@qwen-code/qwen-code 0.21.0-nightly.20260727.c003e1718 → 0.21.0-preview.0

package/chunks/{acpAgent-6BDY452E.js → acpAgent-ECMKCJPZ.js}

@@ -1,8 +1,5 @@
 // Force strict mode and setup for ESM
 "use strict";
-import {
-  recomputeMcpGating
-} from "./chunk-YF6D7CRB.js";
 import {
   classifyApiError
 } from "./chunk-V7RNNPGC.js";
@@ -15,50 +12,53 @@ import {
   matchMcpServerByRef,
   parseExtensionRef,
   parseMcpServerRef
-} from "./chunk-PIVH7FAY.js";
-import {
-  getCommandSubcommandNames
-} from "./chunk-SJOQ5GW7.js";
+} from "./chunk-5YVWMI26.js";
 import {
   getAvailableCommands,
   handleSlashCommand,
   insertAfterFunctionResponses,
   isSlashCommand,
   normalizePartList
-} from "./chunk-GVHHFBJ2.js";
+} from "./chunk-LHZRAR2Q.js";
+import {
+  recomputeMcpGating
+} from "./chunk-NG3V2LPY.js";
 import {
   appEvents,
   buildDisabledSkillNamesProvider,
   cleanupReviewWorktreeLeases,
   loadCliConfig,
   normalizeDisabledToolList
-} from "./chunk-CWFC2GZB.js";
+} from "./chunk-3Q4TGVUX.js";
+import {
+  getCommandSubcommandNames
+} from "./chunk-KADQPLPX.js";
 import {
   getEffectiveSupportedModes
-} from "./chunk-RGZ34F4F.js";
+} from "./chunk-TUQ36KWK.js";
 import "./chunk-PQNHRFJC.js";
-import "./chunk-SEWRIH7H.js";
+import "./chunk-M7OONWYU.js";
 import {
   collectContextData,
   formatContextUsageText
-} from "./chunk-SHJ4R6JF.js";
+} from "./chunk-727I7LJ2.js";
 import "./chunk-4WGODMVR.js";
-import "./chunk-K2P7QBXF.js";
+import "./chunk-GATT5TKW.js";
+import "./chunk-R3NOCPFB.js";
+import "./chunk-VYO6YPYG.js";
+import "./chunk-X6XZITHR.js";
 import "./chunk-YAF2MQZ6.js";
-import "./chunk-7GC5YKSS.js";
 import {
   computeCpuPercent
 } from "./chunk-HGT6JR3U.js";
-import "./chunk-4CSVLZXK.js";
+import "./chunk-GBAZKAZW.js";
 import "./chunk-6H67XLET.js";
 import {
   beginAcpBootstrapConfigProfiling,
   buildAndFreezeAcpStartupProfile,
   endAcpBootstrapConfigProfiling,
   markAcpStartup
-} from "./chunk-HIJQF5B5.js";
-import "./chunk-HEVX5YOM.js";
-import "./chunk-5CGAUBFZ.js";
+} from "./chunk-3L2SPEBH.js";
 import {
   GENERATION_MAX_PROMPT_BYTES,
   GENERATION_TIMEOUT_MS,
@@ -78,7 +78,7 @@ import {
   shouldSuppressRememberErrorDetails,
   workspaceMemoryFailureCode,
   workspaceMemoryFailureDiagnostics
-} from "./chunk-N7U3LRNS.js";
+} from "./chunk-DDKAZLZ7.js";
 import {
   HistoryReplayer,
   MessageEmitter,
@@ -88,10 +88,10 @@ import {
   goalTerminalEventToHistoryItem,
   recordGoalStatusItem,
   restoreGoalFromHistory
-} from "./chunk-TH6TQR5Y.js";
-import "./chunk-DEKCAHRS.js";
-import "./chunk-IPUUTYMV.js";
-import "./chunk-6K2CPEAB.js";
+} from "./chunk-IZO36O6O.js";
+import "./chunk-LGAOC3ZS.js";
+import "./chunk-HKFEPLKW.js";
+import "./chunk-YDLJGZHL.js";
 import "./chunk-2MIN6GRR.js";
 import "./chunk-QHTIBUWB.js";
 import {
@@ -105,45 +105,31 @@ import {
   buildPermissionSettings,
   normalizePermissionRules,
   readPermissionRuleSet
-} from "./chunk-2XORP6RV.js";
+} from "./chunk-UEDIRTKG.js";
 import {
   MAX_AUDIO_BYTES,
   sanitizeVoiceErrorMessage,
   transcribeVoiceAudio
-} from "./chunk-G2W6OP2O.js";
+} from "./chunk-V5AWXXVA.js";
 import {
   readVoiceModel
-} from "./chunk-FZP2GLM4.js";
-import "./chunk-GBJUC5ZL.js";
-import "./chunk-LXXMOYPL.js";
-import "./chunk-WTCKVXNT.js";
+} from "./chunk-QQLCYEN2.js";
+import "./chunk-ZHBO7WVX.js";
+import {
+  createLoadedSettingsAdapter
+} from "./chunk-ZSQ5LDBH.js";
+import "./chunk-VXZBKKQR.js";
+import "./chunk-WUNZAP5I.js";
 import "./chunk-E5Z2AVNV.js";
 import {
   parseSessionSource
-} from "./chunk-FOT6JBY5.js";
+} from "./chunk-XRYM3MCI.js";
 import "./chunk-GLWP3FDB.js";
 import "./chunk-XCGIMOLN.js";
-import {
-  CHANNEL_STARTUP_PROFILE_META_KEY,
-  CHANNEL_STARTUP_PROFILE_VERSION,
-  CLIENT_MCP_OVER_WS_CONFIG_FLAG,
-  DAEMON_CHANNEL_DELIVERY_META_KEY,
-  LOAD_REPLAY_BULK_MODE,
-  LOAD_REPLAY_META_KEY,
-  LOAD_REPLAY_MODE_META_KEY,
-  LOAD_REPLAY_PAGE_SIZE_META_KEY,
-  LOAD_REPLAY_VERSION,
-  MID_TURN_QUEUE_DRAIN_METHOD,
-  PROMPT_CANCEL_METHOD,
-  TODO_STOP_GUARD_QUEUE_RELEASE_METHOD
-} from "./chunk-3SJ43L4W.js";
-import {
-  NOT_CURRENTLY_GENERATING_CANCEL_MESSAGE,
-  isNotCurrentlyGeneratingCancelError
-} from "./chunk-UH3WSE5L.js";
+import "./chunk-OCPBI7J5.js";
 import {
   ndJsonStream
-} from "./chunk-2KHUM3TN.js";
+} from "./chunk-3MGBLIXX.js";
 import {
   ACP_ROUTE_ID_PREFIX,
   buildAcpModelOptions,
@@ -152,7 +138,7 @@ import {
   parseAcpModelOption,
   resolveAcpModelOption,
   sanitizeProviderBaseUrl
-} from "./chunk-PAJNXBXO.js";
+} from "./chunk-KBNDRM4U.js";
 import {
   mapSkillConfigToStatus
 } from "./chunk-L55JWS76.js";
@@ -163,28 +149,46 @@ import {
   SERVE_STATUS_EXT_METHODS,
   STATUS_SCHEMA_VERSION,
   mapDomainErrorToErrorKind
-} from "./chunk-WZOPR2ZP.js";
+} from "./chunk-R7ZITH3J.js";
 import {
   resolveSkillSettings
 } from "./chunk-Z4X5MTRT.js";
-import "./chunk-RRNQGWR4.js";
-import "./chunk-B5DJFAHN.js";
+import "./chunk-HWNLU2HC.js";
+import "./chunk-XR2NFLNQ.js";
 import "./chunk-57OAHC2Y.js";
-import "./chunk-EDEO3ZXU.js";
-import "./chunk-7VOUXBKJ.js";
-import "./chunk-ZEVUICUF.js";
+import "./chunk-2XSLTRFZ.js";
+import "./chunk-TFRMVU6R.js";
+import "./chunk-XBYYDKAZ.js";
 import "./chunk-V6WHFGST.js";
 import {
-  createLoadedSettingsAdapter
-} from "./chunk-4CKLWQQR.js";
+  CHANNEL_STARTUP_PROFILE_META_KEY,
+  CHANNEL_STARTUP_PROFILE_VERSION,
+  CLIENT_MCP_OVER_WS_CONFIG_FLAG,
+  DAEMON_CHANNEL_DELIVERY_META_KEY,
+  LOAD_REPLAY_BULK_MODE,
+  LOAD_REPLAY_META_KEY,
+  LOAD_REPLAY_MODE_META_KEY,
+  LOAD_REPLAY_PAGE_SIZE_META_KEY,
+  LOAD_REPLAY_VERSION,
+  MID_TURN_QUEUE_DRAIN_METHOD,
+  PROMPT_CANCEL_METHOD,
+  TODO_STOP_GUARD_CONTINUATION_CLAIM_METHOD,
+  TODO_STOP_GUARD_QUEUE_RELEASE_METHOD
+} from "./chunk-XZC5VLBZ.js";
+import {
+  NOT_CURRENTLY_GENERATING_CANCEL_MESSAGE,
+  isNotCurrentlyGeneratingCancelError
+} from "./chunk-B4AJNNOL.js";
+import "./chunk-2RFKHEXL.js";
+import "./chunk-FYJ7W2PI.js";
 import "./chunk-U4VTUMMK.js";
-import "./chunk-4AVIERNE.js";
+import "./chunk-GZ3RCT54.js";
 import "./chunk-ALMR3E6Q.js";
 import "./chunk-BK2UNYWD.js";
 import "./chunk-M5GB774H.js";
-import "./chunk-KR2UZ6QL.js";
-import "./chunk-5ADNRHTY.js";
-import "./chunk-BJHP755Z.js";
+import "./chunk-4G2BISNC.js";
+import "./chunk-GEBV2JGB.js";
+import "./chunk-7I5GTCT4.js";
 import {
   AgentSideConnection,
   PROTOCOL_VERSION,
@@ -193,7 +197,7 @@ import {
 import {
   assembleMcpServers,
   loadMcpApprovals
-} from "./chunk-5FQ3CINJ.js";
+} from "./chunk-OXWFQXKX.js";
 import {
   getOutputLanguageFilePath,
   getPersistScopeForModelSelection,
@@ -202,34 +206,33 @@ import {
   resolveOutputLanguageOrPreserveAuto,
   updateOutputLanguageFile,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-VCBKBEU7.js";
+} from "./chunk-7A4ZDITM.js";
 import "./chunk-RKUWKYED.js";
 import {
   SUPPORTED_LANGUAGES,
   getCurrentLanguage,
   setLanguageAsync
-} from "./chunk-C6U6ZR65.js";
+} from "./chunk-ATZOB5Y2.js";
 import {
   findEnvFiles,
   preResolveHomeEnvOverrides,
   reloadEnvironment
-} from "./chunk-ZAJIOSFI.js";
-import "./chunk-PLMOXLFY.js";
+} from "./chunk-NNERMV7T.js";
+import "./chunk-GW3XHA6P.js";
 import "./chunk-GOXKNSDZ.js";
-import "./chunk-6PEXNQTX.js";
-import "./chunk-2RFKHEXL.js";
 import {
   getSystemDefaultsPath,
   getSystemSettingsPath
 } from "./chunk-IDS7MSUP.js";
+import "./chunk-6PEXNQTX.js";
 import "./chunk-XFSFZCM5.js";
-import "./chunk-NZYXKNSZ.js";
+import "./chunk-AOAYOH3R.js";
 import "./chunk-VJNBRRZG.js";
 import {
   isFolderTrustEnabled,
   isWorkspaceTrusted,
   loadTrustedFolders
-} from "./chunk-IUYFCE34.js";
+} from "./chunk-4WSL256B.js";
 import "./chunk-ALGGS7UH.js";
 import "./chunk-MR3PXB6E.js";
 import {
@@ -275,6 +278,7 @@ import {
   applyAutoModeDecision,
   applyProviderInstallPlan,
   approxBase64Bytes,
+  bridgeToolResultImages,
   buildBackgroundEntryLabel,
   buildBtwCacheSafeParams,
   buildBtwPrompt,
@@ -359,56 +363,56 @@ import {
   updateSetting,
   validatePlanModeShellApproval,
   validatePlanModeShellContext
-} from "./chunk-G3RJEBAA.js";
+} from "./chunk-HUK2P4RS.js";
 import "./chunk-TWPJO254.js";
 import {
   external_exports
 } from "./chunk-H6XPXXMH.js";
 import "./chunk-5M6IDOMF.js";
-import "./chunk-2WVVMSPB.js";
-import "./chunk-IUNB6SUW.js";
-import "./chunk-ECBKZ7SV.js";
+import "./chunk-UPUG4GXM.js";
+import "./chunk-64LQLPL7.js";
+import "./chunk-2LQTH543.js";
 import "./chunk-KRXPRVGL.js";
-import "./chunk-3FNJBOF7.js";
+import "./chunk-DJGYJDYR.js";
+import "./chunk-CVHIL5IG.js";
 import "./chunk-IRH27ZC2.js";
 import "./chunk-QHWCP53L.js";
-import "./chunk-6LOSXNKO.js";
+import "./chunk-PONHVBRT.js";
 import "./chunk-T26EAKDL.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
-import "./chunk-3YAW4B2W.js";
 import "./chunk-CPBF7KYF.js";
-import "./chunk-7R4YENCL.js";
+import "./chunk-6QIGFD5W.js";
 import {
   HookEventName,
   createHookOutput
-} from "./chunk-IJDXG4RL.js";
-import "./chunk-IM6PC55H.js";
-import "./chunk-YF7TVSQK.js";
+} from "./chunk-XWWKIXVD.js";
+import "./chunk-75GFAX4R.js";
+import "./chunk-OKF7JF3R.js";
 import {
   APPROVAL_MODES,
   FORK_SUBAGENT_TYPE,
   getStartupContextLength,
   isSystemReminderContent,
   runWithRuntimeContentGenerator
-} from "./chunk-DMEKUQ5Z.js";
+} from "./chunk-JSD33JG6.js";
 import "./chunk-S6LOFUVP.js";
 import "./chunk-JCW2R7WC.js";
-import "./chunk-2PHWA4IO.js";
+import "./chunk-2DN4J57Y.js";
 import "./chunk-ZPJWUGCS.js";
 import {
   clearCachedCredentialFile,
   qwenOAuth2Events
-} from "./chunk-HHYPUCUF.js";
+} from "./chunk-2LKVPASC.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-2LFSPVBC.js";
-import "./chunk-67ZRSECV.js";
+import "./chunk-LW3RFMG7.js";
+import "./chunk-W4MIWP6M.js";
 import "./chunk-DGEIYUC3.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-GLNBDYUX.js";
 import "./chunk-DJ2GSRLV.js";
-import "./chunk-EWYICJNY.js";
+import "./chunk-P2YNZWXZ.js";
 import {
   addToolArgumentsAttributes,
   addToolCallResultAttributes,
@@ -416,14 +420,14 @@ import {
   registerAcpEventLoopLagGauge,
   startEventLoopLagMonitor,
   withDaemonSpan
-} from "./chunk-IXNNGTUI.js";
+} from "./chunk-75MIQ3LV.js";
 import "./chunk-2J3OJGTL.js";
 import "./chunk-P3QQPMQA.js";
-import "./chunk-ACPMPDKQ.js";
+import "./chunk-RPLGZJV2.js";
 import {
   getToolCallPreparations
 } from "./chunk-GLCZKT5V.js";
-import "./chunk-4CCAX23S.js";
+import "./chunk-DZLYR4U3.js";
 import {
   ConversationFinishedEvent,
   DiscoveredMCPTool,
@@ -437,6 +441,7 @@ import {
   formatVisionBridgeNotice,
   getAllGeminiMdFilenames,
   getFullTurnVisionModelSelector,
+  getInvocationContext,
   getMCPServerStatus,
   getSpecificMimeType,
   hasImageParts,
@@ -453,29 +458,30 @@ import {
   shouldRunVisionBridge,
   splitImageParts,
   uiTelemetryService
-} from "./chunk-6PQHZ4YW.js";
+} from "./chunk-BWKCTLEJ.js";
 import "./chunk-VGC4I5JJ.js";
 import {
   getAutoMemoryRoot,
   getUserAutoMemoryRoot
-} from "./chunk-MFBM3CQZ.js";
-import "./chunk-ZWL7SSVL.js";
+} from "./chunk-SGFT55XI.js";
+import "./chunk-Y4IHBGBP.js";
 import {
   ToolConfirmationOutcome,
   ToolNames,
   isShellProgressData
-} from "./chunk-MB3M2BFP.js";
+} from "./chunk-Y6AXW2OG.js";
 import {
-  AuthType
-} from "./chunk-2WUAKFCQ.js";
+  AuthType,
+  preloadContentGenerator
+} from "./chunk-LNHZ3A4I.js";
 import "./chunk-46UV252V.js";
 import {
   DEFAULT_TOKEN_LIMIT,
   tokenLimit
-} from "./chunk-WDMODYUC.js";
-import "./chunk-XM5V2A2E.js";
-import "./chunk-ZYD3KZPB.js";
-import "./chunk-BOWYL27T.js";
+} from "./chunk-ZBVS26BY.js";
+import "./chunk-WZRWHXFE.js";
+import "./chunk-A3NDJ5SB.js";
+import "./chunk-7XATOOE7.js";
 import {
   endToolExecutionSpan,
   endToolSpan,
@@ -484,7 +490,7 @@ import {
   startToolExecutionSpan,
   startToolSpan,
   withInteractionSpan
-} from "./chunk-FUFNINKB.js";
+} from "./chunk-BGTQCTQW.js";
 import "./chunk-W4RQUHY3.js";
 import "./chunk-S7W2GKIO.js";
 import {
@@ -493,12 +499,12 @@ import {
   getErrorMessage,
   getErrorStatus,
   isSubpath
-} from "./chunk-ATIV6G7N.js";
+} from "./chunk-UHUSJ6X7.js";
 import "./chunk-VOQXFAY5.js";
-import "./chunk-CPF4NIKT.js";
+import "./chunk-DIQGH5CN.js";
 import {
   runExitCleanup
-} from "./chunk-XL7TLW5I.js";
+} from "./chunk-XBZQT63P.js";
 import "./chunk-75DOP5OR.js";
 import "./chunk-DMTGGOSA.js";
 import "./chunk-YQ3U5MUC.js";
@@ -1957,6 +1963,7 @@ var DaemonTodoStopGuard = class {
 // packages/cli/src/acp-integration/session/Session.ts
 var debugLogger6 = createDebugLogger("SESSION");
 var USER_CANCEL_ABORT_REASON = "qwen:user-cancel";
+var SESSION_DISPOSE_ABORT_REASON = "qwen:session-dispose";
 var DAEMON_RETRY_META_KEY = "qwen.daemon.retry";
 var DAEMON_CONTINUE_META_KEY = "qwen.daemon.continueLastTurn";
 var TODO_STOP_GUARD_PROMPT_PREFIX = "[Todo Stop Guard] ";
@@ -2228,6 +2235,20 @@ function parseMidTurnDrainResponse(response) {
   ).map((message) => ({ kind: "text", message }));
 }
 __name(parseMidTurnDrainResponse, "parseMidTurnDrainResponse");
+function isValidMidTurnDrainResponse(response, requireQueuedPromptState) {
+  if (!isRecord2(response) || requireQueuedPromptState && typeof response["hasQueuedPrompt"] !== "boolean") {
+    return false;
+  }
+  if (Array.isArray(response["items"])) {
+    return response["items"].every(
+      (item) => isRecord2(item) && Array.isArray(item["content"]) && item["content"].length > 0 && item["content"].every(isContentBlock)
+    );
+  }
+  return Array.isArray(response["messages"]) && response["messages"].every(
+    (message) => typeof message === "string" && message.trim().length > 0
+  );
+}
+__name(isValidMidTurnDrainResponse, "isValidMidTurnDrainResponse");
 var MidTurnDrainTimeoutError = class extends Error {
   static {
     __name(this, "MidTurnDrainTimeoutError");
@@ -2238,6 +2259,16 @@ var MidTurnDrainTimeoutError = class extends Error {
     );
   }
 };
+var TodoStopGuardClaimTimeoutError = class extends Error {
+  static {
+    __name(this, "TodoStopGuardClaimTimeoutError");
+  }
+  constructor() {
+    super(
+      `Todo Stop Guard continuation claim got no response within ${MID_TURN_QUEUE_DRAIN_TIMEOUT_MS}ms`
+    );
+  }
+};
 function beginChannelDeliveryResponseBlock(capture) {
   if (!capture) return void 0;
   capture.finalText = "";
@@ -2571,7 +2602,12 @@ var Session = class {
   midTurnRecoveredMessages = [];
   todoStopGuard;
   todoStopGuardBackgroundBaseline;
+  relatedAgentIds = /* @__PURE__ */ new Set();
+  provisionalRelatedAgentCounts = /* @__PURE__ */ new Map();
   todoStopGuardQueuedPromptPriority = false;
+  todoStopGuardQueuedPromptOwnerPromptId;
+  todoStopGuardClaimOwnerCounts = /* @__PURE__ */ new Map();
+  todoStopGuardReleasedDuringClaim = /* @__PURE__ */ new Set();
   todoStopGuardDrainAutomaticQueuesWhenIdle = false;
   // Background notification drain state. ACP does not have the TUI's idle
   // hook, so the session serializes registry callbacks through this queue.
@@ -2623,7 +2659,7 @@ var Session = class {
     }
     const drainSupersededAutomaticQueues = this.todoStopGuard.blocksUnrelatedAutomaticTurns || this.todoStopGuard.hasCommittedContinuation || this.todoStopGuardQueuedPromptPriority;
     if (this.config.getApprovalMode() === "plan" /* PLAN */) {
-      this.todoStopGuardQueuedPromptPriority = false;
+      this.#clearTodoStopGuardQueuedPromptWait();
       this.todoStopGuard.blockUntilOrdinaryPromptStarts();
       return {
         startsWorkChain: false,
@@ -2634,7 +2670,7 @@ var Session = class {
     const isRetry = params.retry === true || metadata?.[DAEMON_RETRY_META_KEY] === true;
     const isContinue = metadata?.[DAEMON_CONTINUE_META_KEY] === true;
     if (isRetry || isContinue) {
-      this.todoStopGuardQueuedPromptPriority = false;
+      this.#clearTodoStopGuardQueuedPromptWait();
       if (this.todoStopGuard.hasTrustedUnfinishedState) {
         this.todoStopGuard.resumeTrustedPrompt();
         return {
@@ -2648,7 +2684,7 @@ var Session = class {
         drainSupersededAutomaticQueues
       };
     }
-    this.todoStopGuardQueuedPromptPriority = false;
+    this.#clearTodoStopGuardQueuedPromptWait();
     this.todoStopGuard.blockUntilOrdinaryPromptStarts();
     return {
       startsWorkChain: true,
@@ -2661,7 +2697,7 @@ var Session = class {
       this.todoStopGuard.blockUntilOrdinaryPromptStarts();
       return;
     }
-    if (continuesCurrentWorkChain && this.todoStopGuard.isHardSuspended) {
+    if (this.todoStopGuard.isHardSuspended) {
       return;
     }
     if (continuesCurrentWorkChain && this.todoStopGuard.hasTrustedUnfinishedState) {
@@ -2669,7 +2705,7 @@ var Session = class {
       return;
     }
     this.todoStopGuard.clearTrust();
-    this.todoStopGuardBackgroundBaseline = this.#captureTodoStopGuardBackgroundBaseline();
+    this.#resetTodoStopGuardBackgroundLineage();
   }
   #clearTodoStopGuardTrustAndDrainAutomaticQueues() {
     const preserveQueuedPromptPriority = this.todoStopGuardQueuedPromptPriority;
@@ -2683,35 +2719,116 @@ var Session = class {
     void this.#drainCronQueue();
     void this.#drainNotificationQueue();
   }
-  releaseTodoStopGuardQueuedPromptWait() {
-    if (!this.todoStopGuardQueuedPromptPriority) return false;
-    this.todoStopGuardQueuedPromptPriority = false;
+  releaseTodoStopGuardQueuedPromptWait(promptId) {
+    const matchesCurrentWait = this.todoStopGuardQueuedPromptPriority && this.todoStopGuardQueuedPromptOwnerPromptId === promptId;
+    if (!matchesCurrentWait) {
+      if ((this.todoStopGuardClaimOwnerCounts.get(promptId) ?? 0) === 0) {
+        return false;
+      }
+      this.todoStopGuardReleasedDuringClaim.add(promptId);
+      if (!this.todoStopGuardQueuedPromptPriority) {
+        this.#finishTodoStopGuardQueuedPromptRelease();
+      }
+      return true;
+    }
+    this.#clearTodoStopGuardQueuedPromptWait(promptId);
+    this.#finishTodoStopGuardQueuedPromptRelease();
+    return true;
+  }
+  #finishTodoStopGuardQueuedPromptRelease() {
     this.todoStopGuard.blockUntilOrdinaryPromptStarts();
     if (this.pendingPrompt) {
       this.todoStopGuardDrainAutomaticQueuesWhenIdle = true;
-      return true;
+      return;
     }
     void this.#drainCronQueue();
     void this.#drainNotificationQueue();
-    return true;
   }
   clearTodoStopGuardTrust() {
     this.#clearTodoStopGuardTrustAndDrainAutomaticQueues();
   }
-  #beginTodoStopGuardQueuedPromptCheck() {
-    this.todoStopGuardQueuedPromptPriority = this.todoStopGuard.awaitQueuedPrompt();
+  hardSuspendTodoStopGuard() {
+    this.#clearTodoStopGuardQueuedPromptWait();
+    this.todoStopGuardDrainAutomaticQueuesWhenIdle = false;
+    this.todoStopGuard.blockUntilOrdinaryPromptStarts();
   }
-  #finishTodoStopGuardQueuedPromptCheck(hasQueuedPrompt) {
-    const shouldWait = hasQueuedPrompt && this.todoStopGuardQueuedPromptPriority;
-    this.todoStopGuardQueuedPromptPriority = shouldWait;
-    if (!shouldWait) this.todoStopGuard.resumeTrustedPrompt();
-    return shouldWait;
+  #clearTodoStopGuardQueuedPromptWait(expectedOwner) {
+    if (expectedOwner !== void 0 && this.todoStopGuardQueuedPromptOwnerPromptId !== expectedOwner) {
+      return;
+    }
+    this.todoStopGuardQueuedPromptPriority = false;
+    this.todoStopGuardQueuedPromptOwnerPromptId = void 0;
+  }
+  #awaitTodoStopGuardQueuedPrompt(promptId) {
+    this.todoStopGuard.awaitQueuedPrompt();
+    this.todoStopGuardQueuedPromptPriority = true;
+    this.todoStopGuardQueuedPromptOwnerPromptId = promptId;
+  }
+  async #claimTodoStopGuardContinuation(abortSignal) {
+    const context = getInvocationContext();
+    const ownerPromptId = context?.sessionId === this.sessionId ? context.promptId : void 0;
+    if (ownerPromptId) {
+      this.todoStopGuardClaimOwnerCounts.set(
+        ownerPromptId,
+        (this.todoStopGuardClaimOwnerCounts.get(ownerPromptId) ?? 0) + 1
+      );
+    }
+    let timeoutHandle;
+    try {
+      const claimPromise = this.client.extMethod(
+        TODO_STOP_GUARD_CONTINUATION_CLAIM_METHOD,
+        {
+          sessionId: this.sessionId,
+          ...ownerPromptId ? { promptId: ownerPromptId } : {}
+        }
+      );
+      const timeoutPromise = new Promise((_, reject) => {
+        timeoutHandle = setTimeout(
+          () => reject(new TodoStopGuardClaimTimeoutError()),
+          MID_TURN_QUEUE_DRAIN_TIMEOUT_MS
+        );
+      });
+      const response = await Promise.race([claimPromise, timeoutPromise]);
+      if (abortSignal.aborted || !isRecord2(response)) {
+        return "unavailable";
+      }
+      if (ownerPromptId && response["claimed"] === false && response["hasQueuedPrompt"] === true) {
+        if (this.closing || this.disposed) return "unavailable";
+        if (this.todoStopGuardReleasedDuringClaim.has(ownerPromptId)) {
+          return "unavailable";
+        }
+        this.#awaitTodoStopGuardQueuedPrompt(ownerPromptId);
+        return "queued";
+      }
+      if (this.todoStopGuard.isHardSuspended) return "unavailable";
+      if (response["claimed"] === true && response["hasQueuedPrompt"] === false) {
+        if (ownerPromptId) {
+          this.#clearTodoStopGuardQueuedPromptWait(ownerPromptId);
+        }
+        this.todoStopGuard.resumeTrustedPrompt();
+        return "claimed";
+      }
+      return "unavailable";
+    } catch (error) {
+      debugLogger6.warn(
+        `Todo Stop Guard continuation claim unavailable [session ${this.sessionId}]: ${this.#formatError(error)}`
+      );
+      return "unavailable";
+    } finally {
+      clearTimeout(timeoutHandle);
+      if (ownerPromptId) {
+        const remaining = (this.todoStopGuardClaimOwnerCounts.get(ownerPromptId) ?? 1) - 1;
+        if (remaining > 0) {
+          this.todoStopGuardClaimOwnerCounts.set(ownerPromptId, remaining);
+        } else {
+          this.todoStopGuardClaimOwnerCounts.delete(ownerPromptId);
+          this.todoStopGuardReleasedDuringClaim.delete(ownerPromptId);
+        }
+      }
+    }
   }
   #notificationContinuesTodoStopGuardWorkChain(item) {
-    const baseline = this.todoStopGuardBackgroundBaseline;
-    if (item.kind === "agent") return !baseline.agents.has(item.taskId);
-    if (item.kind === "shell") return !baseline.shells.has(item.taskId);
-    return !baseline.monitors.has(item.taskId);
+    return item.continuesTodoStopGuardWorkChain;
   }
   #cronContinuesTodoStopGuardWorkChain(item) {
     return item.source === "loop" && item.taskId !== void 0 && !this.todoStopGuardBackgroundBaseline.wakeups.has(item.taskId);
@@ -2744,6 +2861,37 @@ var Session = class {
       ])
     };
   }
+  #resetTodoStopGuardBackgroundLineage() {
+    this.relatedAgentIds.clear();
+    this.provisionalRelatedAgentCounts.clear();
+    this.todoStopGuardBackgroundBaseline = this.#captureTodoStopGuardBackgroundBaseline();
+    for (const item of this.notificationQueue) {
+      item.continuesTodoStopGuardWorkChain = false;
+    }
+  }
+  #agentContinuesTodoStopGuardWorkChain(taskId, visiting = /* @__PURE__ */ new Set()) {
+    if (this.relatedAgentIds.has(taskId) || (this.provisionalRelatedAgentCounts.get(taskId) ?? 0) > 0) {
+      return true;
+    }
+    if (this.todoStopGuardBackgroundBaseline.agents.has(taskId)) return false;
+    if (visiting.has(taskId)) return false;
+    const task = this.config.getBackgroundTaskRegistry?.()?.get?.(taskId);
+    if (!task) return false;
+    if (!task.parentAgentId) return true;
+    visiting.add(taskId);
+    const related = this.#agentContinuesTodoStopGuardWorkChain(
+      task.parentAgentId,
+      visiting
+    );
+    visiting.delete(taskId);
+    return related;
+  }
+  #monitorContinuesTodoStopGuardWorkChain(monitorId, ownerAgentId) {
+    if (ownerAgentId) {
+      return this.#agentContinuesTodoStopGuardWorkChain(ownerAgentId);
+    }
+    return !this.todoStopGuardBackgroundBaseline.monitors.has(monitorId);
+  }
   #hasRelevantTodoStopGuardBackgroundInput() {
     if (this.notificationQueue.some(
       (item) => this.#notificationContinuesTodoStopGuardWorkChain(item)
@@ -2755,7 +2903,7 @@ var Session = class {
     const baseline = this.todoStopGuardBackgroundBaseline;
     const agents = this.config.getBackgroundTaskRegistry?.()?.getAll?.() ?? [];
     if (agents.some(
-      (task) => !baseline.agents.has(task.id) && task.isBackgrounded && (task.status === "running" || task.status === "paused" || task.status === "cancelled" && !task.notified)
+      (task) => this.#agentContinuesTodoStopGuardWorkChain(task.id) && task.isBackgrounded && (task.status === "running" || task.status === "paused" || task.status === "cancelled" && !task.notified)
     )) {
       return true;
     }
@@ -2767,7 +2915,10 @@ var Session = class {
     }
     const monitors = this.config.getMonitorRegistry?.()?.getAll?.() ?? [];
     if (monitors.some(
-      (task) => !baseline.monitors.has(task.id) && task.status === "running"
+      (task) => this.#monitorContinuesTodoStopGuardWorkChain(
+        task.id,
+        task.ownerAgentId
+      ) && task.status === "running"
     )) {
       return true;
     }
@@ -2898,12 +3049,19 @@ var Session = class {
     return this.closeGateCompletion ?? Promise.resolve();
   }
   async waitForActiveTurnsToSettle() {
-    const pending = [
-      this.pendingPromptCompletion,
-      this.cronCompletion,
-      this.notificationCompletion
-    ].filter((completion) => completion !== null);
-    await Promise.allSettled(pending);
+    while (this.#hasActiveTurn()) {
+      const pending = [
+        this.pendingPromptCompletion,
+        this.cronCompletion,
+        this.notificationCompletion
+      ].filter(
+        (completion) => completion !== null
+      );
+      if (pending.length > 0) {
+        await Promise.allSettled(pending);
+      }
+      await new Promise((resolve5) => setImmediate(resolve5));
+    }
   }
   #deferAutomaticQueueDrainUntilTurnsSettle() {
     const completions = [
@@ -2932,12 +3090,12 @@ var Session = class {
   dispose() {
     this.disposed = true;
     this.closing = true;
+    this.pendingPrompt?.abort(SESSION_DISPOSE_ABORT_REASON);
+    this.pendingPrompt = null;
     this.resolveCloseGate?.();
     this.resolveCloseGate = null;
     this.closeGateCompletion = null;
-    this.todoStopGuardQueuedPromptPriority = false;
-    this.todoStopGuardDrainAutomaticQueuesWhenIdle = false;
-    this.todoStopGuard.clearTrust();
+    this.hardSuspendTodoStopGuard();
     this.notificationQueue = [];
     this.cronQueue = [];
     this.notificationAbortController?.abort();
@@ -3178,6 +3336,9 @@ var Session = class {
       throw RequestError.invalidParams(void 0, "Session is closing");
     }
     await this.assertCanStartTurn();
+    if (this.closing) {
+      throw RequestError.invalidParams(void 0, "Session is closing");
+    }
     if (admissionCancellation?.aborted) {
       return { stopReason: "cancelled" };
     }
@@ -3239,9 +3400,9 @@ var Session = class {
       return { stopReason: "cancelled" };
     }
     if (todoStopGuardPreparation.startsWorkChain) {
-      this.todoStopGuardQueuedPromptPriority = false;
+      this.#clearTodoStopGuardQueuedPromptWait();
       this.todoStopGuard.startOrdinaryPrompt();
-      this.todoStopGuardBackgroundBaseline = this.#captureTodoStopGuardBackgroundBaseline();
+      this.#resetTodoStopGuardBackgroundLineage();
     }
     this.duplicateProviderToolCallResponseIds.clear();
     const channelDelivery = parsePromptChannelDelivery(params);
@@ -3282,9 +3443,12 @@ var Session = class {
       }
       throw error;
     } finally {
+      const stillOwnsPendingPrompt = this.pendingPrompt === pendingSend;
       releasePendingSend();
       const shouldDrainAutomaticQueues = todoStopGuardPreparation.drainSupersededAutomaticQueues || this.todoStopGuardDrainAutomaticQueuesWhenIdle || this.todoStopGuard.blocksUnrelatedAutomaticTurns || this.todoStopGuard.hasCommittedContinuation || this.todoStopGuardQueuedPromptPriority;
-      this.todoStopGuardDrainAutomaticQueuesWhenIdle = false;
+      if (stillOwnsPendingPrompt) {
+        this.todoStopGuardDrainAutomaticQueuesWhenIdle = false;
+      }
       if (shouldDrainAutomaticQueues) {
         void this.#drainCronQueue();
         void this.#drainNotificationQueue();
@@ -3505,6 +3669,9 @@ var Session = class {
             let parts;
             let fullTurnModelOverride;
             const onFullTurnModel = /* @__PURE__ */ __name((model) => {
+              if (fullTurnModelOverride === model) {
+                return true;
+              }
               if (fullTurnModelOverride) {
                 return false;
               }
@@ -3713,7 +3880,8 @@ ${this.pendingRecoveredAgentsNotice}
                     }
                     strippedOrphanEntries = null;
                   }
-                  if (pendingSend.signal.aborted && pendingSend.signal.reason === USER_CANCEL_ABORT_REASON && this.#isAbortError(error)) {
+                  const isControlledCancellation = pendingSend.signal.aborted && (pendingSend.signal.reason === USER_CANCEL_ABORT_REASON || pendingSend.signal.reason === SESSION_DISPOSE_ABORT_REASON);
+                  if (isControlledCancellation) {
                     this.todoStopGuard.suspend();
                     return { stopReason: "cancelled" };
                   }
@@ -3765,7 +3933,8 @@ ${this.pendingRecoveredAgentsNotice}
                       pendingSend.signal,
                       promptId,
                       functionCalls,
-                      toolLoopState
+                      toolLoopState,
+                      onFullTurnModel
                     )
                   );
                   if (toolRun.stopAfterPermissionCancel) {
@@ -3837,6 +4006,9 @@ ${this.pendingRecoveredAgentsNotice}
     let stopHookIterationCount = 0;
     let stopHookReasons = [];
     const onFullTurnModel = /* @__PURE__ */ __name((model) => {
+      if (modelOverride === model) {
+        return true;
+      }
       if (modelOverride) {
         return false;
       }
@@ -3845,6 +4017,9 @@ ${this.pendingRecoveredAgentsNotice}
     }, "onFullTurnModel");
     let midTurnContinuationCount = 0;
     while (true) {
+      if (this.pendingPrompt && this.pendingPrompt !== pendingSend) {
+        return { stopReason: "cancelled" };
+      }
       if (pendingSend.signal.aborted) {
         this.todoStopGuard.suspend();
         return { stopReason: "cancelled" };
@@ -3856,15 +4031,26 @@ ${this.pendingRecoveredAgentsNotice}
         return { stopReason: "end_turn" };
       }
       if (this.todoStopGuard.needsStopInspection) {
-        this.#beginTodoStopGuardQueuedPromptCheck();
         const drained = await this.#drainMidTurnInput(pendingSend.signal, {
           watchQueuedPromptForTodoStopGuard: true,
           onFullTurnModel
         });
-        const waitsForQueuedPrompt = this.#finishTodoStopGuardQueuedPromptCheck(
-          drained.hasQueuedPrompt
-        );
         if (drained.parts.length > 0) {
+          if (drained.hasQueuedPrompt) {
+            const claim = await this.#claimTodoStopGuardContinuation(
+              pendingSend.signal
+            );
+            if (claim === "queued") {
+              this.#preserveUnsentMessageHistory(
+                { role: "user", parts: drained.parts },
+                true
+              );
+              return { stopReason: "end_turn" };
+            }
+            if (claim === "unavailable") {
+              this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+            }
+          }
           this.todoStopGuard.acceptMidTurnUserInput();
           const continuation2 = await this.#runStopContinuation(
             pendingSend,
@@ -3883,13 +4069,22 @@ ${this.pendingRecoveredAgentsNotice}
           }
           continue;
         }
-        if (waitsForQueuedPrompt) {
-          return { stopReason: "end_turn" };
+        if (!drained.reliable) {
+          this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+        } else if (drained.hasQueuedPrompt) {
+          const claim = await this.#claimTodoStopGuardContinuation(
+            pendingSend.signal
+          );
+          if (claim === "queued") {
+            return { stopReason: "end_turn" };
+          }
+          if (claim === "unavailable") {
+            this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+          }
         }
       }
       let externalReason = null;
       let stopHookCount = 1;
-      let queuedPromptArrivedDuringStopHook = false;
       if (allowExternalHooks && hooksEnabled && messageBus && stopHookIterationCount < stopHookBlockingCap && this.config.hasHooksForEvent?.("Stop")) {
         const responseText = this.#getCurrentChat().getLastModelMessageText?.() || "[no response text]";
         const contextUsage = buildContextUsage(
@@ -3920,14 +4115,26 @@ ${this.pendingRecoveredAgentsNotice}
           return { stopReason: "cancelled" };
         }
         if (this.todoStopGuard.needsStopInspection) {
-          this.#beginTodoStopGuardQueuedPromptCheck();
           const drained = await this.#drainMidTurnInput(pendingSend.signal, {
             watchQueuedPromptForTodoStopGuard: true,
             onFullTurnModel
           });
-          const waitsForQueuedPrompt = this.#finishTodoStopGuardQueuedPromptCheck(drained.hasQueuedPrompt);
-          queuedPromptArrivedDuringStopHook = waitsForQueuedPrompt;
           if (drained.parts.length > 0) {
+            if (drained.hasQueuedPrompt) {
+              const claim = await this.#claimTodoStopGuardContinuation(
+                pendingSend.signal
+              );
+              if (claim === "queued") {
+                this.#preserveUnsentMessageHistory(
+                  { role: "user", parts: drained.parts },
+                  true
+                );
+                return { stopReason: "end_turn" };
+              }
+              if (claim === "unavailable") {
+                this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+              }
+            }
             this.todoStopGuard.acceptMidTurnUserInput();
             const continuation2 = await this.#runStopContinuation(
               pendingSend,
@@ -3944,6 +4151,20 @@ ${this.pendingRecoveredAgentsNotice}
             if (continuation2.kind === "terminal") {
               return { stopReason: continuation2.stopReason };
             }
+            continue;
+          }
+          if (!drained.reliable) {
+            this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+          } else if (drained.hasQueuedPrompt) {
+            const claim = await this.#claimTodoStopGuardContinuation(
+              pendingSend.signal
+            );
+            if (claim === "queued") {
+              return { stopReason: "end_turn" };
+            }
+            if (claim === "unavailable") {
+              this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+            }
           }
         }
         const hookOutput = response.output ? createHookOutput("Stop", response.output) : void 0;
@@ -3956,9 +4177,13 @@ ${this.pendingRecoveredAgentsNotice}
           stopHookIterationCount++;
           stopHookReasons = [...stopHookReasons, externalReason];
           stopHookCount = response.stopHookCount ?? 1;
+        } else {
+          stopHookIterationCount = 0;
+          stopHookReasons = [];
+          stopHookCount = 1;
         }
       }
-      const guardDecision = queuedPromptArrivedDuringStopHook ? null : this.todoStopGuard.decide(
+      const guardDecision = this.todoStopGuard.decide(
         this.todoStopGuard.needsStopInspection ? this.#hasRelevantTodoStopGuardBackgroundInput() : false
       );
       const guardContinuation = guardDecision?.kind === "continue" ? guardDecision : null;
@@ -3981,9 +4206,6 @@ ${this.pendingRecoveredAgentsNotice}
         debugLogger6.warn(warning);
         return { stopReason: "end_turn" };
       }
-      if (queuedPromptArrivedDuringStopHook) {
-        return { stopReason: "end_turn" };
-      }
       if (!externalReason && !guardContinuation) {
         return { stopReason: "end_turn" };
       }
@@ -4039,8 +4261,27 @@ ${this.pendingRecoveredAgentsNotice}
     let initialSend = true;
     let automaticContinuationValidated = false;
     let supersededAutomaticContinuation = false;
+    const preservePendingMessage = /* @__PURE__ */ __name((message) => {
+      if (initialSend) return;
+      const preservedParts = (message.parts ?? []).filter(
+        (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+      );
+      this.#preserveUnsentMessageHistory(
+        preservedParts.length > 0 ? { ...message, parts: preservedParts } : null,
+        true
+      );
+    }, "preservePendingMessage");
     while (nextMessage !== null) {
+      if (this.pendingPrompt && this.pendingPrompt !== pendingSend) {
+        preservePendingMessage(nextMessage);
+        return {
+          kind: "terminal",
+          stopReason: "cancelled",
+          ...supersededAutomaticContinuation ? { supersededAutomaticContinuation: true } : {}
+        };
+      }
       if (pendingSend.signal.aborted) {
+        preservePendingMessage(nextMessage);
         this.todoStopGuard.suspend();
         return {
           kind: "terminal",
@@ -4058,12 +4299,18 @@ ${this.pendingRecoveredAgentsNotice}
       let guardForThisSend = nextGuardContinuation;
       let preserveGuardOnSkippedSend = false;
       let messageForPreservation = nextMessage;
+      let preparedMessage = nextMessage.parts ?? [];
+      let preservePreparedMessageOnSkippedSend = !guardForThisSend && preparedMessage.some(
+        (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+      );
       const externalParts = initialSend ? options.externalParts : void 0;
       const promptIdForSend = guardForThisSend && guardForThisSend.attempt !== options.guardContinuation?.attempt ? toolPromptId + "_todo_stop_guard_" + guardForThisSend.attempt : streamPromptId;
       const messageDisplay = this.#createMessageDisplayDispatcher(
         pendingSend.signal
       );
       let channelDeliveryResponseBlock;
+      let providerSendChat;
+      let userContentPushCountBeforeSend = 0;
       try {
         const sendResult = await this.#sendMessageStreamWithAutoCompression(
           promptIdForSend,
@@ -4072,44 +4319,134 @@ ${this.pendingRecoveredAgentsNotice}
           {
             skipCompression: skipCompression || (guardForThisSend?.attempt ?? 0) > 1,
             getModelOverride: options.getModelOverride,
-            beforeSend: guardForThisSend || !automaticContinuationValidated && options.onAutomaticContinuationValidated ? async ({ compressionFailed }) => {
-              const inspectGuardPriority = guardForThisSend !== void 0;
-              const guardCompressionFailed = inspectGuardPriority && compressionFailed;
-              if (inspectGuardPriority) {
-                this.#beginTodoStopGuardQueuedPromptCheck();
-                const drained = await this.#drainMidTurnInput(
-                  pendingSend.signal,
-                  {
-                    watchQueuedPromptForTodoStopGuard: true,
-                    onFullTurnModel: options.onFullTurnModel
+            prepareBeforeCompression: guardForThisSend ? async () => {
+              const drained = await this.#drainMidTurnInput(
+                pendingSend.signal,
+                {
+                  watchQueuedPromptForTodoStopGuard: true,
+                  onFullTurnModel: options.onFullTurnModel
+                }
+              );
+              if (drained.parts.length > 0) {
+                if (drained.hasQueuedPrompt) {
+                  const claim = await this.#claimTodoStopGuardContinuation(
+                    pendingSend.signal
+                  );
+                  if (claim === "queued") {
+                    guardForThisSend = void 0;
+                    nextGuardContinuation = void 0;
+                    preserveGuardOnSkippedSend = true;
+                    preservePreparedMessageOnSkippedSend = true;
+                    messageForPreservation = {
+                      role: "user",
+                      parts: drained.parts
+                    };
+                    if (initialSend) {
+                      supersededAutomaticContinuation = true;
+                    }
+                    return { kind: "stop", stopReason: "end_turn" };
                   }
+                  if (claim === "unavailable") {
+                    this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+                  }
+                }
+                preservePreparedMessageOnSkippedSend = true;
+                this.todoStopGuard.acceptMidTurnUserInput();
+                guardForThisSend = void 0;
+                nextGuardContinuation = void 0;
+                if (initialSend) {
+                  supersededAutomaticContinuation = true;
+                }
+                preparedMessage = initialSend ? drained.parts : [
+                  ...(nextMessage?.parts ?? []).filter(
+                    (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                  ),
+                  ...drained.parts
+                ];
+                messageForPreservation = {
+                  role: "user",
+                  parts: preparedMessage
+                };
+                return { kind: "send", message: preparedMessage };
+              }
+              if (!drained.reliable) {
+                this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+                guardForThisSend = void 0;
+                nextGuardContinuation = void 0;
+                if (!options.externalParts) {
+                  preserveGuardOnSkippedSend = true;
+                  return { kind: "stop", stopReason: "end_turn" };
+                }
+                if (!initialSend && nextMessage) {
+                  nextMessage = {
+                    ...nextMessage,
+                    parts: (nextMessage.parts ?? []).filter(
+                      (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                    )
+                  };
+                }
+              } else if (drained.hasQueuedPrompt) {
+                const probe = await this.#claimTodoStopGuardContinuation(
+                  pendingSend.signal
                 );
-                const waitsForQueuedPrompt = this.#finishTodoStopGuardQueuedPromptCheck(
-                  drained.hasQueuedPrompt
-                );
-                if (drained.parts.length > 0) {
-                  this.todoStopGuard.acceptMidTurnUserInput();
+                if (probe === "queued") {
                   guardForThisSend = void 0;
                   nextGuardContinuation = void 0;
+                  preserveGuardOnSkippedSend = true;
                   if (initialSend) {
                     supersededAutomaticContinuation = true;
                   }
-                  const replacementMessage = initialSend ? drained.parts : [
-                    ...(nextMessage?.parts ?? []).filter(
-                      (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
-                    ),
-                    ...drained.parts
-                  ];
-                  messageForPreservation = {
-                    role: "user",
-                    parts: replacementMessage
-                  };
-                  return {
-                    kind: "send",
-                    message: replacementMessage
-                  };
+                  return { kind: "stop", stopReason: "end_turn" };
                 }
-                if (waitsForQueuedPrompt) {
+                if (probe === "unavailable") {
+                  this.todoStopGuard.blockUntilOrdinaryPromptStarts();
+                  guardForThisSend = void 0;
+                  nextGuardContinuation = void 0;
+                  if (!options.externalParts) {
+                    preserveGuardOnSkippedSend = true;
+                    return { kind: "stop", stopReason: "end_turn" };
+                  }
+                  if (!initialSend && nextMessage) {
+                    nextMessage = {
+                      ...nextMessage,
+                      parts: (nextMessage.parts ?? []).filter(
+                        (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                      )
+                    };
+                  }
+                }
+              }
+              if (guardForThisSend && this.config.getApprovalMode() === "plan" /* PLAN */) {
+                this.#clearTodoStopGuardTrustAndDrainAutomaticQueues();
+              }
+              if (guardForThisSend) {
+                const hasRelevantBackgroundInput = this.#hasRelevantTodoStopGuardBackgroundInput();
+                const refreshedDecision = guardForThisSend.toolClosure ? this.todoStopGuard.decideToolClosure(
+                  guardForThisSend.attempt - 1,
+                  hasRelevantBackgroundInput
+                ) : this.todoStopGuard.decide(hasRelevantBackgroundInput);
+                if (refreshedDecision.kind !== "continue" || refreshedDecision.attempt !== guardForThisSend.attempt) {
+                  guardForThisSend = void 0;
+                  nextGuardContinuation = void 0;
+                  if (!options.externalParts) {
+                    preserveGuardOnSkippedSend = true;
+                    return { kind: "stop", stopReason: "end_turn" };
+                  }
+                  if (!initialSend && nextMessage) {
+                    nextMessage = {
+                      ...nextMessage,
+                      parts: (nextMessage.parts ?? []).filter(
+                        (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                      )
+                    };
+                  }
+                }
+              }
+              if (guardForThisSend) {
+                const claim = await this.#claimTodoStopGuardContinuation(
+                  pendingSend.signal
+                );
+                if (claim === "queued") {
                   guardForThisSend = void 0;
                   nextGuardContinuation = void 0;
                   preserveGuardOnSkippedSend = true;
@@ -4118,41 +4455,21 @@ ${this.pendingRecoveredAgentsNotice}
                   }
                   return { kind: "stop", stopReason: "end_turn" };
                 }
-                if (guardCompressionFailed) {
-                  this.todoStopGuard.suspend();
+                if (claim === "unavailable") {
+                  this.todoStopGuard.blockUntilOrdinaryPromptStarts();
                   guardForThisSend = void 0;
                   nextGuardContinuation = void 0;
-                  if (!externalParts || externalParts.length === 0) {
+                  if (!options.externalParts) {
                     preserveGuardOnSkippedSend = true;
                     return { kind: "stop", stopReason: "end_turn" };
                   }
-                }
-                if (guardForThisSend && this.config.getApprovalMode() === "plan" /* PLAN */) {
-                  this.#clearTodoStopGuardTrustAndDrainAutomaticQueues();
-                }
-                if (guardForThisSend) {
-                  const hasRelevantBackgroundInput = this.#hasRelevantTodoStopGuardBackgroundInput();
-                  const refreshedDecision = guardForThisSend.toolClosure ? this.todoStopGuard.decideToolClosure(
-                    guardForThisSend.attempt - 1,
-                    hasRelevantBackgroundInput
-                  ) : this.todoStopGuard.decide(
-                    hasRelevantBackgroundInput
-                  );
-                  if (refreshedDecision.kind !== "continue" || refreshedDecision.attempt !== guardForThisSend.attempt) {
-                    guardForThisSend = void 0;
-                    nextGuardContinuation = void 0;
-                    if (!options.externalParts) {
-                      preserveGuardOnSkippedSend = true;
-                      return { kind: "stop", stopReason: "end_turn" };
-                    }
-                    if (!initialSend && nextMessage) {
-                      nextMessage = {
-                        ...nextMessage,
-                        parts: (nextMessage.parts ?? []).filter(
-                          (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
-                        )
-                      };
-                    }
+                  if (!initialSend && nextMessage) {
+                    nextMessage = {
+                      ...nextMessage,
+                      parts: (nextMessage.parts ?? []).filter(
+                        (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                      )
+                    };
                   }
                 }
               }
@@ -4160,16 +4477,42 @@ ${this.pendingRecoveredAgentsNotice}
                 await options.onAutomaticContinuationValidated();
                 automaticContinuationValidated = true;
               }
-              const selectedMessage = guardForThisSend || !externalParts ? nextMessage?.parts ?? [] : externalParts;
+              preparedMessage = guardForThisSend || !externalParts ? nextMessage?.parts ?? [] : externalParts;
               messageForPreservation = {
                 role: "user",
-                parts: selectedMessage
+                parts: preparedMessage
               };
-              return {
-                kind: "send",
-                message: selectedMessage
+              preservePreparedMessageOnSkippedSend = preparedMessage.some(
+                (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+              );
+              return { kind: "send", message: preparedMessage };
+            } : void 0,
+            beforeSend: /* @__PURE__ */ __name(async ({ compressionFailed }) => {
+              if (guardForThisSend && compressionFailed) {
+                this.todoStopGuard.suspend();
+                guardForThisSend = void 0;
+                nextGuardContinuation = void 0;
+                if (!options.externalParts) {
+                  preserveGuardOnSkippedSend = true;
+                  return { kind: "stop", stopReason: "end_turn" };
+                }
+                preparedMessage = initialSend && externalParts ? externalParts : preparedMessage.filter(
+                  (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+                );
+                preservePreparedMessageOnSkippedSend = true;
+              }
+              if (!automaticContinuationValidated && options.onAutomaticContinuationValidated) {
+                await options.onAutomaticContinuationValidated();
+                automaticContinuationValidated = true;
+              }
+              messageForPreservation = {
+                role: "user",
+                parts: preparedMessage
               };
-            } : void 0
+              providerSendChat = this.#getCurrentChat();
+              userContentPushCountBeforeSend = providerSendChat.getUserContentPushCount?.() ?? 0;
+              return { kind: "send", message: preparedMessage };
+            }, "beforeSend")
           }
         );
         if (!sendResult.responseStream) {
@@ -4185,7 +4528,7 @@ ${this.pendingRecoveredAgentsNotice}
           );
           this.#preserveUnsentMessageHistory(
             preservedParts.length > 0 ? { ...messageForPreservation, parts: preservedParts } : null,
-            sendResult.stopReason === "cancelled"
+            sendResult.stopReason === "cancelled" || preservePreparedMessageOnSkippedSend
           );
           return {
             kind: "terminal",
@@ -4207,7 +4550,7 @@ ${this.pendingRecoveredAgentsNotice}
           if (guardCommitted) {
             await this.#emitTodoStopGuardContinuation(guardForThisSend);
           }
-          if (!guardCommitted && externalParts) {
+          if (!guardCommitted && options.externalParts) {
             guardForThisSend = void 0;
           }
         }
@@ -4261,6 +4604,24 @@ ${this.pendingRecoveredAgentsNotice}
         }
       } catch (error) {
         streamFailed = true;
+        const preservedParts = (messageForPreservation.parts ?? []).filter(
+          (part) => !("text" in part && isTodoStopGuardPromptText(part.text))
+        );
+        if (preservedParts.length > 0 && (!providerSendChat || (providerSendChat.getUserContentPushCount?.() ?? 0) <= userContentPushCountBeforeSend)) {
+          this.#preserveUnsentMessageHistory(
+            { ...messageForPreservation, parts: preservedParts },
+            true
+          );
+        }
+        const isControlledCancellation = pendingSend.signal.aborted && (pendingSend.signal.reason === USER_CANCEL_ABORT_REASON || pendingSend.signal.reason === SESSION_DISPOSE_ABORT_REASON);
+        if (isControlledCancellation) {
+          this.todoStopGuard.suspend();
+          return {
+            kind: "terminal",
+            stopReason: "cancelled",
+            ...supersededAutomaticContinuation ? { supersededAutomaticContinuation: true } : {}
+          };
+        }
         this.todoStopGuard.pauseForTrustedRetry();
         const errorStatus = getErrorStatus(error);
         const errorMessage = error instanceof Error ? error.message : String(error);
@@ -4310,7 +4671,8 @@ ${this.pendingRecoveredAgentsNotice}
             pendingSend.signal,
             toolPromptId,
             functionCalls,
-            toolLoopState
+            toolLoopState,
+            options.onFullTurnModel
           )
         );
         if (toolRun.stopAfterPermissionCancel || toolRun.loopDetected) {
@@ -4468,6 +4830,19 @@ ${this.pendingRecoveredAgentsNotice}
    */
   async #sendMessageStreamWithAutoCompression(promptId, message, abortSignal, options = {}) {
     const geminiClient = this.config.getGeminiClient();
+    if (options.prepareBeforeCompression) {
+      const decision = await options.prepareBeforeCompression();
+      if (decision.kind === "stop") {
+        return { responseStream: null, stopReason: decision.stopReason };
+      }
+      message = decision.message;
+    }
+    if (abortSignal.aborted) {
+      debugLogger6.debug(
+        `Send aborted after pre-compression preparation for prompt ${promptId}`
+      );
+      return { responseStream: null, stopReason: "cancelled" };
+    }
     let compressionDiagnostic = null;
     let compressionInfo = null;
     let compressionFailed = false;
@@ -4489,10 +4864,13 @@ ${this.pendingRecoveredAgentsNotice}
           compressionDiagnostic = `IMPORTANT: This conversation ${reasonClause}. A compressed context will be sent for future messages (compressed from: ${compressed.originalTokenCount ?? "unknown"} to ${compressed.newTokenCount ?? "unknown"} tokens).`;
         }
       } catch (compressionError) {
-        if (abortSignal.aborted || this.#isAbortError(compressionError)) {
+        if (abortSignal.aborted) {
           debugLogger6.debug(`Auto-compression aborted for prompt ${promptId}`);
           return { responseStream: null, stopReason: "cancelled" };
         }
+        if (this.#isAbortError(compressionError)) {
+          throw compressionError;
+        }
         debugLogger6.warn(
           `Auto-compression failed for prompt ${promptId}; proceeding without compression: ` + this.#formatError(compressionError)
         );
@@ -4707,7 +5085,8 @@ ${this.pendingRecoveredAgentsNotice}
     if (this.midTurnDrainUnavailable) {
       return {
         parts: await this.#buildMidTurnParts(recovered, abortSignal, options),
-        hasQueuedPrompt: false
+        hasQueuedPrompt: false,
+        reliable: false
       };
     }
     let drainPromise;
@@ -4730,13 +5109,18 @@ ${this.pendingRecoveredAgentsNotice}
         clearTimeout(timeoutHandle);
       }
       this.midTurnDrainTimeoutStrikes = 0;
+      const reliable = isValidMidTurnDrainResponse(
+        response,
+        options.watchQueuedPromptForTodoStopGuard === true
+      );
       return {
         parts: await this.#buildMidTurnParts(
           [...recovered, ...parseMidTurnDrainResponse(response)],
           abortSignal,
           options
         ),
-        hasQueuedPrompt: isRecord2(response) && response["hasQueuedPrompt"] === true
+        hasQueuedPrompt: isRecord2(response) && response["hasQueuedPrompt"] === true,
+        reliable
       };
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : error && typeof error === "object" && "message" in error ? String(error.message) : String(error);
@@ -4755,7 +5139,8 @@ ${this.pendingRecoveredAgentsNotice}
       );
       return {
         parts: await this.#buildMidTurnParts(recovered, abortSignal, options),
-        hasQueuedPrompt: false
+        hasQueuedPrompt: false,
+        reliable: false
       };
     }
   }
@@ -4895,26 +5280,39 @@ ${this.pendingRecoveredAgentsNotice}
     );
   }
   #enqueueCronPrompt(item) {
-    if ((this.todoStopGuard.blocksUnrelatedAutomaticTurns || this.todoStopGuardQueuedPromptPriority) && !this.#cronContinuesTodoStopGuardWorkChain(item)) {
-      if (item.taskId) {
+    const automaticWorkDeferred = this.todoStopGuard.blocksUnrelatedAutomaticTurns || this.todoStopGuardQueuedPromptPriority;
+    if (automaticWorkDeferred) {
+      const incomingIsRelated = this.#cronContinuesTodoStopGuardWorkChain(item);
+      let shouldAppend = true;
+      if (!incomingIsRelated && item.taskId) {
         const duplicateIndex = this.cronQueue.findIndex(
           (queued) => queued.taskId === item.taskId && !this.#cronContinuesTodoStopGuardWorkChain(queued)
         );
         if (duplicateIndex >= 0) {
           this.cronQueue[duplicateIndex] = item;
-          return;
+          shouldAppend = false;
         }
       }
-      const unrelatedIndices = this.cronQueue.map(
-        (queued, index) => this.#cronContinuesTodoStopGuardWorkChain(queued) ? -1 : index
-      ).filter((index) => index >= 0);
-      if (unrelatedIndices.length >= MAX_DEFERRED_UNRELATED_CRON_QUEUE) {
-        const evictedIndex = unrelatedIndices[0];
+      const maxBeforeAppend = MAX_DEFERRED_UNRELATED_CRON_QUEUE - (shouldAppend && !incomingIsRelated ? 1 : 0);
+      let unrelatedCount = this.cronQueue.filter(
+        (queued) => !this.#cronContinuesTodoStopGuardWorkChain(queued)
+      ).length;
+      const evictedTaskIds = [];
+      while (unrelatedCount > maxBeforeAppend) {
+        const evictedIndex = this.cronQueue.findIndex(
+          (queued) => !this.#cronContinuesTodoStopGuardWorkChain(queued)
+        );
+        if (evictedIndex < 0) break;
         const [evicted] = this.cronQueue.splice(evictedIndex, 1);
+        evictedTaskIds.push(evicted?.taskId ?? "unknown");
+        unrelatedCount--;
+      }
+      if (evictedTaskIds.length > 0) {
         debugLogger6.warn(
-          `Cron queue overflow while automatic work is deferred: evicting task=${evicted?.taskId ?? "unknown"}`
+          `Cron queue overflow while automatic work is deferred: evicted ${evictedTaskIds.length} unrelated task(s): ${evictedTaskIds.join(", ")}`
         );
       }
+      if (!shouldAppend) return;
     }
     this.cronQueue.push(item);
   }
@@ -5316,6 +5714,7 @@ ${this.pendingRecoveredAgentsNotice}
           taskId: meta.agentId,
           status: meta.status,
           kind: "agent",
+          continuesTodoStopGuardWorkChain: this.#agentContinuesTodoStopGuardWorkChain(meta.agentId),
           toolUseId: meta.toolUseId
         });
       }
@@ -5331,6 +5730,10 @@ ${this.pendingRecoveredAgentsNotice}
         taskId: meta.monitorId,
         status: meta.status,
         kind: "monitor",
+        continuesTodoStopGuardWorkChain: this.#monitorContinuesTodoStopGuardWorkChain(
+          meta.monitorId,
+          meta.ownerAgentId
+        ),
         toolUseId: meta.toolUseId
       });
     });
@@ -5341,7 +5744,8 @@ ${this.pendingRecoveredAgentsNotice}
         modelText,
         taskId: meta.shellId,
         status: meta.status,
-        kind: "shell"
+        kind: "shell",
+        continuesTodoStopGuardWorkChain: !this.todoStopGuardBackgroundBaseline.shells.has(meta.shellId)
       });
     });
     this.config.getChatRecordingService()?.setTitleRecordedCallback((customTitle, titleSource, sessionId) => {
@@ -5473,7 +5877,12 @@ ${this.pendingRecoveredAgentsNotice}
           if (ac.signal.aborted) return;
           await this.#emitBackgroundNotificationDisplay(item);
           const notificationParts = [{ text: item.modelText }];
-          this.config.getChatRecordingService()?.recordNotification(notificationParts, item.displayText);
+          this.config.getChatRecordingService()?.recordNotification(notificationParts, item.displayText, {
+            taskId: item.taskId,
+            status: item.status,
+            kind: item.kind,
+            toolUseId: item.toolUseId
+          });
           const notificationReminders = await this.#buildInitialSystemReminders();
           let nextMessage = {
             role: "user",
@@ -5926,7 +6335,7 @@ ${this.pendingRecoveredAgentsNotice}
    * sequential batch to preserve the implicit ordering the model may rely
    * on. Response-part ordering matches the original `functionCalls` order.
    */
-  async runToolCalls(abortSignal, promptId, functionCalls, toolLoopState) {
+  async runToolCalls(abortSignal, promptId, functionCalls, toolLoopState, onFullTurnModel) {
     const dedupedFunctionCalls = dedupeToolCallsById(functionCalls);
     const generatedCallIdBase = randomUUID();
     const executionCallIds = new Map(
@@ -6203,7 +6612,8 @@ ${this.pendingRecoveredAgentsNotice}
             toolLoopState,
             recordSkippedToolCall,
             queueToolResultRecord,
-            executionCallIds.get(calls[i])
+            executionCallIds.get(calls[i]),
+            onFullTurnModel
           );
           results[i] = r;
           if (r.loopDetected) {
@@ -6237,7 +6647,8 @@ ${this.pendingRecoveredAgentsNotice}
           toolLoopState,
           recordSkippedToolCall,
           queueToolResultRecord,
-          executionCallIds.get(calls[idx])
+          executionCallIds.get(calls[idx]),
+          onFullTurnModel
         ).then((r) => {
           results[idx] = r;
         }).finally(() => {
@@ -6361,7 +6772,8 @@ ${this.pendingRecoveredAgentsNotice}
               toolLoopState,
               recordSkippedToolCall,
               queueToolResultRecord,
-              executionCallIds.get(fc)
+              executionCallIds.get(fc),
+              onFullTurnModel
             );
             parts.push(...r.parts);
             collectMemoryWriteCandidates(r);
@@ -6426,7 +6838,7 @@ ${this.pendingRecoveredAgentsNotice}
     }
     return reminders;
   }
-  async runTool(abortSignal, promptId, fc, onStopAfterPermissionCancel, toolLoopState, recordSkippedToolCall, queueToolResultRecord, generatedCallId) {
+  async runTool(abortSignal, promptId, fc, onStopAfterPermissionCancel, toolLoopState, recordSkippedToolCall, queueToolResultRecord, generatedCallId, onFullTurnModel) {
     const callId = fc.id ?? generatedCallId ?? `${fc.name}-${Date.now()}`;
     let args = fc.args ?? {};
     if (toolLoopState?.loopDetected) {
@@ -6542,7 +6954,8 @@ ${this.pendingRecoveredAgentsNotice}
         call_id: callId,
         tool_name: policyToolName
       },
-      tool.description
+      tool.description,
+      promptId
     );
     let spanSuccess = false;
     try {
@@ -6581,6 +6994,10 @@ ${this.pendingRecoveredAgentsNotice}
         let toolBuildSucceeded = false;
         try {
           const invocation = tool.build(args);
+          if (policyToolName === ToolNames.MONITOR) {
+            const callIdAware = invocation;
+            callIdAware.setCallId?.(callId);
+          }
           toolBuildSucceeded = true;
           const taskEventEmitter = invocation.eventEmitter;
           if (isAgentTool && taskEventEmitter) {
@@ -7096,6 +7513,33 @@ ${this.pendingRecoveredAgentsNotice}
               );
             }
           }
+          const continuedAgentId = toolName === ToolNames.SEND_MESSAGE && typeof args["task_id"] === "string" && args["task_id"].length > 0 ? args["task_id"] : void 0;
+          const provisionalRelatedAgent = continuedAgentId !== void 0 && !this.relatedAgentIds.has(continuedAgentId);
+          if (provisionalRelatedAgent) {
+            this.provisionalRelatedAgentCounts.set(
+              continuedAgentId,
+              (this.provisionalRelatedAgentCounts.get(continuedAgentId) ?? 0) + 1
+            );
+          }
+          let relatedAgentSettled = false;
+          const settleRelatedAgent = /* @__PURE__ */ __name((succeeded2) => {
+            if (relatedAgentSettled || !provisionalRelatedAgent || !continuedAgentId) {
+              return;
+            }
+            relatedAgentSettled = true;
+            const remaining = (this.provisionalRelatedAgentCounts.get(continuedAgentId) ?? 1) - 1;
+            if (remaining > 0) {
+              this.provisionalRelatedAgentCounts.set(
+                continuedAgentId,
+                remaining
+              );
+            } else {
+              this.provisionalRelatedAgentCounts.delete(continuedAgentId);
+            }
+            if (succeeded2) {
+              this.relatedAgentIds.add(continuedAgentId);
+            }
+          }, "settleRelatedAgent");
           const execSpan = startToolExecutionSpan();
           let toolResult;
           let isExecutionTimeout = false;
@@ -7155,6 +7599,7 @@ ${this.pendingRecoveredAgentsNotice}
             }
             isExecutionTimeout = toolResult.error?.type === "execution_timeout" /* EXECUTION_TIMEOUT */;
             aborted = activeToolAbortSignal.aborted && !isExecutionTimeout;
+            settleRelatedAgent(!toolResult.error && !aborted);
             endToolExecutionSpan(execSpan, {
               success: !toolResult.error && !aborted,
               error: aborted ? "tool_cancelled" : isExecutionTimeout ? "tool_timeout" : toolResult.error ? "tool_error" : void 0,
@@ -7162,6 +7607,7 @@ ${this.pendingRecoveredAgentsNotice}
               ...heartbeatSpanAttributes()
             });
           } catch (execError) {
+            settleRelatedAgent(false);
             endToolExecutionSpan(execSpan, {
               success: false,
               error: activeToolAbortSignal.aborted ? "tool_cancelled" : "tool_exception",
@@ -7177,7 +7623,7 @@ ${this.pendingRecoveredAgentsNotice}
               this.#clearTodoStopGuardTrustAndDrainAutomaticQueues();
             }
           }
-          const responseParts = toolResult.error ? convertToFunctionErrorResponse(
+          let responseParts = toolResult.error ? convertToFunctionErrorResponse(
             toolName,
             callId,
             toolResult.llmContent,
@@ -7255,6 +7701,18 @@ ${this.pendingRecoveredAgentsNotice}
               artifacts: failureHookResult.artifacts
             });
           }
+          const visionBridgeNotices = [];
+          responseParts = await bridgeToolResultImages({
+            config: this.config,
+            responseParts,
+            signal: activeToolAbortSignal,
+            onFullTurnModel,
+            onVisionBridgeNotice: /* @__PURE__ */ __name((notice) => visionBridgeNotices.push(notice), "onVisionBridgeNotice")
+          });
+          const visionBridgeNotice = visionBridgeNotices.length > 0 ? visionBridgeNotices.join("\n") : void 0;
+          if (visionBridgeNotice) {
+            await this.messageEmitter.emitAgentMessage(visionBridgeNotice);
+          }
           if (isTodoWriteTool) {
             const todos = this.planEmitter.extractTodos(
               toolResult.returnDisplay,
@@ -7298,6 +7756,7 @@ ${this.pendingRecoveredAgentsNotice}
               callId,
               status,
               resultDisplay: toolResult.returnDisplay,
+              ...visionBridgeNotice !== void 0 ? { visionBridgeNotice } : {},
               error: toolResult.error ? new Error(toolResult.error.message) : void 0,
               errorType: toolResult.error?.type
             }
@@ -7986,7 +8445,8 @@ function serializeMonitorTask(entry, now) {
     ...optionalField("pid", entry.pid),
     ...optionalField("exitCode", entry.exitCode),
     ...optionalField("error", entry.error),
-    ...optionalField("ownerAgentId", entry.ownerAgentId)
+    ...optionalField("ownerAgentId", entry.ownerAgentId),
+    ...optionalField("toolUseId", entry.toolUseId)
   };
 }
 __name(serializeMonitorTask, "serializeMonitorTask");
@@ -9657,7 +10117,97 @@ async function deliverClientMcpMessage(connection, serverName, message, sessionI
   return payload;
 }
 __name(deliverClientMcpMessage, "deliverClientMcpMessage");
+function readRuntimeMcpRequest(params) {
+  const name = params["name"];
+  if (typeof name !== "string" || name.length === 0) {
+    throw RequestError.invalidParams(void 0, "Invalid or missing name");
+  }
+  if (!isValidServerName(name)) {
+    throw RequestError.invalidParams(
+      void 0,
+      "Server name must be \u2264256 chars, alphanumeric + underscore/hyphen, and not a reserved JS property name"
+    );
+  }
+  const originatorClientId = params["originatorClientId"];
+  return {
+    name,
+    runtimeClientId: typeof originatorClientId === "string" && originatorClientId.length > 0 ? originatorClientId : "daemon"
+  };
+}
+__name(readRuntimeMcpRequest, "readRuntimeMcpRequest");
+function readRuntimeMcpAddRequest(params) {
+  const request = readRuntimeMcpRequest(params);
+  const config = params["config"];
+  if (!config || typeof config !== "object" || Array.isArray(config)) {
+    throw RequestError.invalidParams(void 0, "Invalid or missing config");
+  }
+  const {
+    trust: _trust,
+    authProviderType: _auth,
+    includeTools: _inc,
+    excludeTools: _exc,
+    cwd: _cwd,
+    env: _env,
+    oauth: _oauth,
+    headers: _headers,
+    type: _type,
+    [CLIENT_MCP_OVER_WS_CONFIG_FLAG]: clientMcpOverWs,
+    ...safeConfig
+  } = config;
+  if (clientMcpOverWs === true) {
+    safeConfig["type"] = "sdk";
+  }
+  return {
+    ...request,
+    config: safeConfig
+  };
+}
+__name(readRuntimeMcpAddRequest, "readRuntimeMcpAddRequest");
+function getRuntimeMcpManager(config) {
+  const manager = config.getToolRegistry()?.getMcpClientManager();
+  if (!manager) {
+    throw RequestError.internalError(
+      void 0,
+      "McpClientManager unavailable on this Config"
+    );
+  }
+  return manager;
+}
+__name(getRuntimeMcpManager, "getRuntimeMcpManager");
+async function addRuntimeMcpServer(manager, request) {
+  try {
+    return await manager.addRuntimeMcpServer(
+      request.name,
+      request.config,
+      request.runtimeClientId
+    );
+  } catch (err) {
+    if (err instanceof McpBudgetWouldExceedError) {
+      throw new RequestError(-32099, err.message, {
+        errorKind: err.code,
+        serverName: err.serverName
+      });
+    }
+    if (err instanceof McpServerSpawnFailedError) {
+      throw new RequestError(-32099, err.message, {
+        errorKind: err.code,
+        serverName: err.serverName,
+        ...err.details
+      });
+    }
+    if (err instanceof InvalidMcpConfigError) {
+      throw new RequestError(-32099, err.message, {
+        errorKind: err.code,
+        serverName: err.serverName,
+        reason: err.reason
+      });
+    }
+    throw err;
+  }
+}
+__name(addRuntimeMcpServer, "addRuntimeMcpServer");
 async function runAcpAgent(config, settings, argv, options) {
+  const sessionWriterLeaseEnabledAtStartup = typeof config.isSessionWriterLeaseEnabled === "function" ? config.isSessionWriterLeaseEnabled() : settings.merged.experimental?.sessionWriterLease === true;
   const privateParentCapability = options === void 0 ? process.env[PRIVATE_ACP_CAPABILITY_ENV] : options.privateParentCapability;
   delete process.env[PRIVATE_ACP_CAPABILITY_ENV];
   let acpConnection;
@@ -9697,12 +10247,31 @@ async function runAcpAgent(config, settings, argv, options) {
     console.info = console.error;
     console.debug = console.error;
     let initializeRequestId;
+    const pendingNewSessionRequestIds = /* @__PURE__ */ new Set();
     const stream = ndJsonStream(stdout, stdin, {
       onMessageObserved: /* @__PURE__ */ __name(({ direction, message }) => {
-        if (direction === "received" && "id" in message && "method" in message && message.method === "initialize") {
-          initializeRequestId = message.id;
+        if (direction === "received" && "id" in message && "method" in message) {
+          if (message.method === "session/new") {
+            pendingNewSessionRequestIds.add(message.id);
+          } else if (message.method === "initialize") {
+            initializeRequestId = message.id;
+          }
           return;
         }
+        if (direction === "sent" && "id" in message && !("method" in message) && pendingNewSessionRequestIds.delete(message.id) && "result" in message && typeof message.result === "object" && message.result !== null && "sessionId" in message.result && typeof message.result.sessionId === "string") {
+          const sessionId = message.result.sessionId;
+          setImmediate(() => {
+            const session = agentInstance?.getActiveSessions().find((candidate) => candidate.getId() === sessionId);
+            if (!session) return;
+            void preloadContentGenerator(
+              session.getConfig().getContentGenerator()
+            ).catch((error) => {
+              debugLogger7.debug(
+                `[ACP] Session provider preload failed for ${sessionId}: ${error instanceof Error ? error.message : String(error)}`
+              );
+            });
+          }).unref();
+        }
         if (direction !== "sent" || initializeRequestId === void 0 || !("id" in message) || "method" in message || message.id !== initializeRequestId) {
           return;
         }
@@ -9721,7 +10290,8 @@ async function runAcpAgent(config, settings, argv, options) {
         settings,
         argv,
         conn,
-        privateParentCapability
+        privateParentCapability,
+        sessionWriterLeaseEnabledAtStartup
       );
       return agentInstance;
     }, stream);
@@ -9730,29 +10300,34 @@ async function runAcpAgent(config, settings, argv, options) {
     eventLoopMonitor.dispose();
     throw err;
   }
-  const drainPoolBeforeExit = /* @__PURE__ */ __name(async (label) => {
+  const drainPoolBeforeExit = /* @__PURE__ */ __name(async (label, strict = false) => {
     if (!agentInstance) return;
     try {
       await agentInstance.shutdownMcpPool(8e3);
     } catch (err) {
       debugLogger7.error(`[ACP] MCP pool drain (${label}) error:`, err);
+      if (strict) throw err;
     }
   }, "drainPoolBeforeExit");
   let shuttingDown = false;
+  let managedShutdownPromise;
   let sessionEndFired = false;
-  const fireSessionEndOnce = /* @__PURE__ */ __name(async (reason) => {
+  const fireSessionEndOnce = /* @__PURE__ */ __name(async (reason, managedConfigs) => {
     if (sessionEndFired) return;
     sessionEndFired = true;
-    const configs = /* @__PURE__ */ new Set([config]);
-    const sessions = agentInstance?.getActiveSessions();
-    if (sessions) {
-      for (const session of sessions) {
-        const sessionConfig = session.getConfig?.();
-        if (sessionConfig) {
-          configs.add(sessionConfig);
+    const configs = new Set(managedConfigs ?? [config]);
+    if (!managedConfigs) {
+      const sessions = agentInstance?.getActiveSessions();
+      if (sessions) {
+        for (const session of sessions) {
+          const sessionConfig = session.getConfig?.();
+          if (sessionConfig) {
+            configs.add(sessionConfig);
+          }
         }
       }
     }
+    const failures = [];
     for (const cfg of configs) {
       const hookSystem = cfg.getHookSystem?.();
       const hooksEnabled = !cfg.getDisableAllHooks?.();
@@ -9760,18 +10335,101 @@ async function runAcpAgent(config, settings, argv, options) {
         continue;
       }
       try {
-        await hookSystem.fireSessionEndEvent(reason);
-      } catch (err) {
-        debugLogger7.warn(
-          `SessionEnd hook failed: ${err instanceof Error ? err.message : String(err)}`
-        );
+        await hookSystem.fireSessionEndEvent(reason);
+      } catch (err) {
+        if (managedConfigs) failures.push(err);
+        debugLogger7.warn(
+          `SessionEnd hook failed: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    if (failures.length > 0) {
+      throw new AggregateError(failures, "SessionEnd hook shutdown failed");
+    }
+  }, "fireSessionEndOnce");
+  const shutdownManagedAgent = /* @__PURE__ */ __name((reason, label) => {
+    if (managedShutdownPromise) return managedShutdownPromise;
+    const agent = agentInstance;
+    if (!agent?.isTrustedManagedParent()) {
+      return Promise.reject(
+        new Error("Managed shutdown requires a trusted private parent")
+      );
+    }
+    const terminal = agent.beginManagedShutdown();
+    managedShutdownPromise = (async () => {
+      const failures = [];
+      try {
+        await terminal.writerShutdown;
+      } catch (error) {
+        failures.push(error);
+        debugLogger7.error("[ACP] Managed writer shutdown error:", error);
+        const retainedLockPaths = terminal.configs.flatMap((config2) => {
+          if (typeof config2.getSessionRuntimeBaseDir !== "function" || typeof config2.getSessionId !== "function") {
+            return [];
+          }
+          return [
+            path4.join(
+              config2.getSessionRuntimeBaseDir(),
+              "tmp",
+              "session-writer-locks",
+              `${encodeURIComponent(config2.getSessionId())}.lock`
+            )
+          ];
+        });
+        writeStderrLineSafe(
+          "qwen --acp: managed session writer shutdown failed; a writer lock may be retained for safety. Verify that no previous writer is running before manual cleanup." + (retainedLockPaths.length > 0 ? ` Candidate lock paths: ${retainedLockPaths.join(", ")}` : "")
+        );
+      }
+      try {
+        await fireSessionEndOnce(reason, terminal.configs);
+      } catch (error) {
+        failures.push(error);
+      }
+      try {
+        await agent.finishManagedShutdown(terminal.configs);
+      } catch (error) {
+        failures.push(error);
+        debugLogger7.error("[ACP] Managed resource shutdown error:", error);
+      }
+      try {
+        await drainPoolBeforeExit(label, true);
+      } catch (error) {
+        failures.push(error);
       }
-    }
-  }, "fireSessionEndOnce");
+      try {
+        await runExitCleanup();
+      } catch (error) {
+        failures.push(error);
+        debugLogger7.error("[ACP] Cleanup error:", error);
+      }
+      if (failures.length > 0) {
+        throw new AggregateError(failures, "Managed ACP shutdown failed");
+      }
+    })();
+    return managedShutdownPromise;
+  }, "shutdownManagedAgent");
   const shutdownHandler = /* @__PURE__ */ __name(async () => {
     if (shuttingDown) return;
     shuttingDown = true;
     debugLogger7.debug("[ACP] Shutdown signal received, closing streams");
+    if (agentInstance?.isTrustedManagedParent()) {
+      let exitCode = 0;
+      try {
+        await shutdownManagedAgent("other" /* Other */, "signal");
+      } catch (err) {
+        exitCode = 1;
+        debugLogger7.error("[ACP] Managed shutdown error:", err);
+      } finally {
+        eventLoopMonitor.dispose();
+      }
+      try {
+        process.stdin.destroy();
+        process.stdout.destroy();
+      } catch {
+      }
+      process.exit(exitCode);
+      return;
+    }
     try {
       await fireSessionEndOnce("other" /* Other */);
       await agentInstance?.disposeSessions();
@@ -9799,9 +10457,21 @@ async function runAcpAgent(config, settings, argv, options) {
   process.on("SIGINT", shutdownHandler);
   try {
     await connection.closed;
-    await fireSessionEndOnce("prompt_input_exit" /* PromptInputExit */);
-    await drainPoolBeforeExit("ide_close");
-    await agentInstance?.disposeSessions();
+    if (agentInstance?.isTrustedManagedParent()) {
+      try {
+        await shutdownManagedAgent(
+          "prompt_input_exit" /* PromptInputExit */,
+          "ide_close"
+        );
+      } catch (error) {
+        process.exitCode = 1;
+        throw error;
+      }
+    } else {
+      await fireSessionEndOnce("prompt_input_exit" /* PromptInputExit */);
+      await drainPoolBeforeExit("ide_close");
+      await agentInstance?.disposeSessions();
+    }
   } finally {
     process.off("SIGTERM", shutdownHandler);
     process.off("SIGINT", shutdownHandler);
@@ -9918,12 +10588,13 @@ function parseAcpSessionListCursor(value) {
 }
 __name(parseAcpSessionListCursor, "parseAcpSessionListCursor");
 var QwenAgent = class {
-  constructor(config, settings, argv, connection, expectedPrivateParentCapability) {
+  constructor(config, settings, argv, connection, expectedPrivateParentCapability, sessionWriterLeaseEnabledAtStartup = false) {
     this.config = config;
     this.settings = settings;
     this.argv = argv;
     this.connection = connection;
     this.expectedPrivateParentCapability = expectedPrivateParentCapability;
+    this.sessionWriterLeaseEnabledAtStartup = sessionWriterLeaseEnabledAtStartup;
     if (process.env["QWEN_SERVE_NO_MCP_POOL"] === "1") {
       this.mcpPool = void 0;
       this.workspaceMcpBudget = void 0;
@@ -9964,6 +10635,8 @@ var QwenAgent = class {
   workspaceGenerationControllers = /* @__PURE__ */ new Map();
   transcriptReplayConfigCache = /* @__PURE__ */ new Map();
   pendingConfigCleanup = /* @__PURE__ */ new Map();
+  initializingConfigs = /* @__PURE__ */ new Set();
+  managedShuttingDown = false;
   clientCapabilities;
   privateParentState = "uninitialized";
   // CPU-usage delta baseline for the daemon's `workspaceResource` extMethod
@@ -9997,6 +10670,102 @@ var QwenAgent = class {
   getActiveSessions() {
     return [...this.sessions.values()];
   }
+  isTrustedManagedParent() {
+    return this.privateParentState === "trusted";
+  }
+  assertManagedSessionAdmission() {
+    if (this.expectedPrivateParentCapability !== void 0 && !this.isTrustedManagedParent()) {
+      throw RequestError.invalidParams(
+        void 0,
+        "Private ACP parent is not initialized"
+      );
+    }
+    if (this.managedShuttingDown) {
+      throw new SessionWriterUnavailableError();
+    }
+  }
+  beginManagedShutdown() {
+    if (!this.isTrustedManagedParent()) {
+      throw new Error("Managed shutdown requires a trusted private parent");
+    }
+    this.managedShuttingDown = true;
+    for (const generation of this.generationControllers.values()) {
+      generation.controller.abort();
+    }
+    this.generationControllers.clear();
+    for (const controller of this.workspaceGenerationControllers.values()) {
+      controller.abort();
+    }
+    this.workspaceGenerationControllers.clear();
+    const configs = /* @__PURE__ */ new Set([this.config, ...this.initializingConfigs]);
+    for (const session of this.sessions.values()) {
+      try {
+        session.beginCloseIfAvailable();
+      } catch (error) {
+        debugLogger7.debug(
+          `Session ${session.getId()} admission close during managed shutdown failed: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+      void session.cancelPendingPrompt().catch((error) => {
+        debugLogger7.debug(
+          `Session ${session.getId()} cancel during managed shutdown failed: ${error instanceof Error ? error.message : String(error)}`
+        );
+      });
+      configs.add(session.getConfig());
+    }
+    for (const pending of this.pendingConfigCleanup.values()) {
+      for (const config of pending) configs.add(config);
+    }
+    const configList = [...configs];
+    const writerTerminals = [];
+    for (const config of configList) {
+      try {
+        writerTerminals.push(config.closeSessionWriter());
+      } catch (error) {
+        writerTerminals.push(Promise.reject(error));
+      }
+    }
+    const writerShutdown = Promise.allSettled(writerTerminals).then(
+      (results) => {
+        const failures = results.flatMap(
+          (result) => result.status === "rejected" ? [result.reason] : []
+        );
+        if (failures.length > 0) {
+          throw new AggregateError(
+            failures,
+            "Managed session writer shutdown failed"
+          );
+        }
+      }
+    );
+    return { configs: configList, writerShutdown };
+  }
+  async finishManagedShutdown(configs) {
+    const failures = [];
+    for (const [sessionId, session] of [...this.sessions]) {
+      await this.removeStoredSessionEntry(sessionId, session, failures, {
+        shutdownConfig: false
+      });
+    }
+    const results = await Promise.allSettled(
+      configs.map(
+        (config) => config.shutdown({
+          shutdownTelemetry: false,
+          skipSessionWriter: true,
+          strictResourceCleanup: true
+        })
+      )
+    );
+    for (const result of results) {
+      if (result.status === "rejected") failures.push(result.reason);
+    }
+    this.initializingConfigs.clear();
+    this.pendingConfigCleanup.clear();
+    this.disposeTranscriptReplayConfigs();
+    if (failures.length > 0) {
+      throw new AggregateError(failures, "Managed session cleanup failed");
+    }
+  }
   getWorkspaceMcpConfig(serverName) {
     if (serverName && this.config.getRuntimeMcpServers?.()[serverName] !== void 0) {
       return this.config;
@@ -10139,16 +10908,18 @@ var QwenAgent = class {
       for (const config of liveConfigs) {
         try {
           const cwd = config.getTargetDir();
-          const mcpServers = assembleMcpServers(
+          const isBareOrSafe = config.getBareMode() || config.isSafeMode();
+          const mcpServers = isBareOrSafe ? { ...config.getTopTierMcpServers() } : assembleMcpServers(
             settings.merged.mcpServers,
             cwd,
             config.getTopTierMcpServers()
           );
-          const gating = recomputeMcpGating(
+          const bootAllowed = config.getCliAllowedMcpServerNames();
+          const gating = isBareOrSafe ? { allowed: bootAllowed ? [...bootAllowed] : void 0 } : recomputeMcpGating(
             settings,
             mcpServers,
             cwd,
-            config.getCliAllowedMcpServerNames(),
+            bootAllowed,
             config.getApprovalMode() === "yolo" /* YOLO */
           );
           config.setExcludedMcpServers(gating.excluded ?? []);
@@ -10241,11 +11012,15 @@ var QwenAgent = class {
         debugLogger7.warn(
           `MCP pool drain: ${result.drained} clean, ${result.forced} timed out, ${result.errors.length} errors`
         );
+        throw new Error(
+          `MCP pool drain incomplete: ${result.forced} forced, ${result.errors.length} errors`
+        );
       }
     } catch (err) {
       debugLogger7.error(
         `MCP pool drainAll failed: ${err instanceof Error ? err.message : String(err)}`
       );
+      throw err;
     }
   }
   async removeStoredSessionEntry(sessionId, session, cleanupErrors = [], options = {}) {
@@ -10316,11 +11091,13 @@ var QwenAgent = class {
     try {
       await shutdownSessionConfig(config);
     } catch (error) {
+      this.initializingConfigs.delete(config);
       const pending2 = this.pendingConfigCleanup.get(cleanupKey) ?? /* @__PURE__ */ new Set();
       pending2.add(config);
       this.pendingConfigCleanup.set(cleanupKey, pending2);
       throw mapSessionWriterRequestError(error);
     }
+    this.initializingConfigs.delete(config);
     const pending = this.pendingConfigCleanup.get(cleanupKey);
     pending?.delete(config);
     if (pending?.size === 0) {
@@ -10335,7 +11112,7 @@ var QwenAgent = class {
         `Session cleanup failed while preserving the original request error: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`
       );
     }
-    throw error;
+    throw mapSessionWriterRequestError(error);
   }
   pendingConfigCleanupKey(runtimeBaseDir, sessionId) {
     return `${path4.resolve(runtimeBaseDir)}\0${sessionId}`;
@@ -10525,7 +11302,7 @@ var QwenAgent = class {
     }
     this.clientCapabilities = args.clientCapabilities;
     const authMethods = buildAuthMethods();
-    const version = "0.21.0-nightly.20260727.c003e1718";
+    const version = "0.21.0-preview.0";
     const response = {
       protocolVersion: PROTOCOL_VERSION,
       agentInfo: {
@@ -10720,16 +11497,59 @@ var QwenAgent = class {
     const sessionData = config.getResumedSessionData();
     const bulkReplay = isBulkLoadReplayRequest(params);
     const replayPageSize = bulkReplay ? getLoadReplayPageSize(params) : void 0;
-    let session;
+    let replayEnvelope;
     try {
       await this.ensureAuthenticated(config);
       this.setupFileSystem(config);
-      session = await this.createAndStoreSession(
-        config,
-        settings,
-        sessionData,
-        bulkReplay ? { replayHistory: false, startPostReplayServices: false } : {}
-      );
+      await this.createAndStoreSession(config, settings, sessionData, {
+        ...bulkReplay ? { replayHistory: false } : {},
+        beforeStartPostReplayServices: /* @__PURE__ */ __name(async (createdSession) => {
+          if (bulkReplay) {
+            const records = sessionData?.conversation.messages;
+            let replayUpdates = [];
+            if (records) {
+              createdSession.primeTurnFromHistory(records);
+              const replayPage = selectRecentHistoryRecords(
+                records,
+                replayPageSize
+              );
+              const replayUsage = createReplayCumulativeUsage();
+              const replay = await collectHistoryReplayUpdates({
+                sessionId: params.sessionId,
+                config,
+                records: replayPage.records,
+                gaps: sessionData?.historyGaps,
+                cumulativeUsage: replayUsage,
+                supersedeUnrestorableGoal: true,
+                logger: debugLogger7
+              });
+              replayUpdates = replay.updates;
+              copyCumulativeUsage(createdSession.cumulativeUsage, replayUsage);
+              if (replay.replayError !== void 0) {
+                replayEnvelope = {
+                  v: LOAD_REPLAY_VERSION,
+                  updates: replayUpdates,
+                  partial: true,
+                  replayError: replay.replayError,
+                  ...replayPage.hasMore ? { hasMore: true } : {}
+                };
+              }
+              replayEnvelope ??= {
+                v: LOAD_REPLAY_VERSION,
+                updates: replayUpdates,
+                ...replayPage.hasMore ? { hasMore: true } : {}
+              };
+            }
+            replayEnvelope ??= {
+              v: LOAD_REPLAY_VERSION,
+              updates: replayUpdates
+            };
+          }
+          await this.#restoreWorktreeOnResume(config, createdSession);
+          await this.#restoreBackgroundAgentsOnResume(config, createdSession);
+          this.#restoreGoalOnResume(config, createdSession);
+        }, "beforeStartPostReplayServices")
+      });
     } catch (error) {
       return this.cleanupAfterRequestFailure(error, async () => {
         if (this.sessions.get(config.getSessionId())?.getConfig() !== config) {
@@ -10737,72 +11557,6 @@ var QwenAgent = class {
         }
       });
     }
-    let replayEnvelope;
-    if (bulkReplay) {
-      try {
-        const records = sessionData?.conversation.messages;
-        let replayUpdates = [];
-        if (records) {
-          session.primeTurnFromHistory(records);
-          const replayPage = selectRecentHistoryRecords(
-            records,
-            replayPageSize
-          );
-          const replayUsage = createReplayCumulativeUsage();
-          const replay = await collectHistoryReplayUpdates({
-            sessionId: params.sessionId,
-            config,
-            records: replayPage.records,
-            gaps: sessionData?.historyGaps,
-            cumulativeUsage: replayUsage,
-            // A resume: the goal restore runs right after this.
-            supersedeUnrestorableGoal: true,
-            logger: debugLogger7
-          });
-          replayUpdates = replay.updates;
-          copyCumulativeUsage(session.cumulativeUsage, replayUsage);
-          if (replay.replayError !== void 0) {
-            replayEnvelope = {
-              v: LOAD_REPLAY_VERSION,
-              updates: replayUpdates,
-              partial: true,
-              replayError: replay.replayError,
-              ...replayPage.hasMore ? { hasMore: true } : {}
-            };
-          }
-          replayEnvelope ??= {
-            v: LOAD_REPLAY_VERSION,
-            updates: replayUpdates,
-            ...replayPage.hasMore ? { hasMore: true } : {}
-          };
-        }
-        replayEnvelope ??= {
-          v: LOAD_REPLAY_VERSION,
-          updates: replayUpdates
-        };
-        session.installRewriter();
-        session.startCronScheduler();
-      } catch (err) {
-        return this.cleanupAfterRequestFailure(err, async () => {
-          try {
-            await this.discardStoredSessionIfCurrent(params.sessionId, session);
-          } catch (cleanupError) {
-            await this.removeStoredSessionEntry(
-              params.sessionId,
-              session,
-              [cleanupError],
-              {
-                shutdownConfig: false
-              }
-            );
-            await this.cleanupUnstoredConfig(config);
-          }
-        });
-      }
-    }
-    await this.#restoreWorktreeOnResume(config, session);
-    await this.#restoreBackgroundAgentsOnResume(config, session);
-    this.#restoreGoalOnResume(config, session);
     const modesData = this.buildModesData(config);
     const availableModels = this.buildAvailableModels(config);
     const configOptions = this.buildConfigOptions(config);
@@ -10858,15 +11612,21 @@ var QwenAgent = class {
       params.sessionId,
       true
     );
-    let session;
     try {
       await this.ensureAuthenticated(config);
       this.setupFileSystem(config);
-      session = await this.createAndStoreSession(
+      await this.createAndStoreSession(
         config,
         settings,
         config.getResumedSessionData(),
-        { replayHistory: false }
+        {
+          replayHistory: false,
+          beforeStartPostReplayServices: /* @__PURE__ */ __name(async (createdSession) => {
+            await this.#restoreWorktreeOnResume(config, createdSession);
+            await this.#restoreBackgroundAgentsOnResume(config, createdSession);
+            this.#restoreGoalOnResume(config, createdSession);
+          }, "beforeStartPostReplayServices")
+        }
       );
     } catch (error) {
       return this.cleanupAfterRequestFailure(error, async () => {
@@ -10875,9 +11635,6 @@ var QwenAgent = class {
         }
       });
     }
-    await this.#restoreWorktreeOnResume(config, session);
-    await this.#restoreBackgroundAgentsOnResume(config, session);
-    this.#restoreGoalOnResume(config, session);
     const modesData = this.buildModesData(config);
     const availableModels = this.buildAvailableModels(config);
     const configOptions = this.buildConfigOptions(config);
@@ -12900,12 +13657,19 @@ var QwenAgent = class {
       }
       case TODO_STOP_GUARD_QUEUE_RELEASE_METHOD: {
         const sessionId = params["sessionId"];
+        const promptId = params["promptId"];
         if (typeof sessionId !== "string" || sessionId.length === 0) {
           throw RequestError.invalidParams(
             void 0,
             "Invalid or missing sessionId"
           );
         }
+        if (typeof promptId !== "string" || promptId.length === 0) {
+          throw RequestError.invalidParams(
+            void 0,
+            "Invalid or missing promptId"
+          );
+        }
         const session = this.sessions.get(sessionId);
         if (!session) {
           throw RequestError.invalidParams(
@@ -12914,7 +13678,7 @@ var QwenAgent = class {
           );
         }
         return {
-          released: session.releaseTodoStopGuardQueuedPromptWait()
+          released: session.releaseTodoStopGuardQueuedPromptWait(promptId)
         };
       }
       case "qwen/providers/list": {
@@ -14335,10 +15099,12 @@ var QwenAgent = class {
           }
         }
         const previousCwd = config.getTargetDir();
-        if (canonicalPath === previousCwd) {
-          return { previousCwd, newCwd: canonicalPath, warnings: [] };
-        }
-        if (isFolderTrustEnabled(this.settings.merged)) {
+        let trustValidated = false;
+        const validateTrust = /* @__PURE__ */ __name(() => {
+          if (!isFolderTrustEnabled(this.settings.merged)) {
+            trustValidated = true;
+            return;
+          }
           const trustedFolders = loadTrustedFolders();
           if (trustedFolders.isPathTrusted(canonicalPath) !== true) {
             throw new RequestError(
@@ -14347,27 +15113,62 @@ var QwenAgent = class {
               { errorKind: "directory_not_trusted", path: canonicalPath }
             );
           }
+          trustValidated = true;
+        }, "validateTrust");
+        if (canonicalPath !== previousCwd) {
+          validateTrust();
         }
-        const warnings = [];
-        const relocation = await config.relocateWorkingDirectory(
-          canonicalPath,
-          canonicalPath,
-          { skipProcessChdir: true, skipArtifactMigration: true }
+        const releaseGate = await beginSessionCloseAfterCurrentGate(
+          session,
+          SESSION_DRAIN_TIMEOUT_MS
         );
-        if (relocation.memoryRefreshError) {
-          warnings.push(
-            `Memory refresh failed: ${relocation.memoryRefreshError instanceof Error ? relocation.memoryRefreshError.message : String(relocation.memoryRefreshError)}`
-          );
-        }
         try {
-          await config.getGeminiClient()?.addWorkingDirectoryChangedContext(previousCwd, canonicalPath);
-        } catch (error) {
-          warnings.push(
-            `Model context refresh failed: ${error instanceof Error ? error.message : String(error)}`
+          const settledPreviousCwd = config.getTargetDir();
+          if (canonicalPath === settledPreviousCwd) {
+            return {
+              previousCwd: settledPreviousCwd,
+              newCwd: canonicalPath,
+              warnings: []
+            };
+          }
+          if (!trustValidated) {
+            validateTrust();
+          }
+          session.hardSuspendTodoStopGuard();
+          await waitForSessionDrain(
+            session.waitForActiveTurnsToSettle(),
+            SESSION_DRAIN_TIMEOUT_MS,
+            "close"
           );
+          const warnings = [];
+          const relocation = await config.relocateWorkingDirectory(
+            canonicalPath,
+            canonicalPath,
+            { skipProcessChdir: true, skipArtifactMigration: true }
+          );
+          if (relocation.memoryRefreshError) {
+            warnings.push(
+              `Memory refresh failed: ${relocation.memoryRefreshError instanceof Error ? relocation.memoryRefreshError.message : String(relocation.memoryRefreshError)}`
+            );
+          }
+          try {
+            await config.getGeminiClient()?.addWorkingDirectoryChangedContext(
+              settledPreviousCwd,
+              canonicalPath
+            );
+          } catch (error) {
+            warnings.push(
+              `Model context refresh failed: ${error instanceof Error ? error.message : String(error)}`
+            );
+          }
+          return {
+            previousCwd: settledPreviousCwd,
+            newCwd: canonicalPath,
+            warnings
+          };
+        } finally {
+          releaseGate();
         }
-        session.clearTodoStopGuardTrust();
-        return { previousCwd, newCwd: canonicalPath, warnings };
       }
       case SERVE_CONTROL_EXT_METHODS.sessionApprovalMode: {
         const sessionId = params["sessionId"];
@@ -14883,147 +15684,82 @@ ${outputText}
         return result;
       }
       case SERVE_CONTROL_EXT_METHODS.workspaceMcpRuntimeAdd: {
-        const name = params["name"];
-        const config = params["config"];
-        const originatorClientId = params["originatorClientId"];
-        if (typeof name !== "string" || name.length === 0) {
-          throw RequestError.invalidParams(
-            void 0,
-            "Invalid or missing name"
-          );
-        }
-        if (!isValidServerName(name)) {
-          throw RequestError.invalidParams(
-            void 0,
-            "Server name must be \u2264256 chars, alphanumeric + underscore/hyphen, and not a reserved JS property name"
-          );
-        }
-        if (!config || typeof config !== "object" || Array.isArray(config)) {
-          throw RequestError.invalidParams(
-            void 0,
-            "Invalid or missing config"
-          );
-        }
-        const runtimeClientId = typeof originatorClientId === "string" && originatorClientId.length > 0 ? originatorClientId : "daemon";
-        const manager = this.config.getToolRegistry()?.getMcpClientManager();
-        if (!manager) {
-          throw RequestError.internalError(
-            void 0,
-            "McpClientManager unavailable on this Config"
-          );
-        }
-        try {
-          const {
-            trust: _trust,
-            authProviderType: _auth,
-            includeTools: _inc,
-            excludeTools: _exc,
-            cwd: _cwd,
-            env: _env,
-            oauth: _oauth,
-            headers: _headers,
-            type: _type,
-            // Reverse tool channel marker (issue #5626, Phase 2). The parent
-            // serve process stamps this on a client-hosted (extension) MCP
-            // server's runtime config; it never reaches the transport itself.
-            [CLIENT_MCP_OVER_WS_CONFIG_FLAG]: clientMcpOverWs,
-            ...safeConfig
-          } = config;
-          if (clientMcpOverWs === true) {
-            safeConfig["type"] = "sdk";
-          }
-          const result = await manager.addRuntimeMcpServer(
-            name,
-            safeConfig,
-            runtimeClientId
-          );
-          await Promise.all(
-            this.getActiveSessions().map(async (session) => {
-              const sessionManager = session.getConfig().getToolRegistry()?.getMcpClientManager();
-              if (!sessionManager) return;
-              try {
-                await sessionManager.addRuntimeMcpServer(
-                  name,
-                  safeConfig,
-                  runtimeClientId
-                );
-              } catch (sessionErr) {
-                debugLogger7.warn(
-                  `workspaceMcpRuntimeAdd: failed to add runtime MCP server '${name}' to active session ${session.getConfig().getSessionId()}: ${sessionErr instanceof Error ? sessionErr.message : String(sessionErr)}`
-                );
-              }
-            })
-          );
-          return result;
-        } catch (err) {
-          if (err instanceof McpBudgetWouldExceedError) {
-            throw new RequestError(-32099, err.message, {
-              errorKind: err.code,
-              serverName: err.serverName
-            });
-          }
-          if (err instanceof McpServerSpawnFailedError) {
-            throw new RequestError(-32099, err.message, {
-              errorKind: err.code,
-              serverName: err.serverName,
-              ...err.details
-            });
-          }
-          if (err instanceof InvalidMcpConfigError) {
-            throw new RequestError(-32099, err.message, {
-              errorKind: err.code,
-              serverName: err.serverName,
-              reason: err.reason
-            });
-          }
-          throw err;
-        }
+        const request = readRuntimeMcpAddRequest(params);
+        const result = await addRuntimeMcpServer(
+          getRuntimeMcpManager(this.config),
+          request
+        );
+        await Promise.all(
+          this.getActiveSessions().map(async (session) => {
+            const sessionManager = session.getConfig().getToolRegistry()?.getMcpClientManager();
+            if (!sessionManager) return;
+            try {
+              await sessionManager.addRuntimeMcpServer(
+                request.name,
+                request.config,
+                request.runtimeClientId
+              );
+            } catch (sessionErr) {
+              debugLogger7.warn(
+                `workspaceMcpRuntimeAdd: failed to add runtime MCP server '${request.name}' to active session ${session.getConfig().getSessionId()}: ${sessionErr instanceof Error ? sessionErr.message : String(sessionErr)}`
+              );
+            }
+          })
+        );
+        return result;
       }
       case SERVE_CONTROL_EXT_METHODS.workspaceMcpRuntimeRemove: {
-        const name = params["name"];
-        const originatorClientId = params["originatorClientId"];
-        if (typeof name !== "string" || name.length === 0) {
-          throw RequestError.invalidParams(
-            void 0,
-            "Invalid or missing name"
-          );
-        }
-        if (!isValidServerName(name)) {
-          throw RequestError.invalidParams(
-            void 0,
-            "Server name must be \u2264256 chars, alphanumeric + underscore/hyphen, and not a reserved JS property name"
-          );
-        }
-        const runtimeClientId = typeof originatorClientId === "string" && originatorClientId.length > 0 ? originatorClientId : "daemon";
-        const manager = this.config.getToolRegistry()?.getMcpClientManager();
-        if (!manager) {
-          throw RequestError.internalError(
-            void 0,
-            "McpClientManager unavailable on this Config"
-          );
-        }
-        const result = await manager.removeRuntimeMcpServer(
-          name,
-          runtimeClientId
-        );
+        const request = readRuntimeMcpRequest(params);
+        const result = await getRuntimeMcpManager(
+          this.config
+        ).removeRuntimeMcpServer(request.name, request.runtimeClientId);
         await Promise.all(
           this.getActiveSessions().map(async (session) => {
             const sessionManager = session.getConfig().getToolRegistry()?.getMcpClientManager();
             if (!sessionManager) return;
             try {
               await sessionManager.removeRuntimeMcpServer(
-                name,
-                runtimeClientId
+                request.name,
+                request.runtimeClientId
               );
             } catch (sessionErr) {
               debugLogger7.warn(
-                `workspaceMcpRuntimeRemove: failed to remove runtime MCP server '${name}' from active session ${session.getConfig().getSessionId()}: ${sessionErr instanceof Error ? sessionErr.message : String(sessionErr)}`
+                `workspaceMcpRuntimeRemove: failed to remove runtime MCP server '${request.name}' from active session ${session.getConfig().getSessionId()}: ${sessionErr instanceof Error ? sessionErr.message : String(sessionErr)}`
               );
             }
           })
         );
         return result;
       }
+      case SERVE_CONTROL_EXT_METHODS.sessionMcpRuntimeAdd: {
+        const sessionId = params["sessionId"];
+        if (typeof sessionId !== "string" || sessionId.length === 0) {
+          throw RequestError.invalidParams(
+            void 0,
+            "Invalid or missing sessionId"
+          );
+        }
+        const session = this.sessionOrThrow(sessionId);
+        return addRuntimeMcpServer(
+          getRuntimeMcpManager(session.getConfig()),
+          readRuntimeMcpAddRequest(params)
+        );
+      }
+      case SERVE_CONTROL_EXT_METHODS.sessionMcpRuntimeRemove: {
+        const sessionId = params["sessionId"];
+        if (typeof sessionId !== "string" || sessionId.length === 0) {
+          throw RequestError.invalidParams(
+            void 0,
+            "Invalid or missing sessionId"
+          );
+        }
+        const session = this.sessionOrThrow(sessionId);
+        const request = readRuntimeMcpRequest(params);
+        const result = await getRuntimeMcpManager(
+          session.getConfig()
+        ).removeRuntimeMcpServer(request.name, request.runtimeClientId);
+        return result;
+      }
       case SERVE_CONTROL_EXT_METHODS.workspaceExtensionsRefresh: {
         const sessionId = params["sessionId"];
         const session = this.sessionOrThrow(sessionId);
@@ -15839,6 +16575,7 @@ ${outputText}
   }
   async newSessionConfig(cwd, mcpServers, settings, sessionId, resume, initializeOptions = {}, chatRecording) {
     try {
+      this.assertManagedSessionAdmission();
       return await this.runWithPinnedRuntimeBaseDir(settings, cwd, async () => {
         await this.retryPendingConfigCleanup(
           Storage.getRuntimeBaseDir(),
@@ -15916,7 +16653,13 @@ ${outputText}
         continue;
       }
     }
-    const mergedSettings = settings.merged;
+    const mergedSettings = {
+      ...settings.merged,
+      experimental: {
+        ...settings.merged.experimental,
+        sessionWriterLease: this.sessionWriterLeaseEnabledAtStartup
+      }
+    };
     const sessionArg = resume === true ? { resume: sessionId, sessionId: void 0 } : { sessionId, resume: void 0 };
     const argvForSession = {
       ...this.argv,
@@ -15951,6 +16694,20 @@ ${outputText}
       buildDisabledSkillNamesProvider(settings),
       sessionMcpServers
     );
+    if (chatRecording !== false) {
+      this.initializingConfigs.add(config);
+    }
+    try {
+      this.assertManagedSessionAdmission();
+      if (this.isTrustedManagedParent()) {
+        config.setSessionWriterReclaimPolicy("never");
+      }
+    } catch (error) {
+      return this.cleanupAfterRequestFailure(
+        error,
+        () => this.cleanupUnstoredConfig(config)
+      );
+    }
     if (!initializeOptions.skipFileCheckpointing && typeof config.enableFileCheckpointing === "function") {
       config.enableFileCheckpointing();
     }
@@ -15991,6 +16748,7 @@ ${outputText}
         // (the daemon only adds SDK-type runtime servers for client MCP).
         sendSdkMcpMessage: this.buildClientMcpSender(wiredSessionId)
       });
+      this.assertManagedSessionAdmission();
     } catch (error) {
       return this.cleanupAfterRequestFailure(
         error,
@@ -16051,17 +16809,20 @@ ${outputText}
     config.setFileSystemService(acpFileSystemService);
   }
   async createAndStoreSession(config, settings, sessionData, options = {}) {
+    this.assertManagedSessionAdmission();
     const sessionId = config.getSessionId();
     const geminiClient = config.getGeminiClient();
     const needsInitialize = !geminiClient.isInitialized();
     if (needsInitialize) {
       await geminiClient.initialize();
     }
+    this.assertManagedSessionAdmission();
     if (this.sessions.has(sessionId)) {
       throw new Error(`Session ${sessionId} is already active.`);
     }
     const session = new Session(sessionId, config, this.connection, settings);
     this.sessions.set(sessionId, session);
+    this.initializingConfigs.delete(config);
     try {
       if (sessionData?.fileHistorySnapshots?.length) {
         config.getFileHistoryService().restoreFromSnapshots(sessionData.fileHistorySnapshots);
@@ -16075,10 +16836,9 @@ ${outputText}
           sessionData.historyGaps
         );
       }
-      if (options.startPostReplayServices !== false) {
-        session.installRewriter();
-        session.startCronScheduler();
-      }
+      await options.beforeStartPostReplayServices?.(session);
+      session.installRewriter();
+      session.startCronScheduler();
       setTimeout(() => {
         void session.sendAvailableCommandsUpdate();
       }, 0);