micro-models-agent 0.39.0 → 0.40.0

package/dist/main.js

@@ -2064,12 +2064,7 @@ var init_security = __esm(() => {
     auditNotifier: {
       enabled: false,
       minSeverity: "medium",
-      eventTypes: [
-        "security_block",
-        "bash_command",
-        "file_operation",
-        "network_request"
-      ],
+      eventTypes: ["security_block", "bash_command", "file_operation", "network_request"],
       maxRetries: 3,
       webhookTimeout: 5000
     }
@@ -2151,8 +2146,12 @@ var init_config = __esm(() => {
   LANGUAGE_MAP = {
     ts: "typescript",
     tsx: "typescript",
+    mts: "typescript",
+    cts: "typescript",
     js: "javascript",
     jsx: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
     py: "python",
     rs: "rust",
     go: "go",
@@ -2183,13 +2182,21 @@ var init_defaults = __esm(() => {
     moe: {
       enabled: false
     },
+    tools: {
+      defaultTags: ["file", "code"],
+      enableOnDemand: true
+    },
     experts: {
       code: {
         model: "qwen/qwen3.5-9b",
         tool_tags: ["file", "code", "shell"],
         max_attempts: 3
       },
-      research: { model: "qwen/qwen3.5-9b", tool_tags: ["research"], max_attempts: 3 },
+      research: {
+        model: "qwen/qwen3.5-9b",
+        tool_tags: ["research"],
+        max_attempts: 3
+      },
       browser: {
         model: "qwen/qwen3.5-9b",
         tool_tags: ["browser", "vision"],
@@ -2509,6 +2516,7 @@ Command: {command}`,
     "lsp.check_notfound": "Path not found: {path}",
     "lsp.check_unsupported": "No LSP server configured for: {path}",
     "lsp.check_clean": "No errors or warnings detected ({count} file(s) checked).",
+    "lsp.startup_header": "[Existing project errors (checked at session start) — fix these before continuing]:",
     "cli.description": "Micro Models Agent — AI coding agent for small models",
     "cli.init": "Run interactive setup wizard",
     "cli.config_saved": "Configuration saved to ~/.mma/config.json",
@@ -2643,6 +2651,8 @@ Available commands:`,
     "repl.reasoning_usage": "Usage: /reasoning",
     "repl.status": "Show agent status",
     "repl.status_usage": "Usage: /status",
+    "repl.plugins": "List loaded plugins",
+    "repl.plugins_usage": "Usage: /plugins [--all]",
     "repl.sessions": "List all sessions (* active)",
     "repl.sessions_usage": "Usage: /sessions",
     "repl.new": "Create a new session",
@@ -2899,7 +2909,13 @@ Use this knowledge to answer the user's question.`,
     "updater.available": "[updater] Update available: {current} → {latest}. Run `npm install -g micro-models-agent` to upgrade.",
     "updater.installing": "[updater] Installing {latest} globally (current: {current})…",
     "updater.installed": "[updater] Installed {latest}. Restart MMA to use it (was {current}).",
-    "updater.install_failed": "[updater] Failed to install {latest}: {error}. Update manually with `npm install -g micro-models-agent`."
+    "updater.install_failed": "[updater] Failed to install {latest}: {error}. Update manually with `npm install -g micro-models-agent`.",
+    "tools.enable_no_tags": 'enable_tools requires at least one tag in the "tags" array.',
+    "tools.enable_no_executor": "Tool executor is not available — cannot enumerate enabled tools.",
+    "tools.enable_already_active": "Tool tags already active: {tags}.",
+    "tools.enable_added": "Enabled tool tags: {tags}. Available tools now: {tools}",
+    "tools.hidden_header": "Additional tools (enable on demand via enable_tools or route to subagent tool_tags):",
+    "tool.friendly.enable_tools": "Enable tools"
   };
 });
 
@@ -3126,6 +3142,7 @@ var init_ru = __esm(() => {
     "lsp.check_notfound": "Путь не найден: {path}",
     "lsp.check_unsupported": "Для файла не настроен LSP-сервер: {path}",
     "lsp.check_clean": "Ошибок и предупреждений не обнаружено (проверено файлов: {count}).",
+    "lsp.startup_header": "[Существующие ошибки проекта (проверено при старте сессии) — исправьте их перед продолжением]:",
     "cli.description": "Micro Models Agent — ИИ-агент для кодинга на малых моделях",
     "cli.init": "Запустить мастер настройки",
     "cli.config_saved": "Конфигурация сохранена в ~/.mma/config.json",
@@ -3256,6 +3273,8 @@ var init_ru = __esm(() => {
     "repl.reasoning_usage": "Использование: /reasoning",
     "repl.status": "Показать статус агента",
     "repl.status_usage": "Использование: /status",
+    "repl.plugins": "Список загруженных плагинов",
+    "repl.plugins_usage": "Использование: /plugins [--all]",
     "repl.sessions": "Список всех сессий (* активная)",
     "repl.sessions_usage": "Использование: /sessions",
     "repl.new": "Создать новую сессию",
@@ -3518,7 +3537,13 @@ var init_ru = __esm(() => {
     "updater.available": "[updater] Доступно обновление: {current} → {latest}. Выполните `npm install -g micro-models-agent` для обновления.",
     "updater.installing": "[updater] Установка {latest} глобально (текущая: {current})…",
     "updater.installed": "[updater] Установлена {latest}. Перезапустите MMA для применения (была {current}).",
-    "updater.install_failed": "[updater] Не удалось установить {latest}: {error}. Обновите вручную: `npm install -g micro-models-agent`."
+    "updater.install_failed": "[updater] Не удалось установить {latest}: {error}. Обновите вручную: `npm install -g micro-models-agent`.",
+    "tools.enable_no_tags": 'enable_tools требует хотя бы один тег в массиве "tags".',
+    "tools.enable_no_executor": "Исполнитель тулов недоступен — невозможно перечислить включённые тулы.",
+    "tools.enable_already_active": "Теги тулов уже активны: {tags}.",
+    "tools.enable_added": "Включены теги тулов: {tags}. Теперь доступны тулы: {tools}",
+    "tools.hidden_header": "Дополнительные тулы (включите по требованию через enable_tools или маршрутизируйте через subagent tool_tags):",
+    "tool.friendly.enable_tools": "Включить тулы"
   };
 });
 
@@ -3868,13 +3893,7 @@ __export(exports_config, {
   saveConfig: () => saveConfig,
   loadConfig: () => loadConfig
 });
-import {
-  existsSync as existsSync4,
-  readFileSync as readFileSync3,
-  unlinkSync,
-  writeFileSync as writeFileSync3,
-  mkdirSync as mkdirSync2
-} from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, unlinkSync, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2 } from "fs";
 import { join as join4, dirname } from "path";
 function restoreDangerousPatterns(patterns, defaults) {
   const fallback = Array.isArray(defaults) ? defaults : [];
@@ -4011,6 +4030,12 @@ function loadConfig(options) {
 }
 function validateConfig(config, allToolTags) {
   const errors = validateExpertConfig(config, allToolTags);
+  const knownTags = new Set(allToolTags);
+  for (const tag of config.tools?.defaultTags ?? []) {
+    if (!knownTags.has(tag)) {
+      errors.push(`tools.defaultTags references unknown tag "${tag}". Known tags: ${Array.from(knownTags).join(", ")}`);
+    }
+  }
   if (errors.length > 0) {
     throw new Error(`Config validation failed:
 ${errors.join(`
@@ -5409,8 +5434,10 @@ class ToolRegistry {
     });
   }
   getAllForLLM(tags) {
-    const tools = tags ? this.getByTags(tags) : this.getAll();
-    return tools.map((t2) => ({
+    const all = this.getAll();
+    const tagSet = new Set(tags ?? []);
+    const selected = tagSet.size === 0 ? all : all.filter((t2) => t2.alwaysOn || t2.tags && t2.tags.some((tag) => tagSet.has(tag)));
+    return selected.map((t2) => ({
       name: t2.name,
       description: t2.description,
       parameters: t2.parameters,
@@ -7882,7 +7909,10 @@ var init_process_log = __esm(() => {
       type: "object",
       properties: {
         id: { type: "string", description: "Process id from bash output or process_list" },
-        tail: { type: "number", description: `Number of trailing lines to show (default: ${DEFAULT_TAIL}, max 300)` }
+        tail: {
+          type: "number",
+          description: `Number of trailing lines to show (default: ${DEFAULT_TAIL}, max 300)`
+        }
       },
       required: ["id"]
     },
@@ -9333,6 +9363,8 @@ function filterToolsByTags(tools, toolTags) {
     return tools;
   const tagSet = new Set(toolTags);
   return tools.filter((t2) => {
+    if (t2.alwaysOn)
+      return true;
     if (!t2.tags || t2.tags.length === 0)
       return false;
     return t2.tags.some((tag) => tagSet.has(tag));
@@ -10142,7 +10174,10 @@ class StepVerifier {
       await this.runAsync(`bun run ${scriptName}`, this.baseDir, 60000);
       return { passed: true, message: t("verify.script_passed", { script: scriptName }) };
     } catch (e) {
-      return { passed: false, message: t("verify.script_failed", { script: scriptName, message: e.message }) };
+      return {
+        passed: false,
+        message: t("verify.script_failed", { script: scriptName, message: e.message })
+      };
     }
   }
   async runTypeCheck() {
@@ -10159,10 +10194,7 @@ class StepVerifier {
     }
   }
   async runTypeCheckForFile(filePath) {
-    const projectRoot = findProjectRoot(filePath, this.baseDir, [
-      "tsconfig.json",
-      "package.json"
-    ]);
+    const projectRoot = findProjectRoot(filePath, this.baseDir, ["tsconfig.json", "package.json"]);
     const tsconfigPath = join11(projectRoot, "tsconfig.json");
     if (!existsSync20(tsconfigPath)) {
       return { passed: true, message: "No tsconfig.json found — skipping type check" };
@@ -10244,7 +10276,7 @@ class StepVerifier {
   }
   async validateSyntax(filePath) {
     const ext = extname2(filePath);
-    if (ext === ".ts" || ext === ".tsx") {
+    if (ext === ".ts" || ext === ".tsx" || ext === ".cts" || ext === ".mts") {
       try {
         await this.runAsync(`npx tsc --noEmit --skipLibCheck ${filePath}`, this.baseDir, 1e4);
         return true;
@@ -10259,7 +10291,7 @@ class StepVerifier {
         return true;
       }
     }
-    if (ext === ".js" || ext === ".jsx") {
+    if (ext === ".js" || ext === ".jsx" || ext === ".cjs" || ext === ".mjs") {
       try {
         await this.runAsync(`node --check ${filePath}`, this.baseDir, 5000);
         return true;
@@ -10366,15 +10398,7 @@ async function runWithMoE(deps, input, fallback, opts = {}) {
   onMeta?.(`✅ Execution complete: ${planResults.results.filter((r) => r.success).length}/${planResults.results.length} succeeded
 `);
   const verifier = new StepVerifier(baseDir);
-  const knownTags = [
-    "file",
-    "code",
-    "shell",
-    "research",
-    "browser",
-    "vision",
-    "core"
-  ];
+  const knownTags = ["file", "code", "shell", "research", "browser", "vision", "core"];
   const verification = await verifier.verifyMoEManifest(plan, config, knownTags);
   onPhase?.("thinking");
   let verifyResult;
@@ -10654,13 +10678,17 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
     let suppressRepetitionRetry = false;
     let repeatedToolCount = 0;
     const MAX_REPEATED_TOOL_CALLS = 2;
-    const allToolsForBudget = toolExecutor.getToolDefinitions(this.deps.toolTags);
-    const boundedToolNames = new Set(allToolsForBudget.filter((t2) => t2.boundedOutput).map((t2) => t2.name));
-    const toolTokenEstimate = allToolsForBudget.reduce((sum, t2) => sum + Math.ceil((t2.description.length + JSON.stringify(t2.parameters).length) / 4), 0);
+    let allToolsForBudget = toolExecutor.getToolDefinitions(this.deps.toolTags);
+    let boundedToolNames = new Set(allToolsForBudget.filter((t2) => t2.boundedOutput).map((t2) => t2.name));
+    let toolTokenEstimate = allToolsForBudget.reduce((sum, t2) => sum + Math.ceil((t2.description.length + JSON.stringify(t2.parameters).length) / 4), 0);
     contextManager.setToolTokens(toolTokenEstimate);
     while (iteration < config.maxToolIterations && !this.shutdownRequested) {
       iteration++;
       contextManager.noteIteration();
+      allToolsForBudget = toolExecutor.getToolDefinitions(this.deps.toolTags);
+      boundedToolNames = new Set(allToolsForBudget.filter((t2) => t2.boundedOutput).map((t2) => t2.name));
+      toolTokenEstimate = allToolsForBudget.reduce((sum, t2) => sum + Math.ceil((t2.description.length + JSON.stringify(t2.parameters).length) / 4), 0);
+      contextManager.setToolTokens(toolTokenEstimate);
       pluginManager.runOnBeforeThink({
         iteration,
         logger,
@@ -11248,9 +11276,7 @@ class FactExtractor {
       new RegExp(`Deleted ${DRIVE}([\\w./\\\\-]+\\.[a-z]+)`, "gi"),
       new RegExp(`(?:Удалён|Файл удалён):? ${DRIVE}([\\w./\\\\-]+\\.[a-z]+)`, "gi")
     ];
-    const readPatterns = [
-      new RegExp(`── (${DRIVE}[\\w./\\\\-]+\\.[a-z]+) \\(`, "gi")
-    ];
+    const readPatterns = [new RegExp(`── (${DRIVE}[\\w./\\\\-]+\\.[a-z]+) \\(`, "gi")];
     const newFiles = [];
     const newDeleted = [];
     const newDecisions = [];
@@ -11613,11 +11639,7 @@ ${lines.join(`
       const text = getMessageText(m.content);
       return !text.startsWith("<system-summary>");
     });
-    this.messages = [
-      ...firstSystem ? [firstSystem] : [],
-      summary,
-      ...freshRecent
-    ];
+    this.messages = [...firstSystem ? [firstSystem] : [], summary, ...freshRecent];
     this.iterationsSinceCompaction = 0;
     if (this.onCompact) {
       this.onCompact(summary);
@@ -12311,7 +12333,11 @@ class Updater {
         signal: AbortSignal.timeout(5000)
       });
       if (!response.ok) {
-        return { updateAvailable: false, current: this.currentVersion, error: `HTTP ${response.status}` };
+        return {
+          updateAvailable: false,
+          current: this.currentVersion,
+          error: `HTTP ${response.status}`
+        };
       }
       const data = await response.json();
       const latest = data["dist-tags"]?.latest;
@@ -12635,7 +12661,7 @@ var init_subagent = __esm(() => {
         };
       }
       if (toolTags && toolTags.length > 0) {
-        const matched = ctx.toolExecutor.getToolDefinitions(toolTags);
+        const matched = ctx.toolExecutor.getRegistry().getByTags(toolTags);
         if (matched.length === 0) {
           return {
             success: false,
@@ -12984,15 +13010,7 @@ function isUrlAllowed(url, securityConfig) {
 function sanitizeUrl(url) {
   try {
     const urlObj = new URL(url);
-    const sensitiveKeys = [
-      "api_key",
-      "token",
-      "password",
-      "secret",
-      "access_token",
-      "auth",
-      "key"
-    ];
+    const sensitiveKeys = ["api_key", "token", "password", "secret", "access_token", "auth", "key"];
     const sanitizedParams = new URLSearchParams(urlObj.search);
     for (const key of sensitiveKeys) {
       if (sanitizedParams.has(key)) {
@@ -14567,8 +14585,11 @@ var init_recall = __esm(() => {
           if (results2.length === 0) {
             return { success: true, output: t("tool.recall.empty", { query }) };
           }
-          return { success: true, output: t("tool.recall.search_results", { category, results: results2.join(`
-`) }) };
+          return {
+            success: true,
+            output: t("tool.recall.search_results", { category, results: results2.join(`
+`) })
+          };
         }
         const results = store.search(query);
         if (results.length === 0) {
@@ -14576,7 +14597,10 @@ var init_recall = __esm(() => {
         }
         const formatted = results.map((r) => `[${r.file}] ${r.match}`).join(`
 `);
-        return { success: true, output: t("tool.recall.search_results", { category: "all", results: formatted }) };
+        return {
+          success: true,
+          output: t("tool.recall.search_results", { category: "all", results: formatted })
+        };
       } catch (err) {
         return { success: true, output: t("tool.memory_error", { error: String(err) }) };
       }
@@ -14998,13 +15022,7 @@ function extractInteractiveElements(html, maxElements = 30) {
     if (tag === "input" && attrs["type"] === "hidden")
       continue;
     const role = attrs["role"] || inferRole(tag, attrs["type"]);
-    const isInteractive = [
-      "a",
-      "button",
-      "input",
-      "textarea",
-      "select"
-    ].includes(tag) || attrs["role"] !== undefined;
+    const isInteractive = ["a", "button", "input", "textarea", "select"].includes(tag) || attrs["role"] !== undefined;
     if (!isInteractive)
       continue;
     if (tag === "a" && !attrs["href"])
@@ -15577,7 +15595,18 @@ function createBrowserTool() {
       properties: {
         action: {
           type: "string",
-          enum: ["open", "click", "type", "scroll", "back", "forward", "screenshot", "snapshot", "close", "wait"],
+          enum: [
+            "open",
+            "click",
+            "type",
+            "scroll",
+            "back",
+            "forward",
+            "screenshot",
+            "snapshot",
+            "close",
+            "wait"
+          ],
           description: "Browser action to perform"
         },
         url: {
@@ -15670,7 +15699,9 @@ async function readClipboardFallback() {
   const tmpPath = join22(process.env.TEMP || process.env.TMP || "/tmp", `mma-clip-${Date.now()}.png`);
   try {
     if (platform5() === "linux") {
-      execSync(`xclip -selection clipboard -t image/png -o > "${tmpPath}" 2>/dev/null`, { timeout: 5000 });
+      execSync(`xclip -selection clipboard -t image/png -o > "${tmpPath}" 2>/dev/null`, {
+        timeout: 5000
+      });
     } else {
       return null;
     }
@@ -15833,8 +15864,63 @@ var init_attach_image = __esm(() => {
   };
 });
 
+// src/tools/enable-tools.ts
+var enableToolsTool;
+var init_enable_tools = __esm(() => {
+  init_i18n();
+  enableToolsTool = {
+    name: "enable_tools",
+    description: "Enable hidden tool categories for the current session. Only the essential tools (file/code/shell) are active by default. Call this with the tags you need and they become available from the next turn. Available tags: file, code, shell, research, browser, vision, image, memory, core. Returns the newly available tools. To run a task in a separate context instead, use subagent with tool_tags.",
+    alwaysOn: true,
+    parameters: {
+      type: "object",
+      properties: {
+        tags: {
+          type: "array",
+          items: { type: "string" },
+          description: 'Tool tags to enable (e.g. ["research"] for web_search/web_fetch, ["browser"] for the browser, ["memory"] for remember/recall, ["shell"] for process management).'
+        }
+      },
+      required: ["tags"]
+    },
+    handler: async (ctx, args) => {
+      const requested = Array.isArray(args.tags) ? args.tags.map(String).filter(Boolean) : [];
+      if (requested.length === 0) {
+        return { success: false, output: t("tools.enable_no_tags") };
+      }
+      const active = ctx.activeToolTags ?? [];
+      const added = [];
+      for (const tag of requested) {
+        if (!active.includes(tag)) {
+          active.push(tag);
+          added.push(tag);
+        }
+      }
+      if (!ctx.toolExecutor) {
+        return { success: false, output: t("tools.enable_no_executor") };
+      }
+      const nowVisible = ctx.toolExecutor.getToolDefinitions([...active]).map((t2) => t2.name);
+      if (added.length === 0) {
+        return {
+          success: true,
+          output: t("tools.enable_already_active", {
+            tags: requested.join(", ")
+          })
+        };
+      }
+      return {
+        success: true,
+        output: t("tools.enable_added", {
+          tags: added.join(", "),
+          tools: nowVisible.join(", ")
+        })
+      };
+    }
+  };
+});
+
 // src/tools/index.ts
-function registerAllTools(registry2, skillsModule) {
+function registerAllTools(registry2, skillsModule, opts) {
   const tools = [
     readFileTool,
     writeFileTool,
@@ -15861,6 +15947,9 @@ function registerAllTools(registry2, skillsModule) {
     searchHistoryTool,
     attachImageTool
   ];
+  if (opts?.enableOnDemand !== false) {
+    tools.push(enableToolsTool);
+  }
   if (skillsModule) {
     tools.push(createLoadSkillTool(skillsModule));
   }
@@ -15898,6 +15987,42 @@ var init_tools = __esm(() => {
   init_recall();
   init_browser();
   init_attach_image();
+  init_enable_tools();
+});
+
+// src/tools/hidden-tools-block.ts
+function buildHiddenToolsBlock(allTools, activeTags) {
+  if (!allTools.length)
+    return "";
+  const activeSet = new Set(activeTags);
+  const visible = new Set;
+  for (const tool of allTools) {
+    if (tool.alwaysOn || tool.tags && tool.tags.some((tag) => activeSet.has(tag))) {
+      visible.add(tool.name);
+    }
+  }
+  const hidden = allTools.filter((tool) => !visible.has(tool.name));
+  if (hidden.length === 0)
+    return "";
+  const byTag = new Map;
+  for (const tool of hidden) {
+    const tags = tool.tags && tool.tags.length > 0 ? tool.tags : ["other"];
+    for (const tag of tags) {
+      if (!byTag.has(tag))
+        byTag.set(tag, []);
+      byTag.get(tag).push(tool);
+    }
+  }
+  const lines = [t("tools.hidden_header")];
+  for (const [tag, tools] of [...byTag.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
+    const names = [...new Set(tools.map((tool) => tool.name))].sort().join(", ");
+    lines.push(`- [${tag}] ${names}`);
+  }
+  return lines.join(`
+`);
+}
+var init_hidden_tools_block = __esm(() => {
+  init_i18n();
 });
 
 // src/modules/registry.ts
@@ -16080,7 +16205,7 @@ class LintOnWritePlugin {
     await this.runProjectTypeCheck(fullPath, ctx.baseDir, result);
   }
   async checkSyntax(filePath, ext, baseDir) {
-    if (ext === ".ts" || ext === ".tsx") {
+    if (ext === ".ts" || ext === ".tsx" || ext === ".cts" || ext === ".mts") {
       let content = "";
       try {
         content = readFileSync15(filePath, "utf-8");
@@ -16107,7 +16232,7 @@ class LintOnWritePlugin {
         return firstError.trim();
       }
     }
-    if (ext === ".js" || ext === ".jsx") {
+    if (ext === ".js" || ext === ".jsx" || ext === ".cjs" || ext === ".mjs") {
       try {
         await runAsync(`node --check "${filePath}"`, baseDir, 5000);
         return null;
@@ -16142,10 +16267,7 @@ class LintOnWritePlugin {
     }
   }
   async runProjectTypeCheck(filePath, baseDir, result) {
-    const projectRoot = findProjectRoot(filePath, baseDir, [
-      "tsconfig.json",
-      "package.json"
-    ]);
+    const projectRoot = findProjectRoot(filePath, baseDir, ["tsconfig.json", "package.json"]);
     const tsconfigPath = join23(projectRoot, "tsconfig.json");
     if (!existsSync29(tsconfigPath)) {
       return;
@@ -16904,6 +17026,7 @@ function createPlanToolDefinitions(deps) {
   return [
     {
       name: "plan",
+      alwaysOn: true,
       description: `Create, update, show, abort, list, switch, or re-plan multi-step plans.
 
 Actions:
@@ -16928,15 +17051,7 @@ Write CONCRETE steps with exact file paths and commands:
         properties: {
           action: {
             type: "string",
-            enum: [
-              "create",
-              "update",
-              "show",
-              "abort",
-              "list",
-              "switch",
-              "re-plan"
-            ]
+            enum: ["create", "update", "show", "abort", "list", "switch", "re-plan"]
           },
           title: { type: "string" },
           steps: { type: "array", items: { type: "string" } },
@@ -17229,6 +17344,7 @@ ${progress}`,
     },
     {
       name: "todo",
+      alwaysOn: true,
       description: "Manage sub-tasks within current plan step. Use to break down complex steps into smaller tasks.",
       parameters: {
         type: "object",
@@ -17324,6 +17440,7 @@ ${lines.join(`
     },
     {
       name: "verify",
+      alwaysOn: true,
       description: "Run verification for the current step. Checks files mentioned in the step description.",
       parameters: {
         type: "object",
@@ -17935,13 +18052,7 @@ var init_module = __esm(() => {
 });
 
 // src/modules/security/session-encryption.ts
-import {
-  readFileSync as readFileSync18,
-  writeFileSync as writeFileSync11,
-  existsSync as existsSync34,
-  readdirSync as readdirSync11,
-  unlinkSync as unlinkSync4
-} from "fs";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync11, existsSync as existsSync34, readdirSync as readdirSync11, unlinkSync as unlinkSync4 } from "fs";
 import { join as join27 } from "path";
 import { homedir as homedir8 } from "os";
 
@@ -19043,8 +19154,12 @@ class LspClient {
     const map = {
       ts: "typescript",
       tsx: "typescriptreact",
+      mts: "typescript",
+      cts: "typescript",
       js: "javascript",
       jsx: "javascriptreact",
+      mjs: "javascript",
+      cjs: "javascript",
       py: "python",
       go: "go",
       rs: "rust",
@@ -19210,6 +19325,7 @@ ${items}`;
         name: "lsp_check",
         description: 'Run static checks (LSP diagnostics) on a file or directory. For "check for errors" tasks: pass a file to check it, or a directory to check its source files (capped at 15). Returns [LSP errors] / [LSP warnings] for files with a configured LSP server.',
         tags: ["code", "check"],
+        alwaysOn: true,
         boundedOutput: true,
         timeoutMs: 90000,
         parameters: {
@@ -19337,9 +19453,133 @@ var init_lsp = __esm(() => {
   init_config();
 });
 
+// src/modules/lsp/startup-check.ts
+import { existsSync as existsSync39 } from "fs";
+import { join as join31 } from "path";
+import { spawn as spawn7 } from "child_process";
+async function runStartupHealthCheck(config, baseDir, deps = {}) {
+  if (!config.enabled)
+    return null;
+  try {
+    const result = await Promise.race([
+      runCheck(config, baseDir, deps),
+      new Promise((resolve23) => setTimeout(() => resolve23(null), STARTUP_CHECK_TIMEOUT_MS))
+    ]);
+    if (!result || result.lines.length === 0)
+      return null;
+    const content = `${t("lsp.startup_header")}
+${result.lines.join(`
+`)}`;
+    return {
+      content,
+      priority: "high",
+      essential: false,
+      estimatedTokens: Math.ceil(content.length / 4)
+    };
+  } catch {
+    return null;
+  }
+}
+async function runCheck(config, baseDir, deps) {
+  const projectRoot = findProjectRoot(baseDir, baseDir, ["tsconfig.json", "package.json"]);
+  if (existsSync39(join31(projectRoot, "tsconfig.json"))) {
+    const runTsc = deps.runTsc ?? runTscDefault;
+    const errors = await runTsc(projectRoot, STARTUP_CHECK_TIMEOUT_MS);
+    if (errors.length === 0)
+      return null;
+    return { lines: errors.slice(0, STARTUP_CHECK_ERROR_CAP) };
+  }
+  const client = deps.client ?? new LspClient;
+  const files = await collectCheckFiles(baseDir, config);
+  const lines = [];
+  let checked = 0;
+  for (const file of files.slice(0, STARTUP_CHECK_FILE_CAP)) {
+    const serverConfig = getServerForFile(file, config);
+    if (!serverConfig)
+      continue;
+    const fileRoot = findProjectRoot(file, baseDir, serverConfig.workspaceMarkers ?? []);
+    try {
+      const diags = await client.checkFile(file, baseDir, serverConfig, fileRoot);
+      checked++;
+      for (const d of diags) {
+        if (d.severity === 1) {
+          lines.push(formatStartupError(file, baseDir, d));
+        }
+      }
+    } catch {}
+  }
+  if (checked === 0 || lines.length === 0)
+    return null;
+  return { lines: lines.slice(0, STARTUP_CHECK_ERROR_CAP) };
+}
+async function runTscDefault(projectRoot, timeoutMs) {
+  return new Promise((resolve23) => {
+    const child = spawn7("npx", ["tsc", "--noEmit", "--skipLibCheck"], {
+      cwd: projectRoot,
+      shell: true,
+      windowsHide: true,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    let out = "";
+    child.stdout?.on("data", (d) => {
+      out += d.toString();
+    });
+    child.stderr?.on("data", (d) => {
+      out += d.toString();
+    });
+    const timer = setTimeout(() => {
+      child.kill();
+      resolve23([]);
+    }, timeoutMs);
+    child.on("error", () => {
+      clearTimeout(timer);
+      resolve23([]);
+    });
+    child.on("close", () => {
+      clearTimeout(timer);
+      resolve23(parseTscErrors(out));
+    });
+  });
+}
+function parseTscErrors(output) {
+  const lines = [];
+  for (const raw of output.split(`
+`)) {
+    const line = raw.replace(/^[a-zA-Z]:/, "").trim();
+    if (line.includes("error TS"))
+      lines.push(line);
+  }
+  return dedupe(lines);
+}
+function formatStartupError(file, baseDir, d) {
+  const rel = file.replace(baseDir.replace(/[\\/]$/, ""), "").replace(/^[\\/]/, "");
+  const line = d.range.start.line + 1;
+  const col = d.range.start.character + 1;
+  return `  ${rel || file}(${line},${col}): error: ${d.message}`;
+}
+function dedupe(lines) {
+  const seen = new Set;
+  const out = [];
+  for (const line of lines) {
+    if (!seen.has(line)) {
+      seen.add(line);
+      out.push(line);
+    }
+  }
+  return out;
+}
+var STARTUP_CHECK_FILE_CAP = 5, STARTUP_CHECK_TIMEOUT_MS = 60000, STARTUP_CHECK_ERROR_CAP = 20;
+var init_startup_check = __esm(() => {
+  init_i18n();
+  init_client2();
+  init_check_tool();
+  init_config();
+  init_project_root();
+});
+
 // src/modules/indexer/walker.ts
-import { readdirSync as readdirSync14, readFileSync as readFileSync22, statSync as statSync7, existsSync as existsSync39, watch } from "fs";
-import { join as join31, relative as relative3, extname as extname5 } from "path";
+import { readdirSync as readdirSync14, readFileSync as readFileSync22, statSync as statSync7, existsSync as existsSync40, watch } from "fs";
+import { join as join32, relative as relative3, extname as extname5 } from "path";
 
 class Indexer {
   baseDir;
@@ -19366,7 +19606,7 @@ class Indexer {
     let totalSize = 0;
     let count = 0;
     const walkDir2 = (dir) => {
-      if (!existsSync39(dir))
+      if (!existsSync40(dir))
         return;
       let entries;
       try {
@@ -19377,7 +19617,7 @@ class Indexer {
       for (const entry of entries) {
         if (count >= this.MAX_FILES)
           return;
-        const fullPath = join31(dir, entry);
+        const fullPath = join32(dir, entry);
         const relPath = relative3(this.baseDir, fullPath);
         const stat2 = statSync7(fullPath);
         if (stat2.isDirectory()) {
@@ -19440,19 +19680,19 @@ var init_walker = __esm(() => {
 });
 
 // src/modules/indexer/cache.ts
-import { readFileSync as readFileSync23, writeFileSync as writeFileSync14, existsSync as existsSync40, mkdirSync as mkdirSync17, rmSync as rmSync3 } from "fs";
-import { join as join32 } from "path";
+import { readFileSync as readFileSync23, writeFileSync as writeFileSync14, existsSync as existsSync41, mkdirSync as mkdirSync17, rmSync as rmSync3 } from "fs";
+import { join as join33 } from "path";
 
 class IndexCache {
   cachePath;
   cache = null;
   constructor(cacheDir) {
-    this.cachePath = join32(cacheDir, "index-cache.json");
+    this.cachePath = join33(cacheDir, "index-cache.json");
   }
   load() {
     if (this.cache)
       return this.cache;
-    if (!existsSync40(this.cachePath))
+    if (!existsSync41(this.cachePath))
       return null;
     try {
       this.cache = JSON.parse(readFileSync23(this.cachePath, "utf-8"));
@@ -19463,14 +19703,14 @@ class IndexCache {
   }
   save(result) {
     this.cache = result;
-    const dir = join32(this.cachePath, "..");
-    if (!existsSync40(dir))
+    const dir = join33(this.cachePath, "..");
+    if (!existsSync41(dir))
       mkdirSync17(dir, { recursive: true });
     writeFileSync14(this.cachePath, JSON.stringify(result), "utf-8");
   }
   invalidate() {
     this.cache = null;
-    if (existsSync40(this.cachePath)) {
+    if (existsSync41(this.cachePath)) {
       try {
         rmSync3(this.cachePath);
       } catch {}
@@ -19480,11 +19720,11 @@ class IndexCache {
 var init_cache = () => {};
 
 // src/modules/indexer/project-profile.ts
-import { readFileSync as readFileSync24, existsSync as existsSync41 } from "fs";
-import { join as join33 } from "path";
+import { readFileSync as readFileSync24, existsSync as existsSync42 } from "fs";
+import { join as join34 } from "path";
 function detectManifest(baseDir) {
   for (const manifest of MANIFEST_ORDER) {
-    if (existsSync41(join33(baseDir, manifest)))
+    if (existsSync42(join34(baseDir, manifest)))
       return manifest;
   }
   return null;
@@ -19501,7 +19741,7 @@ function cleanDependency(entry) {
 }
 function readPackageJson(baseDir) {
   try {
-    const raw = JSON.parse(readFileSync24(join33(baseDir, "package.json"), "utf-8"));
+    const raw = JSON.parse(readFileSync24(join34(baseDir, "package.json"), "utf-8"));
     if (!raw || typeof raw !== "object")
       return null;
     const profile = {
@@ -19525,7 +19765,7 @@ function readPackageJson(baseDir) {
 }
 function readPyproject(baseDir) {
   try {
-    const content = readFileSync24(join33(baseDir, "pyproject.toml"), "utf-8");
+    const content = readFileSync24(join34(baseDir, "pyproject.toml"), "utf-8");
     const profile = { runtime: "python", deps: [], devDeps: [], scripts: {} };
     const nameMatch = content.match(/^\s*name\s*=\s*"([^"]+)"/m);
     if (nameMatch)
@@ -19541,7 +19781,7 @@ function readPyproject(baseDir) {
 }
 function readCargo(baseDir) {
   try {
-    const content = readFileSync24(join33(baseDir, "Cargo.toml"), "utf-8");
+    const content = readFileSync24(join34(baseDir, "Cargo.toml"), "utf-8");
     const profile = { runtime: "rust", deps: [], devDeps: [], scripts: {} };
     const nameMatch = content.match(/^\s*name\s*=\s*"([^"]+)"/m);
     if (nameMatch)
@@ -19565,7 +19805,7 @@ function readCargo(baseDir) {
 }
 function readGoMod(baseDir) {
   try {
-    const content = readFileSync24(join33(baseDir, "go.mod"), "utf-8");
+    const content = readFileSync24(join34(baseDir, "go.mod"), "utf-8");
     const profile = { runtime: "go", deps: [], devDeps: [], scripts: {} };
     const moduleMatch = content.match(/^module\s+(\S+)/m);
     if (moduleMatch)
@@ -19583,7 +19823,7 @@ function readGoMod(baseDir) {
 }
 function readRequirements(baseDir) {
   try {
-    const content = readFileSync24(join33(baseDir, "requirements.txt"), "utf-8");
+    const content = readFileSync24(join34(baseDir, "requirements.txt"), "utf-8");
     const profile = { runtime: "python", deps: [], devDeps: [], scripts: {} };
     for (const line of content.split(`
 `)) {
@@ -19811,6 +20051,7 @@ ${t("indexer.and_more", { count: result.files.length - 100 })}` : "";
   createProjectMapTool() {
     return {
       name: "project_map",
+      alwaysOn: true,
       description: t("indexer.project_map_desc"),
       parameters: {
         type: "object",
@@ -19851,7 +20092,10 @@ ${stackLine2}` : summary2;
             return `- ${path}${exports}`;
           }).join(`
 `);
-          return this.makeResult(t("indexer.find_results", { count: matches.length, results: lines }));
+          return this.makeResult(t("indexer.find_results", {
+            count: matches.length,
+            results: lines
+          }));
         }
         if (!this.index) {
           await this.buildIndex();
@@ -20037,7 +20281,7 @@ var init_mcp = __esm(() => {
 
 // src/modules/memory/module.ts
 import { homedir as homedir10 } from "os";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 
 class MemoryModule {
   name = "memory";
@@ -20046,7 +20290,7 @@ class MemoryModule {
     if (storeOrDir instanceof MemoryStore) {
       this.store = storeOrDir;
     } else {
-      const dir = storeOrDir || join34(homedir10(), ".mma", "memory");
+      const dir = storeOrDir || join35(homedir10(), ".mma", "memory");
       this.store = new MemoryStore(dir);
     }
   }
@@ -20132,17 +20376,14 @@ var init_module8 = __esm(() => {
 });
 
 // src/core/version.ts
-import { existsSync as existsSync42, readFileSync as readFileSync25 } from "fs";
-import { join as join35, dirname as dirname13 } from "path";
+import { existsSync as existsSync43, readFileSync as readFileSync25 } from "fs";
+import { join as join36, dirname as dirname13 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function readMmaVersion() {
   const here = dirname13(fileURLToPath2(import.meta.url));
-  const candidates = [
-    join35(here, "..", "..", "package.json"),
-    join35(here, "..", "package.json")
-  ];
+  const candidates = [join36(here, "..", "..", "package.json"), join36(here, "..", "package.json")];
   for (const p of candidates) {
-    if (existsSync42(p)) {
+    if (existsSync43(p)) {
       try {
         const raw = JSON.parse(readFileSync25(p, "utf8"));
         if (raw.version)
@@ -20161,8 +20402,8 @@ __export(exports_bootstrap, {
   bootstrap: () => bootstrap
 });
 import { homedir as homedir11 } from "os";
-import { join as join36, resolve as resolve23 } from "path";
-import { existsSync as existsSync43, readFileSync as readFileSync26, writeFileSync as writeFileSync15 } from "fs";
+import { join as join37, resolve as resolve23 } from "path";
+import { existsSync as existsSync44, readFileSync as readFileSync26, writeFileSync as writeFileSync15 } from "fs";
 function buildSystemInfo(config, baseDir, profileCompressed) {
   const now = new Date().toISOString().replace("T", " ").slice(0, 19);
   const isWin = profileCompressed.toLowerCase().includes("win32");
@@ -20175,11 +20416,11 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     lines.push(`Windows (PowerShell): use list_dir/read_file/delete_file/create_dir tools instead of dir/type/del/mkdir. No PowerShell cmdlets (Get-Content, Select-Object, Write-Output), no head/tail/grep/cat. Use forward slashes in paths. CWD: ${baseDir}`);
   }
   lines.push(`Runtime: Bun is available — run TypeScript directly with "bun <file.ts>" and tests with "bun test" (no tsx/ts-node/npm install needed for that).`);
-  lines.push(`Bash: use "workdir" param instead of "cd dir && cmd". One command per call. Long-running processes: pass "background: true" (id immediately), otherwise auto-backgrounded after a few seconds — check with process_log.`, `DEVELOPMENT RULES (strict): 1) install deps BEFORE writing source (npm/pip/cargo, verify lockfile exists; never import uninstalled packages); 2) framework/toolkit init BEFORE app code; 3) follow plan sequentially, after each step verify deliverables exist with real content, then "plan update step=N status=done"; 4) verify work on disk + command output — don't assume success; 5) no premature work (no files/imports for future steps); 6) stuck after 2+ failures: STOP, try a different approach, write files directly, ask the user.`, `PLAN QUALITY: each step = CONCRETE deliverables (exact file paths with extensions, exact packages, exact commands). Vague steps ("Setup the project") forbidden. Cover init → deps → framework → code → verification. 5-8 steps.`, `For "check/fix errors" tasks, each verification step must name the exact command that proves the errors are gone — "bun run build", "bun test", or the "lsp_check" tool — and the step is done only after that check reports clean.`);
+  lines.push(`Bash: use "workdir" param instead of "cd dir && cmd". One command per call. Long-running processes: pass "background: true" (id immediately), otherwise auto-backgrounded after a few seconds — check with process_log.`, `DEVELOPMENT RULES (strict): 1) install deps BEFORE writing source (npm/pip/cargo, verify lockfile exists; never import uninstalled packages); 2) framework/toolkit init BEFORE app code; 3) follow plan sequentially, after each step verify deliverables exist with real content, then "plan update step=N status=done"; 4) verify work on disk + command output — don't assume success; 5) no premature work (no files/imports for future steps); 6) stuck after 2+ failures: STOP, try a different approach, write files directly, ask the user.`, `VERIFY EVERY WRITE: after write_file or edit_file, if the tool result contains NO [LSP errors], [LSP warnings], [Syntax check failed], or [Project typecheck failed] feedback, call the "lsp_check" tool on the file you just wrote BEFORE marking the step done. Never assume a written file is valid — prove it.`, `PLAN QUALITY: each step = CONCRETE deliverables (exact file paths with extensions, exact packages, exact commands). Vague steps ("Setup the project") forbidden. Cover init → deps → framework → code → verification. 5-8 steps.`, `For "check/fix errors" tasks, each verification step must name the exact command that proves the errors are gone — "bun run build", "bun test", or the "lsp_check" tool — and the step is done only after that check reports clean.`);
   if (config.autoPlan) {
     lines.push(`Plan rule (MANDATORY): any task creating files, installing packages, or requiring multiple actions MUST create a plan with the "plan" tool BEFORE starting. Each step = a concrete deliverable.`);
   }
-  lines.push(`Runtime verification: when a bug is described in terms of runtime behavior (what happens when the app runs), reproduce it — run the app / build / browser tool — and confirm the fix against actual runtime output before calling "plan update step=N status=done".`);
+  lines.push(`Runtime verification: when a bug is described in terms of runtime behavior (what happens when the app runs), reproduce it — run the app / build / browser tool — and confirm the fix against actual runtime output before calling "plan update step=N status=done". Check existing servers first with process_list/process_log: a stale dev server started BEFORE your change still runs the old pipeline and keeps failing even after the files on disk are fixed. Restart or kill it (process_kill) and verify the exact endpoint/port the user reported — a fresh server on a new port does NOT prove the user's error is gone.`);
   const hasMCP = config.mcpServers && Object.values(config.mcpServers).some((s) => s.enabled !== false);
   if (hasMCP) {
     lines.push(`MCP servers are available — use the named MCP tools (prefixed mcp__) to query external services.`);
@@ -20188,8 +20429,8 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
 `);
 }
 async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
-  const dir = configDir || join36(homedir11(), ".mma");
-  const projectConfigPath = projectDir ? join36(projectDir, ".mmrc") : join36(process.cwd(), ".mmrc");
+  const dir = configDir || join37(homedir11(), ".mma");
+  const projectConfigPath = projectDir ? join37(projectDir, ".mmrc") : join37(process.cwd(), ".mmrc");
   const config = loadConfig({ configDir: dir, projectConfigPath });
   setLocale(config.locale);
   try {
@@ -20199,7 +20440,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     }
   } catch {}
   const logger = new Logger(config.logLevel);
-  logger.setLogDir(join36(dir, "logs"));
+  logger.setLogDir(join37(dir, "logs"));
   logger.debug("MMA bootstrap", {
     version: config.version,
     model: config.model
@@ -20221,7 +20462,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
       logger.info(`Model ${config.model} loaded in ${loadResult.loadTime}s`);
     }
   }
-  const profile = new UserProfile(join36(dir));
+  const profile = new UserProfile(join37(dir));
   profile.load() || profile.collect();
   profile.save();
   const llmProvider = new OpenAICompatProvider({
@@ -20233,7 +20474,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     rateLimits: config.security?.rateLimits
   });
   const baseDir = projectDir ? resolve23(projectDir) : process.cwd();
-  const projectMapCacheDir = join36(baseDir, ".mma");
+  const projectMapCacheDir = join37(baseDir, ".mma");
   const indexerModule = new IndexerModule({
     baseDir,
     cacheDir: projectMapCacheDir
@@ -20244,14 +20485,16 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     logger.warn(`Project indexing failed: ${err.message}`);
   }
   const skillsLoader = new SkillsLoader;
-  const builtinDir = join36(import.meta.dirname, "skills", "builtin");
-  const globalDir = join36(homedir11(), ".agents", "skills");
-  const projectSkillsDir = join36(baseDir, ".mma", "skills");
+  const builtinDir = join37(import.meta.dirname, "skills", "builtin");
+  const globalDir = join37(homedir11(), ".agents", "skills");
+  const projectSkillsDir = join37(baseDir, ".mma", "skills");
   const availableSkills = skillsLoader.loadFromAllSources(builtinDir, globalDir, projectSkillsDir);
   const skillsBudget = Math.floor(config.contextWindow * config.skills.budget);
   const skillsModule = new SkillsModule(availableSkills, skillsBudget);
   const toolRegistry = new ToolRegistry;
-  registerAllTools(toolRegistry, skillsModule);
+  registerAllTools(toolRegistry, skillsModule, {
+    enableOnDemand: config.tools?.enableOnDemand
+  });
   const pluginManager = new PluginManager;
   const systemInfoContent = buildSystemInfo(config, baseDir, profile.compress());
   const systemInfoPrompt = {
@@ -20260,11 +20503,11 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     essential: true,
     estimatedTokens: Math.ceil(systemInfoContent.length / 4)
   };
-  const agentsMdGlobal = join36(dir, "AGENTS.md");
-  if (!existsSync43(agentsMdGlobal)) {
+  const agentsMdGlobal = join37(dir, "AGENTS.md");
+  if (!existsSync44(agentsMdGlobal)) {
     writeFileSync15(agentsMdGlobal, "", "utf-8");
   }
-  const sessionDir = join36(dir, "sessions");
+  const sessionDir = join37(dir, "sessions");
   const sessionStore = new SessionStore(sessionDir);
   sessionStore.init();
   const sessionManager = new SessionManager(sessionStore, {
@@ -20278,6 +20521,8 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     sessionManager.create();
   }
   const tokenCounter = new TokenCounter(config.model);
+  const enableOnDemand = config.tools?.enableOnDemand !== false;
+  const activeToolTags = enableOnDemand ? config.tools?.defaultTags ? [...config.tools.defaultTags] : [] : [];
   const contextManager = new ContextManager(config.contextWindow, config.contextBudget, tokenCounter);
   const toolCtx = {
     config,
@@ -20285,6 +20530,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     logger,
     exitOnComplete,
     contextManager,
+    activeToolTags,
     sessionId: sessionManager.getActiveMeta()?.id,
     sessionContext: sessionManager.getSessionContext() ?? undefined,
     recursionDepth: 0,
@@ -20331,7 +20577,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   const mcpModule = new MCPModule(config);
   await mcpModule.initialize();
   moduleRegistry.register(mcpModule);
-  const memoryStore = new MemoryStore(join36(dir, "memory"));
+  const memoryStore = new MemoryStore(join37(dir, "memory"));
   const memoryModule = new MemoryModule(memoryStore);
   moduleRegistry.register(memoryModule);
   if (config.browser.enabled) {
@@ -20350,6 +20596,10 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     lspPlugin.isBuiltin = true;
     pluginManager.register(lspPlugin);
   }
+  let startupCheckBlock = null;
+  if (!exitOnComplete && true) {
+    startupCheckBlock = await runStartupHealthCheck(config.lsp ?? DEFAULT_LSP_CONFIG, baseDir);
+  }
   const moduleTools = moduleRegistry.collectToolDefinitions();
   for (const tool of moduleTools) {
     toolRegistry.register(tool);
@@ -20382,8 +20632,8 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   pluginManager.register(plugin);
   pluginManager.register(plugin2);
   const pluginLoader = new PluginLoader;
-  const globalPluginsDir = join36(homedir11(), ".mma", "plugins");
-  const projectPluginsDir = join36(baseDir, ".mma", "plugins");
+  const globalPluginsDir = join37(homedir11(), ".mma", "plugins");
+  const projectPluginsDir = join37(baseDir, ".mma", "plugins");
   const mmaVersion = readMmaVersion();
   pluginLoader.loadFromDir(globalPluginsDir, pluginManager, logger, {
     source: "global",
@@ -20409,12 +20659,12 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   const skipAgentsMd = noAgentsMd === true;
   if (!skipAgentsMd) {
     const agentsMdCandidates = [
-      join36(baseDir, "AGENTS.md"),
-      join36(baseDir, ".mma", "AGENTS.md"),
-      join36(dir, "AGENTS.md")
+      join37(baseDir, "AGENTS.md"),
+      join37(baseDir, ".mma", "AGENTS.md"),
+      join37(dir, "AGENTS.md")
     ];
     for (const p of agentsMdCandidates) {
-      if (existsSync43(p)) {
+      if (existsSync44(p)) {
         const content = readFileSync26(p, "utf-8").trim();
         if (content) {
           agentsMdBlocks.push({
@@ -20432,6 +20682,8 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     ...moduleRegistry.collectPromptBlocks(["indexer"]),
     ...agentsMdBlocks
   ];
+  if (startupCheckBlock)
+    promptBlocks.push(startupCheckBlock);
   const agentDeps = {
     config,
     llmProvider,
@@ -20441,6 +20693,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     hallucinationDetector,
     logger,
     baseDir,
+    toolTags: activeToolTags,
     promptBlocks,
     getDynamicPromptBlocks: () => {
       const blocks = [];
@@ -20453,6 +20706,15 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
       const mapBlock = indexerModule.getSystemPromptBlock();
       if (mapBlock)
         blocks.push(mapBlock);
+      const hiddenToolsBlock = buildHiddenToolsBlock(toolRegistry.getAll(), activeToolTags);
+      if (hiddenToolsBlock) {
+        blocks.push({
+          content: hiddenToolsBlock,
+          priority: "low",
+          essential: false,
+          estimatedTokens: Math.ceil(hiddenToolsBlock.length / 4)
+        });
+      }
       return blocks;
     },
     finalAudit: () => execModule.runFinalAudit(),
@@ -20478,6 +20740,7 @@ var init_bootstrap = __esm(() => {
   init_app_logger();
   init_openai_compat();
   init_tools();
+  init_hidden_tools_block();
   init_executor();
   init_manager2();
   init_loader();
@@ -20492,6 +20755,7 @@ var init_bootstrap = __esm(() => {
   init_skills();
   init_browser2();
   init_lsp();
+  init_startup_check();
   init_indexer();
   init_mcp();
   init_module8();
@@ -21219,18 +21483,8 @@ async function runSetup(externalRl) {
     t("setup.summary_value")
   ], [
     [t("setup.provider_type"), provider, t("setup.model_name"), model],
-    [
-      "API Base URL",
-      apiBase,
-      t("setup.context_window"),
-      String(contextWindow)
-    ],
-    [
-      t("setup.api_key"),
-      apiKey || "not-needed",
-      t("setup.max_iters"),
-      String(maxIterations)
-    ],
+    ["API Base URL", apiBase, t("setup.context_window"), String(contextWindow)],
+    [t("setup.api_key"), apiKey || "not-needed", t("setup.max_iters"), String(maxIterations)],
     [t("setup.ui_lang"), locale, "", ""]
   ], { maxColumns: 4 });
   for (const l of summary)
@@ -21271,12 +21525,12 @@ __export(exports_manifest, {
   getCertMark: () => getCertMark,
   MANIFEST_PATH: () => MANIFEST_PATH
 });
-import { existsSync as existsSync44, readFileSync as readFileSync27, mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
+import { existsSync as existsSync45, readFileSync as readFileSync27, mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir13 } from "os";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 function readManifest(path = MANIFEST_PATH) {
   try {
-    if (existsSync44(path)) {
+    if (existsSync45(path)) {
       const raw = JSON.parse(readFileSync27(path, "utf-8"));
       return { version: 1, certifications: raw.certifications ?? [] };
     }
@@ -21284,7 +21538,7 @@ function readManifest(path = MANIFEST_PATH) {
   return { version: 1, certifications: [] };
 }
 function saveManifest(m, path = MANIFEST_PATH) {
-  mkdirSync18(join38(homedir13(), ".mma"), { recursive: true });
+  mkdirSync18(join39(homedir13(), ".mma"), { recursive: true });
   writeFileSync16(path, JSON.stringify(m, null, 2), "utf-8");
 }
 function upsertCertification(entry, path = MANIFEST_PATH) {
@@ -21319,7 +21573,7 @@ function getCertMark(model, providerUrl, currentVersion, path = MANIFEST_PATH) {
 }
 var MANIFEST_PATH;
 var init_manifest = __esm(() => {
-  MANIFEST_PATH = join38(homedir13(), ".mma", "certifications.json");
+  MANIFEST_PATH = join39(homedir13(), ".mma", "certifications.json");
 });
 
 // node_modules/yaml/dist/nodes/identity.js
@@ -28442,8 +28696,8 @@ var init_scenarios = __esm(() => {
 });
 
 // src/modules/certification/loader.ts
-import { existsSync as existsSync45, readdirSync as readdirSync15, readFileSync as readFileSync28 } from "fs";
-import { join as join39 } from "path";
+import { existsSync as existsSync46, readdirSync as readdirSync15, readFileSync as readFileSync28 } from "fs";
+import { join as join40 } from "path";
 function validateScenario(s) {
   const errors2 = [];
   const isSkip = s.mode === "skip";
@@ -28492,12 +28746,12 @@ function loadScenarios(userDir) {
     else
       scenarios.push(s);
   }
-  if (userDir && existsSync45(userDir)) {
+  if (userDir && existsSync46(userDir)) {
     for (const file of readdirSync15(userDir)) {
       if (!file.endsWith(".yaml") && !file.endsWith(".yml"))
         continue;
       try {
-        const raw = readFileSync28(join39(userDir, file), "utf-8");
+        const raw = readFileSync28(join40(userDir, file), "utf-8");
         const data = $parse(raw);
         const parsed = normalizeScenario(data, file);
         const errs = validateScenario(parsed);
@@ -28550,31 +28804,31 @@ var init_loader3 = __esm(() => {
 });
 
 // src/modules/certification/fact-checker.ts
-import { existsSync as existsSync46, readFileSync as readFileSync29, statSync as statSync8 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync47, readFileSync as readFileSync29, statSync as statSync8 } from "fs";
+import { join as join41 } from "path";
 function checkSandbox(sandboxDir, checks, exitCode, output) {
   const failures = [];
   for (const check of checks) {
-    if (!runCheck(sandboxDir, check, exitCode, output)) {
+    if (!runCheck2(sandboxDir, check, exitCode, output)) {
       failures.push(describe(check));
     }
   }
   return { pass: failures.length === 0, failures };
 }
-function runCheck(sandboxDir, check, exitCode, output) {
+function runCheck2(sandboxDir, check, exitCode, output) {
   switch (check.type) {
     case "exitCode":
       return exitCode === (check.code ?? 0);
     case "outputContains":
       return output.includes(check.text);
     case "fileExists":
-      return isFile(join40(sandboxDir, check.path));
+      return isFile(join41(sandboxDir, check.path));
     case "fileNotExists":
-      return !existsSync46(join40(sandboxDir, check.path));
+      return !existsSync47(join41(sandboxDir, check.path));
     case "dirExists":
-      return isDir(join40(sandboxDir, check.path));
+      return isDir(join41(sandboxDir, check.path));
     case "fileContent": {
-      const abs = join40(sandboxDir, check.path);
+      const abs = join41(sandboxDir, check.path);
       if (!isFile(abs))
         return false;
       const content = readFileSync29(abs, "utf-8");
@@ -28585,7 +28839,7 @@ function runCheck(sandboxDir, check, exitCode, output) {
       return false;
     }
     case "fileRegex": {
-      const abs = join40(sandboxDir, check.path);
+      const abs = join41(sandboxDir, check.path);
       if (!isFile(abs))
         return false;
       return new RegExp(check.pattern).test(readFileSync29(abs, "utf-8"));
@@ -28596,14 +28850,14 @@ function runCheck(sandboxDir, check, exitCode, output) {
 }
 function isFile(p) {
   try {
-    return existsSync46(p) && statSync8(p).isFile();
+    return existsSync47(p) && statSync8(p).isFile();
   } catch {
     return false;
   }
 }
 function isDir(p) {
   try {
-    return existsSync46(p) && statSync8(p).isDirectory();
+    return existsSync47(p) && statSync8(p).isDirectory();
   } catch {
     return false;
   }
@@ -28633,10 +28887,10 @@ function describe(check) {
 var init_fact_checker = () => {};
 
 // src/modules/certification/runner.ts
-import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync47, mkdirSync as mkdirSync19, rmSync as rmSync4, cpSync as cpSync2 } from "fs";
+import { spawn as spawn8 } from "child_process";
+import { existsSync as existsSync48, mkdirSync as mkdirSync19, rmSync as rmSync4, cpSync as cpSync2 } from "fs";
 import { platform as platform9 } from "os";
-import { join as join41, resolve as resolve24, dirname as dirname14 } from "path";
+import { join as join42, resolve as resolve24, dirname as dirname14 } from "path";
 async function runScenario(scenario, opts) {
   if (scenario.mode === "skip") {
     return {
@@ -28655,7 +28909,7 @@ async function runScenario(scenario, opts) {
   let passed = 0;
   let firstError;
   for (let i = 1;i <= reps; i++) {
-    const sandbox = join41(opts.sandboxBase, `run-${scenario.id}-${i}`);
+    const sandbox = join42(opts.sandboxBase, `run-${scenario.id}-${i}`);
     let failures = [];
     let exitCode = -1;
     let output = "";
@@ -28716,28 +28970,25 @@ function prepareSandbox(sandbox, scenario, mmaRoot) {
   rmSync4(sandbox, { recursive: true, force: true });
   mkdirSync19(sandbox, { recursive: true });
   for (const f of scenario.fixtures ?? []) {
-    const src = join41(mmaRoot, f.source);
-    if (!existsSync47(src)) {
+    const src = join42(mmaRoot, f.source);
+    if (!existsSync48(src)) {
       throw new Error(`fixture missing: ${f.source}`);
     }
-    const dest = join41(sandbox, f.dest);
+    const dest = join42(sandbox, f.dest);
     mkdirSync19(dirname14(dest), { recursive: true });
     cpSync2(src, dest);
   }
 }
 function resolveMmaEntry(mmaRoot) {
-  const dev = join41(mmaRoot, "src", "cli", "main.ts");
-  if (existsSync47(dev))
+  const dev = join42(mmaRoot, "src", "cli", "main.ts");
+  if (existsSync48(dev))
     return dev;
-  return join41(mmaRoot, "dist", "main.js");
+  return join42(mmaRoot, "dist", "main.js");
 }
 function findMmaRoot(fromDir) {
-  const candidates = [
-    resolve24(fromDir, "..", "..", ".."),
-    resolve24(fromDir, "..")
-  ];
+  const candidates = [resolve24(fromDir, "..", "..", ".."), resolve24(fromDir, "..")];
   for (const c of candidates) {
-    if (existsSync47(join41(c, "package.json")))
+    if (existsSync48(join42(c, "package.json")))
       return c;
   }
   return process.cwd();
@@ -28747,7 +28998,7 @@ function killTree2(child) {
   if (!pid)
     return;
   if (platform9() === "win32") {
-    spawn7("taskkill", ["/pid", String(pid), "/T", "/F"], {
+    spawn8("taskkill", ["/pid", String(pid), "/T", "/F"], {
       windowsHide: true,
       stdio: "ignore"
     });
@@ -28762,7 +29013,7 @@ function killTree2(child) {
   }
 }
 var defaultRunner2 = (env2, cwd, args, timeoutMs) => new Promise((resolvePromise) => {
-  const child = spawn7(process.execPath, args, {
+  const child = spawn8(process.execPath, args, {
     cwd,
     env: env2,
     windowsHide: true,
@@ -28805,13 +29056,13 @@ __export(exports_cli, {
 });
 import { rmSync as rmSync5 } from "fs";
 import { homedir as homedir14 } from "os";
-import { join as join42, dirname as dirname15 } from "path";
+import { join as join43, dirname as dirname15 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { existsSync as existsSync48, readFileSync as readFileSync30 } from "fs";
+import { existsSync as existsSync49, readFileSync as readFileSync30 } from "fs";
 function readVersion() {
-  const candidates = [join42(MMA_ROOT, "package.json")];
+  const candidates = [join43(MMA_ROOT, "package.json")];
   for (const p of candidates) {
-    if (existsSync48(p)) {
+    if (existsSync49(p)) {
       try {
         const raw = JSON.parse(readFileSync30(p, "utf-8"));
         if (raw.version)
@@ -28849,7 +29100,7 @@ async function certify(opts) {
     return;
   }
   console.log(t("cli.cert_started", { model: opts.name, provider: providerUrl }));
-  const sandboxBase = join42(process.cwd(), ".mma", "certification");
+  const sandboxBase = join43(process.cwd(), ".mma", "certification");
   const results = [];
   const total = selected.length;
   let idx = 0;
@@ -28963,7 +29214,7 @@ var init_cli = __esm(() => {
   init_manifest();
   HERE = dirname15(fileURLToPath3(import.meta.url));
   MMA_ROOT = findMmaRoot(HERE);
-  USER_SCENARIO_DIR = join42(homedir14(), ".mma", "certification", "scenarios");
+  USER_SCENARIO_DIR = join43(homedir14(), ".mma", "certification", "scenarios");
 });
 
 // src/cli/repl-commands.ts
@@ -28972,18 +29223,15 @@ __export(exports_repl_commands, {
   registerAllCommands: () => registerAllCommands,
   COMMAND_GROUPS: () => COMMAND_GROUPS
 });
-import { join as join44, dirname as dirname17 } from "path";
+import { join as join45, dirname as dirname17 } from "path";
 import { homedir as homedir16 } from "os";
-import { existsSync as existsSync50, readFileSync as readFileSync32 } from "fs";
+import { existsSync as existsSync51, readFileSync as readFileSync32 } from "fs";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function readVersion3() {
   const here = dirname17(fileURLToPath5(import.meta.url));
-  const candidates = [
-    join44(here, "..", "..", "package.json"),
-    join44(here, "..", "package.json")
-  ];
+  const candidates = [join45(here, "..", "..", "package.json"), join45(here, "..", "package.json")];
   for (const p of candidates) {
-    if (existsSync50(p)) {
+    if (existsSync51(p)) {
       try {
         const raw = JSON.parse(readFileSync32(p, "utf8"));
         if (raw.version)
@@ -29049,7 +29297,7 @@ function registerMmaCommands(ctx) {
       }
       try {
         const { loadFileAsDataUrl: loadFileAsDataUrl2, loadUrlAsDataUrl: loadUrlAsDataUrl2, readClipboardImage: readClipboardImage2 } = await Promise.resolve().then(() => (init_image_utils(), exports_image_utils));
-        const { existsSync: existsSync51 } = await import("fs");
+        const { existsSync: existsSync52 } = await import("fs");
         const { resolve: resolve25 } = await import("path");
         let dataUrl;
         let label;
@@ -29069,7 +29317,7 @@ function registerMmaCommands(ctx) {
           label = source;
         } else {
           const absPath = resolve25(process.cwd(), source);
-          if (!existsSync51(absPath)) {
+          if (!existsSync52(absPath)) {
             console.log(pc2.red(t("image.not_found", { path: source })));
             return;
           }
@@ -29148,7 +29396,7 @@ function registerMmaCommands(ctx) {
       console.log(pc2.yellow(t("repl.wizard_running")));
       await ctx.withExclusiveInput(async () => {
         const answers = await runSetup(ctx.rl);
-        const configPath = join44(homedir16(), ".mma", "config.json");
+        const configPath = join45(homedir16(), ".mma", "config.json");
         ctx.config.provider.type = answers.provider;
         ctx.config.provider.baseUrl = answers.apiBase;
         ctx.config.provider.apiKey = answers.apiKey;
@@ -29202,7 +29450,7 @@ Excluded blocks: ${info.excluded.length}`));
           return;
         }
         ctx.config.provider.type = name;
-        const configPath = join44(homedir16(), ".mma", "config.json");
+        const configPath = join45(homedir16(), ".mma", "config.json");
         saveConfig(ctx.config, configPath);
         await ctx.agent.reconfigure(ctx.config);
         console.log(pc2.green(t("repl.provider_set", { name })));
@@ -29258,7 +29506,7 @@ Excluded blocks: ${info.excluded.length}`));
           return;
         }
         ctx.config.model = name;
-        const configPath = join44(homedir16(), ".mma", "config.json");
+        const configPath = join45(homedir16(), ".mma", "config.json");
         saveConfig(ctx.config, configPath);
         await ctx.agent.reconfigure(ctx.config);
         console.log(pc2.green(t("repl.model_set", { name })));
@@ -29283,7 +29531,7 @@ Excluded blocks: ${info.excluded.length}`));
         return;
       }
       ctx.config.contextWindow = size;
-      const configPath = join44(homedir16(), ".mma", "config.json");
+      const configPath = join45(homedir16(), ".mma", "config.json");
       saveConfig(ctx.config, configPath);
       await ctx.agent.reconfigure(ctx.config);
       console.log(pc2.green(t("cli.context_set", { size })));
@@ -29302,10 +29550,10 @@ Excluded blocks: ${info.excluded.length}`));
       ctx.agent.shutdown();
       const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), exports_config));
       const { homedir: homedir17 } = await import("os");
-      const { join: join45 } = await import("path");
+      const { join: join46 } = await import("path");
       const configDir = ctx.configDir;
       const baseDir = ctx.baseDir;
-      const projectConfigPath = join45(baseDir, ".mmrc");
+      const projectConfigPath = join46(baseDir, ".mmrc");
       const freshConfig = loadConfig2({ configDir, projectConfigPath });
       Object.assign(ctx.config, freshConfig);
       const { bootstrap: bootstrap2 } = await Promise.resolve().then(() => (init_bootstrap(), exports_bootstrap));
@@ -29321,6 +29569,41 @@ Excluded blocks: ${info.excluded.length}`));
       console.log(`${t("repl.provider")}    ${ctx.config.provider.type} @ ${ctx.config.provider.baseUrl}`);
     }
   });
+  ctx.registerCommand({
+    name: "plugins",
+    description: t("repl.plugins"),
+    usage: t("repl.plugins_usage"),
+    action: (args) => {
+      if (!ctx.pluginManager) {
+        console.log(t("cli.plugins.none"));
+        return;
+      }
+      const showAll = args.includes("--all");
+      const infos = ctx.pluginManager.getPluginInfos();
+      const filtered = showAll ? infos : infos.filter(({ plugin: plugin3 }) => !plugin3.isBuiltin);
+      if (filtered.length === 0) {
+        console.log(t("cli.plugins.none"));
+        return;
+      }
+      const mmaVersion = version2;
+      console.log(t("cli.plugins.header", {
+        count: String(filtered.length),
+        mma: mmaVersion
+      }));
+      for (const { plugin: plugin3, source } of filtered) {
+        const v = plugin3.version || "-";
+        const origin = source || "builtin";
+        const mark = plugin3.isBuiltin ? t("cli.plugins.builtin_mark") : " ";
+        console.log(`  ${mark} ${plugin3.name}  v${v}  [${origin}]`);
+      }
+      if (!showAll) {
+        const builtinCount = infos.filter(({ plugin: plugin3 }) => plugin3.isBuiltin).length;
+        if (builtinCount > 0) {
+          console.log(pc2.dim(`  (${builtinCount} builtin hidden — /plugins --all to show)`));
+        }
+      }
+    }
+  });
 }
 function registerSessionCommands(ctx) {
   if (!ctx.sessionManager)
@@ -29580,7 +29863,8 @@ var init_repl_commands = __esm(() => {
     resume: "session",
     rename: "session",
     delete: "session",
-    skill: "skill"
+    skill: "skill",
+    plugins: "agent"
   };
 });
 
@@ -29605,14 +29889,14 @@ init_bootstrap();
 init_config2();
 init_setup();
 init_i18n();
-import { join as join43, dirname as dirname16 } from "path";
+import { join as join44, dirname as dirname16 } from "path";
 import { homedir as homedir15 } from "os";
-import { existsSync as existsSync49, readFileSync as readFileSync31 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync31 } from "fs";
 
 // src/cli/security-commands.ts
 init_bootstrap();
 init_config2();
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 import { homedir as homedir12 } from "os";
 
 // src/modules/security/security-policies.ts
@@ -29684,18 +29968,7 @@ var STRICT_POLICY = {
         "-R",
         "--no-clobber"
       ],
-      dangerousOperators: [
-        ">",
-        ">>",
-        "2>",
-        "2>>",
-        "|",
-        "&&",
-        "||",
-        ";",
-        "&",
-        "`"
-      ],
+      dangerousOperators: [">", ">>", "2>", "2>>", "|", "&&", "||", ";", "&", "`"],
       logCommands: true
     },
     paths: {
@@ -29909,12 +30182,7 @@ var BALANCED_POLICY = {
     auditNotifier: {
       enabled: false,
       minSeverity: "medium",
-      eventTypes: [
-        "security_block",
-        "bash_command",
-        "file_operation",
-        "network_request"
-      ],
+      eventTypes: ["security_block", "bash_command", "file_operation", "network_request"],
       maxRetries: 3
     }
   }
@@ -30142,7 +30410,7 @@ function createSecurityCommand(program2) {
     }
   });
   securityCmd.command("set-policy").argument("<preset>", t("cli.security.preset")).description(t("cli.security.set_policy")).action(async (preset) => {
-    const configPath = join37(homedir12(), ".mma", "config.json");
+    const configPath = join38(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     const validPresets = ["strict", "balanced", "permissive"];
     if (!validPresets.includes(preset)) {
@@ -30157,7 +30425,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.policy_description", { description: policy.description }));
   });
   securityCmd.command("enable-encryption").description(t("cli.security.enable_encryption")).action(async () => {
-    const configPath = join37(homedir12(), ".mma", "config.json");
+    const configPath = join38(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.sessionEncryption = {
@@ -30169,7 +30437,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.encryption_enabled"));
   });
   securityCmd.command("disable-encryption").description(t("cli.security.disable_encryption")).action(async () => {
-    const configPath = join37(homedir12(), ".mma", "config.json");
+    const configPath = join38(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.sessionEncryption = {
@@ -30181,7 +30449,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.encryption_disabled"));
   });
   securityCmd.command("enable-audit").description(t("cli.security.enable_audit")).action(async () => {
-    const configPath = join37(homedir12(), ".mma", "config.json");
+    const configPath = join38(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.auditNotifier = {
@@ -30195,7 +30463,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.audit_enabled"));
   });
   securityCmd.command("disable-audit").description(t("cli.security.disable_audit")).action(async () => {
-    const configPath = join37(homedir12(), ".mma", "config.json");
+    const configPath = join38(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.auditNotifier = {
@@ -30261,12 +30529,9 @@ function createPluginCommand(program2) {
 import { fileURLToPath as fileURLToPath4 } from "url";
 function readVersion2() {
   const here = dirname16(fileURLToPath4(import.meta.url));
-  const candidates = [
-    join43(here, "..", "..", "package.json"),
-    join43(here, "..", "package.json")
-  ];
+  const candidates = [join44(here, "..", "..", "package.json"), join44(here, "..", "package.json")];
   for (const p of candidates) {
-    if (existsSync49(p)) {
+    if (existsSync50(p)) {
       try {
         const raw = JSON.parse(readFileSync31(p, "utf8"));
         if (raw.version)
@@ -30281,7 +30546,7 @@ function createProgram() {
   const program2 = new Command().name("mma").description(t("cli.description")).version(version).option("--no-agents-md", t("cli.no_agents_md")).option("-d, --dir <path>", t("cli.dir")).option("-e, --exit-on-complete", t("cli.exit_on_complete")).option("-j, --json", t("cli.json"));
   program2.command("init").description(t("cli.init")).action(async () => {
     const answers = await runSetup();
-    const configPath = join43(homedir15(), ".mma", "config.json");
+    const configPath = join44(homedir15(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.provider.type = answers.provider;
     config.provider.baseUrl = answers.apiBase;
@@ -30326,7 +30591,7 @@ function createProgram() {
   });
   const configCmd = program2.command("config").description(t("cli.manage_config"));
   configCmd.command("set").argument("<key>", t("cli.config_key")).argument("<value>", "Config value").description(t("cli.set_value")).action(async (key, value) => {
-    const configPath = join43(homedir15(), ".mma", "config.json");
+    const configPath = join44(homedir15(), ".mma", "config.json");
     const { config } = await bootstrap();
     const keys = key.split(".");
     let obj = config;
@@ -30389,7 +30654,7 @@ function createProgram() {
     console.log(t("cli.model_hint"));
   });
   model.command("use").argument("<name>", "Model name").description(t("cli.set_model")).action(async (name) => {
-    const configPath = join43(homedir15(), ".mma", "config.json");
+    const configPath = join44(homedir15(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.model = name;
     saveConfig(config, configPath);
@@ -30425,7 +30690,7 @@ function createProgram() {
     await uncertify2(name, config);
   });
   program2.command("context").description(t("cli.manage_context")).argument("<size>", "Context window size in tokens").action(async (size) => {
-    const configPath = join43(homedir15(), ".mma", "config.json");
+    const configPath = join44(homedir15(), ".mma", "config.json");
     const { config } = await bootstrap();
     const contextWindow = parseInt(size, 10);
     if (isNaN(contextWindow) || contextWindow < 1024) {
@@ -30443,7 +30708,7 @@ function createProgram() {
     console.log(t("cli.base_url"), config.provider.baseUrl);
   });
   provider.command("use").argument("<name>", "Provider name").description(t("cli.set_provider")).action(async (name) => {
-    const configPath = join43(homedir15(), ".mma", "config.json");
+    const configPath = join44(homedir15(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.provider.type = name;
     saveConfig(config, configPath);
@@ -31251,8 +31516,8 @@ class LineEditor {
 }
 
 // src/cli/repl.ts
-import { existsSync as existsSync51, readFileSync as readFileSync33, writeFileSync as writeFileSync17 } from "fs";
-import { join as join45, dirname as dirname18 } from "path";
+import { existsSync as existsSync52, readFileSync as readFileSync33, writeFileSync as writeFileSync17 } from "fs";
+import { join as join46, dirname as dirname18 } from "path";
 import { homedir as homedir17 } from "os";
 import { fileURLToPath as fileURLToPath6 } from "url";
 
@@ -31757,12 +32022,9 @@ init_i18n();
 init_repl_commands();
 function readVersion4() {
   const here = dirname18(fileURLToPath6(import.meta.url));
-  const candidates = [
-    join45(here, "..", "..", "package.json"),
-    join45(here, "..", "package.json")
-  ];
+  const candidates = [join46(here, "..", "..", "package.json"), join46(here, "..", "package.json")];
   for (const p of candidates) {
-    if (existsSync51(p)) {
+    if (existsSync52(p)) {
       try {
         const raw = JSON.parse(readFileSync33(p, "utf8"));
         if (raw.version)
@@ -31820,10 +32082,10 @@ class Repl {
     this.skillsModule = skillsModule;
     this.pluginManager = pluginManager;
     this.logger = logger;
-    this.configDir = configDir || join45(homedir17(), ".mma");
+    this.configDir = configDir || join46(homedir17(), ".mma");
     this.baseDir = baseDir || process.cwd();
     this.noAgentsMd = noAgentsMd === true;
-    this.historyPath = join45(homedir17(), ".mma", "repl-history");
+    this.historyPath = join46(homedir17(), ".mma", "repl-history");
     this.loadHistory();
     this.rl = process.stdin.isTTY ? new LineEditor({
       input: process.stdin,
@@ -31856,7 +32118,7 @@ class Repl {
     this.setupListeners();
   }
   loadHistory() {
-    if (existsSync51(this.historyPath)) {
+    if (existsSync52(this.historyPath)) {
       try {
         const raw = readFileSync33(this.historyPath, "utf-8");
         this.history = raw.split(`
@@ -31878,13 +32140,7 @@ class Repl {
       this.completer.registerProvider(new SessionNameProvider(() => this.sessionManager.list().map((s) => s.name)));
     }
     if (this.skillsModule) {
-      this.completer.registerProvider(new SubcommandProvider("skill", [
-        "list",
-        "loaded",
-        "load",
-        "unload",
-        "search"
-      ]));
+      this.completer.registerProvider(new SubcommandProvider("skill", ["list", "loaded", "load", "unload", "search"]));
       this.completer.registerProvider(new SkillNameProvider(this.skillsModule));
     }
   }
@@ -32219,11 +32475,11 @@ ${t("image.clipboard_empty")}`));
       row(t("repl.agents_label"), pc2.red(t("repl.disabled")));
     } else {
       const agentsMdCandidates = [
-        join45(this.baseDir, "AGENTS.md"),
-        join45(this.baseDir, ".mma", "AGENTS.md"),
-        join45(this.configDir, "AGENTS.md")
+        join46(this.baseDir, "AGENTS.md"),
+        join46(this.baseDir, ".mma", "AGENTS.md"),
+        join46(this.configDir, "AGENTS.md")
       ];
-      const foundAgents = agentsMdCandidates.filter((p) => existsSync51(p));
+      const foundAgents = agentsMdCandidates.filter((p) => existsSync52(p));
       if (foundAgents.length > 0) {
         for (const p of foundAgents) {
           row(t("repl.agents_label"), pc2.dim(p));
@@ -32234,7 +32490,7 @@ ${t("image.clipboard_empty")}`));
     }
     const meta = this.sessionManager?.getActiveMeta();
     if (meta) {
-      const sessionPath = join45(this.configDir, "sessions", meta.id);
+      const sessionPath = join46(this.configDir, "sessions", meta.id);
       row(t("repl.session_label"), `${pc2.cyan(meta.name)} ${pc2.dim(`(${meta.id.slice(0, 12)})`)}  —  ${meta.messageCount} msgs  ${pc2.dim(sessionPath)}`);
     }
     const headerWidth = Math.max(50, Math.min(96, process.stdout.columns || 96));
@@ -32275,8 +32531,8 @@ init_setup();
 init_config2();
 init_i18n();
 init_colors();
-import { existsSync as existsSync52, readFileSync as readFileSync34 } from "fs";
-import { join as join46, dirname as dirname19 } from "path";
+import { existsSync as existsSync53, readFileSync as readFileSync34 } from "fs";
+import { join as join47, dirname as dirname19 } from "path";
 import { homedir as homedir18 } from "os";
 import { fileURLToPath as fileURLToPath7 } from "url";
 
@@ -32380,12 +32636,9 @@ class UpdaterModule {
 // src/cli/main.ts
 function readVersion5() {
   const here = dirname19(fileURLToPath7(import.meta.url));
-  const candidates = [
-    join46(here, "..", "..", "package.json"),
-    join46(here, "..", "package.json")
-  ];
+  const candidates = [join47(here, "..", "..", "package.json"), join47(here, "..", "package.json")];
   for (const p of candidates) {
-    if (existsSync52(p)) {
+    if (existsSync53(p)) {
       try {
         const raw = JSON.parse(readFileSync34(p, "utf8"));
         if (raw.version)
@@ -32470,15 +32723,15 @@ async function main() {
     await updater?.waitForIdle();
     process.exit(exitCode);
   } else {
-    const configPath = join46(homedir18(), ".mma", "config.json");
-    if (!existsSync52(configPath)) {
+    const configPath = join47(homedir18(), ".mma", "config.json");
+    if (!existsSync53(configPath)) {
       console.log(pc2.yellow(`
   ` + t("cli.first_run") + `
 `));
       const answers = await runSetup();
       const config2 = loadConfig({
-        configDir: join46(homedir18(), ".mma"),
-        projectConfigPath: projectDir ? join46(projectDir, ".mmrc") : join46(process.cwd(), ".mmrc")
+        configDir: join47(homedir18(), ".mma"),
+        projectConfigPath: projectDir ? join47(projectDir, ".mmrc") : join47(process.cwd(), ".mmrc")
       });
       config2.provider.type = answers.provider;
       config2.provider.baseUrl = answers.apiBase;