agent.libx.js 0.93.10 → 0.93.12

package/cli/cli.ts

@@ -498,24 +498,39 @@ function printHistory(messages: Message[]): void {
   if (s) err(s);
 }
 
+/** Cache-read/write price multipliers over the input rate, by provider (derived from the model
+ *  prefix). Anthropic: write 1.25x / read 0.1x. OpenAI & Gemini auto-cache (no write surcharge),
+ *  reads 0.5x / 0.25x. DeepSeek read 0.1x. Unknown → no discount (1x/1x, safe over-estimate). */
+export function cacheMultipliers(model?: string): { read: number; write: number } {
+  const p = (model ?? '').split('/')[0];
+  switch (p) {
+    case 'anthropic': return { read: 0.1, write: 1.25 };
+    case 'openai': return { read: 0.5, write: 1 };
+    case 'google': return { read: 0.25, write: 1 };
+    case 'deepseek': return { read: 0.1, write: 1 };
+    default: return { read: 1, write: 1 };
+  }
+}
+
 /** USD cost from a model's per-1K pricing (ai.libx.js ModelPricing) + token usage. 0 if unpriced.
- *  Cache-aware: promptTokens includes cache reads/writes — priced at their real multipliers
- *  (writes 1.25x, reads 0.1x input rate) so cached runs aren't overstated. */
+ *  Cache-aware: promptTokens includes cache reads/writes — priced at the provider's real multipliers
+ *  (via `model`) so cached runs aren't overstated. Omitting `model` falls back to Anthropic's rates. */
 export function costOf(
   pricing: { inputCostPer1K: number; outputCostPer1K: number } | undefined,
-  promptTokens = 0, completionTokens = 0, cacheCreationTokens = 0, cacheReadTokens = 0,
+  promptTokens = 0, completionTokens = 0, cacheCreationTokens = 0, cacheReadTokens = 0, model?: string,
 ): number {
   if (!pricing) return 0;
+  const mult = model ? cacheMultipliers(model) : { read: 0.1, write: 1.25 };
   const fresh = Math.max(0, promptTokens - cacheCreationTokens - cacheReadTokens);
   return (fresh / 1000) * pricing.inputCostPer1K
-    + (cacheCreationTokens / 1000) * pricing.inputCostPer1K * 1.25
-    + (cacheReadTokens / 1000) * pricing.inputCostPer1K * 0.1
+    + (cacheCreationTokens / 1000) * pricing.inputCostPer1K * mult.write
+    + (cacheReadTokens / 1000) * pricing.inputCostPer1K * mult.read
     + (completionTokens / 1000) * pricing.outputCostPer1K;
 }
 
 /** Cost of one turn at `model`'s rate (looks up ai.libx.js pricing). */
 function turnCost(model: string, usage?: { promptTokens?: number; completionTokens?: number; cacheCreationTokens?: number; cacheReadTokens?: number }): number {
-  return costOf(getModelInfo(model)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0);
+  return costOf(getModelInfo(model)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0, model);
 }
 
 /** Evaluate whether a goal condition has been met, based on recent transcript. */
@@ -1034,13 +1049,25 @@ async function repl(args: Args, ai: ChatLike, cfg: Partial<AgentConfig>, cwd: st
   const duplexAsk = async (call: ToolUse): Promise<{ decision: 'allow' | 'deny' }> => {
     if (args.voice && dx) {
       const hint = summarizeCall(call.name, call.args).slice(0, 80);
-      // 'menu' mode: approve like a normal session — suspend the editor, pop the picker.
-      if ((cfg as any).voiceAskUi === 'menu') {
+      // Default: approve like a normal session — suspend the editor, pop an interactive picker
+      // (Allow once / always / Deny). Set `voiceAskUi: 'relay'` to opt into the spoken park/relay flow.
+      if ((cfg as any).voiceAskUi !== 'relay') {
         editorRef?.suspend();
-        const v = await selectMenu(process.stderr, { title: `? background worker asks to run ${call.name} ${hint}`, items: [{ label: 'Allow', value: 'y' }, { label: 'Deny', value: 'n' }], current: 'n' });
+        const v = await selectMenu(process.stderr, {
+          title: `? background worker asks to run ${call.name} ${hint}`,
+          items: [{ label: 'Allow once', value: 'y' }, { label: 'Allow always', value: 'a' }, { label: 'Deny', value: 'n' }],
+          current: 'y',
+        });
         editorRef?.resume();
         editorRef?.redrawNow();
-        return { decision: v === 'y' ? 'allow' : 'deny' };
+        if (v === 'a') {
+          // Remember a command-scoped allow: a live session rule (wins next ask; glob has no `*`
+          // → exact-command match) + persist to .agent/permissions.json for future sessions.
+          const cmd = typeof call.args?.command === 'string' ? call.args.command : null;
+          work.permissions?.options.rules.unshift(cmd ? { tool: call.name, pathGlob: cmd, decision: 'allow' } : { tool: call.name, decision: 'allow' });
+          persistRule(cwd, 'allow', cmd ? `${call.name}(${cmd})` : call.name);
+        }
+        return { decision: v === 'y' || v === 'a' ? 'allow' : 'deny' };
       }
       // NB: perm asks are keyed perm-N (PermissionPolicy.ask carries no task identity), so a
       // cancelled task can't clean its parked perm question — bounded by askTimeoutMs → deny.
@@ -2120,7 +2147,28 @@ async function repl(args: Args, ai: ChatLike, cfg: Partial<AgentConfig>, cwd: st
       err(dim(`  … cancelled ${running.length} background task(s)\n`));
     } else if (running.length) {
       err(dim(`  … waiting for ${running.length} background task(s) (Ctrl-C to force quit)\n`));
-      await dx.idle();
+      // stdin is still in raw mode here, so Ctrl-C arrives as a 0x03 byte (no SIGINT).
+      // Race the drain against a raw Ctrl-C: on press, abort all workers and bail.
+      let forced = false;
+      let onCtrlC = () => {};
+      const onByte = (b: Buffer) => {
+        if (!b.includes(0x03)) return; // Ctrl-C
+        forced = true;
+        for (const t of running) { t.status = 'cancelled'; t.controller.abort(); }
+        err(dim(`\n  … force-quit — cancelled ${running.length} background task(s)\n`));
+        onCtrlC();
+      };
+      process.stdin.on('data', onByte);
+      await Promise.race([dx.idle(), new Promise<void>((res) => { onCtrlC = res; })]);
+      process.stdin.off('data', onByte);
+      if (forced) {
+        // User force-quit: tear down and hard-exit — don't trust the event loop to drain
+        // (voice children / sockets / MCP handles can keep the process alive otherwise).
+        voiceIO?.stop();
+        releaseStdin();
+        await closeMcp(mounted);
+        process.exit(130);
+      }
       (face.options.host as { flushText?: () => void } | undefined)?.flushText?.();
       duplexPersist();
     }

package/dist/{Agent-Di1u5nH0.d.ts → Agent-kWrJvtZM.d.ts}

@@ -243,6 +243,9 @@ declare class AgentOptions {
     instructionFiles: boolean | string[];
     /** Host interaction channel (human-in-the-loop). If set: adds the `AskUserQuestion` tool. */
     host?: HostBridge;
+    /** Add the `AskUserQuestion` tool when a host is present (default true). Set false for an agent that
+     *  must never block a turn on a structured question — e.g. a voice reflex that confirms inline. */
+    askUserQuestion: boolean;
     /** Deterministic interception points around tool execution (pre/post/stop). */
     hooks?: Hooks;
     /** If true: add the `Task` tool so the agent can spawn depth-limited child agents over the VFS. */

package/dist/cli.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-import { h as RunResult, R as ReasoningEffort } from './Agent-Di1u5nH0.js';
+import { h as RunResult, R as ReasoningEffort } from './Agent-kWrJvtZM.js';
 import { IFilesystem } from '@livx.cc/wcli/core';
 import { M as Message, c as ContentPart } from './tools-GPWp7oXq.js';
 
@@ -107,13 +107,20 @@ declare function exportMarkdown(meta: {
     costUsd?: number;
     costEstimated?: boolean;
 }, messages: Message[]): string;
+/** Cache-read/write price multipliers over the input rate, by provider (derived from the model
+ *  prefix). Anthropic: write 1.25x / read 0.1x. OpenAI & Gemini auto-cache (no write surcharge),
+ *  reads 0.5x / 0.25x. DeepSeek read 0.1x. Unknown → no discount (1x/1x, safe over-estimate). */
+declare function cacheMultipliers(model?: string): {
+    read: number;
+    write: number;
+};
 /** USD cost from a model's per-1K pricing (ai.libx.js ModelPricing) + token usage. 0 if unpriced.
- *  Cache-aware: promptTokens includes cache reads/writes — priced at their real multipliers
- *  (writes 1.25x, reads 0.1x input rate) so cached runs aren't overstated. */
+ *  Cache-aware: promptTokens includes cache reads/writes — priced at the provider's real multipliers
+ *  (via `model`) so cached runs aren't overstated. Omitting `model` falls back to Anthropic's rates. */
 declare function costOf(pricing: {
     inputCostPer1K: number;
     outputCostPer1K: number;
-} | undefined, promptTokens?: number, completionTokens?: number, cacheCreationTokens?: number, cacheReadTokens?: number): number;
+} | undefined, promptTokens?: number, completionTokens?: number, cacheCreationTokens?: number, cacheReadTokens?: number, model?: string): number;
 /** Format a USD amount: 2 decimals at $1+, 4 below (agent turns are sub-cent). */
 declare function fmtUsd(n: number): string;
 /** ~4 chars/token estimate over a transcript (matches the Agent's context-budget heuristic). */
@@ -192,4 +199,4 @@ declare function jsonResult(res: RunResult, session: SessionData): {
  */
 declare function readMultiline(readLine: (continuing: boolean) => Promise<string | null>): Promise<string | null>;
 
-export { type PermMode, appendMemoryNote, costOf, estimateTranscriptTokens, expandMentions, exportMarkdown, fmtUsd, formatHistory, formatStatus, jsonResult, parseArgs, pastePathClassifier, readImageParts, readMultiline, resolvePermMode, runShellLine };
+export { type PermMode, appendMemoryNote, cacheMultipliers, costOf, estimateTranscriptTokens, expandMentions, exportMarkdown, fmtUsd, formatHistory, formatStatus, jsonResult, parseArgs, pastePathClassifier, readImageParts, readMultiline, resolvePermMode, runShellLine };

package/dist/cli.js

@@ -2661,6 +2661,9 @@ var AgentOptions = class {
   instructionFiles = true;
   /** Host interaction channel (human-in-the-loop). If set: adds the `AskUserQuestion` tool. */
   host;
+  /** Add the `AskUserQuestion` tool when a host is present (default true). Set false for an agent that
+   *  must never block a turn on a structured question — e.g. a voice reflex that confirms inline. */
+  askUserQuestion = true;
   /** Deterministic interception points around tool execution (pre/post/stop). */
   hooks;
   /** If true: add the `Task` tool so the agent can spawn depth-limited child agents over the VFS. */
@@ -2797,7 +2800,7 @@ var Agent = class _Agent {
       if (catalog) systemPrompt += "\n\n" + catalog;
       if (tool) tools = [...tools, tool];
     }
-    if (o.host) tools = [...tools, askUserQuestionTool];
+    if (o.host && o.askUserQuestion) tools = [...tools, askUserQuestionTool];
     if (o.subagents) {
       let agents;
       if (o.agentsDir) {
@@ -3520,11 +3523,16 @@ var DuplexAgentOptions = class {
   reflexModel = "groq/openai/gpt-oss-20b";
   actModel = "anthropic/claude-sonnet-4-6";
   /** Premium reasoning model. Set to `false` to disable the Think tier entirely. */
-  thinkModel = "anthropic/claude-opus-4-6";
+  thinkModel = "anthropic/claude-opus-4-8";
   /** Escape hatches merged over the derived per-agent options. */
   reflexOptions;
   actOptions;
   thinkOptions;
+  /** Fresh-context check on each successful Act task: a NEW agent (no self-confirmation bias) re-reads
+   *  the file state against the brief and fixes any gap before the result is re-voiced. Bounded to one
+   *  pass; ~2x Act cost so default OFF. The self-verify FOOTER (same context) was measured ineffective —
+   *  this is the structural fix (see mind/10). Think tasks are pure reasoning, never checked. */
+  verifyActTasks = false;
   /** Receives the voice text_delta stream + task lifecycle events. */
   host;
   /** How many recent transcript messages are rendered into a worker's brief. */
@@ -3555,7 +3563,7 @@ var DuplexAgentOptions = class {
   /** User-scope memory dir for global facts (type=user/feedback). Forwarded to Remember's routing. */
   memoryUserDir;
 };
-var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A standard background worker with FULL access to the user\'s environment (files, shell, web). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nYou can find out or do ANYTHING by calling `Act` with a clear, self-contained brief \u2014 so NEVER tell the user you can\'t see, access, or do something. Act and find out. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nAfter calling Act or Think, tell the user you are on it in one short sentence, then end your turn. Do not wait for the result.\nResults arrive later as events like "[task t1 completed] \u2026" or "[task t1 failed] \u2026". When one arrives, summarize it for the ear in one or two short sentences. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 give at most a half-sentence aside ("still on it \u2014 running tests now") and end your turn. Never present progress as a finished result.\nNever read raw file paths, diffs, or code aloud verbatim.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 trailing off mid-sentence, a fragment that needs more context ("and then we", "but the problem is"), hesitation fillers ("uh", "um") \u2014 call `Hold` instead of answering. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight \u2014 check `TaskStatus` first. Use `CancelTask` when the user asks to stop something.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file \u2014 use `QuickLook` (instant, no task). Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text and can carry transcription artifacts \u2014 odd words, cut-offs, homophones ("for you" vs "folder"). Read for INTENT, not surface text. If a message seems garbled or surprising, briefly confirm what they meant ("did you mean\u2026?") instead of answering the literal words.';
+var VOICE_SYSTEM_PROMPT = 'You are a spoken voice assistant \u2014 the user HEARS everything you say. Use short sentences. One idea per sentence. No markdown, no bullet lists, no code blocks, no headings, no emoji.\nKeep turns SHORT \u2014 one to three sentences, then stop. Never lecture, enumerate cases, or add caveats unprompted. Conversation is a fast exchange: give the one thing asked, and let the user pull more if they want it.\nYou have three cognitive tiers \u2014 like a human brain:\n\u2022 YOU (reflex) \u2014 instant, lightweight. Handle greetings, simple questions, status checks, QuickLook.\n\u2022 `Act` \u2014 your hands. A standard background worker with FULL access to the user\'s environment (files, shell, web). Use for reading, editing, searching, running tasks, building \u2014 any real work.\n{{THINK_SLOT}}\nYou can find out or do ANYTHING by calling `Act` with a clear, self-contained brief \u2014 so NEVER tell the user you can\'t see, access, or do something. Act and find out. When the user mentions their project, folder, files, or environment ("this project", "the current folder", "my code"), call `Act` IMMEDIATELY \u2014 do not ask for paths or details the worker can discover itself. Never pretend to have done the work or invent results \u2014 the worker\'s report is your only source.\nAfter calling Act or Think, tell the user you are on it in one short sentence, then end your turn. Do not wait for the result.\nResults arrive later as events like "[task t1 completed] \u2026" or "[task t1 failed] \u2026". When one arrives, summarize it for the ear in one or two short sentences. "[task t1 progress] \u2026" events are interim status, NOT results \u2014 give at most a half-sentence aside ("still on it \u2014 running tests now") and end your turn. Never present progress as a finished result.\nCRITICAL: while a task is still running you have NO answer yet \u2014 never state a specific result of any kind (a number, size, count, name, path, or value). The real answer arrives ONLY in the "[task \u2026 completed]" event; inventing one meanwhile (a made-up disk size, commit count, etc.) is a serious error. Until then, only acknowledge and wait.\nNever read raw file paths, diffs, or code aloud verbatim.\n"[task t1 asks] \u2026" events are QUESTIONS from a background task \u2014 relay to the user in your own words, short, then end your turn. When the user answers, call `AnswerTask` with that id and their answer. NEVER answer on the user\'s behalf for permissions or risky operations; if their reply is ambiguous, confirm first.\nIf the user\'s message sounds INCOMPLETE \u2014 trailing off mid-sentence, a fragment that needs more context ("and then we", "but the problem is"), hesitation fillers ("uh", "um") \u2014 call `Hold` instead of answering. This keeps listening for the rest of their thought. Only respond with substance when you have a complete question or request.\nDispatch discipline: send ONE self-contained task per request \u2014 a single worker with the full brief beats several workers with fragments (each worker starts fresh and re-discovers context). NEVER dispatch a worker just to read files or gather information \u2014 workers explore and discover context themselves; pass on what you already know and let one worker do the whole job. Split into parallel tasks only when the user asks for genuinely independent things. When a task completes, report its result and stop \u2014 do NOT dispatch follow-up work (verification, polish, extras) the user did not ask for, unless the report itself signals failure or doubt.\nDo not fire a second Act/Think for work already in flight, and NEVER spawn a second task to re-count, cross-check, or verify a result a worker already gave you \u2014 trust its answer; a single question gets ONE task. Call `TaskStatus` at most ONCE per turn; if a task is still running, just say "still on it" and end the turn \u2014 never poll it again and again in a loop. Use `CancelTask` when the user asks to stop something.\nPRIORITY: when the user says goodbye or wants to end/finish/wrap up the session ("ok bye", "that\'s all", "let\'s finish", "let\'s end", "goodnight", "exit", "wrap up"), call `ExitSession` IMMEDIATELY \u2014 do not act, do not check status, just exit.\nFor TRIVIAL instant lookups only \u2014 current time, git branch, listing a folder, peeking at a small file \u2014 use `QuickLook` (instant, no task). Anything requiring searching, reasoning, running commands, or editing goes through `Act`.\n{{MEMORY_SLOT}}\nUser messages may arrive via speech-to-text and can carry transcription artifacts \u2014 odd words, cut-offs, homophones ("for you" vs "folder"). Read for INTENT, not surface text. If a message seems garbled or surprising, briefly confirm what they meant ("did you mean\u2026?") instead of answering the literal words.';
 var THINK_GUIDANCE = "\u2022 `Think` \u2014 your brain. A premium reasoning model, FAR more expensive than Act. Reserve it for open-ended architecture/design questions, or a problem Act already FAILED at. ALL implementation work \u2014 coding, refactoring, debugging, edge cases, tests \u2014 goes to Act; Act is highly capable. Never send the same work to both.";
 var THINK_DISABLED_GUIDANCE = "(Think tier is not available \u2014 use Act for all escalations.)";
 var VOICE_STYLE_CONVERSATIONAL = `Speak like a person in a live conversation, not an assistant reading a script. React first, then deliver: a quick impulsive beat ("oh nice", "hmm, hold on", "ah, got it") before the substance. Use contractions always. Vary sentence length \u2014 some very short. Light fillers and backchannels are fine ("mm-hm", "right", "let's see") but at most one per reply \u2014 never stack them. When you escalate to Act or Think, say it like a human would ("hang on, let me actually dig into that \u2014 gimme a minute") instead of announcing a task. When a result comes back, react to it like you just found out ("okay so \u2014 turns out\u2026"). Match the user's energy: a quick question gets a quick answer \u2014 a few words is a perfectly good turn. Prefer a short answer plus an offer ("want the details?") over covering everything. Never narrate your own mechanics (no "I will now act", no task ids out loud).`;
@@ -3597,6 +3605,10 @@ Today's date: ${(/* @__PURE__ */ new Date()).toDateString()}.`;
       model: o.reflexModel,
       stream: true,
       host: o.host,
+      // The reflex IS the conversational channel — it confirms ambiguity inline ("did you mean…?"),
+      // never via the blocking AskUserQuestion tool (Agent auto-adds it whenever a host is set). Left in,
+      // it stalls a voice turn until the kill-switch. Worker questions still reach the user via parkQuestion.
+      askUserQuestion: false,
       systemPrompt: prompt,
       instructionFiles: false,
       maxSteps: 8,
@@ -3696,7 +3708,7 @@ ${recent}` : brief) + verify;
       return a || "(no answer from the user \u2014 use your best judgment and note the assumption)";
     };
     const workerHost = o.askRelay ? { ask: relayAsk } : o.host?.ask ? { ask: (q2) => o.host.ask(q2) } : void 0;
-    const worker = new Agent({
+    const agentOpts = {
       ai: o.ai,
       fs: o.fs,
       model: tierModel,
@@ -3705,10 +3717,46 @@ ${recent}` : brief) + verify;
       ...workerHost ? { host: workerHost } : {},
       ...hooks ? { hooks } : {},
       signal: controller.signal
-    });
-    const promise = worker.run(briefText).then((res) => this.onWorkerSettled(id, res)).catch((err2) => this.onWorkerFailed(id, err2));
+      // shared with the checker so a cancel tears down both
+    };
+    const promise = new Agent(agentOpts).run(briefText).then((res) => this.maybeVerify(id, briefText, res, tier, agentOpts)).then((res) => this.onWorkerSettled(id, res)).catch((err2) => this.onWorkerFailed(id, err2));
     this.tasks.set(id, { id, label, status: "running", controller, promise });
   }
+  /** Fresh-context check of a successful Act task: a NEW agent (same model/fs/tools, but NO shared
+   *  conversation context) re-reads the file state against the brief and fixes any gap. The fix lands
+   *  on the shared fs automatically (workers write fs directly, no overlay), so grading sees the
+   *  corrected state. Bounded to ONE pass. Off unless `verifyActTasks`; never runs for think/failed/
+   *  cancelled tasks. Usage is merged so /cost reflects the real (worker + checker) spend. */
+  async maybeVerify(id, briefText, res, tier, agentOpts) {
+    if (!this.options.verifyActTasks || tier !== "act" || res.finishReason !== "stop") return res;
+    if (this.tasks.get(id)?.status === "cancelled") return res;
+    const checkBrief = `${briefText}
+
+## VERIFY MODE
+Another agent just implemented the above. Independently check the CURRENT state of the files against EVERY requirement. Fix any gap you find. If everything is already correct, make NO changes \u2014 do not refactor or improve \u2014 and report "verified".`;
+    this.notify("task_verify", `task ${id}: verifying`, { id });
+    const cres = await new Agent(agentOpts).run(checkBrief);
+    if (cres.finishReason !== "stop") {
+      log6.warn(`task ${id}: verify inconclusive (${cres.finishReason})`);
+      this.notify("task_verify", `task ${id}: verify inconclusive (${cres.finishReason})`, { id, finishReason: cres.finishReason });
+    }
+    const sum = (a = 0, b = 0) => a + b;
+    return {
+      ...res,
+      steps: res.steps + cres.steps,
+      // Merge the checker's messages so downstream tool-call/step accounting includes BOTH agents
+      // (else a verified task's toolCalls would undercount vs its steps/usage).
+      messages: [...res.messages, ...cres.messages],
+      usageEstimated: res.usageEstimated || cres.usageEstimated,
+      usage: res.usage && cres.usage ? {
+        promptTokens: sum(res.usage.promptTokens, cres.usage.promptTokens),
+        completionTokens: sum(res.usage.completionTokens, cres.usage.completionTokens),
+        totalTokens: sum(res.usage.totalTokens, cres.usage.totalTokens),
+        cacheCreationTokens: sum(res.usage.cacheCreationTokens, cres.usage.cacheCreationTokens),
+        cacheReadTokens: sum(res.usage.cacheReadTokens, cres.usage.cacheReadTokens)
+      } : res.usage ?? cres.usage
+    };
+  }
   /** Throttled per-task progress: worker tool calls → at most one progress re-voice per interval.
    *  Two sources, one throttle: completed steps (post) and a heartbeat for a SINGLE long tool call
    *  (pre records the in-flight call; a self-cleaning timer narrates "still inside Bash — 70s").
@@ -4125,7 +4173,7 @@ var VoiceEngine = class _VoiceEngine {
     this.stt.onLevel = (rms) => this.handleLevel(rms);
     await Promise.all([this.tts.connect(), this.stt.start()]);
     this.setState("listening");
-    log7.info(`voice I/O up (${this.stt.usingAec ? "AEC" : "heuristic echo"} capture)`);
+    log7.debug(`voice I/O up (${this.stt.usingAec ? "AEC" : "heuristic echo"} capture)`);
   }
   get usingAec() {
     return this.stt.usingAec;
@@ -4168,7 +4216,7 @@ var VoiceEngine = class _VoiceEngine {
       this.spokeDeltas = true;
       this.ackAt = now();
     }
-    this.turnStartAt = now();
+    if (!this.turnStartAt) this.turnStartAt = now();
     this.setState("thinking");
   }
   speakDelta(text) {
@@ -4177,7 +4225,7 @@ var VoiceEngine = class _VoiceEngine {
     this.reply += text;
     for (const w of this.words(this.reply)) this.echoWords.add(w);
     this.tts.speak(text, true);
-    if (!this.spokeDeltas && this.turnStartAt) log7.info(`ttft: ${Math.round(now() - this.turnStartAt)}ms`);
+    if (!this.spokeDeltas && this.turnStartAt) log7.debug(`ttft: ${Math.round(now() - this.turnStartAt)}ms`);
     this.spokeDeltas = true;
     this.setState("speaking");
   }
@@ -4198,7 +4246,7 @@ var VoiceEngine = class _VoiceEngine {
       }
       this.drainTimer = null;
       this.speaking = false;
-      if (this.turnStartAt) log7.info(`turn: ${Math.round(now() - this.turnStartAt)}ms (incl. playback)`);
+      if (this.turnStartAt) log7.debug(`turn: ${Math.round(now() - this.turnStartAt)}ms (incl. playback)`);
       this.echoUntil = now() + 2500;
       if (!this.usingAec) this.stt.reset();
       this.setState("listening");
@@ -4353,7 +4401,10 @@ var VoiceEngine = class _VoiceEngine {
     }
     const text = this.pendingUtt;
     this.pendingUtt = "";
-    if (text) this.options.onUtterance(text);
+    if (text) {
+      this.turnStartAt = now();
+      this.options.onUtterance(text);
+    }
   }
   get overlapCapable() {
     return this.usingAec && this.options.overlapPause && !!this.player.pause && !!this.player.resume;
@@ -4494,7 +4545,7 @@ var SonioxSTT = class {
     this.endpointTimer = setInterval(() => {
       const combined = (this.finalText + this.partialText).trim();
       if (!combined || now2() - this.lastChangeAt < this.options.silenceEndpointMs) return;
-      if (this.firstTokenAt) log8.info(`stt: ${Math.round(now2() - this.firstTokenAt)}ms first-token\u2192silence-endpoint, "${combined.slice(0, 60)}"`);
+      if (this.firstTokenAt) log8.debug(`stt: ${Math.round(now2() - this.firstTokenAt)}ms first-token\u2192silence-endpoint, "${combined.slice(0, 60)}"`);
       this.reset();
       this.onUtterance(combined, now2());
     }, 120);
@@ -4527,7 +4578,7 @@ var SonioxSTT = class {
     this.onPartial(combined);
     if (endpoint && this.finalText.trim()) {
       const utterance = this.finalText.trim();
-      if (this.firstTokenAt) log8.info(`stt: ${Math.round(now2() - this.firstTokenAt)}ms first-token\u2192endpoint, "${utterance.slice(0, 60)}"`);
+      if (this.firstTokenAt) log8.debug(`stt: ${Math.round(now2() - this.firstTokenAt)}ms first-token\u2192endpoint, "${utterance.slice(0, 60)}"`);
       this.reset();
       this.onUtterance(utterance, now2());
     }
@@ -5127,7 +5178,7 @@ import { existsSync as existsSync2, mkdirSync as mkdirSync2 } from "fs";
 import { platform, arch, release, userInfo, homedir } from "os";
 init_tools_shell();
 import { BodDB as BodDB2 } from "@bod.ee/db";
-var DEFAULT_TOOLS = ["bash", "Read", "Edit", "Write", "Grep", "Glob", "MultiEdit", "TodoWrite"];
+var DEFAULT_TOOLS = ["bash", "Read", "Edit", "Write", "Grep", "Glob", "MultiEdit", "ApplyEdits", "RepoMap", "TodoWrite"];
 function autoWebTools() {
   const tools = [];
   tools.push("WebFetch");
@@ -7871,13 +7922,29 @@ function printHistory(messages) {
   const s = formatHistory(messages);
   if (s) err(s);
 }
-function costOf(pricing, promptTokens = 0, completionTokens = 0, cacheCreationTokens = 0, cacheReadTokens = 0) {
+function cacheMultipliers(model) {
+  const p = (model ?? "").split("/")[0];
+  switch (p) {
+    case "anthropic":
+      return { read: 0.1, write: 1.25 };
+    case "openai":
+      return { read: 0.5, write: 1 };
+    case "google":
+      return { read: 0.25, write: 1 };
+    case "deepseek":
+      return { read: 0.1, write: 1 };
+    default:
+      return { read: 1, write: 1 };
+  }
+}
+function costOf(pricing, promptTokens = 0, completionTokens = 0, cacheCreationTokens = 0, cacheReadTokens = 0, model) {
   if (!pricing) return 0;
+  const mult = model ? cacheMultipliers(model) : { read: 0.1, write: 1.25 };
   const fresh = Math.max(0, promptTokens - cacheCreationTokens - cacheReadTokens);
-  return fresh / 1e3 * pricing.inputCostPer1K + cacheCreationTokens / 1e3 * pricing.inputCostPer1K * 1.25 + cacheReadTokens / 1e3 * pricing.inputCostPer1K * 0.1 + completionTokens / 1e3 * pricing.outputCostPer1K;
+  return fresh / 1e3 * pricing.inputCostPer1K + cacheCreationTokens / 1e3 * pricing.inputCostPer1K * mult.write + cacheReadTokens / 1e3 * pricing.inputCostPer1K * mult.read + completionTokens / 1e3 * pricing.outputCostPer1K;
 }
 function turnCost(model, usage) {
-  return costOf(getModelInfo(model)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0);
+  return costOf(getModelInfo(model)?.pricing, usage?.promptTokens ?? 0, usage?.completionTokens ?? 0, usage?.cacheCreationTokens ?? 0, usage?.cacheReadTokens ?? 0, model);
 }
 async function evaluateGoal(ai, condition, transcript, log17) {
   const recent = transcript.filter((m) => m.role === "assistant").slice(-8).map((m) => {
@@ -8350,12 +8417,21 @@ async function repl(args, ai, cfg, cwd) {
   const duplexAsk = async (call) => {
     if (args.voice && dx) {
       const hint = summarizeCall(call.name, call.args).slice(0, 80);
-      if (cfg.voiceAskUi === "menu") {
+      if (cfg.voiceAskUi !== "relay") {
         editorRef?.suspend();
-        const v = await selectMenu(process.stderr, { title: `? background worker asks to run ${call.name} ${hint}`, items: [{ label: "Allow", value: "y" }, { label: "Deny", value: "n" }], current: "n" });
+        const v = await selectMenu(process.stderr, {
+          title: `? background worker asks to run ${call.name} ${hint}`,
+          items: [{ label: "Allow once", value: "y" }, { label: "Allow always", value: "a" }, { label: "Deny", value: "n" }],
+          current: "y"
+        });
         editorRef?.resume();
         editorRef?.redrawNow();
-        return { decision: v === "y" ? "allow" : "deny" };
+        if (v === "a") {
+          const cmd = typeof call.args?.command === "string" ? call.args.command : null;
+          work.permissions?.options.rules.unshift(cmd ? { tool: call.name, pathGlob: cmd, decision: "allow" } : { tool: call.name, decision: "allow" });
+          persistRule(cwd, "allow", cmd ? `${call.name}(${cmd})` : call.name);
+        }
+        return { decision: v === "y" || v === "a" ? "allow" : "deny" };
       }
       const id = `perm-${++permSeq}`;
       const a = await dx.parkQuestion(id, `Permission: may the background worker run ${call.name}${hint ? ` (${hint})` : ""}? Answer yes or no (you can also type it).`);
@@ -9704,7 +9780,32 @@ ${extra}` : body);
     } else if (running.length) {
       err(dim(`  \u2026 waiting for ${running.length} background task(s) (Ctrl-C to force quit)
 `));
-      await dx.idle();
+      let forced = false;
+      let onCtrlC = () => {
+      };
+      const onByte = (b) => {
+        if (!b.includes(3)) return;
+        forced = true;
+        for (const t of running) {
+          t.status = "cancelled";
+          t.controller.abort();
+        }
+        err(dim(`
+  \u2026 force-quit \u2014 cancelled ${running.length} background task(s)
+`));
+        onCtrlC();
+      };
+      process.stdin.on("data", onByte);
+      await Promise.race([dx.idle(), new Promise((res) => {
+        onCtrlC = res;
+      })]);
+      process.stdin.off("data", onByte);
+      if (forced) {
+        voiceIO?.stop();
+        releaseStdin();
+        await closeMcp(mounted);
+        process.exit(130);
+      }
       face.options.host?.flushText?.();
       duplexPersist();
     }
@@ -9805,6 +9906,7 @@ if (import.meta.main) main().catch((e) => {
 });
 export {
   appendMemoryNote,
+  cacheMultipliers,
   costOf,
   estimateTranscriptTokens,
   expandMentions,