@ycodium-ai/agent-grok 0.2.2106 → 0.2.2130

package/dist/index.js

@@ -9,15 +9,18 @@ import { definePlugin } from "@ycodium-ai/plugin-api";
 
 // src/card.ts
 var GROK_DRIVER_KIND = "grok";
+var GROK_CLIENT_INFO = { name: "ycodium-agent-grok", version: "0.1.0" };
 var GROK_CARD = {
   driverKind: GROK_DRIVER_KIND,
   displayName: "Grok",
   iconUrl: "./assets/icon.svg",
   commandName: "grok",
   // 启动命令是 `grok agent stdio`（GrokSettings 磁盘形状没有 launchArgs 字段，
-  // 宿主旧实现把它写死在 buildGrokAcpSpawnInput，这里落在名片上）。思考档位
-  // 是 spawn 参数 `--reasoning-effort`，由实例按用户选择动态插进 agent 与 stdio
-  // 之间，不走名片这一栏。
+  // 宿主旧实现把它写死在 buildGrokAcpSpawnInput，这里落在名片上）。两个动态旗标
+  // 都不走名片这一栏，而且**位置不同**：思考档位 `--reasoning-effort` 是 agent 级、
+  // 插在 agent 与 stdio 之间；运行模式 `--permission-mode` 是顶层、排在 `agent`
+  // 前面（放进 agent 那一段 grok 当场报 unexpected argument）。两者都在
+  // `grokInstance.startSession` 里按用户选择拼。
   launchArgs: "agent stdio",
   homeEnvVar: "GROK_HOME",
   // 只有这一条是实话：实测这个 CLI 从不播报 api key 认证方式，点名 XAI_API_KEY
@@ -33,7 +36,7 @@ var GROK_CARD = {
   signIn: [{ kind: "command", command: "grok login" }],
   deviceCodeSignInArgs: ["login", "--device-auth"],
   // npm 上的 `@xai-official/grok` 只发 darwin-arm64，写出去等于给 Linux/Windows
-  // 用户一条装不上的路（宿主 GrokDriver 同一条注释）。
+  // 用户一条装不上的路。
   npmPackage: "",
   homebrewFormula: "",
   selfUpdateArgs: ["update"],
@@ -57,7 +60,16 @@ var GROK_CARD = {
     // Grok 换模型只有 `session/set_config_option` 一条路；库会按握手形状自动协商，
     // 但插件侧的执行路径还没接到模型管理 UI，名片必须说实话。
     sessionModelSwitch: "unsupported",
-    runtimeModeSwitch: "in-session"
+    // 运行模式只在 spawn 时定得了（`--permission-mode` 是启动旗标，ACP 那一侧
+    // `modes: null`，`session/set_mode` 对它无效），所以不许声称能会话中途换。
+    // 报 next-turn 之后宿主 `ProviderCommandReactor` 不再下发，而是把新档记在
+    // thread 上；下一轮 `ensureSessionForThread` 判到 runtimeModeChanged，带着
+    // resume cursor 真重开会话——历史续上，档位换掉。
+    runtimeModeSwitch: "next-turn",
+    // 档位走 spawn 旗标，切档要重开会话（与 runtimeModeSwitch 同为 next-turn 的原因）。
+    // 声明这一位让界面画这双手自报的三档；不声明就退回宿主四档，而四档在这只手上
+    // 有两档撞车（都落到 `auto`）。
+    nativeModeSwitch: true
   },
   // 凭据由 CLI 自己保管在 `<GROK_HOME>/auth.json`，宿主读它只认 `/token`。
   credentialSources: [
@@ -84,11 +96,17 @@ var GROK_CARD = {
   modelConnectivity: {
     dialects: ["anthropic-messages", "openai-responses", "openai-chat-completions"],
     acceptsExternalEndpoints: true,
-    // 必须设 `GROK_MODELS_BASE_URL`,不能只设 `XAI_API_KEY`。它的凭据顺序是
+    // 地址那一栏必须投：不设 `GROK_MODELS_BASE_URL` 的话整条请求根本不来我们这儿
+    // （`grokModelProxyEgress.test.ts` 拿掉这一栏就红）。
+    //
+    // **但设了 base 并不会把客户端切成 API-key 认证。** 它的凭据顺序是
     // `api_key` → `env_key` → **已登录的 session token** → `XAI_API_KEY`
-    // (`~/.grok/docs/user-guide/11-custom-models.md:105-114`)——用户 `grok login` 过的话
-    // 只设 key 不起作用,它会把**用户的真 OIDC token** 发到我们的代理。设了 base 才会
-    // 把整个客户端切成 API-key 认证。
+    // (`~/.grok/docs/user-guide/11-custom-models.md` 的 "Credential Resolution")。
+    // 1.0.34 实测：账号目录里有 `auth.json` 时，启动预取 `/v1/models` 用的是
+    // `XAI_API_KEY`，而**推理请求带的是用户自己的 x.ai OIDC token**——本地端点只认
+    // 这笔绑定的凭据，别的一律 401。所以绑定时还要把 `GROK_AUTH_PATH` 指到一个不存在
+    // 的路径（见下面那栏），让这次进程读不到那份登录。同批的实测落在
+    // `grokModelProxyEgress.test.ts`。
     //
     // 它启动时先打 `{base_url}/models` 拉模型列表(README:1953「on startup」),不给就
     // 当端点不可用——代理为此支持了 /models。
@@ -96,13 +114,26 @@ var GROK_CARD = {
     // base 含 /v1(它的例子是 `https://api.acme.com/v1`),后面自己加 /chat/completions。
     nativePathSuffix: "/chat/completions",
     baseUrlEnvKey: "GROK_MODELS_BASE_URL",
-    credentialEnvKey: "XAI_API_KEY"
+    credentialEnvKey: "XAI_API_KEY",
+    // 绑定这一轮不准用它自己的登录：凭据顺序里 session token 排在 `XAI_API_KEY`
+    // 前面，账号目录里有 `auth.json` 就一定发那一份，本机端点一律 401。
+    // `GROK_AUTH_PATH` 是 CLI 读登录文件的路径（1.0.34 的 argv 里与 `GROK_AUTH`、
+    // `GROK_DEPLOYMENT_KEY` 并列在同一张敏感变量表上）。`$absentPath` 是宿主按这次
+    // 绑定算的、必定不存在的路径——不用空设备是因为那是平台语义（POSIX `/dev/null`
+    // 对 Windows `NUL`），而「读不到」两边只有一种行为。1.0.34 实测：`authMethods`
+    // 少掉 `cached_token`、两笔请求（推理与标题）都改带绑定凭据，账号目录里那份
+    // `auth.json` 一个字节没动，也没在别处新建文件。
+    // 只在绑定时注入，非绑定会话照旧用用户自己的登录。
+    extraEnv: [{ name: "GROK_AUTH_PATH", value: "$absentPath" }]
   }
 };
 
 // src/grokInstance.ts
+import * as NodeCrypto2 from "node:crypto";
 import * as NodeOS from "node:os";
 import * as NodePath2 from "node:path";
+import { mergeLaunchEnv, brainSlotEnvKeys } from "@ycodium-ai/plugin-api/executor";
+import { nodeStreamsFromHandle as nodeStreamsFromHandle2 } from "@ycodium-ai/plugin-api/process-stdin";
 
 // ../../packages/ycodium-acp-executor/src/executor.ts
 import * as NodeCrypto from "node:crypto";
@@ -23972,6 +24003,12 @@ function acpApprovalOptions(request) {
   }
   return options;
 }
+function selectAutoApprovedAcpPermissionOption(request) {
+  if (new Set(request.options.map((option) => option.kind)).size !== request.options.length) {
+    return void 0;
+  }
+  return selectAcpPermissionOptionId(request, "acceptForSession") ?? selectAcpPermissionOptionId(request, "accept");
+}
 function parseAcpResumeCursor(raw, schemaVersion) {
   if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
   const record2 = raw;
@@ -24365,6 +24402,150 @@ function makeAcpContentDeltaEvent(input2) {
   };
 }
 
+// ../../packages/ycodium-acp-executor/src/config-options.ts
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asString(value) {
+  return typeof value === "string" ? value : void 0;
+}
+function normalizedField(option, key) {
+  return asString(option[key])?.trim().toLowerCase() ?? "";
+}
+function looksLikeEffortOption(option) {
+  const id = normalizedField(option, "id");
+  const name = normalizedField(option, "name");
+  return id === "effort" || id === "reasoning" || name === "effort" || name === "reasoning" || name.includes("effort") || name.includes("reasoning") || normalizedField(option, "category") === "thought_level";
+}
+function flattenChoices(rawOptions, currentValue) {
+  if (!Array.isArray(rawOptions)) return [];
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (entry) => {
+    if (!isRecord3(entry)) return;
+    const value = asString(entry["value"]);
+    if (value === void 0 || seen.has(value)) return;
+    seen.add(value);
+    const description = asString(entry["description"])?.trim();
+    const name = asString(entry["name"])?.trim();
+    out.push({
+      value,
+      ...name ? { name } : {},
+      label: name || value,
+      ...description ? { description } : {},
+      ...currentValue !== void 0 && currentValue === value ? { isDefault: true } : {}
+    });
+  };
+  for (const entry of rawOptions) {
+    if (isRecord3(entry) && Array.isArray(entry["options"])) {
+      for (const nested of entry["options"]) push(nested);
+      continue;
+    }
+    push(entry);
+  }
+  return out;
+}
+function findAcpEffortConfig(configOptions) {
+  if (!Array.isArray(configOptions)) return void 0;
+  const candidates = configOptions.filter(isRecord3).filter((option) => normalizedField(option, "type") === "select").filter(looksLikeEffortOption);
+  if (candidates.length === 0) return void 0;
+  const picked = candidates.find((option) => normalizedField(option, "category") === "model_option") ?? candidates.find((option) => normalizedField(option, "id") === "effort") ?? candidates.find((option) => normalizedField(option, "category") === "thought_level") ?? candidates[0];
+  if (picked === void 0) return void 0;
+  const configId = asString(picked["id"])?.trim();
+  if (!configId) return void 0;
+  const choices = flattenChoices(picked["options"], asString(picked["currentValue"])?.trim());
+  if (choices.length === 0) return void 0;
+  return {
+    configId,
+    label: asString(picked["name"])?.trim() ?? "",
+    choices
+  };
+}
+
+// ../../packages/ycodium-acp-executor/src/runtime-mode.ts
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asString2(value) {
+  return typeof value === "string" ? value : void 0;
+}
+function acpModeConfigId(setup) {
+  if (!isRecord4(setup)) return void 0;
+  const configOptions = setup["configOptions"];
+  if (!Array.isArray(configOptions)) return void 0;
+  for (const option of configOptions) {
+    if (!isRecord4(option)) continue;
+    if (asString2(option["category"])?.trim().toLowerCase() !== "mode") continue;
+    const id = asString2(option["id"])?.trim();
+    if (id) return id;
+  }
+  return void 0;
+}
+
+// ../../packages/ycodium-acp-executor/src/handshake.ts
+function acpInitializePayload(clientInfo, overrides) {
+  return {
+    protocolVersion: PROTOCOL_VERSION,
+    clientCapabilities: {
+      fs: {
+        readTextFile: false,
+        writeTextFile: false,
+        ...overrides?.fs
+      },
+      terminal: overrides?.terminal ?? false
+    },
+    clientInfo
+  };
+}
+
+// ../../packages/ycodium-acp-executor/src/config-option-wiring.ts
+var VENDOR_CATEGORY_PREFIX = "_";
+var ACP_CONFIG_CATEGORY_HANDLING = {
+  mode: {
+    consumed: true,
+    via: "runtime-mode.ts\uFF1AacpAvailableModes / acpCurrentModeId / acpModeConfigId"
+  },
+  model: {
+    consumed: true,
+    via: "runtime-model.ts:extractModelConfigId \u2192 executor.ts:applyRequestedModel"
+  },
+  thought_level: {
+    consumed: true,
+    via: "config-options.ts:findAcpEffortConfig \u2192 executor.ts:applyRequestedEffort"
+  },
+  model_option: {
+    consumed: true,
+    // 精确说法：它不是**识别器**，是**优先级**。`looksLikeEffortOption` 先筛出候选，
+    // 标了 `model_option` 的在候选里排第一（厂商自己标的最准），排在 id 叫 `effort`
+    // 的和标 `thought_level` 的前面。光有这个 category 而 id/name 不像力度档的，
+    // 压根进不了候选。
+    via: "config-options.ts:findAcpEffortConfig\uFF08\u5019\u9009\u91CC\u7684\u6700\u9AD8\u4F18\u5148\u7EA7\uFF0C\u538B\u8FC7 thought_level\uFF09"
+  },
+  model_config: {
+    consumed: false,
+    note: "\u53EA\u6709\u5BBF\u4E3B\u7684 CursorProvider \u6D88\u8D39\u8FC7\uFF08context / fast / thinking \u4E09\u4E2A\u5F00\u5173\uFF09\u3002Cursor 2026-09-20 \u5E9F\u5F03\u5220\u9664\uFF0C\u8FD9\u4E00\u7C7B\u73B0\u5728\u6CA1\u6709\u6D88\u8D39\u70B9\uFF1B\u6CA1\u89C1\u8FC7\u522B\u5BB6\u7684\u771F\u5B9E\u8F7D\u8377\uFF0C\u5148\u8BB0\u8D26\u4E0D\u731C\u5F62\u72B6\u3002"
+  }
+};
+var KNOWN_CATEGORIES = new Set(Object.keys(ACP_CONFIG_CATEGORY_HANDLING));
+function unhandledConfigCategories(configOptions) {
+  if (!configOptions) return [];
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const option of configOptions) {
+    const category = option.category?.trim();
+    if (!category) continue;
+    if (KNOWN_CATEGORIES.has(category)) continue;
+    if (seen.has(category)) continue;
+    seen.add(category);
+    out.push({
+      category,
+      optionId: option.id.trim(),
+      vendorExtension: category.startsWith(VENDOR_CATEGORY_PREFIX)
+    });
+  }
+  return out;
+}
+
 // ../../packages/ycodium-acp-executor/src/mutex.ts
 var Mutex = class {
   locked = false;
@@ -24407,7 +24588,7 @@ var Mutex = class {
 };
 
 // ../../packages/ycodium-acp-executor/src/util.ts
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asTrimmedString(value) {
@@ -24453,11 +24634,11 @@ function extractCommandFromTitle(title) {
   return backtickMatch?.[1]?.trim() || void 0;
 }
 function extractToolCommand(data, title) {
-  const item = isRecord3(data?.["item"]) ? data["item"] : void 0;
-  const itemInput = item && isRecord3(item["input"]) ? item["input"] : void 0;
-  const itemResult = item && isRecord3(item["result"]) ? item["result"] : void 0;
-  const rawInput = isRecord3(data?.["rawInput"]) ? data["rawInput"] : void 0;
-  const dataInput = isRecord3(data?.["input"]) ? data["input"] : void 0;
+  const item = isRecord5(data?.["item"]) ? data["item"] : void 0;
+  const itemInput = item && isRecord5(item["input"]) ? item["input"] : void 0;
+  const itemResult = item && isRecord5(item["result"]) ? item["result"] : void 0;
+  const rawInput = isRecord5(data?.["rawInput"]) ? data["rawInput"] : void 0;
+  const dataInput = isRecord5(data?.["input"]) ? data["input"] : void 0;
   const candidates = [
     normalizeCommandValue(item?.["command"]),
     normalizeCommandValue(itemInput?.["command"]),
@@ -24502,7 +24683,7 @@ function collectPaths(value, paths, seen, depth) {
     }
     return;
   }
-  if (!isRecord3(value)) {
+  if (!isRecord5(value)) {
     return;
   }
   for (const key of ["path", "filePath", "relativePath", "filename", "newPath", "oldPath"]) {
@@ -24565,7 +24746,7 @@ function deriveToolActivityPresentation(input2) {
   const title = asTrimmedString(input2.title);
   const detail = stripTrailingExitCode(asTrimmedString(input2.detail));
   const fallbackSummary = asTrimmedString(input2.fallbackSummary) ?? "Tool";
-  const data = isRecord3(input2.data) ? input2.data : void 0;
+  const data = isRecord5(input2.data) ? input2.data : void 0;
   const command = extractToolCommand(data, title);
   const primaryPath = extractPrimaryPath(data);
   const action = classifyToolAction({
@@ -24597,7 +24778,7 @@ function deriveToolActivityPresentation(input2) {
     };
   }
   if (action === "search") {
-    const rawInput = isRecord3(data?.["rawInput"]) ? data["rawInput"] : void 0;
+    const rawInput = isRecord5(data?.["rawInput"]) ? data["rawInput"] : void 0;
     const query = asTrimmedString(rawInput?.["query"]) ?? asTrimmedString(rawInput?.["pattern"]) ?? asTrimmedString(rawInput?.["searchTerm"]);
     return {
       summary: "Searched files",
@@ -24636,6 +24817,46 @@ function findSessionConfigOption(configOptions, configId) {
   }
   return configOptions.find((option) => option.id.trim() === normalizedConfigId);
 }
+function collectSessionConfigOptionValues(configOption) {
+  if (configOption.type !== "select" || !configOption.options) {
+    return [];
+  }
+  return configOption.options.flatMap(
+    (entry) => "value" in entry ? [entry.value] : entry.options.map((option) => option.value)
+  );
+}
+function collectSessionModelIds(models) {
+  if (!isRecord5(models) || !Array.isArray(models["availableModels"])) {
+    return [];
+  }
+  return models["availableModels"].flatMap(
+    (model) => isRecord5(model) && typeof model["modelId"] === "string" ? [model["modelId"]] : []
+  );
+}
+function catalogModelLastSegment(value) {
+  if (value.startsWith("[")) {
+    let parsed;
+    try {
+      parsed = JSON.parse(value);
+    } catch {
+      return void 0;
+    }
+    if (!Array.isArray(parsed) || parsed.length < 2) return void 0;
+    const last = parsed[parsed.length - 1];
+    return typeof last === "string" ? last : void 0;
+  }
+  const separator = value.indexOf("/");
+  return separator > 0 && separator < value.length - 1 ? value.slice(separator + 1) : void 0;
+}
+function matchAdvertisedModelValue(requestedModelId, advertisedValues) {
+  const wanted = requestedModelId.trim();
+  if (!wanted) return void 0;
+  if (advertisedValues.includes(wanted)) return wanted;
+  const byLastSegment = advertisedValues.filter(
+    (value) => catalogModelLastSegment(value) === wanted
+  );
+  return byLastSegment.length === 1 ? byLastSegment[0] : void 0;
+}
 function parseSessionModeState(sessionResponse) {
   const modes = sessionResponse.modes;
   if (!modes) return void 0;
@@ -24674,7 +24895,7 @@ function parseAvailableCommandsUpdate(params) {
   }
   const commands = [];
   for (const command of availableCommands) {
-    if (!isRecord3(command)) {
+    if (!isRecord5(command)) {
       continue;
     }
     const name = typeof command["name"] === "string" ? command["name"].trim() : "";
@@ -24682,7 +24903,7 @@ function parseAvailableCommandsUpdate(params) {
       continue;
     }
     const description = typeof command["description"] === "string" ? command["description"].trim() || void 0 : void 0;
-    const input2 = isRecord3(command["input"]) ? command["input"] : void 0;
+    const input2 = isRecord5(command["input"]) ? command["input"] : void 0;
     const inputHint = typeof input2?.["hint"] === "string" ? input2["hint"].trim() || void 0 : void 0;
     commands.push({
       name,
@@ -24744,7 +24965,7 @@ function extractCommandFromTitle2(title) {
   return match?.[1]?.trim() || void 0;
 }
 function extractToolCallCommand(rawInput, title) {
-  if (isRecord3(rawInput)) {
+  if (isRecord5(rawInput)) {
     const directCommand = normalizeCommandValue2(rawInput["command"]);
     if (directCommand) {
       return directCommand;
@@ -24771,7 +24992,7 @@ function boundToolCallOutputText(text) {
 }
 var RAW_OUTPUT_TEXT_FIELDS = ["content", "stdout", "stderr", "output"];
 function boundToolCallRawOutput(rawOutput) {
-  if (!isRecord3(rawOutput)) {
+  if (!isRecord5(rawOutput)) {
     return rawOutput;
   }
   let changed = false;
@@ -25001,7 +25222,7 @@ function parseSessionUpdateEvent(params) {
       const entries = Array.isArray(upd["entries"]) ? upd["entries"] : [];
       const plan = entries.map((entry, index) => ({
         step: readAcpText(entry, "content") ?? `Step ${index + 1}`,
-        status: normalizePlanStepStatus(isRecord3(entry) ? entry["status"] : void 0)
+        status: normalizePlanStepStatus(isRecord5(entry) ? entry["status"] : void 0)
       }));
       if (plan.length > 0) {
         events.push({
@@ -25040,7 +25261,7 @@ function parseSessionUpdateEvent(params) {
     }
     case "agent_message_chunk":
     case "agent_thought_chunk": {
-      const content = isRecord3(upd["content"]) ? upd["content"] : void 0;
+      const content = isRecord5(upd["content"]) ? upd["content"] : void 0;
       const contentType = content?.["type"];
       const streamKind = kind === "agent_thought_chunk" ? "reasoning_text" : "assistant_text";
       if (contentType === "text") {
@@ -25107,16 +25328,18 @@ function normalizeModelId(value) {
   return value?.trim() || void 0;
 }
 function modelSelectionStateFromSetup(setup) {
-  const sessionModels = isRecord3(setup.models) ? setup.models : void 0;
+  const sessionModels = isRecord5(setup.models) ? setup.models : void 0;
   const modelConfigId = extractModelConfigId(setup);
   const strategy = sessionModels === void 0 && modelConfigId !== void 0 ? "config-option" : "session/set_model";
-  const configModel = modelConfigId === void 0 ? void 0 : findSessionConfigOption(setup.configOptions, modelConfigId)?.currentValue;
+  const modelConfigOption = modelConfigId === void 0 ? void 0 : findSessionConfigOption(setup.configOptions, modelConfigId);
+  const configModel = modelConfigOption?.currentValue;
   const currentModelId = strategy === "config-option" ? typeof configModel === "string" ? normalizeModelId(configModel) : void 0 : typeof sessionModels?.["currentModelId"] === "string" ? normalizeModelId(sessionModels["currentModelId"]) : void 0;
   return {
     strategy,
     sessionModelsAdvertised: sessionModels !== void 0,
     modelConfigId,
-    currentModelId
+    currentModelId,
+    advertisedModelValues: strategy === "config-option" ? modelConfigOption === void 0 ? [] : collectSessionConfigOptionValues(modelConfigOption) : collectSessionModelIds(sessionModels)
   };
 }
 function createAcpExecutor(options) {
@@ -25135,8 +25358,10 @@ function createAcpExecutor(options) {
     strategy: "session/set_model",
     sessionModelsAdvertised: false,
     modelConfigId: void 0,
-    currentModelId: void 0
+    currentModelId: void 0,
+    advertisedModelValues: []
   };
+  let lastUnmatchedModelId;
   let initializeResult;
   let startResult;
   let startInFlight;
@@ -25461,6 +25686,12 @@ function createAcpExecutor(options) {
     const userInputOutcome = await handlePermissionAsUserInput(params);
     if (userInputOutcome !== void 0) return userInputOutcome;
     const permissionRequest = parsePermissionRequest(params);
+    if (options.autoApprove?.(permissionRequest) === true) {
+      const optionId = selectAutoApprovedAcpPermissionOption(params);
+      if (optionId !== void 0) {
+        return { outcome: { outcome: "selected", optionId } };
+      }
+    }
     const requestId = randomId();
     const outcome = await new Promise((resolve2) => {
       const pending = {
@@ -25548,36 +25779,70 @@ function createAcpExecutor(options) {
     if (requestedModelId === void 0 || requestedModelId === input2.state.currentModelId || input2.state.strategy === "session/set_model" && !input2.state.sessionModelsAdvertised || input2.state.strategy === "config-option" && input2.state.modelConfigId === void 0) {
       return input2.state;
     }
+    const value = matchAdvertisedModelValue(requestedModelId, input2.state.advertisedModelValues);
+    if (value === void 0) {
+      if (requestedModelId !== lastUnmatchedModelId) {
+        lastUnmatchedModelId = requestedModelId;
+        options.log?.info("requested model is not in the agent catalog; keeping its own model", {
+          requestedModelId,
+          currentModelId: input2.state.currentModelId,
+          advertisedModelValues: input2.state.advertisedModelValues
+        });
+      }
+      return input2.state;
+    }
+    if (value === input2.state.currentModelId) {
+      return input2.state;
+    }
     if (input2.state.strategy === "config-option") {
       await connection.request("session/set_config_option", {
         sessionId: input2.acpSessionId,
         configId: input2.state.modelConfigId,
-        value: requestedModelId
+        value
       });
     } else {
       await connection.request("session/set_model", {
         sessionId: input2.acpSessionId,
-        modelId: requestedModelId
+        modelId: value
       });
     }
     if (!isLive(input2.expectedGeneration)) {
       throw new AcpExecutorDisposedError();
     }
-    return { ...input2.state, currentModelId: requestedModelId };
+    return { ...input2.state, currentModelId: value };
+  };
+  const applyRequestedEffort = async (input2) => {
+    const requested = input2.requestedEffort?.trim();
+    if (!requested) return;
+    const configOptions = typeof input2.setup === "object" && input2.setup !== null ? input2.setup.configOptions : void 0;
+    const effort = findAcpEffortConfig(configOptions);
+    if (effort === void 0) return;
+    const matched = effort.choices.find((choice) => choice.value === requested);
+    if (matched === void 0) {
+      options.log?.info("requested effort is not in the agent catalog; keeping its own", {
+        requestedEffort: requested,
+        advertised: effort.choices.map((choice) => choice.value)
+      });
+      return;
+    }
+    if (matched.isDefault === true) return;
+    if (!isLive(input2.expectedGeneration)) return;
+    try {
+      await connection.request("session/set_config_option", {
+        sessionId: input2.acpSessionId,
+        configId: effort.configId,
+        value: requested
+      });
+    } catch (error62) {
+      options.log?.info("setting the effort level failed; the session keeps its own", {
+        requestedEffort: requested,
+        configId: effort.configId,
+        error: error62 instanceof Error ? error62.message : String(error62)
+      });
+    }
   };
   const startOnce = async (expectedGeneration) => {
-    const initializePayload = {
-      protocolVersion: PROTOCOL_VERSION,
-      clientCapabilities: {
-        fs: {
-          readTextFile: false,
-          writeTextFile: false,
-          ...options.clientCapabilities?.fs
-        },
-        terminal: options.clientCapabilities?.terminal ?? false
-      },
-      clientInfo: options.clientInfo
-    };
+    const initializePayload = acpInitializePayload(options.clientInfo, options.clientCapabilities);
     const initialized = await connection.request(
       "initialize",
       initializePayload
@@ -25621,12 +25886,27 @@ function createAcpExecutor(options) {
       nextSessionId = created.sessionId;
       setup = created;
     }
+    const unhandledCategories = unhandledConfigCategories(
+      setup.configOptions
+    );
+    if (unhandledCategories.length > 0) {
+      options.log?.info("acp session reported config option categories we do not handle", {
+        sessionId: nextSessionId,
+        categories: unhandledCategories
+      });
+    }
     const nextModelSelectionState = await applyRequestedModel({
       state: modelSelectionStateFromSetup(setup),
       acpSessionId: nextSessionId,
       requestedModelId: options.requestedModelId,
       expectedGeneration
     });
+    await applyRequestedEffort({
+      setup,
+      acpSessionId: nextSessionId,
+      requestedEffort: options.requestedEffort,
+      expectedGeneration
+    });
     if (options.beforeApplyResult) {
       await options.beforeApplyResult();
     }
@@ -25991,6 +26271,26 @@ function createAcpExecutor(options) {
     };
     apply();
   };
+  const setNativeMode = async (modeId) => {
+    failIfDisposed();
+    const started = startResult;
+    if (started === void 0) {
+      throw new AcpExecutorRequestError("session/set_mode", "session has not started yet");
+    }
+    const configId = acpModeConfigId(started.sessionSetupResult);
+    if (configId !== void 0) {
+      await connection.request("session/set_config_option", {
+        sessionId: started.sessionId,
+        configId,
+        value: modeId
+      });
+      return;
+    }
+    await connection.request("session/set_mode", {
+      sessionId: started.sessionId,
+      modeId
+    });
+  };
   const respondToUserInput = async (requestId, answers) => {
     failIfDisposed();
     const pending = pendingUserInputs.get(requestId);
@@ -26007,7 +26307,7 @@ function createAcpExecutor(options) {
     pendingUserInputs.delete(requestId);
     pending.resolve({
       kind: "answered",
-      answers: isRecord3(answers) ? answers : {}
+      answers: isRecord5(answers) ? answers : {}
     });
   };
   const dispose = async () => {
@@ -26057,13 +26357,56 @@ function createAcpExecutor(options) {
     cancel,
     respondToRequest,
     respondToUserInput,
+    setNativeMode,
     dispose
   };
 }
 
+// ../../packages/ycodium-acp-executor/src/probe.ts
+function withProbeTimeout(promise2, timeoutMs, method) {
+  return new Promise((resolve2, reject) => {
+    const timer = setTimeout(() => {
+      reject(new Error(`ACP probe request '${method}' timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    timer.unref?.();
+    promise2.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve2(value);
+      },
+      (error62) => {
+        clearTimeout(timer);
+        reject(error62 instanceof Error ? error62 : new Error(String(error62)));
+      }
+    );
+  });
+}
+async function openAcpProbeHandshake(input2) {
+  const connection = createAcpConnection({
+    readable: input2.readable,
+    writable: input2.writable,
+    onNotification: () => void 0
+  });
+  try {
+    const initializeResult = await withProbeTimeout(
+      connection.request("initialize", acpInitializePayload(input2.clientInfo)),
+      input2.requestTimeoutMs,
+      "initialize"
+    );
+    return {
+      initializeResult,
+      request: (method, params) => withProbeTimeout(connection.request(method, params), input2.requestTimeoutMs, method),
+      close: () => connection.close()
+    };
+  } catch (error62) {
+    await connection.close().catch(() => void 0);
+    throw error62;
+  }
+}
+
 // src/config.ts
 var GROK_DEFAULT_LAUNCH_ARGS = "agent stdio";
-function isRecord4(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readString(value) {
@@ -26076,7 +26419,7 @@ function readEnvironment(value) {
   if (!Array.isArray(value)) return {};
   const env = {};
   for (const entry of value) {
-    if (!isRecord4(entry)) continue;
+    if (!isRecord6(entry)) continue;
     const name = readTrimmed(entry["name"]);
     if (name.length === 0) continue;
     env[name] = readString(entry["value"]);
@@ -26084,7 +26427,7 @@ function readEnvironment(value) {
   return env;
 }
 function parseGrokInstanceConfig(config2) {
-  if (!isRecord4(config2)) {
+  if (!isRecord6(config2)) {
     return {
       binaryPath: "",
       launchArgs: GROK_DEFAULT_LAUNCH_ARGS,
@@ -26094,7 +26437,7 @@ function parseGrokInstanceConfig(config2) {
       envelopeDriver: void 0
     };
   }
-  const nested = isRecord4(config2["config"]) ? config2["config"] : void 0;
+  const nested = isRecord6(config2["config"]) ? config2["config"] : void 0;
   const settings = nested ?? config2;
   return {
     binaryPath: readTrimmed(settings["binaryPath"]),
@@ -26161,7 +26504,7 @@ function tokenizeLaunchArgs(value) {
 import * as NodeFS from "node:fs";
 import * as NodePath from "node:path";
 var AUTH_FILE_NAME = "auth.json";
-var isRecord5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var readString2 = (record2, key) => {
   const value = record2[key];
   if (typeof value !== "string") return void 0;
@@ -26175,7 +26518,7 @@ var parseJsonRecord = (raw) => {
   } catch {
     return void 0;
   }
-  return isRecord5(parsed) ? parsed : void 0;
+  return isRecord7(parsed) ? parsed : void 0;
 };
 var directoryExists = (homePath) => {
   try {
@@ -26213,7 +26556,7 @@ var joinName = (record2) => {
 };
 var findIdentityEntry = (parsed) => {
   for (const value of Object.values(parsed)) {
-    if (!isRecord5(value)) continue;
+    if (!isRecord7(value)) continue;
     if (readString2(value, "email") !== void 0 || readString2(value, "user_id") !== void 0) {
       return value;
     }
@@ -26243,7 +26586,8 @@ var readGrokAccount = (homePath) => {
 };
 
 // src/grokSupport.ts
-var isRecord6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+import { modelSelectionStringOption } from "@ycodium-ai/plugin-api/executor";
+var isRecord8 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var trimmed = (value) => {
   if (typeof value !== "string") return void 0;
   const text = value.trim();
@@ -26253,51 +26597,153 @@ function grokReasoningEffortArgs(effort) {
   const value = effort?.trim();
   return value === void 0 || value.length === 0 ? [] : ["--reasoning-effort", value];
 }
-var GROK_REASONING_OPTION_ID = "effort";
-function modelSelectionStringOption(selection, optionId) {
-  if (!isRecord6(selection)) return void 0;
-  const options = selection["options"];
-  if (!Array.isArray(options)) return void 0;
-  for (const entry of options) {
-    if (!isRecord6(entry)) continue;
-    if (entry["id"] !== optionId) continue;
-    return trimmed(entry["value"]);
+var GROK_NATIVE_MODE_BY_RUNTIME_MODE = {
+  "approval-required": "default",
+  "auto-accept-edits": "auto",
+  auto: "auto",
+  "full-access": "bypassPermissions"
+};
+var GROK_NATIVE_MODES = [
+  {
+    id: "default",
+    name: "Ask every time",
+    description: "Asks before writing files, running commands, or spawning subagents."
+  },
+  {
+    id: "auto",
+    name: "Auto",
+    description: "Runs edits and subagents without asking; still asks for shell writes and monitor."
+  },
+  {
+    id: "bypassPermissions",
+    name: "Bypass permissions",
+    description: "Never asks. Every tool runs immediately."
   }
-  return void 0;
+];
+var GROK_DEFAULT_NATIVE_MODE_ID = "default";
+var GROK_NATIVE_MODE_REPORT = {
+  nativeModes: GROK_NATIVE_MODES.map((mode) => ({
+    id: mode.id,
+    name: mode.name,
+    description: mode.description
+  })),
+  currentNativeModeId: GROK_DEFAULT_NATIVE_MODE_ID,
+  nativeModeByRuntimeMode: GROK_NATIVE_MODE_BY_RUNTIME_MODE
+};
+function isGrokNativeModeId(value) {
+  return GROK_NATIVE_MODES.some((mode) => mode.id === value);
+}
+function grokPermissionModeFor(runtimeMode, nativeModeId) {
+  return nativeModeId !== void 0 && isGrokNativeModeId(nativeModeId) ? nativeModeId : GROK_NATIVE_MODE_BY_RUNTIME_MODE[runtimeMode];
+}
+function grokPermissionModeArgs(runtimeMode, nativeModeId) {
+  return ["--permission-mode", grokPermissionModeFor(runtimeMode, nativeModeId)];
+}
+var GROK_AUTO_APPROVAL_COVERAGE = {
+  asked: ["run_terminal_command", "monitor"],
+  unasked: [
+    "write",
+    "search_replace",
+    "read_file",
+    "todo_write",
+    "web_search",
+    "scheduler_create",
+    "spawn_subagent",
+    "workflow",
+    "use_tool",
+    "send_feedback",
+    "image_gen"
+  ]
+};
+var GROK_APPROVAL_COVERAGE = {
+  default: {
+    asked: [
+      "write",
+      "search_replace",
+      "run_terminal_command",
+      "monitor",
+      "spawn_subagent",
+      "workflow",
+      "scheduler_create",
+      "use_tool",
+      "send_feedback",
+      "image_gen"
+    ],
+    unasked: ["read_file", "todo_write", "web_search"]
+  },
+  // 「编辑不问、命令仍问」的那一档，实测只剩 shell 写删与 monitor 会问——落差就是
+  // 这条要说的。
+  auto: GROK_AUTO_APPROVAL_COVERAGE,
+  // 全放行：档位自己就说「不问」，没有落差可报。
+  bypassPermissions: null
+};
+var GROK_EXTERNAL_PERMISSION_RULES_PATHS = [
+  // 顺序无语义：**这不是优先级表**，只是文案里列出来的次序（碰巧按用户级 → 用户本地
+  // → 机器级排，别读出别的意思）。三份同时给冲突规则时谁赢**没量过**，别照这个顺序
+  // 推断；要用就先量。唯一量过的相邻关系是「`settings.local.json` 的 `deny` 赢过
+  // `settings.json` 的 `allow`」（F13 `loc-local-deny`）。
+  "~/.claude/settings.json",
+  "~/.claude/settings.local.json",
+  "/etc/claude-code/managed-settings.json"
+];
+var RUNTIME_MODE_APPROVAL_COVERAGE_CODE = "runtime-mode-approval-coverage";
+function grokRuntimeModeCaveat(nativeModeId) {
+  const coverage = GROK_APPROVAL_COVERAGE[nativeModeId];
+  if (coverage === null) return void 0;
+  const message = `Approval prompts do not cover every Grok tool in this mode. No prompt, inside or outside the workspace: ${coverage.unasked.join(", ")}, plus shell commands Grok rates safe such as \`touch\`. Prompts: ${coverage.asked.join(", ")}. Permission rules in ${GROK_EXTERNAL_PERMISSION_RULES_PATHS.join(", ")} override this mode \u2014 a matching allow entry drops the prompt, a matching deny entry blocks the call outright.`;
+  return {
+    code: RUNTIME_MODE_APPROVAL_COVERAGE_CODE,
+    nativeModeId,
+    asked: coverage.asked,
+    unasked: coverage.unasked,
+    externalRulesPaths: GROK_EXTERNAL_PERMISSION_RULES_PATHS,
+    message
+  };
 }
+var GROK_REASONING_OPTION_ID = "reasoningEffort";
 function resolveGrokAuthMethodId(initializeResult) {
-  const authMethods = isRecord6(initializeResult) ? initializeResult["authMethods"] : void 0;
+  const authMethods = isRecord8(initializeResult) ? initializeResult["authMethods"] : void 0;
   if (!Array.isArray(authMethods)) return void 0;
   for (const method of authMethods) {
-    if (isRecord6(method) && method["id"] === "cached_token") return "cached_token";
+    if (isRecord8(method) && method["id"] === "cached_token") return "cached_token";
   }
   return void 0;
 }
 var positive = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.trunc(value) : void 0;
 function grokPromptUsage(promptResponse) {
-  if (!isRecord6(promptResponse)) return void 0;
+  if (!isRecord8(promptResponse)) return void 0;
   const meta3 = promptResponse["_meta"];
-  if (!isRecord6(meta3)) return void 0;
+  if (!isRecord8(meta3)) return void 0;
   const usedTokens = positive(meta3["totalTokens"]);
   if (usedTokens === void 0) return void 0;
   return { usedTokens, modelId: trimmed(meta3["modelId"]) };
 }
-function grokAdvertisedModels(initializeResult) {
-  if (!isRecord6(initializeResult)) return [];
+function grokModelState(initializeResult) {
+  if (!isRecord8(initializeResult)) return void 0;
   const meta3 = initializeResult["_meta"];
-  if (!isRecord6(meta3)) return [];
+  if (!isRecord8(meta3)) return void 0;
   const modelState = meta3["modelState"];
-  if (!isRecord6(modelState)) return [];
+  if (!isRecord8(modelState)) return void 0;
   const availableModels = modelState["availableModels"];
-  if (!Array.isArray(availableModels)) return [];
+  if (!Array.isArray(availableModels)) return void 0;
+  return { currentModelId: trimmed(modelState["currentModelId"]), availableModels };
+}
+function grokAdvertisedModels(initializeResult) {
+  const state = grokModelState(initializeResult);
+  if (state === void 0) return [];
   const models = [];
-  for (const entry of availableModels) {
-    if (!isRecord6(entry)) continue;
+  for (const entry of state.availableModels) {
+    if (!isRecord8(entry)) continue;
     const modelId = trimmed(entry["modelId"]);
     if (modelId === void 0) continue;
     const modelMeta = entry["_meta"];
-    const contextWindow = isRecord6(modelMeta) ? positive(modelMeta["totalContextTokens"]) : void 0;
-    models.push({ modelId, contextWindow });
+    const contextWindow = isRecord8(modelMeta) ? positive(modelMeta["totalContextTokens"]) : void 0;
+    models.push({
+      modelId,
+      name: trimmed(entry["name"]),
+      isDefault: state.currentModelId !== void 0 && modelId === state.currentModelId,
+      contextWindow
+    });
   }
   return models;
 }
@@ -26306,7 +26752,7 @@ var XAI_ASK_USER_QUESTION_METHODS = [
   "x.ai/ask_user_question"
 ];
 var readOption = (value) => {
-  if (!isRecord6(value)) return void 0;
+  if (!isRecord8(value)) return void 0;
   const label = typeof value["label"] === "string" ? value["label"] : void 0;
   if (label === void 0) return void 0;
   return {
@@ -26317,7 +26763,7 @@ var readOption = (value) => {
   };
 };
 var readQuestion = (value) => {
-  if (!isRecord6(value)) return void 0;
+  if (!isRecord8(value)) return void 0;
   const question = typeof value["question"] === "string" ? value["question"] : void 0;
   if (question === void 0) return void 0;
   const optionsRaw = value["options"];
@@ -26333,9 +26779,9 @@ var readQuestion = (value) => {
   };
 };
 function parseXAiAskUserQuestionParams(params) {
-  const candidates = [params, ...isRecord6(params) ? [params["params"]] : []];
+  const candidates = [params, ...isRecord8(params) ? [params["params"]] : []];
   for (const candidate of candidates) {
-    if (!isRecord6(candidate)) continue;
+    if (!isRecord8(candidate)) continue;
     const questionsRaw = candidate["questions"];
     if (!Array.isArray(questionsRaw)) continue;
     const questions = questionsRaw.flatMap((entry) => {
@@ -26412,14 +26858,14 @@ var grokPromptSettlement = {
   // agent 认回哪个键是它的事，两个都给才不猜版本。
   requestFields: (promptKey) => ({ _meta: { promptId: promptKey, requestId: promptKey } }),
   responseKey: (response) => {
-    if (!isRecord6(response)) return void 0;
+    if (!isRecord8(response)) return void 0;
     const meta3 = response["_meta"];
-    if (!isRecord6(meta3)) return void 0;
+    if (!isRecord8(meta3)) return void 0;
     return trimmed(meta3["promptId"]) ?? trimmed(meta3["requestId"]);
   },
   fromNotification: (method, params) => {
     if (method !== XAI_PROMPT_COMPLETE_METHOD) return void 0;
-    if (!isRecord6(params)) return void 0;
+    if (!isRecord8(params)) return void 0;
     const sessionId = params["sessionId"];
     if (typeof sessionId !== "string") return void 0;
     const stopReason = trimmed(params["stopReason"]);
@@ -26433,57 +26879,53 @@ var grokPromptSettlement = {
   }
 };
 
-// src/streams.ts
-import * as NodeStream2 from "node:stream";
-function nodeStreamsFromHandle(handle) {
-  const readable = new NodeStream2.PassThrough();
-  void (async () => {
-    try {
-      for await (const chunk of handle.stdout) {
-        if (!readable.writable) return;
-        if (!readable.write(chunk)) {
-          await new Promise((resolve2) => {
-            const onDone = () => {
-              readable.off("drain", onDone);
-              readable.off("close", onDone);
-              resolve2();
-            };
-            readable.once("drain", onDone);
-            readable.once("close", onDone);
-          });
-        }
-      }
-    } catch (error62) {
-      readable.destroy(error62 instanceof Error ? error62 : new Error(String(error62)));
-      return;
-    }
-    if (readable.writable) readable.end();
-  })();
-  void (async () => {
-    for await (const _chunk of handle.stderr) {
-    }
-  })().catch(() => void 0);
-  const writable = new NodeStream2.Writable({
-    write(chunk, _encoding, callback) {
-      const bytes = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
-      handle.writeStdin(bytes).then(
-        () => callback(),
-        (error62) => callback(error62 instanceof Error ? error62 : new Error(String(error62)))
-      );
-    },
-    final(callback) {
-      handle.closeStdin().then(
-        () => callback(),
-        (error62) => callback(error62 instanceof Error ? error62 : new Error(String(error62)))
-      );
-    }
-  });
-  return { readable, writable };
+// src/probeModels.ts
+import { nodeStreamsFromHandle } from "@ycodium-ai/plugin-api/process-stdin";
+var PROBE_REQUEST_TIMEOUT_MS = 2e4;
+function grokProbeModels(initializeResult) {
+  if (grokModelState(initializeResult) === void 0) return void 0;
+  return grokAdvertisedModels(initializeResult).map((model) => ({
+    slug: model.modelId,
+    ...model.name === void 0 ? {} : { name: model.name },
+    ...model.isDefault ? { isDefault: true } : {},
+    ...model.contextWindow === void 0 ? {} : { contextWindow: model.contextWindow }
+  }));
+}
+var failureDetail = (error62) => (error62 instanceof Error ? error62.message : String(error62)).trim() || void 0;
+async function probeGrokModels(input2) {
+  const { recipe, host, env } = input2;
+  let handle;
+  try {
+    handle = await host.process.spawn({
+      program: recipe.binaryPath,
+      args: tokenizeLaunchArgs(recipe.launchArgs),
+      cwd: process.cwd(),
+      owner: { bindingId: host.bindingId },
+      ...Object.keys(env).length > 0 ? { env } : {}
+    });
+  } catch (error62) {
+    return { kind: "not-started", detail: failureDetail(error62) };
+  }
+  let handshake;
+  try {
+    const { readable, writable } = nodeStreamsFromHandle(handle);
+    handshake = await openAcpProbeHandshake({
+      readable,
+      writable,
+      clientInfo: GROK_CLIENT_INFO,
+      requestTimeoutMs: PROBE_REQUEST_TIMEOUT_MS
+    });
+    return { kind: "answered", models: grokProbeModels(handshake.initializeResult) };
+  } catch (error62) {
+    return { kind: "failed", detail: failureDetail(error62) };
+  } finally {
+    await handshake?.close().catch(() => void 0);
+    await handle.kill("SIGTERM").catch(() => void 0);
+  }
 }
 
 // src/grokInstance.ts
 var RESUME_SCHEMA_VERSION = 1;
-var CLIENT_INFO = { name: "ycodium-agent-grok", version: "0.1.0" };
 var yieldTick = () => new Promise((resolve2) => {
   setImmediate(resolve2);
 });
@@ -26536,6 +26978,9 @@ function resolveGrokHomePath(value) {
   if (trimmed2.length === 0) return NodePath2.join(NodeOS.homedir(), ".grok");
   return NodePath2.resolve(expandHomePath(trimmed2));
 }
+function grokContinuationKey(recipe) {
+  return `grok:home:${resolveGrokHomePath(recipe.homePath)}`;
+}
 function resolveAccountHomePath(recipe, configuredHome) {
   const fromEnvironment = recipe.environment["GROK_HOME"]?.trim();
   if (fromEnvironment !== void 0 && fromEnvironment.length > 0) {
@@ -26543,21 +26988,15 @@ function resolveAccountHomePath(recipe, configuredHome) {
   }
   return resolveGrokHomePath(configuredHome);
 }
-function compactEnv(env) {
-  const out = {};
-  for (const [key, value] of Object.entries(env)) {
-    if (value !== void 0) out[key] = value;
-  }
-  return out;
-}
-function buildSpawnEnv(recipe, launch, resolvedHomePath, homeConfigured) {
+function buildSpawnEnv(recipe, resolvedHomePath, homeConfigured, launchEnv = {}) {
   const homeInjection = homeConfigured ? { [GROK_CARD.homeEnvVar]: resolvedHomePath } : {};
-  return {
-    ...compactEnv(launch.processEnv),
-    ...homeInjection,
-    ...recipe.environment,
-    GROK_OAUTH2_REFERRER: "ycodium"
-  };
+  return mergeLaunchEnv({
+    brainSlots: brainSlotEnvKeys(GROK_CARD),
+    accountHome: homeInjection,
+    instanceTable: recipe.environment,
+    handOverrides: { GROK_OAUTH2_REFERRER: "ycodium" },
+    launch: launchEnv
+  });
 }
 function nowIso() {
   return (/* @__PURE__ */ new Date()).toISOString();
@@ -26601,24 +27040,49 @@ var createGrokInstance = (config2, host) => {
         return { status: "unknown" };
     }
   };
-  const instance = {
-    probe: async () => {
-      if (recipe.binaryPath.length === 0) {
-        return {
-          installed: false,
-          version: null,
-          readiness: "error",
-          auth: { status: "unknown" },
-          detail: "Grok program path is not configured"
-        };
-      }
+  const probe = async () => {
+    if (recipe.binaryPath.length === 0) {
       return {
-        installed: true,
+        installed: false,
         version: null,
-        readiness: "unchecked",
-        auth: probeAuth()
+        readiness: "error",
+        auth: { status: "unknown" },
+        detail: "Grok program path is not configured"
       };
-    },
+    }
+    const configuredHome = recipe.homePath;
+    const outcome = await probeGrokModels({
+      recipe,
+      host,
+      env: buildSpawnEnv(
+        recipe,
+        resolveGrokHomePath(configuredHome),
+        configuredHome.trim().length > 0
+      )
+    });
+    if (outcome.kind !== "answered") {
+      return {
+        installed: outcome.kind === "failed",
+        version: null,
+        readiness: "error",
+        auth: probeAuth(),
+        ...outcome.detail === void 0 ? {} : { detail: outcome.detail },
+        // 装着但握不上手时，界面照样画权限格。不报档就退回宿主四档，而那四档对这双手
+        // 是撒谎的——这台开发机的 grok 就长期停在这个出口上。
+        ...outcome.kind === "failed" ? GROK_NATIVE_MODE_REPORT : {}
+      };
+    }
+    return {
+      installed: true,
+      version: null,
+      readiness: "ready",
+      auth: probeAuth(),
+      ...outcome.models === void 0 ? {} : { models: outcome.models },
+      ...GROK_NATIVE_MODE_REPORT
+    };
+  };
+  const instance = {
+    probe,
     startSession: async (input2, signal) => {
       if (disposed) throw new Error("instance disposed");
       if (signal?.aborted) throw new Error("aborted");
@@ -26634,11 +27098,18 @@ var createGrokInstance = (config2, host) => {
       }
       const configuredHome = input2.launch.homePath?.trim() || recipe.homePath;
       const resolvedHomePath = resolveGrokHomePath(configuredHome);
-      const env = buildSpawnEnv(recipe, input2.launch, resolvedHomePath, configuredHome.length > 0);
+      const env = buildSpawnEnv(
+        recipe,
+        resolvedHomePath,
+        configuredHome.length > 0,
+        input2.launch.processEnv
+      );
       const effort = modelSelectionStringOption(input2.modelSelection, GROK_REASONING_OPTION_ID);
       const baseArgs = tokenizeLaunchArgs(recipe.launchArgs);
       const insertAt = baseArgs.length <= 1 ? baseArgs.length : baseArgs.length - 1;
+      const permissionMode = grokPermissionModeFor(input2.runtimeMode, input2.nativeModeId);
       const args = [
+        ...grokPermissionModeArgs(input2.runtimeMode, permissionMode),
         ...baseArgs.slice(0, insertAt),
         ...grokReasoningEffortArgs(effort),
         ...baseArgs.slice(insertAt)
@@ -26650,7 +27121,7 @@ var createGrokInstance = (config2, host) => {
         owner: { bindingId: host.bindingId },
         ...Object.keys(env).length > 0 ? { env } : {}
       });
-      const { readable, writable } = nodeStreamsFromHandle(handle);
+      const { readable, writable } = nodeStreamsFromHandle2(handle);
       const resume = input2.discardResumeCursor === true ? void 0 : parseAcpResumeCursor(input2.resumeCursor, RESUME_SCHEMA_VERSION);
       const requestedModelId = input2.launch.requestedModelId?.trim() || modelIdFromSelection(input2.modelSelection);
       let initializeResult;
@@ -26661,7 +27132,8 @@ var createGrokInstance = (config2, host) => {
         threadId: input2.threadId,
         provider: GROK_DRIVER_KIND,
         providerInstanceId: host.instanceId,
-        clientInfo: CLIENT_INFO,
+        clientInfo: GROK_CLIENT_INFO,
+        log: host.log,
         // 等 `initialize` 回来再挑认证方式：能不能用 `cached_token`，只有 agent
         // 播报的 `authMethods` 说了算（见 resolveGrokAuthMethodId）。
         authMethodId: resolveGrokAuthMethodId,
@@ -26715,6 +27187,7 @@ var createGrokInstance = (config2, host) => {
           providerInstanceId: host.instanceId,
           status: "idle",
           runtimeMode: input2.runtimeMode,
+          nativeModeId: permissionMode,
           cwd,
           threadId: input2.threadId,
           createdAt,
@@ -26734,6 +27207,27 @@ var createGrokInstance = (config2, host) => {
           threadId: input2.threadId,
           sessionId: started.sessionId
         });
+        const caveat = grokRuntimeModeCaveat(permissionMode);
+        if (caveat !== void 0) {
+          events.push({
+            type: "runtime.warning",
+            eventId: NodeCrypto2.randomUUID(),
+            provider: GROK_DRIVER_KIND,
+            providerInstanceId: host.instanceId,
+            threadId: input2.threadId,
+            createdAt: nowIso(),
+            payload: {
+              message: caveat.message,
+              detail: {
+                code: caveat.code,
+                nativeModeId: caveat.nativeModeId,
+                asked: caveat.asked,
+                unasked: caveat.unasked,
+                externalRulesPaths: caveat.externalRulesPaths
+              }
+            }
+          });
+        }
         return session;
       } catch (error62) {
         await executor.dispose().catch(() => void 0);
@@ -26803,14 +27297,6 @@ var createGrokInstance = (config2, host) => {
       const booked = requireThread(threadId);
       await booked.executor.respondToUserInput(requestId, answers);
     },
-    setRuntimeMode: async (threadId, runtimeMode) => {
-      const booked = requireThread(threadId);
-      booked.session = {
-        ...booked.session,
-        runtimeMode,
-        updatedAt: nowIso()
-      };
-    },
     stopSession: async (threadId) => {
       const booked = threads.get(threadId);
       if (booked === void 0) return;
@@ -26822,6 +27308,7 @@ var createGrokInstance = (config2, host) => {
       return { threadId, turns: booked.turns };
     },
     events,
+    continuationKey: grokContinuationKey(recipe),
     dispose: async () => {
       if (disposed) return;
       disposed = true;
@@ -26899,23 +27386,7 @@ var createGrokInstance = (config2, host) => {
         await operation.handle.kill("SIGTERM").catch(() => void 0);
         await operation.stdoutText.catch(() => void 0);
       },
-      verify: async () => {
-        if (recipe.binaryPath.length === 0) {
-          return {
-            installed: false,
-            version: null,
-            readiness: "error",
-            auth: { status: "unknown" },
-            detail: "Grok program path is not configured"
-          };
-        }
-        return {
-          installed: true,
-          version: null,
-          readiness: "unchecked",
-          auth: probeAuth()
-        };
-      }
+      verify: () => probe()
     }
   };
   return instance;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ycodium-ai/agent-grok",
-  "version": "0.2.2106",
+  "version": "0.2.2130",
   "description": "Grok executor: grok CLI over Agent Client Protocol stdio.",
   "keywords": [
     "ycodium",
@@ -20,9 +20,9 @@
     "@types/node": "24.12.4",
     "esbuild": "0.28.1",
     "vite-plus": "0.2.2",
-    "@ycodium-ai/plugin-api": "0.2.2106",
-    "ycodium-acp-executor": "0.0.0",
-    "ycodium-acp-protocol": "0.0.0"
+    "@ycodium-ai/plugin-api": "0.2.2130",
+    "ycodium-acp-protocol": "0.0.0",
+    "ycodium-acp-executor": "0.0.0"
   },
   "ycodium": {
     "plugin": "./dist/index.js",