@kernel.chat/kbot 3.99.34 → 4.0.0

package/dist/providers/llada.js

@@ -0,0 +1,197 @@
+// LLaDA2.0-Uni provider client
+//
+// LLaDA2.0-Uni (Inclusion AI, ArXiv:2604.20796, 2026-04-22) is a unified
+// discrete-diffusion LLM that does multimodal *understanding* AND text-to-image
+// generation in a single MoE model. It pairs a SigLIP-VQ semantic tokenizer
+// with a diffusion decoder for high-fidelity 8-step image inference.
+//
+// Local serving status (as of 2026-04-25):
+//   The official repo (https://github.com/inclusionAI/LLaDA2.0-Uni) currently
+//   ships only Python inference scripts (`scripts/t2i_generate.py`,
+//   `scripts/mmu_understand.py`, `scripts/image_edit.py`) using the HF
+//   transformers loader. SGLang serving is on the README's TODO list but not
+//   yet released. Most users will wrap the Python entrypoints behind a small
+//   OpenAI-compatible FastAPI shim, or wait for the SGLang adapter.
+//
+// SPEC: refine when LLaDA's API stabilizes — currently assumes OpenAI-compatible
+// shape on http://localhost:8000 (the conventional vllm / TGI / SGLang layout).
+// All endpoints below are speculative until the upstream serving surface lands.
+const DEFAULT_BASE_URL = process.env.KBOT_LLADA_URL || 'http://localhost:8000';
+const DEFAULT_MODEL = 'llada2.0-uni';
+/** Typed client for a LLaDA2.0-Uni HTTP server (OpenAI-compatible shape). */
+export class LLaDAClient {
+    baseUrl;
+    apiKey;
+    timeoutMs;
+    fetchImpl;
+    constructor(opts = {}) {
+        this.baseUrl = (opts.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, '');
+        this.apiKey = opts.apiKey;
+        this.timeoutMs = opts.timeoutMs ?? 60_000;
+        // Bind so `this` in node's global fetch stays right.
+        this.fetchImpl = opts.fetchImpl ?? ((...a) => fetch(...a));
+    }
+    /** Build standard headers — Authorization only attached when an apiKey is set. */
+    headers() {
+        const h = { 'Content-Type': 'application/json' };
+        if (this.apiKey)
+            h.Authorization = `Bearer ${this.apiKey}`;
+        return h;
+    }
+    async post(path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+        try {
+            const res = await this.fetchImpl(url, {
+                method: 'POST',
+                headers: this.headers(),
+                body: JSON.stringify(body),
+                signal: ctrl.signal,
+            });
+            if (!res.ok) {
+                const txt = await res.text().catch(() => '');
+                throw new Error(`LLaDA ${path} failed: ${res.status} ${res.statusText} ${txt}`.trim());
+            }
+            return (await res.json());
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /** Quick health probe. Resolves true when the server responds with 2xx. */
+    async isReachable() {
+        try {
+            const ctrl = new AbortController();
+            const timer = setTimeout(() => ctrl.abort(), 2000);
+            try {
+                // SPEC: refine when LLaDA's API stabilizes — try /v1/models, fall back to /health.
+                const res = await this.fetchImpl(`${this.baseUrl}/v1/models`, {
+                    method: 'GET',
+                    signal: ctrl.signal,
+                });
+                if (res.ok)
+                    return true;
+                const res2 = await this.fetchImpl(`${this.baseUrl}/health`, {
+                    method: 'GET',
+                    signal: ctrl.signal,
+                });
+                return res2.ok;
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Text chat — OpenAI-compatible POST /v1/chat/completions.
+     * SPEC: refine when LLaDA's API stabilizes — currently assumes OpenAI-compatible shape.
+     */
+    async chat(req) {
+        const body = {
+            model: req.model || DEFAULT_MODEL,
+            messages: req.messages,
+            temperature: req.temperature ?? 0.7,
+        };
+        if (req.maxTokens !== undefined)
+            body.max_tokens = req.maxTokens;
+        if (req.thinkingSteps !== undefined) {
+            // LLaDA exposes `mode: "thinking"` + `thinking_steps` in its native API.
+            // We pass them as extra fields; servers that don't recognize them ignore.
+            body.mode = 'thinking';
+            body.thinking_steps = req.thinkingSteps;
+        }
+        const data = await this.post('/v1/chat/completions', body);
+        const text = data.choices?.[0]?.message?.content ?? '';
+        if (!text)
+            throw new Error('LLaDA chat returned no content');
+        const thinking = data.choices?.[0]?.message?.thinking ?? data.thinking;
+        return { text, thinking, raw: data };
+    }
+    /**
+     * Image generation. The native LLaDA call is `model.generate_image(...)`;
+     * we expose it via a POST /v1/images/generations shim that accepts the
+     * extra LLaDA-specific knobs (`steps`, `cfg_scale`, `thinking`).
+     * SPEC: refine when LLaDA's API stabilizes — assumes OpenAI-compatible shape.
+     */
+    async generateImage(req) {
+        const size = req.size || '1024x1024';
+        const [w, h] = parseSize(size);
+        const body = {
+            model: DEFAULT_MODEL,
+            prompt: req.prompt,
+            size,
+            n: 1,
+            // LLaDA-native fields (ignored by stricter OpenAI servers):
+            image_w: w,
+            image_h: h,
+            steps: req.steps ?? 8,
+            cfg_scale: req.cfgScale ?? 2.0,
+        };
+        if (req.thinking) {
+            body.mode = 'thinking';
+            body.thinking_steps = 32;
+        }
+        if (req.refImage) {
+            // SPEC: LLaDA uses `image_tokens` for editing. The likely server shim accepts
+            // either `input_image` (URL/data URL) or `image` and tokenizes server-side.
+            body.input_image = req.refImage;
+            body.image = req.refImage;
+        }
+        const data = await this.post('/v1/images/generations', body);
+        const item = data.data?.[0];
+        if (!item)
+            throw new Error('LLaDA image returned no data');
+        let url = item.url;
+        if (!url && item.b64_json)
+            url = `data:image/png;base64,${item.b64_json}`;
+        if (!url)
+            throw new Error('LLaDA image returned neither url nor b64_json');
+        const thinking = item.thinking ?? data.thinking;
+        return { url, thinking, raw: data };
+    }
+    /**
+     * Multimodal understanding: chat with an image attached.
+     * SPEC: refine when LLaDA's API stabilizes — uses OpenAI-vision content blocks.
+     */
+    async understand(req) {
+        if (!req.imageUrl && !req.imageData) {
+            throw new Error('LLaDA.understand requires imageUrl or imageData');
+        }
+        const imageUrl = req.imageUrl
+            ? req.imageUrl
+            : req.imageData.startsWith('data:')
+                ? req.imageData
+                : `data:image/png;base64,${req.imageData}`;
+        const messages = [
+            {
+                role: 'user',
+                content: [
+                    { type: 'text', text: req.prompt },
+                    { type: 'image_url', image_url: { url: imageUrl } },
+                ],
+            },
+        ];
+        const out = await this.chat({
+            model: req.model,
+            messages,
+            maxTokens: req.maxTokens ?? 1024,
+            temperature: 0.2,
+        });
+        return { text: out.text, raw: out.raw };
+    }
+}
+function parseSize(size) {
+    const m = /^(\d+)\s*x\s*(\d+)$/i.exec(size.trim());
+    if (!m)
+        return [1024, 1024];
+    return [Number(m[1]), Number(m[2])];
+}
+/** Convenience factory mirroring the rest of kbot's local-provider style. */
+export function createLLaDAClient(opts = {}) {
+    return new LLaDAClient(opts);
+}
+//# sourceMappingURL=llada.js.map

package/dist/tools/browser.js

@@ -50,6 +50,7 @@ export function registerBrowserTools() {
     });
     registerTool({
         name: 'browser_snapshot',
+        deprecated: true,
         description: 'Get the current page\'s accessibility tree (structured text representation).',
         parameters: {},
         tier: 'free',

package/dist/tools/computer.js

@@ -253,6 +253,7 @@ export function registerComputerTools() {
     // ── Permission & lock check ──
     registerTool({
         name: 'computer_check',
+        deprecated: true,
         description: 'Check computer use permissions and acquire the session lock. Call this before any other computer use tool. Returns permission status and any required setup steps.',
         parameters: {},
         tier: 'free',
@@ -277,6 +278,7 @@ export function registerComputerTools() {
     // ── App approval ──
     registerTool({
         name: 'app_approve',
+        deprecated: true,
         description: 'Approve an app for computer use in this session. Must be called before interacting with an app. Shows a warning for sensitive apps (terminals, Finder, System Settings).',
         parameters: {
             app: { type: 'string', description: 'App name (e.g., "Safari", "Finder", "Xcode")', required: true },
@@ -456,6 +458,7 @@ export function registerComputerTools() {
     // ── Mouse click ──
     registerTool({
         name: 'mouse_click',
+        deprecated: true,
         description: 'Click at specific screen coordinates.',
         parameters: {
             x: { type: 'number', description: 'X coordinate', required: true },
@@ -873,6 +876,7 @@ export function registerComputerTools() {
     });
     registerTool({
         name: 'window_resize',
+        deprecated: true,
         description: 'Resize a window of a specific app.',
         parameters: {
             app: { type: 'string', description: 'App name', required: true },
@@ -926,6 +930,7 @@ export function registerComputerTools() {
     });
     registerTool({
         name: 'window_move',
+        deprecated: true,
         description: 'Move a window to specific screen coordinates.',
         parameters: {
             app: { type: 'string', description: 'App name', required: true },
@@ -1080,6 +1085,7 @@ export function registerComputerTools() {
     // ── Release lock ──
     registerTool({
         name: 'computer_release',
+        deprecated: true,
         description: 'Release the computer use lock and end the session. Call when done with computer use.',
         parameters: {},
         tier: 'free',

package/dist/tools/containers.js

@@ -428,6 +428,7 @@ export function registerContainerTools() {
     // ── License Check ─────────────────────────────────────────────────
     registerTool({
         name: 'license_check',
+        deprecated: true,
         description: 'Check license compatibility across a project\'s dependency tree.',
         parameters: {
             path: { type: 'string', description: 'Project directory path', required: true },

package/dist/tools/creative.js

@@ -683,6 +683,7 @@ function evolveDesign(source, mutationIndex) {
 export function registerCreativeTools() {
     registerTool({
         name: 'generate_art',
+        deprecated: true,
         description: 'Generate a self-contained p5.js sketch as an HTML file from a text description. Creates generative art that can be opened directly in a browser.',
         parameters: {
             description: { type: 'string', description: 'Text description of the desired artwork (e.g., "flowing ocean waves at sunset")', required: true },
@@ -706,6 +707,7 @@ export function registerCreativeTools() {
     });
     registerTool({
         name: 'generate_shader',
+        deprecated: true,
         description: 'Generate a Shadertoy-compatible GLSL fragment shader from a text description. Creates animated procedural graphics using noise, raymarching, voronoi, or kaleidoscopic techniques.',
         parameters: {
             description: { type: 'string', description: 'Text description of the desired shader effect (e.g., "molten lava flowing through cracks")', required: true },
@@ -723,6 +725,7 @@ export function registerCreativeTools() {
     });
     registerTool({
         name: 'generate_music_pattern',
+        deprecated: true,
         description: 'Generate a music pattern as Sonic Pi code or a MIDI-like JSON structure. Creates melodies, bass lines, and drum patterns based on genre and description.',
         parameters: {
             description: { type: 'string', description: 'Text description of the desired music (e.g., "upbeat jazz with walking bass")', required: true },
@@ -748,6 +751,7 @@ export function registerCreativeTools() {
     });
     registerTool({
         name: 'generate_svg',
+        deprecated: true,
         description: 'Generate algorithmic SVG art from a text description. Creates generative patterns including concentric circles, mesh networks, Mondrian grids, spirographs, or wave patterns.',
         parameters: {
             description: { type: 'string', description: 'Text description of the desired SVG artwork', required: true },
@@ -772,6 +776,7 @@ export function registerCreativeTools() {
     });
     registerTool({
         name: 'evolve_design',
+        deprecated: true,
         description: 'Take an existing design file (HTML, SVG, GLSL, CSS, etc.) and generate N mutations by tweaking numeric values, colors, and structure. Outputs each variant as a separate file. Useful for exploring design spaces.',
         parameters: {
             source_path: { type: 'string', description: 'Path to the source design file to mutate', required: true },

package/dist/tools/deploy.js

@@ -307,6 +307,7 @@ export function registerDeployTools() {
     // ── deploy ─────────────────────────────────────────────────────────
     registerTool({
         name: 'deploy',
+        deprecated: true,
         description: 'Deploy the current project. Auto-detects platform from config files (vercel.json, netlify.toml, wrangler.toml, fly.toml, railway.json). Supports Vercel, Netlify, Cloudflare Workers/Pages, Fly.io, and Railway.',
         parameters: {
             path: { type: 'string', description: 'Project directory (default: cwd)' },

package/dist/tools/emergent.js

@@ -968,6 +968,7 @@ export function registerEmergentTools() {
     // ══════════════════════════════════════════════════════════════════════════
     registerTool({
         name: 'question',
+        deprecated: true,
         description: 'Generate the most important unanswered questions based on kbot\'s knowledge graph and memory. Not questions the user asked — questions that SHOULD be asked based on what is known and what is missing.',
         parameters: {
             domain: { type: 'string', description: 'Optional domain focus (e.g., "biology", "physics", "social")' },

package/dist/tools/gamedev.js

@@ -186,6 +186,7 @@ export function registerGamedevTools() {
     };
     registerTool({
         name: 'scaffold_game',
+        deprecated: true,
         description: 'Generate project scaffolding for a game engine. Supports godot, unity, unreal, bevy, phaser, three (Three.js), playcanvas, and defold. Writes real config files, entry points, and gitignore.',
         parameters: {
             engine: { type: 'string', description: 'Game engine: godot, unity, unreal, bevy, phaser, three, playcanvas, defold', required: true },
@@ -359,6 +360,7 @@ export function registerGamedevTools() {
     };
     registerTool({
         name: 'game_config',
+        deprecated: true,
         description: 'Generate or modify game engine config files. Auto-detects engine from project directory. Supports project, build, input, physics, rendering, and audio config types.',
         parameters: {
             engine: { type: 'string', description: 'Engine: godot, unity, unreal, bevy, phaser, three, playcanvas, defold (auto-detected if path provided)' },
@@ -438,6 +440,7 @@ export function registerGamedevTools() {
     ];
     registerTool({
         name: 'shader_debug',
+        deprecated: true,
         description: 'Static analysis of shader code for performance issues, errors, and optimization opportunities. Supports GLSL, HLSL, and WGSL. Reports branching, precision, overdraw, math optimization, and texture access patterns.',
         parameters: {
             source: { type: 'string', description: 'Shader source code or file path', required: true },
@@ -906,6 +909,7 @@ void fragment() {
     };
     registerTool({
         name: 'material_graph',
+        deprecated: true,
         description: 'Generate material/shader code for game engines. Supports PBR, toon, water, foliage, glass, and emissive materials for Three.js, Godot, and Unity.',
         parameters: {
             material_type: { type: 'string', description: 'Material type: pbr, toon, water, foliage, glass, emissive', required: true },
@@ -1264,6 +1268,7 @@ void fragment() {
     }
     registerTool({
         name: 'mesh_generate',
+        deprecated: true,
         description: 'Procedural OBJ mesh generation. Supports plane, cube, sphere, cylinder, torus, heightmap, and terrain shapes with configurable parameters. Outputs valid OBJ with vertices, normals, and UVs.',
         parameters: {
             shape: { type: 'string', description: 'Shape: plane, cube, sphere, cylinder, torus, heightmap, terrain', required: true },
@@ -1298,6 +1303,7 @@ void fragment() {
     // ── Tool 6: Sprite Atlas Packer ────────────────────────────────────
     registerTool({
         name: 'sprite_pack',
+        deprecated: true,
         description: 'Pack multiple sprite images into a single texture atlas with metadata. Uses maxrects bin-packing for optimal layout. Outputs atlas image via ImageMagick and JSON/engine-specific metadata.',
         parameters: {
             input_dir: { type: 'string', description: 'Directory containing sprite images (png/jpg/webp)', required: true },
@@ -1610,6 +1616,7 @@ void fragment() {
     // ── Tool 7: Physics Setup Generator ──────────────────────────────────
     registerTool({
         name: 'physics_setup',
+        deprecated: true,
         description: 'Generate complete physics configuration code for game engines. Supports rigidbody, softbody, ragdoll (full humanoid skeleton), vehicle (suspension/wheels/steering), cloth, and joint systems across 7 physics engines.',
         parameters: {
             type: { type: 'string', description: 'Physics type: rigidbody, softbody, ragdoll, vehicle, cloth, joints', required: true },
@@ -2902,6 +2909,7 @@ const JOINT_CONFIG = ${JSON.stringify({
     // ── Tool 8: Particle System Generator ────────────────────────────────
     registerTool({
         name: 'particle_system',
+        deprecated: true,
         description: 'Generate engine-specific particle system code for common visual effects. Supports fire, smoke, rain, snow, sparks, magic, explosion, dust, bubbles, leaves, and confetti effects across 6 game engines.',
         parameters: {
             effect: { type: 'string', description: 'Effect type: fire, smoke, rain, snow, sparks, magic, explosion, dust, bubbles, leaves, confetti', required: true },
@@ -3612,6 +3620,7 @@ ${effect === 'fire' || effect === 'smoke' ? `    // Grow over lifetime
     // ── Tool 9: Procedural Level Generator ───────────────────────────────
     registerTool({
         name: 'level_generate',
+        deprecated: true,
         description: 'Generate procedural game levels with BSP dungeon, platformer terrain, maze, overworld, or arena layouts. Supports seeded PRNG for reproducibility and outputs in JSON, Tiled, or ASCII formats.',
         parameters: {
             type: { type: 'string', description: 'Level type: dungeon, platformer, overworld, maze, arena', required: true },
@@ -4173,6 +4182,7 @@ ${effect === 'fire' || effect === 'smoke' ? `    // Grow over lifetime
     // ── Tool 10: Tilemap Auto-Tiling Generator ──────────────────────────
     registerTool({
         name: 'tilemap_generate',
+        deprecated: true,
         description: 'Generate bitmask-based auto-tiling rules and tilemap data. Supports blob 47-tile, Wang 16-tile, and simple 4-tile tilesets with terrain definitions for grass, stone, water, sand, snow, and lava.',
         parameters: {
             tileset_type: { type: 'string', description: 'Tileset type: blob_47, wang_16, simple_4', required: true },
@@ -4553,6 +4563,7 @@ tile_${i}/terrain_peering/left = ${cardW ? 0 : -1}`;
     // ── Tool 11: Navigation Mesh Configuration ──────────────────────────
     registerTool({
         name: 'navmesh_config',
+        deprecated: true,
         description: 'Generate engine-specific navigation mesh configuration and pathfinding helper code. Supports humanoid, vehicle, flying, and small creature agent types with appropriate defaults across 5 navigation systems.',
         parameters: {
             engine: { type: 'string', description: 'Navigation engine: godot, unity, unreal, recast, three (default: recast)' },
@@ -5662,6 +5673,7 @@ export class NavigationSystem {
     // ── Tool 12: game_audio ──────────────────────────────────────────────
     registerTool({
         name: 'game_audio',
+        deprecated: true,
         description: 'Generate game audio systems: spatial 3D audio, adaptive music layers, sound banks, Howler.js setup, or Web Audio API graphs. Produces complete, working audio code for any game engine.',
         parameters: {
             system: { type: 'string', description: 'Audio system type: spatial, music_layers, sound_bank, howler, web_audio', required: true },
@@ -7122,6 +7134,7 @@ export class AudioEngine {
     // ── Tool 13: netcode_scaffold ───────────────────────────────────────
     registerTool({
         name: 'netcode_scaffold',
+        deprecated: true,
         description: 'Generate multiplayer netcode scaffolding: server, client, and shared types. Supports WebSocket/WebRTC transports with Colyseus, Socket.IO, Geckos.io, Nakama, or raw implementations. Includes lobby, matchmaking, state sync, input prediction, chat, and reconnection features.',
         parameters: {
             architecture: { type: 'string', description: 'Network architecture: client_server, peer_to_peer, relay', required: true },
@@ -8542,6 +8555,7 @@ ${hasReconnect ? '    if (this.reconnectTimer) clearTimeout(this.reconnectTimer)
     // ── Tool 14: game_build ─────────────────────────────────────────────
     registerTool({
         name: 'game_build',
+        deprecated: true,
         description: 'Generate CI/CD pipelines and build configurations for game distribution. Supports Steam, itch.io, web, iOS, and Android targets with GitHub Actions or GitLab CI.',
         parameters: {
             engine: { type: 'string', description: 'Game engine or framework (e.g., godot, unity, unreal, three, phaser, bevy, web)' },
@@ -9044,6 +9058,7 @@ export default defineConfig({
     // ── Tool 15: game_test ──────────────────────────────────────────────
     registerTool({
         name: 'game_test',
+        deprecated: true,
         description: 'Generate game testing and profiling utilities: FPS profiler, memory tracker, input recorder/replayer, screenshot regression tests, and performance budgets with runtime validation.',
         parameters: {
             test_type: { type: 'string', description: 'Test type: fps_profiler, memory_tracker, input_recorder, screenshot_test, performance_budget', required: true },
@@ -10352,6 +10367,7 @@ export class PerformanceBudget {
     // ── Tool 16: ecs_generate ───────────────────────────────────────────
     registerTool({
         name: 'ecs_generate',
+        deprecated: true,
         description: 'Generate Entity Component System (ECS) code: components, systems, and entity archetypes. Produces idiomatic code for Bevy (Rust), bitecs (TypeScript), Unity DOTS (C#), miniplex (TypeScript), or ecsy (TypeScript).',
         parameters: {
             framework: { type: 'string', description: 'ECS framework: bevy, unity_dots, bitecs, miniplex, ecsy', required: true },

package/dist/tools/hacker-toolkit.js

@@ -1287,6 +1287,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'jwt_analyze',
+        deprecated: true,
         description: 'Analyze JWT tokens. Decode header/payload/signature, verify signatures with a secret, test for algorithm confusion (alg:none), and try common weak secrets.',
         parameters: {
             token: { type: 'string', description: 'JWT token to analyze', required: true },
@@ -1653,6 +1654,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'cors_check',
+        deprecated: true,
         description: 'Detect CORS misconfigurations. Tests for arbitrary origin reflection, null origin acceptance, credentials with wildcard, and subdomain wildcard matching.',
         parameters: {
             url: { type: 'string', description: 'URL to check for CORS misconfigurations', required: true },
@@ -1946,6 +1948,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'exploit_search',
+        deprecated: true,
         description: 'Search for known exploits and CVEs. Queries the NVD (National Vulnerability Database) API for CVE data. Returns CVE IDs, descriptions, CVSS scores, and references.',
         parameters: {
             query: { type: 'string', description: 'CVE ID (e.g., CVE-2024-1234), software name, or keyword', required: true },
@@ -2739,6 +2742,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'ssl_analyze',
+        deprecated: true,
         description: 'Deep SSL/TLS analysis using Node.js tls module. Returns protocol version, cipher suite, certificate details (issuer, subject, validity, SANs), certificate chain, HSTS status, and potential security issues.',
         parameters: {
             host: { type: 'string', description: 'Hostname to analyze', required: true },
@@ -3012,6 +3016,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'forensics_analyze',
+        deprecated: true,
         description: 'File forensics analysis. Identify file type by magic bytes, extract printable ASCII strings, get file metadata, hex dump, and calculate Shannon entropy (high entropy = encrypted/compressed).',
         parameters: {
             file_path: { type: 'string', description: 'Path to file to analyze', required: true },
@@ -3469,6 +3474,7 @@ export function registerHackerToolkitTools() {
     // ─────────────────────────────────────────────────────────────────────────────
     registerTool({
         name: 'security_headers_generate',
+        deprecated: true,
         description: 'Generate complete security header configurations for various frameworks. Includes CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and more. Returns framework-specific code ready to copy-paste.',
         parameters: {
             framework: { type: 'string', description: 'Framework: express, nextjs, nginx, apache, cloudflare, generic', default: 'generic' },

package/dist/tools/image-thoughtful.d.ts

@@ -8,14 +8,14 @@ export declare const imageThoughtfulInputSchema: z.ZodObject<{
     reference_image_url: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     prompt: string;
-    aspect_ratio: "1:1" | "16:9" | "9:16" | "4:3" | "3:4";
     thinking_steps: number;
+    aspect_ratio: "1:1" | "16:9" | "9:16" | "4:3" | "3:4";
     style_hints?: string | undefined;
     reference_image_url?: string | undefined;
 }, {
     prompt: string;
-    aspect_ratio?: "1:1" | "16:9" | "9:16" | "4:3" | "3:4" | undefined;
     thinking_steps?: number | undefined;
+    aspect_ratio?: "1:1" | "16:9" | "9:16" | "4:3" | "3:4" | undefined;
     style_hints?: string | undefined;
     reference_image_url?: string | undefined;
 }>;

package/dist/tools/index.d.ts

@@ -18,6 +18,8 @@ export interface ToolDefinition {
     timeout?: number;
     /** Max result size in bytes (default: 50_000 = 50KB) */
     maxResultSize?: number;
+    /** Marked deprecated as of v4.0; scheduled for removal in 4.1.0. */
+    deprecated?: boolean;
 }
 export interface ToolCall {
     id: string;