fengming 0.3.7 → 0.3.9

package/dist/agent-tools-HmaDv4ot.js

@@ -1,2506 +0,0 @@
-import { a as normalizeLowercaseStringOrEmpty, s as normalizeOptionalLowercaseString } from "./string-coerce-DKw2K5wM.js";
-import { o as isRecord } from "./record-coerce-Btbek4uV.js";
-import { t as createLazyImportLoader } from "./lazy-promise-Djskx0qC.js";
-import { _ as uniqueStrings, l as normalizeStringEntries, v as uniqueValues } from "./string-normalization-B8G0vlWE.js";
-import "./fs-safe-CR_om3kX.js";
-import { a as root, s as PATH_ALIAS_POLICIES } from "./secure-temp-dir-BvCzS-gM.js";
-import { r as openRootFile } from "./root-file-jRMCpJW4.js";
-import "./boundary-file-read-CF5H6Z2a.js";
-import "./agent-scope-EEbMCF2I.js";
-import { c as parseAgentSessionKey } from "./session-key-utils-CdfsDYvz.js";
-import { l as normalizeAgentId } from "./session-key-CJf5_zWs.js";
-import { c as resolveDefaultAgentId, r as resolveAgentConfig } from "./agent-scope-config-BHdZonI2.js";
-import { a as logWarn } from "./logger-CT4TpBlo.js";
-import { a as resolveGatewayMessageChannel } from "./message-channel-normalize-CaOaCinb.js";
-import "./message-channel-DcN_7tYD.js";
-import { t as bindAbortRelay } from "./fetch-timeout-CEQfcibl.js";
-import { n as assertSandboxPath } from "./sandbox-paths-IHN5V0Q8.js";
-import { i as toRelativeSandboxPath, n as resolveWorkspaceRoot, r as resolvePathFromInput } from "./workspace-dir-B27rGncD.js";
-import { P as createCodingTools, V as createReadTool } from "./sessions-DAiX4pJZ.js";
-import { c as EXEC_TOOL_DISPLAY_SUMMARY, l as PROCESS_TOOL_DISPLAY_SUMMARY } from "./tool-catalog-BfQXK2pl.js";
-import { a as collectExplicitDenylist, c as hasRestrictiveAllowPolicy, f as expandToolGroups, h as resolveToolProfilePolicy, i as collectExplicitAllowlist, l as mergeAlsoAllowPolicy, m as normalizeToolName, u as replaceWithEffectiveToolAllowlist } from "./tool-policy-Dv92jaRW.js";
-import { t as isToolAllowedByPolicies } from "./tool-policy-match-BK9FXN4N.js";
-import { _ as SANDBOX_AGENT_WORKSPACE_MOUNT } from "./constants-f1q_ho_6.js";
-import { S as wrapToolWorkspaceRootGuardWithOptions, _ as createSandboxedEditTool, b as wrapToolMemoryFlushAppendOnlyWrite, g as createHostWorkspaceWriteTool, h as createHostWorkspaceEditTool, m as createFengMingReadTool, p as resolveFengMingPluginToolsForOptions, t as createFengMingTools, v as createSandboxedReadTool, x as wrapToolWorkspaceRootGuard, y as createSandboxedWriteTool } from "./fengming-tools-gQkwsWYz.js";
-import { o as resolveSubagentCapabilityStore, t as isSubagentEnvelopeSession } from "./subagent-capabilities-BPtXB0Jr.js";
-import { i as resolveInheritedToolPolicyForSession, n as resolveEffectiveToolPolicy, o as resolveSubagentToolPolicyForSession, r as resolveGroupToolPolicy } from "./agent-tools.policy-CAz43ea3.js";
-import { t as resolveSenderToolPolicy } from "./sender-tool-policy-fy2YY1NL.js";
-import { t as HEARTBEAT_RESPONSE_TOOL_NAME } from "./heartbeat-tool-response-BjnQjIIz.js";
-import { o as shouldSuppressManagedWebSearchTool } from "./codex-native-web-search-core-oIHK8MZa.js";
-import { t as normalizeToolParameterSchema } from "./agent-tools-parameter-schema-DxHYZrjk.js";
-import { i as getPluginToolMeta, n as copyPluginToolMeta } from "./tools-C7700Vu-.js";
-import { O as listChannelAgentTools, T as copyChannelAgentToolMeta, _ as wrapToolWithBeforeToolCallHook, a as copyBeforeToolCallHookMarker, u as isToolWrappedWithBeforeToolCallHook } from "./agent-tools.before-tool-call-CNJrIi9o.js";
-import { l as jsonResult, n as ToolInputError, r as asToolParamsRecord } from "./common-DSTX6z7j.js";
-import { r as resolveImageSanitizationLimits } from "./image-sanitization-B1anI66H.js";
-import { t as resolveExecCommandHighlighting } from "./exec-command-highlighting-Djjw4y9J.js";
-import { n as resolveEventSessionRoutingPolicy } from "./event-session-routing-CicaO8ED.js";
-import { I as resolveExecPolicyForMode } from "./exec-approvals-OmSY2hSB.js";
-import { i as resolveMergedSafeBinProfileFixtures } from "./exec-safe-bin-runtime-policy-D8i-qd_X.js";
-import { n as describeProcessTool, t as describeExecTool } from "./bash-tools.descriptions-CmnntKkL.js";
-import { n as processSchema, t as execSchema } from "./bash-tools.schemas-DnH64pm-.js";
-import "./codex-native-web-search-D0_igJhb.js";
-import { t as resolveToolLoopDetectionConfig } from "./tool-loop-detection-config-CFlU3nvl.js";
-import { l as resolveToolFsConfig, o as createToolFsPolicy } from "./local-roots-B0mKVk2X.js";
-import { n as buildDefaultToolPolicyPipelineSteps, t as applyToolPolicyPipeline } from "./tool-policy-pipeline-BtDchKz0.js";
-import fs from "node:fs";
-import path from "node:path";
-import fs$1 from "node:fs/promises";
-import os from "node:os";
-import { spawn } from "node:child_process";
-import { Type } from "typebox";
-//#region src/agents/agent-tools.abort.ts
-function throwAbortError() {
-	const err = /* @__PURE__ */ new Error("已中止");
-	err.name = "AbortError";
-	throw err;
-}
-/**
-* Checks if an object is a valid AbortSignal using structural typing.
-* This is more reliable than `instanceof` across different realms (VM, iframe, etc.)
-* where the AbortSignal constructor may differ.
-*/
-function isAbortSignal(obj) {
-	return obj instanceof AbortSignal;
-}
-function combineAbortSignals(a, b) {
-	if (!a && !b) return;
-	if (a && !b) return a;
-	if (b && !a) return b;
-	if (a?.aborted) return a;
-	if (b?.aborted) return b;
-	if (typeof AbortSignal.any === "function" && isAbortSignal(a) && isAbortSignal(b)) return AbortSignal.any([a, b]);
-	const controller = new AbortController();
-	const onAbort = bindAbortRelay(controller);
-	a?.addEventListener("abort", onAbort, { once: true });
-	b?.addEventListener("abort", onAbort, { once: true });
-	return controller.signal;
-}
-function wrapToolWithAbortSignal(tool, abortSignal) {
-	if (!abortSignal) return tool;
-	const execute = tool.execute;
-	if (!execute) return tool;
-	const wrappedTool = {
-		...tool,
-		execute: async (toolCallId, params, signal, onUpdate) => {
-			const combined = combineAbortSignals(signal, abortSignal);
-			if (combined?.aborted) throwAbortError();
-			return await execute(toolCallId, params, combined, onUpdate);
-		}
-	};
-	copyPluginToolMeta(tool, wrappedTool);
-	copyChannelAgentToolMeta(tool, wrappedTool);
-	copyBeforeToolCallHookMarker(tool, wrappedTool);
-	return wrappedTool;
-}
-//#endregion
-//#region src/agents/agent-tools.deferred-followup.ts
-function applyDeferredFollowupToolDescriptions(tools, params) {
-	const hasCronTool = tools.some((tool) => tool.name === "cron");
-	return tools.map((tool) => {
-		if (tool.name === "exec") return {
-			...tool,
-			description: describeExecTool({
-				agentId: params?.agentId,
-				hasCronTool
-			})
-		};
-		if (tool.name === "process") return {
-			...tool,
-			description: describeProcessTool({ hasCronTool })
-		};
-		return tool;
-	});
-}
-//#endregion
-//#region src/agents/agent-tools.message-provider-policy.ts
-const TOOL_DENY_BY_MESSAGE_PROVIDER = {
-	"discord-voice": ["tts"],
-	voice: ["tts"]
-};
-const TOOL_ALLOW_BY_MESSAGE_PROVIDER = { node: [
-	"canvas",
-	"image",
-	"pdf",
-	"tts",
-	"web_fetch",
-	"web_search"
-] };
-function filterToolNamesByMessageProvider(toolNames, messageProvider) {
-	const normalizedProvider = normalizeOptionalLowercaseString(messageProvider);
-	if (!normalizedProvider) return [...toolNames];
-	const allowedTools = TOOL_ALLOW_BY_MESSAGE_PROVIDER[normalizedProvider];
-	if (allowedTools && allowedTools.length > 0) {
-		const allowedSet = new Set(allowedTools);
-		return toolNames.filter((toolName) => allowedSet.has(toolName));
-	}
-	const deniedTools = TOOL_DENY_BY_MESSAGE_PROVIDER[normalizedProvider];
-	if (!deniedTools || deniedTools.length === 0) return [...toolNames];
-	const deniedSet = new Set(deniedTools);
-	return toolNames.filter((toolName) => !deniedSet.has(toolName));
-}
-function filterToolsByMessageProvider(tools, messageProvider) {
-	const filteredToolNames = filterToolNamesByMessageProvider(tools.map((tool) => tool.name), messageProvider);
-	const remainingCounts = /* @__PURE__ */ new Map();
-	for (const toolName of filteredToolNames) remainingCounts.set(toolName, (remainingCounts.get(toolName) ?? 0) + 1);
-	return tools.filter((tool) => {
-		const remaining = remainingCounts.get(tool.name) ?? 0;
-		if (remaining <= 0) return false;
-		remainingCounts.set(tool.name, remaining - 1);
-		return true;
-	});
-}
-//#endregion
-//#region src/agents/agent-tools.schema.ts
-function isObjectSchemaWithNoRequiredParams(schema) {
-	if (!schema || typeof schema !== "object" || Array.isArray(schema)) return false;
-	const record = schema;
-	const type = record.type;
-	if (!(type === "object" || Array.isArray(type) && type.some((entry) => entry === "object"))) return false;
-	return !schemaHasRequiredParams(record);
-}
-function schemaHasRequiredParams(schema) {
-	if (Array.isArray(schema.required) && schema.required.length > 0) return true;
-	for (const key of [
-		"allOf",
-		"anyOf",
-		"oneOf"
-	]) {
-		const variants = schema[key];
-		if (!Array.isArray(variants)) continue;
-		if (variants.some((variant) => variant !== null && typeof variant === "object" && !Array.isArray(variant) && schemaHasRequiredParams(variant))) return true;
-	}
-	return false;
-}
-function addEmptyObjectArgumentPreparation(tool, parameters) {
-	if (!isObjectSchemaWithNoRequiredParams(parameters)) return tool;
-	return {
-		...tool,
-		prepareArguments: (args) => {
-			const prepared = tool.prepareArguments ? tool.prepareArguments(args) : args;
-			return prepared === null || prepared === void 0 ? {} : prepared;
-		}
-	};
-}
-function normalizeToolParameters(tool, options) {
-	function preserveToolMeta(target) {
-		copyPluginToolMeta(tool, target);
-		copyChannelAgentToolMeta(tool, target);
-		return target;
-	}
-	const schema = tool.parameters && typeof tool.parameters === "object" ? tool.parameters : void 0;
-	if (!schema) return tool;
-	const parameters = normalizeToolParameterSchema(schema, options);
-	return preserveToolMeta({
-		...tool,
-		...addEmptyObjectArgumentPreparation(tool, parameters),
-		parameters
-	});
-}
-//#endregion
-//#region src/agents/apply-patch-update.ts
-async function defaultReadFile(filePath) {
-	return fs$1.readFile(filePath, "utf8");
-}
-async function applyUpdateHunk(filePath, chunks, options) {
-	const originalLines = (await (options?.readFile ?? defaultReadFile)(filePath).catch((err) => {
-		throw new Error(`Failed to read file to update ${filePath}: ${err}`);
-	})).split("\n");
-	if (originalLines.length > 0 && originalLines[originalLines.length - 1] === "") originalLines.pop();
-	let newLines = applyReplacements(originalLines, computeReplacements(originalLines, filePath, chunks));
-	if (newLines.length === 0 || newLines[newLines.length - 1] !== "") newLines = [...newLines, ""];
-	return newLines.join("\n");
-}
-function computeReplacements(originalLines, filePath, chunks) {
-	const replacements = [];
-	let lineIndex = 0;
-	for (const chunk of chunks) {
-		if (chunk.changeContext) {
-			const ctxIndex = seekSequence(originalLines, [chunk.changeContext], lineIndex, false);
-			if (ctxIndex === null) throw new Error(`Failed to find context '${chunk.changeContext}' in ${filePath}`);
-			lineIndex = ctxIndex + 1;
-		}
-		if (chunk.oldLines.length === 0) {
-			const insertionIndex = chunk.changeContext && !chunk.isEndOfFile ? lineIndex : originalLines.length > 0 && originalLines[originalLines.length - 1] === "" ? originalLines.length - 1 : originalLines.length;
-			replacements.push([
-				insertionIndex,
-				0,
-				chunk.newLines
-			]);
-			lineIndex = insertionIndex;
-			continue;
-		}
-		let pattern = chunk.oldLines;
-		let newSlice = chunk.newLines;
-		let found = seekSequence(originalLines, pattern, lineIndex, chunk.isEndOfFile);
-		if (found === null && pattern[pattern.length - 1] === "") {
-			pattern = pattern.slice(0, -1);
-			if (newSlice.length > 0 && newSlice[newSlice.length - 1] === "") newSlice = newSlice.slice(0, -1);
-			found = seekSequence(originalLines, pattern, lineIndex, chunk.isEndOfFile);
-		}
-		if (found === null) throw new Error(`Failed to find expected lines in ${filePath}:\n${chunk.oldLines.join("\n")}`);
-		replacements.push([
-			found,
-			pattern.length,
-			newSlice
-		]);
-		lineIndex = found + pattern.length;
-	}
-	replacements.sort((a, b) => a[0] - b[0]);
-	return replacements;
-}
-function applyReplacements(lines, replacements) {
-	const result = [...lines];
-	for (const [startIndex, oldLen, newLines] of [...replacements].toReversed()) {
-		for (let i = 0; i < oldLen; i += 1) if (startIndex < result.length) result.splice(startIndex, 1);
-		for (let i = 0; i < newLines.length; i += 1) result.splice(startIndex + i, 0, newLines[i]);
-	}
-	return result;
-}
-function seekSequence(lines, pattern, start, eof) {
-	if (pattern.length === 0) return start;
-	if (pattern.length > lines.length) return null;
-	const maxStart = lines.length - pattern.length;
-	const searchStart = eof && lines.length >= pattern.length ? maxStart : start;
-	if (searchStart > maxStart) return null;
-	for (let i = searchStart; i <= maxStart; i += 1) if (linesMatch(lines, pattern, i, (value) => value)) return i;
-	for (let i = searchStart; i <= maxStart; i += 1) if (linesMatch(lines, pattern, i, (value) => value.trimEnd())) return i;
-	for (let i = searchStart; i <= maxStart; i += 1) if (linesMatch(lines, pattern, i, (value) => value.trim())) return i;
-	for (let i = searchStart; i <= maxStart; i += 1) if (linesMatch(lines, pattern, i, (value) => normalizePunctuation(value.trim()))) return i;
-	return null;
-}
-function linesMatch(lines, pattern, start, normalize) {
-	for (let idx = 0; idx < pattern.length; idx += 1) if (normalize(lines[start + idx]) !== normalize(pattern[idx])) return false;
-	return true;
-}
-function normalizePunctuation(value) {
-	return Array.from(value).map((char) => {
-		switch (char) {
-			case "‐":
-			case "‑":
-			case "‒":
-			case "–":
-			case "—":
-			case "―":
-			case "−": return "-";
-			case "‘":
-			case "’":
-			case "‚":
-			case "‛": return "'";
-			case "“":
-			case "”":
-			case "„":
-			case "‟": return "\"";
-			case "\xA0":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case " ":
-			case "　": return " ";
-			default: return char;
-		}
-	}).join("");
-}
-//#endregion
-//#region src/agents/apply-patch.ts
-const BEGIN_PATCH_MARKER = "*** Begin Patch";
-const END_PATCH_MARKER = "*** End Patch";
-const ADD_FILE_MARKER = "*** Add File: ";
-const DELETE_FILE_MARKER = "*** Delete File: ";
-const UPDATE_FILE_MARKER = "*** Update File: ";
-const MOVE_TO_MARKER = "*** Move to: ";
-const EOF_MARKER = "*** End of File";
-const CHANGE_CONTEXT_MARKER = "@@ ";
-const EMPTY_CHANGE_CONTEXT_MARKER = "@@";
-const applyPatchSchema = Type.Object({ input: Type.String({ description: "Patch content using the *** Begin Patch/End Patch format." }) });
-function createApplyPatchTool(options = {}) {
-	const cwd = options.cwd ?? process.cwd();
-	const sandbox = options.sandbox;
-	const workspaceOnly = options.workspaceOnly !== false;
-	return {
-		name: "apply_patch",
-		label: "apply_patch",
-		description: "Apply a patch to one or more files using the apply_patch format. The input should include *** Begin Patch and *** End Patch markers.",
-		parameters: applyPatchSchema,
-		execute: async (_toolCallId, args, signal) => {
-			const params = args;
-			const input = typeof params.input === "string" ? params.input : "";
-			if (!input.trim()) throw new Error("Provide a patch input.");
-			if (signal?.aborted) {
-				const err = /* @__PURE__ */ new Error("已中止");
-				err.name = "AbortError";
-				throw err;
-			}
-			const result = await applyPatch(input, {
-				cwd,
-				sandbox,
-				workspaceOnly,
-				signal
-			});
-			return {
-				content: [{
-					type: "text",
-					text: result.text
-				}],
-				details: { summary: result.summary }
-			};
-		}
-	};
-}
-async function applyPatch(input, options) {
-	const parsed = parsePatchText(input);
-	if (parsed.hunks.length === 0) throw new Error("没有文件被修改");
-	const summary = {
-		added: [],
-		modified: [],
-		deleted: []
-	};
-	const seen = {
-		added: /* @__PURE__ */ new Set(),
-		modified: /* @__PURE__ */ new Set(),
-		deleted: /* @__PURE__ */ new Set()
-	};
-	const fileOps = resolvePatchFileOps(options);
-	for (const hunk of parsed.hunks) {
-		if (options.signal?.aborted) {
-			const err = /* @__PURE__ */ new Error("已中止");
-			err.name = "AbortError";
-			throw err;
-		}
-		if (hunk.kind === "add") {
-			const target = await resolvePatchPath(hunk.path, options);
-			await assertPatchParentPath(hunk.path, options);
-			await ensureDir(target.resolved, fileOps);
-			await fileOps.writeFile(target.resolved, hunk.contents);
-			recordSummary(summary, seen, "added", target.display);
-			continue;
-		}
-		if (hunk.kind === "delete") {
-			const target = await resolvePatchPath(hunk.path, options, PATH_ALIAS_POLICIES.unlinkTarget);
-			await fileOps.remove(target.resolved);
-			recordSummary(summary, seen, "deleted", target.display);
-			continue;
-		}
-		const target = await resolvePatchPath(hunk.path, options);
-		const applied = await applyUpdateHunk(target.resolved, hunk.chunks, { readFile: (path) => fileOps.readFile(path) });
-		if (hunk.movePath) {
-			const moveTarget = await resolvePatchPath(hunk.movePath, options);
-			await assertPatchParentPath(hunk.movePath, options);
-			await ensureDir(moveTarget.resolved, fileOps);
-			const moveResolvesToSource = path.resolve(moveTarget.resolved) === path.resolve(target.resolved);
-			await fileOps.writeFile(moveResolvesToSource ? target.resolved : moveTarget.resolved, applied);
-			if (!moveResolvesToSource) await fileOps.remove(target.resolved);
-			recordSummary(summary, seen, "modified", moveResolvesToSource ? target.display : moveTarget.display);
-		} else {
-			await fileOps.writeFile(target.resolved, applied);
-			recordSummary(summary, seen, "modified", target.display);
-		}
-	}
-	return {
-		summary,
-		text: formatSummary(summary)
-	};
-}
-function recordSummary(summary, seen, bucket, value) {
-	if (seen[bucket].has(value)) return;
-	seen[bucket].add(value);
-	summary[bucket].push(value);
-}
-function formatSummary(summary) {
-	const lines = ["Success. Updated the following files:"];
-	for (const file of summary.added) lines.push(`A ${file}`);
-	for (const file of summary.modified) lines.push(`M ${file}`);
-	for (const file of summary.deleted) lines.push(`D ${file}`);
-	return lines.join("\n");
-}
-function resolvePatchFileOps(options) {
-	if (options.sandbox) {
-		const { root, bridge } = options.sandbox;
-		return {
-			readFile: async (filePath) => {
-				return (await bridge.readFile({
-					filePath,
-					cwd: root
-				})).toString("utf8");
-			},
-			writeFile: (filePath, content) => bridge.writeFile({
-				filePath,
-				cwd: root,
-				data: content
-			}),
-			remove: (filePath) => bridge.remove({
-				filePath,
-				cwd: root,
-				force: false
-			}),
-			mkdirp: (dir) => bridge.mkdirp({
-				filePath: dir,
-				cwd: root
-			})
-		};
-	}
-	const workspaceOnly = options.workspaceOnly !== false;
-	const rootPromise = workspaceOnly ? root(options.cwd) : void 0;
-	return {
-		readFile: async (filePath) => {
-			if (!workspaceOnly) return await fs$1.readFile(filePath, "utf8");
-			const opened = await openRootFile({
-				absolutePath: filePath,
-				rootPath: options.cwd,
-				boundaryLabel: "workspace root"
-			});
-			assertBoundaryRead(opened, filePath);
-			try {
-				return fs.readFileSync(opened.fd, "utf8");
-			} finally {
-				fs.closeSync(opened.fd);
-			}
-		},
-		writeFile: async (filePath, content) => {
-			if (!workspaceOnly) {
-				await fs$1.writeFile(filePath, content, "utf8");
-				return;
-			}
-			const relative = toRelativeSandboxPath(options.cwd, filePath);
-			await (await rootPromise)?.write(relative, content, { encoding: "utf8" });
-		},
-		remove: async (filePath) => {
-			if (!workspaceOnly) {
-				await fs$1.rm(filePath);
-				return;
-			}
-			const relative = toRelativeSandboxPath(options.cwd, filePath);
-			await (await rootPromise)?.remove(relative);
-		},
-		mkdirp: async (dir) => {
-			if (!workspaceOnly) {
-				await fs$1.mkdir(dir, { recursive: true });
-				return;
-			}
-			const relative = toRelativeSandboxPath(options.cwd, dir, { allowRoot: true });
-			const root = await rootPromise;
-			if (!root) return;
-			if (relative === "" || relative === ".") {
-				await root.ensureRoot();
-				return;
-			}
-			await root.mkdir(relative);
-		}
-	};
-}
-async function ensureDir(filePath, ops) {
-	const parent = path.dirname(filePath);
-	if (!parent || parent === ".") return;
-	await ops.mkdirp(parent);
-}
-async function assertPatchParentPath(filePath, options) {
-	if (options.workspaceOnly === false || options.sandbox) return;
-	const parent = path.dirname(filePath);
-	if (!parent || parent === ".") return;
-	await assertSandboxPath({
-		filePath: parent,
-		cwd: options.cwd,
-		root: options.cwd
-	});
-	await assertNoExistingParentAliases({
-		parentPath: resolvePathFromInput(parent, options.cwd),
-		rootPath: options.cwd
-	});
-}
-async function assertNoExistingParentAliases(params) {
-	const rootPath = path.resolve(params.rootPath);
-	const parentPath = path.resolve(params.parentPath);
-	const relative = path.relative(rootPath, parentPath);
-	if (!relative || relative === "" || relativePathEscapesRoot(relative)) return;
-	let current = rootPath;
-	for (const segment of relative.split(path.sep)) {
-		if (!segment) continue;
-		current = path.join(current, segment);
-		const stat = await fs$1.lstat(current).catch((error) => {
-			if (error.code === "ENOENT") return null;
-			throw error;
-		});
-		if (!stat) return;
-		if (stat.isSymbolicLink()) throw new Error(`Path alias under sandbox root: ${path.relative(rootPath, current)}`);
-	}
-}
-async function resolvePatchPath(filePath, options, aliasPolicy = PATH_ALIAS_POLICIES.strict) {
-	if (options.sandbox) {
-		const resolved = options.sandbox.bridge.resolvePath({
-			filePath,
-			cwd: options.cwd
-		});
-		if (options.workspaceOnly !== false && resolved.hostPath) await assertSandboxPath({
-			filePath: resolved.hostPath,
-			cwd: options.cwd,
-			root: options.cwd,
-			allowFinalSymlinkForUnlink: aliasPolicy.allowFinalSymlinkForUnlink,
-			allowFinalHardlinkForUnlink: aliasPolicy.allowFinalHardlinkForUnlink
-		});
-		return {
-			resolved: resolved.hostPath ?? resolved.containerPath,
-			display: resolved.relativePath || resolved.containerPath
-		};
-	}
-	const resolved = options.workspaceOnly !== false ? (await assertSandboxPath({
-		filePath,
-		cwd: options.cwd,
-		root: options.cwd,
-		allowFinalSymlinkForUnlink: aliasPolicy.allowFinalSymlinkForUnlink,
-		allowFinalHardlinkForUnlink: aliasPolicy.allowFinalHardlinkForUnlink
-	})).resolved : resolvePathFromInput(filePath, options.cwd);
-	return {
-		resolved,
-		display: toDisplayPath(resolved, options.cwd)
-	};
-}
-function assertBoundaryRead(opened, targetPath) {
-	if (opened.ok) return;
-	const reason = opened.reason === "validation" ? "unsafe path" : "path not found";
-	throw new Error(`Failed boundary read for ${targetPath} (${reason})`);
-}
-function toDisplayPath(resolved, cwd) {
-	const relative = path.relative(cwd, resolved);
-	if (!relative || relative === "") return path.basename(resolved);
-	if (relativePathEscapesRoot(relative)) return resolved;
-	return relative;
-}
-function relativePathEscapesRoot(relativePath) {
-	return relativePath === ".." || relativePath.startsWith("../") || relativePath.startsWith("..\\") || path.isAbsolute(relativePath);
-}
-function parsePatchText(input) {
-	const trimmed = input.trim();
-	if (!trimmed) throw new Error("Invalid patch: input is empty.");
-	const validated = checkPatchBoundariesLenient(trimmed.split(/\r?\n/));
-	const hunks = [];
-	const lastLineIndex = validated.length - 1;
-	let remaining = validated.slice(1, lastLineIndex);
-	let lineNumber = 2;
-	while (remaining.length > 0) {
-		const { hunk, consumed } = parseOneHunk(remaining, lineNumber);
-		hunks.push(hunk);
-		lineNumber += consumed;
-		remaining = remaining.slice(consumed);
-	}
-	return {
-		hunks,
-		patch: validated.join("\n")
-	};
-}
-function checkPatchBoundariesLenient(lines) {
-	const strictError = checkPatchBoundariesStrict(lines);
-	if (!strictError) return lines;
-	if (lines.length < 4) throw new Error(strictError);
-	const first = lines[0];
-	const last = lines.at(-1);
-	if (last && (first === "<<EOF" || first === "<<'EOF'" || first === "<<\"EOF\"") && last.endsWith("EOF")) {
-		const inner = lines.slice(1, -1);
-		const innerError = checkPatchBoundariesStrict(inner);
-		if (!innerError) return inner;
-		throw new Error(innerError);
-	}
-	throw new Error(strictError);
-}
-function checkPatchBoundariesStrict(lines) {
-	const firstLine = lines[0]?.trim();
-	const lastLine = lines[lines.length - 1]?.trim();
-	if (firstLine === BEGIN_PATCH_MARKER && lastLine === END_PATCH_MARKER) return null;
-	if (firstLine !== BEGIN_PATCH_MARKER) return "The first line of the patch must be '*** Begin Patch'";
-	return "The last line of the patch must be '*** End Patch'";
-}
-function parseOneHunk(lines, lineNumber) {
-	if (lines.length === 0) throw new Error(`Invalid patch hunk at line ${lineNumber}: empty hunk`);
-	const firstLine = lines[0].trim();
-	if (firstLine.startsWith(ADD_FILE_MARKER)) {
-		const targetPath = firstLine.slice(14);
-		let contents = "";
-		let consumed = 1;
-		for (const addLine of lines.slice(1)) if (addLine.startsWith("+")) {
-			contents += `${addLine.slice(1)}\n`;
-			consumed += 1;
-		} else break;
-		return {
-			hunk: {
-				kind: "add",
-				path: targetPath,
-				contents
-			},
-			consumed
-		};
-	}
-	if (firstLine.startsWith(DELETE_FILE_MARKER)) return {
-		hunk: {
-			kind: "delete",
-			path: firstLine.slice(17)
-		},
-		consumed: 1
-	};
-	if (firstLine.startsWith(UPDATE_FILE_MARKER)) {
-		const targetPath = firstLine.slice(17);
-		let remaining = lines.slice(1);
-		let consumed = 1;
-		let movePath;
-		const moveCandidate = remaining[0]?.trim();
-		if (moveCandidate?.startsWith(MOVE_TO_MARKER)) {
-			movePath = moveCandidate.slice(13);
-			remaining = remaining.slice(1);
-			consumed += 1;
-		}
-		const chunks = [];
-		while (remaining.length > 0) {
-			if (remaining[0].trim() === "") {
-				remaining = remaining.slice(1);
-				consumed += 1;
-				continue;
-			}
-			if (remaining[0].startsWith("***")) break;
-			const { chunk, consumed: chunkLines } = parseUpdateFileChunk(remaining, lineNumber + consumed, chunks.length === 0);
-			chunks.push(chunk);
-			remaining = remaining.slice(chunkLines);
-			consumed += chunkLines;
-		}
-		if (chunks.length === 0) throw new Error(`Invalid patch hunk at line ${lineNumber}: Update file hunk for path '${targetPath}' is empty`);
-		return {
-			hunk: {
-				kind: "update",
-				path: targetPath,
-				movePath,
-				chunks
-			},
-			consumed
-		};
-	}
-	throw new Error(`Invalid patch hunk at line ${lineNumber}: '${lines[0]}' is not a valid hunk header. Valid hunk headers: '*** Add File: {path}', '*** Delete File: {path}', '*** Update File: {path}'`);
-}
-function parseUpdateFileChunk(lines, lineNumber, allowMissingContext) {
-	if (lines.length === 0) throw new Error(`Invalid patch hunk at line ${lineNumber}: Update hunk does not contain any lines`);
-	let changeContext;
-	let startIndex = 0;
-	if (lines[0] === EMPTY_CHANGE_CONTEXT_MARKER) startIndex = 1;
-	else if (lines[0].startsWith(CHANGE_CONTEXT_MARKER)) {
-		changeContext = lines[0].slice(3);
-		startIndex = 1;
-	} else if (!allowMissingContext) throw new Error(`Invalid patch hunk at line ${lineNumber}: Expected update hunk to start with a @@ context marker, got: '${lines[0]}'`);
-	if (startIndex >= lines.length) throw new Error(`Invalid patch hunk at line ${lineNumber + 1}: Update hunk does not contain any lines`);
-	const chunk = {
-		changeContext,
-		oldLines: [],
-		newLines: [],
-		isEndOfFile: false
-	};
-	let parsedLines = 0;
-	for (const line of lines.slice(startIndex)) {
-		if (line === EOF_MARKER) {
-			if (parsedLines === 0) throw new Error(`Invalid patch hunk at line ${lineNumber + 1}: Update hunk does not contain any lines`);
-			chunk.isEndOfFile = true;
-			parsedLines += 1;
-			break;
-		}
-		const marker = line[0];
-		if (!marker) {
-			chunk.oldLines.push("");
-			chunk.newLines.push("");
-			parsedLines += 1;
-			continue;
-		}
-		if (marker === " ") {
-			const content = line.slice(1);
-			chunk.oldLines.push(content);
-			chunk.newLines.push(content);
-			parsedLines += 1;
-			continue;
-		}
-		if (marker === "+") {
-			chunk.newLines.push(line.slice(1));
-			parsedLines += 1;
-			continue;
-		}
-		if (marker === "-") {
-			chunk.oldLines.push(line.slice(1));
-			parsedLines += 1;
-			continue;
-		}
-		if (parsedLines === 0) throw new Error(`Invalid patch hunk at line ${lineNumber + 1}: Unexpected line found in update hunk: '${line}'. Every line should start with ' ' (context line), '+' (added line), or '-' (removed line)`);
-		break;
-	}
-	return {
-		chunk,
-		consumed: parsedLines + startIndex
-	};
-}
-//#endregion
-//#region src/agents/local-model-lean.ts
-const LOCAL_MODEL_LEAN_DENY_TOOL_NAMES = new Set([
-	"browser",
-	"cron",
-	"message"
-]);
-function resolveLocalModelLeanAgentId(params) {
-	const explicitAgentId = typeof params.agentId === "string" && params.agentId.trim() ? normalizeAgentId(params.agentId) : void 0;
-	if (explicitAgentId) return explicitAgentId;
-	const parsedSessionAgentId = parseAgentSessionKey(params.sessionKey)?.agentId;
-	if (parsedSessionAgentId) return normalizeAgentId(parsedSessionAgentId);
-	return params.config ? resolveDefaultAgentId(params.config) : void 0;
-}
-function isLocalModelLeanEnabled(params) {
-	const normalizedAgentId = resolveLocalModelLeanAgentId(params);
-	return (params.config && normalizedAgentId ? resolveAgentConfig(params.config, normalizedAgentId)?.experimental ?? params.config.agents?.defaults?.experimental : params.config?.agents?.defaults?.experimental)?.localModelLean ?? false;
-}
-function filterLocalModelLeanTools(params) {
-	if (!isLocalModelLeanEnabled(params)) return params.tools;
-	return params.tools.filter((tool) => !LOCAL_MODEL_LEAN_DENY_TOOL_NAMES.has(tool.name));
-}
-//#endregion
-//#region src/agents/tool-search.ts
-const TOOL_SEARCH_CODE_MODE_TOOL_NAME = "tool_search_code";
-const TOOL_SEARCH_RAW_TOOL_NAME = "tool_search";
-const TOOL_DESCRIBE_RAW_TOOL_NAME = "tool_describe";
-const TOOL_CALL_RAW_TOOL_NAME = "tool_call";
-const TOOL_SEARCH_CONTROL_TOOL_NAMES = new Set([
-	TOOL_SEARCH_CODE_MODE_TOOL_NAME,
-	TOOL_SEARCH_RAW_TOOL_NAME,
-	TOOL_DESCRIBE_RAW_TOOL_NAME,
-	TOOL_CALL_RAW_TOOL_NAME
-]);
-const DEFAULT_CODE_TIMEOUT_MS = 1e4;
-const DEFAULT_SEARCH_LIMIT = 8;
-const DEFAULT_MAX_SEARCH_LIMIT = 20;
-const MAX_REUSABLE_CATALOG_SNAPSHOTS = 256;
-const TOOL_SEARCH_CODE_MODE_CHILD_SOURCE = String.raw`
-import vm from "node:vm";
-
-let activeController;
-
-function send(message) {
-  if (typeof process.send === "function" && process.connected) {
-    process.send(message);
-  }
-}
-
-function sendAndFlush(message) {
-  return new Promise((resolve) => {
-    if (typeof process.send !== "function" || !process.connected) {
-      resolve();
-      return;
-    }
-    try {
-      process.send(message, () => resolve());
-    } catch {
-      resolve();
-    }
-  });
-}
-
-function toJsonSafe(value) {
-  if (value === undefined) {
-    return null;
-  }
-  try {
-    return JSON.parse(JSON.stringify(value));
-  } catch {
-    if (value instanceof Error) {
-      return value.message;
-    }
-    if (value === null) {
-      return null;
-    }
-    switch (typeof value) {
-      case "string":
-        return value;
-      case "number":
-      case "boolean":
-      case "bigint":
-      case "symbol":
-      case "function":
-        return String(value);
-      default:
-        return Object.prototype.toString.call(value);
-    }
-  }
-}
-
-function formatLogItem(value) {
-  if (typeof value === "string") {
-    return value;
-  }
-  const safe = toJsonSafe(value);
-  return typeof safe === "string" ? safe : JSON.stringify(safe);
-}
-
-function bridgeResultPayload(message) {
-  if (!message.ok) {
-    return typeof message.error === "string" ? message.error : "tool bridge failed";
-  }
-  const json = JSON.stringify(toJsonSafe(message.value));
-  return typeof json === "string" ? json : "null";
-}
-
-function settleBridge(message) {
-  if (!activeController) {
-    return;
-  }
-  const id = typeof message?.id === "string" ? message.id : "";
-  try {
-    activeController.settleBridge(id, Boolean(message.ok), bridgeResultPayload(message));
-  } catch (error) {
-    send({
-      type: "result",
-      ok: false,
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-}
-
-function buildModelScriptSource(code) {
-  return "(async (fengming, console) => {\n" + code + "\n})(fengming, console)";
-}
-
-function buildControllerSource() {
-  return (
-    '"use strict";\n' +
-    "(() => {\n" +
-    "const pending = new Map();\n" +
-    "const bridgeMessages = [];\n" +
-    "const logs = [];\n" +
-    "let idleWaiters = [];\n" +
-    "let nextBridgeId = 1;\n" +
-    toJsonSafe.toString() +
-    "\n" +
-    formatLogItem.toString() +
-    "\n" +
-    "function notifyBridgeIdle() {\n" +
-    "  if (pending.size !== 0 || bridgeMessages.length !== 0) return;\n" +
-    "  const waiters = idleWaiters;\n" +
-    "  idleWaiters = [];\n" +
-    "  for (const resolve of waiters) resolve();\n" +
-    "}\n" +
-    "function isBridgeIdle() {\n" +
-    "  return pending.size === 0 && bridgeMessages.length === 0;\n" +
-    "}\n" +
-    "function waitForBridgeIdle() {\n" +
-    "  if (isBridgeIdle()) return Promise.resolve();\n" +
-    "  return new Promise((resolve) => idleWaiters.push(resolve));\n" +
-    "}\n" +
-    "function bridge(method, args) {\n" +
-    "  let promise;\n" +
-    "  const start = () => {\n" +
-    "    if (!promise) {\n" +
-    "      const id = String(nextBridgeId++);\n" +
-    "      promise = new Promise((resolve, reject) => {\n" +
-    "        pending.set(id, { resolve, reject });\n" +
-    "        bridgeMessages.push({ id, method, args: toJsonSafe(args) });\n" +
-    "      });\n" +
-    "    }\n" +
-    "    return promise;\n" +
-    "  };\n" +
-    "  return Object.freeze({\n" +
-    "    then: (resolve, reject) => start().then(resolve, reject),\n" +
-    "    catch: (reject) => start().catch(reject),\n" +
-    "    finally: (onFinally) => start().finally(onFinally),\n" +
-    "  });\n" +
-    "}\n" +
-    "const console = Object.freeze({\n" +
-    "  log: (...items) => logs.push(items.map(formatLogItem)),\n" +
-    "  warn: (...items) => logs.push(items.map(formatLogItem)),\n" +
-    "  error: (...items) => logs.push(items.map(formatLogItem)),\n" +
-    "});\n" +
-    "const fengming = Object.freeze({\n" +
-    "  tools: Object.freeze({\n" +
-    "    search: (query, options) => bridge('search', [query, options]),\n" +
-    "    describe: (id) => bridge('describe', [id]),\n" +
-    "    call: (id, input) => bridge('call', [id, input]),\n" +
-    "  }),\n" +
-    "});\n" +
-    "return Object.freeze({\n" +
-    "  fengming,\n" +
-    "  console,\n" +
-    "  isBridgeIdle,\n" +
-    "  waitForBridgeIdle,\n" +
-    "  takeLogs: () => logs.splice(0),\n" +
-    "  takeBridgeMessages: () => bridgeMessages.splice(0),\n" +
-    "  settleBridge: (id, ok, payload) => {\n" +
-    "    const waiter = pending.get(String(id));\n" +
-    "    if (!waiter) return;\n" +
-    "    pending.delete(String(id));\n" +
-    "    if (ok) {\n" +
-    "      waiter.resolve(JSON.parse(String(payload)));\n" +
-    "    } else {\n" +
-    "      waiter.reject(new Error(String(payload)));\n" +
-    "    }\n" +
-    "    Promise.resolve().then(notifyBridgeIdle);\n" +
-    "  },\n" +
-    "});\n" +
-    "})()"
-  );
-}
-
-function pumpController(controller) {
-  for (const items of controller.takeLogs()) {
-    send({ type: "log", items });
-  }
-  for (const message of controller.takeBridgeMessages()) {
-    send({ type: "bridge", id: message.id, method: message.method, args: message.args });
-  }
-}
-
-async function runModelCode(code, timeoutMs) {
-  const sandbox = Object.create(null);
-  const context = vm.createContext(sandbox, {
-    name: "tool_search_code",
-    codeGeneration: { strings: false, wasm: false },
-  });
-  const controllerScript = new vm.Script(buildControllerSource(), {
-    filename: "tool_search_code:controller.js",
-  });
-  const controller = controllerScript.runInContext(context, {
-    timeout: Math.max(1, Math.min(Number(timeoutMs) || 1, 2147483647)),
-    breakOnSigint: false,
-  });
-  Object.defineProperties(sandbox, {
-    console: { value: controller.console, enumerable: true },
-    fengming: { value: controller.fengming, enumerable: true },
-  });
-  activeController = controller;
-  const pumpTimer = setInterval(() => pumpController(controller), 1);
-  try {
-    const modelScript = new vm.Script(buildModelScriptSource(code), {
-      filename: "tool_search_code:model.js",
-    });
-    const result = await Promise.resolve(
-      modelScript.runInContext(context, {
-        timeout: Math.max(1, Math.min(Number(timeoutMs) || 1, 2147483647)),
-        breakOnSigint: false,
-      }),
-    ).then(
-      (value) => ({ ok: true, value: toJsonSafe(value) }),
-      (error) => ({ ok: false, error: error instanceof Error ? error.message : String(error) }),
-    );
-    do {
-      pumpController(controller);
-      await controller.waitForBridgeIdle();
-      pumpController(controller);
-    } while (!controller.isBridgeIdle());
-    pumpController(controller);
-    await sendAndFlush(
-      result.ok
-        ? { type: "result", ok: true, value: result.value }
-        : { type: "result", ok: false, error: result.error },
-    );
-  } finally {
-    clearInterval(pumpTimer);
-    activeController = undefined;
-  }
-}
-
-process.on("message", (message) => {
-  if (message?.type === "bridge-result") {
-    settleBridge(message);
-    return;
-  }
-  if (message?.type !== "run") {
-    return;
-  }
-  const code = typeof message.code === "string" ? message.code : "";
-  runModelCode(code, message.timeoutMs).catch((error) => {
-    return sendAndFlush({
-      type: "result",
-      ok: false,
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }).finally(() => {
-    setTimeout(() => process.exit(0), 100);
-  });
-});
-`;
-const SESSION_CATALOGS_KEY = Symbol.for("fengming.toolSearch.sessionCatalogs");
-const globalToolSearchState = globalThis;
-const sessionCatalogs = globalToolSearchState[SESSION_CATALOGS_KEY] ?? (globalToolSearchState[SESSION_CATALOGS_KEY] = /* @__PURE__ */ new Map());
-const reusableCatalogSnapshots = /* @__PURE__ */ new Map();
-const catalogFingerprints = /* @__PURE__ */ new WeakMap();
-const catalogToolIdentities = /* @__PURE__ */ new WeakMap();
-let nextCatalogToolIdentity = 1;
-function readToolSearchConfig(config) {
-	const toolSearch = (isRecord(config?.tools) ? config.tools : void 0)?.toolSearch;
-	if (toolSearch === true) return { enabled: true };
-	if (toolSearch === false) return { enabled: false };
-	return isRecord(toolSearch) ? toolSearch : {};
-}
-function readBoolean(value, fallback) {
-	return typeof value === "boolean" ? value : fallback;
-}
-function readInteger(value, fallback) {
-	return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : fallback;
-}
-function isToolSearchCodeModeSupported() {
-	return process.allowedNodeEnvironmentFlags.has("--permission");
-}
-function resolveToolSearchConfig(config) {
-	const raw = readToolSearchConfig(config);
-	const rawMode = typeof raw.mode === "string" ? raw.mode : "code";
-	const requestedMode = rawMode === "tools" || rawMode === "code" ? rawMode : "code";
-	const mode = requestedMode === "code" && !isToolSearchCodeModeSupported() ? "tools" : requestedMode;
-	const configured = Object.keys(raw).some((key) => key !== "enabled");
-	const maxSearchLimit = Math.max(1, Math.min(50, readInteger(raw.maxSearchLimit, DEFAULT_MAX_SEARCH_LIMIT)));
-	return {
-		enabled: readBoolean(raw.enabled, configured),
-		mode,
-		codeTimeoutMs: Math.max(1e3, Math.min(6e4, readInteger(raw.codeTimeoutMs, DEFAULT_CODE_TIMEOUT_MS))),
-		searchDefaultLimit: Math.max(1, Math.min(maxSearchLimit, readInteger(raw.searchDefaultLimit, DEFAULT_SEARCH_LIMIT))),
-		maxSearchLimit
-	};
-}
-function sessionCatalogKeys(input) {
-	const runId = input.runId?.trim();
-	if (runId) return [`run:${runId}`];
-	const keys = [];
-	if (input.sessionId?.trim()) keys.push(`session:${input.sessionId.trim()}`);
-	if (input.sessionKey?.trim()) keys.push(`key:${input.sessionKey.trim()}`);
-	if (input.agentId?.trim()) keys.push(`agent:${input.agentId.trim()}`);
-	return uniqueStrings(keys);
-}
-function sessionCatalogKey(input) {
-	return sessionCatalogKeys(input)[0];
-}
-function reusableCatalogKey(input) {
-	return sessionCatalogKey({
-		sessionId: input.sessionId,
-		sessionKey: input.sessionKey,
-		agentId: input.agentId
-	});
-}
-function stableJsonFingerprint(value, seen = /* @__PURE__ */ new WeakSet()) {
-	if (value === null || typeof value !== "object") return JSON.stringify(value) ?? "undefined";
-	if (seen.has(value)) return "\"[Circular]\"";
-	seen.add(value);
-	if (Array.isArray(value)) return `[${value.map((item) => stableJsonFingerprint(item, seen)).join(",")}]`;
-	const record = value;
-	return `{${Object.keys(record).toSorted().map((key) => `${JSON.stringify(key)}:${stableJsonFingerprint(record[key], seen)}`).join(",")}}`;
-}
-function catalogToolIdentity(tool) {
-	const existing = catalogToolIdentities.get(tool);
-	if (existing !== void 0) return existing;
-	const next = nextCatalogToolIdentity;
-	nextCatalogToolIdentity += 1;
-	catalogToolIdentities.set(tool, next);
-	return next;
-}
-function catalogEntriesFingerprint(entries) {
-	return entries.map((entry) => [
-		entry.id,
-		entry.source,
-		entry.sourceName ?? "",
-		entry.name,
-		entry.label ?? "",
-		entry.description,
-		stableJsonFingerprint(entry.parameters),
-		String(catalogToolIdentity(entry.tool))
-	].map((part) => JSON.stringify(part)).join(":")).toSorted().join("\n");
-}
-function restoreToolSearchCatalog(params) {
-	const keys = sessionCatalogKeys(params);
-	if (keys.length === 0 && !params.catalogRef) return;
-	const next = {
-		entries: params.entries,
-		searchCount: 0,
-		describeCount: 0,
-		callCount: 0
-	};
-	if (params.catalogRef) params.catalogRef.current = next;
-	catalogFingerprints.set(next, params.fingerprint);
-	for (const key of keys) sessionCatalogs.set(key, next);
-	return next;
-}
-function bindToolSearchCatalog(params) {
-	if (params.catalogRef) params.catalogRef.current = params.catalog;
-	for (const key of sessionCatalogKeys(params)) sessionCatalogs.set(key, params.catalog);
-}
-function rememberReusableCatalog(key, catalog) {
-	if (!key) return;
-	const fingerprint = catalogFingerprints.get(catalog);
-	if (!fingerprint) return;
-	if (reusableCatalogSnapshots.has(key)) reusableCatalogSnapshots.delete(key);
-	reusableCatalogSnapshots.set(key, {
-		entries: catalog.entries,
-		fingerprint
-	});
-	while (reusableCatalogSnapshots.size > MAX_REUSABLE_CATALOG_SNAPSHOTS) {
-		const oldestKey = reusableCatalogSnapshots.keys().next().value;
-		if (!oldestKey) break;
-		reusableCatalogSnapshots.delete(oldestKey);
-	}
-}
-function classifyTool(tool) {
-	const pluginId = getPluginToolMeta(tool)?.pluginId?.trim();
-	if (pluginId === "bundle-mcp") return {
-		source: "mcp",
-		sourceName: pluginId
-	};
-	if (pluginId) return {
-		source: "fengming",
-		sourceName: pluginId
-	};
-	return {
-		source: "fengming",
-		sourceName: "core"
-	};
-}
-function makeCatalogId(tool, source, sourceName) {
-	return `${source}:${sourceName?.trim() || "core"}:${tool.name}`;
-}
-function wrapCatalogTool(tool, hookContext) {
-	if (!hookContext || isToolWrappedWithBeforeToolCallHook(tool)) return tool;
-	return wrapToolWithBeforeToolCallHook(tool, hookContext);
-}
-function toCatalogEntry(tool, sourceOverride, hookContext) {
-	const classified = classifyTool(tool);
-	const source = sourceOverride ?? classified.source;
-	const sourceName = sourceOverride === "client" ? "client" : classified.sourceName;
-	const catalogTool = source === "client" ? tool : wrapCatalogTool(tool, hookContext);
-	return {
-		id: makeCatalogId(tool, source, sourceName),
-		source,
-		sourceName,
-		name: tool.name,
-		label: tool.label,
-		description: tool.description ?? "",
-		parameters: tool.parameters,
-		tool: catalogTool
-	};
-}
-function shouldCatalogTool(tool) {
-	if (TOOL_SEARCH_CONTROL_TOOL_NAMES.has(tool.name)) return false;
-	return true;
-}
-function shouldExposeControlTool(name, mode) {
-	if (name === "tool_search_code") return mode === "code";
-	if (name === "tool_search" || name === "tool_describe" || name === "tool_call") return mode === "tools";
-	return false;
-}
-function readMessageToolResultId(message) {
-	const record = message;
-	const role = typeof record.role === "string" ? record.role : "";
-	const canUseDirectId = role === "toolResult" || role === "tool";
-	const direct = record.toolCallId ?? record.toolUseId ?? record.tool_use_id;
-	if (canUseDirectId && typeof direct === "string" && direct.trim()) return direct;
-	const content = record.content;
-	if (!Array.isArray(content)) return;
-	for (const block of content) {
-		if (!isRecord(block)) continue;
-		if (block.type !== "toolResult") continue;
-		const nested = block.toolCallId ?? block.toolUseId ?? block.tool_use_id ?? block.id;
-		if (typeof nested === "string" && nested.trim()) return nested;
-	}
-}
-function textFromToolSearchProjectionResult(result, isError) {
-	if (isRecord(result)) {
-		const detailError = (isRecord(result.details) ? result.details : void 0)?.error;
-		if (typeof detailError === "string" && detailError.trim()) return detailError;
-		const content = result.content;
-		if (Array.isArray(content)) {
-			const text = content.map((item) => isRecord(item) && typeof item.text === "string" ? item.text : "").filter(Boolean).join("\n");
-			if (text.trim()) return text;
-		}
-	}
-	const safe = toJsonSafe(result);
-	if (typeof safe === "string") return safe;
-	const encoded = JSON.stringify(safe);
-	if (typeof encoded === "string") return encoded;
-	return isError ? "Tool Search target tool failed." : "Tool Search target tool completed.";
-}
-function buildToolSearchTargetTranscriptMessages(projection) {
-	const input = toJsonSafe(projection.input);
-	const timestamp = projection.timestamp ?? Date.now();
-	const resultRecord = isRecord(projection.result) ? projection.result : void 0;
-	const resultContent = Array.isArray(resultRecord?.content) && resultRecord.content.length > 0 ? toJsonSafe(resultRecord.content) : [{
-		type: "text",
-		text: textFromToolSearchProjectionResult(projection.result, projection.isError === true)
-	}];
-	return [{
-		role: "assistant",
-		content: [{
-			type: "toolCall",
-			id: projection.toolCallId,
-			name: projection.toolName,
-			arguments: input,
-			input
-		}],
-		stopReason: "toolUse",
-		timestamp
-	}, {
-		role: "toolResult",
-		toolCallId: projection.toolCallId,
-		toolName: projection.toolName,
-		isError: projection.isError === true,
-		content: resultContent,
-		timestamp
-	}];
-}
-function projectToolSearchTargetTranscriptMessages(messages, projections) {
-	if (projections.length === 0) return messages;
-	const byParent = /* @__PURE__ */ new Map();
-	const unmatched = [];
-	for (const projection of projections) {
-		const parent = projection.parentToolCallId?.trim();
-		if (!parent) {
-			unmatched.push(projection);
-			continue;
-		}
-		const group = byParent.get(parent) ?? [];
-		group.push(projection);
-		byParent.set(parent, group);
-	}
-	const inserted = /* @__PURE__ */ new Set();
-	const projected = [];
-	for (const message of messages) {
-		projected.push(message);
-		const toolResultId = readMessageToolResultId(message);
-		const group = toolResultId ? byParent.get(toolResultId) : void 0;
-		if (!group) continue;
-		for (const projection of group) {
-			projected.push(...buildToolSearchTargetTranscriptMessages(projection));
-			inserted.add(projection);
-		}
-	}
-	for (const projection of [...unmatched, ...projections]) {
-		if (inserted.has(projection)) continue;
-		projected.push(...buildToolSearchTargetTranscriptMessages(projection));
-		inserted.add(projection);
-	}
-	return projected;
-}
-function createToolSearchCatalogRef() {
-	return {};
-}
-function applyToolSearchCatalog(params) {
-	const config = resolveToolSearchConfig(params.config);
-	return applyToolCatalogCompaction({
-		...params,
-		enabled: config.enabled,
-		isVisibleControlTool: (tool) => TOOL_SEARCH_CONTROL_TOOL_NAMES.has(tool.name) && shouldExposeControlTool(tool.name, config.mode)
-	});
-}
-function addClientToolsToToolSearchCatalog(params) {
-	return addClientToolsToToolCatalog({
-		...params,
-		enabled: resolveToolSearchConfig(params.config).enabled
-	});
-}
-function registerToolSearchCatalog(params) {
-	const keys = sessionCatalogKeys(params);
-	const primaryKey = keys[0];
-	if (!primaryKey && !params.catalogRef) return;
-	const prior = params.append ? params.catalogRef?.current ?? (primaryKey ? sessionCatalogs.get(primaryKey) : void 0) : void 0;
-	const byId = /* @__PURE__ */ new Map();
-	for (const entry of prior?.entries ?? []) byId.set(entry.id, entry);
-	for (const entry of params.entries) {
-		byId.set(entry.id, entry);
-		byId.set(entry.name, entry);
-	}
-	const next = {
-		entries: uniqueValues(byId.values()).toSorted((a, b) => a.id.localeCompare(b.id)),
-		searchCount: prior?.searchCount ?? 0,
-		describeCount: prior?.describeCount ?? 0,
-		callCount: prior?.callCount ?? 0
-	};
-	catalogFingerprints.set(next, catalogEntriesFingerprint(next.entries));
-	if (params.catalogRef) params.catalogRef.current = next;
-	for (const key of keys) sessionCatalogs.set(key, next);
-	return next;
-}
-function clearToolSearchCatalog(params) {
-	if (params.catalogRef) params.catalogRef.current = void 0;
-	for (const key of sessionCatalogKeys(params)) sessionCatalogs.delete(key);
-	if (!params.runId?.trim()) {
-		const snapshotKey = reusableCatalogKey(params);
-		if (snapshotKey) reusableCatalogSnapshots.delete(snapshotKey);
-	}
-}
-function resolveCatalog(ctx) {
-	if (ctx.catalogRef?.current) return ctx.catalogRef.current;
-	const keys = sessionCatalogKeys({
-		sessionId: ctx.sessionId,
-		sessionKey: ctx.sessionKey,
-		agentId: ctx.agentId,
-		runId: ctx.runId
-	});
-	for (const key of keys) {
-		const catalog = sessionCatalogs.get(key);
-		if (catalog) return catalog;
-	}
-	if (ctx.runId?.trim()) throw new ToolInputError("Tool Search catalog is unavailable for this run.");
-	const uniqueCatalogs = uniqueValues(sessionCatalogs.values());
-	if (uniqueCatalogs.length === 1) {
-		const catalog = uniqueCatalogs[0];
-		if (catalog) return catalog;
-	}
-	throw new ToolInputError("Tool Search catalog is unavailable for this run.");
-}
-function compactEntry(entry) {
-	return {
-		id: entry.id,
-		source: entry.source,
-		sourceName: entry.sourceName,
-		name: entry.name,
-		label: entry.label,
-		description: entry.description
-	};
-}
-function describeEntry(entry) {
-	return {
-		...compactEntry(entry),
-		parameters: entry.parameters ?? {}
-	};
-}
-function tokenize(input) {
-	return normalizeStringEntries(input.toLowerCase().split(/[^a-z0-9_./:-]+/u));
-}
-function scoreEntry(entry, terms) {
-	if (terms.length === 0) return 1;
-	const name = entry.name.toLowerCase();
-	const id = entry.id.toLowerCase();
-	const label = (entry.label ?? "").toLowerCase();
-	const description = entry.description.toLowerCase();
-	let score = 0;
-	for (const term of terms) {
-		if (name === term || id === term) score += 20;
-		if (name.includes(term)) score += 8;
-		if (id.includes(term)) score += 6;
-		if (label.includes(term)) score += 4;
-		if (description.includes(term)) score += 2;
-	}
-	return score;
-}
-function findEntry(catalog, id) {
-	const needle = id.trim();
-	const entry = catalog.entries.find((candidate) => candidate.id === needle || candidate.name === needle);
-	if (!entry) throw new ToolInputError(`Unknown tool id: ${needle}`);
-	return entry;
-}
-function readId(args) {
-	const params = asToolParamsRecord(args);
-	const value = params.id ?? params.toolId ?? params.name;
-	if (typeof value !== "string" || !value.trim()) throw new ToolInputError("id must be a non-empty string.");
-	return value.trim();
-}
-function readLimit(value, config) {
-	if (value === void 0) return config.searchDefaultLimit;
-	if (typeof value !== "number" || !Number.isInteger(value) || value < 1) throw new ToolInputError("limit must be a positive integer.");
-	return Math.min(value, config.maxSearchLimit);
-}
-function readSearchArgs(args, config) {
-	const params = asToolParamsRecord(args);
-	const query = params.query;
-	if (typeof query !== "string") throw new ToolInputError("query must be a string.");
-	const options = isRecord(params.options) ? params.options : void 0;
-	return {
-		query,
-		limit: readLimit(params.limit ?? options?.limit, config)
-	};
-}
-function readCallArgs(args) {
-	const params = asToolParamsRecord(args);
-	return {
-		id: readId(params),
-		input: params.args ?? params.input ?? {}
-	};
-}
-function getTelemetry(catalog) {
-	const sources = {
-		fengming: 0,
-		mcp: 0,
-		client: 0
-	};
-	for (const entry of catalog.entries) sources[entry.source] += 1;
-	return {
-		catalogSize: catalog.entries.length,
-		sources,
-		searchCount: catalog.searchCount,
-		describeCount: catalog.describeCount,
-		callCount: catalog.callCount
-	};
-}
-function sanitizeToolCallIdPart(value) {
-	return value.trim().replace(/[^A-Za-z0-9_.:-]+/g, "_").slice(0, 120) || "call";
-}
-var ToolSearchRuntime = class {
-	constructor(ctx, config) {
-		this.ctx = ctx;
-		this.config = config;
-		this.callSequence = 0;
-		this.search = async (query, options) => {
-			const catalog = resolveCatalog(this.ctx);
-			catalog.searchCount += 1;
-			const limit = readLimit(options?.limit, this.config);
-			const terms = tokenize(query);
-			return catalog.entries.map((entry) => ({
-				entry,
-				score: scoreEntry(entry, terms)
-			})).filter((hit) => hit.score > 0).toSorted((a, b) => b.score - a.score || a.entry.id.localeCompare(b.entry.id)).slice(0, limit).map((hit) => compactEntry(hit.entry));
-		};
-		this.all = () => {
-			return resolveCatalog(this.ctx).entries.map((entry) => compactEntry(entry));
-		};
-		this.describe = async (id) => {
-			const catalog = resolveCatalog(this.ctx);
-			catalog.describeCount += 1;
-			return describeEntry(findEntry(catalog, id));
-		};
-		this.call = async (id, input, options) => {
-			const catalog = resolveCatalog(this.ctx);
-			const entry = findEntry(catalog, id);
-			catalog.callCount += 1;
-			const toolCallId = `tool_search_code:${sanitizeToolCallIdPart(options?.parentToolCallId ?? "direct")}:${entry.name}:${++this.callSequence}`;
-			const result = await (this.ctx.executeTool ?? (async (params) => await params.tool.execute(params.toolCallId, params.input, params.signal, params.onUpdate, void 0)))({
-				tool: entry.tool,
-				toolName: entry.name,
-				toolCallId,
-				parentToolCallId: options?.parentToolCallId,
-				input: input ?? {},
-				signal: options?.signal ?? this.ctx.abortSignal,
-				onUpdate: options?.onUpdate
-			});
-			return {
-				tool: compactEntry(entry),
-				result
-			};
-		};
-	}
-	telemetry() {
-		return getTelemetry(resolveCatalog(this.ctx));
-	}
-};
-function applyToolCatalogCompaction(params) {
-	if (!params.enabled) return {
-		tools: params.tools,
-		compacted: false,
-		catalogToolCount: 0,
-		catalogRegistered: false,
-		catalogReused: false
-	};
-	const hasControlTool = params.tools.some((tool) => params.isVisibleControlTool(tool));
-	const key = sessionCatalogKey(params);
-	if (!hasControlTool || !key && !params.catalogRef) return {
-		tools: params.tools.filter((tool) => !TOOL_SEARCH_CONTROL_TOOL_NAMES.has(tool.name)),
-		compacted: false,
-		catalogToolCount: 0,
-		catalogRegistered: false,
-		catalogReused: false
-	};
-	const visible = [];
-	const catalog = [];
-	const shouldCatalog = params.shouldCatalogTool ?? shouldCatalogTool;
-	for (const tool of params.tools) {
-		if (params.isVisibleControlTool(tool)) {
-			visible.push(tool);
-			continue;
-		}
-		if (TOOL_SEARCH_CONTROL_TOOL_NAMES.has(tool.name)) continue;
-		if (shouldCatalog(tool)) {
-			catalog.push(toCatalogEntry(tool, void 0, params.toolHookContext));
-			continue;
-		}
-		visible.push(tool);
-	}
-	const incomingFingerprint = catalogEntriesFingerprint(catalog);
-	const existingCatalog = params.catalogRef?.current ?? (key ? sessionCatalogs.get(key) : void 0);
-	if (existingCatalog && catalogFingerprints.get(existingCatalog) === incomingFingerprint) {
-		bindToolSearchCatalog({
-			sessionId: params.sessionId,
-			sessionKey: params.sessionKey,
-			agentId: params.agentId,
-			runId: params.runId,
-			catalogRef: params.catalogRef,
-			catalog: existingCatalog
-		});
-		return {
-			tools: visible,
-			compacted: catalog.length > 0,
-			catalogToolCount: catalog.length,
-			catalogRegistered: true,
-			catalogReused: true
-		};
-	}
-	const reusableKey = reusableCatalogKey(params);
-	const reusableSnapshot = reusableKey ? reusableCatalogSnapshots.get(reusableKey) : void 0;
-	if (reusableSnapshot?.fingerprint === incomingFingerprint) {
-		restoreToolSearchCatalog({
-			sessionId: params.sessionId,
-			sessionKey: params.sessionKey,
-			agentId: params.agentId,
-			runId: params.runId,
-			catalogRef: params.catalogRef,
-			entries: reusableSnapshot.entries,
-			fingerprint: reusableSnapshot.fingerprint
-		});
-		if (reusableKey) {
-			reusableCatalogSnapshots.delete(reusableKey);
-			reusableCatalogSnapshots.set(reusableKey, reusableSnapshot);
-		}
-		return {
-			tools: visible,
-			compacted: catalog.length > 0,
-			catalogToolCount: catalog.length,
-			catalogRegistered: true,
-			catalogReused: true
-		};
-	}
-	const registered = registerToolSearchCatalog({
-		sessionId: params.sessionId,
-		sessionKey: params.sessionKey,
-		agentId: params.agentId,
-		runId: params.runId,
-		catalogRef: params.catalogRef,
-		entries: catalog,
-		append: false
-	});
-	if (registered) rememberReusableCatalog(reusableKey, registered);
-	return {
-		tools: visible,
-		compacted: catalog.length > 0,
-		catalogToolCount: catalog.length,
-		catalogRegistered: true,
-		catalogReused: false
-	};
-}
-function addClientToolsToToolCatalog(params) {
-	const key = sessionCatalogKey(params);
-	if (!params.enabled || !key && !params.catalogRef) return {
-		tools: params.tools,
-		compacted: false,
-		catalogToolCount: 0
-	};
-	if (!(params.catalogRef?.current ?? (key ? sessionCatalogs.get(key) : void 0))) return {
-		tools: params.tools,
-		compacted: false,
-		catalogToolCount: 0
-	};
-	registerToolSearchCatalog({
-		sessionId: params.sessionId,
-		sessionKey: params.sessionKey,
-		agentId: params.agentId,
-		runId: params.runId,
-		catalogRef: params.catalogRef,
-		entries: params.tools.map((tool) => toCatalogEntry(tool, "client")),
-		append: true
-	});
-	return {
-		tools: [],
-		compacted: params.tools.length > 0,
-		catalogToolCount: params.tools.length
-	};
-}
-function toJsonSafe(value) {
-	if (value === void 0) return null;
-	try {
-		return JSON.parse(JSON.stringify(value));
-	} catch {
-		if (value instanceof Error) return value.message;
-		if (value === null) return null;
-		switch (typeof value) {
-			case "string": return value;
-			case "number":
-			case "boolean":
-			case "bigint":
-			case "symbol":
-			case "function": return String(value);
-			default: return Object.prototype.toString.call(value);
-		}
-	}
-}
-async function runCodeMode(params) {
-	const runtime = new ToolSearchRuntime(params.ctx, params.config);
-	const logs = [];
-	return {
-		ok: true,
-		value: toJsonSafe(await runCodeModeChild({
-			code: params.code,
-			config: params.config,
-			logs,
-			parentToolCallId: params.toolCallId,
-			runtime,
-			signal: params.signal,
-			onUpdate: params.onUpdate
-		})),
-		logs,
-		telemetry: runtime.telemetry()
-	};
-}
-function buildCodeModeChildArgs() {
-	if (!process.allowedNodeEnvironmentFlags.has("--permission")) throw new ToolInputError("tool_search_code requires a Node runtime with --permission support.");
-	return [
-		"--permission",
-		"--input-type=module",
-		"--eval",
-		TOOL_SEARCH_CODE_MODE_CHILD_SOURCE
-	];
-}
-function isCodeModeBridgeMethod(value) {
-	return value === "search" || value === "describe" || value === "call";
-}
-async function runCodeModeBridgeRequest(runtime, method, args, options) {
-	const values = Array.isArray(args) ? args : [];
-	switch (method) {
-		case "search": {
-			const query = values[0];
-			if (typeof query !== "string") throw new ToolInputError("search query must be a string.");
-			const options = isRecord(values[1]) ? values[1] : void 0;
-			return await runtime.search(query, { limit: typeof options?.limit === "number" ? options.limit : void 0 });
-		}
-		case "describe": {
-			const id = values[0];
-			if (typeof id !== "string") throw new ToolInputError("describe id must be a string.");
-			return await runtime.describe(id);
-		}
-		case "call": {
-			const id = values[0];
-			if (typeof id !== "string") throw new ToolInputError("call id must be a string.");
-			return await runtime.call(id, values[1] ?? {}, options);
-		}
-	}
-	throw new ToolInputError("Unsupported tool_search_code bridge method.");
-}
-function runCodeModeChild(params) {
-	return new Promise((resolve, reject) => {
-		const child = spawn(process.execPath, buildCodeModeChildArgs(), {
-			cwd: os.tmpdir(),
-			env: {},
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe",
-				"ipc"
-			]
-		});
-		const stderr = [];
-		let settled = false;
-		let timedOut = false;
-		let timer;
-		let exitRejectionTimer;
-		const bridgeAbortController = new AbortController();
-		let abortFromParent;
-		const settle = (callback) => {
-			if (settled) return;
-			settled = true;
-			if (timer) clearTimeout(timer);
-			if (exitRejectionTimer) clearTimeout(exitRejectionTimer);
-			params.signal?.removeEventListener("abort", abortFromParent);
-			child.kill();
-			callback();
-		};
-		abortFromParent = () => {
-			bridgeAbortController.abort(params.signal?.reason);
-			child.kill("SIGKILL");
-			settle(() => reject(/* @__PURE__ */ new Error("代码搜索工具已中止")));
-		};
-		if (params.signal?.aborted) {
-			abortFromParent();
-			return;
-		}
-		params.signal?.addEventListener("abort", abortFromParent, { once: true });
-		timer = setTimeout(() => {
-			timedOut = true;
-			bridgeAbortController.abort(/* @__PURE__ */ new Error("代码搜索工具已超时"));
-			child.kill("SIGKILL");
-			settle(() => reject(/* @__PURE__ */ new Error("代码搜索工具已超时")));
-		}, params.config.codeTimeoutMs);
-		child.stderr?.setEncoding("utf8");
-		child.stderr?.on("data", (chunk) => {
-			stderr.push(chunk);
-		});
-		child.on("error", (error) => {
-			settle(() => reject(error));
-		});
-		child.on("exit", (code, signal) => {
-			if (settled) return;
-			const rejectOnExit = () => {
-				const suffix = stderr.join("").trim();
-				const detail = suffix ? `: ${suffix.slice(0, 500)}` : "";
-				settle(() => reject(/* @__PURE__ */ new Error(timedOut ? "tool_search_code timed out" : `tool_search_code child exited with ${signal ?? code}${detail}`)));
-			};
-			if (code === 0 && signal === null) {
-				exitRejectionTimer = setTimeout(rejectOnExit, 250);
-				return;
-			}
-			rejectOnExit();
-		});
-		child.on("message", (message) => {
-			if (settled) return;
-			if (!isRecord(message) || typeof message.type !== "string") return;
-			if (message.type === "log") {
-				const items = Array.isArray(message.items) ? message.items : [];
-				params.logs.push(items.map((item) => String(item)).join(" "));
-				return;
-			}
-			if (message.type === "result") {
-				if (message.ok) settle(() => resolve(message.value));
-				else settle(() => reject(new Error(typeof message.error === "string" ? message.error : "code failed")));
-				return;
-			}
-			if (message.type !== "bridge") return;
-			const id = typeof message.id === "string" ? message.id : "";
-			const method = isCodeModeBridgeMethod(message.method) ? message.method : void 0;
-			if (!id || !method) return;
-			runCodeModeBridgeRequest(params.runtime, method, message.args, {
-				parentToolCallId: params.parentToolCallId,
-				signal: bridgeAbortController.signal,
-				onUpdate: params.onUpdate
-			}).then((value) => {
-				if (settled || !child.connected) return;
-				const response = {
-					type: "bridge-result",
-					id,
-					ok: true,
-					value: toJsonSafe(value)
-				};
-				child.send(response, () => void 0);
-			}).catch((error) => {
-				if (settled || !child.connected) return;
-				const response = {
-					type: "bridge-result",
-					id,
-					ok: false,
-					error: error instanceof Error ? error.message : String(error)
-				};
-				child.send(response, () => void 0);
-			});
-		});
-		child.send({
-			type: "run",
-			code: params.code,
-			timeoutMs: params.config.codeTimeoutMs
-		});
-	});
-}
-function readCode(args) {
-	const code = asToolParamsRecord(args).code;
-	if (typeof code !== "string" || !code.trim()) throw new ToolInputError("code must be a non-empty string.");
-	return code;
-}
-function createToolSearchTools(ctx) {
-	const config = resolveToolSearchConfig(ctx.runtimeConfig ?? ctx.config);
-	const runtime = new ToolSearchRuntime(ctx, config);
-	return [
-		{
-			name: TOOL_SEARCH_CODE_MODE_TOOL_NAME,
-			label: "Tool Search Code",
-			description: "Run JavaScript in an isolated Node subprocess with fengming.tools.search, fengming.tools.describe, and fengming.tools.call for large tool catalogs.",
-			parameters: Type.Object({ code: Type.String({ description: "JavaScript body for an async function. Use return to return the final value. The fengming.tools bridge is available." }) }),
-			execute: async (toolCallId, args, signal, onUpdate) => jsonResult(await runCodeMode({
-				toolCallId,
-				ctx,
-				code: readCode(args),
-				config,
-				signal,
-				onUpdate
-			}))
-		},
-		{
-			name: TOOL_SEARCH_RAW_TOOL_NAME,
-			label: "Tool Search",
-			description: "Search the effective Tool Search catalog.",
-			parameters: Type.Object({
-				query: Type.String({ description: "Search query." }),
-				limit: Type.Optional(Type.Number({ description: "Maximum number of results." }))
-			}),
-			execute: async (_toolCallId, args) => {
-				const search = readSearchArgs(args, config);
-				return jsonResult(await runtime.search(search.query, { limit: search.limit }));
-			}
-		},
-		{
-			name: TOOL_DESCRIBE_RAW_TOOL_NAME,
-			label: "Tool Describe",
-			description: "Load the full schema and metadata for one search result.",
-			parameters: Type.Object({ id: Type.String({ description: "Tool search result id or tool name." }) }),
-			execute: async (_toolCallId, args) => jsonResult(await runtime.describe(readId(args)))
-		},
-		{
-			name: TOOL_CALL_RAW_TOOL_NAME,
-			label: "Tool Call",
-			description: "Call a selected Tool Search catalog entry through FengMing.",
-			parameters: Type.Object({
-				id: Type.String({ description: "Tool search result id or tool name." }),
-				args: Type.Optional(Type.Record(Type.String(), Type.Unknown(), { description: "Tool input." }))
-			}),
-			execute: async (_toolCallId, args, signal, onUpdate) => {
-				const call = readCallArgs(args);
-				return jsonResult(await runtime.call(call.id, call.input, {
-					parentToolCallId: _toolCallId,
-					signal,
-					onUpdate
-				}));
-			}
-		}
-	];
-}
-//#endregion
-//#region src/agents/agent-tools.ts
-function isOpenAIProvider(provider) {
-	const normalized = normalizeOptionalLowercaseString(provider);
-	return normalized === "openai" || normalized === "openai-codex";
-}
-const MEMORY_FLUSH_ALLOWED_TOOL_NAMES = new Set(["read", "write"]);
-function readOnlyAgentWorkspaceMount(sandbox) {
-	if (!sandbox || sandbox.workspaceAccess !== "ro" || sandbox.agentWorkspaceDir === sandbox.workspaceDir) return;
-	return [{
-		containerRoot: SANDBOX_AGENT_WORKSPACE_MOUNT,
-		hostRoot: sandbox.agentWorkspaceDir
-	}];
-}
-function resolveSkillReadRoots(skillsSnapshot) {
-	const roots = /* @__PURE__ */ new Set();
-	for (const skill of skillsSnapshot?.resolvedSkills ?? []) {
-		const baseDir = typeof skill.baseDir === "string" ? skill.baseDir.trim() : "";
-		const filePath = typeof skill.filePath === "string" ? skill.filePath.trim() : "";
-		const root = baseDir || (filePath ? path.dirname(filePath) : "");
-		if (!root || !path.isAbsolute(root)) continue;
-		roots.add(path.resolve(root));
-	}
-	if (roots.size === 0) return;
-	return Array.from(roots);
-}
-const bashToolsModuleLoader = createLazyImportLoader(() => import("./bash-tools-8AnG6y9-.js"));
-function loadBashToolsModule() {
-	return bashToolsModuleLoader.load();
-}
-function createLazyExecTool(defaults) {
-	let loadedTool;
-	const loadTool = async () => {
-		if (!loadedTool) {
-			const { createExecTool } = await loadBashToolsModule();
-			loadedTool = createExecTool(defaults);
-		}
-		return loadedTool;
-	};
-	return {
-		name: "exec",
-		label: "exec",
-		displaySummary: EXEC_TOOL_DISPLAY_SUMMARY,
-		get description() {
-			return describeExecTool({
-				agentId: defaults?.agentId,
-				hasCronTool: defaults?.hasCronTool === true
-			});
-		},
-		parameters: execSchema,
-		execute: async (...args) => (await loadTool()).execute(...args)
-	};
-}
-function createLazyProcessTool(defaults) {
-	let loadedTool;
-	const loadTool = async () => {
-		if (!loadedTool) {
-			const { createProcessTool } = await loadBashToolsModule();
-			loadedTool = createProcessTool(defaults);
-		}
-		return loadedTool;
-	};
-	return {
-		name: "process",
-		label: "process",
-		displaySummary: PROCESS_TOOL_DISPLAY_SUMMARY,
-		description: describeProcessTool({ hasCronTool: defaults?.hasCronTool === true }),
-		parameters: processSchema,
-		execute: async (...args) => (await loadTool()).execute(...args)
-	};
-}
-function resolveProcessToolScopeKey(params) {
-	const explicitScopeKey = params.scopeKey?.trim();
-	if (explicitScopeKey) return explicitScopeKey;
-	const sessionKey = params.sessionKey?.trim();
-	if (sessionKey) return sessionKey;
-	const sessionId = params.sessionId?.trim();
-	if (sessionId) return sessionId;
-	const agentId = params.agentId?.trim();
-	return agentId ? `agent:${agentId}` : void 0;
-}
-function applyModelProviderToolPolicy(tools, params) {
-	tools = filterLocalModelLeanTools({
-		tools,
-		config: params?.config,
-		agentId: params?.agentId,
-		sessionKey: params?.sessionKey
-	});
-	if (params?.suppressManagedWebSearch !== false && shouldSuppressManagedWebSearchTool({
-		config: params?.config,
-		modelProvider: params?.modelProvider,
-		modelApi: params?.modelApi,
-		agentDir: params?.agentDir
-	})) return tools.filter((tool) => tool.name !== "web_search");
-	return tools;
-}
-function isApplyPatchAllowedForModel(params) {
-	const allowModels = Array.isArray(params.allowModels) ? params.allowModels : [];
-	if (allowModels.length === 0) return true;
-	const modelId = params.modelId?.trim();
-	if (!modelId) return false;
-	const normalizedModelId = normalizeLowercaseStringOrEmpty(modelId);
-	const provider = normalizeOptionalLowercaseString(params.modelProvider);
-	const normalizedFull = provider && !normalizedModelId.includes("/") ? `${provider}/${normalizedModelId}` : normalizedModelId;
-	return allowModels.some((entry) => {
-		const normalized = normalizeOptionalLowercaseString(entry);
-		if (!normalized) return false;
-		return normalized === normalizedModelId || normalized === normalizedFull;
-	});
-}
-function hasLegacyExecPolicy(exec) {
-	return exec?.security !== void 0 || exec?.ask !== void 0;
-}
-function applyExecPolicyLayer(base, layer) {
-	if (!layer) return base;
-	if (layer.mode) return {
-		mode: layer.mode,
-		...resolveExecPolicyForMode(layer.mode)
-	};
-	if (hasLegacyExecPolicy(layer)) return {
-		security: layer.security ?? base.security,
-		ask: layer.ask ?? base.ask
-	};
-	return base;
-}
-function resolveExecConfig(params) {
-	const cfg = params.cfg;
-	const globalExec = cfg?.tools?.exec;
-	const agentExec = cfg && params.agentId ? resolveAgentConfig(cfg, params.agentId)?.tools?.exec : void 0;
-	const layeredPolicy = applyExecPolicyLayer(applyExecPolicyLayer({}, globalExec), agentExec);
-	return {
-		host: agentExec?.host ?? globalExec?.host,
-		mode: layeredPolicy.mode,
-		security: layeredPolicy.security,
-		ask: layeredPolicy.ask,
-		node: agentExec?.node ?? globalExec?.node,
-		pathPrepend: agentExec?.pathPrepend ?? globalExec?.pathPrepend,
-		safeBins: agentExec?.safeBins ?? globalExec?.safeBins,
-		strictInlineEval: agentExec?.strictInlineEval ?? globalExec?.strictInlineEval,
-		commandHighlighting: resolveExecCommandHighlighting({
-			config: cfg,
-			agentId: params.agentId
-		}),
-		safeBinTrustedDirs: agentExec?.safeBinTrustedDirs ?? globalExec?.safeBinTrustedDirs,
-		safeBinProfiles: resolveMergedSafeBinProfileFixtures({
-			global: globalExec,
-			local: agentExec
-		}),
-		reviewer: agentExec?.reviewer ?? globalExec?.reviewer,
-		backgroundMs: agentExec?.backgroundMs ?? globalExec?.backgroundMs,
-		timeoutSec: agentExec?.timeoutSec ?? globalExec?.timeoutSec,
-		approvalRunningNoticeMs: agentExec?.approvalRunningNoticeMs ?? globalExec?.approvalRunningNoticeMs,
-		cleanupMs: agentExec?.cleanupMs ?? globalExec?.cleanupMs,
-		notifyOnExit: agentExec?.notifyOnExit ?? globalExec?.notifyOnExit,
-		notifyOnExitEmptySuccess: agentExec?.notifyOnExitEmptySuccess ?? globalExec?.notifyOnExitEmptySuccess,
-		applyPatch: agentExec?.applyPatch ?? globalExec?.applyPatch
-	};
-}
-function createFengMingCodingTools(options) {
-	const execToolName = "exec";
-	const sandbox = options?.sandbox?.enabled ? options.sandbox : void 0;
-	const isMemoryFlushRun = options?.trigger === "memory";
-	if (isMemoryFlushRun && !options?.memoryFlushWritePath) throw new Error("memory-trigger 工具运行需要 memoryFlushWritePath");
-	const memoryFlushWritePath = isMemoryFlushRun ? options.memoryFlushWritePath : void 0;
-	const cronSelfRemoveOnlyJobId = options?.trigger === "cron" && options.jobId?.trim() ? options.jobId.trim() : void 0;
-	const { agentId, globalPolicy, globalProviderPolicy, agentPolicy, agentProviderPolicy, profile, providerProfile, profileAlsoAllow, providerProfileAlsoAllow } = resolveEffectiveToolPolicy({
-		config: options?.config,
-		sessionKey: options?.sessionKey,
-		agentId: options?.agentId,
-		modelProvider: options?.modelProvider,
-		modelId: options?.modelId
-	});
-	const sandboxToolPolicy = sandbox?.tools;
-	const groupPolicy = resolveGroupToolPolicy({
-		config: options?.config,
-		sessionKey: options?.sessionKey,
-		spawnedBy: options?.spawnedBy,
-		messageProvider: options?.messageProvider,
-		groupId: options?.groupId,
-		groupChannel: options?.groupChannel,
-		groupSpace: options?.groupSpace,
-		accountId: options?.agentAccountId,
-		senderId: options?.senderId,
-		senderName: options?.senderName,
-		senderUsername: options?.senderUsername,
-		senderE164: options?.senderE164
-	});
-	const senderPolicy = resolveSenderToolPolicy({
-		config: options?.config,
-		agentId,
-		messageProvider: options?.messageProvider,
-		senderId: options?.senderId,
-		senderName: options?.senderName,
-		senderUsername: options?.senderUsername,
-		senderE164: options?.senderE164
-	});
-	const profilePolicy = resolveToolProfilePolicy(profile);
-	const providerProfilePolicy = resolveToolProfilePolicy(providerProfile);
-	const enableHeartbeatTool = options?.enableHeartbeatTool === true || options?.trigger === "heartbeat" && options?.config?.messages?.visibleReplies === "message_tool";
-	const forceHeartbeatTool = options?.forceHeartbeatTool === true || enableHeartbeatTool;
-	const toolSearchConfig = resolveToolSearchConfig(options?.config);
-	const toolSearchControlsEnabled = options?.includeToolSearchControls === true && toolSearchConfig.enabled;
-	const toolSearchControlAllowlist = toolSearchControlsEnabled ? [
-		TOOL_SEARCH_CODE_MODE_TOOL_NAME,
-		TOOL_SEARCH_RAW_TOOL_NAME,
-		TOOL_DESCRIBE_RAW_TOOL_NAME,
-		TOOL_CALL_RAW_TOOL_NAME
-	] : [];
-	const mergeToolSearchControlAllowlist = (policy) => mergeAlsoAllowPolicy(policy, toolSearchControlAllowlist);
-	const runtimeToolAllowlistIncludesMessage = expandToolGroups(options?.runtimeToolAllowlist ?? []).some((toolName) => {
-		const normalized = normalizeToolName(toolName);
-		return normalized === "*" || normalized === "message";
-	});
-	const runtimeProfileAlsoAllow = [
-		...options?.forceMessageTool || options?.sourceReplyDeliveryMode === "message_tool_only" ? ["message"] : [],
-		...runtimeToolAllowlistIncludesMessage ? ["message"] : [],
-		...forceHeartbeatTool ? [HEARTBEAT_RESPONSE_TOOL_NAME] : [],
-		...toolSearchControlAllowlist
-	];
-	const profilePolicyWithAlsoAllow = mergeAlsoAllowPolicy(profilePolicy, [...profileAlsoAllow ?? [], ...runtimeProfileAlsoAllow]);
-	const providerProfilePolicyWithAlsoAllow = mergeAlsoAllowPolicy(providerProfilePolicy, [...providerProfileAlsoAllow ?? [], ...runtimeProfileAlsoAllow]);
-	const scopeKey = resolveProcessToolScopeKey({
-		scopeKey: options?.exec?.scopeKey,
-		sessionKey: options?.sessionKey,
-		sessionId: options?.sessionId,
-		agentId
-	});
-	const subagentStore = resolveSubagentCapabilityStore(options?.sessionKey, { cfg: options?.config });
-	const subagentPolicy = options?.sessionKey && isSubagentEnvelopeSession(options.sessionKey, {
-		cfg: options.config,
-		store: subagentStore
-	}) ? resolveSubagentToolPolicyForSession(options.config, options.sessionKey, { store: subagentStore }) : void 0;
-	const inheritedToolPolicy = resolveInheritedToolPolicyForSession(options?.config, options?.sessionKey, { store: subagentStore });
-	const globalPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(globalPolicy);
-	const globalProviderPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(globalProviderPolicy);
-	const agentPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(agentPolicy);
-	const agentProviderPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(agentProviderPolicy);
-	const groupPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(groupPolicy);
-	const senderPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(senderPolicy);
-	const sandboxToolPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(sandboxToolPolicy);
-	const subagentPolicyWithToolSearchControls = mergeToolSearchControlAllowlist(subagentPolicy);
-	const allowBackground = isToolAllowedByPolicies("process", [
-		profilePolicyWithAlsoAllow,
-		providerProfilePolicyWithAlsoAllow,
-		globalPolicyWithToolSearchControls,
-		globalProviderPolicyWithToolSearchControls,
-		agentPolicyWithToolSearchControls,
-		agentProviderPolicyWithToolSearchControls,
-		groupPolicyWithToolSearchControls,
-		senderPolicyWithToolSearchControls,
-		sandboxToolPolicyWithToolSearchControls,
-		subagentPolicyWithToolSearchControls,
-		inheritedToolPolicy
-	]);
-	options?.recordToolPrepStage?.("tool-policy");
-	const execConfig = resolveExecConfig({
-		cfg: options?.config,
-		agentId
-	});
-	const fsConfig = resolveToolFsConfig({
-		cfg: options?.config,
-		agentId
-	});
-	const fsPolicy = createToolFsPolicy({ workspaceOnly: isMemoryFlushRun || fsConfig.workspaceOnly });
-	const sandboxRoot = sandbox?.workspaceDir;
-	const sandboxFsBridge = sandbox?.fsBridge;
-	const allowWorkspaceWrites = sandbox?.workspaceAccess !== "ro";
-	const workspaceRoot = resolveWorkspaceRoot(options?.workspaceDir);
-	const runtimeRoot = resolveWorkspaceRoot(options?.cwd ?? options?.workspaceDir);
-	const codingRoot = sandboxRoot ?? runtimeRoot;
-	const memoryFlushWriteRoot = sandboxRoot ?? workspaceRoot;
-	const includeCoreTools = options?.includeCoreTools !== false;
-	const toolConstructionPlan = options?.toolConstructionPlan ?? {
-		includeBaseCodingTools: includeCoreTools,
-		includeShellTools: includeCoreTools,
-		includeChannelTools: includeCoreTools,
-		includeFengMingTools: includeCoreTools,
-		includePluginTools: true
-	};
-	const includeBaseCodingTools = includeCoreTools && toolConstructionPlan.includeBaseCodingTools;
-	const includeShellTools = includeCoreTools && toolConstructionPlan.includeShellTools;
-	const includeFengMingTools = includeCoreTools && toolConstructionPlan.includeFengMingTools;
-	const includeChannelTools = toolConstructionPlan.includeChannelTools;
-	const includePluginTools = toolConstructionPlan.includePluginTools;
-	const workspaceOnly = fsPolicy.workspaceOnly;
-	const skillReadRoots = sandboxRoot ? void 0 : resolveSkillReadRoots(options?.skillsSnapshot);
-	const applyPatchConfig = execConfig.applyPatch;
-	const applyPatchWorkspaceOnly = workspaceOnly || applyPatchConfig?.workspaceOnly !== false;
-	const applyPatchEnabled = applyPatchConfig?.enabled !== false && isOpenAIProvider(options?.modelProvider) && isApplyPatchAllowedForModel({
-		modelProvider: options?.modelProvider,
-		modelId: options?.modelId,
-		allowModels: applyPatchConfig?.allowModels
-	});
-	if (sandboxRoot && !sandboxFsBridge) throw new Error("沙箱文件系统桥接不可用。");
-	const imageSanitization = resolveImageSanitizationLimits(options?.config);
-	options?.recordToolPrepStage?.("workspace-policy");
-	const base = [];
-	if (includeBaseCodingTools) for (const tool of createCodingTools(codingRoot)) {
-		if (tool.name === "read") {
-			if (sandboxRoot) {
-				const sandboxed = createSandboxedReadTool({
-					root: sandboxRoot,
-					bridge: sandboxFsBridge,
-					modelContextWindowTokens: options?.modelContextWindowTokens,
-					imageSanitization
-				});
-				base.push(workspaceOnly ? wrapToolWorkspaceRootGuardWithOptions(sandboxed, sandboxRoot, {
-					additionalContainerMounts: readOnlyAgentWorkspaceMount(sandbox),
-					containerWorkdir: sandbox.containerWorkdir
-				}) : sandboxed);
-				continue;
-			}
-			const wrapped = createFengMingReadTool(createReadTool(codingRoot), {
-				modelContextWindowTokens: options?.modelContextWindowTokens,
-				imageSanitization
-			});
-			base.push(workspaceOnly ? wrapToolWorkspaceRootGuardWithOptions(wrapped, codingRoot, { additionalRoots: skillReadRoots }) : wrapped);
-			continue;
-		}
-		if (tool.name === "bash" || tool.name === execToolName) continue;
-		if (tool.name === "write") {
-			if (sandboxRoot) continue;
-			const wrapped = createHostWorkspaceWriteTool(codingRoot, { workspaceOnly });
-			base.push(workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, codingRoot) : wrapped);
-			continue;
-		}
-		if (tool.name === "edit") {
-			if (sandboxRoot) continue;
-			const wrapped = createHostWorkspaceEditTool(codingRoot, { workspaceOnly });
-			base.push(workspaceOnly ? wrapToolWorkspaceRootGuard(wrapped, codingRoot) : wrapped);
-			continue;
-		}
-		base.push(tool);
-	}
-	options?.recordToolPrepStage?.("base-coding-tools");
-	const { cleanupMs: cleanupMsOverride, ...execDefaults } = options?.exec ?? {};
-	const effectiveExecPolicy = applyExecPolicyLayer(execConfig, options?.exec);
-	const execTool = includeShellTools ? createLazyExecTool({
-		...execDefaults,
-		host: options?.exec?.host ?? execConfig.host,
-		mode: effectiveExecPolicy.mode,
-		security: effectiveExecPolicy.security,
-		ask: effectiveExecPolicy.ask,
-		config: options?.exec?.config ?? options?.config,
-		reviewer: options?.exec?.reviewer ?? execConfig.reviewer,
-		trigger: options?.trigger,
-		node: options?.exec?.node ?? execConfig.node,
-		pathPrepend: options?.exec?.pathPrepend ?? execConfig.pathPrepend,
-		safeBins: options?.exec?.safeBins ?? execConfig.safeBins,
-		strictInlineEval: options?.exec?.strictInlineEval ?? execConfig.strictInlineEval,
-		commandHighlighting: options?.exec?.commandHighlighting ?? execConfig.commandHighlighting,
-		safeBinTrustedDirs: options?.exec?.safeBinTrustedDirs ?? execConfig.safeBinTrustedDirs,
-		safeBinProfiles: options?.exec?.safeBinProfiles ?? execConfig.safeBinProfiles,
-		agentId,
-		cwd: codingRoot,
-		allowBackground,
-		scopeKey,
-		sessionKey: options?.sessionKey,
-		mainKey: options?.config?.session?.mainKey,
-		sessionScope: options?.config?.session?.scope,
-		eventRouting: resolveEventSessionRoutingPolicy({
-			cfg: options?.config,
-			sessionKey: options?.sessionKey,
-			channel: options?.messageProvider,
-			accountId: options?.agentAccountId
-		}),
-		messageProvider: options?.messageProvider,
-		currentChannelId: options?.currentChannelId,
-		currentThreadTs: options?.currentThreadTs,
-		accountId: options?.agentAccountId,
-		backgroundMs: options?.exec?.backgroundMs ?? execConfig.backgroundMs,
-		timeoutSec: options?.exec?.timeoutSec ?? execConfig.timeoutSec,
-		approvalRunningNoticeMs: options?.exec?.approvalRunningNoticeMs ?? execConfig.approvalRunningNoticeMs,
-		notifyOnExit: options?.exec?.notifyOnExit ?? execConfig.notifyOnExit,
-		notifyOnExitEmptySuccess: options?.exec?.notifyOnExitEmptySuccess ?? execConfig.notifyOnExitEmptySuccess,
-		sandbox: sandbox ? {
-			containerName: sandbox.containerName,
-			workspaceDir: sandbox.workspaceDir,
-			containerWorkdir: sandbox.containerWorkdir,
-			env: sandbox.backend?.env ?? sandbox.docker.env,
-			buildExecSpec: sandbox.backend?.buildExecSpec.bind(sandbox.backend),
-			finalizeExec: sandbox.backend?.finalizeExec?.bind(sandbox.backend)
-		} : void 0
-	}) : null;
-	const processTool = includeShellTools ? createLazyProcessTool({
-		cleanupMs: cleanupMsOverride ?? execConfig.cleanupMs,
-		scopeKey
-	}) : null;
-	const applyPatchTool = !includeShellTools || !applyPatchEnabled || sandboxRoot && !allowWorkspaceWrites ? null : createApplyPatchTool({
-		cwd: codingRoot,
-		sandbox: sandboxRoot && allowWorkspaceWrites ? {
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		} : void 0,
-		workspaceOnly: applyPatchWorkspaceOnly
-	});
-	options?.recordToolPrepStage?.("shell-tools");
-	const pluginToolAllowlist = collectExplicitAllowlist([
-		profilePolicy,
-		providerProfilePolicy,
-		globalPolicy,
-		globalProviderPolicy,
-		agentPolicy,
-		agentProviderPolicy,
-		groupPolicy,
-		senderPolicy,
-		sandboxToolPolicy,
-		subagentPolicy,
-		inheritedToolPolicy,
-		options?.runtimeToolAllowlist ? { allow: options.runtimeToolAllowlist } : void 0
-	]);
-	const pluginToolDenylist = collectExplicitDenylist([
-		profilePolicy,
-		providerProfilePolicy,
-		globalPolicy,
-		globalProviderPolicy,
-		agentPolicy,
-		agentProviderPolicy,
-		groupPolicy,
-		senderPolicy,
-		sandboxToolPolicy,
-		subagentPolicy,
-		inheritedToolPolicy
-	]);
-	const inheritedToolDenylist = [...pluginToolDenylist];
-	const inheritedToolAllowlist = [];
-	const shouldInheritEffectiveToolAllowlist = [
-		profilePolicy,
-		providerProfilePolicy,
-		globalPolicy,
-		globalProviderPolicy,
-		agentPolicy,
-		agentProviderPolicy,
-		groupPolicy,
-		senderPolicy,
-		sandboxToolPolicy,
-		subagentPolicy,
-		inheritedToolPolicy,
-		options?.runtimeToolAllowlist ? { allow: options.runtimeToolAllowlist } : void 0
-	].some(hasRestrictiveAllowPolicy);
-	const pluginToolsOnly = includeFengMingTools || !includePluginTools ? [] : resolveFengMingPluginToolsForOptions({
-		options: {
-			agentSessionKey: options?.sessionKey,
-			agentChannel: resolveGatewayMessageChannel(options?.messageProvider),
-			agentAccountId: options?.agentAccountId,
-			agentTo: options?.messageTo,
-			agentThreadId: options?.messageThreadId,
-			agentDir: options?.agentDir,
-			workspaceDir: workspaceRoot,
-			config: options?.config,
-			fsPolicy,
-			requesterSenderId: options?.senderId,
-			sessionId: options?.sessionId,
-			sandboxBrowserBridgeUrl: sandbox?.browser?.bridgeUrl,
-			allowHostBrowserControl: sandbox ? sandbox.browserAllowHostControl : true,
-			sandboxed: !!sandbox,
-			pluginToolAllowlist,
-			pluginToolDenylist,
-			currentChannelId: options?.currentChannelId,
-			currentThreadTs: options?.currentThreadTs,
-			currentMessageId: options?.currentMessageId,
-			modelProvider: options?.modelProvider,
-			modelId: options?.modelId,
-			modelHasVision: options?.modelHasVision,
-			requireExplicitMessageTarget: options?.requireExplicitMessageTarget,
-			disableMessageTool: options?.disableMessageTool,
-			requesterAgentIdOverride: agentId,
-			allowGatewaySubagentBinding: options?.allowGatewaySubagentBinding,
-			authProfileStore: options?.authProfileStore
-		},
-		resolvedConfig: options?.config
-	});
-	const toolSearchTools = toolSearchControlsEnabled ? createToolSearchTools({
-		config: options?.config,
-		runtimeConfig: options?.config,
-		agentId,
-		sessionKey: options?.sessionKey,
-		sessionId: options?.sessionId,
-		runId: options?.runId,
-		catalogRef: options?.toolSearchCatalogRef,
-		abortSignal: options?.abortSignal,
-		executeTool: options?.toolSearchCatalogExecutor
-	}) : [];
-	const tools = [
-		...base,
-		...includeBaseCodingTools && sandboxRoot ? allowWorkspaceWrites ? [workspaceOnly ? wrapToolWorkspaceRootGuardWithOptions(createSandboxedEditTool({
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		}), sandboxRoot, { containerWorkdir: sandbox.containerWorkdir }) : createSandboxedEditTool({
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		}), workspaceOnly ? wrapToolWorkspaceRootGuardWithOptions(createSandboxedWriteTool({
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		}), sandboxRoot, { containerWorkdir: sandbox.containerWorkdir }) : createSandboxedWriteTool({
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		})] : [] : [],
-		...includeShellTools && applyPatchTool ? [applyPatchTool] : [],
-		...execTool ? [execTool] : [],
-		...processTool ? [processTool] : [],
-		...includeChannelTools ? listChannelAgentTools({ cfg: options?.config }) : [],
-		...includeFengMingTools ? createFengMingTools({
-			sandboxBrowserBridgeUrl: sandbox?.browser?.bridgeUrl,
-			allowHostBrowserControl: sandbox ? sandbox.browserAllowHostControl : true,
-			agentSessionKey: options?.sessionKey,
-			runId: options?.runId,
-			runSessionKey: options?.runSessionKey,
-			agentChannel: resolveGatewayMessageChannel(options?.messageProvider),
-			agentAccountId: options?.agentAccountId,
-			agentTo: options?.messageTo,
-			agentThreadId: options?.messageThreadId,
-			agentGroupId: options?.groupId ?? null,
-			agentGroupChannel: options?.groupChannel ?? null,
-			agentGroupSpace: options?.groupSpace ?? null,
-			agentMemberRoleIds: options?.memberRoleIds,
-			agentDir: options?.agentDir,
-			sandboxRoot,
-			sandboxContainerWorkdir: sandbox?.containerWorkdir,
-			sandboxFsBridge,
-			fsPolicy,
-			workspaceDir: workspaceRoot,
-			spawnWorkspaceDir: options?.spawnWorkspaceDir ? resolveWorkspaceRoot(options.spawnWorkspaceDir) : void 0,
-			sandboxed: !!sandbox,
-			config: options?.config,
-			pluginToolAllowlist,
-			pluginToolDenylist,
-			currentChannelId: options?.currentChannelId,
-			currentThreadTs: options?.currentThreadTs,
-			currentMessageId: options?.currentMessageId,
-			modelProvider: options?.modelProvider,
-			modelId: options?.modelId,
-			replyToMode: options?.replyToMode,
-			hasRepliedRef: options?.hasRepliedRef,
-			modelHasVision: options?.modelHasVision,
-			requireExplicitMessageTarget: options?.requireExplicitMessageTarget,
-			sourceReplyDeliveryMode: options?.sourceReplyDeliveryMode,
-			inboundEventKind: options?.inboundEventKind,
-			disableMessageTool: options?.disableMessageTool,
-			enableHeartbeatTool,
-			disablePluginTools: !includePluginTools,
-			wrapBeforeToolCallHook: false,
-			...cronSelfRemoveOnlyJobId ? { cronSelfRemoveOnlyJobId } : {},
-			requesterAgentIdOverride: agentId,
-			requesterSenderId: options?.senderId,
-			senderIsOwner: options?.senderIsOwner,
-			authProfileStore: options?.authProfileStore,
-			sessionId: options?.sessionId,
-			inheritedToolAllowlist,
-			inheritedToolDenylist,
-			onYield: options?.onYield,
-			allowGatewaySubagentBinding: options?.allowGatewaySubagentBinding,
-			recordToolPrepStage: options?.recordToolPrepStage
-		}) : pluginToolsOnly,
-		...toolSearchTools
-	];
-	options?.recordToolPrepStage?.("fengming-tools");
-	const toolsForMemoryFlush = isMemoryFlushRun && memoryFlushWritePath ? [] : tools;
-	if (isMemoryFlushRun && memoryFlushWritePath) for (const tool of tools) {
-		if (!MEMORY_FLUSH_ALLOWED_TOOL_NAMES.has(tool.name)) continue;
-		if (tool.name === "write") {
-			toolsForMemoryFlush.push(wrapToolMemoryFlushAppendOnlyWrite(tool, {
-				root: memoryFlushWriteRoot,
-				relativePath: memoryFlushWritePath,
-				containerWorkdir: sandbox?.containerWorkdir,
-				sandbox: sandboxRoot && sandboxFsBridge ? {
-					root: sandboxRoot,
-					bridge: sandboxFsBridge
-				} : void 0
-			}));
-			continue;
-		}
-		toolsForMemoryFlush.push(tool);
-	}
-	const unavailableCoreToolReason = isMemoryFlushRun && memoryFlushWritePath ? "memory-triggered compaction runs expose only read and append-only write" : void 0;
-	const toolsForMessageProvider = filterToolsByMessageProvider(toolsForMemoryFlush, options?.messageProvider);
-	options?.recordToolPrepStage?.("message-provider-policy");
-	const toolsForModelProvider = applyModelProviderToolPolicy(toolsForMessageProvider, {
-		config: options?.config,
-		modelProvider: options?.modelProvider,
-		modelApi: options?.modelApi,
-		modelId: options?.modelId,
-		agentId: options?.agentId,
-		sessionKey: options?.sessionKey,
-		agentDir: options?.agentDir,
-		modelCompat: options?.modelCompat,
-		suppressManagedWebSearch: options?.suppressManagedWebSearch
-	});
-	options?.recordToolPrepStage?.("model-provider-policy");
-	const subagentFiltered = applyToolPolicyPipeline({
-		tools: toolsForModelProvider,
-		toolMeta: (tool) => getPluginToolMeta(tool),
-		warn: logWarn,
-		steps: [
-			...buildDefaultToolPolicyPipelineSteps({
-				profilePolicy: profilePolicyWithAlsoAllow,
-				profile,
-				profileUnavailableCoreWarningAllowlist: profilePolicy?.allow,
-				providerProfilePolicy: providerProfilePolicyWithAlsoAllow,
-				providerProfile,
-				providerProfileUnavailableCoreWarningAllowlist: providerProfilePolicy?.allow,
-				globalPolicy: globalPolicyWithToolSearchControls,
-				globalProviderPolicy: globalProviderPolicyWithToolSearchControls,
-				agentPolicy: agentPolicyWithToolSearchControls,
-				agentProviderPolicy: agentProviderPolicyWithToolSearchControls,
-				groupPolicy: groupPolicyWithToolSearchControls,
-				senderPolicy: senderPolicyWithToolSearchControls,
-				agentId,
-				unavailableCoreToolReason
-			}),
-			{
-				policy: sandboxToolPolicyWithToolSearchControls,
-				label: "sandbox tools.allow",
-				unavailableCoreToolReason
-			},
-			{
-				policy: subagentPolicyWithToolSearchControls,
-				label: "subagent tools.allow",
-				unavailableCoreToolReason
-			},
-			{
-				policy: inheritedToolPolicy,
-				label: "inherited tools",
-				unavailableCoreToolReason
-			}
-		]
-	});
-	if (shouldInheritEffectiveToolAllowlist) replaceWithEffectiveToolAllowlist(inheritedToolAllowlist, subagentFiltered);
-	options?.recordToolPrepStage?.("authorization-policy");
-	const normalized = subagentFiltered.map((tool) => normalizeToolParameters(tool, {
-		modelProvider: options?.modelProvider,
-		modelId: options?.modelId,
-		modelCompat: options?.modelCompat
-	}));
-	options?.recordToolPrepStage?.("schema-normalization");
-	const withHooks = normalized.map((tool) => wrapToolWithBeforeToolCallHook(tool, {
-		agentId,
-		...options?.config ? { config: options.config } : {},
-		cwd: codingRoot,
-		workspaceDir: workspaceRoot,
-		...options?.skillsSnapshot ? { skillsSnapshot: options.skillsSnapshot } : {},
-		...sandboxRoot && allowWorkspaceWrites ? { sandbox: {
-			root: sandboxRoot,
-			bridge: sandboxFsBridge
-		} } : {},
-		sessionKey: options?.sessionKey,
-		sessionId: options?.sessionId,
-		runId: options?.runId,
-		channelId: options?.hookChannelId ?? options?.currentChannelId,
-		...options?.trace ? { trace: options.trace } : {},
-		loopDetection: resolveToolLoopDetectionConfig({
-			cfg: options?.config,
-			agentId
-		}),
-		onToolOutcome: options?.onToolOutcome
-	}, { emitDiagnostics: options?.emitBeforeToolCallDiagnostics }));
-	options?.recordToolPrepStage?.("tool-hooks");
-	const withAbort = options?.abortSignal ? withHooks.map((tool) => wrapToolWithAbortSignal(tool, options.abortSignal)) : withHooks;
-	options?.recordToolPrepStage?.("abort-wrappers");
-	const withDeferredFollowupDescriptions = applyDeferredFollowupToolDescriptions(withAbort, { agentId });
-	options?.recordToolPrepStage?.("deferred-followup-descriptions");
-	return withDeferredFollowupDescriptions;
-}
-//#endregion
-export { isLocalModelLeanEnabled as _, TOOL_SEARCH_CODE_MODE_TOOL_NAME as a, addClientToolsToToolCatalog as c, applyToolSearchCatalog as d, clearToolSearchCatalog as f, filterLocalModelLeanTools as g, resolveToolSearchConfig as h, TOOL_DESCRIBE_RAW_TOOL_NAME as i, addClientToolsToToolSearchCatalog as l, projectToolSearchTargetTranscriptMessages as m, resolveProcessToolScopeKey as n, TOOL_SEARCH_RAW_TOOL_NAME as o, createToolSearchCatalogRef as p, TOOL_CALL_RAW_TOOL_NAME as r, ToolSearchRuntime as s, createFengMingCodingTools as t, applyToolCatalogCompaction as u };