chainlesschain 0.166.131 → 0.166.133

package/README.md

@@ -2,11 +2,35 @@
 
 Command-line interface for installing, configuring, and managing [ChainlessChain](https://www.chainlesschain.com), including the coding agent, governed tools, sessions, memory, and IDE integrations.
 
-## Source candidate 0.166.131 (unreleased)
+## CLI 0.166.133
 
-Main now prepares CLI **0.166.131** with Kernel **0.1.11**, Open VSX **0.37.169** and JetBrains **0.4.186** source candidates. It contains the later independent Goal, Memory, MCP/Skills, temporary-worktree and Terra changes; the verified public installation below remains `.130`. Publish and verify the changed kernel first, then require complete Linux/Windows/macOS CLI CI and Strict Sandbox at the exact new source, OIDC publication and public readback before releasing IDEs. No candidate release tag or publication is created by this preparation; 34/45 acceptance and the original unresolved dispatch remain unchanged.
+This source tree targets package version **0.166.133**. It preserves required empty OpenAI Responses reasoning summaries, applies the self-evolution switch to all model-owning `cc ui` entry points, and supports explicitly configured OpenAI-compatible local/LAN platforms through `custom`, with optional credentials and unchanged endpoint/model aliases. It also exposes canonical allowed mutation paths in provider tool schemas while retaining execution-time scope and file-identity checks. Over **400 focused regression tests** passed for the model-platform and self-evolution fixes; these controlled tests do not establish live-platform acceptance or public availability.
 
-## CLI 0.166.130 — current public release (2026-10-29)
+When this version is available from npm, install it with `npm i -g chainlesschain@0.166.133 --registry https://registry.npmjs.org`. The companion version pair is Open VSX **0.37.171** / JetBrains **0.4.188**; the CLI is published before its companion extensions. Kernel stays **0.1.11**. Consult the [current release guide](https://docs.chainlesschain.com/chainlesschain/agent-platform-release.html) for verified channel availability. Source preparation alone does not establish publication or release-gate success.
+
+## CLI 0.166.132 — verified public baseline before this source revision
+
+Install: `npm i -g chainlesschain@0.166.132 --registry https://registry.npmjs.org`. Public Open VSX **0.37.170** and approved JetBrains **0.4.187** recommend this CLI; Kernel **0.1.11** is verified upstream. Restart the chat host, then run `cc --version` and `cc doctor`.
+
+This release stops tool execution on truncated responses and permits one replan when complete usage is recorded and budget remains. Recovery preserves the original task, including through role combination, asynchronous recall and readContext continuation. Filtered or incomplete terminal responses and missing task context stop with a clear failure. No independent IDE UI change is included.
+
+Release source: [772fcdbda85bcf91df95bfced5b476dcf4c74614](https://github.com/chainlesschain/chainlesschain/commit/772fcdbda85bcf91df95bfced5b476dcf4c74614). Exact-source [validation gates](https://github.com/chainlesschain/chainlesschain/blob/0d57ebfea919ae941a36a1f11a9ee10964722120/docs/research/cli/evidence/release132-public/gates.json), [OIDC publication run](https://github.com/chainlesschain/chainlesschain/actions/runs/40985169005), [official artifact](https://github.com/chainlesschain/chainlesschain/actions/runs/40985169005/artifacts/12946249806), [independent readback run](https://github.com/chainlesschain/chainlesschain/actions/runs/40986625203), and [public CLI readback](https://github.com/chainlesschain/chainlesschain/blob/0d57ebfea919ae941a36a1f11a9ee10964722120/docs/research/cli/evidence/release132-public/cli.json) identify this public package. [Three-package publication evidence](https://github.com/chainlesschain/chainlesschain/blob/0d57ebfea919ae941a36a1f11a9ee10964722120/docs/research/cli/evidence/release132-public/publication.json).
+
+At historical source `abbe13ad3658ff9e2e100989a4cfefc409d9261c`, the combined local suite actually ran **456 tests across 18 files + 10 real CLI tests across 3 files**, with no skips. Subsequent fixture and native-preflight repairs compared the selected runtime components byte for byte; release source `772fcdbda85bcf91df95bfced5b476dcf4c74614` did **not** repeat that combined local suite. [Component scope evidence](https://github.com/chainlesschain/chainlesschain/blob/0d57ebfea919ae941a36a1f11a9ee10964722120/docs/research/cli/evidence/release132-native-preflight-2026-10-30/review.json) and the release source's [cloud gates](https://github.com/chainlesschain/chainlesschain/blob/0d57ebfea919ae941a36a1f11a9ee10964722120/docs/research/cli/evidence/release132-public/gates.json) retain this distinction. Failed source `40753f179a3dc18760bd64a754b28a46ba718f57` and the earlier superseded `7f8ef64b4bd8b429f97d2e121c440143ed7ddf3b` remain historical; their successful checks do not transfer to this release.
+
+Automatic acceptance remains **34/45**, with **11** unfinished; **3 assisted deliveries** are recorded separately and are not added to that total. The original broker **403** and Memory cold SLO remain unresolved. Publication adds no task acceptance or paid/native admission: **NOT_PAID_READY / NOT_ADMITTED / HOLD** remain. Microsoft Marketplace remains deferred. PC/mobile **v5.0.3.143** remain independent.
+
+## CLI 0.166.131 — previous public release (2026-10-29)
+
+Install: `npm i -g chainlesschain@0.166.131 --registry https://registry.npmjs.org`. Kernel **0.1.11** was published first. Restart the chat host, then run `cc --version` and `cc doctor`. Public Open VSX **0.37.169** / JetBrains **0.4.186** both recommend CLI **0.166.131**; their downloaded packages match the official CI payloads. Microsoft Marketplace is deferred.
+
+This release includes explicit independent Goal `verify:` checks, Memory directory identity and cancellation fixes, MCP subtask and late-connection isolation, Skills download cancellation, rule refresh around compaction, temporary-worktree lifetime fixes and updated Terra capability/billing contracts. Exact-source three-OS CLI / Strict / Kernel checks passed. [OIDC publication](https://github.com/chainlesschain/chainlesschain/actions/runs/40862685540) and [independent public readback](https://github.com/chainlesschain/chainlesschain/actions/runs/40866417524) verified immutable package bytes and signed provenance. [Publication evidence](../../docs/research/cli/evidence/release131-public/publication.json).
+
+Cumulative accepted tasks remain **34/45**, with **11** unfinished. Full Memory SLO, semantic quality and both IDE journeys remain separate acceptance work; the current native generation driver does not automatically use `verify:`. **NOT_PAID_READY / NOT_ADMITTED / HOLD** remain. PC/mobile retain their independent **v5.0.3.143** release. Older notes below retain their historical scope.
+
+[.131 upgrade guide](https://docs.chainlesschain.com/chainlesschain/cli-ide-update-2026-10-29-131.html) · [Runtime design](https://design.chainlesschain.com/release-runtime-update-2026-10-29-131.html).
+
+## CLI 0.166.130 — previous public release (2026-10-29)
 
 Install the verified public package with `npm i -g chainlesschain@0.166.130 --registry https://registry.npmjs.org`. Public Open VSX **0.37.168** and approved JetBrains **0.4.185** both recommend `.130`; restart the chat host and run `cc --version` and `cc doctor`. Microsoft Marketplace remains unpublished; use Open VSX or its versioned VSIX.
 
@@ -54,7 +78,7 @@ Ordinary Agent, `ask`, `chat` and `cc ui` use self-evolution only when enabled.
 
 Run `cc config set evolution.enabled true` to opt in, or `cc config set evolution.enabled false` to switch off. `cc evolution deployment enable` initializes the local signed runtime when needed; `cc evolution deployment disable` turns it off and retains deployment data. `cc evolution deployment status --json` reports the effective state. An explicit `false` also overrides inherited deployment environment variables; explicitly supplied external/managed deployments remain opt-ins when this setting is absent.
 
-The **Skill 自进化配置** page in `cc ui`, VS Code and JetBrains shares this setting. Quick Ask reads it for each new request; stop and restart an already running Agent session to apply changes. Switching off leaves ordinary chat, tool permissions and sandbox policy available. Enabled deployments still enforce their signatures and evidence validation; automatic candidate promotion remains `HOLD`. RRSI evaluation modules are part of the CLI evolution code, but this switch does not itself start a full RRSI campaign or publish learned candidates.
+The **Skill 自进化配置** page in `cc ui`, VS Code and JetBrains shares this setting. Since CLI **0.166.133**, `cc ui` Chat, Agent, Quick Ask, streaming and Personal Data Hub model requests re-read it for each new request, including existing UI sessions. Stop and restart already running terminal or IDE Agent sessions to apply changes there. Switching off leaves ordinary chat, tool permissions and sandbox policy available. Enabled deployments still enforce their signatures and evidence validation; automatic candidate promotion remains `HOLD`. RRSI evaluation modules are part of the CLI evolution code, but this switch does not itself start a full RRSI campaign or publish learned candidates.
 
 Install this release with `npm i -g chainlesschain@0.166.127 --registry https://registry.npmjs.org`. Paired public IDE versions are Open VSX / VS Code **0.37.165** and JetBrains **0.4.182**. Their exact-source release gates and public archive readback passed; Microsoft Marketplace remains unpublished. Child package pins are unchanged. The preceding **0.166.126** JSON recovery-summary repair addresses host-truncated retained context; the same error code can also report other invalid original evidence. Exact-source Linux, Windows and macOS CLI CI and Strict Sandbox passed; GitHub Actions OIDC publication and public package readback are complete. Mobile and PC release [`v5.0.3.142`](https://github.com/chainlesschain/chainlesschain/releases/tag/v5.0.3.142) is public from frozen source `c9881a2b710cf49f0ad3d63673e0998ecc608514`; automatic promotion remains `HOLD`.
 
@@ -229,7 +253,7 @@ Explicit Linux durable permissions require administrator provisioning. Cross-pro
 Install the CLI version published by this release:
 
 ```bash
-npm install -g chainlesschain@0.166.121 --registry https://registry.npmjs.org
+npm install -g chainlesschain@0.166.132 --registry https://registry.npmjs.org
 chainlesschain setup
 ```
 
@@ -2402,19 +2426,23 @@ Configuration is stored at `~/.chainlesschain/config.json`. The CLI creates and
 
 ### Supported LLM Providers
 
-| Provider                   | Default Model          | API Key Required |
-| -------------------------- | ---------------------- | ---------------- |
-| Ollama (Local)             | qwen2.5:7b             | No               |
-| OpenAI                     | gpt-4o                 | Yes              |
-| Anthropic                  | claude-opus-4-6        | Yes              |
-| DeepSeek                   | deepseek-chat          | Yes              |
-| DashScope (Alibaba)        | qwen-turbo             | Yes              |
-| Google Gemini              | gemini-2.0-flash       | Yes              |
-| Mistral AI                 | mistral-large-latest   | Yes              |
-| Volcengine (火山引擎/豆包) | doubao-seed-1-6-251015 | Yes              |
-| Kimi (月之暗面)            | moonshot-v1-auto       | Yes              |
-| MiniMax (海螺AI)           | MiniMax-Text-01        | Yes              |
-| Custom                     | —                      | Yes              |
+| Provider                   | Default Model          | API Key Required   |
+| -------------------------- | ---------------------- | ------------------ |
+| Ollama (Local)             | qwen2.5:7b             | No                 |
+| OpenAI                     | gpt-4o                 | Yes                |
+| Anthropic                  | claude-opus-4-6        | Yes                |
+| DeepSeek                   | deepseek-chat          | Yes                |
+| DashScope (Alibaba)        | qwen-turbo             | Yes                |
+| Google Gemini              | gemini-2.0-flash       | Yes                |
+| Mistral AI                 | mistral-large-latest   | Yes                |
+| Volcengine (火山引擎/豆包) | doubao-seed-1-6-251015 | Yes                |
+| Kimi (月之暗面)            | moonshot-v1-auto       | Yes                |
+| MiniMax (海螺AI)           | MiniMax-Text-01        | Yes                |
+| Custom (OpenAI-compatible) | Set explicitly         | Platform-dependent |
+
+Use `provider: "custom"` for local or LAN model platforms exposing OpenAI-compatible Chat Completions, including LM Studio, vLLM, Xinference, LocalAI, and model-routing gateways. Set the platform's API base URL (for example `http://localhost:1234/v1` or a LAN gateway's documented base path) and exact model name. Supply its API key when required; keyless endpoints are also supported. Chat, Agent, streaming, and connection tests keep that endpoint and model instead of selecting Ollama or a cloud provider.
+
+Self-evolution is optional. With `evolution.enabled: false`, `cc ui` Chat, Agent, Quick Ask, streaming, and Personal Data Hub analysis do not require an Evolution deployment certificate. Existing sessions read the setting again on subsequent requests. Enabled deployments still require valid authentication.
 
 ## File Structure
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chainlesschain",
-  "version": "0.166.131",
+  "version": "0.166.133",
   "description": "CLI for ChainlessChain - install, configure, and manage your personal AI management system",
   "type": "module",
   "bin": {

package/src/assets/linux-subreaper/linux-arm64/manifest.json

@@ -6,5 +6,5 @@
   "imageDigest": "sha256:6395a47a5bd9b038303e94a5e93754258c8480dab64635460f973eb93dc6f4d8",
   "bytes": 778808,
   "linkage": "static",
-  "commit": "c9d0bab231850697df38f2d476c2dd974cbcb6c0"
+  "commit": "2eb0c5b1e048509362f9d980f94acee55c2ffa9f"
 }

package/src/assets/linux-subreaper/linux-x64/manifest.json

@@ -6,5 +6,5 @@
   "imageDigest": "sha256:f162e55ad3f3f72f8a52e9d7f12b5b8db44506c2ca66a14d7d62d5cd4f12498e",
   "bytes": 934160,
   "linkage": "static",
-  "commit": "c9d0bab231850697df38f2d476c2dd974cbcb6c0"
+  "commit": "2eb0c5b1e048509362f9d980f94acee55c2ffa9f"
 }

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.133",
+      "cliVersions": ["0.166.133"],
+      "date": "2026-10-30",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.133: scoped mutation schemas and model platform compatibility (candidate, 2026-10-30)",
+          "body": "- Expose canonical allowed mutation paths in provider tool schemas for scoped write/edit calls. Explain that absolute paths returned by read tools are not valid mutation arguments in that run; execution-time permission, scope and file-identity checks remain authoritative.\n- Preserve the required `summary` array on Responses reasoning items, including empty summaries and replayed older sessions, so tool continuations do not fail with `Missing required parameter: input[n].summary`.\n- Apply the current self-evolution setting to ordinary `cc ui` Chat, Agent, streaming and Personal Data Hub analysis, skills and resolver requests. Disabled requests do not require a deployment certificate; enabled deployments retain authentication checks. Existing UI sessions re-read the setting for subsequent requests.\n- Support explicitly configured `custom` OpenAI-compatible local and LAN platforms across Chat, Agent, streaming and connection probes. Keep the platform's API base path and model alias, allow platform-specific or absent credentials, and do not relabel localhost endpoints as Ollama or fall back to an unrelated cloud account.\n- Validate the model-platform and self-evolution fixes with over 400 focused regression tests, including the actual Chat-session creation path and disabled resolver model/embedding transports. Platform compatibility uses controlled test endpoints; the reported user's live platform was not contacted.\n- Validate the generic schema contract: the new provider-wire suite passed **10/10 tests**; the combined related suites passed **34 tests**, with **1 existing Windows skip**. Local test results do not establish new real-model task success or change the historical **34/45** automatic acceptance total.\n- Prepare candidate pairing Open VSX **0.37.171** / JetBrains **0.4.188** for CLI **0.166.133**. Kernel **0.1.11** and unchanged child packages retain their versions; no independent IDE UI or client release is included.\n- Release requirements: verified public child packages, exact-source multi-OS release gates, CLI OIDC publication and public readback before IDE publication and readback. Consult versioned publication evidence for actual availability. Microsoft Marketplace remains deferred; **0.166.132 / 0.37.170 / 0.4.187** is the preceding verified public pairing."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.132",
+      "cliVersions": ["0.166.132"],
+      "date": "2026-10-30",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.132: output-limit integrity and bounded recovery (candidate, 2026-10-30)",
+          "body": "- Preserve OpenAI-compatible chat-completions termination evidence in JSON and streaming responses. A response ending with `length` cannot execute any of its tool calls or become a successful final answer, even when its arguments happen to be valid JSON.\n- Settle complete physical-call usage before permitting at most one fresh planning iteration within the existing budget. Discard the truncated assistant/tool group; missing usage, incomplete streams, exhausted budgets and repeated truncation remain failures. Cancellation and final-synthesis limits still apply.\n- Reject `content_filter` and explicitly incomplete or ambiguous provider termination before executing tools or reporting completion. Filtered or ambiguous responses do not trigger a recovery request; conflicting SSE frames cannot clear an earlier filter.\n- Bind the current real user task across ordinary tool rounds, recovery, thinking-only turns and review, including canonical planning and recall. Resolve the owned task after provider projection, reject lost or ambiguous mappings, and retain the existing hermetic review contract. Recovery hints remain temporary system suffixes and do not replace the task.\n- Preserve legitimate resumed user-message merges through source mappings owned by the built-in role projector, while rejecting forged mapping fields and arbitrary rewrites. Recheck the task after asynchronous recall so changed content or moved messages cannot acquire a stale binding; keep authenticated history unchanged.\n- Move the existing user message after retained read context without duplicating it or discarding metadata. This preserves task identity after canonical compaction and independent CLI restart, retains historical user messages, and does not invent a fallback task when no user is present.\n- Add protocol and real canonical CLI process regressions for recovery, repeated truncation, missing usage, filtered output and ambiguous termination. Separately install three assisted pagination/history regression deliveries; their independent checks do not change the original 34/45 automatic task result.\n- Repair the VS Code README's current-public and unpublished-candidate sections against the existing Marketplace overview contract, retaining versioned artifacts and historical releases.\n- Pair the candidate with Open VSX 0.37.170 / JetBrains 0.4.187 after CLI publication is verified; Context/Memory Kernel remains 0.1.11. Exact-source full multi-OS gates, OIDC publication and public readback are required. Microsoft Marketplace remains deferred.\n- This change does not bypass the diagnostic broker's HTTP403 rejection or guarantee that a model will produce smaller writes. Real-model task retests follow verified publication of the new versions."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.131",

package/src/gateways/ws/llm-chat-protocol.js

@@ -121,7 +121,7 @@ export async function handleLlmChat(server, id, ws, message) {
     return;
   }
 
-  if (creds.provider !== "ollama" && !creds.apiKey) {
+  if (!["ollama", "custom"].includes(creds.provider) && !creds.apiKey) {
     const envHint = BUILT_IN_PROVIDERS[creds.provider]?.apiKeyEnv;
     send({
       type: `${topic}.result`,

package/src/gateways/ws/personal-data-hub-protocol.js

@@ -25,6 +25,7 @@ import {
 import { importPdh } from "../../lib/pdh-load-error.js";
 import { getAIChatWizard } from "../../lib/personal-data-hub-aichat-wizard.js";
 import { runDedicatedBatchCollectors } from "../../lib/pdh-dedicated-batch-collectors.js";
+import { resolveServerEvolutionFactory } from "../../lib/evolution/optional-ui-model-turn.js";
 import {
   existsSync,
   unlinkSync,
@@ -150,8 +151,9 @@ export async function _tryAdbAutoPullInputPath(hub, name, options) {
     return options || {};
   }
   try {
-    const { createHostAdbBridge } =
-      await import("../../lib/host-adb-bridge.js");
+    const { createHostAdbBridge } = await import(
+      "../../lib/host-adb-bridge.js"
+    );
     const bridge = createHostAdbBridge();
     const content = await bridge.invoke("snapshot.read", {
       fileName: `${name}.json`,
@@ -192,9 +194,15 @@ async function withHub(fn, loadHub = getHub) {
   }
 }
 
-function governedHubLoader(factory) {
+async function governedHubLoader(server) {
+  const factory = await resolveServerEvolutionFactory(server);
   if (typeof factory === "function")
     return () => getGovernedAnalysisHub(factory);
+  if (
+    factory === null &&
+    typeof server?.resolveEvolutionCompositionFactory === "function"
+  )
+    return () => getGovernedAnalysisHub(null, { evolutionDisabled: true });
   const error = new Error(
     "Personal Data Hub model egress requires an authenticated evolution composition factory",
   );
@@ -215,11 +223,13 @@ function validateEntityReference(entityType, entityId) {
 
 export const PERSONAL_DATA_HUB_HANDLERS = {
   "personal-data-hub.ask": async (msg, context = {}) => {
-    const factory = context.server?.evolutionCompositionFactory;
-    return withHub(async (hub) => {
-      if (!hub.engine) throw new Error("Analysis engine unavailable");
-      return await hub.engine.ask(msg.question, msg.options || {});
-    }, governedHubLoader(factory));
+    return withHub(
+      async (hub) => {
+        if (!hub.engine) throw new Error("Analysis engine unavailable");
+        return await hub.engine.ask(msg.question, msg.options || {});
+      },
+      await governedHubLoader(context.server),
+    );
   },
 
   // Path Y: prompt context only, no LLM call. Lets web-shell / mobile host
@@ -668,7 +678,14 @@ export const PERSONAL_DATA_HUB_HANDLERS = {
   "personal-data-hub.resolver-drain": async (msg, context = {}) =>
     withHub(async (hub) => {
       if (!hub.entityResolver) throw new Error("EntityResolver not wired");
-      const factory = context.server?.evolutionCompositionFactory;
+      const factory = await resolveServerEvolutionFactory(context.server);
+      if (
+        factory === null &&
+        typeof context.server?.resolveEvolutionCompositionFactory === "function"
+      )
+        return await hub.drainResolver({ limit: msg.limit || 50 }, null, {
+          evolutionDisabled: true,
+        });
       return await hub.drainResolver({ limit: msg.limit || 50 }, factory);
     }),
 
@@ -691,10 +708,9 @@ export const PERSONAL_DATA_HUB_HANDLERS = {
     withHub((hub) => hub.analysisSkillNames || []),
 
   "personal-data-hub.run-skill": async (msg, context = {}) => {
-    const factory = context.server?.evolutionCompositionFactory;
     return withHub(
       async (hub) => await hub.runSkill(msg.name, msg.options || {}),
-      governedHubLoader(factory),
+      await governedHubLoader(context.server),
     );
   },
 

package/src/gateways/ws/session-core-protocol.js

@@ -19,12 +19,14 @@ function fail(code, message) {
 }
 
 async function canonicalMemoryService(scopeKey) {
-  const { resolveCliContextMemoryCutover } =
-    await import("../../lib/context-memory-kernel/authority.js");
+  const { resolveCliContextMemoryCutover } = await import(
+    "../../lib/context-memory-kernel/authority.js"
+  );
   const decision = resolveCliContextMemoryCutover({ scopeKey });
   if (!decision.canonical) return null;
-  const { createCliCanonicalMemoryService } =
-    await import("../../lib/context-memory-kernel/memory-service.js");
+  const { createCliCanonicalMemoryService } = await import(
+    "../../lib/context-memory-kernel/memory-service.js"
+  );
   return createCliCanonicalMemoryService();
 }
 
@@ -104,8 +106,9 @@ async function sessionsEnd(message) {
   let consolidated = null;
   if (message.consolidate) {
     try {
-      const { consolidateJsonlSession } =
-        await import("../../lib/session-consolidator.js");
+      const { consolidateJsonlSession } = await import(
+        "../../lib/session-consolidator.js"
+      );
       consolidated = await consolidateJsonlSession(message.sessionId, {
         scope: message.scope || "session",
         scopeId: message.scopeId || null,
@@ -249,8 +252,9 @@ async function memoryDelete(message) {
 async function memoryConsolidate(message) {
   if (!message.sessionId) return fail("BAD_REQUEST", "sessionId required");
   try {
-    const { consolidateJsonlSession } =
-      await import("../../lib/session-consolidator.js");
+    const { consolidateJsonlSession } = await import(
+      "../../lib/session-consolidator.js"
+    );
     const result = await consolidateJsonlSession(message.sessionId, {
       scope: message.scope || "session",
       scopeId: message.scopeId || null,
@@ -321,16 +325,17 @@ async function streamRun(message, sender, signal, context) {
   const { buildProviderSource } = await import("../../lib/provider-stream.js");
   const { createStreamRouter } = await loadSingletons();
   const router = createStreamRouter();
-  const { prepareGovernedModelTurn, governModelTokenSource } =
-    await import("../../lib/evolution/governed-model-turn.js");
-  const turn = await prepareGovernedModelTurn(
-    context?.server?.evolutionCompositionFactory ?? null,
-    {
-      mode: "ws-stream",
-      messages: [{ role: "user", content: message.prompt }],
-      signal,
-    },
+  const { governModelTokenSource } = await import(
+    "../../lib/evolution/governed-model-turn.js"
   );
+  const { prepareServerUiModelTurn } = await import(
+    "../../lib/evolution/optional-ui-model-turn.js"
+  );
+  const turn = await prepareServerUiModelTurn(context?.server, {
+    mode: "ws-stream",
+    messages: [{ role: "user", content: message.prompt }],
+    signal,
+  });
   const source = governModelTokenSource(
     buildProviderSource(provider, {
       model: message.model,

package/src/gateways/ws/session-protocol.js

@@ -31,6 +31,7 @@ import {
 } from "../../lib/session-budget-production-root.js";
 import { mergePricing } from "../../lib/llm-pricing.js";
 import { ensureCanonicalSessionTranscript } from "../../lib/session-transcript-migration.js";
+import { prepareServerUiModelTurn } from "../../lib/evolution/optional-ui-model-turn.js";
 
 const PAYLOAD_DIGEST = /^sha256:[0-9a-f]{64}$/;
 const RAW_AUTHORITY_HASH = /^[0-9a-f]{64}$/;
@@ -505,8 +506,9 @@ function sameSessionBudgetConfig(left, right) {
 
 async function _isPhase5EnvelopesEnabled() {
   try {
-    const { getBetaFlags } =
-      await import("../../lib/session-core-singletons.js");
+    const { getBetaFlags } = await import(
+      "../../lib/session-core-singletons.js"
+    );
     const flags = await getBetaFlags();
     return flags.isEnabled(PHASE5_ENVELOPE_FLAG);
   } catch (_e) {
@@ -532,8 +534,9 @@ async function ensureSessionHandler(
     throw error;
   }
 
-  const { WebSocketInteractionAdapter } =
-    await import("../../lib/interaction-adapter.js");
+  const { WebSocketInteractionAdapter } = await import(
+    "../../lib/interaction-adapter.js"
+  );
   const enablePhase5Envelopes = await _isPhase5EnvelopesEnabled();
   const stateSnapshot =
     typeof server.sessionManager.getSessionStateSnapshot === "function"
@@ -605,6 +608,8 @@ async function ensureSessionHandler(
       session,
       interaction: session.interaction,
       evolutionCompositionFactory: server.evolutionCompositionFactory ?? null,
+      prepareUiModelTurn: (context) =>
+        prepareServerUiModelTurn(server, context),
     });
   } else {
     const { WSAgentHandler } = await import("./ws-agent-handler.js");
@@ -661,6 +666,10 @@ async function ensureSessionHandler(
         sessionHostLease,
         sessionBudgetRoot,
         evolutionCompositionFactory: server.evolutionCompositionFactory,
+        resolveEvolutionCompositionFactory:
+          typeof server.resolveEvolutionCompositionFactory === "function"
+            ? () => server.resolveEvolutionCompositionFactory()
+            : null,
         skillOutcomeIndex: server.skillOutcomeIndex,
         skillVectorAuthority: server.skillVectorAuthority,
         ...server.runtimeAdmissionDependencies,
@@ -1733,8 +1742,9 @@ export async function handleSubAgentList(server, id, ws, message) {
   const sessionId = message?.sessionId || null;
 
   try {
-    const { SubAgentRegistry } =
-      await import("../../lib/sub-agent-registry.js");
+    const { SubAgentRegistry } = await import(
+      "../../lib/sub-agent-registry.js"
+    );
     const registry = SubAgentRegistry.getInstance();
 
     let payload;
@@ -1796,8 +1806,9 @@ export async function handleSubAgentGet(server, id, ws, message) {
   }
 
   try {
-    const { SubAgentRegistry } =
-      await import("../../lib/sub-agent-registry.js");
+    const { SubAgentRegistry } = await import(
+      "../../lib/sub-agent-registry.js"
+    );
     const snapshot = SubAgentRegistry.getInstance().getById(subAgentId);
 
     if (!snapshot) {

package/src/gateways/ws/ws-agent-handler.js

@@ -183,6 +183,7 @@ export class WSAgentHandler {
     sessionBudgetRoot = null,
     hostResourceBudget = null,
     evolutionCompositionFactory = null,
+    resolveEvolutionCompositionFactory = null,
     skillOutcomeIndex = null,
     skillVectorAuthority = null,
     skillRuntimeAdmission = null,
@@ -265,6 +266,15 @@ export class WSAgentHandler {
       throw new TypeError("evolutionCompositionFactory must be a function");
     }
     this._evolutionCompositionFactory = evolutionCompositionFactory;
+    if (
+      resolveEvolutionCompositionFactory !== null &&
+      typeof resolveEvolutionCompositionFactory !== "function"
+    )
+      throw new TypeError(
+        "resolveEvolutionCompositionFactory must be a function",
+      );
+    this._resolveEvolutionCompositionFactory =
+      resolveEvolutionCompositionFactory;
     this._skillOutcomeIndex =
       skillOutcomeIndex === null
         ? null
@@ -337,6 +347,14 @@ export class WSAgentHandler {
       : Object.freeze(hostSystemPrefix);
   }
 
+  async _refreshEvolutionFactory() {
+    if (this._resolveEvolutionCompositionFactory === null) return;
+    const current = await this._resolveEvolutionCompositionFactory();
+    if (current !== null && typeof current !== "function")
+      throw new TypeError("Invalid evolution composition factory");
+    this._evolutionCompositionFactory = current;
+  }
+
   async _prepareEvolutionTurn(requestId) {
     if (!this._evolutionCompositionFactory) return null;
     const sessionId = String(this.session.id);
@@ -876,6 +894,7 @@ export class WSAgentHandler {
     let result;
     try {
       this._sessionHostLease?.assert?.();
+
       result = await this._compactContextMemory(
         session.messages,
         {
@@ -1402,6 +1421,11 @@ export class WSAgentHandler {
       const { session } = this;
       this.assertSessionBudgetAdmission("WebSocket turn");
       this._sessionHostLease?.assert?.();
+      // A resident UI must observe a changed setting before each new turn.
+      if (this._resolveEvolutionCompositionFactory !== null) {
+        await this._refreshEvolutionFactory();
+      }
+      turnSignal.throwIfAborted();
 
       if (session.canonicalJsonlSession === true) {
         const inputDigest =
@@ -1676,6 +1700,7 @@ export class WSAgentHandler {
       }
 
       const executeAgentTurn = async () => {
+        turnSignal.throwIfAborted();
         for await (const event of this._agentLoop(
           session.messages,
           loopOptions,
@@ -2282,6 +2307,11 @@ export class WSAgentHandler {
         try {
           this.assertSessionBudgetAdmission("WebSocket compaction");
           this._sessionHostLease?.assert?.();
+          if (this._resolveEvolutionCompositionFactory !== null) {
+            await this._refreshEvolutionFactory();
+          }
+          this._sessionBudgetSignal?.throwIfAborted();
+          this._sessionHostLease?.assert?.();
           compactionEvolution = await this._prepareEvolutionTurn(
             `compact:${requestId || randomUUID()}`,
           );

package/src/lib/chat-core.js

@@ -10,9 +10,13 @@ import { providerFetch } from "./formal-budget-provider-scope.js";
  *  - streamOllama / streamOpenAI — low-level streaming helpers
  */
 
-import { BUILT_IN_PROVIDERS } from "./llm-providers.js";
+import {
+  BUILT_IN_PROVIDERS,
+  resolveProviderDefinition,
+} from "./llm-providers.js";
 import { normalizeOllamaBaseUrl } from "./ollama-base-url.js";
 import {
+  assertCustomProviderConnection,
   geminiGenerateContentUrl,
   geminiRequestBody,
   geminiUsage,
@@ -262,22 +266,22 @@ export async function streamOpenAI(
     response = await providerFetch(
       `${normalizeProviderBaseUrl(baseUrl)}/chat/completions`,
       {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${apiKey}`,
-      },
-      body: JSON.stringify({
-        model,
-        messages,
-        stream: true,
-        // Opt-in token usage in the terminal chunk (OpenAI-compatible).
-        // Servers that don't understand it simply ignore it.
-        stream_options: { include_usage: true },
-      }),
-      signal: options.signal
-        ? AbortSignal.any([guard.signal, options.signal])
-        : guard.signal,
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}),
+        },
+        body: JSON.stringify({
+          model,
+          messages,
+          stream: true,
+          // Opt-in token usage in the terminal chunk (OpenAI-compatible).
+          // Servers that don't understand it simply ignore it.
+          stream_options: { include_usage: true },
+        }),
+        signal: options.signal
+          ? AbortSignal.any([guard.signal, options.signal])
+          : guard.signal,
       },
     );
   } catch (e) {
@@ -410,22 +414,22 @@ export async function streamAnthropic(
     response = await providerFetch(
       `${normalizeProviderBaseUrl(baseUrl)}/messages`,
       {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey,
-        "anthropic-version": "2023-06-01",
-      },
-      body: JSON.stringify({
-        model,
-        max_tokens: 4096,
-        stream: true,
-        ...(system ? { system } : {}),
-        messages: convo,
-      }),
-      signal: options.signal
-        ? AbortSignal.any([guard.signal, options.signal])
-        : guard.signal,
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": apiKey,
+          "anthropic-version": "2023-06-01",
+        },
+        body: JSON.stringify({
+          model,
+          max_tokens: 4096,
+          stream: true,
+          ...(system ? { system } : {}),
+          messages: convo,
+        }),
+        signal: options.signal
+          ? AbortSignal.any([guard.signal, options.signal])
+          : guard.signal,
       },
     );
   } catch (e) {
@@ -666,6 +670,7 @@ export async function streamGemini(
  * @param {object} options - provider, model, baseUrl, apiKey
  */
 export async function* chatStream(messages, options) {
+  assertCustomProviderConnection(options.provider, options);
   const { provider, model, baseUrl, apiKey, sessionId } = options;
 
   // Token queue + waiter promise. onToken (called synchronously by each
@@ -765,14 +770,14 @@ export async function* chatStream(messages, options) {
         options,
       );
   } else {
-    const providerDef = BUILT_IN_PROVIDERS[provider];
+    const providerDef = resolveProviderDefinition(provider);
     const url = normalizeProviderBaseUrl(
       baseUrl || providerDef?.baseUrl || "https://api.openai.com/v1",
     );
     const key =
       apiKey ||
       (providerDef?.apiKeyEnv ? process.env[providerDef.apiKeyEnv] : null);
-    if (!key) {
+    if (!key && provider !== "custom") {
       throw new Error(
         `API key required for ${provider} (set ${providerDef?.apiKeyEnv || "API key"})`,
       );