@noxsoft/anima 5.1.1 → 6.0.0

package/dist/{pi-embedded-fZ1QlJ9C.js → pi-embedded-DfbM3fAT.js}

@@ -1,27 +1,28 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { a as resolveOAuthDir, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-B-AkG5FD.js";
-import { A as isAcpSessionKey, C as normalizeAccountId$1, D as resolveThreadSessionKeys, E as resolveAgentIdFromSessionKey, M as parseAgentSessionKey, N as resolveThreadParentSessionKey, O as sanitizeAgentId, S as classifySessionKeyShape, T as normalizeMainKey, _ as DEFAULT_AGENT_ID, b as buildAgentPeerSessionKey, f as loadWorkspaceBootstrapFiles, g as DEFAULT_ACCOUNT_ID, j as isSubagentSessionKey, k as getSubagentDepth, l as ensureAgentWorkspace, m as resolveAnimaPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, u as filterBootstrapFilesForSession, v as DEFAULT_MAIN_KEY, w as normalizeAgentId, y as buildAgentMainSessionKey } from "./workspace-Cvio8QlZ.js";
-import { A as normalizeLogLevel, D as getChildLogger, E as theme, T as isRich, a as unregisterActiveProgressLine, b as setVerbose, d as normalizeChannelId, h as setActivePluginRegistry, i as registerActiveProgressLine, n as defaultRuntime, p as getActivePluginRegistry, r as clearActiveProgressLine, s as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, u as normalizeAnyChannelId, v as logVerbose, w as colorize, x as shouldLogVerbose } from "./subsystem-BP2l3SHn.js";
-import { D as shortenHomePath, E as shortenHomeInString, O as sleep, T as safeParseJson, _ as isRecord, a as logDebug, c as logWarn, d as clampInt, g as isPlainObject, h as formatTerminalLink, i as spawnWithFallback, j as truncateUtf16Safe, k as sliceUtf16Safe, l as CONFIG_DIR, m as escapeRegExp, n as runExec, o as logError, p as ensureDir$3, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, w as resolveUserPath } from "./exec-CEFTijVj.js";
-import { c as resolveDefaultAgentId, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds } from "./agent-scope-BHR6uOLT.js";
-import { A as supportsXHighThinking, At as assertSandboxPath, B as extractDeliveryInfo, Bt as normalizeToolName, C as listThinkingLevels, Ct as DEFAULT_UPLOAD_DIR, D as normalizeUsageDisplay, Dt as buildWorkspaceSkillSnapshot, E as normalizeThinkLevel, Et as buildWorkspaceSkillCommandSpecs, F as isLikelyContextOverflowError, Ft as applyOwnerOnlyToolPolicy, G as updateLastRoute, Gt as buildBootstrapContextFiles, H as loadSessionStore, Ht as stripPluginOnlyAllowlist, I as isTransientHttpError, It as buildPluginToolGroups, J as deliveryContextFromSession, Jt as HEARTBEAT_TOKEN, K as updateSessionStore, Kt as resolveBootstrapMaxChars, L as sanitizeUserFacingText, Lt as collectExplicitAllowlist, M as isCompactionFailureError, Mt as ensureBrowserControlAuth, N as isContextOverflowError, Nt as resolveBrowserControlAuth, O as normalizeVerboseLevel, Ot as resolvePluginSkillDirs, P as isFailoverErrorMessage, Pt as resolveSandboxConfigForAgent, Q as normalizeSessionDeliveryFields, R as ensureSandboxWorkspaceForSession, Rt as expandPolicyWithPluginGroups, S as formatXHighModelHint, St as saveMediaBuffer, T as normalizeReasoningLevel, Tt as getBridgeAuthForPort, U as readSessionUpdatedAt, Ut as compileGlobPatterns, V as appendAssistantMessageToSessionTranscript, Vt as resolveToolProfilePolicy, W as recordSessionMetaFromInbound, Wt as matchesAnyGlobPattern, X as mergeDeliveryContext, Xt as isSilentReplyText, Y as deliveryContextKey, Yt as SILENT_REPLY_TOKEN, Z as normalizeDeliveryContext, _ as throwIfAborted, _t as createBrowserRouteContext, at as resolveThreadFlag, b as initializeGlobalHookRunner, bt as resolveProfile, c as applyReplyThreading, ct as canonicalizeMainSessionAlias, d as shouldSuppressMessagingToolReplies, dt as deriveSessionMetaPatch, et as resolveSessionKey$1, f as createReplyToModeFilterForChannel, ft as getChannelDock, g as normalizeTargetForProvider, gt as resolveGroupSessionKey, h as normalizeChannelTargetInput, ht as normalizeChatType, it as resolveSessionResetType, j as classifyFailoverReason, jt as resolveSandboxedMediaSource, k as resolveResponseUsageMode, kt as assertMediaNotDataUrl, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, mt as resolveConversationLabel, nt as resolveChannelResetConfig, o as normalizeReplyPayloadsForDelivery, ot as DEFAULT_RESET_TRIGGERS, p as resolveReplyToMode, pt as listChannelDocks, q as updateSessionStoreEntry, qt as resolveBootstrapTotalMaxChars, rt as resolveSessionResetPolicy, s as applyReplyTagsToPayload, st as resolveFreshSessionTotalTokens, t as deliverOutboundPayloads, tt as evaluateSessionFreshness, u as isRenderablePayload, ut as resolveMainSessionKey, v as parseReplyDirectives, vt as registerBrowserRoutes, w as normalizeElevatedLevel, wt as resolvePathsWithinRoot, x as formatThinkingLevels, xt as getMediaDir, y as getGlobalHookRunner, yt as resolveBrowserConfig, z as resolveSandboxRuntimeStatus, zt as expandToolGroups } from "./deliver-CoQP7nSu.js";
+import { A as isAcpSessionKey, C as normalizeAccountId$1, D as resolveThreadSessionKeys, E as resolveAgentIdFromSessionKey, M as parseAgentSessionKey, N as resolveThreadParentSessionKey, O as sanitizeAgentId, S as classifySessionKeyShape, T as normalizeMainKey, _ as DEFAULT_AGENT_ID, b as buildAgentPeerSessionKey, f as loadWorkspaceBootstrapFiles, g as DEFAULT_ACCOUNT_ID, j as isSubagentSessionKey, k as getSubagentDepth, l as ensureAgentWorkspace, m as resolveAnimaPackageRoot, n as DEFAULT_AGENT_WORKSPACE_DIR, u as filterBootstrapFilesForSession, v as DEFAULT_MAIN_KEY, w as normalizeAgentId, y as buildAgentMainSessionKey } from "./workspace-BFIZCnGo.js";
+import { A as normalizeLogLevel, D as getChildLogger, E as theme, T as isRich, a as unregisterActiveProgressLine, b as setVerbose, d as normalizeChannelId, h as setActivePluginRegistry, i as registerActiveProgressLine, n as defaultRuntime, p as getActivePluginRegistry, r as clearActiveProgressLine, s as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, u as normalizeAnyChannelId, v as logVerbose, w as colorize, x as shouldLogVerbose } from "./subsystem-D1AJZPgG.js";
+import { D as shortenHomePath, E as shortenHomeInString, O as sleep, T as safeParseJson, _ as isRecord, a as logDebug, c as logWarn, d as clampInt, g as isPlainObject, h as formatTerminalLink, i as spawnWithFallback, j as truncateUtf16Safe, k as sliceUtf16Safe, l as CONFIG_DIR, m as escapeRegExp, n as runExec, o as logError, p as ensureDir$3, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, w as resolveUserPath } from "./exec-DUzVF5_D.js";
+import { c as resolveDefaultAgentId, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds } from "./agent-scope-CxBzAozu.js";
+import { A as supportsXHighThinking, At as assertSandboxPath, B as extractDeliveryInfo, Bt as normalizeToolName, C as listThinkingLevels, Ct as DEFAULT_UPLOAD_DIR, D as normalizeUsageDisplay, Dt as buildWorkspaceSkillSnapshot, E as normalizeThinkLevel, Et as buildWorkspaceSkillCommandSpecs, F as isLikelyContextOverflowError, Ft as applyOwnerOnlyToolPolicy, G as updateLastRoute, Gt as buildBootstrapContextFiles, H as loadSessionStore, Ht as stripPluginOnlyAllowlist, I as isTransientHttpError, It as buildPluginToolGroups, J as deliveryContextFromSession, Jt as HEARTBEAT_TOKEN, K as updateSessionStore, Kt as resolveBootstrapMaxChars, L as sanitizeUserFacingText, Lt as collectExplicitAllowlist, M as isCompactionFailureError, Mt as ensureBrowserControlAuth, N as isContextOverflowError, Nt as resolveBrowserControlAuth, O as normalizeVerboseLevel, Ot as resolvePluginSkillDirs, P as isFailoverErrorMessage, Pt as resolveSandboxConfigForAgent, Q as normalizeSessionDeliveryFields, R as ensureSandboxWorkspaceForSession, Rt as expandPolicyWithPluginGroups, S as formatXHighModelHint, St as saveMediaBuffer, T as normalizeReasoningLevel, Tt as getBridgeAuthForPort, U as readSessionUpdatedAt, Ut as compileGlobPatterns, V as appendAssistantMessageToSessionTranscript, Vt as resolveToolProfilePolicy, W as recordSessionMetaFromInbound, Wt as matchesAnyGlobPattern, X as mergeDeliveryContext, Xt as isSilentReplyText, Y as deliveryContextKey, Yt as SILENT_REPLY_TOKEN, Z as normalizeDeliveryContext, _ as throwIfAborted, _t as createBrowserRouteContext, at as resolveThreadFlag, b as initializeGlobalHookRunner, bt as resolveProfile, c as applyReplyThreading, ct as canonicalizeMainSessionAlias, d as shouldSuppressMessagingToolReplies, dt as deriveSessionMetaPatch, et as resolveSessionKey$1, f as createReplyToModeFilterForChannel, ft as getChannelDock, g as normalizeTargetForProvider, gt as resolveGroupSessionKey, h as normalizeChannelTargetInput, ht as normalizeChatType, it as resolveSessionResetType, j as classifyFailoverReason, jt as resolveSandboxedMediaSource, k as resolveResponseUsageMode, kt as assertMediaNotDataUrl, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, mt as resolveConversationLabel, nt as resolveChannelResetConfig, o as normalizeReplyPayloadsForDelivery, ot as DEFAULT_RESET_TRIGGERS, p as resolveReplyToMode, pt as listChannelDocks, q as updateSessionStoreEntry, qt as resolveBootstrapTotalMaxChars, rt as resolveSessionResetPolicy, s as applyReplyTagsToPayload, st as resolveFreshSessionTotalTokens, t as deliverOutboundPayloads, tt as evaluateSessionFreshness, u as isRenderablePayload, ut as resolveMainSessionKey, v as parseReplyDirectives, vt as registerBrowserRoutes, w as normalizeElevatedLevel, wt as resolvePathsWithinRoot, x as formatThinkingLevels, xt as getMediaDir, y as getGlobalHookRunner, yt as resolveBrowserConfig, z as resolveSandboxRuntimeStatus, zt as expandToolGroups } from "./deliver-d-CaN0uL.js";
 import { i as triggerInternalHook, r as registerInternalHook, t as createInternalHookEvent } from "./internal-hooks-CWw3Hgeu.js";
-import { C as unsetConfigValueAtPath, S as setConfigValueAtPath, _ as resetConfigOverrides, a as writeConfigFile, b as getConfigValueAtPath, c as parseDurationMs, d as discoverAnimaPlugins, f as applyTestPluginDefaults, g as getConfigOverrides, h as resolveMemorySlotDecision, i as resolveConfigSnapshotHash, l as validateJsonSchemaValue, m as resolveEnableState, n as loadConfig, o as validateConfigObjectWithPlugins, p as normalizePluginsConfig, r as readConfigFileSnapshot, u as loadPluginManifestRegistry, v as setConfigOverride, w as VERSION, x as parseConfigPath, y as unsetConfigOverride } from "./config-BfhpauV9.js";
-import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell, s as isTruthyEnvValue } from "./shell-env-DaSbgZYX.js";
-import { a as modelKey, d as resolveModelRefFromString, f as resolveThinkingDefault, h as DEFAULT_PROVIDER, i as isCliProvider, l as resolveConfiguredModelRef, m as DEFAULT_MODEL, n as buildConfiguredAllowlistKeys, o as normalizeModelRef, p as DEFAULT_CONTEXT_TOKENS, r as buildModelAliasIndex, s as normalizeProviderId, t as buildAllowedModelSet, u as resolveDefaultModelForAgent } from "./model-selection-BuMFehML.js";
-import { S as pickPrimaryTailnetIPv4, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, x as pickPrimaryLanIPv4, y as rawDataToString } from "./chrome-CkSIMI7j.js";
+import { C as unsetConfigValueAtPath, S as setConfigValueAtPath, _ as resetConfigOverrides, a as writeConfigFile, b as getConfigValueAtPath, c as parseDurationMs, d as discoverAnimaPlugins, f as applyTestPluginDefaults, g as getConfigOverrides, h as resolveMemorySlotDecision, i as resolveConfigSnapshotHash, l as validateJsonSchemaValue, m as resolveEnableState, n as loadConfig, o as validateConfigObjectWithPlugins, p as normalizePluginsConfig, r as readConfigFileSnapshot, u as loadPluginManifestRegistry, v as setConfigOverride, w as VERSION, x as parseConfigPath, y as unsetConfigOverride } from "./config-CweTwOtr.js";
+import { i as resolveShellEnvFallbackTimeoutMs, n as getShellPathFromLoginShell, s as isTruthyEnvValue } from "./shell-env-HkVWMh--.js";
+import { a as modelKey, d as resolveDefaultModelForAgent, f as resolveModelRefFromString, g as DEFAULT_PROVIDER, h as DEFAULT_MODEL, i as isCliProvider, m as DEFAULT_CONTEXT_TOKENS, n as buildConfiguredAllowlistKeys, o as normalizeModelRef, p as resolveThinkingDefault, r as buildModelAliasIndex, s as normalizeProviderId, t as buildAllowedModelSet, u as resolveConfiguredModelRef } from "./model-selection-DjsJGv1R.js";
+import { S as pickPrimaryTailnetIPv4, T as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as ensureChromeExtensionRelayServer, x as pickPrimaryLanIPv4, y as rawDataToString } from "./chrome-DLUBPBPz.js";
 import { n as resolveCliName, t as formatCliCommand } from "./command-format-GLYKXXl-.js";
 import { n as formatErrorMessage } from "./errors-UbDRvfEx.js";
-import { A as detectMime, C as GATEWAY_CLIENT_MODES, E as getImageMetadata, F as kindFromMime, H as isBlockedHostname, I as normalizeMimeType$1, M as getFileExtension, N as imageMimeFromFormat, P as isAudioFileName, R as mediaKindFromMime, S as GATEWAY_CLIENT_IDS, U as isPrivateIpAddress, _ as isMarkdownCapableMessageChannel, a as chunkText, b as resolveGatewayMessageChannel, c as resolveTextChunkLimit, d as listChannelPlugins, f as normalizeChannelId$1, g as isInternalMessageChannel, i as chunkMarkdownTextWithMode, j as extensionForMime, k as resizeToJpeg, m as isDeliverableMessageChannel, o as chunkTextWithMode, p as INTERNAL_MESSAGE_CHANNEL, r as chunkMarkdownText, s as resolveChunkMode, t as chunkByNewline, u as getChannelPlugin, v as listDeliverableMessageChannels, w as GATEWAY_CLIENT_NAMES, x as resolveMessageChannel, y as normalizeMessageChannel, z as SsrFBlockedError } from "./chunk-5llVa3wc.js";
-import { a as resolveSessionTranscriptPathInDir, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath$1 } from "./paths-CLxC7m0Z.js";
-import { t as sanitizeToolResultImages } from "./tool-images-CUx-9B7B.js";
-import { a as listProfilesForProvider, c as resolveAuthStorePathForDisplay, d as saveJsonFile, f as withFileLock$1, h as normalizeSecretInput, i as resolveApiKeyForProfile, l as resolveAnimaAgentDir, n as resolveAuthProfileOrder, o as ensureAuthProfileStore, p as resolveAuthProfileDisplayLabel, r as isProfileInCooldown, s as loadAuthProfileStore, u as loadJsonFile } from "./auth-profiles-Da39zGOD.js";
-import { a as requireApiKey, c as resolveModelAuthMode, i as getCustomProviderApiKey, n as resolveMemorySearchConfig, o as resolveApiKeyForProvider, r as getApiKeyForModel, s as resolveEnvApiKey } from "./manager-kdmVqWxk.js";
-import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-D_h-b5t2.js";
-import { a as readNumberParam, c as readStringParam, i as jsonResult, n as imageResult, r as imageResultFromFile, s as readStringArrayParam } from "./common-CKoFTq83.js";
-import { a as resolveMarkdownTableMode, c as loadWebMedia, d as readResponseWithLimit, f as fetchWithSsrFGuard, i as convertMarkdownTables, l as MediaFetchError, m as fetchWithTimeout, o as normalizePollInput, p as bindAbortRelay, s as getDefaultLocalRoots, t as getActiveWebListener, u as fetchRemoteMedia } from "./active-listener-B7OcwSxK.js";
+import { A as detectMime, C as GATEWAY_CLIENT_MODES, E as getImageMetadata, F as kindFromMime, H as isBlockedHostname, I as normalizeMimeType$1, M as getFileExtension, N as imageMimeFromFormat, P as isAudioFileName, R as mediaKindFromMime, S as GATEWAY_CLIENT_IDS, U as isPrivateIpAddress, _ as isMarkdownCapableMessageChannel, a as chunkText, b as resolveGatewayMessageChannel, c as resolveTextChunkLimit, d as listChannelPlugins, f as normalizeChannelId$1, g as isInternalMessageChannel, i as chunkMarkdownTextWithMode, j as extensionForMime, k as resizeToJpeg, m as isDeliverableMessageChannel, o as chunkTextWithMode, p as INTERNAL_MESSAGE_CHANNEL, r as chunkMarkdownText, s as resolveChunkMode, t as chunkByNewline, u as getChannelPlugin, v as listDeliverableMessageChannels, w as GATEWAY_CLIENT_NAMES, x as resolveMessageChannel, y as normalizeMessageChannel, z as SsrFBlockedError } from "./chunk-B4Kx-ocg.js";
+import { a as resolveSessionTranscriptPathInDir, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionFilePathOptions, s as resolveStorePath$1 } from "./paths-Q6h5HODL.js";
+import { t as sanitizeToolResultImages } from "./tool-images-2qproko3.js";
+import { _ as normalizeSecretInput, a as markAuthProfileUsed, c as markAuthProfileGood, d as resolveAnimaAgentDir, f as loadJsonFile, h as resolveAuthProfileDisplayLabel, i as markAuthProfileFailure, l as ensureAuthProfileStore, m as withFileLock$1, n as resolveAuthProfileOrder, o as resolveApiKeyForProfile, p as saveJsonFile, r as isProfileInCooldown, s as listProfilesForProvider, u as resolveAuthStorePathForDisplay } from "./auth-profiles-DtWUl1-k.js";
+import { a as requireApiKey, c as resolveModelAuthMode, i as getCustomProviderApiKey, n as resolveMemorySearchConfig, o as resolveApiKeyForProvider, r as getApiKeyForModel, s as resolveEnvApiKey } from "./manager-b_aZwo00.js";
+import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-CZ1vD4VS.js";
+import { n as createAsyncLock } from "./soul-Bt8UNmTq.js";
+import { a as readNumberParam, c as readStringParam, i as jsonResult, n as imageResult, r as imageResultFromFile, s as readStringArrayParam } from "./common-Bf_TG87Y.js";
+import { a as resolveMarkdownTableMode, c as loadWebMedia, d as readResponseWithLimit, f as fetchWithSsrFGuard, i as convertMarkdownTables, l as MediaFetchError, m as fetchWithTimeout, o as normalizePollInput, p as bindAbortRelay, s as getDefaultLocalRoots, t as getActiveWebListener, u as fetchRemoteMedia } from "./active-listener-D2r8IO7g.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-62lQTR6C.js";
-import { d as webAuthExists, i as logoutWeb, n as getWebAuthAgeMs, r as logWebSelfId, s as readWebSelfId } from "./auth-store-Bl6rpC4E.js";
+import { d as webAuthExists, i as logoutWeb, n as getWebAuthAgeMs, r as logWebSelfId, s as readWebSelfId } from "./auth-store-Bd0GoqEL.js";
 import { createRequire } from "node:module";
 import * as fs$2 from "node:fs/promises";
 import fs from "node:fs/promises";
@@ -2439,6 +2440,17 @@ async function resolveAnimaDocsPath(params) {
 	return fs$1.existsSync(packageDocs) ? packageDocs : null;
 }
 
+//#endregion
+//#region src/agents/runner-capabilities.ts
+const CAPABILITY_HINTS = {
+	"cli-native": "Use your native CLI capabilities when needed. Do not assume external MCP-style tools exist unless they are explicitly provided.",
+	"local-tools": "Use only the tools explicitly provided in this session. Do not assume any other external MCP-style tools exist.",
+	disabled: "Tools are disabled in this session. Do not call tools."
+};
+function appendRunnerCapabilityPrompt(prompt, mode) {
+	return [prompt?.trim(), CAPABILITY_HINTS[mode]].filter(Boolean).join("\n");
+}
+
 //#endregion
 //#region src/logging/redact-identifier.ts
 function sha256HexPrefix(value, len = 12) {
@@ -2508,6 +2520,18 @@ function resolveRunWorkspaceDir(params) {
 
 //#endregion
 //#region src/agents/anthropic-direct-runner.ts
+/**
+* Anthropic Direct API Runner
+*
+* Makes calls directly to api.anthropic.com without needing the claude CLI
+* binary to be installed or logged in. Works with any valid token:
+*
+*   sk-ant-api01-...  (Console API key)
+*   sk-ant-oat01-...  (Claude Code OAuth access token)
+*
+* This runner is automatically used when an `anthropic:default` token credential
+* is present in the auth store and the claude CLI is unavailable or not logged in.
+*/
 const log$9 = createSubsystemLogger("agent/anthropic-direct");
 const MODEL_MAP$1 = {
 	opus: "claude-opus-4-5",
@@ -2583,7 +2607,7 @@ async function runAnthropicDirectAgent(params) {
 		cwd: process.cwd(),
 		moduleUrl: import.meta.url
 	});
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim(), "Tools are disabled in this session. Do not call tools."].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "disabled");
 	const systemPrompt = buildSystemPrompt({
 		workspaceDir,
 		config: params.config,
@@ -2623,7 +2647,7 @@ async function runAnthropicDirectAgent(params) {
 				"x-api-key": params.token,
 				"anthropic-version": "2023-06-01",
 				"content-type": "application/json",
-				"user-agent": `anima/3.0.5 (direct-runner; ${os.platform()})`
+				"user-agent": `anima/5.1.3 (direct-runner; ${os.platform()})`
 			},
 			body: JSON.stringify(requestBody),
 			signal: controller.signal
@@ -2656,7 +2680,6 @@ async function runAnthropicDirectAgent(params) {
 			stopReason: data.stop_reason,
 			contentTypes: (data.content ?? []).map((b) => b.type)
 		});
-		await params.onAssistantMessageStart?.();
 		if (outputText && params.onPartialReply) await params.onPartialReply({ text: outputText });
 		history.messages.push({
 			role: "assistant",
@@ -2776,8 +2799,7 @@ const DEFAULT_CODEX_BACKEND = {
 		"--json",
 		"--color",
 		"never",
-		"--sandbox",
-		"danger-full-access",
+		"--dangerously-bypass-approvals-and-sandbox",
 		"--skip-git-repo-check"
 	],
 	resumeArgs: [
@@ -2855,6 +2877,7 @@ const LEGACY_CODEX_RESUME_ARGS = [
 	"read-only",
 	"--skip-git-repo-check"
 ];
+const CODEX_BYPASS_FLAG = "--dangerously-bypass-approvals-and-sandbox";
 function normalizeBackendKey(key) {
 	return normalizeProviderId(key);
 }
@@ -2891,29 +2914,43 @@ function argsEqual(left, right) {
 	if (!left || !right || left.length !== right.length) return false;
 	return left.every((entry, index) => entry === right[index]);
 }
-function resolveCliSandboxArg(args) {
+function resolveCodexExecModeArg(args) {
 	if (!args) return;
+	if (args.includes(CODEX_BYPASS_FLAG)) return CODEX_BYPASS_FLAG;
 	const index = args.indexOf("--sandbox");
 	const value = index >= 0 ? args[index + 1] : void 0;
-	return typeof value === "string" && value.trim() ? value : void 0;
-}
-function setCliArgValue(args, flag, value) {
-	const nextArgs = [...args ?? []];
-	const index = nextArgs.indexOf(flag);
-	if (index >= 0 && nextArgs[index + 1]) {
-		nextArgs[index + 1] = value;
-		return nextArgs;
+	return value === "workspace-write" || value === "read-only" ? value : void 0;
+}
+function setCodexExecModeArgs(args, mode) {
+	const nextArgs = [];
+	const source = args ?? [];
+	for (let i = 0; i < source.length; i += 1) {
+		const entry = source[i];
+		if (entry === CODEX_BYPASS_FLAG) continue;
+		if (entry === "--sandbox") {
+			i += 1;
+			continue;
+		}
+		nextArgs.push(entry);
 	}
-	nextArgs.push(flag, value);
+	if (mode === CODEX_BYPASS_FLAG) nextArgs.push(CODEX_BYPASS_FLAG);
+	else nextArgs.push("--sandbox", mode);
 	return nextArgs;
 }
-function resolveManagedCodexSandbox(cfg) {
+function normalizeExecSecurity$2(execSecurity) {
+	const normalized = execSecurity?.trim().toLowerCase();
+	if (!normalized) return;
+	if (normalized === "deny") return "deny";
+	return "full";
+}
+function resolveManagedCodexExecMode(cfg, options) {
+	if (normalizeExecSecurity$2(options?.execSecurity) === "deny") return "read-only";
 	const workspaceAccess = cfg?.agents?.defaults?.sandbox?.workspaceAccess;
 	if (workspaceAccess === "ro") return "read-only";
 	if (workspaceAccess === "rw") return "workspace-write";
-	return "danger-full-access";
+	return CODEX_BYPASS_FLAG;
 }
-function resolveCliBackendConfig(provider, cfg) {
+function resolveCliBackendConfig(provider, cfg, options) {
 	const normalized = normalizeBackendKey(provider);
 	const configured = cfg?.agents?.defaults?.cliBackends ?? {};
 	if (CLAUDE_BACKEND_ALIAS_SET.has(normalized)) {
@@ -2939,9 +2976,9 @@ function resolveCliBackendConfig(provider, cfg) {
 			...merged,
 			resumeArgs: DEFAULT_CODEX_BACKEND.resumeArgs
 		};
-		if (!resolveCliSandboxArg(override?.args) || (override?.args ? argsEqual(override.args, LEGACY_CODEX_ARGS) : false)) merged = {
+		if (!resolveCodexExecModeArg(override?.args) || (override?.args ? argsEqual(override.args, LEGACY_CODEX_ARGS) : false)) merged = {
 			...merged,
-			args: setCliArgValue(merged.args, "--sandbox", resolveManagedCodexSandbox(cfg))
+			args: setCodexExecModeArgs(merged.args, resolveManagedCodexExecMode(cfg, options))
 		};
 		const command = merged.command?.trim();
 		if (!command) return null;
@@ -3120,14 +3157,14 @@ async function runCliAgent(params) {
 	const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
 	if (workspaceResolution.usedFallback) log$8.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
 	const workspaceDir = resolvedWorkspace;
-	const backendResolved = resolveCliBackendConfig(params.provider, params.config);
+	const backendResolved = resolveCliBackendConfig(params.provider, params.config, { execSecurity: params.sessionExecSecurity });
 	if (!backendResolved) throw new Error(`Unknown CLI backend: ${params.provider}`);
 	const backend = backendResolved.config;
-	const effectiveCliSandbox = resolveCliSandboxArg(backend.args);
+	const effectiveCodexExecMode = resolveCodexExecModeArg(backend.args);
 	const modelId = (params.model ?? "default").trim() || "default";
 	const normalizedModel = normalizeCliModel(modelId, backend);
 	const modelDisplay = `${params.provider}/${modelId}`;
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim(), "Tools are disabled in this session. Do not call tools."].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "cli-native");
 	const sessionLabel = params.sessionKey ?? params.sessionId;
 	const { contextFiles } = await resolveBootstrapContextForRun({
 		workspaceDir,
@@ -3174,15 +3211,24 @@ async function runCliAgent(params) {
 		const lines = (await readFile(params.sessionFile, "utf-8")).trim().split("\n");
 		const lastLine = lines[lines.length - 1];
 		if (lastLine) {
-			const effectiveSandbox = JSON.parse(lastLine).metadata?.effectiveSandbox;
-			const currentSandbox = effectiveCliSandbox;
-			if (effectiveSandbox && effectiveSandbox !== currentSandbox) {
-				log$8.info(`Codex sandbox changed (${effectiveSandbox} -> ${currentSandbox}); forcing session restart.`);
+			const parsed = JSON.parse(lastLine);
+			const previousMode = parsed.metadata?.effectiveCodexExecMode ?? parsed.metadata?.effectiveSandbox;
+			const currentMode = effectiveCodexExecMode;
+			if (!previousMode) {
+				log$8.info("Codex execution mode is unknown for the saved session; forcing session restart.");
+				useResume = false;
+				isNew = true;
+			} else if (previousMode !== currentMode) {
+				log$8.info(`Codex execution mode changed (${previousMode} -> ${currentMode}); forcing session restart.`);
 				useResume = false;
 				isNew = true;
 			}
 		}
-	} catch {}
+	} catch {
+		log$8.info("Codex session transcript is unavailable; forcing session restart.");
+		useResume = false;
+		isNew = true;
+	}
 	const sessionIdSent = cliSessionIdToSend ? useResume || Boolean(backend.sessionArg) || Boolean(backend.sessionArgs?.length) ? cliSessionIdToSend : void 0 : void 0;
 	const systemPromptArg = resolveSystemPromptUsage({
 		backend,
@@ -3298,8 +3344,9 @@ async function runCliAgent(params) {
 				if (stderr) log$8.debug(`cli stderr:\n${stderr}`);
 			}
 			if (result.code !== 0) {
-				const err = stderr || stdout || "CLI failed.";
-				const reason = classifyFailoverReason(err) ?? "unknown";
+				const timedOut = result.killed && result.signal === "SIGKILL";
+				const err = timedOut ? `Request timed out after ${params.timeoutMs}ms` : stderr || stdout || "CLI failed.";
+				const reason = timedOut ? "timeout" : classifyFailoverReason(err) ?? "unknown";
 				const status = resolveFailoverStatus(reason);
 				throw new FailoverError(err, {
 					reason,
@@ -3326,7 +3373,7 @@ async function runCliAgent(params) {
 					provider: params.provider,
 					model: modelId,
 					usage: output.usage,
-					...effectiveCliSandbox ? { metadata: { effectiveSandbox: effectiveCliSandbox } } : {}
+					...effectiveCodexExecMode ? { metadata: { effectiveCodexExecMode } } : {}
 				}
 			}
 		};
@@ -4167,7 +4214,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-DHQgWjsV.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-CpNYgSrx.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -4179,7 +4226,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-kdmVqWxk.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-b_aZwo00.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -4192,7 +4239,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-kdmVqWxk.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-b_aZwo00.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -5658,6 +5705,7 @@ const PollParamsSchema = Type.Object({
 const AgentParamsSchema = Type.Object({
 	message: NonEmptyString,
 	agentId: Type.Optional(NonEmptyString),
+	model: Type.Optional(Type.String()),
 	to: Type.Optional(Type.String()),
 	replyTo: Type.Optional(Type.String()),
 	sessionId: Type.Optional(Type.String()),
@@ -7970,7 +8018,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CoQP7nSu.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-d-CaN0uL.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -11566,7 +11614,7 @@ async function loadModelCatalog(params) {
 		});
 		try {
 			await ensureAnimaModelsJson(params?.config ?? loadConfig());
-			await (await import("./pi-auth-json-BLCyhR5p.js")).ensurePiAuthJsonFromAuthProfiles(resolveAnimaAgentDir());
+			await (await import("./pi-auth-json-BmdBnmlZ.js")).ensurePiAuthJsonFromAuthProfiles(resolveAnimaAgentDir());
 			const piSdk = await importPiSdk();
 			const agentDir = resolveAnimaAgentDir();
 			const { join } = await import("node:path");
@@ -13326,8 +13374,8 @@ const resolveProfileOverride = (params) => {
 //#region src/auto-reply/reply/directive-handling.model-picker.ts
 const PROVIDER_RANK = new Map([
 	"anthropic",
-	"openai",
 	"openai-codex",
+	"openai",
 	"minimax",
 	"synthetic",
 	"google",
@@ -13663,7 +13711,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles-Da39zGOD.js").then((n) => n.t);
+		const { ensureAuthProfileStore } = await import("./auth-profiles-DtWUl1-k.js").then((n) => n.t);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -14725,25 +14773,6 @@ function ensureSkillsWatcher(params) {
 	watchers.set(workspaceDir, state);
 }
 
-//#endregion
-//#region src/infra/pairing-files.ts
-function createAsyncLock() {
-	let lock = Promise.resolve();
-	return async function withLock(fn) {
-		const prev = lock;
-		let release;
-		lock = new Promise((resolve) => {
-			release = resolve;
-		});
-		await prev;
-		try {
-			return await fn();
-		} finally {
-			release?.();
-		}
-	};
-}
-
 //#endregion
 //#region src/infra/node-pairing.ts
 const PENDING_TTL_MS = 300 * 1e3;
@@ -27874,6 +27903,263 @@ function createGatewayTool(opts) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-auto.ts
+const DEFAULT_USAGE_THRESHOLD_PERCENT = 5;
+const USAGE_CACHE_TTL_MS = 6e4;
+const USAGE_TIMEOUT_MS = 1500;
+const usageSummaryCache = /* @__PURE__ */ new Map();
+function resolveRawAutoConfig(cfg) {
+	const modelConfig = cfg?.agents?.defaults?.model;
+	if (typeof modelConfig !== "object" || !modelConfig) return;
+	return modelConfig.auto;
+}
+function dedupeProviders(values) {
+	const seen = /* @__PURE__ */ new Set();
+	const result = [];
+	for (const input of values) {
+		if (!input) continue;
+		const normalized = normalizeProviderId(input);
+		if (!normalized || seen.has(normalized)) continue;
+		seen.add(normalized);
+		result.push(normalized);
+	}
+	return result;
+}
+function resolveModelAutoConfig(cfg) {
+	const raw = resolveRawAutoConfig(cfg);
+	if (!raw?.enabled) return null;
+	const byProvider = {};
+	for (const [providerRaw, entry] of Object.entries(raw.byProvider ?? {})) {
+		const provider = normalizeProviderId(providerRaw);
+		if (!provider) continue;
+		const models = Array.isArray(entry?.models) ? entry.models.map((value) => String(value ?? "").trim()).filter(Boolean) : [];
+		if (models.length > 0) byProvider[provider] = { models };
+	}
+	const usageThresholdPercent = typeof raw.usageThresholdPercent === "number" && Number.isFinite(raw.usageThresholdPercent) ? Math.max(0, Math.min(100, raw.usageThresholdPercent)) : DEFAULT_USAGE_THRESHOLD_PERCENT;
+	return {
+		enabled: true,
+		providerOrder: dedupeProviders(raw.providerOrder ?? []),
+		byProvider,
+		byWorkingMode: {
+			read: Array.isArray(raw.byWorkingMode?.read) ? raw.byWorkingMode.read.map((value) => String(value ?? "").trim()).filter(Boolean) : [],
+			write: Array.isArray(raw.byWorkingMode?.write) ? raw.byWorkingMode.write.map((value) => String(value ?? "").trim()).filter(Boolean) : []
+		},
+		usageCheck: raw.usageCheck === "prefer-available" ? "prefer-available" : "off",
+		usageThresholdPercent
+	};
+}
+function buildCandidatesFromRawModels(params) {
+	const defaultProvider = params.defaultProvider ?? DEFAULT_PROVIDER;
+	const index = buildModelAliasIndex({
+		cfg: params.cfg ?? {},
+		defaultProvider
+	});
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const raw of params.rawModels) {
+		const resolved = resolveModelRefFromString({
+			raw,
+			defaultProvider,
+			aliasIndex: index
+		});
+		if (!resolved) continue;
+		const key = modelKey(resolved.ref.provider, resolved.ref.model);
+		if (seen.has(key)) continue;
+		seen.add(key);
+		out.push(resolved.ref);
+	}
+	return out;
+}
+async function loadUsageSummary(agentDir, providers) {
+	const key = `${agentDir ?? "main"}::${providers.slice().toSorted().join(",")}`;
+	const now = Date.now();
+	const cached = usageSummaryCache.get(key);
+	if (cached && cached.expiresAt > now) return cached.summary;
+	const summary = await loadProviderUsageSummary({
+		agentDir,
+		providers,
+		timeoutMs: USAGE_TIMEOUT_MS
+	});
+	usageSummaryCache.set(key, {
+		expiresAt: now + USAGE_CACHE_TTL_MS,
+		summary
+	});
+	return summary;
+}
+function remainingPercent(snapshot) {
+	if (snapshot.error || snapshot.windows.length === 0) return;
+	const values = snapshot.windows.map((window) => 100 - window.usedPercent).filter((value) => Number.isFinite(value));
+	if (values.length === 0) return;
+	return Math.max(0, Math.min(...values));
+}
+async function resolveAvailability(params) {
+	const availability = /* @__PURE__ */ new Map();
+	const usageProviders = Array.from(new Set(params.providerOrder.map((provider) => resolveUsageProviderId(provider)).filter((provider) => Boolean(provider))));
+	let summary;
+	if (usageProviders.length > 0) try {
+		summary = await loadUsageSummary(params.agentDir, usageProviders);
+	} catch {
+		summary = void 0;
+	}
+	const snapshots = /* @__PURE__ */ new Map();
+	for (const entry of summary?.providers ?? []) snapshots.set(entry.provider, entry);
+	for (const provider of params.providerOrder) {
+		const usageProvider = resolveUsageProviderId(provider);
+		if (!usageProvider) {
+			availability.set(provider, {
+				provider,
+				state: "unknown"
+			});
+			continue;
+		}
+		const snapshot = snapshots.get(usageProvider);
+		const percent = snapshot ? remainingPercent(snapshot) : void 0;
+		availability.set(provider, {
+			provider,
+			usageProvider,
+			remainingPercent: percent,
+			state: percent === void 0 ? "unknown" : percent <= params.autoConfig.usageThresholdPercent ? "exhausted" : "available"
+		});
+	}
+	return availability;
+}
+function reorderByAvailability(params) {
+	const lockedPrimary = params.preservePrimary ? params.candidates[0] : void 0;
+	const rest = params.preservePrimary ? params.candidates.slice(1) : params.candidates;
+	const grouped = /* @__PURE__ */ new Map();
+	for (const candidate of rest) {
+		const normalized = normalizeProviderId(candidate.provider);
+		const group = grouped.get(normalized) ?? [];
+		group.push({
+			provider: normalized,
+			model: candidate.model
+		});
+		grouped.set(normalized, group);
+	}
+	const order = [];
+	for (const [provider, availability] of params.availability) if (availability.state === "available") order.push(provider);
+	for (const [provider, availability] of params.availability) if (availability.state === "unknown") order.push(provider);
+	for (const [provider, availability] of params.availability) if (availability.state === "exhausted") order.push(provider);
+	for (const provider of grouped.keys()) if (!order.includes(provider)) order.push(provider);
+	const ordered = [];
+	for (const provider of order) {
+		const group = grouped.get(provider) ?? [];
+		ordered.push(...group);
+	}
+	return lockedPrimary ? [lockedPrimary, ...ordered] : ordered;
+}
+async function applyAutoModelRouting(params) {
+	const autoConfig = resolveModelAutoConfig(params.cfg);
+	if (!autoConfig) return {
+		candidates: [...params.candidates],
+		autoConfigured: false,
+		preserveProviderOrder: false,
+		availabilityByProvider: /* @__PURE__ */ new Map()
+	};
+	const providerOrder = dedupeProviders([...autoConfig.providerOrder, ...params.candidates.map((candidate) => candidate.provider)]);
+	let candidates = [...params.candidates];
+	const modePreferred = params.workingMode ? buildCandidatesFromRawModels({
+		rawModels: autoConfig.byWorkingMode[params.workingMode] ?? [],
+		cfg: params.cfg,
+		defaultProvider: params.candidates[0]?.provider ?? DEFAULT_PROVIDER
+	}) : [];
+	if (modePreferred.length > 0) {
+		const lockedPrimary = params.preservePrimary && candidates.length > 0 ? [candidates[0]] : [];
+		const remainingCandidates = params.preservePrimary ? candidates.slice(1) : candidates;
+		const seen = /* @__PURE__ */ new Set();
+		candidates = [
+			...lockedPrimary,
+			...modePreferred,
+			...remainingCandidates
+		].filter((candidate) => {
+			const key = modelKey(candidate.provider, candidate.model);
+			if (seen.has(key)) return false;
+			seen.add(key);
+			return true;
+		});
+	}
+	const availability = await resolveAvailability({
+		providerOrder,
+		agentDir: params.agentDir,
+		autoConfig
+	});
+	if (autoConfig.usageCheck === "prefer-available") candidates = reorderByAvailability({
+		candidates,
+		availability,
+		preservePrimary: params.preservePrimary
+	});
+	return {
+		candidates,
+		autoConfigured: true,
+		preserveProviderOrder: true,
+		config: autoConfig,
+		availabilityByProvider: availability
+	};
+}
+
+//#endregion
+//#region src/agents/model-preference.ts
+const HIGH_THINK_LEVELS = new Set(["high", "xhigh"]);
+const SESSION_COST_THRESHOLD_USD = .5;
+const SESSION_TOKEN_THRESHOLD = 3e5;
+const SESSION_TURN_THRESHOLD = 12;
+const SESSION_COMPACTION_THRESHOLD = 2;
+function toPositiveFiniteNumber(value) {
+	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
+	return value;
+}
+function shouldPreferCheap(entry) {
+	if (!entry) return false;
+	const sessionCostUsd = toPositiveFiniteNumber(entry.sessionEstimatedCostUsdTotal) ?? 0;
+	const sessionInputTokens = toPositiveFiniteNumber(entry.sessionInputTokensTotal) ?? 0;
+	const sessionOutputTokens = toPositiveFiniteNumber(entry.sessionOutputTokensTotal) ?? 0;
+	const sessionTurnCount = toPositiveFiniteNumber(entry.sessionTurnCount) ?? 0;
+	const compactionCount = toPositiveFiniteNumber(entry.compactionCount) ?? 0;
+	return sessionCostUsd >= SESSION_COST_THRESHOLD_USD || sessionInputTokens + sessionOutputTokens >= SESSION_TOKEN_THRESHOLD || sessionTurnCount >= SESSION_TURN_THRESHOLD || compactionCount >= SESSION_COMPACTION_THRESHOLD;
+}
+function resolveCandidateCostScore(candidate, cfg) {
+	const cost = resolveModelCostConfig({
+		provider: candidate.provider,
+		model: candidate.model,
+		config: cfg
+	});
+	if (!cost) return;
+	const values = [
+		cost.input,
+		cost.output,
+		cost.cacheRead,
+		cost.cacheWrite
+	].filter((value) => typeof value === "number" && Number.isFinite(value));
+	if (values.length === 0) return;
+	return values.reduce((sum, value) => sum + value, 0);
+}
+function resolveUsageAwareModelPreference(params) {
+	if (params.sessionEntry?.providerOverride || params.sessionEntry?.modelOverride) return "preserve";
+	if (params.thinkLevel && HIGH_THINK_LEVELS.has(params.thinkLevel)) return "prefer-strong";
+	if (shouldPreferCheap(params.sessionEntry)) return "prefer-cheap";
+	return "preserve";
+}
+function orderCandidatesByPreference(params) {
+	const preferenceMode = params.preferenceMode ?? "preserve";
+	if (preferenceMode === "preserve" || params.candidates.length <= 1) return [...params.candidates];
+	const scoredCandidates = params.candidates.map((candidate) => ({
+		candidate,
+		score: resolveCandidateCostScore(candidate, params.cfg)
+	}));
+	const sortable = scoredCandidates.filter((entry) => entry.score !== void 0);
+	if (sortable.length < 2) return [...params.candidates];
+	sortable.sort((left, right) => preferenceMode === "prefer-cheap" ? left.score - right.score : right.score - left.score);
+	const reordered = sortable.map((entry) => entry.candidate);
+	let reorderedIndex = 0;
+	return scoredCandidates.map((entry) => {
+		if (entry.score === void 0) return entry.candidate;
+		const next = reordered[reorderedIndex];
+		reorderedIndex += 1;
+		return next;
+	});
+}
+
 //#endregion
 //#region src/agents/model-fallback.ts
 /**
@@ -27975,12 +28261,32 @@ function resolveFallbackCandidates(params) {
 	}, false);
 	return candidates;
 }
+function resolveWorkingModeFromSessionEntry(entry) {
+	const execSecurity = entry?.execSecurity?.trim().toLowerCase();
+	if (!execSecurity) return;
+	return execSecurity === "deny" ? "read" : "write";
+}
 async function runWithModelFallback(params) {
-	const candidates = resolveFallbackCandidates({
+	const preservePrimary = Boolean(params.sessionEntry?.providerOverride || params.sessionEntry?.modelOverride);
+	const resolvedWorkingMode = params.workingMode ?? resolveWorkingModeFromSessionEntry(params.sessionEntry);
+	const candidates = orderCandidatesByPreference({
+		candidates: (await applyAutoModelRouting({
+			candidates: resolveFallbackCandidates({
+				cfg: params.cfg,
+				provider: params.provider,
+				model: params.model,
+				fallbacksOverride: params.fallbacksOverride
+			}),
+			cfg: params.cfg,
+			agentDir: params.agentDir,
+			preservePrimary,
+			workingMode: resolvedWorkingMode
+		})).candidates,
 		cfg: params.cfg,
-		provider: params.provider,
-		model: params.model,
-		fallbacksOverride: params.fallbacksOverride
+		preferenceMode: resolveUsageAwareModelPreference({
+			thinkLevel: params.thinkLevel,
+			sessionEntry: params.sessionEntry
+		})
 	});
 	const authStore = params.cfg ? ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }) : null;
 	const attempts = [];
@@ -29081,6 +29387,24 @@ function pickAmbiguousMatch(entries, mode) {
 	const bestRank = Math.max(...ranked.map((item) => item.rank));
 	return ranked.find((item) => item.rank === bestRank)?.entry ?? entries[0] ?? null;
 }
+function resolveConfiguredNoxsoftTarget(params) {
+	const trimmed = params.input.trim();
+	if (!trimmed) return null;
+	const configured = params.cfg.channels?.noxsoft?.channels;
+	if (!configured) return null;
+	const lower = trimmed.toLowerCase();
+	for (const [name, entry] of Object.entries(configured)) {
+		const channelId = entry?.id?.trim();
+		if (!channelId) continue;
+		if (lower === name.trim().toLowerCase() || trimmed === channelId) return {
+			to: channelId,
+			kind: "channel",
+			display: name,
+			source: "normalized"
+		};
+	}
+	return null;
+}
 async function resolveMessagingTarget(params) {
 	const raw = normalizeChannelTargetInput(params.input);
 	if (!raw) return {
@@ -29092,6 +29416,16 @@ async function resolveMessagingTarget(params) {
 	const hint = plugin?.messaging?.targetResolver?.hint;
 	const kind = detectTargetKind(params.channel, raw, params.preferredKind);
 	const normalized = normalizeTargetForProvider(params.channel, raw) ?? raw;
+	if (params.channel === "noxsoft") {
+		const configuredTarget = resolveConfiguredNoxsoftTarget({
+			cfg: params.cfg,
+			input: raw
+		});
+		if (configuredTarget) return {
+			ok: true,
+			target: configuredTarget
+		};
+	}
 	const looksLikeTargetId = () => {
 		const trimmed = raw.trim();
 		if (!trimmed) return false;
@@ -29306,6 +29640,10 @@ function applyCrossContextDecoration(params) {
 	};
 }
 
+//#endregion
+//#region src/auth/noxsoft-auth.ts
+const TOKEN_PATH = path.join(os.homedir(), ".noxsoft-agent-token");
+
 //#endregion
 //#region src/infra/outbound/targets.ts
 function resolveSessionDeliveryTarget(params) {
@@ -29387,13 +29725,62 @@ function resolveGatewayOptions(opts) {
 		mode: opts?.mode ?? GATEWAY_CLIENT_MODES.CLI
 	};
 }
+function resolveNoxsoftApiBase(cfg) {
+	return cfg.channels?.noxsoft?.apiUrl?.trim() || "https://auth.noxsoft.net";
+}
+function resolveNoxsoftToken(cfg) {
+	const inlineToken = cfg.channels?.noxsoft?.token?.trim();
+	if (inlineToken) return inlineToken;
+	const tokenFile = cfg.channels?.noxsoft?.tokenFile?.trim() || TOKEN_PATH;
+	try {
+		const token = fs$1.readFileSync(tokenFile, "utf-8").trim();
+		if (token) return token;
+	} catch {}
+	throw new Error(`NoxSoft token not configured. Expected token in ${tokenFile}`);
+}
+async function sendNoxsoftMessageDirect(params) {
+	if (params.dryRun) return {
+		channel: "noxsoft",
+		to: params.to,
+		via: "direct",
+		mediaUrl: params.mediaUrl,
+		mediaUrls: params.mediaUrls,
+		dryRun: true
+	};
+	const token = resolveNoxsoftToken(params.cfg);
+	const apiBase = resolveNoxsoftApiBase(params.cfg).replace(/\/+$/, "");
+	const response = await fetch(`${apiBase}/api/agents/chat/channels/${params.to}/messages`, {
+		method: "POST",
+		headers: {
+			Authorization: `Bearer ${token}`,
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			content: params.content,
+			mediaUrl: params.mediaUrl ?? void 0,
+			mediaUrls: params.mediaUrls?.length ? params.mediaUrls : void 0
+		}),
+		signal: params.abortSignal
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`NoxSoft send failed (${response.status}): ${text}`);
+	}
+	const payload = await response.json().catch(() => ({}));
+	const messageId = payload.messageId ?? payload.id ?? `noxsoft:${Date.now()}`;
+	return {
+		channel: "noxsoft",
+		to: params.to,
+		via: "direct",
+		mediaUrl: params.mediaUrl,
+		mediaUrls: params.mediaUrls,
+		result: { messageId }
+	};
+}
 async function sendMessage(params) {
 	const cfg = params.cfg ?? loadConfig();
-	const channel = params.channel?.trim() ? normalizeChannelId$1(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
+	const channel = params.channel?.trim() ? normalizeMessageChannel(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
 	if (!channel) throw new Error(`Unknown channel: ${params.channel}`);
-	const plugin = getChannelPlugin(channel);
-	if (!plugin) throw new Error(`Unknown channel: ${channel}`);
-	const deliveryMode = plugin.outbound?.deliveryMode ?? "direct";
 	const normalizedPayloads = normalizeReplyPayloadsForDelivery([{
 		text: params.content,
 		mediaUrl: params.mediaUrl,
@@ -29402,6 +29789,18 @@ async function sendMessage(params) {
 	const mirrorText = normalizedPayloads.map((payload) => payload.text).filter(Boolean).join("\n");
 	const mirrorMediaUrls = normalizedPayloads.flatMap((payload) => payload.mediaUrls ?? (payload.mediaUrl ? [payload.mediaUrl] : []));
 	const primaryMediaUrl = mirrorMediaUrls[0] ?? params.mediaUrl ?? null;
+	if (channel === "noxsoft") return sendNoxsoftMessageDirect({
+		cfg,
+		to: params.to,
+		content: params.content,
+		mediaUrl: primaryMediaUrl,
+		mediaUrls: mirrorMediaUrls.length ? mirrorMediaUrls : void 0,
+		dryRun: params.dryRun,
+		abortSignal: params.abortSignal
+	});
+	const plugin = getChannelPlugin(channel);
+	if (!plugin) throw new Error(`Unknown channel: ${channel}`);
+	const deliveryMode = plugin.outbound?.deliveryMode ?? "direct";
 	if (params.dryRun) return {
 		channel,
 		to: params.to,
@@ -29480,7 +29879,7 @@ async function sendMessage(params) {
 }
 async function sendPoll(params) {
 	const cfg = params.cfg ?? loadConfig();
-	const channel = params.channel?.trim() ? normalizeChannelId$1(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
+	const channel = params.channel?.trim() ? normalizeMessageChannel(params.channel) : (await resolveMessageChannelSelection({ cfg })).channel;
 	if (!channel) throw new Error(`Unknown channel: ${params.channel}`);
 	const pollInput = {
 		question: params.question,
@@ -36098,6 +36497,8 @@ async function runAgentTurnWithFallback(params) {
 			provider: params.followupRun.run.provider,
 			model: params.followupRun.run.model,
 			agentDir: params.followupRun.run.agentDir,
+			sessionEntry: params.getActiveSessionEntry(),
+			thinkLevel: params.followupRun.run.thinkLevel,
 			fallbacksOverride: resolveAgentModelFallbacksOverride(params.followupRun.run.config, resolveAgentIdFromSessionKey(params.followupRun.run.sessionKey)),
 			run: (provider, model) => {
 				params.opts?.onModelSelected?.({
@@ -36105,97 +36506,8 @@ async function runAgentTurnWithFallback(params) {
 					model,
 					thinkLevel: params.followupRun.run.thinkLevel
 				});
-				if (isCliProvider(provider, params.followupRun.run.config)) {
-					const startedAt = Date.now();
-					emitAgentEvent$1({
-						runId,
-						stream: "lifecycle",
-						data: {
-							phase: "start",
-							startedAt
-						}
-					});
-					const cliSessionId = getCliSessionId(params.getActiveSessionEntry(), provider);
-					return (async () => {
-						let lifecycleTerminalEmitted = false;
-						let sawCliStream = false;
-						let lastCliStreamText = "";
-						try {
-							const result = await runCliAgent({
-								sessionId: params.followupRun.run.sessionId,
-								sessionKey: params.sessionKey,
-								agentId: params.followupRun.run.agentId,
-								sessionFile: params.followupRun.run.sessionFile,
-								workspaceDir: params.followupRun.run.workspaceDir,
-								config: params.followupRun.run.config,
-								prompt: params.commandBody,
-								provider,
-								model,
-								thinkLevel: params.followupRun.run.thinkLevel,
-								timeoutMs: params.followupRun.run.timeoutMs,
-								runId,
-								extraSystemPrompt: params.followupRun.run.extraSystemPrompt,
-								ownerNumbers: params.followupRun.run.ownerNumbers,
-								cliSessionId,
-								images: params.opts?.images,
-								onTextStream: (text) => {
-									const nextText = text.trim();
-									if (!nextText) return;
-									sawCliStream = true;
-									lastCliStreamText = nextText;
-									emitAgentEvent$1({
-										runId,
-										stream: "assistant",
-										data: { text: nextText }
-									});
-								}
-							});
-							const cliText = result.payloads?.[0]?.text?.trim();
-							if (cliText && (!sawCliStream || cliText !== lastCliStreamText)) emitAgentEvent$1({
-								runId,
-								stream: "assistant",
-								data: { text: cliText }
-							});
-							emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "end",
-									startedAt,
-									endedAt: Date.now()
-								}
-							});
-							lifecycleTerminalEmitted = true;
-							return result;
-						} catch (err) {
-							emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "error",
-									startedAt,
-									endedAt: Date.now(),
-									error: String(err)
-								}
-							});
-							lifecycleTerminalEmitted = true;
-							throw err;
-						} finally {
-							if (!lifecycleTerminalEmitted) emitAgentEvent$1({
-								runId,
-								stream: "lifecycle",
-								data: {
-									phase: "error",
-									startedAt,
-									endedAt: Date.now(),
-									error: "CLI run completed without lifecycle terminal event"
-								}
-							});
-						}
-					})();
-				}
 				const authProfileId = provider === params.followupRun.run.provider ? params.followupRun.run.authProfileId : void 0;
-				return runEmbeddedPiAgent({
+				return runNoxSoftEmbeddedAgent({
 					sessionId: params.followupRun.run.sessionId,
 					sessionKey: params.sessionKey,
 					agentId: params.followupRun.run.agentId,
@@ -36232,6 +36544,8 @@ async function runAgentTurnWithFallback(params) {
 					verboseLevel: params.followupRun.run.verboseLevel,
 					reasoningLevel: params.followupRun.run.reasoningLevel,
 					execOverrides: params.followupRun.run.execOverrides,
+					execSecurity: params.getActiveSessionEntry()?.execSecurity,
+					cliSessionId: getCliSessionId(params.getActiveSessionEntry(), provider),
 					toolResultFormat: (() => {
 						const channel = resolveMessageChannel(params.sessionCtx.Surface, params.sessionCtx.Provider);
 						if (!channel) return "markdown";
@@ -36263,6 +36577,11 @@ async function runAgentTurnWithFallback(params) {
 						});
 					} : void 0,
 					onAgentEvent: async (evt) => {
+						emitAgentEvent$1({
+							runId,
+							stream: evt.stream,
+							data: evt.data
+						});
 						if (evt.stream === "tool") {
 							const phase = typeof evt.data.phase === "string" ? evt.data.phase : "";
 							if (phase === "start" || phase === "update") await params.typingSignals.signalToolStart();
@@ -36532,10 +36851,12 @@ async function runMemoryFlushIfNeeded(params) {
 			provider: params.followupRun.run.provider,
 			model: params.followupRun.run.model,
 			agentDir: params.followupRun.run.agentDir,
+			sessionEntry: params.sessionEntry ?? (params.sessionKey ? params.sessionStore?.[params.sessionKey] : void 0) ?? void 0,
+			thinkLevel: params.followupRun.run.thinkLevel,
 			fallbacksOverride: resolveAgentModelFallbacksOverride(params.followupRun.run.config, resolveAgentIdFromSessionKey(params.followupRun.run.sessionKey)),
 			run: (provider, model) => {
 				const authProfileId = provider === params.followupRun.run.provider ? params.followupRun.run.authProfileId : void 0;
-				return runEmbeddedPiAgent({
+				return runNoxSoftEmbeddedAgent({
 					sessionId: params.followupRun.run.sessionId,
 					sessionKey: params.sessionKey,
 					agentId: params.followupRun.run.agentId,
@@ -36569,6 +36890,7 @@ async function runMemoryFlushIfNeeded(params) {
 					verboseLevel: params.followupRun.run.verboseLevel,
 					reasoningLevel: params.followupRun.run.reasoningLevel,
 					execOverrides: params.followupRun.run.execOverrides,
+					execSecurity: (params.sessionEntry ?? (params.sessionKey ? params.sessionStore?.[params.sessionKey] : void 0))?.execSecurity,
 					bashElevated: params.followupRun.run.bashElevated,
 					timeoutMs: params.followupRun.run.timeoutMs,
 					runId: flushRunId,
@@ -36904,10 +37226,12 @@ function createFollowupRunner(params) {
 					provider: queued.run.provider,
 					model: queued.run.model,
 					agentDir: queued.run.agentDir,
+					sessionEntry: (sessionKey ? sessionStore?.[sessionKey] : void 0) ?? sessionEntry ?? void 0,
+					thinkLevel: queued.run.thinkLevel,
 					fallbacksOverride: resolveAgentModelFallbacksOverride(queued.run.config, resolveAgentIdFromSessionKey(queued.run.sessionKey)),
 					run: (provider, model) => {
 						const authProfileId = provider === queued.run.provider ? queued.run.authProfileId : void 0;
-						return runEmbeddedPiAgent({
+						return runNoxSoftEmbeddedAgent({
 							sessionId: queued.run.sessionId,
 							sessionKey: queued.run.sessionKey,
 							agentId: queued.run.agentId,
@@ -36938,6 +37262,7 @@ function createFollowupRunner(params) {
 							verboseLevel: queued.run.verboseLevel,
 							reasoningLevel: queued.run.reasoningLevel,
 							execOverrides: queued.run.execOverrides,
+							execSecurity: ((sessionKey ? sessionStore?.[sessionKey] : void 0) ?? sessionEntry)?.execSecurity,
 							bashElevated: queued.run.bashElevated,
 							timeoutMs: queued.run.timeoutMs,
 							runId,
@@ -37918,7 +38243,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CoQP7nSu.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-d-CaN0uL.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -39347,7 +39672,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CuwWMetN.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-OUAGpDsU.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -40277,23 +40602,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-CovlPIFx.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-Bmft-5um.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-7Yj2TvMd.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-DKkQ3Czu.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-CuwWMetN.js");
+	webLoginQrPromise ??= import("./login-qr-OUAGpDsU.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-B3O004_b.js");
+	webChannelPromise ??= import("./web-so3pGceM.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-9PCfw-Zh.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-Hr-W8vjY.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime() {
@@ -42561,15 +42886,6 @@ function createAnimaCodingTools(options) {
 
 //#endregion
 //#region src/agents/gemini-direct-runner.ts
-/**
-* Gemini Direct API Runner
-*
-* Makes calls directly to generativelanguage.googleapis.com without needing
-* a CLI wrapper. Works with Google API keys (GEMINI_API_KEY).
-*
-* This runner is automatically used when a google API key is available
-* and the provider is set to "google" or "gemini".
-*/
 const log = createSubsystemLogger("agent/gemini-direct");
 const DEFAULT_GEMINI_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
 const MODEL_MAP = {
@@ -42661,7 +42977,7 @@ async function runGeminiDirectAgent(params) {
 		cwd: process.cwd(),
 		moduleUrl: import.meta.url
 	});
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim()].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "local-tools");
 	const systemPrompt = buildSystemPrompt({
 		workspaceDir,
 		config: params.config,
@@ -42740,7 +43056,6 @@ async function runGeminiDirectAgent(params) {
 				};
 			}
 			if (!response.body) throw new Error("No response body received from Gemini API");
-			await params.onAssistantMessageStart?.();
 			const bodyStream = Readable.fromWeb(response.body);
 			let buffer = "";
 			let chunkAssistantText = "";
@@ -42766,12 +43081,11 @@ async function runGeminiDirectAgent(params) {
 							nonTextParts.push(p);
 							if (p.functionCall) functionCalls.push(p.functionCall);
 						}
-						if (parsed.candidates?.[0]?.finishReason) parsed.candidates[0].finishReason;
 						if (parsed.usageMetadata) {
 							totalInputTokens = Math.max(totalInputTokens, parsed.usageMetadata.promptTokenCount ?? 0);
 							totalOutputTokens += parsed.usageMetadata.candidatesTokenCount ?? 0;
 						}
-					} catch (e) {}
+					} catch {}
 				}
 			}
 			if (functionCalls.length > 0) {
@@ -42831,7 +43145,7 @@ async function runGeminiDirectAgent(params) {
 			const errorMsg = isAbort ? `Request timed out after ${params.timeoutMs}ms` : String(err);
 			log.error(`gemini api error: ${errorMsg}`, { error: String(err) });
 			return {
-				status: "failed",
+				status: isAbort ? "timeout" : "failed",
 				meta: {
 					durationMs: Date.now() - started,
 					error: {
@@ -42868,7 +43182,7 @@ async function runGeminiDirectAgent(params) {
 }
 
 //#endregion
-//#region src/agents/pi-embedded.ts
+//#region src/agents/noxsoft-runner.ts
 function normalizeEmbeddedProvider(provider) {
 	return normalizeProviderId(provider ?? "") || "anthropic";
 }
@@ -42889,178 +43203,375 @@ async function emitAgentEvent(params, stream, data) {
 		data
 	});
 }
-async function runEmbeddedPiAgent(...args) {
-	const params = args[0];
-	if (!params || typeof params !== "object") throw new Error("runEmbeddedPiAgent expected params object");
+function resolveDirectAuthProvider(provider) {
+	if (provider === "anthropic" || provider === "claude") return "anthropic";
+	if (provider === "google" || provider === "gemini") return "google";
+	return null;
+}
+function resolveProfileFailureReason(result) {
+	const kind = result.meta.error?.kind?.trim().toLowerCase();
+	if (kind === "auth") return "auth";
+	if (kind === "rate_limit") return "rate_limit";
+	const classified = classifyFailoverReason(result.meta.error?.message ?? "");
+	if (classified === "billing") return "billing";
+	if (classified === "auth") return "auth";
+	if (classified === "rate_limit") return "rate_limit";
+}
+function resolveResultErrorKind(result) {
+	const kind = result.meta.error?.kind?.trim().toLowerCase();
+	if (kind) return kind;
+	return result.status === "timeout" ? "timeout" : "unknown";
+}
+function normalizeResultStatus(result) {
+	const kind = resolveResultErrorKind(result);
+	if (result.status === "timeout" || kind === "timeout") return "timeout";
+	return result.status;
+}
+function normalizeResultPayloads(result) {
+	const payloads = result.payloads?.filter((payload) => payload && typeof payload === "object");
+	if (payloads && payloads.length > 0) return payloads;
+	const output = result.output?.trim();
+	return output ? [{ text: output }] : void 0;
+}
+function normalizeResultOutput(result, payloads) {
+	const directOutput = result.output?.trim();
+	if (directOutput) return directOutput;
+	return payloads?.find((payload) => payload.text?.trim())?.text?.trim() || void 0;
+}
+function normalizeRunnerResult(params) {
+	const payloads = normalizeResultPayloads(params.result);
+	const output = normalizeResultOutput(params.result, payloads);
+	const usage = normalizeUsage(params.result.meta.agentMeta?.usage);
+	const lastCallUsage = normalizeUsage(params.result.meta.agentMeta?.lastCallUsage);
+	const promptTokens = params.result.meta.agentMeta?.promptTokens ?? derivePromptTokens(usage ?? lastCallUsage);
+	const status = normalizeResultStatus(params.result);
+	const errorMessage = params.result.meta.error?.message?.trim();
+	const errorKind = resolveResultErrorKind(params.result);
+	return {
+		...params.result,
+		status,
+		output,
+		payloads,
+		meta: {
+			...params.result.meta,
+			error: status === "completed" && !errorMessage ? void 0 : {
+				message: errorMessage || (status === "timeout" ? "Request timed out." : "Runner execution failed."),
+				kind: errorKind
+			},
+			agentMeta: {
+				...params.result.meta.agentMeta,
+				sessionId: params.result.meta.agentMeta?.sessionId?.trim() || params.sessionId,
+				provider: params.provider,
+				model: params.model ?? params.result.meta.agentMeta?.model,
+				usage,
+				promptTokens,
+				lastCallUsage
+			}
+		}
+	};
+}
+function coerceResultFailure(params) {
+	if (params.result.status === "completed") return null;
+	const message = params.result.meta.error?.message?.trim() || (params.result.status === "timeout" ? "Request timed out." : "Runner execution failed.");
+	const reason = classifyFailoverReason(message) ?? resolveResultErrorKind(params.result);
+	return new FailoverError(message, {
+		reason: reason === "timeout" ? "timeout" : reason,
+		provider: params.provider,
+		model: params.model,
+		status: resolveFailoverStatus(reason)
+	});
+}
+async function resolveDirectProviderAuth(params) {
+	return resolveApiKeyForProvider({
+		provider: params.provider,
+		cfg: params.config,
+		preferredProfile: params.preferredProfile,
+		agentDir: params.agentDir,
+		store: params.store
+	});
+}
+async function runDirectWithProfileFallback(params) {
+	const store = ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false });
+	const attemptedAuthSources = /* @__PURE__ */ new Set();
+	let preferredProfile = params.authProfileId;
+	let lastResult = null;
+	for (;;) {
+		const auth = await resolveDirectProviderAuth({
+			provider: params.directProvider,
+			config: params.config,
+			agentDir: params.agentDir,
+			preferredProfile,
+			store
+		});
+		const authSourceKey = auth.profileId ?? `${auth.mode}:${auth.source}`;
+		if (attemptedAuthSources.has(authSourceKey)) return lastResult ?? {
+			status: "failed",
+			meta: {
+				durationMs: 0,
+				error: {
+					message: `Auth fallback loop detected for ${params.directProvider}.`,
+					kind: "unknown"
+				}
+			}
+		};
+		attemptedAuthSources.add(authSourceKey);
+		const result = params.directProvider === "anthropic" ? await runAnthropicDirectAgent({
+			token: auth.apiKey ?? "",
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			agentId: params.agentId,
+			sessionFile: params.sessionFile,
+			workspaceDir: params.workspaceDir,
+			config: params.config,
+			prompt: params.prompt,
+			model: params.model,
+			thinkLevel: params.thinkLevel,
+			timeoutMs: params.timeoutMs,
+			runId: params.runId,
+			extraSystemPrompt: params.extraSystemPrompt,
+			ownerNumbers: params.ownerNumbers,
+			onPartialReply: params.emitPartial,
+			onAssistantMessageStart: params.onAssistantMessageStart
+		}) : await runGeminiDirectAgent({
+			apiKey: auth.apiKey ?? "",
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			agentId: params.agentId,
+			sessionFile: params.sessionFile,
+			workspaceDir: params.workspaceDir,
+			config: params.config,
+			prompt: params.prompt,
+			model: params.model,
+			thinkLevel: params.thinkLevel,
+			timeoutMs: params.timeoutMs,
+			runId: params.runId,
+			extraSystemPrompt: params.extraSystemPrompt,
+			ownerNumbers: params.ownerNumbers,
+			onPartialReply: params.emitPartial,
+			onAssistantMessageStart: params.onAssistantMessageStart
+		});
+		if (result.status === "completed") {
+			if (auth.profileId) {
+				await markAuthProfileUsed({
+					store,
+					profileId: auth.profileId,
+					agentDir: params.agentDir
+				});
+				await markAuthProfileGood({
+					store,
+					provider: params.directProvider,
+					profileId: auth.profileId,
+					agentDir: params.agentDir
+				});
+			}
+			return result;
+		}
+		lastResult = result;
+		const failureReason = resolveProfileFailureReason(result);
+		if (!auth.profileId || !failureReason) return result;
+		await markAuthProfileFailure({
+			store,
+			profileId: auth.profileId,
+			reason: failureReason,
+			cfg: params.config,
+			agentDir: params.agentDir
+		});
+		preferredProfile = void 0;
+	}
+}
+async function resolveDirectStrategy(provider, config, agentDir) {
+	const directProvider = resolveDirectAuthProvider(provider);
+	if (!directProvider) return null;
+	try {
+		const auth = await resolveDirectProviderAuth({
+			provider: directProvider,
+			config,
+			agentDir,
+			store: ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false })
+		});
+		if (auth.apiKey) {
+			if (directProvider === "anthropic" && auth.apiKey.startsWith("sk-ant-oat01-")) return null;
+			return {
+				kind: directProvider === "google" ? "gemini-direct" : "anthropic-direct",
+				provider
+			};
+		}
+	} catch {}
+	return null;
+}
+async function resolveNoxSoftRunnerStrategy(params) {
 	const provider = normalizeEmbeddedProvider(params.provider);
+	const direct = await resolveDirectStrategy(provider, params.config, params.agentDir);
+	if (direct) return direct;
+	const cliProvider = resolveCompatCliProvider(provider, params.config);
+	if (!resolveCliBackendConfig(cliProvider, params.config)) throw new Error(`No CLI backend available for provider "${provider}" (resolved "${cliProvider}").\nEither:\n  • Run: anima setup-token  (set an Anthropic API key — no CLI needed)\n  • Install the matching CLI and log in`);
+	return {
+		kind: "cli",
+		provider,
+		cliProvider
+	};
+}
+async function runNoxSoftEmbeddedAgent(params) {
+	const provider = normalizeEmbeddedProvider(params.provider);
+	const normalizedRequestedRef = params.model?.trim() ? normalizeModelRef(provider, params.model) : null;
 	const startedAt = Date.now();
 	const runId = params.runId?.trim() || crypto.randomUUID();
 	const timeoutMs = typeof params.timeoutMs === "number" && params.timeoutMs > 0 ? params.timeoutMs : 12e4;
 	let assistantStarted = false;
 	const streamTasks = [];
-	if (provider === "anthropic" || provider === "claude") {
-		const store = loadAuthProfileStore();
-		const profile = store.profiles["anthropic:default"] ?? store.profiles[store.lastGood?.["anthropic"] ?? ""] ?? null;
-		const directToken = profile?.type === "token" ? profile.token : profile?.type === "oauth" ? profile.access : null;
-		if (directToken) {
-			await emitAgentEvent(params, "lifecycle", {
-				phase: "start",
-				startedAt
-			});
-			try {
-				const result = await runAnthropicDirectAgent({
-					token: directToken,
-					sessionId: params.sessionId,
-					sessionKey: params.sessionKey,
-					agentId: params.agentId,
-					sessionFile: params.sessionFile,
-					workspaceDir: params.workspaceDir,
-					config: params.config,
-					prompt: params.prompt,
-					model: params.model,
-					thinkLevel: params.thinkLevel,
+	const emitPartial = async (payload) => {
+		if (!assistantStarted) {
+			assistantStarted = true;
+			await params.onAssistantMessageStart?.();
+		}
+		await params.onPartialReply?.(payload);
+		await emitAgentEvent(params, "assistant", { text: payload.text });
+	};
+	const strategy = await resolveNoxSoftRunnerStrategy({
+		provider: params.provider,
+		config: params.config,
+		agentDir: params.agentDir
+	});
+	if (strategy.kind === "anthropic-direct") {
+		await emitAgentEvent(params, "lifecycle", {
+			phase: "start",
+			startedAt
+		});
+		try {
+			const result = normalizeRunnerResult({
+				result: await runDirectWithProfileFallback({
+					...params,
+					directProvider: "anthropic",
 					timeoutMs,
 					runId,
-					extraSystemPrompt: params.extraSystemPrompt,
-					ownerNumbers: params.ownerNumbers,
-					onPartialReply: async (payload) => {
-						if (!assistantStarted) {
-							assistantStarted = true;
-							await params.onAssistantMessageStart?.();
-						}
-						await params.onPartialReply?.(payload);
-						await emitAgentEvent(params, "assistant", { text: payload.text });
-					},
-					onAssistantMessageStart: params.onAssistantMessageStart
-				});
-				await emitAgentEvent(params, "lifecycle", {
-					phase: "end",
-					durationMs: Date.now() - startedAt,
-					status: result.status
-				});
-				return result;
-			} catch (err) {
+					emitPartial
+				}),
+				provider: normalizedRequestedRef?.provider ?? provider,
+				model: normalizedRequestedRef?.model,
+				sessionId: params.sessionId
+			});
+			const failure = coerceResultFailure({
+				result,
+				provider: result.meta.agentMeta?.provider ?? provider,
+				model: result.meta.agentMeta?.model
+			});
+			if (failure) {
 				await emitAgentEvent(params, "lifecycle", {
 					phase: "error",
-					error: String(err instanceof Error ? err.message : err)
+					startedAt,
+					endedAt: Date.now(),
+					error: failure.message,
+					status: result.status
 				});
-				throw err;
+				throw failure;
 			}
-		}
-	}
-	if (provider === "google" || provider === "gemini") {
-		const geminiApiKey = (await resolveApiKeyForProvider({
-			provider: "google",
-			cfg: params.config
-		}))?.apiKey;
-		if (geminiApiKey) {
 			await emitAgentEvent(params, "lifecycle", {
-				phase: "start",
-				startedAt
+				phase: "end",
+				durationMs: Date.now() - startedAt,
+				status: result.status
 			});
-			try {
-				const result = await runGeminiDirectAgent({
-					apiKey: geminiApiKey,
-					sessionId: params.sessionId,
-					sessionKey: params.sessionKey,
-					agentId: params.agentId,
-					sessionFile: params.sessionFile,
-					workspaceDir: params.workspaceDir,
-					config: params.config,
-					prompt: params.prompt,
-					model: params.model,
-					thinkLevel: params.thinkLevel,
+			return result;
+		} catch (err) {
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "error",
+				error: String(err instanceof Error ? err.message : err)
+			});
+			throw err;
+		}
+	}
+	if (strategy.kind === "gemini-direct") {
+		await emitAgentEvent(params, "lifecycle", {
+			phase: "start",
+			startedAt
+		});
+		try {
+			const result = normalizeRunnerResult({
+				result: await runDirectWithProfileFallback({
+					...params,
+					directProvider: "google",
 					timeoutMs,
 					runId,
-					extraSystemPrompt: params.extraSystemPrompt,
-					ownerNumbers: params.ownerNumbers,
-					onPartialReply: async (payload) => {
-						if (!assistantStarted) {
-							assistantStarted = true;
-							await params.onAssistantMessageStart?.();
-						}
-						await params.onPartialReply?.(payload);
-						await emitAgentEvent(params, "assistant", { text: payload.text });
-					},
-					onAssistantMessageStart: params.onAssistantMessageStart
-				});
-				await emitAgentEvent(params, "lifecycle", {
-					phase: "end",
-					durationMs: Date.now() - startedAt,
-					status: result.status
-				});
-				return result;
-			} catch (err) {
+					emitPartial
+				}),
+				provider: normalizedRequestedRef?.provider ?? provider,
+				model: normalizedRequestedRef?.model,
+				sessionId: params.sessionId
+			});
+			const failure = coerceResultFailure({
+				result,
+				provider: result.meta.agentMeta?.provider ?? provider,
+				model: result.meta.agentMeta?.model
+			});
+			if (failure) {
 				await emitAgentEvent(params, "lifecycle", {
 					phase: "error",
-					error: String(err instanceof Error ? err.message : err)
+					startedAt,
+					endedAt: Date.now(),
+					error: failure.message,
+					status: result.status
 				});
-				throw err;
+				throw failure;
 			}
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "end",
+				durationMs: Date.now() - startedAt,
+				status: result.status
+			});
+			return result;
+		} catch (err) {
+			await emitAgentEvent(params, "lifecycle", {
+				phase: "error",
+				error: String(err instanceof Error ? err.message : err)
+			});
+			throw err;
 		}
 	}
-	const cliProvider = resolveCompatCliProvider(provider, params.config);
-	if (!resolveCliBackendConfig(cliProvider, params.config)) throw new Error(`No CLI backend available for provider "${provider}" (resolved "${cliProvider}").\nEither:\n  • Run: anima setup-token  (set an Anthropic API key — no CLI needed)\n  • Install the matching CLI and log in`);
 	await emitAgentEvent(params, "lifecycle", {
 		phase: "start",
 		startedAt
 	});
 	try {
-		const result = await runCliAgent({
-			sessionId: params.sessionId,
-			sessionKey: params.sessionKey,
-			agentId: params.agentId,
-			sessionFile: params.sessionFile,
-			workspaceDir: params.workspaceDir,
-			config: params.config,
-			prompt: params.prompt,
-			provider: cliProvider,
-			model: params.model,
-			thinkLevel: params.thinkLevel,
-			timeoutMs,
-			runId,
-			extraSystemPrompt: params.extraSystemPrompt,
-			ownerNumbers: params.ownerNumbers,
-			images: params.images,
-			onTextStream: (text) => {
-				const nextText = text.trim();
-				if (!nextText) return;
-				const task = (async () => {
-					if (!assistantStarted) {
-						assistantStarted = true;
-						await params.onAssistantMessageStart?.();
-					}
-					await params.onPartialReply?.({ text: nextText });
-					await emitAgentEvent(params, "assistant", { text: nextText });
-				})();
-				streamTasks.push(task);
-			}
+		const result = normalizeRunnerResult({
+			result: await runCliAgent({
+				sessionId: params.sessionId,
+				sessionKey: params.sessionKey,
+				agentId: params.agentId,
+				sessionFile: params.sessionFile,
+				workspaceDir: params.workspaceDir,
+				config: params.config,
+				prompt: params.prompt,
+				provider: strategy.cliProvider,
+				model: params.model,
+				thinkLevel: params.thinkLevel,
+				timeoutMs,
+				runId,
+				extraSystemPrompt: params.extraSystemPrompt,
+				ownerNumbers: params.ownerNumbers,
+				cliSessionId: params.cliSessionId,
+				sessionExecSecurity: params.execSecurity,
+				images: params.images,
+				streamParams: params.streamParams,
+				onTextStream: (text) => {
+					const nextText = text.trim();
+					if (!nextText) return;
+					streamTasks.push(emitPartial({ text: nextText }));
+				}
+			}),
+			provider: normalizedRequestedRef?.provider ?? provider,
+			model: normalizedRequestedRef?.model,
+			sessionId: params.sessionId
 		});
 		if (streamTasks.length > 0) await Promise.allSettled(streamTasks);
 		const finalText = result.payloads?.[0]?.text?.trim();
-		if (finalText && !assistantStarted) {
-			assistantStarted = true;
-			await params.onAssistantMessageStart?.();
-			await params.onPartialReply?.({ text: finalText });
-			await emitAgentEvent(params, "assistant", { text: finalText });
-		}
+		if (finalText && !assistantStarted) await emitPartial({ text: finalText });
 		await emitAgentEvent(params, "lifecycle", {
 			phase: "end",
 			startedAt,
 			endedAt: Date.now(),
-			aborted: false
+			aborted: false,
+			status: result.status
 		});
-		return {
-			...result,
-			meta: {
-				...result.meta,
-				agentMeta: {
-					...result.meta.agentMeta,
-					provider,
-					model: params.model?.trim() || result.meta.agentMeta?.model
-				}
-			}
-		};
+		return result;
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		await emitAgentEvent(params, "lifecycle", {
@@ -43072,6 +43583,9 @@ async function runEmbeddedPiAgent(...args) {
 		throw error;
 	}
 }
+
+//#endregion
+//#region src/agents/pi-embedded.ts
 async function compactEmbeddedPiSession(..._args) {
 	return {
 		ok: true,
@@ -43099,4 +43613,4 @@ async function waitForEmbeddedPiRunEnd(..._args) {
 }
 
 //#endregion
-export { resolveEffectiveMessagesConfig as $, applyVerboseOverride as A, shouldComputeCommandAuthorized as B, upsertChannelPairingRequest as C, lookupContextTokens as D, getSkillsSnapshotVersion as E, createInboundDebouncer as F, resolveAgentTimeoutMs as G, buildMentionRegexes as H, resolveInboundDebounceMs as I, extractShortModelName as J, AGENT_LANE_NESTED as K, formatInboundEnvelope as L, loadModelCatalog as M, registerUnhandledRejectionHandler as N, clearSessionAuthProfileOverride as O, finalizeInboundContext as P, hasInterSessionUserProvenance as Q, resolveEnvelopeFormatOptions as R, readChannelAllowFromStore as S, getRemoteSkillEligibility as T, normalizeMentionText as U, CURRENT_MESSAGE_MARKER as V, subagent_registry_exports as W, emitAgentEvent$1 as X, clearAgentRunContext as Y, registerAgentRunContext as Z, normalizeGroupActivation as _, resolveChannelGroupRequireMention as a, hasNonzeroUsage as b, createDedupeCache as c, setCliSessionId as d, resolveIdentityName as et, buildAgentSessionKey as f, runWithModelFallback as g, resolveSessionDeliveryTarget as h, resolveChannelGroupPolicy as i, enqueueSystemEvent as j, applyModelOverrideToSessionEntry as k, getReplyFromConfig as l, resolveOutboundTarget as m, buildPairingReply as n, resolveMessagePrefix as nt, shouldAckReactionForWhatsApp as o, resolveAgentRoute as p, AGENT_LANE_SUBAGENT as q, recordChannelActivity as r, runCliAgent as rt, dispatchReplyWithBufferedBlockDispatcher as s, runEmbeddedPiAgent as t, resolveIdentityNamePrefix as tt, getCliSessionId as u, parseActivationCommand as v, resolveSendPolicy as w, formatDurationPrecise as x, deriveSessionTotalTokens as y, hasControlCommand as z };
+export { resolveEffectiveMessagesConfig as $, applyVerboseOverride as A, shouldComputeCommandAuthorized as B, upsertChannelPairingRequest as C, lookupContextTokens as D, getSkillsSnapshotVersion as E, createInboundDebouncer as F, resolveAgentTimeoutMs as G, buildMentionRegexes as H, resolveInboundDebounceMs as I, extractShortModelName as J, AGENT_LANE_NESTED as K, formatInboundEnvelope as L, loadModelCatalog as M, registerUnhandledRejectionHandler as N, clearSessionAuthProfileOverride as O, finalizeInboundContext as P, hasInterSessionUserProvenance as Q, resolveEnvelopeFormatOptions as R, readChannelAllowFromStore as S, getRemoteSkillEligibility as T, normalizeMentionText as U, CURRENT_MESSAGE_MARKER as V, subagent_registry_exports as W, emitAgentEvent$1 as X, clearAgentRunContext as Y, registerAgentRunContext as Z, normalizeGroupActivation as _, resolveChannelGroupRequireMention as a, hasNonzeroUsage as b, createDedupeCache as c, setCliSessionId as d, resolveIdentityName as et, buildAgentSessionKey as f, runWithModelFallback as g, resolveSessionDeliveryTarget as h, resolveChannelGroupPolicy as i, enqueueSystemEvent as j, applyModelOverrideToSessionEntry as k, getReplyFromConfig as l, resolveOutboundTarget as m, buildPairingReply as n, resolveMessagePrefix as nt, shouldAckReactionForWhatsApp as o, resolveAgentRoute as p, AGENT_LANE_SUBAGENT as q, recordChannelActivity as r, dispatchReplyWithBufferedBlockDispatcher as s, runNoxSoftEmbeddedAgent as t, resolveIdentityNamePrefix as tt, getCliSessionId as u, parseActivationCommand as v, resolveSendPolicy as w, formatDurationPrecise as x, deriveSessionTotalTokens as y, hasControlCommand as z };