@super-one/cli 0.67.0-alpha.3 → 0.68.0-alpha

package/lib/cli.mjs

@@ -400,10 +400,10 @@ var init_superone_tool_descriptions = __esm({
     AUTOMATION_LIST_DESCRIPTION = "List project automations with schedule and last/next run. Pass id for full prompt, agentConfig, and schedule; filter by query or enabled. Find unknown ids here before automation_apply or automation_delete; check for duplicates before creation when needed.";
     AUTOMATION_APPLY_DESCRIPTION = 'Create or update a project automation. create needs name, prompt, schedule; update needs id plus any field (pause via enabled=false). Call automation_list first for ids; remove with automation_delete. Always opens a user confirmation dialog and applies nothing without approval. For schedule and agentConfig shapes see read_manual({ domain: "product", topic: "automation" }).';
     AUTOMATION_DELETE_DESCRIPTION = "Permanently delete project automations by id (from automation_list). Always opens a user confirmation dialog. Current project only. Prefer automation_list to choose ids first.";
-    TERMINAL_TABS_DESCRIPTION = "Manage activity-panel terminal tabs for long-lived or interactive processes: dev servers, watch modes, REPLs, TUIs, ssh, wizards. One-shot commands (build, test, git) belong in your shell tool. action=list (default) returns this session's tabs plus the user's as a TOON table; other sessions' tabs are hidden. action=run asks to approve `command`, types it into a new or idle tab, and returns the screen; you control the tab only while that command is in the foreground. action=attach asks to control a command already running in a user tab. action=close kills a tab you opened, never one the user is using. Follow with terminal_act / terminal_wait_for / terminal_snapshot.";
+    TERMINAL_TABS_DESCRIPTION = "Only for commands that run until stopped (servers, watchers) or need keyboard input (REPLs, TUIs, ssh, wizards). Non-interactive commands that finish (build, test, install, git) use your shell tool, even if slow. action=list (default) returns this session's tabs plus the user's as a TOON table; other sessions' tabs are hidden. action=run asks to approve `command`, types it into a new or idle tab, and returns the screen; you control the tab only while that command is in the foreground. action=attach asks to control a command already running in a user tab. action=close kills a tab you opened, never one the user is using. For open tabs: terminal_act / terminal_wait_for / terminal_snapshot.";
     TERMINAL_SNAPSHOT_DESCRIPTION = "Read a terminal tab as rendered text. `include` picks sections: screen (visible rows, default), scrollback (last `tail` lines including scrolled-off output), cursor, meta (title, cwd, status, foreground command, control). Use screen for prompts and full-screen programs, scrollback for server logs. Output over the tail cap is spilled to a file and returned as path + preview. Prefer this before terminal_act; use terminal_wait_for instead of polling.";
     TERMINAL_ACT_DESCRIPTION = 'Send input to a terminal tab you control. actions is an array, e.g. [{type:"type",text:"yes"}] or [{type:"key",key:"Ctrl+C"}]; types: type (Enter by default), key (Enter, Tab, Escape, Up, Ctrl+C, F1\u2026), raw, resize, wait. ONE action per call by default; batch 2\u201320 only for an uninterruptible sequence (answer a wizard). Fail-fast. expect holds the call open until a screen condition is met (text, textGone, idleMs, exited); the screen after the batch is returned. Rejected with status=rejected when the approved command has exited or the user took over \u2014 do not retry, call terminal_tabs run again or ask. description is shown to the user instead of raw keystrokes.';
-    TERMINAL_WAIT_FOR_DESCRIPTION = "Block until a terminal tab reaches a state; conditions AND-combine: text (substring visible on screen or in new output), textGone, idleMs (no output for that long), exited (foreground command finished). Use after terminal_tabs run or terminal_act when output arrives asynchronously (a server banner, a build finishing). timeoutMs default 15000, max 120000. Do not sleep+poll with terminal_snapshot yourself.";
+    TERMINAL_WAIT_FOR_DESCRIPTION = "Block until a terminal tab reaches a state; conditions AND-combine: text (substring visible on screen or in new output), textGone, idleMs (no output for that long), exited (foreground command finished). Use after terminal_tabs run or terminal_act when output arrives asynchronously (a server banner, a watch rebuild finishing). timeoutMs default 15000, max 120000. Do not sleep+poll with terminal_snapshot yourself.";
   }
 });
 
@@ -2220,6 +2220,127 @@ var init_host_action_browser_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "browser_run",
+        "description": "Experimental (requires the Jev fast loop setting): delegate a multi-step page goal \u2014 clicks, typing, scrolling \u2014 to a fast model that chooses each step and judges completion itself, so you do not pay a turn per click. Start with goal; add presets for values it may type (never passwords) and, optionally, done_when when the finish is machine-checkable. Before anything irreversible (submit, pay, delete, send, leaving the site) or when unsure, the call returns status=paused with a question; answer it by calling again with runId + answer. Every result carries the final snapshot: verify it. Use for click/fill-heavy tasks on one tab; use browser_act for single steps, drag, keys, uploads.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "description": "Short, human-friendly summary of the goal for the user watching, in the conversation's language.",
+              "type": "string"
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "tab": {
+              "description": "Browser view id. Omit to target the focused browser view.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": "Optional machine-checkable finish (AND-combined, same vocabulary as browser_wait_for). The loop judges completion itself; give this when a URL or element defines it exactly.",
+              "type": "object",
+              "properties": {
+                "selector": {
+                  "type": "string"
+                },
+                "selectorGone": {
+                  "type": "string"
+                },
+                "text": {
+                  "type": "string"
+                },
+                "urlIncludes": {
+                  "type": "string"
+                },
+                "urlMatches": {
+                  "description": "JavaScript regex source matched against the page URL.",
+                  "type": "string"
+                }
+              },
+              "additionalProperties": false
+            }
+          },
+          "additionalProperties": false
+        }
+      },
       {
         "name": "browser_action",
         "description": "Saved semantic browser actions (dynamic catalog \u2014 list then do). action=list (optional domain/name; includeArchived to find archived flows). action=read returns one complete definition by domain+name. action=archive hides a flow and prevents execution; archived=false restores it. action=do runs one saved action with input. action=save creates or replaces a named flow (domain+name) \u2014 read the manual first. This does not record prior browser calls. Use browser_act for one-off clicks/types.",
@@ -2395,7 +2516,7 @@ var init_host_action_computer_descriptors = __esm({
     HOST_ACTION_COMPUTER_DESCRIPTORS = [
       {
         "name": "computer_apps",
-        "description": "Discover and open desktop apps. action=list (default) returns a compact TOON app catalog: one row per app with app, bundleId, running, frontmost, granted, grantScope, pid, windows. Use query to keyword-filter by display name / bundle id / localized aliases (e.g. query=Notes or com.apple.TextEdit). Paginate with offset + limit (default limit 25, max 100); hasMore means call again with offset+=limit. Rows are sorted running/frontmost/granted first. action=focus|launch accepts display name (any locale) or reverse-DNS bundleId; host resolves to a stable bundleId before the permission grant so one allow covers later snapshot/act. Launch/focus returns a slim {target} confirmation. If the user only asks to open an app, launch once and stop when target is returned. Driving an app is computer_snapshot + computer_act; focus only puts a window in front.",
+        "description": "Discover and open desktop apps. action=list (default) returns a compact TOON app catalog: one row per app with app, bundleId, running, frontmost, granted, grantScope, pid, windows. Use query to keyword-filter by display name / bundle id / localized aliases (e.g. query=Notes or com.apple.TextEdit). Paginate with offset + limit (default limit 25, max 100); hasMore means call again with offset+=limit. Rows are sorted running/frontmost/granted first. action=focus|launch accepts display name (any locale) or reverse-DNS bundleId; host resolves to a stable bundleId before the permission grant so one allow covers later snapshot/act. Launch/focus returns a slim {target} confirmation. If the user only asks to open an app, launch once and stop when target is returned. For navigation, forms or search, prefer computer_run when Jev is enabled; batch known button sequences with computer_act. Focus only raises the window and leaves the app in the background; pass activate=true only when the app must stay the active app for a sequence of foreground-only steps (menu bar commands and \u2318 shortcuts work in the background; no activation is needed for them).",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2418,6 +2539,10 @@ var init_host_action_computer_descriptors = __esm({
               "description": "Display name (any locale) or reverse-DNS bundle id for focus/launch. Prefer bundleId from a prior list when known.",
               "type": "string"
             },
+            "activate": {
+              "description": "focus only: make the app frontmost and keep it there. Leave unset so the user keeps their current app; menu bar commands do not need it.",
+              "type": "boolean"
+            },
             "query": {
               "description": "list only: keyword filter on app name / bundleId / aliases",
               "type": "string"
@@ -2447,7 +2572,7 @@ var init_host_action_computer_descriptors = __esm({
       },
       {
         "name": "computer_snapshot",
-        "description": "Capture an immutable UI snapshot and return stateId (analogous to browser_snapshot for desktop apps). All subsequent query/act/wait_for calls must reference this stateId. mode=visual (and fused) saves the image to a temporary file and returns image.path (not base64). The image is NOT loaded into your context automatically; call Read on image.path if you need to look at pixels, and embed image.path in your reply when it is evidence of the result (read_manual product/show-your-work). mode=semantic returns accessibility outline with @eN refs (no image). mode=fused = screenshot + AX. The outline is a TOON table, not JSON: a header row outline[N]{ref,depth,role,name,value,x,y,w,h,can,state}: followed by one CSV-style row per node, in depth-first reading order. depth is the nesting level (a row is a child of the nearest row above it with a smaller depth). can lists only the supported actions, pipe-joined (press|setText|typeText|scroll|focus); empty means the node is inert. state lists only non-default flags (disabled|focused). x,y,w,h are the frame in capture space, empty when the node reports none. truncation.nodesOmitted > 0 means the returned outline was folded \u2014 reach the rest with computer_query, do not recapture. truncation.sourceTruncated means the native accessibility walk itself hit a limit, so those nodes are missing from the full tree too and computer_query cannot reach them either \u2014 narrow the target with capture=window or a specific rootId instead. Use computer_query on the cached outline for search/expand/inspect without recapturing. capture=window (default) captures only the selected window; coordinates are local to that image and remain valid if the window moves. Use capture=display explicitly when the whole display is required. If the window is resized or moves to a different display scale, input fails closed and a successor observation is created.",
+        "description": "Capture an immutable UI snapshot and return stateId (analogous to browser_snapshot for desktop apps). All subsequent query/act/wait_for calls must reference this stateId. mode=visual (and fused) saves the image to a temporary file and returns image.path (not base64). The image is NOT loaded into your context automatically; call Read on image.path if you need to look at pixels, and embed image.path in your reply when it is evidence of the result (read_manual product/show-your-work). mode=semantic returns accessibility outline with @eN refs (no image). mode=fused = screenshot + AX. The outline is a TOON table, not JSON: a header row outline[N]{ref,depth,role,name,value,x,y,w,h,can,state}: followed by one CSV-style row per node, in depth-first reading order. depth is the nesting level (a row is a child of the nearest row above it with a smaller depth). can lists only the supported actions, pipe-joined (press|select|open|setText|typeText|scroll|focus); empty means the node is inert. state lists only non-default flags (disabled|focused). x,y,w,h are the frame in capture space, empty when the node reports none. truncation.nodesOmitted > 0 means the returned outline was folded \u2014 reach the rest with computer_query, do not recapture. truncation.sourceTruncated means the native accessibility walk itself hit a limit, so those nodes are missing from the full tree too and computer_query cannot reach them either \u2014 narrow the target with capture=window or a specific rootId instead. Use computer_query on the cached outline for search/expand/inspect without recapturing. capture=window (default) captures only the selected window; coordinates are local to that image and remain valid if the window moves. Use capture=display explicitly when the whole display is required. If the window is resized or moves to a different display scale, input fails closed and a successor observation is created.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2576,7 +2701,7 @@ var init_host_action_computer_descriptors = __esm({
       },
       {
         "name": "computer_act",
-        "description": "Submit 1\u201320 related UI actions as a checked transaction against a stateId. Set delivery explicitly when you can; that field describes how the three modes differ. Actions: click, typeText, keypress, scroll(dx,dy[,x,y|ref]), drag(path\u22652 points), moveMouse, press/setText (AX). scroll: positive dy scrolls content down; aim with x,y (capture space) or ref center; else window/outline center. drag: path is capture-space points; virtual cursor animates along the path. Returns outcome worked|didnt|unknown based on re-observation (not API success codes): worked when AX readback, expect, typed text, or a meaningful successor outline diff confirms effect; unknown only when applied but unprovable; didnt on hard failure or failed expect. When the successor has pixels, successorImage.path contains the fresh screenshot. Set recording=true to save a short video containing only this action transaction. Stale stateId (UI changed since snapshot) is rejected before side effects. delivery=semantic never silently upgrades to app-directed/physical input.",
+        "description": `Submit 1\u201320 related UI actions as a checked transaction against a stateId. Batch a known button sequence here; prefer computer_run when each next target must be found from new UI state and Jev is enabled. Everything runs in the background: the host drives a ref through its native action when it has one and otherwise posts input to the app; the app is never brought forward and the user keeps their keyboard and pointer. Menu bar commands and \u2318 shortcuts (keypress keys=["cmd+s"]) work there too. Actions: click, typeText, keypress, scroll(dx,dy[,x,y|ref]), drag(path\u22652 points), moveMouse, press/select/open/setText (AX). click on a ref with a native press is that press; otherwise a pointer click at x,y or the ref's center. select chooses a selectable item; open invokes its observed native open action. typeText is keystrokes at the insertion point, subject to the app's own autocorrect and auto-capitalisation; setText sets a value exactly. scroll: positive dy scrolls content down; a ref with a scroll bar is paged by the bar and reports when it has no room left; else a wheel at x,y (capture space), the ref center or the window center. drag: path is capture-space points; virtual cursor animates along the path. Returns outcome worked|didnt|unknown based on re-observation (not API success codes): worked when AX readback, expect, typed text, or a meaningful successor outline diff confirms effect; unknown only when applied but unprovable; didnt on hard failure or failed expect. When the successor has pixels, successorImage.path contains the fresh screenshot. Set recording=true to save a short video containing only this action transaction. Stale stateId (UI changed since snapshot) is rejected before side effects. System-wide hotkeys (\u2318Space, \u2318Tab, screenshots) are not available; they belong to no app.`,
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2600,6 +2725,8 @@ var init_host_action_computer_descriptors = __esm({
                     "type": "string",
                     "enum": [
                       "press",
+                      "select",
+                      "open",
                       "click",
                       "setText",
                       "typeText",
@@ -2677,17 +2804,36 @@ var init_host_action_computer_descriptors = __esm({
                     "notExists",
                     "textEquals",
                     "textContains",
-                    "valueEquals"
+                    "valueEquals",
+                    "newRoot"
                   ]
                 },
                 "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
                   "type": "string"
                 },
                 "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
                   "type": "string"
                 },
                 "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
+                  "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
                   "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
                 }
               },
               "required": [
@@ -2695,24 +2841,15 @@ var init_host_action_computer_descriptors = __esm({
               ],
               "additionalProperties": false
             },
-            "recording": {
-              "description": "Save a video of only this action transaction. Default false.",
-              "type": "boolean"
-            },
             "timeoutMs": {
               "description": "Maximum wait for expect before the action is judged. Default 5000.",
               "type": "integer",
               "minimum": 100,
               "maximum": 6e4
             },
-            "delivery": {
-              "description": "semantic \u2014 pure AX; prefer it whenever actions use @eN refs and the action is press/setText/click(ref)/typeText(ref), the most reliable path for labeled controls. app-directed \u2014 the default when omitted; for coordinate click/type/scroll/drag/keypress or when no usable AX ref exists. Posts CGEvent to the target app PID in the background without stealing frontmost. physical \u2014 global HID; only when app-directed fails. Requires frontmost and is disruptive.",
-              "type": "string",
-              "enum": [
-                "semantic",
-                "app-directed",
-                "physical"
-              ]
+            "recording": {
+              "description": "Save a video of only this action transaction. Default false.",
+              "type": "boolean"
             }
           },
           "required": [
@@ -2723,9 +2860,164 @@ var init_host_action_computer_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "computer_run",
+        "description": `Experimental (Jev setting): pursue desktop UI goals with clicks, typing and scrolling chosen without a model turn per step. Start with app (launched in the background if it is not running) or root, and goal; no computer_apps or computer_snapshot call is needed first. If the exact sequence of buttons is already known, use computer_act with a batch instead. Example: presets=[{key:"Query",value:"cats",field:"Search"}], done_when={kind:"valueEquals",ref:"@e7",value:"cats"}. Native computer_wait_for conditions bind at run start. The loop judges each step's risk and the goal's completion itself; before anything irreversible (save, send, delete, quit, leaving the app) or when unsure it pauses with a question. Resume a pause with runId + answer. Phrase goal as the end state the window will show \u2014 a row inside a folder, a text area ending with a line, no sheet open, an icon in a corner of the icon view \u2014 since the loop reads state sentences like these off the window; prefer done_when when a condition can say it. Uses existing grants and tiers; skips secure fields. Use computer_act for single steps, drag, shortcuts or pixels.`,
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 160,
+              "description": "Short, human-friendly explanation of the goal for the user watching, in the conversation's language."
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "app": {
+              "description": "App name (any locale) or bundle id. Resolves the app grant and its window; an app that is not running or has no window is launched in the background and its first window awaited. Use app or root, not both.",
+              "type": "string"
+            },
+            "root": {
+              "description": "Root id from computer_snapshot/computer_apps. Omit to use the existing target.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": 'Same conditions as computer_wait_for. Bind ref to an element in the starting snapshot, or use {kind:"newRoot",title:"Fonts"} for a new same-app window/panel. newRoot needs title and/or text; supplied filters must all match. No future ref is needed.',
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "enum": [
+                    "exists",
+                    "notExists",
+                    "textEquals",
+                    "textContains",
+                    "valueEquals",
+                    "newRoot"
+                  ]
+                },
+                "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
+                  "type": "string"
+                },
+                "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
+                  "type": "string"
+                },
+                "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
+                  "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
+                  "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "description"
+          ],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "computer_wait_for",
-        "description": "Wait until a UI condition holds. Distinguishes preexisting (already true) from verified (became true). Do not sleep+poll with snapshot yourself.",
+        "description": "Wait until a UI condition holds. Distinguishes preexisting (already true) from verified (became true); failed means the timeout ran out, and observed then carries what the element read as. Do not sleep+poll with snapshot yourself.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2748,17 +3040,36 @@ var init_host_action_computer_descriptors = __esm({
                     "notExists",
                     "textEquals",
                     "textContains",
-                    "valueEquals"
+                    "valueEquals",
+                    "newRoot"
                   ]
                 },
                 "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
                   "type": "string"
                 },
                 "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
                   "type": "string"
                 },
                 "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
+                  "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
                   "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
                 }
               },
               "required": [
@@ -3441,6 +3752,145 @@ var init_host_action_device_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "device_run",
+        "description": 'Experimental (Jev setting): pursue a multi-step touch-device goal with taps, typing, swipes on the list that needs them, going back and long-presses chosen without a model turn per step. Requires existing device_request_control approval; never requests control. Start with goal (said as what the screen shows when done), optional device, presets and done_when; the loop judges risk and completion itself. Example: done_when={kind:"exists",label:"About"}. Risky or uncertain steps pause; resume with runId + answer. A capability pause takes device_act actions; its target bounds are screen fractions. Use device_act for known sequences, single steps, gestures or pixels.',
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 160,
+              "description": "Short, human-friendly explanation of the goal for the user watching, in the conversation's language."
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "device": {
+              "description": "A device already controlled by this session. Required when starting with more than one held device. A resumed run keeps its original device.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": 'Same vocabulary as device_wait_for. label matches the entire accessibility name, which may combine a title and value; prefer an observed identifier. Refs are positional. Example: {kind:"exists",identifier:"details-page"}.',
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "enum": [
+                    "exists",
+                    "notExists",
+                    "textEquals",
+                    "textContains"
+                  ]
+                },
+                "ref": {
+                  "description": "Only valid within the snapshot it came from; prefer label or identifier when waiting.",
+                  "type": "string"
+                },
+                "label": {
+                  "description": "Visible name of the element.",
+                  "type": "string"
+                },
+                "identifier": {
+                  "description": "Developer-assigned id. Survives copy changes and translation \u2014 the most durable target.",
+                  "type": "string"
+                },
+                "text": {
+                  "description": "The string textEquals/textContains compares against. Required by those two kinds, and NOT a way to name an element \u2014 use label for that.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "description"
+          ],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "device_wait_for",
         "description": "Wait until the screen satisfies a condition, instead of snapshotting in a loop. Target the element by label or identifier, never by ref: refs belong to one snapshot and what you are waiting for usually does not exist yet \u2014 text only says what to compare, it never selects. Returns a fresh settled stateId and tree, and reports preexisting vs verified.",
@@ -3672,7 +4122,7 @@ var init_host_action_terminal_descriptors = __esm({
             command: { type: "string", description: "run only. The command the user approves and that is typed into the shell." },
             rule: {
               type: "string",
-              description: 'run only. The rule offered as "always allow in this project" next to the approval: the command cut down to its stable leading words plus ":*", e.g. "bun run:*" for "bun run dev", "git commit:*" for "git commit -m \u2026". It must match `command`; keep it as narrow as the user would want (never a bare "sudo:*" / "ssh:*"). Default: derived from the command.'
+              description: 'run only. The rule offered next to the approval as "allow for this session" / "always allow in this project": a JavaScript regular expression matched against the whole normalized command, e.g. "bun run( .*)?" for "bun run dev", "(\\w+=\\S+ )*bun run dev( .*)?" for "REMOTE_DEBUGGING_PORT=9361 bun run dev", "git commit( .*)?" for "git commit -m \u2026". It must match `command`; keep it as narrow as the user would want (never "sudo.*" / "ssh.*"). Default: derived from the command.'
             },
             cwd: { type: "string", description: "run only. Absolute working directory for a new tab. Default: the session working directory." },
             title: { type: "string", description: "run only. Tab title shown to the user. Default: the command name." },
@@ -8589,9 +9039,9 @@ var init_superone_system_prompt = __esm({
 
 SuperOne tools cover browser, terminal and device control, media, widgets, sessions, collaboration, automations, settings, and mini-apps. Read only the manual topics needed for the task; reuse guidance already in context.
 
-Prefer SuperOne's built-in tools unless the user explicitly requests another tool or no suitable SuperOne tool is available.
+Prefer SuperOne's built-in tools for browser, device, media, widget and session work unless the user explicitly requests another tool or no suitable SuperOne tool is available. Running commands is the exception: your own shell tool stays the default (see Terminals).
 
-Terminals: your own shell tool stays the default for one-shot commands (build, test, git, scripts) that finish on their own. Anything that keeps running or waits for input \u2014 dev servers, watch/hot-reload modes, docker compose up, REPLs, full-screen programs, ssh, interactive wizards \u2014 goes through terminal_tabs run instead of being backgrounded in the shell tool (\`&\`, nohup, setsid): the shell would orphan the process and lose its output, while a terminal tab keeps it visible to the user and lets you keep working with it. Then terminal_wait_for for the ready line or prompt, terminal_snapshot to read the screen, terminal_act to type or send keys, and terminal_tabs close once its job is done. Each command is approved by the user and your control ends when it exits; a rejected result means stop and ask, not retry.
+Terminals: run commands that finish without input in your shell tool, regardless of duration \u2014 a long build, a test suite or an install still belongs there. Use terminal_tabs run only for commands that run until stopped (dev server, watch mode, docker compose up, tail -f) or need keyboard input after launch (REPL, TUI, ssh, interactive wizard). Run those in the foreground of a tab instead of backgrounding them in the shell tool with \`&\`, nohup or setsid. Once a tab is open, use terminal_wait_for for the ready line or prompt, terminal_snapshot to read the screen, terminal_act to type or send keys, and terminal_tabs close when its job is done. Each command is approved by the user and your control ends when it exits; a rejected result means stop and ask, not retry.
 
 Experience memory:
 SuperOne keeps per-target experience notes on this node: browser_memory_* (domain), computer_memory_* (platform + appId), device_memory_* (platform + appId).
@@ -10898,7 +11348,7 @@ function isStaticHostOwnedSuperoneBareName(bare) {
 function isStaticHostOwnedSuperoneToolQualified(qualifiedName) {
   if (!qualifiedName.startsWith(MCP_SUPERONE_TOOL_PREFIX)) return false;
   const bare = qualifiedName.slice(MCP_SUPERONE_TOOL_PREFIX.length);
-  return isStaticHostOwnedSuperoneBareName(bare);
+  return isStaticHostOwnedSuperoneBareName(bare) && !isNeverAutoAllowSuperoneBareName(bare);
 }
 function isNeverAutoAllowSuperoneBareName(bare) {
   return NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES.includes(bare);
@@ -10938,6 +11388,7 @@ var init_superone_host_owned_tools = __esm({
       "browser_emulate",
       "browser_mock",
       "browser_perf_measure",
+      "browser_run",
       "browser_tools_list",
       "browser_tools_call"
     ];
@@ -10961,6 +11412,7 @@ var init_superone_host_owned_tools = __esm({
       "browser_network",
       "browser_perf",
       "browser_action",
+      "browser_run",
       "browser_tools_list",
       "browser_tools_call"
     ];
@@ -10977,6 +11429,7 @@ var init_superone_host_owned_tools = __esm({
       "device_snapshot",
       "device_query",
       "device_act",
+      "device_run",
       "device_wait_for",
       "device_release"
     ];
@@ -11028,7 +11481,7 @@ var init_superone_host_owned_tools = __esm({
     ];
     MINIAPP_LIST_BARE_NAME = "miniapp_list";
     MINIAPP_CALL_BARE_NAME = "miniapp_call";
-    NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES = ["browser_tools_call"];
+    NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES = ["browser_tools_call", "terminal_tabs"];
     STATIC_HOST_OWNED_SUPERONE_QUALIFIED_TOOL_NAMES = [
       ...BUILT_IN_SUPERONE_TOOL_NAMES,
       MINIAPP_LIST_BARE_NAME,
@@ -11037,6 +11490,70 @@ var init_superone_host_owned_tools = __esm({
   }
 });
 
+// ../../packages/shared/src/dead-stream-ledger.ts
+function evict(topLevel, attempt) {
+  const blocks = [...attempt.toolUseIds].map((toolUseId) => ({ type: "tool_use", toolUseId }));
+  if (topLevel && attempt.text) blocks.push({ type: "text", text: attempt.text, fromEnd: true });
+  if (topLevel && attempt.thinking) blocks.push({ type: "thinking", thinking: attempt.thinking, fromEnd: true });
+  return blocks.length > 0 ? { type: "content_retracted", messageId: attempt.messageId, blocks } : null;
+}
+function createDeadStreamLedger() {
+  const attempts = /* @__PURE__ */ new Map();
+  const attemptOf = (parentToolUseId, messageId) => {
+    const key = scopeKey(parentToolUseId);
+    let attempt = attempts.get(key);
+    if (!attempt) {
+      attempt = { messageId, toolUseIds: /* @__PURE__ */ new Set(), text: "", thinking: "" };
+      attempts.set(key, attempt);
+    }
+    return attempt;
+  };
+  return {
+    begin(parentToolUseId, messageId) {
+      const key = scopeKey(parentToolUseId);
+      const previous = attempts.get(key);
+      attempts.set(key, { messageId, toolUseIds: /* @__PURE__ */ new Set(), text: "", thinking: "" });
+      const retracted = previous ? evict(key === "", previous) : null;
+      return retracted ? [retracted] : [];
+    },
+    announceToolUse(parentToolUseId, messageId, toolUseId) {
+      if (toolUseId) attemptOf(parentToolUseId, messageId).toolUseIds.add(toolUseId);
+    },
+    announceText(parentToolUseId, messageId, text2) {
+      if (parentToolUseId === null) attemptOf(parentToolUseId, messageId).text += text2;
+    },
+    announceThinking(parentToolUseId, messageId, thinking) {
+      if (parentToolUseId === null) attemptOf(parentToolUseId, messageId).thinking += thinking;
+    },
+    confirm(parentToolUseId, content) {
+      const attempt = attempts.get(scopeKey(parentToolUseId));
+      if (!attempt || !Array.isArray(content)) return;
+      for (const block of content) {
+        if (!block || typeof block !== "object") continue;
+        if (block.type === "tool_use" && typeof block.id === "string") attempt.toolUseIds.delete(block.id);
+        else if (block.type === "text") attempt.text = "";
+        else if (block.type === "thinking") attempt.thinking = "";
+      }
+    },
+    flush() {
+      const events = [];
+      for (const [key, attempt] of attempts) {
+        const retracted = evict(key === "", attempt);
+        if (retracted) events.push(retracted);
+      }
+      attempts.clear();
+      return events;
+    }
+  };
+}
+var scopeKey;
+var init_dead_stream_ledger = __esm({
+  "../../packages/shared/src/dead-stream-ledger.ts"() {
+    "use strict";
+    scopeKey = (parentToolUseId) => parentToolUseId ?? "";
+  }
+});
+
 // ../../packages/shared/src/model-fallback-wire.ts
 function str(value) {
   return typeof value === "string" && value ? value : void 0;
@@ -11188,6 +11705,7 @@ var init_harness_capabilities = __esm({
         // each turn and keeps going until it is met, so there is no paused state —
         // the goal is either live or cleared.
         goal: { lifecycleArgs: ["clear"], canPause: false, transport: "slash", semantics: "condition" },
+        terminalCommandApproval: "harness",
         displayName: "Claude"
       },
       codex: {
@@ -11207,6 +11725,7 @@ var init_harness_capabilities = __esm({
         // `thread/goal/{get,set,clear}` over the app server; SuperOne drives the
         // follow-up turns itself, so every transition is an explicit RPC.
         goal: { lifecycleArgs: [], canPause: true, transport: "rpc", semantics: "objective" },
+        terminalCommandApproval: "harness",
         displayName: "Codex"
       },
       acp: {
@@ -11239,6 +11758,7 @@ var init_harness_capabilities = __esm({
           transport: "slash",
           semantics: "objective"
         },
+        terminalCommandApproval: "harness",
         displayName: "Others"
       },
       opencode: {
@@ -11255,6 +11775,7 @@ var init_harness_capabilities = __esm({
         // Server-side `forkSession(id, anchor)` + `moveSession`.
         supportsFork: true,
         goal: null,
+        terminalCommandApproval: "harness",
         displayName: "OpenCode"
       },
       cursor: {
@@ -11272,6 +11793,8 @@ var init_harness_capabilities = __esm({
         // SDK has no transcript-fork API; the adapter creates a blank agent.
         supportsFork: false,
         goal: null,
+        // The @cursor/sdk local executor auto-approves custom tools with no host hook.
+        terminalCommandApproval: "executor",
         displayName: "Cursor"
       },
       dsh: {
@@ -11298,6 +11821,7 @@ var init_harness_capabilities = __esm({
         // `runtime.forkSession` copies the log prefix up to an event seq.
         supportsFork: true,
         goal: null,
+        terminalCommandApproval: "harness",
         displayName: "DeepSeek"
       }
     };
@@ -11497,6 +12021,7 @@ function createClaudeAgentEventMapper(options) {
   let lastAssistantUsage = null;
   let lastTopLevelAssistantUuid = "";
   const retractions = createRetractionLedger();
+  const deadStreams = createDeadStreamLedger();
   let lastReplayCheckpointId = "";
   let lastAssistantTypedError;
   let lastAssistantRequestId;
@@ -11824,6 +12349,7 @@ function createClaudeAgentEventMapper(options) {
           const requestId = raw.request_id ?? raw.requestId;
           if (requestId) lastAssistantRequestId = String(requestId);
           if (raw.message?.model) lastAssistantModel = String(raw.message.model);
+          deadStreams.confirm(assistantParent, raw.message?.content);
           if (!assistantParent) {
             lastTopLevelAssistantUuid = raw.uuid ?? "";
             for (const retracted of retractions.resolve(raw.supersedes)) emit(retracted);
@@ -11900,16 +12426,19 @@ ${text2}` : text2;
             const toolName = event.content_block.name ?? "unknown";
             activeToolBlocks.set(event.index, toolUseId);
             toolIdToName.set(toolUseId, toolName);
+            deadStreams.announceToolUse(streamParent, messageId, toolUseId);
             emit({ type: "content_delta", messageId, delta: { type: "tool_use", toolName, toolUseId, input: "", status: "streaming", parentToolUseId: streamParent } });
           } else if (event.type === "content_block_start" && event.content_block?.type === "thinking") {
             const timestamp = now();
             emit({ type: "content_delta", messageId, delta: { type: "thinking", thinking: "", parentToolUseId: streamParent, startedAt: timestamp, endedAt: timestamp } });
           } else if (event.type === "content_block_delta") {
             if (event.delta?.type === "text_delta" && event.delta.text) {
+              deadStreams.announceText(streamParent, messageId, event.delta.text);
               emit({ type: "content_delta", messageId, delta: { type: "text", text: event.delta.text, parentToolUseId: streamParent } });
               return { ...emptyResult(sessionId), textDelta: event.delta.text };
             }
             if (event.delta?.type === "thinking_delta" && typeof event.delta.thinking === "string") {
+              deadStreams.announceThinking(streamParent, messageId, event.delta.thinking);
               emit({ type: "content_delta", messageId, delta: { type: "thinking", thinking: event.delta.thinking, parentToolUseId: streamParent, endedAt: now() } });
             } else if (event.delta?.type === "input_json_delta" && event.delta.partial_json) {
               emit({
@@ -11923,6 +12452,7 @@ ${text2}` : text2;
           } else if (event.type === "content_block_stop") {
             activeToolBlocks.delete(event.index);
           } else if (event.type === "message_start") {
+            for (const retracted of deadStreams.begin(streamParent, messageId)) emit(retracted);
             emit({ type: "stream_message_start", messageId, apiMessageId: event.message?.id ?? "", model: event.message?.model ?? "", parentToolUseId: streamParent });
           } else if (event.type === "message_stop") {
             emit({ type: "stream_message_stop", messageId, parentToolUseId: streamParent });
@@ -11993,6 +12523,8 @@ ${text2}` : text2;
             rejectedRateLimit: hasRejectedRateLimit,
             resetsAt: rejectedRateLimitResetsAt
           });
+          const ghosts = deadStreams.flush();
+          if (!interrupted) for (const retracted of ghosts) emit(retracted);
           if (interrupted) {
             emit({ type: "message_interrupted", messageId, metadata });
             activeBackgroundTasks.clear();
@@ -12057,6 +12589,7 @@ ${text2}` : text2;
 var init_agent_event_mapper2 = __esm({
   "../../packages/claude/src/agent-event-mapper.ts"() {
     "use strict";
+    init_dead_stream_ledger();
     init_model_fallback_wire();
     init_slash_commands();
     init_session_goal();
@@ -12277,6 +12810,22 @@ var init_map_sdk_message = __esm({
   }
 });
 
+// ../../packages/claude/src/provider-settings-env.ts
+function providerSettingsEnv(providerEnv) {
+  if (!providerEnv) return void 0;
+  const env = {};
+  for (const [key, value] of Object.entries(providerEnv)) {
+    if (value !== void 0) env[key] = value;
+  }
+  if (env.ANTHROPIC_API_KEY && !("ANTHROPIC_AUTH_TOKEN" in env)) env.ANTHROPIC_AUTH_TOKEN = "";
+  return Object.keys(env).length > 0 ? env : void 0;
+}
+var init_provider_settings_env = __esm({
+  "../../packages/claude/src/provider-settings-env.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/claude/src/resolve-sdk-binary.ts
 import { createRequire } from "node:module";
 import { existsSync as existsSync5 } from "node:fs";
@@ -12444,6 +12993,7 @@ var init_run_sdk_turn = __esm({
     init_superone_host_owned_tools();
     init_map_sdk_message();
     init_agent_event_mapper2();
+    init_provider_settings_env();
     init_resolve_sdk_binary();
     init_root_permission_guard();
     init_ask_user_question_bridge();
@@ -12533,9 +13083,21 @@ function hasProviderModelMappingEnv(env) {
   if (!env) return false;
   return MODEL_MAPPING_ENV_IDS.some((key) => !!env[key]);
 }
+function claudeIdToBucket(id) {
+  const lower = id.toLowerCase();
+  if (lower.includes("opus")) return "opus";
+  if (lower.includes("sonnet")) return "sonnet";
+  if (lower.includes("haiku")) return "haiku";
+  return "default";
+}
 function resolveMappedClaudeModelId(model, env) {
-  if (!model || !hasOneM(model)) return model;
-  return hasProviderModelMappingEnv(env) ? stripOneM(model) : model;
+  if (!model || !env || !hasProviderModelMappingEnv(env)) return model;
+  const bucket = claudeIdToBucket(model);
+  if (bucket !== "default" && env[BUCKET_ENV_KEYS[bucket].id]) return bucket;
+  const defaultSlot = env[BUCKET_ENV_KEYS.default.id];
+  if (defaultSlot) return defaultSlot;
+  if (env[BUCKET_ENV_KEYS.opus.id]) return "opus";
+  return stripOneM(model);
 }
 var SESSION_AGENT_LAUNCHES_FIELD, SESSION_AGENT_TASK_MAX, DEFAULT_CONTEXT_WINDOW, CODEX_GPT_5_6_CONTEXT_WINDOW, CODEX_PERMISSION_PRESETS, DEFAULT_CODEX_PERMISSION_PRESET, DEFAULT_CODEX_PERMISSION_PROFILE, MODEL_BUCKETS, BUCKET_ENV_KEYS, ONE_M_SUFFIX, MODEL_MAPPING_ENV_IDS;
 var init_agent_types = __esm({
@@ -12662,6 +13224,7 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
   const binaryPath = (opts.binaryPath && existsSync6(opts.binaryPath) ? opts.binaryPath : null) ?? resolveSdkClaudeBinary() ?? void 0;
   const effort = opts.effort === "low" || opts.effort === "medium" || opts.effort === "high" || opts.effort === "xhigh" || opts.effort === "max" ? opts.effort : void 0;
   const env = opts.env ? { ...process.env, ...opts.env } : void 0;
+  const settingsEnv = providerSettingsEnv(opts.env);
   const sandbox = opts.sandboxMode === "on" || opts.sandboxMode === "auto" ? {
     enabled: true,
     autoAllowBashIfSandboxed: opts.sandboxMode === "auto",
@@ -12707,7 +13270,8 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
     ...opts.sessionId ? { resume: opts.sessionId } : {},
     ...opts.resumeSessionAt ? { resumeSessionAt: opts.resumeSessionAt } : {},
     ...opts.resumeDropsTurn ? { resumeDropsTurn: opts.resumeDropsTurn } : {},
-    ...env ? { env } : {}
+    ...env ? { env } : {},
+    ...settingsEnv ? { settings: { env: settingsEnv } } : {}
   };
   return {
     ...base,
@@ -12734,6 +13298,7 @@ var init_claude_live_session = __esm({
     init_message_bridge();
     init_agent_event_mapper2();
     init_map_sdk_message();
+    init_provider_settings_env();
     init_resolve_sdk_binary();
     init_root_permission_guard();
     init_ask_user_question_bridge();
@@ -13137,6 +13702,7 @@ var init_src2 = __esm({
   "../../packages/claude/src/index.ts"() {
     "use strict";
     init_run_sdk_turn();
+    init_provider_settings_env();
     init_message_bridge();
     init_claude_live_session();
     init_agent_event_mapper2();
@@ -17868,11 +18434,20 @@ function protocolServes(protocol, task) {
 function isVideoWire(protocol) {
   return VIDEO_WIRES.includes(protocol);
 }
+function isVersionedRoot(url2) {
+  return VERSIONED_ROOT.test(url2);
+}
 function familyBaseUrl(family, baseUrl) {
   const trimmed = baseUrl.replace(/\/+$/, "");
-  if (!trimmed || /\/(?:api\/)?v\d+(?:alpha|beta)?$/.test(trimmed)) return trimmed;
+  if (!trimmed || isVersionedRoot(trimmed)) return trimmed;
   return `${trimmed}${FAMILY_PATH[family]}`;
 }
+function joinRootAndPrefix(root, prefix, family) {
+  if (!prefix) return root;
+  if (root.endsWith(prefix)) return root;
+  if (prefix === FAMILY_PATH[family] && isVersionedRoot(root)) return root;
+  return `${root}${prefix}`;
+}
 function protocolRoute(protocol) {
   return `${FAMILY_PATH[PROTOCOL_FAMILY[protocol]]}${PROTOCOL_ROUTE[protocol]}`;
 }
@@ -17901,10 +18476,12 @@ function normalizeRouteShape(route) {
 function endpointBaseUrl(siteRoot, endpoint, protocol) {
   const root = (endpoint.baseUrl || siteRoot).replace(/\/+$/, "");
   if (!root) return "";
+  const family = PROTOCOL_FAMILY[protocol];
   const route = endpointRoute(endpoint, protocol);
   const suffix = PROTOCOL_ROUTE[protocol];
-  const prefix = route.endsWith(suffix) ? route.slice(0, route.length - suffix.length) : FAMILY_PATH[PROTOCOL_FAMILY[protocol]];
-  return `${root}${prefix}`;
+  if (root.endsWith(suffix)) return root.slice(0, root.length - suffix.length);
+  const prefix = route.endsWith(suffix) ? route.slice(0, route.length - suffix.length) : FAMILY_PATH[family];
+  return joinRootAndPrefix(root, prefix, family);
 }
 function harnessChatProtocols(harness, options) {
   if (harness === "claude" && options?.experimentalClaudeOpenAiChatEnabled) {
@@ -17912,7 +18489,7 @@ function harnessChatProtocols(harness, options) {
   }
   return HARNESS_CHAT_PROTOCOLS[harness];
 }
-var PROTOCOL_TASKS, PROTOCOL_FAMILIES, FAMILY_PROTOCOLS, PROTOCOL_FAMILY, WIRE_PROTOCOLS, PROTOCOL_ORDER, VIDEO_WIRES, FAMILY_PATH, PROTOCOL_ROUTE, ROUTE_PROTOCOL, HARNESS_CHAT_PROTOCOLS, PROXY_TRANSFORMERS_ENV;
+var PROTOCOL_TASKS, PROTOCOL_FAMILIES, FAMILY_PROTOCOLS, PROTOCOL_FAMILY, WIRE_PROTOCOLS, PROTOCOL_ORDER, VIDEO_WIRES, FAMILY_PATH, VERSIONED_ROOT, PROTOCOL_ROUTE, ROUTE_PROTOCOL, HARNESS_CHAT_PROTOCOLS, PROXY_TRANSFORMERS_ENV;
 var init_protocols = __esm({
   "../../packages/shared/src/platform-registry/protocols.ts"() {
     "use strict";
@@ -17950,6 +18527,7 @@ var init_protocols = __esm({
       newapi: "/v1",
       google: "/v1beta"
     };
+    VERSIONED_ROOT = /\/(?:api\/)?v\d+(?:alpha|beta)?$/;
     PROTOCOL_ROUTE = {
       "anthropic-messages": "/v1/messages",
       "openai-chat": "/chat/completions",
@@ -18124,6 +18702,19 @@ var init_capabilities2 = __esm({
   }
 });
 
+// ../../packages/shared/src/platform-registry/claude-env.ts
+function claudeThirdPartyEnv(resolved) {
+  if (CLI_KNOWN_BRANDS.has(resolved.brand)) return {};
+  return { CLAUDE_CODE_MODEL_CAPABILITIES: "-mid_conv_tool_change" };
+}
+var CLI_KNOWN_BRANDS;
+var init_claude_env = __esm({
+  "../../packages/shared/src/platform-registry/claude-env.ts"() {
+    "use strict";
+    CLI_KNOWN_BRANDS = /* @__PURE__ */ new Set(["anthropic", "claude", "bedrock", "vertexai"]);
+  }
+});
+
 // ../../packages/shared/src/model-tasks.ts
 var init_model_tasks = __esm({
   "../../packages/shared/src/model-tasks.ts"() {
@@ -18310,16 +18901,16 @@ function openaiChat(prefix, opts = {}) {
     models: opts.models
   };
 }
-var XIAOMI_MODELS, BAILIAN_CODING_PLAN_MODELS, BAILIAN_TOKEN_PLAN_MODELS, BAILIAN_API_MODELS, GLM_MODELS, MINIMAX_MODELS, DOUBAO_MODELS, SEEDANCE_MODELS, SORA_MODELS, VEO_MODELS, ARK_CODE_MODELS, KIMI_API_MODELS, KIMI_ANDANTE_MODELS, KIMI_ANDANTE_ENDPOINT_MODELS, KIMI_MODERATO_MODELS, KIMI_MODERATO_ENDPOINT_MODELS, KIMI_ALLEGRETTO_MODELS, KIMI_ALLEGRETTO_ENDPOINT_MODELS, NVIDIA_MODELS, CODING_TIMEOUT, DISABLE_NONESSENTIAL, EMPTY_AUTH_TOKEN, KIMI_BASE_EXTRA_ENV, KIMI_CTX_256K, KIMI_CTX_1M, KIMI_ANDANTE_EXTRA_ENV, KIMI_MODERATO_EXTRA_ENV, KIMI_ALLEGRETTO_EXTRA_ENV, KIMI_EXTRA_ENV, BUILTIN_PLATFORMS;
+var XIAOMI_MODELS, BAILIAN_CODING_PLAN_MODELS, BAILIAN_TOKEN_PLAN_MODELS, BAILIAN_API_MODELS, GLM_MODELS, MINIMAX_MODELS, DOUBAO_MODELS, SEEDANCE_MODELS, SORA_MODELS, VEO_MODELS, ARK_CODE_MODELS, KIMI_API_MODELS, KIMI_PLUS_MODELS, KIMI_PLUS_ENDPOINT_MODELS, KIMI_PRO_MODELS, KIMI_PRO_ENDPOINT_MODELS, KIMI_ANDANTE_MODELS, KIMI_ANDANTE_ENDPOINT_MODELS, KIMI_MODERATO_MODELS, KIMI_MODERATO_ENDPOINT_MODELS, KIMI_ALLEGRETTO_MODELS, KIMI_ALLEGRETTO_ENDPOINT_MODELS, KAT_CODER_MODELS, NVIDIA_MODELS, CODING_TIMEOUT, DISABLE_NONESSENTIAL, EMPTY_AUTH_TOKEN, MINIMAX_EXTRA_ENV, KIMI_BASE_EXTRA_ENV, KIMI_CTX_256K, KIMI_CTX_1M, KIMI_ANDANTE_EXTRA_ENV, KIMI_PLUS_EXTRA_ENV, KIMI_PRO_EXTRA_ENV, KIMI_MODERATO_EXTRA_ENV, KIMI_ALLEGRETTO_EXTRA_ENV, KIMI_EXTRA_ENV, BUILTIN_PLATFORMS;
 var init_builtin = __esm({
   "../../packages/shared/src/platform-registry/builtin.ts"() {
     "use strict";
     init_effective_endpoints();
     init_protocols();
     XIAOMI_MODELS = {
-      default: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
-      opus: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
-      sonnet: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
+      default: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
+      opus: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
+      sonnet: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
       haiku: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" }
     };
     BAILIAN_CODING_PLAN_MODELS = {
@@ -18330,11 +18921,11 @@ var init_builtin = __esm({
       subagent: { id: "qwen3.7-plus", name: "Qwen 3.7 Plus" }
     };
     BAILIAN_TOKEN_PLAN_MODELS = {
-      default: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
-      opus: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
-      sonnet: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
+      default: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
+      opus: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
+      sonnet: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
       haiku: { id: "qwen3.6-flash", name: "Qwen 3.6 Flash" },
-      subagent: { id: "qwen3.7-max", name: "Qwen 3.7 Max" }
+      subagent: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" }
     };
     BAILIAN_API_MODELS = {
       default: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
@@ -18344,22 +18935,23 @@ var init_builtin = __esm({
       subagent: { id: "qwen3.7-max", name: "Qwen 3.7 Max" }
     };
     GLM_MODELS = {
-      default: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      opus: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      sonnet: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      haiku: { id: "glm-4.5-air", name: "GLM-4.5 Air" }
+      default: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      opus: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      sonnet: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      haiku: { id: "glm-5.3-flash[1m]", name: "GLM-5.3 Flash" }
     };
     MINIMAX_MODELS = {
       default: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
       opus: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
-      sonnet: { id: "MiniMax-M3", name: "MiniMax M3" },
-      haiku: { id: "MiniMax-M3", name: "MiniMax M3" }
+      sonnet: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
+      haiku: { id: "MiniMax-M3[1m]", name: "MiniMax M3" }
     };
     DOUBAO_MODELS = {
-      default: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      opus: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      sonnet: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      haiku: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" }
+      default: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      opus: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      sonnet: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      haiku: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      subagent: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" }
     };
     SEEDANCE_MODELS = [
       { id: "doubao-seedance-2-0-260128", name: "Seedance 2.0", tasks: ["video"] },
@@ -18384,15 +18976,39 @@ var init_builtin = __esm({
       default: { id: "ark-code-latest", name: "Ark Code Latest" },
       opus: { id: "ark-code-latest", name: "Ark Code Latest" },
       sonnet: { id: "ark-code-latest", name: "Ark Code Latest" },
-      haiku: { id: "ark-code-latest", name: "Ark Code Latest" }
+      haiku: { id: "ark-code-latest", name: "Ark Code Latest" },
+      subagent: { id: "ark-code-latest", name: "Ark Code Latest" }
     };
     KIMI_API_MODELS = {
-      default: { id: "kimi-k3", name: "Kimi K3" },
-      opus: { id: "kimi-k3", name: "Kimi K3" },
-      sonnet: { id: "kimi-k3", name: "Kimi K3" },
-      haiku: { id: "kimi-k2.7-code-highspeed", name: "Kimi K2.7 Code HighSpeed" },
-      subagent: { id: "kimi-k3", name: "Kimi K3" }
+      default: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      opus: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      sonnet: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      haiku: { id: "kimi-k2.7-code", name: "Kimi K2.7 Code" },
+      subagent: { id: "kimi-k3[1m]", name: "Kimi K3" }
+    };
+    KIMI_PLUS_MODELS = {
+      default: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      opus: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      sonnet: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      haiku: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      subagent: { id: "k3-256k", name: "Kimi K3 (256K)" }
+    };
+    KIMI_PLUS_ENDPOINT_MODELS = [
+      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
+      { id: "k3-256k", name: "Kimi K3 (256K)", tasks: ["chat"] },
+      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] }
+    ];
+    KIMI_PRO_MODELS = {
+      default: { id: "k3[1m]", name: "Kimi K3" },
+      opus: { id: "k3[1m]", name: "Kimi K3" },
+      sonnet: { id: "k3[1m]", name: "Kimi K3" },
+      haiku: { id: "k3[1m]", name: "Kimi K3" },
+      subagent: { id: "k3[1m]", name: "Kimi K3" }
     };
+    KIMI_PRO_ENDPOINT_MODELS = [
+      ...KIMI_PLUS_ENDPOINT_MODELS,
+      { id: "kimi-for-coding-highspeed", name: "Kimi for Coding HighSpeed", tasks: ["chat"] }
+    ];
     KIMI_ANDANTE_MODELS = {
       default: { id: "kimi-for-coding", name: "Kimi for Coding" },
       opus: { id: "kimi-for-coding", name: "Kimi for Coding" },
@@ -18410,10 +19026,7 @@ var init_builtin = __esm({
       haiku: { id: "kimi-for-coding", name: "Kimi for Coding" },
       subagent: { id: "k3", name: "Kimi K3" }
     };
-    KIMI_MODERATO_ENDPOINT_MODELS = [
-      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
-      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] }
-    ];
+    KIMI_MODERATO_ENDPOINT_MODELS = KIMI_PLUS_ENDPOINT_MODELS;
     KIMI_ALLEGRETTO_MODELS = {
       default: { id: "k3[1m]", name: "Kimi K3" },
       opus: { id: "k3[1m]", name: "Kimi K3" },
@@ -18421,11 +19034,14 @@ var init_builtin = __esm({
       haiku: { id: "kimi-for-coding", name: "Kimi for Coding" },
       subagent: { id: "k3[1m]", name: "Kimi K3" }
     };
-    KIMI_ALLEGRETTO_ENDPOINT_MODELS = [
-      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
-      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] },
-      { id: "kimi-for-coding-highspeed", name: "Kimi for Coding HighSpeed", tasks: ["chat"] }
-    ];
+    KIMI_ALLEGRETTO_ENDPOINT_MODELS = KIMI_PRO_ENDPOINT_MODELS;
+    KAT_CODER_MODELS = {
+      default: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      opus: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      sonnet: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      haiku: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      subagent: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" }
+    };
     NVIDIA_MODELS = {
       default: { id: "moonshotai/kimi-k3", name: "Kimi K3" },
       opus: { id: "moonshotai/kimi-k3", name: "Kimi K3" },
@@ -18435,6 +19051,12 @@ var init_builtin = __esm({
     CODING_TIMEOUT = { API_TIMEOUT_MS: "3000000" };
     DISABLE_NONESSENTIAL = { CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1" };
     EMPTY_AUTH_TOKEN = { ANTHROPIC_AUTH_TOKEN: "" };
+    MINIMAX_EXTRA_ENV = {
+      ...CODING_TIMEOUT,
+      CLAUDE_CODE_AUTO_COMPACT_WINDOW: "1000000",
+      ...DISABLE_NONESSENTIAL,
+      ...EMPTY_AUTH_TOKEN
+    };
     KIMI_BASE_EXTRA_ENV = {
       ...CODING_TIMEOUT,
       ENABLE_TOOL_SEARCH: "false",
@@ -18451,21 +19073,24 @@ var init_builtin = __esm({
     };
     KIMI_ANDANTE_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
-      ...KIMI_CTX_256K
+      ...KIMI_CTX_1M
     };
-    KIMI_MODERATO_EXTRA_ENV = {
+    KIMI_PLUS_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
       ...KIMI_CTX_256K,
-      CLAUDE_CODE_EFFORT_LEVEL: "max"
+      CLAUDE_CODE_EFFORT_LEVEL: "high"
     };
-    KIMI_ALLEGRETTO_EXTRA_ENV = {
+    KIMI_PRO_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
       ...KIMI_CTX_1M,
-      CLAUDE_CODE_EFFORT_LEVEL: "max"
+      CLAUDE_CODE_EFFORT_LEVEL: "high"
     };
+    KIMI_MODERATO_EXTRA_ENV = KIMI_PLUS_EXTRA_ENV;
+    KIMI_ALLEGRETTO_EXTRA_ENV = KIMI_PRO_EXTRA_ENV;
     KIMI_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
-      ...KIMI_CTX_1M
+      ...KIMI_CTX_1M,
+      CLAUDE_CODE_EFFORT_LEVEL: "max"
     };
     BUILTIN_PLATFORMS = [
       // Official subscription (OAuth) — Credential rows exist so bindings have a target, but hold no secret.
@@ -18617,10 +19242,67 @@ var init_builtin = __esm({
         description: "Kimi Code \u2014 \u7F16\u7A0B\u5957\u9910\u8BA2\u9605\uFF0C\u6309\u4F1A\u5458\u6863\u4F4D\u533A\u5206\u6A21\u578B\u4E0E\u4E0A\u4E0B\u6587\u914D\u7F6E",
         catalogProviderId: "moonshotai",
         plans: [
+          {
+            id: "plus",
+            name: "Plus",
+            description: "Kimi Code Plus \u2014 k3-256k / kimi-for-coding\uFF0CK3 \u9650 256k \u4E0A\u4E0B\u6587",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PLUS_EXTRA_ENV,
+                modelMapping: KIMI_PLUS_MODELS,
+                models: KIMI_PLUS_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PLUS_MODELS,
+                models: KIMI_PLUS_ENDPOINT_MODELS
+              })
+            ]
+          },
+          {
+            id: "pro",
+            name: "Pro",
+            description: "Kimi Code Pro \u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PRO_EXTRA_ENV,
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              })
+            ]
+          },
+          {
+            id: "max",
+            name: "Max",
+            description: "Kimi Code Max \u2014 \u4E0E Pro \u540C\u6A21\u578B\u96C6\uFF0C\u989D\u5EA6\u66F4\u9AD8",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PRO_EXTRA_ENV,
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              })
+            ]
+          },
           {
             id: "andante",
-            name: "Andante",
-            description: "Kimi Code Andante \u2014 kimi-for-coding\uFF0C256k \u4E0A\u4E0B\u6587",
+            name: "Andante\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Andante\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF09\u2014 kimi-for-coding\uFF0C1M \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18638,8 +19320,8 @@ var init_builtin = __esm({
           },
           {
             id: "moderato",
-            name: "Moderato",
-            description: "Kimi Code Moderato \u2014 k3 / kimi-for-coding\uFF0C256k \u4E0A\u4E0B\u6587",
+            name: "Moderato\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Moderato\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF0C\u5BF9\u5E94 Plus\uFF09\u2014 k3 / kimi-for-coding\uFF0CK3 \u9650 256k \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18657,8 +19339,8 @@ var init_builtin = __esm({
           },
           {
             id: "allegretto",
-            name: "Allegretto+",
-            description: "Kimi Code Allegretto \u53CA\u4EE5\u4E0A \u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
+            name: "Allegretto+\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Allegretto \u53CA\u4EE5\u4E0A\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF0C\u5BF9\u5E94 Pro\uFF09\u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18732,11 +19414,11 @@ var init_builtin = __esm({
             name: "\u4E2D\u56FD\u7248",
             description: "MiniMax \u7F16\u7A0B\u5957\u9910\u6216 API \u2014 \u4E2D\u56FD\u533A\uFF0C\u6D77\u87BA AI \u4EE3\u7801\u6A21\u578B",
             auth: "api-key",
-            baseUrl: "https://api.minimaxi.com",
-            apiKeyUrl: "https://platform.minimaxi.com/user-center/basic-information/interface-key",
+            baseUrl: "https://api.minimax.cn",
+            apiKeyUrl: "https://platform.minimax.cn/user-center/basic-information/interface-key",
             endpoints: [
               anthropic("/anthropic", {
-                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
+                extraEnv: MINIMAX_EXTRA_ENV,
                 modelMapping: MINIMAX_MODELS
               }),
               openaiChat("/v1", {
@@ -18753,7 +19435,7 @@ var init_builtin = __esm({
             apiKeyUrl: "https://platform.minimax.io/user-center/basic-information/interface-key",
             endpoints: [
               anthropic("/anthropic", {
-                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
+                extraEnv: MINIMAX_EXTRA_ENV,
                 modelMapping: MINIMAX_MODELS
               }),
               openaiChat("/v1", {
@@ -18780,7 +19462,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine-agent-plan",
             endpoints: [
               anthropic("/api/plan", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: ARK_CODE_MODELS
               }),
               // Agent Plan OpenAI path — do not use /api/v3 (bypasses plan quota).
@@ -18798,7 +19480,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine-coding-plan",
             endpoints: [
               anthropic("/api/coding", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: ARK_CODE_MODELS
               }),
               // Coding Plan OpenAI path — do not use /api/v3 (bypasses plan quota).
@@ -18816,7 +19498,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine",
             endpoints: [
               anthropic("/api/compatible", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: DOUBAO_MODELS
               }),
               openaiChat("/api/v3", {
@@ -18898,12 +19580,13 @@ var init_builtin = __esm({
             id: "token",
             name: "Token Plan",
             auth: "api-key",
-            baseUrl: "https://dashscope.aliyuncs.com",
+            baseUrl: "https://token-plan.cn-beijing.maas.aliyuncs.com",
             apiKeyUrl: "https://bailian.console.aliyun.com/?tab=model#/api-key",
             catalogProviderId: "alibaba-token-plan-cn",
             endpoints: [
               anthropic("/apps/anthropic", {
-                extraEnv: { ...EMPTY_AUTH_TOKEN },
+                // qwen3.8-flash's usable window as published in the Token Plan Claude Code guide.
+                extraEnv: { ...EMPTY_AUTH_TOKEN, CLAUDE_CODE_MAX_CONTEXT_TOKENS: "983616" },
                 modelMapping: BAILIAN_TOKEN_PLAN_MODELS
               }),
               openaiChat("/compatible-mode/v1", {
@@ -18934,23 +19617,39 @@ var init_builtin = __esm({
         id: "kat-coder",
         brand: "kwaikat",
         name: "KAT-Coder",
-        description: "KAT-Coder \u2014 \u5FEB\u624B\u65D7\u4E0B AI \u7F16\u7A0B\u6A21\u578B\uFF08\u9700\u586B\u5165 Vanchin Endpoint ID\uFF09",
+        description: "KAT-Coder \u2014 \u5FEB\u624B\u65D7\u4E0B AI \u7F16\u7A0B\u6A21\u578B\uFF08StreamLake \u4E07\u64CE\uFF09",
         plans: [
           {
             id: "coding",
             name: "Coding Plan",
+            description: "StreamLake Coding Plan \u2014 \u8BA2\u9605\u989D\u5EA6\uFF0C\u56FA\u5B9A Claude Code \u7F51\u5173",
             auth: "api-key",
             baseUrl: "https://vanchin.streamlake.ai",
-            apiKeyUrl: "https://console.streamlake.com/console/wanqing/api-key",
+            apiKeyUrl: "https://console.streamlake.ai/console/home/index",
             endpoints: [
-              anthropic("/api/gateway/v1/endpoints/${ENDPOINT_ID}/claude-code-proxy", {
-                extraEnv: { ...EMPTY_AUTH_TOKEN },
-                modelMapping: {
-                  default: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  opus: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  sonnet: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  haiku: { id: "KAT-Coder-Air V1", name: "KAT-Coder Air V1" }
-                }
+              anthropic("/api/gateway/coding/kat-coder-pro-v2.5/claude-code-proxy", {
+                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                modelMapping: KAT_CODER_MODELS
+              }),
+              openaiChat("/api/gateway/coding/v1", {
+                modelMapping: KAT_CODER_MODELS
+              })
+            ]
+          },
+          {
+            id: "api",
+            name: "API",
+            description: "StreamLake \u6309\u91CF\u8BA1\u8D39 \u2014 \u6309\u5B9E\u9645 token \u4ED8\u8D39",
+            auth: "api-key",
+            baseUrl: "https://vanchin.streamlake.ai",
+            apiKeyUrl: "https://console.streamlake.ai/console/home/index",
+            endpoints: [
+              anthropic("/api/gateway/v1/endpoints/kat-coder-pro-v2.5/claude-code-proxy", {
+                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                modelMapping: KAT_CODER_MODELS
+              }),
+              openaiChat("/api/gateway/v1/endpoints", {
+                modelMapping: KAT_CODER_MODELS
               })
             ]
           }
@@ -18972,14 +19671,14 @@ var init_builtin = __esm({
               anthropic("/anthropic", {
                 extraEnv: {
                   ...EMPTY_AUTH_TOKEN,
-                  CLAUDE_CODE_MAX_OUTPUT_TOKENS: "6000",
+                  CLAUDE_CODE_MAX_OUTPUT_TOKENS: "131072",
                   ...DISABLE_NONESSENTIAL
                 },
                 modelMapping: {
-                  default: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  opus: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  sonnet: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  haiku: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" }
+                  default: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  opus: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  sonnet: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  haiku: { id: "LongCat-2.0", name: "LongCat 2.0" }
                 }
               })
             ]
@@ -19030,7 +19729,7 @@ var init_builtin = __esm({
                   default: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
                   opus: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
                   sonnet: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
-                  haiku: { id: "deepseek-v4-flash", name: "DeepSeek V4 Flash" },
+                  haiku: { id: "deepseek-flash", name: "DeepSeek Flash" },
                   subagent: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" }
                 }
               })
@@ -19076,10 +19775,10 @@ var init_builtin = __esm({
               anthropic("", {
                 extraEnv: { ...EMPTY_AUTH_TOKEN },
                 modelMapping: {
-                  default: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  opus: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  sonnet: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  haiku: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" }
+                  default: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  opus: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  sonnet: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  haiku: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" }
                 }
               })
             ]
@@ -19304,6 +20003,7 @@ var init_platform_registry = __esm({
     init_protocols();
     init_types2();
     init_capabilities2();
+    init_claude_env();
     init_merge();
     init_relay_discovery();
     init_relay_identify();
@@ -22149,7 +22849,10 @@ function listHarnessApiProviders(store, harness, options) {
 }
 function buildHarnessEnv(harness, resolved) {
   if (!resolved) return {};
-  const env = { ...resolved.extraEnv ?? {} };
+  const env = {
+    ...harness === "claude" ? claudeThirdPartyEnv(resolved) : {},
+    ...resolved.extraEnv ?? {}
+  };
   if (harness === "claude") {
     if (resolved.apiKey) {
       env.ANTHROPIC_API_KEY = resolved.apiKey;
@@ -52932,6 +53635,23 @@ var init_computer_use_result_shape = __esm({
   }
 });
 
+// ../../packages/shared/src/jev-run-result-shape.ts
+function isJevRunToolName(toolName) {
+  if (!toolName) return false;
+  return /(?:^|__)(?:browser|computer|device)_run$/.test(toolName);
+}
+function looksLikeJevRunResult(obj) {
+  const status = obj.status;
+  if (status !== "paused" && status !== "done" && status !== "aborted") return false;
+  if (typeof obj.runId !== "string") return false;
+  return Array.isArray(obj.since_last) || typeof obj.progress === "object" && obj.progress !== null || typeof obj.steps === "number";
+}
+var init_jev_run_result_shape = __esm({
+  "../../packages/shared/src/jev-run-result-shape.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/acp/src/tool-result-map.ts
 function formatAcpRawOutput(raw) {
   return formatAgentToolOutput(raw);
@@ -53037,11 +53757,12 @@ function shouldKeepFullToolResult(summary2, toolName) {
   if (looksLikeSessionArchiveToon(summary2)) return true;
   if (isComputerUseToolName(toolName)) return true;
   if (looksLikeComputerUseOutline(summary2)) return true;
+  if (isJevRunToolName(toolName)) return true;
   const trimmed = summary2.trim();
   if (!trimmed.startsWith("{")) return false;
   try {
     const obj = JSON.parse(trimmed);
-    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || obj.kind === "native" && typeof obj.nativeType === "string" || looksLikeCollabResult(obj) || looksLikeSessionArchiveJson(obj) || looksLikeComputerUseResult(obj);
+    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || obj.kind === "native" && typeof obj.nativeType === "string" || looksLikeCollabResult(obj) || looksLikeSessionArchiveJson(obj) || looksLikeComputerUseResult(obj) || looksLikeJevRunResult(obj);
   } catch {
     return false;
   }
@@ -53055,6 +53776,7 @@ var init_tool_result_map = __esm({
     init_capability_prompt_tags();
     init_session_archive_result_shape();
     init_computer_use_result_shape();
+    init_jev_run_result_shape();
     init_tool_ui();
     init_tool_normalization();
   }
@@ -72562,8 +73284,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.67.0-alpha.3".trim()) {
-    return "0.67.0-alpha.3".trim();
+  if ("0.68.0-alpha".trim()) {
+    return "0.68.0-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;