@moonshot-ai/kimi-code 0.23.5 → 0.23.6

package/dist/main.mjs

@@ -1063,7 +1063,7 @@ var init_provider$1 = __esmMin((() => {}));
 function isUnknownCapability(capability) {
 	if (capability === UNKNOWN_CAPABILITY) return true;
 	if (capability[UNKNOWN_CAPABILITY_MARKER] === true) return true;
-	return !capability.image_in && !capability.video_in && !capability.audio_in && !capability.thinking && !capability.tool_use && capability.select_tools !== true && capability.max_context_tokens === 0;
+	return !capability.image_in && !capability.video_in && !capability.audio_in && !capability.thinking && !capability.tool_use && capability.dynamically_loaded_tools !== true && capability.max_context_tokens === 0;
 }
 var UNKNOWN_CAPABILITY_MARKER, UNKNOWN_CAPABILITY;
 var init_capability = __esmMin((() => {
@@ -1075,7 +1075,7 @@ var init_capability = __esmMin((() => {
 		thinking: false,
 		tool_use: false,
 		max_context_tokens: 0,
-		select_tools: false
+		dynamically_loaded_tools: false
 	}, UNKNOWN_CAPABILITY_MARKER, { value: true }));
 }));
 //#endregion
@@ -55117,7 +55117,7 @@ function catalogModelToCapability(model) {
 			thinking: Boolean(model.reasoning),
 			tool_use: model.tool_call ?? true,
 			max_context_tokens: context,
-			select_tools: model.select_tools === true
+			dynamically_loaded_tools: model.dynamically_loaded_tools === true
 		}
 	};
 }
@@ -62007,7 +62007,7 @@ function isValidPermissionPattern(pattern) {
 		return false;
 	}
 }
-var ProviderTypeSchema, OAuthRefSchema, StringRecordSchema, ProviderConfigSchema, ModelAliasBaseSchema, ModelAliasOverrideSchema, ModelAliasSchema, ThinkingConfigSchema, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleScopeSchema, PermissionRuleSchema, PermissionConfigSchema, LoopControlSchema, BackgroundConfigSchema, ImageConfigSchema, ModelCatalogConfigSchema, ExperimentalConfigSchema, HookDefSchema, MoonshotServiceConfigSchema, ServicesConfigSchema, McpServerCommonFields, McpServerStdioConfigSchema, McpServerHttpConfigSchema, McpServerSseConfigSchema, McpServerConfigDiscriminatedSchema, McpServerConfigSchema, KimiConfigSchema, ProviderConfigPatchSchema, ModelAliasPatchSchema, ThinkingConfigPatchSchema, PermissionConfigPatchSchema, LoopControlPatchSchema, BackgroundConfigPatchSchema, ImageConfigPatchSchema, ModelCatalogConfigPatchSchema, ExperimentalConfigPatchSchema, MoonshotServiceConfigPatchSchema, ServicesConfigPatchSchema, KimiConfigPatchSchema;
+var ProviderTypeSchema, OAuthRefSchema, StringRecordSchema, ProviderConfigSchema, ModelAliasBaseSchema, ModelAliasOverrideSchema, ModelAliasSchema, ThinkingConfigSchema, PermissionModeSchema, PermissionRuleDecisionSchema, PermissionRuleScopeSchema, PermissionRuleSchema, PermissionConfigSchema, LoopControlSchema, BackgroundConfigSchema, SubagentConfigSchema, ImageConfigSchema, ModelCatalogConfigSchema, ExperimentalConfigSchema, HookDefSchema, MoonshotServiceConfigSchema, ServicesConfigSchema, McpServerCommonFields, McpServerStdioConfigSchema, McpServerHttpConfigSchema, McpServerSseConfigSchema, McpServerConfigDiscriminatedSchema, McpServerConfigSchema, KimiConfigSchema, ProviderConfigPatchSchema, ModelAliasPatchSchema, ThinkingConfigPatchSchema, PermissionConfigPatchSchema, LoopControlPatchSchema, BackgroundConfigPatchSchema, SubagentConfigPatchSchema, ImageConfigPatchSchema, ModelCatalogConfigPatchSchema, ExperimentalConfigPatchSchema, MoonshotServiceConfigPatchSchema, ServicesConfigPatchSchema, KimiConfigPatchSchema;
 var init_schema = __esmMin((() => {
 	init_types$18();
 	init_matches_rule();
@@ -62097,8 +62097,15 @@ var init_schema = __esmMin((() => {
 		maxRunningTasks: number$1().int().min(1).optional(),
 		keepAliveOnExit: boolean$1().optional(),
 		killGracePeriodMs: number$1().int().min(0).optional(),
-		printWaitCeilingS: number$1().int().min(1).optional()
+		printWaitCeilingS: number$1().int().min(1).optional(),
+		printBackgroundMode: _enum([
+			"exit",
+			"drain",
+			"steer"
+		]).optional(),
+		printMaxTurns: number$1().int().min(1).optional()
 	});
+	SubagentConfigSchema = object({ timeoutMs: number$1().int().min(1).optional() });
 	ImageConfigSchema = object({
 		/**
 		* Longest-edge ceiling (px) applied when compressing images for the model.
@@ -62204,6 +62211,7 @@ var init_schema = __esmMin((() => {
 		extraSkillDirs: array(string()).optional(),
 		loopControl: LoopControlSchema.optional(),
 		background: BackgroundConfigSchema.optional(),
+		subagent: SubagentConfigSchema.optional(),
 		image: ImageConfigSchema.optional(),
 		modelCatalog: ModelCatalogConfigSchema.optional(),
 		experimental: ExperimentalConfigSchema.optional(),
@@ -62216,6 +62224,7 @@ var init_schema = __esmMin((() => {
 	PermissionConfigPatchSchema = PermissionConfigSchema.partial();
 	LoopControlPatchSchema = LoopControlSchema.partial();
 	BackgroundConfigPatchSchema = BackgroundConfigSchema.partial();
+	SubagentConfigPatchSchema = SubagentConfigSchema.partial();
 	ImageConfigPatchSchema = ImageConfigSchema.partial();
 	ModelCatalogConfigPatchSchema = ModelCatalogConfigSchema.partial();
 	ExperimentalConfigPatchSchema = ExperimentalConfigSchema;
@@ -62241,6 +62250,7 @@ var init_schema = __esmMin((() => {
 		extraSkillDirs: array(string()).optional(),
 		loopControl: LoopControlPatchSchema.optional(),
 		background: BackgroundConfigPatchSchema.optional(),
+		subagent: SubagentConfigPatchSchema.optional(),
 		image: ImageConfigPatchSchema.optional(),
 		modelCatalog: ModelCatalogConfigPatchSchema.optional(),
 		experimental: ExperimentalConfigPatchSchema.optional(),
@@ -63744,6 +63754,7 @@ function transformTomlData(data) {
 		else if (targetKey === "background" && isPlainObject$2(value)) result[targetKey] = transformPlainObject(value);
 		else if (targetKey === "image" && isPlainObject$2(value)) result[targetKey] = transformPlainObject(value);
 		else if (targetKey === "experimental" && isPlainObject$2(value)) result[targetKey] = cloneRecord$2(value);
+		else if (targetKey === "subagent" && isPlainObject$2(value)) result[targetKey] = transformPlainObject(value);
 		else if (!isPlainObject$2(value)) result[targetKey] = value;
 	}
 	return result;
@@ -63854,6 +63865,7 @@ function configToTomlData(config) {
 	setSection(out, "services", config.services, servicesToToml);
 	setSection(out, "loop_control", config.loopControl, loopControlToToml);
 	setSection(out, "background", config.background, backgroundToToml);
+	setSection(out, "subagent", config.subagent, subagentToToml);
 	setSection(out, "image", config.image, imageToToml);
 	setSection(out, "experimental", config.experimental, experimentalToToml);
 	setSection(out, "permission", config.permission, permissionToToml);
@@ -63945,6 +63957,11 @@ function backgroundToToml(background, rawBackground) {
 	for (const [key, value] of Object.entries(background)) setDefined(out, camelToSnake$3(key), value);
 	return out;
 }
+function subagentToToml(subagent, rawSubagent) {
+	const out = cloneRecord$2(rawSubagent);
+	for (const [key, value] of Object.entries(subagent)) setDefined(out, camelToSnake$3(key), value);
+	return out;
+}
 function imageToToml(image, rawImage) {
 	const out = cloneRecord$2(rawImage);
 	for (const [key, value] of Object.entries(image)) setDefined(out, camelToSnake$3(key), value);
@@ -68630,7 +68647,7 @@ var init_registry$1 = __esmMin((() => {
 	FLAG_DEFINITIONS = [{
 		id: "tool-select",
 		title: "Tool select (progressive tool disclosure)",
-		description: "Keep MCP tool schemas out of the immutable top-level tools[]; the model loads them on demand via the select_tools tool. Only takes effect on models whose capability catalog declares select_tools.",
+		description: "Keep MCP tool schemas out of the immutable top-level tools[]; the model loads them on demand via the select_tools tool. Only takes effect on models whose capability catalog declares dynamically loaded tools.",
 		env: "KIMI_CODE_EXPERIMENTAL_TOOL_SELECT",
 		default: false,
 		surface: "core"
@@ -121218,10 +121235,10 @@ function isLoadableToolsAnnouncement(message) {
 * Shape a history for a consumer that must not see dynamic-tool protocol
 * context: drop the loadable-tools announcements and strip `message.tools`
 * (dropping the message entirely when nothing else remains). Two callers:
-*   - projection for a model without the `select_tools` capability (mid-session
-*     model switch — the canonical history keeps its shape, only the outgoing
-*     view changes; announcements would be noise and even reference a
-*     select_tools tool the model does not have);
+*   - projection for a model without the dynamically-loaded-tools capability
+*     (mid-session model switch — the canonical history keeps its shape, only
+*     the outgoing view changes; announcements would be noise and even
+*     reference a select_tools tool the model does not have);
 *   - the compaction summarizer input (schemas and announcements are protocol
 *     context, not conversation — summarizing them wastes tokens and risks
 *     leaking schema text into the summary).
@@ -123582,6 +123599,21 @@ var init_manager$2 = __esmMin((() => {
 			return this.scheduler.getNextFireForTask(taskId);
 		}
 		/**
+		* Enumerate every scheduled task with its post-jitter next fire time.
+		* Unlike the CronList tool (which renders for the model), this returns
+		* structured data for host applications polling for pending work.
+		*/
+		listTaskSnapshots() {
+			return this.store.list().map((task) => ({
+				id: task.id,
+				cron: task.cron,
+				recurring: task.recurring !== false,
+				createdAt: task.createdAt,
+				lastFiredAt: task.lastFiredAt,
+				nextFireAt: this.scheduler.getNextFireForTask(task.id)
+			}));
+		}
+		/**
 		* Stale judgment.
 		*
 		*   - `KIMI_CRON_NO_STALE=1` short-circuits to false (bench).
@@ -144351,479 +144383,6 @@ var init_output = __esmMin((() => {
 	MCP_MAX_BINARY_PART_CHARS = Math.ceil(MCP_MAX_BINARY_PART_BYTES * 4 / 3);
 }));
 //#endregion
-//#region ../../packages/agent-core/src/agent/llm-request-logger.ts
-function splitGenerateOptions(options) {
-	if (options === void 0) return {
-		requestLogFields: void 0,
-		generateOptions: void 0
-	};
-	const { requestLogFields, ...generateOptions } = options;
-	return {
-		requestLogFields,
-		generateOptions
-	};
-}
-function toolSignature(tools) {
-	return tools.map(({ name, description, parameters }) => ({
-		name,
-		description,
-		parameters
-	}));
-}
-function fingerprint(content) {
-	return createHash("sha256").update(content).digest("hex");
-}
-var LlmRequestLogger;
-var init_llm_request_logger = __esmMin((() => {
-	LlmRequestLogger = class {
-		log;
-		lastConfigLogSignature;
-		constructor(log) {
-			this.log = log;
-		}
-		logRequest(input) {
-			const { provider, modelAlias, systemPrompt, tools, messages, fields } = input;
-			const requestLogFields = fields ?? {};
-			const wireTools = tools.filter((tool) => tool.deferred !== true);
-			const config = {
-				provider: provider.name,
-				model: provider.modelName,
-				modelAlias,
-				thinkingEffort: provider.thinkingEffort ?? void 0,
-				systemPromptChars: systemPrompt.length,
-				toolCount: wireTools.length
-			};
-			const signature = JSON.stringify({
-				...config,
-				systemPromptHash: fingerprint(systemPrompt),
-				toolsHash: fingerprint(JSON.stringify(toolSignature(wireTools)))
-			});
-			if (signature !== this.lastConfigLogSignature) {
-				this.lastConfigLogSignature = signature;
-				this.log.info("llm config", {
-					...requestLogFields,
-					...config
-				});
-			}
-			const partialMessageCount = messages.filter((message) => message.partial === true).length;
-			const requestFields = { ...requestLogFields };
-			if (partialMessageCount > 0) requestFields.partialMessageCount = partialMessageCount;
-			this.log.info("llm request", requestFields);
-		}
-	};
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/background/task-output.md?raw
-var task_output_default;
-var init_task_output$1 = __esmMin((() => {
-	task_output_default = "Retrieve output from a running or completed background task.\n\nUse this after `Bash(run_in_background=true)` or `Agent(run_in_background=true)` when you need to inspect progress or explicitly wait for completion.\n\nGuidelines:\n- Prefer relying on automatic completion notifications. Use this tool only when you need task output before the automatic notification arrives.\n- Do not use TaskOutput to wait for a result you need before continuing — if your next step depends on the task's result, run that task in the foreground instead. TaskOutput is for a deliberate progress check you will act on without blocking, not a way to sit and wait for a background task you just launched.\n- By default this tool is non-blocking and returns a current status/output snapshot.\n- Use block=true only when you intentionally want to wait for completion or timeout.\n- This tool returns structured task metadata, a fixed-size output preview, and an output_path for the full log.\n- For a terminal task, the metadata also explains why it ended. A shell command that runs to completion reports `status: completed` on a zero exit, or `status: failed` with its non-zero `exit_code` — judge that failure from the `exit_code`, because a plain command failure carries no `stop_reason` and no `terminal_reason`. `terminal_reason` is a categorical label emitted only when the end is not an ordinary exit: `timed_out` when the deadline aborted it, `stopped` when it was explicitly stopped, or `failed` when it errored without producing an exit code; the `stopped` and `failed` cases also carry a human-readable `stop_reason`. A task that finished on its own with a clean exit carries neither `stop_reason` nor `terminal_reason`.\n- The full, never-truncated log is always available at output_path; use the `Read` tool with that path to page through it, whether or not the preview was truncated.\n- This tool works with the generic background task system and should remain the primary read path for future task types, not just bash.\n";
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/background/task-output.ts
-function retrievalStatus(status, block) {
-	if (isBackgroundTaskTerminal(status)) return "success";
-	return block ? "timeout" : "not_ready";
-}
-function terminalReason(info) {
-	if (info.status === "timed_out") return "timed_out";
-	if (info.status === "killed" && info.stopReason !== void 0) return "stopped";
-	if (info.status === "failed" && info.stopReason !== void 0) return "failed";
-}
-function fullOutputHint(output) {
-	if (!output.fullOutputAvailable || output.outputPath === void 0) return void 0;
-	if (output.truncated) return `Only the last ${String(OUTPUT_PREVIEW_BYTES)} bytes are shown above. Use the Read tool with the output_path to page through the full log (parameters: path, line_offset, n_lines; read about ${String(PAGING_HINT_LINES)} lines per page).`;
-	return `The preview above is the complete output. Use the Read tool with the output_path if you need to re-read the full log later (parameters: path, line_offset, n_lines; read about ${String(PAGING_HINT_LINES)} lines per page).`;
-}
-var OUTPUT_PREVIEW_BYTES, PAGING_HINT_LINES, TaskOutputInputSchema, TaskOutputTool;
-var init_task_output = __esmMin((() => {
-	init_zod$1();
-	init_background();
-	init_input_schema();
-	init_rule_match();
-	init_format();
-	init_task_output$1();
-	OUTPUT_PREVIEW_BYTES = 32 * 1024;
-	PAGING_HINT_LINES = 300;
-	TaskOutputInputSchema = object({
-		task_id: string().describe("The background task ID to inspect."),
-		block: boolean$1().default(false).describe("Whether to wait for the task to finish before returning.").optional(),
-		timeout: number$1().int().min(0).max(3600).default(30).describe("Maximum number of seconds to wait when block=true.").optional()
-	});
-	TaskOutputTool = class {
-		manager;
-		name = "TaskOutput";
-		description = task_output_default;
-		parameters = toInputJsonSchema(TaskOutputInputSchema);
-		constructor(manager) {
-			this.manager = manager;
-		}
-		resolveExecution(args) {
-			return {
-				description: `Reading output of task ${args.task_id}`,
-				approvalRule: this.name,
-				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.task_id),
-				execute: () => this.execute(args)
-			};
-		}
-		async execute(args) {
-			const info = this.manager.getTask(args.task_id);
-			if (!info) return {
-				isError: true,
-				output: `Task not found: ${args.task_id}`
-			};
-			if (args.block && !isBackgroundTaskTerminal(info.status)) await this.manager.wait(args.task_id, (args.timeout ?? 30) * 1e3);
-			const current = this.manager.getTask(args.task_id);
-			if (!current) return {
-				isError: true,
-				output: `Task not found: ${args.task_id}`
-			};
-			const output = await this.manager.getOutputSnapshot(args.task_id, OUTPUT_PREVIEW_BYTES);
-			const lines = [formatPlainObject({
-				retrievalStatus: retrievalStatus(current.status, args.block),
-				...current,
-				outputPath: output.outputPath,
-				terminalReason: terminalReason(current),
-				outputSizeBytes: output.outputSizeBytes,
-				outputPreviewBytes: output.previewBytes,
-				outputTruncated: output.truncated,
-				fullOutputAvailable: output.fullOutputAvailable,
-				fullOutputTool: output.fullOutputAvailable && output.outputPath !== void 0 ? "Read" : void 0,
-				fullOutputHint: fullOutputHint(output)
-			}), ""];
-			if (output.truncated) lines.push(output.fullOutputAvailable && output.outputPath !== void 0 ? `[Truncated. Full output: ${output.outputPath}]` : "[Truncated. No persisted full log is available for this task.]");
-			lines.push("[output]", output.preview || "[no output available]");
-			return {
-				output: lines.join("\n"),
-				isError: false,
-				message: "Task snapshot retrieved."
-			};
-		}
-	};
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/background/task-stop.md?raw
-var task_stop_default;
-var init_task_stop$1 = __esmMin((() => {
-	task_stop_default = "Stop a running background task.\n\nOnly use this when a task must genuinely be cancelled — for a task that is\nfinishing normally, wait for its completion notification or inspect it with\n`TaskOutput` instead of stopping it.\n\nGuidelines:\n- This is a general-purpose stop capability for any background task. It is not\n  a bash-specific kill.\n- Stopping a task is destructive: it may leave partial side effects behind.\n  Use it with care.\n- If the task has already finished, this tool simply returns its current\n  status.\n";
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/background/task-stop.ts
-function terminalStopReason(reason) {
-	const trimmed = reason?.trim();
-	return trimmed === void 0 || trimmed.length === 0 ? "Task already in terminal state" : trimmed;
-}
-var TaskStopInputSchema, TaskStopTool;
-var init_task_stop = __esmMin((() => {
-	init_zod$1();
-	init_background();
-	init_input_schema();
-	init_rule_match();
-	init_task_stop$1();
-	TaskStopInputSchema = object({
-		task_id: string().describe("The background task ID to stop."),
-		reason: string().default("Stopped by TaskStop").describe("Short reason recorded when the task is stopped.").optional()
-	});
-	TaskStopTool = class {
-		manager;
-		name = "TaskStop";
-		description = task_stop_default;
-		parameters = toInputJsonSchema(TaskStopInputSchema);
-		constructor(manager) {
-			this.manager = manager;
-		}
-		resolveExecution(args) {
-			return {
-				description: `Stopping task ${args.task_id}`,
-				approvalRule: this.name,
-				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.task_id),
-				execute: async () => {
-					const info = this.manager.getTask(args.task_id);
-					if (!info) return {
-						isError: true,
-						output: `Task not found: ${args.task_id}`
-					};
-					const trimmedReason = args.reason?.trim();
-					const reason = trimmedReason === void 0 || trimmedReason.length === 0 ? "Stopped by TaskStop" : trimmedReason;
-					if (isBackgroundTaskTerminal(info.status)) return {
-						output: `task_id: ${info.taskId}\nstatus: ${info.status}\nreason: ${terminalStopReason(info.stopReason)}`,
-						isError: false
-					};
-					await this.manager.suppressTerminalNotification(args.task_id);
-					const result = await this.manager.stop(args.task_id, reason);
-					if (!result) return {
-						isError: true,
-						output: `Failed to stop task: ${args.task_id}`
-					};
-					return {
-						output: `task_id: ${result.taskId}\nstatus: ${result.status}\nreason: ${result.stopReason ?? reason}`,
-						isError: false
-					};
-				}
-			};
-		}
-	};
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/time-format.ts
-/**
-* Render cron-facing timestamps in local wall time with an explicit
-* numeric offset. Cron expressions are evaluated in local time, so the
-* tool output should preserve that mental model while remaining
-* unambiguous and parseable as ISO 8601.
-*/
-function formatLocalIsoWithOffset(ms) {
-	const date = new Date(ms);
-	const offsetMin = -date.getTimezoneOffset();
-	const sign = offsetMin >= 0 ? "+" : "-";
-	const absOffset = Math.abs(offsetMin);
-	const offset = `${sign}${pad(Math.floor(absOffset / 60))}:${pad(absOffset % 60)}`;
-	return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}T${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}.${String(date.getMilliseconds()).padStart(3, "0")}${offset}`;
-}
-function pad(n) {
-	return String(n).padStart(2, "0");
-}
-var init_time_format = __esmMin((() => {}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-create.md?raw
-var cron_create_default;
-var init_cron_create$1 = __esmMin((() => {
-	cron_create_default = "Schedule a prompt to be enqueued at a future time. Use for both recurring schedules and one-shot reminders.\n\nUses standard 5-field cron in the user's local timezone: minute hour day-of-month month day-of-week. `0 9 * * *` means 9am local — no timezone conversion needed.\n\n## One-shot tasks (recurring: false)\n\nFor \"remind me at X\" or \"at <time>, do Y\" requests — fire once then auto-delete.\nPin minute/hour/day-of-month/month to specific values:\n  \"remind me at 2:30pm today to check the deploy\" → cron: \"30 14 <today_dom> <today_month> *\", recurring: false\n  \"tomorrow morning, run the smoke test\" → cron: \"57 8 <tomorrow_dom> <tomorrow_month> *\", recurring: false\n\nOne-shots are best for near-term reminders. A task only fires while its session is still alive (see Session lifetime below), so favor near times — within hours or a few days — rather than scheduling weeks or months ahead.\n\n## Recurring jobs (recurring: true, the default)\n\nFor \"every N minutes\" / \"every hour\" / \"weekdays at 9am\" requests:\n  \"*/5 * * * *\" (every 5 min), \"0 * * * *\" (hourly), \"0 9 * * 1-5\" (weekdays at 9am local)\n\n## Avoid the :00 and :30 minute marks when the task allows it\n\nEvery user who asks for \"9am\" gets `0 9`, and every user who asks for \"hourly\" gets `0 *` — which means requests from across the planet land on the API at the same instant. When the user's request is approximate, pick a minute that is NOT 0 or 30:\n  \"every morning around 9\" → \"57 8 * * *\" or \"3 9 * * *\" (not \"0 9 * * *\")\n  \"hourly\" → \"7 * * * *\" (not \"0 * * * *\")\n  \"in an hour or so, remind me to...\" → pick whatever minute you land on, don't round\n\nOnly use minute 0 or 30 when the user names that exact time and clearly means it (\"at 9:00 sharp\", \"at half past\", coordinating with a meeting). When in doubt, nudge a few minutes early or late — the user will not notice, and the fleet will.\n\n## Coalesce semantics\n\nFires are delivered only while the session is idle: a fire that comes due during an active turn is held and delivered at the next idle moment, never injected mid-turn.\n\nIf the scheduler slept past multiple ideal fire times (laptop closed, long-running turn, etc.), only **one** fire is delivered when it wakes up. The origin carries `coalescedCount` showing how many ideal fires were collapsed into this single delivery. You should treat `coalescedCount > 1` as \"I missed some checks; only the latest state matters\" rather than running the prompt that many times.\n\n## Cron-fire envelope\n\nWhen a cron task fires, the prompt you scheduled is re-injected wrapped in an XML envelope that exposes the fire context:\n\n```\n<cron-fire jobId=\"...\" cron=\"...\" recurring=\"true|false\" coalescedCount=\"N\" stale=\"true|false\">\n<prompt>\nyour original prompt text, verbatim\n</prompt>\n</cron-fire>\n```\n\nThe envelope is parseable. Use `coalescedCount > 1` to know multiple ideal fires were collapsed into a single delivery (treat as \"only the latest state matters\"), and `stale=\"true\"` as a cue that the task is past its 7-day threshold.\n\n## 7-day stale behavior\n\nRecurring tasks that have been alive for more than 7 days fire one\nfinal time with `stale: true` on the envelope, and the system then\nauto-deletes the task. The flag is the model's notice that this is\nthe last delivery. If the schedule is still wanted, call `CronCreate`\nagain with the same `cron` and `prompt` — that resets `createdAt` and\nstarts a fresh 7-day window. One-shot tasks are never marked stale.\n\n## Jitter behavior\n\nAnti-herd jitter is applied deterministically per task id:\n  - Recurring: ideal fire time is shifted **forward** by an offset ≤ min(10% of the cron period, 15 minutes). A `*/5 * * * *` task can drift up to 30s; a `0 9 * * *` task can drift up to 15 minutes.\n  - One-shot: only when the ideal fire lands on `:00` or `:30` of the hour, the fire is pulled **earlier** by ≤ 90 seconds. Other minutes pass through unchanged.\n\n## One-shot vs recurring — when to pick which\n\nUse `recurring: false` for \"remind me at X\" style requests, single deadlines, \"in N minutes do Y\", and any task that should not repeat. Use `recurring: true` for periodic polling (CI status, build watchers, scheduled reports), workday rituals, and anything the user explicitly described as recurring.\n\n## Session lifetime\n\nCron tasks live in the current kimi CLI session. When you exit, they\nare persisted under the session homedir; the next `kimi resume` of the\nsame session reloads them and the scheduler resumes from each task's\n`createdAt`. Fire times that fell during the offline window are\ncollapsed into a single delivery via `coalescedCount` (and recurring\ntasks past their 7-day window arrive with `stale: true` as their final\ndelivery).\n\nTasks do **not** carry over into a brand-new session — they are scoped\nto the resumed session id, not to the working directory.\n\n## Limits\n\nA session holds at most 50 live cron tasks; creating one beyond that is rejected. (The `prompt` body is also capped — see its parameter description.) Expressions that never fire within the next 5 years (e.g. `0 0 31 2 *`, an impossible date) are rejected at create time.\n\n## Returned fields\n\n`id` (8-hex), `cron` (the normalized expression), `humanSchedule` (English summary), `recurring`,\n`nextFireAt` (local ISO timestamp with numeric offset, or null). `id` is needed by `CronDelete`.\n\n## Tell the user how to cancel or modify\n\nAfter successfully creating a task, proactively tell the user how they can cancel or modify it later. Users have no direct `/cron` command or self-service UI to manage reminders themselves; they must ask the model to make changes (e.g. \"cancel my 9am reminder\" or \"change my daily check to 10am\"). Include the task `id` in your message so the user can reference it.\n";
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-create.ts
-function formatOutput(o) {
-	return [
-		`id: ${o.id}`,
-		`cron: ${o.cron}`,
-		`humanSchedule: ${o.humanSchedule}`,
-		`recurring: ${String(o.recurring)}`,
-		`nextFireAt: ${o.nextFireAt === null ? "null" : formatLocalIsoWithOffset(o.nextFireAt)}`
-	].join("\n");
-}
-var MAX_PROMPT_BYTES, ONE_SHOT_MAX_FUTURE_MS, CronCreateInputSchema, CronCreateTool;
-var init_cron_create = __esmMin((() => {
-	init_zod$1();
-	init_input_schema();
-	init_rule_match();
-	init_cron_expr();
-	init_jitter();
-	init_time_format();
-	init_cron_create$1();
-	MAX_PROMPT_BYTES = 8 * 1024;
-	ONE_SHOT_MAX_FUTURE_MS = 350 * 24 * 60 * 60 * 1e3;
-	CronCreateInputSchema = object({
-		cron: string().describe("5-field cron expression in local time: \"M H DoM Mon DoW\" (e.g. \"*/5 * * * *\" = every 5 minutes; \"30 14 28 2 *\" = Feb 28 at 2:30pm local — a pinned date like this repeats yearly unless you also pass recurring: false)."),
-		prompt: string().min(1).max(MAX_PROMPT_BYTES).describe("The prompt to enqueue at each fire time. Limited to 8 KiB (UTF-8)."),
-		recurring: boolean$1().optional().default(true).describe("true (default) = fire on every cron match until deleted or auto-expired after 7 days. false = fire once at the next match, then auto-delete. Use false for \"remind me at X\" one-shot requests with pinned minute/hour/dom/month.")
-	});
-	CronCreateTool = class {
-		manager;
-		name = "CronCreate";
-		description = cron_create_default;
-		parameters = toInputJsonSchema(CronCreateInputSchema);
-		constructor(manager) {
-			this.manager = manager;
-		}
-		resolveExecution(args) {
-			if (process.env["KIMI_DISABLE_CRON"] === "1") return {
-				isError: true,
-				output: "Cron scheduling is disabled (KIMI_DISABLE_CRON=1)."
-			};
-			const normalizedCron = args.cron.trim().split(/\s+/).join(" ");
-			let parsed;
-			try {
-				parsed = parseCronExpression(normalizedCron);
-			} catch (err) {
-				return {
-					isError: true,
-					output: `Invalid cron expression: ${err instanceof Error ? err.message : String(err)}`
-				};
-			}
-			const nowAtPrepare = this.manager.clocks.wallNow();
-			if (!hasFireWithinYears(parsed, 5, nowAtPrepare)) return {
-				isError: true,
-				output: `Cron expression ${JSON.stringify(normalizedCron)} has no fire within 5 years; refusing to schedule.`
-			};
-			if (this.manager.store.list().length >= 50) return {
-				isError: true,
-				output: `Cron job cap reached (max ${String(50)} per session).`
-			};
-			const byteLen = Buffer.byteLength(args.prompt, "utf8");
-			if (byteLen > MAX_PROMPT_BYTES) return {
-				isError: true,
-				output: `Prompt exceeds ${String(MAX_PROMPT_BYTES)} bytes (got ${String(byteLen)}).`
-			};
-			const recurring = args.recurring !== false;
-			if (!recurring) {
-				const firstFire = computeNextCronRun(parsed, nowAtPrepare);
-				if (firstFire !== null && firstFire - nowAtPrepare > ONE_SHOT_MAX_FUTURE_MS) return {
-					isError: true,
-					output: `One-shot cron ${JSON.stringify(normalizedCron)} would not fire until ${formatLocalIsoWithOffset(firstFire)} (more than a year out). If you meant "today" or a near date, the pinned day/month has already passed this year — pick a future date or use wildcards.`
-				};
-			}
-			return {
-				description: recurring ? `Scheduling cron ${normalizedCron}` : `Scheduling one-shot ${normalizedCron}`,
-				approvalRule: literalRulePattern(this.name, JSON.stringify({
-					cron: normalizedCron,
-					prompt: args.prompt,
-					recurring
-				})),
-				execute: async () => {
-					const nowMs = this.manager.clocks.wallNow();
-					if (this.manager.store.list().length >= 50) return {
-						isError: true,
-						output: `Cron job cap reached (max ${String(50)} per session).`
-					};
-					const task = this.manager.addTask({
-						cron: normalizedCron,
-						prompt: args.prompt,
-						recurring
-					});
-					const ideal = computeNextCronRun(parsed, nowMs);
-					const nextFireAt = ideal === null ? null : recurring ? jitteredNextCronRunMs(task, parsed, ideal) : oneShotJitteredNextCronRunMs(task, ideal);
-					const humanSchedule = cronToHuman(parsed);
-					this.manager.emitScheduled(task);
-					return {
-						output: formatOutput({
-							id: task.id,
-							cron: normalizedCron,
-							humanSchedule,
-							recurring,
-							nextFireAt
-						}),
-						isError: false,
-						message: `Scheduled cron ${task.id}`
-					};
-				}
-			};
-		}
-	};
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-delete.md?raw
-var cron_delete_default;
-var init_cron_delete$1 = __esmMin((() => {
-	cron_delete_default = "Cancel a scheduled cron job by id.\n\nUse this tool to remove a cron task previously scheduled with\n`CronCreate`. The `id` is the 8-hex value returned by `CronCreate`, or\nshown in the `id:` column of `CronList` — quote it verbatim, no\nprefix.\n\nBehaviour by task kind:\n\n- **Recurring task** (`recurring: true`): stops all future fires\n  immediately. The scheduler picks up the deletion on its next tick.\n- **One-shot task** (`recurring: false`): cancels the pending fire if\n  it has not happened yet. One-shots that have already fired\n  auto-delete themselves, so calling `CronDelete` on a fired one-shot\n  returns \"no cron job with id ...\".\n\nNot-found is reported as an error (not a silent no-op) so you can\ncorrect yourself — typically by calling `CronList` to see which ids\nare actually live, rather than re-trying with the same stale id.\n\nRefresh pattern (use when you want a stale recurring schedule to\ncontinue):\n\nStale recurring tasks are auto-deleted by the system after their final\nfire — there is nothing for `CronDelete` to remove at that point. To\nkeep the schedule running, just call `CronCreate` with the same `cron`\nand `prompt`. Use `CronList`'s `prompt` field to recall the original\ntext after a context compaction.\n\n`CronDelete` remains the right call when you want to cancel a task\nthat is still live (recurring not yet stale, or a one-shot still\npending).\n\nGuidelines:\n\n- Users have no direct `/cron` command or self-service UI to delete\n  tasks themselves; they must ask the model to cancel a reminder.\n  When deleting on behalf of a user, confirm the action and report\n  the result plainly.\n- Cron deletion is irreversible — there is no undo. If you delete the\n  wrong task, you must re-create it with `CronCreate`.\n- If the model is unsure which id is current (e.g. after a context\n  compaction), call `CronList` first rather than guessing.\n";
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-delete.ts
-var ID_PATTERN, CronDeleteInputSchema, CronDeleteTool;
-var init_cron_delete = __esmMin((() => {
-	init_zod$1();
-	init_input_schema();
-	init_cron_delete$1();
-	ID_PATTERN = /^[0-9a-f]{8}$/;
-	CronDeleteInputSchema = object({ id: string().describe("The 8-hex cron job id returned by CronCreate / CronList.") });
-	CronDeleteTool = class {
-		manager;
-		name = "CronDelete";
-		description = cron_delete_default;
-		parameters = toInputJsonSchema(CronDeleteInputSchema);
-		constructor(manager) {
-			this.manager = manager;
-		}
-		resolveExecution(args) {
-			if (!ID_PATTERN.test(args.id)) return {
-				isError: true,
-				output: `Invalid cron job id ${JSON.stringify(args.id)} — must be 8 lowercase hex characters.`
-			};
-			return {
-				description: `Deleting cron ${args.id}`,
-				approvalRule: this.name,
-				execute: async () => {
-					if (this.manager.removeTasks([args.id]).length === 0) return {
-						isError: true,
-						output: `No cron job with id ${args.id}.`
-					};
-					this.manager.emitDeleted(args.id);
-					return {
-						output: `Deleted cron job ${args.id}.`,
-						isError: false
-					};
-				}
-			};
-		}
-	};
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-list.md?raw
-var cron_list_default;
-var init_cron_list$1 = __esmMin((() => {
-	cron_list_default = "List all cron jobs currently scheduled in this session.\n\nUse this tool to see every pending cron task — both recurring jobs and\none-shot reminders — that you (or the user) have scheduled with\n`CronCreate`. The output is the entry point for inspecting scheduled\nwork: it returns a stable id, the original cron expression, a human\nrendering, the next post-jitter fire time, the recurring flag, the\ntask's age in days, and a stale indicator.\n\nEach record carries:\n\n- `id` — the 8-hex task id. Pass this to `CronDelete` to remove the\n  task, or quote it in user-facing messages when asking for\n  confirmation.\n- `cron` — the verbatim 5-field cron expression as scheduled.\n- `humanSchedule` — plain-English rendering (e.g. `every 5 minutes`).\n- `prompt` — the scheduled prompt text, JSON-encoded so embedded\n  newlines stay on one line. Truncated to 200 UTF-8 bytes with\n  `…(truncated)` if longer. Use this to recall what a task is for\n  after a context compaction, and as the source for the\n  `CronCreate` refresh ritual.\n- `nextFireAt` — local ISO timestamp with an explicit numeric offset\n  for the next fire **after jitter has been applied**. The actual fire\n  may land slightly before or after a round `:00` / `:30` minute mark\n  due to herd-avoidance jitter; this is the value the scheduler will\n  compare against, so it reflects what will really happen. `null` if\n  the expression has no fire in the next 5 years (should not happen\n  for tasks created through `CronCreate`, which validates).\n- `recurring` — `true` for cadenced jobs, `false` for one-shots.\n- `ageDays` — `(now - createdAt) / day`, two decimal places. Useful\n  when deciding whether a long-running cron is still relevant.\n- `stale` — `true` when a recurring task is older than 7 days. The\n  system **auto-deletes the task after this fire** to bound session\n  lifetime; the `stale: true` flag is the model's notice that this is\n  the final delivery. To resume the same schedule, call `CronCreate`\n  again with the original `cron` and `prompt` (the `prompt` row above\n  carries it for exactly this purpose). One-shots are never marked\n  stale — they fire at most once by construction.\n\nGuidelines:\n\n- This tool is read-only and never mutates state, so it is always\n  safe to call (including in plan mode).\n- Users cannot directly manage cron tasks themselves; if they want to\n  cancel or modify a schedule, route the request through the model\n  (i.e. call `CronDelete` or `CronCreate` on their behalf).\n- The empty case returns `cron_jobs: 0\\nNo cron jobs scheduled.`. Cron\n  tasks survive a `kimi resume` of the same session but do not bleed\n  into new sessions.\n- After a context compaction, or whenever you are unsure which cron\n  jobs are live, call this tool to re-enumerate them rather than\n  guessing ids from earlier in the conversation.\n- Records are separated by a line containing just `---`, in the\n  insertion order they were scheduled.\n";
-}));
-//#endregion
-//#region ../../packages/agent-core/src/tools/cron/cron-list.ts
-function previewPrompt(prompt) {
-	const buf = Buffer.from(prompt, "utf8");
-	if (buf.byteLength <= PROMPT_PREVIEW_BYTES) return prompt;
-	let end = PROMPT_PREVIEW_BYTES;
-	while (end > 0 && (buf[end] & 192) === 128) end--;
-	return `${buf.subarray(0, end).toString("utf8")}…(truncated)`;
-}
-var CronListInputSchema, MS_PER_DAY, PROMPT_PREVIEW_BYTES, CronListTool;
-var init_cron_list = __esmMin((() => {
-	init_zod$1();
-	init_input_schema();
-	init_cron_expr();
-	init_time_format();
-	init_cron_list$1();
-	CronListInputSchema = object({}).strict();
-	MS_PER_DAY = 1440 * 60 * 1e3;
-	PROMPT_PREVIEW_BYTES = 200;
-	CronListTool = class {
-		manager;
-		name = "CronList";
-		description = cron_list_default;
-		parameters = toInputJsonSchema(CronListInputSchema);
-		constructor(manager) {
-			this.manager = manager;
-		}
-		resolveExecution(_args) {
-			return {
-				description: "Listing scheduled cron jobs",
-				approvalRule: this.name,
-				execute: async () => {
-					const tasks = this.manager.store.list();
-					const nowMs = this.manager.clocks.wallNow();
-					const records = tasks.map((t) => this.renderRecord(t, nowMs));
-					const header = `cron_jobs: ${String(tasks.length)}`;
-					if (records.length === 0) return {
-						output: `${header}\nNo cron jobs scheduled.`,
-						isError: false
-					};
-					return {
-						output: `${header}\n${records.join("\n---\n")}`,
-						isError: false
-					};
-				}
-			};
-		}
-		renderRecord(task, nowMs) {
-			const recurring = task.recurring !== false;
-			const ageMs = nowMs - task.createdAt;
-			const ageDays = Number.isFinite(ageMs) ? ageMs / MS_PER_DAY : 0;
-			const stale = this.manager.isStale(task);
-			let humanSchedule = task.cron;
-			let nextFireAtIso = "null";
-			try {
-				humanSchedule = cronToHuman(parseCronExpression(task.cron));
-				const nextFireMs = this.manager.getNextFireForTask(task.id);
-				if (nextFireMs !== null) nextFireAtIso = formatLocalIsoWithOffset(nextFireMs);
-			} catch {}
-			return [
-				`id: ${task.id}`,
-				`cron: ${task.cron}`,
-				`humanSchedule: ${humanSchedule}`,
-				`prompt: ${JSON.stringify(previewPrompt(task.prompt))}`,
-				`nextFireAt: ${nextFireAtIso}`,
-				`recurring: ${String(recurring)}`,
-				`ageDays: ${ageDays.toFixed(2)}`,
-				`stale: ${String(stale)}`
-			].join("\n");
-		}
-	};
-}));
-//#endregion
 //#region ../../packages/agent-core/src/agent/permission/policies/deny-all.ts
 var DenyAllPermissionPolicy;
 var init_deny_all = __esmMin((() => {
@@ -145483,6 +145042,38 @@ var init_summary_continuation = __esmMin((() => {
 }));
 //#endregion
 //#region ../../packages/agent-core/src/session/subagent-host.ts
+/**
+* Resolve the effective subagent per-task timeout. Precedence:
+* `KIMI_SUBAGENT_TIMEOUT_MS` (positive integer ms) → `configMs` →
+* `DEFAULT_SUBAGENT_TIMEOUT_MS` (30 min). Set a large value to effectively
+* disable the cap. The value feeds the background-task manager's per-task
+* timeout, so it governs foreground and background subagents (and AgentSwarm).
+*/
+function resolveSubagentTimeoutMs(configMs) {
+	const raw = process.env[SUBAGENT_TIMEOUT_ENV];
+	if (raw !== void 0 && raw.trim().length > 0) {
+		const parsed = Number(raw);
+		if (Number.isInteger(parsed) && parsed >= 1) return parsed;
+	}
+	if (configMs !== void 0 && Number.isInteger(configMs) && configMs >= 1) return configMs;
+	return DEFAULT_SUBAGENT_TIMEOUT_MS;
+}
+/** Human-readable duration for the subagent timeout message. */
+function formatSubagentTimeoutDescription(ms) {
+	if (ms % (3600 * 1e3) === 0) {
+		const h = ms / (3600 * 1e3);
+		return `${h} hour${h === 1 ? "" : "s"}`;
+	}
+	if (ms % (60 * 1e3) === 0) {
+		const m = ms / (60 * 1e3);
+		return `${m} minute${m === 1 ? "" : "s"}`;
+	}
+	if (ms % 1e3 === 0) {
+		const s = ms / 1e3;
+		return `${s} second${s === 1 ? "" : "s"}`;
+	}
+	return `${ms} ms`;
+}
 async function runChildTurnToCompletion(child, signal) {
 	const completion = await child.turn.waitForCurrentTurn(signal);
 	const turnEnded = completion.event;
@@ -145510,7 +145101,7 @@ function shouldSuppressQueuedAttemptFailureEvent(options, error) {
 	if (isProviderRateLimitError(error)) return true;
 	return isAbortError$3(error) || options.signal.aborted;
 }
-var DEFAULT_SUBAGENT_TIMEOUT_MS, DEFAULT_SUBAGENT_TIMEOUT_DESCRIPTION, SUMMARY_MIN_LENGTH, SUMMARY_CONTINUATION_ATTEMPTS, HOOK_TEXT_PREVIEW_LENGTH, SUBAGENT_MAX_TOKENS_ERROR, TOOL_CALL_DISABLED_MESSAGE, SUBAGENT_PROMPT_ORIGIN, SIDE_QUESTION_SYSTEM_REMINDER, SessionSubagentHost;
+var DEFAULT_SUBAGENT_TIMEOUT_MS, SUBAGENT_TIMEOUT_ENV, SUMMARY_MIN_LENGTH, SUMMARY_CONTINUATION_ATTEMPTS, HOOK_TEXT_PREVIEW_LENGTH, SUBAGENT_MAX_TOKENS_ERROR, TOOL_CALL_DISABLED_MESSAGE, SUBAGENT_PROMPT_ORIGIN, SIDE_QUESTION_SYSTEM_REMINDER, SessionSubagentHost;
 var init_subagent_host = __esmMin((() => {
 	init_src$4();
 	init_errors$8();
@@ -145522,8 +145113,8 @@ var init_subagent_host = __esmMin((() => {
 	init_git_context();
 	init_subagent_batch();
 	init_summary_continuation();
-	DEFAULT_SUBAGENT_TIMEOUT_MS = 1800 * 1e3;
-	DEFAULT_SUBAGENT_TIMEOUT_DESCRIPTION = "30 minutes";
+	DEFAULT_SUBAGENT_TIMEOUT_MS = 7200 * 1e3;
+	SUBAGENT_TIMEOUT_ENV = "KIMI_SUBAGENT_TIMEOUT_MS";
 	SUMMARY_MIN_LENGTH = 200;
 	SUMMARY_CONTINUATION_ATTEMPTS = 1;
 	HOOK_TEXT_PREVIEW_LENGTH = 500;
@@ -145827,6 +145418,479 @@ IMPORTANT:
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/agent/llm-request-logger.ts
+function splitGenerateOptions(options) {
+	if (options === void 0) return {
+		requestLogFields: void 0,
+		generateOptions: void 0
+	};
+	const { requestLogFields, ...generateOptions } = options;
+	return {
+		requestLogFields,
+		generateOptions
+	};
+}
+function toolSignature(tools) {
+	return tools.map(({ name, description, parameters }) => ({
+		name,
+		description,
+		parameters
+	}));
+}
+function fingerprint(content) {
+	return createHash("sha256").update(content).digest("hex");
+}
+var LlmRequestLogger;
+var init_llm_request_logger = __esmMin((() => {
+	LlmRequestLogger = class {
+		log;
+		lastConfigLogSignature;
+		constructor(log) {
+			this.log = log;
+		}
+		logRequest(input) {
+			const { provider, modelAlias, systemPrompt, tools, messages, fields } = input;
+			const requestLogFields = fields ?? {};
+			const wireTools = tools.filter((tool) => tool.deferred !== true);
+			const config = {
+				provider: provider.name,
+				model: provider.modelName,
+				modelAlias,
+				thinkingEffort: provider.thinkingEffort ?? void 0,
+				systemPromptChars: systemPrompt.length,
+				toolCount: wireTools.length
+			};
+			const signature = JSON.stringify({
+				...config,
+				systemPromptHash: fingerprint(systemPrompt),
+				toolsHash: fingerprint(JSON.stringify(toolSignature(wireTools)))
+			});
+			if (signature !== this.lastConfigLogSignature) {
+				this.lastConfigLogSignature = signature;
+				this.log.info("llm config", {
+					...requestLogFields,
+					...config
+				});
+			}
+			const partialMessageCount = messages.filter((message) => message.partial === true).length;
+			const requestFields = { ...requestLogFields };
+			if (partialMessageCount > 0) requestFields.partialMessageCount = partialMessageCount;
+			this.log.info("llm request", requestFields);
+		}
+	};
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/background/task-output.md?raw
+var task_output_default;
+var init_task_output$1 = __esmMin((() => {
+	task_output_default = "Retrieve output from a running or completed background task.\n\nUse this after `Bash(run_in_background=true)` or `Agent(run_in_background=true)` when you need to inspect progress or explicitly wait for completion.\n\nGuidelines:\n- Prefer relying on automatic completion notifications. Use this tool only when you need task output before the automatic notification arrives.\n- Do not use TaskOutput to wait for a result you need before continuing — if your next step depends on the task's result, run that task in the foreground instead. TaskOutput is for a deliberate progress check you will act on without blocking, not a way to sit and wait for a background task you just launched.\n- By default this tool is non-blocking and returns a current status/output snapshot.\n- Use block=true only when you intentionally want to wait for completion or timeout.\n- This tool returns structured task metadata, a fixed-size output preview, and an output_path for the full log.\n- For a terminal task, the metadata also explains why it ended. A shell command that runs to completion reports `status: completed` on a zero exit, or `status: failed` with its non-zero `exit_code` — judge that failure from the `exit_code`, because a plain command failure carries no `stop_reason` and no `terminal_reason`. `terminal_reason` is a categorical label emitted only when the end is not an ordinary exit: `timed_out` when the deadline aborted it, `stopped` when it was explicitly stopped, or `failed` when it errored without producing an exit code; the `stopped` and `failed` cases also carry a human-readable `stop_reason`. A task that finished on its own with a clean exit carries neither `stop_reason` nor `terminal_reason`.\n- The full, never-truncated log is always available at output_path; use the `Read` tool with that path to page through it, whether or not the preview was truncated.\n- This tool works with the generic background task system and should remain the primary read path for future task types, not just bash.\n";
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/background/task-output.ts
+function retrievalStatus(status, block) {
+	if (isBackgroundTaskTerminal(status)) return "success";
+	return block ? "timeout" : "not_ready";
+}
+function terminalReason(info) {
+	if (info.status === "timed_out") return "timed_out";
+	if (info.status === "killed" && info.stopReason !== void 0) return "stopped";
+	if (info.status === "failed" && info.stopReason !== void 0) return "failed";
+}
+function fullOutputHint(output) {
+	if (!output.fullOutputAvailable || output.outputPath === void 0) return void 0;
+	if (output.truncated) return `Only the last ${String(OUTPUT_PREVIEW_BYTES)} bytes are shown above. Use the Read tool with the output_path to page through the full log (parameters: path, line_offset, n_lines; read about ${String(PAGING_HINT_LINES)} lines per page).`;
+	return `The preview above is the complete output. Use the Read tool with the output_path if you need to re-read the full log later (parameters: path, line_offset, n_lines; read about ${String(PAGING_HINT_LINES)} lines per page).`;
+}
+var OUTPUT_PREVIEW_BYTES, PAGING_HINT_LINES, TaskOutputInputSchema, TaskOutputTool;
+var init_task_output = __esmMin((() => {
+	init_zod$1();
+	init_background();
+	init_input_schema();
+	init_rule_match();
+	init_format();
+	init_task_output$1();
+	OUTPUT_PREVIEW_BYTES = 32 * 1024;
+	PAGING_HINT_LINES = 300;
+	TaskOutputInputSchema = object({
+		task_id: string().describe("The background task ID to inspect."),
+		block: boolean$1().default(false).describe("Whether to wait for the task to finish before returning.").optional(),
+		timeout: number$1().int().min(0).max(3600).default(30).describe("Maximum number of seconds to wait when block=true.").optional()
+	});
+	TaskOutputTool = class {
+		manager;
+		name = "TaskOutput";
+		description = task_output_default;
+		parameters = toInputJsonSchema(TaskOutputInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			return {
+				description: `Reading output of task ${args.task_id}`,
+				approvalRule: this.name,
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.task_id),
+				execute: () => this.execute(args)
+			};
+		}
+		async execute(args) {
+			const info = this.manager.getTask(args.task_id);
+			if (!info) return {
+				isError: true,
+				output: `Task not found: ${args.task_id}`
+			};
+			if (args.block && !isBackgroundTaskTerminal(info.status)) await this.manager.wait(args.task_id, (args.timeout ?? 30) * 1e3);
+			const current = this.manager.getTask(args.task_id);
+			if (!current) return {
+				isError: true,
+				output: `Task not found: ${args.task_id}`
+			};
+			const output = await this.manager.getOutputSnapshot(args.task_id, OUTPUT_PREVIEW_BYTES);
+			const lines = [formatPlainObject({
+				retrievalStatus: retrievalStatus(current.status, args.block),
+				...current,
+				outputPath: output.outputPath,
+				terminalReason: terminalReason(current),
+				outputSizeBytes: output.outputSizeBytes,
+				outputPreviewBytes: output.previewBytes,
+				outputTruncated: output.truncated,
+				fullOutputAvailable: output.fullOutputAvailable,
+				fullOutputTool: output.fullOutputAvailable && output.outputPath !== void 0 ? "Read" : void 0,
+				fullOutputHint: fullOutputHint(output)
+			}), ""];
+			if (output.truncated) lines.push(output.fullOutputAvailable && output.outputPath !== void 0 ? `[Truncated. Full output: ${output.outputPath}]` : "[Truncated. No persisted full log is available for this task.]");
+			lines.push("[output]", output.preview || "[no output available]");
+			return {
+				output: lines.join("\n"),
+				isError: false,
+				message: "Task snapshot retrieved."
+			};
+		}
+	};
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/background/task-stop.md?raw
+var task_stop_default;
+var init_task_stop$1 = __esmMin((() => {
+	task_stop_default = "Stop a running background task.\n\nOnly use this when a task must genuinely be cancelled — for a task that is\nfinishing normally, wait for its completion notification or inspect it with\n`TaskOutput` instead of stopping it.\n\nGuidelines:\n- This is a general-purpose stop capability for any background task. It is not\n  a bash-specific kill.\n- Stopping a task is destructive: it may leave partial side effects behind.\n  Use it with care.\n- If the task has already finished, this tool simply returns its current\n  status.\n";
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/background/task-stop.ts
+function terminalStopReason(reason) {
+	const trimmed = reason?.trim();
+	return trimmed === void 0 || trimmed.length === 0 ? "Task already in terminal state" : trimmed;
+}
+var TaskStopInputSchema, TaskStopTool;
+var init_task_stop = __esmMin((() => {
+	init_zod$1();
+	init_background();
+	init_input_schema();
+	init_rule_match();
+	init_task_stop$1();
+	TaskStopInputSchema = object({
+		task_id: string().describe("The background task ID to stop."),
+		reason: string().default("Stopped by TaskStop").describe("Short reason recorded when the task is stopped.").optional()
+	});
+	TaskStopTool = class {
+		manager;
+		name = "TaskStop";
+		description = task_stop_default;
+		parameters = toInputJsonSchema(TaskStopInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			return {
+				description: `Stopping task ${args.task_id}`,
+				approvalRule: this.name,
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.task_id),
+				execute: async () => {
+					const info = this.manager.getTask(args.task_id);
+					if (!info) return {
+						isError: true,
+						output: `Task not found: ${args.task_id}`
+					};
+					const trimmedReason = args.reason?.trim();
+					const reason = trimmedReason === void 0 || trimmedReason.length === 0 ? "Stopped by TaskStop" : trimmedReason;
+					if (isBackgroundTaskTerminal(info.status)) return {
+						output: `task_id: ${info.taskId}\nstatus: ${info.status}\nreason: ${terminalStopReason(info.stopReason)}`,
+						isError: false
+					};
+					await this.manager.suppressTerminalNotification(args.task_id);
+					const result = await this.manager.stop(args.task_id, reason);
+					if (!result) return {
+						isError: true,
+						output: `Failed to stop task: ${args.task_id}`
+					};
+					return {
+						output: `task_id: ${result.taskId}\nstatus: ${result.status}\nreason: ${result.stopReason ?? reason}`,
+						isError: false
+					};
+				}
+			};
+		}
+	};
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/time-format.ts
+/**
+* Render cron-facing timestamps in local wall time with an explicit
+* numeric offset. Cron expressions are evaluated in local time, so the
+* tool output should preserve that mental model while remaining
+* unambiguous and parseable as ISO 8601.
+*/
+function formatLocalIsoWithOffset(ms) {
+	const date = new Date(ms);
+	const offsetMin = -date.getTimezoneOffset();
+	const sign = offsetMin >= 0 ? "+" : "-";
+	const absOffset = Math.abs(offsetMin);
+	const offset = `${sign}${pad(Math.floor(absOffset / 60))}:${pad(absOffset % 60)}`;
+	return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}T${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}.${String(date.getMilliseconds()).padStart(3, "0")}${offset}`;
+}
+function pad(n) {
+	return String(n).padStart(2, "0");
+}
+var init_time_format = __esmMin((() => {}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-create.md?raw
+var cron_create_default;
+var init_cron_create$1 = __esmMin((() => {
+	cron_create_default = "Schedule a prompt to be enqueued at a future time. Use for both recurring schedules and one-shot reminders.\n\nUses standard 5-field cron in the user's local timezone: minute hour day-of-month month day-of-week. `0 9 * * *` means 9am local — no timezone conversion needed.\n\n## One-shot tasks (recurring: false)\n\nFor \"remind me at X\" or \"at <time>, do Y\" requests — fire once then auto-delete.\nPin minute/hour/day-of-month/month to specific values:\n  \"remind me at 2:30pm today to check the deploy\" → cron: \"30 14 <today_dom> <today_month> *\", recurring: false\n  \"tomorrow morning, run the smoke test\" → cron: \"57 8 <tomorrow_dom> <tomorrow_month> *\", recurring: false\n\nOne-shots are best for near-term reminders. A task only fires while its session is still alive (see Session lifetime below), so favor near times — within hours or a few days — rather than scheduling weeks or months ahead.\n\n## Recurring jobs (recurring: true, the default)\n\nFor \"every N minutes\" / \"every hour\" / \"weekdays at 9am\" requests:\n  \"*/5 * * * *\" (every 5 min), \"0 * * * *\" (hourly), \"0 9 * * 1-5\" (weekdays at 9am local)\n\n## Avoid the :00 and :30 minute marks when the task allows it\n\nEvery user who asks for \"9am\" gets `0 9`, and every user who asks for \"hourly\" gets `0 *` — which means requests from across the planet land on the API at the same instant. When the user's request is approximate, pick a minute that is NOT 0 or 30:\n  \"every morning around 9\" → \"57 8 * * *\" or \"3 9 * * *\" (not \"0 9 * * *\")\n  \"hourly\" → \"7 * * * *\" (not \"0 * * * *\")\n  \"in an hour or so, remind me to...\" → pick whatever minute you land on, don't round\n\nOnly use minute 0 or 30 when the user names that exact time and clearly means it (\"at 9:00 sharp\", \"at half past\", coordinating with a meeting). When in doubt, nudge a few minutes early or late — the user will not notice, and the fleet will.\n\n## Coalesce semantics\n\nFires are delivered only while the session is idle: a fire that comes due during an active turn is held and delivered at the next idle moment, never injected mid-turn.\n\nIf the scheduler slept past multiple ideal fire times (laptop closed, long-running turn, etc.), only **one** fire is delivered when it wakes up. The origin carries `coalescedCount` showing how many ideal fires were collapsed into this single delivery. You should treat `coalescedCount > 1` as \"I missed some checks; only the latest state matters\" rather than running the prompt that many times.\n\n## Cron-fire envelope\n\nWhen a cron task fires, the prompt you scheduled is re-injected wrapped in an XML envelope that exposes the fire context:\n\n```\n<cron-fire jobId=\"...\" cron=\"...\" recurring=\"true|false\" coalescedCount=\"N\" stale=\"true|false\">\n<prompt>\nyour original prompt text, verbatim\n</prompt>\n</cron-fire>\n```\n\nThe envelope is parseable. Use `coalescedCount > 1` to know multiple ideal fires were collapsed into a single delivery (treat as \"only the latest state matters\"), and `stale=\"true\"` as a cue that the task is past its 7-day threshold.\n\n## 7-day stale behavior\n\nRecurring tasks that have been alive for more than 7 days fire one\nfinal time with `stale: true` on the envelope, and the system then\nauto-deletes the task. The flag is the model's notice that this is\nthe last delivery. If the schedule is still wanted, call `CronCreate`\nagain with the same `cron` and `prompt` — that resets `createdAt` and\nstarts a fresh 7-day window. One-shot tasks are never marked stale.\n\n## Jitter behavior\n\nAnti-herd jitter is applied deterministically per task id:\n  - Recurring: ideal fire time is shifted **forward** by an offset ≤ min(10% of the cron period, 15 minutes). A `*/5 * * * *` task can drift up to 30s; a `0 9 * * *` task can drift up to 15 minutes.\n  - One-shot: only when the ideal fire lands on `:00` or `:30` of the hour, the fire is pulled **earlier** by ≤ 90 seconds. Other minutes pass through unchanged.\n\n## One-shot vs recurring — when to pick which\n\nUse `recurring: false` for \"remind me at X\" style requests, single deadlines, \"in N minutes do Y\", and any task that should not repeat. Use `recurring: true` for periodic polling (CI status, build watchers, scheduled reports), workday rituals, and anything the user explicitly described as recurring.\n\n## Session lifetime\n\nCron tasks live in the current kimi CLI session. When you exit, they\nare persisted under the session homedir; the next `kimi resume` of the\nsame session reloads them and the scheduler resumes from each task's\n`createdAt`. Fire times that fell during the offline window are\ncollapsed into a single delivery via `coalescedCount` (and recurring\ntasks past their 7-day window arrive with `stale: true` as their final\ndelivery).\n\nTasks do **not** carry over into a brand-new session — they are scoped\nto the resumed session id, not to the working directory.\n\n## Limits\n\nA session holds at most 50 live cron tasks; creating one beyond that is rejected. (The `prompt` body is also capped — see its parameter description.) Expressions that never fire within the next 5 years (e.g. `0 0 31 2 *`, an impossible date) are rejected at create time.\n\n## Returned fields\n\n`id` (8-hex), `cron` (the normalized expression), `humanSchedule` (English summary), `recurring`,\n`nextFireAt` (local ISO timestamp with numeric offset, or null). `id` is needed by `CronDelete`.\n\n## Tell the user how to cancel or modify\n\nAfter successfully creating a task, proactively tell the user how they can cancel or modify it later. Users have no direct `/cron` command or self-service UI to manage reminders themselves; they must ask the model to make changes (e.g. \"cancel my 9am reminder\" or \"change my daily check to 10am\"). Include the task `id` in your message so the user can reference it.\n";
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-create.ts
+function formatOutput(o) {
+	return [
+		`id: ${o.id}`,
+		`cron: ${o.cron}`,
+		`humanSchedule: ${o.humanSchedule}`,
+		`recurring: ${String(o.recurring)}`,
+		`nextFireAt: ${o.nextFireAt === null ? "null" : formatLocalIsoWithOffset(o.nextFireAt)}`
+	].join("\n");
+}
+var MAX_PROMPT_BYTES, ONE_SHOT_MAX_FUTURE_MS, CronCreateInputSchema, CronCreateTool;
+var init_cron_create = __esmMin((() => {
+	init_zod$1();
+	init_input_schema();
+	init_rule_match();
+	init_cron_expr();
+	init_jitter();
+	init_time_format();
+	init_cron_create$1();
+	MAX_PROMPT_BYTES = 8 * 1024;
+	ONE_SHOT_MAX_FUTURE_MS = 350 * 24 * 60 * 60 * 1e3;
+	CronCreateInputSchema = object({
+		cron: string().describe("5-field cron expression in local time: \"M H DoM Mon DoW\" (e.g. \"*/5 * * * *\" = every 5 minutes; \"30 14 28 2 *\" = Feb 28 at 2:30pm local — a pinned date like this repeats yearly unless you also pass recurring: false)."),
+		prompt: string().min(1).max(MAX_PROMPT_BYTES).describe("The prompt to enqueue at each fire time. Limited to 8 KiB (UTF-8)."),
+		recurring: boolean$1().optional().default(true).describe("true (default) = fire on every cron match until deleted or auto-expired after 7 days. false = fire once at the next match, then auto-delete. Use false for \"remind me at X\" one-shot requests with pinned minute/hour/dom/month.")
+	});
+	CronCreateTool = class {
+		manager;
+		name = "CronCreate";
+		description = cron_create_default;
+		parameters = toInputJsonSchema(CronCreateInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			if (process.env["KIMI_DISABLE_CRON"] === "1") return {
+				isError: true,
+				output: "Cron scheduling is disabled (KIMI_DISABLE_CRON=1)."
+			};
+			const normalizedCron = args.cron.trim().split(/\s+/).join(" ");
+			let parsed;
+			try {
+				parsed = parseCronExpression(normalizedCron);
+			} catch (err) {
+				return {
+					isError: true,
+					output: `Invalid cron expression: ${err instanceof Error ? err.message : String(err)}`
+				};
+			}
+			const nowAtPrepare = this.manager.clocks.wallNow();
+			if (!hasFireWithinYears(parsed, 5, nowAtPrepare)) return {
+				isError: true,
+				output: `Cron expression ${JSON.stringify(normalizedCron)} has no fire within 5 years; refusing to schedule.`
+			};
+			if (this.manager.store.list().length >= 50) return {
+				isError: true,
+				output: `Cron job cap reached (max ${String(50)} per session).`
+			};
+			const byteLen = Buffer.byteLength(args.prompt, "utf8");
+			if (byteLen > MAX_PROMPT_BYTES) return {
+				isError: true,
+				output: `Prompt exceeds ${String(MAX_PROMPT_BYTES)} bytes (got ${String(byteLen)}).`
+			};
+			const recurring = args.recurring !== false;
+			if (!recurring) {
+				const firstFire = computeNextCronRun(parsed, nowAtPrepare);
+				if (firstFire !== null && firstFire - nowAtPrepare > ONE_SHOT_MAX_FUTURE_MS) return {
+					isError: true,
+					output: `One-shot cron ${JSON.stringify(normalizedCron)} would not fire until ${formatLocalIsoWithOffset(firstFire)} (more than a year out). If you meant "today" or a near date, the pinned day/month has already passed this year — pick a future date or use wildcards.`
+				};
+			}
+			return {
+				description: recurring ? `Scheduling cron ${normalizedCron}` : `Scheduling one-shot ${normalizedCron}`,
+				approvalRule: literalRulePattern(this.name, JSON.stringify({
+					cron: normalizedCron,
+					prompt: args.prompt,
+					recurring
+				})),
+				execute: async () => {
+					const nowMs = this.manager.clocks.wallNow();
+					if (this.manager.store.list().length >= 50) return {
+						isError: true,
+						output: `Cron job cap reached (max ${String(50)} per session).`
+					};
+					const task = this.manager.addTask({
+						cron: normalizedCron,
+						prompt: args.prompt,
+						recurring
+					});
+					const ideal = computeNextCronRun(parsed, nowMs);
+					const nextFireAt = ideal === null ? null : recurring ? jitteredNextCronRunMs(task, parsed, ideal) : oneShotJitteredNextCronRunMs(task, ideal);
+					const humanSchedule = cronToHuman(parsed);
+					this.manager.emitScheduled(task);
+					return {
+						output: formatOutput({
+							id: task.id,
+							cron: normalizedCron,
+							humanSchedule,
+							recurring,
+							nextFireAt
+						}),
+						isError: false,
+						message: `Scheduled cron ${task.id}`
+					};
+				}
+			};
+		}
+	};
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-delete.md?raw
+var cron_delete_default;
+var init_cron_delete$1 = __esmMin((() => {
+	cron_delete_default = "Cancel a scheduled cron job by id.\n\nUse this tool to remove a cron task previously scheduled with\n`CronCreate`. The `id` is the 8-hex value returned by `CronCreate`, or\nshown in the `id:` column of `CronList` — quote it verbatim, no\nprefix.\n\nBehaviour by task kind:\n\n- **Recurring task** (`recurring: true`): stops all future fires\n  immediately. The scheduler picks up the deletion on its next tick.\n- **One-shot task** (`recurring: false`): cancels the pending fire if\n  it has not happened yet. One-shots that have already fired\n  auto-delete themselves, so calling `CronDelete` on a fired one-shot\n  returns \"no cron job with id ...\".\n\nNot-found is reported as an error (not a silent no-op) so you can\ncorrect yourself — typically by calling `CronList` to see which ids\nare actually live, rather than re-trying with the same stale id.\n\nRefresh pattern (use when you want a stale recurring schedule to\ncontinue):\n\nStale recurring tasks are auto-deleted by the system after their final\nfire — there is nothing for `CronDelete` to remove at that point. To\nkeep the schedule running, just call `CronCreate` with the same `cron`\nand `prompt`. Use `CronList`'s `prompt` field to recall the original\ntext after a context compaction.\n\n`CronDelete` remains the right call when you want to cancel a task\nthat is still live (recurring not yet stale, or a one-shot still\npending).\n\nGuidelines:\n\n- Users have no direct `/cron` command or self-service UI to delete\n  tasks themselves; they must ask the model to cancel a reminder.\n  When deleting on behalf of a user, confirm the action and report\n  the result plainly.\n- Cron deletion is irreversible — there is no undo. If you delete the\n  wrong task, you must re-create it with `CronCreate`.\n- If the model is unsure which id is current (e.g. after a context\n  compaction), call `CronList` first rather than guessing.\n";
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-delete.ts
+var ID_PATTERN, CronDeleteInputSchema, CronDeleteTool;
+var init_cron_delete = __esmMin((() => {
+	init_zod$1();
+	init_input_schema();
+	init_cron_delete$1();
+	ID_PATTERN = /^[0-9a-f]{8}$/;
+	CronDeleteInputSchema = object({ id: string().describe("The 8-hex cron job id returned by CronCreate / CronList.") });
+	CronDeleteTool = class {
+		manager;
+		name = "CronDelete";
+		description = cron_delete_default;
+		parameters = toInputJsonSchema(CronDeleteInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			if (!ID_PATTERN.test(args.id)) return {
+				isError: true,
+				output: `Invalid cron job id ${JSON.stringify(args.id)} — must be 8 lowercase hex characters.`
+			};
+			return {
+				description: `Deleting cron ${args.id}`,
+				approvalRule: this.name,
+				execute: async () => {
+					if (this.manager.removeTasks([args.id]).length === 0) return {
+						isError: true,
+						output: `No cron job with id ${args.id}.`
+					};
+					this.manager.emitDeleted(args.id);
+					return {
+						output: `Deleted cron job ${args.id}.`,
+						isError: false
+					};
+				}
+			};
+		}
+	};
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-list.md?raw
+var cron_list_default;
+var init_cron_list$1 = __esmMin((() => {
+	cron_list_default = "List all cron jobs currently scheduled in this session.\n\nUse this tool to see every pending cron task — both recurring jobs and\none-shot reminders — that you (or the user) have scheduled with\n`CronCreate`. The output is the entry point for inspecting scheduled\nwork: it returns a stable id, the original cron expression, a human\nrendering, the next post-jitter fire time, the recurring flag, the\ntask's age in days, and a stale indicator.\n\nEach record carries:\n\n- `id` — the 8-hex task id. Pass this to `CronDelete` to remove the\n  task, or quote it in user-facing messages when asking for\n  confirmation.\n- `cron` — the verbatim 5-field cron expression as scheduled.\n- `humanSchedule` — plain-English rendering (e.g. `every 5 minutes`).\n- `prompt` — the scheduled prompt text, JSON-encoded so embedded\n  newlines stay on one line. Truncated to 200 UTF-8 bytes with\n  `…(truncated)` if longer. Use this to recall what a task is for\n  after a context compaction, and as the source for the\n  `CronCreate` refresh ritual.\n- `nextFireAt` — local ISO timestamp with an explicit numeric offset\n  for the next fire **after jitter has been applied**. The actual fire\n  may land slightly before or after a round `:00` / `:30` minute mark\n  due to herd-avoidance jitter; this is the value the scheduler will\n  compare against, so it reflects what will really happen. `null` if\n  the expression has no fire in the next 5 years (should not happen\n  for tasks created through `CronCreate`, which validates).\n- `recurring` — `true` for cadenced jobs, `false` for one-shots.\n- `ageDays` — `(now - createdAt) / day`, two decimal places. Useful\n  when deciding whether a long-running cron is still relevant.\n- `stale` — `true` when a recurring task is older than 7 days. The\n  system **auto-deletes the task after this fire** to bound session\n  lifetime; the `stale: true` flag is the model's notice that this is\n  the final delivery. To resume the same schedule, call `CronCreate`\n  again with the original `cron` and `prompt` (the `prompt` row above\n  carries it for exactly this purpose). One-shots are never marked\n  stale — they fire at most once by construction.\n\nGuidelines:\n\n- This tool is read-only and never mutates state, so it is always\n  safe to call (including in plan mode).\n- Users cannot directly manage cron tasks themselves; if they want to\n  cancel or modify a schedule, route the request through the model\n  (i.e. call `CronDelete` or `CronCreate` on their behalf).\n- The empty case returns `cron_jobs: 0\\nNo cron jobs scheduled.`. Cron\n  tasks survive a `kimi resume` of the same session but do not bleed\n  into new sessions.\n- After a context compaction, or whenever you are unsure which cron\n  jobs are live, call this tool to re-enumerate them rather than\n  guessing ids from earlier in the conversation.\n- Records are separated by a line containing just `---`, in the\n  insertion order they were scheduled.\n";
+}));
+//#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-list.ts
+function previewPrompt(prompt) {
+	const buf = Buffer.from(prompt, "utf8");
+	if (buf.byteLength <= PROMPT_PREVIEW_BYTES) return prompt;
+	let end = PROMPT_PREVIEW_BYTES;
+	while (end > 0 && (buf[end] & 192) === 128) end--;
+	return `${buf.subarray(0, end).toString("utf8")}…(truncated)`;
+}
+var CronListInputSchema, MS_PER_DAY, PROMPT_PREVIEW_BYTES, CronListTool;
+var init_cron_list = __esmMin((() => {
+	init_zod$1();
+	init_input_schema();
+	init_cron_expr();
+	init_time_format();
+	init_cron_list$1();
+	CronListInputSchema = object({}).strict();
+	MS_PER_DAY = 1440 * 60 * 1e3;
+	PROMPT_PREVIEW_BYTES = 200;
+	CronListTool = class {
+		manager;
+		name = "CronList";
+		description = cron_list_default;
+		parameters = toInputJsonSchema(CronListInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(_args) {
+			return {
+				description: "Listing scheduled cron jobs",
+				approvalRule: this.name,
+				execute: async () => {
+					const tasks = this.manager.store.list();
+					const nowMs = this.manager.clocks.wallNow();
+					const records = tasks.map((t) => this.renderRecord(t, nowMs));
+					const header = `cron_jobs: ${String(tasks.length)}`;
+					if (records.length === 0) return {
+						output: `${header}\nNo cron jobs scheduled.`,
+						isError: false
+					};
+					return {
+						output: `${header}\n${records.join("\n---\n")}`,
+						isError: false
+					};
+				}
+			};
+		}
+		renderRecord(task, nowMs) {
+			const recurring = task.recurring !== false;
+			const ageMs = nowMs - task.createdAt;
+			const ageDays = Number.isFinite(ageMs) ? ageMs / MS_PER_DAY : 0;
+			const stale = this.manager.isStale(task);
+			let humanSchedule = task.cron;
+			let nextFireAtIso = "null";
+			try {
+				humanSchedule = cronToHuman(parseCronExpression(task.cron));
+				const nextFireMs = this.manager.getNextFireForTask(task.id);
+				if (nextFireMs !== null) nextFireAtIso = formatLocalIsoWithOffset(nextFireMs);
+			} catch {}
+			return [
+				`id: ${task.id}`,
+				`cron: ${task.cron}`,
+				`humanSchedule: ${humanSchedule}`,
+				`prompt: ${JSON.stringify(previewPrompt(task.prompt))}`,
+				`nextFireAt: ${nextFireAtIso}`,
+				`recurring: ${String(recurring)}`,
+				`ageDays: ${ageDays.toFixed(2)}`,
+				`stale: ${String(stale)}`
+			].join("\n");
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/agent-background-disabled.md?raw
 var agent_background_disabled_default;
 var init_agent_background_disabled = __esmMin((() => {
@@ -145944,6 +146008,7 @@ var init_agent$1 = __esmMin((() => {
 			this.backgroundManager = backgroundManager;
 			const log = options?.log;
 			this.allowBackground = options?.allowBackground ?? true;
+			this.subagentTimeoutMs = options?.subagentTimeoutMs;
 			const typeLines = buildSubagentDescriptions(subagents);
 			const baseDescription = `${agent_default}\n\n${this.allowBackground ? agent_background_enabled_default : agent_background_disabled_default}`;
 			this.description = typeLines ? `${baseDescription}\n\nAvailable agent types (pass via subagent_type):\n${typeLines}` : baseDescription;
@@ -145951,6 +146016,7 @@ var init_agent$1 = __esmMin((() => {
 		}
 		log;
 		allowBackground;
+		subagentTimeoutMs;
 		async resolveExecution(args) {
 			let profileName = args.subagent_type?.length ? args.subagent_type : "coder";
 			const resumeAgentId = args.resume?.trim();
@@ -146018,7 +146084,7 @@ var init_agent$1 = __esmMin((() => {
 				try {
 					taskId = this.backgroundManager.registerTask(new AgentBackgroundTask(handle, args.description, this.subagentHost, controller), {
 						detached: runInBackground,
-						timeoutMs: DEFAULT_SUBAGENT_TIMEOUT_MS,
+						timeoutMs: this.subagentTimeoutMs ?? 72e5,
 						signal: runInBackground ? void 0 : signal
 					});
 					signal.removeEventListener("abort", abortBeforeRegister);
@@ -146052,7 +146118,7 @@ var init_agent$1 = __esmMin((() => {
 			if (info?.status === "completed") return { output: formatForegroundAgentSuccess(handle, await this.backgroundManager.readOutput(taskId)) };
 			const timedOut = info?.status === "timed_out";
 			return {
-				output: formatForegroundAgentFailure(handle, timedOut ? `Agent timed out after ${DEFAULT_SUBAGENT_TIMEOUT_DESCRIPTION}.` : info?.stopReason === "Interrupted by user" ? USER_INTERRUPTED_SUBAGENT_MESSAGE : info?.stopReason !== void 0 ? info.stopReason : "The subagent was stopped before it finished.", timedOut),
+				output: formatForegroundAgentFailure(handle, timedOut ? `Agent timed out after ${formatSubagentTimeoutDescription(this.subagentTimeoutMs ?? 72e5)}.` : info?.stopReason === "Interrupted by user" ? USER_INTERRUPTED_SUBAGENT_MESSAGE : info?.stopReason !== void 0 ? info.stopReason : "The subagent was stopped before it finished.", timedOut),
 				isError: true
 			};
 		}
@@ -146166,12 +146232,14 @@ var init_agent_swarm = __esmMin((() => {
 	AgentSwarmTool = class {
 		subagentHost;
 		swarmMode;
+		subagentTimeoutMs;
 		name = "AgentSwarm";
 		description = agent_swarm_default;
 		parameters = toInputJsonSchema(AgentSwarmToolInputSchema);
-		constructor(subagentHost, swarmMode) {
+		constructor(subagentHost, swarmMode, subagentTimeoutMs) {
 			this.subagentHost = subagentHost;
 			this.swarmMode = swarmMode;
+			this.subagentTimeoutMs = subagentTimeoutMs;
 		}
 		resolveExecution(args) {
 			const agentCount = (args.items?.length ?? 0) + Object.keys(args.resume_agent_ids ?? {}).length;
@@ -146212,7 +146280,7 @@ var init_agent_swarm = __esmMin((() => {
 					runInBackground: false,
 					swarmItem: spec.item,
 					signal,
-					timeout: DEFAULT_SUBAGENT_TIMEOUT_MS
+					timeout: this.subagentTimeoutMs ?? 72e5
 				};
 				if (spec.kind === "resume") return {
 					...common,
@@ -146235,7 +146303,7 @@ var init_agent_swarm = __esmMin((() => {
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/ask-user.md?raw
 var ask_user_default;
 var init_ask_user$1 = __esmMin((() => {
-	ask_user_default = "Use this tool when you need to ask the user questions with structured options during execution. This allows you to:\n1. Collect user preferences or requirements before proceeding\n2. Resolve ambiguous or underspecified instructions\n3. Let the user decide between implementation approaches as you work\n4. Present concrete options when multiple valid directions exist\n\n**When NOT to use:**\n- When you can infer the answer from context — be decisive and proceed\n- Trivial decisions that don't materially affect the outcome\n\nOverusing this tool interrupts the user's flow. Only use it when the user's input genuinely changes your next action.\n\n**Usage notes:**\n- Users always have an \"Other\" option for custom input — don't create one yourself\n- Use multi_select to allow multiple answers to be selected for a question\n- Keep option labels concise (1-5 words), use descriptions for trade-offs and details\n- Each question should have 2-4 meaningful, distinct options\n- Question texts must be unique across the call, and option labels must be unique within each question\n- You can ask 1-4 questions at a time; group related questions to minimize interruptions\n- If you recommend a specific option, list it first and append \"(Recommended)\" to its label\n- The result is JSON with an `answers` object keyed by question text; each value is the chosen option's label (comma-separated labels for multi_select, or the user's own words if they picked \"Other\"); if `answers` is empty and a `note` says the user dismissed it, they declined to answer — proceed with your best judgment and do not re-ask the same question\n";
+	ask_user_default = "Use this tool when you need to ask the user questions with structured options during execution. This allows you to:\n1. Collect user preferences or requirements before proceeding\n2. Resolve ambiguous or underspecified instructions\n3. Let the user decide between implementation approaches as you work\n4. Present concrete options when multiple valid directions exist\n\n**When NOT to use:**\n- When you can infer the answer from context — be decisive and proceed\n- Trivial decisions that don't materially affect the outcome\n\nOverusing this tool interrupts the user's flow. Only use it when the user's input genuinely changes your next action.\n\n**Usage notes:**\n- Users always have an \"Other\" option for custom input — don't create one yourself\n- Use multi_select to allow multiple answers to be selected for a question\n- Keep option labels concise (1-5 words), use descriptions for trade-offs and details\n- Each question should have 2-4 meaningful, distinct options\n- Question texts must be unique across the call, and option labels must be unique within each question\n- You can ask 1-4 questions at a time; group related questions to minimize interruptions\n- If you recommend a specific option, list it first and append \"(Recommended)\" to its label\n- The result is JSON with an `answers` object keyed by question text; each value is the chosen option's label (comma-separated labels for multi_select, or the user's own words if they picked \"Other\"); if `answers` is empty and a `note` says the user dismissed it, they chose not to answer — do not treat this as selecting the recommended option; decide based on context and do not re-ask the same question\n";
 }));
 //#endregion
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/ask-user.ts
@@ -153945,6 +154013,7 @@ var init_tool$1 = __esmMin((() => {
 	init_output();
 	init_tool_naming();
 	init_profile();
+	init_subagent_host();
 	init_skill$4();
 	init_llm_request_logger();
 	init_builtin();
@@ -154501,9 +154570,10 @@ var init_tool$1 = __esmMin((() => {
 				this.agent.skills?.registry.listInvocableSkills().length && new SkillTool(this.agent),
 				this.agent.subagentHost && new AgentTool(this.agent.subagentHost, background, DEFAULT_AGENT_PROFILES["agent"]?.subagents, {
 					allowBackground,
-					log: this.agent.log
+					log: this.agent.log,
+					subagentTimeoutMs: resolveSubagentTimeoutMs(this.agent.kimiConfig?.subagent?.timeoutMs)
 				}),
-				this.agent.subagentHost && new AgentSwarmTool(this.agent.subagentHost, this.agent.swarmMode),
+				this.agent.subagentHost && new AgentSwarmTool(this.agent.subagentHost, this.agent.swarmMode, resolveSubagentTimeoutMs(this.agent.kimiConfig?.subagent?.timeoutMs)),
 				toolServices?.webSearcher && new WebSearchTool(toolServices.webSearcher),
 				toolServices?.urlFetcher && new FetchURLTool(toolServices.urlFetcher)
 			].filter((tool) => !!tool).map((tool) => [tool.name, tool]));
@@ -156368,17 +156438,18 @@ var init_agent = __esmMin((() => {
 		}
 		/**
 		* Single decision point for select_tools progressive disclosure. All three
-		* gates must be open: the model declares the `select_tools` capability, the
-		* model declares `tool_use` (a model without tool use registering
-		* select_tools is a contradiction), and the `tool-select` experimental flag
-		* is on. Every consumer — top-level tools[] convergence, select_tools
-		* registration, manifest announcements, projection shaping — reads this
-		* instead of re-deriving the conditions, so degradation is lossless: any
-		* closed gate reproduces the inline behavior byte-for-byte.
+		* gates must be open: the model has the `dynamically_loaded_tools`
+		* capability (message-level tool declarations), the model declares
+		* `tool_use` (a model without tool use loading tools dynamically is a
+		* contradiction), and the `tool-select` experimental flag is on. Every
+		* consumer — top-level tools[] convergence, select_tools registration,
+		* manifest announcements, projection shaping — reads this instead of
+		* re-deriving the conditions, so degradation is lossless: any closed gate
+		* reproduces the inline behavior byte-for-byte.
 		*/
 		get toolSelectEnabled() {
 			const capability = this.config.modelCapabilities;
-			return capability.select_tools === true && capability.tool_use && this.experimentalFlags.enabled("tool-select");
+			return capability.dynamically_loaded_tools === true && capability.tool_use && this.experimentalFlags.enabled("tool-select");
 		}
 		get generate() {
 			return async (provider, systemPrompt, tools, history, callbacks, options) => {
@@ -156610,6 +156681,7 @@ var init_agent = __esmMin((() => {
 				pauseGoal: () => this.goal.pauseGoal(),
 				resumeGoal: () => this.goal.resumeGoal(),
 				cancelGoal: () => this.goal.cancelGoal(),
+				getCronTasks: () => ({ tasks: this.cron?.listTaskSnapshots() ?? [] }),
 				getBackgroundOutput: (payload) => this.background.readOutput(payload.taskId, payload.tail),
 				getContext: () => this.context.data(),
 				getConfig: () => this.config.data(),
@@ -187461,6 +187533,8 @@ var init_session$1 = __esmMin((() => {
 		};
 		writeMetadataPromise = Promise.resolve();
 		agentsMdWarning;
+		printSteerDeadline;
+		printSteerTurns = 0;
 		constructor(options) {
 			this.options = options;
 			this.logHandle = options.id === void 0 ? void 0 : getRootLogger().attachSession({
@@ -187647,23 +187721,18 @@ var init_session$1 = __esmMin((() => {
 		* Wait for all still-running background tasks (across every agent) to reach a
 		* terminal state before a `kimi -p` (print) run exits.
 		*
-		* Gated by `background.keep_alive_on_exit`: when it is not `true`, this returns
-		* immediately so print mode keeps its default single-turn semantics. The wait is
-		* bounded by `background.print_wait_ceiling_s` (default 3600s) so a wedged task
-		* cannot keep the process alive forever.
+		* Only runs when the resolved print background mode is `'drain'` (see
+		* `resolvePrintBackgroundMode`): `print_background_mode = "drain"`, or the
+		* legacy `keep_alive_on_exit = true` fallback. In every other mode it returns
+		* immediately. The wait is bounded by `background.print_wait_ceiling_s`
+		* (default 3600s) so a wedged task cannot keep the process alive forever.
 		*
 		* Terminal notifications are suppressed for each task while we wait, so a task
 		* completing cannot `turn.steer` the (already finished) main agent into launching
-		* a new turn.
+		* a new turn. (This is exactly what `'steer'` mode avoids by never calling here.)
 		*/
 		async waitForBackgroundTasksOnPrint() {
-			if (!resolveConfigValue({
-				env: process.env,
-				envKey: BACKGROUND_KEEP_ALIVE_ON_EXIT_ENV,
-				configValue: this.options.background?.keepAliveOnExit,
-				defaultValue: false,
-				parseEnv: parseBooleanEnv
-			})) return;
+			if (this.resolvePrintBackgroundMode() !== "drain") return;
 			const timeoutMs = (this.options.background?.printWaitCeilingS ?? 3600) * 1e3;
 			const deadline = Date.now() + timeoutMs;
 			const seen = /* @__PURE__ */ new Set();
@@ -187699,6 +187768,67 @@ var init_session$1 = __esmMin((() => {
 				});
 			}
 		}
+		/**
+		* Resolve the effective print-mode (`kimi -p`) background-task policy.
+		*
+		* `background.print_background_mode` is authoritative when set. Otherwise we
+		* fall back to the legacy `background.keep_alive_on_exit` mapping so existing
+		* configs keep their behavior: `keep_alive_on_exit = true` ⇒ `'drain'`
+		* (suppress + drain background tasks before exit), otherwise `'exit'`.
+		*/
+		resolvePrintBackgroundMode() {
+			const configured = this.options.background?.printBackgroundMode;
+			if (configured !== void 0) return configured;
+			return resolveConfigValue({
+				env: process.env,
+				envKey: BACKGROUND_KEEP_ALIVE_ON_EXIT_ENV,
+				configValue: this.options.background?.keepAliveOnExit,
+				defaultValue: false,
+				parseEnv: parseBooleanEnv
+			}) ? "drain" : "exit";
+		}
+		countActiveBackgroundTasks() {
+			let count = 0;
+			for (const agent of this.readyAgents()) count += agent.background.list(true).length;
+			return count;
+		}
+		/**
+		* Decide what the `kimi -p` driver should do after the main agent's turn ends
+		* with `reason === 'completed'`. Returns `'finish'` when the run may exit, or
+		* `'continue'` when the driver must stay alive so a background-task completion
+		* can `turn.steer` the main agent into a new turn.
+		*
+		*  - 'exit'  : finish immediately (default).
+		*  - 'drain' : suppress + drain background tasks, then finish (legacy
+		*              `keep_alive_on_exit = true` behavior).
+		*  - 'steer' : while background tasks are still pending, return 'continue' so
+		*              completions steer new main turns; finish once quiescent, or when
+		*              the wall-clock ceiling (`print_wait_ceiling_s`) or the turn cap
+		*              (`print_max_turns`) is reached.
+		*/
+		async handlePrintMainTurnCompleted() {
+			const mode = this.resolvePrintBackgroundMode();
+			if (mode === "exit") return "finish";
+			if (mode === "drain") {
+				await this.waitForBackgroundTasksOnPrint();
+				return "finish";
+			}
+			const ceilingS = this.options.background?.printWaitCeilingS ?? 3600;
+			const maxTurns = this.options.background?.printMaxTurns ?? 50;
+			const now = Date.now();
+			this.printSteerDeadline ??= now + ceilingS * 1e3;
+			this.printSteerTurns += 1;
+			if (now >= this.printSteerDeadline) {
+				this.log.warn("print steer ceiling reached, finishing", { ceilingS });
+				return "finish";
+			}
+			if (this.printSteerTurns > maxTurns) {
+				this.log.warn("print steer max turns reached, finishing", { maxTurns });
+				return "finish";
+			}
+			if (this.countActiveBackgroundTasks() > 0) return "continue";
+			return "finish";
+		}
 		async createAgent(config, options = {}) {
 			await this.skillsReady;
 			const type = config.type ?? "main";
@@ -206200,7 +206330,9 @@ var init_model_alias_merge = __esmMin((() => {
 		"model",
 		"maxContextSize",
 		"capabilities",
-		"displayName"
+		"displayName",
+		"supportEfforts",
+		"defaultEffort"
 	]);
 }));
 //#endregion
@@ -206928,6 +207060,10 @@ function toModelEntry(value) {
 	}
 	if (typeof value["tool_call"] === "boolean") entry.tool_call = value["tool_call"];
 	if (typeof value["reasoning"] === "boolean") entry.reasoning = value["reasoning"];
+	const supportEfforts = toStringArrayOrUndefined(value["support_efforts"]);
+	if (supportEfforts !== void 0) entry.support_efforts = supportEfforts;
+	const defaultEffort = value["default_effort"];
+	if (typeof defaultEffort === "string" && defaultEffort.length > 0) entry.default_effort = defaultEffort;
 	const modalities = value["modalities"];
 	if (isRecord$10(modalities)) {
 		const input = toStringArrayOrUndefined(modalities["input"]);
@@ -207001,7 +207137,7 @@ async function fetchCustomRegistry(source, fetchImpl = fetch, signal) {
 function capabilitiesFromCustomEntry(model) {
 	const caps = /* @__PURE__ */ new Set();
 	if (model.tool_call === true) caps.add("tool_use");
-	if (model.reasoning === true) caps.add("thinking");
+	if (model.reasoning === true || (model.support_efforts?.length ?? 0) > 0) caps.add("thinking");
 	if (model.modalities?.input?.includes("image") === true) caps.add("image_in");
 	if (model.modalities?.input?.includes("video") === true) caps.add("video_in");
 	if (model.modalities?.output?.includes("image") === true) caps.add("image_out");
@@ -207009,7 +207145,7 @@ function capabilitiesFromCustomEntry(model) {
 	return [...caps];
 }
 function hasRichCapabilityHints(model) {
-	return typeof model.tool_call === "boolean" || typeof model.reasoning === "boolean" || model.modalities !== void 0;
+	return typeof model.tool_call === "boolean" || typeof model.reasoning === "boolean" || model.modalities !== void 0 || model.support_efforts !== void 0;
 }
 function resolveMaxContextSize(model) {
 	const context = model.limit?.context;
@@ -207051,7 +207187,9 @@ function applyCustomRegistryProvider(config, entry, source) {
 			model: model.id,
 			maxContextSize,
 			capabilities,
-			displayName
+			displayName,
+			...model.support_efforts !== void 0 ? { supportEfforts: model.support_efforts } : {},
+			...model.default_effort !== void 0 ? { defaultEffort: model.default_effort } : {}
 		}, CUSTOM_REGISTRY_MODEL_FIELDS);
 	}
 	config.models = existingModels;
@@ -207800,7 +207938,7 @@ function resolveModelCapabilities(alias, provider) {
 		thinking: declared.has("thinking") || declared.has("always_thinking") || detected.thinking,
 		tool_use: declared.has("tool_use") || detected.tool_use,
 		max_context_tokens: alias.maxContextSize,
-		select_tools: declared.has("select_tools") || detected.select_tools === true
+		dynamically_loaded_tools: declared.has("dynamically_loaded_tools") || detected.dynamically_loaded_tools === true
 	};
 }
 function toKosongProviderConfig(provider, model, modelProtocol, kimiRequestHeaders, maxOutputSize, reasoningKey, promptCacheKey, adaptiveThinking, betaApi, supportEfforts) {
@@ -208143,6 +208281,9 @@ var init_rpc$1 = __esmMin((() => {
 		waitForBackgroundTasksOnPrint(_payload) {
 			return this.session.waitForBackgroundTasksOnPrint();
 		}
+		handlePrintMainTurnCompleted(_payload) {
+			return this.session.handlePrintMainTurnCompleted();
+		}
 		addAdditionalDir(payload) {
 			return this.session.addAdditionalDir(payload.path, payload.persist);
 		}
@@ -208245,6 +208386,9 @@ var init_rpc$1 = __esmMin((() => {
 		async cancelGoal({ agentId, ...payload }) {
 			return (await this.getAgent(agentId)).cancelGoal(payload);
 		}
+		async getCronTasks({ agentId, ...payload }) {
+			return (await this.getAgent(agentId)).getCronTasks(payload);
+		}
 		async getBackgroundOutput({ agentId, ...payload }) {
 			return (await this.getAgent(agentId)).getBackgroundOutput(payload);
 		}
@@ -210037,6 +210181,9 @@ var init_core_impl = __esmMin((() => {
 		waitForBackgroundTasksOnPrint({ sessionId, ...payload }) {
 			return this.sessionApi(sessionId).waitForBackgroundTasksOnPrint(payload);
 		}
+		handlePrintMainTurnCompleted({ sessionId, ...payload }) {
+			return this.sessionApi(sessionId).handlePrintMainTurnCompleted(payload);
+		}
 		addAdditionalDir({ sessionId, ...payload }) {
 			return this.requireSession(sessionId).addAdditionalDir(payload.path, payload.persist);
 		}
@@ -210058,6 +210205,9 @@ var init_core_impl = __esmMin((() => {
 		cancelGoal({ sessionId, ...payload }) {
 			return Promise.resolve(this.sessionApi(sessionId).cancelGoal(payload));
 		}
+		getCronTasks({ sessionId, ...payload }) {
+			return Promise.resolve(this.sessionApi(sessionId).getCronTasks(payload));
+		}
 		async installPlugin(payload) {
 			await this.pluginsReady;
 			this.assertPluginsLoaded();
@@ -216811,25 +216961,29 @@ function mapContentPart(part) {
 * Build the protocol-shaped `Message.content[]` for one ContextMessage.
 *
 * Order:
-*   1. For `tool` role: emit a SINGLE `tool_result` part. The output is the
-*      flattened text of the kosong message's content parts (most tool
-*      messages emit a single text). `is_error` is taken from `ContextMessage.isError`.
+*   1. For `tool` role: emit a SINGLE `tool_result` part. Plain-text results
+*      keep the historical flattened-text output (most tool messages emit a
+*      single text); a result that carries media parts (image/video/audio —
+*      e.g. ReadMediaFile) passes the raw kosong content-part array through
+*      instead, the same shape the live `tool.result` event stream carries,
+*      so REST consumers can still render the media. `is_error` is taken
+*      from `ContextMessage.isError`.
 *   2. For other roles: emit each content part mapped per `mapContentPart`,
 *      THEN append one `tool_use` part per `ToolCall` (assistant only).
 */
 function buildProtocolContent(msg) {
 	if (msg.role === "tool") {
 		if (msg.toolCallId === void 0) return msg.content.map((p) => mapContentPart(p));
-		const flattenedOutput = msg.content.map((p) => p.type === "text" ? p.text : "").join("");
+		const output = msg.content.some((p) => p.type === "image_url" || p.type === "video_url" || p.type === "audio_url") ? msg.content : msg.content.map((p) => p.type === "text" ? p.text : "").join("");
 		return [msg.isError === true ? {
 			type: "tool_result",
 			tool_call_id: msg.toolCallId,
-			output: flattenedOutput,
+			output,
 			is_error: true
 		} : {
 			type: "tool_result",
 			tool_call_id: msg.toolCallId,
-			output: flattenedOutput
+			output
 		}];
 	}
 	const base = msg.content.map((p) => mapContentPart(p));
@@ -219521,14 +219675,27 @@ var Session = class {
 	/**
 	* Block until every still-running background task (across all agents in this
 	* session) reaches a terminal state. Used by `kimi -p` after the main agent's
-	* turn finishes when `background.keep_alive_on_exit` is `true`, so background
-	* subagents get a chance to complete before the process exits. No-op when
-	* `keep_alive_on_exit` is not enabled. Bounded by `background.print_wait_ceiling_s`.
+	* turn finishes when the resolved print background mode is `'drain'`
+	* (`print_background_mode = "drain"`, or the legacy `keep_alive_on_exit = true`
+	* fallback), so background subagents get a chance to complete before the process
+	* exits. No-op in other modes. Bounded by `background.print_wait_ceiling_s`.
 	*/
 	async waitForBackgroundTasksOnPrint() {
 		this.ensureOpen();
 		await this.rpc.waitForBackgroundTasksOnPrint({ sessionId: this.id });
 	}
+	/**
+	* Used by `kimi -p` after the main agent's turn ends with `reason ===
+	* 'completed'`. Returns `'finish'` when the run may exit, or `'continue'` when
+	* the caller must keep the session alive so a background-task completion can
+	* steer the main agent into a new turn. Policy is selected by
+	* `background.print_background_mode` (`'exit' | 'drain' | 'steer'`); when unset
+	* it falls back to the legacy `keep_alive_on_exit` mapping (`true ⇒ 'drain'`).
+	*/
+	async handlePrintMainTurnCompleted() {
+		this.ensureOpen();
+		return this.rpc.handlePrintMainTurnCompleted({ sessionId: this.id });
+	}
 	async createGoal(input) {
 		this.ensureOpen();
 		return this.rpc.createGoal({
@@ -219552,6 +219719,15 @@ var Session = class {
 		this.ensureOpen();
 		return this.rpc.cancelGoal({ sessionId: this.id });
 	}
+	/**
+	* Enumerate the cron tasks scheduled in this session. Hosts running a
+	* bounded session lifetime (e.g. `kimi -p`) poll this to decide whether
+	* pending scheduled work still needs the process alive.
+	*/
+	async getCronTasks() {
+		this.ensureOpen();
+		return this.rpc.getCronTasks({ sessionId: this.id });
+	}
 	async listMcpServers() {
 		this.ensureOpen();
 		return this.rpc.listMcpServers({ sessionId: this.id });
@@ -220414,6 +220590,9 @@ var SDKRpcClientBase = class {
 	async waitForBackgroundTasksOnPrint(input) {
 		return (await this.getRpc()).waitForBackgroundTasksOnPrint({ sessionId: input.sessionId });
 	}
+	async handlePrintMainTurnCompleted(input) {
+		return (await this.getRpc()).handlePrintMainTurnCompleted({ sessionId: input.sessionId });
+	}
 	async createGoal(input) {
 		return (await this.getRpc()).createGoal({
 			sessionId: input.sessionId,
@@ -220446,6 +220625,12 @@ var SDKRpcClientBase = class {
 			agentId: this.interactiveAgentId
 		});
 	}
+	async getCronTasks(input) {
+		return (await this.getRpc()).getCronTasks({
+			sessionId: input.sessionId,
+			agentId: this.interactiveAgentId
+		});
+	}
 	async listMcpServers(input) {
 		return (await this.getRpc()).listMcpServers({ sessionId: input.sessionId });
 	}
@@ -220774,7 +220959,7 @@ function capabilityToStrings(capability) {
 	if (capability.audio_in) caps.push("audio_in");
 	if (capability.thinking) caps.push("thinking");
 	if (capability.tool_use) caps.push("tool_use");
-	if (capability.select_tools === true) caps.push("select_tools");
+	if (capability.dynamically_loaded_tools === true) caps.push("dynamically_loaded_tools");
 	return caps.length > 0 ? caps : void 0;
 }
 /** Builds a kimi-code model alias from a normalized catalog model. */
@@ -303679,7 +303864,7 @@ const REMOVE_CONFIRM_REMOVE = "remove";
 const INSTALL_TRUST_EXIT = "exit";
 const INSTALL_TRUST_TRUST = "trust";
 const ELLIPSIS$6 = "…";
-const WEB_BRIDGE_URL = "https://www.kimi.com/features/webbridge";
+const WEB_BRIDGE_URL = "https://www.kimi.com/features/webbridge#local-agent";
 const WEB_BRIDGE_ENTRY = {
 	id: "kimi-webbridge",
 	displayName: "Kimi WebBridge",
@@ -370845,7 +371030,7 @@ async function runHeadlessGoal(session, goal, model, outputFormat, stdout, stder
 		if (event.type === "goal.updated" && event.agentId === "main" && event.change?.kind === "completion" && event.snapshot !== null) completedSnapshot = event.snapshot;
 	});
 	try {
-		await runPromptTurn(session, goal.objective, outputFormat, stdout, stderr, true);
+		await runPromptTurn(session, goal.objective, outputFormat, stdout, stderr);
 	} finally {
 		unsubscribeGoalEvents();
 		const snapshot = completedSnapshot ?? (await session.getGoal()).goal;
@@ -370972,17 +371157,26 @@ function signalExitCode(signal) {
 	if (signal === "SIGHUP") return 129;
 	return 143;
 }
-function runPromptTurn(session, prompt, outputFormat, stdout, stderr, waitForGoalTerminal = false) {
+function runPromptTurn(session, prompt, outputFormat, stdout, stderr) {
 	let activeTurnId;
 	let activeAgentId;
-	let latestStartedTurnId;
 	const outputWriter = outputFormat === "stream-json" ? new PromptJsonWriter(stdout) : new PromptTranscriptWriter(stdout, stderr);
 	let settled = false;
 	let unsubscribe;
+	let keepAliveTimer;
+	const holdEventLoop = () => {
+		keepAliveTimer ??= setInterval(() => {}, 6e4);
+	};
+	const releaseEventLoop = () => {
+		if (keepAliveTimer === void 0) return;
+		clearInterval(keepAliveTimer);
+		keepAliveTimer = void 0;
+	};
 	return new Promise((resolve, reject) => {
 		const finish = (error) => {
 			if (settled) return;
 			settled = true;
+			releaseEventLoop();
 			unsubscribe?.();
 			outputWriter.finish();
 			if (error !== void 0) {
@@ -370991,21 +371185,39 @@ function runPromptTurn(session, prompt, outputFormat, stdout, stderr, waitForGoa
 			}
 			resolve();
 		};
+		const evaluateRunCompletion = async () => {
+			try {
+				const { goal } = await session.getGoal();
+				if (settled || activeTurnId !== void 0) return;
+				if (goal?.status === "active") {
+					holdEventLoop();
+					return;
+				}
+				const { tasks } = await session.getCronTasks();
+				if (settled || activeTurnId !== void 0) return;
+				if (tasks.some((task) => task.nextFireAt !== null)) {
+					holdEventLoop();
+					return;
+				}
+				await finishCompletedTurn();
+			} catch (error) {
+				finish(error instanceof Error ? error : new Error(String(error)));
+			}
+		};
 		unsubscribe = session.onEvent((event) => {
 			if (event.type === "error") {
 				if (event.agentId !== PROMPT_MAIN_AGENT_ID) return;
 				finish(/* @__PURE__ */ new Error(`${event.code}: ${event.message}`));
 				return;
 			}
-			if (event.type === "turn.started" && activeTurnId === void 0) {
+			if (event.type === "turn.started") {
 				if (event.agentId !== PROMPT_MAIN_AGENT_ID) return;
 				activeTurnId = event.turnId;
 				activeAgentId = event.agentId;
-				latestStartedTurnId = event.turnId;
 				return;
 			}
-			if (waitForGoalTerminal && event.type === "goal.updated" && event.agentId === PROMPT_MAIN_AGENT_ID && activeTurnId === void 0 && event.snapshot !== null && event.snapshot.status !== "active") {
-				finishCompletedTurn();
+			if (event.type === "goal.updated" && event.agentId === PROMPT_MAIN_AGENT_ID && activeTurnId === void 0 && event.snapshot !== null && event.snapshot.status !== "active") {
+				evaluateRunCompletion();
 				return;
 			}
 			if (activeTurnId === void 0 || activeAgentId === void 0 || !hasTurnId(event) || event.turnId !== activeTurnId || event.agentId !== activeAgentId) return;
@@ -371042,23 +371254,9 @@ function runPromptTurn(session, prompt, outputFormat, stdout, stderr, waitForGoa
 				case "turn.ended":
 					if (event.reason === "completed") {
 						outputWriter.flushAssistant();
-						if (waitForGoalTerminal) {
-							const completedTurnId = event.turnId;
-							activeTurnId = void 0;
-							activeAgentId = void 0;
-							(async () => {
-								try {
-									const { goal } = await session.getGoal();
-									if (activeTurnId !== void 0 || latestStartedTurnId !== completedTurnId) return;
-									if (goal?.status === "active") return;
-									await finishCompletedTurn();
-								} catch (error) {
-									finish(error instanceof Error ? error : new Error(String(error)));
-								}
-							})();
-							return;
-						}
-						finishCompletedTurn();
+						activeTurnId = void 0;
+						activeAgentId = void 0;
+						evaluateRunCompletion();
 						return;
 					}
 					finish(new Error(formatTurnEndedFailure(event)));
@@ -371081,7 +371279,6 @@ function runPromptTurn(session, prompt, outputFormat, stdout, stderr, waitForGoa
 				case "subagent.started":
 				case "subagent.suspended":
 				case "tool.list.updated":
-				case "turn.started":
 				case "turn.step.completed":
 				case "warning": return;
 			}
@@ -371092,9 +371289,12 @@ function runPromptTurn(session, prompt, outputFormat, stdout, stderr, waitForGoa
 		async function finishCompletedTurn() {
 			outputWriter.flushAssistant();
 			try {
-				await session.waitForBackgroundTasksOnPrint();
+				if (await session.handlePrintMainTurnCompleted() === "continue") {
+					holdEventLoop();
+					return;
+				}
 			} catch (error) {
-				log.warn("waitForBackgroundTasksOnPrint failed", { error });
+				log.warn("handlePrintMainTurnCompleted failed", { error });
 			}
 			finish();
 		}