mocode-ai 1.3.9 → 1.4.0

package/dist/i18n/index.js

@@ -19,14 +19,18 @@ const zhCN = {
     'commands.memoryStatus': '查看当前开关与原理',
     'commands.memoryReflect': '手动触发后台记忆反思',
     'commands.memoryInit': '扫描项目生成 AGENTS.md 项目记忆',
-    'commands.subagent': '子 Agent 开关（默认关闭）',
-    'commands.subagentOn': '开启子 Agent',
-    'commands.subagentOff': '关闭子 Agent',
-    'commands.subagentStatus': '查看子 Agent 状态',
-    'commands.fe': '前端工具簇开关 browser/dev_server/screenshot/view_image（默认关闭）',
-    'commands.feOn': '开启前端工具簇',
-    'commands.feOff': '关闭前端工具簇',
-    'commands.feStatus': '查看前端工具簇状态',
+    'commands.subagent': '子 Agent 自动路由 gate',
+    'commands.subagentOn': '允许按需路由 orchestration',
+    'commands.subagentOff': '禁止 orchestration',
+    'commands.subagentStatus': '查看 orchestration gate',
+    'commands.fe': '浏览器调试/桌面观察自动路由 gate',
+    'commands.feOn': '允许按需路由 browser/dev_server/screenshot',
+    'commands.feOff': '禁止 browser-debug/desktop-observe',
+    'commands.feStatus': '查看前端能力 gate',
+    'commands.cu': 'Computer Use 自动路由 gate（高危）',
+    'commands.cuOn': '允许按需路由 computer-control',
+    'commands.cuOff': '禁止 computer-control',
+    'commands.cuStatus': '查看 Computer Use gate',
     'commands.mcp': 'MCP 服务开关（重启后生效）',
     'commands.mcpOn': '开启 MCP 服务',
     'commands.mcpOff': '关闭 MCP 服务',
@@ -41,7 +45,7 @@ const zhCN = {
     'commands.modelDelete': '删除指定预设',
     'commands.mode': '切换 Agent 工作模式',
     'commands.modePlan': '只读探查并产出计划',
-    'commands.modeAuto': '全工具自动执行',
+    'commands.modeAuto': '自动执行（工具按任务动态路由）',
     'commands.pet': '桌宠控制',
     'commands.petToggle': '显示或隐藏桌宠',
     'commands.petSkin': '选择桌宠皮肤',
@@ -140,14 +144,14 @@ const zhCN = {
     'repl.planAlready': '（已在 plan 模式）',
     'repl.planChanged': '（已切到 plan 模式：只读探查 + 产出计划，审批后切 auto 执行。/auto 或 Shift+Tab 切回）',
     'repl.autoAlready': '（已在 auto 模式）',
-    'repl.autoChanged': '（已切回 auto 模式：全工具执行）',
+    'repl.autoChanged': '（已切回 auto 模式：工具按任务自动路由）',
     'repl.noImages': '（无待发送图片）',
     'repl.imagesCleared': '（已清空待发送图片）',
     'repl.imageUsage': '用法：/image <path>',
     'repl.themeList': '可用主题：',
     'repl.themeCurrent': '（当前：{theme}；用 /theme <名称> 切换）',
     'repl.themeChanged': '（已切换主题 {theme}）',
-    'repl.modeCurrent': '当前模式：{mode}；/plan 切到只读探查并产出计划，/auto 切回全工具执行',
+    'repl.modeCurrent': '当前模式：{mode}；/plan 切到只读规划，/auto 按任务自动路由工具并执行',
     'repl.unknownCommand': '未知命令：{value}',
     'repl.didYouMean': '你是不是想输入 {value}？',
     'repl.unknownCommandHint': '输入 /help 查看全部命令（普通文本直接打字发送，不必加 /）',
@@ -228,6 +232,8 @@ const zhCN = {
     'permission.dangerTitle': '⚠ 高风险操作: {tool}',
     'permission.confirmTitle': '确认执行: {tool}',
     'permission.dangerWarning': '⚠ 此操作可能产生不可逆副作用，请谨慎确认。',
+    'permission.computerSensitiveReview': '⚠ 待输入内容含 URL / 密码形态 / 支付关键词，已强制要求逐次确认（不可授权整个会话）。',
+    'permission.computerAction': '桌面动作: {value}',
     'permission.firstTimeHint': '说明：面板按工具风险等级弹出。「允许」仅放行本次操作；选择会话级/项目级选项后，同类命令不再重复询问。',
     'permission.confirmExecute': '确认执行',
     'permission.allowForever': '以后不再询问此工具',
@@ -240,29 +246,35 @@ const zhCN = {
     'askHuman.submitted': '用户回答:{value}',
     'askHuman.selected': '用户选择:{value}',
     'task.missingPrompt': '错误:缺少 prompt（子任务指令）。',
-    'task.disabled': '错误:子 Agent 当前已关闭。需要时请先运行 /subagent on。',
+    'task.disabled': '错误:orchestration capability gate 已关闭。需要时请运行 /subagent on。',
     'task.interrupted': '子 agent 被中断，未完成。',
     'task.noSummary': '子 agent 完成但未返回文本摘要（可能只调了工具或达到步数上限）。',
     'task.summaryTruncated': '…（子 agent 摘要已截断 {count} 字符）',
     'subagent.running': '子 Agent 运行中',
     'subagent.complete': '子 Agent 完成',
     'subagent.failed': '子 Agent 失败',
-    'subagent.status': '子 Agent：{state}',
-    'subagent.stateOn': '开启',
-    'subagent.stateOff': '关闭',
-    'subagent.changedOn': '已开启子 Agent；sub-agent 将从下一次模型请求起可用。',
-    'subagent.changedOff': '已关闭子 Agent；sub-agent 已从模型工具表移除。',
+    'subagent.status': 'Orchestration 自动路由：{state}',
+    'subagent.stateOn': '允许',
+    'subagent.stateOff': '禁止',
+    'subagent.changedOn': '已允许自动路由按需选择 orchestration（sub-agent / run_skill）；不会常驻工具表。',
+    'subagent.changedOff': '已禁止 orchestration；路由器和运行时都会拦截后续调用。',
     'skill.executing': '执行 skill: {name}…',
     'skill.complete': 'Skill 执行完成',
     'skill.aborted': 'Skill 执行已中断',
     'skill.maxSteps': 'Skill 达到最大步数({max})',
     'subagent.usage': '用法：/subagent on|off|status',
-    'fe.status': '前端工具簇：{state}',
-    'fe.stateOn': '开启',
-    'fe.stateOff': '关闭',
-    'fe.changedOn': '已开启前端工具簇；browser / dev_server / screenshot / view_image 将从下一次模型请求起可用。',
-    'fe.changedOff': '已关闭前端工具簇；browser / dev_server / screenshot / view_image 已从模型工具表移除。',
+    'fe.status': 'Browser/desktop 自动路由：{state}',
+    'fe.stateOn': '允许',
+    'fe.stateOff': '禁止',
+    'fe.changedOn': '已允许按需路由 browser-debug / desktop-observe；view_image 始终属于公共工具。',
+    'fe.changedOff': '已禁止 browser-debug / desktop-observe；后续路由不会暴露 browser / dev_server / screenshot。',
     'fe.usage': '用法：/fe on|off|status',
+    'cu.status': 'Computer-control 自动路由：{state}',
+    'cu.stateOn': '允许',
+    'cu.stateOff': '禁止',
+    'cu.changedOn': '已允许按需路由 computer-control；只有明确 GUI 操作意图才会选择，且每个动作仍需权限确认。',
+    'cu.changedOff': '已禁止 computer-control；路由器和运行时都会拦截后续 computer 调用。',
+    'cu.usage': '用法：/cu on|off|status',
     'mcp.status': 'MCP 服务：{state}',
     'mcp.stateOn': '开启',
     'mcp.stateOff': '关闭',
@@ -271,6 +283,20 @@ const zhCN = {
     'mcp.usage': '用法：/mcp on|off|status',
     'mcp.unchanged': 'MCP 已是{state}，未变更。',
     'mcp.restartHint': '该设置已写入配置文件；下次启动将按此状态决定是否连接 MCP。',
+    'memory.routeStatus': 'Memory 自动路由：{state}',
+    'memory.indexStatus': 'Memory Index / 后台反思：{state}',
+    'memory.stateAllowed': '允许',
+    'memory.stateBlocked': '禁止',
+    'memory.stateEnabled': '开启',
+    'memory.stateDisabled': '关闭',
+    'memory.source': 'MEMORY_ENABLED={value} · {path}',
+    'memory.statusHint': '路由 gate 决定 memory-read / memory-write 是否可选；Index 状态决定紧凑索引和后台反思是否启用。每个真实用户轮都会重新路由。',
+    'memory.usage': '用法：/memory_switch [on|off|status]（/memory_status 仅查看状态）',
+    'memory.unchanged': 'Memory 已是{state}，未变更。',
+    'memory.changedOn': '已允许按需路由 memory-read / memory-write，并开启 Memory Index。',
+    'memory.changedOff': '已禁止 memory-read / memory-write，并关闭 Memory Index。',
+    'memory.saved': '已写入 {path}: MEMORY_ENABLED={value}；下一真实用户轮起生效。',
+    'memory.failed': '/memory_switch 失败：{error}',
     'plan.ready': '计划已就绪',
     'plan.approvalDetail': '切换到 auto 模式按上述计划执行？（plan 模式只读探查，执行需切 auto）',
     'plan.execute': '切 auto 执行',
@@ -321,14 +347,18 @@ const en = {
     'commands.memoryStatus': 'Show current state and behavior',
     'commands.memoryReflect': 'Run background memory reflection',
     'commands.memoryInit': 'Scan project and generate AGENTS.md',
-    'commands.subagent': 'Sub-agent controls (disabled by default)',
-    'commands.subagentOn': 'Enable sub-agents',
-    'commands.subagentOff': 'Disable sub-agents',
-    'commands.subagentStatus': 'Show sub-agent status',
-    'commands.fe': 'Frontend tools: browser/dev_server/screenshot/view_image (disabled by default)',
-    'commands.feOn': 'Enable frontend tools',
-    'commands.feOff': 'Disable frontend tools',
-    'commands.feStatus': 'Show frontend tools status',
+    'commands.subagent': 'Sub-agent automatic-routing gate',
+    'commands.subagentOn': 'Allow orchestration to be routed when needed',
+    'commands.subagentOff': 'Block orchestration',
+    'commands.subagentStatus': 'Show orchestration gate',
+    'commands.fe': 'Browser-debug and desktop-observe routing gate',
+    'commands.feOn': 'Allow browser/dev_server/screenshot routing',
+    'commands.feOff': 'Block browser-debug and desktop-observe',
+    'commands.feStatus': 'Show frontend capability gate',
+    'commands.cu': 'Computer Use automatic-routing gate (high-risk)',
+    'commands.cuOn': 'Allow computer-control routing when needed',
+    'commands.cuOff': 'Block computer-control',
+    'commands.cuStatus': 'Show Computer Use gate',
     'commands.mcp': 'MCP service controls (applies immediately)',
     'commands.mcpOn': 'Enable MCP services',
     'commands.mcpOff': 'Disable MCP services',
@@ -343,7 +373,7 @@ const en = {
     'commands.modelDelete': 'Delete a preset',
     'commands.mode': 'Switch Agent mode',
     'commands.modePlan': 'Read-only research and planning',
-    'commands.modeAuto': 'Execute automatically with all tools',
+    'commands.modeAuto': 'Execute automatically with task-routed tools',
     'commands.pet': 'Desktop pet controls',
     'commands.petToggle': 'Show or hide the desktop pet',
     'commands.petSkin': 'Choose a pet skin',
@@ -442,14 +472,14 @@ const en = {
     'repl.planAlready': '(already in plan mode)',
     'repl.planChanged': '(switched to plan mode: read-only research and planning; approval returns to auto. Use /auto or Shift+Tab to switch back)',
     'repl.autoAlready': '(already in auto mode)',
-    'repl.autoChanged': '(switched to auto mode: all tools enabled)',
+    'repl.autoChanged': '(switched to auto mode: tools are routed per task)',
     'repl.noImages': '(no pending images)',
     'repl.imagesCleared': '(pending images cleared)',
     'repl.imageUsage': 'Usage: /image <path>',
     'repl.themeList': 'Available themes:',
     'repl.themeCurrent': '(current: {theme}; use /theme <name> to switch)',
     'repl.themeChanged': '(switched theme to {theme})',
-    'repl.modeCurrent': 'Current mode: {mode}; /plan for read-only planning, /auto for full tool access',
+    'repl.modeCurrent': 'Current mode: {mode}; /plan for read-only planning, /auto for task-routed execution',
     'repl.unknownCommand': 'Unknown command: {value}',
     'repl.didYouMean': 'Did you mean {value}?',
     'repl.unknownCommandHint': 'Run /help for all commands (plain text is sent as-is, no slash needed)',
@@ -530,6 +560,8 @@ const en = {
     'permission.dangerTitle': '⚠ High-risk operation: {tool}',
     'permission.confirmTitle': 'Confirm execution: {tool}',
     'permission.dangerWarning': '⚠ This operation may have irreversible side effects. Confirm carefully.',
+    'permission.computerSensitiveReview': '⚠ The text to type contains a URL / password pattern / payment keyword; per-action approval is enforced (no session-wide grant).',
+    'permission.computerAction': 'Desktop action: {value}',
     'permission.firstTimeHint': "Note: this panel appears based on each tool's risk level. 'Allow' approves only this action; session/project options stop repeated prompts for the same command.",
     'permission.confirmExecute': 'Confirm and run',
     'permission.allowForever': 'Always allow this tool',
@@ -542,29 +574,35 @@ const en = {
     'askHuman.submitted': 'User response: {value}',
     'askHuman.selected': 'User selected: {value}',
     'task.missingPrompt': 'Error: missing prompt (sub-task instruction).',
-    'task.disabled': 'Error: sub-agents are disabled. Run /subagent on first if needed.',
+    'task.disabled': 'Error: the orchestration capability gate is blocked. Run /subagent on if needed.',
     'task.interrupted': 'The sub-agent was interrupted before completion.',
     'task.noSummary': 'The sub-agent completed without a text summary (it may only have used tools or reached its step limit).',
     'task.summaryTruncated': '…(sub-agent summary truncated by {count} characters)',
     'subagent.running': 'Sub-agent running',
     'subagent.complete': 'Sub-agent complete',
     'subagent.failed': 'Sub-agent failed',
-    'subagent.status': 'Sub-agent: {state}',
-    'subagent.stateOn': 'enabled',
-    'subagent.stateOff': 'disabled',
-    'subagent.changedOn': 'Sub-agents enabled; sub-agent will be available from the next model request.',
-    'subagent.changedOff': 'Sub-agents disabled; sub-agent has been removed from the model tool list.',
+    'subagent.status': 'Orchestration automatic routing: {state}',
+    'subagent.stateOn': 'allowed',
+    'subagent.stateOff': 'blocked',
+    'subagent.changedOn': 'Automatic routing may now select orchestration (sub-agent / run_skill) when needed; it is not always exposed.',
+    'subagent.changedOff': 'Orchestration is blocked; both the router and runtime reject subsequent calls.',
     'skill.executing': 'Executing skill: {name}…',
     'skill.complete': 'Skill complete',
     'skill.aborted': 'Skill aborted',
     'skill.maxSteps': 'Skill reached max steps ({max})',
     'subagent.usage': 'Usage: /subagent on|off|status',
-    'fe.status': 'Frontend tools: {state}',
-    'fe.stateOn': 'enabled',
-    'fe.stateOff': 'disabled',
-    'fe.changedOn': 'Frontend tools enabled; browser / dev_server / screenshot / view_image will be available from the next model request.',
-    'fe.changedOff': 'Frontend tools disabled; browser / dev_server / screenshot / view_image have been removed from the model tool list.',
+    'fe.status': 'Browser/desktop automatic routing: {state}',
+    'fe.stateOn': 'allowed',
+    'fe.stateOff': 'blocked',
+    'fe.changedOn': 'Automatic routing may now select browser-debug / desktop-observe; view_image remains a common tool.',
+    'fe.changedOff': 'Browser-debug / desktop-observe are blocked; browser / dev_server / screenshot will not be exposed.',
     'fe.usage': 'Usage: /fe on|off|status',
+    'cu.status': 'Computer-control automatic routing: {state}',
+    'cu.stateOn': 'allowed',
+    'cu.stateOff': 'blocked',
+    'cu.changedOn': 'Automatic routing may now select computer-control for explicit GUI intent; every action still requires permission approval.',
+    'cu.changedOff': 'Computer-control is blocked; both the router and runtime reject subsequent computer calls.',
+    'cu.usage': 'Usage: /cu on|off|status',
     'mcp.status': 'MCP services: {state}',
     'mcp.stateOn': 'enabled',
     'mcp.stateOff': 'disabled',
@@ -573,6 +611,20 @@ const en = {
     'mcp.usage': 'Usage: /mcp on|off|status',
     'mcp.unchanged': 'MCP is already {state}; no change made.',
     'mcp.restartHint': 'This setting is saved to the configuration file; future startups use it to decide whether to connect MCP.',
+    'memory.routeStatus': 'Memory automatic routing: {state}',
+    'memory.indexStatus': 'Memory Index / background reflection: {state}',
+    'memory.stateAllowed': 'allowed',
+    'memory.stateBlocked': 'blocked',
+    'memory.stateEnabled': 'enabled',
+    'memory.stateDisabled': 'disabled',
+    'memory.source': 'MEMORY_ENABLED={value} · {path}',
+    'memory.statusHint': 'The route gate controls whether memory-read / memory-write may be selected; the Index state controls prompt injection and background reflection. Every real user turn is routed again.',
+    'memory.usage': 'Usage: /memory_switch [on|off|status] (/memory_status only reports state)',
+    'memory.unchanged': 'Memory is already {state}; no change made.',
+    'memory.changedOn': 'Memory-read / memory-write may now be routed on demand, and the Memory Index is enabled.',
+    'memory.changedOff': 'Memory-read / memory-write are now blocked, and the Memory Index is disabled.',
+    'memory.saved': 'Saved {path}: MEMORY_ENABLED={value}; effective from the next real user turn.',
+    'memory.failed': '/memory_switch failed: {error}',
     'plan.ready': 'Plan ready',
     'plan.approvalDetail': 'Switch to auto mode and execute the plan above? (Plan mode is read-only; execution requires auto mode.)',
     'plan.execute': 'Switch to auto and execute',

package/dist/index.js

@@ -87,7 +87,7 @@ async function main() {
             process.exit(1);
         }
         const { startRepl } = await import('./repl/index.js');
-        await startRepl(loaded.history, loaded.id, sandboxRootOverride, loaded.queryHistory);
+        await startRepl(loaded.history, loaded.id, sandboxRootOverride, loaded.queryHistory, loaded.lastToolGroups);
     }
     else {
         const { startRepl } = await import('./repl/index.js');

package/dist/llm/index.js

@@ -1,9 +1,11 @@
 import OpenAI from 'openai';
-import { config, getActiveModel, isSubAgentEnabled, isFrontendToolsEnabled } from '../config/index.js';
+import { config, getActiveModel } from '../config/index.js';
 import { tools } from '../tools/registry.js';
-import { getPlanDisabledTools, FRONTEND_TOOLS } from '../tools/constants.js';
+import { getPlanDisabledTools, getProfileDisabledTools } from '../tools/constants.js';
 import { ThinkTagFilter } from './think-filter.js';
+import { sanitizeToolSchemas } from './tool-schema.js';
 import { anthropicChatOnce } from './providers/anthropic.js';
+import { registerModelProvider, getModelProvider, listModelProviders } from './provider.js';
 // 强制关闭第三方调试日志泄漏:openai SDK 在 process.env.DEBUG === 'true' 时用裸
 // console.log 把请求/响应直写 stdout,会污染 TUI 输入框(并泄露 headers/URL)。
 // 仅拦截 'true' 这一开关值——保留 namespace 形式的 DEBUG(如 DEBUG=express:*) 调试能力。
@@ -57,13 +59,13 @@ function sleep(ms, signal) {
             reject(new DOMException('This operation was aborted', 'AbortError'));
             return;
         }
-        let onAbort;
         const t = setTimeout(() => {
-            if (onAbort)
-                signal?.removeEventListener('abort', onAbort);
+            signal?.removeEventListener('abort', onAbort);
             resolve();
         }, ms);
-        onAbort = () => {
+        // onAbort 用 const:声明点即唯一赋值点。setTimeout 回调里的前向引用只在异步触发时求值,
+        // 那时 onAbort 已初始化,不存在 TDZ。
+        const onAbort = () => {
             clearTimeout(t);
             reject(new DOMException('This operation was aborted', 'AbortError'));
         };
@@ -219,14 +221,11 @@ export function __setChatCreateImpl(impl) {
 export const chatTools = [];
 export const planChatTools = [];
 export function refreshChatTools() {
-    // sub-agent 与前端工具簇常驻内部 registry，运行时开关只控制模型可见 schema，因而 on/off 可即时生效。
-    const visibleTools = tools.filter((tool) => {
-        if (tool.name === 'sub-agent')
-            return isSubAgentEnabled();
-        if (FRONTEND_TOOLS.has(tool.name))
-            return isFrontendToolsEnabled();
-        return true;
-    });
+    // Legacy fallback for callers that do not pass a per-turn ToolPolicy. Official TUI/stdio requests
+    // build schemas from ToolPolicy snapshots instead; keep this stable array for old embeddings and budgets.
+    // MCP extensions are not part of the static profile map and remain visible on this compatibility path.
+    const profileDisabled = getProfileDisabledTools();
+    const visibleTools = tools.filter((tool) => !profileDisabled.has(tool.name));
     const next = visibleTools.map((t) => ({
         type: 'function',
         function: {
@@ -240,6 +239,22 @@ export function refreshChatTools() {
     // MCP 协议没有可靠的副作用注解；plan 模式绝不暴露外部工具，保留只读探查保证。
     planChatTools.splice(0, planChatTools.length, ...next.filter((t) => !t.function.name.startsWith('mcp__') && !getPlanDisabledTools().has(t.function.name)));
 }
+// 不在模块顶层调用 refreshChatTools():llm → registry 的 import 在部分加载顺序下会
+// 形成循环(registry → builtins → … → llm),顶层执行时 tools 尚未初始化(TDZ ReferenceError)。
+// chatTools 初始为空数组;两个真实入口(repl 启动、stdio host 启动)都会显式刷新,
+// 所有消费方(budget/compact/scheduler 默认参数、agent 装配)均在运行时求值,不受影响。
+// ── 默认 provider 注册(2.0 步骤3)──────────────────────────────────────────────
+// 把 chat() 原本的 config.provider if-else 分流变成注册表查找:openai 走 chatOnce,
+// anthropic 走 anthropicChatOnce。chatOnce 是 hoisted 函数声明,模块顶层引用安全。
+// 新增 provider 只需 registerModelProvider,不必改 chat()。
+registerModelProvider({
+    name: 'openai',
+    chatOnce: (messages, handlers, signal, tools) => chatOnce(messages, handlers, signal, tools),
+});
+registerModelProvider({
+    name: 'anthropic',
+    chatOnce: (messages, handlers, signal, tools) => anthropicChatOnce(messages, handlers, signal, tools ?? chatTools),
+});
 /**
  * 多 provider 兼容的 cache / reasoning 字段提取。
  * 不同后端报 cached 字段名差异巨大,这里按"最常见的几种"顺序 probe,
@@ -327,10 +342,12 @@ toolsOverride) {
             throw new DOMException('This operation was aborted', 'AbortError');
         }
         try {
-            if (config.provider === 'anthropic') {
-                return await anthropicChatOnce(messages, handlers, signal, toolsOverride ?? chatTools);
+            const provider = getModelProvider(config.provider);
+            if (!provider) {
+                // 未注册的 provider:给出可用名单,避免悄悄落到错误实现。
+                throw new Error(`未知的 LLM provider "${config.provider}";已注册:${listModelProviders().join(', ') || '(空)'}`);
             }
-            return await chatOnce(messages, handlers, signal, toolsOverride);
+            return await provider.chatOnce(messages, handlers, signal, toolsOverride);
         }
         catch (err) {
             lastErr = err;
@@ -416,7 +433,9 @@ async function chatOnce(messages, handlers, signal, toolsOverride) {
     const create = createImplOverride
         ? createImplOverride
         : (body, opts) => client.chat.completions.create(body, opts);
-    const activeTools = toolsOverride ?? chatTools;
+    // transport 边界消毒:剔除部分后端(kimi-k3@dashscope 实测)整请求 400 拒绝的
+    // uniqueItems 关键字。无需改写时返回原引用,前缀缓存逐字节稳定不受影响。
+    const activeTools = sanitizeToolSchemas(toolsOverride ?? chatTools);
     const stream = await create({
         model: getActiveModel(),
         messages: normalizeImageDetail(messages),
@@ -613,8 +632,7 @@ export function messageTokens(m) {
     else if (role === 'tool')
         structural = 6;
     let body = contentTokens(m.content);
-    const tcs = m
-        .tool_calls;
+    const tcs = m.tool_calls;
     if (tcs) {
         for (const tc of tcs)
             body += estimateTokens(tc?.function?.arguments ?? '');
@@ -643,9 +661,7 @@ export function estimateToolSchemaTokens(activeTools = chatTools) {
 }
 /** 把模型级校正系数统一应用到原始估算。 */
 export function correctTokenEstimate(estimate, correction = 1) {
-    const safeCorrection = Number.isFinite(correction)
-        ? Math.max(0.5, Math.min(2, correction))
-        : 1;
+    const safeCorrection = Number.isFinite(correction) ? Math.max(0.5, Math.min(2, correction)) : 1;
     return estimate > 0 ? Math.max(1, Math.ceil(estimate * safeCorrection)) : 0;
 }
 /** 估算一次完整请求的 prompt token（messages + 本次实际工具 schema）。 */

package/dist/llm/provider.js

@@ -0,0 +1,23 @@
+/**
+ * ModelProvider 抽象(2.0 步骤3):把「某种模型后端怎么做一次流式 chat」从 chat() 的
+ * 硬编码 if-else 分流(config.provider === 'anthropic' ? … : …)变成注册表查找。
+ * 新增 provider(Responses API / 本地模型 / 事件式模型)只需 registerModelProvider,
+ * 不再需要改 chat() 本体。
+ *
+ * 本模块只对 index.ts 做 type-only import(运行期零依赖,不构成循环引用);
+ * 不读 config、不持会话状态,注册表是显式的进程级插件点。默认 provider(openai /
+ * anthropic)由 index.ts 在模块初始化时注册,与既有 config.provider 行为完全一致。
+ */
+const providers = new Map();
+/** 注册一个 provider;同名覆盖(与 registerToolsExtension 的按源替换语义一致)。 */
+export function registerModelProvider(provider) {
+    providers.set(provider.name, provider);
+}
+/** 按名取 provider;未注册返 undefined(chat() 据此报清晰错误)。 */
+export function getModelProvider(name) {
+    return providers.get(name);
+}
+/** 列出已注册 provider 名(错误提示/诊断用)。 */
+export function listModelProviders() {
+    return [...providers.keys()];
+}

package/dist/llm/providers/anthropic.js

@@ -9,9 +9,7 @@ function parseJsonObject(value) {
         return {};
     try {
         const parsed = JSON.parse(value);
-        return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
-            ? parsed
-            : {};
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
     }
     catch {
         return {};
@@ -102,13 +100,13 @@ export function encodeAnthropicMessages(input, promptCache = config.anthropicPro
             continue;
         }
         if (message.role === 'tool') {
-            appendMessage(messages, 'user', [{
+            appendMessage(messages, 'user', [
+                {
                     type: 'tool_result',
                     tool_use_id: message.tool_call_id ?? '',
-                    content: typeof message.content === 'string'
-                        ? message.content
-                        : JSON.stringify(message.content ?? ''),
-                }], cacheCandidates);
+                    content: typeof message.content === 'string' ? message.content : JSON.stringify(message.content ?? ''),
+                },
+            ], cacheCandidates);
         }
     }
     if (promptCache) {
@@ -241,10 +239,10 @@ function usageFromAnthropic(raw) {
 function addLiveCount(text, state) {
     for (const ch of text) {
         const cp = ch.codePointAt(0) ?? 0;
-        if ((cp >= 0x4e00 && cp <= 0x9fff)
-            || (cp >= 0x3400 && cp <= 0x4dbf)
-            || (cp >= 0x3040 && cp <= 0x30ff)
-            || (cp >= 0xac00 && cp <= 0xd7a3))
+        if ((cp >= 0x4e00 && cp <= 0x9fff) ||
+            (cp >= 0x3400 && cp <= 0x4dbf) ||
+            (cp >= 0x3040 && cp <= 0x30ff) ||
+            (cp >= 0xac00 && cp <= 0xd7a3))
             state.cjk++;
         else
             state.other++;
@@ -306,17 +304,13 @@ export async function anthropicChatOnce(messages, handlers, signal, tools) {
                 reportLive();
             }
             else if (block?.type === 'tool_use') {
-                const initialInput = block.input && typeof block.input === 'object'
-                    ? block.input
-                    : undefined;
+                const initialInput = block.input && typeof block.input === 'object' ? block.input : undefined;
                 const call = {
                     id: typeof block.id === 'string' ? block.id : '',
                     name: typeof block.name === 'string' ? block.name : '',
                     // 流式 tool_use 通常以 input:{} 开始，真正 JSON 紧随 input_json_delta；
                     // 只有非空 input 才直接采用，避免累加成 `{}{...}`。
-                    arguments: initialInput && Object.keys(initialInput).length > 0
-                        ? JSON.stringify(initialInput)
-                        : '',
+                    arguments: initialInput && Object.keys(initialInput).length > 0 ? JSON.stringify(initialInput) : '',
                 };
                 toolAcc.set(index, call);
                 if (call.name)

package/dist/llm/tool-schema.js

@@ -0,0 +1,48 @@
+/**
+ * 递归剔除工具参数 schema 里的 `uniqueItems` 关键字。
+ *
+ * 背景:`uniqueItems` 是合法的 JSON Schema 关键字,OpenAI / qwen / 多数兼容后端都接受;
+ * 但 kimi-k3 经 dashscope compatible-mode 的模型服务层**不接受**它,收到即整请求 400:
+ *   `<400> InternalError.Algo: An error occurred in model serving,
+ *    error message is: [Invalid request parameters.]`
+ * 实测确定性 6/6:同一请求含 uniqueItems 必拒、去掉必过;而 format / const /
+ * patternProperties / $defs / minProperties / minItems 等关键字均被接受。
+ *
+ * 在 agent 侧的表现极具迷惑性——"干着干着突然每一步都 400、一把就结束":
+ * 工具路由(add_tool_groups / select_tool_groups)的 schema 一旦带上 uniqueItems,
+ * 该 turn 路由出的工具子集每步都会重发同一份毒 schema,于是每步都被拒;
+ * 换成 qwen3.8-max 等容忍 uniqueItems 的模型又立刻恢复正常。与 history 内容、
+ * 上下文长度、tool_call 配对**全部无关**(仅 system+user 两条消息 + 这一个工具即必拒)。
+ *
+ * 放在 transport 边界而非只修构造点:MCP / 外部注册工具、续接会话里可能已存着带
+ * uniqueItems 的 schema,只修构造点无法自愈。无需改写时返回**原数组引用**——
+ * 工具 schema 计入前缀缓存,逐字节稳定才能命中;每次新建对象会击穿缓存。
+ */
+export function sanitizeToolSchemas(tools) {
+    let sawUnsupported = false;
+    const strip = (value) => {
+        if (Array.isArray(value))
+            return value.map(strip);
+        if (value && typeof value === 'object') {
+            const src = value;
+            const out = {};
+            for (const [key, child] of Object.entries(src)) {
+                if (key === 'uniqueItems') {
+                    sawUnsupported = true;
+                    continue;
+                }
+                out[key] = strip(child);
+            }
+            return out;
+        }
+        return value;
+    };
+    const next = tools.map((tool) => ({
+        ...tool,
+        function: {
+            ...tool.function,
+            parameters: strip(tool.function.parameters),
+        },
+    }));
+    return sawUnsupported ? next : tools;
+}