jinzd-ai-cli 0.1.21 → 0.1.22

package/CLAUDE.md

@@ -52,7 +52,7 @@ src/
 │   └── manager.ts                  # McpManager（多服务器管理，工具发现与注册，MCP→Tool 转换）
 └── tools/
     ├── types.ts                    # ToolDefinition / ToolCall / ToolResult / DangerLevel / getDangerLevel
-    ├── registry.ts                 # ToolRegistry（注册全部内置工具，共14个）
+    ├── registry.ts                 # ToolRegistry（注册全部内置工具，共15个）
     ├── executor.ts                 # ToolExecutor（确认逻辑 + printToolCall/printToolResult）
     └── builtin/
         ├── bash.ts                 # bash 工具（Windows: PowerShell + Buffer→UTF-8；Unix: $SHELL）
@@ -62,7 +62,8 @@ src/
         ├── run-interactive.ts      # run_interactive 工具（spawn 直连可执行文件，stdin_lines 依次输入）
         ├── ask-user.ts             # ask_user 工具（agentic 循环中向用户提问，等待文本回答）
         ├── write-todos.ts          # write_todos 工具（任务拆解与进度跟踪，终端实时渲染）
-        └── google-search.ts        # google_search 工具（Google Custom Search API 搜索网页）
+        ├── google-search.ts        # google_search 工具（Google Custom Search API 搜索网页）
+        └── spawn-agent.ts          # spawn_agent 工具（独立子代理 agentic 循环 + SubAgentExecutor）
 ```
 
 ## 常用命令
@@ -205,6 +206,7 @@ AICLI_NO_STREAM          设为 1 禁用流式输出
 | `ask_user` | safe | AI 在 agentic 循环中向用户提问，等待文本回答后继续执行 |
 | `write_todos` | safe | AI 拆解复杂任务为子任务列表，终端实时渲染进度（pending/in_progress/completed） |
 | `google_search` | safe | Google Custom Search API 搜索网页，需配置 API Key + Search Engine ID (cx) |
+| `spawn_agent` | safe | 委派独立子代理执行特定任务（隔离对话 + agentic 循环，write 自动确认，destructive 阻止） |
 | `mcp__*` | safe | MCP 服务器暴露的动态工具（命名格式：`mcp__<serverId>__<toolName>`） |
 
 ### 危险级别与确认机制
@@ -308,7 +310,7 @@ const stdinLines = Array.isArray(rawStdin) ? rawStdin.map(String)
 - [x] **`/compact` 上下文压缩**（2026-02-25）：调用当前 provider 生成对话摘要，替换 session.messages 前 N 条为 user/assistant 摘要对，保留最近 4 条。`session.compact()` 方法 + `repl.compactSession()` + `/compact [instruction]` 命令。
 - [x] **Headless 非交互模式（`-p` flag）**（2026-02-25）：`echo "..." | aicli -p "review"` 单轮对话后退出，`--json` 输出 `{content,provider,model,usage}`，支持 stdin 内容拼接，解锁 CI/CD 脚本场景。
 - [x] **Plan Mode 规划模式**（2026-02-25）：`/plan` 进入只读规划（AI 只能用只读工具白名单），提示符显示 `[PLAN]` 黄色标记，`/plan execute` 切回正常模式，`/plan exit` 放弃计划。
-- [ ] **Sub-agents 系统**：`spawn_agent` 工具在子进程中运行独立 agentic 循环，支持并行任务分解。
+- [x] **Sub-agents 系统**（2026-02-27）：`spawn_agent` 工具在同进程中运行独立 agentic 循环。子代理拥有隔离对话、过滤后的工具集（SUBAGENT_ALLOWED_TOOLS）、自动确认 write 操作、阻止 destructive 操作。SubAgentExecutor 带前缀终端输出。
 
 ### P1 — 重要差距
 - [ ] **Agent Skills 系统**：可复用的专业技能包（`.aicli/skills/`）
@@ -333,6 +335,41 @@ const stdinLines = Array.isArray(rawStdin) ? rawStdin.map(String)
 - [ ] **web_fetch DNS 解析时 SSRF 防护**：当前只检查 URL hostname 字符串，若 hostname 是域名（非裸 IP）则未检查其解析后的 IP 是否为私有地址。需在发起请求后对实际连接 IP 做二次校验（复杂，低频风险）。
 - [ ] **`persistentCwd` 全局状态**：bash 工具的当前工作目录是模块级全局变量，多 session 并发时可能串扰。现阶段单 session REPL 无影响，GUI 多会话扩展时需重构为 per-session 状态。
 
+## 本轮开发完成记录（2026-02-27，v0.1.21 → v0.1.22）
+
+### 新增功能：Sub-Agent 子代理系统（`spawn_agent` 工具）
+
+**背景**：P0 路线图最后一个核心功能。允许主 AI 将复杂子任务委派给独立子代理执行，子代理拥有隔离对话和 agentic 循环。
+
+**实现**：
+- 新增 `src/tools/builtin/spawn-agent.ts`：
+  - `spawnAgentContext` 共享上下文对象（遵循 streamToFileContext 模式，由 repl.ts 注入）
+  - `SubAgentExecutor` 类：子代理专用工具执行器，write 自动确认、destructive 直接阻止、带 `  ┃ ` 前缀的嵌套终端输出
+  - 独立 agentic 循环：chatWithTools → executeAll → buildToolResultMessages，最多 max_rounds 轮
+  - 子代理 system prompt：继承父级 system prompt + 子代理模式说明（任务规则、工具限制）
+- `src/core/constants.ts`：新增 `SUBAGENT_DEFAULT_MAX_ROUNDS`(10) / `SUBAGENT_MAX_ROUNDS_LIMIT`(15) / `SUBAGENT_ALLOWED_TOOLS`(11个工具白名单)
+- `src/tools/registry.ts`：新增 `unregister(name)` 方法（供子代理创建过滤工具集）；注册 `spawnAgentTool`
+- `src/tools/types.ts`：`getDangerLevel` 中 `spawn_agent` → `safe`
+- `src/repl/repl.ts`：handleChatWithTools 中注入 spawnAgentContext（provider/model/systemPrompt/modelParams/configManager）
+
+**工具参数**：
+- `task`（string, required）：子代理任务描述，包含所有必要上下文
+- `max_rounds`（number, optional, default 10, 限制 1-15）：最大工具调用轮次
+
+**安全设计**：
+- 递归防护：子代理工具集不含 `spawn_agent`
+- 用户交互隔离：子代理无 `ask_user`、`save_memory`、`save_last_response`
+- 破坏性操作阻止：`destructive` 级别工具调用直接返回错误
+- 写操作自动确认：`write` 级别无需用户确认（主 AI 已明确委派）
+- 轮次上限：max_rounds 限制在 1-15，防止无限循环
+
+**终端输出**：子代理工具调用和结果使用 `  ┃ ` 前缀 + 箱形边框（┏/┗），清晰区分父级与子代理输出
+
+### 架构变更
+- `src/repl/renderer.ts`：`/about` 工具计数 14 → 15，新增 `spawn_agent` 条目和 Sub-Agent 特性条目
+
+---
+
 ## 本轮开发完成记录（2026-02-25，v0.1.18 → v0.1.20）
 
 ### Bug 修复：Kimi XML 伪工具调用（v0.1.19）

package/dist/index.js

@@ -129,7 +129,7 @@ var EnvLoader = class {
 };
 
 // src/core/constants.ts
-var VERSION = "0.1.21";
+var VERSION = "0.1.22";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";
@@ -173,22 +173,36 @@ var PLAN_MODE_SYSTEM_ADDON = `# \u{1F50D} Plan Mode \u2014 \u53EA\u8BFB\u89C4\u5
    - \u6F5C\u5728\u98CE\u9669\u548C\u6CE8\u610F\u4E8B\u9879
 
 \u5B8C\u6210\u89C4\u5212\u540E\uFF0C\u8BF7\u660E\u786E\u544A\u77E5\u7528\u6237\uFF1A\u8F93\u5165 \`/plan execute\` \u5F00\u59CB\u6267\u884C\u8BA1\u5212\uFF0C\u6216 \`/plan exit\` \u653E\u5F03\u6B64\u8BA1\u5212\u3002`;
+var SUBAGENT_DEFAULT_MAX_ROUNDS = 10;
+var SUBAGENT_MAX_ROUNDS_LIMIT = 15;
+var SUBAGENT_ALLOWED_TOOLS = /* @__PURE__ */ new Set([
+  "bash",
+  "read_file",
+  "write_file",
+  "edit_file",
+  "list_dir",
+  "grep_files",
+  "glob_files",
+  "run_interactive",
+  "web_fetch",
+  "google_search",
+  "write_todos"
+]);
 var AUTHOR = "\u664B\u6B63\u4E1C";
 var AUTHOR_EMAIL = "zhengdong.jin@gmail.com";
 var DESCRIPTION = "\u8DE8\u5E73\u53F0 REPL \u98CE\u683C AI \u5BF9\u8BDD\u5DE5\u5177\uFF0C\u652F\u6301\u591A Provider \u4E0E Agentic \u5DE5\u5177\u8C03\u7528";
 
 // src/core/errors.ts
 var AiCliError = class extends Error {
-  constructor(message) {
-    super(message);
+  constructor(message, options) {
+    super(message, options);
     this.name = "AiCliError";
   }
 };
 var ProviderError = class extends AiCliError {
   constructor(providerId, message, cause) {
-    super(`[${providerId}] ${message}`);
+    super(`[${providerId}] ${message}`, cause !== void 0 ? { cause } : void 0);
     this.providerId = providerId;
-    this.cause = cause;
     this.name = "ProviderError";
   }
 };
@@ -263,6 +277,13 @@ ${err}`
     this.config[key] = value;
     this.save();
   }
+  /**
+   * 仅修改内存中的配置值，不持久化到磁盘。
+   * 用于 CLI 命令行参数覆盖（-p, -m, --no-stream），使其只对当前进程生效。
+   */
+  setTransient(key, value) {
+    this.config[key] = value;
+  }
   isFirstRun() {
     return !existsSync(this.configPath);
   }
@@ -343,7 +364,8 @@ var ClaudeProvider = class extends BaseProvider {
         max_tokens: request.maxTokens ?? 8192,
         temperature: request.temperature
       });
-      const content = response.content[0].type === "text" ? response.content[0].text : "";
+      const firstBlock = response.content?.[0];
+      const content = firstBlock?.type === "text" ? firstBlock.text : "";
       return {
         content,
         model: response.model,
@@ -551,6 +573,9 @@ var GeminiProvider = class extends BaseProvider {
   }
   async chat(request) {
     try {
+      if (request.messages.length === 0) {
+        return { content: "", model: request.model, usage: void 0 };
+      }
       const genModel = this.client.getGenerativeModel({
         model: request.model,
         systemInstruction: request.systemPrompt
@@ -571,6 +596,10 @@ var GeminiProvider = class extends BaseProvider {
   }
   async *chatStream(request) {
     try {
+      if (request.messages.length === 0) {
+        yield { delta: "", done: true };
+        return;
+      }
       const genModel = this.client.getGenerativeModel({
         model: request.model,
         systemInstruction: request.systemPrompt
@@ -598,6 +627,9 @@ var GeminiProvider = class extends BaseProvider {
   }
   async chatWithTools(request, tools) {
     try {
+      if (request.messages.length === 0) {
+        return { content: "", usage: void 0 };
+      }
       const geminiTools = [{
         functionDeclarations: tools.map((t) => ({
           name: t.name,
@@ -756,8 +788,12 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       }, {
         timeout: request.timeout ?? this.defaultTimeout
       });
+      const firstChoice = response.choices?.[0];
+      if (!firstChoice) {
+        return { content: "", model: response.model, usage: void 0 };
+      }
       return {
-        content: response.choices[0].message.content ?? "",
+        content: firstChoice.message.content ?? "",
         model: response.model,
         usage: response.usage ? {
           inputTokens: response.usage.prompt_tokens,
@@ -846,7 +882,11 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       }, {
         timeout: request.timeout ?? this.defaultTimeout
       });
-      const message = response.choices[0].message;
+      const firstChoice = response.choices?.[0];
+      if (!firstChoice) {
+        return { content: "", usage: void 0 };
+      }
+      const message = firstChoice.message;
       const usage = response.usage ? {
         inputTokens: response.usage.prompt_tokens,
         outputTokens: response.usage.completion_tokens
@@ -1372,21 +1412,42 @@ var Session = class _Session {
       }))
     };
   }
+  /**
+   * 从磁盘 JSON 数据恢复 Session 实例。
+   * 添加运行时校验：损坏或不兼容的历史文件会抛出明确错误，而非 TypeError 崩溃。
+   */
   static fromJSON(data) {
-    const session = new _Session(data.id, data.provider, data.model);
-    session.title = data.title;
-    session.created = new Date(data.created);
-    session.updated = new Date(data.updated);
-    if (data.tokenUsage) {
+    const d = data;
+    if (!d || typeof d !== "object") {
+      throw new Error("Invalid session data: expected an object");
+    }
+    if (typeof d.id !== "string" || typeof d.provider !== "string" || typeof d.model !== "string") {
+      throw new Error("Invalid session data: missing or invalid id/provider/model fields");
+    }
+    if (!Array.isArray(d.messages)) {
+      throw new Error("Invalid session data: messages is not an array");
+    }
+    const session = new _Session(d.id, d.provider, d.model);
+    session.title = typeof d.title === "string" ? d.title : void 0;
+    const created = new Date(d.created);
+    const updated = new Date(d.updated);
+    session.created = isNaN(created.getTime()) ? /* @__PURE__ */ new Date() : created;
+    session.updated = isNaN(updated.getTime()) ? /* @__PURE__ */ new Date() : updated;
+    const tu = d.tokenUsage;
+    if (tu && typeof tu === "object") {
       session.tokenUsage = {
-        inputTokens: data.tokenUsage.inputTokens ?? 0,
-        outputTokens: data.tokenUsage.outputTokens ?? 0
+        inputTokens: typeof tu.inputTokens === "number" ? tu.inputTokens : 0,
+        outputTokens: typeof tu.outputTokens === "number" ? tu.outputTokens : 0
       };
     }
-    session.messages = data.messages.map((m) => ({
-      ...m,
-      timestamp: new Date(m.timestamp)
-    }));
+    session.messages = d.messages.map((m) => {
+      const ts = new Date(m.timestamp);
+      return {
+        role: m.role ?? "user",
+        content: m.content,
+        timestamp: isNaN(ts.getTime()) ? /* @__PURE__ */ new Date() : ts
+      };
+    });
     return session;
   }
 };
@@ -1504,7 +1565,7 @@ var SessionManager = class {
 import * as readline from "readline";
 import { existsSync as existsSync15, readFileSync as readFileSync10 } from "fs";
 import { join as join10, resolve as resolve4, extname as extname3 } from "path";
-import chalk9 from "chalk";
+import chalk10 from "chalk";
 
 // src/repl/renderer.ts
 import chalk from "chalk";
@@ -1585,7 +1646,7 @@ var Renderer = class {
     console.log(chalk.dim("    Gemini (Google) \xB7 \u667A\u8C31\u6E05\u8A00 \xB7 \u81EA\u5B9A\u4E49 OpenAI \u517C\u5BB9"));
     console.log(HR);
     const mcpToolCount = mcpInfo?.tools ?? 0;
-    const toolTotal = 14 + pluginCount + mcpToolCount;
+    const toolTotal = 15 + pluginCount + mcpToolCount;
     const extras = [];
     if (pluginCount > 0) extras.push(`${pluginCount} \u4E2A\u63D2\u4EF6`);
     if (mcpToolCount > 0) extras.push(`${mcpToolCount} \u4E2A MCP`);
@@ -1605,6 +1666,7 @@ var Renderer = class {
     console.log(tool("save_memory", "\u5C06\u91CD\u8981\u4FE1\u606F\u6301\u4E45\u5316\u5230 ~/.aicli/memory.md\uFF0C\u8DE8\u4F1A\u8BDD\u81EA\u52A8\u6CE8\u5165"));
     console.log(tool("ask_user", "\u5411\u7528\u6237\u63D0\u95EE\u5E76\u7B49\u5F85\u56DE\u7B54\uFF08agentic \u5FAA\u73AF\u4E2D\u8BF7\u6C42\u6F84\u6E05\uFF09"));
     console.log(tool("write_todos", "\u62C6\u89E3\u4EFB\u52A1\u4E3A\u5B50\u4EFB\u52A1\u5217\u8868\uFF0C\u5B9E\u65F6\u663E\u793A\u8FDB\u5EA6"));
+    console.log(tool("spawn_agent", "\u59D4\u6D3E\u72EC\u7ACB\u5B50\u4EE3\u7406\u6267\u884C\u7279\u5B9A\u4EFB\u52A1\uFF08\u9694\u79BB\u5BF9\u8BDD + \u81EA\u52A8\u5DE5\u5177\u8C03\u7528\u5FAA\u73AF\uFF09"));
     console.log(HR);
     console.log(chalk.gray("  REPL \u547D\u4EE4\uFF0819\u4E2A\uFF09\uFF1A"));
     console.log(chalk.dim("    /help  /about  /provider  /model  /clear  /compact  /plan  /session"));
@@ -1626,6 +1688,7 @@ var Renderer = class {
     console.log(feat('Headless \u6A21\u5F0F\uFF1Aaicli -p "..." \u5355\u8F6E\u975E\u4EA4\u4E92\uFF0C\u652F\u6301 stdin \u7BA1\u9053\u4E0E --json \u8F93\u51FA'));
     console.log(feat("/compact \u4E0A\u4E0B\u6587\u538B\u7F29\uFF1A\u751F\u6210\u6458\u8981\u66FF\u6362\u65E7\u6D88\u606F\uFF0C\u4FDD\u7559\u6700\u8FD1 4 \u6761\uFF0C\u89E3\u51B3 context \u6EA2\u51FA"));
     console.log(feat("Kimi \u5DE5\u5177\u8C03\u7528\u53EF\u9760\u6027\u589E\u5F3A\uFF1AXML \u4F2A\u8C03\u7528\u81EA\u52A8\u68C0\u6D4B\u5E76\u8F6C\u6362\u4E3A\u771F\u5B9E API \u8C03\u7528\uFF08v0.1.19\uFF09"));
+    console.log(feat("Sub-Agent \u5B50\u4EE3\u7406\uFF1Aspawn_agent \u59D4\u6D3E\u72EC\u7ACB\u5B50\u4EE3\u7406\uFF0C\u9694\u79BB\u5FAA\u73AF\u6267\u884C\u590D\u6742\u5B50\u4EFB\u52A1"));
     console.log(feat("\u72EC\u7ACB\u53EF\u6267\u884C\u6587\u4EF6\u6253\u5305\uFF08~56MB\uFF0C\u65E0\u9700 Node.js \u73AF\u5883\uFF09"));
     console.log();
   }
@@ -4070,6 +4133,305 @@ function formatResults(query, data, requested) {
   return header + "\n" + results.join("\n\n");
 }
 
+// src/tools/builtin/spawn-agent.ts
+import chalk6 from "chalk";
+
+// src/tools/types.ts
+function getDangerLevel(toolName, args) {
+  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName === "bash") {
+    const cmd = String(args["command"] ?? "");
+    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
+    if (/\brm\s+\S/.test(cmd)) return "destructive";
+    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
+    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
+    if (/\bdel\s+\S/.test(cmd)) return "destructive";
+    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
+    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
+    return "safe";
+  }
+  if (toolName === "write_file") return "write";
+  if (toolName === "edit_file") return "write";
+  if (toolName === "save_last_response") return "write";
+  if (toolName === "run_interactive") {
+    const exe = String(args["executable"] ?? "").toLowerCase();
+    if (/\b(rm|rmdir|del|format|mkfs|Remove-Item)\b/i.test(exe)) return "destructive";
+    if (/\b(bash|sh|zsh|cmd|powershell|pwsh|python|node|ruby|perl)\b/i.test(exe)) return "write";
+    return "write";
+  }
+  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search" || toolName === "spawn_agent") return "safe";
+  return "write";
+}
+
+// src/tools/builtin/spawn-agent.ts
+var spawnAgentContext = {
+  provider: null,
+  model: "",
+  systemPrompt: void 0,
+  modelParams: {},
+  configManager: null
+};
+var PREFIX = chalk6.dim("  \u2503 ");
+var MAX_TOOL_OUTPUT_CHARS = 12e3;
+function truncateOutput(content, toolName) {
+  if (content.length <= MAX_TOOL_OUTPUT_CHARS) return content;
+  const keepHead = Math.floor(MAX_TOOL_OUTPUT_CHARS * 0.7);
+  const keepTail = Math.floor(MAX_TOOL_OUTPUT_CHARS * 0.2);
+  const omitted = content.length - keepHead - keepTail;
+  const lines = content.split("\n").length;
+  const head = content.slice(0, keepHead);
+  const tail = content.slice(content.length - keepTail);
+  return head + `
+
+... [\u8F93\u51FA\u5DF2\u622A\u65AD\uFF1A\u5171 ${content.length} \u5B57\u7B26 / ${lines} \u884C\uFF0C\u7701\u7565\u4E86\u4E2D\u95F4 ${omitted} \u5B57\u7B26\u3002\u5982\u9700\u67E5\u770B\u5B8C\u6574\u5185\u5BB9\uFF0C\u8BF7\u4F7F\u7528 read_file \u5206\u6BB5\u8BFB\u53D6` + (toolName === "bash" ? "\uFF0C\u6216\u7F29\u5C0F\u547D\u4EE4\u8303\u56F4" : "") + `] ...
+
+` + tail;
+}
+var SubAgentExecutor = class {
+  constructor(registry) {
+    this.registry = registry;
+  }
+  round = 0;
+  totalRounds = 0;
+  setRoundInfo(current, total) {
+    this.round = current;
+    this.totalRounds = total;
+  }
+  async execute(call) {
+    const tool = this.registry.get(call.name);
+    if (!tool) {
+      return {
+        callId: call.id,
+        content: `Unknown tool: ${call.name}`,
+        isError: true
+      };
+    }
+    const dangerLevel = getDangerLevel(call.name, call.arguments);
+    if (dangerLevel === "destructive") {
+      this.printPrefixed(
+        chalk6.red("\u26A0 BLOCKED: ") + `Destructive operation ${chalk6.bold(call.name)} not allowed in sub-agent`
+      );
+      return {
+        callId: call.id,
+        content: "Destructive operations are not allowed in sub-agents.",
+        isError: true
+      };
+    }
+    this.printToolCall(call, dangerLevel);
+    try {
+      const rawContent = await tool.execute(call.arguments);
+      const content = truncateOutput(rawContent, call.name);
+      const wasTruncated = content !== rawContent;
+      this.printToolResult(call.name, rawContent, false, wasTruncated);
+      return { callId: call.id, content, isError: false };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      this.printToolResult(call.name, message, true, false);
+      return { callId: call.id, content: message, isError: true };
+    }
+  }
+  async executeAll(calls) {
+    const results = [];
+    for (const call of calls) {
+      results.push(await this.execute(call));
+    }
+    return results;
+  }
+  // ── 带前缀的终端输出 ──
+  printPrefixed(text) {
+    for (const line of text.split("\n")) {
+      console.log(PREFIX + line);
+    }
+  }
+  printToolCall(call, dangerLevel) {
+    console.log(PREFIX);
+    const icon = dangerLevel === "write" ? chalk6.yellow("\u270E Tool: ") : chalk6.bold.cyan("\u2699 Tool: ");
+    const roundBadge = this.totalRounds > 0 ? chalk6.dim(` [${this.round}/${this.totalRounds}]`) : "";
+    console.log(PREFIX + icon + chalk6.white(call.name) + roundBadge);
+    for (const [key, val] of Object.entries(call.arguments)) {
+      let valStr;
+      if (Array.isArray(val)) {
+        const json = JSON.stringify(val);
+        valStr = json.length > 160 ? json.slice(0, 160) + "..." : json;
+      } else if (typeof val === "string" && val.length > 120) {
+        valStr = val.slice(0, 120) + "...";
+      } else {
+        valStr = String(val);
+      }
+      console.log(PREFIX + chalk6.gray(`  ${key}: `) + chalk6.white(valStr));
+    }
+  }
+  printToolResult(name, content, isError, wasTruncated) {
+    if (isError) {
+      console.log(
+        PREFIX + chalk6.red(`\u26A0 ${name} error: `) + chalk6.gray(content.slice(0, 300))
+      );
+    } else {
+      const lines = content.split("\n");
+      const maxLines = name === "run_interactive" ? 40 : 8;
+      const preview = lines.slice(0, maxLines);
+      const prefixedPreview = preview.map((l) => PREFIX + "  " + chalk6.gray(l)).join("\n");
+      const moreLines = lines.length > maxLines ? "\n" + PREFIX + chalk6.gray(`  ... (${lines.length - maxLines} more lines)`) : "";
+      const truncNote = wasTruncated ? "\n" + PREFIX + chalk6.yellow(`  \u26A1 \u8F93\u51FA\u5DF2\u622A\u65AD\u81F3 ${MAX_TOOL_OUTPUT_CHARS} \u5B57\u7B26`) : "";
+      console.log(PREFIX + chalk6.green("\u2713 Result:"));
+      console.log(prefixedPreview + moreLines + truncNote);
+    }
+  }
+};
+function buildSubAgentSystemPrompt(task, parentSystemPrompt) {
+  const parts = [];
+  if (parentSystemPrompt) {
+    parts.push(parentSystemPrompt);
+  }
+  parts.push(
+    `# Sub-Agent Mode
+
+\u4F60\u662F\u4E00\u4E2A\u4E13\u6CE8\u7684\u5B50\u4EE3\u7406\uFF08sub-agent\uFF09\uFF0C\u88AB\u4E3B\u4EE3\u7406\u59D4\u6D3E\u6765\u5B8C\u6210\u4E00\u4E2A\u7279\u5B9A\u4EFB\u52A1\u3002
+
+**\u4F60\u7684\u4EFB\u52A1**\uFF1A
+${task}
+
+**\u5DE5\u4F5C\u89C4\u5219**\uFF1A
+1. \u4E13\u6CE8\u4E8E\u5B8C\u6210\u4F60\u7684\u4EFB\u52A1\uFF0C\u4E0D\u8981\u504F\u79BB
+2. \u5B8C\u6210\u540E\u8F93\u51FA\u4E00\u4E2A\u7B80\u6D01\u7684\u603B\u7ED3\uFF0C\u5305\u542B\uFF1A\u505A\u4E86\u4EC0\u4E48\u3001\u4FEE\u6539\u4E86\u54EA\u4E9B\u6587\u4EF6\u3001\u7ED3\u679C\u5982\u4F55
+3. \u4F60\u65E0\u6CD5\u4E0E\u7528\u6237\u4EA4\u4E92\uFF08\u6CA1\u6709 ask_user \u5DE5\u5177\uFF09\uFF0C\u4F9D\u9760\u4EFB\u52A1\u63CF\u8FF0\u4E2D\u7684\u4FE1\u606F\u72EC\u7ACB\u5B8C\u6210
+4. \u4F60\u65E0\u6CD5\u521B\u5EFA\u5B50\u4EE3\u7406\uFF08\u6CA1\u6709 spawn_agent \u5DE5\u5177\uFF09
+5. \u7834\u574F\u6027\u64CD\u4F5C\uFF08rm -rf \u7B49\uFF09\u4F1A\u88AB\u81EA\u52A8\u963B\u6B62
+6. \u5C3D\u91CF\u9AD8\u6548\uFF0C\u51CF\u5C11\u4E0D\u5FC5\u8981\u7684\u5DE5\u5177\u8C03\u7528\u8F6E\u6B21`
+  );
+  return parts.join("\n\n---\n\n");
+}
+function printSubAgentHeader(task, maxRounds) {
+  console.log();
+  console.log(chalk6.dim("  \u250F\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
+  console.log(PREFIX + chalk6.bold.magenta("\u{1F916} Sub-Agent Spawned"));
+  console.log(
+    PREFIX + chalk6.gray("Task: ") + chalk6.white(task.slice(0, 120) + (task.length > 120 ? "..." : ""))
+  );
+  console.log(PREFIX + chalk6.gray(`Max rounds: ${maxRounds}`));
+  console.log(chalk6.dim("  \u2503"));
+}
+function printSubAgentFooter(usage) {
+  console.log(PREFIX);
+  console.log(PREFIX + chalk6.bold.magenta("Sub-Agent Complete"));
+  if (usage.inputTokens > 0 || usage.outputTokens > 0) {
+    console.log(
+      PREFIX + chalk6.dim(
+        `Tokens: ${usage.inputTokens} in / ${usage.outputTokens} out`
+      )
+    );
+  }
+  console.log(chalk6.dim("  \u2517\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
+  console.log();
+}
+var spawnAgentTool = {
+  definition: {
+    name: "spawn_agent",
+    description: "\u59D4\u6D3E\u4E00\u4E2A\u72EC\u7ACB\u7684\u5B50\u4EE3\u7406\uFF08sub-agent\uFF09\u6765\u5B8C\u6210\u7279\u5B9A\u5B50\u4EFB\u52A1\u3002\u5B50\u4EE3\u7406\u62E5\u6709\u72EC\u7ACB\u7684\u5BF9\u8BDD\u4E0A\u4E0B\u6587\u548C agentic \u5DE5\u5177\u8C03\u7528\u5FAA\u73AF\uFF0C\u53EF\u4F7F\u7528 bash\u3001\u6587\u4EF6\u8BFB\u5199\u3001\u7F16\u8F91\u3001\u641C\u7D22\u7B49\u5DE5\u5177\uFF0C\u4F46\u65E0\u6CD5\u4E0E\u7528\u6237\u4EA4\u4E92\u6216\u521B\u5EFA\u66F4\u591A\u5B50\u4EE3\u7406\u3002\u9002\u7528\u4E8E\u53EF\u72EC\u7ACB\u5B8C\u6210\u7684\u5B50\u4EFB\u52A1\uFF0C\u5982\uFF1A\u91CD\u6784\u67D0\u4E2A\u6A21\u5757\u3001\u4E3A\u67D0\u4E2A\u6587\u4EF6\u7F16\u5199\u6D4B\u8BD5\u3001\u8C03\u7814\u67D0\u4E2A\u6280\u672F\u65B9\u6848\u3001\u5B9E\u73B0\u67D0\u4E2A\u5177\u4F53\u529F\u80FD\u3002\u8FD4\u56DE\u5B50\u4EE3\u7406\u7684\u6267\u884C\u7ED3\u679C\u6458\u8981\u3002",
+    parameters: {
+      task: {
+        type: "string",
+        description: "\u5B50\u4EE3\u7406\u7684\u4EFB\u52A1\u63CF\u8FF0\u3002\u5E94\u5305\u542B\u6240\u6709\u5FC5\u8981\u4E0A\u4E0B\u6587\uFF1A\u6587\u4EF6\u8DEF\u5F84\u3001\u9700\u6C42\u3001\u7EA6\u675F\u3001\u9884\u671F\u4EA7\u51FA\u3002\u5B50\u4EE3\u7406\u65E0\u6CD5\u8BBF\u95EE\u7236\u7EA7\u5BF9\u8BDD\u5386\u53F2\uFF0C\u6240\u6709\u4FE1\u606F\u5FC5\u987B\u5728\u6B64\u53C2\u6570\u4E2D\u63D0\u4F9B\u3002",
+        required: true
+      },
+      max_rounds: {
+        type: "number",
+        description: "\u5B50\u4EE3\u7406\u6700\u5927\u5DE5\u5177\u8C03\u7528\u8F6E\u6B21\uFF081-15\uFF0C\u9ED8\u8BA4 10\uFF09\u3002\u7B80\u5355\u4EFB\u52A1\u7528\u8F83\u5C11\u8F6E\u6B21\uFF0C\u590D\u6742\u4EFB\u52A1\u7528\u66F4\u591A\u3002",
+        required: false
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const task = String(args["task"] ?? "").trim();
+    if (!task) throw new Error("task parameter is required");
+    const rawMaxRounds = Number(args["max_rounds"] ?? SUBAGENT_DEFAULT_MAX_ROUNDS);
+    const maxRounds = Math.min(
+      Math.max(Math.round(rawMaxRounds), 1),
+      SUBAGENT_MAX_ROUNDS_LIMIT
+    );
+    const ctx = spawnAgentContext;
+    if (!ctx.provider) {
+      throw new Error("spawn_agent: provider not initialized (context not injected)");
+    }
+    const subRegistry = new ToolRegistry();
+    for (const tool of subRegistry.listAll()) {
+      if (!SUBAGENT_ALLOWED_TOOLS.has(tool.definition.name)) {
+        subRegistry.unregister(tool.definition.name);
+      }
+    }
+    const subExecutor = new SubAgentExecutor(subRegistry);
+    const subMessages = [
+      { role: "user", content: task, timestamp: /* @__PURE__ */ new Date() }
+    ];
+    const subSystemPrompt = buildSubAgentSystemPrompt(task, ctx.systemPrompt);
+    const toolDefs = subRegistry.getDefinitions();
+    const extraMessages = [];
+    const totalUsage = { inputTokens: 0, outputTokens: 0 };
+    let finalContent = "";
+    printSubAgentHeader(task, maxRounds);
+    try {
+      for (let round = 0; round < maxRounds; round++) {
+        subExecutor.setRoundInfo(round + 1, maxRounds);
+        const result = await ctx.provider.chatWithTools(
+          {
+            messages: subMessages,
+            model: ctx.model,
+            systemPrompt: subSystemPrompt,
+            stream: false,
+            temperature: ctx.modelParams.temperature,
+            maxTokens: ctx.modelParams.maxTokens,
+            timeout: ctx.modelParams.timeout,
+            thinking: ctx.modelParams.thinking,
+            ...extraMessages.length > 0 ? { _extraMessages: extraMessages } : {}
+          },
+          toolDefs
+        );
+        if (result.usage) {
+          totalUsage.inputTokens += result.usage.inputTokens;
+          totalUsage.outputTokens += result.usage.outputTokens;
+        }
+        if ("content" in result) {
+          finalContent = result.content;
+          break;
+        }
+        if (ctx.configManager) {
+          googleSearchContext.configManager = ctx.configManager;
+        }
+        const toolResults = await subExecutor.executeAll(result.toolCalls);
+        const reasoningContent = "reasoningContent" in result ? result.reasoningContent : void 0;
+        const newMsgs = ctx.provider.buildToolResultMessages(
+          result.toolCalls,
+          toolResults,
+          reasoningContent
+        );
+        extraMessages.push(...newMsgs);
+      }
+      if (!finalContent) {
+        finalContent = `(Sub-agent reached maximum rounds (${maxRounds}) without producing a final response)`;
+      }
+    } catch (err) {
+      const errMsg = err instanceof Error ? err.message : String(err);
+      finalContent = `(Sub-agent error: ${errMsg})`;
+      process.stderr.write(
+        `
+[spawn_agent] Error in sub-agent loop: ${errMsg}
+`
+      );
+    }
+    printSubAgentFooter(totalUsage);
+    const lines = [
+      "## Sub-Agent Result",
+      "",
+      finalContent,
+      "",
+      "---",
+      `Token usage: ${totalUsage.inputTokens} input, ${totalUsage.outputTokens} output`
+    ];
+    return lines.join("\n");
+  }
+};
+
 // src/tools/registry.ts
 import { pathToFileURL } from "url";
 import { existsSync as existsSync11, mkdirSync as mkdirSync8, readdirSync as readdirSync5 } from "fs";
@@ -4093,6 +4455,7 @@ var ToolRegistry = class {
     this.register(askUserTool);
     this.register(writeTodosTool);
     this.register(googleSearchTool);
+    this.register(spawnAgentTool);
   }
   register(tool) {
     this.tools.set(tool.definition.name, tool);
@@ -4100,6 +4463,10 @@ var ToolRegistry = class {
   get(name) {
     return this.tools.get(name);
   }
+  /** 注销指定工具（子代理创建过滤后的工具集时使用） */
+  unregister(name) {
+    return this.tools.delete(name);
+  }
   /** 返回所有工具的 schema，用于发送给 AI */
   getDefinitions() {
     return [...this.tools.values()].map((t) => t.definition);
@@ -4199,32 +4566,11 @@ var ToolRegistry = class {
 };
 
 // src/tools/executor.ts
-import chalk7 from "chalk";
+import chalk8 from "chalk";
 import { existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
 
-// src/tools/types.ts
-function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
-  if (toolName === "bash") {
-    const cmd = String(args["command"] ?? "");
-    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
-    if (/\brm\s+\S/.test(cmd)) return "destructive";
-    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
-    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
-    if (/\bdel\s+\S/.test(cmd)) return "destructive";
-    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
-    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
-    return "safe";
-  }
-  if (toolName === "write_file") return "write";
-  if (toolName === "edit_file") return "write";
-  if (toolName === "save_last_response") return "write";
-  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "run_interactive" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search") return "safe";
-  return "write";
-}
-
 // src/tools/diff-utils.ts
-import chalk6 from "chalk";
+import chalk7 from "chalk";
 function renderDiff(oldText, newText, opts = {}) {
   const contextLines = opts.contextLines ?? 3;
   const maxLines = opts.maxLines ?? 120;
@@ -4233,21 +4579,21 @@ function renderDiff(oldText, newText, opts = {}) {
   const newLines = newText.split("\n");
   const hunks = computeHunks(oldLines, newLines, contextLines);
   if (hunks.length === 0) {
-    return chalk6.dim("  (no changes)");
+    return chalk7.dim("  (no changes)");
   }
   const output = [];
   if (filePath) {
-    output.push(chalk6.bold.white(`--- ${filePath} (before)`));
-    output.push(chalk6.bold.white(`+++ ${filePath} (after)`));
+    output.push(chalk7.bold.white(`--- ${filePath} (before)`));
+    output.push(chalk7.bold.white(`+++ ${filePath} (after)`));
   }
   let totalDisplayed = 0;
   for (const hunk of hunks) {
     if (totalDisplayed >= maxLines) {
-      output.push(chalk6.dim(`  ... (diff truncated, too many changes)`));
+      output.push(chalk7.dim(`  ... (diff truncated, too many changes)`));
       break;
     }
     output.push(
-      chalk6.cyan(
+      chalk7.cyan(
         `@@ -${hunk.oldStart + 1},${hunk.oldCount} +${hunk.newStart + 1},${hunk.newCount} @@`
       )
     );
@@ -4255,11 +4601,11 @@ function renderDiff(oldText, newText, opts = {}) {
       if (totalDisplayed >= maxLines) break;
       totalDisplayed++;
       if (line.type === "context") {
-        output.push(chalk6.dim(`  ${line.text}`));
+        output.push(chalk7.dim(`  ${line.text}`));
       } else if (line.type === "remove") {
-        output.push(chalk6.red(`- ${line.text}`));
+        output.push(chalk7.red(`- ${line.text}`));
       } else {
-        output.push(chalk6.green(`+ ${line.text}`));
+        output.push(chalk7.green(`+ ${line.text}`));
       }
     }
   }
@@ -4377,11 +4723,11 @@ function simpleDiff(oldLines, newLines) {
 }
 
 // src/tools/executor.ts
-var MAX_TOOL_OUTPUT_CHARS = 12e3;
-function truncateOutput(content, toolName) {
-  if (content.length <= MAX_TOOL_OUTPUT_CHARS) return content;
-  const keepHead = Math.floor(MAX_TOOL_OUTPUT_CHARS * 0.7);
-  const keepTail = Math.floor(MAX_TOOL_OUTPUT_CHARS * 0.2);
+var MAX_TOOL_OUTPUT_CHARS2 = 12e3;
+function truncateOutput2(content, toolName) {
+  if (content.length <= MAX_TOOL_OUTPUT_CHARS2) return content;
+  const keepHead = Math.floor(MAX_TOOL_OUTPUT_CHARS2 * 0.7);
+  const keepTail = Math.floor(MAX_TOOL_OUTPUT_CHARS2 * 0.2);
   const omitted = content.length - keepHead - keepTail;
   const lines = content.split("\n").length;
   const head = content.slice(0, keepHead);
@@ -4464,7 +4810,7 @@ var ToolExecutor = class {
     }
     try {
       const rawContent = await tool.execute(call.arguments);
-      const content = truncateOutput(rawContent, call.name);
+      const content = truncateOutput2(rawContent, call.name);
       const wasTruncated = content !== rawContent;
       this.printToolResult(call.name, rawContent, false, wasTruncated);
       return { callId: call.id, content, isError: false };
@@ -4484,9 +4830,9 @@ var ToolExecutor = class {
   printToolCall(call) {
     const dangerLevel = getDangerLevel(call.name, call.arguments);
     console.log();
-    const icon = dangerLevel === "write" ? chalk7.yellow("\u270E Tool: ") : chalk7.bold.cyan("\u2699 Tool: ");
-    const roundBadge = this.totalRounds > 0 ? chalk7.dim(` [${this.round}/${this.totalRounds}]`) : "";
-    console.log(icon + chalk7.white(call.name) + roundBadge);
+    const icon = dangerLevel === "write" ? chalk8.yellow("\u270E Tool: ") : chalk8.bold.cyan("\u2699 Tool: ");
+    const roundBadge = this.totalRounds > 0 ? chalk8.dim(` [${this.round}/${this.totalRounds}]`) : "";
+    console.log(icon + chalk8.white(call.name) + roundBadge);
     for (const [key, val] of Object.entries(call.arguments)) {
       let valStr;
       if (Array.isArray(val)) {
@@ -4497,7 +4843,7 @@ var ToolExecutor = class {
       } else {
         valStr = String(val);
       }
-      console.log(chalk7.gray(`  ${key}: `) + chalk7.white(valStr));
+      console.log(chalk8.gray(`  ${key}: `) + chalk8.white(valStr));
     }
   }
   /**
@@ -4519,19 +4865,19 @@ var ToolExecutor = class {
           return;
         }
         if (oldContent === newContent) {
-          console.log(chalk7.dim("  (file content unchanged)"));
+          console.log(chalk8.dim("  (file content unchanged)"));
           return;
         }
         const diff = renderDiff(oldContent, newContent, { filePath, contextLines: 3 });
-        console.log(chalk7.dim("  \u2500\u2500 diff preview \u2500\u2500"));
+        console.log(chalk8.dim("  \u2500\u2500 diff preview \u2500\u2500"));
         console.log(diff);
         console.log();
       } else {
         const lines = newContent.split("\n");
-        const preview = lines.slice(0, 20).map((l) => chalk7.green(`+ ${l}`)).join("\n");
-        const more = lines.length > 20 ? chalk7.dim(`
+        const preview = lines.slice(0, 20).map((l) => chalk8.green(`+ ${l}`)).join("\n");
+        const more = lines.length > 20 ? chalk8.dim(`
   ... (+${lines.length - 20} more lines)`) : "";
-        console.log(chalk7.dim("  \u2500\u2500 new file preview \u2500\u2500"));
+        console.log(chalk8.dim("  \u2500\u2500 new file preview \u2500\u2500"));
         console.log(preview + more);
         console.log();
       }
@@ -4546,17 +4892,17 @@ var ToolExecutor = class {
           String(newStr ?? ""),
           { filePath, contextLines: 2 }
         );
-        console.log(chalk7.dim("  \u2500\u2500 diff preview \u2500\u2500"));
+        console.log(chalk8.dim("  \u2500\u2500 diff preview \u2500\u2500"));
         console.log(diff);
         console.log();
       } else if (call.arguments["insert_after_line"] !== void 0) {
         const line = Number(call.arguments["insert_after_line"]);
         const insertContent = String(call.arguments["insert_content"] ?? "");
         const insertLines = insertContent.split("\n");
-        const preview = insertLines.slice(0, 5).map((l) => chalk7.green(`+ ${l}`)).join("\n");
-        const more = insertLines.length > 5 ? chalk7.dim(`
+        const preview = insertLines.slice(0, 5).map((l) => chalk8.green(`+ ${l}`)).join("\n");
+        const more = insertLines.length > 5 ? chalk8.dim(`
   ... (+${insertLines.length - 5} more lines)`) : "";
-        console.log(chalk7.dim(`  \u2500\u2500 insert after line ${line} \u2500\u2500`));
+        console.log(chalk8.dim(`  \u2500\u2500 insert after line ${line} \u2500\u2500`));
         console.log(preview + more);
         console.log();
       } else if (call.arguments["delete_from_line"] !== void 0) {
@@ -4570,10 +4916,10 @@ var ToolExecutor = class {
         }
         const fileLines = fileContent.split("\n");
         const deleted = fileLines.slice(from - 1, to);
-        const preview = deleted.slice(0, 5).map((l) => chalk7.red(`- ${l}`)).join("\n");
-        const more = deleted.length > 5 ? chalk7.dim(`
+        const preview = deleted.slice(0, 5).map((l) => chalk8.red(`- ${l}`)).join("\n");
+        const more = deleted.length > 5 ? chalk8.dim(`
   ... (-${deleted.length - 5} more lines)`) : "";
-        console.log(chalk7.dim(`  \u2500\u2500 delete lines ${from}\u2013${to} \u2500\u2500`));
+        console.log(chalk8.dim(`  \u2500\u2500 delete lines ${from}\u2013${to} \u2500\u2500`));
         console.log(preview + more);
         console.log();
       }
@@ -4581,27 +4927,27 @@ var ToolExecutor = class {
   }
   printToolResult(name, content, isError, wasTruncated) {
     if (isError) {
-      console.log(chalk7.red(`\u26A0 ${name} error: `) + chalk7.gray(content.slice(0, 300)));
+      console.log(chalk8.red(`\u26A0 ${name} error: `) + chalk8.gray(content.slice(0, 300)));
     } else {
       const lines = content.split("\n");
       const maxLines = name === "run_interactive" ? 40 : 8;
       const preview = lines.slice(0, maxLines).join("\n");
-      const moreLines = lines.length > maxLines ? chalk7.gray(`
+      const moreLines = lines.length > maxLines ? chalk8.gray(`
   ... (${lines.length - maxLines} more lines)`) : "";
-      const truncatedNote = wasTruncated ? chalk7.yellow(`
-  \u26A1 \u8F93\u51FA\u5DF2\u622A\u65AD\u81F3 ${MAX_TOOL_OUTPUT_CHARS} \u5B57\u7B26\u540E\u8FD4\u56DE\u7ED9 AI`) : "";
-      console.log(chalk7.green("\u2713 Result: ") + chalk7.gray(preview) + moreLines + truncatedNote);
+      const truncatedNote = wasTruncated ? chalk8.yellow(`
+  \u26A1 \u8F93\u51FA\u5DF2\u622A\u65AD\u81F3 ${MAX_TOOL_OUTPUT_CHARS2} \u5B57\u7B26\u540E\u8FD4\u56DE\u7ED9 AI`) : "";
+      console.log(chalk8.green("\u2713 Result: ") + chalk8.gray(preview) + moreLines + truncatedNote);
     }
     console.log();
   }
   confirm(call, level) {
-    const color = level === "destructive" ? chalk7.red : chalk7.yellow;
+    const color = level === "destructive" ? chalk8.red : chalk8.yellow;
     const label = level === "destructive" ? "\u26A0 DESTRUCTIVE" : "\u270E Write";
     console.log();
-    console.log(color(`${label} operation: `) + chalk7.bold(call.name));
+    console.log(color(`${label} operation: `) + chalk8.bold(call.name));
     for (const [key, val] of Object.entries(call.arguments)) {
       const valStr = typeof val === "string" && val.length > 200 ? val.slice(0, 200) + "..." : String(val);
-      console.log(chalk7.gray(`  ${key}: `) + valStr);
+      console.log(chalk8.gray(`  ${key}: `) + valStr);
     }
     if (!this.rl) {
       process.stdout.write(color("No readline: auto-rejected.\n"));
@@ -4625,7 +4971,7 @@ var ToolExecutor = class {
       };
       const onLine = (line) => cleanup(line.trim().toLowerCase());
       this.cancelConfirmFn = () => {
-        process.stdout.write(chalk7.gray("\n(cancelled)\n"));
+        process.stdout.write(chalk8.gray("\n(cancelled)\n"));
         cleanup("n");
       };
       rl.once("line", onLine);
@@ -4644,7 +4990,7 @@ var streamToFileContext = {
 
 // src/repl/setup-wizard.ts
 import { password, select, input } from "@inquirer/prompts";
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 var PROVIDERS = [
   { value: "claude", name: "Claude (Anthropic)" },
   { value: "gemini", name: "Gemini (Google)" },
@@ -4661,7 +5007,7 @@ var SetupWizard = class {
     this.config = config;
   }
   async runFirstRun() {
-    console.log(chalk8.bold.cyan("\nWelcome to ai-cli!\n"));
+    console.log(chalk9.bold.cyan("\nWelcome to ai-cli!\n"));
     console.log("Let's set up your first AI provider.\n");
     try {
       const providerId = await select({
@@ -4671,19 +5017,19 @@ var SetupWizard = class {
       await this.setupProvider(providerId);
       this.config.set("defaultProvider", providerId);
       this.config.save();
-      console.log(chalk8.green("\nSetup complete! Starting ai-cli...\n"));
+      console.log(chalk9.green("\nSetup complete! Starting ai-cli...\n"));
       return true;
     } catch {
       return false;
     }
   }
   async runFull() {
-    console.log(chalk8.bold.cyan("\nai-cli Configuration\n"));
+    console.log(chalk9.bold.cyan("\nai-cli Configuration\n"));
     let running = true;
     while (running) {
       const currentProxy = this.config.get("proxy") ?? "";
-      const proxyStatus = currentProxy ? chalk8.green(`[${currentProxy}]`) : chalk8.gray("[\u672A\u914D\u7F6E]");
-      const googleKeyStatus = this.config.getApiKey("google-search") ? chalk8.green("[\u5DF2\u914D\u7F6E]") : chalk8.gray("[\u672A\u914D\u7F6E]");
+      const proxyStatus = currentProxy ? chalk9.green(`[${currentProxy}]`) : chalk9.gray("[\u672A\u914D\u7F6E]");
+      const googleKeyStatus = this.config.getApiKey("google-search") ? chalk9.green("[\u5DF2\u914D\u7F6E]") : chalk9.gray("[\u672A\u914D\u7F6E]");
       const action = await select({
         message: "What would you like to configure?",
         choices: [
@@ -4701,7 +5047,7 @@ var SetupWizard = class {
       } else if (action === "apikey") {
         const choicesWithStatus = PROVIDERS.map((p) => {
           const existingKey = this.config.getApiKey(p.value);
-          const status = existingKey ? chalk8.green(`[${maskKey(existingKey)}]`) : chalk8.gray("[\u672A\u914D\u7F6E]");
+          const status = existingKey ? chalk9.green(`[${maskKey(existingKey)}]`) : chalk9.gray("[\u672A\u914D\u7F6E]");
           return { value: p.value, name: `${p.name}  ${status}` };
         });
         const providerId = await select({
@@ -4716,7 +5062,7 @@ var SetupWizard = class {
         });
         this.config.set("defaultProvider", providerId);
         this.config.save();
-        console.log(chalk8.green(`Default provider set to: ${providerId}
+        console.log(chalk9.green(`Default provider set to: ${providerId}
 `));
       } else {
         running = false;
@@ -4730,9 +5076,9 @@ var SetupWizard = class {
     console.log(`
 Managing ${displayName} API Key`);
     if (existingKey) {
-      console.log(chalk8.gray(`  Current: ${maskKey(existingKey)}`));
+      console.log(chalk9.gray(`  Current: ${maskKey(existingKey)}`));
     } else {
-      console.log(chalk8.gray("  Current: (\u672A\u914D\u7F6E)"));
+      console.log(chalk9.gray("  Current: (\u672A\u914D\u7F6E)"));
     }
     const choices = existingKey ? [
       { value: "keep", name: "\u4FDD\u6301\u4E0D\u53D8 (keep current key)" },
@@ -4744,7 +5090,7 @@ Managing ${displayName} API Key`);
       choices
     });
     if (action === "show" && existingKey) {
-      console.log(chalk8.yellow(`
+      console.log(chalk9.yellow(`
   \u5B8C\u6574 Key: ${existingKey}
 `));
       const updateAfterShow = await select({
@@ -4763,15 +5109,15 @@ Managing ${displayName} API Key`);
       validate: (val) => val.length > 0 || "API key cannot be empty"
     });
     this.config.setApiKey(providerId, newKey);
-    console.log(chalk8.green(`API key saved for ${displayName}: ${maskKey(newKey)}
+    console.log(chalk9.green(`API key saved for ${displayName}: ${maskKey(newKey)}
 `));
   }
   async setupProxy() {
     const current = this.config.get("proxy") ?? "";
     console.log("\nHTTP/HTTPS Proxy Configuration");
-    console.log(chalk8.gray("  Used for providers that require a proxy (e.g. Gemini in China)"));
+    console.log(chalk9.gray("  Used for providers that require a proxy (e.g. Gemini in China)"));
     if (current) {
-      console.log(chalk8.gray(`  Current: ${current}`));
+      console.log(chalk9.gray(`  Current: ${current}`));
     }
     const action = await select({
       message: "Action:",
@@ -4788,7 +5134,7 @@ Managing ${displayName} API Key`);
     if (action === "clear") {
       this.config.set("proxy", void 0);
       this.config.save();
-      console.log(chalk8.green("Proxy cleared.\n"));
+      console.log(chalk9.green("Proxy cleared.\n"));
       return;
     }
     const proxyUrl = await input({
@@ -4804,21 +5150,21 @@ Managing ${displayName} API Key`);
     });
     this.config.set("proxy", proxyUrl);
     this.config.save();
-    console.log(chalk8.green(`Proxy saved: ${proxyUrl}
+    console.log(chalk9.green(`Proxy saved: ${proxyUrl}
 `));
   }
   async setupGoogleSearch() {
     console.log("\nGoogle Custom Search Configuration");
-    console.log(chalk8.gray("  Enables AI to search the web via google_search tool"));
-    console.log(chalk8.gray("  Requires: API Key + Search Engine ID (cx)"));
-    console.log(chalk8.gray("  Get API Key: https://console.cloud.google.com/apis/credentials"));
-    console.log(chalk8.gray("  Get CX: https://programmablesearchengine.google.com/"));
+    console.log(chalk9.gray("  Enables AI to search the web via google_search tool"));
+    console.log(chalk9.gray("  Requires: API Key + Search Engine ID (cx)"));
+    console.log(chalk9.gray("  Get API Key: https://console.cloud.google.com/apis/credentials"));
+    console.log(chalk9.gray("  Get CX: https://programmablesearchengine.google.com/"));
     const existingKey = this.config.getApiKey("google-search");
     if (existingKey) {
-      console.log(chalk8.gray(`
+      console.log(chalk9.gray(`
   API Key: ${maskKey(existingKey)}`));
     } else {
-      console.log(chalk8.gray("\n  API Key: (\u672A\u914D\u7F6E)"));
+      console.log(chalk9.gray("\n  API Key: (\u672A\u914D\u7F6E)"));
     }
     const keyAction = await select({
       message: "API Key:",
@@ -4836,14 +5182,14 @@ Managing ${displayName} API Key`);
         validate: (val) => val.length > 0 || "API key cannot be empty"
       });
       this.config.setApiKey("google-search", newKey);
-      console.log(chalk8.green(`  API Key saved: ${maskKey(newKey)}`));
+      console.log(chalk9.green(`  API Key saved: ${maskKey(newKey)}`));
     }
     const existingCx = this.config.get("googleSearchEngineId") ?? "";
     if (existingCx) {
-      console.log(chalk8.gray(`
+      console.log(chalk9.gray(`
   Search Engine ID: ${existingCx}`));
     } else {
-      console.log(chalk8.gray("\n  Search Engine ID: (\u672A\u914D\u7F6E)"));
+      console.log(chalk9.gray("\n  Search Engine ID: (\u672A\u914D\u7F6E)"));
     }
     const cxAction = await select({
       message: "Search Engine ID (cx):",
@@ -4863,7 +5209,7 @@ Managing ${displayName} API Key`);
       });
       this.config.set("googleSearchEngineId", newCx);
       this.config.save();
-      console.log(chalk8.green(`  Search Engine ID saved: ${newCx}`));
+      console.log(chalk9.green(`  Search Engine ID saved: ${newCx}`));
     }
     console.log();
   }
@@ -5832,7 +6178,7 @@ ${response.content.trim()}
     }
   }
   refreshPrompt() {
-    const promptStr = this.planMode ? chalk9.green(`[${this.currentProvider}]`) + chalk9.yellow("[PLAN]") + chalk9.white(" > ") : chalk9.green(`[${this.currentProvider}]`) + chalk9.white(" > ");
+    const promptStr = this.planMode ? chalk10.green(`[${this.currentProvider}]`) + chalk10.yellow("[PLAN]") + chalk10.white(" > ") : chalk10.green(`[${this.currentProvider}]`) + chalk10.white(" > ");
     this.rl.setPrompt(promptStr);
   }
   showPrompt() {
@@ -5867,13 +6213,13 @@ ${response.content.trim()}
       if (layers.length === 1) {
         const l = layers[0];
         process.stdout.write(
-          chalk9.dim(`  \u{1F4C4} Context loaded: ${l.filePath} (${l.charCount} chars)
+          chalk10.dim(`  \u{1F4C4} Context loaded: ${l.filePath} (${l.charCount} chars)
 `)
         );
       } else {
         const summary = layers.map((l) => `${l.level}: ${l.charCount}`).join(", ");
         process.stdout.write(
-          chalk9.dim(`  \u{1F4C4} Context loaded: ${layers.length} layers (${summary} chars)
+          chalk10.dim(`  \u{1F4C4} Context loaded: ${layers.length} layers (${summary} chars)
 `)
         );
       }
@@ -5881,25 +6227,25 @@ ${response.content.trim()}
     const memoryInfo = this.loadMemoryContent();
     if (memoryInfo) {
       process.stdout.write(
-        chalk9.dim(`  \u{1F4DD} Memory loaded: ${memoryInfo.entryCount} entries (${memoryInfo.content.length} chars)
+        chalk10.dim(`  \u{1F4DD} Memory loaded: ${memoryInfo.entryCount} entries (${memoryInfo.content.length} chars)
 `)
       );
     }
     const devStateContent = loadDevState();
     if (devStateContent) {
       process.stdout.write(
-        chalk9.dim(`  \u{1F504} Dev state handoff: loaded (${devStateContent.length} chars)
+        chalk10.dim(`  \u{1F504} Dev state handoff: loaded (${devStateContent.length} chars)
 `)
       );
     }
     if (gitCtx) {
-      const statusSummary = gitCtx.stagedFiles.length + gitCtx.changedFiles.length > 0 ? chalk9.yellow(` (${gitCtx.stagedFiles.length} staged, ${gitCtx.changedFiles.length} modified)`) : chalk9.dim(" (clean)");
+      const statusSummary = gitCtx.stagedFiles.length + gitCtx.changedFiles.length > 0 ? chalk10.yellow(` (${gitCtx.stagedFiles.length} staged, ${gitCtx.changedFiles.length} modified)`) : chalk10.dim(" (clean)");
       process.stdout.write(
-        chalk9.dim(`  \u{1F500} Git branch: `) + chalk9.cyan(gitCtx.branch) + statusSummary + "\n"
+        chalk10.dim(`  \u{1F500} Git branch: `) + chalk10.cyan(gitCtx.branch) + statusSummary + "\n"
       );
     }
     if (pluginCount > 0) {
-      process.stdout.write(chalk9.dim(`  \u{1F50C} Plugins loaded: ${pluginCount} tool(s) from plugins/
+      process.stdout.write(chalk10.dim(`  \u{1F50C} Plugins loaded: ${pluginCount} tool(s) from plugins/
 `));
     }
     const mcpServers = this.config.get("mcpServers");
@@ -5914,7 +6260,7 @@ ${response.content.trim()}
       const totalTools = this.mcpManager.getTotalToolCount();
       if (connectedCount > 0) {
         process.stdout.write(
-          chalk9.dim(`  \u{1F50C} MCP: ${connectedCount} server(s), ${totalTools} tool(s)
+          chalk10.dim(`  \u{1F50C} MCP: ${connectedCount} server(s), ${totalTools} tool(s)
 `)
         );
       }
@@ -5982,13 +6328,13 @@ ${response.content.trim()}
     const { parts, hasImage, refs } = parseAtReferences(userInput, process.cwd());
     for (const ref of refs) {
       if (ref.type === "notfound") {
-        process.stdout.write(chalk9.yellow(`  \u26A0 File not found: ${ref.path}
+        process.stdout.write(chalk10.yellow(`  \u26A0 File not found: ${ref.path}
 `));
       } else if (ref.type === "image") {
-        process.stdout.write(chalk9.dim(`  \u{1F4CE} Image: ${ref.path}
+        process.stdout.write(chalk10.dim(`  \u{1F4CE} Image: ${ref.path}
 `));
       } else {
-        process.stdout.write(chalk9.dim(`  \u{1F4C4} File: ${ref.path}
+        process.stdout.write(chalk10.dim(`  \u{1F4C4} File: ${ref.path}
 `));
       }
     }
@@ -5997,13 +6343,13 @@ ${response.content.trim()}
       const visionHint = this.getVisionModelHint();
       if (visionHint) {
         process.stdout.write(
-          chalk9.yellow(`  \u2716 Vision not supported \u2013 ${visionHint}
+          chalk10.yellow(`  \u2716 Vision not supported \u2013 ${visionHint}
 `)
         );
         return;
       }
       process.stdout.write(
-        chalk9.dim(`  \u{1F5BC}  Vision request \u2013 sending image to ${this.currentProvider}
+        chalk10.dim(`  \u{1F5BC}  Vision request \u2013 sending image to ${this.currentProvider}
 `)
       );
     }
@@ -6159,29 +6505,8 @@ ${response.content.trim()}
         }
         if ("content" in result) {
           spinner.stop();
-          let finalContent;
-          if (useStreaming) {
-            const stream = provider.chatStream({
-              messages: apiMessages,
-              model: this.currentModel,
-              systemPrompt,
-              stream: true,
-              temperature: modelParams.temperature,
-              maxTokens: modelParams.maxTokens,
-              timeout: modelParams.timeout,
-              thinking: modelParams.thinking,
-              ...extraMessages.length > 0 ? { _extraMessages: extraMessages } : {}
-            });
-            const { content: streamContent, usage: streamUsage } = await this.renderer.renderStream(stream);
-            finalContent = streamContent;
-            if (streamUsage) {
-              roundUsage.inputTokens += streamUsage.inputTokens;
-              roundUsage.outputTokens += streamUsage.outputTokens;
-            }
-          } else {
-            this.renderer.renderResponse(result.content);
-            finalContent = result.content;
-          }
+          const finalContent = result.content;
+          this.renderer.renderResponse(finalContent);
           lastResponseStore.content = finalContent;
           session.addMessage({
             role: "assistant",
@@ -6257,6 +6582,11 @@ ${response.content.trim()}
         streamToFileContext.extraMessages = extraMessages;
         streamToFileContext.temperature = modelParams.temperature;
         streamToFileContext.timeout = modelParams.timeout;
+        spawnAgentContext.provider = provider;
+        spawnAgentContext.model = this.currentModel;
+        spawnAgentContext.systemPrompt = systemPrompt;
+        spawnAgentContext.modelParams = modelParams;
+        spawnAgentContext.configManager = this.config;
         const toolResults = await this.toolExecutor.executeAll(result.toolCalls);
         const reasoningContent = "reasoningContent" in result ? result.reasoningContent : void 0;
         const newMsgs = provider.buildToolResultMessages(result.toolCalls, toolResults, reasoningContent);
@@ -6370,7 +6700,7 @@ ${response.content.trim()}
     this.mcpManager?.closeAll().catch(() => {
     });
     this.rl.close();
-    console.log(chalk9.gray("\nGoodbye!"));
+    console.log(chalk10.gray("\nGoodbye!"));
     process.exit(0);
   }
 };
@@ -6378,6 +6708,11 @@ ${response.content.trim()}
 // src/core/event-bus.ts
 import { EventEmitter } from "events";
 var EventBus = class extends EventEmitter {
+  constructor() {
+    super();
+    this.on("app.error", () => {
+    });
+  }
   emit(event, data) {
     return super.emit(event, data);
   }
@@ -6594,11 +6929,11 @@ async function startRepl(options) {
     }
   }
   if (options.provider) {
-    config.set("defaultProvider", options.provider);
+    config.setTransient("defaultProvider", options.provider);
   }
   if (options.stream === false) {
     const ui = config.get("ui");
-    config.set("ui", { ...ui, streaming: false });
+    config.setTransient("ui", { ...ui, streaming: false });
   }
   const events = new EventBus();
   const providers = new ProviderRegistry();
@@ -6629,7 +6964,7 @@ Provider '${options.provider}' is not configured. Run: ai-cli config
   if (options.model) {
     const defaultModels = config.get("defaultModels");
     const provider = options.provider ?? config.getDefaultProvider();
-    config.set("defaultModels", { ...defaultModels, [provider]: options.model });
+    config.setTransient("defaultModels", { ...defaultModels, [provider]: options.model });
   }
   process.on("SIGTERM", async () => {
     await sessions.save();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.1.21",
+  "version": "0.1.22",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",