deepseeker-code 1.0.61 → 1.0.63

package/dist/cli.mjs

@@ -624,7 +624,13 @@ var init_config = __esm({
        *  之前生效——门禁/审批评估的是改写后参数）、PostToolUse 可改 resultForModel（仅模型视图，
        *  用户视图 resultForUser 不变）。关闭时 PreToolUse 回退旧位（审批后、仅 deny），改写字段全忽略，
        *  行为与改造前一致。env DEEP_SEEK_HOOK_REWRITE=0 回退。 */
-      hookRewrite: process.env.DEEP_SEEK_HOOK_REWRITE !== "0"
+      hookRewrite: process.env.DEEP_SEEK_HOOK_REWRITE !== "0",
+      /** ★ 外部记忆桥接开关（External Memory Bridge，2026-11-02）：true 时 loader 在 bootstrap 把其他 agent 的
+       *  规则/指令文件（~/.claude/CLAUDE.md、~/.codex/AGENTS.md、~/.gemini/GEMINI.md、<cwd>/CLAUDE.md、AGENTS.md、
+       *  GEMINI.md、.cursor/rules/*.md、.github/copilot-instructions.md，清单硬编码）以只读 ext- 前缀条目纳入记忆索引。
+       *  默认 false——关闭时记忆行为与未引入本功能逐字节一致。开启即意味着同意把这些文件内容随请求发给
+       *  DeepSeek API（loader 首次接入时 console 提示一次）。外部条目只读：memory_save/delete 拒 ext- 前缀。 */
+      memoryExternal: false
     };
     MODEL_WINDOWS = {};
     resolveModelWindow = (model) => {
@@ -657,7 +663,9 @@ var init_config = __esm({
       undoBackupSensitive: (v) => v === "skip" || v === "deny" || v === "allow" ? v : void 0,
       undoRetentionDays: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? v : void 0,
       traceRetentionDays: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? v : void 0,
-      MAX_TOOL_RESULT_CHARS: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? Math.floor(v) : void 0
+      MAX_TOOL_RESULT_CHARS: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? Math.floor(v) : void 0,
+      memoryExternal: (v) => typeof v === "boolean" ? v : void 0
+      // 外部记忆桥接（只读接入其他 agent 规则文件；默认 false）
     };
     ENGINE_OVERRIDE_KEYS = Object.keys(ENGINE_OVERRIDE_VALIDATORS);
     applyEngineOverrides = (cfg) => {
@@ -904,6 +912,7 @@ var init_ticket = __esm({
         noAccept: "frontmatter \u7F3A accept\uFF08\u9A8C\u6536\u547D\u4EE4\uFF09\u3002\u6302\u673A\u4EFB\u52A1\u5FC5\u987B\u5E26\u53EF\u6267\u884C\u9A8C\u6536\uFF0C\u7F3A\u9A8C\u6536\u62D2\u7EDD\u5165\u961F\u3002",
         badBudget: (v) => `budget-yuan \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A\u6B63\u6570\uFF08\u5143\uFF09\u3002`,
         badTimeout: (v) => `timeout-min \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A\u6B63\u6574\u6570\uFF08\u5206\u949F\uFF09\u3002`,
+        badRetry: (v) => `retry \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A 0-3 \u7684\u6574\u6570\uFF08\u770B\u95E8\u72D7\u7EC8\u6B62\u540E\u5E26\u8BC1\u636E\u91CD\u8BD5\u6B21\u6570\uFF1B\u7F3A\u7701 0=\u4E0D\u91CD\u8BD5\uFF09\u3002`,
         badTools: "tools \u4E3A\u7A7A\uFF1A\u8981\u4E48\u5220\u6389\u8BE5\u884C\uFF08\u7528\u7F3A\u7701\u7981\u7528\u6E05\u5355\uFF09\uFF0C\u8981\u4E48\u5217\u5DE5\u5177\u540D\uFF08\u9017\u53F7\u5206\u9694\uFF09\u3002",
         emptyBody: "\u4EFB\u52A1\u6B63\u6587\u4E3A\u7A7A\uFF1Afrontmatter \u4E4B\u540E\u5E94\u5199\u4EFB\u52A1\u63CF\u8FF0\u3002",
         untitled: "(\u672A\u547D\u540D\u4EFB\u52A1)",
@@ -914,6 +923,7 @@ var init_ticket = __esm({
         noAccept: "Frontmatter is missing `accept` (acceptance command). Batch tasks must carry an executable acceptance check \u2014 rejected without one.",
         badBudget: (v) => `Invalid budget-yuan ("${v}"): must be a positive number (yuan).`,
         badTimeout: (v) => `Invalid timeout-min ("${v}"): must be a positive integer (minutes).`,
+        badRetry: (v) => `Invalid retry ("${v}"): must be an integer 0-3 (evidence-carrying retries after a watchdog kill; default 0 = no retry).`,
         badTools: "Empty tools: either remove the line (use the default denylist) or list tool names (comma-separated).",
         emptyBody: "Empty task body: write the task description after the frontmatter.",
         untitled: "(untitled task)",
@@ -955,13 +965,19 @@ var init_ticket = __esm({
         if (n === null) return { ok: false, error: ticketMsg(locale2, "badTimeout")(fm["timeout-min"]) };
         timeoutMin = n;
       }
+      let retry;
+      if (fm["retry"] !== void 0) {
+        const n = Number(fm["retry"].trim());
+        if (!Number.isInteger(n) || n < 0 || n > 3) return { ok: false, error: ticketMsg(locale2, "badRetry")(fm["retry"]) };
+        retry = n;
+      }
       const tools = fm["tools"] !== void 0 ? parseToolsValue(fm["tools"]) : void 0;
       if (tools && tools.length === 0) return { ok: false, error: ticketMsg(locale2, "badTools") };
       const setup = (fm["setup"] ?? "").trim() || void 0;
       const body = bodyRaw.trim();
       if (!body) return { ok: false, error: ticketMsg(locale2, "emptyBody") };
       const title = (fm["title"] ?? "").trim() || body.split(/\r?\n/).find((l) => l.trim())?.slice(0, 40) || ticketMsg(locale2, "untitled");
-      return { ok: true, ticket: { title, accept, setup, budgetYuan, timeoutMin, tools: tools && tools.length > 0 ? tools : void 0, body } };
+      return { ok: true, ticket: { title, accept, setup, budgetYuan, timeoutMin, retry, tools: tools && tools.length > 0 ? tools : void 0, body } };
     };
     readBatchTicket = async (filePath, locale2 = "zh") => {
       let source;
@@ -1117,6 +1133,7 @@ var init_batchStrings = __esm({
   setup: pnpm install   # \u53EF\u9009\uFF1Aagent \u524D\u5728 worktree \u5185\u5907\u73AF\u5883\uFF08\u5E72\u51C0\u68C0\u51FA\u65E0 node_modules\uFF0C\u9A8C\u6536\u4F9D\u8D56\u73AF\u5883\u65F6\u5148\u88C5\uFF09
   budget-yuan: 0.5      # \u53EF\u9009\uFF1A\u672C\u4EFB\u52A1\u82B1\u8D39\u4E0A\u9650\uFF08\u5143\uFF09
   timeout-min: 30       # \u53EF\u9009\uFF1Aagent \u9636\u6BB5\u8D85\u65F6\uFF08\u5206\u949F\uFF0C\u7F3A\u7701 30\uFF09
+  retry: 1              # \u53EF\u9009\uFF1A\u88AB\u770B\u95E8\u72D7\u7EC8\u6B62\u540E\u5E26\u8BC1\u636E\u91CD\u8BD5\u6B21\u6570\uFF080-3\uFF0C\u7F3A\u7701 0=\u6740\u5373\u7EC8\u6001\uFF09
   tools: run_command    # \u53EF\u9009\uFF1A\u663E\u5F0F\u89E3\u9501\u9AD8\u5371\u5DE5\u5177\uFF08\u7F3A\u7701\u7981 run_command/delete_path\uFF09
   ---
   \u4EFB\u52A1\u63CF\u8FF0\u6B63\u6587\uFF08Markdown\uFF09\u2026
@@ -1143,6 +1160,10 @@ var init_batchStrings = __esm({
       wtCreateFail: (e) => `\u521B\u5EFA worktree \u5931\u8D25\uFF08\u9700\u8981\u4E3B\u5DE5\u4F5C\u533A\u662F git \u4ED3\u5E93\uFF09\uFF1A${e}`,
       agentErrorLine: (id, err) => `\u{1F4A5} [${id}] agent \u5F02\u5E38\uFF1A${err}`,
       timeoutLine: (id, min) => `\u23F1\uFE0F [${id}] \u8D85\u65F6\uFF08${min}min\uFF09\uFF0C\u622A\u65AD\u6536\u5C3E\uFF08\u9A8C\u6536\u4E0D\u8DD1\uFF09`,
+      wdNudgeNote: (id, level) => `\u{1F415} [${id}] watchdog nudge-${level} \u5DF2\u6CE8\u5165\u6536\u4EF6\u7BB1\uFF08\u7EA0\u504F\u63D0\u793A\uFF09`,
+      wdKillNote: (id, why) => `\u{1F415} [${id}] watchdog \u7EC8\u6B62\uFF1A${why}`,
+      wdRetryNote: (id, round) => `\u{1F501} [${id}] watchdog \u5E26\u8BC1\u636E\u91CD\u8BD5\uFF1A\u7B2C ${round} \u8F6E\uFF08\u540C worktree \u7EED\u8DD1\uFF0C\u5269\u4F59\u9884\u7B97\u7EED\u7528\uFF09`,
+      wdBudgetStopNote: (id) => `\u{1F415} [${id}] \u91CD\u8BD5\u5DF2\u8DF3\u8FC7\uFF1A\u9884\u7B97\u8DE8\u8F6E\u7D2F\u8BA1\u5DF2\u8017\u5C3D`,
       acceptLine: (passed, id, code) => `${passed ? "\u2705" : "\u274C"} [${id}] \u9A8C\u6536 exit ${code}`,
       acceptKilledSuffix: "\uFF08\u8D85\u65F6\u88AB\u6740\uFF09",
       timeoutAbort: (min) => `\u4EFB\u52A1\u8D85\u65F6\uFF08${min} \u5206\u949F\uFF09`,
@@ -1163,7 +1184,8 @@ var init_batchStrings = __esm({
         timeout: "\u23F1\uFE0F \u8D85\u65F6\u622A\u65AD",
         error: "\u{1F4A5} agent \u5F02\u5E38",
         "setup-failed": "\u{1F6E0}\uFE0F \u73AF\u5883\u51C6\u5907\u5931\u8D25",
-        rejected: "\u{1F6AB} \u5DE5\u5355\u88AB\u62D2"
+        rejected: "\u{1F6AB} \u5DE5\u5355\u88AB\u62D2",
+        "watchdog-killed": "\u{1F415} \u770B\u95E8\u72D7\u7EC8\u6B62"
       })[s],
       // —— 验收命令执行（输出嵌入报告） ——
       spawnFail: (e) => `\u542F\u52A8\u5931\u8D25\uFF1A${e}`,
@@ -1202,7 +1224,18 @@ var init_batchStrings = __esm({
       deniedNone: "\u65E0\u3002",
       diffH: "## Diff \u6458\u8981\uFF08worktree \u76F8\u5BF9\u57FA\u5EA7\uFF0C\u672A\u63D0\u4EA4\uFF0C\u5F85\u4EBA\u5DE5\u5904\u7F6E\uFF09",
       diffNote: (branch, p) => `\u6539\u52A8\u5728\u72EC\u7ACB worktree\uFF08\u5206\u652F \`${branch}\`\uFF0C\u8DEF\u5F84 ${p}\uFF09\u3002\u5904\u7F6E\uFF1A\u68C0\u67E5\u6EE1\u610F \u2192 \u5728 worktree \u5185 commit \u5E76\u5408\u56DE\u4E3B\u4ED3\uFF1B\u4E22\u5F03 \u2192 \u5220\u9664\u8BE5 worktree \u76EE\u5F55 + \`git worktree prune\` + \`git branch -D <\u5206\u652F>\`\u3002`,
-      diffNone: "\uFF08\u65E0\uFF09"
+      diffNone: "\uFF08\u65E0\uFF09",
+      // —— 看门狗（进展感知）报告段与进度行 ——
+      wdH: "## \u770B\u95E8\u72D7\uFF08\u8FDB\u5C55\u611F\u77E5\uFF09",
+      wdRecord: (s) => `- ${s}`,
+      wdSuspicionRec: (s) => `\u5ACC\u7591\u8BB0\u5F55\uFF08\u672A\u8FBE\u52A8\u4F5C\u7EBF\uFF09\uFF1A${s}`,
+      wdVerdictRec: (verdict, evidence) => `\u88C1\u51B3 ${verdict}\uFF1A${evidence || "\uFF08\u65E0\u8BC1\u636E\uFF09"}`,
+      wdNudgeRec: (level, text) => `nudge-${level} \u5DF2\u6CE8\u5165\u6536\u4EF6\u7BB1\uFF1A${text}`,
+      wdHealthRec: (s) => `\u5065\u5EB7\u4FE1\u53F7\u77ED\u8DEF\uFF08\u8DF3\u8FC7\u88C1\u51B3\uFF09\uFF1A${s}`,
+      wdAuxFailRec: () => `\u4E8C\u5C42\u88C1\u51B3\u8C03\u7528\u5931\u8D25\uFF0C\u964D\u7EA7 normal\uFF08\u770B\u95E8\u72D7\u81EA\u8EAB\u6545\u969C\u4E0D\u8BEF\u6740\uFF09`,
+      wdKillRec: (verdict, evidence) => `\u26D4 \u7EC8\u6B62\uFF1A${verdict} \u2014 ${evidence}`,
+      wdAtKillRec: (round, costYuan) => `\u7EC8\u6B62\u65F6\u523B\uFF1A\u8F6E ${round} \xB7 \xA5${costYuan}`,
+      wdRetryRec: (n) => `\u5E26\u8BC1\u636E\u91CD\u8BD5\uFF1A\u5171 ${n + 1} \u8F6E\uFF08\u540C worktree \u7EED\u8DD1\uFF0C\u8BC1\u636E\u89C1\u5404\u8F6E\u8BB0\u5F55\uFF09`
     };
     EN = {
       usage: `deepseeker-code batch \u2014 unattended batch runs (cost trust chain)
@@ -1220,6 +1253,7 @@ Ticket format (Markdown; frontmatter \`accept\` is required \u2014 no acceptance
   setup: pnpm install   # optional: prep env inside the worktree before the agent (fresh checkout has no node_modules)
   budget-yuan: 0.5      # optional: per-task cost cap (yuan)
   timeout-min: 30       # optional: agent-phase timeout (minutes, default 30)
+  retry: 1              # optional: evidence-carrying retries after a watchdog kill (0-3, default 0 = kill is final)
   tools: run_command    # optional: unlock risky tools (run_command/delete_path denied by default)
 ---
 
@@ -1246,6 +1280,10 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
       wtCreateFail: (e) => `Failed to create worktree (the main workspace must be a git repo): ${e}`,
       agentErrorLine: (id, err) => `\u{1F4A5} [${id}] agent error: ${err}`,
       timeoutLine: (id, min) => `\u23F1\uFE0F [${id}] Timed out (${min}min); wrapped up truncated (acceptance skipped)`,
+      wdNudgeNote: (id, level) => `\u{1F415} [${id}] watchdog nudge-${level} injected into the inbox (course correction)`,
+      wdKillNote: (id, why) => `\u{1F415} [${id}] watchdog killed: ${why}`,
+      wdRetryNote: (id, round) => `\u{1F501} [${id}] watchdog evidence-carrying retry: round ${round} (same worktree, remaining budget carried over)`,
+      wdBudgetStopNote: (id) => `\u{1F415} [${id}] retry skipped: cumulative budget exhausted across rounds`,
       acceptLine: (passed, id, code) => `${passed ? "\u2705" : "\u274C"} [${id}] acceptance exit ${code}`,
       acceptKilledSuffix: " (killed on timeout)",
       timeoutAbort: (min) => `Task timed out (${min} minutes)`,
@@ -1265,7 +1303,8 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
         timeout: "\u23F1\uFE0F timed out",
         error: "\u{1F4A5} agent error",
         "setup-failed": "\u{1F6E0}\uFE0F setup failed",
-        rejected: "\u{1F6AB} ticket rejected"
+        rejected: "\u{1F6AB} ticket rejected",
+        "watchdog-killed": "\u{1F415} watchdog killed"
       })[s],
       spawnFail: (e) => `Spawn failed: ${e}`,
       execFail: (e) => `Execution failed: ${e}`,
@@ -1301,7 +1340,17 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
       deniedNone: "None.",
       diffH: "## Diff summary (worktree vs base, uncommitted, awaiting manual handling)",
       diffNote: (branch, p) => `Changes live in an isolated worktree (branch \`${branch}\`, path ${p}). To keep: commit inside the worktree and merge back. To discard: delete the worktree directory + \`git worktree prune\` + \`git branch -D <branch>\`.`,
-      diffNone: "(none)"
+      diffNone: "(none)",
+      wdH: "## Watchdog (progress-aware)",
+      wdRecord: (s) => `- ${s}`,
+      wdSuspicionRec: (s) => `Suspicion logged (below action line): ${s}`,
+      wdVerdictRec: (verdict, evidence) => `Verdict ${verdict}: ${evidence || "(no evidence)"}`,
+      wdNudgeRec: (level, text) => `nudge-${level} injected into the inbox: ${text}`,
+      wdHealthRec: (s) => `Health signal short-circuit (adjudication skipped): ${s}`,
+      wdAuxFailRec: () => `Level-2 adjudication call failed; degraded to normal (a broken watchdog must not become a false-kill weapon)`,
+      wdKillRec: (verdict, evidence) => `\u26D4 Killed: ${verdict} \u2014 ${evidence}`,
+      wdAtKillRec: (round, costYuan) => `At kill time: round ${round} \xB7 \xA5${costYuan}`,
+      wdRetryRec: (n) => `Evidence-carrying retries: ${n + 1} rounds total (same worktree; per-round evidence above)`
     };
     DICT = { zh: ZH, en: EN };
     batchT = (locale2) => DICT[locale2] ?? ZH;
@@ -1975,8 +2024,19 @@ var init_replay = __esm({
 });
 
 // ../core/src/llm/model.ts
+var model_exports = {};
+__export(model_exports, {
+  activeProvider: () => activeProvider,
+  chatWithModelWithSummary: () => chatWithModelWithSummary,
+  classifyToolRisk: () => classifyToolRisk,
+  isContextLengthError: () => isContextLengthError2,
+  isImageUnsupportedError: () => isImageUnsupportedError2,
+  isTransientApiError: () => isTransientApiError,
+  resetActiveProvider: () => resetActiveProvider,
+  setActiveProvider: () => setActiveProvider
+});
 import { readFileSync as readFileSync4 } from "fs";
-var resolveInitialProvider, activeProvider, chatWithModelWithSummary, classifyToolRisk;
+var resolveInitialProvider, activeProvider, setActiveProvider, resetActiveProvider, chatWithModelWithSummary, classifyToolRisk, isContextLengthError2, isTransientApiError, isImageUnsupportedError2;
 var init_model = __esm({
   "../core/src/llm/model.ts"() {
     "use strict";
@@ -1997,8 +2057,17 @@ var init_model = __esm({
       return createReplayProvider(Array.isArray(raw) ? { turns: raw } : raw);
     };
     activeProvider = resolveInitialProvider();
+    setActiveProvider = (p) => {
+      activeProvider = p;
+    };
+    resetActiveProvider = () => {
+      activeProvider = deepseekProvider;
+    };
     chatWithModelWithSummary = (messages, tools, opts) => activeProvider.summarize(messages, tools, opts);
     classifyToolRisk = (toolName, args, detail, signal, onAuxUsage) => activeProvider.classifyRisk(toolName, args, detail, signal, onAuxUsage);
+    isContextLengthError2 = (e) => activeProvider.isContextLengthError(e);
+    isTransientApiError = (e) => activeProvider.isTransientError(e);
+    isImageUnsupportedError2 = (e) => activeProvider.isImageUnsupportedError(e);
   }
 });
 
@@ -5548,6 +5617,153 @@ var init_httpExecutor = __esm({
   }
 });
 
+// ../core/src/agent/agentWake.ts
+var AGENT_DONE_SENTINEL, SUBAGENT_REPORT_MAX_CHARS, wakeDrivers, wakeQueued, busyRuns, inFlightByParent, quiesceWaiters, registerWakeDriver, registerWakeDriverIfAbsent, unregisterWakeDriver, markRunStart, markRunEnd, pumpWake, scheduleWake, clearQueuedWake, notifySubagentDone, buildSubagentDoneReport, trackSubagentInFlight, releaseSubagentInFlight, notifyQuiesceWaiters, isQuiescent, waitSessionQuiescent;
+var init_agentWake = __esm({
+  "../core/src/agent/agentWake.ts"() {
+    "use strict";
+    init_inbox();
+    init_transcript();
+    AGENT_DONE_SENTINEL = "\u27E6DSC:AGENT-DONE\u27E7 \u5B50\u4EE3\u7406\u5B8C\u6210\u5524\u9192\uFF1A\u672C\u4F1A\u8BDD\u521A\u6CE8\u5165\u4E86\u5B50\u4EE3\u7406\u5B8C\u6210\u6C47\u62A5\uFF08\u89C1\u76F8\u90BB\u6D88\u606F\uFF09\uFF0C\u8BF7\u9010\u6761\u6D88\u5316\u6C47\u62A5\u5185\u5BB9\u5E76\u7EE7\u7EED\u63A8\u8FDB\u4E3B\u4EFB\u52A1\uFF1B\u82E5\u65E0\u5F85\u7EED\u4E8B\u9879\uFF0C\u7B80\u8981\u786E\u8BA4\u5373\u53EF\u3002";
+    SUBAGENT_REPORT_MAX_CHARS = 4096;
+    wakeDrivers = /* @__PURE__ */ new Map();
+    wakeQueued = /* @__PURE__ */ new Set();
+    busyRuns = /* @__PURE__ */ new Set();
+    inFlightByParent = /* @__PURE__ */ new Map();
+    quiesceWaiters = /* @__PURE__ */ new Map();
+    registerWakeDriver = (sessionId, driver) => {
+      if (!sessionId) return;
+      wakeDrivers.set(sessionId, driver);
+    };
+    registerWakeDriverIfAbsent = (sessionId, driver) => {
+      if (!sessionId || wakeDrivers.has(sessionId)) return;
+      wakeDrivers.set(sessionId, driver);
+    };
+    unregisterWakeDriver = (sessionId) => {
+      wakeDrivers.delete(sessionId);
+    };
+    markRunStart = (sessionId) => {
+      if (!sessionId) return;
+      busyRuns.add(sessionId);
+    };
+    markRunEnd = (sessionId) => {
+      if (!sessionId) return;
+      busyRuns.delete(sessionId);
+      pumpWake(sessionId);
+      notifyQuiesceWaiters(sessionId);
+    };
+    pumpWake = (sessionId) => {
+      if (!wakeQueued.has(sessionId)) return;
+      if (busyRuns.has(sessionId)) return;
+      wakeQueued.delete(sessionId);
+      const driver = wakeDrivers.get(sessionId);
+      if (!driver) return;
+      busyRuns.add(sessionId);
+      void (async () => {
+        try {
+          await driver();
+        } catch (e) {
+          console.warn(`\u26A0\uFE0F [agentWake] \u5524\u9192 run \u5F02\u5E38\uFF08\u5DF2\u5FFD\u7565\uFF0C\u94FE\u8DEF\u7EE7\u7EED\u6536\u655B\uFF09: ${e?.message ?? e}`);
+        } finally {
+          busyRuns.delete(sessionId);
+          notifyQuiesceWaiters(sessionId);
+          pumpWake(sessionId);
+        }
+      })();
+    };
+    scheduleWake = (sessionId) => {
+      if (!sessionId || wakeQueued.has(sessionId)) return;
+      wakeQueued.add(sessionId);
+      pumpWake(sessionId);
+      notifyQuiesceWaiters(sessionId);
+    };
+    clearQueuedWake = (sessionId) => {
+      wakeQueued.delete(sessionId);
+    };
+    notifySubagentDone = async (parentSessionId, report) => {
+      if (!parentSessionId || !report) return;
+      const delivered = pushSessionInbox(parentSessionId, report);
+      if (!delivered) {
+        try {
+          await appendMessage({ sessionId: parentSessionId, role: "user", content: report });
+        } catch {
+        }
+      }
+      scheduleWake(parentSessionId);
+    };
+    buildSubagentDoneReport = (agentId, taskBrief, result) => {
+      const status = result.status ?? (result.output ? "final" : "error");
+      const statusLabel = status === "final" ? "final\uFF08\u6B63\u5E38\u5B8C\u6210\uFF09" : status === "aborted" ? "aborted\uFF08\u88AB\u4E2D\u6B62\uFF09" : "error\uFF08\u5F02\u5E38\uFF09";
+      const over = result.output.length > SUBAGENT_REPORT_MAX_CHARS;
+      const body = over ? result.output.slice(0, SUBAGENT_REPORT_MAX_CHARS) : result.output;
+      return [
+        `\u{1F916} [\u5B50\u4EE3\u7406\u5B8C\u6210] \u{1F194} ${agentId}${taskBrief ? `\uFF08${taskBrief}\uFF09` : ""}`,
+        `\u72B6\u6001\uFF1A${statusLabel}`,
+        `\u6C47\u62A5\uFF1A`,
+        body,
+        over ? `
+\uFF08\u26A0\uFE0F \u6C47\u62A5\u8D85\u957F\u5DF2\u622A\u65AD\u81F3 ${SUBAGENT_REPORT_MAX_CHARS} \u5B57\u7B26\uFF1B\u5B8C\u6574\u5185\u5BB9\u53EF spawn_agent \u4F20 resume_session_id="${agentId}" \u8FFD\u95EE\u3002\uFF09` : ""
+      ].filter((s) => s !== "").join("\n");
+    };
+    trackSubagentInFlight = (parentSessionId, subSessionId) => {
+      if (!parentSessionId) return;
+      let set = inFlightByParent.get(parentSessionId);
+      if (!set) {
+        set = /* @__PURE__ */ new Set();
+        inFlightByParent.set(parentSessionId, set);
+      }
+      set.add(subSessionId);
+    };
+    releaseSubagentInFlight = (parentSessionId, subSessionId) => {
+      const set = inFlightByParent.get(parentSessionId);
+      if (!set) return;
+      set.delete(subSessionId);
+      if (set.size === 0) inFlightByParent.delete(parentSessionId);
+      notifyQuiesceWaiters(parentSessionId);
+    };
+    notifyQuiesceWaiters = (sessionId) => {
+      const waiters = quiesceWaiters.get(sessionId);
+      if (!waiters || waiters.size === 0) return;
+      for (const w of [...waiters]) w();
+    };
+    isQuiescent = (sessionId) => !inFlightByParent.get(sessionId)?.size && !busyRuns.has(sessionId) && !wakeQueued.has(sessionId);
+    waitSessionQuiescent = (sessionId, signal, timeoutMs2) => {
+      if (isQuiescent(sessionId)) return Promise.resolve(true);
+      return new Promise((resolve) => {
+        let settled = false;
+        const finish = (ok) => {
+          if (settled) return;
+          settled = true;
+          if (timer) clearTimeout(timer);
+          if (onAbort) signal?.removeEventListener("abort", onAbort);
+          const set = quiesceWaiters.get(sessionId);
+          if (set) {
+            set.delete(check);
+            if (set.size === 0) quiesceWaiters.delete(sessionId);
+          }
+          resolve(ok);
+        };
+        const check = () => {
+          if (isQuiescent(sessionId)) finish(true);
+        };
+        let timer;
+        const onAbort = () => finish(false);
+        if (!quiesceWaiters.has(sessionId)) quiesceWaiters.set(sessionId, /* @__PURE__ */ new Set());
+        quiesceWaiters.get(sessionId).add(check);
+        if (signal) {
+          if (signal.aborted) {
+            finish(false);
+            return;
+          }
+          signal.addEventListener("abort", onAbort, { once: true });
+        }
+        if (timeoutMs2 != null && timeoutMs2 > 0) timer = setTimeout(() => finish(false), timeoutMs2);
+        check();
+      });
+    };
+  }
+});
+
 // ../core/src/agent/repeatBreaker.ts
 var createRepeatBreaker;
 var init_repeatBreaker = __esm({
@@ -5889,7 +6105,7 @@ ${style.body}`);
 });
 
 // ../core/src/memory/registry.ts
-var memories, registerMemory, listMemories, getMemory, unregisterMemory, clearMemories, memoryIndexLine, getMemoryIndex;
+var memories, registerMemory, listMemories, getMemory, unregisterMemory, clearMemories, memoryIndexLine, MEMORY_LIMITS, getMemoryIndex;
 var init_registry6 = __esm({
   "../core/src/memory/registry.ts"() {
     "use strict";
@@ -5908,6 +6124,7 @@ var init_registry6 = __esm({
     };
     clearMemories = memories.clear;
     memoryIndexLine = (m) => `- **${m.name}** (${m.type}) \u2014 ${m.description}`;
+    MEMORY_LIMITS = { maxCount: 200, maxIndexBytes: 16 * 1024 };
     getMemoryIndex = () => {
       const all = memories.list();
       if (all.length === 0) return null;
@@ -6102,7 +6319,12 @@ var init_agent = __esm({
         type: "function",
         function: {
           name: "spawn_agent",
-          description: "\u6D3E\u751F\u62E5\u6709\u72EC\u7ACB\u6267\u884C\u73AF\u5883\u7684\u5B50 agent \u5904\u7406\u9694\u79BB\u5B50\u4EFB\u52A1\uFF0C\u5B8C\u6210\u540E\u81EA\u52A8\u6C47\u62A5\u6539\u52A8\u70B9\u4E0E\u7ED3\u8BBA\u3002name \u53EF\u6307\u5B9A\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u7CFB\u7EDF\u63D0\u793A\u8BCD\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF0C\u5957\u7528\u5176\u7CFB\u7EDF\u8BCD/\u5DE5\u5177\u767D\u540D\u5355/model\uFF09\uFF1B\u7F3A\u7701\u8D70\u901A\u7528\u6A21\u677F\u3002\u7EED\u8DD1\uFF1A\u4F20 resume_session_id\uFF08\u6B64\u524D\u8FD4\u56DE\u7684 agent_id\uFF09\u590D\u7528\u8BE5\u5B50 Agent \u5B8C\u6574\u5386\u53F2\u8BB0\u5FC6\uFF0C\u9002\u5408\u8FFD\u95EE/\u7EE7\u7EED\u672A\u5B8C\u4EFB\u52A1\u3002",
+          description: [
+            "\u5F02\u6B65\u6D3E\u751F\u62E5\u6709\u72EC\u7ACB\u6267\u884C\u73AF\u5883\u7684\u5B50 agent \u5904\u7406\u9694\u79BB\u5B50\u4EFB\u52A1\uFF1A\u8C03\u7528\u7ACB\u5373\u8FD4\u56DE agent_id\uFF0C\u4E0D\u7B49\u5F85\u5B8C\u6210\uFF1B\u5B50 agent \u5728\u540E\u53F0\u6267\u884C\uFF0C\u5B8C\u6210\u540E\u5176\u6C47\u62A5\u4F1A\u81EA\u52A8\u6CE8\u5165\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\u63A8\u8FDB\uFF08\u65E0\u9700\u8F6E\u8BE2\u3001\u65E0\u9700\u7B49\u5F85\uFF09\u3002",
+            "\u6D3E\u51FA\u540E\u4F60\u53EF\u7ACB\u5373\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1 / \u56DE\u590D\u7528\u6237\uFF1B\u5F53\u524D\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u53EF\u7B80\u77ED\u544A\u77E5\u5DF2\u59D4\u6D3E\u5E76\u7ED3\u675F\u672C\u8F6E\u2014\u2014\u6C47\u62A5\u9001\u8FBE\u65F6\u4F60\u4F1A\u88AB\u81EA\u52A8\u5524\u9192\u3002",
+            "name \u53EF\u6307\u5B9A\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u7CFB\u7EDF\u63D0\u793A\u8BCD\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF0C\u5957\u7528\u5176\u7CFB\u7EDF\u8BCD/\u5DE5\u5177\u767D\u540D\u5355/model\uFF09\uFF1B\u7F3A\u7701\u8D70\u901A\u7528\u6A21\u677F\u3002",
+            "\u7EED\u8DD1\uFF1A\u4F20 resume_session_id\uFF08\u6B64\u524D\u8FD4\u56DE\u7684 agent_id\uFF09\u590D\u7528\u8BE5\u5B50 Agent \u5B8C\u6574\u5386\u53F2\u8BB0\u5FC6\uFF0C\u9002\u5408\u8FFD\u95EE/\u7EE7\u7EED\u672A\u5B8C\u4EFB\u52A1\uFF08\u540C\u6837\u5F02\u6B65\uFF0C\u5B8C\u6210\u540E\u81EA\u52A8\u5524\u9192\uFF09\u3002"
+          ].join("\n"),
           parameters: {
             type: "object",
             properties: {
@@ -6114,30 +6336,29 @@ var init_agent = __esm({
             required: ["task"]
           },
           safetyLevel: "safe" /* SAFE */,
-          isSync: true,
-          async execute(args, ctx) {
-            if (!ctx) return toolFailure("[\u6D3E\u751F\u5931\u8D25]\uFF1Aspawn_agent \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
-            const res = await runSubagent(
+          isSync: false,
+          async *execute(args, ctx) {
+            if (!ctx) {
+              yield toolFailure("[\u6D3E\u751F\u5931\u8D25]\uFF1Aspawn_agent \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+              return;
+            }
+            const prep = await prepareSubagent(
               { task: args.task, name: args.name, role: args.role, resumeSessionId: args.resume_session_id },
               ctx,
               getGlobalTools
             );
-            if (!res.ok) return asToolFailure(res.output);
-            return [
-              `\u{1F389} [\u5B50 Agent \u6267\u884C\u5B8C\u6BD5${args.resume_session_id ? "\xB7\u7EED\u8DD1" : ""}] \u6D3E\u751F\u5B50\u4EFB\u52A1\u6C47\u62A5\u5982\u4E0B\uFF1A
-`,
-              `\u{1F194} agent_id: ${res.sessionId}
-\uFF08\u9700\u8981\u7EE7\u7EED\u8BE5\u5B50 Agent \u7684\u4EFB\u52A1\u6216\u8FFD\u95EE\u65F6\uFF0C\u8C03\u7528 spawn_agent \u4F20 resume_session_id=${res.sessionId}\uFF0C\u5176\u5386\u53F2\u8BB0\u5FC6\u5B8C\u6574\u4FDD\u7559\uFF09
-`,
-              `==================================================
-`,
-              res.output,
-              `
-==================================================
-`,
-              `\u{1F6A8}\u3010\u91CD\u8981\u540C\u6B65\u901A\u77E5\u3011: \u8BE5\u5B50 Agent \u521A\u624D\u6781\u6709\u53EF\u80FD\u5DF2\u7ECF\u9AD8\u9891\u4FEE\u6539\u3001\u521B\u5EFA\u6216\u5220\u9664\u4E86\u4F60\u7BA1\u8F96\u533A\u5185\u7684\u672C\u5730\u6E90\u7801\u6587\u4EF6\u3002`,
-              `\u5982\u679C\u4F60\uFF08\u7236\u7EA7Agent\uFF09\u63A5\u4E0B\u6765\u9700\u8981\u5BF9\u6587\u4EF6\u7CFB\u7EDF\u7EE7\u7EED\u5B9E\u65BD edit_file\u3001write_file \u6216\u9A8C\u8BC1\uFF0C\u3010\u4F60\u5FC5\u987B\u3011\u9996\u5148\u8C03\u7528 read_file \u6216 list_dir \u91CD\u65B0\u8BFB\u53D6\u6700\u65B0\u78C1\u76D8\u72B6\u6001\uFF0C\u7981\u6B62\u76F2\u76EE\u4F9D\u8D56\u4F60\u4E4B\u524D\u7684\u8BB0\u5FC6\u7F13\u5B58\uFF0C\u5426\u5219\u5FC5\u7136\u4F1A\u5F15\u53D1\u552F\u4E00\u6027\u51B2\u7A81\u5339\u914D\u5931\u8D25\uFF01`
-            ].join("");
+            if (!prep.ok) {
+              yield asToolFailure(prep.error);
+              return;
+            }
+            const agentId = prep.prepared.subSessionId;
+            yield [
+              `\u2705 \u5B50\u4EE3\u7406\u5DF2\u5F02\u6B65\u542F\u52A8 \u{1F194} ${agentId}${prep.prepared.manifest ? `\uFF08\u58F0\u660E\u5F0F=${prep.prepared.manifest.name}\uFF09` : ""}`,
+              `\u4EFB\u52A1\u6458\u8981\uFF1A${prep.prepared.taskBrief}${args.task.length > 60 ? "\u2026" : ""}`,
+              `\u5B83\u5B8C\u6210\u540E\u6C47\u62A5\u4F1A\u81EA\u52A8\u9001\u8FBE\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\uFF1B\u671F\u95F4\u65E0\u9700\u7B49\u5F85\u2014\u2014\u53EF\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1\uFF0C\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u7B80\u77ED\u544A\u77E5\u7528\u6237\u5373\u53EF\u6536\u5C3E\u672C\u8F6E\u3002`,
+              `\uFF08\u8FFD\u95EE/\u7EED\u8DD1\uFF1Aspawn_agent \u4F20 resume_session_id="${agentId}"\uFF0C\u5176\u5386\u53F2\u8BB0\u5FC6\u5B8C\u6574\u4FDD\u7559\u3002\uFF09`
+            ].join("\n");
+            await runPreparedSubagent(prep.prepared, ctx, { notifyDone: true });
           }
         }
       }
@@ -6370,6 +6591,7 @@ var init_workflow = __esm({
     init_config();
     init_guard();
     init_manager();
+    init_agentWake();
     init_workflowHelpers();
     createWorkflowTools = (getGlobalTools) => [
       {
@@ -6377,7 +6599,8 @@ var init_workflow = __esm({
         function: {
           name: "run_workflow",
           description: [
-            "\u591A\u5B50 agent \u7F16\u6392\uFF1A\u628A\u53EF\u5206\u89E3\u7684\u5927\u4EFB\u52A1\u6D3E\u7ED9\u591A\u4E2A\u72EC\u7ACB\u5B50 agent\u3002parallel\uFF08\u9ED8\u8BA4\uFF09=\u5404\u6B65\u9AA4\u5E76\u53D1\u6267\u884C\u3001\u7ED3\u679C\u6309\u5E8F\u805A\u5408\uFF0C\u9002\u5408\u4E92\u76F8\u72EC\u7ACB\u7684\u53EA\u8BFB/\u5206\u6790\u4EFB\u52A1\uFF1Bpipeline=\u6B65\u9AA4\u4E32\u884C\uFF0C\u524D\u9636\u6BB5\u4EA7\u51FA\u81EA\u52A8\u4F5C\u4E3A\u540E\u9636\u6BB5\u8F93\u5165\uFF0C\u9002\u5408\u5206\u9636\u6BB5\u52A0\u5DE5\uFF08\u62BD\u53D6\u2192\u5F52\u7C7B\u2192\u6C47\u603B\uFF09\u3002",
+            "\u5F02\u6B65\u591A\u5B50 agent \u7F16\u6392\uFF1A\u628A\u53EF\u5206\u89E3\u7684\u5927\u4EFB\u52A1\u6D3E\u7ED9\u591A\u4E2A\u72EC\u7ACB\u5B50 agent\uFF0C\u8C03\u7528\u7ACB\u5373\u8FD4\u56DE\uFF08\u4E0D\u7B49\u5F85\u5B8C\u6210\uFF09\uFF0C\u5168\u90E8\u6B65\u9AA4\u7ED3\u675F\u540E\u4E00\u6761\u7EC8\u6001\u6C47\u603B\u81EA\u52A8\u6CE8\u5165\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\u63A8\u8FDB\uFF08\u4E2D\u95F4\u6001\u4E0D\u56DE\u6D41\uFF0C\u9632\u4E8B\u4EF6\u6D2A\u5CF0\uFF09\u3002parallel\uFF08\u9ED8\u8BA4\uFF09=\u5404\u6B65\u9AA4\u5E76\u53D1\u6267\u884C\u3001\u7ED3\u679C\u6309\u5E8F\u805A\u5408\uFF0C\u9002\u5408\u4E92\u76F8\u72EC\u7ACB\u7684\u53EA\u8BFB/\u5206\u6790\u4EFB\u52A1\uFF1Bpipeline=\u6B65\u9AA4\u4E32\u884C\uFF0C\u524D\u9636\u6BB5\u4EA7\u51FA\u81EA\u52A8\u4F5C\u4E3A\u540E\u9636\u6BB5\u8F93\u5165\uFF0C\u9002\u5408\u5206\u9636\u6BB5\u52A0\u5DE5\uFF08\u62BD\u53D6\u2192\u5F52\u7C7B\u2192\u6C47\u603B\uFF09\u3002",
+            "\u6D3E\u51FA\u540E\u4F60\u53EF\u7ACB\u5373\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1 / \u56DE\u590D\u7528\u6237\uFF1B\u5F53\u524D\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u53EF\u7B80\u77ED\u544A\u77E5\u5DF2\u7F16\u6392\u5E76\u7ED3\u675F\u672C\u8F6E\u2014\u2014\u6C47\u603B\u9001\u8FBE\u65F6\u4F60\u4F1A\u88AB\u81EA\u52A8\u5524\u9192\u3002",
             '\u6B65\u9AA4\u53EF\u7528 name \u5957\u7528\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF09\u3001key \u4F5C\u7ED3\u679C\u6807\u7B7E\u3002parallel \u9ED8\u8BA4\u5171\u4EAB\u5DE5\u4F5C\u533A\uFF0C\u4EC5\u9002\u5408\u5E76\u884C\u8BFB/\u5206\u6790\uFF1B\u5E76\u884C\u5199/\u8FC1\u79FB\u7528 isolation="worktree"\uFF08\u6BCF\u6B65\u72EC\u7ACB git worktree\uFF0C\u7ED3\u675F\u540E\u6536\u5272\u5404\u6B65 diff\uFF09\u3002',
             "\u4E0E spawn_agent \u7684\u5206\u5DE5\uFF1A\u5355\u4EFB\u52A1\u4E32\u884C\u59D4\u6D3E\u7528 spawn_agent\uFF1B\u4EFB\u52A1\u53EF\u5206\u89E3\u3001\u591A\u5206\u652F\u6216\u6D41\u6C34\u7EBF\u5F0F\u65F6\u7528\u672C\u5DE5\u5177\u3002"
           ].join("\n"),
@@ -6417,18 +6640,29 @@ var init_workflow = __esm({
             required: ["steps"]
           },
           safetyLevel: "safe" /* SAFE */,
-          isSync: true,
+          isSync: false,
           // 聚合输出整体兜底截断（各子 agent 结果已按 workflowPerStepChars 单独截断）。
+          // ★ 异步化后工具结果 = 首个 yield 的启动回执（天然短）；此上限改用于终态汇总的 inbox 报文截断。
           maxOutputCharacters: 18e3,
-          async execute(args, ctx) {
-            if (!ctx) return toolFailure("[\u5DE5\u4F5C\u6D41]\uFF1Arun_workflow \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+          // ★ 子代理异步化（方案 §4.4）：async* + 首个 yield 立即回执；全部步骤在 generator 挂起期间后台执行，
+          //   完成后一条终态汇总经 agentWake.notifySubagentDone 回流（中间态不回流，防事件洪峰）。
+          //   宿主中止时执行层 gen.return() 拦在 await 前 → 不产生中止后的唤醒（与 spawn_agent 同语义）。
+          async *execute(args, ctx) {
+            if (!ctx) {
+              yield toolFailure("[\u5DE5\u4F5C\u6D41]\uFF1Arun_workflow \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+              return;
+            }
             const maxSteps = appConfig.workflowMaxSteps;
             const validationError = validateWorkflowArgs(args, maxSteps);
-            if (validationError) return validationError;
+            if (validationError) {
+              yield validationError;
+              return;
+            }
             const mode = args.mode === "pipeline" ? "pipeline" : "parallel";
             const isolation = args.isolation === "worktree" ? "worktree" : "none";
             if (isolation === "worktree" && mode === "pipeline") {
-              return toolFailure('[\u5DE5\u4F5C\u6D41]\uFF1Aisolation="worktree" \u6682\u4EC5\u652F\u6301 parallel \u6A21\u5F0F\uFF08pipeline \u4E32\u884C\u65E0\u9700\u9694\u79BB\uFF09\u3002\u8BF7\u6539 mode=parallel \u6216 isolation=none\u3002');
+              yield toolFailure('[\u5DE5\u4F5C\u6D41]\uFF1Aisolation="worktree" \u6682\u4EC5\u652F\u6301 parallel \u6A21\u5F0F\uFF08pipeline \u4E32\u884C\u65E0\u9700\u9694\u79BB\uFF09\u3002\u8BF7\u6539 mode=parallel \u6216 isolation=none\u3002');
+              return;
             }
             const steps = args.steps.map((s) => ({
               task: String(s.task),
@@ -6437,8 +6671,13 @@ var init_workflow = __esm({
               key: s.key ? String(s.key) : void 0
             }));
             if (ctx.depth >= MAX_AGENT_DEPTH) {
-              return toolFailure(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\uFF0C\u65E0\u6CD5\u6D3E\u751F\u5DE5\u4F5C\u6D41\u5B50 agent\u3002\u8BF7\u5728\u672C\u5C42\u7EA7\u81EA\u884C\u6D88\u5316\u4EFB\u52A1\u3002`);
+              yield toolFailure(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\uFF0C\u65E0\u6CD5\u6D3E\u751F\u5DE5\u4F5C\u6D41\u5B50 agent\u3002\u8BF7\u5728\u672C\u5C42\u7EA7\u81EA\u884C\u6D88\u5316\u4EFB\u52A1\u3002`);
+              return;
             }
+            yield [
+              `\u2705 \u5DE5\u4F5C\u6D41\u5DF2\u5F02\u6B65\u542F\u52A8\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65${isolation === "worktree" ? "\uFF0C\u6BCF\u6B65\u72EC\u7ACB git worktree \u9694\u79BB" : ""}\uFF09\u3002`,
+              `\u5168\u90E8\u6B65\u9AA4\u540E\u53F0\u6267\u884C\u5B8C\u6BD5\u540E\uFF0C\u4E00\u6761\u7EC8\u6001\u6C47\u603B\u4F1A\u81EA\u52A8\u9001\u8FBE\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\uFF08\u4E2D\u95F4\u6001\u4E0D\u56DE\u6D41\uFF09\uFF1B\u671F\u95F4\u65E0\u9700\u7B49\u5F85\u2014\u2014\u53EF\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1\uFF0C\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u7B80\u77ED\u544A\u77E5\u7528\u6237\u5373\u53EF\u6536\u5C3E\u672C\u8F6E\u3002`
+            ].join("\n");
             const approvalMutex = createSemaphore(1);
             const serializedApproval = ctx.requestApproval ? async (...raArgs) => {
               await approvalMutex.acquire();
@@ -6521,9 +6760,25 @@ var init_workflow = __esm({
                 outcomes = await Promise.all(running);
               }
             } catch (err) {
-              return toolFailure(`[\u5DE5\u4F5C\u6D41\u7F16\u6392\u5F02\u5E38]\uFF1A${err?.message ?? err}`);
+              await notifySubagentDone(ctx.sessionId, [
+                `\u{1F916} [\u5DE5\u4F5C\u6D41\u5B8C\u6210]\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65\uFF09`,
+                `\u72B6\u6001\uFF1Aerror\uFF08\u7F16\u6392\u5F02\u5E38\uFF09`,
+                `\u6C47\u603B\uFF1A`,
+                `\u26A0\uFE0F [\u5DE5\u4F5C\u6D41\u7F16\u6392\u5F02\u5E38]\uFF1A${err?.message ?? err}`
+              ].join("\n"));
+              return;
             }
-            return formatWorkflowResult(mode, outcomes);
+            const allOk = outcomes.every((o) => o.ok);
+            const abortedCount = outcomes.filter((o) => !o.ok && o.output.includes("\u5DF2\u4E2D\u6B62")).length;
+            const status = abortedCount === outcomes.length ? "aborted" : allOk ? "final" : "error";
+            const statusLabel = status === "final" ? "final\uFF08\u5168\u90E8\u6B65\u9AA4\u6B63\u5E38\u5B8C\u6210\uFF09" : status === "aborted" ? "aborted\uFF08\u5168\u90E8\u6B65\u9AA4\u88AB\u4E2D\u6B62\uFF09" : "error\uFF08\u90E8\u5206\u6B65\u9AA4\u5931\u8D25/\u4E2D\u6B62\uFF09";
+            await notifySubagentDone(ctx.sessionId, [
+              `\u{1F916} [\u5DE5\u4F5C\u6D41\u5B8C\u6210]\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65\uFF09`,
+              `\u72B6\u6001\uFF1A${statusLabel}`,
+              `\u6C47\u603B\uFF1A`,
+              // 截断口径与原同步返回一致（maxOutputCharacters 18000）
+              truncateToolResult(formatWorkflowResult(mode, outcomes), 18e3)
+            ].join("\n"));
           }
         }
       }
@@ -10797,8 +11052,9 @@ var init_frontmatter = __esm({
 
 // ../core/src/memory/loader.ts
 import fs28 from "fs/promises";
+import os5 from "os";
 import path30 from "path";
-var GLOBAL_MEMORY_DIR, SOURCES, VALID_TYPES, parseMemoryAt, loadMemories, initMemories;
+var GLOBAL_MEMORY_DIR, SOURCES, VALID_TYPES, NAME_RE, parseMemoryAt, MAX_EXTERNAL_ITEMS, EXTERNAL_DESC_MAX_CHARS, EXTERNAL_BODY_MAX_BYTES, EXTERNAL_RULES, sanitizeExternalStem, extractExternalTitle, buildExternalDescription, truncateUtf8ToBytes, scanExternalRule, externalNoticeShown, loadExternalMemories, loadMemories, initMemories;
 var init_loader3 = __esm({
   "../core/src/memory/loader.ts"() {
     "use strict";
@@ -10812,6 +11068,7 @@ var init_loader3 = __esm({
       { dir: path30.join(process.cwd(), ".deepseeker-code", "memory"), source: "project" }
     ];
     VALID_TYPES = ["user", "feedback", "project", "reference"];
+    NAME_RE = /^[a-z0-9-]+$/;
     parseMemoryAt = async (file, _dir, source) => {
       let raw;
       try {
@@ -10830,7 +11087,7 @@ var init_loader3 = __esm({
         console.warn(`\u26A0\uFE0F [memory] \u7F3A\u5C11 name \u6216 description\uFF08${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
         return null;
       }
-      if (!/^[a-z0-9-]+$/.test(name)) {
+      if (!NAME_RE.test(name)) {
         console.warn(`\u26A0\uFE0F [memory] name "${name}" \u4E0D\u5408\u6CD5\uFF08\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
         return null;
       }
@@ -10845,6 +11102,128 @@ var init_loader3 = __esm({
       }
       return { name, description, type, body: parsed.body.trim(), source, file };
     };
+    MAX_EXTERNAL_ITEMS = 12;
+    EXTERNAL_DESC_MAX_CHARS = 120;
+    EXTERNAL_BODY_MAX_BYTES = 64 * 1024;
+    EXTERNAL_RULES = [
+      // 全局层（~ 下，存在才扫，缺省静默跳过）
+      { dir: path30.join(os5.homedir(), ".claude"), file: "CLAUDE.md", name: "ext-claude", projectLayer: false },
+      { dir: path30.join(os5.homedir(), ".codex"), file: "AGENTS.md", name: "ext-codex", projectLayer: false },
+      { dir: path30.join(os5.homedir(), ".gemini"), file: "GEMINI.md", name: "ext-gemini", projectLayer: false },
+      // 项目层（<cwd> 下）
+      { dir: process.cwd(), file: "CLAUDE.md", name: "ext-claude-project", projectLayer: true },
+      { dir: process.cwd(), file: "AGENTS.md", name: "ext-agents", projectLayer: true },
+      { dir: process.cwd(), file: "GEMINI.md", name: "ext-gemini-project", projectLayer: true },
+      { dir: path30.join(process.cwd(), ".cursor", "rules"), name: (stem) => `ext-cursor-${stem}`, projectLayer: true },
+      { dir: path30.join(process.cwd(), ".github"), file: "copilot-instructions.md", name: "ext-copilot", projectLayer: true }
+    ];
+    sanitizeExternalStem = (stem) => stem.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+    extractExternalTitle = (raw, fallbackStem) => {
+      const lines = raw.split(/\r?\n/);
+      for (const line of lines) {
+        const m = /^#\s+(.+)$/.exec(line);
+        if (m) return m[1].trim();
+      }
+      for (const line of lines) {
+        const t = line.trim();
+        if (t) return t.replace(/^#+\s*/, "") || fallbackStem;
+      }
+      return fallbackStem;
+    };
+    buildExternalDescription = (label, title) => {
+      const full = `[\u5916\u90E8:${label}] ${title.replace(/\s+/g, " ").trim()}`;
+      return full.length > EXTERNAL_DESC_MAX_CHARS ? full.slice(0, EXTERNAL_DESC_MAX_CHARS) : full;
+    };
+    truncateUtf8ToBytes = (text, maxBytes) => {
+      const buf = Buffer.from(text, "utf-8");
+      if (buf.length <= maxBytes) return { text, truncated: false };
+      return { text: buf.subarray(0, maxBytes).toString("utf-8"), truncated: true };
+    };
+    scanExternalRule = async (rule) => {
+      let entries;
+      try {
+        entries = await fs28.readdir(rule.dir, { withFileTypes: true });
+      } catch {
+        return [];
+      }
+      const out = [];
+      for (const entry of entries) {
+        if (!entry.isFile()) continue;
+        if (rule.file ? entry.name !== rule.file : !entry.name.endsWith(".md")) continue;
+        const stem = entry.name.replace(/\.md$/, "");
+        const file = path30.join(rule.dir, entry.name);
+        const name = typeof rule.name === "function" ? sanitizeExternalStem(stem) ? `ext-cursor-${sanitizeExternalStem(stem)}` : "" : rule.name;
+        if (!name || !NAME_RE.test(name)) {
+          console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6587\u4EF6\u540D\u4E3B\u5E72\u65E0\u6CD5\u751F\u6210\u5408\u6CD5\u8BB0\u5FC6\u540D\uFF08${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
+          continue;
+        }
+        let raw;
+        try {
+          raw = await fs28.readFile(file, "utf-8");
+        } catch {
+          continue;
+        }
+        const body = truncateUtf8ToBytes(raw.trim(), EXTERNAL_BODY_MAX_BYTES);
+        if (!body.text) continue;
+        if (body.truncated) console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6587\u4EF6\u8D85 ${EXTERNAL_BODY_MAX_BYTES} \u5B57\u8282\u5DF2\u622A\u65AD\uFF08${file}\uFF09`);
+        const stat = await fs28.stat(file).catch(() => null);
+        out.push({
+          item: {
+            name,
+            description: buildExternalDescription(rule.file ?? entry.name, extractExternalTitle(raw, stem)),
+            type: "reference",
+            // 外部二手资料的语义即参考（§4），不冒充 user/feedback 画像
+            body: body.text,
+            source: "external",
+            file
+          },
+          mtimeMs: stat?.mtimeMs ?? 0
+        });
+      }
+      return out;
+    };
+    externalNoticeShown = false;
+    loadExternalMemories = async (includeProject) => {
+      if (!appConfig.memoryExternal) return 0;
+      const candidates = [];
+      for (const rule of EXTERNAL_RULES) {
+        if (rule.projectLayer && !includeProject) continue;
+        candidates.push(...await scanExternalRule(rule));
+      }
+      if (candidates.length === 0) return 0;
+      const dropped = [];
+      if (candidates.length > MAX_EXTERNAL_ITEMS) {
+        candidates.sort((a, b) => b.mtimeMs - a.mtimeMs);
+        for (const c of candidates.slice(MAX_EXTERNAL_ITEMS)) dropped.push(c.item.name);
+        candidates.length = MAX_EXTERNAL_ITEMS;
+      }
+      const skipped = [];
+      for (const { item } of candidates) {
+        const all = listMemories();
+        if (all.length >= MEMORY_LIMITS.maxCount) {
+          skipped.push(item.name);
+          continue;
+        }
+        const curBytes = all.length === 0 ? 0 : Buffer.byteLength(all.map(memoryIndexLine).join("\n"), "utf-8");
+        if (curBytes + Buffer.byteLength(memoryIndexLine(item), "utf-8") > MEMORY_LIMITS.maxIndexBytes) {
+          skipped.push(item.name);
+          continue;
+        }
+        registerMemory(item);
+      }
+      if (dropped.length > 0) {
+        console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6761\u76EE\u8D85\u8F6F\u4E0A\u9650 ${MAX_EXTERNAL_ITEMS}\uFF0C\u6309 mtime \u4E22\u5F03\u6700\u65E7 ${dropped.length} \u6761\uFF1A${dropped.join("\u3001")}`);
+      }
+      if (skipped.length > 0) {
+        console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6761\u76EE\u8D85\u5171\u4EAB\u9884\u7B97\uFF08MEMORY_LIMITS\uFF1A${MEMORY_LIMITS.maxCount} \u6761/${MEMORY_LIMITS.maxIndexBytes} \u5B57\u8282\uFF09\uFF0C\u62D2\u8F7D\uFF1A${skipped.join("\u3001")}`);
+      }
+      const n = candidates.length - skipped.length;
+      if (n > 0 && !externalNoticeShown) {
+        externalNoticeShown = true;
+        console.log("\u{1F310} [memory] \u5916\u90E8\u8BB0\u5FC6\u5DF2\u63A5\u5165\uFF08\u53EA\u8BFB\uFF09\uFF1A\u6765\u6E90\u6587\u4EF6\u5185\u5BB9\u5C06\u968F\u8BF7\u6C42\u53D1\u9001\u7ED9 DeepSeek API\u3002\u5173\u95ED\uFF1Asettings.json engine.memoryExternal=false");
+      }
+      return n;
+    };
     loadMemories = async (includeProject) => {
       clearMemories();
       const picked = await scanSources(
@@ -10853,6 +11232,7 @@ var init_loader3 = __esm({
         parseMemoryAt
       );
       for (const { item } of picked) registerMemory(item);
+      await loadExternalMemories(includeProject);
       return listMemories().length;
     };
     initMemories = async (includeProject) => {
@@ -10900,7 +11280,7 @@ var init_usage = __esm({
 // ../core/src/tool/registry/memory.ts
 import fs30 from "fs/promises";
 import path32 from "path";
-var MAX_BODY_BYTES, MAX_DESCRIPTION_CHARS, MEMORY_LIMITS, NAME_RE, VALID_TYPES2, memoryFilePath, sanitizeLine, buildMemoryMd, writeAndRegister, indexLineBytes, memoryTools;
+var MAX_BODY_BYTES, MAX_DESCRIPTION_CHARS, NAME_RE2, VALID_TYPES2, memoryFilePath, sanitizeLine, buildMemoryMd, writeAndRegister, indexLineBytes, memoryTools;
 var init_memory = __esm({
   "../core/src/tool/registry/memory.ts"() {
     "use strict";
@@ -10911,8 +11291,7 @@ var init_memory = __esm({
     init_usage();
     MAX_BODY_BYTES = 64 * 1024;
     MAX_DESCRIPTION_CHARS = 200;
-    MEMORY_LIMITS = { maxCount: 200, maxIndexBytes: 16 * 1024 };
-    NAME_RE = /^[a-z0-9-]+$/;
+    NAME_RE2 = /^[a-z0-9-]+$/;
     VALID_TYPES2 = ["user", "feedback", "project", "reference"];
     memoryFilePath = (name, project) => project ? path32.join(process.cwd(), ".deepseeker-code", "memory", `${name}.md`) : path32.join(GLOBAL_MEMORY_DIR, `${name}.md`);
     sanitizeLine = (s) => String(s ?? "").replace(/[\r\n]+/g, " ").trim();
@@ -10975,7 +11354,8 @@ ${body.trim()}
             const body = typeof args?.body === "string" ? args.body : "";
             const type = sanitizeLine(args?.type) || "reference";
             const project = args?.project === true;
-            if (!NAME_RE.test(name)) return toolFailure(`[memory_save] name \u975E\u6CD5\uFF1A\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C\u6536\u5230 "${name}"\u3002`);
+            if (!NAME_RE2.test(name)) return toolFailure(`[memory_save] name \u975E\u6CD5\uFF1A\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C\u6536\u5230 "${name}"\u3002`);
+            if (name.startsWith("ext-")) return toolFailure(`[memory_save] "ext-" \u540D\u79F0\u524D\u7F00\u4E3A\u5916\u90E8\u8BB0\u5FC6\u4FDD\u7559\u5B57\uFF08\u8BE5\u524D\u7F00\u6761\u76EE\u7531 loader \u4ECE\u5176\u4ED6 agent \u7684\u89C4\u5219/\u6307\u4EE4\u6587\u4EF6\u53EA\u8BFB\u6865\u63A5\uFF0C\u540D\u79F0\u56FA\u5B9A\u5206\u914D\uFF09\u3002\u8BF7\u6539\u7528\u5176\u4ED6\u540D\u79F0\u3002`);
             if (!description) return toolFailure("[memory_save] description \u4E0D\u80FD\u4E3A\u7A7A\u3002");
             if (description.length > MAX_DESCRIPTION_CHARS) return toolFailure(`[memory_save] description \u8D85\u8FC7 ${MAX_DESCRIPTION_CHARS} \u5B57\u7B26\u4E0A\u9650\uFF08\u5F53\u524D ${description.length}\uFF09\u3002\u8BF7\u538B\u7F29\u4E3A\u4E00\u53E5\u8BDD\u3002`);
             if (!body.trim()) return toolFailure("[memory_save] body \u4E0D\u80FD\u4E3A\u7A7A\u3002");
@@ -11002,7 +11382,7 @@ ${body.trim()}
         type: "function",
         function: {
           name: "memory_read",
-          description: "\u8BFB\u53D6\u6307\u5B9A\u8BB0\u5FC6\u7684\u5B8C\u6574\u6B63\u6587\u3002\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4EC5\u6CE8\u5165\u8BB0\u5FC6\u7D22\u5F15\uFF08\u4E00\u884C/\u6761\uFF0C\u7701 token\uFF09\uFF1B\u5F53\u7D22\u5F15\u4E2D\u67D0\u6761\u4E0E\u5F53\u524D\u4EFB\u52A1\u76F8\u5173\u3001\u9700\u8981\u5168\u6587\u7EC6\u8282\u65F6\uFF0C\u8C03\u7528\u672C\u5DE5\u5177\u6309\u9700\u53EC\u56DE\u3002",
+          description: "\u8BFB\u53D6\u6307\u5B9A\u8BB0\u5FC6\u7684\u5B8C\u6574\u6B63\u6587\u3002\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4EC5\u6CE8\u5165\u8BB0\u5FC6\u7D22\u5F15\uFF08\u4E00\u884C/\u6761\uFF0C\u7701 token\uFF09\uFF1B\u5F53\u7D22\u5F15\u4E2D\u67D0\u6761\u4E0E\u5F53\u524D\u4EFB\u52A1\u76F8\u5173\u3001\u9700\u8981\u5168\u6587\u7EC6\u8282\u65F6\uFF0C\u8C03\u7528\u672C\u5DE5\u5177\u6309\u9700\u53EC\u56DE\u3002\u7D22\u5F15\u4E2D\u6807 [\u5916\u90E8:*] \u7684\u6761\u76EE\u662F\u5176\u4ED6 agent \u89C4\u5219\u6587\u4EF6\u7684\u4E8C\u624B\u6458\u5F55\uFF08type=reference\uFF09\uFF1A\u4E0E\u73B0\u573A\u5B9E\u9645\u4E0D\u7B26\u65F6\u4EE5\u73B0\u573A\u4E3A\u51C6\uFF0C\u5E76\u53EF memory_save \u4E00\u6761\u81EA\u6709\u8BB0\u5FC6\u7EA0\u504F\u3002",
           parameters: {
             type: "object",
             properties: {
@@ -11061,6 +11441,7 @@ ${lines.join("\n")}`;
           requireApproval: (args) => `\u5220\u9664\u6301\u4E45\u8BB0\u5FC6 **${sanitizeLine(args?.name)}**\uFF08\u8DE8\u4F1A\u8BDD\u751F\u6548\uFF0C\u5220\u9664\u540E\u4E0D\u53EF\u6062\u590D\uFF09`,
           async execute(args) {
             const name = sanitizeLine(args?.name);
+            if (name.startsWith("ext-")) return toolFailure(`[memory_delete] \u5916\u90E8\u6761\u76EE\u53EA\u8BFB\uFF0C\u8BF7\u5230\u6765\u6E90\u6587\u4EF6\u5904\u4FEE\u6539\uFF08ext- \u524D\u7F00\u6761\u76EE\u7531 loader \u4ECE\u5176\u4ED6 agent \u7684\u89C4\u5219/\u6307\u4EE4\u6587\u4EF6\u53EA\u8BFB\u6865\u63A5\uFF0C\u5220\u9664/\u4FEE\u6539\u8BF7\u76F4\u63A5\u7F16\u8F91\u6765\u6E90\u6587\u4EF6\u540E\u91CD\u542F\u8FDB\u7A0B\uFF09\u3002`);
             const m = getMemory(name);
             if (!m) return toolFailure(`\u672A\u627E\u5230\u8BB0\u5FC6\uFF1A${name}\uFF08\u53EF\u80FD\u5DF2\u88AB\u5220\u9664\uFF09\u3002`);
             try {
@@ -12189,7 +12570,7 @@ var init_toolExecution = __esm({
       const isForegroundCommand = isCommandTool && matchedTool.function.isSync !== false;
       const cmdIsScriptRunner = isCommandTool && isScriptRunnerCommand(typeof state.calledArgs?.command === "string" ? state.calledArgs.command : "");
       const argCwd = typeof state.calledArgs?.cwd === "string" ? state.calledArgs.cwd.trim() : "";
-      const samePath = (a, b) => {
+      const samePath2 = (a, b) => {
         try {
           const ra = path36.resolve(a), rb = path36.resolve(b);
           return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
@@ -12197,7 +12578,7 @@ var init_toolExecution = __esm({
           return false;
         }
       };
-      const scriptRunnerCwdDrift = cmdIsScriptRunner && argCwd !== "" && !samePath(argCwd, toolCtx.cwd ?? process.cwd());
+      const scriptRunnerCwdDrift = cmdIsScriptRunner && argCwd !== "" && !samePath2(argCwd, toolCtx.cwd ?? process.cwd());
       const scriptRunnerBlocked = cmdIsScriptRunner && (perm === null || scriptRunnerCwdDrift);
       if (scriptRunnerCwdDrift) needApproval = true;
       if (perm === null && needApproval && !state.denied && !scriptRunnerBlocked && isForegroundCommand && isReadOnlyCommand(typeof state.calledArgs?.command === "string" ? state.calledArgs.command : "")) {
@@ -13186,7 +13567,7 @@ var init_prices = __esm({
         peak: { input: 9, output: 27, cacheHit: 0.3 }
       }
     };
-    PRICES_VERIFIED_AT = "2026-10-19";
+    PRICES_VERIFIED_AT = "2026-11-03";
     PRICES_STALE_DAYS = 30;
     pricesAgeDays = () => Math.max(0, Math.floor((Date.now() - Date.parse(`${PRICES_VERIFIED_AT}T00:00:00Z`)) / 864e5));
     isBeijingPeak = (ts2 = /* @__PURE__ */ new Date()) => {
@@ -13843,6 +14224,7 @@ async function* runAgent(message, options) {
       }
       const inboxTexts = claimSessionInbox(sessionId);
       if (inboxTexts.length > 0) {
+        clearQueuedWake(sessionId);
         for (const t of inboxTexts) {
           message.push({ role: "user", content: t });
           await appendMessage({ sessionId, role: "user", content: t });
@@ -14112,6 +14494,7 @@ var init_runAgent = __esm({
     "use strict";
     init_transcript();
     init_inbox();
+    init_agentWake();
     init_common();
     init_contextCore();
     init_contentParts();
@@ -14198,7 +14581,7 @@ var init_lineage = __esm({
 });
 
 // ../core/src/agent/subagent.ts
-var SUBAGENT_DENYLIST, filterToolsForSubagent, activeSubagents, failText, RESUME_NOTE, createProgressThrottler, runSubagent;
+var SUBAGENT_DENYLIST, filterToolsForSubagent, activeSubagents, failText, RESUME_NOTE, createProgressThrottler, prepareSubagent, runPreparedSubagent, runSubagent;
 var init_subagent = __esm({
   "../core/src/agent/subagent.ts"() {
     "use strict";
@@ -14211,6 +14594,7 @@ var init_subagent = __esm({
     init_registry4();
     init_hooks();
     init_lineage();
+    init_agentWake();
     SUBAGENT_DENYLIST = /* @__PURE__ */ new Set(["run_command", "delete_path", "run_in_background"]);
     filterToolsForSubagent = (allTools, manifest) => {
       if (manifest && manifest.tools.length > 0) {
@@ -14245,57 +14629,33 @@ var init_subagent = __esm({
         }
       };
     };
-    runSubagent = async (spec, ctx, getGlobalTools) => {
+    prepareSubagent = async (spec, ctx, getGlobalTools) => {
       const { task, name, role, resumeSessionId } = spec;
       const resuming = typeof resumeSessionId === "string" && resumeSessionId.length > 0;
       if (ctx.depth >= MAX_AGENT_DEPTH) {
-        return {
-          ok: false,
-          output: failText(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\u3002\u7981\u6B62\u7EE7\u7EED\u65E0\u9650\u5411\u4E0B\u5D4C\u5957\uFF0C\u8BF7\u7236\u5C42\u7EA7 Agent \u81EA\u884C\u6D88\u5316\u5F53\u524D\u4EFB\u52A1\u3002`),
-          sessionId: ""
-        };
+        return { ok: false, error: failText(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\u3002\u7981\u6B62\u7EE7\u7EED\u65E0\u9650\u5411\u4E0B\u5D4C\u5957\uFF0C\u8BF7\u7236\u5C42\u7EA7 Agent \u81EA\u884C\u6D88\u5316\u5F53\u524D\u4EFB\u52A1\u3002`) };
       }
       if (resuming) {
         const target = resumeSessionId;
         if (!target.includes("__sub__")) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A${target} \u4E0D\u662F\u5B50 Agent \u4F1A\u8BDD ID\uFF08\u5E94\u5F62\u5982 <\u4F1A\u8BDD>__sub__<uuid>\uFF0C\u6765\u81EA\u6B64\u524D spawn_agent \u8FD4\u56DE\u7684 agent_id\uFF09\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A${target} \u4E0D\u662F\u5B50 Agent \u4F1A\u8BDD ID\uFF08\u5E94\u5F62\u5982 <\u4F1A\u8BDD>__sub__<uuid>\uFF0C\u6765\u81EA\u6B64\u524D spawn_agent \u8FD4\u56DE\u7684 agent_id\uFF09\u3002`) };
         }
         if (!ownerCanApprove(target, ctx.sessionId)) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u4E0D\u5C5E\u4E8E\u5F53\u524D\u4F1A\u8BDD\uFF08\u53CA\u5176 fork \u8840\u7F18\uFF09\uFF0C\u7981\u6B62\u8DE8\u4F1A\u8BDD\u590D\u6D3B\u3002\u8BF7\u6838\u5BF9 agent_id \u6216\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u4E0D\u5C5E\u4E8E\u5F53\u524D\u4F1A\u8BDD\uFF08\u53CA\u5176 fork \u8840\u7F18\uFF09\uFF0C\u7981\u6B62\u8DE8\u4F1A\u8BDD\u590D\u6D3B\u3002\u8BF7\u6838\u5BF9 agent_id \u6216\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`) };
         }
         if (activeSubagents.has(target)) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50 Agent ${target} \u6B63\u5728\u6267\u884C\u4E2D\uFF0C\u7981\u6B62\u5E76\u53D1\u7EED\u8DD1\u540C\u4E00\u5B50\u4F1A\u8BDD\uFF08\u4F1A\u4EA4\u53C9\u5199\u574F\u8F6C\u5F55\uFF09\u3002\u8BF7\u7B49\u5F85\u5176\u5B8C\u6210\u540E\u518D\u8BD5\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50 Agent ${target} \u6B63\u5728\u6267\u884C\u4E2D\uFF0C\u7981\u6B62\u5E76\u53D1\u7EED\u8DD1\u540C\u4E00\u5B50\u4F1A\u8BDD\uFF08\u4F1A\u4EA4\u53C9\u5199\u574F\u8F6C\u5F55\uFF09\u3002\u8BF7\u7B49\u5F85\u5176\u5B8C\u6210\u540E\u518D\u8BD5\u3002`) };
         }
         const existing = await readTranscriptLines(target);
         if (existing.length === 0) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u7684\u8F6C\u5F55\u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A\uFF0C\u65E0\u6CD5\u7EED\u8DD1\u3002\u8BF7\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u7684\u8F6C\u5F55\u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A\uFF0C\u65E0\u6CD5\u7EED\u8DD1\u3002\u8BF7\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`) };
         }
       }
       const subSessionId = resuming ? resumeSessionId : `${ctx.sessionId}__sub__${createUUID()}`;
       const parentSystemPrompt = ctx.parentSystemPrompt || "";
       const manifest = name ? getAgent(name) : void 0;
       if (name && !manifest) {
-        return {
-          ok: false,
-          output: failText(`[\u6D3E\u751F\u5931\u8D25]\uFF1A\u672A\u627E\u5230\u58F0\u660E\u5F0F\u5B50 Agent "${name}"\u3002\u8BF7\u6838\u5BF9\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4E2D\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\u7684\u540D\u79F0\u62FC\u5199\u3002`),
-          sessionId: ""
-        };
+        return { ok: false, error: failText(`[\u6D3E\u751F\u5931\u8D25]\uFF1A\u672A\u627E\u5230\u58F0\u660E\u5F0F\u5B50 Agent "${name}"\u3002\u8BF7\u6838\u5BF9\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4E2D\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\u7684\u540D\u79F0\u62FC\u5199\u3002`) };
       }
       const SUBAGENT_REPORT_REQ = `\u3010\u6C47\u62A5\u8981\u6C42\u3011\u6700\u7EC8\u6C47\u62A5\u63A7\u5236\u5728\u4E00\u5C4F\u5185\uFF1A\u5DF2\u5B8C\u6210/\u6539\u52A8\u70B9\uFF08\u6587\u4EF6\u8DEF\u5F84\uFF09/\u9A8C\u8BC1\u7ED3\u679C/\u672A\u5B8C\u6210\u9879\u3002\u4E0D\u8981\u590D\u8FF0\u8FC7\u7A0B\u4E0E\u5DE5\u5177\u8F93\u51FA\u2014\u2014\u7236\u7EA7\u53EF\u76F4\u63A5\u7ECF resume \u8FFD\u95EE\u7EC6\u8282\u3002`;
       const subSystem = manifest ? [
@@ -14327,8 +14687,15 @@ var init_subagent = __esm({
       const allTools = getGlobalTools();
       const toolSchemas = filterToolsForSubagent(allTools, manifest);
       console.log(`${resuming ? "\u{1F501} \u7EED\u8DD1" : "\u{1F423} \u6D3E\u751F"}\u5B50 Agent [\u6DF1\u5EA6: ${ctx.depth + 1}/${MAX_AGENT_DEPTH}][${subSessionId}]${manifest ? ` \u58F0\u660E\u5F0F=${manifest.name}` : ""} \u4EFB\u52A1: "${task.slice(0, 50)}..."`);
+      const startCtx = { sessionId: subSessionId, parentSessionId: ctx.sessionId, task, depth: ctx.depth + 1, name: manifest?.name, cwd: ctx.cwd };
+      return { ok: true, prepared: { subSessionId, resuming, manifest, subSystem, subTaskPrompt, toolSchemas, startCtx, taskBrief: task.slice(0, 60) } };
+    };
+    runPreparedSubagent = async (prepared, ctx, opts) => {
+      const { subSessionId, manifest, subTaskPrompt, subSystem, toolSchemas, startCtx } = prepared;
+      const manifestName = manifest?.name;
       activeSubagents.add(subSessionId);
-      ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "start", name: manifest?.name, depth: ctx.depth + 1 });
+      trackSubagentInFlight(ctx.sessionId, subSessionId);
+      ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "start", name: manifest?.name, depth: startCtx.depth });
       try {
         const subMessages = await buildContextMessages(subSessionId, { role: "user", content: subTaskPrompt }, subSystem, manifest?.model);
         await appendMessage({ sessionId: subSessionId, role: "user", content: subTaskPrompt });
@@ -14346,7 +14713,7 @@ var init_subagent = __esm({
           depth: ctx.depth + 1,
           keepRecentUnits: ctx.keepRecentUnits,
           compactRatio: ctx.compactRatio,
-          parentSystemPrompt,
+          parentSystemPrompt: ctx.parentSystemPrompt,
           events: ctx.events,
           onUIEvent: ctx.onUIEvent,
           // ★ 必须透传：否则子 agent 调用需审批工具时前端收不到弹窗，waitForUserApproval 永久挂起（死锁）
@@ -14365,14 +14732,13 @@ var init_subagent = __esm({
           budgetCheck: ctx.budgetCheck
           // ★ P1-5 预算熔断链式透传：子 runAgent 轮边界探测父预算，超支即收尾（不等烧完）
         };
-        const startCtx = { sessionId: subSessionId, parentSessionId: ctx.sessionId, task, depth: ctx.depth + 1, name: manifest?.name, cwd: ctx.cwd };
         await dispatch("SubagentStart", startCtx);
         let result;
         const progress = createProgressThrottler((line) => ctx.onUIEvent?.({ type: "subagent.progress", text: line, agentKey: subSessionId, name: manifest?.name }));
         try {
           for await (const e of runAgent(subMessages, subOptions)) {
             if (ctx.abortSignal?.aborted) {
-              result = { ok: false, output: failText(`[\u5B50Agent\u4E2D\u65AD]\uFF1A\u6267\u884C\u5DF2\u88AB\u7528\u6237\u4E3B\u52A8\u53D1\u8D77\u7684 AbortSignal \u5F3A\u884C\u7194\u65AD\u3002`), sessionId: subSessionId, manifestName: manifest?.name };
+              result = { ok: false, output: failText(`[\u5B50Agent\u4E2D\u65AD]\uFF1A\u6267\u884C\u5DF2\u88AB\u7528\u6237\u4E3B\u52A8\u53D1\u8D77\u7684 AbortSignal \u5F3A\u884C\u7194\u65AD\u3002`), sessionId: subSessionId, manifestName: manifest?.name, status: "aborted" };
               break;
             }
             if (e.type === "final") {
@@ -14386,10 +14752,10 @@ var init_subagent = __esm({
             if (!hasFinalResult || !subResult.trim()) {
               subResult = `\uFF08\u672A\u80FD\u83B7\u53D6\u5230\u7ED3\u6784\u5316 final \u56DE\u62A5\u3002\u8BF7\u68C0\u67E5\u8BE5\u5B50 Session [${subSessionId}] \u7684\u6267\u884C\u5386\u53F2\uFF09`;
             }
-            result = { ok: true, output: subResult, sessionId: subSessionId, manifestName: manifest?.name };
+            result = { ok: true, output: subResult, sessionId: subSessionId, manifestName: manifest?.name, status: "final" };
           }
         } catch (streamError) {
-          result = { ok: false, output: failText(`[\u5B50Agent\u5D29\u6E83]\uFF1A\u5B50 Agent \u5728\u8FED\u4EE3\u63A8\u7406\u4E3B\u5FAA\u73AF\u65F6\u906D\u9047\u5E95\u5C42\u5F02\u5E38: ${streamError.message}`), sessionId: subSessionId, manifestName: manifest?.name };
+          result = { ok: false, output: failText(`[\u5B50Agent\u5D29\u6E83]\uFF1A\u5B50 Agent \u5728\u8FED\u4EE3\u63A8\u7406\u4E3B\u5FAA\u73AF\u65F6\u906D\u9047\u5E95\u5C42\u5F02\u5E38: ${streamError.message}`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
         } finally {
           try {
             ctx.onUIEvent?.({ type: "subagent.progress", text: "", done: true, agentKey: subSessionId });
@@ -14399,13 +14765,27 @@ var init_subagent = __esm({
             await dispatch("SubagentStop", { ...startCtx, ok: result.ok, output: result.output.slice(0, 2e3) }).catch((e) => console.warn(`\u26A0\uFE0F SubagentStop hook \u5F02\u5E38\uFF08\u5DF2\u5FFD\u7565\uFF09: ${e?.message ?? e}`));
           }
         }
-        return result ?? { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: \u672A\u77E5\u9519\u8BEF`), sessionId: subSessionId, manifestName: manifest?.name };
+        if (opts?.notifyDone && result && result.status !== "aborted") {
+          try {
+            await notifySubagentDone(ctx.sessionId, buildSubagentDoneReport(subSessionId, prepared.taskBrief, { status: result.status, output: result.output }));
+          } catch {
+          }
+        }
+        return result ?? { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: \u672A\u77E5\u9519\u8BEF`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
       } catch (error) {
-        return { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: ${error.message}`), sessionId: subSessionId, manifestName: manifest?.name };
+        return { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: ${error.message}`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
       } finally {
         activeSubagents.delete(subSessionId);
-        ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "stop", name: manifest?.name, depth: ctx.depth + 1 });
+        releaseSubagentInFlight(ctx.sessionId, subSessionId);
+        ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "stop", name: manifestName, depth: startCtx.depth });
+      }
+    };
+    runSubagent = async (spec, ctx, getGlobalTools) => {
+      const prep = await prepareSubagent(spec, ctx, getGlobalTools);
+      if (!prep.ok) {
+        return { ok: false, output: prep.error, sessionId: "", status: "error" };
       }
+      return runPreparedSubagent(prep.prepared, ctx);
     };
   }
 });
@@ -15461,7 +15841,7 @@ var init_expand = __esm({
 // ../core/src/serve/chatProcessing.ts
 import path48 from "path";
 import fs46 from "fs";
-var handleUnifiedChat;
+var handleUnifiedChat, handleUnifiedChatRun;
 var init_chatProcessing = __esm({
   "../core/src/serve/chatProcessing.ts"() {
     "use strict";
@@ -15481,8 +15861,33 @@ var init_chatProcessing = __esm({
     init_guard();
     init_systemPrompt();
     init_model();
+    init_agentWake();
     handleUnifiedChat = async (inbound, sendOutbound, sseWrite, abortSignal, opts) => {
+      let busyKey = typeof inbound.sessionId === "string" && inbound.sessionId ? inbound.sessionId : "";
+      markRunStart(busyKey);
+      try {
+        await handleUnifiedChatRun(inbound, sendOutbound, sseWrite, abortSignal, opts, (resolved) => {
+          if (busyKey === resolved) return;
+          markRunStart(resolved);
+          if (busyKey) markRunEnd(busyKey);
+          busyKey = resolved;
+        });
+      } finally {
+        markRunEnd(busyKey);
+      }
+    };
+    handleUnifiedChatRun = async (inbound, sendOutbound, sseWrite, abortSignal, opts, transferBusy) => {
       const sessionId = await getOrCreateSessionId(inbound.sessionId);
+      transferBusy?.(sessionId);
+      registerWakeDriverIfAbsent(sessionId, async () => {
+        await handleUnifiedChat(
+          { ...inbound, sessionId, content: AGENT_DONE_SENTINEL, attachments: void 0 },
+          sendOutbound,
+          sseWrite,
+          abortSignal,
+          opts
+        );
+      });
       try {
         inbound.content = expandSlashCommand(inbound.content);
       } catch {
@@ -16162,6 +16567,7 @@ var init_useChatState = __esm({
     init_transcript();
     init_fork();
     init_inbox();
+    init_agentWake();
     init_contextCore();
     init_bashDirect();
     init_guard();
@@ -16632,6 +17038,17 @@ var init_useChatState = __esm({
           budgetYuan: budgetYuanRef.current
           // ★ 预算制运行（成本信任链第二环 E1）：/budget 设置，超限 soft nudge + 120% 硬截断
         };
+        registerWakeDriver(sid, async () => {
+          if (sessionIdRef.current !== sid) return;
+          const myGen = ++turnGenRef.current;
+          setBusy(true);
+          pushInfo("\u{1F916} \u5B50\u4EE3\u7406\u5B8C\u6210\uFF0C\u81EA\u52A8\u5524\u9192\u4E3B\u4F1A\u8BDD\u7EE7\u7EED\u2026");
+          try {
+            await runOnce(sid, AGENT_DONE_SENTINEL, false);
+          } finally {
+            if (turnGenRef.current === myGen) setBusy(false);
+          }
+        });
         try {
           await handleUnifiedChat(
             { sessionId: sid, content: body },
@@ -19164,15 +19581,595 @@ ${listText}`);
   }
 });
 
+// ../core/src/agent/stallDetector.ts
+import { execFile as execFile2 } from "child_process";
+var CHECK_INTERVAL_SEC, GRACE_MIN, R1_WINDOW_MIN, R1_MIN_HITS, R2_WINDOW_MIN, R2_MIN_CALLS, R2_MAX_DISTINCT_SIG, R3_SILENCE_MIN, R4_WINDOW_MIN, R4_COST_DIVISOR, R6_STALL_BAND, HEALTH_GROWTH_LINES, SERIES_CAP, LOCKFILE_RE, EDIT_TOOLS, READONLY_TOOLS, normPath2, samePath, sortKeysDeep, argsKeyOf, similarSigOf, editTargetOf, extractTargetPaths, parseNumstatNet, MIN, StallDetector;
+var init_stallDetector = __esm({
+  "../core/src/agent/stallDetector.ts"() {
+    "use strict";
+    CHECK_INTERVAL_SEC = 60;
+    GRACE_MIN = 5;
+    R1_WINDOW_MIN = 10;
+    R1_MIN_HITS = 3;
+    R2_WINDOW_MIN = 15;
+    R2_MIN_CALLS = 3;
+    R2_MAX_DISTINCT_SIG = 2;
+    R3_SILENCE_MIN = 5;
+    R4_WINDOW_MIN = 5;
+    R4_COST_DIVISOR = 4;
+    R6_STALL_BAND = 3;
+    HEALTH_GROWTH_LINES = 20;
+    SERIES_CAP = 64;
+    LOCKFILE_RE = /(^|\/)(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb|bun\.lock|composer\.lock|poetry\.lock|Cargo\.lock|go\.sum)$/i;
+    EDIT_TOOLS = /* @__PURE__ */ new Set(["edit_file", "create_file", "write_file", "move_file", "notebook_edit"]);
+    READONLY_TOOLS = /* @__PURE__ */ new Set([
+      "read_file",
+      "list_dir",
+      "glob",
+      "search_grep",
+      "read_image",
+      "read_docx",
+      "read_xlsx",
+      "read_project_guide",
+      "recall",
+      "get_git_diff",
+      "git_status",
+      "git_log",
+      "find_references",
+      "get_diagnostics",
+      "goto_definition",
+      "view_symbol_outline",
+      "web_search",
+      "web_fetch"
+    ]);
+    normPath2 = (p) => p.trim().replace(/\\/g, "/").replace(/^[A-Za-z]:/, "").replace(/^\.\/+/, "").replace(/\/+$/, "").toLowerCase();
+    samePath = (a, b) => a === b || a.endsWith("/" + b) || b.endsWith("/" + a);
+    sortKeysDeep = (v) => {
+      if (Array.isArray(v)) return v.map(sortKeysDeep);
+      if (v && typeof v === "object") {
+        const out = {};
+        for (const k of Object.keys(v).sort()) out[k] = sortKeysDeep(v[k]);
+        return out;
+      }
+      return v;
+    };
+    argsKeyOf = (args) => {
+      try {
+        return JSON.stringify(sortKeysDeep(args ?? {})).slice(0, 200);
+      } catch {
+        return String(args);
+      }
+    };
+    similarSigOf = (args) => {
+      let s;
+      try {
+        s = JSON.stringify(sortKeysDeep(args ?? {}));
+      } catch {
+        return String(args);
+      }
+      return s.replace(/\d+/g, "").replace(/\/[^/"]+(?=")/, "");
+    };
+    editTargetOf = (args) => normPath2(String(args?.path ?? args?.source ?? args?.destination ?? args?.file_path ?? ""));
+    extractTargetPaths = (text) => {
+      const out = /* @__PURE__ */ new Set();
+      for (const m of text.match(/(?:[A-Za-z]:)?[\w.\-一-鿿]+(?:[/\\][\w.\-一-鿿]+)+\.[A-Za-z0-9]{1,6}/g) ?? []) {
+        out.add(normPath2(m));
+      }
+      return out;
+    };
+    parseNumstatNet = (stdout) => {
+      let net = 0;
+      for (const line of stdout.split("\n")) {
+        const m = /^(\d+|-)\t(\d+|-)\t(.+)$/.exec(line.trim());
+        if (!m) continue;
+        if (LOCKFILE_RE.test(m[3])) continue;
+        net += (m[1] === "-" ? 0 : parseInt(m[1], 10)) + (m[2] === "-" ? 0 : parseInt(m[2], 10));
+      }
+      return net;
+    };
+    MIN = 6e4;
+    StallDetector = class {
+      constructor(opts) {
+        this.stopFn = null;
+        this.started = false;
+        this.stopped = false;
+        this.paused = false;
+        this.ticking = false;
+        /** 宽限期基准（豁免解除时重置——豁免期不该吃掉 agent 的起步宽限）。字段名与同名 getter 刻意区分
+         *  （tsconfig 为 set 语义，私有字段与只读 getter 同名会在字段初始化时炸 "only a getter"）。 */
+        this.activeAt = 0;
+        this.lastEventAt = 0;
+        /** 抑制窗截止（政策层经 setSuppressUntil 设置：batch=nudge 后宽限；影子=强命中去重）。 */
+        this.suppressUntil = 0;
+        this.roundNo = 0;
+        this.calls = [];
+        this.finalSeen = false;
+        /** R6 净变更行数时间序列（batch 基线 = setup 完成后首读；交互 run 首 tick 采样即基线）。 */
+        this.series = [];
+        /** R4 成本采样序列。 */
+        this.costSeries = [];
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        this.intervalMs = opts.intervalMs ?? CHECK_INTERVAL_SEC * 1e3;
+        this.targetPaths = extractTargetPaths(opts.targetText ?? "");
+        this.lastEventAt = this.now();
+      }
+      /** 启动旁观者心跳。判定在解除暂停前不会真正开始（batch setup 执行期挂 PAUSED）。 */
+      start() {
+        if (this.started || this.stopped) return;
+        this.started = true;
+        this.activeAt = this.now();
+        const schedule = this.opts.schedule ?? ((fn, ms) => {
+          const h = setInterval(fn, ms);
+          h.unref?.();
+          return () => clearInterval(h);
+        });
+        this.stopFn = schedule(() => void this.tick(), this.intervalMs);
+      }
+      stop() {
+        this.stopped = true;
+        this.stopFn?.();
+        this.stopFn = null;
+      }
+      /** 暂停判定（batch setup/accept 执行期；交互审批/提问挂起期）；解除时对齐事件时钟并重置起步宽限。 */
+      setPaused(p) {
+        if (p === this.paused || this.stopped) return;
+        this.paused = p;
+        if (!p) {
+          const t = this.now();
+          this.lastEventAt = Math.max(this.lastEventAt, t);
+          this.activeAt = t;
+        }
+      }
+      /** 抑制窗（政策层动作语义映射：batch nudge 后宽限 / 影子强命中 5 分钟去重）。 */
+      setSuppressUntil(t) {
+        this.suppressUntil = t;
+      }
+      /** R6 基线：batch 在 setup 完成后取首个读数（装依赖动 lockfile，故基线后置 + 排除 lockfile）。 */
+      async markBaseline() {
+        const s = await this.sampleDiffSafe();
+        this.series = s ? [{ ...s, t: this.now() }] : [];
+      }
+      /**
+       * 事件喂入口：tool.start/tool.end/round.start/text.delta/thinking.delta/final 全喂。
+       * 任何事件都刷新 lastEventAt（R3 断流的对面）；豁免期不喂不计时（resume 时对齐）。
+       * 白名单外的事件类型静默忽略（VSCode sink 混流 UIEvent，挂起交互事件天然无害）。
+       */
+      feed(evt) {
+        if (this.stopped || this.paused || !evt?.type) return;
+        const t = this.now();
+        this.lastEventAt = t;
+        if (evt.type === "round.start") {
+          this.roundNo = Number(evt.round) || this.roundNo;
+          return;
+        }
+        if (evt.type === "final") {
+          this.finalSeen = true;
+          return;
+        }
+        if (evt.type === "tool.start") {
+          const toolName = String(evt.toolName ?? "");
+          const args = evt.args ?? {};
+          let digest = "";
+          try {
+            digest = JSON.stringify(args);
+          } catch {
+            digest = String(args);
+          }
+          this.calls.push({
+            toolCallId: String(evt.toolCallId ?? ""),
+            toolName,
+            argsKey: argsKeyOf(args),
+            sig: similarSigOf(args),
+            isEdit: EDIT_TOOLS.has(toolName),
+            isReadonly: READONLY_TOOLS.has(toolName),
+            target: editTargetOf(args),
+            argsDigest: digest.slice(0, 120),
+            t,
+            round: this.roundNo
+          });
+          if (this.calls.length > 512) this.calls.splice(0, this.calls.length - 512);
+        }
+      }
+      /** 判定一步（测试可直接驱动；生产由 scheduler 每 tick 调）。自身异常绝不外泄。 */
+      async tick() {
+        if (!this.started || this.stopped || this.paused || this.ticking) return;
+        this.ticking = true;
+        try {
+          await this.evaluate();
+        } catch {
+        } finally {
+          this.ticking = false;
+        }
+      }
+      // —— 政策层访问器（拼 AUX 任务书 / 日志行用；不含动作语义） ——
+      get round() {
+        return this.roundNo;
+      }
+      get activeAtMs() {
+        return this.activeAt;
+      }
+      /** 最近一次 diff 采样（影子日志 netLines 字段；无采样返回 null）。 */
+      get lastNetSample() {
+        return this.series.length > 0 ? this.series[this.series.length - 1] : null;
+      }
+      /** 成本采样（不进序列——evaluate 每 tick 的采样才进，batch costLine 的即时读数与原实现同形）。 */
+      sampleCost() {
+        return this.sampleCostSafe();
+      }
+      /** 时间窗内调用记录（batch 轨迹拼装：只读合并计数、写入逐条）。 */
+      callsWithin(t, windowMs) {
+        return this.calls.filter((c) => t - c.t <= windowMs);
+      }
+      // —— 评估主体：产出 StallEvaluation 交政策层 ——
+      async evaluate() {
+        const t = this.now();
+        if (t - this.activeAt < GRACE_MIN * MIN) {
+          await this.opts.onEvaluation({ t, skipped: "grace-start", silenceMin: null, health: null, strong: [], weak: [] });
+          return;
+        }
+        if (t < this.suppressUntil) {
+          await this.opts.onEvaluation({ t, skipped: "suppressed", silenceMin: null, health: null, strong: [], weak: [] });
+          return;
+        }
+        const sample = await this.sampleDiffSafe();
+        if (sample) {
+          this.series.push({ ...sample, t });
+          if (this.series.length > SERIES_CAP) this.series.splice(0, this.series.length - SERIES_CAP);
+        }
+        const cost = await this.sampleCostSafe();
+        if (cost) {
+          this.costSeries.push({ costYuan: cost.costYuan, t });
+          if (this.costSeries.length > SERIES_CAP) this.costSeries.splice(0, this.costSeries.length - SERIES_CAP);
+        }
+        const silenceMs = t - this.lastEventAt;
+        if (silenceMs >= R3_SILENCE_MIN * MIN) {
+          await this.opts.onEvaluation({ t, skipped: null, silenceMin: silenceMs / MIN, health: null, strong: [], weak: [] });
+          return;
+        }
+        const health = this.healthCheck();
+        if (health) {
+          await this.opts.onEvaluation({ t, skipped: null, silenceMin: null, health, strong: [], weak: [] });
+          return;
+        }
+        const strong = [this.r1Check(t), this.r6Check()].filter((r) => r !== null);
+        const weak = [this.r2Check(t), this.r4Check(t), this.r5Check(t)].filter((r) => r !== null);
+        await this.opts.onEvaluation({ t, skipped: null, silenceMin: null, health: null, strong, weak });
+      }
+      // —— 规则实现 ——
+      /** R1 重复模式：同 (tool, 规范化 args) 窗口内 ≥3 次且跨轮（轮内重复 repeatBreaker 已管）。 */
+      r1Check(t) {
+        const groups = /* @__PURE__ */ new Map();
+        for (const c of this.calls) {
+          if (t - c.t > R1_WINDOW_MIN * MIN) continue;
+          const key = `${c.toolName} ${c.argsKey}`;
+          const g = groups.get(key) ?? { tool: c.toolName, n: 0, rounds: /* @__PURE__ */ new Set() };
+          g.n += 1;
+          g.rounds.add(c.round);
+          groups.set(key, g);
+        }
+        for (const g of groups.values()) {
+          if (g.n >= R1_MIN_HITS && g.rounds.size >= 2) {
+            return { rule: "R1", evidence: `\u8FD1 ${R1_WINDOW_MIN} \u5206\u949F ${g.tool} \u540C\u53C2\u6570\u8C03\u7528 ${g.n} \u6B21\uFF08\u8DE8 ${g.rounds.size} \u8F6E\uFF09` };
+          }
+        }
+        return null;
+      }
+      /** R2 只读空转（弱）：窗口内调用全只读且朴素规范化后变体 ≤2 种（args 持续变化=调研，防误伤）。 */
+      r2Check(t) {
+        const recent = this.calls.filter((c) => t - c.t <= R2_WINDOW_MIN * MIN);
+        if (recent.length < R2_MIN_CALLS || recent.some((c) => !c.isReadonly)) return null;
+        const sigs = new Set(recent.map((c) => c.sig));
+        if (sigs.size > R2_MAX_DISTINCT_SIG) return null;
+        return { rule: "R2", evidence: `\u8FD1 ${R2_WINDOW_MIN} \u5206\u949F ${recent.length} \u6B21\u8C03\u7528\u5168\u4E3A\u53EA\u8BFB\u4E14\u540C\u5F62\uFF08${sigs.size} \u79CD\u53D8\u4F53\uFF09` };
+      }
+      /** R4 烧钱无产出（弱）：窗口成本增量 > 预算 1/4 且期间零 edit、零 final。 */
+      r4Check(t) {
+        if (this.opts.budgetYuan === void 0) return null;
+        const win = this.costSeries.filter((s) => t - s.t <= R4_WINDOW_MIN * MIN);
+        if (win.length < 2) return null;
+        const first = win[0];
+        const last = win[win.length - 1];
+        if (first.costYuan == null || last.costYuan == null) return null;
+        const delta = last.costYuan - first.costYuan;
+        if (delta <= this.opts.budgetYuan / R4_COST_DIVISOR) return null;
+        if (this.calls.some((c) => c.isEdit && t - c.t <= R4_WINDOW_MIN * MIN) || this.finalSeen) return null;
+        return { rule: "R4", evidence: `\u8FD1 ${R4_WINDOW_MIN} \u5206\u949F\u82B1\u8D39 \xA5${delta.toFixed(4)}\uFF08> \u9884\u7B97 1/4\uFF09\uFF0C\u671F\u95F4\u96F6 edit \u96F6 final` };
+      }
+      /** R5 写入方向偏差（弱）：窗口内 edit 目标与任务目标集合全无交集；提取不到目标集合 → 整条关闭。 */
+      r5Check(t) {
+        if (this.targetPaths.size === 0) return null;
+        const edits = this.calls.filter((c) => c.isEdit && t - c.t <= R2_WINDOW_MIN * MIN);
+        if (edits.length === 0) return null;
+        const hit = edits.some((c) => c.target && [...this.targetPaths].some((p) => samePath(c.target, p)));
+        if (hit) return null;
+        return { rule: "R5", evidence: `\u8FD1 ${R2_WINDOW_MIN} \u5206\u949F ${edits.length} \u6B21 edit \u5168\u90E8\u843D\u5728\u4EFB\u52A1\u76EE\u6807\u8DEF\u5F84\u4E4B\u5916\uFF08\u5982 ${edits[0].target || "?"}\uFF09` };
+      }
+      /** R6 净进展停滞（强）：连续 2 窗口净变更 ≈0（±3 行）且同期 edit 调用 >0——写了又改、没沉淀。 */
+      r6Check() {
+        const s = this.series;
+        if (s.length < 3) return null;
+        const a = s[s.length - 3];
+        const b = s[s.length - 2];
+        const c = s[s.length - 1];
+        if (Math.abs(b.net - a.net) > R6_STALL_BAND || Math.abs(c.net - b.net) > R6_STALL_BAND) return null;
+        const edits = this.calls.filter((e) => e.isEdit && e.t >= a.t).length;
+        if (edits === 0) return null;
+        return { rule: "R6", evidence: `\u51C0\u53D8\u66F4 ${a.net}\u2192${b.net}\u2192${c.net} \u884C\uFF08\u8FDE\u7EED 2 \u7A97\u53E3 \xB1${R6_STALL_BAND} \u5185\uFF09\u671F\u95F4 ${edits} \u6B21 edit` };
+      }
+      /** 健康短路：净变更显著增长或新文件出现 → 直接 normal（R2/R4 弱信号的反证）。 */
+      healthCheck() {
+        const s = this.series;
+        if (s.length < 2) return null;
+        const prev = s[s.length - 2];
+        const last = s[s.length - 1];
+        if (last.newFiles.length > 0) return `\u65B0\u6587\u4EF6\u51FA\u73B0\uFF1A${last.newFiles.slice(0, 3).join("\u3001")}`;
+        const delta = last.net - prev.net;
+        if (delta > HEALTH_GROWTH_LINES) return `\u51C0\u53D8\u66F4\u589E\u957F +${delta} \u884C\uFF08> ${HEALTH_GROWTH_LINES}\uFF09`;
+        return null;
+      }
+      // —— 采样 ——
+      async sampleDiffSafe() {
+        if (this.opts.sampleDiff) return this.opts.sampleDiff();
+        try {
+          const run = (args) => new Promise((resolve, reject) => {
+            execFile2("git", ["-C", this.opts.worktreePath, ...args], { maxBuffer: 1024 * 1024 }, (err, stdout) => err ? reject(err) : resolve(String(stdout)));
+          });
+          const [numstat, others] = await Promise.all([
+            run(["diff", "--numstat", "HEAD"]),
+            run(["ls-files", "--others", "--exclude-standard"])
+          ]);
+          const newFiles = others.split("\n").map((s) => s.trim()).filter(Boolean);
+          return { net: parseNumstatNet(numstat), newFiles };
+        } catch {
+          return null;
+        }
+      }
+      async sampleCostSafe() {
+        if (!this.opts.getCost) return null;
+        try {
+          return await this.opts.getCost();
+        } catch {
+          return null;
+        }
+      }
+    };
+  }
+});
+
+// src/batchWatchdog.ts
+var MIN2, NUDGE_GRACE_MIN, FREEZE_MIN, KILL_STRIKES, AUX_TIMEOUT_MS, RETRY_MAX, NUDGE_1, NUDGE_2, RETRY_PREAMBLE, ADJUDICATE_PROMPT, parseVerdictJson, defaultAdjudicate, sharedBudgetYuan, BatchWatchdog, buildRetryTaskContent;
+var init_batchWatchdog = __esm({
+  "src/batchWatchdog.ts"() {
+    "use strict";
+    init_stallDetector();
+    MIN2 = 6e4;
+    NUDGE_GRACE_MIN = 5;
+    FREEZE_MIN = 5;
+    KILL_STRIKES = 3;
+    AUX_TIMEOUT_MS = 6e4;
+    RETRY_MAX = 3;
+    NUDGE_1 = (evidence) => `\u26A0\uFE0F [watchdog] ${evidence}\u3002\u82E5\u5728\u539F\u5730\u6253\u8F6C\u8BF7\u6362\u601D\u8DEF\u6216\u6536\u5C3E\uFF1B\u82E5\u5224\u65AD\u6709\u8BEF\u8BF7\u7EE7\u7EED\u5E76\u8BF4\u660E\u7406\u7531\u3002`;
+    NUDGE_2 = (clause) => `\u26D4 [watchdog] \u518D\u6B21\u5224\u5B9A\uFF1A${clause}\u3002\u8BF7\u7ACB\u5373\u505C\u6B62\u63A2\u7D22\uFF0C\u5728 2-3 \u8F6E\u5185\u6536\u5C3E\uFF1A\u603B\u7ED3\u5DF2\u5B8C\u6210 / \u672A\u5B8C\u6210 / \u5361\u70B9\u4E0E\u5EFA\u8BAE\uFF0C\u4F5C\u4E3A\u6700\u7EC8\u7B54\u590D\u3002`;
+    RETRY_PREAMBLE = (verdict, evidence, finalDigest) => `\u3010\u7CFB\u7EDF\u63D0\u793A\u3011\u4E0A\u6B21\u5C1D\u8BD5\u88AB watchdog \u7EC8\u6B62\uFF08\u5224\u5B9A ${verdict}\uFF1A${evidence}\uFF09\u3002\u4E0A\u8F6E\u6536\u5C3E\u524D\u4EA7\u51FA\u6458\u8981\uFF1A${finalDigest || "\uFF08\u65E0\uFF09"}\u3002\u8BF7\u6362\u601D\u8DEF\uFF0C\u52FF\u91CD\u590D\u4E0A\u6B21\u8DEF\u5F84\u3002
+
+---
+
+`;
+    ADJUDICATE_PROMPT = (args) => `\u4F60\u662F\u6279\u5904\u7406\u7F16\u7801\u4EFB\u52A1\u7684\u770B\u95E8\u72D7\u3002\u5224\u65AD\u4EFB\u52A1\u662F\u5426\u5728\u7A7A\u8F6C\uFF08idle\uFF1A\u53CD\u590D\u8BFB\u540C\u4E00\u6279\u6587\u4EF6/\u6362\u59FF\u52BF\u641C\u540C\u4E00\u4E1C\u897F\uFF09\u6216\u65B9\u5411\u504F\u79BB\uFF08offtrack\uFF1A\u5199\u5165\u843D\u70B9\u4E0E\u4EFB\u52A1\u76EE\u6807\u65E0\u5173\uFF09\uFF1B\u6B63\u5E38\u63A8\u8FDB\uFF08\u542B\u6B63\u5F53\u7684\u957F\u65F6\u95F4\u53EA\u8BFB\u8C03\u7814\uFF09\u5224 normal\u3002\u53EA\u8F93\u51FA\u4E25\u683C JSON\uFF1A{"verdict":"normal|idle|offtrack","evidence":"\u4E00\u53E5\u8BDD\u8BC1\u636E\uFF08\u5F15\u7528\u8F68\u8FF9\u4E2D\u7684\u5177\u4F53\u4E8B\u4EF6\uFF09"}
+
+[\u4EFB\u52A1\u76EE\u6807] ${args.title}
+\u9A8C\u6536\u547D\u4EE4\uFF1A${args.accept}
+[\u6D88\u8017] ${args.costLine}
+[\u89C4\u5219\u4FE1\u53F7]
+${args.rules}
+[\u6700\u8FD1\u8F68\u8FF9\uFF0810 \u5206\u949F\uFF09]
+${args.trajectory}`;
+    parseVerdictJson = (raw) => {
+      const m = /\{[\s\S]*\}/.exec(raw ?? "");
+      if (!m) return null;
+      try {
+        const j = JSON.parse(m[0]);
+        const v = String(j?.verdict ?? "").trim().toLowerCase();
+        if (v !== "normal" && v !== "idle" && v !== "offtrack") return null;
+        return { verdict: v, evidence: String(j?.evidence ?? "").trim() };
+      } catch {
+        return null;
+      }
+    };
+    defaultAdjudicate = async (prompt, signal) => {
+      const { chatWithModelWithSummary: chatWithModelWithSummary2 } = await Promise.resolve().then(() => (init_model(), model_exports));
+      const resp = await chatWithModelWithSummary2([{ role: "user", content: prompt }], [], { signal });
+      return resp?.choices?.[0]?.message?.content ?? "";
+    };
+    sharedBudgetYuan = (budgetYuan, spentYuan) => {
+      if (budgetYuan === void 0) return void 0;
+      return Math.max(0, Math.round((budgetYuan - (spentYuan ?? 0)) * 1e4) / 1e4);
+    };
+    BatchWatchdog = class {
+      constructor(opts) {
+        /** 连续非 normal 计数（normal 裁决/健康短路清零）。 */
+        this.streak = 0;
+        /** 收尾冻结窗口截止（nudge-2 后 FREEZE_MIN 分钟内动作冻结——采样/R3 照常，二层不调）。 */
+        this.freezeUntil = 0;
+        this.records = [];
+        this.killInfo = null;
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        this.detector = new StallDetector({
+          worktreePath: opts.worktreePath,
+          targetText: opts.targetText,
+          budgetYuan: opts.budgetYuan,
+          getCost: opts.getCost,
+          sampleDiff: opts.sampleDiff,
+          now: opts.now,
+          schedule: opts.schedule,
+          intervalMs: opts.intervalMs,
+          onEvaluation: (e) => this.consume(e)
+          // promise 会被 detector tick await（AUX 裁决 tick 内完成）
+        });
+      }
+      /** 启动旁观者心跳。判定在解除暂停前不会真正开始（setup 执行期挂 PAUSED，batch 方案 §4）。 */
+      start() {
+        this.detector.start();
+      }
+      stop() {
+        this.detector.stop();
+      }
+      /** 暂停判定（setup/accept 命令执行期豁免）；解除时对齐事件时钟并重置起步宽限。 */
+      setPaused(p) {
+        this.detector.setPaused(p);
+      }
+      /** R6 基线：setup 完成后取首个读数（装依赖动 lockfile，故基线后置 + 排除 lockfile）。 */
+      markBaseline() {
+        return this.detector.markBaseline();
+      }
+      feed(evt) {
+        this.detector.feed(evt);
+      }
+      /** 判定一步（测试可直接驱动；生产由 scheduler 每 tick 调）。自身异常绝不外泄。 */
+      async tick() {
+        return this.detector.tick();
+      }
+      /** 终止证据快照（runner 据此置 watchdog-killed 与重试前置锚）。 */
+      getKill() {
+        return this.killInfo;
+      }
+      /** 报告证据链快照（跨重试轮由 runner 聚合）。 */
+      snapshot() {
+        return { kill: this.killInfo, records: [...this.records], roundsAtKill: this.detector.round };
+      }
+      // —— 求值消费：StallEvaluation → batch 动作（与影子政策是同一结果的两种消费，方案 §3） ——
+      async consume(e) {
+        if (e.skipped) return;
+        if (e.silenceMin !== null) {
+          this.kill({ verdict: "stall", rule: "R3", evidence: `\u65AD\u6D41\uFF1A${R3_SILENCE_MIN} \u5206\u949F\u65E0\u4EFB\u4F55\u4E8B\u4EF6\uFF08agent \u53EF\u80FD\u5DF2\u5361\u6B7B\uFF09` });
+          return;
+        }
+        if (e.health) {
+          this.streak = 0;
+          this.records.push({ kind: "health", at: e.t, text: e.health });
+          return;
+        }
+        if (e.strong.length === 0) {
+          if (e.weak.length > 0) this.records.push({ kind: "suspicion", at: e.t, text: e.weak.map((r) => `${r.rule} ${r.evidence}`).join("\uFF1B") });
+          return;
+        }
+        if (e.t < this.freezeUntil) {
+          this.records.push({ kind: "suspicion", at: e.t, text: `\u6536\u5C3E\u51BB\u7ED3\u7A97\u53E3\u5185\uFF08nudge-2 \u540E ${FREEZE_MIN} \u5206\u949F\uFF09\uFF0C\u4EC5\u8BB0\u5F55\uFF1A${e.strong.map((r) => r.rule).join("+")}` });
+          return;
+        }
+        const verdict = await this.adjudicate(e);
+        if (verdict === null) {
+          this.records.push({ kind: "aux-fail", at: e.t });
+          return;
+        }
+        if (verdict.verdict === "normal") {
+          this.streak = 0;
+          this.records.push({ kind: "verdict", at: e.t, verdict: "normal", evidence: verdict.evidence });
+          return;
+        }
+        this.streak += 1;
+        this.records.push({ kind: "verdict", at: e.t, verdict: verdict.verdict, evidence: verdict.evidence });
+        if (this.streak >= KILL_STRIKES) {
+          this.kill({
+            verdict: verdict.verdict,
+            rule: e.strong.map((r) => r.rule).join("+"),
+            evidence: `${verdict.evidence}\uFF08\u8FDE\u7EED ${this.streak} \u6B21\u975E normal\uFF09`
+          });
+          return;
+        }
+        this.nudge(this.streak, verdict.verdict, verdict.evidence, e.t);
+      }
+      /** 二层裁决。返回 null = 调用失败/非法输出（降级 normal，绝不误杀）。 */
+      async adjudicate(e) {
+        const costLine = await this.costLine(e.t);
+        const prompt = ADJUDICATE_PROMPT({
+          title: this.opts.ticketTitle,
+          accept: this.opts.acceptCmd,
+          costLine,
+          rules: [
+            ...e.strong.map((r) => `${r.rule}\uFF08\u5F3A\uFF09\uFF1A${r.evidence}`),
+            ...e.weak.map((r) => `${r.rule}\uFF08\u5F31\uFF0C\u4EC5\u53C2\u8003\uFF09\uFF1A${r.evidence}`)
+          ].join("\n") || "\uFF08\u65E0\uFF09",
+          trajectory: this.trajectory(e.t)
+        });
+        try {
+          const raw = await (this.opts.auxAdjudicate ?? defaultAdjudicate)(prompt, this.auxSignal());
+          return parseVerdictJson(raw);
+        } catch {
+          return null;
+        }
+      }
+      /** AUX 调用信号：任务 abort 或 60s 超时，先到先停（对齐 classifyRisk 合并信号形态）。 */
+      auxSignal() {
+        const ac = new AbortController();
+        const timer = setTimeout(() => ac.abort(), AUX_TIMEOUT_MS);
+        timer.unref?.();
+        this.opts.ac.signal.addEventListener("abort", () => {
+          clearTimeout(timer);
+          ac.abort();
+        }, { once: true });
+        return ac.signal;
+      }
+      async costLine(t) {
+        const cost = await this.detector.sampleCost();
+        const mins = Math.round((t - this.detector.activeAtMs) / MIN2);
+        const rounds = cost?.rounds ?? this.detector.round;
+        const yuan = cost?.costYuan;
+        return `\u5DF2\u7528\u65F6 ${mins} \u5206\u949F \xB7 \u8F6E\u6570 ${rounds}` + (yuan != null ? ` \xB7 \u82B1\u8D39 \xA5${yuan.toFixed(4)}` : "");
+      }
+      /** 最近 10 分钟轨迹（二层任务书）：只读类按工具合并计数，写入类逐条带 args 摘要。 */
+      trajectory(t) {
+        const recent = this.detector.callsWithin(t, R1_WINDOW_MIN * MIN2);
+        if (recent.length === 0) return "\uFF08\u65E0\u5DE5\u5177\u8C03\u7528\uFF09";
+        const readonlyCounts = /* @__PURE__ */ new Map();
+        const lines = [];
+        for (const c of recent) {
+          if (!c.isReadonly) {
+            lines.push(`- ${c.toolName}${c.target ? ` \u2192 ${c.target}` : ""}\uFF08${c.argsDigest}\uFF09`);
+            continue;
+          }
+          readonlyCounts.set(c.toolName, (readonlyCounts.get(c.toolName) ?? 0) + 1);
+        }
+        for (const [tool, n] of readonlyCounts) lines.push(`- ${tool} \xD7${n}\uFF08\u53EA\u8BFB\uFF09`);
+        return lines.join("\n").slice(0, 2400);
+      }
+      nudge(streak, verdict, evidence, t) {
+        const text = streak === 1 ? NUDGE_1(evidence) : NUDGE_2(`${verdict}\uFF1A${evidence}`);
+        this.records.push({ kind: "nudge", at: t, level: streak, text });
+        this.detector.setSuppressUntil(t + NUDGE_GRACE_MIN * MIN2);
+        if (streak === 2) this.freezeUntil = t + FREEZE_MIN * MIN2;
+        try {
+          this.opts.onNudge(text);
+        } catch {
+        }
+      }
+      kill(info) {
+        if (this.killInfo) return;
+        this.killInfo = info;
+        this.records.push({ kind: "kill", at: this.now(), verdict: info.verdict, evidence: `${info.rule} ${info.evidence}` });
+        this.detector.stop();
+        try {
+          this.opts.onKill(new Error(`watchdog: ${info.verdict} \u2014 ${info.evidence}`), info);
+        } catch {
+        }
+      }
+    };
+    buildRetryTaskContent = (body, kill, finalText) => RETRY_PREAMBLE(kill.verdict, kill.evidence, finalText.trim().replace(/\s+/g, " ").slice(0, 400)) + body;
+  }
+});
+
 // src/batchRunner.ts
 var batchRunner_exports = {};
 __export(batchRunner_exports, {
+  buildReport: () => buildReport,
   parseWaitWindow: () => parseWaitWindow,
   runBatchQueue: () => runBatchQueue
 });
 import fs50 from "fs";
 import { spawn as spawn6 } from "child_process";
-var BATCH_EDIT_TOOLS, BATCH_DEFAULT_DENYLIST, ACCEPT_TIMEOUT_MIN, ACCEPT_TAIL_LINES, emit2, ts, runAcceptCommand, collectSessionCost, buildReport, runOneTask, parseWaitWindow, nowMinutes, sleep, waitUntilWindow, runBatchQueue;
+var BATCH_EDIT_TOOLS, BATCH_DEFAULT_DENYLIST, ACCEPT_TIMEOUT_MIN, ACCEPT_TAIL_LINES, emit2, ts, runAcceptCommand, collectSessionCost, buildWatchdogLines, buildReport, runOneTask, parseWaitWindow, nowMinutes, sleep, waitUntilWindow, runBatchQueue;
 var init_batchRunner = __esm({
   "src/batchRunner.ts"() {
     "use strict";
@@ -19189,6 +20186,9 @@ var init_batchRunner = __esm({
     init_queue();
     init_batchStrings();
     init_strings();
+    init_batchWatchdog();
+    init_inbox();
+    init_agentWake();
     BATCH_EDIT_TOOLS = /* @__PURE__ */ new Set(["edit_file", "create_file", "write_file", "move_file", "notebook_edit"]);
     BATCH_DEFAULT_DENYLIST = /* @__PURE__ */ new Set(["run_command", "delete_path", "run_in_background"]);
     ACCEPT_TIMEOUT_MIN = 10;
@@ -19258,6 +20258,33 @@ ${lines.slice(-ACCEPT_TAIL_LINES).join("\n")}` : text;
       if (c.costYuan === null) c.partialPrice = false;
       return c;
     };
+    buildWatchdogLines = (snaps, costYuan) => {
+      if (snaps.length === 0) return null;
+      const T = batchT(getLocale());
+      const render2 = (r) => {
+        switch (r.kind) {
+          case "suspicion":
+            return T.wdSuspicionRec(r.text ?? "");
+          case "verdict":
+            return T.wdVerdictRec(r.verdict ?? "", r.evidence ?? "");
+          case "nudge":
+            return T.wdNudgeRec(r.level ?? 0, r.text ?? "");
+          case "health":
+            return T.wdHealthRec(r.text ?? "");
+          case "aux-fail":
+            return T.wdAuxFailRec();
+          case "kill":
+            return T.wdKillRec(r.verdict ?? "", r.evidence ?? "");
+        }
+      };
+      const lines = [];
+      for (const snap of snaps) {
+        lines.push(...snap.records.map(render2));
+        if (snap.kill) lines.push(T.wdAtKillRec(snap.roundsAtKill, costYuan !== null ? costYuan.toFixed(4) : "-"));
+      }
+      if (snaps.length > 1) lines.push(T.wdRetryRec(snaps.length - 1));
+      return lines;
+    };
     buildReport = (args) => {
       const { id, ticket, status, budgetTruncated, cost, receipt, finalText, accept, deniedTools, diff, wt } = args;
       const T = batchT(getLocale());
@@ -19280,7 +20307,11 @@ ${T.statusEntry(`${T.statusLabel(status)}${budgetNote}`)}
 ${T.costEntry(T.costSummary(cost))}
 ${T.receiptEntry(receipt ? T.receiptLine(receipt) : T.noReceipt)}
 ${args.errorMessage ? T.errorEntry(args.errorMessage) : ""}
-${T.taskH}
+${args.watchdogLines?.length ? `${T.wdH}
+
+${args.watchdogLines.map(T.wdRecord).join("\n")}
+
+` : ""}${T.taskH}
 
 ${ticket.body}
 
@@ -19384,89 +20415,187 @@ ${parsed.error}`);
         emit2(`\u{1F4A5} [${task.id}] ${msg}`);
         return { status: "error", cost: cost2, budgetTruncated: false };
       }
-      setSessionWorktree(sessionId, wt);
-      if (t.setup) {
-        emit2(T.setupLine(t.setup));
-        const s = await runAcceptCommand(t.setup, wt.path);
-        if (s.code !== 0 || s.timedOut) {
-          const msg = `${T.setupFail(t.setup, s.code)}${s.timedOut ? T.acceptTimeoutSuffix : ""}
+      const watchdogEnabled = process.env.DEEP_SEEK_BATCH_WATCHDOG !== "0";
+      const wdSnapshots = [];
+      const maxRounds = 1 + Math.min(Math.max(0, Math.floor(t.retry ?? 0)), RETRY_MAX);
+      let content = t.body;
+      let roundBudget = t.budgetYuan;
+      let receipt;
+      let finalText = "";
+      let agentError;
+      let budgetTruncated = false;
+      let wdKill = null;
+      let status;
+      let accept = null;
+      for (let round = 1; ; round++) {
+        wdKill = null;
+        finalText = "";
+        receipt = void 0;
+        agentError = void 0;
+        let nudgeCount = 0;
+        const roundAc = new AbortController();
+        const wd = watchdogEnabled ? new BatchWatchdog({
+          sessionId,
+          ticketTitle: t.title,
+          acceptCmd: t.accept,
+          targetText: `${t.title}
+${t.body}
+${t.accept}${t.setup ? `
+${t.setup}` : ""}`,
+          ac: roundAc,
+          worktreePath: wt.path,
+          budgetYuan: roundBudget,
+          getCost: () => collectSessionCost(sessionId),
+          onNudge: (text) => {
+            nudgeCount++;
+            pushSessionInbox(sessionId, text);
+            emit2(T.wdNudgeNote(task.id, nudgeCount));
+          },
+          onKill: (err, info) => {
+            wdKill = info;
+            emit2(T.wdKillNote(task.id, `${info.verdict} \u2014 ${info.evidence}`));
+            roundAc.abort(err);
+          }
+        }) : null;
+        wd?.start();
+        wd?.setPaused(true);
+        if (round === 1 && t.setup) {
+          emit2(T.setupLine(t.setup));
+          const s = await runAcceptCommand(t.setup, wt.path);
+          if (s.code !== 0 || s.timedOut) {
+            wd?.stop();
+            const msg = `${T.setupFail(t.setup, s.code)}${s.timedOut ? T.acceptTimeoutSuffix : ""}
 
 \`\`\`
 ${s.output}
 \`\`\``;
-          await killBackgroundTasksUnder(wt.path).catch(() => {
-          });
-          const cost2 = await collectSessionCost(sessionId);
-          await finishTicket(task.id, buildReport({
-            id: task.id,
-            ticket: t,
-            status: "setup-failed",
-            budgetTruncated: false,
-            cost: cost2,
-            receipt: void 0,
-            finalText: "",
-            accept: null,
-            deniedTools: [],
-            diff: T.diffNone,
-            wt,
-            errorMessage: msg
-          }));
-          emit2(`\u{1F6E0}\uFE0F [${task.id}] ${T.setupFail(t.setup, s.code)}`);
-          return { status: "setup-failed", cost: cost2, budgetTruncated: false };
+            await killBackgroundTasksUnder(wt.path).catch(() => {
+            });
+            const cost2 = await collectSessionCost(sessionId);
+            await finishTicket(task.id, buildReport({
+              id: task.id,
+              ticket: t,
+              status: "setup-failed",
+              budgetTruncated: false,
+              cost: cost2,
+              receipt: void 0,
+              finalText: "",
+              accept: null,
+              deniedTools: [],
+              diff: T.diffNone,
+              wt,
+              errorMessage: msg
+            }));
+            emit2(`\u{1F6E0}\uFE0F [${task.id}] ${T.setupFail(t.setup, s.code)}`);
+            return { status: "setup-failed", cost: cost2, budgetTruncated: false };
+          }
         }
-      }
-      const ac = new AbortController();
-      const timer = setTimeout(() => ac.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
-      let receipt;
-      let finalText = "";
-      let agentError;
-      try {
-        await handleUnifiedChat(
-          { sessionId, content: t.body },
-          async () => {
-          },
-          (evt) => {
-            if (evt?.type === "text.delta") finalText += evt.text;
-            else if (evt?.type === "text.reset") finalText = "";
-            else if (evt?.type === "final") finalText = evt.text || finalText;
-            else if (evt?.type === "round.start") emit2(T.roundLine(ts(), evt.round));
-          },
-          ac.signal,
-          {
-            requestApproval: async (detail, meta) => {
-              if (allowApproval.has(meta.toolName)) return "allow-once";
-              deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
-              return "deny";
+        wd?.setPaused(false);
+        await wd?.markBaseline();
+        const timer = setTimeout(() => roundAc.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
+        setSessionWorktree(sessionId, wt);
+        registerWakeDriver(sessionId, async () => {
+          emit2(`\u{1F916} [${task.id}] \u5B50\u4EE3\u7406\u5B8C\u6210\uFF0C\u5524\u9192 run \u7EED\u8DD1\u2026`);
+          setSessionWorktree(sessionId, wt);
+          const wakeAc = new AbortController();
+          const wakeTimer = setTimeout(() => wakeAc.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
+          try {
+            await handleUnifiedChat(
+              { sessionId, content: AGENT_DONE_SENTINEL },
+              async () => {
+              },
+              (evt) => {
+                if (evt?.type === "text.delta") finalText += evt.text;
+                else if (evt?.type === "text.reset") finalText = "";
+                else if (evt?.type === "final") finalText = evt.text || finalText;
+              },
+              wakeAc.signal,
+              {
+                requestApproval: async (detail, meta) => {
+                  if (allowApproval.has(meta.toolName)) return "allow-once";
+                  deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
+                  return "deny";
+                },
+                onUIEvent: (evt) => {
+                  if (evt.type === "run.receipt") receipt = evt;
+                },
+                budgetYuan: roundBudget,
+                toolSchemas: gatedSchemas
+              }
+            );
+          } finally {
+            clearTimeout(wakeTimer);
+            clearSessionWorktree(sessionId);
+          }
+        });
+        try {
+          await handleUnifiedChat(
+            { sessionId, content },
+            async () => {
             },
-            onUIEvent: (evt) => {
-              if (evt.type === "run.receipt") receipt = evt;
+            (evt) => {
+              wd?.feed(evt);
+              if (evt?.type === "text.delta") finalText += evt.text;
+              else if (evt?.type === "text.reset") finalText = "";
+              else if (evt?.type === "final") finalText = evt.text || finalText;
+              else if (evt?.type === "round.start") emit2(T.roundLine(ts(), evt.round));
             },
-            budgetYuan: t.budgetYuan,
-            toolSchemas: gatedSchemas
+            roundAc.signal,
+            {
+              requestApproval: async (detail, meta) => {
+                if (allowApproval.has(meta.toolName)) return "allow-once";
+                deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
+                return "deny";
+              },
+              onUIEvent: (evt) => {
+                if (evt.type === "run.receipt") receipt = evt;
+              },
+              budgetYuan: roundBudget,
+              toolSchemas: gatedSchemas
+            }
+          );
+        } catch (e) {
+          agentError = e instanceof Error ? e.message : String(e);
+        } finally {
+          clearTimeout(timer);
+          wd?.stop();
+          clearSessionWorktree(sessionId);
+        }
+        if (wd) wdSnapshots.push(wd.snapshot());
+        budgetTruncated = receipt?.budgetTruncated === true;
+        if (agentError) {
+          status = "error";
+          emit2(T.agentErrorLine(task.id, agentError));
+          break;
+        }
+        if (wdKill) {
+          const spent = await collectSessionCost(sessionId);
+          const nextBudget = sharedBudgetYuan(t.budgetYuan, spent.costYuan);
+          if (round < maxRounds && (nextBudget === void 0 || nextBudget > 0)) {
+            emit2(T.wdRetryNote(task.id, round + 1));
+            content = buildRetryTaskContent(t.body, wdKill, finalText);
+            roundBudget = nextBudget;
+            continue;
           }
-        );
-      } catch (e) {
-        agentError = e instanceof Error ? e.message : String(e);
-      } finally {
-        clearTimeout(timer);
-        clearSessionWorktree(sessionId);
-      }
-      const timedOut = ac.signal.aborted;
-      const budgetTruncated = receipt?.budgetTruncated === true;
-      let status;
-      let accept = null;
-      if (agentError) {
-        status = "error";
-        emit2(T.agentErrorLine(task.id, agentError));
-      } else if (timedOut) {
-        status = "timeout";
-        emit2(T.timeoutLine(task.id, timeoutMin));
-      } else {
+          if (round < maxRounds) emit2(T.wdBudgetStopNote(task.id));
+          status = "watchdog-killed";
+          break;
+        }
+        if (roundAc.signal.aborted) {
+          status = "timeout";
+          emit2(T.timeoutLine(task.id, timeoutMin));
+          break;
+        }
+        const quiet = await waitSessionQuiescent(sessionId, void 0, timeoutMin * 6e4);
+        if (!quiet) emit2(`\u23F3 [${task.id}] \u5524\u9192\u94FE\u672A\u5728\u65F6\u9650\u5185\u6536\u655B\uFF0C\u6309\u73B0\u72B6\u9A8C\u6536`);
+        wd?.setPaused(true);
         const r = await runAcceptCommand(t.accept, wt.path);
         accept = { cmd: t.accept, code: r.code, output: r.output, timedOut: r.timedOut };
         status = r.code === 0 && !r.timedOut ? "passed" : "accept-failed";
         emit2(T.acceptLine(status === "passed", task.id, r.code) + (r.timedOut ? T.acceptKilledSuffix : ""));
+        break;
       }
+      unregisterWakeDriver(sessionId);
       await killBackgroundTasksUnder(wt.path).catch(() => {
       });
       const diff = await harvestDiff(wt);
@@ -19483,7 +20612,8 @@ ${s.output}
         deniedTools,
         diff,
         wt,
-        errorMessage: agentError
+        errorMessage: agentError,
+        watchdogLines: buildWatchdogLines(wdSnapshots, cost.costYuan) ?? void 0
       }));
       emit2(`   ${T.statusLabel(status)} \xB7 ${T.costSummary(cost)}`);
       emit2(T.artifactLine(wt.path, wt.branch));
@@ -19621,7 +20751,7 @@ init_prefs();
 init_updateCheck();
 init_trust();
 import { render } from "ink";
-import os5 from "os";
+import os6 from "os";
 import path50 from "path";
 import { emitKeypressEvents } from "node:readline";
 import { jsx as jsx21 } from "react/jsx-runtime";
@@ -19771,7 +20901,7 @@ var main = async () => {
   process.stdout.write("\x1B[2J\x1B[3J\x1B[1;1H");
   const cwdIsHome = () => {
     try {
-      return path50.resolve(cwd).toLowerCase() === path50.resolve(os5.homedir()).toLowerCase();
+      return path50.resolve(cwd).toLowerCase() === path50.resolve(os6.homedir()).toLowerCase();
     } catch {
       return false;
     }