deepseeker-code 1.0.62 → 1.0.64

package/dist/cli.mjs

@@ -624,7 +624,13 @@ var init_config = __esm({
        *  之前生效——门禁/审批评估的是改写后参数）、PostToolUse 可改 resultForModel（仅模型视图，
        *  用户视图 resultForUser 不变）。关闭时 PreToolUse 回退旧位（审批后、仅 deny），改写字段全忽略，
        *  行为与改造前一致。env DEEP_SEEK_HOOK_REWRITE=0 回退。 */
-      hookRewrite: process.env.DEEP_SEEK_HOOK_REWRITE !== "0"
+      hookRewrite: process.env.DEEP_SEEK_HOOK_REWRITE !== "0",
+      /** ★ 外部记忆桥接开关（External Memory Bridge，2026-11-02）：true 时 loader 在 bootstrap 把其他 agent 的
+       *  规则/指令文件（~/.claude/CLAUDE.md、~/.codex/AGENTS.md、~/.gemini/GEMINI.md、<cwd>/CLAUDE.md、AGENTS.md、
+       *  GEMINI.md、.cursor/rules/*.md、.github/copilot-instructions.md，清单硬编码）以只读 ext- 前缀条目纳入记忆索引。
+       *  默认 false——关闭时记忆行为与未引入本功能逐字节一致。开启即意味着同意把这些文件内容随请求发给
+       *  DeepSeek API（loader 首次接入时 console 提示一次）。外部条目只读：memory_save/delete 拒 ext- 前缀。 */
+      memoryExternal: false
     };
     MODEL_WINDOWS = {};
     resolveModelWindow = (model) => {
@@ -657,7 +663,9 @@ var init_config = __esm({
       undoBackupSensitive: (v) => v === "skip" || v === "deny" || v === "allow" ? v : void 0,
       undoRetentionDays: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? v : void 0,
       traceRetentionDays: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? v : void 0,
-      MAX_TOOL_RESULT_CHARS: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? Math.floor(v) : void 0
+      MAX_TOOL_RESULT_CHARS: (v) => typeof v === "number" && v > 0 && Number.isFinite(v) ? Math.floor(v) : void 0,
+      memoryExternal: (v) => typeof v === "boolean" ? v : void 0
+      // 外部记忆桥接（只读接入其他 agent 规则文件；默认 false）
     };
     ENGINE_OVERRIDE_KEYS = Object.keys(ENGINE_OVERRIDE_VALIDATORS);
     applyEngineOverrides = (cfg) => {
@@ -904,6 +912,7 @@ var init_ticket = __esm({
         noAccept: "frontmatter \u7F3A accept\uFF08\u9A8C\u6536\u547D\u4EE4\uFF09\u3002\u6302\u673A\u4EFB\u52A1\u5FC5\u987B\u5E26\u53EF\u6267\u884C\u9A8C\u6536\uFF0C\u7F3A\u9A8C\u6536\u62D2\u7EDD\u5165\u961F\u3002",
         badBudget: (v) => `budget-yuan \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A\u6B63\u6570\uFF08\u5143\uFF09\u3002`,
         badTimeout: (v) => `timeout-min \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A\u6B63\u6574\u6570\uFF08\u5206\u949F\uFF09\u3002`,
+        badRetry: (v) => `retry \u975E\u6CD5\uFF08"${v}"\uFF09\uFF1A\u987B\u4E3A 0-3 \u7684\u6574\u6570\uFF08\u770B\u95E8\u72D7\u7EC8\u6B62\u540E\u5E26\u8BC1\u636E\u91CD\u8BD5\u6B21\u6570\uFF1B\u7F3A\u7701 0=\u4E0D\u91CD\u8BD5\uFF09\u3002`,
         badTools: "tools \u4E3A\u7A7A\uFF1A\u8981\u4E48\u5220\u6389\u8BE5\u884C\uFF08\u7528\u7F3A\u7701\u7981\u7528\u6E05\u5355\uFF09\uFF0C\u8981\u4E48\u5217\u5DE5\u5177\u540D\uFF08\u9017\u53F7\u5206\u9694\uFF09\u3002",
         emptyBody: "\u4EFB\u52A1\u6B63\u6587\u4E3A\u7A7A\uFF1Afrontmatter \u4E4B\u540E\u5E94\u5199\u4EFB\u52A1\u63CF\u8FF0\u3002",
         untitled: "(\u672A\u547D\u540D\u4EFB\u52A1)",
@@ -914,6 +923,7 @@ var init_ticket = __esm({
         noAccept: "Frontmatter is missing `accept` (acceptance command). Batch tasks must carry an executable acceptance check \u2014 rejected without one.",
         badBudget: (v) => `Invalid budget-yuan ("${v}"): must be a positive number (yuan).`,
         badTimeout: (v) => `Invalid timeout-min ("${v}"): must be a positive integer (minutes).`,
+        badRetry: (v) => `Invalid retry ("${v}"): must be an integer 0-3 (evidence-carrying retries after a watchdog kill; default 0 = no retry).`,
         badTools: "Empty tools: either remove the line (use the default denylist) or list tool names (comma-separated).",
         emptyBody: "Empty task body: write the task description after the frontmatter.",
         untitled: "(untitled task)",
@@ -955,13 +965,19 @@ var init_ticket = __esm({
         if (n === null) return { ok: false, error: ticketMsg(locale2, "badTimeout")(fm["timeout-min"]) };
         timeoutMin = n;
       }
+      let retry;
+      if (fm["retry"] !== void 0) {
+        const n = Number(fm["retry"].trim());
+        if (!Number.isInteger(n) || n < 0 || n > 3) return { ok: false, error: ticketMsg(locale2, "badRetry")(fm["retry"]) };
+        retry = n;
+      }
       const tools = fm["tools"] !== void 0 ? parseToolsValue(fm["tools"]) : void 0;
       if (tools && tools.length === 0) return { ok: false, error: ticketMsg(locale2, "badTools") };
       const setup = (fm["setup"] ?? "").trim() || void 0;
       const body = bodyRaw.trim();
       if (!body) return { ok: false, error: ticketMsg(locale2, "emptyBody") };
       const title = (fm["title"] ?? "").trim() || body.split(/\r?\n/).find((l) => l.trim())?.slice(0, 40) || ticketMsg(locale2, "untitled");
-      return { ok: true, ticket: { title, accept, setup, budgetYuan, timeoutMin, tools: tools && tools.length > 0 ? tools : void 0, body } };
+      return { ok: true, ticket: { title, accept, setup, budgetYuan, timeoutMin, retry, tools: tools && tools.length > 0 ? tools : void 0, body } };
     };
     readBatchTicket = async (filePath, locale2 = "zh") => {
       let source;
@@ -1117,6 +1133,7 @@ var init_batchStrings = __esm({
   setup: pnpm install   # \u53EF\u9009\uFF1Aagent \u524D\u5728 worktree \u5185\u5907\u73AF\u5883\uFF08\u5E72\u51C0\u68C0\u51FA\u65E0 node_modules\uFF0C\u9A8C\u6536\u4F9D\u8D56\u73AF\u5883\u65F6\u5148\u88C5\uFF09
   budget-yuan: 0.5      # \u53EF\u9009\uFF1A\u672C\u4EFB\u52A1\u82B1\u8D39\u4E0A\u9650\uFF08\u5143\uFF09
   timeout-min: 30       # \u53EF\u9009\uFF1Aagent \u9636\u6BB5\u8D85\u65F6\uFF08\u5206\u949F\uFF0C\u7F3A\u7701 30\uFF09
+  retry: 1              # \u53EF\u9009\uFF1A\u88AB\u770B\u95E8\u72D7\u7EC8\u6B62\u540E\u5E26\u8BC1\u636E\u91CD\u8BD5\u6B21\u6570\uFF080-3\uFF0C\u7F3A\u7701 0=\u6740\u5373\u7EC8\u6001\uFF09
   tools: run_command    # \u53EF\u9009\uFF1A\u663E\u5F0F\u89E3\u9501\u9AD8\u5371\u5DE5\u5177\uFF08\u7F3A\u7701\u7981 run_command/delete_path\uFF09
   ---
   \u4EFB\u52A1\u63CF\u8FF0\u6B63\u6587\uFF08Markdown\uFF09\u2026
@@ -1143,6 +1160,10 @@ var init_batchStrings = __esm({
       wtCreateFail: (e) => `\u521B\u5EFA worktree \u5931\u8D25\uFF08\u9700\u8981\u4E3B\u5DE5\u4F5C\u533A\u662F git \u4ED3\u5E93\uFF09\uFF1A${e}`,
       agentErrorLine: (id, err) => `\u{1F4A5} [${id}] agent \u5F02\u5E38\uFF1A${err}`,
       timeoutLine: (id, min) => `\u23F1\uFE0F [${id}] \u8D85\u65F6\uFF08${min}min\uFF09\uFF0C\u622A\u65AD\u6536\u5C3E\uFF08\u9A8C\u6536\u4E0D\u8DD1\uFF09`,
+      wdNudgeNote: (id, level) => `\u{1F415} [${id}] watchdog nudge-${level} \u5DF2\u6CE8\u5165\u6536\u4EF6\u7BB1\uFF08\u7EA0\u504F\u63D0\u793A\uFF09`,
+      wdKillNote: (id, why) => `\u{1F415} [${id}] watchdog \u7EC8\u6B62\uFF1A${why}`,
+      wdRetryNote: (id, round) => `\u{1F501} [${id}] watchdog \u5E26\u8BC1\u636E\u91CD\u8BD5\uFF1A\u7B2C ${round} \u8F6E\uFF08\u540C worktree \u7EED\u8DD1\uFF0C\u5269\u4F59\u9884\u7B97\u7EED\u7528\uFF09`,
+      wdBudgetStopNote: (id) => `\u{1F415} [${id}] \u91CD\u8BD5\u5DF2\u8DF3\u8FC7\uFF1A\u9884\u7B97\u8DE8\u8F6E\u7D2F\u8BA1\u5DF2\u8017\u5C3D`,
       acceptLine: (passed, id, code) => `${passed ? "\u2705" : "\u274C"} [${id}] \u9A8C\u6536 exit ${code}`,
       acceptKilledSuffix: "\uFF08\u8D85\u65F6\u88AB\u6740\uFF09",
       timeoutAbort: (min) => `\u4EFB\u52A1\u8D85\u65F6\uFF08${min} \u5206\u949F\uFF09`,
@@ -1163,7 +1184,8 @@ var init_batchStrings = __esm({
         timeout: "\u23F1\uFE0F \u8D85\u65F6\u622A\u65AD",
         error: "\u{1F4A5} agent \u5F02\u5E38",
         "setup-failed": "\u{1F6E0}\uFE0F \u73AF\u5883\u51C6\u5907\u5931\u8D25",
-        rejected: "\u{1F6AB} \u5DE5\u5355\u88AB\u62D2"
+        rejected: "\u{1F6AB} \u5DE5\u5355\u88AB\u62D2",
+        "watchdog-killed": "\u{1F415} \u770B\u95E8\u72D7\u7EC8\u6B62"
       })[s],
       // —— 验收命令执行（输出嵌入报告） ——
       spawnFail: (e) => `\u542F\u52A8\u5931\u8D25\uFF1A${e}`,
@@ -1202,7 +1224,18 @@ var init_batchStrings = __esm({
       deniedNone: "\u65E0\u3002",
       diffH: "## Diff \u6458\u8981\uFF08worktree \u76F8\u5BF9\u57FA\u5EA7\uFF0C\u672A\u63D0\u4EA4\uFF0C\u5F85\u4EBA\u5DE5\u5904\u7F6E\uFF09",
       diffNote: (branch, p) => `\u6539\u52A8\u5728\u72EC\u7ACB worktree\uFF08\u5206\u652F \`${branch}\`\uFF0C\u8DEF\u5F84 ${p}\uFF09\u3002\u5904\u7F6E\uFF1A\u68C0\u67E5\u6EE1\u610F \u2192 \u5728 worktree \u5185 commit \u5E76\u5408\u56DE\u4E3B\u4ED3\uFF1B\u4E22\u5F03 \u2192 \u5220\u9664\u8BE5 worktree \u76EE\u5F55 + \`git worktree prune\` + \`git branch -D <\u5206\u652F>\`\u3002`,
-      diffNone: "\uFF08\u65E0\uFF09"
+      diffNone: "\uFF08\u65E0\uFF09",
+      // —— 看门狗（进展感知）报告段与进度行 ——
+      wdH: "## \u770B\u95E8\u72D7\uFF08\u8FDB\u5C55\u611F\u77E5\uFF09",
+      wdRecord: (s) => `- ${s}`,
+      wdSuspicionRec: (s) => `\u5ACC\u7591\u8BB0\u5F55\uFF08\u672A\u8FBE\u52A8\u4F5C\u7EBF\uFF09\uFF1A${s}`,
+      wdVerdictRec: (verdict, evidence) => `\u88C1\u51B3 ${verdict}\uFF1A${evidence || "\uFF08\u65E0\u8BC1\u636E\uFF09"}`,
+      wdNudgeRec: (level, text) => `nudge-${level} \u5DF2\u6CE8\u5165\u6536\u4EF6\u7BB1\uFF1A${text}`,
+      wdHealthRec: (s) => `\u5065\u5EB7\u4FE1\u53F7\u77ED\u8DEF\uFF08\u8DF3\u8FC7\u88C1\u51B3\uFF09\uFF1A${s}`,
+      wdAuxFailRec: () => `\u4E8C\u5C42\u88C1\u51B3\u8C03\u7528\u5931\u8D25\uFF0C\u964D\u7EA7 normal\uFF08\u770B\u95E8\u72D7\u81EA\u8EAB\u6545\u969C\u4E0D\u8BEF\u6740\uFF09`,
+      wdKillRec: (verdict, evidence) => `\u26D4 \u7EC8\u6B62\uFF1A${verdict} \u2014 ${evidence}`,
+      wdAtKillRec: (round, costYuan) => `\u7EC8\u6B62\u65F6\u523B\uFF1A\u8F6E ${round} \xB7 \xA5${costYuan}`,
+      wdRetryRec: (n) => `\u5E26\u8BC1\u636E\u91CD\u8BD5\uFF1A\u5171 ${n + 1} \u8F6E\uFF08\u540C worktree \u7EED\u8DD1\uFF0C\u8BC1\u636E\u89C1\u5404\u8F6E\u8BB0\u5F55\uFF09`
     };
     EN = {
       usage: `deepseeker-code batch \u2014 unattended batch runs (cost trust chain)
@@ -1220,6 +1253,7 @@ Ticket format (Markdown; frontmatter \`accept\` is required \u2014 no acceptance
   setup: pnpm install   # optional: prep env inside the worktree before the agent (fresh checkout has no node_modules)
   budget-yuan: 0.5      # optional: per-task cost cap (yuan)
   timeout-min: 30       # optional: agent-phase timeout (minutes, default 30)
+  retry: 1              # optional: evidence-carrying retries after a watchdog kill (0-3, default 0 = kill is final)
   tools: run_command    # optional: unlock risky tools (run_command/delete_path denied by default)
 ---
 
@@ -1246,6 +1280,10 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
       wtCreateFail: (e) => `Failed to create worktree (the main workspace must be a git repo): ${e}`,
       agentErrorLine: (id, err) => `\u{1F4A5} [${id}] agent error: ${err}`,
       timeoutLine: (id, min) => `\u23F1\uFE0F [${id}] Timed out (${min}min); wrapped up truncated (acceptance skipped)`,
+      wdNudgeNote: (id, level) => `\u{1F415} [${id}] watchdog nudge-${level} injected into the inbox (course correction)`,
+      wdKillNote: (id, why) => `\u{1F415} [${id}] watchdog killed: ${why}`,
+      wdRetryNote: (id, round) => `\u{1F501} [${id}] watchdog evidence-carrying retry: round ${round} (same worktree, remaining budget carried over)`,
+      wdBudgetStopNote: (id) => `\u{1F415} [${id}] retry skipped: cumulative budget exhausted across rounds`,
       acceptLine: (passed, id, code) => `${passed ? "\u2705" : "\u274C"} [${id}] acceptance exit ${code}`,
       acceptKilledSuffix: " (killed on timeout)",
       timeoutAbort: (min) => `Task timed out (${min} minutes)`,
@@ -1265,7 +1303,8 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
         timeout: "\u23F1\uFE0F timed out",
         error: "\u{1F4A5} agent error",
         "setup-failed": "\u{1F6E0}\uFE0F setup failed",
-        rejected: "\u{1F6AB} ticket rejected"
+        rejected: "\u{1F6AB} ticket rejected",
+        "watchdog-killed": "\u{1F415} watchdog killed"
       })[s],
       spawnFail: (e) => `Spawn failed: ${e}`,
       execFail: (e) => `Execution failed: ${e}`,
@@ -1301,7 +1340,17 @@ changes are harvested onto an isolated git worktree (temp branch), kept for manu
       deniedNone: "None.",
       diffH: "## Diff summary (worktree vs base, uncommitted, awaiting manual handling)",
       diffNote: (branch, p) => `Changes live in an isolated worktree (branch \`${branch}\`, path ${p}). To keep: commit inside the worktree and merge back. To discard: delete the worktree directory + \`git worktree prune\` + \`git branch -D <branch>\`.`,
-      diffNone: "(none)"
+      diffNone: "(none)",
+      wdH: "## Watchdog (progress-aware)",
+      wdRecord: (s) => `- ${s}`,
+      wdSuspicionRec: (s) => `Suspicion logged (below action line): ${s}`,
+      wdVerdictRec: (verdict, evidence) => `Verdict ${verdict}: ${evidence || "(no evidence)"}`,
+      wdNudgeRec: (level, text) => `nudge-${level} injected into the inbox: ${text}`,
+      wdHealthRec: (s) => `Health signal short-circuit (adjudication skipped): ${s}`,
+      wdAuxFailRec: () => `Level-2 adjudication call failed; degraded to normal (a broken watchdog must not become a false-kill weapon)`,
+      wdKillRec: (verdict, evidence) => `\u26D4 Killed: ${verdict} \u2014 ${evidence}`,
+      wdAtKillRec: (round, costYuan) => `At kill time: round ${round} \xB7 \xA5${costYuan}`,
+      wdRetryRec: (n) => `Evidence-carrying retries: ${n + 1} rounds total (same worktree; per-round evidence above)`
     };
     DICT = { zh: ZH, en: EN };
     batchT = (locale2) => DICT[locale2] ?? ZH;
@@ -1482,27 +1531,29 @@ var init_client = __esm({
 });
 
 // ../core/src/llm/providers/deepseek/stream.ts
-var STREAM_IDLE_TIMEOUT_MS, stripHistoricalReasoning, streamChat;
+var STREAM_IDLE_TIMEOUT_MS, isEmptyAssistantMsg, stripHistoricalReasoning, streamChat;
 var init_stream = __esm({
   "../core/src/llm/providers/deepseek/stream.ts"() {
     "use strict";
     init_client();
     STREAM_IDLE_TIMEOUT_MS = Number(process.env.DEEP_SEEK_STREAM_IDLE_TIMEOUT_MS) || 12e4;
+    isEmptyAssistantMsg = (m) => m?.role === "assistant" && !(typeof m.content === "string" && m.content.length > 0) && !(Array.isArray(m.tool_calls) && m.tool_calls.length > 0);
     stripHistoricalReasoning = (messages) => {
-      if (process.env.DEEP_SEEK_REASONING_PASSTHROUGH === "1") return messages;
+      const wire = messages.some(isEmptyAssistantMsg) ? messages.filter((m) => !isEmptyAssistantMsg(m)) : messages;
+      if (process.env.DEEP_SEEK_REASONING_PASSTHROUGH === "1") return wire;
       let lastNonSystem = null;
-      for (let i = messages.length - 1; i >= 0; i--) {
-        if (messages[i]?.role !== "system") {
-          lastNonSystem = messages[i];
+      for (let i = wire.length - 1; i >= 0; i--) {
+        if (wire[i]?.role !== "system") {
+          lastNonSystem = wire[i];
           break;
         }
       }
-      const hasSplitToolTurn = messages.some((m, i) => i > 0 && m?.role === "assistant" && messages[i - 1]?.role === "assistant" && Array.isArray(m.tool_calls) && m.tool_calls.length > 0);
-      if (lastNonSystem?.role === "assistant" || hasSplitToolTurn) return messages;
-      return messages.map((m) => {
-        const wire = m;
-        if (wire?.role !== "assistant" || typeof wire.reasoning_content !== "string") return m;
-        const copy = { ...wire };
+      const hasSplitToolTurn = wire.some((m, i) => i > 0 && m?.role === "assistant" && wire[i - 1]?.role === "assistant" && Array.isArray(m.tool_calls) && m.tool_calls.length > 0);
+      if (lastNonSystem?.role === "assistant" || hasSplitToolTurn) return wire;
+      return wire.map((m) => {
+        const w = m;
+        if (w?.role !== "assistant" || typeof w.reasoning_content !== "string") return m;
+        const copy = { ...w };
         delete copy.reasoning_content;
         return copy;
       });
@@ -1975,8 +2026,19 @@ var init_replay = __esm({
 });
 
 // ../core/src/llm/model.ts
+var model_exports = {};
+__export(model_exports, {
+  activeProvider: () => activeProvider,
+  chatWithModelWithSummary: () => chatWithModelWithSummary,
+  classifyToolRisk: () => classifyToolRisk,
+  isContextLengthError: () => isContextLengthError2,
+  isImageUnsupportedError: () => isImageUnsupportedError2,
+  isTransientApiError: () => isTransientApiError,
+  resetActiveProvider: () => resetActiveProvider,
+  setActiveProvider: () => setActiveProvider
+});
 import { readFileSync as readFileSync4 } from "fs";
-var resolveInitialProvider, activeProvider, chatWithModelWithSummary, classifyToolRisk;
+var resolveInitialProvider, activeProvider, setActiveProvider, resetActiveProvider, chatWithModelWithSummary, classifyToolRisk, isContextLengthError2, isTransientApiError, isImageUnsupportedError2;
 var init_model = __esm({
   "../core/src/llm/model.ts"() {
     "use strict";
@@ -1997,8 +2059,17 @@ var init_model = __esm({
       return createReplayProvider(Array.isArray(raw) ? { turns: raw } : raw);
     };
     activeProvider = resolveInitialProvider();
+    setActiveProvider = (p) => {
+      activeProvider = p;
+    };
+    resetActiveProvider = () => {
+      activeProvider = deepseekProvider;
+    };
     chatWithModelWithSummary = (messages, tools, opts) => activeProvider.summarize(messages, tools, opts);
     classifyToolRisk = (toolName, args, detail, signal, onAuxUsage) => activeProvider.classifyRisk(toolName, args, detail, signal, onAuxUsage);
+    isContextLengthError2 = (e) => activeProvider.isContextLengthError(e);
+    isTransientApiError = (e) => activeProvider.isTransientError(e);
+    isImageUnsupportedError2 = (e) => activeProvider.isImageUnsupportedError(e);
   }
 });
 
@@ -2532,13 +2603,17 @@ var init_transcript = __esm({
           console.warn(`\u26A0\uFE0F [transcript] \u6D88\u606F\u542B ${fffdCount} \u4E2A\u4E71\u7801\u5B57\u7B26\uFF08U+FFFD\uFF09\uFF0C\u5DF2\u539F\u6837\u5199\u5165\u5386\u53F2\u3002\u6765\u6E90\u53EF\u80FD\u662F GBK \u5B50\u8FDB\u7A0B\u8F93\u51FA\u6216\u4E71\u7801\u7C98\u8D34\u3002`);
         }
         await appendLineWithRetry(p, payload);
+        return true;
       } catch (e) {
         console.warn(`\u26A0\uFE0F \u6D88\u606F\u843D\u76D8\u5931\u8D25\uFF08\u5DF2\u91CD\u8BD5 3 \u6B21\uFF0C\u5185\u5B58\u4E0E\u78C1\u76D8\u8F6C\u5F55\u53EF\u80FD\u4E0D\u4E00\u81F4\uFF09:`, e);
+        return false;
       }
     };
     appendMessages = async (sessionId, entries) => {
-      if (entries.length === 0) return;
-      if (entries.length === 1) return appendMessage(entries[0]);
+      if (entries.length === 0) return { written: 0, failed: 0 };
+      if (entries.length === 1) {
+        return await appendMessage(entries[0]) ? { written: 1, failed: 0 } : { written: 0, failed: 1 };
+      }
       try {
         await ensureSessionsDir(sessionId);
         const p = getTranscriptPath(sessionId);
@@ -2551,28 +2626,35 @@ var init_transcript = __esm({
         if (fffdTotal > 0) console.warn(`[transcript] \u6279\u91CF\u6D88\u606F\u542B ${fffdTotal} \u4E2A\u4E71\u7801\u5B57\u7B26\uFF08U+FFFD\uFF09\uFF0C\u5DF2\u539F\u6837\u5199\u5165\u5386\u53F2\u3002\u6765\u6E90\u53EF\u80FD\u662F GBK \u5B50\u8FDB\u7A0B\u8F93\u51FA\u6216\u4E71\u7801\u7C98\u8D34\u3002`);
         let handle = null;
         let i = 0;
+        let failed = 0;
         try {
           handle = await fs9.open(p, "a");
           for (; i < payloads.length; i++) await appendLineWithRetry(p, payloads[i], handle);
         } catch (e) {
           console.warn(`[transcript] \u6279\u91CF\u843D\u76D8\u7B2C ${i + 1}/${payloads.length} \u6761\u5931\u8D25\uFF0C\u8BE5\u6761\u8D77\u56DE\u843D\u9010\u6761\u65E7\u8DEF\u5F84:`, e instanceof Error ? e.message : e);
-          for (; i < entries.length; i++) await appendMessage(entries[i]);
+          for (; i < entries.length; i++) {
+            if (!await appendMessage(entries[i])) failed++;
+          }
         } finally {
           if (handle) await handle.close().catch(() => {
           });
         }
+        return { written: entries.length - failed, failed };
       } catch (e) {
         console.warn(`\u6279\u91CF\u6D88\u606F\u843D\u76D8\u5931\u8D25\uFF08\u5185\u5B58\u4E0E\u78C1\u76D8\u8F6C\u5F55\u53EF\u80FD\u4E0D\u4E00\u81F4\uFF09:`, e);
+        return { written: 0, failed: entries.length };
       }
     };
     appendEvent = async (sessionId, ev) => {
-      if (!appConfig.transcriptEvents) return;
+      if (!appConfig.transcriptEvents) return true;
       try {
         await ensureSessionsDir(sessionId);
         const line = { id: createUUID(), ts: (/* @__PURE__ */ new Date()).toISOString(), ...ev };
         await appendLineWithRetry(getTranscriptPath(sessionId), JSON.stringify(line) + "\n");
+        return true;
       } catch (e) {
         console.warn(`\u26A0\uFE0F [transcript] \u4E8B\u4EF6\u884C\u843D\u76D8\u5931\u8D25\uFF08${ev.dscEvent}\uFF0C\u6062\u590D/\u5206\u53C9\u5C06\u56DE\u9000\u542F\u53D1\u5F0F\uFF09:`, e);
+        return false;
       }
     };
   }
@@ -2598,8 +2680,8 @@ var init_recovery = __esm({
       if (!sawEvents || !lastStart) return { kind: "legacy" };
       return closed.has(lastStart.runId) ? { kind: "clean" } : { kind: "crashed", runId: lastStart.runId };
     };
-    repairOrphanToolCalls = (msgs, confirmedCrash) => {
-      const placeholder = confirmedCrash ? "\uFF08\u4E0A\u6B21\u4F1A\u8BDD\u5728\u5DE5\u5177\u6267\u884C\u4E2D\u5D29\u6E83\uFF08run \u672A\u95ED\u5408\uFF09\uFF0C\u8BE5\u8C03\u7528\u672A\u6267\u884C\uFF0C\u5DF2\u8DF3\u8FC7\u3002\uFF09" : "\uFF08\u8BE5\u5DE5\u5177\u8C03\u7528\u56E0\u4E0A\u6B21\u4F1A\u8BDD\u5F02\u5E38\u4E2D\u65AD\u672A\u7559\u4E0B\u7ED3\u679C\uFF0C\u5DF2\u8DF3\u8FC7\u3002\uFF09";
+    repairOrphanToolCalls = (msgs, confirmedUnclosed) => {
+      const placeholder = confirmedUnclosed ? "\uFF08\u4E0A\u6B21\u4F1A\u8BDD\u7684\u8FD9\u6B21\u5DE5\u5177\u8C03\u7528\u672A\u5B8C\u6210\uFF08run \u672A\u95ED\u5408\uFF09\uFF0C\u5DF2\u8DF3\u8FC7\u3002\uFF09" : "\uFF08\u8BE5\u5DE5\u5177\u8C03\u7528\u56E0\u4E0A\u6B21\u4F1A\u8BDD\u5F02\u5E38\u4E2D\u65AD\u672A\u7559\u4E0B\u7ED3\u679C\uFF0C\u5DF2\u8DF3\u8FC7\u3002\uFF09";
       const out = [];
       const repairedToolCallIds = [];
       for (let i = 0; i < msgs.length; i++) {
@@ -2620,7 +2702,7 @@ var init_recovery = __esm({
           }
         }
       }
-      return { msgs: out, repairedToolCallIds, confirmedCrash };
+      return { msgs: out, repairedToolCallIds, confirmedUnclosed };
     };
     reconcileCompaction = (state, lines) => {
       let last;
@@ -2644,9 +2726,9 @@ var init_recovery = __esm({
         await appendEvent(sessionId, {
           dscEvent: "run.abandoned",
           runId: interruption.runId,
-          reason: "run.end missing: interrupted by process exit/kill"
+          reason: "unclosed (cause unknown)"
         });
-        console.warn(`\u27E6recovery\u27E7 \u68C0\u6D4B\u5230\u672A\u95ED\u5408 run\uFF08${interruption.runId.slice(0, 8)}\u2026\uFF09\u2192 \u5DF2\u8865 run.abandoned \u95ED\u5893\u6807\u8BB0\uFF1B\u5B64\u513F\u4FEE\u590D\u6309\u300C\u5D29\u6E83\u786E\u8BA4\u300D\u6863\u6267\u884C\u3002`);
+        console.warn(`\u27E6recovery\u27E7 \u68C0\u6D4B\u5230\u672A\u95ED\u5408 run\uFF08${interruption.runId.slice(0, 8)}\u2026\uFF09\u2192 \u5DF2\u8865 run.abandoned \u95ED\u5893\u6807\u8BB0\uFF1B\u5B64\u513F\u4FEE\u590D\u6309\u300C\u672A\u95ED\u5408\u300D\u6863\u6267\u884C\u3002`);
       }
       const state = precomputed?.state ?? await getRollingState(sessionId);
       const compaction = reconcileCompaction(
@@ -3476,19 +3558,63 @@ ${lines}
       const hitRate = event.lastRealPromptTokens && event.lastCachedTokens != null && event.lastRealPromptTokens > 0 ? event.lastCachedTokens / event.lastRealPromptTokens : null;
       const cacheFactor = hitRate == null ? 1 : Math.min(1.1, Math.max(0.9, 0.9 + hitRate * 0.2));
       const effectiveRatio = Math.min(event.compactRatio * cacheFactor, 0.82);
-      if (!event.forceCompact && estReal(event.messageArr) <= event.modelWindow * effectiveRatio) return;
+      const thresholdAtCheck = Math.round(event.modelWindow * effectiveRatio);
+      const reportCheck = (decision, decayed2) => {
+        event.onWindowCheck?.({
+          estReal: Math.round(estReal(event.messageArr)),
+          threshold: thresholdAtCheck,
+          correctionRatio,
+          toolsTokens,
+          hitRate,
+          cacheFactor,
+          decision,
+          ...decayed2 === void 0 ? {} : { decayed: decayed2 }
+        });
+      };
+      const estRealAtTrigger = Math.round(estReal(event.messageArr));
+      const emitCheckEvent = (decision) => {
+        event.events({
+          sessionId: event.sessionId,
+          eventType: "context.check",
+          metadata: {
+            depth: event.depth,
+            decisionSource: "summary",
+            ok: true,
+            estReal: estRealAtTrigger,
+            thresholdAtSend: thresholdAtCheck,
+            correctionRatioUsed: correctionRatio,
+            hitRateAtCheck: hitRate,
+            cacheFactorAtCheck: cacheFactor,
+            windowDecision: decision
+          }
+        });
+      };
+      if (!event.forceCompact && estReal(event.messageArr) <= event.modelWindow * effectiveRatio) {
+        reportCheck("noop");
+        return;
+      }
       const preDecaySize = estReal(event.messageArr);
       const decayedArr = decayOldToolResults(event.messageArr);
-      if (decayedArr !== event.messageArr) {
+      const decayed = decayedArr !== event.messageArr;
+      if (decayed) {
         event.messageArr.length = 0;
         event.messageArr.push(...decayedArr);
-      }
-      if (!event.forceCompact && estReal(event.messageArr) <= event.modelWindow * effectiveRatio) {
-        console.log(`\u{1F4C9} [\u7A97\u53E3\u6CBB\u7406] \u514D\u8D39\u8870\u51CF\uFF08\u65E7\u5DE5\u5177\u7ED3\u679C\u6298\u53E0\uFF09\u540E\u56DE\u5230\u9608\u503C\u5185\uFF08${Math.round(preDecaySize)} \u2192 ${Math.round(estReal(event.messageArr))} token\uFF09\uFF0C\u8DF3\u8FC7 LLM \u538B\u7F29`);
-        return;
+        event.events({
+          sessionId: event.sessionId,
+          eventType: "context.decay",
+          metadata: {
+            depth: event.depth,
+            decisionSource: "summary",
+            ok: true,
+            decayTokensBefore: Math.round(preDecaySize),
+            decayTokensAfter: Math.round(estReal(event.messageArr))
+          }
+        });
       }
       const tokensThreshold = Math.round(event.modelWindow * effectiveRatio);
+      let preCompactSent = false;
       await dispatch("PreCompact", { sessionId: event.sessionId, depth: event.depth, tokensBefore: Math.round(estReal(event.messageArr)), tokensThreshold });
+      preCompactSent = true;
       const systemMsg = event.messageArr[0];
       const summaryMsg = event.messageArr[1];
       let keep = event.keepRecentUnits;
@@ -3496,102 +3622,113 @@ ${lines}
       const preCompactSize = Math.round(lastSize);
       const startTime = performance.now();
       let round = 0;
-      let forcedPass = event.forceCompact === true;
-      while (forcedPass || lastSize > event.modelWindow * effectiveRatio) {
-        forcedPass = false;
-        if (event.signal?.aborted) {
-          return;
-        }
-        ;
-        const active = event.messageArr.slice(2);
-        const { toCompact, keepRecent } = splitUntils(active, keep);
-        try {
-          if (toCompact.length > 0) {
-            summaryMsg.content = mergeSummarySlot(summaryMsg?.content || "", "", extractArchiveEntities(toCompact));
-            const batches = splitIntoBatches(toCompact);
-            summaryMsg.content = batches.length === 1 ? await synthesizeSlotNarrativeFromBatch(summaryMsg.content, batches[0], event.signal, event.onAuxUsage) : await synthesizeSlotNarrative(summaryMsg.content, await compactBatches(batches, event.signal, event.depth === 0 ? event.onUIEvent : void 0, event.onAuxUsage), event.signal, event.onAuxUsage);
-            if (estimateTokens([summaryMsg]) > SUMMARY_SELF_COMPACT_THRESHOLD) {
+      let compactDecision = "noop";
+      let forcedPass = event.forceCompact === true || decayed;
+      try {
+        while (forcedPass || lastSize > event.modelWindow * effectiveRatio) {
+          forcedPass = false;
+          if (event.signal?.aborted) {
+            return;
+          }
+          ;
+          const active = event.messageArr.slice(2);
+          const { toCompact, keepRecent } = splitUntils(active, keep);
+          try {
+            if (toCompact.length > 0) {
+              summaryMsg.content = mergeSummarySlot(summaryMsg?.content || "", "", extractArchiveEntities(toCompact));
+              const batches = splitIntoBatches(toCompact);
+              summaryMsg.content = batches.length === 1 ? await synthesizeSlotNarrativeFromBatch(summaryMsg.content, batches[0], event.signal, event.onAuxUsage) : await synthesizeSlotNarrative(summaryMsg.content, await compactBatches(batches, event.signal, event.depth === 0 ? event.onUIEvent : void 0, event.onAuxUsage), event.signal, event.onAuxUsage);
+              const slotNotes = parseSummarySlot(typeof summaryMsg?.content === "string" ? summaryMsg.content : "").notes;
+              if (estimateTokens([{ role: summaryMsg?.role ?? "system", content: slotNotes }]) > SUMMARY_SELF_COMPACT_THRESHOLD) {
+                summaryMsg.content = await compactSlotNarrative(summaryMsg.content, event.modelWindow, event.signal, event.onAuxUsage);
+              }
+              const endTime = performance.now();
+              event.messageArr.length = 0;
+              event.messageArr.push(systemMsg, summaryMsg, ...keepRecent);
+              event.events({
+                sessionId: event.sessionId,
+                eventType: "session.summary",
+                metadata: {
+                  depth: event.depth,
+                  decisionSource: "summary",
+                  ok: true,
+                  durationMs: endTime - startTime,
+                  round: round++
+                },
+                usage: {
+                  prompt_tokens: lastSize,
+                  compress_tokens: estReal(event.messageArr)
+                }
+              });
+              const store = await getRollingState(event.sessionId);
+              store.archivedMessageCount = (store.archivedMessageCount || 0) + toCompact.length;
+              await persistCompaction(event.sessionId, store.archivedMessageCount, summaryMsg.content);
+              compactDecision = "compact";
+            } else if (keep > 1) {
+              keep--;
+              continue;
+            } else if (summaryMsg?.content) {
               summaryMsg.content = await compactSlotNarrative(summaryMsg.content, event.modelWindow, event.signal, event.onAuxUsage);
+              compactDecision = "selfCompact";
+              event.messageArr.length = 0;
+              event.messageArr.push(systemMsg, summaryMsg, ...keepRecent);
+              const store = await getRollingState(event.sessionId);
+              await persistCompaction(event.sessionId, store.archivedMessageCount, summaryMsg.content);
+            } else {
+              break;
             }
+          } catch (error) {
+            if (event.signal?.aborted) return;
+            const err = error instanceof Error ? error : new Error(String(error));
+            console.warn("\u26A0\uFE0F \u672C\u8F6E\u538B\u7F29\u5931\u8D25\uFF0C\u8DF3\u8FC7:", err.message);
+            const store = await getRollingState(event.sessionId);
+            const nextFailures = (store.consecutiveFailures || 0) + 1;
+            await setRollingState(event.sessionId, {
+              archivedMessageCount: store.archivedMessageCount || 0,
+              rollingSummary: summaryMsg?.content || "",
+              consecutiveFailures: nextFailures
+              // 👈 同步落盘
+            });
             const endTime = performance.now();
-            event.messageArr.length = 0;
-            event.messageArr.push(systemMsg, summaryMsg, ...keepRecent);
             event.events({
               sessionId: event.sessionId,
+              parentId: event.depth > 0 ? event.sessionId : "",
               eventType: "session.summary",
               metadata: {
                 depth: event.depth,
+                messageId: summaryMsg?.id ?? "(rolling-summary-slot)",
                 decisionSource: "summary",
-                ok: true,
+                ok: false,
                 durationMs: endTime - startTime,
-                round: round++
+                attempt: nextFailures
               },
               usage: {
                 prompt_tokens: lastSize,
-                compress_tokens: estReal(event.messageArr)
+                compress_tokens: estimateTokens(event.messageArr)
+              },
+              payload: {
+                output: err.message
               }
             });
-            const store = await getRollingState(event.sessionId);
-            store.archivedMessageCount = (store.archivedMessageCount || 0) + toCompact.length;
-            await persistCompaction(event.sessionId, store.archivedMessageCount, summaryMsg.content);
-          } else if (keep > 1) {
-            keep--;
-            continue;
-          } else if (summaryMsg?.content) {
-            summaryMsg.content = await compactSlotNarrative(summaryMsg.content, event.modelWindow, event.signal, event.onAuxUsage);
-            event.messageArr.length = 0;
-            event.messageArr.push(systemMsg, summaryMsg, ...keepRecent);
-            const store = await getRollingState(event.sessionId);
-            await persistCompaction(event.sessionId, store.archivedMessageCount, summaryMsg.content);
-          } else {
+            if (nextFailures >= 3) {
+              throw new Error(
+                `\u274C [\u538B\u7F29\u7194\u65AD] \u4E0A\u4E0B\u6587\u538B\u7F29\u8FDE\u7EED ${nextFailures} \u6B21\u5931\u8D25\uFF0C\u4E3A\u9632\u5929\u4EF7\u8D26\u5355\u6B7B\u5FAA\u73AF\u5DF2\u6682\u505C\u81EA\u52A8\u538B\u7F29\u3002\u5E38\u89C1\u6839\u56E0\uFF1A\u6458\u8981\u8F85\u52A9\u6A21\u578B\u670D\u52A1\u5F02\u5E38\u6216\u7F51\u7EDC\u4E0D\u901A\uFF08\u53EF\u67E5 DEEP_SEEK_AUX_MODEL \u670D\u52A1\u53EF\u7528\u6027\uFF1B\u8D85\u957F\u5DE5\u5177\u7ED3\u679C\u5DF2\u7531\u7CFB\u7EDF\u81EA\u52A8\u9884\u622A\u65AD\uFF0C\u4E00\u822C\u4E0D\u518D\u662F\u4E3B\u56E0\uFF09\u3002\u81EA\u6108\uFF1A\u76F4\u63A5\u91CD\u53D1\u6D88\u606F\u5373\u53EF\u91CD\u8BD5\uFF08\u6210\u529F\u538B\u7F29\u4E00\u6B21\u8BA1\u6570\u5373\u6E05\u96F6\uFF09\uFF1B\u6216 /fork \u5206\u53C9\u7EED\u63A5\u3001/new \u5F00\u65B0\u4F1A\u8BDD\u3002`
+              );
+            }
             break;
           }
-        } catch (error) {
-          if (event.signal?.aborted) return;
-          const err = error instanceof Error ? error : new Error(String(error));
-          console.warn("\u26A0\uFE0F \u672C\u8F6E\u538B\u7F29\u5931\u8D25\uFF0C\u8DF3\u8FC7:", err.message);
-          const store = await getRollingState(event.sessionId);
-          const nextFailures = (store.consecutiveFailures || 0) + 1;
-          await setRollingState(event.sessionId, {
-            archivedMessageCount: store.archivedMessageCount || 0,
-            rollingSummary: summaryMsg?.content || "",
-            consecutiveFailures: nextFailures
-            // 👈 同步落盘
-          });
-          const endTime = performance.now();
-          event.events({
-            sessionId: event.sessionId,
-            parentId: event.depth > 0 ? event.sessionId : "",
-            eventType: "session.summary",
-            metadata: {
-              depth: event.depth,
-              messageId: summaryMsg?.id ?? "(rolling-summary-slot)",
-              decisionSource: "summary",
-              ok: false,
-              durationMs: endTime - startTime,
-              attempt: nextFailures
-            },
-            usage: {
-              prompt_tokens: lastSize,
-              compress_tokens: estimateTokens(event.messageArr)
-            },
-            payload: {
-              output: err.message
-            }
+          const newSize = estReal(event.messageArr);
+          if (newSize >= lastSize) break;
+          lastSize = newSize;
+        }
+      } finally {
+        if (preCompactSent) {
+          await dispatch("PostCompact", { sessionId: event.sessionId, depth: event.depth, tokensBefore: Math.round(lastSize), tokensAfter: Math.round(estReal(event.messageArr)) }).catch(() => {
           });
-          if (nextFailures >= 3) {
-            throw new Error(
-              `\u274C [\u538B\u7F29\u7194\u65AD] \u4E0A\u4E0B\u6587\u538B\u7F29\u8FDE\u7EED ${nextFailures} \u6B21\u5931\u8D25\uFF0C\u4E3A\u9632\u5929\u4EF7\u8D26\u5355\u6B7B\u5FAA\u73AF\u5DF2\u6682\u505C\u81EA\u52A8\u538B\u7F29\u3002\u5E38\u89C1\u6839\u56E0\uFF1A\u6458\u8981\u8F85\u52A9\u6A21\u578B\u670D\u52A1\u5F02\u5E38\u6216\u7F51\u7EDC\u4E0D\u901A\uFF08\u53EF\u67E5 DEEP_SEEK_AUX_MODEL \u670D\u52A1\u53EF\u7528\u6027\uFF1B\u8D85\u957F\u5DE5\u5177\u7ED3\u679C\u5DF2\u7531\u7CFB\u7EDF\u81EA\u52A8\u9884\u622A\u65AD\uFF0C\u4E00\u822C\u4E0D\u518D\u662F\u4E3B\u56E0\uFF09\u3002\u81EA\u6108\uFF1A\u76F4\u63A5\u91CD\u53D1\u6D88\u606F\u5373\u53EF\u91CD\u8BD5\uFF08\u6210\u529F\u538B\u7F29\u4E00\u6B21\u8BA1\u6570\u5373\u6E05\u96F6\uFF09\uFF1B\u6216 /fork \u5206\u53C9\u7EED\u63A5\u3001/new \u5F00\u65B0\u4F1A\u8BDD\u3002`
-            );
-          }
-          break;
         }
-        const newSize = estReal(event.messageArr);
-        if (newSize >= lastSize) break;
-        lastSize = newSize;
       }
-      await dispatch("PostCompact", { sessionId: event.sessionId, depth: event.depth, tokensBefore: Math.round(lastSize), tokensAfter: Math.round(estReal(event.messageArr)) }).catch(() => {
-      });
+      reportCheck(compactDecision, decayed);
+      if (compactDecision !== "noop") emitCheckEvent(compactDecision);
       if (event.onUIEvent && event.depth === 0) {
         const afterSize = Math.round(estReal(event.messageArr));
         if (preCompactSize - afterSize > 0) {
@@ -4173,13 +4310,19 @@ var init_inbox = __esm({
     };
     flushLeftoverToTranscript = async (sessionId) => {
       const texts = claimSessionInbox(sessionId);
+      let failed = 0;
       for (const t of texts) {
-        await appendMessage({ sessionId, role: "user", content: t });
+        const ok = await appendMessage({ sessionId, role: "user", content: t });
+        if (!ok) failed++;
       }
       if (texts.length > 0) {
-        console.warn(`[inbox] \u4F1A\u8BDD ${sessionId} \u7ED3\u675F\u65F6 ${texts.length} \u6761\u8865\u5145\u8F93\u5165\u672A\u8BA4\u9886\uFF0C\u5DF2\u5199\u5165 transcript\uFF08\u4E0B\u8F6E\u81EA\u52A8\u5E26\u5165\uFF09`);
+        if (failed > 0) {
+          console.warn(`[inbox] \u4F1A\u8BDD ${sessionId} \u7ED3\u675F\u65F6 ${failed}/${texts.length} \u6761\u8865\u5145\u8F93\u5165\u843D\u76D8\u5931\u8D25\uFF08transcript \u4FA7\u6545\u969C\uFF0C\u4E0B\u8F6E\u65E0\u6CD5\u5E26\u5165\uFF09`);
+        } else {
+          console.warn(`[inbox] \u4F1A\u8BDD ${sessionId} \u7ED3\u675F\u65F6 ${texts.length} \u6761\u8865\u5145\u8F93\u5165\u672A\u8BA4\u9886\uFF0C\u5DF2\u5199\u5165 transcript\uFF08\u4E0B\u8F6E\u81EA\u52A8\u5E26\u5165\uFF09`);
+        }
       }
-      return texts.length;
+      return { flushed: texts.length - failed, failed };
     };
   }
 });
@@ -5548,6 +5691,153 @@ var init_httpExecutor = __esm({
   }
 });
 
+// ../core/src/agent/agentWake.ts
+var AGENT_DONE_SENTINEL, SUBAGENT_REPORT_MAX_CHARS, wakeDrivers, wakeQueued, busyRuns, inFlightByParent, quiesceWaiters, registerWakeDriver, registerWakeDriverIfAbsent, unregisterWakeDriver, markRunStart, markRunEnd, pumpWake, scheduleWake, clearQueuedWake, notifySubagentDone, buildSubagentDoneReport, trackSubagentInFlight, releaseSubagentInFlight, notifyQuiesceWaiters, isQuiescent, waitSessionQuiescent;
+var init_agentWake = __esm({
+  "../core/src/agent/agentWake.ts"() {
+    "use strict";
+    init_inbox();
+    init_transcript();
+    AGENT_DONE_SENTINEL = "\u27E6DSC:AGENT-DONE\u27E7 \u5B50\u4EE3\u7406\u5B8C\u6210\u5524\u9192\uFF1A\u672C\u4F1A\u8BDD\u521A\u6CE8\u5165\u4E86\u5B50\u4EE3\u7406\u5B8C\u6210\u6C47\u62A5\uFF08\u89C1\u76F8\u90BB\u6D88\u606F\uFF09\uFF0C\u8BF7\u9010\u6761\u6D88\u5316\u6C47\u62A5\u5185\u5BB9\u5E76\u7EE7\u7EED\u63A8\u8FDB\u4E3B\u4EFB\u52A1\uFF1B\u82E5\u65E0\u5F85\u7EED\u4E8B\u9879\uFF0C\u7B80\u8981\u786E\u8BA4\u5373\u53EF\u3002";
+    SUBAGENT_REPORT_MAX_CHARS = 4096;
+    wakeDrivers = /* @__PURE__ */ new Map();
+    wakeQueued = /* @__PURE__ */ new Set();
+    busyRuns = /* @__PURE__ */ new Set();
+    inFlightByParent = /* @__PURE__ */ new Map();
+    quiesceWaiters = /* @__PURE__ */ new Map();
+    registerWakeDriver = (sessionId, driver) => {
+      if (!sessionId) return;
+      wakeDrivers.set(sessionId, driver);
+    };
+    registerWakeDriverIfAbsent = (sessionId, driver) => {
+      if (!sessionId || wakeDrivers.has(sessionId)) return;
+      wakeDrivers.set(sessionId, driver);
+    };
+    unregisterWakeDriver = (sessionId) => {
+      wakeDrivers.delete(sessionId);
+    };
+    markRunStart = (sessionId) => {
+      if (!sessionId) return;
+      busyRuns.add(sessionId);
+    };
+    markRunEnd = (sessionId) => {
+      if (!sessionId) return;
+      busyRuns.delete(sessionId);
+      pumpWake(sessionId);
+      notifyQuiesceWaiters(sessionId);
+    };
+    pumpWake = (sessionId) => {
+      if (!wakeQueued.has(sessionId)) return;
+      if (busyRuns.has(sessionId)) return;
+      wakeQueued.delete(sessionId);
+      const driver = wakeDrivers.get(sessionId);
+      if (!driver) return;
+      busyRuns.add(sessionId);
+      void (async () => {
+        try {
+          await driver();
+        } catch (e) {
+          console.warn(`\u26A0\uFE0F [agentWake] \u5524\u9192 run \u5F02\u5E38\uFF08\u5DF2\u5FFD\u7565\uFF0C\u94FE\u8DEF\u7EE7\u7EED\u6536\u655B\uFF09: ${e?.message ?? e}`);
+        } finally {
+          busyRuns.delete(sessionId);
+          notifyQuiesceWaiters(sessionId);
+          pumpWake(sessionId);
+        }
+      })();
+    };
+    scheduleWake = (sessionId) => {
+      if (!sessionId || wakeQueued.has(sessionId)) return;
+      wakeQueued.add(sessionId);
+      pumpWake(sessionId);
+      notifyQuiesceWaiters(sessionId);
+    };
+    clearQueuedWake = (sessionId) => {
+      wakeQueued.delete(sessionId);
+    };
+    notifySubagentDone = async (parentSessionId, report) => {
+      if (!parentSessionId || !report) return;
+      const delivered = pushSessionInbox(parentSessionId, report);
+      if (!delivered) {
+        try {
+          await appendMessage({ sessionId: parentSessionId, role: "user", content: report });
+        } catch {
+        }
+      }
+      scheduleWake(parentSessionId);
+    };
+    buildSubagentDoneReport = (agentId, taskBrief, result) => {
+      const status = result.status ?? (result.output ? "final" : "error");
+      const statusLabel = status === "final" ? "final\uFF08\u6B63\u5E38\u5B8C\u6210\uFF09" : status === "aborted" ? "aborted\uFF08\u88AB\u4E2D\u6B62\uFF09" : "error\uFF08\u5F02\u5E38\uFF09";
+      const over = result.output.length > SUBAGENT_REPORT_MAX_CHARS;
+      const body = over ? result.output.slice(0, SUBAGENT_REPORT_MAX_CHARS) : result.output;
+      return [
+        `\u{1F916} [\u5B50\u4EE3\u7406\u5B8C\u6210] \u{1F194} ${agentId}${taskBrief ? `\uFF08${taskBrief}\uFF09` : ""}`,
+        `\u72B6\u6001\uFF1A${statusLabel}`,
+        `\u6C47\u62A5\uFF1A`,
+        body,
+        over ? `
+\uFF08\u26A0\uFE0F \u6C47\u62A5\u8D85\u957F\u5DF2\u622A\u65AD\u81F3 ${SUBAGENT_REPORT_MAX_CHARS} \u5B57\u7B26\uFF1B\u5B8C\u6574\u5185\u5BB9\u53EF spawn_agent \u4F20 resume_session_id="${agentId}" \u8FFD\u95EE\u3002\uFF09` : ""
+      ].filter((s) => s !== "").join("\n");
+    };
+    trackSubagentInFlight = (parentSessionId, subSessionId) => {
+      if (!parentSessionId) return;
+      let set = inFlightByParent.get(parentSessionId);
+      if (!set) {
+        set = /* @__PURE__ */ new Set();
+        inFlightByParent.set(parentSessionId, set);
+      }
+      set.add(subSessionId);
+    };
+    releaseSubagentInFlight = (parentSessionId, subSessionId) => {
+      const set = inFlightByParent.get(parentSessionId);
+      if (!set) return;
+      set.delete(subSessionId);
+      if (set.size === 0) inFlightByParent.delete(parentSessionId);
+      notifyQuiesceWaiters(parentSessionId);
+    };
+    notifyQuiesceWaiters = (sessionId) => {
+      const waiters = quiesceWaiters.get(sessionId);
+      if (!waiters || waiters.size === 0) return;
+      for (const w of [...waiters]) w();
+    };
+    isQuiescent = (sessionId) => !inFlightByParent.get(sessionId)?.size && !busyRuns.has(sessionId) && !wakeQueued.has(sessionId);
+    waitSessionQuiescent = (sessionId, signal, timeoutMs2) => {
+      if (isQuiescent(sessionId)) return Promise.resolve(true);
+      return new Promise((resolve) => {
+        let settled = false;
+        const finish = (ok) => {
+          if (settled) return;
+          settled = true;
+          if (timer) clearTimeout(timer);
+          if (onAbort) signal?.removeEventListener("abort", onAbort);
+          const set = quiesceWaiters.get(sessionId);
+          if (set) {
+            set.delete(check);
+            if (set.size === 0) quiesceWaiters.delete(sessionId);
+          }
+          resolve(ok);
+        };
+        const check = () => {
+          if (isQuiescent(sessionId)) finish(true);
+        };
+        let timer;
+        const onAbort = () => finish(false);
+        if (!quiesceWaiters.has(sessionId)) quiesceWaiters.set(sessionId, /* @__PURE__ */ new Set());
+        quiesceWaiters.get(sessionId).add(check);
+        if (signal) {
+          if (signal.aborted) {
+            finish(false);
+            return;
+          }
+          signal.addEventListener("abort", onAbort, { once: true });
+        }
+        if (timeoutMs2 != null && timeoutMs2 > 0) timer = setTimeout(() => finish(false), timeoutMs2);
+        check();
+      });
+    };
+  }
+});
+
 // ../core/src/agent/repeatBreaker.ts
 var createRepeatBreaker;
 var init_repeatBreaker = __esm({
@@ -5889,7 +6179,7 @@ ${style.body}`);
 });
 
 // ../core/src/memory/registry.ts
-var memories, registerMemory, listMemories, getMemory, unregisterMemory, clearMemories, memoryIndexLine, getMemoryIndex;
+var memories, registerMemory, listMemories, getMemory, unregisterMemory, clearMemories, memoryIndexLine, MEMORY_LIMITS, getMemoryIndex;
 var init_registry6 = __esm({
   "../core/src/memory/registry.ts"() {
     "use strict";
@@ -5908,6 +6198,7 @@ var init_registry6 = __esm({
     };
     clearMemories = memories.clear;
     memoryIndexLine = (m) => `- **${m.name}** (${m.type}) \u2014 ${m.description}`;
+    MEMORY_LIMITS = { maxCount: 200, maxIndexBytes: 16 * 1024 };
     getMemoryIndex = () => {
       const all = memories.list();
       if (all.length === 0) return null;
@@ -5917,7 +6208,7 @@ var init_registry6 = __esm({
 });
 
 // ../core/src/memory/inject.ts
-var MEMORY_FENCE, MEMORY_MARKER, injectMemory;
+var MEMORY_FENCE, MEMORY_MARKER, memorySnapshots, injectMemory, clearMemorySnapshot;
 var init_inject5 = __esm({
   "../core/src/memory/inject.ts"() {
     "use strict";
@@ -5925,12 +6216,24 @@ var init_inject5 = __esm({
     init_registry6();
     MEMORY_FENCE = "\u27E6DSC:MEMORY\u27E7";
     MEMORY_MARKER = "\u3010\u8BB0\u5FC6\u7D22\u5F15\u3011";
-    injectMemory = (message) => {
-      const index = getMemoryIndex();
+    memorySnapshots = /* @__PURE__ */ new Map();
+    injectMemory = (message, sessionId) => {
+      let index;
+      if (sessionId === void 0) {
+        index = getMemoryIndex();
+      } else {
+        if (!memorySnapshots.has(sessionId)) {
+          memorySnapshots.set(sessionId, getMemoryIndex());
+        }
+        index = memorySnapshots.get(sessionId) ?? null;
+      }
       if (!index) return;
       injectMarkedBlock(message, MEMORY_FENCE, `${MEMORY_MARKER}
 ${index}`);
     };
+    clearMemorySnapshot = (sessionId) => {
+      memorySnapshots.delete(sessionId);
+    };
   }
 });
 
@@ -6009,7 +6312,7 @@ var init_systemInjections = __esm({
       injectSkillCatalog(message);
       injectAgentCatalog(message);
       injectProjectGuide(message);
-      injectMemory(message);
+      injectMemory(message, options.sessionId);
       return { rawTools, cleanedToolSchemas, toolsTokens };
     };
   }
@@ -6102,7 +6405,12 @@ var init_agent = __esm({
         type: "function",
         function: {
           name: "spawn_agent",
-          description: "\u6D3E\u751F\u62E5\u6709\u72EC\u7ACB\u6267\u884C\u73AF\u5883\u7684\u5B50 agent \u5904\u7406\u9694\u79BB\u5B50\u4EFB\u52A1\uFF0C\u5B8C\u6210\u540E\u81EA\u52A8\u6C47\u62A5\u6539\u52A8\u70B9\u4E0E\u7ED3\u8BBA\u3002name \u53EF\u6307\u5B9A\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u7CFB\u7EDF\u63D0\u793A\u8BCD\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF0C\u5957\u7528\u5176\u7CFB\u7EDF\u8BCD/\u5DE5\u5177\u767D\u540D\u5355/model\uFF09\uFF1B\u7F3A\u7701\u8D70\u901A\u7528\u6A21\u677F\u3002\u7EED\u8DD1\uFF1A\u4F20 resume_session_id\uFF08\u6B64\u524D\u8FD4\u56DE\u7684 agent_id\uFF09\u590D\u7528\u8BE5\u5B50 Agent \u5B8C\u6574\u5386\u53F2\u8BB0\u5FC6\uFF0C\u9002\u5408\u8FFD\u95EE/\u7EE7\u7EED\u672A\u5B8C\u4EFB\u52A1\u3002",
+          description: [
+            "\u5F02\u6B65\u6D3E\u751F\u62E5\u6709\u72EC\u7ACB\u6267\u884C\u73AF\u5883\u7684\u5B50 agent \u5904\u7406\u9694\u79BB\u5B50\u4EFB\u52A1\uFF1A\u8C03\u7528\u7ACB\u5373\u8FD4\u56DE agent_id\uFF0C\u4E0D\u7B49\u5F85\u5B8C\u6210\uFF1B\u5B50 agent \u5728\u540E\u53F0\u6267\u884C\uFF0C\u5B8C\u6210\u540E\u5176\u6C47\u62A5\u4F1A\u81EA\u52A8\u6CE8\u5165\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\u63A8\u8FDB\uFF08\u65E0\u9700\u8F6E\u8BE2\u3001\u65E0\u9700\u7B49\u5F85\uFF09\u3002",
+            "\u6D3E\u51FA\u540E\u4F60\u53EF\u7ACB\u5373\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1 / \u56DE\u590D\u7528\u6237\uFF1B\u5F53\u524D\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u53EF\u7B80\u77ED\u544A\u77E5\u5DF2\u59D4\u6D3E\u5E76\u7ED3\u675F\u672C\u8F6E\u2014\u2014\u6C47\u62A5\u9001\u8FBE\u65F6\u4F60\u4F1A\u88AB\u81EA\u52A8\u5524\u9192\u3002",
+            "name \u53EF\u6307\u5B9A\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u7CFB\u7EDF\u63D0\u793A\u8BCD\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF0C\u5957\u7528\u5176\u7CFB\u7EDF\u8BCD/\u5DE5\u5177\u767D\u540D\u5355/model\uFF09\uFF1B\u7F3A\u7701\u8D70\u901A\u7528\u6A21\u677F\u3002",
+            "\u7EED\u8DD1\uFF1A\u4F20 resume_session_id\uFF08\u6B64\u524D\u8FD4\u56DE\u7684 agent_id\uFF09\u590D\u7528\u8BE5\u5B50 Agent \u5B8C\u6574\u5386\u53F2\u8BB0\u5FC6\uFF0C\u9002\u5408\u8FFD\u95EE/\u7EE7\u7EED\u672A\u5B8C\u4EFB\u52A1\uFF08\u540C\u6837\u5F02\u6B65\uFF0C\u5B8C\u6210\u540E\u81EA\u52A8\u5524\u9192\uFF09\u3002"
+          ].join("\n"),
           parameters: {
             type: "object",
             properties: {
@@ -6114,30 +6422,29 @@ var init_agent = __esm({
             required: ["task"]
           },
           safetyLevel: "safe" /* SAFE */,
-          isSync: true,
-          async execute(args, ctx) {
-            if (!ctx) return toolFailure("[\u6D3E\u751F\u5931\u8D25]\uFF1Aspawn_agent \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
-            const res = await runSubagent(
+          isSync: false,
+          async *execute(args, ctx) {
+            if (!ctx) {
+              yield toolFailure("[\u6D3E\u751F\u5931\u8D25]\uFF1Aspawn_agent \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+              return;
+            }
+            const prep = await prepareSubagent(
               { task: args.task, name: args.name, role: args.role, resumeSessionId: args.resume_session_id },
               ctx,
               getGlobalTools
             );
-            if (!res.ok) return asToolFailure(res.output);
-            return [
-              `\u{1F389} [\u5B50 Agent \u6267\u884C\u5B8C\u6BD5${args.resume_session_id ? "\xB7\u7EED\u8DD1" : ""}] \u6D3E\u751F\u5B50\u4EFB\u52A1\u6C47\u62A5\u5982\u4E0B\uFF1A
-`,
-              `\u{1F194} agent_id: ${res.sessionId}
-\uFF08\u9700\u8981\u7EE7\u7EED\u8BE5\u5B50 Agent \u7684\u4EFB\u52A1\u6216\u8FFD\u95EE\u65F6\uFF0C\u8C03\u7528 spawn_agent \u4F20 resume_session_id=${res.sessionId}\uFF0C\u5176\u5386\u53F2\u8BB0\u5FC6\u5B8C\u6574\u4FDD\u7559\uFF09
-`,
-              `==================================================
-`,
-              res.output,
-              `
-==================================================
-`,
-              `\u{1F6A8}\u3010\u91CD\u8981\u540C\u6B65\u901A\u77E5\u3011: \u8BE5\u5B50 Agent \u521A\u624D\u6781\u6709\u53EF\u80FD\u5DF2\u7ECF\u9AD8\u9891\u4FEE\u6539\u3001\u521B\u5EFA\u6216\u5220\u9664\u4E86\u4F60\u7BA1\u8F96\u533A\u5185\u7684\u672C\u5730\u6E90\u7801\u6587\u4EF6\u3002`,
-              `\u5982\u679C\u4F60\uFF08\u7236\u7EA7Agent\uFF09\u63A5\u4E0B\u6765\u9700\u8981\u5BF9\u6587\u4EF6\u7CFB\u7EDF\u7EE7\u7EED\u5B9E\u65BD edit_file\u3001write_file \u6216\u9A8C\u8BC1\uFF0C\u3010\u4F60\u5FC5\u987B\u3011\u9996\u5148\u8C03\u7528 read_file \u6216 list_dir \u91CD\u65B0\u8BFB\u53D6\u6700\u65B0\u78C1\u76D8\u72B6\u6001\uFF0C\u7981\u6B62\u76F2\u76EE\u4F9D\u8D56\u4F60\u4E4B\u524D\u7684\u8BB0\u5FC6\u7F13\u5B58\uFF0C\u5426\u5219\u5FC5\u7136\u4F1A\u5F15\u53D1\u552F\u4E00\u6027\u51B2\u7A81\u5339\u914D\u5931\u8D25\uFF01`
-            ].join("");
+            if (!prep.ok) {
+              yield asToolFailure(prep.error);
+              return;
+            }
+            const agentId = prep.prepared.subSessionId;
+            yield [
+              `\u2705 \u5B50\u4EE3\u7406\u5DF2\u5F02\u6B65\u542F\u52A8 \u{1F194} ${agentId}${prep.prepared.manifest ? `\uFF08\u58F0\u660E\u5F0F=${prep.prepared.manifest.name}\uFF09` : ""}`,
+              `\u4EFB\u52A1\u6458\u8981\uFF1A${prep.prepared.taskBrief}${args.task.length > 60 ? "\u2026" : ""}`,
+              `\u5B83\u5B8C\u6210\u540E\u6C47\u62A5\u4F1A\u81EA\u52A8\u9001\u8FBE\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\uFF1B\u671F\u95F4\u65E0\u9700\u7B49\u5F85\u2014\u2014\u53EF\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1\uFF0C\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u7B80\u77ED\u544A\u77E5\u7528\u6237\u5373\u53EF\u6536\u5C3E\u672C\u8F6E\u3002`,
+              `\uFF08\u8FFD\u95EE/\u7EED\u8DD1\uFF1Aspawn_agent \u4F20 resume_session_id="${agentId}"\uFF0C\u5176\u5386\u53F2\u8BB0\u5FC6\u5B8C\u6574\u4FDD\u7559\u3002\uFF09`
+            ].join("\n");
+            await runPreparedSubagent(prep.prepared, ctx, { notifyDone: true });
           }
         }
       }
@@ -6370,6 +6677,7 @@ var init_workflow = __esm({
     init_config();
     init_guard();
     init_manager();
+    init_agentWake();
     init_workflowHelpers();
     createWorkflowTools = (getGlobalTools) => [
       {
@@ -6377,7 +6685,8 @@ var init_workflow = __esm({
         function: {
           name: "run_workflow",
           description: [
-            "\u591A\u5B50 agent \u7F16\u6392\uFF1A\u628A\u53EF\u5206\u89E3\u7684\u5927\u4EFB\u52A1\u6D3E\u7ED9\u591A\u4E2A\u72EC\u7ACB\u5B50 agent\u3002parallel\uFF08\u9ED8\u8BA4\uFF09=\u5404\u6B65\u9AA4\u5E76\u53D1\u6267\u884C\u3001\u7ED3\u679C\u6309\u5E8F\u805A\u5408\uFF0C\u9002\u5408\u4E92\u76F8\u72EC\u7ACB\u7684\u53EA\u8BFB/\u5206\u6790\u4EFB\u52A1\uFF1Bpipeline=\u6B65\u9AA4\u4E32\u884C\uFF0C\u524D\u9636\u6BB5\u4EA7\u51FA\u81EA\u52A8\u4F5C\u4E3A\u540E\u9636\u6BB5\u8F93\u5165\uFF0C\u9002\u5408\u5206\u9636\u6BB5\u52A0\u5DE5\uFF08\u62BD\u53D6\u2192\u5F52\u7C7B\u2192\u6C47\u603B\uFF09\u3002",
+            "\u5F02\u6B65\u591A\u5B50 agent \u7F16\u6392\uFF1A\u628A\u53EF\u5206\u89E3\u7684\u5927\u4EFB\u52A1\u6D3E\u7ED9\u591A\u4E2A\u72EC\u7ACB\u5B50 agent\uFF0C\u8C03\u7528\u7ACB\u5373\u8FD4\u56DE\uFF08\u4E0D\u7B49\u5F85\u5B8C\u6210\uFF09\uFF0C\u5168\u90E8\u6B65\u9AA4\u7ED3\u675F\u540E\u4E00\u6761\u7EC8\u6001\u6C47\u603B\u81EA\u52A8\u6CE8\u5165\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\u63A8\u8FDB\uFF08\u4E2D\u95F4\u6001\u4E0D\u56DE\u6D41\uFF0C\u9632\u4E8B\u4EF6\u6D2A\u5CF0\uFF09\u3002parallel\uFF08\u9ED8\u8BA4\uFF09=\u5404\u6B65\u9AA4\u5E76\u53D1\u6267\u884C\u3001\u7ED3\u679C\u6309\u5E8F\u805A\u5408\uFF0C\u9002\u5408\u4E92\u76F8\u72EC\u7ACB\u7684\u53EA\u8BFB/\u5206\u6790\u4EFB\u52A1\uFF1Bpipeline=\u6B65\u9AA4\u4E32\u884C\uFF0C\u524D\u9636\u6BB5\u4EA7\u51FA\u81EA\u52A8\u4F5C\u4E3A\u540E\u9636\u6BB5\u8F93\u5165\uFF0C\u9002\u5408\u5206\u9636\u6BB5\u52A0\u5DE5\uFF08\u62BD\u53D6\u2192\u5F52\u7C7B\u2192\u6C47\u603B\uFF09\u3002",
+            "\u6D3E\u51FA\u540E\u4F60\u53EF\u7ACB\u5373\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1 / \u56DE\u590D\u7528\u6237\uFF1B\u5F53\u524D\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u53EF\u7B80\u77ED\u544A\u77E5\u5DF2\u7F16\u6392\u5E76\u7ED3\u675F\u672C\u8F6E\u2014\u2014\u6C47\u603B\u9001\u8FBE\u65F6\u4F60\u4F1A\u88AB\u81EA\u52A8\u5524\u9192\u3002",
             '\u6B65\u9AA4\u53EF\u7528 name \u5957\u7528\u58F0\u660E\u5F0F\u5B50 Agent\uFF08\u89C1\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\uFF09\u3001key \u4F5C\u7ED3\u679C\u6807\u7B7E\u3002parallel \u9ED8\u8BA4\u5171\u4EAB\u5DE5\u4F5C\u533A\uFF0C\u4EC5\u9002\u5408\u5E76\u884C\u8BFB/\u5206\u6790\uFF1B\u5E76\u884C\u5199/\u8FC1\u79FB\u7528 isolation="worktree"\uFF08\u6BCF\u6B65\u72EC\u7ACB git worktree\uFF0C\u7ED3\u675F\u540E\u6536\u5272\u5404\u6B65 diff\uFF09\u3002',
             "\u4E0E spawn_agent \u7684\u5206\u5DE5\uFF1A\u5355\u4EFB\u52A1\u4E32\u884C\u59D4\u6D3E\u7528 spawn_agent\uFF1B\u4EFB\u52A1\u53EF\u5206\u89E3\u3001\u591A\u5206\u652F\u6216\u6D41\u6C34\u7EBF\u5F0F\u65F6\u7528\u672C\u5DE5\u5177\u3002"
           ].join("\n"),
@@ -6417,18 +6726,29 @@ var init_workflow = __esm({
             required: ["steps"]
           },
           safetyLevel: "safe" /* SAFE */,
-          isSync: true,
+          isSync: false,
           // 聚合输出整体兜底截断（各子 agent 结果已按 workflowPerStepChars 单独截断）。
+          // ★ 异步化后工具结果 = 首个 yield 的启动回执（天然短）；此上限改用于终态汇总的 inbox 报文截断。
           maxOutputCharacters: 18e3,
-          async execute(args, ctx) {
-            if (!ctx) return toolFailure("[\u5DE5\u4F5C\u6D41]\uFF1Arun_workflow \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+          // ★ 子代理异步化（方案 §4.4）：async* + 首个 yield 立即回执；全部步骤在 generator 挂起期间后台执行，
+          //   完成后一条终态汇总经 agentWake.notifySubagentDone 回流（中间态不回流，防事件洪峰）。
+          //   宿主中止时执行层 gen.return() 拦在 await 前 → 不产生中止后的唤醒（与 spawn_agent 同语义）。
+          async *execute(args, ctx) {
+            if (!ctx) {
+              yield toolFailure("[\u5DE5\u4F5C\u6D41]\uFF1Arun_workflow \u7F3A\u5C11\u5FC5\u987B\u7684\u667A\u80FD\u4F53\u8FD0\u884C\u4E0A\u4E0B\u6587\u3002");
+              return;
+            }
             const maxSteps = appConfig.workflowMaxSteps;
             const validationError = validateWorkflowArgs(args, maxSteps);
-            if (validationError) return validationError;
+            if (validationError) {
+              yield validationError;
+              return;
+            }
             const mode = args.mode === "pipeline" ? "pipeline" : "parallel";
             const isolation = args.isolation === "worktree" ? "worktree" : "none";
             if (isolation === "worktree" && mode === "pipeline") {
-              return toolFailure('[\u5DE5\u4F5C\u6D41]\uFF1Aisolation="worktree" \u6682\u4EC5\u652F\u6301 parallel \u6A21\u5F0F\uFF08pipeline \u4E32\u884C\u65E0\u9700\u9694\u79BB\uFF09\u3002\u8BF7\u6539 mode=parallel \u6216 isolation=none\u3002');
+              yield toolFailure('[\u5DE5\u4F5C\u6D41]\uFF1Aisolation="worktree" \u6682\u4EC5\u652F\u6301 parallel \u6A21\u5F0F\uFF08pipeline \u4E32\u884C\u65E0\u9700\u9694\u79BB\uFF09\u3002\u8BF7\u6539 mode=parallel \u6216 isolation=none\u3002');
+              return;
             }
             const steps = args.steps.map((s) => ({
               task: String(s.task),
@@ -6437,8 +6757,13 @@ var init_workflow = __esm({
               key: s.key ? String(s.key) : void 0
             }));
             if (ctx.depth >= MAX_AGENT_DEPTH) {
-              return toolFailure(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\uFF0C\u65E0\u6CD5\u6D3E\u751F\u5DE5\u4F5C\u6D41\u5B50 agent\u3002\u8BF7\u5728\u672C\u5C42\u7EA7\u81EA\u884C\u6D88\u5316\u4EFB\u52A1\u3002`);
+              yield toolFailure(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\uFF0C\u65E0\u6CD5\u6D3E\u751F\u5DE5\u4F5C\u6D41\u5B50 agent\u3002\u8BF7\u5728\u672C\u5C42\u7EA7\u81EA\u884C\u6D88\u5316\u4EFB\u52A1\u3002`);
+              return;
             }
+            yield [
+              `\u2705 \u5DE5\u4F5C\u6D41\u5DF2\u5F02\u6B65\u542F\u52A8\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65${isolation === "worktree" ? "\uFF0C\u6BCF\u6B65\u72EC\u7ACB git worktree \u9694\u79BB" : ""}\uFF09\u3002`,
+              `\u5168\u90E8\u6B65\u9AA4\u540E\u53F0\u6267\u884C\u5B8C\u6BD5\u540E\uFF0C\u4E00\u6761\u7EC8\u6001\u6C47\u603B\u4F1A\u81EA\u52A8\u9001\u8FBE\u672C\u4F1A\u8BDD\u5E76\u5524\u9192\u4F60\u7EE7\u7EED\uFF08\u4E2D\u95F4\u6001\u4E0D\u56DE\u6D41\uFF09\uFF1B\u671F\u95F4\u65E0\u9700\u7B49\u5F85\u2014\u2014\u53EF\u7EE7\u7EED\u6D3E\u6D3B / \u5904\u7406\u5176\u4ED6\u4E8B\u52A1\uFF0C\u65E0\u5176\u4ED6\u4E8B\u52A1\u65F6\u7B80\u77ED\u544A\u77E5\u7528\u6237\u5373\u53EF\u6536\u5C3E\u672C\u8F6E\u3002`
+            ].join("\n");
             const approvalMutex = createSemaphore(1);
             const serializedApproval = ctx.requestApproval ? async (...raArgs) => {
               await approvalMutex.acquire();
@@ -6521,9 +6846,25 @@ var init_workflow = __esm({
                 outcomes = await Promise.all(running);
               }
             } catch (err) {
-              return toolFailure(`[\u5DE5\u4F5C\u6D41\u7F16\u6392\u5F02\u5E38]\uFF1A${err?.message ?? err}`);
+              await notifySubagentDone(ctx.sessionId, [
+                `\u{1F916} [\u5DE5\u4F5C\u6D41\u5B8C\u6210]\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65\uFF09`,
+                `\u72B6\u6001\uFF1Aerror\uFF08\u7F16\u6392\u5F02\u5E38\uFF09`,
+                `\u6C47\u603B\uFF1A`,
+                `\u26A0\uFE0F [\u5DE5\u4F5C\u6D41\u7F16\u6392\u5F02\u5E38]\uFF1A${err?.message ?? err}`
+              ].join("\n"));
+              return;
             }
-            return formatWorkflowResult(mode, outcomes);
+            const allOk = outcomes.every((o) => o.ok);
+            const abortedCount = outcomes.filter((o) => !o.ok && o.output.includes("\u5DF2\u4E2D\u6B62")).length;
+            const status = abortedCount === outcomes.length ? "aborted" : allOk ? "final" : "error";
+            const statusLabel = status === "final" ? "final\uFF08\u5168\u90E8\u6B65\u9AA4\u6B63\u5E38\u5B8C\u6210\uFF09" : status === "aborted" ? "aborted\uFF08\u5168\u90E8\u6B65\u9AA4\u88AB\u4E2D\u6B62\uFF09" : "error\uFF08\u90E8\u5206\u6B65\u9AA4\u5931\u8D25/\u4E2D\u6B62\uFF09";
+            await notifySubagentDone(ctx.sessionId, [
+              `\u{1F916} [\u5DE5\u4F5C\u6D41\u5B8C\u6210]\uFF08mode=${mode}\uFF0C\u5171 ${steps.length} \u6B65\uFF09`,
+              `\u72B6\u6001\uFF1A${statusLabel}`,
+              `\u6C47\u603B\uFF1A`,
+              // 截断口径与原同步返回一致（maxOutputCharacters 18000）
+              truncateToolResult(formatWorkflowResult(mode, outcomes), 18e3)
+            ].join("\n"));
           }
         }
       }
@@ -10797,8 +11138,9 @@ var init_frontmatter = __esm({
 
 // ../core/src/memory/loader.ts
 import fs28 from "fs/promises";
+import os5 from "os";
 import path30 from "path";
-var GLOBAL_MEMORY_DIR, SOURCES, VALID_TYPES, parseMemoryAt, loadMemories, initMemories;
+var GLOBAL_MEMORY_DIR, SOURCES, VALID_TYPES, NAME_RE, parseMemoryAt, MAX_EXTERNAL_ITEMS, EXTERNAL_DESC_MAX_CHARS, EXTERNAL_BODY_MAX_BYTES, EXTERNAL_RULES, sanitizeExternalStem, extractExternalTitle, buildExternalDescription, truncateUtf8ToBytes, scanExternalRule, externalNoticeShown, loadExternalMemories, loadMemories, initMemories;
 var init_loader3 = __esm({
   "../core/src/memory/loader.ts"() {
     "use strict";
@@ -10812,6 +11154,7 @@ var init_loader3 = __esm({
       { dir: path30.join(process.cwd(), ".deepseeker-code", "memory"), source: "project" }
     ];
     VALID_TYPES = ["user", "feedback", "project", "reference"];
+    NAME_RE = /^[a-z0-9-]+$/;
     parseMemoryAt = async (file, _dir, source) => {
       let raw;
       try {
@@ -10830,7 +11173,7 @@ var init_loader3 = __esm({
         console.warn(`\u26A0\uFE0F [memory] \u7F3A\u5C11 name \u6216 description\uFF08${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
         return null;
       }
-      if (!/^[a-z0-9-]+$/.test(name)) {
+      if (!NAME_RE.test(name)) {
         console.warn(`\u26A0\uFE0F [memory] name "${name}" \u4E0D\u5408\u6CD5\uFF08\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
         return null;
       }
@@ -10845,6 +11188,128 @@ var init_loader3 = __esm({
       }
       return { name, description, type, body: parsed.body.trim(), source, file };
     };
+    MAX_EXTERNAL_ITEMS = 12;
+    EXTERNAL_DESC_MAX_CHARS = 120;
+    EXTERNAL_BODY_MAX_BYTES = 64 * 1024;
+    EXTERNAL_RULES = [
+      // 全局层（~ 下，存在才扫，缺省静默跳过）
+      { dir: path30.join(os5.homedir(), ".claude"), file: "CLAUDE.md", name: "ext-claude", projectLayer: false },
+      { dir: path30.join(os5.homedir(), ".codex"), file: "AGENTS.md", name: "ext-codex", projectLayer: false },
+      { dir: path30.join(os5.homedir(), ".gemini"), file: "GEMINI.md", name: "ext-gemini", projectLayer: false },
+      // 项目层（<cwd> 下）
+      { dir: process.cwd(), file: "CLAUDE.md", name: "ext-claude-project", projectLayer: true },
+      { dir: process.cwd(), file: "AGENTS.md", name: "ext-agents", projectLayer: true },
+      { dir: process.cwd(), file: "GEMINI.md", name: "ext-gemini-project", projectLayer: true },
+      { dir: path30.join(process.cwd(), ".cursor", "rules"), name: (stem) => `ext-cursor-${stem}`, projectLayer: true },
+      { dir: path30.join(process.cwd(), ".github"), file: "copilot-instructions.md", name: "ext-copilot", projectLayer: true }
+    ];
+    sanitizeExternalStem = (stem) => stem.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+    extractExternalTitle = (raw, fallbackStem) => {
+      const lines = raw.split(/\r?\n/);
+      for (const line of lines) {
+        const m = /^#\s+(.+)$/.exec(line);
+        if (m) return m[1].trim();
+      }
+      for (const line of lines) {
+        const t = line.trim();
+        if (t) return t.replace(/^#+\s*/, "") || fallbackStem;
+      }
+      return fallbackStem;
+    };
+    buildExternalDescription = (label, title) => {
+      const full = `[\u5916\u90E8:${label}] ${title.replace(/\s+/g, " ").trim()}`;
+      return full.length > EXTERNAL_DESC_MAX_CHARS ? full.slice(0, EXTERNAL_DESC_MAX_CHARS) : full;
+    };
+    truncateUtf8ToBytes = (text, maxBytes) => {
+      const buf = Buffer.from(text, "utf-8");
+      if (buf.length <= maxBytes) return { text, truncated: false };
+      return { text: buf.subarray(0, maxBytes).toString("utf-8"), truncated: true };
+    };
+    scanExternalRule = async (rule) => {
+      let entries;
+      try {
+        entries = await fs28.readdir(rule.dir, { withFileTypes: true });
+      } catch {
+        return [];
+      }
+      const out = [];
+      for (const entry of entries) {
+        if (!entry.isFile()) continue;
+        if (rule.file ? entry.name !== rule.file : !entry.name.endsWith(".md")) continue;
+        const stem = entry.name.replace(/\.md$/, "");
+        const file = path30.join(rule.dir, entry.name);
+        const name = typeof rule.name === "function" ? sanitizeExternalStem(stem) ? `ext-cursor-${sanitizeExternalStem(stem)}` : "" : rule.name;
+        if (!name || !NAME_RE.test(name)) {
+          console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6587\u4EF6\u540D\u4E3B\u5E72\u65E0\u6CD5\u751F\u6210\u5408\u6CD5\u8BB0\u5FC6\u540D\uFF08${file}\uFF09\uFF0C\u5DF2\u8DF3\u8FC7`);
+          continue;
+        }
+        let raw;
+        try {
+          raw = await fs28.readFile(file, "utf-8");
+        } catch {
+          continue;
+        }
+        const body = truncateUtf8ToBytes(raw.trim(), EXTERNAL_BODY_MAX_BYTES);
+        if (!body.text) continue;
+        if (body.truncated) console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6587\u4EF6\u8D85 ${EXTERNAL_BODY_MAX_BYTES} \u5B57\u8282\u5DF2\u622A\u65AD\uFF08${file}\uFF09`);
+        const stat = await fs28.stat(file).catch(() => null);
+        out.push({
+          item: {
+            name,
+            description: buildExternalDescription(rule.file ?? entry.name, extractExternalTitle(raw, stem)),
+            type: "reference",
+            // 外部二手资料的语义即参考（§4），不冒充 user/feedback 画像
+            body: body.text,
+            source: "external",
+            file
+          },
+          mtimeMs: stat?.mtimeMs ?? 0
+        });
+      }
+      return out;
+    };
+    externalNoticeShown = false;
+    loadExternalMemories = async (includeProject) => {
+      if (!appConfig.memoryExternal) return 0;
+      const candidates = [];
+      for (const rule of EXTERNAL_RULES) {
+        if (rule.projectLayer && !includeProject) continue;
+        candidates.push(...await scanExternalRule(rule));
+      }
+      if (candidates.length === 0) return 0;
+      const dropped = [];
+      if (candidates.length > MAX_EXTERNAL_ITEMS) {
+        candidates.sort((a, b) => b.mtimeMs - a.mtimeMs);
+        for (const c of candidates.slice(MAX_EXTERNAL_ITEMS)) dropped.push(c.item.name);
+        candidates.length = MAX_EXTERNAL_ITEMS;
+      }
+      const skipped = [];
+      for (const { item } of candidates) {
+        const all = listMemories();
+        if (all.length >= MEMORY_LIMITS.maxCount) {
+          skipped.push(item.name);
+          continue;
+        }
+        const curBytes = all.length === 0 ? 0 : Buffer.byteLength(all.map(memoryIndexLine).join("\n"), "utf-8");
+        if (curBytes + Buffer.byteLength(memoryIndexLine(item), "utf-8") > MEMORY_LIMITS.maxIndexBytes) {
+          skipped.push(item.name);
+          continue;
+        }
+        registerMemory(item);
+      }
+      if (dropped.length > 0) {
+        console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6761\u76EE\u8D85\u8F6F\u4E0A\u9650 ${MAX_EXTERNAL_ITEMS}\uFF0C\u6309 mtime \u4E22\u5F03\u6700\u65E7 ${dropped.length} \u6761\uFF1A${dropped.join("\u3001")}`);
+      }
+      if (skipped.length > 0) {
+        console.warn(`\u26A0\uFE0F [memory] \u5916\u90E8\u6761\u76EE\u8D85\u5171\u4EAB\u9884\u7B97\uFF08MEMORY_LIMITS\uFF1A${MEMORY_LIMITS.maxCount} \u6761/${MEMORY_LIMITS.maxIndexBytes} \u5B57\u8282\uFF09\uFF0C\u62D2\u8F7D\uFF1A${skipped.join("\u3001")}`);
+      }
+      const n = candidates.length - skipped.length;
+      if (n > 0 && !externalNoticeShown) {
+        externalNoticeShown = true;
+        console.log("\u{1F310} [memory] \u5916\u90E8\u8BB0\u5FC6\u5DF2\u63A5\u5165\uFF08\u53EA\u8BFB\uFF09\uFF1A\u6765\u6E90\u6587\u4EF6\u5185\u5BB9\u5C06\u968F\u8BF7\u6C42\u53D1\u9001\u7ED9 DeepSeek API\u3002\u5173\u95ED\uFF1Asettings.json engine.memoryExternal=false");
+      }
+      return n;
+    };
     loadMemories = async (includeProject) => {
       clearMemories();
       const picked = await scanSources(
@@ -10853,6 +11318,7 @@ var init_loader3 = __esm({
         parseMemoryAt
       );
       for (const { item } of picked) registerMemory(item);
+      await loadExternalMemories(includeProject);
       return listMemories().length;
     };
     initMemories = async (includeProject) => {
@@ -10900,7 +11366,7 @@ var init_usage = __esm({
 // ../core/src/tool/registry/memory.ts
 import fs30 from "fs/promises";
 import path32 from "path";
-var MAX_BODY_BYTES, MAX_DESCRIPTION_CHARS, MEMORY_LIMITS, NAME_RE, VALID_TYPES2, memoryFilePath, sanitizeLine, buildMemoryMd, writeAndRegister, indexLineBytes, memoryTools;
+var MAX_BODY_BYTES, MAX_DESCRIPTION_CHARS, NAME_RE2, VALID_TYPES2, memoryFilePath, sanitizeLine, buildMemoryMd, writeAndRegister, indexLineBytes, memoryTools;
 var init_memory = __esm({
   "../core/src/tool/registry/memory.ts"() {
     "use strict";
@@ -10911,8 +11377,7 @@ var init_memory = __esm({
     init_usage();
     MAX_BODY_BYTES = 64 * 1024;
     MAX_DESCRIPTION_CHARS = 200;
-    MEMORY_LIMITS = { maxCount: 200, maxIndexBytes: 16 * 1024 };
-    NAME_RE = /^[a-z0-9-]+$/;
+    NAME_RE2 = /^[a-z0-9-]+$/;
     VALID_TYPES2 = ["user", "feedback", "project", "reference"];
     memoryFilePath = (name, project) => project ? path32.join(process.cwd(), ".deepseeker-code", "memory", `${name}.md`) : path32.join(GLOBAL_MEMORY_DIR, `${name}.md`);
     sanitizeLine = (s) => String(s ?? "").replace(/[\r\n]+/g, " ").trim();
@@ -10975,7 +11440,8 @@ ${body.trim()}
             const body = typeof args?.body === "string" ? args.body : "";
             const type = sanitizeLine(args?.type) || "reference";
             const project = args?.project === true;
-            if (!NAME_RE.test(name)) return toolFailure(`[memory_save] name \u975E\u6CD5\uFF1A\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C\u6536\u5230 "${name}"\u3002`);
+            if (!NAME_RE2.test(name)) return toolFailure(`[memory_save] name \u975E\u6CD5\uFF1A\u4EC5\u5141\u8BB8\u5C0F\u5199\u5B57\u6BCD/\u6570\u5B57/\u8FDE\u5B57\u7B26\uFF0C\u6536\u5230 "${name}"\u3002`);
+            if (name.startsWith("ext-")) return toolFailure(`[memory_save] "ext-" \u540D\u79F0\u524D\u7F00\u4E3A\u5916\u90E8\u8BB0\u5FC6\u4FDD\u7559\u5B57\uFF08\u8BE5\u524D\u7F00\u6761\u76EE\u7531 loader \u4ECE\u5176\u4ED6 agent \u7684\u89C4\u5219/\u6307\u4EE4\u6587\u4EF6\u53EA\u8BFB\u6865\u63A5\uFF0C\u540D\u79F0\u56FA\u5B9A\u5206\u914D\uFF09\u3002\u8BF7\u6539\u7528\u5176\u4ED6\u540D\u79F0\u3002`);
             if (!description) return toolFailure("[memory_save] description \u4E0D\u80FD\u4E3A\u7A7A\u3002");
             if (description.length > MAX_DESCRIPTION_CHARS) return toolFailure(`[memory_save] description \u8D85\u8FC7 ${MAX_DESCRIPTION_CHARS} \u5B57\u7B26\u4E0A\u9650\uFF08\u5F53\u524D ${description.length}\uFF09\u3002\u8BF7\u538B\u7F29\u4E3A\u4E00\u53E5\u8BDD\u3002`);
             if (!body.trim()) return toolFailure("[memory_save] body \u4E0D\u80FD\u4E3A\u7A7A\u3002");
@@ -11002,7 +11468,7 @@ ${body.trim()}
         type: "function",
         function: {
           name: "memory_read",
-          description: "\u8BFB\u53D6\u6307\u5B9A\u8BB0\u5FC6\u7684\u5B8C\u6574\u6B63\u6587\u3002\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4EC5\u6CE8\u5165\u8BB0\u5FC6\u7D22\u5F15\uFF08\u4E00\u884C/\u6761\uFF0C\u7701 token\uFF09\uFF1B\u5F53\u7D22\u5F15\u4E2D\u67D0\u6761\u4E0E\u5F53\u524D\u4EFB\u52A1\u76F8\u5173\u3001\u9700\u8981\u5168\u6587\u7EC6\u8282\u65F6\uFF0C\u8C03\u7528\u672C\u5DE5\u5177\u6309\u9700\u53EC\u56DE\u3002",
+          description: "\u8BFB\u53D6\u6307\u5B9A\u8BB0\u5FC6\u7684\u5B8C\u6574\u6B63\u6587\u3002\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4EC5\u6CE8\u5165\u8BB0\u5FC6\u7D22\u5F15\uFF08\u4E00\u884C/\u6761\uFF0C\u7701 token\uFF09\uFF1B\u5F53\u7D22\u5F15\u4E2D\u67D0\u6761\u4E0E\u5F53\u524D\u4EFB\u52A1\u76F8\u5173\u3001\u9700\u8981\u5168\u6587\u7EC6\u8282\u65F6\uFF0C\u8C03\u7528\u672C\u5DE5\u5177\u6309\u9700\u53EC\u56DE\u3002\u7D22\u5F15\u4E2D\u6807 [\u5916\u90E8:*] \u7684\u6761\u76EE\u662F\u5176\u4ED6 agent \u89C4\u5219\u6587\u4EF6\u7684\u4E8C\u624B\u6458\u5F55\uFF08type=reference\uFF09\uFF1A\u4E0E\u73B0\u573A\u5B9E\u9645\u4E0D\u7B26\u65F6\u4EE5\u73B0\u573A\u4E3A\u51C6\uFF0C\u5E76\u53EF memory_save \u4E00\u6761\u81EA\u6709\u8BB0\u5FC6\u7EA0\u504F\u3002",
           parameters: {
             type: "object",
             properties: {
@@ -11061,6 +11527,7 @@ ${lines.join("\n")}`;
           requireApproval: (args) => `\u5220\u9664\u6301\u4E45\u8BB0\u5FC6 **${sanitizeLine(args?.name)}**\uFF08\u8DE8\u4F1A\u8BDD\u751F\u6548\uFF0C\u5220\u9664\u540E\u4E0D\u53EF\u6062\u590D\uFF09`,
           async execute(args) {
             const name = sanitizeLine(args?.name);
+            if (name.startsWith("ext-")) return toolFailure(`[memory_delete] \u5916\u90E8\u6761\u76EE\u53EA\u8BFB\uFF0C\u8BF7\u5230\u6765\u6E90\u6587\u4EF6\u5904\u4FEE\u6539\uFF08ext- \u524D\u7F00\u6761\u76EE\u7531 loader \u4ECE\u5176\u4ED6 agent \u7684\u89C4\u5219/\u6307\u4EE4\u6587\u4EF6\u53EA\u8BFB\u6865\u63A5\uFF0C\u5220\u9664/\u4FEE\u6539\u8BF7\u76F4\u63A5\u7F16\u8F91\u6765\u6E90\u6587\u4EF6\u540E\u91CD\u542F\u8FDB\u7A0B\uFF09\u3002`);
             const m = getMemory(name);
             if (!m) return toolFailure(`\u672A\u627E\u5230\u8BB0\u5FC6\uFF1A${name}\uFF08\u53EF\u80FD\u5DF2\u88AB\u5220\u9664\uFF09\u3002`);
             try {
@@ -12189,7 +12656,7 @@ var init_toolExecution = __esm({
       const isForegroundCommand = isCommandTool && matchedTool.function.isSync !== false;
       const cmdIsScriptRunner = isCommandTool && isScriptRunnerCommand(typeof state.calledArgs?.command === "string" ? state.calledArgs.command : "");
       const argCwd = typeof state.calledArgs?.cwd === "string" ? state.calledArgs.cwd.trim() : "";
-      const samePath = (a, b) => {
+      const samePath2 = (a, b) => {
         try {
           const ra = path36.resolve(a), rb = path36.resolve(b);
           return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
@@ -12197,7 +12664,7 @@ var init_toolExecution = __esm({
           return false;
         }
       };
-      const scriptRunnerCwdDrift = cmdIsScriptRunner && argCwd !== "" && !samePath(argCwd, toolCtx.cwd ?? process.cwd());
+      const scriptRunnerCwdDrift = cmdIsScriptRunner && argCwd !== "" && !samePath2(argCwd, toolCtx.cwd ?? process.cwd());
       const scriptRunnerBlocked = cmdIsScriptRunner && (perm === null || scriptRunnerCwdDrift);
       if (scriptRunnerCwdDrift) needApproval = true;
       if (perm === null && needApproval && !state.denied && !scriptRunnerBlocked && isForegroundCommand && isReadOnlyCommand(typeof state.calledArgs?.command === "string" ? state.calledArgs.command : "")) {
@@ -12485,13 +12952,21 @@ var init_toolScheduling = __esm({
     scheduleToolCalls = async function* (assistantMessage, message, ctx) {
       const { sessionId, signal, rawTools } = ctx;
       let abortedDuringTools = false;
+      const degraded = [];
+      const markDegraded = (name) => {
+        if (!degraded.includes(name)) degraded.push(name);
+      };
+      const noteWrite = (ok, name) => {
+        if (!ok) markDegraded(name);
+      };
+      const degradedField = () => degraded.length > 0 ? { degraded: [...degraded] } : {};
       const pendingImages = [];
       const fillRestPlaceholders = async (fromIdx) => {
         const tcs2 = assistantMessage.tool_calls;
         for (let j = fromIdx + 1; j < tcs2.length; j++) {
           const ph = "\uFF08\u5DF2\u8DF3\u8FC7\uFF1A\u7EC8\u7ED3\u7C7B\u5DE5\u5177\u4E4B\u540E\u7684\u5E76\u884C\u8C03\u7528\u672A\u6267\u884C\uFF09";
           message.push({ role: "tool", tool_call_id: tcs2[j].id, content: ph });
-          await appendMessage({ sessionId, role: "tool", tool_call_id: tcs2[j].id, content: ph });
+          noteWrite(await appendMessage({ sessionId, role: "tool", tool_call_id: tcs2[j].id, content: ph }), "appendMessage(placeholder)");
         }
       };
       const parallelSafeToolsEnabled = appConfig.parallelSafeTools;
@@ -12530,7 +13005,7 @@ var init_toolScheduling = __esm({
           for (let j = idx; j < tcs.length; j++) {
             const ph = "\uFF08\u5DF2\u4E2D\u6B62\uFF0C\u672A\u6267\u884C\uFF09";
             message.push({ role: "tool", tool_call_id: tcs[j].id, content: ph });
-            await appendMessage({ sessionId, role: "tool", tool_call_id: tcs[j].id, content: ph });
+            noteWrite(await appendMessage({ sessionId, role: "tool", tool_call_id: tcs[j].id, content: ph }), "appendMessage(placeholder)");
           }
           break;
         }
@@ -12576,7 +13051,8 @@ var init_toolScheduling = __esm({
             if (oc.imageAttachments?.length) pendingImages.push(...oc.imageAttachments);
             if (oc.aborted) abortedDuringTools = true;
           }
-          await appendMessages(sessionId, batchEntries);
+          const batchWrite = await appendMessages(sessionId, batchEntries);
+          if (batchWrite.failed > 0) markDegraded("appendMessages(tool-results)");
           if (budget) {
             try {
               const tokensAfter = estimateTokens(message);
@@ -12610,22 +13086,22 @@ var init_toolScheduling = __esm({
           const oc = await processToolCall(tc, ctx);
           if (oc.terminal) {
             message.push({ role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel });
-            await appendMessage({ sessionId, role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel });
+            noteWrite(await appendMessage({ sessionId, role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel }), "appendMessage(tool-result)");
             await fillRestPlaceholders(idx);
             yield { type: "tool.end", toolCallId: oc.toolCallId, toolName: oc.calledName, result: oc.resultForUser, ok: oc.ok };
             if (oc.terminal.kind === "exit_plan_mode") {
               yield { type: "plan.proposed", plan: oc.terminal.plan || "" };
-              return { kind: "terminal", terminalText: oc.terminal.plan || oc.resultForUser };
+              return { kind: "terminal", terminalText: oc.terminal.plan || oc.resultForUser, ...degradedField() };
             } else if (oc.terminal.kind === "enter_plan_mode") {
               yield { type: "plan.enterRequested", reason: oc.terminal.reason || "" };
-              return { kind: "terminal", terminalText: oc.terminal.reason ? `\u{1F4CB} \u6A21\u578B\u8BF7\u6C42\u8FDB\u5165\u8BA1\u5212\u6A21\u5F0F\uFF1A${oc.terminal.reason}` : oc.resultForUser };
+              return { kind: "terminal", terminalText: oc.terminal.reason ? `\u{1F4CB} \u6A21\u578B\u8BF7\u6C42\u8FDB\u5165\u8BA1\u5212\u6A21\u5F0F\uFF1A${oc.terminal.reason}` : oc.resultForUser, ...degradedField() };
             } else {
-              return { kind: "terminal", terminalText: oc.resultForUser };
+              return { kind: "terminal", terminalText: oc.resultForUser, ...degradedField() };
             }
           }
           yield { type: "tool.end", toolCallId: oc.toolCallId, toolName: oc.calledName, result: oc.resultForUser, ok: oc.ok };
           message.push({ role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel });
-          await appendMessage({ sessionId, role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel });
+          noteWrite(await appendMessage({ sessionId, role: "tool", tool_call_id: oc.toolCallId, content: oc.resultForModel }), "appendMessage(tool-result)");
           if (oc.imageAttachments?.length) pendingImages.push(...oc.imageAttachments);
           if (oc.aborted) abortedDuringTools = true;
           idx++;
@@ -12634,17 +13110,17 @@ var init_toolScheduling = __esm({
       if (!abortedDuringTools && pendingImages.length > 0) {
         const parts = buildImageFollowUpParts(pendingImages);
         message.push({ role: "user", content: parts });
-        await appendMessage({ sessionId, role: "user", content: parts });
+        noteWrite(await appendMessage({ sessionId, role: "user", content: parts }), "appendMessage(image-followup)");
       }
-      if (abortedDuringTools) return { kind: "aborted" };
-      return { kind: "completed" };
+      if (abortedDuringTools) return { kind: "aborted", ...degradedField() };
+      return { kind: "completed", ...degradedField() };
     };
   }
 });
 
 // ../core/src/agent/streamInference.ts
 import { createHash as createHash2 } from "node:crypto";
-var sha1short, toolsFingerprintCache, RETRY_BACKOFF_CAP_MS, extractRetryAfterMs, withNudgeTail, streamInference;
+var sha1short, toolsFingerprintCache, buildPrefixFingerprint, RETRY_BACKOFF_CAP_MS, extractRetryAfterMs, withNudgeTail, streamInference;
 var init_streamInference = __esm({
   "../core/src/agent/streamInference.ts"() {
     "use strict";
@@ -12657,6 +13133,19 @@ var init_streamInference = __esm({
     init_createModel();
     sha1short = (s) => createHash2("sha1").update(s).digest("hex").slice(0, 10);
     toolsFingerprintCache = /* @__PURE__ */ new WeakMap();
+    buildPrefixFingerprint = (message, cleanedToolSchemas) => ({
+      toolsHash: (() => {
+        let h = toolsFingerprintCache.get(cleanedToolSchemas);
+        if (h === void 0) {
+          h = sha1short(JSON.stringify(cleanedToolSchemas));
+          toolsFingerprintCache.set(cleanedToolSchemas, h);
+        }
+        return h;
+      })(),
+      sysHash: sha1short(String(message[0]?.content ?? "")),
+      sumHash: sha1short(String(message[1]?.content ?? "")),
+      msgCount: message.length
+    });
     RETRY_BACKOFF_CAP_MS = 3e4;
     extractRetryAfterMs = (e) => {
       try {
@@ -12700,28 +13189,32 @@ var init_streamInference = __esm({
         keepRecentUnits,
         compactRatio,
         modelWindow,
-        toolsTokens = 0
+        toolsTokens = 0,
+        windowCheck
       } = ctx;
       let inferenceMessages = withNudgeTail(message, nudgeMsg);
       let assistantMessage = { role: "assistant", content: null };
       try {
-        const prefixFingerprint = {
-          toolsHash: (() => {
-            let h = toolsFingerprintCache.get(cleanedToolSchemas);
-            if (h === void 0) {
-              h = sha1short(JSON.stringify(cleanedToolSchemas));
-              toolsFingerprintCache.set(cleanedToolSchemas, h);
-            }
-            return h;
-          })(),
-          sysHash: sha1short(String(message[0]?.content ?? "")),
-          sumHash: sha1short(String(message[1]?.content ?? "")),
-          msgCount: message.length
-        };
+        const prefixFingerprint = buildPrefixFingerprint(message, cleanedToolSchemas);
+        const wc = windowCheck;
         events({
           sessionId,
           eventType: "llm.request",
-          metadata: { depth, decisionSource: userDecisionSource, ok: true, durationMs: performance.now() - startTime, round, model, ...prefixFingerprint },
+          metadata: {
+            depth,
+            decisionSource: userDecisionSource,
+            ok: true,
+            durationMs: performance.now() - startTime,
+            round,
+            model,
+            ...prefixFingerprint,
+            ...wc ? {
+              estReal: wc.estReal,
+              thresholdAtSend: wc.threshold,
+              correctionRatioUsed: wc.correctionRatio,
+              windowDecision: wc.decision
+            } : {}
+          },
           // ★ P2 口径：估算加上工具 schema 常数项（与 API 真实 prompt_tokens 同口径，trace 里 est/real 才可比）
           usage: { prompt_tokens: estimateTokens(inferenceMessages) + toolsTokens },
           payload: { input: msgText(message[message.length - 1].content) }
@@ -12769,6 +13262,16 @@ var init_streamInference = __esm({
                   break;
               }
             }
+            if (!signal?.aborted && !contentBuf && toolCallsBuf.size === 0 && !lastUsage && idleRetries < MAX_STREAM_RETRIES) {
+              idleRetries++;
+              if (reasoningBuf) yield { type: "text.reset" };
+              console.warn(`\u26A0\uFE0F \u6D41\u7A7A\u7ED3\u675F\uFF080 \u5185\u5BB9 0 usage\uFF0C\u7591\u4F3C\u670D\u52A1\u7AEF\u65AD\u6D41\uFF09\uFF0C\u7B2C ${idleRetries}/${MAX_STREAM_RETRIES} \u6B21\u91CD\u8BD5...`);
+              contentBuf = "";
+              reasoningBuf = "";
+              toolCallsBuf.clear();
+              lastUsage = void 0;
+              continue;
+            }
             break;
           } catch (streamErr) {
             if (signal?.aborted) throw streamErr;
@@ -12838,6 +13341,19 @@ var init_streamInference = __esm({
                 onUIEvent: ctx.onUIEvent,
                 onAuxUsage: ctx.onAuxUsage
               });
+              events({
+                sessionId,
+                eventType: "llm.contextDowngraded",
+                metadata: {
+                  depth,
+                  decisionSource: llmDecisionSource,
+                  ok: true,
+                  round,
+                  model,
+                  estReal: estimateTokens(withNudgeTail(message, nudgeMsg)) + (toolsTokens ?? 0)
+                },
+                payload: { output: streamErr instanceof Error ? streamErr.message : String(streamErr) }
+              });
               inferenceMessages = withNudgeTail(message, nudgeMsg);
               compactedThisRound = true;
               contentBuf = "";
@@ -12885,7 +13401,17 @@ var init_streamInference = __esm({
         events({
           sessionId,
           eventType: "llm.response",
-          metadata: { depth, decisionSource: llmDecisionSource, ok: true, durationMs: performance.now() - startTime, round, model },
+          // ★ emptyStream 标记：0 内容 0 usage 的退化完成（重试耗尽仍空）——修复前该形态记 ok:true
+          //   无任何异常痕迹（0d245bd0 取证时 trace 里完全看不出 round 13 是空流），此处如实回报。
+          metadata: {
+            depth,
+            decisionSource: llmDecisionSource,
+            ok: true,
+            durationMs: performance.now() - startTime,
+            round,
+            model,
+            ...!contentBuf && toolCallsBuf.size === 0 && !lastUsage ? { emptyStream: true } : {}
+          },
           usage: {
             prompt_tokens: lastUsage?.prompt_tokens,
             completion_tokens: lastUsage?.completion_tokens,
@@ -13186,7 +13712,7 @@ var init_prices = __esm({
         peak: { input: 9, output: 27, cacheHit: 0.3 }
       }
     };
-    PRICES_VERIFIED_AT = "2026-10-19";
+    PRICES_VERIFIED_AT = "2026-11-03";
     PRICES_STALE_DAYS = 30;
     pricesAgeDays = () => Math.max(0, Math.floor((Date.now() - Date.parse(`${PRICES_VERIFIED_AT}T00:00:00Z`)) / 864e5));
     isBeijingPeak = (ts2 = /* @__PURE__ */ new Date()) => {
@@ -13364,7 +13890,7 @@ var init_usageLog = __esm({
     ensuredDir = null;
     getUsageLogPath = (month) => path37.join(usageDir(), `usage-${month}.jsonl`);
     recordUsageRun = async (rec) => {
-      if (USAGE_DISABLED) return;
+      if (USAGE_DISABLED) return true;
       try {
         const full = { workspace: appConfig.userWorkspaceDir, ...rec };
         const month = (full.ts || (/* @__PURE__ */ new Date()).toISOString()).slice(0, 7);
@@ -13374,8 +13900,10 @@ var init_usageLog = __esm({
           ensuredDir = dir;
         }
         await fs34.appendFile(getUsageLogPath(month), JSON.stringify(full) + "\n", "utf-8");
+        return true;
       } catch (e) {
         console.warn("\u26A0\uFE0F [usageLog] \u4F7F\u7528\u65E5\u5FD7\u843D\u76D8\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u4E3B\u4E1A\u52A1\uFF09:", e instanceof Error ? e.message : e);
+        return false;
       }
     };
     USAGE_FILE_RE = /^usage-\d{4}-\d{2}\.jsonl$/;
@@ -13653,7 +14181,7 @@ async function evictOldestForSize2(targetBytes) {
   }
   return deleted;
 }
-var CLEANUP_INTERVAL_MS2, ACTIVE_GRACE_MS2, MAX_TRACE_FOLDER_BYTES, SIZE_RECLAIM_TARGET_RATIO2, SIZE_CLEANUP_COOLDOWN_MS2, workspaceTraceBytes, diskLastCleanupAt2, clockLoaded2, lastSizeCleanupAt2, cleanupInProgress2, TRACE_BATCH_LINES, TRACE_BATCH_MS, traceBuf, traceTimers, cleanupTriggerCount, needImmediateFlush, scheduleTraceTimer, flushTraceBuffer, ensureClockLoaded2, tracePayloadMaxChars, truncateTracePayload;
+var CLEANUP_INTERVAL_MS2, ACTIVE_GRACE_MS2, MAX_TRACE_FOLDER_BYTES, SIZE_RECLAIM_TARGET_RATIO2, SIZE_CLEANUP_COOLDOWN_MS2, workspaceTraceBytes, diskLastCleanupAt2, clockLoaded2, lastSizeCleanupAt2, cleanupInProgress2, TRACE_BATCH_LINES, TRACE_BATCH_MS, traceBuf, droppedBatches, traceTimers, cleanupTriggerCount, needImmediateFlush, scheduleTraceTimer, flushChains, runSerialized, flushTraceBuffer, ensureClockLoaded2, tracePayloadMaxChars, truncateTracePayload;
 var init_trace = __esm({
   "../core/src/observability/trace.ts"() {
     "use strict";
@@ -13673,6 +14201,7 @@ var init_trace = __esm({
     TRACE_BATCH_LINES = 50;
     TRACE_BATCH_MS = 200;
     traceBuf = /* @__PURE__ */ new Map();
+    droppedBatches = /* @__PURE__ */ new Map();
     traceTimers = /* @__PURE__ */ new Map();
     cleanupTriggerCount = 0;
     needImmediateFlush = (ev) => ev.metadata?.ok === false || ev.eventType === "user.aborted" || ev.eventType === "tool.repeat_break" || ev.eventType === "session.end";
@@ -13685,34 +14214,55 @@ var init_trace = __esm({
       t.unref?.();
       traceTimers.set(sessionId, t);
     };
+    flushChains = /* @__PURE__ */ new Map();
+    runSerialized = (id, fn) => {
+      const prev = flushChains.get(id) ?? Promise.resolve();
+      const next = prev.then(fn, fn);
+      flushChains.set(id, next.catch(() => void 0));
+      return next;
+    };
     flushTraceBuffer = async (sessionId) => {
-      const ids = sessionId !== void 0 ? [sessionId] : [...traceBuf.keys()];
+      const reportSticky = sessionId === void 0;
+      const ids = sessionId !== void 0 ? [sessionId] : [.../* @__PURE__ */ new Set([...traceBuf.keys(), ...droppedBatches.keys()])];
+      let failedSessions = 0;
       for (const id of ids) {
-        const arr = traceBuf.get(id);
-        if (!arr || arr.length === 0) {
-          traceBuf.delete(id);
-          continue;
-        }
-        traceBuf.set(id, []);
-        const timer = traceTimers.get(id);
-        if (timer) {
-          clearTimeout(timer);
-          traceTimers.delete(id);
-        }
-        try {
-          const joined = arr.join("");
-          const p = await getTraceStorePath(id);
-          await fs36.appendFile(p, joined, "utf-8");
-          if (workspaceTraceBytes < 0) {
-            workspaceTraceBytes = await getDirBytes(getTracePath());
+        const degraded = await runSerialized(id, async () => {
+          let bad = false;
+          if (reportSticky && droppedBatches.has(id)) {
+            droppedBatches.delete(id);
+            bad = true;
           }
-          workspaceTraceBytes += Buffer.byteLength(joined, "utf-8");
-          cleanupTriggerCount++;
-          void maybeCleanupAfterAppend(id);
-        } catch (error) {
-          console.warn("\u26A0\uFE0F [Trace] \u6279\u91CF\u843D\u76D8\u5931\u8D25\uFF0C\u4E22\u5F03\u8BE5\u6279\uFF08\u4E0D\u5F71\u54CD\u4E3B\u4E1A\u52A1\uFF09:", error);
-        }
+          const arr = traceBuf.get(id);
+          if (!arr || arr.length === 0) {
+            traceBuf.delete(id);
+            return bad;
+          }
+          traceBuf.set(id, []);
+          const timer = traceTimers.get(id);
+          if (timer) {
+            clearTimeout(timer);
+            traceTimers.delete(id);
+          }
+          try {
+            const joined = arr.join("");
+            const p = await getTraceStorePath(id);
+            await fs36.appendFile(p, joined, "utf-8");
+            if (workspaceTraceBytes < 0) {
+              workspaceTraceBytes = await getDirBytes(getTracePath());
+            }
+            workspaceTraceBytes += Buffer.byteLength(joined, "utf-8");
+            cleanupTriggerCount++;
+            void maybeCleanupAfterAppend(id);
+          } catch (error) {
+            bad = true;
+            if (!reportSticky) droppedBatches.set(id, (droppedBatches.get(id) ?? 0) + 1);
+            console.warn("\u26A0\uFE0F [Trace] \u6279\u91CF\u843D\u76D8\u5931\u8D25\uFF0C\u4E22\u5F03\u8BE5\u6279\uFF08\u4E0D\u5F71\u54CD\u4E3B\u4E1A\u52A1\uFF09:", error);
+          }
+          return bad;
+        });
+        if (degraded) failedSessions++;
       }
+      return failedSessions;
     };
     ensureClockLoaded2 = async () => {
       if (clockLoaded2) return;
@@ -13799,7 +14349,16 @@ async function* runAgent(message, options) {
   const inheritedBudgetCheck = options.budgetCheck ?? (depth === 0 ? ledger.overHardLimit : void 0);
   let planWriteRej = 0;
   const toolCounts = {};
-  await appendEvent(sessionId, { dscEvent: "run.start", runId, depth });
+  const degraded = [];
+  const markDegraded = (name) => {
+    if (!degraded.includes(name)) degraded.push(name);
+  };
+  try {
+    const ok = await appendEvent(sessionId, { dscEvent: "run.start", runId, depth });
+    if (!ok) markDegraded("appendEvent(run.start)");
+  } catch {
+    markDegraded("appendEvent(run.start)");
+  }
   try {
     while (true) {
       round++;
@@ -13843,13 +14402,20 @@ async function* runAgent(message, options) {
       }
       const inboxTexts = claimSessionInbox(sessionId);
       if (inboxTexts.length > 0) {
+        clearQueuedWake(sessionId);
         for (const t of inboxTexts) {
           message.push({ role: "user", content: t });
-          await appendMessage({ sessionId, role: "user", content: t });
+          try {
+            const ok = await appendMessage({ sessionId, role: "user", content: t });
+            if (!ok) markDegraded("appendMessage(user)");
+          } catch {
+            markDegraded("appendMessage(user)");
+          }
         }
         yield { type: "inbox.claimed", texts: inboxTexts };
       }
       yield { type: "round.start", round };
+      let lastWindowCheck;
       try {
         await ensureFitsWindow(
           {
@@ -13871,6 +14437,10 @@ async function* runAgent(message, options) {
             onUIEvent: (evt) => {
               if (evt.type === "compact.done") runCompactCount++;
               options.onUIEvent?.(evt);
+            },
+            // ★ M1：判定快照出口（含 noop；抛异常路径不回调——那轮推理本就不发生）
+            onWindowCheck: (check) => {
+              lastWindowCheck = check;
             }
           }
         );
@@ -13906,7 +14476,8 @@ async function* runAgent(message, options) {
         modelWindow,
         toolsTokens,
         onUIEvent: options.onUIEvent,
-        onAuxUsage: reportAuxUsage
+        onAuxUsage: reportAuxUsage,
+        windowCheck: lastWindowCheck
       });
       if (infResult.kind === "aborted") {
         yield { type: "final", text: infResult.partialText || lastContent || "\uFF08\u5DF2\u4E2D\u6B62\uFF09" };
@@ -13928,13 +14499,28 @@ async function* runAgent(message, options) {
       }
       ledger.addUsage(infResult.usage);
       const assistantMessage = infResult.assistantMessage;
-      message.push(assistantMessage);
-      await appendMessage({ ...assistantMessage, sessionId });
-      if (typeof assistantMessage.content === "string" && assistantMessage.content) {
-        lastContent = assistantMessage.content;
+      const emptyAssistant = !(typeof assistantMessage.content === "string" && assistantMessage.content.length > 0) && !(Array.isArray(assistantMessage.tool_calls) && assistantMessage.tool_calls.length > 0);
+      if (emptyAssistant) {
+        markDegraded("emptyAssistantSkip");
+      } else {
+        message.push(assistantMessage);
+        try {
+          const ok = await appendMessage({ ...assistantMessage, sessionId });
+          if (!ok) markDegraded("appendMessage(assistant)");
+        } catch {
+          markDegraded("appendMessage(assistant)");
+        }
+        if (typeof assistantMessage.content === "string" && assistantMessage.content) {
+          lastContent = assistantMessage.content;
+        }
       }
       if (!assistantMessage.tool_calls || assistantMessage.tool_calls.length === 0) {
-        await appendEvent(sessionId, { dscEvent: "round.end", runId, round, usage: infResult.usage });
+        try {
+          const ok = await appendEvent(sessionId, { dscEvent: "round.end", runId, round, usage: infResult.usage });
+          if (!ok) markDegraded("appendEvent(round.end)");
+        } catch {
+          markDegraded("appendEvent(round.end)");
+        }
         emitContextUsage();
         ledger.flushRelay();
         const finalText = (typeof assistantMessage.content === "string" ? assistantMessage.content : "") || "";
@@ -13955,7 +14541,12 @@ async function* runAgent(message, options) {
           const ph = "\uFF08\u91CD\u590D\u8C03\u7528\u7194\u65AD\uFF0C\u672A\u6267\u884C\uFF09";
           message.push({ role: "tool", tool_call_id: tc.id, content: ph });
         }
-        await appendMessages(sessionId, assistantMessage.tool_calls.map((tc) => ({ sessionId, role: "tool", tool_call_id: tc.id, content: "\uFF08\u91CD\u590D\u8C03\u7528\u7194\u65AD\uFF0C\u672A\u6267\u884C\uFF09" })));
+        try {
+          const phWrite = await appendMessages(sessionId, assistantMessage.tool_calls.map((tc) => ({ sessionId, role: "tool", tool_call_id: tc.id, content: "\uFF08\u91CD\u590D\u8C03\u7528\u7194\u65AD\uFF0C\u672A\u6267\u884C\uFF09" })));
+          if (phWrite.failed > 0) markDegraded("appendMessages(repeat-placeholder)");
+        } catch {
+          markDegraded("appendMessages(repeat-placeholder)");
+        }
         yield { type: "final", text: repeatVerdict.text };
         return;
       }
@@ -14006,6 +14597,7 @@ async function* runAgent(message, options) {
         batchBudgetChars: void 0
       };
       const scheduleResult = yield* scheduleToolCalls(assistantMessage, message, toolCallCtx);
+      if (scheduleResult.degraded) for (const name of scheduleResult.degraded) markDegraded(name);
       if (scheduleResult.kind === "aborted") {
         yield { type: "final", text: lastContent || "\uFF08\u5DF2\u4E2D\u6B62\uFF09" };
         return;
@@ -14014,7 +14606,12 @@ async function* runAgent(message, options) {
         yield { type: "final", text: scheduleResult.terminalText };
         return;
       }
-      await appendEvent(sessionId, { dscEvent: "round.end", runId, round, usage: infResult.usage });
+      try {
+        const ok = await appendEvent(sessionId, { dscEvent: "round.end", runId, round, usage: infResult.usage });
+        if (!ok) markDegraded("appendEvent(round.end)");
+      } catch {
+        markDegraded("appendEvent(round.end)");
+      }
       emitContextUsage();
       ledger.flushRelay();
       if (options.planMode && planWriteRej >= PLAN_REJECT_FORCE_AT) {
@@ -14036,20 +14633,26 @@ async function* runAgent(message, options) {
     return;
   } finally {
     try {
-      await flushLeftoverToTranscript(sessionId);
+      const flushResult = await flushLeftoverToTranscript(sessionId);
+      if (flushResult.failed > 0) markDegraded("flushLeftoverToTranscript");
     } catch {
+      markDegraded("flushLeftoverToTranscript");
     }
     try {
-      await appendEvent(sessionId, { dscEvent: "run.end", runId, stopReason: signal?.aborted ? "aborted" : stopReason, rounds: round, usage: ledger.usageSummary() });
+      const ok = await appendEvent(sessionId, { dscEvent: "run.end", runId, stopReason: signal?.aborted ? "aborted" : stopReason, rounds: round, usage: ledger.usageSummary() });
+      if (!ok) markDegraded("appendEvent(run.end)");
     } catch {
+      markDegraded("appendEvent(run.end)");
     }
     try {
-      await flushTraceBuffer();
+      const failedSessions = await flushTraceBuffer();
+      if (failedSessions > 0) markDegraded("flushTraceBuffer");
     } catch {
+      markDegraded("flushTraceBuffer");
     }
     try {
       const us = ledger.usageSummary();
-      void recordUsageRun({
+      const ok = await recordUsageRun({
         v: 1,
         ts: (/* @__PURE__ */ new Date()).toISOString(),
         sessionId,
@@ -14067,11 +14670,20 @@ async function* runAgent(message, options) {
         // costYuan/toolCostYuan/auxCostYuan（口径与舍入在 runLedger）
         tools: toolCounts
       });
+      if (!ok) markDegraded("recordUsageRun");
     } catch {
+      markDegraded("recordUsageRun");
     }
     try {
       ledger.flushRelay();
     } catch {
+      markDegraded("ledger.flushRelay");
+    }
+    try {
+      await updateCalibration(sessionId, effectiveModel, { calibRatio, lastRealPromptTokens, lastCachedTokens });
+    } catch (e) {
+      markDegraded("updateCalibration");
+      console.warn("\u26A0\uFE0F \u538B\u7F29\u6821\u51C6\u72B6\u6001\u843D\u76D8\u5931\u8D25\uFF08\u4E0B run \u6821\u51C6\u91CD\u96F6\uFF0C\u7F13\u5B58\u611F\u77E5\u538B\u7F29\u9000\u5316\u56DE\u7F3A\u7701 1.4\uFF09:", e instanceof Error ? e.message : e);
     }
     try {
       const us = ledger.usageSummary();
@@ -14087,22 +14699,24 @@ async function* runAgent(message, options) {
           ...ledger.receiptFields(),
           // costYuan(null=无价)/toolCostYuan/auxCostYuan/subCostYuan（口径与舍入在 runLedger）
           durationMs: Math.round(performance.now() - startTime),
-          budgetTruncated: budgetTruncated || void 0
+          budgetTruncated: budgetTruncated || void 0,
           // 预算截断标注（E2；undefined 自动省略）
+          degraded: degraded.length > 0 ? [...degraded] : void 0
+          // D5：结算单发出前已降级的旁路快照（边界=updateCalibration 之后、Stop hook 之前；undefined 自动省略）
         });
       }
     } catch {
+      markDegraded("run.receipt");
     }
     try {
       const reason = signal?.aborted ? "aborted" : stopReason;
       await dispatch("Stop", { sessionId, cwd, lastText: lastContent || "", reason });
     } catch (e) {
+      markDegraded("Stop-hook");
       console.warn("\u26A0\uFE0F Stop hook \u5916\u5C42\u515C\u5E95\uFF08dispatch \u5185\u90E8\u5BB9\u9519\u5931\u6548\uFF0C\u5C5E\u5F02\u5E38\u4FE1\u53F7\uFF09:", e instanceof Error ? e.message : e);
     }
-    try {
-      await updateCalibration(sessionId, effectiveModel, { calibRatio, lastRealPromptTokens, lastCachedTokens });
-    } catch (e) {
-      console.warn("\u26A0\uFE0F \u538B\u7F29\u6821\u51C6\u72B6\u6001\u843D\u76D8\u5931\u8D25\uFF08\u4E0B run \u6821\u51C6\u91CD\u96F6\uFF0C\u7F13\u5B58\u611F\u77E5\u538B\u7F29\u9000\u5316\u56DE\u7F3A\u7701 1.4\uFF09:", e instanceof Error ? e.message : e);
+    if (degraded.length > 0) {
+      console.warn(`\u26A0\uFE0F [run \u964D\u7EA7] ${degraded.length} \u9879\uFF08\u4E0D\u5F71\u54CD\u4E3B\u6D41\u7A0B\uFF1B\u5177\u4F53\u540E\u679C\u89C1\u7EC4\u4EF6\u540D\uFF09: ${degraded.join(", ")}`);
     }
   }
 }
@@ -14112,6 +14726,7 @@ var init_runAgent = __esm({
     "use strict";
     init_transcript();
     init_inbox();
+    init_agentWake();
     init_common();
     init_contextCore();
     init_contentParts();
@@ -14198,7 +14813,7 @@ var init_lineage = __esm({
 });
 
 // ../core/src/agent/subagent.ts
-var SUBAGENT_DENYLIST, filterToolsForSubagent, activeSubagents, failText, RESUME_NOTE, createProgressThrottler, runSubagent;
+var SUBAGENT_DENYLIST, filterToolsForSubagent, activeSubagents, failText, RESUME_NOTE, createProgressThrottler, prepareSubagent, runPreparedSubagent, runSubagent;
 var init_subagent = __esm({
   "../core/src/agent/subagent.ts"() {
     "use strict";
@@ -14211,6 +14826,7 @@ var init_subagent = __esm({
     init_registry4();
     init_hooks();
     init_lineage();
+    init_agentWake();
     SUBAGENT_DENYLIST = /* @__PURE__ */ new Set(["run_command", "delete_path", "run_in_background"]);
     filterToolsForSubagent = (allTools, manifest) => {
       if (manifest && manifest.tools.length > 0) {
@@ -14245,57 +14861,33 @@ var init_subagent = __esm({
         }
       };
     };
-    runSubagent = async (spec, ctx, getGlobalTools) => {
+    prepareSubagent = async (spec, ctx, getGlobalTools) => {
       const { task, name, role, resumeSessionId } = spec;
       const resuming = typeof resumeSessionId === "string" && resumeSessionId.length > 0;
       if (ctx.depth >= MAX_AGENT_DEPTH) {
-        return {
-          ok: false,
-          output: failText(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\u3002\u7981\u6B62\u7EE7\u7EED\u65E0\u9650\u5411\u4E0B\u5D4C\u5957\uFF0C\u8BF7\u7236\u5C42\u7EA7 Agent \u81EA\u884C\u6D88\u5316\u5F53\u524D\u4EFB\u52A1\u3002`),
-          sessionId: ""
-        };
+        return { ok: false, error: failText(`[\u5B89\u5168\u7194\u65AD]\uFF1A\u5DF2\u8FBE\u5230\u6700\u5927 Agent \u5D4C\u5957\u6DF1\u5EA6\uFF08${MAX_AGENT_DEPTH}\u5C42\uFF09\u3002\u7981\u6B62\u7EE7\u7EED\u65E0\u9650\u5411\u4E0B\u5D4C\u5957\uFF0C\u8BF7\u7236\u5C42\u7EA7 Agent \u81EA\u884C\u6D88\u5316\u5F53\u524D\u4EFB\u52A1\u3002`) };
       }
       if (resuming) {
         const target = resumeSessionId;
         if (!target.includes("__sub__")) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A${target} \u4E0D\u662F\u5B50 Agent \u4F1A\u8BDD ID\uFF08\u5E94\u5F62\u5982 <\u4F1A\u8BDD>__sub__<uuid>\uFF0C\u6765\u81EA\u6B64\u524D spawn_agent \u8FD4\u56DE\u7684 agent_id\uFF09\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A${target} \u4E0D\u662F\u5B50 Agent \u4F1A\u8BDD ID\uFF08\u5E94\u5F62\u5982 <\u4F1A\u8BDD>__sub__<uuid>\uFF0C\u6765\u81EA\u6B64\u524D spawn_agent \u8FD4\u56DE\u7684 agent_id\uFF09\u3002`) };
         }
         if (!ownerCanApprove(target, ctx.sessionId)) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u4E0D\u5C5E\u4E8E\u5F53\u524D\u4F1A\u8BDD\uFF08\u53CA\u5176 fork \u8840\u7F18\uFF09\uFF0C\u7981\u6B62\u8DE8\u4F1A\u8BDD\u590D\u6D3B\u3002\u8BF7\u6838\u5BF9 agent_id \u6216\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u4E0D\u5C5E\u4E8E\u5F53\u524D\u4F1A\u8BDD\uFF08\u53CA\u5176 fork \u8840\u7F18\uFF09\uFF0C\u7981\u6B62\u8DE8\u4F1A\u8BDD\u590D\u6D3B\u3002\u8BF7\u6838\u5BF9 agent_id \u6216\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`) };
         }
         if (activeSubagents.has(target)) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50 Agent ${target} \u6B63\u5728\u6267\u884C\u4E2D\uFF0C\u7981\u6B62\u5E76\u53D1\u7EED\u8DD1\u540C\u4E00\u5B50\u4F1A\u8BDD\uFF08\u4F1A\u4EA4\u53C9\u5199\u574F\u8F6C\u5F55\uFF09\u3002\u8BF7\u7B49\u5F85\u5176\u5B8C\u6210\u540E\u518D\u8BD5\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50 Agent ${target} \u6B63\u5728\u6267\u884C\u4E2D\uFF0C\u7981\u6B62\u5E76\u53D1\u7EED\u8DD1\u540C\u4E00\u5B50\u4F1A\u8BDD\uFF08\u4F1A\u4EA4\u53C9\u5199\u574F\u8F6C\u5F55\uFF09\u3002\u8BF7\u7B49\u5F85\u5176\u5B8C\u6210\u540E\u518D\u8BD5\u3002`) };
         }
         const existing = await readTranscriptLines(target);
         if (existing.length === 0) {
-          return {
-            ok: false,
-            output: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u7684\u8F6C\u5F55\u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A\uFF0C\u65E0\u6CD5\u7EED\u8DD1\u3002\u8BF7\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`),
-            sessionId: ""
-          };
+          return { ok: false, error: failText(`[\u7EED\u8DD1\u5931\u8D25]\uFF1A\u5B50\u4F1A\u8BDD ${target} \u7684\u8F6C\u5F55\u4E0D\u5B58\u5728\u6216\u4E3A\u7A7A\uFF0C\u65E0\u6CD5\u7EED\u8DD1\u3002\u8BF7\u6539\u7528\u65B0\u5EFA\u6D3E\u751F\u3002`) };
         }
       }
       const subSessionId = resuming ? resumeSessionId : `${ctx.sessionId}__sub__${createUUID()}`;
       const parentSystemPrompt = ctx.parentSystemPrompt || "";
       const manifest = name ? getAgent(name) : void 0;
       if (name && !manifest) {
-        return {
-          ok: false,
-          output: failText(`[\u6D3E\u751F\u5931\u8D25]\uFF1A\u672A\u627E\u5230\u58F0\u660E\u5F0F\u5B50 Agent "${name}"\u3002\u8BF7\u6838\u5BF9\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4E2D\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\u7684\u540D\u79F0\u62FC\u5199\u3002`),
-          sessionId: ""
-        };
+        return { ok: false, error: failText(`[\u6D3E\u751F\u5931\u8D25]\uFF1A\u672A\u627E\u5230\u58F0\u660E\u5F0F\u5B50 Agent "${name}"\u3002\u8BF7\u6838\u5BF9\u7CFB\u7EDF\u63D0\u793A\u8BCD\u4E2D\u3010\u53EF\u7528\u5B50 Agent \u76EE\u5F55\u3011\u7684\u540D\u79F0\u62FC\u5199\u3002`) };
       }
       const SUBAGENT_REPORT_REQ = `\u3010\u6C47\u62A5\u8981\u6C42\u3011\u6700\u7EC8\u6C47\u62A5\u63A7\u5236\u5728\u4E00\u5C4F\u5185\uFF1A\u5DF2\u5B8C\u6210/\u6539\u52A8\u70B9\uFF08\u6587\u4EF6\u8DEF\u5F84\uFF09/\u9A8C\u8BC1\u7ED3\u679C/\u672A\u5B8C\u6210\u9879\u3002\u4E0D\u8981\u590D\u8FF0\u8FC7\u7A0B\u4E0E\u5DE5\u5177\u8F93\u51FA\u2014\u2014\u7236\u7EA7\u53EF\u76F4\u63A5\u7ECF resume \u8FFD\u95EE\u7EC6\u8282\u3002`;
       const subSystem = manifest ? [
@@ -14327,8 +14919,15 @@ var init_subagent = __esm({
       const allTools = getGlobalTools();
       const toolSchemas = filterToolsForSubagent(allTools, manifest);
       console.log(`${resuming ? "\u{1F501} \u7EED\u8DD1" : "\u{1F423} \u6D3E\u751F"}\u5B50 Agent [\u6DF1\u5EA6: ${ctx.depth + 1}/${MAX_AGENT_DEPTH}][${subSessionId}]${manifest ? ` \u58F0\u660E\u5F0F=${manifest.name}` : ""} \u4EFB\u52A1: "${task.slice(0, 50)}..."`);
+      const startCtx = { sessionId: subSessionId, parentSessionId: ctx.sessionId, task, depth: ctx.depth + 1, name: manifest?.name, cwd: ctx.cwd };
+      return { ok: true, prepared: { subSessionId, resuming, manifest, subSystem, subTaskPrompt, toolSchemas, startCtx, taskBrief: task.slice(0, 60) } };
+    };
+    runPreparedSubagent = async (prepared, ctx, opts) => {
+      const { subSessionId, manifest, subTaskPrompt, subSystem, toolSchemas, startCtx } = prepared;
+      const manifestName = manifest?.name;
       activeSubagents.add(subSessionId);
-      ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "start", name: manifest?.name, depth: ctx.depth + 1 });
+      trackSubagentInFlight(ctx.sessionId, subSessionId);
+      ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "start", name: manifest?.name, depth: startCtx.depth });
       try {
         const subMessages = await buildContextMessages(subSessionId, { role: "user", content: subTaskPrompt }, subSystem, manifest?.model);
         await appendMessage({ sessionId: subSessionId, role: "user", content: subTaskPrompt });
@@ -14346,7 +14945,7 @@ var init_subagent = __esm({
           depth: ctx.depth + 1,
           keepRecentUnits: ctx.keepRecentUnits,
           compactRatio: ctx.compactRatio,
-          parentSystemPrompt,
+          parentSystemPrompt: ctx.parentSystemPrompt,
           events: ctx.events,
           onUIEvent: ctx.onUIEvent,
           // ★ 必须透传：否则子 agent 调用需审批工具时前端收不到弹窗，waitForUserApproval 永久挂起（死锁）
@@ -14365,14 +14964,13 @@ var init_subagent = __esm({
           budgetCheck: ctx.budgetCheck
           // ★ P1-5 预算熔断链式透传：子 runAgent 轮边界探测父预算，超支即收尾（不等烧完）
         };
-        const startCtx = { sessionId: subSessionId, parentSessionId: ctx.sessionId, task, depth: ctx.depth + 1, name: manifest?.name, cwd: ctx.cwd };
         await dispatch("SubagentStart", startCtx);
         let result;
         const progress = createProgressThrottler((line) => ctx.onUIEvent?.({ type: "subagent.progress", text: line, agentKey: subSessionId, name: manifest?.name }));
         try {
           for await (const e of runAgent(subMessages, subOptions)) {
             if (ctx.abortSignal?.aborted) {
-              result = { ok: false, output: failText(`[\u5B50Agent\u4E2D\u65AD]\uFF1A\u6267\u884C\u5DF2\u88AB\u7528\u6237\u4E3B\u52A8\u53D1\u8D77\u7684 AbortSignal \u5F3A\u884C\u7194\u65AD\u3002`), sessionId: subSessionId, manifestName: manifest?.name };
+              result = { ok: false, output: failText(`[\u5B50Agent\u4E2D\u65AD]\uFF1A\u6267\u884C\u5DF2\u88AB\u7528\u6237\u4E3B\u52A8\u53D1\u8D77\u7684 AbortSignal \u5F3A\u884C\u7194\u65AD\u3002`), sessionId: subSessionId, manifestName: manifest?.name, status: "aborted" };
               break;
             }
             if (e.type === "final") {
@@ -14386,10 +14984,10 @@ var init_subagent = __esm({
             if (!hasFinalResult || !subResult.trim()) {
               subResult = `\uFF08\u672A\u80FD\u83B7\u53D6\u5230\u7ED3\u6784\u5316 final \u56DE\u62A5\u3002\u8BF7\u68C0\u67E5\u8BE5\u5B50 Session [${subSessionId}] \u7684\u6267\u884C\u5386\u53F2\uFF09`;
             }
-            result = { ok: true, output: subResult, sessionId: subSessionId, manifestName: manifest?.name };
+            result = { ok: true, output: subResult, sessionId: subSessionId, manifestName: manifest?.name, status: "final" };
           }
         } catch (streamError) {
-          result = { ok: false, output: failText(`[\u5B50Agent\u5D29\u6E83]\uFF1A\u5B50 Agent \u5728\u8FED\u4EE3\u63A8\u7406\u4E3B\u5FAA\u73AF\u65F6\u906D\u9047\u5E95\u5C42\u5F02\u5E38: ${streamError.message}`), sessionId: subSessionId, manifestName: manifest?.name };
+          result = { ok: false, output: failText(`[\u5B50Agent\u5D29\u6E83]\uFF1A\u5B50 Agent \u5728\u8FED\u4EE3\u63A8\u7406\u4E3B\u5FAA\u73AF\u65F6\u906D\u9047\u5E95\u5C42\u5F02\u5E38: ${streamError.message}`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
         } finally {
           try {
             ctx.onUIEvent?.({ type: "subagent.progress", text: "", done: true, agentKey: subSessionId });
@@ -14399,13 +14997,27 @@ var init_subagent = __esm({
             await dispatch("SubagentStop", { ...startCtx, ok: result.ok, output: result.output.slice(0, 2e3) }).catch((e) => console.warn(`\u26A0\uFE0F SubagentStop hook \u5F02\u5E38\uFF08\u5DF2\u5FFD\u7565\uFF09: ${e?.message ?? e}`));
           }
         }
-        return result ?? { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: \u672A\u77E5\u9519\u8BEF`), sessionId: subSessionId, manifestName: manifest?.name };
+        if (opts?.notifyDone && result && result.status !== "aborted") {
+          try {
+            await notifySubagentDone(ctx.sessionId, buildSubagentDoneReport(subSessionId, prepared.taskBrief, { status: result.status, output: result.output }));
+          } catch {
+          }
+        }
+        return result ?? { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: \u672A\u77E5\u9519\u8BEF`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
       } catch (error) {
-        return { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: ${error.message}`), sessionId: subSessionId, manifestName: manifest?.name };
+        return { ok: false, output: failText(`[\u6D3E\u751F\u6267\u884C\u5931\u8D25]: ${error.message}`), sessionId: subSessionId, manifestName: manifest?.name, status: "error" };
       } finally {
         activeSubagents.delete(subSessionId);
-        ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "stop", name: manifest?.name, depth: ctx.depth + 1 });
+        releaseSubagentInFlight(ctx.sessionId, subSessionId);
+        ctx.onUIEvent?.({ type: "subagent.count", running: activeSubagents.size, phase: "stop", name: manifestName, depth: startCtx.depth });
+      }
+    };
+    runSubagent = async (spec, ctx, getGlobalTools) => {
+      const prep = await prepareSubagent(spec, ctx, getGlobalTools);
+      if (!prep.ok) {
+        return { ok: false, output: prep.error, sessionId: "", status: "error" };
       }
+      return runPreparedSubagent(prep.prepared, ctx);
     };
   }
 });
@@ -15461,7 +16073,7 @@ var init_expand = __esm({
 // ../core/src/serve/chatProcessing.ts
 import path48 from "path";
 import fs46 from "fs";
-var handleUnifiedChat;
+var handleUnifiedChat, handleUnifiedChatRun;
 var init_chatProcessing = __esm({
   "../core/src/serve/chatProcessing.ts"() {
     "use strict";
@@ -15481,8 +16093,34 @@ var init_chatProcessing = __esm({
     init_guard();
     init_systemPrompt();
     init_model();
+    init_agentWake();
+    init_inject5();
     handleUnifiedChat = async (inbound, sendOutbound, sseWrite, abortSignal, opts) => {
+      let busyKey = typeof inbound.sessionId === "string" && inbound.sessionId ? inbound.sessionId : "";
+      markRunStart(busyKey);
+      try {
+        await handleUnifiedChatRun(inbound, sendOutbound, sseWrite, abortSignal, opts, (resolved) => {
+          if (busyKey === resolved) return;
+          markRunStart(resolved);
+          if (busyKey) markRunEnd(busyKey);
+          busyKey = resolved;
+        });
+      } finally {
+        markRunEnd(busyKey);
+      }
+    };
+    handleUnifiedChatRun = async (inbound, sendOutbound, sseWrite, abortSignal, opts, transferBusy) => {
       const sessionId = await getOrCreateSessionId(inbound.sessionId);
+      transferBusy?.(sessionId);
+      registerWakeDriverIfAbsent(sessionId, async () => {
+        await handleUnifiedChat(
+          { ...inbound, sessionId, content: AGENT_DONE_SENTINEL, attachments: void 0 },
+          sendOutbound,
+          sseWrite,
+          abortSignal,
+          opts
+        );
+      });
       try {
         inbound.content = expandSlashCommand(inbound.content);
       } catch {
@@ -15624,6 +16262,7 @@ ${envLines.join("\n")}`;
       }
       await dispatch("SessionEnd", { sessionId, cwd: process.cwd() }).catch(() => {
       });
+      clearMemorySnapshot(sessionId);
       await emitTrace({
         sessionId,
         eventType: "session.end",
@@ -16162,6 +16801,7 @@ var init_useChatState = __esm({
     init_transcript();
     init_fork();
     init_inbox();
+    init_agentWake();
     init_contextCore();
     init_bashDirect();
     init_guard();
@@ -16632,6 +17272,17 @@ var init_useChatState = __esm({
           budgetYuan: budgetYuanRef.current
           // ★ 预算制运行（成本信任链第二环 E1）：/budget 设置，超限 soft nudge + 120% 硬截断
         };
+        registerWakeDriver(sid, async () => {
+          if (sessionIdRef.current !== sid) return;
+          const myGen = ++turnGenRef.current;
+          setBusy(true);
+          pushInfo("\u{1F916} \u5B50\u4EE3\u7406\u5B8C\u6210\uFF0C\u81EA\u52A8\u5524\u9192\u4E3B\u4F1A\u8BDD\u7EE7\u7EED\u2026");
+          try {
+            await runOnce(sid, AGENT_DONE_SENTINEL, false);
+          } finally {
+            if (turnGenRef.current === myGen) setBusy(false);
+          }
+        });
         try {
           await handleUnifiedChat(
             { sessionId: sid, content: body },
@@ -19164,15 +19815,595 @@ ${listText}`);
   }
 });
 
+// ../core/src/agent/stallDetector.ts
+import { execFile as execFile2 } from "child_process";
+var CHECK_INTERVAL_SEC, GRACE_MIN, R1_WINDOW_MIN, R1_MIN_HITS, R2_WINDOW_MIN, R2_MIN_CALLS, R2_MAX_DISTINCT_SIG, R3_SILENCE_MIN, R4_WINDOW_MIN, R4_COST_DIVISOR, R6_STALL_BAND, HEALTH_GROWTH_LINES, SERIES_CAP, LOCKFILE_RE, EDIT_TOOLS, READONLY_TOOLS, normPath2, samePath, sortKeysDeep, argsKeyOf, similarSigOf, editTargetOf, extractTargetPaths, parseNumstatNet, MIN, StallDetector;
+var init_stallDetector = __esm({
+  "../core/src/agent/stallDetector.ts"() {
+    "use strict";
+    CHECK_INTERVAL_SEC = 60;
+    GRACE_MIN = 5;
+    R1_WINDOW_MIN = 10;
+    R1_MIN_HITS = 3;
+    R2_WINDOW_MIN = 15;
+    R2_MIN_CALLS = 3;
+    R2_MAX_DISTINCT_SIG = 2;
+    R3_SILENCE_MIN = 5;
+    R4_WINDOW_MIN = 5;
+    R4_COST_DIVISOR = 4;
+    R6_STALL_BAND = 3;
+    HEALTH_GROWTH_LINES = 20;
+    SERIES_CAP = 64;
+    LOCKFILE_RE = /(^|\/)(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb|bun\.lock|composer\.lock|poetry\.lock|Cargo\.lock|go\.sum)$/i;
+    EDIT_TOOLS = /* @__PURE__ */ new Set(["edit_file", "create_file", "write_file", "move_file", "notebook_edit"]);
+    READONLY_TOOLS = /* @__PURE__ */ new Set([
+      "read_file",
+      "list_dir",
+      "glob",
+      "search_grep",
+      "read_image",
+      "read_docx",
+      "read_xlsx",
+      "read_project_guide",
+      "recall",
+      "get_git_diff",
+      "git_status",
+      "git_log",
+      "find_references",
+      "get_diagnostics",
+      "goto_definition",
+      "view_symbol_outline",
+      "web_search",
+      "web_fetch"
+    ]);
+    normPath2 = (p) => p.trim().replace(/\\/g, "/").replace(/^[A-Za-z]:/, "").replace(/^\.\/+/, "").replace(/\/+$/, "").toLowerCase();
+    samePath = (a, b) => a === b || a.endsWith("/" + b) || b.endsWith("/" + a);
+    sortKeysDeep = (v) => {
+      if (Array.isArray(v)) return v.map(sortKeysDeep);
+      if (v && typeof v === "object") {
+        const out = {};
+        for (const k of Object.keys(v).sort()) out[k] = sortKeysDeep(v[k]);
+        return out;
+      }
+      return v;
+    };
+    argsKeyOf = (args) => {
+      try {
+        return JSON.stringify(sortKeysDeep(args ?? {})).slice(0, 200);
+      } catch {
+        return String(args);
+      }
+    };
+    similarSigOf = (args) => {
+      let s;
+      try {
+        s = JSON.stringify(sortKeysDeep(args ?? {}));
+      } catch {
+        return String(args);
+      }
+      return s.replace(/\d+/g, "").replace(/\/[^/"]+(?=")/, "");
+    };
+    editTargetOf = (args) => normPath2(String(args?.path ?? args?.source ?? args?.destination ?? args?.file_path ?? ""));
+    extractTargetPaths = (text) => {
+      const out = /* @__PURE__ */ new Set();
+      for (const m of text.match(/(?:[A-Za-z]:)?[\w.\-一-鿿]+(?:[/\\][\w.\-一-鿿]+)+\.[A-Za-z0-9]{1,6}/g) ?? []) {
+        out.add(normPath2(m));
+      }
+      return out;
+    };
+    parseNumstatNet = (stdout) => {
+      let net = 0;
+      for (const line of stdout.split("\n")) {
+        const m = /^(\d+|-)\t(\d+|-)\t(.+)$/.exec(line.trim());
+        if (!m) continue;
+        if (LOCKFILE_RE.test(m[3])) continue;
+        net += (m[1] === "-" ? 0 : parseInt(m[1], 10)) + (m[2] === "-" ? 0 : parseInt(m[2], 10));
+      }
+      return net;
+    };
+    MIN = 6e4;
+    StallDetector = class {
+      constructor(opts) {
+        this.stopFn = null;
+        this.started = false;
+        this.stopped = false;
+        this.paused = false;
+        this.ticking = false;
+        /** 宽限期基准（豁免解除时重置——豁免期不该吃掉 agent 的起步宽限）。字段名与同名 getter 刻意区分
+         *  （tsconfig 为 set 语义，私有字段与只读 getter 同名会在字段初始化时炸 "only a getter"）。 */
+        this.activeAt = 0;
+        this.lastEventAt = 0;
+        /** 抑制窗截止（政策层经 setSuppressUntil 设置：batch=nudge 后宽限；影子=强命中去重）。 */
+        this.suppressUntil = 0;
+        this.roundNo = 0;
+        this.calls = [];
+        this.finalSeen = false;
+        /** R6 净变更行数时间序列（batch 基线 = setup 完成后首读；交互 run 首 tick 采样即基线）。 */
+        this.series = [];
+        /** R4 成本采样序列。 */
+        this.costSeries = [];
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        this.intervalMs = opts.intervalMs ?? CHECK_INTERVAL_SEC * 1e3;
+        this.targetPaths = extractTargetPaths(opts.targetText ?? "");
+        this.lastEventAt = this.now();
+      }
+      /** 启动旁观者心跳。判定在解除暂停前不会真正开始（batch setup 执行期挂 PAUSED）。 */
+      start() {
+        if (this.started || this.stopped) return;
+        this.started = true;
+        this.activeAt = this.now();
+        const schedule = this.opts.schedule ?? ((fn, ms) => {
+          const h = setInterval(fn, ms);
+          h.unref?.();
+          return () => clearInterval(h);
+        });
+        this.stopFn = schedule(() => void this.tick(), this.intervalMs);
+      }
+      stop() {
+        this.stopped = true;
+        this.stopFn?.();
+        this.stopFn = null;
+      }
+      /** 暂停判定（batch setup/accept 执行期；交互审批/提问挂起期）；解除时对齐事件时钟并重置起步宽限。 */
+      setPaused(p) {
+        if (p === this.paused || this.stopped) return;
+        this.paused = p;
+        if (!p) {
+          const t = this.now();
+          this.lastEventAt = Math.max(this.lastEventAt, t);
+          this.activeAt = t;
+        }
+      }
+      /** 抑制窗（政策层动作语义映射：batch nudge 后宽限 / 影子强命中 5 分钟去重）。 */
+      setSuppressUntil(t) {
+        this.suppressUntil = t;
+      }
+      /** R6 基线：batch 在 setup 完成后取首个读数（装依赖动 lockfile，故基线后置 + 排除 lockfile）。 */
+      async markBaseline() {
+        const s = await this.sampleDiffSafe();
+        this.series = s ? [{ ...s, t: this.now() }] : [];
+      }
+      /**
+       * 事件喂入口：tool.start/tool.end/round.start/text.delta/thinking.delta/final 全喂。
+       * 任何事件都刷新 lastEventAt（R3 断流的对面）；豁免期不喂不计时（resume 时对齐）。
+       * 白名单外的事件类型静默忽略（VSCode sink 混流 UIEvent，挂起交互事件天然无害）。
+       */
+      feed(evt) {
+        if (this.stopped || this.paused || !evt?.type) return;
+        const t = this.now();
+        this.lastEventAt = t;
+        if (evt.type === "round.start") {
+          this.roundNo = Number(evt.round) || this.roundNo;
+          return;
+        }
+        if (evt.type === "final") {
+          this.finalSeen = true;
+          return;
+        }
+        if (evt.type === "tool.start") {
+          const toolName = String(evt.toolName ?? "");
+          const args = evt.args ?? {};
+          let digest = "";
+          try {
+            digest = JSON.stringify(args);
+          } catch {
+            digest = String(args);
+          }
+          this.calls.push({
+            toolCallId: String(evt.toolCallId ?? ""),
+            toolName,
+            argsKey: argsKeyOf(args),
+            sig: similarSigOf(args),
+            isEdit: EDIT_TOOLS.has(toolName),
+            isReadonly: READONLY_TOOLS.has(toolName),
+            target: editTargetOf(args),
+            argsDigest: digest.slice(0, 120),
+            t,
+            round: this.roundNo
+          });
+          if (this.calls.length > 512) this.calls.splice(0, this.calls.length - 512);
+        }
+      }
+      /** 判定一步（测试可直接驱动；生产由 scheduler 每 tick 调）。自身异常绝不外泄。 */
+      async tick() {
+        if (!this.started || this.stopped || this.paused || this.ticking) return;
+        this.ticking = true;
+        try {
+          await this.evaluate();
+        } catch {
+        } finally {
+          this.ticking = false;
+        }
+      }
+      // —— 政策层访问器（拼 AUX 任务书 / 日志行用；不含动作语义） ——
+      get round() {
+        return this.roundNo;
+      }
+      get activeAtMs() {
+        return this.activeAt;
+      }
+      /** 最近一次 diff 采样（影子日志 netLines 字段；无采样返回 null）。 */
+      get lastNetSample() {
+        return this.series.length > 0 ? this.series[this.series.length - 1] : null;
+      }
+      /** 成本采样（不进序列——evaluate 每 tick 的采样才进，batch costLine 的即时读数与原实现同形）。 */
+      sampleCost() {
+        return this.sampleCostSafe();
+      }
+      /** 时间窗内调用记录（batch 轨迹拼装：只读合并计数、写入逐条）。 */
+      callsWithin(t, windowMs) {
+        return this.calls.filter((c) => t - c.t <= windowMs);
+      }
+      // —— 评估主体：产出 StallEvaluation 交政策层 ——
+      async evaluate() {
+        const t = this.now();
+        if (t - this.activeAt < GRACE_MIN * MIN) {
+          await this.opts.onEvaluation({ t, skipped: "grace-start", silenceMin: null, health: null, strong: [], weak: [] });
+          return;
+        }
+        if (t < this.suppressUntil) {
+          await this.opts.onEvaluation({ t, skipped: "suppressed", silenceMin: null, health: null, strong: [], weak: [] });
+          return;
+        }
+        const sample = await this.sampleDiffSafe();
+        if (sample) {
+          this.series.push({ ...sample, t });
+          if (this.series.length > SERIES_CAP) this.series.splice(0, this.series.length - SERIES_CAP);
+        }
+        const cost = await this.sampleCostSafe();
+        if (cost) {
+          this.costSeries.push({ costYuan: cost.costYuan, t });
+          if (this.costSeries.length > SERIES_CAP) this.costSeries.splice(0, this.costSeries.length - SERIES_CAP);
+        }
+        const silenceMs = t - this.lastEventAt;
+        if (silenceMs >= R3_SILENCE_MIN * MIN) {
+          await this.opts.onEvaluation({ t, skipped: null, silenceMin: silenceMs / MIN, health: null, strong: [], weak: [] });
+          return;
+        }
+        const health = this.healthCheck();
+        if (health) {
+          await this.opts.onEvaluation({ t, skipped: null, silenceMin: null, health, strong: [], weak: [] });
+          return;
+        }
+        const strong = [this.r1Check(t), this.r6Check()].filter((r) => r !== null);
+        const weak = [this.r2Check(t), this.r4Check(t), this.r5Check(t)].filter((r) => r !== null);
+        await this.opts.onEvaluation({ t, skipped: null, silenceMin: null, health: null, strong, weak });
+      }
+      // —— 规则实现 ——
+      /** R1 重复模式：同 (tool, 规范化 args) 窗口内 ≥3 次且跨轮（轮内重复 repeatBreaker 已管）。 */
+      r1Check(t) {
+        const groups = /* @__PURE__ */ new Map();
+        for (const c of this.calls) {
+          if (t - c.t > R1_WINDOW_MIN * MIN) continue;
+          const key = `${c.toolName} ${c.argsKey}`;
+          const g = groups.get(key) ?? { tool: c.toolName, n: 0, rounds: /* @__PURE__ */ new Set() };
+          g.n += 1;
+          g.rounds.add(c.round);
+          groups.set(key, g);
+        }
+        for (const g of groups.values()) {
+          if (g.n >= R1_MIN_HITS && g.rounds.size >= 2) {
+            return { rule: "R1", evidence: `\u8FD1 ${R1_WINDOW_MIN} \u5206\u949F ${g.tool} \u540C\u53C2\u6570\u8C03\u7528 ${g.n} \u6B21\uFF08\u8DE8 ${g.rounds.size} \u8F6E\uFF09` };
+          }
+        }
+        return null;
+      }
+      /** R2 只读空转（弱）：窗口内调用全只读且朴素规范化后变体 ≤2 种（args 持续变化=调研，防误伤）。 */
+      r2Check(t) {
+        const recent = this.calls.filter((c) => t - c.t <= R2_WINDOW_MIN * MIN);
+        if (recent.length < R2_MIN_CALLS || recent.some((c) => !c.isReadonly)) return null;
+        const sigs = new Set(recent.map((c) => c.sig));
+        if (sigs.size > R2_MAX_DISTINCT_SIG) return null;
+        return { rule: "R2", evidence: `\u8FD1 ${R2_WINDOW_MIN} \u5206\u949F ${recent.length} \u6B21\u8C03\u7528\u5168\u4E3A\u53EA\u8BFB\u4E14\u540C\u5F62\uFF08${sigs.size} \u79CD\u53D8\u4F53\uFF09` };
+      }
+      /** R4 烧钱无产出（弱）：窗口成本增量 > 预算 1/4 且期间零 edit、零 final。 */
+      r4Check(t) {
+        if (this.opts.budgetYuan === void 0) return null;
+        const win = this.costSeries.filter((s) => t - s.t <= R4_WINDOW_MIN * MIN);
+        if (win.length < 2) return null;
+        const first = win[0];
+        const last = win[win.length - 1];
+        if (first.costYuan == null || last.costYuan == null) return null;
+        const delta = last.costYuan - first.costYuan;
+        if (delta <= this.opts.budgetYuan / R4_COST_DIVISOR) return null;
+        if (this.calls.some((c) => c.isEdit && t - c.t <= R4_WINDOW_MIN * MIN) || this.finalSeen) return null;
+        return { rule: "R4", evidence: `\u8FD1 ${R4_WINDOW_MIN} \u5206\u949F\u82B1\u8D39 \xA5${delta.toFixed(4)}\uFF08> \u9884\u7B97 1/4\uFF09\uFF0C\u671F\u95F4\u96F6 edit \u96F6 final` };
+      }
+      /** R5 写入方向偏差（弱）：窗口内 edit 目标与任务目标集合全无交集；提取不到目标集合 → 整条关闭。 */
+      r5Check(t) {
+        if (this.targetPaths.size === 0) return null;
+        const edits = this.calls.filter((c) => c.isEdit && t - c.t <= R2_WINDOW_MIN * MIN);
+        if (edits.length === 0) return null;
+        const hit = edits.some((c) => c.target && [...this.targetPaths].some((p) => samePath(c.target, p)));
+        if (hit) return null;
+        return { rule: "R5", evidence: `\u8FD1 ${R2_WINDOW_MIN} \u5206\u949F ${edits.length} \u6B21 edit \u5168\u90E8\u843D\u5728\u4EFB\u52A1\u76EE\u6807\u8DEF\u5F84\u4E4B\u5916\uFF08\u5982 ${edits[0].target || "?"}\uFF09` };
+      }
+      /** R6 净进展停滞（强）：连续 2 窗口净变更 ≈0（±3 行）且同期 edit 调用 >0——写了又改、没沉淀。 */
+      r6Check() {
+        const s = this.series;
+        if (s.length < 3) return null;
+        const a = s[s.length - 3];
+        const b = s[s.length - 2];
+        const c = s[s.length - 1];
+        if (Math.abs(b.net - a.net) > R6_STALL_BAND || Math.abs(c.net - b.net) > R6_STALL_BAND) return null;
+        const edits = this.calls.filter((e) => e.isEdit && e.t >= a.t).length;
+        if (edits === 0) return null;
+        return { rule: "R6", evidence: `\u51C0\u53D8\u66F4 ${a.net}\u2192${b.net}\u2192${c.net} \u884C\uFF08\u8FDE\u7EED 2 \u7A97\u53E3 \xB1${R6_STALL_BAND} \u5185\uFF09\u671F\u95F4 ${edits} \u6B21 edit` };
+      }
+      /** 健康短路：净变更显著增长或新文件出现 → 直接 normal（R2/R4 弱信号的反证）。 */
+      healthCheck() {
+        const s = this.series;
+        if (s.length < 2) return null;
+        const prev = s[s.length - 2];
+        const last = s[s.length - 1];
+        if (last.newFiles.length > 0) return `\u65B0\u6587\u4EF6\u51FA\u73B0\uFF1A${last.newFiles.slice(0, 3).join("\u3001")}`;
+        const delta = last.net - prev.net;
+        if (delta > HEALTH_GROWTH_LINES) return `\u51C0\u53D8\u66F4\u589E\u957F +${delta} \u884C\uFF08> ${HEALTH_GROWTH_LINES}\uFF09`;
+        return null;
+      }
+      // —— 采样 ——
+      async sampleDiffSafe() {
+        if (this.opts.sampleDiff) return this.opts.sampleDiff();
+        try {
+          const run = (args) => new Promise((resolve, reject) => {
+            execFile2("git", ["-C", this.opts.worktreePath, ...args], { maxBuffer: 1024 * 1024 }, (err, stdout) => err ? reject(err) : resolve(String(stdout)));
+          });
+          const [numstat, others] = await Promise.all([
+            run(["diff", "--numstat", "HEAD"]),
+            run(["ls-files", "--others", "--exclude-standard"])
+          ]);
+          const newFiles = others.split("\n").map((s) => s.trim()).filter(Boolean);
+          return { net: parseNumstatNet(numstat), newFiles };
+        } catch {
+          return null;
+        }
+      }
+      async sampleCostSafe() {
+        if (!this.opts.getCost) return null;
+        try {
+          return await this.opts.getCost();
+        } catch {
+          return null;
+        }
+      }
+    };
+  }
+});
+
+// src/batchWatchdog.ts
+var MIN2, NUDGE_GRACE_MIN, FREEZE_MIN, KILL_STRIKES, AUX_TIMEOUT_MS, RETRY_MAX, NUDGE_1, NUDGE_2, RETRY_PREAMBLE, ADJUDICATE_PROMPT, parseVerdictJson, defaultAdjudicate, sharedBudgetYuan, BatchWatchdog, buildRetryTaskContent;
+var init_batchWatchdog = __esm({
+  "src/batchWatchdog.ts"() {
+    "use strict";
+    init_stallDetector();
+    MIN2 = 6e4;
+    NUDGE_GRACE_MIN = 5;
+    FREEZE_MIN = 5;
+    KILL_STRIKES = 3;
+    AUX_TIMEOUT_MS = 6e4;
+    RETRY_MAX = 3;
+    NUDGE_1 = (evidence) => `\u26A0\uFE0F [watchdog] ${evidence}\u3002\u82E5\u5728\u539F\u5730\u6253\u8F6C\u8BF7\u6362\u601D\u8DEF\u6216\u6536\u5C3E\uFF1B\u82E5\u5224\u65AD\u6709\u8BEF\u8BF7\u7EE7\u7EED\u5E76\u8BF4\u660E\u7406\u7531\u3002`;
+    NUDGE_2 = (clause) => `\u26D4 [watchdog] \u518D\u6B21\u5224\u5B9A\uFF1A${clause}\u3002\u8BF7\u7ACB\u5373\u505C\u6B62\u63A2\u7D22\uFF0C\u5728 2-3 \u8F6E\u5185\u6536\u5C3E\uFF1A\u603B\u7ED3\u5DF2\u5B8C\u6210 / \u672A\u5B8C\u6210 / \u5361\u70B9\u4E0E\u5EFA\u8BAE\uFF0C\u4F5C\u4E3A\u6700\u7EC8\u7B54\u590D\u3002`;
+    RETRY_PREAMBLE = (verdict, evidence, finalDigest) => `\u3010\u7CFB\u7EDF\u63D0\u793A\u3011\u4E0A\u6B21\u5C1D\u8BD5\u88AB watchdog \u7EC8\u6B62\uFF08\u5224\u5B9A ${verdict}\uFF1A${evidence}\uFF09\u3002\u4E0A\u8F6E\u6536\u5C3E\u524D\u4EA7\u51FA\u6458\u8981\uFF1A${finalDigest || "\uFF08\u65E0\uFF09"}\u3002\u8BF7\u6362\u601D\u8DEF\uFF0C\u52FF\u91CD\u590D\u4E0A\u6B21\u8DEF\u5F84\u3002
+
+---
+
+`;
+    ADJUDICATE_PROMPT = (args) => `\u4F60\u662F\u6279\u5904\u7406\u7F16\u7801\u4EFB\u52A1\u7684\u770B\u95E8\u72D7\u3002\u5224\u65AD\u4EFB\u52A1\u662F\u5426\u5728\u7A7A\u8F6C\uFF08idle\uFF1A\u53CD\u590D\u8BFB\u540C\u4E00\u6279\u6587\u4EF6/\u6362\u59FF\u52BF\u641C\u540C\u4E00\u4E1C\u897F\uFF09\u6216\u65B9\u5411\u504F\u79BB\uFF08offtrack\uFF1A\u5199\u5165\u843D\u70B9\u4E0E\u4EFB\u52A1\u76EE\u6807\u65E0\u5173\uFF09\uFF1B\u6B63\u5E38\u63A8\u8FDB\uFF08\u542B\u6B63\u5F53\u7684\u957F\u65F6\u95F4\u53EA\u8BFB\u8C03\u7814\uFF09\u5224 normal\u3002\u53EA\u8F93\u51FA\u4E25\u683C JSON\uFF1A{"verdict":"normal|idle|offtrack","evidence":"\u4E00\u53E5\u8BDD\u8BC1\u636E\uFF08\u5F15\u7528\u8F68\u8FF9\u4E2D\u7684\u5177\u4F53\u4E8B\u4EF6\uFF09"}
+
+[\u4EFB\u52A1\u76EE\u6807] ${args.title}
+\u9A8C\u6536\u547D\u4EE4\uFF1A${args.accept}
+[\u6D88\u8017] ${args.costLine}
+[\u89C4\u5219\u4FE1\u53F7]
+${args.rules}
+[\u6700\u8FD1\u8F68\u8FF9\uFF0810 \u5206\u949F\uFF09]
+${args.trajectory}`;
+    parseVerdictJson = (raw) => {
+      const m = /\{[\s\S]*\}/.exec(raw ?? "");
+      if (!m) return null;
+      try {
+        const j = JSON.parse(m[0]);
+        const v = String(j?.verdict ?? "").trim().toLowerCase();
+        if (v !== "normal" && v !== "idle" && v !== "offtrack") return null;
+        return { verdict: v, evidence: String(j?.evidence ?? "").trim() };
+      } catch {
+        return null;
+      }
+    };
+    defaultAdjudicate = async (prompt, signal) => {
+      const { chatWithModelWithSummary: chatWithModelWithSummary2 } = await Promise.resolve().then(() => (init_model(), model_exports));
+      const resp = await chatWithModelWithSummary2([{ role: "user", content: prompt }], [], { signal });
+      return resp?.choices?.[0]?.message?.content ?? "";
+    };
+    sharedBudgetYuan = (budgetYuan, spentYuan) => {
+      if (budgetYuan === void 0) return void 0;
+      return Math.max(0, Math.round((budgetYuan - (spentYuan ?? 0)) * 1e4) / 1e4);
+    };
+    BatchWatchdog = class {
+      constructor(opts) {
+        /** 连续非 normal 计数（normal 裁决/健康短路清零）。 */
+        this.streak = 0;
+        /** 收尾冻结窗口截止（nudge-2 后 FREEZE_MIN 分钟内动作冻结——采样/R3 照常，二层不调）。 */
+        this.freezeUntil = 0;
+        this.records = [];
+        this.killInfo = null;
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        this.detector = new StallDetector({
+          worktreePath: opts.worktreePath,
+          targetText: opts.targetText,
+          budgetYuan: opts.budgetYuan,
+          getCost: opts.getCost,
+          sampleDiff: opts.sampleDiff,
+          now: opts.now,
+          schedule: opts.schedule,
+          intervalMs: opts.intervalMs,
+          onEvaluation: (e) => this.consume(e)
+          // promise 会被 detector tick await（AUX 裁决 tick 内完成）
+        });
+      }
+      /** 启动旁观者心跳。判定在解除暂停前不会真正开始（setup 执行期挂 PAUSED，batch 方案 §4）。 */
+      start() {
+        this.detector.start();
+      }
+      stop() {
+        this.detector.stop();
+      }
+      /** 暂停判定（setup/accept 命令执行期豁免）；解除时对齐事件时钟并重置起步宽限。 */
+      setPaused(p) {
+        this.detector.setPaused(p);
+      }
+      /** R6 基线：setup 完成后取首个读数（装依赖动 lockfile，故基线后置 + 排除 lockfile）。 */
+      markBaseline() {
+        return this.detector.markBaseline();
+      }
+      feed(evt) {
+        this.detector.feed(evt);
+      }
+      /** 判定一步（测试可直接驱动；生产由 scheduler 每 tick 调）。自身异常绝不外泄。 */
+      async tick() {
+        return this.detector.tick();
+      }
+      /** 终止证据快照（runner 据此置 watchdog-killed 与重试前置锚）。 */
+      getKill() {
+        return this.killInfo;
+      }
+      /** 报告证据链快照（跨重试轮由 runner 聚合）。 */
+      snapshot() {
+        return { kill: this.killInfo, records: [...this.records], roundsAtKill: this.detector.round };
+      }
+      // —— 求值消费：StallEvaluation → batch 动作（与影子政策是同一结果的两种消费，方案 §3） ——
+      async consume(e) {
+        if (e.skipped) return;
+        if (e.silenceMin !== null) {
+          this.kill({ verdict: "stall", rule: "R3", evidence: `\u65AD\u6D41\uFF1A${R3_SILENCE_MIN} \u5206\u949F\u65E0\u4EFB\u4F55\u4E8B\u4EF6\uFF08agent \u53EF\u80FD\u5DF2\u5361\u6B7B\uFF09` });
+          return;
+        }
+        if (e.health) {
+          this.streak = 0;
+          this.records.push({ kind: "health", at: e.t, text: e.health });
+          return;
+        }
+        if (e.strong.length === 0) {
+          if (e.weak.length > 0) this.records.push({ kind: "suspicion", at: e.t, text: e.weak.map((r) => `${r.rule} ${r.evidence}`).join("\uFF1B") });
+          return;
+        }
+        if (e.t < this.freezeUntil) {
+          this.records.push({ kind: "suspicion", at: e.t, text: `\u6536\u5C3E\u51BB\u7ED3\u7A97\u53E3\u5185\uFF08nudge-2 \u540E ${FREEZE_MIN} \u5206\u949F\uFF09\uFF0C\u4EC5\u8BB0\u5F55\uFF1A${e.strong.map((r) => r.rule).join("+")}` });
+          return;
+        }
+        const verdict = await this.adjudicate(e);
+        if (verdict === null) {
+          this.records.push({ kind: "aux-fail", at: e.t });
+          return;
+        }
+        if (verdict.verdict === "normal") {
+          this.streak = 0;
+          this.records.push({ kind: "verdict", at: e.t, verdict: "normal", evidence: verdict.evidence });
+          return;
+        }
+        this.streak += 1;
+        this.records.push({ kind: "verdict", at: e.t, verdict: verdict.verdict, evidence: verdict.evidence });
+        if (this.streak >= KILL_STRIKES) {
+          this.kill({
+            verdict: verdict.verdict,
+            rule: e.strong.map((r) => r.rule).join("+"),
+            evidence: `${verdict.evidence}\uFF08\u8FDE\u7EED ${this.streak} \u6B21\u975E normal\uFF09`
+          });
+          return;
+        }
+        this.nudge(this.streak, verdict.verdict, verdict.evidence, e.t);
+      }
+      /** 二层裁决。返回 null = 调用失败/非法输出（降级 normal，绝不误杀）。 */
+      async adjudicate(e) {
+        const costLine = await this.costLine(e.t);
+        const prompt = ADJUDICATE_PROMPT({
+          title: this.opts.ticketTitle,
+          accept: this.opts.acceptCmd,
+          costLine,
+          rules: [
+            ...e.strong.map((r) => `${r.rule}\uFF08\u5F3A\uFF09\uFF1A${r.evidence}`),
+            ...e.weak.map((r) => `${r.rule}\uFF08\u5F31\uFF0C\u4EC5\u53C2\u8003\uFF09\uFF1A${r.evidence}`)
+          ].join("\n") || "\uFF08\u65E0\uFF09",
+          trajectory: this.trajectory(e.t)
+        });
+        try {
+          const raw = await (this.opts.auxAdjudicate ?? defaultAdjudicate)(prompt, this.auxSignal());
+          return parseVerdictJson(raw);
+        } catch {
+          return null;
+        }
+      }
+      /** AUX 调用信号：任务 abort 或 60s 超时，先到先停（对齐 classifyRisk 合并信号形态）。 */
+      auxSignal() {
+        const ac = new AbortController();
+        const timer = setTimeout(() => ac.abort(), AUX_TIMEOUT_MS);
+        timer.unref?.();
+        this.opts.ac.signal.addEventListener("abort", () => {
+          clearTimeout(timer);
+          ac.abort();
+        }, { once: true });
+        return ac.signal;
+      }
+      async costLine(t) {
+        const cost = await this.detector.sampleCost();
+        const mins = Math.round((t - this.detector.activeAtMs) / MIN2);
+        const rounds = cost?.rounds ?? this.detector.round;
+        const yuan = cost?.costYuan;
+        return `\u5DF2\u7528\u65F6 ${mins} \u5206\u949F \xB7 \u8F6E\u6570 ${rounds}` + (yuan != null ? ` \xB7 \u82B1\u8D39 \xA5${yuan.toFixed(4)}` : "");
+      }
+      /** 最近 10 分钟轨迹（二层任务书）：只读类按工具合并计数，写入类逐条带 args 摘要。 */
+      trajectory(t) {
+        const recent = this.detector.callsWithin(t, R1_WINDOW_MIN * MIN2);
+        if (recent.length === 0) return "\uFF08\u65E0\u5DE5\u5177\u8C03\u7528\uFF09";
+        const readonlyCounts = /* @__PURE__ */ new Map();
+        const lines = [];
+        for (const c of recent) {
+          if (!c.isReadonly) {
+            lines.push(`- ${c.toolName}${c.target ? ` \u2192 ${c.target}` : ""}\uFF08${c.argsDigest}\uFF09`);
+            continue;
+          }
+          readonlyCounts.set(c.toolName, (readonlyCounts.get(c.toolName) ?? 0) + 1);
+        }
+        for (const [tool, n] of readonlyCounts) lines.push(`- ${tool} \xD7${n}\uFF08\u53EA\u8BFB\uFF09`);
+        return lines.join("\n").slice(0, 2400);
+      }
+      nudge(streak, verdict, evidence, t) {
+        const text = streak === 1 ? NUDGE_1(evidence) : NUDGE_2(`${verdict}\uFF1A${evidence}`);
+        this.records.push({ kind: "nudge", at: t, level: streak, text });
+        this.detector.setSuppressUntil(t + NUDGE_GRACE_MIN * MIN2);
+        if (streak === 2) this.freezeUntil = t + FREEZE_MIN * MIN2;
+        try {
+          this.opts.onNudge(text);
+        } catch {
+        }
+      }
+      kill(info) {
+        if (this.killInfo) return;
+        this.killInfo = info;
+        this.records.push({ kind: "kill", at: this.now(), verdict: info.verdict, evidence: `${info.rule} ${info.evidence}` });
+        this.detector.stop();
+        try {
+          this.opts.onKill(new Error(`watchdog: ${info.verdict} \u2014 ${info.evidence}`), info);
+        } catch {
+        }
+      }
+    };
+    buildRetryTaskContent = (body, kill, finalText) => RETRY_PREAMBLE(kill.verdict, kill.evidence, finalText.trim().replace(/\s+/g, " ").slice(0, 400)) + body;
+  }
+});
+
 // src/batchRunner.ts
 var batchRunner_exports = {};
 __export(batchRunner_exports, {
+  buildReport: () => buildReport,
   parseWaitWindow: () => parseWaitWindow,
   runBatchQueue: () => runBatchQueue
 });
 import fs50 from "fs";
 import { spawn as spawn6 } from "child_process";
-var BATCH_EDIT_TOOLS, BATCH_DEFAULT_DENYLIST, ACCEPT_TIMEOUT_MIN, ACCEPT_TAIL_LINES, emit2, ts, runAcceptCommand, collectSessionCost, buildReport, runOneTask, parseWaitWindow, nowMinutes, sleep, waitUntilWindow, runBatchQueue;
+var BATCH_EDIT_TOOLS, BATCH_DEFAULT_DENYLIST, ACCEPT_TIMEOUT_MIN, ACCEPT_TAIL_LINES, emit2, ts, runAcceptCommand, collectSessionCost, buildWatchdogLines, buildReport, runOneTask, parseWaitWindow, nowMinutes, sleep, waitUntilWindow, runBatchQueue;
 var init_batchRunner = __esm({
   "src/batchRunner.ts"() {
     "use strict";
@@ -19189,6 +20420,9 @@ var init_batchRunner = __esm({
     init_queue();
     init_batchStrings();
     init_strings();
+    init_batchWatchdog();
+    init_inbox();
+    init_agentWake();
     BATCH_EDIT_TOOLS = /* @__PURE__ */ new Set(["edit_file", "create_file", "write_file", "move_file", "notebook_edit"]);
     BATCH_DEFAULT_DENYLIST = /* @__PURE__ */ new Set(["run_command", "delete_path", "run_in_background"]);
     ACCEPT_TIMEOUT_MIN = 10;
@@ -19258,6 +20492,33 @@ ${lines.slice(-ACCEPT_TAIL_LINES).join("\n")}` : text;
       if (c.costYuan === null) c.partialPrice = false;
       return c;
     };
+    buildWatchdogLines = (snaps, costYuan) => {
+      if (snaps.length === 0) return null;
+      const T = batchT(getLocale());
+      const render2 = (r) => {
+        switch (r.kind) {
+          case "suspicion":
+            return T.wdSuspicionRec(r.text ?? "");
+          case "verdict":
+            return T.wdVerdictRec(r.verdict ?? "", r.evidence ?? "");
+          case "nudge":
+            return T.wdNudgeRec(r.level ?? 0, r.text ?? "");
+          case "health":
+            return T.wdHealthRec(r.text ?? "");
+          case "aux-fail":
+            return T.wdAuxFailRec();
+          case "kill":
+            return T.wdKillRec(r.verdict ?? "", r.evidence ?? "");
+        }
+      };
+      const lines = [];
+      for (const snap of snaps) {
+        lines.push(...snap.records.map(render2));
+        if (snap.kill) lines.push(T.wdAtKillRec(snap.roundsAtKill, costYuan !== null ? costYuan.toFixed(4) : "-"));
+      }
+      if (snaps.length > 1) lines.push(T.wdRetryRec(snaps.length - 1));
+      return lines;
+    };
     buildReport = (args) => {
       const { id, ticket, status, budgetTruncated, cost, receipt, finalText, accept, deniedTools, diff, wt } = args;
       const T = batchT(getLocale());
@@ -19280,7 +20541,11 @@ ${T.statusEntry(`${T.statusLabel(status)}${budgetNote}`)}
 ${T.costEntry(T.costSummary(cost))}
 ${T.receiptEntry(receipt ? T.receiptLine(receipt) : T.noReceipt)}
 ${args.errorMessage ? T.errorEntry(args.errorMessage) : ""}
-${T.taskH}
+${args.watchdogLines?.length ? `${T.wdH}
+
+${args.watchdogLines.map(T.wdRecord).join("\n")}
+
+` : ""}${T.taskH}
 
 ${ticket.body}
 
@@ -19384,89 +20649,187 @@ ${parsed.error}`);
         emit2(`\u{1F4A5} [${task.id}] ${msg}`);
         return { status: "error", cost: cost2, budgetTruncated: false };
       }
-      setSessionWorktree(sessionId, wt);
-      if (t.setup) {
-        emit2(T.setupLine(t.setup));
-        const s = await runAcceptCommand(t.setup, wt.path);
-        if (s.code !== 0 || s.timedOut) {
-          const msg = `${T.setupFail(t.setup, s.code)}${s.timedOut ? T.acceptTimeoutSuffix : ""}
+      const watchdogEnabled = process.env.DEEP_SEEK_BATCH_WATCHDOG !== "0";
+      const wdSnapshots = [];
+      const maxRounds = 1 + Math.min(Math.max(0, Math.floor(t.retry ?? 0)), RETRY_MAX);
+      let content = t.body;
+      let roundBudget = t.budgetYuan;
+      let receipt;
+      let finalText = "";
+      let agentError;
+      let budgetTruncated = false;
+      let wdKill = null;
+      let status;
+      let accept = null;
+      for (let round = 1; ; round++) {
+        wdKill = null;
+        finalText = "";
+        receipt = void 0;
+        agentError = void 0;
+        let nudgeCount = 0;
+        const roundAc = new AbortController();
+        const wd = watchdogEnabled ? new BatchWatchdog({
+          sessionId,
+          ticketTitle: t.title,
+          acceptCmd: t.accept,
+          targetText: `${t.title}
+${t.body}
+${t.accept}${t.setup ? `
+${t.setup}` : ""}`,
+          ac: roundAc,
+          worktreePath: wt.path,
+          budgetYuan: roundBudget,
+          getCost: () => collectSessionCost(sessionId),
+          onNudge: (text) => {
+            nudgeCount++;
+            pushSessionInbox(sessionId, text);
+            emit2(T.wdNudgeNote(task.id, nudgeCount));
+          },
+          onKill: (err, info) => {
+            wdKill = info;
+            emit2(T.wdKillNote(task.id, `${info.verdict} \u2014 ${info.evidence}`));
+            roundAc.abort(err);
+          }
+        }) : null;
+        wd?.start();
+        wd?.setPaused(true);
+        if (round === 1 && t.setup) {
+          emit2(T.setupLine(t.setup));
+          const s = await runAcceptCommand(t.setup, wt.path);
+          if (s.code !== 0 || s.timedOut) {
+            wd?.stop();
+            const msg = `${T.setupFail(t.setup, s.code)}${s.timedOut ? T.acceptTimeoutSuffix : ""}
 
 \`\`\`
 ${s.output}
 \`\`\``;
-          await killBackgroundTasksUnder(wt.path).catch(() => {
-          });
-          const cost2 = await collectSessionCost(sessionId);
-          await finishTicket(task.id, buildReport({
-            id: task.id,
-            ticket: t,
-            status: "setup-failed",
-            budgetTruncated: false,
-            cost: cost2,
-            receipt: void 0,
-            finalText: "",
-            accept: null,
-            deniedTools: [],
-            diff: T.diffNone,
-            wt,
-            errorMessage: msg
-          }));
-          emit2(`\u{1F6E0}\uFE0F [${task.id}] ${T.setupFail(t.setup, s.code)}`);
-          return { status: "setup-failed", cost: cost2, budgetTruncated: false };
+            await killBackgroundTasksUnder(wt.path).catch(() => {
+            });
+            const cost2 = await collectSessionCost(sessionId);
+            await finishTicket(task.id, buildReport({
+              id: task.id,
+              ticket: t,
+              status: "setup-failed",
+              budgetTruncated: false,
+              cost: cost2,
+              receipt: void 0,
+              finalText: "",
+              accept: null,
+              deniedTools: [],
+              diff: T.diffNone,
+              wt,
+              errorMessage: msg
+            }));
+            emit2(`\u{1F6E0}\uFE0F [${task.id}] ${T.setupFail(t.setup, s.code)}`);
+            return { status: "setup-failed", cost: cost2, budgetTruncated: false };
+          }
         }
-      }
-      const ac = new AbortController();
-      const timer = setTimeout(() => ac.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
-      let receipt;
-      let finalText = "";
-      let agentError;
-      try {
-        await handleUnifiedChat(
-          { sessionId, content: t.body },
-          async () => {
-          },
-          (evt) => {
-            if (evt?.type === "text.delta") finalText += evt.text;
-            else if (evt?.type === "text.reset") finalText = "";
-            else if (evt?.type === "final") finalText = evt.text || finalText;
-            else if (evt?.type === "round.start") emit2(T.roundLine(ts(), evt.round));
-          },
-          ac.signal,
-          {
-            requestApproval: async (detail, meta) => {
-              if (allowApproval.has(meta.toolName)) return "allow-once";
-              deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
-              return "deny";
+        wd?.setPaused(false);
+        await wd?.markBaseline();
+        const timer = setTimeout(() => roundAc.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
+        setSessionWorktree(sessionId, wt);
+        registerWakeDriver(sessionId, async () => {
+          emit2(`\u{1F916} [${task.id}] \u5B50\u4EE3\u7406\u5B8C\u6210\uFF0C\u5524\u9192 run \u7EED\u8DD1\u2026`);
+          setSessionWorktree(sessionId, wt);
+          const wakeAc = new AbortController();
+          const wakeTimer = setTimeout(() => wakeAc.abort(new Error(T.timeoutAbort(timeoutMin))), timeoutMin * 6e4);
+          try {
+            await handleUnifiedChat(
+              { sessionId, content: AGENT_DONE_SENTINEL },
+              async () => {
+              },
+              (evt) => {
+                if (evt?.type === "text.delta") finalText += evt.text;
+                else if (evt?.type === "text.reset") finalText = "";
+                else if (evt?.type === "final") finalText = evt.text || finalText;
+              },
+              wakeAc.signal,
+              {
+                requestApproval: async (detail, meta) => {
+                  if (allowApproval.has(meta.toolName)) return "allow-once";
+                  deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
+                  return "deny";
+                },
+                onUIEvent: (evt) => {
+                  if (evt.type === "run.receipt") receipt = evt;
+                },
+                budgetYuan: roundBudget,
+                toolSchemas: gatedSchemas
+              }
+            );
+          } finally {
+            clearTimeout(wakeTimer);
+            clearSessionWorktree(sessionId);
+          }
+        });
+        try {
+          await handleUnifiedChat(
+            { sessionId, content },
+            async () => {
             },
-            onUIEvent: (evt) => {
-              if (evt.type === "run.receipt") receipt = evt;
+            (evt) => {
+              wd?.feed(evt);
+              if (evt?.type === "text.delta") finalText += evt.text;
+              else if (evt?.type === "text.reset") finalText = "";
+              else if (evt?.type === "final") finalText = evt.text || finalText;
+              else if (evt?.type === "round.start") emit2(T.roundLine(ts(), evt.round));
             },
-            budgetYuan: t.budgetYuan,
-            toolSchemas: gatedSchemas
+            roundAc.signal,
+            {
+              requestApproval: async (detail, meta) => {
+                if (allowApproval.has(meta.toolName)) return "allow-once";
+                deniedTools.push({ tool: meta.toolName, detail: detail.replace(/\n+/g, " ").slice(0, 140) });
+                return "deny";
+              },
+              onUIEvent: (evt) => {
+                if (evt.type === "run.receipt") receipt = evt;
+              },
+              budgetYuan: roundBudget,
+              toolSchemas: gatedSchemas
+            }
+          );
+        } catch (e) {
+          agentError = e instanceof Error ? e.message : String(e);
+        } finally {
+          clearTimeout(timer);
+          wd?.stop();
+          clearSessionWorktree(sessionId);
+        }
+        if (wd) wdSnapshots.push(wd.snapshot());
+        budgetTruncated = receipt?.budgetTruncated === true;
+        if (agentError) {
+          status = "error";
+          emit2(T.agentErrorLine(task.id, agentError));
+          break;
+        }
+        if (wdKill) {
+          const spent = await collectSessionCost(sessionId);
+          const nextBudget = sharedBudgetYuan(t.budgetYuan, spent.costYuan);
+          if (round < maxRounds && (nextBudget === void 0 || nextBudget > 0)) {
+            emit2(T.wdRetryNote(task.id, round + 1));
+            content = buildRetryTaskContent(t.body, wdKill, finalText);
+            roundBudget = nextBudget;
+            continue;
           }
-        );
-      } catch (e) {
-        agentError = e instanceof Error ? e.message : String(e);
-      } finally {
-        clearTimeout(timer);
-        clearSessionWorktree(sessionId);
-      }
-      const timedOut = ac.signal.aborted;
-      const budgetTruncated = receipt?.budgetTruncated === true;
-      let status;
-      let accept = null;
-      if (agentError) {
-        status = "error";
-        emit2(T.agentErrorLine(task.id, agentError));
-      } else if (timedOut) {
-        status = "timeout";
-        emit2(T.timeoutLine(task.id, timeoutMin));
-      } else {
+          if (round < maxRounds) emit2(T.wdBudgetStopNote(task.id));
+          status = "watchdog-killed";
+          break;
+        }
+        if (roundAc.signal.aborted) {
+          status = "timeout";
+          emit2(T.timeoutLine(task.id, timeoutMin));
+          break;
+        }
+        const quiet = await waitSessionQuiescent(sessionId, void 0, timeoutMin * 6e4);
+        if (!quiet) emit2(`\u23F3 [${task.id}] \u5524\u9192\u94FE\u672A\u5728\u65F6\u9650\u5185\u6536\u655B\uFF0C\u6309\u73B0\u72B6\u9A8C\u6536`);
+        wd?.setPaused(true);
         const r = await runAcceptCommand(t.accept, wt.path);
         accept = { cmd: t.accept, code: r.code, output: r.output, timedOut: r.timedOut };
         status = r.code === 0 && !r.timedOut ? "passed" : "accept-failed";
         emit2(T.acceptLine(status === "passed", task.id, r.code) + (r.timedOut ? T.acceptKilledSuffix : ""));
+        break;
       }
+      unregisterWakeDriver(sessionId);
       await killBackgroundTasksUnder(wt.path).catch(() => {
       });
       const diff = await harvestDiff(wt);
@@ -19483,7 +20846,8 @@ ${s.output}
         deniedTools,
         diff,
         wt,
-        errorMessage: agentError
+        errorMessage: agentError,
+        watchdogLines: buildWatchdogLines(wdSnapshots, cost.costYuan) ?? void 0
       }));
       emit2(`   ${T.statusLabel(status)} \xB7 ${T.costSummary(cost)}`);
       emit2(T.artifactLine(wt.path, wt.branch));
@@ -19621,7 +20985,7 @@ init_prefs();
 init_updateCheck();
 init_trust();
 import { render } from "ink";
-import os5 from "os";
+import os6 from "os";
 import path50 from "path";
 import { emitKeypressEvents } from "node:readline";
 import { jsx as jsx21 } from "react/jsx-runtime";
@@ -19771,7 +21135,7 @@ var main = async () => {
   process.stdout.write("\x1B[2J\x1B[3J\x1B[1;1H");
   const cwdIsHome = () => {
     try {
-      return path50.resolve(cwd).toLowerCase() === path50.resolve(os5.homedir()).toLowerCase();
+      return path50.resolve(cwd).toLowerCase() === path50.resolve(os6.homedir()).toLowerCase();
     } catch {
       return false;
     }