@orion-agents/orion-code 0.2.0 → 0.3.0

package/dist/runtime/agent-runtime-controller.d.ts

@@ -1,3 +1,4 @@
+import type { AgentMode } from '../commands/types';
 import type { AgentRuntimeEventSink, AgentRuntimeInput, AgentRuntimeInputResult, AgentRuntimeInterruptResult, AgentRuntimeSubmitResult } from './agent-runtime-protocol';
 import type { AgentRuntimeRunnerV1, AgentRuntimeRunInputOptionsV1 } from './agent-runtime-runner';
 import type { OrionCodeUiRuntime, FollowupQueueItem, UiEventSink, UiRendererCapabilities } from './ui-events';
@@ -13,6 +14,20 @@ export interface AgentRuntimeToolPermissionRequest {
     reason?: string;
     abortSignal?: AbortSignal;
 }
+/** Secret-free immutable read model for reconnecting renderer surfaces. */
+export interface AgentRuntimePendingPermissionSnapshot {
+    readonly id: string;
+    readonly name: string;
+    readonly reason?: string;
+    readonly args: Readonly<Record<string, unknown>>;
+}
+/** Exact agent-mode input used by renderers with a three-state selector. */
+export interface AgentRuntimeSetAgentModeInput {
+    readonly type: 'set_agent_mode';
+    readonly mode: AgentMode;
+    readonly source?: 'picker' | 'command' | 'programmatic';
+}
+export type AgentRuntimeControllerInput = AgentRuntimeInput | AgentRuntimeSetAgentModeInput;
 export interface AgentRuntimeControllerOptions extends TurnControllerOptions {
     runtime: OrionCodeUiRuntime;
     events?: UiEventSink;
@@ -54,7 +69,11 @@ export declare class AgentRuntimeController {
     private readonly agentModeLifecycle;
     private readonly pendingPermissions;
     private activeRun;
+    private pendingAgentMode;
     private readonly goalControlRuns;
+    private activeGoalRuntimeTransitions;
+    private goalRuntimeActive;
+    private settingsBoundarySynchronizations;
     private stopping;
     private nextPermissionRequestId;
     private readonly queuedCommands;
@@ -64,6 +83,11 @@ export declare class AgentRuntimeController {
     constructor(options: AgentRuntimeControllerOptions);
     hasActiveTurn(): boolean;
     getFollowupQueue(): readonly FollowupQueueItem[];
+    /**
+     * Return a detached read model for browser refresh/reconnect recovery.
+     * AbortSignal and resolver ownership remain private to the controller.
+     */
+    getPendingPermissions(): readonly AgentRuntimePendingPermissionSnapshot[];
     /** Thin /goal control surface; GoalRuntimeCoordinatorV2 owns every mutation. */
     handleTargetInput(rawInput: string): {
         handled: boolean;
@@ -79,7 +103,9 @@ export declare class AgentRuntimeController {
     setVerificationState(state: 'pending' | 'running' | 'passed' | 'failed' | 'gated'): void;
     getVerificationState(): 'pending' | 'running' | 'passed' | 'failed' | 'gated' | undefined;
     clearExitIntent(): void;
-    handle(input: AgentRuntimeInput): AgentRuntimeInputResult;
+    handle(input: AgentRuntimeControllerInput): AgentRuntimeInputResult;
+    /** Set an exact mode immediately while idle, or at the next logical-request boundary. */
+    setAgentMode(mode: AgentMode): AgentRuntimeInputResult;
     private queueFollowup;
     private manageFollowupQueue;
     submit(input: string): AgentRuntimeSubmitResult;
@@ -92,16 +118,21 @@ export declare class AgentRuntimeController {
     waitForIdle(): Promise<void>;
     private runTurn;
     private handleRunLoopError;
+    private synchronizeSettingsAtLogicalBoundary;
     private emitAppend;
     private emitStatus;
     private emitProcessing;
     private emitFollowupQueue;
+    private agentModeSnapshot;
     private emitAgentModeSnapshot;
     private cycleAgentMode;
+    private applyPendingAgentMode;
     private requestIsCurrent;
     requestToolPermission(request: AgentRuntimeToolPermissionRequest): Promise<boolean>;
     private startGoalControl;
     private renderGoalControl;
+    private observeGoalControlResult;
+    private observeGoalRuntimeEvent;
     private recordPermissionDecision;
     private applyPermissionModeChange;
     private rejectPendingPermissions;

package/dist/runtime/agent-runtime-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runtime-controller.d.ts","sourceRoot":"","sources":["../../src/runtime/agent-runtime-controller.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAGjB,WAAW,EACX,sBAAsB,EACvB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAkB,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAa/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAE5D,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC1E,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,wEAAwE;IACxE,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,uEAAuE;IACvE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,kFAAkF;IAClF,kBAAkB,CAAC,EAAE,4BAA4B,CAAC;CACnD;AA4BD;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IAiBrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhBpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAG/B;IACJ,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,uBAAuB,CAAK;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IACzC,OAAO,CAAC,cAAc,CAAK;gBACE,OAAO,EAAE,6BAA6B;IAmCnE,aAAa,IAAI,OAAO;IAIxB,gBAAgB,IAAI,SAAS,iBAAiB,EAAE;IAIhD,gFAAgF;IAChF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG;QACnC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,wBAAwB,CAAC;KACzC;IAsBD,mGAAmG;IACnG,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO;IAO5E,mEAAmE;IACnE,aAAa,IAAI,IAAI;IAIrB,2EAA2E;IAC3E,qBAAqB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAK5C,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI;IAIxF,oBAAoB,IAAI,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS;IAIzF,eAAe,IAAI,IAAI;IAIvB,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,uBAAuB;IA0BzD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,mBAAmB;IAmB3B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB;IAoF/C,OAAO,CAAC,4BAA4B;YAkCtB,UAAU;IAoExB,OAAO,CAAC,oBAAoB;IA8B5B,OAAO,CAAC,iBAAiB;IAczB,SAAS,IAAI,2BAA2B;IAelC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;YAOpB,OAAO;IAwGrB,OAAO,CAAC,kBAAkB;IAsB1B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,gBAAgB;IAKlB,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BzF,OAAO,CAAC,gBAAgB;IAsCxB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,wBAAwB;IAsChC,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,wBAAwB;CAOjC"}
+{"version":3,"file":"agent-runtime-controller.d.ts","sourceRoot":"","sources":["../../src/runtime/agent-runtime-controller.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,SAAS,EAIV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAGjB,WAAW,EACX,sBAAsB,EACvB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAkB,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAS/E,OAAO,EACL,4BAA4B,EAG7B,MAAM,yBAAyB,CAAC;AAIjC,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAE5D,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAClD;AAED,4EAA4E;AAC5E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,cAAc,CAAC;CACzD;AAED,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,GAAG,6BAA6B,CAAC;AAE5F,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC1E,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,wEAAwE;IACxE,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,uEAAuE;IACvE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,kFAAkF;IAClF,kBAAkB,CAAC,EAAE,4BAA4B,CAAC;CACnD;AA4BD;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IAyBrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAxBpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAO/B;IACJ,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,4BAA4B,CAAK;IACzC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,gCAAgC,CAAK;IAC7C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,uBAAuB,CAAK;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IACzC,OAAO,CAAC,cAAc,CAAK;gBACE,OAAO,EAAE,6BAA6B;IA8CnE,aAAa,IAAI,OAAO;IAIxB,gBAAgB,IAAI,SAAS,iBAAiB,EAAE;IAIhD;;;OAGG;IACH,qBAAqB,IAAI,SAAS,qCAAqC,EAAE;IAIzE,gFAAgF;IAChF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG;QACnC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,wBAAwB,CAAC;KACzC;IAsBD,mGAAmG;IACnG,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO;IAO5E,mEAAmE;IACnE,aAAa,IAAI,IAAI;IAIrB,2EAA2E;IAC3E,qBAAqB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAK5C,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI;IAIxF,oBAAoB,IAAI,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS;IAIzF,eAAe,IAAI,IAAI;IAIvB,MAAM,CAAC,KAAK,EAAE,2BAA2B,GAAG,uBAAuB;IA4BnE,yFAAyF;IACzF,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,uBAAuB;IAsBtD,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,mBAAmB;IAmB3B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB;IAwF/C,OAAO,CAAC,4BAA4B;YAkCtB,UAAU;IAsExB,OAAO,CAAC,oBAAoB;IAyC5B,OAAO,CAAC,iBAAiB;IAczB,SAAS,IAAI,2BAA2B;IAelC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;YAIpB,OAAO;IA6GrB,OAAO,CAAC,kBAAkB;YAsBZ,oCAAoC;IAWlD,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,gBAAgB;IAKlB,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BzF,OAAO,CAAC,gBAAgB;IA2DxB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,wBAAwB;IAsChC,OAAO,CAAC,yBAAyB;IAuCjC,OAAO,CAAC,wBAAwB;CAOjC"}

package/dist/runtime/agent-runtime-controller.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AgentRuntimeController = void 0;
+const crypto_1 = require("crypto");
 const commands_1 = require("../commands");
 const parser_1 = require("../commands/parser");
 const target_command_1 = require("../commands/target-command");
@@ -8,9 +9,9 @@ const agent_runtime_protocol_1 = require("./agent-runtime-protocol");
 const agent_status_1 = require("./agent-status");
 const ui_events_1 = require("./ui-events");
 const turn_controller_1 = require("./turn-controller");
-const global_config_1 = require("../services/global-config");
 const tool_allowlist_1 = require("../services/tool-allowlist");
 const agent_mode_1 = require("../framework/agent-mode");
+const redaction_1 = require("../services/redaction");
 const style_1 = require("../tui-core/style");
 function isExitInput(input) {
     const parsed = (0, parser_1.parseInput)(input.trim());
@@ -46,7 +47,11 @@ class AgentRuntimeController {
         this.options = options;
         this.pendingPermissions = new Map();
         this.activeRun = null;
+        this.pendingAgentMode = null;
         this.goalControlRuns = new Set();
+        this.activeGoalRuntimeTransitions = 0;
+        this.goalRuntimeActive = false;
+        this.settingsBoundarySynchronizations = 0;
         this.stopping = false;
         this.nextPermissionRequestId = 1;
         this.queuedCommands = [];
@@ -60,6 +65,8 @@ class AgentRuntimeController {
         const downstream = options.eventSink ?? (0, agent_runtime_protocol_1.createAgentRuntimeEventSinkFromUiEvents)(options.events);
         this.eventSink = {
             emit: event => {
+                if (event.type === 'goal_event')
+                    this.observeGoalRuntimeEvent(event.event);
                 const result = downstream.emit(event);
                 if (event.type === 'session_restored') {
                     if (this.followupQueue.length > 0) {
@@ -75,11 +82,18 @@ class AgentRuntimeController {
         this.agentModeLifecycle.subscribe(snapshot => {
             this.eventSink.emit({ type: 'agent_mode_changed', snapshot });
         });
+        options.runtime.bindSettingsRuntimeIdleProbe?.(() => (this.settingsBoundarySynchronizations > 0 || !this.turnController.hasActiveTurn()) &&
+            this.activeGoalRuntimeTransitions === 0 &&
+            !this.goalRuntimeActive);
         const events = (0, agent_runtime_protocol_1.createUiEventSinkFromAgentRuntimeEvents)(this.eventSink);
         this.runner =
             options.runner ??
                 options.runtime.createAgentRunner?.(events, {
                     approvalHandler: request => this.requestToolPermission(request),
+                    // Every renderer restores history from a bounded, cursor-bound surface
+                    // projection. Replaying the complete durable Thread here couples Runtime
+                    // recovery to UI history size and makes /resume O(total Thread facts).
+                    replayHistoryOnRestore: false,
                 }) ??
                 createUnavailableRunner();
         this.emitAgentModeSnapshot();
@@ -90,6 +104,13 @@ class AgentRuntimeController {
     getFollowupQueue() {
         return this.followupQueue;
     }
+    /**
+     * Return a detached read model for browser refresh/reconnect recovery.
+     * AbortSignal and resolver ownership remain private to the controller.
+     */
+    getPendingPermissions() {
+        return Object.freeze([...this.pendingPermissions.values()].map(entry => entry.snapshot));
+    }
     /** Thin /goal control surface; GoalRuntimeCoordinatorV2 owns every mutation. */
     handleTargetInput(rawInput) {
         const parsed = (0, target_command_1.parseTargetCommand)(rawInput);
@@ -162,8 +183,31 @@ class AgentRuntimeController {
                 return this.applyPermissionModeChange(input.value);
             case 'cycle_agent_mode':
                 return this.cycleAgentMode();
+            case 'set_agent_mode':
+                return this.setAgentMode(input.mode);
         }
     }
+    /** Set an exact mode immediately while idle, or at the next logical-request boundary. */
+    setAgentMode(mode) {
+        const deferred = this.turnController.hasActiveTurn();
+        if (!deferred) {
+            this.pendingAgentMode = null;
+            return {
+                type: 'agent_mode_changed',
+                snapshot: this.agentModeLifecycle.setMode(mode),
+                appliesFrom: 'immediate',
+            };
+        }
+        const baseMode = this.agentModeLifecycle.snapshot().baseMode;
+        this.pendingAgentMode = mode === baseMode ? null : mode;
+        const snapshot = this.agentModeSnapshot();
+        this.emitAgentModeSnapshot(snapshot);
+        return {
+            type: 'agent_mode_changed',
+            snapshot,
+            appliesFrom: 'next-logical-request',
+        };
+    }
     queueFollowup(input) {
         const text = input.trim();
         if (!text)
@@ -262,7 +306,11 @@ class AgentRuntimeController {
             this.turnController.requestRevision(submitted);
             // v0.1.3 (G1): echo the incremental input to the transcript immediately,
             // so the user sees their correction without waiting for the turn to abort.
-            this.emitAppend(submittedEntry(submitted));
+            // A runtime-owned durable transcript disables this optimistic projection
+            // and emits the revision from its authoritative user item instead.
+            if (this.options.echoSubmittedInput ?? true) {
+                this.emitAppend(submittedEntry(submitted));
+            }
             this.emitStatus(this.options.revisionStatus ?? '已接收补充，正在中断当前轮…');
             return { type: 'revision_requested' };
         }
@@ -307,6 +355,8 @@ class AgentRuntimeController {
         this.emitStatus(`/${name} acknowledged; active turn continues.`);
     }
     async runCommand(command, args) {
+        if (command.risk !== 'read-only')
+            await this.options.runtime.synchronizeSettings?.();
         const renderer = this.options.uiRenderer ?? this.options.runtime.config.ui?.renderer ?? 'terminal';
         if (command.rendererScope && !command.rendererScope.includes(renderer)) {
             this.emitAppend({
@@ -382,7 +432,13 @@ class AgentRuntimeController {
             sessionId: this.options.runtime.getSession()?.id,
             ensureSession: this.options.runtime.ensureSession,
             setSession: session => this.options.runtime.setSession(session),
+            restoreSessionRuntime: this.runner.restoreSession
+                ? activation => this.runner.restoreSession(activation)
+                : undefined,
             sessionRestored: event => this.eventSink.emit({ type: 'session_restored', event }),
+            ...((renderer === 'terminal' || renderer === 'tui') && {
+                replaceTranscript: (entries) => this.eventSink.emit({ type: 'transcript_replace', entries: [...entries] }),
+            }),
             getSession: this.options.runtime.getSession,
             writeOutput: text => {
                 if (text.trim())
@@ -398,6 +454,9 @@ class AgentRuntimeController {
             uiCapabilities: (0, ui_events_1.resolveUiRendererCapabilities)(this.options.uiCapabilities, renderer),
             agentModeLifecycle: this.agentModeLifecycle,
             getHarnessDiagnostics: this.options.runtime.getHarnessDiagnostics,
+            settingsCoordinator: this.options.runtime.settingsCoordinator,
+            describeSettings: this.options.runtime.describeSettings,
+            updateSettings: this.options.runtime.updateSettings,
             compact: this.runner.compact ? input => this.runner.compact(input) : undefined,
         };
     }
@@ -440,10 +499,7 @@ class AgentRuntimeController {
         this.stopping = false;
     }
     async waitForIdle() {
-        await Promise.all([
-            this.activeRun ?? Promise.resolve(),
-            ...this.goalControlRuns,
-        ]);
+        await Promise.all([this.activeRun ?? Promise.resolve(), ...this.goalControlRuns]);
     }
     async runTurn(firstRequest) {
         let nextRequest = firstRequest;
@@ -460,12 +516,15 @@ class AgentRuntimeController {
             }
             this.options.beforeTurn?.(nextInput);
             const turn = this.turnController.beginTurn(nextInput);
-            this.options.runtime.store.setProcessing(true);
-            this.emitProcessing(true);
-            const runningStatus = statusText(this.options.runningStatus, nextInput);
-            if (runningStatus)
-                this.emitStatus(runningStatus);
             try {
+                if (this.options.runtime.synchronizeSettings) {
+                    await this.synchronizeSettingsAtLogicalBoundary();
+                }
+                this.options.runtime.store.setProcessing(true);
+                this.emitProcessing(true);
+                const runningStatus = statusText(this.options.runningStatus, nextInput);
+                if (runningStatus)
+                    this.emitStatus(runningStatus);
                 if (this.runner.runRequest) {
                     await this.runner.runRequest(request, {
                         abortSignal: turn.abortSignal,
@@ -493,9 +552,12 @@ class AgentRuntimeController {
             }
             finally {
                 const revision = this.turnController.finishTurn(turn.id);
-                const completedPlan = this.agentModeLifecycle.completedPlanSince(planCompletionBeforeRequest) ?? undefined;
-                if (!completedPlan)
-                    this.agentModeLifecycle.applyPending();
+                // Durable request runners commit and enqueue Plan execution at the Thread boundary.
+                // The legacy runInput path still needs the controller-owned compatibility follow-up.
+                const completedPlan = this.runner.runRequest
+                    ? undefined
+                    : (this.agentModeLifecycle.completedPlanSince(planCompletionBeforeRequest) ?? undefined);
+                this.applyPendingAgentMode(Boolean(completedPlan));
                 if (revision?.trim()) {
                     this.emitStatus(this.options.restartingStatus ?? '根据补充调整方向中…');
                     nextRequest = {
@@ -571,6 +633,18 @@ class AgentRuntimeController {
             this.emitStatus(readyStatus);
         this.options.afterTurnLoop?.();
     }
+    async synchronizeSettingsAtLogicalBoundary() {
+        const synchronize = this.options.runtime.synchronizeSettings;
+        if (!synchronize)
+            return;
+        this.settingsBoundarySynchronizations += 1;
+        try {
+            await synchronize();
+        }
+        finally {
+            this.settingsBoundarySynchronizations -= 1;
+        }
+    }
     emitAppend(entry) {
         return this.eventSink.emit({ type: 'transcript_append', entry });
     }
@@ -586,21 +660,49 @@ class AgentRuntimeController {
             snapshot: { items: [...this.followupQueue], limit: this.followupQueueLimit },
         });
     }
-    emitAgentModeSnapshot() {
+    agentModeSnapshot() {
+        const snapshot = this.agentModeLifecycle.snapshot();
+        return this.pendingAgentMode
+            ? { ...snapshot, pendingBaseMode: this.pendingAgentMode }
+            : snapshot;
+    }
+    emitAgentModeSnapshot(snapshot = this.agentModeSnapshot()) {
         this.eventSink.emit({
             type: 'agent_mode_changed',
-            snapshot: this.agentModeLifecycle.snapshot(),
+            snapshot,
         });
     }
     cycleAgentMode() {
         const deferred = this.turnController.hasActiveTurn();
-        const snapshot = this.agentModeLifecycle.cycle({ defer: deferred });
+        if (!deferred)
+            this.pendingAgentMode = null;
+        const lifecycleSnapshot = this.agentModeLifecycle.snapshot();
+        const nextMode = (0, agent_mode_1.nextAgentMode)(this.pendingAgentMode ?? lifecycleSnapshot.pendingBaseMode ?? lifecycleSnapshot.baseMode);
+        let snapshot;
+        if (deferred) {
+            this.pendingAgentMode = nextMode === lifecycleSnapshot.baseMode ? null : nextMode;
+            snapshot = this.agentModeSnapshot();
+            this.emitAgentModeSnapshot(snapshot);
+        }
+        else {
+            snapshot = this.agentModeLifecycle.setMode(nextMode);
+        }
         return {
             type: 'agent_mode_changed',
             snapshot,
             appliesFrom: deferred ? 'next-logical-request' : 'immediate',
         };
     }
+    applyPendingAgentMode(completedPlan) {
+        const pendingMode = this.pendingAgentMode;
+        this.pendingAgentMode = null;
+        if (pendingMode) {
+            this.agentModeLifecycle.setMode(pendingMode);
+            return;
+        }
+        if (!completedPlan)
+            this.agentModeLifecycle.applyPending();
+    }
     requestIsCurrent(request) {
         const activeSessionId = this.options.runtime.getSession()?.id;
         return !activeSessionId || request.sessionId === activeSessionId;
@@ -616,6 +718,7 @@ class AgentRuntimeController {
             reason: request.reason,
             abortSignal: request.abortSignal,
         };
+        const snapshot = createPendingPermissionSnapshot(id, request);
         return new Promise(resolve => {
             const finish = (approved) => {
                 this.pendingPermissions.delete(id);
@@ -623,7 +726,7 @@ class AgentRuntimeController {
                 resolve(approved);
             };
             const onAbort = () => finish(false);
-            this.pendingPermissions.set(id, { request, finish });
+            this.pendingPermissions.set(id, { request, snapshot, finish });
             request.abortSignal?.addEventListener('abort', onAbort, { once: true });
             this.emitStatus((0, agent_status_1.permissionPendingStatus)(request.name));
             this.eventSink.emit({ type: 'permission_requested', request: runtimeRequest });
@@ -637,21 +740,46 @@ class AgentRuntimeController {
             this.emitStatus(message);
             return { type: 'command_handled' };
         }
-        if ((this.turnController.hasActiveTurn() || this.goalControlRuns.size > 0) &&
+        if ((this.turnController.hasActiveTurn() ||
+            this.goalControlRuns.size > 0 ||
+            this.goalRuntimeActive) &&
             (goalControl.action === 'create' || goalControl.action === 'resume')) {
             const message = `/goal ${goalControl.action} is unavailable while Goal work is running; use /goal pause or /goal clear first.`;
             this.emitStatus(message);
             return { type: 'command_ignored' };
         }
-        if (goalControl.action === 'pause' || goalControl.action === 'clear') {
+        const stopsGoal = goalControl.action === 'pause' || goalControl.action === 'clear';
+        const interruptedRun = stopsGoal ? this.activeRun : null;
+        if (stopsGoal) {
             this.turnController.clearExitIntent();
             this.turnController.interruptActiveTurn();
             this.runner.interrupt?.(`goal ${goalControl.action}`);
             this.rejectPendingPermissions();
         }
-        const run = this.runner
-            .controlGoal(goalControl)
-            .then(result => this.renderGoalControl(result))
+        const run = Promise.resolve()
+            .then(async () => {
+            if (interruptedRun)
+                await interruptedRun.catch(() => undefined);
+            if (!stopsGoal)
+                await this.synchronizeSettingsAtLogicalBoundary();
+        })
+            .then(async () => {
+            this.activeGoalRuntimeTransitions += 1;
+            try {
+                return await this.runner.controlGoal(goalControl);
+            }
+            finally {
+                this.activeGoalRuntimeTransitions -= 1;
+            }
+        })
+            .then(async (result) => {
+            this.observeGoalControlResult(result);
+            this.renderGoalControl(result);
+            // Pause/clear must remain available while Goal work is active. Reconcile
+            // pending runtime-sensitive edits only after that work has stopped.
+            if (stopsGoal && result.accepted)
+                await this.synchronizeSettingsAtLogicalBoundary();
+        })
             .catch(error => {
             const message = error instanceof Error ? error.message : String(error);
             this.emitAppend({ role: 'error', title: 'goal', content: message, errorLayer: 'runtime' });
@@ -673,6 +801,20 @@ class AgentRuntimeController {
         });
         this.emitStatus(summary);
     }
+    observeGoalControlResult(result) {
+        if (!result.accepted)
+            return;
+        this.goalRuntimeActive =
+            (result.action === 'create' || result.action === 'resume') && result.scheduleContinuation;
+    }
+    observeGoalRuntimeEvent(event) {
+        if (event.type === 'goal_updated') {
+            this.goalRuntimeActive = event.goal.status === 'active';
+        }
+        else if (event.type === 'goal_cleared' || event.type === 'goal_completed') {
+            this.goalRuntimeActive = false;
+        }
+    }
     recordPermissionDecision(requestId, approved, scope = 'once') {
         const pending = this.pendingPermissions.get(requestId);
         if (!pending)
@@ -709,14 +851,38 @@ class AgentRuntimeController {
         const allowed = ['allow', 'ask', 'deny'];
         if (!allowed.includes(value))
             return { type: 'permission_mode_invalid' };
-        // Persist to disk so the change survives restart...
-        (0, global_config_1.updateGlobalConfig)({ toolConfirmation: value });
-        // ...and mutate the live runtime config so the very next tool call uses it
-        // immediately (chat-controller passes this.runtime.config.toolConfirmation into
-        // the scheduler on every turn).
-        this.options.runtime.config.toolConfirmation = value;
-        this.emitStatus(`Tool confirmation → ${value}`);
-        return { type: 'permission_mode_changed' };
+        if (this.activeRun ||
+            this.turnController.hasActiveTurn() ||
+            this.goalControlRuns.size > 0 ||
+            this.goalRuntimeActive) {
+            this.emitStatus('Tool confirmation was not changed: the runtime is busy.');
+            return { type: 'command_ignored' };
+        }
+        const describeSettings = this.options.runtime.describeSettings;
+        const updateSettings = this.options.runtime.updateSettings;
+        if (!describeSettings || !updateSettings) {
+            this.emitStatus('Tool confirmation was not changed: Settings are unavailable.');
+            return { type: 'command_ignored' };
+        }
+        const run = (async () => {
+            const before = describeSettings();
+            await updateSettings({
+                requestId: `runtime:permission-mode:${(0, crypto_1.randomUUID)()}`,
+                expectedRevision: before.revision,
+                operations: [{ op: 'set', key: 'permissions.toolConfirmation', value }],
+            });
+            this.emitStatus(`Tool confirmation → ${value}`);
+        })()
+            .catch(error => {
+            const reason = error instanceof Error ? error.message : String(error);
+            this.emitStatus(`Tool confirmation was not changed: ${reason}`);
+        })
+            .finally(() => {
+            if (this.activeRun === run)
+                this.activeRun = null;
+        });
+        this.activeRun = run;
+        return { type: 'started' };
     }
     rejectPendingPermissions() {
         const pending = [...this.pendingPermissions.values()];
@@ -727,6 +893,59 @@ class AgentRuntimeController {
     }
 }
 exports.AgentRuntimeController = AgentRuntimeController;
+const PERMISSION_SECRET_ARG_KEY = /(?:^|[_-])(?:api[_-]?key|access[_-]?token|auth[_-]?token|accesstoken|authtoken|password|secret|authorization|cookie|credential)(?:$|[_-])/iu;
+const MAX_PERMISSION_SNAPSHOT_DEPTH = 12;
+function createPendingPermissionSnapshot(id, request) {
+    return Object.freeze({
+        id,
+        name: sanitizePermissionText(request.name),
+        ...(request.reason === undefined ? {} : { reason: sanitizePermissionText(request.reason) }),
+        args: sanitizePermissionArgs(request.args),
+    });
+}
+function sanitizePermissionArgs(args) {
+    const value = sanitizePermissionValue(args, undefined, new Set(), 0);
+    return isPlainRecord(value) ? value : Object.freeze({});
+}
+function sanitizePermissionValue(value, key, ancestors, depth) {
+    if (key && PERMISSION_SECRET_ARG_KEY.test(key))
+        return '[REDACTED_SECRET]';
+    if (typeof value === 'string')
+        return sanitizePermissionText(value);
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : null;
+    if (typeof value !== 'object')
+        return '[NON_JSON_VALUE]';
+    if (depth >= MAX_PERMISSION_SNAPSHOT_DEPTH)
+        return '[TRUNCATED]';
+    if (ancestors.has(value))
+        return '[CIRCULAR]';
+    const prototype = Object.getPrototypeOf(value);
+    if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) {
+        return '[NON_JSON_VALUE]';
+    }
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            return Object.freeze(value.map(entry => sanitizePermissionValue(entry, undefined, ancestors, depth + 1)));
+        }
+        return Object.freeze(Object.fromEntries(Object.entries(value).map(([entryKey, entryValue]) => [
+            sanitizePermissionText(entryKey),
+            sanitizePermissionValue(entryValue, entryKey, ancestors, depth + 1),
+        ])));
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+function sanitizePermissionText(value) {
+    return (0, style_1.sanitizeTerminalText)((0, redaction_1.redactTraceText)(value));
+}
+function isPlainRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
 function formatGoalRuntimeStatus(result) {
     const state = result.state;
     if (!state)