@tansr/sdk 0.2.0 → 0.3.0

package/dist/index.js

@@ -21,7 +21,7 @@ var TansrSdkError = class extends Error {
 };
 
 // src/define-tool.ts
-function specToZod(spec, path20) {
+function specToZod(spec, path23) {
   let schema;
   switch (spec.type) {
     case "string":
@@ -34,24 +34,24 @@ function specToZod(spec, path20) {
       schema = z.boolean();
       break;
     case "array":
-      schema = z.array(spec.items !== void 0 ? specToZod(spec.items, `${path20}.items`) : z.unknown());
+      schema = z.array(spec.items !== void 0 ? specToZod(spec.items, `${path23}.items`) : z.unknown());
       break;
     case "object":
-      schema = spec.properties !== void 0 ? propertiesToZodObject(spec.properties, path20) : z.record(z.unknown());
+      schema = spec.properties !== void 0 ? propertiesToZodObject(spec.properties, path23) : z.record(z.unknown());
       break;
     default:
       throw new TansrSdkError(
         "invalid_options",
-        `defineTool: parameter "${path20}" has unknown type "${String(spec.type)}"; use one of 'string' | 'number' | 'boolean' | 'array' | 'object'.`
+        `defineTool: parameter "${path23}" has unknown type "${String(spec.type)}"; use one of 'string' | 'number' | 'boolean' | 'array' | 'object'.`
       );
   }
   if (spec.description !== void 0) schema = schema.describe(spec.description);
   return schema;
 }
-function propertiesToZodObject(properties, path20) {
+function propertiesToZodObject(properties, path23) {
   const shape = {};
   for (const [key2, spec] of Object.entries(properties)) {
-    const field = specToZod(spec, path20 === "" ? key2 : `${path20}.${key2}`);
+    const field = specToZod(spec, path23 === "" ? key2 : `${path23}.${key2}`);
     shape[key2] = spec.optional === true ? field.optional() : field;
   }
   return z.object(shape);
@@ -133,25 +133,25 @@ function defineTool(options) {
 }
 
 // src/skills.ts
-import path19 from "node:path";
+import path21 from "node:path";
 
 // ../kernel/src/world/default-fs.ts
 import fs from "node:fs/promises";
 var defaultFs = {
-  stat(path20) {
-    return fs.stat(path20);
+  stat(path23) {
+    return fs.stat(path23);
   },
-  lstat(path20) {
-    return fs.lstat(path20);
+  lstat(path23) {
+    return fs.lstat(path23);
   },
-  realpath(path20) {
-    return fs.realpath(path20);
+  realpath(path23) {
+    return fs.realpath(path23);
   },
-  readFile(path20) {
-    return fs.readFile(path20);
+  readFile(path23) {
+    return fs.readFile(path23);
   },
-  async readFilePrefix(path20, bytes) {
-    const handle = await fs.open(path20, "r");
+  async readFilePrefix(path23, bytes) {
+    const handle = await fs.open(path23, "r");
     try {
       const prefix = Buffer.alloc(bytes);
       const { bytesRead } = await handle.read(prefix, 0, bytes, 0);
@@ -160,17 +160,17 @@ var defaultFs = {
       await handle.close();
     }
   },
-  async writeFile(path20, data) {
-    await fs.writeFile(path20, data);
+  async writeFile(path23, data) {
+    await fs.writeFile(path23, data);
   },
-  async appendFile(path20, data) {
-    await fs.appendFile(path20, data);
+  async appendFile(path23, data) {
+    await fs.appendFile(path23, data);
   },
-  async mkdir(path20, opts) {
-    await fs.mkdir(path20, opts);
+  async mkdir(path23, opts) {
+    await fs.mkdir(path23, opts);
   },
-  readdir(path20) {
-    return fs.readdir(path20, { withFileTypes: true });
+  readdir(path23) {
+    return fs.readdir(path23, { withFileTypes: true });
   }
 };
 
@@ -1141,6 +1141,14 @@ var FileCheckpointSchema = z4.object({
   /** true = 文件存在但超采集上限,内容未存(回滚时如实跳过) */
   skipped: z4.boolean().optional()
 });
+var Visibilities = {
+  /** 用户与助手正常消息:全可见 */
+  normal: { model: true, defaultTranscript: true, expandedTranscript: true, sdk: true },
+  /** 元信息(如 system-reminder):进模型但默认转录隐藏 */
+  meta: { model: true, defaultTranscript: false, expandedTranscript: true, sdk: false },
+  /** 内部记录:不进模型、仅展开转录可见 */
+  internal: { model: false, defaultTranscript: false, expandedTranscript: true, sdk: false }
+};
 
 // ../protocol/src/config.ts
 import { z as z5 } from "zod";
@@ -7559,7 +7567,7 @@ async function* consumeModelStream(deps) {
   const stream = client.stream(request, callOptions);
   const collected = /* @__PURE__ */ new Map();
   const order = [];
-  const open = /* @__PURE__ */ new Set();
+  const open4 = /* @__PURE__ */ new Set();
   const assembler = new ToolArgsAssembler();
   const toolCalls = [];
   let stopEvent;
@@ -7608,7 +7616,7 @@ async function* consumeModelStream(deps) {
           text: ev.block.t === "text" || ev.block.t === "thinking" ? ev.block.text : ""
         });
         order.push(ev.index);
-        open.add(ev.index);
+        open4.add(ev.index);
         yield emit({ type: "msg.block.start", index: ev.index, blockType: ev.block.t });
         break;
       }
@@ -7633,7 +7641,7 @@ async function* consumeModelStream(deps) {
         assembler.append(ev.index, ev.json);
         break;
       case "block_stop": {
-        open.delete(ev.index);
+        open4.delete(ev.index);
         yield emit({ type: "msg.block.end", index: ev.index });
         const c = collected.get(ev.index);
         if (c && c.base.t === "tool_call") {
@@ -7674,16 +7682,16 @@ async function* consumeModelStream(deps) {
       }
     }
   }
-  const completedTextBlocks = () => order.filter((index) => !open.has(index)).map((index) => collected.get(index)).filter(
+  const completedTextBlocks = () => order.filter((index) => !open4.has(index)).map((index) => collected.get(index)).filter(
     (c) => c !== void 0 && c.base.t === "text" && c.text.trim().length > 0
   ).map((c) => finalizeBlock(c));
   if (abortedMidStream || signal.aborted) {
-    for (const index of open) yield emit({ type: "msg.retracted", index });
+    for (const index of open4) yield emit({ type: "msg.retracted", index });
     disposeGenerator(stream);
     return { kind: "aborted" };
   }
   if (errorEvent) {
-    for (const index of open) yield emit({ type: "msg.retracted", index });
+    for (const index of open4) yield emit({ type: "msg.retracted", index });
     disposeGenerator(stream);
     return {
       kind: "error",
@@ -7697,7 +7705,7 @@ async function* consumeModelStream(deps) {
     };
   }
   if (!stopEvent) {
-    for (const index of open) yield emit({ type: "msg.retracted", index });
+    for (const index of open4) yield emit({ type: "msg.retracted", index });
     return {
       kind: "error",
       error: {
@@ -7709,7 +7717,7 @@ async function* consumeModelStream(deps) {
     };
   }
   if (stopEvent.stopReason === "unknown") {
-    for (const index of open) yield emit({ type: "msg.retracted", index });
+    for (const index of open4) yield emit({ type: "msg.retracted", index });
     disposeGenerator(stream);
     return {
       kind: "error",
@@ -9839,16 +9847,16 @@ function unescapeSpecifier(spec) {
 function parseRule(raw) {
   const trimmed = raw.trim();
   if (trimmed === "") return null;
-  const open = findUnescapedParen(trimmed);
-  if (open === -1) {
+  const open4 = findUnescapedParen(trimmed);
+  if (open4 === -1) {
     if (TOOL_NAME_RE.test(trimmed)) return { raw: trimmed, toolName: trimmed };
     if (isMcpServerWildcard(trimmed)) return { raw: trimmed, toolName: trimmed };
     return null;
   }
   if (!trimmed.endsWith(")")) return null;
-  const toolName2 = trimmed.slice(0, open);
+  const toolName2 = trimmed.slice(0, open4);
   if (!TOOL_NAME_RE.test(toolName2)) return null;
-  const spec = unescapeSpecifier(trimmed.slice(open + 1, -1)).trim();
+  const spec = unescapeSpecifier(trimmed.slice(open4 + 1, -1)).trim();
   if (spec === "" || spec === "*") return { raw: trimmed, toolName: toolName2 };
   return { raw: trimmed, toolName: toolName2, specifier: spec };
 }
@@ -10092,9 +10100,9 @@ function stripBom(text) {
   return text.charCodeAt(0) === 65279 ? text.slice(1) : text;
 }
 function stripFrontmatter(text) {
-  const open = /^---[ \t]*\r?\n/.exec(text);
-  if (open === null) return text;
-  const rest = text.slice(open[0].length);
+  const open4 = /^---[ \t]*\r?\n/.exec(text);
+  if (open4 === null) return text;
+  const rest = text.slice(open4[0].length);
   const close = /^---[ \t]*(?:\r?\n|$)/m.exec(rest);
   if (close === null) return text;
   return rest.slice(close.index + close[0].length);
@@ -10161,9 +10169,9 @@ var TYPE_KEY_RE = /^type[ \t]*:[ \t]*(.*)$/;
 function memoryEntryTypeOf(content, indexFile) {
   if (indexFile) return "unknown";
   const text = content.charCodeAt(0) === 65279 ? content.slice(1) : content;
-  const open = FRONTMATTER_OPEN_RE.exec(text);
-  if (open === null) return "unknown";
-  const rest = text.slice(open[0].length);
+  const open4 = FRONTMATTER_OPEN_RE.exec(text);
+  if (open4 === null) return "unknown";
+  const rest = text.slice(open4[0].length);
   const close = FRONTMATTER_CLOSE_RE.exec(rest);
   if (close === null) return "unknown";
   for (const rawLine of rest.slice(0, close.index).split("\n")) {
@@ -10651,6 +10659,7 @@ var CLASSIFIER_BREAKER_TOTAL_LIMIT = 20;
 var CLASSIFIER_BREAKER_COOLDOWN_MS = 30 * 6e4;
 
 // ../kernel/src/journal/hash.ts
+import { createHash as createHash5 } from "node:crypto";
 function sortKeysDeep2(value) {
   if (Array.isArray(value)) return value.map(sortKeysDeep2);
   if (value !== null && typeof value === "object") {
@@ -10667,6 +10676,11 @@ function canonicalStringify(value) {
   const normalized = JSON.parse(JSON.stringify(value));
   return JSON.stringify(sortKeysDeep2(normalized));
 }
+function computeRecordHash(record) {
+  const { integrity, ...rest } = record;
+  const hashable = { ...rest, integrity: { previousHash: integrity.previousHash } };
+  return createHash5("sha256").update(canonicalStringify(hashable), "utf8").digest("hex");
+}
 
 // ../kernel/src/permissions/broad-allow.ts
 var BROAD_EXECUTABLES = /* @__PURE__ */ new Set([
@@ -11146,13 +11160,13 @@ function canonicalCwd(cwd) {
   const resolved = resolveForPermission(cwd, ".");
   return resolved.kind === "ok" ? resolved.path : null;
 }
-function canonicalPathEligible(cwdCanon, path20, policy, guard) {
-  if (hasWindowsDeviceSegment(path20)) return false;
-  if (path20 === cwdCanon) return !policy.strict;
-  if (!path20.startsWith(`${cwdCanon}/`)) return false;
-  if (guard.isProtectedContentPath(path20)) return false;
-  if (matchProtectedPath(path20, null) !== null) return false;
-  const segments = path20.slice(cwdCanon.length + 1).split("/");
+function canonicalPathEligible(cwdCanon, path23, policy, guard) {
+  if (hasWindowsDeviceSegment(path23)) return false;
+  if (path23 === cwdCanon) return !policy.strict;
+  if (!path23.startsWith(`${cwdCanon}/`)) return false;
+  if (guard.isProtectedContentPath(path23)) return false;
+  if (matchProtectedPath(path23, null) !== null) return false;
+  const segments = path23.slice(cwdCanon.length + 1).split("/");
   for (const [index, seg] of segments.entries()) {
     const hasGlob = GLOB_CHAR_RE.test(seg);
     if (hasGlob && seg.startsWith(".")) return false;
@@ -11336,9 +11350,9 @@ function verifyBundle(bundle, opts = {}) {
 // ../kernel/src/permissions/soften-radius.ts
 var PROTECTED_PATH_RULE_PREFIX = "protected-path(";
 var MCP_TOOL_PREFIX = "mcp__";
-function pathInsideRoot(path20, root) {
+function pathInsideRoot(path23, root) {
   if (root === null) return false;
-  return path20 === root || path20.startsWith(root.endsWith("/") ? root : `${root}/`);
+  return path23 === root || path23.startsWith(root.endsWith("/") ? root : `${root}/`);
 }
 function classifySoftenFace(input, base) {
   if (base.matchedRule?.startsWith(PROTECTED_PATH_RULE_PREFIX) === true) return "F6";
@@ -12642,8 +12656,8 @@ function fsErrorCode(err) {
 }
 
 // ../kernel/src/tools/files/real-target-guard.ts
-function accessPhrases(access) {
-  return access === "read" ? { doing: "reading from", refused: "Reading is refused" } : { doing: "writing to", refused: "Writing is refused" };
+function accessPhrases(access2) {
+  return access2 === "read" ? { doing: "reading from", refused: "Reading is refused" } : { doing: "writing to", refused: "Writing is refused" };
 }
 async function findExistingAnchor(fs3, abs) {
   let cur = abs;
@@ -12670,8 +12684,8 @@ function insideCanonical(child, base, caseInsensitive) {
   const b = caseInsensitive ? base.toLowerCase() : base;
   return c === b || c.startsWith(b.endsWith("/") ? b : `${b}/`);
 }
-function refusal(toolName2, declared, realTarget, code, detail, access) {
-  const phrase = accessPhrases(access);
+function refusal(toolName2, declared, realTarget, code, detail, access2) {
+  const phrase = accessPhrases(access2);
   return {
     ok: false,
     code,
@@ -12681,8 +12695,8 @@ function refusal(toolName2, declared, realTarget, code, detail, access) {
 }
 async function checkRealTarget(toolName2, declaredAbs, options) {
   const caseInsensitive = options.caseInsensitivePaths ?? process.platform === "win32";
-  const access = options.access ?? "write";
-  const phrase = accessPhrases(access);
+  const access2 = options.access ?? "write";
+  const phrase = accessPhrases(access2);
   const fs3 = options.fs ?? defaultFs;
   let anchor;
   try {
@@ -12720,7 +12734,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
       realTarget,
       "unverifiable",
       "The redirected target cannot be safely canonicalized for comparison.",
-      access
+      access2
     );
   }
   const memoryDirs = options.memoryCarveOutDirs ?? [];
@@ -12766,7 +12780,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
           realTarget,
           "memory_divergence",
           "Memory files must be plain files: no path component of a memory target may be a symlink or junction.",
-          access
+          access2
         );
       }
     } else if (realInMemory) {
@@ -12776,7 +12790,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
         realTarget,
         "memory_divergence",
         "The real target is inside the agent memory directory, which may only be addressed directly.",
-        access
+        access2
       );
     }
   }
@@ -12798,7 +12812,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
       realTarget,
       "escapes_workspace",
       `The real target is outside the workspace root "${options.cwd}".`,
-      access
+      access2
     );
   }
   const homeC = canonicalHomedir(options.homedir ?? os.homedir());
@@ -12811,7 +12825,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
       realTarget,
       "protected_divergence",
       `The real target is inside a protected area (${realLabel}).`,
-      access
+      access2
     );
   }
   if (realC.kind === "ok" && matchesSecretFace(realC.path) && !(declaredC.kind === "ok" && matchesSecretFace(declaredC.path))) {
@@ -12821,7 +12835,7 @@ async function checkRealTarget(toolName2, declaredAbs, options) {
       realTarget,
       "secret_divergence",
       "The real target matches a protected secret-file pattern.",
-      access
+      access2
     );
   }
   return { ok: true, realPath: realTarget, linkResolved: true };
@@ -13714,7 +13728,31 @@ var DispatchingToolExecutor = class {
   }
 };
 
+// ../kernel/src/journal/errors.ts
+var JournalError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "JournalError";
+    this.code = code;
+  }
+};
+function isErrnoException(err) {
+  return err instanceof Error && typeof err.code === "string";
+}
+var JournalCorruptionError = class extends JournalError {
+  /** 损坏所在行号(1-based) */
+  line;
+  constructor(line, detail) {
+    super("JOURNAL_CORRUPTED", `journal 第 ${line} 行数据损坏:${detail}`);
+    this.name = "JournalCorruptionError";
+    this.line = line;
+  }
+};
+
 // ../kernel/src/journal/paths.ts
+import { mkdir, open, readFile, rename, rm } from "node:fs/promises";
+import path5 from "node:path";
 import { z as z14 } from "zod";
 var SessionMetaSchema = z14.object({
   schemaVersion: z14.literal(1),
@@ -13744,12 +13782,543 @@ var SessionMetaSchema = z14.object({
    */
   outputStyle: z14.string().optional()
 });
+var SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function assertValidSessionId(sessionId) {
+  if (!SESSION_ID_PATTERN.test(sessionId)) {
+    throw new JournalError(
+      "INVALID_SESSION_ID",
+      `非法 sessionId ${JSON.stringify(sessionId)}:仅允许字母数字与 . _ -,且须以字母数字开头`
+    );
+  }
+}
+function sessionDirPath(storageRoot, sessionId) {
+  assertValidSessionId(sessionId);
+  return path5.join(storageRoot, "sessions", sessionId);
+}
+function journalFilePath(sessionDir) {
+  return path5.join(sessionDir, "journal.jsonl");
+}
+function metaFilePath(sessionDir) {
+  return path5.join(sessionDir, "meta.json");
+}
+function lockFilePath(sessionDir) {
+  return path5.join(sessionDir, "lock");
+}
+var durableTmpSeq = 0;
+async function writeFileDurable(filePath, content) {
+  durableTmpSeq += 1;
+  const tempPath = `${filePath}.tmp-${process.pid}-${durableTmpSeq.toString(36)}-${Date.now()}`;
+  const handle = await open(tempPath, "w");
+  try {
+    if (typeof content === "string") {
+      await handle.writeFile(content, "utf8");
+    } else {
+      await handle.writeFile(content);
+    }
+    await handle.sync();
+  } finally {
+    await handle.close();
+  }
+  try {
+    await rename(tempPath, filePath);
+  } catch (err) {
+    await rm(tempPath, { force: true }).catch(() => void 0);
+    throw err;
+  }
+}
+async function readSessionMeta(sessionDir) {
+  const raw = await readFile(metaFilePath(sessionDir), "utf8");
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new JournalError("META_INVALID", `meta.json 不是合法 JSON:${metaFilePath(sessionDir)}`);
+  }
+  const result = SessionMetaSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new JournalError("META_INVALID", `meta.json 不符合 SessionMeta schema:${result.error.message}`);
+  }
+  return result.data;
+}
+async function ensureSessionDir(options) {
+  const sessionDir = sessionDirPath(options.storageRoot, options.sessionId);
+  await mkdir(sessionDir, { recursive: true });
+  try {
+    const meta2 = await readSessionMeta(sessionDir);
+    if (meta2.sessionId !== options.sessionId) {
+      throw new JournalError(
+        "META_MISMATCH",
+        `meta.json 中 sessionId(${meta2.sessionId})与目录名(${options.sessionId})不一致`
+      );
+    }
+    return { sessionDir, meta: meta2, created: false };
+  } catch (err) {
+    if (!isErrnoException(err) || err.code !== "ENOENT") throw err;
+  }
+  const meta = {
+    schemaVersion: 1,
+    sessionId: options.sessionId,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    cwd: options.cwd
+  };
+  if (options.extra?.title !== void 0) meta.title = options.extra.title;
+  if (options.extra?.firstUserMessage !== void 0) {
+    meta.firstUserMessage = options.extra.firstUserMessage;
+  }
+  if (options.extra?.model !== void 0) meta.model = options.extra.model;
+  if (options.extra?.provider !== void 0) meta.provider = options.extra.provider;
+  if (options.extra?.outputStyle !== void 0) meta.outputStyle = options.extra.outputStyle;
+  await writeFileDurable(metaFilePath(sessionDir), `${JSON.stringify(meta, null, 2)}
+`);
+  return { sessionDir, meta, created: true };
+}
 
 // ../kernel/src/journal/lock.ts
+import { open as open2, rm as rm2, stat, readFile as readFile2 } from "node:fs/promises";
+import os2 from "node:os";
 var DEFAULT_STALE_MS = 30 * 60 * 1e3;
+function defaultIsPidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    if (isErrnoException(err) && err.code === "EPERM") return true;
+    return false;
+  }
+}
+async function readLockPayload(lockPath) {
+  try {
+    const raw = await readFile2(lockPath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed !== null && typeof parsed === "object" && typeof parsed.pid === "number") {
+      return parsed;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+async function tryCreateLockFile(lockPath) {
+  let handle;
+  try {
+    handle = await open2(lockPath, "wx");
+  } catch (err) {
+    if (isErrnoException(err) && err.code === "EEXIST") return false;
+    throw err;
+  }
+  try {
+    const payload = {
+      pid: process.pid,
+      startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      host: os2.hostname()
+    };
+    await handle.writeFile(`${JSON.stringify(payload)}
+`, "utf8");
+    await handle.sync();
+  } finally {
+    await handle.close();
+  }
+  return true;
+}
+async function acquireSessionLock(sessionDir, options = {}) {
+  const lockPath = lockFilePath(sessionDir);
+  const staleMs = options.staleMs ?? DEFAULT_STALE_MS;
+  const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
+  for (let attempt = 0; attempt < 2; attempt++) {
+    if (await tryCreateLockFile(lockPath)) {
+      let released = false;
+      return {
+        lockPath,
+        async release() {
+          if (released) return;
+          released = true;
+          await rm2(lockPath, { force: true });
+        }
+      };
+    }
+    const payload = await readLockPayload(lockPath);
+    let mtimeMs = null;
+    try {
+      mtimeMs = (await stat(lockPath)).mtimeMs;
+    } catch (err) {
+      if (isErrnoException(err) && err.code === "ENOENT") {
+        continue;
+      }
+      throw err;
+    }
+    const holderAlive = payload !== null && isPidAlive(payload.pid);
+    const isStale = Date.now() - mtimeMs > staleMs;
+    const canPreempt = payload === null ? isStale : !holderAlive || isStale;
+    if (!canPreempt) {
+      const holder = payload ? `pid=${payload.pid} host=${payload.host} since=${payload.startedAt}` : "未知持有者";
+      throw new JournalError(
+        "SESSION_LOCKED",
+        `会话已被其他进程锁定(${holder}),锁文件:${lockPath}`
+      );
+    }
+    await rm2(lockPath, { force: true });
+  }
+  throw new JournalError(
+    "SESSION_LOCKED",
+    `会话锁竞争激烈,清理陈旧锁后重试仍失败:${lockPath}`
+  );
+}
+
+// ../kernel/src/journal/reader.ts
+import { appendFile, readFile as readFile4, truncate } from "node:fs/promises";
+
+// ../kernel/src/journal/attachments.ts
+import { createHash as createHash6 } from "node:crypto";
+import { access, mkdir as mkdir2, readFile as readFile3 } from "node:fs/promises";
+import path6 from "node:path";
+var ATTACHMENTS_DIR_NAME = "attachments";
+var IMAGE_MESSAGE_KINDS = /* @__PURE__ */ new Set([
+  "user_prompt",
+  "assistant_message",
+  "tool_result"
+]);
+var REF_PATTERN = /^sha256:([0-9a-f]{64})$/;
+function attachmentsDirPath(sessionDir) {
+  return path6.join(sessionDir, ATTACHMENTS_DIR_NAME);
+}
+function attachmentFilePath(sessionDir, sha256Hex2) {
+  return path6.join(attachmentsDirPath(sessionDir), sha256Hex2);
+}
+var isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isInlineImage = (b) => b["t"] === "image" && typeof b["data"] === "string" && typeof b["mime"] === "string" && b["$ref"] === void 0;
+var isExternalizedImage = (b) => b["t"] === "image" && typeof b["$ref"] === "string" && typeof b["mime"] === "string" && b["data"] === void 0;
+async function externalizeOne(block, sessionDir) {
+  try {
+    const bytes = Buffer.from(block["data"], "base64");
+    const hex = createHash6("sha256").update(bytes).digest("hex");
+    const file = attachmentFilePath(sessionDir, hex);
+    let exists = true;
+    try {
+      await access(file);
+    } catch {
+      exists = false;
+    }
+    if (!exists) {
+      await mkdir2(attachmentsDirPath(sessionDir), { recursive: true });
+      await writeFileDurable(file, bytes);
+    }
+    const out = {
+      t: "image",
+      mime: block["mime"],
+      $ref: `sha256:${hex}`,
+      bytes: bytes.length
+    };
+    const dims = probeImageDimensions(bytes);
+    if (dims !== null) {
+      out["w"] = dims.width;
+      out["h"] = dims.height;
+    }
+    return out;
+  } catch {
+    return block;
+  }
+}
+async function rehydrateOne(block, sessionDir, notes) {
+  const ref = block["$ref"];
+  const placeholder = (noteReason, textReason) => {
+    notes.push(`image 附件${noteReason},块已降级为占位文本(${ref})`);
+    return { t: "text", text: `[image unavailable: attachment ${ref} ${textReason}]` };
+  };
+  const match = REF_PATTERN.exec(ref);
+  if (match === null) return placeholder("引用非法", "has an invalid ref");
+  const hex = match[1];
+  let bytes;
+  try {
+    bytes = await readFile3(attachmentFilePath(sessionDir, hex));
+  } catch {
+    return placeholder("缺失", "is missing");
+  }
+  if (createHash6("sha256").update(bytes).digest("hex") !== hex) {
+    return placeholder("摘要不符", "is corrupt (sha256 mismatch)");
+  }
+  return { t: "image", mime: block["mime"], data: bytes.toString("base64") };
+}
+async function mapImageBlocks(payload, match, mapper) {
+  if (!isRecord(payload) || !Array.isArray(payload["blocks"])) return payload;
+  let changed = false;
+  const blocks = [];
+  for (const raw of payload["blocks"]) {
+    if (!isRecord(raw)) {
+      blocks.push(raw);
+      continue;
+    }
+    if (match(raw)) {
+      const mapped = await mapper(raw);
+      if (mapped !== raw) changed = true;
+      blocks.push(mapped);
+      continue;
+    }
+    if (raw["t"] === "tool_result" && Array.isArray(raw["content"])) {
+      let itemChanged = false;
+      const content = [];
+      for (const item of raw["content"]) {
+        if (!isRecord(item) || !match(item)) {
+          content.push(item);
+          continue;
+        }
+        const mapped = await mapper(item);
+        if (mapped !== item) itemChanged = true;
+        content.push(mapped);
+      }
+      if (!itemChanged) {
+        blocks.push(raw);
+        continue;
+      }
+      changed = true;
+      blocks.push({ ...raw, content });
+      continue;
+    }
+    blocks.push(raw);
+  }
+  return changed ? { ...payload, blocks } : payload;
+}
+async function externalizeImagePayload(payload, sessionDir) {
+  return mapImageBlocks(payload, isInlineImage, (b) => externalizeOne(b, sessionDir));
+}
+async function rehydrateImagePayload(payload, sessionDir, notes) {
+  return mapImageBlocks(payload, isExternalizedImage, (b) => rehydrateOne(b, sessionDir, notes));
+}
+
+// ../kernel/src/journal/reader.ts
+var MAIN_BRANCH_ID = "main";
+var NEWLINE_BYTE = 10;
+async function readAll(sessionDir, options = {}) {
+  const filePath = journalFilePath(sessionDir);
+  let buf;
+  try {
+    buf = await readFile4(filePath);
+  } catch (err) {
+    if (isErrnoException(err) && err.code === "ENOENT") return { records: [], repairs: [] };
+    throw err;
+  }
+  const records = [];
+  const lineStartBytes = [];
+  const repairs = [];
+  let truncateTo = null;
+  let missingFinalNewline = false;
+  let pos = 0;
+  let lineNo = 0;
+  while (pos < buf.length) {
+    lineNo++;
+    const nl = buf.indexOf(NEWLINE_BYTE, pos);
+    const hasNewline = nl !== -1;
+    const end = hasNewline ? nl : buf.length;
+    const isLastLine = !hasNewline || nl === buf.length - 1;
+    const text = buf.subarray(pos, end).toString("utf8");
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+      if (isLastLine) {
+        truncateTo = pos;
+        repairs.push(`截断崩溃残留的不完整尾行(第 ${lineNo} 行,${buf.length - pos} 字节)`);
+        break;
+      }
+      throw new JournalCorruptionError(lineNo, "JSON 解析失败且非最后一行,无法用崩溃截断解释");
+    }
+    const result = JournalRecordSchema.safeParse(parsed);
+    if (!result.success) {
+      throw new JournalCorruptionError(lineNo, `不符合 JournalRecord schema:${result.error.message}`);
+    }
+    records.push(result.data);
+    lineStartBytes.push(pos);
+    if (!hasNewline) missingFinalNewline = true;
+    pos = end + 1;
+  }
+  while (records.length > 0 && records[records.length - 1].completeness === "partial") {
+    const idx = records.length - 1;
+    truncateTo = lineStartBytes[idx];
+    repairs.push(`截断崩溃残留的 partial 尾记录(seq=${records[idx].seq})`);
+    records.pop();
+    lineStartBytes.pop();
+    missingFinalNewline = false;
+  }
+  if (truncateTo !== null) {
+    await truncate(filePath, truncateTo);
+  } else if (missingFinalNewline) {
+    await appendFile(filePath, "\n");
+    repairs.push("补齐末行缺失的换行符");
+  }
+  let integrityBreakAt;
+  let expectedPrev = null;
+  for (let i = 0; i < records.length; i++) {
+    const rec = records[i];
+    if (rec.integrity.previousHash !== expectedPrev || computeRecordHash(rec) !== rec.integrity.hash) {
+      integrityBreakAt = i;
+      break;
+    }
+    expectedPrev = rec.integrity.hash;
+  }
+  if (options.rehydrateImages !== false) {
+    for (let i = 0; i < records.length; i++) {
+      const rec = records[i];
+      if (!IMAGE_MESSAGE_KINDS.has(rec.kind)) continue;
+      const notes = [];
+      const payload = await rehydrateImagePayload(rec.payload, sessionDir, notes);
+      if (payload !== rec.payload) records[i] = { ...rec, payload };
+      for (const note of notes) repairs.push(`seq=${rec.seq}:${note}`);
+    }
+  }
+  return integrityBreakAt === void 0 ? { records, repairs } : { records, integrityBreakAt, repairs };
+}
+var MESSAGE_KINDS = /* @__PURE__ */ new Set([
+  "user_prompt",
+  "assistant_message",
+  "tool_result"
+]);
+function rebuildState(records) {
+  const messages = [];
+  const warnings = [];
+  for (const rec of records) {
+    if (rec.branchId !== MAIN_BRANCH_ID) continue;
+    if (!MESSAGE_KINDS.has(rec.kind)) continue;
+    if (!rec.visibility.model) continue;
+    const parsed = IRMessageSchema.safeParse(rec.payload);
+    if (!parsed.success) {
+      warnings.push(`seq=${rec.seq}(kind=${rec.kind})的 payload 不是合法 IRMessage,已跳过`);
+      continue;
+    }
+    messages.push(parsed.data);
+  }
+  const last = records.length > 0 ? records[records.length - 1] : void 0;
+  return { messages, lastSeq: last?.seq ?? -1, branchId: MAIN_BRANCH_ID, warnings };
+}
+
+// ../kernel/src/journal/writer.ts
+import { open as open3 } from "node:fs/promises";
+var CRITICAL_KINDS = /* @__PURE__ */ new Set([
+  "user_prompt",
+  "assistant_message",
+  "tool_result",
+  "fork",
+  "compact_boundary",
+  "queue_enqueue",
+  "queue_ack"
+]);
+var JournalWriter = class _JournalWriter {
+  #handle;
+  /** 串行化队列尾:并发 append 按调用序依次执行 */
+  #queue = Promise.resolve();
+  #previousHash;
+  #nextSeq;
+  /** 已确认成功的文件字节长度,写失败时截断回滚的目标 */
+  #byteLength;
+  /** 会话目录(J15 附件外置的落点根) */
+  #sessionDir;
+  #closed = false;
+  /** 回滚失败后置真:磁盘与内存链状态已不可信,拒绝继续写 */
+  #broken = false;
+  constructor(handle, previousHash, nextSeq, byteLength, sessionDir) {
+    this.#handle = handle;
+    this.#previousHash = previousHash;
+    this.#nextSeq = nextSeq;
+    this.#byteLength = byteLength;
+    this.#sessionDir = sessionDir;
+  }
+  /**
+   * 打开(或创建)会话 journal 并定位恢复点:经 readAll 读全量(顺带截断
+   * 崩溃残留、保证行边界干净),取末条记录的 seq/hash 接续哈希链。
+   * 恢复点读取用原始落盘形态(rehydrateImages:false)——只取 seq/hash,
+   * 不为附件回填付费。前置条件:会话目录已存在(经 ensureSessionDir);
+   * 会话锁由调用方持有。
+   */
+  static async open(sessionDir) {
+    const { records } = await readAll(sessionDir, { rehydrateImages: false });
+    const last = records.length > 0 ? records[records.length - 1] : void 0;
+    const handle = await open3(journalFilePath(sessionDir), "a");
+    try {
+      const { size } = await handle.stat();
+      return new _JournalWriter(handle, last?.integrity.hash ?? null, (last?.seq ?? -1) + 1, size, sessionDir);
+    } catch (err) {
+      await handle.close();
+      throw err;
+    }
+  }
+  /**
+   * 追加一条记录(schema 校验后写);返回实际落盘的完整记录。
+   * 并发调用按发起顺序串行落盘,seq 与文件行序一致。
+   */
+  append(input) {
+    const task = this.#queue.then(() => this.#appendSerialized(input));
+    this.#queue = task.then(
+      () => void 0,
+      () => void 0
+    );
+    return task;
+  }
+  async #appendSerialized(input) {
+    if (this.#closed) {
+      throw new JournalError("JOURNAL_CLOSED", "JournalWriter 已关闭,不能继续 append");
+    }
+    if (this.#broken) {
+      throw new JournalError("JOURNAL_BROKEN", "此前写失败且截断回滚未成功,writer 已进入不可写状态");
+    }
+    let effective = input;
+    if (IMAGE_MESSAGE_KINDS.has(input.kind)) {
+      const payload = await externalizeImagePayload(input.payload, this.#sessionDir);
+      if (payload !== input.payload) effective = { ...input, payload };
+    }
+    const candidate = {
+      ...effective,
+      schemaVersion: 1,
+      seq: this.#nextSeq,
+      completeness: "complete",
+      integrity: { previousHash: this.#previousHash, hash: "" }
+    };
+    const parsed = JournalRecordSchema.safeParse(candidate);
+    if (!parsed.success) {
+      throw new JournalError("RECORD_INVALID", `记录不符合 JournalRecord schema:${parsed.error.message}`);
+    }
+    const record = parsed.data;
+    record.integrity.hash = computeRecordHash(record);
+    const line = Buffer.from(`${JSON.stringify(record)}
+`, "utf8");
+    try {
+      let written = 0;
+      while (written < line.length) {
+        const { bytesWritten } = await this.#handle.write(line, written, line.length - written);
+        written += bytesWritten;
+      }
+      if (CRITICAL_KINDS.has(record.kind)) {
+        try {
+          await this.#handle.datasync();
+        } catch {
+          await this.#handle.sync();
+        }
+      }
+    } catch (err) {
+      try {
+        await this.#handle.truncate(this.#byteLength);
+      } catch {
+        this.#broken = true;
+      }
+      throw err;
+    }
+    this.#byteLength += line.length;
+    this.#previousHash = record.integrity.hash;
+    this.#nextSeq = record.seq + 1;
+    return record;
+  }
+  /** 下一条将分配的 seq(诊断用) */
+  get nextSeq() {
+    return this.#nextSeq;
+  }
+  /** 等待队列排空并关闭文件句柄;幂等 */
+  async close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    await this.#queue;
+    await this.#handle.close();
+  }
+};
 
 // ../kernel/src/tools/search/path-utils.ts
-import * as path5 from "node:path";
+import * as path7 from "node:path";
 function toPosixPath(p) {
   return p.replaceAll("\\", "/");
 }
@@ -13757,10 +14326,10 @@ function normalizeDriveLetter(p) {
   return /^[A-Za-z]:/.test(p) ? p.charAt(0).toLowerCase() + p.slice(1) : p;
 }
 function isAbsolutePath(p) {
-  return path5.win32.isAbsolute(p) || path5.posix.isAbsolute(p);
+  return path7.win32.isAbsolute(p) || path7.posix.isAbsolute(p);
 }
 function canonicalize(p) {
-  return normalizeDriveLetter(toPosixPath(path5.resolve(p)));
+  return normalizeDriveLetter(toPosixPath(path7.resolve(p)));
 }
 function resolvePathArg(p, cwd) {
   const target = p ?? cwd;
@@ -13813,11 +14382,11 @@ function expandBraces(pattern) {
   return out;
 }
 function expandOnce(pattern) {
-  const open = pattern.indexOf("{");
-  if (open === -1) return null;
+  const open4 = pattern.indexOf("{");
+  if (open4 === -1) return null;
   let depth = 0;
   let close = -1;
-  for (let i = open; i < pattern.length; i++) {
+  for (let i = open4; i < pattern.length; i++) {
     const ch = pattern.charAt(i);
     if (ch === "{") depth += 1;
     else if (ch === "}") {
@@ -13829,8 +14398,8 @@ function expandOnce(pattern) {
     }
   }
   if (close === -1) return null;
-  const prefix = pattern.slice(0, open);
-  const body = pattern.slice(open + 1, close);
+  const prefix = pattern.slice(0, open4);
+  const body = pattern.slice(open4 + 1, close);
   const suffix = pattern.slice(close + 1);
   const alternatives = [];
   let level = 0;
@@ -14142,7 +14711,7 @@ var SESSION_EVENT_VOCABULARY = {
 var SESSION_EVENT_KINDS = Object.keys(SESSION_EVENT_VOCABULARY);
 
 // ../kernel/src/tools/files/read.ts
-import path6 from "node:path";
+import path8 from "node:path";
 import { z as z15 } from "zod";
 
 // ../kernel/src/tools/files/encoding.ts
@@ -14224,19 +14793,19 @@ function truncateLine(line) {
   return `${line.slice(0, cut)}…[line truncated: ${line.length} chars total; use Grep to inspect the rest]`;
 }
 async function findSimilarFiles(fs3, filePath) {
-  const dir = path6.dirname(filePath);
-  const targetBase = path6.basename(filePath);
-  const targetName = path6.parse(filePath).name.toLowerCase();
+  const dir = path8.dirname(filePath);
+  const targetBase = path8.basename(filePath);
+  const targetName = path8.parse(filePath).name.toLowerCase();
   try {
     const entries = await fs3.readdir(dir);
     return entries.filter((entry) => entry.isFile()).map((entry) => entry.name).filter(
-      (name) => name.toLowerCase() !== targetBase.toLowerCase() && path6.parse(name).name.toLowerCase() === targetName
-    ).slice(0, 3).map((name) => path6.join(dir, name));
+      (name) => name.toLowerCase() !== targetBase.toLowerCase() && path8.parse(name).name.toLowerCase() === targetName
+    ).slice(0, 3).map((name) => path8.join(dir, name));
   } catch {
     return [];
   }
 }
-async function executeImageRead(resolved, args, ctx, fs3, stat, options) {
+async function executeImageRead(resolved, args, ctx, fs3, stat2, options) {
   let mode;
   try {
     mode = options.imageInput?.();
@@ -14255,9 +14824,9 @@ async function executeImageRead(resolved, args, ctx, fs3, stat, options) {
       "offset/limit apply to text files only. Call Read again without offset/limit to read this image file."
     );
   }
-  if (stat.size > READ_IMAGE_RAW_MAX_BYTES) {
+  if (stat2.size > READ_IMAGE_RAW_MAX_BYTES) {
     return errorResult(
-      `Image file is ${stat.size} bytes, which exceeds the per-image limit of ${READ_IMAGE_RAW_MAX_BYTES} bytes (5 MiB base64-encoded, aligned with the platform cap). Downscale or compress the image, then retry.`
+      `Image file is ${stat2.size} bytes, which exceeds the per-image limit of ${READ_IMAGE_RAW_MAX_BYTES} bytes (5 MiB base64-encoded, aligned with the platform cap). Downscale or compress the image, then retry.`
     );
   }
   let buf;
@@ -14272,10 +14841,10 @@ async function executeImageRead(resolved, args, ctx, fs3, stat, options) {
   const probed = probeImage(buf);
   if (probed === null) {
     return errorResult(
-      `File has an image extension but its content is not a readable PNG/JPEG/GIF/WebP image (bad or truncated header): ${path6.basename(resolved)}. If it is actually a text file, rename it; otherwise re-export the image and retry.`
+      `File has an image extension but its content is not a readable PNG/JPEG/GIF/WebP image (bad or truncated header): ${path8.basename(resolved)}. If it is actually a text file, rename it; otherwise re-export the image and retry.`
     );
   }
-  registerFileRead(ctx, normalizeFileKey(resolved), stat.mtimeMs);
+  registerFileRead(ctx, normalizeFileKey(resolved), stat2.mtimeMs);
   const data = {
     path: resolved,
     mime: probed.mime,
@@ -14283,7 +14852,7 @@ async function executeImageRead(resolved, args, ctx, fs3, stat, options) {
     height: probed.height,
     bytes: buf.length
   };
-  const meta = `Image file: ${path6.basename(resolved)}
+  const meta = `Image file: ${path8.basename(resolved)}
 Format: ${probed.mime}
 Dimensions: ${probed.width}x${probed.height} px
 Size: ${buf.length} bytes`;
@@ -14306,8 +14875,8 @@ function createReadTool(options = {}) {
     isConcurrencySafe: true,
     touchedPathsOf(args) {
       const parsed = ReadArgsSchema.safeParse(args);
-      if (!parsed.success || !path6.isAbsolute(parsed.data.file_path)) return [];
-      return [path6.resolve(parsed.data.file_path)];
+      if (!parsed.success || !path8.isAbsolute(parsed.data.file_path)) return [];
+      return [path8.resolve(parsed.data.file_path)];
     },
     async execute(args, ctx) {
       if (ctx.signal.aborted) {
@@ -14321,15 +14890,15 @@ function createReadTool(options = {}) {
       if (invalid) {
         return invalid;
       }
-      const resolved = path6.resolve(args.file_path);
+      const resolved = path8.resolve(args.file_path);
       const fs3 = fsOf(ctx);
       const realTarget = await checkRealTarget("Read", resolved, { cwd: ctx.cwd, access: "read", fs: fs3 });
       if (!realTarget.ok) {
         return errorResult(realTarget.reason);
       }
-      let stat;
+      let stat2;
       try {
-        stat = await fs3.stat(resolved);
+        stat2 = await fs3.stat(resolved);
       } catch (err) {
         if (fsErrorCode(err) === "ENOENT") {
           const similar = await findSimilarFiles(fs3, resolved);
@@ -14338,11 +14907,11 @@ function createReadTool(options = {}) {
         }
         return errorResult(`Failed to read file: ${errorMessageOf(err)}`);
       }
-      if (stat.isDirectory()) {
+      if (stat2.isDirectory()) {
         return errorResult(`Path is a directory, not a file: ${resolved}.`);
       }
-      if (isImageFileExtension(path6.extname(resolved))) {
-        return executeImageRead(resolved, args, ctx, fs3, stat, options);
+      if (isImageFileExtension(path8.extname(resolved))) {
+        return executeImageRead(resolved, args, ctx, fs3, stat2, options);
       }
       const fileKey = normalizeFileKey(resolved);
       const effectiveOffset = args.offset ?? 1;
@@ -14350,7 +14919,7 @@ function createReadTool(options = {}) {
       const dupWindow = takeDuplicateReadWindow(
         ctx,
         fileKey,
-        stat.mtimeMs,
+        stat2.mtimeMs,
         effectiveOffset,
         effectiveLimit
       );
@@ -14367,9 +14936,9 @@ function createReadTool(options = {}) {
           data2
         );
       }
-      if (stat.size > READ_MAX_FULL_BYTES && args.offset === void 0 && args.limit === void 0) {
+      if (stat2.size > READ_MAX_FULL_BYTES && args.offset === void 0 && args.limit === void 0) {
         return errorResult(
-          `File is ${stat.size} bytes, which exceeds the ${READ_MAX_FULL_BYTES}-byte limit for reading the whole file at once (large files inflate context: this one would be roughly ${Math.ceil(stat.size / 4)}+ tokens). Use the offset and limit parameters to read it in pages, or use Grep to locate the relevant sections first.`
+          `File is ${stat2.size} bytes, which exceeds the ${READ_MAX_FULL_BYTES}-byte limit for reading the whole file at once (large files inflate context: this one would be roughly ${Math.ceil(stat2.size / 4)}+ tokens). Use the offset and limit parameters to read it in pages, or use Grep to locate the relevant sections first.`
         );
       }
       let buf;
@@ -14388,7 +14957,7 @@ function createReadTool(options = {}) {
         );
       }
       if (decoded.text.length === 0) {
-        registerFileRead(ctx, fileKey, stat.mtimeMs, {
+        registerFileRead(ctx, fileKey, stat2.mtimeMs, {
           offset: effectiveOffset,
           limit: effectiveLimit,
           totalLines: 0,
@@ -14402,7 +14971,7 @@ function createReadTool(options = {}) {
       const startLine = effectiveOffset;
       const maxLines = effectiveLimit;
       if (startLine > totalLines) {
-        registerFileRead(ctx, fileKey, stat.mtimeMs, {
+        registerFileRead(ctx, fileKey, stat2.mtimeMs, {
           offset: effectiveOffset,
           limit: effectiveLimit,
           totalLines,
@@ -14421,7 +14990,7 @@ function createReadTool(options = {}) {
         text += `
 … (showing lines ${startLine}-${endLine} of ${totalLines}; use offset=${endLine + 1} to continue)`;
       }
-      registerFileRead(ctx, fileKey, stat.mtimeMs, {
+      registerFileRead(ctx, fileKey, stat2.mtimeMs, {
         offset: effectiveOffset,
         limit: effectiveLimit,
         totalLines,
@@ -14435,7 +15004,7 @@ function createReadTool(options = {}) {
 var ReadTool = createReadTool();
 
 // ../kernel/src/tools/files/write.ts
-import path7 from "node:path";
+import path9 from "node:path";
 import { z as z16 } from "zod";
 var WriteArgsSchema = z16.object({
   file_path: z16.string().describe("Absolute path to the file to write. Relative paths are rejected."),
@@ -14454,8 +15023,8 @@ var WriteTool = {
   isConcurrencySafe: false,
   mutatedPathsOf(args) {
     const parsed = WriteArgsSchema.safeParse(args);
-    if (!parsed.success || !path7.isAbsolute(parsed.data.file_path)) return [];
-    return [path7.resolve(parsed.data.file_path)];
+    if (!parsed.success || !path9.isAbsolute(parsed.data.file_path)) return [];
+    return [path9.resolve(parsed.data.file_path)];
   },
   async execute(args, ctx) {
     if (ctx.signal.aborted) {
@@ -14469,7 +15038,7 @@ var WriteTool = {
     if (invalid) {
       return invalid;
     }
-    const resolved = path7.resolve(args.file_path);
+    const resolved = path9.resolve(args.file_path);
     const key2 = normalizeFileKey(resolved);
     const fs3 = fsOf(ctx);
     const realTarget = await checkRealTarget("Write", resolved, {
@@ -14511,7 +15080,7 @@ var WriteTool = {
       }
     } else {
       try {
-        await fs3.mkdir(path7.dirname(resolved), { recursive: true });
+        await fs3.mkdir(path9.dirname(resolved), { recursive: true });
       } catch (err) {
         return errorResult(`Failed to create parent directories: ${errorMessageOf(err)}`);
       }
@@ -14567,7 +15136,7 @@ ${memoryNearLimitNote(health)}`, data);
 };
 
 // ../kernel/src/tools/files/edit.ts
-import path8 from "node:path";
+import path10 from "node:path";
 import { z as z17 } from "zod";
 var EditArgsSchema = z17.object({
   file_path: z17.string().describe("Absolute path to the file to edit. Relative paths are rejected."),
@@ -14610,8 +15179,8 @@ var EditTool = {
   isConcurrencySafe: false,
   mutatedPathsOf(args) {
     const parsed = EditArgsSchema.safeParse(args);
-    if (!parsed.success || !path8.isAbsolute(parsed.data.file_path)) return [];
-    return [path8.resolve(parsed.data.file_path)];
+    if (!parsed.success || !path10.isAbsolute(parsed.data.file_path)) return [];
+    return [path10.resolve(parsed.data.file_path)];
   },
   async execute(args, ctx) {
     if (ctx.signal.aborted) {
@@ -14625,7 +15194,7 @@ var EditTool = {
     if (invalid) {
       return invalid;
     }
-    const resolved = path8.resolve(args.file_path);
+    const resolved = path10.resolve(args.file_path);
     const key2 = normalizeFileKey(resolved);
     const fs3 = fsOf(ctx);
     const realTarget = await checkRealTarget("Edit", resolved, {
@@ -14636,19 +15205,19 @@ var EditTool = {
     if (!realTarget.ok) {
       return errorResult(realTarget.reason);
     }
-    let stat;
+    let stat2;
     try {
-      stat = await fs3.stat(resolved);
+      stat2 = await fs3.stat(resolved);
     } catch (err) {
       if (fsErrorCode(err) === "ENOENT") {
         return errorResult(`File does not exist: ${resolved}. Use the Write tool to create a new file.`);
       }
       return errorResult(`Failed to access file: ${errorMessageOf(err)}`);
     }
-    if (stat.isDirectory()) {
+    if (stat2.isDirectory()) {
       return errorResult(`Path is a directory, not a file: ${resolved}.`);
     }
-    const guard = checkStaleWriteGuard(ctx, key2, stat.mtimeMs, "editing");
+    const guard = checkStaleWriteGuard(ctx, key2, stat2.mtimeMs, "editing");
     if (guard) {
       return guard;
     }
@@ -14753,7 +15322,7 @@ ${memoryNearLimitNote(health)}`, data);
 
 // ../kernel/src/tools/search/glob-tool.ts
 import { z as z18 } from "zod";
-import path9 from "node:path";
+import path11 from "node:path";
 
 // ../kernel/src/tools/search/walker.ts
 var DEFAULT_IGNORED_DIRS = /* @__PURE__ */ new Set([
@@ -14847,7 +15416,7 @@ var globTool = {
       return errorResult3(`path does not exist: ${root}`);
     }
     if (!rootStat.isDirectory()) return errorResult3(`path is not a directory: ${root}`);
-    const realRoot = await checkRealTarget("Glob", path9.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
+    const realRoot = await checkRealTarget("Glob", path11.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
     if (!realRoot.ok) return errorResult3(realRoot.reason);
     let matcher;
     try {
@@ -14886,7 +15455,7 @@ var globTool = {
 
 // ../kernel/src/tools/search/grep-tool.ts
 import { z as z19 } from "zod";
-import path10 from "node:path";
+import path12 from "node:path";
 
 // ../kernel/src/tools/search/js-engine.ts
 var GREP_MAX_FILE_SIZE = 4 * 1024 * 1024;
@@ -15360,7 +15929,7 @@ var grepTool = {
       return finish(errorResult4(`path does not exist: ${root}`));
     }
     if (!rootStat.isDirectory()) return finish(errorResult4(`path is not a directory: ${root}`));
-    const realRoot = await checkRealTarget("Grep", path10.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
+    const realRoot = await checkRealTarget("Grep", path12.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
     if (!realRoot.ok) return finish(errorResult4(realRoot.reason));
     try {
       new RegExp(args.pattern, args.case_insensitive ? "i" : "");
@@ -15445,7 +16014,7 @@ var grepTool = {
 
 // ../kernel/src/tools/search/list-tool.ts
 import { z as z20 } from "zod";
-import path11 from "node:path";
+import path13 from "node:path";
 var LIST_MAX_ENTRIES = 500;
 var ListArgsSchema = z20.object({
   path: z20.string().min(1),
@@ -15475,7 +16044,7 @@ var listTool = {
   touchedPathsOf(args) {
     const parsed = ListArgsSchema.safeParse(args);
     if (!parsed.success || !isAbsolutePath(parsed.data.path)) return [];
-    return [path11.resolve(parsed.data.path)];
+    return [path13.resolve(parsed.data.path)];
   },
   async execute(args, ctx) {
     if (ctx.signal.aborted) return errorResult5("aborted");
@@ -15489,7 +16058,7 @@ var listTool = {
       return errorResult5(`path does not exist: ${root}`);
     }
     if (!rootStat.isDirectory()) return errorResult5(`path is not a directory: ${root}`);
-    const realRoot = await checkRealTarget("List", path11.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
+    const realRoot = await checkRealTarget("List", path13.resolve(root), { cwd: ctx.cwd, access: "read", fs: fs3 });
     if (!realRoot.ok) return errorResult5(realRoot.reason);
     let ignoreMatchers = [];
     try {
@@ -16020,7 +16589,7 @@ ${tail}`;
 
 // ../kernel/src/tools/shell/output-file.ts
 import { createWriteStream, mkdirSync } from "node:fs";
-import * as path12 from "node:path";
+import * as path14 from "node:path";
 var SHELL_OUTPUT_SPILL_THRESHOLD_CHARS = 5e4;
 var SHELL_OUTPUT_DIR_NAME = "shell-output";
 function sanitizeFileStem(stem) {
@@ -16029,7 +16598,7 @@ function sanitizeFileStem(stem) {
 }
 function shellOutputFilePath(sessionCwd, toolCallId) {
   const stem = toolCallId !== void 0 && toolCallId.trim().length > 0 ? sanitizeFileStem(toolCallId) : `shell-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
-  return path12.join(sessionCwd, ".tansr", SHELL_OUTPUT_DIR_NAME, `${stem}.log`);
+  return path14.join(sessionCwd, ".tansr", SHELL_OUTPUT_DIR_NAME, `${stem}.log`);
 }
 var ShellOutputSink = class {
   filePath;
@@ -16065,7 +16634,7 @@ var ShellOutputSink = class {
   forceOpen() {
     if (this.#stream !== void 0 || this.#writeError !== void 0 || this.#closed) return;
     try {
-      mkdirSync(path12.dirname(this.filePath), { recursive: true });
+      mkdirSync(path14.dirname(this.filePath), { recursive: true });
       const stream = createWriteStream(this.filePath, { encoding: "utf8" });
       stream.on("error", (err) => {
         this.#writeError = err.message;
@@ -17556,104 +18125,7 @@ function scrubSecrets(text, secrets) {
 }
 
 // ../kernel/src/tools/web/http-search-provider.ts
-var WEBSEARCH_ENDPOINT_VAR = "TANSR_WEBSEARCH_ENDPOINT";
-var WEBSEARCH_API_KEY_VAR = "TANSR_WEBSEARCH_API_KEY";
 var WEBSEARCH_RESPONSE_MAX_BYTES = 512 * 1024;
-var WEBSEARCH_PROVIDER_TIMEOUT_MS = 15e3;
-var defaultFetch2 = (url, init) => globalThis.fetch(url, init);
-function safeEndpointLabel(endpoint) {
-  try {
-    const u = new URL(endpoint);
-    return `${u.origin}${u.pathname}`;
-  } catch {
-    return "(invalid endpoint URL)";
-  }
-}
-function pickItems(payload) {
-  if (typeof payload !== "object" || payload === null) return [];
-  const results = payload.results;
-  if (!Array.isArray(results)) return [];
-  return results.filter(
-    (item) => typeof item === "object" && item !== null
-  );
-}
-function createHttpSearchProvider(options = {}) {
-  const env = options.env ?? process.env;
-  const endpoint = env[options.endpointVar ?? WEBSEARCH_ENDPOINT_VAR];
-  if (endpoint === void 0 || endpoint.trim() === "") return null;
-  const apiKey = env[options.apiKeyVar ?? WEBSEARCH_API_KEY_VAR];
-  const fetchImpl = options.fetchImpl ?? defaultFetch2;
-  const timeoutMs = options.timeoutMs ?? WEBSEARCH_PROVIDER_TIMEOUT_MS;
-  const endpointLabel = safeEndpointLabel(endpoint);
-  const scrub = (text) => scrubSecrets(text, [apiKey, endpoint]);
-  return {
-    name: options.name ?? "http",
-    async search(query2, context) {
-      const timeout = withTimeout(context.signal, timeoutMs);
-      try {
-        const headers = {
-          accept: "application/json",
-          "content-type": "application/json",
-          "user-agent": "tansr-websearch"
-        };
-        if (apiKey !== void 0 && apiKey !== "") {
-          headers["authorization"] = `Bearer ${apiKey}`;
-        }
-        const init = {
-          method: "POST",
-          signal: timeout.signal,
-          redirect: "manual",
-          headers,
-          body: JSON.stringify({ query: query2.query, max_results: query2.maxResults })
-        };
-        let response;
-        try {
-          response = await fetchImpl(endpoint, init);
-        } catch (err) {
-          if (timeout.signal.aborted || isAbortError(err)) {
-            throw new AbortError(timeout.signal.reason);
-          }
-          throw new Error(
-            scrub(
-              `search endpoint ${endpointLabel} is unreachable: ${err instanceof Error ? err.message : String(err)}`
-            )
-          );
-        }
-        const { bytes } = await readBodyWithLimit(
-          response,
-          WEBSEARCH_RESPONSE_MAX_BYTES,
-          timeout.signal
-        );
-        const bodyText = new TextDecoder("utf-8").decode(bytes);
-        if (response.status < 200 || response.status >= 300) {
-          const preview = scrub(bodyText.slice(0, 200));
-          throw new Error(
-            `search endpoint ${endpointLabel} returned HTTP ${response.status}${preview !== "" ? `: ${preview}` : ""}`
-          );
-        }
-        let payload;
-        try {
-          payload = JSON.parse(bodyText);
-        } catch {
-          throw new Error(`search endpoint ${endpointLabel} returned invalid JSON`);
-        }
-        const items = [];
-        for (const item of pickItems(payload)) {
-          if (typeof item.url !== "string" || item.url.trim() === "") continue;
-          const snippet = typeof item.snippet === "string" ? item.snippet : typeof item.content === "string" ? item.content : "";
-          items.push({
-            title: scrub(typeof item.title === "string" ? item.title : ""),
-            url: scrub(item.url),
-            snippet: scrub(snippet)
-          });
-        }
-        return items;
-      } finally {
-        timeout.release();
-      }
-    }
-  };
-}
 
 // ../kernel/src/tools/web/search-tool.ts
 import { z as z27 } from "zod";
@@ -18591,7 +19063,7 @@ function applyToolOverrides(filtered, overrides) {
 }
 
 // ../kernel/src/agents/subagent-memory-fence.ts
-import path13 from "node:path";
+import path15 from "node:path";
 function subagentMemoryFenceOf(ctx) {
   if (ctx === void 0 || ctx.dirs.length === 0) return void 0;
   return {
@@ -18606,7 +19078,7 @@ function writeTargetOf(args, cwd) {
   if (args === null || typeof args !== "object") return null;
   const raw = args.file_path;
   if (typeof raw !== "string" || raw.length === 0) return null;
-  return path13.isAbsolute(raw) ? path13.resolve(raw) : path13.resolve(cwd, raw);
+  return path15.isAbsolute(raw) ? path15.resolve(raw) : path15.resolve(cwd, raw);
 }
 function fencedSubagentWriteTool(tool, fence) {
   return {
@@ -18914,10 +19386,10 @@ async function runSubagent(options) {
 }
 
 // ../kernel/src/tools/task/background.ts
-import * as path14 from "node:path";
+import * as path16 from "node:path";
 var TASK_AGENT_OUTPUT_DIR_NAME = "agent-output";
 function taskAgentOutputFilePath(sessionCwd, agentId) {
-  return path14.join(sessionCwd, ".tansr", TASK_AGENT_OUTPUT_DIR_NAME, `${sanitizeFileStem(agentId)}.md`);
+  return path16.join(sessionCwd, ".tansr", TASK_AGENT_OUTPUT_DIR_NAME, `${sanitizeFileStem(agentId)}.md`);
 }
 function taskSettlementStopReason(reason, aborted) {
   if (aborted) return "aborted";
@@ -20167,7 +20639,7 @@ import { spawnSync as spawnSync2 } from "node:child_process";
 
 // ../kernel/src/tools/mcp/win32-spawn.ts
 import fs2 from "node:fs";
-import path15 from "node:path";
+import path17 from "node:path";
 var CMD_META_CHARS = /([()\][%!^"`<>&|;, *?])/g;
 var SPAWNABLE_EXTS = [".COM", ".EXE", ".BAT", ".CMD"];
 function escapeCmdCommand(command) {
@@ -20206,7 +20678,7 @@ function defaultFileExists(filePath) {
   }
 }
 function resolveCommandFile(command, env, cwd, fileExists) {
-  const w = path15.win32;
+  const w = path17.win32;
   const exts = spawnableExts(envLookup(env, "PATHEXT"));
   const bases = [];
   if (command.includes("/") || command.includes("\\")) {
@@ -20240,7 +20712,7 @@ function wrapWithComSpec(target, args, env) {
 function planStdioSpawn(command, args, options) {
   const platform = options.platform ?? process.platform;
   if (platform !== "win32") return { file: command, args };
-  const ext = path15.win32.extname(command).toUpperCase();
+  const ext = path17.win32.extname(command).toUpperCase();
   if (ext === ".EXE" || ext === ".COM") return { file: command, args };
   if (ext === ".CMD" || ext === ".BAT") return wrapWithComSpec(command, args, options.env);
   if (ext !== "") return { file: command, args };
@@ -20248,7 +20720,7 @@ function planStdioSpawn(command, args, options) {
   const fileExists = options.fileExists ?? defaultFileExists;
   const resolved = resolveCommandFile(command, options.env, cwd, fileExists);
   if (resolved === void 0) return { file: command, args };
-  const resolvedExt = path15.win32.extname(resolved).toUpperCase();
+  const resolvedExt = path17.win32.extname(resolved).toUpperCase();
   if (resolvedExt === ".CMD" || resolvedExt === ".BAT") {
     return wrapWithComSpec(resolved, args, options.env);
   }
@@ -20378,11 +20850,11 @@ function buildMcpCatalogSegment(servers) {
   if (text.length === 0) return null;
   return { text, cacheable: true, label: MCP_CATALOG_LABEL };
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function describeSchemaType(prop) {
-  if (!isRecord(prop)) return "any";
+  if (!isRecord2(prop)) return "any";
   if (Array.isArray(prop["enum"])) return "enum";
   const type = prop["type"];
   if (typeof type === "string") return type;
@@ -20393,7 +20865,7 @@ function describeSchemaType(prop) {
   return "any";
 }
 function summarizeMcpParams(inputSchema) {
-  const properties = isRecord(inputSchema["properties"]) ? inputSchema["properties"] : void 0;
+  const properties = isRecord2(inputSchema["properties"]) ? inputSchema["properties"] : void 0;
   if (properties === void 0 || Object.keys(properties).length === 0) {
     return "(parameters unspecified)";
   }
@@ -20549,14 +21021,14 @@ var SseParser = class {
 var JSONRPC_VERSION = "2.0";
 var JSONRPC_METHOD_NOT_FOUND = -32601;
 var JSONRPC_INTERNAL_ERROR = -32603;
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isValidId(value) {
   return typeof value === "string" || typeof value === "number" && Number.isFinite(value);
 }
 function classifyJsonRpcValue(value) {
-  if (!isRecord2(value)) return { ok: false, error: "invalid_message" };
+  if (!isRecord3(value)) return { ok: false, error: "invalid_message" };
   if (value["jsonrpc"] !== JSONRPC_VERSION) return { ok: false, error: "invalid_message" };
   const method = value["method"];
   if (typeof method === "string" && method.length > 0) {
@@ -20569,7 +21041,7 @@ function classifyJsonRpcValue(value) {
   if ("error" in value) {
     const err = value["error"];
     const idOk = value["id"] === null || isValidId(value["id"]);
-    if (!idOk || !isRecord2(err) || typeof err["code"] !== "number" || typeof err["message"] !== "string") {
+    if (!idOk || !isRecord3(err) || typeof err["code"] !== "number" || typeof err["message"] !== "string") {
       return { ok: false, error: "invalid_message" };
     }
     return { ok: true, kind: "error", message: value };
@@ -20612,14 +21084,14 @@ function buildErrorResponse(id, code, message, data) {
 // ../kernel/src/tools/mcp/stream-connection.ts
 var DEFAULT_HANDSHAKE_TIMEOUT_MS = 1e4;
 var DEFAULT_REQUEST_TIMEOUT_MS = 6e4;
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function createDefaultServerRequestHandler(serverName, onEvent) {
   return (method, params) => {
     if (method === "ping") return Promise.resolve({ result: {} });
     if (method === "elicitation/create") {
-      const p = isRecord3(params) ? params : {};
+      const p = isRecord4(params) ? params : {};
       const mode = p["mode"] === "url" ? "url" : "form";
       const message = typeof p["message"] === "string" ? p["message"].slice(0, 200) : void 0;
       onEvent?.({
@@ -20868,7 +21340,7 @@ var StreamMcpConnection = class {
   }
   #handleServerNotification(notification) {
     if (notification.method === "notifications/message") {
-      const p = isRecord3(notification.params) ? notification.params : {};
+      const p = isRecord4(notification.params) ? notification.params : {};
       const level = typeof p["level"] === "string" ? p["level"] : "info";
       const data = p["data"];
       const message = typeof data === "string" ? data : data !== void 0 ? JSON.stringify(data) : "";
@@ -20882,7 +21354,7 @@ var StreamMcpConnection = class {
   }
 };
 function validateInitializeResult(serverName, result) {
-  if (!isRecord3(result)) {
+  if (!isRecord4(result)) {
     throw new McpError("handshake_failed", "MCP initialize returned a non-object result.", {
       server: serverName
     });
@@ -20907,8 +21379,8 @@ function validateInitializeResult(serverName, result) {
     );
   }
   const rawInfo = result["serverInfo"];
-  const serverInfo = isRecord3(rawInfo) && typeof rawInfo["name"] === "string" && typeof rawInfo["version"] === "string" ? { name: rawInfo["name"], version: rawInfo["version"] } : void 0;
-  const capabilities = isRecord3(result["capabilities"]) ? result["capabilities"] : {};
+  const serverInfo = isRecord4(rawInfo) && typeof rawInfo["name"] === "string" && typeof rawInfo["version"] === "string" ? { name: rawInfo["name"], version: rawInfo["version"] } : void 0;
+  const capabilities = isRecord4(result["capabilities"]) ? result["capabilities"] : {};
   const rawInstructions = result["instructions"];
   const instructions = typeof rawInstructions === "string" && rawInstructions.trim().length > 0 ? capMcpInstructions(rawInstructions).text : void 0;
   return {
@@ -21112,7 +21584,7 @@ ${tail}`, {
 }
 
 // ../kernel/src/tools/mcp/http-transport.ts
-var defaultFetch3 = (url, init) => globalThis.fetch(url, init);
+var defaultFetch2 = (url, init) => globalThis.fetch(url, init);
 var SESSION_HEADER = "mcp-session-id";
 var PROTOCOL_VERSION_HEADER = "mcp-protocol-version";
 var CANCEL_NOTIFY_TIMEOUT_MS = 3e3;
@@ -21139,7 +21611,7 @@ var HttpMcpConnection = class {
     this.serverName = options.serverName;
     this.#url = config.url;
     this.#configHeaders = config.headers ?? {};
-    this.#fetchImpl = options.fetchImpl ?? defaultFetch3;
+    this.#fetchImpl = options.fetchImpl ?? defaultFetch2;
     this.#onEvent = options.onEvent;
     this.#defaultRequestTimeoutMs = options.defaultRequestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     this.#serverRequestHandler = options.onServerRequest ?? createDefaultServerRequestHandler(options.serverName, options.onEvent);
@@ -21504,7 +21976,7 @@ async function connectHttpMcpServer(config, options) {
 }
 
 // ../kernel/src/tools/mcp/bridge.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 import { z as z33 } from "zod";
 var MCP_TOOL_NAME_PREFIX = "mcp__";
 var MCP_REMOTE_TOOL_NAME_RE = /^[A-Za-z0-9_.-]{1,128}$/;
@@ -21512,7 +21984,7 @@ var MAX_LIST_PAGES = 64;
 function buildMcpToolName(serverName, toolName2) {
   const full = `${MCP_TOOL_NAME_PREFIX}${serverName}__${toolName2}`;
   if (full.length <= MCP_BRIDGED_TOOL_NAME_MAX_CHARS) return full;
-  const hash = createHash5("sha256").update(full, "utf8").digest("hex").slice(0, MCP_NAME_FOLD_HASH_CHARS);
+  const hash = createHash7("sha256").update(full, "utf8").digest("hex").slice(0, MCP_NAME_FOLD_HASH_CHARS);
   const prefix = `${MCP_TOOL_NAME_PREFIX}${serverName}__`;
   const tailBudget = MCP_BRIDGED_TOOL_NAME_MAX_CHARS - prefix.length;
   if (tailBudget >= MCP_NAME_FOLD_HASH_CHARS + 1) {
@@ -21522,7 +21994,7 @@ function buildMcpToolName(serverName, toolName2) {
   const head = full.slice(0, MCP_BRIDGED_TOOL_NAME_MAX_CHARS - MCP_NAME_FOLD_HASH_CHARS - 1);
   return `${head}_${hash}`;
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function discoverMcpTools(connection, opts = {}) {
@@ -21536,9 +22008,9 @@ async function discoverMcpTools(connection, opts = {}) {
       cursor !== void 0 ? { cursor } : {},
       opts
     );
-    if (!isRecord4(result) || !Array.isArray(result["tools"])) break;
+    if (!isRecord5(result) || !Array.isArray(result["tools"])) break;
     for (const raw of result["tools"]) {
-      if (!isRecord4(raw) || typeof raw["name"] !== "string") continue;
+      if (!isRecord5(raw) || typeof raw["name"] !== "string") continue;
       const name = raw["name"];
       if (!MCP_REMOTE_TOOL_NAME_RE.test(name)) {
         invalidNames.push(name.slice(0, 160));
@@ -21549,7 +22021,7 @@ async function discoverMcpTools(connection, opts = {}) {
       tools.push({
         name,
         description: typeof raw["description"] === "string" ? raw["description"] : "",
-        inputSchema: isRecord4(raw["inputSchema"]) ? raw["inputSchema"] : { type: "object" }
+        inputSchema: isRecord5(raw["inputSchema"]) ? raw["inputSchema"] : { type: "object" }
       });
     }
     const next = result["nextCursor"];
@@ -21572,7 +22044,7 @@ function buildLooseArgsSchema(inputSchema) {
   });
 }
 function mapCallResultToToolResult(serverName, toolName2, raw) {
-  if (!isRecord4(raw)) {
+  if (!isRecord5(raw)) {
     return {
       content: [{ t: "text", text: "MCP server returned a malformed tools/call result." }],
       isError: true,
@@ -21586,11 +22058,11 @@ function mapCallResultToToolResult(serverName, toolName2, raw) {
     };
   }
   const isError = raw["isError"] === true;
-  const structuredContent = isRecord4(raw["structuredContent"]) ? raw["structuredContent"] : void 0;
+  const structuredContent = isRecord5(raw["structuredContent"]) ? raw["structuredContent"] : void 0;
   const blocks = Array.isArray(raw["content"]) ? raw["content"] : [];
   const content = [];
   for (const block of blocks) {
-    if (!isRecord4(block)) continue;
+    if (!isRecord5(block)) continue;
     const type = block["type"];
     if (type === "text" && typeof block["text"] === "string") {
       content.push({ t: "text", text: block["text"] });
@@ -21612,7 +22084,7 @@ function mapCallResultToToolResult(serverName, toolName2, raw) {
       content.push({ t: "text", text: `[resource link]${name} ${block["uri"]}${description}` });
       continue;
     }
-    if (type === "resource" && isRecord4(block["resource"])) {
+    if (type === "resource" && isRecord5(block["resource"])) {
       const resource = block["resource"];
       const uri = typeof resource["uri"] === "string" ? resource["uri"] : "(unknown uri)";
       if (typeof resource["text"] === "string") {
@@ -21893,7 +22365,7 @@ function extractMcpServersSection(layersDescending, addDiagnostic) {
 }
 
 // ../kernel/src/tools/mcp/catalog-store.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var MCP_CATALOG_STORE_VERSION = 1;
 function stableStringify2(value) {
   if (value === null || typeof value !== "object") {
@@ -21907,10 +22379,10 @@ function stableStringify2(value) {
   return `{${parts.join(",")}}`;
 }
 function computeMcpServerConfigFingerprint(config) {
-  return createHash6("sha256").update(stableStringify2(config), "utf8").digest("hex");
+  return createHash8("sha256").update(stableStringify2(config), "utf8").digest("hex");
 }
 function computeMcpToolDefinitionHash(tool) {
-  return createHash6("sha256").update(
+  return createHash8("sha256").update(
     stableStringify2({
       name: tool.name,
       description: tool.description,
@@ -21988,14 +22460,14 @@ function resolveEnvRefs(record, baseEnv) {
   }
   return { resolved, missing };
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function createElicitationAwareHandler(serverName, onElicitation, onEvent) {
   const fallback = createDefaultServerRequestHandler(serverName, onEvent);
   return async (method, params) => {
     if (method !== "elicitation/create") return fallback(method, params);
-    const p = isRecord5(params) ? params : {};
+    const p = isRecord6(params) ? params : {};
     const mode = p["mode"] === "url" ? "url" : "form";
     try {
       const response = await onElicitation({
@@ -22549,10 +23021,10 @@ async function initMcpLazyManager(toolset, servers, options = {}) {
 }
 
 // ../kernel/src/config/load.ts
-import os2 from "node:os";
+import os3 from "node:os";
 
 // ../kernel/src/hooks/config.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 
 // ../kernel/src/config/merge.ts
 var UNSAFE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
@@ -22582,12 +23054,12 @@ function deepMergeRawLayers(rawsAscending) {
   }
   return structuredClone(acc);
 }
-function displayPath2(path20) {
-  return path20.map(String).join(".");
+function displayPath2(path23) {
+  return path23.map(String).join(".");
 }
-function getAtPath(root, path20) {
+function getAtPath(root, path23) {
   let cur = root;
-  for (const seg of path20) {
+  for (const seg of path23) {
     if (typeof seg === "number") {
       if (!Array.isArray(cur) || seg < 0 || seg >= cur.length) return void 0;
       cur = cur[seg];
@@ -22598,11 +23070,11 @@ function getAtPath(root, path20) {
   }
   return cur;
 }
-function hasPath(root, path20) {
-  if (path20.length === 0) return true;
+function hasPath(root, path23) {
+  if (path23.length === 0) return true;
   let cur = root;
-  for (let i = 0; i < path20.length; i++) {
-    const seg = path20[i];
+  for (let i = 0; i < path23.length; i++) {
+    const seg = path23[i];
     if (typeof seg === "number") {
       if (!Array.isArray(cur) || seg < 0 || seg >= cur.length) return false;
       cur = cur[seg];
@@ -22613,25 +23085,25 @@ function hasPath(root, path20) {
   }
   return true;
 }
-function sanitizeDropPath(root, path20) {
+function sanitizeDropPath(root, path23) {
   let cur = root;
-  for (let i = 0; i < path20.length; i++) {
-    const seg = path20[i];
+  for (let i = 0; i < path23.length; i++) {
+    const seg = path23[i];
     const next = getAtPath(cur, [seg]);
-    if (Array.isArray(next) && i < path20.length - 1) {
-      return path20.slice(0, i + 1);
+    if (Array.isArray(next) && i < path23.length - 1) {
+      return path23.slice(0, i + 1);
     }
-    if (typeof path20[i + 1] === "number") {
-      return path20.slice(0, i + 1);
+    if (typeof path23[i + 1] === "number") {
+      return path23.slice(0, i + 1);
     }
     cur = next;
   }
-  return path20;
+  return path23;
 }
-function deletePath(root, path20) {
-  if (path20.length === 0) return;
-  const parent = getAtPath(root, path20.slice(0, -1));
-  const leaf = path20[path20.length - 1];
+function deletePath(root, path23) {
+  if (path23.length === 0) return;
+  const parent = getAtPath(root, path23.slice(0, -1));
+  const leaf = path23[path23.length - 1];
   if (isPlainObject2(parent) && typeof leaf === "string") {
     delete parent[leaf];
   }
@@ -22721,16 +23193,16 @@ function canonicalJson(value) {
   return JSON.stringify(value) ?? "null";
 }
 function configHash8(dedupeKey) {
-  return createHash7("sha256").update(dedupeKey, "utf8").digest("hex").slice(0, 8);
+  return createHash9("sha256").update(dedupeKey, "utf8").digest("hex").slice(0, 8);
 }
-function parseExecutor(value, layer, path20, file, addDiagnostic) {
+function parseExecutor(value, layer, path23, file, addDiagnostic) {
   const fileRef = file !== void 0 ? { file } : {};
   const invalid = (params) => {
     addDiagnostic({
       severity: "error",
       code: "hook_invalid_value",
       layer,
-      path: path20,
+      path: path23,
       ...fileRef,
       params
     });
@@ -22778,7 +23250,7 @@ function parseExecutor(value, layer, path20, file, addDiagnostic) {
         severity: "error",
         code: "hook_url_invalid",
         layer,
-        path: `${path20}.url`,
+        path: `${path23}.url`,
         ...fileRef,
         params: { reason: "unparsable" }
       });
@@ -22789,7 +23261,7 @@ function parseExecutor(value, layer, path20, file, addDiagnostic) {
         severity: "error",
         code: "hook_url_invalid",
         layer,
-        path: `${path20}.url`,
+        path: `${path23}.url`,
         ...fileRef,
         params: { reason: "unsupported_protocol", protocol: parsed.protocol }
       });
@@ -23380,7 +23852,7 @@ function migrateLayerRaw(raw) {
 
 // ../kernel/src/config/paths.ts
 import { promises as fsPromises } from "node:fs";
-import path16 from "node:path";
+import path18 from "node:path";
 var SETTINGS_FILE_NAME = "settings.json";
 var LOCAL_SETTINGS_FILE_NAME = "settings.local.json";
 var TANSR_DIR_NAME = ".tansr";
@@ -23407,27 +23879,27 @@ function normalizeForCompare(p, platform) {
 function defaultManagedPaths(platform, env) {
   if (platform === "win32") {
     const programData = readTrimmedEnv2(env, "PROGRAMDATA") ?? "C:\\ProgramData";
-    return [path16.join(programData, "tansr", MANAGED_SETTINGS_FILE_NAME)];
+    return [path18.join(programData, "tansr", MANAGED_SETTINGS_FILE_NAME)];
   }
-  return [path16.posix.join("/etc", "tansr", MANAGED_SETTINGS_FILE_NAME)];
+  return [path18.posix.join("/etc", "tansr", MANAGED_SETTINGS_FILE_NAME)];
 }
 async function discoverLayerFiles(options) {
   const { fs: fs3, env, platform } = options;
   const configDirOverride = readTrimmedEnv2(env, "TANSR_CONFIG_DIR");
-  const userDir = configDirOverride ?? path16.join(options.homedir, TANSR_DIR_NAME);
-  const userFile = path16.join(userDir, SETTINGS_FILE_NAME);
-  const homeKey = normalizeForCompare(path16.resolve(options.homedir), platform);
+  const userDir = configDirOverride ?? path18.join(options.homedir, TANSR_DIR_NAME);
+  const userFile = path18.join(userDir, SETTINGS_FILE_NAME);
+  const homeKey = normalizeForCompare(path18.resolve(options.homedir), platform);
   let projectRoot;
-  const boundary = options.boundary === void 0 ? void 0 : normalizeForCompare(path16.resolve(options.boundary), platform);
-  let cursor = path16.resolve(options.cwd);
+  const boundary = options.boundary === void 0 ? void 0 : normalizeForCompare(path18.resolve(options.boundary), platform);
+  let cursor = path18.resolve(options.cwd);
   for (let depth = 0; depth < 256; depth++) {
     const homeAnchorInvisible = normalizeForCompare(cursor, platform) === homeKey;
-    if (!homeAnchorInvisible && await fs3.directoryExists(path16.join(cursor, TANSR_DIR_NAME))) {
+    if (!homeAnchorInvisible && await fs3.directoryExists(path18.join(cursor, TANSR_DIR_NAME))) {
       projectRoot = cursor;
       break;
     }
     if (boundary !== void 0 && normalizeForCompare(cursor, platform) === boundary) break;
-    const parent = path16.dirname(cursor);
+    const parent = path18.dirname(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
@@ -23436,8 +23908,8 @@ async function discoverLayerFiles(options) {
     managedCandidates,
     ...projectRoot !== void 0 ? {
       projectRoot,
-      projectSharedFile: path16.join(projectRoot, TANSR_DIR_NAME, SETTINGS_FILE_NAME),
-      projectLocalFile: path16.join(projectRoot, TANSR_DIR_NAME, LOCAL_SETTINGS_FILE_NAME)
+      projectSharedFile: path18.join(projectRoot, TANSR_DIR_NAME, SETTINGS_FILE_NAME),
+      projectLocalFile: path18.join(projectRoot, TANSR_DIR_NAME, LOCAL_SETTINGS_FILE_NAME)
     } : {},
     userFile
   };
@@ -23994,8 +24466,8 @@ function issueExpected(issue) {
       return issue.code;
   }
 }
-function attributeLayer(layersDescending, path20) {
-  return layersDescending.find((entry) => hasPath(entry.raw, path20));
+function attributeLayer(layersDescending, path23) {
+  return layersDescending.find((entry) => hasPath(entry.raw, path23));
 }
 function scanUnknownKeys(raw, parsed, pathSoFar, layersDescending, addDiagnostic) {
   if (!isPlainObject2(raw) || !isPlainObject2(parsed)) return;
@@ -24168,7 +24640,7 @@ async function loadConfig(options = {}) {
   const env = options.env ?? process.env;
   const discovered = await discoverLayerFiles({
     cwd: options.cwd ?? process.cwd(),
-    homedir: options.homedir ?? os2.homedir(),
+    homedir: options.homedir ?? os3.homedir(),
     env,
     fs: fs3,
     platform: options.platform ?? process.platform,
@@ -24248,9 +24720,9 @@ var OPEN_FENCE_RE = /^---[ \t]*\r?\n/;
 var CLOSE_FENCE_RE = /^---[ \t]*$/;
 function splitFrontmatterBlock(rawText) {
   const text = stripBom2(rawText);
-  const open = OPEN_FENCE_RE.exec(text);
-  if (open === null) return null;
-  const rest = text.slice(open[0].length);
+  const open4 = OPEN_FENCE_RE.exec(text);
+  if (open4 === null) return null;
+  const rest = text.slice(open4[0].length);
   const lines = rest.split("\n");
   for (let i = 0; i < lines.length; i++) {
     const line = (lines[i] ?? "").replace(/\r$/, "");
@@ -25089,8 +25561,8 @@ var HookEngine = class {
 
 // ../kernel/src/skills/discover.ts
 import { promises as fsPromises2 } from "node:fs";
-import os3 from "node:os";
-import path17 from "node:path";
+import os4 from "node:os";
+import path19 from "node:path";
 
 // ../kernel/src/skills/types.ts
 var SKILLS_DIR_NAME = "skills";
@@ -25310,8 +25782,8 @@ async function scanFileSource(source, skillsDir, fs3, diagnostics) {
   const seen = /* @__PURE__ */ new Set();
   for (const dirName of [...subdirs].sort()) {
     if (dirName.startsWith(".") || dirName.startsWith("_")) continue;
-    const dir = path17.join(skillsDir, dirName);
-    const file = path17.join(dir, SKILL_FILE_NAME);
+    const dir = path19.join(skillsDir, dirName);
+    const file = path19.join(dir, SKILL_FILE_NAME);
     if (!SKILL_NAME_RE.test(dirName)) {
       diagnostics.push({ severity: "warning", code: "name_invalid", source, skill: dirName, file });
       continue;
@@ -25358,9 +25830,9 @@ async function discoverSkills(options = {}) {
   const fs3 = options.fs ?? defaultSkillsFileSystem();
   const env = options.env ?? process.env;
   const platform = options.platform ?? process.platform;
-  const homedir = options.homedir ?? os3.homedir();
+  const homedir = options.homedir ?? os4.homedir();
   const cwd = options.cwd ?? process.cwd();
-  const explicitRoot = options.projectRoot === void 0 ? void 0 : path17.resolve(options.projectRoot);
+  const explicitRoot = options.projectRoot === void 0 ? void 0 : path19.resolve(options.projectRoot);
   const discovered = await discoverLayerFiles({
     cwd: explicitRoot ?? cwd,
     homedir,
@@ -25371,13 +25843,13 @@ async function discoverSkills(options = {}) {
     ...explicitRoot !== void 0 ? { boundary: explicitRoot } : options.boundary !== void 0 ? { boundary: options.boundary } : {}
   });
   const builtinEntries = collectBuiltin(options.builtinSkills ?? [], diagnostics);
-  const userSkillsDir = path17.join(path17.dirname(discovered.userFile), SKILLS_DIR_NAME);
+  const userSkillsDir = path19.join(path19.dirname(discovered.userFile), SKILLS_DIR_NAME);
   const userOutcome = await scanFileSource("user", userSkillsDir, fs3, diagnostics);
   const projectRoot = explicitRoot ?? discovered.projectRoot;
   let projectSkillsDir;
   let projectOutcome = { status: "missing" };
   if (projectRoot !== void 0) {
-    projectSkillsDir = path17.join(projectRoot, TANSR_DIR_NAME, SKILLS_DIR_NAME);
+    projectSkillsDir = path19.join(projectRoot, TANSR_DIR_NAME, SKILLS_DIR_NAME);
     projectOutcome = await scanFileSource("project", projectSkillsDir, fs3, diagnostics);
   }
   const userEntries = userOutcome.status === "scanned" ? userOutcome.entries : [];
@@ -25451,7 +25923,7 @@ async function discoverSkills(options = {}) {
 }
 
 // ../kernel/src/skills/registry.ts
-import path18 from "node:path";
+import path20 from "node:path";
 function errCode2(err) {
   if (err !== null && typeof err === "object" && "code" in err) {
     const code = err.code;
@@ -25514,7 +25986,7 @@ var SkillRegistry = class {
   /** 技能目录绝对路径(正文相对引用锚点;builtin 无) */
   static baseDirOf(entry) {
     if (entry.dir !== void 0) return entry.dir;
-    if (entry.file !== void 0) return path18.dirname(entry.file);
+    if (entry.file !== void 0) return path20.dirname(entry.file);
     return void 0;
   }
 };
@@ -25718,9 +26190,9 @@ function defineSkill(options) {
   ];
   return { name: options.name, content: lines.join("\n") };
 }
-var NO_DISCOVERY_ROOT = path19.resolve(path19.sep, ".tansr-sdk-no-discovery");
+var NO_DISCOVERY_ROOT = path21.resolve(path21.sep, ".tansr-sdk-no-discovery");
 function noDiscoveryFs(inner) {
-  const inVoid = (target) => path19.resolve(target).startsWith(NO_DISCOVERY_ROOT);
+  const inVoid = (target) => path21.resolve(target).startsWith(NO_DISCOVERY_ROOT);
   const enoent = (target) => {
     const err = new Error(`ENOENT: no such file or directory ${target}`);
     err.code = "ENOENT";
@@ -25734,7 +26206,7 @@ function noDiscoveryFs(inner) {
 }
 async function assembleSdkSkills(options) {
   const fs3 = noDiscoveryFs(options.fs ?? defaultSkillsFileSystem());
-  const dirs = (options.dirs ?? []).map((dir) => path19.resolve(dir));
+  const dirs = (options.dirs ?? []).map((dir) => path21.resolve(dir));
   for (const dir of dirs) {
     if (!await fs3.directoryExists(dir)) {
       throw new TansrSdkError(
@@ -27870,7 +28342,7 @@ var OpenAIResponsesAdapter = class {
 };
 
 // ../providers/src/retry/attempt-observer.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 var PROVIDER_CALL_META_FIELD = "callMeta";
 function providerCallMetaOf(options) {
   if (options === void 0) return void 0;
@@ -27899,12 +28371,12 @@ function endpointKeyOf(baseUrl) {
   let normalized;
   try {
     const url = new URL(baseUrl);
-    const path20 = url.pathname.replace(/\/+$/, "");
-    normalized = `${url.protocol}//${url.host}${path20}`.toLowerCase();
+    const path23 = url.pathname.replace(/\/+$/, "");
+    normalized = `${url.protocol}//${url.host}${path23}`.toLowerCase();
   } catch {
     normalized = baseUrl.trim().replace(/\/+$/, "").toLowerCase();
   }
-  return createHash8("sha256").update(normalized, "utf8").digest("hex").slice(0, 16);
+  return createHash10("sha256").update(normalized, "utf8").digest("hex").slice(0, 16);
 }
 function safeAttemptCall(fn) {
   if (fn === void 0) return;
@@ -28041,14 +28513,14 @@ function sendableTwpReasoningOff(features) {
 }
 
 // ../providers/src/twp/signing.ts
-import { createHash as createHash9, createHmac, randomBytes } from "node:crypto";
+import { createHash as createHash11, createHmac, randomBytes } from "node:crypto";
 var TWP_SIGNING_ALGORITHM = "TWP1-HMAC-SHA256";
 var TWP_NONCE_LENGTH = 24;
 function deriveTwpSigningKey(secretKey) {
-  return createHash9("sha256").update(secretKey, "utf8").digest();
+  return createHash11("sha256").update(secretKey, "utf8").digest();
 }
 function sha256Hex(data) {
-  return createHash9("sha256").update(typeof data === "string" ? Buffer.from(data, "utf8") : data).digest("hex");
+  return createHash11("sha256").update(typeof data === "string" ? Buffer.from(data, "utf8") : data).digest("hex");
 }
 function generateTwpNonce(random = randomBytes) {
   return random(TWP_NONCE_LENGTH / 2).toString("hex");
@@ -28290,11 +28762,11 @@ function twpHttpStatusToIR(status, bodyText) {
   if (status >= 500) return { kind: "server", message, recoverable: true };
   return { kind: "invalid_request", message, recoverable: false };
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function twpNonStreamToEvents(raw, fallbackModel) {
-  if (!isRecord6(raw)) {
+  if (!isRecord7(raw)) {
     return [
       {
         t: "error",
@@ -28312,7 +28784,7 @@ function twpNonStreamToEvents(raw, fallbackModel) {
   const blocks = Array.isArray(raw["blocks"]) ? raw["blocks"] : [];
   let index = 0;
   for (const rawBlock of blocks) {
-    if (!isRecord6(rawBlock)) continue;
+    if (!isRecord7(rawBlock)) continue;
     if (rawBlock["t"] === "text" && typeof rawBlock["v"] === "string") {
       out.push({ t: "block_start", index, block: { t: "text", text: rawBlock["v"] } });
       out.push({ t: "block_stop", index });
@@ -28332,7 +28804,7 @@ function twpNonStreamToEvents(raw, fallbackModel) {
       index += 1;
     }
   }
-  const usage = isRecord6(raw["usage"]) ? twpUsageToIR(parseTwpUsage(raw["usage"])) : void 0;
+  const usage = isRecord7(raw["usage"]) ? twpUsageToIR(parseTwpUsage(raw["usage"])) : void 0;
   out.push({
     t: "message_stop",
     stopReason: mapTwpStop(typeof raw["stop"] === "string" ? raw["stop"] : void 0),
@@ -28341,7 +28813,7 @@ function twpNonStreamToEvents(raw, fallbackModel) {
   return out;
 }
 function twpNonStreamUsageFrame(raw) {
-  if (!isRecord6(raw) || !isRecord6(raw["usage"])) return null;
+  if (!isRecord7(raw) || !isRecord7(raw["usage"])) return null;
   return parseTwpUsage(raw["usage"]);
 }
 
@@ -29023,9 +29495,9 @@ var MissingApiKeyError = class extends ProviderRegistryError {
 var CyclicFallbackError = class extends ProviderRegistryError {
   /** 成环路径,末项为再次出现的别名,如 ['main','fast','main'] */
   path;
-  constructor(path20) {
-    super("cyclic_fallback", `Cyclic fallback chain: ${path20.join(" -> ")}`);
-    this.path = path20;
+  constructor(path23) {
+    super("cyclic_fallback", `Cyclic fallback chain: ${path23.join(" -> ")}`);
+    this.path = path23;
   }
 };
 
@@ -29508,9 +29980,9 @@ function pushUnique(out, seen, resolved) {
   seen.add(dedupeKey);
   out.push(resolved);
 }
-function expandInto(config, alias, path20, out, seen) {
-  if (path20.includes(alias)) throw new CyclicFallbackError([...path20, alias]);
-  const nextPath = [...path20, alias];
+function expandInto(config, alias, path23, out, seen) {
+  if (path23.includes(alias)) throw new CyclicFallbackError([...path23, alias]);
+  const nextPath = [...path23, alias];
   pushUnique(out, seen, resolveAliasOrRef(config, alias));
   for (const entry of config.fallbacks[alias] ?? []) {
     if (entry.includes("/")) {
@@ -30337,8 +30809,10 @@ var AppQuotaSchema = z41.object({
 import { z as z42 } from "zod";
 var IMAGEGEN_TOOL_MAX_N = 4;
 var ImageGenArgsSchema = z42.object({
-  model: z42.string().min(1).describe(
-    "Image model reference from the app platform config (ask the app developer / see app docs for available names)."
+  // S-G1(媒体池化顺位取用):Optional——缺席即不发 model 位,网关按授权集顺位
+  // 第一生效(与 bundle platformModels.imageGen 首行恒同);点名限集内(工具描述自列)。
+  model: z42.string().min(1).optional().describe(
+    "Image model name from the authorized set listed in this tool description. Omit to use the default (the first authorized model)."
   ),
   prompt: z42.string().refine((s) => s.trim().length > 0, { message: "prompt must be a non-empty string" }).describe("Positive prompt describing the desired image content, style and composition."),
   negativePrompt: z42.string().min(1).max(500).optional().describe("Negative prompt: content to keep out of the image."),
@@ -30368,23 +30842,34 @@ function hintOf(code) {
   }
   return "";
 }
+function authorizedModelsNote(models) {
+  if (models === void 0) {
+    return ' Omit "model" to use the app default, or ask the app developer for authorized model names.';
+  }
+  if (models.length === 0) {
+    return " The platform has no image model configured for this app yet — tell the user instead of retrying or guessing model names.";
+  }
+  const listed = models.map((m) => m.displayName !== m.model ? `${m.model} (${m.displayName})` : m.model).join(", ");
+  return ` Authorized image models (omit "model" to use the first as default): ${listed}.`;
+}
 function createImageGenTool(options) {
   const base = options.baseUrl.replace(/\/+$/, "");
   const fetchImpl = options.fetchImpl ?? fetch;
   const token = options.token;
   return {
     name: "ImageGen",
-    description: "Generates images from a text prompt via the tansr platform (ring-3 hosted capability; the platform calls the image provider and bills the app per generated image). Returns image URLs that stay valid for roughly 24 hours — surface them to the user promptly. Requires the app to have the imageGen platform capability enabled.",
-    shortDescription: "Generate images from a prompt via the tansr platform (billed per image). Args: model, prompt, negativePrompt?, size?, n?, seed?.",
+    description: "Generates images from a text prompt via the tansr platform (ring-3 hosted capability; the platform calls the image provider and bills the app per generated image). Returns image URLs that stay valid for roughly 24 hours — surface them to the user promptly. Requires the app to have the imageGen platform capability enabled." + authorizedModelsNote(options.models),
+    shortDescription: "Generate images from a prompt via the tansr platform (billed per image). Args: model?, prompt, negativePrompt?, size?, n?, seed?.",
     inputSchema: ImageGenArgsSchema,
     isReadOnly: false,
     isConcurrencySafe: false,
     async execute(args, ctx) {
+      const modelRef = args.model ?? "(default)";
       if (ctx.signal.aborted) {
-        return errorResult13("Tool execution was aborted.", args.model);
+        return errorResult13("Tool execution was aborted.", modelRef);
       }
       const payload = {
-        model: args.model,
+        ...args.model !== void 0 ? { model: args.model } : {},
         prompt: args.prompt,
         ...args.negativePrompt !== void 0 ? { negativePrompt: args.negativePrompt } : {},
         ...args.size !== void 0 ? { size: args.size } : {},
@@ -30404,9 +30889,9 @@ function createImageGenTool(options) {
           signal: ctx.signal
         });
       } catch (err) {
-        if (ctx.signal.aborted) return errorResult13("Tool execution was aborted.", args.model);
+        if (ctx.signal.aborted) return errorResult13("Tool execution was aborted.", modelRef);
         const message = err instanceof Error ? err.message : String(err);
-        return errorResult13(`Image generation request failed to reach the platform: ${message}`, args.model);
+        return errorResult13(`Image generation request failed to reach the platform: ${message}`, modelRef);
       }
       let raw = null;
       try {
@@ -30418,17 +30903,18 @@ function createImageGenTool(options) {
         const envelope = raw ?? {};
         const code = typeof envelope.error?.code === "string" ? envelope.error.code : `http_${response.status}`;
         const message = typeof envelope.error?.message === "string" ? envelope.error.message : "request rejected";
-        return errorResult13(`Image generation failed (${code}): ${message}.${hintOf(code)}`, args.model, code);
+        return errorResult13(`Image generation failed (${code}): ${message}.${hintOf(code)}`, modelRef, code);
       }
       const body = raw ?? {};
       const images = Array.isArray(body.images) ? body.images.map((item) => typeof item.url === "string" ? { url: item.url } : null).filter((item) => item !== null) : [];
       const imageCount = typeof body.imageCount === "number" ? body.imageCount : images.length;
       if (images.length === 0) {
-        return errorResult13("Image generation returned no image URL (unexpected platform response).", args.model);
+        return errorResult13("Image generation returned no image URL (unexpected platform response).", modelRef);
       }
-      const data = { model: args.model, images, imageCount };
+      const resolvedModel = typeof body.model === "string" && body.model !== "" ? body.model : modelRef;
+      const data = { model: resolvedModel, images, imageCount };
       const lines = [
-        `Generated ${imageCount} image(s) with model ${args.model} (billed per image).`,
+        `Generated ${imageCount} image(s) with model ${resolvedModel} (billed per image).`,
         "Image URLs (valid ~24h; surface or persist promptly):",
         ...images.map((img, i) => `${i + 1}. ${img.url}`)
       ];
@@ -30441,8 +30927,10 @@ function createImageGenTool(options) {
 import { z as z43 } from "zod";
 var VIDEOGEN_TOOL_MAX_DURATION = 30;
 var VideoGenArgsSchema = z43.object({
-  model: z43.string().min(1).describe(
-    "Video model reference from the app platform config (ask the app developer / see app docs for available names)."
+  // S-G1(媒体池化顺位取用):Optional——缺席即不发 model 位,网关按授权集顺位
+  // 第一生效(与 bundle platformModels.videoGen 首行恒同);点名限集内(工具描述自列)。
+  model: z43.string().min(1).optional().describe(
+    "Video model name from the authorized set listed in this tool description. Omit to use the default (the first authorized model)."
   ),
   prompt: z43.string().refine((s) => s.trim().length > 0, { message: "prompt must be a non-empty string" }).describe("Positive prompt describing the desired video content, motion, style and camera work."),
   negativePrompt: z43.string().min(1).max(500).optional().describe("Negative prompt: content to keep out of the video."),
@@ -30480,23 +30968,34 @@ function hintOf2(code) {
   }
   return "";
 }
+function authorizedModelsNote2(models) {
+  if (models === void 0) {
+    return ' Omit "model" to use the app default, or ask the app developer for authorized model names.';
+  }
+  if (models.length === 0) {
+    return " The platform has no video model configured for this app yet — tell the user instead of retrying or guessing model names.";
+  }
+  const listed = models.map((m) => m.displayName !== m.model ? `${m.model} (${m.displayName})` : m.model).join(", ");
+  return ` Authorized video models (omit "model" to use the first as default): ${listed}.`;
+}
 function createVideoGenTool(options) {
   const base = options.baseUrl.replace(/\/+$/, "");
   const fetchImpl = options.fetchImpl ?? fetch;
   const token = options.token;
   return {
     name: "VideoGen",
-    description: "Generates a short video from a text prompt via the tansr platform (ring-3 hosted capability; the platform calls the video provider and bills the app per second of generated video). Generation is a long-running task (often minutes). Returns a video URL that stays valid for roughly 24 hours — surface it to the user promptly. Requires the app to have the videoGen platform capability enabled.",
-    shortDescription: "Generate a video from a prompt via the tansr platform (billed per second). Args: model, prompt, negativePrompt?, duration?, ratio?, seed?.",
+    description: "Generates a short video from a text prompt via the tansr platform (ring-3 hosted capability; the platform calls the video provider and bills the app per second of generated video). Generation is a long-running task (often minutes). Returns a video URL that stays valid for roughly 24 hours — surface it to the user promptly. Requires the app to have the videoGen platform capability enabled." + authorizedModelsNote2(options.models),
+    shortDescription: "Generate a video from a prompt via the tansr platform (billed per second). Args: model?, prompt, negativePrompt?, duration?, ratio?, seed?.",
     inputSchema: VideoGenArgsSchema,
     isReadOnly: false,
     isConcurrencySafe: false,
     async execute(args, ctx) {
+      const modelRef = args.model ?? "(default)";
       if (ctx.signal.aborted) {
-        return errorResult14("Tool execution was aborted.", args.model);
+        return errorResult14("Tool execution was aborted.", modelRef);
       }
       const payload = {
-        model: args.model,
+        ...args.model !== void 0 ? { model: args.model } : {},
         prompt: args.prompt,
         ...args.negativePrompt !== void 0 ? { negativePrompt: args.negativePrompt } : {},
         ...args.duration !== void 0 ? { duration: args.duration } : {},
@@ -30516,9 +31015,9 @@ function createVideoGenTool(options) {
           signal: ctx.signal
         });
       } catch (err) {
-        if (ctx.signal.aborted) return errorResult14("Tool execution was aborted.", args.model);
+        if (ctx.signal.aborted) return errorResult14("Tool execution was aborted.", modelRef);
         const message = err instanceof Error ? err.message : String(err);
-        return errorResult14(`Video generation request failed to reach the platform: ${message}`, args.model);
+        return errorResult14(`Video generation request failed to reach the platform: ${message}`, modelRef);
       }
       let raw = null;
       try {
@@ -30530,18 +31029,19 @@ function createVideoGenTool(options) {
         const envelope = raw ?? {};
         const code = typeof envelope.error?.code === "string" ? envelope.error.code : `http_${response.status}`;
         const message = typeof envelope.error?.message === "string" ? envelope.error.message : "request rejected";
-        return errorResult14(`Video generation failed (${code}): ${message}.${hintOf2(code)}`, args.model, code);
+        return errorResult14(`Video generation failed (${code}): ${message}.${hintOf2(code)}`, modelRef, code);
       }
       const body = raw ?? {};
       const videos = Array.isArray(body.videos) ? body.videos.map((item) => typeof item.url === "string" ? { url: item.url } : null).filter((item) => item !== null) : [];
       if (videos.length === 0) {
-        return errorResult14("Video generation returned no video URL (unexpected platform response).", args.model);
+        return errorResult14("Video generation returned no video URL (unexpected platform response).", modelRef);
       }
       const videoCount = typeof body.videoCount === "number" ? body.videoCount : videos.length;
       const billedSeconds = typeof body.billedSeconds === "number" ? body.billedSeconds : 0;
-      const data = { model: args.model, videos, videoCount, billedSeconds };
+      const resolvedModel = typeof body.model === "string" && body.model !== "" ? body.model : modelRef;
+      const data = { model: resolvedModel, videos, videoCount, billedSeconds };
       const lines = [
-        `Generated ${videoCount} video(s) with model ${args.model} (${billedSeconds}s billed, per-second pricing).`,
+        `Generated ${videoCount} video(s) with model ${resolvedModel} (${billedSeconds}s billed, per-second pricing).`,
         "Video URLs (valid ~24h; surface or persist promptly):",
         ...videos.map((v, i) => `${i + 1}. ${v.url}`)
       ];
@@ -30550,24 +31050,8 @@ function createVideoGenTool(options) {
   };
 }
 
-// src/platform/websearch-tool.ts
-import { z as z44 } from "zod";
-var WEBSEARCH_TOOL_MAX_RESULTS = 20;
-var WebSearchArgsSchema2 = z44.object({
-  query: z44.string().max(1024).refine((s) => s.trim().length > 0, { message: "query must be a non-empty string" }).describe("Search query text (the platform never logs or stores it)."),
-  max_results: z44.number().int().min(1).max(WEBSEARCH_TOOL_MAX_RESULTS).optional().describe(
-    `Desired number of results (default 8, max ${WEBSEARCH_TOOL_MAX_RESULTS}; the provider may cap it lower). Billing is per call, not per result.`
-  )
-});
-function errorResult15(text, query2, errorCode2) {
-  const data = {
-    query: query2,
-    results: [],
-    resultCount: 0,
-    ...errorCode2 !== void 0 ? { errorCode: errorCode2 } : {}
-  };
-  return { content: [{ t: "text", text }], isError: true, data };
-}
+// src/platform/websearch-provider.ts
+var PLATFORM_SEARCH_PROVIDER_NAME = "tansr-platform";
 function hintOf3(code) {
   if (code === "forbidden") {
     return " The app platform capability webSearch is disabled; the app developer can enable it in console → app → capabilities.";
@@ -30589,25 +31073,13 @@ function hintOf3(code) {
   }
   return "";
 }
-function createWebSearchTool2(options) {
+function createPlatformSearchProvider(options) {
   const base = options.baseUrl.replace(/\/+$/, "");
   const fetchImpl = options.fetchImpl ?? fetch;
   const token = options.token;
   return {
-    name: "PlatformWebSearch",
-    description: "Searches the web via the tansr platform (ring-3 hosted capability; the platform calls a managed search provider pool and bills the app per call). Returns a numbered list of results with title, URL and snippet. Requires the app to have the webSearch platform capability enabled.",
-    shortDescription: "Search the web via the tansr platform (billed per call). Args: query, max_results?.",
-    inputSchema: WebSearchArgsSchema2,
-    isReadOnly: false,
-    isConcurrencySafe: false,
-    async execute(args, ctx) {
-      if (ctx.signal.aborted) {
-        return errorResult15("Tool execution was aborted.", args.query);
-      }
-      const payload = {
-        query: args.query,
-        ...args.max_results !== void 0 ? { max_results: args.max_results } : {}
-      };
+    name: PLATFORM_SEARCH_PROVIDER_NAME,
+    async search(query2, context) {
       let response;
       try {
         response = await fetchImpl(`${base}/t1/websearch`, {
@@ -30617,13 +31089,15 @@ function createWebSearchTool2(options) {
             accept: "application/json",
             [HEADER_APP_TOKEN]: token
           },
-          body: JSON.stringify(payload),
-          signal: ctx.signal
+          // wire 体 snake_case(CLI 内核 HTTP 后端字节同构的既有特例);
+          // maxResults 已被 kernel 工具层夹紧(缺省 8 / 上限 20,与网关帽同值)。
+          body: JSON.stringify({ query: query2.query, max_results: query2.maxResults }),
+          signal: context.signal
         });
       } catch (err) {
-        if (ctx.signal.aborted) return errorResult15("Tool execution was aborted.", args.query);
+        if (context.signal.aborted) throw err;
         const message = err instanceof Error ? err.message : String(err);
-        return errorResult15(`Web search request failed to reach the platform: ${message}`, args.query);
+        throw new Error(`web search request failed to reach the tansr platform: ${message}`);
       }
       let raw = null;
       try {
@@ -30635,13 +31109,13 @@ function createWebSearchTool2(options) {
         const envelope = raw ?? {};
         const code = typeof envelope.error?.code === "string" ? envelope.error.code : `http_${response.status}`;
         const message = typeof envelope.error?.message === "string" ? envelope.error.message : "request rejected";
-        return errorResult15(`Web search failed (${code}): ${message}.${hintOf3(code)}`, args.query, code);
+        throw new Error(`platform web search failed (${code}): ${message}.${hintOf3(code)}`);
       }
       const body = raw ?? {};
       if (!Array.isArray(body.results)) {
-        return errorResult15("Web search returned an unexpected platform response (no results array).", args.query);
+        throw new Error("platform web search returned an unexpected response (no results array).");
       }
-      const results = body.results.map((item) => {
+      return body.results.map((item) => {
         const row = item ?? {};
         if (typeof row.title !== "string" || typeof row.url !== "string") return null;
         return {
@@ -30650,19 +31124,6 @@ function createWebSearchTool2(options) {
           snippet: typeof row.snippet === "string" ? row.snippet : ""
         };
       }).filter((item) => item !== null);
-      const data = { query: args.query, results, resultCount: results.length };
-      if (results.length === 0) {
-        return { content: [{ t: "text", text: "Web search returned no results for this query (the call was still billed)." }], data };
-      }
-      const lines = [
-        `Web search returned ${results.length} result(s) (billed per call):`,
-        ...results.map((item, i) => {
-          const block = [`${i + 1}. ${item.title}`, `   ${item.url}`];
-          if (item.snippet !== "") block.push(`   ${item.snippet}`);
-          return block.join("\n");
-        })
-      ];
-      return { content: [{ t: "text", text: lines.join("\n") }], data };
     }
   };
 }
@@ -30682,7 +31143,7 @@ var BUILTIN_ORDER = [
   "webSearch",
   "http"
 ];
-var PLATFORM_NAMES = ["imageGen", "videoGen", "webSearch"];
+var PLATFORM_NAMES = ["imageGen", "videoGen"];
 function toToolDef(tool) {
   const converted = zodToJsonSchema(tool.inputSchema);
   const { $schema: _dropped, ...inputSchema } = converted;
@@ -30718,6 +31179,12 @@ function resolvePlatformSelection(selection, capabilities) {
   if (selection === void 0) return [];
   const requested = /* @__PURE__ */ new Set();
   for (const name of selection) {
+    if (name === "webSearch") {
+      throw new TansrSdkError(
+        "invalid_options",
+        "Platform capability 'webSearch' moved: web search is now the builtin 'WebSearch' tool backed by the tansr platform channel (BYO endpoints are not supported in the SDK). Move 'webSearch' from tools.platform to tools.builtin (or omit tools to get it by default when the capability is enabled)."
+      );
+    }
     if (!PLATFORM_NAMES.includes(name)) {
       throw new TansrSdkError(
         "invalid_options",
@@ -30785,7 +31252,7 @@ function buildBuiltinTool(name, materials) {
     case "webFetch":
       return createWebFetchTool();
     case "webSearch":
-      return createWebSearchTool({ provider: createHttpSearchProvider() });
+      return createWebSearchTool({ provider: materials.searchProvider });
     case "http":
       return createHttpTool();
   }
@@ -30793,9 +31260,37 @@ function buildBuiltinTool(name, materials) {
 function buildSdkToolSet(options = {}) {
   const capabilities = options.capabilities ?? DEFAULT_APP_CAPABILITIES;
   const selection = options.tools ?? {};
-  const builtinNames = resolveBuiltinSelection(selection.builtin, capabilities);
+  let builtinNames = resolveBuiltinSelection(selection.builtin, capabilities);
   const platformNames = resolvePlatformSelection(selection.platform, capabilities);
   validateCustomSelection(selection.custom, capabilities);
+  let webSearchProvider = null;
+  if (builtinNames.includes("webSearch")) {
+    const pc = options.platformContext;
+    const explicit = selection.builtin !== void 0;
+    if (pc === void 0) {
+      if (explicit) {
+        throw new TansrSdkError(
+          "invalid_options",
+          "tools.builtin ['webSearch'] requires the platform token tier: the SDK web search always rides the tansr platform channel (billed per call; local BYO endpoints are not supported). Create the session/query with { token, baseUrl }, or remove 'webSearch' from tools.builtin."
+        );
+      }
+      builtinNames = builtinNames.filter((name) => name !== "webSearch");
+    } else if (!capabilities.platform.webSearch) {
+      if (explicit) {
+        throw new TansrSdkError(
+          "capability_disabled",
+          `App platform capability 'webSearch' is disabled; ${CONSOLE_HINT}, or remove 'webSearch' from tools.builtin.`
+        );
+      }
+      builtinNames = builtinNames.filter((name) => name !== "webSearch");
+    } else {
+      webSearchProvider = createPlatformSearchProvider({
+        baseUrl: pc.baseUrl,
+        token: pc.token,
+        ...pc.fetchImpl !== void 0 ? { fetchImpl: pc.fetchImpl } : {}
+      });
+    }
+  }
   const platformTools = [];
   for (const name of platformNames) {
     const pc = options.platformContext;
@@ -30811,14 +31306,14 @@ function buildSdkToolSet(options = {}) {
       ...pc.fetchImpl !== void 0 ? { fetchImpl: pc.fetchImpl } : {}
     };
     platformTools.push(
-      name === "imageGen" ? createImageGenTool(materials) : name === "videoGen" ? createVideoGenTool(materials) : createWebSearchTool2(materials)
+      name === "imageGen" ? createImageGenTool({ ...materials, ...pc.platformModels !== void 0 ? { models: pc.platformModels.imageGen } : {} }) : createVideoGenTool({ ...materials, ...pc.platformModels !== void 0 ? { models: pc.platformModels.videoGen } : {} })
     );
   }
   const store = options.store ?? new TodoStore();
   const channel = options.promptChannel ?? new UnavailableChannel();
   const custom = selection.custom ?? [];
   const tools = [
-    ...builtinNames.map((name) => buildBuiltinTool(name, { store, channel })),
+    ...builtinNames.map((name) => buildBuiltinTool(name, { store, channel, searchProvider: webSearchProvider })),
     ...platformTools,
     ...custom
   ];
@@ -31001,11 +31496,11 @@ async function assembleTooling(options) {
 var TANSR_PROVIDER_ID = "tansr";
 var APP_TOKEN_PLACEHOLDER_ENV = "TANSR_SDK_APP_TOKEN_TIER";
 var APP_TOKEN_PLACEHOLDER_VALUE = "app-token-tier";
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseModel(raw) {
-  if (!isRecord7(raw)) return null;
+  if (!isRecord8(raw)) return null;
   if (typeof raw.handle !== "string" || raw.handle === "" || typeof raw.modelId !== "string" || raw.modelId === "" || typeof raw.protocol !== "string") {
     return null;
   }
@@ -31013,25 +31508,45 @@ function parseModel(raw) {
     handle: raw.handle,
     modelId: raw.modelId,
     displayName: typeof raw.displayName === "string" ? raw.displayName : raw.handle,
+    // 模型呈现面二波(④)加法解析:缺键/坏形状 = null(旧 bundle 回落,恒不猜)
+    manufacturer: typeof raw.manufacturer === "string" && raw.manufacturer !== "" ? raw.manufacturer : null,
+    family: typeof raw.family === "string" && raw.family !== "" ? raw.family : null,
     protocol: raw.protocol,
-    capabilities: isRecord7(raw.capabilities) ? raw.capabilities : {},
+    capabilities: isRecord8(raw.capabilities) ? raw.capabilities : {},
     contextWindow: typeof raw.contextWindow === "number" ? raw.contextWindow : null
   };
 }
+function parseMediaModels(raw) {
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const item of raw) {
+    if (!isRecord8(item) || typeof item.model !== "string" || item.model === "") continue;
+    out.push({
+      model: item.model,
+      displayName: typeof item.displayName === "string" && item.displayName !== "" ? item.displayName : item.model
+    });
+  }
+  return out;
+}
 function parseAppBundle(raw) {
-  if (!isRecord7(raw)) return null;
+  if (!isRecord8(raw)) return null;
   const models = Array.isArray(raw.models) ? raw.models.map(parseModel).filter((m) => m !== null) : [];
   const aliases = {};
-  if (isRecord7(raw.aliases)) {
+  if (isRecord8(raw.aliases)) {
     for (const [key2, value] of Object.entries(raw.aliases)) {
       if (typeof value === "string" && value !== "") aliases[key2] = value;
     }
   }
   const parsedCaps = AppCapabilitiesSchema.safeParse(raw.capabilities);
+  const mediaRaw = isRecord8(raw.platformModels) ? raw.platformModels : {};
   return {
     models,
     aliases,
-    capabilities: parsedCaps.success ? parsedCaps.data : DEFAULT_APP_CAPABILITIES
+    capabilities: parsedCaps.success ? parsedCaps.data : DEFAULT_APP_CAPABILITIES,
+    platformModels: {
+      imageGen: parseMediaModels(mediaRaw.imageGen),
+      videoGen: parseMediaModels(mediaRaw.videoGen)
+    }
   };
 }
 function sanitizeModelCapabilities(capabilities, contextWindow) {
@@ -31172,10 +31687,13 @@ async function assemblePlatformModel(options) {
   const registry = new ProviderRegistry(appBundleRegistryConfig(bundle, base), {
     // 占位哑值:满足装配期 readApiKey 非空校验;真实鉴权恒由 fetch 包装注入
     env: { [APP_TOKEN_PLACEHOLDER_ENV]: APP_TOKEN_PLACEHOLDER_VALUE },
-    fetchImpl: createAppTokenFetch(options.token, options.fetchImpl)
+    fetchImpl: createAppTokenFetch(options.token, options.fetchImpl),
+    // 拍板⑤:平台会话 id 供给经既有 TwpClientOptions.sessionId 缝出线——
+    // registry 为会话私有(每次装配新建),setModel/Task 子代理同缝同值
+    ...options.sessionId !== void 0 ? { twp: { sessionId: options.sessionId } } : {}
   });
   const built = buildClientFromRegistry(registry, options.model ?? "main", options.onProviderSelected);
-  return { ...built, registry, capabilities: bundle.capabilities };
+  return { ...built, registry, capabilities: bundle.capabilities, platformModels: bundle.platformModels };
 }
 
 // src/task.ts
@@ -31264,7 +31782,9 @@ async function* consumeManaged(options) {
     platformContext = {
       baseUrl: options.baseUrl,
       token: options.token,
-      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {}
+      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {},
+      // S-G1:bundle 授权媒体集随装配注入(媒体工具描述自列;集成方零手配)。
+      platformModels: platform.platformModels
     };
   } else {
     const managed = await assembleManagedModel({
@@ -31362,6 +31882,60 @@ async function* consumeHandle(handle) {
 
 // src/session.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
+
+// src/sessions/pairing.ts
+var SYNTHETIC_TOOL_RESULT_TEXT = "Tool execution was interrupted before its result was persisted; this placeholder was synthesized while resuming the session.";
+function toolCallIds(message) {
+  return message.blocks.flatMap((b) => b.t === "tool_call" ? [b.id] : []);
+}
+function toolResultIds(message) {
+  return message.blocks.flatMap((b) => b.t === "tool_result" ? [b.callId] : []);
+}
+function repairHistoryPairing(messages) {
+  const open4 = /* @__PURE__ */ new Set();
+  let cleanEnd = 0;
+  for (let i = 0; i < messages.length; i++) {
+    const message = messages[i];
+    if (message.role === "assistant") {
+      for (const id of toolCallIds(message)) open4.add(id);
+    } else {
+      for (const callId of toolResultIds(message)) {
+        if (!open4.has(callId)) {
+          return {
+            messages: messages.slice(0, cleanEnd).map((m) => structuredClone(m)),
+            synthesizedResults: 0,
+            droppedMessages: messages.length - cleanEnd
+          };
+        }
+        open4.delete(callId);
+      }
+    }
+    if (open4.size === 0) cleanEnd = i + 1;
+  }
+  if (open4.size === 0) {
+    return {
+      messages: messages.map((m) => structuredClone(m)),
+      synthesizedResults: 0,
+      droppedMessages: 0
+    };
+  }
+  const synthetic = {
+    role: "user",
+    blocks: [...open4].map((callId) => ({
+      t: "tool_result",
+      callId,
+      content: [{ t: "text", text: SYNTHETIC_TOOL_RESULT_TEXT }],
+      isError: true
+    }))
+  };
+  return {
+    messages: [...messages.map((m) => structuredClone(m)), synthetic],
+    synthesizedResults: open4.size,
+    droppedMessages: 0
+  };
+}
+
+// src/session.ts
 function createEventQueue() {
   const buffered = [];
   let ended = false;
@@ -31637,7 +32211,21 @@ var AgentSession = class {
 };
 async function createSession(options = {}) {
   const cwd = options.cwd ?? process.cwd();
-  const sessionId = options.sessionId ?? randomUUID11();
+  if (options.resume !== void 0) {
+    if (options.initialMessages !== void 0) {
+      throw new TansrSdkError(
+        "invalid_options",
+        'createSession: "resume" and "initialMessages" are mutually exclusive; "resume" loads the history from the store ("initialMessages" is the low-level re-feed escape hatch).'
+      );
+    }
+    if (options.sessionId !== void 0 && options.sessionId !== options.resume.sessionId) {
+      throw new TansrSdkError(
+        "invalid_options",
+        'createSession: "sessionId" conflicts with "resume.sessionId"; pass one of them (they must match).'
+      );
+    }
+  }
+  const sessionId = options.sessionId ?? options.resume?.sessionId ?? randomUUID11();
   const injected = options.client !== void 0;
   const tokenTier = options.token !== void 0;
   if (injected && typeof options.model === "string") {
@@ -31653,6 +32241,18 @@ async function createSession(options = {}) {
     );
   }
   validateTokenTierOptions("createSession", options);
+  let initialMessages = options.initialMessages ?? [];
+  if (options.resume !== void 0) {
+    const record = await options.resume.store.get(options.resume.sessionId);
+    if (record === null) {
+      throw new TansrSdkError(
+        "session_not_found",
+        `createSession: session "${options.resume.sessionId}" was not found in the given store; list() the store or create a fresh session instead.`
+      );
+    }
+    initialMessages = repairHistoryPairing(record.messages).messages;
+  }
+  const platformSessionId = tokenTier ? ulid() : void 0;
   let sessionRef = null;
   const emitBody = (body, source) => {
     sessionRef?.pushBody(body, source);
@@ -31675,6 +32275,9 @@ async function createSession(options = {}) {
       baseUrl: options.baseUrl,
       ...typeof options.model === "string" ? { model: options.model } : {},
       ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {},
+      // 拍板⑤:本会话全部 exchange(含 setModel 热切换与 Task 子代理,同
+      // registry 同缝)恒携同一枚平台会话 ULID——会话维归因/亲和自此在场
+      ...platformSessionId !== void 0 ? { sessionId: () => platformSessionId } : {},
       onProviderSelected: (selection) => {
         const body = providerSwitchedBody(selection);
         if (body !== null) emitBody(body, "provider");
@@ -31691,7 +32294,9 @@ async function createSession(options = {}) {
     platformContext = {
       baseUrl: options.baseUrl,
       token: options.token,
-      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {}
+      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {},
+      // S-G1:bundle 授权媒体集随装配注入(媒体工具描述自列;集成方零手配)。
+      platformModels: assembled.platformModels
     };
   } else {
     const assembled = await assembleManagedModel({
@@ -31747,6 +32352,26 @@ async function createSession(options = {}) {
       }
     );
   }
+  const store = options.store;
+  if (store !== void 0) {
+    await store.create({
+      sessionId,
+      ...platformSessionId !== void 0 ? { platformSessionId } : {}
+    });
+  }
+  const userCommit = options.onHistoryCommit;
+  const onHistoryCommit = store === void 0 ? userCommit : async (history, meta) => {
+    let storeError;
+    try {
+      await store.commit(sessionId, history, meta);
+    } catch (err) {
+      storeError = err;
+    }
+    await userCommit?.(history, meta);
+    if (storeError !== void 0) {
+      throw storeError instanceof Error ? storeError : new Error(String(storeError));
+    }
+  };
   const session = new AgentSession({
     binding,
     executor: tooling.executor,
@@ -31757,9 +32382,9 @@ async function createSession(options = {}) {
     maxTokens,
     maxTurnsPerQuery: options.maxTurnsPerQuery ?? DEFAULT_MAX_TURNS,
     compaction: options.compaction === false ? void 0 : options.compaction ?? {},
-    initialMessages: options.initialMessages ?? [],
+    initialMessages,
     registry,
-    onHistoryCommit: options.onHistoryCommit,
+    onHistoryCommit,
     ...tooling.onEnded !== void 0 ? { onEnded: tooling.onEnded } : {}
   });
   sessionRef = session;
@@ -31770,6 +32395,272 @@ async function createSession(options = {}) {
   return session;
 }
 
+// src/sessions/file-store.ts
+import { randomUUID as randomUUID12 } from "node:crypto";
+import { mkdir as mkdir3, readFile as readFile5, readdir, rename as rename2, rm as rm3 } from "node:fs/promises";
+import path22 from "node:path";
+var MESSAGE_KINDS2 = /* @__PURE__ */ new Set([
+  "user_prompt",
+  "assistant_message",
+  "tool_result"
+]);
+function journalKindOf(message) {
+  if (message.role === "assistant") return "assistant_message";
+  return message.blocks.some((b) => b.t === "tool_result") ? "tool_result" : "user_prompt";
+}
+var TITLE_MAX_CHARS = 64;
+function sessionTitleOf(messages) {
+  for (const message of messages) {
+    if (message.role !== "user") continue;
+    const text = message.blocks.flatMap((b) => b.t === "text" ? [b.text] : []).join(" ").replace(/\s+/g, " ").trim();
+    if (text === "") continue;
+    return text.length > TITLE_MAX_CHARS ? `${text.slice(0, TITLE_MAX_CHARS)}…` : text;
+  }
+  return void 0;
+}
+async function readRawMeta(sessionDir) {
+  try {
+    const parsed = JSON.parse(await readFile5(metaFilePath(sessionDir), "utf8"));
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function toRecordMeta(raw) {
+  const createdAt = typeof raw["createdAt"] === "string" ? raw["createdAt"] : "";
+  const updatedAt = typeof raw["updatedAt"] === "string" ? raw["updatedAt"] : createdAt;
+  const record = {
+    sessionId: typeof raw["sessionId"] === "string" ? raw["sessionId"] : "",
+    createdAt,
+    updatedAt
+  };
+  if (typeof raw["title"] === "string") record.title = raw["title"];
+  if (typeof raw["platformSessionId"] === "string" && raw["platformSessionId"] !== "") {
+    record.platformSessionId = raw["platformSessionId"];
+  }
+  const extra = raw["meta"];
+  if (typeof extra === "object" && extra !== null && !Array.isArray(extra)) {
+    record.meta = extra;
+  }
+  return record;
+}
+function corrupted(sessionId, detail, cause) {
+  return new TansrSdkError(
+    "session_store_corrupted",
+    `Session store for "${sessionId}" is corrupted: ${detail}. Refusing to resume from damaged history (delete the session directory to start over).`,
+    cause !== void 0 ? { cause } : void 0
+  );
+}
+function createFileSessionStore(options) {
+  const storageRoot = options.dir;
+  const tails = /* @__PURE__ */ new Map();
+  function enqueue(sessionId, op) {
+    const tail = tails.get(sessionId) ?? Promise.resolve();
+    const task = tail.then(op);
+    tails.set(
+      sessionId,
+      task.then(
+        () => void 0,
+        () => void 0
+      )
+    );
+    return task;
+  }
+  async function patchRawMeta(sessionDir, mutate) {
+    const raw = await readRawMeta(sessionDir);
+    if (raw === null) return null;
+    if (mutate(raw)) {
+      await writeFileDurable(metaFilePath(sessionDir), `${JSON.stringify(raw, null, 2)}
+`);
+    }
+    return raw;
+  }
+  async function appendMessages(writer, sessionId, parentEventId, messages) {
+    let parent = parentEventId;
+    for (const message of messages) {
+      const eventId = randomUUID12();
+      await writer.append({
+        eventId,
+        sessionId,
+        branchId: MAIN_BRANCH_ID,
+        kind: journalKindOf(message),
+        parentEventId: parent,
+        payload: message,
+        producer: "sdk",
+        visibility: { ...Visibilities.normal }
+      });
+      parent = eventId;
+    }
+  }
+  async function rotateVolume(sessionDir, sessionId, history) {
+    const tempDir = path22.join(sessionDir, `.rotate-${process.pid}-${Date.now().toString(36)}`);
+    await mkdir3(tempDir, { recursive: true });
+    try {
+      const writer = await JournalWriter.open(tempDir);
+      try {
+        await appendMessages(writer, sessionId, null, history);
+      } finally {
+        await writer.close();
+      }
+      const tempAttachments = attachmentsDirPath(tempDir);
+      let names = [];
+      try {
+        names = await readdir(tempAttachments);
+      } catch {
+        names = [];
+      }
+      if (names.length > 0) {
+        const target = attachmentsDirPath(sessionDir);
+        await mkdir3(target, { recursive: true });
+        for (const name of names) {
+          await rename2(path22.join(tempAttachments, name), path22.join(target, name));
+        }
+      }
+      await rename2(journalFilePath(tempDir), journalFilePath(sessionDir));
+    } finally {
+      await rm3(tempDir, { recursive: true, force: true }).catch(() => void 0);
+    }
+  }
+  return {
+    async create(init) {
+      const sessionId = init.sessionId ?? randomUUID12();
+      return enqueue(sessionId, async () => {
+        const { sessionDir, created } = await ensureSessionDir({
+          storageRoot,
+          sessionId,
+          cwd: process.cwd(),
+          ...init.title !== void 0 ? { extra: { title: init.title } } : {}
+        });
+        const raw = await patchRawMeta(sessionDir, (m) => {
+          let changed = false;
+          if (created && typeof m["updatedAt"] !== "string") {
+            m["updatedAt"] = typeof m["createdAt"] === "string" ? m["createdAt"] : (/* @__PURE__ */ new Date()).toISOString();
+            changed = true;
+          }
+          if (init.platformSessionId !== void 0 && m["platformSessionId"] !== init.platformSessionId) {
+            m["platformSessionId"] = init.platformSessionId;
+            changed = true;
+          }
+          if (init.title !== void 0 && m["title"] !== init.title) {
+            m["title"] = init.title;
+            changed = true;
+          }
+          if (init.meta !== void 0 && created) {
+            m["meta"] = init.meta;
+            changed = true;
+          }
+          return changed;
+        });
+        if (raw === null) throw corrupted(sessionId, "meta.json unreadable right after creation");
+        return toRecordMeta(raw);
+      });
+    },
+    async get(sessionId) {
+      return enqueue(sessionId, async () => {
+        const sessionDir = sessionDirPath(storageRoot, sessionId);
+        const raw = await readRawMeta(sessionDir);
+        if (raw === null) return null;
+        const lock = await acquireSessionLock(sessionDir);
+        try {
+          let result;
+          try {
+            result = await readAll(sessionDir);
+          } catch (err) {
+            throw corrupted(sessionId, err instanceof Error ? err.message : String(err), err);
+          }
+          if (result.integrityBreakAt !== void 0) {
+            throw corrupted(
+              sessionId,
+              `journal hash chain broken at record index ${result.integrityBreakAt}`
+            );
+          }
+          const state = rebuildState(result.records);
+          if (state.warnings.length > 0) {
+            throw corrupted(sessionId, state.warnings.join("; "));
+          }
+          return { meta: toRecordMeta(raw), messages: state.messages };
+        } finally {
+          await lock.release();
+        }
+      });
+    },
+    async list(filter) {
+      const root = path22.join(storageRoot, "sessions");
+      let entries;
+      try {
+        entries = await readdir(root, { withFileTypes: true });
+      } catch {
+        return [];
+      }
+      const records = [];
+      for (const entry of entries) {
+        if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+        const raw = await readRawMeta(path22.join(root, entry.name));
+        if (raw === null || typeof raw["sessionId"] !== "string") continue;
+        records.push(toRecordMeta(raw));
+      }
+      records.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+      return filter?.limit !== void 0 ? records.slice(0, filter.limit) : records;
+    },
+    async commit(sessionId, history, meta) {
+      const snapshot = history.map((m) => structuredClone(m));
+      return enqueue(sessionId, async () => {
+        const title = sessionTitleOf(snapshot);
+        const { sessionDir } = await ensureSessionDir({
+          storageRoot,
+          sessionId,
+          cwd: process.cwd(),
+          ...title !== void 0 ? { extra: { title } } : {}
+        });
+        const lock = await acquireSessionLock(sessionDir);
+        try {
+          let result;
+          try {
+            result = await readAll(sessionDir, { rehydrateImages: false });
+          } catch (err) {
+            throw corrupted(sessionId, err instanceof Error ? err.message : String(err), err);
+          }
+          if (result.integrityBreakAt !== void 0) {
+            throw corrupted(
+              sessionId,
+              `journal hash chain broken at record index ${result.integrityBreakAt}`
+            );
+          }
+          const persisted = result.records.filter(
+            (r) => r.branchId === MAIN_BRANCH_ID && MESSAGE_KINDS2.has(r.kind) && r.visibility.model
+          ).length;
+          if (meta.rewritten || snapshot.length < persisted) {
+            await rotateVolume(sessionDir, sessionId, snapshot);
+          } else {
+            const delta = snapshot.slice(persisted);
+            if (delta.length > 0) {
+              const writer = await JournalWriter.open(sessionDir);
+              try {
+                const last = result.records[result.records.length - 1];
+                await appendMessages(writer, sessionId, last?.eventId ?? null, delta);
+              } finally {
+                await writer.close();
+              }
+            }
+          }
+          await patchRawMeta(sessionDir, (m) => {
+            m["updatedAt"] = (/* @__PURE__ */ new Date()).toISOString();
+            return true;
+          });
+        } finally {
+          await lock.release();
+        }
+      });
+    },
+    async delete(sessionId) {
+      return enqueue(sessionId, async () => {
+        await rm3(sessionDirPath(storageRoot, sessionId), { recursive: true, force: true });
+      });
+    }
+  };
+}
+
 // src/view/reducer.ts
 var OUTPUT_TAIL_MAX_CHARS = 4e3;
 function initialSessionViewState() {
@@ -32367,6 +33258,58 @@ function markSourceFailure(state, error) {
   });
 }
 
+// src/view/history.ts
+function viewStateFromHistory(messages) {
+  const results = /* @__PURE__ */ new Map();
+  for (const message of messages) {
+    for (const block of message.blocks) {
+      if (block.t === "tool_result") results.set(block.callId, block);
+    }
+  }
+  const uiMessages = [];
+  let nextSeq = 1;
+  for (const message of messages) {
+    const parts = [];
+    for (const block of message.blocks) {
+      switch (block.t) {
+        case "text":
+          if (block.text !== "") parts.push({ type: "text", text: block.text });
+          break;
+        case "thinking":
+          if (block.text !== "") parts.push({ type: "thinking", text: block.text });
+          break;
+        case "tool_call": {
+          const result = results.get(block.id);
+          const resultText = result?.content.filter((item) => item.t === "text").map((item) => item.text ?? "").join("\n");
+          const status = result === void 0 ? "aborted" : result.isError === true ? "failed" : "completed";
+          const part = {
+            type: "toolCall",
+            id: block.id,
+            name: block.name,
+            // 键在场性对齐 Kotlin(JsonElement?):args 键在场(含显式 null)
+            // 即透传,键缺席即不落
+            ...block.args !== void 0 ? { args: block.args } : {},
+            status,
+            ...resultText !== void 0 && resultText !== "" ? { resultText } : {}
+          };
+          parts.push(part);
+          break;
+        }
+        default:
+          break;
+      }
+    }
+    if (parts.length === 0) continue;
+    uiMessages.push({ id: `msg-${nextSeq}`, role: message.role, parts });
+    nextSeq += 1;
+  }
+  const initial = initialSessionViewState();
+  return {
+    view: { ...initial.view, messages: uiMessages },
+    internal: { ...initial.internal, nextMessageSeq: nextSeq }
+  };
+}
+
 // src/view/pump.ts
 function resolveIterable(source) {
   if (Symbol.asyncIterator in source) return source;
@@ -32600,6 +33543,7 @@ export {
   ImageGenArgsSchema,
   McpHost,
   OUTPUT_TAIL_MAX_CHARS,
+  PLATFORM_SEARCH_PROVIDER_NAME,
   QueueChannel,
   SequentialToolExecutor,
   TANSR_PROVIDER_ID,
@@ -32608,8 +33552,6 @@ export {
   UnavailableChannel,
   VIDEOGEN_TOOL_MAX_DURATION,
   VideoGenArgsSchema,
-  WEBSEARCH_TOOL_MAX_RESULTS,
-  WebSearchArgsSchema2 as WebSearchArgsSchema,
   accumulateUsage,
   appBundleRegistryConfig,
   appendUserMessage,
@@ -32623,14 +33565,15 @@ export {
   buildSdkToolSet,
   buildToolGuideSegment,
   createAppTokenFetch,
+  createFileSessionStore,
   createImageGenTool,
   createMcpHost,
   createNarrator,
+  createPlatformSearchProvider,
   createSdkPermissionGate,
   createSession,
   createSessionView,
   createVideoGenTool,
-  createWebSearchTool2 as createWebSearchTool,
   defineSkill,
   defineTool,
   initialSessionViewState,
@@ -32644,5 +33587,6 @@ export {
   resolvePlatformSelection,
   runAgent,
   subagentModelResolverOf,
-  toToolDef
+  toToolDef,
+  viewStateFromHistory
 };