@prestyj/boss 4.10.1 → 4.12.0

package/dist/{chunk-72J6ZGVA.js → chunk-HYXLQEZL.js}

@@ -3225,8 +3225,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path46) {
-      let input = path46;
+    function removeDotSegments(path49) {
+      let input = path49;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -3426,8 +3426,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path46, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path46 && path46 !== "/" ? path46 : void 0;
+        const [path49, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path49 && path49 !== "/" ? path49 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -3486,7 +3486,7 @@ var require_schemes = __commonJS({
       urnComponent.nss = (uuidComponent.uuid || "").toLowerCase();
       return urnComponent;
     }
-    var http = (
+    var http2 = (
       /** @type {SchemeHandler} */
       {
         scheme: "http",
@@ -3499,7 +3499,7 @@ var require_schemes = __commonJS({
       /** @type {SchemeHandler} */
       {
         scheme: "https",
-        domainHost: http.domainHost,
+        domainHost: http2.domainHost,
         parse: httpParse,
         serialize: httpSerialize
       }
@@ -3543,7 +3543,7 @@ var require_schemes = __commonJS({
     var SCHEMES = (
       /** @type {Record<SchemeName, SchemeHandler>} */
       {
-        http,
+        http: http2,
         https,
         ws,
         wss,
@@ -6835,12 +6835,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs38, exportName) {
+    function addFormats(ajv, list, fs40, exportName) {
       var _a6;
       var _b;
       (_a6 = (_b = ajv.opts.code).formats) !== null && _a6 !== void 0 ? _a6 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs38[f]);
+        ajv.addFormat(f, fs40[f]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -6855,8 +6855,8 @@ var require_windows = __commonJS({
     init_esm_shims();
     module.exports = isexe;
     isexe.sync = sync;
-    var fs38 = __require("fs");
-    function checkPathExt(path46, options) {
+    var fs40 = __require("fs");
+    function checkPathExt(path49, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -6867,25 +6867,25 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p = pathext[i].toLowerCase();
-        if (p && path46.substr(-p.length).toLowerCase() === p) {
+        if (p && path49.substr(-p.length).toLowerCase() === p) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat, path46, options) {
+    function checkStat(stat, path49, options) {
       if (!stat.isSymbolicLink() && !stat.isFile()) {
         return false;
       }
-      return checkPathExt(path46, options);
+      return checkPathExt(path49, options);
     }
-    function isexe(path46, options, cb) {
-      fs38.stat(path46, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path46, options));
+    function isexe(path49, options, cb) {
+      fs40.stat(path49, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, path49, options));
       });
     }
-    function sync(path46, options) {
-      return checkStat(fs38.statSync(path46), path46, options);
+    function sync(path49, options) {
+      return checkStat(fs40.statSync(path49), path49, options);
     }
   }
 });
@@ -6897,14 +6897,14 @@ var require_mode = __commonJS({
     init_esm_shims();
     module.exports = isexe;
     isexe.sync = sync;
-    var fs38 = __require("fs");
-    function isexe(path46, options, cb) {
-      fs38.stat(path46, function(er, stat) {
+    var fs40 = __require("fs");
+    function isexe(path49, options, cb) {
+      fs40.stat(path49, function(er, stat) {
         cb(er, er ? false : checkStat(stat, options));
       });
     }
-    function sync(path46, options) {
-      return checkStat(fs38.statSync(path46), options);
+    function sync(path49, options) {
+      return checkStat(fs40.statSync(path49), options);
     }
     function checkStat(stat, options) {
       return stat.isFile() && checkMode(stat, options);
@@ -6930,7 +6930,7 @@ var require_isexe = __commonJS({
   "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
     "use strict";
     init_esm_shims();
-    var fs38 = __require("fs");
+    var fs40 = __require("fs");
     var core;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
       core = require_windows();
@@ -6939,7 +6939,7 @@ var require_isexe = __commonJS({
     }
     module.exports = isexe;
     isexe.sync = sync;
-    function isexe(path46, options, cb) {
+    function isexe(path49, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -6949,7 +6949,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve3, reject) {
-          isexe(path46, options || {}, function(er, is) {
+          isexe(path49, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -6958,7 +6958,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path46, options || {}, function(er, is) {
+      core(path49, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -6968,9 +6968,9 @@ var require_isexe = __commonJS({
         cb(er, is);
       });
     }
-    function sync(path46, options) {
+    function sync(path49, options) {
       try {
-        return core.sync(path46, options || {});
+        return core.sync(path49, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -6988,7 +6988,7 @@ var require_which = __commonJS({
     "use strict";
     init_esm_shims();
     var isWindows3 = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path46 = __require("path");
+    var path49 = __require("path");
     var COLON = isWindows3 ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -7026,7 +7026,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve3(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path46.join(pathPart, cmd);
+        const pCmd = path49.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve3(subStep(p, i, 0));
       });
@@ -7053,7 +7053,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path46.join(pathPart, cmd);
+        const pCmd = path49.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j = 0; j < pathExt.length; j++) {
           const cur = p + pathExt[j];
@@ -7103,7 +7103,7 @@ var require_resolveCommand = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports, module) {
     "use strict";
     init_esm_shims();
-    var path46 = __require("path");
+    var path49 = __require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -7121,7 +7121,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env2[getPathKey({ env: env2 })],
-          pathExt: withoutPathExt ? path46.delimiter : void 0
+          pathExt: withoutPathExt ? path49.delimiter : void 0
         });
       } catch (e) {
       } finally {
@@ -7130,7 +7130,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path46.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path49.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -7187,8 +7187,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path46, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path46.split("/").pop();
+      const [path49, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path49.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -7202,16 +7202,16 @@ var require_readShebang = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js"(exports, module) {
     "use strict";
     init_esm_shims();
-    var fs38 = __require("fs");
+    var fs40 = __require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd2;
       try {
-        fd2 = fs38.openSync(command, "r");
-        fs38.readSync(fd2, buffer, 0, size, 0);
-        fs38.closeSync(fd2);
+        fd2 = fs40.openSync(command, "r");
+        fs40.readSync(fd2, buffer, 0, size, 0);
+        fs40.closeSync(fd2);
       } catch (e) {
       }
       return shebangCommand(buffer.toString());
@@ -7225,7 +7225,7 @@ var require_parse = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports, module) {
     "use strict";
     init_esm_shims();
-    var path46 = __require("path");
+    var path49 = __require("path");
     var resolveCommand = require_resolveCommand();
     var escape4 = require_escape();
     var readShebang = require_readShebang();
@@ -7250,7 +7250,7 @@ var require_parse = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path46.normalize(parsed.command);
+        parsed.command = path49.normalize(parsed.command);
         parsed.command = escape4.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape4.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -17765,10 +17765,10 @@ var require_react_reconciler_development = __commonJS({
           fiber = fiber.next, id2--;
         return fiber;
       }
-      function copyWithSetImpl(obj, path46, index, value) {
-        if (index >= path46.length) return value;
-        var key = path46[index], updated = isArrayImpl(obj) ? obj.slice() : assign({}, obj);
-        updated[key] = copyWithSetImpl(obj[key], path46, index + 1, value);
+      function copyWithSetImpl(obj, path49, index, value) {
+        if (index >= path49.length) return value;
+        var key = path49[index], updated = isArrayImpl(obj) ? obj.slice() : assign({}, obj);
+        updated[key] = copyWithSetImpl(obj[key], path49, index + 1, value);
         return updated;
       }
       function copyWithRename(obj, oldPath, newPath) {
@@ -17795,11 +17795,11 @@ var require_react_reconciler_development = __commonJS({
         );
         return updated;
       }
-      function copyWithDeleteImpl(obj, path46, index) {
-        var key = path46[index], updated = isArrayImpl(obj) ? obj.slice() : assign({}, obj);
-        if (index + 1 === path46.length)
+      function copyWithDeleteImpl(obj, path49, index) {
+        var key = path49[index], updated = isArrayImpl(obj) ? obj.slice() : assign({}, obj);
+        if (index + 1 === path49.length)
           return isArrayImpl(updated) ? updated.splice(key, 1) : delete updated[key], updated;
-        updated[key] = copyWithDeleteImpl(obj[key], path46, index + 1);
+        updated[key] = copyWithDeleteImpl(obj[key], path49, index + 1);
         return updated;
       }
       function shouldSuspendImpl() {
@@ -31076,29 +31076,29 @@ var require_react_reconciler_development = __commonJS({
       var didWarnAboutNestedUpdates = false;
       var didWarnAboutFindNodeInStrictMode = {};
       var overrideHookState = null, overrideHookStateDeletePath = null, overrideHookStateRenamePath = null, overrideProps = null, overridePropsDeletePath = null, overridePropsRenamePath = null, scheduleUpdate = null, scheduleRetry = null, setErrorHandler = null, setSuspenseHandler = null;
-      overrideHookState = function(fiber, id2, path46, value) {
+      overrideHookState = function(fiber, id2, path49, value) {
         id2 = findHook(fiber, id2);
-        null !== id2 && (path46 = copyWithSetImpl(id2.memoizedState, path46, 0, value), id2.memoizedState = path46, id2.baseState = path46, fiber.memoizedProps = assign({}, fiber.memoizedProps), path46 = enqueueConcurrentRenderForLane(fiber, 2), null !== path46 && scheduleUpdateOnFiber(path46, fiber, 2));
+        null !== id2 && (path49 = copyWithSetImpl(id2.memoizedState, path49, 0, value), id2.memoizedState = path49, id2.baseState = path49, fiber.memoizedProps = assign({}, fiber.memoizedProps), path49 = enqueueConcurrentRenderForLane(fiber, 2), null !== path49 && scheduleUpdateOnFiber(path49, fiber, 2));
       };
-      overrideHookStateDeletePath = function(fiber, id2, path46) {
+      overrideHookStateDeletePath = function(fiber, id2, path49) {
         id2 = findHook(fiber, id2);
-        null !== id2 && (path46 = copyWithDeleteImpl(id2.memoizedState, path46, 0), id2.memoizedState = path46, id2.baseState = path46, fiber.memoizedProps = assign({}, fiber.memoizedProps), path46 = enqueueConcurrentRenderForLane(fiber, 2), null !== path46 && scheduleUpdateOnFiber(path46, fiber, 2));
+        null !== id2 && (path49 = copyWithDeleteImpl(id2.memoizedState, path49, 0), id2.memoizedState = path49, id2.baseState = path49, fiber.memoizedProps = assign({}, fiber.memoizedProps), path49 = enqueueConcurrentRenderForLane(fiber, 2), null !== path49 && scheduleUpdateOnFiber(path49, fiber, 2));
       };
       overrideHookStateRenamePath = function(fiber, id2, oldPath, newPath) {
         id2 = findHook(fiber, id2);
         null !== id2 && (oldPath = copyWithRename(id2.memoizedState, oldPath, newPath), id2.memoizedState = oldPath, id2.baseState = oldPath, fiber.memoizedProps = assign({}, fiber.memoizedProps), oldPath = enqueueConcurrentRenderForLane(fiber, 2), null !== oldPath && scheduleUpdateOnFiber(oldPath, fiber, 2));
       };
-      overrideProps = function(fiber, path46, value) {
-        fiber.pendingProps = copyWithSetImpl(fiber.memoizedProps, path46, 0, value);
+      overrideProps = function(fiber, path49, value) {
+        fiber.pendingProps = copyWithSetImpl(fiber.memoizedProps, path49, 0, value);
         fiber.alternate && (fiber.alternate.pendingProps = fiber.pendingProps);
-        path46 = enqueueConcurrentRenderForLane(fiber, 2);
-        null !== path46 && scheduleUpdateOnFiber(path46, fiber, 2);
+        path49 = enqueueConcurrentRenderForLane(fiber, 2);
+        null !== path49 && scheduleUpdateOnFiber(path49, fiber, 2);
       };
-      overridePropsDeletePath = function(fiber, path46) {
-        fiber.pendingProps = copyWithDeleteImpl(fiber.memoizedProps, path46, 0);
+      overridePropsDeletePath = function(fiber, path49) {
+        fiber.pendingProps = copyWithDeleteImpl(fiber.memoizedProps, path49, 0);
         fiber.alternate && (fiber.alternate.pendingProps = fiber.pendingProps);
-        path46 = enqueueConcurrentRenderForLane(fiber, 2);
-        null !== path46 && scheduleUpdateOnFiber(path46, fiber, 2);
+        path49 = enqueueConcurrentRenderForLane(fiber, 2);
+        null !== path49 && scheduleUpdateOnFiber(path49, fiber, 2);
       };
       overridePropsRenamePath = function(fiber, oldPath, newPath) {
         fiber.pendingProps = copyWithRename(
@@ -33840,13 +33840,13 @@ function __classPrivateFieldGet(receiver, state3, kind, f) {
 // ../../node_modules/.pnpm/@anthropic-ai+sdk@0.94.0_zod@4.4.3/node_modules/@anthropic-ai/sdk/internal/utils/uuid.mjs
 init_esm_shims();
 var uuid4 = function() {
-  const { crypto: crypto12 } = globalThis;
-  if (crypto12?.randomUUID) {
-    uuid4 = crypto12.randomUUID.bind(crypto12);
-    return crypto12.randomUUID();
+  const { crypto: crypto13 } = globalThis;
+  if (crypto13?.randomUUID) {
+    uuid4 = crypto13.randomUUID.bind(crypto13);
+    return crypto13.randomUUID();
   }
   const u8 = new Uint8Array(1);
-  const randomByte = crypto12 ? () => crypto12.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
+  const randomByte = crypto13 ? () => crypto13.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
   return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c2) => (+c2 ^ randomByte() & 15 >> +c2 / 4).toString(16));
 };
 
@@ -34333,15 +34333,15 @@ function redactSensitive(body) {
   }
   return null;
 }
-async function checkCredentialsFileSafety(path46, onWarn = (m) => console.warn(`anthropic-sdk: ${m}`)) {
+async function checkCredentialsFileSafety(path49, onWarn = (m) => console.warn(`anthropic-sdk: ${m}`)) {
   if (typeof process === "undefined" || process.platform === "win32")
     return;
-  const fs38 = await import("fs");
-  let resolved = path46;
+  const fs40 = await import("fs");
+  let resolved = path49;
   let st;
   try {
-    resolved = await fs38.promises.realpath(path46);
-    st = await fs38.promises.stat(resolved);
+    resolved = await fs40.promises.realpath(path49);
+    st = await fs40.promises.stat(resolved);
   } catch {
     return;
   }
@@ -34357,27 +34357,27 @@ async function checkCredentialsFileSafety(path46, onWarn = (m) => console.warn(`
   }
 }
 async function writeCredentialsFileAtomic(targetPath, data) {
-  const fs38 = await import("fs");
-  const path46 = await import("path");
-  const dir = path46.dirname(targetPath);
-  await fs38.promises.mkdir(dir, { recursive: true, mode: 448 });
+  const fs40 = await import("fs");
+  const path49 = await import("path");
+  const dir = path49.dirname(targetPath);
+  await fs40.promises.mkdir(dir, { recursive: true, mode: 448 });
   const tmpPath = `${targetPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
   try {
-    const fh = await fs38.promises.open(tmpPath, "w", 384);
+    const fh = await fs40.promises.open(tmpPath, "w", 384);
     try {
       await fh.writeFile(JSON.stringify(data, null, 2));
       await fh.sync();
     } finally {
       await fh.close();
     }
-    await fs38.promises.rename(tmpPath, targetPath);
+    await fs40.promises.rename(tmpPath, targetPath);
   } catch (err) {
-    await fs38.promises.unlink(tmpPath).catch(() => {
+    await fs40.promises.unlink(tmpPath).catch(() => {
     });
     throw err;
   }
   try {
-    const dirFh = await fs38.promises.open(dir, "r");
+    const dirFh = await fs40.promises.open(dir, "r");
     try {
       await dirFh.sync();
     } finally {
@@ -34679,12 +34679,12 @@ var loadConfigWithSource = async (profile) => {
     return null;
   }
   validateProfileName(profileName);
-  const fs38 = await import("fs");
-  const path46 = await import("path");
-  const configPath = path46.join(rootConfigPath, "configs", `${profileName}.json`);
+  const fs40 = await import("fs");
+  const path49 = await import("path");
+  const configPath = path49.join(rootConfigPath, "configs", `${profileName}.json`);
   let configRaw;
   try {
-    configRaw = await fs38.promises.readFile(configPath, "utf-8");
+    configRaw = await fs40.promises.readFile(configPath, "utf-8");
   } catch (err) {
     if (err?.code !== "ENOENT") {
       throw new Error(`failed to read config file ${configPath}: ${err}`);
@@ -34765,37 +34765,37 @@ var getCredentialsPath = async (config2, profile) => {
     return null;
   }
   validateProfileName(profileName);
-  const path46 = await import("path");
-  return path46.join(rootConfigPath, "credentials", `${profileName}.json`);
+  const path49 = await import("path");
+  return path49.join(rootConfigPath, "credentials", `${profileName}.json`);
 };
 var getRootConfigPath = async () => {
   if (!supportsLocalConfigFiles()) {
     return null;
   }
-  const path46 = await import("path");
+  const path49 = await import("path");
   const configDir = readEnv("ANTHROPIC_CONFIG_DIR");
   if (configDir) {
     return configDir;
   }
-  const os12 = getPlatformHeaders()["X-Stainless-OS"];
-  if (os12 === "Windows") {
+  const os13 = getPlatformHeaders()["X-Stainless-OS"];
+  if (os13 === "Windows") {
     const appData = readEnv("APPDATA");
     if (appData) {
-      return path46.join(appData, "Anthropic");
+      return path49.join(appData, "Anthropic");
     }
     const userProfile = readEnv("USERPROFILE");
     if (userProfile) {
-      return path46.join(userProfile, "AppData", "Roaming", "Anthropic");
+      return path49.join(userProfile, "AppData", "Roaming", "Anthropic");
     }
     return null;
   }
   const xdgConfigHome = readEnv("XDG_CONFIG_HOME");
   if (xdgConfigHome) {
-    return path46.join(xdgConfigHome, "anthropic");
+    return path49.join(xdgConfigHome, "anthropic");
   }
   const home = readEnv("HOME");
   if (home) {
-    return path46.join(home, ".config", "anthropic");
+    return path49.join(home, ".config", "anthropic");
   }
   return null;
 };
@@ -34812,11 +34812,11 @@ var getActiveProfileName = async () => {
   if (profileName) {
     return profileName;
   }
-  const fs38 = await import("fs");
-  const path46 = await import("path");
-  const filePath = path46.join(rootConfigPath, "active_config");
+  const fs40 = await import("fs");
+  const path49 = await import("path");
+  const filePath = path49.join(rootConfigPath, "active_config");
   try {
-    return (await fs38.promises.readFile(filePath, "utf-8")).trim() || "default";
+    return (await fs40.promises.readFile(filePath, "utf-8")).trim() || "default";
   } catch (err) {
     if (err?.code !== "ENOENT") {
       throw new Error(`failed to read ${filePath}: ${err}`);
@@ -34827,21 +34827,21 @@ var getActiveProfileName = async () => {
 
 // ../../node_modules/.pnpm/@anthropic-ai+sdk@0.94.0_zod@4.4.3/node_modules/@anthropic-ai/sdk/lib/credentials/identity-token.mjs
 init_esm_shims();
-function identityTokenFromFile(path46) {
-  if (!path46) {
+function identityTokenFromFile(path49) {
+  if (!path49) {
     throw new AnthropicError("Identity token file path is empty");
   }
   return async () => {
-    const fs38 = await import("fs");
+    const fs40 = await import("fs");
     let content;
     try {
-      content = await fs38.promises.readFile(path46, "utf-8");
+      content = await fs40.promises.readFile(path49, "utf-8");
     } catch (err) {
-      throw new AnthropicError(`Failed to read identity token file at ${path46}: ${err}`);
+      throw new AnthropicError(`Failed to read identity token file at ${path49}: ${err}`);
     }
     const token = content.trim();
     if (!token) {
-      throw new AnthropicError(`Identity token file at ${path46} is empty`);
+      throw new AnthropicError(`Identity token file at ${path49} is empty`);
     }
     return token;
   };
@@ -34916,11 +34916,11 @@ function oidcFederationProvider(config2) {
 init_esm_shims();
 function userOAuthProvider(config2) {
   return async (opts) => {
-    const fs38 = await import("fs");
+    const fs40 = await import("fs");
     await checkCredentialsFileSafety(config2.credentialsPath, config2.onSafetyWarning);
     let raw;
     try {
-      raw = await fs38.promises.readFile(config2.credentialsPath, "utf-8");
+      raw = await fs40.promises.readFile(config2.credentialsPath, "utf-8");
     } catch (err) {
       throw new WorkloadIdentityError(`Credentials file not found at ${config2.credentialsPath}: ${err}`);
     }
@@ -35084,11 +35084,11 @@ function resolveIdentityTokenProvider(auth2) {
 }
 function cachedExchangeProvider(exchange, credentialsPath, onCacheWriteError, onSafetyWarning) {
   return async (opts) => {
-    const fs38 = await import("fs");
+    const fs40 = await import("fs");
     await checkCredentialsFileSafety(credentialsPath, onSafetyWarning);
     let existing;
     try {
-      const raw = await fs38.promises.readFile(credentialsPath, "utf-8");
+      const raw = await fs40.promises.readFile(credentialsPath, "utf-8");
       existing = JSON.parse(raw);
       const token = existing?.["access_token"];
       if (token && !opts?.forceRefresh) {
@@ -35927,12 +35927,12 @@ function encodeURIPath(str2) {
   return str2.replace(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/g, encodeURIComponent);
 }
 var EMPTY = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.create(null));
-var createPathTagFunction = (pathEncoder = encodeURIPath) => function path46(statics, ...params) {
+var createPathTagFunction = (pathEncoder = encodeURIPath) => function path49(statics, ...params) {
   if (statics.length === 1)
     return statics[0];
   let postPath = false;
   const invalidSegments = [];
-  const path47 = statics.reduce((previousValue, currentValue, index) => {
+  const path50 = statics.reduce((previousValue, currentValue, index) => {
     if (/[?#]/.test(currentValue)) {
       postPath = true;
     }
@@ -35949,7 +35949,7 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path46(sta
     }
     return previousValue + currentValue + (index === params.length ? "" : encoded);
   }, "");
-  const pathOnly = path47.split(/[?#]/, 1)[0];
+  const pathOnly = path50.split(/[?#]/, 1)[0];
   const invalidSegmentPattern = /(?<=^|\/)(?:\.|%2e){1,2}(?=\/|$)/gi;
   let match;
   while ((match = invalidSegmentPattern.exec(pathOnly)) !== null) {
@@ -35970,10 +35970,10 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path46(sta
     }, "");
     throw new AnthropicError(`Path parameters result in path with invalid segments:
 ${invalidSegments.map((e) => e.error).join("\n")}
-${path47}
+${path50}
 ${underline}`);
   }
-  return path47;
+  return path50;
 };
 var path = /* @__PURE__ */ createPathTagFunction(encodeURIPath);
 
@@ -40734,9 +40734,9 @@ var BaseAnthropic = class {
   makeStatusError(status, error51, message, headers) {
     return APIError.generate(status, error51, message, headers);
   }
-  buildURL(path46, query, defaultBaseURL) {
+  buildURL(path49, query, defaultBaseURL) {
     const baseURL = !__classPrivateFieldGet(this, _BaseAnthropic_instances, "m", _BaseAnthropic_baseURLOverridden).call(this) && defaultBaseURL || this.baseURL;
-    const url2 = isAbsoluteURL(path46) ? new URL(path46) : new URL(baseURL + (baseURL.endsWith("/") && path46.startsWith("/") ? path46.slice(1) : path46));
+    const url2 = isAbsoluteURL(path49) ? new URL(path49) : new URL(baseURL + (baseURL.endsWith("/") && path49.startsWith("/") ? path49.slice(1) : path49));
     const defaultQuery = this.defaultQuery();
     const pathQuery = Object.fromEntries(url2.searchParams);
     if (!isEmptyObj(defaultQuery) || !isEmptyObj(pathQuery)) {
@@ -40780,24 +40780,24 @@ var BaseAnthropic = class {
       request.headers = headers;
     }
   }
-  get(path46, opts) {
-    return this.methodRequest("get", path46, opts);
+  get(path49, opts) {
+    return this.methodRequest("get", path49, opts);
   }
-  post(path46, opts) {
-    return this.methodRequest("post", path46, opts);
+  post(path49, opts) {
+    return this.methodRequest("post", path49, opts);
   }
-  patch(path46, opts) {
-    return this.methodRequest("patch", path46, opts);
+  patch(path49, opts) {
+    return this.methodRequest("patch", path49, opts);
   }
-  put(path46, opts) {
-    return this.methodRequest("put", path46, opts);
+  put(path49, opts) {
+    return this.methodRequest("put", path49, opts);
   }
-  delete(path46, opts) {
-    return this.methodRequest("delete", path46, opts);
+  delete(path49, opts) {
+    return this.methodRequest("delete", path49, opts);
   }
-  methodRequest(method, path46, opts) {
+  methodRequest(method, path49, opts) {
     return this.request(Promise.resolve(opts).then((opts2) => {
-      return { method, path: path46, ...opts2 };
+      return { method, path: path49, ...opts2 };
     }));
   }
   request(options, remainingRetries = null) {
@@ -40902,8 +40902,8 @@ var BaseAnthropic = class {
     }));
     return { response, options, controller, requestLogID, retryOfRequestLogID, startTime };
   }
-  getAPIList(path46, Page3, opts) {
-    return this.requestAPIList(Page3, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path46, ...opts2 })) : { method: "get", path: path46, ...opts });
+  getAPIList(path49, Page3, opts) {
+    return this.requestAPIList(Page3, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path49, ...opts2 })) : { method: "get", path: path49, ...opts });
   }
   requestAPIList(Page3, options) {
     const request = this.makeRequest(options, null, void 0);
@@ -40997,14 +40997,14 @@ var BaseAnthropic = class {
   }
   async buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path46, query, defaultBaseURL } = options;
+    const { method, path: path49, query, defaultBaseURL } = options;
     if (this._authState.resolution) {
       await this._authState.resolution;
     }
     if (!this._baseURLIsExplicit && this._authState.baseURL && this.baseURL !== this._authState.baseURL) {
       this.baseURL = this._authState.baseURL;
     }
-    const url2 = this.buildURL(path46, query, defaultBaseURL);
+    const url2 = this.buildURL(path49, query, defaultBaseURL);
     if ("timeout" in options)
       validatePositiveInteger("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -41891,10 +41891,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path46) {
-  if (!path46)
+function getElementAtPath(obj, path49) {
+  if (!path49)
     return obj;
-  return path46.reduce((acc, key) => acc?.[key], obj);
+  return path49.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -42303,11 +42303,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path46, issues) {
+function prefixIssues(path49, issues) {
   return issues.map((iss) => {
     var _a6;
     (_a6 = iss).path ?? (_a6.path = []);
-    iss.path.unshift(path46);
+    iss.path.unshift(path49);
     return iss;
   });
 }
@@ -42454,16 +42454,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path46 = []) => {
+  const processError = (error52, path49 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path46, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path49, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
       } else {
-        const fullpath = [...path46, ...issue2.path];
+        const fullpath = [...path49, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -42490,17 +42490,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path46 = []) => {
+  const processError = (error52, path49 = []) => {
     var _a6, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path46, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path49, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
       } else {
-        const fullpath = [...path46, ...issue2.path];
+        const fullpath = [...path49, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -42532,8 +42532,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path46 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path46) {
+  const path49 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path49) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -55306,13 +55306,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path46 = ref.slice(1).split("/").filter(Boolean);
-  if (path46.length === 0) {
+  const path49 = ref.slice(1).split("/").filter(Boolean);
+  if (path49.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path46[0] === defsKey) {
-    const key = path46[1];
+  if (path49[0] === defsKey) {
+    const key = path49[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -55749,13 +55749,13 @@ function __classPrivateFieldGet2(receiver, state3, kind, f) {
 // ../../node_modules/.pnpm/openai@6.34.0_ws@8.20.0_zod@4.4.3/node_modules/openai/internal/utils/uuid.mjs
 init_esm_shims();
 var uuid43 = function() {
-  const { crypto: crypto12 } = globalThis;
-  if (crypto12?.randomUUID) {
-    uuid43 = crypto12.randomUUID.bind(crypto12);
-    return crypto12.randomUUID();
+  const { crypto: crypto13 } = globalThis;
+  if (crypto13?.randomUUID) {
+    uuid43 = crypto13.randomUUID.bind(crypto13);
+    return crypto13.randomUUID();
   }
   const u8 = new Uint8Array(1);
-  const randomByte = crypto12 ? () => crypto12.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
+  const randomByte = crypto13 ? () => crypto13.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
   return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c2) => (+c2 ^ randomByte() & 15 >> +c2 / 4).toString(16));
 };
 
@@ -57541,12 +57541,12 @@ function encodeURIPath2(str2) {
   return str2.replace(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/g, encodeURIComponent);
 }
 var EMPTY2 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.create(null));
-var createPathTagFunction2 = (pathEncoder = encodeURIPath2) => function path46(statics, ...params) {
+var createPathTagFunction2 = (pathEncoder = encodeURIPath2) => function path49(statics, ...params) {
   if (statics.length === 1)
     return statics[0];
   let postPath = false;
   const invalidSegments = [];
-  const path47 = statics.reduce((previousValue, currentValue, index) => {
+  const path50 = statics.reduce((previousValue, currentValue, index) => {
     if (/[?#]/.test(currentValue)) {
       postPath = true;
     }
@@ -57563,7 +57563,7 @@ var createPathTagFunction2 = (pathEncoder = encodeURIPath2) => function path46(s
     }
     return previousValue + currentValue + (index === params.length ? "" : encoded);
   }, "");
-  const pathOnly = path47.split(/[?#]/, 1)[0];
+  const pathOnly = path50.split(/[?#]/, 1)[0];
   const invalidSegmentPattern = /(?<=^|\/)(?:\.|%2e){1,2}(?=\/|$)/gi;
   let match;
   while ((match = invalidSegmentPattern.exec(pathOnly)) !== null) {
@@ -57584,10 +57584,10 @@ var createPathTagFunction2 = (pathEncoder = encodeURIPath2) => function path46(s
     }, "");
     throw new OpenAIError(`Path parameters result in path with invalid segments:
 ${invalidSegments.map((e) => e.error).join("\n")}
-${path47}
+${path50}
 ${underline}`);
   }
-  return path47;
+  return path50;
 };
 var path2 = /* @__PURE__ */ createPathTagFunction2(encodeURIPath2);
 
@@ -62713,9 +62713,9 @@ var OpenAI = class {
     this.apiKey = token;
     return true;
   }
-  buildURL(path46, query, defaultBaseURL) {
+  buildURL(path49, query, defaultBaseURL) {
     const baseURL = !__classPrivateFieldGet2(this, _OpenAI_instances, "m", _OpenAI_baseURLOverridden).call(this) && defaultBaseURL || this.baseURL;
-    const url2 = isAbsoluteURL2(path46) ? new URL(path46) : new URL(baseURL + (baseURL.endsWith("/") && path46.startsWith("/") ? path46.slice(1) : path46));
+    const url2 = isAbsoluteURL2(path49) ? new URL(path49) : new URL(baseURL + (baseURL.endsWith("/") && path49.startsWith("/") ? path49.slice(1) : path49));
     const defaultQuery = this.defaultQuery();
     const pathQuery = Object.fromEntries(url2.searchParams);
     if (!isEmptyObj2(defaultQuery) || !isEmptyObj2(pathQuery)) {
@@ -62740,24 +62740,24 @@ var OpenAI = class {
    */
   async prepareRequest(request, { url: url2, options }) {
   }
-  get(path46, opts) {
-    return this.methodRequest("get", path46, opts);
+  get(path49, opts) {
+    return this.methodRequest("get", path49, opts);
   }
-  post(path46, opts) {
-    return this.methodRequest("post", path46, opts);
+  post(path49, opts) {
+    return this.methodRequest("post", path49, opts);
   }
-  patch(path46, opts) {
-    return this.methodRequest("patch", path46, opts);
+  patch(path49, opts) {
+    return this.methodRequest("patch", path49, opts);
   }
-  put(path46, opts) {
-    return this.methodRequest("put", path46, opts);
+  put(path49, opts) {
+    return this.methodRequest("put", path49, opts);
   }
-  delete(path46, opts) {
-    return this.methodRequest("delete", path46, opts);
+  delete(path49, opts) {
+    return this.methodRequest("delete", path49, opts);
   }
-  methodRequest(method, path46, opts) {
+  methodRequest(method, path49, opts) {
     return this.request(Promise.resolve(opts).then((opts2) => {
-      return { method, path: path46, ...opts2 };
+      return { method, path: path49, ...opts2 };
     }));
   }
   request(options, remainingRetries = null) {
@@ -62875,8 +62875,8 @@ var OpenAI = class {
     }));
     return { response, options, controller, requestLogID, retryOfRequestLogID, startTime };
   }
-  getAPIList(path46, Page3, opts) {
-    return this.requestAPIList(Page3, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path46, ...opts2 })) : { method: "get", path: path46, ...opts });
+  getAPIList(path49, Page3, opts) {
+    return this.requestAPIList(Page3, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path49, ...opts2 })) : { method: "get", path: path49, ...opts });
   }
   requestAPIList(Page3, options) {
     const request = this.makeRequest(options, null, void 0);
@@ -62967,8 +62967,8 @@ var OpenAI = class {
   }
   async buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path46, query, defaultBaseURL } = options;
-    const url2 = this.buildURL(path46, query, defaultBaseURL);
+    const { method, path: path49, query, defaultBaseURL } = options;
+    const url2 = this.buildURL(path49, query, defaultBaseURL);
     if ("timeout" in options)
       validatePositiveInteger2("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -63452,10 +63452,15 @@ var StreamResult = class {
     return this.response.then(onfulfilled, onrejected);
   }
 };
+var schemaCache = /* @__PURE__ */ new WeakMap();
 function zodToJsonSchema(schema) {
+  const cached4 = schemaCache.get(schema);
+  if (cached4) return cached4;
   const jsonSchema = external_exports.toJSONSchema(schema);
   const { $schema: _schema, ...rest } = jsonSchema;
-  return normalizeRootForAnthropic(rest);
+  const normalized = normalizeRootForAnthropic(rest);
+  schemaCache.set(schema, normalized);
+  return normalized;
 }
 function resolveToolSchema(tool) {
   return tool.rawInputSchema ?? zodToJsonSchema(tool.parameters);
@@ -63845,16 +63850,17 @@ function toAnthropicThinking(level, maxTokens, model) {
       outputConfig: { effort }
     };
   }
+  const VISIBLE_FLOOR = 1024;
   const effectiveLevel = level === "xhigh" || level === "max" ? "high" : level;
   const budgetMap = {
-    low: Math.max(1024, Math.floor(maxTokens * 0.25)),
-    medium: Math.max(2048, Math.floor(maxTokens * 0.5)),
-    high: Math.max(4096, maxTokens)
+    low: Math.max(1024, Math.floor(maxTokens * 0.2)),
+    medium: Math.max(2048, Math.floor(maxTokens * 0.45)),
+    high: Math.max(4096, Math.floor(maxTokens * 0.8))
   };
-  const budget = budgetMap[effectiveLevel];
+  const budget = Math.max(0, Math.min(budgetMap[effectiveLevel], maxTokens - VISIBLE_FLOOR));
   return {
     thinking: { type: "enabled", budget_tokens: budget },
-    maxTokens: maxTokens + budget
+    maxTokens
   };
 }
 function remapToolCallId(id2, idMap) {
@@ -64056,26 +64062,86 @@ function parseToolArguments(argsJson) {
     return {};
   }
 }
+var anthropicClientCache = /* @__PURE__ */ new Map();
 function createClient(options) {
   const isOAuth = options.apiKey?.startsWith("sk-ant-oat");
-  return new Anthropic({
+  const userAgent = isOAuth ? options.userAgent ?? "claude-cli/2.1.75 (external, cli)" : "";
+  const cacheKey = `${options.apiKey ?? ""}|${options.baseUrl ?? ""}|${userAgent}`;
+  if (!options.fetch) {
+    const cached4 = anthropicClientCache.get(cacheKey);
+    if (cached4) return cached4;
+  }
+  const client = new Anthropic({
     ...isOAuth ? { apiKey: null, authToken: options.apiKey } : { apiKey: options.apiKey },
     ...options.baseUrl ? { baseURL: options.baseUrl } : {},
     ...options.fetch ? { fetch: options.fetch } : {},
-    // Disable SDK retries — the agent loop has its own stall/overload retry
-    // logic that surfaces errors properly. SDK retries on 429s can cause
-    // multi-minute hangs when the provider stops responding mid-retry.
     maxRetries: 0,
     ...isOAuth ? {
       defaultHeaders: {
         // Anthropic's OAuth edge validates the claude-cli version. Callers
         // (ezcoder) resolve the live version at runtime; the literal here
-        // is the offline fallback for direct gg-ai consumers.
-        "user-agent": options.userAgent ?? "claude-cli/2.1.75 (external, cli)",
+        // is the offline fallback for direct ai consumers.
+        "user-agent": userAgent,
         "x-app": "cli"
       }
     } : {}
   });
+  if (!options.fetch) {
+    if (anthropicClientCache.size >= 8) {
+      const oldest = anthropicClientCache.keys().next().value;
+      if (oldest) anthropicClientCache.delete(oldest);
+    }
+    anthropicClientCache.set(cacheKey, client);
+  }
+  return client;
+}
+async function prewarmAnthropicCache(options) {
+  try {
+    const client = createClient({
+      apiKey: options.apiKey,
+      baseUrl: options.baseUrl,
+      userAgent: options.userAgent
+    });
+    const cacheControl = toAnthropicCacheControl(options.cacheRetention ?? "long", options.baseUrl);
+    const { system, messages } = toAnthropicMessages(
+      [
+        { role: "system", content: options.system },
+        { role: "user", content: "." }
+      ],
+      cacheControl
+    );
+    const isOAuth = options.apiKey.startsWith("sk-ant-oat");
+    const fullSystem = isOAuth ? [
+      {
+        type: "text",
+        text: "You are Claude Code, Anthropic's official CLI for Claude."
+      },
+      ...system ?? []
+    ] : system;
+    const tools = options.tools?.length ? toAnthropicTools(options.tools, {
+      cacheControl,
+      enableFineGrainedToolStreaming: true
+    }) : void 0;
+    await client.messages.create(
+      {
+        model: options.model,
+        max_tokens: 1,
+        messages,
+        ...fullSystem ? { system: fullSystem } : {},
+        ...tools ? {
+          tools: [
+            ...tools,
+            ...options.serverTools ?? []
+          ]
+        } : {}
+      },
+      {
+        signal: options.signal ?? void 0,
+        ...isOAuth ? { headers: { "anthropic-beta": "claude-code-20250219,oauth-2025-04-20" } } : {}
+      }
+    );
+  } catch {
+  }
 }
 function streamAnthropic(options) {
   return new StreamResult(runStream(options), options.signal);
@@ -64639,13 +64705,27 @@ function extractOpenAIUsage(usage) {
     cacheRead
   };
 }
+var openaiClientCache = /* @__PURE__ */ new Map();
 function createClient2(options) {
-  return new OpenAI({
+  const cacheKey = `${options.apiKey ?? ""}|${options.baseUrl ?? ""}|${JSON.stringify(options.defaultHeaders ?? {})}`;
+  if (!options.fetch) {
+    const cached4 = openaiClientCache.get(cacheKey);
+    if (cached4) return cached4;
+  }
+  const client = new OpenAI({
     apiKey: options.apiKey,
     ...options.baseUrl ? { baseURL: options.baseUrl } : {},
     ...options.fetch ? { fetch: options.fetch } : {},
     ...options.defaultHeaders ? { defaultHeaders: options.defaultHeaders } : {}
   });
+  if (!options.fetch) {
+    if (openaiClientCache.size >= 8) {
+      const oldest = openaiClientCache.keys().next().value;
+      if (oldest) openaiClientCache.delete(oldest);
+    }
+    openaiClientCache.set(cacheKey, client);
+  }
+  return client;
 }
 function streamOpenAI(options) {
   return new StreamResult(runStream2(options), options.signal);
@@ -64703,11 +64783,11 @@ async function* runStream2(options) {
     }
   }
   if (getEnvironment()?.GGAI_DUMP_REQUEST) {
-    const fs38 = await import("fs");
+    const fs40 = await import("fs");
     const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
     const dumpPath = `/tmp/ggai-request-${ts}.json`;
-    fs38.writeFileSync(dumpPath, JSON.stringify(params, null, 2));
-    fs38.appendFileSync(
+    fs40.writeFileSync(dumpPath, JSON.stringify(params, null, 2));
+    fs40.appendFileSync(
       "/tmp/ggai-requests.log",
       `[${ts}] ${dumpPath} messages=${params.messages.length}
 `
@@ -65051,9 +65131,6 @@ async function* runStream3(options) {
     body.tools = toCodexTools(options.tools);
   }
   body.prompt_cache_key = normalizePromptCacheKey(options.promptCacheKey ?? "ezcoder");
-  if (options.cacheRetention === "long") {
-    body.prompt_cache_retention = "24h";
-  }
   if (options.temperature != null && !options.thinking) {
     body.temperature = options.temperature;
   }
@@ -67501,7 +67578,7 @@ var Agent = class {
   }
 };
 
-// ../core/dist/chunk-LN5L2S5G.js
+// ../core/dist/chunk-RHNQ3WBA.js
 init_esm_shims();
 var MODELS = [
   // ── Anthropic ──────────────────────────────────────────
@@ -67665,6 +67742,20 @@ var MODELS = [
     maxThinkingLevel: "high"
   },
   // ── Z.AI (GLM) ─────────────────────────────────────────
+  // GLM-5.2: coding-first flagship with a usable 1M-token context window
+  // (5x jump over GLM-5.1's ~200K) and 131K max output. Released 2026-06-13.
+  {
+    id: "glm-5.2",
+    name: "GLM-5.2",
+    provider: "glm",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
   {
     id: "glm-5.1",
     name: "GLM-5.1",
@@ -67802,7 +67893,7 @@ function getDefaultModel(provider) {
   if (provider === "xiaomi") return MODELS.find((m) => m.id === "mimo-v2.5-pro");
   if (provider === "openai") return MODELS.find((m) => m.id === "gpt-5.5");
   if (provider === "gemini") return MODELS.find((m) => m.id === "gemini-3.1-flash-lite-preview");
-  if (provider === "glm") return MODELS.find((m) => m.id === "glm-5.1");
+  if (provider === "glm") return MODELS.find((m) => m.id === "glm-5.2");
   if (provider === "moonshot") return MODELS.find((m) => m.id === "kimi-k2.7-code");
   if (provider === "minimax") return MODELS.find((m) => m.id === "MiniMax-M3");
   if (provider === "deepseek") return MODELS.find((m) => m.id === "deepseek-v4-pro");
@@ -67837,7 +67928,7 @@ function getSummaryModel(provider, currentModelId) {
 // ../core/dist/index.js
 init_esm_shims();
 
-// ../core/dist/chunk-2MH5WQIW.js
+// ../core/dist/chunk-WQFTKHPJ.js
 init_esm_shims();
 import path3 from "path";
 import os2 from "os";
@@ -67851,6 +67942,7 @@ function getAppPaths() {
     telegramFile: path3.join(agentDir, "telegram.json"),
     agentHomeFile: path3.join(agentDir, "agent-home.json"),
     mcpFile: path3.join(agentDir, "mcp.json"),
+    mcpAuthFile: path3.join(agentDir, "mcp-auth.json"),
     logFile: path3.join(agentDir, "debug.log"),
     skillsDir: path3.join(agentDir, "skills"),
     extensionsDir: path3.join(agentDir, "extensions"),
@@ -68303,12 +68395,12 @@ function macOsProductVersion() {
   }
 }
 function deviceModel() {
-  const os12 = type();
+  const os13 = type();
   const version2 = release();
   const osArch = arch();
-  if (os12 === "Darwin") return `macOS ${macOsProductVersion() ?? version2} ${osArch}`;
-  if (os12 === "Windows_NT") return `Windows ${version2} ${osArch}`;
-  return `${os12} ${version2} ${osArch}`.trim();
+  if (os13 === "Darwin") return `macOS ${macOsProductVersion() ?? version2} ${osArch}`;
+  if (os13 === "Windows_NT") return `Windows ${version2} ${osArch}`;
+  return `${os13} ${version2} ${osArch}`.trim();
 }
 function deviceId() {
   const idPath = path32.join(getAppPaths().agentDir, "kimi_device_id");
@@ -69123,7 +69215,7 @@ init_esm_shims();
 import { spawn as spawn2, spawnSync } from "child_process";
 import fs6 from "fs";
 import fsp from "fs/promises";
-import path6 from "path";
+import path7 from "path";
 import os3 from "os";
 import crypto2 from "crypto";
 
@@ -69181,7 +69273,34 @@ var ENV_ALLOWLIST = /* @__PURE__ */ new Set([
   "ANDROID_SDK_ROOT",
   "RUBY_VERSION",
   "GEM_HOME",
-  "RBENV_ROOT"
+  "RBENV_ROOT",
+  // Windows essentials. Without these, child processes (cmd.exe, Git Bash,
+  // node, npm, MCP stdio servers) misbehave or fail to spawn: SystemRoot +
+  // PATHEXT are required by the Windows loader/resolver, ComSpec is the
+  // cmd.exe path, and the USERPROFILE/APPDATA/TEMP family is where toolchains
+  // read and write. Stripping them was a silent cause of broken shell calls.
+  "SystemRoot",
+  "SystemDrive",
+  "windir",
+  "PATHEXT",
+  "ComSpec",
+  "COMSPEC",
+  "USERPROFILE",
+  "HOMEDRIVE",
+  "HOMEPATH",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "PROGRAMDATA",
+  "ProgramData",
+  "ProgramFiles",
+  "ProgramFiles(x86)",
+  "ProgramW6432",
+  "TEMP",
+  "TMP",
+  "NUMBER_OF_PROCESSORS",
+  "PROCESSOR_ARCHITECTURE",
+  // Git Bash override for the agent shell (see core/shell.ts).
+  "GG_BASH"
 ]);
 function getSafeToolEnv(sourceEnv = process.env) {
   const env2 = { TERM: "dumb", EZ_CODER: "true" };
@@ -69193,8 +69312,68 @@ function getSafeToolEnv(sourceEnv = process.env) {
   return env2;
 }
 
+// ../cli/dist/core/shell.js
+init_esm_shims();
+import { existsSync as existsSync2 } from "fs";
+import path6 from "path";
+function gitBashFixedCandidates(env2) {
+  const programFiles = env2.ProgramFiles ?? "C:\\Program Files";
+  const programFilesX86 = env2["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)";
+  const localAppData = env2.LOCALAPPDATA;
+  const candidates = [
+    path6.win32.join(programFiles, "Git", "bin", "bash.exe"),
+    path6.win32.join(programFilesX86, "Git", "bin", "bash.exe")
+  ];
+  if (localAppData) {
+    candidates.push(path6.win32.join(localAppData, "Programs", "Git", "bin", "bash.exe"));
+  }
+  return candidates;
+}
+function gitBashFromPath(env2, exists) {
+  const rawPath = env2.PATH ?? env2.Path ?? "";
+  if (!rawPath)
+    return null;
+  for (const dir of rawPath.split(";")) {
+    if (!dir)
+      continue;
+    const gitExe = path6.win32.join(dir, "git.exe");
+    if (!exists(gitExe))
+      continue;
+    const gitRoot = path6.win32.dirname(path6.win32.dirname(gitExe));
+    const bash2 = path6.win32.join(gitRoot, "bin", "bash.exe");
+    if (exists(bash2))
+      return bash2;
+  }
+  return null;
+}
+function findGitBash(env2, exists) {
+  for (const candidate of gitBashFixedCandidates(env2)) {
+    if (exists(candidate))
+      return candidate;
+  }
+  return gitBashFromPath(env2, exists);
+}
+function resolveShell(command, opts = {}) {
+  const platform2 = opts.platform ?? process.platform;
+  const env2 = opts.env ?? process.env;
+  const exists = opts.exists ?? existsSync2;
+  const override = env2.GG_BASH?.trim();
+  if (override) {
+    return { file: override, args: ["-c", command], isCmdFallback: false };
+  }
+  if (platform2 !== "win32") {
+    return { file: "bash", args: ["-c", command], isCmdFallback: false };
+  }
+  const gitBash = findGitBash(env2, exists);
+  if (gitBash) {
+    return { file: gitBash, args: ["-c", command], isCmdFallback: false };
+  }
+  const comspec = env2.ComSpec ?? env2.COMSPEC ?? "C:\\Windows\\System32\\cmd.exe";
+  return { file: comspec, args: ["/d", "/s", "/c", command], isCmdFallback: true };
+}
+
 // ../cli/dist/core/process-manager.js
-var BG_DIR = path6.join(os3.homedir(), ".ezcoder", "bg");
+var BG_DIR = path7.join(os3.homedir(), ".ezcoder", "bg");
 function stopProcessTree(pid, ops = {}) {
   if ((ops.platform ?? process.platform) === "win32") {
     (ops.spawnSync ?? spawnSync)("taskkill", ["/pid", String(pid), "/T", "/F"], {
@@ -69214,9 +69393,10 @@ var ProcessManager = class {
   async start(command, cwd2) {
     await fsp.mkdir(BG_DIR, { recursive: true });
     const id2 = crypto2.randomUUID().slice(0, 8);
-    const logFile = path6.join(BG_DIR, `${id2}.log`);
+    const logFile = path7.join(BG_DIR, `${id2}.log`);
     const fd2 = fs6.openSync(logFile, "w");
-    const child = spawn2("bash", ["-c", command], {
+    const shell2 = resolveShell(command);
+    const child = spawn2(shell2.file, shell2.args, {
       cwd: cwd2,
       detached: true,
       // stdin is a pipe so callers can drive interactive processes (REPLs,
@@ -69359,7 +69539,7 @@ var ProcessManager = class {
 
 // ../cli/dist/core/lsp/manager.js
 init_esm_shims();
-import path8 from "path";
+import path9 from "path";
 
 // ../cli/dist/core/logger.js
 init_esm_shims();
@@ -69728,7 +69908,7 @@ Diagnostics in ${relPath} (informational \u2014 may resolve after related edits)
 // ../cli/dist/core/lsp/servers.js
 init_esm_shims();
 import fs7 from "fs";
-import path7 from "path";
+import path8 from "path";
 import { fileURLToPath } from "url";
 var WINDOWS_SUFFIXES = [".cmd", ".exe", ".bat"];
 function isExecutableFile(candidate) {
@@ -69744,13 +69924,13 @@ function candidateNames(name) {
     return [name];
   return [name, ...WINDOWS_SUFFIXES.map((suffix) => `${name}${suffix}`)];
 }
-var MODULE_DIR = path7.dirname(fileURLToPath(import.meta.url));
+var MODULE_DIR = path8.dirname(fileURLToPath(import.meta.url));
 function binDirsUpFrom(start) {
   const dirs = [];
   let dir = start;
   for (; ; ) {
-    dirs.push(path7.join(dir, "node_modules", ".bin"));
-    const parent = path7.dirname(dir);
+    dirs.push(path8.join(dir, "node_modules", ".bin"));
+    const parent = path8.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -69762,17 +69942,17 @@ function findExecutable(name, projectRoot) {
   const binDirs = [...binDirsUpFrom(projectRoot), ...binDirsUpFrom(MODULE_DIR)];
   for (const binDir of binDirs) {
     for (const candidate of names) {
-      const binPath = path7.join(binDir, candidate);
+      const binPath = path8.join(binDir, candidate);
       if (isExecutableFile(binPath))
         return binPath;
     }
   }
   const pathEnv = process.env.PATH ?? "";
-  for (const pathDir of pathEnv.split(path7.delimiter)) {
+  for (const pathDir of pathEnv.split(path8.delimiter)) {
     if (!pathDir)
       continue;
     for (const candidate of names) {
-      const binPath = path7.join(pathDir, candidate);
+      const binPath = path8.join(pathDir, candidate);
       if (isExecutableFile(binPath))
         return binPath;
     }
@@ -69782,17 +69962,17 @@ function findExecutable(name, projectRoot) {
 function findInNodeModulesUp(relPath, start) {
   let dir = start;
   for (; ; ) {
-    const candidate = path7.join(dir, "node_modules", relPath);
+    const candidate = path8.join(dir, "node_modules", relPath);
     if (fs7.existsSync(candidate))
       return candidate;
-    const parent = path7.dirname(dir);
+    const parent = path8.dirname(dir);
     if (parent === dir)
       return null;
     dir = parent;
   }
 }
 function findPackageBinScript(pkgName, binName, start) {
-  const pkgJsonPath = findInNodeModulesUp(path7.join(pkgName, "package.json"), start);
+  const pkgJsonPath = findInNodeModulesUp(path8.join(pkgName, "package.json"), start);
   if (!pkgJsonPath)
     return null;
   try {
@@ -69800,7 +69980,7 @@ function findPackageBinScript(pkgName, binName, start) {
     const bin = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.[binName];
     if (!bin)
       return null;
-    const script = path7.join(path7.dirname(pkgJsonPath), bin);
+    const script = path8.join(path8.dirname(pkgJsonPath), bin);
     return fs7.existsSync(script) ? script : null;
   } catch {
     return null;
@@ -69813,7 +69993,7 @@ function resolveNodeServer(pkgName, binName, projectRoot, args) {
   const bin = findExecutable(binName, projectRoot);
   return bin ? { command: bin, args } : null;
 }
-var TSSERVER_REL_PATH = path7.join("typescript", "lib", "tsserver.js");
+var TSSERVER_REL_PATH = path8.join("typescript", "lib", "tsserver.js");
 function projectTsserverPath(projectRoot) {
   return findInNodeModulesUp(TSSERVER_REL_PATH, projectRoot);
 }
@@ -69903,27 +70083,27 @@ var LSP_SERVER_CATALOG = [
   }
 ];
 function serverForFile(filePath, catalog = LSP_SERVER_CATALOG) {
-  const extension = path7.extname(filePath).toLowerCase();
+  const extension = path8.extname(filePath).toLowerCase();
   if (!extension)
     return null;
   return catalog.find((spec) => spec.extensions.includes(extension)) ?? null;
 }
 function findProjectRoot(filePath, markers, ceiling) {
-  const fileDir = path7.dirname(path7.resolve(filePath));
-  const cap = path7.resolve(ceiling);
-  const underCeiling = fileDir === cap || fileDir.startsWith(cap + path7.sep);
+  const fileDir = path8.dirname(path8.resolve(filePath));
+  const cap = path8.resolve(ceiling);
+  const underCeiling = fileDir === cap || fileDir.startsWith(cap + path8.sep);
   let dir = fileDir;
   for (; ; ) {
     for (const marker of markers) {
       try {
-        fs7.statSync(path7.join(dir, marker));
+        fs7.statSync(path8.join(dir, marker));
         return dir;
       } catch {
       }
     }
     if (underCeiling && dir === cap)
       break;
-    const parent = path7.dirname(dir);
+    const parent = path8.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -69994,12 +70174,12 @@ var LspManager = class {
       log("WARN", "lsp", `${spec.id} server died`, { root });
       return "";
     }
-    const uri = client.syncDocument(path8.resolve(this.cwd, filePath), content);
+    const uri = client.syncDocument(path9.resolve(this.cwd, filePath), content);
     const diagnostics = await client.collectDiagnostics(uri, budgetMs);
     this.warmKeys.add(key);
     if (diagnostics === null)
       return "";
-    const relPath = path8.relative(this.cwd, path8.resolve(this.cwd, filePath));
+    const relPath = path9.relative(this.cwd, path9.resolve(this.cwd, filePath));
     return formatDiagnostics(relPath, diagnostics);
   }
   ensureClient(key, spec, root) {
@@ -70050,18 +70230,18 @@ function withBudget(work, budgetMs) {
 // ../cli/dist/tools/read.js
 init_esm_shims();
 import fs12 from "fs/promises";
-import path12 from "path";
+import path13 from "path";
 
 // ../cli/dist/tools/path-utils.js
 init_esm_shims();
 import fs8 from "fs/promises";
-import path9 from "path";
+import path10 from "path";
 import os4 from "os";
 function resolvePath(cwd2, filePath) {
   if (filePath.startsWith("~")) {
-    filePath = path9.join(os4.homedir(), filePath.slice(1));
+    filePath = path10.join(os4.homedir(), filePath.slice(1));
   }
-  return path9.resolve(cwd2, filePath);
+  return path10.resolve(cwd2, filePath);
 }
 async function rejectSymlink(resolved) {
   try {
@@ -70128,9 +70308,9 @@ function truncateTail(content, maxLines = MAX_LINES, maxBytes = MAX_BYTES2) {
 init_esm_shims();
 import fs9 from "fs/promises";
 import os5 from "os";
-import path10 from "path";
+import path11 from "path";
 async function writeOverflow(content, prefix) {
-  const filePath = path10.join(os5.tmpdir(), `ezcoder-${prefix}-${Date.now()}.txt`);
+  const filePath = path11.join(os5.tmpdir(), `ezcoder-${prefix}-${Date.now()}.txt`);
   await fs9.writeFile(filePath, content, { encoding: "utf-8", mode: 384 });
   return filePath;
 }
@@ -70141,18 +70321,18 @@ import fs10 from "fs/promises";
 import { spawn as spawn4 } from "child_process";
 import { createReadStream } from "fs";
 var localOperations = {
-  readFile: (path46) => fs10.readFile(path46, "utf-8"),
-  writeFile: async (path46, content) => {
+  readFile: (path49) => fs10.readFile(path49, "utf-8"),
+  writeFile: async (path49, content) => {
     const { dirname: dirname3 } = await import("path");
-    await fs10.mkdir(dirname3(path46), { recursive: true });
-    await fs10.writeFile(path46, content, "utf-8");
+    await fs10.mkdir(dirname3(path49), { recursive: true });
+    await fs10.writeFile(path49, content, "utf-8");
   },
-  stat: (path46) => fs10.stat(path46),
-  lstat: (path46) => fs10.lstat(path46),
-  readdir: (path46, options) => fs10.readdir(path46, options),
-  mkdir: (path46) => fs10.mkdir(path46, { recursive: true }).then(() => {
+  stat: (path49) => fs10.stat(path49),
+  lstat: (path49) => fs10.lstat(path49),
+  readdir: (path49, options) => fs10.readdir(path49, options),
+  mkdir: (path49) => fs10.mkdir(path49, { recursive: true }).then(() => {
   }),
-  createReadStream: (path46, encoding) => createReadStream(path46, { encoding }),
+  createReadStream: (path49, encoding) => createReadStream(path49, { encoding }),
   spawn: (command, args, options) => spawn4(command, args, {
     cwd: options.cwd,
     env: options.env,
@@ -70198,7 +70378,7 @@ async function assertFresh(tracker, resolvedPath, ops) {
 init_esm_shims();
 import fs11 from "fs/promises";
 import os6 from "os";
-import path11 from "path";
+import path12 from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
@@ -70246,7 +70426,7 @@ async function compressVideoToFit(inputPath, targetBytes = COMPRESS_TARGET_BYTES
   }
   const totalKbps = Math.floor(targetBytes * 8 / durationSec / 1e3 * 0.9);
   const videoKbps = Math.max(COMPRESS_MIN_VIDEO_KBPS, totalKbps - COMPRESS_AUDIO_KBPS);
-  const outPath = path11.join(os6.tmpdir(), `ezcoder-compressed-${Date.now()}.mp4`);
+  const outPath = path12.join(os6.tmpdir(), `ezcoder-compressed-${Date.now()}.mp4`);
   try {
     await execFileAsync("ffmpeg", [
       "-y",
@@ -70318,7 +70498,7 @@ var VIDEO_MEDIA_TYPES = {
 };
 var MEDIA_TYPES = IMAGE_MEDIA_TYPES;
 function isAttachablePath(filePath) {
-  const ext = path11.extname(filePath).toLowerCase();
+  const ext = path12.extname(filePath).toLowerCase();
   return ATTACHABLE_EXTENSIONS.has(ext);
 }
 function resolvePath2(filePath, cwd2) {
@@ -70331,9 +70511,9 @@ function resolvePath2(filePath, cwd2) {
   }
   resolved = resolved.replace(/\\(.)/g, "$1");
   if (resolved.startsWith("~/")) {
-    resolved = path11.join(process.env.HOME ?? "/", resolved.slice(2));
-  } else if (!path11.isAbsolute(resolved)) {
-    resolved = path11.join(cwd2, resolved);
+    resolved = path12.join(process.env.HOME ?? "/", resolved.slice(2));
+  } else if (!path12.isAbsolute(resolved)) {
+    resolved = path12.join(cwd2, resolved);
   }
   return resolved;
 }
@@ -70446,8 +70626,8 @@ async function downscaleForPreview(buffer) {
   }
 }
 async function readImageFile(filePath) {
-  const ext = path11.extname(filePath).toLowerCase();
-  const fileName = path11.basename(filePath);
+  const ext = path12.extname(filePath).toLowerCase();
+  const fileName = path12.basename(filePath);
   if (VIDEO_EXTENSIONS.has(ext)) {
     try {
       const mediaType = VIDEO_MEDIA_TYPES[ext] ?? "video/mp4";
@@ -70612,7 +70792,7 @@ function createReadTool(cwd2, readFiles, ops = localOperations, onFileRead, vide
     async execute({ file_path, offset, limit: limit2 }, context) {
       const resolved = resolvePath(cwd2, file_path);
       await rejectSymlink(resolved);
-      const ext = path12.extname(resolved).toLowerCase();
+      const ext = path13.extname(resolved).toLowerCase();
       if (IMAGE_EXTENSIONS.has(ext)) {
         try {
           const rawBuffer = await fs12.readFile(resolved);
@@ -70739,7 +70919,7 @@ init_esm_shims();
 // ../cli/dist/tools/write.js
 init_esm_shims();
 import fs13 from "fs/promises";
-import path13 from "path";
+import path14 from "path";
 
 // ../cli/dist/core/runtime-mode.js
 init_esm_shims();
@@ -70801,9 +70981,9 @@ function createWriteTool(cwd2, readFiles, ops = localOperations, planModeRefOrOn
         return goalModeMutationRestriction("write", goalMode);
       }
       if (isPlanModeActive(planModeRef)) {
-        const plansDir = path13.join(cwd2, ".ezcoder", "plans");
-        const relative = path13.relative(plansDir, resolved);
-        if (relative.startsWith("..") || path13.isAbsolute(relative)) {
+        const plansDir = path14.join(cwd2, ".ezcoder", "plans");
+        const relative = path14.relative(plansDir, resolved);
+        if (relative.startsWith("..") || path14.isAbsolute(relative)) {
           return `Error: write is restricted in plan mode. You can only write to .ezcoder/plans/. Got: ${file_path}`;
         }
         await fs13.mkdir(plansDir, { recursive: true });
@@ -70833,7 +71013,7 @@ function createWriteTool(cwd2, readFiles, ops = localOperations, planModeRefOrOn
 
 // ../cli/dist/tools/edit.js
 init_esm_shims();
-import path14 from "path";
+import path15 from "path";
 
 // ../cli/dist/tools/edit-diff.js
 init_esm_shims();
@@ -70942,16 +71122,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path46, added, removed, oldPosInc, options) {
-    const last = path46.lastComponent;
+  addToPath(path49, added, removed, oldPosInc, options) {
+    const last = path49.lastComponent;
     if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
       return {
-        oldPos: path46.oldPos + oldPosInc,
+        oldPos: path49.oldPos + oldPosInc,
         lastComponent: { count: last.count + 1, added, removed, previousComponent: last.previousComponent }
       };
     } else {
       return {
-        oldPos: path46.oldPos + oldPosInc,
+        oldPos: path49.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last }
       };
     }
@@ -71726,7 +71906,7 @@ function createEditTool(cwd2, readFiles, ops = localOperations, planModeRefOrOnF
       const hasCRLF = original.includes("\r\n");
       const originalNormalized = hasCRLF ? original.replace(/\r\n/g, "\n") : original;
       let working = originalNormalized;
-      const fileName = path14.basename(resolved);
+      const fileName = path15.basename(resolved);
       const outcomes = new Array(edits.length);
       for (let i = 0; i < edits.length; i++) {
         const { old_text, new_text, replace_all } = edits[i];
@@ -71828,7 +72008,7 @@ ${f.closestSnippet}`;
 ` : "";
         throw new Error(header + formatFailures());
       }
-      const relPath = path14.relative(cwd2, resolved);
+      const relPath = path15.relative(cwd2, resolved);
       const diff3 = generateDiff(originalNormalized, working, relPath);
       const changed = working !== originalNormalized;
       let diagnosticsNote = "";
@@ -72037,7 +72217,8 @@ Use task_output with id="${result.id}" to read output, task_send to type input/a
       }
       const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT;
       return new Promise((resolve3) => {
-        const child = ops.spawn("bash", ["-c", command], {
+        const shell2 = resolveShell(command);
+        const child = ops.spawn(shell2.file, shell2.args, {
           cwd: cwd2,
           detached: true,
           stdio: ["ignore", "pipe", "pipe"],
@@ -72095,6 +72276,9 @@ ${output}`;
             output = `[Truncated: showing last ${result.keptLines} of ${result.totalLines} lines.${overflowNotice}]
 ${output}`;
           }
+          if (shell2.isCmdFallback) {
+            output = "[Ran under Windows cmd.exe \u2014 bash is unavailable. Use cmd syntax (dir, findstr, type); POSIX commands and quoting will fail. Install Git for Windows to get bash.]\n" + output;
+          }
           const exitCode = timedOut ? `TIMEOUT (${effectiveTimeout}ms)` : killed ? "KILLED" : String(code ?? 1);
           resolve3(`Exit code: ${exitCode}
 ${output}`);
@@ -72113,7 +72297,7 @@ Failed to spawn: ${err.message}`);
 // ../cli/dist/tools/find.js
 init_esm_shims();
 import fs14 from "fs/promises";
-import path15 from "path";
+import path16 from "path";
 var FindParams = external_exports.object({
   pattern: external_exports.string().describe("Glob pattern to match files (e.g. '**/*.ts', 'src/**/*.tsx')"),
   path: external_exports.string().optional().describe("Directory to search in (defaults to cwd)")
@@ -72159,7 +72343,7 @@ ${filtered.length} file(s) found`;
 }
 async function loadGitignore(dir) {
   try {
-    const content = await fs14.readFile(path15.join(dir, ".gitignore"), "utf-8");
+    const content = await fs14.readFile(path16.join(dir, ".gitignore"), "utf-8");
     return content.split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
   } catch {
     return [];
@@ -72169,7 +72353,7 @@ async function loadGitignore(dir) {
 // ../cli/dist/tools/grep.js
 init_esm_shims();
 import readline from "readline";
-import path16 from "path";
+import path17 from "path";
 var GrepParams = external_exports.object({
   pattern: external_exports.string().describe("Search pattern (regex supported)"),
   path: external_exports.string().optional().describe("File or directory to search (defaults to cwd)"),
@@ -72225,10 +72409,10 @@ function createGrepTool(cwd2, ops = localOperations) {
         }
         scannedCandidates += 1;
         const entry = typeof item === "string" ? item : item.path;
-        const ext = path16.extname(entry).toLowerCase();
+        const ext = path17.extname(entry).toLowerCase();
         if (BINARY_EXTENSIONS.has(ext))
           continue;
-        const filePath = path16.join(dir, entry);
+        const filePath = path17.join(dir, entry);
         const fileResults = await searchFile(filePath, regex2, cwd2, maxResults - results.length, ops);
         results.push(...fileResults);
       }
@@ -72238,7 +72422,7 @@ function createGrepTool(cwd2, ops = localOperations) {
 }
 async function searchFile(filePath, regex2, cwd2, maxResults, ops) {
   const results = [];
-  const relPath = path16.relative(cwd2, filePath);
+  const relPath = path17.relative(cwd2, filePath);
   try {
     const fileStat = await ops.stat(filePath);
     if (fileStat.size > MAX_FILE_SIZE)
@@ -72300,7 +72484,7 @@ ${results.length} match(es) found`;
 
 // ../cli/dist/tools/ls.js
 init_esm_shims();
-import path17 from "path";
+import path18 from "path";
 var LsParams = external_exports.object({
   path: external_exports.string().optional().describe("Directory path (defaults to cwd)"),
   all: external_exports.boolean().optional().describe("Show hidden files (default: false)")
@@ -72322,7 +72506,7 @@ function createLsTool(cwd2, ops = localOperations) {
       }
       for (const file2 of files) {
         try {
-          const stat = await ops.stat(path17.join(resolved, file2.name));
+          const stat = await ops.stat(path18.join(resolved, file2.name));
           const size = formatSize(stat.size);
           const type2 = file2.isSymbolicLink() ? "l" : "f";
           lines.push(`${type2}  ${size.padStart(8)}  ${file2.name}`);
@@ -72350,25 +72534,22 @@ function formatSize(bytes) {
 init_esm_shims();
 import { spawn as spawn5 } from "child_process";
 import { createInterface } from "readline";
+import { existsSync as existsSync3 } from "fs";
+import { fileURLToPath as fileURLToPath2 } from "url";
 var SUB_AGENT_MAX_TURNS = 10;
 var SUB_AGENT_MAX_OUTPUT_CHARS = 1e5;
 var SUB_AGENT_MAX_OUTPUT_LINES = 500;
 var SUB_AGENT_MAX_STDERR_CHARS = 1e4;
 var SUB_AGENT_TIMEOUT_MS = 10 * 60 * 1e3;
-function isPlanModeRef4(value) {
-  return typeof value === "object" && value !== null && typeof value.current === "boolean";
-}
-function isGoalModeRef4(value) {
-  return typeof value === "object" && value !== null && typeof value.current === "string";
+function resolveCliEntry() {
+  const cliPath = fileURLToPath2(new URL("../cli.js", import.meta.url));
+  return existsSync3(cliPath) ? cliPath : process.argv[1];
 }
 var SubAgentParams = external_exports.object({
   task: external_exports.string().describe("The task to delegate to the sub-agent"),
   agent: external_exports.string().optional().describe("Named agent definition to use (from ~/.ezcoder/agents/ or .ezcoder/agents/)")
 });
-function createSubAgentTool(cwd2, agents, parentProvider, parentModel, getParentCacheKeyOrGoalModeRef, planModeRefArg, goalModeRefArg) {
-  const getParentCacheKey = typeof getParentCacheKeyOrGoalModeRef === "function" ? getParentCacheKeyOrGoalModeRef : void 0;
-  const goalModeRef = isGoalModeRef4(getParentCacheKeyOrGoalModeRef) ? getParentCacheKeyOrGoalModeRef : goalModeRefArg;
-  const planModeRef = isPlanModeRef4(planModeRefArg) ? planModeRefArg : void 0;
+function createSubAgentTool(cwd2, agents, getParentProvider, getParentModel, getParentCacheKey, planModeRef, goalModeRef) {
   const agentList = agents.map((a) => `- ${a.name}: ${a.description}`).join("\n");
   const agentDesc = agentList ? `
 
@@ -72402,13 +72583,14 @@ ${agentList}` : "\n\nNo named agents configured.";
           };
         }
       }
-      const useProvider = parentProvider;
+      const useProvider = getParentProvider();
+      const useModel = getParentModel();
       const cliArgs = [
         "--json",
         "--provider",
         useProvider,
         "--model",
-        parentModel,
+        useModel,
         "--max-turns",
         String(SUB_AGENT_MAX_TURNS)
       ];
@@ -72420,8 +72602,7 @@ ${agentList}` : "\n\nNo named agents configured.";
         cliArgs.push("--system-prompt", agentDef.systemPrompt);
       }
       cliArgs.push(args.task);
-      const binPath = process.argv[1];
-      const child = spawn5(process.execPath, [binPath, ...cliArgs], {
+      const child = spawn5(process.execPath, [resolveCliEntry(), ...cliArgs], {
         cwd: cwd2,
         stdio: ["ignore", "pipe", "pipe"],
         env: { ...process.env }
@@ -72436,7 +72617,7 @@ ${agentList}` : "\n\nNo named agents configured.";
       log("INFO", "subagent", "Sub-agent spawn", {
         cacheKey: subCacheKey,
         provider: useProvider,
-        model: parentModel,
+        model: useModel,
         agent: agentDef?.name ?? "(default)"
       });
       let childExited = false;
@@ -73815,8 +73996,8 @@ function createWebSearchTool() {
 // ../cli/dist/tools/source-path.js
 init_esm_shims();
 import { spawn as spawn6 } from "child_process";
-import path18 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import path19 from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 var SOURCE_PATH_TIMEOUT_MS = 12e4;
 var MAX_STDERR_CHARS = 1e4;
 var OPENSRC_BIN_ENV = "EZ_CODER_OPENSRC_BIN";
@@ -73916,8 +74097,8 @@ function getBundledOpenSrcBinPath() {
   const override = process.env[OPENSRC_BIN_ENV]?.trim() ?? process.env[LEGACY_OPENSRC_BIN_ENV]?.trim();
   if (override)
     return override;
-  const currentDir = path18.dirname(fileURLToPath2(import.meta.url));
-  return path18.resolve(currentDir, "../../node_modules/opensrc/bin/opensrc.js");
+  const currentDir = path19.dirname(fileURLToPath3(import.meta.url));
+  return path19.resolve(currentDir, "../../node_modules/opensrc/bin/opensrc.js");
 }
 function getOpenSrcEnv() {
   return {
@@ -74001,7 +74182,7 @@ import { randomUUID as randomUUID2 } from "crypto";
 init_esm_shims();
 import { createHash } from "crypto";
 import { mkdir, readFile, writeFile } from "fs/promises";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { homedir } from "os";
 import { basename, join } from "path";
 var DEFAULT_TASKS_BASE = join(homedir(), ".ezcoder", "tasks", "projects");
@@ -74068,7 +74249,7 @@ async function migrateLegacyTasksIfNeeded(cwd2) {
   if (!legacyBase)
     return null;
   const targetFile = tasksFilePath(cwd2);
-  if (existsSync2(targetFile))
+  if (existsSync4(targetFile))
     return null;
   const legacyTasks = await readTasksFromBase(cwd2, legacyBase);
   if (!legacyTasks)
@@ -74208,7 +74389,7 @@ ${list}`;
 
 // ../cli/dist/tools/screenshot.js
 init_esm_shims();
-import path19 from "path";
+import path20 from "path";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
 var INSTALL_HINT = "Browser engine not installed. Add the optional dependency and download Chromium:\n  pnpm add -w playwright && npx playwright install chromium\nThen retry the screenshot.";
 var ActionInput = external_exports.object({
@@ -74246,7 +74427,7 @@ function isBrowserBinaryMissing(err) {
 }
 function defaultOutPath(cwd2) {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  return path19.join(cwd2, ".ezcoder", "screenshots", `${stamp}.png`);
+  return path20.join(cwd2, ".ezcoder", "screenshots", `${stamp}.png`);
 }
 async function runActions(page, actions) {
   for (const action of actions ?? []) {
@@ -74297,7 +74478,7 @@ function createScreenshotTool(cwd2) {
         await runActions(page, args.actions);
         const raw = await page.screenshot({ fullPage: args.full_page ?? false });
         context.signal.removeEventListener("abort", onAbort);
-        await mkdir2(path19.dirname(outPath), { recursive: true });
+        await mkdir2(path20.dirname(outPath), { recursive: true });
         await writeFile2(outPath, raw);
         const { buffer, mediaType } = await shrinkToFit(raw, "image/png");
         const previewBuffer = await downscaleForPreview(buffer);
@@ -74329,6 +74510,215 @@ function createScreenshotTool(cwd2) {
   };
 }
 
+// ../cli/dist/tools/generate-image.js
+init_esm_shims();
+import path21 from "path";
+import { mkdir as mkdir3, writeFile as writeFile3, readFile as readFile2 } from "fs/promises";
+var CODEX_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
+var IMAGE_GEN_MODEL = "gpt-5.5";
+var GenerateImageParams = external_exports.object({
+  prompt: external_exports.string().describe("Text description of the image to generate or the edit to apply"),
+  image: external_exports.string().optional().describe("Path to an existing image file to edit (use the path returned by a previous generate_image call, or a user-attached image path). When omitted, a new image is generated from scratch."),
+  size: external_exports.string().optional().describe("Output resolution. gpt-image-2 accepts any size where both edges are multiples of 16px, max edge \u22643840px, long:short ratio \u22643:1, total pixels 655,360\u20138,294,400. Popular: 1024x1024, 1536x1024, 1024x1536, 2048x2048. Default: auto."),
+  quality: external_exports.enum(["low", "medium", "high", "auto"]).optional().describe("Rendering quality. Use 'low' for fast drafts, 'high' for final assets. Default: auto."),
+  n: external_exports.number().int().min(1).max(4).optional().describe("Number of images to generate (1\u20134, default 1)"),
+  out_path: external_exports.string().optional().describe("Where to save the generated image (relative to cwd or absolute). Defaults to .gg/generated/<timestamp>.png"),
+  output_format: external_exports.enum(["png", "jpeg", "webp"]).optional().describe("Output file format (default png)"),
+  background: external_exports.enum(["opaque", "auto"]).optional().describe("Background type (default auto; gpt-image-2 does not support transparent)")
+});
+function defaultOutPath2(cwd2, format) {
+  const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const ext = format === "png" ? "png" : format === "jpeg" ? "jpg" : "webp";
+  return path21.join(cwd2, ".ezcoder", "generated", `${stamp}.${ext}`);
+}
+function mediaTypeFor(format) {
+  if (format === "jpeg")
+    return "image/jpeg";
+  if (format === "webp")
+    return "image/webp";
+  return "image/png";
+}
+function createGenerateImageTool(cwd2, auth2) {
+  return {
+    name: "generate_image",
+    description: "Generate or edit images using OpenAI's gpt-image-2 model. Works even when a different chat provider is active \u2014 only requires OpenAI to be connected. Only use this tool when the user explicitly asks to create, generate, or edit an image. Pass `image` with a file path to edit an existing image (e.g. a previously generated one or a user attachment). Use `out_path` to save to a specific location (defaults to .gg/generated/).",
+    parameters: GenerateImageParams,
+    async execute(args, context) {
+      if (context.signal.aborted)
+        return "Image generation aborted before start.";
+      let token;
+      let accountId;
+      try {
+        const creds = await auth2.resolveCredentials("openai");
+        token = creds.accessToken;
+        accountId = creds.accountId;
+      } catch {
+        return "OpenAI is not connected. The user needs to connect their OpenAI account to use image generation.";
+      }
+      const outputFormat = args.output_format ?? "png";
+      const mediaType = mediaTypeFor(outputFormat);
+      const outPath = args.out_path ? resolvePath(cwd2, args.out_path) : defaultOutPath2(cwd2, outputFormat);
+      try {
+        const imageTool = {
+          type: "image_generation",
+          output_format: outputFormat
+        };
+        if (args.size)
+          imageTool.size = args.size;
+        if (args.quality)
+          imageTool.quality = args.quality;
+        if (args.n)
+          imageTool.n = args.n;
+        if (args.background)
+          imageTool.background = args.background;
+        const inputContent = [
+          { type: "input_text", text: args.prompt }
+        ];
+        if (args.image) {
+          const imagePath = resolvePath(cwd2, args.image);
+          let fileBuffer;
+          try {
+            fileBuffer = await readFile2(imagePath);
+          } catch {
+            return `Could not read the image at ${args.image}. Check the path is correct.`;
+          }
+          const refMediaType = imagePath.toLowerCase().endsWith(".jpg") || imagePath.toLowerCase().endsWith(".jpeg") ? "image/jpeg" : imagePath.toLowerCase().endsWith(".webp") ? "image/webp" : "image/png";
+          inputContent.push({
+            type: "input_image",
+            image_url: `data:${refMediaType};base64,${fileBuffer.toString("base64")}`
+          });
+          imageTool.action = "edit";
+        } else {
+          imageTool.action = "generate";
+        }
+        const imageBuffers = await callImageGeneration(inputContent, imageTool, token, accountId, context.signal);
+        if (imageBuffers.length === 0) {
+          return "Image generation returned no results. The prompt may have been blocked by content moderation.";
+        }
+        const savedPaths = [];
+        for (let i = 0; i < imageBuffers.length; i++) {
+          const buf = imageBuffers[i];
+          const savePath = imageBuffers.length === 1 ? outPath : insertIndex(outPath, i);
+          await mkdir3(path21.dirname(savePath), { recursive: true });
+          await writeFile3(savePath, buf);
+          savedPaths.push(savePath);
+        }
+        const primary = imageBuffers[0];
+        const primaryPath = savedPaths[0];
+        const { buffer: shrunk, mediaType: detectedType } = await shrinkToFit(primary, mediaType);
+        const previewBuffer = await downscaleForPreview(shrunk);
+        const imagePreviews = [
+          {
+            base64: previewBuffer.toString("base64"),
+            mediaType: detectedType,
+            path: primaryPath
+          }
+        ];
+        for (let i = 1; i < imageBuffers.length; i++) {
+          const extraBuf = imageBuffers[i];
+          const extraPath = savedPaths[i];
+          const extraShrunk = await shrinkToFit(extraBuf, mediaType);
+          const extraPreview = await downscaleForPreview(extraShrunk.buffer);
+          imagePreviews.push({
+            base64: extraPreview.toString("base64"),
+            mediaType: extraShrunk.mediaType,
+            path: extraPath
+          });
+        }
+        const summary = savedPaths.length === 1 ? `Generated image \u2192 ${primaryPath}` : `Generated ${savedPaths.length} images \u2192 ${savedPaths.join(", ")}`;
+        const allContent = [
+          { type: "text", text: summary },
+          {
+            type: "image",
+            mediaType: detectedType,
+            data: shrunk.toString("base64")
+          }
+        ];
+        return {
+          content: allContent,
+          details: { imagePreviews }
+        };
+      } catch (err) {
+        if (context.signal.aborted)
+          return "Image generation aborted.";
+        const reason = err instanceof Error ? err.message : String(err);
+        return `Image generation failed: ${reason}`;
+      }
+    }
+  };
+}
+function insertIndex(filePath, index) {
+  const ext = path21.extname(filePath);
+  const base = filePath.slice(0, filePath.length - ext.length);
+  return `${base}_${index}${ext}`;
+}
+async function callImageGeneration(inputContent, imageTool, token, accountId, signal) {
+  const body = {
+    model: IMAGE_GEN_MODEL,
+    store: false,
+    stream: true,
+    instructions: "Generate the image the user requested.",
+    input: [{ role: "user", content: inputContent }],
+    tools: [imageTool],
+    tool_choice: "auto",
+    reasoning: { effort: "low" }
+  };
+  const response = await fetch(CODEX_ENDPOINT, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`,
+      ...accountId ? { "chatgpt-account-id": accountId } : {},
+      originator: "ezcoder"
+    },
+    body: JSON.stringify(body),
+    signal
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    let detail = text;
+    try {
+      const parsed = JSON.parse(text);
+      if (parsed.detail)
+        detail = parsed.detail;
+      else if (parsed.error?.message)
+        detail = parsed.error.message;
+    } catch {
+    }
+    throw new Error(`OpenAI Image API (${response.status}): ${detail}`);
+  }
+  if (!response.body) {
+    throw new Error("OpenAI Image API returned no response body.");
+  }
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  const imageBuffers = [];
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done)
+      break;
+    buffer += decoder.decode(value, { stream: true });
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      if (!line.startsWith("data: "))
+        continue;
+      const data = line.slice(6);
+      if (data === "[DONE]")
+        continue;
+      try {
+        const evt = JSON.parse(data);
+        if (evt.type === "response.output_item.done" && evt.item?.type === "image_generation_call" && evt.item.result) {
+          imageBuffers.push(Buffer.from(evt.item.result, "base64"));
+        }
+      } catch {
+      }
+    }
+  }
+  return imageBuffers;
+}
+
 // ../cli/dist/tools/enter-plan.js
 init_esm_shims();
 var EnterPlanParams = external_exports.object({
@@ -74353,7 +74743,7 @@ function createEnterPlanTool(onEnterPlan) {
 // ../cli/dist/tools/exit-plan.js
 init_esm_shims();
 import fs15 from "fs/promises";
-import path20 from "path";
+import path23 from "path";
 var ExitPlanParams = external_exports.object({
   plan_path: external_exports.string().describe("Path to the plan markdown file; must be under .ezcoder/plans/")
 });
@@ -74365,9 +74755,9 @@ function createExitPlanTool(cwd2, onExitPlan) {
     executionMode: "sequential",
     async execute({ plan_path }) {
       const resolved = resolvePath(cwd2, plan_path);
-      const plansDir = path20.join(cwd2, ".ezcoder", "plans");
-      const relative = path20.relative(plansDir, resolved);
-      if (relative.startsWith("..") || path20.isAbsolute(relative)) {
+      const plansDir = path23.join(cwd2, ".ezcoder", "plans");
+      const relative = path23.relative(plansDir, resolved);
+      if (relative.startsWith("..") || path23.isAbsolute(relative)) {
         return `Error: plan_path must be under .ezcoder/plans/. Got: ${plan_path}`;
       }
       try {
@@ -74393,7 +74783,7 @@ init_esm_shims();
 // ../cli/dist/core/goal-store.js
 init_esm_shims();
 import { createHash as createHash2, randomUUID as randomUUID3 } from "crypto";
-import { mkdir as mkdir3, open, readdir, readFile as readFile2, rename, rm, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir4, open, readdir, readFile as readFile3, rename, rm, writeFile as writeFile4 } from "fs/promises";
 import { homedir as homedir2 } from "os";
 import { basename as basename2, join as join2, resolve } from "path";
 var GOALS_BASE_ENV = "GG_GOALS_BASE";
@@ -74644,7 +75034,7 @@ async function writeGoalRunsFile(cwd2, runs) {
   const normalizedCwd = normalizeProjectPath(cwd2);
   const dir = projectDir(normalizedCwd);
   await withGoalStoreLock(dir, async () => {
-    await mkdir3(dir, { recursive: true });
+    await mkdir4(dir, { recursive: true });
     const goalsPath = join2(dir, "goals.json");
     const existingRuns = await readGoalRunsFile(normalizedCwd);
     const omittedActive = omittedActiveGoalRuns(existingRuns, runs);
@@ -74678,7 +75068,7 @@ async function writeGoalRunsFile(cwd2, runs) {
   });
 }
 async function withGoalStoreLock(dir, fn) {
-  await mkdir3(dir, { recursive: true });
+  await mkdir4(dir, { recursive: true });
   const lockPath = join2(dir, "goals.lock");
   const deadline = Date.now() + 1e4;
   for (; ; ) {
@@ -74702,15 +75092,15 @@ ${(/* @__PURE__ */ new Date()).toISOString()}
     }
   }
 }
-async function atomicWriteJson(path46, value) {
-  const tmpPath = `${path46}.${process.pid}.${Date.now()}.tmp`;
-  await writeFile3(tmpPath, JSON.stringify(value, null, 2) + "\n", "utf-8");
-  await rename(tmpPath, path46);
+async function atomicWriteJson(path49, value) {
+  const tmpPath = `${path49}.${process.pid}.${Date.now()}.tmp`;
+  await writeFile4(tmpPath, JSON.stringify(value, null, 2) + "\n", "utf-8");
+  await rename(tmpPath, path49);
 }
 async function readGoalRunsFile(cwd2) {
   const normalizedCwd = normalizeProjectPath(cwd2);
   try {
-    const data = await readFile2(join2(projectDir(normalizedCwd), "goals.json"), "utf-8");
+    const data = await readFile3(join2(projectDir(normalizedCwd), "goals.json"), "utf-8");
     const parsed = JSON.parse(data);
     if (!Array.isArray(parsed))
       return [];
@@ -74736,7 +75126,7 @@ async function discoverGoalRunsById(id2) {
         const dir = join2(goalsBaseDir(), entry.name);
         const meta3 = await readProjectMeta(dir);
         const fallbackProjectPath = meta3?.path ?? dir;
-        const data = await readFile2(join2(dir, "goals.json"), "utf-8");
+        const data = await readFile3(join2(dir, "goals.json"), "utf-8");
         const parsed = JSON.parse(data);
         if (!Array.isArray(parsed))
           continue;
@@ -74756,7 +75146,7 @@ async function discoverGoalRunsById(id2) {
 }
 async function readProjectMeta(dir) {
   try {
-    const parsed = JSON.parse(await readFile2(join2(dir, "meta.json"), "utf-8"));
+    const parsed = JSON.parse(await readFile3(join2(dir, "meta.json"), "utf-8"));
     return isObject2(parsed) && typeof parsed.path === "string" ? { path: parsed.path } : null;
   } catch {
     return null;
@@ -74966,8 +75356,8 @@ function formatGoalBlockingPrerequisites(run) {
 }
 async function writeGoalProgressJournalFromRun(cwd2, run) {
   const dir = join2(projectDir(cwd2), "journals");
-  await mkdir3(dir, { recursive: true });
-  const path46 = join2(dir, `${run.id}.md`);
+  await mkdir4(dir, { recursive: true });
+  const path49 = join2(dir, `${run.id}.md`);
   const lines = [
     `# ${run.title}`,
     "",
@@ -74996,8 +75386,8 @@ async function writeGoalProgressJournalFromRun(cwd2, run) {
     ...run.evidence.slice(-10).map((item) => `- ${item.createdAt} [${item.kind}] ${item.label}${item.path ? ` (${item.path})` : ""}${item.content ? ` \u2014 ${item.content}` : ""}`),
     ""
   ];
-  await writeFile3(path46, lines.join("\n"), "utf-8");
-  return path46;
+  await writeFile4(path49, lines.join("\n"), "utf-8");
+  return path49;
 }
 
 // ../cli/dist/core/goal-controller.js
@@ -76135,7 +76525,7 @@ function createGoalsTool(cwd2, goalModeRef) {
 }
 
 // ../cli/dist/tools/index.js
-function createTools(cwd2, opts) {
+async function createTools(cwd2, opts) {
   const readFiles = /* @__PURE__ */ new Map();
   const processManager = new ProcessManager();
   const ops = opts?.operations ?? localOperations;
@@ -76166,7 +76556,7 @@ function createTools(cwd2, opts) {
     tools.push(createWebSearchTool());
   }
   if (opts?.agents && opts.agents.length > 0 && opts.provider && opts.model) {
-    tools.push(createSubAgentTool(cwd2, opts.agents, opts.provider, opts.model, opts.getCacheKey, planModeRef, goalModeRef));
+    tools.push(createSubAgentTool(cwd2, opts.agents, () => opts.getProvider?.() ?? opts.provider, () => opts.getModel?.() ?? opts.model, opts.getCacheKey, planModeRef, goalModeRef));
   }
   if (opts?.skills && opts.skills.length > 0) {
     tools.push(createSkillTool(opts.skills));
@@ -76177,6 +76567,14 @@ function createTools(cwd2, opts) {
   if (opts?.onExitPlan) {
     tools.push(createExitPlanTool(cwd2, opts.onExitPlan));
   }
+  if (opts?.authStorage) {
+    try {
+      if (await opts.authStorage.hasProviderAuth("openai")) {
+        tools.push(createGenerateImageTool(cwd2, opts.authStorage));
+      }
+    } catch {
+    }
+  }
   const rebuildReadTool = (model) => createReadTool(cwd2, readFiles, ops, opts?.onFileRead, getVideoByteLimit(model));
   return { tools, processManager, rebuildReadTool, lspManager };
 }
@@ -76184,18 +76582,18 @@ function createTools(cwd2, opts) {
 // ../cli/dist/system-prompt.js
 init_esm_shims();
 import fs20 from "fs/promises";
-import path26 from "path";
+import path28 from "path";
 
 // ../cli/dist/core/skills.js
 init_esm_shims();
 import fs16 from "fs/promises";
-import path21 from "path";
+import path24 from "path";
 async function discoverSkills(options) {
   const skills = [];
   const globalSkills = await loadSkillsFromDir(options.globalSkillsDir, "global");
   skills.push(...globalSkills);
   if (options.projectDir) {
-    const projectSkillsDir = path21.join(options.projectDir, ".ezcoder", "skills");
+    const projectSkillsDir = path24.join(options.projectDir, ".ezcoder", "skills");
     const projectSkills = await loadSkillsFromDir(projectSkillsDir, "project");
     skills.push(...projectSkills);
   }
@@ -76210,20 +76608,20 @@ async function loadSkillsFromDir(dir, source2) {
     return skills;
   }
   for (const entry of dirents) {
-    const entryPath = path21.join(dir, entry.name);
+    const entryPath = path24.join(dir, entry.name);
     if (entry.isFile() && entry.name.endsWith(".md")) {
       try {
         const content = await fs16.readFile(entryPath, "utf-8");
         const skill = parseSkillFile(content, source2);
         if (!skill.name)
-          skill.name = path21.basename(entry.name, ".md");
+          skill.name = path24.basename(entry.name, ".md");
         skills.push(skill);
       } catch {
       }
       continue;
     }
     if (entry.isDirectory()) {
-      const skillFile = path21.join(entryPath, "SKILL.md");
+      const skillFile = path24.join(entryPath, "SKILL.md");
       try {
         const content = await fs16.readFile(skillFile, "utf-8");
         const skill = parseSkillFile(content, source2);
@@ -76284,6 +76682,7 @@ var TOOL_PROMPT_HINTS = {
   exit_plan: "Submit a .ezcoder/plans/ markdown plan for user approval and leave plan mode.",
   subagent: "Delegate focused, isolated subtasks (research, parallel exploration).",
   skill: "Invoke a named skill for specialized instructions.",
+  generate_image: "Generate or edit images using OpenAI's gpt-image-2 model. Only use when the user explicitly asks to create or edit an image \u2014 never generate images proactively. Requires OpenAI to be connected. Pass `image` with a file path to edit an existing image. Save with `out_path`.",
   "mcp__kencode-search__referenceSources": "Get curated, categorized reference repos for examples, inspiration, architecture, UI, agents, SaaS, workflows, and domain patterns. Repo-only starting points; fetch docs/source, then verify code with searchCode.",
   "mcp__kencode-search__discoverRepos": "Search GitHub repos live by keyword/language/topic/stars/recency. Use for current/top repos or long-tail discovery; returns metadata, not snippets. Follow with docs/source and searchCode.",
   "mcp__kencode-search__searchCode": "Verify public GitHub code by literal text or RE2 regex; NOT semantic. Put code/import/API tokens in `query`; `path` is a literal file-path substring, not a concept. Start broad/peek, then narrow by repo/path. RE2 multi-line needs `(?s)`."
@@ -76318,6 +76717,7 @@ var DEFAULT_TOOL_NAMES = [
   "exit_plan",
   "subagent",
   "skill",
+  "generate_image",
   "mcp__kencode-search__referenceSources",
   "mcp__kencode-search__discoverRepos",
   "mcp__kencode-search__searchCode"
@@ -76326,12 +76726,12 @@ var DEFAULT_TOOL_NAMES = [
 // ../cli/dist/core/style-packs/index.js
 init_esm_shims();
 import fs18 from "fs";
-import path24 from "path";
+import path26 from "path";
 
 // ../cli/dist/core/language-detector.js
 init_esm_shims();
 import fs17 from "fs";
-import path23 from "path";
+import path25 from "path";
 var MARKERS = {
   typescript: { manifests: ["tsconfig.json"], extensions: [".ts", ".tsx", ".mts", ".cts"] },
   // JS is only flagged when there's a package.json AND no tsconfig — pure JS projects.
@@ -76619,7 +77019,7 @@ var PACKS = {
 
 // ../cli/dist/core/style-packs/index.js
 function loadPack(id2, cwd2) {
-  const overridePath = path24.join(cwd2, ".ezcoder", "styles", `${id2}.md`);
+  const overridePath = path26.join(cwd2, ".ezcoder", "styles", `${id2}.md`);
   try {
     const stat = fs18.statSync(overridePath);
     if (stat.isFile()) {
@@ -76663,7 +77063,7 @@ Universal rules for agent-written code:
 // ../cli/dist/core/verify-commands.js
 init_esm_shims();
 import fs19 from "fs";
-import path25 from "path";
+import path27 from "path";
 function detectVerifyCommands(cwd2, active) {
   const cmds = [];
   if (active.has("typescript") || active.has("javascript")) {
@@ -76690,12 +77090,12 @@ function detectVerifyCommands(cwd2, active) {
       const testScript = pick2("test", "test:unit");
       if (testScript)
         cmds.push({ label: "test", command: `${runner} ${testScript}`, language: lang });
-    } else if (active.has("typescript") && fileExists2(path25.join(cwd2, "tsconfig.json"))) {
+    } else if (active.has("typescript") && fileExists2(path27.join(cwd2, "tsconfig.json"))) {
       cmds.push({ label: "typecheck", command: "tsc --noEmit", language: "typescript" });
     }
   }
   if (active.has("python")) {
-    const pyproject = readFileSafe(path25.join(cwd2, "pyproject.toml"));
+    const pyproject = readFileSafe(path27.join(cwd2, "pyproject.toml"));
     if (pyproject) {
       if (/\[tool\.ruff/.test(pyproject)) {
         cmds.push({ label: "lint", command: "ruff check .", language: "python" });
@@ -76727,10 +77127,10 @@ function detectVerifyCommands(cwd2, active) {
   }
   if (active.has("java") || active.has("kotlin")) {
     const lang = active.has("kotlin") ? "kotlin" : "java";
-    if (fileExists2(path25.join(cwd2, "gradlew"))) {
+    if (fileExists2(path27.join(cwd2, "gradlew"))) {
       cmds.push({ label: "build", command: "./gradlew build", language: lang });
       cmds.push({ label: "test", command: "./gradlew test", language: lang });
-    } else if (fileExists2(path25.join(cwd2, "pom.xml"))) {
+    } else if (fileExists2(path27.join(cwd2, "pom.xml"))) {
       cmds.push({ label: "verify", command: "mvn verify", language: lang });
     }
   }
@@ -76744,7 +77144,7 @@ function detectVerifyCommands(cwd2, active) {
     cmds.push({ label: "test", command: "dotnet test", language: "csharp" });
   }
   if (active.has("ruby")) {
-    if (fileExists2(path25.join(cwd2, "Gemfile"))) {
+    if (fileExists2(path27.join(cwd2, "Gemfile"))) {
       cmds.push({ label: "lint", command: "bundle exec rubocop", language: "ruby" });
       cmds.push({ label: "test", command: "bundle exec rspec", language: "ruby" });
     }
@@ -76754,7 +77154,7 @@ function detectVerifyCommands(cwd2, active) {
     cmds.push({ label: "test", command: "mix test", language: "elixir" });
   }
   if (active.has("php")) {
-    if (fileExists2(path25.join(cwd2, "composer.json"))) {
+    if (fileExists2(path27.join(cwd2, "composer.json"))) {
       cmds.push({ label: "test", command: "composer test", language: "php" });
     }
   }
@@ -76786,7 +77186,7 @@ function readFileSafe(p) {
   }
 }
 function readPackageJsonScripts(cwd2) {
-  const raw = readFileSafe(path25.join(cwd2, "package.json"));
+  const raw = readFileSafe(path27.join(cwd2, "package.json"));
   if (!raw)
     return null;
   try {
@@ -76797,11 +77197,11 @@ function readPackageJsonScripts(cwd2) {
   }
 }
 function detectNodeRunner(cwd2) {
-  if (fileExists2(path25.join(cwd2, "pnpm-lock.yaml")))
+  if (fileExists2(path27.join(cwd2, "pnpm-lock.yaml")))
     return "pnpm";
-  if (fileExists2(path25.join(cwd2, "yarn.lock")))
+  if (fileExists2(path27.join(cwd2, "yarn.lock")))
     return "yarn";
-  if (fileExists2(path25.join(cwd2, "bun.lockb")))
+  if (fileExists2(path27.join(cwd2, "bun.lockb")))
     return "bun";
   return "npm run";
 }
@@ -77009,17 +77409,17 @@ async function collectProjectContext(cwd2) {
   while (!visited.has(dir)) {
     visited.add(dir);
     for (const name of CONTEXT_FILES) {
-      const filePath = path26.join(dir, name);
+      const filePath = path28.join(dir, name);
       try {
         const content = await fs20.readFile(filePath, "utf-8");
-        const relPath = path26.relative(cwd2, filePath) || name;
+        const relPath = path28.relative(cwd2, filePath) || name;
         contextParts.push(`### ${relPath}
 
 ${content.trim()}`);
       } catch {
       }
     }
-    const parent = path26.dirname(dir);
+    const parent = path28.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -77093,10 +77493,10 @@ async function buildSystemPrompt(cwd2, skills, planMode, approvedPlanPath, toolN
 // ../cli/dist/session.js
 init_esm_shims();
 import fs21 from "fs/promises";
-import path27 from "path";
+import path29 from "path";
 import os7 from "os";
 import crypto4 from "crypto";
-var SESSION_DIR = path27.join(os7.homedir(), ".ezcoder", "sessions");
+var SESSION_DIR = path29.join(os7.homedir(), ".ezcoder", "sessions");
 
 // ../cli/dist/core/index.js
 init_esm_shims();
@@ -77164,7 +77564,8 @@ var EventBus = class {
           toolCallId: event.toolCallId,
           result: event.result,
           isError: event.isError,
-          durationMs: event.durationMs
+          durationMs: event.durationMs,
+          details: event.details
         });
         break;
       case "turn_end":
@@ -77213,7 +77614,7 @@ import fs23 from "fs/promises";
 
 // ../cli/dist/config.js
 init_esm_shims();
-import path28 from "path";
+import path30 from "path";
 import fs22 from "fs/promises";
 import fsSync from "fs";
 async function ensureAppDirs() {
@@ -77279,7 +77680,7 @@ Rules:
 `
   };
   for (const [filename, content] of Object.entries(defaults2)) {
-    const filePath = path28.join(agentsDir, filename);
+    const filePath = path30.join(agentsDir, filename);
     try {
       await fs22.access(filePath);
     } catch {
@@ -77292,7 +77693,7 @@ async function seedDefaultSkills(skillsDir) {
     "find-skills.md": FIND_SKILLS_MD
   };
   for (const [filename, content] of Object.entries(defaults2)) {
-    const filePath = path28.join(skillsDir, filename);
+    const filePath = path30.join(skillsDir, filename);
     try {
       await fs22.access(filePath);
     } catch {
@@ -77420,7 +77821,11 @@ var SettingsSchema = external_exports.object({
   lspDiagnostics: external_exports.boolean().default(true),
   enabledTools: external_exports.array(external_exports.string()).optional(),
   /** Delete session transcripts older than this many days at startup. 0 disables pruning. */
-  sessionRetentionDays: external_exports.number().int().min(0).default(30)
+  sessionRetentionDays: external_exports.number().int().min(0).default(30),
+  /** Speed optimization profile.
+   *  - "baseline": 5-min cache TTL, no pre-warm
+   *  - "optimized": 1-h cache TTL, cache pre-warming on first prompt (default) */
+  speedProfile: external_exports.enum(["baseline", "optimized"]).default("optimized")
 });
 var DEFAULT_SETTINGS = {
   autoCompact: true,
@@ -77433,7 +77838,8 @@ var DEFAULT_SETTINGS = {
   idealReviewEnabled: true,
   autoApprovePlans: true,
   lspDiagnostics: true,
-  sessionRetentionDays: 30
+  sessionRetentionDays: 30,
+  speedProfile: "optimized"
 };
 var SettingsManager = class {
   settings = { ...DEFAULT_SETTINGS };
@@ -77474,7 +77880,7 @@ init_esm_shims();
 import fs24 from "fs/promises";
 import { createReadStream as createReadStream2 } from "fs";
 import { createInterface as createInterface2 } from "readline";
-import path29 from "path";
+import path31 from "path";
 import crypto6 from "crypto";
 var DISPLAY_ITEM_CUSTOM_KIND = "display_item";
 function isCompletedItemLike(value) {
@@ -77509,7 +77915,7 @@ var SessionManager = class _SessionManager {
     this.onPersistError?.(err);
   }
   dirForCwd(cwd2) {
-    return path29.join(this.sessionsDir, encodeCwd(cwd2));
+    return path31.join(this.sessionsDir, encodeCwd(cwd2));
   }
   async create(cwd2, provider, model) {
     const id2 = crypto6.randomUUID();
@@ -77517,7 +77923,7 @@ var SessionManager = class _SessionManager {
     const dir = this.dirForCwd(cwd2);
     await fs24.mkdir(dir, { recursive: true });
     const fileName = `${timestamp.replace(/[:.]/g, "-")}_${id2.slice(0, 8)}.jsonl`;
-    const filePath = path29.join(dir, fileName);
+    const filePath = path31.join(dir, fileName);
     const header = {
       type: "session",
       version: 2,
@@ -77589,7 +77995,7 @@ var SessionManager = class _SessionManager {
     for (const file2 of files) {
       if (!file2.endsWith(".jsonl"))
         continue;
-      const filePath = path29.join(dir, file2);
+      const filePath = path31.join(dir, file2);
       try {
         const rl = createInterface2({
           input: createReadStream2(filePath, { encoding: "utf-8" }),
@@ -77652,7 +78058,7 @@ var SessionManager = class _SessionManager {
     if (options.maxAgeDays <= 0)
       return result;
     const cutoffMs = Date.now() - options.maxAgeDays * 864e5;
-    const keep = new Set((options.keepPaths ?? []).map((p) => path29.resolve(p)));
+    const keep = new Set((options.keepPaths ?? []).map((p) => path31.resolve(p)));
     let cwdDirs;
     try {
       cwdDirs = await fs24.readdir(this.sessionsDir);
@@ -77660,7 +78066,7 @@ var SessionManager = class _SessionManager {
       return result;
     }
     for (const dirName of cwdDirs) {
-      const dir = path29.join(this.sessionsDir, dirName);
+      const dir = path31.join(this.sessionsDir, dirName);
       let files;
       try {
         const stat = await fs24.stat(dir);
@@ -77674,8 +78080,8 @@ var SessionManager = class _SessionManager {
       for (const file2 of files) {
         if (!file2.endsWith(".jsonl"))
           continue;
-        const filePath = path29.join(dir, file2);
-        if (keep.has(path29.resolve(filePath)))
+        const filePath = path31.join(dir, file2);
+        if (keep.has(path31.resolve(filePath)))
           continue;
         try {
           const stat = await fs24.stat(filePath);
@@ -77928,25 +78334,25 @@ function createBuiltinCommands() {
       async execute(args) {
         const { execSync } = await import("child_process");
         const { createRequire: createRequire2 } = await import("module");
-        const path46 = await import("path");
-        const fs38 = await import("fs");
+        const path49 = await import("path");
+        const fs40 = await import("fs");
         const _require = createRequire2(import.meta.url);
-        const pkgPath = path46.default.resolve(path46.default.dirname(_require.resolve("../package.json")));
+        const pkgPath = path49.default.resolve(path49.default.dirname(_require.resolve("../package.json")));
         let repoRoot = process.cwd();
-        let scriptPath = path46.default.join(repoRoot, "scripts", "sync-upstream.sh");
-        if (!fs38.existsSync(scriptPath)) {
+        let scriptPath = path49.default.join(repoRoot, "scripts", "sync-upstream.sh");
+        if (!fs40.existsSync(scriptPath)) {
           let dir = pkgPath;
           for (let i = 0; i < 5; i++) {
-            dir = path46.default.dirname(dir);
-            const candidate = path46.default.join(dir, "scripts", "sync-upstream.sh");
-            if (fs38.existsSync(candidate)) {
+            dir = path49.default.dirname(dir);
+            const candidate = path49.default.join(dir, "scripts", "sync-upstream.sh");
+            if (fs40.existsSync(candidate)) {
               scriptPath = candidate;
               repoRoot = dir;
               break;
             }
           }
         }
-        if (!fs38.existsSync(scriptPath)) {
+        if (!fs40.existsSync(scriptPath)) {
           return "sync-upstream.sh not found. Make sure you're in the ezcoder repo root,\nor that scripts/sync-upstream.sh exists.\n\nYou can create it by checking the repo: https://github.com/Gahroot/ezcoder";
         }
         const dryRun = args.trim() === "--dry-run";
@@ -78044,6 +78450,16 @@ function createBuiltinCommands() {
         return "New session created.";
       }
     },
+    {
+      name: "clear",
+      aliases: [],
+      description: "Clear the conversation (start a new session)",
+      usage: "/clear",
+      async execute(_args, ctx) {
+        await ctx.newSession();
+        return "Session cleared.";
+      }
+    },
     {
       name: "branch",
       aliases: ["b"],
@@ -78289,6 +78705,97 @@ If the user chooses D, stop after the report.
 - **No finding without a concrete, code-grounded first-run scenario.** No "could be polished" nudges.
 - **Report-first.** No edits, installs, or commits until the user picks an option.
 - **Every generated task must end with the exact line:** use kencode to reference working code. /commit when done.`
+  },
+  {
+    name: "test-drive",
+    aliases: ["qa", "td"],
+    description: "Actually run the app, click around, screenshot, file bugs as tasks",
+    prompt: `# /test-drive: Empirically Test the App and File Bugs as Tasks
+
+You are a hands-on QA agent. Your job is to ACTUALLY RUN this app and use it like a real user \u2014 launch it, click around, type into it, navigate every reachable surface, and LOOK at the result with your own eyes (screenshots / captured output / logs). This is empirical, not a code review: you must drive the running app, not just read source. Every bug you find is recorded so it can be fixed later by another agent working through the task list \u2014 except bugs that block YOU from testing further, which you fix immediately so you can keep going.
+
+This command is **project-agnostic**. Profile what THIS app is and how it runs before testing. If the user passed arguments to /test-drive, treat them as the area/flow to focus the test pass on, but still sanity-check the rest of the app.
+
+## Phase 0: Figure out how to run it
+
+Inspect the project (manifests, scripts, README, entry points) and determine how a user actually runs this app, then start it:
+
+- **Web app / dev server** \u2014 find the dev/start script (e.g. \`pnpm dev\`, \`npm start\`, \`vite\`). Launch it with bash as a **background process** (\`run_in_background: true\`), wait for it to be ready, and read its output with task_output to learn the local URL (e.g. http://localhost:3000).
+- **CLI / TUI** \u2014 run the binary/entry command. For interactive programs, launch as a background process and drive it with task_send (type input / answer prompts) + task_output (read what it printed). Use task_stop to end it.
+- **Desktop app (Tauri/Electron/etc.)** \u2014 start it the way the project documents. If it exposes a local webview URL or dev server, point the screenshot tool at that; otherwise launch it and rely on captured logs/output for evidence.
+- **Library / no runnable surface** \u2014 there's nothing to "click around." Run its examples/tests/demo instead, or report that there is no interactive surface to test and stop.
+
+If you cannot get the app to start at all, that is itself the first blocking bug \u2014 fix it (Phase 2, blocking path) so you have something to test, then continue.
+
+## Phase 1: Drive it and LOOK \u2014 use your eyes
+
+Exercise the app like a real user, surface by surface. Use the real perception tools available to you:
+
+- **screenshot tool** \u2014 your eyes for anything with a UI. Open each URL/screen, run \`actions\` (click / type / wait) to walk real flows, and CAPTURE the result so you actually see what rendered. Vary viewport for responsive surfaces and use \`full_page\` for long pages. Don't assume a screen works \u2014 look at it.
+- **task_output / task_send** \u2014 your eyes and hands for CLIs, TUIs, and dev-server logs: read what the process emitted, type input to drive it, watch for errors/stack traces/warnings in the output.
+- **bash** \u2014 hit health/API endpoints, trigger flows, and inspect logs the app writes.
+
+Walk the real journeys, not just the happy path that's easy to reach. For each surface, exercise:
+
+1. **Primary flows** \u2014 the main things a user comes here to do, start to finish.
+2. **Inputs & forms** \u2014 submit valid input, empty input, and obviously wrong input; check validation and error messages.
+3. **Navigation** \u2014 every reachable link/button/route/tab/command; look for dead ends, broken links, blank screens, 404s, console/stderr errors.
+4. **States** \u2014 empty, loading, error, offline/slow, and "no data yet" states. These are where apps break most.
+5. **Visual integrity** \u2014 overlapping/cut-off/misaligned elements, unstyled flashes, illegible text, broken images \u2014 things only visible by actually looking at a screenshot.
+
+As you go, keep a running list of every bug with: what you did, what you expected, what actually happened, the evidence (screenshot path / captured output / log line), and the file/area it most likely lives in.
+
+## Phase 2: Triage each bug \u2014 blocking vs deferrable
+
+For every bug, decide one of two paths:
+
+**A) BLOCKING \u2014 it stops you from testing further.** The app won't start, a screen crashes, a flow can't be completed, or a broken gate hides everything behind it. You cannot meaningfully continue the test pass until it's fixed. **Fix these immediately**, right now, so you can keep testing:
+
+1. Reproduce it and find the root cause in the code.
+2. Use the \`mcp__kencode-search__searchCode\` tool to reference how real projects implement the same pattern correctly, and base your fix on that working code. (If the kencode-search MCP tool isn't connected, note that and fix using project conventions + authoritative docs.)
+3. Implement the fix, then re-run the app and CONFIRM with your eyes (re-screenshot / re-read output) that the bug is actually gone.
+4. Commit the fix by running the \`/commit\` command, so each fix lands on working, committed code before you continue.
+5. Resume the test pass from where you were blocked.
+
+**B) DEFERRABLE \u2014 it's a real bug but you can keep testing around it.** Cosmetic issues, non-blocking errors, secondary-flow breakage, edge-case mishandling. **Do NOT fix these now.** Record them and move on \u2014 they'll be handed off as tasks for another agent to fix in a later session.
+
+When unsure, prefer DEFER: only fix inline what genuinely blocks the test pass. The point is to keep driving the app and cataloguing bugs, not to stop and fix everything.
+
+## Phase 3: File deferrable bugs as tasks
+
+For every deferrable bug (or a tightly-coupled group), add one task with the \`tasks\` tool (action=add). Running /test-drive is the user's explicit request to populate the task list, so this is expected \u2014 but only file REAL, reproduced bugs, not speculation. **Before filing, trace each bug to its root cause and confirm it's an actual code defect \u2014 not bad seed/test/mock data, a misconfig, or expected behavior.** This app is full of synthetic data, so "these numbers look insane" is very often just the data, not a bug. Reading the code/data/DB to establish cause is REQUIRED here, not an "assumption" \u2014 the no-assumptions rule means don't claim a screen works without looking, it does not mean skip root-cause analysis. For any numeric/calculation bug, reproduce the arithmetic from the underlying inputs before filing. Order tasks by user impact and severity. Each task needs a short title and a standalone prompt (the next agent has NO context from this session) that includes:
+
+- **The bug**: what you did, what you expected, what actually happened.
+- **Reproduction steps**: the exact flow to trigger it (URL/screen/command + clicks/inputs).
+- **Evidence**: the screenshot path / captured output / log line you saw.
+- **Root cause**: the traced reason it's a code defect (not data/config/expected behavior) \u2014 for numeric bugs, the inputs and the arithmetic you reproduced.
+- **Where to look**: the file(s)/area the bug most likely lives in.
+
+End EVERY task's standalone prompt with this exact line, verbatim, on its own line:
+
+use kencode to reference working code. /commit when done.
+
+That line guarantees the next agent bases its fix on real working code (via the kencode MCP) and commits it.
+
+## Phase 4: Report
+
+When the test pass is done (or you've covered the focus area), summarize:
+
+- What you ran and which surfaces/flows you actually drove (with screenshot/output evidence).
+- **Blocking bugs you fixed inline** \u2014 each with its root cause and the commit.
+- **Deferrable bugs filed as tasks** \u2014 a short list of titles.
+
+Then tell the user exactly: "Tasks added. Press Ctrl+T to open the task list and run them." Do not start executing those deferred tasks unless the user explicitly says so.
+
+## Rules
+
+- **Actually run the app and look.** Don't claim a screen works without observing it \u2014 a screenshot, captured output, or log line. No "this should work." But observation alone is not a filed bug: confirming a defect requires tracing the cause, which means reading the code/data/inputs.
+- **Trace cause before filing.** A symptom is not a bug until you've traced it to a code defect and ruled out bad seed/test/mock data, misconfig, and expected behavior. For numeric/calculation bugs, reproduce the arithmetic from the underlying inputs.
+- **An AI/agent (or the model itself) noticing something looks wrong is NOT evidence** \u2014 a model flags "big number vs small position" the same way whether the cause is data or logic. Only reproduced behavior plus a traced cause counts.
+- **Only fix what blocks you.** Blocking bugs get fixed inline (kencode-referenced + \`/commit\`); everything else becomes a task. When in doubt, defer.
+- **Every fix is on working, committed code** \u2014 reference real code via kencode, verify the fix by re-running, then \`/commit\`.
+- **Every filed task ends with the exact line:** use kencode to reference working code. /commit when done.
+- **File only reproduced bugs with a traced root cause.** No speculative or "could be improved" tasks, and no symptoms with an unverified cause \u2014 this is a bug hunt, not a polish wishlist.`
   },
   {
     name: "elon",
@@ -78400,6 +78907,118 @@ If the user chooses D, stop after the report.
 - **App-wide first, specific areas second** \u2014 in both the hunt and the ledger.
 - **No deletion without code-grounded evidence** that the thing is dead weight (no callers / write-only / unreachable / redundant). No "feels bloated" nudges.
 - **Report-first. No deletions, edits, installs, or commits until the user picks an option.**
+- **Every generated task must end with the exact line:** use kencode to reference working code. /commit when done.`
+  },
+  {
+    name: "elon-2",
+    aliases: ["step-2", "add-back"],
+    description: "Finish the Elon algorithm: add back the ~10%, then simplify/accelerate/automate",
+    prompt: `# /elon-2: The Add-Back & Optimize Pass
+
+This is the SECOND HALF of /elon, and it only makes sense AFTER deletions have landed. /elon runs steps 1\u20132 of Elon Musk's algorithm \u2014 make the requirement less dumb, then delete the part/process \u2014 and it deletes aggressively, on purpose, until things break. /elon-2 runs the rest of the same algorithm, IN ORDER:
+
+1. ~~Make the requirement less dumb~~ \u2014 done by /elon.
+2. ~~Delete the part or process~~ \u2014 done by /elon.
+3. **Simplify** \u2014 only what survived deletion.
+4. **Accelerate** \u2014 only what survived simplification.
+5. **Automate** \u2014 last, never first.
+
+Before step 3, this command does the move /elon deliberately leaves undone \u2014 the famous Musk rule: **"if you're not adding ~10% back, you didn't delete enough."** Aggressive deletion overshoots; some small piece you cut was actually load-bearing and has to come back. **Phase 1 recovers that ~10%.** Only then do steps 3\u20135 run, on what survived.
+
+This command is **project-agnostic** and **report-first**: the only deliverable is a single ranked ledger, after which you hand the work off as tasks. **Do not edit, install, or implement anything until the user confirms by choosing an option at the end.**
+
+If the user passed arguments to /elon-2, treat them as a focus area: narrow the pass to that feature/surface, but still run the full algorithm within it.
+
+**Hard scope rules:**
+- **Add-backs are strictly the minimal load-bearing piece that broke.** Restoring functionality the deletions removed is NOT re-adding scope. If an "add-back" is really a net-new capability or a scope re-expansion, that is /expand \u2014 drop it here.
+- **Steps 3\u20135 operate ONLY on survivors.** Never simplify, accelerate, or automate something that should have been deleted \u2014 /elon already made those calls. Do not re-litigate deletions (revert-the-whole-deletion is the one exception, see Phase 1).
+- **Order is law.** Add-back \u2192 simplify \u2192 accelerate \u2192 automate. Never accelerate or automate something before it has been simplified.
+
+## Phase 0: Establish what changed + a baseline oracle (main agent)
+
+You cannot add back what broke without knowing what was cut. Build two maps from real evidence, not memory:
+
+- **Deletion map** \u2014 what /elon actually removed. Derive it from \`git log\`/\`git diff\` over the relevant range, completed deletion tasks, and removed files/symbols/flags/dependencies. For each deletion, note its predicted add-back (zero / fold-in / seam) from the /elon ledger if available.
+- **Survivor map** \u2014 the user-facing surfaces, flows, and internal pieces that remain after the deletions.
+
+Then run the project's own **build / typecheck / test / lint** (whatever it has) to capture a baseline oracle: what is broken right now, after the deletions. Note dangling imports, broken routes, failing tests, dead references, and any flow that no longer completes.
+
+## Phase 1: Add-back recovery (the ~10%)
+
+Empirically find what the deletions broke or over-cut. Spawn subagents in parallel using the subagent tool (call the subagent tool multiple times in a single response), one per high-risk deletion cluster from the deletion map (cap at 6).
+
+Each subagent must:
+
+1. Walk the deletion and find **breakage evidence** grounded in code: failing build/typecheck/test output, dangling references to removed symbols, routes/commands that no longer resolve, a real user flow that now dead-ends, behavior that callers still expect.
+2. For every breakage, identify the **minimal add-back** \u2014 the smallest piece of the deleted thing that must return so dependents work again (mirror the zero / fold-in / seam shapes from /elon). Cite the file:line that proves the breakage and what the restore touches.
+3. **Right-size the add-back.** If the minimal restore is large, vague, or "we'd basically rebuild the deleted thing," that is the signal the deletion itself was wrong \u2014 flag it as **REVERT** (undo the whole deletion) rather than a partial add-back. A small, well-scoped add-back is a true ~10%; a large one means the cut went too far.
+
+A deletion that broke nothing needs no add-back \u2014 that is a clean cut, leave it. The goal is to restore the minimum, not to undo the diet.
+
+## Phase 2: Steps 3\u20135 on survivors (in order)
+
+For the survivor map only, spawn subagents in parallel (cap at 6 total across the three steps) to find optimization candidates, strictly in algorithm order:
+
+- **Step 3 \u2014 Simplify.** Indirection, layers, branches, or config that only existed to serve now-deleted things and can be collapsed or inlined; survivors that can be merged; flows that can be flattened. This is where most leverage lives post-deletion.
+- **Step 4 \u2014 Accelerate.** Only what survived simplification: hot paths, redundant work, slow startup, repeated computation that can be sped up. A candidate may not be accelerated until it has been simplified first.
+- **Step 5 \u2014 Automate.** Last: manual steps in surviving flows that the system should do for the user. Never propose automating something that should instead be simplified away.
+
+Each subagent must cite file:line anchors, name which step it belongs to, and estimate effort (small / medium / large) and leverage.
+
+## Phase 3: Validate against the repo (main agent)
+
+For every candidate:
+
+1. **Add-backs:** confirm the breakage is real against the baseline oracle and that the restore is genuinely minimal. If the restore turns out large, reclassify as REVERT or drop it.
+2. **Simplify/accelerate/automate:** confirm the candidate is a survivor (not something that should have been deleted), and that the step order holds (nothing accelerated/automated before being simplified).
+3. Confirm scope: add-backs restore removed behavior only \u2014 anything that is net-new capability is /expand, make-it-work polish is /raise-floor, security is /bullet-proof. Drop out-of-scope items.
+4. Merge duplicates. Rank by **completion leverage = (breakage severity or surface improved) \xF7 effort**, with all add-backs ahead of all step 3\u20135 work.
+
+## Phase 4: The completion ledger (report)
+
+Output the report. **Add-back (recover) rows first, then simplify, then accelerate, then automate** \u2014 algorithm order. Start with one line: project name + a one-sentence summary of how far the deletions overshot and where the biggest post-deletion wins are. Then a single table:
+
+| ID | Step | Candidate | Evidence (file:line) | What it restores / improves | Effort | Leverage |
+|---|---|---|---|---|---|---|
+| E2-001 | add-back | re-add the one default the deleted settings screen applied | flow X dead-ends after delete (path:line) | onboarding applies the default inline; nothing else returns | small | high |
+| E2-002 | simplify | inline the adapter layer that only wrapped the deleted backend | single caller left (path:line) | one fewer indirection; survivors merge | small | high |
+
+Use IDs like E2-001. Add-back rows lead, then step 3, then 4, then 5. Mark any deletion that overshot as **REVERT** with the reason. The ledger is structured so a later empirical mode can run each row against the project's build/check/test as the "is it fixed / still green?" oracle. Do not run that loop now \u2014 this is report-only.
+
+After the table, ask exactly:
+
+What should I do?
+A) Add tasks for everything (add-backs first, then simplify/accelerate/automate)
+B) Add tasks for the add-backs only (just recover what broke)
+C) Add tasks for specific rows (give IDs, e.g. "E2-001, E2-004")
+D) None \u2014 report only
+
+Do not start implementing until the user chooses.
+
+## Phase 5: Hand off as tasks
+
+If the user chooses A, B, or C, do not implement directly. Add one task per selected row (or tightly coupled group) using the \`tasks\` tool (action=add), ordered by algorithm step then leverage \u2014 **add-backs first, then simplify, then accelerate, then automate**. Each task needs a short title and a standalone prompt that includes:
+
+- the row ID, its step, and exactly what to restore or change (files/symbols/flags + anchors),
+- for add-backs: the breakage it fixes and the minimal restore (never re-expand scope),
+- the blast radius to touch (call sites, imports, tests, docs, config),
+- the project's verification commands to prove the build/tests are green again after the change.
+
+End EVERY task's standalone prompt with this exact line, verbatim, on its own line:
+
+use kencode to reference working code. /commit when done.
+
+After adding the tasks, tell the user exactly: "Tasks added. Press Ctrl+T to open the task list and run them." Do not begin executing them unless the user explicitly says so.
+
+If the user chooses D, stop after the report.
+
+## Rules
+
+- **Runs after /elon.** This pass assumes deletions already landed; Phase 0 derives them from git history and completed tasks.
+- **Add back the ~10%, no more.** Restore only the minimal load-bearing piece that broke. A large add-back means the deletion overshot \u2014 mark it REVERT, don't quietly rebuild.
+- **Algorithm order is law.** Add-back \u2192 simplify \u2192 accelerate \u2192 automate. Never accelerate or automate before simplifying.
+- **Survivors only for steps 3\u20135.** Don't optimize something that should have been deleted; don't re-add scope (that's /expand).
+- **Report-first. No edits, installs, or commits until the user picks an option.**
 - **Every generated task must end with the exact line:** use kencode to reference working code. /commit when done.`
   },
   {
@@ -78943,9 +79562,9 @@ function getPromptCommand(name) {
 // ../cli/dist/core/custom-commands.js
 init_esm_shims();
 import fs25 from "fs/promises";
-import path30 from "path";
+import path33 from "path";
 async function loadCustomCommands(cwd2) {
-  const commandsDir = path30.join(cwd2, ".ezcoder", "commands");
+  const commandsDir = path33.join(cwd2, ".ezcoder", "commands");
   const commands = [];
   let files;
   try {
@@ -78956,11 +79575,11 @@ async function loadCustomCommands(cwd2) {
   for (const file2 of files) {
     if (!file2.endsWith(".md"))
       continue;
-    const filePath = path30.join(commandsDir, file2);
+    const filePath = path33.join(commandsDir, file2);
     try {
       const raw = await fs25.readFile(filePath, "utf-8");
       const parsed = parseSkillFile(raw, "project");
-      const name = parsed.name || path30.basename(file2, ".md");
+      const name = parsed.name || path33.basename(file2, ".md");
       commands.push({
         name,
         description: parsed.description || `Custom command from .ezcoder/commands/${file2}`,
@@ -78982,7 +79601,7 @@ init_esm_shims();
 // ../cli/dist/core/extensions/loader.js
 init_esm_shims();
 import fs26 from "fs/promises";
-import path31 from "path";
+import path34 from "path";
 var ExtensionLoader = class {
   loaded = [];
   async loadAll(extensionsDir, context) {
@@ -78995,7 +79614,7 @@ var ExtensionLoader = class {
     for (const file2 of files) {
       if (!file2.endsWith(".js"))
         continue;
-      const filePath = path31.join(extensionsDir, file2);
+      const filePath = path34.join(extensionsDir, file2);
       try {
         const mod = await import(filePath);
         const factory = typeof mod.default === "function" ? mod.default : mod.createExtension;
@@ -85229,7 +85848,138 @@ var StdioClientTransport = class {
 };
 
 // ../cli/dist/core/mcp/client.js
+import http from "http";
 import os8 from "os";
+
+// ../cli/dist/core/mcp/oauth-provider.js
+init_esm_shims();
+import crypto8 from "crypto";
+
+// ../cli/dist/core/mcp/oauth-store.js
+init_esm_shims();
+import fs27 from "fs/promises";
+var McpOAuthStore = class {
+  filePath;
+  constructor(filePath = getAppPaths().mcpAuthFile) {
+    this.filePath = filePath;
+  }
+  async readAll() {
+    try {
+      const raw = await fs27.readFile(this.filePath, "utf-8");
+      const parsed = JSON.parse(raw);
+      return { version: 1, servers: parsed.servers ?? {} };
+    } catch {
+      return { version: 1, servers: {} };
+    }
+  }
+  async writeAll(data) {
+    try {
+      await fs27.writeFile(this.filePath, JSON.stringify(data, null, 2), {
+        encoding: "utf-8",
+        mode: 384
+      });
+    } catch (err) {
+      log("WARN", "mcp", "failed to persist MCP OAuth store", {
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  async get(name) {
+    const all = await this.readAll();
+    return all.servers[name] ?? {};
+  }
+  /** Merge a partial entry into the server's record (read-modify-write). */
+  async patch(name, patch) {
+    const all = await this.readAll();
+    all.servers[name] = { ...all.servers[name] ?? {}, ...patch };
+    await this.writeAll(all);
+  }
+  /** Drop a server's whole OAuth record (used on logout / removal). */
+  async clear(name) {
+    const all = await this.readAll();
+    if (all.servers[name]) {
+      delete all.servers[name];
+      await this.writeAll(all);
+    }
+  }
+  /** Whether this server has saved tokens (i.e. has completed login at least once). */
+  async hasTokens(name) {
+    const entry = await this.get(name);
+    return !!entry.tokens?.access_token;
+  }
+};
+
+// ../cli/dist/core/mcp/oauth-provider.js
+var MCP_OAUTH_CALLBACK_PORT = 41999;
+var MCP_OAUTH_CALLBACK_PATH = "/oauth/callback";
+function mcpOAuthRedirectUrl() {
+  return `http://localhost:${MCP_OAUTH_CALLBACK_PORT}${MCP_OAUTH_CALLBACK_PATH}`;
+}
+var McpOAuthProvider = class {
+  store;
+  serverName;
+  onRedirect;
+  scope;
+  constructor(opts) {
+    this.serverName = opts.serverName;
+    this.store = opts.store ?? new McpOAuthStore();
+    this.onRedirect = opts.onRedirect;
+    this.scope = opts.scope;
+  }
+  get redirectUrl() {
+    return mcpOAuthRedirectUrl();
+  }
+  get clientMetadata() {
+    return {
+      client_name: "EZ Coder",
+      client_uri: "https://github.com/kenkaiii/ezcoder",
+      redirect_uris: [this.redirectUrl],
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"],
+      token_endpoint_auth_method: "none",
+      ...this.scope ? { scope: this.scope } : {}
+    };
+  }
+  async state() {
+    const entry = await this.store.get(this.serverName);
+    if (entry.state)
+      return entry.state;
+    const fresh = crypto8.randomBytes(16).toString("hex");
+    await this.store.patch(this.serverName, { state: fresh });
+    return fresh;
+  }
+  async clientInformation() {
+    const entry = await this.store.get(this.serverName);
+    return entry.clientInformation;
+  }
+  async saveClientInformation(info) {
+    await this.store.patch(this.serverName, {
+      clientInformation: info
+    });
+  }
+  async tokens() {
+    const entry = await this.store.get(this.serverName);
+    return entry.tokens;
+  }
+  async saveTokens(tokens2) {
+    await this.store.patch(this.serverName, { tokens: tokens2 });
+  }
+  redirectToAuthorization(authorizationUrl) {
+    this.onRedirect?.(authorizationUrl);
+  }
+  async saveCodeVerifier(codeVerifier) {
+    await this.store.patch(this.serverName, { codeVerifier });
+  }
+  async codeVerifier() {
+    const entry = await this.store.get(this.serverName);
+    if (!entry.codeVerifier) {
+      throw new Error("No PKCE code verifier saved for this MCP server.");
+    }
+    return entry.codeVerifier;
+  }
+};
+
+// ../cli/dist/core/mcp/client.js
 var MCPClientManager = class {
   servers = [];
   async connectAll(configs) {
@@ -85251,9 +86001,10 @@ var MCPClientManager = class {
       if (result.status === "fulfilled") {
         return { name, ok: true, toolCount: result.value.length, tools: result.value };
       }
-      const error51 = formatConnectError(result.reason);
+      const requiresAuth = isUnauthorized(result.reason);
+      const error51 = requiresAuth ? "Requires login." : formatConnectError(result.reason);
       log("WARN", "mcp", `Failed to connect to MCP server "${name}"`, { error: error51 });
-      return { name, ok: false, toolCount: 0, tools: [], error: error51 };
+      return { name, ok: false, toolCount: 0, tools: [], error: error51, requiresAuth };
     });
     const connected = results.filter((r2) => r2.ok).length;
     const toolCount = results.reduce((sum, r2) => sum + r2.toolCount, 0);
@@ -85278,8 +86029,120 @@ var MCPClientManager = class {
       }
       return { name: config2.name, ok: true, toolCount: tools.length, tools };
     } catch (err) {
-      const error51 = formatConnectError(err);
-      return { name: config2.name, ok: false, toolCount: 0, tools: [], error: error51 };
+      const requiresAuth = isUnauthorized(err);
+      const error51 = requiresAuth ? "Requires login." : formatConnectError(err);
+      return { name: config2.name, ok: false, toolCount: 0, tools: [], error: error51, requiresAuth };
+    }
+  }
+  /**
+   * Run the interactive OAuth login for one remote MCP server end-to-end:
+   * start a loopback callback server, let the SDK open the browser via
+   * `onAuthorizationUrl`, capture the redirect, exchange the code, then verify
+   * the authorized connection by listing tools. Tokens are persisted by the
+   * provider so later (non-interactive) connects succeed silently.
+   *
+   * `onAuthorizationUrl` is invoked with the authorize URL so the host can open
+   * it (the ezcoder-app broadcasts it to the webview, which opens the system
+   * browser; the CLI prints it). Never throws — returns `{ ok:false, error }`.
+   */
+  async login(config2, onAuthorizationUrl, timeoutMs = 18e4) {
+    if (!config2.url) {
+      return { ok: false, toolCount: 0, error: "Login is only supported for HTTP MCP servers." };
+    }
+    const url2 = new URL(config2.url);
+    const store2 = new McpOAuthStore();
+    await store2.patch(config2.name, { codeVerifier: void 0, state: void 0 });
+    let codeResolve;
+    let codeReject;
+    const codePromise = new Promise((resolve3, reject) => {
+      codeResolve = resolve3;
+      codeReject = reject;
+    });
+    const provider = new McpOAuthProvider({
+      serverName: config2.name,
+      store: store2,
+      onRedirect: (authUrl) => onAuthorizationUrl(authUrl.toString())
+    });
+    const expectedState = await provider.state();
+    const server = http.createServer((req, res) => {
+      const reqUrl = new URL(req.url || "", `http://localhost:${MCP_OAUTH_CALLBACK_PORT}`);
+      if (reqUrl.pathname !== MCP_OAUTH_CALLBACK_PATH) {
+        res.statusCode = 404;
+        res.end("Not found");
+        return;
+      }
+      const err = reqUrl.searchParams.get("error");
+      const code = reqUrl.searchParams.get("code");
+      const state3 = reqUrl.searchParams.get("state");
+      res.writeHead(200, { "Content-Type": "text/html" });
+      if (err) {
+        res.end(`<html><body><h1>Login failed</h1><p>${escapeHtml(err)}</p></body></html>`);
+        codeReject?.(new Error(`Authorization failed: ${err}`));
+        return;
+      }
+      if (!code) {
+        res.end("<html><body><h1>Login failed</h1><p>No authorization code.</p></body></html>");
+        codeReject?.(new Error("No authorization code in callback."));
+        return;
+      }
+      if (state3 !== expectedState) {
+        res.end("<html><body><h1>Login failed</h1><p>State mismatch.</p></body></html>");
+        codeReject?.(new Error("OAuth state mismatch."));
+        return;
+      }
+      res.end("<html><body><h1>Login successful!</h1><p>You can close this tab and return to EZ Coder.</p></body></html>");
+      codeResolve?.(code);
+    });
+    try {
+      await new Promise((resolve3, reject) => {
+        server.once("error", reject);
+        server.listen(MCP_OAUTH_CALLBACK_PORT, "127.0.0.1", () => resolve3());
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const hint = msg.includes("EADDRINUSE") || msg.includes("in use") ? `Port ${MCP_OAUTH_CALLBACK_PORT} is in use \u2014 close whatever is using it and retry.` : msg;
+      return { ok: false, toolCount: 0, error: `Could not start login callback server: ${hint}` };
+    }
+    const overallTimeout = setTimeout(() => {
+      codeReject?.(new Error("Login timed out waiting for the browser callback."));
+    }, timeoutMs);
+    overallTimeout.unref();
+    try {
+      const loginTransport = new StreamableHTTPClientTransport(url2, {
+        requestInit: config2.headers ? { headers: config2.headers } : void 0,
+        authProvider: provider
+      });
+      const loginClient = new Client({ name: "ezcoder", version: "1.0.0" });
+      try {
+        await loginClient.connect(loginTransport);
+        const { tools: tools2 } = await loginClient.listTools();
+        await loginClient.close().catch(() => {
+        });
+        return { ok: true, toolCount: tools2.length };
+      } catch (err) {
+        if (!isUnauthorized(err))
+          throw err;
+      }
+      const code = await codePromise;
+      await loginTransport.finishAuth(code);
+      await loginClient.close().catch(() => {
+      });
+      const verifyTransport = new StreamableHTTPClientTransport(url2, {
+        requestInit: config2.headers ? { headers: config2.headers } : void 0,
+        authProvider: provider
+      });
+      const verifyClient = new Client({ name: "ezcoder", version: "1.0.0" });
+      await verifyClient.connect(verifyTransport);
+      const { tools } = await verifyClient.listTools();
+      await verifyClient.close().catch(() => {
+      });
+      return { ok: true, toolCount: tools.length };
+    } catch (err) {
+      return { ok: false, toolCount: 0, error: formatConnectError(err) };
+    } finally {
+      clearTimeout(overallTimeout);
+      server.close();
+      await store2.patch(config2.name, { codeVerifier: void 0, state: void 0 });
     }
   }
   async connectServer(config2) {
@@ -85311,19 +86174,24 @@ var MCPClientManager = class {
     } else {
       const url2 = new URL(config2.url);
       const reqInit = config2.headers ? { headers: config2.headers } : void 0;
+      const authProvider = new McpOAuthProvider({ serverName: config2.name });
       try {
         transport = new StreamableHTTPClientTransport(url2, {
-          requestInit: reqInit
+          requestInit: reqInit,
+          authProvider
         });
         client = new Client({ name: "ezcoder", version: "1.0.0" });
         await client.connect(transport, { timeout });
       } catch (streamableErr) {
+        if (isUnauthorized(streamableErr))
+          throw streamableErr;
         log("INFO", "mcp", `StreamableHTTP failed for "${config2.name}", trying SSE fallback`, {
           error: String(streamableErr)
         });
         transport = new SSEClientTransport(url2, {
           eventSourceInit: config2.headers ? { fetch: createHeaderFetch(config2.headers) } : void 0,
-          requestInit: reqInit
+          requestInit: reqInit,
+          authProvider
         });
         client = new Client({ name: "ezcoder", version: "1.0.0" });
         await client.connect(transport, { timeout });
@@ -85388,6 +86256,15 @@ function formatConnectError(reason) {
   }
   return msg;
 }
+function isUnauthorized(reason) {
+  if (reason instanceof UnauthorizedError)
+    return true;
+  const msg = reason instanceof Error ? reason.message : String(reason);
+  return msg.includes("Unauthorized") || msg.includes("401") || msg.toLowerCase().includes("invalid_token");
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
 function createHeaderFetch(extraHeaders) {
   return (url2, init) => {
     const existing = init?.headers ?? {};
@@ -85400,8 +86277,8 @@ init_esm_shims();
 
 // ../cli/dist/core/mcp/store.js
 init_esm_shims();
-import path33 from "path";
-import fs27 from "fs/promises";
+import path35 from "path";
+import fs28 from "fs/promises";
 var StoredServerEntrySchema = external_exports.object({
   type: external_exports.enum(["stdio", "http", "streamable-http", "sse"]).optional(),
   url: external_exports.string().optional(),
@@ -85419,12 +86296,12 @@ function globalMcpPath() {
   return getAppPaths().mcpFile;
 }
 function projectMcpPath(cwd2) {
-  return path33.join(cwd2, ".ezcoder", "mcp.json");
+  return path35.join(cwd2, ".ezcoder", "mcp.json");
 }
 async function readMcpFile(filePath) {
   let content;
   try {
-    content = await fs27.readFile(filePath, "utf-8");
+    content = await fs28.readFile(filePath, "utf-8");
   } catch {
     return { mcpServers: {} };
   }
@@ -85477,8 +86354,8 @@ async function loadServers(cwd2) {
 
 // ../cli/dist/core/mcp/defaults.js
 import { createRequire } from "module";
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import path34 from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync3 } from "fs";
+import path36 from "path";
 var KENCODE_PACKAGE = "@kenkaiiii/kencode-search";
 function resolveKencodeServer() {
   try {
@@ -85487,8 +86364,8 @@ function resolveKencodeServer() {
     const pkg = JSON.parse(readFileSync3(pkgJsonPath, "utf8"));
     const binRel = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.["kencode-search"] ?? Object.values(pkg.bin ?? {})[0] ?? pkg.main;
     if (binRel) {
-      const binPath = path34.join(path34.dirname(pkgJsonPath), binRel);
-      if (existsSync3(binPath)) {
+      const binPath = path36.join(path36.dirname(pkgJsonPath), binRel);
+      if (existsSync5(binPath)) {
         return { name: "kencode-search", command: process.execPath, args: [binPath] };
       }
     }
@@ -85545,12 +86422,12 @@ init_esm_shims();
 
 // ../cli/dist/core/agents.js
 init_esm_shims();
-import fs28 from "fs/promises";
-import path35 from "path";
+import fs29 from "fs/promises";
+import path37 from "path";
 async function discoverAgents(options) {
   const agents = [];
   if (options.projectDir) {
-    const projectAgentsDir = path35.join(options.projectDir, ".ezcoder", "agents");
+    const projectAgentsDir = path37.join(options.projectDir, ".ezcoder", "agents");
     const projectAgents = await loadAgentsFromDir(projectAgentsDir, "project");
     agents.push(...projectAgents);
   }
@@ -85568,19 +86445,19 @@ async function loadAgentsFromDir(dir, source2) {
   const agents = [];
   let files;
   try {
-    files = await fs28.readdir(dir);
+    files = await fs29.readdir(dir);
   } catch {
     return agents;
   }
   for (const file2 of files) {
     if (!file2.endsWith(".md"))
       continue;
-    const filePath = path35.join(dir, file2);
+    const filePath = path37.join(dir, file2);
     try {
-      const content = await fs28.readFile(filePath, "utf-8");
+      const content = await fs29.readFile(filePath, "utf-8");
       const agent = parseAgentFile(content, source2);
       if (!agent.name) {
-        agent.name = path35.basename(file2, ".md");
+        agent.name = path37.basename(file2, ".md");
       }
       agents.push(agent);
     } catch {
@@ -85711,10 +86588,197 @@ var BUNDLED_AGENTS = [
   }
 ];
 
+// ../cli/dist/utils/session-title.js
+init_esm_shims();
+var TITLE_PROMPT = `Generate an extremely short title (3-7 words) summarizing what the user is asking for. Just the title, nothing else. No quotes, no punctuation at the end.`;
+async function generateSessionTitle(opts) {
+  let apiKey = opts.apiKey;
+  let accountId = opts.accountId;
+  if (opts.resolveCredentials) {
+    const creds = await opts.resolveCredentials();
+    apiKey = creds.apiKey;
+    accountId = creds.accountId;
+  }
+  const model = opts.provider === "anthropic" ? "claude-haiku-4-5-20251001" : opts.provider === "openai" ? "gpt-5.1-codex-mini" : opts.provider === "glm" ? "glm-4.7-flash" : opts.provider === "moonshot" ? "kimi-k2.7-code" : "claude-haiku-4-5-20251001";
+  const messages = [
+    { role: "system", content: TITLE_PROMPT },
+    {
+      role: "user",
+      content: `User asked: "${truncate2(opts.userMessage, 300)}"
+
+Assistant began: "${truncate2(opts.assistantPreview, 200)}"`
+    }
+  ];
+  try {
+    const result = stream({
+      provider: opts.provider,
+      model,
+      messages,
+      maxTokens: 30,
+      temperature: 0,
+      apiKey,
+      baseUrl: opts.baseUrl,
+      accountId
+    });
+    result.response.catch(() => {
+    });
+    const response = await result;
+    const msg = response.message;
+    const text = typeof msg.content === "string" ? msg.content : msg.content.filter((c2) => c2.type === "text").map((c2) => c2.text).join("");
+    return text.trim().replace(/[."]+$/, "") || "New conversation";
+  } catch {
+    return fallbackTitle(opts.userMessage);
+  }
+}
+function truncate2(s, max) {
+  if (s.length <= max)
+    return s;
+  return s.slice(0, max) + "\u2026";
+}
+function fallbackTitle(userMessage) {
+  if (!userMessage)
+    return "New conversation";
+  const cleaned = userMessage.replace(/^\/\S+\s*/, "").replace(/\s+/g, " ").trim();
+  const first = cleaned.split(/[.\n]/)[0]?.trim() ?? cleaned;
+  if (first.length <= 50)
+    return first;
+  const t = first.slice(0, 50);
+  const sp = t.lastIndexOf(" ");
+  return (sp > 20 ? t.slice(0, sp) : t) + "\u2026";
+}
+
+// ../cli/dist/core/ideal-review.js
+init_esm_shims();
+var IDEAL_REVIEW_PROMPT = "Ideal? Review the actual work against the user's request before the final response. Is it simple, focused, correct, and aligned? Did you over-edit, leave TODOs, miss an obvious case the request called for, or introduce risk? Judge this by reading the code you changed \u2014 do NOT run builds, typechecks, linters, or test suites now; that happens at commit time via /commit. If anything is wrong, fix it now. If everything is good, respond with the final answer only; do not mention this ideal review unless it changed the work.";
+function evaluateIdealReview(stats) {
+  const reasons = [];
+  let score = 0;
+  if (stats.changedLines >= 120) {
+    score += 2;
+    reasons.push(`${stats.changedLines} changed lines`);
+  } else if (stats.changedLines >= 60) {
+    score += 1;
+    reasons.push(`${stats.changedLines} changed lines`);
+  }
+  if (stats.toolCalls >= 8) {
+    score += 1;
+    reasons.push(`${stats.toolCalls} tool calls`);
+  }
+  if (stats.writeCalls + stats.editCalls >= 4) {
+    score += 2;
+    reasons.push(`${stats.writeCalls + stats.editCalls} file mutation calls`);
+  } else if (stats.writeCalls + stats.editCalls >= 2) {
+    score += 1;
+    reasons.push(`${stats.writeCalls + stats.editCalls} file mutation calls`);
+  }
+  if (stats.bashCalls > 0 && stats.writeCalls + stats.editCalls > 0) {
+    score += 1;
+    reasons.push("shell command plus file mutation");
+  }
+  if (stats.toolFailures > 0) {
+    score += 2;
+    reasons.push(`${stats.toolFailures} failed tool calls`);
+  }
+  if (stats.turns >= 6) {
+    score += 1;
+    reasons.push(`${stats.turns} agent turns`);
+  }
+  return { shouldReview: score >= 4, score, reasons };
+}
+function buildIdealReviewMessage(reasons) {
+  const reasonText = reasons.length > 0 ? ` Triggered because: ${reasons.join(", ")}.` : "";
+  return {
+    role: "user",
+    content: `${IDEAL_REVIEW_PROMPT}${reasonText}`
+  };
+}
+
+// ../cli/dist/core/loop-breaker.js
+init_esm_shims();
+var CONSECUTIVE_FAILURE_LIMIT = 3;
+var SIGNATURE_REPEAT_LIMIT = 3;
+var SAME_FILE_EDIT_LIMIT = 5;
+var LOOP_BREAK_PROMPT = "Stuck? You've repeated essentially the same action and it keeps failing or not advancing. Stop and break the pattern. Read the latest error or result literally \u2014 not what you expected it to say. Then question the assumption underneath your approach: the file, path, API, command, or premise you've been treating as true may be wrong. Either try a fundamentally different approach or, if you genuinely cannot make progress, stop and tell the user what's blocking you and what you need. Do NOT repeat the previous attempt with minor tweaks. Do not mention this note unless it changed your approach.";
+function toolCallSignature(name, args) {
+  return `${name}\0${canonicalize(args)}`;
+}
+function canonicalize(value) {
+  if (value === null || typeof value !== "object") {
+    return JSON.stringify(value) ?? "null";
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalize).join(",")}]`;
+  }
+  const entries = Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+  return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalize(v)}`).join(",")}}`;
+}
+var TEXT_REPETITION_MIN_LENGTH = 40;
+var TEXT_REPETITION_MIN_REPEATS = 3;
+var TEXT_REPETITION_TAIL = 4096;
+function detectTextRepetition(text) {
+  if (text.length < TEXT_REPETITION_MIN_LENGTH * TEXT_REPETITION_MIN_REPEATS) {
+    return false;
+  }
+  const tail = text.slice(-TEXT_REPETITION_TAIL);
+  const maxBlock = Math.floor(tail.length / TEXT_REPETITION_MIN_REPEATS);
+  for (let block2 = TEXT_REPETITION_MIN_LENGTH; block2 <= maxBlock; block2++) {
+    const unit = tail.slice(tail.length - block2);
+    let repeats = 1;
+    let offset = tail.length - block2 * 2;
+    while (offset >= 0 && tail.slice(offset, offset + block2) === unit) {
+      repeats++;
+      offset -= block2;
+    }
+    if (repeats >= TEXT_REPETITION_MIN_REPEATS)
+      return true;
+  }
+  return false;
+}
+function evaluateLoopBreak(stats) {
+  const reasons = [];
+  if (stats.consecutiveFailures >= CONSECUTIVE_FAILURE_LIMIT) {
+    reasons.push(`${stats.consecutiveFailures} consecutive failed tool calls`);
+  }
+  if (stats.maxSignatureRepeats >= SIGNATURE_REPEAT_LIMIT) {
+    reasons.push(`identical tool call repeated ${stats.maxSignatureRepeats}x`);
+  }
+  if (stats.maxSameFileEdits >= SAME_FILE_EDIT_LIMIT) {
+    reasons.push(`${stats.maxSameFileEdits} edits to the same file`);
+  }
+  if (stats.textRepetitionDetected) {
+    reasons.push("repeated output detected");
+  }
+  return { shouldBreak: reasons.length > 0, reasons };
+}
+function buildLoopBreakMessage(reasons) {
+  const reasonText = reasons.length > 0 ? ` Triggered because: ${reasons.join(", ")}.` : "";
+  return {
+    role: "user",
+    content: `${LOOP_BREAK_PROMPT}${reasonText}`
+  };
+}
+
+// ../cli/dist/core/regrounding.js
+init_esm_shims();
+function buildRegroundingMessage(originalRequest) {
+  const trimmed = originalRequest.trim();
+  const pin = trimmed.length > 0 ? `
+
+The user's original request was:
+
+  ${trimmed}
+
+` : " The original request is in the earlier messages that remain. ";
+  return {
+    role: "user",
+    content: "Re-ground. The conversation was just compacted, so earlier detail is now a summary and easy to drift from." + pin + "Before continuing, re-anchor on two things: that original request, and the specific objective you're working on right now. Verify your next step still serves the original ask \u2014 not a reshaped or narrowed version of it. If the summary dropped a constraint, file, or requirement you were tracking, recover it from the messages that remain before acting. Then continue. Do not restate this note; just proceed correctly."
+  };
+}
+
 // ../cli/dist/core/agent-session.js
-import crypto8 from "crypto";
-import fs29 from "fs/promises";
-import path36 from "path";
+import crypto9 from "crypto";
+import fs30 from "fs/promises";
+import path38 from "path";
 var AgentSession = class {
   eventBus = new EventBus();
   slashCommands = new SlashCommandRegistry();
@@ -85724,8 +86788,44 @@ var AgentSession = class {
   extensionLoader = new ExtensionLoader();
   messages = [];
   tools = [];
+  /** Rebuilds the read tool for a new model (video byte cap is baked in at
+   *  creation). Called from switchModel so video-capable models get the
+   *  read-tool's native-video path after a mid-session model change. */
+  rebuildReadTool;
   skills = [];
   cacheKeyLogged = false;
+  // ── Self-correction hook state (mirrors the TUI's useAgentLoop refs) ──
+  // Reset at the start of every run; observed from the event stream; read by
+  // the loop-break (mid-loop) and ideal-review (pre-stop) callbacks.
+  hookStats = {
+    changedLines: 0,
+    toolCalls: 0,
+    toolFailures: 0,
+    turns: 0,
+    writeCalls: 0,
+    editCalls: 0,
+    bashCalls: 0
+  };
+  hookText = "";
+  hookConsecutiveFailures = 0;
+  hookMaxSignatureRepeats = 0;
+  hookMaxSameFileEdits = 0;
+  hookSignatureCounts = /* @__PURE__ */ new Map();
+  hookFileEditCounts = /* @__PURE__ */ new Map();
+  hookToolCalls = /* @__PURE__ */ new Map();
+  idealReviewInjected = false;
+  loopBreakInjected = false;
+  regroundingInjected = false;
+  compactionOccurred = false;
+  originalRequest = "";
+  /** True after the cache has been pre-warmed for this session. Ensures we only
+   *  fire the warm-up call once (before the first real turn). */
+  cachePrewarmed = false;
+  // Messages queued by the user while a run is in flight. Drained at the
+  // mid-loop steering boundary (user steering wins over the hooks), mirroring
+  // the TUI's getSteeringMessages. Each entry carries its own attachments so a
+  // user can queue media (images/video/files) mid-run, not just plain text.
+  userQueue = [];
   processManager;
   lspManager;
   mcpManager;
@@ -85736,6 +86836,12 @@ var AgentSession = class {
   maxTokens;
   thinkingLevel;
   customSystemPrompt;
+  /** Shared with the tool layer so plan-mode restrictions read live state. */
+  planModeRef = { current: false };
+  /** Path of the approved plan currently being implemented, or undefined. When
+   *  set, the system prompt carries the `[DONE:n]` progress contract so the
+   *  model emits step-completion markers the UI's plan-progress widget reads. */
+  approvedPlanPath;
   sessionId = "";
   sessionPath = "";
   lastPersistedIndex = 0;
@@ -85748,10 +86854,25 @@ var AgentSession = class {
     this.model = options.model;
     this.cwd = options.cwd;
     this.baseUrl = options.baseUrl;
-    this.maxTokens = options.maxTokens ?? getModel(options.model)?.maxOutputTokens ?? 16384;
+    this.maxTokens = this.resolveMaxTokens(options.model);
     this.thinkingLevel = options.thinkingLevel;
     this.customSystemPrompt = options.systemPrompt;
   }
+  /**
+   * Derive the output-token cap for a model. Follows the active model's
+   * `maxOutputTokens` so a session booted on a large-output model (e.g. Kimi's
+   * 256K) doesn't carry that cap to a smaller one (e.g. Opus's 128K) after a
+   * model switch — that mismatch surfaces from the provider as
+   * `max_tokens: 262144 > 128000, which is the maximum allowed …`. An explicit
+   * `maxTokens` override is honored but clamped to the model's ceiling.
+   */
+  resolveMaxTokens(modelId) {
+    const modelInfo = getModel(modelId);
+    if (this.opts.maxTokens) {
+      return modelInfo ? Math.min(this.opts.maxTokens, modelInfo.maxOutputTokens) : this.opts.maxTokens;
+    }
+    return modelInfo?.maxOutputTokens ?? 16384;
+  }
   async initialize() {
     setEstimatorModel(this.model);
     const paths = await ensureAppDirs();
@@ -85760,10 +86881,10 @@ var AgentSession = class {
     this.authStorage = new AuthStorage(paths.authFile);
     await this.authStorage.load();
     this.sessionManager = new SessionManager(paths.sessionsDir);
-    const localEzDir = path36.join(this.cwd, ".ezcoder");
-    await fs29.mkdir(path36.join(localEzDir, "skills"), { recursive: true });
-    await fs29.mkdir(path36.join(localEzDir, "commands"), { recursive: true });
-    await fs29.mkdir(path36.join(localEzDir, "agents"), { recursive: true });
+    const localEzDir = path38.join(this.cwd, ".ezcoder");
+    await fs30.mkdir(path38.join(localEzDir, "skills"), { recursive: true });
+    await fs30.mkdir(path38.join(localEzDir, "commands"), { recursive: true });
+    await fs30.mkdir(path38.join(localEzDir, "agents"), { recursive: true });
     this.skills = await discoverSkills({
       globalSkillsDir: paths.skillsDir,
       projectDir: this.cwd
@@ -85772,33 +86893,35 @@ var AgentSession = class {
       globalAgentsDir: paths.agentsDir,
       projectDir: this.cwd
     });
-    const { tools, processManager, lspManager } = createTools(this.cwd, {
+    const { tools, processManager, rebuildReadTool, lspManager } = await createTools(this.cwd, {
       agents,
       skills: this.skills,
       provider: this.provider,
       model: this.model,
       lspDiagnostics: this.settingsManager.get("lspDiagnostics"),
-      // Lazy — sessionId isn't assigned yet when createTools() runs, so we
-      // must defer reading the cache key until the sub-agent actually fires.
-      getCacheKey: () => this.getPromptCacheKey()
+      authStorage: this.authStorage,
+      // Lazy — sessionId/model/provider can change after createTools() runs, so
+      // sub-agent spawns read the current parent state at execution time.
+      getProvider: () => this.provider,
+      getModel: () => this.model,
+      getCacheKey: () => this.getPromptCacheKey(),
+      // Plan mode: only wired when the host supplies callbacks. The ref is
+      // shared so bash/edit/write enforce read-only restrictions live.
+      ...this.opts.onEnterPlan || this.opts.onExitPlan ? {
+        planModeRef: this.planModeRef,
+        onEnterPlan: this.opts.onEnterPlan,
+        onExitPlan: this.opts.onExitPlan
+      } : {}
     });
     this.tools = tools;
+    this.rebuildReadTool = rebuildReadTool;
     this.processManager = processManager;
     this.lspManager = lspManager;
     this.mcpManager = new MCPClientManager();
-    try {
-      let apiKey;
-      if (this.provider === "glm") {
-        try {
-          const glmCreds = await this.authStorage.resolveCredentials("glm");
-          apiKey = glmCreds.accessToken;
-        } catch {
-        }
-      }
-      const mcpTools = await this.mcpManager.connectAll(getMCPServers(this.provider, apiKey));
-      this.tools.push(...mcpTools);
-    } catch (err) {
-      log("WARN", "mcp", `MCP initialization failed: ${err instanceof Error ? err.message : String(err)}`);
+    if (this.opts.backgroundMcpConnect) {
+      void this.connectMcpServers();
+    } else {
+      await this.connectMcpServers();
     }
     const basePrompt = this.customSystemPrompt ?? await buildSystemPrompt(this.cwd, this.skills, false, void 0, this.tools.map((tool) => tool.name), void 0, this.provider);
     this.messages = [{ role: "system", content: basePrompt }];
@@ -85855,6 +86978,36 @@ var AgentSession = class {
     await this.extensionLoader.loadAll(paths.extensionsDir, extContext);
     this.eventBus.emit("session_start", { sessionId: this.sessionId });
   }
+  /**
+   * Connect all configured MCP servers and append their tools to `this.tools`.
+   * Resolves the GLM api key first (Z.AI's bundled servers need it). Never
+   * throws — a failed connect is logged and skipped — so it is safe to either
+   * `await` (CLI: tools ready before the first turn) or fire-and-forget
+   * (sidecar: `backgroundMcpConnect`, so a slow stdio server can't stall
+   * startup). Tools are pushed onto the live array the agent loop reads each
+   * turn, so background-connected servers become available on the next prompt.
+   */
+  async connectMcpServers() {
+    if (!this.mcpManager)
+      return;
+    try {
+      let apiKey;
+      if (this.provider === "glm") {
+        try {
+          const glmCreds = await this.authStorage.resolveCredentials("glm");
+          apiKey = glmCreds.accessToken;
+        } catch {
+        }
+      }
+      const mcpTools = await this.mcpManager.connectAll(await getAllMcpServers(this.provider, apiKey, this.cwd));
+      this.tools.push(...mcpTools);
+      if (this.opts.backgroundMcpConnect && mcpTools.length > 0) {
+        await this.rebuildSystemPromptInPlace();
+      }
+    } catch (err) {
+      log("WARN", "mcp", `MCP initialization failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
   /**
    * Process user input. Handles slash commands or runs agent loop.
    */
@@ -85891,6 +87044,208 @@ ${parsed.args}` : promptText;
     this.lastPersistedIndex = this.messages.length;
     await this.runLoop();
   }
+  /**
+   * Prompt with multimodal attachments (images / videos) alongside optional
+   * text. Images and videos become native content blocks the model can see;
+   * non-media files are surfaced as a text note with their saved path so the
+   * agent can open them with its tools. Slash-command parsing is skipped —
+   * attachments are always a direct conversational turn.
+   */
+  async promptWithAttachments(text, attachments) {
+    const parts = this.buildAttachmentParts(text, attachments);
+    if (parts.length === 0)
+      return;
+    const userMessage = { role: "user", content: parts };
+    this.messages.push(userMessage);
+    await this.persistMessage(userMessage);
+    this.lastPersistedIndex = this.messages.length;
+    await this.runLoop();
+  }
+  /**
+   * Build the native content blocks (text + image/video notes + file notes) for
+   * a user message with attachments. Shared by {@link promptWithAttachments} and
+   * the mid-run steering drain so queued media is delivered identically.
+   */
+  buildAttachmentParts(text, attachments) {
+    const parts = [];
+    const fileNotes = [];
+    const modelSupportsVideo = getModel(this.model)?.supportsVideo ?? false;
+    for (const a of attachments) {
+      if (a.kind === "image") {
+        parts.push({ type: "image", mediaType: a.mediaType, data: a.data });
+        if (a.path) {
+          parts.push({ type: "text", text: `[Image saved at ${a.path}]` });
+        }
+      } else if (a.kind === "video") {
+        if (modelSupportsVideo && a.path) {
+          parts.push({
+            type: "text",
+            text: `The user attached a video at ${a.path}. You CAN watch it: call the read tool on this exact path now, then answer based on what you see. Do not say you cannot watch video \u2014 reading the file lets you analyze it.`
+          });
+        } else if (a.path) {
+          parts.push({
+            type: "text",
+            text: `[User attached a video file at ${a.path}. You cannot watch video directly; if needed, use ffmpeg to extract frames or audio.]`
+          });
+        } else {
+          parts.push({
+            type: "text",
+            text: `[User attached a video file but it could not be saved for analysis.]`
+          });
+        }
+      } else if (a.path) {
+        fileNotes.push(`- ${a.name} (saved at ${a.path})`);
+      }
+    }
+    const textParts = [];
+    if (text.trim())
+      textParts.push(text.trim());
+    if (fileNotes.length > 0) {
+      textParts.push(`Attached files (inspect with your tools):
+${fileNotes.join("\n")}`);
+    }
+    if (textParts.length > 0)
+      parts.unshift({ type: "text", text: textParts.join("\n\n") });
+    return parts;
+  }
+  /**
+   * Reset per-run self-correction hook state. Mirrors the TUI's run_start
+   * resets so each run evaluates the hooks from a clean slate. `originalRequest`
+   * is the verbatim user ask, pinned for post-compaction re-grounding.
+   */
+  resetHookState(originalRequest) {
+    this.hookStats = {
+      changedLines: 0,
+      toolCalls: 0,
+      toolFailures: 0,
+      turns: 0,
+      writeCalls: 0,
+      editCalls: 0,
+      bashCalls: 0
+    };
+    this.hookText = "";
+    this.hookConsecutiveFailures = 0;
+    this.hookMaxSignatureRepeats = 0;
+    this.hookMaxSameFileEdits = 0;
+    this.hookSignatureCounts.clear();
+    this.hookFileEditCounts.clear();
+    this.hookToolCalls.clear();
+    this.idealReviewInjected = false;
+    this.loopBreakInjected = false;
+    this.regroundingInjected = false;
+    this.compactionOccurred = false;
+    this.originalRequest = originalRequest;
+  }
+  /**
+   * Fold one agent event into the hook stat accumulators. Pure bookkeeping —
+   * the same signals the TUI's useAgentLoop collects, so the loop-break and
+   * ideal-review decisions match across the CLI and the app.
+   */
+  trackHookEvent(event) {
+    switch (event.type) {
+      case "text_delta":
+        this.hookText += event.text;
+        break;
+      case "tool_call_start":
+        this.hookToolCalls.set(event.toolCallId, { name: event.name, args: event.args ?? {} });
+        break;
+      case "tool_call_end": {
+        const call = this.hookToolCalls.get(event.toolCallId);
+        const name = call?.name ?? "";
+        const args = call?.args;
+        this.hookStats.toolCalls += 1;
+        if (event.isError)
+          this.hookStats.toolFailures += 1;
+        if (name === "write")
+          this.hookStats.writeCalls += 1;
+        if (name === "edit")
+          this.hookStats.editCalls += 1;
+        if (name === "bash")
+          this.hookStats.bashCalls += 1;
+        this.hookConsecutiveFailures = event.isError ? this.hookConsecutiveFailures + 1 : 0;
+        const sig = toolCallSignature(name, args);
+        const sigNext = (this.hookSignatureCounts.get(sig) ?? 0) + 1;
+        this.hookSignatureCounts.set(sig, sigNext);
+        if (sigNext > this.hookMaxSignatureRepeats)
+          this.hookMaxSignatureRepeats = sigNext;
+        if ((name === "edit" || name === "write") && args) {
+          const filePath = args.file_path;
+          if (typeof filePath === "string") {
+            const fileNext = (this.hookFileEditCounts.get(filePath) ?? 0) + 1;
+            this.hookFileEditCounts.set(filePath, fileNext);
+            if (fileNext > this.hookMaxSameFileEdits)
+              this.hookMaxSameFileEdits = fileNext;
+          }
+        }
+        if (name === "edit" && !event.isError) {
+          const diff3 = event.details?.diff ?? event.result;
+          const added = (diff3.match(/^\+[^+]/gm) ?? []).length;
+          const removed = (diff3.match(/^-[^-]/gm) ?? []).length;
+          this.hookStats.changedLines += added + removed;
+        }
+        break;
+      }
+      case "turn_end":
+        this.hookStats.turns = event.turn;
+        break;
+    }
+  }
+  /**
+   * Mid-loop steering hook: fires the loop-breaker when the agent looks stuck,
+   * then post-compaction re-grounding. At most one of each per run. Mirrors the
+   * TUI's getSteeringMessages ordering (minus user steering, which the app
+   * delivers as normal prompts).
+   */
+  getHookSteeringMessages() {
+    if (this.userQueue.length > 0) {
+      const queued = this.userQueue.splice(0);
+      if (queued.every((m) => m.attachments.length === 0)) {
+        const merged = queued.map((m) => m.text).join("\n\n");
+        return [{ role: "user", content: merged }];
+      }
+      const parts = [];
+      for (const m of queued)
+        parts.push(...this.buildAttachmentParts(m.text, m.attachments));
+      return [{ role: "user", content: parts }];
+    }
+    if (!this.settingsManager.get("idealReviewEnabled"))
+      return null;
+    if (!this.loopBreakInjected) {
+      const decision = evaluateLoopBreak({
+        consecutiveFailures: this.hookConsecutiveFailures,
+        maxSignatureRepeats: this.hookMaxSignatureRepeats,
+        maxSameFileEdits: this.hookMaxSameFileEdits,
+        textRepetitionDetected: detectTextRepetition(this.hookText)
+      });
+      if (decision.shouldBreak) {
+        this.loopBreakInjected = true;
+        this.eventBus.emit("hook", { kind: "loop_break" });
+        return [buildLoopBreakMessage(decision.reasons)];
+      }
+    }
+    if (!this.regroundingInjected && this.compactionOccurred) {
+      this.regroundingInjected = true;
+      this.eventBus.emit("hook", { kind: "regrounding" });
+      return [buildRegroundingMessage(this.originalRequest)];
+    }
+    return null;
+  }
+  /**
+   * Pre-stop follow-up hook: runs the ideal review once, when the agent would
+   * otherwise finish and the change set is substantial enough to warrant it.
+   */
+  getHookFollowUpMessages() {
+    if (!this.settingsManager.get("idealReviewEnabled"))
+      return null;
+    if (this.idealReviewInjected)
+      return null;
+    const decision = evaluateIdealReview(this.hookStats);
+    if (!decision.shouldReview)
+      return null;
+    this.idealReviewInjected = true;
+    this.eventBus.emit("hook", { kind: "ideal" });
+    return [buildIdealReviewMessage(decision.reasons)];
+  }
   /** Auto-compact if needed, run agent loop with auth retry, and persist messages. */
   async runLoop() {
     if (!this.cacheKeyLogged) {
@@ -85902,6 +87257,9 @@ ${parsed.args}` : promptText;
         transient: String(!!this.opts.transient)
       });
     }
+    const lastUser = [...this.messages].reverse().find((m) => m.role === "user");
+    const originalRequest = typeof lastUser?.content === "string" ? lastUser.content : "";
+    this.resetHookState(originalRequest);
     let creds = await this.authStorage.resolveCredentials(this.provider);
     if (this.settingsManager.get("autoCompact")) {
       const contextWindow = getContextWindow(this.model, {
@@ -85911,6 +87269,7 @@ ${parsed.args}` : promptText;
       const threshold = this.settingsManager.get("compactThreshold");
       if (shouldCompact(this.messages, contextWindow, threshold)) {
         await this.compact(creds);
+        this.compactionOccurred = true;
       }
     }
     const userAgent = this.provider === "anthropic" ? await getClaudeCliUserAgent() : void 0;
@@ -85933,20 +87292,28 @@ ${parsed.args}` : promptText;
         // Kimi For Coding gates the managed endpoint on coding-agent identity
         // headers; attach them only when the Kimi OAuth token is in use.
         defaultHeaders: this.provider === "moonshot" && isKimiCodingEndpoint(effectiveBaseUrl) ? kimiCodingHeaders() : void 0,
-        cacheRetention: "short",
+        // speedProfile "optimized": 1-h cache TTL (survives turns >5 min apart)
+        // + pre-warm before the first turn. "baseline": current 5-min default.
+        cacheRetention: this.isSpeedOptimized() ? "long" : "short",
         promptCacheKey: this.getPromptCacheKey(),
         supportsImages: modelInfo?.supportsImages,
         supportsVideo: modelInfo?.supportsVideo,
         userAgent,
         // clearToolUses disabled — causes model to output unsolicited context summaries
         // Single tool result shouldn't exceed 30% of context window (in chars)
-        maxToolResultChars: Math.floor(getContextWindow(this.model, { provider: this.provider, accountId }) * 3.5 * 0.3)
+        maxToolResultChars: Math.floor(getContextWindow(this.model, { provider: this.provider, accountId }) * 3.5 * 0.3),
+        // Self-correction hooks (same as the TUI): loop-break + re-grounding are
+        // polled mid-loop; the ideal review is polled when the agent would stop.
+        getSteeringMessages: () => this.getHookSteeringMessages(),
+        getFollowUpMessages: () => this.getHookFollowUpMessages()
       });
       for await (const event of generator) {
+        this.trackHookEvent(event);
         this.eventBus.forwardAgentEvent(event);
       }
     };
     try {
+      await this.maybePrewarmCache(creds);
       await runAgentLoop(creds.accessToken, creds.accountId, creds.projectId);
     } catch (err) {
       if (isAbortError4(err) || this.opts.signal?.aborted) {
@@ -85977,7 +87344,16 @@ ${parsed.args}` : promptText;
       this.provider = provider;
     this.model = model;
     setEstimatorModel(model);
-    this.eventBus.emit("model_change", { provider: this.provider, model: this.model });
+    this.maxTokens = this.resolveMaxTokens(model);
+    this.eventBus.emit("model_change", {
+      provider: this.provider,
+      model: this.model,
+      supportsVideo: getModel(this.model)?.supportsVideo ?? false
+    });
+    if (this.rebuildReadTool) {
+      const newReadTool = this.rebuildReadTool(model);
+      this.tools = this.tools.map((t) => t.name === "read" ? newReadTool : t);
+    }
     if (provider && provider !== prevProvider) {
       const hasWebSearch = this.tools.some((t) => t.name === "web_search");
       if (this.provider === "anthropic" && hasWebSearch) {
@@ -86040,6 +87416,8 @@ ${parsed.args}` : promptText;
     });
   }
   async newSession() {
+    this.planModeRef.current = false;
+    this.approvedPlanPath = void 0;
     const basePrompt = this.customSystemPrompt ?? await buildSystemPrompt(this.cwd, this.skills, false, void 0, this.tools.map((tool) => tool.name), void 0, this.provider);
     this.messages = [{ role: "system", content: basePrompt }];
     await this.createNewSession();
@@ -86094,16 +87472,151 @@ ${parsed.args}` : promptText;
       cwd: this.cwd,
       sessionId: this.sessionId,
       sessionPath: this.sessionPath,
-      messageCount: this.messages.length
+      messageCount: this.messages.length,
+      planMode: this.planModeRef.current
     };
   }
+  getPlanMode() {
+    return this.planModeRef.current;
+  }
+  /** Queue a user message (optionally with attachments) to be injected mid-run
+   *  as steering. Returns the new queue length. No-op semantics are the caller's
+   *  concern. */
+  queueMessage(text, attachments = []) {
+    this.userQueue.push({ text, attachments });
+    return this.userQueue.length;
+  }
+  /** Number of messages currently queued. */
+  getQueuedCount() {
+    return this.userQueue.length;
+  }
+  /** Clear the queue, returning the combined text (to restore to the composer).
+   *  Queued attachments are dropped on cancel — the composer only restores text. */
+  drainQueue() {
+    return this.userQueue.splice(0).map((m) => m.text).join("\n\n");
+  }
+  /** Snapshot of background processes (bash run_in_background), newest-state. */
+  listBackgroundProcesses() {
+    return this.processManager?.list() ?? [];
+  }
+  /** Stop a background process by id. Returns a human-readable status string. */
+  async killBackgroundProcess(id2) {
+    if (!this.processManager)
+      return `No background process with id "${id2}"`;
+    return this.processManager.stop(id2);
+  }
+  /**
+   * Toggle plan mode: flips the shared ref (so tools enforce read-only
+   * restrictions) and rebuilds the system prompt in place so the model is told
+   * about the mode change on its next turn. No-op when a custom system prompt
+   * is in force (the host owns the prompt then).
+   */
+  async setPlanMode(active) {
+    this.planModeRef.current = active;
+    if (active)
+      this.approvedPlanPath = void 0;
+    await this.rebuildSystemPromptInPlace();
+  }
+  /**
+   * Bake an approved plan into the system prompt so the model is told to emit
+   * `[DONE:n]` markers as it completes each step (the contract the UI's
+   * plan-progress widget reads). Pass `undefined` to clear it. No-op when a
+   * custom system prompt is in force (the host owns the prompt then).
+   */
+  async setApprovedPlan(approvedPlanPath) {
+    this.approvedPlanPath = approvedPlanPath;
+    await this.rebuildSystemPromptInPlace();
+  }
+  /** Rebuild messages[0] from current plan-mode + approved-plan state. */
+  async rebuildSystemPromptInPlace() {
+    if (this.customSystemPrompt)
+      return;
+    const rebuilt = await buildSystemPrompt(this.cwd, this.skills, this.planModeRef.current, this.approvedPlanPath, this.tools.map((tool) => tool.name), void 0, this.provider);
+    if (this.messages[0]?.role === "system") {
+      this.messages[0] = { role: "system", content: rebuilt };
+    } else {
+      this.messages.unshift({ role: "system", content: rebuilt });
+    }
+  }
   getMessages() {
     return this.messages;
   }
+  /**
+   * Generate a short LLM session title from the conversation so far (first user
+   * message + first assistant reply). Best-effort; returns null on failure or
+   * when there's no user message yet. Uses the cheapest model for the provider.
+   */
+  async generateTitle() {
+    const extractText = (content) => typeof content === "string" ? content : content.map((c2) => c2.type === "text" && "text" in c2 && typeof c2.text === "string" ? c2.text : "").join(" ");
+    const userMsg = this.messages.find((m) => m.role === "user");
+    const assistantMsg = this.messages.find((m) => m.role === "assistant");
+    const userText = userMsg ? extractText(userMsg.content) : "";
+    if (!userText.trim())
+      return null;
+    try {
+      const creds = await this.authStorage.resolveCredentials(this.provider);
+      const title = await generateSessionTitle({
+        provider: this.provider,
+        userMessage: userText,
+        assistantPreview: assistantMsg ? extractText(assistantMsg.content).slice(0, 200) : "",
+        apiKey: creds.accessToken,
+        baseUrl: this.baseUrl ?? creds.baseUrl,
+        accountId: creds.accountId
+      });
+      return title || null;
+    } catch {
+      return null;
+    }
+  }
+  /** Current reasoning/thinking level, or undefined when thinking is off. */
+  getThinkingLevel() {
+    return this.thinkingLevel;
+  }
+  /** Set the reasoning/thinking level (undefined turns thinking off). Takes
+   * effect on the next prompt, since the in-flight loop reads it at start. */
+  setThinkingLevel(level) {
+    this.thinkingLevel = level;
+  }
   /** Replace the abort signal (e.g. after cancellation). */
   setSignal(signal) {
     this.opts = { ...this.opts, signal };
   }
+  /** True when speedProfile is "optimized" (1-h cache TTL + pre-warm). */
+  isSpeedOptimized() {
+    return this.settingsManager?.get("speedProfile") === "optimized";
+  }
+  /** Fire a cache pre-warm request for Anthropic so the first real turn is a
+   *  cache read instead of a cold write. No-op for other providers and when
+   *  speedProfile is not "optimized". Entirely best-effort — any failure is
+   *  swallowed so prewarm never blocks or aborts the real prompt. */
+  async maybePrewarmCache(creds) {
+    if (this.cachePrewarmed || !this.isSpeedOptimized() || this.provider !== "anthropic") {
+      return;
+    }
+    this.cachePrewarmed = true;
+    try {
+      const userAgent = await getClaudeCliUserAgent();
+      const systemText = typeof this.messages[0]?.content === "string" ? this.messages[0].content : "";
+      if (!systemText)
+        return;
+      await prewarmAnthropicCache({
+        apiKey: creds.accessToken,
+        model: this.model,
+        system: systemText,
+        tools: this.tools.map((t) => ({
+          name: t.name,
+          description: t.description,
+          parameters: t.parameters,
+          ...t.rawInputSchema ? { rawInputSchema: t.rawInputSchema } : {}
+        })),
+        baseUrl: this.baseUrl ?? creds.baseUrl,
+        userAgent,
+        cacheRetention: "long",
+        signal: this.opts.signal
+      });
+    } catch {
+    }
+  }
   getPromptCacheKey() {
     if (this.opts.promptCacheKey)
       return this.opts.promptCacheKey;
@@ -86176,7 +87689,7 @@ ${parsed.args}` : promptText;
   async persistMessage(message) {
     if (!this.sessionPath)
       return;
-    const entryId = crypto8.randomUUID();
+    const entryId = crypto9.randomUUID();
     const entry = {
       type: "message",
       id: entryId,
@@ -87045,7 +88558,7 @@ import process14 from "process";
 init_esm_shims();
 var import_react15 = __toESM(require_react(), 1);
 import process13 from "process";
-import fs32 from "fs";
+import fs33 from "fs";
 
 // ../../node_modules/.pnpm/es-toolkit@1.46.1/node_modules/es-toolkit/dist/compat/index.mjs
 init_esm_shims();
@@ -89238,7 +90751,7 @@ function wrapAnsi2(string4, columns, options) {
 init_esm_shims();
 import process5 from "process";
 import { execFileSync as execFileSync2 } from "child_process";
-import fs30 from "fs";
+import fs31 from "fs";
 import tty from "tty";
 var defaultColumns = 80;
 var defaultRows = 24;
@@ -89268,7 +90781,7 @@ var isForegroundProcess = () => {
     return true;
   }
   try {
-    const statContents = fs30.readFileSync("/proc/self/stat", "utf8");
+    const statContents = fs31.readFileSync("/proc/self/stat", "utf8");
     const closingParenthesisIndex = statContents.lastIndexOf(") ");
     if (closingParenthesisIndex === -1) {
       return false;
@@ -89312,8 +90825,8 @@ function terminalSize() {
 }
 var devTty = () => {
   try {
-    const flags = process5.platform === "darwin" ? fs30.constants.O_EVTONLY | fs30.constants.O_NONBLOCK : fs30.constants.O_NONBLOCK;
-    const { columns, rows } = tty.WriteStream(fs30.openSync("/dev/tty", flags));
+    const flags = process5.platform === "darwin" ? fs31.constants.O_EVTONLY | fs31.constants.O_NONBLOCK : fs31.constants.O_NONBLOCK;
+    const { columns, rows } = tty.WriteStream(fs31.openSync("/dev/tty", flags));
     return { columns, rows };
   } catch {
   }
@@ -91125,8 +92638,8 @@ var cleanupYogaNode = (node) => {
 var currentUpdatePriority = import_constants3.NoEventPriority;
 var currentRootNode;
 async function loadPackageJson() {
-  const fs38 = await import("fs");
-  const content = fs38.readFileSync(new URL("../package.json", import.meta.url), "utf8");
+  const fs40 = await import("fs");
+  const content = fs40.readFileSync(new URL("../package.json", import.meta.url), "utf8");
   return JSON.parse(content);
 }
 var packageJson = isDev() ? await loadPackageJson() : { name: void 0, version: void 0 };
@@ -92688,7 +94201,7 @@ var import_react13 = __toESM(require_react(), 1);
 init_esm_shims();
 var import_react12 = __toESM(require_react(), 1);
 var import_stack_utils = __toESM(require_stack_utils(), 1);
-import * as fs31 from "fs";
+import * as fs32 from "fs";
 import { cwd } from "process";
 
 // ../../node_modules/.pnpm/code-excerpt@4.0.0/node_modules/code-excerpt/dist/index.js
@@ -92816,8 +94329,8 @@ function Text({ color: color2, backgroundColor, dimColor = false, bold = false,
 }
 
 // ../../node_modules/.pnpm/ink@6.8.0_patch_hash=6c70099ec5b01a8329f3b7bd932ceef28779e4c7f5795e7ff44fa28c2f9d6782_@types+react@19.2.15_react@19.2.6/node_modules/ink/build/components/ErrorOverview.js
-var cleanupPath = (path46) => {
-  return path46?.replace(`file://${cwd()}/`, "");
+var cleanupPath = (path49) => {
+  return path49?.replace(`file://${cwd()}/`, "");
 };
 var stackUtils = new import_stack_utils.default({
   cwd: cwd(),
@@ -92829,8 +94342,8 @@ function ErrorOverview({ error: error51 }) {
   const filePath = cleanupPath(origin?.file);
   let excerpt;
   let lineWidth = 0;
-  if (filePath && origin?.line && fs31.existsSync(filePath)) {
-    const sourceCode = fs31.readFileSync(filePath, "utf8");
+  if (filePath && origin?.line && fs32.existsSync(filePath)) {
+    const sourceCode = fs32.readFileSync(filePath, "utf8");
     excerpt = dist_default3(sourceCode, origin.line);
     if (excerpt) {
       for (const { line } of excerpt) {
@@ -93649,7 +95162,7 @@ var Ink = class {
       }
       if (process13.env["GG_INK_DEBUG"] === "1" && (delta !== 0 || this.framePadDebt > 0)) {
         try {
-          fs32.appendFileSync("/tmp/gg-ink-debug.log", JSON.stringify({
+          fs33.appendFileSync("/tmp/gg-ink-debug.log", JSON.stringify({
             t: Date.now() % 1e5,
             delta,
             ins: insertLineCount,
@@ -95371,7 +96884,7 @@ var import_react37 = __toESM(require_react(), 1);
 
 // ../cli/dist/core/session-compaction.js
 init_esm_shims();
-import crypto9 from "crypto";
+import crypto10 from "crypto";
 
 // ../cli/dist/ui/hooks/useContextCompaction.js
 init_esm_shims();
@@ -95485,18 +96998,15 @@ var taskBarStore = createStore({
 // ../cli/dist/utils/sound.js
 init_esm_shims();
 import { execFile as execFile2 } from "child_process";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath4 } from "url";
 import { resolve as resolve2, dirname } from "path";
-var __dirname2 = dirname(fileURLToPath3(import.meta.url));
+var __dirname2 = dirname(fileURLToPath4(import.meta.url));
 var notificationPath = resolve2(__dirname2, "../../assets/end-notification.mp3");
 
 // ../cli/dist/ui/hooks/useAgentLoop.js
 init_esm_shims();
 var import_react43 = __toESM(require_react(), 1);
 
-// ../cli/dist/core/loop-breaker.js
-init_esm_shims();
-
 // ../cli/dist/ui/hooks/useTranscriptHistory.js
 init_esm_shims();
 var import_react44 = __toESM(require_react(), 1);
@@ -96105,8 +97615,8 @@ function shortenValue(value, maxLength = MAX_DETAIL_LENGTH) {
   const tailLength = maxLength - 1 - headLength;
   return `${normalized.slice(0, headLength)}\u2026${normalized.slice(-tailLength)}`;
 }
-function basename3(path46) {
-  const trimmed = path46.replace(/\/+$/u, "");
+function basename3(path49) {
+  const trimmed = path49.replace(/\/+$/u, "");
   return trimmed.split("/").filter(Boolean).at(-1) ?? trimmed;
 }
 function uniqueValues(values) {
@@ -109900,8 +111410,8 @@ function ok() {
 
 // ../../node_modules/.pnpm/highlight.js@11.11.1/node_modules/highlight.js/es/core.js
 init_esm_shims();
-var import_core19 = __toESM(require_core3(), 1);
-var core_default = import_core19.default;
+var import_core20 = __toESM(require_core3(), 1);
+var core_default = import_core20.default;
 
 // ../../node_modules/.pnpm/lowlight@3.3.0/node_modules/lowlight/lib/index.js
 var emptyOptions = {};
@@ -111089,7 +112599,7 @@ function collapseSubmittedUserText(text) {
 }
 
 // ../cli/dist/ui/terminal-history.js
-import path37 from "path";
+import path39 from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
 
 // ../cli/dist/ui/utils/terminal-graphics.js
@@ -112135,7 +113645,7 @@ function TaskPickerMenu({ tasks, selectedIndex, width }) {
 // ../cli/dist/ui/components/InputArea.js
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync3, renameSync, unlinkSync, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync3, renameSync, unlinkSync, existsSync as existsSync7 } from "fs";
 var MAX_VISIBLE_LINES = 12;
 var PROMPT = "> ";
 var PLACEHOLDER = "  Type your message or / to run a command";
@@ -112275,7 +113785,7 @@ function compactHistory2() {
     lineCountEstimate = trimmed.length;
   } catch {
     try {
-      if (existsSync5(tempPath))
+      if (existsSync7(tempPath))
         unlinkSync(tempPath);
     } catch {
     }
@@ -113414,7 +114924,7 @@ var import_react69 = __toESM(require_react(), 1);
 
 // ../cli/dist/ui/pixel.js
 init_esm_shims();
-import { existsSync as existsSync6, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join5 } from "path";
 
@@ -113423,9 +114933,9 @@ init_esm_shims();
 import { execFile as execFile3 } from "child_process";
 import { readFileSync as readFileSync6 } from "fs";
 import { dirname as dirname2, join as join4 } from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
+import { fileURLToPath as fileURLToPath5 } from "url";
 function resolveCliVersion() {
-  let dir = dirname2(fileURLToPath4(import.meta.url));
+  let dir = dirname2(fileURLToPath5(import.meta.url));
   for (let i = 0; i < 6; i++) {
     try {
       const manifest = JSON.parse(readFileSync6(join4(dir, "package.json"), "utf8"));
@@ -113454,7 +114964,7 @@ function visualWidth2(str2) {
 }
 
 // ../cli/dist/ui/components/PlanOverlay.js
-import { readdir as readdir2, readFile as readFile3, unlink } from "fs/promises";
+import { readdir as readdir2, readFile as readFile4, unlink } from "fs/promises";
 import { join as join6 } from "path";
 var PLAN_LOGO = [
   " \u2588\u2580\u2580\u2580 \u2580\u2580\u2580\u2588",
@@ -113491,26 +115001,23 @@ import { execFile as execFile4 } from "child_process";
 
 // ../cli/dist/core/auto-update.js
 init_esm_shims();
-import path38 from "path";
+import path40 from "path";
 import os10 from "os";
 var updater = createAutoUpdater({
   packageName: "@prestyj/cli",
-  stateFilePath: () => path38.join(os10.homedir(), ".ezcoder", "update-state.json")
+  stateFilePath: () => path40.join(os10.homedir(), ".ezcoder", "update-state.json")
 });
 var checkAndAutoUpdate = updater.checkAndAutoUpdate;
 var getPendingUpdate = updater.getPendingUpdate;
 var startPeriodicUpdateCheck = updater.startPeriodicUpdateCheck;
 var stopPeriodicUpdateCheck = updater.stopPeriodicUpdateCheck;
 
-// ../cli/dist/utils/session-title.js
-init_esm_shims();
-
 // ../cli/dist/core/setup-history.js
 init_esm_shims();
-import fs33 from "fs";
-import path39 from "path";
+import fs34 from "fs";
+import path41 from "path";
 import os11 from "os";
-var HISTORY_PATH = path39.join(os11.homedir(), ".ezcoder", "setup-history.json");
+var HISTORY_PATH = path41.join(os11.homedir(), ".ezcoder", "setup-history.json");
 
 // ../cli/dist/ui/components/RewindOverlay.js
 init_esm_shims();
@@ -113535,12 +115042,6 @@ init_esm_shims();
 // ../cli/dist/ui/submit-slash-commands.js
 init_esm_shims();
 
-// ../cli/dist/core/ideal-review.js
-init_esm_shims();
-
-// ../cli/dist/core/regrounding.js
-init_esm_shims();
-
 // ../cli/dist/ui/thinking-level.js
 init_esm_shims();
 
@@ -113760,7 +115261,7 @@ function MessageResponse({ children, height, accentColor }) {
 
 // ../cli/dist/ui/utils/highlight.js
 init_esm_shims();
-import path40 from "path";
+import path43 from "path";
 var EXT_TO_LANG = {
   ts: "typescript",
   tsx: "typescript",
@@ -113788,7 +115289,7 @@ var EXT_TO_LANG = {
   dockerfile: "dockerfile"
 };
 function langFromPath(filePath) {
-  const ext = path40.extname(filePath).replace(/^\./, "").toLowerCase();
+  const ext = path43.extname(filePath).replace(/^\./, "").toLowerCase();
   return EXT_TO_LANG[ext];
 }
 var hlModule;
@@ -114588,7 +116089,7 @@ init_esm_shims();
 // ../cli/dist/core/goal-verifier.js
 init_esm_shims();
 import { spawn as spawn9 } from "child_process";
-import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir5, writeFile as writeFile5 } from "fs/promises";
 import { join as join7 } from "path";
 var DEFAULT_GOAL_VERIFIER_TIMEOUT_MS = 10 * 60 * 1e3;
 
@@ -114596,8 +116097,8 @@ var DEFAULT_GOAL_VERIFIER_TIMEOUT_MS = 10 * 60 * 1e3;
 init_esm_shims();
 import { spawn as spawn10 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
-import { createWriteStream, existsSync as existsSync7 } from "fs";
-import { mkdir as mkdir5 } from "fs/promises";
+import { createWriteStream, existsSync as existsSync9 } from "fs";
+import { mkdir as mkdir6 } from "fs/promises";
 import { join as join8 } from "path";
 import { randomUUID as randomUUID5 } from "crypto";
 var DEFAULT_GOAL_WORKER_TIMEOUT_MS = 30 * 60 * 1e3;
@@ -114654,6 +116155,276 @@ var DISABLE_MODIFY_OTHER_KEYS = "\x1B[>4;0m";
 var SCREEN_CLEAR = DISABLE_MODIFY_OTHER_KEYS + "\x1B[2J\x1B[3J\x1B[H";
 var VIEWPORT_CLEAR = DISABLE_MODIFY_OTHER_KEYS + "\x1B[2J\x1B[H";
 
+// ../cli/dist/core/project-discovery.js
+init_esm_shims();
+import fs35 from "fs/promises";
+import { createReadStream as createReadStream3 } from "fs";
+import readline3 from "readline";
+import os12 from "os";
+import path44 from "path";
+async function discoverProjects() {
+  const [gg, cc, cx] = await Promise.all([
+    discoverGgcoderProjects(),
+    discoverClaudeProjects(),
+    discoverCodexProjects()
+  ]);
+  const byPath = /* @__PURE__ */ new Map();
+  for (const p of [...gg, ...cc, ...cx]) {
+    const existing = byPath.get(p.path);
+    if (!existing) {
+      byPath.set(p.path, p);
+      continue;
+    }
+    byPath.set(p.path, {
+      name: existing.name,
+      path: existing.path,
+      lastActiveMs: Math.max(existing.lastActiveMs, p.lastActiveMs),
+      lastActiveDisplay: "",
+      // recomputed below
+      sources: mergeSources(existing.sources, p.sources)
+    });
+  }
+  const merged = Array.from(byPath.values()).map((p) => ({
+    ...p,
+    lastActiveDisplay: formatRelativeTime(p.lastActiveMs)
+  }));
+  merged.sort((a, b) => b.lastActiveMs - a.lastActiveMs);
+  return merged;
+}
+var SOURCE_ORDER = {
+  ezcoder: 0,
+  "claude-code": 1,
+  codex: 2
+};
+function mergeSources(a, b) {
+  const set2 = /* @__PURE__ */ new Set([...a, ...b]);
+  return Array.from(set2).sort((x, y) => SOURCE_ORDER[x] - SOURCE_ORDER[y]);
+}
+async function discoverGgcoderProjects() {
+  const sessionsDir = getAppPaths().sessionsDir;
+  let entries;
+  try {
+    entries = await fs35.readdir(sessionsDir);
+  } catch {
+    return [];
+  }
+  const results = [];
+  for (const entry of entries) {
+    const dir = path44.join(sessionsDir, entry);
+    const mtime = await maxJsonlMtime(dir);
+    if (mtime === null)
+      continue;
+    const decoded = path44.resolve("/" + entry.replace(/_/g, "/"));
+    if (!await isDirectory(decoded))
+      continue;
+    results.push({
+      name: path44.basename(decoded),
+      path: decoded,
+      lastActiveMs: mtime,
+      lastActiveDisplay: formatRelativeTime(mtime),
+      sources: ["ezcoder"]
+    });
+  }
+  return results;
+}
+async function discoverClaudeProjects() {
+  const projectsDir = path44.join(os12.homedir(), ".claude", "projects");
+  let entries;
+  try {
+    entries = await fs35.readdir(projectsDir);
+  } catch {
+    return [];
+  }
+  const results = await Promise.all(entries.map(async (entry) => {
+    const dir = path44.join(projectsDir, entry);
+    const mtime = await maxJsonlMtime(dir);
+    if (mtime === null)
+      return null;
+    const cwd2 = await readFirstFromJsonlDir(dir, claudeCwdExtractor) ?? fallbackDashDecode(entry);
+    if (!cwd2)
+      return null;
+    if (!await isDirectory(cwd2))
+      return null;
+    return {
+      name: path44.basename(cwd2),
+      path: cwd2,
+      lastActiveMs: mtime,
+      lastActiveDisplay: formatRelativeTime(mtime),
+      sources: ["claude-code"]
+    };
+  }));
+  return results.filter((p) => p !== null);
+}
+async function discoverCodexProjects() {
+  const sessionsDir = path44.join(os12.homedir(), ".codex", "sessions");
+  if (!await isDirectory(sessionsDir))
+    return [];
+  const files = await collectJsonlFiles(sessionsDir, 4);
+  if (files.length === 0)
+    return [];
+  files.sort((a, b) => b.mtime - a.mtime);
+  const byCwd = /* @__PURE__ */ new Map();
+  for (const f of files) {
+    const cwd2 = await readFirstFromFile(f.path, codexCwdExtractor);
+    if (!cwd2)
+      continue;
+    const prev = byCwd.get(cwd2);
+    if (prev === void 0 || f.mtime > prev)
+      byCwd.set(cwd2, f.mtime);
+  }
+  const results = [];
+  for (const [cwd2, mtime] of byCwd) {
+    if (!await isDirectory(cwd2))
+      continue;
+    results.push({
+      name: path44.basename(cwd2),
+      path: cwd2,
+      lastActiveMs: mtime,
+      lastActiveDisplay: formatRelativeTime(mtime),
+      sources: ["codex"]
+    });
+  }
+  return results;
+}
+async function isDirectory(p) {
+  try {
+    const s = await fs35.stat(p);
+    return s.isDirectory();
+  } catch {
+    return false;
+  }
+}
+async function maxJsonlMtime(dir) {
+  if (!await isDirectory(dir))
+    return null;
+  const files = await collectJsonlFiles(dir, 2);
+  if (files.length === 0)
+    return null;
+  let max = 0;
+  for (const f of files)
+    if (f.mtime > max)
+      max = f.mtime;
+  return max > 0 ? max : null;
+}
+async function collectJsonlFiles(dir, maxDepth) {
+  const out = [];
+  await walk(dir, 0);
+  return out;
+  async function walk(current, depth) {
+    let entries;
+    try {
+      entries = await fs35.readdir(current, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      const full = path44.join(current, e.name);
+      if (e.isFile() && e.name.endsWith(".jsonl")) {
+        try {
+          const s = await fs35.stat(full);
+          out.push({ path: full, mtime: s.mtimeMs });
+        } catch {
+        }
+      } else if (e.isDirectory() && depth < maxDepth) {
+        await walk(full, depth + 1);
+      }
+    }
+  }
+}
+var claudeCwdExtractor = (line) => {
+  try {
+    const parsed = JSON.parse(line);
+    if (typeof parsed.cwd === "string" && parsed.cwd.startsWith("/"))
+      return parsed.cwd;
+  } catch {
+  }
+  return null;
+};
+var CODEX_CWD_RE = /<cwd>([^<]+)<\/cwd>/;
+var codexCwdExtractor = (line) => {
+  try {
+    const parsed = JSON.parse(line);
+    const cwd2 = parsed.payload?.cwd;
+    if (typeof cwd2 === "string" && cwd2.startsWith("/"))
+      return cwd2;
+  } catch {
+  }
+  const m = CODEX_CWD_RE.exec(line);
+  if (m && m[1] && m[1].startsWith("/"))
+    return m[1];
+  return null;
+};
+async function readFirstFromJsonlDir(dir, extractor) {
+  const files = await collectJsonlFiles(dir, 2);
+  if (files.length === 0)
+    return null;
+  files.sort((a, b) => b.mtime - a.mtime);
+  for (const f of files) {
+    const v = await readFirstFromFile(f.path, extractor);
+    if (v)
+      return v;
+  }
+  return null;
+}
+async function readFirstFromFile(file2, extractor) {
+  return new Promise((resolve3) => {
+    const stream2 = createReadStream3(file2, { encoding: "utf-8" });
+    const rl = readline3.createInterface({ input: stream2, crlfDelay: Infinity });
+    let lines = 0;
+    let done = false;
+    const MAX_LINES2 = 200;
+    const finish = (value) => {
+      if (done)
+        return;
+      done = true;
+      resolve3(value);
+      rl.close();
+      stream2.destroy();
+    };
+    rl.on("line", (line) => {
+      if (done)
+        return;
+      lines++;
+      if (lines > MAX_LINES2) {
+        finish(null);
+        return;
+      }
+      const v = extractor(line);
+      if (v)
+        finish(v);
+    });
+    rl.on("close", () => finish(null));
+    rl.on("error", () => finish(null));
+    stream2.on("error", () => finish(null));
+  });
+}
+function fallbackDashDecode(entry) {
+  if (!entry.startsWith("-"))
+    return null;
+  return "/" + entry.slice(1).replace(/-/g, "/");
+}
+function formatRelativeTime(ms) {
+  if (ms === 0)
+    return "\u2014";
+  const diff3 = Date.now() - ms;
+  if (diff3 < 6e4)
+    return "just now";
+  const min = 6e4;
+  const hour = 60 * min;
+  const day = 24 * hour;
+  const week = 7 * day;
+  const month = 30 * day;
+  if (diff3 < hour)
+    return `${Math.floor(diff3 / min)}m ago`;
+  if (diff3 < day)
+    return `${Math.floor(diff3 / hour)}h ago`;
+  if (diff3 < week)
+    return `${Math.floor(diff3 / day)}d ago`;
+  if (diff3 < month)
+    return `${Math.floor(diff3 / week)}w ago`;
+  return `${Math.floor(diff3 / month)}mo ago`;
+}
+
 // src/boss-store.ts
 init_esm_shims();
 var import_react99 = __toESM(require_react(), 1);
@@ -115918,17 +117689,17 @@ var EventQueue = class {
 
 // src/settings.ts
 init_esm_shims();
-import fs34 from "fs/promises";
-import path41 from "path";
+import fs36 from "fs/promises";
+import path45 from "path";
 function settingsPath() {
-  return path41.join(getAppPaths().agentDir, "boss", "settings.json");
+  return path45.join(getAppPaths().agentDir, "boss", "settings.json");
 }
 async function ensureDir() {
-  await fs34.mkdir(path41.dirname(settingsPath()), { recursive: true, mode: 448 });
+  await fs36.mkdir(path45.dirname(settingsPath()), { recursive: true, mode: 448 });
 }
 async function loadSettings() {
   try {
-    const content = await fs34.readFile(settingsPath(), "utf-8");
+    const content = await fs36.readFile(settingsPath(), "utf-8");
     const parsed = JSON.parse(content);
     if (!parsed || typeof parsed !== "object") return {};
     return parsed;
@@ -115943,8 +117714,8 @@ async function saveSettings(patch) {
     const merged = { ...current, ...patch };
     await ensureDir();
     const tmp = `${settingsPath()}.${process.pid}.tmp`;
-    await fs34.writeFile(tmp, JSON.stringify(merged, null, 2) + "\n", "utf-8");
-    await fs34.rename(tmp, settingsPath());
+    await fs36.writeFile(tmp, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+    await fs36.rename(tmp, settingsPath());
   });
   writeChain = next.catch(() => void 0);
   await next;
@@ -116336,18 +118107,18 @@ init_esm_shims();
 // src/tasks-store.ts
 init_esm_shims();
 var import_react100 = __toESM(require_react(), 1);
-import fs35 from "fs/promises";
-import path43 from "path";
-import crypto10 from "crypto";
+import fs37 from "fs/promises";
+import path46 from "path";
+import crypto11 from "crypto";
 function getPlanPath() {
-  return path43.join(getAppPaths().agentDir, "boss", "plan.json");
+  return path46.join(getAppPaths().agentDir, "boss", "plan.json");
 }
 async function ensureDir2() {
-  await fs35.mkdir(path43.dirname(getPlanPath()), { recursive: true, mode: 448 });
+  await fs37.mkdir(path46.dirname(getPlanPath()), { recursive: true, mode: 448 });
 }
 async function loadPlan() {
   try {
-    const content = await fs35.readFile(getPlanPath(), "utf-8");
+    const content = await fs37.readFile(getPlanPath(), "utf-8");
     const parsed = JSON.parse(content);
     return Array.isArray(parsed.tasks) ? parsed.tasks : [];
   } catch {
@@ -116361,8 +118132,8 @@ async function persist(tasks) {
     await ensureDir2();
     const finalPath = getPlanPath();
     const tmpPath = `${finalPath}.${process.pid}.tmp`;
-    await fs35.writeFile(tmpPath, snapshot, "utf-8");
-    await fs35.rename(tmpPath, finalPath);
+    await fs37.writeFile(tmpPath, snapshot, "utf-8");
+    await fs37.rename(tmpPath, finalPath);
   });
   persistChain = next.catch(() => void 0);
   await next;
@@ -116385,7 +118156,7 @@ function useTasksState() {
   return (0, import_react100.useSyncExternalStore)(subscribe2, getSnapshot2, getSnapshot2);
 }
 function newId() {
-  return crypto10.randomBytes(6).toString("hex");
+  return crypto11.randomBytes(6).toString("hex");
 }
 function now() {
   return (/* @__PURE__ */ new Date()).toISOString();
@@ -116631,12 +118402,12 @@ function createTaskTools(deps) {
 // src/audio.ts
 init_esm_shims();
 import { spawn as spawn11, execFileSync as execFileSync4 } from "child_process";
-import { fileURLToPath as fileURLToPath5 } from "url";
-import path44 from "path";
-import fs36 from "fs";
+import { fileURLToPath as fileURLToPath6 } from "url";
+import path47 from "path";
+import fs38 from "fs";
 function readMp3DurationMs(file2) {
   try {
-    const buf = fs36.readFileSync(file2);
+    const buf = fs38.readFileSync(file2);
     let i = 0;
     if (buf.length >= 10 && buf[0] === 73 && buf[1] === 68 && buf[2] === 51) {
       const tagSize = (buf[6] & 127) << 21 | (buf[7] & 127) << 14 | (buf[8] & 127) << 7 | buf[9] & 127;
@@ -116693,10 +118464,10 @@ function getSplashAudioDurationMs() {
   return ms && ms > 0 ? ms : 1500;
 }
 function assetPath(name) {
-  const here = path44.dirname(fileURLToPath5(import.meta.url));
-  const dist = path44.join(here, name);
-  if (fs36.existsSync(dist)) return dist;
-  return path44.join(here, "..", "assets", name);
+  const here = path47.dirname(fileURLToPath6(import.meta.url));
+  const dist = path47.join(here, name);
+  if (fs38.existsSync(dist)) return dist;
+  return path47.join(here, "..", "assets", name);
 }
 function splashAssetPath() {
   return assetPath("splash.mp3");
@@ -116736,15 +118507,15 @@ function trySpawn(cmd, args) {
 }
 function isWsl() {
   if (process.platform !== "linux") return false;
-  return !!process.env.WSL_DISTRO_NAME || fs36.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop");
+  return !!process.env.WSL_DISTRO_NAME || fs38.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop");
 }
 async function tryPlayOnWindowsHost(file2) {
   try {
-    const here = path44.dirname(fileURLToPath5(import.meta.url));
-    const devAssets = path44.resolve(here, "..", "assets");
-    const resolved = path44.resolve(file2);
-    const inDist = resolved === here || resolved.startsWith(here + path44.sep);
-    const inAssets = resolved === devAssets || resolved.startsWith(devAssets + path44.sep);
+    const here = path47.dirname(fileURLToPath6(import.meta.url));
+    const devAssets = path47.resolve(here, "..", "assets");
+    const resolved = path47.resolve(file2);
+    const inDist = resolved === here || resolved.startsWith(here + path47.sep);
+    const inAssets = resolved === devAssets || resolved.startsWith(devAssets + path47.sep);
     if (!inDist && !inAssets) {
       return false;
     }
@@ -116808,7 +118579,7 @@ async function tryPlayOnWindowsHost(file2) {
   }
 }
 async function playFile(file2) {
-  if (!fs36.existsSync(file2)) return;
+  if (!fs38.existsSync(file2)) return;
   const platform2 = process.platform;
   if (platform2 === "darwin") {
     await trySpawn("afplay", [file2]);
@@ -116906,37 +118677,37 @@ function truncateOversizedToolResults2(messages, opts = {}) {
 
 // src/sessions.ts
 init_esm_shims();
-import fs37 from "fs/promises";
-import path45 from "path";
-import crypto11 from "crypto";
+import fs39 from "fs/promises";
+import path48 from "path";
+import crypto12 from "crypto";
 var BOSS_SUBDIR = "boss";
 var SESSIONS_SUBDIR = "sessions";
 function getBossDir() {
-  return path45.join(getAppPaths().agentDir, BOSS_SUBDIR);
+  return path48.join(getAppPaths().agentDir, BOSS_SUBDIR);
 }
 function getSessionsDir() {
-  return path45.join(getBossDir(), SESSIONS_SUBDIR);
+  return path48.join(getBossDir(), SESSIONS_SUBDIR);
 }
 async function ensureSessionsDir() {
   const dir = getSessionsDir();
-  await fs37.mkdir(dir, { recursive: true, mode: 448 });
+  await fs39.mkdir(dir, { recursive: true, mode: 448 });
   return dir;
 }
 async function createSession2() {
   await ensureSessionsDir();
-  const id2 = `${Date.now()}-${crypto11.randomBytes(4).toString("hex")}`;
-  const filePath = path45.join(getSessionsDir(), `${id2}.jsonl`);
-  await fs37.writeFile(filePath, "", "utf-8");
+  const id2 = `${Date.now()}-${crypto12.randomBytes(4).toString("hex")}`;
+  const filePath = path48.join(getSessionsDir(), `${id2}.jsonl`);
+  await fs39.writeFile(filePath, "", "utf-8");
   return { id: id2, filePath };
 }
 async function appendMessages(filePath, msgs) {
   if (msgs.length === 0) return;
   const lines = msgs.map((m) => JSON.stringify(m)).join("\n") + "\n";
-  await fs37.appendFile(filePath, lines, "utf-8");
+  await fs39.appendFile(filePath, lines, "utf-8");
 }
 async function loadSession2(filePath) {
   try {
-    const content = await fs37.readFile(filePath, "utf-8");
+    const content = await fs39.readFile(filePath, "utf-8");
     const lines = content.split("\n").filter((l) => l.length > 0);
     const messages = [];
     for (const line of lines) {
@@ -116952,8 +118723,8 @@ async function loadSession2(filePath) {
 }
 async function inspectSession(filePath, id2) {
   try {
-    const stat = await fs37.stat(filePath);
-    const content = await fs37.readFile(filePath, "utf-8");
+    const stat = await fs39.stat(filePath);
+    const content = await fs39.readFile(filePath, "utf-8");
     const lines = content.split("\n").filter((l) => l.length > 0);
     let firstUserMessage;
     for (const line of lines) {
@@ -116986,7 +118757,7 @@ async function listSessions2() {
   await ensureSessionsDir();
   let entries;
   try {
-    entries = await fs37.readdir(getSessionsDir());
+    entries = await fs39.readdir(getSessionsDir());
   } catch {
     return [];
   }
@@ -116994,7 +118765,7 @@ async function listSessions2() {
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
     const id2 = name.replace(/\.jsonl$/, "");
-    const info = await inspectSession(path45.join(getSessionsDir(), name), id2);
+    const info = await inspectSession(path48.join(getSessionsDir(), name), id2);
     if (info) infos.push(info);
   }
   infos.sort((a, b) => b.lastModified - a.lastModified);
@@ -117005,7 +118776,7 @@ async function getMostRecent() {
   return all[0] ?? null;
 }
 async function getSessionById(id2) {
-  const filePath = path45.join(getSessionsDir(), `${id2}.jsonl`);
+  const filePath = path48.join(getSessionsDir(), `${id2}.jsonl`);
   return inspectSession(filePath, id2);
 }
 
@@ -117824,6 +119595,7 @@ export {
   MessageResponse,
   ToolExecution,
   ToolGroupExecution,
+  discoverProjects,
   bossToolGroupRenderers,
   useBossState,
   subscribeToBossStore,
@@ -117959,4 +119731,4 @@ react/cjs/react-jsx-runtime.development.js:
    * LICENSE file in the root directory of this source tree.
    *)
 */
-//# sourceMappingURL=chunk-72J6ZGVA.js.map
+//# sourceMappingURL=chunk-HYXLQEZL.js.map