zidane 6.5.4 → 6.5.6

package/dist/acp-cli.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { m as openaiCompat } from "./openai-compat-CnHeo4Lz.js";
-import { bt as basic_default } from "./agent-8kfGIDb_.js";
+import { m as openaiCompat } from "./openai-compat-BoTi-9fd.js";
+import { bt as basic_default } from "./agent-CcTWL-Z6.js";
 import { r as createProcessContext } from "./contexts-DWVt7MvF.js";
 import { createSandboxContext } from "./contexts/sandbox.js";
-import { p as resolveStorageDirs } from "./plugins-2PMTVcp-.js";
-import { n as anthropic } from "./anthropic-qaw8XAc9.js";
+import { p as resolveStorageDirs } from "./plugins-onDvTHEm.js";
+import { n as anthropic } from "./anthropic-DLc_Kw-1.js";
 import { arcee } from "./providers/arcee.js";
 import { baseten } from "./providers/baseten.js";
 import { cerebras } from "./providers/cerebras.js";
 import { openai } from "./providers/openai.js";
 import { openrouter } from "./providers/openrouter.js";
 import { xai } from "./providers/xai.js";
-import { d as StartUsageError, f as buildStartLocalOptions, h as startProviderNames, i as withAcpDefaultTools, m as startLocalArgOptions, p as parseStartArgValues, t as runAcpStdioServer } from "./acp-CIpD8UIw.js";
-import { f as credKeyOf, i as readCredentials, l as BUILTIN_PROVIDERS, r as credentialsPath, t as detectAuth, y as modelsForDescriptor } from "./auth-BLy7X1SY.js";
+import { d as StartUsageError, f as buildStartLocalOptions, h as startProviderNames, i as withAcpDefaultTools, m as startLocalArgOptions, p as parseStartArgValues, t as runAcpStdioServer } from "./acp-Dm95NwNM.js";
+import { d as BUILTIN_PROVIDERS, i as readCredentials, m as credKeyOf, r as credentialsPath, t as detectAuth, x as modelsForDescriptor } from "./auth-BAclQnl3.js";
 import { createDaytonaProvider } from "./contexts/daytona.js";
 import { createDockerContext } from "./contexts/docker.js";
 import { createE2BProvider } from "./contexts/e2b.js";

package/dist/acp.d.ts

@@ -1,4 +1,4 @@
-import { Dm as AgentBehavior, Lf as Provider, Ph as TurnUsage, Th as ToolResultContent, Wi as Agent, Wm as McpServerConfig, _g as SessionStore, pg as Session, qi as AgentOptions, t as Preset, th as PromptPart, uh as SessionContentBlock, zh as ToolDef } from "./index-BSNr0OQn.js";
+import { Bh as TurnUsage, Cg as SessionStore, Gh as ToolDef, Nm as AgentBehavior, Uf as Provider, Wi as Agent, Xm as McpServerConfig, gh as SessionContentBlock, jh as ToolResultContent, qi as AgentOptions, sh as PromptPart, t as Preset, yg as Session } from "./index-ZWibV230.js";
 import { c as ExecutionContext } from "./types-M2DauK2D.js";
 import { Readable, Writable } from "node:stream";
 

package/dist/acp.js

@@ -1,2 +1,2 @@
-import { _ as createJsonRpcConnection, a as wrapToolsForAcpClient, c as sessionBlocksToAcp, g as JsonRpcRemoteError, i as withAcpDefaultTools, l as stopReasonFromRun, n as AcpProtocolError, o as acpMcpServersToZidane, r as createAcpServer, s as acpPromptToPromptParts, t as runAcpStdioServer, u as toolResultToAcpContent } from "./acp-CIpD8UIw.js";
+import { _ as createJsonRpcConnection, a as wrapToolsForAcpClient, c as sessionBlocksToAcp, g as JsonRpcRemoteError, i as withAcpDefaultTools, l as stopReasonFromRun, n as AcpProtocolError, o as acpMcpServersToZidane, r as createAcpServer, s as acpPromptToPromptParts, t as runAcpStdioServer, u as toolResultToAcpContent } from "./acp-Dm95NwNM.js";
 export { AcpProtocolError, JsonRpcRemoteError, acpMcpServersToZidane, acpPromptToPromptParts, createAcpServer, createJsonRpcConnection, runAcpStdioServer, sessionBlocksToAcp, stopReasonFromRun, toolResultToAcpContent, withAcpDefaultTools, wrapToolsForAcpClient };

package/dist/{agent-8kfGIDb_.js → agent-CcTWL-Z6.js}

@@ -1,24 +1,24 @@
-import { B as rewriteMessagesToWire, H as toWireName, I as augmentMcpDoubleUnderscoreAliases, L as buildAliasMaps, M as buildPromptMessage, N as canonicalizePrompt, R as buildSanitizedWireAliases, V as toCanonicalName, z as rewriteContentToCanonical } from "./openai-compat-CnHeo4Lz.js";
+import { B as rewriteMessagesToWire, H as toWireName, I as augmentMcpDoubleUnderscoreAliases, L as buildAliasMaps, M as buildPromptMessage, N as canonicalizePrompt, R as buildSanitizedWireAliases, V as toCanonicalName, z as rewriteContentToCanonical } from "./openai-compat-BoTi-9fd.js";
 import { a as isWireTurn, c as toolOutputByteLength, i as documentBlockMarker, l as toolResultToText, o as sanitizeToolResultMetadata, s as toolOutputBudgetByteLength, t as DEFAULT_AGENT_CLOCK } from "./types-BIarq1qE.js";
-import { a as stripLineNumberPrefixes, i as resolveOldString, n as buildContextBreakdown, o as styleReplacementForVia, r as describeVia, t as buildContextSegments } from "./context-segments-1mcqSCM3.js";
+import { a as stripLineNumberPrefixes, i as resolveOldString, n as buildContextBreakdown, o as styleReplacementForVia, r as describeVia, t as buildContextSegments } from "./context-segments-CJCtJ9sU.js";
 import { n as estimateTokens, r as utf8ByteLength } from "./utils-ngQzYzZD.js";
 import { a as formatDuration, c as previewLine, o as formatTaskStatus, s as formatTaskSummary } from "./format-BF745pLL.js";
 import { i as parseGitLsFiles, r as GIT_LS_FILES_COMMAND } from "./glob-DluQFSw1.js";
 import { i as isOutputExceededMessage } from "./output-cap-C9zukcCj.js";
 import { r as createProcessContext, t as resolveDetachedTasksCapability } from "./contexts-DWVt7MvF.js";
 import { n as shellQuote, t as alwaysQuote } from "./shell-quote-BmnhZmdM.js";
-import { a as AgentProviderError, d as isAbortLikeError, h as toTypedError, i as AgentLengthResumeExhaustedError, n as AgentBudgetExceededError, s as AgentToolPairingError, t as AgentAbortedError, u as errorMessage } from "./errors-BwBxu3zD.js";
-import { A as createSkillActivationState, D as escapeXml, E as buildCatalog, F as validateResourcePathReal, R as projectUserPaths, _ as lastLine, a as interpolateShellCommands, b as resolveSubdirRoot, g as fetchInstallSource, h as defaultWhich, k as installAllowedToolsGate, m as defaultExec, n as resolveSkills, o as stripShellInterpolations, p as InstallSourceError, v as parseInstallSource, y as resolveNpmVersion } from "./skills-Cp9vnBwd.js";
+import { a as AgentProviderError, d as isAbortLikeError, g as toTypedError, i as AgentLengthResumeExhaustedError, n as AgentBudgetExceededError, p as isTransientTransportError, s as AgentToolPairingError, t as AgentAbortedError, u as errorMessage } from "./errors-DKiMrOKq.js";
+import { A as createSkillActivationState, D as escapeXml, E as buildCatalog, F as validateResourcePathReal, R as projectUserPaths, _ as lastLine, a as interpolateShellCommands, b as resolveSubdirRoot, g as fetchInstallSource, h as defaultWhich, k as installAllowedToolsGate, m as defaultExec, n as resolveSkills, o as stripShellInterpolations, p as InstallSourceError, v as parseInstallSource, y as resolveNpmVersion } from "./skills-BMGH_KK1.js";
 import { n as writeFileAtomicAsync, t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";
-import { p as resolveStorageDirs, r as loadAgentPlugin } from "./plugins-2PMTVcp-.js";
+import { p as resolveStorageDirs, r as loadAgentPlugin } from "./plugins-onDvTHEm.js";
 import { r as createLogger, t as consoleSink } from "./logger-DBX9uYOw.js";
 import { n as reconcileImageMediaType } from "./media-sniff-UKijEaiQ.js";
-import { f as wrapDiscoveredMcpTools, i as deriveMcpToolMeta, n as connectMcpServers, s as nonOwningMcpView } from "./mcp-D9fqOQo5.js";
+import { f as wrapDiscoveredMcpTools, i as deriveMcpToolMeta, n as connectMcpServers, s as nonOwningMcpView } from "./mcp-CVtSQTWg.js";
 import { appendStaticSection, renderSystemForWire } from "./prompt.js";
-import { a as detectTurnInterruption, c as ensureToolResultPairing, l as filterUnresolvedToolUses, m as resolveContentRefsInMessages, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, p as remintDuplicateToolCallIds, s as ensureEndsWithUserMessage } from "./messages-C_H9soi5.js";
-import { a as getExtensionSessionState, c as setExtensionSessionState, l as withExtensionSession, n as currentExtensionSession, r as deleteExtensionSessionState, s as resumeChainRunIds } from "./session-VpLrNaFQ.js";
+import { a as detectTurnInterruption, c as ensureToolResultPairing, l as filterUnresolvedToolUses, m as resolveContentRefsInMessages, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, p as remintDuplicateToolCallIds, s as ensureEndsWithUserMessage } from "./messages-CZMUuKzo.js";
+import { a as getExtensionSessionState, c as setExtensionSessionState, l as withExtensionSession, n as currentExtensionSession, r as deleteExtensionSessionState, s as resumeChainRunIds } from "./session-CyRLSsVa.js";
 import { n as flattenTurns, r as formatTokenUsage, t as effectiveInputFromTurn } from "./stats-DAKBEKjc.js";
-import { a as withInactivityTimeout, i as settleWithinTimeout, n as linkAbortSignal, o as withTimeout$1, r as resolveTimeoutMs, t as OperationTimeoutError } from "./timeout-BDetbuN6.js";
+import { a as settleWithinTimeout, i as resolveTimeoutMs, n as abortableSleep, o as withInactivityTimeout, r as linkAbortSignal, s as withTimeout$1, t as OperationTimeoutError } from "./timeout-CjOG2mea.js";
 import { createRequire } from "node:module";
 import { basename, delimiter, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { createHooks } from "hookable";
@@ -2159,6 +2159,55 @@ function registerExtensionHostModules(modules) {
 	});
 }
 //#endregion
+//#region src/chat/cred-keys.ts
+/**
+* Credential-file key arithmetic, split from `./credentials` so the rules can
+* be enforced where credentials themselves must not be pulled in.
+*
+* `./credentials` reaches the provider registry (and through it the pi-ai
+* factories) for `credKeyOf`; the extension loader — an edge entrypoint that
+* validates descriptor keys at registration time — must stay clear of that
+* graph. This module is string arithmetic with no imports.
+*/
+/**
+* Reserved suffix marking a provider's SECOND credential slot.
+*
+* Not usable as (or as the tail of) a descriptor's credential key: `foo#alt`
+* holds `foo`'s alternate credential, so a provider claiming that name would
+* share storage with it.
+*/
+const ALTERNATE_CRED_KEY_SUFFIX = "#alt";
+/**
+* File key holding a provider's second credential, when it has one of each kind.
+*
+* The canonical key always holds the credential the user prefers; this sibling
+* holds the other. That one invariant is what makes preference selection free:
+* every existing reader (`applyApiKeyEnv`, the harness provider factories)
+* already resolves the canonical key, so "switch priority" is just moving two
+* objects between two keys — no precedence flag to interpret, no resolution
+* order to keep in sync across layers.
+*
+* A sibling key rather than a nested field because the canonical entry gets
+* REPLACED wholesale on token refresh; anything nested inside it would be
+* dropped by the next rotation. And older zidane versions look credentials up
+* by `credKeyOf`, so a suffixed key is simply invisible to them — they read the
+* preferred credential and behave exactly as before, which is why this needs no
+* migration or schema version.
+*/
+function alternateCredKey(fileKey) {
+	return `${fileKey}${ALTERNATE_CRED_KEY_SUFFIX}`;
+}
+/**
+* True when a key claims the reserved alternate namespace.
+*
+* Built-in keys are plain identifiers (`anthropic`, `openai-codex`), but
+* `ProviderDescriptor.key` / `credentialFileKey` are open strings — so the
+* reservation is checked, not assumed.
+*/
+function isReservedCredKey(fileKey) {
+	return fileKey.endsWith(ALTERNATE_CRED_KEY_SUFFIX);
+}
+//#endregion
 //#region src/chat/keybindings.ts
 /**
 * Keybindings — a single source of truth for the app's global shortcuts.
@@ -2281,8 +2330,8 @@ const KEYBINDING_DEFS = [
 	{
 		action: "attachClipboardImage",
 		default: "ctrl+v",
-		label: "paste image",
-		description: "attach an image from the OS clipboard to the prompt (needs a platform helper: pngpaste on macOS, wl-clipboard/xclip on Linux)",
+		label: "paste clipboard",
+		description: "paste text or attach an image directly from the OS clipboard, bypassing the terminal paste path",
 		group: "Global"
 	},
 	{
@@ -7520,6 +7569,11 @@ function makeContext(opts) {
 			warnUnsafeKey(logger, "registerProvider", descriptor.key);
 			return;
 		}
+		const credKey = descriptor.credentialFileKey ?? descriptor.key;
+		if (isReservedCredKey(credKey)) {
+			logger.warn(`registerProvider: refused reserved credential key "${credKey}" ("${ALTERNATE_CRED_KEY_SUFFIX}" marks a provider's alternate credential)`);
+			return;
+		}
 		sinks.providers[descriptor.key] = descriptor;
 	};
 	const registerSystemPromptFragment = (text) => {
@@ -8583,6 +8637,139 @@ const EMPTY_EXTENSION_REGISTRY = Object.freeze({
 	dispose: async () => {}
 });
 //#endregion
+//#region src/loop-recovery.ts
+/**
+* Operation labels used by the provider-stream watchdogs.
+*
+* Single source of truth for the strings so `withTimeout` callers and the
+* failure classifier can never drift: the classifier matches on exactly the
+* label the watchdog emits.
+*/
+const PROVIDER_WATCHDOG_OPERATIONS = {
+	"first response": "provider first response",
+	"total stream": "provider total stream",
+	"stream inactivity": "provider stream inactivity"
+};
+/** Watchdog operation names that count as provider-stream failures. */
+const PROVIDER_WATCHDOG_OPERATION_SET = new Set(Object.values(PROVIDER_WATCHDOG_OPERATIONS));
+const RETRY_DEFAULTS = {
+	maxAttempts: 3,
+	initialDelayMs: 1e3,
+	maxDelayMs: 3e4
+};
+/**
+* Normalize a user-supplied `RetryConfig` (any field may be missing or invalid)
+* into a fully-populated config the retry loop can use without per-field guards.
+*
+* Invalid values (non-finite, < 1 for `maxAttempts`, < 0 for delays) fall back
+* to defaults rather than throwing — this is a behavior knob, not a validation
+* boundary, and a bad value here shouldn't crash a run.
+*/
+function resolveRetryConfig(cfg) {
+	return {
+		maxAttempts: Number.isFinite(cfg?.maxAttempts) && cfg.maxAttempts >= 1 ? Math.floor(cfg.maxAttempts) : RETRY_DEFAULTS.maxAttempts,
+		initialDelayMs: Number.isFinite(cfg?.initialDelayMs) && cfg.initialDelayMs >= 0 ? cfg.initialDelayMs : RETRY_DEFAULTS.initialDelayMs,
+		maxDelayMs: Number.isFinite(cfg?.maxDelayMs) && cfg.maxDelayMs >= 0 ? cfg.maxDelayMs : RETRY_DEFAULTS.maxDelayMs
+	};
+}
+/**
+* Classify a failed stream attempt.
+*
+* Retry eligibility covers three sources: an error the provider's own classifier
+* marked retryable, a provider-stream watchdog timeout, and a transport-level
+* failure. The latter two are retryable BY CONSTRUCTION for the first-response
+* watchdog and for any dropped connection — zero observable events arrived, so
+* re-issuing is at least as safe as the mid-stream `overloaded_error` retries
+* the classifier opts into. The total-stream and inactivity watchdogs ride the
+* same carve-out but lean on `cleanSlate` for their safety.
+*
+* Transport failures need their own source because they happen BELOW the API:
+* they carry no status and no error body, so `classifyError` returns `null` and
+* the classifier-driven branch can never fire for them.
+*
+* Fallback excludes two classifications:
+* - `context_exceeded` — owned by overflow recovery; the transcript is the
+*   problem, not the provider.
+* - `tool_pairing_corruption` — transcript-level corruption fails identically
+*   on every provider.
+*
+* Everything else (rate limit, overload, 5xx, auth/billing, even unclassified
+* network failures) is provider-side: a sibling target may well succeed, and a
+* genuinely broken request just exhausts the chain and surfaces the last error.
+*/
+function assessStreamFailure(input) {
+	const { err, runAborted, classifyError, progress, attempt, retry, hasNextTarget } = input;
+	const wasAborted = runAborted || err instanceof Error && err.name === "AbortError";
+	const classified = !wasAborted ? classifyError?.(err) ?? null : null;
+	const cleanSlate = progress.text === "" && progress.thinking === "" && !progress.serverToolActivity;
+	const isRetryable = classified?.kind === "provider_error" && classified.retryable === true;
+	const isStreamWatchdogTimeout = !wasAborted && err instanceof OperationTimeoutError && PROVIDER_WATCHDOG_OPERATION_SET.has(err.operation);
+	const isTransportFailure = !wasAborted && isTransientTransportError(err);
+	const canRetry = !wasAborted && (isRetryable || isStreamWatchdogTimeout || isTransportFailure) && cleanSlate && attempt < retry.maxAttempts;
+	const retryAfterMs = canRetry ? extractRetryAfterMs(err) : void 0;
+	return {
+		wasAborted,
+		classified,
+		cleanSlate,
+		retryAfterMs,
+		canRetry,
+		preferFallbackOverRetry: retryAfterMs !== void 0 && retryAfterMs > 15e3 && hasNextTarget,
+		canRecoverOverflow: !wasAborted && classified?.kind === "context_exceeded" && cleanSlate,
+		canFallback: !wasAborted && cleanSlate && hasNextTarget && classified?.kind !== "context_exceeded" && classified?.kind !== "tool_pairing_corruption"
+	};
+}
+/**
+* Backoff delay for the next attempt.
+*
+* A server-declared `retry-after` wins (capped at `maxDelayMs`); otherwise
+* full-jitter exponential backoff — a uniform draw from `[0, capped)` rather
+* than a fixed `capped`, so a fleet of clients retrying the same overloaded
+* endpoint spreads out instead of stampeding in lockstep.
+*/
+function computeRetryDelayMs(attempt, cfg, retryAfterMs) {
+	if (retryAfterMs !== void 0 && retryAfterMs >= 0) return Math.min(retryAfterMs, cfg.maxDelayMs);
+	const exponential = cfg.initialDelayMs * 2 ** (attempt - 1);
+	const capped = Math.min(exponential, cfg.maxDelayMs);
+	return Math.floor(Math.random() * capped);
+}
+/**
+* Extract a `retry-after` value (in milliseconds) from an error's `.headers`, if any.
+*
+* Supports both `retry-after-ms` (non-standard but Stainless-emitted; already in ms,
+* always integer) and the standard `retry-after` header (integer seconds, RFC 7231).
+* Returns `undefined` when neither is present, non-numeric, or negative.
+*
+* `parseInt` over `parseFloat` here matches the actual contract — Stainless emits
+* `retry-after-ms` as an integer and RFC 7231 specifies a non-negative integer for
+* the seconds form. The HTTP-date form of `retry-after` is deliberately unsupported
+* (Anthropic + OpenAI both emit numeric seconds; supporting dates invites clock-skew
+* concerns for negligible benefit).
+*/
+function extractRetryAfterMs(err) {
+	if (!err || typeof err !== "object") return void 0;
+	const headers = err.headers;
+	if (!headers || typeof headers !== "object") return void 0;
+	const get = (key) => {
+		const h = headers;
+		if (typeof h.get === "function") {
+			const v = h.get(key);
+			return typeof v === "string" ? v : void 0;
+		}
+		const v = h[key];
+		return typeof v === "string" ? v : void 0;
+	};
+	const ms = get("retry-after-ms");
+	if (ms !== void 0) {
+		const parsed = Number.parseInt(ms, 10);
+		if (Number.isFinite(parsed) && parsed >= 0) return parsed;
+	}
+	const seconds = get("retry-after");
+	if (seconds !== void 0) {
+		const parsed = Number.parseInt(seconds, 10);
+		if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1e3;
+	}
+}
+//#endregion
 //#region src/compact/errors.ts
 /**
 * Typed errors thrown by the compaction helper.
@@ -9142,6 +9329,24 @@ const DEFAULT_MAX_OUTPUT_TOKENS = 2e4;
 const DEFAULT_MAX_PTL_RETRIES = 3;
 /** Maximum transient-error retries before giving up. Independent of PTL. */
 const TRANSIENT_RETRY_BUDGET = 2;
+/**
+* Backoff for transient retries. Shares the turn loop's policy
+* ({@link computeRetryDelayMs}: a server-declared `retry-after` wins, otherwise
+* exponential with full jitter) but keeps its own constants — the budget here is
+* 2 rather than 3, and a summarize call is cheap to re-issue, so waiting out the
+* loop's multi-second defaults would cost more than it buys.
+*
+* The jittered curve is FULL jitter — a uniform draw from `[0, capped)` — so it
+* raises the expected gap between re-dials (125ms, then 250ms on average) rather
+* than guaranteeing a floor; a near-zero wait is still a normal draw. Spreading
+* the retries out is the point, and an immediate re-dial of a socket that just
+* dropped is only the least promising single timing, not a disaster.
+*/
+const TRANSIENT_RETRY_BACKOFF = {
+	maxAttempts: TRANSIENT_RETRY_BUDGET,
+	initialDelayMs: 250,
+	maxDelayMs: 2e3
+};
 async function compactConversation(opts) {
 	const slice = sliceForCompaction(opts.turns, opts.scope ?? "tail", opts.keepTurns ?? DEFAULT_KEEP_TURNS);
 	const scope = opts.scope ?? "tail";
@@ -9223,6 +9428,7 @@ async function compactConversation(opts) {
 				}
 				if (isTransientError(err) && transientRetries < TRANSIENT_RETRY_BUDGET) {
 					transientRetries++;
+					await abortableSleep(computeRetryDelayMs(transientRetries, TRANSIENT_RETRY_BACKOFF, extractRetryAfterMs(err)), opts.signal ?? new AbortController().signal);
 					continue;
 				}
 				throw err;
@@ -9462,14 +9668,23 @@ function isPromptTooLongError(err) {
 }
 /**
 * Transient network / 5xx errors worth retrying once or twice.
+*
+* The 5xx test stays local and deliberately plain (`>= 500 && < 600`, where
+* `isRetryableHttpStatus` exempts 501 and adds 429) — see the note in
+* `errors.ts`. Re-summarizing has no side effects, so this leans further toward
+* retrying than the turn loop does.
+*
+* The transport half is NOT local: socket teardowns spell themselves a dozen
+* ways across runtimes, and keeping a second private list here is exactly how
+* this one came to miss Bun's wording entirely. Sharing also drops a hazard the
+* local list carried — its message test ignored `status`, so a 401 whose body
+* happened to say "terminated" was retried as if the socket had dropped.
 */
 function isTransientError(err) {
 	if (!err || typeof err !== "object") return false;
 	const e = err;
 	if (typeof e.status === "number" && e.status >= 500 && e.status < 600) return true;
-	if (typeof e.code === "string" && /ECONNRESET|ETIMEDOUT|ENETUNREACH|EAI_AGAIN|fetch failed/i.test(e.code)) return true;
-	if (typeof e.message === "string" && /socket hang up|fetch failed|network error|terminated|ECONNRESET|read ETIMEDOUT/i.test(e.message)) return true;
-	return false;
+	return isTransientTransportError(err);
 }
 function isAbortError(err, signal) {
 	if (signal?.aborted) return true;
@@ -10542,134 +10757,6 @@ function textForPersistence(output) {
 	return parts.join("\n");
 }
 //#endregion
-//#region src/loop-recovery.ts
-/**
-* Operation labels used by the provider-stream watchdogs.
-*
-* Single source of truth for the strings so `withTimeout` callers and the
-* failure classifier can never drift: the classifier matches on exactly the
-* label the watchdog emits.
-*/
-const PROVIDER_WATCHDOG_OPERATIONS = {
-	"first response": "provider first response",
-	"total stream": "provider total stream",
-	"stream inactivity": "provider stream inactivity"
-};
-/** Watchdog operation names that count as provider-stream failures. */
-const PROVIDER_WATCHDOG_OPERATION_SET = new Set(Object.values(PROVIDER_WATCHDOG_OPERATIONS));
-const RETRY_DEFAULTS = {
-	maxAttempts: 3,
-	initialDelayMs: 1e3,
-	maxDelayMs: 3e4
-};
-/**
-* Normalize a user-supplied `RetryConfig` (any field may be missing or invalid)
-* into a fully-populated config the retry loop can use without per-field guards.
-*
-* Invalid values (non-finite, < 1 for `maxAttempts`, < 0 for delays) fall back
-* to defaults rather than throwing — this is a behavior knob, not a validation
-* boundary, and a bad value here shouldn't crash a run.
-*/
-function resolveRetryConfig(cfg) {
-	return {
-		maxAttempts: Number.isFinite(cfg?.maxAttempts) && cfg.maxAttempts >= 1 ? Math.floor(cfg.maxAttempts) : RETRY_DEFAULTS.maxAttempts,
-		initialDelayMs: Number.isFinite(cfg?.initialDelayMs) && cfg.initialDelayMs >= 0 ? cfg.initialDelayMs : RETRY_DEFAULTS.initialDelayMs,
-		maxDelayMs: Number.isFinite(cfg?.maxDelayMs) && cfg.maxDelayMs >= 0 ? cfg.maxDelayMs : RETRY_DEFAULTS.maxDelayMs
-	};
-}
-/**
-* Classify a failed stream attempt.
-*
-* Retry eligibility covers two sources: an error the provider's own classifier
-* marked retryable, and a provider-stream watchdog timeout. The latter is
-* retryable BY CONSTRUCTION for the first-response watchdog — zero observable
-* events arrived, so re-issuing is at least as safe as the mid-stream
-* `overloaded_error` retries the classifier opts into. The total-stream and
-* inactivity watchdogs ride the same carve-out but lean on `cleanSlate` for
-* their safety.
-*
-* Fallback excludes two classifications:
-* - `context_exceeded` — owned by overflow recovery; the transcript is the
-*   problem, not the provider.
-* - `tool_pairing_corruption` — transcript-level corruption fails identically
-*   on every provider.
-*
-* Everything else (rate limit, overload, 5xx, auth/billing, even unclassified
-* network failures) is provider-side: a sibling target may well succeed, and a
-* genuinely broken request just exhausts the chain and surfaces the last error.
-*/
-function assessStreamFailure(input) {
-	const { err, runAborted, classifyError, progress, attempt, retry, hasNextTarget } = input;
-	const wasAborted = runAborted || err instanceof Error && err.name === "AbortError";
-	const classified = !wasAborted ? classifyError?.(err) ?? null : null;
-	const cleanSlate = progress.text === "" && progress.thinking === "" && !progress.serverToolActivity;
-	const isRetryable = classified?.kind === "provider_error" && classified.retryable === true;
-	const isStreamWatchdogTimeout = !wasAborted && err instanceof OperationTimeoutError && PROVIDER_WATCHDOG_OPERATION_SET.has(err.operation);
-	const canRetry = !wasAborted && (isRetryable || isStreamWatchdogTimeout) && cleanSlate && attempt < retry.maxAttempts;
-	const retryAfterMs = canRetry ? extractRetryAfterMs(err) : void 0;
-	return {
-		wasAborted,
-		classified,
-		cleanSlate,
-		retryAfterMs,
-		canRetry,
-		preferFallbackOverRetry: retryAfterMs !== void 0 && retryAfterMs > 15e3 && hasNextTarget,
-		canRecoverOverflow: !wasAborted && classified?.kind === "context_exceeded" && cleanSlate,
-		canFallback: !wasAborted && cleanSlate && hasNextTarget && classified?.kind !== "context_exceeded" && classified?.kind !== "tool_pairing_corruption"
-	};
-}
-/**
-* Backoff delay for the next attempt.
-*
-* A server-declared `retry-after` wins (capped at `maxDelayMs`); otherwise
-* full-jitter exponential backoff — a uniform draw from `[0, capped)` rather
-* than a fixed `capped`, so a fleet of clients retrying the same overloaded
-* endpoint spreads out instead of stampeding in lockstep.
-*/
-function computeRetryDelayMs(attempt, cfg, retryAfterMs) {
-	if (retryAfterMs !== void 0 && retryAfterMs >= 0) return Math.min(retryAfterMs, cfg.maxDelayMs);
-	const exponential = cfg.initialDelayMs * 2 ** (attempt - 1);
-	const capped = Math.min(exponential, cfg.maxDelayMs);
-	return Math.floor(Math.random() * capped);
-}
-/**
-* Extract a `retry-after` value (in milliseconds) from an error's `.headers`, if any.
-*
-* Supports both `retry-after-ms` (non-standard but Stainless-emitted; already in ms,
-* always integer) and the standard `retry-after` header (integer seconds, RFC 7231).
-* Returns `undefined` when neither is present, non-numeric, or negative.
-*
-* `parseInt` over `parseFloat` here matches the actual contract — Stainless emits
-* `retry-after-ms` as an integer and RFC 7231 specifies a non-negative integer for
-* the seconds form. The HTTP-date form of `retry-after` is deliberately unsupported
-* (Anthropic + OpenAI both emit numeric seconds; supporting dates invites clock-skew
-* concerns for negligible benefit).
-*/
-function extractRetryAfterMs(err) {
-	if (!err || typeof err !== "object") return void 0;
-	const headers = err.headers;
-	if (!headers || typeof headers !== "object") return void 0;
-	const get = (key) => {
-		const h = headers;
-		if (typeof h.get === "function") {
-			const v = h.get(key);
-			return typeof v === "string" ? v : void 0;
-		}
-		const v = h[key];
-		return typeof v === "string" ? v : void 0;
-	};
-	const ms = get("retry-after-ms");
-	if (ms !== void 0) {
-		const parsed = Number.parseInt(ms, 10);
-		if (Number.isFinite(parsed) && parsed >= 0) return parsed;
-	}
-	const seconds = get("retry-after");
-	if (seconds !== void 0) {
-		const parsed = Number.parseInt(seconds, 10);
-		if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1e3;
-	}
-}
-//#endregion
 //#region src/loop.ts
 const DEFAULT_PROVIDER_STREAM_START_TIMEOUT_MS = 300 * 1e3;
 const DEFAULT_PROVIDER_STREAM_TIMEOUT_MS = 1800 * 1e3;
@@ -12465,29 +12552,6 @@ async function maybeAutoCompact(ctx, turn, lastTurnUsage, state) {
 	}
 }
 /**
-* `setTimeout` that rejects if the given signal aborts before the timer fires.
-*
-* Resolves with `undefined` on normal completion. Rejects with the signal's
-* `reason` (or a generic AbortError when no reason is set) on abort. Cleans
-* up its `abort` listener in both paths so callers don't leak handlers.
-*/
-function abortableSleep(ms, signal) {
-	if (signal.aborted) return Promise.reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
-	return new Promise((resolve, reject) => {
-		let timer;
-		const onAbort = () => {
-			clearTimeout(timer);
-			signal.removeEventListener("abort", onAbort);
-			reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
-		};
-		timer = setTimeout(() => {
-			signal.removeEventListener("abort", onAbort);
-			resolve();
-		}, ms);
-		signal.addEventListener("abort", onAbort, { once: true });
-	});
-}
-/**
 * Advance the run to the next provider+model target and rebind the prepared
 * request to it.
 *
@@ -16966,6 +17030,6 @@ function createAgent(rawOptions) {
 	};
 }
 //#endregion
-export { installExtensionFromSpec as $, groupBindings as $t, selectFilesFromSession as A, defaultRepeatGuardNormalize as An, createSkillsReadTool as At, buildUpToCompactPrompt as B, matchModelEntries as Bt, resolveLegacySessionDir as C, resolveExtensionConfigValue as Cn, waitTask as Ct, resolveTasksDir as D, OUTPUT_RESERVE_TOKENS as Dn, reserveChildLabel as Dt, resolveSessionDir as E, AUTO_COMPACT_MIN_GROWTH_FRACTION as En, isSpawnTool as Et, TRAILER as F, hashContent as Fn, readFile$1 as Ft, summaryToTurn as G, edit as Gt, anchorPreviewFor as H, createInteractionTool as Ht, buildCompactPrompt as I, hydrateReadStateFromSession as In, looksBinary as It, CompactPromptTooLongError as J, KEYBINDING_DEFS as Jt, truncateHeadForPtlRetry as K, validateToolArgs as Kt, buildFromCompactPrompt as L, hydrateReadStateFromSessionAsync as Ln, multiEdit as Lt, compactConversation as M, normalizeShellCommand as Mn, createShellTool as Mt, BASE_INSTRUCTIONS as N, stableStringify as Nn, shell as Nt, buildPostCompactAttachments as O, effectiveContextWindow as On, createSkillsUseTool as Ot, NO_TOOLS_PREAMBLE as P, getReadState as Pn, tailTruncate as Pt, fetchExtensionSource as Q, formatBindingForDisplay as Qt, buildFullCompactPrompt as R, readStateKey as Rn, createModelSearchTool as Rt, resolveLegacyPersistDir as S, resolveExtensionConfig as Sn, WAIT_TASK_TIMED_OUT_PREFIX as St, resolvePersistDir as T, toWireConfigSchema as Tn, createSpawnTool as Tt, sliceForCompaction as U, grep as Ut, ANCHOR_PREVIEW_MAX_CHARS as V, listFiles as Vt, stripImagesFromTurns as W, glob as Wt, createExtensionPromptBridge as X, KEYBINDING_KEY_COL_WIDTH as Xt, EMPTY_EXTENSION_REGISTRY as Y, KEYBINDING_DEF_BY_ACTION as Yt, ExtensionInstallError as Z, ensureKeybindingsFile as Zt, buildPersistedStub as _, defineExtension as _n, composePresets as _t, stagedToolState as a, readKeybindingsRaw as an, createExtensionHud as at, migrateSessionArtifactDirs as b, isValidExtensionConfigItem as bn, basic_default as bt, INTERRUPT_MESSAGE_FOR_TOOL_USE as c, registerExtensionHostModules as cn, buildExtensionRegistry as ct, TOOL_USE_SKIPPED_MESSAGE as d, discoverExtensions as dn, filterExtensionRegistry as dt, keybindingsPath as en, listExtensionCandidates as et, applyCompactSummaryCutoff as f, inlineLoadedExtension as fn, filterRegistryPlugins as ft, PERSISTENCE_PREVIEW_BYTES as g, createDebugLog as gn, createWorkspaceSurface as gt, PERSISTED_STUB_PREFIX as h, scanExtensionDirectories as hn, createExtensionHostRuntimeBridge as ht, isToolStateOps as i, readKeybindings as in, updateInstalledExtension as it, selectRecentFiles as j, defaultRepeatGuardTracked as jn, shellKill as jt, selectFilesFromReadState as k, shouldAutoCompact as kn, createSkillsRunScriptTool as kt, SHELL_CASCADE_CANCEL_MESSAGE as l, ENTRY_CANDIDATES as ln, composeExtensionPreset as lt, renderStaleReadNotice as m, parseExtensionScanPathEnv as mn, partitionExtensionCatalog as mt, DEFAULT_MAX_VALUE_BYTES as n, mergeKeybindings as nn, readExtensionInstallProvenance as nt, normalizeProviders as o, resolveExtensionKeybindings as on, discoverAndBuildExtensionRegistry as ot, collectNewlyStaleReadPaths as p, isExtensionDefinition as pn, mergeContributions as pt, CompactInvalidInputError as q, DEFAULT_KEYBINDINGS as qt, createToolStateController as r, parseBindingSpec as rn, removeInstalledExtension as rt, resolveModelTargets as s, stripJsonComments as sn, buildExtensionPreset as st, createAgent as t, matchesBinding as tn, parseExtensionInstallSource as tt, TOOL_USE_CANCELLED_MESSAGE as u, defaultExtensionScanPaths as un, disposeExtensionRegistry as ut, cleanupPersistedSession as v, clampExtensionConfigNumber as vn, definePreset as vt, resolveMcpWarningsDir as w, sanitizeExtensionConfigActionPatch as wn, createToolSearchTool as wt, rehomePersistedStubs as x, isValidExtensionConfigValue as xn, writeFile$1 as xt, maybePersistToolResult as y, coerceExtensionConfigInput as yn, basicTools as yt, buildTailCompactPrompt as z, resolveReadStateMap as zn, formatModelLine as zt };
+export { installExtensionFromSpec as $, groupBindings as $t, selectFilesFromSession as A, OUTPUT_RESERVE_TOKENS as An, createSkillsReadTool as At, buildUpToCompactPrompt as B, hydrateReadStateFromSessionAsync as Bn, matchModelEntries as Bt, resolveLegacySessionDir as C, isValidExtensionConfigItem as Cn, waitTask as Ct, resolveTasksDir as D, sanitizeExtensionConfigActionPatch as Dn, reserveChildLabel as Dt, resolveSessionDir as E, resolveExtensionConfigValue as En, isSpawnTool as Et, TRAILER as F, normalizeShellCommand as Fn, readFile$1 as Ft, summaryToTurn as G, edit as Gt, anchorPreviewFor as H, resolveReadStateMap as Hn, createInteractionTool as Ht, buildCompactPrompt as I, stableStringify as In, looksBinary as It, CompactPromptTooLongError as J, KEYBINDING_DEFS as Jt, truncateHeadForPtlRetry as K, validateToolArgs as Kt, buildFromCompactPrompt as L, getReadState as Ln, multiEdit as Lt, compactConversation as M, shouldAutoCompact as Mn, createShellTool as Mt, BASE_INSTRUCTIONS as N, defaultRepeatGuardNormalize as Nn, shell as Nt, buildPostCompactAttachments as O, toWireConfigSchema as On, createSkillsUseTool as Ot, NO_TOOLS_PREAMBLE as P, defaultRepeatGuardTracked as Pn, tailTruncate as Pt, fetchExtensionSource as Q, formatBindingForDisplay as Qt, buildFullCompactPrompt as R, hashContent as Rn, createModelSearchTool as Rt, resolveLegacyPersistDir as S, coerceExtensionConfigInput as Sn, WAIT_TASK_TIMED_OUT_PREFIX as St, resolvePersistDir as T, resolveExtensionConfig as Tn, createSpawnTool as Tt, sliceForCompaction as U, grep as Ut, ANCHOR_PREVIEW_MAX_CHARS as V, readStateKey as Vn, listFiles as Vt, stripImagesFromTurns as W, glob as Wt, createExtensionPromptBridge as X, KEYBINDING_KEY_COL_WIDTH as Xt, EMPTY_EXTENSION_REGISTRY as Y, KEYBINDING_DEF_BY_ACTION as Yt, ExtensionInstallError as Z, ensureKeybindingsFile as Zt, buildPersistedStub as _, parseExtensionScanPathEnv as _n, composePresets as _t, stagedToolState as a, readKeybindingsRaw as an, createExtensionHud as at, migrateSessionArtifactDirs as b, defineExtension as bn, basic_default as bt, INTERRUPT_MESSAGE_FOR_TOOL_USE as c, ALTERNATE_CRED_KEY_SUFFIX as cn, buildExtensionRegistry as ct, TOOL_USE_SKIPPED_MESSAGE as d, registerExtensionHostModules as dn, filterExtensionRegistry as dt, keybindingsPath as en, listExtensionCandidates as et, applyCompactSummaryCutoff as f, ENTRY_CANDIDATES as fn, filterRegistryPlugins as ft, PERSISTENCE_PREVIEW_BYTES as g, isExtensionDefinition as gn, createWorkspaceSurface as gt, PERSISTED_STUB_PREFIX as h, inlineLoadedExtension as hn, createExtensionHostRuntimeBridge as ht, isToolStateOps as i, readKeybindings as in, updateInstalledExtension as it, selectRecentFiles as j, effectiveContextWindow as jn, shellKill as jt, selectFilesFromReadState as k, AUTO_COMPACT_MIN_GROWTH_FRACTION as kn, createSkillsRunScriptTool as kt, SHELL_CASCADE_CANCEL_MESSAGE as l, alternateCredKey as ln, composeExtensionPreset as lt, renderStaleReadNotice as m, discoverExtensions as mn, partitionExtensionCatalog as mt, DEFAULT_MAX_VALUE_BYTES as n, mergeKeybindings as nn, readExtensionInstallProvenance as nt, normalizeProviders as o, resolveExtensionKeybindings as on, discoverAndBuildExtensionRegistry as ot, collectNewlyStaleReadPaths as p, defaultExtensionScanPaths as pn, mergeContributions as pt, CompactInvalidInputError as q, DEFAULT_KEYBINDINGS as qt, createToolStateController as r, parseBindingSpec as rn, removeInstalledExtension as rt, resolveModelTargets as s, stripJsonComments as sn, buildExtensionPreset as st, createAgent as t, matchesBinding as tn, parseExtensionInstallSource as tt, TOOL_USE_CANCELLED_MESSAGE as u, isReservedCredKey as un, disposeExtensionRegistry as ut, cleanupPersistedSession as v, scanExtensionDirectories as vn, definePreset as vt, resolveMcpWarningsDir as w, isValidExtensionConfigValue as wn, createToolSearchTool as wt, rehomePersistedStubs as x, clampExtensionConfigNumber as xn, writeFile$1 as xt, maybePersistToolResult as y, createDebugLog as yn, basicTools as yt, buildTailCompactPrompt as z, hydrateReadStateFromSession as zn, formatModelLine as zt };
 
-//# sourceMappingURL=agent-8kfGIDb_.js.map
+//# sourceMappingURL=agent-CcTWL-Z6.js.map