@livx.cc/agentx 0.99.27 → 0.99.30

package/dist/index.js

@@ -8,6 +8,274 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/logging.ts
+import { log } from "libx.js/src/modules/log";
+var forComponent;
+var init_logging = __esm({
+  "src/logging.ts"() {
+    "use strict";
+    forComponent = (name) => log.forComponent(name);
+  }
+});
+
+// src/llm.ts
+import { readFileSync, statSync, realpathSync } from "fs";
+import { resolve, sep } from "path";
+import { randomBytes } from "crypto";
+function contentText(content) {
+  if (content == null) return "";
+  if (typeof content === "string") return content;
+  return content.map((p) => p.type === "text" ? p.text ?? "" : "[image]").join(p_sep(content));
+}
+function imagePart(url) {
+  return { type: "image_url", image_url: { url } };
+}
+function messageHasInlineImage(content) {
+  if (content == null || typeof content === "string") return false;
+  return content.some((p) => p.type === "image_url" && (p.image_url?.url ?? "").startsWith("data:"));
+}
+function contentBytes(content) {
+  if (content == null) return 0;
+  if (typeof content === "string") return content.length;
+  let n = 0;
+  for (const p of content) {
+    if (p.type === "text") {
+      n += (p.text ?? "").length;
+      continue;
+    }
+    const url = p.image_url?.url ?? "";
+    const ref = parseImageRef(url);
+    n += (ref ? ref.bytes : url.length) || 7;
+  }
+  return n;
+}
+function elideInlineImages(content, stub = IMAGE_ELIDE_STUB) {
+  return elideImageParts(content, (url) => url.startsWith("data:"), stub);
+}
+function elideImages(content, stub = IMAGE_ELIDE_STUB) {
+  return elideImageParts(content, (url) => url.startsWith("data:") || isImageRefUrl(url), stub);
+}
+function elideImageParts(content, hit, stub) {
+  if (typeof content === "string") return content;
+  let changed = false;
+  const out = [];
+  for (const p of content) {
+    if (p.type !== "image_url" || !hit(p.image_url?.url ?? "")) {
+      out.push(p);
+      continue;
+    }
+    changed = true;
+    out.push({ type: "text", text: stub });
+  }
+  return changed ? out : content;
+}
+function mintImageRef(path, mime) {
+  const token = randomBytes(16).toString("hex");
+  let bytes = 0;
+  try {
+    bytes = Math.ceil(statSync(path).size * 4 / 3);
+  } catch (e) {
+    log2.warn(`image ref stat failed, weighing as 0: ${path}`, e);
+  }
+  refRegistry.set(token, { mime, path, bytes });
+  while (refRegistry.size > REF_REGISTRY_MAX) refRegistry.delete(refRegistry.keys().next().value);
+  return `${IMAGE_REF_SCHEME}${mime};${token};${path}`;
+}
+function clearImageRefs() {
+  refRegistry.clear();
+}
+function imageRefPart(path, mime) {
+  return { type: "image_url", image_url: { url: mintImageRef(path, mime) } };
+}
+function parseImageRef(url) {
+  const parts = refUrlParts(url);
+  const ref = parts && refRegistry.get(parts.token);
+  if (!ref) {
+    log2.debug("image ref not in registry \u2014 treating as non-image text");
+    return null;
+  }
+  return ref;
+}
+function refUrlParts(url) {
+  if (!isImageRefUrl(url)) return null;
+  const rest = url.slice(IMAGE_REF_SCHEME.length);
+  const a = rest.indexOf(";");
+  if (a < 0) return null;
+  const b = rest.indexOf(";", a + 1);
+  return { mime: rest.slice(0, a), token: b < 0 ? rest.slice(a + 1) : rest.slice(a + 1, b), path: b < 0 ? "" : rest.slice(b + 1) };
+}
+function remintImageRefs(messages, roots) {
+  const allowed = [];
+  for (const r of roots) {
+    try {
+      allowed.push(realpathSync(resolve(r)));
+    } catch (e) {
+      log2.debug(`image-ref root unavailable: ${r}`, e);
+    }
+  }
+  if (allowed.length === 0) return messages;
+  const inside = (p) => allowed.some((root) => p === root || p.startsWith(root + sep));
+  let changed = false;
+  const out = messages.map((m) => {
+    if (m.role !== "user" && m.role !== "assistant" || typeof m.content === "string" || m.content == null) return m;
+    let touched = false;
+    const parts = m.content.map((p) => {
+      if (p.type !== "image_url") return p;
+      const f = refUrlParts(p.image_url?.url);
+      if (!f || refRegistry.has(f.token)) return p;
+      let real;
+      try {
+        real = realpathSync(f.path);
+      } catch (e) {
+        log2.warn(`resumed image ref unreadable, will stub: ${f.path}`, e);
+        return p;
+      }
+      if (!inside(real)) {
+        log2.warn(`resumed image ref outside the allowed roots, will stub: ${f.path} -> ${real}`);
+        return p;
+      }
+      touched = true;
+      return { type: "image_url", image_url: { url: mintImageRef(real, f.mime) } };
+    });
+    if (!touched) return m;
+    changed = true;
+    return { ...m, content: parts };
+  });
+  return changed ? out : messages;
+}
+function messageHasImageRef(content) {
+  if (content == null || typeof content === "string") return false;
+  return content.some((p) => p.type === "image_url" && isImageRefUrl(p.image_url?.url));
+}
+function messageHasImage(content) {
+  return messageHasInlineImage(content) || messageHasImageRef(content);
+}
+function imageRefResult(path, mime) {
+  return JSON.stringify({ imageRef: mintImageRef(path, mime), image: path });
+}
+function toolImageRef(content) {
+  if (typeof content !== "string" || !content.startsWith('{"imageRef":')) return null;
+  try {
+    return parseImageRef(JSON.parse(content).imageRef);
+  } catch (e) {
+    log2.debug("bad imageRef tool result", e);
+    return null;
+  }
+}
+function elideStaleImages(messages, keepRecent = 1) {
+  const idx = messages.map((m, i) => messageHasImage(m.content) ? i : -1).filter((i) => i >= 0);
+  const drop = new Set(idx.slice(0, Math.max(0, idx.length - keepRecent)));
+  if (drop.size === 0) return messages;
+  let changed = false;
+  const out = messages.map((m, i) => {
+    if (!drop.has(i)) return m;
+    const c = elideInlineImages(m.content);
+    if (c === m.content) return m;
+    changed = true;
+    return { ...m, content: c };
+  });
+  return changed ? out : messages;
+}
+function imageWindows(messages, keepRecent) {
+  const attach = [];
+  const tool = [];
+  messages.forEach((m, i) => {
+    if (toolImageRef(m.content)) tool.push(i);
+    else if (messageHasImage(m.content)) attach.push(i);
+  });
+  const k = Math.max(0, keepRecent);
+  return /* @__PURE__ */ new Set([...attach.slice(Math.max(0, attach.length - k)), ...tool.slice(Math.max(0, tool.length - k))]);
+}
+function expandImagesForSend(messages, keepRecent = 1, stub = IMAGE_ELIDE_STUB) {
+  if (!messages.some(bearsImage)) return messages;
+  const keep = imageWindows(messages, keepRecent);
+  let changed = false;
+  const out = messages.map((m, i) => {
+    const content = keep.has(i) ? expandContent(m.content, stub) : stripContent(m.content, stub);
+    if (content === m.content) return m;
+    changed = true;
+    return { ...m, content };
+  });
+  return changed ? out : messages;
+}
+function sendBytes(messages, keepRecent = 1, stub = IMAGE_ELIDE_STUB) {
+  let n = 0;
+  for (const b of sendBytesPer(messages, keepRecent, stub)) n += b;
+  return n;
+}
+function sendBytesPer(messages, keepRecent = 1, stub = IMAGE_ELIDE_STUB) {
+  const keep = messages.some(bearsImage) ? imageWindows(messages, keepRecent) : null;
+  return messages.map((m, i) => wireBytes(m.content, keep == null || keep.has(i), stub) + (m.tool_calls ? JSON.stringify(m.tool_calls).length : 0));
+}
+function wireBytes(content, kept, stub) {
+  const tool = toolImageRef(content);
+  if (tool) return kept ? tool.bytes : stub.length;
+  if (content == null || typeof content === "string") return contentBytes(content);
+  if (kept) return contentBytes(content);
+  let n = 0;
+  for (const p of content) {
+    if (p.type === "text") {
+      n += (p.text ?? "").length;
+      continue;
+    }
+    const url = p.image_url?.url ?? "";
+    n += url.startsWith("data:") || isImageRefUrl(url) ? stub.length : url.length || 7;
+  }
+  return n;
+}
+function readRefDataUrl(ref) {
+  try {
+    return `data:${ref.mime};base64,${readFileSync(ref.path).toString("base64")}`;
+  } catch (e) {
+    log2.warn(`image ref unreadable, sending stub instead: ${ref.path}`, e);
+    return null;
+  }
+}
+function expandContent(content, stub) {
+  const tool = toolImageRef(content);
+  if (tool) {
+    const url = readRefDataUrl(tool);
+    return url ? JSON.stringify({ dataUrl: url, image: tool.path }) : stub;
+  }
+  if (typeof content === "string") return content;
+  let changed = false;
+  const out = content.map((p) => {
+    if (p.type !== "image_url" || !isImageRefUrl(p.image_url?.url)) return p;
+    changed = true;
+    const ref = parseImageRef(p.image_url?.url);
+    const url = ref && readRefDataUrl(ref);
+    return url ? imagePart(url) : { type: "text", text: stub };
+  });
+  return changed ? out : content;
+}
+function stripContent(content, stub) {
+  if (toolImageRef(content)) return stub;
+  if (typeof content === "string") return content;
+  let changed = false;
+  const out = content.map((p) => {
+    const url = p.type === "image_url" ? p.image_url?.url ?? "" : "";
+    if (!url.startsWith("data:") && !isImageRefUrl(url)) return p;
+    changed = true;
+    return { type: "text", text: stub };
+  });
+  return changed ? out : content;
+}
+var log2, p_sep, IMAGE_ELIDE_STUB, IMAGE_REF_SCHEME, REF_REGISTRY_MAX, refRegistry, isImageRefUrl, bearsImage;
+var init_llm = __esm({
+  "src/llm.ts"() {
+    "use strict";
+    init_logging();
+    log2 = forComponent("llm");
+    p_sep = (parts) => parts.length > 1 ? "\n" : "";
+    IMAGE_ELIDE_STUB = "[image elided \u2014 re-attach @path or /paste to view again]";
+    IMAGE_REF_SCHEME = "agentx-image:";
+    REF_REGISTRY_MAX = 256;
+    refRegistry = /* @__PURE__ */ new Map();
+    isImageRefUrl = (url) => !!url && url.startsWith(IMAGE_REF_SCHEME);
+    bearsImage = (m) => messageHasImage(m.content) || toolImageRef(m.content) != null;
+  }
+});
+
 // src/redact.ts
 function redactSecrets(text) {
   if (!text) return text;
@@ -474,16 +742,6 @@ var init_todo = __esm({
   }
 });
 
-// src/logging.ts
-import { log } from "libx.js/src/modules/log";
-var forComponent;
-var init_logging = __esm({
-  "src/logging.ts"() {
-    "use strict";
-    forComponent = (name) => log.forComponent(name);
-  }
-});
-
 // src/tools.web.ts
 function htmlToText(html) {
   let s = html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<title[\s\S]*?<\/title>/gi, " ").replace(/<noscript[\s\S]*?<\/noscript>/gi, " ").replace(/<textarea[\s\S]*?<\/textarea>/gi, " ").replace(/<!--[\s\S]*?-->/g, " ").replace(/<\/(p|div|li|h[1-6]|tr|section|article|header|footer|nav)>/gi, "\n").replace(/<br\s*\/?>/gi, "\n").replace(/<[^>]+>/g, " ");
@@ -605,7 +863,7 @@ function makeWebFetchTool(options = {}) {
 
 ${capped}`;
       } catch (e) {
-        log2.debug(`WebFetch ${u} failed`, e);
+        log3.debug(`WebFetch ${u} failed`, e);
         return `Error fetching ${u}: ${e?.name === "AbortError" ? `timed out after ${timeoutMs}ms` : e?.message ?? e}`;
       } finally {
         clearTimeout(timer);
@@ -729,7 +987,7 @@ function makeWebSearchTool(options = {}) {
         if (!res.ok) return `Error: search returned ${res.status} ${res.statusText}`;
         return formatHits(parseDdgHtml(await res.text(), maxResults));
       } catch (e) {
-        log2.debug("WebSearch failed", e);
+        log3.debug("WebSearch failed", e);
         return `Error searching: ${e?.name === "AbortError" ? `timed out after ${timeoutMs}ms` : e?.message ?? e}`;
       } finally {
         clearTimeout(timer);
@@ -740,12 +998,12 @@ function makeWebSearchTool(options = {}) {
 function makeWebSearchAnthropicTool(opts = {}) {
   return makeWebSearchTool({ provider: "anthropic", name: "WebSearchAnthropic", description: ANTHROPIC_SEARCH_DESC, anthropicApiKey: opts.anthropicApiKey, model: opts.model });
 }
-var log2, _dnsLookup, webFetchTool, webSearchTool, ANTHROPIC_SEARCH_DESC, webSearchAnthropicTool;
+var log3, _dnsLookup, webFetchTool, webSearchTool, ANTHROPIC_SEARCH_DESC, webSearchAnthropicTool;
 var init_tools_web = __esm({
   "src/tools.web.ts"() {
     "use strict";
     init_logging();
-    log2 = forComponent("web");
+    log3 = forComponent("web");
     webFetchTool = makeWebFetchTool();
     webSearchTool = makeWebSearchTool();
     ANTHROPIC_SEARCH_DESC = "High-quality web search via Anthropic's native search index. Returns concise, sourced findings \u2014 one claim per line, each with its source URL. Prefer this over WebSearch when accuracy and citations matter; it is slower (~3\u20138s) and bills the Anthropic API account per call (one cheap-model turn + search fee).";
@@ -960,6 +1218,36 @@ ${out}`.trim() : out || "(command succeeded, no output)";
   );
   return `Started background job ${id} \u2014 poll with JobOutput({id:"${id}"}) / JobStatus, stop with JobKill.`;
 }
+function realPathOf(fs, path) {
+  if (typeof fs.realPath !== "function") return null;
+  try {
+    return fs.realPath(path);
+  } catch (e) {
+    log4.debug(`realPath unavailable for ${path} \u2014 inlining image bytes instead`, e);
+    return null;
+  }
+}
+function isBinary(raw) {
+  if (raw === "") return false;
+  const head = raw.length > 8192 ? raw.slice(0, 8192) : raw;
+  let repl = 0;
+  for (let i = 0; i < head.length; i++) {
+    const c = head.charCodeAt(i);
+    if (c === 0) return true;
+    if (c === 65533) repl++;
+  }
+  return repl / head.length > 0.1;
+}
+async function byteSize(fs, path, raw) {
+  const bfs = fs;
+  if (typeof bfs.readFileBytes === "function") {
+    try {
+      return (await bfs.readFileBytes(path)).length;
+    } catch {
+    }
+  }
+  return Buffer.byteLength(raw, "utf8");
+}
 function exitSessionTool(onExit) {
   return {
     name: "ExitSession",
@@ -986,15 +1274,18 @@ function toolsByName(names) {
     return t;
   });
 }
-var numberLines, bashTool, IMG_MIME, readTool, editTool;
+var log4, numberLines, bashTool, IMG_MIME, readTool, editTool;
 var init_tools = __esm({
   "src/tools.ts"() {
     "use strict";
+    init_llm();
+    init_logging();
     init_tools_structured();
     init_todo();
     init_tools_web();
     init_OverlayFilesystem();
     init_redact();
+    log4 = forComponent("tools");
     numberLines = (content, offset = 0, limit) => {
       const lines = content.split("\n");
       const start = Math.max(0, offset);
@@ -1049,12 +1340,22 @@ var init_tools = __esm({
           if (typeof fs.readFileBytes !== "function") {
             return `[${path} is an image, but this filesystem can't read binary \u2014 attach it as @${path} instead, or run on disk.]`;
           }
+          const real = realPathOf(fs, path);
+          if (real) {
+            if (!await ctx.fs.exists(path)) return `Error: File not found: ${path}`;
+            return imageRefResult(real, IMG_MIME[ext]);
+          }
           const bytes = await fs.readFileBytes(path);
           const b64 = Buffer.from(bytes).toString("base64");
           return JSON.stringify({ dataUrl: `data:${IMG_MIME[ext]};base64,${b64}`, image: path });
         }
         const raw = await ctx.fs.readFile(path);
+        if (isBinary(raw)) {
+          const bytes = await byteSize(ctx.fs, path, raw);
+          return `[binary file: ${path} \u2014 ${bytes} bytes, not shown as text. Read renders png/jpg/jpeg/gif/webp images directly; otherwise attach it as @${path}.]`;
+        }
         ctx.readState.set(ctx.fs.resolvePath(path), raw);
+        if (raw === "") return `[empty file: ${path} \u2014 0 bytes]`;
         const content = CONFIG_FILE_RE.test(ctx.fs.resolvePath(path)) ? redactSecrets(raw) : raw;
         const total = content === "" ? 0 : content.split("\n").length;
         const start = Math.max(0, offset ?? 0);
@@ -1188,6 +1489,11 @@ var init_NodeDiskFilesystem = __esm({
           throw new Error(`File not found: ${path}`);
         }
       }
+      /** The REAL on-disk path behind a VFS path — an optional capability (not on IFilesystem) the Read
+       *  tool duck-types so it can persist an image REFERENCE instead of megabytes of base64. */
+      realPath(path) {
+        return this.real(this.resolvePath(path));
+      }
       /** Read raw bytes (for binary files like images). Not on the base IFilesystem (which is utf8-only) — an
        *  optional capability the Read tool duck-types to return image blocks. Same symlink/jail guards as readFile. */
       async readFileBytes(path) {
@@ -1370,6 +1676,12 @@ var init_JailedFilesystem = __esm({
         if (typeof inner.readFileBytes !== "function") throw new Error("binary read not supported by this filesystem");
         return inner.readFileBytes(this.guardRead("readFileBytes", path));
       }
+      /** Forward the optional real-path capability (image REFS), jail-guarded like readFile. */
+      realPath(path) {
+        const inner = this.inner;
+        if (typeof inner.realPath !== "function") throw new Error("realPath not supported by this filesystem");
+        return inner.realPath(this.guardRead("realPath", path));
+      }
       async writeFile(path, content) {
         return this.inner.writeFile(this.guardWrite("writeFile", path), content);
       }
@@ -1610,13 +1922,13 @@ function makeRealShellTool(options) {
         }
       };
       try {
-        return await new Promise((resolve) => {
+        return await new Promise((resolve2) => {
           let out = "";
           let settled = false;
           const finish = (s) => {
             if (settled) return;
             settled = true;
-            resolve(s);
+            resolve2(s);
           };
           let proc;
           try {
@@ -1639,7 +1951,7 @@ function makeRealShellTool(options) {
           proc.stderr?.on("data", collect);
           proc.on("error", (err) => {
             if (err?.name === "AbortError" || ctl.signal.aborted) return finish(reasonFor(timedOut, timeoutMs, clean(out)));
-            log5.debug("shell spawn error", err);
+            log7.debug("shell spawn error", err);
             finish(`[exit 1] ${err?.message ?? err}${out ? "\n" + clean(out) : ""}`);
           });
           proc.on("close", (code) => {
@@ -1701,7 +2013,7 @@ ${clean(out) || "(no output yet)"}`;
     }
   ];
 }
-var log5, clean, DETACHED, SECRET_ENV_RE, _spawn, ShellJobRegistry, NO_JOB2;
+var log7, clean, DETACHED, SECRET_ENV_RE, _spawn, ShellJobRegistry, NO_JOB2;
 var init_tools_shell = __esm({
   "src/tools.shell.ts"() {
     "use strict";
@@ -1709,7 +2021,7 @@ var init_tools_shell = __esm({
     init_redact();
     init_logging();
     init_shell_sandbox();
-    log5 = forComponent("shell");
+    log7 = forComponent("shell");
     clean = (s) => truncateOutput(redactSecrets(s.replace(/\n+$/, "")));
     DETACHED = { stdio: ["ignore", "pipe", "pipe"], detached: true };
     SECRET_ENV_RE = /(_API_KEY|_TOKEN|_SECRET|_PASSWORD|_PRIVATE_KEY|^AWS_|^GITHUB_TOKEN$|^OPENAI_|^ANTHROPIC_|^GOOGLE_|^GEMINI_|^GROQ_|^NPM_TOKEN$)/i;
@@ -1789,18 +2101,8 @@ var init_tools_shell = __esm({
   }
 });
 
-// src/llm.ts
-function contentText(content) {
-  if (content == null) return "";
-  if (typeof content === "string") return content;
-  return content.map((p) => p.type === "text" ? p.text ?? "" : "[image]").join(p_sep(content));
-}
-var p_sep = (parts) => parts.length > 1 ? "\n" : "";
-function imagePart(url) {
-  return { type: "image_url", image_url: { url } };
-}
-
 // src/Agent.ts
+init_llm();
 init_tools();
 
 // src/tools.jobs.ts
@@ -2492,7 +2794,7 @@ init_OverlayFilesystem();
 
 // src/worktree.ts
 import { spawnSync } from "child_process";
-import { symlinkSync, mkdirSync, statSync, readFileSync, rmSync } from "fs";
+import { symlinkSync, mkdirSync, statSync as statSync2, readFileSync as readFileSync2, rmSync } from "fs";
 import { join } from "path";
 var VALID_SEGMENT = /^[a-zA-Z0-9._-]+$/;
 var MAX_SLUG_LENGTH = 64;
@@ -2531,16 +2833,16 @@ function findGitRoot(from) {
 }
 function readWorktreeHead(worktreePath) {
   try {
-    const gitFile = readFileSync(join(worktreePath, ".git"), "utf-8").trim();
+    const gitFile = readFileSync2(join(worktreePath, ".git"), "utf-8").trim();
     const m = gitFile.match(/^gitdir:\s*(.+)$/);
     if (!m) return null;
     const headPath = join(m[1], "HEAD");
-    const head = readFileSync(headPath, "utf-8").trim();
+    const head = readFileSync2(headPath, "utf-8").trim();
     const refMatch = head.match(/^ref:\s*(.+)$/);
     if (!refMatch) return head.length === 40 ? head : null;
     const refPath = join(m[1], "..", refMatch[1]);
     try {
-      return readFileSync(refPath, "utf-8").trim();
+      return readFileSync2(refPath, "utf-8").trim();
     } catch {
     }
     const r = git(["rev-parse", "HEAD"], worktreePath);
@@ -2576,7 +2878,7 @@ function symlinkDirs(repoRoot, worktreePath, dirs) {
     const src = join(repoRoot, dir);
     const dst = join(worktreePath, dir);
     try {
-      statSync(src);
+      statSync2(src);
     } catch {
       continue;
     }
@@ -2592,7 +2894,7 @@ function cleanupWorktree(repoRoot, slug2, opts) {
   const worktreePath = worktreePathFor(repoRoot, slug2);
   const branch = worktreeBranchName(slug2);
   try {
-    statSync(worktreePath);
+    statSync2(worktreePath);
   } catch {
     return { removed: false, reason: "not found" };
   }
@@ -2642,7 +2944,7 @@ function exitWorktree() {
 // src/subagent.ts
 init_NodeDiskFilesystem();
 init_logging();
-var log3 = forComponent("subagent");
+var log5 = forComponent("subagent");
 async function boundedPool(items, limit, fn) {
   const out = new Array(items.length);
   let next = 0;
@@ -2684,7 +2986,7 @@ function traceFileFor(dir, label, depth) {
     const id = `${Date.now().toString(36)}-${(traceSeq++).toString(36)}`;
     return join3(dir, `${id}-d${depth}-${sanitizeSlug(label) || "sub"}.json`);
   } catch (e) {
-    log3.warn(`subagent trace dir unavailable (${dir}) \u2014 running without a trace: ${e instanceof Error ? e.message : String(e)}`);
+    log5.warn(`subagent trace dir unavailable (${dir}) \u2014 running without a trace: ${e instanceof Error ? e.message : String(e)}`);
     return void 0;
   }
 }
@@ -2692,7 +2994,7 @@ function flushTrace(file, meta, messages, status) {
   try {
     writeFileSync(file, JSON.stringify({ ...meta, status, updated: Date.now(), messages }, null, 2));
   } catch (e) {
-    log3.warn(`subagent trace flush failed (${file}): ${e instanceof Error ? e.message : String(e)}`);
+    log5.warn(`subagent trace flush failed (${file}): ${e instanceof Error ? e.message : String(e)}`);
   }
 }
 function installTrace(child, file, meta) {
@@ -3153,7 +3455,11 @@ function reasoningToChatFragment(model, effort) {
 }
 
 // src/Agent.ts
-var log4 = forComponent("Agent");
+var log6 = forComponent("Agent");
+function envInt(key, fallback) {
+  const n = typeof process !== "undefined" ? Number(process.env?.[key]) : NaN;
+  return Number.isFinite(n) && n >= 0 ? n : fallback;
+}
 function isBrowserTool(name) {
   return name.startsWith("mcp__") && /browser/i.test(name.slice(5).split("__")[0]);
 }
@@ -3179,8 +3485,9 @@ var AgentOptions = class {
   /** Hard ceiling on accumulated tokens (prompt+completion) across the run; cache READS count at 0.1×
    *  (their real price) so a fat cached context doesn't trip the guard on healthy turns. 0 = unbounded. */
   maxTokens = 2e5;
-  /** Wall-clock ceiling in ms for the whole run. 0 = unbounded. */
-  timeoutMs = 12e4;
+  /** Idle ceiling in ms: max time since the last productive step before the run is killed (a long/active
+   *  step resets it — see runLoop's `lastProgressAt`). Not a whole-run wall clock. 0 = unbounded. */
+  timeoutMs = 3e5;
   /** Idle-stall watchdog for a SINGLE streamed model request: abort it if no chunk (text OR reasoning)
    *  arrives for this long. The between-steps `timeoutMs` can't preempt an in-flight `chat()`, so a
    *  provider that goes silent mid-stream would otherwise park the loop forever. 0 = off. */
@@ -3191,15 +3498,33 @@ var AgentOptions = class {
   maxToolCalls = 100;
   /** External cancellation — abort the loop between steps (e.g. a UI "Cancel" button). */
   signal;
+  /** Retry budget for an EMPTY/silent-turn (a delegated-runtime wedge: cursor's warm helper spins then
+   *  returns a content-less end, surfaced as `code:'empty'`/`code:'cursor_silent'`). Tuned WIDER than the
+   *  network-drop budget (fixed 2) because clearing a wedge needs several reap+respawn cycles — each retry
+   *  hits a FRESH cursor session (the adapter evicts the wedged warm helper on the silent-end). Still bounded:
+   *  after exhaustion the turn surfaces `finishReason:'empty'` (non-zero exit), never infinite, never silent.
+   *  Env: AGENTX_EMPTY_RETRIES. */
+  emptyRetries = envInt("AGENTX_EMPTY_RETRIES", 4);
+  /** Base backoff (ms) between empty-turn retries; grows linearly per attempt (longer than the network
+   *  class's fixed 1s so a wedged helper has time to be reaped/respawned). Env: AGENTX_EMPTY_RETRY_BASE_MS. */
+  emptyRetryBaseMs = envInt("AGENTX_EMPTY_RETRY_BASE_MS", 1500);
   /** 0 = never trim. Otherwise cap the messages sent per turn (system + most recent). */
   maxContextMessages = 0;
   /** Note-taking: keep the most-recent N tool-result outputs verbatim; collapse OLDER ones to a one-line
    *  stub in the sent context (the model already consumed them — it can re-Read/re-run). The stored
    *  transcript is never mutated. 0 = keep all verbatim. */
   keepToolOutputs = 0;
+  /** How many of the most-recent image-bearing messages get their image REF expanded to real base64 in
+   *  the outgoing request. Older ones (and legacy inline base64) go on the wire as the elision stub. */
+  keepRecentImages = 1;
   /** Token-aware backstop (~4 chars/token estimate). After note-taking, drop oldest messages from the
    *  sent context until the estimate is under this ceiling (pairing-safe). 0 = off. */
   maxContextTokens = 0;
+  /** The MODEL's context window (tokens) — what the context % is measured against and what `/compact`
+   *  targets 50% of. Filled by the CLI from model metadata; 0 = fall back to 200k. Deliberately NOT
+   *  `maxTokens`: that is the cumulative SPEND kill-switch, and a spend budget must never be able to
+   *  drive destructive compaction (`--max-tokens 50000` would otherwise shred the transcript). */
+  contextWindow = 0;
   /** Pagination ceiling for a SINGLE tool result (bytes). A result over this is cropped to page 1 with
    *  a marker telling the model it was cropped (refine the query, or page further). Guards against one
    *  Grep/Read/MCP call blowing the whole context window. 0 = off. Default 60k (~15k tokens). */
@@ -3255,8 +3580,10 @@ var AgentOptions = class {
   /** Stream tokens from the model. Takes effect only with a `host.notify`; off => current (non-stream) behavior. */
   stream = false;
   /** Closure reflex for delegated runtimes (cursor/claude-code): when such a turn ends on a tool call with
-   *  no assistant text after it (the runtime went silent post-work), nudge ONE more step for a brief summary
-   *  of what changed + what's pending — so the turn delivers a wrap-up instead of trailing off mid-narration.
+   *  no assistant text after it (the runtime went silent post-work), nudge ONE more step to ANSWER the user
+   *  from the tool results already in the transcript — so the turn delivers a reply instead of trailing off
+   *  mid-narration. Deliberately not a "summarize what you did" nudge: that produced process reports and
+   *  permission-asking instead of answers (see the nudge text in runLoop).
    *  Fires at most once per run and only for delegated runtimes (native turns never emit the trigger). */
   closeDelegatedTurns = true;
   /** Fold the dropped middle of an over-long transcript into a synthetic summary (edge-safe, no LLM). Off => drop-oldest. */
@@ -3443,7 +3770,7 @@ var Agent = class _Agent {
       const disk = new NodeDiskFilesystem2(process.cwd());
       await disk.init();
       this.options.fs = new JailedFilesystem2(disk);
-      log4.info(`no fs provided \u2014 defaulting to jailed real disk at ${process.cwd()}`);
+      log6.info(`no fs provided \u2014 defaulting to jailed real disk at ${process.cwd()}`);
     }
     this.buildCtx();
   }
@@ -3561,19 +3888,42 @@ var Agent = class _Agent {
     return this.runLoop();
   }
   /**
-   * Fold the conversation in place (manual `/compact`): keep the system message + the
-   * most-recent window, summarizing the dropped middle (deterministic, no LLM call).
-   * No-op when the transcript already fits. Returns the number of messages removed.
-   * `focus` (e.g. from `/compact keep the API details`) preserves matching lines from the
-   * dropped span verbatim in the summary, instead of losing them to the generic recap.
+   * Fold the conversation in place (manual `/compact`) until it fits a TOKEN budget — not a message
+   * count. Message-count folding alone frees almost nothing when a few recent tool results are huge,
+   * so we escalate: fold the middle into a synthetic recap → elide oversized tool-result bodies in the
+   * retained window → halve the window → drop-oldest backstop. Deterministic, no LLM call.
+   * `focus` (e.g. `/compact keep the API details`) preserves matching lines from the dropped span verbatim.
+   * Returns before/after token estimates so the caller can report honestly (0 freed => say so).
    */
   compactNow(maxMessages = 12, focus) {
-    const max = Math.max(2, maxMessages);
-    if (this.transcript.length <= max) return 0;
+    const cap = _Agent.contextCap(this.options);
+    const target = Math.round(cap * _Agent.COMPACT_TARGET);
+    const kr = this.options.keepRecentImages ?? 1;
+    const tokensBefore = estimateTokens(this.transcript, kr);
+    const msgsBefore = this.transcript.length;
+    let max = Math.max(2, maxMessages);
+    if (this.transcript.length <= max && tokensBefore <= target)
+      return { tokensBefore, tokensAfter: tokensBefore, target, cap, removed: 0 };
     void this.activeHooks?.onPreCompact?.(this.transcript);
-    const before = this.transcript.length;
-    this.transcript = compact(this.transcript, max, focus);
-    return before - this.transcript.length;
+    let out = this.transcript;
+    if (out.length > max) out = compact(out, max, focus);
+    if (estimateTokens(out, kr) > target) out = elideOversizedImages(out, target, true, kr);
+    if (estimateTokens(out, kr) > target) out = capOversizedBodies(out, target, kr);
+    if (estimateTokens(out, kr) > target) out = elideOversizedImages(out, target, false, kr);
+    while (estimateTokens(out, kr) > target && max > 2 && out.length > 2) {
+      max = Math.max(2, Math.floor(max / 2));
+      out = capOversizedBodies(compact(out, max, focus), target, kr);
+    }
+    if (estimateTokens(out, kr) > target) out = fitTokenBudget(out, target, kr);
+    out = dropOrphanToolResults(out);
+    this.transcript = out;
+    this.releaseStaleImages();
+    return { tokensBefore, tokensAfter: estimateTokens(this.transcript, kr), target, cap, removed: msgsBefore - this.transcript.length };
+  }
+  /** Drop inline base64 images from older messages so Bun/JSC can reclaim the heap (see contentBytes). */
+  releaseStaleImages(keepRecent = 1) {
+    const next = elideStaleImages(this.transcript, keepRecent);
+    if (next !== this.transcript) this.transcript = next;
   }
   async runLoop() {
     const o = this.options;
@@ -3589,15 +3939,16 @@ var Agent = class _Agent {
     let lastFp = "";
     let repeats = 0;
     let closureNudged = false;
+    let lastProgressAt = start;
     const kill = (finishReason) => {
-      log4.warn(`kill-switch: ${finishReason} (steps=${steps}, tokens=${usage.totalTokens}, budgetTokens=${Math.round(usage.totalTokens - 0.9 * usage.cacheReadTokens)}, ms=${Date.now() - start - this.parkedMs}${this.parkedMs ? ` +${this.parkedMs} parked` : ""})`);
+      log6.warn(`kill-switch: ${finishReason} (steps=${steps}, tokens=${usage.totalTokens}, budgetTokens=${Math.round(usage.totalTokens - 0.9 * usage.cacheReadTokens)}, ms=${Date.now() - start - this.parkedMs}${finishReason === "timeout" ? `, idle=${Date.now() - lastProgressAt - this.parkedMs}ms` : ""}${this.parkedMs ? ` +${this.parkedMs} parked` : ""})`);
       this.ctx.jobs?.killAll();
       return { text: lastAssistantText(this.transcript), steps, finishReason, messages: this.transcript, usage, usageEstimated };
     };
     while (true) {
       if (o.signal?.aborted) return kill("aborted");
       if (steps >= o.maxSteps) return kill("max_steps");
-      if (o.timeoutMs && Date.now() - start - this.parkedMs >= o.timeoutMs) return kill("timeout");
+      if (o.timeoutMs && Date.now() - lastProgressAt - this.parkedMs >= o.timeoutMs) return kill("timeout");
       const budgetTokens = usage.totalTokens - 0.9 * usage.cacheReadTokens;
       if (o.maxTokens && budgetTokens >= o.maxTokens) return kill("budget");
       steps++;
@@ -3637,27 +3988,38 @@ var Agent = class _Agent {
               const r = await o.ai.chat({ model: o.model, messages: sent, tools: sentTools, stream: false, signal: o.signal, ...o.toolChoice ? { toolChoice: o.toolChoice } : {}, ...reasonOpts });
               res = r;
             }
+            if (steps === 1 && this.isEmptyStop(res) && !this.pendingInjections.length) {
+              const e = new Error("model returned an empty turn (finishReason=stop, no text, no tools)");
+              e.code = "empty";
+              throw e;
+            }
             break;
           } catch (err) {
             const sc = err?.statusCode;
             const serverSide = sc >= 500 || sc === 408 || /Service Unavailable|overloaded|Internal server error|Bad gateway|Gateway time/i.test(String(err?.message ?? ""));
             const network = !sc && /ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|EPIPE|socket hang up|fetch failed|network|terminated|UND_ERR/i.test(String(err?.message ?? err?.code ?? err));
             const stalled = err?.code === "stall";
-            const transient = !o.signal?.aborted && !isAbortError(err) && attempt < 2 && (network || serverSide || stalled);
+            const empty = err?.code === "empty" || err?.code === "cursor_silent";
+            const maxAttempts = empty ? Math.max(o.emptyRetries, 0) : 2;
+            const transient = !o.signal?.aborted && !isAbortError(err) && attempt < maxAttempts && (network || serverSide || stalled || empty);
             if (!transient) throw err;
-            const waitMs = 1e3 * (attempt + 1);
-            log4.warn(`${stalled ? "model stall" : "network drop"} mid-step (${err?.message ?? err}) \u2014 retrying in ${waitMs}ms`);
-            o.host?.notify?.({ kind: "retry", message: `${stalled ? "model stalled" : "connection dropped"} \u2014 retrying step (#${attempt + 1})` });
+            const waitMs = (empty ? o.emptyRetryBaseMs : 1e3) * (attempt + 1);
+            log6.warn(`${empty ? "empty model turn" : stalled ? "model stall" : "network drop"} mid-step (${err?.message ?? err}) \u2014 retrying in ${waitMs}ms`);
+            o.host?.notify?.({ kind: "retry", message: `${empty ? "model returned nothing" : stalled ? "model stalled" : "connection dropped"} \u2014 retrying step (#${attempt + 1})` });
             await new Promise((r) => setTimeout(r, waitMs));
           }
         }
       } catch (err) {
         if (err?.code === "budget") return kill("budget");
         if (err?.code === "stall") {
-          log4.warn(`model stalled out after retries: ${err?.message ?? err}`);
+          log6.warn(`model stalled out after retries: ${err?.message ?? err}`);
           return kill("timeout");
         }
         if (o.signal?.aborted || isAbortError(err)) return kill("aborted");
+        if (err?.code === "empty" || err?.code === "cursor_silent") {
+          log6.warn(`model returned empty/silent turns after retries \u2014 surfacing as failed`);
+          return { text: "", steps, finishReason: "empty", messages: this.transcript, usage, usageEstimated, error: err };
+        }
         const body = err?.body ?? err?.response?.data ?? err?.error;
         let bodyStr;
         try {
@@ -3667,7 +4029,7 @@ var Agent = class _Agent {
         }
         if (bodyStr && err instanceof Error && !err.message.includes(bodyStr)) err.detail = bodyStr;
         const errLog = err instanceof Error ? { message: err.message, ...err.detail ? { detail: err.detail } : {}, stack: err.stack } : err;
-        log4.error(`chat() failed: ${err?.message ?? err}${bodyStr ? ` \u2014 ${bodyStr}` : ""}`, errLog);
+        log6.error(`chat() failed: ${err?.message ?? err}${bodyStr ? ` \u2014 ${bodyStr}` : ""}`, errLog);
         return { text: "", steps, finishReason: "error", messages: this.transcript, usage, usageEstimated, error: err };
       }
       if (o.signal?.aborted) return kill("aborted");
@@ -3711,6 +4073,7 @@ var Agent = class _Agent {
       }
       const toolCalls = res.toolCalls ?? [];
       const emptyTurn = toolCalls.length === 0 && delegatedTools.length === 0 && contentText(res.content ?? "").trim() === "";
+      if (!emptyTurn) lastProgressAt = Date.now();
       if (!emptyTurn) {
         this.transcript.push({
           role: "assistant",
@@ -3722,12 +4085,16 @@ var Agent = class _Agent {
         if (this.drainInjections()) continue;
         if (o.closeDelegatedTurns && res.endedOnToolNoText && !closureNudged && steps < o.maxSteps) {
           closureNudged = true;
-          log4.verbose("delegated turn went silent after a tool \u2014 nudging a closing summary");
-          this.transcript.push({ role: "user", content: "Summarize what you did this turn and what (if anything) still needs doing. Be concise." });
+          log6.verbose("delegated turn went silent after a tool \u2014 nudging a closing answer");
+          this.transcript.push({
+            role: "user",
+            content: "You ran tools but did not reply. Answer the user now using the tool results above; if a tool failed, say so plainly. Do NOT re-run those tools, do NOT narrate what you did, and do NOT ask for permission to continue."
+          });
           continue;
         }
-        log4.verbose(`completed in ${steps} step(s)`);
+        log6.verbose(`completed in ${steps} step(s)`);
         await this.ctx.jobs?.drain();
+        this.releaseStaleImages();
         await this.activeHooks?.onStop?.(res.content ?? "");
         return { text: res.content ?? "", steps, finishReason: "stop", messages: this.transcript, usage, usageEstimated };
       }
@@ -3753,7 +4120,7 @@ var Agent = class _Agent {
       if (this.ctx.needsInput) {
         const question = this.ctx.needsInput;
         this.ctx.needsInput = void 0;
-        log4.warn(`needs_input: ${question.question} (steps=${steps})`);
+        log6.warn(`needs_input: ${question.question} (steps=${steps})`);
         await this.ctx.jobs?.drain();
         const text = [
           `OPEN QUESTION (run paused \u2014 no human was reachable): ${question.question}`,
@@ -3810,6 +4177,12 @@ var Agent = class _Agent {
       }
     };
   }
+  /** A clean-stop turn that carries no assistant text AND no tool calls (native or delegated) — a
+   *  non-result the model produced by going silent. Callers retry it rather than report "done". */
+  isEmptyStop(res) {
+    const stop = res.finishReason === "stop" || res.finishReason == null;
+    return stop && (res.toolCalls?.length ?? 0) === 0 && (res.delegatedTools?.length ?? 0) === 0 && contentText(res.content ?? "").trim() === "";
+  }
   async consumeStream(stream, poke) {
     let content = "";
     let finishReason;
@@ -3868,13 +4241,13 @@ var Agent = class _Agent {
     const decision = await this.park(Promise.resolve(hooks?.preToolUse?.(call, meta)));
     if (decision?.block) {
       const blocked = `Blocked by hook: ${decision.reason ?? "no reason given"}`;
-      log4.debug(`${tc.function.name} -> ${blocked}`);
+      log6.debug(`${tc.function.name} -> ${blocked}`);
       await hooks?.postToolUse?.(call, blocked, meta);
       return blocked;
     }
     this.options.host?.notify?.({ kind: "tool_use", id: tc.id ?? "", name: tc.function.name, input: args });
     if (earlyError) {
-      log4.debug(`${tc.function.name} -> ${earlyError}`);
+      log6.debug(`${tc.function.name} -> ${earlyError}`);
       await hooks?.postToolUse?.(call, earlyError, meta);
       this.options.host?.notify?.({ kind: "tool_result", id: tc.id ?? "", output: earlyError, isError: true });
       return earlyError;
@@ -3883,12 +4256,12 @@ var Agent = class _Agent {
     let images;
     let threw = false;
     try {
-      log4.debug(`${tc.function.name}(${tc.function.arguments})`);
+      log6.debug(`${tc.function.name}(${tc.function.arguments})`);
       this.ctx.emit = hooks?.onToolOutput ? (chunk) => {
         try {
           hooks.onToolOutput(call, chunk, meta);
         } catch (e) {
-          log4.debug(`onToolOutput hook error: ${e}`);
+          log6.debug(`onToolOutput hook error: ${e}`);
         }
       } : void 0;
       const raw = await tool.run(args, this.ctx);
@@ -3900,7 +4273,7 @@ var Agent = class _Agent {
       }
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
-      log4.debug(`${tc.function.name} -> error: ${msg}`);
+      log6.debug(`${tc.function.name} -> error: ${msg}`);
       result = `Error: ${msg}`;
       threw = true;
     } finally {
@@ -3926,6 +4299,16 @@ var Agent = class _Agent {
     }
     return images?.length ? { text: result, images } : result;
   }
+  /** `/compact` aims to land the transcript at this fraction of the context window. */
+  static COMPACT_TARGET = 0.5;
+  /** THE context-window cap resolution — `/compact`'s budget and the CLI's context footer/warnings both
+   *  route here, so the percentage the user reads and the one compaction targets can never drift. */
+  static contextCap(o) {
+    if (o.maxContextTokens) return o.maxContextTokens;
+    const w = o.contextWindow || 0;
+    if (w > ANTHROPIC_WINDOW_WITHOUT_1M_BETA && isAnthropicModel(o.model)) return ANTHROPIC_WINDOW_WITHOUT_1M_BETA;
+    return w || 2e5;
+  }
   static WRITE_CLASS = ["Write", "Edit", "MultiEdit", "ApplyEdits"];
   /** Append an autoTest failure section to a write-class tool result, if configured. */
   async maybeAutoTest(toolName, result) {
@@ -3959,26 +4342,27 @@ ${out}`;
     const browserKeep = this.browserActive ? o.browserTrim?.keepOutputs : void 0;
     const keep = browserKeep != null ? o.keepToolOutputs ? Math.min(o.keepToolOutputs, browserKeep) : browserKeep : o.keepToolOutputs;
     if (keep) out = stubOldToolResults(out ?? m, keep);
+    out = expandImagesForSend(dropOrphanToolResults(out ?? m), o.keepRecentImages ?? 1);
     if (o.maxContextTokens) {
-      const pre = (out ?? m).length;
-      out = fitTokenBudget(out ?? m, o.maxContextTokens);
+      const pre = out.length;
+      out = fitTokenBudget(out, o.maxContextTokens, o.keepRecentImages ?? 1);
       const dropped = pre - out.length;
       if (dropped > 0 && dropped !== this.lastTrimNotified) {
         this.lastTrimNotified = dropped;
         o.host?.notify?.({ kind: "compaction", message: `context full \u2014 auto-trimmed ${dropped} oldest message(s) to fit ~${Math.round(o.maxContextTokens / 1e3)}k tokens` });
       }
     }
-    return dropOrphanToolResults(out ?? m);
+    return dropOrphanToolResults(out);
   }
 };
 function dropOldest(m, max) {
   const head = m[0]?.role === "system" ? [m[0]] : [];
   return [...head, ...m.slice(-(max - head.length))];
 }
-function estimateTokens(m) {
-  let chars = 0;
-  for (const x of m) chars += contentText(x.content).length + (x.tool_calls ? JSON.stringify(x.tool_calls).length : 0);
-  return Math.ceil(chars / 4);
+var ANTHROPIC_WINDOW_WITHOUT_1M_BETA = 2e5;
+var isAnthropicModel = (m) => !!m && (m.startsWith("anthropic/") || /(^|\/)claude-/.test(m));
+function estimateTokens(m, keepRecentImages = 1) {
+  return Math.ceil(sendBytes(m, keepRecentImages) / 4);
 }
 function cropResult(result, cap) {
   const head = result.slice(0, cap);
@@ -4012,6 +4396,60 @@ function stubOldToolResults(messages, keep) {
     return { ...x, content: `[${x.name ?? "tool"}${where ? ` ${where}` : ""} output elided \u2014 ${lines} lines; re-run the tool to view]` };
   });
 }
+function elideOversizedImages(messages, target, protectNewest = false, keepRecentImages = 1) {
+  let out = messages;
+  const withImages = out.map((_, i) => i).filter((i) => messageHasImage(out[i].content));
+  const newest = protectNewest ? withImages[withImages.length - 1] : -1;
+  const weight = sendBytesPer(out, keepRecentImages);
+  const heaviestFirst = withImages.filter((i) => i !== newest).sort((a, b) => weight[b] - weight[a]);
+  for (const i of heaviestFirst) {
+    if (estimateTokens(out, keepRecentImages) <= target) break;
+    const c = elideImages(out[i].content);
+    if (c === out[i].content) continue;
+    out = out.map((m, j) => j === i ? { ...m, content: c } : m);
+  }
+  return out;
+}
+function capOversizedBodies(messages, target, keepRecentImages = 1) {
+  let out = messages;
+  for (const cap of [8e3, 4e3, 2e3, 800, 300, 120]) {
+    if (estimateTokens(out, keepRecentImages) <= target) break;
+    out = out.map((x) => x.role === "system" ? x : elideBody(x, cap));
+  }
+  return out;
+}
+function elideBody(x, cap) {
+  const note = (bytes, imgs2) => `
+
+[${bytes} bytes elided by /compact${x.role === "tool" ? " \u2014 re-run the tool to view" : ""}${imgs2 ? `; ${imgs2} image part(s) KEPT in full \u2014 they still cost context` : ""}]`;
+  if (!Array.isArray(x.content)) {
+    const text = contentText(x.content);
+    if (text.length <= cap) return x;
+    return { ...x, content: `${text.slice(0, cap)}${note(text.length - cap, 0)}` };
+  }
+  const imgs = x.content.filter((p) => p.type !== "text").length;
+  let left = cap;
+  let elided = 0;
+  const parts = [];
+  for (const p of x.content) {
+    if (p.type !== "text") {
+      parts.push(p);
+      continue;
+    }
+    const t = p.text ?? "";
+    if (t.length <= left) {
+      left -= t.length;
+      if (t) parts.push(p);
+      continue;
+    }
+    const keep = left;
+    left = 0;
+    elided += t.length - keep;
+    if (keep > 0) parts.push({ ...p, text: t.slice(0, keep) });
+  }
+  if (!elided) return parts.length === x.content.length || !parts.length ? x : { ...x, content: parts };
+  return { ...x, content: [...parts, { type: "text", text: note(elided, imgs).trimStart() }] };
+}
 var callIdSet = (msgs) => {
   const ids = /* @__PURE__ */ new Set();
   for (const m of msgs) if (m.role === "assistant") for (const tc of m.tool_calls ?? []) ids.add(tc.id);
@@ -4022,8 +4460,8 @@ function dropOrphanToolResults(messages) {
   const ok = (m) => m.role !== "tool" || ids.has(m.tool_call_id ?? "");
   return messages.every(ok) ? messages : messages.filter(ok);
 }
-function fitTokenBudget(messages, maxTokens) {
-  const per = messages.map((x) => estimateTokens([x]));
+function fitTokenBudget(messages, maxTokens, keepRecentImages = 1) {
+  const per = sendBytesPer(messages, keepRecentImages).map((b) => Math.ceil(b / 4));
   let total = per.reduce((a, b) => a + b, 0);
   if (total <= maxTokens) return messages;
   const head = messages[0]?.role === "system" ? [messages[0]] : [];
@@ -4032,7 +4470,7 @@ function fitTokenBudget(messages, maxTokens) {
   const ids = callIdSet(messages.slice(from));
   while (from < messages.length && messages[from].role === "tool" && !ids.has(messages[from].tool_call_id ?? "")) total -= per[from++];
   if (total > maxTokens)
-    log4.warn(`context ~${total} tok still over maxContextTokens=${maxTokens} after trimming (system head can't be dropped)`);
+    log6.warn(`context ~${total} tok still over maxContextTokens=${maxTokens} after trimming (system head can't be dropped)`);
   return [...head, ...messages.slice(from)];
 }
 function compact(m, max, focus) {
@@ -4044,11 +4482,24 @@ function compact(m, max, focus) {
   if (dropped.length === 0) return [...head, ...tail];
   return [...head, { role: "system", content: summarize(dropped, focus) }, ...tail];
 }
+var SUMMARY_HEAD = "[summary of ";
+var MAX_CARRIED_COUNT = 1e4;
+var isSyntheticSummary = (m) => m.role === "system" && typeof m.content === "string" && m.content.startsWith(SUMMARY_HEAD);
 function summarize(messages, focus) {
   const tools = /* @__PURE__ */ new Set();
   const files = /* @__PURE__ */ new Set();
+  const carried = [];
+  let carriedCount = 0;
+  let priors = 0;
   let lastAssistant = "";
   for (const msg of messages) {
+    if (isSyntheticSummary(msg)) {
+      priors++;
+      const [head, ...rest] = String(msg.content).split("\n");
+      carriedCount += Math.min(Math.max(Number(/of (\d+)/.exec(head)?.[1]) || 0, 0), MAX_CARRIED_COUNT);
+      for (const l of rest) if (l.trim() && !carried.includes(l) && carried.length < 20) carried.push(l);
+      continue;
+    }
     for (const tc of msg.tool_calls ?? []) {
       tools.add(tc.function.name);
       try {
@@ -4059,14 +4510,16 @@ function summarize(messages, focus) {
     }
     if (msg.role === "assistant" && msg.content) lastAssistant = contentText(msg.content);
   }
-  const lines = [`[summary of ${messages.length} earlier message(s)]`];
+  const lines = [`${SUMMARY_HEAD}${messages.length - priors + carriedCount} earlier message(s)]`];
   if (tools.size) lines.push(`tools used: ${[...tools].join(", ")}`);
   if (files.size) lines.push(`files touched: ${[...files].join(", ")}`);
   if (lastAssistant) lines.push(`last assistant: ${lastAssistant}`);
+  if (carried.length) lines.push("earlier recap:", ...carried.map((l) => `  ${l}`));
   if (focus?.trim()) {
     const words = focus.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
     const kept = [];
-    outer: for (const msg of messages) {
+    const ordered = [...messages.filter((m) => !isSyntheticSummary(m)), ...messages.filter(isSyntheticSummary)];
+    outer: for (const msg of ordered) {
       if (msg.role === "tool") continue;
       for (const line of contentText(msg.content).split("\n")) {
         const l = line.toLowerCase();
@@ -4732,7 +5185,7 @@ init_tools_web();
 init_tools();
 init_tools_structured();
 init_logging();
-var log6 = forComponent("scratch");
+var log8 = forComponent("scratch");
 var SCRATCH_DIR = "/scratch";
 function shortArgs(args) {
   try {
@@ -4772,7 +5225,7 @@ var Scratch = class {
           await (this.dirReady ??= mkdirp(this.fs, dir));
           await this.fs.writeFile(path, header + raw);
         } catch (e) {
-          log6.debug("scratch write failed; returning raw", e);
+          log8.debug("scratch write failed; returning raw", e);
           return raw;
         }
         const preview = raw.slice(0, previewChars).replace(/\s+/g, " ").trim();
@@ -4802,7 +5255,7 @@ To pull a specific detail, Grep/Read ${path}, or call Ask({ question: "\u2026",
       await (this.dirReady ??= mkdirp(this.fs, dir));
       await this.fs.writeFile(path, header + full);
     } catch (e) {
-      log6.debug("scratch spill failed; cropping lossy", e);
+      log8.debug("scratch spill failed; cropping lossy", e);
       return full.slice(0, pageBytes) + `
 
 [output cropped to ${pageBytes} of ${full.length} bytes; full output unavailable (scratch write failed) \u2014 refine your query]`;
@@ -4848,7 +5301,7 @@ Question: ${q}`);
         const answer = (res.text ?? "").trim();
         return answer || "(no answer found in scratch)";
       } catch (e) {
-        log6.debug("Ask peek failed", e);
+        log8.debug("Ask peek failed", e);
         return `Error querying scratch: ${e?.message ?? e}`;
       }
     }
@@ -4857,7 +5310,7 @@ Question: ${q}`);
 
 // src/lessons.ts
 init_logging();
-var log7 = forComponent("Lessons");
+var log9 = forComponent("Lessons");
 var LessonOptionsDefaults = class {
   minRepeats = 2;
 };
@@ -4882,15 +5335,16 @@ function lessonCapture(options) {
       counts.set(lesson.slug, n);
       if (n < o.minRepeats) return;
       written.add(lesson.slug);
-      await writeFact(o.fs, o.dir, lesson.slug, lesson.body).catch((e) => log7.warn(`could not persist ${lesson.slug}: ${e?.message ?? e}`));
-      log7.debug(`captured lesson ${lesson.slug} (recurred ${n}\xD7)`);
+      await writeFact(o.fs, o.dir, lesson.slug, lesson.body).catch((e) => log9.warn(`could not persist ${lesson.slug}: ${e?.message ?? e}`));
+      log9.debug(`captured lesson ${lesson.slug} (recurred ${n}\xD7)`);
     }
   };
 }
 
 // src/reflect.ts
+init_llm();
 init_logging();
-var log8 = forComponent("Reflect");
+var log10 = forComponent("Reflect");
 async function reflectOnRun(o) {
   const digest = digestRun(o.result.messages, o.maxDigestChars ?? 6e3);
   if (!digest.trim()) return null;
@@ -4906,7 +5360,7 @@ If the run was fine or the issue was purely task-specific (not generalizable), r
     const r = await o.ai.chat({ model: o.model, messages: [{ role: "user", content: prompt }], stream: false });
     text = r?.content ?? "";
   } catch (e) {
-    log8.warn(`reflection call failed: ${e?.message ?? e}`);
+    log10.warn(`reflection call failed: ${e?.message ?? e}`);
     return null;
   }
   const m = text.match(/LESSON:\s*(.+)/i);
@@ -4916,10 +5370,10 @@ If the run was fine or the issue was purely task-specific (not generalizable), r
   try {
     await writeFact(o.fs, o.dir, slug2, lesson);
   } catch (e) {
-    log8.warn(`could not persist lesson: ${e?.message ?? e}`);
+    log10.warn(`could not persist lesson: ${e?.message ?? e}`);
     return null;
   }
-  log8.debug(`reflection persisted ${slug2}`);
+  log10.debug(`reflection persisted ${slug2}`);
   return slug2;
 }
 function digestRun(messages, maxChars) {
@@ -4935,6 +5389,7 @@ function digestRun(messages, maxChars) {
 
 // src/duplex.ts
 import { MemFilesystem as MemFilesystem2 } from "@livx.cc/wcli/core";
+init_llm();
 init_logging();
 
 // node_modules/@bod.ee/voice/src/core/logging.ts
@@ -4967,7 +5422,7 @@ function forComponent2(name) {
 }
 
 // node_modules/@bod.ee/voice/src/core/emotion.ts
-var log9 = forComponent2("Emotion");
+var log11 = forComponent2("Emotion");
 var EMOTIONS = [
   // primary (best results)
   "neutral",
@@ -5121,7 +5576,7 @@ var EmotionStream = class {
       if (tag) {
         this.pending = tag;
         if (this.show) display += m[0];
-      } else log9.debug(`dropping unknown emotion tag ${m[0]}`);
+      } else log11.debug(`dropping unknown emotion tag ${m[0]}`);
       last = m.index + m[0].length;
     }
     this.emit(body.slice(last), (s, d, p) => {
@@ -5144,7 +5599,7 @@ var EmotionStream = class {
 };
 
 // node_modules/@bod.ee/voice/src/core/engine.ts
-var log10 = forComponent2("VoiceEngine");
+var log12 = forComponent2("VoiceEngine");
 var realClock = {
   now: () => performance.now(),
   setTimeout: (fn, ms) => setTimeout(fn, ms),
@@ -5419,7 +5874,7 @@ var VoiceEngine = class _VoiceEngine {
     await Promise.all([this.tts.connect(), this.stt.start()]);
     this.tts.warmup?.();
     this.setState("listening");
-    log10.debug(`voice I/O up (${this.stt.usingAec ? "AEC" : "heuristic echo"} capture)`);
+    log12.debug(`voice I/O up (${this.stt.usingAec ? "AEC" : "heuristic echo"} capture)`);
   }
   get usingAec() {
     return this.stt.usingAec;
@@ -5441,7 +5896,7 @@ var VoiceEngine = class _VoiceEngine {
       this.options.onDiag({ t: this.clock.now(), kind, ...fields });
     } catch (e) {
       this.diagOn = false;
-      log10.debug(`onDiag threw \u2014 diagnostics disabled: ${e instanceof Error ? e.message : e}`);
+      log12.debug(`onDiag threw \u2014 diagnostics disabled: ${e instanceof Error ? e.message : e}`);
     }
   }
   idleWaiters = [];
@@ -5550,7 +6005,7 @@ var VoiceEngine = class _VoiceEngine {
     if (prose.trim()) this.repliedSinceDispatch = true;
     for (const w of this.words(this.reply)) this.echoWords.add(w);
     this.tts.speak(forSpeech(speech), true);
-    if (!this.spokeDeltas && this.turnStartAt) log10.debug(`ttft: ${Math.round(this.clock.now() - this.turnStartAt)}ms`);
+    if (!this.spokeDeltas && this.turnStartAt) log12.debug(`ttft: ${Math.round(this.clock.now() - this.turnStartAt)}ms`);
     this.spokeDeltas = true;
     this.setState("speaking");
     if (this.options.revealMode !== "off" && display) {
@@ -5627,7 +6082,7 @@ var VoiceEngine = class _VoiceEngine {
       this.drainTimer = null;
       this.speaking = false;
       this.stopWordReveal(true);
-      if (this.turnStartAt) log10.debug(`turn: ${Math.round(this.clock.now() - this.turnStartAt)}ms (incl. playback)`);
+      if (this.turnStartAt) log12.debug(`turn: ${Math.round(this.clock.now() - this.turnStartAt)}ms (incl. playback)`);
       this.echoUntil = this.clock.now() + 2500;
       if (!this.usingAec) this.stt.reset();
       this.setState("listening");
@@ -5715,7 +6170,7 @@ var VoiceEngine = class _VoiceEngine {
     this.clearAckTimer("interrupt");
     this.adaptiveAckFired = false;
     this.ackProbe = null;
-    if (this.uttQueue.length) log10.info(`barge-in dropped ${this.uttQueue.length} queued worker utterance(s)`);
+    if (this.uttQueue.length) log12.info(`barge-in dropped ${this.uttQueue.length} queued worker utterance(s)`);
     const droppedQueued = this.uttQueue.length;
     this.uttQueue = [];
     if (!this.speaking && !this.drainTimer) return;
@@ -5861,7 +6316,7 @@ var VoiceEngine = class _VoiceEngine {
       if (flat && this.lastDispatchFlat && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS && (this.lastDispatchFlat.startsWith(flat) || flat.startsWith(this.lastDispatchFlat))) return;
       this.specSpent = true;
       this.specText = this.specPartial;
-      log10.debug(`speculate: "${this.specText.slice(0, 60)}"`);
+      log12.debug(`speculate: "${this.specText.slice(0, 60)}"`);
       this.diag("speculate", { text: this.specText });
       this.options.onSpeculate(this.specText);
     }, this.options.speculativeMs);
@@ -5930,7 +6385,7 @@ var VoiceEngine = class _VoiceEngine {
     };
     this.tts.newContext();
     this.tts.speak(phrase, false);
-    log10.debug(`backchannel: "${phrase}"`);
+    log12.debug(`backchannel: "${phrase}"`);
     this.diag("backchannel", { phrase });
     this.options.onBackchannel(phrase);
   }
@@ -5963,7 +6418,7 @@ var VoiceEngine = class _VoiceEngine {
     });
     if (idx < 0) return text;
     toks.splice(idx, 1);
-    log10.verbose(`stripped backchannel echo "${this.lastBcPhrase}" from dispatching final`);
+    log12.verbose(`stripped backchannel echo "${this.lastBcPhrase}" from dispatching final`);
     return toks.join(" ");
   }
   /** Merge a resumed utterance into the pending one, deduping any word-overlap. Soniox re-finalizes
@@ -6054,7 +6509,7 @@ var VoiceEngine = class _VoiceEngine {
     this.pendingUtt = this.mergeUtterance(this.pendingUtt, text);
     if (this.pendingTimer) this.clock.clearTimeout(this.pendingTimer);
     if (this.options.incompleteMergeMs && this.looksIncomplete(this.pendingUtt)) {
-      log10.verbose(`hold: incomplete utterance "${this.pendingUtt.slice(-40)}"`);
+      log12.verbose(`hold: incomplete utterance "${this.pendingUtt.slice(-40)}"`);
       this.diag("hold", { reason: "incomplete", tail: this.pendingUtt.slice(-40) });
       this.options.onHold();
       if (this.options.holdFiller && !this.speaking) this.speakFiller(this.options.holdFiller);
@@ -6089,13 +6544,13 @@ var VoiceEngine = class _VoiceEngine {
     if (text) {
       const flat = text.toLowerCase().replace(/[^a-z0-9]/g, "");
       if (flat && flat === this.lastDispatchFlat && !this.repliedSinceDispatch && this.clock.now() - this.lastDispatchAt < _VoiceEngine.DUP_FINAL_MS) {
-        log10.verbose(`dropped duplicate final "${text.slice(0, 40)}" (identical to the just-dispatched utterance, no reply between)`);
+        log12.verbose(`dropped duplicate final "${text.slice(0, 40)}" (identical to the just-dispatched utterance, no reply between)`);
         this.diag("utterance_drop", { reason: "dup_final", text: text.slice(0, 60) });
         return;
       }
       const refinal = this.refinalizes(text);
       if (refinal && this.repliedSinceDispatch) {
-        log10.verbose(`dropped re-finalization "${text.slice(0, 60)}" (superset of the just-dispatched utterance, reply already flowing)`);
+        log12.verbose(`dropped re-finalization "${text.slice(0, 60)}" (superset of the just-dispatched utterance, reply already flowing)`);
         this.diag("utterance_drop", { reason: "refinalized", text: text.slice(0, 60) });
         this.lastDispatchFlat = flat;
         this.lastDispatchWords = text.trim().split(/\s+/);
@@ -6255,7 +6710,7 @@ var SpokenSplitter = class {
 };
 
 // node_modules/@bod.ee/voice/src/adapters/soniox.ts
-var log11 = forComponent2("SonioxSTT");
+var log13 = forComponent2("SonioxSTT");
 var now = () => performance.now();
 var SonioxSTTOptions = class {
   auth = "";
@@ -6296,7 +6751,7 @@ var SonioxSTT = class {
       this.onDiag({ t: now(), kind, ...fields });
     } catch (e) {
       this.diagOn = false;
-      log11.debug(`onDiag threw \u2014 STT diagnostics disabled: ${e instanceof Error ? e.message : e}`);
+      log13.debug(`onDiag threw \u2014 STT diagnostics disabled: ${e instanceof Error ? e.message : e}`);
     }
   }
   lastChunkAt = 0;
@@ -6338,11 +6793,11 @@ var SonioxSTT = class {
     this.ws.onmessage = (ev) => this.handle(JSON.parse(String(ev.data)));
     this.ws.onclose = (ev) => {
       if (this.stopped) return;
-      log11.warn(`soniox ws closed (${ev.code} ${ev.reason || ""}) \u2014 reconnecting`);
+      log13.warn(`soniox ws closed (${ev.code} ${ev.reason || ""}) \u2014 reconnecting`);
       this.diag("stt_ws_closed", { code: ev.code, reason: String(ev.reason || ""), reconnecting: true });
       this.reset();
       this.connectWs().catch((e) => {
-        log11.error(`soniox reconnect failed: ${e.message}`);
+        log13.error(`soniox reconnect failed: ${e.message}`);
         this.diag("stt_reconnect_failed", { message: e.message });
       });
     };
@@ -6354,7 +6809,7 @@ var SonioxSTT = class {
     this.endpointTimer = setInterval(() => {
       const combined = (this.finalText + this.partialText).trim();
       if (!combined || now() - this.lastChangeAt < this.options.silenceEndpointMs) return;
-      if (this.firstTokenAt) log11.debug(`stt: ${Math.round(now() - this.firstTokenAt)}ms first-token\u2192silence-endpoint, "${combined.slice(0, 60)}"`);
+      if (this.firstTokenAt) log13.debug(`stt: ${Math.round(now() - this.firstTokenAt)}ms first-token\u2192silence-endpoint, "${combined.slice(0, 60)}"`);
       this.reset();
       this.onUtterance(combined, now());
     }, 120);
@@ -6366,7 +6821,7 @@ var SonioxSTT = class {
         if (this.stopped) return;
         const ref = this.lastChunkAt || this.startedChunksAt;
         if (now() - ref > noAudioMs) {
-          log11.error(`stt: no mic audio for >${Math.round(noAudioMs / 1e3)}s \u2014 capture device stopped delivering`);
+          log13.error(`stt: no mic audio for >${Math.round(noAudioMs / 1e3)}s \u2014 capture device stopped delivering`);
           this.diag("stt_watchdog_fatal", { noAudioMs });
           this.onFatal("microphone stopped delivering audio (try a different input device, e.g. AirPods, or check System Settings \u2192 Sound \u2192 Input)");
           this.stop();
@@ -6389,7 +6844,7 @@ var SonioxSTT = class {
   handle(m) {
     if (m.error_message) {
       this.diag("stt_error", { message: String(m.error_message), code: m.error_code });
-      return log11.error(`soniox: ${m.error_message}`);
+      return log13.error(`soniox: ${m.error_message}`);
     }
     let endpoint = false;
     for (const t of m.tokens ?? []) {
@@ -6406,7 +6861,7 @@ var SonioxSTT = class {
     this.onPartial(combined);
     if (endpoint && this.finalText.trim()) {
       const utterance = this.finalText.trim();
-      if (this.firstTokenAt) log11.debug(`stt: ${Math.round(now() - this.firstTokenAt)}ms first-token\u2192endpoint, "${utterance.slice(0, 60)}"`);
+      if (this.firstTokenAt) log13.debug(`stt: ${Math.round(now() - this.firstTokenAt)}ms first-token\u2192endpoint, "${utterance.slice(0, 60)}"`);
       this.reset();
       this.onUtterance(utterance, now());
     }
@@ -6428,7 +6883,7 @@ var SonioxSTT = class {
 };
 
 // node_modules/@bod.ee/voice/src/adapters/cartesia.ts
-var log12 = forComponent2("CartesiaTTS");
+var log14 = forComponent2("CartesiaTTS");
 var now2 = () => performance.now();
 var CartesiaTTSOptions = class {
   auth = "";
@@ -6464,7 +6919,7 @@ var CartesiaTTS = class _CartesiaTTS {
       this.onDiag({ t: now2(), kind, ...fields });
     } catch (e) {
       this.diagOn = false;
-      log12.debug(`onDiag threw \u2014 TTS diagnostics disabled: ${e instanceof Error ? e.message : e}`);
+      log14.debug(`onDiag threw \u2014 TTS diagnostics disabled: ${e instanceof Error ? e.message : e}`);
     }
   }
   firstAudioAt = 0;
@@ -6499,11 +6954,11 @@ var CartesiaTTS = class _CartesiaTTS {
       this.ws.onerror = (e) => rej(new Error(`cartesia ws: ${e.message || "connect failed"}`));
     });
     this.ws.onclose = (ev) => {
-      log12.warn(`cartesia ws closed (${ev.code} ${ev.reason || ""})`);
+      log14.warn(`cartesia ws closed (${ev.code} ${ev.reason || ""})`);
       this.diag("tts_ws_closed", { code: ev.code, reason: String(ev.reason || ""), reconnecting: !this.closed });
       if (!this.closed) {
         this.connecting = this.doConnect().catch((e) => {
-          log12.error(`cartesia reconnect failed: ${e.message}`);
+          log14.error(`cartesia reconnect failed: ${e.message}`);
           this.diag("tts_reconnect_failed", { message: e.message });
         });
       }
@@ -6531,12 +6986,12 @@ var CartesiaTTS = class _CartesiaTTS {
           this.down = true;
           this.downAt = now2();
           this.consecutiveOk = 0;
-          log12.warn(`TTS circuit breaker open \u2014 ${this.consecutiveErrors} consecutive errors, switching to text-only`);
+          log14.warn(`TTS circuit breaker open \u2014 ${this.consecutiveErrors} consecutive errors, switching to text-only`);
           this.diag("tts_breaker_open", { errors: this.consecutiveErrors });
           this.onDone();
           this.startProbe();
         } else if (!this.down) {
-          (/No valid transcripts/i.test(m.message || "") ? log12.debug : log12.warn)(`cartesia: ${JSON.stringify(m)}`);
+          (/No valid transcripts/i.test(m.message || "") ? log14.debug : log14.warn)(`cartesia: ${JSON.stringify(m)}`);
         }
       }
     };
@@ -6551,7 +7006,7 @@ var CartesiaTTS = class _CartesiaTTS {
     this.stopProbe();
     const downMs = this.downAt ? now2() - this.downAt : 0;
     this.diag("tts_breaker_close", { downMs: Math.round(downMs) });
-    (downMs < 2e3 ? log12.debug : log12.info)(`TTS recovered${downMs ? ` (down ${downMs}ms)` : ""}`);
+    (downMs < 2e3 ? log14.debug : log14.info)(`TTS recovered${downMs ? ` (down ${downMs}ms)` : ""}`);
   }
   /** Ensure the WS is open before sending — reconnects if idle-closed. */
   async ensureConnected() {
@@ -6642,7 +7097,7 @@ configureLogging((name) => {
 });
 
 // src/duplex.ts
-var log13 = forComponent("DuplexAgent");
+var log15 = forComponent("DuplexAgent");
 function describeCall(call) {
   const v = call.args && Object.values(call.args).find((x) => typeof x === "string" && x.trim());
   const hint = v ? ` (${String(v).replace(/\s+/g, " ").trim().slice(0, 48)})` : "";
@@ -6853,7 +7308,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
           const m = this.reflexBuf.match(RESERVED_EVENT_MARKER) ?? this.reflexBuf.match(RESERVED_EVENT_OPENER);
           if (m) {
             this.fabricationCut = true;
-            log13.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
+            log15.warn(`reflex fabricated a [task \u2026] event in its spoken stream \u2014 cutting it (kept ${m.index} chars)`);
             const safe = this.reflexBuf.slice(this.reflexForwarded, m.index);
             if (!safe) return;
             if (safe.trim()) this.spokeThisTurn = true;
@@ -6946,7 +7401,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     return {
       preToolUse: (call) => {
         if (this.spec?.state === "pending" && !_DuplexAgent.SPEC_SAFE_TOOLS.has(call.name)) {
-          log13.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
+          log15.verbose(`speculation aborted: reflex called ${call.name} on unconfirmed input`);
           this.abortSpeculation();
           return { block: true, reason: "Speculative turn aborted." };
         }
@@ -6984,7 +7439,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     try {
       await this.voice.send(fallback ? "[reminder] You said nothing to the user this turn. Tell them, in ONE short spoken sentence, what just happened \u2014 no tools." : dispatched ? "[reminder] You dispatched a task but said nothing to the user. Say ONE short spoken acknowledgement now \u2014 no tools." : "[reminder] You said nothing to the user this turn. Give your ONE short spoken reply now \u2014 no tools.");
     } catch (e) {
-      log13.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
+      log15.warn(`ack nudge failed: ${e instanceof Error ? e.message : e}`);
     } finally {
       this.nudging = false;
     }
@@ -7077,7 +7532,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       try {
         res = await this.voice.send(spec.text);
       } catch (e) {
-        log13.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
+        log15.warn(`speculative turn failed: ${e instanceof Error ? e.message : e}`);
       } finally {
         this.voice.options.signal = prevSignal;
       }
@@ -7091,7 +7546,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       if (d === "abort") {
         if (this.voice.transcript.length > base) this.voice.transcript.length = base;
         this.speculativeAbortedCalls++;
-        log13.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
+        log15.verbose(`speculation aborted (${this.speculativeAbortedCalls} total): "${spec.text.slice(0, 50)}"`);
         if (this.spec === spec) this.spec = void 0;
         return res ?? empty;
       }
@@ -7356,7 +7811,7 @@ Another agent just implemented the above. Independently check the CURRENT state
     this.notify("task_verify", `task ${id}: verifying`, { id });
     const cres = await new Agent(checkerOpts).run(checkBrief);
     if (cres.finishReason !== "stop") {
-      log13.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
+      log15.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
       this.notify("task_verify", `task ${id}: verify inconclusive (${cres.finishReason})`, { id, finishReason: cres.finishReason });
     }
     const sum = (a = 0, b = 0) => a + b;
@@ -7422,14 +7877,14 @@ Another agent just implemented the above. Independently check the CURRENT state
    *  '[task <id> asks] …' and resolves with the user's answer via AnswerTask — or '' on timeout/
    *  task settle (callers map '' to deny / best-judgment). Workers never block forever. */
   parkQuestion(askId, question) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       let settled = false;
       const finish = (answer) => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
         this.pendingAsks.delete(askId);
-        resolve(answer);
+        resolve2(answer);
       };
       const timer = setTimeout(() => {
         this.notify("task_ask_timeout", `task ${askId}: question timed out \u2014 proceeding without an answer`);
@@ -7491,8 +7946,8 @@ Another agent just implemented the above. Independently check the CURRENT state
     }
     rec.status = "done";
     rec.result = res.text;
-    const incomplete = res.finishReason !== "stop";
-    log13.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
+    const incomplete = res.finishReason !== "stop" && res.finishReason !== "empty";
+    log15.verbose(`task ${id} done (${res.steps} steps${incomplete ? `, INCOMPLETE: ${res.finishReason}` : ""})`);
     this.notify("task_done", `task ${id} (${rec.label}) completed`, {
       id,
       text: res.text,
@@ -7534,14 +7989,14 @@ Another agent just implemented the above. Independently check the CURRENT state
   foldIfSuperseded(rec, note) {
     if (!(rec.deliveryParked && this.suppressParkedResume)) return false;
     if (note.trim()) this.voice.transcript.push({ role: "assistant", content: note });
-    log13.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
+    log15.verbose(`task ${rec.id} settled but superseded (${rec.status}) \u2014 folded into transcript, not voiced`);
     return true;
   }
   failTask(rec, msg) {
     this.dropAsk(rec.id);
     rec.status = "error";
     rec.result = msg;
-    log13.warn(`task ${rec.id} failed: ${msg}`);
+    log15.warn(`task ${rec.id} failed: ${msg}`);
     this.notify("task_error", `task ${rec.id} (${rec.label}) failed: ${msg}`);
     if (this.foldIfSuperseded(rec, `The "${rec.label}" task failed: ${msg}`)) return;
     this.queueRevoice(this.integrationPrompt(rec, "error", msg, "error"), true);
@@ -7846,11 +8301,11 @@ function buildMcpCatalog(servers) {
   }
   return { specs, routes };
 }
-function searchOverCatalog(servers, specs, routes, resolve, options) {
+function searchOverCatalog(servers, specs, routes, resolve2, options) {
   const tools = specs.length ? makeMcpToolSearch(specs, (name, args) => {
     const r = routes.get(name);
     if (!r) throw new Error(`unknown MCP tool '${name}' \u2014 use ToolSearch to find valid names`);
-    return resolve(r.server, r.rawName, args ?? {});
+    return resolve2(r.server, r.rawName, args ?? {});
   }, options) : [];
   return { tools, serverNames: servers, toolCount: specs.length };
 }
@@ -7859,9 +8314,9 @@ function makeMcpToolSearchFromMounted(mounted, options) {
   const byName = new Map(mounted.map((m) => [m.name, m]));
   return searchOverCatalog(mounted.map((m) => m.name), specs, routes, (server, rawName, args) => byName.get(server).client.callTool(rawName, args), options);
 }
-function makeLazyMcpToolSearch(servers, resolve, options) {
+function makeLazyMcpToolSearch(servers, resolve2, options) {
   const { specs, routes } = buildMcpCatalog(servers);
-  return searchOverCatalog(servers.map((s) => s.name), specs, routes, resolve, options);
+  return searchOverCatalog(servers.map((s) => s.name), specs, routes, resolve2, options);
 }
 
 // src/hooks.ts
@@ -7920,6 +8375,7 @@ var RecordingLifecycle = class {
 
 // src/index.ts
 init_logging();
+init_llm();
 import { MemFilesystem as MemFilesystem3, IndexedDbFilesystem, CommandExecutor as CommandExecutor2, registerHeadlessCommands as registerHeadlessCommands2 } from "@livx.cc/wcli/core";
 export {
   Agent,
@@ -7934,6 +8390,8 @@ export {
   DuplexAgent,
   DuplexAgentOptions,
   FakeAIClient,
+  IMAGE_ELIDE_STUB,
+  IMAGE_REF_SCHEME,
   IndexedDbFilesystem,
   JailOptions,
   JailedFilesystem,
@@ -7968,19 +8426,26 @@ export {
   checkpointTool,
   checkpointTools,
   cleanupWorktree,
+  clearImageRefs,
   compileSynthesizedTool,
   composeHooks,
+  contentBytes,
   contentText,
   cronMatches,
   decodeDdgUrl,
   defaultTools,
   diskAgentOptions,
   editTool,
+  elideImages,
+  elideInlineImages,
+  elideStaleImages,
   enterWorktree,
+  estimateTokens,
   exitSessionTool,
   exitWorktree,
   expandCommand,
   expandEntry,
+  expandImagesForSend,
   expandTemplate,
   findGitRoot,
   forComponent,
@@ -7992,6 +8457,8 @@ export {
   htmlToText,
   idfWeights,
   imagePart,
+  imageRefPart,
+  imageRefResult,
   lessonCapture,
   loadAgents,
   loadCommands,
@@ -8013,12 +8480,17 @@ export {
   makeWebSearchTool,
   mcpToolToAgentTool,
   mcpToolsToAgentTools,
+  messageHasImage,
+  messageHasImageRef,
+  messageHasInlineImage,
+  mintImageRef,
   mkdirp,
   modelShortLabel,
   multiEditTool,
   nextCronAfter,
   parseCron,
   parseDdgHtml,
+  parseImageRef,
   planMode,
   raceAttempts,
   readTool,
@@ -8026,6 +8498,7 @@ export {
   reflectOnRun,
   registerHeadlessCommands2 as registerHeadlessCommands,
   relevanceScore,
+  remintImageRefs,
   repoIndex,
   repoMapTool,
   resolveAuth,
@@ -8035,11 +8508,14 @@ export {
   sandboxAgentOptions,
   scanCommands,
   scanSkills,
+  sendBytes,
+  sendBytesPer,
   slugify,
   toWireTools,
   todoWriteTool,
   tokenize,
   toolCall,
+  toolImageRef,
   toolRegistry,
   toolsByName,
   topByRelevance,