@eddyskywalker/dsh-chatgpt-subscription 0.3.4 → 0.3.6

package/lib/index.js

@@ -3169,7 +3169,7 @@ function identityKey(credentials) {
 //#endregion
 //#region src/host/routes.ts
 const MAX_BODY_BYTES$2 = 64 * 1024;
-function registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwitcher) {
+function registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwitcher, routeAudit) {
 	const handler = async (request, response) => {
 		const url = new URL(request.url ?? "/", "http://dsh.local");
 		if (request.method === "GET" && url.pathname === `/api/dsh-chatgpt-subscription/status`) {
@@ -3187,6 +3187,32 @@ function registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwit
 			});
 			return;
 		}
+		if (request.method === "GET" && url.pathname === `/api/dsh-chatgpt-subscription/subagent-route-audit`) {
+			const sessionId = url.searchParams.get("sessionId");
+			if (sessionId === null || sessionId.length === 0) {
+				jsonError(response, 400, {
+					code: "bad-request",
+					message: "A sessionId query parameter is required."
+				});
+				return;
+			}
+			if (routeAudit === void 0) {
+				jsonError(response, 404, {
+					code: "route-audit-failed",
+					message: "Subagent route audit is not installed."
+				});
+				return;
+			}
+			try {
+				json(response, {
+					ok: true,
+					value: await routeAudit(sessionId)
+				});
+			} catch (error) {
+				jsonError(response, 500, publicError(error instanceof Error ? error : /* @__PURE__ */ new Error("The route audit failed."), "route-audit-failed"));
+			}
+			return;
+		}
 		if (request.method === "GET" && url.pathname === `/api/dsh-chatgpt-subscription/mermaid.min.js`) {
 			try {
 				const mermaidPath = createRequire(import.meta.url).resolve("mermaid/dist/mermaid.min.js");
@@ -5255,7 +5281,7 @@ function sanitizeText$2(text) {
 function isRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asString$5(value) {
+function asString$6(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function safeJsonParse$2(text) {
@@ -5285,7 +5311,7 @@ function attachmentOf$2(block) {
 }
 function attachmentLabel$2(block) {
 	const attachment = isRecord$4(block.attachment) ? block.attachment : void 0;
-	return asString$5(attachment?.name) || asString$5(attachment?.attachmentId);
+	return asString$6(attachment?.name) || asString$6(attachment?.attachmentId);
 }
 function collectImageRefs$2(content, refs) {
 	if (!Array.isArray(content)) return;
@@ -5324,7 +5350,7 @@ function base64Length$2(bytes) {
 function requestImageBytes$2(block) {
 	const attachment = attachmentOf$2(block);
 	if (attachment) return base64Length$2(attachment.bytes);
-	const inline = asString$5(block.data) || asString$5(block.base64);
+	const inline = asString$6(block.data) || asString$6(block.base64);
 	return inline ? inline.length : void 0;
 }
 function collectRequestImageBytes$2(content, lengths) {
@@ -5428,10 +5454,10 @@ function unavailableImageText$2(block) {
 	return `[image unavailable: ${label ? `${label} could not be read` : "the image could not be read"}; ask the user to attach it again if the image is needed]`;
 }
 function imageBlockToPart(block, images) {
-	let data = asString$5(block.data) || asString$5(block.base64);
+	let data = asString$6(block.data) || asString$6(block.base64);
 	const source = isRecord$4(block.source) ? block.source : void 0;
-	if (!data && source) data = asString$5(source.data) || asString$5(source.base64);
-	let mimeType = asString$5(block.mimeType) || asString$5(block.mediaType) || (source ? asString$5(source.mimeType) || asString$5(source.mediaType) : void 0) || "image/png";
+	if (!data && source) data = asString$6(source.data) || asString$6(source.base64);
+	let mimeType = asString$6(block.mimeType) || asString$6(block.mediaType) || (source ? asString$6(source.mimeType) || asString$6(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
 		const match = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (match) {
@@ -5487,7 +5513,7 @@ function replayBlockFor(message, index) {
 	}
 }
 function thoughtSignature(part) {
-	return asString$5(part?.thoughtSignature) || asString$5(part?.thought_signature) || asString$5(part?.thinkingSignature) || asString$5(part?.textSignature);
+	return asString$6(part?.thoughtSignature) || asString$6(part?.thought_signature) || asString$6(part?.thinkingSignature) || asString$6(part?.textSignature);
 }
 function replayPart(part) {
 	const copy = { ...part };
@@ -5506,7 +5532,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 		if (!isRecord$4(block)) continue;
 		const replay = replayBlockFor(message, index);
 		const originalParts = Array.isArray(replay?.parts) ? replay.parts.filter(isRecord$4) : [];
-		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString$5(part.text) || "").join("") === sanitizeText$2(String(block.text || ""))) {
+		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString$6(part.text) || "").join("") === sanitizeText$2(String(block.text || ""))) {
 			parts.push(...originalParts.map(replayPart));
 			continue;
 		}
@@ -5527,7 +5553,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 			const toolId = String(block.id || "");
 			const toolName = String(block.name || "");
 			const originalCall = originalParts.find((part) => isRecord$4(part.functionCall));
-			const wireId = asString$5((isRecord$4(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
+			const wireId = asString$6((isRecord$4(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
 			toolCalls.set(toolId, {
 				name: toolName,
 				id: wireId
@@ -5804,8 +5830,8 @@ function processStreamLine(line, state) {
 		if (isRecord$4(part.functionCall)) {
 			out.push(...closeCurrentBlock(state));
 			const fc = part.functionCall;
-			const toolName = asString$5(fc.name) || "";
-			const toolId = asString$5(fc.id) || sanitizeToolCallId("", toolName);
+			const toolName = asString$6(fc.name) || "";
+			const toolId = asString$6(fc.id) || sanitizeToolCallId("", toolName);
 			const argsText = JSON.stringify(isRecord$4(fc.args) ? fc.args : {});
 			const index = state.blocks.length;
 			const block = {
@@ -5843,7 +5869,7 @@ function processStreamLine(line, state) {
 	}
 	collectUsage(chunk.usageMetadata, state);
 	if (responseData !== chunk) collectUsage(responseData.usageMetadata, state);
-	const finishReason = asString$5(candidate?.finishReason) || asString$5(responseData.finishReason);
+	const finishReason = asString$6(candidate?.finishReason) || asString$6(responseData.finishReason);
 	if (finishReason) {
 		state.finishReason = finishReason;
 		out.push(...closeCurrentBlock(state));
@@ -7528,10 +7554,10 @@ function timeoutSignal$1(signal, ms) {
 function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asRecord$3(value) {
+function asRecord$4(value) {
 	return isRecord$3(value) ? value : void 0;
 }
-function asString$4(value) {
+function asString$5(value) {
 	if (typeof value === "string" && value.trim() !== "") return value;
 	if (typeof value === "number" && Number.isFinite(value)) return String(value);
 }
@@ -7544,7 +7570,7 @@ function asNumber$1(value) {
 }
 function firstString$1(record, keys) {
 	for (const key of keys) {
-		const value = asString$4(record[key]);
+		const value = asString$5(record[key]);
 		if (value !== void 0) return value;
 	}
 }
@@ -7598,16 +7624,16 @@ const ORG_KEYS = [
 ];
 /** Map `/alpha/whoami` (or a stored key's own facts) onto the public account DTO. */
 function parseWhoami(payload, fallback = {}) {
-	const root = asRecord$3(payload) ?? {};
-	const data = asRecord$3(root.data) ?? root;
-	const user = asRecord$3(deepValue(data, USER_KEYS)) ?? {};
-	const org = asRecord$3(deepValue(data, ORG_KEYS)) ?? {};
-	const key = asRecord$3(deepValue(data, [
+	const root = asRecord$4(payload) ?? {};
+	const data = asRecord$4(root.data) ?? root;
+	const user = asRecord$4(deepValue(data, USER_KEYS)) ?? {};
+	const org = asRecord$4(deepValue(data, ORG_KEYS)) ?? {};
+	const key = asRecord$4(deepValue(data, [
 		"apiKey",
 		"key",
 		"credential"
 	])) ?? {};
-	const subscription = asRecord$3(deepValue(data, [
+	const subscription = asRecord$4(deepValue(data, [
 		"subscription",
 		"plan",
 		"tier"
@@ -7711,14 +7737,14 @@ function humanizeWindowKey$1(key) {
 * — so they are read here first, by name.
 */
 function parseWindowLimits(payload, consumed = []) {
-	const root = asRecord$3(payload) ?? {};
-	const limits = asRecord$3(deepValue(asRecord$3(root.data) ?? root, ["windowLimits", "window_limits"]));
+	const root = asRecord$4(payload) ?? {};
+	const limits = asRecord$4(deepValue(asRecord$4(root.data) ?? root, ["windowLimits", "window_limits"]));
 	if (limits === void 0) return [];
 	const keys = [...WINDOW_ORDER$1.filter((key) => limits[key] !== void 0), ...Object.keys(limits).filter((key) => !WINDOW_ORDER$1.includes(key))];
 	const meters = [];
 	for (const key of keys) {
 		if (key === "limited" || key === "exceeded") continue;
-		const record = asRecord$3(limits[key]);
+		const record = asRecord$4(limits[key]);
 		if (record === void 0) continue;
 		const cap = firstNumber$1(record, [
 			"cap",
@@ -7752,8 +7778,8 @@ function parseWindowLimits(payload, consumed = []) {
 * source for a remaining balance.
 */
 function parseCreditBalances(payload, consumed = []) {
-	const root = asRecord$3(payload) ?? {};
-	const credits = asRecord$3(deepValue(asRecord$3(root.data) ?? root, ["credits"]));
+	const root = asRecord$4(payload) ?? {};
+	const credits = asRecord$4(deepValue(asRecord$4(root.data) ?? root, ["credits"]));
 	if (credits === void 0) return [];
 	const monthly = firstNumber$1(credits, ["monthlyCredits", "monthly_credits"]);
 	const purchased = firstNumber$1(credits, ["purchasedCredits", "purchased_credits"]);
@@ -7782,7 +7808,7 @@ function parseCreditBalances(payload, consumed = []) {
 /** Resolve the plan id the subscription or credits payload reports, when either does. */
 function parsePlanId(payloads) {
 	for (const payload of payloads) {
-		const id = asString$4(deepValue(payload, [
+		const id = asString$5(deepValue(payload, [
 			"planId",
 			"plan_id",
 			"priceId",
@@ -7800,13 +7826,13 @@ function parsePlanId(payloads) {
 * subscription's remaining credits as usable would be worse than showing none.
 */
 function parseSubscriptionStatus(payload) {
-	const root = asRecord$3(payload) ?? {};
-	return asString$4(deepValue(asRecord$3(root.data) ?? root, ["status"])) ?? null;
+	const root = asRecord$4(payload) ?? {};
+	return asString$5(deepValue(asRecord$4(root.data) ?? root, ["status"])) ?? null;
 }
 /** End of the current billing period, in Unix milliseconds. */
 function parseSubscriptionPeriodEnd(payload) {
-	const root = asRecord$3(payload) ?? {};
-	return parseTimestamp$1(deepValue(asRecord$3(root.data) ?? root, ["currentPeriodEnd", "current_period_end"]));
+	const root = asRecord$4(payload) ?? {};
+	return parseTimestamp$1(deepValue(asRecord$4(root.data) ?? root, ["currentPeriodEnd", "current_period_end"]));
 }
 /**
 * Turn one billing/usage payload into meters.
@@ -8023,9 +8049,9 @@ function parseUsageWindows$1(payload) {
 	return windows;
 }
 function extractCreditsBalance(payload) {
-	const root = asRecord$3(payload) ?? {};
-	const data = asRecord$3(root.data) ?? root;
-	const credits = asRecord$3(data.credits);
+	const root = asRecord$4(payload) ?? {};
+	const data = asRecord$4(root.data) ?? root;
+	const credits = asRecord$4(data.credits);
 	if (credits !== void 0) {
 		const pools = [
 			"monthlyCredits",
@@ -8057,11 +8083,11 @@ let cachedCatalog;
 let catalogInFlight = null;
 /** Parse the public `/provider/v1/models` payload. */
 function parseProviderModels(payload) {
-	const root = asRecord$3(payload) ?? {};
+	const root = asRecord$4(payload) ?? {};
 	const list = Array.isArray(root.data) ? root.data : Array.isArray(payload) ? payload : [];
 	const models = [];
 	for (const entry of list) {
-		const record = asRecord$3(entry);
+		const record = asRecord$4(entry);
 		if (!record) continue;
 		const id = firstString$1(record, [
 			"id",
@@ -8262,7 +8288,7 @@ function buildModelOptions$1(catalog, enabledModelIds, overrides) {
 function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asString$3(value) {
+function asString$4(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function safeJsonParse$1(text) {
@@ -8304,7 +8330,7 @@ function attachmentOf$1(block) {
 }
 function attachmentLabel$1(block) {
 	const attachment = isRecord$2(block.attachment) ? block.attachment : void 0;
-	return asString$3(attachment?.name) || asString$3(attachment?.attachmentId);
+	return asString$4(attachment?.name) || asString$4(attachment?.attachmentId);
 }
 function collectImageRefs$1(content, refs) {
 	if (!Array.isArray(content)) return;
@@ -8320,7 +8346,7 @@ function base64Length$1(bytes) {
 function requestImageBytes$1(block) {
 	const attachment = attachmentOf$1(block);
 	if (attachment) return base64Length$1(attachment.bytes);
-	const inline = asString$3(block.data) || asString$3(block.base64);
+	const inline = asString$4(block.data) || asString$4(block.base64);
 	return inline ? inline.length : void 0;
 }
 function collectRequestImageBytes$1(content, lengths) {
@@ -8406,10 +8432,10 @@ function unavailableImageText$1(block) {
 	return `[image unavailable: ${label ? `${label} could not be read` : "the image could not be read"}; ask the user to attach it again if the image is needed]`;
 }
 function imageBlockToInline$1(block, images) {
-	let data = asString$3(block.data) || asString$3(block.base64);
+	let data = asString$4(block.data) || asString$4(block.base64);
 	const source = isRecord$2(block.source) ? block.source : void 0;
-	if (!data && source) data = asString$3(source.data) || asString$3(source.base64);
-	let mediaType = asString$3(block.mimeType) || asString$3(block.mediaType) || (source ? asString$3(source.mimeType) || asString$3(source.mediaType) : void 0) || "image/png";
+	if (!data && source) data = asString$4(source.data) || asString$4(source.base64);
+	let mediaType = asString$4(block.mimeType) || asString$4(block.mediaType) || (source ? asString$4(source.mimeType) || asString$4(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
 		const matched = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (matched) {
@@ -8831,7 +8857,7 @@ function processOpenAIStreamLine$1(line, state) {
 	const choice = isRecord$2(choices[0]) ? choices[0] : void 0;
 	const delta = isRecord$2(choice?.delta) ? choice.delta : void 0;
 	if (delta) {
-		const reasoning = asString$3(delta.reasoning_content) ?? asString$3(delta.reasoning);
+		const reasoning = asString$4(delta.reasoning_content) ?? asString$4(delta.reasoning);
 		if (reasoning !== void 0 && reasoning !== "") {
 			out.push(...closeToolCalls$1(state));
 			if (state.current === null || state.current.type !== "reasoning") out.push(...openTextBlock$1(state, "reasoning"));
@@ -8843,7 +8869,7 @@ function processOpenAIStreamLine$1(line, state) {
 				text: sanitizeText$1(reasoning)
 			});
 		}
-		const content = asString$3(delta.content);
+		const content = asString$4(delta.content);
 		if (content !== void 0 && content !== "") {
 			out.push(...closeToolCalls$1(state));
 			if (state.current === null || state.current.type !== "text") out.push(...openTextBlock$1(state, "text"));
@@ -8861,7 +8887,7 @@ function processOpenAIStreamLine$1(line, state) {
 			out.push(...applyOpenAIToolDelta$1(entry, state));
 		}
 	}
-	const finish = asString$3(choice?.finish_reason);
+	const finish = asString$4(choice?.finish_reason);
 	if (finish !== void 0 && finish !== "") {
 		state.finishReason = finish;
 		out.push(...closeCurrent$1(state));
@@ -8878,8 +8904,8 @@ function applyOpenAIToolDelta$1(entry, state) {
 		out.push(...closeCurrent$1(state));
 		call = {
 			blockIndex: state.blocks.length,
-			id: asString$3(entry.id) ?? `call_${wireIndex}`,
-			name: asString$3(fn.name) ?? "",
+			id: asString$4(entry.id) ?? `call_${wireIndex}`,
+			name: asString$4(fn.name) ?? "",
 			arguments: "",
 			started: false
 		};
@@ -8892,13 +8918,13 @@ function applyOpenAIToolDelta$1(entry, state) {
 		state.toolCalls.set(wireIndex, call);
 	} else {
 		if (call.id === `call_${wireIndex}`) {
-			const id = asString$3(entry.id);
+			const id = asString$4(entry.id);
 			if (id !== void 0) call.id = id;
 		}
-		const name = asString$3(fn.name);
+		const name = asString$4(fn.name);
 		if (name !== void 0 && name !== "") call.name = name;
 	}
-	const argsDelta = asString$3(fn.arguments) ?? "";
+	const argsDelta = asString$4(fn.arguments) ?? "";
 	if (argsDelta !== "") call.arguments += argsDelta;
 	if (!call.started) {
 		call.started = true;
@@ -8930,7 +8956,7 @@ function processAnthropicStreamLine$1(line, state) {
 	if (payload === "" || payload === "[DONE]") return [];
 	const event = safeJsonParse$1(payload);
 	if (!isRecord$2(event)) return [];
-	const type = asString$3(event.type);
+	const type = asString$4(event.type);
 	const out = [];
 	if (type === "message_start") {
 		const message = isRecord$2(event.message) ? event.message : void 0;
@@ -8942,21 +8968,21 @@ function processAnthropicStreamLine$1(line, state) {
 			state.cacheWriteTokens = numberOr$1(usage.cache_creation_input_tokens, 0);
 			state.outputTokens = numberOr$1(usage.output_tokens, 0);
 		}
-		const stop = message ? asString$3(message.stop_reason) : void 0;
+		const stop = message ? asString$4(message.stop_reason) : void 0;
 		if (stop !== void 0 && stop !== null) state.finishReason = stop;
 		return out;
 	}
 	if (type === "content_block_start") {
 		const contentIndex = numberOr$1(event.index, 0);
 		const block = isRecord$2(event.content_block) ? event.content_block : {};
-		const blockType = asString$3(block.type);
+		const blockType = asString$4(block.type);
 		out.push(...closeCurrent$1(state));
 		if (blockType === "tool_use") {
 			const index = state.blocks.length;
 			const pending = {
 				blockIndex: index,
-				id: asString$3(block.id) ?? `toolu_${contentIndex}`,
-				name: asString$3(block.name) ?? "",
+				id: asString$4(block.id) ?? `toolu_${contentIndex}`,
+				name: asString$4(block.name) ?? "",
 				arguments: "",
 				started: true
 			};
@@ -8999,10 +9025,10 @@ function processAnthropicStreamLine$1(line, state) {
 	if (type === "content_block_delta") {
 		const contentIndex = numberOr$1(event.index, 0);
 		const delta = isRecord$2(event.delta) ? event.delta : {};
-		const deltaType = asString$3(delta.type);
+		const deltaType = asString$4(delta.type);
 		if (deltaType === "input_json_delta") {
 			const pending = state.toolCalls.get(contentIndex);
-			const partial = asString$3(delta.partial_json) ?? "";
+			const partial = asString$4(delta.partial_json) ?? "";
 			if (pending !== void 0) {
 				pending.arguments += partial;
 				out.push({
@@ -9015,7 +9041,7 @@ function processAnthropicStreamLine$1(line, state) {
 			}
 			return out;
 		}
-		const text = deltaType === "thinking_delta" ? asString$3(delta.thinking) : asString$3(delta.text);
+		const text = deltaType === "thinking_delta" ? asString$4(delta.thinking) : asString$4(delta.text);
 		if (text !== void 0 && text !== "") {
 			const index = state.contentIndexes.get(contentIndex) ?? state.current?.index;
 			const kind = deltaType === "thinking_delta" ? "reasoning" : "text";
@@ -9072,7 +9098,7 @@ function processAnthropicStreamLine$1(line, state) {
 	}
 	if (type === "message_delta") {
 		const delta = isRecord$2(event.delta) ? event.delta : void 0;
-		const stop = delta ? asString$3(delta.stop_reason) : void 0;
+		const stop = delta ? asString$4(delta.stop_reason) : void 0;
 		if (stop !== void 0 && stop !== "") state.finishReason = stop;
 		const usage = isRecord$2(event.usage) ? event.usage : void 0;
 		if (usage) {
@@ -9085,7 +9111,7 @@ function processAnthropicStreamLine$1(line, state) {
 		state.done = true;
 		return closeStream$1(state);
 	}
-	if (type === "error") throw new LlmError(`Command Code stream error: ${asString$3((isRecord$2(event.error) ? event.error : {}).message) ?? "unknown error"}`, "PROVIDER_ERROR");
+	if (type === "error") throw new LlmError(`Command Code stream error: ${asString$4((isRecord$2(event.error) ? event.error : {}).message) ?? "unknown error"}`, "PROVIDER_ERROR");
 	return out;
 }
 function tokenUsage$1(state) {
@@ -10771,7 +10797,7 @@ function withTimeout(signal, ms) {
 function oauthEndpoint(host, endpoint) {
 	return `${host.replace(/\/+$/, "")}${endpoint}`;
 }
-function asRecord$2(value) {
+function asRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /**
@@ -10782,8 +10808,8 @@ function asRecord$2(value) {
 * caller decides whether the flow continues.
 */
 function oauthErrorFields(payload) {
-	const root = asRecord$2(payload) ?? {};
-	const nested = asRecord$2(root.error);
+	const root = asRecord$3(payload) ?? {};
+	const nested = asRecord$3(root.error);
 	if (nested !== void 0) return {
 		code: typeof nested.code === "string" ? nested.code : "",
 		description: String(nested.message ?? nested.error_description ?? nested.detail ?? nested.type ?? "")
@@ -10815,7 +10841,7 @@ async function requestDeviceAuthorization(options = {}) {
 		const { description } = oauthErrorFields(payload);
 		throw new Error(`Device authorization failed (${response.status})${description ? `: ${description}` : ""}`);
 	}
-	const record = asRecord$2(payload) ?? {};
+	const record = asRecord$3(payload) ?? {};
 	const userCode = typeof record.user_code === "string" ? record.user_code : "";
 	const deviceCode = typeof record.device_code === "string" ? record.device_code : "";
 	const complete = typeof record.verification_uri_complete === "string" ? record.verification_uri_complete : "";
@@ -10857,7 +10883,7 @@ async function pollDeviceToken(host, deviceCode, options) {
 		signal: withTimeout(options.signal, OAUTH_TIMEOUT_MS)
 	});
 	const payload = await response.json().catch(() => void 0);
-	const record = asRecord$2(payload) ?? {};
+	const record = asRecord$3(payload) ?? {};
 	if (response.status === 200 && typeof record.access_token === "string" && record.access_token !== "") return {
 		kind: "success",
 		token: parseTokenResponse(record)
@@ -10983,7 +11009,7 @@ async function refreshAccessToken(refreshToken, options = {}) {
 			const payload = await response.json().catch(() => void 0);
 			const { code, description } = oauthErrorFields(payload);
 			if (response.status === 401 || response.status === 403 || code === "invalid_grant") throw new KimiCodeUnauthorizedError(description || "Token refresh was rejected; sign in again.");
-			if (response.ok) return parseTokenResponse(asRecord$2(payload) ?? {});
+			if (response.ok) return parseTokenResponse(asRecord$3(payload) ?? {});
 			if (!RETRYABLE_REFRESH_STATUSES.has(response.status)) throw new Error(description || `Token refresh failed (HTTP ${response.status}).`);
 			lastError = new KimiCodeRetryableError(description || `Token refresh failed (HTTP ${response.status}).`);
 		} catch (error) {
@@ -11208,10 +11234,10 @@ const FIXED_POINT_CENTS = 1e6;
 function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asRecord$1(value) {
+function asRecord$2(value) {
 	return isRecord$1(value) ? value : void 0;
 }
-function asString$2(value) {
+function asString$3(value) {
 	if (typeof value === "string" && value.trim() !== "") return value;
 	if (typeof value === "number" && Number.isFinite(value)) return String(value);
 }
@@ -11225,7 +11251,7 @@ function asNumber(value) {
 }
 function firstString(record, keys) {
 	for (const key of keys) {
-		const value = asString$2(record[key]);
+		const value = asString$3(record[key]);
 		if (value !== void 0) return value;
 	}
 }
@@ -11311,24 +11337,24 @@ function clearCachedCatalog() {
 * length is dropped rather than shown as a zero-capacity model.
 */
 function parseCatalogModel(value) {
-	const record = asRecord$1(value);
+	const record = asRecord$2(value);
 	if (record === void 0) return void 0;
-	const id = asString$2(record.id);
+	const id = asString$3(record.id);
 	if (id === void 0) return void 0;
 	const contextWindow = firstNumber(record, ["context_length", "contextLength"]);
 	if (contextWindow === void 0 || contextWindow <= 0) return void 0;
-	const efforts = asRecord$1(record.think_efforts) ?? asRecord$1(record.thinkEfforts);
+	const efforts = asRecord$2(record.think_efforts) ?? asRecord$2(record.thinkEfforts);
 	const validEfforts = Array.isArray(efforts?.valid_efforts) ? efforts.valid_efforts.filter((entry) => typeof entry === "string") : Array.isArray(efforts?.validEfforts) ? efforts.validEfforts.filter((entry) => typeof entry === "string") : void 0;
 	const modalities = ["text"];
 	if (record.supports_image_in === true || record.supportsImageIn === true) modalities.push("image");
 	if (record.supports_video_in === true || record.supportsVideoIn === true) modalities.push("video");
-	const protocol = asString$2(record.protocol);
+	const protocol = asString$3(record.protocol);
 	return {
 		id,
-		name: asString$2(record.display_name) ?? asString$2(record.displayName) ?? void 0,
+		name: asString$3(record.display_name) ?? asString$3(record.displayName) ?? void 0,
 		contextWindow,
 		...validEfforts === void 0 || validEfforts.length === 0 ? {} : { reasoningEfforts: validEfforts },
-		...asString$2(efforts?.default_effort ?? efforts?.defaultEffort) === void 0 ? {} : { defaultReasoningEffort: asString$2(efforts?.default_effort ?? efforts?.defaultEffort) },
+		...asString$3(efforts?.default_effort ?? efforts?.defaultEffort) === void 0 ? {} : { defaultReasoningEffort: asString$3(efforts?.default_effort ?? efforts?.defaultEffort) },
 		inputModalities: modalities,
 		protocol: protocol === "anthropic" ? "anthropic" : "openai",
 		...record.supports_video_in === true || record.supportsVideoIn === true ? { supportsVideo: true } : {},
@@ -11364,7 +11390,7 @@ async function loadProviderModels$1(options = {}) {
 	});
 	if (!response.ok) throw new Error(`Kimi Code model listing failed (${response.status}).`);
 	const payload = await response.json().catch(() => void 0);
-	const data = Array.isArray(payload) ? payload : asRecord$1(payload)?.data;
+	const data = Array.isArray(payload) ? payload : asRecord$2(payload)?.data;
 	if (!Array.isArray(data)) throw new Error("Kimi Code model listing was not in the documented shape.");
 	const models = data.map(parseCatalogModel).filter((model) => model !== void 0);
 	catalogCache = {
@@ -11526,7 +11552,7 @@ function usageWindow(id, record, descriptor) {
 * than a fabricated 0%.
 */
 function parseUsageWindows(payload) {
-	const root = asRecord$1(payload) ?? {};
+	const root = asRecord$2(payload) ?? {};
 	const windows = [];
 	const seen = /* @__PURE__ */ new Set();
 	const push = (id, record, descriptor) => {
@@ -11536,25 +11562,25 @@ function parseUsageWindows(payload) {
 		seen.add(id);
 		windows.push(parsed);
 	};
-	const usages = asRecord$1(root.usages) ?? asRecord$1(root.usageWindows);
+	const usages = asRecord$2(root.usages) ?? asRecord$2(root.usageWindows);
 	if (usages !== void 0) {
 		const keys = [...WINDOW_ORDER.filter((key) => usages[key] !== void 0), ...Object.keys(usages).filter((key) => !WINDOW_ORDER.includes(key))];
 		for (const key of keys) {
-			const record = asRecord$1(usages[key]);
+			const record = asRecord$2(usages[key]);
 			if (record === void 0) continue;
 			push(key, record, WINDOW_DESCRIPTORS[key]);
 		}
 	}
-	const topLevel = asRecord$1(root.usage);
+	const topLevel = asRecord$2(root.usage);
 	if (topLevel !== void 0 && seen.size === 0) push("limit_7d", topLevel, WINDOW_DESCRIPTORS.limit_7d);
 	const limits = Array.isArray(root.limits) ? root.limits : [];
 	for (const entry of limits) {
-		const record = asRecord$1(entry);
+		const record = asRecord$2(entry);
 		if (record === void 0) continue;
-		const detail = asRecord$1(record.detail) ?? record;
-		const window = asRecord$1(record.window);
+		const detail = asRecord$2(record.detail) ?? record;
+		const window = asRecord$2(record.window);
 		const duration = firstNumber(window ?? {}, ["duration"]);
-		const unit = asString$2(window?.timeUnit ?? window?.time_unit);
+		const unit = asString$3(window?.timeUnit ?? window?.time_unit);
 		const minutes = duration === void 0 ? null : unit === "TIME_UNIT_HOUR" ? duration * 60 : duration;
 		push(minutes === 300 ? "limit_5h" : minutes === 10080 ? "limit_7d" : firstString(record, ["id", "name"]) ?? `limit-${windows.length + 1}`, detail, minutes === null ? void 0 : {
 			label: minutes === 300 ? "5-hour" : `${minutes}-minute`,
@@ -11585,14 +11611,14 @@ function fixedPointToCents(value) {
 * under-report a charge limit by six orders of magnitude.
 */
 function moneyCents(value) {
-	const record = asRecord$1(value);
+	const record = asRecord$2(value);
 	if (record === void 0) return null;
 	const cents = asNumber(record.priceInCents ?? record.price_in_cents);
 	return cents === void 0 || !Number.isFinite(cents) ? null : Math.round(cents);
 }
 function moneyCurrency(value) {
-	const record = asRecord$1(value);
-	return record === void 0 ? void 0 : asString$2(record.currency);
+	const record = asRecord$2(value);
+	return record === void 0 ? void 0 : asString$3(record.currency);
 }
 /**
 * Read the booster wallet (the pay-as-you-go top-up pool).
@@ -11602,11 +11628,11 @@ function moneyCurrency(value) {
 * cannot spend.
 */
 function parseExtraUsage(payload) {
-	const root = asRecord$1(payload) ?? {};
-	const wallet = asRecord$1(root.boosterWallet) ?? asRecord$1(root.booster_wallet) ?? asRecord$1(root.extraUsage);
+	const root = asRecord$2(payload) ?? {};
+	const wallet = asRecord$2(root.boosterWallet) ?? asRecord$2(root.booster_wallet) ?? asRecord$2(root.extraUsage);
 	if (wallet === void 0) return null;
-	const balance = asRecord$1(wallet.balance);
-	const balanceType = asString$2(balance?.type);
+	const balance = asRecord$2(wallet.balance);
+	const balanceType = asString$3(balance?.type);
 	const amount = asNumber(balance?.amount);
 	if (balance === void 0 || balanceType !== "BOOSTER" || amount === void 0 || amount <= 0) return null;
 	const limit = wallet.monthlyChargeLimit ?? wallet.monthly_charge_limit;
@@ -11617,7 +11643,7 @@ function parseExtraUsage(payload) {
 		monthlyChargeLimitEnabled: wallet.monthlyChargeLimitEnabled === true || wallet.monthly_charge_limit_enabled === true,
 		monthlyChargeLimitCents: moneyCents(limit),
 		monthlyUsedCents: moneyCents(used),
-		currency: moneyCurrency(limit) ?? moneyCurrency(used) ?? asString$2(wallet.currency) ?? "USD"
+		currency: moneyCurrency(limit) ?? moneyCurrency(used) ?? asString$3(wallet.currency) ?? "USD"
 	};
 }
 /**
@@ -11654,7 +11680,7 @@ function membershipLevelName(level) {
 * `user_level_name` still yields a readable tier instead of a raw enum.
 */
 function parsePlanName(payload) {
-	const root = asRecord$1(payload) ?? {};
+	const root = asRecord$2(payload) ?? {};
 	const direct = firstString(root, [
 		"user_level_name",
 		"userLevelName",
@@ -11662,18 +11688,18 @@ function parsePlanName(payload) {
 		"plan_name"
 	]);
 	if (direct !== void 0) return direct;
-	const membership = asRecord$1(asRecord$1(root.user)?.membership);
-	const named = asString$2(membership?.level_name ?? membership?.levelName);
+	const membership = asRecord$2(asRecord$2(root.user)?.membership);
+	const named = asString$3(membership?.level_name ?? membership?.levelName);
 	if (named !== void 0) return named;
-	return membershipLevelName(asString$2(membership?.level) ?? null);
+	return membershipLevelName(asString$3(membership?.level) ?? null);
 }
 /** Machine tier level when the service reports one. */
 function parsePlanLevel(payload) {
-	const root = asRecord$1(payload) ?? {};
+	const root = asRecord$2(payload) ?? {};
 	const direct = firstNumber(root, ["user_level", "userLevel"]);
 	if (direct !== void 0) return String(direct);
-	const membership = asRecord$1(asRecord$1(root.user)?.membership);
-	return asString$2(membership?.level ?? membership?.levelId ?? membership?.level_id) ?? null;
+	const membership = asRecord$2(asRecord$2(root.user)?.membership);
+	return asString$3(membership?.level ?? membership?.levelId ?? membership?.level_id) ?? null;
 }
 /**
 * Fetch and cache the account's quota snapshot.
@@ -11740,7 +11766,7 @@ function accountFromCredentials(credentials, payload, profile) {
 	const planLevel = (profile === void 0 ? null : parsePlanLevel(profile)) ?? (payload === void 0 ? null : parsePlanLevel(payload));
 	return {
 		userId: credentials.userId ?? identity.userId ?? null,
-		nickname: (profile === void 0 ? null : firstString(asRecord$1(profile) ?? {}, [
+		nickname: (profile === void 0 ? null : firstString(asRecord$2(profile) ?? {}, [
 			"nickname",
 			"username",
 			"name"
@@ -11941,7 +11967,7 @@ function videoBlockLabel(block) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asString$1(value) {
+function asString$2(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function safeJsonParse(text) {
@@ -12100,7 +12126,7 @@ function attachmentOf(block) {
 }
 function attachmentLabel(block) {
 	const attachment = isRecord(block.attachment) ? block.attachment : void 0;
-	return asString$1(attachment?.name) || asString$1(attachment?.attachmentId);
+	return asString$2(attachment?.name) || asString$2(attachment?.attachmentId);
 }
 function collectImageRefs(content, refs) {
 	if (!Array.isArray(content)) return;
@@ -12116,7 +12142,7 @@ function base64Length(bytes) {
 function requestImageBytes(block) {
 	const attachment = attachmentOf(block);
 	if (attachment) return base64Length(attachment.bytes);
-	const inline = asString$1(block.data) || asString$1(block.base64);
+	const inline = asString$2(block.data) || asString$2(block.base64);
 	return inline ? inline.length : void 0;
 }
 function collectRequestImageBytes(content, lengths) {
@@ -12214,7 +12240,7 @@ function collectVideoRefs(content, refs) {
 }
 /** Base64 length of one video occurrence, or undefined when it states none. */
 function requestVideoBytes(block) {
-	const inline = asString$1(block.data) || asString$1(block.base64);
+	const inline = asString$2(block.data) || asString$2(block.base64);
 	if (inline) return inline.length;
 	const attachment = videoAttachmentOf(block);
 	return attachment === void 0 ? void 0 : base64LengthOf(attachment.bytes);
@@ -12313,8 +12339,8 @@ function requestHasVideo(options) {
 function videoBlockToInline(block, videos, videoAccepted) {
 	const label = videoBlockLabel(block);
 	if (!videoAccepted) return { omission: videoOmissionText("unsupported-model", label) };
-	let data = asString$1(block.data) || asString$1(block.base64);
-	let mediaType = asString$1(block.mediaType) || asString$1(block.mimeType);
+	let data = asString$2(block.data) || asString$2(block.base64);
+	let mediaType = asString$2(block.mediaType) || asString$2(block.mimeType);
 	if (data?.startsWith("data:")) {
 		const matched = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (matched) {
@@ -12341,10 +12367,10 @@ function unavailableImageText(block) {
 	return `[image unavailable: ${label ? `${label} could not be read` : "the image could not be read"}; ask the user to attach it again if the image is needed]`;
 }
 function imageBlockToInline(block, images) {
-	let data = asString$1(block.data) || asString$1(block.base64);
+	let data = asString$2(block.data) || asString$2(block.base64);
 	const source = isRecord(block.source) ? block.source : void 0;
-	if (!data && source) data = asString$1(source.data) || asString$1(source.base64);
-	let mediaType = asString$1(block.mimeType) || asString$1(block.mediaType) || (source ? asString$1(source.mimeType) || asString$1(source.mediaType) : void 0) || "image/png";
+	if (!data && source) data = asString$2(source.data) || asString$2(source.base64);
+	let mediaType = asString$2(block.mimeType) || asString$2(block.mediaType) || (source ? asString$2(source.mimeType) || asString$2(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
 		const matched = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (matched) {
@@ -12968,7 +12994,7 @@ function processOpenAIStreamLine(line, state) {
 	if (!isRecord(chunk)) return [];
 	const out = [];
 	const errorPayload = isRecord(chunk.error) ? chunk.error : void 0;
-	if (errorPayload !== void 0) throw new LlmError(`Kimi Code stream error: ${asString$1(errorPayload.message) ?? "unknown error"}`, "PROVIDER_ERROR");
+	if (errorPayload !== void 0) throw new LlmError(`Kimi Code stream error: ${asString$2(errorPayload.message) ?? "unknown error"}`, "PROVIDER_ERROR");
 	const usage = isRecord(chunk.usage) ? chunk.usage : void 0;
 	if (usage) {
 		state.sawUsage = true;
@@ -12984,7 +13010,7 @@ function processOpenAIStreamLine(line, state) {
 	const choice = isRecord(choices[0]) ? choices[0] : void 0;
 	const delta = isRecord(choice?.delta) ? choice.delta : void 0;
 	if (delta) {
-		const reasoning = asString$1(delta.reasoning_content) ?? asString$1(delta.reasoning);
+		const reasoning = asString$2(delta.reasoning_content) ?? asString$2(delta.reasoning);
 		if (reasoning !== void 0 && reasoning !== "") {
 			out.push(...closeToolCalls(state));
 			if (state.current === null || state.current.type !== "reasoning") out.push(...openTextBlock(state, "reasoning"));
@@ -12996,7 +13022,7 @@ function processOpenAIStreamLine(line, state) {
 				text: sanitizeText(reasoning)
 			});
 		}
-		const content = asString$1(delta.content);
+		const content = asString$2(delta.content);
 		if (content !== void 0 && content !== "") {
 			out.push(...closeToolCalls(state));
 			if (state.current === null || state.current.type !== "text") out.push(...openTextBlock(state, "text"));
@@ -13014,7 +13040,7 @@ function processOpenAIStreamLine(line, state) {
 			out.push(...applyOpenAIToolDelta(entry, state));
 		}
 	}
-	const finish = asString$1(choice?.finish_reason);
+	const finish = asString$2(choice?.finish_reason);
 	if (finish !== void 0 && finish !== "") {
 		state.finishReason = finish;
 		out.push(...closeCurrent(state));
@@ -13031,8 +13057,8 @@ function applyOpenAIToolDelta(entry, state) {
 		out.push(...closeCurrent(state));
 		call = {
 			blockIndex: state.blocks.length,
-			id: asString$1(entry.id) ?? `call_${wireIndex}`,
-			name: asString$1(fn.name) ?? "",
+			id: asString$2(entry.id) ?? `call_${wireIndex}`,
+			name: asString$2(fn.name) ?? "",
 			arguments: "",
 			started: false
 		};
@@ -13045,13 +13071,13 @@ function applyOpenAIToolDelta(entry, state) {
 		state.toolCalls.set(wireIndex, call);
 	} else {
 		if (call.id === `call_${wireIndex}`) {
-			const id = asString$1(entry.id);
+			const id = asString$2(entry.id);
 			if (id !== void 0) call.id = id;
 		}
-		const name = asString$1(fn.name);
+		const name = asString$2(fn.name);
 		if (name !== void 0 && name !== "") call.name = name;
 	}
-	const argsDelta = asString$1(fn.arguments) ?? "";
+	const argsDelta = asString$2(fn.arguments) ?? "";
 	if (argsDelta !== "") call.arguments += argsDelta;
 	if (!call.started) {
 		call.started = true;
@@ -13080,7 +13106,7 @@ function processAnthropicStreamLine(line, state) {
 	if (payload === "" || payload === "[DONE]") return [];
 	const event = safeJsonParse(payload);
 	if (!isRecord(event)) return [];
-	const type = asString$1(event.type);
+	const type = asString$2(event.type);
 	const out = [];
 	if (type === "message_start") {
 		const message = isRecord(event.message) ? event.message : void 0;
@@ -13092,21 +13118,21 @@ function processAnthropicStreamLine(line, state) {
 			state.cacheWriteTokens = numberOr(usage.cache_creation_input_tokens, 0);
 			state.outputTokens = numberOr(usage.output_tokens, 0);
 		}
-		const stop = message ? asString$1(message.stop_reason) : void 0;
+		const stop = message ? asString$2(message.stop_reason) : void 0;
 		if (stop !== void 0) state.finishReason = stop;
 		return out;
 	}
 	if (type === "content_block_start") {
 		const contentIndex = numberOr(event.index, 0);
 		const block = isRecord(event.content_block) ? event.content_block : {};
-		const blockType = asString$1(block.type);
+		const blockType = asString$2(block.type);
 		out.push(...closeCurrent(state));
 		if (blockType === "tool_use") {
 			const index = state.blocks.length;
 			const pending = {
 				blockIndex: index,
-				id: asString$1(block.id) ?? `toolu_${contentIndex}`,
-				name: asString$1(block.name) ?? "",
+				id: asString$2(block.id) ?? `toolu_${contentIndex}`,
+				name: asString$2(block.name) ?? "",
 				arguments: "",
 				started: true
 			};
@@ -13149,10 +13175,10 @@ function processAnthropicStreamLine(line, state) {
 	if (type === "content_block_delta") {
 		const contentIndex = numberOr(event.index, 0);
 		const delta = isRecord(event.delta) ? event.delta : {};
-		const deltaType = asString$1(delta.type);
+		const deltaType = asString$2(delta.type);
 		if (deltaType === "input_json_delta") {
 			const pending = state.toolCalls.get(contentIndex);
-			const partial = asString$1(delta.partial_json) ?? "";
+			const partial = asString$2(delta.partial_json) ?? "";
 			if (pending !== void 0) {
 				pending.arguments += partial;
 				out.push({
@@ -13165,7 +13191,7 @@ function processAnthropicStreamLine(line, state) {
 			}
 			return out;
 		}
-		const text = deltaType === "thinking_delta" ? asString$1(delta.thinking) : asString$1(delta.text);
+		const text = deltaType === "thinking_delta" ? asString$2(delta.thinking) : asString$2(delta.text);
 		if (text !== void 0 && text !== "") {
 			const index = state.contentIndexes.get(contentIndex) ?? state.current?.index;
 			const kind = deltaType === "thinking_delta" ? "reasoning" : "text";
@@ -13222,7 +13248,7 @@ function processAnthropicStreamLine(line, state) {
 	}
 	if (type === "message_delta") {
 		const delta = isRecord(event.delta) ? event.delta : void 0;
-		const stop = delta ? asString$1(delta.stop_reason) : void 0;
+		const stop = delta ? asString$2(delta.stop_reason) : void 0;
 		if (stop !== void 0 && stop !== "") state.finishReason = stop;
 		const usage = isRecord(event.usage) ? event.usage : void 0;
 		if (usage) {
@@ -13235,7 +13261,7 @@ function processAnthropicStreamLine(line, state) {
 		state.done = true;
 		return closeStream(state);
 	}
-	if (type === "error") throw new LlmError(`Kimi Code stream error: ${asString$1((isRecord(event.error) ? event.error : {}).message) ?? "unknown error"}`, "PROVIDER_ERROR");
+	if (type === "error") throw new LlmError(`Kimi Code stream error: ${asString$2((isRecord(event.error) ? event.error : {}).message) ?? "unknown error"}`, "PROVIDER_ERROR");
 	return out;
 }
 let cacheStats = {
@@ -14378,11 +14404,21 @@ const SUBAGENT_POLICY_EVENT = "subagent/model-selection-policy";
 /** Delegation tools whose child routes this guard authorizes. */
 const DEFAULT_DELEGATION_TOOLS = ["subagent"];
 /**
+* Delegation tools that start their child on the caller's own route by design.
+* `subagent_fork` is the shipped one: it omits `modelSelectionSettings`, so it
+* exposes no route parameters and seeds the child from the parent's own
+* conversation — a child on any other route would discard the inherited prefix
+* and its cache. Inherit mode is what keeps that design honest: the fork still
+* cannot choose, but an allowlist-carrying Session now refuses to let it run on
+* a route the user did not authorize.
+*/
+const DEFAULT_SUBAGENT_INHERIT_TOOLS = ["subagent_fork"];
+/**
 * Read one deployment event field as a string.
 * @param value - Candidate field value from a durable event.
 * @returns the string value, or undefined for any other type.
 */
-function asString(value) {
+function asString$1(value) {
 	return typeof value === "string" ? value : void 0;
 }
 /**
@@ -14390,7 +14426,7 @@ function asString(value) {
 * @param value - Candidate field value from a durable event.
 * @returns the record value, or undefined for arrays, null, and primitives.
 */
-function asRecord(value) {
+function asRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /**
@@ -14407,13 +14443,13 @@ function asBoolean(value) {
 * @returns every well-formed route, or undefined when the payload carries none.
 */
 function parseAllowedRoutes(data) {
-	const allowed = asRecord(data)?.["allowedModels"];
+	const allowed = asRecord$1(data)?.["allowedModels"];
 	if (!Array.isArray(allowed)) return void 0;
 	const routes = [];
 	for (const entry of allowed) {
-		const record = asRecord(entry);
-		const provider = asString(record?.["provider"]);
-		const model = asString(record?.["model"]);
+		const record = asRecord$1(entry);
+		const provider = asString$1(record?.["provider"]);
+		const model = asString$1(record?.["model"]);
 		if (provider === void 0 || model === void 0) continue;
 		if (provider.length === 0 || model.length === 0) continue;
 		routes.push({
@@ -14458,7 +14494,7 @@ function authorizedRoutesFor(agent, sessions) {
 		if (recorded !== void 0) return recorded;
 		const header = session.header;
 		if (header?.origin !== "subagent") return void 0;
-		const parentId = asString(header.parentSession);
+		const parentId = asString$1(header.parentSession);
 		if (parentId === void 0) return void 0;
 		session = sessions.get(parentId);
 	}
@@ -14474,7 +14510,7 @@ function subagentModelSelectionPreference(settings) {
 	const register = settings["register"];
 	if (typeof register !== "function") return void 0;
 	try {
-		const value = asRecord(register.call(settings, SUBAGENT_MODEL_SELECTION_NAMESPACE, z.object({
+		const value = asRecord$1(register.call(settings, SUBAGENT_MODEL_SELECTION_NAMESPACE, z.object({
 			enabled: z.boolean().default(false),
 			allowedModels: z.array(z.object({
 				provider: z.string().min(1).required(),
@@ -14490,6 +14526,40 @@ function subagentModelSelectionPreference(settings) {
 		return;
 	}
 }
+/**
+* Read the route an inherit-mode child would run on: the calling agent's own
+* effective request route. This mirrors the delegation seam's
+* `parentAgentOptionsForDelegation`, where the latest request header owns
+* provider/model after request-time model selection and the creation options
+* remain the fallback before the first request. `AuthorizationAgent.options` is
+* deliberately NOT a fallback while a header exists — after a mid-session model
+* switch the creation options are stale, and trusting them would authorize the
+* route the session no longer uses.
+* @param agent - Calling agent.
+* @returns the inherited route fields, each absent when its source did not supply it.
+*/
+function inheritedRouteOf(agent) {
+	const session = agent?.session;
+	let header;
+	try {
+		header = session?.requestHeader?.();
+	} catch {
+		header = void 0;
+	}
+	if (header?.config !== void 0) {
+		const provider = asString$1(header.config.provider);
+		const model = asString$1(header.config.model);
+		if (provider !== void 0 || model !== void 0) return {
+			provider,
+			model,
+			reasoningEffort: asString$1(header.config.reasoningEffort)
+		};
+	}
+	return {
+		provider: asString$1(agent?.options?.provider),
+		model: asString$1(agent?.options?.model)
+	};
+}
 /** Whether an exact route is authorized by a allowlist. */
 function routesInclude(allowed, provider, model) {
 	return allowed.some((route) => route.provider === provider && route.model === model);
@@ -14534,24 +14604,76 @@ function unauthorizedRouteReason(provider, model, allowed, explicit) {
 	return `subagent model selection: ${explicit ? "the model this call selected is not on the Session allowlist" : "the route this call would inherit from the parent is not on the Session allowlist"} (${route}). Provide an authorized provider and model — ${authorizedRoutesText(allowed)} — using list_subagent_models to inspect their reasoning efforts.`;
 }
 /**
+* Build the denial reason for an inherit-mode delegation that named a route.
+* The fork backend accepts no route parameters, so a named pair is not a
+* partial override the backend would ignore — it is a request to change the
+* route, which is exactly what an inherit-mode tool exists to prevent.
+* @param toolName - the tool the model called.
+* @param provider - the provider the call named.
+* @param model - the model the call named.
+* @returns the corrective reason handed back to the model.
+*/
+function inheritOverrideReason(toolName, provider, model) {
+	return `subagent model selection: "${toolName}" always runs on the calling agent's own route and accepts no provider/model. This call named "${provider}/${model}". Remove those fields, or delegate through a tool that supports explicit child model selection.`;
+}
+/**
+* Build the denial reason for an inherit-mode delegation whose inherited route
+* is outside the allowlist. Unlike the explicit case this is not something the
+* call can fix by naming a route, so the reason points at the tool that can.
+* @param toolName - the tool the model called.
+* @param provider - the parent route the child would inherit, when known.
+* @param model - the parent model the child would inherit, when known.
+* @param allowed - Routes the calling Session authorizes.
+* @param reasoningEffort - the inherited effort, when the header recorded one.
+* @returns the corrective reason handed back to the model.
+*/
+function inheritRouteDenialReason(toolName, provider, model, allowed, reasoningEffort) {
+	return `subagent model selection: "${toolName}" keeps its child on ${provider === void 0 || model === void 0 ? "the calling agent's route" : `"${provider}/${model}"${reasoningEffort === void 0 ? "" : ` (${reasoningEffort})`}`}, which this Session's allowlist does not authorize, so it is unavailable for now. Its child cannot be re-routed, so either delegate through a tool that exposes provider and model — passing one of ${authorizedRoutesText(allowed)} — or continue on an authorized model for this session, after which ${toolName} works again.`;
+}
+/**
+* Resolve one tool's enforcement mode from the configured policies. An
+* unconfigured name is `undefined`: the guard does not police it, which is how
+* the plain-name configuration keeps its existing meaning.
+* @param policies - Configured tool policies in precedence order.
+* @param toolName - Tool being dispatched.
+* @returns the first matching mode, or undefined when the guard ignores the tool.
+*/
+function delegationModeOf(policies, toolName) {
+	for (const policy of policies) if (policy.name === toolName) return policy.mode;
+}
+/**
 * Decide whether one delegation call may start its child.
 * @param agent - Calling agent.
 * @param toolName - Tool being dispatched.
 * @param args - Parsed tool arguments.
 * @param preference - Current Host preference, when the settings service exists.
 * @param sessions - Session registry used for ancestor lookup.
-* @param toolNames - Delegation tool names this guard authorizes.
+* @param toolNames - Delegation tool names this guard authorizes (explicit mode).
 * @param scope - Whether an unrecorded Session falls back to the preference.
+* @param inheritToolNames - Delegation tools that start a child on the caller's own route.
 * @returns a denial reason, or undefined to leave the call untouched.
 */
-function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session") {
-	if (!toolNames.includes(toolName)) return void 0;
+function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session", inheritToolNames = []) {
+	const mode = delegationModeOf([...toolNames.map((name) => ({
+		name,
+		mode: "explicit"
+	})), ...inheritToolNames.map((name) => ({
+		name,
+		mode: "inherit"
+	}))], toolName);
+	if (mode === void 0) return void 0;
 	if (preference !== void 0 && !preference.enabled) return void 0;
 	const allowed = authorizedRoutesFor(agent, sessions) ?? (scope === "preference" ? preference?.allowedModels ?? [] : []);
 	if (allowed.length === 0) return void 0;
-	const request = asRecord(args) ?? {};
-	const requestedProvider = asString(request["provider"]);
-	const requestedModel = asString(request["model"]);
+	const request = asRecord$1(args) ?? {};
+	const requestedProvider = asString$1(request["provider"]);
+	const requestedModel = asString$1(request["model"]);
+	if (mode === "inherit") {
+		if (requestedProvider !== void 0 && requestedModel !== void 0) return inheritOverrideReason(toolName, requestedProvider, requestedModel);
+		const inherited = inheritedRouteOf(agent);
+		if (inherited.provider !== void 0 && inherited.model !== void 0 && routesInclude(allowed, inherited.provider, inherited.model)) return void 0;
+		return inheritRouteDenialReason(toolName, inherited.provider, inherited.model, allowed, inherited.reasoningEffort);
+	}
 	if (requestedProvider === void 0) return requestedModel === void 0 ? missingRouteReason(allowed) : partialRouteReason("provider", requestedModel, allowed);
 	if (requestedModel === void 0) return partialRouteReason("model", requestedProvider, allowed);
 	if (routesInclude(allowed, requestedProvider, requestedModel)) return void 0;
@@ -14565,7 +14687,7 @@ function delegationDenialReason(agent, toolName, args, preference, sessions, too
 * @returns a guard that denies delegations outside the Session allowlist.
 */
 function createSubagentAuthorization(options) {
-	return (agent, toolName, args) => delegationDenialReason(agent, toolName, args, subagentModelSelectionPreference(options.settings), options.sessions, options.toolNames, options.scope ?? "session");
+	return (agent, toolName, args) => delegationDenialReason(agent, toolName, args, subagentModelSelectionPreference(options.settings), options.sessions, options.toolNames, options.scope ?? "session", options.inheritToolNames ?? []);
 }
 /** Delegation names this guard recognizes when configuration omits them. */
 function normalizeDelegationToolNames(value) {
@@ -14573,6 +14695,29 @@ function normalizeDelegationToolNames(value) {
 	return [...new Set(names.length === 0 ? [...DEFAULT_DELEGATION_TOOLS] : names.map((name) => name.trim()))];
 }
 /**
+* Normalize the configured inherit-mode names. Unlike
+* {@link normalizeDelegationToolNames}, an empty array is a deliberate opt-out
+* (`[]`) rather than a request for the default, and `undefined` selects the
+* shipped default.
+* @param value - Candidate configuration value.
+* @returns the exact inherit-mode names this guard enforces.
+*/
+function normalizeInheritToolNames(value) {
+	if (value === void 0) return [...DEFAULT_SUBAGENT_INHERIT_TOOLS];
+	const names = Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry.trim().length > 0) : [];
+	return [...new Set(names.map((name) => name.trim()))];
+}
+/**
+* Validate the configured inherit-mode names. Emptiness is legal here — it
+* disables inherit enforcement — but a malformed entry is not.
+* @param toolNames - Candidate inherit-mode delegation tool names.
+* @returns the exact names this guard enforces in inherit mode.
+*/
+function validateInheritToolNames(toolNames) {
+	for (const name of toolNames) if (name.length === 0 || name !== name.trim()) throw new Error(`dsh-chatgpt-subscription: subagentModelInheritTools entry "${name}" must be a non-empty trimmed string`);
+	return [...toolNames];
+}
+/**
 * Validate the plugin configuration that owns this guard.
 * @param toolNames - Candidate delegation tool names.
 * @returns the exact names this guard authorizes.
@@ -14591,12 +14736,15 @@ function validateDelegationToolNames(toolNames) {
 */
 function installSubagentModelAuthorization(ctx, sessions, config = {}) {
 	const toolNames = validateDelegationToolNames(config.toolNames ?? [...DEFAULT_DELEGATION_TOOLS]);
+	const inheritToolNames = validateInheritToolNames(config.inheritToolNames ?? []);
+	if (inheritToolNames.some((name) => toolNames.includes(name))) throw new Error(`dsh-chatgpt-subscription: a delegation tool cannot be both an explicit and an inherit tool (${inheritToolNames.filter((name) => toolNames.includes(name)).join(", ")})`);
 	const scope = validateAuthorizationScope(config.scope ?? "session");
 	const settings = ctx.get?.("settings");
 	const authorize = createSubagentAuthorization({
 		settings,
 		sessions,
 		toolNames,
+		inheritToolNames,
 		scope
 	});
 	return ctx.tools.guard((exec) => authorize(exec.agent, exec.name, exec.arguments));
@@ -14632,12 +14780,128 @@ function validateAuthorizationScope(scope) {
 * Windows it can abort the process with STATUS_STACK_BUFFER_OVERRUN when the
 * source path contains non-ASCII characters (nodejs/node#54476). The copy is
 * per-entry instead, which also lets source mtimes ride along.
+*
+* A preset row names the package it mounts, so a name the running installation
+* does not ship makes the whole preset unresolvable. Text naming a package the
+* harness renamed is therefore reconciled with the installation before it is
+* compared or written.
 * @module dsh-chatgpt-subscription/preset-sync
 */
 /** The preset directory this package ships. */
 const BUNDLED_PRESET_IDS = ["dispatch"];
 /** Clock tolerance for the mtime fast path before falling through to a byte compare. */
 const MTIME_TOLERANCE_MS = 1e3;
+/** Extensions whose text may name a package. */
+const REWRITABLE_EXTENSIONS = [".yml", ".yaml"];
+/**
+* Package names the harness renamed, mapped to the name that replaced each.
+*
+* Harness 0.1.6 renamed `workflow-worker-thread` to `workflow-ptc`; every
+* earlier release ships only the former. The bundled preset carries the
+* earlier spelling, which the sync replaces when the installation ships the
+* later one.
+*/
+const RENAMED_PACKAGES = /* @__PURE__ */ new Map([["@deepseek-ai/dsh-workflow-worker-thread", "@deepseek-ai/dsh-workflow-ptc"]]);
+/**
+* Packages whose row some supported harness generation does not ship at all.
+*
+* An enabled row naming a package the installation cannot resolve makes the
+* whole preset unresolvable — the roster reports it broken, which is worse than
+* a missing row because a broken preset can be neither selected nor copied. The
+* roster skips a `disabled` row in that check, so the sync disables a row whose
+* package is absent, and the next boot that ships the package re-enables it.
+*
+* The set is deliberately explicit rather than "every row that fails to
+* resolve": a resolver that fails on a working installation would then strip
+* the preset down to nothing, a quieter failure than the one it fixes.
+*/
+const OPTIONALLY_ABSENT_PACKAGES = ["@deepseek-ai/dsh-tool-present"];
+/**
+* Whether a bare specifier resolves from this module in the running
+* installation. A harness whose Node build exposes no `import.meta.resolve`
+* answers `false` for everything, which leaves every bundled spelling in place.
+* @param specifier - bare package specifier.
+* @returns whether the specifier resolves.
+*/
+function resolvesFromHere(specifier) {
+	const resolve = import.meta.resolve;
+	if (resolve === void 0) return false;
+	try {
+		resolve(specifier);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Point every renamed package name at the spelling this installation ships.
+*
+* A name that still resolves is left alone, and so is a rename whose
+* replacement does not resolve: with neither spelling present the preset is
+* unresolvable either way, and rewriting would only hide which name was tried.
+* @param content - bundled preset file text.
+* @param resolves - whether a bare specifier resolves in this installation.
+* @returns the text to write, equal to `content` when no rename applies.
+*/
+function reconcilePackageNames(content, resolves) {
+	let out = content;
+	for (const [renamed, current] of RENAMED_PACKAGES) {
+		if (!out.includes(renamed)) continue;
+		if (resolves(renamed) || !resolves(current)) continue;
+		out = out.split(renamed).join(current);
+	}
+	return out;
+}
+/** Leading spaces of one line — the indentation its YAML keys share. */
+function indentationOf(line) {
+	return line.length - line.trimStart().length;
+}
+/** The package a row line mounts, when the line is a row's `name:` key. */
+function rowPackageName(line) {
+	return /^\s*name:\s*'([^']+)'\s*$/.exec(line)?.[1];
+}
+/** Whether the row whose `name:` key sits at `index` already declares `disabled`. */
+function rowDeclaresDisabled(lines, index) {
+	const indent = indentationOf(lines[index] ?? "");
+	for (const line of lines.slice(index + 1)) {
+		if (line.trim() === "") continue;
+		const own = indentationOf(line);
+		if (own < indent) return false;
+		if (own === indent && line.trimStart().startsWith("disabled:")) return true;
+	}
+	return false;
+}
+/**
+* Disable every row whose package this installation does not ship.
+* @param content - preset file text.
+* @param resolves - whether a bare specifier resolves in this installation.
+* @returns the text to write, equal to `content` when no row is affected.
+*/
+function disableRowsForAbsentPackages(content, resolves) {
+	const lines = content.split("\n");
+	const out = [];
+	for (const [index, line] of lines.entries()) {
+		out.push(line);
+		const specifier = rowPackageName(line);
+		if (specifier === void 0 || !OPTIONALLY_ABSENT_PACKAGES.includes(specifier)) continue;
+		if (resolves(specifier) || rowDeclaresDisabled(lines, index)) continue;
+		out.push(`${" ".repeat(indentationOf(line))}disabled: true`);
+	}
+	return out.join("\n");
+}
+/**
+* Reconcile one bundled preset file with the packages this installation ships:
+* a renamed package takes the spelling it carries, and a row it cannot mount is
+* disabled rather than left to mark the whole preset unresolvable.
+* @param content - bundled preset file text.
+* @param resolves - whether a bare specifier resolves in this installation.
+* @returns the text to write.
+*/
+function reconcilePreset(content, resolves) {
+	return disableRowsForAbsentPackages(reconcilePackageNames(content, resolves), resolves);
+}
+/** Rewrite bundled preset text for the packages this installation ships. */
+const rewritePresetFile = (_relativePath, content) => reconcilePreset(content, resolvesFromHere);
 /**
 * The package root, found by walking up from this module to the nearest
 * `package.json`.
@@ -14725,12 +14989,34 @@ function copyTreeSync(sourceDir, targetDir) {
 	}
 }
 /**
+* Text files below `sourceDir` whose content `rewrite` changes, keyed by path
+* relative to `sourceDir`.
+* @param sourceDir - bundled preset directory.
+* @param rewrite - text rewrite for the running installation.
+* @returns replacement text per changed file.
+*/
+function collectRewrites(sourceDir, rewrite) {
+	const rewrites = /* @__PURE__ */ new Map();
+	for (const file of filesUnder(sourceDir)) {
+		if (!REWRITABLE_EXTENSIONS.some((extension) => file.endsWith(extension))) continue;
+		const content = readFileSync(file, "utf8");
+		const rewritten = rewrite(relative(sourceDir, file), content);
+		if (rewritten !== content) rewrites.set(relative(sourceDir, file), rewritten);
+	}
+	return rewrites;
+}
+/** Write the replacement text of every rewritten file below `targetDir`. */
+function writeRewrites(targetDir, rewrites) {
+	for (const [rel, content] of rewrites) writeFileSync(join(targetDir, rel), content);
+}
+/**
 * Copy `sourceDir` into `targetDir` idempotently.
 * @param sourceDir - bundled preset directory.
 * @param targetDir - discovery-root directory for the same preset id.
+* @param rewrites - replacement text by path relative to `sourceDir`; a rewritten file is compared by content, since its target carries no source mtime.
 * @returns whether anything was written.
 */
-function syncOnePreset(sourceDir, targetDir) {
+function syncOnePreset(sourceDir, targetDir, rewrites = /* @__PURE__ */ new Map()) {
 	const sourceFiles = filesUnder(sourceDir);
 	const sourceSet = new Set(sourceFiles.map((file) => relative(sourceDir, file)));
 	if (existsSync(targetDir) && !statSync(targetDir).isDirectory()) rmSync(targetDir, {
@@ -14739,12 +15025,22 @@ function syncOnePreset(sourceDir, targetDir) {
 	});
 	if (!existsSync(targetDir)) {
 		copyTreeSync(sourceDir, targetDir);
+		writeRewrites(targetDir, rewrites);
 		pruneExtras(targetDir, sourceSet);
 		return "synced";
 	}
 	let dirty = false;
 	for (const file of sourceFiles) {
-		const dest = join(targetDir, relative(sourceDir, file));
+		const rel = relative(sourceDir, file);
+		const dest = join(targetDir, rel);
+		const replacement = rewrites.get(rel);
+		if (replacement !== void 0) {
+			if (!existsSync(dest) || readFileSync(dest, "utf8") !== replacement) {
+				dirty = true;
+				break;
+			}
+			continue;
+		}
 		if (!existsSync(dest) || !sameFile(file, dest)) {
 			dirty = true;
 			break;
@@ -14759,6 +15055,7 @@ function syncOnePreset(sourceDir, targetDir) {
 	if (!dirty) return "current";
 	pruneExtras(targetDir, sourceSet);
 	copyTreeSync(sourceDir, targetDir);
+	writeRewrites(targetDir, rewrites);
 	pruneExtras(targetDir, sourceSet);
 	return "synced";
 }
@@ -14769,9 +15066,10 @@ function syncOnePreset(sourceDir, targetDir) {
 * @param sourceRoot - this package's bundled `presets/` directory.
 * @param targetRoot - harness-home agent-presets discovery root.
 * @param retire - previously bundled preset ids to remove when absent from the source.
+* @param rewrite - rewrites preset text for the running installation; omission copies the bundle verbatim.
 * @returns the grouped outcome of the run.
 */
-function syncPresetTrees(sourceRoot, targetRoot, retire = []) {
+function syncPresetTrees(sourceRoot, targetRoot, retire = [], rewrite) {
 	const result = {
 		synced: [],
 		current: [],
@@ -14787,7 +15085,8 @@ function syncPresetTrees(sourceRoot, targetRoot, retire = []) {
 		const id = basename(source);
 		shipped.add(id);
 		try {
-			if (syncOnePreset(source, join(targetRoot, id)) === "synced") result.synced.push(id);
+			const rewrites = rewrite === void 0 ? /* @__PURE__ */ new Map() : collectRewrites(source, rewrite);
+			if (syncOnePreset(source, join(targetRoot, id), rewrites) === "synced") result.synced.push(id);
 			else result.current.push(id);
 		} catch (error) {
 			result.failed.push({
@@ -14816,6 +15115,213 @@ function syncPresetTrees(sourceRoot, targetRoot, retire = []) {
 	return result;
 }
 //#endregion
+//#region src/host/subagent-route-audit.ts
+/**
+* Read one field as a string.
+* @param value - Candidate value from a durable event or header.
+* @returns the string, or undefined for any other type.
+*/
+function asString(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+/**
+* Read one field as a plain object.
+* @param value - Candidate value.
+* @returns the record, or undefined for arrays, null, and primitives.
+*/
+function asRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+/**
+* Extract the child route a descriptor recorded.
+* @param data - `subagent/descriptor` payload.
+* @returns the declared route fields plus provider and label, each when present.
+*/
+function readChildDescriptor(data) {
+	const record = asRecord(data);
+	if (record === void 0) return void 0;
+	const provider = asString(record["provider"]);
+	const childProvider = asString(record["agentProvider"]);
+	const childModel = asString(record["agentModel"]);
+	const label = asString(record["label"]);
+	if (provider === void 0 && childProvider === void 0 && childModel === void 0) return void 0;
+	return {
+		...provider === void 0 ? {} : { provider },
+		...childProvider === void 0 ? {} : { childProvider },
+		...childModel === void 0 ? {} : { childModel },
+		...label === void 0 ? {} : { label }
+	};
+}
+/**
+* Read the child-route allowlist a session recorded, from its own log.
+*
+* The live guard reads the same event through `policyRoutesOf`, which walks a
+* session's `eventAt` accessor. The audit holds a resolved session instead, so
+* it scans the snapshot it already has rather than reopening the log per child.
+* @param session - the session whose policy is read.
+* @returns the authorized routes, or undefined when the session recorded none.
+*/
+function auditedRoutesOf(session) {
+	for (const event of session.events ?? []) {
+		if (event.type !== "subagent/model-selection-policy") continue;
+		const allowed = asRecord(event.data)?.["allowedModels"];
+		if (!Array.isArray(allowed)) continue;
+		const routes = [];
+		for (const entry of allowed) {
+			const provider = asString(asRecord(entry)?.["provider"]);
+			const model = asString(asRecord(entry)?.["model"]);
+			if (provider !== void 0 && model !== void 0) routes.push({
+				provider,
+				model
+			});
+		}
+		if (routes.length > 0) return routes;
+	}
+}
+/**
+* Collect the child routes one parent session recorded.
+*
+* Discovery uses both durable signals because they cover different backends: a
+* `subagent/catalog` event names every continuable child the parent created,
+* while a descriptor-less or one-shot child is only reachable by scanning the
+* registry for a session whose header names this parent.
+* @param parent - the parent session to inspect.
+* @param sessions - registry used to resolve each child's own log and header.
+* @returns one finding per child whose route could be read.
+*/
+function childRoutesOf(parent, sessions) {
+	const parentId = asString(parent.id);
+	const seen = /* @__PURE__ */ new Set();
+	const findings = [];
+	const inspect = (child, childId) => {
+		if (child === void 0 || seen.has(childId)) return;
+		seen.add(childId);
+		const descriptor = child.events?.map((event) => event.type === "subagent/descriptor" ? readChildDescriptor(event.data) : void 0).find((entry) => entry !== void 0);
+		if (descriptor === void 0) return;
+		const headerParent = asString(child.header?.parentSession);
+		findings.push({
+			childId,
+			...headerParent === void 0 ? {} : { parentId: headerParent },
+			...descriptor
+		});
+	};
+	for (const event of parent.events ?? []) {
+		if (event.type !== "subagent/catalog") continue;
+		const childId = asString(asRecord(event.data)?.["childId"]);
+		if (childId === void 0) continue;
+		inspect(sessions.get(childId), childId);
+	}
+	if (parentId !== void 0) for (const child of listSessions(sessions)) {
+		const childId = asString(child.id);
+		if (childId === void 0 || childId === parentId) continue;
+		if (asString(child.header?.parentSession) !== parentId) continue;
+		inspect(child, childId);
+	}
+	return findings;
+}
+/**
+* Enumerate the registry, tolerating a resolver that exposes no listing.
+* @param sessions - the resolver to enumerate.
+* @returns every session it can serve, or an empty array.
+*/
+function listSessions(sessions) {
+	const list = sessions.list;
+	if (typeof list !== "function") return [];
+	try {
+		const entries = list.call(sessions);
+		return Array.isArray(entries) ? entries : [];
+	} catch {
+		return [];
+	}
+}
+/**
+* Read the route a session's next request would use: its latest request header,
+* else its declared creation options. A child that recorded no route of its own
+* runs here, and this is also the baseline a recorded child route is compared
+* against.
+* @param session - the session to read.
+* @returns the route fields, each absent when its source did not supply it.
+*/
+function sessionRouteOf(session) {
+	const config = asRecord(asRecord(session?.requestHeader?.())?.["config"]);
+	const provider = asString(config?.["provider"]);
+	const model = asString(config?.["model"]);
+	if (provider !== void 0 || model !== void 0) return {
+		...provider === void 0 ? {} : { provider },
+		...model === void 0 ? {} : { model }
+	};
+	const options = asRecord(session?.options);
+	return {
+		...asString(options?.["provider"]) === void 0 ? {} : { provider: asString(options?.["provider"]) },
+		...asString(options?.["model"]) === void 0 ? {} : { model: asString(options?.["model"]) }
+	};
+}
+/**
+* Resolve the route a finding actually ran on, following the parent when the
+* child recorded none, and report whether it matches the parent's.
+* @param finding - the child under audit.
+* @param sessions - registry used to resolve the parent.
+* @returns the effective route and whether it equals the parent's route.
+*/
+function effectiveRouteOf(finding, sessions) {
+	const parentRoute = finding.parentId === void 0 ? {} : sessionRouteOf(sessions.get(finding.parentId));
+	const route = finding.childProvider !== void 0 || finding.childModel !== void 0 ? {
+		provider: finding.childProvider,
+		model: finding.childModel
+	} : parentRoute;
+	return {
+		...route,
+		sameAsParent: route.provider !== void 0 && route.model !== void 0 && parentRoute.provider === route.provider && parentRoute.model === route.model
+	};
+}
+/**
+* Decide whether one effective route is covered by an allowlist.
+* @param allowed - routes the governing Session authorized.
+* @param route - the route the child actually ran on.
+* @returns whether the route is authorized.
+*/
+function routeAllowed(allowed, route) {
+	if (route.provider === void 0 || route.model === void 0) return true;
+	return allowed.some((entry) => entry.provider === route.provider && entry.model === route.model);
+}
+/**
+* Fold one parent session's children into the violations worth reporting.
+* A finding with an unresolvable route is reported as neither: guessing would
+* turn this advisory list into a source of false accusations.
+* @param parent - the parent session to audit.
+* @param sessions - registry used to resolve children and parents.
+* @param allowed - routes the parent Session authorized, when it recorded any.
+* @returns violations, ordered as the children were discovered.
+*/
+function auditChildRoutes(parent, sessions, allowed) {
+	if (allowed === void 0 || allowed.length === 0) return [];
+	const violations = [];
+	for (const finding of childRoutesOf(parent, sessions)) {
+		const effective = effectiveRouteOf(finding, sessions);
+		if (routeAllowed(allowed, effective)) continue;
+		violations.push({
+			finding,
+			route: {
+				provider: effective.provider,
+				model: effective.model
+			},
+			sameAsParent: effective.sameAsParent
+		});
+	}
+	return violations;
+}
+/**
+* Render one violation as a single model-facing line.
+* @param violation - the violation to describe.
+* @returns a one-line summary naming the child, its route, and its origin.
+*/
+function violationText(violation) {
+	const { finding, route, sameAsParent } = violation;
+	const label = finding.label === void 0 ? "" : ` "${finding.label}"`;
+	const where = route.provider === void 0 || route.model === void 0 ? "an unresolved route" : `${route.provider}/${route.model}`;
+	return `subagent ${finding.childId}${label} ran on ${where}${sameAsParent ? " — the same route as its parent" : " — a route of its own"}${finding.provider === void 0 ? "" : ` (provider "${finding.provider}")`}`;
+}
+//#endregion
 //#region src/host/relay-probe.ts
 /**
 * Read-only diagnostic probe for the child→parent subagent relay.
@@ -15198,6 +15704,7 @@ const Config = z.object({
 	syncAgentPresets: z.boolean().default(true),
 	subagentModelAuthorization: z.boolean().default(true),
 	subagentModelTools: z.array(z.string()).default([]),
+	subagentModelInheritTools: z.array(z.string()).default(DEFAULT_SUBAGENT_INHERIT_TOOLS),
 	subagentModelScope: z.union([z.const("session"), z.const("preference")]).default("session")
 });
 const inject = [
@@ -15212,7 +15719,7 @@ function apply(ctx, pluginConfig = {}) {
 	if (pluginConfig.syncAgentPresets !== false) ctx.effect(() => {
 		try {
 			const target = presetTargetRoot(dshHomeDir());
-			const result = syncPresetTrees(bundledPresetsRoot(), target, [...BUNDLED_PRESET_IDS]);
+			const result = syncPresetTrees(bundledPresetsRoot(), target, [...BUNDLED_PRESET_IDS], rewritePresetFile);
 			for (const { id, error } of result.failed) ctx.logger.warn(`[dsh-chatgpt-subscription] agent preset "${id}" sync failed: ${error}`);
 			if (result.synced.length > 0) ctx.logger.info(`[dsh-chatgpt-subscription] agent presets synced into ${target}: ${result.synced.join(", ")}`);
 		} catch (error) {
@@ -15232,6 +15739,7 @@ function apply(ctx, pluginConfig = {}) {
 	const kimiCodeModelSettings = new FileModelSettingsStore$2();
 	const kimiCodePreferences = registerKimiCodePreferenceStore(ctx.settings, kimiCodeModelSettings);
 	const delegationToolNames = normalizeDelegationToolNames(pluginConfig.subagentModelTools);
+	const delegationInheritNames = normalizeInheritToolNames(pluginConfig.subagentModelInheritTools);
 	if (pluginConfig.subagentModelAuthorization !== false) ctx.inject(["sessions"], (scoped) => {
 		const sessions = scoped.get("sessions");
 		if (sessions === void 0) return;
@@ -15239,6 +15747,7 @@ function apply(ctx, pluginConfig = {}) {
 			if (typeof scoped.tools?.guard !== "function") return () => void 0;
 			return installSubagentModelAuthorization(scoped, sessions, {
 				toolNames: delegationToolNames,
+				inheritToolNames: delegationInheritNames,
 				scope: pluginConfig.subagentModelScope ?? "session"
 			});
 		}, "dsh-chatgpt-subscription: subagent model authorization");
@@ -15342,7 +15851,29 @@ function apply(ctx, pluginConfig = {}) {
 				ctx.logger.warn(`[dsh-chatgpt-subscription] Web provider selection could not be applied: ${error instanceof Error ? error.message : String(error)}`);
 			});
 		};
-		const disposeRoutes = registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwitcher);
+		const readRouteAudit = (sessionId) => {
+			const sessions = ctx.get("sessions");
+			const target = sessions.get(sessionId);
+			if (target === void 0) throw new Error(`Unknown session "${sessionId}".`);
+			const allowed = auditedRoutesOf(target);
+			return Promise.resolve({
+				sessionId,
+				allowedModels: (allowed ?? []).map((route) => ({
+					provider: route.provider,
+					model: route.model
+				})),
+				violations: auditChildRoutes(target, sessions, allowed).map((violation) => ({
+					childId: violation.finding.childId,
+					parentId: violation.finding.parentId ?? null,
+					provider: violation.finding.provider ?? null,
+					label: violation.finding.label ?? null,
+					routeProvider: violation.route.provider ?? null,
+					routeModel: violation.route.model ?? null,
+					sameAsParent: violation.sameAsParent
+				}))
+			});
+		};
+		const disposeRoutes = registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwitcher, readRouteAudit);
 		const disposeAdapter = ctx.llm.registerAdapter([PROVIDER_ID$3], adapter);
 		const disposeImageTool = ctx.tools.register(createCodexImageTool(oauth, ctx.attachments, { fetchFn: proxyFetch }));
 		const disposeVideoTool = ctx.tools.register(createKimiVideoTool(ctx, { fetchFn: proxyFetch }));
@@ -15392,4 +15923,4 @@ function localWebServerBaseUrl(host, port) {
 	return `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}`;
 }
 //#endregion
-export { AntigravityAdapter, CodexChatGptAdapter, CommandCodeAdapter, FileCredentialStore as CommandCodeCredentialStore, FileModelSettingsStore as CommandCodeModelSettingsStore, Config, FileCredentialStore$1 as FileCredentialStore, FileModelSettingsStore$1 as FileModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAdapter, FileCredentialStore$2 as KimiCodeCredentialStore, FileModelSettingsStore$2 as KimiCodeModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RelayProbe, ResponsesClient, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, UsageService, WindowsDpapiTokenStore, apply, authorizedRoutesFor, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginWebLogin, classifyKimiFailure, clearCachedQuota, clearCachedQuota$1 as clearCommandCodeQuota, clearCachedQuota$2 as clearKimiCodeQuota, credentialPath as commandCodeCredentialPath, modelSettingsPath as commandCodeModelSettingsPath, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createPlatformTokenStore, createSubagentAuthorization, credentialPath$1 as credentialPath, delegationDenialReason, detectSystemProxy, ensureAccessToken as ensureKimiCodeAccessToken, fetchAccountQuota, fetchAccountQuota$1 as fetchCommandCodeQuota, fetchAccountQuota$2 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, getCachedQuota, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$1 as getCommandCodeQuota, getCommandCodeWebStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$2 as getKimiCodeQuota, getKimiCodeWebStatus, inject, installRelayProbe, installSubagentModelAuthorization, credentialPath$2 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$1 as kimiCodeModelSettingsPath, loadProviderModels as loadCommandCodeModels, loadProviderModels$1 as loadKimiCodeModels, loginAndSave, mapCodexUsage, modelSettingsPath$2 as modelSettingsPath, normalizeDelegationToolNames, parseAllowedRoutes, parseCodexUsage, parseResponsesStream, policyRoutesOf, refreshAntigravityToken, refreshAccessToken as refreshKimiCodeToken, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, resolveRegion as resolveKimiCodeRegion, saveApiKey as saveCommandCodeApiKey, beginWebLogin$2 as startCommandCodeLogin, subagentModelSelectionPreference, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames };
+export { AntigravityAdapter, CodexChatGptAdapter, CommandCodeAdapter, FileCredentialStore as CommandCodeCredentialStore, FileModelSettingsStore as CommandCodeModelSettingsStore, Config, DEFAULT_SUBAGENT_INHERIT_TOOLS, FileCredentialStore$1 as FileCredentialStore, FileModelSettingsStore$1 as FileModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAdapter, FileCredentialStore$2 as KimiCodeCredentialStore, FileModelSettingsStore$2 as KimiCodeModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RelayProbe, ResponsesClient, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, UsageService, WindowsDpapiTokenStore, apply, auditChildRoutes, auditedRoutesOf, authorizedRoutesFor, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginWebLogin, childRoutesOf, classifyKimiFailure, clearCachedQuota, clearCachedQuota$1 as clearCommandCodeQuota, clearCachedQuota$2 as clearKimiCodeQuota, credentialPath as commandCodeCredentialPath, modelSettingsPath as commandCodeModelSettingsPath, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createPlatformTokenStore, createSubagentAuthorization, credentialPath$1 as credentialPath, delegationDenialReason, delegationModeOf, detectSystemProxy, effectiveRouteOf, ensureAccessToken as ensureKimiCodeAccessToken, fetchAccountQuota, fetchAccountQuota$1 as fetchCommandCodeQuota, fetchAccountQuota$2 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, getCachedQuota, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$1 as getCommandCodeQuota, getCommandCodeWebStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$2 as getKimiCodeQuota, getKimiCodeWebStatus, inheritOverrideReason, inheritRouteDenialReason, inheritedRouteOf, inject, installRelayProbe, installSubagentModelAuthorization, credentialPath$2 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$1 as kimiCodeModelSettingsPath, loadProviderModels as loadCommandCodeModels, loadProviderModels$1 as loadKimiCodeModels, loginAndSave, mapCodexUsage, modelSettingsPath$2 as modelSettingsPath, normalizeDelegationToolNames, normalizeInheritToolNames, parseAllowedRoutes, parseCodexUsage, parseResponsesStream, policyRoutesOf, readChildDescriptor, refreshAntigravityToken, refreshAccessToken as refreshKimiCodeToken, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, resolveRegion as resolveKimiCodeRegion, saveApiKey as saveCommandCodeApiKey, beginWebLogin$2 as startCommandCodeLogin, subagentModelSelectionPreference, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, validateInheritToolNames, violationText };