opencode-matrixx-v2 0.0.0-stage → 1.0.0

package/dist/hooks/env-context-injector/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Local legacy `{info, parts}` shapes (Task 27: the V1 `experimental.chat.messages.transform`
+ * fan-out is deleted, so `legacy V1 SDK` message types are no longer imported).
+ * The live native port operates on flat `Message[]` in `src/plugin/message-hooks/`.
+ */
+type Message = {
+    id?: string;
+    sessionID?: string;
+    role?: string;
+    [key: string]: unknown;
+};
+type Part = {
+    type?: string;
+    text?: string;
+    [key: string]: unknown;
+};
+import type { MatrixxContext } from "../../plugin/context";
+interface MessageWithParts {
+    info: Message;
+    parts: Part[];
+}
+type MessagesTransformHook = {
+    "experimental.chat.messages.transform"?: (input: Record<string, never>, output: {
+        messages: MessageWithParts[];
+    }) => Promise<void>;
+};
+/**
+ * Env-Context Injector Transform Hook
+ *
+ * Appends the <matrixx-env> block (date, time, timezone, locale, year)
+ * to the last user message in each turn.
+ *
+ * This ensures the system prompt (agent config) is 100% static and
+ * byte-identical across all turns in a session, enabling provider-side
+ * prefix caching (Anthropic prompt caching, DeepSeek KV cache, OpenAI
+ * auto-cache).
+ */
+export declare function createEnvContextInjectorHook(ctx?: MatrixxContext): MessagesTransformHook;
+export {};

package/dist/hooks/env-file-write-guard/hook.d.ts

@@ -0,0 +1,15 @@
+interface EnvFileWriteGuardOptions {
+    enabled?: boolean;
+    blocked_patterns?: string[];
+    allowed_paths?: string[];
+}
+export declare function createEnvFileWriteGuardHook(config?: EnvFileWriteGuardOptions): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+};
+export {};

package/dist/hooks/env-file-write-guard/sensitive-file-matcher.d.ts

@@ -0,0 +1 @@
+export declare function createSensitiveFileMatcher(blockedPatterns?: string[], allowedPaths?: string[]): (filePath: string) => boolean;

package/dist/hooks/evolution-compressor/host-llm-call.d.ts

@@ -0,0 +1,15 @@
+import type { LlmUsage } from "../../features/evolution/compressor/interface";
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function parseModelOverride(model: string | undefined): {
+    providerID: string;
+    modelID: string;
+} | undefined;
+export declare function createHostLlmCall(options: {
+    ctx: NativePluginContext;
+    agent?: string;
+    model?: string;
+    parentID?: string;
+}): (prompt: string, model?: string) => Promise<{
+    text: string;
+    usage?: LlmUsage;
+}>;

package/dist/hooks/evolution-hitl/flat.d.ts

@@ -0,0 +1,29 @@
+export interface FlatContentPart {
+    type?: string;
+    text?: string;
+    [key: string]: unknown;
+}
+export interface FlatMessage {
+    id?: string;
+    role?: string;
+    type?: string;
+    text?: string;
+    content?: FlatContentPart[];
+    [key: string]: unknown;
+}
+export interface FlatSessionEvent {
+    readonly sessionID?: string;
+    readonly kind?: string;
+    readonly messages?: FlatMessage[] | unknown;
+    readonly [key: string]: unknown;
+}
+export interface EvolutionHitlDeps {
+    getState?: () => Promise<{
+        lastPromptAt?: string;
+    }>;
+    updateState?: (patch: {
+        lastPromptAt: string;
+    }) => Promise<void>;
+    listPending?: () => Promise<string[]>;
+}
+export declare function applyEvolutionHitl(event: FlatSessionEvent, a?: unknown, b?: unknown, deps?: EvolutionHitlDeps): Promise<void>;

package/dist/hooks/evolution-hitl/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Local legacy `{info, parts}` shapes (Task 27: the V1 `experimental.chat.messages.transform`
+ * fan-out is deleted, so `legacy V1 SDK` message types are no longer imported).
+ * The live native port operates on flat `Message[]` in `src/plugin/message-hooks/`.
+ */
+type Message = {
+    id?: string;
+    sessionID?: string;
+    role?: string;
+    [key: string]: unknown;
+};
+type Part = {
+    type?: string;
+    text?: string;
+    [key: string]: unknown;
+};
+type MessageWithParts = {
+    info: Message;
+    parts: Part[];
+};
+type TransformOutput = {
+    messages: MessageWithParts[];
+};
+export declare function createEvolutionHitlHook(a?: unknown, b?: unknown): {
+    "experimental.chat.messages.transform": (_input: Record<string, never>, output: TransformOutput) => Promise<void>;
+};
+export {};

package/dist/hooks/evolution-quality-gate/index.d.ts

@@ -0,0 +1,6 @@
+import type { EvolutionGovernanceConfig } from "../../config/schema/evolution";
+import type { DistilledKnowledge } from "../../features/evolution/types";
+export declare function passesQualityGate(knowledge: DistilledKnowledge, config: EvolutionGovernanceConfig): {
+    pass: boolean;
+    reason?: string;
+};

package/dist/hooks/evolution-watcher/index.d.ts

@@ -0,0 +1,21 @@
+import type { EvolutionConfig } from "../../config/schema/evolution";
+import type { MatrixxContext } from "../../plugin/context";
+export { classifySuccess, truncate } from "./utils";
+export declare function createEvolutionWatcherHook(a?: MatrixxContext | EvolutionConfig, b?: EvolutionConfig): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+    "tool.execute.after": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: Record<string, unknown>;
+    }) => Promise<void>;
+};

package/dist/hooks/evolution-watcher/utils.d.ts

@@ -0,0 +1,5 @@
+export declare function truncate(value: string, maxChars: number): string;
+export declare function classifySuccess(tool: string, output: string): {
+    success: boolean;
+    errorType?: string;
+};

package/dist/hooks/hashline-read-enhancer/hook.d.ts

@@ -0,0 +1,18 @@
+import type { MatrixxContext } from "../../plugin/context";
+interface HashlineReadEnhancerConfig {
+    hashline_edit?: {
+        enabled: boolean;
+    };
+}
+export declare function createHashlineReadEnhancerHook(_ctx: MatrixxContext, config: HashlineReadEnhancerConfig): {
+    "tool.execute.after": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: unknown;
+    }) => Promise<void>;
+};
+export {};

package/dist/hooks/index.d.ts

@@ -0,0 +1,68 @@
+export { createAgentUsageReminderHook } from "./agent-usage-reminder/hook";
+export { createAutoSlashCommandHook } from "./auto-slash-command";
+export { createAutoUpdateCheckerHook } from "./auto-update-checker";
+export { createBackgroundNotificationHook } from "./background-notification/hook";
+export { createBackgroundTaskBlockerHook } from "./background-task-blocker/hook";
+export { createBashFileReadGuardHook } from "./bash-file-read-guard";
+export { createCategorySkillReminderHook } from "./category-skill-reminder/hook";
+export { createCommentCheckerHooks } from "./comment-checker/hook";
+export { createCompactionContextInjector } from "./compaction-context-injector/hook";
+export { createContextModeEnforcerHook } from "./context-mode-enforcer/hook";
+export { type ContextWindowLimitRecoveryOptions, type ContextWindowLimitRecoveryOptions as AnthropicContextWindowLimitRecoveryOptions, createContextWindowLimitRecoveryHook, createContextWindowLimitRecoveryHook as createAnthropicContextWindowLimitRecoveryHook } from "./context-window-limit-recovery";
+export { createContextWindowMonitorHook } from "./context-window-monitor";
+export { createDcpNudgeSanitizerHook } from "./dcp-nudge-sanitizer/hook";
+export { createDelegateTaskRetryHook } from "./delegate-task-retry/hook";
+export { createDesignIntentPreserverHook } from "./design-intent-preserver/hook";
+export { createDirectoryAgentsInjectorHook } from "./directory-agents-injector/hook";
+export { createDocsLookupGuardHook } from "./docs-lookup-guard/hook";
+export { createDocumentReaderGuardHook } from "./document-reader-guard/hook";
+export { createEditErrorRecoveryHook } from "./edit-error-recovery/hook";
+export { createEmptyTaskResponseDetectorHook } from "./empty-task-response-detector";
+export { createEnvContextInjectorHook } from "./env-context-injector";
+export { createEnvFileWriteGuardHook } from "./env-file-write-guard/hook";
+export { createEvolutionHitlHook } from "./evolution-hitl";
+export { passesQualityGate } from "./evolution-quality-gate";
+export { createEvolutionWatcherHook } from "./evolution-watcher";
+export { createHashlineReadEnhancerHook } from "./hashline-read-enhancer/hook";
+export { createInputSecretGuardHook } from "./input-secret-guard/hook";
+export { createInteractiveBashSessionHook } from "./interactive-bash-session/hook";
+export { createJsonErrorRecoveryHook } from "./json-error-recovery";
+export { createKeywordDetectorHook } from "./keyword-detector/hook";
+export { createKnowledgeHubGuardHook } from "./knowledge-hub-guard/hook";
+export { createKnowledgeHubInjectorHook } from "./knowledge-hub-injector/hook";
+export { createKnowledgeHubSearchNudgeHook } from "./knowledge-hub-search-nudge/hook";
+export { createMatrixLoopHook, type MatrixLoopHook } from "./matrix-loop/matrix-loop-hook";
+export { createMouseNotepadHook } from "./mouse-notepad/hook";
+export { createNiobeHook } from "./niobe/niobe-hook";
+export { createNonInteractiveEnvHook } from "./non-interactive-env/non-interactive-env-hook";
+export { createNudgeLoopBreakerHook } from "./nudge-loop-breaker/hook";
+export { createOracleMdOnlyHook } from "./oracle-md-only/hook";
+export { createPlanPersister } from "./plan-persister";
+export { createPostReadInjectorHook } from "./post-read-injector";
+export { createQualityGateHook } from "./quality-gate/hook";
+export { createReadImageResizerHook } from "./read-image-resizer/hook";
+export { createRtkBashRewriterHook } from "./rtk-bash-rewriter/hook";
+export { createRulesInjectorHook } from "./rules-injector/hook";
+export { createRuntimeFallbackHook, type RuntimeFallbackHook, type RuntimeFallbackOptions, SessionCategoryRegistry } from "./runtime-fallback";
+export { createSecretLeakGuardHook } from "./secret-leak-guard/hook";
+export { createSessionMemoryHook, MAX_CAPTURE_CHARS, MAX_PENDING_ENTRIES, type SessionMemoryHook, type SessionMemoryHookOptions } from "./session-memory";
+export { createSessionNotification } from "./session-notification";
+export { buildWindowsToastScript, escapeAppleScriptText, escapePowerShellSingleQuotedText } from "./session-notification-formatting";
+export { createIdleNotificationScheduler } from "./session-notification-scheduler";
+export { detectPlatform, getDefaultSoundPath, playSessionNotificationSound, sendSessionNotification } from "./session-notification-sender";
+export { createSessionRecoveryHook, type SessionRecoveryHook, type SessionRecoveryOptions } from "./session-recovery";
+export { createSoftwareDevEnforcementHook } from "./software-dev-enforcement/hook";
+export { createStartWorkHook } from "./start-work/start-work-hook";
+export { createStopContinuationGuardHook, type StopContinuationGuard } from "./stop-continuation-guard/hook";
+export { createSubagentBlockHook } from "./subagent-block/hook";
+export { createTaskContinuationEnforcer, type TaskContinuationEnforcer } from "./task-continuation-enforcer";
+export { createTaskEditGuardHook } from "./task-edit-guard/hook";
+export { createTaskNotepadWriterHook } from "./task-notepad-writer/hook";
+export { createTaskResumeInfoHook } from "./task-resume-info/hook";
+export { createThinkModeHook } from "./think-mode";
+export { createThinkingBlockValidatorHook } from "./thinking-block-validator/hook";
+export { createToolOutputTruncatorHook } from "./tool-output-truncator";
+export { createToolPairValidatorHook } from "./tool-pair-validator/hook";
+export { createUnstableAgentBabysitterHook } from "./unstable-agent-babysitter";
+export { createWebFetchRedirectGuardHook } from "./webfetch-redirect-guard/hook";
+export { createWriteExistingFileGuardHook } from "./write-existing-file-guard/hook";

package/dist/hooks/input-secret-guard/detection-rules.d.ts

@@ -0,0 +1,10 @@
+export interface Rule {
+    id: string;
+    pattern: string;
+    description: string;
+    severity: "block" | "warn";
+}
+export type RuleSeverity = "block" | "warn";
+export type DetectionRule = Rule;
+export declare const BLOCKLIST_RULES: Rule[];
+export declare const WARNLIST_HEURISTICS: Rule[];

package/dist/hooks/input-secret-guard/detector.d.ts

@@ -0,0 +1,21 @@
+import { hashFinding, redactMatch } from "./redactor";
+export type Finding = {
+    ruleId: string;
+    match: string;
+    redacted: string;
+    severity: "block" | "warn";
+    start: number;
+    end: number;
+};
+export type CompiledRule = {
+    id: string;
+    severity: "block" | "warn";
+    regex: RegExp;
+};
+export declare function shannonEntropy(token: string): number;
+export declare function detectSecrets(text: string, opts?: {
+    maxScanBytes?: number;
+    allowlist?: string[];
+    entropyThreshold?: number;
+}): Finding[];
+export { hashFinding, redactMatch };

package/dist/hooks/input-secret-guard/hook.d.ts

@@ -0,0 +1,19 @@
+import type { InputSecretGuardConfig } from "../../config/schema/security";
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function createInputSecretGuardHook(_ctx: NativePluginContext, cfg?: InputSecretGuardConfig): {
+    "chat.message": (input: {
+        sessionID: string;
+        agent?: string;
+        model?: {
+            providerID: string;
+            modelID: string;
+        };
+    }, output: {
+        message: Record<string, unknown>;
+        parts: Array<{
+            type: string;
+            text?: string;
+            [key: string]: unknown;
+        }>;
+    }) => Promise<void>;
+};

package/dist/hooks/input-secret-guard/redactor.d.ts

@@ -0,0 +1,2 @@
+export declare function redactMatch(raw: string): string;
+export declare function hashFinding(ruleId: string, redacted: string): string;

package/dist/hooks/input-secret-guard/session-allow-cache.d.ts

@@ -0,0 +1,6 @@
+export declare function isSessionAllowed(sessionID: string, hash: string): boolean;
+export declare function allowOnce(sessionID: string, hash: string): void;
+export declare function allowSession(sessionID: string, hash: string): void;
+export declare function consumeOneShot(sessionID: string, hash: string): boolean;
+export declare function clearSession(sessionID: string): void;
+export declare function clearAll(): void;

package/dist/hooks/interactive-bash-session/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const INTERACTIVE_BASH_SESSION_STORAGE: string;
+export declare const MATRIXX_SESSION_PREFIX = "matrixx-";
+export declare function buildSessionReminderMessage(sessions: string[]): string;

package/dist/hooks/interactive-bash-session/hook.d.ts

@@ -0,0 +1,18 @@
+import type { V2Event } from "../../plugin/context";
+import type { NativePluginContext } from "../../shared/session-context-source";
+interface ToolExecuteInput {
+    tool: string;
+    sessionID: string;
+    callID: string;
+    args?: Record<string, unknown>;
+}
+interface ToolExecuteOutput {
+    title: string;
+    output: string;
+    metadata: unknown;
+}
+export declare function createInteractiveBashSessionHook(ctx: NativePluginContext): {
+    "tool.execute.after": (input: ToolExecuteInput, output: ToolExecuteOutput) => Promise<void>;
+    event: (event: V2Event) => Promise<void>;
+};
+export {};

package/dist/hooks/interactive-bash-session/parser.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Quote-aware command tokenizer with escape handling
+ * Handles single/double quotes and backslash escapes
+ */
+export declare function tokenizeCommand(cmd: string): string[];
+/**
+ * Extract session name from tokens, considering the subCommand
+ * For new-session: prioritize -s over -t
+ * For other commands: use -t
+ */
+export declare function extractSessionNameFromTokens(tokens: string[], subCommand: string): string | null;
+/**
+ * Find the tmux subcommand from tokens, skipping global options.
+ * tmux allows global options before the subcommand:
+ * e.g., `tmux -L socket-name new-session -s matrixx-x`
+ * Global options with args: -L, -S, -f, -c, -T
+ * Standalone flags: -C, -v, -V, etc.
+ * Special: -- (end of options marker)
+ */
+export declare function findSubcommand(tokens: string[]): string;

package/dist/hooks/interactive-bash-session/state-manager.d.ts

@@ -0,0 +1,4 @@
+import type { InteractiveBashSessionState } from "./types";
+export declare function getOrCreateState(sessionID: string, sessionStates: Map<string, InteractiveBashSessionState>): InteractiveBashSessionState;
+export declare function isOmoSession(sessionName: string | null): boolean;
+export declare function killAllTrackedSessions(state: InteractiveBashSessionState): Promise<void>;

package/dist/hooks/interactive-bash-session/storage.d.ts

@@ -0,0 +1,4 @@
+import type { InteractiveBashSessionState } from "./types";
+export declare function loadInteractiveBashSessionState(sessionID: string): InteractiveBashSessionState | null;
+export declare function saveInteractiveBashSessionState(state: InteractiveBashSessionState): void;
+export declare function clearInteractiveBashSessionState(sessionID: string): void;

package/dist/hooks/interactive-bash-session/types.d.ts

@@ -0,0 +1,10 @@
+export interface InteractiveBashSessionState {
+    sessionID: string;
+    tmuxSessions: Set<string>;
+    updatedAt: number;
+}
+export interface SerializedInteractiveBashSessionState {
+    sessionID: string;
+    tmuxSessions: string[];
+    updatedAt: number;
+}

package/dist/hooks/json-error-recovery/hook.d.ts

@@ -0,0 +1,15 @@
+import type { MatrixxContext } from "../../plugin/context";
+export declare const JSON_ERROR_TOOL_EXCLUDE_LIST: readonly ["bash", "shell", "read", "glob", "grep", "webfetch", "look_at", "github_search", "websearch"];
+export declare const JSON_ERROR_PATTERNS: readonly RegExp[];
+export declare const JSON_ERROR_REMINDER = "\n[JSON PARSE ERROR - IMMEDIATE ACTION REQUIRED]\n\nYou sent invalid JSON arguments to a tool. STOP and do this NOW:\n\n1. DO NOT retry with the same malformed JSON\n2. CORRECT the JSON syntax \u2014 check for: missing quotes, trailing commas, unmatched braces\n3. RETRY the tool call with valid JSON arguments\n\nThis usually means you garbled a string parameter or forgot to escape a character.\n";
+export declare function createJsonErrorRecoveryHook(_ctx: MatrixxContext): {
+    "tool.execute.after": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: unknown;
+    }) => Promise<void>;
+};

package/dist/hooks/json-error-recovery/index.d.ts

@@ -0,0 +1 @@
+export { createJsonErrorRecoveryHook, JSON_ERROR_PATTERNS, JSON_ERROR_REMINDER, JSON_ERROR_TOOL_EXCLUDE_LIST, } from "./hook";

package/dist/hooks/keyword-detector/analyze/default.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Analyze mode keyword detector.
+ *
+ * Triggers on analysis-related keywords across multiple languages:
+ * - English: analyze, analyse, investigate, examine, research, study, deep-dive, inspect, audit, evaluate, assess, review, diagnose, scrutinize, dissect, debug, comprehend, interpret, breakdown, understand, why is, how does, how to
+ * - Korean: 분석, 조사, 파악, 연구, 검토, 진단, 이해, 설명, 원인, 이유, 뜯어봐, 따져봐, 평가, 해석, 디버깅, 디버그, 어떻게, 왜, 살펴
+ * - Japanese: 分析, 調査, 解析, 検討, 研究, 診断, 理解, 説明, 検証, 精査, 究明, デバッグ, なぜ, どう, 仕組み
+ * - Chinese: 调查, 检查, 剖析, 深入, 诊断, 解释, 调试, 为什么, 原理, 搞清楚, 弄明白
+ * - Vietnamese: phân tích, điều tra, nghiên cứu, kiểm tra, xem xét, chẩn đoán, giải thích, tìm hiểu, gỡ lỗi, tại sao
+ */
+export declare const ANALYZE_PATTERN: RegExp;
+export declare const ANALYZE_MESSAGE = "[analyze-mode]\nANALYSIS MODE. Gather context before diving deep:\n\nCONTEXT GATHERING (parallel):\n- 1-2 trinity agents (codebase patterns, implementations)\n- 1-2 operator agents (if external library involved)\n- Direct tools: Grep (if available), AST-grep, LSP for targeted searches\n\nIF COMPLEX - DO NOT STRUGGLE ALONE. Consult specialists:\n- **Oracle**: Conventional problems (architecture, debugging, complex logic)\n- **Matrix-bend**: Non-conventional problems (different approach needed)\n\nSYNTHESIZE findings before proceeding.";

package/dist/hooks/keyword-detector/constants.d.ts

@@ -0,0 +1,10 @@
+export { CODE_BLOCK_PATTERN, INLINE_CODE_PATTERN } from "../../shared/code-patterns";
+export { ANALYZE_MESSAGE, ANALYZE_PATTERN } from "./analyze/default";
+export { DOCS_MESSAGE, DOCS_PATTERN } from "./docs/default";
+export { SEARCH_MESSAGE, SEARCH_PATTERN } from "./search/default";
+export { getUltraworkMessage, isPlannerAgent } from "./ultrawork";
+type KeywordDetector = {
+    pattern: RegExp;
+    message: string | ((agentName?: string, modelID?: string) => string);
+};
+export declare const KEYWORD_DETECTORS: KeywordDetector[];

package/dist/hooks/keyword-detector/detector.d.ts

@@ -0,0 +1,11 @@
+interface DetectedKeyword {
+    type: "ultrawork" | "search" | "analyze" | "docs";
+    message: string;
+}
+export declare function removeCodeBlocks(text: string): string;
+export declare function detectKeywordsWithType(text: string, agentName?: string, modelID?: string): DetectedKeyword[];
+export declare function extractPromptText(parts: Array<{
+    type: string;
+    text?: string;
+}>): string;
+export {};

package/dist/hooks/keyword-detector/docs/default.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Docs mode keyword detector (4th detector).
+ *
+ * docs-suppresses-search: when a docs intent co-matches the broad
+ * SEARCH_PATTERN, the docs match wins and the search injection is
+ * suppressed (avoids exhaustive parallel-search fan-out for direct
+ * library/framework doc lookups that belong to the operator agent).
+ *
+ * Exact-match only: the pattern is built from DOC_INTENT_TRIGGERS
+ * (docs-lookup-guard constants) with regex escaping — no fuzzy
+ * triggers, no init-time checks.
+ */
+export declare const DOCS_PATTERN: RegExp;
+export declare const DOCS_MESSAGE = "[docs-mode]\nDOCS LOOKUP. Delegate library/framework documentation queries to the operator agent for context isolation:\n- task(subagent_type=\"operator\", prompt=\"Look up docs for <library> <topic> via context7_resolve-library-id then context7_query-docs\")\n- Operator agents may call context7/websearch docs tools directly (operator-direct).\nDo NOT fan out parallel search agents for pure docs intents.";

package/dist/hooks/keyword-detector/hook.d.ts

@@ -0,0 +1,20 @@
+import type { ContextCollector } from "../../features/context-injector";
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function createKeywordDetectorHook(_ctx: NativePluginContext, _collector?: ContextCollector): {
+    "chat.message": (input: {
+        sessionID: string;
+        agent?: string;
+        model?: {
+            providerID: string;
+            modelID: string;
+        };
+        messageID?: string;
+    }, output: {
+        message: Record<string, unknown>;
+        parts: Array<{
+            type: string;
+            text?: string;
+            [key: string]: unknown;
+        }>;
+    }) => Promise<void>;
+};

package/dist/hooks/keyword-detector/search/default.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Search mode keyword detector.
+ *
+ * Triggers on search-related keywords across multiple languages:
+ * - English: search, find, locate, lookup, explore, discover, scan, grep, query, browse, detect, trace, seek, track, pinpoint, hunt, where is, show me, list all
+ * - Korean: 검색, 찾아, 탐색, 조회, 스캔, 서치, 뒤져, 찾기, 어디, 추적, 탐지, 찾아봐, 찾아내, 보여줘, 목록
+ * - Japanese: 検索, 探して, 見つけて, サーチ, 探索, スキャン, どこ, 発見, 捜索, 見つけ出す, 一覧
+ * - Chinese: 搜索, 查找, 寻找, 查询, 检索, 定位, 扫描, 发现, 在哪里, 找出来, 列出
+ * - Vietnamese: tìm kiếm, tra cứu, định vị, quét, phát hiện, truy tìm, tìm ra, ở đâu, liệt kê
+ */
+export declare const SEARCH_PATTERN: RegExp;
+export declare const SEARCH_MESSAGE = "[search-mode]\nMAXIMIZE SEARCH EFFORT. Launch multiple background agents IN PARALLEL:\n- trinity agents (codebase patterns, file structures, ast-grep)\n- operator agents (remote repos, official docs, GitHub examples)\nPlus direct tools: Grep (if available), ripgrep (rg), ast-grep (sg)\nNEVER stop at first result - be exhaustive.";

package/dist/hooks/keyword-detector/ultrawork/deepseek.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Ultrawork message optimized for DeepSeek V4 Flash models.
+ *
+ * Key characteristics (from DeepSeek V4 Flash research):
+ * - Thinking/reasoning mode (enabled by default, explicitly disable when not needed)
+ * - Strong on code generation, simple agent tasks, long-context understanding
+ * - Responds well to structured prompts with XML-style section boundaries
+ * - Task sandwich pattern (task before AND after long context)
+ * - Output anchors to reduce preamble drift
+ * - Self-check instructions to catch ~70% of errors
+ * - Temperature 0.0 for deterministic code output
+ * - 1M token context window
+ * - Preserve reasoning_content in tool-call assistant messages across turns
+ */
+export declare const ULTRAWORK_DEEPSEEK_MESSAGE = "<ultrawork-mode>\n\n**MANDATORY**: You MUST say \"ULTRAWORK MODE ENABLED!\" to the user as your first response when this mode activates. This is non-negotiable.\n\n<role>\n  You are a senior engineering agent. Ship verified work. No process narration.\n</role>\n\n<thinking_mode>\n  Thinking mode is ON by default on DeepSeek V4 Flash. For trivial tasks (single-file edit, typo fix, simple lookup), explicitly request thinking OFF. For complex tasks (architecture, multi-file, debugging, planning), keep thinking ON at high effort. When thinking is enabled, temperature/penalty parameters are ignored \u2014 tune the prompt instead. Never strip reasoning_content from assistant messages that contain tool_calls.\n</thinking_mode>\n\n<certainty_protocol>\n  ## Absolute Certainty Required\n  You MUST NOT start implementation until you are 100% certain.\n\n  Before you write code:\n  - Fully understand the user's actual intent\n  - Explore the codebase to understand patterns and architecture\n  - Have a clear work plan\n  - Resolve ambiguities through exploration, not guessing\n\n  When uncertain:\n  1. Fire trinity agents for codebase exploration (run_in_background=true)\n  2. Fire operator agents for external research (run_in_background=true)\n  3. Hard debugging after 2+ failures \u2192 consult Merovingian (read-only); architecture/replanning \u2192 consult Oracle\n  4. Only ask the user as last resort\n\n  Signs you are NOT ready: making assumptions, unsure which files, plan has \"maybe\", can't explain exact steps.\n</certainty_protocol>\n\n<task>\n  Deliver EXACTLY what the user asked, end-to-end working, with captured evidence: a failing-first proof that went RED to GREEN, plus real-surface proof sized by the tier below. Tests alone never prove done.\n</task>\n\n<quality_tiers>\n  LIGHT: Known pattern, no open design decisions (bugfix following existing pattern, query tweak, copy/constants). Plan directly in notepad. 1-2 success criteria. One real-surface proof. Self-review.\n\n  HEAVY: New module/layer/abstraction, auth/security, external integration, DB schema, concurrency, cross-boundary refactor, or user signals care. 3+ success criteria (happy, edge, regression). Reviewer loop until approval. Full evidence gates.\n</quality_tiers>\n\n<delegation_framework>\n  ## Agents / Categories + Skills\n\n  DEFAULT: Delegate. Do not work yourself.\n\n  | Task | Action |\n  |------|--------|\n  | Codebase exploration | task(subagent_type=\"trinity\", load_skills=[], run_in_background=true) |\n  | Documentation lookup | task(subagent_type=\"operator\", load_skills=[], run_in_background=true) |\n  | Planning (2+ steps) | task(subagent_type=\"plan\", load_skills=[]) |\n  | Hard debugging after 2+ failures | task(subagent_type=\"merovingian\", load_skills=[]) | Read-only consult, no writes |\n  | Architecture/replanning | task(subagent_type=\"oracle\", load_skills=[]) | Complex architecture, scope change |\n  | Hard problem (non-conventional) | task(category=\"matrix-bend\", load_skills=[...]) |\n  | Implementation | task(category=\"...\", load_skills=[...]) |\n\n  Do it yourself only when: trivial (<10 lines), you have full context, delegation overhead exceeds task complexity.\n</delegation_framework>\n\n<plan_agent_rule>\n  ## Plan Agent Invocation (Non-Negotiable)\n\n  Size the scope first. Count distinct surfaces, files, steps. If 2+ steps, unclear scope, implementation required, or architecture decision needed: MUST call plan agent.\n\n  After plan returns: execute in EXACT wave order and parallel grouping it specifies. Run verification IT defines per task.\n</plan_agent_rule>\n\n<verification_guarantee>\n  ## Verification Guarantee\n\n  Nothing is done without proof.\n\n  ### Goal Registration (BINDING)\n  When the `task_create` tool exists, register the goal with it BEFORE any implementation: objective, scenario contract, and WHEN TO STOP line.\n\n  ### Scenario Contract (BINDING)\n  Define 3+ scenarios before coding: happy path, edge (boundary/empty/malformed/concurrent), adjacent-surface regression. Each has a binary pass condition, real surface proof, and test id.\n\n  ### Acceptance Criteria + QA\n  Output an acceptance criteria block before any code. Each criterion: binary PASS/FAIL, verifiable via command. Run every verification command. Report results. Fix failures, re-run all.\n\n  | Evidence Gate | Required |\n  |---|---|\n  | RED | Failing assertion before production code |\n  | GREEN | Same test passing |\n  | Surface | CLI/curl/browser artifact |\n  | Build | Exit code 0 |\n  | Suite | All green, no skip/.only/xfail |\n  | Lint | lsp_diagnostics clean |\n\n  **NO EVIDENCE = NOT VERIFIED = NOT DONE.**\n\n  ### Durable Notepad\n  Create a notepad file with sections: Plan, Scenarios, Now, Todo, Findings (file:line), Learnings. Append only. If context is lost, re-read and resume.\n\n  ### TDD Workflow (Mandatory)\n  Every production change follows RED \u2192 GREEN \u2192 SURFACE \u2192 REFACTOR \u2192 REGRESSION. Write failing test FIRST. Capture RED. Write smallest change to flip GREEN. Exercise real surface. Refactor if needed. Re-run full scenario list.\n\n  ### Commit Discipline\n  One atomic commit per verified increment. Before composing, read git log and match conventions.\n\n  ### Reviewer Gate\n  Trigger when: user demands review, 3+ files, 20+ turns, 30+ minutes, refactor/migration/perf/security. Spawn reviewer via task with goal + scenarios + evidence + diff.\n</verification_guarantee>\n\n<execution_rules>\n  ## Execution Rules\n  - TODO format: path: <action> for <scenario> \u2014 verify by <check>\n  - Mark in_progress/completed INSTANTLY. Never batch.\n  - Parallel independent agents. Never parallelise RED and GREEN of same scenario.\n  - Background first: 10+ concurrent agents if needed.\n  - Verify after every increment. Re-read request before final answer.\n</execution_rules>\n\n<output_discipline>\n  ## Output Discipline\n  - First line literally: \"ULTRAWORK MODE ENABLED!\"\n  - During execution: surface only state changes and evidence.\n  - Final message: outcome + criteria checklist with evidence refs + notepad path.\n  - No file-by-file changelog unless asked.\n  - Lead with the result, then the evidence, then remaining blockers.\n</output_discipline>\n\n<stop_rules>\n  ## Stop Rules\n  - After each result, ask: can the user's request be answered now with evidence? If yes, answer now.\n  - STOP GOAL: every scenario PASSES, evidence captured, cleanup done, reviewer approved. Above all: is the user's problem ACTUALLY SOLVED? If yes, deliver and stop.\n  - After 2 identical failed attempts at one step, surface and ask user.\n  - After 2 exploration waves with no new facts, stop exploring.\n</stop_rules>\n\n<zero_tolerance>\n  ## Zero Tolerance Failures\n  - No scope reduction\n  - No mock implementations\n  - No partial completion\n  - No unverified success claims\n  - No deleted/skipped failing tests\n  - No fabricated evidence\n</zero_tolerance>\n\n</ultrawork-mode>\n\n---\n\n";
+export declare function getDeepseekUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/default.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Default ultrawork message optimized for Claude series models.
+ * Condensed v2: ~9k chars (was 19k) to reduce token pressure.
+ */
+export declare const ULTRAWORK_DEFAULT_MESSAGE = "<ultrawork-mode>\n\n**MANDATORY**: You MUST say \"ULTRAWORK MODE ENABLED!\" to the user as your first response when this mode activates. This is non-negotiable.\n\n[CODE RED] Maximum precision required. Ultrathink before acting.\n\n## ABSOLUTE CERTAINTY REQUIRED\n\n**YOU MUST NOT START IMPLEMENTATION UNTIL 100% CERTAIN.** You must: FULLY UNDERSTAND intent, EXPLORE codebase patterns, HAVE CRYSTAL CLEAR PLAN, RESOLVE ALL AMBIGUITY.\n\n### MANDATORY CERTAINTY PROTOCOL\n1. **THINK DEEPLY** - What is user's TRUE intent?\n2. **EXPLORE THOROUGHLY** - Fire trinity/operator agents (see below)\n3. **CONSULT SPECIALISTS** - Hard debugging after 2+ failures \u2192 Merovingian (read-only); architecture/replanning \u2192 Oracle (conventional), Matrix-bend (non-conventional)\n4. **ASK USER** - Only if ambiguity remains after exploration\n\n**NOT READY if:** assuming requirements, unsure files, \"probably\"/\"maybe\" in plan, can't explain exact steps.\n\n**WHEN IN DOUBT:**\ntask(subagent_type=\"trinity\", load_skills=[], prompt=\"I'm implementing [TASK] and need [KNOWLEDGE GAP]. Find [X] patterns \u2014 file paths, approach, conventions. Focus src/, skip tests. Return paths + descriptions.\", run_in_background=true)\ntask(subagent_type=\"operator\", load_skills=[], prompt=\"I'm working with [LIBRARY] and need [INFO]. Find docs + production examples \u2014 API, config, pitfalls. Skip tutorials.\", run_in_background=true)\ntask(subagent_type=\"oracle\", load_skills=[], prompt=\"Review my approach to [TASK]: [PLAN + FILES + CHANGES]. Concerns: [UNCERTAINTIES]. Evaluate correctness, missing issues, better alternatives.\", run_in_background=false)\n\n**ONLY AFTER** gathering context, resolving ambiguity, having precise step-by-step plan with 100% confidence \u2014 THEN implement.\n\n---\n\n## NO EXCUSES. DELIVER EXACTLY X.\n\n| Violation | Consequence |\n| \"I couldn't because...\" | UNACCEPTABLE \u2014 Find way or ask |\n| \"Simplified version...\" | UNACCEPTABLE \u2014 Deliver FULL |\n| \"You can extend later...\" | UNACCEPTABLE \u2014 Finish NOW |\n\n**IF BLOCKED:** Consult specialists, ask user, explore alternatives \u2014 never give up or deliver compromised version.\n\n\nTHE USER'S ORIGINAL REQUEST IS SACRED \u2014 deliver exactly X, no subset, no demo.\n\nSURVEY THE SKILLS \u2014 enumerate every skill, read descriptions, pick every relevant one, state choices with one-line reasons before acting.\n\n## MANDATORY: ACCEPTANCE CRITERIA + QA EXECUTION (NON-NEGOTIABLE)\nBEFORE writing ANY code, output an Acceptance Criteria block.\n1. [CRITERION]: [Observable, binary pass/fail condition] \u2014 PASS or FAIL\n2. Minimum 3 criteria (correctness, no regression, typecheck/lint)\n### Verification Commands:\n- [Exact command to run] -> [Expected output]\n3. Run every verification command, report \u2705/\u274C per criterion, fix and re-run ALL if any fail \u2014 NO EVIDENCE = NOT VERIFIED = NOT DONE\n\n---\n\nYOU MUST LEVERAGE ALL AVAILABLE AGENTS / CATEGORY + SKILLS TO THEIR FULLEST POTENTIAL.\n\n**SURVEY THE SKILLS FIRST:** Enumerate every skill, read descriptions, pick every genuinely relevant one, use them rather than working raw. State chosen skills with one-line reasons before acting.\n\n## MANDATORY: PLAN AGENT INVOCATION\n\n**SIZE SCOPE FIRST.** 2+ steps / multi-file / unclear-scope / architecture = MUST call plan agent.\n\n| Task has 2+ steps | MUST call plan agent |\n| Task scope unclear | MUST call plan agent |\n| Implementation required | MUST call plan agent |\n| Architecture needed | MUST call plan agent |\n\nAfter plan returns, execute in EXACT wave order and verification it specifies.\n\ntask(subagent_type=\"oracle\", load_skills=[], prompt=\"<gathered context + user request>\")\n\n**WHY:** Plan agent analyzes dependencies, outputs parallel task graph with waves, provides structured TODOs with category+skills.\n\n### SESSION CONTINUITY\n- Plan asks questions \u2192 task(session_id=\"{id}\", prompt=\"<answer>\")\n- Refine plan \u2192 task(session_id=\"{id}\", prompt=\"Adjust: <feedback>\")\n\n**FAILURE TO CALL PLAN = INCOMPLETE WORK.**\n\n---\n\n## AGENT UTILIZATION\n\n| Type | Action | Why |\n| Codebase exploration | task(subagent_type=\"trinity\", run_in_background=true) | Parallel, context-efficient |\n| Docs lookup | task(subagent_type=\"operator\", run_in_background=true) | Specialized knowledge |\n| Planning | task(subagent_type=\"oracle\") | Parallel task graph |\n| Hard debugging after 2+ failures | task(subagent_type=\"merovingian\", load_skills=[], run_in_background=false) | Read-only consult, no writes |\n| Architecture/replanning | task(subagent_type=\"oracle\" or category=\"matrix-bend\") | Complex architecture, scope change |\n| Implementation | task(category=\"...\", load_skills=[...]) | Domain-optimized |\n\n**DELEGATE BY DEFAULT. DO IT YOURSELF only if <10 lines, single file, obvious pattern, full context loaded.**\n\n---\n\n## EXPLORER COMPLETION PROTOCOL (MANDATORY \u2014 FIXES STALL)\n\nAfter firing 3 parallel explorers with run_in_background=true:\n\n1. **POLL RESULTS:** Immediately call background_output(task_id=\"...\") for each explorer \u2014 wait max 30s per explorer\n2. **USE Promise.allSettled:** Never halt waiting for one explorer \u2014 collect what you can, note gaps\n3. **ALWAYS INVOKE PLAN:** Even if 0/3 explorers succeed, UNCONDITIONALLY call task(subagent_type=\"oracle\", ...) in finally block\n4. **TIMEOUT FALLBACK:** If background tasks still running after 30s, proceed with partial context and document missing areas as assumptions\n5. **NEVER STALL:** The session idle handler will bootstrap you to plan if you fail \u2014 but don't rely on it; invoke plan yourself\n\n```javascript\n// CORRECT \u2014 always reaches plan\nconst ids = [];\nids.push((await task(trinity, run_in_background=true)).task_id);\nids.push((await task(trinity, run_in_background=true)).task_id);\nids.push((await task(operator, run_in_background=true)).task_id);\n// poll\nconst results = await Promise.allSettled(ids.map(id => background_output(id)));\n// ALWAYS plan\nawait task(subagent_type=\"oracle\", prompt=\"...with explorer results: \"+JSON.stringify(results));\n```\n\n---\n\n## VERIFICATION GUARANTEE\n\n**NOTHING done without PROOF.**\n\n### Goal Registration\nWhen the `task_create` tool exists, register the run's goal with it: objective + 3+ scenarios (happy/edge/regression) + \"I'll stop when <observable>\"\n\n### Scenario Contract (3+ required)\n- Binary pass condition (\"returns 200 + body matches schema\")\n- Real surface (curl/CLI/browser), not just \"tests pass\"\n- Test file + test id (RED \u2192 GREEN)\n\n### Durable Notepad\n`# Ultrawork Notepad - <goal>\n## Plan\n## Scenarios\n## Now\n## Todo\n## Findings\n## Learnings`\n\n### TDD: RED \u2192 GREEN \u2192 SURFACE \u2192 REFACTOR \u2192 REGRESSION\n\n### QA Protocol\nRun every verification command, report \u2705/\u274C per criterion, fix and re-run ALL if any fail.\n\n## QA Report\n| # | Criterion | Result | Evidence |\n| 1 | ... | \u2705 PASS | ... |\n\n**Overall: X/Y PASS \u2014 ACCEPTED/NEEDS FIX**\n\n### Reviewer Gate\nTrigger: strictly/rigorously, 3+ files, 20+ turns, 30+ min, refactor/security. Spawn reviewer, fix criterion-cited blockers, re-submit max 2x.\n\n## EXECUTION RULES\n- TODO: `path: <action> for <scenario-id> \u2014 verify by <check>` \u2014 ONE in_progress at a time\n- PARALLEL: task(run_in_background=true) \u2014 NEVER sequential, never parallelise RED/GREEN\n- VERIFY: Re-read request, check every scenario PASS with both artifacts\n- DELEGATE: Orchestrate, don't do everything yourself\n\n## WORKFLOW\n1. Analyze request \u2192 2. Spawn explorers+direct tools IN PARALLEL \u2192 3. Plan agent \u2192 4. Execute with verification\n\n## ZERO TOLERANCE\n- NO Scope Reduction, NO MockUp, NO Partial \u2014 deliver FULL 100%\n- NO TEST DELETION \u2014 fix code, not tests\n\n1. EXPLORES + LIBRARIANS (parallel background)\n2. GATHER \u2192 PLAN AGENT\n3. WORK BY DELEGATING\n\nNOW.\n\n</ultrawork-mode>\n\n---\n";
+export declare function getDefaultUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/gemini.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Ultrawork message optimized for Gemini series models.
+ *
+ * Key characteristics:
+ * - Strong intent classification gate (Gemini models benefit from explicit classification)
+ * - Survey skills first methodology
+ * - Goal registration, scenario contracts, durable notepad
+ * - TDD workflow with RED→GREEN→SURFACE→REFACTOR→REGRESSION
+ * - Manual QA mandate with cleanup receipts
+ */
+export declare const ULTRAWORK_GEMINI_MESSAGE = "<ultrawork-mode>\n\n**MANDATORY**: You MUST say \"ULTRAWORK MODE ENABLED!\" to the user as your first response when this mode activates. This is non-negotiable.\n\n[CODE RED] Maximum precision required. Ultrathink before acting.\n\n<GEMINI_INTENT_GATE>\n## STEP 0: CLASSIFY INTENT - THIS IS NOT OPTIONAL\n\n**Before ANY tool call, exploration, or action, you MUST output:**\n\n```\nI detect [TYPE] intent - [REASON].\nMy approach: [ROUTING DECISION].\n```\n\nWhere TYPE is one of: research | implementation | investigation | evaluation | fix | open-ended\n\n**SELF-CHECK (answer each before proceeding):**\n\n1. Did the user EXPLICITLY ask me to build/create/implement something? \u2192 If NO, do NOT implement.\n2. Did the user say \"look into\", \"check\", \"investigate\", \"explain\"? \u2192 RESEARCH only. Do not code.\n3. Did the user ask \"what do you think?\" \u2192 EVALUATE and propose. Do NOT execute.\n4. Did the user report an error/bug? \u2192 MINIMAL FIX only. Do not refactor.\n\n**YOUR FAILURE MODE**: You see a request and immediately start coding. STOP. Classify first.\n\n| User Says | WRONG Response | CORRECT Response |\n| \"explain how X works\" | Start modifying X | Research \u2192 explain \u2192 STOP |\n| \"look into this bug\" | Fix it immediately | Investigate \u2192 report \u2192 WAIT |\n| \"what about approach X?\" | Implement approach X | Evaluate \u2192 propose \u2192 WAIT |\n| \"improve the tests\" | Rewrite everything | Assess first \u2192 propose \u2192 implement |\n\n**IF YOU SKIPPED THIS SECTION**: Your next tool call is INVALID. Go back and classify.\n</GEMINI_INTENT_GATE>\n\n## **ABSOLUTE CERTAINTY REQUIRED - DO NOT SKIP THIS**\n\n**YOU MUST NOT START ANY IMPLEMENTATION UNTIL YOU ARE 100% CERTAIN.**\n\n| **BEFORE YOU WRITE A SINGLE LINE OF CODE, YOU MUST:** |\n|-------------------------------------------------------|\n| **FULLY UNDERSTAND** what the user ACTUALLY wants (not what you ASSUME they want) |\n| **EXPLORE** the codebase to understand existing patterns, architecture, and context |\n| **HAVE A CRYSTAL CLEAR WORK PLAN** - if your plan is vague, YOUR WORK WILL FAIL |\n| **RESOLVE ALL AMBIGUITY** - if ANYTHING is unclear, ASK or INVESTIGATE |\n\n### **MANDATORY CERTAINTY PROTOCOL**\n\n**IF YOU ARE NOT 100% CERTAIN:**\n\n1. **THINK DEEPLY** - What is the user's TRUE intent? What problem are they REALLY trying to solve?\n2. **EXPLORE THOROUGHLY** - Fire trinity/operator agents to gather ALL relevant context\n3. **CONSULT SPECIALISTS** - For hard/complex tasks, DO NOT struggle alone. Delegate:\n   - **Merovingian**: Hard debugging after 2+ failures \u2014 read-only consult, no writes\n   - **Oracle**: Architecture/replanning, complex logic \u2014 scope change, strategy\n   - **Matrix-bend**: Non-conventional problems - different approach needed, unusual constraints\n4. **ASK THE USER** - If ambiguity remains after exploration, ASK. Don't guess.\n\n**SIGNS YOU ARE NOT READY TO IMPLEMENT:**\n- You're making assumptions about requirements\n- You're unsure which files to modify\n- You don't understand how existing code works\n- Your plan has \"probably\" or \"maybe\" in it\n- You can't explain the exact steps you'll take\n\n**WHEN IN DOUBT:**\n```\ntask(subagent_type=\"trinity\", load_skills=[], prompt=\"I'm implementing [TASK DESCRIPTION] and need to understand [SPECIFIC KNOWLEDGE GAP]. Find [X] patterns in the codebase \u2014 show file paths, implementation approach, and conventions used. I'll use this to [HOW RESULTS WILL BE USED]. Focus on src/ directories, skip test files unless test patterns are specifically needed. Return concrete file paths with brief descriptions of what each file does.\", run_in_background=true)\ntask(subagent_type=\"operator\", load_skills=[], prompt=\"I'm working with [LIBRARY/TECHNOLOGY] and need [SPECIFIC INFORMATION]. Find official documentation and production-quality examples for [Y] \u2014 specifically: API reference, configuration options, recommended patterns, and common pitfalls. Skip beginner tutorials. I'll use this to [DECISION THIS WILL INFORM].\", run_in_background=true)\ntask(subagent_type=\"oracle\", load_skills=[], prompt=\"I need architectural review of my approach to [TASK]. Here's my plan: [DESCRIBE PLAN WITH SPECIFIC FILES AND CHANGES]. My concerns are: [LIST SPECIFIC UNCERTAINTIES]. Please evaluate: correctness of approach, potential issues I'm missing, and whether a better alternative exists.\", run_in_background=false)\n```\n\n**ONLY AFTER YOU HAVE:**\n- Gathered sufficient context via agents\n- Resolved all ambiguities\n- Created a precise, step-by-step work plan\n- Achieved 100% confidence in your understanding\n\n**...THEN AND ONLY THEN MAY YOU BEGIN IMPLEMENTATION.**\n\n---\n\n## **NO EXCUSES. NO COMPROMISES. DELIVER WHAT WAS ASKED.**\n\n**THE USER'S ORIGINAL REQUEST IS SACRED. YOU MUST FULFILL IT EXACTLY.**\n\n| VIOLATION | CONSEQUENCE |\n|-----------|-------------|\n| \"I couldn't because...\" | **UNACCEPTABLE.** Find a way or ask for help. |\n| \"This is a simplified version...\" | **UNACCEPTABLE.** Deliver the FULL implementation. |\n| \"You can extend this later...\" | **UNACCEPTABLE.** Finish it NOW. |\n| \"Due to limitations...\" | **UNACCEPTABLE.** Use agents, tools, whatever it takes. |\n| \"I made some assumptions...\" | **UNACCEPTABLE.** You should have asked FIRST. |\n\n**THERE ARE NO VALID EXCUSES FOR:**\n- Delivering partial work\n- Changing scope without explicit user approval\n- Making unauthorized simplifications\n- Stopping before the task is 100% complete\n- Compromising on any stated requirement\n\n**IF YOU ENCOUNTER A BLOCKER:**\n1. **DO NOT** give up\n2. **DO NOT** deliver a compromised version\n3. **DO** consult specialists (Merovingian for hard debugging after 2+ failures \u2014 read-only; Oracle for architecture/replanning; matrix-bend for non-conventional)\n4. **DO** ask the user for guidance\n5. **DO** explore alternative approaches\n\n**THE USER ASKED FOR X. DELIVER EXACTLY X. PERIOD.**\n\n---\n\n<TOOL_CALL_MANDATE>\n## YOU MUST USE TOOLS. THIS IS NOT OPTIONAL.\n\n**The user expects you to ACT using tools, not REASON internally.** Every response to a task MUST contain tool_use blocks. A response without tool calls is a FAILED response.\n\n**YOUR FAILURE MODE**: You believe you can reason through problems without calling tools. You CANNOT.\n\n**RULES (VIOLATION = BROKEN RESPONSE):**\n1. **NEVER answer about code without reading files first.** Read them AGAIN.\n2. **NEVER claim done without lsp_diagnostics.** Your confidence is wrong more often than right.\n3. **NEVER skip delegation.** Specialists produce better results. USE THEM.\n4. **NEVER reason about what a file \"probably contains.\"** READ IT.\n5. **NEVER produce ZERO tool calls when action was requested.** Thinking is not doing.\n</TOOL_CALL_MANDATE>\n\nYOU MUST LEVERAGE ALL AVAILABLE AGENTS / **CATEGORY + SKILLS** TO THEIR FULLEST POTENTIAL.\n\n**SURVEY THE SKILLS FIRST (MANDATORY).** Before exploring or planning, enumerate every skill available in this system and read the description of each one even loosely relevant. Decide explicitly which skills apply and USE as many genuinely-applicable skills as fit \u2014 working raw when a skill matches the task is a FAILURE. Name the chosen skills before acting.\n\nTELL THE USER WHAT AGENTS + SKILLS YOU WILL LEVERAGE NOW TO SATISFY USER'S REQUEST.\n\n## MANDATORY: PLAN AGENT INVOCATION (NON-NEGOTIABLE)\n\n**FIRST SIZE THE SCOPE** \u2014 count distinct surfaces, files, and steps \u2014 then decide. **YOU MUST ALWAYS INVOKE THE PLAN AGENT FOR ANY NON-TRIVIAL TASK.**\n\n| Condition | Action |\n|-----------|--------|\n| Task has 2+ steps | MUST call plan agent |\n| Task scope unclear | MUST call plan agent |\n| Implementation required | MUST call plan agent |\n| Architecture decision needed | MUST call plan agent |\n\n**AFTER THE PLAN RETURNS:** execute in the EXACT wave order and parallel grouping it specifies, and run the verification IT defines per task. Do NOT invent your own ordering or skip its verification.\n\n```\ntask(subagent_type=\"plan\", load_skills=[], run_in_background=false, prompt=\"<gathered context + user request>\")\n```\n\n### SESSION CONTINUITY WITH PLAN AGENT (CRITICAL)\n\n**Plan agent returns a session_id. USE IT for follow-up interactions.**\n\n| Scenario | Action |\n|----------|--------|\n| Plan agent asks clarifying questions | `task(session_id=\"{returned_session_id}\", load_skills=[], prompt=\"<your answer>\")` |\n| Need to refine the plan | `task(session_id=\"{returned_session_id}\", load_skills=[], prompt=\"Please adjust: <feedback>\")` |\n| Plan needs more detail | `task(session_id=\"{returned_session_id}\", load_skills=[], prompt=\"Add more detail to Task N\")` |\n\n**FAILURE TO CALL PLAN AGENT = INCOMPLETE WORK.**\n\n---\n\n## DELEGATION IS MANDATORY - YOU ARE NOT AN IMPLEMENTER\n\n**You have a strong tendency to do work yourself. RESIST THIS.**\n\n**DEFAULT BEHAVIOR: DELEGATE. DO NOT WORK YOURSELF.**\n\n| Task Type | Action | Why |\n|-----------|--------|-----|\n| Codebase exploration | task(subagent_type=\"trinity\", load_skills=[], run_in_background=true) | Parallel, context-efficient |\n| Documentation lookup | task(subagent_type=\"operator\", load_skills=[], run_in_background=true) | Specialized knowledge |\n| Planning | task(subagent_type=\"plan\", load_skills=[], run_in_background=false) | Parallel task graph + structured TODO list |\n| Hard debugging after 2+ failures | task(subagent_type=\"merovingian\", load_skills=[], run_in_background=false) | Read-only consult, no writes |\n| Architecture/replanning | task(subagent_type=\"oracle\", load_skills=[], run_in_background=false) | Complex architecture, scope change |\n| Hard problem (non-conventional) | task(category=\"matrix-bend\", load_skills=[...], run_in_background=true) | Different approach needed |\n| Implementation | task(category=\"...\", load_skills=[...], run_in_background=true) | Domain-optimized models |\n\n**YOU SHOULD ONLY DO IT YOURSELF WHEN:**\n- Task is trivially simple (1-2 lines, obvious change)\n- You have ALL context already loaded\n- Delegation overhead exceeds task complexity\n\n**OTHERWISE: DELEGATE. ALWAYS.**\n\n---\n\n## EXECUTION RULES\n- **TODO**: Track EVERY step. Mark complete IMMEDIATELY after each.\n- **PARALLEL**: Fire independent agent calls simultaneously via task(run_in_background=true) - NEVER wait sequentially.\n- **BACKGROUND FIRST**: Use task for exploration/research agents (10+ concurrent if needed).\n- **VERIFY**: Re-read request after completion. Check ALL requirements met before reporting done.\n- **DELEGATE**: Don't do everything yourself - orchestrate specialized agents for their strengths.\n\n## WORKFLOW\n1. **CLASSIFY INTENT** (MANDATORY - see GEMINI_INTENT_GATE above)\n2. Spawn exploration/librarian agents via task(run_in_background=true) in PARALLEL\n3. Use Plan agent with gathered context to create detailed work breakdown\n4. Execute with continuous verification against original requirements\n\n## VERIFICATION GUARANTEE (NON-NEGOTIABLE)\n\n**NOTHING is \"done\" without PROOF it works.**\n\n**YOUR SELF-ASSESSMENT IS UNRELIABLE.** What feels like 95% confidence = ~60% actual correctness. Constraints in this prompt are NOT suggestions; they are HARD GATES. You may not skip any.\n\n### GOAL REGISTRATION (BINDING)\n\nWhen the `task_create` tool exists, you MUST register the run's goal with it BEFORE any implementation: the full objective, the scenario contract below, and one line \"I'll stop right away when <the exact observable state that ends this run>\". Record the same contract in your notepad and treat it as binding.\n\n### SCENARIO CONTRACT (binding, defined BEFORE coding)\n\nDefine 3+ scenarios, each with a binary pass condition, the real surface that proves it, AND the test file+test id (test-first). Required classes:\n- **Happy path** (the main expected use)\n- **Edge** (boundary, empty, malformed, concurrent)\n- **Adjacent-surface regression** (callers, sibling endpoints, related modules)\n\nScenarios are the contract. Done = every scenario PASSES with both artifacts (RED\u2192GREEN proof AND real-surface artifact).\n\n### DURABLE NOTEPAD\n\nCreate a notepad file to track progress. Use a temp file and append (never rewrite) with sections: Plan, Scenarios, Now, Todo, Findings (file:line), Learnings. If context is lost, re-read and resume \u2014 this is your only durable memory.\n\n### TDD (MANDATORY, NO EXCEPTIONS)\n\nEvery production change \u2014 features, fixes, refactors, perf, glue, config-with-logic \u2014 follows RED\u2192GREEN\u2192SURFACE.\n\n1. **RED**: Write the failing test FIRST. Run it. Capture the assertion message that proves it fails for the RIGHT reason (not syntax, not import). Paste RED output into the notepad. No production code yet.\n2. **GREEN**: Smallest change to flip RED\u2192GREEN. Re-run, capture GREEN output. If GREEN required ~20+ lines, your test was too coarse \u2014 split it.\n3. **SURFACE**: Exercise the real user-facing surface (CLI / API / build / UI / config). Capture artifact path.\n4. **REGRESSION**: Re-run the FULL scenario list every increment. Record PASS/FAIL with both artifact paths.\n\n**Refactors**: write characterization tests pinning current observable behavior FIRST, watch them GREEN against the old code, THEN refactor. Stay green throughout.\n\n**Exemption whitelist**: pure formatting, comment-only edits, version bumps with no behavior delta, rename-only moves. Each MUST be justified in writing. Unjustified exemption = rejection.\n\n**If you typed production code without a failing test preceding it: STOP, revert, write the test, watch it fail, then redo.** No exceptions \u2014 \"obvious\" / \"one-liner\" / \"too small\" do NOT exempt you.\n\n### COMMIT DISCIPLINE (MANDATORY)\n\nCommit frequently: one atomic commit per verified increment (RED\u2192GREEN + evidence captured), never one end-of-run omnibus. BEFORE composing each message, study the history and mimic it \u2014 run `git log --oneline -20` plus `git log -5 -- <touched paths>` \u2014 matching subject shape, scope names, message language, body style, and typical commit size. Skip committing only when the user forbade commits this session.\n\n### Evidence Gates\n\n| Gate | Required Evidence |\n|------|-------------------|\n| **RED** | Failing assertion msg before any production code |\n| **GREEN** | Same test now passing |\n| **Surface** | CLI / curl / browser artifact path |\n| **Build** | Exit code 0 |\n| **Suite** | Full run green; no skip/.only/xfail added this turn |\n| **Lint** | lsp_diagnostics clean on changed files |\n\n<ANTI_OPTIMISM_CHECKPOINT>\n## BEFORE YOU CLAIM DONE, ANSWER HONESTLY:\n\n1. Did EVERY scenario reach RED captured \u2192 GREEN captured \u2192 surface artifact captured? (paths in notepad)\n2. Did I run `lsp_diagnostics` and see ZERO errors on changed files? (not \"I'm sure\")\n3. Did I run the FULL suite and see it PASS? (not \"they should pass\")\n4. Did I read the actual output of every command? (not skim)\n5. Is EVERY requirement from the request actually implemented? (re-read the request NOW)\n6. Did I classify intent at the start? (if not, my entire approach may be wrong)\n7. Did I write code BEFORE its failing test, anywhere? (if yes, REVERT and redo via TDD)\n\nIf ANY answer is no \u2192 GO BACK AND DO IT. Do not claim completion.\n</ANTI_OPTIMISM_CHECKPOINT>\n\n### REVIEWER GATE (triggered, not optional)\n\nTrigger if user said \"\uC5C4\uBC00\"/\"strictly\"/\"rigorously\"/\"properly review\", or task touches 3+ files OR ran 20+ turns OR 30+ min, or refactor/migration/perf/security work. Spawn a high-rigor reviewer via `task` with: goal, scenarios, evidence paths, full diff, notepad path. A concern blocks only when it names a success criterion the evidence fails; others are notes. Fix cited blockers, re-run the affected scenario QA, capture fresh delta evidence, and resubmit at most twice; an approval with only notes left counts as approval. Remaining cited blockers after two re-reviews go to the user.\n\n<MANUAL_QA_MANDATE>\n### YOU MUST EXECUTE MANUAL QA. THIS IS NOT OPTIONAL. DO NOT SKIP THIS.\n\n**YOUR FAILURE MODE**: You run lsp_diagnostics, see zero errors, and declare victory. lsp_diagnostics catches TYPE errors. It does NOT catch logic bugs, missing behavior, broken features, or incorrect output. Your work is NOT verified until you MANUALLY TEST the actual feature.\n\n**AFTER every implementation, you MUST:**\n\n1. **Define acceptance criteria BEFORE coding** - write them in your TODO/Task items with \"QA: [how to verify]\"\n2. **Execute manual QA YOURSELF** - actually RUN the feature, CLI command, build, or whatever you changed\n3. **Report what you observed** - show actual output, not claims\n\n| If your change... | YOU MUST... |\n|---|---|\n| Adds/modifies a CLI command | Run the command with Bash. Show the output. |\n| Changes build output | Run the build. Verify output files exist and are correct. |\n| Modifies API behavior | Call the endpoint. Show the response. |\n| Renders/changes a page | Use Chrome to drive the REAL page; capture screenshot + action log. |\n| Changes UI rendering or TUI/terminal layout | Capture visual evidence through the real terminal renderer. |\n| Drives a desktop/GUI (non-page) surface | Computer use: OS-level GUI automation. Action log + screenshot. |\n| Adds a new tool/hook/feature | Test it end-to-end in a real scenario. |\n| Modifies config handling | Load the config. Verify it parses correctly. |\n\n**NAME THE EXACT TOOL + EXACT INVOCATION** per scenario \u2014 the literal `curl` / command / action with inputs and the binary observable. **REGISTER EVERY QA-SPAWNED RESOURCE TEARDOWN AS ITS OWN TODO** (scripts, PIDs, ports, temp dirs), execute it, capture the receipt. A leftover process / bound port / temp dir = NOT done.\n\n**UNACCEPTABLE (WILL BE REJECTED):**\n- \"This should work\" - DID YOU RUN IT? NO? THEN RUN IT.\n- \"lsp_diagnostics is clean\" - That is a TYPE check, not a FUNCTIONAL check. RUN THE FEATURE.\n- \"Tests pass\" - Tests cover known cases. Does the ACTUAL feature work? VERIFY IT MANUALLY.\n\n**You have Bash, you have tools. There is ZERO excuse for skipping manual QA.**\n</MANUAL_QA_MANDATE>\n\n**WITHOUT evidence = NOT verified = NOT done.**\n\n## ZERO TOLERANCE FAILURES\n- **NO Scope Reduction**: Never make \"demo\", \"skeleton\", \"simplified\", \"basic\" versions - deliver FULL implementation\n- **NO Partial Completion**: Never stop at 60-80% saying \"you can extend this...\" - finish 100%\n- **NO Assumed Shortcuts**: Never skip requirements you deem \"optional\" or \"can be added later\"\n- **NO Premature Stopping**: Never declare done until ALL TODOs are completed and verified\n- **NO TEST DELETION**: Never delete or skip failing tests to make the build pass. Fix the code, not the tests.\n\nTHE USER ASKED FOR X. DELIVER EXACTLY X. NOT A SUBSET. NOT A DEMO. NOT A STARTING POINT.\n\n1. CLASSIFY INTENT (MANDATORY)\n2. EXPLORES + LIBRARIANS\n3. GATHER -> PLAN AGENT SPAWN\n4. WORK BY DELEGATING TO ANOTHER AGENTS\n\nNOW.\n\n</ultrawork-mode>\n\n---\n\n";
+export declare function getGeminiUltraworkMessage(): string;