zidane 7.0.30 → 7.0.32

package/dist/types.d.ts

@@ -1,5 +1,5 @@
-import { $_ as SessionRun, $g as StreamHookContext, Ag as OAuthRefreshHookContext, Bg as RepeatGuardToolMatcher, Br as InteractionToolOptions, C as SuccessfulMutationOutcome, C_ as ToolMap, Cm as ToolResult, Dh as AnthropicParams, E_ as ReadStateMap, Eg as McpToolHookContext, F_ as ToolStateController, Fg as PromptImagePart, G_ as SkillResource, Gg as SessionContentBlock, Hg as ResolveContentRefBlock, I_ as ToolStateOp, Ig as PromptPart, Im as OpenRouterParams, J_ as CreateSessionOptions, Jg as SessionMessage, Ji as AgentHookMap, Kg as SessionEndStatus, L_ as ToolStateStore, Lg as PromptTextPart, Mg as ProgressNudgeMessage, Ng as PromptAudioPart, P_ as StagedToolState, Pg as PromptDocumentPart, R_ as ToolStateView, Rg as PromptVideoPart, S as MutationValidationResult, S_ as ToolDef, Sm as ToolCall, T_ as ReadStateEntry, Tg as McpServerConfig, Tm as TurnResult, U_ as SkillConfig, Ug as RetryConfig, Vg as ResolveContentRef, Wg as RunHookMap, X_ as Session, Xg as SpawnHookContext, Xi as AgentOptions, Yg as SessionTurn, Yi as AgentHooks, Z_ as SessionData, _ as statsByModel, __ as TurnUsage, _m as ProviderCapabilities, a_ as ToolHookContext, b as MutationValidationHooksOptions, b_ as toolResultToText, bg as DEFAULT_AGENT_CLOCK, bm as StreamOptions, c_ as ToolResultContent, cc as ChildAgent, cg as AgentBehavior, d_ as ToolResultImageContent, dg as AgentStats, ev as SessionStore, f_ as ToolResultImageRefContent, g_ as TurnFinishReason, gm as Provider, h as flattenTurns, h_ as ToolResultVideoContent, hg as ChildRunStats, jg as ProgressNudgeKind, l_ as ToolResultDocumentContent, lg as AgentClock, m_ as ToolResultTextContent, mc as SpawnToolState, o_ as ToolOutcome, oh as OpenAIParams, p as ModelUsage, p_ as ToolResultMetadata, pc as SpawnToolOptions, q_ as SkillsConfig, qg as SessionHookContext, qi as Agent, r_ as ThinkingLevel, s_ as ToolResultAudioContent, t as Preset, ty as McpConnection, u_ as ToolResultDocumentRefContent, ug as AgentRunOptions, uv as RemoteStoreOptions, v as MutationValidationBatch, v_ as toolOutputBudgetByteLength, vh as CerebrasParams, vr as ValidationResult, wm as ToolSpec, x as MutationValidationMutation, x_ as ToolContext, y as MutationValidationFailure, y_ as toolOutputByteLength, ym as StreamCallbacks, zg as RepeatGuardConfig } from "./index-C0y2tSgk.js";
+import { $_ as SessionData, B_ as ToolStateView, Bg as PromptVideoPart, Br as InteractionToolOptions, C as SuccessfulMutationOutcome, C_ as ToolContext, D_ as ReadStateEntry, Dg as McpServerConfig, Dm as TurnResult, Em as ToolSpec, Fg as PromptAudioPart, G_ as SkillConfig, Gg as RetryConfig, Hg as RepeatGuardToolMatcher, I_ as StagedToolState, Ig as PromptDocumentPart, Jg as SessionEndStatus, Ji as AgentHookMap, Kg as RunHookMap, L_ as ToolStateController, Lg as PromptImagePart, Mg as OAuthRefreshHookContext, Ng as ProgressNudgeKind, O_ as ReadStateMap, Og as McpToolHookContext, Pg as ProgressNudgeMessage, Q_ as Session, Qg as SpawnHookContext, R_ as ToolStateOp, Rg as PromptPart, Rm as OpenRouterParams, S as MutationValidationResult, S_ as toolResultToText, Sg as DEFAULT_AGENT_CLOCK, Sm as StreamOptions, T_ as ToolMap, Tm as ToolResult, Ug as ResolveContentRef, Vg as RepeatGuardConfig, Wg as ResolveContentRefBlock, X_ as CreateSessionOptions, Xg as SessionMessage, Xi as AgentOptions, Y_ as SkillsConfig, Yg as SessionHookContext, Yi as AgentHooks, Zg as SessionTurn, Zi as AgentToolState, _ as statsByModel, __ as ToolResultVideoContent, _g as ChildRunStats, a_ as ThinkingLevel, b as MutationValidationHooksOptions, b_ as toolOutputBudgetByteLength, bh as CerebrasParams, c_ as ToolOutcome, ch as OpenAIParams, d_ as ToolResultDocumentContent, dg as AgentClock, f_ as ToolResultDocumentRefContent, fg as AgentRunOptions, fv as RemoteStoreOptions, g_ as ToolResultTextContent, gc as SpawnToolState, h as flattenTurns, h_ as ToolResultMetadata, hc as SpawnToolOptions, kh as AnthropicParams, l_ as ToolResultAudioContent, m_ as ToolResultImageRefContent, nv as SessionStore, p as ModelUsage, p_ as ToolResultImageContent, pg as AgentStats, q_ as SkillResource, qg as SessionContentBlock, qi as Agent, ry as McpConnection, s_ as ToolHookContext, t as Preset, t_ as StreamHookContext, tv as SessionRun, u_ as ToolResultContent, uc as ChildAgent, ug as AgentBehavior, v as MutationValidationBatch, v_ as TurnFinishReason, vm as Provider, vr as ValidationResult, w_ as ToolDef, wm as ToolCall, x as MutationValidationMutation, x_ as toolOutputByteLength, xm as StreamCallbacks, y as MutationValidationFailure, y_ as TurnUsage, ym as ProviderCapabilities, z_ as ToolStateStore, zg as PromptTextPart } from "./index-CCB05-JZ.js";
 import { d as ClassifiedErrorKind, i as AgentContextExceededError, l as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, n as AgentAbortedError, o as AgentProviderError, p as matchesContextExceeded, r as AgentBudgetExceededError, s as AgentToolNotAllowedError, u as ClassifiedError } from "./timeout-DEaqslLO.js";
 import { _ as TaskHandle, a as ContextType, c as ExecutionContext, g as TaskExitInfo, h as TaskEntry, l as ExecutionHandle, n as ContextCapabilities, o as DetachedTasksCapability, p as SpawnConfig, r as ContextHardening, s as ExecResult, t as BackgroundTaskStatus, v as TaskStallInfo } from "./types-U-rIVUDw.js";
 import { t as SandboxProvider } from "./sandbox-CDl9tfTo.js";
-export { type Agent, AgentAbortedError, type AgentBehavior, AgentBudgetExceededError, type AgentClock, AgentContextExceededError, type AgentHookMap, type AgentHooks, type AgentOptions, AgentProviderError, type AgentRunOptions, type AgentStats, AgentToolNotAllowedError, type AnthropicParams, type BackgroundTaskStatus, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, type CerebrasParams, type ChildAgent, type ChildRunStats, type ClassifiedError, type ClassifiedErrorKind, type ContextCapabilities, type ContextHardening, type ContextType, type CreateSessionOptions, DEFAULT_AGENT_CLOCK, type DetachedTasksCapability, type ExecResult, type ExecutionContext, type ExecutionHandle, type InteractionToolOptions, type McpConnection, type McpServerConfig, type McpToolHookContext, type ModelUsage, type MutationValidationBatch, type MutationValidationFailure, type MutationValidationHooksOptions, type MutationValidationMutation, type MutationValidationResult, type OAuthRefreshHookContext, type OpenAIParams, type OpenRouterParams, type Preset, type ProgressNudgeKind, type ProgressNudgeMessage, type PromptAudioPart, type PromptDocumentPart, type PromptImagePart, type PromptPart, type PromptTextPart, type PromptVideoPart, type Provider, type ProviderCapabilities, type ReadStateEntry, type ReadStateMap, type RemoteStoreOptions, type RepeatGuardConfig, type RepeatGuardToolMatcher, type ResolveContentRef, type ResolveContentRefBlock, type RetryConfig, type RunHookMap, type SandboxProvider, type Session, type SessionContentBlock, type SessionData, type SessionEndStatus, type SessionHookContext, type SessionMessage, type SessionRun, type SessionStore, type SessionTurn, type SkillConfig, type SkillResource, type SkillsConfig, type SpawnConfig, type SpawnHookContext, type SpawnToolOptions, type SpawnToolState, type StagedToolState, type StreamCallbacks, type StreamHookContext, type StreamOptions, type SuccessfulMutationOutcome, type TaskEntry, type TaskExitInfo, type TaskHandle, type TaskStallInfo, type ThinkingLevel, type ToolCall, type ToolContext, type ToolDef, type ToolHookContext, type ToolMap, type ToolOutcome, type ToolResult, type ToolResultAudioContent, type ToolResultContent, type ToolResultDocumentContent, type ToolResultDocumentRefContent, type ToolResultImageContent, type ToolResultImageRefContent, type ToolResultMetadata, type ToolResultTextContent, type ToolResultVideoContent, type ToolSpec, type ToolStateController, type ToolStateOp, type ToolStateStore, type ToolStateView, type TurnFinishReason, type TurnResult, type TurnUsage, type ValidationResult, flattenTurns, matchesContextExceeded, statsByModel, toolOutputBudgetByteLength, toolOutputByteLength, toolResultToText };
+export { type Agent, AgentAbortedError, type AgentBehavior, AgentBudgetExceededError, type AgentClock, AgentContextExceededError, type AgentHookMap, type AgentHooks, type AgentOptions, AgentProviderError, type AgentRunOptions, type AgentStats, AgentToolNotAllowedError, type AgentToolState, type AnthropicParams, type BackgroundTaskStatus, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, type CerebrasParams, type ChildAgent, type ChildRunStats, type ClassifiedError, type ClassifiedErrorKind, type ContextCapabilities, type ContextHardening, type ContextType, type CreateSessionOptions, DEFAULT_AGENT_CLOCK, type DetachedTasksCapability, type ExecResult, type ExecutionContext, type ExecutionHandle, type InteractionToolOptions, type McpConnection, type McpServerConfig, type McpToolHookContext, type ModelUsage, type MutationValidationBatch, type MutationValidationFailure, type MutationValidationHooksOptions, type MutationValidationMutation, type MutationValidationResult, type OAuthRefreshHookContext, type OpenAIParams, type OpenRouterParams, type Preset, type ProgressNudgeKind, type ProgressNudgeMessage, type PromptAudioPart, type PromptDocumentPart, type PromptImagePart, type PromptPart, type PromptTextPart, type PromptVideoPart, type Provider, type ProviderCapabilities, type ReadStateEntry, type ReadStateMap, type RemoteStoreOptions, type RepeatGuardConfig, type RepeatGuardToolMatcher, type ResolveContentRef, type ResolveContentRefBlock, type RetryConfig, type RunHookMap, type SandboxProvider, type Session, type SessionContentBlock, type SessionData, type SessionEndStatus, type SessionHookContext, type SessionMessage, type SessionRun, type SessionStore, type SessionTurn, type SkillConfig, type SkillResource, type SkillsConfig, type SpawnConfig, type SpawnHookContext, type SpawnToolOptions, type SpawnToolState, type StagedToolState, type StreamCallbacks, type StreamHookContext, type StreamOptions, type SuccessfulMutationOutcome, type TaskEntry, type TaskExitInfo, type TaskHandle, type TaskStallInfo, type ThinkingLevel, type ToolCall, type ToolContext, type ToolDef, type ToolHookContext, type ToolMap, type ToolOutcome, type ToolResult, type ToolResultAudioContent, type ToolResultContent, type ToolResultDocumentContent, type ToolResultDocumentRefContent, type ToolResultImageContent, type ToolResultImageRefContent, type ToolResultMetadata, type ToolResultTextContent, type ToolResultVideoContent, type ToolSpec, type ToolStateController, type ToolStateOp, type ToolStateStore, type ToolStateView, type TurnFinishReason, type TurnResult, type TurnUsage, type ValidationResult, flattenTurns, matchesContextExceeded, statsByModel, toolOutputBudgetByteLength, toolOutputByteLength, toolResultToText };

package/docs/ARCHITECTURE.md

@@ -439,16 +439,25 @@ installLazyDisclosureGate                        // tool:gate refuses lazy ∉ u
 
 per turn — buildFormattedTools() emits in two phases:
   1. registry-order walk filtered by initialUnlocked  ← byte-stable cached prefix
-  2. dynamicUnlockOrder, in unlock order              ← append-only tail
+  2. dynamicUnlockOrder, in unlock order              ← append-only tail (omitted in dispatch mode)
 
 tool_search({ names | query | server, limit? }): unlocks matches, returns inlined input_schema JSON
 
+dispatch mode (toolSearch.mode: 'dispatch'):
+  tools.call_tool = createCallToolTool()               ← eager, fixed { name, arguments } envelope
+  model: call_tool({ name: 'mcp_srv_a', arguments })
+  loop (after wire→canonical rewrite): unwrapDispatchCalls()
+    → ToolCall { id, name: 'mcp_srv_a', input: arguments }   for gate / validation / hooks / events
+    persisted assistant turn keeps the call_tool block   ← wire-valid history
+  store.eventsFromTurns: unwrapCallTool() on replay     ← reload matches the live transcript
+
 run end: uninstallLazyDisclosureGate; per-run state GC-eligible on next run()
 ```
 
 - **Aliasing.** `LazyToolEntry.name` is the wire name; `.canonicalName` keys `unlocked` and dispatches `ctx.tools[name]`. `session.turns` / `ToolHookContext.name` stay canonical throughout.
 - **Hard gate vs. provider validation.** Anthropic/OpenAI already refuse `tool_use` blocks for tools absent from the request; the gate exists for lenient/custom/mock providers and makes the lazy boundary observable via `tool:gate`.
-- **Cache-stable injection.** Every `tool_search` call invalidates only the wire tools array's SUFFIX starting at the first new schema — the eager + `tool_search` prefix never moves.
+- **Cache cost of unlock mode.** The eager + `tool_search` prefix of the wire array never moves, but providers hash the request as `tools → system → messages`: a grown tail still re-bills the system prompt and every message on that turn. That is one full prompt-cache rewrite per discovery wave.
+- **Dispatch mode.** `toolSearch.mode: 'dispatch'` keeps the tools array byte-stable: surfaced tools are invoked through `call_tool` (`src/tools/call-tool.ts`). The unwrap happens once, in `runTurn` right after the alias rewrite, so the whole downstream pipeline (lazy gate, MCP gates, `validateToolArgs` against the INNER schema, `tool:before/after`, tracing, run counts, both dispatch paths) is unchanged and sees the inner tool. Only lazy catalog tools are unwrapped: an envelope around an eager tool stays a `call_tool` call and its `execute` says to call the tool directly (history scanners keyed on `block.name`, read-state seeding, task tracking, keep seeing eager tools under their own names). A malformed envelope is left as `call_tool` so its own schema validation reports the shape error. A host-defined `call_tool` disables dispatch mode (the run falls back to unlock). The chat hosts expose this as `Settings.stableToolList`.
 - **Host-defined `tool_search`.** A host tool named `tool_search` shadows auto-injection; it must call `createToolSearchTool({ catalog, unlocked, addUnlock? })` to drive unlocks, or use `toolSearch.tool: false` for a fully custom flow.
 
 ## Hook Firing Order

package/docs/CHAT.md

@@ -247,6 +247,7 @@ Both join `[...doctrine, userInstructions]` as the **static** half and `[envSect
 | `showAllProjects` | `boolean` | `false` | Sessions list scope. |
 | `resumeLastSession` | `boolean` | `true` | |
 | `persistToolResults` | `boolean` | `true` | See **Tool-result persistence**. |
+| `stableToolList` | `boolean` | `false` | Lazy MCP tools surfaced by `tool_search` are invoked through `call_tool` instead of growing the model's tool list (`behavior.toolSearch.mode: 'dispatch'`), so discovery never rewrites the prompt cache. Transcript shows the inner tool as with a direct call. |
 | `autoCompact` | `boolean` | `true` | See **Auto-compaction**. |
 | `autoCompactThreshold` | `number` | `0.8` | Cycles 0.6/0.7/0.8/0.9 in the settings modal. |
 | `resumeOnMaxTokens`, `maxOutputTokens`, `maxTurns`, `retryMaxAttempts`, `maxCostUsd`, `maxTotalTokens`, `maxWallMinutes` | mixed | off/`0` | Runaway ceilings; all off by default (model-driven, uncapped). |

package/docs/INTERACTIONS.md

@@ -87,7 +87,10 @@ user's own selection rather than resetting it.
 Response shape:
 
 ```json
-{ "answers": { "name": "Jane", "notes": "...", "fw": "react", "go": true } }
+{
+  "answers": { "name": "Jane", "notes": "...", "fw": "react", "go": true },
+  "instructions": "Also keep the old endpoint alive until the migration lands."
+}
 ```
 
 Missing keys = question was skipped (only possible when `required:
@@ -95,12 +98,21 @@ false`). Empty-string answers and empty multi-select picks are dropped
 at serialization; a multi-select (`type: 'select'`, `multi: true`)
 answers as an array of choice ids.
 
+`instructions` is free text the user attached to the whole form. Every
+surface offers it unconditionally (the TUI wizard ends on an "additional
+instructions" step, the GUI modal has a permanent textarea under the
+questions), so the user can always refine or override the questions
+instead of being boxed into the model's choices. Omitted when left empty.
+The tool description tells the model it is authoritative.
+
 ## Keyboard
 
 In the question wizard (multi-question batches):
 
 - `↑/↓` (or `j/k`) — navigate options
-- `↵` — submit the active question / pick the focused option
+- `↵` — submit the active question / pick the focused option. The last
+  step is always "additional instructions" (optional textarea): `↵` on an
+  empty box sends the answers as they are.
 - `space` — toggle the focused option (multi-selects only; `↵` submits
   the whole selection, at least one pick required unless `required: false`)
 - `shift+↹` — back one question (preserves your answers, pre-fills the

package/docs/SKILL.md

@@ -688,7 +688,9 @@ createAgent({
 
 The system prompt gains a `<searchable_tools>` block. `tool_search({ query, names, server, limit })` returns matching schemas and unlocks them for the rest of the run. A `tool:gate` middleware refuses un-surfaced lazy tools. Catalog + search results show the **wire** name; the unlock set keys on canonical so dispatch / `session.turns` stay alias-stable.
 
-`behavior.toolSearch` knobs (no-op in eager mode): `tool: false` opts out of auto-injection; `limit: 20` caps default results. Per-server `disclosure: 'eager' | 'lazy'` overrides the agent default; run-level overrides agent-level. Cost: one cache miss per discovery wave; subsequent turns hit cache normally.
+`behavior.toolSearch` knobs (no-op in eager mode): `tool: false` opts out of auto-injection; `limit: 20` caps default results; `mode: 'unlock' | 'dispatch'` picks how a surfaced tool becomes callable. Per-server `disclosure: 'eager' | 'lazy'` overrides the agent default; run-level overrides agent-level.
+
+Cost: in `'unlock'` mode (default) every discovery wave grows the tools array, and since providers hash `tools → system → messages` that is a **full** prompt-cache rewrite each time. `'dispatch'` mode keeps the tools array byte-stable: a fixed `call_tool { name, arguments }` native tool is added, surfaced tools are invoked through it, and the loop unwraps the envelope before dispatch so gating, schema validation (against the inner tool), hooks and transcript events see the inner tool exactly as a direct call. Chat hosts expose it as `Settings.stableToolList`.
 
 ## Skills
 

package/docs/TUI.md

@@ -305,7 +305,7 @@ createRoot(renderer).render(<App config={config} />)
 
 ## Auto-update
 
-The footer polls npm once a day for a newer `zidane-tui` release and shows a passive `↑ vX.Y.Z` chip (cache-driven, 3s timeout, never blocks boot). Opt out via `Settings.checkForUpdates` or `ZIDANE_NO_UPDATE`/`NO_UPDATE_NOTIFIER`/`CI`. It also shows a transient prompt-cache toast (`⚡ cache break · <culprit> · +Nk tok · ~$0.48` warn-colored, or dim `⚡ cache expired · …` for TTL-only breaks) for ~8s after a `'cache:break'` hook fires.
+The footer polls npm once a day for a newer `zidane-tui` release and shows a passive `↑ vX.Y.Z` chip (cache-driven, 3s timeout, never blocks boot). Opt out via `Settings.checkForUpdates` or `ZIDANE_NO_UPDATE`/`NO_UPDATE_NOTIFIER`/`CI`. Once a newer build is actually **on disk** — `zidane upgrade` in another terminal, or the GUI's in-app update — the chip flips to `↻ vX.Y.Z` and a one-time info line says `zidane vX.Y.Z is installed — restart to update`. That probe (`useRestartRequired` / `watchInstalledVersion`) resolves the installed version from the `zidane` bin on PATH, wakes on the `<cacheDir>/update-applied.json` marker every installer writes, and re-polls every 5 min; it is independent of `checkForUpdates` since it costs no network. It also shows a transient prompt-cache toast (`⚡ cache break · <culprit> · +Nk tok · ~$0.48` warn-colored, or dim `⚡ cache expired · …` for TTL-only breaks) for ~8s after a `'cache:break'` hook fires.
 
 ```bash
 zidane upgrade                       # check + run the host package manager
@@ -326,10 +326,12 @@ if (process.argv[2] === 'upgrade') {
   const result = await runUpdateCommand({ packageName: 'my-cli', currentVersion: pkg.version, argv: process.argv.slice(3) })
   process.exit(result.exitCode)
 }
-await runTui({ autoUpdate: { packageName: 'my-cli', currentVersion: pkg.version } })
+await runTui({ autoUpdate: { packageName: 'my-cli', currentVersion: pkg.version, binName: 'my-cli' } })
 ```
 
-`checkForUpdate`, `useUpdateCheck`, `buildUpdateHint`, `performSelfUpdate`, `performInPlaceSelfUpdate`, `detectPackageManager`, `resolvePlatformPackage`, `runUpdateCommand`, `compareSemver` all live in `zidane/chat` — no React-DOM/OpenTUI dependency.
+A GUI (or any host whose `process.execPath` is not the package's bin) uses `upgradeInstalledPackages({ targets: [{ packageName: 'zidane-gui' }, { packageName: 'zidane-tui', binName: 'zidane' }] })` instead: every installed target is located by its bin, upgraded through the package manager that owns it, verified on disk, and reported as a structured `UpgradeReport` with `onProgress` events for a live status line. This is what the zidane GUI's footer `↑ vX.Y.Z` button runs; it then offers `↻ vX.Y.Z` → relaunch.
+
+`checkForUpdate`, `useUpdateCheck`, `buildUpdateHint`, `buildRestartHint`, `useRestartRequired`, `watchInstalledVersion`, `upgradeInstalledPackages`, `performSelfUpdate`, `performInPlaceSelfUpdate`, `detectPackageManager`, `resolvePlatformPackage`, `runUpdateCommand`, `compareSemver` all live in `zidane/chat` — no React-DOM/OpenTUI dependency.
 
 ## File layout
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zidane",
-  "version": "7.0.30",
+  "version": "7.0.32",
   "description": "an agent that goes straight to the goal",
   "type": "module",
   "private": false,