freecodego 0.1.6-alpha.2.4 → 0.1.7-alpha.2.2

package/dist/bootstrap.js

@@ -1,17 +1,18 @@
 // packages/freecodego/harness-plugin/lib/index.js
 import { createRequire as createRequire2 } from "node:module";
 import path, { basename as basename2, dirname as dirname2, extname, isAbsolute as isAbsolute2, join as join4, matchesGlob, normalize as normalize2, relative as relative2, resolve as resolve2, sep } from "node:path";
+import { credentialRef as credentialRef2 } from "@deepseek-ai/dsh-credentials";
 import { constants, createCipheriv, createHash as createHash3, createHmac, createPublicKey, publicEncrypt, randomBytes, randomUUID as randomUUID3, timingSafeEqual } from "node:crypto";
 import fs, { appendFile, copyFile as copyFile2, mkdir as mkdir4, mkdtemp, open as open2, readFile as readFile3, readdir as readdir2, readlink, realpath, rename as rename3, rm as rm2, stat as stat2, symlink, unlink, writeFile as writeFile3 } from "node:fs/promises";
 import { availableParallelism, homedir, platform as platform2, release, tmpdir } from "node:os";
 import { deflateRawSync, gunzipSync, inflateRawSync, inflateSync } from "node:zlib";
-import z2 from "@deepseek-ai/schemastery";
 import { appendFileSync, chmodSync, constants as constants$1, createWriteStream, existsSync as existsSync2, lstatSync, mkdirSync, readFileSync as readFileSync2, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
 import { expandHomePath, resolveDshHome } from "@deepseek-ai/dsh-home-paths";
 import { execFile, spawn as spawn2 } from "node:child_process";
-import { BlockAssembler, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, attributionHeaders, createAssistantMessage as createAssistantMessage2, createMessage, createToolResultMessage as createToolResultMessage2, createUserMessage } from "@deepseek-ai/dsh-llm";
+import { BlockAssembler, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, attributionHeaders, createAssistantMessage as createAssistantMessage2, createToolResultMessage as createToolResultMessage2, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { promisify } from "node:util";
+import z2 from "@deepseek-ai/schemastery";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 
 // packages/freecodego/native-runtime-host/lib/index.js
@@ -1296,8 +1297,7 @@ import { createServer } from "node:http";
 import "@deepseek-ai/dsh-token-meter/src/estimate.ts";
 import { apply } from "@deepseek-ai/dsh-mcp-client";
 import { apply as apply$1 } from "@deepseek-ai/dsh-skill-filesystem";
-import { load } from "js-yaml";
-import { credentialRef as credentialRef2 } from "@deepseek-ai/dsh-credentials";
+import yaml, { load } from "js-yaml";
 import { KNOWN_SESSION_EVENT_TYPES, SessionId } from "@deepseek-ai/dsh-session";
 import { SANDBOX_MODES, setSandboxMode } from "@deepseek-ai/dsh-sandbox-policy";
 import { setApprovalPolicy } from "@deepseek-ai/dsh-user-approval";
@@ -1356,6 +1356,38 @@ var FreeCodeGoMobileAuthClient = class {
   async sendVerifyCode(email, signal) {
     return { countdown: finiteNumber$1((await this.request("/send-verify-code", { email }, signal)).countdown, "countdown") };
   }
+  /**
+  * Ask the gateway to mail a password-reset code to one address.
+  *
+  * `method: 'code'` is what makes this the desktop flow: without it the gateway
+  * mails a browser link built from its own frontend URL instead, which a
+  * webview has nowhere to land. The gateway answers the same way whether or not
+  * the address is registered — that is deliberate anti-enumeration behaviour on
+  * its side, not an answer about this account.
+  * @param email - the address to send the reset code to.
+  * @param signal - aborts the request when the caller cancels.
+  */
+  async requestPasswordResetCode(email, signal) {
+    await this.request("/forgot-password", {
+      email,
+      method: "code"
+    }, signal);
+  }
+  /**
+  * Replace the account's password using the emailed reset code.
+  *
+  * Deliberately returns no tokens: the gateway does not issue a session here, so
+  * signing in stays a separate, explicit step with the new password.
+  * @param input - the address, the code, and the new password.
+  * @param signal - aborts the request when the caller cancels.
+  */
+  async resetPassword(input, signal) {
+    await this.request("/reset-password", {
+      email: input.email,
+      verify_code: input.verifyCode,
+      new_password: input.newPassword
+    }, signal);
+  }
   /** Register and return an authenticated token pair to the host caller.
   * @param signal - aborts the request when the caller cancels.
   * @param input - the address, password, and remember-me intent.
@@ -1463,12 +1495,18 @@ function tokens(payload) {
     tokenType: "Bearer"
   };
 }
+var addressLocalPart = (email) => {
+  const at2 = email.indexOf("@");
+  return (at2 <= 0 ? email : email.slice(0, at2)).trim();
+};
 function user(payload) {
   const avatarUrl = typeof payload.avatar_url === "string" && payload.avatar_url.trim() !== "" ? payload.avatar_url.trim() : typeof payload.avatarUrl === "string" && payload.avatarUrl.trim() !== "" ? payload.avatarUrl.trim() : void 0;
+  const email = requiredString(payload.email, "user.email");
+  const username = typeof payload.username === "string" && payload.username.trim() !== "" ? payload.username.trim() : addressLocalPart(email);
   return {
     id: finiteNumber$1(payload.id, "user.id"),
-    username: requiredString(payload.username, "user.username"),
-    email: requiredString(payload.email, "user.email"),
+    username,
+    email,
     ...avatarUrl === void 0 ? {} : { avatarUrl },
     role: requiredString(payload.role, "user.role"),
     balance: finiteNumber$1(payload.balance, "user.balance"),
@@ -1559,9 +1597,9 @@ function asAttemptResult(value) {
   };
 }
 async function runGuardedRefresh(input) {
-  const classify = input.classify ?? classifyRefreshFailure;
+  const classify2 = input.classify ?? classifyRefreshFailure;
   const controller = new AbortController();
-  const first = await attemptOnce(input.attempt, controller.signal, false, classify);
+  const first = await attemptOnce(input.attempt, controller.signal, false, classify2);
   if (first.ok) return {
     ok: true,
     value: first.value,
@@ -1583,7 +1621,7 @@ async function runGuardedRefresh(input) {
     ...passthrough(first)
   };
   await (input.wait ?? defaultWait)(input.retryDelayMs ?? 1e3);
-  const second = await attemptOnce(input.attempt, controller.signal, true, classify);
+  const second = await attemptOnce(input.attempt, controller.signal, true, classify2);
   if (second.ok) return {
     ok: true,
     value: second.value,
@@ -1602,7 +1640,7 @@ async function runGuardedRefresh(input) {
 function passthrough(result) {
   return result.ok || result.message === void 0 ? {} : { message: result.message };
 }
-async function attemptOnce(attempt, signal, retry, classify) {
+async function attemptOnce(attempt, signal, retry, classify2) {
   try {
     const outcome = await attempt({
       signal,
@@ -1615,7 +1653,7 @@ async function attemptOnce(attempt, signal, retry, classify) {
     };
     return reported;
   } catch (error) {
-    const classified = classify(error);
+    const classified = classify2(error);
     return {
       ok: false,
       kind: classified.kind,
@@ -1810,6 +1848,31 @@ var FreeCodeGoAccountCoordinator = class {
     return this.auth.sendVerifyCode(email, signal);
   }
   /**
+  * Mail a password-reset code for one address.
+  *
+  * Straight through to the gateway: recovery is the one account operation that
+  * needs no session, no vault write and no identity, so there is nothing here
+  * for the coordinator to keep.
+  * @param email - the address the reset code is sent to.
+  * @param signal - aborts the request when the caller cancels.
+  */
+  async requestPasswordResetCode(email, signal) {
+    return this.auth.requestPasswordResetCode(email, signal);
+  }
+  /**
+  * Replace the password using the emailed reset code.
+  *
+  * It deliberately does not sign in afterwards — the gateway issues no session
+  * here — so the caller keeps the login form as the next step. A reset also
+  * invalidates nothing locally: this machine's stored password, if the user
+  * asked for one to be kept, is the caller's business to rewrite.
+  * @param input - the address, the code, and the new password.
+  * @param signal - aborts the request when the caller cancels.
+  */
+  async resetPassword(input, signal) {
+    return this.auth.resetPassword(input, signal);
+  }
+  /**
   * Authenticate and store a successful token pair in the host vault.
   *
   * The intent of this attempt is recorded here and committed in
@@ -3255,6 +3318,7 @@ function array(value, label) {
 }
 
 // packages/freecodego/harness-plugin/lib/index.js
+import { isVolatile } from "@deepseek-ai/cosmokit";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { deriveTurnTokenUsage } from "@deepseek-ai/dsh-token-meter/client";
 
@@ -7632,20 +7696,6 @@ function walk$1(value, ancestors, onCycle) {
     ancestors.delete(value);
   }
 }
-var FreeCodeGoGuardSettingsSchema = z2.object({
-  envReadGuardEnabled: z2.boolean().default(true),
-  doomLoopGuardEnabled: z2.boolean().default(true),
-  lspEnabled: z2.boolean().default(true),
-  commandPolicyEnabled: z2.boolean().default(true),
-  planModeEnabled: z2.boolean().default(true),
-  contextBudgetEnabled: z2.boolean().default(true),
-  cacheColdClearEnabled: z2.boolean().default(true),
-  cacheBreakAttributionEnabled: z2.boolean().default(true),
-  assistantLoopGuardEnabled: z2.boolean().default(true),
-  spillRecallEnabled: z2.boolean().default(true),
-  compactionFidelityEnabled: z2.boolean().default(true),
-  promptCompositionEnabled: z2.boolean().default(true)
-});
 var SECRET_BASENAME = /^(?:\.env(?!\.(?:example|sample|template|dist)$)(?:\..+)?|\.credentials\.ya?ml(?!\.(?:example|sample|template|dist)$)(?:\..+)?|\.envrc|\.npmrc|\.netrc|\.pypirc|\.git-credentials|\.htpasswd|id_(?:rsa|dsa|ecdsa|ed25519)(?:_sk)?(?:\.pub)?|.+_rsa|.+_ed25519|.+\.pem|.+\.pfx|.+\.p12|.+\.keystore|secrets?\.json|secrets?\.ya?ml|credentials\.json)$/;
 var SECRET_DIRECTORIES = /* @__PURE__ */ new Set([".ssh", ".gnupg"]);
 var SECRET_FILE_IN_DIRECTORIES = [
@@ -10547,10 +10597,7 @@ function hookSignalOf(value) {
 }
 function hookContextMessage(text2) {
   return createUserMessage({
-    source: {
-      kind: "plugin",
-      plugin: "freecodego-hooks"
-    },
+    source: { kind: "freecodego-hooks" },
     content: [{
       type: "text",
       text: text2
@@ -12267,6 +12314,9 @@ function isCancellationWording(message2) {
 }
 var ROUTE_TTL_MS = 1440 * 60 * 1e3;
 var DEFAULT_STREAM_IDLE_MS = 12e4;
+function bridgeRouteIdOf(baseURL) {
+  return /\/anthropic\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:\/v1)?\/?$/iu.exec(baseURL.trim())?.[1];
+}
 function callId$1(value) {
   return value;
 }
@@ -12356,6 +12406,22 @@ var ClaudeProtocolBridge = class {
       apiKey: this.secret
     };
   }
+  /**
+  * Whether this process still serves a route id.
+  *
+  * A route belongs to the listener that minted it: `dispose()` clears the map and
+  * a new process mints new ids and a new port, so a saved endpoint whose id is
+  * absent here answers nothing. That is the question a binding written before a
+  * restart has to ask before it can be kept — see `web-search-binding.ts` — and
+  * it is asked of the bridge rather than of a copy of the map, because only the
+  * bridge knows when a route expired.
+  * @param id - route id parsed off a saved endpoint ({@link bridgeRouteIdOf}).
+  * @returns whether this bridge would answer for it.
+  */
+  hasRoute(id) {
+    this.pruneRoutes();
+    return this.routes.has(id);
+  }
   /** Drop routes older than the TTL so a long-lived bridge cannot leak them. */
   pruneRoutes() {
     const cutoff = Date.now() - ROUTE_TTL_MS;
@@ -12917,8 +12983,7 @@ function estimateAnthropicInputTokens(body) {
 }
 function toResponsesGenerateOptions(route, body) {
   const messages = [];
-  if (typeof body.instructions === "string" && body.instructions.trim() !== "") messages.push(createMessage({
-    role: "user",
+  if (typeof body.instructions === "string" && body.instructions.trim() !== "") messages.push(createUserMessage({
     content: [{
       type: "text",
       text: body.instructions
@@ -12928,8 +12993,7 @@ function toResponsesGenerateOptions(route, body) {
   if (Array.isArray(body.input)) for (const value of body.input) {
     const item = value;
     if (item.type === "function_call") {
-      messages.push(createMessage({
-        role: "assistant",
+      messages.push(createAssistantMessage2({
         content: [{
           type: "tool-call",
           id: callId$1(String(item.call_id ?? item.id ?? "tool")),
@@ -12937,7 +13001,6 @@ function toResponsesGenerateOptions(route, body) {
           arguments: String(item.arguments ?? "")
         }],
         source: {
-          kind: "model",
           provider: "bridge",
           model: "bridge"
         }
@@ -12946,20 +13009,13 @@ function toResponsesGenerateOptions(route, body) {
     }
     if (item.type === "function_call_output") {
       const call = String(item.call_id ?? "tool");
-      messages.push(createMessage({
-        role: "user",
+      messages.push(createToolResultMessage2({
+        callId: callId$1(call),
         content: [{
-          type: "tool-result",
-          toolCallId: callId$1(call),
-          content: [{
-            type: "text",
-            text: typeof item.output === "string" ? item.output : JSON.stringify(item.output ?? "")
-          }]
+          type: "text",
+          text: typeof item.output === "string" ? item.output : JSON.stringify(item.output ?? "")
         }],
-        source: {
-          kind: "tool",
-          callId: callId$1(call)
-        }
+        isError: item.is_error === true
       }));
       continue;
     }
@@ -12975,14 +13031,15 @@ function toResponsesGenerateOptions(route, body) {
         text: text2
       }] : [];
     });
-    if (blocks.length > 0) messages.push(createMessage({
-      role,
+    if (blocks.length > 0) messages.push(role === "assistant" ? createAssistantMessage2({
       content: blocks,
-      source: role === "assistant" ? {
-        kind: "model",
+      source: {
         provider: "bridge",
         model: "bridge"
-      } : { kind: "user" }
+      }
+    }) : createUserMessage({
+      content: blocks,
+      source: { kind: "user" }
     }));
   }
   const tools = Array.isArray(body.tools) ? body.tools.flatMap((value) => {
@@ -13007,45 +13064,65 @@ var BRIDGE_IMAGE_PLACEHOLDER = "[image attachment: not forwarded by the FreeCode
 function anthropicMessages(value) {
   const item = value;
   const role = item.role === "assistant" ? "assistant" : "user";
-  const blocks = (Array.isArray(item.content) ? item.content : [{
+  const content = Array.isArray(item.content) ? item.content : [{
     type: "text",
     text: String(item.content ?? "")
-  }]).flatMap((block) => {
+  }];
+  const messages = [];
+  const blocks = [];
+  const flushTurn = () => {
+    if (blocks.length === 0) return;
+    messages.push(role === "assistant" ? createAssistantMessage2({
+      content: blocks.splice(0),
+      source: {
+        provider: "bridge",
+        model: "bridge"
+      }
+    }) : createUserMessage({
+      content: blocks.splice(0),
+      source: { kind: "user" }
+    }));
+  };
+  for (const block of content) {
     const part = block;
-    if (part.type === "text") return [{
-      type: "text",
-      text: String(part.text ?? "")
-    }];
-    if (part.type === "tool_use") return [{
-      type: "tool-call",
-      id: callId$1(String(part.id ?? randomUUID3())),
-      name: String(part.name ?? "tool"),
-      arguments: JSON.stringify(part.input ?? {})
-    }];
-    if (part.type === "tool_result") return [{
-      type: "tool-result",
-      toolCallId: callId$1(String(part.tool_use_id ?? "tool")),
-      content: [{
+    if (part.type === "tool_result") {
+      flushTurn();
+      messages.push(createToolResultMessage2({
+        callId: callId$1(String(part.tool_use_id ?? "tool")),
+        content: [{
+          type: "text",
+          text: toolResultText(part.content)
+        }],
+        isError: part.is_error === true
+      }));
+      continue;
+    }
+    if (part.type === "text") {
+      blocks.push({
         type: "text",
-        text: toolResultText(part.content)
-      }]
-    }];
-    if (part.type === "image") return [{
-      type: "text",
-      text: BRIDGE_IMAGE_PLACEHOLDER
-    }];
-    return [];
-  });
-  if (blocks.length === 0) return [];
-  return [createMessage({
-    role,
-    content: blocks,
-    source: role === "assistant" ? {
-      kind: "model",
-      provider: "bridge",
-      model: "bridge"
-    } : { kind: "user" }
-  })];
+        text: String(part.text ?? "")
+      });
+      continue;
+    }
+    if (part.type === "tool_use") {
+      blocks.push({
+        type: "tool-call",
+        id: callId$1(String(part.id ?? randomUUID3())),
+        name: String(part.name ?? "tool"),
+        arguments: JSON.stringify(part.input ?? {})
+      });
+      continue;
+    }
+    if (part.type === "image") {
+      blocks.push({
+        type: "text",
+        text: BRIDGE_IMAGE_PLACEHOLDER
+      });
+      continue;
+    }
+  }
+  flushTurn();
+  return messages;
 }
 function toolResultText(content) {
   if (typeof content === "string") return content;
@@ -13360,40 +13437,6 @@ async function inlineImageAttachmentBlocks(content, read) {
 function callId2(value) {
   return value;
 }
-var FreeCodeGoCapabilitySettingsSchema = z2.object({
-  mcpEnabled: z2.boolean().default(false),
-  skillEnabled: z2.boolean().default(false),
-  voiceInputEnabled: z2.boolean().default(true),
-  sessionDeleteEnabled: z2.boolean().default(true),
-  modelCategories: z2.dict(z2.union([
-    z2.const("text"),
-    z2.const("image"),
-    z2.const("video"),
-    z2.const("audio")
-  ])).default({}),
-  mcpServers: z2.array(z2.object({
-    id: z2.string().min(1).max(80),
-    enabled: z2.boolean().default(true),
-    transport: z2.union([z2.const("stdio"), z2.const("streamable-http")]),
-    serverName: z2.string().pattern(SERVER_NAME$1),
-    command: z2.string().default(""),
-    args: z2.array(z2.string().max(4096)).default([]),
-    env: z2.dict(z2.string()).default({}),
-    cwd: z2.string().default(""),
-    url: z2.string().default(""),
-    headers: z2.dict(z2.string()).default({})
-  })).default([]),
-  skillRoots: z2.array(z2.object({
-    id: z2.string().min(1).max(80),
-    enabled: z2.boolean().default(true),
-    path: z2.string().min(1).max(4096)
-  })).default([]),
-  skillInvocationOverrides: z2.dict(z2.boolean()).default({}),
-  preferredSkillPlacement: z2.union([z2.object({
-    agent: z2.union([z2.const("harness"), z2.const("agents")]),
-    scope: z2.union([z2.const("project"), z2.const("user")])
-  }), z2.const(null)])
-});
 var NO_PROJECT_ENTRIES = {
   mcpServers: [],
   skillRoots: []
@@ -14240,6 +14283,8 @@ function toMcpClientConfig(server) {
 var MAX_SOURCE_BYTES = 2e6;
 var MAX_SOURCE_FILES = 50;
 var RESOURCE_NAME = /^[A-Za-z0-9_.:/@-]{1,256}$/;
+var CONFLICT_PROTECTION_KEY = "pluginConflictProtectionEnabled";
+var NO_SETTINGS_PORT_CONFLICT_PROTECTION = false;
 var OWN_STAND_IN_MODULES = /* @__PURE__ */ new Set(["freecodego/agent-team", "freecodego/tool-agent-team"]);
 var OWN_STAND_IN_ENTRY_IDS = /* @__PURE__ */ new Set(["freecodego-agent-team", "freecodego-tool-agent-team"]);
 function isOfficialModuleName(moduleName) {
@@ -14250,27 +14295,6 @@ function isOwnStandIn(moduleName, entryId) {
   const tail = entryId.slice(entryId.lastIndexOf(":") + 1);
   return OWN_STAND_IN_ENTRY_IDS.has(tail);
 }
-var FreeCodeGoPluginConflictSettingsSchema = z2.object({
-  pluginConflictProtectionEnabled: z2.boolean().default(false),
-  pluginConflictRecords: z2.array(z2.object({
-    id: z2.string().min(1).max(256),
-    detectedAt: z2.number(),
-    resource: z2.union([
-      z2.const("tool"),
-      z2.const("command"),
-      z2.const("settings"),
-      z2.const("route"),
-      z2.const("provider"),
-      z2.const("slot")
-    ]),
-    resourceName: z2.string().min(1).max(256),
-    disabledEntryId: z2.string().min(1).max(512),
-    disabledModuleName: z2.string().min(1).max(512),
-    keptEntryId: z2.string().min(1).max(512),
-    keptModuleName: z2.string().min(1).max(512),
-    yieldedToOfficial: z2.boolean()
-  })).default([])
-});
 function scanPluginResourceClaims(source) {
   const claims = /* @__PURE__ */ new Map();
   const add = (resource, resourceName) => {
@@ -14316,7 +14340,7 @@ var FreeCodeGoPluginConflictGuard = class {
     this.ctx = ctx;
     this.settings = settings;
     this.records = settings?.get()?.pluginConflictRecords ?? [];
-    this.enabled = settings?.get()?.pluginConflictProtectionEnabled ?? bootstrapConflictProtectionEnabled();
+    this.enabled = settings?.get()?.[CONFLICT_PROTECTION_KEY] ?? NO_SETTINGS_PORT_CONFLICT_PROTECTION;
   }
   /**
   * Install plugin-owned Loader lifecycle wrappers and seed active entry claims.
@@ -14351,13 +14375,17 @@ var FreeCodeGoPluginConflictGuard = class {
       };
     }, "freecodego: plugin conflict lifecycle guard");
   }
-  /** Attach settings after a pre-Loader bootstrap installation.
+  /** Attach the settings port this guard reads the switch and its records through.
+  *
+  * The guard is a per-root singleton, so a later mount that carries a port re-points the
+  * existing instance at the live document instead of leaving it on the answer it was
+  * constructed with.
   * @param settings - the plugin settings port, when one is available.
   */
   configure(settings) {
     if (settings === void 0 || settings === this.settings) return;
     this.settings = settings;
-    this.enabled = settings.get()?.pluginConflictProtectionEnabled ?? bootstrapConflictProtectionEnabled();
+    this.enabled = settings.get()?.[CONFLICT_PROTECTION_KEY] ?? NO_SETTINGS_PORT_CONFLICT_PROTECTION;
     if (this.started) this.installInterception();
     const persisted = settings.get()?.pluginConflictRecords ?? [];
     const merged = [...persisted, ...this.records.filter((record3) => !persisted.some((item) => sameConflict(item, record3)))].slice(-100);
@@ -14404,13 +14432,26 @@ var FreeCodeGoPluginConflictGuard = class {
   protectionEnabled() {
     return this.settings?.get()?.pluginConflictProtectionEnabled ?? this.enabled;
   }
-  /** Persist the global automatic-repair switch.
+  /**
+  * Persist the global automatic-repair switch, and start or stop acting on it.
+  *
+  * Recording the value is not enough in the on direction. A guard built while the switch was
+  * off never installed its wrappers — that is deliberate, since leaving them in place would
+  * keep this plugin reading every entry's package while the deployment had said not to — so a
+  * guard that only wrote the new value would report protection as on while the running Loader
+  * went on starting every duplicate, and would silently stay inert until the next boot. The
+  * install has to come after the write resolves, because the live document is what
+  * {@link protectionEnabled} reads back.
+  *
+  * The off direction needs nothing: the wrappers ask `protectionEnabled()` per entry, so a
+  * switch turned off stops the answering without being uninstalled.
   * @param enabled - whether this capability is switched on.
   * @returns the plugin Conflict Status.
   */
   async setEnabled(enabled) {
     this.enabled = enabled;
     await this.settings?.update({ pluginConflictProtectionEnabled: enabled });
+    if (enabled) this.installInterception();
     return this.snapshot();
   }
   async seed() {
@@ -14654,14 +14695,6 @@ function relativeModuleSpecifiers(source) {
   add(/\brequire\s*\(\s*(['"])(\.{1,2}\/[^'"]+)\1\s*\)/g);
   return [...specifiers];
 }
-function bootstrapConflictProtectionEnabled() {
-  const settingsPath = join4(harnessHomeDirectory(), "settings.yaml");
-  try {
-    return readFileSync2(settingsPath, "utf8").match(/^freecodego-harness:\s*\r?\n(?:[ \t]+[^\r\n]*\r?\n)*?[ \t]+pluginConflictProtectionEnabled:\s*(true|false)\s*(?:#.*)?$/m)?.[1] === "true";
-  } catch {
-    return false;
-  }
-}
 function sameConflict(left, right) {
   return left.resource === right.resource && left.resourceName === right.resourceName && left.disabledEntryId === right.disabledEntryId && left.disabledModuleName === right.disabledModuleName && left.keptEntryId === right.keptEntryId && left.keptModuleName === right.keptModuleName;
 }
@@ -14687,7 +14720,6 @@ var MAX_UNCONFIRMED_STARTUPS = 2;
 var DSH_INSTALL_TIMEOUT_MS = 15 * 6e4;
 var NPM_PACKAGE_RE$2 = /^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/i;
 var RELEASE_TAG_RE = /^(?:freecodego-)?v(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)$/u;
-var FreeCodeGoPluginUpdateSettingsSchema = z2.object({ pluginUpdateChecksEnabled: z2.boolean().default(true) });
 var FreeCodeGoPluginUpdateService = class {
   options;
   packageName;
@@ -16973,10 +17005,7 @@ var FreeCodeGoAdvisorRuntime = class {
       const evidence = new AdvisorEvidenceCache((call, signal) => executeReviewTool(this.ctx, agent, call, signal));
       const findings = await Promise.all(Object.entries(COUNCIL_ROLES).map(async ([role, instruction]) => {
         const messages = [createUserMessage({
-          source: {
-            kind: "plugin",
-            plugin: "freecodego-advisor-council"
-          },
+          source: { kind: "freecodego-advisor-council" },
           content: [{
             type: "text",
             text: `${reviewPrompt$2(delta, watchdog.instructions)}
@@ -17093,10 +17122,7 @@ Council perspective: ${role}. ${instruction}`
     const watchdog = await discoverWatchdog(agent.session.header.cwd);
     this.watchdogFilesBySession.set(String(agent.id), watchdog.files);
     const messages = [createUserMessage({
-      source: {
-        kind: "plugin",
-        plugin: "freecodego-advisor"
-      },
+      source: { kind: "freecodego-advisor" },
       content: [{
         type: "text",
         text: reviewPrompt$2(delta, watchdog.instructions)
@@ -17235,10 +17261,7 @@ Perspective: ${perspective}`}`,
       cooldownUntilTurn: state.cooldownUntilTurn
     });
     const message2 = createUserMessage({
-      source: {
-        kind: "plugin",
-        plugin: "freecodego-advisor"
-      },
+      source: { kind: "freecodego-advisor" },
       content: [{
         type: "text",
         text: `<advisory severity="${advice.severity}" guidance="weigh, do not blindly obey">
@@ -17351,7 +17374,6 @@ function messageText$2(message2) {
   return message2.content.map((block) => {
     if (block.type === "text" || block.type === "reasoning") return block.text;
     if (block.type === "tool-call") return `${block.name}(${block.arguments})`;
-    if (block.type === "tool-result") return block.content.map((item) => item.type === "text" ? item.text : `[${item.type}]`).join("\n");
     return `[${block.type}]`;
   }).join("\n");
 }
@@ -20943,10 +20965,7 @@ var FreeCodeGoEngineCouncil = class {
     try {
       signal.throwIfAborted();
       agent.followup(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-engine-council"
-        },
+        source: { kind: "freecodego-engine-council" },
         content: [{
           type: "text",
           text: prompt
@@ -21264,10 +21283,7 @@ function terminalReport(task, request, runtimes, state, quorum, error) {
 function injectCouncilHandoff(parent, report) {
   try {
     parent.inject(createUserMessage({
-      source: {
-        kind: "plugin",
-        plugin: "freecodego-engine-council"
-      },
+      source: { kind: "freecodego-engine-council" },
       content: [{
         type: "text",
         text: "Engineering council " + report.id + " finished with state " + report.state + ". Read the durable report before proceeding. " + report.finalRecommendation
@@ -21337,8 +21353,9 @@ function sameRoutes(left, right) {
   return left.length === right.length && left.every((route, index) => route.provider === right[index]?.provider && route.model === right[index]?.model);
 }
 async function synchronizeSubagentModelRoutes(settings, llm) {
-  const current = settings.get(SUBAGENT_MODEL_SELECTION_NAMESPACE);
-  if (current === void 0) return [];
+  const descriptor = settings.describe().find((row) => row.ns === SUBAGENT_MODEL_SELECTION_NAMESPACE);
+  if (descriptor === void 0) return [];
+  const current = descriptor.value;
   const previous = routesOf(current);
   const previousByProvider = /* @__PURE__ */ new Map();
   for (const route of previous) {
@@ -21381,7 +21398,7 @@ async function synchronizeSubagentModelRoutes(settings, llm) {
     allowedModels: filtered
   };
   if (currentRecord.enabled === void 0) patch.enabled = true;
-  if (!sameRoutes(previous, filtered) || currentRecord.enabled === void 0) await settings.update(SUBAGENT_MODEL_SELECTION_NAMESPACE, patch);
+  if (!sameRoutes(previous, filtered) || currentRecord.enabled === void 0) await settings.update(SUBAGENT_MODEL_SELECTION_NAMESPACE, patch, descriptor.revision);
   return filtered;
 }
 var FreeCodeGoSubagentModelRouting = class {
@@ -21416,9 +21433,17 @@ var FreeCodeGoSubagentModelRouting = class {
     const llm = this.ctx.get("llm");
     if (settings === void 0 || llm === void 0) return;
     const operation = (async () => {
+      let retries = 0;
       do {
         this.rerun = false;
-        await synchronizeSubagentModelRoutes(settings, llm);
+        try {
+          await synchronizeSubagentModelRoutes(settings, llm);
+          retries = 0;
+        } catch {
+          if (retries >= 1 || this.disposed) break;
+          retries += 1;
+          this.rerun = true;
+        }
       } while (this.rerun && !this.disposed);
     })().catch(() => void 0).finally(() => {
       if (this.pending === operation) this.pending = void 0;
@@ -26869,97 +26894,6 @@ var FreeCodeGoVerifyOnStop = class {
     }
   }
 };
-var FreeCodeGoEngineeringSettingsSchema = z2.object({
-  engineeringEnabled: z2.boolean().default(false),
-  /**
-  * The rest of the bundled engineering library is opt-in: 23 audited Skills
-  * (the remainder of the authored set plus the vendored `mattpocock/skills`
-  * entries that are not in the default-on starter root) stay unmounted until
-  * the user turns this on.
-  */
-  engineeringSkillsEnabled: z2.boolean().default(false),
-  /**
-  * The starter set is on by default: ten Skills whose value does not depend on
-  * adopting a whole methodology. Four are disciplines the model applies on its
-  * own (evidence before completion claims, navigation before broad reading,
-  * planning multi-file work, root-cause debugging); the rest are `/name`
-  * entries a user reaches for on demand and that cost nothing until typed
-  * (a prompt-technique reference, the grilling interview and its primitive, a
-  * re-pitch escape hatch, a handoff document, and a questionnaire for
-  * decisions the agent cannot settle). They live in their own asset root so
-  * "all engineering Skills" stays the union of the roots — no skill file is
-  * duplicated, and no audit can disagree with a mount.
-  */
-  engineeringStarterSkillsEnabled: z2.boolean().default(true),
-  /**
-  * The vendored superpowers workflow pack is a separate opt-in: it is the
-  * auto-triggering, plan-then-dispatch methodology, so it must be a deliberate
-  * choice rather than a side effect of enabling the engineering disciplines.
-  */
-  engineeringSuperpowersSkillsEnabled: z2.boolean().default(false),
-  /**
-  * Injects a bounded capability map of the mounted Skills at session start.
-  * A default-off Skill library is invisible otherwise: the model never lists
-  * it, and a user who turned a pack on has no way to see what arrived.
-  */
-  engineeringSkillMapEnabled: z2.boolean().default(true),
-  /** Enables bounded project-declared verification after an approved council plan. */
-  engineeringQualityEnabled: z2.boolean().default(true),
-  engineeringMemoryEnabled: z2.boolean().default(true),
-  engineeringCouncilEnabled: z2.boolean().default(true),
-  engineeringCouncilDeepseekEnabled: z2.boolean().default(true),
-  engineeringCouncilCodexEnabled: z2.boolean().default(true),
-  engineeringCouncilClaudeEnabled: z2.boolean().default(true),
-  engineeringMemoryContextTokenBudget: z2.number().step(1).min(0).max(4e3).default(1200),
-  /**
-  * Default off, deliberately: the lexical rerank is free, deterministic, and
-  * already ranks by term coverage. Flipping this on spends one small model
-  * request per memory search to catch the memories that share no wording with
-  * the query — worth it for a user who searches by concept, wasted for one who
-  * greps for identifiers.
-  */
-  engineeringMemorySelectorEnabled: z2.boolean().default(false),
-  /**
-  * Default off, deliberately: this lets a model approve a pending action without
-  * asking the user. Off means every approval keeps prompting. On means an action
-  * whose arguments the reviewer can actually read may be cleared automatically —
-  * anything it refuses, cannot read, or declines to judge still goes to the user.
-  */
-  engineeringActionReviewEnabled: z2.boolean().default(false),
-  engineeringCodeGraphEnabled: z2.boolean().default(true),
-  engineeringCodeGraphAutoUpdate: z2.boolean().default(true),
-  engineeringGraphEngine: z2.union([
-    z2.const("auto"),
-    z2.const("graphify"),
-    z2.const("codegraph")
-  ]).default("auto"),
-  engineeringCouncilMaxRounds: z2.number().step(1).min(1).max(3).default(2),
-  engineeringCouncilTimeoutMs: z2.number().step(1).min(1e4).max(3e5).default(12e4),
-  engineeringCouncilQuorum: z2.number().step(1).min(1).max(3).default(2),
-  engineeringCouncilAutoRun: z2.boolean().default(false),
-  /**
-  * The three phases of the autonomous engineering loop. Each is a separate
-  * switch because they carry different risk: creating a goal only commits the
-  * user to finishing, while enabling the driver lets work continue with no
-  * human turn in between.
-  *
-  * - `engineeringLoopCapturePlan` — when the user approves a council decision,
-  *   persist the approved plan as a durable Harness goal.
-  * - `engineeringLoopVerifyOnComplete` — when the active goal's driver reports
-  *   it finished, run the declared verification stages and record the result.
-  * - `engineeringLoopAutoContinue` — let the Harness goal-round driver start
-  *   the next round without a user turn. Off by default: a goal that continues
-  *   unattended is the one behaviour a user must opt into explicitly.
-  */
-  engineeringLoopCapturePlan: z2.boolean().default(true),
-  engineeringLoopVerifyOnComplete: z2.boolean().default(true),
-  engineeringLoopAutoContinue: z2.boolean().default(false),
-  /** Round cap for a captured plan goal; bounds unattended continuation. */
-  engineeringLoopMaxGoalRounds: z2.number().step(1).min(1).max(256).default(24),
-  engineeringCouncilMaxTokens: z2.number().step(100).min(1200).max(2e4).default(3600),
-  engineeringCouncilMaxConcurrent: z2.number().step(1).min(1).max(8).default(2),
-  engineeringCouncilDecisionTtlMs: z2.number().step(6e4).min(6e4).max(10080 * 6e4).default(30 * 6e4)
-});
 var GOAL_OBJECTIVE_MAX_CHARS = 8e3;
 var GOAL_EXCERPT_MAX_CHARS = 160;
 function goalPhaseOf(value) {
@@ -28486,10 +28420,7 @@ var FreeCodeGoEngineeringRegistry = class {
         fence.close
       ].join("\n");
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-engineering-memory"
-        },
+        source: { kind: "freecodego-engineering-memory" },
         content: [{
           type: "text",
           text: text2
@@ -28526,10 +28457,7 @@ var FreeCodeGoEngineeringRegistry = class {
       if (built === void 0) return;
       this.skillMapBudget = built.metrics;
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-engineering-skills"
-        },
+        source: { kind: "freecodego-engineering-skills" },
         content: [{
           type: "text",
           text: built.text
@@ -29899,7 +29827,7 @@ function selectGraphEngine(preference, graphifyInstalled, codeGraphInstalled) {
 }
 function normalizeSettings(value) {
   return {
-    engineeringEnabled: value?.engineeringEnabled === true,
+    engineeringEnabled: value?.engineeringEnabled !== false,
     engineeringSkillsEnabled: value?.engineeringSkillsEnabled === true,
     engineeringStarterSkillsEnabled: value?.engineeringStarterSkillsEnabled !== false,
     engineeringSuperpowersSkillsEnabled: value?.engineeringSuperpowersSkillsEnabled === true,
@@ -29929,12 +29857,12 @@ function normalizeSettings(value) {
     engineeringCouncilDecisionTtlMs: boundedInteger$1(value?.engineeringCouncilDecisionTtlMs, 30 * 6e4, 6e4, 10080 * 6e4)
   };
 }
-function pendingRecall(agent, plugin) {
+function pendingRecall(agent, producer) {
   try {
     const inbox = agent.inbox;
     if (inbox === void 0) return false;
-    const fromPlugin = (message2) => isRecord2(message2.source) && message2.source.kind === "plugin" && message2.source.plugin === plugin;
-    return (inbox.nextStep ?? []).some(fromPlugin) || (inbox.nextTurn ?? []).some(fromPlugin);
+    const fromProducer = (message2) => isRecord2(message2.source) && message2.source.kind === producer;
+    return (inbox.nextStep ?? []).some(fromProducer) || (inbox.nextTurn ?? []).some(fromProducer);
   } catch {
     return false;
   }
@@ -30955,14 +30883,6 @@ function describeCronExpression(expression) {
   }
   return `cron ${expression.source}`;
 }
-var FreeCodeGoAutomationSettingsSchema = z2.object({
-  /** Master switch for declarative failure recovery. */
-  hookChainsEnabled: z2.boolean().default(true),
-  hookChainsMaxDepth: z2.number().step(1).min(0).max(10).default(2),
-  hookChainsCooldownMs: z2.number().step(1e3).min(0).max(1440 * 60 * 1e3).default(3e4),
-  /** Master switch for the calendar planner. */
-  scheduledTasksEnabled: z2.boolean().default(true)
-});
 var HOOK_CHAINS_RELATIVE_PATH = join4(".freecodego", "hook-chains.json");
 function outcomeOfTurnEnd(reason) {
   switch (typeof reason === "object" && reason !== null ? reason.kind : void 0) {
@@ -31458,7 +31378,21 @@ function setEngineAvailability(agentEngines, id, availability) {
   } catch {
   }
 }
+var MODELS_SETTINGS_ENTRY = "llm-pi-ai";
+function peerSettings(ctx, entryId) {
+  const settings = ctx.get("settings");
+  if (typeof settings?.describe !== "function") return void 0;
+  try {
+    const descriptor = settings.describe().find((row) => row.ns === entryId);
+    return descriptor === void 0 ? void 0 : maybeRecord(descriptor.value);
+  } catch {
+    return;
+  }
+}
 var DONE = "[DONE]";
+function unsupported(what) {
+  throw new LlmError(`${what} cannot be serialized on this wire`, "UNSUPPORTED_CONTENT");
+}
 async function* parseSse(stream) {
   const events = stream.pipeThrough(new TextDecoderStream()).pipeThrough(new EventSourceParserStream());
   for await (const event of events) {
@@ -31561,8 +31495,8 @@ function serializeRequest(options, defaults = {}) {
     content: options.system
   });
   for (const message2 of options.messages) {
-    message2.content;
     if (message2.role === "system") {
+      message2.content;
       messages.push({
         role: "system",
         content: text(message2.content)
@@ -31573,16 +31507,19 @@ function serializeRequest(options, defaults = {}) {
       messages.push(serializeAssistant(message2));
       continue;
     }
-    const results = message2.content.filter((block) => block.type === "tool-result");
-    const content = text(message2.content.filter((block) => block.type !== "tool-result"));
-    for (const result of results) messages.push({
-      role: "tool",
-      tool_call_id: result.toolCallId,
-      content: text(result.content) || "(no output)"
-    });
-    if (content !== "" || results.length === 0) messages.push({
+    if (message2.role === "tool") {
+      messages.push({
+        role: "tool",
+        tool_call_id: message2.toolCallId,
+        content: text(message2.content) || "(no output)"
+      });
+      continue;
+    }
+    if (message2.role === "developer") unsupported("developer message");
+    message2.content;
+    messages.push({
       role: "user",
-      content
+      content: text(message2.content)
     });
   }
   return requestWithMessages(options, messages, defaults);
@@ -31607,14 +31544,17 @@ async function serializeRequestWithInlineImages(options, images, defaults = {})
       messages.push(serializeAssistant(message2));
       continue;
     }
-    const results = message2.content.filter((block) => block.type === "tool-result");
-    const content = await inlineUserContent(message2.content.filter((block) => block.type !== "tool-result"), images);
-    for (const result of results) messages.push({
-      role: "tool",
-      tool_call_id: result.toolCallId,
-      content: text(result.content) || "(no output)"
-    });
-    if (content.length > 0 || results.length === 0) messages.push({
+    if (message2.role === "tool") {
+      messages.push({
+        role: "tool",
+        tool_call_id: message2.toolCallId,
+        content: text(message2.content) || "(no output)"
+      });
+      continue;
+    }
+    if (message2.role === "developer") unsupported("developer message");
+    const content = await inlineUserContent(message2.content, images);
+    messages.push({
       role: "user",
       content: inlineUserWireContent(content)
     });
@@ -31870,13 +31810,6 @@ async function anthropicContent(message2, images) {
     case "tool-call":
       if (message2.role === "assistant") blocks.push(anthropicToolUse(block));
       break;
-    case "tool-result":
-      blocks.push({
-        type: "tool_result",
-        tool_use_id: block.toolCallId,
-        content: textOf$2(block.content) || "(no output)"
-      });
-      break;
     default:
       break;
   }
@@ -31886,19 +31819,38 @@ async function anthropicTurns(options, images) {
   const systems = [];
   if (options.system !== void 0 && options.system !== "") systems.push(options.system);
   const messages = [];
+  const results = [];
+  const flushResults = () => {
+    if (results.length === 0) return;
+    messages.push({
+      role: "user",
+      content: results.splice(0)
+    });
+  };
   for (const message2 of options.messages) {
     if (message2.role === "system") {
       const text2 = textOf$2(message2.content);
       if (text2 !== "") systems.push(text2);
       continue;
     }
+    if (message2.role === "developer") unsupported("developer message");
+    if (message2.role === "tool") {
+      results.push({
+        type: "tool_result",
+        tool_use_id: message2.toolCallId,
+        content: textOf$2(message2.content) || "(no output)"
+      });
+      continue;
+    }
     const content = await anthropicContent(message2, images);
     if (content.length === 0) continue;
+    flushResults();
     messages.push({
       role: message2.role === "assistant" ? "assistant" : "user",
       content
     });
   }
+  flushResults();
   return {
     system: systems.length === 0 ? void 0 : systems.join("\n\n"),
     messages
@@ -32234,7 +32186,7 @@ var OpenAiCompatibleAdapter = class extends LlmAdapter {
       const detail = redactProviderDetail(await response.text().catch(() => ""));
       if (response.status === 400) onBadRequest?.(detail);
       if (response.status === 429) this.config.onRateLimited?.(this.config.providerName, response.status);
-      const rateHint = response.status === 429 ? this.config.rateLimitedHint?.(this.config.providerName) : void 0;
+      const rateHint = this.config.rateLimitedHint?.(this.config.providerName, response.status, detail);
       throw new LlmError(`${this.config.providerName} provider request failed (HTTP ${response.status})${detail === "" ? "" : `: ${detail}`}${rateHint === void 0 ? "" : `
 ${rateHint}`}`, llmCodeForUpstreamStatus(response.status), { status: response.status });
     }
@@ -33347,21 +33299,29 @@ function audioMimeType(file) {
   const extension = path.extname(file).toLowerCase();
   return extension === ".webm" ? "audio/webm" : extension === ".ogg" || extension === ".opus" ? "audio/ogg" : extension === ".wav" ? "audio/wav" : extension === ".m4a" || extension === ".mp4" ? "audio/mp4" : extension === ".flac" ? "audio/flac" : "audio/mpeg";
 }
-function registerMediaTools(host) {
+var MEDIA_GENERATION_TOOL_NAMES = {
+  image: "freecodego_generate_image",
+  video: "freecodego_generate_video"
+};
+var NO_MEDIA_TOOLS = {
+  names: [],
+  dispose: () => void 0
+};
+var GENERIC_MEDIA_OUTPUT = {
+  schema: {
+    type: "object",
+    additionalProperties: true
+  },
+  render: (_args, value) => [{
+    type: "text",
+    text: JSON.stringify(value)
+  }]
+};
+function registerGenerationTools(host) {
   const tools = host.ctx.get("tools");
-  if (tools === void 0) return;
-  const genericOutput = {
-    schema: {
-      type: "object",
-      additionalProperties: true
-    },
-    render: (_args, value) => [{
-      type: "text",
-      text: JSON.stringify(value)
-    }]
-  };
-  const disposeImage = tools.register(toolDefinition({
-    name: "freecodego_generate_image",
+  if (tools === void 0) return NO_MEDIA_TOOLS;
+  const imageTool = toolDefinition({
+    name: MEDIA_GENERATION_TOOL_NAMES.image,
     description: "Generate an image with the user-selected default media model. Do not pass a model id. Pass images to edit or fuse existing pictures on the providers that accept sources. If that provider is unavailable, the Host safely tries another configured image model.",
     parameters: {
       type: "object",
@@ -33389,7 +33349,7 @@ function registerMediaTools(host) {
       additionalProperties: false
     },
     output: {
-      schema: genericOutput.schema,
+      schema: GENERIC_MEDIA_OUTPUT.schema,
       render: (_args, value) => renderGeneratedImages(value)
     },
     execute: async (args, exec) => {
@@ -33399,9 +33359,9 @@ function registerMediaTools(host) {
       card: "generic",
       title: `Generate image: ${args.prompt}`
     })
-  }));
-  const disposeVideo = tools.register(toolDefinition({
-    name: "freecodego_generate_video",
+  });
+  const videoTool = toolDefinition({
+    name: MEDIA_GENERATION_TOOL_NAMES.video,
     description: "Generate a video with the user-selected default media model. Do not pass a model id. If that provider is unavailable before task creation, the Host safely tries another configured video model.",
     parameters: {
       type: "object",
@@ -33440,7 +33400,7 @@ function registerMediaTools(host) {
       required: ["prompt"],
       additionalProperties: false
     },
-    output: genericOutput,
+    output: GENERIC_MEDIA_OUTPUT,
     execute: async (args, exec) => {
       return host.generateVideoWithFallback(args, exec.signal);
     },
@@ -33448,8 +33408,21 @@ function registerMediaTools(host) {
       card: "generic",
       title: `Generate video: ${args.prompt}`
     })
-  }));
-  const disposeAudio = tools.register(toolDefinition({
+  });
+  const disposeImage = tools.register(imageTool);
+  const disposeVideo = tools.register(videoTool);
+  return {
+    names: [imageTool.name, videoTool.name],
+    dispose: () => {
+      disposeImage();
+      disposeVideo();
+    }
+  };
+}
+function registerAudioTools(host) {
+  const tools = host.ctx.get("tools");
+  if (tools === void 0) return NO_MEDIA_TOOLS;
+  const audioTool = toolDefinition({
     name: "freecodego_generate_audio",
     description: "Generate speech/audio with the user-selected default media model. Do not pass a model id. The Host can fall back to another configured audio model when the selected provider is unavailable.",
     parameters: {
@@ -33474,7 +33447,7 @@ function registerMediaTools(host) {
       required: ["input"],
       additionalProperties: false
     },
-    output: genericOutput,
+    output: GENERIC_MEDIA_OUTPUT,
     execute: async (args, exec) => {
       return host.generateAudioWithFallback(args, exec.agent?.session.header.cwd, exec.signal);
     },
@@ -33482,8 +33455,8 @@ function registerMediaTools(host) {
       card: "generic",
       title: "Generate audio with FreeCodeGo"
     })
-  }));
-  const disposeTranscribe = tools.register(toolDefinition({
+  });
+  const transcribeTool = toolDefinition({
     name: "freecodego_transcribe_audio",
     description: "Transcribe an audio file with the fixed free Groq whisper-large-v3-turbo model. The file must be inside the active workspace.",
     parameters: {
@@ -33499,7 +33472,7 @@ function registerMediaTools(host) {
       required: ["path"],
       additionalProperties: false
     },
-    output: genericOutput,
+    output: GENERIC_MEDIA_OUTPUT,
     execute: async (args, exec) => {
       const cwd = exec.agent?.session.header.cwd;
       if (cwd === void 0) throw new Error("Audio transcription requires an active workspace");
@@ -33531,13 +33504,16 @@ function registerMediaTools(host) {
       card: "generic",
       title: `Transcribe audio: ${args.path}`
     })
-  }));
-  host.ctx.effect(() => () => {
-    disposeImage();
-    disposeVideo();
-    disposeAudio();
-    disposeTranscribe();
-  }, "freecodego: default media tools");
+  });
+  const disposeAudio = tools.register(audioTool);
+  const disposeTranscribe = tools.register(transcribeTool);
+  return {
+    names: [audioTool.name, transcribeTool.name],
+    dispose: () => {
+      disposeAudio();
+      disposeTranscribe();
+    }
+  };
 }
 async function generateImageWithFallback(host, args, signal) {
   return withMediaFallback(host, "image", signal, async (route) => {
@@ -33890,7 +33866,7 @@ function mediaRoute(host, selection) {
   };
 }
 async function configuredMediaConnection(host, route) {
-  const profile = asRecord(asRecord(asRecord(host.ctx.get("settings")?.get("llm-pi-ai")).providers)[route.provider]);
+  const profile = asRecord(asRecord(asRecord(peerSettings(host.ctx, MODELS_SETTINGS_ENTRY)).providers)[route.provider]);
   const baseURL = asString(profile.baseURL) ?? defaultMediaBaseURL(route.provider);
   if (baseURL === void 0) throw new Error(`Media provider "${route.provider}" needs a Base URL in the Harness Models settings`);
   const reference = asString(profile.apiKeyEnv) ?? defaultMediaCredentialRef(route.provider);
@@ -34464,12 +34440,19 @@ function registerAdvisorTools(deps) {
     disposeTeamImplementation();
   }, "freecodego: Advisor and engineering council tools");
 }
-function registerAgnesTools(deps) {
+var AGNES_MEDIA_TOOL_NAMES = {
+  image: "agnes_generate_image",
+  video: "agnes_generate_video"
+};
+function registerAgnesMediaTools(deps) {
   const client = deps.agnes;
   const tools = deps.ctx.get("tools");
-  if (client === void 0 || tools === void 0) return;
+  if (client === void 0 || tools === void 0) return {
+    names: [],
+    dispose: () => void 0
+  };
   const disposeImage = tools.register(toolDefinition({
-    name: "agnes_generate_image",
+    name: AGNES_MEDIA_TOOL_NAMES.image,
     description: "Legacy image-generation tool name. Generate an image with the FreeCodeGo Settings image default; do not assume Agnes is selected. The Host routes this request through the configured default image model and falls back safely when unavailable.",
     parameters: {
       type: "object",
@@ -34505,7 +34488,7 @@ function registerAgnesTools(deps) {
     })
   }));
   const disposeVideo = tools.register(toolDefinition({
-    name: "agnes_generate_video",
+    name: AGNES_MEDIA_TOOL_NAMES.video,
     description: "Legacy video-generation tool name. Generate a video with the FreeCodeGo Settings video default; do not assume Agnes is selected. The Host routes this request through the configured default video model and falls back safely when unavailable.",
     parameters: {
       type: "object",
@@ -34556,10 +34539,13 @@ function registerAgnesTools(deps) {
       title: `Generate video: ${args.prompt}`
     })
   }));
-  deps.ctx.effect(() => () => {
-    disposeImage();
-    disposeVideo();
-  }, "freecodego: Agnes media tools");
+  return {
+    names: [AGNES_MEDIA_TOOL_NAMES.image, AGNES_MEDIA_TOOL_NAMES.video],
+    dispose: () => {
+      disposeImage();
+      disposeVideo();
+    }
+  };
 }
 var COMMUNITY_ASSET_HOSTS = /* @__PURE__ */ new Set([
   "raw.githubusercontent.com",
@@ -36721,6 +36707,102 @@ async function ensureFreeCodeGoAgentPreset() {
     return false;
   }
 }
+async function loaderSettled(ctx) {
+  const loader = ctx?.root?.loader;
+  if (typeof loader?.await !== "function") return;
+  try {
+    await loader.await.call(loader);
+  } catch {
+  }
+}
+function findUpstreamAgentPresets(ctx) {
+  const get = ctx?.get;
+  if (typeof get !== "function") return void 0;
+  let candidate;
+  try {
+    candidate = get.call(ctx, "agentPresets");
+  } catch {
+    return;
+  }
+  const view = candidate;
+  return typeof view?.list === "function" && typeof view?.register === "function" ? view : void 0;
+}
+var JS_EXPRESSION_TAG = "tag:yaml.org,2002:js";
+var PLATFORM_EXPRESSION = /^process\.platform\s*(===|!==)\s*'([^']+)'$/;
+var presetSchema = yaml.DEFAULT_SCHEMA.extend([new yaml.Type(JS_EXPRESSION_TAG, {
+  kind: "scalar",
+  construct: (source) => {
+    const match = PLATFORM_EXPRESSION.exec(source.trim());
+    if (match === null) throw new Error(`unsupported !!js expression in a bundled preset: ${source.trim()}`);
+    return match[1] === "===" ? process.platform === match[2] : process.platform !== match[2];
+  }
+})]);
+async function readBundledAgentPreset(presetId) {
+  const source = presetSourceDirectory(presetId);
+  if (source === void 0) return void 0;
+  const metadata = maybeRecord(yaml.load(await readFile3(join4(source, "preset.yml"), "utf8"), { schema: presetSchema }));
+  const loaded2 = yaml.load(await readFile3(join4(source, "agent.cordis.yml"), "utf8"), { schema: presetSchema });
+  if (!Array.isArray(loaded2)) return void 0;
+  const plugins = [];
+  for (const row of loaded2) {
+    const record3 = maybeRecord(row);
+    if (record3 === void 0) return void 0;
+    plugins.push(record3);
+  }
+  const name2 = metadata?.name;
+  const description = metadata?.description;
+  const order = metadata?.order;
+  return {
+    id: presetId,
+    ...typeof name2 === "string" && name2 !== "" ? { name: name2 } : {},
+    ...typeof description === "string" && description !== "" ? { description } : {},
+    ...typeof order === "number" && Number.isFinite(order) ? { order } : {},
+    plugins
+  };
+}
+function installFreeCodeGoAgentPresets(ctx) {
+  const disposers = [];
+  let released = false;
+  const keep = (unregister) => {
+    if (released) {
+      Promise.resolve(unregister()).catch(() => {
+      });
+      return;
+    }
+    disposers.push(unregister);
+  };
+  return {
+    done: (async () => {
+      await loaderSettled(ctx);
+      const registry = findUpstreamAgentPresets(ctx);
+      if (registry === void 0) {
+        await ensureFreeCodeGoAgentPreset();
+        return;
+      }
+      let declared;
+      try {
+        declared = new Set((await registry.list()).map((row) => row.id));
+      } catch {
+        declared = /* @__PURE__ */ new Set();
+      }
+      for (const presetId of BUNDLED_PRESET_IDS) {
+        if (declared.has(presetId)) continue;
+        const definition = await readBundledAgentPreset(presetId);
+        if (definition === void 0) continue;
+        try {
+          keep(await registry.register(definition));
+        } catch {
+        }
+      }
+    })().catch(() => {
+    }),
+    release: () => {
+      released = true;
+      for (const unregister of disposers.splice(0)) Promise.resolve(unregister()).catch(() => {
+      });
+    }
+  };
+}
 var DEFAULT_CAPACITY = 1e3;
 var DEFAULT_TTL_MS = 30 * 6e4;
 function computeKey(payload) {
@@ -42612,17 +42694,6 @@ Fix these and call the tool again; no child agent was started.`;
 var run$1 = promisify(execFile);
 var GIT_TIMEOUT_MS$1 = 1e4;
 var MAX_GIT_OUTPUT$1 = 4096;
-var FreeCodeGoTrustSettingsSchema = z2.object({
-  /**
-  * Master switch for the whole gate.
-  *
-  * Off means every project-scoped surface is treated as trusted — the
-  * pre-gate behaviour, kept reachable so a deployment that already controls
-  * which repositories it opens is not forced to grant each one. It is
-  * deliberately not the default: the safe state must not be the opt-in one.
-  */
-  folderTrustEnabled: z2.boolean().default(true)
-});
 var FOLDER_TRUST_ENV = "FREECODEGO_FOLDER_TRUST";
 function folderTrustEnabled(settings) {
   const raw = process.env[FOLDER_TRUST_ENV]?.trim().toLowerCase();
@@ -43359,10 +43430,7 @@ var AssistantLoopGuard = class {
   injectReminder(agent, finding) {
     try {
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-assistant-loop-guard"
-        },
+        source: { kind: "freecodego-assistant-loop-guard" },
         content: [{
           type: "text",
           text: renderAssistantLoopReminder(finding)
@@ -44058,10 +44126,8 @@ function isHarnessPruned(message2) {
   return text2 !== void 0 && text2.includes("[... tool result middle pruned ...]");
 }
 function hasOnlyTextContent(message2) {
-  if (message2.role !== "user" || !Array.isArray(message2.content)) return false;
-  const outer = message2.content[0];
-  if (outer?.type !== "tool-result" || !Array.isArray(outer.content)) return false;
-  const blocks = outer.content;
+  if (message2.role !== "tool" || !Array.isArray(message2.content)) return false;
+  const blocks = message2.content;
   if (blocks.length === 0) return false;
   return blocks.every((block) => block?.type === "text");
 }
@@ -44072,17 +44138,13 @@ function isClearableResult(message2, tool2, clearable, clearedMarker) {
   return hasOnlyTextContent(message2);
 }
 function resultText(message2) {
-  if (message2.role !== "user" || !Array.isArray(message2.content)) return void 0;
-  const outer = message2.content[0];
-  if (outer?.type !== "tool-result" || !Array.isArray(outer.content)) return void 0;
+  if (message2.role !== "tool" || !Array.isArray(message2.content)) return void 0;
   const texts = [];
-  for (const block of outer.content) if (block?.type === "text" && typeof block.text === "string") texts.push(block.text);
+  for (const block of message2.content) if (block?.type === "text" && typeof block.text === "string") texts.push(block.text);
   return texts.join("\n");
 }
 function resultCallId(message2) {
-  if (message2.role !== "user" || !Array.isArray(message2.content)) return void 0;
-  const first = message2.content[0];
-  return first?.type === "tool-result" && typeof first.toolCallId === "string" ? first.toolCallId : void 0;
+  return message2.role === "tool" && typeof message2.toolCallId === "string" ? message2.toolCallId : void 0;
 }
 function clearOldToolResults(messages, options = {}) {
   const clearable = options.clearableTools ?? CLEARABLE_TOOL_KINDS;
@@ -44133,12 +44195,8 @@ function clearOldToolResults(messages, options = {}) {
       return {
         ...message2,
         content: [{
-          type: "tool-result",
-          toolCallId: callId3,
-          content: [{
-            type: "text",
-            text: replacement
-          }]
+          type: "text",
+          text: replacement
         }]
       };
     }),
@@ -45093,7 +45151,7 @@ function messageText$1(content, depth = 4) {
 }
 function isSummaryEvent(data) {
   const message2 = data.message;
-  if (message2?.source?.kind === "compaction") return true;
+  if (message2?.source?.kind === "compact-checkpoint") return true;
   const text2 = messageText$1(message2?.content);
   return text2.startsWith("<summary>") || text2.includes("<compacted-conversation");
 }
@@ -45416,10 +45474,7 @@ function installRehydration(ctx, deps) {
       const agent = ctx.agents?.get?.(String(session.id));
       if (agent === void 0 || typeof agent.inject !== "function") return;
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-rehydration"
-        },
+        source: { kind: "freecodego-rehydration" },
         content: [{
           type: "text",
           text: body
@@ -45446,10 +45501,7 @@ function createMemorySelector(options) {
       provider: options.route.provider,
       model: options.route.model,
       messages: [createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-memory-recall"
-        },
+        source: { kind: "freecodego-memory-recall" },
         content: [{
           type: "text",
           text: selectorPrompt(query2, excerpts, limit)
@@ -45823,36 +45875,40 @@ function sortEntries(entries) {
   return [...entries].sort((left, right) => left.name.localeCompare(right.name));
 }
 var FreeCodeGoPolicy = class {
-  settings;
+  config;
+  writer;
   /**
-  * @param settings - the registered namespace scope, or `undefined` when the
-  *   composition has no settings service (headless SDK trees, tests). The
-  *   policy is always constructible so consumers never branch on its presence;
-  *   they branch on {@link configured} instead.
+  * @param config - the plugin's resolved configuration, or `undefined` when the
+  *   composition supplies none (tests, a bare context). The policy is always
+  *   constructible so consumers never branch on its presence; they branch on
+  *   {@link configured} instead.
+  * @param writer - the persistence step, absent when no settings service is mounted.
   */
-  constructor(settings) {
-    this.settings = settings;
+  constructor(config, writer = void 0) {
+    this.config = config;
+    this.writer = writer;
   }
-  /** Whether a settings service was available when the plugin was built. */
+  /** Whether a configuration was available when the plugin was built. */
   get configured() {
-    return this.settings !== void 0;
+    return this.config !== void 0;
   }
   /**
   * The settings a behaviour read must use.
   *
-  * The only read of the registered scope in this package, which is what makes it
-  * the place a second configuration layer would have to be applied — see the
-  * module doc.
-  * @returns the resolved document, or `undefined` when no settings service exists.
+  * The only read of the Config in this package, which is what makes it the place a
+  * second configuration layer would have to be applied — see the module doc.
+  * @returns the resolved document, or `undefined` when no configuration exists.
   */
   get() {
-    return this.settings?.get();
+    return this.config === void 0 ? void 0 : resolveSettings(this.config);
   }
   /**
   * Apply a user-originated change.
   *
-  * Writes go to the registered scope, which is the only layer there is: nothing
-  * a user gesture can reach edits a document other than their own.
+  * The write goes to this plugin's own profile entry, through the settings service that
+  * owns validation, revisions, and the document write. A composition without that
+  * service drops the patch rather than pretending to have stored it: the caller is a
+  * user gesture whose failure the Web client reports from the RPC that carried it.
   * @param patch - the fields to merge into the settings document. Typed as the
   *   harness types it (`object`) rather than as a `Partial` of the document,
   *   because a patch is a *merge*: the caller that owns one settings domain
@@ -45860,9 +45916,17 @@ var FreeCodeGoPolicy = class {
   *   force every caller to widen a patch it knows is already valid.
   */
   async update(patch) {
-    await this.settings?.update(patch);
+    await this.writer?.update(patch);
   }
 };
+function resolveSettings(config) {
+  const document = {};
+  for (const [key, entry] of Object.entries(config)) {
+    if (!isVolatile(entry)) continue;
+    document[key] = entry.get();
+  }
+  return document;
+}
 var ROLLOUT_STAGES = [
   "off",
   "record_only",
@@ -46446,10 +46510,7 @@ function createMemoryDreamPlanner(options) {
       provider: options.route.provider,
       model: options.route.model,
       messages: [createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-memory-dream"
-        },
+        source: { kind: "freecodego-memory-dream" },
         content: [{
           type: "text",
           text: dreamPrompt(request)
@@ -46706,10 +46767,7 @@ function createActionReviewer(input) {
       provider: input.route.provider,
       model: input.route.model,
       messages: [createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-action-review"
-        },
+        source: { kind: "freecodego-action-review" },
         content: [{
           type: "text",
           text: reviewPrompt(composed, action)
@@ -46802,10 +46860,6 @@ function messageText(message2) {
     const block = item;
     if (block.type === "text" || block.type === "reasoning") return block.text ?? "";
     if (block.type === "tool-call") return `${block.name ?? ""}(${block.arguments ?? ""})`;
-    if (block.type === "tool-result") return (block.content ?? []).map((part) => {
-      const item2 = part;
-      return item2.type === "text" ? item2.text ?? "" : `[${item2.type ?? "unknown"}]`;
-    }).join("\n");
     return block.type === void 0 ? "" : `[${block.type}]`;
   }).join("\n");
 }
@@ -52093,7 +52147,12 @@ function imageInputModalities(id, name2) {
   return /(?:\bgpt[\s_.-]?(?:4o|4\.1|4\.5|5)\b|\bgemini\b|\bclaude\b|\bgrok\b|(?:[-_.]|\b)(?:vision|vl|4v)(?:[-_.]|\b))/iu.test(value) ? ["text", "image"] : ["text"];
 }
 var RATE_LIMIT_PROXY_HINT = "\u5F53\u524D IP \u53EF\u80FD\u88AB\u4E0A\u6E38\u9650\u6D41\uFF1A\u8BF7\u5C1D\u8BD5\u5173\u95ED\u672C\u5730/\u5168\u5C40\u4EE3\u7406\u540E\u91CD\u8BD5\u3002\nYour current IP may be rate-limited by the upstream: try disabling your local/global proxy and retry.";
-var KILO_RATE_LIMIT_HINT = "Kilo \u514D\u8D39\u901A\u9053\u6309\u51FA\u53E3 IP \u9650\u6D41\uFF08\u5B98\u65B9\u914D\u989D\uFF1A\u6BCF\u5C0F\u65F6 200 \u6B21\uFF0C\u767B\u5F55\u4E0E\u5426\u90FD\u4E00\u6837\uFF09\uFF0C\u5F53\u524D\u7F51\u7EDC\u53EF\u80FD\u5DF2\u7528\u5B8C\uFF1A\u7A0D\u540E\u91CD\u8BD5\uFF0C\u6216\u66F4\u6362\u7F51\u7EDC\u51FA\u53E3\u3002\nKilo meters its free routes per egress IP (200 requests/hour, signed in or not) and this network may be out of budget: retry later, or use a different network egress.";
+var KILO_RATE_LIMIT_HINT = "Kilo \u514D\u8D39\u901A\u9053\u6309\u51FA\u53E3 IP \u9650\u6D41\uFF08\u5B98\u65B9\u914D\u989D\uFF1A\u6BCF\u5C0F\u65F6 200 \u6B21\uFF0C\u767B\u5F55\u4E0E\u5426\u90FD\u4E00\u6837\uFF09\uFF0C\u5F53\u524D\u7F51\u7EDC\u53EF\u80FD\u5DF2\u7528\u5B8C\uFF1A\u8BF7\u66F4\u6362\u8282\u70B9 IP \u540E\u91CD\u8BD5\uFF0C\u6216\u5173\u95ED\u4EE3\u7406\u3001\u7528\u771F\u5B9E IP \u8BBF\u95EE\u3002\nKilo meters its free routes per egress IP (200 requests/hour, signed in or not) and this network may be out of budget: switch to a different node IP, or disable your proxy and retry from your real IP.";
+var OPENCODE_FREE_TIER_HINT = 'OpenCode \u514D\u8D39\u989D\u5EA6\u6309\u51FA\u53E3 IP \u5224\u5B9A\uFF1A\u5F53\u524D\u8282\u70B9 IP \u88AB\u4E0A\u6E38\u5224\u4E3A\u975E\u5B98\u65B9\u5BA2\u6237\u7AEF\uFF08\u4E0A\u6E38\u539F\u6587\uFF1Afree tier can only be used from within OpenCode\uFF09\uFF0C\u4E0D\u662F\u6A21\u578B\u6216\u5BC6\u94A5\u7684\u95EE\u9898\u3002\u8BF7\u66F4\u6362\u8282\u70B9 IP \u540E\u91CD\u8BD5\uFF0C\u6216\u5173\u95ED\u4EE3\u7406\u3001\u7528\u771F\u5B9E IP \u8BBF\u95EE\u3002\nOpenCode decides its free tier by egress IP: this node address is not accepted as its own client (upstream: "free tier can only be used from within OpenCode"), so neither the model nor the key is the problem. Switch to a different node IP, or disable your proxy and retry from your real IP.';
+function isOpenCodeFreeTierRefusal(status, detail) {
+  if (status !== 403) return false;
+  return /FreeTierError|free tier can only be used/iu.test(detail);
+}
 var FREE_UPSTREAM_MODELS = [
   {
     id: "mimo-v2.5",
@@ -52497,7 +52556,10 @@ var FreeCodeGoManagedCatalogs = class {
       normalizeReasoningEffort: (effort) => isDirectReasoningEffort(effort) ? effort : void 0,
       defaultReasoningEffort: "off",
       reasoningEffortsForModel: () => DIRECT_REASONING_EFFORTS,
-      rateLimitedHint: () => RATE_LIMIT_PROXY_HINT,
+      rateLimitedHint: (_provider, status, detail) => {
+        if (isOpenCodeFreeTierRefusal(status, detail)) return OPENCODE_FREE_TIER_HINT;
+        return status === 429 ? RATE_LIMIT_PROXY_HINT : void 0;
+      },
       omitDefaultMaxTokens: true,
       omitMaxTokens: true,
       defaultContextWindow: 1e6,
@@ -52523,7 +52585,7 @@ var FreeCodeGoManagedCatalogs = class {
           headers: { "user-agent": "freecodego/kilo" }
         };
       },
-      rateLimitedHint: () => KILO_RATE_LIMIT_HINT,
+      rateLimitedHint: (_provider, status) => status === 429 ? KILO_RATE_LIMIT_HINT : void 0,
       reasoningWire: "standard",
       normalizeReasoningEffort: (effort) => isDirectReasoningEffort(effort) ? effort : void 0,
       defaultReasoningEffort: "off",
@@ -52863,8 +52925,8 @@ var FreeCodeGoManagedCatalogs = class {
   /** Refresh user-visible gateway monitor facts without delaying model picker paint. */
   refreshGatewayHealthInBackground() {
     const endpoint = this.deps.gatewayBaseUrl();
-    const unsupported = this.gatewayHealthUnsupported;
-    if (unsupported !== void 0 && unsupported.endpoint === endpoint && Date.now() < unsupported.expiresAt || this.deps.api() === void 0 || this.deps.account() === void 0 || this.deps.account().snapshot().status !== "authenticated") return;
+    const unsupported2 = this.gatewayHealthUnsupported;
+    if (unsupported2 !== void 0 && unsupported2.endpoint === endpoint && Date.now() < unsupported2.expiresAt || this.deps.api() === void 0 || this.deps.account() === void 0 || this.deps.account().snapshot().status !== "authenticated") return;
     const now = Date.now();
     if (this.gatewayHealthPromise !== void 0 || (this.gatewayHealthCache?.expiresAt ?? 0) > now || this.gatewayHealthRefreshAfter > now) return;
     this.gatewayHealthRefreshAfter = now + GATEWAY_HEALTH_CACHE_TTL_MS;
@@ -55156,10 +55218,7 @@ function renderFile(file) {
   lines.push("</file>");
   return lines.join("\n");
 }
-var REVIEW_MESSAGE_SOURCE = {
-  kind: "plugin",
-  plugin: "freecodego/review"
-};
+var REVIEW_MESSAGE_SOURCE = { kind: "freecodego/review" };
 function createReviewModelPort(llm, resolveRoute2, sessionId) {
   return { async generate(request) {
     const route = resolveRoute2();
@@ -58048,10 +58107,7 @@ function wrapChild(handle, maxOutputChars) {
   return {
     async run(prompt) {
       handle.agent.followup(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-review"
-        },
+        source: { kind: "freecodego-review" },
         content: [{
           type: "text",
           text: prompt
@@ -58363,6 +58419,14 @@ function narrowTurnScope(turnPaths, changedPaths) {
   const changed = new Set(changedPaths);
   return turnPaths.every((path3) => changed.has(path3)) ? turnPaths : changedPaths;
 }
+function isCallbackTarget(target) {
+  if (target === void 0) return false;
+  try {
+    return new URL(target, "http://127.0.0.1").pathname === TRAE_CALLBACK_PATH;
+  } catch {
+    return false;
+  }
+}
 function completionPage(language) {
   const title = language === "zh" ? "TRAE \u6388\u6743\u5DF2\u6536\u5230" : "TRAE authorization received";
   return `<!doctype html><html><head><meta charset="utf-8"><title>${title}</title></head><body style="font-family:system-ui;margin:48px;color:#222"><h1 style="font-size:20px">${title}</h1><p>${language === "zh" ? "\u8BF7\u56DE\u5230\u5E94\u7528\u67E5\u770B\u767B\u5F55\u7ED3\u679C\u3002" : "Return to the app to see the result."}</p></body></html>`;
@@ -58370,7 +58434,7 @@ function completionPage(language) {
 async function startTraeCallbackListener(onCallback, language = "zh") {
   const server = createServer((request, response) => {
     const url = request.url === void 0 ? "/" : request.url;
-    if (!url.startsWith("/authorize")) {
+    if (!isCallbackTarget(url)) {
       response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
       response.end("not found");
       return;
@@ -58684,6 +58748,16 @@ async function sendVerifyCode(host, email) {
   if (host.account === void 0) throw backendNotConfigured();
   return host.account.sendVerifyCode(email);
 }
+async function forgotPassword(host, email) {
+  if (host.account === void 0) throw backendNotConfigured();
+  await host.account.requestPasswordResetCode(email);
+  return { sent: true };
+}
+async function resetPassword(host, input) {
+  if (host.account === void 0) throw backendNotConfigured();
+  await host.account.resetPassword(input);
+  return { reset: true };
+}
 async function login(host, input) {
   if (host.account === void 0) throw backendNotConfigured();
   const result = await host.account.login({
@@ -61248,10 +61322,7 @@ async function engineeringTeamDecision(host, sessionId, request) {
     if (goalId !== void 0) host.engineering.armApprovedPlanGoal(agent);
   }
   agent.inject(createUserMessage({
-    source: {
-      kind: "plugin",
-      plugin: "freecodego-engine-council"
-    },
+    source: { kind: "freecodego-engine-council" },
     content: [{
       type: "text",
       text: decision.state === "approved" ? goalId === void 0 ? "The user approved engineering council " + decision.id + ". You may implement the reviewed plan, then run council verification." : "The user approved engineering council " + decision.id + '. The approved plan is now goal "' + goalId + '", which the Harness continues automatically while it stays active. Work the plan to completion, then run council verification.' : "The user rejected engineering council " + decision.id + ". Do not implement this plan; revise it or start a new council."
@@ -61283,10 +61354,7 @@ async function engineeringTeamVerify(host, sessionId, request) {
   }
   await host.engineCouncil.recordVerification(agent, input.id, result);
   agent.inject(createUserMessage({
-    source: {
-      kind: "plugin",
-      plugin: "freecodego-engine-council"
-    },
+    source: { kind: "freecodego-engine-council" },
     content: [{
       type: "text",
       text: "Engineering council " + input.id + " verification is complete. Read the durable verification result and report failed, skipped, unavailable, or cancelled stages accurately."
@@ -61302,10 +61370,7 @@ async function engineeringTeamImplementation(host, sessionId, request) {
   const implementation = await host.engineCouncil.recordImplementation(agent, request.id, request.summary);
   engineeringTeamVerify(host, sessionId, { id: request.id }).catch(() => void 0);
   agent.inject(createUserMessage({
-    source: {
-      kind: "plugin",
-      plugin: "freecodego-engine-council"
-    },
+    source: { kind: "freecodego-engine-council" },
     content: [{
       type: "text",
       text: `Implementation for engineering council ${request.id} was marked complete. Executed verification (build/types/lint/tests) is starting automatically; read its durable result when reporting completion.`
@@ -61535,6 +61600,73 @@ var WorkBuddyPoolService = class {
     return results;
   }
 };
+var WEB_SEARCH_API_KEY_REF = credentialRef2("FREECODEGO_WEB_SEARCH_API_KEY");
+var WEB_SEARCH_SETTINGS_NAMESPACE = "web-search-deepseek";
+function messageOf(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function classify(section, servesBridgeRoute) {
+  if (section === void 0) return {
+    state: "none",
+    alive: true
+  };
+  if (asString(section.apiKeyEnv) !== WEB_SEARCH_API_KEY_REF) return {
+    state: "other",
+    alive: true
+  };
+  const saved = asString(section.baseURL);
+  if (saved === void 0) return {
+    state: "other",
+    alive: true
+  };
+  const routeId = bridgeRouteIdOf(saved);
+  return routeId === void 0 ? {
+    state: "durable",
+    alive: true
+  } : {
+    state: "bridge",
+    alive: servesBridgeRoute(routeId)
+  };
+}
+async function webSearchBindingStatus(deps) {
+  const status = classify(await deps.readSection(), deps.servesBridgeRoute);
+  return deps.remembered === void 0 ? status : {
+    ...status,
+    remembered: deps.remembered
+  };
+}
+async function repairWebSearchBinding(deps) {
+  let section;
+  try {
+    section = await deps.readSection();
+  } catch (error) {
+    return {
+      outcome: "failed",
+      detail: messageOf(error)
+    };
+  }
+  const status = classify(section, deps.servesBridgeRoute);
+  if (status.state === "none") return { outcome: "unavailable" };
+  if (status.state === "other") return { outcome: "not-applicable" };
+  if (status.alive) return { outcome: "live" };
+  const remembered = deps.remembered;
+  if (remembered === void 0) return { outcome: "no-memory" };
+  try {
+    const binding = await deps.bind(remembered);
+    await deps.writeCredential(binding.apiKeyEnv, binding.apiKey);
+    await deps.writeSection({
+      model: binding.model,
+      baseURL: binding.baseURL,
+      apiKeyEnv: binding.apiKeyEnv
+    });
+    return { outcome: "rebuilt" };
+  } catch (error) {
+    return {
+      outcome: "failed",
+      detail: messageOf(error)
+    };
+  }
+}
 var FREECODEGO_CLOUD_ORIGIN = "https://freecodego.com";
 async function setDefaultEngine(host, engine) {
   if (engine !== "deepseek" && engine !== "codex" && engine !== "claude") throw new Error("agent engine must be deepseek, codex, or claude");
@@ -61587,9 +61719,9 @@ async function setDefaultModel(host, model) {
   return { model: persisted };
 }
 function defaultAgentOptions(host) {
-  const configuredEngine = host.policy.get()?.defaultEngine ?? host.config.defaultEngine ?? "deepseek";
+  const configuredEngine = host.policy.get()?.defaultEngine ?? "deepseek";
   const engine = configuredEngine === "codex" || configuredEngine === "claude" ? configuredEngine : "deepseek";
-  const model = host.policy.get()?.defaultModel ?? host.config.defaultModel;
+  const model = host.policy.get()?.defaultModel;
   const normalizedModel = model?.trim();
   if (normalizedModel !== void 0 && AGNES_TEXT_MODEL_IDS.has(normalizedModel)) return {
     engine,
@@ -61799,6 +61931,26 @@ async function sessionDelete(host, sessionId) {
   host.ctx.emit("api-session/removed", id);
   return { deleted: true };
 }
+async function webSearchBind(host, input) {
+  if (input === null || typeof input !== "object") throw new Error("web search binding must be an object");
+  const provider = typeof input.provider === "string" ? input.provider.trim().toLowerCase() : "";
+  const model = typeof input.model === "string" ? input.model.trim() : "";
+  if (provider === "" || model === "") throw new Error("a provider and a model are required");
+  const route = await host.catalogs.claudeGatewayForRoute({
+    provider,
+    modelId: model
+  });
+  const base = route.baseURL.replace(/\/+$/u, "");
+  if (!/^https?:\/\//iu.test(base)) throw new Error(`Provider "${provider}" did not resolve an HTTP endpoint`);
+  return {
+    provider,
+    model: route.model ?? model,
+    baseURL: /\/v1$/u.test(base) ? base : `${base}/v1`,
+    apiKeyEnv: WEB_SEARCH_API_KEY_REF,
+    apiKey: route.apiKey,
+    durable: !/^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(?::\d+)?(?:\/|$)/iu.test(base)
+  };
+}
 async function capabilitiesSnapshot(host) {
   return host.capabilities.snapshot();
 }
@@ -62157,9 +62309,7 @@ function configuredProviderRoute(ctx, model) {
       model: model.slice(provider.length + 1)
     };
   }
-  const settings = ctx.get("settings");
-  if (typeof settings?.get !== "function") return void 0;
-  const providers = asRecord(asRecord(settings.get("llm-pi-ai")).providers);
+  const providers = asRecord(asRecord(peerSettings(ctx, MODELS_SETTINGS_ENTRY)).providers);
   for (const [provider, profile] of Object.entries(providers)) {
     const row = asRecord(profile);
     if ((Array.isArray(row.models) ? row.models : []).some((entry) => asRecord(entry).id === model || String(asRecord(entry).id ?? "").toLowerCase() === model.toLowerCase())) return {
@@ -62443,7 +62593,7 @@ var MEMORY_CASES = [
     suite: "memory",
     claim: "A shared file is preferred over a shared session, because it is the actionable link.",
     measure: () => {
-      const classify = (sharedFile, sameTurn, sameSession) => sharedFile !== void 0 ? "shared-file" : sameTurn ? "same-turn" : sameSession ? "same-session" : "none";
+      const classify2 = (sharedFile, sameTurn, sameSession) => sharedFile !== void 0 ? "shared-file" : sameTurn ? "same-turn" : sameSession ? "same-session" : "none";
       const cases = [
         [
           "shared-file",
@@ -62470,7 +62620,7 @@ var MEMORY_CASES = [
           true
         ]
       ];
-      const correct = cases.filter(([expected, file, turn, session]) => classify(file, turn, session) === expected).length;
+      const correct = cases.filter(([expected, file, turn, session]) => classify2(file, turn, session) === expected).length;
       return {
         observed: correct / cases.length,
         required: 1,
@@ -62793,28 +62943,43 @@ var WIRE_CASES = [
   {
     id: "wire.tool-results-stay-adjacent",
     suite: "wire",
-    claim: "Tool results immediately follow their assistant frame; trailing text becomes a later user turn.",
+    claim: "A tool result is its own tool-role message and follows the assistant frame that asked for it, with later text as a user turn.",
     measure: () => {
       const roles = wireMessages(serializeRequest({
         provider: "logfare",
         model: "gpt-5.6-sol",
-        messages: [createUserMessage({
-          source: { kind: "user" },
-          content: [{
-            type: "text",
-            text: "Continue the discussion."
-          }, {
-            type: "tool-result",
-            toolCallId: ToolCallId("call-1"),
+        messages: [
+          createAssistantMessage2({
+            source: {
+              provider: "logfare",
+              model: "gpt-5.6-sol"
+            },
+            content: [{
+              type: "tool-call",
+              id: ToolCallId("call-1"),
+              name: "read",
+              arguments: '{"path":"a"}'
+            }]
+          }),
+          createToolResultMessage2({
+            callId: ToolCallId("call-1"),
             content: [{
               type: "text",
               text: "ok"
+            }],
+            isError: false
+          }),
+          createUserMessage({
+            source: { kind: "user" },
+            content: [{
+              type: "text",
+              text: "Continue the discussion."
             }]
-          }]
-        })]
+          })
+        ]
       })).map((message2) => message2.role);
       return {
-        observed: roles.join(",") === "tool,user" ? 1 : 0,
+        observed: roles.join(",") === "assistant,tool,user" ? 1 : 0,
         required: 1,
         detail: `roles=${roles.join(",")}`
       };
@@ -62835,16 +63000,13 @@ var WIRE_CASES = [
       const first = wireMessages(serializeRequest({
         provider: "logfare",
         model: "gpt-5.6-sol",
-        messages: [createUserMessage({
-          source: { kind: "user" },
+        messages: [createToolResultMessage2({
+          callId: ToolCallId("call-1"),
           content: [{
-            type: "tool-result",
-            toolCallId: ToolCallId("call-1"),
-            content: [{
-              type: "image",
-              attachment
-            }]
-          }]
+            type: "image",
+            attachment
+          }],
+          isError: false
         })]
       }))[0];
       return {
@@ -65897,23 +66059,42 @@ var ADAPTER_CASES = [
     }
   }
 ];
+function routingSettings(value, onWrite = () => void 0) {
+  return {
+    describe: () => [{
+      ns: "subagent-model-selection",
+      value,
+      revision: 3
+    }],
+    update: async (_ns, patch) => {
+      onWrite(patch);
+    }
+  };
+}
+var NO_ROUTING_SETTINGS = {
+  describe: () => [],
+  update: async () => void 0
+};
 var ROUTING_CASES = [
   {
     id: "routing.sync-needs-a-settings-namespace",
     suite: "routing",
-    claim: "A composition without the subagent settings namespace syncs nothing.",
+    claim: "A composition that declares no Subagent model-selection entry syncs nothing and writes nothing.",
     measure: async () => {
+      let writes = 0;
       const result = await synchronizeSubagentModelRoutes({
-        get: () => void 0,
-        update: async () => void 0
+        ...NO_ROUTING_SETTINGS,
+        update: async () => {
+          writes += 1;
+        }
       }, {
         listProviders: () => [{ id: "p" }],
         listModels: async () => [{ id: "m" }]
       });
       return {
-        observed: result.length === 0 ? 1 : 0,
+        observed: result.length === 0 && writes === 0 ? 1 : 0,
         required: 1,
-        detail: `routes=${result.length}`
+        detail: `routes=${result.length} writes=${writes}`
       };
     }
   },
@@ -65923,15 +66104,12 @@ var ROUTING_CASES = [
     claim: "Unavailable and non-text models are excluded, and duplicates are collapsed.",
     measure: async () => {
       const written = [];
-      const ids = (await synchronizeSubagentModelRoutes({
-        get: () => ({
-          allowedModels: [],
-          enabled: void 0
-        }),
-        update: async (_ns, value) => {
-          written.push(value);
-        }
-      }, {
+      const ids = (await synchronizeSubagentModelRoutes(routingSettings({
+        allowedModels: [],
+        enabled: void 0
+      }, (patch) => {
+        written.push(patch);
+      }), {
         listProviders: () => [{ id: "p" }],
         listModels: async () => [
           {
@@ -65972,27 +66150,23 @@ var ROUTING_CASES = [
     suite: "routing",
     claim: "A provider that answered with nothing loses its stale routes; one that failed keeps them.",
     measure: async () => {
-      const previous = [
-        {
-          provider: "answered",
-          model: "stale"
-        },
-        {
-          provider: "failed",
-          model: "keep"
-        },
-        {
-          provider: "removed",
-          model: "drop"
-        }
-      ];
-      const ids = (await synchronizeSubagentModelRoutes({
-        get: () => ({
-          allowedModels: previous,
-          enabled: true
-        }),
-        update: async () => void 0
-      }, {
+      const ids = (await synchronizeSubagentModelRoutes(routingSettings({
+        allowedModels: [
+          {
+            provider: "answered",
+            model: "stale"
+          },
+          {
+            provider: "failed",
+            model: "keep"
+          },
+          {
+            provider: "removed",
+            model: "drop"
+          }
+        ],
+        enabled: true
+      }), {
         listProviders: () => [
           { id: "answered" },
           { id: "failed" },
@@ -66022,15 +66196,12 @@ var ROUTING_CASES = [
     measure: async () => {
       const writes = [];
       const run2 = async (enabled) => {
-        await synchronizeSubagentModelRoutes({
-          get: () => ({
-            allowedModels: [],
-            enabled
-          }),
-          update: async (_ns, value) => {
-            writes.push(value);
-          }
-        }, {
+        await synchronizeSubagentModelRoutes(routingSettings({
+          allowedModels: [],
+          enabled
+        }, (patch) => {
+          writes.push(patch);
+        }), {
           listProviders: () => [{ id: "p" }],
           listModels: async () => [{
             id: "m",
@@ -66056,18 +66227,15 @@ var ROUTING_CASES = [
     claim: "An unchanged catalog does not rewrite the settings document.",
     measure: async () => {
       let updates = 0;
-      await synchronizeSubagentModelRoutes({
-        get: () => ({
-          allowedModels: [{
-            provider: "p",
-            model: "m"
-          }],
-          enabled: true
-        }),
-        update: async () => {
-          updates += 1;
-        }
-      }, {
+      await synchronizeSubagentModelRoutes(routingSettings({
+        allowedModels: [{
+          provider: "p",
+          model: "m"
+        }],
+        enabled: true
+      }, () => {
+        updates += 1;
+      }), {
         listProviders: () => [{ id: "p" }],
         listModels: async () => [{
           id: "m",
@@ -67745,10 +67913,6 @@ function reportCommandPolicyDiagnostics(ctx, policy) {
   commandPolicyDiagnosticsReported = true;
   ctx.logger?.warn?.(`freecodego: the built-in command policy compiled with ${policy.diagnostics.length} diagnostic(s); rules that failed their own examples were dropped and are no longer enforced \u2014 ${describePolicyDiagnostics(policy.diagnostics)}`);
 }
-function bootstrapFreeCodeGoHarness(ctx) {
-  registerFreeCodeGoSessionEventTypes();
-  return installFreeCodeGoPluginConflictGuard(ctx);
-}
 function memoryPipelineHome(cwd) {
   const identity = path.resolve(cwd).replaceAll("\\", "/").toLowerCase();
   const segment = createHash3("sha256").update(identity).digest("hex").slice(0, 24);
@@ -67837,6 +68001,8 @@ var FreeCodeGoHarnessPlugin = (() => {
   let _headroomStatus_decorators;
   let _deferredToolsStatus_decorators;
   let _deferredToolsSetEnabled_decorators;
+  let _mediaGenerationStatus_decorators;
+  let _mediaGenerationSetEnabled_decorators;
   let _lspMountStatus_decorators;
   let _sandboxModeStatus_decorators;
   let _sandboxModeSet_decorators;
@@ -67873,6 +68039,8 @@ var FreeCodeGoHarnessPlugin = (() => {
   let _engineeringCodeGraphCancel_decorators;
   let _engineeringCodeGraphClearProject_decorators;
   let _sessionDelete_decorators;
+  let _webSearchBind_decorators;
+  let _webSearchBindingStatus_decorators;
   let _capabilitiesSnapshot_decorators;
   let _capabilitiesSetEnabled_decorators;
   let _modelCategorySet_decorators;
@@ -67916,6 +68084,8 @@ var FreeCodeGoHarnessPlugin = (() => {
   let _accountDetail_decorators;
   let _register_decorators;
   let _sendVerifyCode_decorators;
+  let _forgotPassword_decorators;
+  let _resetPassword_decorators;
   let _login_decorators;
   let _rememberedPassword_decorators;
   let _oauthLogin_decorators;
@@ -68059,6 +68229,8 @@ var FreeCodeGoHarnessPlugin = (() => {
       _headroomStatus_decorators = [Remote("headroomStatus")];
       _deferredToolsStatus_decorators = [Remote("deferredToolsStatus")];
       _deferredToolsSetEnabled_decorators = [Remote("deferredToolsSetEnabled")];
+      _mediaGenerationStatus_decorators = [Remote("mediaGenerationStatus")];
+      _mediaGenerationSetEnabled_decorators = [Remote("mediaGenerationSetEnabled")];
       _lspMountStatus_decorators = [Remote("lspMountStatus")];
       _sandboxModeStatus_decorators = [Remote("sandboxModeStatus")];
       _sandboxModeSet_decorators = [Remote("sandboxModeSet")];
@@ -68095,6 +68267,8 @@ var FreeCodeGoHarnessPlugin = (() => {
       _engineeringCodeGraphCancel_decorators = [Remote("engineeringCodeGraphCancel")];
       _engineeringCodeGraphClearProject_decorators = [Remote("engineeringCodeGraphClearProject")];
       _sessionDelete_decorators = [Remote("sessionDelete")];
+      _webSearchBind_decorators = [Remote("webSearchBind")];
+      _webSearchBindingStatus_decorators = [Remote("webSearchBindingStatus")];
       _capabilitiesSnapshot_decorators = [Remote("capabilities")];
       _capabilitiesSetEnabled_decorators = [Remote("capabilitiesSetEnabled")];
       _modelCategorySet_decorators = [Remote("modelCategorySet")];
@@ -68138,6 +68312,8 @@ var FreeCodeGoHarnessPlugin = (() => {
       _accountDetail_decorators = [Remote("accountDetail")];
       _register_decorators = [Remote("accountRegister")];
       _sendVerifyCode_decorators = [Remote("accountSendVerifyCode")];
+      _forgotPassword_decorators = [Remote("accountForgotPassword")];
+      _resetPassword_decorators = [Remote("accountResetPassword")];
       _login_decorators = [Remote("accountLogin")];
       _rememberedPassword_decorators = [Remote("accountRememberedPassword")];
       _oauthLogin_decorators = [Remote("accountOAuthLogin")];
@@ -68788,6 +68964,28 @@ var FreeCodeGoHarnessPlugin = (() => {
         },
         metadata: _metadata
       }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _mediaGenerationStatus_decorators, {
+        kind: "method",
+        name: "mediaGenerationStatus",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "mediaGenerationStatus" in obj,
+          get: (obj) => obj.mediaGenerationStatus
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _mediaGenerationSetEnabled_decorators, {
+        kind: "method",
+        name: "mediaGenerationSetEnabled",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "mediaGenerationSetEnabled" in obj,
+          get: (obj) => obj.mediaGenerationSetEnabled
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
       __esDecorate(this, null, _lspMountStatus_decorators, {
         kind: "method",
         name: "lspMountStatus",
@@ -69184,6 +69382,28 @@ var FreeCodeGoHarnessPlugin = (() => {
         },
         metadata: _metadata
       }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _webSearchBind_decorators, {
+        kind: "method",
+        name: "webSearchBind",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "webSearchBind" in obj,
+          get: (obj) => obj.webSearchBind
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _webSearchBindingStatus_decorators, {
+        kind: "method",
+        name: "webSearchBindingStatus",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "webSearchBindingStatus" in obj,
+          get: (obj) => obj.webSearchBindingStatus
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
       __esDecorate(this, null, _capabilitiesSnapshot_decorators, {
         kind: "method",
         name: "capabilitiesSnapshot",
@@ -69657,6 +69877,28 @@ var FreeCodeGoHarnessPlugin = (() => {
         },
         metadata: _metadata
       }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _forgotPassword_decorators, {
+        kind: "method",
+        name: "forgotPassword",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "forgotPassword" in obj,
+          get: (obj) => obj.forgotPassword
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
+      __esDecorate(this, null, _resetPassword_decorators, {
+        kind: "method",
+        name: "resetPassword",
+        static: false,
+        private: false,
+        access: {
+          has: (obj) => "resetPassword" in obj,
+          get: (obj) => obj.resetPassword
+        },
+        metadata: _metadata
+      }, null, _instanceExtraInitializers);
       __esDecorate(this, null, _login_decorators, {
         kind: "method",
         name: "login",
@@ -70654,40 +70896,336 @@ var FreeCodeGoHarnessPlugin = (() => {
       "sessionPersistence"
     ];
     /**
-    * Runtime schema for {@link Config}, declared inline so the generated config
-    * catalog can walk it: it is the only statically resolvable form a
-    * plugin-class schema may take. Schemastery has no first-class `.optional()`;
-    * the public `Config` type already types these fields as optional, so the
-    * schema carries the same contract at runtime (absent input passes through)
-    * without fighting the inferred builder types.
+    * Runtime schema for {@link Config}.
+    *
+    * One flat `z.object({...})` literal, and that shape is load-bearing: the generated
+    * config catalog walks this expression *statically* — it resolves a local `const` or
+    * a workspace-package import and refuses anything else — and the readers gate in
+    * `scripts/freecodego-config-readers.spec.ts` parses the same literal to check that
+    * every field it declares is read somewhere. The document therefore cannot be
+    * assembled from the group schemas' own modules, even though those modules own the
+    * *types*: an `intersect` of relative imports is invisible to both walks, and a
+    * schema nothing walks is a schema nothing checks.
+    *
+    * Which fields are which
+    * ----------------------
+    * The first block is deployment input: ordinary fields, no `volatile()`, and a change
+    * to one of them is a composition change that remounts the plugin. Every field below
+    * it is a setting — `volatile()` is what the loader reads as "commit this into the
+    * running references instead of remounting", and it is also what puts the field in
+    * the settings form. {@link FreeCodeGoPolicy} is the only reader of any of them; the
+    * section comments name the module that owns each group's type.
     */
     static Config = z2.object({
       gateway: z2.object({ baseUrl: z2.string().default(FREECODEGO_CLOUD_ORIGIN) }),
-      defaultModel: z2.string(),
-      defaultEngine: z2.union([
-        z2.const("deepseek"),
-        z2.const("codex"),
-        z2.const("claude")
-      ]).default("deepseek"),
       codexRuntimeDirectory: z2.string().default(""),
       codexRuntimeSourceDirectory: z2.string().default(""),
       claudeRuntimeDirectory: z2.string().default(""),
       autoSubagentModelSelection: z2.boolean().default(true),
-      autoAdvisorEnabled: z2.boolean().default(true),
       updatePackageName: z2.string().default(""),
       updateReleaseRepository: z2.string().default(""),
-      updateReleaseTokenEnv: z2.string().default("")
+      updateReleaseTokenEnv: z2.string().default(""),
+      mcpEnabled: z2.boolean().default(true).volatile(),
+      skillEnabled: z2.boolean().default(true).volatile(),
+      voiceInputEnabled: z2.boolean().default(true).volatile(),
+      sessionDeleteEnabled: z2.boolean().default(true).volatile(),
+      modelCategories: z2.dict(z2.union([
+        z2.const("text"),
+        z2.const("image"),
+        z2.const("video"),
+        z2.const("audio")
+      ])).default({}).volatile(),
+      webSearchBindingProvider: z2.string().default("").volatile(),
+      webSearchBindingModel: z2.string().default("").volatile(),
+      mcpServers: z2.array(z2.object({
+        id: z2.string().min(1).max(80),
+        enabled: z2.boolean().default(true),
+        transport: z2.union([z2.const("stdio"), z2.const("streamable-http")]),
+        serverName: z2.string().pattern(SERVER_NAME$1),
+        command: z2.string().default(""),
+        args: z2.array(z2.string().max(4096)).default([]),
+        env: z2.dict(z2.string()).default({}),
+        cwd: z2.string().default(""),
+        url: z2.string().default(""),
+        headers: z2.dict(z2.string()).default({})
+      })).default([]).volatile(),
+      skillRoots: z2.array(z2.object({
+        id: z2.string().min(1).max(80),
+        enabled: z2.boolean().default(true),
+        path: z2.string().min(1).max(4096)
+      })).default([]).volatile(),
+      skillInvocationOverrides: z2.dict(z2.boolean()).default({}).volatile(),
+      preferredSkillPlacement: z2.union([z2.object({
+        agent: z2.union([z2.const("harness"), z2.const("agents")]),
+        scope: z2.union([z2.const("project"), z2.const("user")])
+      }), z2.const(null)]).volatile(),
+      envReadGuardEnabled: z2.boolean().default(true).volatile(),
+      doomLoopGuardEnabled: z2.boolean().default(true).volatile(),
+      lspEnabled: z2.boolean().default(true).volatile(),
+      commandPolicyEnabled: z2.boolean().default(true).volatile(),
+      planModeEnabled: z2.boolean().default(true).volatile(),
+      contextBudgetEnabled: z2.boolean().default(true).volatile(),
+      cacheColdClearEnabled: z2.boolean().default(true).volatile(),
+      cacheBreakAttributionEnabled: z2.boolean().default(true).volatile(),
+      assistantLoopGuardEnabled: z2.boolean().default(true).volatile(),
+      spillRecallEnabled: z2.boolean().default(true).volatile(),
+      compactionFidelityEnabled: z2.boolean().default(true).volatile(),
+      promptCompositionEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * Master switch for the whole gate.
+      *
+      * Off means every project-scoped surface is treated as trusted — the
+      * pre-gate behaviour, kept reachable so a deployment that already controls
+      * which repositories it opens is not forced to grant each one. It is
+      * deliberately not the default: the safe state must not be the opt-in one.
+      */
+      folderTrustEnabled: z2.boolean().default(true).volatile(),
+      pluginConflictProtectionEnabled: z2.boolean().default(true).volatile(),
+      pluginConflictRecords: z2.array(z2.object({
+        id: z2.string().min(1).max(256),
+        detectedAt: z2.number(),
+        resource: z2.union([
+          z2.const("tool"),
+          z2.const("command"),
+          z2.const("settings"),
+          z2.const("route"),
+          z2.const("provider"),
+          z2.const("slot")
+        ]),
+        resourceName: z2.string().min(1).max(256),
+        disabledEntryId: z2.string().min(1).max(512),
+        disabledModuleName: z2.string().min(1).max(512),
+        keptEntryId: z2.string().min(1).max(512),
+        keptModuleName: z2.string().min(1).max(512),
+        yieldedToOfficial: z2.boolean()
+      })).default([]).volatile(),
+      pluginUpdateChecksEnabled: z2.boolean().default(true).volatile(),
+      engineeringEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * The rest of the bundled engineering library is opt-in: 23 audited Skills
+      * (the remainder of the authored set plus the vendored `mattpocock/skills`
+      * entries that are not in the default-on starter root) stay unmounted until
+      * the user turns this on.
+      */
+      engineeringSkillsEnabled: z2.boolean().default(false).volatile(),
+      /**
+      * The starter set is on by default: ten Skills whose value does not depend on
+      * adopting a whole methodology. Four are disciplines the model applies on its
+      * own (evidence before completion claims, navigation before broad reading,
+      * planning multi-file work, root-cause debugging); the rest are `/name`
+      * entries a user reaches for on demand and that cost nothing until typed
+      * (a prompt-technique reference, the grilling interview and its primitive, a
+      * re-pitch escape hatch, a handoff document, and a questionnaire for
+      * decisions the agent cannot settle). They live in their own asset root so
+      * "all engineering Skills" stays the union of the roots — no skill file is
+      * duplicated, and no audit can disagree with a mount.
+      */
+      engineeringStarterSkillsEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * The vendored superpowers workflow pack is a separate opt-in: it is the
+      * auto-triggering, plan-then-dispatch methodology, so it must be a deliberate
+      * choice rather than a side effect of enabling the engineering disciplines.
+      */
+      engineeringSuperpowersSkillsEnabled: z2.boolean().default(false).volatile(),
+      /**
+      * Injects a bounded capability map of the mounted Skills at session start.
+      * A default-off Skill library is invisible otherwise: the model never lists
+      * it, and a user who turned a pack on has no way to see what arrived.
+      */
+      engineeringSkillMapEnabled: z2.boolean().default(true).volatile(),
+      /** Enables bounded project-declared verification after an approved council plan. */
+      engineeringQualityEnabled: z2.boolean().default(true).volatile(),
+      engineeringMemoryEnabled: z2.boolean().default(true).volatile(),
+      engineeringCouncilEnabled: z2.boolean().default(true).volatile(),
+      engineeringCouncilDeepseekEnabled: z2.boolean().default(true).volatile(),
+      engineeringCouncilCodexEnabled: z2.boolean().default(true).volatile(),
+      engineeringCouncilClaudeEnabled: z2.boolean().default(true).volatile(),
+      engineeringMemoryContextTokenBudget: z2.number().step(1).min(0).max(4e3).default(1200).volatile(),
+      /**
+      * Default off, deliberately: the lexical rerank is free, deterministic, and
+      * already ranks by term coverage. Flipping this on spends one small model
+      * request per memory search to catch the memories that share no wording with
+      * the query — worth it for a user who searches by concept, wasted for one who
+      * greps for identifiers.
+      */
+      engineeringMemorySelectorEnabled: z2.boolean().default(false).volatile(),
+      /**
+      * Default off, deliberately: this lets a model approve a pending action without
+      * asking the user. Off means every approval keeps prompting. On means an action
+      * whose arguments the reviewer can actually read may be cleared automatically —
+      * anything it refuses, cannot read, or declines to judge still goes to the user.
+      */
+      engineeringActionReviewEnabled: z2.boolean().default(false).volatile(),
+      engineeringCodeGraphEnabled: z2.boolean().default(true).volatile(),
+      engineeringCodeGraphAutoUpdate: z2.boolean().default(true).volatile(),
+      engineeringGraphEngine: z2.union([
+        z2.const("auto"),
+        z2.const("graphify"),
+        z2.const("codegraph")
+      ]).default("auto").volatile(),
+      engineeringCouncilMaxRounds: z2.number().step(1).min(1).max(3).default(2).volatile(),
+      engineeringCouncilTimeoutMs: z2.number().step(1).min(1e4).max(3e5).default(12e4).volatile(),
+      engineeringCouncilQuorum: z2.number().step(1).min(1).max(3).default(2).volatile(),
+      engineeringCouncilAutoRun: z2.boolean().default(false).volatile(),
+      /**
+      * The three phases of the autonomous engineering loop. Each is a separate
+      * switch because they carry different risk: creating a goal only commits the
+      * user to finishing, while enabling the driver lets work continue with no
+      * human turn in between.
+      *
+      * - `engineeringLoopCapturePlan` — when the user approves a council decision,
+      *   persist the approved plan as a durable Harness goal.
+      * - `engineeringLoopVerifyOnComplete` — when the active goal's driver reports
+      *   it finished, run the declared verification stages and record the result.
+      * - `engineeringLoopAutoContinue` — let the Harness goal-round driver start
+      *   the next round without a user turn. Off by default: a goal that continues
+      *   unattended is the one behaviour a user must opt into explicitly.
+      */
+      engineeringLoopCapturePlan: z2.boolean().default(true).volatile(),
+      engineeringLoopVerifyOnComplete: z2.boolean().default(true).volatile(),
+      engineeringLoopAutoContinue: z2.boolean().default(false).volatile(),
+      /** Round cap for a captured plan goal; bounds unattended continuation. */
+      engineeringLoopMaxGoalRounds: z2.number().step(1).min(1).max(256).default(24).volatile(),
+      engineeringCouncilMaxTokens: z2.number().step(100).min(1200).max(2e4).default(3600).volatile(),
+      engineeringCouncilMaxConcurrent: z2.number().step(1).min(1).max(8).default(2).volatile(),
+      engineeringCouncilDecisionTtlMs: z2.number().step(6e4).min(6e4).max(10080 * 6e4).default(30 * 6e4).volatile(),
+      /** Master switch for declarative failure recovery. */
+      hookChainsEnabled: z2.boolean().default(true).volatile(),
+      hookChainsMaxDepth: z2.number().step(1).min(0).max(10).default(2).volatile(),
+      hookChainsCooldownMs: z2.number().step(1e3).min(0).max(1440 * 60 * 1e3).default(3e4).volatile(),
+      /** Master switch for the calendar planner. */
+      scheduledTasksEnabled: z2.boolean().default(true).volatile(),
+      defaultModel: z2.string().default("").volatile(),
+      defaultEngine: z2.union([
+        z2.const("deepseek"),
+        z2.const("codex"),
+        z2.const("claude")
+      ]).default("deepseek").volatile(),
+      mediaDefaults: z2.object({
+        image: z2.string().default(""),
+        video: z2.string().default(""),
+        audio: z2.string().default("")
+      }).default({
+        image: "",
+        video: "",
+        audio: ""
+      }).volatile(),
+      /**
+      * Master switch for the image and video generation tools.
+      *
+      * On by default: the tools spend nothing until a route is called, and they are the
+      * only way the capability is reachable — a feature that has to be found before it
+      * does anything is why the media surface looked absent. It governs the generic
+      * `freecodego_generate_image` / `_video` pair and the legacy `agnes_*` aliases with
+      * them; `freecodego_generate_audio` and `freecodego_transcribe_audio` are
+      * deliberately outside it, because one writes into the active workspace and the
+      * other reads out of it.
+      */
+      mediaGenerationEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * Sandbox profile deny globs, enforced in the plugin policy layer.
+      *
+      * Empty by default: a deny list is containment the user asked for, and
+      * inventing one would refuse paths nobody named.
+      */
+      sandboxDenyPatterns: z2.array(z2.string()).default([]).volatile(),
+      rehydrationEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * Conversation-arc rehydration (goals + decisions folded from the
+      * session's own goal events, promoted memories, and announced
+      * choices). Off by default: it changes what the post-compaction
+      * message contains, and a user must opt into new prompt surface —
+      * the mechanical fold is bounded, but its wording is still model-
+      * visible behavior.
+      */
+      rehydrationArcEnabled: z2.boolean().default(false).volatile(),
+      advisorEnabled: z2.boolean().default(true).volatile(),
+      advisorMode: z2.union([
+        z2.const("async"),
+        z2.const("catchup"),
+        z2.const("blocker-only")
+      ]).default("async").volatile(),
+      advisorProvider: z2.string().default("opencode").volatile(),
+      advisorModel: z2.string().default("auto").volatile(),
+      advisorAllowAgentControl: z2.boolean().default(true).volatile(),
+      advisorInterruptCooldownTurns: z2.number().step(1).min(0).max(20).default(3).volatile(),
+      advisorMemoryDraftsEnabled: z2.boolean().default(true).volatile(),
+      reviewMode: z2.union([
+        z2.const("off"),
+        z2.const("record"),
+        z2.const("gate")
+      ]).default("off").volatile(),
+      reviewThreshold: z2.union([
+        z2.const("critical"),
+        z2.const("high"),
+        z2.const("medium"),
+        z2.const("low")
+      ]).default("high").volatile(),
+      reviewCooldownTurns: z2.number().step(1).min(0).max(20).default(3).volatile(),
+      reviewDeep: z2.boolean().default(false).volatile(),
+      reviewEscalation: z2.boolean().default(false).volatile(),
+      headroomEnabled: z2.boolean().default(true).volatile(),
+      headroomThresholdChars: z2.number().step(1).min(256).max(1e6).default(1200).volatile(),
+      headroomMinSavingsRatio: z2.number().min(0.05).max(0.95).default(0.85).volatile(),
+      headroomDedupEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * Tools to protect *in addition* to the built-in list.
+      *
+      * Additional, not instead of: the built-in set
+      * (`DEFAULT_EXCLUDE_TOOLS`) is a safety guarantee — those outputs are
+      * what the model byte-patches against — and this field defaults to an
+      * empty array, so a reading where it replaced the built-ins would make
+      * the default install protect nothing.
+      */
+      headroomExcludeTools: z2.array(z2.string()).default([]).volatile(),
+      headroomFoldReads: z2.boolean().default(false).volatile(),
+      /**
+      * Skeletonize large source-file reads: retained lines stay byte-exact
+      * while whole body runs collapse to a marker. On by default because
+      * `read` is the largest single source of re-sent context; the original
+      * is always retrievable through `headroom_retrieve`.
+      */
+      headroomCodeSkeletonEnabled: z2.boolean().default(true).volatile(),
+      /**
+      * Reversible-render competition policy. `reversible` (default) delivers a
+      * render that clears `FOLD_DECISIVE_RATIO` on sight — a Stage 2 fold, or a
+      * mixed-content splice; `max` demotes every one of them to a candidate so
+      * the compressor written for the payload's shape is always asked first.
+      * The two settings are two products, not a fine-tuning — see
+      * `HeadroomRuntime.foldPolicy` for the measured difference on the shapes
+      * where they disagree.
+      */
+      headroomFoldPolicy: z2.union([z2.const("reversible"), z2.const("max")]).default("reversible").volatile(),
+      /**
+      * Keep task-specific tool schemas out of the request until the model
+      * asks for them with `tool_search`. Measured saving is ~3.2k tokens per
+      * request on this plugin's own 37 tools alone.
+      */
+      deferredToolSchemasEnabled: z2.boolean().default(true).volatile(),
+      /** Explicit deferral list; when empty the plugin-owned prefix rule applies. */
+      deferredToolNames: z2.array(z2.string()).default([]).volatile(),
+      headroomOutputShaper: z2.boolean().default(false).volatile(),
+      headroomVerbosityLevel: z2.number().step(1).min(0).max(4).default(0).volatile(),
+      /**
+      * Memory consolidation rollout (`memory/rollout.ts`).
+      *
+      * A stage rather than a switch because consolidating runs a model over
+      * the session's successful turns: `record_only` captures without
+      * consolidating, `shadow` consolidates without committing, and only
+      * `active` writes. Off by default, and off is where an unrecognised
+      * value lands too — see `resolveMemoryRollout`, which fails closed
+      * rather than falling back to the legacy search path.
+      */
+      memoryRollout: z2.union([
+        z2.const("off"),
+        z2.const("record_only"),
+        z2.const("shadow"),
+        z2.const("active")
+      ]).default("off").volatile()
     });
     account;
     api;
     credentials;
-    /**
-    * The registered settings namespace. Nothing outside this class reads it.
-    *
-    * Every behaviour read goes through {@link policy}, so exactly one place
-    * answers "what is configured".
-    */
-    engineSettings;
     /** The one accessor behaviour reads go through (see `policy.ts`). */
     policy;
     capabilities;
@@ -70935,7 +71473,11 @@ var FreeCodeGoHarnessPlugin = (() => {
       this.config = config;
       reportCommandPolicyDiagnostics(ctx, this.commandPolicy);
       ensureDesktopDshShim();
-      this.pendingWrites.run(() => ensureFreeCodeGoAgentPreset());
+      ctx.effect(() => {
+        const presets = installFreeCodeGoAgentPresets(ctx);
+        this.pendingWrites.run(() => presets.done);
+        return presets.release;
+      }, "freecodego: agent presets");
       ctx.effect(() => {
         const known = KNOWN_SESSION_EVENT_TYPES;
         const added = freeCodeGoSessionEventTypes.filter((type) => !known.has(type));
@@ -70992,138 +71534,15 @@ var FreeCodeGoHarnessPlugin = (() => {
       const claudeStatus = this.claudeRuntime.status();
       setEngineAvailability(this.agentEngines, "claude", claudeStatus.installed ? "available" : "unavailable");
       const settings = ctx.get("settings");
-      if (settings !== void 0) this.engineSettings = settings.register("freecodego-harness", z2.intersect([
-        z2.object({
-          defaultModel: z2.string().default(config.defaultModel ?? ""),
-          defaultEngine: z2.string().default(config.defaultEngine ?? "deepseek"),
-          mediaDefaults: z2.object({
-            image: z2.string().default(""),
-            video: z2.string().default(""),
-            audio: z2.string().default("")
-          }).default({
-            image: "",
-            video: "",
-            audio: ""
-          })
-        }),
-        FreeCodeGoCapabilitySettingsSchema,
-        FreeCodeGoPluginConflictSettingsSchema,
-        FreeCodeGoPluginUpdateSettingsSchema,
-        FreeCodeGoEngineeringSettingsSchema,
-        FreeCodeGoAutomationSettingsSchema,
-        FreeCodeGoGuardSettingsSchema,
-        FreeCodeGoTrustSettingsSchema,
-        z2.object({
-          /**
-          * Sandbox profile deny globs, enforced in the plugin policy layer.
-          *
-          * Empty by default: a deny list is containment the user asked for, and
-          * inventing one would refuse paths nobody named.
-          */
-          sandboxDenyPatterns: z2.array(z2.string()).default([])
-        }),
-        z2.object({
-          rehydrationEnabled: z2.boolean().default(true),
-          /**
-          * Conversation-arc rehydration (goals + decisions folded from the
-          * session's own goal events, promoted memories, and announced
-          * choices). Off by default: it changes what the post-compaction
-          * message contains, and a user must opt into new prompt surface —
-          * the mechanical fold is bounded, but its wording is still model-
-          * visible behavior.
-          */
-          rehydrationArcEnabled: z2.boolean().default(false)
-        }),
-        z2.object({
-          advisorEnabled: z2.boolean().default(config.autoAdvisorEnabled !== false),
-          advisorMode: z2.union([
-            z2.const("async"),
-            z2.const("catchup"),
-            z2.const("blocker-only")
-          ]).default("async"),
-          advisorProvider: z2.string().default("opencode"),
-          advisorModel: z2.string().default("auto"),
-          advisorAllowAgentControl: z2.boolean().default(true),
-          advisorInterruptCooldownTurns: z2.number().step(1).min(0).max(20).default(3),
-          advisorMemoryDraftsEnabled: z2.boolean().default(true),
-          reviewMode: z2.union([
-            z2.const("off"),
-            z2.const("record"),
-            z2.const("gate")
-          ]).default("off"),
-          reviewThreshold: z2.union([
-            z2.const("critical"),
-            z2.const("high"),
-            z2.const("medium"),
-            z2.const("low")
-          ]).default("high"),
-          reviewCooldownTurns: z2.number().step(1).min(0).max(20).default(3),
-          reviewDeep: z2.boolean().default(false),
-          reviewEscalation: z2.boolean().default(false),
-          headroomEnabled: z2.boolean().default(true),
-          headroomThresholdChars: z2.number().step(1).min(256).max(1e6).default(1200),
-          headroomMinSavingsRatio: z2.number().min(0.05).max(0.95).default(0.85),
-          headroomDedupEnabled: z2.boolean().default(true),
-          /**
-          * Tools to protect *in addition* to the built-in list.
-          *
-          * Additional, not instead of: the built-in set
-          * (`DEFAULT_EXCLUDE_TOOLS`) is a safety guarantee — those outputs are
-          * what the model byte-patches against — and this field defaults to an
-          * empty array, so a reading where it replaced the built-ins would make
-          * the default install protect nothing.
-          */
-          headroomExcludeTools: z2.array(z2.string()).default([]),
-          headroomFoldReads: z2.boolean().default(false),
-          /**
-          * Skeletonize large source-file reads: retained lines stay byte-exact
-          * while whole body runs collapse to a marker. On by default because
-          * `read` is the largest single source of re-sent context; the original
-          * is always retrievable through `headroom_retrieve`.
-          */
-          headroomCodeSkeletonEnabled: z2.boolean().default(true),
-          /**
-          * Reversible-render competition policy. `reversible` (default) delivers a
-          * render that clears `FOLD_DECISIVE_RATIO` on sight — a Stage 2 fold, or a
-          * mixed-content splice; `max` demotes every one of them to a candidate so
-          * the compressor written for the payload's shape is always asked first.
-          * The two settings are two products, not a fine-tuning — see
-          * `HeadroomRuntime.foldPolicy` for the measured difference on the shapes
-          * where they disagree.
-          */
-          headroomFoldPolicy: z2.union([z2.const("reversible"), z2.const("max")]).default("reversible"),
-          /**
-          * Keep task-specific tool schemas out of the request until the model
-          * asks for them with `tool_search`. Measured saving is ~3.2k tokens per
-          * request on this plugin's own 37 tools alone.
-          */
-          deferredToolSchemasEnabled: z2.boolean().default(true),
-          /** Explicit deferral list; when empty the plugin-owned prefix rule applies. */
-          deferredToolNames: z2.array(z2.string()).default([]),
-          headroomOutputShaper: z2.boolean().default(false),
-          headroomVerbosityLevel: z2.number().step(1).min(0).max(4).default(0)
-        }),
-        z2.object({
-          /**
-          * Memory consolidation rollout (`memory/rollout.ts`).
-          *
-          * A stage rather than a switch because consolidating runs a model over
-          * the session's successful turns: `record_only` captures without
-          * consolidating, `shadow` consolidates without committing, and only
-          * `active` writes. Off by default, and off is where an unrecognised
-          * value lands too — see `resolveMemoryRollout`, which fails closed
-          * rather than falling back to the legacy search path.
-          */
-          memoryRollout: z2.union([
-            z2.const("off"),
-            z2.const("record_only"),
-            z2.const("shadow"),
-            z2.const("active")
-          ]).default("off")
-        })
-      ]), { applies: "live" });
-      else this.engineSettings = void 0;
-      this.policy = new FreeCodeGoPolicy(this.engineSettings);
+      const settingsWriter = settings === void 0 ? void 0 : { update: async (patch) => {
+        const entry = this.ctx.fiber.entry;
+        if (entry === void 0) return;
+        await settings.update(entry.options.id, patch);
+      } };
+      this.ctx.inject(["settings"], (child) => {
+        child.effect(() => child.settings.configure({ auto: false }, this.ctx.fiber));
+      });
+      this.policy = new FreeCodeGoPolicy(this.config, settingsWriter);
       this.capabilities = new FreeCodeGoCapabilityRegistry(ctx, this.policy, (directory) => this.projectScopeTrust(directory), async () => {
         const tier = await this.projectTierFor(process.cwd()).catch(() => void 0);
         return {
@@ -71435,10 +71854,7 @@ var FreeCodeGoHarnessPlugin = (() => {
           const failed = result.stages.filter((stage) => stage.state === "fail" || stage.state === "unavailable");
           if (failed.length === 0) return;
           agent.inject(createUserMessage({
-            source: {
-              kind: "plugin",
-              plugin: "freecodego-engineering-loop"
-            },
+            source: { kind: "freecodego-engineering-loop" },
             content: [{
               type: "text",
               text: `Engineering goal "${goalId}" ended in phase "${phase}", but verification did not pass: ${failed.map((stage) => `${stage.id}=${stage.state}`).join(", ")}. Resolve these before treating the plan as done.`
@@ -71450,10 +71866,7 @@ var FreeCodeGoHarnessPlugin = (() => {
           if (loop.phase === "blocked") {
             const budget = loop.roundsStarted === void 0 || loop.maxGoalRounds === void 0 ? "" : ` after ${loop.roundsStarted}/${loop.maxGoalRounds} goal rounds`;
             agent.inject(createUserMessage({
-              source: {
-                kind: "plugin",
-                plugin: "freecodego-engineering-loop"
-              },
+              source: { kind: "freecodego-engineering-loop" },
               content: [{
                 type: "text",
                 text: `Engineering goal "${goalId}" stopped unattended${budget}: ${loop.blockedMessage ?? loop.blockedCode ?? "the round driver blocked it"}. Nothing continues until that is resolved; use \u5DE5\u7A0B\u589E\u5F3A \u2192 \u65E0\u4EBA\u503C\u5B88\u5DE5\u7A0B\u56DE\u8DEF \u2192 \u7EE7\u7EED to resume it.`
@@ -71565,9 +71978,13 @@ var FreeCodeGoHarnessPlugin = (() => {
       this.catalogs.registerNvidiaAdapter();
       this.catalogs.registerKiloAdapter();
       this.catalogs.prewarmProviderCatalogs();
+      this.repairWebSearchBinding();
       this.catalogs.refreshLogfareHealthInBackground();
-      this.registerAgnesTools();
-      this.registerMediaTools();
+      this.syncMediaGenerationTools();
+      ctx.effect(() => this.registerAudioTools(), "freecodego: media audio tools");
+      ctx.effect(() => () => {
+        this.disposeMediaGenerationTools();
+      }, "freecodego: media generation tools");
       ctx.effect(() => async () => {
         await Promise.all([this.pendingWrites.drain(), this.catalogs.pendingWrites.drain()]);
       }, "freecodego: background preset and catalog writes");
@@ -71612,10 +72029,7 @@ var FreeCodeGoHarnessPlugin = (() => {
           const agent = agents.get(agentId);
           if (typeof agent?.inject !== "function") return;
           agent.inject(createUserMessage({
-            source: {
-              kind: "plugin",
-              plugin: "freecodego-verify-on-stop"
-            },
+            source: { kind: "freecodego-verify-on-stop" },
             content: [{
               type: "text",
               text: `<verify-on-stop>
@@ -71701,10 +72115,7 @@ ${text2}
           const agent = agents.get(agentId);
           if (typeof agent?.inject !== "function") return false;
           agent.inject(createUserMessage({
-            source: {
-              kind: "plugin",
-              plugin: "freecodego-review"
-            },
+            source: { kind: "freecodego-review" },
             content: [{
               type: "text",
               text: `<stop-time-review>
@@ -72225,6 +72636,32 @@ ${text2}
       await settings.update({ deferredToolSchemasEnabled: enabled });
       return this.deferredTools.status();
     }
+    /**
+    * Read the image/video generation switch and the tool names it governs.
+    *
+    * Two name lists, because "what this switch owns" and "what is mounted right now"
+    * are different facts: the first comes from the registration modules' single
+    * declarations, the second from the registrations themselves. Reported together so a
+    * panel can say which tools a profile actually has without restating either list.
+    * @returns the media Generation Status.
+    */
+    mediaGenerationStatus() {
+      return {
+        enabled: this.policy.get()?.mediaGenerationEnabled !== false,
+        gated: [...Object.values(MEDIA_GENERATION_TOOL_NAMES), ...Object.values(AGNES_MEDIA_TOOL_NAMES)],
+        registered: this.mediaGenerationTools?.names ?? []
+      };
+    }
+    /**
+    * Mount or unmount the image and video generation tools.
+    * @param enabled - whether the capability is switched on.
+    * @returns the media Generation Status.
+    */
+    async mediaGenerationSetEnabled(enabled) {
+      await this.policy.update({ mediaGenerationEnabled: enabled });
+      this.syncMediaGenerationTools();
+      return this.mediaGenerationStatus();
+    }
     /** Probe-and-mount status for the optional LSP stack (fail-soft).
     * @returns the probe-and-mount state of the optional LSP stack.
     */
@@ -73496,10 +73933,7 @@ ${detail.body}`
           const outcome = this.personaRuns.complete(childId, produced);
           if (outcome?.message === void 0) return;
           outcome.parent?.inject?.(createUserMessage({
-            source: {
-              kind: "plugin",
-              plugin: "freecodego-persona"
-            },
+            source: { kind: "freecodego-persona" },
             content: [{
               type: "text",
               text: `[freecodego] ${outcome.message}`
@@ -73746,10 +74180,7 @@ ${detail.body}`
           })).agent;
           if (child?.followup === void 0) throw new Error("the child agent was created but cannot be sent its brief; it was not given one");
           child.followup(createUserMessage({
-            source: {
-              kind: "plugin",
-              plugin: "freecodego-persona"
-            },
+            source: { kind: "freecodego-persona" },
             content: [{
               type: "text",
               text: input.session.brief
@@ -74333,10 +74764,7 @@ ${detail.body}`
       if (!plan.changed) return;
       if (typeof agent?.inject !== "function") return;
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-context-budget"
-        },
+        source: { kind: "freecodego-context-budget" },
         content: [{
           type: "text",
           text: `<context-budget>
@@ -74373,10 +74801,7 @@ ${plan.text}
       if (fragments.length === 0) return;
       if (typeof agent.inject !== "function") return;
       agent.inject(createUserMessage({
-        source: {
-          kind: "plugin",
-          plugin: "freecodego-plan-mode"
-        },
+        source: { kind: "freecodego-plan-mode" },
         content: [{
           type: "text",
           text: renderFragments(fragments)
@@ -74682,6 +75107,19 @@ ${plan.text}
     async sessionDelete(sessionId) {
       return sessionDelete(this.engineRemotesHost, sessionId);
     }
+    /** Resolve one of this plugin's models as the DeepSeek web-search provider.
+    * @param input - the provider and the model the user picked.
+    * @returns the endpoint, model, and credential the search page must use.
+    */
+    async webSearchBind(input) {
+      return webSearchBind(this.engineRemotesHost, input);
+    }
+    /** Report whether the saved web-search binding is this plugin's, and whether it still answers.
+    * @returns the state the search page renders from.
+    */
+    async webSearchBindingStatus() {
+      return webSearchBindingStatus(this.webSearchBindingReads());
+    }
     /** Return the current cross-engine MCP and Skill capability inventory.
     * @returns the capability snapshot the Host reports.
     */
@@ -75135,6 +75573,22 @@ ${plan.text}
       return sendVerifyCode(this.accountRemotesHost, email);
     }
     /**
+    * Mail the password-reset code for an existing account.
+    * @param email - the address the reset code is sent to.
+    * @returns whether the gateway accepted the request.
+    */
+    async forgotPassword(email) {
+      return forgotPassword(this.accountRemotesHost, email);
+    }
+    /**
+    * Replace a password using the emailed reset code.
+    * @param input - the address, the emailed code, and the new password.
+    * @returns whether the gateway accepted the new password.
+    */
+    async resetPassword(input) {
+      return resetPassword(this.accountRemotesHost, input);
+    }
+    /**
     * Sign in with a password, keeping the issued tokens in the Host vault.
     * @param input - credentials and the remember-me intent of this attempt.
     * @returns the account snapshot after the sign-in.
@@ -75905,10 +76359,6 @@ ${plan.text}
       });
       if (dispose !== void 0) this.ctx.effect(() => dispose, "freecodego: edit_and_run composite tool");
     }
-    /** Model-facing media tools keep Agnes API keys and requests in the Host. */
-    registerAgnesTools() {
-      registerAgnesTools(this.agentToolsDeps());
-    }
     agentToolsDeps() {
       return {
         ...this.coreDeps,
@@ -75921,9 +76371,105 @@ ${plan.text}
         probeCommandPolicy: (agent) => this.projectPolicyForAgent(agent)
       };
     }
-    /** Generic media tools resolve the user's live default at execution time. */
-    registerMediaTools() {
-      registerMediaTools(this.mediaHost);
+    /** The mounted image/video registrations, absent while the switch is off. */
+    mediaGenerationTools;
+    /**
+    * Register the audio generation and transcription tools, which no switch governs.
+    * @returns the disposer that releases both registrations.
+    */
+    registerAudioTools() {
+      return registerAudioTools(this.mediaHost).dispose;
+    }
+    /**
+    * Mount or unmount the image and video tools so that they match the setting.
+    *
+    * Remounted from the switch's own Remote rather than read at call time, because a
+    * tool the model can see *is* a registration: gating `execute` instead would leave the
+    * schema in every request, which is the cost the switch exists to remove.
+    */
+    syncMediaGenerationTools() {
+      const enabled = this.policy.get()?.mediaGenerationEnabled !== false;
+      if (enabled === (this.mediaGenerationTools !== void 0)) return;
+      if (!enabled) {
+        this.disposeMediaGenerationTools();
+        return;
+      }
+      const generation = registerGenerationTools(this.mediaHost);
+      const legacy = registerAgnesMediaTools(this.agentToolsDeps());
+      this.mediaGenerationTools = {
+        names: [...generation.names, ...legacy.names],
+        dispose: () => {
+          generation.dispose();
+          legacy.dispose();
+        }
+      };
+    }
+    /**
+    * Rebuild the web-search binding this plugin wrote, when this process cannot serve it.
+    *
+    * Read once at start and never in a request path: a binding that died with the
+    * previous process has to be whole again before the first search runs, and the
+    * search itself must not be the thing that discovers it. Every read and write the
+    * pass needs is injected, so `web-search-binding.ts` owns the rules and this method
+    * owns only where they are satisfied — including the two services whose absence
+    * leaves a binding unbuildable, which is reported rather than half-applied.
+    */
+    async repairWebSearchBinding() {
+      let reads;
+      let report;
+      try {
+        reads = this.webSearchBindingReads();
+        report = await repairWebSearchBinding({
+          ...reads,
+          bind: (input) => webSearchBind(this.engineRemotesHost, input),
+          writeCredential: async (ref, value) => {
+            const credentials = this.credentials;
+            if (credentials === void 0) throw new Error("the credentials service is not mounted, so the web-search key cannot be written");
+            await credentials.set(credentialRef2(ref), value);
+          },
+          writeSection: async (patch) => {
+            const settings = this.ctx.get("settings");
+            if (settings === void 0) throw new Error("the settings service is not mounted, so the web-search section cannot be rewritten");
+            await settings.update(WEB_SEARCH_SETTINGS_NAMESPACE, patch);
+          }
+        });
+      } catch (error) {
+        this.ctx.logger?.warn?.(`FreeCodeGo could not repair the web-search binding: ${error instanceof Error ? error.message : String(error)}`);
+        return;
+      }
+      if (report.outcome === "rebuilt") this.ctx.logger?.info?.(`FreeCodeGo rebuilt the stale web-search binding for ${reads.remembered?.provider ?? ""}/${reads.remembered?.model ?? ""}`);
+      if (report.outcome === "failed") this.ctx.logger?.warn?.(`FreeCodeGo could not rebuild the web-search binding: ${report.detail ?? "unknown failure"}`);
+    }
+    /**
+    * The reads both web-search passes share, taken from this Host's services.
+    *
+    * One accessor rather than two because the answers have to agree: the boot pass
+    * deciding a saved route is dead while the page reads it as alive would rewrite a
+    * section the user is looking at. The remembered pair is read through the policy —
+    * the one seam a settings read goes through — and a composition with no
+    * configuration at all resolves to `undefined` rather than throwing here.
+    */
+    webSearchBindingReads() {
+      const settings = this.ctx.get("settings");
+      const configured = this.policy.get();
+      const provider = asString(configured?.webSearchBindingProvider) ?? "";
+      const model = asString(configured?.webSearchBindingModel) ?? "";
+      return {
+        remembered: provider === "" || model === "" ? void 0 : {
+          provider,
+          model
+        },
+        readSection: async () => {
+          const descriptor = settings?.describe().find((row) => row.ns === WEB_SEARCH_SETTINGS_NAMESPACE);
+          return descriptor === void 0 ? void 0 : maybeRecord(descriptor.value);
+        },
+        servesBridgeRoute: (routeId) => this.claudeBridge.hasRoute(routeId)
+      };
+    }
+    /** Release the image and video registrations, when any are mounted. */
+    disposeMediaGenerationTools() {
+      this.mediaGenerationTools?.dispose();
+      this.mediaGenerationTools = void 0;
     }
     get mediaHost() {
       return {
@@ -76744,13 +77290,12 @@ function hasInstalledClaudeRuntime() {
 // packages/freecodego/bundle-latest/src/index.ts
 var name = "freecodego";
 var inject = [];
-async function apply2(ctx, config = {}) {
-  await ctx.plugin(FreeCodeGoHarnessPlugin, config);
+async function apply2(ctx, _config = {}) {
   await ctx.plugin(FreeCodeGoAgentEngineRouter, {});
 }
 export {
+  FreeCodeGoHarnessPlugin,
   apply2 as apply,
-  bootstrapFreeCodeGoHarness,
   inject,
   name,
   registerFreeCodeGoSessionEventTypes