\"self\"}.",
-	"  sha256 is the first 12 or more hex characters the tool printed.",
-	"task: <=4 references (<=160 chars each) naming the original request. NOT the request text.",
-	"boundary: <=16 structured boundary entries (<=120 chars each), e.g. \"src/host/dispatch-ledger/**\".",
-	"followup: <=8 references (<=120 chars each) naming the context this delegation may later ask for.",
-	"parent_mandate: null on the first run of a brief; a later run must set {brief_id, run_id, idem}",
-	"  of the run it replaces.",
-	"grant (steer only): null, or {context:[...]} where every entry is already in that run followup.",
-	"status (report only): ready | hand_back | blocked | failed | dropped.",
-	"The body after the closing fence is sealed by the host: it computes the sha256 and",
-	"  stores it in the ledger. Do NOT put a hash in the header: an unknown field makes",
-	"  the header malformed.",
+	"2. PER KIND. Each kind carries its own fields and NO others: one foreign field",
+	"makes the whole header malformed.",
+	"- dispatch: the block above. task: <=4 references (<=160 chars) naming the",
+	"  request, NOT its text. boundary: <=16 entries (<=120 chars). followup: <=8",
+	"  references (<=120 chars). parent_mandate: null on the first run of a brief,",
+	"  else the {brief_id, run_id, idem} of the run this one replaces.",
+	"- report: the same block MINUS task, boundary, followup and parent_mandate, PLUS",
+	"  \"status\":\"ready\"|\"hand_back\"|\"blocked\"|\"failed\"|\"dropped\". Take brief_id,",
+	"  run_id, idem, prompt_ref and policy from YOUR OWN mandate - read them with",
+	"  dispatch_ledger {action:\"self\"} - never from the message you received.",
+	"- steer: the same block MINUS task, boundary, followup and parent_mandate, PLUS",
+	"  \"grant\": {\"context\":[\"...\"]} (entries already in that run followup) or null.",
+	"",
+	"3. FIELDS. v = 2, mandate_version = 1. brief_id: the work item, stable across",
+	"runs, <=64 chars from [A-Za-z0-9._:-]. run_id: one dispatch attempt. idem: the",
+	"idempotency key inside one run; both are NEW after a hand_back. prompt_ref and",
+	"policy: copy verbatim from dispatch_ledger {action:\"self\"}; never invent them.",
+	"The host seals the body by hashing it, so never put a hash in the header: an",
+	"unknown field makes the header malformed.",
 	"",
-	"3. FLOW.",
-	"a. Call dispatch_ledger {action:\"self\"} ONCE. Copy policy from the result. This protocol is",
-	"   printed at the TAIL of that result.",
-	"b. Dispatch: header (kind=dispatch) then the task text, in `subagent.prompt`.",
+	"4. FLOW.",
+	"a. Call dispatch_ledger {action:\"self\"} ONCE. Copy policy and prompt_ref from it;",
+	"   this protocol is printed at the TAIL of that result.",
+	"b. Dispatch: dispatch header + task text, in `subagent.prompt`.",
 	"c. The child reads its own mandate with dispatch_ledger {action:\"self\"}.",
-	"d. Report: header (kind=report, status=...) then the result, in `send_message` to your parent agent id.",
-	"e. Steer: header (kind=steer, grant=...) in `send_message` to the child.",
+	"d. Report: report header + result, in `send_message` to your parent agent id.",
+	"e. Steer: steer header, in `send_message` to the child.",
 	"",
-	"4. REJECTION CODES. The guard denies only these.",
-	"MANDATE_MALFORMED: the header does not parse, or a field is out of range.",
+	"5. REJECTION CODES. These are the only denials; each one names its fix.",
+	"MANDATE_MALFORMED: the header does not parse, or carries a field its kind does",
+	"  not allow. Re-send with exactly the fields of that kind.",
 	"MANDATE_KIND: the kind does not match the tool.",
-	"MANDATE_DUPLICATE: the namespace (brief_id, run_id, idem) is already claimed. A namespace is",
-	"  never reusable, not even after a release. Use a NEW run_id AND a NEW idem, and set parent_mandate.",
-	"MANDATE_BRIEF_BUSY: another run of this brief is still booked. Wait for it, or use a new brief_id.",
-	"MANDATE_LINEAGE_REQUIRED: this brief already has a run, but parent_mandate is missing.",
-	"MANDATE_LINEAGE: parent_mandate does not point at the latest released run of this brief.",
-	"MANDATE_POLICY_STALE: the policy block does not match the current one. Re-read",
-	"  dispatch_ledger {action:\"self\"} and copy it again.",
+	"MANDATE_DUPLICATE: the namespace (brief_id, run_id, idem) is claimed and never",
+	"  reusable. Use a NEW run_id AND a NEW idem, and set parent_mandate.",
+	"MANDATE_BRIEF_BUSY: another run of this brief is still booked. Wait, or use a new brief_id.",
+	"MANDATE_LINEAGE_REQUIRED: the brief already has a run, but parent_mandate is missing.",
+	"MANDATE_LINEAGE: parent_mandate does not point at the latest settled run of the brief.",
+	"MANDATE_POLICY_STALE: the policy block is not current. Copy it from self again.",
 	"MANDATE_VERSION: mandate_version or prompt_ref does not match the recorded run.",
-	"MANDATE_NOT_PARENT / MANDATE_NOT_CHILD: the other side is not your parent / not your child.",
+	"MANDATE_NOT_PARENT: the agent you report to is not your parent.",
+	"MANDATE_NOT_CHILD: the agent you steer is not your child.",
 	"MANDATE_GRANT_EXCEEDS: grant.context asks for context outside followup.",
 	"MANDATE_NOT_HELD: you do not hold this mandate.",
-	"MANDATE_LEDGER_FULL: the ledger reached its run or brief limit. Report it; never",
-	"  reuse an old namespace to get around it.",
+	"MANDATE_LEDGER_FULL: the ledger is full. Report it; never reuse an old namespace.",
 	"",
-	"5. A dispatch without a header is allowed but audited, and it cannot be de-duplicated.",
-	"   After a hand_back the new run needs a NEW run_id and a NEW idem: never reuse the old ones."
+	"6. A dispatch with no header is allowed but audited, and cannot be de-duplicated."
 ].join("\n");
 //#endregion
 //#region src/host/dispatch-ledger/tool.ts
@@ -87166,6 +88965,98 @@ function matchesFilters(row, args) {
 	return true;
 }
 /**
+* 造一个本次渲染专用的 id。
+*
+* 骨架里的 brief_id / run_id / idem 必须是"抄下来就能用"的真 id，所以每渲染
+* 一次就现造一组：模型原样照抄也不会撞上别处的命名空间。
+* @param prefix - id 前缀（b / r / i）。
+* @returns 符合头部 id 字符集 `[A-Za-z0-9._:-]` 的 id。
+*/
+function skeletonId(prefix) {
+	const stamp = Date.now().toString(36);
+	const noise = Math.random().toString(36).slice(2, 8);
+	return prefix + "-" + (stamp + noise).slice(-8);
+}
+/**
+* 把一段头部值包成"可复制"的围栏块，并**先用真解析器自检**。
+*
+* 宁可少给一段骨架，也不给一个模型抄了就被拒的头部——这段文本是它唯一的依据。
+* @param lead - 引导语：说清哪些字段要改、哪些一个都不能动。
+* @param header - 头部值。
+* @returns 引导语 + 围栏块；判不出 `ok` 时 undefined。
+*/
+function readyToSendBlock(lead, header) {
+	const block = "```dsh-mandate-v2\n" + JSON.stringify(header) + "\n```";
+	if (parseMandateHeader(block).state !== "ok") return void 0;
+	return lead + "\n" + block;
+}
+/**
+* 读一个策略块的三个字段。
+* @param value - value 里的 policy（或 mandate.policy）。
+* @returns 策略块；形状不对时 undefined。
+*/
+function policyBlockOf(value) {
+	if (!isRecord$7(value)) return void 0;
+	return {
+		id: value["id"],
+		version: value["version"],
+		sha256: value["sha256"]
+	};
+}
+/**
+* 子代理的 **report 骨架**。
+*
+* brief_id / run_id / idem / prompt_ref / policy 全部来自它**自己持有的**那份
+* mandate（也就是它收到的派发头），所以它只需要改 status——把"自己拼 JSON"换成
+* "照着抄一行"。
+* @param mandate - `self` 结果里的 mandate。
+* @returns 可复制块；没有 mandate 或自检不过时 undefined。
+*/
+function reportSkeletonOf(mandate) {
+	if (mandate === void 0) return void 0;
+	const policy = policyBlockOf(mandate["policy"]);
+	if (policy === void 0) return void 0;
+	return readyToSendBlock("report header - copy this block into send_message and change ONLY status (ready | hand_back | blocked | failed | dropped); every other field is yours already:", {
+		v: 2,
+		kind: "report",
+		brief_id: mandate["brief_id"],
+		run_id: mandate["run_id"],
+		idem: mandate["idem"],
+		mandate_version: mandate["mandate_version"],
+		prompt_ref: mandate["prompt_ref"],
+		policy,
+		status: "ready"
+	});
+}
+/**
+* 协调者的 **dispatch 骨架**。
+*
+* policy 与 prompt_ref 由宿主填好（模型不能自拟），三个 id 现造（每次派发都要
+* 换新的），task / boundary / followup 留成一眼就该改掉的占位符。
+* @param policy - `self` 结果里的 policy。
+* @param promptRef - `self` 结果里的 prompt_ref。
+* @returns 可复制块；宿主没给 policy / prompt_ref 时 undefined。
+*/
+function dispatchSkeletonOf(policy, promptRef) {
+	const block = policyBlockOf(policy);
+	if (block === void 0) return void 0;
+	if (typeof promptRef !== "string" || promptRef === "") return void 0;
+	return readyToSendBlock("dispatch header - give every dispatch NEW brief_id / run_id / idem, make task, boundary and followup name your own work, and write the task text after the closing fence:", {
+		v: 2,
+		kind: "dispatch",
+		brief_id: skeletonId("b"),
+		run_id: skeletonId("r"),
+		idem: skeletonId("i"),
+		mandate_version: 1,
+		prompt_ref: promptRef,
+		policy: block,
+		task: ["task://what-this-dispatch-delivers"],
+		boundary: ["files or module this child may touch"],
+		followup: ["ctx://context-it-may-ask-for-later"],
+		parent_mandate: null
+	});
+}
+/**
 * 构造 `dispatch_ledger` 工具。
 * @param deps - 依赖。
 * @returns 可注册的工具定义。
@@ -87380,15 +89271,18 @@ function createDispatchLedgerTool(deps) {
 				if (record["action"] === "self") {
 					const mandate = record["mandate"];
 					const policy = record["policy"];
+					const head = [
+						"session " + String(record["sessionId"]) + (record["parentSessionId"] === void 0 ? "" : " (parent " + String(record["parentSessionId"]) + ")"),
+						"policy " + String(policy?.["id"] ?? "none") + " " + String(policy?.["version"] ?? "") + " sha256 " + String(policy?.["sha256"] ?? ""),
+						"prompt_ref (copy into a dispatch header): " + String(record["prompt_ref"] ?? "not provided by this host"),
+						mandate === void 0 ? "mandate: none held by this session" : "mandate: brief " + String(mandate["brief_id"]) + " run " + String(mandate["run_id"]) + " idem " + String(mandate["idem"]) + " prompt_ref " + String(mandate["prompt_ref"]),
+						"open: " + JSON.stringify(record["open"] ?? {})
+					].join("\n");
+					const held = record["mandate"];
+					const skeleton = (held === void 0 ? void 0 : reportSkeletonOf(held)) ?? dispatchSkeletonOf(policy, record["prompt_ref"]);
 					return [{
 						type: "text",
-						text: [
-							"session " + String(record["sessionId"]) + (record["parentSessionId"] === void 0 ? "" : " (parent " + String(record["parentSessionId"]) + ")"),
-							"policy " + String(policy?.["id"] ?? "none") + " " + String(policy?.["version"] ?? "") + " sha256 " + String(policy?.["sha256"] ?? ""),
-							"prompt_ref (copy into a dispatch header): " + String(record["prompt_ref"] ?? "not provided by this host"),
-							mandate === void 0 ? "mandate: none held by this session" : "mandate: brief " + String(mandate["brief_id"]) + " run " + String(mandate["run_id"]) + " idem " + String(mandate["idem"]) + " prompt_ref " + String(mandate["prompt_ref"]),
-							"open: " + JSON.stringify(record["open"] ?? {})
-						].join("\n") + "\n\n" + DISPATCH_MANDATE_PROTOCOL
+						text: skeleton === void 0 ? head + "\n\n" + DISPATCH_MANDATE_PROTOCOL : head + "\n\n" + skeleton + "\n\n" + DISPATCH_MANDATE_PROTOCOL
 					}];
 				}
 				const lines = (record["entries"] ?? []).map((entry) => [
@@ -98965,6 +100859,8 @@ function apply(ctx, pluginConfig = {}) {
 		const guard = installCompactionPolicyGuard(ctx);
 		return () => guard.dispose();
 	}, "dsh-chatgpt-subscription: compaction policy guard");
+	ctx.effect(() => installMinimaxRuntimeEnhancements(ctx), "dsh-chatgpt-subscription: MiniMax runtime enhancements");
+	ctx.effect(() => installKimiRepeatBreaker(ctx), "dsh-chatgpt-subscription: Kimi repeat breaker");
 	ctx.effect(() => installDispatchExecutionGuard(ctx, { enabled: () => resolveDispatchExecutionGuardEnabled(pluginConfig) }), "dsh-chatgpt-subscription: dispatch execution guard");
 	ctx.effect(() => installDispatchLedger(ctx, {
 		enabled: () => resolveDispatchExecutionGuardEnabled(pluginConfig),