@swifty.js/swifty 0.0.29 → 0.0.31

package/dist/lib/index.d.ts

@@ -1,7 +1,7 @@
+import z, { z as z$1 } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import z$1, { z } from 'zod';
+import { BetaToolComputerUse20251124 } from '@anthropic-ai/sdk/resources/beta/messages/messages';
 import OpenAI from 'openai';
-import { FunctionTool } from 'openai/resources/responses/responses';
 import { Logger } from 'pino';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
@@ -27,107 +27,41 @@ import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-interface FileReadRecord {
-    path: string;
-    content: string;
-    timestamp: number;
-}
-interface SkillInvocationRecord {
-    name: string;
-    body: string;
-    timestamp: number;
-}
-declare class RecoveryState {
-    private files;
-    private skills;
-    recordFileRead(path: string, content: string): void;
-    recordSkillInvocation(name: string, body: string): void;
-    snapshotFiles(limit?: number): FileReadRecord[];
-    snapshotSkills(): SkillInvocationRecord[];
-    buildRecoveryAttachment(toolSchemaNames: string[]): string;
-}
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-type DecisionEffect = "allow" | "deny" | "ask";
-type PermissionMode = "default" | "acceptEdits" | "plan" | "bypassPermissions";
-interface Decision {
-    effect: DecisionEffect;
-    reason: string;
-}
-type RuleEffect = DecisionEffect;
-interface Rule {
-    tool: string;
-    pattern: string;
-    effect: RuleEffect;
-}
-declare function extractContent(toolName: string, args: Record<string, unknown>): string;
-declare class PathSandbox {
-    private allowedRoots;
-    private denyWritePaths;
-    private projectDir;
-    constructor(projectDir: string);
-    addRoot(root: string): void;
-    addDenyWrite(path: string): void;
-    /**
-     * Check whether a path is in the deny-write list.
-     * denyWrite has the highest priority — even if the path is within an allowed root, writes are still denied.
-     */
-    checkDenyWrite(filePath: string): Decision | null;
-    check(filePath: string): Decision | null;
-}
-declare function evaluateRules(rules: Rule[], toolName: string, content: string): RuleEffect | null;
-declare class RuleEngine {
-    private userPath;
-    private projectPath;
-    private localPath;
-    private cache;
-    constructor(workDir: string);
-    private rulesFor;
-    snapshot(): Rule[];
-    evaluate(toolName: string, content: string): RuleEffect | null;
-    appendLocalRule(rule: Rule): void;
-}
-declare function isSafeCommand(command: string): boolean;
-declare class PermissionChecker {
-    private readonly workDir;
-    mode: PermissionMode;
-    planFilePath: string;
-    sandboxEnabled: boolean;
-    sandboxAutoAllow: boolean;
-    private sandbox;
-    private ruleEngine;
-    constructor(workDir: string, mode?: PermissionMode);
-    forWorkDir(workDir: string): PermissionChecker;
-    check(toolName: string, category: "read" | "write" | "command", args: Record<string, unknown>): Decision;
-    allowExtraRoot(path: string): void;
-    allowAlways(toolName: string, args: Record<string, unknown>): void;
-    /**
-     * Generate a human-readable description of the tool action for display in HITL confirmation dialogs.
-     * Prioritizes extracting fields defined in contentFields (e.g., command, file_path);
-     * falls back to a key:value summary of parameters if no match is found.
-     */
-    describeToolAction(toolName: string, args: Record<string, unknown>): string;
+interface UsageInfo {
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadInputTokens: number;
+    cacheCreationInputTokens: number;
 }
+/** Tool use delta: Input partial JSON */
+type StreamEvent = {
+    type: "text_delta";
+    text: string;
+} | {
+    type: "thinking_delta";
+    text: string;
+} | {
+    type: "thinking_complete";
+    thinking: string;
+    signature: string;
+} | {
+    type: "tool_call_start";
+    toolName: string;
+    toolId: string;
+} | {
+    type: "tool_call_delta";
+    text: string;
+} | {
+    type: "tool_call_complete";
+    toolId: string;
+    toolName: string;
+    arguments: Record<string, unknown>;
+    providerItemId?: string;
+} | {
+    type: "stream_end";
+    stopReason: string;
+    usage: UsageInfo;
+};
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -219,6 +153,87 @@ declare class FileHistory {
     save(): void;
 }
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+type DecisionEffect = "allow" | "deny" | "ask";
+type PermissionMode = "default" | "acceptEdits" | "plan" | "bypassPermissions";
+interface Decision {
+    effect: DecisionEffect;
+    reason: string;
+}
+type RuleEffect = DecisionEffect;
+interface Rule {
+    tool: string;
+    pattern: string;
+    effect: RuleEffect;
+}
+declare function extractContent(toolName: string, args: Record<string, unknown>): string;
+declare class PathSandbox {
+    private allowedRoots;
+    private denyWritePaths;
+    private projectDir;
+    constructor(projectDir: string);
+    addRoot(root: string): void;
+    addDenyWrite(path: string): void;
+    /**
+     * Check whether a path is in the deny-write list.
+     * denyWrite has the highest priority — even if the path is within an allowed root, writes are still denied.
+     */
+    checkDenyWrite(filePath: string): Decision | null;
+    check(filePath: string): Decision | null;
+}
+declare function evaluateRules(rules: Rule[], toolName: string, content: string): RuleEffect | null;
+declare class RuleEngine {
+    private userPath;
+    private projectPath;
+    private cache;
+    constructor(workDir: string);
+    private rulesFor;
+    snapshot(): Rule[];
+    evaluate(toolName: string, content: string): RuleEffect | null;
+    appendProjectRule(rule: Rule): void;
+}
+declare function isSafeCommand(command: string): boolean;
+declare class PermissionChecker {
+    private readonly workDir;
+    mode: PermissionMode;
+    planFilePath: string;
+    sandboxEnabled: boolean;
+    sandboxAutoAllow: boolean;
+    private sandbox;
+    private ruleEngine;
+    constructor(workDir: string, mode?: PermissionMode);
+    forWorkDir(workDir: string): PermissionChecker;
+    check(toolName: string, category: "read" | "write" | "command", args: Record<string, unknown>): Decision;
+    allowExtraRoot(path: string): void;
+    allowAlways(toolName: string, args: Record<string, unknown>): void;
+    /**
+     * Generate a human-readable description of the tool action for display in HITL confirmation dialogs.
+     * Prioritizes extracting fields defined in contentFields (e.g., command, file_path);
+     * falls back to a key:value summary of parameters if no match is found.
+     */
+    describeToolAction(toolName: string, args: Record<string, unknown>): string;
+}
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -296,6 +311,7 @@ interface ToolSchema {
         type: "object";
         properties: Record<string, object>;
         required?: string[];
+        [keyword: string]: unknown;
     };
     allowed_callers?: ("direct" | "code_execution_20250825" | "code_execution_20260120")[];
     cache_control?: {
@@ -304,6 +320,12 @@ interface ToolSchema {
     };
     eager_input_streaming?: boolean;
 }
+type ToolProtocol = "anthropic" | "openai" | "openai-compat";
+type AnthropicToolSchema = ToolSchema | Anthropic.Tool | BetaToolComputerUse20251124;
+type OpenAIResponsesToolSchema = OpenAI.Responses.FunctionTool | OpenAI.Responses.ComputerTool;
+type OpenAICompatToolSchema = OpenAI.ChatCompletionFunctionTool;
+type ProviderToolSchema = ToolSchema | AnthropicToolSchema | OpenAIResponsesToolSchema | OpenAICompatToolSchema;
+type ProviderNativeToolSchema = BetaToolComputerUse20251124 | OpenAI.Responses.ComputerTool;
 interface Tool {
     name: string;
     description: string;
@@ -322,6 +344,12 @@ interface Tool {
      * trip, so they are never deferred and always ship their full schema.
      */
     deferred?: boolean;
+    /**
+     * Return a provider-native declaration when the protocol supports this tool
+     * natively. Returning undefined lets the registry serialize schema() as a
+     * regular custom/function tool.
+     */
+    providerSchema?(protocol: ToolProtocol): ProviderNativeToolSchema | undefined;
     /**
      * Whether this particular invocation can run concurrently with others,
      * judged by actual arguments rather than just the tool category.
@@ -363,6 +391,7 @@ interface ToolUseBlock {
     toolUseId: string;
     toolName: string;
     arguments: Record<string, unknown>;
+    providerItemId?: string;
 }
 interface ToolResultBlock {
     toolUseId: string;
@@ -442,68 +471,394 @@ declare class ConversationManager {
  * SOFTWARE.
  */
 
-declare class ConfigError extends Error {
-    constructor(message: string);
-}
-/** The single global config file: $HOME/.swifty/config.yaml. */
-declare function globalConfigPath(): string;
-/**
- * PI-equivalent thinking levels. `off` disables reasoning entirely; the rest
- * map to a provider-native effort string (openai / openai-compat) or a thinking
- * token budget (anthropic).
- */
-declare const THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
-type ThinkingLevel = (typeof THINKING_LEVELS)[number];
-declare const ProviderConfigSchema: z.ZodObject<{
-    name: z.ZodString;
-    protocol: z.ZodEnum<{
-        anthropic: "anthropic";
-        openai: "openai";
-        "openai-compat": "openai-compat";
-    }>;
-    base_url: z.ZodString;
-    model: z.ZodString;
-    api_key: z.ZodOptional<z.ZodString>;
-    thinking: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
-        off: "off";
-        minimal: "minimal";
-        low: "low";
-        medium: "medium";
-        high: "high";
-        xhigh: "xhigh";
-        max: "max";
-    }>]>>;
-    context_window: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-    max_output_tokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+declare const COMPACT_BOUNDARY = "compact_boundary";
+/** Persisted form of a tool invocation. Stores a provider-agnostic internal representation rather than
+ *  any vendor-specific wire format, so sessions can be restored even after switching providers. */
+declare const ToolUseRecordSchema: z.ZodObject<{
+    tool_use_id: z.ZodString;
+    tool_name: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    provider_item_id: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-type ProviderConfig = z.infer<typeof ProviderConfigSchema>;
-declare const DEFAULT_THINKING_LEVEL: ThinkingLevel;
-declare const DEFAULT_CONTEXT_WINDOW = 1000000;
-/**
- * Fallback output-token ceiling used when `max_output_tokens` is unset (PI's
- * custom-model `maxTokens` default).
- */
-declare const DEFAULT_MAX_OUTPUT_TOKENS = 128000;
-/**
- * PI-equivalent thinking token budgets, used by the anthropic budget-based
- * thinking path. Must stay below DEFAULT_MAX_OUTPUT_TOKENS so the answer keeps
- * room after the thinking budget is reserved.
- */
-declare const THINKING_BUDGETS: Record<Exclude<ThinkingLevel, "off">, number>;
-declare function isValidThinkingLevel(value: string): value is ThinkingLevel;
-/**
- * Default thinking level per protocol. Anthropic historically enabled extended
- * thinking by default; the OpenAI protocols never sent a reasoning parameter
- * before, and non-reasoning models reject `reasoning_effort`, so they only opt
- * in when `thinking` is configured explicitly.
- */
-declare function defaultThinkingLevelFor(protocol: ProviderConfig["protocol"]): ThinkingLevel;
-/** Normalize the config `thinking` field (level or legacy boolean) to a level. */
+type ToolUseRecord = z.infer<typeof ToolUseRecordSchema>;
+/** Persisted form of a tool result, paired with a ToolUseRecord via tool_use_id. */
+declare const ToolResultRecordSchema: z.ZodObject<{
+    tool_use_id: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+    content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    is_error: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type ToolResultRecord = z.infer<typeof ToolResultRecordSchema>;
+declare const SessionMessageSchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>>;
+    timestamp: z.ZodNumber;
+    type: z.ZodOptional<z.ZodString>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        provider_item_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type SessionMessage = z.infer<typeof SessionMessageSchema>;
+declare const KeptMessageSchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        provider_item_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type KeptMessage = z.infer<typeof KeptMessageSchema>;
+/** Conversation-layer tool blocks (camelCase) → persisted records (snake_case); empty values are omitted. */
+declare function toolUsesToRecords(toolUses?: {
+    toolUseId: string;
+    toolName: string;
+    arguments?: Record<string, unknown>;
+    providerItemId?: string;
+}[]): ToolUseRecord[];
+declare function toolResultsToRecords(toolResults?: ToolResultBlock[]): ToolResultRecord[];
+declare const CompactBoundaryPayloadSchema: z.ZodObject<{
+    summary: z.ZodString;
+    keep: z.ZodArray<z.ZodObject<{
+        role: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool_use_id: z.ZodString;
+            tool_name: z.ZodString;
+            arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            provider_item_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool_use_id: z.ZodString;
+            content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+            content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+            is_error: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type CompactBoundaryPayload = z.infer<typeof CompactBoundaryPayloadSchema>;
+interface SessionInfo {
+    id: string;
+    firstMessage: string;
+    messageCount: number;
+    size: number;
+    modTime: Date;
+}
+declare function getSessionFilePath(workDir: string, sessionId: string): string;
+declare function newSessionId(): string;
+declare function saveMessage(workDir: string, sessionId: string, msg: SessionMessage): void;
+declare function saveCompactBoundary(workDir: string, sessionId: string, payload: CompactBoundaryPayload): void;
+declare function loadSession(workDir: string, sessionId: string): SessionMessage[];
+interface RestoredMessage {
+    role: "user" | "assistant";
+    content: string | Record<string, unknown>[];
+    toolUses?: {
+        toolUseId: string;
+        toolName: string;
+        arguments?: Record<string, unknown>;
+        providerItemId?: string;
+    }[];
+    toolResults?: ToolResultBlock[];
+}
+declare function rebuildFromSession(saved: SessionMessage[]): RestoredMessage[];
+declare function listSessions(workDir: string): SessionInfo[];
+/**
+ * Cleans up expired sessions: deletes .jsonl files whose last modified time exceeds SESSION_EXPIRY_DAYS.
+ * Called during listSessions or on startup to prevent the session directory from growing indefinitely.
+ * Silently skips failures (best-effort).
+ */
+declare function cleanExpiredSessions(workDir: string): number;
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+type AgentEvent = {
+    type: "stream_text";
+    text: string;
+} | {
+    type: "thinking_text";
+    text: string;
+} | {
+    type: "thinking_complete";
+    thinking: string;
+    signature: string;
+} | {
+    type: "tool_use";
+    toolName: string;
+    toolId: string;
+    args: Record<string, unknown>;
+} | {
+    type: "tool_result";
+    toolName: string;
+    toolId: string;
+    output: string;
+    contentBlocks?: ToolResultContentBlock[];
+    isError: boolean;
+    elapsed: number;
+} | {
+    type: "turn_complete";
+} | {
+    type: "loop_complete";
+    stopReason: string;
+} | {
+    type: "usage";
+    usage: UsageInfo;
+} | {
+    type: "error";
+    error: Error;
+} | {
+    type: "compact";
+    message: string;
+    boundary?: CompactBoundaryPayload | undefined;
+} | {
+    type: "retry";
+    reason: string;
+    delay: number;
+} | {
+    type: "permission_request";
+    toolName: string;
+    args: Record<string, unknown>;
+};
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+interface FileReadRecord {
+    path: string;
+    content: string;
+    timestamp: number;
+}
+interface SkillInvocationRecord {
+    name: string;
+    body: string;
+    timestamp: number;
+}
+declare class RecoveryState {
+    private files;
+    private skills;
+    recordFileRead(path: string, content: string): void;
+    recordSkillInvocation(name: string, body: string): void;
+    snapshotFiles(limit?: number): FileReadRecord[];
+    snapshotSkills(): SkillInvocationRecord[];
+    buildRecoveryAttachment(toolSchemaNames: string[]): string;
+}
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+declare class ConfigError extends Error {
+    constructor(message: string);
+}
+/** The single global config file: $HOME/.swifty/config.yaml. */
+declare function globalConfigPath(): string;
+/**
+ * PI-equivalent thinking levels. `off` disables reasoning entirely; the rest
+ * map to a provider-native effort string (openai / openai-compat) or a thinking
+ * token budget (anthropic).
+ */
+declare const THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
+type ThinkingLevel = (typeof THINKING_LEVELS)[number];
+declare const ReasoningEffortSchema: z$1.ZodEnum<{
+    minimal: "minimal";
+    low: "low";
+    medium: "medium";
+    high: "high";
+    xhigh: "xhigh";
+    max: "max";
+    none: "none";
+}>;
+declare const AnthropicEffortSchema: z$1.ZodEnum<{
+    low: "low";
+    medium: "medium";
+    high: "high";
+    xhigh: "xhigh";
+    max: "max";
+}>;
+declare const ProviderConfigSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    protocol: z$1.ZodEnum<{
+        anthropic: "anthropic";
+        openai: "openai";
+        "openai-compat": "openai-compat";
+    }>;
+    base_url: z$1.ZodString;
+    model: z$1.ZodString;
+    api_key: z$1.ZodOptional<z$1.ZodString>;
+    thinking: z$1.ZodOptional<z$1.ZodEnum<{
+        off: "off";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+    }>>;
+    reasoning: z$1.ZodOptional<z$1.ZodBoolean>;
+    thinking_level_map: z$1.ZodOptional<z$1.ZodObject<{
+        off: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodLiteral<"none">>>;
+        minimal: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+        low: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+        medium: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+        high: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+        xhigh: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+        max: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            none: "none";
+        }>>>;
+    }, z$1.core.$strict>>;
+    thinking_mode: z$1.ZodOptional<z$1.ZodEnum<{
+        budget: "budget";
+        adaptive: "adaptive";
+    }>>;
+    context_window: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+    max_output_tokens: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+}, z$1.core.$loose>;
+type ProviderConfig = z$1.infer<typeof ProviderConfigSchema>;
+declare const DEFAULT_THINKING_LEVEL: ThinkingLevel;
+declare const DEFAULT_CONTEXT_WINDOW = 1000000;
+/**
+ * Fallback output-token ceiling used when `max_output_tokens` is unset (PI's
+ * custom-model `maxTokens` default).
+ */
+declare const DEFAULT_MAX_OUTPUT_TOKENS = 128000;
+/**
+ * PI-equivalent thinking token budgets, used by the anthropic budget-based
+ * thinking path. Must stay below DEFAULT_MAX_OUTPUT_TOKENS so the answer keeps
+ * room after the thinking budget is reserved.
+ */
+declare const THINKING_BUDGETS: Record<Exclude<ThinkingLevel, "off">, number>;
+declare const MIN_THINKING_BUDGET_TOKENS = 1024;
+declare const MIN_THINKING_ANSWER_TOKENS = 1024;
+declare function isValidThinkingLevel(value: string): value is ThinkingLevel;
+/** Resolve the effective logical level, including explicit capability limits. */
 declare function getThinkingLevel(provider: ProviderConfig): ThinkingLevel;
 /** Thinking token budget for a level; 0 when thinking is off. */
 declare function thinkingBudgetForLevel(level: ThinkingLevel): number;
-/** Map a PI thinking level to an OpenAI reasoning effort string. */
-declare function toReasoningEffort(level: ThinkingLevel): "none" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max";
+/** Map a logical level using configured capabilities, not model-name guesses. */
+declare function toReasoningEffort(level: ThinkingLevel, provider?: ProviderConfig): z$1.infer<typeof ReasoningEffortSchema> | null;
+/** Narrow adaptive efforts to the Anthropic SDK's legal values. */
+declare function toAnthropicThinkingEffort(level: ThinkingLevel, provider: ProviderConfig): z$1.infer<typeof AnthropicEffortSchema> | null;
+/** Available logical levels; missing metadata preserves the existing defaults. */
+declare function getSupportedThinkingLevels(provider: ProviderConfig): readonly ThinkingLevel[];
+/** Lower unsupported requests to the nearest available level, never higher. */
+declare function clampThinkingLevel(provider: ProviderConfig, level: ThinkingLevel): ThinkingLevel;
 declare function withProviderDefaults(provider: ProviderConfig): ProviderConfig;
 declare function getContextWindow(provider: ProviderConfig): number;
 /**
@@ -514,51 +869,51 @@ declare function getContextWindow(provider: ProviderConfig): number;
  */
 declare function getMaxOutputTokens(provider: ProviderConfig): number;
 declare function resolveAPIKey(p: ProviderConfig): string;
-declare const MCPServerConfigSchema: z.ZodObject<{
-    name: z.ZodString;
-    command: z.ZodOptional<z.ZodString>;
-    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    url: z.ZodOptional<z.ZodString>;
-    transport: z.ZodOptional<z.ZodString>;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip>;
-type MCPServerConfig = z.infer<typeof MCPServerConfigSchema>;
-declare const HookConfigSchema: z.ZodObject<{
-    id: z.ZodOptional<z.ZodString>;
-    event: z.ZodString;
-    condition: z.ZodOptional<z.ZodString>;
-    action: z.ZodObject<{
-        type: z.ZodString;
-        command: z.ZodOptional<z.ZodString>;
-        url: z.ZodOptional<z.ZodString>;
-        method: z.ZodOptional<z.ZodString>;
-        prompt: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    reject: z.ZodOptional<z.ZodBoolean>;
-    once: z.ZodOptional<z.ZodBoolean>;
-    async: z.ZodOptional<z.ZodBoolean>;
-    on_error: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type HookConfig = z.infer<typeof HookConfigSchema>;
-declare const SandboxYamlConfigSchema: z.ZodObject<{
-    enabled: z.ZodOptional<z.ZodBoolean>;
-    auto_allow: z.ZodOptional<z.ZodBoolean>;
-    network_enabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-type SandboxYamlConfig = z.infer<typeof SandboxYamlConfigSchema>;
-declare const AppConfigSchema: z.ZodObject<{
-    providers: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        protocol: z.ZodEnum<{
+declare const MCPServerConfigSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    command: z$1.ZodOptional<z$1.ZodString>;
+    args: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    transport: z$1.ZodOptional<z$1.ZodString>;
+    headers: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    env: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+}, z$1.core.$strip>;
+type MCPServerConfig = z$1.infer<typeof MCPServerConfigSchema>;
+declare const HookConfigSchema: z$1.ZodObject<{
+    id: z$1.ZodOptional<z$1.ZodString>;
+    event: z$1.ZodString;
+    condition: z$1.ZodOptional<z$1.ZodString>;
+    action: z$1.ZodObject<{
+        type: z$1.ZodString;
+        command: z$1.ZodOptional<z$1.ZodString>;
+        url: z$1.ZodOptional<z$1.ZodString>;
+        method: z$1.ZodOptional<z$1.ZodString>;
+        prompt: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>;
+    reject: z$1.ZodOptional<z$1.ZodBoolean>;
+    once: z$1.ZodOptional<z$1.ZodBoolean>;
+    async: z$1.ZodOptional<z$1.ZodBoolean>;
+    on_error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type HookConfig = z$1.infer<typeof HookConfigSchema>;
+declare const SandboxYamlConfigSchema: z$1.ZodObject<{
+    enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+    auto_allow: z$1.ZodOptional<z$1.ZodBoolean>;
+    network_enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type SandboxYamlConfig = z$1.infer<typeof SandboxYamlConfigSchema>;
+declare const AppConfigSchema: z$1.ZodObject<{
+    providers: z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        protocol: z$1.ZodEnum<{
             anthropic: "anthropic";
             openai: "openai";
             "openai-compat": "openai-compat";
         }>;
-        base_url: z.ZodString;
-        model: z.ZodString;
-        api_key: z.ZodOptional<z.ZodString>;
-        thinking: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
+        base_url: z$1.ZodString;
+        model: z$1.ZodString;
+        api_key: z$1.ZodOptional<z$1.ZodString>;
+        thinking: z$1.ZodOptional<z$1.ZodEnum<{
             off: "off";
             minimal: "minimal";
             low: "low";
@@ -566,47 +921,109 @@ declare const AppConfigSchema: z.ZodObject<{
             high: "high";
             xhigh: "xhigh";
             max: "max";
-        }>]>>;
-        context_window: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-        max_output_tokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-    }, z.core.$strip>>;
-    permission_mode: z.ZodOptional<z.ZodString>;
-    mcp_servers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        command: z.ZodOptional<z.ZodString>;
-        args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        url: z.ZodOptional<z.ZodString>;
-        transport: z.ZodOptional<z.ZodString>;
-        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, z.core.$strip>>>;
-    hooks: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodOptional<z.ZodString>;
-        event: z.ZodString;
-        condition: z.ZodOptional<z.ZodString>;
-        action: z.ZodObject<{
-            type: z.ZodString;
-            command: z.ZodOptional<z.ZodString>;
-            url: z.ZodOptional<z.ZodString>;
-            method: z.ZodOptional<z.ZodString>;
-            prompt: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
-        reject: z.ZodOptional<z.ZodBoolean>;
-        once: z.ZodOptional<z.ZodBoolean>;
-        async: z.ZodOptional<z.ZodBoolean>;
-        on_error: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    sandbox: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodOptional<z.ZodBoolean>;
-        auto_allow: z.ZodOptional<z.ZodBoolean>;
-        network_enabled: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    enable_coordinator_mode: z.ZodOptional<z.ZodBoolean>;
-    enable_fork: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>;
+        }>>;
+        reasoning: z$1.ZodOptional<z$1.ZodBoolean>;
+        thinking_level_map: z$1.ZodOptional<z$1.ZodObject<{
+            off: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodLiteral<"none">>>;
+            minimal: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+            low: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+            medium: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+            high: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+            xhigh: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+            max: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
+                minimal: "minimal";
+                low: "low";
+                medium: "medium";
+                high: "high";
+                xhigh: "xhigh";
+                max: "max";
+                none: "none";
+            }>>>;
+        }, z$1.core.$strict>>;
+        thinking_mode: z$1.ZodOptional<z$1.ZodEnum<{
+            budget: "budget";
+            adaptive: "adaptive";
+        }>>;
+        context_window: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+        max_output_tokens: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+    }, z$1.core.$loose>>;
+    permission_mode: z$1.ZodOptional<z$1.ZodString>;
+    mcp_servers: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        command: z$1.ZodOptional<z$1.ZodString>;
+        args: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        url: z$1.ZodOptional<z$1.ZodString>;
+        transport: z$1.ZodOptional<z$1.ZodString>;
+        headers: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+        env: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    }, z$1.core.$strip>>>;
+    hooks: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodOptional<z$1.ZodString>;
+        event: z$1.ZodString;
+        condition: z$1.ZodOptional<z$1.ZodString>;
+        action: z$1.ZodObject<{
+            type: z$1.ZodString;
+            command: z$1.ZodOptional<z$1.ZodString>;
+            url: z$1.ZodOptional<z$1.ZodString>;
+            method: z$1.ZodOptional<z$1.ZodString>;
+            prompt: z$1.ZodOptional<z$1.ZodString>;
+        }, z$1.core.$strip>;
+        reject: z$1.ZodOptional<z$1.ZodBoolean>;
+        once: z$1.ZodOptional<z$1.ZodBoolean>;
+        async: z$1.ZodOptional<z$1.ZodBoolean>;
+        on_error: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>>;
+    sandbox: z$1.ZodOptional<z$1.ZodObject<{
+        enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+        auto_allow: z$1.ZodOptional<z$1.ZodBoolean>;
+        network_enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    enable_coordinator_mode: z$1.ZodOptional<z$1.ZodBoolean>;
+    enable_fork: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$loose>;
 /** Whether fork is available. Defaults to enabled when not specified in config. */
 declare function forkEnabled(cfg: AppConfig): boolean;
-type AppConfig = z.infer<typeof AppConfigSchema>;
+type AppConfig = z$1.infer<typeof AppConfigSchema>;
 declare function loadConfig(path?: string, options?: {
     allowEmptyProviders?: boolean;
 }): AppConfig;
@@ -667,62 +1084,6 @@ declare class HookEngine {
 }
 declare function validate(hooks: HookConfig[]): Error | null;
 
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-interface UsageInfo {
-    inputTokens: number;
-    outputTokens: number;
-    cacheReadInputTokens: number;
-    cacheCreationInputTokens: number;
-}
-/** Tool use delta: Input partial JSON */
-type StreamEvent = {
-    type: "text_delta";
-    text: string;
-} | {
-    type: "thinking_delta";
-    text: string;
-} | {
-    type: "thinking_complete";
-    thinking: string;
-    signature: string;
-} | {
-    type: "tool_call_start";
-    toolName: string;
-    toolId: string;
-} | {
-    type: "tool_call_delta";
-    text: string;
-} | {
-    type: "tool_call_complete";
-    toolId: string;
-    toolName: string;
-    arguments: Record<string, unknown>;
-} | {
-    type: "stream_end";
-    stopReason: string;
-    usage: UsageInfo;
-};
-
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -746,32 +1107,38 @@ type StreamEvent = {
  */
 
 declare class OpenAIClient implements LLMClient {
+    readonly protocol: "openai";
     private client;
     private model;
     private systemPrompt;
     private maxOutputTokens;
     private thinkingLevel;
+    private config;
     constructor(config: ProviderConfig, systemPrompt: string);
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
     setSystemPrompt(prompt: string): void;
     setMaxOutputTokens(maxTokens: number): void;
-    setThinkingLevel(level: ThinkingLevel): void;
+    setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
+    getSupportedThinkingLevels(): readonly ThinkingLevel[];
 }
-type OpenAIMessageParam = OpenAI.Responses.EasyInputMessage | OpenAI.Responses.ResponseFunctionToolCall | OpenAI.Responses.ResponseInputItem.FunctionCallOutput | OpenAI.Responses.ResponseReasoningItem;
+type OpenAIMessageParam = OpenAI.Responses.EasyInputMessage | OpenAI.Responses.ResponseComputerToolCall | OpenAI.Responses.ResponseInputItem.ComputerCallOutput | OpenAI.Responses.ResponseFunctionToolCall | OpenAI.Responses.ResponseInputItem.FunctionCallOutput | OpenAI.Responses.ResponseReasoningItem;
 declare function buildOpenAIInput(messages: Message[]): OpenAIMessageParam[];
 declare class OpenAICompatClient implements LLMClient {
+    readonly protocol: "openai-compat";
     private client;
     private model;
     private systemPrompt;
     private maxOutputTokens;
     private thinkingLevel;
+    private config;
     constructor(config: ProviderConfig, systemPrompt: string);
     setSystemPrompt(prompt: string): void;
     setMaxOutputTokens(maxTokens: number): void;
-    setThinkingLevel(level: ThinkingLevel): void;
+    setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    getSupportedThinkingLevels(): readonly ThinkingLevel[];
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
 }
 declare function buildChatCompletionMessages(messages: Message[]): OpenAI.ChatCompletionMessageParam[];
 
@@ -807,7 +1174,10 @@ declare function buildChatCompletionMessages(messages: Message[]): OpenAI.ChatCo
  * built-in tools, so the array tail is often a deferred tool — we must scan
  * backwards. Built-in tools are never deferred, so a valid slot always exists.
  */
-declare function markToolsForCache(tools: ToolSchema[]): void;
+declare function markToolsForCache(tools: {
+    defer_loading?: boolean;
+    cache_control?: Anthropic.CacheControlEphemeral | null;
+}[]): void;
 /**
  * Whether any tool in this batch has defer_loading set.
  *
@@ -815,25 +1185,25 @@ declare function markToolsForCache(tools: ToolSchema[]): void;
  * recognize it reject the request outright, and the dispatch / eager paths do not
  * use it at all.
  */
-declare function needsToolSearchBeta(toolSchemas: ToolSchema[]): boolean;
+declare function needsToolSearchBeta(toolSchemas: ProviderToolSchema[]): boolean;
 declare function fetchModelContextWindow(config: ProviderConfig): Promise<number>;
 declare function buildAnthropicMessages(messages: Message[]): Anthropic.MessageParam[];
 declare class AnthropicClient implements LLMClient {
+    readonly protocol: "anthropic";
     private client;
     private model;
-    /**
-     * PI-equivalent thinking level; maps to a thinking token budget.
-     */
+    /** Effective logical level for budget or explicitly configured adaptive mode. */
     private thinkingLevel;
     private systemPrompt;
     private maxOutputTokens;
-    /** Currently not used */
+    private config;
     constructor(config: ProviderConfig, systemPrompt: string);
     setSystemPrompt(prompt: string): void;
     setMaxOutputTokens(maxTokens: number): void;
-    setThinkingLevel(level: ThinkingLevel): void;
+    setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    getSupportedThinkingLevels(): readonly ThinkingLevel[];
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
 }
 /**
  * @param messages
@@ -841,16 +1211,19 @@ declare class AnthropicClient implements LLMClient {
 declare function markLastUserTailForCache(messages: Anthropic.Messages.MessageParam[]): void;
 
 interface LLMClient extends Partial<MaxTokensSetter>, Partial<ThinkingLevelControl> {
-    stream(conversationManager: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    readonly protocol?: ToolProtocol;
+    stream(conversationManager: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
     setSystemPrompt(prompt: string): void;
 }
 interface MaxTokensSetter {
     setMaxOutputTokens(maxTokens: number): void;
 }
-/** Runtime control of the PI-equivalent thinking level. */
+/** Runtime control of the effective logical thinking level. */
 interface ThinkingLevelControl {
-    setThinkingLevel(level: ThinkingLevel): void;
+    /** Applies the level and returns the effective one, which may be clamped by the provider. */
+    setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
+    getSupportedThinkingLevels?(): readonly ThinkingLevel[];
 }
 declare function createClient(config: ProviderConfig, systemPrompt: string): Promise<AnthropicClient | OpenAIClient | OpenAICompatClient>;
 
@@ -953,257 +1326,60 @@ declare class MemoryManager {
  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  * copies of the Software, and to permit persons to whom the Software is
  * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-declare class ToolRegistry {
-    private tools;
-    private discovered;
-    /**
-     * How MCP tools are loaded, written by mcp/strategy after connecting to the
-     * server. ToolSearch relies on it to decide what to return, and the client
-     * relies on it to decide whether to send defer_loading. It stays eager when
-     * there is no MCP, which behaves the same as no deferral.
-     */
-    mcpLoadingMode: McpLoadingMode;
-    /**
-     * Whether to expose the search and dispatch tools to the model is computed once
-     * by applyMode in mcp/strategy at session start. It is not recomputed each turn
-     * based on "are there still deferred tools": tools may be disabled at runtime,
-     * and recomputing would drop one from tools[] mid-session — that's an array
-     * change, which breaks the cache prefix just the same.
-     */
-    exposeToolSearch: boolean;
-    exposeMcpCall: boolean;
-    register(tool: Tool): void;
-    get(name: string): Tool | undefined;
-    listTools(): Tool[];
-    getAllSchemas(protocol?: "anthropic"): Anthropic.Tool[];
-    getAllSchemas(protocol: "openai" | "openai-compat"): FunctionTool[];
-    /**
-     * Names of deferred tools not yet discovered, in lexicographic order.
-     *
-     * Sorting is not cosmetic: callers compare this list to detect pool changes;
-     * unstable ordering would produce different text for the same set of tools
-     * and break the comparison.
-     */
-    getDeferredToolNames(): string[];
-    getDeferredTools(): Tool[];
-    searchDeferred(query: string, maxResults?: number): Tool[];
-    findDeferredByNames(names: string[]): Tool[];
-    markDiscovered(name: string): void;
-    isDiscovered(name: string): boolean;
-}
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-declare const COMPACT_BOUNDARY = "compact_boundary";
-/** Persisted form of a tool invocation. Stores a provider-agnostic internal representation rather than
- *  any vendor-specific wire format, so sessions can be restored even after switching providers. */
-declare const ToolUseRecordSchema: z$1.ZodObject<{
-    tool_use_id: z$1.ZodString;
-    tool_name: z$1.ZodString;
-    arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-}, z$1.core.$strip>;
-type ToolUseRecord = z$1.infer<typeof ToolUseRecordSchema>;
-/** Persisted form of a tool result, paired with a ToolUseRecord via tool_use_id. */
-declare const ToolResultRecordSchema: z$1.ZodObject<{
-    tool_use_id: z$1.ZodString;
-    content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-    content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-    is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type ToolResultRecord = z$1.infer<typeof ToolResultRecordSchema>;
-declare const SessionMessageSchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodDefault<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>>;
-    timestamp: z$1.ZodNumber;
-    type: z$1.ZodOptional<z$1.ZodString>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type SessionMessage = z$1.infer<typeof SessionMessageSchema>;
-declare const KeptMessageSchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type KeptMessage = z$1.infer<typeof KeptMessageSchema>;
-/** Conversation-layer tool blocks (camelCase) → persisted records (snake_case); empty values are omitted. */
-declare function toolUsesToRecords(toolUses?: {
-    toolUseId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-}[]): ToolUseRecord[];
-declare function toolResultsToRecords(toolResults?: ToolResultBlock[]): ToolResultRecord[];
-declare const CompactBoundaryPayloadSchema: z$1.ZodObject<{
-    summary: z$1.ZodString;
-    keep: z$1.ZodArray<z$1.ZodObject<{
-        role: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-            tool_use_id: z$1.ZodString;
-            tool_name: z$1.ZodString;
-            arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-        }, z$1.core.$strip>>>;
-        tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-            tool_use_id: z$1.ZodString;
-            content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-            content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-            is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-        }, z$1.core.$strip>>>;
-    }, z$1.core.$strip>>;
-}, z$1.core.$strip>;
-type CompactBoundaryPayload = z$1.infer<typeof CompactBoundaryPayloadSchema>;
-interface SessionInfo {
-    id: string;
-    firstMessage: string;
-    messageCount: number;
-    size: number;
-    modTime: Date;
-}
-declare function getSessionFilePath(workDir: string, sessionId: string): string;
-declare function newSessionId(): string;
-declare function saveMessage(workDir: string, sessionId: string, msg: SessionMessage): void;
-declare function saveCompactBoundary(workDir: string, sessionId: string, payload: CompactBoundaryPayload): void;
-declare function loadSession(workDir: string, sessionId: string): SessionMessage[];
-interface RestoredMessage {
-    role: "user" | "assistant";
-    content: string | Record<string, unknown>[];
-    toolUses?: {
-        toolUseId: string;
-        toolName: string;
-        arguments?: Record<string, unknown>;
-    }[];
-    toolResults?: ToolResultBlock[];
-}
-declare function rebuildFromSession(saved: SessionMessage[]): RestoredMessage[];
-declare function listSessions(workDir: string): SessionInfo[];
-/**
- * Cleans up expired sessions: deletes .jsonl files whose last modified time exceeds SESSION_EXPIRY_DAYS.
- * Called during listSessions or on startup to prevent the session directory from growing indefinitely.
- * Silently skips failures (best-effort).
- */
-declare function cleanExpiredSessions(workDir: string): number;
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-type AgentEvent = {
-    type: "stream_text";
-    text: string;
-} | {
-    type: "thinking_text";
-    text: string;
-} | {
-    type: "thinking_complete";
-    thinking: string;
-    signature: string;
-} | {
-    type: "tool_use";
-    toolName: string;
-    toolId: string;
-    args: Record<string, unknown>;
-} | {
-    type: "tool_result";
-    toolName: string;
-    toolId: string;
-    output: string;
-    contentBlocks?: ToolResultContentBlock[];
-    isError: boolean;
-    elapsed: number;
-} | {
-    type: "turn_complete";
-} | {
-    type: "loop_complete";
-    stopReason: string;
-} | {
-    type: "usage";
-    usage: UsageInfo;
-} | {
-    type: "error";
-    error: Error;
-} | {
-    type: "compact";
-    message: string;
-    boundary?: CompactBoundaryPayload | undefined;
-} | {
-    type: "retry";
-    reason: string;
-    delay: number;
-} | {
-    type: "permission_request";
-    toolName: string;
-    args: Record<string, unknown>;
-};
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+declare class ToolRegistry {
+    private tools;
+    private discovered;
+    /**
+     * How MCP tools are loaded, written by mcp/strategy after connecting to the
+     * server. ToolSearch relies on it to decide what to return, and the client
+     * relies on it to decide whether to send defer_loading. It stays eager when
+     * there is no MCP, which behaves the same as no deferral.
+     */
+    mcpLoadingMode: McpLoadingMode;
+    /**
+     * Whether to expose the search and dispatch tools to the model is computed once
+     * by applyMode in mcp/strategy at session start. It is not recomputed each turn
+     * based on "are there still deferred tools": tools may be disabled at runtime,
+     * and recomputing would drop one from tools[] mid-session — that's an array
+     * change, which breaks the cache prefix just the same.
+     */
+    exposeToolSearch: boolean;
+    exposeMcpCall: boolean;
+    register(tool: Tool): void;
+    get(name: string): Tool | undefined;
+    listTools(): Tool[];
+    getAllSchemas(): ToolSchema[];
+    getAllSchemas(protocol: "anthropic", filter?: (name: string) => boolean): AnthropicToolSchema[];
+    getAllSchemas(protocol: "openai", filter?: (name: string) => boolean): OpenAIResponsesToolSchema[];
+    getAllSchemas(protocol: "openai-compat", filter?: (name: string) => boolean): OpenAICompatToolSchema[];
+    getAllSchemas(protocol: ToolProtocol, filter?: (name: string) => boolean): ProviderToolSchema[];
+    /**
+     * Names of deferred tools not yet discovered, in lexicographic order.
+     *
+     * Sorting is not cosmetic: callers compare this list to detect pool changes;
+     * unstable ordering would produce different text for the same set of tools
+     * and break the comparison.
+     */
+    getDeferredToolNames(): string[];
+    getDeferredTools(): Tool[];
+    searchDeferred(query: string, maxResults?: number): Tool[];
+    findDeferredByNames(names: string[]): Tool[];
+    markDiscovered(name: string): void;
+    isDiscovered(name: string): boolean;
+}
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -1376,98 +1552,16 @@ declare class StreamingExecutor {
  * SOFTWARE.
  */
 
-type CommandType = "local" | "local_ui" | "prompt" | "skill_fork";
-interface CommandContext {
-    workDir: string;
-    args: string;
-    conversation?: unknown;
-    registry?: unknown;
-    /** Returns the current permission mode */
-    permissionMode?: () => string;
-    /** Returns token usage [input, output] */
-    tokenCount?: () => [number, number];
-    /** Returns the number of currently enabled tools */
-    toolCount?: () => number;
-    /** Returns the list of memories */
-    memoryList?: () => string[];
-    /** Clears all memories */
-    memoryClear?: () => void;
-    /** Returns the current model name */
-    model?: string;
-    /** Returns the current thinking level */
-    thinkingLevel?: () => ThinkingLevel;
-    /** Sets the thinking level for the active client */
-    setThinkingLevel?: (level: ThinkingLevel) => void;
-    /** Persists the thinking level to the global config; throws on failure */
-    persistThinkingLevel?: (level: ThinkingLevel) => void;
-}
-interface Command {
-    name: string;
-    aliases: string[];
-    type: CommandType;
-    description: string;
-    handler: (ctx: CommandContext) => string;
-}
-declare class CommandRegistry {
-    private commands;
-    /** Alias to command name */
-    private aliasMap;
-    /**
-     * Registers a command, checking for name and alias conflicts.
-     * The name must not conflict with existing command names or aliases;
-     * aliases must not conflict with existing command names or other aliases.
-     */
-    register(cmd: Command): void;
-    /**
-     * Checks if a command would conflict with already registered commands.
-     * Dynamic loaders (e.g., for user-defined commands) should call this method
-     * before `register` to filter out conflicting entries, as `register` throws
-     * an exception on conflict.
-     */
-    hasConflict(cmd: Command): boolean;
-    find(name: string): Command | undefined;
-    complete(prefix: string): Command[];
-    listCommands(): Command[];
-}
-interface Parsed {
-    name: string;
-    args: string;
-}
-declare function parse(input: string): Parsed | null;
-declare function createDefaultRegistry(): CommandRegistry;
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-declare const FileMailMessageSchema: z$1.ZodObject<{
-    from: z$1.ZodString;
-    text: z$1.ZodString;
-    timestamp: z$1.ZodString;
-    read: z$1.ZodOptional<z$1.ZodBoolean>;
-    type: z$1.ZodOptional<z$1.ZodString>;
-    requestId: z$1.ZodOptional<z$1.ZodString>;
-    approve: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type FileMailMessage = z$1.infer<typeof FileMailMessageSchema>;
+declare const FileMailMessageSchema: z.ZodObject<{
+    from: z.ZodString;
+    text: z.ZodString;
+    timestamp: z.ZodString;
+    read: z.ZodOptional<z.ZodBoolean>;
+    type: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+    approve: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type FileMailMessage = z.infer<typeof FileMailMessageSchema>;
 declare class FileMailbox {
     private filePath;
     constructor(dir: string, memberName: string);
@@ -1507,56 +1601,56 @@ declare class FileMailbox {
  * SOFTWARE.
  */
 
-declare const ToolActivitySchema: z.ZodObject<{
-    toolName: z.ZodString;
-    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    activityDescription: z.ZodString;
-}, z.core.$strip>;
-type ToolActivity = z.infer<typeof ToolActivitySchema>;
-declare const AgentProgressSchema: z.ZodObject<{
-    toolUseCount: z.ZodNumber;
-    tokenCount: z.ZodNumber;
-    lastActivity: z.ZodOptional<z.ZodObject<{
-        toolName: z.ZodString;
-        input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        activityDescription: z.ZodString;
-    }, z.core.$strip>>;
-    recentActivities: z.ZodArray<z.ZodObject<{
-        toolName: z.ZodString;
-        input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        activityDescription: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-type AgentProgress = z.infer<typeof AgentProgressSchema>;
-declare const TeammateUIStateSchema: z.ZodObject<{
-    name: z.ZodString;
-    teamName: z.ZodString;
-    status: z.ZodEnum<{
+declare const ToolActivitySchema: z$1.ZodObject<{
+    toolName: z$1.ZodString;
+    input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+    activityDescription: z$1.ZodString;
+}, z$1.core.$strip>;
+type ToolActivity = z$1.infer<typeof ToolActivitySchema>;
+declare const AgentProgressSchema: z$1.ZodObject<{
+    toolUseCount: z$1.ZodNumber;
+    tokenCount: z$1.ZodNumber;
+    lastActivity: z$1.ZodOptional<z$1.ZodObject<{
+        toolName: z$1.ZodString;
+        input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+        activityDescription: z$1.ZodString;
+    }, z$1.core.$strip>>;
+    recentActivities: z$1.ZodArray<z$1.ZodObject<{
+        toolName: z$1.ZodString;
+        input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+        activityDescription: z$1.ZodString;
+    }, z$1.core.$strip>>;
+}, z$1.core.$strip>;
+type AgentProgress = z$1.infer<typeof AgentProgressSchema>;
+declare const TeammateUIStateSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    teamName: z$1.ZodString;
+    status: z$1.ZodEnum<{
         completed: "completed";
         failed: "failed";
         running: "running";
         idle: "idle";
         stopped: "stopped";
     }>;
-    progress: z.ZodObject<{
-        toolUseCount: z.ZodNumber;
-        tokenCount: z.ZodNumber;
-        lastActivity: z.ZodOptional<z.ZodObject<{
-            toolName: z.ZodString;
-            input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            activityDescription: z.ZodString;
-        }, z.core.$strip>>;
-        recentActivities: z.ZodArray<z.ZodObject<{
-            toolName: z.ZodString;
-            input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            activityDescription: z.ZodString;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    startTime: z.ZodNumber;
-    spinnerVerb: z.ZodString;
-    lastMessage: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type TeammateUIState = z.infer<typeof TeammateUIStateSchema>;
+    progress: z$1.ZodObject<{
+        toolUseCount: z$1.ZodNumber;
+        tokenCount: z$1.ZodNumber;
+        lastActivity: z$1.ZodOptional<z$1.ZodObject<{
+            toolName: z$1.ZodString;
+            input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+            activityDescription: z$1.ZodString;
+        }, z$1.core.$strip>>;
+        recentActivities: z$1.ZodArray<z$1.ZodObject<{
+            toolName: z$1.ZodString;
+            input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+            activityDescription: z$1.ZodString;
+        }, z$1.core.$strip>>;
+    }, z$1.core.$strip>;
+    startTime: z$1.ZodNumber;
+    spinnerVerb: z$1.ZodString;
+    lastMessage: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type TeammateUIState = z$1.infer<typeof TeammateUIStateSchema>;
 declare function createProgress(): AgentProgress;
 declare function recordToolUse(p: AgentProgress, toolName: string, input: Record<string, unknown>): void;
 declare function recordTokens(p: AgentProgress, inputTokens: number, outputTokens: number): void;
@@ -1655,17 +1749,17 @@ declare class SharedTaskStore {
  * three-state semantics: absent means just registered and not yet started,
  * true means actively running, false means idle.
  */
-declare const TeamMemberEntrySchema: z$1.ZodObject<{
-    agentId: z$1.ZodString;
-    name: z$1.ZodString;
-    agentType: z$1.ZodOptional<z$1.ZodString>;
-    model: z$1.ZodOptional<z$1.ZodString>;
-    joinedAt: z$1.ZodNumber;
-    worktreePath: z$1.ZodOptional<z$1.ZodString>;
-    backendType: z$1.ZodOptional<z$1.ZodString>;
-    isActive: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type TeamMemberEntry = z$1.infer<typeof TeamMemberEntrySchema>;
+declare const TeamMemberEntrySchema: z.ZodObject<{
+    agentId: z.ZodString;
+    name: z.ZodString;
+    agentType: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    joinedAt: z.ZodNumber;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    backendType: z.ZodOptional<z.ZodString>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type TeamMemberEntry = z.infer<typeof TeamMemberEntrySchema>;
 /**
  * On-disk representation of team configuration, stored at <teamsBaseDir>/<slug>/config.json.
  *
@@ -1677,23 +1771,23 @@ type TeamMemberEntry = z$1.infer<typeof TeamMemberEntrySchema>;
  * independent processes that need to know which team they belong to and who their
  * peers are after startup; users restarting Swifty must be able to resume prior teams.
  */
-declare const TeamFileSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    description: z$1.ZodOptional<z$1.ZodString>;
-    createdAt: z$1.ZodNumber;
-    leadAgentId: z$1.ZodString;
-    members: z$1.ZodArray<z$1.ZodObject<{
-        agentId: z$1.ZodString;
-        name: z$1.ZodString;
-        agentType: z$1.ZodOptional<z$1.ZodString>;
-        model: z$1.ZodOptional<z$1.ZodString>;
-        joinedAt: z$1.ZodNumber;
-        worktreePath: z$1.ZodOptional<z$1.ZodString>;
-        backendType: z$1.ZodOptional<z$1.ZodString>;
-        isActive: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>;
-}, z$1.core.$strip>;
-type TeamFile = z$1.infer<typeof TeamFileSchema>;
+declare const TeamFileSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    leadAgentId: z.ZodString;
+    members: z.ZodArray<z.ZodObject<{
+        agentId: z.ZodString;
+        name: z.ZodString;
+        agentType: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        joinedAt: z.ZodNumber;
+        worktreePath: z.ZodOptional<z.ZodString>;
+        backendType: z.ZodOptional<z.ZodString>;
+        isActive: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type TeamFile = z.infer<typeof TeamFileSchema>;
 /**
  * Root directory for all team data. Placed under the user's home directory rather than
  * the project directory because pane teammates are independent processes whose working
@@ -1916,37 +2010,37 @@ declare class TeamManager {
  * SOFTWARE.
  */
 
-declare const CodeReviewMemberSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    email: z$1.ZodString;
-    role: z$1.ZodEnum<{
+declare const CodeReviewMemberSchema: z.ZodObject<{
+    name: z.ZodString;
+    email: z.ZodString;
+    role: z.ZodEnum<{
         lead: "lead";
         reviewer: "reviewer";
         junior: "junior";
         critic: "critic";
     }>;
-    expertise: z$1.ZodArray<z$1.ZodString>;
-    active: z$1.ZodBoolean;
-}, z$1.core.$strip>;
-type CodeReviewMember = z$1.infer<typeof CodeReviewMemberSchema>;
-declare const CodeReviewTeamSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    members: z$1.ZodArray<z$1.ZodObject<{
-        name: z$1.ZodString;
-        email: z$1.ZodString;
-        role: z$1.ZodEnum<{
+    expertise: z.ZodArray<z.ZodString>;
+    active: z.ZodBoolean;
+}, z.core.$strip>;
+type CodeReviewMember = z.infer<typeof CodeReviewMemberSchema>;
+declare const CodeReviewTeamSchema: z.ZodObject<{
+    name: z.ZodString;
+    members: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+        role: z.ZodEnum<{
             lead: "lead";
             reviewer: "reviewer";
             junior: "junior";
             critic: "critic";
         }>;
-        expertise: z$1.ZodArray<z$1.ZodString>;
-        active: z$1.ZodBoolean;
-    }, z$1.core.$strip>>;
-    createdAt: z$1.ZodString;
-    lastActive: z$1.ZodString;
-}, z$1.core.$strip>;
-type CodeReviewTeam = z$1.infer<typeof CodeReviewTeamSchema>;
+        expertise: z.ZodArray<z.ZodString>;
+        active: z.ZodBoolean;
+    }, z.core.$strip>>;
+    createdAt: z.ZodString;
+    lastActive: z.ZodString;
+}, z.core.$strip>;
+type CodeReviewTeam = z.infer<typeof CodeReviewTeamSchema>;
 declare class CodeReviewManager {
     private teams;
     private configPath;
@@ -2058,29 +2152,115 @@ interface CommentIssue {
     resolution: CommentResolution;
     authorResponse?: string;
 }
-declare class ReviewSession {
-    private requests;
-    private manager;
-    private workDir;
-    private commentCounter;
-    constructor(workDir: string, manager: CodeReviewManager);
-    private getCritics;
-    private loadRequests;
-    createReviewRequest(teamName: string, title: string, description: string, author: string, branch: string, files: string[]): ReviewRequest;
-    getRequest(id: string): ReviewRequest | undefined;
-    updateRequestStatus(id: string, status: ReviewRequest["status"]): void;
-    addComment(requestId: string, reviewer: string, content: string, file?: string, line?: number): ReviewComment;
-    resolveComment(requestId: string, commentId: string): void;
-    acceptComment(requestId: string, commentId: string, authorResponse?: string): void;
-    rejectComment(requestId: string, commentId: string, authorResponse?: string): void;
-    addCriticAssessment(requestId: string, commentId: string, critic: string, evaluation: CriticEvaluation, reasoning: string): CriticAssessment;
-    evaluateCommentByCritic(requestId: string, commentId: string, criticName: string, isReasonable: boolean, reasoning: string): CriticAssessment;
-    getCriticSummary(requestId: string): string;
-    generateFinalReport(requestId: string): ReviewSummary;
-    formatFinalReport(summary: ReviewSummary): string;
-    getPendingRequests(): ReviewRequest[];
-    getRequestSummary(id: string): string;
+declare class ReviewSession {
+    private requests;
+    private manager;
+    private workDir;
+    private commentCounter;
+    constructor(workDir: string, manager: CodeReviewManager);
+    private getCritics;
+    private loadRequests;
+    createReviewRequest(teamName: string, title: string, description: string, author: string, branch: string, files: string[]): ReviewRequest;
+    getRequest(id: string): ReviewRequest | undefined;
+    updateRequestStatus(id: string, status: ReviewRequest["status"]): void;
+    addComment(requestId: string, reviewer: string, content: string, file?: string, line?: number): ReviewComment;
+    resolveComment(requestId: string, commentId: string): void;
+    acceptComment(requestId: string, commentId: string, authorResponse?: string): void;
+    rejectComment(requestId: string, commentId: string, authorResponse?: string): void;
+    addCriticAssessment(requestId: string, commentId: string, critic: string, evaluation: CriticEvaluation, reasoning: string): CriticAssessment;
+    evaluateCommentByCritic(requestId: string, commentId: string, criticName: string, isReasonable: boolean, reasoning: string): CriticAssessment;
+    getCriticSummary(requestId: string): string;
+    generateFinalReport(requestId: string): ReviewSummary;
+    formatFinalReport(summary: ReviewSummary): string;
+    getPendingRequests(): ReviewRequest[];
+    getRequestSummary(id: string): string;
+}
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+type CommandType = "local" | "local_ui" | "prompt" | "skill_fork";
+interface CommandContext {
+    workDir: string;
+    args: string;
+    conversation?: unknown;
+    registry?: unknown;
+    /** Returns the current permission mode */
+    permissionMode?: () => string;
+    /** Returns token usage [input, output] */
+    tokenCount?: () => [number, number];
+    /** Returns the number of currently enabled tools */
+    toolCount?: () => number;
+    /** Returns the list of memories */
+    memoryList?: () => string[];
+    /** Clears all memories */
+    memoryClear?: () => void;
+    /** Returns the current model name */
+    model?: string;
+    /** Returns the current effective thinking level */
+    thinkingLevel?: () => ThinkingLevel;
+    /** Returns the active client's available logical thinking levels */
+    availableThinkingLevels?: () => readonly ThinkingLevel[];
+    /** Sets the thinking level for the active client */
+    setThinkingLevel?: (level: ThinkingLevel) => void;
+    /** Persists the thinking level to the global config; throws on failure */
+    persistThinkingLevel?: (level: ThinkingLevel) => void;
+}
+interface Command {
+    name: string;
+    aliases: string[];
+    type: CommandType;
+    description: string;
+    handler: (ctx: CommandContext) => string;
+    /** Skill-derived commands; excluded from the /help listing (see /skills). */
+    isSkill?: boolean;
+}
+declare class CommandRegistry {
+    private commands;
+    /** Alias to command name */
+    private aliasMap;
+    /**
+     * Registers a command, checking for name and alias conflicts.
+     * The name must not conflict with existing command names or aliases;
+     * aliases must not conflict with existing command names or other aliases.
+     */
+    register(cmd: Command): void;
+    /**
+     * Checks if a command would conflict with already registered commands.
+     * Dynamic loaders (e.g., for user-defined commands) should call this method
+     * before `register` to filter out conflicting entries, as `register` throws
+     * an exception on conflict.
+     */
+    hasConflict(cmd: Command): boolean;
+    find(name: string): Command | undefined;
+    complete(prefix: string): Command[];
+    listCommands(): Command[];
+}
+interface Parsed {
+    name: string;
+    args: string;
 }
+declare function parse(input: string): Parsed | null;
+declare function createDefaultRegistry(): CommandRegistry;
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -2202,8 +2382,8 @@ declare function estimateMessages(messages: Message[]): number;
 declare function estimateTokens(conv: ConversationManager): number;
 declare function computeKeepStartIndex(messages: Message[]): number;
 declare function currentContextTokens(conv: ConversationManager, anchor?: UsageAnchor): number;
-declare function manageContext(conv: ConversationManager, client: LLMClient, contextWindow: number, maxOutput: number, trackingState: AutoCompactTrackingState, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal): Promise<CompactResult>;
-declare function forceCompact(conv: ConversationManager, client: LLMClient, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal): Promise<CompactResult>;
+declare function manageContext(conv: ConversationManager, client: LLMClient, contextWindow: number, maxOutput: number, trackingState: AutoCompactTrackingState, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ProviderToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal): Promise<CompactResult>;
+declare function forceCompact(conv: ConversationManager, client: LLMClient, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ProviderToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal, customInstructions?: string): Promise<CompactResult>;
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -2296,6 +2476,27 @@ declare const MAX_HISTORY_ENTRIES = 200;
 declare function load(dir: string): string[];
 declare function append(dir: string, text: string): string[];
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
 type SaveClipboardImageResult = {
     ok: true;
     value: string;
@@ -2480,7 +2681,7 @@ declare function closeLogger(): void;
 /**
  * Global logger export. Modules can import and use it at file top level:
  * ```ts
- * import { logger } from "../logger/logger.js";
+ * import { logger } from "@/logger/logger.js";
  * logger.warn({ module: "app" }, "something looks off");
  * ```
  * Before initLogger(), calls fall back to the silent target (pre-init logs
@@ -2617,25 +2818,6 @@ declare class MCPManager {
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-/**
- * Decides how MCP tools enter the context. Three modes, chosen once at session start
- * right after MCP connects:
- *
- *   eager    Total schema size is under one tenth of the context window, so load
- *            everything into tools[] with no deferral. The context saved is not worth
- *            taking on any extra risk for.
- *   native   Official Anthropic endpoints. Tools stay in tools[] with defer_loading but
- *            the server hides them from the model; ToolSearch returns tool_reference and
- *            the server expands the schema.
- *   dispatch Other endpoints (domestic vendors, various proxy gateways) support neither
- *            of the above, so we simulate it ourselves: MCP tools never enter tools[] and
- *            everything goes through the single McpCall entry point.
- *
- * Why three modes: tools is rendered after system and before messages, so any change to
- * the array invalidates the prompt cache for the entire conversation history that follows.
- * Measured with a 20k-token history, appending one tool to the end of tools drops the
- * cache hit rate from 99.4% to 9.5%, effectively recomputing the whole history.
- */
 
 /** Below this share of the context window, skip deferral and load everything eagerly. */
 declare const DEFAULT_EAGER_THRESHOLD_PERCENT = 10;
@@ -2985,6 +3167,27 @@ declare function parsePrintFlags(args: string[]): PrintArgs | null;
  */
 declare function runPrintMode(args: PrintArgs): Promise<void>;
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
 /**
  * Appends a timestamped entry to the crash log.
  * Write failures are silently ignored so diagnostics never crash the process.
@@ -3143,11 +3346,8 @@ declare function parseSkillFile(content: string): {
     body: string;
     frontmatter: Record<string, unknown>;
 } | null;
-/**
- * Build the Skill listing for the system prompt: only names and one-line
- * descriptions are included; the full SOP is fetched on demand via LoadSkill.
- * Returns an empty string when the catalog is empty so callers can skip this section.
- */
+declare function escapeSkillXml(text: string): string;
+/** Metadata-only conversation reminder; bodies load on demand without changing the system prefix. */
 declare function buildSkillSection(catalog: SkillCatalog, workDir: string): string;
 
 /**
@@ -3172,21 +3372,21 @@ declare function buildSkillSection(catalog: SkillCatalog, workDir: string): stri
  * SOFTWARE.
  */
 
-declare const QuestionOptionSchema: z.ZodObject<{
-    label: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type QuestionOption = z.infer<typeof QuestionOptionSchema>;
-declare const QuestionSchema: z.ZodObject<{
-    question: z.ZodString;
-    header: z.ZodString;
-    options: z.ZodArray<z.ZodObject<{
-        label: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    multiSelect: z.ZodBoolean;
-}, z.core.$strip>;
-type Question = z.infer<typeof QuestionSchema>;
+declare const QuestionOptionSchema: z$1.ZodObject<{
+    label: z$1.ZodString;
+    description: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type QuestionOption = z$1.infer<typeof QuestionOptionSchema>;
+declare const QuestionSchema: z$1.ZodObject<{
+    question: z$1.ZodString;
+    header: z$1.ZodString;
+    options: z$1.ZodArray<z$1.ZodObject<{
+        label: z$1.ZodString;
+        description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>;
+    multiSelect: z$1.ZodBoolean;
+}, z$1.core.$strip>;
+type Question = z$1.infer<typeof QuestionSchema>;
 type Asker = (questions: Question[]) => Promise<Record<string /** question text */, string /** user chosen answer */>>;
 declare class AskUserQuestionTool implements Tool {
     private ask;
@@ -3490,19 +3690,7 @@ declare function buildSystemPrompt(env: EnvironmentContext): string;
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-/**
- * Returns the coordinator-mode orchestration guidance, injected as a system-reminder each turn.
- * The first turn sends the full text; subsequent turns send the condensed version: this guidance
- * is just over 8 KB, and system-reminders are appended incrementally — re-sending the full text
- * every turn would fill back up the context window that this mode is designed to save.
- *
- * There are two reasons this is not made a system-prompt paragraph: first, the model drifts in
- * long conversations — the system prompt appears only once at the beginning, and by turn twenty
- * those hard constraints are long buried; appending once per turn is what pulls them back.
- * Second, the system prompt belongs to the cached prefix — modifying it invalidates billing for
- * all subsequent content, whereas a system-reminder is a plain message appended at the end of
- * the conversation.
- */
+/** Periodic conversation reminders preserve guidance without changing the cached system prefix. */
 declare function coordinatorReminder(iteration?: number): string;
 
 /**
@@ -3676,13 +3864,15 @@ declare class SeatbeltSandbox implements Sandbox {
  * SOFTWARE.
  */
 
-/**
- * Runs a skill in inline mode: injects the skill body into the current conversation context.
- */
+declare function parseSkillPrompt(prompt: string): {
+    name: string;
+    directory: string;
+    body: string;
+    args: string;
+} | undefined;
+/** Activate once through the host so its existing skill cache and permissions remain authoritative. */
 declare function runInline(skill: Skill, args: string, host: SkillHost): string;
-/**
- * Runs a skill in fork mode: executes it in an isolated subagent.
- */
+/** Runs a skill in an isolated subagent and returns its result unchanged. */
 declare function runFork(skill: Skill, args: string, host: SkillForkHost): Promise<string>;
 
 /**
@@ -3997,7 +4187,8 @@ declare class TaskManager {
  * SOFTWARE.
  */
 
-type AllTools = "InstallSkill" | "LoadSkill" | "Agent" | "TaskStop" | "TaskCreate" | "TaskGet" | "TaskList" | "TaskUpdate" | "TeamCreate" | "SpawnTeammate" | "SendMessage" | "ListTeams" | "TeamDelete" | "SyntheticOutput" | "AskUserQuestion" | "Bash" | "PowerShell" | "EditFile" | "EnterWorktree" | "ExitPlanMode" | "ExitWorktree" | "ReadFile" | "ToolSearch" | "WriteFile" | "Glob" | "Grep" | "McpCall";
+type AllTools = "InstallSkill" | "LoadSkill" | "Agent" | "TaskStop" | "TaskCreate" | "TaskGet" | "TaskList" | "TaskUpdate" | "TeamCreate" | "SpawnTeammate" | "SendMessage" | "ListTeams" | "TeamDelete" | "SyntheticOutput" | "AskUserQuestion" | "Bash" | "PowerShell" | "ComputerUse" | "EditFile" | "EnterWorktree" | "ExitPlanMode" | "ExitWorktree" | "ReadFile" | "ToolSearch" | "WriteFile" | "Glob" | "Grep" | "McpCall";
+declare const MAIN_AGENT_ONLY_TOOLS: Set<AllTools>;
 declare const SUBAGENT_DISALLOWED_TOOLS: Set<AllTools>;
 declare const TEAMMATE_DISALLOWED_TOOLS: Set<AllTools>;
 declare const CUSTOM_AGENT_DISALLOWED_TOOLS: Set<AllTools>;
@@ -4358,21 +4549,21 @@ declare class TeamDeleteTool implements Tool {
  * SOFTWARE.
  */
 
-declare const TranscriptEntrySchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodOptional<z$1.ZodString>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodString;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type TranscriptEntry = z$1.infer<typeof TranscriptEntrySchema>;
+declare const TranscriptEntrySchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodOptional<z.ZodString>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodString;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type TranscriptEntry = z.infer<typeof TranscriptEntrySchema>;
 /**
  * Persists a teammate's conversation history to disk for debugging and troubleshooting.
  * File path: .swifty/teams/{team}/transcripts/{agentId}.json
@@ -4482,6 +4673,69 @@ declare class BashTool implements Tool {
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
 
+type ComputerUseEnvironment = "windows" | "mac" | "browser" | "linux" | "ubuntu";
+interface CommandResult {
+    code: number;
+    stdout: Buffer;
+    stderr: string;
+}
+interface CommandOptions {
+    env?: NodeJS.ProcessEnv;
+    maxOutputBytes?: number;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+type CommandRunner = (command: string, args: readonly string[], options?: CommandOptions) => Promise<CommandResult>;
+interface ComputerUseToolOptions {
+    displayHeightPx?: number;
+    displayNumber?: number;
+    displayWidthPx?: number;
+    enableZoom?: boolean;
+    environment?: ComputerUseEnvironment;
+    platform?: NodeJS.Platform;
+    runCommand?: CommandRunner;
+}
+declare class ComputerUseTool implements Tool {
+    name: string;
+    description: string;
+    category: ToolCategory;
+    deferred: boolean;
+    private readonly displayHeightPx;
+    private readonly displayNumber?;
+    private readonly displayWidthPx;
+    private readonly enableZoom;
+    private readonly environment;
+    private readonly platform;
+    private readonly run;
+    private coordinateScaleX;
+    private coordinateScaleY;
+    private macHelperPromise?;
+    constructor(options?: ComputerUseToolOptions);
+    isConcurrencySafe(_args: Record<string, unknown>): boolean;
+    providerSchema(protocol: ToolProtocol): ProviderNativeToolSchema | undefined;
+    schema(): ToolSchema;
+    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+    /** Execute one Anthropic-style action (also the per-item path for batches). */
+    private runSingle;
+    /**
+     * Execute an OpenAI-style ordered action batch. Per the OpenAI computer
+     * output contract, the result always carries the screenshot taken after the
+     * batch ran, and status / safety checks are echoed so the model can continue.
+     */
+    private executeBatch;
+    private toNativeCoordinates;
+    private executeNative;
+    private executeMac;
+    private runMacPayload;
+    private getMacHelper;
+    private compileMacHelper;
+    private executeWindows;
+    private executeLinux;
+    private screenshot;
+    private imageResult;
+    private captureScreenshot;
+}
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -4503,13 +4757,13 @@ declare class BashTool implements Tool {
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-declare const BASH_DESCRIPTION = "\nExecute a shell command and return stdout and stderr.\n\nOn Windows, prefer the PowerShell tool over Bash for shell commands.\n\nIMPORTANT: Avoid using this tool to run cat, head, tail, sed, awk or echo commands. Instead use the dedicated ReadFile, EditFile, or WriteFile tools which provide a better experience.\n\nUsage Notes\n\n- Each call starts in the Agent's working directory with a fresh shell. Changes made by cd, variables, functions, and shell options do not persist to the next call.\n- Always quote file paths containing spaces with double quotes.\n- To run in a subdirectory, use cd with a quoted path followed by && and the command in the same call.\n- Optional timeout in seconds (max 600s). Default 120s.\n- When issuing multiple independent commands, make separate tool calls instead of chaining with &&.\n- Use && to chain sequential dependent commands. Use ; only when you don't care if earlier commands failed.\n\nGit Safety Protocol\n\n- NEVER run destructive git commands (push --force, reset --hard, checkout ., clean -f, branch -D) unless the user explicitly requests it.\n- NEVER skip hooks (--no-verify) unless the user explicitly requests it.\n- Prefer creating a new commit rather than amending an existing one.\n- Commit identity: adds a header: Co-Authored-By: Swifty <usr161043261@outlook.com>\n\nAvoiding unnecessary sleep commands. Do NOT retry failing commands in a sleep loop -- diagnose the root cause instead.\nWhen using find, search from \".\" or a specific path, not \"/\" -- scanning the full filesystem is too expensive.\n";
-declare const POWERSHELL_DESCRIPTION = "\nExecute a PowerShell command and return stdout and stderr.\n\nThis is the RECOMMENDED shell tool on Windows -- prefer it over Bash there. It runs powershell.exe on Windows and pwsh (PowerShell Core) on other platforms.\n\nIMPORTANT: Avoid using this tool to run Get-Content, Select-String, or Write-Output/echo commands. Instead use the dedicated ReadFile, EditFile, or WriteFile tools which provide a better experience.\n\nUsage Notes\n\n- Each call starts in the Agent's working directory with a fresh shell. Set-Location, variables, and shell options do not persist to the next call.\n- Always quote file paths containing spaces with double quotes.\n- To run in a subdirectory, use Set-Location -LiteralPath with a quoted path in the same call.\n- Optional timeout in seconds (max 600s). Default 120s.\n- When issuing multiple independent commands, make separate tool calls instead of chaining with ;.\n- A semicolon does not stop after failure. Check $LASTEXITCODE after native commands and use -ErrorAction Stop for dependent cmdlets. Do not assume PowerShell 7 syntax is available on Windows PowerShell.\n\nGit Safety Protocol\n\n- NEVER run destructive git commands (push --force, reset --hard, checkout ., clean -f, branch -D) unless the user explicitly requests it.\n- NEVER skip hooks (--no-verify) unless the user explicitly requests it.\n- Prefer creating a new commit rather than amending an existing one.\n- Commit identity: adds a header: Co-Authored-By: Swifty <usr161043261@outlook.com>\n\nAvoiding unnecessary Start-Sleep commands. Do NOT retry failing commands in a sleep loop -- diagnose the root cause instead.\nWhen using Get-ChildItem -Recurse, search from \".\" or a specific path, not the drive root -- scanning the full filesystem is too expensive.\n";
-declare const READ_FILE_DESCRIPTION = "\nRead a file and return its contents with line numbers.\n\nUsage Notes\n\n- file_path may be absolute or relative to the Agent's working directory.\n- By default reads up to 2000 lines from the beginning of the file.\n- offset is the number of lines to skip (0-based); limit is the maximum number of lines to return. To start at displayed line 101, use offset=100. Only read what you need.\n- Results are returned with line numbers (1-based) for easy reference.\n- This tool reads files, not directories. Use Glob to find files and Grep to locate relevant lines.\n- Large output may be saved to a readback file. Follow the returned path or request a narrower range when more content is needed.\n- A successful read refreshes the file state used by EditFile and WriteFile. If a write reports that a file changed externally, read it again before retrying.\n- This tool can read image files (png, jpg, jpeg, gif, webp). Image contents are returned as visual content for multimodal analysis. Line numbers and offset/limit parameters do NOT apply to image files.\n";
-declare const EDIT_FILE_DESCRIPTION = "\nReplace an exact text string in an existing file and return a diff of the change.\n\nUsage Notes\n\n- You MUST read the file with ReadFile before editing, this tool will fail otherwise.\n- Preserve exact whitespace and indentation from the file; exclude ReadFile's line-number prefixes.\n- Always prefer editing existing files over creating new ones.\n- By default old_string must occur exactly once. Include more surrounding context to disambiguate, or set replace_all=true only when every occurrence should change.\n- Use the smallest old_string that is clearly unique -- 2-4 adjacent lines is usually sufficient.\n- old_string must be non-empty. new_string must differ from old_string and may be empty to delete the matched text.\n- file_path may be absolute or relative to the Agent's working directory. A stale-file error requires another ReadFile and a revised edit.\n";
-declare const WRITE_FILE_DESCRIPTION = "\nWrite content to a file, creating parent directories if needed. Overwrites existing files.\n\nUsage Notes\n\n- If modifying an existing file, prefer EditFile over WriteFile -- it only sends the diff.\n- Use this tool only to create new files or for complete rewrites.\n- You MUST read existing files with ReadFile before overwriting them.\n- file_path may be absolute or relative to the Agent's working directory. content is the complete UTF-8 text, including any desired trailing newline; an empty string creates or truncates an empty file.\n- Create documentation when the requested task or active workflow requires it; avoid unrelated files.\n";
-declare const GLOB_DESCRIPTION = "\nFind files matching a glob pattern, returning paths relative to the search base, sorted by modification time (newest first).\n\nUsage Notes\n\n- Supports patterns like \"**/*.ts\", \"src/js/*.js\", \"*.{ts,tsx}\".\n- Search from \".\" or a specific path, never from \"/\".\n- Hidden (dot) files and directories are included.\n- Automatically skips .git, node_modules, __pycache__, and similar directories.\n- Returns at most 1000 matches. When limited, narrow the search; the result is not an exhaustive listing.\n- Use this instead of find or ls command via Bash.\n";
-declare const GREP_DESCRIPTION = "\nSearch file content using a regex pattern (case-insensitive), returning file:line:content matches.\n\nUsage Notes\n\n- Searches one line at a time using JavaScript-style regular expressions (e.g., \"log.*Error\"). Escape backslashes in JSON strings. Multiline matches and every PCRE extension are not supported.\n- Filter files with the include parameter (e.g., \"*.ts\", \"*.{ts,tsx}\", \"src/**/*.js\").\n- Include patterns containing \"/\" match the path relative to the working directory; bare patterns like \"*.ts\" match file names at any depth.\n- Search from \".\" or a specific path, never from \"/\".\n- Automatically skips .git, node_modules, __pycache__, and similar directories.\n- Use this instead of grep or rg commands via Bash.\n- Returns at most 500 matching lines. Narrow the search if the result limit is reached. Use ReadFile for surrounding context.\n";
+declare const BASH_DESCRIPTION = "Execute command in Bash; return stdout and stderr. Prefer PowerShell on Windows.\n- timeout is in seconds: default 120, maximum 600. Each call starts a fresh, independent shell in the Agent's working directory; cd, variables, functions, and options do not persist.\n- Quote paths with spaces. To change directory, use cd \"path\" && command in the same call. Separate independent commands; chain dependent commands with &&, not ;.\n- Prefer dedicated file/search tools over cat, head, tail, sed, awk, echo, or find. Scope searches to a directory, never the filesystem root. Diagnose failures rather than retrying in sleep loops.\nGit: commit or push only when requested. Destructive operations (push --force, reset --hard, checkout ., clean -f, branch -D), amending, or skipping hooks/signing require explicit authorization; never bypass permission/hook denials. Prefer new commits. When committing, include Co-Authored-By: Swifty <usr161043261@outlook.com>.";
+declare const POWERSHELL_DESCRIPTION = "Execute command in PowerShell; return stdout and stderr. Recommended on Windows (powershell.exe); uses pwsh elsewhere.\n- timeout is in seconds: default 120, maximum 600. Each call starts a fresh, independent shell in the Agent's working directory; location, variables, and options do not persist.\n- Quote paths with spaces; use Set-Location -LiteralPath \"path\" in the same call. Separate independent commands. For dependencies, check $LASTEXITCODE for native commands and use -ErrorAction Stop for cmdlets; ; does not stop on failure. Do not assume PowerShell 7 syntax.\n- Prefer dedicated file/search tools over Get-Content, Select-String, or Write-Output. Scope recursion to a directory, not a drive root. Diagnose failures rather than retrying in Start-Sleep loops.\nGit: commit or push only when requested. Destructive operations (push --force, reset --hard, checkout ., clean -f, branch -D), amending, or skipping hooks/signing require explicit authorization; never bypass permission/hook denials. Prefer new commits. When committing, include Co-Authored-By: Swifty <usr161043261@outlook.com>.";
+declare const READ_FILE_DESCRIPTION = "Read text with 1-based display line numbers, or images (png, jpg, jpeg, gif, webp) as visual content; not directories.\n- file_path is absolute or relative to the Agent's working directory. offset skips lines (0-based, default 0); limit defaults to 2000 lines, with a 50KB text output cap. Displayed line 101 starts at offset=100. Follow continuation/readback instructions for partial output.\n- Images ignore offset/limit. A successful read refreshes the file-state cache used by EditFile/WriteFile; re-read after an external-change error.";
+declare const EDIT_FILE_DESCRIPTION = "Replace exact text in an existing file and return a diff. Prefer this over whole-file rewrites.\n- file_path is absolute or relative to the Agent's working directory. ReadFile is required first; stale file-state errors require a fresh read and revised edit.\n- old_string must be non-empty and unique unless replace_all=true (default false). Use enough context to disambiguate; preserve whitespace and exclude display line numbers.\n- new_string must differ from old_string; an empty string deletes the match.";
+declare const WRITE_FILE_DESCRIPTION = "Write complete UTF-8 content to file_path, creating parent directories and overwriting existing content. Use for new files or complete rewrites; prefer EditFile for targeted changes.\n- file_path is absolute or relative to the Agent's working directory. Existing files require ReadFile first; re-read if the cached state is stale.\n- content includes any desired trailing newline; an empty string creates or truncates an empty file. Avoid unrelated files or unsolicited documentation.";
+declare const GLOB_DESCRIPTION = "Find files by glob pattern (e.g. \"**/*.ts\", \"*.{ts,tsx}\"). Return paths relative to path, sorted newest modification first.\n- path is absolute or relative to the Agent's working directory (default \".\"); never search the filesystem root.\n- Includes dotfiles; traversal skips fixed directories such as .git, .agents, .swifty, node_modules, dist, and __pycache__, not rules from .gitignore.\n- At most 1000 matches; narrow limited searches rather than treating them as exhaustive. Prefer this over shell find/ls.";
+declare const GREP_DESCRIPTION = "Search file content with a case-insensitive, line-by-line JavaScript-style regex pattern; return file:line:content with 1-based lines and working-directory-relative paths.\n- path is a file or directory, absolute or relative to the Agent's working directory (default \".\"). Escape regex backslashes in JSON. No multiline matching or general PCRE support.\n- include is an optional glob: \"*.ts\" matches names at any depth; patterns with \"/\" match working-directory-relative paths. A direct file path is searched without this filter.\n- Traversal includes dotfiles but skips fixed directories such as .git, .agents, .swifty, node_modules, dist, and __pycache__, not .gitignore rules. Binary/unreadable files are skipped; directory symlinks are not traversed.\n- At most 500 matching lines. Narrow searches; never search the filesystem root. Use ReadFile for context and this tool instead of shell grep/rg.";
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -4692,8 +4946,44 @@ declare class ExitWorktreeTool implements Tool {
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-/** EditFile output is structured diff text; other tools return plain strings */
-declare function isDiffTool(toolName: string): boolean;
+
+declare class GlobTool implements Tool {
+    name: string;
+    description: string;
+    category: ToolCategory;
+    schema(): ToolSchema;
+    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+}
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+declare class GrepTool implements Tool {
+    name: string;
+    description: string;
+    category: ToolCategory;
+    schema(): ToolSchema;
+    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+}
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -4716,8 +5006,8 @@ declare function isDiffTool(toolName: string): boolean;
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-declare const TOOL_SEARCH_TOOL_NAME = "ToolSearch";
-declare const MCP_CALL_TOOL_NAME = "McpCall";
+/** EditFile output is structured diff text; other tools return plain strings */
+declare function isDiffTool(toolName: string): boolean;
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -4740,6 +5030,33 @@ declare const MCP_CALL_TOOL_NAME = "McpCall";
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
+/**
+ * Unified call entry point for MCP tools.
+ *
+ * MCP tools never enter tools[]. The model first reads the schema via ToolSearch,
+ * then passes the tool name and arguments through McpCall. This keeps the tools
+ * array byte-identical throughout the whole session, so the prompt cache prefix is
+ * never broken — tools render after system and before messages, so any change to
+ * the array forces the entire trailing history to be recomputed.
+ *
+ * The trade-off is that arguments are generated freely by the model with no schema
+ * constraint at the interface level, so the JSON type is occasionally wrong.
+ * coerceBySchema fixes values level by level against the target tool's full schema.
+ * The fix-up rules must be identical, item by item, across all four languages:
+ *
+ *   schema declares   model provides             coerced to
+ *   string            number (not boolean)       "8891"
+ *   integer / number  numeric-looking string     5 / 5.0
+ *   boolean           "true" / "false"           true / false
+ *   array             single-key obj, array val  unwrap the inner array
+ *   array             comma-separated string     split on commas, trim spaces
+ *   object            object                     recurse over properties
+ *   array             array                      recurse each element via items
+ *
+ * Values that can't be fixed are passed through as-is, letting the MCP server
+ * report its own error — a server-side domain error is more instructive to the
+ * model than a local type error.
+ */
 
 declare function coerceBySchema(value: unknown, schema: unknown): unknown;
 /**
@@ -4770,14 +5087,6 @@ declare class McpCallTool implements Tool {
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
 
-declare class PowerShellTool implements Tool {
-    name: string;
-    description: string;
-    category: ToolCategory;
-    schema(): ToolSchema;
-    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
-}
-
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -4800,13 +5109,12 @@ declare class PowerShellTool implements Tool {
  * SOFTWARE.
  */
 
-declare class ReadFileTool implements Tool {
+declare class PowerShellTool implements Tool {
     name: string;
     description: string;
     category: ToolCategory;
     schema(): ToolSchema;
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
-    private readImage;
 }
 
 /**
@@ -4831,26 +5139,13 @@ declare class ReadFileTool implements Tool {
  * SOFTWARE.
  */
 
-/**
- * Lets the Agent deliver its final result as structured data. In
- * non-interactive mode and coordinator mode, callers want JSON they can parse
- * directly, not a snippet of text buried inside natural language.
- */
-declare class SyntheticOutputTool implements Tool {
-    private jsonSchema?;
+declare class ReadFileTool implements Tool {
     name: string;
     description: string;
     category: ToolCategory;
-    /** jsonSchema is optional; when set, output is validated against the structure agreed with the caller. */
-    constructor(jsonSchema?: Record<string, unknown> | undefined);
     schema(): ToolSchema;
-    execute(_ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
-    /**
-     * Only covers top-level type and required fields; an empty return string
-     * means it passed. Full JSON Schema validation is unnecessary here — what
-     * we guard against is the model delivering a structurally malformed result.
-     */
-    private validateSchema;
+    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+    private readImage;
 }
 
 /**
@@ -4875,44 +5170,26 @@ declare class SyntheticOutputTool implements Tool {
  * SOFTWARE.
  */
 
-declare class ToolSearchTool implements Tool {
-    name: string;
-    description: string;
-    category: ToolCategory;
-    private registry;
-    constructor(registry: ToolRegistry);
-    schema(): ToolSchema;
-    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
-}
-
 /**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
+ * Lets the Agent deliver its final result as structured data. In
+ * non-interactive mode and coordinator mode, callers want JSON they can parse
+ * directly, not a snippet of text buried inside natural language.
  */
-
-declare class GlobTool implements Tool {
+declare class SyntheticOutputTool implements Tool {
+    private jsonSchema?;
     name: string;
     description: string;
     category: ToolCategory;
+    /** jsonSchema is optional; when set, output is validated against the structure agreed with the caller. */
+    constructor(jsonSchema?: Record<string, unknown> | undefined);
     schema(): ToolSchema;
-    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+    execute(_ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+    /**
+     * Only covers top-level type and required fields; an empty return string
+     * means it passed. Full JSON Schema validation is unnecessary here — what
+     * we guard against is the model delivering a structurally malformed result.
+     */
+    private validateSchema;
 }
 
 /**
@@ -4937,10 +5214,12 @@ declare class GlobTool implements Tool {
  * SOFTWARE.
  */
 
-declare class GrepTool implements Tool {
+declare class ToolSearchTool implements Tool {
     name: string;
     description: string;
     category: ToolCategory;
+    private registry;
+    constructor(registry: ToolRegistry);
     schema(): ToolSchema;
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
@@ -5095,6 +5374,7 @@ declare function connectToIde(opts: {
     cwd: string;
     onAtMentioned: (mention: IdeAtMention) => void;
     onDisconnect?: () => void;
+    signal?: AbortSignal;
 }): Promise<IdeConnection | null>;
 
 /**
@@ -5238,28 +5518,28 @@ declare function buildWorktreeNotice(parentCwd: string, wtPath: string): string;
  * SOFTWARE.
  */
 
-declare const TaskStatusSchema: z$1.ZodEnum<{
+declare const TaskStatusSchema: z.ZodEnum<{
     completed: "completed";
     in_progress: "in_progress";
     pending: "pending";
 }>;
-type TaskStatus = z$1.infer<typeof TaskStatusSchema>;
-declare const TaskSchema: z$1.ZodObject<{
-    id: z$1.ZodString;
-    subject: z$1.ZodString;
-    description: z$1.ZodString;
-    status: z$1.ZodEnum<{
+type TaskStatus = z.infer<typeof TaskStatusSchema>;
+declare const TaskSchema: z.ZodObject<{
+    id: z.ZodString;
+    subject: z.ZodString;
+    description: z.ZodString;
+    status: z.ZodEnum<{
         completed: "completed";
         in_progress: "in_progress";
         pending: "pending";
     }>;
-    owner: z$1.ZodOptional<z$1.ZodString>;
-    activeForm: z$1.ZodOptional<z$1.ZodString>;
-    blocks: z$1.ZodArray<z$1.ZodString>;
-    blockedBy: z$1.ZodArray<z$1.ZodString>;
-    metadata: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
-}, z$1.core.$strip>;
-type Task$1 = z$1.infer<typeof TaskSchema>;
+    owner: z.ZodOptional<z.ZodString>;
+    activeForm: z.ZodOptional<z.ZodString>;
+    blocks: z.ZodArray<z.ZodString>;
+    blockedBy: z.ZodArray<z.ZodString>;
+    metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+type Task$1 = z.infer<typeof TaskSchema>;
 declare class TaskStore {
     private filePath;
     constructor(workDir: string, listId: string);
@@ -5439,4 +5719,4 @@ declare class TaskUpdateTool implements Tool {
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
 
-export { ASYNC_AGENT_ALLOWED_TOOLS, Agent, type AgentConfig, type AgentDefinition, type AgentEvent, type AgentEventCallback, AgentEventLogger, type AgentEventSink, type AgentProgress, AgentProgressSchema, type AgentTask, AgentTool, AnthropicClient, type AppConfig, AskUserQuestionTool, type Asker, AuthenticationError, AutoCompactTrackingState, BASH_DESCRIPTION, BUILTIN_AGENTS, type Backup, BashTool, BwrapSandbox, CHARS_PER_TOKEN, COMPACT_BOUNDARY, CUSTOM_AGENT_DISALLOWED_TOOLS, CodeReviewManager, type CodeReviewMember, type CodeReviewTeam, type Command, type CommandContext, CommandRegistry, type CommandType, CommandUsageTracker, type CommentIssue, type CommentResolution, type CompactBoundaryPayload, type CompactResult, ConfigError, type ConnectResult, ContextTooLongError, ConversationManager, type CriticAssessment, type CriticEvaluation, DEFAULT_CONTEXT_WINDOW, DEFAULT_EAGER_THRESHOLD_PERCENT, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_THINKING_LEVEL, type Decision, type DecisionEffect, type DetectedIde, type DiffResult, EDIT_FILE_DESCRIPTION, EditFileTool, EnterWorktreeTool, type EnvironmentContext, type EventLogger, type EventName, ExitPlanModeTool, ExitWorktreeTool, FORK_QUERY_SOURCE, type FileFeedback, FileHistory, type FileMailMessage, FileMailbox, FileStateCache, GLOB_DESCRIPTION, GREP_DESCRIPTION, GlobTool, GrepTool, type HookConfig, HookConfigSchema, type HookContext, HookEngine, type HookResult, type HookRuntimeOptions, INTERRUPTED_TOOL_RESULT, type IdeAtMention, type IdeConnection, ImageTooLargeError, InstallSkillTool, type InstructionSource, type KeptMessage, type LLMClient, LLMError, ListTeamsTool, LoadSkillTool, MAX_DIMENSION_PX, MAX_HISTORY_ENTRIES, MAX_IMAGES_PER_MESSAGE, MAX_IMAGE_BYTES_PASSTHROUGH, MCPClient, MCPManager, type MCPServerConfig, type MCPTool, type MCPToolLike, MCPToolWrapper, MCP_CALL_TOOL_NAME, MCP_NAME_SEP, MCP_TOOL_PREFIX, MSG_PLAN_APPROVAL_REQUEST, MSG_PLAN_APPROVAL_RESPONSE, MSG_SHUTDOWN_REQUEST, MSG_SHUTDOWN_RESPONSE, MSG_TEXT, type MaxTokensSetter, McpCallTool, type McpLoadingMode, type Member, MemoryConsolidator, MemoryExtractor, type MemoryFile, type MemoryHeader, MemoryManager, type Message, NATIVE_TOOL_USE_BETA, NameRegistry, NetworkError, OpenAIClient, OpenAICompatClient, type OpenAIMessageParam, POWERSHELL_DESCRIPTION, PathSandbox, PermissionChecker, type PermissionMode, PowerShellTool, type PrintArgs, PromptBuilder, type ProviderConfig, ProviderConfigSchema, type Question, type QuestionOption, READ_FILE_DESCRIPTION, REJECTED_TOOL_RESULT, RateLimitError, ReadFileTool, type RecallResult, RecoveryState, type RelevantMemory, type RemoteAgentHandle, RemoteServer, type RestoredMessage, type ReviewComment, type ReviewRequest, ReviewSession, type ReviewSummary, RuleEngine, type RunAgent, type RunCallbacks, SHUTDOWN_PREFIX, SKIP_DIRS, SUBAGENT_DISALLOWED_TOOLS, type Sandbox, type SandboxConfig, type SandboxYamlConfig, type SaveClipboardImageResult, SeatbeltSandbox, type Section, SendMessageTool, type SessionInfo, type SessionMessage, type SharedTask, SharedTaskStore, type Skill, SkillCatalog, type SkillForkHost, type SkillHost, type SkillMeta, type Snapshot, type SpawnConfig, SpawnTeammateTool, type Task$1 as StoredTask, type StreamEvent, StreamingExecutor, type SubagentRunOptions, SyntheticOutputTool, TEAMMATE_DISALLOWED_TOOLS, THINKING_BUDGETS, THINKING_LEVELS, TOOL_RESULT_PREVIEW_CHARS, TOOL_SEARCH_TOOL_NAME, type Task, TaskCreateTool$1 as TaskCreateTool, TaskGetTool$1 as TaskGetTool, TaskList, TaskListTool$1 as TaskListTool, TaskManager, type TaskStatus, TaskStopTool, TaskStore, type TaskUpdateFields, TaskUpdateTool$1 as TaskUpdateTool, Team, TeamCreateTool, TeamDeleteTool, type TeamFile, TeamManager, type TeamMemberEntry, TeamMemberEntrySchema, type TeamMode, TaskCreateTool as TeamTaskCreateTool, TaskGetTool as TeamTaskGetTool, TaskListTool as TeamTaskListTool, TaskUpdateTool as TeamTaskUpdateTool, type TeammateUIState, TeammateUIStateSchema, type ThinkingBlock, type ThinkingLevel, type ThinkingLevelControl, type Tool, type ToolActivity, ToolActivitySchema, type ToolCategory, type ToolContext, ToolRegistry, type ToolResult, type ToolResultBlock, type ToolResultContentBlock, type ToolResultRecord, type ToolSchema, ToolSearchTool, type ToolUseBlock, type ToolUseRecord, type TranscriptEntry, type UsageAnchor, type UsageInfo, WRITE_FILE_DESCRIPTION, WebSocketTransport, type WorktreeResult, WriteFileTool, append, applyBudget, applyMode, approved, asCriticEvaluation, asError, asErrorString, asImageMediaType, asRecord, asString, boolArg, buildAnthropicMessages, buildChatCompletionMessages, buildDiff, buildMcpToolName, buildOpenAIInput, buildPlanModeExitReminder, buildPlanModeReentryReminder, buildPlanModeReminder, buildSkillSection, buildSystemPrompt, buildTeammateRegistry, buildWorktreeNotice, cleanExpiredSessions, clipboardImageFileName, cloneRegistryForFork, closeLogger, coerceBySchema, computeCompactThreshold, computeKeepStartIndex, connectToIde, contentToText, coordinatorActive, coordinatorReminder, coordinatorToolFilter, createAgentWorktree, createChildLogger, createClient, createDefaultCodeReviewTeam, createDefaultRegistry, createModelResolver, createProgress, createRemoteAgent, createSandbox, currentContextTokens, decideAndApply, decideMode, defaultThinkingLevelFor, detectBackend, detectBackendFromEnv, detectEnvironment, detectIde, discoverInstructions, doingTasksSection, ensureToolPairing, environmentSection, estimateMessages, estimateSchemaTokens, estimateTokens, evaluateRules, executingActionsSection, expandAtRefs, expandAtRefsWithImages, extractContent, fetchModelContextWindow, fileHistoryDir, filterToolsForAgent, forceCompact, forkEnabled, formatTokens, getContextWindow, getCurrentBranch, getCurrentPlanPath, getMaxOutputTokens, getMediaType, getNameRegistry, getOrCreatePlanPath, getSessionFilePath, getThinkingLevel, globalConfigPath, handleCodeReviewCommand, hasWorktreeChanges, identitySection, initLogger, intArg, isCoordinatorTool, isCriticEvaluation, isDiffTool, isImagePath, isMcpToolLike, isObject, isOfficialAnthropicEndpoint, isPngBuffer, isRecord, isSafeCommand, isShutdownRequest, isSpillReadback, isToolResultContentBlock, isValidThinkingLevel, listSessions, load, loadAgentDefinitions, loadConfig, loadImageAttachment, loadInstructions, loadPlan, loadSession, loadTranscript, loadUserCommands, logger, manageContext, markLastUserTailForCache, markToolsForCache, maybeResizeAndDownsampleImage, mcpCallPermissionContent, mcpContentToToolOutput, mcpToolNamePrefix, measureSchemaChars, memoryAge, memoryAgeDays, memoryFreshnessText, needsToolSearchBeta, newRequestId, newSessionId, normalizeToolResultContentBlock, outputEfficiencySection, parse, parsePrintFlags, parseSkillFile, parseTeammateFlags, persistLargeResult, planApprovalRequest, planApprovalResponse, planExists, quickSort, randomCompletionVerb, randomVerb, readTeamFile, readWorktreeHeadSha, rebuildFromSession, record, recordError, recordExit, recordTokens, recordToolUse, recover, removeAgentWorktree, renderBody, replaceToolResultContent, resetPlanPath, resolveAPIKey, resolveGitDir, resolveModelId, runFork, runInline, runPrintMode, runTeammate, safeJSONParse, sanitizeNameSegment, sanitizeSegment, sanitizeTeamName, saveClipboardImage, saveCompactBoundary, saveMessage, savePlan, saveTranscript, shutdownRequest, shutdownResponse, sniffMediaType, spawnSubagent, spawnTeammate, storeClipboardImage, strArg, strList, summarizeActivities, systemSection, teamConfigPath, teamDir, teamsBaseDir, thinkingBudgetForLevel, toDisplayPreview, toReasoningEffort, toTry, toneStyleSection, toolResultsToRecords, toolUsesToRecords, usingToolsSection, validate, version, withProviderDefaults, writeTeamFile };
+export { ASYNC_AGENT_ALLOWED_TOOLS, Agent, type AgentConfig, type AgentDefinition, type AgentEvent, type AgentEventCallback, AgentEventLogger, type AgentEventSink, type AgentProgress, AgentProgressSchema, type AgentTask, AgentTool, AnthropicClient, type AnthropicToolSchema, type AppConfig, AskUserQuestionTool, type Asker, AuthenticationError, AutoCompactTrackingState, BASH_DESCRIPTION, BUILTIN_AGENTS, type Backup, BashTool, BwrapSandbox, CHARS_PER_TOKEN, COMPACT_BOUNDARY, CUSTOM_AGENT_DISALLOWED_TOOLS, CodeReviewManager, type CodeReviewMember, type CodeReviewTeam, type Command, type CommandContext, CommandRegistry, type CommandType, CommandUsageTracker, type CommentIssue, type CommentResolution, type CompactBoundaryPayload, type CompactResult, ComputerUseTool, type ComputerUseToolOptions, ConfigError, type ConnectResult, ContextTooLongError, ConversationManager, type CriticAssessment, type CriticEvaluation, DEFAULT_CONTEXT_WINDOW, DEFAULT_EAGER_THRESHOLD_PERCENT, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_THINKING_LEVEL, type Decision, type DecisionEffect, type DetectedIde, type DiffResult, EDIT_FILE_DESCRIPTION, EditFileTool, EnterWorktreeTool, type EnvironmentContext, type EventLogger, type EventName, ExitPlanModeTool, ExitWorktreeTool, FORK_QUERY_SOURCE, type FileFeedback, FileHistory, type FileMailMessage, FileMailbox, FileStateCache, GLOB_DESCRIPTION, GREP_DESCRIPTION, GlobTool, GrepTool, type HookConfig, HookConfigSchema, type HookContext, HookEngine, type HookResult, type HookRuntimeOptions, INTERRUPTED_TOOL_RESULT, type IdeAtMention, type IdeConnection, ImageTooLargeError, InstallSkillTool, type InstructionSource, type KeptMessage, type LLMClient, LLMError, ListTeamsTool, LoadSkillTool, MAIN_AGENT_ONLY_TOOLS, MAX_DIMENSION_PX, MAX_HISTORY_ENTRIES, MAX_IMAGES_PER_MESSAGE, MAX_IMAGE_BYTES_PASSTHROUGH, MCPClient, MCPManager, type MCPServerConfig, type MCPTool, type MCPToolLike, MCPToolWrapper, MCP_NAME_SEP, MCP_TOOL_PREFIX, MIN_THINKING_ANSWER_TOKENS, MIN_THINKING_BUDGET_TOKENS, MSG_PLAN_APPROVAL_REQUEST, MSG_PLAN_APPROVAL_RESPONSE, MSG_SHUTDOWN_REQUEST, MSG_SHUTDOWN_RESPONSE, MSG_TEXT, type MaxTokensSetter, McpCallTool, type McpLoadingMode, type Member, MemoryConsolidator, MemoryExtractor, type MemoryFile, type MemoryHeader, MemoryManager, type Message, NATIVE_TOOL_USE_BETA, NameRegistry, NetworkError, OpenAIClient, OpenAICompatClient, type OpenAICompatToolSchema, type OpenAIMessageParam, type OpenAIResponsesToolSchema, POWERSHELL_DESCRIPTION, PathSandbox, PermissionChecker, type PermissionMode, PowerShellTool, type PrintArgs, PromptBuilder, type ProviderConfig, ProviderConfigSchema, type ProviderNativeToolSchema, type ProviderToolSchema, type Question, type QuestionOption, READ_FILE_DESCRIPTION, REJECTED_TOOL_RESULT, RateLimitError, ReadFileTool, type RecallResult, RecoveryState, type RelevantMemory, type RemoteAgentHandle, RemoteServer, type RestoredMessage, type ReviewComment, type ReviewRequest, ReviewSession, type ReviewSummary, RuleEngine, type RunAgent, type RunCallbacks, SHUTDOWN_PREFIX, SKIP_DIRS, SUBAGENT_DISALLOWED_TOOLS, type Sandbox, type SandboxConfig, type SandboxYamlConfig, type SaveClipboardImageResult, SeatbeltSandbox, type Section, SendMessageTool, type SessionInfo, type SessionMessage, type SharedTask, SharedTaskStore, type Skill, SkillCatalog, type SkillForkHost, type SkillHost, type SkillMeta, type Snapshot, type SpawnConfig, SpawnTeammateTool, type Task$1 as StoredTask, type StreamEvent, StreamingExecutor, type SubagentRunOptions, SyntheticOutputTool, TEAMMATE_DISALLOWED_TOOLS, THINKING_BUDGETS, THINKING_LEVELS, TOOL_RESULT_PREVIEW_CHARS, type Task, TaskCreateTool$1 as TaskCreateTool, TaskGetTool$1 as TaskGetTool, TaskList, TaskListTool$1 as TaskListTool, TaskManager, type TaskStatus, TaskStopTool, TaskStore, type TaskUpdateFields, TaskUpdateTool$1 as TaskUpdateTool, Team, TeamCreateTool, TeamDeleteTool, type TeamFile, TeamManager, type TeamMemberEntry, TeamMemberEntrySchema, type TeamMode, TaskCreateTool as TeamTaskCreateTool, TaskGetTool as TeamTaskGetTool, TaskListTool as TeamTaskListTool, TaskUpdateTool as TeamTaskUpdateTool, type TeammateUIState, TeammateUIStateSchema, type ThinkingBlock, type ThinkingLevel, type ThinkingLevelControl, type Tool, type ToolActivity, ToolActivitySchema, type ToolCategory, type ToolContext, type ToolProtocol, ToolRegistry, type ToolResult, type ToolResultBlock, type ToolResultContentBlock, type ToolResultRecord, type ToolSchema, ToolSearchTool, type ToolUseBlock, type ToolUseRecord, type TranscriptEntry, type UsageAnchor, type UsageInfo, WRITE_FILE_DESCRIPTION, WebSocketTransport, type WorktreeResult, WriteFileTool, append, applyBudget, applyMode, approved, asCriticEvaluation, asError, asErrorString, asImageMediaType, asRecord, asString, boolArg, buildAnthropicMessages, buildChatCompletionMessages, buildDiff, buildMcpToolName, buildOpenAIInput, buildPlanModeExitReminder, buildPlanModeReentryReminder, buildPlanModeReminder, buildSkillSection, buildSystemPrompt, buildTeammateRegistry, buildWorktreeNotice, clampThinkingLevel, cleanExpiredSessions, clipboardImageFileName, cloneRegistryForFork, closeLogger, coerceBySchema, computeCompactThreshold, computeKeepStartIndex, connectToIde, contentToText, coordinatorActive, coordinatorReminder, coordinatorToolFilter, createAgentWorktree, createChildLogger, createClient, createDefaultCodeReviewTeam, createDefaultRegistry, createModelResolver, createProgress, createRemoteAgent, createSandbox, currentContextTokens, decideAndApply, decideMode, detectBackend, detectBackendFromEnv, detectEnvironment, detectIde, discoverInstructions, doingTasksSection, ensureToolPairing, environmentSection, escapeSkillXml, estimateMessages, estimateSchemaTokens, estimateTokens, evaluateRules, executingActionsSection, expandAtRefs, expandAtRefsWithImages, extractContent, fetchModelContextWindow, fileHistoryDir, filterToolsForAgent, forceCompact, forkEnabled, formatTokens, getContextWindow, getCurrentBranch, getCurrentPlanPath, getMaxOutputTokens, getMediaType, getNameRegistry, getOrCreatePlanPath, getSessionFilePath, getSupportedThinkingLevels, getThinkingLevel, globalConfigPath, handleCodeReviewCommand, hasWorktreeChanges, identitySection, initLogger, intArg, isCoordinatorTool, isCriticEvaluation, isDiffTool, isImagePath, isMcpToolLike, isObject, isOfficialAnthropicEndpoint, isPngBuffer, isRecord, isSafeCommand, isShutdownRequest, isSpillReadback, isToolResultContentBlock, isValidThinkingLevel, listSessions, load, loadAgentDefinitions, loadConfig, loadImageAttachment, loadInstructions, loadPlan, loadSession, loadTranscript, loadUserCommands, logger, manageContext, markLastUserTailForCache, markToolsForCache, maybeResizeAndDownsampleImage, mcpCallPermissionContent, mcpContentToToolOutput, mcpToolNamePrefix, measureSchemaChars, memoryAge, memoryAgeDays, memoryFreshnessText, needsToolSearchBeta, newRequestId, newSessionId, normalizeToolResultContentBlock, outputEfficiencySection, parse, parsePrintFlags, parseSkillFile, parseSkillPrompt, parseTeammateFlags, persistLargeResult, planApprovalRequest, planApprovalResponse, planExists, quickSort, randomCompletionVerb, randomVerb, readTeamFile, readWorktreeHeadSha, rebuildFromSession, record, recordError, recordExit, recordTokens, recordToolUse, recover, removeAgentWorktree, renderBody, replaceToolResultContent, resetPlanPath, resolveAPIKey, resolveGitDir, resolveModelId, runFork, runInline, runPrintMode, runTeammate, safeJSONParse, sanitizeNameSegment, sanitizeSegment, sanitizeTeamName, saveClipboardImage, saveCompactBoundary, saveMessage, savePlan, saveTranscript, shutdownRequest, shutdownResponse, sniffMediaType, spawnSubagent, spawnTeammate, storeClipboardImage, strArg, strList, summarizeActivities, systemSection, teamConfigPath, teamDir, teamsBaseDir, thinkingBudgetForLevel, toAnthropicThinkingEffort, toDisplayPreview, toReasoningEffort, toTry, toneStyleSection, toolResultsToRecords, toolUsesToRecords, usingToolsSection, validate, version, withProviderDefaults, writeTeamFile };