@super-one/cli 0.67.0 → 0.68.0-alpha.1

package/lib/cli.mjs

@@ -1,4 +1,4 @@
-process.env.SUPERONE_VARIANT = "stable";
+process.env.SUPERONE_VARIANT = "alpha";
 import { createRequire as __superoneCreateRequire } from 'node:module';
 import { fileURLToPath as __superoneFileURLToPath } from 'node:url';
 import { dirname as __superoneDirname } from 'node:path';
@@ -400,10 +400,10 @@ var init_superone_tool_descriptions = __esm({
     AUTOMATION_LIST_DESCRIPTION = "List project automations with schedule and last/next run. Pass id for full prompt, agentConfig, and schedule; filter by query or enabled. Find unknown ids here before automation_apply or automation_delete; check for duplicates before creation when needed.";
     AUTOMATION_APPLY_DESCRIPTION = 'Create or update a project automation. create needs name, prompt, schedule; update needs id plus any field (pause via enabled=false). Call automation_list first for ids; remove with automation_delete. Always opens a user confirmation dialog and applies nothing without approval. For schedule and agentConfig shapes see read_manual({ domain: "product", topic: "automation" }).';
     AUTOMATION_DELETE_DESCRIPTION = "Permanently delete project automations by id (from automation_list). Always opens a user confirmation dialog. Current project only. Prefer automation_list to choose ids first.";
-    TERMINAL_TABS_DESCRIPTION = "Manage activity-panel terminal tabs for long-lived or interactive processes: dev servers, watch modes, REPLs, TUIs, ssh, wizards. One-shot commands (build, test, git) belong in your shell tool. action=list (default) returns this session's tabs plus the user's as a TOON table; other sessions' tabs are hidden. action=run asks to approve `command`, types it into a new or idle tab, and returns the screen; you control the tab only while that command is in the foreground. action=attach asks to control a command already running in a user tab. action=close kills a tab you opened, never one the user is using. Follow with terminal_act / terminal_wait_for / terminal_snapshot.";
+    TERMINAL_TABS_DESCRIPTION = "Only for commands that run until stopped (servers, watchers) or need keyboard input (REPLs, TUIs, ssh, wizards). Non-interactive commands that finish (build, test, install, git) use your shell tool, even if slow. action=list (default) returns this session's tabs plus the user's as a TOON table; other sessions' tabs are hidden. action=run asks to approve `command`, types it into a new or idle tab, and returns the screen; you control the tab only while that command is in the foreground. action=attach asks to control a command already running in a user tab. action=close kills a tab you opened, never one the user is using. For open tabs: terminal_act / terminal_wait_for / terminal_snapshot.";
     TERMINAL_SNAPSHOT_DESCRIPTION = "Read a terminal tab as rendered text. `include` picks sections: screen (visible rows, default), scrollback (last `tail` lines including scrolled-off output), cursor, meta (title, cwd, status, foreground command, control). Use screen for prompts and full-screen programs, scrollback for server logs. Output over the tail cap is spilled to a file and returned as path + preview. Prefer this before terminal_act; use terminal_wait_for instead of polling.";
     TERMINAL_ACT_DESCRIPTION = 'Send input to a terminal tab you control. actions is an array, e.g. [{type:"type",text:"yes"}] or [{type:"key",key:"Ctrl+C"}]; types: type (Enter by default), key (Enter, Tab, Escape, Up, Ctrl+C, F1\u2026), raw, resize, wait. ONE action per call by default; batch 2\u201320 only for an uninterruptible sequence (answer a wizard). Fail-fast. expect holds the call open until a screen condition is met (text, textGone, idleMs, exited); the screen after the batch is returned. Rejected with status=rejected when the approved command has exited or the user took over \u2014 do not retry, call terminal_tabs run again or ask. description is shown to the user instead of raw keystrokes.';
-    TERMINAL_WAIT_FOR_DESCRIPTION = "Block until a terminal tab reaches a state; conditions AND-combine: text (substring visible on screen or in new output), textGone, idleMs (no output for that long), exited (foreground command finished). Use after terminal_tabs run or terminal_act when output arrives asynchronously (a server banner, a build finishing). timeoutMs default 15000, max 120000. Do not sleep+poll with terminal_snapshot yourself.";
+    TERMINAL_WAIT_FOR_DESCRIPTION = "Block until a terminal tab reaches a state; conditions AND-combine: text (substring visible on screen or in new output), textGone, idleMs (no output for that long), exited (foreground command finished). Use after terminal_tabs run or terminal_act when output arrives asynchronously (a server banner, a watch rebuild finishing). timeoutMs default 15000, max 120000. Do not sleep+poll with terminal_snapshot yourself.";
   }
 });
 
@@ -2220,6 +2220,127 @@ var init_host_action_browser_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "browser_run",
+        "description": "Experimental (requires the Jev fast loop setting): delegate a multi-step page goal \u2014 clicks, typing, scrolling \u2014 to a fast model that chooses each step and judges completion itself, so you do not pay a turn per click. Start with goal; add presets for values it may type (never passwords) and, optionally, done_when when the finish is machine-checkable. Before anything irreversible (submit, pay, delete, send, leaving the site) or when unsure, the call returns status=paused with a question; answer it by calling again with runId + answer. Every result carries the final snapshot: verify it. Use for click/fill-heavy tasks on one tab; use browser_act for single steps, drag, keys, uploads.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "description": "Short, human-friendly summary of the goal for the user watching, in the conversation's language.",
+              "type": "string"
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "tab": {
+              "description": "Browser view id. Omit to target the focused browser view.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": "Optional machine-checkable finish (AND-combined, same vocabulary as browser_wait_for). The loop judges completion itself; give this when a URL or element defines it exactly.",
+              "type": "object",
+              "properties": {
+                "selector": {
+                  "type": "string"
+                },
+                "selectorGone": {
+                  "type": "string"
+                },
+                "text": {
+                  "type": "string"
+                },
+                "urlIncludes": {
+                  "type": "string"
+                },
+                "urlMatches": {
+                  "description": "JavaScript regex source matched against the page URL.",
+                  "type": "string"
+                }
+              },
+              "additionalProperties": false
+            }
+          },
+          "additionalProperties": false
+        }
+      },
       {
         "name": "browser_action",
         "description": "Saved semantic browser actions (dynamic catalog \u2014 list then do). action=list (optional domain/name; includeArchived to find archived flows). action=read returns one complete definition by domain+name. action=archive hides a flow and prevents execution; archived=false restores it. action=do runs one saved action with input. action=save creates or replaces a named flow (domain+name) \u2014 read the manual first. This does not record prior browser calls. Use browser_act for one-off clicks/types.",
@@ -2395,7 +2516,7 @@ var init_host_action_computer_descriptors = __esm({
     HOST_ACTION_COMPUTER_DESCRIPTORS = [
       {
         "name": "computer_apps",
-        "description": "Discover and open desktop apps. action=list (default) returns a compact TOON app catalog: one row per app with app, bundleId, running, frontmost, granted, grantScope, pid, windows. Use query to keyword-filter by display name / bundle id / localized aliases (e.g. query=Notes or com.apple.TextEdit). Paginate with offset + limit (default limit 25, max 100); hasMore means call again with offset+=limit. Rows are sorted running/frontmost/granted first. action=focus|launch accepts display name (any locale) or reverse-DNS bundleId; host resolves to a stable bundleId before the permission grant so one allow covers later snapshot/act. Launch/focus returns a slim {target} confirmation. If the user only asks to open an app, launch once and stop when target is returned. Driving an app is computer_snapshot + computer_act; focus only puts a window in front.",
+        "description": "Discover and open desktop apps. action=list (default) returns a compact TOON app catalog: one row per app with app, bundleId, running, frontmost, granted, grantScope, pid, windows. Use query to keyword-filter by display name / bundle id / localized aliases (e.g. query=Notes or com.apple.TextEdit). Paginate with offset + limit (default limit 25, max 100); hasMore means call again with offset+=limit. Rows are sorted running/frontmost/granted first. action=focus|launch accepts display name (any locale) or reverse-DNS bundleId; host resolves to a stable bundleId before the permission grant so one allow covers later snapshot/act. Launch/focus returns a slim {target} confirmation. If the user only asks to open an app, launch once and stop when target is returned. For navigation, forms or search, prefer computer_run when Jev is enabled; batch known button sequences with computer_act. Focus only raises the window and leaves the app in the background; pass activate=true only when the app must stay the active app for a sequence of foreground-only steps (menu bar commands and \u2318 shortcuts work in the background; no activation is needed for them).",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2418,6 +2539,10 @@ var init_host_action_computer_descriptors = __esm({
               "description": "Display name (any locale) or reverse-DNS bundle id for focus/launch. Prefer bundleId from a prior list when known.",
               "type": "string"
             },
+            "activate": {
+              "description": "focus only: make the app frontmost and keep it there. Leave unset so the user keeps their current app; menu bar commands do not need it.",
+              "type": "boolean"
+            },
             "query": {
               "description": "list only: keyword filter on app name / bundleId / aliases",
               "type": "string"
@@ -2447,7 +2572,7 @@ var init_host_action_computer_descriptors = __esm({
       },
       {
         "name": "computer_snapshot",
-        "description": "Capture an immutable UI snapshot and return stateId (analogous to browser_snapshot for desktop apps). All subsequent query/act/wait_for calls must reference this stateId. mode=visual (and fused) saves the image to a temporary file and returns image.path (not base64). The image is NOT loaded into your context automatically; call Read on image.path if you need to look at pixels, and embed image.path in your reply when it is evidence of the result (read_manual product/show-your-work). mode=semantic returns accessibility outline with @eN refs (no image). mode=fused = screenshot + AX. The outline is a TOON table, not JSON: a header row outline[N]{ref,depth,role,name,value,x,y,w,h,can,state}: followed by one CSV-style row per node, in depth-first reading order. depth is the nesting level (a row is a child of the nearest row above it with a smaller depth). can lists only the supported actions, pipe-joined (press|setText|typeText|scroll|focus); empty means the node is inert. state lists only non-default flags (disabled|focused). x,y,w,h are the frame in capture space, empty when the node reports none. truncation.nodesOmitted > 0 means the returned outline was folded \u2014 reach the rest with computer_query, do not recapture. truncation.sourceTruncated means the native accessibility walk itself hit a limit, so those nodes are missing from the full tree too and computer_query cannot reach them either \u2014 narrow the target with capture=window or a specific rootId instead. Use computer_query on the cached outline for search/expand/inspect without recapturing. capture=window (default) captures only the selected window; coordinates are local to that image and remain valid if the window moves. Use capture=display explicitly when the whole display is required. If the window is resized or moves to a different display scale, input fails closed and a successor observation is created.",
+        "description": "Capture an immutable UI snapshot and return stateId (analogous to browser_snapshot for desktop apps). All subsequent query/act/wait_for calls must reference this stateId. mode=visual (and fused) saves the image to a temporary file and returns image.path (not base64). The image is NOT loaded into your context automatically; call Read on image.path if you need to look at pixels, and embed image.path in your reply when it is evidence of the result (read_manual product/show-your-work). mode=semantic returns accessibility outline with @eN refs (no image). mode=fused = screenshot + AX. The outline is a TOON table, not JSON: a header row outline[N]{ref,depth,role,name,value,x,y,w,h,can,state}: followed by one CSV-style row per node, in depth-first reading order. depth is the nesting level (a row is a child of the nearest row above it with a smaller depth). can lists only the supported actions, pipe-joined (press|select|open|setText|typeText|scroll|focus); empty means the node is inert. state lists only non-default flags (disabled|focused). x,y,w,h are the frame in capture space, empty when the node reports none. truncation.nodesOmitted > 0 means the returned outline was folded \u2014 reach the rest with computer_query, do not recapture. truncation.sourceTruncated means the native accessibility walk itself hit a limit, so those nodes are missing from the full tree too and computer_query cannot reach them either \u2014 narrow the target with capture=window or a specific rootId instead. Use computer_query on the cached outline for search/expand/inspect without recapturing. capture=window (default) captures only the selected window; coordinates are local to that image and remain valid if the window moves. Use capture=display explicitly when the whole display is required. If the window is resized or moves to a different display scale, input fails closed and a successor observation is created.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2576,7 +2701,7 @@ var init_host_action_computer_descriptors = __esm({
       },
       {
         "name": "computer_act",
-        "description": "Submit 1\u201320 related UI actions as a checked transaction against a stateId. Set delivery explicitly when you can; that field describes how the three modes differ. Actions: click, typeText, keypress, scroll(dx,dy[,x,y|ref]), drag(path\u22652 points), moveMouse, press/setText (AX). scroll: positive dy scrolls content down; aim with x,y (capture space) or ref center; else window/outline center. drag: path is capture-space points; virtual cursor animates along the path. Returns outcome worked|didnt|unknown based on re-observation (not API success codes): worked when AX readback, expect, typed text, or a meaningful successor outline diff confirms effect; unknown only when applied but unprovable; didnt on hard failure or failed expect. When the successor has pixels, successorImage.path contains the fresh screenshot. Set recording=true to save a short video containing only this action transaction. Stale stateId (UI changed since snapshot) is rejected before side effects. delivery=semantic never silently upgrades to app-directed/physical input.",
+        "description": `Submit 1\u201320 related UI actions as a checked transaction against a stateId. Batch a known button sequence here; prefer computer_run when each next target must be found from new UI state and Jev is enabled. Everything runs in the background: the host drives a ref through its native action when it has one and otherwise posts input to the app; the app is never brought forward and the user keeps their keyboard and pointer. Menu bar commands and \u2318 shortcuts (keypress keys=["cmd+s"]) work there too. Actions: click, typeText, keypress, scroll(dx,dy[,x,y|ref]), drag(path\u22652 points), moveMouse, press/select/open/setText (AX). click on a ref with a native press is that press; otherwise a pointer click at x,y or the ref's center. select chooses a selectable item; open invokes its observed native open action. typeText is keystrokes at the insertion point, subject to the app's own autocorrect and auto-capitalisation; setText sets a value exactly. scroll: positive dy scrolls content down; a ref with a scroll bar is paged by the bar and reports when it has no room left; else a wheel at x,y (capture space), the ref center or the window center. drag: path is capture-space points; virtual cursor animates along the path. Returns outcome worked|didnt|unknown based on re-observation (not API success codes): worked when AX readback, expect, typed text, or a meaningful successor outline diff confirms effect; unknown only when applied but unprovable; didnt on hard failure or failed expect. When the successor has pixels, successorImage.path contains the fresh screenshot. Set recording=true to save a short video containing only this action transaction. Stale stateId (UI changed since snapshot) is rejected before side effects. System-wide hotkeys (\u2318Space, \u2318Tab, screenshots) are not available; they belong to no app.`,
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2600,6 +2725,8 @@ var init_host_action_computer_descriptors = __esm({
                     "type": "string",
                     "enum": [
                       "press",
+                      "select",
+                      "open",
                       "click",
                       "setText",
                       "typeText",
@@ -2677,17 +2804,36 @@ var init_host_action_computer_descriptors = __esm({
                     "notExists",
                     "textEquals",
                     "textContains",
-                    "valueEquals"
+                    "valueEquals",
+                    "newRoot"
                   ]
                 },
                 "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
                   "type": "string"
                 },
                 "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
                   "type": "string"
                 },
                 "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
                   "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
+                  "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
                 }
               },
               "required": [
@@ -2695,24 +2841,15 @@ var init_host_action_computer_descriptors = __esm({
               ],
               "additionalProperties": false
             },
-            "recording": {
-              "description": "Save a video of only this action transaction. Default false.",
-              "type": "boolean"
-            },
             "timeoutMs": {
               "description": "Maximum wait for expect before the action is judged. Default 5000.",
               "type": "integer",
               "minimum": 100,
               "maximum": 6e4
             },
-            "delivery": {
-              "description": "semantic \u2014 pure AX; prefer it whenever actions use @eN refs and the action is press/setText/click(ref)/typeText(ref), the most reliable path for labeled controls. app-directed \u2014 the default when omitted; for coordinate click/type/scroll/drag/keypress or when no usable AX ref exists. Posts CGEvent to the target app PID in the background without stealing frontmost. physical \u2014 global HID; only when app-directed fails. Requires frontmost and is disruptive.",
-              "type": "string",
-              "enum": [
-                "semantic",
-                "app-directed",
-                "physical"
-              ]
+            "recording": {
+              "description": "Save a video of only this action transaction. Default false.",
+              "type": "boolean"
             }
           },
           "required": [
@@ -2723,9 +2860,164 @@ var init_host_action_computer_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "computer_run",
+        "description": `Experimental (Jev setting): pursue desktop UI goals with clicks, typing and scrolling chosen without a model turn per step. Start with app (launched in the background if it is not running) or root, and goal; no computer_apps or computer_snapshot call is needed first. If the exact sequence of buttons is already known, use computer_act with a batch instead. Example: presets=[{key:"Query",value:"cats",field:"Search"}], done_when={kind:"valueEquals",ref:"@e7",value:"cats"}. Native computer_wait_for conditions bind at run start. The loop judges each step's risk and the goal's completion itself; before anything irreversible (save, send, delete, quit, leaving the app) or when unsure it pauses with a question. Resume a pause with runId + answer. Phrase goal as the end state the window will show \u2014 a row inside a folder, a text area ending with a line, no sheet open, an icon in a corner of the icon view \u2014 since the loop reads state sentences like these off the window; prefer done_when when a condition can say it. Uses existing grants and tiers; skips secure fields. Use computer_act for single steps, drag, shortcuts or pixels.`,
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 160,
+              "description": "Short, human-friendly explanation of the goal for the user watching, in the conversation's language."
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "app": {
+              "description": "App name (any locale) or bundle id. Resolves the app grant and its window; an app that is not running or has no window is launched in the background and its first window awaited. Use app or root, not both.",
+              "type": "string"
+            },
+            "root": {
+              "description": "Root id from computer_snapshot/computer_apps. Omit to use the existing target.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": 'Same conditions as computer_wait_for. Bind ref to an element in the starting snapshot, or use {kind:"newRoot",title:"Fonts"} for a new same-app window/panel. newRoot needs title and/or text; supplied filters must all match. No future ref is needed.',
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "enum": [
+                    "exists",
+                    "notExists",
+                    "textEquals",
+                    "textContains",
+                    "valueEquals",
+                    "newRoot"
+                  ]
+                },
+                "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
+                  "type": "string"
+                },
+                "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
+                  "type": "string"
+                },
+                "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
+                  "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
+                  "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "description"
+          ],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "computer_wait_for",
-        "description": "Wait until a UI condition holds. Distinguishes preexisting (already true) from verified (became true). Do not sleep+poll with snapshot yourself.",
+        "description": "Wait until a UI condition holds. Distinguishes preexisting (already true) from verified (became true); failed means the timeout ran out, and observed then carries what the element read as. Do not sleep+poll with snapshot yourself.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -2748,17 +3040,36 @@ var init_host_action_computer_descriptors = __esm({
                     "notExists",
                     "textEquals",
                     "textContains",
-                    "valueEquals"
+                    "valueEquals",
+                    "newRoot"
                   ]
                 },
                 "ref": {
+                  "description": "Required except for newRoot: the target element ref from the starting snapshot.",
                   "type": "string"
                 },
                 "text": {
+                  "description": "For textEquals/textContains: element name or value. For newRoot: substring in the new root outline.",
                   "type": "string"
                 },
                 "value": {
+                  "description": "Required for valueEquals: the exact element value to wait for.",
                   "type": "string"
+                },
+                "title": {
+                  "description": "newRoot: exact title of a visible window, panel, sheet or menu in the same app that was absent at the starting snapshot.",
+                  "type": "string"
+                },
+                "rootKind": {
+                  "description": "newRoot: optional kind filter. Supply title and/or text; all supplied filters must match.",
+                  "type": "string",
+                  "enum": [
+                    "window",
+                    "sheet",
+                    "dialog",
+                    "menu",
+                    "popover"
+                  ]
                 }
               },
               "required": [
@@ -3441,6 +3752,145 @@ var init_host_action_device_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "device_run",
+        "description": 'Experimental (Jev setting): pursue a multi-step touch-device goal with taps, typing, swipes on the list that needs them, going back and long-presses chosen without a model turn per step. Requires existing device_request_control approval; never requests control. Start with goal (said as what the screen shows when done), optional device, presets and done_when; the loop judges risk and completion itself. Example: done_when={kind:"exists",label:"About"}. Risky or uncertain steps pause; resume with runId + answer. A capability pause takes device_act actions; its target bounds are screen fractions. Use device_act for known sequences, single steps, gestures or pixels.',
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "description": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 160,
+              "description": "Short, human-friendly explanation of the goal for the user watching, in the conversation's language."
+            },
+            "goal": {
+              "description": 'What to achieve, said as what the page shows when it is done: the loop judges completion from the page text, so name the visible end state, not the steps. "Report.txt is listed inside Archive" rather than "drag Report.txt onto Archive"; "no sheet is open over the document window" rather than "press Escape". When a native condition can say it, pass done_when as well. Required to start a run.',
+              "type": "string"
+            },
+            "presets": {
+              "description": "Values the loop may type. Never include passwords.",
+              "maxItems": 20,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Short name, e.g. Title."
+                  },
+                  "value": {
+                    "type": "string",
+                    "description": "The full text to type."
+                  },
+                  "field": {
+                    "description": 'Hint naming the field it belongs in, e.g. "the title textbox".',
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "key",
+                  "value"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "maxSteps": {
+              "description": "Default 30.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "maxWallMs": {
+              "description": "Wall-clock budget per call before pausing. Default 45000.",
+              "type": "integer",
+              "minimum": 5e3,
+              "maximum": 3e5
+            },
+            "runId": {
+              "description": "From a paused result. Resumes that run with `answer`.",
+              "type": "string"
+            },
+            "answer": {
+              "description": "Reply to the pending question when resuming.",
+              "type": "object",
+              "properties": {
+                "questionId": {
+                  "type": "string"
+                },
+                "choice": {
+                  "description": 'An option key from the question, or "abort".',
+                  "type": "string"
+                },
+                "value": {
+                  "description": "For type=value questions: { text }; for reason=capability: { actions?: <this platform's *_act actions, run on snapshot.stateId>, presets?: [{ key, value, field? }] }.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                },
+                "goal": {
+                  "description": "Optionally revise the goal.",
+                  "type": "string"
+                },
+                "abort": {
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "questionId"
+              ],
+              "additionalProperties": false
+            },
+            "device": {
+              "description": "A device already controlled by this session. Required when starting with more than one held device. A resumed run keeps its original device.",
+              "type": "string"
+            },
+            "done_when": {
+              "description": 'Same vocabulary as device_wait_for. label matches the entire accessibility name, which may combine a title and value; prefer an observed identifier. Refs are positional. Example: {kind:"exists",identifier:"details-page"}.',
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "enum": [
+                    "exists",
+                    "notExists",
+                    "textEquals",
+                    "textContains"
+                  ]
+                },
+                "ref": {
+                  "description": "Only valid within the snapshot it came from; prefer label or identifier when waiting.",
+                  "type": "string"
+                },
+                "label": {
+                  "description": "Visible name of the element.",
+                  "type": "string"
+                },
+                "identifier": {
+                  "description": "Developer-assigned id. Survives copy changes and translation \u2014 the most durable target.",
+                  "type": "string"
+                },
+                "text": {
+                  "description": "The string textEquals/textContains compares against. Required by those two kinds, and NOT a way to name an element \u2014 use label for that.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "description"
+          ],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "device_wait_for",
         "description": "Wait until the screen satisfies a condition, instead of snapshotting in a loop. Target the element by label or identifier, never by ref: refs belong to one snapshot and what you are waiting for usually does not exist yet \u2014 text only says what to compare, it never selects. Returns a fresh settled stateId and tree, and reports preexisting vs verified.",
@@ -3672,7 +4122,7 @@ var init_host_action_terminal_descriptors = __esm({
             command: { type: "string", description: "run only. The command the user approves and that is typed into the shell." },
             rule: {
               type: "string",
-              description: 'run only. The rule offered as "always allow in this project" next to the approval: the command cut down to its stable leading words plus ":*", e.g. "bun run:*" for "bun run dev", "git commit:*" for "git commit -m \u2026". It must match `command`; keep it as narrow as the user would want (never a bare "sudo:*" / "ssh:*"). Default: derived from the command.'
+              description: 'run only. The rule offered next to the approval as "allow for this session" / "always allow in this project": a JavaScript regular expression matched against the whole normalized command, e.g. "bun run( .*)?" for "bun run dev", "(\\w+=\\S+ )*bun run dev( .*)?" for "REMOTE_DEBUGGING_PORT=9361 bun run dev", "git commit( .*)?" for "git commit -m \u2026". It must match `command`; keep it as narrow as the user would want (never "sudo.*" / "ssh.*"). Default: derived from the command.'
             },
             cwd: { type: "string", description: "run only. Absolute working directory for a new tab. Default: the session working directory." },
             title: { type: "string", description: "run only. Tab title shown to the user. Default: the command name." },
@@ -8589,9 +9039,9 @@ var init_superone_system_prompt = __esm({
 
 SuperOne tools cover browser, terminal and device control, media, widgets, sessions, collaboration, automations, settings, and mini-apps. Read only the manual topics needed for the task; reuse guidance already in context.
 
-Prefer SuperOne's built-in tools unless the user explicitly requests another tool or no suitable SuperOne tool is available.
+Prefer SuperOne's built-in tools for browser, device, media, widget and session work unless the user explicitly requests another tool or no suitable SuperOne tool is available. Running commands is the exception: your own shell tool stays the default (see Terminals).
 
-Terminals: your own shell tool stays the default for one-shot commands (build, test, git, scripts) that finish on their own. Anything that keeps running or waits for input \u2014 dev servers, watch/hot-reload modes, docker compose up, REPLs, full-screen programs, ssh, interactive wizards \u2014 goes through terminal_tabs run instead of being backgrounded in the shell tool (\`&\`, nohup, setsid): the shell would orphan the process and lose its output, while a terminal tab keeps it visible to the user and lets you keep working with it. Then terminal_wait_for for the ready line or prompt, terminal_snapshot to read the screen, terminal_act to type or send keys, and terminal_tabs close once its job is done. Each command is approved by the user and your control ends when it exits; a rejected result means stop and ask, not retry.
+Terminals: run commands that finish without input in your shell tool, regardless of duration \u2014 a long build, a test suite or an install still belongs there. Use terminal_tabs run only for commands that run until stopped (dev server, watch mode, docker compose up, tail -f) or need keyboard input after launch (REPL, TUI, ssh, interactive wizard). Run those in the foreground of a tab instead of backgrounding them in the shell tool with \`&\`, nohup or setsid. Once a tab is open, use terminal_wait_for for the ready line or prompt, terminal_snapshot to read the screen, terminal_act to type or send keys, and terminal_tabs close when its job is done. Each command is approved by the user and your control ends when it exits; a rejected result means stop and ask, not retry.
 
 Experience memory:
 SuperOne keeps per-target experience notes on this node: browser_memory_* (domain), computer_memory_* (platform + appId), device_memory_* (platform + appId).
@@ -10898,7 +11348,7 @@ function isStaticHostOwnedSuperoneBareName(bare) {
 function isStaticHostOwnedSuperoneToolQualified(qualifiedName) {
   if (!qualifiedName.startsWith(MCP_SUPERONE_TOOL_PREFIX)) return false;
   const bare = qualifiedName.slice(MCP_SUPERONE_TOOL_PREFIX.length);
-  return isStaticHostOwnedSuperoneBareName(bare);
+  return isStaticHostOwnedSuperoneBareName(bare) && !isNeverAutoAllowSuperoneBareName(bare);
 }
 function isNeverAutoAllowSuperoneBareName(bare) {
   return NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES.includes(bare);
@@ -10938,6 +11388,7 @@ var init_superone_host_owned_tools = __esm({
       "browser_emulate",
       "browser_mock",
       "browser_perf_measure",
+      "browser_run",
       "browser_tools_list",
       "browser_tools_call"
     ];
@@ -10961,6 +11412,7 @@ var init_superone_host_owned_tools = __esm({
       "browser_network",
       "browser_perf",
       "browser_action",
+      "browser_run",
       "browser_tools_list",
       "browser_tools_call"
     ];
@@ -10977,6 +11429,7 @@ var init_superone_host_owned_tools = __esm({
       "device_snapshot",
       "device_query",
       "device_act",
+      "device_run",
       "device_wait_for",
       "device_release"
     ];
@@ -11028,7 +11481,7 @@ var init_superone_host_owned_tools = __esm({
     ];
     MINIAPP_LIST_BARE_NAME = "miniapp_list";
     MINIAPP_CALL_BARE_NAME = "miniapp_call";
-    NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES = ["browser_tools_call"];
+    NEVER_AUTO_ALLOW_SUPERONE_BARE_NAMES = ["browser_tools_call", "terminal_tabs"];
     STATIC_HOST_OWNED_SUPERONE_QUALIFIED_TOOL_NAMES = [
       ...BUILT_IN_SUPERONE_TOOL_NAMES,
       MINIAPP_LIST_BARE_NAME,
@@ -11037,6 +11490,70 @@ var init_superone_host_owned_tools = __esm({
   }
 });
 
+// ../../packages/shared/src/dead-stream-ledger.ts
+function evict(topLevel, attempt) {
+  const blocks = [...attempt.toolUseIds].map((toolUseId) => ({ type: "tool_use", toolUseId }));
+  if (topLevel && attempt.text) blocks.push({ type: "text", text: attempt.text, fromEnd: true });
+  if (topLevel && attempt.thinking) blocks.push({ type: "thinking", thinking: attempt.thinking, fromEnd: true });
+  return blocks.length > 0 ? { type: "content_retracted", messageId: attempt.messageId, blocks } : null;
+}
+function createDeadStreamLedger() {
+  const attempts = /* @__PURE__ */ new Map();
+  const attemptOf = (parentToolUseId, messageId) => {
+    const key = scopeKey(parentToolUseId);
+    let attempt = attempts.get(key);
+    if (!attempt) {
+      attempt = { messageId, toolUseIds: /* @__PURE__ */ new Set(), text: "", thinking: "" };
+      attempts.set(key, attempt);
+    }
+    return attempt;
+  };
+  return {
+    begin(parentToolUseId, messageId) {
+      const key = scopeKey(parentToolUseId);
+      const previous = attempts.get(key);
+      attempts.set(key, { messageId, toolUseIds: /* @__PURE__ */ new Set(), text: "", thinking: "" });
+      const retracted = previous ? evict(key === "", previous) : null;
+      return retracted ? [retracted] : [];
+    },
+    announceToolUse(parentToolUseId, messageId, toolUseId) {
+      if (toolUseId) attemptOf(parentToolUseId, messageId).toolUseIds.add(toolUseId);
+    },
+    announceText(parentToolUseId, messageId, text2) {
+      if (parentToolUseId === null) attemptOf(parentToolUseId, messageId).text += text2;
+    },
+    announceThinking(parentToolUseId, messageId, thinking) {
+      if (parentToolUseId === null) attemptOf(parentToolUseId, messageId).thinking += thinking;
+    },
+    confirm(parentToolUseId, content) {
+      const attempt = attempts.get(scopeKey(parentToolUseId));
+      if (!attempt || !Array.isArray(content)) return;
+      for (const block of content) {
+        if (!block || typeof block !== "object") continue;
+        if (block.type === "tool_use" && typeof block.id === "string") attempt.toolUseIds.delete(block.id);
+        else if (block.type === "text") attempt.text = "";
+        else if (block.type === "thinking") attempt.thinking = "";
+      }
+    },
+    flush() {
+      const events = [];
+      for (const [key, attempt] of attempts) {
+        const retracted = evict(key === "", attempt);
+        if (retracted) events.push(retracted);
+      }
+      attempts.clear();
+      return events;
+    }
+  };
+}
+var scopeKey;
+var init_dead_stream_ledger = __esm({
+  "../../packages/shared/src/dead-stream-ledger.ts"() {
+    "use strict";
+    scopeKey = (parentToolUseId) => parentToolUseId ?? "";
+  }
+});
+
 // ../../packages/shared/src/model-fallback-wire.ts
 function str(value) {
   return typeof value === "string" && value ? value : void 0;
@@ -11188,6 +11705,7 @@ var init_harness_capabilities = __esm({
         // each turn and keeps going until it is met, so there is no paused state —
         // the goal is either live or cleared.
         goal: { lifecycleArgs: ["clear"], canPause: false, transport: "slash", semantics: "condition" },
+        terminalCommandApproval: "harness",
         displayName: "Claude"
       },
       codex: {
@@ -11207,6 +11725,7 @@ var init_harness_capabilities = __esm({
         // `thread/goal/{get,set,clear}` over the app server; SuperOne drives the
         // follow-up turns itself, so every transition is an explicit RPC.
         goal: { lifecycleArgs: [], canPause: true, transport: "rpc", semantics: "objective" },
+        terminalCommandApproval: "harness",
         displayName: "Codex"
       },
       acp: {
@@ -11239,6 +11758,7 @@ var init_harness_capabilities = __esm({
           transport: "slash",
           semantics: "objective"
         },
+        terminalCommandApproval: "harness",
         displayName: "Others"
       },
       opencode: {
@@ -11255,6 +11775,7 @@ var init_harness_capabilities = __esm({
         // Server-side `forkSession(id, anchor)` + `moveSession`.
         supportsFork: true,
         goal: null,
+        terminalCommandApproval: "harness",
         displayName: "OpenCode"
       },
       cursor: {
@@ -11272,6 +11793,8 @@ var init_harness_capabilities = __esm({
         // SDK has no transcript-fork API; the adapter creates a blank agent.
         supportsFork: false,
         goal: null,
+        // The @cursor/sdk local executor auto-approves custom tools with no host hook.
+        terminalCommandApproval: "executor",
         displayName: "Cursor"
       },
       dsh: {
@@ -11298,6 +11821,7 @@ var init_harness_capabilities = __esm({
         // `runtime.forkSession` copies the log prefix up to an event seq.
         supportsFork: true,
         goal: null,
+        terminalCommandApproval: "harness",
         displayName: "DeepSeek"
       }
     };
@@ -11497,6 +12021,7 @@ function createClaudeAgentEventMapper(options) {
   let lastAssistantUsage = null;
   let lastTopLevelAssistantUuid = "";
   const retractions = createRetractionLedger();
+  const deadStreams = createDeadStreamLedger();
   let lastReplayCheckpointId = "";
   let lastAssistantTypedError;
   let lastAssistantRequestId;
@@ -11824,6 +12349,7 @@ function createClaudeAgentEventMapper(options) {
           const requestId = raw.request_id ?? raw.requestId;
           if (requestId) lastAssistantRequestId = String(requestId);
           if (raw.message?.model) lastAssistantModel = String(raw.message.model);
+          deadStreams.confirm(assistantParent, raw.message?.content);
           if (!assistantParent) {
             lastTopLevelAssistantUuid = raw.uuid ?? "";
             for (const retracted of retractions.resolve(raw.supersedes)) emit(retracted);
@@ -11900,16 +12426,19 @@ ${text2}` : text2;
             const toolName = event.content_block.name ?? "unknown";
             activeToolBlocks.set(event.index, toolUseId);
             toolIdToName.set(toolUseId, toolName);
+            deadStreams.announceToolUse(streamParent, messageId, toolUseId);
             emit({ type: "content_delta", messageId, delta: { type: "tool_use", toolName, toolUseId, input: "", status: "streaming", parentToolUseId: streamParent } });
           } else if (event.type === "content_block_start" && event.content_block?.type === "thinking") {
             const timestamp = now();
             emit({ type: "content_delta", messageId, delta: { type: "thinking", thinking: "", parentToolUseId: streamParent, startedAt: timestamp, endedAt: timestamp } });
           } else if (event.type === "content_block_delta") {
             if (event.delta?.type === "text_delta" && event.delta.text) {
+              deadStreams.announceText(streamParent, messageId, event.delta.text);
               emit({ type: "content_delta", messageId, delta: { type: "text", text: event.delta.text, parentToolUseId: streamParent } });
               return { ...emptyResult(sessionId), textDelta: event.delta.text };
             }
             if (event.delta?.type === "thinking_delta" && typeof event.delta.thinking === "string") {
+              deadStreams.announceThinking(streamParent, messageId, event.delta.thinking);
               emit({ type: "content_delta", messageId, delta: { type: "thinking", thinking: event.delta.thinking, parentToolUseId: streamParent, endedAt: now() } });
             } else if (event.delta?.type === "input_json_delta" && event.delta.partial_json) {
               emit({
@@ -11923,6 +12452,7 @@ ${text2}` : text2;
           } else if (event.type === "content_block_stop") {
             activeToolBlocks.delete(event.index);
           } else if (event.type === "message_start") {
+            for (const retracted of deadStreams.begin(streamParent, messageId)) emit(retracted);
             emit({ type: "stream_message_start", messageId, apiMessageId: event.message?.id ?? "", model: event.message?.model ?? "", parentToolUseId: streamParent });
           } else if (event.type === "message_stop") {
             emit({ type: "stream_message_stop", messageId, parentToolUseId: streamParent });
@@ -11993,6 +12523,8 @@ ${text2}` : text2;
             rejectedRateLimit: hasRejectedRateLimit,
             resetsAt: rejectedRateLimitResetsAt
           });
+          const ghosts = deadStreams.flush();
+          if (!interrupted) for (const retracted of ghosts) emit(retracted);
           if (interrupted) {
             emit({ type: "message_interrupted", messageId, metadata });
             activeBackgroundTasks.clear();
@@ -12057,6 +12589,7 @@ ${text2}` : text2;
 var init_agent_event_mapper2 = __esm({
   "../../packages/claude/src/agent-event-mapper.ts"() {
     "use strict";
+    init_dead_stream_ledger();
     init_model_fallback_wire();
     init_slash_commands();
     init_session_goal();
@@ -12277,6 +12810,22 @@ var init_map_sdk_message = __esm({
   }
 });
 
+// ../../packages/claude/src/provider-settings-env.ts
+function providerSettingsEnv(providerEnv) {
+  if (!providerEnv) return void 0;
+  const env = {};
+  for (const [key, value] of Object.entries(providerEnv)) {
+    if (value !== void 0) env[key] = value;
+  }
+  if (env.ANTHROPIC_API_KEY && !("ANTHROPIC_AUTH_TOKEN" in env)) env.ANTHROPIC_AUTH_TOKEN = "";
+  return Object.keys(env).length > 0 ? env : void 0;
+}
+var init_provider_settings_env = __esm({
+  "../../packages/claude/src/provider-settings-env.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/claude/src/resolve-sdk-binary.ts
 import { createRequire } from "node:module";
 import { existsSync as existsSync5 } from "node:fs";
@@ -12444,6 +12993,7 @@ var init_run_sdk_turn = __esm({
     init_superone_host_owned_tools();
     init_map_sdk_message();
     init_agent_event_mapper2();
+    init_provider_settings_env();
     init_resolve_sdk_binary();
     init_root_permission_guard();
     init_ask_user_question_bridge();
@@ -12533,9 +13083,21 @@ function hasProviderModelMappingEnv(env) {
   if (!env) return false;
   return MODEL_MAPPING_ENV_IDS.some((key) => !!env[key]);
 }
+function claudeIdToBucket(id) {
+  const lower = id.toLowerCase();
+  if (lower.includes("opus")) return "opus";
+  if (lower.includes("sonnet")) return "sonnet";
+  if (lower.includes("haiku")) return "haiku";
+  return "default";
+}
 function resolveMappedClaudeModelId(model, env) {
-  if (!model || !hasOneM(model)) return model;
-  return hasProviderModelMappingEnv(env) ? stripOneM(model) : model;
+  if (!model || !env || !hasProviderModelMappingEnv(env)) return model;
+  const bucket = claudeIdToBucket(model);
+  if (bucket !== "default" && env[BUCKET_ENV_KEYS[bucket].id]) return bucket;
+  const defaultSlot = env[BUCKET_ENV_KEYS.default.id];
+  if (defaultSlot) return defaultSlot;
+  if (env[BUCKET_ENV_KEYS.opus.id]) return "opus";
+  return stripOneM(model);
 }
 var SESSION_AGENT_LAUNCHES_FIELD, SESSION_AGENT_TASK_MAX, DEFAULT_CONTEXT_WINDOW, CODEX_GPT_5_6_CONTEXT_WINDOW, CODEX_PERMISSION_PRESETS, DEFAULT_CODEX_PERMISSION_PRESET, DEFAULT_CODEX_PERMISSION_PROFILE, MODEL_BUCKETS, BUCKET_ENV_KEYS, ONE_M_SUFFIX, MODEL_MAPPING_ENV_IDS;
 var init_agent_types = __esm({
@@ -12662,6 +13224,7 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
   const binaryPath = (opts.binaryPath && existsSync6(opts.binaryPath) ? opts.binaryPath : null) ?? resolveSdkClaudeBinary() ?? void 0;
   const effort = opts.effort === "low" || opts.effort === "medium" || opts.effort === "high" || opts.effort === "xhigh" || opts.effort === "max" ? opts.effort : void 0;
   const env = opts.env ? { ...process.env, ...opts.env } : void 0;
+  const settingsEnv = providerSettingsEnv(opts.env);
   const sandbox = opts.sandboxMode === "on" || opts.sandboxMode === "auto" ? {
     enabled: true,
     autoAllowBashIfSandboxed: opts.sandboxMode === "auto",
@@ -12707,7 +13270,8 @@ function buildLiveOptions(opts, onPermission, onQuestion, onPlan, signal, timing
     ...opts.sessionId ? { resume: opts.sessionId } : {},
     ...opts.resumeSessionAt ? { resumeSessionAt: opts.resumeSessionAt } : {},
     ...opts.resumeDropsTurn ? { resumeDropsTurn: opts.resumeDropsTurn } : {},
-    ...env ? { env } : {}
+    ...env ? { env } : {},
+    ...settingsEnv ? { settings: { env: settingsEnv } } : {}
   };
   return {
     ...base,
@@ -12734,6 +13298,7 @@ var init_claude_live_session = __esm({
     init_message_bridge();
     init_agent_event_mapper2();
     init_map_sdk_message();
+    init_provider_settings_env();
     init_resolve_sdk_binary();
     init_root_permission_guard();
     init_ask_user_question_bridge();
@@ -13137,6 +13702,7 @@ var init_src2 = __esm({
   "../../packages/claude/src/index.ts"() {
     "use strict";
     init_run_sdk_turn();
+    init_provider_settings_env();
     init_message_bridge();
     init_claude_live_session();
     init_agent_event_mapper2();
@@ -14186,10 +14752,126 @@ var init_capability_prompt_tags = __esm({
   }
 });
 
+// ../../packages/shared/src/fuzzy-match.ts
+function forwardMatchFrom(queryLower, textLower, start) {
+  const indices = [];
+  let qi2 = 0;
+  for (let pi2 = start; pi2 < textLower.length && qi2 < queryLower.length; pi2++) {
+    if (textLower[pi2] === queryLower[qi2]) {
+      indices.push(pi2);
+      qi2++;
+    }
+  }
+  return indices;
+}
+function scoreIndices(indices, query, text2) {
+  let score = 0;
+  for (let i = 0; i < indices.length; i++) {
+    const idx = indices[i];
+    if (i > 0 && idx === indices[i - 1] + 1) score += 5;
+    if (text2[idx] === query[i]) score += 1;
+  }
+  if (indices.length > 0 && indices[0] === 0) score += 10;
+  score -= text2.length * 0.1;
+  return score;
+}
+function fuzzyMatch(query, text2) {
+  if (!query) return { match: true, score: 0, indices: [] };
+  const queryLower = query.toLowerCase();
+  const textLower = text2.toLowerCase();
+  const fwd = forwardMatchFrom(queryLower, textLower, 0);
+  if (fwd.length < queryLower.length) return { match: false, score: 0, indices: [] };
+  let bestIndices = fwd;
+  let bestScore = scoreIndices(fwd, query, text2);
+  const startPositions = /* @__PURE__ */ new Set();
+  for (let pi2 = 1; pi2 < textLower.length; pi2++) {
+    if (textLower[pi2] === queryLower[0]) startPositions.add(pi2);
+  }
+  for (const start of startPositions) {
+    const candidate = forwardMatchFrom(queryLower, textLower, start);
+    if (candidate.length < queryLower.length) continue;
+    const s4 = scoreIndices(candidate, query, text2);
+    if (s4 > bestScore) {
+      bestScore = s4;
+      bestIndices = candidate;
+    }
+  }
+  return { match: true, score: bestScore, indices: bestIndices };
+}
+var init_fuzzy_match = __esm({
+  "../../packages/shared/src/fuzzy-match.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/shared/src/git-mention-query.ts
+function gitMentionPortalOf(kind) {
+  return GIT_MENTION_PORTALS.gh.includes(kind) ? "gh" : "git";
+}
+function isGitHubRefKind(kind) {
+  return gitMentionPortalOf(kind) === "gh";
+}
+function isGitMentionRefKind(value) {
+  return typeof value === "string" && GIT_MENTION_REF_KINDS.includes(value);
+}
+function gitRefNameMatches(text2, query) {
+  const q2 = query.trim();
+  if (!q2) return true;
+  return fuzzyMatch(q2, text2).match;
+}
+function titledKind(kind) {
+  return kind === "commit" || isGitHubRefKind(kind);
+}
+function gitRefMatches(ref, query) {
+  return gitRefNameMatches(titledKind(ref.kind) ? ref.detail : ref.label, query);
+}
+var GIT_MENTION_REF_KINDS, GIT_MENTION_PORTALS, GIT_MENTION_KEYWORD, GH_MENTION_KEYWORD, GIT_MENTION_NAV_PREFIX, GH_MENTION_NAV_PREFIX, GIT_HOST_PROVIDERS, GIT_MENTION_REF_LIMIT;
+var init_git_mention_query = __esm({
+  "../../packages/shared/src/git-mention-query.ts"() {
+    "use strict";
+    init_fuzzy_match();
+    GIT_MENTION_REF_KINDS = ["branch", "commit", "worktree", "tag", "issue", "pr"];
+    GIT_MENTION_PORTALS = {
+      git: ["branch", "commit", "worktree", "tag"],
+      gh: ["issue", "pr"]
+    };
+    GIT_MENTION_KEYWORD = "git";
+    GH_MENTION_KEYWORD = "gh";
+    GIT_MENTION_NAV_PREFIX = `${GIT_MENTION_KEYWORD} `;
+    GH_MENTION_NAV_PREFIX = `${GH_MENTION_KEYWORD} `;
+    GIT_HOST_PROVIDERS = ["github"];
+    GIT_MENTION_REF_LIMIT = 50;
+  }
+});
+
+// ../../packages/shared/src/git-mention-tags.ts
+function unescapeGitTagText(value) {
+  return value.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function gitTagDisplayName(name) {
+  return unescapeGitTagText(name).trim();
+}
+function replaceGitTagsWithMention(text2) {
+  return text2.replace(GIT_TAG_REGEX, (_full, _kind, name) => `@${gitTagDisplayName(String(name))}`).replace(GIT_HOST_TAG_REGEX, (_full, _host, _kind, name) => `@${gitTagDisplayName(String(name))}`);
+}
+var INNER, GIT_TAG_REGEX, GIT_HOST_TAG_REGEX;
+var init_git_mention_tags = __esm({
+  "../../packages/shared/src/git-mention-tags.ts"() {
+    "use strict";
+    init_git_mention_query();
+    INNER = "\\s*<kind>([\\s\\S]*?)<\\/kind>\\s*<name>([\\s\\S]*?)<\\/name>\\s*<id>([\\s\\S]*?)<\\/id>\\s*";
+    GIT_TAG_REGEX = new RegExp(`<superone-git>${INNER}<\\/superone-git>`, "g");
+    GIT_HOST_TAG_REGEX = new RegExp(
+      `<superone-(${GIT_HOST_PROVIDERS.join("|")})>${INNER}<\\/superone-\\1>`,
+      "g"
+    );
+  }
+});
+
 // ../../packages/shared/src/miniapp-prompt-tags.ts
 function stripMiniAppMarkup(text2) {
   return stripCapabilityMarkup(
-    text2.replace(MINIAPP_REMINDER_REGEX, "").replace(SESSION_REMINDER_REGEX, "").replace(DESKTOP_APP_REMINDER_REGEX, "").replace(MINIAPP_TAG_REGEX, (_3, appName) => `@${String(appName).trim()}`).replace(SESSION_TAG_REGEX, (_3, title) => `@${String(title).trim()}`).replace(DESKTOP_APP_TAG_REGEX, (_3, name) => `@${String(name).trim()}`).replace(PATH_REF_TAG_REGEX, (_full, _kind, name, value) => {
+    replaceGitTagsWithMention(text2).replace(MINIAPP_REMINDER_REGEX, "").replace(SESSION_REMINDER_REGEX, "").replace(DESKTOP_APP_REMINDER_REGEX, "").replace(MINIAPP_TAG_REGEX, (_3, appName) => `@${String(appName).trim()}`).replace(SESSION_TAG_REGEX, (_3, title) => `@${String(title).trim()}`).replace(DESKTOP_APP_TAG_REGEX, (_3, name) => `@${String(name).trim()}`).replace(PATH_REF_TAG_REGEX, (_full, _kind, name, value) => {
       const n = String(name).trim();
       const v3 = String(value).trim();
       return `@${n || v3}`;
@@ -14202,6 +14884,7 @@ var init_miniapp_prompt_tags = __esm({
     "use strict";
     init_miniapp_mention_marker();
     init_capability_prompt_tags();
+    init_git_mention_tags();
     MINIAPP_TAG_REGEX = /<superone-miniapp>\s*<appname>([\s\S]*?)<\/appname>\s*<appid>([\s\S]*?)<\/appid>\s*<\/superone-miniapp>/g;
     MINIAPP_REMINDER_REGEX = /\n*<superone-miniapp-reminder>[\s\S]*?<\/superone-miniapp-reminder>\n*/g;
     SESSION_TAG_REGEX = /<superone-session>\s*<title>([\s\S]*?)<\/title>\s*<sessionId>([\s\S]*?)<\/sessionId>\s*<\/superone-session>/g;
@@ -17868,11 +18551,20 @@ function protocolServes(protocol, task) {
 function isVideoWire(protocol) {
   return VIDEO_WIRES.includes(protocol);
 }
+function isVersionedRoot(url2) {
+  return VERSIONED_ROOT.test(url2);
+}
 function familyBaseUrl(family, baseUrl) {
   const trimmed = baseUrl.replace(/\/+$/, "");
-  if (!trimmed || /\/(?:api\/)?v\d+(?:alpha|beta)?$/.test(trimmed)) return trimmed;
+  if (!trimmed || isVersionedRoot(trimmed)) return trimmed;
   return `${trimmed}${FAMILY_PATH[family]}`;
 }
+function joinRootAndPrefix(root, prefix, family) {
+  if (!prefix) return root;
+  if (root.endsWith(prefix)) return root;
+  if (prefix === FAMILY_PATH[family] && isVersionedRoot(root)) return root;
+  return `${root}${prefix}`;
+}
 function protocolRoute(protocol) {
   return `${FAMILY_PATH[PROTOCOL_FAMILY[protocol]]}${PROTOCOL_ROUTE[protocol]}`;
 }
@@ -17901,10 +18593,12 @@ function normalizeRouteShape(route) {
 function endpointBaseUrl(siteRoot, endpoint, protocol) {
   const root = (endpoint.baseUrl || siteRoot).replace(/\/+$/, "");
   if (!root) return "";
+  const family = PROTOCOL_FAMILY[protocol];
   const route = endpointRoute(endpoint, protocol);
   const suffix = PROTOCOL_ROUTE[protocol];
-  const prefix = route.endsWith(suffix) ? route.slice(0, route.length - suffix.length) : FAMILY_PATH[PROTOCOL_FAMILY[protocol]];
-  return `${root}${prefix}`;
+  if (root.endsWith(suffix)) return root.slice(0, root.length - suffix.length);
+  const prefix = route.endsWith(suffix) ? route.slice(0, route.length - suffix.length) : FAMILY_PATH[family];
+  return joinRootAndPrefix(root, prefix, family);
 }
 function harnessChatProtocols(harness, options) {
   if (harness === "claude" && options?.experimentalClaudeOpenAiChatEnabled) {
@@ -17912,7 +18606,7 @@ function harnessChatProtocols(harness, options) {
   }
   return HARNESS_CHAT_PROTOCOLS[harness];
 }
-var PROTOCOL_TASKS, PROTOCOL_FAMILIES, FAMILY_PROTOCOLS, PROTOCOL_FAMILY, WIRE_PROTOCOLS, PROTOCOL_ORDER, VIDEO_WIRES, FAMILY_PATH, PROTOCOL_ROUTE, ROUTE_PROTOCOL, HARNESS_CHAT_PROTOCOLS, PROXY_TRANSFORMERS_ENV;
+var PROTOCOL_TASKS, PROTOCOL_FAMILIES, FAMILY_PROTOCOLS, PROTOCOL_FAMILY, WIRE_PROTOCOLS, PROTOCOL_ORDER, VIDEO_WIRES, FAMILY_PATH, VERSIONED_ROOT, PROTOCOL_ROUTE, ROUTE_PROTOCOL, HARNESS_CHAT_PROTOCOLS, PROXY_TRANSFORMERS_ENV;
 var init_protocols = __esm({
   "../../packages/shared/src/platform-registry/protocols.ts"() {
     "use strict";
@@ -17950,6 +18644,7 @@ var init_protocols = __esm({
       newapi: "/v1",
       google: "/v1beta"
     };
+    VERSIONED_ROOT = /\/(?:api\/)?v\d+(?:alpha|beta)?$/;
     PROTOCOL_ROUTE = {
       "anthropic-messages": "/v1/messages",
       "openai-chat": "/chat/completions",
@@ -18124,6 +18819,19 @@ var init_capabilities2 = __esm({
   }
 });
 
+// ../../packages/shared/src/platform-registry/claude-env.ts
+function claudeThirdPartyEnv(resolved) {
+  if (CLI_KNOWN_BRANDS.has(resolved.brand)) return {};
+  return { CLAUDE_CODE_MODEL_CAPABILITIES: "-mid_conv_tool_change" };
+}
+var CLI_KNOWN_BRANDS;
+var init_claude_env = __esm({
+  "../../packages/shared/src/platform-registry/claude-env.ts"() {
+    "use strict";
+    CLI_KNOWN_BRANDS = /* @__PURE__ */ new Set(["anthropic", "claude", "bedrock", "vertexai"]);
+  }
+});
+
 // ../../packages/shared/src/model-tasks.ts
 var init_model_tasks = __esm({
   "../../packages/shared/src/model-tasks.ts"() {
@@ -18310,16 +19018,16 @@ function openaiChat(prefix, opts = {}) {
     models: opts.models
   };
 }
-var XIAOMI_MODELS, BAILIAN_CODING_PLAN_MODELS, BAILIAN_TOKEN_PLAN_MODELS, BAILIAN_API_MODELS, GLM_MODELS, MINIMAX_MODELS, DOUBAO_MODELS, SEEDANCE_MODELS, SORA_MODELS, VEO_MODELS, ARK_CODE_MODELS, KIMI_API_MODELS, KIMI_ANDANTE_MODELS, KIMI_ANDANTE_ENDPOINT_MODELS, KIMI_MODERATO_MODELS, KIMI_MODERATO_ENDPOINT_MODELS, KIMI_ALLEGRETTO_MODELS, KIMI_ALLEGRETTO_ENDPOINT_MODELS, NVIDIA_MODELS, CODING_TIMEOUT, DISABLE_NONESSENTIAL, EMPTY_AUTH_TOKEN, KIMI_BASE_EXTRA_ENV, KIMI_CTX_256K, KIMI_CTX_1M, KIMI_ANDANTE_EXTRA_ENV, KIMI_MODERATO_EXTRA_ENV, KIMI_ALLEGRETTO_EXTRA_ENV, KIMI_EXTRA_ENV, BUILTIN_PLATFORMS;
+var XIAOMI_MODELS, BAILIAN_CODING_PLAN_MODELS, BAILIAN_TOKEN_PLAN_MODELS, BAILIAN_API_MODELS, GLM_MODELS, MINIMAX_MODELS, DOUBAO_MODELS, SEEDANCE_MODELS, SORA_MODELS, VEO_MODELS, ARK_CODE_MODELS, KIMI_API_MODELS, KIMI_PLUS_MODELS, KIMI_PLUS_ENDPOINT_MODELS, KIMI_PRO_MODELS, KIMI_PRO_ENDPOINT_MODELS, KIMI_ANDANTE_MODELS, KIMI_ANDANTE_ENDPOINT_MODELS, KIMI_MODERATO_MODELS, KIMI_MODERATO_ENDPOINT_MODELS, KIMI_ALLEGRETTO_MODELS, KIMI_ALLEGRETTO_ENDPOINT_MODELS, KAT_CODER_MODELS, NVIDIA_MODELS, CODING_TIMEOUT, DISABLE_NONESSENTIAL, EMPTY_AUTH_TOKEN, MINIMAX_EXTRA_ENV, KIMI_BASE_EXTRA_ENV, KIMI_CTX_256K, KIMI_CTX_1M, KIMI_ANDANTE_EXTRA_ENV, KIMI_PLUS_EXTRA_ENV, KIMI_PRO_EXTRA_ENV, KIMI_MODERATO_EXTRA_ENV, KIMI_ALLEGRETTO_EXTRA_ENV, KIMI_EXTRA_ENV, BUILTIN_PLATFORMS;
 var init_builtin = __esm({
   "../../packages/shared/src/platform-registry/builtin.ts"() {
     "use strict";
     init_effective_endpoints();
     init_protocols();
     XIAOMI_MODELS = {
-      default: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
-      opus: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
-      sonnet: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
+      default: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
+      opus: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
+      sonnet: { id: "mimo-v2.5-pro[1m]", name: "MiMo V2.5 Pro" },
       haiku: { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" }
     };
     BAILIAN_CODING_PLAN_MODELS = {
@@ -18330,11 +19038,11 @@ var init_builtin = __esm({
       subagent: { id: "qwen3.7-plus", name: "Qwen 3.7 Plus" }
     };
     BAILIAN_TOKEN_PLAN_MODELS = {
-      default: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
-      opus: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
-      sonnet: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
+      default: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
+      opus: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
+      sonnet: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" },
       haiku: { id: "qwen3.6-flash", name: "Qwen 3.6 Flash" },
-      subagent: { id: "qwen3.7-max", name: "Qwen 3.7 Max" }
+      subagent: { id: "qwen3.8-flash", name: "Qwen 3.8 Flash" }
     };
     BAILIAN_API_MODELS = {
       default: { id: "qwen3.7-max", name: "Qwen 3.7 Max" },
@@ -18344,22 +19052,23 @@ var init_builtin = __esm({
       subagent: { id: "qwen3.7-max", name: "Qwen 3.7 Max" }
     };
     GLM_MODELS = {
-      default: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      opus: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      sonnet: { id: "glm-5.2[1m]", name: "GLM-5.2" },
-      haiku: { id: "glm-4.5-air", name: "GLM-4.5 Air" }
+      default: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      opus: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      sonnet: { id: "glm-5.3[1m]", name: "GLM-5.3" },
+      haiku: { id: "glm-5.3-flash[1m]", name: "GLM-5.3 Flash" }
     };
     MINIMAX_MODELS = {
       default: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
       opus: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
-      sonnet: { id: "MiniMax-M3", name: "MiniMax M3" },
-      haiku: { id: "MiniMax-M3", name: "MiniMax M3" }
+      sonnet: { id: "MiniMax-M3[1m]", name: "MiniMax M3" },
+      haiku: { id: "MiniMax-M3[1m]", name: "MiniMax M3" }
     };
     DOUBAO_MODELS = {
-      default: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      opus: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      sonnet: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" },
-      haiku: { id: "doubao-seed-2-0-code-preview-latest", name: "Doubao Seed 2.0 Code" }
+      default: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      opus: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      sonnet: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      haiku: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" },
+      subagent: { id: "doubao-seed-evolving", name: "Doubao Seed Evolving" }
     };
     SEEDANCE_MODELS = [
       { id: "doubao-seedance-2-0-260128", name: "Seedance 2.0", tasks: ["video"] },
@@ -18384,15 +19093,39 @@ var init_builtin = __esm({
       default: { id: "ark-code-latest", name: "Ark Code Latest" },
       opus: { id: "ark-code-latest", name: "Ark Code Latest" },
       sonnet: { id: "ark-code-latest", name: "Ark Code Latest" },
-      haiku: { id: "ark-code-latest", name: "Ark Code Latest" }
+      haiku: { id: "ark-code-latest", name: "Ark Code Latest" },
+      subagent: { id: "ark-code-latest", name: "Ark Code Latest" }
     };
     KIMI_API_MODELS = {
-      default: { id: "kimi-k3", name: "Kimi K3" },
-      opus: { id: "kimi-k3", name: "Kimi K3" },
-      sonnet: { id: "kimi-k3", name: "Kimi K3" },
-      haiku: { id: "kimi-k2.7-code-highspeed", name: "Kimi K2.7 Code HighSpeed" },
-      subagent: { id: "kimi-k3", name: "Kimi K3" }
+      default: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      opus: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      sonnet: { id: "kimi-k3[1m]", name: "Kimi K3" },
+      haiku: { id: "kimi-k2.7-code", name: "Kimi K2.7 Code" },
+      subagent: { id: "kimi-k3[1m]", name: "Kimi K3" }
+    };
+    KIMI_PLUS_MODELS = {
+      default: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      opus: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      sonnet: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      haiku: { id: "k3-256k", name: "Kimi K3 (256K)" },
+      subagent: { id: "k3-256k", name: "Kimi K3 (256K)" }
+    };
+    KIMI_PLUS_ENDPOINT_MODELS = [
+      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
+      { id: "k3-256k", name: "Kimi K3 (256K)", tasks: ["chat"] },
+      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] }
+    ];
+    KIMI_PRO_MODELS = {
+      default: { id: "k3[1m]", name: "Kimi K3" },
+      opus: { id: "k3[1m]", name: "Kimi K3" },
+      sonnet: { id: "k3[1m]", name: "Kimi K3" },
+      haiku: { id: "k3[1m]", name: "Kimi K3" },
+      subagent: { id: "k3[1m]", name: "Kimi K3" }
     };
+    KIMI_PRO_ENDPOINT_MODELS = [
+      ...KIMI_PLUS_ENDPOINT_MODELS,
+      { id: "kimi-for-coding-highspeed", name: "Kimi for Coding HighSpeed", tasks: ["chat"] }
+    ];
     KIMI_ANDANTE_MODELS = {
       default: { id: "kimi-for-coding", name: "Kimi for Coding" },
       opus: { id: "kimi-for-coding", name: "Kimi for Coding" },
@@ -18410,10 +19143,7 @@ var init_builtin = __esm({
       haiku: { id: "kimi-for-coding", name: "Kimi for Coding" },
       subagent: { id: "k3", name: "Kimi K3" }
     };
-    KIMI_MODERATO_ENDPOINT_MODELS = [
-      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
-      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] }
-    ];
+    KIMI_MODERATO_ENDPOINT_MODELS = KIMI_PLUS_ENDPOINT_MODELS;
     KIMI_ALLEGRETTO_MODELS = {
       default: { id: "k3[1m]", name: "Kimi K3" },
       opus: { id: "k3[1m]", name: "Kimi K3" },
@@ -18421,11 +19151,14 @@ var init_builtin = __esm({
       haiku: { id: "kimi-for-coding", name: "Kimi for Coding" },
       subagent: { id: "k3[1m]", name: "Kimi K3" }
     };
-    KIMI_ALLEGRETTO_ENDPOINT_MODELS = [
-      { id: "k3", name: "Kimi K3", tasks: ["chat"] },
-      { id: "kimi-for-coding", name: "Kimi for Coding", tasks: ["chat"] },
-      { id: "kimi-for-coding-highspeed", name: "Kimi for Coding HighSpeed", tasks: ["chat"] }
-    ];
+    KIMI_ALLEGRETTO_ENDPOINT_MODELS = KIMI_PRO_ENDPOINT_MODELS;
+    KAT_CODER_MODELS = {
+      default: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      opus: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      sonnet: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      haiku: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" },
+      subagent: { id: "kat-coder-pro-v2.5", name: "KAT-Coder Pro V2.5" }
+    };
     NVIDIA_MODELS = {
       default: { id: "moonshotai/kimi-k3", name: "Kimi K3" },
       opus: { id: "moonshotai/kimi-k3", name: "Kimi K3" },
@@ -18435,6 +19168,12 @@ var init_builtin = __esm({
     CODING_TIMEOUT = { API_TIMEOUT_MS: "3000000" };
     DISABLE_NONESSENTIAL = { CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1" };
     EMPTY_AUTH_TOKEN = { ANTHROPIC_AUTH_TOKEN: "" };
+    MINIMAX_EXTRA_ENV = {
+      ...CODING_TIMEOUT,
+      CLAUDE_CODE_AUTO_COMPACT_WINDOW: "1000000",
+      ...DISABLE_NONESSENTIAL,
+      ...EMPTY_AUTH_TOKEN
+    };
     KIMI_BASE_EXTRA_ENV = {
       ...CODING_TIMEOUT,
       ENABLE_TOOL_SEARCH: "false",
@@ -18451,21 +19190,24 @@ var init_builtin = __esm({
     };
     KIMI_ANDANTE_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
-      ...KIMI_CTX_256K
+      ...KIMI_CTX_1M
     };
-    KIMI_MODERATO_EXTRA_ENV = {
+    KIMI_PLUS_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
       ...KIMI_CTX_256K,
-      CLAUDE_CODE_EFFORT_LEVEL: "max"
+      CLAUDE_CODE_EFFORT_LEVEL: "high"
     };
-    KIMI_ALLEGRETTO_EXTRA_ENV = {
+    KIMI_PRO_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
       ...KIMI_CTX_1M,
-      CLAUDE_CODE_EFFORT_LEVEL: "max"
+      CLAUDE_CODE_EFFORT_LEVEL: "high"
     };
+    KIMI_MODERATO_EXTRA_ENV = KIMI_PLUS_EXTRA_ENV;
+    KIMI_ALLEGRETTO_EXTRA_ENV = KIMI_PRO_EXTRA_ENV;
     KIMI_EXTRA_ENV = {
       ...KIMI_BASE_EXTRA_ENV,
-      ...KIMI_CTX_1M
+      ...KIMI_CTX_1M,
+      CLAUDE_CODE_EFFORT_LEVEL: "max"
     };
     BUILTIN_PLATFORMS = [
       // Official subscription (OAuth) — Credential rows exist so bindings have a target, but hold no secret.
@@ -18617,10 +19359,67 @@ var init_builtin = __esm({
         description: "Kimi Code \u2014 \u7F16\u7A0B\u5957\u9910\u8BA2\u9605\uFF0C\u6309\u4F1A\u5458\u6863\u4F4D\u533A\u5206\u6A21\u578B\u4E0E\u4E0A\u4E0B\u6587\u914D\u7F6E",
         catalogProviderId: "moonshotai",
         plans: [
+          {
+            id: "plus",
+            name: "Plus",
+            description: "Kimi Code Plus \u2014 k3-256k / kimi-for-coding\uFF0CK3 \u9650 256k \u4E0A\u4E0B\u6587",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PLUS_EXTRA_ENV,
+                modelMapping: KIMI_PLUS_MODELS,
+                models: KIMI_PLUS_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PLUS_MODELS,
+                models: KIMI_PLUS_ENDPOINT_MODELS
+              })
+            ]
+          },
+          {
+            id: "pro",
+            name: "Pro",
+            description: "Kimi Code Pro \u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PRO_EXTRA_ENV,
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              })
+            ]
+          },
+          {
+            id: "max",
+            name: "Max",
+            description: "Kimi Code Max \u2014 \u4E0E Pro \u540C\u6A21\u578B\u96C6\uFF0C\u989D\u5EA6\u66F4\u9AD8",
+            auth: "api-key",
+            baseUrl: "https://api.kimi.com",
+            apiKeyUrl: "https://www.kimi.com/code/console",
+            endpoints: [
+              anthropic("/coding", {
+                extraEnv: KIMI_PRO_EXTRA_ENV,
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              }),
+              openaiChat("/coding/v1", {
+                modelMapping: KIMI_PRO_MODELS,
+                models: KIMI_PRO_ENDPOINT_MODELS
+              })
+            ]
+          },
           {
             id: "andante",
-            name: "Andante",
-            description: "Kimi Code Andante \u2014 kimi-for-coding\uFF0C256k \u4E0A\u4E0B\u6587",
+            name: "Andante\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Andante\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF09\u2014 kimi-for-coding\uFF0C1M \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18638,8 +19437,8 @@ var init_builtin = __esm({
           },
           {
             id: "moderato",
-            name: "Moderato",
-            description: "Kimi Code Moderato \u2014 k3 / kimi-for-coding\uFF0C256k \u4E0A\u4E0B\u6587",
+            name: "Moderato\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Moderato\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF0C\u5BF9\u5E94 Plus\uFF09\u2014 k3 / kimi-for-coding\uFF0CK3 \u9650 256k \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18657,8 +19456,8 @@ var init_builtin = __esm({
           },
           {
             id: "allegretto",
-            name: "Allegretto+",
-            description: "Kimi Code Allegretto \u53CA\u4EE5\u4E0A \u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
+            name: "Allegretto+\uFF08\u5DF2\u505C\u552E\uFF09",
+            description: "Kimi Code Allegretto \u53CA\u4EE5\u4E0A\uFF08\u65E7\u5957\u9910\uFF0C\u5DF2\u505C\u552E\uFF0C\u5BF9\u5E94 Pro\uFF09\u2014 k3[1m] / HighSpeed\uFF0C\u6700\u9AD8 1M \u4E0A\u4E0B\u6587",
             auth: "api-key",
             baseUrl: "https://api.kimi.com",
             apiKeyUrl: "https://www.kimi.com/code/console",
@@ -18732,11 +19531,11 @@ var init_builtin = __esm({
             name: "\u4E2D\u56FD\u7248",
             description: "MiniMax \u7F16\u7A0B\u5957\u9910\u6216 API \u2014 \u4E2D\u56FD\u533A\uFF0C\u6D77\u87BA AI \u4EE3\u7801\u6A21\u578B",
             auth: "api-key",
-            baseUrl: "https://api.minimaxi.com",
-            apiKeyUrl: "https://platform.minimaxi.com/user-center/basic-information/interface-key",
+            baseUrl: "https://api.minimax.cn",
+            apiKeyUrl: "https://platform.minimax.cn/user-center/basic-information/interface-key",
             endpoints: [
               anthropic("/anthropic", {
-                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
+                extraEnv: MINIMAX_EXTRA_ENV,
                 modelMapping: MINIMAX_MODELS
               }),
               openaiChat("/v1", {
@@ -18753,7 +19552,7 @@ var init_builtin = __esm({
             apiKeyUrl: "https://platform.minimax.io/user-center/basic-information/interface-key",
             endpoints: [
               anthropic("/anthropic", {
-                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
+                extraEnv: MINIMAX_EXTRA_ENV,
                 modelMapping: MINIMAX_MODELS
               }),
               openaiChat("/v1", {
@@ -18780,7 +19579,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine-agent-plan",
             endpoints: [
               anthropic("/api/plan", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: ARK_CODE_MODELS
               }),
               // Agent Plan OpenAI path — do not use /api/v3 (bypasses plan quota).
@@ -18798,7 +19597,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine-coding-plan",
             endpoints: [
               anthropic("/api/coding", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: ARK_CODE_MODELS
               }),
               // Coding Plan OpenAI path — do not use /api/v3 (bypasses plan quota).
@@ -18816,7 +19615,7 @@ var init_builtin = __esm({
             catalogProviderId: "volcengine",
             endpoints: [
               anthropic("/api/compatible", {
-                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                extraEnv: { ...CODING_TIMEOUT, ...DISABLE_NONESSENTIAL, ...EMPTY_AUTH_TOKEN },
                 modelMapping: DOUBAO_MODELS
               }),
               openaiChat("/api/v3", {
@@ -18898,12 +19697,13 @@ var init_builtin = __esm({
             id: "token",
             name: "Token Plan",
             auth: "api-key",
-            baseUrl: "https://dashscope.aliyuncs.com",
+            baseUrl: "https://token-plan.cn-beijing.maas.aliyuncs.com",
             apiKeyUrl: "https://bailian.console.aliyun.com/?tab=model#/api-key",
             catalogProviderId: "alibaba-token-plan-cn",
             endpoints: [
               anthropic("/apps/anthropic", {
-                extraEnv: { ...EMPTY_AUTH_TOKEN },
+                // qwen3.8-flash's usable window as published in the Token Plan Claude Code guide.
+                extraEnv: { ...EMPTY_AUTH_TOKEN, CLAUDE_CODE_MAX_CONTEXT_TOKENS: "983616" },
                 modelMapping: BAILIAN_TOKEN_PLAN_MODELS
               }),
               openaiChat("/compatible-mode/v1", {
@@ -18934,23 +19734,39 @@ var init_builtin = __esm({
         id: "kat-coder",
         brand: "kwaikat",
         name: "KAT-Coder",
-        description: "KAT-Coder \u2014 \u5FEB\u624B\u65D7\u4E0B AI \u7F16\u7A0B\u6A21\u578B\uFF08\u9700\u586B\u5165 Vanchin Endpoint ID\uFF09",
+        description: "KAT-Coder \u2014 \u5FEB\u624B\u65D7\u4E0B AI \u7F16\u7A0B\u6A21\u578B\uFF08StreamLake \u4E07\u64CE\uFF09",
         plans: [
           {
             id: "coding",
             name: "Coding Plan",
+            description: "StreamLake Coding Plan \u2014 \u8BA2\u9605\u989D\u5EA6\uFF0C\u56FA\u5B9A Claude Code \u7F51\u5173",
             auth: "api-key",
             baseUrl: "https://vanchin.streamlake.ai",
-            apiKeyUrl: "https://console.streamlake.com/console/wanqing/api-key",
+            apiKeyUrl: "https://console.streamlake.ai/console/home/index",
             endpoints: [
-              anthropic("/api/gateway/v1/endpoints/${ENDPOINT_ID}/claude-code-proxy", {
-                extraEnv: { ...EMPTY_AUTH_TOKEN },
-                modelMapping: {
-                  default: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  opus: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  sonnet: { id: "kat-coder-pro-v2", name: "KAT-Coder Pro V2" },
-                  haiku: { id: "KAT-Coder-Air V1", name: "KAT-Coder Air V1" }
-                }
+              anthropic("/api/gateway/coding/kat-coder-pro-v2.5/claude-code-proxy", {
+                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                modelMapping: KAT_CODER_MODELS
+              }),
+              openaiChat("/api/gateway/coding/v1", {
+                modelMapping: KAT_CODER_MODELS
+              })
+            ]
+          },
+          {
+            id: "api",
+            name: "API",
+            description: "StreamLake \u6309\u91CF\u8BA1\u8D39 \u2014 \u6309\u5B9E\u9645 token \u4ED8\u8D39",
+            auth: "api-key",
+            baseUrl: "https://vanchin.streamlake.ai",
+            apiKeyUrl: "https://console.streamlake.ai/console/home/index",
+            endpoints: [
+              anthropic("/api/gateway/v1/endpoints/kat-coder-pro-v2.5/claude-code-proxy", {
+                extraEnv: { ...CODING_TIMEOUT, ...EMPTY_AUTH_TOKEN },
+                modelMapping: KAT_CODER_MODELS
+              }),
+              openaiChat("/api/gateway/v1/endpoints", {
+                modelMapping: KAT_CODER_MODELS
               })
             ]
           }
@@ -18972,14 +19788,14 @@ var init_builtin = __esm({
               anthropic("/anthropic", {
                 extraEnv: {
                   ...EMPTY_AUTH_TOKEN,
-                  CLAUDE_CODE_MAX_OUTPUT_TOKENS: "6000",
+                  CLAUDE_CODE_MAX_OUTPUT_TOKENS: "131072",
                   ...DISABLE_NONESSENTIAL
                 },
                 modelMapping: {
-                  default: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  opus: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  sonnet: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" },
-                  haiku: { id: "LongCat-Flash-Chat", name: "LongCat Flash Chat" }
+                  default: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  opus: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  sonnet: { id: "LongCat-2.0", name: "LongCat 2.0" },
+                  haiku: { id: "LongCat-2.0", name: "LongCat 2.0" }
                 }
               })
             ]
@@ -19030,7 +19846,7 @@ var init_builtin = __esm({
                   default: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
                   opus: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
                   sonnet: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" },
-                  haiku: { id: "deepseek-v4-flash", name: "DeepSeek V4 Flash" },
+                  haiku: { id: "deepseek-flash", name: "DeepSeek Flash" },
                   subagent: { id: "deepseek-v4-pro", name: "DeepSeek V4 Pro" }
                 }
               })
@@ -19076,10 +19892,10 @@ var init_builtin = __esm({
               anthropic("", {
                 extraEnv: { ...EMPTY_AUTH_TOKEN },
                 modelMapping: {
-                  default: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  opus: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  sonnet: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" },
-                  haiku: { id: "ZhipuAI/GLM-5.1", name: "GLM-5.1" }
+                  default: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  opus: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  sonnet: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" },
+                  haiku: { id: "ZhipuAI/GLM-5.2", name: "GLM-5.2" }
                 }
               })
             ]
@@ -19304,6 +20120,7 @@ var init_platform_registry = __esm({
     init_protocols();
     init_types2();
     init_capabilities2();
+    init_claude_env();
     init_merge();
     init_relay_discovery();
     init_relay_identify();
@@ -22149,7 +22966,10 @@ function listHarnessApiProviders(store, harness, options) {
 }
 function buildHarnessEnv(harness, resolved) {
   if (!resolved) return {};
-  const env = { ...resolved.extraEnv ?? {} };
+  const env = {
+    ...harness === "claude" ? claudeThirdPartyEnv(resolved) : {},
+    ...resolved.extraEnv ?? {}
+  };
   if (harness === "claude") {
     if (resolved.apiKey) {
       env.ANTHROPIC_API_KEY = resolved.apiKey;
@@ -52932,6 +53752,23 @@ var init_computer_use_result_shape = __esm({
   }
 });
 
+// ../../packages/shared/src/jev-run-result-shape.ts
+function isJevRunToolName(toolName) {
+  if (!toolName) return false;
+  return /(?:^|__)(?:browser|computer|device)_run$/.test(toolName);
+}
+function looksLikeJevRunResult(obj) {
+  const status = obj.status;
+  if (status !== "paused" && status !== "done" && status !== "aborted") return false;
+  if (typeof obj.runId !== "string") return false;
+  return Array.isArray(obj.since_last) || typeof obj.progress === "object" && obj.progress !== null || typeof obj.steps === "number";
+}
+var init_jev_run_result_shape = __esm({
+  "../../packages/shared/src/jev-run-result-shape.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/acp/src/tool-result-map.ts
 function formatAcpRawOutput(raw) {
   return formatAgentToolOutput(raw);
@@ -53037,11 +53874,12 @@ function shouldKeepFullToolResult(summary2, toolName) {
   if (looksLikeSessionArchiveToon(summary2)) return true;
   if (isComputerUseToolName(toolName)) return true;
   if (looksLikeComputerUseOutline(summary2)) return true;
+  if (isJevRunToolName(toolName)) return true;
   const trimmed = summary2.trim();
   if (!trimmed.startsWith("{")) return false;
   try {
     const obj = JSON.parse(trimmed);
-    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || obj.kind === "native" && typeof obj.nativeType === "string" || looksLikeCollabResult(obj) || looksLikeSessionArchiveJson(obj) || looksLikeComputerUseResult(obj);
+    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || obj.kind === "native" && typeof obj.nativeType === "string" || looksLikeCollabResult(obj) || looksLikeSessionArchiveJson(obj) || looksLikeComputerUseResult(obj) || looksLikeJevRunResult(obj);
   } catch {
     return false;
   }
@@ -53055,6 +53893,7 @@ var init_tool_result_map = __esm({
     init_capability_prompt_tags();
     init_session_archive_result_shape();
     init_computer_use_result_shape();
+    init_jev_run_result_shape();
     init_tool_ui();
     init_tool_normalization();
   }
@@ -72562,8 +73401,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.67.0".trim()) {
-    return "0.67.0".trim();
+  if ("0.68.0-alpha.1".trim()) {
+    return "0.68.0-alpha.1".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -74662,6 +75501,7 @@ async function cloneRepository(input) {
 }
 
 // src/rpc/handlers.ts
+init_git_mention_query();
 import { existsSync as existsSync26, mkdirSync as mkdirSync15, readdirSync as readdirSync9, statSync as statSync6 } from "node:fs";
 import { join as pathJoin, resolve as pathResolve } from "node:path";
 import { arch, cpus, freemem, homedir as homedir7, hostname as hostname4, platform, totalmem, uptime } from "node:os";
@@ -77080,6 +77920,10 @@ async function dispatchRpcInner(method, payload, ctx) {
       return handleGitCreateBranch(payload, ctx);
     case "git.worktrees":
       return handleGitWorktrees(payload, ctx);
+    case "git.mentionRefs":
+      return handleGitMentionRefs(payload, ctx);
+    case "git.mentionCapabilities":
+      return handleGitMentionCapabilities(payload, ctx);
     case "git.worktreeActivate":
       return handleGitWorktreeActivate(payload, ctx);
     case "git.worktreeCheckedOutBranches":
@@ -78133,6 +78977,41 @@ function handleGitCreateBranch(payload, ctx) {
     return mapThrown8(err);
   }
 }
+async function handleGitMentionCapabilities(payload, ctx) {
+  const denied = requireScopes8(ctx.client, OPERATION_SCOPES.readWorkspace);
+  if (denied) return denied;
+  const p3 = asRecord24(payload);
+  try {
+    return {
+      result: await ctx.workspaceGit.mentionCapabilities(
+        String(p3.projectId ?? ""),
+        typeof p3.cwd === "string" ? p3.cwd : null
+      )
+    };
+  } catch (err) {
+    return mapThrown8(err);
+  }
+}
+async function handleGitMentionRefs(payload, ctx) {
+  const denied = requireScopes8(ctx.client, OPERATION_SCOPES.readWorkspace);
+  if (denied) return denied;
+  const p3 = asRecord24(payload);
+  if (!isGitMentionRefKind(p3.kind)) {
+    return { error: { code: "invalid_argument", message: "kind must be branch | commit | worktree | tag | issue | pr" } };
+  }
+  try {
+    return {
+      result: await ctx.workspaceGit.mentionRefs(
+        String(p3.projectId ?? ""),
+        p3.kind,
+        typeof p3.query === "string" ? p3.query : "",
+        typeof p3.cwd === "string" ? p3.cwd : null
+      )
+    };
+  } catch (err) {
+    return mapThrown8(err);
+  }
+}
 function handleGitWorktrees(payload, ctx) {
   const denied = requireScopes8(ctx.client, OPERATION_SCOPES.readWorkspace);
   if (denied) return denied;
@@ -85248,6 +86127,10 @@ function gitErrorMessage(err) {
   if (stderr) return stderr;
   return err?.message ?? "Unknown git error";
 }
+var NOT_A_REPO_RE = /not a git repository/i;
+function isNotGitRepoError(err) {
+  return NOT_A_REPO_RE.test(gitErrorMessage(err));
+}
 
 // ../../packages/runtime/src/git/shortstat.ts
 function parseShortstat(shortstat) {
@@ -85306,6 +86189,220 @@ function gitRunSync(folderPath, args, env) {
   }
 }
 
+// ../../packages/runtime/src/git/mention-refs.ts
+init_git_mention_query();
+
+// ../../packages/runtime/src/git/gh-run.ts
+init_spawn_env();
+import { execFile as execFile4 } from "child_process";
+var GH_MAX_BUFFER = 16 * 1024 * 1024;
+function isGhMissingError(err) {
+  return err?.code === "ENOENT";
+}
+function ghRun(folderPath, args, timeoutMs, env) {
+  return new Promise((resolve17, reject) => {
+    execFile4(
+      "gh",
+      args,
+      {
+        cwd: folderPath,
+        env: { ...env ? buildSafeEnv(env) : process.env, GH_PROMPT_DISABLED: "1", GH_NO_UPDATE_NOTIFIER: "1" },
+        maxBuffer: GH_MAX_BUFFER,
+        timeout: timeoutMs
+      },
+      (err, stdout, stderr) => {
+        if (err) {
+          const annotated = err;
+          if (stderr && !annotated.stderr) annotated.stderr = String(stderr);
+          annotated.ghArgs = args;
+          reject(annotated);
+        } else {
+          resolve17(stdout.trimEnd());
+        }
+      }
+    );
+  });
+}
+
+// ../../packages/runtime/src/git/mention-refs.ts
+var REF_SCAN_LIMIT = 500;
+var COMMIT_SCAN_LIMIT = 500;
+var REF_FORMAT = ["%(refname:short)", "%(objectname)", "%(subject)", "%(committerdate:iso-strict)", "%(HEAD)"].join("%00");
+var TAG_FORMAT = ["%(refname:short)", "%(objectname)", "%(subject)", "%(creatordate:iso-strict)"].join("%00");
+var LOG_FORMAT = ["%H", "%s", "%an", "%aI"].join("%x00");
+var HEX_PREFIX_RE = /^[0-9a-f]{4,40}$/i;
+var ISSUE_NUMBER_RE = /^#?(\d+)$/;
+var GH_ITEM_FIELDS = "number,title,state,author,updatedAt";
+var GH_PR_FIELDS = `${GH_ITEM_FIELDS},isDraft`;
+async function listGitMentionRefs(kind, query, runners, limit = GIT_MENTION_REF_LIMIT) {
+  const { git: git2, gh } = typeof runners === "function" ? { git: runners } : runners;
+  const needle = query.trim();
+  if (isGitHubRefKind(kind)) {
+    if (!gh) return { ok: false, reason: "gh-unavailable" };
+    try {
+      return { ok: true, refs: (await listGitHubItems(kind, needle, gh)).slice(0, limit) };
+    } catch (err) {
+      if (isGhMissingError(err)) return { ok: false, reason: "gh-unavailable" };
+      return { ok: false, reason: "error", error: ghErrorMessage(err) };
+    }
+  }
+  try {
+    const refs = await listRefs(kind, needle, git2);
+    return { ok: true, refs: refs.slice(0, limit) };
+  } catch (err) {
+    if (isNotGitRepoError(err)) return { ok: false, reason: "not-repo" };
+    return { ok: false, reason: "error", error: err.message };
+  }
+}
+async function probeGitMentionCapabilities(runners) {
+  let repo = "ready";
+  try {
+    await runners.git(["rev-parse", "--git-dir"]);
+  } catch {
+    repo = "not-repo";
+  }
+  if (repo !== "ready" || !runners.gh) return { repo, github: false };
+  try {
+    await runners.gh(["repo", "view", "--json", "nameWithOwner"]);
+    return { repo, github: true };
+  } catch {
+    return { repo, github: false };
+  }
+}
+function ghErrorMessage(err) {
+  const e = err;
+  const stderr = e.stderr?.trim();
+  return stderr ? stderr.split("\n")[0] : e.message ?? "gh failed";
+}
+async function listRefs(kind, needle, run) {
+  switch (kind) {
+    case "branch":
+      return listBranches(needle, run);
+    case "tag":
+      return listTags(needle, run);
+    case "commit":
+      return listCommits(needle, run);
+    case "worktree":
+      return listWorktrees(needle, run);
+    case "issue":
+    case "pr":
+      throw new Error(`${kind} is a GitHub kind`);
+  }
+}
+function ghItemState(item) {
+  if (item.isDraft) return "draft";
+  const s4 = item.state.toLowerCase();
+  return s4 === "merged" ? "merged" : s4 === "closed" ? "closed" : "open";
+}
+function parseGhItems(kind, raw) {
+  const items = JSON.parse(raw || "[]");
+  return (Array.isArray(items) ? items : [items]).map((item) => ({
+    kind,
+    id: String(item.number),
+    label: `#${item.number}`,
+    detail: item.title ?? "",
+    date: item.updatedAt,
+    author: item.author?.login,
+    state: ghItemState(item),
+    host: "github"
+  }));
+}
+async function listGitHubItems(kind, needle, gh) {
+  const fields = kind === "pr" ? GH_PR_FIELDS : GH_ITEM_FIELDS;
+  const list = (extra) => gh([kind, "list", "--limit", String(GIT_MENTION_REF_LIMIT), "--json", fields, ...extra]);
+  if (!needle) return parseGhItems(kind, await list(["--state", "open"]));
+  const searched = parseGhItems(kind, await list(["--state", "all", "--search", needle]));
+  const number4 = ISSUE_NUMBER_RE.exec(needle)?.[1];
+  if (!number4) return searched;
+  let exact = [];
+  try {
+    exact = parseGhItems(kind, await gh([kind, "view", number4, "--json", fields]));
+  } catch {
+  }
+  const seen = new Set(exact.map((r) => r.id));
+  return [...exact, ...searched.filter((r) => !seen.has(r.id))];
+}
+async function listBranches(needle, run) {
+  const raw = await run([
+    "for-each-ref",
+    "refs/heads",
+    "--sort=-committerdate",
+    `--count=${REF_SCAN_LIMIT}`,
+    `--format=${REF_FORMAT}`
+  ]);
+  const refs = [];
+  for (const line of raw.split("\n")) {
+    if (!line) continue;
+    const [name = "", , subject = "", date5 = "", head = ""] = line.split("\0");
+    const ref = { kind: "branch", id: name, label: name, detail: subject, date: date5, current: head === "*" };
+    if (gitRefMatches(ref, needle)) refs.push(ref);
+  }
+  refs.sort((a, b3) => Number(b3.current === true) - Number(a.current === true));
+  return refs;
+}
+async function listTags(needle, run) {
+  const raw = await run([
+    "for-each-ref",
+    "refs/tags",
+    "--sort=-creatordate",
+    `--count=${REF_SCAN_LIMIT}`,
+    `--format=${TAG_FORMAT}`
+  ]);
+  const refs = [];
+  for (const line of raw.split("\n")) {
+    if (!line) continue;
+    const [name = "", , subject = "", date5 = ""] = line.split("\0");
+    const ref = { kind: "tag", id: name, label: name, detail: subject, date: date5 };
+    if (gitRefMatches(ref, needle)) refs.push(ref);
+  }
+  return refs;
+}
+function parseLog(raw) {
+  const refs = [];
+  for (const line of raw.split("\n")) {
+    if (!line) continue;
+    const [sha = "", subject = "", author = "", date5 = ""] = line.split("\0");
+    if (!sha) continue;
+    refs.push({ kind: "commit", id: sha, label: sha.slice(0, 7), detail: subject, date: date5, author });
+  }
+  return refs;
+}
+async function listCommits(needle, run) {
+  if (!needle) return parseLog(await run(["log", `-n${GIT_MENTION_REF_LIMIT}`, `--format=${LOG_FORMAT}`]));
+  const recent = parseLog(await run(["log", `-n${COMMIT_SCAN_LIMIT}`, `--format=${LOG_FORMAT}`]));
+  const byMessage = recent.filter((r) => gitRefMatches(r, needle)).slice(0, GIT_MENTION_REF_LIMIT);
+  if (!HEX_PREFIX_RE.test(needle)) return byMessage;
+  let bySha = [];
+  try {
+    bySha = parseLog(await run(["log", "-n1", `--format=${LOG_FORMAT}`, needle, "--"]));
+  } catch {
+  }
+  const seen = new Set(bySha.map((r) => r.id));
+  return [...bySha, ...byMessage.filter((r) => !seen.has(r.id))];
+}
+async function listWorktrees(needle, run) {
+  const [raw, toplevel] = await Promise.all([
+    run(["worktree", "list", "--porcelain"]),
+    run(["rev-parse", "--show-toplevel"]).catch(() => "")
+  ]);
+  const here = toplevel.trim().replace(/[\\/]+$/, "");
+  const refs = [];
+  for (const wt2 of parseWorktreePorcelain(raw)) {
+    if (wt2.bare) continue;
+    const label = wt2.branch ?? (wt2.head ? `detached @ ${wt2.head.slice(0, 7)}` : wt2.path);
+    const ref = {
+      kind: "worktree",
+      id: wt2.path,
+      label,
+      detail: wt2.path,
+      current: !!here && wt2.path.replace(/[\\/]+$/, "") === here
+    };
+    if (gitRefMatches(ref, needle)) refs.push(ref);
+  }
+  refs.sort((a, b3) => Number(b3.current === true) - Number(a.current === true));
+  return refs;
+}
+
 // ../../packages/runtime/src/git/worktree-plan.ts
 import { basename as basename3, dirname as dirname17, join as join32, resolve as resolve12, sep as sep4 } from "node:path";
 import { homedir as homedir8 } from "node:os";
@@ -85352,6 +86449,7 @@ function parseNumstat(numstat) {
 }
 
 // src/workspace/git-service.ts
+var GH_TIMEOUT_MS = 15e3;
 function git(cwd, args, env) {
   return gitRunSync(cwd, args, env);
 }
@@ -85494,6 +86592,21 @@ var WorkspaceGitService = class {
       return { ok: false, error: gitErrorMessage(err) };
     }
   }
+  /** `@git` / `@gh` popup rows; `absolutePath` narrows to a linked worktree of the project. */
+  mentionRefs(projectId, kind, query, absolutePath) {
+    return listGitMentionRefs(kind, query, this.mentionRunners(projectId, absolutePath));
+  }
+  /** What the `@git` / `@gh` portals may offer for the project (or one of its worktrees). */
+  mentionCapabilities(projectId, absolutePath) {
+    return probeGitMentionCapabilities(this.mentionRunners(projectId, absolutePath));
+  }
+  mentionRunners(projectId, absolutePath) {
+    const cwd = absolutePath ? this.assertRepoWorktreePath(projectId, absolutePath) : this.root(projectId);
+    return {
+      git: async (args) => gitRunSync(cwd, args),
+      gh: (args) => ghRun(cwd, args, GH_TIMEOUT_MS)
+    };
+  }
   worktrees(projectId) {
     const cwd = this.root(projectId);
     try {