thread.rs

   1use crate::{
   2    ContextServerRegistry, CopyPathTool, CreateDirectoryTool, DbLanguageModel, DbThread,
   3    DeletePathTool, DiagnosticsTool, EditFileTool, FetchTool, FindPathTool, GrepTool,
   4    ListDirectoryTool, MovePathTool, NowTool, OpenTool, ProjectSnapshot, ReadFileTool,
   5    RestoreFileFromDiskTool, SaveFileTool, SpawnAgentTool, StreamingEditFileTool,
   6    SystemPromptTemplate, Template, Templates, TerminalTool, ToolPermissionDecision, WebSearchTool,
   7    decide_permission_from_settings,
   8};
   9use acp_thread::{MentionUri, UserMessageId};
  10use action_log::ActionLog;
  11use feature_flags::{FeatureFlagAppExt as _, StreamingEditFileToolFeatureFlag};
  12
  13use agent_client_protocol as acp;
  14use agent_settings::{
  15    AgentProfileId, AgentProfileSettings, AgentSettings, SUMMARIZE_THREAD_DETAILED_PROMPT,
  16    SUMMARIZE_THREAD_PROMPT,
  17};
  18use anyhow::{Context as _, Result, anyhow};
  19use chrono::{DateTime, Utc};
  20use client::UserStore;
  21use cloud_api_types::Plan;
  22use cloud_llm_client::CompletionIntent;
  23use collections::{HashMap, HashSet, IndexMap};
  24use fs::Fs;
  25use futures::stream;
  26use futures::{
  27    FutureExt,
  28    channel::{mpsc, oneshot},
  29    future::Shared,
  30    stream::FuturesUnordered,
  31};
  32use gpui::{
  33    App, AppContext, AsyncApp, Context, Entity, EventEmitter, SharedString, Task, WeakEntity,
  34};
  35use heck::ToSnakeCase as _;
  36use language_model::{
  37    LanguageModel, LanguageModelCompletionError, LanguageModelCompletionEvent, LanguageModelId,
  38    LanguageModelImage, LanguageModelProviderId, LanguageModelRegistry, LanguageModelRequest,
  39    LanguageModelRequestMessage, LanguageModelRequestTool, LanguageModelToolResult,
  40    LanguageModelToolResultContent, LanguageModelToolSchemaFormat, LanguageModelToolUse,
  41    LanguageModelToolUseId, Role, SelectedModel, Speed, StopReason, TokenUsage,
  42    ZED_CLOUD_PROVIDER_ID,
  43};
  44use project::Project;
  45use prompt_store::ProjectContext;
  46use schemars::{JsonSchema, Schema};
  47use serde::de::DeserializeOwned;
  48use serde::{Deserialize, Serialize};
  49use settings::{LanguageModelSelection, Settings, ToolPermissionMode, update_settings_file};
  50use smol::stream::StreamExt;
  51use std::{
  52    collections::BTreeMap,
  53    marker::PhantomData,
  54    ops::RangeInclusive,
  55    path::Path,
  56    rc::Rc,
  57    sync::Arc,
  58    time::{Duration, Instant},
  59};
  60use std::{fmt::Write, path::PathBuf};
  61use util::{ResultExt, debug_panic, markdown::MarkdownCodeBlock, paths::PathStyle};
  62use uuid::Uuid;
  63
  64const TOOL_CANCELED_MESSAGE: &str = "Tool canceled by user";
  65pub const MAX_TOOL_NAME_LENGTH: usize = 64;
  66pub const MAX_SUBAGENT_DEPTH: u8 = 1;
  67
  68/// Context passed to a subagent thread for lifecycle management
  69#[derive(Clone, Debug, Serialize, Deserialize)]
  70pub struct SubagentContext {
  71    /// ID of the parent thread
  72    pub parent_thread_id: acp::SessionId,
  73
  74    /// Current depth level (0 = root agent, 1 = first-level subagent, etc.)
  75    pub depth: u8,
  76}
  77
  78/// The ID of the user prompt that initiated a request.
  79///
  80/// This equates to the user physically submitting a message to the model (e.g., by pressing the Enter key).
  81#[derive(Debug, PartialEq, Eq, PartialOrd, Ord, Hash, Clone, Serialize, Deserialize)]
  82pub struct PromptId(Arc<str>);
  83
  84impl PromptId {
  85    pub fn new() -> Self {
  86        Self(Uuid::new_v4().to_string().into())
  87    }
  88}
  89
  90impl std::fmt::Display for PromptId {
  91    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
  92        write!(f, "{}", self.0)
  93    }
  94}
  95
  96pub(crate) const MAX_RETRY_ATTEMPTS: u8 = 4;
  97pub(crate) const BASE_RETRY_DELAY: Duration = Duration::from_secs(5);
  98
  99#[derive(Debug, Clone)]
 100enum RetryStrategy {
 101    ExponentialBackoff {
 102        initial_delay: Duration,
 103        max_attempts: u8,
 104    },
 105    Fixed {
 106        delay: Duration,
 107        max_attempts: u8,
 108    },
 109}
 110
 111#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 112pub enum Message {
 113    User(UserMessage),
 114    Agent(AgentMessage),
 115    Resume,
 116}
 117
 118impl Message {
 119    pub fn as_agent_message(&self) -> Option<&AgentMessage> {
 120        match self {
 121            Message::Agent(agent_message) => Some(agent_message),
 122            _ => None,
 123        }
 124    }
 125
 126    pub fn to_request(&self) -> Vec<LanguageModelRequestMessage> {
 127        match self {
 128            Message::User(message) => {
 129                if message.content.is_empty() {
 130                    vec![]
 131                } else {
 132                    vec![message.to_request()]
 133                }
 134            }
 135            Message::Agent(message) => message.to_request(),
 136            Message::Resume => vec![LanguageModelRequestMessage {
 137                role: Role::User,
 138                content: vec!["Continue where you left off".into()],
 139                cache: false,
 140                reasoning_details: None,
 141            }],
 142        }
 143    }
 144
 145    pub fn to_markdown(&self) -> String {
 146        match self {
 147            Message::User(message) => message.to_markdown(),
 148            Message::Agent(message) => message.to_markdown(),
 149            Message::Resume => "[resume]\n".into(),
 150        }
 151    }
 152
 153    pub fn role(&self) -> Role {
 154        match self {
 155            Message::User(_) | Message::Resume => Role::User,
 156            Message::Agent(_) => Role::Assistant,
 157        }
 158    }
 159}
 160
 161#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 162pub struct UserMessage {
 163    pub id: UserMessageId,
 164    pub content: Vec<UserMessageContent>,
 165}
 166
 167#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 168pub enum UserMessageContent {
 169    Text(String),
 170    Mention { uri: MentionUri, content: String },
 171    Image(LanguageModelImage),
 172}
 173
 174impl UserMessage {
 175    pub fn to_markdown(&self) -> String {
 176        let mut markdown = String::new();
 177
 178        for content in &self.content {
 179            match content {
 180                UserMessageContent::Text(text) => {
 181                    markdown.push_str(text);
 182                    markdown.push('\n');
 183                }
 184                UserMessageContent::Image(_) => {
 185                    markdown.push_str("<image />\n");
 186                }
 187                UserMessageContent::Mention { uri, content } => {
 188                    if !content.is_empty() {
 189                        let _ = writeln!(&mut markdown, "{}\n\n{}", uri.as_link(), content);
 190                    } else {
 191                        let _ = writeln!(&mut markdown, "{}", uri.as_link());
 192                    }
 193                }
 194            }
 195        }
 196
 197        markdown
 198    }
 199
 200    fn to_request(&self) -> LanguageModelRequestMessage {
 201        let mut message = LanguageModelRequestMessage {
 202            role: Role::User,
 203            content: Vec::with_capacity(self.content.len()),
 204            cache: false,
 205            reasoning_details: None,
 206        };
 207
 208        const OPEN_CONTEXT: &str = "<context>\n\
 209            The following items were attached by the user. \
 210            They are up-to-date and don't need to be re-read.\n\n";
 211
 212        const OPEN_FILES_TAG: &str = "<files>";
 213        const OPEN_DIRECTORIES_TAG: &str = "<directories>";
 214        const OPEN_SYMBOLS_TAG: &str = "<symbols>";
 215        const OPEN_SELECTIONS_TAG: &str = "<selections>";
 216        const OPEN_THREADS_TAG: &str = "<threads>";
 217        const OPEN_FETCH_TAG: &str = "<fetched_urls>";
 218        const OPEN_RULES_TAG: &str =
 219            "<rules>\nThe user has specified the following rules that should be applied:\n";
 220        const OPEN_DIAGNOSTICS_TAG: &str = "<diagnostics>";
 221        const OPEN_DIFFS_TAG: &str = "<diffs>";
 222
 223        let mut file_context = OPEN_FILES_TAG.to_string();
 224        let mut directory_context = OPEN_DIRECTORIES_TAG.to_string();
 225        let mut symbol_context = OPEN_SYMBOLS_TAG.to_string();
 226        let mut selection_context = OPEN_SELECTIONS_TAG.to_string();
 227        let mut thread_context = OPEN_THREADS_TAG.to_string();
 228        let mut fetch_context = OPEN_FETCH_TAG.to_string();
 229        let mut rules_context = OPEN_RULES_TAG.to_string();
 230        let mut diagnostics_context = OPEN_DIAGNOSTICS_TAG.to_string();
 231        let mut diffs_context = OPEN_DIFFS_TAG.to_string();
 232
 233        for chunk in &self.content {
 234            let chunk = match chunk {
 235                UserMessageContent::Text(text) => {
 236                    language_model::MessageContent::Text(text.clone())
 237                }
 238                UserMessageContent::Image(value) => {
 239                    language_model::MessageContent::Image(value.clone())
 240                }
 241                UserMessageContent::Mention { uri, content } => {
 242                    match uri {
 243                        MentionUri::File { abs_path } => {
 244                            write!(
 245                                &mut file_context,
 246                                "\n{}",
 247                                MarkdownCodeBlock {
 248                                    tag: &codeblock_tag(abs_path, None),
 249                                    text: &content.to_string(),
 250                                }
 251                            )
 252                            .ok();
 253                        }
 254                        MentionUri::PastedImage => {
 255                            debug_panic!("pasted image URI should not be used in mention content")
 256                        }
 257                        MentionUri::Directory { .. } => {
 258                            write!(&mut directory_context, "\n{}\n", content).ok();
 259                        }
 260                        MentionUri::Symbol {
 261                            abs_path: path,
 262                            line_range,
 263                            ..
 264                        } => {
 265                            write!(
 266                                &mut symbol_context,
 267                                "\n{}",
 268                                MarkdownCodeBlock {
 269                                    tag: &codeblock_tag(path, Some(line_range)),
 270                                    text: content
 271                                }
 272                            )
 273                            .ok();
 274                        }
 275                        MentionUri::Selection {
 276                            abs_path: path,
 277                            line_range,
 278                            ..
 279                        } => {
 280                            write!(
 281                                &mut selection_context,
 282                                "\n{}",
 283                                MarkdownCodeBlock {
 284                                    tag: &codeblock_tag(
 285                                        path.as_deref().unwrap_or("Untitled".as_ref()),
 286                                        Some(line_range)
 287                                    ),
 288                                    text: content
 289                                }
 290                            )
 291                            .ok();
 292                        }
 293                        MentionUri::Thread { .. } => {
 294                            write!(&mut thread_context, "\n{}\n", content).ok();
 295                        }
 296                        MentionUri::TextThread { .. } => {
 297                            write!(&mut thread_context, "\n{}\n", content).ok();
 298                        }
 299                        MentionUri::Rule { .. } => {
 300                            write!(
 301                                &mut rules_context,
 302                                "\n{}",
 303                                MarkdownCodeBlock {
 304                                    tag: "",
 305                                    text: content
 306                                }
 307                            )
 308                            .ok();
 309                        }
 310                        MentionUri::Fetch { url } => {
 311                            write!(&mut fetch_context, "\nFetch: {}\n\n{}", url, content).ok();
 312                        }
 313                        MentionUri::Diagnostics { .. } => {
 314                            write!(&mut diagnostics_context, "\n{}\n", content).ok();
 315                        }
 316                        MentionUri::TerminalSelection { .. } => {
 317                            write!(
 318                                &mut selection_context,
 319                                "\n{}",
 320                                MarkdownCodeBlock {
 321                                    tag: "console",
 322                                    text: content
 323                                }
 324                            )
 325                            .ok();
 326                        }
 327                        MentionUri::GitDiff { base_ref } => {
 328                            write!(
 329                                &mut diffs_context,
 330                                "\nBranch diff against {}:\n{}",
 331                                base_ref,
 332                                MarkdownCodeBlock {
 333                                    tag: "diff",
 334                                    text: content
 335                                }
 336                            )
 337                            .ok();
 338                        }
 339                    }
 340
 341                    language_model::MessageContent::Text(uri.as_link().to_string())
 342                }
 343            };
 344
 345            message.content.push(chunk);
 346        }
 347
 348        let len_before_context = message.content.len();
 349
 350        if file_context.len() > OPEN_FILES_TAG.len() {
 351            file_context.push_str("</files>\n");
 352            message
 353                .content
 354                .push(language_model::MessageContent::Text(file_context));
 355        }
 356
 357        if directory_context.len() > OPEN_DIRECTORIES_TAG.len() {
 358            directory_context.push_str("</directories>\n");
 359            message
 360                .content
 361                .push(language_model::MessageContent::Text(directory_context));
 362        }
 363
 364        if symbol_context.len() > OPEN_SYMBOLS_TAG.len() {
 365            symbol_context.push_str("</symbols>\n");
 366            message
 367                .content
 368                .push(language_model::MessageContent::Text(symbol_context));
 369        }
 370
 371        if selection_context.len() > OPEN_SELECTIONS_TAG.len() {
 372            selection_context.push_str("</selections>\n");
 373            message
 374                .content
 375                .push(language_model::MessageContent::Text(selection_context));
 376        }
 377
 378        if diffs_context.len() > OPEN_DIFFS_TAG.len() {
 379            diffs_context.push_str("</diffs>\n");
 380            message
 381                .content
 382                .push(language_model::MessageContent::Text(diffs_context));
 383        }
 384
 385        if thread_context.len() > OPEN_THREADS_TAG.len() {
 386            thread_context.push_str("</threads>\n");
 387            message
 388                .content
 389                .push(language_model::MessageContent::Text(thread_context));
 390        }
 391
 392        if fetch_context.len() > OPEN_FETCH_TAG.len() {
 393            fetch_context.push_str("</fetched_urls>\n");
 394            message
 395                .content
 396                .push(language_model::MessageContent::Text(fetch_context));
 397        }
 398
 399        if rules_context.len() > OPEN_RULES_TAG.len() {
 400            rules_context.push_str("</user_rules>\n");
 401            message
 402                .content
 403                .push(language_model::MessageContent::Text(rules_context));
 404        }
 405
 406        if diagnostics_context.len() > OPEN_DIAGNOSTICS_TAG.len() {
 407            diagnostics_context.push_str("</diagnostics>\n");
 408            message
 409                .content
 410                .push(language_model::MessageContent::Text(diagnostics_context));
 411        }
 412
 413        if message.content.len() > len_before_context {
 414            message.content.insert(
 415                len_before_context,
 416                language_model::MessageContent::Text(OPEN_CONTEXT.into()),
 417            );
 418            message
 419                .content
 420                .push(language_model::MessageContent::Text("</context>".into()));
 421        }
 422
 423        message
 424    }
 425}
 426
 427fn codeblock_tag(full_path: &Path, line_range: Option<&RangeInclusive<u32>>) -> String {
 428    let mut result = String::new();
 429
 430    if let Some(extension) = full_path.extension().and_then(|ext| ext.to_str()) {
 431        let _ = write!(result, "{} ", extension);
 432    }
 433
 434    let _ = write!(result, "{}", full_path.display());
 435
 436    if let Some(range) = line_range {
 437        if range.start() == range.end() {
 438            let _ = write!(result, ":{}", range.start() + 1);
 439        } else {
 440            let _ = write!(result, ":{}-{}", range.start() + 1, range.end() + 1);
 441        }
 442    }
 443
 444    result
 445}
 446
 447impl AgentMessage {
 448    pub fn to_markdown(&self) -> String {
 449        let mut markdown = String::new();
 450
 451        for content in &self.content {
 452            match content {
 453                AgentMessageContent::Text(text) => {
 454                    markdown.push_str(text);
 455                    markdown.push('\n');
 456                }
 457                AgentMessageContent::Thinking { text, .. } => {
 458                    markdown.push_str("<think>");
 459                    markdown.push_str(text);
 460                    markdown.push_str("</think>\n");
 461                }
 462                AgentMessageContent::RedactedThinking(_) => {
 463                    markdown.push_str("<redacted_thinking />\n")
 464                }
 465                AgentMessageContent::ToolUse(tool_use) => {
 466                    markdown.push_str(&format!(
 467                        "**Tool Use**: {} (ID: {})\n",
 468                        tool_use.name, tool_use.id
 469                    ));
 470                    markdown.push_str(&format!(
 471                        "{}\n",
 472                        MarkdownCodeBlock {
 473                            tag: "json",
 474                            text: &format!("{:#}", tool_use.input)
 475                        }
 476                    ));
 477                }
 478            }
 479        }
 480
 481        for tool_result in self.tool_results.values() {
 482            markdown.push_str(&format!(
 483                "**Tool Result**: {} (ID: {})\n\n",
 484                tool_result.tool_name, tool_result.tool_use_id
 485            ));
 486            if tool_result.is_error {
 487                markdown.push_str("**ERROR:**\n");
 488            }
 489
 490            match &tool_result.content {
 491                LanguageModelToolResultContent::Text(text) => {
 492                    writeln!(markdown, "{text}\n").ok();
 493                }
 494                LanguageModelToolResultContent::Image(_) => {
 495                    writeln!(markdown, "<image />\n").ok();
 496                }
 497            }
 498
 499            if let Some(output) = tool_result.output.as_ref() {
 500                writeln!(
 501                    markdown,
 502                    "**Debug Output**:\n\n```json\n{}\n```\n",
 503                    serde_json::to_string_pretty(output).unwrap()
 504                )
 505                .unwrap();
 506            }
 507        }
 508
 509        markdown
 510    }
 511
 512    pub fn to_request(&self) -> Vec<LanguageModelRequestMessage> {
 513        let mut assistant_message = LanguageModelRequestMessage {
 514            role: Role::Assistant,
 515            content: Vec::with_capacity(self.content.len()),
 516            cache: false,
 517            reasoning_details: self.reasoning_details.clone(),
 518        };
 519        for chunk in &self.content {
 520            match chunk {
 521                AgentMessageContent::Text(text) => {
 522                    assistant_message
 523                        .content
 524                        .push(language_model::MessageContent::Text(text.clone()));
 525                }
 526                AgentMessageContent::Thinking { text, signature } => {
 527                    assistant_message
 528                        .content
 529                        .push(language_model::MessageContent::Thinking {
 530                            text: text.clone(),
 531                            signature: signature.clone(),
 532                        });
 533                }
 534                AgentMessageContent::RedactedThinking(value) => {
 535                    assistant_message.content.push(
 536                        language_model::MessageContent::RedactedThinking(value.clone()),
 537                    );
 538                }
 539                AgentMessageContent::ToolUse(tool_use) => {
 540                    if self.tool_results.contains_key(&tool_use.id) {
 541                        assistant_message
 542                            .content
 543                            .push(language_model::MessageContent::ToolUse(tool_use.clone()));
 544                    }
 545                }
 546            };
 547        }
 548
 549        let mut user_message = LanguageModelRequestMessage {
 550            role: Role::User,
 551            content: Vec::new(),
 552            cache: false,
 553            reasoning_details: None,
 554        };
 555
 556        for tool_result in self.tool_results.values() {
 557            let mut tool_result = tool_result.clone();
 558            // Surprisingly, the API fails if we return an empty string here.
 559            // It thinks we are sending a tool use without a tool result.
 560            if tool_result.content.is_empty() {
 561                tool_result.content = "<Tool returned an empty string>".into();
 562            }
 563            user_message
 564                .content
 565                .push(language_model::MessageContent::ToolResult(tool_result));
 566        }
 567
 568        let mut messages = Vec::new();
 569        if !assistant_message.content.is_empty() {
 570            messages.push(assistant_message);
 571        }
 572        if !user_message.content.is_empty() {
 573            messages.push(user_message);
 574        }
 575        messages
 576    }
 577}
 578
 579#[derive(Default, Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 580pub struct AgentMessage {
 581    pub content: Vec<AgentMessageContent>,
 582    pub tool_results: IndexMap<LanguageModelToolUseId, LanguageModelToolResult>,
 583    pub reasoning_details: Option<serde_json::Value>,
 584}
 585
 586#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 587pub enum AgentMessageContent {
 588    Text(String),
 589    Thinking {
 590        text: String,
 591        signature: Option<String>,
 592    },
 593    RedactedThinking(String),
 594    ToolUse(LanguageModelToolUse),
 595}
 596
 597pub trait TerminalHandle {
 598    fn id(&self, cx: &AsyncApp) -> Result<acp::TerminalId>;
 599    fn current_output(&self, cx: &AsyncApp) -> Result<acp::TerminalOutputResponse>;
 600    fn wait_for_exit(&self, cx: &AsyncApp) -> Result<Shared<Task<acp::TerminalExitStatus>>>;
 601    fn kill(&self, cx: &AsyncApp) -> Result<()>;
 602    fn was_stopped_by_user(&self, cx: &AsyncApp) -> Result<bool>;
 603}
 604
 605pub trait SubagentHandle {
 606    /// The session ID of this subagent thread
 607    fn id(&self) -> acp::SessionId;
 608    /// The current number of entries in the thread.
 609    /// Useful for knowing where the next turn will begin
 610    fn num_entries(&self, cx: &App) -> usize;
 611    /// Runs a turn for a given message and returns both the response and the index of that output message.
 612    fn send(&self, message: String, cx: &AsyncApp) -> Task<Result<String>>;
 613}
 614
 615pub trait ThreadEnvironment {
 616    fn create_terminal(
 617        &self,
 618        command: String,
 619        cwd: Option<PathBuf>,
 620        output_byte_limit: Option<u64>,
 621        cx: &mut AsyncApp,
 622    ) -> Task<Result<Rc<dyn TerminalHandle>>>;
 623
 624    fn create_subagent(&self, label: String, cx: &mut App) -> Result<Rc<dyn SubagentHandle>>;
 625
 626    fn resume_subagent(
 627        &self,
 628        _session_id: acp::SessionId,
 629        _cx: &mut App,
 630    ) -> Result<Rc<dyn SubagentHandle>> {
 631        Err(anyhow::anyhow!(
 632            "Resuming subagent sessions is not supported"
 633        ))
 634    }
 635}
 636
 637#[derive(Debug)]
 638pub enum ThreadEvent {
 639    UserMessage(UserMessage),
 640    AgentText(String),
 641    AgentThinking(String),
 642    ToolCall(acp::ToolCall),
 643    ToolCallUpdate(acp_thread::ToolCallUpdate),
 644    ToolCallAuthorization(ToolCallAuthorization),
 645    SubagentSpawned(acp::SessionId),
 646    Retry(acp_thread::RetryStatus),
 647    Stop(acp::StopReason),
 648}
 649
 650#[derive(Debug)]
 651pub struct NewTerminal {
 652    pub command: String,
 653    pub output_byte_limit: Option<u64>,
 654    pub cwd: Option<PathBuf>,
 655    pub response: oneshot::Sender<Result<Entity<acp_thread::Terminal>>>,
 656}
 657
 658#[derive(Debug, Clone)]
 659pub struct ToolPermissionContext {
 660    pub tool_name: String,
 661    pub input_values: Vec<String>,
 662    pub scope: ToolPermissionScope,
 663}
 664
 665#[derive(Debug, Clone, Copy, PartialEq, Eq)]
 666pub enum ToolPermissionScope {
 667    ToolInput,
 668    SymlinkTarget,
 669}
 670
 671impl ToolPermissionContext {
 672    pub fn new(tool_name: impl Into<String>, input_values: Vec<String>) -> Self {
 673        Self {
 674            tool_name: tool_name.into(),
 675            input_values,
 676            scope: ToolPermissionScope::ToolInput,
 677        }
 678    }
 679
 680    pub fn symlink_target(tool_name: impl Into<String>, target_paths: Vec<String>) -> Self {
 681        Self {
 682            tool_name: tool_name.into(),
 683            input_values: target_paths,
 684            scope: ToolPermissionScope::SymlinkTarget,
 685        }
 686    }
 687
 688    /// Builds the permission options for this tool context.
 689    ///
 690    /// This is the canonical source for permission option generation.
 691    /// Tests should use this function rather than manually constructing options.
 692    ///
 693    /// # Shell Compatibility for Terminal Tool
 694    ///
 695    /// For the terminal tool, "Always allow" options are only shown when the user's
 696    /// shell supports POSIX-like command chaining syntax (`&&`, `||`, `;`, `|`).
 697    ///
 698    /// **Why this matters:** When a user sets up an "always allow" pattern like `^cargo`,
 699    /// we need to parse the command to extract all sub-commands and verify that EVERY
 700    /// sub-command matches the pattern. Otherwise, an attacker could craft a command like
 701    /// `cargo build && rm -rf /` that would bypass the security check.
 702    ///
 703    /// **Supported shells:** Posix (sh, bash, dash, zsh), Fish 3.0+, PowerShell 7+/Pwsh,
 704    /// Cmd, Xonsh, Csh, Tcsh
 705    ///
 706    /// **Unsupported shells:** Nushell (uses `and`/`or` keywords), Elvish (uses `and`/`or`
 707    /// keywords), Rc (Plan 9 shell - no `&&`/`||` operators)
 708    ///
 709    /// For unsupported shells, we hide the "Always allow" UI options entirely, and if
 710    /// the user has `always_allow` rules configured in settings, `ToolPermissionDecision::from_input`
 711    /// will return a `Deny` with an explanatory error message.
 712    pub fn build_permission_options(&self) -> acp_thread::PermissionOptions {
 713        use crate::pattern_extraction::*;
 714        use util::shell::ShellKind;
 715
 716        let tool_name = &self.tool_name;
 717        let input_values = &self.input_values;
 718        if self.scope == ToolPermissionScope::SymlinkTarget {
 719            return acp_thread::PermissionOptions::Flat(vec![
 720                acp::PermissionOption::new(
 721                    acp::PermissionOptionId::new("allow"),
 722                    "Yes",
 723                    acp::PermissionOptionKind::AllowOnce,
 724                ),
 725                acp::PermissionOption::new(
 726                    acp::PermissionOptionId::new("deny"),
 727                    "No",
 728                    acp::PermissionOptionKind::RejectOnce,
 729                ),
 730            ]);
 731        }
 732
 733        // Check if the user's shell supports POSIX-like command chaining.
 734        // See the doc comment above for the full explanation of why this is needed.
 735        let shell_supports_always_allow = if tool_name == TerminalTool::NAME {
 736            ShellKind::system().supports_posix_chaining()
 737        } else {
 738            true
 739        };
 740
 741        let extract_for_value = |value: &str| -> (Option<String>, Option<String>) {
 742            if tool_name == TerminalTool::NAME {
 743                (
 744                    extract_terminal_pattern(value),
 745                    extract_terminal_pattern_display(value),
 746                )
 747            } else if tool_name == CopyPathTool::NAME
 748                || tool_name == MovePathTool::NAME
 749                || tool_name == EditFileTool::NAME
 750                || tool_name == DeletePathTool::NAME
 751                || tool_name == CreateDirectoryTool::NAME
 752                || tool_name == SaveFileTool::NAME
 753            {
 754                (
 755                    extract_path_pattern(value),
 756                    extract_path_pattern_display(value),
 757                )
 758            } else if tool_name == FetchTool::NAME {
 759                (
 760                    extract_url_pattern(value),
 761                    extract_url_pattern_display(value),
 762                )
 763            } else {
 764                (None, None)
 765            }
 766        };
 767
 768        // Extract patterns from all input values. Only offer a pattern-specific
 769        // "always allow/deny" button when every value produces the same pattern.
 770        let (pattern, pattern_display) = match input_values.as_slice() {
 771            [single] => extract_for_value(single),
 772            _ => {
 773                let mut iter = input_values.iter().map(|v| extract_for_value(v));
 774                match iter.next() {
 775                    Some(first) => {
 776                        if iter.all(|pair| pair.0 == first.0) {
 777                            first
 778                        } else {
 779                            (None, None)
 780                        }
 781                    }
 782                    None => (None, None),
 783                }
 784            }
 785        };
 786
 787        let mut choices = Vec::new();
 788
 789        let mut push_choice = |label: String, allow_id, deny_id, allow_kind, deny_kind| {
 790            choices.push(acp_thread::PermissionOptionChoice {
 791                allow: acp::PermissionOption::new(
 792                    acp::PermissionOptionId::new(allow_id),
 793                    label.clone(),
 794                    allow_kind,
 795                ),
 796                deny: acp::PermissionOption::new(
 797                    acp::PermissionOptionId::new(deny_id),
 798                    label,
 799                    deny_kind,
 800                ),
 801            });
 802        };
 803
 804        if shell_supports_always_allow {
 805            push_choice(
 806                format!("Always for {}", tool_name.replace('_', " ")),
 807                format!("always_allow:{}", tool_name),
 808                format!("always_deny:{}", tool_name),
 809                acp::PermissionOptionKind::AllowAlways,
 810                acp::PermissionOptionKind::RejectAlways,
 811            );
 812
 813            if let (Some(pattern), Some(display)) = (pattern, pattern_display) {
 814                let button_text = if tool_name == TerminalTool::NAME {
 815                    format!("Always for `{}` commands", display)
 816                } else {
 817                    format!("Always for `{}`", display)
 818                };
 819                push_choice(
 820                    button_text,
 821                    format!("always_allow_pattern:{}\n{}", tool_name, pattern),
 822                    format!("always_deny_pattern:{}\n{}", tool_name, pattern),
 823                    acp::PermissionOptionKind::AllowAlways,
 824                    acp::PermissionOptionKind::RejectAlways,
 825                );
 826            }
 827        }
 828
 829        push_choice(
 830            "Only this time".to_string(),
 831            "allow".to_string(),
 832            "deny".to_string(),
 833            acp::PermissionOptionKind::AllowOnce,
 834            acp::PermissionOptionKind::RejectOnce,
 835        );
 836
 837        acp_thread::PermissionOptions::Dropdown(choices)
 838    }
 839}
 840
 841#[derive(Debug)]
 842pub struct ToolCallAuthorization {
 843    pub tool_call: acp::ToolCallUpdate,
 844    pub options: acp_thread::PermissionOptions,
 845    pub response: oneshot::Sender<acp::PermissionOptionId>,
 846    pub context: Option<ToolPermissionContext>,
 847}
 848
 849#[derive(Debug, thiserror::Error)]
 850enum CompletionError {
 851    #[error("max tokens")]
 852    MaxTokens,
 853    #[error("refusal")]
 854    Refusal,
 855    #[error(transparent)]
 856    Other(#[from] anyhow::Error),
 857}
 858
 859pub struct Thread {
 860    id: acp::SessionId,
 861    prompt_id: PromptId,
 862    updated_at: DateTime<Utc>,
 863    title: Option<SharedString>,
 864    pending_title_generation: Option<Task<()>>,
 865    pending_summary_generation: Option<Shared<Task<Option<SharedString>>>>,
 866    summary: Option<SharedString>,
 867    messages: Vec<Message>,
 868    user_store: Entity<UserStore>,
 869    /// Holds the task that handles agent interaction until the end of the turn.
 870    /// Survives across multiple requests as the model performs tool calls and
 871    /// we run tools, report their results.
 872    running_turn: Option<RunningTurn>,
 873    /// Flag indicating the UI has a queued message waiting to be sent.
 874    /// Used to signal that the turn should end at the next message boundary.
 875    has_queued_message: bool,
 876    pending_message: Option<AgentMessage>,
 877    pub(crate) tools: BTreeMap<SharedString, Arc<dyn AnyAgentTool>>,
 878    request_token_usage: HashMap<UserMessageId, language_model::TokenUsage>,
 879    #[allow(unused)]
 880    cumulative_token_usage: TokenUsage,
 881    #[allow(unused)]
 882    initial_project_snapshot: Shared<Task<Option<Arc<ProjectSnapshot>>>>,
 883    pub(crate) context_server_registry: Entity<ContextServerRegistry>,
 884    profile_id: AgentProfileId,
 885    project_context: Entity<ProjectContext>,
 886    pub(crate) templates: Arc<Templates>,
 887    model: Option<Arc<dyn LanguageModel>>,
 888    summarization_model: Option<Arc<dyn LanguageModel>>,
 889    thinking_enabled: bool,
 890    thinking_effort: Option<String>,
 891    speed: Option<Speed>,
 892    prompt_capabilities_tx: watch::Sender<acp::PromptCapabilities>,
 893    pub(crate) prompt_capabilities_rx: watch::Receiver<acp::PromptCapabilities>,
 894    pub(crate) project: Entity<Project>,
 895    pub(crate) action_log: Entity<ActionLog>,
 896    /// True if this thread was imported from a shared thread and can be synced.
 897    imported: bool,
 898    /// If this is a subagent thread, contains context about the parent
 899    subagent_context: Option<SubagentContext>,
 900    /// The user's unsent prompt text, persisted so it can be restored when reloading the thread.
 901    draft_prompt: Option<Vec<acp::ContentBlock>>,
 902    ui_scroll_position: Option<gpui::ListOffset>,
 903    /// Weak references to running subagent threads for cancellation propagation
 904    running_subagents: Vec<WeakEntity<Thread>>,
 905}
 906
 907impl Thread {
 908    fn prompt_capabilities(model: Option<&dyn LanguageModel>) -> acp::PromptCapabilities {
 909        let image = model.map_or(true, |model| model.supports_images());
 910        acp::PromptCapabilities::new()
 911            .image(image)
 912            .embedded_context(true)
 913    }
 914
 915    pub fn new_subagent(parent_thread: &Entity<Thread>, cx: &mut Context<Self>) -> Self {
 916        let project = parent_thread.read(cx).project.clone();
 917        let project_context = parent_thread.read(cx).project_context.clone();
 918        let context_server_registry = parent_thread.read(cx).context_server_registry.clone();
 919        let templates = parent_thread.read(cx).templates.clone();
 920        let model = parent_thread.read(cx).model().cloned();
 921        let parent_action_log = parent_thread.read(cx).action_log().clone();
 922        let action_log =
 923            cx.new(|_cx| ActionLog::new(project.clone()).with_linked_action_log(parent_action_log));
 924        let mut thread = Self::new_internal(
 925            project,
 926            project_context,
 927            context_server_registry,
 928            templates,
 929            model,
 930            action_log,
 931            cx,
 932        );
 933        thread.subagent_context = Some(SubagentContext {
 934            parent_thread_id: parent_thread.read(cx).id().clone(),
 935            depth: parent_thread.read(cx).depth() + 1,
 936        });
 937        thread
 938    }
 939
 940    pub fn new(
 941        project: Entity<Project>,
 942        project_context: Entity<ProjectContext>,
 943        context_server_registry: Entity<ContextServerRegistry>,
 944        templates: Arc<Templates>,
 945        model: Option<Arc<dyn LanguageModel>>,
 946        cx: &mut Context<Self>,
 947    ) -> Self {
 948        Self::new_internal(
 949            project.clone(),
 950            project_context,
 951            context_server_registry,
 952            templates,
 953            model,
 954            cx.new(|_cx| ActionLog::new(project)),
 955            cx,
 956        )
 957    }
 958
 959    fn new_internal(
 960        project: Entity<Project>,
 961        project_context: Entity<ProjectContext>,
 962        context_server_registry: Entity<ContextServerRegistry>,
 963        templates: Arc<Templates>,
 964        model: Option<Arc<dyn LanguageModel>>,
 965        action_log: Entity<ActionLog>,
 966        cx: &mut Context<Self>,
 967    ) -> Self {
 968        let settings = AgentSettings::get_global(cx);
 969        let profile_id = settings.default_profile.clone();
 970        let enable_thinking = settings
 971            .default_model
 972            .as_ref()
 973            .is_some_and(|model| model.enable_thinking);
 974        let thinking_effort = settings
 975            .default_model
 976            .as_ref()
 977            .and_then(|model| model.effort.clone());
 978        let (prompt_capabilities_tx, prompt_capabilities_rx) =
 979            watch::channel(Self::prompt_capabilities(model.as_deref()));
 980        Self {
 981            id: acp::SessionId::new(uuid::Uuid::new_v4().to_string()),
 982            prompt_id: PromptId::new(),
 983            updated_at: Utc::now(),
 984            title: None,
 985            pending_title_generation: None,
 986            pending_summary_generation: None,
 987            summary: None,
 988            messages: Vec::new(),
 989            user_store: project.read(cx).user_store(),
 990            running_turn: None,
 991            has_queued_message: false,
 992            pending_message: None,
 993            tools: BTreeMap::default(),
 994            request_token_usage: HashMap::default(),
 995            cumulative_token_usage: TokenUsage::default(),
 996            initial_project_snapshot: {
 997                let project_snapshot = Self::project_snapshot(project.clone(), cx);
 998                cx.foreground_executor()
 999                    .spawn(async move { Some(project_snapshot.await) })
1000                    .shared()
1001            },
1002            context_server_registry,
1003            profile_id,
1004            project_context,
1005            templates,
1006            model,
1007            summarization_model: None,
1008            thinking_enabled: enable_thinking,
1009            speed: None,
1010            thinking_effort,
1011            prompt_capabilities_tx,
1012            prompt_capabilities_rx,
1013            project,
1014            action_log,
1015            imported: false,
1016            subagent_context: None,
1017            draft_prompt: None,
1018            ui_scroll_position: None,
1019            running_subagents: Vec::new(),
1020        }
1021    }
1022
1023    pub fn id(&self) -> &acp::SessionId {
1024        &self.id
1025    }
1026
1027    /// Returns true if this thread was imported from a shared thread.
1028    pub fn is_imported(&self) -> bool {
1029        self.imported
1030    }
1031
1032    pub fn replay(
1033        &mut self,
1034        cx: &mut Context<Self>,
1035    ) -> mpsc::UnboundedReceiver<Result<ThreadEvent>> {
1036        let (tx, rx) = mpsc::unbounded();
1037        let stream = ThreadEventStream(tx);
1038        for message in &self.messages {
1039            match message {
1040                Message::User(user_message) => stream.send_user_message(user_message),
1041                Message::Agent(assistant_message) => {
1042                    for content in &assistant_message.content {
1043                        match content {
1044                            AgentMessageContent::Text(text) => stream.send_text(text),
1045                            AgentMessageContent::Thinking { text, .. } => {
1046                                stream.send_thinking(text)
1047                            }
1048                            AgentMessageContent::RedactedThinking(_) => {}
1049                            AgentMessageContent::ToolUse(tool_use) => {
1050                                self.replay_tool_call(
1051                                    tool_use,
1052                                    assistant_message.tool_results.get(&tool_use.id),
1053                                    &stream,
1054                                    cx,
1055                                );
1056                            }
1057                        }
1058                    }
1059                }
1060                Message::Resume => {}
1061            }
1062        }
1063        rx
1064    }
1065
1066    fn replay_tool_call(
1067        &self,
1068        tool_use: &LanguageModelToolUse,
1069        tool_result: Option<&LanguageModelToolResult>,
1070        stream: &ThreadEventStream,
1071        cx: &mut Context<Self>,
1072    ) {
1073        // Extract saved output and status first, so they're available even if tool is not found
1074        let output = tool_result
1075            .as_ref()
1076            .and_then(|result| result.output.clone());
1077        let status = tool_result
1078            .as_ref()
1079            .map_or(acp::ToolCallStatus::Failed, |result| {
1080                if result.is_error {
1081                    acp::ToolCallStatus::Failed
1082                } else {
1083                    acp::ToolCallStatus::Completed
1084                }
1085            });
1086
1087        let tool = self.tools.get(tool_use.name.as_ref()).cloned().or_else(|| {
1088            self.context_server_registry
1089                .read(cx)
1090                .servers()
1091                .find_map(|(_, tools)| {
1092                    if let Some(tool) = tools.get(tool_use.name.as_ref()) {
1093                        Some(tool.clone())
1094                    } else {
1095                        None
1096                    }
1097                })
1098        });
1099
1100        let Some(tool) = tool else {
1101            // Tool not found (e.g., MCP server not connected after restart),
1102            // but still display the saved result if available.
1103            // We need to send both ToolCall and ToolCallUpdate events because the UI
1104            // only converts raw_output to displayable content in update_fields, not from_acp.
1105            stream
1106                .0
1107                .unbounded_send(Ok(ThreadEvent::ToolCall(
1108                    acp::ToolCall::new(tool_use.id.to_string(), tool_use.name.to_string())
1109                        .status(status)
1110                        .raw_input(tool_use.input.clone()),
1111                )))
1112                .ok();
1113            stream.update_tool_call_fields(
1114                &tool_use.id,
1115                acp::ToolCallUpdateFields::new()
1116                    .status(status)
1117                    .raw_output(output),
1118                None,
1119            );
1120            return;
1121        };
1122
1123        let title = tool.initial_title(tool_use.input.clone(), cx);
1124        let kind = tool.kind();
1125        stream.send_tool_call(
1126            &tool_use.id,
1127            &tool_use.name,
1128            title,
1129            kind,
1130            tool_use.input.clone(),
1131        );
1132
1133        if let Some(output) = output.clone() {
1134            // For replay, we use a dummy cancellation receiver since the tool already completed
1135            let (_cancellation_tx, cancellation_rx) = watch::channel(false);
1136            let tool_event_stream = ToolCallEventStream::new(
1137                tool_use.id.clone(),
1138                stream.clone(),
1139                Some(self.project.read(cx).fs().clone()),
1140                cancellation_rx,
1141            );
1142            tool.replay(tool_use.input.clone(), output, tool_event_stream, cx)
1143                .log_err();
1144        }
1145
1146        stream.update_tool_call_fields(
1147            &tool_use.id,
1148            acp::ToolCallUpdateFields::new()
1149                .status(status)
1150                .raw_output(output),
1151            None,
1152        );
1153    }
1154
1155    pub fn from_db(
1156        id: acp::SessionId,
1157        db_thread: DbThread,
1158        project: Entity<Project>,
1159        project_context: Entity<ProjectContext>,
1160        context_server_registry: Entity<ContextServerRegistry>,
1161        templates: Arc<Templates>,
1162        cx: &mut Context<Self>,
1163    ) -> Self {
1164        let settings = AgentSettings::get_global(cx);
1165        let profile_id = db_thread
1166            .profile
1167            .unwrap_or_else(|| settings.default_profile.clone());
1168
1169        let mut model = LanguageModelRegistry::global(cx).update(cx, |registry, cx| {
1170            db_thread
1171                .model
1172                .and_then(|model| {
1173                    let model = SelectedModel {
1174                        provider: model.provider.clone().into(),
1175                        model: model.model.into(),
1176                    };
1177                    registry.select_model(&model, cx)
1178                })
1179                .or_else(|| registry.default_model())
1180                .map(|model| model.model)
1181        });
1182
1183        if model.is_none() {
1184            model = Self::resolve_profile_model(&profile_id, cx);
1185        }
1186        if model.is_none() {
1187            model = LanguageModelRegistry::global(cx).update(cx, |registry, _cx| {
1188                registry.default_model().map(|model| model.model)
1189            });
1190        }
1191
1192        let (prompt_capabilities_tx, prompt_capabilities_rx) =
1193            watch::channel(Self::prompt_capabilities(model.as_deref()));
1194
1195        let action_log = cx.new(|_| ActionLog::new(project.clone()));
1196
1197        Self {
1198            id,
1199            prompt_id: PromptId::new(),
1200            title: if db_thread.title.is_empty() {
1201                None
1202            } else {
1203                Some(db_thread.title.clone())
1204            },
1205            pending_title_generation: None,
1206            pending_summary_generation: None,
1207            summary: db_thread.detailed_summary,
1208            messages: db_thread.messages,
1209            user_store: project.read(cx).user_store(),
1210            running_turn: None,
1211            has_queued_message: false,
1212            pending_message: None,
1213            tools: BTreeMap::default(),
1214            request_token_usage: db_thread.request_token_usage.clone(),
1215            cumulative_token_usage: db_thread.cumulative_token_usage,
1216            initial_project_snapshot: Task::ready(db_thread.initial_project_snapshot).shared(),
1217            context_server_registry,
1218            profile_id,
1219            project_context,
1220            templates,
1221            model,
1222            summarization_model: None,
1223            thinking_enabled: db_thread.thinking_enabled,
1224            thinking_effort: db_thread.thinking_effort,
1225            speed: db_thread.speed,
1226            project,
1227            action_log,
1228            updated_at: db_thread.updated_at,
1229            prompt_capabilities_tx,
1230            prompt_capabilities_rx,
1231            imported: db_thread.imported,
1232            subagent_context: db_thread.subagent_context,
1233            draft_prompt: db_thread.draft_prompt,
1234            ui_scroll_position: db_thread.ui_scroll_position.map(|sp| gpui::ListOffset {
1235                item_ix: sp.item_ix,
1236                offset_in_item: gpui::px(sp.offset_in_item),
1237            }),
1238            running_subagents: Vec::new(),
1239        }
1240    }
1241
1242    pub fn to_db(&self, cx: &App) -> Task<DbThread> {
1243        let initial_project_snapshot = self.initial_project_snapshot.clone();
1244        let mut thread = DbThread {
1245            title: self.title(),
1246            messages: self.messages.clone(),
1247            updated_at: self.updated_at,
1248            detailed_summary: self.summary.clone(),
1249            initial_project_snapshot: None,
1250            cumulative_token_usage: self.cumulative_token_usage,
1251            request_token_usage: self.request_token_usage.clone(),
1252            model: self.model.as_ref().map(|model| DbLanguageModel {
1253                provider: model.provider_id().to_string(),
1254                model: model.id().0.to_string(),
1255            }),
1256            profile: Some(self.profile_id.clone()),
1257            imported: self.imported,
1258            subagent_context: self.subagent_context.clone(),
1259            speed: self.speed,
1260            thinking_enabled: self.thinking_enabled,
1261            thinking_effort: self.thinking_effort.clone(),
1262            draft_prompt: self.draft_prompt.clone(),
1263            ui_scroll_position: self.ui_scroll_position.map(|lo| {
1264                crate::db::SerializedScrollPosition {
1265                    item_ix: lo.item_ix,
1266                    offset_in_item: lo.offset_in_item.as_f32(),
1267                }
1268            }),
1269        };
1270
1271        cx.background_spawn(async move {
1272            let initial_project_snapshot = initial_project_snapshot.await;
1273            thread.initial_project_snapshot = initial_project_snapshot;
1274            thread
1275        })
1276    }
1277
1278    /// Create a snapshot of the current project state including git information and unsaved buffers.
1279    fn project_snapshot(
1280        project: Entity<Project>,
1281        cx: &mut Context<Self>,
1282    ) -> Task<Arc<ProjectSnapshot>> {
1283        let task = project::telemetry_snapshot::TelemetrySnapshot::new(&project, cx);
1284        cx.spawn(async move |_, _| {
1285            let snapshot = task.await;
1286
1287            Arc::new(ProjectSnapshot {
1288                worktree_snapshots: snapshot.worktree_snapshots,
1289                timestamp: Utc::now(),
1290            })
1291        })
1292    }
1293
1294    pub fn project_context(&self) -> &Entity<ProjectContext> {
1295        &self.project_context
1296    }
1297
1298    pub fn project(&self) -> &Entity<Project> {
1299        &self.project
1300    }
1301
1302    pub fn action_log(&self) -> &Entity<ActionLog> {
1303        &self.action_log
1304    }
1305
1306    pub fn is_empty(&self) -> bool {
1307        self.messages.is_empty() && self.title.is_none()
1308    }
1309
1310    pub fn draft_prompt(&self) -> Option<&[acp::ContentBlock]> {
1311        self.draft_prompt.as_deref()
1312    }
1313
1314    pub fn set_draft_prompt(&mut self, prompt: Option<Vec<acp::ContentBlock>>) {
1315        self.draft_prompt = prompt;
1316    }
1317
1318    pub fn ui_scroll_position(&self) -> Option<gpui::ListOffset> {
1319        self.ui_scroll_position
1320    }
1321
1322    pub fn set_ui_scroll_position(&mut self, position: Option<gpui::ListOffset>) {
1323        self.ui_scroll_position = position;
1324    }
1325
1326    pub fn model(&self) -> Option<&Arc<dyn LanguageModel>> {
1327        self.model.as_ref()
1328    }
1329
1330    pub fn set_model(&mut self, model: Arc<dyn LanguageModel>, cx: &mut Context<Self>) {
1331        let old_usage = self.latest_token_usage();
1332        self.model = Some(model.clone());
1333        let new_caps = Self::prompt_capabilities(self.model.as_deref());
1334        let new_usage = self.latest_token_usage();
1335        if old_usage != new_usage {
1336            cx.emit(TokenUsageUpdated(new_usage));
1337        }
1338        self.prompt_capabilities_tx.send(new_caps).log_err();
1339
1340        for subagent in &self.running_subagents {
1341            subagent
1342                .update(cx, |thread, cx| thread.set_model(model.clone(), cx))
1343                .ok();
1344        }
1345
1346        cx.notify()
1347    }
1348
1349    pub fn summarization_model(&self) -> Option<&Arc<dyn LanguageModel>> {
1350        self.summarization_model.as_ref()
1351    }
1352
1353    pub fn set_summarization_model(
1354        &mut self,
1355        model: Option<Arc<dyn LanguageModel>>,
1356        cx: &mut Context<Self>,
1357    ) {
1358        self.summarization_model = model.clone();
1359
1360        for subagent in &self.running_subagents {
1361            subagent
1362                .update(cx, |thread, cx| {
1363                    thread.set_summarization_model(model.clone(), cx)
1364                })
1365                .ok();
1366        }
1367        cx.notify()
1368    }
1369
1370    pub fn thinking_enabled(&self) -> bool {
1371        self.thinking_enabled
1372    }
1373
1374    pub fn set_thinking_enabled(&mut self, enabled: bool, cx: &mut Context<Self>) {
1375        self.thinking_enabled = enabled;
1376
1377        for subagent in &self.running_subagents {
1378            subagent
1379                .update(cx, |thread, cx| thread.set_thinking_enabled(enabled, cx))
1380                .ok();
1381        }
1382        cx.notify();
1383    }
1384
1385    pub fn thinking_effort(&self) -> Option<&String> {
1386        self.thinking_effort.as_ref()
1387    }
1388
1389    pub fn set_thinking_effort(&mut self, effort: Option<String>, cx: &mut Context<Self>) {
1390        self.thinking_effort = effort.clone();
1391
1392        for subagent in &self.running_subagents {
1393            subagent
1394                .update(cx, |thread, cx| {
1395                    thread.set_thinking_effort(effort.clone(), cx)
1396                })
1397                .ok();
1398        }
1399        cx.notify();
1400    }
1401
1402    pub fn speed(&self) -> Option<Speed> {
1403        self.speed
1404    }
1405
1406    pub fn set_speed(&mut self, speed: Speed, cx: &mut Context<Self>) {
1407        self.speed = Some(speed);
1408
1409        for subagent in &self.running_subagents {
1410            subagent
1411                .update(cx, |thread, cx| thread.set_speed(speed, cx))
1412                .ok();
1413        }
1414        cx.notify();
1415    }
1416
1417    pub fn last_message(&self) -> Option<&Message> {
1418        self.messages.last()
1419    }
1420
1421    #[cfg(any(test, feature = "test-support"))]
1422    pub fn last_received_or_pending_message(&self) -> Option<Message> {
1423        if let Some(message) = self.pending_message.clone() {
1424            Some(Message::Agent(message))
1425        } else {
1426            self.messages.last().cloned()
1427        }
1428    }
1429
1430    pub fn add_default_tools(
1431        &mut self,
1432        environment: Rc<dyn ThreadEnvironment>,
1433        cx: &mut Context<Self>,
1434    ) {
1435        // Only update the agent location for the root thread, not for subagents.
1436        let update_agent_location = self.parent_thread_id().is_none();
1437
1438        let language_registry = self.project.read(cx).languages().clone();
1439        self.add_tool(CopyPathTool::new(self.project.clone()));
1440        self.add_tool(CreateDirectoryTool::new(self.project.clone()));
1441        self.add_tool(DeletePathTool::new(
1442            self.project.clone(),
1443            self.action_log.clone(),
1444        ));
1445        self.add_tool(DiagnosticsTool::new(self.project.clone()));
1446        self.add_tool(EditFileTool::new(
1447            self.project.clone(),
1448            cx.weak_entity(),
1449            language_registry.clone(),
1450            Templates::new(),
1451        ));
1452        self.add_tool(StreamingEditFileTool::new(
1453            self.project.clone(),
1454            cx.weak_entity(),
1455            self.action_log.clone(),
1456            language_registry,
1457        ));
1458        self.add_tool(FetchTool::new(self.project.read(cx).client().http_client()));
1459        self.add_tool(FindPathTool::new(self.project.clone()));
1460        self.add_tool(GrepTool::new(self.project.clone()));
1461        self.add_tool(ListDirectoryTool::new(self.project.clone()));
1462        self.add_tool(MovePathTool::new(self.project.clone()));
1463        self.add_tool(NowTool);
1464        self.add_tool(OpenTool::new(self.project.clone()));
1465        self.add_tool(ReadFileTool::new(
1466            self.project.clone(),
1467            self.action_log.clone(),
1468            update_agent_location,
1469        ));
1470        self.add_tool(SaveFileTool::new(self.project.clone()));
1471        self.add_tool(RestoreFileFromDiskTool::new(self.project.clone()));
1472        self.add_tool(TerminalTool::new(self.project.clone(), environment.clone()));
1473        self.add_tool(WebSearchTool);
1474
1475        if self.depth() < MAX_SUBAGENT_DEPTH {
1476            self.add_tool(SpawnAgentTool::new(environment));
1477        }
1478    }
1479
1480    pub fn add_tool<T: AgentTool>(&mut self, tool: T) {
1481        debug_assert!(
1482            !self.tools.contains_key(T::NAME),
1483            "Duplicate tool name: {}",
1484            T::NAME,
1485        );
1486        self.tools.insert(T::NAME.into(), tool.erase());
1487    }
1488
1489    #[cfg(any(test, feature = "test-support"))]
1490    pub fn remove_tool(&mut self, name: &str) -> bool {
1491        self.tools.remove(name).is_some()
1492    }
1493
1494    pub fn profile(&self) -> &AgentProfileId {
1495        &self.profile_id
1496    }
1497
1498    pub fn set_profile(&mut self, profile_id: AgentProfileId, cx: &mut Context<Self>) {
1499        if self.profile_id == profile_id {
1500            return;
1501        }
1502
1503        self.profile_id = profile_id.clone();
1504
1505        // Swap to the profile's preferred model when available.
1506        if let Some(model) = Self::resolve_profile_model(&self.profile_id, cx) {
1507            self.set_model(model, cx);
1508        }
1509
1510        for subagent in &self.running_subagents {
1511            subagent
1512                .update(cx, |thread, cx| thread.set_profile(profile_id.clone(), cx))
1513                .ok();
1514        }
1515    }
1516
1517    pub fn cancel(&mut self, cx: &mut Context<Self>) -> Task<()> {
1518        for subagent in self.running_subagents.drain(..) {
1519            if let Some(subagent) = subagent.upgrade() {
1520                subagent.update(cx, |thread, cx| thread.cancel(cx)).detach();
1521            }
1522        }
1523
1524        let Some(running_turn) = self.running_turn.take() else {
1525            self.flush_pending_message(cx);
1526            return Task::ready(());
1527        };
1528
1529        let turn_task = running_turn.cancel();
1530
1531        cx.spawn(async move |this, cx| {
1532            turn_task.await;
1533            this.update(cx, |this, cx| {
1534                this.flush_pending_message(cx);
1535            })
1536            .ok();
1537        })
1538    }
1539
1540    pub fn set_has_queued_message(&mut self, has_queued: bool) {
1541        self.has_queued_message = has_queued;
1542    }
1543
1544    pub fn has_queued_message(&self) -> bool {
1545        self.has_queued_message
1546    }
1547
1548    fn update_token_usage(&mut self, update: language_model::TokenUsage, cx: &mut Context<Self>) {
1549        let Some(last_user_message) = self.last_user_message() else {
1550            return;
1551        };
1552
1553        self.request_token_usage
1554            .insert(last_user_message.id.clone(), update);
1555        cx.emit(TokenUsageUpdated(self.latest_token_usage()));
1556        cx.notify();
1557    }
1558
1559    pub fn truncate(&mut self, message_id: UserMessageId, cx: &mut Context<Self>) -> Result<()> {
1560        self.cancel(cx).detach();
1561        // Clear pending message since cancel will try to flush it asynchronously,
1562        // and we don't want that content to be added after we truncate
1563        self.pending_message.take();
1564        let Some(position) = self.messages.iter().position(
1565            |msg| matches!(msg, Message::User(UserMessage { id, .. }) if id == &message_id),
1566        ) else {
1567            return Err(anyhow!("Message not found"));
1568        };
1569
1570        for message in self.messages.drain(position..) {
1571            match message {
1572                Message::User(message) => {
1573                    self.request_token_usage.remove(&message.id);
1574                }
1575                Message::Agent(_) | Message::Resume => {}
1576            }
1577        }
1578        self.clear_summary();
1579        cx.notify();
1580        Ok(())
1581    }
1582
1583    pub fn latest_request_token_usage(&self) -> Option<language_model::TokenUsage> {
1584        let last_user_message = self.last_user_message()?;
1585        let tokens = self.request_token_usage.get(&last_user_message.id)?;
1586        Some(*tokens)
1587    }
1588
1589    pub fn latest_token_usage(&self) -> Option<acp_thread::TokenUsage> {
1590        let usage = self.latest_request_token_usage()?;
1591        let model = self.model.clone()?;
1592        Some(acp_thread::TokenUsage {
1593            max_tokens: model.max_token_count(),
1594            max_output_tokens: model.max_output_tokens(),
1595            used_tokens: usage.total_tokens(),
1596            input_tokens: usage.input_tokens,
1597            output_tokens: usage.output_tokens,
1598        })
1599    }
1600
1601    /// Get the total input token count as of the message before the given message.
1602    ///
1603    /// Returns `None` if:
1604    /// - `target_id` is the first message (no previous message)
1605    /// - The previous message hasn't received a response yet (no usage data)
1606    /// - `target_id` is not found in the messages
1607    pub fn tokens_before_message(&self, target_id: &UserMessageId) -> Option<u64> {
1608        let mut previous_user_message_id: Option<&UserMessageId> = None;
1609
1610        for message in &self.messages {
1611            if let Message::User(user_msg) = message {
1612                if &user_msg.id == target_id {
1613                    let prev_id = previous_user_message_id?;
1614                    let usage = self.request_token_usage.get(prev_id)?;
1615                    return Some(usage.input_tokens);
1616                }
1617                previous_user_message_id = Some(&user_msg.id);
1618            }
1619        }
1620        None
1621    }
1622
1623    /// Look up the active profile and resolve its preferred model if one is configured.
1624    fn resolve_profile_model(
1625        profile_id: &AgentProfileId,
1626        cx: &mut Context<Self>,
1627    ) -> Option<Arc<dyn LanguageModel>> {
1628        let selection = AgentSettings::get_global(cx)
1629            .profiles
1630            .get(profile_id)?
1631            .default_model
1632            .clone()?;
1633        Self::resolve_model_from_selection(&selection, cx)
1634    }
1635
1636    /// Translate a stored model selection into the configured model from the registry.
1637    fn resolve_model_from_selection(
1638        selection: &LanguageModelSelection,
1639        cx: &mut Context<Self>,
1640    ) -> Option<Arc<dyn LanguageModel>> {
1641        let selected = SelectedModel {
1642            provider: LanguageModelProviderId::from(selection.provider.0.clone()),
1643            model: LanguageModelId::from(selection.model.clone()),
1644        };
1645        LanguageModelRegistry::global(cx).update(cx, |registry, cx| {
1646            registry
1647                .select_model(&selected, cx)
1648                .map(|configured| configured.model)
1649        })
1650    }
1651
1652    pub fn resume(
1653        &mut self,
1654        cx: &mut Context<Self>,
1655    ) -> Result<mpsc::UnboundedReceiver<Result<ThreadEvent>>> {
1656        self.messages.push(Message::Resume);
1657        cx.notify();
1658
1659        log::debug!("Total messages in thread: {}", self.messages.len());
1660        self.run_turn(cx)
1661    }
1662
1663    /// Sending a message results in the model streaming a response, which could include tool calls.
1664    /// After calling tools, the model will stops and waits for any outstanding tool calls to be completed and their results sent.
1665    /// The returned channel will report all the occurrences in which the model stops before erroring or ending its turn.
1666    pub fn send<T>(
1667        &mut self,
1668        id: UserMessageId,
1669        content: impl IntoIterator<Item = T>,
1670        cx: &mut Context<Self>,
1671    ) -> Result<mpsc::UnboundedReceiver<Result<ThreadEvent>>>
1672    where
1673        T: Into<UserMessageContent>,
1674    {
1675        let content = content.into_iter().map(Into::into).collect::<Vec<_>>();
1676        log::debug!("Thread::send content: {:?}", content);
1677
1678        self.messages
1679            .push(Message::User(UserMessage { id, content }));
1680        cx.notify();
1681
1682        self.send_existing(cx)
1683    }
1684
1685    pub fn send_existing(
1686        &mut self,
1687        cx: &mut Context<Self>,
1688    ) -> Result<mpsc::UnboundedReceiver<Result<ThreadEvent>>> {
1689        let model = self.model().context("No language model configured")?;
1690
1691        log::info!("Thread::send called with model: {}", model.name().0);
1692        self.advance_prompt_id();
1693
1694        log::debug!("Total messages in thread: {}", self.messages.len());
1695        self.run_turn(cx)
1696    }
1697
1698    pub fn push_acp_user_block(
1699        &mut self,
1700        id: UserMessageId,
1701        blocks: impl IntoIterator<Item = acp::ContentBlock>,
1702        path_style: PathStyle,
1703        cx: &mut Context<Self>,
1704    ) {
1705        let content = blocks
1706            .into_iter()
1707            .map(|block| UserMessageContent::from_content_block(block, path_style))
1708            .collect::<Vec<_>>();
1709        self.messages
1710            .push(Message::User(UserMessage { id, content }));
1711        cx.notify();
1712    }
1713
1714    pub fn push_acp_agent_block(&mut self, block: acp::ContentBlock, cx: &mut Context<Self>) {
1715        let text = match block {
1716            acp::ContentBlock::Text(text_content) => text_content.text,
1717            acp::ContentBlock::Image(_) => "[image]".to_string(),
1718            acp::ContentBlock::Audio(_) => "[audio]".to_string(),
1719            acp::ContentBlock::ResourceLink(resource_link) => resource_link.uri,
1720            acp::ContentBlock::Resource(resource) => match resource.resource {
1721                acp::EmbeddedResourceResource::TextResourceContents(resource) => resource.uri,
1722                acp::EmbeddedResourceResource::BlobResourceContents(resource) => resource.uri,
1723                _ => "[resource]".to_string(),
1724            },
1725            _ => "[unknown]".to_string(),
1726        };
1727
1728        self.messages.push(Message::Agent(AgentMessage {
1729            content: vec![AgentMessageContent::Text(text)],
1730            ..Default::default()
1731        }));
1732        cx.notify();
1733    }
1734
1735    #[cfg(feature = "eval")]
1736    pub fn proceed(
1737        &mut self,
1738        cx: &mut Context<Self>,
1739    ) -> Result<mpsc::UnboundedReceiver<Result<ThreadEvent>>> {
1740        self.run_turn(cx)
1741    }
1742
1743    fn run_turn(
1744        &mut self,
1745        cx: &mut Context<Self>,
1746    ) -> Result<mpsc::UnboundedReceiver<Result<ThreadEvent>>> {
1747        // Flush the old pending message synchronously before cancelling,
1748        // to avoid a race where the detached cancel task might flush the NEW
1749        // turn's pending message instead of the old one.
1750        self.flush_pending_message(cx);
1751        self.cancel(cx).detach();
1752
1753        let model = self.model.clone().context("No language model configured")?;
1754        let profile = AgentSettings::get_global(cx)
1755            .profiles
1756            .get(&self.profile_id)
1757            .context("Profile not found")?;
1758        let (events_tx, events_rx) = mpsc::unbounded::<Result<ThreadEvent>>();
1759        let event_stream = ThreadEventStream(events_tx);
1760        let message_ix = self.messages.len().saturating_sub(1);
1761        self.clear_summary();
1762        let (cancellation_tx, mut cancellation_rx) = watch::channel(false);
1763        self.running_turn = Some(RunningTurn {
1764            event_stream: event_stream.clone(),
1765            tools: self.enabled_tools(profile, &model, cx),
1766            cancellation_tx,
1767            streaming_tool_inputs: HashMap::default(),
1768            _task: cx.spawn(async move |this, cx| {
1769                log::debug!("Starting agent turn execution");
1770
1771                let turn_result = Self::run_turn_internal(
1772                    &this,
1773                    model,
1774                    &event_stream,
1775                    cancellation_rx.clone(),
1776                    cx,
1777                )
1778                .await;
1779
1780                // Check if we were cancelled - if so, cancel() already took running_turn
1781                // and we shouldn't touch it (it might be a NEW turn now)
1782                let was_cancelled = *cancellation_rx.borrow();
1783                if was_cancelled {
1784                    log::debug!("Turn was cancelled, skipping cleanup");
1785                    return;
1786                }
1787
1788                _ = this.update(cx, |this, cx| this.flush_pending_message(cx));
1789
1790                match turn_result {
1791                    Ok(()) => {
1792                        log::debug!("Turn execution completed");
1793                        event_stream.send_stop(acp::StopReason::EndTurn);
1794                    }
1795                    Err(error) => {
1796                        log::error!("Turn execution failed: {:?}", error);
1797                        match error.downcast::<CompletionError>() {
1798                            Ok(CompletionError::Refusal) => {
1799                                event_stream.send_stop(acp::StopReason::Refusal);
1800                                _ = this.update(cx, |this, _| this.messages.truncate(message_ix));
1801                            }
1802                            Ok(CompletionError::MaxTokens) => {
1803                                event_stream.send_stop(acp::StopReason::MaxTokens);
1804                            }
1805                            Ok(CompletionError::Other(error)) | Err(error) => {
1806                                event_stream.send_error(error);
1807                            }
1808                        }
1809                    }
1810                }
1811
1812                _ = this.update(cx, |this, _| this.running_turn.take());
1813            }),
1814        });
1815        Ok(events_rx)
1816    }
1817
1818    async fn run_turn_internal(
1819        this: &WeakEntity<Self>,
1820        model: Arc<dyn LanguageModel>,
1821        event_stream: &ThreadEventStream,
1822        mut cancellation_rx: watch::Receiver<bool>,
1823        cx: &mut AsyncApp,
1824    ) -> Result<()> {
1825        let mut attempt = 0;
1826        let mut intent = CompletionIntent::UserPrompt;
1827        loop {
1828            let request =
1829                this.update(cx, |this, cx| this.build_completion_request(intent, cx))??;
1830
1831            telemetry::event!(
1832                "Agent Thread Completion",
1833                thread_id = this.read_with(cx, |this, _| this.id.to_string())?,
1834                parent_thread_id = this.read_with(cx, |this, _| this
1835                    .parent_thread_id()
1836                    .map(|id| id.to_string()))?,
1837                prompt_id = this.read_with(cx, |this, _| this.prompt_id.to_string())?,
1838                model = model.telemetry_id(),
1839                model_provider = model.provider_id().to_string(),
1840                attempt
1841            );
1842
1843            log::debug!("Calling model.stream_completion, attempt {}", attempt);
1844
1845            let (mut events, mut error) = match model.stream_completion(request, cx).await {
1846                Ok(events) => (events.fuse(), None),
1847                Err(err) => (stream::empty().boxed().fuse(), Some(err)),
1848            };
1849            let mut tool_results: FuturesUnordered<Task<LanguageModelToolResult>> =
1850                FuturesUnordered::new();
1851            let mut early_tool_results: Vec<LanguageModelToolResult> = Vec::new();
1852            let mut cancelled = false;
1853            loop {
1854                // Race between getting the first event, tool completion, and cancellation.
1855                let first_event = futures::select! {
1856                    event = events.next().fuse() => event,
1857                    tool_result = futures::StreamExt::select_next_some(&mut tool_results) => {
1858                        let is_error = tool_result.is_error;
1859                        let is_still_streaming = this
1860                            .read_with(cx, |this, _cx| {
1861                                this.running_turn
1862                                    .as_ref()
1863                                    .and_then(|turn| turn.streaming_tool_inputs.get(&tool_result.tool_use_id))
1864                                    .map_or(false, |inputs| !inputs.has_received_final())
1865                            })
1866                            .unwrap_or(false);
1867
1868                        early_tool_results.push(tool_result);
1869
1870                        // Only break if the tool errored and we are still
1871                        // streaming the input of the tool. If the tool errored
1872                        // but we are no longer streaming its input (i.e. there
1873                        // are parallel tool calls) we want to continue
1874                        // processing those tool inputs.
1875                        if is_error && is_still_streaming {
1876                            break;
1877                        }
1878                        continue;
1879                    }
1880                    _ = cancellation_rx.changed().fuse() => {
1881                        if *cancellation_rx.borrow() {
1882                            cancelled = true;
1883                            break;
1884                        }
1885                        continue;
1886                    }
1887                };
1888                let Some(first_event) = first_event else {
1889                    break;
1890                };
1891
1892                // Collect all immediately available events to process as a batch
1893                let mut batch = vec![first_event];
1894                while let Some(event) = events.next().now_or_never().flatten() {
1895                    batch.push(event);
1896                }
1897
1898                // Process the batch in a single update
1899                let batch_result = this.update(cx, |this, cx| {
1900                    let mut batch_tool_results = Vec::new();
1901                    let mut batch_error = None;
1902
1903                    for event in batch {
1904                        log::trace!("Received completion event: {:?}", event);
1905                        match event {
1906                            Ok(event) => {
1907                                match this.handle_completion_event(
1908                                    event,
1909                                    event_stream,
1910                                    cancellation_rx.clone(),
1911                                    cx,
1912                                ) {
1913                                    Ok(Some(task)) => batch_tool_results.push(task),
1914                                    Ok(None) => {}
1915                                    Err(err) => {
1916                                        batch_error = Some(err);
1917                                        break;
1918                                    }
1919                                }
1920                            }
1921                            Err(err) => {
1922                                batch_error = Some(err.into());
1923                                break;
1924                            }
1925                        }
1926                    }
1927
1928                    cx.notify();
1929                    (batch_tool_results, batch_error)
1930                })?;
1931
1932                tool_results.extend(batch_result.0);
1933                if let Some(err) = batch_result.1 {
1934                    error = Some(err.downcast()?);
1935                    break;
1936                }
1937            }
1938
1939            // Drop the stream to release the rate limit permit before tool execution.
1940            // The stream holds a semaphore guard that limits concurrent requests.
1941            // Without this, the permit would be held during potentially long-running
1942            // tool execution, which could cause deadlocks when tools spawn subagents
1943            // that need their own permits.
1944            drop(events);
1945
1946            // Drop streaming tool input senders that never received their final input.
1947            // This prevents deadlock when the LLM stream ends (e.g. because of an error)
1948            // before sending a tool use with `is_input_complete: true`.
1949            this.update(cx, |this, _cx| {
1950                if let Some(running_turn) = this.running_turn.as_mut() {
1951                    if running_turn.streaming_tool_inputs.is_empty() {
1952                        return;
1953                    }
1954                    log::warn!("Dropping partial tool inputs because the stream ended");
1955                    running_turn.streaming_tool_inputs.drain();
1956                }
1957            })?;
1958
1959            let end_turn = tool_results.is_empty() && early_tool_results.is_empty();
1960
1961            for tool_result in early_tool_results {
1962                Self::process_tool_result(this, event_stream, cx, tool_result)?;
1963            }
1964            while let Some(tool_result) = tool_results.next().await {
1965                Self::process_tool_result(this, event_stream, cx, tool_result)?;
1966            }
1967
1968            this.update(cx, |this, cx| {
1969                this.flush_pending_message(cx);
1970                if this.title.is_none() && this.pending_title_generation.is_none() {
1971                    this.generate_title(cx);
1972                }
1973            })?;
1974
1975            if cancelled {
1976                log::debug!("Turn cancelled by user, exiting");
1977                return Ok(());
1978            }
1979
1980            if let Some(error) = error {
1981                attempt += 1;
1982                let retry = this.update(cx, |this, cx| {
1983                    let user_store = this.user_store.read(cx);
1984                    this.handle_completion_error(error, attempt, user_store.plan())
1985                })??;
1986                let timer = cx.background_executor().timer(retry.duration);
1987                event_stream.send_retry(retry);
1988                futures::select! {
1989                    _ = timer.fuse() => {}
1990                    _ = cancellation_rx.changed().fuse() => {
1991                        if *cancellation_rx.borrow() {
1992                            log::debug!("Turn cancelled during retry delay, exiting");
1993                            return Ok(());
1994                        }
1995                    }
1996                }
1997                this.update(cx, |this, _cx| {
1998                    if let Some(Message::Agent(message)) = this.messages.last() {
1999                        if message.tool_results.is_empty() {
2000                            intent = CompletionIntent::UserPrompt;
2001                            this.messages.push(Message::Resume);
2002                        }
2003                    }
2004                })?;
2005            } else if end_turn {
2006                return Ok(());
2007            } else {
2008                let has_queued = this.update(cx, |this, _| this.has_queued_message())?;
2009                if has_queued {
2010                    log::debug!("Queued message found, ending turn at message boundary");
2011                    return Ok(());
2012                }
2013                intent = CompletionIntent::ToolResults;
2014                attempt = 0;
2015            }
2016        }
2017    }
2018
2019    fn process_tool_result(
2020        this: &WeakEntity<Thread>,
2021        event_stream: &ThreadEventStream,
2022        cx: &mut AsyncApp,
2023        tool_result: LanguageModelToolResult,
2024    ) -> Result<(), anyhow::Error> {
2025        log::debug!("Tool finished {:?}", tool_result);
2026
2027        event_stream.update_tool_call_fields(
2028            &tool_result.tool_use_id,
2029            acp::ToolCallUpdateFields::new()
2030                .status(if tool_result.is_error {
2031                    acp::ToolCallStatus::Failed
2032                } else {
2033                    acp::ToolCallStatus::Completed
2034                })
2035                .raw_output(tool_result.output.clone()),
2036            None,
2037        );
2038        this.update(cx, |this, _cx| {
2039            this.pending_message()
2040                .tool_results
2041                .insert(tool_result.tool_use_id.clone(), tool_result);
2042        })?;
2043        Ok(())
2044    }
2045
2046    fn handle_completion_error(
2047        &mut self,
2048        error: LanguageModelCompletionError,
2049        attempt: u8,
2050        plan: Option<Plan>,
2051    ) -> Result<acp_thread::RetryStatus> {
2052        let Some(model) = self.model.as_ref() else {
2053            return Err(anyhow!(error));
2054        };
2055
2056        let auto_retry = if model.provider_id() == ZED_CLOUD_PROVIDER_ID {
2057            plan.is_some()
2058        } else {
2059            true
2060        };
2061
2062        if !auto_retry {
2063            return Err(anyhow!(error));
2064        }
2065
2066        let Some(strategy) = Self::retry_strategy_for(&error) else {
2067            return Err(anyhow!(error));
2068        };
2069
2070        let max_attempts = match &strategy {
2071            RetryStrategy::ExponentialBackoff { max_attempts, .. } => *max_attempts,
2072            RetryStrategy::Fixed { max_attempts, .. } => *max_attempts,
2073        };
2074
2075        if attempt > max_attempts {
2076            return Err(anyhow!(error));
2077        }
2078
2079        let delay = match &strategy {
2080            RetryStrategy::ExponentialBackoff { initial_delay, .. } => {
2081                let delay_secs = initial_delay.as_secs() * 2u64.pow((attempt - 1) as u32);
2082                Duration::from_secs(delay_secs)
2083            }
2084            RetryStrategy::Fixed { delay, .. } => *delay,
2085        };
2086        log::debug!("Retry attempt {attempt} with delay {delay:?}");
2087
2088        Ok(acp_thread::RetryStatus {
2089            last_error: error.to_string().into(),
2090            attempt: attempt as usize,
2091            max_attempts: max_attempts as usize,
2092            started_at: Instant::now(),
2093            duration: delay,
2094        })
2095    }
2096
2097    /// A helper method that's called on every streamed completion event.
2098    /// Returns an optional tool result task, which the main agentic loop will
2099    /// send back to the model when it resolves.
2100    fn handle_completion_event(
2101        &mut self,
2102        event: LanguageModelCompletionEvent,
2103        event_stream: &ThreadEventStream,
2104        cancellation_rx: watch::Receiver<bool>,
2105        cx: &mut Context<Self>,
2106    ) -> Result<Option<Task<LanguageModelToolResult>>> {
2107        log::trace!("Handling streamed completion event: {:?}", event);
2108        use LanguageModelCompletionEvent::*;
2109
2110        match event {
2111            StartMessage { .. } => {
2112                self.flush_pending_message(cx);
2113                self.pending_message = Some(AgentMessage::default());
2114            }
2115            Text(new_text) => self.handle_text_event(new_text, event_stream),
2116            Thinking { text, signature } => {
2117                self.handle_thinking_event(text, signature, event_stream)
2118            }
2119            RedactedThinking { data } => self.handle_redacted_thinking_event(data),
2120            ReasoningDetails(details) => {
2121                let last_message = self.pending_message();
2122                // Store the last non-empty reasoning_details (overwrites earlier ones)
2123                // This ensures we keep the encrypted reasoning with signatures, not the early text reasoning
2124                if let serde_json::Value::Array(ref arr) = details {
2125                    if !arr.is_empty() {
2126                        last_message.reasoning_details = Some(details);
2127                    }
2128                } else {
2129                    last_message.reasoning_details = Some(details);
2130                }
2131            }
2132            ToolUse(tool_use) => {
2133                return Ok(self.handle_tool_use_event(tool_use, event_stream, cancellation_rx, cx));
2134            }
2135            ToolUseJsonParseError {
2136                id,
2137                tool_name,
2138                raw_input,
2139                json_parse_error,
2140            } => {
2141                return Ok(Some(Task::ready(
2142                    self.handle_tool_use_json_parse_error_event(
2143                        id,
2144                        tool_name,
2145                        raw_input,
2146                        json_parse_error,
2147                        event_stream,
2148                    ),
2149                )));
2150            }
2151            UsageUpdate(usage) => {
2152                telemetry::event!(
2153                    "Agent Thread Completion Usage Updated",
2154                    thread_id = self.id.to_string(),
2155                    parent_thread_id = self.parent_thread_id().map(|id| id.to_string()),
2156                    prompt_id = self.prompt_id.to_string(),
2157                    model = self.model.as_ref().map(|m| m.telemetry_id()),
2158                    model_provider = self.model.as_ref().map(|m| m.provider_id().to_string()),
2159                    input_tokens = usage.input_tokens,
2160                    output_tokens = usage.output_tokens,
2161                    cache_creation_input_tokens = usage.cache_creation_input_tokens,
2162                    cache_read_input_tokens = usage.cache_read_input_tokens,
2163                );
2164                self.update_token_usage(usage, cx);
2165            }
2166            Stop(StopReason::Refusal) => return Err(CompletionError::Refusal.into()),
2167            Stop(StopReason::MaxTokens) => return Err(CompletionError::MaxTokens.into()),
2168            Stop(StopReason::ToolUse | StopReason::EndTurn) => {}
2169            Started | Queued { .. } => {}
2170        }
2171
2172        Ok(None)
2173    }
2174
2175    fn handle_text_event(&mut self, new_text: String, event_stream: &ThreadEventStream) {
2176        event_stream.send_text(&new_text);
2177
2178        let last_message = self.pending_message();
2179        if let Some(AgentMessageContent::Text(text)) = last_message.content.last_mut() {
2180            text.push_str(&new_text);
2181        } else {
2182            last_message
2183                .content
2184                .push(AgentMessageContent::Text(new_text));
2185        }
2186    }
2187
2188    fn handle_thinking_event(
2189        &mut self,
2190        new_text: String,
2191        new_signature: Option<String>,
2192        event_stream: &ThreadEventStream,
2193    ) {
2194        event_stream.send_thinking(&new_text);
2195
2196        let last_message = self.pending_message();
2197        if let Some(AgentMessageContent::Thinking { text, signature }) =
2198            last_message.content.last_mut()
2199        {
2200            text.push_str(&new_text);
2201            *signature = new_signature.or(signature.take());
2202        } else {
2203            last_message.content.push(AgentMessageContent::Thinking {
2204                text: new_text,
2205                signature: new_signature,
2206            });
2207        }
2208    }
2209
2210    fn handle_redacted_thinking_event(&mut self, data: String) {
2211        let last_message = self.pending_message();
2212        last_message
2213            .content
2214            .push(AgentMessageContent::RedactedThinking(data));
2215    }
2216
2217    fn handle_tool_use_event(
2218        &mut self,
2219        tool_use: LanguageModelToolUse,
2220        event_stream: &ThreadEventStream,
2221        cancellation_rx: watch::Receiver<bool>,
2222        cx: &mut Context<Self>,
2223    ) -> Option<Task<LanguageModelToolResult>> {
2224        cx.notify();
2225
2226        let tool = self.tool(tool_use.name.as_ref());
2227        let mut title = SharedString::from(&tool_use.name);
2228        let mut kind = acp::ToolKind::Other;
2229        if let Some(tool) = tool.as_ref() {
2230            title = tool.initial_title(tool_use.input.clone(), cx);
2231            kind = tool.kind();
2232        }
2233
2234        self.send_or_update_tool_use(&tool_use, title, kind, event_stream);
2235
2236        let Some(tool) = tool else {
2237            let content = format!("No tool named {} exists", tool_use.name);
2238            return Some(Task::ready(LanguageModelToolResult {
2239                content: LanguageModelToolResultContent::Text(Arc::from(content)),
2240                tool_use_id: tool_use.id,
2241                tool_name: tool_use.name,
2242                is_error: true,
2243                output: None,
2244            }));
2245        };
2246
2247        if !tool_use.is_input_complete {
2248            if tool.supports_input_streaming() {
2249                let running_turn = self.running_turn.as_mut()?;
2250                if let Some(sender) = running_turn.streaming_tool_inputs.get(&tool_use.id) {
2251                    sender.send_partial(tool_use.input);
2252                    return None;
2253                }
2254
2255                let (sender, tool_input) = ToolInputSender::channel();
2256                sender.send_partial(tool_use.input);
2257                running_turn
2258                    .streaming_tool_inputs
2259                    .insert(tool_use.id.clone(), sender);
2260
2261                let tool = tool.clone();
2262                log::debug!("Running streaming tool {}", tool_use.name);
2263                return Some(self.run_tool(
2264                    tool,
2265                    tool_input,
2266                    tool_use.id,
2267                    tool_use.name,
2268                    event_stream,
2269                    cancellation_rx,
2270                    cx,
2271                ));
2272            } else {
2273                return None;
2274            }
2275        }
2276
2277        if let Some(sender) = self
2278            .running_turn
2279            .as_mut()?
2280            .streaming_tool_inputs
2281            .remove(&tool_use.id)
2282        {
2283            sender.send_final(tool_use.input);
2284            return None;
2285        }
2286
2287        log::debug!("Running tool {}", tool_use.name);
2288        let tool_input = ToolInput::ready(tool_use.input);
2289        Some(self.run_tool(
2290            tool,
2291            tool_input,
2292            tool_use.id,
2293            tool_use.name,
2294            event_stream,
2295            cancellation_rx,
2296            cx,
2297        ))
2298    }
2299
2300    fn run_tool(
2301        &self,
2302        tool: Arc<dyn AnyAgentTool>,
2303        tool_input: ToolInput<serde_json::Value>,
2304        tool_use_id: LanguageModelToolUseId,
2305        tool_name: Arc<str>,
2306        event_stream: &ThreadEventStream,
2307        cancellation_rx: watch::Receiver<bool>,
2308        cx: &mut Context<Self>,
2309    ) -> Task<LanguageModelToolResult> {
2310        let fs = self.project.read(cx).fs().clone();
2311        let tool_event_stream = ToolCallEventStream::new(
2312            tool_use_id.clone(),
2313            event_stream.clone(),
2314            Some(fs),
2315            cancellation_rx,
2316        );
2317        tool_event_stream.update_fields(
2318            acp::ToolCallUpdateFields::new().status(acp::ToolCallStatus::InProgress),
2319        );
2320        let supports_images = self.model().is_some_and(|model| model.supports_images());
2321        let tool_result = tool.run(tool_input, tool_event_stream, cx);
2322        cx.foreground_executor().spawn(async move {
2323            let (is_error, output) = match tool_result.await {
2324                Ok(mut output) => {
2325                    if let LanguageModelToolResultContent::Image(_) = &output.llm_output
2326                        && !supports_images
2327                    {
2328                        output = AgentToolOutput::from_error(
2329                            "Attempted to read an image, but this model doesn't support it.",
2330                        );
2331                        (true, output)
2332                    } else {
2333                        (false, output)
2334                    }
2335                }
2336                Err(output) => (true, output),
2337            };
2338
2339            LanguageModelToolResult {
2340                tool_use_id,
2341                tool_name,
2342                is_error,
2343                content: output.llm_output,
2344                output: Some(output.raw_output),
2345            }
2346        })
2347    }
2348
2349    fn handle_tool_use_json_parse_error_event(
2350        &mut self,
2351        tool_use_id: LanguageModelToolUseId,
2352        tool_name: Arc<str>,
2353        raw_input: Arc<str>,
2354        json_parse_error: String,
2355        event_stream: &ThreadEventStream,
2356    ) -> LanguageModelToolResult {
2357        let tool_use = LanguageModelToolUse {
2358            id: tool_use_id.clone(),
2359            name: tool_name.clone(),
2360            raw_input: raw_input.to_string(),
2361            input: serde_json::json!({}),
2362            is_input_complete: true,
2363            thought_signature: None,
2364        };
2365        self.send_or_update_tool_use(
2366            &tool_use,
2367            SharedString::from(&tool_use.name),
2368            acp::ToolKind::Other,
2369            event_stream,
2370        );
2371
2372        let tool_output = format!("Error parsing input JSON: {json_parse_error}");
2373        LanguageModelToolResult {
2374            tool_use_id,
2375            tool_name,
2376            is_error: true,
2377            content: LanguageModelToolResultContent::Text(tool_output.into()),
2378            output: Some(serde_json::Value::String(raw_input.to_string())),
2379        }
2380    }
2381
2382    fn send_or_update_tool_use(
2383        &mut self,
2384        tool_use: &LanguageModelToolUse,
2385        title: SharedString,
2386        kind: acp::ToolKind,
2387        event_stream: &ThreadEventStream,
2388    ) {
2389        // Ensure the last message ends in the current tool use
2390        let last_message = self.pending_message();
2391
2392        let has_tool_use = last_message.content.iter_mut().rev().any(|content| {
2393            if let AgentMessageContent::ToolUse(last_tool_use) = content {
2394                if last_tool_use.id == tool_use.id {
2395                    *last_tool_use = tool_use.clone();
2396                    return true;
2397                }
2398            }
2399            false
2400        });
2401
2402        if !has_tool_use {
2403            event_stream.send_tool_call(
2404                &tool_use.id,
2405                &tool_use.name,
2406                title,
2407                kind,
2408                tool_use.input.clone(),
2409            );
2410            last_message
2411                .content
2412                .push(AgentMessageContent::ToolUse(tool_use.clone()));
2413        } else {
2414            event_stream.update_tool_call_fields(
2415                &tool_use.id,
2416                acp::ToolCallUpdateFields::new()
2417                    .title(title.as_str())
2418                    .kind(kind)
2419                    .raw_input(tool_use.input.clone()),
2420                None,
2421            );
2422        }
2423    }
2424
2425    pub fn title(&self) -> SharedString {
2426        self.title.clone().unwrap_or("New Thread".into())
2427    }
2428
2429    pub fn is_generating_summary(&self) -> bool {
2430        self.pending_summary_generation.is_some()
2431    }
2432
2433    pub fn is_generating_title(&self) -> bool {
2434        self.pending_title_generation.is_some()
2435    }
2436
2437    pub fn summary(&mut self, cx: &mut Context<Self>) -> Shared<Task<Option<SharedString>>> {
2438        if let Some(summary) = self.summary.as_ref() {
2439            return Task::ready(Some(summary.clone())).shared();
2440        }
2441        if let Some(task) = self.pending_summary_generation.clone() {
2442            return task;
2443        }
2444        let Some(model) = self.summarization_model.clone() else {
2445            log::error!("No summarization model available");
2446            return Task::ready(None).shared();
2447        };
2448        let mut request = LanguageModelRequest {
2449            intent: Some(CompletionIntent::ThreadContextSummarization),
2450            temperature: AgentSettings::temperature_for_model(&model, cx),
2451            ..Default::default()
2452        };
2453
2454        for message in &self.messages {
2455            request.messages.extend(message.to_request());
2456        }
2457
2458        request.messages.push(LanguageModelRequestMessage {
2459            role: Role::User,
2460            content: vec![SUMMARIZE_THREAD_DETAILED_PROMPT.into()],
2461            cache: false,
2462            reasoning_details: None,
2463        });
2464
2465        let task = cx
2466            .spawn(async move |this, cx| {
2467                let mut summary = String::new();
2468                let mut messages = model.stream_completion(request, cx).await.log_err()?;
2469                while let Some(event) = messages.next().await {
2470                    let event = event.log_err()?;
2471                    let text = match event {
2472                        LanguageModelCompletionEvent::Text(text) => text,
2473                        _ => continue,
2474                    };
2475
2476                    let mut lines = text.lines();
2477                    summary.extend(lines.next());
2478                }
2479
2480                log::debug!("Setting summary: {}", summary);
2481                let summary = SharedString::from(summary);
2482
2483                this.update(cx, |this, cx| {
2484                    this.summary = Some(summary.clone());
2485                    this.pending_summary_generation = None;
2486                    cx.notify()
2487                })
2488                .ok()?;
2489
2490                Some(summary)
2491            })
2492            .shared();
2493        self.pending_summary_generation = Some(task.clone());
2494        task
2495    }
2496
2497    pub fn generate_title(&mut self, cx: &mut Context<Self>) {
2498        let Some(model) = self.summarization_model.clone() else {
2499            return;
2500        };
2501
2502        log::debug!(
2503            "Generating title with model: {:?}",
2504            self.summarization_model.as_ref().map(|model| model.name())
2505        );
2506        let mut request = LanguageModelRequest {
2507            intent: Some(CompletionIntent::ThreadSummarization),
2508            temperature: AgentSettings::temperature_for_model(&model, cx),
2509            ..Default::default()
2510        };
2511
2512        for message in &self.messages {
2513            request.messages.extend(message.to_request());
2514        }
2515
2516        request.messages.push(LanguageModelRequestMessage {
2517            role: Role::User,
2518            content: vec![SUMMARIZE_THREAD_PROMPT.into()],
2519            cache: false,
2520            reasoning_details: None,
2521        });
2522        self.pending_title_generation = Some(cx.spawn(async move |this, cx| {
2523            let mut title = String::new();
2524
2525            let generate = async {
2526                let mut messages = model.stream_completion(request, cx).await?;
2527                while let Some(event) = messages.next().await {
2528                    let event = event?;
2529                    let text = match event {
2530                        LanguageModelCompletionEvent::Text(text) => text,
2531                        _ => continue,
2532                    };
2533
2534                    let mut lines = text.lines();
2535                    title.extend(lines.next());
2536
2537                    // Stop if the LLM generated multiple lines.
2538                    if lines.next().is_some() {
2539                        break;
2540                    }
2541                }
2542                anyhow::Ok(())
2543            };
2544
2545            if generate
2546                .await
2547                .context("failed to generate thread title")
2548                .log_err()
2549                .is_some()
2550            {
2551                _ = this.update(cx, |this, cx| this.set_title(title.into(), cx));
2552            }
2553            _ = this.update(cx, |this, _| this.pending_title_generation = None);
2554        }));
2555    }
2556
2557    pub fn set_title(&mut self, title: SharedString, cx: &mut Context<Self>) {
2558        self.pending_title_generation = None;
2559        if Some(&title) != self.title.as_ref() {
2560            self.title = Some(title);
2561            cx.emit(TitleUpdated);
2562            cx.notify();
2563        }
2564    }
2565
2566    fn clear_summary(&mut self) {
2567        self.summary = None;
2568        self.pending_summary_generation = None;
2569    }
2570
2571    fn last_user_message(&self) -> Option<&UserMessage> {
2572        self.messages
2573            .iter()
2574            .rev()
2575            .find_map(|message| match message {
2576                Message::User(user_message) => Some(user_message),
2577                Message::Agent(_) => None,
2578                Message::Resume => None,
2579            })
2580    }
2581
2582    fn pending_message(&mut self) -> &mut AgentMessage {
2583        self.pending_message.get_or_insert_default()
2584    }
2585
2586    fn flush_pending_message(&mut self, cx: &mut Context<Self>) {
2587        let Some(mut message) = self.pending_message.take() else {
2588            return;
2589        };
2590
2591        if message.content.is_empty() {
2592            return;
2593        }
2594
2595        for content in &message.content {
2596            let AgentMessageContent::ToolUse(tool_use) = content else {
2597                continue;
2598            };
2599
2600            if !message.tool_results.contains_key(&tool_use.id) {
2601                message.tool_results.insert(
2602                    tool_use.id.clone(),
2603                    LanguageModelToolResult {
2604                        tool_use_id: tool_use.id.clone(),
2605                        tool_name: tool_use.name.clone(),
2606                        is_error: true,
2607                        content: LanguageModelToolResultContent::Text(TOOL_CANCELED_MESSAGE.into()),
2608                        output: None,
2609                    },
2610                );
2611            }
2612        }
2613
2614        self.messages.push(Message::Agent(message));
2615        self.updated_at = Utc::now();
2616        self.clear_summary();
2617        cx.notify()
2618    }
2619
2620    pub(crate) fn build_completion_request(
2621        &self,
2622        completion_intent: CompletionIntent,
2623        cx: &App,
2624    ) -> Result<LanguageModelRequest> {
2625        let model = self.model().context("No language model configured")?;
2626        let tools = if let Some(turn) = self.running_turn.as_ref() {
2627            turn.tools
2628                .iter()
2629                .filter_map(|(tool_name, tool)| {
2630                    log::trace!("Including tool: {}", tool_name);
2631                    Some(LanguageModelRequestTool {
2632                        name: tool_name.to_string(),
2633                        description: tool.description().to_string(),
2634                        input_schema: tool.input_schema(model.tool_input_format()).log_err()?,
2635                        use_input_streaming: tool.supports_input_streaming(),
2636                    })
2637                })
2638                .collect::<Vec<_>>()
2639        } else {
2640            Vec::new()
2641        };
2642
2643        log::debug!("Building completion request");
2644        log::debug!("Completion intent: {:?}", completion_intent);
2645
2646        let available_tools: Vec<_> = self
2647            .running_turn
2648            .as_ref()
2649            .map(|turn| turn.tools.keys().cloned().collect())
2650            .unwrap_or_default();
2651
2652        log::debug!("Request includes {} tools", available_tools.len());
2653        let messages = self.build_request_messages(available_tools, cx);
2654        log::debug!("Request will include {} messages", messages.len());
2655
2656        let request = LanguageModelRequest {
2657            thread_id: Some(self.id.to_string()),
2658            prompt_id: Some(self.prompt_id.to_string()),
2659            intent: Some(completion_intent),
2660            messages,
2661            tools,
2662            tool_choice: None,
2663            stop: Vec::new(),
2664            temperature: AgentSettings::temperature_for_model(model, cx),
2665            thinking_allowed: self.thinking_enabled,
2666            thinking_effort: self.thinking_effort.clone(),
2667            speed: self.speed(),
2668        };
2669
2670        log::debug!("Completion request built successfully");
2671        Ok(request)
2672    }
2673
2674    fn enabled_tools(
2675        &self,
2676        profile: &AgentProfileSettings,
2677        model: &Arc<dyn LanguageModel>,
2678        cx: &App,
2679    ) -> BTreeMap<SharedString, Arc<dyn AnyAgentTool>> {
2680        fn truncate(tool_name: &SharedString) -> SharedString {
2681            if tool_name.len() > MAX_TOOL_NAME_LENGTH {
2682                let mut truncated = tool_name.to_string();
2683                truncated.truncate(MAX_TOOL_NAME_LENGTH);
2684                truncated.into()
2685            } else {
2686                tool_name.clone()
2687            }
2688        }
2689
2690        let use_streaming_edit_tool =
2691            cx.has_flag::<StreamingEditFileToolFeatureFlag>() && model.supports_streaming_tools();
2692
2693        let mut tools = self
2694            .tools
2695            .iter()
2696            .filter_map(|(tool_name, tool)| {
2697                // For streaming_edit_file, check profile against "edit_file" since that's what users configure
2698                let profile_tool_name = if tool_name == StreamingEditFileTool::NAME {
2699                    EditFileTool::NAME
2700                } else {
2701                    tool_name.as_ref()
2702                };
2703
2704                if tool.supports_provider(&model.provider_id())
2705                    && profile.is_tool_enabled(profile_tool_name)
2706                {
2707                    match (tool_name.as_ref(), use_streaming_edit_tool) {
2708                        (StreamingEditFileTool::NAME, false) | (EditFileTool::NAME, true) => None,
2709                        (StreamingEditFileTool::NAME, true) => {
2710                            // Expose streaming tool as "edit_file"
2711                            Some((SharedString::from(EditFileTool::NAME), tool.clone()))
2712                        }
2713                        _ => Some((truncate(tool_name), tool.clone())),
2714                    }
2715                } else {
2716                    None
2717                }
2718            })
2719            .collect::<BTreeMap<_, _>>();
2720
2721        let mut context_server_tools = Vec::new();
2722        let mut seen_tools = tools.keys().cloned().collect::<HashSet<_>>();
2723        let mut duplicate_tool_names = HashSet::default();
2724        for (server_id, server_tools) in self.context_server_registry.read(cx).servers() {
2725            for (tool_name, tool) in server_tools {
2726                if profile.is_context_server_tool_enabled(&server_id.0, &tool_name) {
2727                    let tool_name = truncate(tool_name);
2728                    if !seen_tools.insert(tool_name.clone()) {
2729                        duplicate_tool_names.insert(tool_name.clone());
2730                    }
2731                    context_server_tools.push((server_id.clone(), tool_name, tool.clone()));
2732                }
2733            }
2734        }
2735
2736        // When there are duplicate tool names, disambiguate by prefixing them
2737        // with the server ID (converted to snake_case for API compatibility).
2738        // In the rare case there isn't enough space for the disambiguated tool
2739        // name, keep only the last tool with this name.
2740        for (server_id, tool_name, tool) in context_server_tools {
2741            if duplicate_tool_names.contains(&tool_name) {
2742                let available = MAX_TOOL_NAME_LENGTH.saturating_sub(tool_name.len());
2743                if available >= 2 {
2744                    let mut disambiguated = server_id.0.to_snake_case();
2745                    disambiguated.truncate(available - 1);
2746                    disambiguated.push('_');
2747                    disambiguated.push_str(&tool_name);
2748                    tools.insert(disambiguated.into(), tool.clone());
2749                } else {
2750                    tools.insert(tool_name, tool.clone());
2751                }
2752            } else {
2753                tools.insert(tool_name, tool.clone());
2754            }
2755        }
2756
2757        tools
2758    }
2759
2760    fn tool(&self, name: &str) -> Option<Arc<dyn AnyAgentTool>> {
2761        self.running_turn.as_ref()?.tools.get(name).cloned()
2762    }
2763
2764    pub fn has_tool(&self, name: &str) -> bool {
2765        self.running_turn
2766            .as_ref()
2767            .is_some_and(|turn| turn.tools.contains_key(name))
2768    }
2769
2770    #[cfg(any(test, feature = "test-support"))]
2771    pub fn has_registered_tool(&self, name: &str) -> bool {
2772        self.tools.contains_key(name)
2773    }
2774
2775    pub fn registered_tool_names(&self) -> Vec<SharedString> {
2776        self.tools.keys().cloned().collect()
2777    }
2778
2779    pub(crate) fn register_running_subagent(&mut self, subagent: WeakEntity<Thread>) {
2780        self.running_subagents.push(subagent);
2781    }
2782
2783    pub(crate) fn unregister_running_subagent(
2784        &mut self,
2785        subagent_session_id: &acp::SessionId,
2786        cx: &App,
2787    ) {
2788        self.running_subagents.retain(|s| {
2789            s.upgrade()
2790                .map_or(false, |s| s.read(cx).id() != subagent_session_id)
2791        });
2792    }
2793
2794    #[cfg(any(test, feature = "test-support"))]
2795    pub fn running_subagent_ids(&self, cx: &App) -> Vec<acp::SessionId> {
2796        self.running_subagents
2797            .iter()
2798            .filter_map(|s| s.upgrade().map(|s| s.read(cx).id().clone()))
2799            .collect()
2800    }
2801
2802    pub fn is_subagent(&self) -> bool {
2803        self.subagent_context.is_some()
2804    }
2805
2806    pub fn parent_thread_id(&self) -> Option<acp::SessionId> {
2807        self.subagent_context
2808            .as_ref()
2809            .map(|c| c.parent_thread_id.clone())
2810    }
2811
2812    pub fn depth(&self) -> u8 {
2813        self.subagent_context.as_ref().map(|c| c.depth).unwrap_or(0)
2814    }
2815
2816    #[cfg(any(test, feature = "test-support"))]
2817    pub fn set_subagent_context(&mut self, context: SubagentContext) {
2818        self.subagent_context = Some(context);
2819    }
2820
2821    pub fn is_turn_complete(&self) -> bool {
2822        self.running_turn.is_none()
2823    }
2824
2825    fn build_request_messages(
2826        &self,
2827        available_tools: Vec<SharedString>,
2828        cx: &App,
2829    ) -> Vec<LanguageModelRequestMessage> {
2830        log::trace!(
2831            "Building request messages from {} thread messages",
2832            self.messages.len()
2833        );
2834
2835        let system_prompt = SystemPromptTemplate {
2836            project: self.project_context.read(cx),
2837            available_tools,
2838            model_name: self.model.as_ref().map(|m| m.name().0.to_string()),
2839        }
2840        .render(&self.templates)
2841        .context("failed to build system prompt")
2842        .expect("Invalid template");
2843        let mut messages = vec![LanguageModelRequestMessage {
2844            role: Role::System,
2845            content: vec![system_prompt.into()],
2846            cache: false,
2847            reasoning_details: None,
2848        }];
2849        for message in &self.messages {
2850            messages.extend(message.to_request());
2851        }
2852
2853        if let Some(last_message) = messages.last_mut() {
2854            last_message.cache = true;
2855        }
2856
2857        if let Some(message) = self.pending_message.as_ref() {
2858            messages.extend(message.to_request());
2859        }
2860
2861        messages
2862    }
2863
2864    pub fn to_markdown(&self) -> String {
2865        let mut markdown = String::new();
2866        for (ix, message) in self.messages.iter().enumerate() {
2867            if ix > 0 {
2868                markdown.push('\n');
2869            }
2870            match message {
2871                Message::User(_) => markdown.push_str("## User\n\n"),
2872                Message::Agent(_) => markdown.push_str("## Assistant\n\n"),
2873                Message::Resume => {}
2874            }
2875            markdown.push_str(&message.to_markdown());
2876        }
2877
2878        if let Some(message) = self.pending_message.as_ref() {
2879            markdown.push_str("\n## Assistant\n\n");
2880            markdown.push_str(&message.to_markdown());
2881        }
2882
2883        markdown
2884    }
2885
2886    fn advance_prompt_id(&mut self) {
2887        self.prompt_id = PromptId::new();
2888    }
2889
2890    fn retry_strategy_for(error: &LanguageModelCompletionError) -> Option<RetryStrategy> {
2891        use LanguageModelCompletionError::*;
2892        use http_client::StatusCode;
2893
2894        // General strategy here:
2895        // - If retrying won't help (e.g. invalid API key or payload too large), return None so we don't retry at all.
2896        // - If it's a time-based issue (e.g. server overloaded, rate limit exceeded), retry up to 4 times with exponential backoff.
2897        // - If it's an issue that *might* be fixed by retrying (e.g. internal server error), retry up to 3 times.
2898        match error {
2899            HttpResponseError {
2900                status_code: StatusCode::TOO_MANY_REQUESTS,
2901                ..
2902            } => Some(RetryStrategy::ExponentialBackoff {
2903                initial_delay: BASE_RETRY_DELAY,
2904                max_attempts: MAX_RETRY_ATTEMPTS,
2905            }),
2906            ServerOverloaded { retry_after, .. } | RateLimitExceeded { retry_after, .. } => {
2907                Some(RetryStrategy::Fixed {
2908                    delay: retry_after.unwrap_or(BASE_RETRY_DELAY),
2909                    max_attempts: MAX_RETRY_ATTEMPTS,
2910                })
2911            }
2912            UpstreamProviderError {
2913                status,
2914                retry_after,
2915                ..
2916            } => match *status {
2917                StatusCode::TOO_MANY_REQUESTS | StatusCode::SERVICE_UNAVAILABLE => {
2918                    Some(RetryStrategy::Fixed {
2919                        delay: retry_after.unwrap_or(BASE_RETRY_DELAY),
2920                        max_attempts: MAX_RETRY_ATTEMPTS,
2921                    })
2922                }
2923                StatusCode::INTERNAL_SERVER_ERROR => Some(RetryStrategy::Fixed {
2924                    delay: retry_after.unwrap_or(BASE_RETRY_DELAY),
2925                    // Internal Server Error could be anything, retry up to 3 times.
2926                    max_attempts: 3,
2927                }),
2928                status => {
2929                    // There is no StatusCode variant for the unofficial HTTP 529 ("The service is overloaded"),
2930                    // but we frequently get them in practice. See https://http.dev/529
2931                    if status.as_u16() == 529 {
2932                        Some(RetryStrategy::Fixed {
2933                            delay: retry_after.unwrap_or(BASE_RETRY_DELAY),
2934                            max_attempts: MAX_RETRY_ATTEMPTS,
2935                        })
2936                    } else {
2937                        Some(RetryStrategy::Fixed {
2938                            delay: retry_after.unwrap_or(BASE_RETRY_DELAY),
2939                            max_attempts: 2,
2940                        })
2941                    }
2942                }
2943            },
2944            ApiInternalServerError { .. } => Some(RetryStrategy::Fixed {
2945                delay: BASE_RETRY_DELAY,
2946                max_attempts: 3,
2947            }),
2948            ApiReadResponseError { .. }
2949            | HttpSend { .. }
2950            | DeserializeResponse { .. }
2951            | BadRequestFormat { .. } => Some(RetryStrategy::Fixed {
2952                delay: BASE_RETRY_DELAY,
2953                max_attempts: 3,
2954            }),
2955            // Retrying these errors definitely shouldn't help.
2956            HttpResponseError {
2957                status_code:
2958                    StatusCode::PAYLOAD_TOO_LARGE | StatusCode::FORBIDDEN | StatusCode::UNAUTHORIZED,
2959                ..
2960            }
2961            | AuthenticationError { .. }
2962            | PermissionError { .. }
2963            | NoApiKey { .. }
2964            | ApiEndpointNotFound { .. }
2965            | PromptTooLarge { .. } => None,
2966            // These errors might be transient, so retry them
2967            SerializeRequest { .. } | BuildRequestBody { .. } | StreamEndedUnexpectedly { .. } => {
2968                Some(RetryStrategy::Fixed {
2969                    delay: BASE_RETRY_DELAY,
2970                    max_attempts: 1,
2971                })
2972            }
2973            // Retry all other 4xx and 5xx errors once.
2974            HttpResponseError { status_code, .. }
2975                if status_code.is_client_error() || status_code.is_server_error() =>
2976            {
2977                Some(RetryStrategy::Fixed {
2978                    delay: BASE_RETRY_DELAY,
2979                    max_attempts: 3,
2980                })
2981            }
2982            Other(err) if err.is::<language_model::PaymentRequiredError>() => {
2983                // Retrying won't help for Payment Required errors.
2984                None
2985            }
2986            // Conservatively assume that any other errors are non-retryable
2987            HttpResponseError { .. } | Other(..) => Some(RetryStrategy::Fixed {
2988                delay: BASE_RETRY_DELAY,
2989                max_attempts: 2,
2990            }),
2991        }
2992    }
2993}
2994
2995struct RunningTurn {
2996    /// Holds the task that handles agent interaction until the end of the turn.
2997    /// Survives across multiple requests as the model performs tool calls and
2998    /// we run tools, report their results.
2999    _task: Task<()>,
3000    /// The current event stream for the running turn. Used to report a final
3001    /// cancellation event if we cancel the turn.
3002    event_stream: ThreadEventStream,
3003    /// The tools that were enabled for this turn.
3004    tools: BTreeMap<SharedString, Arc<dyn AnyAgentTool>>,
3005    /// Sender to signal tool cancellation. When cancel is called, this is
3006    /// set to true so all tools can detect user-initiated cancellation.
3007    cancellation_tx: watch::Sender<bool>,
3008    /// Senders for tools that support input streaming and have already been
3009    /// started but are still receiving input from the LLM.
3010    streaming_tool_inputs: HashMap<LanguageModelToolUseId, ToolInputSender>,
3011}
3012
3013impl RunningTurn {
3014    fn cancel(mut self) -> Task<()> {
3015        log::debug!("Cancelling in progress turn");
3016        self.cancellation_tx.send(true).ok();
3017        self.event_stream.send_canceled();
3018        self._task
3019    }
3020}
3021
3022pub struct TokenUsageUpdated(pub Option<acp_thread::TokenUsage>);
3023
3024impl EventEmitter<TokenUsageUpdated> for Thread {}
3025
3026pub struct TitleUpdated;
3027
3028impl EventEmitter<TitleUpdated> for Thread {}
3029
3030/// A channel-based wrapper that delivers tool input to a running tool.
3031///
3032/// For non-streaming tools, created via `ToolInput::ready()` so `.recv()` resolves immediately.
3033/// For streaming tools, partial JSON snapshots arrive via `.recv_partial()` as the LLM streams
3034/// them, followed by the final complete input available through `.recv()`.
3035pub struct ToolInput<T> {
3036    partial_rx: mpsc::UnboundedReceiver<serde_json::Value>,
3037    final_rx: oneshot::Receiver<serde_json::Value>,
3038    _phantom: PhantomData<T>,
3039}
3040
3041impl<T: DeserializeOwned> ToolInput<T> {
3042    #[cfg(any(test, feature = "test-support"))]
3043    pub fn resolved(input: impl Serialize) -> Self {
3044        let value = serde_json::to_value(input).expect("failed to serialize tool input");
3045        Self::ready(value)
3046    }
3047
3048    pub fn ready(value: serde_json::Value) -> Self {
3049        let (partial_tx, partial_rx) = mpsc::unbounded();
3050        drop(partial_tx);
3051        let (final_tx, final_rx) = oneshot::channel();
3052        final_tx.send(value).ok();
3053        Self {
3054            partial_rx,
3055            final_rx,
3056            _phantom: PhantomData,
3057        }
3058    }
3059
3060    #[cfg(any(test, feature = "test-support"))]
3061    pub fn test() -> (ToolInputSender, Self) {
3062        let (sender, input) = ToolInputSender::channel();
3063        (sender, input.cast())
3064    }
3065
3066    /// Wait for the final deserialized input, ignoring all partial updates.
3067    /// Non-streaming tools can use this to wait until the whole input is available.
3068    pub async fn recv(mut self) -> Result<T> {
3069        // Drain any remaining partials
3070        while self.partial_rx.next().await.is_some() {}
3071        let value = self
3072            .final_rx
3073            .await
3074            .map_err(|_| anyhow!("tool input was not fully received"))?;
3075        serde_json::from_value(value).map_err(Into::into)
3076    }
3077
3078    /// Returns the next partial JSON snapshot, or `None` when input is complete.
3079    /// Once this returns `None`, call `recv()` to get the final input.
3080    pub async fn recv_partial(&mut self) -> Option<serde_json::Value> {
3081        self.partial_rx.next().await
3082    }
3083
3084    fn cast<U: DeserializeOwned>(self) -> ToolInput<U> {
3085        ToolInput {
3086            partial_rx: self.partial_rx,
3087            final_rx: self.final_rx,
3088            _phantom: PhantomData,
3089        }
3090    }
3091}
3092
3093pub struct ToolInputSender {
3094    partial_tx: mpsc::UnboundedSender<serde_json::Value>,
3095    final_tx: Option<oneshot::Sender<serde_json::Value>>,
3096}
3097
3098impl ToolInputSender {
3099    pub(crate) fn channel() -> (Self, ToolInput<serde_json::Value>) {
3100        let (partial_tx, partial_rx) = mpsc::unbounded();
3101        let (final_tx, final_rx) = oneshot::channel();
3102        let sender = Self {
3103            partial_tx,
3104            final_tx: Some(final_tx),
3105        };
3106        let input = ToolInput {
3107            partial_rx,
3108            final_rx,
3109            _phantom: PhantomData,
3110        };
3111        (sender, input)
3112    }
3113
3114    pub(crate) fn has_received_final(&self) -> bool {
3115        self.final_tx.is_none()
3116    }
3117
3118    pub(crate) fn send_partial(&self, value: serde_json::Value) {
3119        self.partial_tx.unbounded_send(value).ok();
3120    }
3121
3122    pub(crate) fn send_final(mut self, value: serde_json::Value) {
3123        // Close the partial channel so recv_partial() returns None
3124        self.partial_tx.close_channel();
3125        if let Some(final_tx) = self.final_tx.take() {
3126            final_tx.send(value).ok();
3127        }
3128    }
3129}
3130
3131pub trait AgentTool
3132where
3133    Self: 'static + Sized,
3134{
3135    type Input: for<'de> Deserialize<'de> + Serialize + JsonSchema;
3136    type Output: for<'de> Deserialize<'de> + Serialize + Into<LanguageModelToolResultContent>;
3137
3138    const NAME: &'static str;
3139
3140    fn description() -> SharedString {
3141        let schema = schemars::schema_for!(Self::Input);
3142        SharedString::new(
3143            schema
3144                .get("description")
3145                .and_then(|description| description.as_str())
3146                .unwrap_or_default(),
3147        )
3148    }
3149
3150    fn kind() -> acp::ToolKind;
3151
3152    /// The initial tool title to display. Can be updated during the tool run.
3153    fn initial_title(
3154        &self,
3155        input: Result<Self::Input, serde_json::Value>,
3156        cx: &mut App,
3157    ) -> SharedString;
3158
3159    /// Returns the JSON schema that describes the tool's input.
3160    fn input_schema(format: LanguageModelToolSchemaFormat) -> Schema {
3161        language_model::tool_schema::root_schema_for::<Self::Input>(format)
3162    }
3163
3164    /// Returns whether the tool supports streaming of tool use parameters.
3165    fn supports_input_streaming() -> bool {
3166        false
3167    }
3168
3169    /// Some tools rely on a provider for the underlying billing or other reasons.
3170    /// Allow the tool to check if they are compatible, or should be filtered out.
3171    fn supports_provider(_provider: &LanguageModelProviderId) -> bool {
3172        true
3173    }
3174
3175    /// Runs the tool with the provided input.
3176    ///
3177    /// Returns `Result<Self::Output, Self::Output>` rather than `Result<Self::Output, anyhow::Error>`
3178    /// because tool errors are sent back to the model as tool results. This means error output must
3179    /// be structured and readable by the agent — not an arbitrary `anyhow::Error`. Returning the
3180    /// same `Output` type for both success and failure lets tools provide structured data while
3181    /// still signaling whether the invocation succeeded or failed.
3182    fn run(
3183        self: Arc<Self>,
3184        input: ToolInput<Self::Input>,
3185        event_stream: ToolCallEventStream,
3186        cx: &mut App,
3187    ) -> Task<Result<Self::Output, Self::Output>>;
3188
3189    /// Emits events for a previous execution of the tool.
3190    fn replay(
3191        &self,
3192        _input: Self::Input,
3193        _output: Self::Output,
3194        _event_stream: ToolCallEventStream,
3195        _cx: &mut App,
3196    ) -> Result<()> {
3197        Ok(())
3198    }
3199
3200    fn erase(self) -> Arc<dyn AnyAgentTool> {
3201        Arc::new(Erased(Arc::new(self)))
3202    }
3203}
3204
3205pub struct Erased<T>(T);
3206
3207pub struct AgentToolOutput {
3208    pub llm_output: LanguageModelToolResultContent,
3209    pub raw_output: serde_json::Value,
3210}
3211
3212impl AgentToolOutput {
3213    pub fn from_error(message: impl Into<String>) -> Self {
3214        let message = message.into();
3215        let llm_output = LanguageModelToolResultContent::Text(Arc::from(message.as_str()));
3216        Self {
3217            raw_output: serde_json::Value::String(message),
3218            llm_output,
3219        }
3220    }
3221}
3222
3223pub trait AnyAgentTool {
3224    fn name(&self) -> SharedString;
3225    fn description(&self) -> SharedString;
3226    fn kind(&self) -> acp::ToolKind;
3227    fn initial_title(&self, input: serde_json::Value, _cx: &mut App) -> SharedString;
3228    fn input_schema(&self, format: LanguageModelToolSchemaFormat) -> Result<serde_json::Value>;
3229    fn supports_input_streaming(&self) -> bool {
3230        false
3231    }
3232    fn supports_provider(&self, _provider: &LanguageModelProviderId) -> bool {
3233        true
3234    }
3235    /// See [`AgentTool::run`] for why this returns `Result<AgentToolOutput, AgentToolOutput>`.
3236    fn run(
3237        self: Arc<Self>,
3238        input: ToolInput<serde_json::Value>,
3239        event_stream: ToolCallEventStream,
3240        cx: &mut App,
3241    ) -> Task<Result<AgentToolOutput, AgentToolOutput>>;
3242    fn replay(
3243        &self,
3244        input: serde_json::Value,
3245        output: serde_json::Value,
3246        event_stream: ToolCallEventStream,
3247        cx: &mut App,
3248    ) -> Result<()>;
3249}
3250
3251impl<T> AnyAgentTool for Erased<Arc<T>>
3252where
3253    T: AgentTool,
3254{
3255    fn name(&self) -> SharedString {
3256        T::NAME.into()
3257    }
3258
3259    fn description(&self) -> SharedString {
3260        T::description()
3261    }
3262
3263    fn kind(&self) -> agent_client_protocol::ToolKind {
3264        T::kind()
3265    }
3266
3267    fn supports_input_streaming(&self) -> bool {
3268        T::supports_input_streaming()
3269    }
3270
3271    fn initial_title(&self, input: serde_json::Value, _cx: &mut App) -> SharedString {
3272        let parsed_input = serde_json::from_value(input.clone()).map_err(|_| input);
3273        self.0.initial_title(parsed_input, _cx)
3274    }
3275
3276    fn input_schema(&self, format: LanguageModelToolSchemaFormat) -> Result<serde_json::Value> {
3277        let mut json = serde_json::to_value(T::input_schema(format))?;
3278        language_model::tool_schema::adapt_schema_to_format(&mut json, format)?;
3279        Ok(json)
3280    }
3281
3282    fn supports_provider(&self, provider: &LanguageModelProviderId) -> bool {
3283        T::supports_provider(provider)
3284    }
3285
3286    fn run(
3287        self: Arc<Self>,
3288        input: ToolInput<serde_json::Value>,
3289        event_stream: ToolCallEventStream,
3290        cx: &mut App,
3291    ) -> Task<Result<AgentToolOutput, AgentToolOutput>> {
3292        let tool_input: ToolInput<T::Input> = input.cast();
3293        let task = self.0.clone().run(tool_input, event_stream, cx);
3294        cx.spawn(async move |_cx| match task.await {
3295            Ok(output) => {
3296                let raw_output = serde_json::to_value(&output).map_err(|e| {
3297                    AgentToolOutput::from_error(format!("Failed to serialize tool output: {e}"))
3298                })?;
3299                Ok(AgentToolOutput {
3300                    llm_output: output.into(),
3301                    raw_output,
3302                })
3303            }
3304            Err(error_output) => {
3305                let raw_output = serde_json::to_value(&error_output).unwrap_or_else(|e| {
3306                    log::error!("Failed to serialize tool error output: {e}");
3307                    serde_json::Value::Null
3308                });
3309                Err(AgentToolOutput {
3310                    llm_output: error_output.into(),
3311                    raw_output,
3312                })
3313            }
3314        })
3315    }
3316
3317    fn replay(
3318        &self,
3319        input: serde_json::Value,
3320        output: serde_json::Value,
3321        event_stream: ToolCallEventStream,
3322        cx: &mut App,
3323    ) -> Result<()> {
3324        let input = serde_json::from_value(input)?;
3325        let output = serde_json::from_value(output)?;
3326        self.0.replay(input, output, event_stream, cx)
3327    }
3328}
3329
3330#[derive(Clone)]
3331struct ThreadEventStream(mpsc::UnboundedSender<Result<ThreadEvent>>);
3332
3333impl ThreadEventStream {
3334    fn send_user_message(&self, message: &UserMessage) {
3335        self.0
3336            .unbounded_send(Ok(ThreadEvent::UserMessage(message.clone())))
3337            .ok();
3338    }
3339
3340    fn send_text(&self, text: &str) {
3341        self.0
3342            .unbounded_send(Ok(ThreadEvent::AgentText(text.to_string())))
3343            .ok();
3344    }
3345
3346    fn send_thinking(&self, text: &str) {
3347        self.0
3348            .unbounded_send(Ok(ThreadEvent::AgentThinking(text.to_string())))
3349            .ok();
3350    }
3351
3352    fn send_tool_call(
3353        &self,
3354        id: &LanguageModelToolUseId,
3355        tool_name: &str,
3356        title: SharedString,
3357        kind: acp::ToolKind,
3358        input: serde_json::Value,
3359    ) {
3360        self.0
3361            .unbounded_send(Ok(ThreadEvent::ToolCall(Self::initial_tool_call(
3362                id,
3363                tool_name,
3364                title.to_string(),
3365                kind,
3366                input,
3367            ))))
3368            .ok();
3369    }
3370
3371    fn initial_tool_call(
3372        id: &LanguageModelToolUseId,
3373        tool_name: &str,
3374        title: String,
3375        kind: acp::ToolKind,
3376        input: serde_json::Value,
3377    ) -> acp::ToolCall {
3378        acp::ToolCall::new(id.to_string(), title)
3379            .kind(kind)
3380            .raw_input(input)
3381            .meta(acp_thread::meta_with_tool_name(tool_name))
3382    }
3383
3384    fn update_tool_call_fields(
3385        &self,
3386        tool_use_id: &LanguageModelToolUseId,
3387        fields: acp::ToolCallUpdateFields,
3388        meta: Option<acp::Meta>,
3389    ) {
3390        self.0
3391            .unbounded_send(Ok(ThreadEvent::ToolCallUpdate(
3392                acp::ToolCallUpdate::new(tool_use_id.to_string(), fields)
3393                    .meta(meta)
3394                    .into(),
3395            )))
3396            .ok();
3397    }
3398
3399    fn send_retry(&self, status: acp_thread::RetryStatus) {
3400        self.0.unbounded_send(Ok(ThreadEvent::Retry(status))).ok();
3401    }
3402
3403    fn send_stop(&self, reason: acp::StopReason) {
3404        self.0.unbounded_send(Ok(ThreadEvent::Stop(reason))).ok();
3405    }
3406
3407    fn send_canceled(&self) {
3408        self.0
3409            .unbounded_send(Ok(ThreadEvent::Stop(acp::StopReason::Cancelled)))
3410            .ok();
3411    }
3412
3413    fn send_error(&self, error: impl Into<anyhow::Error>) {
3414        self.0.unbounded_send(Err(error.into())).ok();
3415    }
3416}
3417
3418#[derive(Clone)]
3419pub struct ToolCallEventStream {
3420    tool_use_id: LanguageModelToolUseId,
3421    stream: ThreadEventStream,
3422    fs: Option<Arc<dyn Fs>>,
3423    cancellation_rx: watch::Receiver<bool>,
3424}
3425
3426impl ToolCallEventStream {
3427    #[cfg(any(test, feature = "test-support"))]
3428    pub fn test() -> (Self, ToolCallEventStreamReceiver) {
3429        let (stream, receiver, _cancellation_tx) = Self::test_with_cancellation();
3430        (stream, receiver)
3431    }
3432
3433    #[cfg(any(test, feature = "test-support"))]
3434    pub fn test_with_cancellation() -> (Self, ToolCallEventStreamReceiver, watch::Sender<bool>) {
3435        let (events_tx, events_rx) = mpsc::unbounded::<Result<ThreadEvent>>();
3436        let (cancellation_tx, cancellation_rx) = watch::channel(false);
3437
3438        let stream = ToolCallEventStream::new(
3439            "test_id".into(),
3440            ThreadEventStream(events_tx),
3441            None,
3442            cancellation_rx,
3443        );
3444
3445        (
3446            stream,
3447            ToolCallEventStreamReceiver(events_rx),
3448            cancellation_tx,
3449        )
3450    }
3451
3452    /// Signal cancellation for this event stream. Only available in tests.
3453    #[cfg(any(test, feature = "test-support"))]
3454    pub fn signal_cancellation_with_sender(cancellation_tx: &mut watch::Sender<bool>) {
3455        cancellation_tx.send(true).ok();
3456    }
3457
3458    fn new(
3459        tool_use_id: LanguageModelToolUseId,
3460        stream: ThreadEventStream,
3461        fs: Option<Arc<dyn Fs>>,
3462        cancellation_rx: watch::Receiver<bool>,
3463    ) -> Self {
3464        Self {
3465            tool_use_id,
3466            stream,
3467            fs,
3468            cancellation_rx,
3469        }
3470    }
3471
3472    /// Returns a future that resolves when the user cancels the tool call.
3473    /// Tools should select on this alongside their main work to detect user cancellation.
3474    pub fn cancelled_by_user(&self) -> impl std::future::Future<Output = ()> + '_ {
3475        let mut rx = self.cancellation_rx.clone();
3476        async move {
3477            loop {
3478                if *rx.borrow() {
3479                    return;
3480                }
3481                if rx.changed().await.is_err() {
3482                    // Sender dropped, will never be cancelled
3483                    std::future::pending::<()>().await;
3484                }
3485            }
3486        }
3487    }
3488
3489    /// Returns true if the user has cancelled this tool call.
3490    /// This is useful for checking cancellation state after an operation completes,
3491    /// to determine if the completion was due to user cancellation.
3492    pub fn was_cancelled_by_user(&self) -> bool {
3493        *self.cancellation_rx.clone().borrow()
3494    }
3495
3496    pub fn tool_use_id(&self) -> &LanguageModelToolUseId {
3497        &self.tool_use_id
3498    }
3499
3500    pub fn update_fields(&self, fields: acp::ToolCallUpdateFields) {
3501        self.stream
3502            .update_tool_call_fields(&self.tool_use_id, fields, None);
3503    }
3504
3505    pub fn update_fields_with_meta(
3506        &self,
3507        fields: acp::ToolCallUpdateFields,
3508        meta: Option<acp::Meta>,
3509    ) {
3510        self.stream
3511            .update_tool_call_fields(&self.tool_use_id, fields, meta);
3512    }
3513
3514    pub fn update_diff(&self, diff: Entity<acp_thread::Diff>) {
3515        self.stream
3516            .0
3517            .unbounded_send(Ok(ThreadEvent::ToolCallUpdate(
3518                acp_thread::ToolCallUpdateDiff {
3519                    id: acp::ToolCallId::new(self.tool_use_id.to_string()),
3520                    diff,
3521                }
3522                .into(),
3523            )))
3524            .ok();
3525    }
3526
3527    pub fn subagent_spawned(&self, id: acp::SessionId) {
3528        self.stream
3529            .0
3530            .unbounded_send(Ok(ThreadEvent::SubagentSpawned(id)))
3531            .ok();
3532    }
3533
3534    /// Authorize a third-party tool (e.g., MCP tool from a context server).
3535    ///
3536    /// Unlike built-in tools, third-party tools don't support pattern-based permissions.
3537    /// They only support `default` (allow/deny/confirm) per tool.
3538    ///
3539    /// Uses the dropdown authorization flow with two granularities:
3540    /// - "Always for <display_name> MCP tool" → sets `tools.<tool_id>.default = "allow"` or "deny"
3541    /// - "Only this time" → allow/deny once
3542    pub fn authorize_third_party_tool(
3543        &self,
3544        title: impl Into<String>,
3545        tool_id: String,
3546        display_name: String,
3547        cx: &mut App,
3548    ) -> Task<Result<()>> {
3549        let settings = agent_settings::AgentSettings::get_global(cx);
3550
3551        let decision = decide_permission_from_settings(&tool_id, &[String::new()], &settings);
3552
3553        match decision {
3554            ToolPermissionDecision::Allow => return Task::ready(Ok(())),
3555            ToolPermissionDecision::Deny(reason) => return Task::ready(Err(anyhow!(reason))),
3556            ToolPermissionDecision::Confirm => {}
3557        }
3558
3559        let (response_tx, response_rx) = oneshot::channel();
3560        if let Err(error) = self
3561            .stream
3562            .0
3563            .unbounded_send(Ok(ThreadEvent::ToolCallAuthorization(
3564                ToolCallAuthorization {
3565                    tool_call: acp::ToolCallUpdate::new(
3566                        self.tool_use_id.to_string(),
3567                        acp::ToolCallUpdateFields::new().title(title.into()),
3568                    ),
3569                    options: acp_thread::PermissionOptions::Dropdown(vec![
3570                        acp_thread::PermissionOptionChoice {
3571                            allow: acp::PermissionOption::new(
3572                                acp::PermissionOptionId::new(format!(
3573                                    "always_allow_mcp:{}",
3574                                    tool_id
3575                                )),
3576                                format!("Always for {} MCP tool", display_name),
3577                                acp::PermissionOptionKind::AllowAlways,
3578                            ),
3579                            deny: acp::PermissionOption::new(
3580                                acp::PermissionOptionId::new(format!(
3581                                    "always_deny_mcp:{}",
3582                                    tool_id
3583                                )),
3584                                format!("Always for {} MCP tool", display_name),
3585                                acp::PermissionOptionKind::RejectAlways,
3586                            ),
3587                        },
3588                        acp_thread::PermissionOptionChoice {
3589                            allow: acp::PermissionOption::new(
3590                                acp::PermissionOptionId::new("allow"),
3591                                "Only this time",
3592                                acp::PermissionOptionKind::AllowOnce,
3593                            ),
3594                            deny: acp::PermissionOption::new(
3595                                acp::PermissionOptionId::new("deny"),
3596                                "Only this time",
3597                                acp::PermissionOptionKind::RejectOnce,
3598                            ),
3599                        },
3600                    ]),
3601                    response: response_tx,
3602                    context: None,
3603                },
3604            )))
3605        {
3606            log::error!("Failed to send tool call authorization: {error}");
3607            return Task::ready(Err(anyhow!(
3608                "Failed to send tool call authorization: {error}"
3609            )));
3610        }
3611
3612        let fs = self.fs.clone();
3613        cx.spawn(async move |cx| {
3614            let response_str = response_rx.await?.0.to_string();
3615
3616            if response_str == format!("always_allow_mcp:{}", tool_id) {
3617                if let Some(fs) = fs.clone() {
3618                    cx.update(|cx| {
3619                        update_settings_file(fs, cx, move |settings, _| {
3620                            settings
3621                                .agent
3622                                .get_or_insert_default()
3623                                .set_tool_default_permission(&tool_id, ToolPermissionMode::Allow);
3624                        });
3625                    });
3626                }
3627                return Ok(());
3628            }
3629            if response_str == format!("always_deny_mcp:{}", tool_id) {
3630                if let Some(fs) = fs.clone() {
3631                    cx.update(|cx| {
3632                        update_settings_file(fs, cx, move |settings, _| {
3633                            settings
3634                                .agent
3635                                .get_or_insert_default()
3636                                .set_tool_default_permission(&tool_id, ToolPermissionMode::Deny);
3637                        });
3638                    });
3639                }
3640                return Err(anyhow!("Permission to run tool denied by user"));
3641            }
3642
3643            if response_str == "allow" {
3644                return Ok(());
3645            }
3646
3647            Err(anyhow!("Permission to run tool denied by user"))
3648        })
3649    }
3650
3651    pub fn authorize(
3652        &self,
3653        title: impl Into<String>,
3654        context: ToolPermissionContext,
3655        cx: &mut App,
3656    ) -> Task<Result<()>> {
3657        use settings::ToolPermissionMode;
3658
3659        let options = context.build_permission_options();
3660
3661        let (response_tx, response_rx) = oneshot::channel();
3662        if let Err(error) = self
3663            .stream
3664            .0
3665            .unbounded_send(Ok(ThreadEvent::ToolCallAuthorization(
3666                ToolCallAuthorization {
3667                    tool_call: acp::ToolCallUpdate::new(
3668                        self.tool_use_id.to_string(),
3669                        acp::ToolCallUpdateFields::new().title(title.into()),
3670                    ),
3671                    options,
3672                    response: response_tx,
3673                    context: Some(context),
3674                },
3675            )))
3676        {
3677            log::error!("Failed to send tool call authorization: {error}");
3678            return Task::ready(Err(anyhow!(
3679                "Failed to send tool call authorization: {error}"
3680            )));
3681        }
3682
3683        let fs = self.fs.clone();
3684        cx.spawn(async move |cx| {
3685            let response_str = response_rx.await?.0.to_string();
3686
3687            // Handle "always allow tool" - e.g., "always_allow:terminal"
3688            if let Some(tool) = response_str.strip_prefix("always_allow:") {
3689                if let Some(fs) = fs.clone() {
3690                    let tool = tool.to_string();
3691                    cx.update(|cx| {
3692                        update_settings_file(fs, cx, move |settings, _| {
3693                            settings
3694                                .agent
3695                                .get_or_insert_default()
3696                                .set_tool_default_permission(&tool, ToolPermissionMode::Allow);
3697                        });
3698                    });
3699                }
3700                return Ok(());
3701            }
3702
3703            // Handle "always deny tool" - e.g., "always_deny:terminal"
3704            if let Some(tool) = response_str.strip_prefix("always_deny:") {
3705                if let Some(fs) = fs.clone() {
3706                    let tool = tool.to_string();
3707                    cx.update(|cx| {
3708                        update_settings_file(fs, cx, move |settings, _| {
3709                            settings
3710                                .agent
3711                                .get_or_insert_default()
3712                                .set_tool_default_permission(&tool, ToolPermissionMode::Deny);
3713                        });
3714                    });
3715                }
3716                return Err(anyhow!("Permission to run tool denied by user"));
3717            }
3718
3719            // Handle "always allow pattern" - e.g., "always_allow_pattern:mcp:server:tool\n^cargo\s"
3720            if let Some(rest) = response_str.strip_prefix("always_allow_pattern:") {
3721                if let Some((pattern_tool_name, pattern)) = rest.split_once('\n') {
3722                    let pattern_tool_name = pattern_tool_name.to_string();
3723                    let pattern = pattern.to_string();
3724                    if let Some(fs) = fs.clone() {
3725                        cx.update(|cx| {
3726                            update_settings_file(fs, cx, move |settings, _| {
3727                                settings
3728                                    .agent
3729                                    .get_or_insert_default()
3730                                    .add_tool_allow_pattern(&pattern_tool_name, pattern);
3731                            });
3732                        });
3733                    }
3734                } else {
3735                    log::error!("Failed to parse always allow pattern: missing newline separator in '{rest}'");
3736                }
3737                return Ok(());
3738            }
3739
3740            // Handle "always deny pattern" - e.g., "always_deny_pattern:mcp:server:tool\n^cargo\s"
3741            if let Some(rest) = response_str.strip_prefix("always_deny_pattern:") {
3742                if let Some((pattern_tool_name, pattern)) = rest.split_once('\n') {
3743                    let pattern_tool_name = pattern_tool_name.to_string();
3744                    let pattern = pattern.to_string();
3745                    if let Some(fs) = fs.clone() {
3746                        cx.update(|cx| {
3747                            update_settings_file(fs, cx, move |settings, _| {
3748                                settings
3749                                    .agent
3750                                    .get_or_insert_default()
3751                                    .add_tool_deny_pattern(&pattern_tool_name, pattern);
3752                            });
3753                        });
3754                    }
3755                } else {
3756                    log::error!("Failed to parse always deny pattern: missing newline separator in '{rest}'");
3757                }
3758                return Err(anyhow!("Permission to run tool denied by user"));
3759            }
3760
3761            // Handle simple "allow" (allow once)
3762            if response_str == "allow" {
3763                return Ok(());
3764            }
3765
3766            // Handle simple "deny" (deny once)
3767            Err(anyhow!("Permission to run tool denied by user"))
3768        })
3769    }
3770}
3771
3772#[cfg(any(test, feature = "test-support"))]
3773pub struct ToolCallEventStreamReceiver(mpsc::UnboundedReceiver<Result<ThreadEvent>>);
3774
3775#[cfg(any(test, feature = "test-support"))]
3776impl ToolCallEventStreamReceiver {
3777    pub async fn expect_authorization(&mut self) -> ToolCallAuthorization {
3778        let event = self.0.next().await;
3779        if let Some(Ok(ThreadEvent::ToolCallAuthorization(auth))) = event {
3780            auth
3781        } else {
3782            panic!("Expected ToolCallAuthorization but got: {:?}", event);
3783        }
3784    }
3785
3786    pub async fn expect_update_fields(&mut self) -> acp::ToolCallUpdateFields {
3787        let event = self.0.next().await;
3788        if let Some(Ok(ThreadEvent::ToolCallUpdate(acp_thread::ToolCallUpdate::UpdateFields(
3789            update,
3790        )))) = event
3791        {
3792            update.fields
3793        } else {
3794            panic!("Expected update fields but got: {:?}", event);
3795        }
3796    }
3797
3798    pub async fn expect_diff(&mut self) -> Entity<acp_thread::Diff> {
3799        let event = self.0.next().await;
3800        if let Some(Ok(ThreadEvent::ToolCallUpdate(acp_thread::ToolCallUpdate::UpdateDiff(
3801            update,
3802        )))) = event
3803        {
3804            update.diff
3805        } else {
3806            panic!("Expected diff but got: {:?}", event);
3807        }
3808    }
3809
3810    pub async fn expect_terminal(&mut self) -> Entity<acp_thread::Terminal> {
3811        let event = self.0.next().await;
3812        if let Some(Ok(ThreadEvent::ToolCallUpdate(acp_thread::ToolCallUpdate::UpdateTerminal(
3813            update,
3814        )))) = event
3815        {
3816            update.terminal
3817        } else {
3818            panic!("Expected terminal but got: {:?}", event);
3819        }
3820    }
3821}
3822
3823#[cfg(any(test, feature = "test-support"))]
3824impl std::ops::Deref for ToolCallEventStreamReceiver {
3825    type Target = mpsc::UnboundedReceiver<Result<ThreadEvent>>;
3826
3827    fn deref(&self) -> &Self::Target {
3828        &self.0
3829    }
3830}
3831
3832#[cfg(any(test, feature = "test-support"))]
3833impl std::ops::DerefMut for ToolCallEventStreamReceiver {
3834    fn deref_mut(&mut self) -> &mut Self::Target {
3835        &mut self.0
3836    }
3837}
3838
3839impl From<&str> for UserMessageContent {
3840    fn from(text: &str) -> Self {
3841        Self::Text(text.into())
3842    }
3843}
3844
3845impl From<String> for UserMessageContent {
3846    fn from(text: String) -> Self {
3847        Self::Text(text)
3848    }
3849}
3850
3851impl UserMessageContent {
3852    pub fn from_content_block(value: acp::ContentBlock, path_style: PathStyle) -> Self {
3853        match value {
3854            acp::ContentBlock::Text(text_content) => Self::Text(text_content.text),
3855            acp::ContentBlock::Image(image_content) => Self::Image(convert_image(image_content)),
3856            acp::ContentBlock::Audio(_) => {
3857                // TODO
3858                Self::Text("[audio]".to_string())
3859            }
3860            acp::ContentBlock::ResourceLink(resource_link) => {
3861                match MentionUri::parse(&resource_link.uri, path_style) {
3862                    Ok(uri) => Self::Mention {
3863                        uri,
3864                        content: String::new(),
3865                    },
3866                    Err(err) => {
3867                        log::error!("Failed to parse mention link: {}", err);
3868                        Self::Text(format!("[{}]({})", resource_link.name, resource_link.uri))
3869                    }
3870                }
3871            }
3872            acp::ContentBlock::Resource(resource) => match resource.resource {
3873                acp::EmbeddedResourceResource::TextResourceContents(resource) => {
3874                    match MentionUri::parse(&resource.uri, path_style) {
3875                        Ok(uri) => Self::Mention {
3876                            uri,
3877                            content: resource.text,
3878                        },
3879                        Err(err) => {
3880                            log::error!("Failed to parse mention link: {}", err);
3881                            Self::Text(
3882                                MarkdownCodeBlock {
3883                                    tag: &resource.uri,
3884                                    text: &resource.text,
3885                                }
3886                                .to_string(),
3887                            )
3888                        }
3889                    }
3890                }
3891                acp::EmbeddedResourceResource::BlobResourceContents(_) => {
3892                    // TODO
3893                    Self::Text("[blob]".to_string())
3894                }
3895                other => {
3896                    log::warn!("Unexpected content type: {:?}", other);
3897                    Self::Text("[unknown]".to_string())
3898                }
3899            },
3900            other => {
3901                log::warn!("Unexpected content type: {:?}", other);
3902                Self::Text("[unknown]".to_string())
3903            }
3904        }
3905    }
3906}
3907
3908impl From<UserMessageContent> for acp::ContentBlock {
3909    fn from(content: UserMessageContent) -> Self {
3910        match content {
3911            UserMessageContent::Text(text) => text.into(),
3912            UserMessageContent::Image(image) => {
3913                acp::ContentBlock::Image(acp::ImageContent::new(image.source, "image/png"))
3914            }
3915            UserMessageContent::Mention { uri, content } => acp::ContentBlock::Resource(
3916                acp::EmbeddedResource::new(acp::EmbeddedResourceResource::TextResourceContents(
3917                    acp::TextResourceContents::new(content, uri.to_uri().to_string()),
3918                )),
3919            ),
3920        }
3921    }
3922}
3923
3924fn convert_image(image_content: acp::ImageContent) -> LanguageModelImage {
3925    LanguageModelImage {
3926        source: image_content.data.into(),
3927        size: None,
3928    }
3929}
3930
3931#[cfg(test)]
3932mod tests {
3933    use super::*;
3934    use gpui::TestAppContext;
3935    use language_model::LanguageModelToolUseId;
3936    use language_model::fake_provider::FakeLanguageModel;
3937    use serde_json::json;
3938    use std::sync::Arc;
3939
3940    async fn setup_thread_for_test(cx: &mut TestAppContext) -> (Entity<Thread>, ThreadEventStream) {
3941        cx.update(|cx| {
3942            let settings_store = settings::SettingsStore::test(cx);
3943            cx.set_global(settings_store);
3944        });
3945
3946        let fs = fs::FakeFs::new(cx.background_executor.clone());
3947        let templates = Templates::new();
3948        let project = Project::test(fs.clone(), [], cx).await;
3949
3950        cx.update(|cx| {
3951            let project_context = cx.new(|_cx| prompt_store::ProjectContext::default());
3952            let context_server_store = project.read(cx).context_server_store();
3953            let context_server_registry =
3954                cx.new(|cx| ContextServerRegistry::new(context_server_store, cx));
3955
3956            let thread = cx.new(|cx| {
3957                Thread::new(
3958                    project,
3959                    project_context,
3960                    context_server_registry,
3961                    templates,
3962                    None,
3963                    cx,
3964                )
3965            });
3966
3967            let (event_tx, _event_rx) = mpsc::unbounded();
3968            let event_stream = ThreadEventStream(event_tx);
3969
3970            (thread, event_stream)
3971        })
3972    }
3973
3974    fn setup_parent_with_subagents(
3975        cx: &mut TestAppContext,
3976        parent: &Entity<Thread>,
3977        count: usize,
3978    ) -> Vec<Entity<Thread>> {
3979        cx.update(|cx| {
3980            let mut subagents = Vec::new();
3981            for _ in 0..count {
3982                let subagent = cx.new(|cx| Thread::new_subagent(parent, cx));
3983                parent.update(cx, |thread, _cx| {
3984                    thread.register_running_subagent(subagent.downgrade());
3985                });
3986                subagents.push(subagent);
3987            }
3988            subagents
3989        })
3990    }
3991
3992    #[gpui::test]
3993    async fn test_set_model_propagates_to_subagents(cx: &mut TestAppContext) {
3994        let (parent, _event_stream) = setup_thread_for_test(cx).await;
3995        let subagents = setup_parent_with_subagents(cx, &parent, 2);
3996
3997        let new_model: Arc<dyn LanguageModel> = Arc::new(FakeLanguageModel::with_id_and_thinking(
3998            "test-provider",
3999            "new-model",
4000            "New Model",
4001            false,
4002        ));
4003
4004        cx.update(|cx| {
4005            parent.update(cx, |thread, cx| {
4006                thread.set_model(new_model, cx);
4007            });
4008
4009            for subagent in &subagents {
4010                let subagent_model_id = subagent.read(cx).model().unwrap().id();
4011                assert_eq!(
4012                    subagent_model_id.0.as_ref(),
4013                    "new-model",
4014                    "Subagent model should match parent model after set_model"
4015                );
4016            }
4017        });
4018    }
4019
4020    #[gpui::test]
4021    async fn test_set_summarization_model_propagates_to_subagents(cx: &mut TestAppContext) {
4022        let (parent, _event_stream) = setup_thread_for_test(cx).await;
4023        let subagents = setup_parent_with_subagents(cx, &parent, 2);
4024
4025        let summary_model: Arc<dyn LanguageModel> =
4026            Arc::new(FakeLanguageModel::with_id_and_thinking(
4027                "test-provider",
4028                "summary-model",
4029                "Summary Model",
4030                false,
4031            ));
4032
4033        cx.update(|cx| {
4034            parent.update(cx, |thread, cx| {
4035                thread.set_summarization_model(Some(summary_model), cx);
4036            });
4037
4038            for subagent in &subagents {
4039                let subagent_summary_id = subagent.read(cx).summarization_model().unwrap().id();
4040                assert_eq!(
4041                    subagent_summary_id.0.as_ref(),
4042                    "summary-model",
4043                    "Subagent summarization model should match parent after set_summarization_model"
4044                );
4045            }
4046        });
4047    }
4048
4049    #[gpui::test]
4050    async fn test_set_thinking_enabled_propagates_to_subagents(cx: &mut TestAppContext) {
4051        let (parent, _event_stream) = setup_thread_for_test(cx).await;
4052        let subagents = setup_parent_with_subagents(cx, &parent, 2);
4053
4054        cx.update(|cx| {
4055            parent.update(cx, |thread, cx| {
4056                thread.set_thinking_enabled(true, cx);
4057            });
4058
4059            for subagent in &subagents {
4060                assert!(
4061                    subagent.read(cx).thinking_enabled(),
4062                    "Subagent thinking should be enabled after parent enables it"
4063                );
4064            }
4065
4066            parent.update(cx, |thread, cx| {
4067                thread.set_thinking_enabled(false, cx);
4068            });
4069
4070            for subagent in &subagents {
4071                assert!(
4072                    !subagent.read(cx).thinking_enabled(),
4073                    "Subagent thinking should be disabled after parent disables it"
4074                );
4075            }
4076        });
4077    }
4078
4079    #[gpui::test]
4080    async fn test_set_thinking_effort_propagates_to_subagents(cx: &mut TestAppContext) {
4081        let (parent, _event_stream) = setup_thread_for_test(cx).await;
4082        let subagents = setup_parent_with_subagents(cx, &parent, 2);
4083
4084        cx.update(|cx| {
4085            parent.update(cx, |thread, cx| {
4086                thread.set_thinking_effort(Some("high".to_string()), cx);
4087            });
4088
4089            for subagent in &subagents {
4090                assert_eq!(
4091                    subagent.read(cx).thinking_effort().map(|s| s.as_str()),
4092                    Some("high"),
4093                    "Subagent thinking effort should match parent"
4094                );
4095            }
4096
4097            parent.update(cx, |thread, cx| {
4098                thread.set_thinking_effort(None, cx);
4099            });
4100
4101            for subagent in &subagents {
4102                assert_eq!(
4103                    subagent.read(cx).thinking_effort(),
4104                    None,
4105                    "Subagent thinking effort should be None after parent clears it"
4106                );
4107            }
4108        });
4109    }
4110
4111    #[gpui::test]
4112    async fn test_set_speed_propagates_to_subagents(cx: &mut TestAppContext) {
4113        let (parent, _event_stream) = setup_thread_for_test(cx).await;
4114        let subagents = setup_parent_with_subagents(cx, &parent, 2);
4115
4116        cx.update(|cx| {
4117            parent.update(cx, |thread, cx| {
4118                thread.set_speed(Speed::Fast, cx);
4119            });
4120
4121            for subagent in &subagents {
4122                assert_eq!(
4123                    subagent.read(cx).speed(),
4124                    Some(Speed::Fast),
4125                    "Subagent speed should match parent after set_speed"
4126                );
4127            }
4128        });
4129    }
4130
4131    #[gpui::test]
4132    async fn test_dropped_subagent_does_not_panic(cx: &mut TestAppContext) {
4133        let (parent, _event_stream) = setup_thread_for_test(cx).await;
4134        let subagents = setup_parent_with_subagents(cx, &parent, 1);
4135
4136        // Drop the subagent so the WeakEntity can no longer be upgraded
4137        drop(subagents);
4138
4139        // Should not panic even though the subagent was dropped
4140        cx.update(|cx| {
4141            parent.update(cx, |thread, cx| {
4142                thread.set_thinking_enabled(true, cx);
4143                thread.set_speed(Speed::Fast, cx);
4144                thread.set_thinking_effort(Some("high".to_string()), cx);
4145            });
4146        });
4147    }
4148
4149    #[gpui::test]
4150    async fn test_handle_tool_use_json_parse_error_adds_tool_use_to_content(
4151        cx: &mut TestAppContext,
4152    ) {
4153        let (thread, event_stream) = setup_thread_for_test(cx).await;
4154
4155        cx.update(|cx| {
4156            thread.update(cx, |thread, _cx| {
4157                let tool_use_id = LanguageModelToolUseId::from("test_tool_id");
4158                let tool_name: Arc<str> = Arc::from("test_tool");
4159                let raw_input: Arc<str> = Arc::from("{invalid json");
4160                let json_parse_error = "expected value at line 1 column 1".to_string();
4161
4162                // Call the function under test
4163                let result = thread.handle_tool_use_json_parse_error_event(
4164                    tool_use_id.clone(),
4165                    tool_name.clone(),
4166                    raw_input.clone(),
4167                    json_parse_error,
4168                    &event_stream,
4169                );
4170
4171                // Verify the result is an error
4172                assert!(result.is_error);
4173                assert_eq!(result.tool_use_id, tool_use_id);
4174                assert_eq!(result.tool_name, tool_name);
4175                assert!(matches!(
4176                    result.content,
4177                    LanguageModelToolResultContent::Text(_)
4178                ));
4179
4180                // Verify the tool use was added to the message content
4181                {
4182                    let last_message = thread.pending_message();
4183                    assert_eq!(
4184                        last_message.content.len(),
4185                        1,
4186                        "Should have one tool_use in content"
4187                    );
4188
4189                    match &last_message.content[0] {
4190                        AgentMessageContent::ToolUse(tool_use) => {
4191                            assert_eq!(tool_use.id, tool_use_id);
4192                            assert_eq!(tool_use.name, tool_name);
4193                            assert_eq!(tool_use.raw_input, raw_input.to_string());
4194                            assert!(tool_use.is_input_complete);
4195                            // Should fall back to empty object for invalid JSON
4196                            assert_eq!(tool_use.input, json!({}));
4197                        }
4198                        _ => panic!("Expected ToolUse content"),
4199                    }
4200                }
4201
4202                // Insert the tool result (simulating what the caller does)
4203                thread
4204                    .pending_message()
4205                    .tool_results
4206                    .insert(result.tool_use_id.clone(), result);
4207
4208                // Verify the tool result was added
4209                let last_message = thread.pending_message();
4210                assert_eq!(
4211                    last_message.tool_results.len(),
4212                    1,
4213                    "Should have one tool_result"
4214                );
4215                assert!(last_message.tool_results.contains_key(&tool_use_id));
4216            });
4217        });
4218    }
4219}