@surething/cockpit 1.0.253 → 1.0.254

package/dist/scheduledTasks.mjs

@@ -10,7 +10,7 @@ import {
   setRunAbort,
   startRun,
   updateGlobalState
-} from "./chunk-RUNUGDPP.mjs";
+} from "./chunk-H3JSYJCZ.mjs";
 import {
   AgentError,
   AppRuntime,
@@ -24,20 +24,24 @@ import {
   SKILLS_FILE,
   SnapshotService,
   createOllamaModel,
+  createOpenAiCompatModel,
   encodePath,
   findCodexSessionPath,
   findKimiSessionPath,
+  getBuiltinSessionsRoot,
   getClaude2SessionPath,
   getClaudeSessionPath,
+  getDeepseekBuiltinSessionPath,
   getDeepseekSessionPath,
   getOllamaSessionPath,
   mutateJsonFile,
   notePendingRecord,
   readJsonFile,
+  sanitizedSpawnEnv,
   settlePendingRecord,
   withFileLock,
   writeJsonFile
-} from "./chunk-BRW4ZEIC.mjs";
+} from "./chunk-7G4OXJJ4.mjs";
 import {
   __export
 } from "./chunk-7P6ASYW6.mjs";
@@ -2577,7 +2581,7 @@ ${tempImageFiles.map((f) => f.path).join("\n")}` : prompt;
         cols,
         rows,
         cwd,
-        env: process.env
+        env: sanitizedSpawnEnv()
       });
     } catch (e) {
       cleanupImages();
@@ -3037,8 +3041,10 @@ function buildClaudeOptions(ctx) {
     },
     includePartialMessages: true,
     abortController: abort,
-    // claude2 engine: override config directory to ~/.claude2.
-    ...engine === "claude2" && { env: { ...process.env, CLAUDE_CONFIG_DIR: CLAUDE2_DIR } }
+    // env is ALWAYS passed (not just for claude2): without it the SDK inherits
+    // process.env verbatim, handing the agent this server's NODE_ENV=production.
+    // See sanitizedSpawnEnv. claude2 additionally points at ~/.claude2.
+    env: sanitizedSpawnEnv(engine === "claude2" ? { CLAUDE_CONFIG_DIR: CLAUDE2_DIR } : {})
   });
 }
 var claudeSpec = {
@@ -3062,93 +3068,82 @@ async function readDeepseekApiKey() {
   return creds.apiKey?.trim() ?? "";
 }
 
-// packages/feature/agent/src/server/engines/deepseek.ts
-var DEEPSEEK_BASE_URL = "https://api.deepseek.com/anthropic";
-var DEFAULT_MODEL = "deepseek-v4-pro";
-var SMALL_FAST_MODEL = "deepseek-v4-flash";
-var ALLOWED_MODELS = /* @__PURE__ */ new Set(["deepseek-v4-flash", "deepseek-v4-pro"]);
-async function readSettings() {
-  return readJsonFile(SETTINGS_FILE, {});
-}
-function resolveModel(requested, saved) {
-  if (typeof requested === "string" && ALLOWED_MODELS.has(requested)) return requested;
-  if (saved && ALLOWED_MODELS.has(saved)) return saved;
-  return DEFAULT_MODEL;
-}
-function buildDeepseekEnv(apiKey, model) {
-  const { ANTHROPIC_AUTH_TOKEN: _t, ANTHROPIC_API_KEY: _k, ...inherited } = process.env;
-  void _t;
-  void _k;
-  return {
-    ...inherited,
-    ANTHROPIC_BASE_URL: DEEPSEEK_BASE_URL,
-    ANTHROPIC_API_KEY: apiKey,
-    // DeepSeek sends this as x-api-key (fully supported)
-    ANTHROPIC_MODEL: model,
-    ANTHROPIC_SMALL_FAST_MODEL: SMALL_FAST_MODEL,
-    CLAUDE_CONFIG_DIR: DEEPSEEK_DIR,
-    DISABLE_PROMPT_CACHING: "1",
-    // DeepSeek runs its own server-side prefix KV cache
-    CLAUDE_CODE_USE_BEDROCK: "0",
-    CLAUDE_CODE_USE_VERTEX: "0",
-    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1"
-  };
-}
-function buildDeepseekOptions(ctx, env) {
-  return (abort, resume) => ({
-    ...resume && { resume },
-    ...ctx.cwd && { cwd: ctx.cwd },
-    settingSources: ["user", "project", "local"],
-    permissionMode: "bypassPermissions",
-    allowDangerouslySkipPermissions: true,
-    includePartialMessages: true,
-    abortController: abort,
-    env
-  });
-}
-var deepseekSpec = {
-  name: "deepseek",
-  // Pre-check BEFORE startRun: API key must exist; resolve model into params (no registry pollution).
-  async preflight(params) {
-    const settings = await readSettings();
-    const apiKey = await readDeepseekApiKey();
-    if (!apiKey) {
-      return {
-        ok: false,
-        status: 400,
-        error: "DeepSeek API key is not configured. Open the DeepSeek picker in the chat header to set one."
-      };
-    }
-    params.model = resolveModel(typeof params.model === "string" ? params.model : void 0, settings.engines?.deepseek?.model);
-    return { ok: true };
-  },
-  runner: {
-    async run(ctx) {
-      const apiKey = await readDeepseekApiKey();
-      const model = typeof ctx.params.model === "string" ? ctx.params.model : DEFAULT_MODEL;
-      const env = buildDeepseekEnv(apiKey, model);
-      await runSdkLoop(ctx, buildDeepseekOptions(ctx, env));
-    },
-    resolveTitle: (cwd, sessionId) => getSessionTitle(cwd, sessionId)
-  }
-};
-
-// packages/feature/agent/src/server/engines/ollama/index.ts
+// packages/feature/agent/src/server/engines/builtinAgent/index.ts
 import { streamText, stepCountIs } from "ai";
 import { randomUUID as randomUUID3 } from "crypto";
 
-// packages/feature/agent/src/server/engines/ollama/session.ts
+// packages/feature/agent/src/server/engines/builtinAgent/prompt.ts
+function buildSystemPrompt(cwd) {
+  return `You are a coding agent. You help the user build and modify software using the provided tools.
+
+CWD: ${cwd}
+
+## Language
+
+ALWAYS reply in the SAME language as the user's most recent message \u2014 whatever language they used (Chinese, English, Japanese, French, Spanish, \u2026), mirror it. Do NOT default to English just because this system prompt is written in English. If the user switches language mid-conversation, switch with them on the next reply.
+
+Exceptions that stay as-is regardless of reply language:
+- Tool "thought" parameters: keep the "PREVIOUS / THIS / EXPECT" template in English.
+- Code, identifiers, file paths, shell commands, and error messages quoted from tool output: keep original.
+- Only your natural-language prose to the user follows the user's language.
+
+## Workflow
+
+1. Plan: call TodoWrite FIRST to break down the task into steps (all pending, first one in_progress).
+2. Act: execute steps one by one. After completing each step, call TodoWrite to update progress (mark completed, set next in_progress).
+3. Check: after each tool call, assess \u2014 did it succeed? Is the overall task done? If not, continue to the next step.
+4. Respond: you MUST always end with a text response to the user. Summarize what was done, what was found, or what remains.
+
+IMPORTANT: never stop in the middle of a task silently. If you cannot continue (error, missing info, blocked), respond to the user explaining why and what is needed.
+
+NEVER repeat a tool call with the same or similar arguments. When a search finds nothing, follow this escalation:
+1. Simplify the pattern (shorter keyword, remove qualifiers, use a single core term)
+2. Broaden the path (search parent directory, or omit path to search entire CWD)
+3. Switch tool (Grep \u2192 Glob for filenames, Grep \u2192 Bash with find, or Read a likely file directly)
+4. Give up after 3 failed attempts on the same topic \u2014 tell the user what you tried and ask for guidance.
+
+## Tools
+
+- Read: read a file by line range.
+- Edit: exact string replacement in an existing file (prefer over Write).
+- Write: create new files or full rewrites only.
+- Bash: run shell commands.
+- Grep: ripgrep search. ALWAYS use Grep (never rg/grep via Bash).
+- Glob: fast file listing by glob pattern.
+- TodoWrite: plan tasks and track progress. ALWAYS call this first.
+
+Every tool has a "thought" parameter \u2014 ALWAYS fill it using this format:
+"PREVIOUS: [what the last tool returned and whether it achieved the goal] \u2192 THIS: [what I am doing now and why] \u2192 EXPECT: [what result I expect]"
+Example: "PREVIOUS: Grep found 3 matches in cache.go \u2192 THIS: Read cache.go to see full implementation \u2192 EXPECT: understand the caching logic"
+If this is the first tool call, write "PREVIOUS: n/a" for the first part.
+
+## Rules
+
+Tool usage:
+- Read before modify: do NOT edit a file you haven't Read.
+- Absolute paths only: resolve relative paths against CWD.
+
+Accuracy:
+- Verify before retracting: when the user questions you, use tools to verify first, then respond based on evidence. Do NOT blindly agree you were wrong.
+- Honesty over confidence: only state what is backed by tool output. If unsure, say so and state what info is needed or propose a verification plan. Never fabricate data.
+
+## Output
+
+- Be concise. Lead with the action or answer.
+- Only elaborate on decisions, blockers, or milestones.`;
+}
+
+// packages/feature/agent/src/server/engines/builtinAgent/session.ts
 import { readFileSync as readFileSync3, existsSync, mkdirSync as mkdirSync2, appendFileSync } from "fs";
 import { join as join3 } from "path";
-var SESSIONS_ROOT = join3(COCKPIT_DIR, "ollama-sessions");
-function getSessionDir(cwd) {
-  return join3(SESSIONS_ROOT, encodePath(cwd));
+function getSessionDir(root, cwd) {
+  return join3(root, encodePath(cwd));
 }
-function getSessionPath(cwd, sessionId) {
-  return join3(getSessionDir(cwd), `${sessionId}.jsonl`);
+function getSessionPath(root, cwd, sessionId) {
+  return join3(getSessionDir(root, cwd), `${sessionId}.jsonl`);
 }
-function readSessionMessages(cwd, sessionId) {
-  const path2 = getSessionPath(cwd, sessionId);
+function readSessionMessages(root, cwd, sessionId) {
+  const path2 = getSessionPath(root, cwd, sessionId);
   if (!existsSync(path2)) return [];
   const lines = readFileSync3(path2, "utf-8").split("\n").filter(Boolean);
   const transcriptEntries = [];
@@ -3240,14 +3235,14 @@ function readSessionMessages(cwd, sessionId) {
   }
   return messages;
 }
-function appendSessionLine(cwd, sessionId, line) {
-  const dir = getSessionDir(cwd);
+function appendSessionLine(root, cwd, sessionId, line) {
+  const dir = getSessionDir(root, cwd);
   mkdirSync2(dir, { recursive: true });
-  const path2 = getSessionPath(cwd, sessionId);
+  const path2 = getSessionPath(root, cwd, sessionId);
   appendFileSync(path2, JSON.stringify(line) + "\n", "utf-8");
 }
-function appendUserText(cwd, sessionId, text, opts) {
-  appendSessionLine(cwd, sessionId, {
+function appendUserText(root, cwd, sessionId, text, opts) {
+  appendSessionLine(root, cwd, sessionId, {
     type: "user",
     uuid: opts?.uuid,
     sessionId,
@@ -3255,8 +3250,8 @@ function appendUserText(cwd, sessionId, text, opts) {
     message: { role: "user", content: [{ type: "text", text }] }
   });
 }
-function appendAssistantMessage(cwd, sessionId, content, opts) {
-  appendSessionLine(cwd, sessionId, {
+function appendAssistantMessage(root, cwd, sessionId, content, opts) {
+  appendSessionLine(root, cwd, sessionId, {
     type: "assistant",
     uuid: opts?.uuid,
     sessionId,
@@ -3264,8 +3259,8 @@ function appendAssistantMessage(cwd, sessionId, content, opts) {
     message: { role: "assistant", content, ...opts?.usage ? { usage: opts.usage } : {} }
   });
 }
-function appendToolResult(cwd, sessionId, toolUseId, content, opts) {
-  appendSessionLine(cwd, sessionId, {
+function appendToolResult(root, cwd, sessionId, toolUseId, content, opts) {
+  appendSessionLine(root, cwd, sessionId, {
     type: "user",
     uuid: opts?.uuid,
     sessionId,
@@ -3283,7 +3278,7 @@ function appendToolResult(cwd, sessionId, toolUseId, content, opts) {
   });
 }
 
-// packages/feature/agent/src/server/engines/ollama/tools.ts
+// packages/feature/agent/src/server/engines/builtinAgent/tools.ts
 import { tool, zodSchema } from "ai";
 
 // node_modules/zod/v4/classic/external.js
@@ -17054,7 +17049,7 @@ function date4(params) {
 // node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// packages/feature/agent/src/server/engines/ollama/tools.ts
+// packages/feature/agent/src/server/engines/builtinAgent/tools.ts
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { writeFile, mkdir, readdir, stat, unlink } from "fs/promises";
 import { isAbsolute, join as join4 } from "path";
@@ -17233,7 +17228,7 @@ function createTools(context) {
             encoding: "utf-8",
             timeout: timeout ?? 6e4,
             maxBuffer: 10 * 1024 * 1024,
-            env: { ...process.env, FORCE_COLOR: "0", CI: "1" }
+            env: sanitizedSpawnEnv({ FORCE_COLOR: "0", CI: "1" })
           });
           if (stdout.length === 0) {
             if (stderr.length === 0) {
@@ -17332,7 +17327,7 @@ ${stderrCapped}`;
             encoding: "utf-8",
             timeout: 15e3,
             maxBuffer: 10 * 1024 * 1024,
-            env: { ...process.env, FORCE_COLOR: "0" }
+            env: sanitizedSpawnEnv({ FORCE_COLOR: "0" })
           });
           const GREP_CAP = 32e3;
           const spillPath = stdout.length > GREP_CAP ? await spillToFile(stdout, "grep") : void 0;
@@ -17372,7 +17367,7 @@ ${summary}`;
   };
 }
 
-// packages/feature/agent/src/server/engines/ollama/stream.ts
+// packages/feature/agent/src/server/engines/builtinAgent/stream.ts
 async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
   let text = "";
   const toolCalls = [];
@@ -17466,194 +17461,242 @@ function emitResultMessage(promptTokens, completionTokens, safeEnqueue) {
   );
 }
 
-// packages/feature/agent/src/server/engines/ollama/index.ts
-var DEFAULT_MODEL2 = "qwen3.5:35b-a3b-coding-nvfp4";
-function buildSystemPrompt(cwd) {
-  return `You are a coding agent. You help the user build and modify software using the provided tools.
-
-CWD: ${cwd}
-
-## Language
-
-ALWAYS reply in the SAME language as the user's most recent message \u2014 whatever language they used (Chinese, English, Japanese, French, Spanish, \u2026), mirror it. Do NOT default to English just because this system prompt is written in English. If the user switches language mid-conversation, switch with them on the next reply.
-
-Exceptions that stay as-is regardless of reply language:
-- Tool "thought" parameters: keep the "PREVIOUS / THIS / EXPECT" template in English.
-- Code, identifiers, file paths, shell commands, and error messages quoted from tool output: keep original.
-- Only your natural-language prose to the user follows the user's language.
-
-## Workflow
-
-1. Plan: call TodoWrite FIRST to break down the task into steps (all pending, first one in_progress).
-2. Act: execute steps one by one. After completing each step, call TodoWrite to update progress (mark completed, set next in_progress).
-3. Check: after each tool call, assess \u2014 did it succeed? Is the overall task done? If not, continue to the next step.
-4. Respond: you MUST always end with a text response to the user. Summarize what was done, what was found, or what remains.
-
-IMPORTANT: never stop in the middle of a task silently. If you cannot continue (error, missing info, blocked), respond to the user explaining why and what is needed.
-
-NEVER repeat a tool call with the same or similar arguments. When a search finds nothing, follow this escalation:
-1. Simplify the pattern (shorter keyword, remove qualifiers, use a single core term)
-2. Broaden the path (search parent directory, or omit path to search entire CWD)
-3. Switch tool (Grep \u2192 Glob for filenames, Grep \u2192 Bash with find, or Read a likely file directly)
-4. Give up after 3 failed attempts on the same topic \u2014 tell the user what you tried and ask for guidance.
-
-## Tools
-
-- Read: read a file by line range.
-- Edit: exact string replacement in an existing file (prefer over Write).
-- Write: create new files or full rewrites only.
-- Bash: run shell commands.
-- Grep: ripgrep search. ALWAYS use Grep (never rg/grep via Bash).
-- Glob: fast file listing by glob pattern.
-- TodoWrite: plan tasks and track progress. ALWAYS call this first.
-
-Every tool has a "thought" parameter \u2014 ALWAYS fill it using this format:
-"PREVIOUS: [what the last tool returned and whether it achieved the goal] \u2192 THIS: [what I am doing now and why] \u2192 EXPECT: [what result I expect]"
-Example: "PREVIOUS: Grep found 3 matches in cache.go \u2192 THIS: Read cache.go to see full implementation \u2192 EXPECT: understand the caching logic"
-If this is the first tool call, write "PREVIOUS: n/a" for the first part.
-
-## Rules
-
-Tool usage:
-- Read before modify: do NOT edit a file you haven't Read.
-- Absolute paths only: resolve relative paths against CWD.
-
-Accuracy:
-- Verify before retracting: when the user questions you, use tools to verify first, then respond based on evidence. Do NOT blindly agree you were wrong.
-- Honesty over confidence: only state what is backed by tool output. If unsure, say so and state what info is needed or propose a verification plan. Never fabricate data.
-
-## Output
-
-- Be concise. Lead with the action or answer.
-- Only elaborate on decisions, blockers, or milestones.`;
+// packages/feature/agent/src/server/engines/builtinAgent/index.ts
+function requireTextPrompt(params) {
+  return typeof params.prompt === "string" && params.prompt.trim() ? { ok: true } : { ok: false, status: 400, error: "The built-in agent requires a text prompt" };
 }
-var ollamaSpec = {
-  name: "ollama",
-  // Ollama has no image support here — require a text prompt (the SDK orchestrator allows
-  // images-only for claude/deepseek; without this an images-only message reaches the runner
-  // with an undefined prompt).
-  async preflight(params) {
-    return typeof params.prompt === "string" && params.prompt.trim() ? { ok: true } : { ok: false, status: 400, error: "ollama requires a text prompt" };
-  },
-  runner: {
-    async run(ctx) {
-      const cwd = ctx.cwd || process.cwd();
-      const sid = ctx.currentKey();
-      ctx.rekey(sid);
-      const model = typeof ctx.params.model === "string" && ctx.params.model || DEFAULT_MODEL2;
-      const prompt = ctx.prompt;
-      const emit = (data) => {
-        if (data.startsWith("data: [DONE]")) return;
-        try {
-          ctx.emit(JSON.parse(data.slice(6)));
-        } catch {
-        }
-      };
-      const existing = readSessionMessages(cwd, sid);
-      const messages = [...existing, { role: "user", content: prompt }];
-      appendUserText(cwd, sid, prompt, { uuid: randomUUID3(), timestamp: (/* @__PURE__ */ new Date()).toISOString() });
-      emit(`data: ${JSON.stringify({ type: "system", subtype: "init", session_id: sid })}
+async function runBuiltinAgent(ctx, config2) {
+  const { sessionsRoot } = config2;
+  const cwd = ctx.cwd || process.cwd();
+  const sid = ctx.currentKey();
+  ctx.rekey(sid);
+  const model = typeof ctx.params.model === "string" && ctx.params.model || config2.defaultModel;
+  const prompt = ctx.prompt;
+  const emit = (data) => {
+    if (data.startsWith("data: [DONE]")) return;
+    try {
+      ctx.emit(JSON.parse(data.slice(6)));
+    } catch {
+    }
+  };
+  const noHistory = ctx.params.noHistory === true;
+  const existing = noHistory ? [] : readSessionMessages(sessionsRoot, cwd, sid);
+  const messages = [...existing, { role: "user", content: prompt }];
+  appendUserText(sessionsRoot, cwd, sid, prompt, { uuid: randomUUID3(), timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+  emit(`data: ${JSON.stringify({ type: "system", subtype: "init", session_id: sid })}
 
 `);
-      const context = { cwd, todos: [] };
-      const languageModel = await createOllamaModel(model);
-      const result = streamText({
-        model: languageModel,
-        system: buildSystemPrompt(cwd),
-        messages,
-        tools: createTools(context),
-        stopWhen: stepCountIs(256),
-        temperature: 0,
-        abortSignal: ctx.signal
-      });
-      const pendingToolCalls = /* @__PURE__ */ new Map();
-      const flushPendingToolCallsAsErrors = (reason) => {
-        if (pendingToolCalls.size === 0) return;
-        for (const [toolUseId] of pendingToolCalls) {
+  const context = { cwd, todos: [] };
+  const languageModel = await config2.createModel(model);
+  const result = streamText({
+    model: languageModel,
+    system: buildSystemPrompt(cwd),
+    messages,
+    tools: createTools(context),
+    stopWhen: stepCountIs(256),
+    temperature: 0,
+    abortSignal: ctx.signal
+  });
+  const pendingToolCalls = /* @__PURE__ */ new Map();
+  const flushPendingToolCallsAsErrors = (reason) => {
+    if (pendingToolCalls.size === 0) return;
+    for (const [toolUseId] of pendingToolCalls) {
+      try {
+        appendToolResult(sessionsRoot, cwd, sid, toolUseId, reason, {
+          uuid: randomUUID3(),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+          is_error: true
+        });
+      } catch {
+      }
+      try {
+        emit(
+          `data: ${JSON.stringify({
+            type: "user",
+            message: { content: [{ type: "tool_result", tool_use_id: toolUseId, content: reason, is_error: true }] }
+          })}
+
+`
+        );
+      } catch {
+      }
+    }
+    pendingToolCalls.clear();
+  };
+  try {
+    const { text } = await consumeStream(
+      result.fullStream,
+      emit,
+      sid,
+      {
+        onToolCall: (toolUseId, toolName, input) => {
           try {
-            appendToolResult(cwd, sid, toolUseId, reason, {
+            pendingToolCalls.set(toolUseId, { name: toolName, input });
+            appendAssistantMessage(
+              sessionsRoot,
+              cwd,
+              sid,
+              [{ type: "tool_use", id: toolUseId, name: toolName, input }],
+              { uuid: randomUUID3(), timestamp: (/* @__PURE__ */ new Date()).toISOString() }
+            );
+          } catch {
+          }
+        },
+        onToolResult: (toolUseId, content) => {
+          try {
+            pendingToolCalls.delete(toolUseId);
+            appendToolResult(sessionsRoot, cwd, sid, toolUseId, content, {
               uuid: randomUUID3(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-              is_error: true
+              is_error: false
             });
           } catch {
           }
+        },
+        onTextFlush: (flushedText) => {
           try {
-            emit(
-              `data: ${JSON.stringify({
-                type: "user",
-                message: { content: [{ type: "tool_result", tool_use_id: toolUseId, content: reason, is_error: true }] }
-              })}
-
-`
-            );
+            appendAssistantMessage(sessionsRoot, cwd, sid, [{ type: "text", text: flushedText }], {
+              uuid: randomUUID3(),
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
           } catch {
           }
         }
-        pendingToolCalls.clear();
-      };
-      try {
-        const { text } = await consumeStream(
-          result.fullStream,
-          emit,
-          sid,
-          {
-            onToolCall: (toolUseId, toolName, input) => {
-              try {
-                pendingToolCalls.set(toolUseId, { name: toolName, input });
-                appendAssistantMessage(cwd, sid, [{ type: "tool_use", id: toolUseId, name: toolName, input }], {
-                  uuid: randomUUID3(),
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                });
-              } catch {
-              }
-            },
-            onToolResult: (toolUseId, content) => {
-              try {
-                pendingToolCalls.delete(toolUseId);
-                appendToolResult(cwd, sid, toolUseId, content, {
-                  uuid: randomUUID3(),
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-                  is_error: false
-                });
-              } catch {
-              }
-            },
-            onTextFlush: (flushedText) => {
-              try {
-                appendAssistantMessage(cwd, sid, [{ type: "text", text: flushedText }], {
-                  uuid: randomUUID3(),
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                });
-              } catch {
-              }
-            }
-          }
-        );
-        const usage = await result.usage;
-        emitResultMessage(usage.inputTokens || 0, usage.outputTokens || 0, emit);
-        if (!ctx.signal.aborted) {
-          appendAssistantMessage(cwd, sid, text ? [{ type: "text", text }] : [], {
-            uuid: randomUUID3(),
-            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-            usage: {
-              input_tokens: usage.inputTokens || 0,
-              output_tokens: usage.outputTokens || 0,
-              cache_creation_input_tokens: 0,
-              cache_read_input_tokens: 0
-            }
-          });
-        }
-      } catch (error48) {
-        if (ctx.signal.aborted) {
-          flushPendingToolCallsAsErrors("Tool call cancelled (request aborted).");
-          return;
-        }
-        flushPendingToolCallsAsErrors("Tool call failed (stream error).");
-        throw error48;
       }
+    );
+    const usage = await result.usage;
+    emitResultMessage(usage.inputTokens || 0, usage.outputTokens || 0, emit);
+    if (!ctx.signal.aborted) {
+      appendAssistantMessage(sessionsRoot, cwd, sid, text ? [{ type: "text", text }] : [], {
+        uuid: randomUUID3(),
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        usage: {
+          input_tokens: usage.inputTokens || 0,
+          output_tokens: usage.outputTokens || 0,
+          cache_creation_input_tokens: 0,
+          cache_read_input_tokens: 0
+        }
+      });
     }
-    // No resolveTitle → teardown uses 'unread' with undefined title (matches original).
+  } catch (error48) {
+    if (ctx.signal.aborted) {
+      flushPendingToolCallsAsErrors("Tool call cancelled (request aborted).");
+      return;
+    }
+    flushPendingToolCallsAsErrors("Tool call failed (stream error).");
+    throw error48;
+  }
+}
+
+// packages/feature/agent/src/server/engines/deepseek.ts
+var DEEPSEEK_BASE_URL = "https://api.deepseek.com/anthropic";
+var DEFAULT_MODEL = "deepseek-v4-pro";
+var SMALL_FAST_MODEL = "deepseek-v4-flash";
+var ALLOWED_MODELS = /* @__PURE__ */ new Set(["deepseek-v4-flash", "deepseek-v4-pro"]);
+var DEEPSEEK_OPENAI_BASE_URL = "https://api.deepseek.com/v1";
+var BUILTIN_DEFAULT_MODEL = DEFAULT_MODEL;
+async function readSettings() {
+  return readJsonFile(SETTINGS_FILE, {});
+}
+function resolveModel(requested, saved) {
+  if (typeof requested === "string" && ALLOWED_MODELS.has(requested)) return requested;
+  if (saved && ALLOWED_MODELS.has(saved)) return saved;
+  return DEFAULT_MODEL;
+}
+function resolveBuiltinModel(requested, saved) {
+  if (typeof requested === "string" && requested.trim()) return requested.trim();
+  if (saved && saved.trim()) return saved.trim();
+  return BUILTIN_DEFAULT_MODEL;
+}
+function buildBuiltinConfig(apiKey) {
+  return {
+    sessionsRoot: getBuiltinSessionsRoot("deepseek"),
+    defaultModel: BUILTIN_DEFAULT_MODEL,
+    createModel: async (modelName) => createOpenAiCompatModel({ baseURL: DEEPSEEK_OPENAI_BASE_URL, apiKey, modelName })
+  };
+}
+function buildDeepseekEnv(apiKey, model) {
+  return sanitizedSpawnEnv({
+    ANTHROPIC_AUTH_TOKEN: void 0,
+    ANTHROPIC_BASE_URL: DEEPSEEK_BASE_URL,
+    ANTHROPIC_API_KEY: apiKey,
+    // DeepSeek sends this as x-api-key (fully supported)
+    ANTHROPIC_MODEL: model,
+    ANTHROPIC_SMALL_FAST_MODEL: SMALL_FAST_MODEL,
+    CLAUDE_CONFIG_DIR: DEEPSEEK_DIR,
+    DISABLE_PROMPT_CACHING: "1",
+    // DeepSeek runs its own server-side prefix KV cache
+    CLAUDE_CODE_USE_BEDROCK: "0",
+    CLAUDE_CODE_USE_VERTEX: "0",
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1"
+  });
+}
+function buildDeepseekOptions(ctx, env) {
+  return (abort, resume) => ({
+    ...resume && { resume },
+    ...ctx.cwd && { cwd: ctx.cwd },
+    settingSources: ["user", "project", "local"],
+    permissionMode: "bypassPermissions",
+    allowDangerouslySkipPermissions: true,
+    includePartialMessages: true,
+    abortController: abort,
+    env
+  });
+}
+var isBuiltinMode = (params) => params.mode === "builtin";
+var deepseekSpec = {
+  name: "deepseek",
+  // Pre-check BEFORE startRun: API key must exist; resolve model into params (no registry pollution).
+  async preflight(params) {
+    const settings = await readSettings();
+    const apiKey = await readDeepseekApiKey();
+    if (!apiKey) {
+      return {
+        ok: false,
+        status: 400,
+        error: "DeepSeek API key is not configured. Open the DeepSeek picker in the chat header to set one."
+      };
+    }
+    const requested = typeof params.model === "string" ? params.model : void 0;
+    if (isBuiltinMode(params)) {
+      const textCheck = requireTextPrompt(params);
+      if (!textCheck.ok) return textCheck;
+      params.model = resolveBuiltinModel(requested, settings.engines?.deepseek?.builtinModel);
+      return { ok: true };
+    }
+    params.model = resolveModel(requested, settings.engines?.deepseek?.model);
+    return { ok: true };
+  },
+  runner: {
+    async run(ctx) {
+      const apiKey = await readDeepseekApiKey();
+      if (isBuiltinMode(ctx.params)) {
+        await runBuiltinAgent(ctx, buildBuiltinConfig(apiKey));
+        return;
+      }
+      const model = typeof ctx.params.model === "string" ? ctx.params.model : DEFAULT_MODEL;
+      const env = buildDeepseekEnv(apiKey, model);
+      await runSdkLoop(ctx, buildDeepseekOptions(ctx, env));
+    },
+    resolveTitle: (cwd, sessionId) => getSessionTitle(cwd, sessionId)
+  }
+};
+
+// packages/feature/agent/src/server/engines/ollama.ts
+var DEFAULT_MODEL2 = "qwen3.5:35b-a3b-coding-nvfp4";
+var OLLAMA_CONFIG = {
+  sessionsRoot: getBuiltinSessionsRoot("ollama"),
+  defaultModel: DEFAULT_MODEL2,
+  createModel: (model) => createOllamaModel(model)
+};
+var ollamaSpec = {
+  name: "ollama",
+  async preflight(params) {
+    return requireTextPrompt(params);
+  },
+  runner: {
+    run: (ctx) => runBuiltinAgent(ctx, OLLAMA_CONFIG)
+    // No resolveTitle → teardown uses 'unread' with undefined title.
   }
 };
 
@@ -17711,7 +17754,7 @@ var kimiSpec = {
         const child = spawn2("kimi", args, {
           stdio: ["ignore", "pipe", "pipe"],
           cwd: cwd || void 0,
-          env: { ...process.env }
+          env: sanitizedSpawnEnv()
         });
         ctx.signal.addEventListener("abort", () => child.kill("SIGTERM"), { once: true });
         if (sessionId) {
@@ -17848,7 +17891,7 @@ var codexSpec = {
         const child = spawn3("codex", args, {
           stdio: ["ignore", "pipe", "pipe"],
           cwd: cwd || void 0,
-          env: { ...process.env }
+          env: sanitizedSpawnEnv()
         });
         ctx.signal.addEventListener("abort", () => child.kill("SIGTERM"), { once: true });
         const pendingToolCalls = /* @__PURE__ */ new Map();
@@ -18035,7 +18078,11 @@ var dispatchEngineMessageEff = (task, engine, startFresh) => Effect_exports.tryP
       cwd: task.cwd,
       engine,
       // selects claude2's CLAUDE_CONFIG_DIR; no-op for the others
-      ...task.model && { model: task.model }
+      ...task.model && { model: task.model },
+      // Execution mode is NOT snapshotted on the task — it is derived from where the
+      // session actually lives, so a task made from a Built-in Agent tab keeps running
+      // the built-in loop instead of silently switching backends mid-schedule.
+      ...isDeepseekBuiltinSession(engine, task) && { mode: "builtin" }
     });
     if (!outcome.ok) {
       throw new Error(`${engine} dispatch rejected (${outcome.status}): ${outcome.error}`);
@@ -18069,9 +18116,13 @@ var dispatchEngineMessageEff = (task, engine, startFresh) => Effect_exports.tryP
     cause
   })
 });
+function isDeepseekBuiltinSession(engine, task) {
+  return engine === "deepseek" && existsSync3(getDeepseekBuiltinSessionPath(task.cwd, task.sessionId));
+}
 function sessionPathFor(engine, task) {
   if (engine === "claude2") return getClaude2SessionPath(task.cwd, task.sessionId);
   if (engine === "ollama") return getOllamaSessionPath(task.cwd, task.sessionId);
+  if (isDeepseekBuiltinSession(engine, task)) return getDeepseekBuiltinSessionPath(task.cwd, task.sessionId);
   if (engine === "deepseek") return getDeepseekSessionPath(task.cwd, task.sessionId);
   if (engine === "codex") return findCodexSessionPath(task.sessionId);
   if (engine === "kimi") return findKimiSessionPath(task.sessionId);