@mono-agent/agent-app 0.20.11 → 0.21.0

package/dist/config-reference.js

@@ -1,4 +1,4 @@
-import { ALLOW_ALL_TOOLS, CONFIG_ENV_KEYS, EFFORT_LEVELS, MEMORY_BACKENDS, MEMORY_EMBEDDINGS_PROVIDERS, MEMORY_LLM_PROVIDERS, MEMORY_MODES, MEMORY_WRITE_MODES, MonoAgentConfigError, ROUTE_SAFETY_MODES, } from "@mono-agent/config";
+import { ALLOW_ALL_TOOLS, CONFIG_ENV_KEYS, EFFORT_LEVELS, MEMORY_BACKENDS, MEMORY_EMBEDDINGS_PROVIDERS, MEMORY_LLM_PROVIDERS, MEMORY_MODES, MEMORY_WRITE_MODES, MonoAgentConfigError, } from "@mono-agent/config";
 import { PI_TRANSPORTS, SANDBOX_FALLBACKS, SANDBOX_MODES, SANDBOX_NETWORK_MODES, } from "@mono-agent/runtime-adapter";
 import { CRON_CONFIG_FIELDS } from "@mono-agent/cron-adapter";
 import { OPENAI_API_CONFIG_FIELDS } from "@mono-agent/openai-api-adapter";
@@ -88,7 +88,7 @@ const APP_FIELDS = [
     {
         jsonPath: "processJobs.maxChainDepth", env: "--", type: "integer",
         defaultLabel: "4", defaultValue: 4, example: 4,
-        description: "Maximum host-owned background wake chain depth (compiled cap 8).",
+        description: "Maximum host-owned background wake chain depth (compiled cap 64).",
     },
     {
         jsonPath: "processJobs.retention.maxRecords", env: "--", type: "integer",
@@ -105,6 +105,76 @@ const APP_FIELDS = [
         defaultLabel: "268435456", defaultValue: 268_435_456, example: 268_435_456,
         description: "Aggregate retained terminal output artifact budget (compiled cap 1 GiB).",
     },
+    {
+        jsonPath: "monitors.enabled", env: "--", type: "boolean",
+        defaultLabel: "false", defaultValue: false, example: true,
+        description: "Opt in to the Pi-native Monitor/MonitorStop tools. Monitors are a streaming class of the process-job substrate and additionally require processJobs.enabled; wake delivery supports Telegram, Slack, and existing web conversations.",
+    },
+    {
+        jsonPath: "monitors.maxActive", env: "--", type: "integer",
+        defaultLabel: "8", defaultValue: 8, example: 8,
+        description: "Maximum simultaneously running monitors across every conversation, counted independently of processJobs.maxConcurrent (compiled cap 32).",
+    },
+    {
+        jsonPath: "monitors.maxActivePerConversation", env: "--", type: "integer",
+        defaultLabel: "2", defaultValue: 2, example: 3,
+        description: "Maximum simultaneously running monitors for one conversation (compiled cap 8).",
+    },
+    {
+        jsonPath: "monitors.maxRuntimeMs", env: "--", type: "integer",
+        defaultLabel: "3600000", defaultValue: 3_600_000, example: 3_600_000,
+        description: "Ceiling for a timed monitor; Monitor.timeout_ms may lower it, never raise it (compiled cap 1 hour).",
+    },
+    {
+        jsonPath: "monitors.persistentMaxRuntimeMs", env: "--", type: "integer",
+        defaultLabel: "86400000", defaultValue: 86_400_000, example: 43_200_000,
+        description: "Ceiling for a persistent monitor, which ignores timeout_ms (compiled cap 24 hours).",
+    },
+    {
+        jsonPath: "monitors.coalesceMs", env: "--", type: "integer",
+        defaultLabel: "200", defaultValue: 200, example: 200,
+        description: "Window over which stdout lines are batched into one event wake (compiled cap 5000).",
+    },
+    {
+        jsonPath: "monitors.maxWakeIntervalMs", env: "--", type: "integer",
+        defaultLabel: "300000", defaultValue: 300_000, example: 60_000,
+        description: "Ceiling for Monitor.min_wake_interval_ms; the receipt reports the clamped effective interval (compiled cap 300000).",
+    },
+    {
+        jsonPath: "monitors.maxBatchLines", env: "--", type: "integer",
+        defaultLabel: "200", defaultValue: 200, example: 200,
+        description: "Maximum lines carried by one event batch; older lines are dropped and counted (compiled cap 2000).",
+    },
+    {
+        jsonPath: "monitors.maxBatchBytes", env: "--", type: "integer",
+        defaultLabel: "65536", defaultValue: 65_536, example: 65_536,
+        description: "Maximum bytes carried by one event batch; older lines are dropped and counted (compiled cap 1 MiB).",
+    },
+    {
+        jsonPath: "monitors.maxLineBytes", env: "--", type: "integer",
+        defaultLabel: "4096", defaultValue: 4_096, example: 4_096,
+        description: "Per-event line clamp applied after redaction (compiled cap 64 KiB).",
+    },
+    {
+        jsonPath: "monitors.maxChainDepth", env: "--", type: "integer",
+        defaultLabel: "4", defaultValue: 4, example: 4,
+        description: "Maximum host-owned monitor wake chain depth (compiled cap 64).",
+    },
+    {
+        jsonPath: "monitors.rateLimit.windowMs", env: "--", type: "integer",
+        defaultLabel: "1000", defaultValue: 1_000, example: 1_000,
+        description: "Length of one rate-limit accounting window (compiled cap 60000).",
+    },
+    {
+        jsonPath: "monitors.rateLimit.maxLinesPerWindow", env: "--", type: "integer",
+        defaultLabel: "200", defaultValue: 200, example: 200,
+        description: "Lines per window above which a window counts as over budget (compiled cap 20000).",
+    },
+    {
+        jsonPath: "monitors.rateLimit.sustainedWindows", env: "--", type: "integer",
+        defaultLabel: "5", defaultValue: 5, example: 5,
+        description: "Consecutive over-budget windows that stop a monitor with rate_limited and one terminal wake (compiled cap 60).",
+    },
     {
         jsonPath: "interaction.bridge.host",
         env: "MONO_AGENT_INTERACTION_BRIDGE_HOST",
@@ -130,7 +200,8 @@ const APP_FIELDS = [
         defaultLabel: "600000",
         defaultValue: 600_000,
         example: 600_000,
-        description: "Maximum wait for one AskUser interaction (one to five questions).",
+        nullable: true,
+        description: "Maximum wait for one AskUser interaction (one to five questions); set null to disable automatic expiry.",
     },
     {
         jsonPath: "interaction.progress.enabled",
@@ -383,6 +454,7 @@ function referenceField(input) {
         defaultLabel: input.defaultLabel,
         example: input.example,
         description: input.description,
+        ...(input.nullable === true ? { nullable: true } : {}),
         ...(input.defaultValue === undefined ? {} : { defaultValue: input.defaultValue }),
         ...(input.secret === true ? { secret: true } : {}),
     };
@@ -402,6 +474,7 @@ export function buildMonoAgentConfigSchema() {
     setRequired(root, ["context"], ["identityPath"]);
     setMemoryTierSchema(root);
     setProcessJobsSchema(root);
+    setMonitorsSchema(root);
     setContinuationSchema(root);
     setStructuredAppSchemas(root);
     setRemovedConfigSchemas(root);
@@ -448,7 +521,7 @@ function setProcessJobsSchema(root) {
             maxQueueAgeMs: { type: "integer", minimum: 1, maximum: 3_600_000, default: 300_000 },
             maxOutputBytes: { type: "integer", minimum: 1, maximum: 8_388_608, default: 1_048_576 },
             previewChars: { type: "integer", minimum: 1, maximum: 8_000, default: 2_000 },
-            maxChainDepth: { type: "integer", minimum: 1, maximum: 8, default: 4 },
+            maxChainDepth: { type: "integer", minimum: 1, maximum: 64, default: 4 },
             retention: {
                 type: "object",
                 additionalProperties: false,
@@ -461,6 +534,34 @@ function setProcessJobsSchema(root) {
         },
     };
 }
+function setMonitorsSchema(root) {
+    root.monitors = {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            enabled: { type: "boolean", default: false },
+            maxActive: { type: "integer", minimum: 1, maximum: 32, default: 8 },
+            maxActivePerConversation: { type: "integer", minimum: 1, maximum: 8, default: 2 },
+            maxRuntimeMs: { type: "integer", minimum: 1, maximum: 3_600_000, default: 3_600_000 },
+            persistentMaxRuntimeMs: { type: "integer", minimum: 1, maximum: 86_400_000, default: 86_400_000 },
+            coalesceMs: { type: "integer", minimum: 1, maximum: 5_000, default: 200 },
+            maxBatchLines: { type: "integer", minimum: 1, maximum: 2_000, default: 200 },
+            maxBatchBytes: { type: "integer", minimum: 1, maximum: 1_048_576, default: 65_536 },
+            maxLineBytes: { type: "integer", minimum: 1, maximum: 65_536, default: 4_096 },
+            maxWakeIntervalMs: { type: "integer", minimum: 1, maximum: 300_000, default: 300_000 },
+            maxChainDepth: { type: "integer", minimum: 1, maximum: 64, default: 4 },
+            rateLimit: {
+                type: "object",
+                additionalProperties: false,
+                properties: {
+                    windowMs: { type: "integer", minimum: 1, maximum: 60_000, default: 1_000 },
+                    maxLinesPerWindow: { type: "integer", minimum: 1, maximum: 20_000, default: 200 },
+                    sustainedWindows: { type: "integer", minimum: 1, maximum: 60, default: 5 },
+                },
+            },
+        },
+    };
+}
 /**
  * Complex app-owned config is modeled here instead of left as an open object.
  * This keeps editor completion, generated docs, and the runtime unknown-key
@@ -487,37 +588,15 @@ function setStructuredAppSchemas(root) {
     });
     setSchemaPath(root, ["providers", "local"], {
         type: "array",
-        items: {
-            type: "object",
-            additionalProperties: false,
-            required: ["id", "type"],
-            properties: {
-                id: { type: "string", minLength: 1 },
-                type: { enum: ["ollama", "lmstudio", "openai_compat"] },
-                baseUrl: { type: "string" },
-                enabled: { type: "boolean" },
-                trustPublicUrl: { type: "boolean" },
-                apiKey: { type: "string" },
-                apiKeyEnv: { type: "string" },
-                models: {
-                    type: "array",
-                    items: {
-                        type: "object",
-                        additionalProperties: false,
-                        required: ["name"],
-                        properties: {
-                            name: { type: "string", minLength: 1 },
-                            alias: { type: "string", minLength: 1 },
-                            displayName: { type: "string", minLength: 1 },
-                            enabled: { type: "boolean" },
-                            capabilities: { type: "object", additionalProperties: true },
-                            pricing: { type: "object", additionalProperties: true },
-                        },
-                    },
-                },
-            },
-        },
+        items: providerEntrySchema(true),
     });
+    const providersSchema = schemaAt(root, ["providers"]);
+    if (providersSchema !== undefined) {
+        // Provider ids are intentionally open because pi-ai and self-hosted
+        // endpoints own that namespace. The entry itself remains typed and closed,
+        // unlike plugin payloads whose complete nested shape is package-owned.
+        providersSchema.additionalProperties = providerEntrySchema(false);
+    }
     setSchemaPath(root, ["cron", "jobs"], {
         type: "array",
         items: cronJobSchema(),
@@ -580,6 +659,39 @@ function setStructuredAppSchemas(root) {
         },
     });
 }
+function providerEntrySchema(includeId) {
+    return {
+        type: "object",
+        additionalProperties: false,
+        ...(includeId ? { required: ["id", "type"] } : {}),
+        properties: {
+            ...(includeId ? { id: { type: "string", minLength: 1 } } : {}),
+            type: { enum: ["ollama", "lmstudio", "openai_compat"] },
+            baseUrl: { type: "string" },
+            enabled: { type: "boolean" },
+            trustPublicUrl: { type: "boolean" },
+            apiKey: { type: "string" },
+            apiKeyEnv: { type: "string" },
+            maxAdvertisedModels: { type: "integer", minimum: 1, maximum: 200, default: 100 },
+            models: {
+                type: "array",
+                items: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["name"],
+                    properties: {
+                        name: { type: "string", minLength: 1 },
+                        alias: { type: "string", minLength: 1 },
+                        displayName: { type: "string", minLength: 1 },
+                        enabled: { type: "boolean" },
+                        capabilities: { type: "object", additionalProperties: true },
+                        pricing: { type: "object", additionalProperties: true },
+                    },
+                },
+            },
+        },
+    };
+}
 function cronJobSchema() {
     return {
         type: "object",
@@ -1028,6 +1140,9 @@ export function schemaForField(field) {
             schema.type = "string";
             break;
     }
+    if (field.nullable === true) {
+        schema.type = [schema.type, "null"];
+    }
     if (field.defaultValue !== undefined) {
         schema.default = field.defaultValue;
     }
@@ -1039,9 +1154,6 @@ export function schemaForField(field) {
     else if (field.jsonPath === "runtime.effort") {
         schema.enum = EFFORT_LEVELS;
     }
-    else if (field.jsonPath === "runtime.routeSafety") {
-        schema.enum = ROUTE_SAFETY_MODES;
-    }
     else if (field.jsonPath === "memory.backend") {
         schema.enum = MEMORY_BACKENDS;
     }
@@ -1071,8 +1183,11 @@ export function schemaForField(field) {
     else if (field.jsonPath === "providers.piNative.transport") {
         schema.enum = PI_TRANSPORTS;
     }
+    else if (field.jsonPath === "tools.web.coordination") {
+        schema.enum = ["process", "host"];
+    }
     else if (field.jsonPath === "tools.web.search.backend") {
-        schema.enum = ["auto", "searxng", "codex", "keyless"];
+        schema.enum = ["auto", "searxng", "ollama", "codex", "keyless"];
     }
     else if (field.jsonPath === "tools.web.fetch.render") {
         schema.enum = ["never", "auto"];
@@ -1095,6 +1210,7 @@ export function schemaForField(field) {
         "runtime.retry.primaryAttempts": { minimum: 1, maximum: 10 },
         "runtime.retry.backoffMs": { minimum: 0, maximum: 60_000 },
         "runtime.retry.maxBackoffMs": { minimum: 0, maximum: 300_000 },
+        "tools.web.search.maxRequestsPerRun": { minimum: 1, maximum: 20 },
     };
     const bounds = numericBounds[field.jsonPath];
     if (bounds !== undefined) {
@@ -1181,6 +1297,9 @@ function inferType(id) {
     if (id === "subagents") {
         return "object";
     }
+    if (id === "providers") {
+        return "object";
+    }
     if (id === "providers.piNative.transport") {
         return "string";
     }
@@ -1195,19 +1314,23 @@ function inferType(id) {
     ].includes(id)) {
         return "integer";
     }
+    if (id === "providers.piNative.promptCacheDiagnostics")
+        return "boolean";
     if (id === "runtime.compaction.fixedOverheadEnabled") {
         return "boolean";
     }
+    if (id === "tools.web.search.maxRequestsPerRun")
+        return "integer";
     if (id.endsWith("Models") || id.endsWith("Tools") || id.endsWith("Servers") || id.endsWith("Roots") || id.endsWith("allowlist") || id.endsWith("denyWrite") || id.endsWith("selectedSkills") || id.endsWith("Ids") || id.endsWith("Aliases")) {
         return "string[]";
     }
-    if (id.endsWith("enabled") || id.endsWith("allowAllChats") || id.endsWith("allowAllChannels") || id.endsWith("allowNonLoopback") || id.endsWith("dryRun") || id.endsWith("globalDiscovery") || id.endsWith("rolloverNotice") || id.endsWith("isolateProactive") || id.endsWith("unsafeAllowHostProcess") || id.endsWith("trace") || id.endsWith("exposeMcpServer")) {
+    if (id.endsWith("enabled") || id.endsWith("allowAllChats") || id.endsWith("allowAllChannels") || id.endsWith("allowNonLoopback") || id.endsWith("trustPublicUrl") || id.endsWith("dryRun") || id.endsWith("globalDiscovery") || id.endsWith("rolloverNotice") || id.endsWith("isolateProactive") || id.endsWith("unsafeAllowHostProcess") || id.endsWith("trace") || id.endsWith("exposeMcpServer")) {
         return "boolean";
     }
     if (/(Ms|Bytes|Count|Days|Turns|Retries|Attempts|Delay|port|dim|threshold|Hours|Runs)$/iu.test(id) || id.endsWith(".port")) {
         return "integer";
     }
-    if (id === "providers.local" || id === "observability.exporters") {
+    if (id === "observability.exporters") {
         return "array";
     }
     return "string";
@@ -1237,9 +1360,7 @@ function defaultLabelFor(id) {
 }
 function defaultValueFor(id) {
     const defaults = {
-        "runtime.fallbackModels": [],
         "runtime.fallbacks": [],
-        "runtime.routeSafety": "uniform",
         subagents: { enabled: false },
         "slack.resolveUserNames": true,
         "slack.resolveChannelNames": true,
@@ -1254,7 +1375,6 @@ function defaultValueFor(id) {
         "runtime.compaction.enabled": true,
         "runtime.compaction.triggerRatio": 0.70,
         "runtime.compaction.fixedOverheadEnabled": true,
-        "runtime.executionMode": "inferred",
         "runtime.workspace": ".",
         "runtime.session.mode": "continuous",
         "runtime.session.idleTimeoutMs": 1_800_000,
@@ -1276,6 +1396,7 @@ function defaultValueFor(id) {
         "memory.llm.trace": true,
         "memory.llm.timeoutMs": 60_000,
         "memory.recallTool.enabled": true,
+        "memory.rememberTool.enabled": true,
         "memory.consolidation.enabled": true,
         "memory.consolidation.cron": "0 */2 * * *",
         "tools.allowedTools": [ALLOW_ALL_TOOLS],
@@ -1283,7 +1404,11 @@ function defaultValueFor(id) {
         "tools.mcpRequestContextServers": [],
         "tools.mcpCallTimeoutMs": 120_000,
         "tools.mcpCallMaxTotalTimeoutMs": 2_700_000,
+        "tools.web.coordination": "process",
         "tools.web.search.backend": "auto",
+        "tools.web.search.maxRequestsPerRun": 4,
+        "tools.web.search.ollama.baseUrl": "http://127.0.0.1:11434",
+        "tools.web.search.ollama.trustPublicUrl": false,
         "tools.web.search.codex.model": "gpt-5.6-luna",
         "tools.web.fetch.render": "never",
         "tools.web.fetch.browserCommand": "agent-browser",
@@ -1301,6 +1426,7 @@ function defaultValueFor(id) {
         "traceability.heartbeatMs": 10_000,
         "traceability.staleAfterMs": 30_000,
         "traceability.globalDiscovery": true,
+        "providers.piNative.promptCacheDiagnostics": false,
         "providers.piNative.piMaxRetries": 2,
         "providers.piNative.maxRetryDelayMs": 60_000,
         "providers.piNative.transport": "auto",
@@ -1343,13 +1469,11 @@ function defaultValueFor(id) {
 function exampleFor(id) {
     const examples = {
         "agent.name": "Research Partner",
-        "runtime.model": "codex:gpt-5.6-terra",
-        "runtime.fallbackModels": ["pi:ollama:gemma4:31b"],
+        "runtime.model": "openai-codex:gpt-5.6-terra",
         "runtime.fallbacks": [
-            { model: "codex:gpt-5.6-sol" },
-            { model: "pi:openai-codex:gpt-5.6-terra", effort: "high" },
+            { model: "openai-codex:gpt-5.6-sol" },
+            { model: "anthropic:claude-sonnet-4-6", effort: "high" },
         ],
-        "runtime.routeSafety": "per-route-native",
         subagents: {
             enabled: true,
             maxConcurrent: 5,
@@ -1376,12 +1500,20 @@ function exampleFor(id) {
         "memory.embeddings.provider": "ollama",
         "memory.embeddings.model": "nomic-embed-text:v1.5",
         "memory.llm.provider": "agent-host",
-        "memory.llm.model": "pi:openai-codex:gpt-5.6-terra",
+        "memory.llm.model": "openai-codex:gpt-5.6-terra",
         "sandbox.mode": "native",
         "traceability.sourceId": "my-agent",
         "traceability.sourceLabel": "My Agent",
         "tools.mcpRequestContextServers": ["transcribe"],
-        "tools.web.search.endpoint": "http://127.0.0.1:8088",
+        "tools.filesystem.readableRoots": ["/srv/shared/reference"],
+        "tools.filesystem.writableRoots": ["/srv/shared/output"],
+        "tools.web.search.searxng.endpoint": "http://127.0.0.1:8088",
+        "tools.web.search.ollama.baseUrl": "https://ollama.com",
+        "tools.web.search.ollama.apiKeyEnv": "OLLAMA_API_KEY",
+        providers: {
+            "openai-codex": {},
+            ollama: { baseUrl: "http://localhost:11434" },
+        },
         "providers.piAuthPath": "~/.pi/agent/auth.json",
         "providers.piNative.transport": "sse",
         "telegram.botToken": "env:MONO_AGENT_TELEGRAM_BOT_TOKEN",
@@ -1423,14 +1555,25 @@ function exampleFor(id) {
     return String(defaultValueFor(id) ?? "example");
 }
 function descriptionFor(id) {
+    if (id === "providers.piNative.promptCacheDiagnostics")
+        return "Emit metadata-only prompt-cache request fingerprints into run artifacts; never prompt text, tool arguments, cache keys, endpoints or credentials.";
     const section = id.split(".")[0] ?? "config";
     const name = id.split(".").slice(1).join(".");
+    if (id === "providers") {
+        return "Provider-id map that widens or narrows the selectable Pi model catalog; MONO_AGENT_PROVIDERS_JSON projects the whole object because provider ids are dynamic.";
+    }
     if (id === "tui.requestToolEnvironment.allowedKeys") {
         return "Explicit environment-variable names an ACP request may pass to Bash, Exec, and nested subagents for one turn. Disabled when empty; dangerous process-loader, shell-startup, home, temp, and PATH keys are rejected.";
     }
     if (id === "tui.requestToolEnvironment.allowPathPrepend") {
         return "Allows an ACP request to prepend up to four absolute directories to process-tool PATH for one turn. The caller cannot replace PATH.";
     }
+    if (id === "tools.filesystem.readableRoots") {
+        return "Extra roots for managed Read, Glob, and Grep while sandbox.mode is off. Access requires lexical and realpath containment; native sandbox roots remain authoritative when sandboxing is enabled.";
+    }
+    if (id === "tools.filesystem.writableRoots") {
+        return "Extra roots for managed Write and Edit while sandbox.mode is off; writable roots are also readable. Access requires lexical and realpath containment; native sandbox roots remain authoritative when sandboxing is enabled.";
+    }
     if (id === "cron.operatorActions.enabled") {
         return "Allows API-key-authenticated, explicitly confirmed run-now and runtime enable/disable actions. Defaults off and never rewrites cron config sources.";
     }
@@ -1486,6 +1629,12 @@ function descriptionFor(id) {
     if (id === "memory.embeddings.apiKeyEnv") {
         return "Environment-variable name containing an optional provider bearer token; an explicitly declared name must resolve before memory starts.";
     }
+    if (id === "memory.recallTool.enabled") {
+        return "Enables explicit memory reads: targeted MemoryRecall for every backend and chronological MemoryJournal when a local store supports it. Automatic recall is unchanged.";
+    }
+    if (id === "tools.web.search.ollama.apiKeyEnv") {
+        return "Environment variable containing the hosted Ollama API key. Required only for exact https://ollama.com and rejected for every other origin; the key value is never stored in JSON.";
+    }
     if (id.includes("apiKey") || id.includes("Token")) {
         return `Secret value for ${id}; prefer the env override.`;
     }
@@ -1498,11 +1647,8 @@ function descriptionFor(id) {
     if (id === "runtime.fallbacks") {
         return "Canonical ordered fallback routes. Omitted per-route effort means that provider's default.";
     }
-    if (id === "runtime.fallbackModels") {
-        return "Legacy fallback list whose routes inherit runtime.effort. Prefer runtime.fallbacks for new configs.";
-    }
     if (id === "subagents") {
-        return "Subagent profiles the Agent tool can deploy, plus its caps. Disabled unless enabled is true, in which case Agent must also appear in tools.allowedTools. Each definition needs exactly one of prompt or promptPath; omitted allowedTools means a read-only default set, and the \"*\" wildcard is rejected. The agent may also author a specialized subagent at call time unless inline.enabled is false; inline.allowedTools caps what an authored subagent may request, defaulting to the parent agent's own built-ins.";
+        return "Subagent profiles the Agent tool can deploy, plus its caps. Disabled unless enabled is true, in which case Agent must also appear in tools.allowedTools. Each definition needs exactly one of prompt or promptPath; omitted allowedTools means a read-only default set, and the \"*\" wildcard is rejected. The agent may also author a specialized subagent at call time unless inline.enabled is false; inline.allowedTools caps what an authored subagent may request, defaulting to the parent agent's own built-ins. maxConcurrent is a ceiling, not a scheduling guarantee: Pi 0.85 serializes all tool calls when any stateful/mutating or MCP tool is offered.";
     }
     if (id === "runtime.retry.primaryAttempts") {
         return "Total attempts on runtime.model including the first, before the chain advances. Retries fire only for transient provider failures (overloaded, rate-limited, timeout, network, 5xx); context overflow and bad credentials advance immediately. Set 1 to disable.";
@@ -1513,21 +1659,32 @@ function descriptionFor(id) {
     if (id === "runtime.retry.maxBackoffMs") {
         return "Ceiling for the doubling same-model retry delay.";
     }
-    if (id === "runtime.routeSafety") {
-        return "Uniform preserves one shared safety contract; per-route-native uses and reports each provider's explicit contract.";
-    }
     if (id === "runtime.effort") {
-        return "Route-specific effort. Reasoning-capable pi:* maps ultra to LOW; Pi without reasoning uses OFF. Direct codex:* forwards ultra unchanged. Mono-agent rejects ultra on its Claude SDK route because the pinned SDK public contract ends at max (the SDK JavaScript itself forwards the value). The Claude CLI route passes --effort ultra, but both tested Claude Code binaries (SDK-bundled 2.1.206 and local 2.1.210) warn that it is unknown, ignore it, and use default effort. Direct OpenCode rejects explicit effort. Ranking above max only prevents keyword downgrade.";
+        return "Route-specific effort forwarded through Pi to the selected provider. Doctor warns when a configured value falls outside the model's advertised ladder but keeps turn-time handling permissive. Ranking above max only prevents keyword downgrade.";
     }
     if (id === "tools.mcpRequestContextServers") {
         return "Configured stdio MCP server names that receive trusted per-request conversation, run, output-directory, and scoped progress context.";
     }
+    if (id === "tools.web.coordination")
+        return "Host mode shares web request budgets and cooldowns across participating local mono-agent processes; process preserves isolated coordination.";
     if (id === "tools.web.search.backend") {
-        return "WebSearch backend: auto tries configured local SearXNG, then ChatGPT-subscription Codex search, then keyless fallbacks; searxng, codex, and keyless are strict.";
+        return "WebSearch backend: auto uses explicitly configured Ollama, configured local SearXNG, ChatGPT-subscription Codex search, then keyless fallbacks. searxng, ollama, codex, and keyless are strict.";
     }
-    if (id === "tools.web.search.endpoint") {
+    if (id === "tools.web.search.maxRequestsPerRun") {
+        return "Hard ceiling from 1 to 20 on actual provider search requests in one logical runtime run; cache hits, coalesced followers, cooldown skips, and quota skips consume no request. Default 4.";
+    }
+    if (id === "tools.web.search.searxng.endpoint") {
         return "Optional unauthenticated loopback HTTP SearXNG base URL. Remote HTTPS, credentials, query strings, and fragments are rejected.";
     }
+    if (id === "tools.web.search.ollama.baseUrl") {
+        return "Ollama origin. Defaults to local http://127.0.0.1:11434 in strict Ollama mode. Hosted search is exactly https://ollama.com; custom public origins require HTTPS and trustPublicUrl=true.";
+    }
+    if (id === "tools.web.search.ollama.trustPublicUrl") {
+        return "Explicit acknowledgement for an HTTPS custom public Ollama origin. It never permits sending hosted credentials to that origin.";
+    }
+    if (id === "tools.web.search.endpoint") {
+        return "Compatibility alias for tools.web.search.searxng.endpoint and MONO_AGENT_WEB_SEARCH_SEARXNG_ENDPOINT. Existing configurations remain valid; new configurations should use the provider-specific block.";
+    }
     if (id === "tools.web.search.codex.model") {
         return "Codex app-server model used for ChatGPT-subscription web search. The signed-in account must expose both this model and web search; default gpt-5.6-luna.";
     }