The Agentic LoopA generic, trait-based conversation runtime that drives the core user → API → tool → result cycle.
Permission Model3 escalation modes + 2 behavioral modes with a pluggable prompter trait for interactive approval.
Tool System19 built-in tools from bash execution to web search, all registered through a unified trait.
Hook SystemShell-based PreToolUse and PostToolUse hooks with exit-code-driven allow/deny/warn semantics.
Session & CompactionPersistent JSON sessions with automatic compaction that summarizes old messages to stay within context limits.
MCP IntegrationStdio and remote MCP server support with tool namespacing, config hashing, and CCR proxy unwrapping.