@swifty.js/swifty 0.0.30 → 0.0.31

package/dist/lib/index.d.ts

@@ -1,8 +1,7 @@
+import z, { z as z$1 } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import z$1, { z } from 'zod';
+import { BetaToolComputerUse20251124 } from '@anthropic-ai/sdk/resources/beta/messages/messages';
 import OpenAI from 'openai';
-import { ChatCompletionFunctionTool } from 'openai/resources/chat/completions';
-import { FunctionTool } from 'openai/resources/responses/responses';
 import { Logger } from 'pino';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
@@ -28,106 +27,41 @@ import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-interface FileReadRecord {
-    path: string;
-    content: string;
-    timestamp: number;
-}
-interface SkillInvocationRecord {
-    name: string;
-    body: string;
-    timestamp: number;
-}
-declare class RecoveryState {
-    private files;
-    private skills;
-    recordFileRead(path: string, content: string): void;
-    recordSkillInvocation(name: string, body: string): void;
-    snapshotFiles(limit?: number): FileReadRecord[];
-    snapshotSkills(): SkillInvocationRecord[];
-    buildRecoveryAttachment(toolSchemaNames: string[]): string;
-}
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-type DecisionEffect = "allow" | "deny" | "ask";
-type PermissionMode = "default" | "acceptEdits" | "plan" | "bypassPermissions";
-interface Decision {
-    effect: DecisionEffect;
-    reason: string;
-}
-type RuleEffect = DecisionEffect;
-interface Rule {
-    tool: string;
-    pattern: string;
-    effect: RuleEffect;
-}
-declare function extractContent(toolName: string, args: Record<string, unknown>): string;
-declare class PathSandbox {
-    private allowedRoots;
-    private denyWritePaths;
-    private projectDir;
-    constructor(projectDir: string);
-    addRoot(root: string): void;
-    addDenyWrite(path: string): void;
-    /**
-     * Check whether a path is in the deny-write list.
-     * denyWrite has the highest priority — even if the path is within an allowed root, writes are still denied.
-     */
-    checkDenyWrite(filePath: string): Decision | null;
-    check(filePath: string): Decision | null;
-}
-declare function evaluateRules(rules: Rule[], toolName: string, content: string): RuleEffect | null;
-declare class RuleEngine {
-    private userPath;
-    private projectPath;
-    private cache;
-    constructor(workDir: string);
-    private rulesFor;
-    snapshot(): Rule[];
-    evaluate(toolName: string, content: string): RuleEffect | null;
-    appendProjectRule(rule: Rule): void;
-}
-declare function isSafeCommand(command: string): boolean;
-declare class PermissionChecker {
-    private readonly workDir;
-    mode: PermissionMode;
-    planFilePath: string;
-    sandboxEnabled: boolean;
-    sandboxAutoAllow: boolean;
-    private sandbox;
-    private ruleEngine;
-    constructor(workDir: string, mode?: PermissionMode);
-    forWorkDir(workDir: string): PermissionChecker;
-    check(toolName: string, category: "read" | "write" | "command", args: Record<string, unknown>): Decision;
-    allowExtraRoot(path: string): void;
-    allowAlways(toolName: string, args: Record<string, unknown>): void;
-    /**
-     * Generate a human-readable description of the tool action for display in HITL confirmation dialogs.
-     * Prioritizes extracting fields defined in contentFields (e.g., command, file_path);
-     * falls back to a key:value summary of parameters if no match is found.
-     */
-    describeToolAction(toolName: string, args: Record<string, unknown>): string;
+interface UsageInfo {
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadInputTokens: number;
+    cacheCreationInputTokens: number;
 }
+/** Tool use delta: Input partial JSON */
+type StreamEvent = {
+    type: "text_delta";
+    text: string;
+} | {
+    type: "thinking_delta";
+    text: string;
+} | {
+    type: "thinking_complete";
+    thinking: string;
+    signature: string;
+} | {
+    type: "tool_call_start";
+    toolName: string;
+    toolId: string;
+} | {
+    type: "tool_call_delta";
+    text: string;
+} | {
+    type: "tool_call_complete";
+    toolId: string;
+    toolName: string;
+    arguments: Record<string, unknown>;
+    providerItemId?: string;
+} | {
+    type: "stream_end";
+    stopReason: string;
+    usage: UsageInfo;
+};
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -219,6 +153,87 @@ declare class FileHistory {
     save(): void;
 }
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+type DecisionEffect = "allow" | "deny" | "ask";
+type PermissionMode = "default" | "acceptEdits" | "plan" | "bypassPermissions";
+interface Decision {
+    effect: DecisionEffect;
+    reason: string;
+}
+type RuleEffect = DecisionEffect;
+interface Rule {
+    tool: string;
+    pattern: string;
+    effect: RuleEffect;
+}
+declare function extractContent(toolName: string, args: Record<string, unknown>): string;
+declare class PathSandbox {
+    private allowedRoots;
+    private denyWritePaths;
+    private projectDir;
+    constructor(projectDir: string);
+    addRoot(root: string): void;
+    addDenyWrite(path: string): void;
+    /**
+     * Check whether a path is in the deny-write list.
+     * denyWrite has the highest priority — even if the path is within an allowed root, writes are still denied.
+     */
+    checkDenyWrite(filePath: string): Decision | null;
+    check(filePath: string): Decision | null;
+}
+declare function evaluateRules(rules: Rule[], toolName: string, content: string): RuleEffect | null;
+declare class RuleEngine {
+    private userPath;
+    private projectPath;
+    private cache;
+    constructor(workDir: string);
+    private rulesFor;
+    snapshot(): Rule[];
+    evaluate(toolName: string, content: string): RuleEffect | null;
+    appendProjectRule(rule: Rule): void;
+}
+declare function isSafeCommand(command: string): boolean;
+declare class PermissionChecker {
+    private readonly workDir;
+    mode: PermissionMode;
+    planFilePath: string;
+    sandboxEnabled: boolean;
+    sandboxAutoAllow: boolean;
+    private sandbox;
+    private ruleEngine;
+    constructor(workDir: string, mode?: PermissionMode);
+    forWorkDir(workDir: string): PermissionChecker;
+    check(toolName: string, category: "read" | "write" | "command", args: Record<string, unknown>): Decision;
+    allowExtraRoot(path: string): void;
+    allowAlways(toolName: string, args: Record<string, unknown>): void;
+    /**
+     * Generate a human-readable description of the tool action for display in HITL confirmation dialogs.
+     * Prioritizes extracting fields defined in contentFields (e.g., command, file_path);
+     * falls back to a key:value summary of parameters if no match is found.
+     */
+    describeToolAction(toolName: string, args: Record<string, unknown>): string;
+}
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -305,6 +320,12 @@ interface ToolSchema {
     };
     eager_input_streaming?: boolean;
 }
+type ToolProtocol = "anthropic" | "openai" | "openai-compat";
+type AnthropicToolSchema = ToolSchema | Anthropic.Tool | BetaToolComputerUse20251124;
+type OpenAIResponsesToolSchema = OpenAI.Responses.FunctionTool | OpenAI.Responses.ComputerTool;
+type OpenAICompatToolSchema = OpenAI.ChatCompletionFunctionTool;
+type ProviderToolSchema = ToolSchema | AnthropicToolSchema | OpenAIResponsesToolSchema | OpenAICompatToolSchema;
+type ProviderNativeToolSchema = BetaToolComputerUse20251124 | OpenAI.Responses.ComputerTool;
 interface Tool {
     name: string;
     description: string;
@@ -323,6 +344,12 @@ interface Tool {
      * trip, so they are never deferred and always ship their full schema.
      */
     deferred?: boolean;
+    /**
+     * Return a provider-native declaration when the protocol supports this tool
+     * natively. Returning undefined lets the registry serialize schema() as a
+     * regular custom/function tool.
+     */
+    providerSchema?(protocol: ToolProtocol): ProviderNativeToolSchema | undefined;
     /**
      * Whether this particular invocation can run concurrently with others,
      * judged by actual arguments rather than just the tool category.
@@ -364,6 +391,7 @@ interface ToolUseBlock {
     toolUseId: string;
     toolName: string;
     arguments: Record<string, unknown>;
+    providerItemId?: string;
 }
 interface ToolResultBlock {
     toolUseId: string;
@@ -421,6 +449,253 @@ declare class ConversationManager {
     } | null;
 }
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+declare const COMPACT_BOUNDARY = "compact_boundary";
+/** Persisted form of a tool invocation. Stores a provider-agnostic internal representation rather than
+ *  any vendor-specific wire format, so sessions can be restored even after switching providers. */
+declare const ToolUseRecordSchema: z.ZodObject<{
+    tool_use_id: z.ZodString;
+    tool_name: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    provider_item_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ToolUseRecord = z.infer<typeof ToolUseRecordSchema>;
+/** Persisted form of a tool result, paired with a ToolUseRecord via tool_use_id. */
+declare const ToolResultRecordSchema: z.ZodObject<{
+    tool_use_id: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+    content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    is_error: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type ToolResultRecord = z.infer<typeof ToolResultRecordSchema>;
+declare const SessionMessageSchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodDefault<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>>;
+    timestamp: z.ZodNumber;
+    type: z.ZodOptional<z.ZodString>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        provider_item_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type SessionMessage = z.infer<typeof SessionMessageSchema>;
+declare const KeptMessageSchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        provider_item_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type KeptMessage = z.infer<typeof KeptMessageSchema>;
+/** Conversation-layer tool blocks (camelCase) → persisted records (snake_case); empty values are omitted. */
+declare function toolUsesToRecords(toolUses?: {
+    toolUseId: string;
+    toolName: string;
+    arguments?: Record<string, unknown>;
+    providerItemId?: string;
+}[]): ToolUseRecord[];
+declare function toolResultsToRecords(toolResults?: ToolResultBlock[]): ToolResultRecord[];
+declare const CompactBoundaryPayloadSchema: z.ZodObject<{
+    summary: z.ZodString;
+    keep: z.ZodArray<z.ZodObject<{
+        role: z.ZodString;
+        content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+        tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool_use_id: z.ZodString;
+            tool_name: z.ZodString;
+            arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            provider_item_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool_use_id: z.ZodString;
+            content: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>]>;
+            content_blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+            is_error: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type CompactBoundaryPayload = z.infer<typeof CompactBoundaryPayloadSchema>;
+interface SessionInfo {
+    id: string;
+    firstMessage: string;
+    messageCount: number;
+    size: number;
+    modTime: Date;
+}
+declare function getSessionFilePath(workDir: string, sessionId: string): string;
+declare function newSessionId(): string;
+declare function saveMessage(workDir: string, sessionId: string, msg: SessionMessage): void;
+declare function saveCompactBoundary(workDir: string, sessionId: string, payload: CompactBoundaryPayload): void;
+declare function loadSession(workDir: string, sessionId: string): SessionMessage[];
+interface RestoredMessage {
+    role: "user" | "assistant";
+    content: string | Record<string, unknown>[];
+    toolUses?: {
+        toolUseId: string;
+        toolName: string;
+        arguments?: Record<string, unknown>;
+        providerItemId?: string;
+    }[];
+    toolResults?: ToolResultBlock[];
+}
+declare function rebuildFromSession(saved: SessionMessage[]): RestoredMessage[];
+declare function listSessions(workDir: string): SessionInfo[];
+/**
+ * Cleans up expired sessions: deletes .jsonl files whose last modified time exceeds SESSION_EXPIRY_DAYS.
+ * Called during listSessions or on startup to prevent the session directory from growing indefinitely.
+ * Silently skips failures (best-effort).
+ */
+declare function cleanExpiredSessions(workDir: string): number;
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+type AgentEvent = {
+    type: "stream_text";
+    text: string;
+} | {
+    type: "thinking_text";
+    text: string;
+} | {
+    type: "thinking_complete";
+    thinking: string;
+    signature: string;
+} | {
+    type: "tool_use";
+    toolName: string;
+    toolId: string;
+    args: Record<string, unknown>;
+} | {
+    type: "tool_result";
+    toolName: string;
+    toolId: string;
+    output: string;
+    contentBlocks?: ToolResultContentBlock[];
+    isError: boolean;
+    elapsed: number;
+} | {
+    type: "turn_complete";
+} | {
+    type: "loop_complete";
+    stopReason: string;
+} | {
+    type: "usage";
+    usage: UsageInfo;
+} | {
+    type: "error";
+    error: Error;
+} | {
+    type: "compact";
+    message: string;
+    boundary?: CompactBoundaryPayload | undefined;
+} | {
+    type: "retry";
+    reason: string;
+    delay: number;
+} | {
+    type: "permission_request";
+    toolName: string;
+    args: Record<string, unknown>;
+};
+
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+interface FileReadRecord {
+    path: string;
+    content: string;
+    timestamp: number;
+}
+interface SkillInvocationRecord {
+    name: string;
+    body: string;
+    timestamp: number;
+}
+declare class RecoveryState {
+    private files;
+    private skills;
+    recordFileRead(path: string, content: string): void;
+    recordSkillInvocation(name: string, body: string): void;
+    snapshotFiles(limit?: number): FileReadRecord[];
+    snapshotSkills(): SkillInvocationRecord[];
+    buildRecoveryAttachment(toolSchemaNames: string[]): string;
+}
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -455,7 +730,7 @@ declare function globalConfigPath(): string;
  */
 declare const THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 type ThinkingLevel = (typeof THINKING_LEVELS)[number];
-declare const ReasoningEffortSchema: z.ZodEnum<{
+declare const ReasoningEffortSchema: z$1.ZodEnum<{
     minimal: "minimal";
     low: "low";
     medium: "medium";
@@ -464,24 +739,24 @@ declare const ReasoningEffortSchema: z.ZodEnum<{
     max: "max";
     none: "none";
 }>;
-declare const AnthropicEffortSchema: z.ZodEnum<{
+declare const AnthropicEffortSchema: z$1.ZodEnum<{
     low: "low";
     medium: "medium";
     high: "high";
     xhigh: "xhigh";
     max: "max";
 }>;
-declare const ProviderConfigSchema: z.ZodObject<{
-    name: z.ZodString;
-    protocol: z.ZodEnum<{
+declare const ProviderConfigSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    protocol: z$1.ZodEnum<{
         anthropic: "anthropic";
         openai: "openai";
         "openai-compat": "openai-compat";
     }>;
-    base_url: z.ZodString;
-    model: z.ZodString;
-    api_key: z.ZodOptional<z.ZodString>;
-    thinking: z.ZodOptional<z.ZodEnum<{
+    base_url: z$1.ZodString;
+    model: z$1.ZodString;
+    api_key: z$1.ZodOptional<z$1.ZodString>;
+    thinking: z$1.ZodOptional<z$1.ZodEnum<{
         off: "off";
         minimal: "minimal";
         low: "low";
@@ -490,10 +765,10 @@ declare const ProviderConfigSchema: z.ZodObject<{
         xhigh: "xhigh";
         max: "max";
     }>>;
-    reasoning: z.ZodOptional<z.ZodBoolean>;
-    thinking_level_map: z.ZodOptional<z.ZodObject<{
-        off: z.ZodOptional<z.ZodNullable<z.ZodLiteral<"none">>>;
-        minimal: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+    reasoning: z$1.ZodOptional<z$1.ZodBoolean>;
+    thinking_level_map: z$1.ZodOptional<z$1.ZodObject<{
+        off: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodLiteral<"none">>>;
+        minimal: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -502,7 +777,7 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-        low: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        low: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -511,7 +786,7 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-        medium: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        medium: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -520,7 +795,7 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-        high: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        high: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -529,7 +804,7 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-        xhigh: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        xhigh: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -538,7 +813,7 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-        max: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        max: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
             minimal: "minimal";
             low: "low";
             medium: "medium";
@@ -547,15 +822,15 @@ declare const ProviderConfigSchema: z.ZodObject<{
             max: "max";
             none: "none";
         }>>>;
-    }, z.core.$strict>>;
-    thinking_mode: z.ZodOptional<z.ZodEnum<{
+    }, z$1.core.$strict>>;
+    thinking_mode: z$1.ZodOptional<z$1.ZodEnum<{
         budget: "budget";
         adaptive: "adaptive";
     }>>;
-    context_window: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-    max_output_tokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-}, z.core.$loose>;
-type ProviderConfig = z.infer<typeof ProviderConfigSchema>;
+    context_window: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+    max_output_tokens: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+}, z$1.core.$loose>;
+type ProviderConfig = z$1.infer<typeof ProviderConfigSchema>;
 declare const DEFAULT_THINKING_LEVEL: ThinkingLevel;
 declare const DEFAULT_CONTEXT_WINDOW = 1000000;
 /**
@@ -577,9 +852,9 @@ declare function getThinkingLevel(provider: ProviderConfig): ThinkingLevel;
 /** Thinking token budget for a level; 0 when thinking is off. */
 declare function thinkingBudgetForLevel(level: ThinkingLevel): number;
 /** Map a logical level using configured capabilities, not model-name guesses. */
-declare function toReasoningEffort(level: ThinkingLevel, provider?: ProviderConfig): z.infer<typeof ReasoningEffortSchema> | null;
+declare function toReasoningEffort(level: ThinkingLevel, provider?: ProviderConfig): z$1.infer<typeof ReasoningEffortSchema> | null;
 /** Narrow adaptive efforts to the Anthropic SDK's legal values. */
-declare function toAnthropicThinkingEffort(level: ThinkingLevel, provider: ProviderConfig): z.infer<typeof AnthropicEffortSchema> | null;
+declare function toAnthropicThinkingEffort(level: ThinkingLevel, provider: ProviderConfig): z$1.infer<typeof AnthropicEffortSchema> | null;
 /** Available logical levels; missing metadata preserves the existing defaults. */
 declare function getSupportedThinkingLevels(provider: ProviderConfig): readonly ThinkingLevel[];
 /** Lower unsupported requests to the nearest available level, never higher. */
@@ -594,51 +869,51 @@ declare function getContextWindow(provider: ProviderConfig): number;
  */
 declare function getMaxOutputTokens(provider: ProviderConfig): number;
 declare function resolveAPIKey(p: ProviderConfig): string;
-declare const MCPServerConfigSchema: z.ZodObject<{
-    name: z.ZodString;
-    command: z.ZodOptional<z.ZodString>;
-    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    url: z.ZodOptional<z.ZodString>;
-    transport: z.ZodOptional<z.ZodString>;
-    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip>;
-type MCPServerConfig = z.infer<typeof MCPServerConfigSchema>;
-declare const HookConfigSchema: z.ZodObject<{
-    id: z.ZodOptional<z.ZodString>;
-    event: z.ZodString;
-    condition: z.ZodOptional<z.ZodString>;
-    action: z.ZodObject<{
-        type: z.ZodString;
-        command: z.ZodOptional<z.ZodString>;
-        url: z.ZodOptional<z.ZodString>;
-        method: z.ZodOptional<z.ZodString>;
-        prompt: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    reject: z.ZodOptional<z.ZodBoolean>;
-    once: z.ZodOptional<z.ZodBoolean>;
-    async: z.ZodOptional<z.ZodBoolean>;
-    on_error: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type HookConfig = z.infer<typeof HookConfigSchema>;
-declare const SandboxYamlConfigSchema: z.ZodObject<{
-    enabled: z.ZodOptional<z.ZodBoolean>;
-    auto_allow: z.ZodOptional<z.ZodBoolean>;
-    network_enabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-type SandboxYamlConfig = z.infer<typeof SandboxYamlConfigSchema>;
-declare const AppConfigSchema: z.ZodObject<{
-    providers: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        protocol: z.ZodEnum<{
+declare const MCPServerConfigSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    command: z$1.ZodOptional<z$1.ZodString>;
+    args: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+    url: z$1.ZodOptional<z$1.ZodString>;
+    transport: z$1.ZodOptional<z$1.ZodString>;
+    headers: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    env: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+}, z$1.core.$strip>;
+type MCPServerConfig = z$1.infer<typeof MCPServerConfigSchema>;
+declare const HookConfigSchema: z$1.ZodObject<{
+    id: z$1.ZodOptional<z$1.ZodString>;
+    event: z$1.ZodString;
+    condition: z$1.ZodOptional<z$1.ZodString>;
+    action: z$1.ZodObject<{
+        type: z$1.ZodString;
+        command: z$1.ZodOptional<z$1.ZodString>;
+        url: z$1.ZodOptional<z$1.ZodString>;
+        method: z$1.ZodOptional<z$1.ZodString>;
+        prompt: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>;
+    reject: z$1.ZodOptional<z$1.ZodBoolean>;
+    once: z$1.ZodOptional<z$1.ZodBoolean>;
+    async: z$1.ZodOptional<z$1.ZodBoolean>;
+    on_error: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type HookConfig = z$1.infer<typeof HookConfigSchema>;
+declare const SandboxYamlConfigSchema: z$1.ZodObject<{
+    enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+    auto_allow: z$1.ZodOptional<z$1.ZodBoolean>;
+    network_enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+type SandboxYamlConfig = z$1.infer<typeof SandboxYamlConfigSchema>;
+declare const AppConfigSchema: z$1.ZodObject<{
+    providers: z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        protocol: z$1.ZodEnum<{
             anthropic: "anthropic";
             openai: "openai";
             "openai-compat": "openai-compat";
         }>;
-        base_url: z.ZodString;
-        model: z.ZodString;
-        api_key: z.ZodOptional<z.ZodString>;
-        thinking: z.ZodOptional<z.ZodEnum<{
+        base_url: z$1.ZodString;
+        model: z$1.ZodString;
+        api_key: z$1.ZodOptional<z$1.ZodString>;
+        thinking: z$1.ZodOptional<z$1.ZodEnum<{
             off: "off";
             minimal: "minimal";
             low: "low";
@@ -647,10 +922,10 @@ declare const AppConfigSchema: z.ZodObject<{
             xhigh: "xhigh";
             max: "max";
         }>>;
-        reasoning: z.ZodOptional<z.ZodBoolean>;
-        thinking_level_map: z.ZodOptional<z.ZodObject<{
-            off: z.ZodOptional<z.ZodNullable<z.ZodLiteral<"none">>>;
-            minimal: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        reasoning: z$1.ZodOptional<z$1.ZodBoolean>;
+        thinking_level_map: z$1.ZodOptional<z$1.ZodObject<{
+            off: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodLiteral<"none">>>;
+            minimal: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -659,7 +934,7 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-            low: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            low: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -668,7 +943,7 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-            medium: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            medium: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -677,7 +952,7 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-            high: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            high: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -686,7 +961,7 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-            xhigh: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            xhigh: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -695,7 +970,7 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-            max: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            max: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodEnum<{
                 minimal: "minimal";
                 low: "low";
                 medium: "medium";
@@ -704,51 +979,51 @@ declare const AppConfigSchema: z.ZodObject<{
                 max: "max";
                 none: "none";
             }>>>;
-        }, z.core.$strict>>;
-        thinking_mode: z.ZodOptional<z.ZodEnum<{
+        }, z$1.core.$strict>>;
+        thinking_mode: z$1.ZodOptional<z$1.ZodEnum<{
             budget: "budget";
             adaptive: "adaptive";
         }>>;
-        context_window: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-        max_output_tokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-    }, z.core.$loose>>;
-    permission_mode: z.ZodOptional<z.ZodString>;
-    mcp_servers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        command: z.ZodOptional<z.ZodString>;
-        args: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        url: z.ZodOptional<z.ZodString>;
-        transport: z.ZodOptional<z.ZodString>;
-        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, z.core.$strip>>>;
-    hooks: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodOptional<z.ZodString>;
-        event: z.ZodString;
-        condition: z.ZodOptional<z.ZodString>;
-        action: z.ZodObject<{
-            type: z.ZodString;
-            command: z.ZodOptional<z.ZodString>;
-            url: z.ZodOptional<z.ZodString>;
-            method: z.ZodOptional<z.ZodString>;
-            prompt: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
-        reject: z.ZodOptional<z.ZodBoolean>;
-        once: z.ZodOptional<z.ZodBoolean>;
-        async: z.ZodOptional<z.ZodBoolean>;
-        on_error: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-    sandbox: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodOptional<z.ZodBoolean>;
-        auto_allow: z.ZodOptional<z.ZodBoolean>;
-        network_enabled: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
-    enable_coordinator_mode: z.ZodOptional<z.ZodBoolean>;
-    enable_fork: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>;
+        context_window: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+        max_output_tokens: z$1.ZodOptional<z$1.ZodCoercedNumber<unknown>>;
+    }, z$1.core.$loose>>;
+    permission_mode: z$1.ZodOptional<z$1.ZodString>;
+    mcp_servers: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        command: z$1.ZodOptional<z$1.ZodString>;
+        args: z$1.ZodOptional<z$1.ZodArray<z$1.ZodString>>;
+        url: z$1.ZodOptional<z$1.ZodString>;
+        transport: z$1.ZodOptional<z$1.ZodString>;
+        headers: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+        env: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    }, z$1.core.$strip>>>;
+    hooks: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodOptional<z$1.ZodString>;
+        event: z$1.ZodString;
+        condition: z$1.ZodOptional<z$1.ZodString>;
+        action: z$1.ZodObject<{
+            type: z$1.ZodString;
+            command: z$1.ZodOptional<z$1.ZodString>;
+            url: z$1.ZodOptional<z$1.ZodString>;
+            method: z$1.ZodOptional<z$1.ZodString>;
+            prompt: z$1.ZodOptional<z$1.ZodString>;
+        }, z$1.core.$strip>;
+        reject: z$1.ZodOptional<z$1.ZodBoolean>;
+        once: z$1.ZodOptional<z$1.ZodBoolean>;
+        async: z$1.ZodOptional<z$1.ZodBoolean>;
+        on_error: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>>;
+    sandbox: z$1.ZodOptional<z$1.ZodObject<{
+        enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+        auto_allow: z$1.ZodOptional<z$1.ZodBoolean>;
+        network_enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    enable_coordinator_mode: z$1.ZodOptional<z$1.ZodBoolean>;
+    enable_fork: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$loose>;
 /** Whether fork is available. Defaults to enabled when not specified in config. */
 declare function forkEnabled(cfg: AppConfig): boolean;
-type AppConfig = z.infer<typeof AppConfigSchema>;
+type AppConfig = z$1.infer<typeof AppConfigSchema>;
 declare function loadConfig(path?: string, options?: {
     allowEmptyProviders?: boolean;
 }): AppConfig;
@@ -809,62 +1084,6 @@ declare class HookEngine {
 }
 declare function validate(hooks: HookConfig[]): Error | null;
 
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-interface UsageInfo {
-    inputTokens: number;
-    outputTokens: number;
-    cacheReadInputTokens: number;
-    cacheCreationInputTokens: number;
-}
-/** Tool use delta: Input partial JSON */
-type StreamEvent = {
-    type: "text_delta";
-    text: string;
-} | {
-    type: "thinking_delta";
-    text: string;
-} | {
-    type: "thinking_complete";
-    thinking: string;
-    signature: string;
-} | {
-    type: "tool_call_start";
-    toolName: string;
-    toolId: string;
-} | {
-    type: "tool_call_delta";
-    text: string;
-} | {
-    type: "tool_call_complete";
-    toolId: string;
-    toolName: string;
-    arguments: Record<string, unknown>;
-} | {
-    type: "stream_end";
-    stopReason: string;
-    usage: UsageInfo;
-};
-
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -888,6 +1107,7 @@ type StreamEvent = {
  */
 
 declare class OpenAIClient implements LLMClient {
+    readonly protocol: "openai";
     private client;
     private model;
     private systemPrompt;
@@ -895,16 +1115,17 @@ declare class OpenAIClient implements LLMClient {
     private thinkingLevel;
     private config;
     constructor(config: ProviderConfig, systemPrompt: string);
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
     setSystemPrompt(prompt: string): void;
     setMaxOutputTokens(maxTokens: number): void;
     setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
     getSupportedThinkingLevels(): readonly ThinkingLevel[];
 }
-type OpenAIMessageParam = OpenAI.Responses.EasyInputMessage | OpenAI.Responses.ResponseFunctionToolCall | OpenAI.Responses.ResponseInputItem.FunctionCallOutput | OpenAI.Responses.ResponseReasoningItem;
+type OpenAIMessageParam = OpenAI.Responses.EasyInputMessage | OpenAI.Responses.ResponseComputerToolCall | OpenAI.Responses.ResponseInputItem.ComputerCallOutput | OpenAI.Responses.ResponseFunctionToolCall | OpenAI.Responses.ResponseInputItem.FunctionCallOutput | OpenAI.Responses.ResponseReasoningItem;
 declare function buildOpenAIInput(messages: Message[]): OpenAIMessageParam[];
 declare class OpenAICompatClient implements LLMClient {
+    readonly protocol: "openai-compat";
     private client;
     private model;
     private systemPrompt;
@@ -917,7 +1138,7 @@ declare class OpenAICompatClient implements LLMClient {
     setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
     getSupportedThinkingLevels(): readonly ThinkingLevel[];
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
 }
 declare function buildChatCompletionMessages(messages: Message[]): OpenAI.ChatCompletionMessageParam[];
 
@@ -953,7 +1174,10 @@ declare function buildChatCompletionMessages(messages: Message[]): OpenAI.ChatCo
  * built-in tools, so the array tail is often a deferred tool — we must scan
  * backwards. Built-in tools are never deferred, so a valid slot always exists.
  */
-declare function markToolsForCache(tools: Pick<Anthropic.Tool, "defer_loading" | "cache_control">[]): void;
+declare function markToolsForCache(tools: {
+    defer_loading?: boolean;
+    cache_control?: Anthropic.CacheControlEphemeral | null;
+}[]): void;
 /**
  * Whether any tool in this batch has defer_loading set.
  *
@@ -961,10 +1185,11 @@ declare function markToolsForCache(tools: Pick<Anthropic.Tool, "defer_loading" |
  * recognize it reject the request outright, and the dispatch / eager paths do not
  * use it at all.
  */
-declare function needsToolSearchBeta(toolSchemas: ToolSchema[]): boolean;
+declare function needsToolSearchBeta(toolSchemas: ProviderToolSchema[]): boolean;
 declare function fetchModelContextWindow(config: ProviderConfig): Promise<number>;
 declare function buildAnthropicMessages(messages: Message[]): Anthropic.MessageParam[];
 declare class AnthropicClient implements LLMClient {
+    readonly protocol: "anthropic";
     private client;
     private model;
     /** Effective logical level for budget or explicitly configured adaptive mode. */
@@ -978,7 +1203,7 @@ declare class AnthropicClient implements LLMClient {
     setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
     getSupportedThinkingLevels(): readonly ThinkingLevel[];
-    stream(conversation: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    stream(conversation: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
 }
 /**
  * @param messages
@@ -986,7 +1211,8 @@ declare class AnthropicClient implements LLMClient {
 declare function markLastUserTailForCache(messages: Anthropic.Messages.MessageParam[]): void;
 
 interface LLMClient extends Partial<MaxTokensSetter>, Partial<ThinkingLevelControl> {
-    stream(conversationManager: ConversationManager, toolSchemas: ToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
+    readonly protocol?: ToolProtocol;
+    stream(conversationManager: ConversationManager, toolSchemas: ProviderToolSchema[], abortSignal?: AbortSignal): AsyncGenerator<StreamEvent>;
     setSystemPrompt(prompt: string): void;
 }
 interface MaxTokensSetter {
@@ -994,8 +1220,8 @@ interface MaxTokensSetter {
 }
 /** Runtime control of the effective logical thinking level. */
 interface ThinkingLevelControl {
-    /** Built-in clients return the effective level; legacy controls may return void. */
-    setThinkingLevel(level: ThinkingLevel): ThinkingLevel | void;
+    /** Applies the level and returns the effective one, which may be clamped by the provider. */
+    setThinkingLevel(level: ThinkingLevel): ThinkingLevel;
     getThinkingLevel(): ThinkingLevel;
     getSupportedThinkingLevels?(): readonly ThinkingLevel[];
 }
@@ -1135,9 +1361,11 @@ declare class ToolRegistry {
     register(tool: Tool): void;
     get(name: string): Tool | undefined;
     listTools(): Tool[];
-    getAllSchemas(protocol?: "anthropic"): ToolSchema[];
-    getAllSchemas(protocol: "openai"): FunctionTool[];
-    getAllSchemas(protocol: "openai-compat"): ChatCompletionFunctionTool[];
+    getAllSchemas(): ToolSchema[];
+    getAllSchemas(protocol: "anthropic", filter?: (name: string) => boolean): AnthropicToolSchema[];
+    getAllSchemas(protocol: "openai", filter?: (name: string) => boolean): OpenAIResponsesToolSchema[];
+    getAllSchemas(protocol: "openai-compat", filter?: (name: string) => boolean): OpenAICompatToolSchema[];
+    getAllSchemas(protocol: ToolProtocol, filter?: (name: string) => boolean): ProviderToolSchema[];
     /**
      * Names of deferred tools not yet discovered, in lexicographic order.
      *
@@ -1153,206 +1381,6 @@ declare class ToolRegistry {
     isDiscovered(name: string): boolean;
 }
 
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-declare const COMPACT_BOUNDARY = "compact_boundary";
-/** Persisted form of a tool invocation. Stores a provider-agnostic internal representation rather than
- *  any vendor-specific wire format, so sessions can be restored even after switching providers. */
-declare const ToolUseRecordSchema: z$1.ZodObject<{
-    tool_use_id: z$1.ZodString;
-    tool_name: z$1.ZodString;
-    arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-}, z$1.core.$strip>;
-type ToolUseRecord = z$1.infer<typeof ToolUseRecordSchema>;
-/** Persisted form of a tool result, paired with a ToolUseRecord via tool_use_id. */
-declare const ToolResultRecordSchema: z$1.ZodObject<{
-    tool_use_id: z$1.ZodString;
-    content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-    content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-    is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type ToolResultRecord = z$1.infer<typeof ToolResultRecordSchema>;
-declare const SessionMessageSchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodDefault<z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>>;
-    timestamp: z$1.ZodNumber;
-    type: z$1.ZodOptional<z$1.ZodString>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type SessionMessage = z$1.infer<typeof SessionMessageSchema>;
-declare const KeptMessageSchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type KeptMessage = z$1.infer<typeof KeptMessageSchema>;
-/** Conversation-layer tool blocks (camelCase) → persisted records (snake_case); empty values are omitted. */
-declare function toolUsesToRecords(toolUses?: {
-    toolUseId: string;
-    toolName: string;
-    arguments?: Record<string, unknown>;
-}[]): ToolUseRecord[];
-declare function toolResultsToRecords(toolResults?: ToolResultBlock[]): ToolResultRecord[];
-declare const CompactBoundaryPayloadSchema: z$1.ZodObject<{
-    summary: z$1.ZodString;
-    keep: z$1.ZodArray<z$1.ZodObject<{
-        role: z$1.ZodString;
-        content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-        tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-            tool_use_id: z$1.ZodString;
-            tool_name: z$1.ZodString;
-            arguments: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
-        }, z$1.core.$strip>>>;
-        tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-            tool_use_id: z$1.ZodString;
-            content: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodArray<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>]>;
-            content_blocks: z$1.ZodOptional<z$1.ZodArray<z$1.ZodUnknown>>;
-            is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-        }, z$1.core.$strip>>>;
-    }, z$1.core.$strip>>;
-}, z$1.core.$strip>;
-type CompactBoundaryPayload = z$1.infer<typeof CompactBoundaryPayloadSchema>;
-interface SessionInfo {
-    id: string;
-    firstMessage: string;
-    messageCount: number;
-    size: number;
-    modTime: Date;
-}
-declare function getSessionFilePath(workDir: string, sessionId: string): string;
-declare function newSessionId(): string;
-declare function saveMessage(workDir: string, sessionId: string, msg: SessionMessage): void;
-declare function saveCompactBoundary(workDir: string, sessionId: string, payload: CompactBoundaryPayload): void;
-declare function loadSession(workDir: string, sessionId: string): SessionMessage[];
-interface RestoredMessage {
-    role: "user" | "assistant";
-    content: string | Record<string, unknown>[];
-    toolUses?: {
-        toolUseId: string;
-        toolName: string;
-        arguments?: Record<string, unknown>;
-    }[];
-    toolResults?: ToolResultBlock[];
-}
-declare function rebuildFromSession(saved: SessionMessage[]): RestoredMessage[];
-declare function listSessions(workDir: string): SessionInfo[];
-/**
- * Cleans up expired sessions: deletes .jsonl files whose last modified time exceeds SESSION_EXPIRY_DAYS.
- * Called during listSessions or on startup to prevent the session directory from growing indefinitely.
- * Silently skips failures (best-effort).
- */
-declare function cleanExpiredSessions(workDir: string): number;
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-type AgentEvent = {
-    type: "stream_text";
-    text: string;
-} | {
-    type: "thinking_text";
-    text: string;
-} | {
-    type: "thinking_complete";
-    thinking: string;
-    signature: string;
-} | {
-    type: "tool_use";
-    toolName: string;
-    toolId: string;
-    args: Record<string, unknown>;
-} | {
-    type: "tool_result";
-    toolName: string;
-    toolId: string;
-    output: string;
-    contentBlocks?: ToolResultContentBlock[];
-    isError: boolean;
-    elapsed: number;
-} | {
-    type: "turn_complete";
-} | {
-    type: "loop_complete";
-    stopReason: string;
-} | {
-    type: "usage";
-    usage: UsageInfo;
-} | {
-    type: "error";
-    error: Error;
-} | {
-    type: "compact";
-    message: string;
-    boundary?: CompactBoundaryPayload | undefined;
-} | {
-    type: "retry";
-    reason: string;
-    delay: number;
-} | {
-    type: "permission_request";
-    toolName: string;
-    args: Record<string, unknown>;
-};
-
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -1457,49 +1485,11 @@ declare class Agent {
      * Persist the most recently appended conversation message to the session log.
      *
      * Persistence lives in the main loop rather than in individual frontends: both
-     * the TUI and Web share the same recording path, ensuring intermediate assistant
-     * text and complete tool-call chains are captured for session restoration.
-     * Skipped when sessionId is empty (one-shot invocations, sub-agents).
-     */
-    private persistLastMessage;
-}
-
-/**
- * Copyright (c) 2026 hangtiancheng
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-interface ExecutionResult {
-    toolId: string;
-    toolName: string;
-    result: ToolResult;
-    elapsed: number;
-}
-declare class StreamingExecutor {
-    private pending;
-    private registry;
-    private ctx;
-    constructor(registry: ToolRegistry, ctx: ToolContext);
-    submit(toolId: string, toolName: string, args: Record<string, unknown>): void;
-    collectResults(): Promise<ExecutionResult[]>;
-    hasPending(): boolean;
+     * the TUI and Web share the same recording path, ensuring intermediate assistant
+     * text and complete tool-call chains are captured for session restoration.
+     * Skipped when sessionId is empty (one-shot invocations, sub-agents).
+     */
+    private persistLastMessage;
 }
 
 /**
@@ -1524,67 +1514,21 @@ declare class StreamingExecutor {
  * SOFTWARE.
  */
 
-type CommandType = "local" | "local_ui" | "prompt" | "skill_fork";
-interface CommandContext {
-    workDir: string;
-    args: string;
-    conversation?: unknown;
-    registry?: unknown;
-    /** Returns the current permission mode */
-    permissionMode?: () => string;
-    /** Returns token usage [input, output] */
-    tokenCount?: () => [number, number];
-    /** Returns the number of currently enabled tools */
-    toolCount?: () => number;
-    /** Returns the list of memories */
-    memoryList?: () => string[];
-    /** Clears all memories */
-    memoryClear?: () => void;
-    /** Returns the current model name */
-    model?: string;
-    /** Returns the current effective thinking level */
-    thinkingLevel?: () => ThinkingLevel;
-    /** Returns the active client's available logical thinking levels */
-    availableThinkingLevels?: () => readonly ThinkingLevel[];
-    /** Sets the thinking level for the active client */
-    setThinkingLevel?: (level: ThinkingLevel) => void;
-    /** Persists the thinking level to the global config; throws on failure */
-    persistThinkingLevel?: (level: ThinkingLevel) => void;
-}
-interface Command {
-    name: string;
-    aliases: string[];
-    type: CommandType;
-    description: string;
-    handler: (ctx: CommandContext) => string;
-}
-declare class CommandRegistry {
-    private commands;
-    /** Alias to command name */
-    private aliasMap;
-    /**
-     * Registers a command, checking for name and alias conflicts.
-     * The name must not conflict with existing command names or aliases;
-     * aliases must not conflict with existing command names or other aliases.
-     */
-    register(cmd: Command): void;
-    /**
-     * Checks if a command would conflict with already registered commands.
-     * Dynamic loaders (e.g., for user-defined commands) should call this method
-     * before `register` to filter out conflicting entries, as `register` throws
-     * an exception on conflict.
-     */
-    hasConflict(cmd: Command): boolean;
-    find(name: string): Command | undefined;
-    complete(prefix: string): Command[];
-    listCommands(): Command[];
+interface ExecutionResult {
+    toolId: string;
+    toolName: string;
+    result: ToolResult;
+    elapsed: number;
 }
-interface Parsed {
-    name: string;
-    args: string;
+declare class StreamingExecutor {
+    private pending;
+    private registry;
+    private ctx;
+    constructor(registry: ToolRegistry, ctx: ToolContext);
+    submit(toolId: string, toolName: string, args: Record<string, unknown>): void;
+    collectResults(): Promise<ExecutionResult[]>;
+    hasPending(): boolean;
 }
-declare function parse(input: string): Parsed | null;
-declare function createDefaultRegistry(): CommandRegistry;
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -1608,16 +1552,16 @@ declare function createDefaultRegistry(): CommandRegistry;
  * SOFTWARE.
  */
 
-declare const FileMailMessageSchema: z$1.ZodObject<{
-    from: z$1.ZodString;
-    text: z$1.ZodString;
-    timestamp: z$1.ZodString;
-    read: z$1.ZodOptional<z$1.ZodBoolean>;
-    type: z$1.ZodOptional<z$1.ZodString>;
-    requestId: z$1.ZodOptional<z$1.ZodString>;
-    approve: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type FileMailMessage = z$1.infer<typeof FileMailMessageSchema>;
+declare const FileMailMessageSchema: z.ZodObject<{
+    from: z.ZodString;
+    text: z.ZodString;
+    timestamp: z.ZodString;
+    read: z.ZodOptional<z.ZodBoolean>;
+    type: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+    approve: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type FileMailMessage = z.infer<typeof FileMailMessageSchema>;
 declare class FileMailbox {
     private filePath;
     constructor(dir: string, memberName: string);
@@ -1657,56 +1601,56 @@ declare class FileMailbox {
  * SOFTWARE.
  */
 
-declare const ToolActivitySchema: z.ZodObject<{
-    toolName: z.ZodString;
-    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    activityDescription: z.ZodString;
-}, z.core.$strip>;
-type ToolActivity = z.infer<typeof ToolActivitySchema>;
-declare const AgentProgressSchema: z.ZodObject<{
-    toolUseCount: z.ZodNumber;
-    tokenCount: z.ZodNumber;
-    lastActivity: z.ZodOptional<z.ZodObject<{
-        toolName: z.ZodString;
-        input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        activityDescription: z.ZodString;
-    }, z.core.$strip>>;
-    recentActivities: z.ZodArray<z.ZodObject<{
-        toolName: z.ZodString;
-        input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        activityDescription: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-type AgentProgress = z.infer<typeof AgentProgressSchema>;
-declare const TeammateUIStateSchema: z.ZodObject<{
-    name: z.ZodString;
-    teamName: z.ZodString;
-    status: z.ZodEnum<{
+declare const ToolActivitySchema: z$1.ZodObject<{
+    toolName: z$1.ZodString;
+    input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+    activityDescription: z$1.ZodString;
+}, z$1.core.$strip>;
+type ToolActivity = z$1.infer<typeof ToolActivitySchema>;
+declare const AgentProgressSchema: z$1.ZodObject<{
+    toolUseCount: z$1.ZodNumber;
+    tokenCount: z$1.ZodNumber;
+    lastActivity: z$1.ZodOptional<z$1.ZodObject<{
+        toolName: z$1.ZodString;
+        input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+        activityDescription: z$1.ZodString;
+    }, z$1.core.$strip>>;
+    recentActivities: z$1.ZodArray<z$1.ZodObject<{
+        toolName: z$1.ZodString;
+        input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+        activityDescription: z$1.ZodString;
+    }, z$1.core.$strip>>;
+}, z$1.core.$strip>;
+type AgentProgress = z$1.infer<typeof AgentProgressSchema>;
+declare const TeammateUIStateSchema: z$1.ZodObject<{
+    name: z$1.ZodString;
+    teamName: z$1.ZodString;
+    status: z$1.ZodEnum<{
         completed: "completed";
         failed: "failed";
         running: "running";
         idle: "idle";
         stopped: "stopped";
     }>;
-    progress: z.ZodObject<{
-        toolUseCount: z.ZodNumber;
-        tokenCount: z.ZodNumber;
-        lastActivity: z.ZodOptional<z.ZodObject<{
-            toolName: z.ZodString;
-            input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            activityDescription: z.ZodString;
-        }, z.core.$strip>>;
-        recentActivities: z.ZodArray<z.ZodObject<{
-            toolName: z.ZodString;
-            input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            activityDescription: z.ZodString;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
-    startTime: z.ZodNumber;
-    spinnerVerb: z.ZodString;
-    lastMessage: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type TeammateUIState = z.infer<typeof TeammateUIStateSchema>;
+    progress: z$1.ZodObject<{
+        toolUseCount: z$1.ZodNumber;
+        tokenCount: z$1.ZodNumber;
+        lastActivity: z$1.ZodOptional<z$1.ZodObject<{
+            toolName: z$1.ZodString;
+            input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+            activityDescription: z$1.ZodString;
+        }, z$1.core.$strip>>;
+        recentActivities: z$1.ZodArray<z$1.ZodObject<{
+            toolName: z$1.ZodString;
+            input: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
+            activityDescription: z$1.ZodString;
+        }, z$1.core.$strip>>;
+    }, z$1.core.$strip>;
+    startTime: z$1.ZodNumber;
+    spinnerVerb: z$1.ZodString;
+    lastMessage: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type TeammateUIState = z$1.infer<typeof TeammateUIStateSchema>;
 declare function createProgress(): AgentProgress;
 declare function recordToolUse(p: AgentProgress, toolName: string, input: Record<string, unknown>): void;
 declare function recordTokens(p: AgentProgress, inputTokens: number, outputTokens: number): void;
@@ -1805,17 +1749,17 @@ declare class SharedTaskStore {
  * three-state semantics: absent means just registered and not yet started,
  * true means actively running, false means idle.
  */
-declare const TeamMemberEntrySchema: z$1.ZodObject<{
-    agentId: z$1.ZodString;
-    name: z$1.ZodString;
-    agentType: z$1.ZodOptional<z$1.ZodString>;
-    model: z$1.ZodOptional<z$1.ZodString>;
-    joinedAt: z$1.ZodNumber;
-    worktreePath: z$1.ZodOptional<z$1.ZodString>;
-    backendType: z$1.ZodOptional<z$1.ZodString>;
-    isActive: z$1.ZodOptional<z$1.ZodBoolean>;
-}, z$1.core.$strip>;
-type TeamMemberEntry = z$1.infer<typeof TeamMemberEntrySchema>;
+declare const TeamMemberEntrySchema: z.ZodObject<{
+    agentId: z.ZodString;
+    name: z.ZodString;
+    agentType: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    joinedAt: z.ZodNumber;
+    worktreePath: z.ZodOptional<z.ZodString>;
+    backendType: z.ZodOptional<z.ZodString>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type TeamMemberEntry = z.infer<typeof TeamMemberEntrySchema>;
 /**
  * On-disk representation of team configuration, stored at <teamsBaseDir>/<slug>/config.json.
  *
@@ -1827,23 +1771,23 @@ type TeamMemberEntry = z$1.infer<typeof TeamMemberEntrySchema>;
  * independent processes that need to know which team they belong to and who their
  * peers are after startup; users restarting Swifty must be able to resume prior teams.
  */
-declare const TeamFileSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    description: z$1.ZodOptional<z$1.ZodString>;
-    createdAt: z$1.ZodNumber;
-    leadAgentId: z$1.ZodString;
-    members: z$1.ZodArray<z$1.ZodObject<{
-        agentId: z$1.ZodString;
-        name: z$1.ZodString;
-        agentType: z$1.ZodOptional<z$1.ZodString>;
-        model: z$1.ZodOptional<z$1.ZodString>;
-        joinedAt: z$1.ZodNumber;
-        worktreePath: z$1.ZodOptional<z$1.ZodString>;
-        backendType: z$1.ZodOptional<z$1.ZodString>;
-        isActive: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>;
-}, z$1.core.$strip>;
-type TeamFile = z$1.infer<typeof TeamFileSchema>;
+declare const TeamFileSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    leadAgentId: z.ZodString;
+    members: z.ZodArray<z.ZodObject<{
+        agentId: z.ZodString;
+        name: z.ZodString;
+        agentType: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        joinedAt: z.ZodNumber;
+        worktreePath: z.ZodOptional<z.ZodString>;
+        backendType: z.ZodOptional<z.ZodString>;
+        isActive: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type TeamFile = z.infer<typeof TeamFileSchema>;
 /**
  * Root directory for all team data. Placed under the user's home directory rather than
  * the project directory because pane teammates are independent processes whose working
@@ -2066,37 +2010,37 @@ declare class TeamManager {
  * SOFTWARE.
  */
 
-declare const CodeReviewMemberSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    email: z$1.ZodString;
-    role: z$1.ZodEnum<{
+declare const CodeReviewMemberSchema: z.ZodObject<{
+    name: z.ZodString;
+    email: z.ZodString;
+    role: z.ZodEnum<{
         lead: "lead";
         reviewer: "reviewer";
         junior: "junior";
         critic: "critic";
     }>;
-    expertise: z$1.ZodArray<z$1.ZodString>;
-    active: z$1.ZodBoolean;
-}, z$1.core.$strip>;
-type CodeReviewMember = z$1.infer<typeof CodeReviewMemberSchema>;
-declare const CodeReviewTeamSchema: z$1.ZodObject<{
-    name: z$1.ZodString;
-    members: z$1.ZodArray<z$1.ZodObject<{
-        name: z$1.ZodString;
-        email: z$1.ZodString;
-        role: z$1.ZodEnum<{
+    expertise: z.ZodArray<z.ZodString>;
+    active: z.ZodBoolean;
+}, z.core.$strip>;
+type CodeReviewMember = z.infer<typeof CodeReviewMemberSchema>;
+declare const CodeReviewTeamSchema: z.ZodObject<{
+    name: z.ZodString;
+    members: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+        role: z.ZodEnum<{
             lead: "lead";
             reviewer: "reviewer";
             junior: "junior";
             critic: "critic";
         }>;
-        expertise: z$1.ZodArray<z$1.ZodString>;
-        active: z$1.ZodBoolean;
-    }, z$1.core.$strip>>;
-    createdAt: z$1.ZodString;
-    lastActive: z$1.ZodString;
-}, z$1.core.$strip>;
-type CodeReviewTeam = z$1.infer<typeof CodeReviewTeamSchema>;
+        expertise: z.ZodArray<z.ZodString>;
+        active: z.ZodBoolean;
+    }, z.core.$strip>>;
+    createdAt: z.ZodString;
+    lastActive: z.ZodString;
+}, z.core.$strip>;
+type CodeReviewTeam = z.infer<typeof CodeReviewTeamSchema>;
 declare class CodeReviewManager {
     private teams;
     private configPath;
@@ -2232,6 +2176,92 @@ declare class ReviewSession {
     getRequestSummary(id: string): string;
 }
 
+/**
+ * Copyright (c) 2026 hangtiancheng
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+
+type CommandType = "local" | "local_ui" | "prompt" | "skill_fork";
+interface CommandContext {
+    workDir: string;
+    args: string;
+    conversation?: unknown;
+    registry?: unknown;
+    /** Returns the current permission mode */
+    permissionMode?: () => string;
+    /** Returns token usage [input, output] */
+    tokenCount?: () => [number, number];
+    /** Returns the number of currently enabled tools */
+    toolCount?: () => number;
+    /** Returns the list of memories */
+    memoryList?: () => string[];
+    /** Clears all memories */
+    memoryClear?: () => void;
+    /** Returns the current model name */
+    model?: string;
+    /** Returns the current effective thinking level */
+    thinkingLevel?: () => ThinkingLevel;
+    /** Returns the active client's available logical thinking levels */
+    availableThinkingLevels?: () => readonly ThinkingLevel[];
+    /** Sets the thinking level for the active client */
+    setThinkingLevel?: (level: ThinkingLevel) => void;
+    /** Persists the thinking level to the global config; throws on failure */
+    persistThinkingLevel?: (level: ThinkingLevel) => void;
+}
+interface Command {
+    name: string;
+    aliases: string[];
+    type: CommandType;
+    description: string;
+    handler: (ctx: CommandContext) => string;
+    /** Skill-derived commands; excluded from the /help listing (see /skills). */
+    isSkill?: boolean;
+}
+declare class CommandRegistry {
+    private commands;
+    /** Alias to command name */
+    private aliasMap;
+    /**
+     * Registers a command, checking for name and alias conflicts.
+     * The name must not conflict with existing command names or aliases;
+     * aliases must not conflict with existing command names or other aliases.
+     */
+    register(cmd: Command): void;
+    /**
+     * Checks if a command would conflict with already registered commands.
+     * Dynamic loaders (e.g., for user-defined commands) should call this method
+     * before `register` to filter out conflicting entries, as `register` throws
+     * an exception on conflict.
+     */
+    hasConflict(cmd: Command): boolean;
+    find(name: string): Command | undefined;
+    complete(prefix: string): Command[];
+    listCommands(): Command[];
+}
+interface Parsed {
+    name: string;
+    args: string;
+}
+declare function parse(input: string): Parsed | null;
+declare function createDefaultRegistry(): CommandRegistry;
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -2352,8 +2382,8 @@ declare function estimateMessages(messages: Message[]): number;
 declare function estimateTokens(conv: ConversationManager): number;
 declare function computeKeepStartIndex(messages: Message[]): number;
 declare function currentContextTokens(conv: ConversationManager, anchor?: UsageAnchor): number;
-declare function manageContext(conv: ConversationManager, client: LLMClient, contextWindow: number, maxOutput: number, trackingState: AutoCompactTrackingState, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal): Promise<CompactResult>;
-declare function forceCompact(conv: ConversationManager, client: LLMClient, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal, customInstructions?: string): Promise<CompactResult>;
+declare function manageContext(conv: ConversationManager, client: LLMClient, contextWindow: number, maxOutput: number, trackingState: AutoCompactTrackingState, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ProviderToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal): Promise<CompactResult>;
+declare function forceCompact(conv: ConversationManager, client: LLMClient, recoveryState: RecoveryState | null, toolSchemaNames: string[], toolSchemas: ProviderToolSchema[], sessionFilePath?: string, abortSignal?: AbortSignal, customInstructions?: string): Promise<CompactResult>;
 
 /**
  * Copyright (c) 2026 hangtiancheng
@@ -2651,7 +2681,7 @@ declare function closeLogger(): void;
 /**
  * Global logger export. Modules can import and use it at file top level:
  * ```ts
- * import { logger } from "../logger/logger.js";
+ * import { logger } from "@/logger/logger.js";
  * logger.warn({ module: "app" }, "something looks off");
  * ```
  * Before initLogger(), calls fall back to the silent target (pre-init logs
@@ -2788,25 +2818,6 @@ declare class MCPManager {
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-/**
- * Decides how MCP tools enter the context. Three modes, chosen once at session start
- * right after MCP connects:
- *
- *   eager    Total schema size is under one tenth of the context window, so load
- *            everything into tools[] with no deferral. The context saved is not worth
- *            taking on any extra risk for.
- *   native   Official Anthropic endpoints. Tools stay in tools[] with defer_loading but
- *            the server hides them from the model; ToolSearch returns tool_reference and
- *            the server expands the schema.
- *   dispatch Other endpoints (domestic vendors, various proxy gateways) support neither
- *            of the above, so we simulate it ourselves: MCP tools never enter tools[] and
- *            everything goes through the single McpCall entry point.
- *
- * Why three modes: tools is rendered after system and before messages, so any change to
- * the array invalidates the prompt cache for the entire conversation history that follows.
- * Measured with a 20k-token history, appending one tool to the end of tools drops the
- * cache hit rate from 99.4% to 9.5%, effectively recomputing the whole history.
- */
 
 /** Below this share of the context window, skip deferral and load everything eagerly. */
 declare const DEFAULT_EAGER_THRESHOLD_PERCENT = 10;
@@ -3361,21 +3372,21 @@ declare function buildSkillSection(catalog: SkillCatalog, workDir: string): stri
  * SOFTWARE.
  */
 
-declare const QuestionOptionSchema: z.ZodObject<{
-    label: z.ZodString;
-    description: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-type QuestionOption = z.infer<typeof QuestionOptionSchema>;
-declare const QuestionSchema: z.ZodObject<{
-    question: z.ZodString;
-    header: z.ZodString;
-    options: z.ZodArray<z.ZodObject<{
-        label: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    multiSelect: z.ZodBoolean;
-}, z.core.$strip>;
-type Question = z.infer<typeof QuestionSchema>;
+declare const QuestionOptionSchema: z$1.ZodObject<{
+    label: z$1.ZodString;
+    description: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type QuestionOption = z$1.infer<typeof QuestionOptionSchema>;
+declare const QuestionSchema: z$1.ZodObject<{
+    question: z$1.ZodString;
+    header: z$1.ZodString;
+    options: z$1.ZodArray<z$1.ZodObject<{
+        label: z$1.ZodString;
+        description: z$1.ZodOptional<z$1.ZodString>;
+    }, z$1.core.$strip>>;
+    multiSelect: z$1.ZodBoolean;
+}, z$1.core.$strip>;
+type Question = z$1.infer<typeof QuestionSchema>;
 type Asker = (questions: Question[]) => Promise<Record<string /** question text */, string /** user chosen answer */>>;
 declare class AskUserQuestionTool implements Tool {
     private ask;
@@ -4176,7 +4187,8 @@ declare class TaskManager {
  * SOFTWARE.
  */
 
-type AllTools = "InstallSkill" | "LoadSkill" | "Agent" | "TaskStop" | "TaskCreate" | "TaskGet" | "TaskList" | "TaskUpdate" | "TeamCreate" | "SpawnTeammate" | "SendMessage" | "ListTeams" | "TeamDelete" | "SyntheticOutput" | "AskUserQuestion" | "Bash" | "PowerShell" | "EditFile" | "EnterWorktree" | "ExitPlanMode" | "ExitWorktree" | "ReadFile" | "ToolSearch" | "WriteFile" | "Glob" | "Grep" | "McpCall";
+type AllTools = "InstallSkill" | "LoadSkill" | "Agent" | "TaskStop" | "TaskCreate" | "TaskGet" | "TaskList" | "TaskUpdate" | "TeamCreate" | "SpawnTeammate" | "SendMessage" | "ListTeams" | "TeamDelete" | "SyntheticOutput" | "AskUserQuestion" | "Bash" | "PowerShell" | "ComputerUse" | "EditFile" | "EnterWorktree" | "ExitPlanMode" | "ExitWorktree" | "ReadFile" | "ToolSearch" | "WriteFile" | "Glob" | "Grep" | "McpCall";
+declare const MAIN_AGENT_ONLY_TOOLS: Set<AllTools>;
 declare const SUBAGENT_DISALLOWED_TOOLS: Set<AllTools>;
 declare const TEAMMATE_DISALLOWED_TOOLS: Set<AllTools>;
 declare const CUSTOM_AGENT_DISALLOWED_TOOLS: Set<AllTools>;
@@ -4537,21 +4549,21 @@ declare class TeamDeleteTool implements Tool {
  * SOFTWARE.
  */
 
-declare const TranscriptEntrySchema: z$1.ZodObject<{
-    role: z$1.ZodString;
-    content: z$1.ZodOptional<z$1.ZodString>;
-    tool_uses: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        tool_name: z$1.ZodString;
-        arguments: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
-    }, z$1.core.$strip>>>;
-    tool_results: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
-        tool_use_id: z$1.ZodString;
-        content: z$1.ZodString;
-        is_error: z$1.ZodOptional<z$1.ZodBoolean>;
-    }, z$1.core.$strip>>>;
-}, z$1.core.$strip>;
-type TranscriptEntry = z$1.infer<typeof TranscriptEntrySchema>;
+declare const TranscriptEntrySchema: z.ZodObject<{
+    role: z.ZodString;
+    content: z.ZodOptional<z.ZodString>;
+    tool_uses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        tool_name: z.ZodString;
+        arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>>;
+    tool_results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool_use_id: z.ZodString;
+        content: z.ZodString;
+        is_error: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type TranscriptEntry = z.infer<typeof TranscriptEntrySchema>;
 /**
  * Persists a teammate's conversation history to disk for debugging and troubleshooting.
  * File path: .swifty/teams/{team}/transcripts/{agentId}.json
@@ -4661,6 +4673,69 @@ declare class BashTool implements Tool {
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
 
+type ComputerUseEnvironment = "windows" | "mac" | "browser" | "linux" | "ubuntu";
+interface CommandResult {
+    code: number;
+    stdout: Buffer;
+    stderr: string;
+}
+interface CommandOptions {
+    env?: NodeJS.ProcessEnv;
+    maxOutputBytes?: number;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+type CommandRunner = (command: string, args: readonly string[], options?: CommandOptions) => Promise<CommandResult>;
+interface ComputerUseToolOptions {
+    displayHeightPx?: number;
+    displayNumber?: number;
+    displayWidthPx?: number;
+    enableZoom?: boolean;
+    environment?: ComputerUseEnvironment;
+    platform?: NodeJS.Platform;
+    runCommand?: CommandRunner;
+}
+declare class ComputerUseTool implements Tool {
+    name: string;
+    description: string;
+    category: ToolCategory;
+    deferred: boolean;
+    private readonly displayHeightPx;
+    private readonly displayNumber?;
+    private readonly displayWidthPx;
+    private readonly enableZoom;
+    private readonly environment;
+    private readonly platform;
+    private readonly run;
+    private coordinateScaleX;
+    private coordinateScaleY;
+    private macHelperPromise?;
+    constructor(options?: ComputerUseToolOptions);
+    isConcurrencySafe(_args: Record<string, unknown>): boolean;
+    providerSchema(protocol: ToolProtocol): ProviderNativeToolSchema | undefined;
+    schema(): ToolSchema;
+    execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
+    /** Execute one Anthropic-style action (also the per-item path for batches). */
+    private runSingle;
+    /**
+     * Execute an OpenAI-style ordered action batch. Per the OpenAI computer
+     * output contract, the result always carries the screenshot taken after the
+     * batch ran, and status / safety checks are echoed so the model can continue.
+     */
+    private executeBatch;
+    private toNativeCoordinates;
+    private executeNative;
+    private executeMac;
+    private runMacPayload;
+    private getMacHelper;
+    private compileMacHelper;
+    private executeWindows;
+    private executeLinux;
+    private screenshot;
+    private imageResult;
+    private captureScreenshot;
+}
+
 /**
  * Copyright (c) 2026 hangtiancheng
  *
@@ -4955,29 +5030,32 @@ declare function isDiffTool(toolName: string): boolean;
  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */
-declare const TOOL_SEARCH_TOOL_NAME = "ToolSearch";
-declare const MCP_CALL_TOOL_NAME = "McpCall";
-
 /**
- * Copyright (c) 2026 hangtiancheng
+ * Unified call entry point for MCP tools.
  *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
+ * MCP tools never enter tools[]. The model first reads the schema via ToolSearch,
+ * then passes the tool name and arguments through McpCall. This keeps the tools
+ * array byte-identical throughout the whole session, so the prompt cache prefix is
+ * never broken — tools render after system and before messages, so any change to
+ * the array forces the entire trailing history to be recomputed.
  *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
+ * The trade-off is that arguments are generated freely by the model with no schema
+ * constraint at the interface level, so the JSON type is occasionally wrong.
+ * coerceBySchema fixes values level by level against the target tool's full schema.
+ * The fix-up rules must be identical, item by item, across all four languages:
  *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
+ *   schema declares   model provides             coerced to
+ *   string            number (not boolean)       "8891"
+ *   integer / number  numeric-looking string     5 / 5.0
+ *   boolean           "true" / "false"           true / false
+ *   array             single-key obj, array val  unwrap the inner array
+ *   array             comma-separated string     split on commas, trim spaces
+ *   object            object                     recurse over properties
+ *   array             array                      recurse each element via items
+ *
+ * Values that can't be fixed are passed through as-is, letting the MCP server
+ * report its own error — a server-side domain error is more instructive to the
+ * model than a local type error.
  */
 
 declare function coerceBySchema(value: unknown, schema: unknown): unknown;
@@ -5440,28 +5518,28 @@ declare function buildWorktreeNotice(parentCwd: string, wtPath: string): string;
  * SOFTWARE.
  */
 
-declare const TaskStatusSchema: z$1.ZodEnum<{
+declare const TaskStatusSchema: z.ZodEnum<{
     completed: "completed";
     in_progress: "in_progress";
     pending: "pending";
 }>;
-type TaskStatus = z$1.infer<typeof TaskStatusSchema>;
-declare const TaskSchema: z$1.ZodObject<{
-    id: z$1.ZodString;
-    subject: z$1.ZodString;
-    description: z$1.ZodString;
-    status: z$1.ZodEnum<{
+type TaskStatus = z.infer<typeof TaskStatusSchema>;
+declare const TaskSchema: z.ZodObject<{
+    id: z.ZodString;
+    subject: z.ZodString;
+    description: z.ZodString;
+    status: z.ZodEnum<{
         completed: "completed";
         in_progress: "in_progress";
         pending: "pending";
     }>;
-    owner: z$1.ZodOptional<z$1.ZodString>;
-    activeForm: z$1.ZodOptional<z$1.ZodString>;
-    blocks: z$1.ZodArray<z$1.ZodString>;
-    blockedBy: z$1.ZodArray<z$1.ZodString>;
-    metadata: z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>;
-}, z$1.core.$strip>;
-type Task$1 = z$1.infer<typeof TaskSchema>;
+    owner: z.ZodOptional<z.ZodString>;
+    activeForm: z.ZodOptional<z.ZodString>;
+    blocks: z.ZodArray<z.ZodString>;
+    blockedBy: z.ZodArray<z.ZodString>;
+    metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+type Task$1 = z.infer<typeof TaskSchema>;
 declare class TaskStore {
     private filePath;
     constructor(workDir: string, listId: string);
@@ -5641,4 +5719,4 @@ declare class TaskUpdateTool implements Tool {
     execute(ctx: ToolContext, args: Record<string, unknown>): Promise<ToolResult>;
 }
 
-export { ASYNC_AGENT_ALLOWED_TOOLS, Agent, type AgentConfig, type AgentDefinition, type AgentEvent, type AgentEventCallback, AgentEventLogger, type AgentEventSink, type AgentProgress, AgentProgressSchema, type AgentTask, AgentTool, AnthropicClient, type AppConfig, AskUserQuestionTool, type Asker, AuthenticationError, AutoCompactTrackingState, BASH_DESCRIPTION, BUILTIN_AGENTS, type Backup, BashTool, BwrapSandbox, CHARS_PER_TOKEN, COMPACT_BOUNDARY, CUSTOM_AGENT_DISALLOWED_TOOLS, CodeReviewManager, type CodeReviewMember, type CodeReviewTeam, type Command, type CommandContext, CommandRegistry, type CommandType, CommandUsageTracker, type CommentIssue, type CommentResolution, type CompactBoundaryPayload, type CompactResult, ConfigError, type ConnectResult, ContextTooLongError, ConversationManager, type CriticAssessment, type CriticEvaluation, DEFAULT_CONTEXT_WINDOW, DEFAULT_EAGER_THRESHOLD_PERCENT, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_THINKING_LEVEL, type Decision, type DecisionEffect, type DetectedIde, type DiffResult, EDIT_FILE_DESCRIPTION, EditFileTool, EnterWorktreeTool, type EnvironmentContext, type EventLogger, type EventName, ExitPlanModeTool, ExitWorktreeTool, FORK_QUERY_SOURCE, type FileFeedback, FileHistory, type FileMailMessage, FileMailbox, FileStateCache, GLOB_DESCRIPTION, GREP_DESCRIPTION, GlobTool, GrepTool, type HookConfig, HookConfigSchema, type HookContext, HookEngine, type HookResult, type HookRuntimeOptions, INTERRUPTED_TOOL_RESULT, type IdeAtMention, type IdeConnection, ImageTooLargeError, InstallSkillTool, type InstructionSource, type KeptMessage, type LLMClient, LLMError, ListTeamsTool, LoadSkillTool, MAX_DIMENSION_PX, MAX_HISTORY_ENTRIES, MAX_IMAGES_PER_MESSAGE, MAX_IMAGE_BYTES_PASSTHROUGH, MCPClient, MCPManager, type MCPServerConfig, type MCPTool, type MCPToolLike, MCPToolWrapper, MCP_CALL_TOOL_NAME, MCP_NAME_SEP, MCP_TOOL_PREFIX, MIN_THINKING_ANSWER_TOKENS, MIN_THINKING_BUDGET_TOKENS, MSG_PLAN_APPROVAL_REQUEST, MSG_PLAN_APPROVAL_RESPONSE, MSG_SHUTDOWN_REQUEST, MSG_SHUTDOWN_RESPONSE, MSG_TEXT, type MaxTokensSetter, McpCallTool, type McpLoadingMode, type Member, MemoryConsolidator, MemoryExtractor, type MemoryFile, type MemoryHeader, MemoryManager, type Message, NATIVE_TOOL_USE_BETA, NameRegistry, NetworkError, OpenAIClient, OpenAICompatClient, type OpenAIMessageParam, POWERSHELL_DESCRIPTION, PathSandbox, PermissionChecker, type PermissionMode, PowerShellTool, type PrintArgs, PromptBuilder, type ProviderConfig, ProviderConfigSchema, type Question, type QuestionOption, READ_FILE_DESCRIPTION, REJECTED_TOOL_RESULT, RateLimitError, ReadFileTool, type RecallResult, RecoveryState, type RelevantMemory, type RemoteAgentHandle, RemoteServer, type RestoredMessage, type ReviewComment, type ReviewRequest, ReviewSession, type ReviewSummary, RuleEngine, type RunAgent, type RunCallbacks, SHUTDOWN_PREFIX, SKIP_DIRS, SUBAGENT_DISALLOWED_TOOLS, type Sandbox, type SandboxConfig, type SandboxYamlConfig, type SaveClipboardImageResult, SeatbeltSandbox, type Section, SendMessageTool, type SessionInfo, type SessionMessage, type SharedTask, SharedTaskStore, type Skill, SkillCatalog, type SkillForkHost, type SkillHost, type SkillMeta, type Snapshot, type SpawnConfig, SpawnTeammateTool, type Task$1 as StoredTask, type StreamEvent, StreamingExecutor, type SubagentRunOptions, SyntheticOutputTool, TEAMMATE_DISALLOWED_TOOLS, THINKING_BUDGETS, THINKING_LEVELS, TOOL_RESULT_PREVIEW_CHARS, TOOL_SEARCH_TOOL_NAME, type Task, TaskCreateTool$1 as TaskCreateTool, TaskGetTool$1 as TaskGetTool, TaskList, TaskListTool$1 as TaskListTool, TaskManager, type TaskStatus, TaskStopTool, TaskStore, type TaskUpdateFields, TaskUpdateTool$1 as TaskUpdateTool, Team, TeamCreateTool, TeamDeleteTool, type TeamFile, TeamManager, type TeamMemberEntry, TeamMemberEntrySchema, type TeamMode, TaskCreateTool as TeamTaskCreateTool, TaskGetTool as TeamTaskGetTool, TaskListTool as TeamTaskListTool, TaskUpdateTool as TeamTaskUpdateTool, type TeammateUIState, TeammateUIStateSchema, type ThinkingBlock, type ThinkingLevel, type ThinkingLevelControl, type Tool, type ToolActivity, ToolActivitySchema, type ToolCategory, type ToolContext, ToolRegistry, type ToolResult, type ToolResultBlock, type ToolResultContentBlock, type ToolResultRecord, type ToolSchema, ToolSearchTool, type ToolUseBlock, type ToolUseRecord, type TranscriptEntry, type UsageAnchor, type UsageInfo, WRITE_FILE_DESCRIPTION, WebSocketTransport, type WorktreeResult, WriteFileTool, append, applyBudget, applyMode, approved, asCriticEvaluation, asError, asErrorString, asImageMediaType, asRecord, asString, boolArg, buildAnthropicMessages, buildChatCompletionMessages, buildDiff, buildMcpToolName, buildOpenAIInput, buildPlanModeExitReminder, buildPlanModeReentryReminder, buildPlanModeReminder, buildSkillSection, buildSystemPrompt, buildTeammateRegistry, buildWorktreeNotice, clampThinkingLevel, cleanExpiredSessions, clipboardImageFileName, cloneRegistryForFork, closeLogger, coerceBySchema, computeCompactThreshold, computeKeepStartIndex, connectToIde, contentToText, coordinatorActive, coordinatorReminder, coordinatorToolFilter, createAgentWorktree, createChildLogger, createClient, createDefaultCodeReviewTeam, createDefaultRegistry, createModelResolver, createProgress, createRemoteAgent, createSandbox, currentContextTokens, decideAndApply, decideMode, detectBackend, detectBackendFromEnv, detectEnvironment, detectIde, discoverInstructions, doingTasksSection, ensureToolPairing, environmentSection, escapeSkillXml, estimateMessages, estimateSchemaTokens, estimateTokens, evaluateRules, executingActionsSection, expandAtRefs, expandAtRefsWithImages, extractContent, fetchModelContextWindow, fileHistoryDir, filterToolsForAgent, forceCompact, forkEnabled, formatTokens, getContextWindow, getCurrentBranch, getCurrentPlanPath, getMaxOutputTokens, getMediaType, getNameRegistry, getOrCreatePlanPath, getSessionFilePath, getSupportedThinkingLevels, getThinkingLevel, globalConfigPath, handleCodeReviewCommand, hasWorktreeChanges, identitySection, initLogger, intArg, isCoordinatorTool, isCriticEvaluation, isDiffTool, isImagePath, isMcpToolLike, isObject, isOfficialAnthropicEndpoint, isPngBuffer, isRecord, isSafeCommand, isShutdownRequest, isSpillReadback, isToolResultContentBlock, isValidThinkingLevel, listSessions, load, loadAgentDefinitions, loadConfig, loadImageAttachment, loadInstructions, loadPlan, loadSession, loadTranscript, loadUserCommands, logger, manageContext, markLastUserTailForCache, markToolsForCache, maybeResizeAndDownsampleImage, mcpCallPermissionContent, mcpContentToToolOutput, mcpToolNamePrefix, measureSchemaChars, memoryAge, memoryAgeDays, memoryFreshnessText, needsToolSearchBeta, newRequestId, newSessionId, normalizeToolResultContentBlock, outputEfficiencySection, parse, parsePrintFlags, parseSkillFile, parseSkillPrompt, parseTeammateFlags, persistLargeResult, planApprovalRequest, planApprovalResponse, planExists, quickSort, randomCompletionVerb, randomVerb, readTeamFile, readWorktreeHeadSha, rebuildFromSession, record, recordError, recordExit, recordTokens, recordToolUse, recover, removeAgentWorktree, renderBody, replaceToolResultContent, resetPlanPath, resolveAPIKey, resolveGitDir, resolveModelId, runFork, runInline, runPrintMode, runTeammate, safeJSONParse, sanitizeNameSegment, sanitizeSegment, sanitizeTeamName, saveClipboardImage, saveCompactBoundary, saveMessage, savePlan, saveTranscript, shutdownRequest, shutdownResponse, sniffMediaType, spawnSubagent, spawnTeammate, storeClipboardImage, strArg, strList, summarizeActivities, systemSection, teamConfigPath, teamDir, teamsBaseDir, thinkingBudgetForLevel, toAnthropicThinkingEffort, toDisplayPreview, toReasoningEffort, toTry, toneStyleSection, toolResultsToRecords, toolUsesToRecords, usingToolsSection, validate, version, withProviderDefaults, writeTeamFile };
+export { ASYNC_AGENT_ALLOWED_TOOLS, Agent, type AgentConfig, type AgentDefinition, type AgentEvent, type AgentEventCallback, AgentEventLogger, type AgentEventSink, type AgentProgress, AgentProgressSchema, type AgentTask, AgentTool, AnthropicClient, type AnthropicToolSchema, type AppConfig, AskUserQuestionTool, type Asker, AuthenticationError, AutoCompactTrackingState, BASH_DESCRIPTION, BUILTIN_AGENTS, type Backup, BashTool, BwrapSandbox, CHARS_PER_TOKEN, COMPACT_BOUNDARY, CUSTOM_AGENT_DISALLOWED_TOOLS, CodeReviewManager, type CodeReviewMember, type CodeReviewTeam, type Command, type CommandContext, CommandRegistry, type CommandType, CommandUsageTracker, type CommentIssue, type CommentResolution, type CompactBoundaryPayload, type CompactResult, ComputerUseTool, type ComputerUseToolOptions, ConfigError, type ConnectResult, ContextTooLongError, ConversationManager, type CriticAssessment, type CriticEvaluation, DEFAULT_CONTEXT_WINDOW, DEFAULT_EAGER_THRESHOLD_PERCENT, DEFAULT_MAX_OUTPUT_TOKENS, DEFAULT_THINKING_LEVEL, type Decision, type DecisionEffect, type DetectedIde, type DiffResult, EDIT_FILE_DESCRIPTION, EditFileTool, EnterWorktreeTool, type EnvironmentContext, type EventLogger, type EventName, ExitPlanModeTool, ExitWorktreeTool, FORK_QUERY_SOURCE, type FileFeedback, FileHistory, type FileMailMessage, FileMailbox, FileStateCache, GLOB_DESCRIPTION, GREP_DESCRIPTION, GlobTool, GrepTool, type HookConfig, HookConfigSchema, type HookContext, HookEngine, type HookResult, type HookRuntimeOptions, INTERRUPTED_TOOL_RESULT, type IdeAtMention, type IdeConnection, ImageTooLargeError, InstallSkillTool, type InstructionSource, type KeptMessage, type LLMClient, LLMError, ListTeamsTool, LoadSkillTool, MAIN_AGENT_ONLY_TOOLS, MAX_DIMENSION_PX, MAX_HISTORY_ENTRIES, MAX_IMAGES_PER_MESSAGE, MAX_IMAGE_BYTES_PASSTHROUGH, MCPClient, MCPManager, type MCPServerConfig, type MCPTool, type MCPToolLike, MCPToolWrapper, MCP_NAME_SEP, MCP_TOOL_PREFIX, MIN_THINKING_ANSWER_TOKENS, MIN_THINKING_BUDGET_TOKENS, MSG_PLAN_APPROVAL_REQUEST, MSG_PLAN_APPROVAL_RESPONSE, MSG_SHUTDOWN_REQUEST, MSG_SHUTDOWN_RESPONSE, MSG_TEXT, type MaxTokensSetter, McpCallTool, type McpLoadingMode, type Member, MemoryConsolidator, MemoryExtractor, type MemoryFile, type MemoryHeader, MemoryManager, type Message, NATIVE_TOOL_USE_BETA, NameRegistry, NetworkError, OpenAIClient, OpenAICompatClient, type OpenAICompatToolSchema, type OpenAIMessageParam, type OpenAIResponsesToolSchema, POWERSHELL_DESCRIPTION, PathSandbox, PermissionChecker, type PermissionMode, PowerShellTool, type PrintArgs, PromptBuilder, type ProviderConfig, ProviderConfigSchema, type ProviderNativeToolSchema, type ProviderToolSchema, type Question, type QuestionOption, READ_FILE_DESCRIPTION, REJECTED_TOOL_RESULT, RateLimitError, ReadFileTool, type RecallResult, RecoveryState, type RelevantMemory, type RemoteAgentHandle, RemoteServer, type RestoredMessage, type ReviewComment, type ReviewRequest, ReviewSession, type ReviewSummary, RuleEngine, type RunAgent, type RunCallbacks, SHUTDOWN_PREFIX, SKIP_DIRS, SUBAGENT_DISALLOWED_TOOLS, type Sandbox, type SandboxConfig, type SandboxYamlConfig, type SaveClipboardImageResult, SeatbeltSandbox, type Section, SendMessageTool, type SessionInfo, type SessionMessage, type SharedTask, SharedTaskStore, type Skill, SkillCatalog, type SkillForkHost, type SkillHost, type SkillMeta, type Snapshot, type SpawnConfig, SpawnTeammateTool, type Task$1 as StoredTask, type StreamEvent, StreamingExecutor, type SubagentRunOptions, SyntheticOutputTool, TEAMMATE_DISALLOWED_TOOLS, THINKING_BUDGETS, THINKING_LEVELS, TOOL_RESULT_PREVIEW_CHARS, type Task, TaskCreateTool$1 as TaskCreateTool, TaskGetTool$1 as TaskGetTool, TaskList, TaskListTool$1 as TaskListTool, TaskManager, type TaskStatus, TaskStopTool, TaskStore, type TaskUpdateFields, TaskUpdateTool$1 as TaskUpdateTool, Team, TeamCreateTool, TeamDeleteTool, type TeamFile, TeamManager, type TeamMemberEntry, TeamMemberEntrySchema, type TeamMode, TaskCreateTool as TeamTaskCreateTool, TaskGetTool as TeamTaskGetTool, TaskListTool as TeamTaskListTool, TaskUpdateTool as TeamTaskUpdateTool, type TeammateUIState, TeammateUIStateSchema, type ThinkingBlock, type ThinkingLevel, type ThinkingLevelControl, type Tool, type ToolActivity, ToolActivitySchema, type ToolCategory, type ToolContext, type ToolProtocol, ToolRegistry, type ToolResult, type ToolResultBlock, type ToolResultContentBlock, type ToolResultRecord, type ToolSchema, ToolSearchTool, type ToolUseBlock, type ToolUseRecord, type TranscriptEntry, type UsageAnchor, type UsageInfo, WRITE_FILE_DESCRIPTION, WebSocketTransport, type WorktreeResult, WriteFileTool, append, applyBudget, applyMode, approved, asCriticEvaluation, asError, asErrorString, asImageMediaType, asRecord, asString, boolArg, buildAnthropicMessages, buildChatCompletionMessages, buildDiff, buildMcpToolName, buildOpenAIInput, buildPlanModeExitReminder, buildPlanModeReentryReminder, buildPlanModeReminder, buildSkillSection, buildSystemPrompt, buildTeammateRegistry, buildWorktreeNotice, clampThinkingLevel, cleanExpiredSessions, clipboardImageFileName, cloneRegistryForFork, closeLogger, coerceBySchema, computeCompactThreshold, computeKeepStartIndex, connectToIde, contentToText, coordinatorActive, coordinatorReminder, coordinatorToolFilter, createAgentWorktree, createChildLogger, createClient, createDefaultCodeReviewTeam, createDefaultRegistry, createModelResolver, createProgress, createRemoteAgent, createSandbox, currentContextTokens, decideAndApply, decideMode, detectBackend, detectBackendFromEnv, detectEnvironment, detectIde, discoverInstructions, doingTasksSection, ensureToolPairing, environmentSection, escapeSkillXml, estimateMessages, estimateSchemaTokens, estimateTokens, evaluateRules, executingActionsSection, expandAtRefs, expandAtRefsWithImages, extractContent, fetchModelContextWindow, fileHistoryDir, filterToolsForAgent, forceCompact, forkEnabled, formatTokens, getContextWindow, getCurrentBranch, getCurrentPlanPath, getMaxOutputTokens, getMediaType, getNameRegistry, getOrCreatePlanPath, getSessionFilePath, getSupportedThinkingLevels, getThinkingLevel, globalConfigPath, handleCodeReviewCommand, hasWorktreeChanges, identitySection, initLogger, intArg, isCoordinatorTool, isCriticEvaluation, isDiffTool, isImagePath, isMcpToolLike, isObject, isOfficialAnthropicEndpoint, isPngBuffer, isRecord, isSafeCommand, isShutdownRequest, isSpillReadback, isToolResultContentBlock, isValidThinkingLevel, listSessions, load, loadAgentDefinitions, loadConfig, loadImageAttachment, loadInstructions, loadPlan, loadSession, loadTranscript, loadUserCommands, logger, manageContext, markLastUserTailForCache, markToolsForCache, maybeResizeAndDownsampleImage, mcpCallPermissionContent, mcpContentToToolOutput, mcpToolNamePrefix, measureSchemaChars, memoryAge, memoryAgeDays, memoryFreshnessText, needsToolSearchBeta, newRequestId, newSessionId, normalizeToolResultContentBlock, outputEfficiencySection, parse, parsePrintFlags, parseSkillFile, parseSkillPrompt, parseTeammateFlags, persistLargeResult, planApprovalRequest, planApprovalResponse, planExists, quickSort, randomCompletionVerb, randomVerb, readTeamFile, readWorktreeHeadSha, rebuildFromSession, record, recordError, recordExit, recordTokens, recordToolUse, recover, removeAgentWorktree, renderBody, replaceToolResultContent, resetPlanPath, resolveAPIKey, resolveGitDir, resolveModelId, runFork, runInline, runPrintMode, runTeammate, safeJSONParse, sanitizeNameSegment, sanitizeSegment, sanitizeTeamName, saveClipboardImage, saveCompactBoundary, saveMessage, savePlan, saveTranscript, shutdownRequest, shutdownResponse, sniffMediaType, spawnSubagent, spawnTeammate, storeClipboardImage, strArg, strList, summarizeActivities, systemSection, teamConfigPath, teamDir, teamsBaseDir, thinkingBudgetForLevel, toAnthropicThinkingEffort, toDisplayPreview, toReasoningEffort, toTry, toneStyleSection, toolResultsToRecords, toolUsesToRecords, usingToolsSection, validate, version, withProviderDefaults, writeTeamFile };