blun-king-cli 9.1.527 → 9.1.550

package/blun.mjs

@@ -5,6 +5,7 @@ import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
 import { createRequire } from "node:module";
+const { htmlToResearchMarkdown } = createRequire(import.meta.url)("./bin/html-to-research-markdown.cjs");
 import telegramConsoleStatusPolicy from "./bin/telegram-console-status-policy.cjs";
 import cognitiveGoalAutostartPolicy from "./bin/cognitive-goal-autostart-policy.cjs";
 import cognitiveGoalTimeTriggerController from "./bin/cognitive-goal-time-trigger-controller.cjs";
@@ -16,6 +17,8 @@ import sessionScrollbackArchive from "./bin/session-scrollback-archive.cjs";
 import sessionReplayWindowPolicy from "./bin/session-replay-window-policy.cjs";
 import globPatternPolicy from "./bin/glob-pattern-policy.cjs";
 import userHomePathPolicy from "./bin/user-home-path-policy.cjs";
+import editableToolApprovalPolicy from "./bin/editable-tool-approval-policy.cjs";
+import editableToolApprovalRuntime from "./bin/editable-tool-approval-runtime.cjs";
 import crypto$1, { createHash, randomBytes, randomInt, randomUUID, timingSafeEqual } from "node:crypto";
 import * as fs$16 from "node:fs";
 import Kt, { accessSync, appendFileSync, chmodSync, closeSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, promises, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
@@ -56,6 +59,14 @@ const { SessionScrollbackArchive, sessionScrollbackArchiveDirectory } = sessionS
 const { replayWindowStartIndex, resolveReplayActiveTurnCount } = sessionReplayWindowPolicy;
 const { globPatternError } = globPatternPolicy;
 const { unsupportedUserHomePathError } = userHomePathPolicy;
+const {
+	buildApprovalEditedEvent,
+	canonicalEditedToolInputJson,
+	isEditableToolApprovalEligible,
+	parseEditedToolInputJson,
+	validateEditedApprovalDecision
+} = editableToolApprovalPolicy;
+const { buildEditedToolCallPlan } = editableToolApprovalRuntime;
 import { EventEmitter as EventEmitter$1 } from "node:events";
 import { StringDecoder } from "node:string_decoder";
 import co from "node:assert";
@@ -14662,7 +14673,7 @@ async function refreshProviderModels(host, options = {}) {
 var BLUN_LOCAL_PROVIDER_NAME;
 var init_refreshProviderModels = __esmMin((() => {
 	init_managed_blun();
-	BLUN_LOCAL_PROVIDER_NAME = "king-blun";
+	BLUN_LOCAL_PROVIDER_NAME = "blun";
 }));
 //#endregion
 //#region ../../packages/oauth/src/index.ts
@@ -21380,7 +21391,10 @@ var init_flags = __esmMin((() => {
 var RawSubagentProfileSchema, RawAgentProfileSchema;
 var init_types$13 = __esmMin((() => {
 	init_zod$1();
-	RawSubagentProfileSchema = object({ description: string().optional() });
+	RawSubagentProfileSchema = object({
+		description: string().optional(),
+		skills: array(string()).optional()
+	});
 	RawAgentProfileSchema = object({
 		extends: string().optional(),
 		name: string().min(1),
@@ -28474,10 +28488,13 @@ function linkResolvedSubagents(mergedProfiles, resolvedProfiles) {
 	for (const [ownerName, owner] of mergedProfiles) {
 		if (owner.subagents === void 0) continue;
 		const subagents = {};
-		for (const subagentName of Object.keys(owner.subagents)) {
+		for (const [subagentName, subagentBinding] of Object.entries(owner.subagents)) {
 			const target = resolvedProfiles.get(subagentName);
 			if (target === void 0) throwMissingSubagent(ownerName, subagentName);
-			subagents[subagentName] = target;
+			subagents[subagentName] = subagentBinding.skills === void 0 ? target : {
+				...target,
+				subagentSkills: [...subagentBinding.skills]
+			};
 		}
 		const resolved = resolvedProfiles.get(ownerName);
 		if (resolved !== void 0) resolved.subagents = subagents;
@@ -28543,9 +28560,12 @@ var init_load = __esmMin((() => {
 //#region ../../packages/agent-core/src/profile/default/agent.yaml?raw
 var agent_default$1;
 var init_agent$3 = __esmMin((() => {
-	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskUpdate\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - GenerateImage\n  - GenerateVideo\n  - GenerateSpeech\n  - UnderstandImage\n  - UnderstandVideo\n  - DubVideo\n  - LipSyncMedia\n  - GetMedia\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
+	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskUpdate\n  - TaskResume\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - GenerateImage\n  - GenerateVideo\n  - GenerateSpeech\n  - UnderstandImage\n  - UnderstandVideo\n  - DubVideo\n  - LipSyncMedia\n  - GetMedia\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
+	agent_default$1 = agent_default$1.replace("  plan:\n", "  research:\n    description: Read-only web and source research with an explicit two-skill allowlist.\n    skills:\n      - web-lesen\n      - premortem\n  plan:\n");
 	agent_default$1 = agent_default$1.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
 	agent_default$1 = agent_default$1.replace("  - TodoList\n", "  - TodoList\n  - CompactConversation\n");
+	agent_default$1 = agent_default$1.replace("  - CodebaseSearch\n", "  - CodebaseSearch\n  - ProgrammaticTool\n");
+	agent_default$1 = agent_default$1.replace("  - CronList\n", "  - CronList\n  - CronRunList\n  - CronRunOutput\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/coder.yaml?raw
@@ -28553,6 +28573,7 @@ var coder_default;
 var init_coder = __esmMin((() => {
 	coder_default = "extends: agent\nname: coder\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    Your final message is the entire handoff — the parent sees nothing else from your run. Make it technically complete: what you changed and why, the path of every file you touched, how you verified the change (tests or commands run, with results), and anything left undone or worth follow-up. A final message of only a sentence or two is treated as too brief and sent back to you for expansion, costing an extra turn.\nwhenToUse: |\n  Use this agent for non-trivial software engineering work that may require reading files, editing code, running commands, and returning a compact but technically complete summary to the parent agent.\ntools:\n  - Bash\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - Write\n  - Edit\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n  - mcp__*\n";
 	coder_default = coder_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
+	coder_default = coder_default.replace("  - ReadBatch\n", "  - ReadBatch\n  - ProgrammaticTool\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/explore.yaml?raw
@@ -28560,6 +28581,14 @@ var explore_default;
 var init_explore = __esmMin((() => {
 	explore_default = "extends: agent\nname: explore\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    You are a codebase exploration specialist. Your role is EXCLUSIVELY to search, read, and analyze existing code and resources. You do NOT have access to project file editing tools. MistakeRecord is the sole write-capable exception: it may record a concrete refutation in shared BLUN learning memory, never modify project files.\n\n    Your strengths:\n    - Rapidly finding files using glob patterns\n    - Searching code and text with powerful regex patterns\n    - Reading and analyzing file contents\n    - Running read-only shell commands (git log, git diff, ls, find, etc.)\n\n    Guidelines:\n    - Use Glob for broad file pattern matching. Prefer patterns with a literal anchor (extension or subdirectory); pure wildcards like `*` or `**/*` are allowed but usually truncate at the match cap.\n    - Use Grep for searching file contents with regex\n    - Use Read when you know the specific file path\n    - Use Bash ONLY for read-only operations (ls, git status, git log, git diff, find)\n    - NEVER use Bash for any file creation or modification commands\n    - Use WebSearch or FetchURL when a question needs external context (library documentation, error messages, upstream APIs); the local codebase remains your primary domain\n    - Adapt your search depth based on the thoroughness level specified by the caller\n    - Wherever possible, spawn multiple parallel tool calls for grepping and reading files to maximize speed\n\n    If the prompt includes a <git-context> block, use it to orient yourself about the repository state before starting your investigation.\n\n    You are meant to be a fast agent. Complete the search request efficiently and report your findings clearly in a structured format.\nwhenToUse: |\n  Fast agent specialized for exploring codebases. Use this when you need to quickly find files by patterns (e.g. \"src/**/*.yaml\"), search code for keywords (e.g. \"database connection\"), or answer questions about the codebase (e.g. \"how does the auth module work?\"). When calling this agent, specify the desired thoroughness level: \"quick\" for basic searches, \"medium\" for moderate exploration, or \"thorough\" for comprehensive analysis across multiple locations and naming conventions. Use this agent for any read-only exploration that will clearly require more than 3 search queries. Prefer launching multiple explore agents concurrently when investigating independent questions.\ntools:\n  - Bash\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n";
 	explore_default = explore_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
+	explore_default = explore_default.replace("  - ReadBatch\n", "  - ReadBatch\n  - ProgrammaticTool\n");
+}));
+//#endregion
+//#region ../../packages/agent-core/src/profile/default/research.yaml?raw
+var research_default;
+var init_research = __esmMin((() => {
+	init_explore();
+	research_default = explore_default.replace("name: explore\n", "name: research\n").replace("Fast agent specialized for exploring codebases.", "Read-only agent specialized for source and web research with profile-scoped skills.");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/init.md?raw
@@ -28573,6 +28602,7 @@ var plan_default;
 var init_plan$1 = __esmMin((() => {
 	plan_default = "extends: agent\nname: plan\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    Before designing your implementation plan, consider whether you fully understand the codebase areas relevant to the task. If not, recommend the parent agent to use the explore agent (subagent_type=\"explore\") to investigate key questions first. In your response, clearly state:\n    1. What you already know from the information provided\n    2. What questions remain unanswered that would benefit from explore agent investigation\n    3. Your implementation plan (either preliminary if questions remain, or final if sufficient context exists)\n\n    You are a read-only planning agent: you can read and search files (Read, Glob, Grep, ReadMediaFile) and consult the web (WebSearch, FetchURL), but you have no shell and no project file-editing tools. MistakeRecord is the sole write-capable exception: it may record a concrete refutation in shared BLUN learning memory, never modify project files. Where the general instructions tell you to make changes with tools, that does not apply to you — do not attempt to run commands or modify project files. Your deliverable is the plan itself, returned as your final message.\nwhenToUse: |\n  Use this agent when the parent agent needs a step-by-step implementation plan, key file identification, and architectural trade-off analysis before code changes are made.\ntools:\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n";
 	plan_default = plan_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
+	plan_default = plan_default.replace("  - ReadBatch\n", "  - ReadBatch\n  - ProgrammaticTool\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/system.md?raw
@@ -28591,6 +28621,7 @@ var init_default$1 = __esmMin((() => {
 	coder_default = coder_default.replace("\nwhenToUse:", "\nexcludedTools:\n  - mcp__plugin-telegram_telegram__reply\n  - mcp__plugin-telegram_telegram__react\n  - mcp__plugin-telegram_telegram__edit_message\n  - mcp__plugin-telegram_telegram__download_attachment\n\nwhenToUse:");
 	init_explore();
 	explore_default = explore_default.replace("\nwhenToUse:", "\nexcludedTools:\n  - mcp__plugin-telegram_telegram__reply\n  - mcp__plugin-telegram_telegram__react\n  - mcp__plugin-telegram_telegram__edit_message\n  - mcp__plugin-telegram_telegram__download_attachment\n\nwhenToUse:");
+	init_research();
 	init_init();
 	init_plan$1();
 	plan_default = plan_default.replace("\nwhenToUse:", "\nexcludedTools:\n  - mcp__plugin-telegram_telegram__reply\n  - mcp__plugin-telegram_telegram__react\n  - mcp__plugin-telegram_telegram__edit_message\n  - mcp__plugin-telegram_telegram__download_attachment\n\nwhenToUse:");
@@ -28601,6 +28632,7 @@ var init_default$1 = __esmMin((() => {
 		"profile/default/agent.yaml": agent_default$1,
 		"profile/default/coder.yaml": coder_default,
 		"profile/default/explore.yaml": explore_default,
+		"profile/default/research.yaml": research_default,
 		"profile/default/plan.yaml": plan_default,
 		"profile/default/system.md": system_default
 	};
@@ -28609,6 +28641,7 @@ var init_default$1 = __esmMin((() => {
 		"agent.yaml",
 		"coder.yaml",
 		"explore.yaml",
+		"research.yaml",
 		"plan.yaml"
 	].map((file) => `profile/default/${file}`), PROFILE_SOURCES);
 }));
@@ -29102,6 +29135,10 @@ var init_agent_task = __esmMin((() => {
 		continuationTimeoutMs;
 		runInBackground;
 		parentToolCallId;
+		responseFormat;
+		resumed;
+		replacesTaskId;
+		resumeRootTaskId;
 		kind = "agent";
 		idPrefix = "agent";
 		agentId;
@@ -29114,6 +29151,10 @@ var init_agent_task = __esmMin((() => {
 			this.continuationTimeoutMs = options.timeoutMs;
 			this.runInBackground = options.runInBackground;
 			this.parentToolCallId = options.parentToolCallId;
+			this.responseFormat = options.responseFormat;
+			this.resumed = options.resumed;
+			this.replacesTaskId = options.replacesTaskId;
+			this.resumeRootTaskId = options.resumeRootTaskId;
 			this.agentId = handle.agentId;
 			this.subagentType = handle.profileName;
 		}
@@ -29133,6 +29174,7 @@ var init_agent_task = __esmMin((() => {
 							prompt: continuation.kind === "transient_provider" ? "Continue from the preserved context after a transient provider interruption. Do not repeat completed work; inspect the preserved wire and continue from the last durable boundary." : "Continue from the preserved context after the wall-clock interval.",
 							description: this.description,
 							runInBackground: this.runInBackground,
+							responseFormat: this.responseFormat,
 							signal: this.abortController.signal
 						});
 						return this.handle;
@@ -29165,7 +29207,10 @@ var init_agent_task = __esmMin((() => {
 				timeoutMs: this.continuationTimeoutMs,
 				kind: "agent",
 				agentId: this.agentId,
-				subagentType: this.subagentType
+				subagentType: this.subagentType,
+				resumed: this.resumed,
+				replacesTaskId: this.replacesTaskId,
+				resumeRootTaskId: this.resumeRootTaskId
 			};
 		}
 	};
@@ -29438,6 +29483,11 @@ function buildBackgroundTaskNotificationBody(info) {
 	if (info.status === "completed") return baseLine;
 	const agentId = info.agentId;
 	if (agentId === void 0 || agentId === info.taskId) return baseLine;
+	if (info.status === "lost") return `${baseLine}${[
+		"",
+		`To recover this interrupted background run explicitly, call TaskResume(task_id="${info.taskId}", prompt="Inspect the preserved state and continue without repeating completed side effects.", description="Resume ${info.description}").`,
+		`TaskResume keeps agent_id "${agentId}" and its context, creates a new linked task_id, and never runs automatically at startup.`
+	].join("\n")}`;
 	return `${baseLine}${[
 		"",
 		`To recover or continue this subagent, call Agent(resume="${agentId}", prompt="Pick up where you left off; redo the last tool call if its result was never observed.").`,
@@ -29446,7 +29496,7 @@ function buildBackgroundTaskNotificationBody(info) {
 		"The subagent retains its full prior context across the restart, but any in-flight tool call lost its result and may need to be redone."
 	].join("\n")}`;
 }
-var MAX_OUTPUT_BYTES$2, NOTIFICATION_FALLBACK_PREVIEW_BYTES, MAX_FOREGROUND_CAPTURE_BYTES, captureForegroundOutputChunk, createAbortOutcome, SIGTERM_GRACE_MS$1, USER_INTERRUPT_REASON$1, _ALPHABET, BackgroundManager;
+var MAX_OUTPUT_BYTES$2, NOTIFICATION_FALLBACK_PREVIEW_BYTES, MAX_FOREGROUND_CAPTURE_BYTES, captureForegroundOutputChunk, createAbortOutcome, DurableTaskResumeStore$1, decorateTaskInfo$1, SIGTERM_GRACE_MS$1, USER_INTERRUPT_REASON$1, _ALPHABET, BackgroundManager;
 var init_background = __esmMin((() => {
 	init_dist$4();
 	init_errors$4();
@@ -29462,13 +29512,17 @@ var init_background = __esmMin((() => {
 	NOTIFICATION_FALLBACK_PREVIEW_BYTES = 3e3;
 	({ MAX_FOREGROUND_CAPTURE_BYTES, captureForegroundOutputChunk } = createRequire(import.meta.url)("./bin/foreground-output-capture-policy.cjs"));
 	({ createAbortOutcome } = createRequire(import.meta.url)("./bin/abort-listener-policy.cjs"));
+	({ DurableTaskResumeStore: DurableTaskResumeStore$1 } = createRequire(import.meta.url)("./bin/durable-task-resume-store.cjs"));
+	({ decorateTaskInfo: decorateTaskInfo$1 } = createRequire(import.meta.url)("./bin/durable-task-resume-policy.cjs"));
 	SIGTERM_GRACE_MS$1 = 5e3;
 	USER_INTERRUPT_REASON$1 = "Interrupted by user";
 	_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyz";
 	BackgroundManager = class {
 		agent;
 		persistence;
+		resumeStore;
 		tasks = /* @__PURE__ */ new Map();
+		reservedTaskIds = /* @__PURE__ */ new Set();
 		/**
 		* Ghosts: tasks loaded from disk during reconcile that have no live
 		* KaosProcess. They appear in `list()` / `getTask()` with status
@@ -29480,6 +29534,7 @@ var init_background = __esmMin((() => {
 		constructor(agent, persistence) {
 			this.agent = agent;
 			this.persistence = persistence;
+			this.resumeStore = persistence?.sessionDir ? new DurableTaskResumeStore$1(persistence.sessionDir) : void 0;
 		}
 		fireTerminalEffects(entry) {
 			if (!this.isDetached(entry)) return;
@@ -29523,6 +29578,13 @@ var init_background = __esmMin((() => {
 		isDetached(entry) {
 			return entry.foregroundRelease === void 0;
 		}
+		reserveTaskId(prefix) {
+			let taskId;
+			do taskId = generateTaskId(prefix);
+			while (this.tasks.has(taskId) || this.ghosts.has(taskId) || this.reservedTaskIds.has(taskId) || this.resumeStore?.list().some((intent) => intent.replacementTaskId === taskId));
+			this.reservedTaskIds.add(taskId);
+			return taskId;
+		}
 		registerTask(task, options = {}) {
 			const detached = options.detached ?? true;
 			const entryOptions = {
@@ -29532,7 +29594,10 @@ var init_background = __esmMin((() => {
 				signal: detached ? void 0 : options.signal
 			};
 			this.assertCanRegister(detached);
-			const taskId = generateTaskId(task.idPrefix);
+			const taskId = options.taskId ?? this.reserveTaskId(task.idPrefix);
+			if (!VALID_TASK_ID$1.test(taskId)) throw new Error(`Invalid task id: "${taskId}"`);
+			if (this.tasks.has(taskId) || this.ghosts.has(taskId)) throw new Error(`Task id already exists: ${taskId}`);
+			this.reservedTaskIds.delete(taskId);
 			const entry = {
 				taskId,
 				task,
@@ -29566,8 +29631,8 @@ var init_background = __esmMin((() => {
 		/** Get info about a specific task. Falls back to reconcile ghosts. */
 		getTask(taskId) {
 			const entry = this.tasks.get(taskId);
-			if (entry !== void 0) return this.toInfo(entry);
-			return this.ghosts.get(taskId);
+			const info = entry !== void 0 ? this.toInfo(entry) : this.ghosts.get(taskId);
+			return decorateTaskInfo$1(info, this.resumeStore?.getBySourceTaskId(taskId));
 		}
 		updateAgentTask(taskId, message) {
 			const entry = this.tasks.get(taskId);
@@ -29590,12 +29655,13 @@ var init_background = __esmMin((() => {
 		list(activeOnly = true, limit) {
 			const result = [];
 			for (const entry of this.tasks.values()) {
-				const info = this.toInfo(entry);
+				const info = decorateTaskInfo$1(this.toInfo(entry), this.resumeStore?.getBySourceTaskId(entry.taskId));
 				if (!this.shouldListTask(info, activeOnly)) continue;
 				result.push(info);
 				if (limit !== void 0 && result.length >= limit) return result;
 			}
-			if (!activeOnly) for (const ghost of this.ghosts.values()) {
+			if (!activeOnly) for (const storedGhost of this.ghosts.values()) {
+				const ghost = decorateTaskInfo$1(storedGhost, this.resumeStore?.getBySourceTaskId(storedGhost.taskId));
 				if (!this.shouldListTask(ghost, activeOnly)) continue;
 				result.push(ghost);
 				if (limit !== void 0 && result.length >= limit) return result;
@@ -29743,6 +29809,7 @@ var init_background = __esmMin((() => {
 		async loadFromDisk() {
 			const persistence = this.persistence;
 			if (persistence === void 0) return;
+			await this.resumeStore?.load();
 			this.ghosts.clear();
 			const persisted = await persistence.listTasks();
 			for (const t of persisted) {
@@ -29788,6 +29855,11 @@ var init_background = __esmMin((() => {
 			entry.persistWriteQueue = entry.persistWriteQueue.then(() => persistence.writeTask(info)).catch(() => {});
 			return entry.persistWriteQueue;
 		}
+		async awaitTaskPersisted(taskId) {
+			const entry = this.tasks.get(taskId);
+			if (entry === void 0) throw new Error(`Task not found: ${taskId}`);
+			await entry.persistWriteQueue;
+		}
 		appendOutput(entry, chunk) {
 			const capture = this.isDetached(entry) ? {
 				capturedText: chunk,
@@ -30334,6 +30406,7 @@ var init_completion_budget = __esmMin((() => {
 }));
 //#endregion
 //#region ../../packages/agent-core/src/loop/retry.ts
+var { nextThinkingEffortForExhaustedEmpty } = createRequire(import.meta.url)("./bin/empty-response-retry-policy.cjs");
 async function chatWithRetry(input) {
 	const maxAttempts = input.maxAttempts ?? 3;
 	if (input.llm.isRetryableError === void 0 || maxAttempts <= 1) {
@@ -30347,9 +30420,10 @@ async function chatWithRetry(input) {
 	}
 	const delays = retryBackoffDelays(maxAttempts);
 	let completionBudgetRetry;
+	let thinkingEffortRetry;
 	let emptyRetryKind;
 	for (let attempt = 1;; attempt += 1) try {
-		return await input.llm.chat(paramsForAttempt(input, attempt, maxAttempts, completionBudgetRetry));
+		return await input.llm.chat(paramsForAttempt(input, attempt, maxAttempts, completionBudgetRetry, thinkingEffortRetry));
 	} catch (error) {
 		if (error instanceof APIEmptyResponseError && (emptyRetryKind !== void 0 || error.emptyResponseKind === "length" || error.emptyResponseKind === "stop")) {
 			logEmptyResponse(input, error, attempt);
@@ -30359,6 +30433,12 @@ async function chatWithRetry(input) {
 				throw terminal;
 			}
 			completionBudgetRetry = completionBudgetRetryForEmpty(error);
+			thinkingEffortRetry = nextThinkingEffortForExhaustedEmpty({
+				emptyResponseKind: error.emptyResponseKind,
+				maxCompletionTokens: error.maxCompletionTokens,
+				completionTokens: error.completionTokens,
+				thinkingEffort: input.llm.thinkingEffort
+			});
 			emptyRetryKind = error.emptyResponseKind;
 			input.params.signal.throwIfAborted();
 			input.dispatchEvent({
@@ -30415,11 +30495,12 @@ function logRequestFailure(input, error, attempt, maxAttempts) {
 		...retryErrorFields(error)
 	});
 }
-function paramsForAttempt(input, attempt, maxAttempts, completionBudgetRetry) {
+function paramsForAttempt(input, attempt, maxAttempts, completionBudgetRetry, thinkingEffortRetry) {
 	const turnStep = `${input.turnId}.${String(input.currentStep)}`;
 	return {
 		...input.params,
 		completionBudgetRetry,
+		thinkingEffortRetry,
 		requestLogFields: attempt === 1 ? { turnStep } : {
 			turnStep,
 			attempt: `${String(attempt)}/${String(maxAttempts)}`
@@ -30427,12 +30508,19 @@ function paramsForAttempt(input, attempt, maxAttempts, completionBudgetRetry) {
 	};
 }
 function logEmptyResponse(input, error, attempt) {
+	const retryThinkingEffort = nextThinkingEffortForExhaustedEmpty({
+		emptyResponseKind: error.emptyResponseKind,
+		maxCompletionTokens: error.maxCompletionTokens,
+		completionTokens: error.completionTokens,
+		thinkingEffort: input.llm.thinkingEffort
+	});
 	input.log?.warn(`[leer] fall=${error.emptyResponseKind}`, {
 		turnStep: `${input.turnId}.${String(input.currentStep)}`,
 		attempt,
 		budget: error.maxCompletionTokens,
 		completion: error.completionTokens,
-		reasoningLength: error.reasoningLength
+		reasoningLength: error.reasoningLength,
+		...retryThinkingEffort === void 0 ? {} : { retryThinkingEffort }
 	});
 }
 function retryBackoffDelays(maxAttempts) {
@@ -30599,6 +30687,101 @@ var init_todo_list = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/builtin/state/programmatic-tool.ts
+var PROGRAMMATIC_TOOL_NAME, ProgrammaticTool;
+var init_programmatic_tool = __esmMin((() => {
+	PROGRAMMATIC_TOOL_NAME = "ProgrammaticTool";
+	ProgrammaticTool = class {
+		name = PROGRAMMATIC_TOOL_NAME;
+		description = "Run bounded JavaScript in an isolated QuickJS interpreter to coordinate several sequential BLUN tool calls without returning every intermediate value to the model context. Declare every callable tool explicitly with its current BLUN name and a JavaScript alias. Calls still pass through the normal schema, hook, permission, scheduler, event, and result pipeline; denied or unavailable tools fail inside the program. The interpreter has no host filesystem, network, process, package loader, clock, or dynamic eval. Use bounded console.log, console.warn, or console.error diagnostics when needed. Return a JSON-serializable result and use the JSON state object only for explicit continuation.";
+		parameters = {
+			type: "object",
+			properties: {
+				code: {
+					type: "string",
+					maxLength: 32e3,
+					description: "JavaScript function body. Use state for explicit JSON state and tools.<alias>(args) for declared sequential tool calls."
+				},
+				state: {
+					type: "object",
+					description: "Optional JSON-only state snapshot from a previous run."
+				},
+				tools: {
+					type: "array",
+					maxItems: 16,
+					description: "Explicit allowlist for this program. Each name must be a tool available in the current turn.",
+					items: {
+						type: "object",
+						properties: {
+							name: {
+								type: "string",
+								minLength: 1,
+								description: "Exact current BLUN tool name."
+							},
+							alias: {
+								type: "string",
+								pattern: "^[A-Za-z_$][A-Za-z0-9_$]*$",
+								description: "JavaScript identifier exposed under tools."
+							}
+						},
+						required: ["name", "alias"],
+						additionalProperties: false
+					}
+				}
+			},
+			required: ["code"],
+			additionalProperties: false
+		};
+		resolveExecution(args) {
+			const declaredTools = Array.isArray(args.tools) ? args.tools : [];
+			return {
+				description: `Running bounded programmatic tool plan (${declaredTools.length} allowed tool${declaredTools.length === 1 ? "" : "s"})`,
+				approvalRule: this.name,
+				execute: async (context) => {
+					if (typeof context.invokeTool !== "function") return {
+						output: "Programmatic tool invocation boundary is unavailable.",
+						isError: true
+					};
+					try {
+						const { createProgrammaticToolRuntime } = await import(new URL("./bin/programmatic-tool-runtime.mjs", import.meta.url).href);
+						const runtime = createProgrammaticToolRuntime({
+							allowedTools: declaredTools,
+							invokeTool: context.invokeTool,
+							onEvent: (event) => context.onUpdate({
+								kind: "programmatic_tool",
+								event
+							})
+						});
+						const outcome = await runtime.run({
+							code: args.code,
+							state: args.state ?? {},
+							signal: context.signal
+						});
+						const result = {
+							output: JSON.stringify(outcome),
+							isError: false
+						};
+						if (context.invokeTool.stopTurn === true) result.stopTurn = true;
+						return result;
+					} catch (error) {
+						const message = error instanceof Error ? error.message : String(error);
+						const programmaticConsole = error && typeof error === "object" ? error.programmaticConsole : void 0;
+						const result = {
+							output: programmaticConsole ? JSON.stringify({
+								error: message,
+								console: programmaticConsole
+							}) : message,
+							isError: true
+						};
+						if (context.invokeTool.stopTurn === true) result.stopTurn = true;
+						return result;
+					}
+				}
+			};
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/tools/support/file-type.ts
 function toBuffer$2(data) {
 	return Buffer.isBuffer(data) ? data : Buffer.from(data.buffer, data.byteOffset, data.byteLength);
@@ -74747,6 +74930,9 @@ var init_kosong_llm = __esmMin((() => {
 			this.visionReader = config.visionReader;
 			this.onVisionUsage = config.onVisionUsage;
 		}
+		get thinkingEffort() {
+			return this.provider.thinkingEffort;
+		}
 		notifyMediaDropped(dropped) {
 			if (this.onMediaDropped === void 0) return;
 			const fresh = dropped.filter((part) => {
@@ -74789,6 +74975,7 @@ var init_kosong_llm = __esmMin((() => {
 			let result;
 			let completionBudget;
 			try {
+				const requestProvider = params.thinkingEffortRetry === void 0 ? this.provider : this.provider.withThinking(params.thinkingEffortRetry);
 				const enrichedMessages = this.visionReader === void 0 ? params.messages : await enrichMessagesWithVision(params.messages, this.visionReader, params.signal, this.onVisionUsage);
 				const tools = [...params.tools];
 				const outgoingMessages = downgradeUnsupportedMedia(enrichedMessages, this.capability, (dropped) => {
@@ -74798,11 +74985,11 @@ var init_kosong_llm = __esmMin((() => {
 				const reportedContextTokens = this.reportedContextTokens?.() ?? 0;
 				const usedContextTokens = Math.max(outgoingRequestTokens, reportedContextTokens);
 				completionBudget = applyCompletionBudgetWithDetails({
-					provider: this.provider,
+					provider: requestProvider,
 					budget: this.completionBudgetConfig,
 					capability: this.capability,
 					usedContextTokens,
-					retry: params.completionBudgetRetry ?? (thinkingEnabled(this.provider.thinkingEffort) ? {
+					retry: params.completionBudgetRetry ?? (thinkingEnabled(requestProvider.thinkingEffort) ? {
 						minimumCompletionTokens: 1024,
 						multiplier: 1
 					} : void 0)
@@ -75421,23 +75608,27 @@ var init_full = __esmMin((() => {
 			const budget = this.strategy.compactionBudgetTokens;
 			return budget !== void 0 && Number.isFinite(budget) && budget > 0 ? Math.floor(budget) : void 0;
 		}
-		proactiveCompactionStatus() {
-			return proactiveCompactionEligibility({
-				usedTokens: this.estimateCurrentRequestTokens(),
-				budgetTokens: this.getCompactionBudgetTokens(),
-				hasShrinkableHistory: this.hasShrinkableHistory(this.agent.context.history),
-				isCompacting: this.isCompacting
-			});
+		proactiveCompactionStatus(context = {}) {
+			const usedTokens = this.estimateCurrentRequestTokens(context);
+			return {
+				...proactiveCompactionEligibility({
+					usedTokens,
+					budgetTokens: this.getCompactionBudgetTokens(),
+					hasShrinkableHistory: this.hasShrinkableHistory(this.agent.context.history),
+					isCompacting: this.isCompacting
+				}),
+				usedTokens
+			};
 		}
 		isProactiveCompactionEligible() {
 			return this.proactiveCompactionStatus().eligible;
 		}
-		requestProactiveCompaction() {
-			const status = this.proactiveCompactionStatus();
+		requestProactiveCompaction(context = {}) {
+			const status = this.proactiveCompactionStatus(context);
 			if (!status.eligible) return status;
 			this.proactiveCompactionRequested = true;
 			this.agent.telemetry.track("proactive_compaction_requested", {
-				used_tokens: this.estimateCurrentRequestTokens(),
+				used_tokens: status.usedTokens,
 				threshold_tokens: status.thresholdTokens
 			});
 			return status;
@@ -75533,9 +75724,19 @@ var init_full = __esmMin((() => {
 			const requestMessages = requestContext.messages ?? this.agent.context.messages;
 			const projectedMessages = requestContext.additionalMessages === void 0 ? requestMessages : [...requestMessages, ...requestContext.additionalMessages];
 			const requestTokens = this.estimateCurrentRequestTokens(requestContext);
-			const proactiveStatus = this.requestProactiveCompaction();
+			const proactiveStatus = this.requestProactiveCompaction(requestContext);
 			if (proactiveStatus.eligible) {
 				this.proactiveCompactionRequested = false;
+				this.agent.records.logRecord({
+					type: "policy.intervention",
+					policy: "proactive_compaction_trigger",
+					location: "FullCompaction.beforeStep",
+					size_before: this.estimateCurrentRequestTokens(),
+					size_after: proactiveStatus.usedTokens,
+					unit: "tokens",
+					threshold_tokens: proactiveStatus.thresholdTokens,
+					selected_tool_count: requestContext.tools?.length ?? 0
+				});
 				if (!this.compacting) this.beginAutoCompaction();
 				await this.block(signal);
 			}
@@ -76041,8 +76242,9 @@ var init_full = __esmMin((() => {
 }));
 //#endregion
 //#region ../../packages/agent-core/src/agent/compaction/micro.ts
-var selectMicroCompactionCutoff, MICRO_COMPACTION_RECENT_MESSAGES, MICRO_COMPACTION_TOOL_ARGUMENTS_ENABLED, MICRO_COMPACTION_TOOL_ARGUMENT_MIN_TOKENS, isPersistedToolResultReference, freshToolResultIds, projectHistoricalUnaddressedTelegramMessages, dedupeRepeatedUserMessages, projectRepeatedAssistantResponses, compactHistoricalSkillActivations, dedupeRecurringCronWakeups, dedupeRepeatedInjections, projectLoopEventForRecord, projectUsageModelForRecord, projectUsageForRecord, resolveCompletedStepUuid, resolveStepEventUuid, restoreUsageFromRecord, restoreUsageModelFromRecord, DEFAULT_CONFIG, MicroCompaction;
+var selectMicroCompactionCutoff, MICRO_COMPACTION_RECENT_MESSAGES, MICRO_COMPACTION_TOOL_ARGUMENTS_ENABLED, MICRO_COMPACTION_TOOL_ARGUMENT_MIN_TOKENS, isPersistedToolResultReference, freshToolResultIds, projectHistoricalUnaddressedTelegramMessages, dedupeRepeatedUserMessages, projectRepeatedAssistantResponses, compactHistoricalSkillActivations, dedupeRecurringCronWakeups, dedupeRepeatedInjections, projectLoopEventForRecord, projectUsageModelForRecord, projectUsageForRecord, resolveCompletedStepUuid, resolveStepEventUuid, restoreUsageFromRecord, restoreUsageModelFromRecord, isWireOnlyProgrammaticEvent, DEFAULT_CONFIG, MicroCompaction;
 var init_micro = __esmMin((() => {
+	({ isWireOnlyProgrammaticEvent } = createRequire(import.meta.url)("./bin/programmatic-context-isolation.cjs"));
 	({ selectMicroCompactionCutoff, MICRO_COMPACTION_RECENT_MESSAGES, MICRO_COMPACTION_TOOL_ARGUMENTS_ENABLED, MICRO_COMPACTION_TOOL_ARGUMENT_MIN_TOKENS } = createRequire(import.meta.url)("./bin/micro-compaction-policy.cjs"));
 	({ isPersistedToolResultReference, freshToolResultIds } = createRequire(import.meta.url)("./bin/tool-result-offload-policy.cjs"));
 	({ projectHistoricalUnaddressedTelegramMessages } = createRequire(import.meta.url)("./bin/telegram-context-projection-policy.cjs"));
@@ -76413,6 +76615,9 @@ function isValidCronTask(obj) {
 	if (o["paused"] !== void 0 && typeof o["paused"] !== "boolean") return false;
 	if (o["autoExpire"] !== void 0 && typeof o["autoExpire"] !== "boolean") return false;
 	if (o["scheduleFromAt"] !== void 0 && (typeof o["scheduleFromAt"] !== "number" || !Number.isFinite(o["scheduleFromAt"]))) return false;
+	if (o["allowedTools"] !== void 0 && (!Array.isArray(o["allowedTools"]) || !o["allowedTools"].every((name) => typeof name === "string"))) return false;
+	if (o["allowedTools"] !== void 0 && typeof o["toolScopeDigest"] !== "string") return false;
+	if (o["allowedTools"] === void 0 && o["toolScopeDigest"] !== void 0) return false;
 	if (o["owner"] === "session-loop" && (typeof o["loopInterval"] !== "string" || o["loopInterval"].length === 0 || o["recurring"] === false || o["autoExpire"] !== false)) return false;
 	return true;
 }
@@ -77190,7 +77395,7 @@ function hasUnfinishedTodoWork(agent) {
 	const todos = agent.tools.storeData()["todo"];
 	return Array.isArray(todos) && todos.some((todo) => todo?.status === "in_progress" || todo?.status === "pending");
 }
-var STALE_THRESHOLD_MS, CronManager;
+var STALE_THRESHOLD_MS, normalizeCronAllowedTools, cronToolScopeForTask, filterToolsForCronScope, inheritedCronToolScope, createCronRunReceipt, buildCronFileCandidate, publicCronRunList, createCronRunStore, createMemoryCronRunStore, readCronFinalMessage, CronManager;
 var init_manager$3 = __esmMin((() => {
 	init_clock();
 	init_cron_fire_xml();
@@ -77198,6 +77403,17 @@ var init_manager$3 = __esmMin((() => {
 	init_session_store$2();
 	init_scheduler();
 	init_telemetry_events();
+	({
+		normalizeCronAllowedTools,
+		cronToolScopeForTask,
+		filterToolsForCronScope,
+		inheritedCronToolScope,
+		createCronRunReceipt,
+		buildCronFileCandidate,
+		publicCronRunList
+	} = createRequire(import.meta.url)("./bin/scoped-cron-run-policy.cjs"));
+	({ createCronRunStore, createMemoryCronRunStore } = createRequire(import.meta.url)("./bin/cron-run-store.cjs"));
+	({ readCronFinalMessage } = createRequire(import.meta.url)("./bin/cron-run-output.cjs"));
 	STALE_THRESHOLD_MS = 10080 * 60 * 1e3;
 	CronManager = class {
 		/** In-memory task store. Empty at construction; populated by
@@ -77233,6 +77449,11 @@ var init_manager$3 = __esmMin((() => {
 		* later `blun resume` can reload via {@link loadFromDisk}.
 		*/
 		persistStore;
+		runStore;
+		bufferedRuns = [];
+		runByTurnId = /* @__PURE__ */ new Map();
+		runAccumulators = /* @__PURE__ */ new Map();
+		drainTimer = null;
 		/**
 		* Per-id serializer for persistence writes. Prevents a fast
 		* `add` → `remove` sequence on the same id from racing each other on
@@ -77246,6 +77467,7 @@ var init_manager$3 = __esmMin((() => {
 			this.store = new SessionCronStore();
 			this.clocks = opts.clocks ?? resolveClockSources(process.env["BLUN_CRON_CLOCK"]) ?? SYSTEM_CLOCKS;
 			this.persistStore = agent.homedir === void 0 ? void 0 : createCronPersistStore(agent.homedir);
+			this.runStore = agent.homedir === void 0 ? createMemoryCronRunStore() : createCronRunStore(agent.homedir, { now: () => this.clocks.wallNow() });
 			this.scheduler = createCronScheduler({
 				clocks: this.clocks,
 				source: () => this.store.list(),
@@ -77297,7 +77519,10 @@ var init_manager$3 = __esmMin((() => {
 		*/
 		removeTasks(ids) {
 			const removed = this.store.remove(ids);
-			for (const id of removed) this.persistEnqueue(id, () => this.persistStore.remove(id));
+			for (const id of removed) {
+				this.persistEnqueue(id, () => this.persistStore.remove(id));
+				this.runStore.markJobDeletedById(id);
+			}
 			return removed;
 		}
 		updateTask(id, patch) {
@@ -77337,6 +77562,11 @@ var init_manager$3 = __esmMin((() => {
 		* input, so a regenerated value would corrupt both.
 		*/
 		async loadFromDisk() {
+			const loadedRuns = this.runStore.load();
+			for (const runId of loadedRuns.lostRunIds ?? []) {
+				const receipt = this.runStore.get(runId);
+				if (receipt !== void 0) this.emitRunTerminal(receipt);
+			}
 			if (this.persistStore === void 0) return;
 			const tasks = await this.persistStore.list();
 			this.store.clear();
@@ -77404,6 +77634,8 @@ var init_manager$3 = __esmMin((() => {
 		* would be missing from the resume's `loadFromDisk()`.
 		*/
 		async stop() {
+			if (this.drainTimer !== null) clearTimeout(this.drainTimer);
+			this.drainTimer = null;
 			this.unbindSigusr1();
 			await this.scheduler.stop();
 			await this.flushPersist();
@@ -77469,24 +77701,49 @@ var init_manager$3 = __esmMin((() => {
 		*/
 		handleFire(task, ctx) {
 			const stale = this.isStale(task);
+			const toolScope = cronToolScopeForTask(task);
+			const runId = randomBytes(8).toString("hex");
 			const origin = {
 				kind: "cron_job",
 				jobId: task.id,
+				runId,
 				cron: task.cron,
 				recurring: task.recurring !== false,
 				coalescedCount: ctx.coalescedCount,
-				stale
+				stale,
+				...(toolScope.mode === "scoped" ? { toolScope } : {})
 			};
 			const content = [{
 				type: "text",
 				text: task.owner === "session-loop" ? renderSessionLoopWakeupXml(origin, task.prompt, task.loopInterval ?? "auto") : renderCronFireXml(origin, task.prompt)
 			}];
+			const receipt = createCronRunReceipt({
+				runId,
+				jobId: task.id,
+				cron: task.cron,
+				recurring: task.recurring !== false,
+				stale,
+				coalescedCount: ctx.coalescedCount,
+				toolScopeDigest: toolScope.digest,
+				firedAt: new Date(this.clocks.wallNow()).toISOString()
+			});
+			this.runStore.create(receipt);
+			this.bufferedRuns.push({ runId, content, origin });
+			this.runAccumulators.set(runId, {
+				toolCalls: /* @__PURE__ */ new Map(),
+				fileCandidates: /* @__PURE__ */ new Map(),
+				outputs: [],
+				finalStepId: null
+			});
+			this.agent.emitEvent({ type: "cron.fired", origin });
 			this.agent.emitEvent({
-				type: "cron.fired",
-				origin,
-				prompt: task.prompt
+				type: "cron.run.created",
+				runId,
+				jobId: task.id,
+				coalescedCount: ctx.coalescedCount,
+				toolScopeDigest: toolScope.digest
 			});
-			const turnId = this.agent.turn.steer(content, origin);
+			const turnId = this.launchBufferedRuns();
 			this.agent.telemetry.track(CRON_FIRED, {
 				recurring: task.recurring !== false,
 				coalesced_count: ctx.coalescedCount,
@@ -77498,6 +77755,137 @@ var init_manager$3 = __esmMin((() => {
 				this.emitDeleted(task.id);
 			}
 		}
+		launchBufferedRuns() {
+			if (this.bufferedRuns.length === 0) return null;
+			if (this.agent.turn.hasActiveTurn || this.agent.fullCompaction.isCompacting) {
+				this.scheduleBufferedRunDrain();
+				return null;
+			}
+			const next = this.bufferedRuns.shift();
+			const acceptance = this.agent.turn.promptWithAcceptance(next.content, next.origin);
+			if (acceptance.accepted !== true || acceptance.turnId === null) {
+				this.bufferedRuns.unshift(next);
+				this.scheduleBufferedRunDrain();
+				return null;
+			}
+			return acceptance.turnId;
+		}
+		scheduleBufferedRunDrain() {
+			if (this.drainTimer !== null || this.bufferedRuns.length === 0) return;
+			this.drainTimer = setTimeout(() => {
+				this.drainTimer = null;
+				this.launchBufferedRuns();
+			}, 250);
+			this.drainTimer.unref?.();
+		}
+		observeLoopEvent(turnId, event) {
+			const runId = this.runByTurnId.get(turnId);
+			if (runId === void 0) return;
+			const accumulator = this.runAccumulators.get(runId);
+			if (accumulator === void 0) return;
+			if (event.type === "step.begin" && typeof event.uuid === "string") accumulator.finalStepId = event.uuid;
+			if (event.type === "tool.call") {
+				accumulator.toolCalls.set(event.toolCallId, { name: event.name, isError: false });
+				const candidate = buildCronFileCandidate({
+					toolName: event.name,
+					toolCallId: event.toolCallId,
+					display: event.display,
+					workspaceRoot: this.agent.config.cwd,
+					additionalRoots: this.agent.getAdditionalDirs(),
+					pathExists: typeof event.display?.path === "string" && existsSync(event.display.path)
+				});
+				if (candidate !== null) accumulator.fileCandidates.set(event.toolCallId, candidate);
+			}
+			if (event.type === "tool.result") {
+				const call = accumulator.toolCalls.get(event.toolCallId);
+				if (call !== void 0) call.isError = event.result.isError === true;
+				const candidate = accumulator.fileCandidates.get(event.toolCallId);
+				if (candidate !== void 0 && event.result.isError !== true) accumulator.outputs.push(candidate);
+				accumulator.fileCandidates.delete(event.toolCallId);
+			}
+		}
+		observeAgentEvent(event) {
+			if (event.type === "turn.started") {
+				const runId = event.origin?.kind === "cron_job" && typeof event.origin.runId === "string" ? event.origin.runId : event.origin?.kind === "system_trigger" && typeof event.origin.cronRunId === "string" ? event.origin.cronRunId : void 0;
+				if (runId === void 0) return;
+				const receipt = this.runStore.get(runId);
+				if (receipt?.status !== "buffered" && receipt?.status !== "running") return;
+				this.runByTurnId.set(event.turnId, runId);
+				if (receipt.status === "buffered") {
+					const running = this.runStore.transition(runId, "running", {
+						turnId: event.turnId,
+						startedAt: new Date(this.clocks.wallNow()).toISOString()
+					});
+					this.agent.emitEvent({
+						type: "cron.run.started",
+						runId: running.runId,
+						jobId: running.jobId,
+						turnId: event.turnId
+					});
+				}
+				return;
+			}
+			if (event.type !== "turn.ended") return;
+			const runId = this.runByTurnId.get(event.turnId);
+			if (runId === void 0) return;
+			const accumulator = this.runAccumulators.get(runId);
+			if (accumulator !== void 0) accumulator.lastTurnEnd = event;
+			this.runByTurnId.delete(event.turnId);
+		}
+		observeRunWorkerEnded(runId, event) {
+			const current = this.runStore.get(runId);
+			if (current?.status !== "running" && current?.status !== "buffered") return;
+			const accumulator = this.runAccumulators.get(runId) ?? {
+				toolCalls: /* @__PURE__ */ new Map(),
+				outputs: [],
+				finalStepId: null
+			};
+			const status = event.reason === "cancelled" ? "cancelled" : event.reason === "failed" || event.reason === "filtered" ? "failed" : "completed";
+			const terminal = this.runStore.transition(runId, status, {
+				endedAt: new Date(this.clocks.wallNow()).toISOString(),
+				toolCalls: [...accumulator.toolCalls.values()],
+				outputs: accumulator.outputs,
+				finalStepId: accumulator.finalStepId,
+				error: status === "failed" ? {
+					category: event.reason === "filtered" ? "policy" : "executor",
+					code: event.error?.code ?? (event.reason === "filtered" ? "PROVIDER_FILTERED" : "TURN_FAILED")
+				} : void 0
+			});
+			this.emitRunTerminal(terminal);
+			this.runAccumulators.delete(runId);
+			this.scheduleBufferedRunDrain();
+		}
+		observeRunWorkerFailed(runId) {
+			this.observeRunWorkerEnded(runId, {
+				reason: "failed",
+				error: { code: "TURN_WORKER_FAILED" }
+			});
+		}
+		emitRunTerminal(receipt) {
+			const durationMs = receipt.startedAt === null || receipt.endedAt === null ? void 0 : Math.max(0, Date.parse(receipt.endedAt) - Date.parse(receipt.startedAt));
+			this.agent.emitEvent({
+				type: `cron.run.${receipt.status}`,
+				runId: receipt.runId,
+				jobId: receipt.jobId,
+				durationMs,
+				toolCalls: receipt.toolSummary.calls,
+				toolErrors: receipt.toolSummary.errors,
+				outputCount: receipt.outputs.length,
+				errorCategory: receipt.error?.category
+			});
+		}
+		listRuns(filters) {
+			return publicCronRunList(this.runStore.list(), filters);
+		}
+		readRunOutput(runId) {
+			const receipt = this.runStore.get(runId);
+			if (receipt === void 0) return null;
+			let finalMessage = null;
+			if (receipt.finalMessageRef !== null && this.agent.homedir !== void 0) try {
+				finalMessage = readCronFinalMessage(join$4(this.agent.homedir, "wire.jsonl"), receipt.finalMessageRef.stepId);
+			} catch {}
+			return { receipt, finalMessage };
+		}
 		/**
 		* Reserved hook for an explicit "you missed N fires while offline"
 		* banner. Today the scheduler's `coalescedCount` semantics already
@@ -77962,7 +78350,8 @@ var init_cron_create = __esmMin((() => {
 	CronCreateInputSchema = object({
 		cron: string().describe("5-field cron expression in local time: \"M H DoM Mon DoW\" (e.g. \"*/5 * * * *\" = every 5 minutes; \"30 14 28 2 *\" = Feb 28 at 2:30pm local — a pinned date like this repeats yearly unless you also pass recurring: false)."),
 		prompt: string().min(1).max(MAX_PROMPT_BYTES).describe("The prompt to enqueue at each fire time. Limited to 8 KiB (UTF-8)."),
-		recurring: boolean$1().optional().default(true).describe("true (default) = fire on every cron match until deleted or auto-expired after 7 days. false = fire once at the next match, then auto-delete. Use false for \"remind me at X\" one-shot requests with pinned minute/hour/dom/month.")
+		recurring: boolean$1().optional().default(true).describe("true (default) = fire on every cron match until deleted or auto-expired after 7 days. false = fire once at the next match, then auto-delete. Use false for \"remind me at X\" one-shot requests with pinned minute/hour/dom/month."),
+		allowed_tools: array(string()).max(64).optional().describe("Optional exact tool names allowed in each isolated run. Omit for legacy behavior; an empty array allows no tools. Wildcards and unknown tools are rejected.")
 	});
 	CronCreateTool = class {
 		manager;
@@ -78002,6 +78391,15 @@ var init_cron_create = __esmMin((() => {
 				output: `Prompt exceeds ${String(MAX_PROMPT_BYTES)} bytes (got ${String(byteLen)}).`
 			};
 			const recurring = args.recurring !== false;
+			let toolScope;
+			try {
+				toolScope = normalizeCronAllowedTools(args.allowed_tools, this.manager.agent.tools.loopTools);
+			} catch (error) {
+				return {
+					isError: true,
+					output: error instanceof Error ? error.message : String(error)
+				};
+			}
 			if (!recurring) {
 				const firstFire = computeNextCronRun(parsed, nowAtPrepare);
 				if (firstFire !== null && firstFire - nowAtPrepare > ONE_SHOT_MAX_FUTURE_MS) return {
@@ -78014,7 +78412,8 @@ var init_cron_create = __esmMin((() => {
 				approvalRule: literalRulePattern(this.name, JSON.stringify({
 					cron: normalizedCron,
 					prompt: args.prompt,
-					recurring
+					recurring,
+					...(args.allowed_tools === void 0 ? {} : { allowed_tools: toolScope.names })
 				})),
 				execute: async () => {
 					const nowMs = this.manager.clocks.wallNow();
@@ -78025,7 +78424,11 @@ var init_cron_create = __esmMin((() => {
 					const task = this.manager.addTask({
 						cron: normalizedCron,
 						prompt: args.prompt,
-						recurring
+						recurring,
+						...(toolScope.mode === "scoped" ? {
+							allowedTools: toolScope.names,
+							toolScopeDigest: toolScope.digest
+						} : {})
 					});
 					const ideal = computeNextCronRun(parsed, nowMs);
 					const nextFireAt = ideal === null ? null : recurring ? jitteredNextCronRunMs(task, parsed, ideal) : oneShotJitteredNextCronRunMs(task, ideal);
@@ -78992,6 +79395,14 @@ var init_context$2 = __esmMin((() => {
 				keptHeadUserMessageCount,
 				droppedCount: input.droppedCount
 			};
+			this.agent.records.logRecord({
+				type: "policy.intervention",
+				policy: "full_context_compaction",
+				location: "AgentContext.applyCompaction",
+				size_before: result.tokensBefore,
+				size_after: result.tokensAfter,
+				unit: "tokens"
+			});
 			this.agent.records.logRecord({
 				type: "context.apply_compaction",
 				...result
@@ -79052,6 +79463,7 @@ var init_context$2 = __esmMin((() => {
 		}
 		project(messages, options) {
 			const anomalies = [];
+			const underPressure = toolResultOffloadPressureForAgent(this.agent);
 			const userOffloaded = this.agent.userMessageOffload.compact(messages);
 			const historicalMediaProjected = projectHistoricalMediaParts(userOffloaded);
 			const historicalUserReferencesProjected = compactHistoricalPersistedUserMessageReferences(historicalMediaProjected);
@@ -79059,7 +79471,9 @@ var init_context$2 = __esmMin((() => {
 			const historicalTelegramProjected = projectHistoricalUnaddressedTelegramMessages(duplicateUserMessagesProjected);
 			const assistantOffloaded = this.agent.assistantMessageOffload.compact(historicalTelegramProjected);
 			const repeatedAssistantProjected = projectRepeatedAssistantResponses(assistantOffloaded);
-			const result = project(this.agent.microCompaction.compact(compactHistoricalSuccessfulToolResults(dedupeRepeatedSuccessfulToolResults(repeatedAssistantProjected, this.agent.toolResultBatchOffload.compact(dedupeRecurringCronWakeups(dedupeRepeatedInjections(compactHistoricalSkillActivations(compactBaselineSkillInjections(repeatedAssistantProjected)))))))), {
+			const batchProjected = this.agent.toolResultBatchOffload.compact(dedupeRecurringCronWakeups(dedupeRepeatedInjections(compactHistoricalSkillActivations(compactBaselineSkillInjections(repeatedAssistantProjected)))));
+			const toolResultsProjected = compactHistoricalSuccessfulToolResults(dedupeRepeatedSuccessfulToolResults(repeatedAssistantProjected, batchProjected), { underPressure });
+			const result = project(this.agent.microCompaction.compact(toolResultsProjected), {
 				...options,
 				onAnomaly: (anomaly) => {
 					anomalies.push(anomaly);
@@ -79191,6 +79605,7 @@ var init_context$2 = __esmMin((() => {
 				type: "context.append_loop_event",
 				event: projectLoopEventForRecord(event)
 			});
+			if (isWireOnlyProgrammaticEvent(event)) return;
 			switch (event.type) {
 				case "step.begin": {
 					const closed = this.closePendingToolResults();
@@ -233363,6 +233778,7 @@ var init_default_tool_approve = __esmMin((() => {
 		"Agent",
 		"AskUserQuestion",
 		"Skill",
+		"ProgrammaticTool",
 		"GetGoal",
 		"SetGoalBudget",
 		"UpdateGoal"
@@ -233752,9 +234168,9 @@ var init_plan_mode_guard_deny = __esmMin((() => {
 					message: planModeWriteDeniedMessage(planFilePath)
 				};
 			}
-			if (toolName === "TaskStop") return {
+			if (toolName === "TaskStop" || toolName === "TaskResume") return {
 				kind: "deny",
-				message: "TaskStop is not available in plan mode. Call ExitPlanMode to exit plan mode before stopping a background task."
+				message: `${toolName} is not available in plan mode. Call ExitPlanMode before changing background task execution.`
 			};
 			if (toolName === "CronCreate" || toolName === "CronDelete") return {
 				kind: "deny",
@@ -234120,6 +234536,16 @@ var init_permission = __esmMin((() => {
 			if (pattern === void 0) return;
 			this.localSessionApprovalRulePatterns.add(pattern);
 		}
+		recordApprovalEdited(context, editedArgs) {
+			const event = buildApprovalEditedEvent({
+				turnId: Number(context.turnId),
+				toolCallId: context.toolCall.id,
+				toolName: context.toolCall.name,
+				originalArgs: context.args,
+				editedArgs
+			});
+			this.agent.records.logRecord(event);
+		}
 		get sessionApprovalRulePatterns() {
 			return [...this.localSessionApprovalRulePatterns, ...this.parent?.sessionApprovalRulePatterns ?? []];
 		}
@@ -234139,6 +234565,8 @@ var init_permission = __esmMin((() => {
 			const { signal } = context;
 			const id = context.toolCall.id;
 			const name = context.toolCall.name;
+			const approvalEditCount = Number.isSafeInteger(context.approvalEditCount) ? context.approvalEditCount : 0;
+			const allowEdit = approvalEditCount === 0 && isEditableToolApprovalEligible(name);
 			const display = context.execution.display ?? {
 				kind: "generic",
 				summary: context.execution.description ?? `Approve ${name}`,
@@ -234176,7 +234604,10 @@ var init_permission = __esmMin((() => {
 						toolCallId: id,
 						toolName: name,
 						action,
-						display
+						display,
+						allowEdit,
+						approvalEditCount,
+						editableToolInput: allowEdit ? context.args : void 0
 					}, { signal });
 				} catch (error) {
 					this.agent.telemetry.track("permission_approval_result", {
@@ -234204,6 +234635,19 @@ var init_permission = __esmMin((() => {
 					return resolved === void 0 ? Promise.reject(error) : this.permissionPolicyResolutionToPrepare(resolved, context, policyName);
 				}
 			} else response = { decision: "approved" };
+			let editedDecision;
+			if (response.decision === "edited") try {
+				editedDecision = validateEditedApprovalDecision({
+					response,
+					toolName: name,
+					editCount: approvalEditCount
+				});
+			} catch (error) {
+				response = {
+					decision: "rejected",
+					feedback: `Edited approval was rejected before tool preparation: ${error instanceof Error ? error.message : String(error)}`
+				};
+			}
 			const sessionApprovalRule = response.decision === "approved" && response.scope === "session" ? context.execution.approvalRule : void 0;
 			if (requestedApproval) this.agent.hooks?.fireAndForgetTrigger?.("PermissionResult", {
 				matcherValue: name,
@@ -234218,13 +234662,14 @@ var init_permission = __esmMin((() => {
 					selectedLabel: response.selectedLabel
 				}
 			});
+			const approvalRecordResponse = response.decision === "edited" ? { decision: "edited" } : response;
 			this.recordApprovalResult({
 				turnId: Number(context.turnId),
 				toolCallId: id,
 				toolName: name,
 				action,
 				sessionApprovalRule,
-				result: response
+				result: approvalRecordResponse
 			});
 			this.agent.telemetry.track("permission_approval_result", {
 				policy_name: policyName ?? null,
@@ -234236,6 +234681,17 @@ var init_permission = __esmMin((() => {
 				session_cache_written: sessionApprovalRule !== void 0,
 				has_feedback: response.feedback !== void 0 && response.feedback.length > 0
 			});
+			if (response.decision === "edited" && editedDecision !== void 0) {
+				let recorded = false;
+				return { approvalEdit: {
+					args: editedDecision.editedToolInput,
+					record: (validatedArgs) => {
+						if (recorded) throw new Error("Edited approval Wire event was already recorded");
+						recorded = true;
+						this.recordApprovalEdited(context, validatedArgs);
+					}
+				} };
+			}
 			const resolved = result.resolveApproval?.(response);
 			if (resolved !== void 0) return this.permissionPolicyResolutionToPrepare(resolved, context, policyName);
 			if (response.decision === "approved") return;
@@ -244071,6 +244527,49 @@ async function runToolCallBatch(step, response) {
 	}
 	return { stopTurn };
 }
+function createNestedToolInvoker(step, parentToolCall) {
+	let nestedSequence = 0;
+	const invoke = async ({ name, args, callId, signal }) => {
+		if (invoke.stopTurn === true) throw new Error("No nested tool calls are allowed after a turn-stop result.");
+		if (name === PROGRAMMATIC_TOOL_NAME) throw new Error("Nested ProgrammaticTool calls are not allowed.");
+		const nestedSignal = signal ?? step.signal;
+		nestedSignal.throwIfAborted();
+		nestedSequence += 1;
+		const safeCallId = typeof callId === "string" && callId.length > 0 ? callId : `call_${nestedSequence}`;
+		const nestedToolCall = {
+			id: `${parentToolCall.id}:ptc:${safeCallId}`,
+			name,
+			arguments: JSON.stringify(args ?? {})
+		};
+		const nestedStep = {
+			...step,
+			signal: nestedSignal,
+			toolCalls: [nestedToolCall],
+			dispatchEvent: (event) => step.dispatchEvent(markProgrammaticNestedEvent(event))
+		};
+		const preflight = preflightToolCall(nestedStep, nestedToolCall);
+		const prepared = await prepareToolCall(nestedStep, preflight);
+		const started = await prepared.task.start();
+		const pendingResult = await started.result;
+		const finalized = await finalizePendingToolResult(nestedStep, pendingResult);
+		if (finalized.stopTurn === true) invoke.stopTurn = true;
+		await nestedStep.dispatchEvent({
+			type: "tool.result",
+			parentUuid: nestedToolCall.id,
+			toolCallId: nestedToolCall.id,
+			result: finalized.result
+		});
+		if (finalized.result.isError === true) throw new Error(nestedToolResultText(finalized.result));
+		return finalized.result;
+	};
+	invoke.stopTurn = false;
+	return invoke;
+}
+function nestedToolResultText(result) {
+	if (typeof result.output === "string") return result.output;
+	const text = result.output.filter((part) => part.type === "text").map((part) => part.text).join("");
+	return text.length > 0 ? text : "Nested tool call failed.";
+}
 /**
 * Provider-order validation pass. It does not run hooks, spawn tools, or write
 * events. Validator compilation may populate the local cache.
@@ -244118,7 +244617,7 @@ function validateExecutableToolArgs(tool, args) {
 	}
 	return validateToolArgs(validator, args);
 }
-async function prepareToolCall(step, call) {
+async function prepareToolCall(step, call, approvalEditCount = 0) {
 	const settleError = async (args, output, displayFields) => {
 		await dispatchToolCall(step, call, args, displayFields);
 		return { task: makeResolvedToolCallTask(makeErrorToolResult(call, args, output)) };
@@ -244153,10 +244652,31 @@ async function prepareToolCall(step, call) {
 	const settleAborted = () => settleError(effectiveArgs, abortedToolOutput(call.toolName, step.signal), displayFields);
 	if (step.signal.aborted) return settleAborted();
 	if (execution.isError === true) return settleSynthetic(effectiveArgs, execution, displayFields);
-	const authorization = await runAuthorizeToolExecutionHook(step, call, effectiveArgs, execution);
+	const authorization = await runAuthorizeToolExecutionHook(step, call, effectiveArgs, execution, approvalEditCount);
 	if (step.signal.aborted) return settleAborted();
 	if (authorization?.block === true) return settleError(effectiveArgs, authorization.reason ?? `Tool call "${call.toolName}" was blocked`, displayFields);
 	if (authorization?.syntheticResult !== void 0) return settleSynthetic(effectiveArgs, authorization.syntheticResult, displayFields);
+	if (authorization?.approvalEdit !== void 0) {
+		let plan;
+		try {
+			plan = buildEditedToolCallPlan({
+				step,
+				call,
+				editedArgs: authorization.approvalEdit.args,
+				editCount: approvalEditCount,
+				preflightToolCall
+			});
+		} catch (error) {
+			return settleError(authorization.approvalEdit.args, `Edited approval could not be re-prepared: ${errorMessage$12(error)}`, displayFields);
+		}
+		if (plan.kind === "rejected") return settleError(plan.call.args, plan.output ?? `Edited args for tool "${call.toolName}" were rejected`, displayFields);
+		try {
+			authorization.approvalEdit.record(plan.call.args);
+		} catch (error) {
+			return settleError(plan.call.args, `Edited approval evidence could not be recorded: ${errorMessage$12(error)}`, displayFields);
+		}
+		return prepareToolCall(plan.step, plan.call, plan.editCount);
+	}
 	const executionMetadata = authorization?.executionMetadata ?? decision.metadata;
 	await dispatchToolCall(step, call, effectiveArgs, displayFields);
 	return {
@@ -244230,7 +244750,7 @@ async function runPrepareToolExecutionHook(step, call) {
 		metadata: hookResult?.executionMetadata
 	};
 }
-async function runAuthorizeToolExecutionHook(step, call, args, execution) {
+async function runAuthorizeToolExecutionHook(step, call, args, execution, approvalEditCount = 0) {
 	const { hooks, signal, turnId, currentStep, llm } = step;
 	if (hooks?.authorizeToolExecution === void 0) return void 0;
 	try {
@@ -244240,6 +244760,7 @@ async function runAuthorizeToolExecutionHook(step, call, args, execution) {
 			tool: call.tool,
 			args,
 			execution,
+			approvalEditCount,
 			turnId,
 			stepNumber: currentStep,
 			signal,
@@ -244326,11 +244847,13 @@ async function finalizePendingToolResult(step, pendingResult) {
 async function executeTool(step, execution, toolCall, toolName, metadata) {
 	const { dispatchEvent, signal, turnId } = step;
 	signal.throwIfAborted();
+	const invokeTool = toolName === PROGRAMMATIC_TOOL_NAME ? createNestedToolInvoker(step, toolCall) : void 0;
 	return raceExecuteWithGraceTimeout(execution.execute({
 		turnId,
 		toolCallId: toolCall.id,
 		metadata,
 		signal,
+		invokeTool,
 		onUpdate: (update) => {
 			if (signal.aborted) return;
 			dispatchEvent({
@@ -244462,8 +244985,9 @@ async function dispatchToolCall(step, call, args, displayFields) {
 		display: displayFields?.display
 	});
 }
-var GRACE_TIMEOUT_MS, TOOL_OUTPUT_EMPTY, TOOL_OUTPUT_NON_TEXT, validators;
+var markProgrammaticNestedEvent, GRACE_TIMEOUT_MS, TOOL_OUTPUT_EMPTY, TOOL_OUTPUT_NON_TEXT, validators;
 var init_tool_call = __esmMin((() => {
+	({ markProgrammaticNestedEvent } = createRequire(import.meta.url)("./bin/programmatic-context-isolation.cjs"));
 	init_args_validator();
 	init_path_access();
 	init_abort();
@@ -245764,7 +246288,7 @@ var init_modelCatalog$2 = __esmMin((() => {
 function isVolatileEventType(type) {
 	return volatileEventTypeSet.has(type);
 }
-var MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, tokenUsageSchema, finishReasonSchema, usageStatusSchema, permissionModeSchema, skillSourceSchema, userPromptOriginSchema, skillActivationOriginSchema, pluginCommandOriginSchema, injectionOriginSchema, shellCommandOriginSchema, compactionSummaryOriginSchema, systemTriggerOriginSchema, agentCoreBackgroundTaskStatusSchema, backgroundTaskOriginSchema, cronJobOriginSchema, cronMissedOriginSchema, hookResultOriginSchema, retryOriginSchema, promptOriginSchema, goalStatusSchema, goalActorSchema, goalBudgetReportSchema, goalSnapshotSchema, goalChangeStatsSchema, goalChangeKindSchema, goalChangeSchema, blunErrorCodeSchema, blunErrorPayloadSchema, backgroundTaskInfoBaseSchema, processBackgroundTaskInfoSchema, agentBackgroundTaskInfoSchema, questionBackgroundTaskInfoSchema, backgroundTaskInfoSchema, compactionResultSchema, toolUpdateSchema, turnEndReasonSchema, agentStatusUpdatedEventSchema, sessionMetaUpdatedEventSchema, sessionCreatedEventSchema, workspaceCreatedEventSchema, workspaceUpdatedEventSchema, workspaceDeletedEventSchema, sessionStatusChangedEventSchema, modelCatalogChangedEventSchema, goalUpdatedEventSchema, skillActivatedEventSchema, pluginCommandActivatedEventSchema, errorEventSchema, warningEventSchema, turnStartedEventSchema, turnEndedEventSchema, turnStepStartedEventSchema, turnStepCompletedEventSchema, turnStepRetryingEventSchema, turnStepInterruptedEventSchema, assistantDeltaEventSchema, hookResultEventSchema, thinkingDeltaEventSchema, toolCallDeltaEventSchema, toolCallStartedEventSchema, toolProgressEventSchema, shellOutputEventSchema, shellStartedEventSchema, toolResultEventSchema, subagentSpawnedEventSchema, subagentStartedEventSchema, subagentSuspendedEventSchema, subagentCompletedEventSchema, subagentFailedEventSchema, compactionStartedEventSchema, compactionBlockedEventSchema, compactionCancelledEventSchema, compactionProgressEventSchema, compactionCompletedEventSchema, backgroundTaskStartedEventSchema, backgroundTaskTerminatedEventSchema, cronFiredEventSchema, attentionIntentSchema, attentionAuthorizedEventSchema, promptSubmittedEventSchema, toolListUpdatedReasonSchema, toolListUpdatedEventSchema, mcpServerStatusPayloadSchema, mcpServerStatusEventSchema, mediaDroppedEventSchema, agentEventSchema, eventSchema, VOLATILE_EVENT_TYPES, volatileEventTypeSet;
+var MCP_OAUTH_AUTHORIZATION_URL_TOOL_UPDATE, tokenUsageSchema, finishReasonSchema, usageStatusSchema, permissionModeSchema, skillSourceSchema, userPromptOriginSchema, skillActivationOriginSchema, pluginCommandOriginSchema, injectionOriginSchema, shellCommandOriginSchema, compactionSummaryOriginSchema, cronToolScopeSchema, systemTriggerOriginSchema, agentCoreBackgroundTaskStatusSchema, backgroundTaskOriginSchema, cronJobOriginSchema, cronMissedOriginSchema, hookResultOriginSchema, retryOriginSchema, promptOriginSchema, goalStatusSchema, goalActorSchema, goalBudgetReportSchema, goalSnapshotSchema, goalChangeStatsSchema, goalChangeKindSchema, goalChangeSchema, blunErrorCodeSchema, blunErrorPayloadSchema, backgroundTaskInfoBaseSchema, processBackgroundTaskInfoSchema, agentBackgroundTaskInfoSchema, questionBackgroundTaskInfoSchema, backgroundTaskInfoSchema, compactionResultSchema, toolUpdateSchema, turnEndReasonSchema, agentStatusUpdatedEventSchema, sessionMetaUpdatedEventSchema, sessionCreatedEventSchema, workspaceCreatedEventSchema, workspaceUpdatedEventSchema, workspaceDeletedEventSchema, sessionStatusChangedEventSchema, modelCatalogChangedEventSchema, goalUpdatedEventSchema, skillActivatedEventSchema, pluginCommandActivatedEventSchema, errorEventSchema, warningEventSchema, turnStartedEventSchema, turnEndedEventSchema, turnStepStartedEventSchema, turnStepCompletedEventSchema, turnStepRetryingEventSchema, turnStepInterruptedEventSchema, assistantDeltaEventSchema, hookResultEventSchema, thinkingDeltaEventSchema, toolCallDeltaEventSchema, toolCallStartedEventSchema, toolProgressEventSchema, shellOutputEventSchema, shellStartedEventSchema, toolResultEventSchema, subagentSpawnedEventSchema, subagentStartedEventSchema, subagentSuspendedEventSchema, subagentCompletedEventSchema, subagentFailedEventSchema, compactionStartedEventSchema, compactionBlockedEventSchema, compactionCancelledEventSchema, compactionProgressEventSchema, compactionCompletedEventSchema, backgroundTaskStartedEventSchema, backgroundTaskTerminatedEventSchema, cronFiredEventSchema, cronRunCreatedEventSchema, cronRunStartedEventSchema, cronRunTerminalEventSchema, attentionIntentSchema, attentionAuthorizedEventSchema, promptSubmittedEventSchema, toolListUpdatedReasonSchema, toolListUpdatedEventSchema, mcpServerStatusPayloadSchema, mcpServerStatusEventSchema, mediaDroppedEventSchema, agentEventSchema, eventSchema, VOLATILE_EVENT_TYPES, volatileEventTypeSet;
 var init_events$1 = __esmMin((() => {
 	init_zod$1();
 	init_display();
@@ -245838,9 +246362,16 @@ var init_events$1 = __esmMin((() => {
 		isError: boolean$1().optional()
 	});
 	compactionSummaryOriginSchema = object({ kind: literal("compaction_summary") });
+	cronToolScopeSchema = object({
+		mode: literal("scoped"),
+		names: array(string()).max(64),
+		digest: string()
+	});
 	systemTriggerOriginSchema = object({
 		kind: literal("system_trigger"),
-		name: string()
+		name: string(),
+		cronRunId: string().optional(),
+		toolScope: cronToolScopeSchema.optional()
 	});
 	agentCoreBackgroundTaskStatusSchema = _enum([
 		"running",
@@ -245859,10 +246390,12 @@ var init_events$1 = __esmMin((() => {
 	cronJobOriginSchema = object({
 		kind: literal("cron_job"),
 		jobId: string(),
+		runId: string().optional(),
 		cron: string(),
 		recurring: boolean$1(),
 		coalescedCount: number$1(),
-		stale: boolean$1()
+		stale: boolean$1(),
+		toolScope: cronToolScopeSchema.optional()
 	});
 	cronMissedOriginSchema = object({
 		kind: literal("cron_missed"),
@@ -245875,7 +246408,8 @@ var init_events$1 = __esmMin((() => {
 	});
 	retryOriginSchema = object({
 		kind: literal("retry"),
-		trigger: string().optional()
+		trigger: string().optional(),
+		toolScope: cronToolScopeSchema.optional()
 	});
 	promptOriginSchema = discriminatedUnion("kind", [
 		userPromptOriginSchema,
@@ -246395,8 +246929,30 @@ var init_events$1 = __esmMin((() => {
 	});
 	cronFiredEventSchema = object({
 		type: literal("cron.fired"),
-		origin: cronJobOriginSchema,
-		prompt: string()
+		origin: cronJobOriginSchema
+	});
+	cronRunCreatedEventSchema = object({
+		type: literal("cron.run.created"),
+		runId: string(),
+		jobId: string(),
+		coalescedCount: number$1(),
+		toolScopeDigest: string().nullable()
+	});
+	cronRunStartedEventSchema = object({
+		type: literal("cron.run.started"),
+		runId: string(),
+		jobId: string(),
+		turnId: number$1()
+	});
+	cronRunTerminalEventSchema = object({
+		type: _enum(["cron.run.completed", "cron.run.failed", "cron.run.cancelled", "cron.run.lost"]),
+		runId: string(),
+		jobId: string(),
+		durationMs: number$1().optional(),
+		toolCalls: number$1(),
+		toolErrors: number$1(),
+		outputCount: number$1(),
+		errorCategory: string().optional()
 	});
 	attentionIntentSchema = object({
 		accepted: literal(true),
@@ -246510,6 +247066,9 @@ var init_events$1 = __esmMin((() => {
 		backgroundTaskStartedEventSchema,
 		backgroundTaskTerminatedEventSchema,
 		cronFiredEventSchema,
+		cronRunCreatedEventSchema,
+		cronRunStartedEventSchema,
+		cronRunTerminalEventSchema,
 		attentionAuthorizedEventSchema,
 		promptSubmittedEventSchema
 	]);
@@ -247055,7 +247614,8 @@ var init_approval$2 = __esmMin((() => {
 	approvalDecisionSchema = _enum([
 		"approved",
 		"rejected",
-		"cancelled"
+		"cancelled",
+		"edited"
 	]);
 	approvalScopeSchema = _enum(["session"]);
 	approvalRequestSchema = object({
@@ -247066,6 +247626,7 @@ var init_approval$2 = __esmMin((() => {
 		tool_name: string().min(1),
 		action: string(),
 		tool_input_display: unknown(),
+		allow_edit: boolean$1().optional(),
 		created_at: isoDateTimeSchema,
 		expires_at: isoDateTimeSchema
 	});
@@ -247073,7 +247634,8 @@ var init_approval$2 = __esmMin((() => {
 		decision: approvalDecisionSchema,
 		scope: approvalScopeSchema.optional(),
 		feedback: string().optional(),
-		selected_label: string().optional()
+		selected_label: string().optional(),
+		edited_tool_input: unknown().optional()
 	});
 }));
 //#endregion
@@ -251417,6 +251979,7 @@ var init_task_output = __esmMin((() => {
 	init_zod$1();
 	init_background();
 	init_input_schema();
+	init_args_validator();
 	init_rule_match();
 	init_format();
 	init_task_output$1();
@@ -251528,6 +252091,89 @@ var init_task_update = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/background/task-resume.ts
+var DurableTaskResumeRuntime$1, TaskResumeInputSchema, TaskResumeTool;
+var init_task_resume = __esmMin((() => {
+	init_zod$1();
+	init_input_schema();
+	init_rule_match();
+	init_agent_task();
+	({ DurableTaskResumeRuntime: DurableTaskResumeRuntime$1 } = createRequire(import.meta.url)("./bin/durable-task-resume-runtime.cjs"));
+	TaskResumeInputSchema = object({
+		task_id: string().trim().min(1).describe("The lost agent task ID, or completed TaskResume successor, to continue."),
+		prompt: string().trim().min(1).max(32768).describe("New instructions for the preserved agent context."),
+		description: string().trim().min(1).max(1024).describe("Short description for the replacement background task."),
+		timeout_minutes: number$1().int().min(0).max(10080).optional().describe("Wall-clock continuation interval for the replacement run. Defaults to 240 minutes; 0 disables it for this run.")
+	});
+	TaskResumeTool = class {
+		manager;
+		subagentHost;
+		runtime;
+		name = "TaskResume";
+		description = "Explicitly continue a recoverable background agent task after a process loss. This resumes the same agent and preserved context, but creates a new background task ID linked to the terminal source task. Only lost agent tasks and completed TaskResume successors are accepted. It never resumes automatically at startup.";
+		parameters = toInputJsonSchema(TaskResumeInputSchema);
+		constructor(manager, subagentHost) {
+			this.manager = manager;
+			this.subagentHost = subagentHost;
+			this.runtime = new DurableTaskResumeRuntime$1({
+				getTask: (taskId) => manager.getTask(taskId),
+				getIntent: (taskId) => manager.resumeStore?.getBySourceTaskId(taskId),
+				writeIntent: (intent) => manager.resumeStore.write(intent),
+				markIntentStarted: (taskId, startedAt) => manager.resumeStore.markStarted(taskId, startedAt),
+				reserveTaskId: (prefix) => manager.reserveTaskId(prefix),
+				resumeAgent: (agentId, options) => subagentHost.resume(agentId, options),
+				createTask: (handle, description, metadata) => new AgentBackgroundTask(handle, description, subagentHost, metadata.controller ?? new AbortController(), {
+					timeoutMs: resolveSubagentTimeoutMs({ perRunMinutes: metadata.timeoutMinutes }),
+					runInBackground: true,
+					parentToolCallId: metadata.parentToolCallId,
+					responseFormat: void 0,
+					resumed: true,
+					replacesTaskId: metadata.replacesTaskId,
+					resumeRootTaskId: metadata.resumeRootTaskId
+				}),
+				registerTask: (task, options) => manager.registerTask(task, options),
+				awaitTaskPersisted: (taskId) => manager.awaitTaskPersisted(taskId),
+				emitEvent: (event) => manager.agent.emitEvent(event),
+				now: () => Date.now()
+			});
+		}
+		resolveExecution(args) {
+			return {
+				description: `Resuming agent task ${args.task_id}`,
+				approvalRule: this.name,
+				matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.task_id),
+				execute: (ctx) => this.execute(args, ctx)
+			};
+		}
+		async execute(args, { toolCallId, signal, turnId }) {
+			const controller = new AbortController();
+			try {
+				signal.throwIfAborted();
+				const result = await this.runtime.resume({
+					taskId: args.task_id,
+					prompt: args.prompt,
+					description: args.description,
+					timeoutMinutes: args.timeout_minutes,
+					parentToolCallId: toolCallId,
+					toolScope: this.subagentHost.toolScopeForTurn(Number(turnId)),
+					controller,
+					signal
+				});
+				return {
+					output: `task_id: ${result.taskId}\nstatus: ${result.status}\nagent_id: ${result.agentId}\nreplaces_task_id: ${result.replacesTaskId}\nresume_root_task_id: ${result.resumeRootTaskId}\nresumed: true`,
+					isError: false
+				};
+			} catch (error) {
+				controller.abort();
+				return {
+					output: error instanceof Error ? error.message : String(error),
+					isError: true
+				};
+			}
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/tools/background/task-stop.md?raw
 var task_stop_default;
 var init_task_stop$1 = __esmMin((() => {
@@ -251715,6 +252361,67 @@ var init_cron_list = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../packages/agent-core/src/tools/cron/cron-runs.ts
+var CronRunListInputSchema, CronRunOutputInputSchema, CronRunListTool, CronRunOutputTool;
+var init_cron_runs = __esmMin((() => {
+	init_zod$1();
+	init_input_schema();
+	CronRunListInputSchema = object({
+		job_id: string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u).optional().describe("Optional cron job id filter."),
+		status: string().regex(/^(buffered|running|completed|failed|cancelled|lost)$/u).optional().describe("Optional run status filter."),
+		limit: number$1().int().min(1).max(100).optional().default(20).describe("Maximum number of newest run receipts.")
+	}).strict();
+	CronRunOutputInputSchema = object({
+		run_id: string().regex(/^[0-9a-f]{16}$/u).describe("The 16-hex run id returned by CronRunList.")
+	}).strict();
+	CronRunListTool = class {
+		manager;
+		name = "CronRunList";
+		description = "List bounded private receipts for cron runs in this session. Receipts contain lifecycle, tool counts, and output references, never prompts, thoughts, raw tool arguments, results, headers, or approval feedback.";
+		parameters = toInputJsonSchema(CronRunListInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			return {
+				description: "Listing private cron run receipts",
+				approvalRule: this.name,
+				execute: async () => {
+					const runs = this.manager.listRuns({
+						jobId: args.job_id,
+						status: args.status,
+						limit: args.limit
+					});
+					return { output: JSON.stringify({ runs }, null, 2), isError: false };
+				}
+			};
+		}
+	};
+	CronRunOutputTool = class {
+		manager;
+		name = "CronRunOutput";
+		description = "Read one private cron run receipt and its bounded final assistant message. Raw prompts, thoughts, tool arguments, tool results, headers, approvals, and Bash-inferred files are never returned.";
+		parameters = toInputJsonSchema(CronRunOutputInputSchema);
+		constructor(manager) {
+			this.manager = manager;
+		}
+		resolveExecution(args) {
+			return {
+				description: `Reading private cron run ${args.run_id}`,
+				approvalRule: this.name,
+				execute: async () => {
+					const run = this.manager.readRunOutput(args.run_id);
+					if (run === null) return {
+						output: `No cron run with id ${args.run_id} exists in this session.`,
+						isError: true
+					};
+					return { output: JSON.stringify(run, null, 2), isError: false };
+				}
+			};
+		}
+	};
+}));
+//#endregion
 //#region ../../packages/agent-core/src/agent/permission/policies/deny-all.ts
 var DenyAllPermissionPolicy;
 var init_deny_all = __esmMin((() => {
@@ -252126,6 +252833,7 @@ var init_subagent_batch = __esmMin((() => {
 				description: task.description,
 				swarmIndex: task.swarmIndex,
 				runInBackground: task.runInBackground,
+				responseFormat: task.responseFormat,
 				compactBeforeRetry: attempt.state.retryCount > 0,
 				signal: attempt.controller.signal,
 				onReady: () => {
@@ -252150,11 +252858,13 @@ var init_subagent_batch = __esmMin((() => {
 				return this.failedAttemptOutcome(attempt, error);
 			}
 			attempt.state.agentId = handle.agentId;
+			attempt.state.profileName = handle.profileName;
 			try {
 				const completion = await handle.completion;
 				return {
 					task,
 					agentId: handle.agentId,
+					profileName: handle.profileName,
 					status: "completed",
 					result: completion.result,
 					usage: completion.usage
@@ -252178,6 +252888,7 @@ var init_subagent_batch = __esmMin((() => {
 			return {
 				task: attempt.state.task,
 				agentId: attempt.state.agentId,
+				profileName: attempt.state.profileName,
 				status,
 				state: attempt.state.agentId === void 0 ? "not_started" : "started",
 				error: this.attemptErrorMessage(attempt, error, status)
@@ -252441,7 +253152,7 @@ async function runChildTurnToCompletion(child, signal) {
 	}
 	return completion.stopReason;
 }
-async function completeChildTurnWithMaxTokensHandoff(child, signal) {
+async function completeChildTurnWithMaxTokensHandoff(child, signal, promptOrigin = SUBAGENT_PROMPT_ORIGIN) {
 	let stopReason = await runChildTurnToCompletion(child, signal);
 	let handoffAttempts = 0;
 	while (shouldRequestSubagentHandoff(stopReason, handoffAttempts)) {
@@ -252450,7 +253161,7 @@ async function completeChildTurnWithMaxTokensHandoff(child, signal) {
 		if (child.turn.prompt([{
 			type: "text",
 			text: SUBAGENT_MAX_TOKENS_HANDOFF_PROMPT
-		}], SUBAGENT_PROMPT_ORIGIN) === null) throw new Error("Subagent could not start its max_tokens recovery handoff.");
+		}], promptOrigin) === null) throw new Error("Subagent could not start its max_tokens recovery handoff.");
 		stopReason = await runChildTurnToCompletion(child, signal);
 	}
 	if (stopReason === "max_tokens") throw new Error(buildSubagentMaxTokensFailure(lastAssistantText(child)));
@@ -252467,12 +253178,29 @@ function lastAssistantText(agent) {
 	}
 	return "";
 }
+async function completeStructuredSubagentResult(child, childId, profileName, responseFormat, signal, promptOrigin = SUBAGENT_PROMPT_ORIGIN) {
+	let validation = validateStructuredSubagentOutput(lastAssistantText(child), responseFormat);
+	if (validation.validatorException === true) throw new Error(validation.error);
+	if (!validation.ok) {
+		signal.throwIfAborted();
+		if (child.turn.prompt([{
+			type: "text",
+			text: buildStructuredResponseRepairPrompt(responseFormat, validation.error)
+		}], promptOrigin) === null) throw new Error("Subagent could not start its structured-output repair turn.");
+		await completeChildTurnWithMaxTokensHandoff(child, signal, promptOrigin);
+		signal.throwIfAborted();
+		validation = validateStructuredSubagentOutput(lastAssistantText(child), responseFormat);
+		if (validation.validatorException === true) throw new Error(validation.error);
+		if (!validation.ok) throw new Error(`${STRUCTURED_SUBAGENT_OUTPUT_ERROR}: ${validation.error}. Resume with Agent(resume="${childId}", prompt="return the corrected JSON object", response_format=...) using the same response format.`);
+	}
+	return validation.value;
+}
 function shouldSuppressQueuedAttemptFailureEvent(options, error) {
 	if (options.suppressRateLimitFailureEvent !== true) return false;
 	if (isProviderRateLimitError(error)) return true;
 	return isAbortError$4(error) || options.signal.aborted;
 }
-var DEFAULT_SUBAGENT_TIMEOUT_MS, resolveSubagentTimeoutMs, runAgentWithTimeoutContinuation, buildSubagentUsageDelta, inheritSubagentAllowedTools, inheritSubagentLifecycleTools, SUBAGENT_MAX_TOKENS_ERROR, SUBAGENT_MAX_TOKENS_HANDOFF_PROMPT, buildSubagentMaxTokensFailure, isSubagentMaxTokensTurnError, shouldRequestSubagentHandoff, SUMMARY_MIN_LENGTH, SUMMARY_CONTINUATION_ATTEMPTS, HOOK_TEXT_PREVIEW_LENGTH, TOOL_CALL_DISABLED_MESSAGE, SUBAGENT_PROMPT_ORIGIN, SIDE_QUESTION_SYSTEM_REMINDER, SessionSubagentHost;
+var DEFAULT_SUBAGENT_TIMEOUT_MS, resolveSubagentTimeoutMs, runAgentWithTimeoutContinuation, buildSubagentUsageDelta, inheritSubagentAllowedTools, inheritSubagentLifecycleTools, prepareSubagentSkillPolicy, profileWithSubagentSkillTools, restoreSubagentSkillPolicy, STRUCTURED_SUBAGENT_OUTPUT_ERROR, prepareStructuredResponseFormat, validateStructuredSubagentOutput, buildStructuredResponseFormatReminder, buildStructuredResponseRepairPrompt, buildStructuredSubagentEnvelope, SUBAGENT_MAX_TOKENS_ERROR, SUBAGENT_MAX_TOKENS_HANDOFF_PROMPT, buildSubagentMaxTokensFailure, isSubagentMaxTokensTurnError, shouldRequestSubagentHandoff, SUBAGENT_FORK_REMINDER, projectSubagentForkContext, resolveSubagentContextMode, SUMMARY_MIN_LENGTH, SUMMARY_CONTINUATION_ATTEMPTS, HOOK_TEXT_PREVIEW_LENGTH, TOOL_CALL_DISABLED_MESSAGE, SUBAGENT_PROMPT_ORIGIN, SIDE_QUESTION_SYSTEM_REMINDER, SessionSubagentHost;
 var init_subagent_host = __esmMin((() => {
 	init_src$4();
 	init_errors$8();
@@ -252487,6 +253215,16 @@ var init_subagent_host = __esmMin((() => {
 	({ DEFAULT_SUBAGENT_TIMEOUT_MS, resolveSubagentTimeoutMs, runAgentWithTimeoutContinuation } = createRequire(import.meta.url)("./bin/subagent-timeout-policy.cjs"));
 	({ buildSubagentUsageDelta } = createRequire(import.meta.url)("./bin/subagent-usage-rollup-policy.cjs"));
 	({ inheritSubagentAllowedTools, inheritSubagentLifecycleTools } = createRequire(import.meta.url)("./bin/subagent-tool-policy.cjs"));
+	({ prepareSubagentSkillPolicy, profileWithSubagentSkillTools, restoreSubagentSkillPolicy } = createRequire(import.meta.url)("./bin/subagent-skill-policy.cjs"));
+	({ SUBAGENT_FORK_REMINDER, projectSubagentForkContext, resolveSubagentContextMode } = createRequire(import.meta.url)("./bin/subagent-context-fork-policy.cjs"));
+	({
+		STRUCTURED_SUBAGENT_OUTPUT_ERROR,
+		prepareStructuredResponseFormat,
+		validateStructuredSubagentOutput,
+		buildStructuredResponseFormatReminder,
+		buildStructuredResponseRepairPrompt,
+		buildStructuredSubagentEnvelope
+	} = createRequire(import.meta.url)("./bin/structured-subagent-output.cjs"));
 	({
 		SUBAGENT_MAX_TOKENS_ERROR,
 		SUBAGENT_MAX_TOKENS_HANDOFF_PROMPT,
@@ -252502,6 +253240,12 @@ var init_subagent_host = __esmMin((() => {
 		kind: "system_trigger",
 		name: "subagent"
 	};
+	function subagentPromptOrigin(toolScope) {
+		return toolScope === void 0 ? SUBAGENT_PROMPT_ORIGIN : {
+			...SUBAGENT_PROMPT_ORIGIN,
+			toolScope
+		};
+	}
 	SIDE_QUESTION_SYSTEM_REMINDER = `
 This is a side-channel conversation with the user. You should answer user questions directly based on what you already know.
 
@@ -252540,21 +253284,37 @@ IMPORTANT:
 			}
 			return this.session.getReadyAgent(currentId);
 		}
+		toolScopeForTurn(turnId) {
+			return inheritedCronToolScope(this.session.getReadyAgent(this.ownerAgentId)?.turn.toolScopeForTurn(turnId));
+		}
+		isRootAgent() {
+			return this.session.metadata.agents[this.ownerAgentId]?.parentAgentId == null;
+		}
 		async spawn(options) {
 			options.signal.throwIfAborted();
 			const parent = await this.session.ensureAgentResumed(this.ownerAgentId);
+			const contextMode = resolveSubagentContextMode({
+				requested: options.contextMode,
+				isRoot: this.isRootAgent()
+			});
 			const profile = this.resolveProfile(parent, options.profileName);
+			const skillPolicy = prepareSubagentSkillPolicy(profile.subagentSkills, this.session.skills);
+			const effectiveProfile = profileWithSubagentSkillTools(profile, skillPolicy);
 			const { id, agent } = await this.session.createAgent({
 				type: "sub",
-				generate: parent.rawGenerate
+				generate: parent.rawGenerate,
+				skillRegistry: skillPolicy.registry
 			}, {
 				parentAgentId: this.ownerAgentId,
-				swarmItem: options.swarmItem
+				swarmItem: options.swarmItem,
+				profileName: profile.name,
+				skillPolicy: skillPolicy.metadata
 			});
 			const completion = this.runWithTrackedChildUsage(parent, agent, id, options, async (runOptions) => {
 				this.emitSubagentSpawned(parent, id, profile.name, runOptions);
 				try {
-					await this.configureChild(parent, agent, profile);
+					await this.configureChild(parent, agent, effectiveProfile);
+					if (contextMode === "fork") this.seedForkedContext(parent, agent);
 					return await this.runPromptTurn(parent, id, agent, profile.name, runOptions);
 				} catch (error) {
 					this.emitSubagentFailed(parent, id, runOptions, error);
@@ -252628,7 +253388,7 @@ IMPORTANT:
 							await child.fullCompaction.block(runOptions.signal);
 						}
 						this.emitSubagentStarted(parent, agentId);
-						if (child.turn.retry("agent-host") === null) throw new Error(`Agent instance "${agentId}" could not start a retry turn`);
+						if (child.turn.retry("agent-host", runOptions.toolScope) === null) throw new Error(`Agent instance "${agentId}" could not start a retry turn`);
 						this.observeFirstRequest(child, runOptions);
 						return await this.waitForChildCompletion(parent, agentId, child, profileName, runOptions);
 					} catch (error) {
@@ -252751,27 +253511,49 @@ IMPORTANT:
 				const gitContext = await collectGitContext(child.kaos, child.config.cwd);
 				if (gitContext) childPrompt = `${gitContext}\n\n${childPrompt}`;
 			}
+			if (options.systemReminder !== void 0) child.context.appendSystemReminder(options.systemReminder, {
+				kind: "system_trigger",
+				name: "durable_task_resume"
+			});
+			if (options.responseFormat !== void 0) child.context.appendSystemReminder(buildStructuredResponseFormatReminder(options.responseFormat), {
+				kind: "system_trigger",
+				name: "subagent_response_format"
+			});
 			this.emitSubagentStarted(parent, childId);
+			const childOrigin = subagentPromptOrigin(options.toolScope);
 			if (child.turn.prompt([{
 				type: "text",
 				text: childPrompt
-			}], SUBAGENT_PROMPT_ORIGIN) === null) throw new Error(`Agent instance "${childId}" could not start a turn`);
+			}], childOrigin) === null) throw new Error(`Agent instance "${childId}" could not start a turn`);
 			this.observeFirstRequest(child, options);
 			return this.waitForChildCompletion(parent, childId, child, profileName, options);
 		}
 		async waitForChildCompletion(parent, childId, child, profileName, options) {
-			await completeChildTurnWithMaxTokensHandoff(child, options.signal);
-			let result = lastAssistantText(child);
-			let remainingContinuations = SUMMARY_CONTINUATION_ATTEMPTS;
-			while (remainingContinuations > 0 && result.length < SUMMARY_MIN_LENGTH) {
-				remainingContinuations -= 1;
-				options.signal.throwIfAborted();
-				child.turn.prompt([{
-					type: "text",
-					text: summary_continuation_default
-				}], SUBAGENT_PROMPT_ORIGIN);
-				await completeChildTurnWithMaxTokensHandoff(child, options.signal);
+			const childOrigin = subagentPromptOrigin(options.toolScope);
+			await completeChildTurnWithMaxTokensHandoff(child, options.signal, childOrigin);
+			let result;
+			if (options.responseFormat !== void 0) {
+				const structuredResult = await completeStructuredSubagentResult(child, childId, profileName, options.responseFormat, options.signal, childOrigin);
+				result = buildStructuredSubagentEnvelope({
+					agentId: childId,
+					profileName,
+					responseFormat: options.responseFormat,
+					result: structuredResult,
+					usage: child.usage.data().total
+				});
+			} else {
 				result = lastAssistantText(child);
+				let remainingContinuations = SUMMARY_CONTINUATION_ATTEMPTS;
+				while (remainingContinuations > 0 && result.length < SUMMARY_MIN_LENGTH) {
+					remainingContinuations -= 1;
+					options.signal.throwIfAborted();
+					child.turn.prompt([{
+						type: "text",
+						text: summary_continuation_default
+					}], childOrigin);
+					await completeChildTurnWithMaxTokensHandoff(child, options.signal, childOrigin);
+					result = lastAssistantText(child);
+				}
 			}
 			const usage = child.usage.data().total;
 			parent.emitEvent({
@@ -252796,10 +253578,22 @@ IMPORTANT:
 			});
 			const context = await prepareSystemPromptContext(this.session.systemContextKaos(child.kaos.getcwd()), this.session.options.blunHomeDir, { additionalDirs: child.getAdditionalDirs() });
 			child.useProfile(profile, context, this.session.options.blunHomeDir);
-			child.tools.inheritUserTools(parent.tools);
+			child.tools.inheritUserTools(parent.tools, /* @__PURE__ */ new Set(["Skill"]));
 			inheritSubagentLifecycleTools(parent.tools, child.tools);
 			inheritSubagentAllowedTools(parent.tools, child.tools);
 		}
+		seedForkedContext(parent, child) {
+			const projection = projectSubagentForkContext(parent.context.history);
+			child.context.useProjectedHistoryFrom({
+				history: projection.messages,
+				project: (history) => history
+			});
+			child.context.appendSystemReminder(SUBAGENT_FORK_REMINDER, {
+				kind: "system_trigger",
+				name: "subagent_context_fork"
+			});
+			return projection;
+		}
 		async triggerSubagentStart(parent, profileName, prompt, signal) {
 			await parent.hooks?.trigger("SubagentStart", {
 				matcherValue: profileName,
@@ -252831,10 +253625,11 @@ IMPORTANT:
 				subagentId: childId,
 				subagentName: profileName,
 				parentToolCallId: options.parentToolCallId,
-				parentToolCallUuid: options.parentToolCallUuid,
-				parentAgentId: this.ownerAgentId,
-				description: options.description,
-				swarmIndex: options.swarmIndex,
+					parentToolCallUuid: options.parentToolCallUuid,
+					parentAgentId: this.ownerAgentId,
+					description: options.description,
+					contextMode: options.contextMode === "fork" ? "fork" : "isolated",
+					swarmIndex: options.swarmIndex,
 				runInBackground: options.runInBackground
 			});
 			parent.telemetry.track("subagent_created", {
@@ -252868,7 +253663,7 @@ var init_agent_background_disabled = __esmMin((() => {
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/agent-background-enabled.md?raw
 var agent_background_enabled_default;
 var init_agent_background_enabled = __esmMin((() => {
-	agent_background_enabled_default = "Subagents run detached whenever task management is available, so the parent remains responsive while delegated work continues. Completion arrives automatically in a later turn. Do not poll, sleep, or block on TaskOutput. Continue with other work or respond to the user. Use TaskUpdate to steer the running subagent and TaskStop only when it must be cancelled. Never fabricate or predict its result.";
+	agent_background_enabled_default = "Subagents run detached whenever task management is available, so the parent remains responsive while delegated work continues. A call with `response_format` is the deliberate exception: it runs in the foreground so BLUN can validate and, at most once, repair the final JSON before returning it. Detached completion arrives automatically in a later turn. Do not poll, sleep, or block on TaskOutput. Continue with other work or respond to the user. Use TaskUpdate to steer a running detached subagent and TaskStop only when it must be cancelled. Never fabricate or predict its result.";
 }));
 //#endregion
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/agent.md?raw
@@ -252910,7 +253705,7 @@ function formatForegroundAgentFailure(handle, message, timedOut) {
 		"",
 		`subagent error: ${message}`
 	];
-	if (timedOut || message.includes(SUBAGENT_MAX_TOKENS_ERROR)) lines.push(`resume_hint: Continue with Agent(resume="${handle.agentId}", prompt="continue"). Use agent_id only; do not set subagent_type. The subagent retains its prior context; redo any unfinished tool call if its result was lost.`);
+	if (timedOut || message.includes(SUBAGENT_MAX_TOKENS_ERROR) || message.includes(STRUCTURED_SUBAGENT_OUTPUT_ERROR)) lines.push(`resume_hint: Continue with Agent(resume="${handle.agentId}", prompt="continue"). Use agent_id only; do not set subagent_type. The subagent retains its prior context; redo any unfinished tool call if its result was lost.`);
 	return lines.join("\n");
 }
 function launchErrorMessage(error, signal) {
@@ -252927,7 +253722,7 @@ function buildSubagentDescriptions(subagents) {
 		return `${header}\n  Tools: ${subagent.tools.join(", ")}`;
 	}).join("\n");
 }
-var AgentToolInputSchema, BACKGROUND_AGENT_UNAVAILABLE, AgentTool, USER_INTERRUPTED_SUBAGENT_MESSAGE, resolveSubagentRunMode;
+var AgentToolInputSchema, BACKGROUND_AGENT_UNAVAILABLE, SUBAGENT_CONTEXT_FORK_TOOL_DESCRIPTION, AgentTool, USER_INTERRUPTED_SUBAGENT_MESSAGE, resolveSubagentRunMode;
 var init_agent$1 = __esmMin((() => {
 	init_zod$1();
 	init_tool_access();
@@ -252941,6 +253736,7 @@ var init_agent$1 = __esmMin((() => {
 	init_agent_background_enabled();
 	init_agent$2();
 	({ resolveSubagentRunMode } = createRequire(import.meta.url)("./bin/subagent-parent-responsiveness.cjs"));
+	SUBAGENT_CONTEXT_FORK_TOOL_DESCRIPTION = "The default context_mode=isolated starts with zero conversation context. For a new root-level subagent whose work genuinely depends on this exact conversation, context_mode=fork passes only a bounded, redacted projection of direct local user text and completed text-only assistant replies. It never passes private channel messages, system injections, attachments, tool calls, arguments, or results. The delegated prompt remains required and authoritative. Fork is unavailable when resuming and unavailable to nested subagents.";
 	AgentToolInputSchema = preprocess((input) => {
 		if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
 		const normalized = { ...input };
@@ -252953,9 +253749,14 @@ var init_agent$1 = __esmMin((() => {
 		prompt: string().describe("Full task prompt for the subagent"),
 		description: string().describe("Short task description (3-5 words) for UI display"),
 		subagent_type: string().optional().describe("One of the available agent types (see \"Available agent types\" in this tool description). Defaults to \"coder\" when omitted."),
+		context_mode: _enum(["isolated", "fork"]).optional().describe("Context boundary for a new subagent. Defaults to isolated. fork is root-only and passes a bounded redacted user/assistant projection without tools, private channels, system injections, attachments, or tool results."),
 		resume: string().optional().describe("Optional agent ID to resume instead of creating a new instance. When set, do not also pass subagent_type — the resumed agent keeps its own type, and supplying both is rejected."),
-		run_in_background: boolean$1().optional().describe("Compatibility option. When task management is available, subagents always run detached so the parent remains responsive."),
-		timeout_minutes: number$1().int().min(0).max(10080).optional().describe("Wall-clock interval before the same agent is continued automatically. Defaults to 240 minutes. Set 0 to disable the interval for this run.")
+		run_in_background: boolean$1().optional().describe("Compatibility option. Normal subagents run detached when task management is available. A response_format call requires this to be false or omitted and runs in the foreground for validation."),
+		timeout_minutes: number$1().int().min(0).max(10080).optional().describe("Wall-clock interval before the same agent is continued automatically. Defaults to 240 minutes. Set 0 to disable the interval for this run."),
+		response_format: object({
+			name: string().min(1).max(64).describe("Stable name for the structured result"),
+			schema: record(string(), unknown()).describe("Restricted JSON Schema for one object result")
+		}).optional().describe("Require a validated JSON object from a foreground subagent. Structured background agents are not supported yet.")
 	}));
 	object({
 		result: string().describe("Aggregated text output from the subagent"),
@@ -252967,7 +253768,7 @@ var init_agent$1 = __esmMin((() => {
 		}).describe("Cumulative token usage")
 	});
 	BACKGROUND_AGENT_UNAVAILABLE = "Background agent execution is not available for this agent because TaskList, TaskOutput, and TaskStop are not enabled.";
-	agent_default = "Launch a subagent for substantial, multi-step work in its own context and wire file. It returns a final report while keeping intermediate file contents out of your context.\n\nThe subagent starts with zero conversation context. Give it a self-contained prompt with the goal, known facts, constraints, and required result. For a direct lookup, include the exact path or command. For an investigation, state the question and evidence needed instead of prescribing rigid steps.\n\nWhen continuing earlier work, resume the existing agent ID instead of spawning a new agent; its context remains available. A subagent report is only visible to you, so relay the relevant conclusions to the user. `timeout_minutes` sets the wall-clock interval before the same agent continues automatically with preserved context; `timeout_minutes=0` disables that interval.\n\nUse Agent for complex, context-heavy work, not a trivial one- or two-step task. Launch independent agents in parallel in one response when useful. After assigning a scope, do not duplicate its searches or reads and do not abandon it to redo the same work manually; both erase the intended context savings.";
+	agent_default = "Launch a subagent for substantial, multi-step work in its own context and wire file. It returns a final report while keeping intermediate file contents out of your context.\n\nThe subagent starts with zero conversation context. Give it a self-contained prompt with the goal, known facts, constraints, and required result. For a direct lookup, include the exact path or command. For an investigation, state the question and evidence needed instead of prescribing rigid steps.\n\nWhen continuing earlier work, resume the existing agent ID instead of spawning a new agent; its context remains available. A subagent report is only visible to you, so relay the relevant conclusions to the user. `timeout_minutes` sets the wall-clock interval before the same agent continues automatically with preserved context; `timeout_minutes=0` disables that interval.\n\nUse Agent for complex, context-heavy work, not a trivial one- or two-step task. Launch independent agents in parallel in one response when useful. After assigning a scope, do not duplicate its searches or reads and do not abandon it to redo the same work manually; both erase the intended context savings.\n\nFor a machine-readable foreground result, pass `response_format` with a stable name and restricted object JSON Schema. The child gets no additional tools or permissions. It must return exactly one matching JSON object; BLUN validates it and allows at most one bounded repair turn. Do not combine `response_format` with `run_in_background=true`.";
 	AgentTool = class {
 		subagentHost;
 		backgroundManager;
@@ -252980,7 +253781,7 @@ var init_agent$1 = __esmMin((() => {
 			const log = options?.log;
 			this.allowBackground = options?.allowBackground ?? true;
 			const typeLines = buildSubagentDescriptions(subagents);
-			const baseDescription = `${agent_default}\n\n${this.allowBackground ? agent_background_enabled_default : agent_background_disabled_default}`;
+			const baseDescription = `${agent_default}\n\n${SUBAGENT_CONTEXT_FORK_TOOL_DESCRIPTION}\n\n${this.allowBackground ? agent_background_enabled_default : agent_background_disabled_default}`;
 			this.description = typeLines ? `${baseDescription}\n\nAvailable agent types (pass via subagent_type):\n${typeLines}` : baseDescription;
 			this.log = log;
 		}
@@ -252990,10 +253791,11 @@ var init_agent$1 = __esmMin((() => {
 			let profileName = args.subagent_type?.length ? args.subagent_type : "coder";
 			const resumeAgentId = args.resume?.trim();
 			if (resumeAgentId !== void 0 && resumeAgentId.length > 0) profileName = await this.subagentHost.getProfileName?.(resumeAgentId) ?? "subagent";
-			const { runInBackground } = resolveSubagentRunMode({
+			const resolvedRunMode = resolveSubagentRunMode({
 				allowBackground: this.allowBackground,
 				requested: args.run_in_background
 			});
+			const runInBackground = args.response_format === void 0 ? resolvedRunMode.runInBackground : false;
 			return {
 				description: `${runInBackground ? "Launching background" : "Launching"} ${profileName} agent: ${args.description}`,
 				accesses: ToolAccesses.none(),
@@ -253008,15 +253810,42 @@ var init_agent$1 = __esmMin((() => {
 				execute: (ctx) => this.execution(args, ctx)
 			};
 		}
-		async execution(args, { toolCallId, signal }) {
+		async execution(args, { toolCallId, signal, turnId }) {
 			try {
 				signal.throwIfAborted();
-				const { runInBackground } = resolveSubagentRunMode({
+				if (args.response_format !== void 0 && args.run_in_background === true) return {
+					output: "response_format is supported for foreground Agent runs only; remove run_in_background=true.",
+					isError: true
+				};
+				let responseFormat;
+				try {
+					responseFormat = prepareStructuredResponseFormat(args.response_format, compileToolArgsValidator);
+				} catch (error) {
+					return {
+						output: `Invalid response_format: ${error instanceof Error ? error.message : String(error)}`,
+						isError: true
+					};
+				}
+				const resolvedRunMode = resolveSubagentRunMode({
 					allowBackground: this.allowBackground,
 					requested: args.run_in_background
 				});
+				const runInBackground = responseFormat === void 0 ? resolvedRunMode.runInBackground : false;
 				const requestedProfileName = args.subagent_type?.length ? args.subagent_type : void 0;
 				const resumeAgentId = args.resume?.trim();
+				let contextMode;
+				try {
+					contextMode = resolveSubagentContextMode({
+						requested: args.context_mode,
+						resume: resumeAgentId !== void 0 && resumeAgentId.length > 0,
+						isRoot: this.subagentHost.isRootAgent()
+					});
+				} catch (error) {
+					return {
+						output: error instanceof Error ? error.message : String(error),
+						isError: true
+					};
+				}
 				if (resumeAgentId !== void 0 && resumeAgentId.length > 0 && requestedProfileName !== void 0) return {
 					output: "Cannot set subagent_type when resuming an existing agent. Resume by agent id only.",
 					isError: true
@@ -253036,6 +253865,9 @@ var init_agent$1 = __esmMin((() => {
 					prompt: args.prompt,
 					description: args.description,
 					runInBackground,
+					responseFormat,
+					contextMode,
+					toolScope: this.subagentHost.toolScopeForTurn(Number(turnId)),
 					signal: controller.signal
 				};
 				let handle;
@@ -253061,7 +253893,8 @@ var init_agent$1 = __esmMin((() => {
 					taskId = this.backgroundManager.registerTask(new AgentBackgroundTask(handle, args.description, this.subagentHost, controller, {
 						timeoutMs: resolveSubagentTimeoutMs({ perRunMinutes: args.timeout_minutes }),
 						runInBackground,
-						parentToolCallId: toolCallId
+						parentToolCallId: toolCallId,
+						responseFormat
 					}), {
 						detached: runInBackground,
 						signal: runInBackground ? void 0 : signal
@@ -253084,7 +253917,7 @@ var init_agent$1 = __esmMin((() => {
 				}
 				if (runInBackground) return { output: formatBackgroundAgentResult(taskId, handle, args.description, this.allowBackground) };
 				if (await this.backgroundManager.waitForForegroundRelease(taskId) === "detached") return { output: formatBackgroundAgentResult(taskId, handle, args.description, this.allowBackground) };
-				return await this.formatForegroundResult(taskId, handle);
+				return await this.formatForegroundResult(taskId, handle, responseFormat);
 			} catch (error) {
 				return {
 					output: `subagent error: ${launchErrorMessage(error, signal)}`,
@@ -253092,9 +253925,12 @@ var init_agent$1 = __esmMin((() => {
 				};
 			}
 		}
-		async formatForegroundResult(taskId, handle) {
+		async formatForegroundResult(taskId, handle, responseFormat) {
 			const info = this.backgroundManager.getTask(taskId);
-			if (info?.status === "completed") return { output: formatForegroundAgentSuccess(handle, await this.backgroundManager.readOutput(taskId)) };
+			if (info?.status === "completed") {
+				const output = await this.backgroundManager.readOutput(taskId);
+				return { output: responseFormat === void 0 ? formatForegroundAgentSuccess(handle, output) : output };
+			}
 			const timedOut = info?.status === "timed_out";
 			return {
 				output: formatForegroundAgentFailure(handle, timedOut ? "Agent timed out before automatic continuation could start." : info?.stopReason === "Interrupted by user" ? USER_INTERRUPTED_SUBAGENT_MESSAGE : info?.stopReason !== void 0 ? info.stopReason : "The subagent was stopped before it finished.", timedOut),
@@ -253108,7 +253944,7 @@ var init_agent$1 = __esmMin((() => {
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/agent-swarm.md?raw
 var agent_swarm_default;
 var init_agent_swarm$1 = __esmMin((() => {
-	agent_swarm_default = "Launch multiple subagents from one prompt template, existing agent resumes, or both.\n\nUse AgentSwarm when many subagents should run the same kind of task over different inputs. The placeholder is exactly `{{item}}`. For example, with `prompt_template` set to `Review {{item}} for likely regressions.` and `items` set to `[\"src/a.ts\", \"src/b.ts\"]`, AgentSwarm launches two new subagents with those two concrete prompts. For a few differently-shaped tasks, make separate `Agent` calls in one message instead.\n\nUse `resume_agent_ids` to continue subagents that already exist from earlier work, such as ones that failed or timed out: map each agent id to the prompt for that resumed subagent (usually `continue` if no extra information is needed). You may combine `resume_agent_ids` with `items` in the same call to resume existing subagents and launch new ones. Do not duplicate resumed work in `items`.\n\nEach of these is enforced — a violation is rejected before any subagent starts: provide at least 2 `items` unless you pass `resume_agent_ids`; whenever `items` are present, `prompt_template` is required and must contain `{{item}}`; and the filled-in prompts must be distinct (two items that expand to the same prompt are rejected).\n\nUse enough subagents to keep the work focused and parallel. AgentSwarm supports up to 128 subagents, and launches are queued automatically, so it is safe to split large tasks into many clear, independent items.\n\nIf `AgentSwarm` is called, that call must be the only tool call in the response.\n";
+	agent_swarm_default = "Launch multiple subagents from one prompt template, existing agent resumes, or both.\n\nUse AgentSwarm when many subagents should run the same kind of task over different inputs. The placeholder is exactly `{{item}}`. For example, with `prompt_template` set to `Review {{item}} for likely regressions.` and `items` set to `[\"src/a.ts\", \"src/b.ts\"]`, AgentSwarm launches two new subagents with those two concrete prompts. For a few differently-shaped tasks, make separate `Agent` calls in one message instead.\n\nUse `resume_agent_ids` to continue subagents that already exist from earlier work, such as ones that failed or timed out: map each agent id to the prompt for that resumed subagent (usually `continue` if no extra information is needed). You may combine `resume_agent_ids` with `items` in the same call to resume existing subagents and launch new ones. Do not duplicate resumed work in `items`.\n\nEach of these is enforced — a violation is rejected before any subagent starts: provide at least 2 `items` unless you pass `resume_agent_ids`; whenever `items` are present, `prompt_template` is required and must contain `{{item}}`; and the filled-in prompts must be distinct (two items that expand to the same prompt are rejected).\n\nUse enough subagents to keep the work focused and parallel. AgentSwarm supports up to 128 subagents, and launches are queued automatically, so it is safe to split large tasks into many clear, independent items.\n\nUse `response_format` when all children must return one shared bounded JSON shape. Each child is validated and repaired independently, and the final result is canonical task-order JSON. Omit it to retain the existing XML result format unchanged.\n\nIf `AgentSwarm` is called, that call must be the only tool call in the response.\n";
 }));
 //#endregion
 //#region ../../packages/agent-core/src/tools/builtin/collaboration/agent-swarm.ts
@@ -253191,13 +254027,14 @@ function renderSwarmSummary(completed, failed, aborted = 0) {
 function escapeXmlAttribute(value) {
 	return value.replaceAll("&", "&amp;").replaceAll("\"", "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
-var DEFAULT_SUBAGENT_TYPE, PROMPT_TEMPLATE_PLACEHOLDER, MAX_AGENT_SWARM_SUBAGENTS, AgentSwarmToolInputSchema, AgentSwarmTool;
+var DEFAULT_SUBAGENT_TYPE, PROMPT_TEMPLATE_PLACEHOLDER, MAX_AGENT_SWARM_SUBAGENTS, renderStructuredSwarmResults, parseStructuredSwarmDisplay, structuredSwarmToolResult, AgentSwarmToolInputSchema, AgentSwarmTool;
 var init_agent_swarm = __esmMin((() => {
 	init_zod$1();
 	init_subagent_host();
 	init_tool_access();
 	init_input_schema();
 	init_agent_swarm$1();
+	({ renderStructuredSwarmResults, parseStructuredSwarmDisplay, structuredSwarmToolResult } = createRequire(import.meta.url)("./bin/structured-agent-swarm-output.cjs"));
 	DEFAULT_SUBAGENT_TYPE = "coder";
 	PROMPT_TEMPLATE_PLACEHOLDER = "{{item}}";
 	MAX_AGENT_SWARM_SUBAGENTS = 128;
@@ -253207,7 +254044,11 @@ var init_agent_swarm = __esmMin((() => {
 		prompt_template: string().trim().min(1).optional().describe(`Prompt template for each subagent. The ${PROMPT_TEMPLATE_PLACEHOLDER} placeholder is replaced with each item value.`),
 		items: array(string().trim().min(1)).max(MAX_AGENT_SWARM_SUBAGENTS).optional().describe(`Values used to fill ${PROMPT_TEMPLATE_PLACEHOLDER}. Each item launches one new subagent.`),
 		resume_agent_ids: record(string().trim().min(1), string().trim().min(1)).optional().describe("Map of existing subagent agent_id to the prompt used to resume that subagent. These resumed subagents are launched before new item-based subagents."),
-		timeout_minutes: number$1().int().min(0).max(10080).optional().describe("Wall-clock interval before each same swarm agent is continued automatically. Defaults to 240 minutes. Set 0 to disable the interval for this run.")
+		timeout_minutes: number$1().int().min(0).max(10080).optional().describe("Wall-clock interval before each same swarm agent is continued automatically. Defaults to 240 minutes. Set 0 to disable the interval for this run."),
+		response_format: object({
+			name: string().min(1).max(64).describe("Stable name for the shared structured result"),
+			schema: record(string(), unknown()).describe("Restricted JSON Schema applied to every child result")
+		}).optional().describe("Require one shared validated JSON object shape from every spawned or resumed swarm child.")
 	}).strict();
 	AgentSwarmTool = class {
 		subagentHost;
@@ -253235,8 +254076,17 @@ var init_agent_swarm = __esmMin((() => {
 		}
 		async execution(args, context) {
 			try {
+				let responseFormat;
+				if (args.response_format !== void 0) try {
+					responseFormat = prepareStructuredResponseFormat(args.response_format, compileToolArgsValidator);
+				} catch (error) {
+					return {
+						output: `Invalid response_format: ${error instanceof Error ? error.message : String(error)}`,
+						isError: true
+					};
+				}
 				this.swarmMode.enter("tool");
-				return { output: await this.runSwarm(args, context.signal, context.toolCallId) };
+				return structuredSwarmToolResult(await this.runSwarm(args, context.signal, context.toolCallId, responseFormat, context.turnId));
 			} catch (error) {
 				return {
 					output: error instanceof Error ? error.message : String(error),
@@ -253244,7 +254094,7 @@ var init_agent_swarm = __esmMin((() => {
 				};
 			}
 		}
-		async runSwarm(args, signal, toolCallId) {
+		async runSwarm(args, signal, toolCallId, responseFormat, turnId) {
 			const profileName = normalizeOptionalString$2(args.subagent_type) ?? DEFAULT_SUBAGENT_TYPE;
 			const tasks = createAgentSwarmSpecs(args, (agentId) => this.subagentHost.getSwarmItem(agentId)).map((spec) => {
 				const descriptionName = spec.kind === "resume" ? "resume" : profileName;
@@ -253256,6 +254106,8 @@ var init_agent_swarm = __esmMin((() => {
 					description: childDescription(args.description, spec.index, descriptionName),
 					swarmIndex: spec.index,
 					runInBackground: false,
+					responseFormat,
+					toolScope: this.subagentHost.toolScopeForTurn(Number(turnId)),
 					swarmItem: spec.item,
 					signal,
 					timeout: resolveSubagentTimeoutMs({ perRunMinutes: args.timeout_minutes })
@@ -253270,10 +254122,11 @@ var init_agent_swarm = __esmMin((() => {
 					kind: "spawn"
 				};
 			});
-			return renderSwarmResults((await this.subagentHost.runQueued(tasks)).map(({ task, ...result }) => ({
+			const results = (await this.subagentHost.runQueued(tasks)).map(({ task, ...result }) => ({
 				spec: task.data,
 				...result
-			})));
+			}));
+			return responseFormat === void 0 ? renderSwarmResults(results) : renderStructuredSwarmResults(results, responseFormat);
 		}
 	};
 }));
@@ -259389,7 +260242,7 @@ function renderLine(entry, lineEndingStyle) {
 function renderedLineBytes(renderedLine, isFirst) {
 	return (isFirst ? 0 : 1) + Buffer.byteLength(renderedLine, "utf8");
 }
-function renderEntries(entries, lineEndingStyle) {
+function renderEntries(entries, lineEndingStyle, maxBytes) {
 	const renderedLines = [];
 	const truncatedLineNumbers = [];
 	let bytes = 0;
@@ -259397,14 +260250,14 @@ function renderEntries(entries, lineEndingStyle) {
 	for (const entry of entries) {
 		const rendered = renderLine(entry, lineEndingStyle);
 		const lineBytes = renderedLineBytes(rendered.line, renderedLines.length === 0);
-		if (renderedLines.length > 0 && bytes + lineBytes > MAX_BYTES) {
+		if (renderedLines.length > 0 && bytes + lineBytes > maxBytes) {
 			maxBytesReached = true;
 			break;
 		}
 		if (rendered.wasTruncated) truncatedLineNumbers.push(entry.lineNo);
 		renderedLines.push(rendered.line);
 		bytes += lineBytes;
-		if (bytes >= MAX_BYTES) {
+		if (bytes >= maxBytes) {
 			maxBytesReached = true;
 			break;
 		}
@@ -259435,7 +260288,7 @@ function containsNulByte(text) {
 function notReadableFileOutput(path) {
 	return `"${path}" is not readable as UTF-8 text. If it is an image or video, use ReadMediaFile. For other binary formats, use Bash or an MCP tool if available.`;
 }
-var MAX_LINES$1, MAX_LINE_LENGTH, MAX_BYTES, S_IFMT$1, S_IFREG, PositiveLineOffsetSchema, TailLineOffsetSchema, ReadInputSchema, ReadBatchInputSchema, READ_DESCRIPTION, READ_BATCH_DESCRIPTION, ReadTool, ReadBatchTool, readContinuationNotice, READ_MODEL_VISIBLE_BYTES, MAX_READ_BATCH_REQUESTS, readBatchAllFailed, renderReadBatchOutput;
+var MAX_LINES$1, MAX_LINE_LENGTH, S_IFMT$1, S_IFREG, PositiveLineOffsetSchema, TailLineOffsetSchema, ReadInputSchema, ReadBatchInputSchema, READ_DESCRIPTION, READ_BATCH_DESCRIPTION, ReadTool, ReadBatchTool, readContinuationNotice, readModelVisibleBytes, readModelVisibleLines, MAX_READ_BATCH_REQUESTS, readBatchAllFailed, renderReadBatchOutput;
 var init_read = __esmMin((() => {
 	init_zod$1();
 	init_tool_access();
@@ -259446,46 +260299,47 @@ var init_read = __esmMin((() => {
 	init_rule_match();
 	init_line_endings();
 	init_read$1();
-	({ readContinuationNotice, READ_MODEL_VISIBLE_BYTES } = createRequire(import.meta.url)("./bin/read-continuation-policy.cjs"));
+	({ readContinuationNotice, readModelVisibleBytes, readModelVisibleLines } = createRequire(import.meta.url)("./bin/read-continuation-policy.cjs"));
 	({ MAX_READ_BATCH_REQUESTS, readBatchAllFailed, renderReadBatchOutput } = createRequire(import.meta.url)("./bin/read-batch-policy.cjs"));
 	MAX_LINES$1 = 1e3;
 	MAX_LINE_LENGTH = 2e3;
-	MAX_BYTES = READ_MODEL_VISIBLE_BYTES;
 	S_IFMT$1 = 61440;
 	S_IFREG = 32768;
 	PositiveLineOffsetSchema = number$1().int().min(1);
-	TailLineOffsetSchema = number$1().int().min(-MAX_LINES$1).max(-1);
+	TailLineOffsetSchema = number$1().int().max(-1);
 	ReadInputSchema = object({
 		path: string().describe("Path to a text file. Relative paths resolve against the working directory; a path outside the working directory must be absolute. Directories are not supported; use `ls` via Bash for a known directory, or Glob for pattern search."),
-		line_offset: union([PositiveLineOffsetSchema, TailLineOffsetSchema]).optional().describe(`The line number to start reading from. Omit to start at line 1. Negative values read from the end of the file; the absolute value cannot exceed ${String(MAX_LINES$1)}.`),
-		n_lines: number$1().int().positive().optional().describe(`The number of lines to read; the tool also applies its internal cap. Omit to read up to the internal cap of ${String(MAX_LINES$1)} lines.`)
+		line_offset: union([PositiveLineOffsetSchema, TailLineOffsetSchema]).optional().describe("The line number to start reading from. Omit to start at line 1. Negative values read backward from the end within the active context budget."),
+		n_lines: number$1().int().positive().optional().describe("The number of lines for an explicit targeted range. Omit to read the complete file whenever the active context has room.")
 	});
 	ReadBatchInputSchema = object({ requests: array(ReadInputSchema).min(2).max(MAX_READ_BATCH_REQUESTS).describe(`Two to ${String(MAX_READ_BATCH_REQUESTS)} independent known text-file reads. Do not batch a read whose path or range depends on an earlier result.`) });
 	object({
 		content: string(),
 		lineCount: number$1().int().nonnegative()
 	});
+	read_default = "Read a known UTF-8 text file. Invalid paths error; directories are unsupported. Relative paths use the working directory; outside paths must be absolute. Use Glob for unknown names, Grep for content, and ReadMediaFile for media.\n\nOmit `line_offset` and `n_lines` to read the complete file whenever the active context has room. Explicit ranges remain available for targeted inspection. Under real context pressure, a result is capped and names the exact next `line_offset`; continue from that line without gaps. Individual lines beyond {{ MAX_LINE_LENGTH }} characters are truncated. Negative `line_offset` reads from the end, up to {{ MAX_LINES }} lines. Issue independent Read calls together in one response when several files or ranges may be useful. Prefer ReadBatch when two or more independent paths or ranges are already known.\n\nSensitive files such as `.env` and credential stores are refused; templates and public keys remain readable. Only UTF-8 text without NUL bytes is accepted; use Bash or an MCP tool for other binaries.\n\nOutput is `<line-number>\\t<content>` per line. The trailing `<system>...</system>` block is status, not file content. Pure CRLF appears as LF and is preserved by Edit. Mixed or lone carriage returns appear as `\\r` and require exact `Edit.old_string` escapes.";
 	READ_DESCRIPTION = renderPrompt(read_default, {
 		MAX_LINES: MAX_LINES$1,
-		MAX_BYTES_KB: MAX_BYTES / 1024,
-		MAX_LINE_LENGTH
-	});
-	read_default = "Read a known UTF-8 text file. Invalid paths error; directories are unsupported. Relative paths use the working directory; outside paths must be absolute. Use Glob for unknown names, Grep for content, and ReadMediaFile for media.\n\nEach call returns at most {{ MAX_LINES }} lines or {{ MAX_BYTES_KB }} KB and truncates lines beyond {{ MAX_LINE_LENGTH }} characters. Page large files with 1-based `line_offset` and `n_lines`; omit `n_lines` for the cap. Negative `line_offset` reads from the end, up to {{ MAX_LINES }} lines. A capped result names the exact next `line_offset`. Issue independent Read calls together in one response when several files or ranges may be useful. Prefer ReadBatch when two or more independent paths or ranges are already known.\n\nSensitive files such as `.env` and credential stores are refused; templates and public keys remain readable. Only UTF-8 text without NUL bytes is accepted; use Bash or an MCP tool for other binaries.\n\nOutput is `<line-number>\\t<content>` per line. The trailing `<system>...</system>` block is status, not file content. Pure CRLF appears as LF and is preserved by Edit. Mixed or lone carriage returns appear as `\\r` and require exact `Edit.old_string` escapes.";
-	READ_DESCRIPTION = renderPrompt(read_default, {
-		MAX_LINES: MAX_LINES$1,
-		MAX_BYTES_KB: MAX_BYTES / 1024,
 		MAX_LINE_LENGTH
 	});
 	READ_BATCH_DESCRIPTION = `Read ${String(MAX_READ_BATCH_REQUESTS)} or fewer independent known UTF-8 text files or ranges concurrently in one tool call. Use this instead of serial Read calls only when every path and range is already known and no later request depends on an earlier result. Each request uses the same path, sensitive-file, UTF-8, line, and byte rules as Read. Results remain in request order and identify partial failures individually.`;
 	ReadTool = class {
 		kaos;
 		workspace;
+		contextWindowState;
 		name = "Read";
 		description = READ_DESCRIPTION;
 		parameters = toInputJsonSchema(ReadInputSchema);
-		constructor(kaos, workspace) {
+		constructor(kaos, workspace, contextWindowState = () => ({})) {
 			this.kaos = kaos;
 			this.workspace = workspace;
+			this.contextWindowState = contextWindowState;
+		}
+		modelVisibleBytes() {
+			return readModelVisibleBytes(this.contextWindowState());
+		}
+		modelVisibleLines() {
+			return readModelVisibleLines(this.contextWindowState());
 		}
 		resolveExecution(args) {
 			const path = resolvePathAccessPath(args.path, {
@@ -259536,10 +260390,12 @@ var init_read = __esmMin((() => {
 					output: notReadableFileOutput(args.path)
 				};
 				const lineOffset = args.line_offset ?? 1;
-				const requestedLines = args.n_lines ?? 1e3;
-				const effectiveLimit = Math.min(requestedLines, MAX_LINES$1);
-				if (lineOffset < 0) return await this.readTail(safePath, args.path, lineOffset, effectiveLimit, requestedLines);
-				return await this.readForward(safePath, args.path, lineOffset, effectiveLimit, requestedLines);
+				const maxLines = this.modelVisibleLines();
+				const requestedLines = args.n_lines ?? maxLines;
+				const effectiveLimit = Math.min(requestedLines, maxLines);
+				const maxBytes = this.modelVisibleBytes();
+				if (lineOffset < 0) return await this.readTail(safePath, args.path, lineOffset, effectiveLimit, requestedLines, maxBytes, maxLines);
+				return await this.readForward(safePath, args.path, lineOffset, effectiveLimit, requestedLines, maxBytes, maxLines);
 			} catch (error) {
 				if (isTextDecodeError(error)) return {
 					isError: true,
@@ -259551,7 +260407,7 @@ var init_read = __esmMin((() => {
 				};
 			}
 		}
-		async readForward(safePath, displayPath, lineOffset, effectiveLimit, requestedLines) {
+		async readForward(safePath, displayPath, lineOffset, effectiveLimit, requestedLines, maxBytes, maxLines) {
 			const rangeKaos = this.kaos;
 			if (rangeKaos.scanTextFile !== void 0 && rangeKaos.readLineRange !== void 0) {
 				const scan = await rangeKaos.scanTextFile(safePath);
@@ -259560,31 +260416,47 @@ var init_read = __esmMin((() => {
 					output: notReadableFileOutput(displayPath)
 				};
 				const selectedEntries = [];
+				const lineEndingStyle = lineEndingStyleFromFlags(scan.lineEndingFlags);
+				let selectedBytes = 0;
+				let maxBytesReached = false;
 				let lineNo = lineOffset;
 				for await (const rawLine of rangeKaos.readLineRange(safePath, {
 					startLine: lineOffset,
 					maxLines: effectiveLimit,
 					errors: "strict"
 				})) {
-					selectedEntries.push({
+					const entry = {
 						lineNo,
 						rawContent: stripTrailingLf(rawLine)
-					});
+					};
+					const rendered = renderLine(entry, lineEndingStyle);
+					const lineBytes = renderedLineBytes(rendered.line, selectedEntries.length === 0);
+					if (selectedEntries.length > 0 && selectedBytes + lineBytes > maxBytes) {
+						maxBytesReached = true;
+						break;
+					}
+					selectedEntries.push(entry);
+					selectedBytes += lineBytes;
 					lineNo += 1;
+					if (selectedBytes >= maxBytes) {
+						maxBytesReached = true;
+						break;
+					}
 				}
-				const lineEndingStyle = lineEndingStyleFromFlags(scan.lineEndingFlags);
-				const rendered = renderEntries(selectedEntries, lineEndingStyle);
+				const rendered = renderEntries(selectedEntries, lineEndingStyle, maxBytes);
 				return this.finishReadResult({
 					renderedLines: rendered.renderedLines,
 					truncatedLineNumbers: rendered.truncatedLineNumbers,
-					maxLinesReached: effectiveLimit >= 1e3 && lineOffset + 1e3 <= scan.totalLines,
-					maxBytesReached: rendered.maxBytesReached,
+					maxLinesReached: effectiveLimit >= maxLines && lineOffset + maxLines <= scan.totalLines,
+					maxBytesReached: maxBytesReached || rendered.maxBytesReached,
 					lineEndingStyle,
 					startLine: selectedEntries.length > 0 ? lineOffset : 0,
 					totalLines: scan.totalLines,
 					requestedLines,
 					lineOffset,
-					effectiveLimit
+					effectiveLimit,
+					maxBytes,
+					maxLines
 				});
 			}
 			const selectedEntries = [];
@@ -259595,7 +260467,10 @@ var init_read = __esmMin((() => {
 			};
 			let currentLineNo = 0;
 			let maxLinesReached = false;
+			let maxBytesReached = false;
+			let selectedBytes = 0;
 			let collectionClosed = false;
+			let closedByLines = false;
 			for await (const rawLine of this.kaos.readLines(safePath, { errors: "strict" })) {
 				if (containsNulByte(rawLine)) return {
 					isError: true,
@@ -259604,38 +260479,56 @@ var init_read = __esmMin((() => {
 				currentLineNo += 1;
 				updateLineEndingFlags(flags, rawLine);
 				if (collectionClosed) {
-					if (effectiveLimit >= 1e3 && currentLineNo >= lineOffset) maxLinesReached = true;
+					if (closedByLines && effectiveLimit >= maxLines && currentLineNo >= lineOffset) maxLinesReached = true;
 					continue;
 				}
 				if (currentLineNo < lineOffset) continue;
 				if (selectedEntries.length >= effectiveLimit) {
-					if (effectiveLimit >= 1e3) maxLinesReached = true;
+					if (effectiveLimit >= maxLines) maxLinesReached = true;
 					collectionClosed = true;
+					closedByLines = true;
 					continue;
 				}
-				selectedEntries.push({
+				const entry = {
 					lineNo: currentLineNo,
 					rawContent: stripTrailingLf(rawLine)
-				});
-				if (selectedEntries.length >= effectiveLimit) collectionClosed = true;
+				};
+				const conservative = renderLine(entry, "mixed");
+				const lineBytes = renderedLineBytes(conservative.line, selectedEntries.length === 0);
+				if (selectedEntries.length > 0 && selectedBytes + lineBytes > maxBytes) {
+					maxBytesReached = true;
+					collectionClosed = true;
+					continue;
+				}
+				selectedEntries.push(entry);
+				selectedBytes += lineBytes;
+				if (selectedEntries.length >= effectiveLimit) {
+					collectionClosed = true;
+					closedByLines = true;
+				} else if (selectedBytes >= maxBytes) {
+					maxBytesReached = true;
+					collectionClosed = true;
+				}
 			}
 			const lineEndingStyle = lineEndingStyleFromFlags(flags);
-			const rendered = renderEntries(selectedEntries, lineEndingStyle);
+			const rendered = renderEntries(selectedEntries, lineEndingStyle, maxBytes);
 			return this.finishReadResult({
 				renderedLines: rendered.renderedLines,
 				truncatedLineNumbers: rendered.truncatedLineNumbers,
 				maxLinesReached,
-				maxBytesReached: rendered.maxBytesReached,
+				maxBytesReached: maxBytesReached || rendered.maxBytesReached,
 				lineEndingStyle,
 				startLine: selectedEntries.length > 0 ? lineOffset : 0,
 				totalLines: currentLineNo,
 				requestedLines,
 				lineOffset,
-				effectiveLimit
+				effectiveLimit,
+				maxBytes,
+				maxLines
 			});
 		}
-		async readTail(safePath, displayPath, lineOffset, effectiveLimit, requestedLines) {
-			const tailCount = Math.abs(lineOffset);
+		async readTail(safePath, displayPath, lineOffset, effectiveLimit, requestedLines, maxBytes, maxLines) {
+			const tailCount = Math.min(Math.abs(lineOffset), maxLines);
 			const rangeKaos = this.kaos;
 			if (rangeKaos.scanTextFile !== void 0 && rangeKaos.readTailLines !== void 0) {
 				const scan = await rangeKaos.scanTextFile(safePath);
@@ -259658,7 +260551,9 @@ var init_read = __esmMin((() => {
 					lineEndingFlags: scan.lineEndingFlags,
 					effectiveLimit,
 					totalLines: scan.totalLines,
-					requestedLines
+					requestedLines,
+					maxBytes,
+					maxLines
 				});
 			}
 			const entries = [];
@@ -259686,7 +260581,9 @@ var init_read = __esmMin((() => {
 				lineEndingFlags: flags,
 				effectiveLimit,
 				totalLines: currentLineNo,
-				requestedLines
+				requestedLines,
+				maxBytes,
+				maxLines
 			});
 		}
 		finishTailEntries(input) {
@@ -259700,7 +260597,7 @@ var init_read = __esmMin((() => {
 			let totalBytes = 0;
 			for (const [index, candidate] of renderedCandidates.entries()) totalBytes += renderedLineBytes(candidate.rendered.line, index === 0);
 			let maxBytesReached = false;
-			if (totalBytes > MAX_BYTES) {
+			if (totalBytes > input.maxBytes) {
 				maxBytesReached = true;
 				const kept = [];
 				let bytes = 0;
@@ -259708,7 +260605,7 @@ var init_read = __esmMin((() => {
 					const candidate = renderedCandidates[i];
 					if (candidate === void 0) continue;
 					const lineBytes = renderedLineBytes(candidate.rendered.line, kept.length === 0);
-					if (bytes + lineBytes > MAX_BYTES) break;
+					if (bytes + lineBytes > input.maxBytes) break;
 					kept.unshift(candidate);
 					bytes += lineBytes;
 				}
@@ -259728,7 +260625,9 @@ var init_read = __esmMin((() => {
 				lineEndingStyle,
 				startLine: renderedCandidates[0]?.entry.lineNo ?? 0,
 				totalLines: input.totalLines,
-				requestedLines: input.requestedLines
+				requestedLines: input.requestedLines,
+				maxBytes: input.maxBytes,
+				maxLines: input.maxLines
 			});
 		}
 		finishReadResult(input) {
@@ -259743,8 +260642,8 @@ var init_read = __esmMin((() => {
 			const lineCount = input.renderedLines.length;
 			const parts = lineCount > 0 ? [`${String(lineCount)} ${lineCount === 1 ? "line" : "lines"} read from file starting from line ${String(input.startLine)}.`] : ["No lines read from file."];
 			parts.push(`Total lines in file: ${String(input.totalLines)}.`);
-			if (input.maxLinesReached) parts.push(`Max ${String(MAX_LINES$1)} lines reached.`);
-			else if (input.maxBytesReached) parts.push(`Max ${String(MAX_BYTES)} bytes reached.`);
+			if (input.maxLinesReached) parts.push(`Max ${String(input.maxLines)} lines reached.`);
+			else if (input.maxBytesReached) parts.push(`Max ${String(input.maxBytes)} bytes reached.`);
 			else if (lineCount < input.requestedLines) parts.push("End of file reached.");
 			const continuationNotice = readContinuationNotice({
 				...input,
@@ -259763,10 +260662,10 @@ var init_read = __esmMin((() => {
 		name = "ReadBatch";
 		description = READ_BATCH_DESCRIPTION;
 		parameters = toInputJsonSchema(ReadBatchInputSchema);
-		constructor(kaos, workspace) {
+		constructor(kaos, workspace, contextWindowState) {
 			this.kaos = kaos;
 			this.workspace = workspace;
-			this.reader = new ReadTool(kaos, workspace);
+			this.reader = new ReadTool(kaos, workspace, contextWindowState);
 		}
 		resolveExecution(args) {
 			const items = args.requests.map((request) => ({
@@ -261161,7 +262060,7 @@ function renderHistoricalToolResultReference(toolName, toolCallId, text, outputP
 function safeToolResultFileStem(toolName, toolCallId) {
 	return `${toolName}-${toolCallId}`.replace(/[^a-zA-Z0-9._-]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 80) || "tool-result";
 }
-var TOOL_RESULT_MAX_CHARS, TOOL_RESULT_PREVIEW_CHARS, TOOL_RESULT_HISTORICAL_PREVIEW_CHARS, TOOL_RESULT_RECOVERY_PAGE_LINES, TOOL_RESULT_OFFLOAD_MARKER, TOOL_RESULT_HISTORICAL_KEEP_RECENT_MESSAGES, shouldKeepFreshToolResult, shouldOffloadToolResult, createToolResultPreview, compactPersistedToolResultReference, compactHistoricalSuccessfulToolResults, dedupeRepeatedSuccessfulToolResults, readContinuationLineOffset, selectToolResultBatchOffloads, selectHistoricalToolResultOffloads, buildToolResultOffloadTelemetry;
+var TOOL_RESULT_MAX_CHARS, TOOL_RESULT_PREVIEW_CHARS, TOOL_RESULT_HISTORICAL_PREVIEW_CHARS, TOOL_RESULT_RECOVERY_PAGE_LINES, TOOL_RESULT_OFFLOAD_MARKER, TOOL_RESULT_HISTORICAL_KEEP_RECENT_MESSAGES, shouldKeepFreshToolResult, shouldOffloadToolResult, createToolResultPreview, compactPersistedToolResultReference, compactHistoricalSuccessfulToolResults, currentTurnReadToolResultIds, currentUserTurnStartIndex, dedupeRepeatedSuccessfulToolResults, hasToolResultOffloadPressure, readContinuationLineOffset, selectToolResultBatchOffloads, selectHistoricalToolResultOffloads, buildToolResultOffloadTelemetry;
 var init_tool_result_budget = __esmMin((() => {
 	init_dist$6();
 	const toolResultOffloadPolicy = createRequire(import.meta.url)("./bin/tool-result-offload-policy.cjs");
@@ -261177,8 +262076,11 @@ var init_tool_result_budget = __esmMin((() => {
 	createToolResultPreview = toolResultOffloadPolicy.createToolResultPreview;
 	compactPersistedToolResultReference = toolResultOffloadPolicy.compactPersistedToolResultReference;
 	compactHistoricalSuccessfulToolResults = toolResultOffloadPolicy.compactHistoricalSuccessfulToolResults;
+	currentTurnReadToolResultIds = toolResultOffloadPolicy.currentTurnReadToolResultIds;
+	currentUserTurnStartIndex = toolResultOffloadPolicy.currentUserTurnStartIndex;
 	dedupeRepeatedSuccessfulToolResults = toolResultOffloadPolicy.dedupeRepeatedSuccessfulToolResults;
 	freshToolResultIds = toolResultOffloadPolicy.freshToolResultIds;
+	hasToolResultOffloadPressure = toolResultOffloadPolicy.hasToolResultOffloadPressure;
 	readContinuationLineOffset = toolResultOffloadPolicy.readContinuationLineOffset;
 	selectToolResultBatchOffloads = toolResultOffloadPolicy.selectToolResultBatchOffloads;
 	selectHistoricalToolResultOffloads = toolResultOffloadPolicy.selectHistoricalToolResultOffloads;
@@ -261193,9 +262095,11 @@ var ToolResultBatchOffload = class {
 	}
 	async detect() {
 		const history = this.agent.context.history;
+		if (!toolResultOffloadPressureForAgent(this.agent)) return 0;
 		const tailIds = freshToolResultIds(history);
+		const pinnedReadIds = currentTurnReadToolResultIds(history);
 		const recentStart = Math.max(0, history.length - TOOL_RESULT_HISTORICAL_KEEP_RECENT_MESSAGES);
-		const historical = history.slice(0, recentStart).filter((message) => message?.role === "tool" && !tailIds.has(message.toolCallId));
+		const historical = history.slice(0, recentStart).filter((message) => message?.role === "tool" && !tailIds.has(message.toolCallId) && !pinnedReadIds.has(message.toolCallId));
 		const candidateBatches = [{
 			messages: historical,
 			historical: true,
@@ -261274,6 +262178,7 @@ var ToolResultBatchOffload = class {
 		});
 	}
 	compact(messages) {
+		if (!toolResultOffloadPressureForAgent(this.agent)) return messages;
 		const recentStart = Math.max(0, messages.length - TOOL_RESULT_HISTORICAL_KEEP_RECENT_MESSAGES);
 		let changed = false;
 		const projected = messages.map((message, index) => {
@@ -261324,6 +262229,13 @@ var ToolResultBatchOffload = class {
 		}
 	}
 };
+function toolResultOffloadPressureForAgent(agent) {
+	return hasToolResultOffloadPressure({ contextUsageRatio: contextUsageRatioForAgent(agent) });
+}
+function contextUsageRatioForAgent(agent) {
+	const maxContextTokens = agent.fullCompaction.getEffectiveMaxContextTokens();
+	return maxContextTokens > 0 ? agent.context.tokenCountWithPending / maxContextTokens : 1;
+}
 //#endregion
 //#region ../../packages/agent-core/src/agent/turn/user-message-offload.ts
 function persistableUserMessageText(message) {
@@ -261369,7 +262281,7 @@ function renderPersistedUserMessage(text, outputPath) {
 		createUserMessagePreview(text)
 	].join("\n");
 }
-var USER_MESSAGE_MAX_CHARS, USER_MESSAGE_OFFLOAD_MARKER, shouldOffloadUserMessage, shouldOffloadHistoricalUserMessage, createUserMessagePreview, compactHistoricalPersistedUserMessageReferences, projectHistoricalMediaParts;
+var USER_MESSAGE_MAX_CHARS, USER_MESSAGE_OFFLOAD_MARKER, shouldOffloadUserMessage, shouldOffloadHistoricalUserMessage, createUserMessagePreview, compactHistoricalPersistedUserMessageReferences, historyTextChars, projectHistoricalMediaParts;
 var init_user_message_offload = __esmMin((() => {
 	const policy = createRequire(import.meta.url)("./bin/user-message-offload-policy.cjs");
 	USER_MESSAGE_MAX_CHARS = policy.USER_MESSAGE_MAX_CHARS;
@@ -261377,6 +262289,7 @@ var init_user_message_offload = __esmMin((() => {
 	shouldOffloadUserMessage = policy.shouldOffloadUserMessage;
 	shouldOffloadHistoricalUserMessage = policy.shouldOffloadHistoricalUserMessage;
 	createUserMessagePreview = policy.createUserMessagePreview;
+	historyTextChars = policy.historyTextChars;
 		compactHistoricalPersistedUserMessageReferences = policy.compactHistoricalPersistedUserMessageReferences;
 		({ projectHistoricalMediaParts } = createRequire(import.meta.url)("./bin/historical-media-projection-policy.cjs"));
 	}));
@@ -261389,8 +262302,12 @@ var UserMessageOffload = class {
 	async detect() {
 		const history = this.agent.context.history;
 		if (this.agent.homedir === void 0) return 0;
+		const currentTurnStart = currentUserTurnStartIndex(history);
+		const totalHistoryChars = historyTextChars(history);
+		const contextUsageRatio = contextUsageRatioForAgent(this.agent);
 		let offloaded = 0;
 		for (let historyIndex = 0; historyIndex < history.length; historyIndex++) {
+			if (historyIndex === currentTurnStart) continue;
 			const message = history[historyIndex];
 			const text = persistableUserMessageText(message);
 			if (text === void 0) continue;
@@ -261398,7 +262315,9 @@ var UserMessageOffload = class {
 			const historicalOversize = shouldOffloadHistoricalUserMessage({
 				historyIndex,
 				historyLength: history.length,
-				textChars: text.length
+				historyChars: totalHistoryChars,
+				textChars: text.length,
+				contextUsageRatio
 			});
 			if (!immediateOversize && !historicalOversize) continue;
 			const messageHash = userMessageOffloadHash(message, text);
@@ -261410,6 +262329,14 @@ var UserMessageOffload = class {
 				type: "text",
 				text: replacementText
 			}, ...message.content.filter((part) => part.type !== "text")];
+			this.agent.records.logRecord({
+				type: "policy.intervention",
+				policy: "user_message_offload",
+				location: "UserMessageOffload.detect",
+				size_before: text.length,
+				size_after: replacementText.length,
+				unit: "chars"
+			});
 			this.apply({
 				messageHash,
 				content,
@@ -261434,7 +262361,7 @@ var UserMessageOffload = class {
 		});
 	}
 	compact(messages) {
-		if (this.replacements.size === 0) return messages;
+		if (this.replacements.size === 0 || !toolResultOffloadPressureForAgent(this.agent)) return messages;
 		return messages.map((message) => {
 			const text = persistableUserMessageText(message);
 			if (text === void 0) return message;
@@ -261520,6 +262447,8 @@ var AssistantMessageOffload = class {
 	async detect() {
 		const history = this.agent.context.history;
 		if (this.agent.homedir === void 0) return 0;
+		const totalHistoryChars = historyTextChars(history);
+		const contextUsageRatio = contextUsageRatioForAgent(this.agent);
 		let offloaded = 0;
 		for (let historyIndex = 0; historyIndex < history.length; historyIndex++) {
 			const message = history[historyIndex];
@@ -261527,7 +262456,9 @@ var AssistantMessageOffload = class {
 			if (text === void 0 || !shouldOffloadHistoricalAssistantMessage({
 				historyIndex,
 				historyLength: history.length,
-				textChars: text.length
+				historyChars: totalHistoryChars,
+				textChars: text.length,
+				contextUsageRatio
 			})) continue;
 			const messageHash = assistantMessageOffloadHash(message, text);
 			if (this.replacements.has(messageHash)) continue;
@@ -261538,6 +262469,14 @@ var AssistantMessageOffload = class {
 				type: "text",
 				text: replacementText
 			}, ...message.content.filter((part) => part.type !== "text")];
+			this.agent.records.logRecord({
+				type: "policy.intervention",
+				policy: "assistant_message_offload",
+				location: "AssistantMessageOffload.detect",
+				size_before: text.length,
+				size_after: replacementText.length,
+				unit: "chars"
+			});
 			this.apply({
 				messageHash,
 				content,
@@ -261562,7 +262501,9 @@ var AssistantMessageOffload = class {
 		});
 	}
 	compact(messages) {
+		const underPressure = toolResultOffloadPressureForAgent(this.agent);
 		const completedToolCallIds = new Set(messages.filter((message) => message?.role === "tool" && message.toolCallId !== void 0).map((message) => message.toolCallId));
+		const totalHistoryChars = historyTextChars(messages);
 		let changed = false;
 		const projected = messages.map((message, historyIndex) => {
 			if (message?.role === "assistant" && message.toolCalls.length > 0) {
@@ -261572,6 +262513,7 @@ var AssistantMessageOffload = class {
 				if (shouldCompactHistoricalAssistantToolNarration({
 					historyIndex,
 					historyLength: messages.length,
+					historyChars: totalHistoryChars,
 					textChars,
 					toolCallCount: message.toolCalls.length,
 					completedToolCallCount
@@ -261589,7 +262531,7 @@ var AssistantMessageOffload = class {
 			}
 			const text = persistableAssistantMessageText(message);
 			if (text === void 0) return message;
-			const replacement = this.replacements.get(assistantMessageOffloadHash(message, text));
+			const replacement = underPressure ? this.replacements.get(assistantMessageOffloadHash(message, text)) : void 0;
 			if (replacement === void 0) return message;
 			changed = true;
 			return { ...message, content: replacement.content };
@@ -261616,6 +262558,17 @@ function blunExtractText(content) {
 	if (Array.isArray(content)) return content.map((c) => typeof c === "string" ? c : c && typeof c === "object" && "text" in c && typeof c.text === "string" ? c.text : "").join(" ");
 	return "";
 }
+function blunRepeatActiveTurnPrompt(history, input, stepNumber) {
+	if (stepNumber <= 1) return history;
+	const prompt = blunExtractText(input);
+	if (prompt.length === 0) return history;
+	return [...history, {
+		role: "user",
+		content: [{ type: "text", text: `<active-task-reminder>\nThe active user task is repeated verbatim below. Continue from the current work state; do not restart completed work.\n\n${prompt}\n</active-task-reminder>` }],
+		toolCalls: [],
+		origin: { kind: "injection", variant: "active_turn_prompt" }
+	}];
+}
 /**
 * BLUN: decide whether a turn should carry the full tool set. Small-context models
 * (e.g. King on an 8k window) lose their identity/language when all tool schemas
@@ -261959,7 +262912,7 @@ function durablePromptOrigin(origin) {
 	void externalReportSources;
 	return durableOrigin;
 }
-var BLUN_CORE_TOOL_NAMES, BLUN_LEAN_TOOL_NAMES, BLUN_ATTACHMENT_MARKER_RE, BLUN_TELEGRAM_OUTBOUND_TOOL_RE, BLUN_TELEGRAM_CHANNEL_RE, BLUN_TOOL_BUDGET_RATIO, createDeferredToolLoader, mediaToolNamesForTurnText, rankedSupportToolNamesForGoal, rankedToolNamesForTurnText, rememberDeferredToolAfterNotFound, toolSchemaBudgetTokens, enforceSingleTodoWritePerStep, projectRecurringCronHistory, TelegramDeliveryLedger, createRuntimeCognitiveTurnLifecycle, cognitiveFocusScopesForTurn, buildCognitiveWorkFocus, buildAttentionQueueItem, LLM_NOT_SET_MESSAGE, GOAL_CONTINUATION_ORIGIN, GOAL_COMPLETION_REMINDER_NAME, GOAL_BLOCKED_REMINDER_NAME, GOAL_RATE_LIMIT_PAUSE_REASON, GOAL_PROVIDER_CONNECTION_PAUSE_PREFIX, GOAL_PROVIDER_AUTH_PAUSE_PREFIX, GOAL_PROVIDER_API_PAUSE_PREFIX, GOAL_MODEL_CONFIG_PAUSE_PREFIX, GOAL_RUNTIME_PAUSE_PREFIX, GOAL_PROVIDER_FILTERED_PAUSE_REASON, GOAL_CONTINUATION_PROMPT, TurnFlow;
+var BLUN_CORE_TOOL_NAMES, BLUN_LEAN_TOOL_NAMES, BLUN_ATTACHMENT_MARKER_RE, BLUN_TELEGRAM_OUTBOUND_TOOL_RE, BLUN_TELEGRAM_CHANNEL_RE, BLUN_TOOL_BUDGET_RATIO, createDeferredToolLoader, mediaToolNamesForTurnText, rankedSupportToolNamesForGoal, rankedToolNamesForTurnText, rememberDeferredToolAfterNotFound, toolSchemaBudgetTokens, assessTodoListBounds, assessTodoMaintenanceUpdate, enforceSingleTodoWritePerStep, todoRefreshWorkCallLimit, projectRecurringCronHistory, TelegramDeliveryLedger, createRuntimeCognitiveTurnLifecycle, cognitiveFocusScopesForTurn, buildCognitiveWorkFocus, buildAttentionQueueItem, LLM_NOT_SET_MESSAGE, GOAL_CONTINUATION_ORIGIN, GOAL_COMPLETION_REMINDER_NAME, GOAL_BLOCKED_REMINDER_NAME, GOAL_RATE_LIMIT_PAUSE_REASON, GOAL_PROVIDER_CONNECTION_PAUSE_PREFIX, GOAL_PROVIDER_AUTH_PAUSE_PREFIX, GOAL_PROVIDER_API_PAUSE_PREFIX, GOAL_MODEL_CONFIG_PAUSE_PREFIX, GOAL_RUNTIME_PAUSE_PREFIX, GOAL_PROVIDER_FILTERED_PAUSE_REASON, GOAL_CONTINUATION_PROMPT, TurnFlow;
 var init_turn = __esmMin((() => {
 	init_dist$4();
 	init_src$4();
@@ -261977,7 +262930,7 @@ var init_turn = __esmMin((() => {
 	init_user_message_offload();
 	init_assistant_message_offload();
 	({ CORE_TOOL_NAMES: BLUN_CORE_TOOL_NAMES, createDeferredToolLoader, mediaToolNamesForTurnText, rankedSupportToolNamesForGoal, rankedToolNamesForTurnText, rememberDeferredToolAfterNotFound, toolSchemaBudgetTokens } = createRequire(import.meta.url)("./bin/turn-tool-performance-policy.cjs"));
-	({ enforceSingleTodoWritePerStep } = createRequire(import.meta.url)("./bin/todo-list-turn-policy.cjs"));
+	({ assessTodoListBounds, assessTodoMaintenanceUpdate, enforceSingleTodoWritePerStep, todoRefreshWorkCallLimit } = createRequire(import.meta.url)("./bin/todo-list-turn-policy.cjs"));
 	({ projectRecurringCronHistory } = createRequire(import.meta.url)("./bin/recurring-cron-history-policy.cjs"));
 	({ TelegramDeliveryLedger } = createRequire(import.meta.url)("./bin/repeated-user-message-projection.cjs"));
 	({ createRuntimeCognitiveTurnLifecycle } = createRequire(import.meta.url)("./bin/cognitive-turn-lifecycle.cjs"));
@@ -261994,6 +262947,15 @@ var init_turn = __esmMin((() => {
 		kind: "system_trigger",
 		name: "goal_continuation"
 	};
+	function goalContinuationOrigin(origin) {
+		const cronRunId = origin?.kind === "cron_job" ? origin.runId : origin?.cronRunId;
+		if (cronRunId === void 0 && origin?.toolScope === void 0) return GOAL_CONTINUATION_ORIGIN;
+		return {
+			...GOAL_CONTINUATION_ORIGIN,
+			...(cronRunId === void 0 ? {} : { cronRunId }),
+			...(origin?.toolScope === void 0 ? {} : { toolScope: origin.toolScope })
+		};
+	}
 	GOAL_COMPLETION_REMINDER_NAME = "goal_completion";
 	GOAL_BLOCKED_REMINDER_NAME = "goal_blocked";
 	GOAL_RATE_LIMIT_PAUSE_REASON = "Paused after provider rate limit";
@@ -262041,6 +263003,7 @@ var init_turn = __esmMin((() => {
 		stepToolCallKeys = /* @__PURE__ */ new Map();
 		telemetryModeByTurn = /* @__PURE__ */ new Map();
 		currentStepByTurn = /* @__PURE__ */ new Map();
+		toolScopeByTurn = /* @__PURE__ */ new Map();
 		interruptedTelemetryTurnIds = /* @__PURE__ */ new Set();
 		stepFailureByTurn = /* @__PURE__ */ new Map();
 		currentStep = 0;
@@ -262307,10 +263270,11 @@ var init_turn = __esmMin((() => {
 				duplicate: false
 			};
 		}
-		retry(trigger) {
+		retry(trigger, toolScope) {
 			return this.prompt([], {
 				kind: "retry",
-				trigger
+				trigger,
+				...(toolScope === void 0 ? {} : { toolScope })
 			});
 		}
 		launch(input, origin) {
@@ -262388,6 +263352,9 @@ var init_turn = __esmMin((() => {
 		get hasActiveTurn() {
 			return this.activeTurn !== null && this.activeTurn !== "resuming";
 		}
+		toolScopeForTurn(turnId) {
+			return this.toolScopeByTurn.get(turnId);
+		}
 		ensureActiveTurn() {
 			if (this.activeTurn === null || this.activeTurn === "resuming") throw new Error("No active turn");
 			return this.activeTurn;
@@ -262499,15 +263466,23 @@ var init_turn = __esmMin((() => {
 		*/
 		async turnWorker(firstTurnId, input, origin, signal) {
 			const ownsActiveTurn = () => this.activeTurn !== null && this.activeTurn !== "resuming" && this.activeTurn.controller.signal === signal;
+			let result;
 			try {
-				if (this.agent.goal.getGoal().goal?.status === "active") return await this.driveGoal(firstTurnId, input, origin, signal);
-				const end = await this.runOneTurn(firstTurnId, input, origin, signal, true);
-				if (this.agent.goal.getGoal().goal?.status === "active" && end.event.reason !== "cancelled" && end.event.reason !== "failed" && end.event.reason !== "filtered") return await this.driveGoal(this.allocateTurnId(), [{
-					type: "text",
-					text: GOAL_CONTINUATION_PROMPT
-				}], GOAL_CONTINUATION_ORIGIN, signal);
-				return end;
+				if (this.agent.goal.getGoal().goal?.status === "active") result = await this.driveGoal(firstTurnId, input, origin, signal);
+				else {
+					const end = await this.runOneTurn(firstTurnId, input, origin, signal, true);
+					if (this.agent.goal.getGoal().goal?.status === "active" && end.event.reason !== "cancelled" && end.event.reason !== "failed" && end.event.reason !== "filtered") result = await this.driveGoal(this.allocateTurnId(), [{
+						type: "text",
+						text: GOAL_CONTINUATION_PROMPT
+					}], goalContinuationOrigin(origin), signal);
+					else result = end;
+				}
+				return result;
+			} catch (error) {
+				if (origin.kind === "cron_job" && typeof origin.runId === "string") this.agent.cron?.observeRunWorkerFailed(origin.runId);
+				throw error;
 			} finally {
+				if (result !== void 0 && origin.kind === "cron_job" && typeof origin.runId === "string") this.agent.cron?.observeRunWorkerEnded(origin.runId, result.event);
 				if (ownsActiveTurn()) this.activeTurn = null;
 			}
 		}
@@ -262561,7 +263536,7 @@ var init_turn = __esmMin((() => {
 					type: "text",
 					text: GOAL_CONTINUATION_PROMPT
 				}];
-				turnOrigin = GOAL_CONTINUATION_ORIGIN;
+				turnOrigin = goalContinuationOrigin(origin);
 			}
 		}
 		async endGoalTurnWithoutModel(turnId, input, origin) {
@@ -262609,6 +263584,7 @@ var init_turn = __esmMin((() => {
 			this.currentStepByTurn.set(turnId, 0);
 			this.recordExternalReportSources(turnId, origin);
 			const persistedOrigin = durablePromptOrigin(origin);
+			if (persistedOrigin.toolScope !== void 0) this.toolScopeByTurn.set(turnId, persistedOrigin.toolScope);
 			this.agent.telemetry.track("turn_started", {
 				mode: telemetryMode,
 				...this.requestProviderProps()
@@ -262716,6 +263692,7 @@ var init_turn = __esmMin((() => {
 			if (ended.reason !== "completed") this.trackTurnInterrupted(turnId, this.currentStepByTurn.get(turnId) ?? this.currentStep);
 			this.telemetryModeByTurn.delete(turnId);
 			this.currentStepByTurn.delete(turnId);
+			this.toolScopeByTurn.delete(turnId);
 			this.interruptedTelemetryTurnIds.delete(turnId);
 			this.cognitiveActionEvidenceByTurn.delete(turnId);
 			this.cognitiveExternalReportsByTurn.delete(turnId);
@@ -262789,6 +263766,7 @@ var init_turn = __esmMin((() => {
 		async runStepLoop(turnId, signal, input, origin) {
 			let stopHookContinuationUsed = false;
 			let goalOutcomeMessageContinuationUsed = false;
+			let directSteerContinuationPending = false;
 			const directReplyTurnStop = createDirectReplyTurnStop(blunExtractText(input));
 			const deduper = new ToolCallDeduplicator({ telemetry: this.agent.telemetry });
 			if (blunTurnNeedsInitialMcp(input, origin)) await blunWaitForInitialMcpBudget(this.agent.mcp, signal);
@@ -262812,13 +263790,14 @@ var init_turn = __esmMin((() => {
 			let previousStepToolOutcome = "initial";
 			let currentStepHadTool = false;
 			let currentStepHadFailure = false;
+			let currentLoopStep = 0;
 			while (true) {
 				signal.throwIfAborted();
 				const model = this.agent.config.model;
 				const loopControl = this.agent.blunConfig?.loopControl;
 				let stopForGoalBudget = false;
 				try {
-					const originTools = blunToolsForOrigin(this.agent.injection.filterPersonalMemoryToolsForTurn(turnId, input, origin, this.agent.tools.loopTools), origin);
+					const originTools = filterToolsForCronScope(blunToolsForOrigin(this.agent.injection.filterPersonalMemoryToolsForTurn(turnId, input, origin, this.agent.tools.loopTools), origin), origin.toolScope);
 					const compactConversationTool = originTools.find((tool) => tool.name === "CompactConversation");
 					const eligibleTools = originTools.filter((tool) => tool.name !== "CompactConversation" || this.agent.fullCompaction.isProactiveCompactionEligible());
 					const turnRequiredToolNames = new Set(requiredToolNames);
@@ -262844,12 +263823,13 @@ var init_turn = __esmMin((() => {
 						eligibleToolSchemaTokens: estimateTokensForTools(eligibleTools),
 						selectedToolSchemaTokens: estimateTokensForTools(selectedTools)
 					});
+					const turnHistory = () => fastConversation ? turnThinkingEffort === "off" ? blunStandaloneConversationHistory(this.agent.context.history) : blunFastConversationHistory(this.agent.context.history) : origin.kind === "cron_job" && origin.recurring === true ? projectRecurringCronHistory(this.agent.context.history, origin.jobId) : personalMemoryRecall === void 0 ? this.agent.context.history : [...this.agent.context.history, personalMemoryRecall];
 					return (await runTurn({
 						turnId: String(turnId),
 						signal,
 						llm: turnLLM,
-						buildMessages: () => this.agent.context.project(fastConversation ? turnThinkingEffort === "off" ? blunStandaloneConversationHistory(this.agent.context.history) : blunFastConversationHistory(this.agent.context.history) : origin.kind === "cron_job" && origin.recurring === true ? projectRecurringCronHistory(this.agent.context.history, origin.jobId) : personalMemoryRecall === void 0 ? this.agent.context.history : [...this.agent.context.history, personalMemoryRecall], { dropOrphanResults: true }),
-						buildMessagesStrict: () => this.agent.context.project(fastConversation ? turnThinkingEffort === "off" ? blunStandaloneConversationHistory(this.agent.context.history) : blunFastConversationHistory(this.agent.context.history) : origin.kind === "cron_job" && origin.recurring === true ? projectRecurringCronHistory(this.agent.context.history, origin.jobId) : personalMemoryRecall === void 0 ? this.agent.context.history : [...this.agent.context.history, personalMemoryRecall], {
+						buildMessages: () => this.agent.context.project(blunRepeatActiveTurnPrompt(turnHistory(), input, currentLoopStep), { dropOrphanResults: true }),
+						buildMessagesStrict: () => this.agent.context.project(blunRepeatActiveTurnPrompt(turnHistory(), input, currentLoopStep), {
 							synthesizeMissing: true,
 							dropOrphanResults: true,
 							dedupeDuplicateToolCalls: true,
@@ -262870,6 +263850,7 @@ var init_turn = __esmMin((() => {
 						},
 						hooks: {
 							beforeStep: async ({ signal: stepSignal, stepNumber }) => {
+								currentLoopStep = stepNumber;
 								await this.agent.records.flush();
 								await this.agent.toolResultBatchOffload.detect();
 								this.agent.microCompaction.detect();
@@ -262913,7 +263894,8 @@ var init_turn = __esmMin((() => {
 									});
 									return { llm: this.agent.llmForTurn(workStepThinkingEffort), tools: selectedTools };
 								}
-								const steerEfforts = pendingSteers.map((steer) => blunTurnHasAttachment(steer.input) ? void 0 : selectThinkingEffortForBufferedSteer(blunExtractText(blunThinkingIntentInput(steer.input)), steer.origin.kind));
+							if (pendingSteers.some((steer) => directMessageAllowsWorkContinuation(blunExtractText(steer.input)))) directSteerContinuationPending = true;
+							const steerEfforts = pendingSteers.map((steer) => blunTurnHasAttachment(steer.input) ? void 0 : selectThinkingEffortForBufferedSteer(blunExtractText(blunThinkingIntentInput(steer.input)), steer.origin.kind));
 								if (steerEfforts.some((effort) => effort === void 0)) return;
 								const steerInput = pendingSteers.flatMap((steer) => [...steer.input]);
 								const steerThinkingEffort = "low";
@@ -262959,10 +263941,22 @@ var init_turn = __esmMin((() => {
 								deduper.endStep();
 								return stopForGoalBudget || directReplyTurnStop.shouldStop() ? { stopTurn: true } : void 0;
 							},
-							shouldContinueAfterStop: async (ctx) => {
-								const { signal } = ctx;
-								if (this.matchingSteers().length > 0) return { continue: true };
-								signal.throwIfAborted();
+						shouldContinueAfterStop: async (ctx) => {
+							const { signal } = ctx;
+							if (this.matchingSteers().length > 0) return { continue: true };
+							signal.throwIfAborted();
+							if (directSteerContinuationPending) {
+								directSteerContinuationPending = false;
+								this.agent.context.appendUserMessage([{
+									type: "text",
+									text: "The private Telegram DM was handled. Continue the exact work that was active before it arrived. Do not re-read completed evidence; perform the next unfinished action now."
+								}], {
+									kind: "system_trigger",
+									name: "telegram_direct_work_resume"
+								});
+								this.setActiveSteerAcceptance(turnId, true);
+								return { continue: true };
+							}
 								if (!goalOutcomeMessageContinuationUsed && isGoalOutcomeReminderOrigin(this.agent.context.history.at(-1)?.origin)) {
 									goalOutcomeMessageContinuationUsed = true;
 									if (!hasStepBudgetRemaining(loopControl?.maxStepsPerTurn, ctx.stepNumber)) {
@@ -262997,6 +263991,8 @@ var init_turn = __esmMin((() => {
 							prepareToolExecution: async (ctx) => {
 								const todoTurnPolicy = enforceSingleTodoWritePerStep(ctx);
 								if (todoTurnPolicy !== void 0) return todoTurnPolicy;
+								const todoBoundsPolicy = enforceTodoListBounds(this.agent, ctx);
+								if (todoBoundsPolicy !== void 0) return todoBoundsPolicy;
 								const goalTodoPolicy = enforceGoalTodoPolicy(this.agent, ctx);
 								if (goalTodoPolicy !== void 0) return goalTodoPolicy;
 								const ideaPolicy = enforceIdeaToolPolicy(this.agent, ctx);
@@ -263092,6 +264088,7 @@ var init_turn = __esmMin((() => {
 		buildDispatchEvent(turnId) {
 			return createLoopEventDispatcher({
 				appendTranscriptRecord: async (event) => {
+					this.agent.cron?.observeLoopEvent(turnId, event);
 					this.agent.context.appendLoopEvent(event);
 				},
 				emitLiveEvent: (event) => {
@@ -264119,20 +265116,16 @@ var init_codebase_search$1 = __esmMin((() => {
 * `CODEBASE_INDEX_SCRIPT` env override, then to a search from cwd.
 */
 function resolveScriptPath() {
-	const envPath = process.env["CODEBASE_INDEX_SCRIPT"];
-	if (envPath !== void 0 && envPath.length > 0) return envPath;
-	try {
-		return fileURLToPath(new URL("../../../../../codebase-index/codebase_index.py", import.meta.url));
-	} catch {}
-	return "";
+	return resolveCodebaseIndexScript(import.meta.url, process.env["CODEBASE_INDEX_SCRIPT"]);
 }
-var CodebaseSearchInputSchema, SCRIPT_TIMEOUT_MS, CodebaseSearchTool;
+var resolveCodebaseIndexScript, CodebaseSearchInputSchema, SCRIPT_TIMEOUT_MS, CodebaseSearchTool;
 var init_codebase_search = __esmMin((() => {
 	init_zod$1();
 	init_rule_match();
 	init_input_schema();
 	init_result_builder();
 	init_codebase_search$1();
+	({ resolveCodebaseIndexScript } = createRequire(import.meta.url)("./bin/codebase-search-runtime.cjs"));
 	CodebaseSearchInputSchema = object({
 		query: string().min(1, "Query cannot be empty.").describe("A natural-language question or concept describing what the code does. Examples: \"keyboard event handling\", \"retry with exponential backoff\", \"where chat messages are routed to the model\"."),
 		top: number$1().int().positive().default(5).describe("Maximum number of results to return. Defaults to 5.")
@@ -264153,7 +265146,7 @@ var init_codebase_search = __esmMin((() => {
 				description: `Semantic search: ${args.query.length > 50 ? `${args.query.slice(0, 50)}…` : args.query}`,
 				display: {
 					kind: "command",
-					command: `python codebase_index.py query . "${args.query}" --top ${String(args.top)}`,
+					command: `python codebase_index.py query . "${args.query}" --top ${String(args.top)} --model auto`,
 					cwd: this.cwd,
 					description: `Codebase semantic search`,
 					language: "bash"
@@ -264173,7 +265166,9 @@ var init_codebase_search = __esmMin((() => {
 					this.cwd,
 					args.query,
 					"--top",
-					String(args.top)
+					String(args.top),
+					"--model",
+					"auto"
 				], {
 					cwd: this.cwd,
 					timeout: SCRIPT_TIMEOUT_MS,
@@ -264806,10 +265801,12 @@ var init_builtin = __esmMin((() => {
 	init_task_list();
 	init_task_output();
 	init_task_update();
+	init_task_resume();
 	init_task_stop();
 	init_cron_create();
 	init_cron_delete();
 	init_cron_list();
+	init_cron_runs();
 	init_agent$1();
 	init_agent_swarm();
 	init_ask_user();
@@ -264828,6 +265825,7 @@ var init_builtin = __esmMin((() => {
 	init_exit_plan_mode();
 	init_bash();
 	init_todo_list();
+	init_programmatic_tool();
 	init_fetch_url();
 	init_web_search();
 	init_codebase_search();
@@ -265038,9 +266036,10 @@ var init_tool$1 = __esmMin((() => {
 		hasUserTool(name) {
 			return this.userTools.has(name);
 		}
-		inheritUserTools(parent) {
+		inheritUserTools(parent, excludedNames = /* @__PURE__ */ new Set()) {
 			for (const tool of parent.userTools.values()) {
 				if (!parent.enabledTools.has(tool.name)) continue;
+				if (excludedNames.has(tool.name)) continue;
 				this.registerUserTool({
 					name: tool.name,
 					description: tool.description,
@@ -265255,9 +266254,13 @@ var init_tool$1 = __esmMin((() => {
 			}, this.agent.skills?.registry.getSkillRoots() ?? []);
 			const allowBackground = this.enabledTools.has("TaskList") && this.enabledTools.has("TaskOutput") && this.enabledTools.has("TaskStop");
 			const goalToolsEnabled = this.agent.type === "main";
+			const readBudget = () => ({
+				contextTokens: this.agent.context.tokenCountWithPending,
+				maxContextTokens: this.agent.fullCompaction.getEffectiveMaxContextTokens()
+			});
 			this.builtinTools = new Map([
-				new ReadTool(kaos, workspace),
-				new ReadBatchTool(kaos, workspace),
+				new ReadTool(kaos, workspace, readBudget),
+				new ReadBatchTool(kaos, workspace, readBudget),
 				new WriteTool(kaos, workspace, () => this.agent.context.history, toolServices?.lsp),
 				new EditTool(kaos, workspace, () => this.agent.context.history, toolServices?.lsp),
 				new GrepTool(kaos, workspace, this.agent.telemetry),
@@ -265272,13 +266275,17 @@ var init_tool$1 = __esmMin((() => {
 				goalToolsEnabled && new UpdateGoalTool(this.agent),
 				this.agent.rpc?.requestQuestion && new AskUserQuestionTool(this.agent),
 				new TodoListTool(this.toolStore),
+				new ProgrammaticTool(),
 				new CompactConversationTool(this.agent),
 				new TaskListTool(background),
 				new TaskOutputTool(background),
 				new TaskUpdateTool(background),
+				this.agent.subagentHost && allowBackground && background.resumeStore && new TaskResumeTool(background, this.agent.subagentHost),
 				new TaskStopTool(background),
 				this.agent.cron && new CronCreateTool(this.agent.cron),
 				this.agent.cron && new CronListTool(this.agent.cron),
+				this.agent.cron && new CronRunListTool(this.agent.cron),
+				this.agent.cron && new CronRunOutputTool(this.agent.cron),
 				this.agent.cron && new CronDeleteTool(this.agent.cron),
 				this.agent.skills?.registry.listInvocableSkills().length && new SkillTool(this.agent),
 				this.agent.subagentHost && new AgentTool(this.agent.subagentHost, background, DEFAULT_AGENT_PROFILES["agent"]?.subagents, {
@@ -265461,6 +266468,9 @@ var init_fallback_llm = __esmMin((() => {
 		get capability() {
 			return this.current.llm.capability;
 		}
+		get thinkingEffort() {
+			return this.current.llm.thinkingEffort;
+		}
 		async prepareRequestBoundary(params, rebuildMessages) {
 			params.signal.throwIfAborted();
 			this.rebuildBoundaryMessages = rebuildMessages;
@@ -265722,7 +266732,7 @@ var init_agent = __esmMin((() => {
 	({ createEffectiveSystemPromptResolver } = createRequire(import.meta.url)("./bin/effective-system-prompt-cache-policy.cjs"));
 	({ resolveProviderIdleTimeoutMs } = createRequire(import.meta.url)("./bin/provider-idle-timeout-policy.cjs"));
 	({ capCompletionBudgetForAdaptiveEffort, capTurnCompletionTokens, selectThinkingEffortForBufferedSteer, selectThinkingEffortForWorkStep, selectThinkingEffortForTurn } = createRequire(import.meta.url)("./bin/turn-thinking-policy.cjs"));
-	PINNED_MODEL_ALIASES = new Set(["king-blun", "pruefstand"]);
+	PINNED_MODEL_ALIASES = new Set(["blun/king"]);
 	Agent$1 = class {
 		type;
 		_kaos;
@@ -266264,6 +267274,7 @@ var init_agent = __esmMin((() => {
 		}
 		emitEvent(event) {
 			if (this.records.restoring) return;
+			this.cron?.observeAgentEvent(event);
 			return this.rpc?.emitEvent?.(event);
 		}
 		emitStatusUpdated() {
@@ -298124,7 +299135,9 @@ var init_session$1 = __esmMin((() => {
 					homedir,
 					type,
 					parentAgentId,
-					swarmItem: options.swarmItem
+					swarmItem: options.swarmItem,
+					profileName: options.profileName,
+					skillPolicy: options.skillPolicy
 				};
 				this.writeMetadata();
 			}
@@ -298400,7 +299413,7 @@ var init_session$1 = __esmMin((() => {
 						missingCapability: part.missingCapability
 					});
 				},
-				skills: this.skills,
+				skills: config.skillRegistry === void 0 ? this.skills : config.skillRegistry,
 				rpc: proxyWithExtraPayload(this.rpc, { agentId: id }),
 				modelProvider: this.options.providerManager,
 				hookEngine: config.hookEngine ?? this.hookEngine,
@@ -298465,9 +299478,16 @@ var init_session$1 = __esmMin((() => {
 			const parentAgentId = meta.parentAgentId ?? null;
 			const parent = parentAgentId === null ? void 0 : await this.resumeAgent(parentAgentId, [...stack, id]);
 			try {
-				const agent = this.instantiateAgent(id, meta.homedir, meta.type, {}, parentAgentId);
+				let restoredSkillPolicy;
+				if (meta.type === "sub" && meta.skillPolicy !== void 0) {
+					if (meta.profileName === void 0) throw new Error("SUBAGENT_SKILL_POLICY_CHANGED: persisted subagent profile is unavailable; spawn a new subagent");
+					const persistedProfile = DEFAULT_AGENT_PROFILES[parent?.agent.config.profileName ?? "agent"]?.subagents?.[meta.profileName] ?? DEFAULT_AGENT_PROFILES["agent"]?.subagents?.[meta.profileName];
+					if (persistedProfile === void 0) throw new Error("SUBAGENT_SKILL_POLICY_CHANGED: persisted subagent profile was not found; spawn a new subagent");
+					restoredSkillPolicy = restoreSubagentSkillPolicy(persistedProfile.subagentSkills, meta.skillPolicy, this.skills);
+				}
+				const agent = this.instantiateAgent(id, meta.homedir, meta.type, restoredSkillPolicy === void 0 ? {} : { skillRegistry: restoredSkillPolicy.registry }, parentAgentId);
 				const result = await agent.resume();
-				await this.restoreAgentProfileHandle(agent, meta, parent?.agent);
+				await this.restoreAgentProfileHandle(agent, meta, parent?.agent, restoredSkillPolicy);
 				this.ensureBaselineSkill(agent);
 				agent.setRuntimeSystemPromptAppend(this.accountMemoryContext);
 				this.agents.set(id, agent);
@@ -298480,18 +299500,33 @@ var init_session$1 = __esmMin((() => {
 				throw error;
 			}
 		}
-		async restoreAgentProfileHandle(agent, meta, parentAgent) {
+		async restoreAgentProfileHandle(agent, meta, parentAgent, restoredSkillPolicy) {
 			if (agent.config.systemPrompt === "") return;
-			const profile = this.resolvePersistedProfile(agent, meta, parentAgent);
+			let profile = this.resolvePersistedProfile(agent, meta, parentAgent);
 			if (profile === void 0) return;
+			if (restoredSkillPolicy !== void 0) profile = profileWithSubagentSkillTools(profile, restoredSkillPolicy);
 			agent.setActiveProfile(profile, this.options.blunHomeDir);
 			await agent.refreshSystemPrompt();
 		}
 		ensureBaselineSkill(agent) {
-			if (agent.skills?.ensureBaseline(BASELINE_SKILL_NAME) !== true) this.log.warn("baseline skill is unavailable", { skill: BASELINE_SKILL_NAME });
+			const skill = this.skills.getSkill(BASELINE_SKILL_NAME);
+			if (skill === void 0) {
+				this.log.warn("baseline skill is unavailable", { skill: BASELINE_SKILL_NAME });
+				return;
+			}
+			const variant = `${BASELINE_SKILL_ORIGIN_PREFIX}${skill.name}`;
+			if (agent.context.history.some((message) => message.origin?.kind === "injection" && message.origin.variant === variant)) return;
+			agent.context.appendSystemReminder(renderBaselineSkillPrompt({
+				skillName: skill.name,
+				skillSource: skill.source,
+				skillDir: skill.dir
+			}), {
+				kind: "injection",
+				variant
+			});
 		}
 		resolvePersistedProfile(agent, meta, parentAgent) {
-			const profileName = agent.config.profileName;
+			const profileName = meta.profileName ?? agent.config.profileName;
 			if (profileName === void 0) return void 0;
 			if (meta.type === "sub") return DEFAULT_AGENT_PROFILES[parentAgent?.config.profileName ?? "agent"]?.subagents?.[profileName] ?? DEFAULT_AGENT_PROFILES["agent"]?.subagents?.[profileName];
 			return DEFAULT_AGENT_PROFILES[profileName];
@@ -313280,27 +314315,14 @@ var init_local_fetch_url = __esmMin((() => {
 				kind: "passthrough"
 			};
 			return {
-				content: this.extractMainContent(body),
+				content: this.extractMainContent(body, url),
 				kind: "extracted"
 			};
 		}
-		extractMainContent(html) {
-			const primary = parseHTML(html);
-			try {
-				const article = new import_readability.Readability(primary.document, { charThreshold: 0 }).parse();
-				if (article !== null) {
-					const text = (article.textContent ?? "").trim();
-					if (text.length > 0) {
-						const title = (article.title ?? "").trim();
-						return title.length > 0 ? `# ${title}\n\n${text}` : text;
-					}
-				}
-			} catch {}
-			const { document } = parseHTML(html);
-			const titleText = (document.querySelector("title")?.textContent ?? "").trim();
-			const fallbackText = ((document.querySelector("article") ?? document.querySelector("main") ?? document.querySelector("body"))?.textContent ?? "").trim();
-			if (fallbackText.length === 0) throw new Error("Failed to extract meaningful content from the page. The page may require JavaScript to render.");
-			return titleText.length > 0 ? `# ${titleText}\n\n${fallbackText}` : fallbackText;
+		extractMainContent(html, baseUrl) {
+			const content = htmlToResearchMarkdown(html, baseUrl);
+			if (content.length === 0) throw new Error("Failed to extract meaningful content from the page. The page may require JavaScript to render.");
+			return content;
 		}
 	};
 }));
@@ -314837,7 +315859,7 @@ var init_provider_manager = __esmMin((() => {
 	init_config$4();
 	init_errors$8();
 	MANAGED_PROVIDER_NAME$2 = "managed:blun";
-	MANAGED_BLUN_MODEL_ALIASES$1 = new Set(["blun/king", "king-blun"]);
+	MANAGED_BLUN_MODEL_ALIASES$1 = new Set(["blun/king"]);
 	ProviderManager = class {
 		options;
 		runtimeModelContexts = /* @__PURE__ */ new Map();
@@ -314878,7 +315900,7 @@ var init_provider_manager = __esmMin((() => {
 			if (!Number.isSafeInteger(input.maxContextTokens) || input.maxContextTokens <= 0) throw new BlunError(ErrorCodes.CONFIG_INVALID, "Runtime model context must be a positive integer.");
 			const alias = this.config.models?.[input.modelAlias];
 			const providerName = alias?.provider ?? this.config.defaultProvider;
-			if (alias === void 0 || providerName !== input.providerName || alias.model !== input.model || providerName !== "managed:blun" && providerName !== "king-blun") throw new BlunError(ErrorCodes.CONFIG_INVALID, "Runtime model context does not match the configured internal BLUN model.");
+			if (alias === void 0 || providerName !== input.providerName || alias.model !== input.model || providerName !== "managed:blun") throw new BlunError(ErrorCodes.CONFIG_INVALID, "Runtime model context does not match the configured BLUN model.");
 			const previous = this.runtimeModelContexts.get(input.modelAlias);
 			this.runtimeModelContexts.set(input.modelAlias, {
 				providerName: input.providerName,
@@ -319113,6 +320135,7 @@ function toBrokerRequest$1(req, params) {
 		tool_name: req.toolName,
 		action: req.action,
 		tool_input_display: req.display,
+		allow_edit: req.allowEdit === true ? true : void 0,
 		created_at: params.createdAt,
 		expires_at: params.expiresAt
 	};
@@ -319127,7 +320150,8 @@ function toAgentCoreResponse$1(resp) {
 		decision: resp.decision,
 		scope: resp.scope,
 		feedback: resp.feedback,
-		selectedLabel: resp.selected_label
+		selectedLabel: resp.selected_label,
+		edited_tool_input: resp.edited_tool_input
 	};
 }
 var IApprovalService;
@@ -372834,16 +373858,18 @@ var PendingApproval = class {
 	createdAt;
 	expiresAt;
 	protocolRequest;
+	editContext;
 	_resolveFn;
 	_rejectFn;
 	_settled = false;
-	constructor(approvalId, sessionId, toolCallId, createdAt, expiresAt, protocolRequest, _resolveFn, _rejectFn) {
+	constructor(approvalId, sessionId, toolCallId, createdAt, expiresAt, protocolRequest, editContext, _resolveFn, _rejectFn) {
 		this.approvalId = approvalId;
 		this.sessionId = sessionId;
 		this.toolCallId = toolCallId;
 		this.createdAt = createdAt;
 		this.expiresAt = expiresAt;
 		this.protocolRequest = protocolRequest;
+		this.editContext = editContext;
 		this._resolveFn = _resolveFn;
 		this._rejectFn = _rejectFn;
 	}
@@ -372917,7 +373943,10 @@ let ApprovalService = class ApprovalService extends Disposable {
 			toolCallId: req.toolCallId
 		}, "approval requested");
 		return new Promise((resolve, reject) => {
-			this._pending.set(approvalId, new PendingApproval(approvalId, req.sessionId, req.toolCallId, createdAt, expiresAt, protocolRequest, resolve, reject));
+			this._pending.set(approvalId, new PendingApproval(approvalId, req.sessionId, req.toolCallId, createdAt, expiresAt, protocolRequest, {
+				toolName: req.toolName,
+				editCount: Number.isSafeInteger(req.approvalEditCount) ? req.approvalEditCount : 0
+			}, resolve, reject));
 			this._byToolCallId.set(req.toolCallId, approvalId);
 		});
 	}
@@ -372946,6 +373975,14 @@ let ApprovalService = class ApprovalService extends Disposable {
 	isPending(approvalId) {
 		return this._pending.has(approvalId);
 	}
+	getEditContext(approvalId) {
+		const pending = this._pending.get(approvalId);
+		if (!pending) return void 0;
+		return {
+			toolName: pending.editContext.toolName,
+			editCount: pending.editContext.editCount
+		};
+	}
 	listPending(sessionId) {
 		return Array.from(this._pending.values()).filter((p) => p.sessionId === sessionId).map((p) => p.protocolRequest);
 	}
@@ -372988,6 +374025,24 @@ const approvalParamsSchema = object({
 	session_id: string().min(1),
 	approval_id: string().min(1)
 });
+const EDITABLE_APPROVAL_RAW_BODY_LIMIT = 65536;
+async function captureEditableApprovalRawBody(req, reply, payload) {
+	const chunks = [];
+	let totalBytes = 0;
+	for await (const chunk of payload) {
+		const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		totalBytes += bytes.length;
+		if (totalBytes > EDITABLE_APPROVAL_RAW_BODY_LIMIT) {
+			const error = new Error("Approval response body exceeds the editable-input limit");
+			error.statusCode = 413;
+			throw error;
+		}
+		chunks.push(bytes);
+	}
+	const rawBody = Buffer.concat(chunks, totalBytes);
+	req.editableApprovalRawBody = rawBody.toString("utf8");
+	return Readable.from([rawBody]);
+}
 function registerApprovalsRoutes(app, ix) {
 	const listRoute = defineRoute({
 		method: "GET",
@@ -373032,7 +374087,27 @@ function registerApprovalsRoutes(app, ix) {
 			reply.send(errEnvelope(ErrorCode$1.APPROVAL_NOT_FOUND, `approval ${approval_id} not found`, req.id));
 			return;
 		}
-		const inProc = toAgentCoreResponse$1(body);
+		const editContext = broker.getEditContext(approval_id);
+		if (editContext === void 0 || typeof req.editableApprovalRawBody !== "string") {
+			reply.send(errEnvelope(ErrorCode$1.VALIDATION_FAILED, "approval response could not be validated from its raw JSON body", req.id));
+			return;
+		}
+		let inProc;
+		try {
+			const rawResponse = parseEditedToolInputJson(req.editableApprovalRawBody);
+			const normalized = validateEditedApprovalDecision({
+				response: rawResponse,
+				toolName: editContext.toolName,
+				editCount: editContext.editCount
+			});
+			inProc = normalized.decision === "edited" ? {
+				decision: "edited",
+				edited_tool_input: normalized.editedToolInput
+			} : normalized;
+		} catch (error) {
+			reply.send(errEnvelope(ErrorCode$1.VALIDATION_FAILED, error instanceof Error ? error.message : String(error), req.id));
+			return;
+		}
 		broker.resolve(approval_id, inProc);
 		broker.markResolved(approval_id);
 		const result = {
@@ -373041,6 +374116,7 @@ function registerApprovalsRoutes(app, ix) {
 		};
 		reply.send(okEnvelope(result, req.id));
 	});
+	route.options.preParsing = captureEditableApprovalRawBody;
 	app.post(route.path, route.options, route.handler);
 }
 //#endregion
@@ -402988,7 +404064,7 @@ function createProgram(version, onMain, onPluginNodeRunner = () => {}) {
 		"high",
 		"xhigh",
 		"max"
-	])).addOption(new Option("--permission-mode <mode>", "Permission mode for this invocation (auto, manual, yolo).").choices([
+	])).option("--swarm", "Start in swarm mode.", false).addOption(new Option("--permission-mode <mode>", "Permission mode for this invocation (auto, manual, yolo).").choices([
 		"auto",
 		"manual",
 		"yolo"
@@ -403022,6 +404098,7 @@ function createProgram(version, onMain, onPluginNodeRunner = () => {}) {
 			plan: raw["plan"],
 			model: raw["model"],
 			effort: raw["effort"],
+			swarm: raw["swarm"] === true,
 			permissionMode: raw["permissionMode"],
 			forkSession: raw["forkSession"],
 			outputFormat: raw["outputFormat"],
@@ -416599,7 +417676,7 @@ const EFFORT_STAGE_LABELS = {
 	medium: "Deep",
 	high: "Forge",
 	xhigh: "Apex",
-	max: "Swarm"
+	max: "Max"
 };
 const EFFORT_DISPLAY_LABEL_KEYS = {
 	off: "effort.value.off",
@@ -416728,15 +417805,13 @@ var EffortSelectorComponent = class extends Container {
 		}
 		if (matchesKey(data, Key.alt("s")) && this.opts.onSessionOnlySelect !== void 0) {
 			const effort = this.selectedEffort;
-			if (effort === "max" && this.usesLegacyServerStageScale && this.opts.onBlunSwarmSelect !== void 0) this.opts.onBlunSwarmSelect();
-			else if (effort !== void 0) this.opts.onSessionOnlySelect(effort);
+			if (effort !== void 0) this.opts.onSessionOnlySelect(effort);
 			return;
 		}
 		if (matchesKey(data, Key.enter)) if (this.isBlunSwarmSelected) this.opts.onBlunSwarmSelect?.();
 		else {
 			const effort = this.selectedEffort;
-			if (effort === "max" && this.usesLegacyServerStageScale && this.opts.onBlunSwarmSelect !== void 0) this.opts.onBlunSwarmSelect();
-			else if (effort !== void 0) this.opts.onSelect(effort);
+			if (effort !== void 0) this.opts.onSelect(effort);
 		}
 	}
 	render(width) {
@@ -416766,9 +417841,6 @@ var EffortSelectorComponent = class extends Container {
 	get isBlunSwarmSelected() {
 		return this.hasSeparatedBlunSwarm && this.activeIndex === this.efforts.length;
 	}
-	get usesLegacyServerStageScale() {
-		return isServerStageScale(this.efforts);
-	}
 	get hasSeparatedBlunSwarm() {
 		return this.opts.onBlunSwarmSelect !== void 0 && !usesInlineStageScale(this.efforts);
 	}
@@ -419762,7 +420834,7 @@ registerUiCatalogFragment({
 */
 var { projectUnaddressedTelegramContext } = createRequire(import.meta.url)("./bin/telegram-context-projection-policy.cjs");
 var { enqueueTelegramUrgent, rewriteTelegramUrgentEnvelope, telegramUrgentMessage } = createRequire(import.meta.url)("./bin/telegram-urgent-policy.cjs");
-var { createDirectFocusController, createDirectReplyTurnStop, enqueueTelegramDirect, readDirectFocusCheckpoint, rewriteTelegramDirectEnvelope, telegramDirectMessage, writeDirectFocusCheckpoint } = createRequire(import.meta.url)("./bin/telegram-direct-focus-policy.cjs");
+var { createDirectFocusController, createDirectReplyTurnStop, directMessageAllowsWorkContinuation, enqueueTelegramDirect, readDirectFocusCheckpoint, rewriteTelegramDirectEnvelope, telegramDirectMessage, writeDirectFocusCheckpoint } = createRequire(import.meta.url)("./bin/telegram-direct-focus-policy.cjs");
 var { enqueueTelegramAddressed } = createRequire(import.meta.url)("./bin/telegram-addressed-priority.cjs");
 var { enqueueTelegramBotPriority, telegramBotPriorityMessage } = createRequire(import.meta.url)("./bin/telegram-bot-priority.cjs");
 var { createAddressedChannelFocusStore } = createRequire(import.meta.url)("./bin/telegram-addressed-focus.cjs");
@@ -421433,7 +422505,7 @@ async function performEffortSelection(host, alias, effort, persist) {
 	host.setAppState({
 		thinkingEffort: effort,
 		modelFallbackAllowed: false,
-		swarmMode: false,
+		swarmMode: input.cliOptions.swarm === true,
 		swarmModeEntry: void 0
 	});
 	renderSwarmModeMarker(host, "inactive");
@@ -423409,7 +424481,6 @@ async function handleGoalCommand(host, args) {
 }
 const IDEA_CONTRACT_MARKER = "Work as a self-directing employee:";
 const IDEA_ALLOWED_CHANNELS = Object.freeze([]);
-const GOAL_TODO_REFRESH_WORK_CALL_LIMIT = 8;
 const GOAL_TODO_EVIDENCE_LIMIT = 8;
 const TODO_MAINTENANCE_RECOVERY_TOOL_NAMES = new Set([
 	"TodoList",
@@ -423435,6 +424506,22 @@ function ideaTodos(agent) {
 	const value = agent.tools.store?.["todo"];
 	return Array.isArray(value) ? value : [];
 }
+function goalTodoProgressState(agent) {
+	return agent.goalTodoPolicyState ??= {
+		workCallsSinceRefresh: 0,
+		refreshRequired: false,
+		unchangedRefreshStreak: 0,
+		evidenceRevision: 0,
+		lastMaintenanceEvidenceRevision: 0
+	};
+}
+function enforceTodoListBounds(agent, context) {
+	if (context.toolCall.name !== "TodoList" || !Array.isArray(context.args?.todos)) return;
+	return assessTodoListBounds({
+		currentTodos: ideaTodos(agent),
+		nextTodos: context.args.todos
+	});
+}
 function validInitialIdeaPlan(value) {
 	if (!Array.isArray(value) || value.length === 0) return false;
 	let active = 0;
@@ -423471,28 +424558,21 @@ function goalTodoEvidenceLabel(toolName, args, isError) {
 function recordGoalTodoEvidence(agent, toolName, args, isError) {
 	if (isIdeaGoal(agent) || agent.goal.getActiveGoal() === null) return;
 	const name = String(toolName ?? "");
-	const progress = agent.goalTodoPolicyState ??= {
-		workCallsSinceRefresh: 0,
-		refreshRequired: false
-	};
-	if (name === "TodoList") {
-		if (isError !== true) progress.recentEvidence = [];
-		return;
-	}
+	const progress = goalTodoProgressState(agent);
+	if (name === "TodoList") return;
 	if (name === "UpdateGoal" || TELEGRAM_DELIVERY_TOOL_RE.test(name)) return;
 	const recentEvidence = Array.isArray(progress.recentEvidence) ? progress.recentEvidence : [];
 	recentEvidence.push(goalTodoEvidenceLabel(name, args, isError));
 	progress.recentEvidence = recentEvidence.slice(-GOAL_TODO_EVIDENCE_LIMIT);
+	progress.evidenceRevision = (Number(progress.evidenceRevision) || 0) + 1;
 }
 function goalTodoMaintenanceMode(agent) {
 	if (isIdeaGoal(agent)) return null;
 	const todos = ideaTodos(agent);
 	if (todos.length === 0) return agent.goal.getActiveGoal() === null ? null : "initial";
-	const progress = agent.goalTodoPolicyState ??= {
-		workCallsSinceRefresh: 0,
-		refreshRequired: false
-	};
-	if (!progress.refreshRequired && progress.workCallsSinceRefresh < GOAL_TODO_REFRESH_WORK_CALL_LIMIT) return null;
+	const progress = goalTodoProgressState(agent);
+	const refreshWorkCallLimit = todoRefreshWorkCallLimit(progress.unchangedRefreshStreak);
+	if (!progress.refreshRequired && progress.workCallsSinceRefresh < refreshWorkCallLimit) return null;
 	progress.refreshRequired = true;
 	return "refresh";
 }
@@ -423506,8 +424586,9 @@ function goalTodoMaintenanceTools(eligibleTools, selectedTools) {
 }
 function buildGoalTodoMaintenanceSystemPrompt(agent, mode) {
 	const todos = ideaTodos(agent);
+	const requireConcreteProgress = mode === "refresh" && (agent.goalTodoPolicyState?.unchangedRefreshStreak ?? 0) >= 2;
 	const visibleTodoList = todos.length === 0 ? "The visible TodoList is empty." : ["Current visible TodoList:", ...todos.map((todo) => `- [${String(todo?.status ?? "pending")}] ${String(todo?.title ?? "").trim()}`)].join("\n");
-	const action = mode === "initial" ? "Create the visible task-specific TodoList now. Keep exactly one item in_progress and every later item pending." : "Update the visible TodoList now, before any more task work. Mark only evidenced steps done, keep the actual current step in_progress, and leave later steps pending. If the current title is stale, refine it to the concrete verified substep.";
+	const action = mode === "initial" ? "Create the visible task-specific TodoList now. Keep exactly one item in_progress and every later item pending." : requireConcreteProgress ? "Recent TodoList refreshes stayed semantically unchanged despite new work-tool evidence. Make a truthful concrete transition now: mark evidenced items done, refine the active title to the next verified substep, or record blocked, waiting_approval, or aborted when that is the real state. If the available evidence proves no boundary, preserve the list unchanged; the call remains executable." : "Update the visible TodoList now, before any more task work. Mark only evidenced steps done, keep the actual current step in_progress, and leave later steps pending. If the current title is stale, refine it to the concrete verified substep.";
 	return `<todo-maintenance>
 TODO MAINTENANCE IS THE ONLY ACTION FOR THIS STEP.
 ${action}
@@ -423519,11 +424600,12 @@ ${visibleTodoList}
 function buildGoalTodoMaintenanceMessages(agent, mode) {
 	const goal = agent.goal.getActiveGoal();
 	const todos = ideaTodos(agent);
+	const requireConcreteProgress = mode === "refresh" && (agent.goalTodoPolicyState?.unchangedRefreshStreak ?? 0) >= 2;
 	const recentEvidence = Array.isArray(agent.goalTodoPolicyState?.recentEvidence) ? agent.goalTodoPolicyState.recentEvidence.slice(-GOAL_TODO_EVIDENCE_LIMIT) : [];
 	const objective = String(goal?.objective ?? "Continue the current multi-step task.").trim();
 	const visibleTodoList = todos.length === 0 ? "The visible TodoList is empty." : ["Current visible TodoList:", ...todos.map((todo) => `- [${String(todo?.status ?? "pending")}] ${String(todo?.title ?? "").trim()}`)].join("\n");
 	const verifiedEvidence = recentEvidence.length === 0 ? "No new work-tool evidence is available." : ["Recent bounded work-tool evidence since the last accepted TodoList:", ...recentEvidence.map((entry) => `- ${entry}`)].join("\n");
-	const action = mode === "initial" ? "Create the task-specific TodoList from the active objective. Keep exactly one item in_progress and every later item pending." : "Refresh the TodoList from the current verified state. Mark finished work done, keep the actual current step in_progress, and leave later work pending. Completed items disappear automatically after this call.";
+	const action = mode === "initial" ? "Create the task-specific TodoList from the active objective. Keep exactly one item in_progress and every later item pending." : requireConcreteProgress ? "The recent refreshes stayed semantically unchanged despite new evidence. Make a truthful concrete transition now: finish evidenced items, refine the active title to the next verified substep, or use blocked, waiting_approval, or aborted when accurate. If no boundary is proven, preserve the list unchanged; never invent progress." : "Refresh the TodoList from the current verified state. Mark finished work done, keep the actual current step in_progress, and leave later work pending. Completed items disappear automatically after this call.";
 	const request = [
 		"Return exactly one TodoList tool call and no prose.",
 		action,
@@ -423542,10 +424624,7 @@ function enforceGoalTodoPolicy(agent, context) {
 	if (TELEGRAM_DELIVERY_TOOL_RE.test(String(context.toolCall.name ?? ""))) return;
 	const activeGoal = agent.goal.getActiveGoal();
 	const todos = ideaTodos(agent);
-	const progress = agent.goalTodoPolicyState ??= {
-		workCallsSinceRefresh: 0,
-		refreshRequired: false
-	};
+	const progress = goalTodoProgressState(agent);
 	if (todos.length === 0) {
 		const startsTrackedList = context.toolCall.name === "TodoList" && Array.isArray(context.args?.todos) && context.args.todos.length > 0;
 		if (activeGoal === null && !startsTrackedList) return;
@@ -423561,6 +424640,9 @@ function enforceGoalTodoPolicy(agent, context) {
 		};
 		progress.workCallsSinceRefresh = 0;
 		progress.refreshRequired = false;
+		progress.unchangedRefreshStreak = 0;
+		progress.recentEvidence = [];
+		progress.lastMaintenanceEvidenceRevision = Number(progress.evidenceRevision) || 0;
 		progress.allVisibleWorkCompleted = false;
 		return;
 	}
@@ -423584,9 +424666,26 @@ function enforceGoalTodoPolicy(agent, context) {
 				reason: "A maintained TodoList must keep exactly one item in_progress while unfinished work remains."
 			};
 		}
+		const evidenceRevision = Number(progress.evidenceRevision) || 0;
+		const lastMaintenanceEvidenceRevision = Number(progress.lastMaintenanceEvidenceRevision) || 0;
+		const maintenanceUpdate = assessTodoMaintenanceUpdate({
+			currentTodos: todos,
+			nextTodos,
+			unchangedRefreshStreak: progress.unchangedRefreshStreak,
+			recentEvidenceCount: evidenceRevision > lastMaintenanceEvidenceRevision ? (progress.recentEvidence?.length ?? 0) : 0
+		});
 		progress.allVisibleWorkCompleted = nextTodos.length > 0 && nextTodos.every((todo) => todo?.status === "done");
 		progress.workCallsSinceRefresh = 0;
 		progress.refreshRequired = false;
+		progress.unchangedRefreshStreak = maintenanceUpdate.unchangedRefreshStreak;
+		progress.lastMaintenanceEvidenceRevision = evidenceRevision;
+		if (!maintenanceUpdate.preserveRecentEvidence) progress.recentEvidence = [];
+		if (maintenanceUpdate.emitStalledWarning) agent.emitEvent({
+			type: "warning",
+			code: "todo-maintenance-stalled",
+			message: "TodoList stayed semantically unchanged across three evidence-bearing maintenance cycles. Work tools remain available; the next maintenance check is backed off while the active step is refined.",
+			blocked: false
+		});
 		return;
 	}
 	if (activeGoal !== null && context.toolCall.name === "UpdateGoal" && (context.args?.status === "complete" || context.args?.status === "blocked")) {
@@ -423602,7 +424701,7 @@ function enforceGoalTodoPolicy(agent, context) {
 	}
 	if (context.toolCall.id === context.toolCalls[0]?.id) {
 		progress.workCallsSinceRefresh += 1;
-		if (progress.workCallsSinceRefresh > GOAL_TODO_REFRESH_WORK_CALL_LIMIT) progress.refreshRequired = true;
+		if (progress.workCallsSinceRefresh > todoRefreshWorkCallLimit(progress.unchangedRefreshStreak)) progress.refreshRequired = true;
 	}
 	if (!progress.refreshRequired) return;
 	return {
@@ -432019,6 +433118,11 @@ function agentSwarmResultSummaryFromOutput(output) {
 	};
 }
 function parseAgentSwarmResultStatuses(output) {
+	const structured = parseStructuredSwarmDisplay(output);
+	if (structured.recognized) return structured.statuses.map((entry) => ({
+		...entry,
+		status: entry.status === "aborted" ? "cancelled" : entry.status
+	}));
 	const xmlStatuses = parseAgentSwarmXmlResultStatuses(output);
 	if (xmlStatuses.length > 0) return xmlStatuses;
 	return parseAgentSwarmLegacyResultStatuses(output);
@@ -499005,9 +500109,11 @@ registerUiCatalogFragment({
 		"approval.search.scope": "scope: {scope}",
 		"approval.backgroundTask": "{status} {kind} task {taskId}: {description}",
 		"approval.hint.feedback": "Type feedback · ↵ submit.",
+		"approval.hint.editArguments": "Enter the complete replacement JSON object · ↵ submit.",
 		"approval.hint.main": "↑/↓ select · {numbers} choose · ↵ confirm{preview}",
 		"approval.hint.preview": " · ctrl+e preview",
 		"approval.choice.approveOnce": "Approve once",
+		"approval.choice.editArguments": "Edit arguments (JSON)",
 		"approval.choice.approveSession": "Approve for this session",
 		"approval.choice.reject": "Reject",
 		"approval.choice.rejectFeedback": "Reject with feedback",
@@ -499017,6 +500123,7 @@ registerUiCatalogFragment({
 		"approval.transcript.approvedSession": "Approved for session",
 		"approval.transcript.rejected": "Rejected",
 		"approval.transcript.cancelled": "Cancelled",
+		"approval.transcript.edited": "Arguments edited",
 		"approval.transcript.action": "{decision}: {action}",
 		"approval.transcript.actionWithFeedback": "{decision}: {action} — \"{feedback}\""
 	},
@@ -499036,9 +500143,11 @@ registerUiCatalogFragment({
 		"approval.search.scope": "Bereich: {scope}",
 		"approval.backgroundTask": "Aufgabe {taskId} ({status}, {kind}): {description}",
 		"approval.hint.feedback": "Feedback eingeben · ↵ absenden.",
+		"approval.hint.editArguments": "Vollständiges Ersatz-JSON-Objekt eingeben · ↵ absenden.",
 		"approval.hint.main": "↑/↓ auswählen · {numbers} wählen · ↵ bestätigen{preview}",
 		"approval.hint.preview": " · ctrl+e Vorschau",
 		"approval.choice.approveOnce": "Einmal genehmigen",
+		"approval.choice.editArguments": "Argumente bearbeiten (JSON)",
 		"approval.choice.approveSession": "Für diese Sitzung genehmigen",
 		"approval.choice.reject": "Ablehnen",
 		"approval.choice.rejectFeedback": "Ablehnen und Feedback geben",
@@ -499048,6 +500157,7 @@ registerUiCatalogFragment({
 		"approval.transcript.approvedSession": "Für diese Sitzung genehmigt",
 		"approval.transcript.rejected": "Abgelehnt",
 		"approval.transcript.cancelled": "Abgebrochen",
+		"approval.transcript.edited": "Argumente bearbeitet",
 		"approval.transcript.action": "{decision}: {action}",
 		"approval.transcript.actionWithFeedback": "{decision}: {action} – „{feedback}“"
 	},
@@ -499067,9 +500177,11 @@ registerUiCatalogFragment({
 		"approval.search.scope": "Ámbito: {scope}",
 		"approval.backgroundTask": "Tarea {taskId} ({status}, {kind}): {description}",
 		"approval.hint.feedback": "Escribe tus comentarios · ↵ enviar.",
+		"approval.hint.editArguments": "Introduce el objeto JSON completo de sustitución · ↵ enviar.",
 		"approval.hint.main": "↑/↓ seleccionar · {numbers} elegir · ↵ confirmar{preview}",
 		"approval.hint.preview": " · ctrl+e vista previa",
 		"approval.choice.approveOnce": "Aprobar una vez",
+		"approval.choice.editArguments": "Editar argumentos (JSON)",
 		"approval.choice.approveSession": "Aprobar durante esta sesión",
 		"approval.choice.reject": "Rechazar",
 		"approval.choice.rejectFeedback": "Rechazar y enviar comentarios",
@@ -499079,6 +500191,7 @@ registerUiCatalogFragment({
 		"approval.transcript.approvedSession": "Aprobado durante esta sesión",
 		"approval.transcript.rejected": "Rechazado",
 		"approval.transcript.cancelled": "Cancelado",
+		"approval.transcript.edited": "Argumentos modificados",
 		"approval.transcript.action": "{decision}: {action}",
 		"approval.transcript.actionWithFeedback": "{decision}: {action} — «{feedback}»"
 	},
@@ -499098,9 +500211,11 @@ registerUiCatalogFragment({
 		"approval.search.scope": "Portée : {scope}",
 		"approval.backgroundTask": "Tâche {taskId} ({status}, {kind}) : {description}",
 		"approval.hint.feedback": "Saisissez un commentaire · ↵ envoyer.",
+		"approval.hint.editArguments": "Saisissez l’objet JSON de remplacement complet · ↵ envoyer.",
 		"approval.hint.main": "↑/↓ sélectionner · {numbers} choisir · ↵ confirmer{preview}",
 		"approval.hint.preview": " · ctrl+e aperçu",
 		"approval.choice.approveOnce": "Approuver une fois",
+		"approval.choice.editArguments": "Modifier les arguments (JSON)",
 		"approval.choice.approveSession": "Approuver pour cette session",
 		"approval.choice.reject": "Refuser",
 		"approval.choice.rejectFeedback": "Refuser et ajouter un commentaire",
@@ -499110,6 +500225,7 @@ registerUiCatalogFragment({
 		"approval.transcript.approvedSession": "Approuvé pour cette session",
 		"approval.transcript.rejected": "Refusé",
 		"approval.transcript.cancelled": "Annulé",
+		"approval.transcript.edited": "Arguments modifiés",
 		"approval.transcript.action": "{decision} : {action}",
 		"approval.transcript.actionWithFeedback": "{decision} : {action} — « {feedback} »"
 	},
@@ -499129,9 +500245,11 @@ registerUiCatalogFragment({
 		"approval.search.scope": "Omfattning: {scope}",
 		"approval.backgroundTask": "Uppgift {taskId} ({status}, {kind}): {description}",
 		"approval.hint.feedback": "Skriv återkoppling · ↵ skicka.",
+		"approval.hint.editArguments": "Ange hela JSON-objektet som ska ersätta det befintliga · ↵ skicka.",
 		"approval.hint.main": "↑/↓ markera · {numbers} välj · ↵ bekräfta{preview}",
 		"approval.hint.preview": " · ctrl+e förhandsgranska",
 		"approval.choice.approveOnce": "Godkänn en gång",
+		"approval.choice.editArguments": "Redigera argument (JSON)",
 		"approval.choice.approveSession": "Godkänn för den här sessionen",
 		"approval.choice.reject": "Avvisa",
 		"approval.choice.rejectFeedback": "Avvisa och lämna återkoppling",
@@ -499141,6 +500259,7 @@ registerUiCatalogFragment({
 		"approval.transcript.approvedSession": "Godkänt för den här sessionen",
 		"approval.transcript.rejected": "Avvisat",
 		"approval.transcript.cancelled": "Avbrutet",
+		"approval.transcript.edited": "Argument redigerade",
 		"approval.transcript.action": "{decision}: {action}",
 		"approval.transcript.actionWithFeedback": "{decision}: {action} – ”{feedback}”"
 	},
@@ -499324,7 +500443,7 @@ var ApprovalPanelComponent = class extends Container {
 		if (!option) return;
 		this.onResponse({
 			response: option.response,
-			feedback: feedback || void 0,
+			...(option.input_kind === "edited_tool_input_json" ? { edited_tool_input_json: feedback } : { feedback: feedback || void 0 }),
 			selected_label: option.selected_label
 		});
 	}
@@ -499334,6 +500453,7 @@ var ApprovalPanelComponent = class extends Container {
 		if (option.requires_feedback === true) {
 			this.selectedIndex = index;
 			this.feedbackMode = true;
+			if (option.input_kind === "edited_tool_input_json") this.feedbackInput.setValue(this.request.data.editable_tool_input_json ?? "{}");
 		} else this.submit(index);
 	}
 	handleInput(data) {
@@ -499430,7 +500550,7 @@ var ApprovalPanelComponent = class extends Container {
 			if (option.description !== void 0 && option.description.length > 0 && !(this.feedbackMode && option.requires_feedback === true && isSelected)) for (const descLine of wrapTextWithAnsi(option.description, Math.max(20, width - 7))) lines.push(indent(`     ${dim(descLine)}`));
 		}
 		lines.push("");
-		if (this.feedbackMode) lines.push(indent(dim(uiText("approval.hint.feedback"))));
+		if (this.feedbackMode) lines.push(indent(dim(uiText(this.choiceAt(this.selectedIndex)?.input_kind === "edited_tool_input_json" ? "approval.hint.editArguments" : "approval.hint.feedback"))));
 		else {
 			const expandHint = hasPreviewable ? uiText("approval.hint.preview") : "";
 			lines.push(indent(dim(uiText("approval.hint.main", {
@@ -502687,12 +503807,18 @@ async function refreshAllProviderModels(host, options = {}) {
 }
 //#endregion
 //#region src/tui/reverse-rpc/approval/adapter.ts
-function defaultApprovalChoices() {
+function defaultApprovalChoices(allowEdit = false) {
 	return [
 		{
 			label: uiText("approval.choice.approveOnce"),
 			response: "approved"
 		},
+		...allowEdit ? [{
+			label: uiText("approval.choice.editArguments"),
+			response: "edited",
+			requires_feedback: true,
+			input_kind: "edited_tool_input_json"
+		}] : [],
 		{
 			label: uiText("approval.choice.approveSession"),
 			response: "approved_for_session"
@@ -502729,7 +503855,8 @@ function adaptApprovalRequest(event) {
 		action: resolved.action ?? event.action,
 		description: resolved.description,
 		display: resolved.blocks,
-		choices: adaptChoices(event.toolName, event.display)
+		choices: adaptChoices(event.toolName, event.display, event.allowEdit === true),
+		editable_tool_input_json: event.allowEdit === true ? canonicalEditedToolInputJson(event.editableToolInput) : void 0
 	};
 }
 function resolveDisplay(toolName, display, action) {
@@ -502833,6 +503960,10 @@ function inferFileOp(toolName) {
 	return "read";
 }
 function adaptPanelResponse(response) {
+	if (response.response === "edited") return {
+		decision: "edited",
+		edited_tool_input_json: response.edited_tool_input_json
+	};
 	if (response.response === "approved_for_session") return {
 		decision: "approved",
 		scope: "session",
@@ -502996,10 +504127,10 @@ function adaptDisplay(display) {
 		default: return [];
 	}
 }
-function adaptChoices(toolName, display) {
+function adaptChoices(toolName, display, allowEdit = false) {
 	if (toolName === "ExitPlanMode" || display.kind === "plan_review") return adaptPlanReviewChoices(display);
 	if (display.kind === "goal_start") return adaptGoalStartChoices(display);
-	return defaultApprovalChoices();
+	return defaultApprovalChoices(allowEdit);
 }
 function adaptGoalStartChoices(display) {
 	return goalStartOptions(display.mode).map((option) => option.value === "cancel" ? {
@@ -503095,7 +504226,7 @@ function createApprovalRequestHandler(controller, onResponse, options = {}) {
 				}).catch(() => {});
 			}
 			const response = await pending;
-			relay?.complete(response);
+			relay?.complete(response.decision === "edited" ? { decision: "edited" } : response);
 			onResponse?.(event, response);
 			return response;
 		} catch {
@@ -517611,6 +518742,8 @@ var BlunTUI = class {
 				yolo: startupInput.cliOptions.yolo,
 				auto: startupInput.cliOptions.auto,
 				plan: startupInput.cliOptions.plan,
+				effort: startupInput.cliOptions.effort,
+				swarm: startupInput.cliOptions.swarm,
 				model: startupInput.cliOptions.model,
 				startupNotice: startupInput.startupNotice
 			}
@@ -518027,6 +519160,7 @@ var BlunTUI = class {
 		const createSessionOptions = {
 			workDir,
 			model: BLUN_KING_MODEL_ALIAS,
+			thinking: startup.effort,
 			permission: startup.auto ? "auto" : startup.yolo ? "yolo" : void 0,
 			planMode: startup.plan ? true : void 0
 		};
@@ -518073,7 +519207,7 @@ var BlunTUI = class {
 					}
 				}
 			} else session = await this.harness.createSession(createSessionOptions);
-			if (session !== void 0 && shouldReplayHistory) await this.applyStartupModesToResumedSession(session);
+			if (session !== void 0 && (shouldReplayHistory || startup.effort !== void 0 || startup.swarm)) await this.applyStartupModesToResumedSession(session);
 		} catch (error) {
 			if (!isOAuthLoginRequiredError(error)) throw error;
 			this.authFlow.enterLoginRequiredStartupState();
@@ -519225,16 +520359,16 @@ var BlunTUI = class {
 		};
 		if (installedGuard !== void 0) this.pendingChannelReplyGuard = installedGuard;
 		const imagePart = channelImagePath !== void 0 ? buildChannelImagePart(channelImagePath) : void 0;
-		this.setAppState({
-			model: BLUN_KING_MODEL_ALIAS,
-			modelFallbackAllowed: false
-		});
 		const directNotice = channelDirect === true ? ["A private Telegram DM has priority over background, group, and loop work.", channelDirectResume === true ? "The user explicitly resumed work. Answer any remaining direct content, then continue the exact saved work checkpoint." : "The runtime saved the active work checkpoint. Answer the private conversation naturally, without exposing internal task, cron, checkpoint, queue, or lane narration. Unless the user explicitly asks to pause, stop, or wait, continue the exact saved work checkpoint automatically after the direct conversation."].join("\n") : void 0;
 		const focusedModelInput = directNotice === void 0 ? modelInput : `${directNotice}\n\n${modelInput}`;
 		const promptInput = imagePart !== void 0 && this.canReadImages() ? [{
 			type: "text",
 			text: focusedModelInput
 		}, imagePart] : focusedModelInput;
+		this.setAppState({
+			model: BLUN_KING_MODEL_ALIAS,
+			modelFallbackAllowed: false
+		});
 		session.promptAccepted(promptInput, channelPromptOrigin(channelReportSources)).then((result) => {
 			if (result.duplicate === true) {
 				this.traceTelegramDelivery?.({ stage: "committed", ...channelDeliveryTrace, route: "prompt", reason: "duplicate" });
@@ -519966,6 +521100,8 @@ var BlunTUI = class {
 		const { startup } = this.options;
 		if (startup.auto) await session.setPermission("auto");
 		else if (startup.yolo) await session.setPermission("yolo");
+		if (startup.effort !== void 0) await session.setThinking(startup.effort);
+		if (startup.swarm && !(await session.getStatus()).swarmMode) await session.setSwarmMode(true, "effort");
 		if (startup.plan) {
 			if (!(await session.getStatus()).planMode) await session.setPlanMode(true);
 		}
@@ -519974,6 +521110,8 @@ var BlunTUI = class {
 		const { startup } = this.options;
 		if (startup.auto) this.setAppState({ permissionMode: "auto" });
 		else if (startup.yolo) this.setAppState({ permissionMode: "yolo" });
+		if (startup.effort !== void 0) this.setAppState({ thinkingEffort: startup.effort });
+		if (startup.swarm) this.setAppState({ swarmMode: true, swarmModeEntry: "effort" });
 		if (startup.plan) this.setAppState({ planMode: true });
 	}
 	async activateRuntime() {
@@ -520286,6 +521424,9 @@ var BlunTUI = class {
 			case "cancelled":
 				decision = uiText("approval.transcript.cancelled");
 				break;
+			case "edited":
+				decision = uiText("approval.transcript.edited");
+				break;
 		}
 		const content = response.feedback !== void 0 && response.feedback.length > 0 ? uiText("approval.transcript.actionWithFeedback", {
 			decision,