@gaodefa/daocore 2026.5.25 → 2026.5.27

package/dist/pi-embedded-CwD_xrGP.js

@@ -0,0 +1,3796 @@
+import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DyL154ka.js";
+import { t as sanitizeForLog } from "./ansi-4r6vVvJt.js";
+import { i as formatErrorMessage } from "./errors-DCgU20d6.js";
+import { p as resolveUserPath } from "./utils-CNnMhEDp.js";
+import { o as resolveAgentExecutionContract, r as hasConfiguredModelFallbacks, v as resolveSessionAgentIds } from "./agent-scope-BvhOCChS.js";
+import { i as isCronSessionKey } from "./session-key-utils-Ce_xWkNq.js";
+import { a as resolveAgentDir, o as resolveAgentWorkspaceDir } from "./agent-scope-config-JLvcfwLC.js";
+import { g as freezeDiagnosticTraceContext } from "./diagnostic-events-DPfGiEBK.js";
+import { t as createSubsystemLogger } from "./subsystem-CK3I9R1L.js";
+import { n as DEFAULT_MODEL, r as DEFAULT_PROVIDER, t as DEFAULT_CONTEXT_TOKENS } from "./defaults-mDjiWzE5.js";
+import { r as resolveProviderIdForAuth } from "./provider-auth-aliases-Q5-O8vDj.js";
+import { i as isMarkdownCapableMessageChannel } from "./message-channel-itmnr25o.js";
+import { n as resolveSafeTimeoutDelayMs } from "./timer-delay-awNPCchy.js";
+import { a as listOpenAIAuthProfileProvidersForAgentRuntime, c as resolveContextConfigProviderForRuntime, t as OPENAI_CODEX_PROVIDER_ID, u as resolveSelectedOpenAIPiRuntimeProvider } from "./openai-codex-routing-ZCWk8yuK.js";
+import { t as resolveAgentHarnessPolicy } from "./policy-BXkiPhow.js";
+import { t as getGlobalHookRunner } from "./hook-runner-global-DfvRzdbT.js";
+import { a as resolveContextEngine, o as resolveContextEngineOwnerPluginId } from "./registry-BCmRCXCi.js";
+import { s as emitAgentPlanEvent } from "./agent-events-Cfj53GyA.js";
+import { t as extractAssistantTextForPhase } from "./chat-message-content-DN9xEd6w.js";
+import { Y as resolveProviderAuthProfileId, b as prepareProviderRuntimeAuth } from "./provider-runtime-CJ3LFeND.js";
+import { i as ensureAuthProfileStoreWithoutExternalProfiles, n as ensureAuthProfileStore } from "./store-CNzeH6So.js";
+import { t as ensureDaoCoreModelsJson } from "./models-config-xXX6TCIT.js";
+import { t as formatMissingAuthError } from "./model-auth-runtime-shared-cdTr1v5l.js";
+import { r as formatRawAssistantErrorForUi } from "./assistant-error-format-B2ijqfp6.js";
+import { l as isRawApiErrorPayload, n as formatBillingErrorMessage, o as getApiErrorPayloadFingerprint, t as BILLING_ERROR_USER_MESSAGE } from "./sanitize-user-facing-text-T0c8YLm7.js";
+import { c as isTimeoutErrorMessage } from "./failover-matches-C-tab7FS.js";
+import "./runs-g3A6Mtnd.js";
+import { n as SILENT_REPLY_TOKEN, r as isSilentReplyPayloadText } from "./tokens-D8MVQSp9.js";
+import { n as derivePromptTokens, o as normalizeUsage } from "./usage-DKNTRfvn.js";
+import { n as sleepWithAbort } from "./backoff-BQ4uO4hX.js";
+import { i as enqueueCommandInLane } from "./command-queue-B1aRL_eL.js";
+import { i as getReplyPayloadMetadata, l as markReplyPayloadForSourceSuppressionDelivery, r as copyReplyPayloadMetadata, u as setReplyPayloadMetadata } from "./reply-payload-CiT5mlcY.js";
+import { a as hasReplyPayloadContent } from "./payload-BDV15CYA.js";
+import { T as isStrictAgenticExecutionContractActive, p as resolveToolLoopDetectionConfig } from "./daocore-tools-CXDZ1Xhe.js";
+import { C as createEmbeddedRunStageTracker, O as rotateTranscriptFileAfterCompaction, S as EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE, T as shouldWarnEmbeddedRunStageSummary, _ as resolveRateLimitProfileRotationLimit, _t as resolveRunLivenessState, a as RUNTIME_AUTH_REFRESH_MARGIN_MS, b as createUsageAccumulator, bt as createEmbeddedRunReplayState, c as buildErrorAgentMeta, ct as extractPlanningOnlyPlanDetails, d as resolveActiveErrorContext, dt as resolveEmptyResponseRetryInstruction, f as resolveFinalAssistantRawText, ft as resolveIncompleteTurnPayloadText, g as resolveOverloadProfileRotationLimit, gt as resolveReplayInvalidFlag, h as resolveOverloadFailoverBackoffMs, ht as resolveReasoningOnlyRetryInstruction, i as selectAgentHarness, k as shouldRotateCompactionTranscript, l as buildUsageAgentMetaFields, lt as resolveAckExecutionFastPathInstruction, m as resolveMaxRunRetryIterations, mt as resolvePlanningOnlyRetryLimit, o as RUNTIME_AUTH_REFRESH_MIN_DELAY_MS, p as resolveFinalAssistantVisibleText, pt as resolvePlanningOnlyRetryInstruction, r as runAgentHarnessAttempt, s as RUNTIME_AUTH_REFRESH_RETRY_MS, st as STRICT_AGENTIC_BLOCKED_TEXT, t as maybeCompactAgentHarnessSession, u as createCompactionDiagId, ut as resolveAttemptReplayMetadata, v as resolveReportedModelRef, vt as resolveSilentToolResultReplyPayload, w as formatEmbeddedRunStageSummary, x as mergeUsageIntoAccumulator, xt as observeReplayMetadata, y as scrubAnthropicRefusalMagic, yt as shouldTreatEmptyAssistantReplyAsSilent } from "./selection-Cqhmjpyl.js";
+import { i as createHeartbeatToolResponsePayload } from "./heartbeat-tool-response-BCz-9pPv.js";
+import { _ as buildAgentHookContextChannelFields, g as listActiveProcessSessionReferences, h as resolveContextEngineCapabilities, m as resolveEmbeddedCompactionTarget, p as buildEmbeddedCompactionRuntimeContext, r as forgetPromptBuildDrainCacheForRun } from "./attempt.prompt-helpers-COc5m_TZ.js";
+import { i as pickFallbackThinkingLevel, s as normalizeTextForComparison } from "./pi-embedded-helpers-CsYU9hpC.js";
+import { S as parseImageSizeError, _ as isRateLimitAssistantError, a as formatAssistantErrorText, c as isBillingAssistantError, f as isFailoverAssistantError, g as isLikelyContextOverflowError, i as extractObservedOverflowTokenCount, p as isFailoverErrorMessage, s as isAuthAssistantError, t as classifyFailoverReason, u as isCompactionFailureError, x as parseImageDimensionError } from "./errors-DVYBGiY7.js";
+import { n as resolveProcessToolScopeKey } from "./pi-tools-BzbgexEG.js";
+import { c as resolveFailoverStatus, n as coerceToFailoverError, r as describeFailoverError, t as FailoverError } from "./failover-error-DcavCkbi.js";
+import "./auth-profiles-Cwdg59xU.js";
+import { n as markAuthProfileSuccess } from "./profiles-DP8D3ib5.js";
+import { i as resolveAuthProfileOrder, l as isProfileInCooldown, r as resolveAuthProfileEligibility } from "./order-Bu0ANozT.js";
+import { d as sanitizeRuntimeProviderRequestOverrides, o as resolveProviderRequestConfig } from "./provider-request-config-CsX7LLsy.js";
+import { t as redactIdentifier } from "./redact-identifier-DBO6OkZP.js";
+import { t as sanitizeForConsole } from "./console-sanitize-BUMxGUp3.js";
+import { a as markAuthProfileFailure, s as resolveProfilesUnavailableReason } from "./usage-CtCx0aoe.js";
+import { i as getApiKeyForModel, n as applyLocalNoAuthHeaderOverride, p as shouldPreferExplicitConfigApiKeyAuth, t as applyAuthHeaderOverride } from "./model-auth-DH85P33O.js";
+import { c as retireSessionMcpRuntimeForSessionKey, s as retireSessionMcpRuntime } from "./pi-bundle-mcp-runtime-DpUWOkOe.js";
+import "./pi-bundle-mcp-tools-DbNUbe56.js";
+import { d as hasOutboundDeliveryEvidence, u as hasMessagingToolDeliveryEvidence } from "./subagent-announce-delivery-jcxPIfNG.js";
+import { A as runAgentCleanupStep, S as truncateOversizedToolResultsInSession, b as resolveLiveToolResultMaxChars, g as resolveCompactionTimeoutMs, m as compactContextEngineWithSafetyTimeout, x as sessionLikelyHasOversizedToolResults } from "./attempt.tool-run-context-CAtfgOqC.js";
+import { i as extractAssistantVisibleText, r as extractAssistantThinking } from "./pi-embedded-utils-CZ0KV7bJ.js";
+import { n as isLikelyMutatingToolName } from "./tool-mutation-DHAIDwUO.js";
+import { d as parseReplyDirectives } from "./payloads-ClMXLjYr.js";
+import { N as formatToolAggregate } from "./channel-streaming-BubngPMB.js";
+import { a as suspendSession, c as shouldAllowCooldownProbeForReason, d as shouldSuppressRawErrorConsoleSuffix, i as resolveSessionSuspensionReason, l as buildApiErrorObservationFields, o as LiveSessionModelSwitchError } from "./model-fallback-qEXBEVUu.js";
+import { t as log$1 } from "./logger-k-VzKT7P.js";
+import "./tool-split-DDqLEhqo.js";
+import { n as resolveGlobalLane, r as resolveSessionLane } from "./lanes-BrQRlRRS.js";
+import { i as resolveStoredSessionKeyForSessionId, r as resolveSessionKeyForRequest } from "./session-CD4chmlr.js";
+import { t as ensureContextEnginesInitialized } from "./init-CreYGHpp.js";
+import { c as runContextEngineMaintenance } from "./context-engine-lifecycle-Zsi-S6qy.js";
+import "./extra-params-CBOqDb-D.js";
+import { a as resolveContextWindowInfo, i as formatContextWindowWarningMessage, n as evaluateContextWindowGuard, r as formatContextWindowBlockMessage } from "./context-window-guard-DzHCYWZr.js";
+import { t as ensureSelectedAgentHarnessPlugin } from "./runtime-plugin-DsZkgOfu.js";
+import { c as captureCompactionCheckpointSnapshotAsync, h as resolveSessionCompactionCheckpointReason, l as cleanupCompactionCheckpointSnapshot, m as readSessionLeafIdFromTranscriptAsync, n as asCompactionHookRunner, p as persistSessionCompactionCheckpoint, s as runPostCompactionSideEffects, t as readPiModelContextTokens } from "./model-context-tokens-yhMbHeUE.js";
+import { t as ensureRuntimePluginsLoaded } from "./runtime-plugins-Cor0T8kU.js";
+import { n as resolveModelAsync } from "./model-BNkH9D7K.js";
+import { n as createAgentHarnessTaskRuntimeScope } from "./agent-harness-task-runtime-scope-BiH8QC-b.js";
+import { n as shouldSwitchToLiveModel, t as clearLiveModelSwitchPending } from "./live-model-switch-OF42bykh.js";
+import { t as buildAgentRuntimeAuthPlan } from "./auth-Bn2_1BPx.js";
+import { r as buildAgentRuntimePlan } from "./build-CG7aTzO9.js";
+import { n as resolveRunWorkspaceDir, t as redactRunIdentifier } from "./workspace-run-Ct8kmmAx.js";
+import fs from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+//#region src/agents/pi-embedded-runner/compact.queued.ts
+function shouldFallbackAfterHarnessCompaction(result) {
+	return result?.ok === false && (result.failure?.reason === "missing_thread_binding" || result.failure?.reason === "stale_thread_binding");
+}
+/**
+* Compacts a session with lane queueing (session lane + global lane).
+* Use this from outside a lane context. If already inside a lane, use
+* `compactEmbeddedPiSessionDirect` to avoid deadlocks.
+*/
+async function compactEmbeddedPiSession(params) {
+	ensureRuntimePluginsLoaded({
+		config: params.config,
+		workspaceDir: params.workspaceDir,
+		allowGatewaySubagentBinding: params.allowGatewaySubagentBinding
+	});
+	ensureContextEnginesInitialized();
+	const agentIds = resolveSessionAgentIds({
+		sessionKey: params.sessionKey,
+		config: params.config
+	});
+	const agentDir = params.agentDir ?? resolveAgentDir(params.config ?? {}, agentIds.sessionAgentId);
+	const resolvedWorkspaceDir = resolveUserPath(params.workspaceDir);
+	const contextEngine = await resolveContextEngine(params.config, {
+		agentDir,
+		workspaceDir: resolvedWorkspaceDir
+	});
+	let contextTokenBudget = params.contextTokenBudget;
+	if (!contextTokenBudget || !Number.isFinite(contextTokenBudget) || contextTokenBudget <= 0) {
+		const resolvedCompactionTarget = resolveEmbeddedCompactionTarget({
+			config: params.config,
+			provider: params.provider,
+			modelId: params.model,
+			authProfileId: params.authProfileId,
+			defaultProvider: DEFAULT_PROVIDER,
+			defaultModel: DEFAULT_MODEL
+		});
+		const ceProvider = resolvedCompactionTarget.provider ?? "openai";
+		const ceModelId = resolvedCompactionTarget.model ?? "gpt-5.5";
+		const { model: ceModel } = await resolveModelAsync(ceProvider, ceModelId, agentDir, params.config);
+		const ceRuntimeModel = ceModel;
+		const ceHarnessPolicy = resolveAgentHarnessPolicy({
+			provider: ceProvider,
+			modelId: ceModelId,
+			config: params.config,
+			agentId: agentIds.sessionAgentId,
+			sessionKey: params.sessionKey
+		});
+		contextTokenBudget = resolveContextWindowInfo({
+			cfg: params.config,
+			provider: resolveContextConfigProviderForRuntime({
+				provider: ceProvider,
+				runtimeId: ceHarnessPolicy.runtime
+			}),
+			modelId: ceModelId,
+			modelContextTokens: readPiModelContextTokens(ceModel),
+			modelContextWindow: ceRuntimeModel?.contextWindow,
+			defaultTokens: DEFAULT_CONTEXT_TOKENS
+		}).tokens;
+	}
+	const contextEngineRuntimeContext = buildCompactionContextEngineRuntimeContext({
+		params,
+		agentDir,
+		contextTokenBudget,
+		contextEnginePluginId: resolveContextEngineOwnerPluginId(contextEngine)
+	});
+	const harnessResult = await maybeCompactAgentHarnessSession({
+		...params,
+		contextEngine,
+		contextTokenBudget,
+		contextEngineRuntimeContext
+	});
+	if (harnessResult) {
+		if (!shouldFallbackAfterHarnessCompaction(harnessResult)) {
+			await contextEngine.dispose?.();
+			return harnessResult;
+		}
+		log$1.warn(`native harness compaction could not use its session binding; falling back to context engine: ${harnessResult.reason ?? "unknown"}`);
+	}
+	const sessionLane = resolveSessionLane(params.sessionKey?.trim() || params.sessionId);
+	const globalLane = resolveGlobalLane(params.lane);
+	const enqueueGlobal = params.enqueue ?? ((task, opts) => enqueueCommandInLane(globalLane, task, opts));
+	return enqueueCommandInLane(sessionLane, () => enqueueGlobal(async () => {
+		let checkpointSnapshot = null;
+		let checkpointSnapshotRetained = false;
+		try {
+			const engineOwnsCompaction = contextEngine.info.ownsCompaction === true;
+			checkpointSnapshot = engineOwnsCompaction ? await captureCompactionCheckpointSnapshotAsync({ sessionFile: params.sessionFile }) : null;
+			const hookRunner = engineOwnsCompaction ? asCompactionHookRunner(getGlobalHookRunner()) : null;
+			const hookSessionKey = params.sessionKey?.trim() || params.sessionId;
+			const { sessionAgentId } = resolveSessionAgentIds({
+				sessionKey: params.sessionKey,
+				config: params.config
+			});
+			const resolvedMessageProvider = params.messageChannel ?? params.messageProvider;
+			const hookCtx = {
+				sessionId: params.sessionId,
+				agentId: sessionAgentId,
+				sessionKey: hookSessionKey,
+				workspaceDir: resolvedWorkspaceDir,
+				messageProvider: resolvedMessageProvider
+			};
+			const runtimeContext = contextEngineRuntimeContext;
+			if (hookRunner?.hasHooks?.("before_compaction") && hookRunner.runBeforeCompaction) try {
+				await hookRunner.runBeforeCompaction({
+					messageCount: -1,
+					sessionFile: params.sessionFile
+				}, hookCtx);
+			} catch (err) {
+				log$1.warn("before_compaction hook failed", { errorMessage: formatErrorMessage(err) });
+			}
+			let result;
+			try {
+				result = await compactContextEngineWithSafetyTimeout(contextEngine, {
+					sessionId: params.sessionId,
+					sessionKey: params.sessionKey,
+					sessionFile: params.sessionFile,
+					tokenBudget: contextTokenBudget,
+					currentTokenCount: params.currentTokenCount,
+					compactionTarget: params.trigger === "manual" ? "threshold" : "budget",
+					customInstructions: params.customInstructions,
+					force: params.trigger === "manual",
+					runtimeContext
+				}, resolveCompactionTimeoutMs(params.config), params.abortSignal);
+			} catch (compactErr) {
+				log$1.warn("context-engine compaction failed", { errorMessage: formatErrorMessage(compactErr) });
+				result = {
+					ok: false,
+					compacted: false,
+					reason: formatErrorMessage(compactErr)
+				};
+			}
+			const delegatedSessionId = result.result?.sessionId;
+			const delegatedSessionFile = result.result?.sessionFile;
+			const delegatedRotatedTranscript = typeof delegatedSessionId === "string" && delegatedSessionId !== params.sessionId || typeof delegatedSessionFile === "string" && delegatedSessionFile !== params.sessionFile;
+			let postCompactionSessionId = delegatedSessionId ?? params.sessionId;
+			let postCompactionSessionFile = delegatedSessionFile ?? params.sessionFile;
+			let postCompactionLeafId;
+			if (result.ok && result.compacted) {
+				if (shouldRotateCompactionTranscript(params.config) && !delegatedRotatedTranscript) try {
+					const rotation = await rotateTranscriptFileAfterCompaction({ sessionFile: params.sessionFile });
+					if (rotation.rotated) {
+						postCompactionSessionId = rotation.sessionId ?? postCompactionSessionId;
+						postCompactionSessionFile = rotation.sessionFile ?? postCompactionSessionFile;
+						postCompactionLeafId = rotation.leafId;
+						log$1.info(`[compaction] rotated active transcript after context-engine compaction (sessionKey=${params.sessionKey ?? params.sessionId})`);
+					}
+				} catch (err) {
+					log$1.warn("failed to rotate compacted transcript", { errorMessage: formatErrorMessage(err) });
+				}
+				if (params.config && params.sessionKey && checkpointSnapshot) try {
+					const postLeafId = postCompactionLeafId ?? await readSessionLeafIdFromTranscriptAsync(postCompactionSessionFile) ?? void 0;
+					checkpointSnapshotRetained = await persistSessionCompactionCheckpoint({
+						cfg: params.config,
+						sessionKey: params.sessionKey,
+						sessionId: postCompactionSessionId,
+						reason: resolveSessionCompactionCheckpointReason({ trigger: params.trigger }),
+						snapshot: checkpointSnapshot,
+						summary: result.result?.summary,
+						firstKeptEntryId: result.result?.firstKeptEntryId,
+						tokensBefore: result.result?.tokensBefore,
+						tokensAfter: result.result?.tokensAfter,
+						postSessionFile: postCompactionSessionFile,
+						postLeafId,
+						postEntryId: postLeafId
+					}) !== null;
+				} catch (err) {
+					log$1.warn("failed to persist compaction checkpoint", { errorMessage: formatErrorMessage(err) });
+				}
+				await runContextEngineMaintenance({
+					contextEngine,
+					sessionId: postCompactionSessionId,
+					sessionKey: params.sessionKey,
+					sessionFile: postCompactionSessionFile,
+					reason: "compaction",
+					runtimeContext,
+					config: params.config
+				});
+			}
+			if (engineOwnsCompaction && result.ok && result.compacted) await runPostCompactionSideEffects({
+				config: params.config,
+				sessionKey: params.sessionKey,
+				sessionFile: postCompactionSessionFile
+			});
+			if (result.ok && result.compacted && hookRunner?.hasHooks?.("after_compaction") && hookRunner.runAfterCompaction) try {
+				const afterHookCtx = {
+					...hookCtx,
+					sessionId: postCompactionSessionId
+				};
+				await hookRunner.runAfterCompaction({
+					messageCount: -1,
+					compactedCount: -1,
+					tokenCount: result.result?.tokensAfter,
+					sessionFile: postCompactionSessionFile
+				}, afterHookCtx);
+			} catch (err) {
+				log$1.warn("after_compaction hook failed", { errorMessage: formatErrorMessage(err) });
+			}
+			return {
+				ok: result.ok,
+				compacted: result.compacted,
+				reason: result.reason,
+				result: result.result ? {
+					summary: result.result.summary ?? "",
+					firstKeptEntryId: result.result.firstKeptEntryId ?? "",
+					tokensBefore: result.result.tokensBefore,
+					tokensAfter: result.result.tokensAfter,
+					details: result.result.details,
+					...postCompactionSessionId !== params.sessionId ? { sessionId: postCompactionSessionId } : {},
+					...postCompactionSessionFile !== params.sessionFile ? { sessionFile: postCompactionSessionFile } : {}
+				} : void 0
+			};
+		} finally {
+			if (!checkpointSnapshotRetained) await cleanupCompactionCheckpointSnapshot(checkpointSnapshot);
+			await contextEngine.dispose?.();
+		}
+	}));
+}
+function buildCompactionContextEngineRuntimeContext(params) {
+	const { sessionAgentId } = resolveSessionAgentIds({
+		sessionKey: params.params.sessionKey,
+		config: params.params.config
+	});
+	return {
+		...params.params,
+		...buildEmbeddedCompactionRuntimeContext({
+			sessionKey: params.params.sessionKey,
+			messageChannel: params.params.messageChannel,
+			messageProvider: params.params.messageProvider,
+			agentAccountId: params.params.agentAccountId,
+			currentChannelId: params.params.currentChannelId,
+			currentThreadTs: params.params.currentThreadTs,
+			currentMessageId: params.params.currentMessageId,
+			authProfileId: params.params.authProfileId,
+			workspaceDir: params.params.workspaceDir,
+			agentDir: params.agentDir,
+			config: params.params.config,
+			skillsSnapshot: params.params.skillsSnapshot,
+			senderIsOwner: params.params.senderIsOwner,
+			senderId: params.params.senderId,
+			provider: params.params.provider,
+			modelId: params.params.model,
+			modelFallbacksOverride: params.params.modelFallbacksOverride,
+			thinkLevel: params.params.thinkLevel,
+			reasoningLevel: params.params.reasoningLevel,
+			bashElevated: params.params.bashElevated,
+			extraSystemPrompt: params.params.extraSystemPrompt,
+			sourceReplyDeliveryMode: params.params.sourceReplyDeliveryMode,
+			ownerNumbers: params.params.ownerNumbers
+		}),
+		...resolveContextEngineCapabilities({
+			config: params.params.config,
+			sessionKey: params.params.sessionKey,
+			agentId: sessionAgentId,
+			contextEnginePluginId: params.contextEnginePluginId,
+			purpose: "context-engine.compaction"
+		}),
+		tokenBudget: params.contextTokenBudget,
+		currentTokenCount: params.params.currentTokenCount
+	};
+}
+//#endregion
+//#region src/agents/tool-error-summary.ts
+const EXEC_LIKE_TOOL_NAMES = new Set(["exec", "bash"]);
+function isExecLikeToolName(toolName) {
+	return EXEC_LIKE_TOOL_NAMES.has(normalizeOptionalLowercaseString(toolName) ?? "");
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/failure-signal.ts
+const FAILURE_SIGNAL_CODES = ["SYSTEM_RUN_DENIED", "INVALID_REQUEST"];
+function resolveFailureSignalCode(value) {
+	for (const code of FAILURE_SIGNAL_CODES) if (value === code) return code;
+}
+function resolveEmbeddedRunFailureSignal(params) {
+	if (params.trigger !== "cron") return;
+	const lastToolError = params.lastToolError;
+	if (!lastToolError || !isExecLikeToolName(lastToolError.toolName)) return;
+	const code = resolveFailureSignalCode(normalizeOptionalString(lastToolError.errorCode));
+	if (!code) return;
+	const message = normalizeOptionalString(lastToolError.error) ?? code;
+	return {
+		kind: "execution_denied",
+		source: "tool",
+		...lastToolError.toolName ? { toolName: lastToolError.toolName } : {},
+		code,
+		message,
+		fatalForCron: true
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/post-compaction-loop-guard.ts
+const log = createSubsystemLogger("agents/post-compaction-guard");
+const DEFAULT_WINDOW_SIZE = 3;
+function asPositiveInt(value, fallback) {
+	if (typeof value !== "number" || !Number.isInteger(value) || value <= 0) return fallback;
+	return value;
+}
+function createPostCompactionLoopGuard(config, options) {
+	const state = {
+		enabled: options?.enabled ?? true,
+		windowSize: asPositiveInt(config?.windowSize, DEFAULT_WINDOW_SIZE),
+		remainingAttempts: 0,
+		history: []
+	};
+	const armPostCompaction = () => {
+		state.remainingAttempts = state.windowSize;
+		state.history = [];
+		if (state.enabled) log.info(`post-compaction guard armed for ${state.windowSize} attempts`);
+	};
+	const observe = (call) => {
+		if (!state.enabled) return {
+			shouldAbort: false,
+			armed: false,
+			remainingAttempts: 0
+		};
+		if (state.remainingAttempts <= 0) return {
+			shouldAbort: false,
+			armed: false,
+			remainingAttempts: 0
+		};
+		state.remainingAttempts -= 1;
+		state.history.push(call);
+		const armedAfter = state.remainingAttempts > 0;
+		const matches = state.history.filter((entry) => entry.toolName === call.toolName && entry.argsHash === call.argsHash && entry.resultHash === call.resultHash);
+		if (matches.length >= state.windowSize) {
+			log.error(`post-compaction loop persisted: tool=${call.toolName} repeated ${matches.length} times with identical args+result post-compaction`);
+			return {
+				shouldAbort: true,
+				armed: armedAfter,
+				remainingAttempts: state.remainingAttempts,
+				detector: "compaction_loop_persisted",
+				count: matches.length,
+				toolName: call.toolName,
+				message: `CRITICAL: tool ${call.toolName} repeated ${matches.length} times with identical arguments and identical results within ${state.windowSize} attempts after auto-compaction. The compaction did not break the loop. Aborting to prevent runaway resource use.`
+			};
+		}
+		return {
+			shouldAbort: false,
+			armed: armedAfter,
+			remainingAttempts: state.remainingAttempts
+		};
+	};
+	const snapshot = () => ({
+		armed: state.remainingAttempts > 0,
+		remainingAttempts: state.remainingAttempts
+	});
+	return {
+		armPostCompaction,
+		observe,
+		snapshot
+	};
+}
+var PostCompactionLoopPersistedError = class PostCompactionLoopPersistedError extends Error {
+	constructor(message, details) {
+		super(message);
+		this.name = "PostCompactionLoopPersistedError";
+		this.detector = details.detector;
+		this.count = details.count;
+		this.toolName = details.toolName;
+	}
+	static fromVerdict(verdict) {
+		return new PostCompactionLoopPersistedError(verdict.message, {
+			detector: verdict.detector,
+			count: verdict.count,
+			toolName: verdict.toolName
+		});
+	}
+};
+//#endregion
+//#region src/agents/pi-embedded-runner/run/failover-policy.ts
+function shouldEscalateRetryLimit(reason) {
+	return Boolean(reason && reason !== "timeout" && reason !== "model_not_found" && reason !== "format" && reason !== "session_expired");
+}
+function isTerminalFormatFailure(params) {
+	return params.failoverFailure && params.failoverReason === "format" && params.allowFormatRetry !== true;
+}
+function shouldRotatePrompt(params) {
+	return params.failoverFailure && params.failoverReason !== "timeout" && !isTerminalFormatFailure(params);
+}
+function isAssistantTimeoutFailure(params) {
+	return params.idleTimedOut || params.timedOut && !params.timedOutDuringCompaction && !params.timedOutDuringToolExecution;
+}
+function shouldRotateAssistant(params) {
+	if (isTerminalFormatFailure(params)) return false;
+	return !params.aborted && params.failoverFailure || isAssistantTimeoutFailure(params);
+}
+function mergeRetryFailoverReason(params) {
+	return params.failoverReason ?? (params.timedOut ? "timeout" : null) ?? params.previous;
+}
+function resolveRunFailoverDecision(params) {
+	if (params.stage === "retry_limit") {
+		if (params.fallbackConfigured && shouldEscalateRetryLimit(params.failoverReason)) return {
+			action: "fallback_model",
+			reason: params.failoverReason ?? "unknown"
+		};
+		return { action: "return_error_payload" };
+	}
+	if (params.stage === "prompt") {
+		if (params.externalAbort) return {
+			action: "surface_error",
+			reason: params.failoverReason
+		};
+		if (!params.profileRotated && shouldRotatePrompt(params)) return {
+			action: "rotate_profile",
+			reason: params.failoverReason
+		};
+		if (params.fallbackConfigured && params.failoverFailure && !isTerminalFormatFailure(params)) return {
+			action: "fallback_model",
+			reason: params.failoverReason ?? "unknown"
+		};
+		return {
+			action: "surface_error",
+			reason: params.failoverReason
+		};
+	}
+	if (params.externalAbort) return {
+		action: "surface_error",
+		reason: params.failoverReason
+	};
+	if (isTerminalFormatFailure(params)) return {
+		action: "surface_error",
+		reason: params.failoverReason
+	};
+	const assistantShouldRotate = shouldRotateAssistant(params);
+	if (!params.profileRotated && assistantShouldRotate) return {
+		action: "rotate_profile",
+		reason: params.failoverReason
+	};
+	if (assistantShouldRotate && params.fallbackConfigured) return {
+		action: "fallback_model",
+		reason: isAssistantTimeoutFailure(params) ? "timeout" : params.failoverReason ?? "unknown"
+	};
+	if (!assistantShouldRotate) return { action: "continue_normal" };
+	return {
+		action: "surface_error",
+		reason: params.failoverReason
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/assistant-failover.ts
+async function handleAssistantFailover(params) {
+	let overloadProfileRotations = params.overloadProfileRotations;
+	let decision = params.initialDecision;
+	const sameModelIdleTimeoutRetry = () => {
+		params.warn(`[llm-idle-timeout] ${sanitizeForLog(params.provider)}/${sanitizeForLog(params.modelId)} produced no reply before the idle watchdog; retrying same model`);
+		return {
+			action: "retry",
+			overloadProfileRotations,
+			retryKind: "same_model_idle_timeout",
+			lastRetryFailoverReason: mergeRetryFailoverReason({
+				previous: params.previousRetryFailoverReason,
+				failoverReason: params.failoverReason,
+				timedOut: true
+			})
+		};
+	};
+	if (decision.action === "rotate_profile") {
+		const failedProfileId = params.lastProfileId;
+		const timeoutFailure = params.timedOut || params.idleTimedOut;
+		const failureReason = params.assistantProfileFailureReason;
+		const markFailedProfile = async () => {
+			if (!failedProfileId || !failureReason) return;
+			try {
+				await params.maybeMarkAuthProfileFailure({
+					profileId: failedProfileId,
+					reason: failureReason,
+					modelId: params.modelId
+				});
+			} catch (err) {
+				params.warn(`profile failure mark failed: ${String(err)}`);
+			}
+		};
+		if (params.failoverReason === "overloaded") {
+			overloadProfileRotations += 1;
+			if (overloadProfileRotations > params.overloadProfileRotationLimit && params.fallbackConfigured) {
+				const status = resolveFailoverStatus("overloaded");
+				params.warn(`overload profile rotation cap reached for ${sanitizeForLog(params.provider)}/${sanitizeForLog(params.modelId)} after ${overloadProfileRotations} rotations; escalating to model fallback`);
+				await markFailedProfile();
+				params.logAssistantFailoverDecision("fallback_model", { status });
+				return {
+					action: "throw",
+					overloadProfileRotations,
+					error: new FailoverError("The AI service is temporarily overloaded. Please try again in a moment.", {
+						reason: "overloaded",
+						provider: params.activeErrorContext.provider,
+						model: params.activeErrorContext.model,
+						profileId: params.lastProfileId,
+						status,
+						rawError: params.lastAssistant?.errorMessage?.trim()
+					})
+				};
+			}
+		}
+		if (params.failoverReason === "rate_limit") params.maybeEscalateRateLimitProfileFallback({
+			failoverProvider: params.activeErrorContext.provider,
+			failoverModel: params.activeErrorContext.model,
+			logFallbackDecision: params.logAssistantFailoverDecision
+		});
+		const rotated = await params.advanceAuthProfile();
+		const markFailedProfilePromise = markFailedProfile();
+		if (timeoutFailure && !params.isProbeSession && failedProfileId) {
+			const timeoutLabel = params.idleTimedOut ? "idle timeout (model silent)" : "timed out";
+			params.warn(`Profile ${failedProfileId} ${timeoutLabel}. Trying next account...`);
+		}
+		if (params.cloudCodeAssistFormatError && failedProfileId) params.warn(`Profile ${failedProfileId} hit Cloud Code Assist format error. Tool calls will be sanitized on retry.`);
+		if (rotated) {
+			params.logAssistantFailoverDecision("rotate_profile");
+			await params.maybeBackoffBeforeOverloadFailover(params.failoverReason);
+			return {
+				action: "retry",
+				overloadProfileRotations,
+				lastRetryFailoverReason: mergeRetryFailoverReason({
+					previous: params.previousRetryFailoverReason,
+					failoverReason: params.failoverReason,
+					timedOut: params.timedOut || params.idleTimedOut
+				})
+			};
+		}
+		await markFailedProfilePromise;
+		if (params.idleTimedOut && params.allowSameModelIdleTimeoutRetry) return sameModelIdleTimeoutRetry();
+		decision = resolveRunFailoverDecision({
+			stage: "assistant",
+			allowFormatRetry: params.cloudCodeAssistFormatError,
+			aborted: params.aborted,
+			externalAbort: params.externalAbort,
+			fallbackConfigured: params.fallbackConfigured,
+			failoverFailure: params.failoverFailure,
+			failoverReason: params.failoverReason,
+			timedOut: params.timedOut,
+			idleTimedOut: params.idleTimedOut,
+			timedOutDuringCompaction: params.timedOutDuringCompaction,
+			timedOutDuringToolExecution: params.timedOutDuringToolExecution,
+			profileRotated: true
+		});
+	}
+	if (decision.action === "fallback_model") {
+		await params.maybeBackoffBeforeOverloadFailover(params.failoverReason);
+		const message = resolveAssistantFailoverErrorMessage(params);
+		const status = resolveFailoverStatus(decision.reason) ?? (isTimeoutErrorMessage(message) ? 408 : void 0);
+		params.logAssistantFailoverDecision("fallback_model", { status });
+		const shouldSuspend = Boolean(params.sessionKey) && (decision.reason === "rate_limit" || decision.reason === "billing");
+		return {
+			action: "throw",
+			overloadProfileRotations,
+			error: new FailoverError(message, {
+				reason: decision.reason,
+				provider: params.activeErrorContext.provider,
+				model: params.activeErrorContext.model,
+				profileId: params.lastProfileId,
+				status,
+				rawError: params.lastAssistant?.errorMessage?.trim(),
+				suspend: shouldSuspend
+			})
+		};
+	}
+	if (decision.action === "surface_error") {
+		if (!params.externalAbort && params.idleTimedOut && params.allowSameModelIdleTimeoutRetry) return sameModelIdleTimeoutRetry();
+		params.logAssistantFailoverDecision("surface_error");
+		if (!params.externalAbort && !params.timedOut && params.failoverFailure) {
+			const message = resolveAssistantFailoverErrorMessage(params);
+			const reason = resolveSurfaceErrorReason(decision.reason, params);
+			const status = resolveFailoverStatus(reason) ?? (isTimeoutErrorMessage(message) ? 408 : void 0);
+			const shouldSuspend = Boolean(params.sessionKey) && (reason === "rate_limit" || reason === "billing");
+			return {
+				action: "throw",
+				overloadProfileRotations,
+				error: new FailoverError(message, {
+					reason,
+					provider: params.activeErrorContext.provider,
+					model: params.activeErrorContext.model,
+					profileId: params.lastProfileId,
+					status,
+					rawError: params.lastAssistant?.errorMessage?.trim(),
+					suspend: shouldSuspend
+				})
+			};
+		}
+	}
+	return {
+		action: "continue_normal",
+		overloadProfileRotations
+	};
+}
+function resolveAssistantFailoverErrorMessage(params) {
+	const timeoutFailure = params.timedOut || params.idleTimedOut;
+	return (params.lastAssistant ? formatAssistantErrorText(params.lastAssistant, {
+		cfg: params.config,
+		sessionKey: params.sessionKey,
+		provider: params.activeErrorContext.provider,
+		model: params.activeErrorContext.model
+	}) : void 0) || params.lastAssistant?.errorMessage?.trim() || (timeoutFailure ? "LLM request timed out." : params.rateLimitFailure ? "LLM request rate limited." : params.billingFailure ? formatBillingErrorMessage(params.activeErrorContext.provider, params.activeErrorContext.model) : params.authFailure ? "LLM request unauthorized." : "LLM request failed.");
+}
+function resolveSurfaceErrorReason(declared, params) {
+	if (declared) return declared;
+	if (params.billingFailure) return "billing";
+	if (params.authFailure) return "auth";
+	if (params.rateLimitFailure) return "rate_limit";
+	return "unknown";
+}
+//#endregion
+//#region src/agents/runtime-auth-refresh.ts
+function clampRuntimeAuthRefreshDelayMs(params) {
+	return resolveSafeTimeoutDelayMs(params.refreshAt - params.now, { minMs: params.minDelayMs });
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/auth-controller.ts
+function createEmbeddedRunAuthController(params) {
+	const applyPreparedRuntimeRequestOverrides = (paramsForApply) => {
+		if (!paramsForApply.preparedAuth.baseUrl && !paramsForApply.preparedAuth.request) return;
+		const runtimeRequestConfig = resolveProviderRequestConfig({
+			provider: paramsForApply.runtimeModel.provider,
+			api: paramsForApply.runtimeModel.api,
+			baseUrl: paramsForApply.preparedAuth.baseUrl ?? paramsForApply.runtimeModel.baseUrl,
+			providerHeaders: paramsForApply.runtimeModel.headers && typeof paramsForApply.runtimeModel.headers === "object" ? paramsForApply.runtimeModel.headers : void 0,
+			request: sanitizeRuntimeProviderRequestOverrides(paramsForApply.preparedAuth.request),
+			capability: "llm",
+			transport: "stream"
+		});
+		params.setRuntimeModel({
+			...paramsForApply.runtimeModel,
+			...paramsForApply.preparedAuth.baseUrl ? { baseUrl: paramsForApply.preparedAuth.baseUrl } : {},
+			...runtimeRequestConfig.headers ? { headers: runtimeRequestConfig.headers } : {}
+		});
+		params.setEffectiveModel({
+			...params.getEffectiveModel(),
+			...paramsForApply.preparedAuth.baseUrl ? { baseUrl: paramsForApply.preparedAuth.baseUrl } : {},
+			...runtimeRequestConfig.headers ? { headers: runtimeRequestConfig.headers } : {}
+		});
+	};
+	const hasRefreshableRuntimeAuth = () => Boolean(params.getRuntimeAuthState()?.sourceApiKey.trim());
+	const nextRuntimeAuthGeneration = () => (params.getRuntimeAuthState()?.generation ?? 0) + 1;
+	const prepareRuntimeAuthForModel = async (prepareParams) => prepareProviderRuntimeAuth({
+		provider: prepareParams.runtimeModel.provider,
+		config: params.config,
+		workspaceDir: params.workspaceDir,
+		env: process.env,
+		context: {
+			config: params.config,
+			agentDir: params.agentDir,
+			workspaceDir: params.workspaceDir,
+			env: process.env,
+			provider: prepareParams.runtimeModel.provider,
+			modelId: params.getModelId(),
+			model: prepareParams.runtimeModel,
+			apiKey: prepareParams.apiKey,
+			authMode: prepareParams.authMode,
+			profileId: prepareParams.profileId
+		}
+	});
+	const clearRuntimeAuthRefreshTimer = () => {
+		const runtimeAuthState = params.getRuntimeAuthState();
+		if (!runtimeAuthState?.refreshTimer) return;
+		clearTimeout(runtimeAuthState.refreshTimer);
+		runtimeAuthState.refreshTimer = void 0;
+	};
+	const stopRuntimeAuthRefreshTimer = () => {
+		if (!params.getRuntimeAuthState()) return;
+		params.setRuntimeAuthRefreshCancelled(true);
+		clearRuntimeAuthRefreshTimer();
+	};
+	const refreshRuntimeAuth = async (reason) => {
+		const runtimeAuthState = params.getRuntimeAuthState();
+		if (!runtimeAuthState) return;
+		if (runtimeAuthState.refreshInFlight) {
+			await runtimeAuthState.refreshInFlight;
+			return;
+		}
+		const refreshGeneration = runtimeAuthState.generation;
+		const refreshProfileId = runtimeAuthState.profileId;
+		let refreshPromise;
+		refreshPromise = (async () => {
+			const currentRuntimeAuthState = params.getRuntimeAuthState();
+			const sourceApiKey = currentRuntimeAuthState?.sourceApiKey.trim() ?? "";
+			if (!sourceApiKey) throw new Error(`Runtime auth refresh requires a source credential.`);
+			const runtimeModel = params.getRuntimeModel();
+			params.log.debug(`Refreshing runtime auth for ${runtimeModel.provider} (${reason})...`);
+			const preparedAuth = await prepareRuntimeAuthForModel({
+				runtimeModel,
+				apiKey: sourceApiKey,
+				authMode: currentRuntimeAuthState?.authMode ?? "unknown",
+				profileId: currentRuntimeAuthState?.profileId
+			});
+			if (!preparedAuth?.apiKey) throw new Error(`Provider "${runtimeModel.provider}" does not support runtime auth refresh.`);
+			const activeRuntimeAuthState = params.getRuntimeAuthState();
+			if (!activeRuntimeAuthState || activeRuntimeAuthState.generation !== refreshGeneration || activeRuntimeAuthState.profileId !== refreshProfileId || activeRuntimeAuthState.sourceApiKey.trim() !== sourceApiKey) {
+				params.log.debug(`Ignoring stale runtime auth refresh for ${runtimeModel.provider}; auth state advanced before ${reason} refresh completed.`);
+				return;
+			}
+			params.authStorage.setRuntimeApiKey(runtimeModel.provider, preparedAuth.apiKey);
+			applyPreparedRuntimeRequestOverrides({
+				runtimeModel,
+				preparedAuth
+			});
+			params.setRuntimeAuthState({
+				...activeRuntimeAuthState,
+				expiresAt: preparedAuth.expiresAt
+			});
+			if (preparedAuth.expiresAt) {
+				const remaining = preparedAuth.expiresAt - Date.now();
+				params.log.debug(`Runtime auth refreshed for ${runtimeModel.provider}; expires in ${Math.max(0, Math.floor(remaining / 1e3))}s.`);
+			}
+		})().catch((err) => {
+			const runtimeModel = params.getRuntimeModel();
+			params.log.warn(`Runtime auth refresh failed for ${runtimeModel.provider}: ${formatErrorMessage(err)}`);
+			throw err;
+		}).finally(() => {
+			const activeState = params.getRuntimeAuthState();
+			if (activeState && activeState.generation === refreshGeneration && activeState.refreshInFlight === refreshPromise) activeState.refreshInFlight = void 0;
+		});
+		runtimeAuthState.refreshInFlight = refreshPromise;
+		await refreshPromise;
+	};
+	const scheduleRuntimeAuthRefresh = () => {
+		const runtimeAuthState = params.getRuntimeAuthState();
+		if (!runtimeAuthState || params.getRuntimeAuthRefreshCancelled()) return;
+		const runtimeModel = params.getRuntimeModel();
+		if (!hasRefreshableRuntimeAuth()) {
+			params.log.warn(`Skipping runtime auth refresh scheduling for ${runtimeModel.provider}; source credential missing.`);
+			return;
+		}
+		if (!runtimeAuthState.expiresAt) return;
+		clearRuntimeAuthRefreshTimer();
+		const now = Date.now();
+		const delayMs = clampRuntimeAuthRefreshDelayMs({
+			refreshAt: runtimeAuthState.expiresAt - RUNTIME_AUTH_REFRESH_MARGIN_MS,
+			now,
+			minDelayMs: RUNTIME_AUTH_REFRESH_MIN_DELAY_MS
+		});
+		const timer = setTimeout(() => {
+			if (params.getRuntimeAuthRefreshCancelled()) return;
+			refreshRuntimeAuth("scheduled").then(() => scheduleRuntimeAuthRefresh()).catch(() => {
+				if (params.getRuntimeAuthRefreshCancelled()) return;
+				const retryTimer = setTimeout(() => {
+					if (params.getRuntimeAuthRefreshCancelled()) return;
+					refreshRuntimeAuth("scheduled-retry").then(() => scheduleRuntimeAuthRefresh()).catch(() => void 0);
+				}, RUNTIME_AUTH_REFRESH_RETRY_MS);
+				const activeRuntimeAuthState = params.getRuntimeAuthState();
+				if (activeRuntimeAuthState) activeRuntimeAuthState.refreshTimer = retryTimer;
+				if (params.getRuntimeAuthRefreshCancelled() && activeRuntimeAuthState) {
+					clearTimeout(retryTimer);
+					activeRuntimeAuthState.refreshTimer = void 0;
+				}
+			});
+		}, delayMs);
+		runtimeAuthState.refreshTimer = timer;
+		if (params.getRuntimeAuthRefreshCancelled()) {
+			clearTimeout(timer);
+			runtimeAuthState.refreshTimer = void 0;
+		}
+	};
+	const resolveAuthProfileFailoverReason = (failoverParams) => {
+		if (failoverParams.allInCooldown) {
+			const profileIds = (failoverParams.profileIds ?? params.profileCandidates).filter((id) => typeof id === "string" && id.length > 0);
+			return resolveProfilesUnavailableReason({
+				store: params.authStore,
+				profileIds
+			}) ?? "unknown";
+		}
+		return classifyFailoverReason(failoverParams.message, { provider: params.getProvider() }) ?? "auth";
+	};
+	const throwAuthProfileFailover = (failoverParams) => {
+		const provider = params.getProvider();
+		const modelId = params.getModelId();
+		const fallbackMessage = `No available auth profile for ${provider} (all in cooldown or unavailable).`;
+		const message = failoverParams.message?.trim() || (failoverParams.error ? formatErrorMessage(failoverParams.error).trim() : "") || fallbackMessage;
+		const reason = resolveAuthProfileFailoverReason({
+			allInCooldown: failoverParams.allInCooldown,
+			message,
+			profileIds: params.profileCandidates
+		});
+		if (params.fallbackConfigured) throw new FailoverError(message, {
+			reason,
+			provider,
+			model: modelId,
+			status: resolveFailoverStatus(reason),
+			cause: failoverParams.error
+		});
+		if (failoverParams.error instanceof Error) throw failoverParams.error;
+		throw new Error(message);
+	};
+	const resolveApiKeyForCandidate = async (candidate) => {
+		return getApiKeyForModel({
+			model: params.getRuntimeModel(),
+			cfg: params.config,
+			profileId: candidate,
+			store: params.authStore,
+			agentDir: params.agentDir,
+			workspaceDir: params.workspaceDir,
+			lockedProfile: candidate != null && candidate === params.lockedProfileId
+		});
+	};
+	const applyApiKeyInfo = async (candidate) => {
+		const apiKeyInfo = await resolveApiKeyForCandidate(candidate);
+		params.setApiKeyInfo(apiKeyInfo);
+		const resolvedProfileId = apiKeyInfo.profileId ?? candidate;
+		if (!apiKeyInfo.apiKey) {
+			if (apiKeyInfo.mode !== "aws-sdk") {
+				const runtimeModel = params.getRuntimeModel();
+				throw new Error(formatMissingAuthError(apiKeyInfo, runtimeModel.provider));
+			}
+			const runtimeModel = params.getRuntimeModel();
+			const AWS_SDK_AUTH_SENTINEL = "__aws_sdk_auth__";
+			try {
+				const preparedAuth = await prepareRuntimeAuthForModel({
+					runtimeModel,
+					apiKey: AWS_SDK_AUTH_SENTINEL,
+					authMode: apiKeyInfo.mode,
+					profileId: apiKeyInfo.profileId
+				});
+				applyPreparedRuntimeRequestOverrides({
+					runtimeModel,
+					preparedAuth: preparedAuth ?? {}
+				});
+				if (preparedAuth?.apiKey) {
+					clearRuntimeAuthRefreshTimer();
+					params.authStorage.setRuntimeApiKey(runtimeModel.provider, preparedAuth.apiKey);
+					params.setRuntimeAuthState({
+						generation: nextRuntimeAuthGeneration(),
+						sourceApiKey: AWS_SDK_AUTH_SENTINEL,
+						authMode: apiKeyInfo.mode,
+						profileId: resolvedProfileId,
+						expiresAt: preparedAuth.expiresAt
+					});
+					if (preparedAuth.expiresAt) scheduleRuntimeAuthRefresh();
+					params.setLastProfileId(resolvedProfileId);
+					return;
+				}
+			} catch (error) {
+				params.log.warn(`prepareProviderRuntimeAuth failed for ${runtimeModel.provider}, falling back to sentinel: ${formatErrorMessage(error)}`);
+			}
+			clearRuntimeAuthRefreshTimer();
+			params.authStorage.setRuntimeApiKey(runtimeModel.provider, AWS_SDK_AUTH_SENTINEL);
+			params.setRuntimeAuthState(null);
+			params.setLastProfileId(resolvedProfileId);
+			return;
+		}
+		let runtimeAuthHandled = false;
+		const runtimeModel = params.getRuntimeModel();
+		const preparedAuth = await prepareRuntimeAuthForModel({
+			runtimeModel,
+			apiKey: apiKeyInfo.apiKey,
+			authMode: apiKeyInfo.mode,
+			profileId: apiKeyInfo.profileId
+		});
+		applyPreparedRuntimeRequestOverrides({
+			runtimeModel,
+			preparedAuth: preparedAuth ?? {}
+		});
+		if (preparedAuth?.apiKey) {
+			clearRuntimeAuthRefreshTimer();
+			params.authStorage.setRuntimeApiKey(runtimeModel.provider, preparedAuth.apiKey);
+			params.setRuntimeAuthState({
+				generation: nextRuntimeAuthGeneration(),
+				sourceApiKey: apiKeyInfo.apiKey,
+				authMode: apiKeyInfo.mode,
+				profileId: apiKeyInfo.profileId,
+				expiresAt: preparedAuth.expiresAt
+			});
+			if (preparedAuth.expiresAt) scheduleRuntimeAuthRefresh();
+			runtimeAuthHandled = true;
+		}
+		if (!runtimeAuthHandled) {
+			clearRuntimeAuthRefreshTimer();
+			params.authStorage.setRuntimeApiKey(runtimeModel.provider, apiKeyInfo.apiKey);
+			params.setRuntimeAuthState(null);
+		}
+		params.setLastProfileId(apiKeyInfo.profileId);
+	};
+	const advanceAuthProfile = async () => {
+		if (params.lockedProfileId) return false;
+		let nextIndex = params.getProfileIndex() + 1;
+		while (nextIndex < params.profileCandidates.length) {
+			const candidate = params.profileCandidates[nextIndex];
+			if (candidate && isProfileInCooldown(params.authStore, candidate, void 0, params.getModelId())) {
+				nextIndex += 1;
+				continue;
+			}
+			try {
+				await applyApiKeyInfo(candidate);
+				params.setProfileIndex(nextIndex);
+				params.setThinkLevel(params.initialThinkLevel);
+				params.attemptedThinking.clear();
+				return true;
+			} catch (err) {
+				if (candidate && candidate === params.lockedProfileId) throw err;
+				nextIndex += 1;
+			}
+		}
+		return false;
+	};
+	const initializeAuthProfile = async () => {
+		try {
+			const autoProfileCandidates = params.profileCandidates.filter((candidate) => typeof candidate === "string" && candidate.length > 0 && candidate !== params.lockedProfileId);
+			const modelId = params.getModelId();
+			const allAutoProfilesInCooldown = autoProfileCandidates.length > 0 && autoProfileCandidates.every((candidate) => isProfileInCooldown(params.authStore, candidate, void 0, modelId));
+			const unavailableReason = allAutoProfilesInCooldown ? resolveProfilesUnavailableReason({
+				store: params.authStore,
+				profileIds: autoProfileCandidates
+			}) ?? "unknown" : null;
+			const allowTransientCooldownProbe = params.allowTransientCooldownProbe && allAutoProfilesInCooldown && shouldAllowCooldownProbeForReason(unavailableReason);
+			let didTransientCooldownProbe = false;
+			while (params.getProfileIndex() < params.profileCandidates.length) {
+				const candidate = params.profileCandidates[params.getProfileIndex()];
+				if (candidate && candidate !== params.lockedProfileId && isProfileInCooldown(params.authStore, candidate, void 0, modelId)) if (allowTransientCooldownProbe && !didTransientCooldownProbe) {
+					didTransientCooldownProbe = true;
+					params.log.warn(`probing cooldowned auth profile for ${params.getProvider()}/${modelId} due to ${unavailableReason ?? "transient"} unavailability`);
+				} else {
+					params.setProfileIndex(params.getProfileIndex() + 1);
+					continue;
+				}
+				await applyApiKeyInfo(params.profileCandidates[params.getProfileIndex()]);
+				break;
+			}
+			if (params.getProfileIndex() >= params.profileCandidates.length) throwAuthProfileFailover({ allInCooldown: true });
+		} catch (err) {
+			if (err instanceof FailoverError) throw err;
+			if (params.profileCandidates[params.getProfileIndex()] === params.lockedProfileId) throwAuthProfileFailover({
+				allInCooldown: false,
+				error: err
+			});
+			if (!await advanceAuthProfile()) throwAuthProfileFailover({
+				allInCooldown: false,
+				error: err
+			});
+		}
+	};
+	const maybeRefreshRuntimeAuthForAuthError = async (errorText, retried) => {
+		if (!params.getRuntimeAuthState() || retried) return false;
+		if (!isFailoverErrorMessage(errorText, { provider: params.getProvider() })) return false;
+		if (classifyFailoverReason(errorText, { provider: params.getProvider() }) !== "auth") return false;
+		try {
+			await refreshRuntimeAuth("auth-error");
+			scheduleRuntimeAuthRefresh();
+			return true;
+		} catch {
+			return false;
+		}
+	};
+	return {
+		advanceAuthProfile,
+		initializeAuthProfile,
+		maybeRefreshRuntimeAuthForAuthError,
+		stopRuntimeAuthRefreshTimer
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/auth-profile-failure-policy.ts
+function resolveAuthProfileFailureReason(params) {
+	if (params.policy === "local" || !params.failoverReason || params.failoverReason === "server_error" || params.failoverReason === "empty_response" || params.failoverReason === "format") return null;
+	if (params.failoverReason === "timeout" && params.providerStarted !== true) return null;
+	return params.failoverReason;
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/backend.ts
+async function runEmbeddedAttemptWithBackend(params) {
+	return runAgentHarnessAttempt(params);
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/codex-app-server-recovery.ts
+function resolveCodexAppServerClientCloseRetry(params) {
+	const failure = params.attempt.codexAppServerFailure;
+	if (!failure) return {
+		retry: false,
+		reason: "not_codex_app_server_failure"
+	};
+	if (failure.kind !== "client_closed_before_turn_completed") return {
+		retry: false,
+		reason: failure.kind
+	};
+	if (failure.transport !== "stdio") return {
+		retry: false,
+		reason: "non_stdio_transport"
+	};
+	if (params.alreadyRetried) return {
+		retry: false,
+		reason: "retry_exhausted"
+	};
+	if (!failure.replaySafe || !params.attempt.replayMetadata.replaySafe) return {
+		retry: false,
+		reason: failure.replayBlockedReason ?? "replay_unsafe"
+	};
+	if (params.attempt.assistantTexts.some((text) => text.trim().length > 0)) return {
+		retry: false,
+		reason: "assistant_output"
+	};
+	if (params.attempt.toolMetas.length > 0 || params.attempt.clientToolCalls || params.attempt.lastToolError || params.attempt.didSendDeterministicApprovalPrompt) return {
+		retry: false,
+		reason: "tool_activity"
+	};
+	if (params.attempt.itemLifecycle.startedCount > 0 || params.attempt.itemLifecycle.activeCount > 0) return {
+		retry: false,
+		reason: "active_item"
+	};
+	return { retry: true };
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/failover-observation.ts
+function normalizeFailoverDecisionObservationBase(base) {
+	return {
+		...base,
+		failoverReason: base.failoverReason ?? (base.timedOut ? "timeout" : null),
+		profileFailureReason: base.profileFailureReason ?? (base.timedOut ? "timeout" : null)
+	};
+}
+function createFailoverDecisionLogger(base) {
+	const normalizedBase = normalizeFailoverDecisionObservationBase(base);
+	const safeProfileId = normalizedBase.profileId ? redactIdentifier(normalizedBase.profileId, { len: 12 }) : void 0;
+	const safeRunId = sanitizeForConsole(normalizedBase.runId) ?? "-";
+	const safeProvider = sanitizeForConsole(normalizedBase.provider) ?? "-";
+	const safeModel = sanitizeForConsole(normalizedBase.model) ?? "-";
+	const safeSourceProvider = sanitizeForConsole(normalizedBase.sourceProvider) ?? safeProvider;
+	const safeSourceModel = sanitizeForConsole(normalizedBase.sourceModel) ?? safeModel;
+	const profileText = safeProfileId ?? "-";
+	const reasonText = normalizedBase.failoverReason ?? "none";
+	const sourceChanged = safeSourceProvider !== safeProvider || safeSourceModel !== safeModel;
+	return (decision, extra) => {
+		const observedError = buildApiErrorObservationFields(normalizedBase.rawError);
+		const safeRawErrorPreview = sanitizeForConsole(observedError.rawErrorPreview);
+		const rawErrorConsoleSuffix = safeRawErrorPreview && !shouldSuppressRawErrorConsoleSuffix(observedError.providerRuntimeFailureKind) ? ` rawError=${safeRawErrorPreview}` : "";
+		log$1.warn("embedded run failover decision", {
+			event: "embedded_run_failover_decision",
+			tags: [
+				"error_handling",
+				"failover",
+				normalizedBase.stage,
+				decision
+			],
+			runId: normalizedBase.runId,
+			stage: normalizedBase.stage,
+			decision,
+			failoverReason: normalizedBase.failoverReason,
+			profileFailureReason: normalizedBase.profileFailureReason,
+			provider: normalizedBase.provider,
+			model: normalizedBase.model,
+			sourceProvider: normalizedBase.sourceProvider ?? normalizedBase.provider,
+			sourceModel: normalizedBase.sourceModel ?? normalizedBase.model,
+			profileId: safeProfileId,
+			fallbackConfigured: normalizedBase.fallbackConfigured,
+			timedOut: normalizedBase.timedOut,
+			aborted: normalizedBase.aborted,
+			status: extra?.status,
+			...observedError,
+			consoleMessage: `embedded run failover decision: runId=${safeRunId} stage=${normalizedBase.stage} decision=${decision} reason=${reasonText} from=${safeSourceProvider}/${safeSourceModel}${sourceChanged ? ` to=${safeProvider}/${safeModel}` : ""} profile=${profileText}${rawErrorConsoleSuffix}`
+		});
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/fallbacks.ts
+function hasEmbeddedRunConfiguredModelFallbacks(params) {
+	if (params.modelFallbacksOverride !== void 0) return params.modelFallbacksOverride.length > 0;
+	return hasConfiguredModelFallbacks({
+		cfg: params.cfg,
+		agentId: params.agentId,
+		sessionKey: params.sessionKey
+	});
+}
+function createIdleTimeoutBreakerState() {
+	return { consecutiveIdleTimeoutsBeforeOutput: 0 };
+}
+/**
+* Update the breaker counter from the latest attempt's outcome and report
+* whether the cap is now tripped. Designed to be called from the outer run
+* loop right after an embedded attempt completes.
+*
+* Pure function modulo the mutable `state.consecutiveIdleTimeoutsBeforeOutput`
+* field, so the caller decides where the state lives (typically a `let` in
+* the outer loop).
+*
+* Decision table:
+*   idleTimedOut  completedModelProgress   action
+*   ------------  ----------------------   ------
+*   true          false                    count += 1   (wedged provider candidate)
+*   true          true                     count = 0    (model is alive but slow tail)
+*   false         true                     count = 0    (clean progress, all good)
+*   false         false                    count unchanged (e.g. non-timeout error;
+*                                                          don't poison or reset)
+*
+* The "false / false" branch matters: a non-timeout error attempt with no
+* completed progress should not reset the breaker (it isn't a sign the
+* provider is healthy), but it also shouldn't increment it (the issue at hand
+* is idle timeouts, not arbitrary errors).
+*
+* `outputTokens` is intentionally not part of the reset condition. Some
+* transports can accumulate billed output tokens from partial tool-call
+* argument deltas before the model stalls; those tokens are cost, not completed
+* progress, so they must not keep the breaker disarmed.
+*/
+function stepIdleTimeoutBreaker(state, input, options) {
+	const cap = options?.cap ?? 5;
+	if (input.idleTimedOut && !input.completedModelProgress) state.consecutiveIdleTimeoutsBeforeOutput += 1;
+	else if (input.completedModelProgress) state.consecutiveIdleTimeoutsBeforeOutput = 0;
+	return {
+		consecutive: state.consecutiveIdleTimeoutsBeforeOutput,
+		tripped: cap > 0 && state.consecutiveIdleTimeoutsBeforeOutput >= cap
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/payloads.ts
+const RECOVERABLE_TOOL_ERROR_KEYWORDS = [
+	"required",
+	"missing",
+	"invalid",
+	"must be",
+	"must have",
+	"needs",
+	"requires"
+];
+const MUTATING_FAILURE_ACTION_PATTERN = "(?:write|edit|update|save|create|delete|remove|modify|change|apply|patch|move|rename|send|reply|message|run|execute|execution|command|script|shell|bash|exec|tool|action|operation)";
+const MUTATING_FAILURE_INABILITY_PATTERN = new RegExp(`\\b(?:couldn't|could not|can't|cannot|unable to|am unable to|wasn't able to|was not able to|were unable to)\\b.{0,100}\\b${MUTATING_FAILURE_ACTION_PATTERN}\\b`, "u");
+const MUTATING_FAILURE_ACTION_THEN_FAILURE_PATTERN = new RegExp(`\\b${MUTATING_FAILURE_ACTION_PATTERN}\\b.{0,100}\\b(?:failed|failure|errored)\\b`, "u");
+const MUTATING_FAILURE_FAILURE_THEN_ACTION_PATTERN = new RegExp(`\\b(?:failed|failure)\\b.{0,100}\\b${MUTATING_FAILURE_ACTION_PATTERN}\\b`, "u");
+const MUTATING_FAILURE_ERROR_WHILE_ACTION_PATTERN = new RegExp(`\\b(?:hit|encountered|ran into)\\b.{0,60}\\berror\\b.{0,100}\\b(?:while|trying to|when)\\b.{0,100}\\b${MUTATING_FAILURE_ACTION_PATTERN}\\b`, "u");
+const DID_NOT_FAIL_PATTERN = /\b(?:did not|didn't)\s+fail\b/u;
+const NEGATED_FAILURE_PATTERN = /\b(?:no|not|without)\s+(?:failures?|errors?)\b/u;
+function isRecoverableToolError(error) {
+	const errorLower = normalizeOptionalLowercaseString(error) ?? "";
+	return RECOVERABLE_TOOL_ERROR_KEYWORDS.some((keyword) => errorLower.includes(keyword));
+}
+function hasExplicitMutatingToolFailureAcknowledgement(text) {
+	const normalizedText = normalizeTextForComparison(text);
+	if (!normalizedText) return false;
+	if (DID_NOT_FAIL_PATTERN.test(normalizedText)) return false;
+	if (MUTATING_FAILURE_INABILITY_PATTERN.test(normalizedText)) return true;
+	if (NEGATED_FAILURE_PATTERN.test(normalizedText)) return false;
+	return MUTATING_FAILURE_ACTION_THEN_FAILURE_PATTERN.test(normalizedText) || MUTATING_FAILURE_FAILURE_THEN_ACTION_PATTERN.test(normalizedText) || MUTATING_FAILURE_ERROR_WHILE_ACTION_PATTERN.test(normalizedText);
+}
+function isVerboseToolDetailEnabled(level) {
+	return level === "full";
+}
+function resolveRawAssistantAnswerText(lastAssistant) {
+	if (!lastAssistant) return "";
+	return normalizeOptionalString(extractAssistantTextForPhase(lastAssistant, { phase: "final_answer" }) ?? extractAssistantTextForPhase(lastAssistant)) ?? "";
+}
+function normalizeReplyTextForComparison(text) {
+	return normalizeTextForComparison(parseReplyDirectives(text).text ?? "");
+}
+function shouldIncludeToolErrorDetails(params) {
+	if (isVerboseToolDetailEnabled(params.verboseLevel)) return true;
+	return isExecLikeToolName(params.lastToolError.toolName) && params.lastToolError.timedOut === true && (params.isCronTrigger === true || isCronSessionKey(params.sessionKey));
+}
+function shouldMarkNonTerminalToolErrorWarning(lastToolError) {
+	return lastToolError.middlewareError === true;
+}
+function resolveToolErrorWarningPolicy(params) {
+	const normalizedToolName = normalizeOptionalLowercaseString(params.lastToolError.toolName) ?? "";
+	const includeDetails = shouldIncludeToolErrorDetails(params);
+	if (params.suppressToolErrorWarnings) return {
+		showWarning: false,
+		includeDetails
+	};
+	if (normalizedToolName === "sessions_send") return {
+		showWarning: false,
+		includeDetails
+	};
+	if (params.suppressToolErrors) return {
+		showWarning: false,
+		includeDetails
+	};
+	if (params.lastToolError.mutatingAction ?? isLikelyMutatingToolName(params.lastToolError.toolName)) return {
+		showWarning: !params.hasUserFacingErrorReply && !params.hasUserFacingFailureAcknowledgement,
+		includeDetails
+	};
+	if (isExecLikeToolName(params.lastToolError.toolName) && !includeDetails) return {
+		showWarning: false,
+		includeDetails
+	};
+	return {
+		showWarning: !params.hasUserFacingReply && !isRecoverableToolError(params.lastToolError.error),
+		includeDetails
+	};
+}
+function buildEmbeddedRunPayloads(params) {
+	if (params.heartbeatToolResponse) return [createHeartbeatToolResponsePayload(params.heartbeatToolResponse)];
+	const replyItems = [];
+	const sourceReplyPayloads = params.sourceReplyDeliveryMode === "message_tool_only" ? params.messagingToolSourceReplyPayloads ?? [] : [];
+	const sourceReplyStartIndex = replyItems.length;
+	sourceReplyPayloads.forEach((payload, index) => {
+		const text = normalizeOptionalString(payload.text) ?? "";
+		const media = Array.from(new Set([...payload.mediaUrl ? [payload.mediaUrl] : [], ...payload.mediaUrls ?? []])).filter((value) => value.trim().length > 0);
+		if (!text && media.length === 0 && !payload.presentation && !payload.interactive && !payload.channelData) return;
+		replyItems.push({
+			text,
+			...payload.mediaUrl ? { mediaUrl: payload.mediaUrl } : {},
+			...media.length ? { media } : {},
+			...payload.audioAsVoice ? { audioAsVoice: true } : {},
+			...payload.presentation ? { presentation: payload.presentation } : {},
+			...payload.interactive ? { interactive: payload.interactive } : {},
+			...payload.channelData ? { channelData: payload.channelData } : {},
+			sourceReplyMirror: { idempotencyKey: payload.idempotencyKey ?? (params.runId ? `${params.runId}:internal-source-reply:${index}` : void 0) }
+		});
+	});
+	const hasSourceReplyPayload = replyItems.length > sourceReplyStartIndex;
+	const useMarkdown = params.toolResultFormat === "markdown";
+	const suppressAssistantArtifacts = params.didSendDeterministicApprovalPrompt === true || hasSourceReplyPayload;
+	const nonEmptyAssistantTexts = params.assistantTexts.filter((text) => text.trim().length > 0);
+	const assistantForPayload = params.currentAssistant ?? void 0 ?? (nonEmptyAssistantTexts.length === 1 ? void 0 : params.lastAssistant);
+	const lastAssistantStopReason = assistantForPayload?.stopReason;
+	const lastAssistantErrored = lastAssistantStopReason === "error";
+	const lastAssistantAborted = lastAssistantStopReason === "aborted";
+	const runAborted = params.runAborted === true || lastAssistantAborted;
+	const lastAssistantNeedsErrorSurface = lastAssistantErrored || lastAssistantAborted;
+	const errorText = assistantForPayload && lastAssistantNeedsErrorSurface ? suppressAssistantArtifacts ? void 0 : formatAssistantErrorText(assistantForPayload, {
+		cfg: params.config,
+		sessionKey: params.sessionKey,
+		provider: params.provider,
+		model: params.model
+	}) : void 0;
+	const rawErrorMessage = lastAssistantNeedsErrorSurface ? normalizeOptionalString(assistantForPayload?.errorMessage) : void 0;
+	const rawErrorFingerprint = rawErrorMessage ? getApiErrorPayloadFingerprint(rawErrorMessage) : null;
+	const formattedRawErrorMessage = rawErrorMessage ? formatRawAssistantErrorForUi(rawErrorMessage) : null;
+	const normalizedFormattedRawErrorMessage = formattedRawErrorMessage ? normalizeTextForComparison(formattedRawErrorMessage) : null;
+	const normalizedRawErrorText = rawErrorMessage ? normalizeTextForComparison(rawErrorMessage) : null;
+	const normalizedErrorText = errorText ? normalizeTextForComparison(errorText) : null;
+	const normalizedGenericBillingErrorText = normalizeTextForComparison(BILLING_ERROR_USER_MESSAGE);
+	const genericErrorText = "The AI service returned an error. Please try again.";
+	if (errorText) replyItems.push({
+		text: errorText,
+		isError: true
+	});
+	if (params.inlineToolResultsAllowed && params.verboseLevel !== "off" && params.toolMetas.length > 0) for (const { toolName, meta } of params.toolMetas) {
+		const { text: cleanedText, mediaUrls, audioAsVoice, replyToId, replyToTag, replyToCurrent } = parseReplyDirectives(formatToolAggregate(toolName, meta ? [meta] : [], { markdown: useMarkdown }));
+		if (cleanedText) replyItems.push({
+			text: cleanedText,
+			media: mediaUrls,
+			audioAsVoice,
+			replyToId,
+			replyToTag,
+			replyToCurrent
+		});
+	}
+	const reasoningText = suppressAssistantArtifacts || runAborted ? "" : assistantForPayload && params.reasoningLevel === "on" && params.thinkingLevel !== "off" ? extractAssistantThinking(assistantForPayload) : "";
+	if (reasoningText) replyItems.push({
+		text: reasoningText,
+		isReasoning: true
+	});
+	const fallbackAnswerText = assistantForPayload ? extractAssistantVisibleText(assistantForPayload) : "";
+	const fallbackRawAnswerText = resolveRawAssistantAnswerText(assistantForPayload);
+	const shouldSuppressRawErrorText = (text) => {
+		if (!lastAssistantNeedsErrorSurface) return false;
+		const trimmed = text.trim();
+		if (!trimmed) return false;
+		if (errorText) {
+			const normalized = normalizeTextForComparison(trimmed);
+			if (normalized && normalizedErrorText && normalized === normalizedErrorText) return true;
+			if (trimmed === genericErrorText) return true;
+			if (normalized && normalizedGenericBillingErrorText && normalized === normalizedGenericBillingErrorText) return true;
+		}
+		if (rawErrorMessage && trimmed === rawErrorMessage) return true;
+		if (formattedRawErrorMessage && trimmed === formattedRawErrorMessage) return true;
+		if (normalizedRawErrorText) {
+			const normalized = normalizeTextForComparison(trimmed);
+			if (normalized && normalized === normalizedRawErrorText) return true;
+		}
+		if (normalizedFormattedRawErrorMessage) {
+			const normalized = normalizeTextForComparison(trimmed);
+			if (normalized && normalized === normalizedFormattedRawErrorMessage) return true;
+		}
+		if (rawErrorFingerprint) {
+			const fingerprint = getApiErrorPayloadFingerprint(trimmed);
+			if (fingerprint && fingerprint === rawErrorFingerprint) return true;
+		}
+		return isRawApiErrorPayload(trimmed);
+	};
+	const rawAnswerDirectiveState = fallbackRawAnswerText ? parseReplyDirectives(fallbackRawAnswerText) : null;
+	const rawAnswerHasMedia = (rawAnswerDirectiveState?.mediaUrls?.length ?? 0) > 0 || rawAnswerDirectiveState?.audioAsVoice;
+	const assistantTextsHaveMedia = params.assistantTexts.some((text) => {
+		const parsed = parseReplyDirectives(text);
+		return (parsed.mediaUrls?.length ?? 0) > 0 || parsed.audioAsVoice;
+	});
+	const normalizedAssistantTexts = normalizeTextForComparison(nonEmptyAssistantTexts.join("\n\n"));
+	const normalizedRawAnswerText = normalizeTextForComparison(rawAnswerDirectiveState?.text ?? "");
+	const shouldPreferRawAnswerText = rawAnswerHasMedia && (!nonEmptyAssistantTexts.length || !assistantTextsHaveMedia && normalizedAssistantTexts.length > 0 && normalizedAssistantTexts === normalizedRawAnswerText);
+	const fallbackAnswerSourceText = shouldPreferRawAnswerText && fallbackRawAnswerText ? fallbackRawAnswerText : fallbackAnswerText;
+	const normalizedFallbackAnswerSourceText = fallbackAnswerSourceText ? normalizeReplyTextForComparison(fallbackAnswerSourceText) : "";
+	const shouldUseCanonicalFinalAnswer = !lastAssistantNeedsErrorSurface && fallbackAnswerSourceText.length > 0 && normalizedFallbackAnswerSourceText.length > 0;
+	const hasAssistantTextPayload = nonEmptyAssistantTexts.length > 0;
+	const answerTexts = suppressAssistantArtifacts || runAborted ? [] : (shouldUseCanonicalFinalAnswer ? [fallbackAnswerSourceText] : shouldPreferRawAnswerText && fallbackRawAnswerText ? [fallbackRawAnswerText] : hasAssistantTextPayload ? nonEmptyAssistantTexts : fallbackAnswerText ? [fallbackAnswerText] : []).filter((text) => !shouldSuppressRawErrorText(text));
+	let hasUserFacingAssistantReply = hasSourceReplyPayload;
+	const hasUserFacingErrorReply = replyItems.some((item) => item.isError === true);
+	let hasUserFacingFailureAcknowledgement = false;
+	for (const text of answerTexts) {
+		const { text: cleanedText, mediaUrls, audioAsVoice, replyToId, replyToTag, replyToCurrent } = parseReplyDirectives(text);
+		if (!cleanedText && (!mediaUrls || mediaUrls.length === 0) && !audioAsVoice) continue;
+		replyItems.push({
+			text: cleanedText,
+			media: mediaUrls,
+			audioAsVoice,
+			replyToId,
+			replyToTag,
+			replyToCurrent
+		});
+		hasUserFacingAssistantReply = true;
+		if (cleanedText && hasExplicitMutatingToolFailureAcknowledgement(cleanedText)) hasUserFacingFailureAcknowledgement = true;
+	}
+	if (params.lastToolError) {
+		const warningPolicy = resolveToolErrorWarningPolicy({
+			lastToolError: params.lastToolError,
+			hasUserFacingReply: hasUserFacingAssistantReply,
+			hasUserFacingErrorReply,
+			hasUserFacingFailureAcknowledgement,
+			suppressToolErrors: Boolean(params.config?.messages?.suppressToolErrors),
+			suppressToolErrorWarnings: params.suppressToolErrorWarnings,
+			isCronTrigger: params.isCronTrigger,
+			sessionKey: params.sessionKey,
+			verboseLevel: params.verboseLevel
+		});
+		if (warningPolicy.showWarning) {
+			const warningText = `⚠️ ${formatToolAggregate(params.lastToolError.toolName, params.lastToolError.meta ? [params.lastToolError.meta] : void 0, { markdown: useMarkdown })} failed${warningPolicy.includeDetails && params.lastToolError.error ? `: ${params.lastToolError.error}` : ""}`;
+			const normalizedWarning = normalizeTextForComparison(warningText);
+			if (!(normalizedWarning ? replyItems.some((item) => {
+				if (!item.text) return false;
+				const normalizedExisting = normalizeTextForComparison(item.text);
+				return normalizedExisting.length > 0 && normalizedExisting === normalizedWarning;
+			}) : false)) replyItems.push({
+				text: warningText,
+				isError: true,
+				nonTerminalToolErrorWarning: hasUserFacingAssistantReply && shouldMarkNonTerminalToolErrorWarning(params.lastToolError)
+			});
+		}
+	}
+	const hasAudioAsVoiceTag = replyItems.some((item) => item.audioAsVoice);
+	return replyItems.map((item) => {
+		const payload = { text: normalizeOptionalString(item.text) };
+		const mediaUrl = item.mediaUrl ?? item.media?.[0];
+		if (mediaUrl) payload.mediaUrl = mediaUrl;
+		if (item.media?.length) payload.mediaUrls = item.media;
+		if (item.isError !== void 0) payload.isError = item.isError;
+		if (item.nonTerminalToolErrorWarning) setReplyPayloadMetadata(payload, { nonTerminalToolErrorWarning: true });
+		if (item.replyToId) payload.replyToId = item.replyToId;
+		if (item.replyToTag !== void 0) payload.replyToTag = item.replyToTag;
+		if (item.replyToCurrent !== void 0) payload.replyToCurrent = item.replyToCurrent;
+		if (item.audioAsVoice || Boolean(hasAudioAsVoiceTag && item.media?.length)) payload.audioAsVoice = true;
+		if (item.presentation) payload.presentation = item.presentation;
+		if (item.interactive) payload.interactive = item.interactive;
+		if (item.channelData) payload.channelData = item.channelData;
+		if (item.sourceReplyMirror) {
+			markReplyPayloadForSourceSuppressionDelivery(payload);
+			if (params.sessionKey) {
+				const sourceReplyTranscriptMirror = { sessionKey: params.sessionKey };
+				if (params.agentId) sourceReplyTranscriptMirror.agentId = params.agentId;
+				if (payload.text) sourceReplyTranscriptMirror.text = payload.text;
+				if (payload.mediaUrls?.length) sourceReplyTranscriptMirror.mediaUrls = payload.mediaUrls;
+				if (item.sourceReplyMirror.idempotencyKey) sourceReplyTranscriptMirror.idempotencyKey = item.sourceReplyMirror.idempotencyKey;
+				setReplyPayloadMetadata(payload, { sourceReplyTranscriptMirror });
+			}
+		}
+		if (payload.text && isSilentReplyPayloadText(payload.text, "NO_REPLY")) {
+			const silentText = payload.text;
+			payload.text = void 0;
+			if (hasReplyPayloadContent(payload)) return payload;
+			payload.text = silentText;
+		}
+		return payload;
+	}).filter((p) => {
+		if (!hasReplyPayloadContent(p)) return false;
+		if (p.text && isSilentReplyPayloadText(p.text, "NO_REPLY")) return false;
+		return true;
+	});
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/retry-limit.ts
+function handleRetryLimitExhaustion(params) {
+	if (params.decision.action === "fallback_model") throw new FailoverError(params.message, {
+		reason: params.decision.reason,
+		provider: params.provider,
+		model: params.model,
+		profileId: params.profileId,
+		status: resolveFailoverStatus(params.decision.reason)
+	});
+	return {
+		payloads: [{
+			text: "Request failed after repeated internal retries. Please try again, or use /new to start a fresh session.",
+			isError: true
+		}],
+		meta: {
+			durationMs: params.durationMs,
+			agentMeta: params.agentMeta,
+			...params.replayInvalid ? { replayInvalid: true } : {},
+			...params.livenessState ? { livenessState: params.livenessState } : {},
+			error: {
+				kind: "retry_limit",
+				message: params.message
+			}
+		}
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/setup.ts
+async function resolveHookModelSelection(params) {
+	let provider = params.provider;
+	let modelId = params.modelId;
+	let modelResolveOverride;
+	let legacyBeforeAgentStartResult;
+	const hookRunner = params.hookRunner;
+	if (hookRunner?.hasHooks("before_model_resolve")) try {
+		const event = params.attachments ? {
+			prompt: params.prompt,
+			attachments: params.attachments
+		} : { prompt: params.prompt };
+		modelResolveOverride = await hookRunner.runBeforeModelResolve(event, params.hookContext);
+	} catch (hookErr) {
+		log$1.warn(`before_model_resolve hook failed: ${String(hookErr)}`);
+	}
+	if (hookRunner?.hasHooks("before_agent_start")) try {
+		legacyBeforeAgentStartResult = await hookRunner.runBeforeAgentStart({ prompt: params.prompt }, params.hookContext);
+		modelResolveOverride = {
+			providerOverride: modelResolveOverride?.providerOverride ?? legacyBeforeAgentStartResult?.providerOverride,
+			modelOverride: modelResolveOverride?.modelOverride ?? legacyBeforeAgentStartResult?.modelOverride
+		};
+	} catch (hookErr) {
+		log$1.warn(`before_agent_start hook (legacy model resolve path) failed: ${String(hookErr)}`);
+	}
+	if (modelResolveOverride?.providerOverride) {
+		provider = modelResolveOverride.providerOverride;
+		log$1.info(`[hooks] provider overridden to ${provider}`);
+	}
+	if (modelResolveOverride?.modelOverride) {
+		modelId = modelResolveOverride.modelOverride;
+		log$1.info(`[hooks] model overridden to ${modelId}`);
+	}
+	return {
+		provider,
+		modelId,
+		legacyBeforeAgentStartResult
+	};
+}
+function buildBeforeModelResolveAttachments(images) {
+	if (!images?.length) return;
+	return images.map((img) => ({
+		kind: "image",
+		mimeType: img.mimeType
+	}));
+}
+function resolveEffectiveRuntimeModel(params) {
+	const ctxInfo = resolveContextWindowInfo({
+		cfg: params.cfg,
+		provider: params.contextConfigProvider ?? params.provider,
+		modelId: params.modelId,
+		modelContextTokens: readPiModelContextTokens(params.runtimeModel),
+		modelContextWindow: params.runtimeModel.contextWindow,
+		defaultTokens: DEFAULT_CONTEXT_TOKENS
+	});
+	const effectiveModel = ctxInfo.tokens < (params.runtimeModel.contextWindow ?? Infinity) ? {
+		...params.runtimeModel,
+		contextWindow: ctxInfo.tokens
+	} : params.runtimeModel;
+	const ctxGuard = evaluateContextWindowGuard({ info: ctxInfo });
+	const runtimeBaseUrl = typeof params.runtimeModel.baseUrl === "string" ? params.runtimeModel.baseUrl : void 0;
+	if (ctxGuard.shouldWarn) log$1.warn(formatContextWindowWarningMessage({
+		provider: params.provider,
+		modelId: params.modelId,
+		guard: ctxGuard,
+		runtimeBaseUrl
+	}));
+	if (ctxGuard.shouldBlock) {
+		const message = formatContextWindowBlockMessage({
+			guard: ctxGuard,
+			runtimeBaseUrl
+		});
+		log$1.error(`blocked model (context window too small): ${params.provider}/${params.modelId} ctx=${ctxGuard.tokens} (min=${ctxGuard.hardMinTokens}) source=${ctxGuard.source}; ${message}`);
+		throw new FailoverError(message, {
+			reason: "unknown",
+			provider: params.provider,
+			model: params.modelId
+		});
+	}
+	return {
+		ctxInfo,
+		effectiveModel
+	};
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run/tool-media-payloads.ts
+function mergeAttemptToolMediaPayloads(params) {
+	const mediaUrls = Array.from(new Set(params.toolMediaUrls?.map((url) => url.trim()).filter(Boolean) ?? []));
+	if (mediaUrls.length === 0 && !params.toolAudioAsVoice && !params.toolTrustedLocalMedia) return params.payloads;
+	const payloads = params.payloads?.length ? [...params.payloads] : [];
+	const payloadIndex = payloads.findIndex((payload) => !payload.isReasoning);
+	if (payloadIndex >= 0) {
+		const payload = payloads[payloadIndex];
+		if (params.sourceReplyDeliveryMode === "message_tool_only" && getReplyPayloadMetadata(payload)?.sourceReplyTranscriptMirror) return payloads;
+		const mergedMediaUrls = Array.from(new Set([...payload.mediaUrls ?? [], ...mediaUrls]));
+		payloads[payloadIndex] = copyReplyPayloadMetadata(payload, {
+			...payload,
+			mediaUrls: mergedMediaUrls.length ? mergedMediaUrls : void 0,
+			mediaUrl: payload.mediaUrl ?? mergedMediaUrls[0],
+			audioAsVoice: payload.audioAsVoice || params.toolAudioAsVoice || void 0,
+			trustedLocalMedia: payload.trustedLocalMedia || params.toolTrustedLocalMedia || void 0
+		});
+		return payloads;
+	}
+	return [...payloads, {
+		mediaUrls: mediaUrls.length ? mediaUrls : void 0,
+		mediaUrl: mediaUrls[0],
+		audioAsVoice: params.toolAudioAsVoice || void 0,
+		trustedLocalMedia: params.toolTrustedLocalMedia || void 0
+	}];
+}
+//#endregion
+//#region src/agents/pi-embedded-runner/run.ts
+const MAX_SAME_MODEL_IDLE_TIMEOUT_RETRIES = 1;
+const EMBEDDED_RUN_LANE_TIMEOUT_GRACE_MS = 3e4;
+const MID_TURN_PRECHECK_CONTINUATION_PROMPT = "Continue from the current transcript after the latest tool result. Do not repeat the original user request, and do not rerun completed tools unless the transcript shows they are still needed.";
+const COMPACTION_CONTINUATION_RETRY_INSTRUCTION = "The previous attempt compacted the conversation context before producing a final user-visible answer. Continue from the compacted transcript and produce the final answer now. Do not restart from scratch, do not repeat completed work, and do not rerun tools unless the transcript clearly lacks required evidence.";
+function resolveAttemptDispatchApiKey(params) {
+	if (params.runtimeAuthState) return;
+	return params.apiKeyInfo?.apiKey;
+}
+function resolveEmbeddedRunLaneTimeoutMs(timeoutMs) {
+	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return;
+	return Math.floor(timeoutMs) + EMBEDDED_RUN_LANE_TIMEOUT_GRACE_MS;
+}
+function withEmbeddedRunLaneTimeout(opts, laneTaskTimeoutMs) {
+	if (laneTaskTimeoutMs === void 0 || opts?.taskTimeoutMs !== void 0) return opts;
+	return {
+		...opts,
+		taskTimeoutMs: laneTaskTimeoutMs
+	};
+}
+function resolveEmbeddedRunSessionQueuePriority(trigger) {
+	switch (trigger) {
+		case "user":
+		case "manual": return "foreground";
+		case "cron":
+		case "heartbeat":
+		case "memory":
+		case "overflow": return "background";
+		default: return "normal";
+	}
+}
+function normalizeEmbeddedRunAttemptResult(attempt) {
+	const raw = attempt;
+	return {
+		...attempt,
+		assistantTexts: raw.assistantTexts ?? [],
+		toolMetas: raw.toolMetas ?? [],
+		acceptedSessionSpawns: raw.acceptedSessionSpawns ?? [],
+		messagesSnapshot: raw.messagesSnapshot ?? [],
+		messagingToolSentTexts: raw.messagingToolSentTexts ?? [],
+		messagingToolSentMediaUrls: raw.messagingToolSentMediaUrls ?? [],
+		messagingToolSentTargets: raw.messagingToolSentTargets ?? [],
+		messagingToolSourceReplyPayloads: raw.messagingToolSourceReplyPayloads ?? [],
+		itemLifecycle: raw.itemLifecycle ?? {
+			startedCount: 0,
+			completedCount: 0,
+			activeCount: 0
+		},
+		replayMetadata: resolveAttemptReplayMetadata(raw)
+	};
+}
+function hasCompletedModelProgressForIdleBreaker(attempt) {
+	return attempt.assistantTexts.some((text) => text.trim().length > 0) || attempt.toolMetas.length > 0 || (attempt.clientToolCalls?.length ?? 0) > 0 || hasOutboundDeliveryEvidence(attempt) || attempt.itemLifecycle.completedCount > 0;
+}
+function createEmptyAuthProfileStore() {
+	return {
+		version: 1,
+		profiles: {}
+	};
+}
+function createScopedAuthProfileStore(store, profileIds) {
+	const profiles = store.profiles ?? {};
+	const normalizedProfileIds = (Array.isArray(profileIds) ? profileIds : [profileIds]).map((profileId) => profileId?.trim()).filter((profileId) => !!profileId);
+	const scopedProfiles = Object.fromEntries(normalizedProfileIds.flatMap((profileId) => {
+		const credential = profiles[profileId];
+		return credential ? [[profileId, credential]] : [];
+	}));
+	return Object.keys(scopedProfiles).length > 0 ? {
+		version: store.version,
+		profiles: scopedProfiles
+	} : createEmptyAuthProfileStore();
+}
+function buildTraceToolSummary(params) {
+	if (!params.toolMetas?.length) return;
+	const tools = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const entry of params.toolMetas) {
+		const toolName = normalizeOptionalString(entry.toolName);
+		if (!toolName || seen.has(toolName)) continue;
+		seen.add(toolName);
+		tools.push(toolName);
+	}
+	return {
+		calls: params.toolMetas?.length ?? 0,
+		tools,
+		failures: params.hadFailure ? 1 : 0
+	};
+}
+/**
+* Best-effort backfill of sessionKey from sessionId when not explicitly provided.
+* The return value is normalized: whitespace-only inputs collapse to undefined, and
+* successful resolution returns a trimmed session key. This is a read-only lookup
+* with no side effects.
+* See: https://github.com/openclaw/openclaw/issues/60552
+*/
+function backfillSessionKey(params) {
+	const trimmed = normalizeOptionalString(params.sessionKey);
+	if (trimmed) return trimmed;
+	if (!params.config || !params.sessionId) return;
+	try {
+		return normalizeOptionalString((normalizeOptionalString(params.agentId) ? resolveStoredSessionKeyForSessionId({
+			cfg: params.config,
+			sessionId: params.sessionId,
+			agentId: params.agentId
+		}) : resolveSessionKeyForRequest({
+			cfg: params.config,
+			sessionId: params.sessionId
+		})).sessionKey);
+	} catch (err) {
+		log$1.warn(`[backfillSessionKey] Failed to resolve sessionKey for sessionId=${redactRunIdentifier(sanitizeForLog(params.sessionId))}: ${formatErrorMessage(err)}`);
+		return;
+	}
+}
+function buildHandledReplyPayloads(reply) {
+	const normalized = reply ?? { text: "NO_REPLY" };
+	return [{
+		text: normalized.text,
+		mediaUrl: normalized.mediaUrl,
+		mediaUrls: normalized.mediaUrls,
+		replyToId: normalized.replyToId,
+		audioAsVoice: normalized.audioAsVoice,
+		isError: normalized.isError,
+		isReasoning: normalized.isReasoning
+	}];
+}
+async function runEmbeddedPiAgent(params) {
+	const effectiveSessionKey = backfillSessionKey({
+		config: params.config,
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		agentId: params.agentId
+	});
+	if (effectiveSessionKey !== params.sessionKey) params = {
+		...params,
+		sessionKey: effectiveSessionKey
+	};
+	const sessionLane = resolveSessionLane(params.sessionKey?.trim() || params.sessionId);
+	const globalLane = resolveGlobalLane(params.lane);
+	const sessionQueuePriority = resolveEmbeddedRunSessionQueuePriority(params.trigger);
+	const laneTaskTimeoutMs = resolveEmbeddedRunLaneTimeoutMs(params.timeoutMs);
+	let laneTaskProgressAtMs = Date.now();
+	const noteLaneTaskProgress = () => {
+		laneTaskProgressAtMs = Date.now();
+	};
+	const withLaneTimeout = (opts) => withEmbeddedRunLaneTimeout({
+		...opts,
+		taskTimeoutProgressAtMs: () => laneTaskProgressAtMs
+	}, laneTaskTimeoutMs);
+	const enqueueGlobal = (task, opts) => params.enqueue ? params.enqueue(task, withLaneTimeout(opts)) : enqueueCommandInLane(globalLane, task, withLaneTimeout(opts));
+	const enqueueSession = (task, opts) => {
+		const sessionOpts = {
+			...opts,
+			priority: sessionQueuePriority
+		};
+		return params.enqueue ? params.enqueue(task, sessionOpts) : enqueueCommandInLane(sessionLane, task, sessionOpts);
+	};
+	const channelHint = params.messageChannel ?? params.messageProvider;
+	const resolvedToolResultFormat = params.toolResultFormat ?? (channelHint ? isMarkdownCapableMessageChannel(channelHint) ? "markdown" : "plain" : "markdown");
+	const isProbeSession = params.sessionId?.startsWith("probe-") ?? false;
+	const throwIfAborted = () => {
+		if (!params.abortSignal?.aborted) return;
+		const reason = params.abortSignal.reason;
+		if (reason instanceof Error) throw reason;
+		const abortErr = reason !== void 0 ? new Error("Operation aborted", { cause: reason }) : /* @__PURE__ */ new Error("Operation aborted");
+		abortErr.name = "AbortError";
+		throw abortErr;
+	};
+	throwIfAborted();
+	return enqueueSession(() => {
+		throwIfAborted();
+		return enqueueGlobal(async () => {
+			throwIfAborted();
+			const started = Date.now();
+			const startupStages = createEmbeddedRunStageTracker();
+			let startupStagesEmitted = false;
+			const notifyExecutionPhase = (phase, extra) => {
+				noteLaneTaskProgress();
+				params.onExecutionPhase?.({
+					phase,
+					...extra
+				});
+			};
+			const notifyRunProgress = (info) => {
+				noteLaneTaskProgress();
+				params.onRunProgress?.(info);
+			};
+			const emitStartupStageSummary = (phase) => {
+				const summary = startupStages.snapshot();
+				const shouldWarn = shouldWarnEmbeddedRunStageSummary(summary);
+				if (!shouldWarn && !log$1.isEnabled("trace")) return;
+				const message = formatEmbeddedRunStageSummary(`[trace:embedded-run] startup stages: runId=${params.runId} sessionId=${params.sessionId} phase=${phase}`, summary);
+				if (shouldWarn) log$1.warn(message);
+				else log$1.trace(message);
+			};
+			params.onExecutionStarted?.();
+			notifyExecutionPhase("runner_entered");
+			const workspaceResolution = resolveRunWorkspaceDir({
+				workspaceDir: params.workspaceDir,
+				sessionKey: params.sessionKey,
+				agentId: params.agentId,
+				config: params.config
+			});
+			const resolvedWorkspace = workspaceResolution.workspaceDir;
+			const isCanonicalWorkspace = resolveUserPath(resolveAgentWorkspaceDir(params.config ?? {}, workspaceResolution.agentId)) === resolvedWorkspace;
+			const redactedSessionId = redactRunIdentifier(params.sessionId);
+			const redactedSessionKey = redactRunIdentifier(params.sessionKey);
+			const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
+			if (workspaceResolution.usedFallback) log$1.warn(`[workspace-fallback] caller=runEmbeddedPiAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
+			startupStages.mark("workspace");
+			notifyExecutionPhase("workspace");
+			ensureRuntimePluginsLoaded({
+				config: params.config,
+				workspaceDir: resolvedWorkspace,
+				allowGatewaySubagentBinding: params.allowGatewaySubagentBinding
+			});
+			startupStages.mark("runtime-plugins");
+			notifyExecutionPhase("runtime_plugins");
+			let provider = (params.provider ?? "openai").trim() || "openai";
+			let modelId = (params.model ?? "gpt-5.5").trim() || "gpt-5.5";
+			const agentDir = params.agentDir ?? resolveAgentDir(params.config ?? {}, workspaceResolution.agentId);
+			const normalizedSessionKey = params.sessionKey?.trim();
+			const fallbackConfigured = hasEmbeddedRunConfiguredModelFallbacks({
+				cfg: params.config,
+				agentId: params.agentId,
+				sessionKey: normalizedSessionKey,
+				modelFallbacksOverride: params.modelFallbacksOverride
+			});
+			const resolvedSessionKey = normalizedSessionKey;
+			const hookRunner = getGlobalHookRunner();
+			const hookCtx = {
+				runId: params.runId,
+				jobId: params.jobId,
+				agentId: workspaceResolution.agentId,
+				sessionKey: resolvedSessionKey,
+				sessionId: params.sessionId,
+				workspaceDir: resolvedWorkspace,
+				modelProviderId: provider,
+				modelId,
+				trigger: params.trigger,
+				...buildAgentHookContextChannelFields(params)
+			};
+			if (params.trigger === "cron" && hookRunner?.hasHooks("before_agent_reply")) {
+				notifyExecutionPhase("before_agent_reply", {
+					provider,
+					model: modelId
+				});
+				const hookResult = await hookRunner.runBeforeAgentReply({ cleanedBody: params.prompt }, hookCtx);
+				if (hookResult?.handled) return {
+					payloads: buildHandledReplyPayloads(hookResult.reply),
+					meta: {
+						durationMs: Date.now() - started,
+						agentMeta: {
+							sessionId: params.sessionId,
+							provider,
+							model: modelId
+						},
+						finalAssistantVisibleText: hookResult.reply?.text ?? "NO_REPLY",
+						finalAssistantRawText: hookResult.reply?.text ?? "NO_REPLY"
+					}
+				};
+				notifyExecutionPhase("runtime_plugins", {
+					provider,
+					model: modelId
+				});
+			}
+			const hookSelection = await resolveHookModelSelection({
+				prompt: params.prompt,
+				attachments: buildBeforeModelResolveAttachments(params.images),
+				provider,
+				modelId,
+				hookRunner,
+				hookContext: hookCtx
+			});
+			provider = hookSelection.provider;
+			modelId = hookSelection.modelId;
+			const legacyBeforeAgentStartResult = hookSelection.legacyBeforeAgentStartResult;
+			startupStages.mark("hooks");
+			await ensureSelectedAgentHarnessPlugin({
+				provider,
+				modelId,
+				config: params.config,
+				agentId: params.agentId,
+				sessionKey: params.sessionKey,
+				agentHarnessRuntimeOverride: params.agentHarnessRuntimeOverride,
+				workspaceDir: resolvedWorkspace
+			});
+			const agentHarness = selectAgentHarness({
+				provider,
+				modelId,
+				config: params.config,
+				agentId: params.agentId,
+				sessionKey: params.sessionKey,
+				agentHarnessId: params.agentHarnessId,
+				agentHarnessRuntimeOverride: params.agentHarnessRuntimeOverride
+			});
+			const pluginHarnessOwnsTransport = agentHarness.id !== "pi";
+			const modelConfigProvider = provider;
+			const selectedPiRuntimeProvider = resolveSelectedOpenAIPiRuntimeProvider({
+				provider,
+				harnessRuntime: agentHarness.id,
+				agentHarnessId: agentHarness.id,
+				authProfileProvider: params.authProfileId?.split(":", 1)[0],
+				authProfileId: params.authProfileId,
+				config: params.config,
+				workspaceDir: resolvedWorkspace
+			});
+			const dynamicModelResolution = await resolveModelAsync(provider, modelId, agentDir, params.config, {
+				skipPiDiscovery: true,
+				workspaceDir: resolvedWorkspace
+			});
+			let modelResolution = dynamicModelResolution.model || pluginHarnessOwnsTransport ? dynamicModelResolution : await (async () => {
+				await ensureDaoCoreModelsJson(params.config, agentDir, { workspaceDir: resolvedWorkspace });
+				return await resolveModelAsync(provider, modelId, agentDir, params.config, { workspaceDir: resolvedWorkspace });
+			})();
+			if (selectedPiRuntimeProvider !== provider && modelResolution.model) {
+				const runtimeModelResolution = await resolveModelAsync(selectedPiRuntimeProvider, modelId, agentDir, params.config, {
+					skipPiDiscovery: true,
+					workspaceDir: resolvedWorkspace
+				});
+				if (runtimeModelResolution.model) {
+					provider = selectedPiRuntimeProvider;
+					modelResolution = runtimeModelResolution;
+				}
+			}
+			const { model, error, authStorage, modelRegistry } = modelResolution;
+			if (!model) throw new FailoverError(error ?? `Unknown model: ${provider}/${modelId}`, {
+				reason: "model_not_found",
+				provider,
+				model: modelId,
+				sessionId: params.sessionId,
+				lane: globalLane
+			});
+			let runtimeModel = model;
+			const resolvedRuntimeModel = resolveEffectiveRuntimeModel({
+				cfg: params.config,
+				provider,
+				contextConfigProvider: resolveContextConfigProviderForRuntime({
+					provider: modelConfigProvider,
+					runtimeId: agentHarness.id
+				}),
+				modelId,
+				runtimeModel
+			});
+			const ctxInfo = resolvedRuntimeModel.ctxInfo;
+			let effectiveModel = resolvedRuntimeModel.effectiveModel;
+			startupStages.mark("model-resolution");
+			notifyExecutionPhase("model_resolution", {
+				provider,
+				model: modelId
+			});
+			const pluginHarnessNeedsDaoCoreAuthBootstrap = pluginHarnessOwnsTransport && provider === "openai-codex" && effectiveModel.api === "openai-codex-responses";
+			const authStore = pluginHarnessOwnsTransport && !pluginHarnessNeedsDaoCoreAuthBootstrap ? createEmptyAuthProfileStore() : pluginHarnessNeedsDaoCoreAuthBootstrap ? ensureAuthProfileStore(agentDir, {
+				externalCliProviderIds: [OPENAI_CODEX_PROVIDER_ID],
+				allowKeychainPrompt: false
+			}) : ensureAuthProfileStoreWithoutExternalProfiles(agentDir, { allowKeychainPrompt: false });
+			const attemptAuthProfileStore = pluginHarnessOwnsTransport && !pluginHarnessNeedsDaoCoreAuthBootstrap ? ensureAuthProfileStoreWithoutExternalProfiles(agentDir, { allowKeychainPrompt: false }) : authStore;
+			const requestedProfileId = params.authProfileId?.trim();
+			const requestedProfileIsUserLocked = params.authProfileIdSource === "user";
+			const isForwardablePluginHarnessAuthProfile = (profileId) => {
+				if (!pluginHarnessOwnsTransport || !profileId) return false;
+				const credential = attemptAuthProfileStore.profiles?.[profileId];
+				return buildAgentRuntimeAuthPlan({
+					provider,
+					authProfileProvider: credential?.provider ?? profileId.split(":", 1)[0],
+					authProfileMode: credential?.type,
+					sessionAuthProfileId: profileId,
+					config: params.config,
+					workspaceDir: resolvedWorkspace,
+					harnessId: agentHarness.id,
+					harnessRuntime: agentHarness.id,
+					allowHarnessAuthProfileForwarding: true
+				}).forwardedAuthProfileId === profileId;
+			};
+			const resolvePluginHarnessProfileOrder = () => {
+				if (requestedProfileId && requestedProfileIsUserLocked) return isForwardablePluginHarnessAuthProfile(requestedProfileId) ? [requestedProfileId] : [];
+				if (!pluginHarnessOwnsTransport) return [];
+				const harnessAuthProvider = buildAgentRuntimeAuthPlan({
+					provider,
+					config: params.config,
+					workspaceDir: resolvedWorkspace,
+					harnessId: agentHarness.id,
+					harnessRuntime: agentHarness.id,
+					allowHarnessAuthProfileForwarding: true
+				}).harnessAuthProvider;
+				if (!harnessAuthProvider) return [];
+				const resolvedOrder = resolveAuthProfileOrder({
+					cfg: params.config,
+					store: attemptAuthProfileStore,
+					provider: harnessAuthProvider
+				}).filter(isForwardablePluginHarnessAuthProfile);
+				if (resolvedOrder.length > 0) return resolvedOrder;
+				if (requestedProfileId && isForwardablePluginHarnessAuthProfile(requestedProfileId)) return [requestedProfileId];
+				return [];
+			};
+			const pluginHarnessProfileOrder = pluginHarnessOwnsTransport ? resolvePluginHarnessProfileOrder() : [];
+			const resolvePluginHarnessPreferredProfileId = () => pluginHarnessProfileOrder[0];
+			const preferredProfileId = pluginHarnessOwnsTransport ? resolvePluginHarnessPreferredProfileId() : requestedProfileId;
+			let lockedProfileId = requestedProfileIsUserLocked ? preferredProfileId : void 0;
+			if (lockedProfileId) if (pluginHarnessOwnsTransport) {
+				if (!isForwardablePluginHarnessAuthProfile(lockedProfileId)) lockedProfileId = void 0;
+			} else {
+				const lockedProfile = authStore.profiles[lockedProfileId];
+				const lockedProfileProvider = lockedProfile ? resolveProviderIdForAuth(lockedProfile.provider, {
+					config: params.config,
+					workspaceDir: resolvedWorkspace
+				}) : void 0;
+				const runProvider = resolveProviderIdForAuth(provider, {
+					config: params.config,
+					workspaceDir: resolvedWorkspace
+				});
+				if (!lockedProfile || !lockedProfileProvider || lockedProfileProvider !== runProvider) lockedProfileId = void 0;
+			}
+			const forwardedPluginHarnessProfileId = pluginHarnessOwnsTransport && !lockedProfileId && isForwardablePluginHarnessAuthProfile(preferredProfileId) ? preferredProfileId : void 0;
+			if (lockedProfileId && !pluginHarnessOwnsTransport) {
+				if (!resolveAuthProfileEligibility({
+					cfg: params.config,
+					store: authStore,
+					provider,
+					profileId: lockedProfileId
+				}).eligible) throw new Error(`Auth profile "${lockedProfileId}" is not configured for ${provider}.`);
+			}
+			const profileOrder = shouldPreferExplicitConfigApiKeyAuth(params.config, provider) ? [] : [...new Set(listOpenAIAuthProfileProvidersForAgentRuntime({
+				provider,
+				harnessRuntime: agentHarness.id,
+				agentHarnessId: agentHarness.id,
+				config: params.config
+			}).flatMap((authProvider) => resolveAuthProfileOrder({
+				cfg: params.config,
+				store: authStore,
+				provider: authProvider,
+				preferredProfile: preferredProfileId
+			})))];
+			const providerPreferredProfileId = lockedProfileId ? void 0 : resolveProviderAuthProfileId({
+				provider,
+				config: params.config,
+				workspaceDir: resolvedWorkspace,
+				context: {
+					config: params.config,
+					agentDir,
+					workspaceDir: resolvedWorkspace,
+					provider,
+					modelId,
+					preferredProfileId,
+					lockedProfileId,
+					profileOrder,
+					authStore
+				}
+			});
+			const providerOrderedProfiles = providerPreferredProfileId && profileOrder.includes(providerPreferredProfileId) ? [providerPreferredProfileId, ...profileOrder.filter((profileId) => profileId !== providerPreferredProfileId)] : profileOrder;
+			const profileCandidates = pluginHarnessOwnsTransport ? lockedProfileId ? [lockedProfileId] : pluginHarnessProfileOrder.length > 0 ? pluginHarnessProfileOrder : [void 0] : lockedProfileId ? [lockedProfileId] : providerOrderedProfiles.length > 0 ? providerOrderedProfiles : [void 0];
+			const pluginHarnessForwardedProfileCandidates = pluginHarnessOwnsTransport ? profileCandidates.filter(isForwardablePluginHarnessAuthProfile) : [];
+			const profileFailureStore = pluginHarnessOwnsTransport ? attemptAuthProfileStore : authStore;
+			let profileIndex = 0;
+			const traceAttempts = [];
+			const initialThinkLevel = params.thinkLevel ?? "off";
+			let thinkLevel = initialThinkLevel;
+			const attemptedThinking = /* @__PURE__ */ new Set();
+			let apiKeyInfo = null;
+			let lastProfileId;
+			let runtimeAuthState = null;
+			let runtimeAuthRefreshCancelled = false;
+			const { advanceAuthProfile, initializeAuthProfile, maybeRefreshRuntimeAuthForAuthError, stopRuntimeAuthRefreshTimer } = createEmbeddedRunAuthController({
+				config: params.config,
+				agentDir,
+				workspaceDir: resolvedWorkspace,
+				authStore,
+				authStorage,
+				profileCandidates,
+				lockedProfileId,
+				initialThinkLevel,
+				attemptedThinking,
+				fallbackConfigured,
+				allowTransientCooldownProbe: params.allowTransientCooldownProbe === true,
+				getProvider: () => provider,
+				getModelId: () => modelId,
+				getRuntimeModel: () => runtimeModel,
+				setRuntimeModel: (next) => {
+					runtimeModel = next;
+				},
+				getEffectiveModel: () => effectiveModel,
+				setEffectiveModel: (next) => {
+					effectiveModel = next;
+				},
+				getApiKeyInfo: () => apiKeyInfo,
+				setApiKeyInfo: (next) => {
+					apiKeyInfo = next;
+				},
+				getLastProfileId: () => lastProfileId,
+				setLastProfileId: (next) => {
+					lastProfileId = next;
+				},
+				getRuntimeAuthState: () => runtimeAuthState,
+				setRuntimeAuthState: (next) => {
+					runtimeAuthState = next;
+				},
+				getRuntimeAuthRefreshCancelled: () => runtimeAuthRefreshCancelled,
+				setRuntimeAuthRefreshCancelled: (next) => {
+					runtimeAuthRefreshCancelled = next;
+				},
+				getProfileIndex: () => profileIndex,
+				setProfileIndex: (next) => {
+					profileIndex = next;
+				},
+				setThinkLevel: (next) => {
+					thinkLevel = next;
+				},
+				log: log$1
+			});
+			const advancePluginHarnessAuthProfile = async () => {
+				if (!pluginHarnessOwnsTransport || lockedProfileId) return false;
+				let nextIndex = profileIndex + 1;
+				while (nextIndex < profileCandidates.length) {
+					const candidate = profileCandidates[nextIndex];
+					if (!candidate || !isForwardablePluginHarnessAuthProfile(candidate)) {
+						nextIndex += 1;
+						continue;
+					}
+					if (isProfileInCooldown(attemptAuthProfileStore, candidate, void 0, modelId)) {
+						nextIndex += 1;
+						continue;
+					}
+					profileIndex = nextIndex;
+					lastProfileId = candidate;
+					thinkLevel = initialThinkLevel;
+					attemptedThinking.clear();
+					return true;
+				}
+				return false;
+			};
+			const advanceAttemptAuthProfile = pluginHarnessOwnsTransport && !pluginHarnessNeedsDaoCoreAuthBootstrap ? advancePluginHarnessAuthProfile : advanceAuthProfile;
+			if (!pluginHarnessOwnsTransport || pluginHarnessNeedsDaoCoreAuthBootstrap) await initializeAuthProfile();
+			else if (lockedProfileId) lastProfileId = lockedProfileId;
+			else if (forwardedPluginHarnessProfileId) lastProfileId = forwardedPluginHarnessProfileId;
+			startupStages.mark("auth");
+			notifyExecutionPhase("auth", {
+				provider,
+				model: modelId
+			});
+			const runAttemptAuthProfileStore = pluginHarnessOwnsTransport ? createScopedAuthProfileStore(attemptAuthProfileStore, pluginHarnessForwardedProfileCandidates.length > 0 ? pluginHarnessForwardedProfileCandidates : lastProfileId) : attemptAuthProfileStore;
+			const { sessionAgentId } = resolveSessionAgentIds({
+				sessionKey: params.sessionKey,
+				config: params.config,
+				agentId: params.agentId
+			});
+			const configuredExecutionContract = resolveAgentExecutionContract(params.config, sessionAgentId);
+			const strictAgenticActive = isStrictAgenticExecutionContractActive({
+				config: params.config,
+				sessionKey: params.sessionKey,
+				agentId: params.agentId,
+				provider,
+				modelId
+			});
+			const executionContract = strictAgenticActive ? "strict-agentic" : "default";
+			const configuredExecutionContractForLog = configuredExecutionContract ?? "unspecified";
+			const maxPlanningOnlyRetryAttempts = resolvePlanningOnlyRetryLimit(executionContract);
+			const maxReasoningOnlyRetryAttempts = 2;
+			const maxEmptyResponseRetryAttempts = 1;
+			const MAX_TIMEOUT_COMPACTION_ATTEMPTS = 2;
+			const MAX_OVERFLOW_COMPACTION_ATTEMPTS = 3;
+			const MAX_RUN_LOOP_ITERATIONS = resolveMaxRunRetryIterations(profileCandidates.length, params.config, sessionAgentId);
+			let overflowCompactionAttempts = 0;
+			let toolResultTruncationAttempted = false;
+			let bootstrapPromptWarningSignaturesSeen = params.bootstrapPromptWarningSignaturesSeen ?? (params.bootstrapPromptWarningSignature ? [params.bootstrapPromptWarningSignature] : []);
+			const usageAccumulator = createUsageAccumulator();
+			let lastRunPromptUsage;
+			let autoCompactionCount = 0;
+			let lastCompactionTokensAfter;
+			let runLoopIterations = 0;
+			let overloadProfileRotations = 0;
+			let planningOnlyRetryAttempts = 0;
+			let reasoningOnlyRetryAttempts = 0;
+			let emptyResponseRetryAttempts = 0;
+			let compactionContinuationRetryAttempts = 0;
+			let sameModelIdleTimeoutRetries = 0;
+			const idleTimeoutBreakerState = createIdleTimeoutBreakerState();
+			const resolvedLoopDetectionConfig = resolveToolLoopDetectionConfig({
+				cfg: params.config,
+				agentId: sessionAgentId
+			});
+			const postCompactionGuard = createPostCompactionLoopGuard(resolvedLoopDetectionConfig?.postCompactionGuard, { enabled: resolvedLoopDetectionConfig?.enabled !== false });
+			let postCompactionAbortController;
+			let postCompactionAbortError;
+			const observePostCompactionToolOutcome = (observation) => {
+				const verdict = postCompactionGuard.observe(observation);
+				if (verdict.shouldAbort) {
+					postCompactionAbortError ??= PostCompactionLoopPersistedError.fromVerdict(verdict);
+					postCompactionAbortController?.abort(postCompactionAbortError);
+				}
+			};
+			let lastRetryFailoverReason = null;
+			let planningOnlyRetryInstruction = null;
+			let reasoningOnlyRetryInstruction = null;
+			let emptyResponseRetryInstruction = null;
+			let compactionContinuationRetryInstruction = null;
+			let nextAttemptPromptOverride = null;
+			const ackExecutionFastPathInstruction = resolveAckExecutionFastPathInstruction({
+				provider,
+				modelId,
+				prompt: params.prompt
+			});
+			let rateLimitProfileRotations = 0;
+			let timeoutCompactionAttempts = 0;
+			let codexAppServerClientCloseRetries = 0;
+			const MAX_EMPTY_ERROR_RETRIES = 3;
+			let emptyErrorRetries = 0;
+			const overloadFailoverBackoffMs = resolveOverloadFailoverBackoffMs(params.config);
+			const overloadProfileRotationLimit = resolveOverloadProfileRotationLimit(params.config);
+			const rateLimitProfileRotationLimit = resolveRateLimitProfileRotationLimit(params.config);
+			let activeSessionId = params.sessionId;
+			let activeSessionFile = params.sessionFile;
+			let suppressNextUserMessagePersistence = params.suppressNextUserMessagePersistence ?? false;
+			let lastPersistedCurrentMessageId;
+			const onUserMessagePersisted = (message) => {
+				if (params.currentMessageId !== void 0) lastPersistedCurrentMessageId = params.currentMessageId;
+				params.onUserMessagePersisted?.(message);
+			};
+			const continueFromCurrentTranscript = () => {
+				nextAttemptPromptOverride = MID_TURN_PRECHECK_CONTINUATION_PROMPT;
+				suppressNextUserMessagePersistence = true;
+			};
+			const maybeEscalateRateLimitProfileFallback = (params) => {
+				rateLimitProfileRotations += 1;
+				if (rateLimitProfileRotations <= rateLimitProfileRotationLimit || !fallbackConfigured) return;
+				const status = resolveFailoverStatus("rate_limit");
+				log$1.warn(`rate-limit profile rotation cap reached for ${sanitizeForLog(provider)}/${sanitizeForLog(modelId)} after ${rateLimitProfileRotations} rotations; escalating to model fallback`);
+				params.logFallbackDecision("fallback_model", { status });
+				throw new FailoverError("The AI service is temporarily rate-limited. Please try again in a moment.", {
+					reason: "rate_limit",
+					provider: params.failoverProvider,
+					model: params.failoverModel,
+					profileId: lastProfileId,
+					sessionId: activeSessionId,
+					lane: globalLane,
+					status
+				});
+			};
+			const maybeMarkAuthProfileFailure = async (failure) => {
+				const { profileId, reason } = failure;
+				if (!profileId || !reason) return;
+				await markAuthProfileFailure({
+					store: profileFailureStore,
+					profileId,
+					reason,
+					cfg: params.config,
+					agentDir,
+					runId: params.runId,
+					modelId: failure.modelId
+				});
+			};
+			const resolveRunAuthProfileFailureReason = (failoverReason, opts) => resolveAuthProfileFailureReason({
+				failoverReason,
+				providerStarted: opts?.providerStarted,
+				policy: params.authProfileFailurePolicy
+			});
+			const maybeBackoffBeforeOverloadFailover = async (reason) => {
+				if (reason !== "overloaded" || overloadFailoverBackoffMs <= 0) return;
+				log$1.warn(`overload backoff before failover for ${provider}/${modelId}: delayMs=${overloadFailoverBackoffMs}`);
+				try {
+					await sleepWithAbort(overloadFailoverBackoffMs, params.abortSignal);
+				} catch (err) {
+					if (params.abortSignal?.aborted) {
+						const abortErr = new Error("Operation aborted", { cause: err });
+						abortErr.name = "AbortError";
+						throw abortErr;
+					}
+					throw err;
+				}
+			};
+			ensureContextEnginesInitialized();
+			const contextEngine = await resolveContextEngine(params.config, {
+				agentDir,
+				workspaceDir: resolvedWorkspace
+			});
+			const contextEnginePluginId = resolveContextEngineOwnerPluginId(contextEngine);
+			startupStages.mark("context-engine");
+			notifyExecutionPhase("context_engine", {
+				provider,
+				model: modelId
+			});
+			try {
+				const resolveActiveHookContext = () => ({
+					...hookCtx,
+					sessionId: activeSessionId
+				});
+				const adoptCompactionTranscript = (compactResult) => {
+					const nextSessionId = compactResult.result?.sessionId;
+					const nextSessionFile = compactResult.result?.sessionFile;
+					if (nextSessionId && nextSessionId !== activeSessionId) activeSessionId = nextSessionId;
+					if (nextSessionFile && nextSessionFile !== activeSessionFile) activeSessionFile = nextSessionFile;
+				};
+				const onCompactionHookMessages = async (payload) => {
+					const messages = payload.messages.filter((message) => message.trim().length > 0);
+					if (messages.length === 0) return;
+					await params.onAgentEvent?.({
+						stream: "compaction",
+						data: {
+							phase: payload.phase === "before" ? "start" : "end",
+							...payload.phase === "after" ? { completed: true } : {},
+							messages
+						},
+						...params.sessionKey ? { sessionKey: params.sessionKey } : {}
+					});
+				};
+				const runOwnsCompactionBeforeHook = async (reason) => {
+					if (contextEngine.info.ownsCompaction !== true || !hookRunner?.hasHooks("before_compaction")) return;
+					try {
+						await hookRunner.runBeforeCompaction({
+							messageCount: -1,
+							sessionFile: activeSessionFile
+						}, resolveActiveHookContext());
+					} catch (hookErr) {
+						log$1.warn(`before_compaction hook failed during ${reason}: ${String(hookErr)}`);
+					}
+				};
+				const runOwnsCompactionAfterHook = async (reason, compactResult) => {
+					if (contextEngine.info.ownsCompaction !== true || !compactResult.ok || !compactResult.compacted || !hookRunner?.hasHooks("after_compaction")) return;
+					try {
+						await hookRunner.runAfterCompaction({
+							messageCount: -1,
+							compactedCount: -1,
+							tokenCount: compactResult.result?.tokensAfter,
+							sessionFile: compactResult.result?.sessionFile ?? activeSessionFile
+						}, resolveActiveHookContext());
+					} catch (hookErr) {
+						log$1.warn(`after_compaction hook failed during ${reason}: ${String(hookErr)}`);
+					}
+				};
+				let authRetryPending = false;
+				let accumulatedReplayState = createEmbeddedRunReplayState();
+				let lastTurnTotal;
+				while (true) {
+					if (runLoopIterations >= MAX_RUN_LOOP_ITERATIONS) {
+						const message = `Exceeded retry limit after ${runLoopIterations} attempts (max=${MAX_RUN_LOOP_ITERATIONS}).`;
+						log$1.error(`[run-retry-limit] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} attempts=${runLoopIterations} maxAttempts=${MAX_RUN_LOOP_ITERATIONS}`);
+						return handleRetryLimitExhaustion({
+							message,
+							decision: resolveRunFailoverDecision({
+								stage: "retry_limit",
+								fallbackConfigured,
+								failoverReason: lastRetryFailoverReason
+							}),
+							provider,
+							model: modelId,
+							profileId: lastProfileId,
+							durationMs: Date.now() - started,
+							agentMeta: buildErrorAgentMeta({
+								sessionId: activeSessionId,
+								sessionFile: activeSessionFile,
+								provider,
+								model: model.id,
+								contextTokens: ctxInfo.tokens,
+								usageAccumulator,
+								lastRunPromptUsage,
+								lastTurnTotal
+							}),
+							replayInvalid: accumulatedReplayState.replayInvalid ? true : void 0,
+							livenessState: "blocked"
+						});
+					}
+					runLoopIterations += 1;
+					const runtimeAuthRetry = authRetryPending;
+					authRetryPending = false;
+					attemptedThinking.add(thinkLevel);
+					await fs.mkdir(resolvedWorkspace, { recursive: true });
+					if (!startupStagesEmitted) startupStages.mark(EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE.workspace);
+					const basePrompt = nextAttemptPromptOverride ?? (provider === "anthropic" ? scrubAnthropicRefusalMagic(params.prompt) : params.prompt);
+					nextAttemptPromptOverride = null;
+					const promptAdditions = [
+						ackExecutionFastPathInstruction,
+						planningOnlyRetryInstruction,
+						reasoningOnlyRetryInstruction,
+						emptyResponseRetryInstruction,
+						compactionContinuationRetryInstruction
+					].filter((value) => typeof value === "string" && value.trim().length > 0);
+					const prompt = promptAdditions.length > 0 ? `${basePrompt}\n\n${promptAdditions.join("\n\n")}` : basePrompt;
+					const resolvedStreamApiKey = resolveAttemptDispatchApiKey({
+						apiKeyInfo,
+						runtimeAuthState
+					});
+					if (!startupStagesEmitted) startupStages.mark(EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE.prompt);
+					const runtimePlan = buildAgentRuntimePlan({
+						provider,
+						modelId,
+						model: effectiveModel,
+						modelApi: effectiveModel.api,
+						harnessId: agentHarness.id,
+						harnessRuntime: agentHarness.id,
+						allowHarnessAuthProfileForwarding: pluginHarnessOwnsTransport,
+						authProfileProvider: (lastProfileId ? attemptAuthProfileStore.profiles?.[lastProfileId]?.provider : void 0) ?? lastProfileId?.split(":", 1)[0],
+						authProfileMode: lastProfileId ? attemptAuthProfileStore.profiles?.[lastProfileId]?.type : void 0,
+						sessionAuthProfileId: lastProfileId,
+						sessionAuthProfileCandidateIds: pluginHarnessOwnsTransport ? pluginHarnessForwardedProfileCandidates : void 0,
+						config: params.config,
+						workspaceDir: resolvedWorkspace,
+						agentDir,
+						agentId: workspaceResolution.agentId,
+						thinkingLevel: thinkLevel,
+						extraParamsOverride: {
+							...params.streamParams,
+							fastMode: params.fastMode
+						}
+					});
+					if (!startupStagesEmitted) {
+						startupStages.mark(EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE.runtimePlan);
+						startupStages.mark(EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE.dispatch);
+						notifyExecutionPhase("attempt_dispatch", {
+							provider,
+							model: modelId
+						});
+						emitStartupStageSummary(EMBEDDED_RUN_ATTEMPT_DISPATCH_STAGE.dispatch);
+						startupStagesEmitted = true;
+					}
+					const attemptAbortController = new AbortController();
+					postCompactionAbortController = attemptAbortController;
+					const parentAbortSignal = params.abortSignal;
+					const relayParentAbort = () => {
+						attemptAbortController.abort(parentAbortSignal?.reason);
+					};
+					if (parentAbortSignal?.aborted) relayParentAbort();
+					else parentAbortSignal?.addEventListener("abort", relayParentAbort, { once: true });
+					const rawAttempt = await runEmbeddedAttemptWithBackend({
+						sessionId: activeSessionId,
+						sessionKey: resolvedSessionKey,
+						sandboxSessionKey: params.sandboxSessionKey,
+						trigger: params.trigger,
+						memoryFlushWritePath: params.memoryFlushWritePath,
+						messageChannel: params.messageChannel,
+						messageProvider: params.messageProvider,
+						agentAccountId: params.agentAccountId,
+						messageTo: params.messageTo,
+						messageThreadId: params.messageThreadId,
+						groupId: params.groupId,
+						groupChannel: params.groupChannel,
+						groupSpace: params.groupSpace,
+						memberRoleIds: params.memberRoleIds,
+						spawnedBy: params.spawnedBy,
+						isCanonicalWorkspace,
+						senderId: params.senderId,
+						senderName: params.senderName,
+						senderUsername: params.senderUsername,
+						senderE164: params.senderE164,
+						currentChannelId: params.currentChannelId,
+						currentThreadTs: params.currentThreadTs,
+						currentMessageId: params.currentMessageId,
+						replyToMode: params.replyToMode,
+						hasRepliedRef: params.hasRepliedRef,
+						sessionFile: activeSessionFile,
+						workspaceDir: resolvedWorkspace,
+						agentDir,
+						config: params.config,
+						allowGatewaySubagentBinding: params.allowGatewaySubagentBinding,
+						contextEngine,
+						contextTokenBudget: ctxInfo.tokens,
+						contextWindowInfo: ctxInfo,
+						skillsSnapshot: params.skillsSnapshot,
+						prompt,
+						transcriptPrompt: params.transcriptPrompt,
+						currentInboundEventKind: params.currentInboundEventKind,
+						currentInboundContext: params.currentInboundContext,
+						images: params.images,
+						imageOrder: params.imageOrder,
+						clientTools: params.clientTools,
+						disableTools: params.disableTools,
+						provider,
+						modelId,
+						agentHarnessId: agentHarness.id,
+						...params.sessionKey ? { agentHarnessTaskRuntimeScope: createAgentHarnessTaskRuntimeScope({ requesterSessionKey: params.sessionKey }) } : {},
+						runtimePlan,
+						model: applyAuthHeaderOverride(applyLocalNoAuthHeaderOverride(effectiveModel, apiKeyInfo), runtimeAuthState ? null : apiKeyInfo, params.config),
+						resolvedApiKey: resolvedStreamApiKey,
+						authProfileId: lastProfileId,
+						authProfileIdSource: lockedProfileId ? "user" : "auto",
+						initialReplayState: accumulatedReplayState,
+						authStorage,
+						authProfileStore: runAttemptAuthProfileStore,
+						toolAuthProfileStore: agentHarness.id === "codex" ? attemptAuthProfileStore : void 0,
+						modelRegistry,
+						agentId: workspaceResolution.agentId,
+						legacyBeforeAgentStartResult,
+						thinkLevel,
+						onToolOutcome: observePostCompactionToolOutcome,
+						onRunProgress: notifyRunProgress,
+						fastMode: params.fastMode,
+						verboseLevel: params.verboseLevel,
+						reasoningLevel: params.reasoningLevel,
+						toolResultFormat: resolvedToolResultFormat,
+						toolProgressDetail: params.toolProgressDetail,
+						execOverrides: params.execOverrides,
+						bashElevated: params.bashElevated,
+						timeoutMs: params.timeoutMs,
+						runTimeoutOverrideMs: params.runTimeoutOverrideMs,
+						runId: params.runId,
+						abortSignal: attemptAbortController.signal,
+						replyOperation: params.replyOperation,
+						shouldEmitToolResult: params.shouldEmitToolResult,
+						shouldEmitToolOutput: params.shouldEmitToolOutput,
+						onPartialReply: params.onPartialReply,
+						onAssistantMessageStart: params.onAssistantMessageStart,
+						onBlockReply: params.onBlockReply,
+						onBlockReplyFlush: params.onBlockReplyFlush,
+						blockReplyBreak: params.blockReplyBreak,
+						blockReplyChunking: params.blockReplyChunking,
+						onReasoningStream: params.onReasoningStream,
+						onReasoningEnd: params.onReasoningEnd,
+						onToolResult: params.onToolResult,
+						onAgentEvent: params.onAgentEvent,
+						onExecutionPhase: params.onExecutionPhase,
+						extraSystemPrompt: params.extraSystemPrompt,
+						sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+						inputProvenance: params.inputProvenance,
+						streamParams: params.streamParams,
+						modelRun: params.modelRun,
+						promptMode: params.promptMode,
+						ownerNumbers: params.ownerNumbers,
+						enforceFinalTag: params.enforceFinalTag,
+						silentExpected: params.silentExpected,
+						bootstrapContextMode: params.bootstrapContextMode,
+						bootstrapContextRunKind: params.bootstrapContextRunKind,
+						jobId: params.jobId,
+						toolsAllow: params.toolsAllow,
+						disableMessageTool: params.disableMessageTool,
+						forceMessageTool: params.forceMessageTool,
+						enableHeartbeatTool: params.enableHeartbeatTool,
+						forceHeartbeatTool: params.forceHeartbeatTool,
+						requireExplicitMessageTarget: params.requireExplicitMessageTarget,
+						internalEvents: params.internalEvents,
+						bootstrapPromptWarningSignaturesSeen,
+						bootstrapPromptWarningSignature: bootstrapPromptWarningSignaturesSeen[bootstrapPromptWarningSignaturesSeen.length - 1],
+						suppressNextUserMessagePersistence,
+						suppressTranscriptOnlyAssistantPersistence: params.suppressTranscriptOnlyAssistantPersistence,
+						suppressAssistantErrorPersistence: params.suppressAssistantErrorPersistence,
+						onUserMessagePersisted,
+						onAssistantErrorMessagePersisted: params.onAssistantErrorMessagePersisted
+					}).catch((err) => {
+						throw postCompactionAbortError ?? err;
+					}).finally(() => {
+						parentAbortSignal?.removeEventListener?.("abort", relayParentAbort);
+						if (postCompactionAbortController === attemptAbortController) postCompactionAbortController = void 0;
+					});
+					if (postCompactionAbortError) throw postCompactionAbortError;
+					const attempt = normalizeEmbeddedRunAttemptResult(rawAttempt);
+					const { aborted, externalAbort, promptError, promptErrorSource, preflightRecovery, timedOut, idleTimedOut, timedOutDuringCompaction, sessionIdUsed, sessionFileUsed, lastAssistant: sessionLastAssistant, currentAttemptAssistant } = attempt;
+					const timedOutDuringToolExecution = attempt.timedOutDuringToolExecution ?? false;
+					if (sessionIdUsed && sessionIdUsed !== activeSessionId) activeSessionId = sessionIdUsed;
+					if (sessionFileUsed && sessionFileUsed !== activeSessionFile) activeSessionFile = sessionFileUsed;
+					bootstrapPromptWarningSignaturesSeen = attempt.bootstrapPromptWarningSignaturesSeen ?? (attempt.bootstrapPromptWarningSignature ? Array.from(new Set([...bootstrapPromptWarningSignaturesSeen, attempt.bootstrapPromptWarningSignature])) : bootstrapPromptWarningSignaturesSeen);
+					const lastAssistantUsage = normalizeUsage(sessionLastAssistant?.usage);
+					const attemptUsage = attempt.attemptUsage ?? lastAssistantUsage;
+					mergeUsageIntoAccumulator(usageAccumulator, attemptUsage);
+					lastRunPromptUsage = lastAssistantUsage ?? attemptUsage;
+					lastTurnTotal = lastAssistantUsage?.total ?? attemptUsage?.total;
+					const breakerStep = stepIdleTimeoutBreaker(idleTimeoutBreakerState, {
+						idleTimedOut,
+						completedModelProgress: hasCompletedModelProgressForIdleBreaker(attempt),
+						outputTokens: attemptUsage?.output
+					});
+					if (breakerStep.tripped) {
+						const breakerMessage = `Idle-timeout cost-runaway breaker tripped: ${breakerStep.consecutive} consecutive idle timeouts without completed model progress (cap=5). Halting further attempts to bound paid model calls. See issue #76293.`;
+						log$1.error(`[idle-timeout-circuit-breaker-tripped] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} consecutive=${breakerStep.consecutive} cap=5`);
+						return handleRetryLimitExhaustion({
+							message: breakerMessage,
+							decision: resolveRunFailoverDecision({
+								stage: "retry_limit",
+								fallbackConfigured,
+								failoverReason: lastRetryFailoverReason
+							}),
+							provider,
+							model: modelId,
+							profileId: lastProfileId,
+							durationMs: Date.now() - started,
+							agentMeta: buildErrorAgentMeta({
+								sessionId: activeSessionId,
+								sessionFile: activeSessionFile,
+								provider,
+								model: model.id,
+								contextTokens: ctxInfo.tokens,
+								usageAccumulator,
+								lastRunPromptUsage,
+								lastTurnTotal
+							}),
+							replayInvalid: accumulatedReplayState.replayInvalid ? true : void 0,
+							livenessState: "blocked"
+						});
+					}
+					const attemptCompactionCount = Math.max(0, attempt.compactionCount ?? 0);
+					autoCompactionCount += attemptCompactionCount;
+					if (typeof attempt.compactionTokensAfter === "number" && Number.isFinite(attempt.compactionTokensAfter) && attempt.compactionTokensAfter >= 0) lastCompactionTokensAfter = Math.floor(attempt.compactionTokensAfter);
+					const activeErrorContext = resolveActiveErrorContext({
+						provider,
+						model: modelId,
+						assistant: currentAttemptAssistant ?? sessionLastAssistant
+					});
+					const resolveReplayInvalidForAttempt = (incompleteTurnText) => accumulatedReplayState.replayInvalid || resolveReplayInvalidFlag({
+						attempt,
+						incompleteTurnText
+					});
+					if (resolveReplayInvalidForAttempt(null)) accumulatedReplayState.replayInvalid = true;
+					accumulatedReplayState = observeReplayMetadata(accumulatedReplayState, attempt.replayMetadata);
+					const formattedAssistantErrorText = sessionLastAssistant ? formatAssistantErrorText(sessionLastAssistant, {
+						cfg: params.config,
+						sessionKey: resolvedSessionKey ?? params.sessionId,
+						provider: activeErrorContext.provider,
+						model: activeErrorContext.model
+					}) : void 0;
+					const assistantErrorText = sessionLastAssistant?.stopReason === "error" ? sessionLastAssistant.errorMessage?.trim() || formattedAssistantErrorText : void 0;
+					const canRestartForLiveSwitch = !hasOutboundDeliveryEvidence(attempt) && !attempt.didSendDeterministicApprovalPrompt && !attempt.lastToolError && (attempt.toolMetas?.length ?? 0) === 0 && (attempt.assistantTexts?.length ?? 0) === 0;
+					if (preflightRecovery?.handled) {
+						const retryingFromTranscript = preflightRecovery.source === "mid-turn";
+						log$1.info(`[context-overflow-precheck] early recovery route=${preflightRecovery.route} completed for ${provider}/${modelId}; ` + (retryingFromTranscript ? "retrying from current transcript" : "retrying prompt"));
+						if (retryingFromTranscript) continueFromCurrentTranscript();
+						continue;
+					}
+					const requestedSelection = shouldSwitchToLiveModel({
+						cfg: params.config,
+						sessionKey: resolvedSessionKey,
+						agentId: params.agentId,
+						defaultProvider: DEFAULT_PROVIDER,
+						defaultModel: DEFAULT_MODEL,
+						currentProvider: provider,
+						currentModel: modelId,
+						currentAuthProfileId: preferredProfileId,
+						currentAuthProfileIdSource: params.authProfileIdSource
+					});
+					if (requestedSelection && canRestartForLiveSwitch) {
+						await clearLiveModelSwitchPending({
+							cfg: params.config,
+							sessionKey: resolvedSessionKey,
+							agentId: params.agentId
+						});
+						log$1.info(`live session model switch requested during active attempt for ${params.sessionId}: ${provider}/${modelId} -> ${requestedSelection.provider}/${requestedSelection.model}`);
+						throw new LiveSessionModelSwitchError(requestedSelection);
+					}
+					if (timedOut && !timedOutDuringCompaction && !timedOutDuringToolExecution) {
+						const lastTurnPromptTokens = derivePromptTokens(lastRunPromptUsage);
+						const tokenUsedRatio = lastTurnPromptTokens != null && ctxInfo.tokens > 0 ? lastTurnPromptTokens / ctxInfo.tokens : 0;
+						if (timeoutCompactionAttempts >= MAX_TIMEOUT_COMPACTION_ATTEMPTS) log$1.warn(`[timeout-compaction] already attempted timeout compaction ${timeoutCompactionAttempts} time(s); falling through to failover rotation`);
+						else if (tokenUsedRatio > .65) {
+							const timeoutDiagId = createCompactionDiagId();
+							timeoutCompactionAttempts++;
+							log$1.warn(`[timeout-compaction] LLM timed out with high prompt token usage (${Math.round(tokenUsedRatio * 100)}%); attempting compaction before retry (attempt ${timeoutCompactionAttempts}/${MAX_TIMEOUT_COMPACTION_ATTEMPTS}) diagId=${timeoutDiagId}`);
+							let timeoutCompactResult;
+							await runOwnsCompactionBeforeHook("timeout recovery");
+							try {
+								const timeoutCompactionRuntimeContext = {
+									...buildEmbeddedCompactionRuntimeContext({
+										sessionKey: params.sessionKey,
+										messageChannel: params.messageChannel,
+										messageProvider: params.messageProvider,
+										agentAccountId: params.agentAccountId,
+										currentChannelId: params.currentChannelId,
+										currentThreadTs: params.currentThreadTs,
+										currentMessageId: params.currentMessageId,
+										authProfileId: lastProfileId,
+										workspaceDir: resolvedWorkspace,
+										agentDir,
+										config: params.config,
+										skillsSnapshot: params.skillsSnapshot,
+										senderId: params.senderId,
+										provider,
+										modelId,
+										modelFallbacksOverride: params.modelFallbacksOverride,
+										thinkLevel,
+										reasoningLevel: params.reasoningLevel,
+										bashElevated: params.bashElevated,
+										extraSystemPrompt: params.extraSystemPrompt,
+										sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+										ownerNumbers: params.ownerNumbers,
+										activeProcessSessions: listActiveProcessSessionReferences({ scopeKey: resolveProcessToolScopeKey({
+											sessionKey: params.sandboxSessionKey?.trim() || params.sessionKey,
+											sessionId: activeSessionId,
+											agentId: sessionAgentId
+										}) })
+									}),
+									...resolveContextEngineCapabilities({
+										config: params.config,
+										sessionKey: params.sessionKey,
+										agentId: sessionAgentId,
+										contextEnginePluginId,
+										purpose: "context-engine.timeout-compaction"
+									}),
+									onCompactionHookMessages,
+									...attempt.promptCache ? { promptCache: attempt.promptCache } : {},
+									runId: params.runId,
+									trigger: "timeout_recovery",
+									diagId: timeoutDiagId,
+									attempt: timeoutCompactionAttempts,
+									maxAttempts: MAX_TIMEOUT_COMPACTION_ATTEMPTS
+								};
+								timeoutCompactResult = await compactContextEngineWithSafetyTimeout(contextEngine, {
+									sessionId: activeSessionId,
+									sessionKey: params.sessionKey,
+									sessionFile: activeSessionFile,
+									tokenBudget: ctxInfo.tokens,
+									force: true,
+									compactionTarget: "budget",
+									runtimeContext: timeoutCompactionRuntimeContext
+								}, resolveCompactionTimeoutMs(params.config), params.abortSignal);
+							} catch (compactErr) {
+								log$1.warn(`[timeout-compaction] contextEngine.compact() threw during timeout recovery for ${provider}/${modelId}: ${String(compactErr)}`);
+								timeoutCompactResult = {
+									ok: false,
+									compacted: false,
+									reason: String(compactErr)
+								};
+							}
+							if (timeoutCompactResult.compacted) adoptCompactionTranscript(timeoutCompactResult);
+							await runOwnsCompactionAfterHook("timeout recovery", timeoutCompactResult);
+							if (timeoutCompactResult.compacted) {
+								autoCompactionCount += 1;
+								if (typeof timeoutCompactResult.result?.tokensAfter === "number" && Number.isFinite(timeoutCompactResult.result.tokensAfter) && timeoutCompactResult.result.tokensAfter >= 0) lastCompactionTokensAfter = Math.floor(timeoutCompactResult.result.tokensAfter);
+								if (contextEngine.info.ownsCompaction === true) await runPostCompactionSideEffects({
+									config: params.config,
+									sessionKey: params.sessionKey,
+									sessionFile: activeSessionFile
+								});
+								log$1.info(`[timeout-compaction] compaction succeeded for ${provider}/${modelId}; retrying prompt`);
+								postCompactionGuard.armPostCompaction();
+								continue;
+							} else log$1.warn(`[timeout-compaction] compaction did not reduce context for ${provider}/${modelId}; falling through to normal handling`);
+						}
+					}
+					const contextOverflowError = !aborted ? (() => {
+						if (promptError) {
+							const errorText = formatErrorMessage(promptError);
+							if (isLikelyContextOverflowError(errorText)) return {
+								text: errorText,
+								source: "promptError"
+							};
+							return null;
+						}
+						if (assistantErrorText && isLikelyContextOverflowError(assistantErrorText)) return {
+							text: assistantErrorText,
+							source: "assistantError"
+						};
+						return null;
+					})() : null;
+					if (contextOverflowError) {
+						const overflowDiagId = createCompactionDiagId();
+						const errorText = contextOverflowError.text;
+						const msgCount = attempt.messagesSnapshot?.length ?? 0;
+						const observedOverflowTokens = extractObservedOverflowTokenCount(errorText);
+						log$1.warn(`[context-overflow-diag] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} source=${contextOverflowError.source} messages=${msgCount} sessionFile=${activeSessionFile} diagId=${overflowDiagId} compactionAttempts=${overflowCompactionAttempts} observedTokens=${observedOverflowTokens ?? "unknown"} error=${errorText.slice(0, 200)}`);
+						const isCompactionFailure = isCompactionFailureError(errorText);
+						const hadAttemptLevelCompaction = attemptCompactionCount > 0;
+						if (!isCompactionFailure && hadAttemptLevelCompaction && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
+							overflowCompactionAttempts++;
+							log$1.warn(`context overflow persisted after in-attempt compaction (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); retrying prompt without additional compaction for ${provider}/${modelId}`);
+							if (preflightRecovery?.source === "mid-turn") continueFromCurrentTranscript();
+							continue;
+						}
+						if (!isCompactionFailure && !hadAttemptLevelCompaction && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
+							if (log$1.isEnabled("debug")) log$1.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=compact isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts + 1} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+							overflowCompactionAttempts++;
+							log$1.warn(`context overflow detected (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); attempting auto-compaction for ${provider}/${modelId}`);
+							let compactResult;
+							await runOwnsCompactionBeforeHook("overflow recovery");
+							try {
+								const overflowCompactionRuntimeContext = {
+									...buildEmbeddedCompactionRuntimeContext({
+										sessionKey: params.sessionKey,
+										messageChannel: params.messageChannel,
+										messageProvider: params.messageProvider,
+										agentAccountId: params.agentAccountId,
+										currentChannelId: params.currentChannelId,
+										currentThreadTs: params.currentThreadTs,
+										currentMessageId: params.currentMessageId,
+										authProfileId: lastProfileId,
+										workspaceDir: resolvedWorkspace,
+										agentDir,
+										config: params.config,
+										skillsSnapshot: params.skillsSnapshot,
+										senderId: params.senderId,
+										provider,
+										modelId,
+										thinkLevel,
+										reasoningLevel: params.reasoningLevel,
+										bashElevated: params.bashElevated,
+										extraSystemPrompt: params.extraSystemPrompt,
+										sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+										ownerNumbers: params.ownerNumbers,
+										activeProcessSessions: listActiveProcessSessionReferences({ scopeKey: resolveProcessToolScopeKey({
+											sessionKey: params.sandboxSessionKey?.trim() || params.sessionKey,
+											sessionId: activeSessionId,
+											agentId: sessionAgentId
+										}) })
+									}),
+									...resolveContextEngineCapabilities({
+										config: params.config,
+										sessionKey: params.sessionKey,
+										agentId: sessionAgentId,
+										contextEnginePluginId,
+										purpose: "context-engine.overflow-compaction"
+									}),
+									onCompactionHookMessages,
+									...attempt.promptCache ? { promptCache: attempt.promptCache } : {},
+									runId: params.runId,
+									trigger: "overflow",
+									...observedOverflowTokens !== void 0 ? { currentTokenCount: observedOverflowTokens } : {},
+									diagId: overflowDiagId,
+									attempt: overflowCompactionAttempts,
+									maxAttempts: MAX_OVERFLOW_COMPACTION_ATTEMPTS
+								};
+								compactResult = await compactContextEngineWithSafetyTimeout(contextEngine, {
+									sessionId: activeSessionId,
+									sessionKey: params.sessionKey,
+									sessionFile: activeSessionFile,
+									tokenBudget: ctxInfo.tokens,
+									...observedOverflowTokens !== void 0 ? { currentTokenCount: observedOverflowTokens } : {},
+									force: true,
+									compactionTarget: "budget",
+									runtimeContext: overflowCompactionRuntimeContext
+								}, resolveCompactionTimeoutMs(params.config), params.abortSignal);
+								if (compactResult.ok && compactResult.compacted) {
+									adoptCompactionTranscript(compactResult);
+									await runContextEngineMaintenance({
+										contextEngine,
+										sessionId: activeSessionId,
+										sessionKey: params.sessionKey,
+										sessionFile: activeSessionFile,
+										reason: "compaction",
+										runtimeContext: overflowCompactionRuntimeContext,
+										config: params.config,
+										agentId: sessionAgentId
+									});
+								}
+							} catch (compactErr) {
+								log$1.warn(`contextEngine.compact() threw during overflow recovery for ${provider}/${modelId}: ${String(compactErr)}`);
+								compactResult = {
+									ok: false,
+									compacted: false,
+									reason: String(compactErr)
+								};
+							}
+							await runOwnsCompactionAfterHook("overflow recovery", compactResult);
+							if (compactResult.compacted) {
+								adoptCompactionTranscript(compactResult);
+								if (typeof compactResult.result?.tokensAfter === "number" && Number.isFinite(compactResult.result.tokensAfter) && compactResult.result.tokensAfter >= 0) lastCompactionTokensAfter = Math.floor(compactResult.result.tokensAfter);
+								if (preflightRecovery?.route === "compact_then_truncate") {
+									const truncResult = await truncateOversizedToolResultsInSession({
+										sessionFile: activeSessionFile,
+										contextWindowTokens: ctxInfo.tokens,
+										maxCharsOverride: resolveLiveToolResultMaxChars({
+											contextWindowTokens: ctxInfo.tokens,
+											cfg: params.config,
+											agentId: sessionAgentId
+										}),
+										sessionId: activeSessionId,
+										sessionKey: params.sessionKey,
+										config: params.config
+									});
+									if (truncResult.truncated) log$1.info(`[context-overflow-precheck] post-compaction tool-result truncation succeeded for ${provider}/${modelId}; truncated ${truncResult.truncatedCount} tool result(s)`);
+									else log$1.warn(`[context-overflow-precheck] post-compaction tool-result truncation did not help for ${provider}/${modelId}: ${truncResult.reason ?? "unknown"}`);
+								}
+								autoCompactionCount += 1;
+								log$1.info(`auto-compaction succeeded for ${provider}/${modelId}; retrying prompt`);
+								postCompactionGuard.armPostCompaction();
+								if (preflightRecovery?.source === "mid-turn") continueFromCurrentTranscript();
+								else if (params.currentMessageId !== void 0 && params.currentMessageId === lastPersistedCurrentMessageId) {
+									nextAttemptPromptOverride = MID_TURN_PRECHECK_CONTINUATION_PROMPT;
+									suppressNextUserMessagePersistence = true;
+								}
+								continue;
+							}
+							log$1.warn(`auto-compaction failed for ${provider}/${modelId}: ${compactResult.reason ?? "nothing to compact"}`);
+						}
+						if (!toolResultTruncationAttempted) {
+							const contextWindowTokens = ctxInfo.tokens;
+							const toolResultMaxChars = resolveLiveToolResultMaxChars({
+								contextWindowTokens,
+								cfg: params.config,
+								agentId: sessionAgentId
+							});
+							if (attempt.messagesSnapshot ? sessionLikelyHasOversizedToolResults({
+								messages: attempt.messagesSnapshot,
+								contextWindowTokens,
+								maxCharsOverride: toolResultMaxChars
+							}) : false) {
+								toolResultTruncationAttempted = true;
+								log$1.warn(`[context-overflow-recovery] Attempting tool result truncation for ${provider}/${modelId} (contextWindow=${contextWindowTokens} tokens)`);
+								const truncResult = await truncateOversizedToolResultsInSession({
+									sessionFile: activeSessionFile,
+									contextWindowTokens,
+									maxCharsOverride: toolResultMaxChars,
+									sessionId: activeSessionId,
+									sessionKey: params.sessionKey,
+									config: params.config
+								});
+								if (truncResult.truncated) {
+									log$1.info(`[context-overflow-recovery] Truncated ${truncResult.truncatedCount} tool result(s); retrying prompt`);
+									if (preflightRecovery?.source === "mid-turn") continueFromCurrentTranscript();
+									continue;
+								}
+								log$1.warn(`[context-overflow-recovery] Tool result truncation did not help: ${truncResult.reason ?? "unknown"}`);
+							}
+						}
+						if ((isCompactionFailure || overflowCompactionAttempts >= MAX_OVERFLOW_COMPACTION_ATTEMPTS) && log$1.isEnabled("debug")) log$1.debug(`[compaction-diag] decision diagId=${overflowDiagId} branch=give_up isCompactionFailure=${isCompactionFailure} hasOversizedToolResults=unknown attempt=${overflowCompactionAttempts} maxAttempts=${MAX_OVERFLOW_COMPACTION_ATTEMPTS}`);
+						const kind = isCompactionFailure ? "compaction_failure" : "context_overflow";
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid: resolveReplayInvalidForAttempt(),
+							livenessState: "blocked"
+						});
+						return {
+							payloads: [{
+								text: "Context overflow: prompt too large for the model. Try /reset (or /new) to start a fresh session, or use a larger-context model.",
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta: buildErrorAgentMeta({
+									sessionId: sessionIdUsed,
+									sessionFile: activeSessionFile,
+									provider,
+									model: model.id,
+									contextTokens: ctxInfo.tokens,
+									usageAccumulator,
+									lastRunPromptUsage,
+									lastAssistant: sessionLastAssistant,
+									lastTurnTotal
+								}),
+								systemPromptReport: attempt.systemPromptReport,
+								finalPromptText: attempt.finalPromptText,
+								replayInvalid: resolveReplayInvalidForAttempt(),
+								livenessState: "blocked",
+								error: {
+									kind,
+									message: errorText
+								}
+							}
+						};
+					}
+					if (promptErrorSource === "hook:before_agent_run" && !aborted) {
+						const errorText = formatErrorMessage(promptError);
+						const replayInvalid = resolveReplayInvalidForAttempt();
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid,
+							livenessState: "blocked"
+						});
+						return {
+							payloads: [{
+								text: errorText,
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta: buildErrorAgentMeta({
+									sessionId: sessionIdUsed,
+									sessionFile: activeSessionFile,
+									provider,
+									model: model.id,
+									contextTokens: ctxInfo.tokens,
+									usageAccumulator,
+									lastRunPromptUsage,
+									lastAssistant: sessionLastAssistant,
+									lastTurnTotal
+								}),
+								systemPromptReport: attempt.systemPromptReport,
+								finalAssistantVisibleText: errorText,
+								finalAssistantRawText: errorText,
+								finalPromptText: void 0,
+								replayInvalid,
+								livenessState: "blocked",
+								error: {
+									kind: "hook_block",
+									message: errorText
+								}
+							}
+						};
+					}
+					if (promptError && !aborted && promptErrorSource !== "compaction") {
+						if (resolveCodexAppServerClientCloseRetry({
+							attempt,
+							alreadyRetried: codexAppServerClientCloseRetries > 0
+						}).retry) {
+							codexAppServerClientCloseRetries += 1;
+							suppressNextUserMessagePersistence = true;
+							log$1.warn(`codex app-server stdio client closed before turn completion; retrying once runId=${params.runId} sessionId=${params.sessionId}`);
+							continue;
+						}
+						if (attempt.codexAppServerFailure) throw promptError;
+					}
+					if (promptError && !aborted && promptErrorSource !== "compaction") {
+						const normalizedPromptFailover = coerceToFailoverError(promptError, {
+							provider: activeErrorContext.provider,
+							model: activeErrorContext.model,
+							profileId: lastProfileId,
+							sessionId: sessionIdUsed,
+							lane: globalLane
+						});
+						const promptErrorDetails = normalizedPromptFailover ? describeFailoverError(normalizedPromptFailover) : describeFailoverError(promptError);
+						if (normalizedPromptFailover?.suspend) suspendSession({
+							cfg: params.config,
+							agentDir,
+							sessionId: activeSessionId ?? params.sessionId,
+							laneId: globalLane,
+							reason: resolveSessionSuspensionReason(normalizedPromptFailover.reason),
+							failedProvider: normalizedPromptFailover.provider ?? provider,
+							failedModel: normalizedPromptFailover.model ?? modelId
+						});
+						const errorText = promptErrorDetails.message || formatErrorMessage(promptError);
+						if (await maybeRefreshRuntimeAuthForAuthError(errorText, runtimeAuthRetry)) {
+							authRetryPending = true;
+							continue;
+						}
+						if (/incorrect role information|roles must alternate/i.test(errorText)) {
+							attempt.setTerminalLifecycleMeta?.({
+								replayInvalid: resolveReplayInvalidForAttempt(),
+								livenessState: "blocked"
+							});
+							return {
+								payloads: [{
+									text: "Message ordering conflict - please try again. If this persists, use /new to start a fresh session.",
+									isError: true
+								}],
+								meta: {
+									durationMs: Date.now() - started,
+									agentMeta: buildErrorAgentMeta({
+										sessionId: sessionIdUsed,
+										sessionFile: activeSessionFile,
+										provider,
+										model: model.id,
+										contextTokens: ctxInfo.tokens,
+										usageAccumulator,
+										lastRunPromptUsage,
+										lastAssistant: sessionLastAssistant,
+										lastTurnTotal
+									}),
+									systemPromptReport: attempt.systemPromptReport,
+									finalPromptText: attempt.finalPromptText,
+									replayInvalid: resolveReplayInvalidForAttempt(),
+									livenessState: "blocked",
+									error: {
+										kind: "role_ordering",
+										message: errorText
+									}
+								}
+							};
+						}
+						const imageSizeError = parseImageSizeError(errorText);
+						if (imageSizeError) {
+							const maxMb = imageSizeError.maxMb;
+							const maxMbLabel = typeof maxMb === "number" && Number.isFinite(maxMb) ? `${maxMb}` : null;
+							const maxBytesHint = maxMbLabel ? ` (max ${maxMbLabel}MB)` : "";
+							attempt.setTerminalLifecycleMeta?.({
+								replayInvalid: resolveReplayInvalidForAttempt(),
+								livenessState: "blocked"
+							});
+							return {
+								payloads: [{
+									text: `Image too large for the model${maxBytesHint}. Please compress or resize the image and try again.`,
+									isError: true
+								}],
+								meta: {
+									durationMs: Date.now() - started,
+									agentMeta: buildErrorAgentMeta({
+										sessionId: sessionIdUsed,
+										sessionFile: activeSessionFile,
+										provider,
+										model: model.id,
+										contextTokens: ctxInfo.tokens,
+										usageAccumulator,
+										lastRunPromptUsage,
+										lastAssistant: sessionLastAssistant,
+										lastTurnTotal
+									}),
+									systemPromptReport: attempt.systemPromptReport,
+									finalPromptText: attempt.finalPromptText,
+									replayInvalid: resolveReplayInvalidForAttempt(),
+									livenessState: "blocked",
+									error: {
+										kind: "image_size",
+										message: errorText
+									}
+								}
+							};
+						}
+						const promptFailoverReason = promptErrorDetails.reason ?? classifyFailoverReason(errorText, { provider });
+						const promptProfileFailureReason = resolveRunAuthProfileFailureReason(promptFailoverReason, { providerStarted: promptErrorSource === "prompt" });
+						const promptFailoverFailure = promptFailoverReason !== null || isFailoverErrorMessage(errorText, { provider });
+						const failedPromptProfileId = lastProfileId;
+						const logPromptFailoverDecision = createFailoverDecisionLogger({
+							stage: "prompt",
+							runId: params.runId,
+							rawError: errorText,
+							failoverReason: promptFailoverReason,
+							profileFailureReason: promptProfileFailureReason,
+							provider,
+							model: modelId,
+							sourceProvider: provider,
+							sourceModel: modelId,
+							profileId: failedPromptProfileId,
+							fallbackConfigured,
+							aborted
+						});
+						if (promptFailoverReason === "rate_limit") maybeEscalateRateLimitProfileFallback({
+							failoverProvider: provider,
+							failoverModel: modelId,
+							logFallbackDecision: logPromptFailoverDecision
+						});
+						let promptFailoverDecision = resolveRunFailoverDecision({
+							stage: "prompt",
+							aborted,
+							externalAbort,
+							fallbackConfigured,
+							failoverFailure: promptFailoverFailure,
+							failoverReason: promptFailoverReason,
+							profileRotated: false
+						});
+						if (promptFailoverDecision.action === "rotate_profile" && await advanceAttemptAuthProfile()) {
+							if (failedPromptProfileId && promptProfileFailureReason) maybeMarkAuthProfileFailure({
+								profileId: failedPromptProfileId,
+								reason: promptProfileFailureReason,
+								modelId
+							}).catch((err) => {
+								log$1.warn(`prompt profile failure mark failed: ${String(err)}`);
+							});
+							traceAttempts.push({
+								provider,
+								model: modelId,
+								result: promptFailoverReason === "timeout" ? "timeout" : "rotate_profile",
+								...promptFailoverReason ? { reason: promptFailoverReason } : {},
+								stage: "prompt"
+							});
+							lastRetryFailoverReason = mergeRetryFailoverReason({
+								previous: lastRetryFailoverReason,
+								failoverReason: promptFailoverReason
+							});
+							logPromptFailoverDecision("rotate_profile");
+							await maybeBackoffBeforeOverloadFailover(promptFailoverReason);
+							continue;
+						}
+						if (promptFailoverDecision.action === "rotate_profile") promptFailoverDecision = resolveRunFailoverDecision({
+							stage: "prompt",
+							aborted,
+							externalAbort,
+							fallbackConfigured,
+							failoverFailure: promptFailoverFailure,
+							failoverReason: promptFailoverReason,
+							profileRotated: true
+						});
+						if (failedPromptProfileId && promptProfileFailureReason) try {
+							await maybeMarkAuthProfileFailure({
+								profileId: failedPromptProfileId,
+								reason: promptProfileFailureReason,
+								modelId
+							});
+						} catch (err) {
+							log$1.warn(`prompt profile failure mark failed: ${String(err)}`);
+						}
+						const fallbackThinking = pickFallbackThinkingLevel({
+							message: errorText,
+							attempted: attemptedThinking
+						});
+						if (fallbackThinking) {
+							log$1.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
+							thinkLevel = fallbackThinking;
+							continue;
+						}
+						if (promptFailoverDecision.action === "fallback_model") {
+							const fallbackReason = promptFailoverDecision.reason ?? "unknown";
+							const status = resolveFailoverStatus(fallbackReason);
+							traceAttempts.push({
+								provider,
+								model: modelId,
+								result: promptFailoverReason === "timeout" ? "timeout" : "fallback_model",
+								reason: fallbackReason,
+								stage: "prompt",
+								...typeof status === "number" ? { status } : {}
+							});
+							logPromptFailoverDecision("fallback_model", { status });
+							await maybeBackoffBeforeOverloadFailover(promptFailoverReason);
+							throw normalizedPromptFailover ?? new FailoverError(errorText, {
+								reason: fallbackReason,
+								provider,
+								model: modelId,
+								profileId: lastProfileId,
+								sessionId: sessionIdUsed,
+								lane: globalLane,
+								status
+							});
+						}
+						if (promptFailoverDecision.action === "surface_error") {
+							traceAttempts.push({
+								provider,
+								model: modelId,
+								result: promptFailoverReason === "timeout" ? "timeout" : "surface_error",
+								...promptFailoverReason ? { reason: promptFailoverReason } : {},
+								stage: "prompt"
+							});
+							logPromptFailoverDecision("surface_error");
+						}
+						throw promptError;
+					}
+					const assistantForFailover = currentAttemptAssistant ?? sessionLastAssistant;
+					const fallbackThinking = pickFallbackThinkingLevel({
+						message: assistantForFailover?.errorMessage,
+						attempted: attemptedThinking
+					});
+					if (fallbackThinking && !aborted) {
+						log$1.warn(`unsupported thinking level for ${provider}/${modelId}; retrying with ${fallbackThinking}`);
+						thinkLevel = fallbackThinking;
+						continue;
+					}
+					const authFailure = isAuthAssistantError(assistantForFailover);
+					const rateLimitFailure = isRateLimitAssistantError(assistantForFailover);
+					const billingFailure = isBillingAssistantError(assistantForFailover);
+					const failoverFailure = isFailoverAssistantError(assistantForFailover);
+					const assistantFailoverReason = classifyFailoverReason(assistantForFailover?.errorMessage ?? "", { provider: assistantForFailover?.provider });
+					const assistantProviderStarted = Boolean(currentAttemptAssistant?.provider) || idleTimedOut || timedOut && !timedOutDuringCompaction && !timedOutDuringToolExecution;
+					const assistantProfileFailureReason = resolveRunAuthProfileFailureReason(assistantFailoverReason ?? (assistantProviderStarted && (timedOut || idleTimedOut) ? "timeout" : null), { providerStarted: assistantProviderStarted });
+					const cloudCodeAssistFormatError = attempt.cloudCodeAssistFormatError;
+					const imageDimensionError = parseImageDimensionError(assistantForFailover?.errorMessage ?? "");
+					const failedAssistantProfileId = lastProfileId;
+					const logAssistantFailoverDecision = createFailoverDecisionLogger({
+						stage: "assistant",
+						runId: params.runId,
+						rawError: assistantForFailover?.errorMessage?.trim(),
+						failoverReason: assistantFailoverReason,
+						profileFailureReason: assistantProfileFailureReason,
+						provider: activeErrorContext.provider,
+						model: activeErrorContext.model,
+						sourceProvider: assistantForFailover?.provider ?? provider,
+						sourceModel: assistantForFailover?.model ?? modelId,
+						profileId: failedAssistantProfileId,
+						fallbackConfigured,
+						timedOut,
+						aborted
+					});
+					if (authFailure && await maybeRefreshRuntimeAuthForAuthError(assistantForFailover?.errorMessage ?? "", runtimeAuthRetry)) {
+						authRetryPending = true;
+						continue;
+					}
+					if (imageDimensionError && lastProfileId) {
+						const details = [
+							imageDimensionError.messageIndex !== void 0 ? `message=${imageDimensionError.messageIndex}` : null,
+							imageDimensionError.contentIndex !== void 0 ? `content=${imageDimensionError.contentIndex}` : null,
+							imageDimensionError.maxDimensionPx !== void 0 ? `limit=${imageDimensionError.maxDimensionPx}px` : null
+						].filter(Boolean).join(" ");
+						log$1.warn(`Profile ${lastProfileId} rejected image payload${details ? ` (${details})` : ""}.`);
+					}
+					const assistantFailoverDecision = resolveRunFailoverDecision({
+						stage: "assistant",
+						allowFormatRetry: cloudCodeAssistFormatError,
+						aborted,
+						externalAbort,
+						fallbackConfigured,
+						failoverFailure,
+						failoverReason: assistantFailoverReason,
+						timedOut,
+						idleTimedOut,
+						timedOutDuringCompaction,
+						timedOutDuringToolExecution,
+						profileRotated: false
+					});
+					const assistantFailoverOutcome = await handleAssistantFailover({
+						initialDecision: assistantFailoverDecision,
+						aborted,
+						externalAbort,
+						fallbackConfigured,
+						failoverFailure,
+						failoverReason: assistantFailoverReason,
+						timedOut,
+						idleTimedOut,
+						timedOutDuringCompaction,
+						timedOutDuringToolExecution,
+						allowSameModelIdleTimeoutRetry: timedOut && idleTimedOut && !timedOutDuringCompaction && !fallbackConfigured && canRestartForLiveSwitch && sameModelIdleTimeoutRetries < MAX_SAME_MODEL_IDLE_TIMEOUT_RETRIES,
+						assistantProfileFailureReason,
+						lastProfileId,
+						modelId,
+						provider,
+						activeErrorContext,
+						lastAssistant: assistantForFailover,
+						config: params.config,
+						sessionKey: params.sessionKey ?? params.sessionId,
+						authFailure,
+						rateLimitFailure,
+						billingFailure,
+						cloudCodeAssistFormatError,
+						isProbeSession,
+						overloadProfileRotations,
+						overloadProfileRotationLimit,
+						previousRetryFailoverReason: lastRetryFailoverReason,
+						logAssistantFailoverDecision,
+						warn: (message) => log$1.warn(message),
+						maybeMarkAuthProfileFailure,
+						maybeEscalateRateLimitProfileFallback,
+						maybeBackoffBeforeOverloadFailover,
+						advanceAuthProfile: advanceAttemptAuthProfile
+					});
+					overloadProfileRotations = assistantFailoverOutcome.overloadProfileRotations;
+					if (assistantFailoverOutcome.action === "retry") {
+						traceAttempts.push({
+							provider: activeErrorContext.provider,
+							model: activeErrorContext.model,
+							result: assistantFailoverOutcome.retryKind === "same_model_idle_timeout" || assistantFailoverReason === "timeout" ? "timeout" : "rotate_profile",
+							...assistantFailoverReason ? { reason: assistantFailoverReason } : {},
+							stage: "assistant"
+						});
+						if (assistantFailoverOutcome.retryKind === "same_model_idle_timeout") sameModelIdleTimeoutRetries += 1;
+						lastRetryFailoverReason = assistantFailoverOutcome.lastRetryFailoverReason;
+						continue;
+					}
+					if (assistantFailoverOutcome.action === "throw") {
+						traceAttempts.push({
+							provider: activeErrorContext.provider,
+							model: activeErrorContext.model,
+							result: assistantFailoverReason === "timeout" ? "timeout" : assistantFailoverDecision.action === "fallback_model" ? "fallback_model" : "error",
+							...assistantFailoverReason ? { reason: assistantFailoverReason } : {},
+							stage: "assistant",
+							...typeof assistantFailoverOutcome.error.status === "number" ? { status: assistantFailoverOutcome.error.status } : {}
+						});
+						if (assistantFailoverOutcome.error.suspend) suspendSession({
+							cfg: params.config,
+							agentDir,
+							sessionId: activeSessionId ?? params.sessionId,
+							laneId: globalLane,
+							reason: resolveSessionSuspensionReason(assistantFailoverOutcome.error.reason),
+							failedProvider: assistantFailoverOutcome.error.provider ?? provider,
+							failedModel: assistantFailoverOutcome.error.model ?? modelId
+						});
+						throw assistantFailoverOutcome.error;
+					}
+					const usageMeta = buildUsageAgentMetaFields({
+						usageAccumulator,
+						lastAssistantUsage: sessionLastAssistant?.usage,
+						lastRunPromptUsage,
+						lastTurnTotal
+					});
+					const reportedModelRef = resolveReportedModelRef({
+						provider,
+						model: model.id,
+						assistant: sessionLastAssistant
+					});
+					const agentMeta = {
+						sessionId: sessionIdUsed,
+						sessionFile: sessionFileUsed,
+						provider: reportedModelRef.provider,
+						model: reportedModelRef.model,
+						contextTokens: ctxInfo.tokens,
+						agentHarnessId: attempt.agentHarnessId,
+						usage: usageMeta.usage,
+						lastCallUsage: usageMeta.lastCallUsage,
+						promptTokens: usageMeta.promptTokens,
+						compactionCount: autoCompactionCount > 0 ? autoCompactionCount : void 0,
+						compactionTokensAfter: lastCompactionTokensAfter
+					};
+					const finalAssistantVisibleText = resolveFinalAssistantVisibleText(sessionLastAssistant);
+					const finalAssistantRawText = resolveFinalAssistantRawText(sessionLastAssistant);
+					const payloads = buildEmbeddedRunPayloads({
+						assistantTexts: attempt.assistantTexts,
+						toolMetas: attempt.toolMetas,
+						lastAssistant: attempt.lastAssistant,
+						currentAssistant: currentAttemptAssistant ?? null,
+						lastToolError: attempt.lastToolError,
+						config: params.config,
+						isCronTrigger: params.trigger === "cron",
+						sessionKey: params.sessionKey ?? params.sessionId,
+						provider: activeErrorContext.provider,
+						model: activeErrorContext.model,
+						verboseLevel: params.verboseLevel,
+						reasoningLevel: params.reasoningLevel,
+						thinkingLevel: params.thinkLevel,
+						toolResultFormat: resolvedToolResultFormat,
+						suppressToolErrorWarnings: params.suppressToolErrorWarnings,
+						inlineToolResultsAllowed: false,
+						didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+						messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+						sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
+						agentId: params.agentId,
+						runId: params.runId,
+						runAborted: aborted,
+						didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+						heartbeatToolResponse: attempt.heartbeatToolResponse
+					});
+					const payloadsWithToolMedia = mergeAttemptToolMediaPayloads({
+						payloads,
+						toolMediaUrls: attempt.toolMediaUrls,
+						toolAudioAsVoice: attempt.toolAudioAsVoice,
+						toolTrustedLocalMedia: attempt.toolTrustedLocalMedia,
+						sourceReplyDeliveryMode: params.sourceReplyDeliveryMode
+					});
+					const timedOutDuringPrompt = timedOut && !timedOutDuringCompaction && !timedOutDuringToolExecution;
+					const finalAssistantStopReason = (sessionLastAssistant?.stopReason ?? "").trim().toLowerCase();
+					const recoveredFinalAssistantTextAfterPromptTimeout = timedOutDuringPrompt && [
+						"completed",
+						"end_turn",
+						"stop"
+					].includes(finalAssistantStopReason) ? (finalAssistantVisibleText ?? finalAssistantRawText)?.trim() : void 0;
+					const payloadAlreadyContainsRecoveredFinalAssistant = recoveredFinalAssistantTextAfterPromptTimeout ? (payloadsWithToolMedia ?? []).some((payload) => payload?.isError !== true && payload?.isReasoning !== true && typeof payload.text === "string" && payload.text.trim() === recoveredFinalAssistantTextAfterPromptTimeout) : false;
+					const recoveredFinalAssistantPayloadsAfterPromptTimeout = recoveredFinalAssistantTextAfterPromptTimeout && !payloadAlreadyContainsRecoveredFinalAssistant ? [{ text: recoveredFinalAssistantTextAfterPromptTimeout }] : void 0;
+					const hasSuccessfulFinalAssistantAfterPromptTimeout = timedOutDuringPrompt && Boolean(payloadAlreadyContainsRecoveredFinalAssistant || recoveredFinalAssistantPayloadsAfterPromptTimeout?.length);
+					const hasPartialAssistantTextAfterPromptTimeout = timedOutDuringPrompt && (attempt.assistantTexts ?? []).some((text) => text.trim().length > 0) && !attempt.clientToolCalls && !attempt.yieldDetected && !attempt.didSendViaMessagingTool && !attempt.didSendDeterministicApprovalPrompt && !attempt.lastToolError && (attempt.toolMetas?.length ?? 0) === 0;
+					const attemptToolSummary = buildTraceToolSummary({
+						toolMetas: attempt.toolMetas,
+						hadFailure: Boolean(attempt.lastToolError)
+					});
+					const failureSignal = resolveEmbeddedRunFailureSignal({
+						trigger: params.trigger,
+						lastToolError: attempt.lastToolError
+					});
+					if (timedOutDuringPrompt && !hasSuccessfulFinalAssistantAfterPromptTimeout && !hasMessagingToolDeliveryEvidence(attempt)) {
+						const defaultTimeoutText = idleTimedOut ? "The model did not produce a response before the model idle timeout. Please try again, or increase `models.providers.<id>.timeoutSeconds` for slow local or self-hosted providers. If `agents.defaults.timeoutSeconds` or a run-specific timeout is lower, raise that ceiling too; provider timeouts cannot extend the whole agent run." : "Request timed out before a response was generated. Please try again, or increase `agents.defaults.timeoutSeconds` in your config.";
+						const timeoutText = attempt.promptTimeoutOutcome?.message?.trim() || defaultTimeoutText;
+						const replayInvalid = attempt.promptTimeoutOutcome?.replayInvalid ?? resolveReplayInvalidForAttempt(null);
+						const livenessState = attempt.promptTimeoutOutcome?.livenessState ?? resolveRunLivenessState({
+							payloadCount: hasPartialAssistantTextAfterPromptTimeout ? 0 : payloads.length,
+							aborted,
+							timedOut,
+							attempt,
+							incompleteTurnText: null
+						});
+						const timeoutPhase = attempt.promptTimeoutOutcome?.timeoutPhase ?? "provider";
+						const providerStarted = attempt.promptTimeoutOutcome?.providerStarted ?? true;
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid,
+							livenessState,
+							timeoutPhase,
+							providerStarted
+						});
+						return {
+							payloads: [...hasPartialAssistantTextAfterPromptTimeout ? [] : payloadsWithToolMedia || [], {
+								text: timeoutText,
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta,
+								aborted,
+								systemPromptReport: attempt.systemPromptReport,
+								finalPromptText: attempt.finalPromptText,
+								finalAssistantVisibleText,
+								finalAssistantRawText,
+								replayInvalid,
+								livenessState,
+								timeoutPhase,
+								providerStarted,
+								toolSummary: attemptToolSummary,
+								...failureSignal ? { failureSignal } : {},
+								agentHarnessResultClassification: attempt.agentHarnessResultClassification
+							},
+							didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+							didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+							messagingToolSentTexts: attempt.messagingToolSentTexts,
+							messagingToolSentMediaUrls: attempt.messagingToolSentMediaUrls,
+							messagingToolSentTargets: attempt.messagingToolSentTargets,
+							messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+							heartbeatToolResponse: attempt.heartbeatToolResponse,
+							successfulCronAdds: attempt.successfulCronAdds,
+							acceptedSessionSpawns: attempt.acceptedSessionSpawns
+						};
+					}
+					const silentToolResultReplyPayload = resolveSilentToolResultReplyPayload({
+						isCronTrigger: params.trigger === "cron",
+						payloadCount: payloadsWithToolMedia?.length ?? 0,
+						aborted,
+						timedOut,
+						attempt
+					});
+					const payloadsForTerminalPath = recoveredFinalAssistantPayloadsAfterPromptTimeout ? recoveredFinalAssistantPayloadsAfterPromptTimeout : payloadsWithToolMedia?.length ? payloadsWithToolMedia : silentToolResultReplyPayload ? [silentToolResultReplyPayload] : payloadsWithToolMedia;
+					const payloadCount = payloadsForTerminalPath?.length ?? 0;
+					const emptyAssistantReplyIsSilent = shouldTreatEmptyAssistantReplyAsSilent({
+						allowEmptyAssistantReplyAsSilent: params.allowEmptyAssistantReplyAsSilent,
+						payloadCount,
+						aborted,
+						timedOut,
+						attempt
+					});
+					const nextPlanningOnlyRetryInstruction = emptyAssistantReplyIsSilent ? null : resolvePlanningOnlyRetryInstruction({
+						provider,
+						modelId,
+						executionContract,
+						prompt: params.prompt,
+						aborted,
+						timedOut,
+						attempt
+					});
+					const nextReasoningOnlyRetryInstruction = emptyAssistantReplyIsSilent ? null : resolveReasoningOnlyRetryInstruction({
+						provider: activeErrorContext.provider,
+						modelId: activeErrorContext.model,
+						modelApi: effectiveModel.api,
+						executionContract,
+						aborted,
+						timedOut,
+						attempt
+					});
+					const nextEmptyResponseRetryInstruction = emptyAssistantReplyIsSilent ? null : resolveEmptyResponseRetryInstruction({
+						provider: activeErrorContext.provider,
+						modelId: activeErrorContext.model,
+						modelApi: effectiveModel.api,
+						executionContract,
+						payloadCount,
+						aborted,
+						timedOut,
+						attempt
+					});
+					if (nextPlanningOnlyRetryInstruction && planningOnlyRetryAttempts < maxPlanningOnlyRetryAttempts) {
+						const planDetails = extractPlanningOnlyPlanDetails((attempt.assistantTexts ?? []).join("\n\n").trim());
+						if (planDetails) {
+							emitAgentPlanEvent({
+								runId: params.runId,
+								...params.sessionKey ? { sessionKey: params.sessionKey } : {},
+								data: {
+									phase: "update",
+									title: "Assistant proposed a plan",
+									explanation: planDetails.explanation,
+									steps: planDetails.steps,
+									source: "planning_only_retry"
+								}
+							});
+							params.onAgentEvent?.({
+								stream: "plan",
+								data: {
+									phase: "update",
+									title: "Assistant proposed a plan",
+									explanation: planDetails.explanation,
+									steps: planDetails.steps,
+									source: "planning_only_retry"
+								}
+							});
+						}
+						planningOnlyRetryAttempts += 1;
+						planningOnlyRetryInstruction = nextPlanningOnlyRetryInstruction;
+						const planningOnlyRetryLogPrefix = executionContract === "strict-agentic" ? "strict-agentic execution contract triggered" : "planning-only turn detected";
+						log$1.warn(`${planningOnlyRetryLogPrefix}: runId=${params.runId} sessionId=${params.sessionId} provider=${provider}/${modelId} harness=${sanitizeForLog(agentHarness.id)} contract=${executionContract} configured=${configuredExecutionContractForLog} — retrying ${planningOnlyRetryAttempts}/${maxPlanningOnlyRetryAttempts} with act-now steer`);
+						continue;
+					}
+					if (!nextPlanningOnlyRetryInstruction && nextReasoningOnlyRetryInstruction && reasoningOnlyRetryAttempts < maxReasoningOnlyRetryAttempts) {
+						reasoningOnlyRetryAttempts += 1;
+						reasoningOnlyRetryInstruction = nextReasoningOnlyRetryInstruction;
+						log$1.warn(`reasoning-only assistant turn detected: runId=${params.runId} sessionId=${params.sessionId} provider=${activeErrorContext.provider}/${activeErrorContext.model} — retrying ${reasoningOnlyRetryAttempts}/${maxReasoningOnlyRetryAttempts} with visible-answer continuation`);
+						continue;
+					}
+					const reasoningOnlyRetriesExhausted = !nextPlanningOnlyRetryInstruction && nextReasoningOnlyRetryInstruction && reasoningOnlyRetryAttempts >= maxReasoningOnlyRetryAttempts;
+					if (!nextPlanningOnlyRetryInstruction && !nextReasoningOnlyRetryInstruction && nextEmptyResponseRetryInstruction && emptyResponseRetryAttempts < maxEmptyResponseRetryAttempts) {
+						emptyResponseRetryAttempts += 1;
+						emptyResponseRetryInstruction = nextEmptyResponseRetryInstruction;
+						log$1.warn(`empty response detected: runId=${params.runId} sessionId=${params.sessionId} provider=${activeErrorContext.provider}/${activeErrorContext.model} — retrying ${emptyResponseRetryAttempts}/${maxEmptyResponseRetryAttempts} with visible-answer continuation`);
+						continue;
+					}
+					const incompleteTurnText = emptyAssistantReplyIsSilent ? null : resolveIncompleteTurnPayloadText({
+						payloadCount,
+						aborted,
+						timedOut,
+						attempt
+					});
+					if (!emptyAssistantReplyIsSilent && attemptCompactionCount > 0 && payloadCount === 0 && !aborted && !promptError && !timedOut && !attempt.clientToolCalls && !attempt.yieldDetected && !attempt.didSendDeterministicApprovalPrompt && !attempt.lastToolError && !resolveAttemptReplayMetadata(attempt).hadPotentialSideEffects && compactionContinuationRetryAttempts < 1) {
+						compactionContinuationRetryAttempts += 1;
+						compactionContinuationRetryInstruction = COMPACTION_CONTINUATION_RETRY_INSTRUCTION;
+						log$1.warn(`compaction interrupted visible final answer: runId=${params.runId} sessionId=${params.sessionId} compactions=${attemptCompactionCount} — retrying ${compactionContinuationRetryAttempts}/1 with compacted-transcript continuation`);
+						postCompactionGuard.armPostCompaction();
+						continue;
+					}
+					compactionContinuationRetryInstruction = null;
+					if (reasoningOnlyRetriesExhausted && !finalAssistantVisibleText) log$1.warn(`reasoning-only retries exhausted: runId=${params.runId} sessionId=${params.sessionId} provider=${activeErrorContext.provider}/${activeErrorContext.model} attempts=${reasoningOnlyRetryAttempts}/${maxReasoningOnlyRetryAttempts} — surfacing incomplete-turn error`);
+					if (!incompleteTurnText && nextPlanningOnlyRetryInstruction && strictAgenticActive) {
+						log$1.warn(`strict-agentic run exhausted planning-only retries: runId=${params.runId} sessionId=${params.sessionId} provider=${provider}/${modelId} configured=${configuredExecutionContractForLog} — surfacing blocked state`);
+						const replayInvalid = resolveReplayInvalidForAttempt(null);
+						const livenessState = "blocked";
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid,
+							livenessState
+						});
+						return {
+							payloads: [{
+								text: STRICT_AGENTIC_BLOCKED_TEXT,
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta,
+								aborted,
+								systemPromptReport: attempt.systemPromptReport,
+								finalPromptText: attempt.finalPromptText,
+								finalAssistantVisibleText,
+								finalAssistantRawText,
+								replayInvalid,
+								livenessState,
+								toolSummary: attemptToolSummary,
+								...failureSignal ? { failureSignal } : {},
+								agentHarnessResultClassification: attempt.agentHarnessResultClassification
+							},
+							didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+							didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+							messagingToolSentTexts: attempt.messagingToolSentTexts,
+							messagingToolSentMediaUrls: attempt.messagingToolSentMediaUrls,
+							messagingToolSentTargets: attempt.messagingToolSentTargets,
+							messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+							heartbeatToolResponse: attempt.heartbeatToolResponse,
+							successfulCronAdds: attempt.successfulCronAdds,
+							acceptedSessionSpawns: attempt.acceptedSessionSpawns
+						};
+					}
+					if (reasoningOnlyRetriesExhausted && !finalAssistantVisibleText) {
+						const replayInvalid = resolveReplayInvalidForAttempt("⚠️ Agent couldn't generate a response. Please try again.");
+						const livenessState = resolveRunLivenessState({
+							payloadCount: 0,
+							aborted,
+							timedOut,
+							attempt,
+							incompleteTurnText: "⚠️ Agent couldn't generate a response. Please try again."
+						});
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid,
+							livenessState
+						});
+						if (lastProfileId) await maybeMarkAuthProfileFailure({
+							profileId: lastProfileId,
+							reason: assistantProfileFailureReason
+						});
+						return {
+							payloads: [{
+								text: "⚠️ Agent couldn't generate a response. Please try again.",
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta,
+								aborted,
+								systemPromptReport: attempt.systemPromptReport,
+								finalPromptText: attempt.finalPromptText,
+								finalAssistantVisibleText,
+								finalAssistantRawText,
+								replayInvalid,
+								livenessState,
+								toolSummary: attemptToolSummary,
+								...failureSignal ? { failureSignal } : {},
+								agentHarnessResultClassification: attempt.agentHarnessResultClassification
+							},
+							didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+							didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+							messagingToolSentTexts: attempt.messagingToolSentTexts,
+							messagingToolSentMediaUrls: attempt.messagingToolSentMediaUrls,
+							messagingToolSentTargets: attempt.messagingToolSentTargets,
+							messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+							heartbeatToolResponse: attempt.heartbeatToolResponse,
+							successfulCronAdds: attempt.successfulCronAdds,
+							acceptedSessionSpawns: attempt.acceptedSessionSpawns
+						};
+					}
+					if (!nextPlanningOnlyRetryInstruction && !nextReasoningOnlyRetryInstruction && nextEmptyResponseRetryInstruction && emptyResponseRetryAttempts >= maxEmptyResponseRetryAttempts) log$1.warn(`empty response retries exhausted: runId=${params.runId} sessionId=${params.sessionId} provider=${activeErrorContext.provider}/${activeErrorContext.model} attempts=${emptyResponseRetryAttempts}/${maxEmptyResponseRetryAttempts} — surfacing incomplete-turn error`);
+					const silentErrorContent = sessionLastAssistant?.content;
+					if (incompleteTurnText && !aborted && !promptError && !timedOut && sessionLastAssistant?.stopReason === "error" && ((sessionLastAssistant?.usage)?.output ?? 0) === 0 && (silentErrorContent?.length ?? 0) === 0 && (attempt.replayMetadata ? !attempt.replayMetadata.hadPotentialSideEffects : false) && emptyErrorRetries < MAX_EMPTY_ERROR_RETRIES) {
+						emptyErrorRetries += 1;
+						log$1.warn(`[empty-error-retry] stopReason=error output=0; resubmitting attempt=${emptyErrorRetries}/${MAX_EMPTY_ERROR_RETRIES} provider=${sessionLastAssistant?.provider ?? provider} model=${sessionLastAssistant?.model ?? model.id} sessionKey=${params.sessionKey ?? params.sessionId}`);
+						continue;
+					}
+					if (incompleteTurnText) {
+						const replayInvalid = resolveReplayInvalidForAttempt(incompleteTurnText);
+						const livenessState = resolveRunLivenessState({
+							payloadCount,
+							aborted,
+							timedOut,
+							attempt,
+							incompleteTurnText
+						});
+						attempt.setTerminalLifecycleMeta?.({
+							replayInvalid,
+							livenessState
+						});
+						const incompleteStopReason = attempt.lastAssistant?.stopReason;
+						log$1.warn(`incomplete turn detected: runId=${params.runId} sessionId=${params.sessionId} stopReason=${incompleteStopReason} payloads=${payloadCount} — surfacing error to user`);
+						if (lastProfileId) await maybeMarkAuthProfileFailure({
+							profileId: lastProfileId,
+							reason: assistantProfileFailureReason
+						});
+						return {
+							payloads: [{
+								text: incompleteTurnText,
+								isError: true
+							}],
+							meta: {
+								durationMs: Date.now() - started,
+								agentMeta,
+								aborted,
+								systemPromptReport: attempt.systemPromptReport,
+								finalPromptText: attempt.finalPromptText,
+								finalAssistantVisibleText,
+								finalAssistantRawText,
+								replayInvalid,
+								livenessState,
+								toolSummary: attemptToolSummary,
+								...failureSignal ? { failureSignal } : {},
+								agentHarnessResultClassification: attempt.agentHarnessResultClassification
+							},
+							didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+							didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+							messagingToolSentTexts: attempt.messagingToolSentTexts,
+							messagingToolSentMediaUrls: attempt.messagingToolSentMediaUrls,
+							messagingToolSentTargets: attempt.messagingToolSentTargets,
+							messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+							heartbeatToolResponse: attempt.heartbeatToolResponse,
+							successfulCronAdds: attempt.successfulCronAdds,
+							acceptedSessionSpawns: attempt.acceptedSessionSpawns
+						};
+					}
+					log$1.debug(`embedded run done: runId=${params.runId} sessionId=${params.sessionId} durationMs=${Date.now() - started} aborted=${aborted}`);
+					if (lastProfileId) await markAuthProfileSuccess({
+						store: profileFailureStore,
+						provider: resolveAuthProfileStateProvider(profileFailureStore, lastProfileId, provider),
+						profileId: lastProfileId,
+						agentDir: params.agentDir
+					});
+					const replayInvalid = resolveReplayInvalidForAttempt(null);
+					const livenessState = attempt.yieldDetected ? "paused" : resolveRunLivenessState({
+						payloadCount,
+						aborted,
+						timedOut,
+						attempt,
+						incompleteTurnText: null
+					});
+					const stopReason = attempt.clientToolCalls ? "tool_calls" : attempt.yieldDetected ? "end_turn" : sessionLastAssistant?.stopReason;
+					const terminalPayloads = emptyAssistantReplyIsSilent ? [{ text: SILENT_REPLY_TOKEN }] : payloadsForTerminalPath;
+					attempt.setTerminalLifecycleMeta?.({
+						replayInvalid,
+						livenessState,
+						stopReason,
+						yielded: attempt.yieldDetected === true
+					});
+					return {
+						payloads: terminalPayloads?.length ? terminalPayloads : void 0,
+						...attempt.diagnosticTrace ? { diagnosticTrace: freezeDiagnosticTraceContext(attempt.diagnosticTrace) } : {},
+						meta: {
+							durationMs: Date.now() - started,
+							agentMeta,
+							aborted,
+							systemPromptReport: attempt.systemPromptReport,
+							finalPromptText: attempt.finalPromptText,
+							finalAssistantVisibleText,
+							finalAssistantRawText,
+							replayInvalid,
+							livenessState,
+							agentHarnessResultClassification: attempt.agentHarnessResultClassification,
+							...attempt.yieldDetected ? { yielded: true } : {},
+							...emptyAssistantReplyIsSilent ? { terminalReplyKind: "silent-empty" } : {},
+							stopReason,
+							pendingToolCalls: attempt.clientToolCalls?.map((call) => ({
+								id: randomBytes(5).toString("hex").slice(0, 9),
+								name: call.name,
+								arguments: JSON.stringify(call.params)
+							})),
+							executionTrace: {
+								winnerProvider: reportedModelRef.provider,
+								winnerModel: reportedModelRef.model,
+								attempts: traceAttempts.length > 0 || sessionLastAssistant?.provider || sessionLastAssistant?.model ? [...traceAttempts, {
+									provider: reportedModelRef.provider,
+									model: reportedModelRef.model,
+									result: "success",
+									stage: "assistant"
+								}] : void 0,
+								fallbackUsed: traceAttempts.length > 0,
+								runner: "embedded"
+							},
+							requestShaping: {
+								...lastProfileId ? { authMode: "auth-profile" } : {},
+								...thinkLevel ? { thinking: thinkLevel } : {},
+								...params.reasoningLevel ? { reasoning: params.reasoningLevel } : {},
+								...params.verboseLevel ? { verbose: params.verboseLevel } : {},
+								...params.blockReplyBreak ? { blockStreaming: params.blockReplyBreak } : {}
+							},
+							toolSummary: attemptToolSummary,
+							...failureSignal ? { failureSignal } : {},
+							completion: {
+								...stopReason ? { stopReason } : {},
+								...stopReason ? { finishReason: stopReason } : {},
+								...stopReason?.toLowerCase().includes("refusal") ? { refusal: true } : {}
+							},
+							contextManagement: autoCompactionCount > 0 ? { lastTurnCompactions: autoCompactionCount } : void 0
+						},
+						didSendViaMessagingTool: attempt.didSendViaMessagingTool,
+						didSendDeterministicApprovalPrompt: attempt.didSendDeterministicApprovalPrompt,
+						messagingToolSentTexts: attempt.messagingToolSentTexts,
+						messagingToolSentMediaUrls: attempt.messagingToolSentMediaUrls,
+						messagingToolSentTargets: attempt.messagingToolSentTargets,
+						messagingToolSourceReplyPayloads: attempt.messagingToolSourceReplyPayloads,
+						heartbeatToolResponse: attempt.heartbeatToolResponse,
+						successfulCronAdds: attempt.successfulCronAdds,
+						acceptedSessionSpawns: attempt.acceptedSessionSpawns
+					};
+				}
+			} finally {
+				forgetPromptBuildDrainCacheForRun(params.runId);
+				stopRuntimeAuthRefreshTimer();
+				await runAgentCleanupStep({
+					runId: params.runId,
+					sessionId: params.sessionId,
+					step: "context-engine-dispose",
+					log: log$1,
+					cleanup: async () => {
+						await contextEngine.dispose?.();
+					}
+				});
+				if (params.cleanupBundleMcpOnRunEnd === true) await runAgentCleanupStep({
+					runId: params.runId,
+					sessionId: params.sessionId,
+					step: "bundle-mcp-retire",
+					log: log$1,
+					cleanup: async () => {
+						const onError = (error, sessionId) => {
+							log$1.warn(`bundle-mcp cleanup failed after run for ${sessionId}: ${formatErrorMessage(error)}`);
+						};
+						if (!await retireSessionMcpRuntimeForSessionKey({
+							sessionKey: params.sessionKey,
+							reason: "embedded-run-end",
+							onError
+						})) await retireSessionMcpRuntime({
+							sessionId: params.sessionId,
+							reason: "embedded-run-end",
+							onError
+						});
+					}
+				});
+			}
+		});
+	});
+}
+function resolveAuthProfileStateProvider(store, profileId, fallbackProvider) {
+	const profileProvider = store.profiles?.[profileId]?.provider?.trim();
+	if (profileProvider) return profileProvider;
+	return profileId.split(":", 1)[0]?.trim() || fallbackProvider;
+}
+//#endregion
+export { compactEmbeddedPiSession as n, runEmbeddedPiAgent as t };