pybao-cli 1.5.50 → 1.5.52

package/dist/{chunk-KKNO6B2K.js → chunk-JGECWVPT.js}

@@ -2,17 +2,17 @@ import { createRequire as __pybCreateRequire } from "node:module";
 const require = __pybCreateRequire(import.meta.url);
 import {
   loadPybAgentSessionMessages
-} from "./chunk-NSFU6Y4R.js";
+} from "./chunk-QEPBMPEE.js";
 import {
   appendSessionCustomTitleRecord,
   appendSessionJsonlFromMessage,
   appendSessionTagRecord,
   listPybAgentSessions
-} from "./chunk-IXFDCJ25.js";
+} from "./chunk-3I35GELX.js";
 import {
   formatValidationResult,
   validatePluginOrMarketplacePath
-} from "./chunk-K3QEELFX.js";
+} from "./chunk-R64GVTIZ.js";
 import {
   ConversationTracker,
   appendFinishState,
@@ -20,13 +20,13 @@ import {
   getConversationTrackerForContext,
   isFinishComplete,
   mapFinishReason
-} from "./chunk-L4CGYTJQ.js";
+} from "./chunk-2EQA5NLL.js";
 import {
   FileSystemConversationPersistence
-} from "./chunk-J6HKEIL2.js";
+} from "./chunk-QYVB7FJ4.js";
 import {
   beginReplSessionScope
-} from "./chunk-F4AXICO7.js";
+} from "./chunk-EXNV3ROJ.js";
 import {
   drainHookSystemPromptAdditions,
   getHookTranscriptPath,
@@ -38,7 +38,7 @@ import {
   runStopHooks,
   runUserPromptSubmitHooks,
   updateHookTranscriptForMessages
-} from "./chunk-DBMDQEQO.js";
+} from "./chunk-6QSG5OON.js";
 import {
   DEFAULT_OUTPUT_STYLE,
   getAvailableOutputStyles,
@@ -47,20 +47,20 @@ import {
   getOutputStyleSystemPromptAdditions,
   resolveOutputStyleName,
   setCurrentOutputStyle
-} from "./chunk-BQCQ3DEN.js";
+} from "./chunk-UG7ZFONK.js";
 import {
   fetchCustomModels,
   getModelFeatures
-} from "./chunk-5P4A6TN2.js";
+} from "./chunk-ZWTGVUTI.js";
 import {
   getCurrentSessionId,
   getSessionState
-} from "./chunk-XKYHFZEC.js";
+} from "./chunk-U6BMHOQT.js";
 import {
   queryLLM,
   queryQuick,
   verifyApiKey
-} from "./chunk-ZDDVFBS4.js";
+} from "./chunk-4UQCXDKA.js";
 import {
   DEFAULT_TIMEOUT_MS,
   DESCRIPTION,
@@ -92,7 +92,7 @@ import {
   listMCPServers,
   loadMergedSettings,
   normalizeSandboxRuntimeConfigFromSettings
-} from "./chunk-FNDIHEBT.js";
+} from "./chunk-33EYH7S3.js";
 import {
   addMarketplace,
   disableSkillPlugin,
@@ -105,29 +105,29 @@ import {
   refreshMarketplaceAsync,
   removeMarketplace,
   uninstallSkillPlugin
-} from "./chunk-CHH6TEXB.js";
+} from "./chunk-4MAX5UNY.js";
 import {
   loadToolPermissionContextFromDisk,
   persistToolPermissionUpdateToDisk
-} from "./chunk-Y7I4XTJJ.js";
+} from "./chunk-OEHXDSEI.js";
 import {
   applyToolPermissionContextUpdate,
   applyToolPermissionContextUpdates,
   createDefaultToolPermissionContext
-} from "./chunk-UNNVICVU.js";
+} from "./chunk-LG65MFKB.js";
 import {
   emitReminderEvent,
   generateSystemReminders,
   resetReminderSession,
   systemReminderService
-} from "./chunk-NRORTICH.js";
+} from "./chunk-PA5FTBIQ.js";
 import {
   clearAgentCache,
   getActiveAgents,
   getAgentByType,
   getAllAgents,
   getAvailableAgentTypes
-} from "./chunk-YFVKGHW2.js";
+} from "./chunk-DPE2QUR4.js";
 import {
   API_ERROR_MESSAGE_PREFIX,
   CANCEL_MESSAGE,
@@ -162,16 +162,16 @@ import {
   reorderMessages,
   resetAutoCompactTelemetry,
   stripSystemMessages
-} from "./chunk-PXRUNRK7.js";
+} from "./chunk-UCNZU6OO.js";
 import {
   getRequestStatus,
   setRequestStatus,
   subscribeRequestStatus
-} from "./chunk-3DFBSQIT.js";
+} from "./chunk-XZG5WCDK.js";
 import {
   getPybAgentSessionId,
   setPybAgentSessionId
-} from "./chunk-B6IMQJZM.js";
+} from "./chunk-DRSLDSBY.js";
 import {
   formatDuration,
   formatNumber,
@@ -180,7 +180,7 @@ import {
   getTotalCost,
   getTotalDuration,
   wrapText
-} from "./chunk-OUXHGDLH.js";
+} from "./chunk-VEHLCRJN.js";
 import {
   addLineNumbers,
   detectFileEncoding,
@@ -194,13 +194,13 @@ import {
   normalizeFilePath,
   readTextContent,
   writeTextContent
-} from "./chunk-NBDDIZNJ.js";
+} from "./chunk-FNMZKMUC.js";
 import {
   parseBlockEdits
-} from "./chunk-QWIBSCDN.js";
+} from "./chunk-GEEDQS2I.js";
 import {
   toLspToolFallbackEvent
-} from "./chunk-2RXKUCFS.js";
+} from "./chunk-ISMRCABJ.js";
 import {
   LspAPI,
   LspFacade,
@@ -208,31 +208,31 @@ import {
   formatDiagnosticsPretty,
   initParser,
   loadLanguage
-} from "./chunk-NQGIALRP.js";
+} from "./chunk-L2JZIHLB.js";
 import {
   emitTelemetryEvent,
   registerTelemetryListener
-} from "./chunk-TFHFYID3.js";
+} from "./chunk-TNCBVAVV.js";
 import {
   getSettingsFileCandidates,
   loadSettingsWithLegacyFallback,
   readSettingsFile
-} from "./chunk-CNBKKQSV.js";
+} from "./chunk-DYLRL3GG.js";
 import {
   getCustomCommandDirectories,
   hasCustomCommands,
   loadCustomCommands,
   reloadCustomCommands
-} from "./chunk-7MR3XX5X.js";
+} from "./chunk-I42N2MZA.js";
 import {
   getSessionPlugins
-} from "./chunk-BJSWTHRM.js";
+} from "./chunk-KNUG3M6O.js";
 import {
   ModelManager,
   buildModelProfileKey,
   getModelManager,
   isDefaultSlowAndCapableModel
-} from "./chunk-VAZ4VRTA.js";
+} from "./chunk-AZF3LTDE.js";
 import {
   getCodeStyle,
   getContext,
@@ -240,16 +240,16 @@ import {
   getIsGit,
   getProjectDocs,
   getProjectStructureStatisticsBlock
-} from "./chunk-LE5VGGP6.js";
+} from "./chunk-RETS7G2B.js";
 import {
   getRipgrepPath,
   getRipgrepPolicyMode,
   resolveRipgrepPolicy,
   ripGrep
-} from "./chunk-ZKW5V7MR.js";
+} from "./chunk-HSOB4XJ2.js";
 import {
   getTheme
-} from "./chunk-EY3ZOE75.js";
+} from "./chunk-SZS6SEDB.js";
 import {
   DEFAULT_GLOBAL_CONFIG,
   enableConfigs,
@@ -262,16 +262,16 @@ import {
   saveGlobalConfig,
   setAllPointersToModel,
   setModelPointer
-} from "./chunk-CNW45NOZ.js";
+} from "./chunk-KQBUAEA5.js";
 import {
   AbortError
-} from "./chunk-RQVLBMP7.js";
+} from "./chunk-PDH2QHLY.js";
 import {
   debug,
   getCurrentRequest,
   logUserFriendly,
   markPhase
-} from "./chunk-A45A3UUU.js";
+} from "./chunk-O6CVVWZV.js";
 import {
   ASCII_LOGO,
   BunShell,
@@ -315,13 +315,13 @@ import {
   setCwd,
   shouldApplyToolOutputTruncation,
   truncateToolOutput
-} from "./chunk-UJRT7VK2.js";
+} from "./chunk-KPZ4UMNV.js";
 import {
   MACRO
-} from "./chunk-5ITEAEJC.js";
+} from "./chunk-NQJAXQZX.js";
 import {
   __export
-} from "./chunk-I3J4JYES.js";
+} from "./chunk-OYT6EI36.js";
 
 // src/tools/system/BashTool/BashTool.tsx
 import { statSync as statSync16 } from "fs";
@@ -499,7 +499,7 @@ var getCommandSubcommandPrefix = memoize(
 var getCommandPrefix = memoize(
   async (command4, abortSignal) => {
     const { systemPrompt, userPrompt } = buildBashCommandPrefixDetectionPrompt(command4);
-    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-KXF74SNS.js");
+    const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryQuick: queryQuick2 } = await import("./llm-CVILTZMI.js");
     const response = await queryQuick2({
       systemPrompt,
       userPrompt,
@@ -4301,7 +4301,7 @@ function formatParseError(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function defaultGateQuery(args) {
-  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-KXF74SNS.js");
+  const { API_ERROR_MESSAGE_PREFIX: API_ERROR_MESSAGE_PREFIX2, queryLLM: queryLLM2 } = await import("./llm-CVILTZMI.js");
   const queryLLMFn = args.queryLLMOverride ?? queryLLM2;
   const messages = [
     {
@@ -6793,14 +6793,14 @@ var FileEditTool = {
     }
     let editOperations = [];
     if (edits) {
-      const { parseBlockEdits: parseBlockEdits2 } = await import("./blockParser-QPLEX5NJ.js");
+      const { parseBlockEdits: parseBlockEdits2 } = await import("./blockParser-RZPICWAA.js");
       editOperations = parseBlockEdits2(edits);
     }
     let currentFileContent = fileExistsBun(fullFilePath) ? normalizeLineEndings(await readFileBun(fullFilePath) ?? "") : "";
     const originalFileContent = currentFileContent;
     let totalPatch = [];
-    const { SmartEdit } = await import("./smart-edit-AWHJDSU6.js");
-    const { findLspAnchor } = await import("./lspAnchor-7Z5YNXX3.js");
+    const { SmartEdit } = await import("./smart-edit-EQBEMPKQ.js");
+    const { findLspAnchor } = await import("./lspAnchor-LUE27QI2.js");
     for (const op of editOperations) {
       const normalizedSearch = normalizeLineEndings(op.search);
       const normalizedReplace = normalizeLineEndings(op.replace);
@@ -8756,6 +8756,7 @@ var inputSchema7 = z7.strictObject({
 });
 var MAX_RESULT_CHARS = 2e4;
 var EXCLUDED_DIRS = [".git", ".svn", ".hg", ".bzr"];
+var DEFAULT_FILES_WITH_MATCHES_LIMIT = 1500;
 function paginate(items, limit, offset) {
   if (offset > 0) {
     items = items.slice(offset);
@@ -8884,7 +8885,9 @@ Found ${numMatches} total ${numMatches === 1 ? "occurrence" : "occurrences"} acr
         "No files found\nSuggestion: Read the target directory path to confirm one-level structure and search scope, then broaden matching conditions (case/regex/keyword variants, semantic=true), and if needed switch to content mode or expand the file set before searching again."
       );
     }
-    const header = `Found ${result.numFiles} file${result.numFiles === 1 ? "" : "s"}${pagination ? ` ${pagination}` : ""}
+    const totalFiles = result.totalFiles ?? result.numFiles;
+    const truncatedLabel = result.truncated && result.appliedLimit !== void 0 ? ` (showing first ${result.appliedLimit}; use head_limit/offset to paginate)` : "";
+    const header = `Found ${totalFiles} file${totalFiles === 1 ? "" : "s"}${truncatedLabel}${pagination && !result.truncated ? ` ${pagination}` : ""}
 ${result.filenames.join("\n")}`;
     return appendNotice(truncateToCharBudget(header));
   },
@@ -8942,7 +8945,7 @@ ${result.filenames.join("\n")}`;
     if (type3) {
       baseArgs.push("--type", type3);
     }
-    const appliedLimit = head_limit !== void 0 ? head_limit : void 0;
+    const appliedLimit = head_limit !== void 0 ? head_limit : output_mode === "files_with_matches" ? DEFAULT_FILES_WITH_MATCHES_LIMIT : void 0;
     const appliedOffset = offset || 0;
     if (glob) {
       for (const g of parseGlobString(glob)) {
@@ -9195,10 +9198,13 @@ ${result.filenames.join("\n")}`;
     const window = paginate(sorted, appliedLimit, appliedOffset).map(
       toProjectRelativeIfPossible
     );
+    const totalFiles = sorted.length;
     const output = {
       mode: "files_with_matches",
       filenames: window,
       numFiles: window.length,
+      totalFiles,
+      truncated: window.length < totalFiles,
       ...appliedLimit !== void 0 ? { appliedLimit } : {},
       ...appliedOffset > 0 ? { appliedOffset } : {},
       durationMs: Date.now() - start,
@@ -12402,7 +12408,7 @@ async function createAndStoreApiKey(accessToken) {
       }
       saveGlobalConfig(config2);
       try {
-        const { resetAnthropicClient } = await import("./llm-KXF74SNS.js");
+        const { resetAnthropicClient } = await import("./llm-CVILTZMI.js");
         resetAnthropicClient();
       } catch {
       }
@@ -16826,7 +16832,7 @@ async function refreshPluginRuntimeFromInstalls() {
   const existingRoots = getSessionPlugins().map((p) => p.rootDir);
   const dirs = Array.from(/* @__PURE__ */ new Set([...existingRoots, ...installedRoots]));
   if (dirs.length === 0) return [];
-  const { configureSessionPlugins } = await import("./pluginRuntime-3XWIAPQ7.js");
+  const { configureSessionPlugins } = await import("./pluginRuntime-IWKORZEI.js");
   const { errors } = await configureSessionPlugins({ pluginDirs: dirs });
   return errors;
 }
@@ -17501,7 +17507,7 @@ async function call(onDone, context) {
     ModelConfig,
     {
       onClose: () => {
-        import("./model-7WMFC6F7.js").then(({ reloadModelManager: reloadModelManager2 }) => {
+        import("./model-3GE72U3P.js").then(({ reloadModelManager: reloadModelManager2 }) => {
           reloadModelManager2();
           triggerModelConfigChange();
           onDone();
@@ -18270,7 +18276,7 @@ var rename = {
 var rename_default = rename;
 
 // src/server/index.ts
-import { Hono as Hono6 } from "hono";
+import { Hono as Hono10 } from "hono";
 import { cors } from "hono/cors";
 import { logger } from "hono/logger";
 import { streamSSE as streamSSE2 } from "hono/streaming";
@@ -21043,7 +21049,7 @@ function buildAutoCompactAggregationFields(params) {
 }
 
 // src/utils/session/compactionBudget.ts
-var DEFAULT_TOTAL_BUDGET_TOKENS = 35e3;
+var DEFAULT_TOTAL_BUDGET_TOKENS = 5e4;
 var DEFAULT_SUMMARY_RATIO = 0.45;
 var DEFAULT_CONVERSATION_RATIO = 0.2;
 var DEFAULT_RECOVERED_RATIO = 0.35;
@@ -25990,605 +25996,13 @@ async function* runToolUse(toolUse, siblingToolUseIDs, assistantMessage, canUseT
   }
 }
 
-// src/server/bus/index.ts
-var BusEvent;
-((BusEvent2) => {
-  const registry = /* @__PURE__ */ new Map();
-  function define(type3, properties) {
-    const result = { type: type3, properties };
-    registry.set(type3, result);
-    return result;
-  }
-  BusEvent2.define = define;
-  function getSchema(type3) {
-    return registry.get(type3);
-  }
-  BusEvent2.getSchema = getSchema;
-})(BusEvent || (BusEvent = {}));
-var Bus;
-((Bus2) => {
-  const state = {
-    subscriptions: /* @__PURE__ */ new Map()
-  };
-  async function publish(def, properties) {
-    const payload = {
-      type: def.type,
-      properties
-    };
-    const pending = [];
-    for (const key of [def.type, "*"]) {
-      const match = state.subscriptions.get(key);
-      if (match) {
-        for (const sub of match) {
-          const result = sub(payload);
-          if (result instanceof Promise) {
-            pending.push(result);
-          }
-        }
-      }
-    }
-    await Promise.all(pending);
-  }
-  Bus2.publish = publish;
-  function subscribe(def, callback) {
-    return raw(def.type, callback);
-  }
-  Bus2.subscribe = subscribe;
-  function subscribeAll(callback) {
-    return raw("*", callback);
-  }
-  Bus2.subscribeAll = subscribeAll;
-  function raw(type3, callback) {
-    const match = state.subscriptions.get(type3) ?? [];
-    match.push(callback);
-    state.subscriptions.set(type3, match);
-    return () => {
-      const subscriptions = state.subscriptions.get(type3);
-      if (!subscriptions) return;
-      const index = subscriptions.indexOf(callback);
-      if (index !== -1) {
-        subscriptions.splice(index, 1);
-      }
-    };
-  }
-})(Bus || (Bus = {}));
-
-// src/server/events/definitions.ts
-import { z as z10 } from "zod";
-var ServerEvents = {
-  Connected: BusEvent.define("server.connected", z10.object({
-    serverVersion: z10.string(),
-    protocolVersion: z10.string(),
-    features: z10.array(z10.string())
-  })),
-  Heartbeat: BusEvent.define("server.heartbeat", z10.object({
-    timestamp: z10.number()
-  })),
-  Status: BusEvent.define("server.status", z10.object({
-    status: z10.enum(["healthy", "degraded", "unhealthy"]),
-    components: z10.object({
-      llm: z10.enum(["connected", "disconnected"]),
-      mcp: z10.enum(["connected", "disconnected"]),
-      tools: z10.enum(["ready", "initializing"])
-    })
-  }))
-};
-var SessionEvents = {
-  Created: BusEvent.define("session.created", z10.object({
-    sessionId: z10.string(),
-    config: z10.object({
-      model: z10.string(),
-      agent: z10.string(),
-      outputStyle: z10.string()
-    }),
-    resumedFrom: z10.string().optional()
-  })),
-  Updated: BusEvent.define("session.updated", z10.object({
-    sessionId: z10.string(),
-    title: z10.string().optional(),
-    config: z10.object({
-      model: z10.string().optional(),
-      agent: z10.string().optional(),
-      outputStyle: z10.string().optional()
-    }).optional()
-  })),
-  Deleted: BusEvent.define("session.deleted", z10.object({
-    sessionId: z10.string()
-  })),
-  Status: BusEvent.define("session.status", z10.object({
-    sessionId: z10.string(),
-    status: z10.enum(["active", "idle", "waiting_input", "processing"]),
-    currentRequestId: z10.string().optional()
-  }))
-};
-var MessageEvents = {
-  Created: BusEvent.define("message.created", z10.object({
-    sessionId: z10.string(),
-    message: z10.any()
-  })),
-  Updated: BusEvent.define("message.updated", z10.object({
-    sessionId: z10.string(),
-    message: z10.any(),
-    delta: z10.object({
-      type: z10.enum(["text", "tool_use"]),
-      content: z10.string(),
-      index: z10.number().optional()
-    }).optional()
-  })),
-  Completed: BusEvent.define("message.completed", z10.object({
-    sessionId: z10.string(),
-    messageId: z10.string(),
-    finishReason: z10.enum(["end_turn", "tool_calls", "max_tokens", "aborted"]),
-    usage: z10.object({
-      inputTokens: z10.number(),
-      outputTokens: z10.number(),
-      totalTokens: z10.number()
-    }),
-    cost: z10.object({
-      costUSD: z10.number()
-    })
-  })),
-  RequestStarted: BusEvent.define("request.started", z10.object({
-    sessionId: z10.string(),
-    requestId: z10.string(),
-    userMessage: z10.string()
-  })),
-  RequestCompleted: BusEvent.define("request.completed", z10.object({
-    sessionId: z10.string(),
-    requestId: z10.string(),
-    finishReason: z10.enum(["end_turn", "tool_calls", "max_tokens", "aborted"]),
-    duration: z10.number(),
-    totalTokens: z10.number(),
-    costUSD: z10.number()
-  }))
-};
-var ToolEvents = {
-  Started: BusEvent.define("tool.started", z10.object({
-    sessionId: z10.string(),
-    toolUseId: z10.string(),
-    toolName: z10.string(),
-    input: z10.record(z10.unknown()),
-    dangerousLevel: z10.enum(["safe", "moderate", "dangerous"]),
-    requiresPermission: z10.boolean()
-  })),
-  Progress: BusEvent.define("tool.progress", z10.object({
-    sessionId: z10.string(),
-    toolUseId: z10.string(),
-    toolName: z10.string(),
-    progress: z10.number(),
-    message: z10.string().optional(),
-    output: z10.string().optional()
-  })),
-  Completed: BusEvent.define("tool.completed", z10.object({
-    sessionId: z10.string(),
-    toolUseId: z10.string(),
-    toolName: z10.string(),
-    result: z10.string(),
-    isError: z10.boolean(),
-    duration: z10.number()
-  })),
-  Error: BusEvent.define("tool.error", z10.object({
-    sessionId: z10.string(),
-    toolUseId: z10.string(),
-    toolName: z10.string(),
-    error: z10.object({
-      code: z10.string(),
-      message: z10.string(),
-      details: z10.unknown().optional()
-    })
-  }))
-};
-var PermissionEvents = {
-  Requested: BusEvent.define("permission.requested", z10.object({
-    sessionId: z10.string(),
-    permissionId: z10.string(),
-    toolName: z10.string(),
-    toolUseId: z10.string(),
-    input: z10.record(z10.unknown()),
-    risk: z10.enum(["safe", "moderate", "dangerous"]),
-    message: z10.string(),
-    suggestedAction: z10.enum(["allow", "deny"]).optional(),
-    timeout: z10.number().optional()
-  })),
-  Responded: BusEvent.define("permission.responded", z10.object({
-    sessionId: z10.string(),
-    permissionId: z10.string(),
-    decision: z10.enum(["allow", "deny", "allowAll"]),
-    remember: z10.boolean(),
-    scope: z10.enum(["session", "project", "global"]).optional()
-  })),
-  Timeout: BusEvent.define("permission.timeout", z10.object({
-    sessionId: z10.string(),
-    permissionId: z10.string(),
-    toolName: z10.string(),
-    defaultAction: z10.enum(["allow", "deny"])
-  }))
-};
-var ErrorEvents = {
-  General: BusEvent.define("error", z10.object({
-    sessionId: z10.string().optional(),
-    code: z10.string(),
-    message: z10.string(),
-    details: z10.unknown().optional(),
-    recoverable: z10.boolean(),
-    suggestedAction: z10.string().optional()
-  })),
-  Stream: BusEvent.define("error.stream", z10.object({
-    reason: z10.enum(["timeout", "aborted", "network", "server"]),
-    message: z10.string(),
-    retryable: z10.boolean(),
-    retryAfter: z10.number().optional()
-  }))
-};
-
-// src/server/adapters/queryRunner.ts
-var QueryRunner = class {
-  constructor(config2, sessionState) {
-    this.config = config2;
-    this.sessionState = sessionState;
-    this.requestId = uuidv4();
-    this.abortController = new AbortController();
-  }
-  requestId;
-  abortController;
-  isRunning = false;
-  messages = [];
-  startTime = 0;
-  totalCost = 0;
-  totalInputTokens = 0;
-  totalOutputTokens = 0;
-  async run(userMessage) {
-    if (this.isRunning) {
-      throw new Error("QueryRunner is already running");
-    }
-    this.isRunning = true;
-    this.startTime = Date.now();
-    this.messages = [];
-    await Bus.publish(MessageEvents.RequestStarted, {
-      sessionId: this.config.sessionId,
-      requestId: this.requestId,
-      userMessage
-    });
-    this.config.onRequestStart?.(this.requestId);
-    try {
-      const messages = this.buildMessages(userMessage);
-      const systemPrompt = this.buildSystemPrompt();
-      const context = this.buildContext();
-      const canUseTool = this.createCanUseToolFn();
-      const toolUseContext = this.createToolUseContext();
-      const generator = query(
-        messages,
-        systemPrompt,
-        context,
-        canUseTool,
-        toolUseContext
-      );
-      let finishReason = "end_turn";
-      for await (const message of generator) {
-        if (this.abortController.signal.aborted) {
-          finishReason = "aborted";
-          break;
-        }
-        await this.handleMessage(message);
-        if (message.type === "assistant") {
-          const candidate = message.finish;
-          if (candidate === "end_turn" || candidate === "tool_calls" || candidate === "max_tokens") {
-            finishReason = candidate;
-          }
-        }
-      }
-      const result = {
-        requestId: this.requestId,
-        finishReason,
-        messages: this.messages,
-        usage: {
-          inputTokens: this.totalInputTokens,
-          outputTokens: this.totalOutputTokens,
-          totalTokens: this.totalInputTokens + this.totalOutputTokens
-        },
-        cost: {
-          costUSD: this.totalCost
-        },
-        duration: Date.now() - this.startTime
-      };
-      await Bus.publish(MessageEvents.RequestCompleted, {
-        sessionId: this.config.sessionId,
-        requestId: this.requestId,
-        finishReason: result.finishReason,
-        duration: result.duration,
-        totalTokens: result.usage.totalTokens,
-        costUSD: result.cost.costUSD
-      });
-      this.config.onRequestComplete?.(this.requestId, result);
-      return result;
-    } catch (error) {
-      this.config.onError?.(error instanceof Error ? error : new Error(String(error)));
-      throw error;
-    } finally {
-      this.isRunning = false;
-    }
-  }
-  abort() {
-    this.abortController.abort();
-  }
-  getStatus() {
-    return {
-      isRunning: this.isRunning,
-      requestId: this.isRunning ? this.requestId : null,
-      messageCount: this.messages.length
-    };
-  }
-  async handleMessage(message) {
-    this.messages.push(message);
-    await Bus.publish(MessageEvents.Created, {
-      sessionId: this.config.sessionId,
-      message
-    });
-    this.config.onMessageYield?.(message);
-    if (message.type === "assistant") {
-      const assistantMsg = message;
-      if (assistantMsg.message?.usage) {
-        this.totalInputTokens += assistantMsg.message.usage.input_tokens ?? 0;
-        this.totalOutputTokens += assistantMsg.message.usage.output_tokens ?? 0;
-      }
-    }
-  }
-  buildMessages(userMessage) {
-    const history = this.sessionState.messages.filter((message) => message.type !== "progress");
-    const nextMessage = createUserMessageFromText(userMessage);
-    return [...history, nextMessage];
-  }
-  buildSystemPrompt() {
-    return this.sessionState.config.systemPrompt ?? [];
-  }
-  buildContext() {
-    return {
-      cwd: this.sessionState.cwd
-    };
-  }
-  createCanUseToolFn() {
-    return async () => ({ result: true });
-  }
-  createToolUseContext() {
-    return {
-      abortController: this.abortController,
-      onQueryLifecycleEvent: (event) => {
-      },
-      sessionContext: new SessionContext(),
-      options: {
-        commands: [],
-        forkNumber: 0,
-        messageLogName: this.requestId,
-        tools: [],
-        verbose: false,
-        safeMode: false,
-        maxThinkingTokens: 16e3
-      },
-      readFileTimestamps: {},
-      setToolJSX: () => {
-      },
-      requestId: this.requestId,
-      messageId: void 0
-    };
-  }
-};
-
-// src/server/routes/session.ts
-function createSessionRoutes() {
-  const router = new Hono();
-  router.post("/", async (c) => {
-    const body = await c.req.json();
-    const { resumeFrom, config: config2 } = body;
-    if (resumeFrom !== void 0 && resumeFrom !== null) {
-      return c.json(
-        {
-          success: false,
-          error: {
-            code: "RESUME_NOT_SUPPORTED",
-            message: "resumeFrom is not supported in current session backend"
-          }
-        },
-        400
-      );
-    }
-    const session = await sessionStateManager.create(
-      process.cwd(),
-      config2
-    );
-    return c.json({
-      success: true,
-      data: {
-        sessionId: session.id,
-        createdAt: session.createdAt,
-        config: session.config
-      }
-    }, 201);
-  });
-  router.get("/", (c) => {
-    const sessions = sessionStateManager.list();
-    const page = parseInt(c.req.query("page") ?? "1");
-    const limit = parseInt(c.req.query("limit") ?? "20");
-    const status = c.req.query("status");
-    let filtered = sessions;
-    if (status) {
-      filtered = filtered.filter((s) => s.status === status);
-    }
-    const start = (page - 1) * limit;
-    const items = filtered.slice(start, start + limit);
-    return c.json({
-      success: true,
-      data: {
-        items: items.map((s) => ({
-          id: s.id,
-          title: s.title,
-          status: s.status,
-          messageCount: s.messages.length,
-          createdAt: s.createdAt,
-          updatedAt: s.updatedAt,
-          config: s.config
-        })),
-        pagination: {
-          page,
-          limit,
-          total: filtered.length,
-          hasMore: start + limit < filtered.length
-        }
-      }
-    });
-  });
-  router.get("/:sessionId", (c) => {
-    const sessionId = c.req.param("sessionId");
-    const session = sessionStateManager.get(sessionId);
-    if (!session) {
-      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
-    }
-    return c.json({
-      success: true,
-      data: {
-        id: session.id,
-        title: session.title,
-        status: session.status,
-        messages: session.messages,
-        createdAt: session.createdAt,
-        updatedAt: session.updatedAt,
-        config: session.config
-      }
-    });
-  });
-  router.get("/:sessionId/messages", (c) => {
-    const sessionId = c.req.param("sessionId");
-    const session = sessionStateManager.get(sessionId);
-    if (!session) {
-      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
-    }
-    const after = c.req.query("after");
-    const before = c.req.query("before");
-    const limit = Math.max(1, parseInt(c.req.query("limit") ?? "50", 10));
-    let items = [...session.messages];
-    if (after) {
-      const index = items.findIndex((item) => item.uuid === after);
-      if (index >= 0) {
-        items = items.slice(index + 1);
-      }
-    }
-    if (before) {
-      const index = items.findIndex((item) => item.uuid === before);
-      if (index >= 0) {
-        items = items.slice(0, index);
-      }
-    }
-    items = items.slice(0, limit);
-    return c.json({
-      success: true,
-      data: { items }
-    });
-  });
-  router.patch("/:sessionId", async (c) => {
-    const sessionId = c.req.param("sessionId");
-    const body = await c.req.json();
-    const updated = await sessionStateManager.update(sessionId, body);
-    if (!updated) {
-      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
-    }
-    const session = sessionStateManager.get(sessionId);
-    return c.json({ success: true, data: session });
-  });
-  router.delete("/:sessionId", async (c) => {
-    const sessionId = c.req.param("sessionId");
-    const deleted = await sessionStateManager.delete(sessionId);
-    return c.json({
-      success: true,
-      data: { deleted, sessionId }
-    });
-  });
-  router.post("/:sessionId/prompt", async (c) => {
-    const sessionId = c.req.param("sessionId");
-    const body = await c.req.json();
-    const { message, attachments, options } = body;
-    const session = sessionStateManager.get(sessionId);
-    if (!session) {
-      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
-    }
-    const acceptHeader = c.req.header("Accept") ?? "";
-    const wantsSSE = acceptHeader.includes("text/event-stream") || options?.stream !== false;
-    if (wantsSSE) {
-      return streamSSE(c, async (stream) => {
-        const runner = new QueryRunner(
-          { sessionId },
-          session
-        );
-        sessionStateManager.setCurrentRunner(sessionId, runner);
-        try {
-          const result = await runner.run(message);
-          await stream.writeSSE({
-            event: "request.completed",
-            data: JSON.stringify({
-              type: "request.completed",
-              sessionId,
-              timestamp: Date.now(),
-              data: {
-                finishReason: result.finishReason,
-                usage: result.usage,
-                cost: result.cost,
-                duration: result.duration
-              }
-            })
-          });
-        } catch (error) {
-          await stream.writeSSE({
-            event: "error",
-            data: JSON.stringify({
-              type: "error",
-              sessionId,
-              timestamp: Date.now(),
-              data: {
-                code: "QUERY_ERROR",
-                message: error instanceof Error ? error.message : String(error),
-                recoverable: false
-              }
-            })
-          });
-        } finally {
-          sessionStateManager.clearCurrentRunner(sessionId);
-        }
-      });
-    } else {
-      const runner = new QueryRunner({ sessionId }, session);
-      sessionStateManager.setCurrentRunner(sessionId, runner);
-      try {
-        const result = await runner.run(message);
-        return c.json({ success: true, data: result });
-      } finally {
-        sessionStateManager.clearCurrentRunner(sessionId);
-      }
-    }
-  });
-  router.post("/:sessionId/abort", (c) => {
-    const sessionId = c.req.param("sessionId");
-    const session = sessionStateManager.get(sessionId);
-    if (!session) {
-      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
-    }
-    const runner = sessionStateManager.getCurrentRunner(sessionId);
-    if (runner) {
-      runner.abort();
-      return c.json({ success: true, data: { aborted: true } });
-    }
-    return c.json({ success: true, data: { aborted: false, reason: "No running query" } });
-  });
-  return router;
-}
-
-// src/server/routes/tool.ts
-import { Hono as Hono2 } from "hono";
-
 // src/tools/index.ts
 import { memoize as memoize4 } from "lodash-es";
 
 // src/tools/ai/AskExpertModelTool/AskExpertModelTool.tsx
 import * as React47 from "react";
 import { Box as Box36, Text as Text40 } from "ink";
-import { z as z11 } from "zod";
+import { z as z10 } from "zod";
 
 // src/utils/session/expertChatStorage.ts
 import { existsSync as existsSync17, readFileSync as readFileSync9, writeFileSync as writeFileSync4, mkdirSync as mkdirSync10 } from "fs";
@@ -26879,14 +26293,14 @@ Current situation: Users report 3-5 second delays when scrolling through the lis
 Question: What are the most effective React optimization techniques for handling large lists, and how should I prioritize implementing virtualization vs memoization vs other approaches?"`;
 
 // src/tools/ai/AskExpertModelTool/AskExpertModelTool.tsx
-var inputSchema9 = z11.strictObject({
-  question: z11.string().describe(
+var inputSchema9 = z10.strictObject({
+  question: z10.string().describe(
     "COMPLETE SELF-CONTAINED QUESTION: Must include full background context, relevant details, and a clear independent question. The expert model will receive ONLY this content with no access to previous conversation or external context. Structure as: 1) Background/Context 2) Specific situation/problem 3) Clear question. Ensure the expert can fully understand and respond without needing additional information."
   ),
-  expert_model: z11.string().describe(
+  expert_model: z10.string().describe(
     "The expert model to use (e.g., gpt-5, claude-3-5-sonnet-20241022)"
   ),
-  chat_session_id: z11.string().describe(
+  chat_session_id: z10.string().describe(
     'Chat session ID: use "new" for new session or existing session ID'
   )
 });
@@ -27238,7 +26652,7 @@ Please check your model configuration with /model command.`
 // src/tools/interaction/AskUserQuestionTool/AskUserQuestionTool.tsx
 import { Box as Box37, Text as Text41 } from "ink";
 import React48 from "react";
-import { z as z12 } from "zod";
+import { z as z11 } from "zod";
 
 // src/constants/figures.ts
 var BLACK_CIRCLE = env.platform === "macos" ? "\u23FA" : "\u25CF";
@@ -27258,19 +26672,19 @@ Usage notes:
 - If you recommend a specific option, make that the first option in the list and add "(Recommended)" at the end of the label`;
 
 // src/tools/interaction/AskUserQuestionTool/AskUserQuestionTool.tsx
-var optionSchema = z12.object({
-  label: z12.string(),
-  description: z12.string()
+var optionSchema = z11.object({
+  label: z11.string(),
+  description: z11.string()
 });
-var questionSchema = z12.object({
-  question: z12.string(),
-  header: z12.string(),
-  options: z12.array(optionSchema).min(2).max(4),
-  multiSelect: z12.boolean()
+var questionSchema = z11.object({
+  question: z11.string(),
+  header: z11.string(),
+  options: z11.array(optionSchema).min(2).max(4),
+  multiSelect: z11.boolean()
 });
-var inputSchema10 = z12.strictObject({
-  questions: z12.array(questionSchema).min(1).max(4),
-  answers: z12.record(z12.string(), z12.string()).optional()
+var inputSchema10 = z11.strictObject({
+  questions: z11.array(questionSchema).min(1).max(4),
+  answers: z11.record(z11.string(), z11.string()).optional()
 }).refine(
   (input) => {
     const questionTexts = input.questions.map((q) => q.question);
@@ -27340,7 +26754,7 @@ var AskUserQuestionTool = {
 // src/tools/system/TaskOutputTool/TaskOutputTool.tsx
 import { Box as Box38, Text as Text42 } from "ink";
 import React49 from "react";
-import { z as z13 } from "zod";
+import { z as z12 } from "zod";
 
 // src/utils/session/backgroundTasks.ts
 var backgroundTasks = /* @__PURE__ */ new Map();
@@ -27502,11 +26916,11 @@ The assistant defers analysis because:
 // src/tools/system/TaskOutputTool/TaskOutputTool.tsx
 var TOOL_PROGRESS_OPEN_TAG2 = ["<tool", "-progress>"].join("");
 var TOOL_PROGRESS_CLOSE_TAG2 = ["</tool", "-progress>"].join("");
-var inputSchema11 = z13.strictObject({
-  task_id: z13.string().describe("The task ID to get output from"),
-  block: z13.boolean().optional().default(true).describe("Whether to wait for completion"),
-  timeout: z13.number().min(0).max(6e5).optional().default(3e4).describe("Max wait time in ms"),
-  analyze: z13.boolean().optional().describe("Analyze the output for errors and warnings")
+var inputSchema11 = z12.strictObject({
+  task_id: z12.string().describe("The task ID to get output from"),
+  block: z12.boolean().optional().default(true).describe("Whether to wait for completion"),
+  timeout: z12.number().min(0).max(6e5).optional().default(3e4).describe("Max wait time in ms"),
+  analyze: z12.boolean().optional().describe("Analyze the output for errors and warnings")
 });
 function isTaskOutputLspAnalysisEnabled() {
   const raw = String(process.env.PYB_TASKOUTPUT_LSP_ANALYSIS ?? "").trim().toLowerCase();
@@ -27583,7 +26997,7 @@ async function analyzeOutputWithLsp(output, exitCode) {
   if (exitCode !== 0 || errorCount > 0 || warningCount > 0) {
     try {
       const { isAbsolute: isAbsolute11, resolve: resolve16 } = await import("path");
-      const { getSessionRoot: getSessionRoot2 } = await import("./state-NZVNNCHH.js");
+      const { getSessionRoot: getSessionRoot2 } = await import("./state-GWKESQ7O.js");
       const lines = output.split("\n");
       const uniqueFiles = /* @__PURE__ */ new Set();
       const lspSuggestions = [];
@@ -27854,7 +27268,7 @@ ${output.task.output.trimEnd()}
 import { rmSync as rmSync2, existsSync as existsSync18, statSync as statSync12 } from "fs";
 import { Box as Box39, Text as Text43 } from "ink";
 import * as React50 from "react";
-import { z as z14 } from "zod";
+import { z as z13 } from "zod";
 import { isAbsolute as isAbsolute9, relative as relative11, resolve as resolve10 } from "path";
 
 // src/tools/filesystem/DeleteTool/prompt.ts
@@ -27921,11 +27335,11 @@ Delete({
 `.trim();
 
 // src/tools/filesystem/DeleteTool/DeleteTool.tsx
-var inputSchema12 = z14.strictObject({
-  file_paths: z14.array(z14.string()).describe(
+var inputSchema12 = z13.strictObject({
+  file_paths: z13.array(z13.string()).describe(
     "The list of file paths you want to delete, you MUST set file path to absolute path."
   ),
-  force: z14.boolean().optional().describe(
+  force: z13.boolean().optional().describe(
     "Force deletion even if the file is referenced by other files (LSP check)."
   )
 });
@@ -27985,7 +27399,7 @@ var DeleteTool = {
         }
         if (!force) {
           try {
-            const { LspFacade: LspFacade2 } = await import("./lsp-OKPL75YW.js");
+            const { LspFacade: LspFacade2 } = await import("./lsp-M5NJ7YC7.js");
             const referenceDetail = await LspFacade2.checkFileReferences(fullPath);
             if (referenceDetail) {
               failedItems.push(
@@ -28045,7 +27459,7 @@ var DeleteTool = {
 // src/tools/system/KillShellTool/KillShellTool.tsx
 import { Box as Box40, Text as Text44 } from "ink";
 import React51 from "react";
-import { z as z15 } from "zod";
+import { z as z14 } from "zod";
 
 // src/tools/system/KillShellTool/prompt.ts
 var TOOL_NAME16 = "KillShell";
@@ -28059,8 +27473,8 @@ var PROMPT11 = `
 `;
 
 // src/tools/system/KillShellTool/KillShellTool.tsx
-var inputSchema13 = z15.strictObject({
-  shell_id: z15.string().describe("The ID of the background shell to kill")
+var inputSchema13 = z14.strictObject({
+  shell_id: z14.string().describe("The ID of the background shell to kill")
 });
 var KillShellTool = {
   name: TOOL_NAME16,
@@ -28136,7 +27550,7 @@ var KillShellTool = {
 // src/tools/mcp/ListMcpResourcesTool/ListMcpResourcesTool.tsx
 import { Box as Box41, Text as Text45 } from "ink";
 import React52 from "react";
-import { z as z16 } from "zod";
+import { z as z15 } from "zod";
 import { ListResourcesResultSchema } from "@modelcontextprotocol/sdk/types.js";
 
 // src/tools/mcp/ListMcpResourcesTool/prompt.ts
@@ -28156,8 +27570,8 @@ Parameters:
   resources from all servers will be returned.`;
 
 // src/tools/mcp/ListMcpResourcesTool/ListMcpResourcesTool.tsx
-var inputSchema14 = z16.strictObject({
-  server: z16.string().optional().describe("Optional server name to filter resources by")
+var inputSchema14 = z15.strictObject({
+  server: z15.string().optional().describe("Optional server name to filter resources by")
 });
 var ListMcpResourcesTool = {
   name: TOOL_NAME17,
@@ -28256,9 +27670,9 @@ import { existsSync as existsSync19, readFileSync as readFileSync10, statSync as
 import { Box as Box42, Text as Text46 } from "ink";
 import { relative as relative12, resolve as resolve11 } from "path";
 import React53 from "react";
-import { z as z17 } from "zod";
-var inputSchema15 = z17.strictObject({
-  operation: z17.enum([
+import { z as z16 } from "zod";
+var inputSchema15 = z16.strictObject({
+  operation: z16.enum([
     "goToDefinition",
     "findReferences",
     "hover",
@@ -28271,15 +27685,15 @@ var inputSchema15 = z17.strictObject({
     "getScope",
     "diagnostics"
   ]).describe("The LSP operation to perform"),
-  filePath: z17.string().describe("The absolute or relative path to the file"),
-  line: z17.number().int().positive().optional().describe("The line number (1-based, as shown in editors). Required for location-based operations."),
-  character: z17.number().int().positive().optional().describe("The character offset (1-based, as shown in editors). Required for location-based operations."),
-  query: z17.string().optional().describe('The query string for workspaceSymbol. Required when operation is "workspaceSymbol".'),
-  waitForDiagnostics: z17.boolean().optional().describe('If true, wait for fresh diagnostics from the server (used with "diagnostics" operation)'),
-  timeout: z17.number().optional().describe("Timeout in milliseconds for waiting operations (default: 5000)")
+  filePath: z16.string().describe("The absolute or relative path to the file"),
+  line: z16.number().int().positive().optional().describe("The line number (1-based, as shown in editors). Required for location-based operations."),
+  character: z16.number().int().positive().optional().describe("The character offset (1-based, as shown in editors). Required for location-based operations."),
+  query: z16.string().optional().describe('The query string for workspaceSymbol. Required when operation is "workspaceSymbol".'),
+  waitForDiagnostics: z16.boolean().optional().describe('If true, wait for fresh diagnostics from the server (used with "diagnostics" operation)'),
+  timeout: z16.number().optional().describe("Timeout in milliseconds for waiting operations (default: 5000)")
 });
-var outputSchema = z17.object({
-  operation: z17.enum([
+var outputSchema = z16.object({
+  operation: z16.enum([
     "goToDefinition",
     "findReferences",
     "hover",
@@ -28292,10 +27706,10 @@ var outputSchema = z17.object({
     "getScope",
     "diagnostics"
   ]).describe("The LSP operation that was performed"),
-  result: z17.string().describe("The formatted result of the LSP operation"),
-  filePath: z17.string().describe("The file path the operation was performed on"),
-  resultCount: z17.number().int().nonnegative().optional().describe("Number of results (definitions, references, symbols)"),
-  fileCount: z17.number().int().nonnegative().optional().describe("Number of files containing results")
+  result: z16.string().describe("The formatted result of the LSP operation"),
+  filePath: z16.string().describe("The file path the operation was performed on"),
+  resultCount: z16.number().int().nonnegative().optional().describe("Number of results (definitions, references, symbols)"),
+  fileCount: z16.number().int().nonnegative().optional().describe("Number of files containing results")
 });
 var OPERATION_LABELS = {
   goToDefinition: { singular: "definition", plural: "definitions" },
@@ -28718,7 +28132,7 @@ var LspTool = {
 // src/tools/mcp/ReadMcpResourceTool/ReadMcpResourceTool.tsx
 import { Box as Box43, Text as Text47 } from "ink";
 import React54 from "react";
-import { z as z18 } from "zod";
+import { z as z17 } from "zod";
 import { ReadResourceResultSchema } from "@modelcontextprotocol/sdk/types.js";
 
 // src/tools/mcp/ReadMcpResourceTool/prompt.ts
@@ -28736,9 +28150,9 @@ Parameters:
 - uri (required): The URI of the resource to read`;
 
 // src/tools/mcp/ReadMcpResourceTool/ReadMcpResourceTool.tsx
-var inputSchema16 = z18.strictObject({
-  server: z18.string().describe("The MCP server name"),
-  uri: z18.string().describe("The resource URI to read")
+var inputSchema16 = z17.strictObject({
+  server: z17.string().describe("The MCP server name"),
+  uri: z17.string().describe("The resource URI to read")
 });
 var ReadMcpResourceTool = {
   name: TOOL_NAME18,
@@ -28847,18 +28261,18 @@ var ReadMcpResourceTool = {
 };
 
 // src/tools/ai/SkillTool/SkillTool.tsx
-import { z as z19 } from "zod";
+import { z as z18 } from "zod";
 import * as React55 from "react";
 
 // src/tools/ai/SkillTool/prompt.ts
 var TOOL_NAME19 = "Skill";
 
 // src/tools/ai/SkillTool/SkillTool.tsx
-var inputSchema17 = z19.strictObject({
-  skill: z19.string().describe(
+var inputSchema17 = z18.strictObject({
+  skill: z18.string().describe(
     "The skill name (no arguments). Use a value from <available_skills>."
   ),
-  args: z19.string().optional().describe("Optional arguments for the skill (freeform text)")
+  args: z18.string().optional().describe("Optional arguments for the skill (freeform text)")
 });
 function normalizeCommandModelName(model) {
   if (typeof model !== "string") return void 0;
@@ -29083,7 +28497,7 @@ function findCommand(commandName, commands) {
 import { last as last2, memoize as memoize3 } from "lodash-es";
 import React56 from "react";
 import { Box as Box44, Text as Text48 } from "ink";
-import { z as z20 } from "zod";
+import { z as z19 } from "zod";
 import { randomUUID as randomUUID6 } from "crypto";
 import { existsSync as existsSync20, readFileSync as readFileSync11 } from "fs";
 
@@ -29243,17 +28657,17 @@ assistant: "I'm going to use the Task tool to launch the with the greeting-respo
 }
 
 // src/tools/agent/TaskTool/TaskTool.tsx
-var inputSchema18 = z20.object({
-  description: z20.string().describe("A short (3-5 word) description of the task"),
-  prompt: z20.string().describe("The task for the agent to perform"),
-  subagent_type: z20.string().describe("The type of specialized agent to use for this task"),
-  model: z20.enum(["sonnet", "opus", "haiku"]).optional().describe(
+var inputSchema18 = z19.object({
+  description: z19.string().describe("A short (3-5 word) description of the task"),
+  prompt: z19.string().describe("The task for the agent to perform"),
+  subagent_type: z19.string().describe("The type of specialized agent to use for this task"),
+  model: z19.enum(["sonnet", "opus", "haiku"]).optional().describe(
     "Optional model to use for this agent. If not specified, inherits from parent. Prefer haiku for quick, straightforward tasks to minimize cost and latency."
   ),
-  resume: z20.string().optional().describe(
+  resume: z19.string().optional().describe(
     "Optional agent ID to resume from. If provided, the agent will continue from the previous execution transcript."
   ),
-  run_in_background: z20.boolean().optional().describe(
+  run_in_background: z19.boolean().optional().describe(
     "Set to true to run this agent in the background. Use TaskOutput to read the output later."
   )
 });
@@ -29779,21 +29193,21 @@ var TaskTool = {
 };
 
 // src/tools/interaction/TaskCreateTool/TaskCreateTool.tsx
-import { z as z22 } from "zod";
+import { z as z21 } from "zod";
 
 // src/utils/session/taskToolUtils.ts
-import { z as z21 } from "zod";
-var jsonValueSchema = z21.lazy(
-  () => z21.union([
-    z21.string(),
-    z21.number(),
-    z21.boolean(),
-    z21.null(),
-    z21.array(jsonValueSchema),
-    z21.record(jsonValueSchema)
+import { z as z20 } from "zod";
+var jsonValueSchema = z20.lazy(
+  () => z20.union([
+    z20.string(),
+    z20.number(),
+    z20.boolean(),
+    z20.null(),
+    z20.array(jsonValueSchema),
+    z20.record(jsonValueSchema)
   ])
 );
-var metadataSchema = z21.record(jsonValueSchema);
+var metadataSchema = z20.record(jsonValueSchema);
 function mapStatusToOutput(status) {
   if (status === "done") return "completed";
   if (status === "deleted") return "deleted";
@@ -30223,11 +29637,11 @@ The assistant used TaskCreate because:
 `.trim();
 
 // src/tools/interaction/TaskCreateTool/TaskCreateTool.tsx
-var inputSchema19 = z22.strictObject({
-  listId: z22.string().min(1).optional(),
-  subject: z22.string().min(1),
-  description: z22.string().min(1),
-  activeForm: z22.string().min(1),
+var inputSchema19 = z21.strictObject({
+  listId: z21.string().min(1).optional(),
+  subject: z21.string().min(1),
+  description: z21.string().min(1),
+  activeForm: z21.string().min(1),
   metadata: metadataSchema.optional()
 });
 var TaskCreateTool = {
@@ -30304,7 +29718,7 @@ var TaskCreateTool = {
 };
 
 // src/tools/interaction/TaskGetTool/TaskGetTool.tsx
-import { z as z23 } from "zod";
+import { z as z22 } from "zod";
 
 // src/tools/interaction/TaskGetTool/prompt.ts
 var TOOL_NAME21 = "TaskGet";
@@ -30340,9 +29754,9 @@ Assistant: I'll fetch the task details first.
 `.trim();
 
 // src/tools/interaction/TaskGetTool/TaskGetTool.tsx
-var inputSchema20 = z23.strictObject({
-  listId: z23.string().min(1).optional(),
-  taskId: z23.string().min(1)
+var inputSchema20 = z22.strictObject({
+  listId: z22.string().min(1).optional(),
+  taskId: z22.string().min(1)
 });
 var TaskGetTool = {
   name: TOOL_NAME21,
@@ -30404,7 +29818,7 @@ var TaskGetTool = {
 };
 
 // src/tools/interaction/TaskListTool/TaskListTool.tsx
-import { z as z24 } from "zod";
+import { z as z23 } from "zod";
 
 // src/tools/interaction/TaskListTool/prompt.ts
 var TOOL_NAME22 = "TaskList";
@@ -30455,9 +29869,9 @@ Assistant: I'll list tasks to show the updated ready/blocked breakdown.
 `.trim();
 
 // src/tools/interaction/TaskListTool/TaskListTool.tsx
-var inputSchema21 = z24.strictObject({
-  listId: z24.string().min(1).optional(),
-  status: z24.enum(["pending", "in_progress", "completed", "deleted"]).optional()
+var inputSchema21 = z23.strictObject({
+  listId: z23.string().min(1).optional(),
+  status: z23.enum(["pending", "in_progress", "completed", "deleted"]).optional()
 });
 var filterByStatus = (tasks, statuses) => {
   if (!statuses || statuses.length === 0) {
@@ -30558,7 +29972,7 @@ var TaskListTool = {
 };
 
 // src/tools/interaction/TaskUpdateTool/TaskUpdateTool.tsx
-import { z as z25 } from "zod";
+import { z as z24 } from "zod";
 
 // src/tools/interaction/TaskUpdateTool/prompt.ts
 var TOOL_NAME23 = "TaskUpdate";
@@ -31002,16 +30416,16 @@ var compareTaskId = (left, right) => {
   if (rightIsNumber) return 1;
   return left.id.localeCompare(right.id);
 };
-var inputSchema22 = z25.strictObject({
-  listId: z25.string().min(1).optional(),
-  taskId: z25.string().min(1),
-  subject: z25.string().optional(),
-  description: z25.string().optional(),
-  activeForm: z25.string().optional(),
-  status: z25.enum(["pending", "in_progress", "completed", "deleted"]).optional(),
+var inputSchema22 = z24.strictObject({
+  listId: z24.string().min(1).optional(),
+  taskId: z24.string().min(1),
+  subject: z24.string().optional(),
+  description: z24.string().optional(),
+  activeForm: z24.string().optional(),
+  status: z24.enum(["pending", "in_progress", "completed", "deleted"]).optional(),
   metadata: metadataSchema.optional(),
-  addBlockedBy: z25.array(z25.string()).optional(),
-  addBlocks: z25.array(z25.string()).optional()
+  addBlockedBy: z24.array(z24.string()).optional(),
+  addBlocks: z24.array(z24.string()).optional()
 });
 var TaskUpdateTool = {
   name: TOOL_NAME23,
@@ -31286,7 +30700,7 @@ import { existsSync as existsSync21, lstatSync, mkdirSync as mkdirSync11, readdi
 import { Box as Box45, Text as Text49 } from "ink";
 import { join as join12 } from "path";
 import * as React57 from "react";
-import { z as z26 } from "zod";
+import { z as z25 } from "zod";
 
 // src/tools/memory/MemoryReadTool/prompt.ts
 var TOOL_NAME24 = "MemoryRead";
@@ -31310,8 +30724,8 @@ Security:
 `;
 
 // src/tools/memory/MemoryReadTool/MemoryReadTool.tsx
-var inputSchema23 = z26.strictObject({
-  file_path: z26.string().optional().describe("Optional path to a specific memory file to read")
+var inputSchema23 = z25.strictObject({
+  file_path: z25.string().optional().describe("Optional path to a specific memory file to read")
 });
 var MemoryReadTool = {
   name: TOOL_NAME24,
@@ -31420,7 +30834,7 @@ ${files}`;
 // src/tools/memory/MemoryWriteTool/MemoryWriteTool.tsx
 import { Box as Box46, Text as Text50 } from "ink";
 import * as React58 from "react";
-import { z as z27 } from "zod";
+import { z as z26 } from "zod";
 
 // src/services/memory/write.ts
 import {
@@ -31496,10 +30910,10 @@ This is the summary of the task execution...",
 `;
 
 // src/tools/memory/MemoryWriteTool/MemoryWriteTool.tsx
-var inputSchema24 = z27.strictObject({
-  file_path: z27.string().describe("Path to the memory file to write"),
-  content: z27.string().describe("Content to write to the file"),
-  mode: z27.enum(["append", "replace"]).optional().describe("Write mode: append adds to existing content, replace overwrites")
+var inputSchema24 = z26.strictObject({
+  file_path: z26.string().describe("Path to the memory file to write"),
+  content: z26.string().describe("Content to write to the file"),
+  mode: z26.enum(["append", "replace"]).optional().describe("Write mode: append adds to existing content, replace overwrites")
 });
 var MemoryWriteTool = {
   name: TOOL_NAME25,
@@ -31619,7 +31033,622 @@ var getReadOnlyTools = memoize4(async () => {
   return tools.filter((_, index) => isEnabled5[index]);
 });
 
+// src/server/bus/eventIdGenerator.ts
+var EventIdGenerator = class {
+  sequenceMap = /* @__PURE__ */ new Map();
+  nextId(sessionId) {
+    const next = (this.sequenceMap.get(sessionId) ?? 0) + 1;
+    this.sequenceMap.set(sessionId, next);
+    return `sess-${sessionId}-seq-${String(next).padStart(6, "0")}`;
+  }
+};
+function parseSessionIdFromEventId(eventId) {
+  const match = eventId.match(/^sess-(.+)-seq-(\d+)$/);
+  return match?.[1] ?? null;
+}
+
+// src/server/bus/index.ts
+var BusEvent;
+((BusEvent2) => {
+  const registry = /* @__PURE__ */ new Map();
+  function define(type3, properties) {
+    const result = { type: type3, properties };
+    registry.set(type3, result);
+    return result;
+  }
+  BusEvent2.define = define;
+  function getSchema(type3) {
+    return registry.get(type3);
+  }
+  BusEvent2.getSchema = getSchema;
+})(BusEvent || (BusEvent = {}));
+var Bus;
+((Bus2) => {
+  const state = {
+    subscriptions: /* @__PURE__ */ new Map()
+  };
+  const eventIdGenerator = new EventIdGenerator();
+  async function publish(def, properties) {
+    const sessionId = typeof properties.sessionId === "string" ? properties.sessionId : void 0;
+    const payload = {
+      type: def.type,
+      ...sessionId ? { id: eventIdGenerator.nextId(sessionId) } : {},
+      properties
+    };
+    const pending = [];
+    for (const key of [def.type, "*"]) {
+      const match = state.subscriptions.get(key);
+      if (match) {
+        for (const sub of match) {
+          const result = sub(payload);
+          if (result instanceof Promise) {
+            pending.push(result);
+          }
+        }
+      }
+    }
+    await Promise.all(pending);
+  }
+  Bus2.publish = publish;
+  function subscribe(def, callback) {
+    return raw(def.type, callback);
+  }
+  Bus2.subscribe = subscribe;
+  function subscribeAll(callback) {
+    return raw("*", callback);
+  }
+  Bus2.subscribeAll = subscribeAll;
+  function raw(type3, callback) {
+    const match = state.subscriptions.get(type3) ?? [];
+    match.push(callback);
+    state.subscriptions.set(type3, match);
+    return () => {
+      const subscriptions = state.subscriptions.get(type3);
+      if (!subscriptions) return;
+      const index = subscriptions.indexOf(callback);
+      if (index !== -1) {
+        subscriptions.splice(index, 1);
+      }
+    };
+  }
+})(Bus || (Bus = {}));
+
+// src/server/events/definitions.ts
+import { z as z27 } from "zod";
+var ServerEvents = {
+  Connected: BusEvent.define("server.connected", z27.object({
+    serverVersion: z27.string(),
+    protocolVersion: z27.string(),
+    features: z27.array(z27.string())
+  })),
+  Heartbeat: BusEvent.define("server.heartbeat", z27.object({
+    timestamp: z27.number()
+  })),
+  Status: BusEvent.define("server.status", z27.object({
+    status: z27.enum(["healthy", "degraded", "unhealthy"]),
+    components: z27.object({
+      llm: z27.enum(["connected", "disconnected"]),
+      mcp: z27.enum(["connected", "disconnected"]),
+      tools: z27.enum(["ready", "initializing"])
+    })
+  }))
+};
+var SessionEvents = {
+  Created: BusEvent.define("session.created", z27.object({
+    sessionId: z27.string(),
+    config: z27.object({
+      model: z27.string(),
+      agent: z27.string(),
+      outputStyle: z27.string()
+    }),
+    resumedFrom: z27.string().optional()
+  })),
+  Updated: BusEvent.define("session.updated", z27.object({
+    sessionId: z27.string(),
+    title: z27.string().optional(),
+    config: z27.object({
+      model: z27.string().optional(),
+      agent: z27.string().optional(),
+      outputStyle: z27.string().optional()
+    }).optional()
+  })),
+  Deleted: BusEvent.define("session.deleted", z27.object({
+    sessionId: z27.string()
+  })),
+  Status: BusEvent.define("session.status", z27.object({
+    sessionId: z27.string(),
+    status: z27.enum(["active", "idle", "waiting_input", "processing"]),
+    currentRequestId: z27.string().optional()
+  }))
+};
+var MessageEvents = {
+  Created: BusEvent.define("message.created", z27.object({
+    sessionId: z27.string(),
+    message: z27.any()
+  })),
+  Updated: BusEvent.define("message.updated", z27.object({
+    sessionId: z27.string(),
+    message: z27.any(),
+    delta: z27.object({
+      type: z27.enum(["text", "tool_use"]),
+      content: z27.string(),
+      index: z27.number().optional()
+    }).optional()
+  })),
+  Completed: BusEvent.define("message.completed", z27.object({
+    sessionId: z27.string(),
+    messageId: z27.string(),
+    finishReason: z27.enum(["end_turn", "tool_calls", "max_tokens", "aborted"]),
+    usage: z27.object({
+      inputTokens: z27.number(),
+      outputTokens: z27.number(),
+      totalTokens: z27.number()
+    }),
+    cost: z27.object({
+      costUSD: z27.number()
+    })
+  })),
+  RequestStarted: BusEvent.define("request.started", z27.object({
+    sessionId: z27.string(),
+    requestId: z27.string(),
+    userMessage: z27.string()
+  })),
+  RequestCompleted: BusEvent.define("request.completed", z27.object({
+    sessionId: z27.string(),
+    requestId: z27.string(),
+    finishReason: z27.enum(["end_turn", "tool_calls", "max_tokens", "aborted"]),
+    duration: z27.number(),
+    totalTokens: z27.number(),
+    costUSD: z27.number()
+  }))
+};
+var ToolEvents = {
+  Started: BusEvent.define("tool.started", z27.object({
+    sessionId: z27.string(),
+    toolUseId: z27.string(),
+    toolName: z27.string(),
+    input: z27.record(z27.unknown()),
+    dangerousLevel: z27.enum(["safe", "moderate", "dangerous"]),
+    requiresPermission: z27.boolean()
+  })),
+  Progress: BusEvent.define("tool.progress", z27.object({
+    sessionId: z27.string(),
+    toolUseId: z27.string(),
+    toolName: z27.string(),
+    progress: z27.number(),
+    message: z27.string().optional(),
+    output: z27.string().optional()
+  })),
+  Completed: BusEvent.define("tool.completed", z27.object({
+    sessionId: z27.string(),
+    toolUseId: z27.string(),
+    toolName: z27.string(),
+    result: z27.string(),
+    isError: z27.boolean(),
+    duration: z27.number()
+  })),
+  Error: BusEvent.define("tool.error", z27.object({
+    sessionId: z27.string(),
+    toolUseId: z27.string(),
+    toolName: z27.string(),
+    error: z27.object({
+      code: z27.string(),
+      message: z27.string(),
+      details: z27.unknown().optional()
+    })
+  }))
+};
+var PermissionEvents = {
+  Requested: BusEvent.define("permission.requested", z27.object({
+    sessionId: z27.string(),
+    permissionId: z27.string(),
+    toolName: z27.string(),
+    toolUseId: z27.string(),
+    input: z27.record(z27.unknown()),
+    risk: z27.enum(["safe", "moderate", "dangerous"]),
+    message: z27.string(),
+    suggestedAction: z27.enum(["allow", "deny"]).optional(),
+    timeout: z27.number().optional()
+  })),
+  Responded: BusEvent.define("permission.responded", z27.object({
+    sessionId: z27.string(),
+    permissionId: z27.string(),
+    decision: z27.enum(["allow", "deny", "allowAll"]),
+    remember: z27.boolean(),
+    scope: z27.enum(["session", "project", "global"]).optional()
+  })),
+  Timeout: BusEvent.define("permission.timeout", z27.object({
+    sessionId: z27.string(),
+    permissionId: z27.string(),
+    toolName: z27.string(),
+    defaultAction: z27.enum(["allow", "deny"])
+  }))
+};
+var ErrorEvents = {
+  General: BusEvent.define("error", z27.object({
+    sessionId: z27.string().optional(),
+    code: z27.string(),
+    message: z27.string(),
+    details: z27.unknown().optional(),
+    recoverable: z27.boolean(),
+    suggestedAction: z27.string().optional()
+  })),
+  Stream: BusEvent.define("error.stream", z27.object({
+    reason: z27.enum(["timeout", "aborted", "network", "server"]),
+    message: z27.string(),
+    retryable: z27.boolean(),
+    retryAfter: z27.number().optional()
+  }))
+};
+
+// src/server/adapters/queryRunner.ts
+var QueryRunner = class {
+  constructor(config2, sessionState) {
+    this.config = config2;
+    this.sessionState = sessionState;
+    this.requestId = uuidv4();
+    this.abortController = new AbortController();
+  }
+  requestId;
+  abortController;
+  isRunning = false;
+  messages = [];
+  startTime = 0;
+  totalCost = 0;
+  totalInputTokens = 0;
+  totalOutputTokens = 0;
+  async run(userMessage) {
+    if (this.isRunning) {
+      throw new Error("QueryRunner is already running");
+    }
+    this.isRunning = true;
+    this.startTime = Date.now();
+    this.messages = [];
+    await Bus.publish(MessageEvents.RequestStarted, {
+      sessionId: this.config.sessionId,
+      requestId: this.requestId,
+      userMessage
+    });
+    this.config.onRequestStart?.(this.requestId);
+    try {
+      const messages = this.buildMessages(userMessage);
+      const [systemPrompt, context, toolUseContext] = await Promise.all([
+        this.buildSystemPrompt(),
+        this.buildContext(),
+        this.createToolUseContext()
+      ]);
+      const canUseTool = this.createCanUseToolFn();
+      const generator = query(
+        messages,
+        systemPrompt,
+        context,
+        canUseTool,
+        toolUseContext
+      );
+      let finishReason = "end_turn";
+      for await (const message of generator) {
+        if (this.abortController.signal.aborted) {
+          finishReason = "aborted";
+          break;
+        }
+        await this.handleMessage(message);
+        if (message.type === "assistant") {
+          const candidate = message.finish;
+          if (candidate === "end_turn" || candidate === "tool_calls" || candidate === "max_tokens") {
+            finishReason = candidate;
+          }
+        }
+      }
+      const result = {
+        requestId: this.requestId,
+        finishReason,
+        messages: this.messages,
+        usage: {
+          inputTokens: this.totalInputTokens,
+          outputTokens: this.totalOutputTokens,
+          totalTokens: this.totalInputTokens + this.totalOutputTokens
+        },
+        cost: {
+          costUSD: this.totalCost
+        },
+        duration: Date.now() - this.startTime
+      };
+      await Bus.publish(MessageEvents.RequestCompleted, {
+        sessionId: this.config.sessionId,
+        requestId: this.requestId,
+        finishReason: result.finishReason,
+        duration: result.duration,
+        totalTokens: result.usage.totalTokens,
+        costUSD: result.cost.costUSD
+      });
+      this.config.onRequestComplete?.(this.requestId, result);
+      return result;
+    } catch (error) {
+      this.config.onError?.(error instanceof Error ? error : new Error(String(error)));
+      throw error;
+    } finally {
+      this.isRunning = false;
+    }
+  }
+  abort() {
+    this.abortController.abort();
+  }
+  getStatus() {
+    return {
+      isRunning: this.isRunning,
+      requestId: this.isRunning ? this.requestId : null,
+      messageCount: this.messages.length
+    };
+  }
+  async handleMessage(message) {
+    this.messages.push(message);
+    await Bus.publish(MessageEvents.Created, {
+      sessionId: this.config.sessionId,
+      message
+    });
+    this.config.onMessageYield?.(message);
+    if (message.type === "assistant") {
+      const assistantMsg = message;
+      if (assistantMsg.message?.usage) {
+        this.totalInputTokens += assistantMsg.message.usage.input_tokens ?? 0;
+        this.totalOutputTokens += assistantMsg.message.usage.output_tokens ?? 0;
+      }
+    }
+  }
+  buildMessages(userMessage) {
+    const history = this.sessionState.messages.filter((message) => message.type !== "progress");
+    const nextMessage = createUserMessageFromText(userMessage);
+    return [...history, nextMessage];
+  }
+  async buildSystemPrompt() {
+    const basePrompt = await getSystemPrompt();
+    const sessionPrompt = this.sessionState.config.systemPrompt ?? [];
+    if (sessionPrompt.length === 0) return basePrompt;
+    return [...basePrompt, ...sessionPrompt];
+  }
+  async buildContext() {
+    const baseContext = await getContext();
+    return {
+      ...baseContext,
+      cwd: this.sessionState.cwd
+    };
+  }
+  createCanUseToolFn() {
+    return async (tool, input, toolUseContext, assistantMessage) => hasPermissionsToUseTool(tool, input, toolUseContext, assistantMessage);
+  }
+  async createToolUseContext() {
+    const tools = await getTools();
+    return {
+      abortController: this.abortController,
+      onQueryLifecycleEvent: (event) => {
+      },
+      sessionContext: new SessionContext(),
+      options: {
+        commands: [],
+        forkNumber: 0,
+        messageLogName: this.requestId,
+        tools,
+        verbose: false,
+        safeMode: false,
+        maxThinkingTokens: 16e3
+      },
+      readFileTimestamps: {},
+      setToolJSX: () => {
+      },
+      requestId: this.requestId,
+      messageId: void 0
+    };
+  }
+};
+
+// src/server/routes/session.ts
+function createSessionRoutes() {
+  const router = new Hono();
+  router.post("/", async (c) => {
+    const body = await c.req.json();
+    const { resumeFrom, config: config2 } = body;
+    if (resumeFrom !== void 0 && resumeFrom !== null) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "RESUME_NOT_SUPPORTED",
+            message: "resumeFrom is not supported in current session backend"
+          }
+        },
+        400
+      );
+    }
+    const session = await sessionStateManager.create(
+      process.cwd(),
+      config2
+    );
+    return c.json({
+      success: true,
+      data: {
+        sessionId: session.id,
+        createdAt: session.createdAt,
+        config: session.config
+      }
+    }, 201);
+  });
+  router.get("/", (c) => {
+    const sessions = sessionStateManager.list();
+    const page = parseInt(c.req.query("page") ?? "1");
+    const limit = parseInt(c.req.query("limit") ?? "20");
+    const status = c.req.query("status");
+    let filtered = sessions;
+    if (status) {
+      filtered = filtered.filter((s) => s.status === status);
+    }
+    const start = (page - 1) * limit;
+    const items = filtered.slice(start, start + limit);
+    return c.json({
+      success: true,
+      data: {
+        items: items.map((s) => ({
+          id: s.id,
+          title: s.title,
+          status: s.status,
+          messageCount: s.messages.length,
+          createdAt: s.createdAt,
+          updatedAt: s.updatedAt,
+          config: s.config
+        })),
+        pagination: {
+          page,
+          limit,
+          total: filtered.length,
+          hasMore: start + limit < filtered.length
+        }
+      }
+    });
+  });
+  router.get("/:sessionId", (c) => {
+    const sessionId = c.req.param("sessionId");
+    const session = sessionStateManager.get(sessionId);
+    if (!session) {
+      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
+    }
+    return c.json({
+      success: true,
+      data: {
+        id: session.id,
+        title: session.title,
+        status: session.status,
+        messages: session.messages,
+        createdAt: session.createdAt,
+        updatedAt: session.updatedAt,
+        config: session.config
+      }
+    });
+  });
+  router.get("/:sessionId/messages", (c) => {
+    const sessionId = c.req.param("sessionId");
+    const session = sessionStateManager.get(sessionId);
+    if (!session) {
+      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
+    }
+    const after = c.req.query("after");
+    const before = c.req.query("before");
+    const limit = Math.max(1, parseInt(c.req.query("limit") ?? "50", 10));
+    let items = [...session.messages];
+    if (after) {
+      const index = items.findIndex((item) => item.uuid === after);
+      if (index >= 0) {
+        items = items.slice(index + 1);
+      }
+    }
+    if (before) {
+      const index = items.findIndex((item) => item.uuid === before);
+      if (index >= 0) {
+        items = items.slice(0, index);
+      }
+    }
+    items = items.slice(0, limit);
+    return c.json({
+      success: true,
+      data: { items }
+    });
+  });
+  router.patch("/:sessionId", async (c) => {
+    const sessionId = c.req.param("sessionId");
+    const body = await c.req.json();
+    const updated = await sessionStateManager.update(sessionId, body);
+    if (!updated) {
+      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
+    }
+    const session = sessionStateManager.get(sessionId);
+    return c.json({ success: true, data: session });
+  });
+  router.delete("/:sessionId", async (c) => {
+    const sessionId = c.req.param("sessionId");
+    const deleted = await sessionStateManager.delete(sessionId);
+    return c.json({
+      success: true,
+      data: { deleted, sessionId }
+    });
+  });
+  router.post("/:sessionId/prompt", async (c) => {
+    const sessionId = c.req.param("sessionId");
+    const body = await c.req.json();
+    const { message, attachments, options } = body;
+    const session = sessionStateManager.get(sessionId);
+    if (!session) {
+      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
+    }
+    const acceptHeader = c.req.header("Accept") ?? "";
+    const wantsSSE = acceptHeader.includes("text/event-stream") || options?.stream !== false;
+    if (wantsSSE) {
+      return streamSSE(c, async (stream) => {
+        const runner = new QueryRunner(
+          { sessionId },
+          session
+        );
+        sessionStateManager.setCurrentRunner(sessionId, runner);
+        try {
+          const result = await runner.run(message);
+          await stream.writeSSE({
+            event: "request.completed",
+            data: JSON.stringify({
+              type: "request.completed",
+              sessionId,
+              timestamp: Date.now(),
+              data: {
+                finishReason: result.finishReason,
+                usage: result.usage,
+                cost: result.cost,
+                duration: result.duration
+              }
+            })
+          });
+        } catch (error) {
+          await stream.writeSSE({
+            event: "error",
+            data: JSON.stringify({
+              type: "error",
+              sessionId,
+              timestamp: Date.now(),
+              data: {
+                code: "QUERY_ERROR",
+                message: error instanceof Error ? error.message : String(error),
+                recoverable: false
+              }
+            })
+          });
+        } finally {
+          sessionStateManager.clearCurrentRunner(sessionId);
+        }
+      });
+    } else {
+      const runner = new QueryRunner({ sessionId }, session);
+      sessionStateManager.setCurrentRunner(sessionId, runner);
+      try {
+        const result = await runner.run(message);
+        return c.json({ success: true, data: result });
+      } finally {
+        sessionStateManager.clearCurrentRunner(sessionId);
+      }
+    }
+  });
+  router.post("/:sessionId/abort", (c) => {
+    const sessionId = c.req.param("sessionId");
+    const session = sessionStateManager.get(sessionId);
+    if (!session) {
+      return c.json({ success: false, error: { code: "SESSION_NOT_FOUND", message: "Session not found" } }, 404);
+    }
+    const runner = sessionStateManager.getCurrentRunner(sessionId);
+    if (runner) {
+      runner.abort();
+      return c.json({ success: true, data: { aborted: true } });
+    }
+    return c.json({ success: true, data: { aborted: false, reason: "No running query" } });
+  });
+  return router;
+}
+
 // src/server/routes/tool.ts
+import { Hono as Hono2 } from "hono";
 function createToolRoutes() {
   const router = new Hono2();
   router.get("/", async (c) => {
@@ -31892,6 +31921,971 @@ function createMCPRoutes() {
   return router;
 }
 
+// src/server/routes/providers.ts
+import * as crypto2 from "crypto";
+import { Hono as Hono6 } from "hono";
+
+// src/server/modelPool/providerCatalog.ts
+function normalizeText(input) {
+  return String(input ?? "").trim();
+}
+function normalizeProviderID(input) {
+  return normalizeText(input).toLowerCase();
+}
+function rankSources(priority) {
+  const rank = /* @__PURE__ */ new Map();
+  priority.forEach((source, index) => {
+    rank.set(source, index);
+  });
+  return rank;
+}
+function composeProviderCatalog(sources, priority = ["env", "auth", "plugin", "config"]) {
+  const ranks = rankSources(priority);
+  const fallbackRank = priority.length + 1;
+  const sortedSources = [...sources].sort((a, b) => {
+    const aRank = ranks.get(a.sourceType) ?? fallbackRank;
+    const bRank = ranks.get(b.sourceType) ?? fallbackRank;
+    return aRank - bRank;
+  });
+  const providerMap = /* @__PURE__ */ new Map();
+  for (const source of sortedSources) {
+    for (const provider of source.providers) {
+      const providerID = normalizeProviderID(provider?.providerID);
+      if (!providerID) continue;
+      const displayName = normalizeText(provider?.displayName) || providerID;
+      const connected2 = provider?.connected === true;
+      const existing = providerMap.get(providerID);
+      if (!existing) {
+        providerMap.set(providerID, {
+          providerID,
+          displayName,
+          connected: connected2
+        });
+        continue;
+      }
+      if (!existing.connected && connected2) {
+        existing.connected = true;
+      }
+    }
+  }
+  const all = [...providerMap.values()].sort(
+    (a, b) => a.providerID.localeCompare(b.providerID)
+  );
+  const connected = all.filter((item) => item.connected).map((item) => item.providerID);
+  let defaultModel = null;
+  for (const source of sortedSources) {
+    if (source.defaultModel) {
+      defaultModel = source.defaultModel;
+      break;
+    }
+  }
+  return {
+    all,
+    default: defaultModel,
+    connected
+  };
+}
+function buildProviderSourceFromProfiles(sourceType, profiles, defaultModel) {
+  const providerMap = /* @__PURE__ */ new Map();
+  for (const profile of profiles) {
+    if (profile?.isActive !== true) continue;
+    const providerID = normalizeProviderID(profile?.provider);
+    if (!providerID) continue;
+    const existing = providerMap.get(providerID);
+    const connected = normalizeText(profile?.apiKey).length > 0;
+    const displayName = normalizeText(profile?.provider) || providerID;
+    if (!existing) {
+      providerMap.set(providerID, {
+        providerID,
+        displayName,
+        connected
+      });
+      continue;
+    }
+    if (!existing.connected && connected) {
+      existing.connected = true;
+    }
+  }
+  return {
+    sourceType,
+    providers: [...providerMap.values()].sort(
+      (a, b) => a.providerID.localeCompare(b.providerID)
+    ),
+    defaultModel
+  };
+}
+
+// src/server/modelPool/authKernel.ts
+function parseTtlMs(input) {
+  const parsed = Number(input);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    return 5 * 60 * 1e3;
+  }
+  return Math.floor(parsed);
+}
+var AuthKernel = class {
+  ttlMs;
+  pendingByProvider = /* @__PURE__ */ new Map();
+  consumedStatesByProvider = /* @__PURE__ */ new Map();
+  constructor(ttlMs = parseTtlMs(process.env.PYB_OAUTH_PENDING_TTL_MS)) {
+    this.ttlMs = ttlMs;
+  }
+  setOAuthPendingTtlMs(ttlMs) {
+    if (!Number.isFinite(ttlMs) || ttlMs <= 0) {
+      throw new Error("ttlMs must be a positive number");
+    }
+    this.ttlMs = Math.floor(ttlMs);
+  }
+  beginOAuthSession(providerID, state, codeVerifier) {
+    const now = Date.now();
+    this.pruneConsumedStates(providerID, now);
+    this.pendingByProvider.set(providerID, {
+      state,
+      codeVerifier,
+      createdAt: now
+    });
+  }
+  consumeOAuthSession(providerID, state) {
+    const now = Date.now();
+    this.pruneConsumedStates(providerID, now);
+    const consumed = this.consumedStatesByProvider.get(providerID);
+    if (consumed?.has(state)) {
+      return { success: false, errorCode: "OAUTH_STATE_REPLAYED" };
+    }
+    const pending = this.pendingByProvider.get(providerID);
+    if (!pending || pending.state !== state) {
+      return { success: false, errorCode: "OAUTH_STATE_MISMATCH" };
+    }
+    if (now - pending.createdAt > this.ttlMs) {
+      this.pendingByProvider.delete(providerID);
+      return { success: false, errorCode: "OAUTH_STATE_EXPIRED" };
+    }
+    this.pendingByProvider.delete(providerID);
+    let nextConsumed = this.consumedStatesByProvider.get(providerID);
+    if (!nextConsumed) {
+      nextConsumed = /* @__PURE__ */ new Map();
+      this.consumedStatesByProvider.set(providerID, nextConsumed);
+    }
+    nextConsumed.set(state, now);
+    return {
+      success: true,
+      codeVerifier: pending.codeVerifier
+    };
+  }
+  pruneConsumedStates(providerID, now) {
+    const consumed = this.consumedStatesByProvider.get(providerID);
+    if (!consumed) return;
+    for (const [state, consumedAt] of consumed.entries()) {
+      if (now - consumedAt > this.ttlMs) {
+        consumed.delete(state);
+      }
+    }
+    if (consumed.size === 0) {
+      this.consumedStatesByProvider.delete(providerID);
+    }
+  }
+};
+
+// src/server/routes/providers.ts
+var authKernel = new AuthKernel();
+function normalizeText2(input) {
+  return String(input ?? "").trim();
+}
+function normalizeProviderID2(input) {
+  return normalizeText2(input).toLowerCase();
+}
+function getActiveProfiles(config2) {
+  const profiles = Array.isArray(config2?.modelProfiles) ? config2.modelProfiles : [];
+  return profiles.filter((profile) => profile?.isActive === true);
+}
+function hasProvider(config2, providerID) {
+  const profiles = Array.isArray(config2?.modelProfiles) ? config2.modelProfiles : [];
+  return profiles.some((profile) => normalizeProviderID2(profile?.provider) === providerID);
+}
+function setProviderApiKey(providerID, apiKey) {
+  const config2 = getGlobalConfig();
+  const profiles = Array.isArray(config2?.modelProfiles) ? config2.modelProfiles : [];
+  let updated = false;
+  const nextProfiles = profiles.map((profile) => {
+    if (normalizeProviderID2(profile?.provider) !== providerID) return profile;
+    updated = true;
+    return {
+      ...profile,
+      apiKey
+    };
+  });
+  if (!updated) return false;
+  saveGlobalConfig({
+    ...config2,
+    modelProfiles: nextProfiles
+  });
+  return true;
+}
+function setProviderAuthValue(providerIDRaw, apiKeyRaw) {
+  const providerID = normalizeProviderID2(providerIDRaw);
+  const apiKey = normalizeText2(apiKeyRaw);
+  if (!providerID) {
+    return {
+      success: false,
+      code: "INVALID_PROVIDER_ID",
+      message: "providerID is required"
+    };
+  }
+  if (!apiKey) {
+    return {
+      success: false,
+      code: "INVALID_AUTH_INPUT",
+      message: "apiKey is required"
+    };
+  }
+  const config2 = getGlobalConfig();
+  if (!hasProvider(config2, providerID)) {
+    return {
+      success: false,
+      code: "PROVIDER_NOT_FOUND",
+      message: `Provider '${providerID}' not found`
+    };
+  }
+  const updated = setProviderApiKey(providerID, apiKey);
+  if (!updated) {
+    return {
+      success: false,
+      code: "PROVIDER_AUTH_UPDATE_FAILED",
+      message: "Failed to update provider auth"
+    };
+  }
+  return { success: true };
+}
+function removeProviderAuthValue(providerIDRaw) {
+  const providerID = normalizeProviderID2(providerIDRaw);
+  if (!providerID) {
+    return {
+      success: false,
+      code: "INVALID_PROVIDER_ID",
+      message: "providerID is required"
+    };
+  }
+  const config2 = getGlobalConfig();
+  if (!hasProvider(config2, providerID)) {
+    return {
+      success: false,
+      code: "PROVIDER_NOT_FOUND",
+      message: `Provider '${providerID}' not found`
+    };
+  }
+  const updated = setProviderApiKey(providerID, "");
+  if (!updated) {
+    return {
+      success: false,
+      code: "PROVIDER_AUTH_REMOVE_FAILED",
+      message: "Failed to remove provider auth"
+    };
+  }
+  return { success: true };
+}
+function buildCodeVerifier() {
+  return crypto2.randomBytes(32).toString("base64url");
+}
+function buildCodeChallenge(verifier) {
+  return crypto2.createHash("sha256").update(verifier).digest("base64url");
+}
+function resolveDefaultModelRef(config2, activeProfiles) {
+  const pointer = normalizeText2(config2?.modelPointers?.main);
+  if (!pointer) return null;
+  const normalizedPointer = pointer.toLowerCase();
+  const profile = activeProfiles.find((item) => {
+    const providerID = normalizeProviderID2(item?.provider);
+    const modelID = normalizeText2(item?.modelName);
+    const profileName = normalizeText2(item?.name);
+    const providerQualifiedModel = `${providerID}:${modelID}`.toLowerCase();
+    const providerQualifiedName = `${providerID}:${profileName}`.toLowerCase();
+    return modelID === pointer || profileName === pointer || providerQualifiedModel === normalizedPointer || providerQualifiedName === normalizedPointer;
+  });
+  if (!profile) return null;
+  return {
+    providerID: normalizeProviderID2(profile.provider),
+    modelID: normalizeText2(profile.modelName),
+    displayName: normalizeText2(profile.name) || normalizeText2(profile.modelName),
+    capabilities: []
+  };
+}
+function createProviderListPayload(config2) {
+  const activeProfiles = getActiveProfiles(config2);
+  const defaultModel = resolveDefaultModelRef(config2, activeProfiles);
+  const configSource = buildProviderSourceFromProfiles(
+    "config",
+    activeProfiles,
+    defaultModel
+  );
+  return composeProviderCatalog([configSource], ["env", "auth", "plugin", "config"]);
+}
+function createProviderAuthMethods(providers2) {
+  return providers2.map((provider) => ({
+    providerID: provider.providerID,
+    type: "api",
+    label: "API Key",
+    scopes: []
+  }));
+}
+function createProvidersRoutes() {
+  const router = new Hono6();
+  router.get("/", (c) => {
+    const config2 = getGlobalConfig();
+    const data = createProviderListPayload(config2);
+    return c.json({
+      success: true,
+      data
+    });
+  });
+  router.get("/auth", (c) => {
+    const config2 = getGlobalConfig();
+    const data = createProviderListPayload(config2);
+    return c.json({
+      success: true,
+      data: createProviderAuthMethods(data.all)
+    });
+  });
+  router.post("/:providerID/oauth/authorize", async (c) => {
+    const providerID = normalizeProviderID2(c.req.param("providerID"));
+    const config2 = getGlobalConfig();
+    if (!hasProvider(config2, providerID)) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "PROVIDER_NOT_FOUND",
+            message: `Provider '${providerID}' not found`,
+            recoverable: true
+          }
+        },
+        404
+      );
+    }
+    const body = await c.req.json().catch(() => ({}));
+    const redirectUri = normalizeText2(body?.redirectUri) || `http://localhost:4096/v1/providers/${providerID}/oauth/callback`;
+    const scope = normalizeText2(body?.scope) || "default";
+    const state = crypto2.randomBytes(24).toString("base64url");
+    const codeVerifier = buildCodeVerifier();
+    const codeChallenge = buildCodeChallenge(codeVerifier);
+    authKernel.beginOAuthSession(providerID, state, codeVerifier);
+    const authorizationUrl = new URL(
+      `https://auth.${providerID || "provider"}.example.com/oauth/authorize`
+    );
+    authorizationUrl.searchParams.set("response_type", "code");
+    authorizationUrl.searchParams.set("client_id", "pyb-cli");
+    authorizationUrl.searchParams.set("redirect_uri", redirectUri);
+    authorizationUrl.searchParams.set("scope", scope);
+    authorizationUrl.searchParams.set("state", state);
+    authorizationUrl.searchParams.set("code_challenge", codeChallenge);
+    authorizationUrl.searchParams.set("code_challenge_method", "S256");
+    return c.json({
+      success: true,
+      data: {
+        providerID,
+        authorizationUrl: authorizationUrl.toString(),
+        state,
+        codeChallengeMethod: "S256"
+      }
+    });
+  });
+  router.post("/:providerID/oauth/callback", async (c) => {
+    const providerID = normalizeProviderID2(c.req.param("providerID"));
+    const config2 = getGlobalConfig();
+    if (!hasProvider(config2, providerID)) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "PROVIDER_NOT_FOUND",
+            message: `Provider '${providerID}' not found`,
+            recoverable: true
+          }
+        },
+        404
+      );
+    }
+    const body = await c.req.json().catch(() => ({}));
+    const state = normalizeText2(body?.state);
+    const code = normalizeText2(body?.code);
+    if (!state || !code) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "INVALID_OAUTH_CALLBACK",
+            message: "code and state are required",
+            recoverable: true
+          }
+        },
+        400
+      );
+    }
+    const consumed = authKernel.consumeOAuthSession(providerID, state);
+    if (consumed.success === false) {
+      const errorCode = consumed.errorCode;
+      const errorMap = {
+        OAUTH_STATE_MISMATCH: "Invalid oauth state",
+        OAUTH_STATE_EXPIRED: "OAuth state expired",
+        OAUTH_STATE_REPLAYED: "OAuth state already consumed"
+      };
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: errorCode,
+            message: errorMap[errorCode],
+            recoverable: true
+          }
+        },
+        400
+      );
+    }
+    const synthesizedApiKey = crypto2.createHash("sha256").update(`${providerID}:${code}:${consumed.codeVerifier}:${state}`).digest("hex").slice(0, 40);
+    const result = setProviderAuthValue(providerID, `oauth_${synthesizedApiKey}`);
+    if (!result.success) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: result.code ?? "PROVIDER_AUTH_UPDATE_FAILED",
+            message: result.message ?? "Failed to update provider auth",
+            recoverable: true
+          }
+        },
+        400
+      );
+    }
+    return c.json({
+      success: true,
+      data: {
+        providerID,
+        connected: true,
+        method: "oauth"
+      }
+    });
+  });
+  return router;
+}
+
+// src/server/routes/auth.ts
+import { Hono as Hono7 } from "hono";
+function isNotFound(code) {
+  return code === "PROVIDER_NOT_FOUND";
+}
+function createAuthRoutes() {
+  const router = new Hono7();
+  router.put("/:providerID", async (c) => {
+    const providerID = c.req.param("providerID");
+    const body = await c.req.json().catch(() => ({}));
+    const result = setProviderAuthValue(providerID, body?.apiKey);
+    if (!result.success) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: result.code ?? "PROVIDER_AUTH_UPDATE_FAILED",
+            message: result.message ?? "Failed to update provider auth",
+            recoverable: true
+          }
+        },
+        isNotFound(result.code) ? 404 : 400
+      );
+    }
+    return c.json({
+      success: true,
+      data: {
+        providerID: providerID.toLowerCase(),
+        connected: true,
+        method: "api"
+      }
+    });
+  });
+  router.delete("/:providerID", (c) => {
+    const providerID = c.req.param("providerID");
+    const result = removeProviderAuthValue(providerID);
+    if (!result.success) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: result.code ?? "PROVIDER_AUTH_REMOVE_FAILED",
+            message: result.message ?? "Failed to remove provider auth",
+            recoverable: true
+          }
+        },
+        isNotFound(result.code) ? 404 : 400
+      );
+    }
+    return c.json({
+      success: true,
+      data: {
+        providerID: providerID.toLowerCase(),
+        removed: true
+      }
+    });
+  });
+  return router;
+}
+
+// src/server/routes/model.ts
+import { Hono as Hono8 } from "hono";
+
+// src/server/modelPool/modelCatalog.ts
+function normalizeText3(input) {
+  return String(input ?? "").trim();
+}
+function normalizeProviderID3(input) {
+  return normalizeText3(input).toLowerCase();
+}
+function isActiveProfile(profile) {
+  return profile?.isActive === true;
+}
+function resolveModelSelection(profiles, providerID, modelID) {
+  const providerProfiles = profiles.filter(
+    (profile) => normalizeProviderID3(profile?.provider) === providerID
+  );
+  if (providerProfiles.length === 0) {
+    return {
+      success: false,
+      errorCode: "PROVIDER_NOT_FOUND",
+      message: `Provider '${providerID}' not found`,
+      status: 404
+    };
+  }
+  const matchingProfiles = providerProfiles.filter(
+    (profile) => normalizeText3(profile?.modelName) === modelID
+  );
+  if (matchingProfiles.length === 0) {
+    return {
+      success: false,
+      errorCode: "MODEL_NOT_FOUND",
+      message: `Model '${modelID}' not found under provider '${providerID}'`,
+      status: 404
+    };
+  }
+  const enabledProfile = matchingProfiles.find(isActiveProfile);
+  if (!enabledProfile) {
+    return {
+      success: false,
+      errorCode: "MODEL_DISABLED",
+      message: `Model '${modelID}' is disabled under provider '${providerID}'`,
+      status: 409
+    };
+  }
+  return {
+    success: true,
+    current: {
+      providerID,
+      modelID,
+      displayName: normalizeText3(enabledProfile?.name) || modelID,
+      capabilities: []
+    }
+  };
+}
+
+// src/server/modelPool/policyEngine.ts
+function normalizeText4(input) {
+  return String(input ?? "").trim();
+}
+function normalizeProviderID4(input) {
+  return normalizeText4(input).toLowerCase();
+}
+function readBlockedModelRules() {
+  const raw = process.env.PYB_POLICY_BLOCKED_MODELS ?? "";
+  const entries = raw.split(",").map((item) => item.trim().toLowerCase()).filter(Boolean);
+  return new Set(entries);
+}
+function evaluateDefaultModelPolicy(input) {
+  const providerID = normalizeProviderID4(input.providerID);
+  const modelID = normalizeText4(input.modelID).toLowerCase();
+  const blocked = readBlockedModelRules();
+  const exactKey = `${providerID}:${modelID}`;
+  const wildcardProviderKey = `${providerID}:*`;
+  const wildcardGlobalKey = `*:${modelID}`;
+  const fullWildcardKey = "*:*";
+  if (blocked.has(exactKey) || blocked.has(wildcardProviderKey) || blocked.has(wildcardGlobalKey) || blocked.has(fullWildcardKey)) {
+    return {
+      allowed: false,
+      errorCode: "POLICY_REJECTED",
+      message: `Policy rejected model '${modelID}' under provider '${providerID}'`,
+      status: 403
+    };
+  }
+  return { allowed: true };
+}
+
+// src/server/routes/model.ts
+function normalizeText5(input) {
+  return String(input ?? "").trim();
+}
+function normalizeProviderID5(input) {
+  return normalizeText5(input).toLowerCase();
+}
+function isSupportedScope(input) {
+  return input === "global" || input === "workspace";
+}
+function resolveScope(input) {
+  const scope = normalizeText5(input).toLowerCase();
+  if (!scope) return "global";
+  if (isSupportedScope(scope)) return scope;
+  throw new Error("INVALID_SCOPE");
+}
+function createModelRoutes() {
+  const router = new Hono8();
+  router.put("/default", async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    const providerID = normalizeProviderID5(body?.providerID);
+    const modelID = normalizeText5(body?.modelID);
+    if (!providerID || !modelID) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "INVALID_MODEL_REF",
+            message: "providerID and modelID are required",
+            recoverable: true
+          }
+        },
+        400
+      );
+    }
+    let requestedScope;
+    try {
+      requestedScope = resolveScope(body?.scope);
+    } catch {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: "INVALID_SCOPE",
+            message: "scope must be global or workspace",
+            recoverable: true
+          }
+        },
+        400
+      );
+    }
+    const globalConfig = getGlobalConfig();
+    const profiles = Array.isArray(globalConfig.modelProfiles) ? globalConfig.modelProfiles : [];
+    const selection = resolveModelSelection(profiles, providerID, modelID);
+    if (selection.success === false) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: selection.errorCode,
+            message: selection.message,
+            recoverable: true
+          }
+        },
+        selection.status
+      );
+    }
+    const policy = evaluateDefaultModelPolicy({
+      providerID,
+      modelID,
+      scope: requestedScope
+    });
+    if (policy.allowed === false) {
+      return c.json(
+        {
+          success: false,
+          error: {
+            code: policy.errorCode,
+            message: policy.message,
+            recoverable: true
+          }
+        },
+        policy.status
+      );
+    }
+    const appliedScope = "global";
+    const fallbackReason = requestedScope === "workspace" ? "workspace_scope_not_supported" : null;
+    const currentPointers = globalConfig.modelPointers ?? {};
+    const nextPointers = {
+      ...currentPointers,
+      main: modelID,
+      task: currentPointers.task ?? modelID,
+      compact: currentPointers.compact ?? modelID,
+      quick: currentPointers.quick ?? modelID
+    };
+    saveGlobalConfig({
+      ...globalConfig,
+      modelPointers: nextPointers
+    });
+    return c.json({
+      success: true,
+      data: {
+        scope: appliedScope,
+        requestedScope,
+        applied: true,
+        fallbackReason,
+        current: selection.current
+      }
+    });
+  });
+  return router;
+}
+
+// src/server/routes/modelPools.ts
+import { Hono as Hono9 } from "hono";
+
+// src/server/modelPool/sourceResolver.ts
+function normalize2(input) {
+  return input.trim();
+}
+function normalizeID(input) {
+  return normalize2(input).toLowerCase();
+}
+function parseGitHubRepo(spec) {
+  const ssh = spec.match(/^git@github\.com:([^/]+\/[^/]+?)(?:\.git)?$/i);
+  if (ssh?.[1]) return normalizeID(ssh[1]);
+  const https = spec.match(/^https?:\/\/github\.com\/([^/]+\/[^/]+?)(?:\.git)?(?:#.*)?$/i);
+  if (https?.[1]) return normalizeID(https[1]);
+  return null;
+}
+function extractLocalPluginID(spec) {
+  try {
+    const url2 = new URL(spec);
+    const path6 = decodeURIComponent(url2.pathname);
+    const segments = path6.split("/").filter(Boolean);
+    const tail = segments[segments.length - 1] ?? "local-plugin";
+    return normalizeID(tail.replace(/\.(tgz|tar\.gz|zip)$/i, ""));
+  } catch {
+    return "local-plugin";
+  }
+}
+function parseMarketplaceSpec(spec) {
+  const trimmed = normalize2(spec);
+  const parts = trimmed.split("@");
+  if (parts.length !== 2) return null;
+  if (trimmed.startsWith("@")) return null;
+  const plugin2 = normalize2(parts[0] ?? "");
+  const marketplace = normalize2(parts[1] ?? "");
+  if (!plugin2 || !marketplace) return null;
+  if (marketplace.includes("/")) return null;
+  return {
+    pluginID: normalizeID(plugin2),
+    marketplace: normalizeID(marketplace)
+  };
+}
+function stripNpmVersion(spec) {
+  const trimmed = normalize2(spec);
+  if (!trimmed) throw new Error("pluginSpec is required");
+  if (trimmed.startsWith("@")) {
+    const slash = trimmed.indexOf("/");
+    const lastAt = trimmed.lastIndexOf("@");
+    if (slash > 0 && lastAt > slash) {
+      return normalizeID(trimmed.slice(0, lastAt));
+    }
+    return normalizeID(trimmed);
+  }
+  const at = trimmed.lastIndexOf("@");
+  if (at > 0) {
+    return normalizeID(trimmed.slice(0, at));
+  }
+  return normalizeID(trimmed);
+}
+function resolvePluginSourceRecord(pluginSpecRaw) {
+  const pluginSpec = normalize2(pluginSpecRaw);
+  if (!pluginSpec) throw new Error("pluginSpec is required");
+  if (pluginSpec.startsWith("file://")) {
+    const pluginID2 = extractLocalPluginID(pluginSpec);
+    return {
+      pluginSpec,
+      pluginID: pluginID2,
+      sourceID: `local:${pluginSpec}`,
+      sourceType: "local"
+    };
+  }
+  const githubRepo = parseGitHubRepo(pluginSpec);
+  if (githubRepo) {
+    return {
+      pluginSpec,
+      pluginID: githubRepo,
+      sourceID: `github:${githubRepo}`,
+      sourceType: "github"
+    };
+  }
+  const marketplace = parseMarketplaceSpec(pluginSpec);
+  if (marketplace) {
+    return {
+      pluginSpec,
+      pluginID: marketplace.pluginID,
+      sourceID: `marketplace:${marketplace.marketplace}`,
+      sourceType: "marketplace"
+    };
+  }
+  const pluginID = stripNpmVersion(pluginSpec);
+  return {
+    pluginSpec,
+    pluginID,
+    sourceID: "npm:registry",
+    sourceType: "npm"
+  };
+}
+function dedupeSourceRecordsByPluginID(records, sourcePriority = ["marketplace", "github", "npm", "local"]) {
+  const priority = /* @__PURE__ */ new Map();
+  sourcePriority.forEach((source, index) => {
+    priority.set(source, index);
+  });
+  const fallbackRank = sourcePriority.length + 1;
+  const deduped = /* @__PURE__ */ new Map();
+  for (const record of records) {
+    const key = normalizeID(record.pluginID);
+    const current = deduped.get(key);
+    if (!current) {
+      deduped.set(key, { ...record, pluginID: key });
+      continue;
+    }
+    const currentRank = priority.get(current.sourceType) ?? fallbackRank;
+    const nextRank = priority.get(record.sourceType) ?? fallbackRank;
+    if (nextRank < currentRank) {
+      deduped.set(key, { ...record, pluginID: key });
+    }
+  }
+  return Array.from(deduped.values());
+}
+var ModelPoolRegistry = class {
+  pools = /* @__PURE__ */ new Map();
+  register(definition) {
+    const modelPoolID = normalizeID(definition.modelPoolID);
+    if (!modelPoolID) throw new Error("modelPoolID is required");
+    if (this.pools.has(modelPoolID)) {
+      throw new Error(`model pool already exists: ${modelPoolID}`);
+    }
+    this.pools.set(modelPoolID, {
+      definition: {
+        modelPoolID,
+        pluginSpecs: definition.pluginSpecs.map(normalize2).filter(Boolean),
+        metadata: definition.metadata ?? {}
+      },
+      state: "registered"
+    });
+  }
+  activate(modelPoolIDRaw) {
+    const modelPoolID = normalizeID(modelPoolIDRaw);
+    const record = this.pools.get(modelPoolID);
+    if (!record) throw new Error(`model pool not found: ${modelPoolID}`);
+    record.state = "active";
+  }
+  deactivate(modelPoolIDRaw) {
+    const modelPoolID = normalizeID(modelPoolIDRaw);
+    const record = this.pools.get(modelPoolID);
+    if (!record) throw new Error(`model pool not found: ${modelPoolID}`);
+    record.state = "inactive";
+  }
+  getStatus() {
+    const pools = Array.from(this.pools.values()).map((record) => {
+      const resolved = record.definition.pluginSpecs.map(resolvePluginSourceRecord);
+      const deduped = dedupeSourceRecordsByPluginID(resolved);
+      return {
+        modelPoolID: record.definition.modelPoolID,
+        state: record.state,
+        pluginCount: deduped.length,
+        sourceRecords: deduped,
+        metadata: record.definition.metadata ?? {}
+      };
+    });
+    const active2 = pools.filter((item) => item.state === "active").length;
+    return {
+      total: pools.length,
+      active: active2,
+      pools
+    };
+  }
+};
+
+// src/server/routes/modelPools.ts
+function normalizeProviderID6(input) {
+  return String(input ?? "").trim().toLowerCase();
+}
+function buildPluginSpecsFromProfiles(profiles) {
+  const specs = /* @__PURE__ */ new Set();
+  for (const profile of profiles) {
+    if (profile?.isActive !== true) continue;
+    const providerID = normalizeProviderID6(profile?.provider);
+    if (!providerID) continue;
+    specs.add(`${providerID}@config`);
+  }
+  return [...specs];
+}
+function createModelPoolRoutes() {
+  const router = new Hono9();
+  router.get("/status", async (c) => {
+    const globalConfig = getGlobalConfig();
+    const profiles = Array.isArray(globalConfig.modelProfiles) ? globalConfig.modelProfiles : [];
+    const pluginSpecs = buildPluginSpecsFromProfiles(profiles);
+    const registry = new ModelPoolRegistry();
+    const modelPoolID = "default";
+    registry.register({
+      modelPoolID,
+      pluginSpecs,
+      metadata: {
+        source: "config"
+      }
+    });
+    registry.activate(modelPoolID);
+    return c.json({
+      success: true,
+      data: registry.getStatus()
+    });
+  });
+  return router;
+}
+
+// src/server/events/eventBuffer.ts
+var SessionEventRingBuffer = class {
+  buffers = /* @__PURE__ */ new Map();
+  touchedAt = /* @__PURE__ */ new Map();
+  maxSize;
+  ttlMs;
+  constructor(maxSize = 100, ttlMs = 15 * 60 * 1e3) {
+    this.maxSize = maxSize;
+    this.ttlMs = ttlMs;
+  }
+  push(sessionId, event) {
+    this.pruneExpired(Date.now());
+    const buffer = this.buffers.get(sessionId) ?? [];
+    buffer.push(event);
+    if (buffer.length > this.maxSize) {
+      buffer.shift();
+    }
+    this.buffers.set(sessionId, buffer);
+    this.touchedAt.set(sessionId, Date.now());
+  }
+  replayAfter(sessionId, lastEventId) {
+    const buffer = this.buffers.get(sessionId);
+    if (!buffer || buffer.length === 0) {
+      return { kind: "gap", reason: "last_event_not_found" };
+    }
+    const index = buffer.findIndex((item) => item.id === lastEventId);
+    if (index === -1) {
+      return { kind: "gap", reason: "buffer_evicted" };
+    }
+    return { kind: "ok", events: buffer.slice(index + 1) };
+  }
+  clear(sessionId) {
+    this.buffers.delete(sessionId);
+    this.touchedAt.delete(sessionId);
+  }
+  getStats(sessionId) {
+    const buffer = this.buffers.get(sessionId) ?? [];
+    return {
+      count: buffer.length,
+      oldestId: buffer[0]?.id,
+      newestId: buffer[buffer.length - 1]?.id
+    };
+  }
+  pruneExpired(now) {
+    for (const [sessionId, touchedAt] of this.touchedAt.entries()) {
+      if (now - touchedAt > this.ttlMs) {
+        this.clear(sessionId);
+      }
+    }
+  }
+};
+
 // src/server/version.ts
 import { readFileSync as readFileSync14 } from "fs";
 import { resolve as resolve12 } from "path";
@@ -31909,17 +32903,66 @@ function resolveServerVersion() {
 var SERVER_VERSION = resolveServerVersion();
 
 // src/server/index.ts
+var DEFAULT_HEARTBEAT_INTERVAL_MS = 5e3;
+var MIN_HEARTBEAT_INTERVAL_MS = 3e3;
+var MAX_HEARTBEAT_INTERVAL_MS = 5e3;
 function toPublicSSEEvent(event) {
   const sessionId = typeof event.properties.sessionId === "string" ? event.properties.sessionId : void 0;
   return {
     type: event.type,
+    ...typeof event.id === "string" ? { id: event.id } : {},
     timestamp: Date.now(),
     ...sessionId ? { sessionId } : {},
     data: event.properties
   };
 }
+function resolveIdleTimeoutSeconds(value) {
+  if (value === void 0 || value === "0") return 0;
+  const ms = Number(value);
+  if (!Number.isFinite(ms) || ms < 0) return 0;
+  return ms >= 6e4 ? Math.floor(ms / 1e3) : 0;
+}
+function resolveHeartbeatIntervalMs(value) {
+  if (value === void 0) return DEFAULT_HEARTBEAT_INTERVAL_MS;
+  const ms = Number(value);
+  if (!Number.isFinite(ms) || ms < MIN_HEARTBEAT_INTERVAL_MS || ms > MAX_HEARTBEAT_INTERVAL_MS) {
+    return DEFAULT_HEARTBEAT_INTERVAL_MS;
+  }
+  return ms;
+}
+function resolveIdleTimeoutSecondsFromOptions(input) {
+  const override = input.idleTimeoutMs;
+  if (override !== void 0) {
+    return resolveIdleTimeoutSeconds(String(override));
+  }
+  return resolveIdleTimeoutSeconds(input.env.PYB_SSE_IDLE_TIMEOUT_MS);
+}
+function resolveHeartbeatIntervalMsFromOptions(input) {
+  const override = input.heartbeatIntervalMs;
+  if (override !== void 0) {
+    return resolveHeartbeatIntervalMs(String(override));
+  }
+  return resolveHeartbeatIntervalMs(input.env.PYB_SSE_HEARTBEAT_INTERVAL_MS);
+}
+function resolveSSEServerRuntimeConfig(env2 = process.env, options = {}) {
+  return {
+    idleTimeoutSeconds: resolveIdleTimeoutSecondsFromOptions({
+      env: env2,
+      idleTimeoutMs: options.idleTimeoutMs
+    }),
+    heartbeatIntervalMs: resolveHeartbeatIntervalMsFromOptions({
+      env: env2,
+      heartbeatIntervalMs: options.heartbeatIntervalMs
+    })
+  };
+}
 function createServer2(options = {}) {
-  const app = new Hono6();
+  const app = new Hono10();
+  const sseRuntimeConfig = resolveSSEServerRuntimeConfig(process.env, {
+    heartbeatIntervalMs: options.heartbeatIntervalMs,
+    idleTimeoutMs: options.idleTimeoutMs
+  });
+  const eventBuffer = new SessionEventRingBuffer();
   app.use("*", cors());
   app.use("*", logger());
   app.get("/v1/health", (c) => {
@@ -31939,9 +32982,15 @@ function createServer2(options = {}) {
   app.route("/v1/permissions", createPermissionRoutes());
   app.route("/v1/config", createConfigRoutes());
   app.route("/v1/mcp", createMCPRoutes());
+  app.route("/v1/providers", createProvidersRoutes());
+  app.route("/v1/auth", createAuthRoutes());
+  app.route("/v1/models", createModelRoutes());
+  app.route("/v1/model-pools", createModelPoolRoutes());
   app.get("/v1/events", (c) => {
     c.header("X-Accel-Buffering", "no");
     c.header("X-Content-Type-Options", "nosniff");
+    const requestedLastEventId = c.req.query("lastEventId") ?? c.req.header("Last-Event-ID");
+    const replaySessionId = typeof requestedLastEventId === "string" ? parseSessionIdFromEventId(requestedLastEventId) : null;
     return streamSSE2(c, async (stream) => {
       await stream.writeSSE({
         event: "server.connected",
@@ -31955,22 +33004,75 @@ function createServer2(options = {}) {
           }
         })
       });
+      if (requestedLastEventId && replaySessionId) {
+        const replayResult = eventBuffer.replayAfter(replaySessionId, requestedLastEventId);
+        if (replayResult.kind === "ok") {
+          for (const replayEvent of replayResult.events) {
+            await stream.writeSSE({
+              event: replayEvent.type,
+              data: JSON.stringify(replayEvent.data)
+            });
+          }
+        } else {
+          await stream.writeSSE({
+            event: "sse.replay_gap",
+            data: JSON.stringify({
+              type: "sse.replay_gap",
+              timestamp: Date.now(),
+              data: {
+                lastEventId: requestedLastEventId,
+                reason: replayResult.reason
+              }
+            })
+          });
+        }
+        await stream.writeSSE({
+          event: "sse.replay",
+          data: JSON.stringify({
+            type: "sse.replay",
+            timestamp: Date.now(),
+            data: {
+              replayCount: replayResult.kind === "ok" ? replayResult.events.length : 0,
+              replayGapCount: replayResult.kind === "gap" ? 1 : 0,
+              lastEventId: requestedLastEventId,
+              firstReplayId: replayResult.kind === "ok" ? replayResult.events[0]?.id ?? null : null,
+              lastReplayId: replayResult.kind === "ok" ? replayResult.events[replayResult.events.length - 1]?.id ?? null : null
+            }
+          })
+        });
+      }
       const unsubscribe = Bus.subscribeAll(async (event) => {
+        const publicEvent = toPublicSSEEvent(event);
+        if (typeof publicEvent.sessionId === "string" && typeof publicEvent.id === "string") {
+          eventBuffer.push(publicEvent.sessionId, {
+            id: publicEvent.id,
+            type: event.type,
+            timestamp: publicEvent.timestamp,
+            data: publicEvent
+          });
+        }
+        if (event.type === "session.deleted" && typeof publicEvent.sessionId === "string") {
+          eventBuffer.clear(publicEvent.sessionId);
+        }
         await stream.writeSSE({
           event: event.type,
-          data: JSON.stringify(toPublicSSEEvent(event))
+          data: JSON.stringify(publicEvent)
         });
       });
       const heartbeatInterval = setInterval(async () => {
-        await stream.writeSSE({
-          event: "server.heartbeat",
-          data: JSON.stringify({
-            type: "server.heartbeat",
-            timestamp: Date.now(),
-            data: { timestamp: Date.now() }
-          })
-        });
-      }, 1e4);
+        try {
+          await stream.writeSSE({
+            event: "server.heartbeat",
+            data: JSON.stringify({
+              type: "server.heartbeat",
+              timestamp: Date.now(),
+              data: { timestamp: Date.now() }
+            })
+          });
+        } catch (error) {
+          console.error("[pyb-sse-heartbeat] write failed", error);
+        }
+      }, sseRuntimeConfig.heartbeatIntervalMs);
       await new Promise((resolve16) => {
         stream.onAbort(() => {
           clearInterval(heartbeatInterval);
@@ -31986,13 +33088,18 @@ async function startServer(options = {}) {
   const port = options.port ?? 4096;
   const host = options.host ?? "localhost";
   const app = createServer2(options);
+  const sseRuntimeConfig = resolveSSEServerRuntimeConfig(process.env, {
+    heartbeatIntervalMs: options.heartbeatIntervalMs,
+    idleTimeoutMs: options.idleTimeoutMs
+  });
   if (typeof Bun === "undefined" || typeof Bun.serve !== "function") {
     throw new Error("Bun runtime is required to start the web server");
   }
   const server = Bun.serve({
     fetch: app.fetch,
     hostname: host,
-    port
+    port,
+    idleTimeout: sseRuntimeConfig.idleTimeoutSeconds
   });
   console.log(`PYB-CLI Web Server starting on http://${host}:${port}`);
   return {
@@ -38297,7 +39404,7 @@ function useStatusLine() {
 // src/ui/components/PromptInput.tsx
 async function interpretHashCommand(input) {
   try {
-    const { queryQuick: queryQuick2 } = await import("./llm-KXF74SNS.js");
+    const { queryQuick: queryQuick2 } = await import("./llm-CVILTZMI.js");
     const systemPrompt = [
       "You're helping the user structure notes that will be added to their PYB.md file.",
       "Format the user's input into a well-structured note that will be useful for later reference.",
@@ -38610,7 +39717,7 @@ function PromptInput({
     if (messages2.length) {
       if (mode === "bash") {
         onQuery(messages2, newAbortController).then(async () => {
-          const { getCwd: getCwd2 } = await import("./state-NZVNNCHH.js");
+          const { getCwd: getCwd2 } = await import("./state-GWKESQ7O.js");
           setCurrentPwd(getCwd2());
         });
       } else {
@@ -40240,7 +41347,7 @@ import { homedir as homedir8 } from "os";
 // src/commands/agents/generation.ts
 import { randomUUID as randomUUID9 } from "crypto";
 async function generateAgentWithClaude(prompt) {
-  const { queryModel } = await import("./llm-KXF74SNS.js");
+  const { queryModel } = await import("./llm-CVILTZMI.js");
   const systemPrompt = `You are an expert at creating AI agent configurations. Based on the user's description, generate a specialized agent configuration.
 
 Return your response as a JSON object with exactly these fields: